Nilesh Sapariya

**Name of the Vulnerable Software and Affected Versions** Cayin SMP-PRO4 devices (affected versions not specified) **Description** A security issue allows a user to discover a saved password by viewing the URL after a Connection String Test. The password is visible in the `webpass` parameter of a "media folder.cgi?apply mode=ping server" URI, specifically the `/media folder.cgi` API endpoint with the `apply mode` parameter set to `ping server`. **Recommendations** For Cayin SMP-PRO4 devices, as a temporary workaround, consider restricting access to the `/media folder.cgi` API endpoint with the `apply mode` parameter set to `ping server` until a patch is available. Avoid using the `webpass` parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cayin SMP-PRO4 (affected versions not specified) **Description** An issue was discovered that allows reflected XSS on Cayin SMP-PRO4 devices through the "image preview.html" endpoint with the `filename` parameter. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Open-AudIT Professional version 2.1 **Description** An issue allows injecting a malicious payload in the `redirect url` parameter to the "/login" URI, triggering an open redirect. A "data:text/html;base64," payload can be used with JavaScript code. **Recommendations** For Open-AudIT Professional version 2.1, consider restricting access to the `/login` URI or validating the `redirect url` parameter to prevent malicious injections until a patch is available. As a temporary workaround, avoid using the `redirect url` parameter in the affected API endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Open-AudIT Professional version 2.1 **Description** The issue is related to a crafted src attribute of an `IMG` element within a URI, which can lead to XSS. **Recommendations** For Open-AudIT Professional version 2.1, consider validating and sanitizing all user-inputted data, especially for the `src` attribute of `IMG` elements, to prevent XSS attacks. As a temporary workaround, restrict the ability to input custom `src` attributes for `IMG` elements until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Open-AudIT Professional version 2.1 **Description** The issue allows for Cross-Site Request Forgery (CSRF) attacks, which can be used to modify user accounts or inject XSS sequences. This can be achieved by manipulating the credentials URI. **Recommendations** For Open-AudIT Professional version 2.1, consider implementing CSRF protection mechanisms to prevent unauthorized modifications to user accounts and injection of XSS sequences. As a temporary workaround, restrict access to the credentials URI to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Open-AudIT Professional version 2.1 **Description** The issue allows for cross-site scripting (XSS) attacks via the `Name` or `Description` field on the Credentials screen. **Recommendations** For Open-AudIT Professional version 2.1, update to a version that includes a fix for this issue, as using the `Name` or `Description` field on the Credentials screen can lead to XSS attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.