Sajjadbnd

Across DR-810 contains an unauthenticated file disclosure vulnerability that allows remote attackers to download the rom-0 backup file containing sensitive information by sending a simple GET request. Attackers can access the rom-0 endpoint without authentication to retrieve and decompress the backup file, exposing router passwords and other sensitive configuration data.

Heatmiser Wifi Thermostat 1.7 contains a cross-site request forgery vulnerability that allows attackers to change administrator credentials by tricking authenticated users into submitting malicious requests. Attackers can craft HTML forms targeting the networkSetup.htm endpoint with parameters usnm, usps, and cfps to modify the admin username and password without user consent.

**Name of the Vulnerable Software and Affected Versions** NextVPN version 4.10 **Description** Insecure file permissions allow local users to modify executable files with full access rights. This can lead to the replacement of system executables with malicious files, enabling an attacker to gain SYSTEM or Administrator privileges through unauthorized file modification. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Product Key Explorer version 4.2.0.0 **Description** The software contains a flaw that allows local attackers to cause a denial of service by crashing the application. This occurs due to a buffer overflow in the registration name input field. An attacker can create a specially crafted text file containing repeated characters. Pasting this file into the registration name field triggers the overflow, leading to an application crash. The vulnerable input field is the registration name field. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** AnyDesk version 5.4.0 **Description** AnyDesk 5.4.0 has an issue with an unquoted service path in its Windows service configuration. This could allow local attackers to inject malicious executables. Exploiting the unquoted binary path enables attackers to place malicious files in service executable locations, potentially leading to elevated system privileges. **Recommendations** Update to a newer version of AnyDesk that addresses the unquoted service path issue.