Snow1Nd

**Name of the Vulnerable Software and Affected Versions** LibreNMS versions 25.12.0 and below **Description** LibreNMS is a network monitoring tool. The application does not properly sanitize user input when processing IPv6 address searches in the `ajax table.php` endpoint. The `address` parameter is split into an address and a prefix, and the prefix is directly concatenated into an SQL query string without validation. This allows an attacker to inject arbitrary SQL commands, potentially leading to unauthorized data access or database manipulation. **Recommendations** Update to version 26.2.0 or later.

**Name of the Vulnerable Software and Affected Versions** Typesetter CMS versions up to and including 5.1 **Description** Typesetter CMS versions up to and including 5.1 have a reflected cross-site scripting (XSS) issue in the Editing component. The `images` parameter, submitted as `images[]` in a POST request, is reflected into an HTML href attribute without proper output encoding in include/tool/Editing.php. An authenticated attacker with editing privileges can use a JavaScript pseudo-protocol to execute arbitrary JavaScript in the victim’s browser session. **Recommendations** Versions prior to 5.1 should be used.

**Name of the Vulnerable Software and Affected Versions** Typesetter CMS versions up to and including 5.1 **Description** Typesetter CMS versions up to and including 5.1 have a reflected cross-site scripting (XSS) issue in the administrative interface within the Tools Status functionality. The path parameter is reflected into the HTML response without proper output encoding in the `include/admin/Tools/Status.php` file. An authenticated attacker can inject crafted input containing HTML or JavaScript, leading to arbitrary script execution within the context of an authenticated user’s browser session. **Recommendations** Versions prior to 5.1 should be used.

**Name of the Vulnerable Software and Affected Versions** Typesetter CMS versions up to and including 5.1 **Description** Typesetter CMS versions up to and including 5.1 have a reflected cross-site scripting (XSS) issue in the administrative interface, specifically within the Tools Status move message handling. The vulnerability occurs because a path parameter is reflected into the HTML output without proper output encoding in the `include/admin/Tools/Status.php` file. An authenticated attacker can inject crafted input containing HTML or JavaScript, leading to arbitrary script execution within the browser session of an authenticated user. **Recommendations** Versions prior to 5.1 are recommended.

**Name of the Vulnerable Software and Affected Versions** Pimcore versions prior to 12.3.1 Pimcore versions prior to 11.5.14 **Description** Pimcore is an Open Source Data & Experience Management Platform. An incomplete SQL injection patch in the Admin Search Find API allows an authenticated attacker to perform blind SQL injection. The initial patch attempted to mitigate SQL injection by removing SQL comments and catching syntax errors, but this fix was insufficient as attackers can still inject SQL payloads that do not rely on comments and infer database information via blind techniques. This affects the admin interface and can lead to database information disclosure. The vulnerable API endpoint is `/admin/search/find`. The vulnerability is exploitable through crafted SQL payloads submitted to the API. **Recommendations** Update Pimcore to version 12.3.1 or later. Update Pimcore to version 11.5.14 or later.