Terrynini

**Name of the Vulnerable Software and Affected Versions** Windows Compressed Folder (affected versions not specified) **Description** The issue is related to incorrect external management of a file's name or path in Windows operating systems. This can allow a remote attacker to gain unauthorized access to modify the contents of compressed folders. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** libarchive (affected versions not specified) **Description** The vulnerability is related to a heap-based buffer overflow in the libarchive library, which can allow remote attackers to execute arbitrary code. This issue is associated with a buffer operation exceeding memory boundaries. The estimated number of potentially affected devices worldwide is not provided. There is no information about real-world incidents where this issue was exploited. Technical details about exploitation include a heap-based buffer overflow in the `run filters` function. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Compressed Folder (affected versions not specified) **Description** The issue is related to insufficient input validation in the Windows Compressed Folder component, which can be exploited by creating a specially crafted file. This allows an attacker to impact the integrity of protected information. The vulnerability is associated with data tampering and can enable malicious actors to affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SGUDA U-Lock central lock control service (affected versions not specified) **Description** The issue is related to incorrect authorization in the lock management function of the SGUDA U-Lock central lock control service. A remote attacker with general privilege can exploit this to call privileged APIs, allowing them to acquire information, manipulate, or disrupt the functionality of arbitrary electronic locks. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SGUDA U-Lock central lock control service (affected versions not specified) **Description** The issue is related to incorrect authorization in the user management function of the SGUDA U-Lock central lock control service. A remote attacker with general user privileges can exploit this to call privileged APIs, allowing them to access, modify, and delete user information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.