Víctor García

**Name of the Vulnerable Software and Affected Versions** APC Network Management Card 4 (affected versions not specified) **Description** The software contains a path traversal issue that allows unauthenticated attackers to access sensitive system files. Attackers can manipulate URL parameters to exploit directory traversal techniques and read critical system files, such as `/etc/passwd`, by using encoded path traversal characters in HTTP requests. The vulnerability does not require authentication. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Veyon Service versions prior to 4.4.2 **Description** The issue allows locally authenticated users with administrative privileges to run malicious executables with LocalSystem privileges due to an unquoted service path vulnerability. This is particularly dangerous in setups where users have administrative privileges, although Veyon users typically do not have such privileges. **Recommendations** For versions prior to 4.4.2, update to version 4.4.2 to resolve the issue. As a temporary workaround, consider revoking administrative privileges from all potentially untrustworthy users to prevent exploitation.