Zuoyuanp

**Name of the Vulnerable Software and Affected Versions** Waybox Enel X (affected versions not specified) **Description** The Waybox Enel X web management application has a flaw that allows execution of arbitrary requests on the internal database via the `/admin/versions.php` endpoint. This issue affects specific versions of Waybox. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NanoMQ version 0.17.2 **Description** A use-after-free issue exists due to improper data tracing. This can be triggered by calling the function `nni mqtt msg get publish property()` in the file `mqtt msg.c`, potentially allowing an attacker to cause a denial of service attack. **Recommendations** For NanoMQ version 0.17.2, consider disabling the `nni mqtt msg get publish property()` function as a temporary workaround until a patch is available.

**Name of the Vulnerable Software and Affected Versions** NanoMQ version 0.17.2 **Description** A memory leak issue exists in the file message.c, which could be exploited by an attacker to cause a denial of service attack by consuming all available memory resources. **Recommendations** For NanoMQ version 0.17.2, consider restricting access to the message.c file as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.