Zuoyuanp

The Waybox Enel X web management application has a flaw that allows execution of arbitrary requests on the internal database via the `/admin/versions.php` endpoint. This issue affects specific versions of Waybox.

A use-after-free issue exists due to improper data tracing. This can be triggered by calling the function `nni mqtt msg get publish property()` in the file `mqtt msg.c`, potentially allowing an attacker to cause a denial of service attack.

A memory leak issue exists in the file message.c, which could be exploited by an attacker to cause a denial of service attack by consuming all available memory resources.