Adhikara13

The DT LMS – elearning, WordPress LMS plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple AJAX handlers (including dtlms save poc settings, dtlms save skin settings, and dtlms save options settings) in versions up to, and including, 1.1. These handlers are registered on the wp ajax nopriv * hook and contain no capability check, no nonce verification, and pass user-supplied data directly to update option(). This makes it possible for unauthenticated attackers to overwrite arbitrary plugin option values stored in the wp options table, including Point-of-Contact email configuration and skin/branding settings, which can be used to alter the appearance and behavior of the LMS for all site visitors.

The QuickCal plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Custom Field Parameters in all versions up to, and including, 1.0.20 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The nonce guarding the unauthenticated booked add appt AJAX action is publicly embedded on any page rendering the booking calendar shortcode, making it trivially obtainable by unauthenticated attackers without any prior account or privilege.

**Nome do Software Vulnerável e Versões Afetadas** SEOWP versões anteriores a 3.12.3 **Descrição** Existe um problema de Cross Site Request Forgery (CSRF) não autenticado, que pode levar a um Cross-Site Scripting (XSS) Armazenado. CSRF é uma falha que permite a um invasor enganar uma vítima para realizar ações que ela não pretendia, enquanto o XSS Armazenado ocorre quando um script malicioso é permanentemente armazenado no servidor alvo e executado no navegador dos usuários que visitam a página afetada. **Recomendações** Atualize o SEOWP para uma versão posterior à 3.12.2.

**Nome do Software Vulnerável e Versões Afetadas** Spexo theme for WordPress versões anteriores a 2.0.12 **Descrição** O acesso não autorizado é possível devido a uma verificação de capacidade ausente na função `activate plugin()`. Isso permite que usuários autenticados com permissões de nível Assinante (Subscriber) ou superior ativem um conjunto limitado de plugins. **Recomendações** Atualize o tema Spexo para a versão 2.0.12 ou posterior. Como mitigação temporária, restrinja as funções de usuário para evitar que contas de nível Assinante acessem funções relacionadas à ativação de plugins.

**Nome do Software Vulnerável e Versões Afetadas** JobSearch versões anteriores a 3.2.8 **Descrição** O Controle de Acesso Quebrado não autenticado permite que um invasor ignore as restrições de autorização sem fornecer credenciais válidas. **Recomendações** Atualize para uma versão posterior a 3.2.7.

**Name of the Vulnerable Software and Affected Versions** Netis N3Mv2 version 1.0.1.865 **Description** The issue is a buffer overflow that can be triggered via the `pingWdogIp`. This allows attackers to cause a Denial of Service (DoS) by providing a crafted input. **Recommendations** For version 1.0.1.865, consider restricting access to the `pingWdogIp` to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Netis N3Mv2 version 1.0.1.865 **Description** A command injection issue was discovered via the `ddnsDomainName` parameter in the Dynamic DNS settings. This allows for potential exploitation. No information is provided about the estimated number of affected devices or real-world incidents. **Recommendations** For Netis N3Mv2 version 1.0.1.865, consider restricting access to the Dynamic DNS settings to minimize the risk of exploitation. Avoid using the `ddnsDomainName` parameter in the affected settings until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Netis N3Mv2 version 1.0.1.865 **Description** A command injection issue was discovered in the Wake-On-LAN (WoL) function via the `wakeup mac` parameter. This issue can be exploited using a crafted payload. **Recommendations** For Netis N3Mv2 version 1.0.1.865, consider disabling the Wake-On-LAN (WoL) function until a patch is available to prevent exploitation via the `wakeup mac` parameter.

**Name of the Vulnerable Software and Affected Versions** Netis N3Mv2 version 1.0.1.865 **Description** The issue is related to a command injection vulnerability. This vulnerability can be exploited via a crafted payload, specifically through the `Hostname` parameter within the WAN settings. **Recommendations** For Netis N3Mv2 version 1.0.1.865, consider restricting access to the WAN settings to minimize the risk of exploitation. Avoid using the `Hostname` parameter in the WAN settings until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Netis N3Mv2 version 1.0.1.865 **Description** The issue is related to a command injection vulnerability in the Changing Username and Password function. This vulnerability can be exploited via a crafted payload. **Recommendations** For Netis N3Mv2 version 1.0.1.865, consider disabling the Changing Username and Password function until a patch is available. Restrict access to this function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Netis N3Mv2 version 1.0.1.865 **Description** A command injection issue was discovered in the diagnostic tools page of the affected software. This issue can be exploited through a crafted HTTP request. **Recommendations** For version 1.0.1.865, consider restricting access to the diagnostic tools page until a patch is available. As a temporary workaround, avoid using the diagnostic tools page to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NETIS SYSTEMS WF2409E version 3.6.42541 **Description** An issue in the diagnostic tools component of the admin management interface allows a remote attacker to execute arbitrary code via the `ping` and `traceroute` functions. **Recommendations** For NETIS SYSTEMS WF2409E version 3.6.42541, consider disabling the diagnostic tools component in the admin management interface until a patch is available. Restrict access to the `ping` and `traceroute` functions to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.