Gionathan Reale

A vulnerabilidade permite ataques do tipo tweb/ft.php?u=, que podem resultar em ataques XSS.

The issue allows authenticated attackers to upload any file type to the server via the "Documents" area, which is related to the "uploadDocFile.aspx" endpoint.

A security issue was found where the login credentials and URL are sent in cleartext within a pop-up window. This pop-up appears when a user enters new credentials for a site not registered in the product, and it remains on any page the user visits until a decision is made. The code of this pop-up, identified by `id="uniqkey-password-popup"` and related to `password-popup/popup.html`, can be accessed by remote servers, potentially allowing malicious servers to obtain the sensitive information.

An issue was discovered in Uniqkey Password Manager where the code of a pop-up window can be read and manipulated by remote servers. This pop-up window appears when entering new credentials to an unregistered site, asking the user to save these credentials. The window remains on any page the user visits until a decision is made. A malicious web server can manipulate the pop-up, causing it not to appear and preventing users from securing their credentials. This issue is related to the elements `id="uniqkey-password-popup"` and `password-popup/popup.html`.

The issue is a stack-based buffer overflow that occurs when converting a file, allowing remote attackers to execute arbitrary code via a crafted .mp3 file. This can be exploited with user assistance.

The issue is a stack-based buffer overflow that occurs when converting a file, allowing remote attackers to execute arbitrary code via a crafted .wma file. This can be exploited when a user assists the attack, such as by opening a malicious file.

The issue makes it easier for attackers to estimate whether a Word document contains a token, due to limited variation in size, metadata, and timestamp.

The issue allows for a CSRF attack via the "index.php?module=users&action=newUser" endpoint, potentially leading to the addition of a new user with administrator privileges.

The issue concerns Vembu StoreGrid, where there is XSS in several PHP files, including interface/registercustomer/onlineregsuccess.php, interface/registerreseller/onlineregfailure.php, interface/registerclient/onlineregfailure.php, and interface/registercustomer/onlineregfailure.php.

The issue concerns the server web interface of Vembu StoreGrid, where the front page leaks the private IP address. This leak occurs due to incorrect processing of an index.php trailing slash, which discloses the private IP address in the `ipaddress` hidden form value of the HTML source code.

The issue in WaveMaker Studio arises from the mishandling of the `studioService.download` method, specifically with the `inUrl` parameter. This mishandling leads to the disclosure of local files and enables Server-Side Request Forgery (SSRF) attacks. SSRF occurs when an attacker can manipulate a server into making requests to internal or external resources, potentially leading to unauthorized access or information disclosure.

The issue is related to Cross-Site Scripting (XSS) via the `desc` (also known as Description) or `table actionsaclN` parameter. This is connected to the files `haproxy listeners.php` and `haproxy listeners edit.php`.