Scott Arciszewski

**Nome do software vulnerável e versões afetadas** Versões do Elliptic anteriores à 6.6.0 **Descrição** O pacote Elliptic para Node.js, em sua implementação ECDSA, não verifica corretamente assinaturas válidas se o hash contiver pelo menos quatro bytes 0 à esquerda e quando a ordem do ponto base da curva elíptica for menor que o hash, devido a uma anomalia truncateToN. Isso leva à rejeição de assinaturas válidas. Transações ou comunicações legítimas podem ser incorretamente sinalizadas como inválidas. **Recomendações** Para versões anteriores à 6.6.0, atualize para a versão 6.6.0 ou posterior para resolver o problema. Como solução temporária, considere implementar verificações de validação adicionais para assinaturas a fim de minimizar o risco de marcar incorretamente transações ou comunicações legítimas como inválidas. Restrinja o uso da implementação ECDSA no pacote Elliptic até que a atualização seja aplicada.

**Name of the Vulnerable Software and Affected Versions** Simple Machines Forum (SMF) version 2.1 **Description** The issue allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the `themechanges` array parameter. **Recommendations** For Simple Machines Forum (SMF) version 2.1, update to a version that fixes this issue to prevent PHP object injection attacks.

**Name of the Vulnerable Software and Affected Versions** SecureMoz Security Audit plugin version 1.0.5 and earlier **Description** The issue concerns the `tweet info` function in the `class/ functions.php` file, which does not utilize an HTTPS session for downloading serialized data. This oversight allows man-in-the-middle attackers to modify the client-server data stream, facilitating PHP object injection attacks and enabling the execution of arbitrary PHP code. **Recommendations** For SecureMoz Security Audit plugin version 1.0.5 and earlier, consider disabling the `tweet info` function until a patch is available to prevent potential PHP object injection attacks. Restrict access to the `class/ functions.php` file to minimize the risk of exploitation. Avoid using the affected function in sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** WP Limit Login Attempts plugin versions prior to 2.0.1 **Description** The issue allows remote attackers to execute arbitrary SQL commands. This is achieved through SQL injection vulnerabilities in the getip function, specifically via the `X-Forwarded-For` or `Client-IP` HTTP headers. **Recommendations** For WP Limit Login Attempts plugin versions prior to 2.0.1, update to version 2.0.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the `getip` function in `wp-limit-login-attempts.php` to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Xornic Contact Us (affected versions not specified) **Description** The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The injection can occur via the `name` or `email` parameter to "contact.php" or via the `PATH INFO` to "setup.php". This is related to the `PHP SELF` variable. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.