0Xhamy

**Name of the Vulnerable Software and Affected Versions** InstantCMS versions prior to 2.18.1 **Description** InstantCMS does not properly validate Cross-Site Request Forgery (CSRF) tokens. This allows attackers to perform actions on behalf of a user without their knowledge. Specifically, an attacker could grant moderator privileges to users, execute scheduled tasks, move posts to trash, and accept friend requests. **Recommendations** Update to InstantCMS version 2.18.1 or later.

**Name of the Vulnerable Software and Affected Versions** Frappe LMS version 2.35.0 **Description** A flaw exists in Frappe LMS 2.35.0 within the Assignment Picture Handler component, specifically related to the `/files/` file. This issue allows for a remote direct request manipulation, with a high complexity and difficult exploitability. The exploit has been published. **Recommendations** Upgrade the affected component.

**Name of the Vulnerable Software and Affected Versions** Frappe LMS version 2.35.0 **Description** A flaw exists in Frappe LMS that allows for cross site scripting. This issue is related to the Course Handler component and involves manipulation of the `Description` argument. The attack can be carried out remotely. The exploit has been publicly disclosed. **Recommendations** Upgrade the affected component.

**Name of the Vulnerable Software and Affected Versions** Frappe LMS versions 2.34.x through 2.35.0 **Description** A cross site scripting issue exists in Frappe LMS. Manipulation of an unknown function within the component Incomplete Fix can lead to remote exploitation. The exploit is publicly available. **Recommendations** Upgrade the affected component.

**Name of the Vulnerable Software and Affected Versions** Frappe LMS version 2.35.0 **Description** A flaw exists in Frappe LMS that allows for improper access controls. The issue is related to an unknown function within the `/courses/` file of the Unpublished Course Handler component. The attack can be initiated remotely and is considered difficult to exploit. The exploit has been publicly disclosed. **Recommendations** Upgrade the affected component.

Name of the Vulnerable Software and Affected Versions: OnlyOffice versions through 12.7.0 Description: A vulnerability exists in Ascensio System SIA OnlyOffice that can lead to cross site scripting. The issue is located in the `Comment Handler` component, specifically within the file `/Products/Projects/Messages.aspx` and an unknown function. The attack can be launched remotely. The exploit has been publicly disclosed. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: OnlyOffice versions up to 12.7.0 Description: A cross site scripting issue exists due to unknown processing of the file `/Products/Projects/Messages.aspx` within the SVG Image Handler component. The attack can be initiated remotely. The exploit has been made public. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: ZenCart version 2.1.0 Description: A vulnerability exists in ZenCart 2.1.0 related to an unknown functionality of the component CKEditor. Manipulation of this functionality can lead to Cross-Site Scripting (XSS). The attack can be launched remotely. The exploit has been publicly disclosed and may be used. The existence of this vulnerability is currently doubted, with the vendor stating it is "intended behavior, allowed for authorized administrators". Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: LemonOS versions prior to nightly-2024-07-13 Description: A stack-based buffer overflow issue exists in the HTTP Client component of LemonOS. The `HTTPGet` function within the `/Applications/Steal/main.cpp` file is affected, specifically due to manipulation of the `chunkSize` argument. This issue can be exploited remotely. The exploit has been disclosed to the public. Recommendations: Update LemonOS to a version later than nightly-2024-07-12. As a temporary workaround, consider restricting the use of the `HTTPGet` function until a patch is available.

Name of the Vulnerable Software and Affected Versions: givanz Vvveb versions up to 1.0.5 Description: A vulnerability exists in givanz Vvveb up to version 1.0.5, affecting unknown code within the `/vadmin123/index.php?module=content/post&type=post` file of the Endpoint component. This manipulation results in a cross-site scripting issue, and the attack can be initiated remotely. The exploit has been publicly disclosed. Recommendations: Upgrade to version 1.0.6 to address this issue.

Name of the Vulnerable Software and Affected Versions: givanz Vvveb versions up to 1.0.5 Description: A vulnerability was identified in givanz Vvveb up to version 1.0.5. This affects an unknown part of the file `admin/template/content/edit.tpl`. The manipulation of the argument `slug` leads to cross-site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public. Recommendations: Upgrade to version 1.0.6.

Name of the Vulnerable Software and Affected Versions: Vinades NukeViet versions up to 4.5.06 Description: A problematic vulnerability has been identified in Vinades NukeViet. The issue is related to unknown processing of the file `/admin/index.php?language=en&nv=upload` within the Module Handler component, leading to server-side request forgery (SSRF). The attack can be initiated remotely. The exploit has been publicly disclosed. The vendor was contacted regarding this disclosure but did not respond. Recommendations: Vinades NukeViet versions prior to 4.5.06: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** givanz Vvveb versions up to 1.0.5 **Description** A cross-site scripting issue exists due to unknown processing of the file `/vadmin123/index.php?module=settings/post-types` within the Add Type Handler component. The attack can be initiated remotely. The exploit has been publicly disclosed. **Recommendations** Upgrade to version 1.0.6 to address this issue.

**Name of the Vulnerable Software and Affected Versions** givanz Vvveb versions up to 1.0.5 **Description** A critical vulnerability exists in the Drag-and-Drop Editor component of givanz Vvveb. The vulnerability is due to server-side request forgery, which can be triggered by manipulating the `url` argument in the `/vadmin123/?module=editor/editor` API endpoint. The attack can be initiated remotely, and the exploit has been publicly disclosed. **Recommendations** Upgrade to version 1.0.6.

**Name of the Vulnerable Software and Affected Versions** givanz Vvveb versions up to 1.0.5 **Description** A problematic issue exists in givanz Vvveb that allows information disclosure. The issue is located in an unknown part of the file `/vadmin123/index.php?module=editor/editor` within the Drag-and-Drop Editor component. The `url` argument can be manipulated to trigger the issue, and the attack can be initiated remotely. The exploit has been publicly disclosed. **Recommendations** Upgrade to version 1.0.6.

**Name of the Vulnerable Software and Affected Versions** givanz Vvveb version 1.0.5 **Description** A critical issue exists in the `Save` function of the `admin/controller/editor/code.php` file within the Code Editor component. This manipulation can lead to code injection and may be launched remotely. The exploit has been publicly disclosed. **Recommendations** Upgrade to version 1.0.6 to address this issue.

**Name of the Vulnerable Software and Affected Versions** Alex Tselegidis EasyAppointments version 1.5.0 **Description** An issue in Alex Tselegidis EasyAppointments allows a remote attacker to escalate privileges via the "index.php" file. **Recommendations** For version 1.5.0, consider restricting access to the "index.php" file as a temporary workaround until a patch is available.

**Name of the Vulnerable Software and Affected Versions** MaysWind ezBookkeeping version 0.7.0 **Description** An issue in the software allows a remote attacker to escalate privileges via the lack of rate limiting. **Recommendations** For MaysWind ezBookkeeping version 0.7.0, consider implementing rate limiting as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** MaysWind ezBookkeeping version 0.7.0 **Description** An issue in MaysWind ezBookkeeping allows a remote attacker to escalate privileges via the token component. **Recommendations** For MaysWind ezBookkeeping version 0.7.0, consider disabling the token component as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Daylight Studio Fuel CMS version 1.5.2 **Description** The issue allows an attacker to escalate privileges through the "fuel/blocks/" and "fuel/pages/" components. This is a Cross Site Scripting issue that can be exploited to gain elevated access. **Recommendations** For Daylight Studio Fuel CMS version 1.5.2, consider disabling access to the "fuel/blocks/" and "fuel/pages/" components until a patch is available. Restricting the use of these components can help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.