Ahmet Durmuş

Weak Password Recovery Mechanism for Forgotten Password vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Password Recovery Exploitation. This issue affects LIBRID/LIBREF: from 2.01.0.2183 through 10092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Stored XSS. This issue affects LIBRID/LIBREF: from 2.01.0.2183 through 10092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Stored XSS. This issue affects LIBRID/LIBREF: from 2.01.0.2183 through 10092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

**Name of the Vulnerable Software and Affected Versions** Pizzy Library versions 1.0.0.26250 through 1.3.9.26250 **Description** Improper neutralization of formula elements in a CSV file in MIA Technology Inc. Pizzy Library allows Code Injection, which occurs when an application fails to properly sanitize user-supplied input before including it in a CSV file, potentially allowing the execution of arbitrary code via spreadsheet formulas. **Recommendations** Update Pizzy Library to version 1.3.9.26250 or later.

**Name of the Vulnerable Software and Affected Versions** Pizzy Library versions 1.0.0.26250 through 1.3.9.26250 **Description** Improper Access Control and missing authorization in the Pizzy Library allow for the exploitation of incorrectly configured access control security levels. **Recommendations** Update Pizzy Library to version 1.3.9.26250 or later.

**Name of the Vulnerable Software and Affected Versions** Pizzy Library versions 1.0.0.26250 through 1.3.9.26250 **Description** Improper Control of Interaction Frequency in the Pizzy Library allows for flooding, a condition where a system is overwhelmed by a high volume of requests or data. **Recommendations** Update Pizzy Library to version 1.3.9.26250 or later.

**Name of the Vulnerable Software and Affected Versions** Netigma versions 6.3.3 through 6.3.4 **Description** The software contains an Improper Neutralization of Input During Web Page Generation issue, specifically a Stored Cross-site Scripting (XSS) condition. This allows for the injection of malicious scripts into web pages. The issue affects the Netigma application. **Recommendations** Update to Netigma version 6.3.5 V8 or later.