Barış Baydur

**Name of the Vulnerable Software and Affected Versions** ManageEngine Endpoint Central versions prior to 11.4.2528.34 **Description** ManageEngine Endpoint Central is affected by a flaw that allows the cleartext transmission of sensitive information. Cleartext transmission occurs when data is sent over a network without encryption, making it readable to anyone who can intercept the traffic. **Recommendations** Update ManageEngine Endpoint Central to version 11.4.2528.34 or later.

**Name of the Vulnerable Software and Affected Versions** SYSGUARD 6001 versions 2.0.2 through 6.1.15.0 **Description** An issue exists in the web interface of the management interface where improper neutralization of special elements used in SQL commands allows for Blind SQL Injection. This occurs due to insufficient input validation or parameterization in backend database queries. An attacker with network access to the exposed interface can send crafted requests to infer database content, which may lead to unauthorized database access, credential theft, configuration tampering, and full system compromise. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SYSGUARD 6001 versions 2.0.2 through 6.1.3.9 **Description** Improper neutralization of input during web page generation allows for Stored Cross-Site Scripting (XSS), a condition where malicious scripts are permanently stored on the target server and served to other users. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Datactive versions 2.13.34 through 2.14.0.5 **Description** The software contains a flaw related to improper handling of user-supplied data during web page creation, specifically a Stored Cross-site Scripting (XSS) issue. This allows for the injection of malicious scripts into web pages viewed by other users. The issue involves insufficient neutralization of script-related HTML tags. **Recommendations** Update Datactive to version 2.14.0.6 or later.

**Name of the Vulnerable Software and Affected Versions** Eksagate Webpack Management System versions through 20251119 **Description** A flaw exists in Eksagate Webpack Management System that allows for SQL Injection. This issue enables unauthorized database control without authentication. The vulnerability is due to improper neutralization of special elements within SQL commands. **Recommendations** Versions prior to 20251119 are affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ArkSigner AcBakImzala versions prior to 5.1.4 **Description** The software contains a PHP Local File Inclusion issue due to improper control of filename inclusion mechanisms. This allows for the inclusion of files from untrusted sources. The issue affects the `AcBakImzala` software. **Recommendations** Update to version 5.1.4 or later.

**Name of the Vulnerable Software and Affected Versions** ArkSigner Software and Hardware Inc. AcBakImzala versions prior to 5.1.4 **Description** The AcBakImzala software contains a flaw related to improper input neutralization during web page generation, specifically a Reflected Cross-Site Scripting (XSS) condition. This allows for the execution of malicious scripts within the context of a user's browser. **Recommendations** Update AcBakImzala to version 5.1.4 or later.

**Name of the Vulnerable Software and Affected Versions** giSoft Information Technologies City Guide versions prior to 1.4.45 **Description** The software contains a flaw related to improper input handling during web page generation, which could lead to Reflected Cross-site Scripting (XSS). This allows an attacker to inject malicious scripts into web pages viewed by other users. **Recommendations** Update to version 1.4.45 or later.