Christopher Duram

**Name of the Vulnerable Software and Affected Versions** NitroShare Desktop versions prior to 0.3.5 **Description** The LAN file transfer server contains a path traversal issue that allows unauthenticated attackers on the same network to write arbitrary files. This occurs because the server fails to validate paths when processing the `name` field within the JSON item header. By sending a crafted filename containing directory traversal sequences, an attacker can write files outside the intended transfer root directory to any location where the current user has write permissions, such as the Windows Startup folder, which can lead to persistent code execution upon the next user login. **Recommendations** Update NitroShare Desktop to version 0.3.5 or later.

**Name of the Vulnerable Software and Affected Versions** PickActivity (affected versions not specified) **Description** A flaw exists in the `setupLayout` function within the `PickActivity.java` file that may allow an attacker to initiate any activity as a DocumentsUI application. This condition, known as a confused deputy, could result in local privilege escalation without requiring additional execution privileges or user interaction. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** The product name cannot be determined (affected versions not specified) **Description** A missing bounds check in the `onTransact()` function of IDrmManagerService.cpp allows for a possible out-of-bounds write. This condition can be exploited to achieve local escalation of privilege without requiring additional execution privileges or user interaction. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.