Cody Sixteen

**Name of the Vulnerable Software and Affected Versions** WatchGuard Fireware OS (affected versions not specified) **Description** A buffer overflow in the Management Web UI allows an authenticated administrator with network access to trigger a denial of service (DoS) condition or potentially execute arbitrary code by sending specially crafted network traffic. This issue occurs within the `wgagent` component. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Fireware OS (affected versions not specified) **Description** A heap-based buffer overflow in the `iked` process allows an authenticated administrator to cause a denial of service by crashing the IKE daemon (iked) through the saving of a specially crafted configuration. A heap-based buffer overflow occurs when a program writes more data to a heap memory block than it can hold, potentially corrupting adjacent memory. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** WatchGuard Dimension (affected versions not specified) **Description** A business logic flaw allows an authenticated administrator to trigger multiple backend operations within a single logical flow by sending a specially crafted request. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Fireware OS versions 12.1 through 12.12 Fireware OS versions 2025.1 through 2026.2 **Description** An Out-of-bounds Write occurs in the `ikestubd` process, which may allow an authenticated privileged user to execute arbitrary code by sending specially crafted requests to the Management Web UI. An Out-of-bounds Write is a memory corruption issue where data is written outside the intended boundary of a buffer. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** WatchGuard Fireware OS versions 11.0 through 11.12.4 Update1 WatchGuard Fireware OS versions 12.0 through 12.12 WatchGuard Fireware OS versions 2025.1 through 2026.2 **Description** A race condition leads to a use-after-free issue in LDAP authentication for the Mobile User VPN with IKEv2. A remote unauthenticated attacker can exploit this to execute arbitrary code within the context of the `iked` process on Fireboxes configured to use an external LDAP authentication server. **Recommendations** Update Fireware OS versions 11.0 through 11.12.4 Update1 to the latest patched version. Update Fireware OS versions 12.0 through 12.12 to the latest patched version. Update Fireware OS versions 2025.1 through 2026.2 to the latest patched version.

**Name of the Vulnerable Software and Affected Versions** WatchGuard Firebox Management Web UI (affected versions not specified) **Description** An authenticated administrator can cause a denial-of-service condition in the Fireware Management Web UI. This occurs when malformed or crafted data is sent to the 'put data' endpoint, which performs unsafe deserialization of the input. Unsafe deserialization is a process where untrusted data is used to abuse the logic of an application to execute unauthorized actions or crash the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** WatchGuard Fireware OS versions 12.1 through 12.12 WatchGuard Fireware OS versions 2025.1 through 2026.2 **Description** WatchGuard Fireware OS on a FireCluster may use a hard-coded encryption key to encrypt saved credentials for Access Portal resources under exceptional circumstances. This issue specifically affects devices deployed in a FireCluster that support the Access Portal feature. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** WatchGuard Fireware OS versions 12.1 through 12.12 WatchGuard Fireware OS versions 2025.1 through 2026.2 **Description** An Out-of-bounds Write issue exists in the `wgagent` process. This flaw allows an authenticated privileged user to execute arbitrary code by sending specially crafted requests to the Management Web UI. An Out-of-bounds Write occurs when a program writes data past the end of the intended buffer, potentially corrupting memory. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** WP 404 Auto Redirect to Similar Post plugin for WordPress versions prior to 1.0.6 **Description** The WP 404 Auto Redirect to Similar Post plugin for WordPress is susceptible to Stored Cross-Site Scripting through admin settings. Insufficient input sanitization and output escaping allow authenticated attackers with administrator-level permissions or higher to inject arbitrary web scripts into pages. These scripts will execute when a user accesses the injected page. This issue specifically impacts multi-site installations and those where unfiltered html has been disabled. **Recommendations** Update the WP 404 Auto Redirect to Similar Post plugin to version 1.0.6 or later.

**Name of the Vulnerable Software and Affected Versions** WatchGuard Fireware OS versions 11.0 through 11.12.4+541730 WatchGuard Fireware OS versions 12.0 through 12.11.4 WatchGuard Fireware OS versions 12.5 through 12.5.13 WatchGuard Fireware OS versions 2025.1 through 2025.1.2 **Description** An out-of-bounds write issue exists in the Command Line Interface (CLI) of WatchGuard Fireware OS. A user with privileged access can potentially execute arbitrary code by using specifically designed IPSec configuration commands. The issue stems from improper handling of input when configuring IPSec, allowing a malicious actor to write data beyond the allocated buffer. This could lead to system compromise. **Recommendations** WatchGuard Fireware OS versions 11.0 through 11.12.4+541730 should be updated. WatchGuard Fireware OS versions 12.0 through 12.11.4 should be updated. WatchGuard Fireware OS versions 12.5 through 12.5.13 should be updated. WatchGuard Fireware OS versions 2025.1 through 2025.1.2 should be updated.

**Name of the Vulnerable Software and Affected Versions** WatchGuard Fireware OS versions 12.0 through 12.11.4 WatchGuard Fireware OS versions 12.5 through 12.5.13 WatchGuard Fireware OS versions 2025.1 through 2025.1.2 **Description** An out-of-bounds write issue exists in the certificate request command of WatchGuard Fireware OS. A user with privileged access can potentially execute arbitrary code by using specifically designed command-line interface (CLI) commands. **Recommendations** Update WatchGuard Fireware OS to a version later than 12.11.4. Update WatchGuard Fireware OS to a version later than 12.5.13. Update WatchGuard Fireware OS to a version later than 2025.1.2.

**Name of the Vulnerable Software and Affected Versions** Fast Velocity Minify versions prior to 3.5.1 **Description** The Fast Velocity Minify plugin for WordPress is susceptible to Stored Cross-Site Scripting through admin settings. Insufficient input sanitization and output escaping allow authenticated attackers with administrator-level permissions or higher to inject arbitrary web scripts into pages. These scripts will execute when a user accesses the injected page. This issue specifically impacts multi-site installations and those where unfiltered html has been disabled. **Recommendations** Update Fast Velocity Minify to a version later than 3.5.1.

**Name of the Vulnerable Software and Affected Versions** Simple Banner versions prior to 3.0.11 **Description** Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. Authenticated attackers with administrator-level access can inject arbitrary web scripts via the `pro version activation code` parameter. These scripts execute when a user accesses an affected page. This issue specifically impacts multi-site installations and environments where `unfiltered html` has been disabled. **Recommendations** Update to version 3.0.11 or later. Avoid using the `pro version activation code` parameter until the update is applied.

Name of the Vulnerable Software and Affected Versions: Booking Calendar plugin for WordPress versions prior to 10.14.1 Description: The Booking Calendar plugin for WordPress is susceptible to Stored Cross-Site Scripting through its settings. Insufficient input sanitization and output escaping allow authenticated attackers with Administrator-level access or higher to inject arbitrary web scripts into pages. These scripts execute when a user accesses the injected page. Recommendations: Update the Booking Calendar plugin to a version later than 10.14.1.

**Name of the Vulnerable Software and Affected Versions** WatchGuard Fireware OS versions 12.0 through 12.5.12+701324 WatchGuard Fireware OS versions 12.6 through 12.11.2 **Description** A stack-based buffer overflow exists in the certificate request command of WatchGuard Fireware OS. An authenticated privileged user could potentially execute arbitrary code by using specifically crafted command-line interface (CLI) commands. This issue is due to insufficient bounds checking when handling input, leading to a buffer overflow. **Recommendations** Update WatchGuard Fireware OS to a version later than 12.5.12+701324. Update WatchGuard Fireware OS to a version later than 12.11.2.

**Name of the Vulnerable Software and Affected Versions** Zoho ManageEngine Applications Manager version 13 before build 13500 **Description** The issue allows SQL injection via "GraphicalView.do" endpoint, as demonstrated by a crafted `viewProps` `yCanvas` field or `viewid` parameter. **Recommendations** For Zoho ManageEngine Applications Manager version 13 before build 13500, update to build 13500 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Zoho ManageEngine Applications Manager version 13 before build 13500 **Description** The issue allows post-authentication SQL injection via the `name` parameter in a "manageApplications.do?method=insert" request. **Recommendations** For Zoho ManageEngine Applications Manager version 13 before build 13500, update to build 13500 or later to resolve the issue.