David Vaartjes

**Name of the Vulnerable Software and Affected Versions** VaultPress Plugin version 1.8.4 **Description** A critical issue was found in the VaultPress Plugin, affecting an unknown part, which leads to code injection. The manipulation can be initiated remotely. **Recommendations** For VaultPress Plugin version 1.8.4, update to a newer version to mitigate the risk of code injection. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** File Manager Plugin version 3.0.1 **Description** A vulnerability was found in the File Manager Plugin, which has been classified as problematic. This issue affects an unknown part of the plugin and leads to cross-site request forgery. The manipulation can be initiated remotely. **Recommendations** For File Manager Plugin version 3.0.1, consider disabling the plugin until a patch is available to prevent cross-site request forgery attacks. Restrict access to the plugin to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Adminer Login version 1.4.4 **Description** A vulnerability has been found in Adminer Login, classified as problematic, affecting unknown code and leading to improper access controls. The manipulation can be launched on the local host. The exploit has been disclosed to the public and may be used. **Recommendations** For Adminer Login version 1.4.4, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Apple Quicktime versions prior to 7.2 on Mac OS X 10.3.9 and 10.4.9 **Description** The issue allows user-assisted remote attackers to execute arbitrary code via crafted title and author fields in an SMIL file. This is related to improper calculations for memory allocation, specifically an integer overflow. **Recommendations** For Apple Quicktime versions prior to 7.2 on Mac OS X 10.3.9 and 10.4.9, update to version 7.2 or later to resolve the issue.