Efe Özel

**Name of the Vulnerable Software and Affected Versions** Talassoft Industrial Management Software versions 4 through 15 **Description** The software contains hard-coded credentials, which can be used to retrieve embedded sensitive data. **Recommendations** Update Talassoft Industrial Management Software to version 16 or later.

**Name of the Vulnerable Software and Affected Versions** Talassoft Industrial Management Software versions 4 through 15 **Description** Improper neutralization of special elements used in an SQL command leads to an SQL injection. This occurs when the software fails to properly sanitize user-supplied data before incorporating it into a database query, potentially allowing an attacker to manipulate the query logic. **Recommendations** Update Talassoft Industrial Management Software to version 16 or later.

**Name of the Vulnerable Software and Affected Versions** Talassoft Industrial Management Software versions 4 through 15 **Description** Cross-Site Request Forgery (CSRF) allows an attacker to induce a user to perform actions they did not intend to do. This issue occurs in the Talassoft Industrial Management Software. **Recommendations** Update Talassoft Industrial Management Software to version 16 or later.

**Name of the Vulnerable Software and Affected Versions** Talassoft Industrial Management Software versions V4 through V.15 **Description** A missing authentication for a critical function allows an authentication bypass, enabling unauthorized access to restricted areas of the software. **Recommendations** Update Talassoft Industrial Management Software to version V.16.

**Name of the Vulnerable Software and Affected Versions** Octopod versions prior to v1 **Description** The issue affects XPodas Octopod, allowing authentication bypass by primary weakness. This vulnerability enables unauthorized access. The vendor was contacted, and it was learned that the product is not supported. **Recommendations** For versions prior to v1, since the product is not supported, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ZKSoftware Biometric Security Solutions UFace 5 versions through 12022024 **Description** The issue is related to an Authentication Bypass by Primary Weakness vulnerability, which allows authentication bypass in ZKSoftware Biometric Security Solutions UFace 5. **Recommendations** For UFace 5 versions through 12022024, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** TMT Lockcell versions prior to 15 **Description** The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. **Recommendations** For versions prior to 15, update to version 15 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive database operations to minimize the risk of exploitation. Avoid using user-supplied input in SQL commands until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** TMT Lockcell versions prior to 15 **Description** The issue is related to the reliance on cookies without validation and integrity checking in a security decision, which allows for privilege abuse and authentication bypass. **Recommendations** For versions prior to 15, update to version 15 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** TMT Lockcell versions prior to 15 **Description** The issue is related to an Unrestricted Upload of File with Dangerous Type vulnerability, which allows Command Injection in TMT Lockcell. **Recommendations** For versions prior to 15, update to version 15 or later to resolve the issue. As a temporary workaround, consider restricting file uploads to prevent command injection until a patch is available.

**Name of the Vulnerable Software and Affected Versions** TMT Lockcell versions prior to 15 **Description** The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability, which allows for Authentication Abuse and Authentication Bypass. **Recommendations** For versions prior to 15, update to version 15 or later to resolve the issue.