Esharmaji

**Name of the Vulnerable Software and Affected Versions** erdogant pypickle versions 1.1.5 and earlier **Description** A vulnerability was found in erdogant pypickle, classified as problematic. The issue affects the `load` function of the file pypickle/pypickle.py, leading to deserialization. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. **Recommendations** For erdogant pypickle versions 1.1.5 and earlier, upgrade to version 2.0.0 to address this issue. As a temporary workaround, consider restricting access to the `load` function of the pypickle/pypickle.py file until the upgrade is applied.

Name of the Vulnerable Software and Affected Versions: iop-apl-uw basestation3 versions 3.0.4 and earlier Description: A problem was found in the load qc pickl function of the file basestation3/QC.py, which is affected by deserialization due to the manipulation of the `qc file` argument. This issue must be approached locally. The exploit has been made public and may be used. Although the code maintainer has tagged the issue as closed, there is no new confirmation or release available in the GitHub repository yet. Recommendations: For iop-apl-uw basestation3 versions 3.0.4 and earlier, as a temporary workaround, consider disabling the `load qc pickl` function until a patch is available. Restrict access to the `basestation3/QC.py` file to minimize the risk of exploitation. Avoid using the `qc file` argument in the affected function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SourceCodester Online Student Clearance System version 1.0 **Description** A critical issue was found in the /Admin/login.php file, affecting unknown code. The manipulation of the `username` and `password` arguments leads to SQL injection. The attack can be initiated remotely. **Recommendations** For SourceCodester Online Student Clearance System version 1.0, consider disabling the login functionality in the /Admin/login.php file until a patch is available to prevent SQL injection attacks. Restrict access to the /Admin/login.php file to minimize the risk of exploitation. Avoid using the `username` and `password` arguments in the affected login endpoint until the issue is resolved.