Fa1C4

**Name of the Vulnerable Software and Affected Versions** armink struct2json version 1.0 **Description** An issue exists in the JSON Deserialization component within the library `struct2json/inc/s2jdef.h`. A remote attacker can cause a null pointer dereference—a condition where the software attempts to read from a memory address that is null, typically resulting in a crash—by manipulating the `valuestring` argument passed to the `S2J STRUCT GET string ELEMENT()` function. **Recommendations** As a temporary workaround, restrict the use of the `S2J STRUCT GET string ELEMENT()` function until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Trippo ResponsiveFilemanager versions prior to 9.14.1 **Description** A remote flaw exists in an unknown function within the `filemanager/dialog.php` file. This issue allows for unrestricted upload of files to the server. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** epsilla-cloud vectordb versions prior to 0.3.18 **Description** An issue exists in the Filter Parser component within the file engine/query/expr/expr.cpp. Specifically, the `SplitTokens()` and `ShuntingYard()` functions fail to properly check for unusual conditions, which can be manipulated by a local attacker. **Recommendations** As a temporary workaround, restrict local access to the Filter Parser component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Croogo CMS versions prior to 4.0.8 **Description** A path traversal flaw exists in the Admin File Manager component. The issue resides in the `isEditable()` function within the `FileManager/src/Utility/FileManager.php` file. This flaw allows a remote attacker to manipulate file paths to access unauthorized directories. **Recommendations** Update Croogo CMS to version 4.0.8 or later. As a temporary mitigation, restrict access to the Admin File Manager component.

**Name of the Vulnerable Software and Affected Versions** RackTables versions prior to 0.22.0 **Description** RackTables is subject to a cross-site request forgery (CSRF) issue, which occurs when a web application lacks mechanisms to verify that a request was intentionally initiated by the user. This flaw allows a remote attacker to perform unauthorized actions by tricking a victim into executing malicious requests. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.