Hui Lu

**Name of the Vulnerable Software and Affected Versions** SourceCodester Simple Responsive Tourism Website version 1.0 **Description** A flaw exists in SourceCodester Simple Responsive Tourism Website that allows for SQL injection. This issue is related to the manipulation of the `Username` argument within the `/classes/Master.php?f=register` file during the registration process. The attack can be initiated remotely. An exploit for this issue has been published. **Recommendations** Apply any available updates or patches to address the SQL injection issue in the `/classes/Master.php?f=register` file. As a temporary workaround, restrict or disable the registration functionality until a patch is available. Sanitize the `Username` input to prevent SQL injection attacks.

**Name of the Vulnerable Software and Affected Versions** Ricoh printers and MFPs (affected versions not specified) **Description** A stack-based buffer overflow vulnerability exists in Ricoh laser printers and MFPs that implement Web Image Monitor. This issue is related to reading data beyond the buffer boundaries in memory. Exploitation of this vulnerability may allow a remote attacker to execute arbitrary code or cause a denial-of-service (DoS) condition by sending a specially crafted request. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Windows Projected File System FS Filter Driver (affected versions not specified) **Description** The issue is related to a buffer overflow in memory, which can allow an attacker to gain unauthorized access to protected information. This can potentially lead to the disclosure of sensitive information and affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.