Johndoe

**Name of the Vulnerable Software and Affected Versions** Linksys E2500 version 3.0.04.002 **Description** The `chroot local user` option is enabled in the vsftpd configuration file. This could lead to unauthorized access to system files, privilege escalation, or use of the compromised server as a pivot point for internal network attacks. **Recommendations** Disable the `chroot local user` option in the vsftpd configuration file.

**Name of the Vulnerable Software and Affected Versions:** Juniper Networks Junos OS on SRX Series versions prior to 21.4R3-S9 Juniper Networks Junos OS on SRX Series versions 22.2 through 22.2R3-S5 Juniper Networks Junos OS on SRX Series versions 22.4 through 22.4R3-S5 Juniper Networks Junos OS on SRX Series versions 23.2 through 23.2R2-S3 Juniper Networks Junos OS on SRX Series versions 23.4 through 23.4R2-S5 Juniper Networks Junos OS on SRX Series versions 24.2 through 24.2R2 **Description:** An incorrect authorization vulnerability exists in the web server of Juniper Networks Junos OS on SRX Series. This allows an unauthenticated, network-based attacker to access the Juniper Web Device Manager (J-Web). The issue occurs when Juniper Secure connect (JSC) is enabled on specific interfaces, or multiple interfaces are configured for J-Web, making the J-Web UI reachable over more than the intended interfaces. **Recommendations:** Update to Junos OS version 21.4R3-S9 or later. Update to Junos OS version 22.2R3-S5 or later. Update to Junos OS version 22.4R3-S5 or later. Update to Junos OS version 23.2R2-S3 or later. Update to Junos OS version 23.4R2-S5 or later. Update to Junos OS version 24.2R2 or later.

Name of the Vulnerable Software and Affected Versions: MediaWiki - MsUpload extension versions 1.39.X through 1.39.12 MediaWiki - MsUpload extension versions 1.42.X through 1.42.6 MediaWiki - MsUpload extension versions 1.43.X through 1.43.1 Description: The MsUpload extension for MediaWiki is vulnerable to stored XSS via the `msu-continue` system message, which is inserted into the DOM without proper sanitization. This issue occurs in the file upload UI when the same filename is uploaded twice. Recommendations: For MediaWiki - MsUpload extension versions 1.39.X through 1.39.12, update to version 1.39.13 or later. For MediaWiki - MsUpload extension versions 1.42.X through 1.42.6, update to version 1.42.7 or later. For MediaWiki - MsUpload extension versions 1.43.X through 1.43.1, update to version 1.43.2 or later.

Name of the Vulnerable Software and Affected Versions: Mediawiki - CheckUser extension versions 1.39.0 through 1.39.12 Mediawiki - CheckUser extension versions 1.42.0 through 1.42.6 Mediawiki - CheckUser extension versions 1.43.0 through 1.43.1 Description: The CheckUser extension’s Special:Investigate interface is vulnerable to reflected XSS due to improper escaping of certain internationalized system messages rendered on the “IPs and User agents” tab. Recommendations: For versions 1.39.0 through 1.39.12, update to version 1.39.13 or later. For versions 1.42.0 through 1.42.6, update to version 1.42.7 or later. For versions 1.43.0 through 1.43.1, update to version 1.43.2 or later.

**Name of the Vulnerable Software and Affected Versions** Veeam Backup & Replication versions 12 through 12.3.2.3600 **Description** A flaw in the input validation mechanism allows an authenticated domain user to achieve remote code execution (RCE) on the backup server. This issue specifically impacts backup servers that are joined to a Windows domain, enabling any user with valid domain credentials to execute arbitrary code. Real-world incidents involving RCE in this software have been targeted by ransomware groups such as Frag, Akira, Fog, Cuba, and FIN7. **Recommendations** Update to version 12.3.2.3617.

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 15.03.05.16 multi Description: The issue is related to a Buffer Overflow in the formSetFirewallCfg function via the `firewallEn` parameter. Recommendations: For Tenda AC6 version 15.03.05.16 multi, as a temporary workaround, consider disabling the `formSetFirewallCfg` function until a patch is available. Restrict access to the firewall configuration to minimize the risk of exploitation. Avoid using the `firewallEn` parameter in the affected function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** HPE StoreOnce Software (affected versions not specified) **Description** A command injection remote code execution issue exists. This allows for potential code execution on affected systems. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.