Kaan Atmaca

**Name of the Vulnerable Software and Affected Versions** Megatek Communication System Azora Wireless Network Management versions through 20250916 **Description** The software contains an SQL injection flaw due to improper neutralization of special elements used in an SQL command. This allows for SQL injection attacks. The vendor has not yet confirmed the completion of the fixing process. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Agito Computer Life4All versions prior to 10.01.2025 **Description** The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. **Recommendations** For versions prior to 10.01.2025, update to a version released after 10.01.2025 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Agito Computer Health4All versions prior to 10.01.2025 **Description** The issue affects the access control security levels in Health4All, allowing exploitation due to incorrectly configured access control and potential authentication abuse. **Recommendations** For versions prior to 10.01.2025, update to a version released after 10.01.2025 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Agito Computer Health4All versions prior to 10.01.2025 **Description** The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. **Recommendations** For versions prior to 10.01.2025, update to a version released after 10.01.2025 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Finrota Netahsilat versions prior to 1.24.03 **Description** The issue concerns a Cleartext Storage of Sensitive Information vulnerability, allowing the retrieval of embedded sensitive data. This vulnerability has been exploited to compromise user information. **Recommendations** For Finrota Netahsilat versions prior to 1.24.03, upgrade to version 1.24.03 or later to mitigate the risk of sensitive data exposure.

**Name of the Vulnerable Software and Affected Versions** ww.Winsure versions prior to 4.6.2 **Description** The issue is related to an Improper Restriction of XML External Entity Reference vulnerability, which allows for XML Injection. This vulnerability exists in the SFS Consulting ww.Winsure software. **Recommendations** For versions prior to 4.6.2, update to version 4.6.2 or later to resolve the issue. As a temporary workaround, consider restricting the use of XML external entities to minimize the risk of exploitation.