Kiyell

The issue allows unauthenticated calls to "admin/api.php?setTempUnit=" to change the temperature units of the web dashboard. The supplier reportedly does not consider this a security issue, but the motivation for allowing arbitrary persons to change the value, which can be seen by the device owner, is unclear.

A vulnerability has been found in ProjectSend, affecting the `get preview` function of the `process.php` file. This issue leads to improper control of resource identifiers and can be initiated remotely. The estimated number of potentially affected devices is not provided. There is no information about real-world incidents where this issue was exploited.