Lawrence Amer

**Name of the Vulnerable Software and Affected Versions** E5573Cs-322 version 21.328.01.00.00 **Description** The issue allows remote attackers to make the network where the E5573Cs-322 is running temporarily unavailable. **Recommendations** For version 21.328.01.00.00, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ProjectSend version r754 **Description** A vulnerability was found in ProjectSend, affecting an unknown part of the file "process.php?do=zip download". The manipulation of the argument `client/file` leads to information disclosure. It is possible to initiate the attack remotely. **Recommendations** For ProjectSend version r754, consider restricting access to the "process.php?do=zip download" endpoint to minimize the risk of exploitation. As a temporary workaround, avoid using the `client/file` argument in the affected endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** TP-Link TD-W8961ND (affected versions not specified) **Description** The issue allows for cross-site scripting (XSS) attacks via the hostname of a DHCP client. This can be exploited by changing a device's hostname to an XSS payload, which will then be executed when browsing the list of connected devices by hostname in the router's web interface. **Recommendations** For TP-Link TD-W8961ND devices, as a temporary workaround, consider restricting access to the web interface or avoiding browsing the list of connected devices by hostname until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.