M3Ez

**Name of the Vulnerable Software and Affected Versions** Geo Controller versions prior to 8.9.9 **Description** An unauthenticated PHP Object Injection exists in the Geo Controller. This issue could potentially lead to Remote Code Execution (RCE), which is a method allowing an attacker to execute arbitrary commands on the target machine. **Recommendations** Update Geo Controller to a version newer than 8.9.8. Restrict access to the system to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Hash Form versions prior to 1.4.2 **Description** Unauthenticated PHP Object Injection occurs in the software. PHP Object Injection is a vulnerability that allows an attacker to inject malicious objects into the application, which can lead to remote code execution or other critical impacts. **Recommendations** Update to a version newer than 1.4.1.

**Name of the Vulnerable Software and Affected Versions** RegistrationMagic versions n/a through 6.0.7.6 **Description** A missing authorization flaw exists in Metagauss RegistrationMagic custom-registration-form-builder-with-submission-manager. This issue allows exploitation of incorrectly configured access control security levels. **Recommendations** Versions prior to 6.0.7.6 are affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Themeum Tutor LMS versions through 3.9.5 **Description** A missing authorization flaw exists in Themeum Tutor LMS, allowing exploitation of incorrectly configured access control security levels. The issue allows unauthorized access. **Recommendations** Update Themeum Tutor LMS to a version later than 3.9.5.