M4Yfly

Name of the Vulnerable Software and Affected Versions: Waitress versions prior to 3.0.1 Description: The issue is related to a race condition in the Waitress WSGI server for Python, which can be exploited by a remote client sending a request that is exactly `recv bytes` (defaults to 8192) long, followed by a secondary request using HTTP pipelining. When request lookahead is enabled, it is possible to process and receive the first request, start sending the error message back to the client while reading the next request and queueing it. This allows the secondary request to be serviced by the worker thread while the connection should be closed. Recommendations: For versions prior to 3.0.1, update to Waitress 3.0.1 to fix the race condition. As a temporary workaround, disable `channel request lookahead`, which is set to 0 by default, disabling this feature.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 12.7.4 macOS versions prior to 13.6.5 macOS versions prior to 14.4 **Description** The issue was addressed with improved memory handling. Processing a file may lead to unexpected app termination or arbitrary code execution. **Recommendations** For versions prior to 12.7.4, update to macOS Monterey 12.7.4 to resolve the issue. For versions prior to 13.6.5, update to macOS Ventura 13.6.5 to resolve the issue. For versions prior to 14.4, update to macOS Sonoma 14.4 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Microsoft Exchange Server (affected versions not specified) **Description** The issue is related to deficiencies in the deserialization mechanism of Microsoft Exchange Server. It allows a remote attacker to execute arbitrary code, potentially impacting the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Exchange Server (affected versions not specified) **Description** The issue is related to insufficient input validation in Microsoft Exchange Server, allowing a remote attacker to execute arbitrary code. This can affect the system and potentially lead to further exploitation. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Exchange Server (affected versions not specified) **Description** The issue is related to insufficient input validation in Microsoft Exchange Server, allowing a remote attacker to execute arbitrary code. This can affect the system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: mblog version 3.5 Description: The issue is related to a Cross Site Scripting (XSS) vulnerability. It can be exploited via the `signature` field in the `/settings/profile` API endpoint. Recommendations: For mblog version 3.5, consider disabling the `signature` field in the `/settings/profile` endpoint until a patch is available. Restrict access to this endpoint to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: FlyCMS version 20190503 Description: A Server Side Request Forgery (SSRF) issue exists in the saveUrlAs function within ImagesService.java. This allows for potential exploitation. Recommendations: For FlyCMS version 20190503, consider disabling the saveUrlAs function in ImagesService.java as a temporary workaround until a patch is available. Restrict access to the ImagesService.java module to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: mblog version 3.5 Description: A Cross Site Scripting (XSS) issue exists, allowing exploitation via the post header field to the "/post/editing" API endpoint. Recommendations: For mblog version 3.5, update the software to a version that includes a fix for this issue, or as a temporary workaround, consider restricting access to the "/post/editing" endpoint to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: mblog version 3.5 Description: The issue is related to a Cross Site Scripting (XSS) vulnerability. It can be exploited via the `nickname` field to the "/settings/profile" API endpoint. Recommendations: For mblog version 3.5, update the software to a version that includes a fix for this issue, or as a temporary workaround, consider validating and sanitizing user input for the `nickname` field to prevent XSS attacks.

Name of the Vulnerable Software and Affected Versions: mblog version 3.5 Description: A Cross Site Scripting (XSS) issue exists, allowing attackers to inject malicious scripts via the post content field to the "/post/editing" API endpoint. Recommendations: For mblog version 3.5, update the post content field validation to prevent XSS attacks, and ensure proper input sanitization for the "/post/editing" endpoint. As a temporary workaround, consider restricting access to the post content field until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Waimai Super Cms version 20150505 **Description** An issue was discovered that allows blind SQL Injection via the `id[0]` parameter to the "/product" URI. This affects the ProductAction.class.php file in the web/Lib/Action directory. **Recommendations** For Waimai Super Cms version 20150505, consider restricting access to the "/product" URI or disabling the `id[0]` parameter in the ProductAction.class.php file until a fix is available. Avoid using the `id[0]` parameter in the affected API endpoint until the issue is resolved.