Neurogenesia

**Name of the Vulnerable Software and Affected Versions** JM-DATA ONU JF511-TV version 1.0.67 **Description** The JM-DATA ONU JF511-TV device version 1.0.67 is susceptible to authenticated stored cross-site scripting (XSS) attacks. An attacker gaining authenticated access can inject malicious scripts. These scripts will then execute in the browsers of other users when they access the compromised content. **Recommendations** Update the JM-DATA ONU JF511-TV to a newer version that addresses this issue.

**Name of the Vulnerable Software and Affected Versions** JM-DATA ONU JF511-TV version 1.0.67 **Description** The JM-DATA ONU JF511-TV device version 1.0.67 utilizes default credentials, enabling attackers to obtain unauthorized access with administrative privileges. This access allows attackers to fully compromise the device. **Recommendations** Change the default credentials on the JM-DATA ONU JF511-TV version 1.0.67 device.

**Name of the Vulnerable Software and Affected Versions** JM-DATA ONU JF511-TV version 1.0.67 **Description** The JM-DATA ONU JF511-TV device version 1.0.67 is susceptible to cross-site request forgery (CSRF) attacks. Successful exploitation allows an attacker to execute administrative actions on behalf of authenticated users without their awareness or permission. **Recommendations** Apply the latest security patch or update to a newer, non-vulnerable version of the JM-DATA ONU JF511-TV device.

**Name of the Vulnerable Software and Affected Versions** NLB mKlik Macedonia version 3.3.12 **Description** The software contains a SQL injection issue in the international transfer parameters. This allows attackers to manipulate database queries by injecting arbitrary SQL code through unsanitized input. Successful exploitation could lead to the disclosure of sensitive information from the mobile banking application. The vulnerable parameters are used during international transfers. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.