R1Ckyz

**Name of the Vulnerable Software and Affected Versions** codelibs Fess versions prior to 15.5.2 **Description** Remote code injection is possible via the JSP File Handler component. The `update()` function within the file `org/codelibs/fess/app/web/admin/design/AdminDesignAction.java` fails to properly handle the `content` argument, allowing a remote attacker to inject malicious code. **Recommendations** Update to a version newer than 15.5.1. As a temporary workaround, restrict access to the `update()` function in the `AdminDesignAction.java` file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Ladybug versions prior to 3.0-20251107.114628 **Description** Ladybug is a tool that adds message-based debugging, unit, system, and regression testing to Java applications. The software contains the API endpoints `/iaf/ladybug/api/report/{storage}` and `/iaf/ladybug/api/report/upload`, which permit the upload of gzip-compressed XML files with user-controllable content. The system deserializes these XML files, potentially allowing an attacker to achieve Remote Code Execution (RCE) by submitting specially crafted XML payloads and gaining access to the target server. The vulnerable parameters are the content of the uploaded XML files. **Recommendations** Update to version 3.0-20251107.114628.

**Name of the Vulnerable Software and Affected Versions** lsfusion platform versions prior to 6.1 **Description** A flaw exists in the lsfusion platform that allows for path traversal. This issue affects the `UploadFileRequestHandler` function located in the file `platform/web-client/src/main/java/lsfusion/http/controller/file/UploadFileRequestHandler.java`. Manipulation of the `sid` argument can lead to unauthorized access. The attack can be carried out remotely, and the exploit is publicly available. **Recommendations** Versions prior to 6.1 should be updated. As a temporary workaround, consider restricting access to the `UploadFileRequestHandler` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** lsfusion platform versions prior to 6.1 **Description** A flaw exists in the lsfusion platform that allows for path traversal. This issue is related to the `unpackFile` function located in the file server/src/main/java/lsfusion/server/physics/dev/integration/external/to/file/ZipUtils.java. The manipulation of this function can lead to unauthorized access. This attack can be initiated remotely. **Recommendations** Update to a version of lsfusion platform greater than 6.1. As a temporary workaround, consider restricting access to the `unpackFile` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Dromara dataCompare versions up to 1.0.1 **Description** A flaw exists in Dromara dataCompare related to the JDBC URL Handler component. The issue resides within the `DbConfig` function of the file `src/main/java/com/vince/xq/project/system/dbconfig/service/DbconfigServiceImpl.java`. Manipulation of this function can lead to injection, and the attack can be launched remotely. An exploit for this issue has been published. **Recommendations** Versions prior to 1.0.1 are affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** wwwlike vlife versions up to 2.0.1 **Description** A security issue exists in wwwlike vlife that allows for path traversal. The issue is located in the `create` function within the `vlife-base/src/main/java/cn/wwwlike/sys/api/SysFileApi.java` file of the `VLifeApi` component. Manipulation of the `fileName` argument enables remote exploitation. The exploit for this issue has been publicly disclosed. **Recommendations** Versions prior to 2.0.1 should be updated. As a temporary workaround, consider restricting access to the `create` function within the `VLifeApi` component until a patch is available. Avoid using untrusted or user-supplied data for the `fileName` parameter in the affected API endpoint.

**Name of the Vulnerable Software and Affected Versions** lsfusion platform versions prior to 6.1 **Description** A flaw exists in the lsfusion platform that allows for path traversal. This issue affects the `DownloadFileRequestHandler` function located in the file web-client/src/main/java/lsfusion/http/controller/file/DownloadFileRequestHandler.java. Manipulation of the `Version` argument can lead to exploitation. The exploit has been publicly disclosed. **Recommendations** Update to a version beyond 6.1. As a temporary workaround, consider restricting access to the `DownloadFileRequestHandler` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Apache Dubbo versions 2.7.21 and prior versions Apache Dubbo versions 3.0.13 and prior versions Apache Dubbo versions 3.1.5 and prior versions **Description** A deserialization vulnerability existed when dubbo generic invoke, which could lead to malicious code execution. The issue is related to the mechanism of deserialization in the Apache Dubbo RPC framework, allowing a remote attacker to execute arbitrary code. **Recommendations** For Apache Dubbo versions 2.7.21 and prior versions, update to a version later than 2.7.21. For Apache Dubbo versions 3.0.13 and prior versions, update to a version later than 3.0.13. For Apache Dubbo versions 3.1.5 and prior versions, update to a version later than 3.1.5. As a temporary workaround, consider disabling the dubbo generic invoke functionality until a patch is available. Restrict access to the vulnerable RPC endpoint to minimize the risk of exploitation.