Rafael Pedrero

**Name of the Vulnerable Software and Affected Versions** Zervit's portable HTTP/web server (affected versions not specified) **Description** Remote denial of service can occur when a configuration reset request is made due to inadequate validation of user-supplied input. An attacker can send malicious requests to make the application stop responding. The application can be manually restarted. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** CivetWeb version 1.16 **Description** An unquoted search path issue exists due to the absence of quotes in the service configuration. This allows a local attacker to execute arbitrary code with elevated privileges by placing a malicious executable in a directory that is scanned before the intended application path 'C:Program FilesCivetWebCivetWeb.exe --'. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** LanHelper version 1.74 **Description** A local buffer overflow occurs when the application processes excessively long input strings. An attacker can trigger a denial of service condition, causing the application to crash, by pasting 6000 bytes of data into the `Message` text field within the Form Send Message feature. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** River Past Ringtone Converter version 2.7.6.1601 **Description** A local buffer overflow occurs when the application receives oversized input in activation fields. An attacker can trigger a denial of service condition, causing the application to crash, by pasting 300 bytes of data into the `Email` textbox and `Activation code` textarea within the Help menu's Activate dialog. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ASPRunner Professional version 6.0.766 **Description** A local buffer overflow occurs when an excessively long project name is provided during project creation. An attacker can trigger an application crash, leading to a denial of service, by entering 180 or more characters into the `Project name` field. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** TaskInfo version 8.2.0.280 **Description** A local buffer overflow occurs when the application processes oversized input in registration fields. An attacker can trigger a denial of service condition, causing the application to crash, by entering excessively long strings into the `New User Name` or `New Serial Number` textboxes within the registration dialog of the Help menu. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SpotAuditor version 3.6.7 **Description** A local buffer overflow exists in the Base64 Password Decoder component. An attacker can cause the application to crash, resulting in a denial of service, by providing an oversized Base64 string through the decoder interface. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** a-Mac Address Change version 5.4 **Description** A local buffer overflow occurs when the application processes oversized input in the registration form. A local attacker can trigger a denial of service crash by entering 212 bytes of data into the `Your Name`, `Your Company`, or `Register Code` fields and clicking the Register button. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Remote Process Explorer version 1.0.0.16 **Description** A local buffer overflow occurs when a crafted payload is sent to the Add Computer dialog. An attacker can paste a malicious string into the computer name textbox, which triggers a crash upon connecting to the added computer. This process overwrites the SEH (Structured Exception Handling) chain—a mechanism used to handle software errors—and corrupts exception handlers, resulting in a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Anon Proxy Server version 0.104 **Description** A Reflected Cross-Site Scripting (XSS) issue exists in Anon Proxy Server. This allows an attacker to execute JavaScript code in a victim’s browser through a malicious URL. This could lead to the theft of sensitive user data, such as session cookies, or actions performed on behalf of the user. The issue affects the `port` and `proxyPort` parameters in the '/anon.php' endpoint. **Recommendations** Update to a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions Anon Proxy Server version 0.104 Description A Reflected Cross-Site Scripting (XSS) vulnerability exists in Anon Proxy Server version 0.104. This allows an attacker to execute JavaScript code in a victim's browser by sending a malicious URL. This can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user. The vulnerability affects the `host` parameter in the '/diagconnect.php' API endpoint. Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, sanitize the `host` parameter in the '/diagconnect.php' endpoint to prevent the injection of malicious JavaScript code.

Name of the Vulnerable Software and Affected Versions Anon Proxy Server version 0.104 Description A Reflected Cross-Site Scripting (XSS) vulnerability exists that allows an attacker to execute JavaScript code in a victim's browser by sending a malicious URL. This can be used to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user. The vulnerability affects the `host` parameter in the '/diagdns.php' API endpoint. Recommendations Update to a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Small HTTP Server version 3.06.36 **Description** The issue involves an unquoted service path in Small HTTP Server. Specifically, the vulnerability affects the executable located at 'C:Program Files (x86)shttps mghttp.exe service'. This misconfiguration allows a local attacker to place a malicious executable with the same name in a directory with higher priority, causing the service to execute the malicious file instead of the legitimate one. Exploiting this flaw could lead to arbitrary code execution, unauthorized system access, or service disruption. The vulnerable path is associated with the service configuration. **Recommendations** Ensure the service path is properly quoted. Restrict physical and network access to the system.

**Name of the Vulnerable Software and Affected Versions** Small HTTP Server version 3.06.36 **Description** An authenticated path traversal issue exists in the Small HTTP Server service. A remote user can bypass the intended restrictions of the `SecurityManager` and potentially display any file if they have the appropriate permissions outside the configured document root. The vulnerable path is '/'. **Recommendations** Update to a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Sync Breeze Enterprise Server versions 10.4.18 Disk Pulse Enterprise versions 10.4.18 **Description** A cross-site request forgery (CSRF) issue exists in the software. An authenticated user can potentially cause another user to perform unintended actions within their logged-in session. This is due to missing CSRF token implementation. Exploitation involves a POST request to the `/setup login?sid=` endpoint, impacting the `username`, `password`, and `cpassword` parameters. **Recommendations** Apply updates to versions beyond 10.4.18.

**Name of the Vulnerable Software and Affected Versions** Sync Breeze Enterprise Server versions 10.4.18 Disk Pulse Enterprise versions 10.4.18 **Description** A cross-site request forgery (CSRF) issue exists in Sync Breeze Enterprise Server and Disk Pulse Enterprise. An authenticated user can potentially cause another user to perform unintended actions within their logged-in session. This is due to missing CSRF token implementation. Exploitation involves sending a POST request to the `/delete command?sid=` endpoint, utilizing the `cid` parameter to delete commands individually. **Recommendations** Update Sync Breeze Enterprise Server to a version with a fix for this vulnerability. Update Disk Pulse Enterprise to a version with a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Sync Breeze Enterprise Server versions 10.4.18 Disk Pulse Enterprise versions 10.4.18 **Description** A cross-site request forgery (CSRF) issue exists in Sync Breeze Enterprise Server and Disk Pulse Enterprise. An authenticated user can potentially cause another user to perform unintended actions. This is due to missing CSRF token implementation. An attacker can leverage a POST request to the ''/delete all commands?sid='' endpoint to delete all commands. **Recommendations** Update Sync Breeze Enterprise Server to a version with a fix for this vulnerability. Update Disk Pulse Enterprise to a version with a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Sync Breeze Enterprise Server versions 10.4.18 Disk Pulse Enterprise versions 10.4.18 **Description** A cross-site request forgery (CSRF) issue exists in Sync Breeze Enterprise Server and Disk Pulse Enterprise. An authenticated user can potentially cause another user to perform unintended actions within their logged-in session. This is due to the absence of appropriate CSRF token implementation. Exploitation involves sending a POST request to the `/rename command?sid=` API endpoint, specifically manipulating the `command name` parameter. **Recommendations** Update Sync Breeze Enterprise Server to a version with a fix for this vulnerability. Update Disk Pulse Enterprise to a version with a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Sync Breeze Enterprise Server versions 10.4.18 Disk Pulse Enterprise versions 10.4.18 **Description** Sync Breeze Enterprise Server version 10.4.18 and Disk Pulse Enterprise version 10.4.18 are affected by a remote denial-of-service (DoS) issue within the configuration restore functionality. The root cause is inadequate validation of user-provided data during the configuration restore process. An attacker can exploit this by sending crafted requests to modify the configuration file, leading to application unresponsiveness. A successful attack can corrupt the configuration, preventing service recovery and necessitating a complete reinstallation. **Recommendations** Update Sync Breeze Enterprise Server to a version beyond 10.4.18. Update Disk Pulse Enterprise to a version beyond 10.4.18.

**Name of the Vulnerable Software and Affected Versions** Sync Breeze Enterprise Server versions 10.4.18 Disk Pulse Enterprise versions 10.4.18 **Description** Sync Breeze Enterprise Server and Disk Pulse Enterprise are affected by a persistent authenticated Cross-Site Scripting (XSS) issue. An attacker can potentially send malicious content to an authenticated user, potentially gaining access to session information. This is due to inadequate validation of user-supplied data. The vulnerability is present in the `/add command?sid=` API endpoint, specifically affecting the `command name` parameter. **Recommendations** Update Sync Breeze Enterprise to a version beyond 10.4.18. Update Disk Pulse Enterprise to a version beyond 10.4.18.