Ricardo Silva

**Name of the Vulnerable Software and Affected Versions** CTT Expresso para WooCommerce plugin for WordPress versions up to and including 3.2.12 **Description** The issue concerns the exposure of sensitive information in the CTT Expresso para WooCommerce plugin for WordPress. This exposure occurs via the /wp-content/uploads/cepw directory, where generated .pdf and log files are publicly accessible. These files contain sensitive information such as sender and receiver names, phone numbers, physical addresses, and email addresses. **Recommendations** For versions up to and including 3.2.12, consider restricting access to the /wp-content/uploads/cepw directory to prevent public access to sensitive .pdf and log files until a patch is available. As a temporary workaround, avoid using the plugin until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** RedisBloom versions prior to 2.2.19 RedisBloom versions prior to 2.4.12 RedisBloom versions prior to 2.6.14 RedisBloom versions prior to 2.8.2 **Description** There is an integer overflow vulnerability in RedisBloom, a module used in Redis. This vulnerability allows an attacker, who is a Redis client with knowledge of the password, to allocate memory in the heap that is lesser than the required memory due to wraparound. As a result, read and write operations can be performed beyond the allocated memory, leading to information leaks and out-of-bounds writes. The integer overflow is located in the `CMS.INITBYDIM` command, which initializes a Count-Min Sketch to dimensions specified by the user. It accepts two values, `width` and `depth`, and uses them to allocate memory in `NewCMSketch()`. **Recommendations** For versions prior to 2.2.19, update to version 2.2.19 or later. For versions prior to 2.4.12, update to version 2.4.12 or later. For versions prior to 2.6.14, update to version 2.6.14 or later. For versions prior to 2.8.2, update to version 2.8.2 or later. As a temporary workaround, consider restricting access to the `CMS.INITBYDIM` command until a patch is available. Avoid using the `width` and `depth` parameters in the `CMS.INITBYDIM` command to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Janet versions prior to 1.22.0 **Description** The issue is related to the mishandling of arrays in Janet. **Recommendations** For versions prior to 1.22.0, update to version 1.22.0 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Zoom client for Linux versions prior to 2.0.115900.1201 **Description** The issue is related to a stack-based buffer overflow in the ZoomLauncher binary, which can be exploited by remote attackers to execute arbitrary code. This is achieved by leveraging the `zoommtg://` scheme handler. **Recommendations** For versions prior to 2.0.115900.1201, update to version 2.0.115900.1201 or later to resolve the issue. As a temporary workaround, consider restricting the use of the `zoommtg://` scheme handler until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Zoom client for Linux versions prior to 2.0.115900.1201 **Description** The issue concerns the ZoomLauncher binary in the Zoom client for Linux, which does not properly sanitize user input when constructing a shell command. This allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler. **Recommendations** For versions prior to 2.0.115900.1201, update to version 2.0.115900.1201 or later to resolve the issue. As a temporary workaround, consider restricting the use of the zoommtg:// scheme handler until a patch is applied.