Rilshrink

**Name of the Vulnerable Software and Affected Versions** RomM versions 4.0.0-beta.3 and below **Description** RomM is a tool that allows users to manage their game collections. An authenticated arbitrary file write issue exists in the `/api/saves` endpoint. This can lead to Remote Code Execution. The vulnerability allows attackers to create or modify files at any filesystem location with user-supplied content. A user with viewer role or `Scope.ASSETS WRITE` permission or above is required to pass authentication checks. **Recommendations** Update to RomM version 4.0.0-beta.4.

**Name of the Vulnerable Software and Affected Versions** RomM versions prior to 3.10.3 RomM versions prior to 4.0.0-beta.3 **Description** RomM, a self-hosted rom manager and player, contains an authenticated path traversal issue in the `/api/raw` endpoint. This allows for the leakage of passwords and user data potentially stored on the system. The vulnerability affects systems running the latest version of RomM with multiple users, including unprivileged users. **Recommendations** Update to RomM version 3.10.3 or later. Update to RomM version 4.0.0-beta.3 or later.

**Name of the Vulnerable Software and Affected Versions** Triton versions prior to 3.8.4 **Description** The issue affects the Triton Minecraft plugin for Spigot and BungeeCord, allowing execution of commands on the spigot/bukkit console through the CustomPayload packet. When bungee mode is enabled in the config, the server broadcasts the 'triton:main' plugin channel, which can be used to send a payload packet containing a byte and a string, effectively allowing any spigot command to be executed. This could lead to elevation of privileges, such as making oneself a server operator, and extraction of other user information through phishing. The issue is particularly concerning for servers that use essentials, as commands like /geoip could be exploited. **Recommendations** For versions prior to 3.8.4, update to version 3.8.4 to resolve the issue. As a temporary workaround, consider disabling the bungee mode in the config to prevent the server from broadcasting the 'triton:main' plugin channel, thereby minimizing the risk of exploitation. Restrict access to the CustomPayload packet and the 'triton:main' plugin channel to minimize the risk of unauthorized command execution. Avoid using the `triton:main` plugin channel until the issue is resolved.