Simone Quatrini

**Name of the Vulnerable Software and Affected Versions** iRedAdmin versions prior to 2.6 **Description** The issue is related to a Cross Site Scripting (XSS) vulnerability. This can be exploited via the `order name` parameter. The vulnerability allows an attacker to perform actions, view, or modify information within the application as the user clicking on the tampered link. **Recommendations** For versions prior to 2.6, update to version 2.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the `order name` parameter to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Akka HTTP versions 10.1.x through 10.1.14 Akka HTTP versions 10.2.x through 10.2.6 **Description** The issue allows a remote attacker to conduct a Denial of Service attack by sending a User-Agent header with deeply nested comments, causing stack exhaustion while parsing HTTP headers. **Recommendations** For Akka HTTP versions 10.1.x through 10.1.14, update to version 10.1.15 or later. For Akka HTTP versions 10.2.x through 10.2.6, update to version 10.2.7 or later.

**Name of the Vulnerable Software and Affected Versions** Cisco Vision Dynamic Signage Director (affected versions not specified) **Description** A vulnerability in the web-based management interface of Cisco Vision Dynamic Signage Director could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface on an affected device. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive, browser-based information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** jitsi-meet-prosody versions prior to 2.0.5963-1 **Description** The issue allows an attacker to circumvent conference moderation because `restrict room creation` is not set by default. This can be exploited in Jitsi Meet, potentially leading to unauthorized access or control over conferences. **Recommendations** For versions prior to 2.0.5963-1, update to version 2.0.5963-1 or later to ensure `restrict room creation` is set by default, preventing attackers from circumventing conference moderation.

**Name of the Vulnerable Software and Affected Versions** Snare Central versions prior to 7.4.5 **Description** The issue allows remote authenticated attackers to inject arbitrary OS commands. This is achieved via the `FORMNAS share` parameter in the ServerConf/DataManagement/DiskManager.php file. **Recommendations** For versions prior to 7.4.5, update to version 7.4.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the ServerConf/DataManagement/DiskManager.php file to minimize the risk of exploitation. Avoid using the `FORMNAS share` parameter in the affected API endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Snare Central versions prior to 7.4.5 **Description** A SQL injection issue allows remote authenticated attackers to execute arbitrary SQL commands via the "AgentConsole/UserGroupQuery.php" endpoint, specifically through the `ShowUser` parameter. **Recommendations** For versions prior to 7.4.5, update to version 7.4.5 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** X2Engine X2CRM versions prior to 5.0.9 **Description** The issue is related to an incomplete blacklist vulnerability in the FileUploadsFilter class. This allows remote authenticated users to execute arbitrary PHP code by uploading a file with a .pht extension. **Recommendations** For versions prior to 5.0.9, update to version 5.0.9 or later to resolve the issue. As a temporary workaround, consider restricting file uploads to prevent the execution of arbitrary PHP code.

**Name of the Vulnerable Software and Affected Versions** X2Engine X2CRM versions prior to 5.0.9 **Description** The issue allows remote attackers to inject arbitrary web script or HTML via multiple parameters in different files, including `version` in protected/views/admin/formEditor.php, `importId` in protected/views/admin/rollbackImport.php, `bc`, `fg`, `bgc`, or `font` in protected/views/site/listener.php, `Services[*]` in protected/components/views/webForm.php, `file` in protected/components/TranslationManager.php, `x2 key` in protected/tests/webscripts/x2WebTrackingTestPages/customWebLeadCaptureScriptTest.php, `id` in protected/modules/contacts/controllers/ContactsController.php, or `lastEventId` to index.php/profile/getEvents. **Recommendations** For versions prior to 5.0.9, update to version 5.0.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable parameters, such as `version`, `importId`, `bc`, `fg`, `bgc`, `font`, `Services[*]`, `file`, `x2 key`, `id`, and `lastEventId`, until a patch is available. Avoid using the vulnerable API endpoints, such as "index.php/profile/getEvents", with untrusted input until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** X2Engine X2CRM versions prior to 5.2 **Description** A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that create an administrative account via a crafted request to "index.php/users/create". **Recommendations** For versions prior to 5.2, update to version 5.2 or later to resolve the issue.