Steve

**Name of the Vulnerable Software and Affected Versions** Wireshark versions 1.2.0 through 1.2.2 **Description** The issue allows remote attackers to cause a denial of service, resulting in an application crash, via a file that records a malformed packet trace. This is related to the Paltalk dissector in Wireshark. **Recommendations** For Wireshark versions 1.2.0 through 1.2.2, consider updating to a newer version to resolve the issue. As a temporary workaround, avoid using the Paltalk dissector until a patch is available.

**Name of the Vulnerable Software and Affected Versions** dnsmasq versions prior to 2.50 **Description** The issue allows remote attackers to cause a denial of service, resulting in a daemon crash due to a NULL pointer dereference. This can be achieved by sending a TFTP read request with a malformed `blksize` option. The vulnerability can be exploited when the `--enable-tftp` option is used. **Recommendations** For versions prior to 2.50, update to version 2.50 or later to resolve the issue. As a temporary workaround, consider disabling the `tftp request` function or restricting the use of the TFTP service until a patch is available. Avoid using the `blksize` option in TFTP read requests until the issue is resolved.

Name of the Vulnerable Software and Affected Versions: PhpXmail versions 0.7 through 1.1 Description: The issue concerns the handling of large passwords in the class.xmail.php file, which can prevent an error message from being returned. This allows remote attackers to bypass authentication and gain unauthorized access. Recommendations: For PhpXmail versions 0.7 through 1.1, consider restricting access to the authentication mechanism until a fix is available. As a temporary workaround, limit the password length to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** PHPKIT versions 1.6.03 through 1.6.1 **Description** A cross-site scripting (XSS) issue allows remote attackers to execute arbitrary web script. The issue is related to the `img` parameter in the popup.php file. **Recommendations** For PHPKIT versions 1.6.03 through 1.6.1, consider disabling the img parameter in the popup.php file until a patch is available. Restrict access to the popup.php file to minimize the risk of exploitation. Avoid using the `img` parameter in the affected popup.php file until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** PHPKIT versions 1.6.03 through 1.6.1 **Description** The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `id` parameter in the include.php file. **Recommendations** For PHPKIT versions 1.6.03 through 1.6.1, update to a version that contains a fix for this issue to prevent remote attackers from executing arbitrary SQL commands.