Warisjeet Singh

**Name of the Vulnerable Software and Affected Versions** Joomla! CMS versions 4.0.0 through 5.4.6 Joomla! CMS versions 6.0.0 through 6.1.1 **Description** Improper access control in the `com modules` component allows users to display a list of modules in the frontend that they should not be able to see. **Recommendations** Update Joomla! CMS versions 4.0.0 through 5.4.6 to version 5.4.7. Update Joomla! CMS versions 6.0.0 through 6.1.1 to version 6.1.2.

**Name of the Vulnerable Software and Affected Versions** Exim versions 4.88 through 4.99.3 **Description** In certain proxy configurations where `SUPPORT PROXY` is enabled, the PROXY protocol parser mishandles short payloads before SMTP authentication. This leads to a pre-authentication information disclosure where uninitialized stack memory values, specifically 16 bytes containing live userspace virtual address (VA) pointers, are leaked to the client within the IPv6 address information of the SMTP Hello header. This leak can be used as a primitive to defeat Address Space Layout Randomization (ASLR), potentially facilitating the exploitation of other vulnerabilities by revealing the memory layout. **Recommendations** Update Exim to version 4.99.4. As a temporary mitigation, disable the `SUPPORT PROXY` option or restrict the use of the PROXY protocol if not required.

**Name of the Vulnerable Software and Affected Versions** Gemini iOS (affected versions not specified) **Description** A flaw exists in Gemini iOS where sharing a conversation snippet inadvertently shares the entire conversation history through a publicly accessible link. This occurs because the sharing mechanism does not limit the content to the selected snippet, exposing the complete conversation to anyone with the link. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.