Yoko Kho

**Name of the Vulnerable Software and Affected Versions** Zabbix (affected versions not specified) **Description** The regular expression used for validating host and event action script input allows bypass of the validation check when multiline mode is enabled. Specifically, the use of anchors (`^` and `$`) in administrator-defined input validation can be circumvented by injecting a newline character. This allows authenticated users to inject and execute shell commands. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to 18 macOS versions prior to Sequoia 15 **Description** The issue was addressed with improved UI. Visiting a malicious website may lead to address bar spoofing. **Recommendations** For Safari versions prior to 18, update to Safari 18 to resolve the issue. For macOS versions prior to Sequoia 15, update to macOS Sequoia 15 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** WD Discovery versions prior to 5.0.589 **Description** The issue is related to a misconfiguration in the Node.js environment settings of WD Discovery, which could allow code execution by utilizing the `ELECTRON RUN AS NODE` environment variable. Any malicious application operating with standard user permissions can exploit this, enabling code execution within the WD Discovery application's context. The attack vector requires the victim to have the WD Discovery app installed on their device. **Recommendations** For versions prior to 5.0.589, update to version 5.0.589, which addresses this issue by disabling certain features and fuses in Electron. As a temporary workaround, consider restricting access to the `ELECTRON RUN AS NODE` environment variable to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** WatchGuard AuthPoint Password Manager for MacOS versions before 1.0.6 **Description** The issue is related to an Improper Neutralization of Special Elements used in a Command, also known as a 'Command Injection' vulnerability. This allows an adversary with local access to execute code under the context of the AuthPoint Password Manager application. **Recommendations** For versions before 1.0.6, upgrade to version 1.0.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the AuthPoint Password Manager application until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** Microsoft Edge for Android (Chromium-based) (affected versions not specified) **Description** The issue is related to errors in handling files, specifically cookies, which can allow a remote attacker to gain unauthorized access to protected information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Remote Desktop Manager versions 2023.3.9.3 and earlier **Description** The issue allows an attacker to execute code via the `DYLIB INSERT LIBRARIES` environment variable. This is a code injection problem in Remote Desktop Manager on macOS. **Recommendations** For Remote Desktop Manager versions 2023.3.9.3 and earlier, consider restricting the use of the `DYLIB INSERT LIBRARIES` environment variable to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Whale browser for iOS versions prior to 1.14.0 **Description** The issue is related to an inconsistent user interface that allows an attacker to obfuscate the address bar, potentially leading to address bar spoofing. **Recommendations** For Whale browser for iOS versions prior to 1.14.0, update to version 1.14.0 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to 13.1.2 macOS Big Sur versions prior to 11.0.1 **Description** An inconsistent user interface issue was addressed with improved state management. Visiting a malicious website may lead to address bar spoofing. **Recommendations** For Safari versions prior to 13.1.2, update to Safari 13.1.2 or later to resolve the issue. For macOS Big Sur versions prior to 11.0.1, update to macOS Big Sur 11.0.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Western Digital WD Discovery versions prior to 4.0.251.0 **Description** A malicious application running with standard user permissions could potentially execute code in the WD Discovery application's process through library injection by using DYLD environment variables. **Recommendations** For versions prior to 4.0.251.0, update to version 4.0.251.0 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Nextcloud Server versions prior to 9.0.54 Nextcloud Server versions prior to 10.0.1 ownCloud Server versions prior to 9.0.6 ownCloud Server versions prior to 9.1.2 **Description** The issue concerns content spoofing in the dav app, where the exception message displayed on the DAV endpoints, such as "/api/dav", contained partially user-controllable input. This could lead to a potential misrepresentation of information. **Recommendations** For Nextcloud Server versions prior to 9.0.54, update to version 9.0.54 or later. For Nextcloud Server versions prior to 10.0.1, update to version 10.0.1 or later. For ownCloud Server versions prior to 9.0.6, update to version 9.0.6 or later. For ownCloud Server versions prior to 9.1.2, update to version 9.1.2 or later.

**Name of the Vulnerable Software and Affected Versions** Apple iTunes versions prior to 12.4 **Description** The issue is related to an untrusted search path vulnerability in the installer. This vulnerability can be exploited by a local user to gain privileges via a Trojan horse DLL in the current working directory. **Recommendations** For Apple iTunes versions prior to 12.4, update to version 12.4 or later to resolve the issue. As a temporary workaround, consider restricting the execution of DLLs from untrusted sources in the current working directory until a patch is applied. Avoid using the installer in potentially compromised environments to minimize the risk of exploitation.