Security Updates for Popular Software Applications

In a recent development, several software applications have been found vulnerable to various security threats, including Server-Side Request Forgery (SSRF), Prototype Pollution, and privilege escalation vulnerabilities. These vulnerabilities can potentially allow attackers to gain unauthorized access to systems, steal sensitive data, or inject malicious code.

One of the most critical vulnerabilities was discovered in Pypi calibreweb prior to version 0.6.16. This vulnerability, known as Server-Side Request Forgery (SSRF), allows an attacker to manipulate the request headers and inject arbitrary HTTP requests. The incomplete fix in the previous version made it vulnerable to exploitation.

Another vulnerability found is in the package bmoor before version 0.10.1. Due to missing sanitization in the set function, Prototype Pollution can occur. This means that an attacker can provide a malicious file to trigger this vulnerability and gain unauthorized access to the system.

Additionally, Alpine Touchpad Driver 10.3201.101.215 has been found vulnerable to DLL Injection. A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority, allowing attackers to execute arbitrary code with elevated privileges.

Advantech WISE-PaaS/OTA Server 3.0.9, Advantech SQ Manager Server 1.0.6, and Advantech DeviceOn/iService 1.1.7 have also been found vulnerable to privilege escalation vulnerabilities. A specially-crafted file can be replaced in the system to escalate privileges to NT SYSTEM authority, allowing attackers to gain unauthorized access to systems.

It is essential for users to update their software applications to the latest versions and keep them up-to-date to prevent exploitation of these vulnerabilities.

Calibre mac 3.24