CVE-2024-11315

The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells...

CVE-2024-11315

creationtimestamp| type| source ---|---|--- 2024-11-18 06:53:29+00:00| seen| https://infosec.exchange/users/cve/statuses/113502637834127072 2024-11-18 09:01:16+00:00| seen| https://t.me/cvedetector/11293 2026-06-21 13:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mosijlrs4m2y...

CVE-2024-11315 TRCore DVC - Arbitrary File Upload through Path Traversal

The DVC from TRCore has a Path Traversal vulnerability and does not restrict the types of uploaded files. This allows unauthenticated remote attackers to upload arbitrary files to any directory, leading to arbitrary code execution by uploading webshells...

CVE-2020-11315

...

CVE-2020-11315

CVE-2020-11315 entry is rejected/not used; this candidate was in CNA pool and not assigned to issues.

CVE-2019-11315

...

CVE-2019-11315

CVE-2019-11315 is rejected and not used as an active vulnerability entry.

11315.com Cross Site Scripting vulnerability OBB-1357207

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2018-11315

The Local HTTP API in Radio Thermostat CT50 and CT80 1.04.84 and below products allows unauthorized access via a DNS rebinding attack. This can result in remote device temperature control, as demonstrated by a tstat theat request that accesses a device purchased in the Spring of 2018, and sets a...

CVE-2018-11315

CVE-2018-11315 affects Radio Thermostat CT50/CT80 Local HTTP API (firmware 1.04.84 and earlier). The vulnerability arises from unauthorized access enabled by DNS rebinding, enabling a remote attacker to issue commands via the Local HTTP API and, as described, potentially control device temperatur...