CVE-2024-2318

creationtimestamp| type| source ---|---|--- 2024-03-08 14:26:40+00:00| seen| https://t.me/ctinow/203336 2024-03-08 14:26:41+00:00| seen| https://t.me/ctinow/203337 2025-06-10 08:32:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17844...

CVE-2024-2318 ZKTeco ZKBio Media Service Port 9999 download path traversal

A vulnerability was found in ZKTeco ZKBio Media 2.0.0x642024-01-29-1028. It has been classified as problematic. Affected is an unknown function of the file /pro/common/download of the component Service Port 9999. The manipulation of the argument fileName with the input ../../../../zkbiomedia.sql...

CVE-2024-2318

CVE-2024-2318 affects ZKTeco ZKBio Media 2.0.0_x64_2024-01-29-1028. Affected is an unknown function in the /pro/common/download path on Service Port 9999. Manipulating the fileName parameter with ../../../../zkbio_media.sql results in a path traversal: '../filedir', enabling remote exploitation. ...