CVE-2024-9150

creationtimestamp| type| source ---|---|--- 2025-02-21 12:18:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4883 2025-02-21 15:26:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lip4jh67j52r 2025-02-21 15:35:56+00:00| seen|...

CVE-2024-9150 Code Injection in Wyn Enterprise

Report generation functionality in Wyn Enterprise allows for code inclusion, but not sufficiently limits what code might be included. An attacker is able use a low privileges account in order to abuse this functionality and execute malicious code, load DLL libraries and executing OS commands on a...

CVE-2024-9150

CVE-2024-9150 affects Wyn Enterprise: the report generation feature allows code inclusion beyond safe bounds, enabling a low-privilege user to abuse the functionality to execute malicious code, load DLLs, and run OS commands on a high-privilege host. The vulnerability arises from insufficient inp...