CVE-2024-35429

CVE-2024-35429 affects ZKTeco ZKBio CVSecurity 6.1.1. The issue is a Directory Traversal vulnerability in the eventRecord component that can lead to unauthorized disclosure of data (CVE details show Confidentiality impact High; no explicit exploit details in provided docs). No patch/version fix i...

CVE-2024-35432

ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Cross Site Scripting XSS via an Audio File. An authenticated user can injection malicious JavaScript code to trigger a Cross Site Scripting...