CVE-2024-35526

An issue in Daemon PTY Limited FarCry Core framework before 7.2.14 allows attackers to access sensitive information in the /facade directory...

CVE-2024-35527

The FarCry Core framework (a ColdFusion language web application framework) by Daemon PTY Limited is vulnerable to arbitrary code execution in versions prior to 7.2.14 . The root cause is an arbitrary file upload vulnerability located at the /fileupload/upload.cfm endpoint, which allows an attack...

CVE-2024-35526

An issue in Daemon PTY Limited FarCry Core framework before 7.2.14 allows attackers to access sensitive information in the /facade directory...