CVE-2024-35526

An issue in Daemon PTY Limited FarCry Core framework before 7.2.14 allows attackers to access sensitive information in the /facade directory...

CVE-2024-35526

An issue in Daemon PTY Limited FarCry Core framework before 7.2.14 allows attackers to access sensitive information in the /facade directory...

CVE-2024-35527

The Daemon PTY Limited FarCry Core framework (a ColdFusion language web application framework) is vulnerable to an arbitrary file upload vulnerability in the /fileupload/upload.cfm endpoint in versions prior to 7.2.14 . An attacker can exploit this by uploading a crafted .cfm file to achieve arbi...