CVE-2024-24026

CVE-2024-24026 describes an arbitrary file upload vulnerability in Novel-Plus prior to and including v4.3.0-RC1. The issue exists in the function uploadImg() of SysUserController (com.java2nb.system.controller.SysUserController). An attacker can pass a specially crafted filename parameter to trig...

CVE-2024-25189

The CVE concerns libjwt: 1.15.3 uses strcmp (not constant time) to verify authentication, enabling a timing side‑channel bypass. Connected sources confirm this is a legitimate vulnerability with high impact (CVE-2024-25189) and note Debian LTS advisories and Debian/DLA entries recommending an upg...

CVE-2024-24202

CVE-2024-24202 refers to an arbitrary file upload vulnerability in ZenTao components (Community Edition v18.10, Biz v8.10, Max v4.10) exposed at /upgrade/control.php. The root cause is a crafted .txt file upload that allows remote code execution. Affected products are explicitly ZenTao Community ...

CVE-2024-23764

CVE-2024-23764 affects WithSecure Client Security 15+, WithSecure Server Security 15+, WithSecure Email and Server Security 15+, and WithSecure Elements Endpoint Protection 17+. Public descriptions indicate a Local Privilege Escalation vulnerability; the specific root cause is not detailed in the...

CVE-2024-24023

Summary (CVE-2024-24023) A SQL injection vulnerability affects Novel-Plus v4.3.0-RC1 and earlier. The issue allows an attacker to exploit the API endpoint /novel/bookContent/list by passing specially crafted offset, limit, and sort parameters, enabling untrusted SQL execution with high impact (co...

CVE-2024-22836

CVE-2024-22836 describes an OS command injection in Akaunting ≤ 3.1.3 where an attacker can manipulate the company locale during app installation to execute system commands on the hosting server. Public exploits and PoCs exist (e.g., PacketStorm/Exploit-DB entries) demonstrating remote code execu...

CVE-2024-25190

CVE-2024-25190 affects l8w8jwt v2.2.1, where authentication is verified using memcmp, which is not constant time. This creates a timing-side-channel vulnerability that can lead to authentication bypass. Several sources (Red Hat, NVD, OSV, CVE lists, and vendor/problem reports) describe the issue ...

CVE-2024-24115

CVE-2024-24115 concerns a stored XSS vulnerability in the Edit Page feature of Cotonti CMS v0.9.24. According to the documents, authenticated attackers can inject and execute arbitrary web scripts or HTML via a crafted payload. The vulnerability is described consistently across multiple sources; ...

CVE-2024-24216

CVE-2024-24216 affects Zentao versions 18.0–18.10, where a remote code execution is possible via the checkConnection method in /app/zentao/module/repo/model.php. Root cause is associated with the checkConnection functionality exposed by that endpoint; the vulnerability has a high impact on confid...

CVE-2024-24091

CVE-2024-24091 affects Yealink Meeting Server prior to version 26.0.0.66, where an OS command injection vulnerability exists through the file upload interface. This is documented across multiple sources (e.g., Red Hat, CVE lists, PT Security) with the root cause described as command injection via...

CVE-2024-24113

CVE-2024-24113 (XXL-JOB) : A Server-Side Request Forgery (SSRF) in xxl-job allows low-privilege users to control the executor and potentially achieve Remote Code Execution. Affected: xxl-job versions prior to 2.4.1 (≤ 2.4.1). Root cause cited in Veracode report: improper validation of user-suppli...

CVE-2023-50061

PrestaShop Op'art Easy Redirect module, versions 1.3.8–1.3.12, is vulnerable to SQL Injection through Oparteasyredirect::hookActionDispatcher(). The root cause is an unsafe handling inside that hook, allowing an attacker to execute arbitrary SQL. The vulnerability is described as critical with po...

CVE-2024-23660

The CVE-2024-23660 entry concerns Binance Trust Wallet for iOS (version 0.0.4). The root cause is misuse of the trezor-crypto library, causing mnemonic words to be generated with device time as the sole entropy source. This leads to predictable mnemonics and potential theft of funds, with real-wo...

CVE-2024-24496

The issue is in Daily Habit Tracker v1.0, where home.php , add-tracker.php , delete-tracker.php , and update-tracker.php suffer from broken access control, enabling unauthenticated manipulation of trackers. A remote attacker can access/modify trackers via these components, per multiple sources (R...

CVE-2024-24321

CVE-2024-24321 affects D-Link DIR-816A2 v1.10CNB05. A vulnerability in the sub_42DA54 function’s wizardstep4_ssid_2 parameter enables remote code execution, exploitable over the network with no user interaction. Reported impact is arbitrary code execution, with high confidentiality, integrity, an...

CVE-2024-24393

CVE-2024-24393 : Pichome v1.1.01 contains an index.php file upload vulnerability that allows a remote attacker to execute arbitrary code via a crafted POST request. Severity is high (CVSS v3.1: 9.8, Network, No user interaction). Connected sources corroborate a remote code execution impact from a...

CVE-2023-25365

October CMS 3.2.0 is affected by a Cross Site Scripting (XSS) vulnerability that can permit a local attacker to execute arbitrary code via the .mp3 file type. The issue appears to reside in file handling/upload logic, enabling code execution through specially crafted MP3 uploads. Public reference...

CVE-2024-23756

The CVE-2024-23756 issue affects Plone official Docker version 5.2.13 (5221) where HTTP PUT and DELETE methods are enabled, allowing unauthenticated attackers to upload or delete files on the server. Descriptions across multiple sources corroborate that the vulnerability enables dangerous actions...

CVE-2024-24025

CVE-2024-24025 affects Novel-Plus versions 4.3.0-RC1 and earlier, where the vulnerability lives in the FileController.upload() function. An attacker can craft the filename parameter to trigger arbitrary file downloads, exposing sensitive data. The connected PT-2024-20242 entry corroborates an arb...

CVE-2024-24024

Novel-Plus v4.3.0-RC1 and earlier versions are affected by an arbitrary file download vulnerability in com.java2nb.common.controller.FileController:fileDownload(). An attacker can supply specially crafted filePath and fileName parameters to cause unauthorized access to arbitrary files. The issue ...