CVE-2024-50634

Watcharr (v1.43.0 and earlier) contains a vulnerability in a weak JWT token that enables privilege escalation and affects all functions requiring authentication. A crafted JWT token can compromise authentication and escalate privileges across the application. Affected component: JWT-based authent...

CVE-2024-48827

Summary: CVE-2024-48827 affects sbondCo Watcharr v1.43.0 and older. Multiple sources (NVD, Red Hat, OSV, CNNVD, CVE lists) describe a remote code execution and privilege escalation via the Change Password function. Public writeups/exploits (PacketStorm, Exploit-DB) show a reproducible RCE for Wat...