CVE-2024-29514
https://notcve.org/view.php?id=CVE-2024-29514
File Upload vulnerability in lepton v.7.1.0 allows a remote authenticated attackers to execute arbitrary code via uploading a crafted PHP file. • https://github.com/zzq66/cve6 • CWE-434: Unrestricted Upload of File with Dangerous Type •
CVE-2024-31005
https://notcve.org/view.php?id=CVE-2024-31005
An issue in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the Ap4MdhdAtom.cpp,AP4_MdhdAtom::AP4_MdhdAtom,mp4fragment Un problema en Bento4 Bento v.1.6.0-641 permite a un atacante remoto ejecutar código arbitrario a través de Ap4MdhdAtom.cpp,AP4_MdhdAtom::AP4_MdhdAtom,mp4fragment • https://github.com/axiomatic-systems/Bento4/issues/941 https://github.com/zhangteng0526/CVE-information/blob/main/CVE-2024-31005 •
CVE-2024-22780
https://notcve.org/view.php?id=CVE-2024-22780
Cross Site Scripting vulnerability in CA17 TeamsACS v.1.0.1 allows a remote attacker to execute arbitrary code via a crafted script to the errmsg parameter. • http://ca17.com https://fuo.fi/CVE-2024-22780 https://github.com/CA17/TeamsACS •
CVE-2024-31004
https://notcve.org/view.php?id=CVE-2024-31004
An issue in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the Ap4StsdAtom.cpp,AP4_StsdAtom::AP4_StsdAtom,mp4fragment. • https://github.com/axiomatic-systems/Bento4/issues/941 https://github.com/zhangteng0526/CVE-information/blob/main/CVE-2024-31004 •
CVE-2024-29276
https://notcve.org/view.php?id=CVE-2024-29276
An issue was discovered in seeyonOA version 8, allows remote attackers to execute arbitrary code via the importProcess method in WorkFlowDesignerController.class component. • https://www.cnblogs.com/Rainy-Day/p/18061399 • CWE-94: Improper Control of Generation of Code ('Code Injection') •