Author: Angelo Barbosa

CVE-2024-3124 | fridgecow smartalarm 1.8.1 on Android Backup File androidmanifest.xml backup

A vulnerability classified as problematic has been found in fridgecow smartalarm 1.8.1 on Android. This affects an unknown part of the file androidmanifest.xml of the component Backup File Handler. The manipulation leads to exposure of backup file to an unauthorized control sphere. This vulnerability is uniquely identified as CVE-2024-3124. It is possible to launch the attack on the physical device. Furthermore, there is an exploit...

Read More

CVE-2024-31100 | Festi-Team Popup Cart Lite for WooCommerce Plugin up to 1.1 on WordPress cross-site request forgery

A vulnerability was found in Festi-Team Popup Cart Lite for WooCommerce Plugin up to 1.1 on WordPress. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. This vulnerability is known as CVE-2024-31100. The attack can be launched remotely. There is no exploit...

Read More

CVE-2024-27609 | Bonita up to 2023.2-u1 Administrator Panel cross site scripting

A vulnerability was found in Bonita up to 2023.2-u1 and classified as problematic. This issue affects some unknown processing of the component Administrator Panel. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2024-27609. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected...

Read More