CVE-2024-35429

Description

References

• mrojz/ZKT-Bio-CVSecurity · Exploit

More vulnerabilities in zkbio cvsecurity

• CVE-2025-45746CRITICAL 9.8In ZKT ZKBio CVSecurity 6.4.1_R an unauthenticated attacker can craft JWT token using the hardcoded secret to authenticate to the service co…
• CVE-2024-36526CRITICAL 9.8ZKTeco ZKBio CVSecurity v6.1.1 was discovered to contain a hardcoded cryptographic key.
• CVE-2024-35433HIGH 8.1ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Incorrect Access Control. An authenticated user, without the permissions of managing users, c…
• CVE-2024-35431HIGH 7.5ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via photoBase64. An unauthenticated user can download local files from th…
• CVE-2024-35428HIGH 7.1ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via BaseMediaFile. An authenticated user can delete local files from the …