Veille CVE

Vendredi 24 avril 2026

4 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 0 Non évaluée 4 Tri : plus récentes
  1. CVE-2025-29635 – Non évaluée Exploitée

    D-Link DIR-823X

    D-Link DIR-823X Command Injection Vulnerability — D-Link DIR-823X contains a command injection vulnerability that allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/set_prohibiting via the corresponding function. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

  2. CVE-2024-7399 – Non évaluée Exploitée

    Samsung MagicINFO 9 Server

    Samsung MagicINFO 9 Server Path Traversal Vulnerability — Samsung MagicINFO 9 Server contains a path traversal vulnerability that could allow an attacker to write arbitrary files as system authority.

  3. CVE-2024-57728 – Non évaluée Exploitée Rançongiciel

    SimpleHelp SimpleHelp

    SimpleHelp Path Traversal Vulnerability — SimpleHelp contains a path traversal vulnerability that allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.e. zip slip). This can be exploited to execute arbitrary code on the host in the context of the SimpleHelp server user.

  4. CVE-2024-57726 – Non évaluée Exploitée Rançongiciel

    SimpleHelp SimpleHelp

    SimpleHelp Missing Authorization Vulnerability — SimpleHelp contains a missing authorization vulnerability that could allow low-privileged technicians to create API keys with excessive permissions. These API keys can be used to escalate privileges to the server admin role.