DirectCyber — recent CVEs https://vulnogram.org/ Most recent CVEs assigned by DirectCyber (directcyber). https://vulnogram.org/seaview/icons/directcyber.png DirectCyber — recent CVEs https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT CVE-2024-4040 · 9.8 CRITICAL 💥 🌩️ — Unauthenticated arbitrary file read and remote code execution in CrushFTP https://vulnogram.org/CVE-2024-4040 https://vulnogram.org/CVE-2024-4040 A server side template injection vulnerability in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows unauthenticated remote attackers to read files from the filesystem outside of the VFS Sandbox, bypass authentication to gain a… Critical Known Exploited Network Exploitable Mon, 22 Apr 2024 19:21:46 GMT CVE-2024-3772 · 5.9 MEDIUM 🌩️ — Regular expression denial of service in Pydantic < 2.4.0 https://vulnogram.org/CVE-2024-3772 https://vulnogram.org/CVE-2024-3772 Regular expression denial of service in Pydanic < 2.4.0, < 1.10.13 allows remote attackers to cause denial of service via a crafted email string. Medium Network Exploitable Mon, 15 Apr 2024 01:42:07 GMT CVE-2024-29844 · 9.8 CRITICAL 🌩️ — Default credentials on web interface of Evolution Controller Versions allows attackers to login and perform administrative functions https://vulnogram.org/CVE-2024-29844 https://vulnogram.org/CVE-2024-29844 Default credentials on the Web Interface of Evolution Controller 2.x allows anyone to log in to the server directly to perform administrative functions. Upon installation or upon first login, the application does not ask the user to change the passwo… Critical Network Exploitable Sun, 14 Apr 2024 23:48:26 GMT CVE-2024-29843 · 7.5 HIGH 🌩️ — Broken Access control on MOBILE_GET_USERS_LIST in Evolution Controller allows unauthenticated user enumeration https://vulnogram.org/CVE-2024-29843 https://vulnogram.org/CVE-2024-29843 The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on MOBILE_GET_USERS_LIST, allowing for an unauthenticated attacker to enumerate all users and their access levels High Network Exploitable Sun, 14 Apr 2024 23:48:21 GMT CVE-2024-29842 · 7.5 HIGH 🌩️ — Broken Access control on DESKTOP_EDIT_USER_GET_ABACARD_FIELDS in Evolution Controller allows unauthenticated attackers to retrieve ABACARD values https://vulnogram.org/CVE-2024-29842 https://vulnogram.org/CVE-2024-29842 The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on DESKTOP_EDIT_USER_GET_ABACARD_FIELDS, allowing for an unauthenticated attacker to return the abacard field of any user High Network Exploitable Sun, 14 Apr 2024 23:48:17 GMT CVE-2024-29841 · 7.5 HIGH 🌩️ — Broken Access control on DESKTOP_EDIT_USER_GET_KEYS_FIELDS in Evolution Controller allows unauthenticated attackers to retrieve keys values https://vulnogram.org/CVE-2024-29841 https://vulnogram.org/CVE-2024-29841 The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on DESKTOP_EDIT_USER_GET_KEYS_FIELDS, allowing for an unauthenticated attacker to return the keys value of any user High Network Exploitable Sun, 14 Apr 2024 23:48:12 GMT CVE-2024-29840 · 7.5 HIGH 🌩️ — Broken Access control on DESKTOP_EDIT_USER_GET_PIN_FIELDS in Evolution Controller allows unauthenticated attackers to retrieve PIN field values https://vulnogram.org/CVE-2024-29840 https://vulnogram.org/CVE-2024-29840 The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on DESKTOP_EDIT_USER_GET_PIN_FIELDS, allowing for an unauthenticated attacker to return the pin value of any user High Network Exploitable Sun, 14 Apr 2024 23:48:05 GMT CVE-2024-29839 · 7.5 HIGH 🌩️ — Broken Access control on DESKTOP_EDIT_USER_GET_CARD in Evolution Controller allows unauthenticated attackers to retrieve card data values. https://vulnogram.org/CVE-2024-29839 https://vulnogram.org/CVE-2024-29839 The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control on DESKTOP_EDIT_USER_GET_CARD, allowing for an unauthenticated attacker to return the card value data of any user High Network Exploitable Sun, 14 Apr 2024 23:48:00 GMT CVE-2024-29838 · 7.5 HIGH 🌩️ — Unsanitised variable on DAL_ADD in Evolution Controller causes application level denial of service and crash https://vulnogram.org/CVE-2024-29838 https://vulnogram.org/CVE-2024-29838 The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below does not proper sanitize user input, allowing for an unauthenticated attacker to crash the controller software High Network Exploitable Sun, 14 Apr 2024 23:47:53 GMT CVE-2024-29837 · 8.8 HIGH 🌩️ — Poor session management in Evolution Controller allows administrator functionality for unauthenticated connections https://vulnogram.org/CVE-2024-29837 https://vulnogram.org/CVE-2024-29837 The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below uses poor session management, allowing for an unauthenticated attacker to access administrator functionality if any other user is already signed in. High Network Exploitable Sun, 14 Apr 2024 23:47:48 GMT CVE-2024-29836 · 9.8 CRITICAL 🌩️ — Broken Authentication on USER_CHANGE in Evolution Controller allows unauthenticated account creation and takeover https://vulnogram.org/CVE-2024-29836 https://vulnogram.org/CVE-2024-29836 The Web interface of Evolution Controller Versions 2.04.560.31.03.2024 and below contains poorly configured access control, allowing for an unauthenticated attacker to update and add user profiles within the application, and gain full access of the s… Critical Network Exploitable Sun, 14 Apr 2024 23:47:13 GMT