CVE-2024-1006

A vulnerability was found in Shanxi Diankeyun Technology NODERP up to 6.0.2 and classified as critical. This issue affects some unknown processing of the file application/index/common.php of the component Cookie Handler. The manipulation of the argument Nod_User_Id/Nod_User_Token leads to improper authentication. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-252275. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-287

• https://note.zhaoj.in/share/vWuVlU2eg79tBroken Link
• https://vuldb.com/?ctiid.252275Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.252275Third Party Advisory, VDB Entry
• https://note.zhaoj.in/share/vWuVlU2eg79tBroken Link
• https://vuldb.com/?ctiid.252275Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.252275Third Party Advisory, VDB Entry

Published

Jan 29, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-10050The Elementor Header & Footer Builder plugin for WordPress i…4.3
• CVE-2024-10051Realchar version v0.0.4 is vulnerable to an unauthenticated …7.5
• CVE-2024-10054The Happyforms WordPress plugin before 1.26.3 does not sani…4.8
• CVE-2024-10055The Click to Chat – WP Support All-in-One Floating Widget pl…5.4
• CVE-2024-10056The Contact Form Builder by vcita plugin for WordPress is vu…6.4
• CVE-2024-10057The RSS Feed Widget plugin for WordPress is vulnerable to St…5.4
• CVE-2024-10068A vulnerability was found in OpenSight Software FlashFXP 5.4…8.5
• CVE-2024-10069A vulnerability was found in ESAFENET CDG 5. It has been rat…8.8
• CVE-2024-1007A vulnerability was found in SourceCodester Employee Managem…7.2
• CVE-2024-10070A vulnerability classified as critical has been found in ESA…8.8
• CVE-2024-10071A vulnerability classified as critical was found in ESAFENET…8.8
• CVE-2024-10072A vulnerability, which was classified as critical, has been …8.8