CVE-2024-11306

A vulnerability, which was classified as critical, has been found in Altenergy Power Control Software up to 20241108. This issue affects some unknown processing of the file /index.php/display/database/. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other endpoints might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-266
• CWE-285

• https://github.com/h0e4a0r1t/h0e4a0r1t.github.io/blob/master/2024/HYO%3BY)v%3B4%5C)jLCjp/Altenergy%20Power%20Control%20Software%20Information%20Disclosure%20Vulnerability_database.pdf
• https://vuldb.com/?ctiid.284915
• https://vuldb.com/?id.284915
• https://vuldb.com/?submit.439804

Published

Nov 18, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-11300In lunary-ai/lunary before version 1.6.3, an improper access…6.5
• CVE-2024-11301In lunary-ai/lunary before version 1.6.3, the application al…6.5
• CVE-2024-11302A missing check_access() function in the lollms_binding_info…8
• CVE-2024-11303The pathname of the root directory to a Restricted Directory…8.7
• CVE-2024-11304Missing input validation in the SEH Computertechnik utnserve…5.1
• CVE-2024-11305A vulnerability classified as critical was found in Altenerg…6.3
• CVE-2024-11308The DVC from TRCore encrypts files using a hardcoded key. At…5.5
• CVE-2024-11309The DVC from TRCore has a Path Traversal vulnerability, allo…7.5
• CVE-2024-11310The DVC from TRCore has a Path Traversal vulnerability, allo…7.5
• CVE-2024-11311The DVC from TRCore has a Path Traversal vulnerability and d…9.8
• CVE-2024-11312The DVC from TRCore has a Path Traversal vulnerability and d…9.8
• CVE-2024-11313The DVC from TRCore has a Path Traversal vulnerability and d…9.8