CVE-2024-1255

A vulnerability has been found in sepidz SepidzDigitalMenu up to 7.1.0728.1 and classified as problematic. This vulnerability affects unknown code of the file /Waiters. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-252994 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-200

• https://vuldb.com/?ctiid.252994Permissions Required, Third Party Advisory
• https://vuldb.com/?id.252994Permissions Required, Third Party Advisory
• https://vuldb.com/?ctiid.252994Permissions Required, Third Party Advisory
• https://vuldb.com/?id.252994Permissions Required, Third Party Advisory

Published

Feb 6, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-12544The SurveyJS: Drag & Drop WordPress Form Builder to create, …8.8
• CVE-2024-12545The Scratch & Win – Giveaways and Contests. Boost subscriber…5.4
• CVE-2024-12546Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-12547Tungsten Automation Power PDF JPF File Parsing Out-Of-Bounds…8.8
• CVE-2024-12548Tungsten Automation Power PDF JP2 File Parsing Use-After-Fre…3.3
• CVE-2024-12549Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds…7.8
• CVE-2024-12550Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds…7.8
• CVE-2024-12551Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds…7.8
• CVE-2024-12552Wacom Center WTabletServicePro Link Following Local Privileg…7.8
• CVE-2024-12553GeoVision GV-ASManager Missing Authorization Information Dis…6.5
• CVE-2024-12554The Peter’s Custom Anti-Spam plugin for WordPress is vulnera…5.4
• CVE-2024-12555The SIP Calculator plugin for WordPress is vulnerable to Cro…6.1