CVE-2024-2364

A vulnerability classified as problematic has been found in Musicshelf 1.0/1.1 on Android. Affected is an unknown function of the file androidmanifest.xml of the component Backup Handler. The manipulation leads to exposure of backup file to an unauthorized control sphere. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-256320.

• CWE-530
• CWE-552

• https://github.com/ctflearner/Android_Findings/blob/main/Musicshelf/Musicshelf_Manifest_issue.mdExploit
• https://vuldb.com/?ctiid.256320Permissions Required
• https://vuldb.com/?id.256320Permissions Required
• https://github.com/ctflearner/Android_Findings/blob/main/Musicshelf/Musicshelf_Manifest_issue.mdExploit
• https://vuldb.com/?ctiid.256320Permissions Required
• https://vuldb.com/?id.256320Permissions Required

Published

Mar 10, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-23634GeoServer is an open source software server written in Java …6
• CVE-2024-23635AntiSamy is a library for performing fast, configurable clea…6.1
• CVE-2024-23636SOFARPC is a Java RPC framework. SOFARPC defaults to using t…9.8
• CVE-2024-23637OctoPrint is a web interface for 3D printer.s OctoPrint vers…4.9
• CVE-2024-23638Squid is a caching proxy for the Web. Due to an expired poin…6.5
• CVE-2024-23639Micronaut Framework is a modern, JVM-based, full stack Java …7.8
• CVE-2024-23640GeoServer is an open source software server written in Java …4.8
• CVE-2024-23641SvelteKit is a web development kit. In SvelteKit 2, sending …7.5
• CVE-2024-23642GeoServer is an open source software server written in Java …4.8
• CVE-2024-23643GeoServer is an open source software server written in Java …4.8
• CVE-2024-23644Trillium is a composable toolkit for building internet appli…8.1
• CVE-2024-23645GLPI is a Free Asset and IT Management Software package. A m…6.1