CVE-2024-28131

EasyRange Ver 1.41 contains an issue with the executable file search path when displaying an extracted file on Explorer, which may lead to loading an executable file resides in the same folder where the extracted file is placed. If this vulnerability is exploited, arbitrary code may be executed with the privilege of the running program. Note that the developer was unreachable, therefore, users should consider stop using EasyRange Ver 1.41.

• CWE-427

• https://jvn.jp/en/jp/JVN13113728/index.html
• https://jvn.jp/en/jp/JVN13113728/index.html

Published

Mar 26, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-28125FitNesse all releases allows a remote authenticated attacker…9.8
• CVE-2024-28126Cross-site scripting vulnerability exists in 0ch BBS Script …6.1
• CVE-2024-28127Improper input validation in UEFI firmware for some Intel(R)…8.7
• CVE-2024-28128Cross-site scripting vulnerability exists in FitNesse releas…6.1
• CVE-2024-2813A vulnerability was found in Tenda AC15 15.03.20_multi. It h…9.8
• CVE-2024-28130An incorrect type conversion vulnerability exists in the DVP…7.5
• CVE-2024-28132 Exposure of Sensitive Information vulnerability exists in t…4.4
• CVE-2024-28133 A local low privileged attacke…7.8
• CVE-2024-28134 …7
• CVE-2024-28135A low privileged remote attacker can use a command injection…5
• CVE-2024-28136A local attacker with low privileges can use a command injec…7.8
• CVE-2024-28137 …7.8