CVE-2024-7448

Magnet Forensics AXIOM Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Magnet Forensics AXIOM. User interaction is required to exploit this vulnerability in that the target must acquire data from a malicious mobile device. The specific flaw exists within the Android device image acquisition functionality. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-23964.

• CWE-78

• https://docs.magnetforensics.com/docs/axiom/release_notes.htmlRelease Notes
• https://www.zerodayinitiative.com/advisories/ZDI-24-1129/Third Party Advisory, VDB Entry

Published

Aug 21, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-7442** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in…9.8
• CVE-2024-7443** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified a…9.8
• CVE-2024-7444A vulnerability classified as critical was found in itsource…9.8
• CVE-2024-7445A vulnerability, which was classified as critical, has been …7.2
• CVE-2024-7446A vulnerability, which was classified as critical, was found…7.2
• CVE-2024-7447The Interactive Contact Form and Multi Step Form Builder wit…5.3
• CVE-2024-7449A vulnerability, which was classified as critical, was found…9.8
• CVE-2024-7450A vulnerability has been found in itsourcecode Placement Man…8.7
• CVE-2024-7451A vulnerability was found in itsourcecode Placement Manageme…8.7
• CVE-2024-7452A vulnerability was found in itsourcecode Placement Manageme…8.7
• CVE-2024-7453A vulnerability was found in FastAdmin 1.5.0.20240328. It ha…4.8
• CVE-2024-7454A vulnerability, which was classified as critical, has been …9.8