25 matches found
EUVD-2024-24806
Malicious code in bioql PyPI...
EUVD-2024-24807
Malicious code in bioql PyPI...
CVE-2024-27613
Numbas editor before 7.3 mishandles reading of themes and extensions...
CVE-2024-27612
Numbas editor before 7.3 mishandles editing of themes and extensions...
Numbas < v7.3 - Remote Code Execution Exploit
Exploit Title: Numbas v7.3 - Remote Code Execution Exploit Author: Matheus Boschetti Vendor Homepage: https://www.numbas.org.uk/ Software Link: https://github.com/numbas/Numbas Version: 7.2 and below Tested on: Linux CVE: CVE-2024-27612 import sys, requests, re, argparse, subprocess, time from bs...
Numbas Remote Code Execution
Exploit Title: Numbas v7.3 - Remote Code Execution Google Dork: N/A Date: March 7th, 2024 Exploit Author: Matheus Boschetti Vendor Homepage: https://www.numbas.org.uk/ Software Link: https://github.com/numbas/Numbas Version: 7.2 and below Tested on: Linux CVE: CVE-2024-27612 import sys, requests,...
Numbas < v7.3 - Remote Code Execution
Exploit Title: Numbas v7.3 - Remote Code Execution Google Dork: N/A Date: March 7th, 2024 Exploit Author: Matheus Boschetti Vendor Homepage: https://www.numbas.org.uk/ Software Link: https://github.com/numbas/Numbas Version: 7.2 and below Tested on: Linux CVE: CVE-2024-27612 import sys, requests,...
CVE-2024-27612
Numbas editor before 7.3 mishandles editing of themes and extensions...
CVE-2024-27613
Numbas editor before 7.3 mishandles reading of themes and extensions...
Code injection
Numbas editor before 7.3 mishandles editing of themes and extensions...
Code injection
Numbas editor before 7.3 mishandles reading of themes and extensions...
CVE-2024-27613
Numbas editor before 7.3 mishandles reading of themes and extensions...
CVE-2024-27613: Improper Input Validation
Numbas editor before 7.3 mishandles reading of themes and extensions...
Numbas security breach
Numbas is an open source system from Numbas Open Source. A security vulnerability exists in versions prior to Numbas 7.3 that stems from mishandling of edits to themes and extensions...
CVE-2024-27612
Numbas editor before 7.3 mishandles editing of themes and extensions...
CVE-2024-27613
Numbas editor before 7.3 mishandles reading of themes and extensions...
CVE-2024-27612: Improper Input Validation
Numbas editor before 7.3 mishandles editing of themes and extensions...
CVE-2024-27612
Numbas editor before 7.3 mishandles editing of themes and extensions...
CVE-2024-27613
CVE-2024-27613 affects the Numbas editor prior to version 7.3, where the issue is a mishandling of reading themes and extensions in the editor. The CVE has a CVSS v3.1 base score of 7.3 (HIGH), with network attack vector, no privileges required, and no user interaction. Impact is described as low...
CVE-2024-27612
The Numbas editor (versions prior to 7.3 ) contains a vulnerability where it mishandles the editing of themes and extensions . This flaw can lead to Remote Code Execution (RCE). Publicly available exploit code exists, authored by Matheus Boschetti, which demonstrates the ability to craft maliciou...