26 matches found
EUVD-2024-24807
Malicious code in bioql PyPI...
EUVD-2024-24806
Malicious code in bioql PyPI...
CVE-2024-27613
Numbas editor before 7.3 mishandles reading of themes and extensions...
CVE-2024-27612
Numbas editor before 7.3 mishandles editing of themes and extensions...
Numbas < v7.3 - Remote Code Execution Exploit
Exploit Title: Numbas v7.3 - Remote Code Execution Exploit Author: Matheus Boschetti Vendor Homepage: https://www.numbas.org.uk/ Software Link: https://github.com/numbas/Numbas Version: 7.2 and below Tested on: Linux CVE: CVE-2024-27612 import sys, requests, re, argparse, subprocess, time from bs...
Numbas Remote Code Execution
Exploit Title: Numbas v7.3 - Remote Code Execution Google Dork: N/A Date: March 7th, 2024 Exploit Author: Matheus Boschetti Vendor Homepage: https://www.numbas.org.uk/ Software Link: https://github.com/numbas/Numbas Version: 7.2 and below Tested on: Linux CVE: CVE-2024-27612 import sys, requests,...
Numbas < v7.3 - Remote Code Execution
Exploit Title: Numbas v7.3 - Remote Code Execution Google Dork: N/A Date: March 7th, 2024 Exploit Author: Matheus Boschetti Vendor Homepage: https://www.numbas.org.uk/ Software Link: https://github.com/numbas/Numbas Version: 7.2 and below Tested on: Linux CVE: CVE-2024-27612 import sys, requests,...
CVE-2024-27613
Numbas editor before 7.3 mishandles reading of themes and extensions...
CVE-2024-27612
Numbas editor before 7.3 mishandles editing of themes and extensions...
Code injection
Numbas editor before 7.3 mishandles editing of themes and extensions...
Code injection
Numbas editor before 7.3 mishandles reading of themes and extensions...
CVE-2024-27612: Improper Input Validation
Numbas editor before 7.3 mishandles editing of themes and extensions...
CVE-2024-27612
The Numbas editor (versions 7.2 and below ) is vulnerable to Remote Code Execution (RCE) due to the mishandling of theme and extension edits. This Improper Input Validation (CWE-20) allows an attacker to execute arbitrary code on a target system. Proof-of-concept exploits are available, such as t...
CVE-2024-27612
Numbas editor before 7.3 mishandles editing of themes and extensions...
CVE-2024-27613
CVE-2024-27613 affects the Numbas editor prior to version 7.3, where the issue is a mishandling of reading themes and extensions in the editor. The CVE has a CVSS v3.1 base score of 7.3 (HIGH), with network attack vector, no privileges required, and no user interaction. Impact is described as low...
CVE-2024-27612
Numbas editor before 7.3 mishandles editing of themes and extensions...
CVE-2024-27612
Numbas editor before 7.3 mishandles editing of themes and extensions...
Numbas security breach
Numbas is an open source system by Numbas Open Source. A security vulnerability exists in versions prior to Numbas 7.3 that stems from mishandling of reads to themes and extensions...