Exploit-CVE-2024-26503

Open eClass RCE 익스플로잇 도구 이 도구는 Open eClass 플랫폼의 알려진 취약점CVE-2024-26503을 익스플로잇하도록 설계되었으며, 제한 없는 파일 업로드 결함을 통해 원격 코드 실행RCE을 가능하게 합니다. 이 취약점은 공격자가 서버에 웹 셸을 업로드하여 임의의 명령을 실행할 수 있도록 합니다. 면책 조항 이 도구는 교육 및 윤리적 보안 테스트 목적으로만 제공됩니다. 본 도구의 오용 또는 이로 인해 발생하는 손해에 대해 책임을 지지 않습니다. 사용자는 대상 시스템을 테스트하기 위해 명시적인 허가를 받...

CVE-2026-22241

🚨 CVE-2026-22241 - Open eClass 테마 가져오기 원격 코드 실행 📌 취약점 요약 널리 사용되는 오픈소스 학습 관리 시스템LMS인 Open eClass일명 GUnet eClass의 테마 가져오기Theme Import 기능에 심각한 무제한 파일 업로드Unrestricted File Upload 취약점이 존재합니다. 인증된 관리자가 악성 ZIP 파일을 업로드하여 서버에서 원격 코드 실행RCE 을 유발할 수 있습니다. ⚠️ 영향받는 버전 버전| 상태 ---|--- Open eClass 4.2| 취약함 Open...

CVE-2026-22241

CVE-2026-22241 : Open eClass リモートコード実行（RCE） このエクスプロイトはCVE-2026-22241を使用し、ログイン、ZIP作成、アップロード処理を自動化し、サーバー上に直接ウェブシェルを提供します。また、エクスプロイト完了後は自動的に削除されます。 説明 Open eClass（バージョン4.2より前）のテーマインポート機能における無制限ファイルアップロードの脆弱性により、管理者権限を持つ攻撃者がリモートコード実行（RCE）を達成できる可能性があります。 脆弱性の詳細 CVE ID: CVE-2026-22241 脆弱性タイプ: CWE-434:...

CVE-2024-31027

Cross Site Scripting vulnerability in Greek Universities Network GUnet Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the last name, first name, and username parameters in the user registration functionality...

CVE-2024-31026

An issue in Greek Universities Network GUnet Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the chat input field in the course module...

CVE-2024-31026

An issue in Greek Universities Network GUnet Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the chat input field in the course module...

PT-2026-102822

Name of the Vulnerable Software and Affected Versions Greek Universities Network GUnet Open eClass Platform version 3.15 Description A remote attacker can execute arbitrary code through the chat input field within the course module. This issue is a code injection, which occurs when an application...

CVE-2024-31026: Undefined Security Weakness

An issue in Greek Universities Network GUnet Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the chat input field in the course module...

CVE-2024-31026

The Greek Universities Network (GUnet) Open eClass Platform v.3.15 is vulnerable to a code injection flaw. A remote attacker can exploit the chat input field within the course module to execute arbitrary code on the system. To remediate this issue, users should update the platform to a version th...

CVE-2024-31027

Cross Site Scripting vulnerability in Greek Universities Network GUnet Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the last name, first name, and username parameters in the user registration functionality...

EUVD-2024-55777

Cross Site Scripting vulnerability in Greek Universities Network GUnet Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the last name, first name, and username parameters in the user registration functionality...

EUVD-2024-55775

An issue in Greek Universities Network GUnet Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the chat input field in the course module...

CVE-2024-31027

A Cross Site Scripting (XSS) vulnerability exists in the Greek Universities Network (GUnet) Open eClass Platform v.3.15 . A remote attacker can exploit this by providing malicious input through the last name , first name , and username parameters within the user registration functionality . This ...

CVE-2024-31027

Cross Site Scripting vulnerability in Greek Universities Network GUnet Open eClass Platform v.3.15 allows a remote attacker to execute arbitrary code via the last name, first name, and username parameters in the user registration functionality...

GUnet OpenEclass E-learning platform < 4.2 - Remote Code Execution (RCE)

Exploit Title: GUnet OpenEclass E-learning platform """ def banner: printf'''YELLOW ┏━╸╻ ╻┏━╸ ┏━┓┏━┓┏━┓┏━┓ ┏━┓┏━┓┏━┓╻ ╻╺┓ ┃ ┃┏┛┣╸ ╺━╸┏━┛┃┃┃┏━┛┣━┓╺━╸┏━┛┏━┛┏━┛┗━┫ ┃ ┗━╸┗┛ ┗━╸ ┗━╸┗━┛┗━╸┗━┛ ┗━╸┗━╸┗━╸ ╹╺┻╸ RED Author: @Ashif1337 RESET''' def cleanserveropeneclass,filename: printf"ORANGE+ Removing...

CVE-2025-65734

An authenticated arbitrary file upload vulnerability in the Courses/Work Assignments module of gunet Open eClass v3.11, and fixed in v3.13, allows attackers to execute arbitrary code via uploading a crafted SVG file...

EUVD-2025-208753

An authenticated arbitrary file upload vulnerability in the Courses/Work Assignments module of gunet Open eClass v3.11, and fixed in v3.13, allows attackers to execute arbitrary code via uploading a crafted SVG file...

CVE-2025-65734

An authenticated arbitrary file upload vulnerability in the Courses/Work Assignments module of gunet Open eClass v3.11, and fixed in v3.13, allows attackers to execute arbitrary code via uploading a crafted SVG file...

CVE-2025-65734: Improper Neutralization of Input During Web Page Generation

An authenticated arbitrary file upload vulnerability in the Courses/Work Assignments module of gunet Open eClass v3.11, and fixed in v3.13, allows attackers to execute arbitrary code via uploading a crafted SVG file...

PT-2026-25769

An authenticated arbitrary file upload vulnerability in the Courses/Work Assignments module of gunet Open eClass v3.11, and fixed in v3.13, allows attackers to execute arbitrary code via uploading a crafted SVG file...