PT-2024-32832

Name of the Vulnerable Software and Affected Versions MarkUs versions prior to 2.4.8 Description The issue affects MarkUs, a web application for the submission and grading of student assignments. It is vulnerable to path traversal, allowing authenticated instructors to download any file on the we...

MarkUs path traversal vulnerability

MarkUs is a Ruby on Rails and React web application from MarkUs open source for submitting and grading student assignments. A path traversal vulnerability exists in MarkUs versions prior to 2.4.8 that originates from an authenticated user who can download any file on the running web server based ...

PT-2024-34663

Name of the Vulnerable Software and Affected Versions MarkUs versions prior to 2.4.8 Description MarkUs is a web application for the submission and grading of student assignments. An arbitrary file write vulnerability accessible via the update files method of the SubmissionsController allows...

CVE-2024-47820: Improper Limitation of a Pathname to a Restricted Directory

MarkUs, a web application for the submission and grading of student assignments, is vulnerable to path traversal in versions prior to 2.4.8. Authenticated instructors may download any file on the web server MarkUs is running on, depending on the file permissions. MarkUs v2.4.8 has addressed this...

MarkUs code-related vulnerabilities

MarkUs is a Ruby on Rails and React web application from MarkUs open source for submitting and grading student assignments. A code issue vulnerability exists in MarkUs versions prior to v2.4.8, which stems from the presence of an arbitrary file write vulnerability that allows an authenticated use...

MarkUs code-related vulnerabilities

MarkUs is a Ruby on Rails and React web application from MarkUs open source for submitting and grading student assignments. A code issue vulnerability exists in MarkUs versions prior to v2.4.8 that stems from the presence of an arbitrary file write vulnerability that allows an authenticated...

CVE-2024-51499: Unrestricted Upload of File with Dangerous Type

MarkUs is a web application for the submission and grading of student assignments. In versions prior to 2.4.8, an arbitrary file write vulnerability accessible via the updatefiles method of the SubmissionsController allows authenticated users e.g. students to write arbitrary files to any location...

CVE-2024-51743: Unrestricted Upload of File with Dangerous Type

MarkUs is a web application for the submission and grading of student assignments. In versions prior to 2.4.8, an arbitrary file write vulnerability in the update/upload/create file methods in Controllers allows authenticated instructors to write arbitrary files to any location on the web server...

CVE-2024-32127

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Markus Seyer Find Duplicates.This issue affects Find Duplicates: from n/a through 1.4.6...

CVE-2024-32127

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Markus Seyer Find Duplicates.This issue affects Find Duplicates: from n/a through 1.4.6...

CVE-2024-32127 WordPress Find Duplicates plugin <= 1.4.6 - Auth. SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Markus Seyer Find Duplicates.This issue affects Find Duplicates: from n/a through 1.4.6...

CVE-2024-32127

CVE-2024-32127 is an SQL injection vulnerability in the WordPress plugin Find Duplicates by Markus Seyer. The issue is described as an improper neutralization of special elements used in an SQL command, affecting Find Duplicates versions from n/a up to 1.4.6. The public data in the connected docu...

CVE-2024-32127: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Markus Seyer Find Duplicates.This issue affects Find Duplicates: from n/a through 1.4.6...

PT-2024-24421 · Unknown · Markus Seyer Find Duplicates

Name of the Vulnerable Software and Affected Versions: Markus Seyer Find Duplicates versions 1.4.6 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by...

markus-nenning.com Improper Access Control vulnerability OBB-3804727

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

GHSA-P2JH-95JG-2W55 Information Disclosure in typo3/cms-install tool

CVSS: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:F/RL:O/RC:C 3.5 Problem The login screen of the standalone install tool discloses the full path of the transient data directory e.g. /var/www/html/var/transient/. This applies to composer-based scenarios only - “classic” non-composer...

markus-waltke.de Improper Access Control vulnerability OBB-3778895

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

[SECURITY] [DLA 3489-1] mediawiki security update

Debian LTS Advisory DLA-3489-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany July 10, 2023 https://wiki.debian.org/LTS Package : mediawiki Version : 1:1.31.16-1+deb10u5 CVE ID : CVE-2022-47927 A security issue was discovered in MediaWiki, a website engine for...

markus-kurth.de Cross Site Scripting vulnerability OBB-3205868

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

markus-autotest-helpers-notebook (0.1.0) potentially affected by CVE-2023-24816 via ipython (7.24.0)

ipython PYPI version 7.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on ipython and may be impacted: - markus-autotest-helpers-notebook 0.1.0 Source cves: CVE-2023-24816 Source advisory: OSV:PYSEC-2023-17...