26 matches found
EUVD-2024-24806
Malicious code in bioql PyPI...
EUVD-2024-24807
Malicious code in bioql PyPI...
CVE-2024-27613
Numbas editor before 7.3 mishandles reading of themes and extensions...
CVE-2024-27612
Numbas editor before 7.3 mishandles editing of themes and extensions...
Numbas Remote Code Execution
Exploit Title: Numbas v7.3 - Remote Code Execution Google Dork: N/A Date: March 7th, 2024 Exploit Author: Matheus Boschetti Vendor Homepage: https://www.numbas.org.uk/ Software Link: https://github.com/numbas/Numbas Version: 7.2 and below Tested on: Linux CVE: CVE-2024-27612 import sys, requests,...
Numbas < v7.3 - Remote Code Execution Exploit
Exploit Title: Numbas v7.3 - Remote Code Execution Exploit Author: Matheus Boschetti Vendor Homepage: https://www.numbas.org.uk/ Software Link: https://github.com/numbas/Numbas Version: 7.2 and below Tested on: Linux CVE: CVE-2024-27612 import sys, requests, re, argparse, subprocess, time from bs...
Numbas < v7.3 - Remote Code Execution
Exploit Title: Numbas v7.3 - Remote Code Execution Google Dork: N/A Date: March 7th, 2024 Exploit Author: Matheus Boschetti Vendor Homepage: https://www.numbas.org.uk/ Software Link: https://github.com/numbas/Numbas Version: 7.2 and below Tested on: Linux CVE: CVE-2024-27612 import sys, requests,...
CVE-2024-27613
Numbas editor before 7.3 mishandles reading of themes and extensions...
CVE-2024-27612
Numbas editor before 7.3 mishandles editing of themes and extensions...
Code injection
Numbas editor before 7.3 mishandles editing of themes and extensions...
Code injection
Numbas editor before 7.3 mishandles reading of themes and extensions...
Numbas security breach
Numbas is an open source system from Numbas Open Source. A security vulnerability exists in versions prior to Numbas 7.3 that stems from mishandling of edits to themes and extensions...
CVE-2024-27612
The Numbas editor (versions 7.2 and below ) is vulnerable to Remote Code Execution (RCE) due to the mishandling of theme and extension edits. This Improper Input Validation (CWE-20) allows an attacker to execute arbitrary code on a target system. Proof-of-concept exploits are available, such as t...
CVE-2024-27612: Improper Input Validation
Numbas editor before 7.3 mishandles editing of themes and extensions...
CVE-2024-27612
Numbas editor before 7.3 mishandles editing of themes and extensions...
CVE-2024-27612
Numbas editor before 7.3 mishandles editing of themes and extensions...
CVE-2024-27612
Numbas editor before 7.3 mishandles editing of themes and extensions...
Numbas security breach
Numbas is an open source system by Numbas Open Source. A security vulnerability exists in versions prior to Numbas 7.3 that stems from mishandling of reads to themes and extensions...