VulnCheck KEV: CVE-2023-45878

GibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write because rubricsvisualisesaveAjax.phps does not require authentication. The endpoint accepts the img, path, and gibbonPersonID parameters. The img parameter is expected to be a base64 encoded image. If the path parameter is set...

alfrodull (0.1.0), getccwarc (>=0.0.1.dev23, <=0.0.1.dev34) +3 more potentially affected by CVE-2024-5569 via zipp (0.5.1)

zipp PYPI version 0.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on zipp and may be impacted: - alfrodull 0.1.0 - getccwarc =0.0.1.dev23, =1.2.2, =0.0.2, =0.0.3 Source cves: CVE-2024-5569 Source advisory: OSV:GHSA-JFMJ-5V4G-7637...

GroupWise 7 attached bugs

Product: GroupWise 7 OS: Windows xp Find two types of vulnerabilities in this client is a correo.Una xss and the other a denial of service but I am also appears to be run arbitrary code. XSS in web access You can run Javascript code to send an attachment with poorly trained jpg extension. Denial ...