3 matches found
Exploit-CVE-2024-31777
CVE-2024-31777 | GUnet OpenEclass E-learning platform Unrestricted File Upload PoC 📜 Description This script presents a proof of concept PoC for CVE-2024-31777, a security vulnerability discovered in GUnet OpenEclass E-learning platform with a CVSS of 9.8 which affects the endpoint of...
Exploit for Unrestricted Upload of File with Dangerous Type in Openeclass
CVE-2024-31777 | GUnet OpenEclass E-learning platform Unrestri...
CVE-2020-5194: Authorization Bypass Through User-Controlled Key
The zip API endpoint in Cerberus FTP Server 8 allows an authenticated attacker without zip permission to use the zip functionality via an unrestricted API endpoint. Improper permission verification occurs when calling the file/ajaxdownloadzip/zipname endpoint. The result is that a user without...