usd Herolab

1 exploit Active since Feb 2024
CVE-2024-23759 METASPLOIT CRITICAL ruby WORKING POC
Gambio <= 4.9.2.0 - Remote Code Execution via Parcelshopfinder AddAddressBookEntry Search Parameter
Deserialization of Untrusted Data in Gambio through 4.9.2.0 allows attackers to run arbitrary code via "search" parameter of the Parcelshopfinder/AddAddressBookEntry" function.
CVSS 9.8