1280 matches found
CVE-2017-2645
In Moodle 3.x, XSS can occur via attachments to evidence of prior learning...
CVE-2017-2645
In Moodle 3.x, XSS can occur via attachments to evidence of prior learning...
CVE-2017-2644
In Moodle 3.x, XSS can occur via evidence of prior learning...
CVE-2017-2644
In Moodle 3.x, XSS can occur via evidence of prior learning...
CVE-2017-2645
In Moodle 3.x, XSS can occur via attachments to evidence of prior learning...
CVE-2017-2644
In Moodle 3.x, XSS can occur via evidence of prior learning...
CVE-2017-2641
In Moodle 2.x and 3.x, SQL injection can occur via user preferences...
CVE-2017-2644
CVE-2017-2644 affects Moodle 3.x and enables cross-site scripting via evidence of prior learning. It is a network‑based XSS with no authentication, requiring user interaction per CVSS, and results in partial integrity impact and low confidentiality impact. Public details indicate multiple advisor...
tomcat: Remote code execution vulnerability in JmxRemoteLifecycleListener
The JmxRemoteLifecycleListener was not updated to take account of Oracle's fix for CVE-2016-3427. JMXRemoteLifecycleListener is only included in EWS 2.x and JWS 3.x source distributions. If you deploy a Tomcat instance built from source, using the EWS 2.x, or JWS 3.x distributions, an attacker...
Dr0p1t-Framework - A Framework That Creates An Advanced FUD Dropper With Some Tricks
Have you ever heard about trojan droppers ? you can read about them from here . Dr0p1t let you create dropper like any tool but this time FUD with some tricks ; Features Works with Windows and Linux Adding malware after downloading it to startup Adding malware after downloading it to task schedul...
Zookeeper 3.5.2 - Denial of Service
Zookeeper 3.5.2 - Denial of Service. Dos exploit for Linux platform !/usr/bin/python Exploit Title: Zookeeper Client Denial Of Service Port 2181 Date: 2/7/2017 Exploit Author: Brandon Dennis Email: [email protected] Software Link: http://zookeeper.apache.org/releases.htmldownload Zookeeper...
CVE-2017-2576
In Moodle 2.x and 3.x, there is incorrect sanitization of attributes in forums...
Code injection
In Moodle 2.x and 3.x, the question engine allows access to files that should not be available...
Code injection
In Moodle 3.x, glossary search displays entries without checking user permissions to view them...
CVE-2016-5012
In Moodle 3.x, glossary search displays entries without checking user permissions to view them...
CVE-2016-8644
In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context...
CVE-2017-2578
In Moodle 3.x, there is XSS in the assignment submission page...
CVE-2017-2576
In Moodle 2.x and 3.x, there is incorrect sanitization of attributes in forums...