CVE-2017-2578

In Moodle 3.x, there is XSS in the assignment submission page...

CVE-2016-5012

In Moodle 3.x, glossary search displays entries without checking user permissions to view them...

CVE-2016-5013

In Moodle 2.x and 3.x, text injection can occur in email headers, potentially leading to outbound spam...

CVE-2016-8643

In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services...

Code injection

In Moodle 3.x, there is XSS in the assignment submission page...

CVE-2016-5013

In Moodle 2.x and 3.x, text injection can occur in email headers, potentially leading to outbound spam...

Default credentials

In Moodle 2.x and 3.x, web service tokens are not invalidated when the user password is changed or forced to be changed...

CVE-2017-2576

In Moodle 2.x and 3.x, there is incorrect sanitization of attributes in forums...

CVE-2016-5012

CVE-2016-5012: In Moodle 3.x, the glossary search function does not enforce view-permission checks, allowing exposure of glossary entries to users who should not see them. Multiple sources (SUITE/SUSE advisory, GHSA) corroborate the same issue under the Moodle glossary search behavior. No exploit...

CVE-2016-5012

In Moodle 3.x, glossary search displays entries without checking user permissions to view them...

CVE-2017-2578

In Moodle 3.x, there is XSS in the assignment submission page...

Million Pixels 3 - Authentication Bypass Vulnerability

Exploit for php platform in category web applications Vulnerability: Authentication Bypass Date: 16.01.2017 Vendor Homepage: http://e-topbiz.com/ Script Name: Million Pixels 3 Script Buy Now: http://www.e-topbiz.com/oprema/pages/millionpixels3.php Author: İhsan Şencan Author Web: http://ihsan.net...

Million Pixels 3 SQL Injection

Vulnerability: Authentication Bypass Date: 16.01.2017 Vendor Homepage: http://e-topbiz.com/ Script Name: Million Pixels 3 Script Buy Now: http://www.e-topbiz.com/oprema/pages/millionpixels3.php Author: Adeghsan Aencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet...

Million Pixels 3 - Authentication Bypass

Vulnerability: Authentication Bypass Date: 16.01.2017 Vendor Homepage: http://e-topbiz.com/ Script Name: Million Pixels 3 Script Buy Now: http://www.e-topbiz.com/oprema/pages/millionpixels3.php Author: İhsan Şencan Author Web: http://ihsan.net Mail : ihsanbeygirihsannoktanet...

Million Pixels 3 - Authentication Bypass

Million Pixels 3 - Authentication Bypass Vulnerability: Authentication Bypass Date: 16.01.2017 Vendor Homepage: http://e-topbiz.com/ Script Name: Million Pixels 3 Script Buy Now: http://www.e-topbiz.com/oprema/pages/millionpixels3.php Author: İhsan Şencan Author Web: http://ihsan.net Mail :...

Security fix for the ALT Linux 7 package adobe-flash-player version 3:24-alt0.M70P.2

3:24-alt0.M70P.2 built Jan. 12, 2017 Sergey V Turchin in task 176069 Jan. 11, 2017 Sergey V Turchin - new version - security fixes: CVE-2017-2925, CVE-2017-2926, CVE-2017-2927, CVE-2017-2928, CVE-2017-2930, CVE-2017-2931, CVE-2017-2932, CVE-2017-2933, CVE-2017-2934, CVE-2017-2935, CVE-2017-2936,...

Ubuntu 16.04 LTS : Linux kernel (Raspberry Pi 2) vulnerabilities (USN-3169-3)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3169-3 advisory. Baozeng Ding discovered a race condition that could lead to a use-after- free in the Advanced Linux Sound Architecture ALSA subsystem of the Linux kernel...

Ubuntu: Security Advisory (USN-3169-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Python: Multiple vulnerabilities

Background Python is an interpreted, interactive, object-oriented programming language. Description Multiple vulnerabilities have been discovered in Python. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to open a specially crafted ind...

thepufferfish.com XSS vulnerability

Vulnerable URL: http://www.thepufferfish.com/photo/hiband/flashdetection.swf?flashContentURL=javascript:alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 13348756...