Lucene search
+L

35 matches found

Kitploit
Kitploit
•added 2026/10/05 7:50 a.m.•22 views

Moodle-CVE-2024-43425-Exploit

Moodle RCE 익스플로잇 CVE-2024-43425 이 저장소는 Moodle CVE-2024-43425의 원격 코드 실행 RCE 취약점을 대상으로 하는 Python 익스플로잇 스크립트를 포함하고 있습니다. 면책: 이 도구는 교육 및 연구 목적으로만 있는 그대로 제공됩니다. 명시적 테스트 허가를 받은 시스템에서만 사용하십시오. 작성자는 이 스크립트의 오용으로 인한 손해나 법적 문제에 대해 책임을 지지 않습니다. 질문 ID 추출 실패 오류: 질문 생성 페이지에 접근하여 값을 확인하세요. categories HTML 태그에...

8.1CVSS8.4AI score0.87536EPSS
SaveExploits8
Kitploit
Kitploit
•added 2026/10/05 5:52 a.m.•23 views

Moodle-authenticated-RCE

Moodle 4.4.0 - 인증된 원격 코드 실행 CVE-2024-43425 익스플로잇 CVE: CVE-2024-43425 영향을 받는 버전 Moodle 4.4 4.4.1 Moodle 4.3 4.3.5 Moodle 4.2 4.2.8 Moodle 4.1 4.1.11 설명 이 익스플로잇은 위에 나열된 Moodle 버전에서 인증된 원격 코드 실행RCE 취약점을 대상으로 합니다. 유효한 자격 증명을 가진 공격자가 안전하지 않은 문제 은행 편집 기능을 악용하여 서버에서 임의의 명령을 실행할 수 있습니다. 사용 방법 1. 이 저장소를...

8.1CVSS8.4AI score0.87536EPSS
SaveExploits8References1
Kitploit
Kitploit
•added 2026/10/02 12:03 p.m.•14 views

moodle-rce-calculatedquestions

Moodle 계산 문제의 입력 검증 테스트 스크립트 CVE-2024-43425 이 저장소는 Moodle 학습 플랫폼의 원격 코드 실행 취약점을 설명하는 블로그 게시물 Back to School - Moodle의 원격 코드 실행 취약점 악용에 포함된 보조 스크립트를 제공합니다. 검증 로직 테스트 validation 디렉터리의 스크립트를 사용하면 Moodle이 PHP eval 호출의 악용을 방지하기 위해 사용하는 검증 로직에 입력 문자열을 직접 테스트할 수 있습니다. 모든 코드 조각은 Moodle 소스 코드에서 직접 가져왔으며,...

8.1CVSS8.4AI score0.87536EPSS
SaveExploits8References3
Nuclei
Nuclei
•added 2026/09/30 2:12 a.m.•163 views

Moodle - Remote Code Execution

Attackers with the permission to create or modify questions in Moodle courses are able to craft malicious inputs for calculated questions, which can be abused to execute arbitrary commands on the underlying system. id: CVE-2024-43425 info: name: Moodle - Remote Code Execution author:...

8.1CVSS8.4AI score0.87536EPSS
SaveExploits8References4
OSV
OSV
•added 2026/09/05 6:03 a.m.•17 views

ROOT-OS-UBUNTU-2404-CVE-2026-43425 CVE-2026-43425 in linux - Patched by Root

Root has patched CVE-2026-43425 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

5.5CVSS5.6AI score0.00162EPSS
SaveExploits0
Circl
Circl
•added 2026/08/03 7:08 a.m.•14 views

CVE-2026-43425

creationtimestamp| type| source ---|---|--- 2026-08-03 07:08:13+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260803...

5.5CVSS5.7AI score0.00162EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2026/07/22 12:00 a.m.•13 views

RHEL 9 : libreoffice (RHSA-2026:43425)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:43425 advisory. LibreOffice is an open source, community-developed office productivity suite. It includes key desktop applications, such as a word processor, a...

7.8CVSS7.7AI score0.00227EPSS
SaveExploits0References4
OSV
OSV
•added 2026/05/12 6:09 a.m.•10 views

BELL-CVE-2026-43425

Bulletin has no description...

5.5CVSS5.6AI score0.00162EPSS
SaveExploits0References1
Packet Storm
Packet Storm
•added 2026/02/02 12:00 a.m.•177 views

📄 Moodle 4.x PHP Code Injection

This proof of concept demonstrates a code injection vulnerability in Moodle versions 4.x. ============================================================================================================================================= | Title : Moodle 4.x PHP Code Injection Vulnerability | | Author ...

8.1CVSS7.9AI score0.87536EPSS
SaveExploits8
Tenable Nessus
Tenable Nessus
•added 2026/01/14 12:00 a.m.•11 views

TencentOS Server 2: webkitgtk4 (TSSA-2025:0998)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0998 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

8.8CVSS6.8AI score0.0145EPSS
SaveExploits0References16
Tenable Nessus
Tenable Nessus
•added 2026/01/06 12:00 a.m.•9 views

SUSE SLED15: WebKitGTK-4.0-lang / WebKitGTK-4.1-lang / WebKitGTK-6.0-lang / etc (SUSE-SU-2026:0021-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0021-1 advisory. Update to version 2.50.4. Security issues fixed: - CVE-2025-13502: processing of maliciously...

8.8CVSS7.4AI score0.3414EPSS
SaveExploits15References76
Tenable Nessus
Tenable Nessus
•added 2026/01/05 12:00 a.m.•25 views

Amazon Linux 2 : webkitgtk4, --advisory ALAS2-2025-3114 (ALAS-2025-3114)

The version of webkitgtk4 installed on the remote host is prior to 2.50.4-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-3114 advisory. A flaw was found in WebKitGTK and WPE WebKit. This vulnerability allows an out-of-bounds read and integer underflow,...

8.8CVSS7.1AI score0.3414EPSS
SaveExploits8References56
RedHat Linux
RedHat Linux
•added 2025/12/22 1:58 a.m.•24 views

Important: Red Hat Security Advisory: webkit2gtk3 security update

An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring...

8.8CVSS6.5AI score0.0145EPSS
SaveExploits0References16
RedHat Linux
RedHat Linux
•added 2025/12/22 1:45 a.m.•10 views

Important: Red Hat Security Advisory: webkit2gtk3 security update

An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service. Red Hat Product Security has rated this update ...

8.8CVSS6.5AI score0.0145EPSS
SaveExploits0References16
RedHat Linux
RedHat Linux
•added 2025/12/17 12:19 p.m.•14 views

Important: Red Hat Security Advisory: webkit2gtk3 security update

An update for webkit2gtk3 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

8.8CVSS6.5AI score0.0145EPSS
SaveExploits0References16
OpenVAS
OpenVAS
•added 2025/12/05 12:00 a.m.•6 views

Mageia: Security Advisory (MGASA-2025-0319)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.4AI score0.0145EPSS
SaveExploits0References5
Mageia
Mageia
•added 2025/12/04 11:29 p.m.•15 views

Updated webkit2 packages fix security vulnerabilities

The updated packages fix security vulnerabilities: CVE-2025-43392, CVE-2025-43419, CVE-2025-43425, CVE-2025-43427, CVE-2025-43429, CVE-2025-43430, CVE-2025-43431, CVE-2025-43432, CVE-2025-43434, CVE-2025-43440, CVE-2025-43443, CVE-2025-43421...

8.8CVSS6.5AI score0.0145EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2025/11/28 12:00 a.m.•7 views

Fedora: Security Advisory (FEDORA-2025-6f3e9e3af6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS6.8AI score0.03898EPSS
SaveExploits1References13
RedhatCVE
RedhatCVE
•added 2025/11/05 2:14 a.m.•14 views

CVE-2025-43425

A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper memory handling. Mitigation Do not process or load untrusted web content with WebKitGTK. In Red Hat Enterprise Linux 7, the following packages require WebKitGTK4:...

8.8CVSS6.3AI score0.00706EPSS
SaveExploits0References4
CVE
CVE
•added 2025/11/04 1:15 a.m.•72 views

CVE-2025-43425

The WebKitGTK page rendering module is vulnerable to a memory handling issue where processing maliciously crafted web content can lead to an unexpected process crash . This vulnerability is also present in WPE WebKit and the Safari browser engine. Affected products include Safari 26.1 , iOS 26.1 ...

4.3CVSS6.5AI score0.00706EPSS
SaveExploits0References6Affected Software6
Rows per page
Query Builder