Moodle Authenticated LFI risk in some misconfigured shared hosting environments

In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore database activity modules and direct access to the web server outside of the Moodle webroot could execute a local file include...

CVE-2024-34005 moodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_data backup

In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore database activity modules and direct access to the web server outside of the Moodle webroot could execute a local file include...

CVE-2024-34005 moodle: authenticated LFI risk in some misconfigured shared hosting environments via modified mod_data backup

In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore database activity modules and direct access to the web server outside of the Moodle webroot could execute a local file include...

MAL-2024-1398 Malicious code in drata (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 646cbea8c3285f55f7f26b096cd9a63f91fdf4c4b06370aa92226ea3316bebba The OpenSSF Package Analysis project identified 'drata' @ 1.0.0 npm as malicious. It is considered malicious because: - The package communicates...

MAL-2024-1396 Malicious code in numberpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e10120613afbbf32d487584c68eaf1ae7f4fc0674f1f119d86beae630a3b9070 The OpenSSF Package Analysis project identified 'numberpy' @ 0.1.0 pypi as malicious. It is considered malicious because: - The package...

MAL-2024-1397 Malicious code in reqwestss (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1b49654324e091538657038a1288d05e2879c02d73bec38baeae681b0a26f5b9 The OpenSSF Package Analysis project identified 'reqwestss' @ 0.1.0 pypi as malicious. It is considered malicious because: - The package...

MAL-2024-1395 Malicious code in pinyin-pra (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9b8720c87d902e268ccf6e9db13f00285998cf35b280a6851ef9c3c23b3f0d6b The OpenSSF Package Analysis project identified 'pinyin-pra' @ 1.0.3 npm as malicious. It is considered malicious because: - The package...

PT-2024-25633 · Moodle +2 · Moodle +2

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user with both access to restore database activity modules and direct access to...

MAL-2024-1393 Malicious code in nespresso-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4df4d16cd100a965fef42c58150e9688849a5acfa8de2f809b3ed66f5ef9f29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in nespresso-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e4df4d16cd100a965fef42c58150e9688849a5acfa8de2f809b3ed66f5ef9f29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in flexfone-reseller (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 18122a6d33435c1fb53b974e49237f471236504fef75bb09e9f0fb41c399a463 The OpenSSF Package Analysis project identified 'flexfone-reseller' @ 100.0.5 npm as malicious. It is considered malicious because: - The packag...

MAL-2024-1391 Malicious code in flexfone-reseller (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 18122a6d33435c1fb53b974e49237f471236504fef75bb09e9f0fb41c399a463 The OpenSSF Package Analysis project identified 'flexfone-reseller' @ 100.0.5 npm as malicious. It is considered malicious because: - The packag...

MAL-2024-1389 Malicious code in seller-journey (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 60c8dd60bc988a9407b04ce22918c8e8aedc6a7436ea2c74eb3181de1ad876bf The OpenSSF Package Analysis project identified 'seller-journey' @ 5.4.7 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1388 Malicious code in controlbundler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis db9a250abd3db6888ce6c77c0308a1e67927ee02b972e1516c7fdf295f33e522 The OpenSSF Package Analysis project identified 'controlbundler' @ 1.0.6 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1387 Malicious code in sanar-website-v3 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5343e64c2316fbb0e3c6256f74b5b0da7993903262ed71f836a93f2e929ced78 The OpenSSF Package Analysis project identified 'sanar-website-v3' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-1386 Malicious code in tec-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 125ddb22e15354e2319586116faa892343d4a86c8f79c9d6ed274d9acfb5f20d The OpenSSF Package Analysis project identified 'tec-docs' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

CVE-2024-5372

A vulnerability classified as problematic was found in Kashipara College Management System 1.0. This vulnerability affects unknown code of the file submitextracurricularactivity.php. The manipulation of the argument activitycontact leads to cross site scripting. The attack can be initiated...

CVE-2024-5372 Kashipara College Management System submit_extracurricular_activity.php cross site scripting

A vulnerability classified as problematic was found in Kashipara College Management System 1.0. This vulnerability affects unknown code of the file submitextracurricularactivity.php. The manipulation of the argument activitycontact leads to cross site scripting. The attack can be initiated...

College Management System 跨站脚本漏洞

College Management System is a simple project organized by Code Projects. It is used to keep track of students, teachers, subjects, schedules and all things related to college. A cross-site scripting vulnerability exists in Kashipara College Management System version 1.0, which stems from the...

PT-2024-35827 · Unknown · Kashipara College Management System

Name of the Vulnerable Software and Affected Versions: Kashipara College Management System version 1.0 Description: A problematic issue was found in the submit extracurricular activity.php file, where the manipulation of the activity contact argument leads to cross-site scripting. The attack can ...