Lucene search
+L

10122 matches found

Github Security Blog
Github Security Blog
added 2023/11/09 9:30 p.m.55 views

Moodle Code Injection vulnerability

A remote code execution risk was identified in the Lesson activity. By default this was only available to teachers and managers...

8.8CVSS8AI score0.01862EPSS
SaveExploits0References6Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/11/09 9:10 p.m.8 views

Malicious code in one-host-app-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c17ed3eae2517098a0d480f80d6166610d23a6d0e082bf72cc8853b96a71a613 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/11/09 8:15 p.m.4 views

CVE-2023-5540

A remote code execution risk was identified in the IMSCP activity. By default this was only available to teachers and managers...

8.8CVSS6.4AI score0.0193EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2023/11/09 8:15 p.m.4 views

CVE-2023-5539

A remote code execution risk was identified in the Lesson activity. By default this was only available to teachers and managers...

8.8CVSS6.4AI score0.01862EPSS
SaveExploits0References4
NVD
NVD
added 2023/11/09 8:15 p.m.26 views

CVE-2023-5539

A remote code execution risk was identified in the Lesson activity. By default this was only available to teachers and managers...

8.8CVSS0.01862EPSS
SaveExploits0References3
Prion
Prion
added 2023/11/09 8:15 p.m.37 views

Remote code execution

A remote code execution risk was identified in the IMSCP activity. By default this was only available to teachers and managers...

6.5CVSS7.9AI score0.0193EPSS
SaveExploits0References3Affected Software3
Prion
Prion
added 2023/11/09 8:15 p.m.29 views

Remote code execution

A remote code execution risk was identified in the Lesson activity. By default this was only available to teachers and managers...

6.5CVSS7.9AI score0.01862EPSS
SaveExploits0References3Affected Software3
OSV
OSV
added 2023/11/09 8:15 p.m.10 views

UBUNTU-CVE-2023-5539

A remote code execution risk was identified in the Lesson activity. By default this was only available to teachers and managers...

8.8CVSS6.4AI score0.01862EPSS
SaveExploits0References2
OSV
OSV
added 2023/11/09 8:15 p.m.8 views

UBUNTU-CVE-2023-5540

A remote code execution risk was identified in the IMSCP activity. By default this was only available to teachers and managers...

8.8CVSS6.4AI score0.0193EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2023/11/09 8:15 p.m.32 views

CVE-2023-5540

A remote code execution risk was identified in the IMSCP activity. By default this was only available to teachers and managers...

8.8CVSS7.8AI score0.0193EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/11/09 7:15 p.m.52 views

CVE-2023-5540 Moodle: authenticated remote code execution risk in imscp

A remote code execution risk was identified in the IMSCP activity. By default this was only available to teachers and managers...

4.7CVSS9.6AI score0.0193EPSS
SaveExploits0References3
CVE
CVE
added 2023/11/09 7:11 p.m.160 views

CVE-2023-5539

The provided documents confirm a remote code execution risk in the Moodle Lesson activity (CVE-2023-5539). Reported as an authenticated issue, by default accessible to teachers/managers, it indicates potential RCE via the Lesson activity. No concrete technical exploit vector, vulnerable version r...

8.8CVSS6.8AI score0.01862EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/09 7:11 p.m.22 views

CVE-2023-5539 Moodle: authenticated remote code execution risk in lesson

A remote code execution risk was identified in the Lesson activity. By default this was only available to teachers and managers...

4.7CVSS8.1AI score0.01862EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/11/09 7:11 p.m.41 views

CVE-2023-5539 Moodle: authenticated remote code execution risk in lesson

A remote code execution risk was identified in the Lesson activity. By default this was only available to teachers and managers...

4.7CVSS9.6AI score0.01862EPSS
SaveExploits0References3
OSV
OSV
added 2023/11/09 6:05 p.m.28 views

MAL-2023-8488 Malicious code in resume-sourcing-nodejs-client-credentials (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 63bf870804a0bc378ff856c7e19723430ff40b603bebd5c485f101b20ae69e12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/11/09 12:00 a.m.16 views

PT-2023-32164 · Moodle · Moodle

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: A remote code execution risk was identified in the IMSCP activity. By default, this was only available to teachers and managers. Recommendations: At the moment, there is no information about...

8.8CVSS8.8AI score0.0193EPSS
SaveExploits0References15
Positive Technologies
Positive Technologies
added 2023/11/09 12:00 a.m.9 views

PT-2023-6940 · Moodle · Moodle

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: A remote code execution risk was identified in the Lesson activity of Moodle. This issue is related to incorrect code generation management. By default, the Lesson activity was only availabl...

9CVSS8.7AI score0.01862EPSS
SaveExploits0References16
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/11/08 9:45 p.m.3 views

Malicious code in safe-place (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b80cbcb24e4f1807ee06fd72f2b7a227e474627d391ec40635927294aab3a8d6 The OpenSSF Package Analysis project identified 'safe-place' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

6.9AI score
SaveExploits0
OSV
OSV
added 2023/11/08 7:59 p.m.20 views

MAL-2023-8482 Malicious code in devportal-aws-lambda (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 586c4231b2500b2299bb0a25b45ebdeaec062531b446c12f7547ab351c1b616a The OpenSSF Package Analysis project identified 'devportal-aws-lambda' @ 1.0.0 npm as malicious. It is considered malicious because: - The packa...

7.1AI score
SaveExploits0
NVD
NVD
added 2023/11/08 10:15 a.m.34 views

CVE-2023-46763

Vulnerability of background app permission management in the framework module. Successful exploitation of this vulnerability may cause background apps to start maliciously...

5.3CVSS0.00335EPSS
SaveExploits0References2
Rows per page
Query Builder