9398 matches found
Moodle 2.7.x < 2.7.20 Multiple Vulnerabilities
Binary data 700123.prm...
Moodle 3.2.x < 3.2.3 Multiple Vulnerabilities
Binary data 700126.prm...
Unauthorized Blog Search
Moodle is vulnerable to unauthorized blog searches. There is a missing capability check that allows users to search blogs without permission...
Arbitrary Blog Ownership
Moodle is vulnerable to arbitrary blog ownership. If an authenticated user edits a blog through an external blog link, the ownership changes to the current user...
Recent Python Meterpreter Improvements
The Python Meterpreter has received quite a few improvements this year. In order to generate consistent results, we now use the same technique to determine the Windows version in both the Windows and Python instances of Meterpreter. Additionally, the native system language is now populated in the...
UBUNTU-CVE-2017-7490
In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing...
UBUNTU-CVE-2017-7489
In Moodle 2.x and 3.x, remote authenticated users can take ownership of arbitrary blogs by editing an external blog link...
CVE-2017-7489
In Moodle 2.x and 3.x, remote authenticated users can take ownership of arbitrary blogs by editing an external blog link...
Code injection
In Moodle 2.x and 3.x, remote authenticated users can take ownership of arbitrary blogs by editing an external blog link...
CVE-2017-7489
In Moodle 2.x and 3.x, remote authenticated users can take ownership of arbitrary blogs by editing an external blog link...
CVE-2017-7489
In Moodle 2.x and 3.x, remote authenticated users can take ownership of arbitrary blogs by editing an external blog link...
CVE-2017-7489
CVE-2017-7489 affects Moodle 2.x and 3.x. The issue allows remote authenticated users to take ownership of arbitrary blogs by editing an external blog link. The connected sources reiterate Moodle as the affected software and the blog-edit capability as the vulnerability trigger; no explicit patch...
CVE-2017-7490
In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing...
CVE-2017-7490
In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing...
CVE-2017-7489
In Moodle 2.x and 3.x, remote authenticated users can take ownership of arbitrary blogs by editing an external blog link...
CVE-2017-7489
In Moodle 2.x and 3.x, remote authenticated users can take ownership of arbitrary blogs by editing an external blog link...
CVE-2017-7490
CVE-2017-7490 affects Moodle 2.x and 3.x. The vulnerability arises from a missing capability check that enables searching of arbitrary blogs, exposing potential information that should be restricted. The provided documents describe the flaw as a capability check omission but do not supply additio...
CVE-2017-7489: Improper Privilege Management
In Moodle 2.x and 3.x, remote authenticated users can take ownership of arbitrary blogs by editing an external blog link...
PT-2017-17767
Name of the Vulnerable Software and Affected Versions Moodle versions 2.x through 3.x Description A missing capability check in Moodle allows for the searching of arbitrary blogs. Recommendations For versions 2.x through 3.x, apply the necessary patch or update to include the capability check and...
CVE-2016-4884
Cross-site request forgery CSRF vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...