WordPress plugin Tutor LMS 访问控制错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. An access...

CVE-2025-6680

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.8.3. This makes it possible for authenticated attackers, with tutor-level access and above, to view assignments for courses they don't...

EUVD-2012-1191

Malware in sbrugna...

EUVD-2007-5406

Malware in sbrugna...

CVE-2025-11281

CVE-2025-11281 affects Frappe LMS 2.35.0 and involves an unknown function in the /courses/ path of the Unpublished Course Handler, leading to improper access controls. The issue is exploitable remotely, with high attack complexity and low privileges required; exploitation is described as possible...

EUVD-2025-28410

Malicious code in bioql PyPI...

EUVD-2025-4685

Malicious code in bioql PyPI...

EUVD-2022-2009

Malicious code in bioql PyPI...

EUVD-2024-35445

Malicious code in bioql PyPI...

EUVD-2022-1796

Malicious code in bioql PyPI...

EUVD-2022-3494

Malicious code in bioql PyPI...

EUVD-2023-39127

Malicious code in bioql PyPI...

EUVD-2022-5466

Malicious code in bioql PyPI...

EUVD-2024-44942

Malicious code in bioql PyPI...

EUVD-2023-39124

Malicious code in bioql PyPI...

PT-2025-39153

🗣️ CVE-2025-9125: Cross-Site Scripting Flaw in Lectora Courses Puts E-Learning Platforms at Risk https://t.co/EeMX3DPpeO...

Cross-site scripting vulnerability in Lectora course navigation

Overview Lectora Desktop versions 21.0–21.3 and Lectora Online versions 7.1.6 and older contained a cross-site scripting XSS vulnerability in courses published with Seamless Play Publish SPP enabled and Web Accessibility disabled. The vulnerability was initially patched in Lectora Desktop version...

Linux Distros Unpatched Vulnerability : CVE-2021-36393

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses. CVE-2021-36393 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2021-20283

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The web service responsible for fetching other users' enrolled courses did not validate that the requesting user had permission to view that information in each...

Linux Distros Unpatched Vulnerability : CVE-2017-7531

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Moodle 3.3, the course overview block reveals activities in hidden courses. CVE-2017-7531 Note that Nessus relies on the presence of the package as reported ...