CVE-2012-1158

Moodle before 2.2.2 has a course information leak in gradebook where users are able to see hidden grade items in export Versions 2.2 to 2.2.1+, 2.1 to 2.1.4+ are affected...

CVE-2012-1155

Moodle has a database activity export permission issue where the export function of the database activity module exports all entries even those from groups the user does not belong to...

Code injection

Moodle has a database activity export permission issue where the export function of the database activity module exports all entries even those from groups the user does not belong to...

CVE-2012-1155

Moodle has a database activity export permission issue where the export function of the database activity module exports all entries even those from groups the user does not belong to Versions 2.2 to 2.2.1+, 2.1 to 2.1.4+, 2.0 to 2.0.7+, 1.9 to 1.9.16+ are affected...

CVE-2012-1155

Moodle has a database activity export permission issue where the export function incorrectly includes entries from groups the user does not belong to. Connected sources confirm this vulnerability (CVE-2012-1155) and enumerate affected Moodle versions (e.g., 1.9.x up to 1.9.16+, 2.0.x up to 2.0.7+...

CVE-2012-1155

Moodle has a database activity export permission issue where the export function of the database activity module exports all entries even those from groups the user does not belong to...

websigmdl.cm-mirandela.pt Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1013750 Security Researcher Gh05tPT Helped patch 6899 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting websigmdl.cm-mirandela.p...

diclehaber.com Cross Site Scripting vulnerability

Security Researcher g0bl1nsec Helped patch 3637 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting diclehaber.com website and its users. Following coordinat...

CSV Injection on node label

Summary CSV Injection, also known as Formula Injection, occurs when websites embed untrusted input inside CSV files. An authenticated malicious user can insert a crafted formula in the node label that can be later executed on another system after another user has downloaded and opened the node li...

Potential data loss during Export Backup retention processing

Challenge In the environments using scale-out backup repository, Export Backup retention logic may delete the entire repository folder, if the required exported backup file has already been deleted manually prior to its set retention policy expiration. This issue affects Veeam Backup & Replicatio...

Sparrow-Wifi - Next-Gen GUI-based WiFi And Bluetooth Analyzer For Linux

Sparrow-wifi has been built from the ground up to be the next generation 2.4 GHz and 5 GHz Wifi spectral awareness tool. At its most basic it provides a more comprehensive GUI-based replacement for tools like inSSIDer and linssid that runs specifically on linux. In its most comprehensive use case...

CVE-2019-8227

In Magento prior to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with limited administrative privileges can inject arbitrary JavaScript code via import / export functionality when creating profile action XML...

Code injection

In Magento prior to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with limited administrative privileges can inject arbitrary JavaScript code via import / export functionality when creating profile action XML...

CVE-2019-8227

In Magento prior to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with limited administrative privileges can inject arbitrary JavaScript code via import / export functionality when creating profile action XML...

Magento cross-site scripting vulnerability (CNVD-2019-40836)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. A security vulnerability exists in Magento versions prior to 1.9.4.3 and 1.14.4.3. An attacker can exploit the...

CVE-2019-8107

An arbitrary file deletion vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with export data transfer privileges can craft a request to perform arbitrary file deletion...

Junos OS: Insecure PKI key pair export file permissions (JSA10974)

According to its self-reported version number, the remote Juniper Junos device is affected by a vulnerability: PKI keys exported using the command 'run request security pki key-pair export' on Junos OS may have insecure file permissions. This allows another user on the Junos OS device with shell...

PESTO - PE (files) Statistical Tool

PESTO is a Python script that extracts and saves in a database some PE file security characteristics or flags searching for every PE binary in a whole directory, and saving results in a database. It checks for architecture flag in the header, and for the following security flags: ASLR, NOSEH, DEP...

dendekkerassurantien.nl Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1006456 Security Researcher devl00p Helped patch 2582 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting dendekkerassurantien.nl...

pzgolf.pl Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1006269 Security Researcher geeknik Helped patch 8803 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting pzgolf.pl website and its...