3 matches found
CVE-2026-22241
π¨ CVE-2026-22241 - Open eClass ν λ§ κ°μ Έμ€κΈ° μ격 μ½λ μ€ν π μ·¨μ½μ μμ½ λ리 μ¬μ©λλ μ€νμμ€ νμ΅ κ΄λ¦¬ μμ€ν LMSμΈ Open eClassμΌλͺ GUnet eClassμ ν λ§ κ°μ Έμ€κΈ°Theme Import κΈ°λ₯μ μ¬κ°ν 무μ ν νμΌ μ λ‘λUnrestricted File Upload μ·¨μ½μ μ΄ μ‘΄μ¬ν©λλ€. μΈμ¦λ κ΄λ¦¬μκ° μ μ± ZIP νμΌμ μ λ‘λνμ¬ μλ²μμ μ격 μ½λ μ€νRCE μ μ λ°ν μ μμ΅λλ€. β οΈ μν₯λ°λ λ²μ λ²μ | μν ---|--- Open eClass 4.2| μ·¨μ½ν¨ Open...
CVE-2026-53636 Open edX LTI OAuth Replay Attack
Open edX Platform enables the authoring and delivery of online learning at any scale. Prior to commit 3a5ac85, a security vulnerability has been identified in the Open edX LMS platform's LTI Learning Tools Interoperability Provider implementation. The validatetimestampandnonce function in...
Vulnerability Spotlight: Two vulnerabilities in Epignosis eFront
Yuri Kramarz of Security Advisory Incident Response EMEAR discovered these vulnerabilities. Cisco Talos discovered two vulnerabilities in Epignosis eFront β one of which could allow an attacker to remotely execute code on the victim system, and another that opens the victim machine to SQL...