Lucene search
+L

8941 matches found

Positive Technologies
Positive Technologies
•added 2025/08/31 12:00 a.m.•23 views

PT-2025-35432

Name of the Vulnerable Software and Affected Versions: Campcodes Online Learning Management System version 1.0 Description: A weakness exists in Campcodes Online Learning Management System that affects the processing of the /login.php file. Manipulation of the Username argument can cause SQL...

9.8CVSS7AI score0.00432EPSS
SaveExploits1References12
CNNVD
CNNVD
•added 2025/08/31 12:00 a.m.•19 views

Learning Management System security vulnerabilities

Learning Management System is itsourcecode open source a learning management system. A security vulnerability exists in Learning Management System version 1.0, which is caused by a SQL injection attack due to incorrect manipulation of the parameter Username in the file /admin/login.php...

9.8CVSS7.1AI score0.00432EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2025/08/31 12:00 a.m.•19 views

PT-2025-35431

Name of the Vulnerable Software and Affected Versions: Campcodes Online Learning Management System version 1.0 Description: A security flaw has been discovered in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown code within the /admin/login.php file. Manipulatio...

9.8CVSS7AI score0.00432EPSS
SaveExploits1References13
RedhatCVE
RedhatCVE
•added 2025/08/30 6:20 p.m.•17 views

CVE-2024-47853

An issue was discovered in Mahara 23.04.8 and 24.04.4. Attackers may utilize escalation of privileges in certain cases when logging into Mahara with Learning Tools Interoperability LTI...

8.8CVSS5.8AI score0.0032EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
•added 2025/08/29 12:00 a.m.•12 views

Hybrid Cryptographic Monitoring System for Side-Channel Attack Detection on PYNQ SoCs

AES-128 encryption is theoretically secure but vulnerable in practical deployments due to timing and fault injection attacks on embedded systems. This work presents a lightweight dual-detection framework combining statistical thresholding and machine learning ML for real-time anomaly detection. B...

7.2AI score
SaveExploits0
Packet Storm News
Packet Storm News
•added 2025/08/28 12:00 a.m.•20 views

Human-AI Collaborative Bot Detection in MMORPGs

In Massively Multiplayer Online Role-Playing Games MMORPGs, auto-leveling bots exploit automated programs to level up characters at scale, undermining gameplay balance and fairness. Detecting such bots is challenging, not only because they mimic human behavior, but also because punitive actions...

6.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2019-15753

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In OpenStack os-vif 1.15.x before 1.15.2, and 1.16.0, a hard-coded MAC aging time of 0 disables MAC learning in linuxbridge, forcing obligatory Ethernet floodin...

9.1CVSS8.1AI score0.02612EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2025/08/26 9:38 p.m.•22 views

Picklescan is missing detection when calling built-in Python cProfile.runctx

Summary Using cProfile.runctx function, which is a built-in python library function to execute remote pickle file. Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to cProfile.runctx function in reduce method Then when the victim after...

8.1CVSS6.4AI score0.0048EPSS
SaveExploits1References5Affected Software1
Github Security Blog
Github Security Blog
•added 2025/08/26 9:38 p.m.•23 views

Picklescan is missing detection when calling built-in python doctest.debug_script

Summary Using doctest.debugscript function, which is a built-in python library function to execute remote pickle file. Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to doctest.debugscript function in reduce method Then when the victim...

7.9AI score
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2025/08/26 9:38 p.m.•29 views

GHSA-FQQ6-7VQF-W3FG Picklescan is missing detection when calling built-in python doctest.debug_script

Summary Using doctest.debugscript function, which is a built-in python library function to execute remote pickle file. Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to doctest.debugscript function in reduce method Then when the victim...

8.1CVSS6.4AI score0.00839EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2025/08/26 9:37 p.m.•23 views

Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcode

Summary Using idlelib.pyshell.ModifiedInterpreter.runcode function, which is a built-in python library function to execute remote pickle file. Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to idlelib.pyshell.ModifiedInterpreter.runcod...

7.9AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2025/08/26 9:34 p.m.•32 views

Picklescan is missing detection when calling built-in python lib2to3.pgen2.pgen.ParserGenerator.make_label

Summary Using lib2to3.pgen2.pgen.ParserGenerator.makelabel function, which is a built-in python library function to execute remote pickle file. Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to...

7.9AI score
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2025/08/26 6:39 p.m.•32 views

Picklescan has a missing detection when calling built-in python library idlelib.calltip.get_entity

Summary Using idlelib.calltip.getentity function, which is a built-in python library function to execute remote pickle file. Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to idlelib.calltip.getentity function in reduce method Then whe...

7.9AI score
SaveExploits0References3Affected Software1
osv_ghsa
osv_ghsa
•added 2025/08/26 6:37 p.m.•28 views

GHSA-7CQ8-MJ8X-J263 Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.fetch_completions

Summary Using idlelib.autocomplete.AutoComplete.fetchcompletions, which is a built-in python library function to execute remote pickle file. Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to...

8.1CVSS6.4AI score0.0038EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2025/08/26 6:37 p.m.•29 views

Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.get_entity

Summary Using idlelib.autocomplete.AutoComplete.getentity, which is a built-in python library function to execute remote pickle file. Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to idlelib.autocomplete.AutoComplete.getentity functio...

8.1CVSS6.4AI score0.00314EPSS
SaveExploits0References8Affected Software1
Github Security Blog
Github Security Blog
•added 2025/08/26 6:35 p.m.•36 views

Picklescan has a missing detection when calling built-in python profile.Profile.run

Summary Using profile.Profile.run, which is a built-in python library function to execute remote pickle file. Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to profile.Profile.run function in reduce method Then when the victim after...

7.9AI score
SaveExploits0References3Affected Software1
osv_cve
osv_cve
•added 2025/08/26 2:15 p.m.•36 views

CVE-2024-47853

An issue was discovered in Mahara 23.04.8 and 24.04.4. Attackers may utilize escalation of privileges in certain cases when logging into Mahara with Learning Tools Interoperability LTI...

8.8CVSS5.8AI score0.0032EPSS
SaveExploits0References2
NVD
NVD
•added 2025/08/26 2:15 p.m.•17 views

CVE-2024-47853

An issue was discovered in Mahara 23.04.8 and 24.04.4. Attackers may utilize escalation of privileges in certain cases when logging into Mahara with Learning Tools Interoperability LTI...

8.8CVSS0.0032EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/26 12:00 a.m.•9 views

CVE-2024-47853: Improper Privilege Management

An issue was discovered in Mahara 23.04.8 and 24.04.4. Attackers may utilize escalation of privileges in certain cases when logging into Mahara with Learning Tools Interoperability LTI...

8.8CVSS5.8AI score0.0032EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/26 12:00 a.m.•43 views

CVE-2024-47853

CVE-2024-47853 affects Mahara versions 23.04.8 and 24.04.4. The issue enables privilege escalation in certain cases during login when using Learning Tools Interoperability (LTI). CVSS 3.1 indicates high impact across confidentiality, integrity, and availability with network attack vector and low ...

8.8CVSS5.8AI score0.0032EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder