Lucene search
K

7039 matches found

Cvelist
Cvelist
added 2026/01/19 12:32 p.m.23 views

CVE-2026-1154 SourceCodester E-Learning System Lesson index.php cross site scripting

A flaw has been found in SourceCodester E-Learning System 1.0. This impacts an unknown function of the file /admin/modules/lesson/index.php of the component Lesson Module Handler. Executing a manipulation of the argument Title/Description can lead to basic cross site scripting. The attack can be...

5.3CVSS0.00329EPSS
Exploits1References5
EUVD
EUVD
added 2026/01/19 12:32 p.m.4 views

EUVD-2026-3219

A flaw has been found in SourceCodester E-Learning System 1.0. This impacts an unknown function of the file /admin/modules/lesson/index.php of the component Lesson Module Handler. Executing a manipulation of the argument Title/Description can lead to basic cross site scripting. The attack can be...

5.3CVSS3.8AI score0.00329EPSS
Exploits1References7
CVE
CVE
added 2026/01/19 12:32 p.m.17 views

CVE-2026-1154

The CVE-2026-1154 entry affects SourceCodester E-Learning System 1.0, specifically the /admin/modules/lesson/index.php file in the Lesson Module Handler. Affected vector: manipulation of the Title/Description argument enables basic cross-site scripting. The vulnerability is described as exploitab...

5.4CVSS3.7AI score0.00329EPSS
Exploits1References5Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/19 12:22 a.m.5 views

CVE-2026-1106

A security flaw has been discovered in Chamilo LMS up to 2.0.0 Beta 1. This issue affects the function deleteLegal of the file src/CoreBundle/Controller/SocialController.php of the component Legal Consent Handler. Performing a manipulation of the argument userId results in improper authorization...

5.5CVSS6.4AI score0.00393EPSS
Exploits0References1
Packet Storm News
Packet Storm News
added 2026/01/19 12:0 a.m.4 views

PrivFly: A Privacy-Preserving Self-Supervised Framework for Rare Attack Detection in IoFT

The Internet of Flying Things IoFT plays a vital role in modern applications such as aerial surveillance and smart mobility. However, it remains highly vulnerable to cyberattacks that threaten the confidentiality, integrity, and availability of sensitive data. Developing effective intrusion...

5.5AI score
Exploits0
Packet Storm News
Packet Storm News
added 2026/01/19 12:0 a.m.4 views

Post-Quantum Secure Aggregation Via Code-Based Homomorphic Encryption

Secure aggregation enables aggregation of inputs from multiple parties without revealing individual contributions to the server or other clients. Existing post-quantum approaches based on homomorphic encryption offer practical efficiency but predominantly rely on lattice-based hardness assumption...

5.5AI score
Exploits0
Packet Storm News
Packet Storm News
added 2026/01/19 12:0 a.m.2 views

Techniques of Modern Attacks

The techniques used in modern attacks have become an important factor for investigation. As we advance further into the digital age, cyber attackers are employing increasingly sophisticated and highly threatening methods. These attacks target not only organizations and governments but also extend...

5.6AI score
Exploits0
CNNVD
CNNVD
added 2026/01/19 12:0 a.m.3 views

SourceCodester E-Learning System security vulnerabilities

The SourceCodester E-Learning System is an open-source e-learning system developed by SourceCodester. Version 1.0 of the SourceCodester E-Learning System contains a security vulnerability. This vulnerability stems from incorrect handling of parameters “Title” and “Description” in the file...

5.4CVSS5.6AI score0.00329EPSS
Exploits1References5
GithubExploit
GithubExploit
added 2026/01/18 6:29 a.m.134 views

xss-playground

xss-playground A beginner-friendly XSS Playground built...

6.5AI score
Exploits0
Cvelist
Cvelist
added 2026/01/18 12:2 a.m.21 views

CVE-2026-1106 Chamilo LMS Legal Consent SocialController.php deleteLegal improper authorization

A security flaw has been discovered in Chamilo LMS up to 2.0.0 Beta 1. This issue affects the function deleteLegal of the file src/CoreBundle/Controller/SocialController.php of the component Legal Consent Handler. Performing a manipulation of the argument userId results in improper authorization...

5.5CVSS0.00393EPSS
Exploits0References4
Packet Storm News
Packet Storm News
added 2026/01/17 12:0 a.m.3 views

Hybrid IDS Using Signature-Based and Anomaly-Based Detection

Intrusion detection systems IDS are essential for protecting computer systems and networks against a wide range of cyber threats that continue to evolve over time. IDS are commonly categorized into two main types, each with its own strengths and limitations, such as difficulty in detecting...

5.4AI score
Exploits0
RedhatCVE
RedhatCVE
added 2026/01/16 9:33 p.m.3 views

CVE-2026-21911

An Incorrect Calculation vulnerability in the Layer 2 Control Protocol Daemon l2cpd of Juniper Networks Junos OS Evolved allows an unauthenticated network-adjacent attacker flapping the management interface to cause the learning of new MACs over label-switched interfaces LSI to stop while...

7.1CVSS6.8AI score0.00225EPSS
Exploits0References1
OSV
OSV
added 2026/01/16 8:15 p.m.2 views

CVE-2025-69581

An issue was discovered in Chamillo LMS 1.11.2. The Social Network /personaldata endpoint exposes full sensitive user information even after logout because proper cache-control is missing. Using the browser back button restores all personal data, allowing unauthorized users on the same device to...

5.5CVSS5.5AI score0.00213EPSS
Exploits2References2
ATTACKERKB
ATTACKERKB
added 2026/01/16 12:0 a.m.2 views

CVE-2025-69581

An issue was discovered in Chamillo LMS 1.11.2. The Social Network /personaldata endpoint exposes full sensitive user information even after logout because proper cache-control is missing. Using the browser back button restores all personal data, allowing unauthorized users on the same device to...

5.5CVSS5.4AI score0.00213EPSS
Exploits2References3
Cvelist
Cvelist
added 2026/01/16 12:0 a.m.19 views

CVE-2025-69581

An issue was discovered in Chamillo LMS 1.11.2. The Social Network /personaldata endpoint exposes full sensitive user information even after logout because proper cache-control is missing. Using the browser back button restores all personal data, allowing unauthorized users on the same device to...

0.00213EPSS
Exploits2References2
Vulnrichment
Vulnrichment
added 2026/01/16 12:0 a.m.3 views

CVE-2025-69581

An issue was discovered in Chamillo LMS 1.11.2. The Social Network /personaldata endpoint exposes full sensitive user information even after logout because proper cache-control is missing. Using the browser back button restores all personal data, allowing unauthorized users on the same device to...

6.1AI score0.00213EPSS
Exploits2References2
Packet Storm News
Packet Storm News
added 2026/01/16 12:0 a.m.3 views

Predicting Tail-Risk Escalation in IDS Alert Time Series

Network defenders face a steady stream of attacks, observed as raw Intrusion Detection System IDS alerts. The sheer volume of alerts demands prioritization, typically based on high-level risk classifications. This work expands the scope of risk measurement by examining alerts not only through the...

5.6AI score
Exploits0
CNNVD
CNNVD
added 2026/01/16 12:0 a.m.2 views

Chamilo LMS security vulnerabilities

Chamilo LMS is an open-source online learning and collaboration system developed by Chamilo. This system supports the creation of teaching content, remote training, and online quizzes. Version 1.11.2 of Chamilo LMS contains a security vulnerability. This vulnerability stems from insufficient...

5.5CVSS5.8AI score0.00213EPSS
Exploits2References3
OSV
OSV
added 2026/01/15 9:16 p.m.1 views

CVE-2026-21911

An Incorrect Calculation vulnerability in the Layer 2 Control Protocol Daemon l2cpd of Juniper Networks Junos OS Evolved allows an unauthenticated network-adjacent attacker flapping the management interface to cause the learning of new MACs over label-switched interfaces LSI to stop while...

6.5CVSS5.8AI score
Exploits0References2
NVD
NVD
added 2026/01/15 9:16 p.m.4 views

CVE-2026-21911

An Incorrect Calculation vulnerability in the Layer 2 Control Protocol Daemon l2cpd of Juniper Networks Junos OS Evolved allows an unauthenticated network-adjacent attacker flapping the management interface to cause the learning of new MACs over label-switched interfaces LSI to stop while...

7.1CVSS0.00225EPSS
Exploits0References2
Rows per page
Query Builder