278 matches found
EUVD-2023-2868
Malicious code in bioql PyPI...
Malicious code in lesson-clothing-describe (npm)
The package lesson-clothing-describe was found to contain malicious code...
Malicious code in lesson-dream-death (npm)
The package lesson-dream-death was found to contain malicious code...
Malicious code in let-anybody-lesson (npm)
The package let-anybody-lesson was found to contain malicious code...
Malicious code in mail-lesson-tank (npm)
The package mail-lesson-tank was found to contain malicious code...
MAL-2025-45105 Malicious code in mail-lesson-tank (npm)
The package mail-lesson-tank was found to contain malicious code...
MAL-2025-44991 Malicious code in lesson-dream-death (npm)
The package lesson-dream-death was found to contain malicious code...
MAL-2025-44990 Malicious code in lesson-clothing-describe (npm)
The package lesson-clothing-describe was found to contain malicious code...
MAL-2025-44992 Malicious code in let-anybody-lesson (npm)
The package let-anybody-lesson was found to contain malicious code...
Linux Distros Unpatched Vulnerability : CVE-2024-45691
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Moodle. When restricting access to a lesson activity with a password, certain passwords could be bypassed or less secure due to a loose...
Linux Distros Unpatched Vulnerability : CVE-2023-5539
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A remote code execution risk was identified in the Lesson activity. By default this was only available to teachers and managers. CVE-2023-5539 Note that Nessus...
Linux Distros Unpatched Vulnerability : CVE-2022-35650
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vulnerability was found in Moodle, occurs due to input validation error when importing lesson questions. This insufficient path checks results in arbitrary...
Malicious code in debian-js-lesson-2 (npm)
The package debian-js-lesson-2 was found to contain malicious code...
Malicious code in debian-js-lesson-1 (npm)
The package debian-js-lesson-1 was found to contain malicious code...
MAL-2025-18138 Malicious code in debian-js-lesson-2 (npm)
The package debian-js-lesson-2 was found to contain malicious code...
MAL-2025-18137 Malicious code in debian-js-lesson-1 (npm)
The package debian-js-lesson-1 was found to contain malicious code...
BIT-MOODLE-2024-45691 Moodle: lesson activity password bypass through php loose comparison
A flaw was found in Moodle. When restricting access to a lesson activity with a password, certain passwords could be bypassed or less secure due to a loose comparison in the password-checking logic. This issue only affected passwords set to "magic hash" values...
BIT-MOODLE-2024-34000 moodle: stored XSS in lesson overview report via user ID number
ID numbers displayed in the lesson overview report required additional sanitizing to prevent a stored XSS risk...
CVE-2024-52353
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gabriel Serafini Christian Science Bible Lesson Subjects christian-science-bible-lesson-subjects allows DOM-Based XSS.This issue affects Christian Science Bible Lesson Subjects: from n/a through =...