CVE-2025-65681

An issue was discovered in Overhang.IO tutor-open-edx overhangio/tutor 20.0.2 allowing local unauthorized attackers to gain access to sensitive information due to the absence of proper cache-control HTTP headers and client-side session checks...

CVE-2025-65681: Session Fixation

An issue was discovered in Overhang.IO tutor-open-edx overhangio/tutor 20.0.2 allowing local unauthorized attackers to gain access to sensitive information due to the absence of proper cache-control HTTP headers and client-side session checks...

EUVD-2015-2384

Malware in sbrugna...

EUVD-2017-9497

Malware in sbrugna...

EUVD-2020-5421

Malware in sbrugna...

EUVD-2020-5422

Malware in sbrugna...

EUVD-2019-11056

Malware in sbrugna...

EUVD-2020-5420

Malware in sbrugna...

EUVD-2019-11057

Malware in sbrugna...

EUVD-2021-25610

Malware in sbrugna...

EUVD-2015-6609

Malware in sbrugna...

EUVD-2024-40448

Malicious code in bioql PyPI...

EUVD-2022-53406

Malicious code in bioql PyPI...

EUVD-2023-0127

Malicious code in bioql PyPI...

EUVD-2024-19785

Malicious code in bioql PyPI...

EUVD-2024-46125

Malicious code in bioql PyPI...

EUVD-2025-28136

Malicious code in bioql PyPI...

EUVD-2024-39195

Malicious code in bioql PyPI...

CVE-2025-47942

The Open edX Platform is a learning management platform. Prior to commit 6740e75c0fdc7ba095baf88e9f5e4f3e15cfd8ba, edxapp has no built-in protection against downloading the pythonlib.zip asset from courses, which is a concern since it often contains custom grading code or answers to course...

CVE-2024-41806

The Open edX Platform is a learning management platform. Instructors can upload csv files containing learner information to create cohorts in the instructor dashboard. These files are uploaded using the django default storage. With certain storage backends, uploads may become publicly available...