Moodle 4.2.x < 4.2.4 Multiple Cross-Site Scripting

According to its self-reported version, the Moodle install hosted on the remote host is 4.2.x prior to 4.2.4 or 4.3.x prior to 4.3.1. It is, therefore, affected by multiple cross-site scripting: - Reflected XSS risk on ad-hoc tasks page - Reflected XSS risk in grader report search - Stored XSS in...

Moodle 4.1.x < 4.1.2 Multiple Vulnerabilities

According to its self-reported version, the Moodle install hosted on the remote host is prior to 3.9.20, 3.11.x prior to 3.11.13, 4.0.x prior to 4.0.7 or 4.1.x prior to 4.1.2. It is, therefore, affected by multiple vulnerabilities. - The course participation report required additional checks to...

Moodle 4.0.x < 4.0.7 Multiple Vulnerabilities

According to its self-reported version, the Moodle install hosted on the remote host is prior to 3.9.20, 3.11.x prior to 3.11.13, 4.0.x prior to 4.0.7 or 4.1.x prior to 4.1.2. It is, therefore, affected by multiple vulnerabilities. - The course participation report required additional checks to...

Moodle 3.11.x < 3.11.13 Multiple Vulnerabilities

According to its self-reported version, the Moodle install hosted on the remote host is prior to 3.9.20, 3.11.x prior to 3.11.13, 4.0.x prior to 4.0.7 or 4.1.x prior to 4.1.2. It is, therefore, affected by multiple vulnerabilities. - The course participation report required additional checks to...

PT-2025-27727

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the dm blk report zones function. The issue arises when dm get live table returns NULL, and dm put live table is not...

Moodle 4.3.x < 4.3.8 Multiple Vulnerabilities

According to its self-reported version, the Moodle install hosted on the remote host is 4.1.x prior to 4.1.14, 4.2.x prior to 4.2.11, 4.3.x prior to 4.3.8, or 4.4.x prior to 4.4.4. It is, therefore, affected by multiple vulnerabilities. - An IDOR when fetching report schedules. - Some users can...

The Riskiest Connected Devices of 2025

Since 2020, Forescout Research - Vedere Labs has been monitoring the riskiest devices in organizational networks, leveraging data sourced directly from the devices themselves. This marks their fifth report in six years...

Moodle 4.2.x < 4.2.11 Multiple Vulnerabilities

According to its self-reported version, the Moodle install hosted on the remote host is 4.1.x prior to 4.1.14, 4.2.x prior to 4.2.11, 4.3.x prior to 4.3.8, or 4.4.x prior to 4.4.4. It is, therefore, affected by multiple vulnerabilities. - An IDOR when fetching report schedules. - Some users can...

brooklane.org Cross Site Scripting vulnerability OBB-4042980

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-30651

creationtimestamp| type| source ---|---|--- 2025-04-09 20:22:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114309865308254607 2025-04-09 20:48:31+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11165 2025-04-09 23:28:13+00:00| seen| https://t.me/cvedetector/22596 2025-04-09...

CVE-2025-21591

creationtimestamp| type| source ---|---|--- 2025-04-09 19:59:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114309777091248159 2025-04-28 17:10:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13712...

CVE-2025-2629

creationtimestamp| type| source ---|---|--- 2025-04-09 19:14:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114309599245458822...

cremas-para-la-piel.es Cross Site Scripting vulnerability OBB-4042974

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-3474

creationtimestamp| type| source ---|---|--- 2025-04-09 18:00:10+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114309307406934504 2025-04-09 18:48:11+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11137 2025-04-09 20:57:09+00:00| seen| https://t.me/cvedetector/22567...

zdravenportal.eu Open Redirect vulnerability OBB-4042967

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-31036

creationtimestamp| type| source ---|---|--- 2025-04-09 16:48:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11124 2025-04-09 19:48:53+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114309734861586827...

CVE-2025-31033

creationtimestamp| type| source ---|---|--- 2025-04-09 16:48:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11121 2025-04-09 19:48:52+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114309734826046892 2025-04-10 17:00:07+00:00| published-proof-of-concept|...

WordPress WooCommerce Sales MIS Report Plugin <= 4.0.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin WooCommerce Sales MIS Report versions = 4.0.3...

ffw-insheim.de Cross Site Scripting vulnerability OBB-4042959

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

fiberopticpatch.sell.everychina.com Cross Site Scripting vulnerability OBB-4042951

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...