89 matches found
MOODLE-3.X-Remote-Code-Execution
MOODLE-3.X-Remote-Code-Execution cve-2018-1133 moodle에서 교사로 인증된 원격 코드 실행...
MoodleExploit
Moodle 익스플로잇 익스플로잇 제목: Moodle v3.4.1 RCE 익스플로잇 Google Dork: inurl:"/course/jumpto.php?jump=" 날짜: 2019년 3월 15일 익스플로잇 작성자: Darryn Ten 공급업체 홈페이지: https://moodle.org 소프트웨어 링크: https://github.com/moodle/moodle/archive/v3.4.1.zip 버전: 3.4.1 아마도 3.5.0, 심지어 3.x일 수도 있음 테스트 환경: Linux with Moodle v3.4.1 CVE ...
CVE-2020-14321
CVE-2020-14321 과정 등록을 통해 교사 역할에서 관리자 역할로 권한 상승이 가능하여 RCE로 이어질 수 있습니다 누군가 Python 스크립트가 필요할 수 있으므로, 이를 악용하기 위해 작성했습니다. 이 PoC 사용 방법: How to use this PoC script Case 1. If you have vaid credentials: python3 cve202014321.py -u http://test.local:8080 -u teacher -p 1234 -cmd=dir Case 2. If you have vali...
CVE-2025-25615
CVE-2025-25615 Unifiedtransform v2.0에는 부적절한 접근 제어Incorrect Access Control 취약점이 존재하며, 이를 통해 교사가 모든 학급 섹션의 출석부를 볼 수 있습니다. 공급업체: Unifiedtransform PoC 1단계: 교사Teacher 계정으로 애플리케이션에 로그인합니다. 2단계: 다음 엔드포인트로 이동합니다: /attendances/view?classid=1§ionid=2&courseid=1 classid 및 sectionid 매개변수를 수정하여 다른 섹션에 접근할...
CVE-2026-75458
The teacher-end interface POST /api/teacher/user/delete/id in XueZhiSi Open Source Exam System = 3.9.0 contains a vertical privilege escalatio vulnerability. This interface accepts a user ID and then executes getUserByIdid, setDeletedtrue, updateByIdFilter in sequence, without any validation of...
EUVD-2026-68881
The teacher-end interface POST /api/teacher/user/delete/id in XueZhiSi Open Source Exam System = 3.9.0 contains a vertical privilege escalatio vulnerability. This interface accepts a user ID and then executes getUserByIdid, setDeletedtrue, updateByIdFilter in sequence, without any validation of...
PT-2026-83980
The teacher-end interface POST /api/teacher/user/delete/id in XueZhiSi Open Source Exam System = 3.9.0 contains a vertical privilege escalatio vulnerability. This interface accepts a user ID and then executes getUserByIdid, setDeletedtrue, updateByIdFilter in sequence, without any validation of...
CVE-2026-75458
The teacher-end interface POST /api/teacher/user/delete/id in XueZhiSi Open Source Exam System = 3.9.0 contains a vertical privilege escalatio vulnerability. This interface accepts a user ID and then executes getUserByIdid, setDeletedtrue, updateByIdFilter in sequence, without any validation of...
GHSA-H9QX-V5XP-PH8P EGroupware has a Remote Code Execution Vulnerability
Summary A critical vulnerability has been identified in EGroupware that may lead to Remote Code Execution RCE. The issue allows an authenticated attacker to execute arbitrary commands on the server. If user self-registration is enabled, the vulnerability may be exploitable without prior...
CVE-2026-11988
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.3.9.1 via the 'userId' parameter due to missing validation on a user controlled key. This makes it possible for...
EUVD-2026-40906
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.3.9.1 via the 'userId' parameter due to missing validation on a user controlled key. This makes it possible for...
PT-2026-54461
The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.3.9.1 via the 'userId' parameter due to missing validation on a user controlled key. This makes it possible for...
Reasoning As an Attack Surface: Adaptive Evolutionary CoT Jailbreaks for LLMs
Large Reasoning Models LRMs have demonstrated remarkable capabilities in reasoning and generation tasks and are increasingly deployed in real-world applications. However, their explicit chain-of-thought CoT mechanism introduces new security risks, making them particularly vulnerable to jailbreak...
CVE-2026-32892
Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, Chamilo LMS contains an OS Command Injection vulnerability in the file move function. The move function in fileManage.lib.php passes user-controlled path values directly into exec shell commands without using...
CVE-2026-30875
Chamilo LMS is a learning management system. Prior to version 1.11.36, an arbitrary file upload vulnerability in the H5P Import feature allows authenticated users with Teacher role to achieve Remote Code Execution RCE. The H5P package validation only checks if h5p.json exists but doesn't block...
CVE-2026-30884
CVE-2026-30884 affects the Moodle plugin mdjnelson/moodle-mod_customcert . Prior to versions 4.4.9 and 5.0.3, a teacher with the mod/customcert:manage capability in any single course can read and silently overwrite certificate elements for other courses. The vulnerability arises because the core_...
CVE-2026-30875
Chamilo LMS is a learning management system. Prior to version 1.11.36, an arbitrary file upload vulnerability in the H5P Import feature allows authenticated users with Teacher role to achieve Remote Code Execution RCE. The H5P package validation only checks if h5p.json exists but doesn't block...
CVE-2026-30875
Chamilo LMS (prior to v1.11.36) exposes an authenticated RCE via H5P Import. An attacker with Teacher role can upload a crafted H5P package that bypasses validation (H5P package validation only checks for h5p.json and does not block .htaccess or PHP files with alternate extensions), enabling exec...
EUVD-2025-208167
Chamilo is a learning management system. Prior to version 1.11.30, a Stored XSS vulnerability exists in the glossary function, enabling all users with the Teachers role to inject JavaScript malicious code against the administrator. This issue has been patched in version 1.11.30...
CVE-2025-52482
Chamilo is a learning management system. Prior to version 1.11.30, a Stored XSS vulnerability exists in the glossary function, enabling all users with the Teachers role to inject JavaScript malicious code against the administrator. This issue has been patched in version 1.11.30...