Moodle 3.10.3 Cross Site Scripting

Exploit Title: Moodle 3.10.3 Calendar Cross Site Scripting Date: 25.03.2021 Author: Vincent666 ibn Winnie Software Link: https://moodle.org/ Tested on: Windows 10 Web Browser: Mozilla Firefox Google Dorks: inurl:/lib/editor/atto/plugins/managefiles/ or calendar/view.php?view=month My Youtube...

The vulnerability of the track_header() function in the libavformat library of the Ffmpeg multimedia environment allows a attacker to cause a service failure.

The vulnerability of the trackheader function in the libavformat library of the Ffmpeg multimedia environment is related to the writing of data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure...

The vulnerability in the HTTP Server TCP/IP stack of Track allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the HTTP Server TCP/IP stack in Track involves insufficient validation of input data during packet processing. Exploiting this vulnerability allows an attacker to cause service failures or execute arbitrary code...

CVE-2020-29075

Acrobat Reader DC versions 2020.013.20066 and earlier, 2020.001.30010 and earlier and 2017.011.30180 and earlier are affected by an information exposure vulnerability, that could enable an attacker to get a DNS interaction and track if the user has opened or closed a PDF file when loaded from the...

Reddit: [dubmash] Lack of authorization checks - Update Sound Titles

Summary: During the security testing, it has been observed that the UpdateSound api is vulnerable to IDOR. It allows an attacker to edit the victim's sound track titles. This vulnerability can be exploited using the sound track's uuid in the vulnerable request. This id is publicly known. Steps To...

Adobe Acrobat DC (Continuous) Security Update (APSB21-09) - Mac OS X

Adobe Acrobat DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Adobe Acrobat DC (Continuous) Security Update (APSB21-09) - Windows

Adobe Acrobat DC Continuous Track is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

FFmpeg Out-of-Bounds Write Vulnerability

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. An out-of-bounds write vulnerability exists in trackheader in libavformat/vividas.c in FFmpeg 4.3.1. The vulnerability stems from a failure of...

CVE-2020-35964

trackheader in libavformat/vividas.c in FFmpeg 4.3.1 has an out-of-bounds write because of incorrect extradata packing...

UBUNTU-CVE-2020-35964

trackheader in libavformat/vividas.c in FFmpeg 4.3.1 has an out-of-bounds write because of incorrect extradata packing...

CVE-2020-35964

trackheader in libavformat/vividas.c in FFmpeg 4.3.1 has an out-of-bounds write because of incorrect extradata packing...

FFmpeg 缓冲区错误漏洞

FFmpeg is a set of open source computer programs that can be used to record, convert digital audio and video to streams under the LGPL or GPL license. An out-of-bounds write vulnerability exists in trackheader in libavformat/vividas.c in FFmpeg 4.3.1. The vulnerability stems from a failure of...

Adobe Acrobat DC (Continuous) Security Update (APSB20-75) - Windows

Adobe Acrobat DC Continuous Track is prone to an information disclosure vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Adobe Acrobat DC (Continuous) Security Update (APSB20-75) - Mac OS X

Adobe Acrobat DC Continuous Track is prone to an information disclosure vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Use This Ultimate Template to Plan and Monitor Your Cybersecurity Budgets

Sound security budget planning and execution are essential for CIO's/CISO's success. Now, for the first time, the Ultimate Security Budget Plan and Track Excel template download here provide security executives a clear and intuitive tool to keep track of planned vs. actual spend, ensuring that...

PT-2022-4072 · Moodle +2 · Moodle +2

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: A stored XSS and blind SSRF issue exists due to insufficient sanitization of user-supplied data in the SCORM track details. A remote attacker can trick the victim into following a specially...

PT-2020-5591

Name of the Vulnerable Software and Affected Versions FFmpeg version 4.3.1 Description The issue is related to an out-of-bounds write in the track header function of the libavformat library in FFmpeg, caused by incorrect extradata packing. This can potentially allow a remote attacker to cause a...

GHSA-WC7Q-QPM4-8PQV Malicious Package in rrequest

All versions of rrequest typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process...

GHSA-2P99-6F47-8X9J Malicious Package in asnc

All versions of asnc typosquatted a popular package of similar name and tracked users who had installed the incorrect package. The package uploaded information to a remote server including: name of the downloaded package, name of the intended package, the Node version and whether the process was...

track-chinapost.com Cross Site Scripting vulnerability OBB-1231248

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...