CVE-2024-34313

CVE-2024-34313 Description VPL Jail System up to v4.0.2 was discovered to contain a Path Traversal vulnerability allowing arbitrary file overrides and thereby privilege escalation to root user. This vulnerability can be chained with CVE-2024-34312 to take over a Moodle instance remotely without a...

CVE-2026-113683

VPL Virtual Programming Lab for Moodle before 5.0.0 contains a reflected cross-site scripting vulnerability that allows remote attackers to inject script via unencoded filename1/filename2 parameters in similarity/diff.php. Attackers can craft a diff.php link with a JavaScript payload that runs wh...

CVE-2026-113683 VPL for Moodle before 5.0.0 Reflected XSS via similarity/diff.php filename

VPL Virtual Programming Lab for Moodle before 5.0.0 contains a reflected cross-site scripting vulnerability that allows remote attackers to inject script via unencoded filename1/filename2 parameters in similarity/diff.php. Attackers can craft a diff.php link with a JavaScript payload that runs wh...

EUVD-2026-105099

VPL Virtual Programming Lab for Moodle before 5.0.0 contains a reflected cross-site scripting vulnerability that allows remote attackers to inject script via unencoded filename1/filename2 parameters in similarity/diff.php. Attackers can craft a diff.php link with a JavaScript payload that runs wh...

CVE-2026-113683 VPL for Moodle before 5.0.0 Reflected XSS via similarity/diff.php filename

VPL Virtual Programming Lab for Moodle before 5.0.0 contains a reflected cross-site scripting vulnerability that allows remote attackers to inject script via unencoded filename1/filename2 parameters in similarity/diff.php. Attackers can craft a diff.php link with a JavaScript payload that runs wh...

CVE-2026-113683 VPL for Moodle before 5.0.0 Reflected XSS via similarity/diff.php filename

VPL Virtual Programming Lab for Moodle before 5.0.0 contains a reflected cross-site scripting vulnerability that allows remote attackers to inject script via unencoded filename1/filename2 parameters in similarity/diff.php. Attackers can craft a diff.php link with a JavaScript payload that runs wh...

CVE-2026-113683

The VPL (Virtual Programming Lab) for Moodle plugin version before 5.0.0 is vulnerable to a reflected cross-site scripting (XSS) vulnerability. The root cause is the failure to encode the filename1/filename2 parameters in similarity/diff.php . A remote attacker can craft a malicious link containi...

PT-2026-118481

Name of the Vulnerable Software and Affected Versions VPL Virtual Programming Lab for Moodle versions prior to 5.0.0 Description A reflected cross-site scripting issue exists where remote attackers can inject scripts through unencoded filename1 and filename2 parameters at the 'similarity/diff.php...

CVE-2024-34313

An issue in VPL Jail System up to v4.0.2 allows attackers to execute a directory traversal via a crafted request to a public endpoint...

EUVD-2024-25203

Malicious code in bioql PyPI...

EUVD-2024-19442

Malicious code in bioql PyPI...

EUVD-2024-19397

Malicious code in bioql PyPI...

CVE-2024-21808

Improper buffer restrictions in some IntelR VPL software before version 24.1.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-28051

Out-of-bounds read in some IntelR VPL software before version 24.1.4 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2024-28030

NULL pointer dereference in some IntelR VPL software before version 24.1.4 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-21830

Uncontrolled search path in some IntelR VPL software before version 2023.4.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21830

Uncontrolled search path in some IntelR VPL software before version 2023.4.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21830

Intel® VPL software contains an Uncontrolled search path vulnerability (CVE-2024-21830) that may allow local privilege escalation for authenticated users. The issue affects Intel® VPL prior to version 2023.4.0 and is documented in Intel’s advisory, which also provides mitigations: update Intel® V...

CVE-2024-21830

Uncontrolled search path in some IntelR VPL software before version 2023.4.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21830: Uncontrolled Search Path Element

Uncontrolled search path in some IntelR VPL software before version 2023.4.0 may allow an authenticated user to potentially enable escalation of privilege via local access...