Moodle Lesson activity password bypass through PHP loose comparison

A flaw was found in Moodle. When restricting access to a lesson activity with a password, certain passwords could be bypassed or less secure due to a loose comparison in the password-checking logic. This issue only affected passwords set to "magic hash" values...

CVE-2024-45691

A flaw was found in Moodle. When restricting access to a lesson activity with a password, certain passwords could be bypassed or less secure due to a loose comparison in the password-checking logic. This issue only affected passwords set to "magic hash" values...

CVE-2024-45691 Moodle: lesson activity password bypass through php loose comparison

A flaw was found in Moodle. When restricting access to a lesson activity with a password, certain passwords could be bypassed or less secure due to a loose comparison in the password-checking logic. This issue only affected passwords set to "magic hash" values...

CVE-2024-45691 Moodle: lesson activity password bypass through php loose comparison

A flaw was found in Moodle. When restricting access to a lesson activity with a password, certain passwords could be bypassed or less secure due to a loose comparison in the password-checking logic. This issue only affected passwords set to "magic hash" values...

MAL-2024-10856 Malicious code in react-fatigue-dev (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8fcb64ab16a7b12d7342e39dae03aeb4556ed831e407c63d3ea67ede1b88aa2b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10855 Malicious code in node-elm-stdio (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 009716aab1cfd479b733ac360984c2ede681513ace927b45f6b7f8a65c9bb92b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10853 Malicious code in filter-engine-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c494b140465be2de8cadcbe5fcaf5f82d7980ca863eeb3cba9e6d9e0e762ebc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10846 Malicious code in river-build (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28a856c975ffce278cd6752a94fda3cc892d9af33858cc33d5dcb4f0bdafeb62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10850 Malicious code in cljs-dopeloop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9232bb9421a218946057ab6688d62120e80b911ca38062d0ae6c42a951d2cddd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Activity Log Plugin <= 2.11.1 is vulnerable to Cross Site Scripting (XSS)

Software Activity Log Type Plugin Vulnerable versions = 2.11.1 Fixed in 2.11.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-10788 Patch priority Medium CVSS severity Medium 7.1 Developer Elementor PSID 657fbb862f42 Credits mikemyers Required...

CVE-2024-51814 WordPress 活动链接推广插件 plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in 野人 活动链接推广插件 yr-activity-link allows DOM-Based XSS.This issue affects 活动链接推广插件: from n/a through = 1.2.0...

MAL-2024-10842 Malicious code in mona-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a61cb75bbd6d9e0b31a037870413021d0e67df7d4e4974cd68337efe54396e31 The OpenSSF Package Analysis project identified 'mona-service' @ 99.11.18 npm as malicious. It is considered malicious because: - The package...

Malicious code in mona-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis deb04a09ed185756e155e8000e2ba858d8995b9ced7536cd15b25012b100d046 The OpenSSF Package Analysis project identified 'mona-runtime' @ 99.11.18 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10841 Malicious code in mona-runtime (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis deb04a09ed185756e155e8000e2ba858d8995b9ced7536cd15b25012b100d046 The OpenSSF Package Analysis project identified 'mona-runtime' @ 99.11.18 npm as malicious. It is considered malicious because: - The package...

Malicious code in mona-client-mini (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3ecc64568abdb72b3b6b3101943f55f32b78ece176ff3c7e2a7f96ca6e86442b The OpenSSF Package Analysis project identified 'mona-client-mini' @ 99.11.18 npm as malicious. It is considered malicious because: - The packag...

MAL-2024-10840 Malicious code in mona-client-mini (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3ecc64568abdb72b3b6b3101943f55f32b78ece176ff3c7e2a7f96ca6e86442b The OpenSSF Package Analysis project identified 'mona-client-mini' @ 99.11.18 npm as malicious. It is considered malicious because: - The packag...

MAL-2024-10816 Malicious code in take2-hello-world (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3caf0d2c986a7f85b5b656b1597d921f3642dca37fd0d5516208e69befb5cf53 The OpenSSF Package Analysis project identified 'take2-hello-world' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-10815 Malicious code in odin-security (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 88fb389e44efcf715a97b223a3b5d1df5427225000fc86af2138b7bcb3934375 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10747 Malicious code in galaktika-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b9bbc46888ec54d0f044dbb94a3b9d6dfd27c7279fcfd31387eb82580eaa972c The OpenSSF Package Analysis project identified 'galaktika-components' @ 0.1.2 npm as malicious. It is considered malicious because: - The packa...

MAL-2024-10813 Malicious code in shopee-dashjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1566cc186f02b37e1800b37a0cda42b7e54616bfc7df46dc5fc7fd04b9bbd6db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...