BIT-MOODLE-2022-0332

A flaw was found in Moodle in versions 3.11 to 3.11.4. An SQL injection risk was identified in the h5p activity web service responsible for fetching user attempt data...

BIT-REDMINE-2021-42326

Redmine before 4.1.5 and 4.2.x before 4.2.3 may disclose the names of users on activity views due to an insufficient access filter...

BIT-MOODLE-2023-5539 Moodle: authenticated remote code execution risk in lesson

A remote code execution risk was identified in the Lesson activity. By default this was only available to teachers and managers...

BIT-MOODLE-2023-5540 Moodle: authenticated remote code execution risk in imscp

A remote code execution risk was identified in the IMSCP activity. By default this was only available to teachers and managers...

BIT-MOODLE-2023-5543 Moodle: duplicating a bigbluebutton activity assigns the same meeting id

When duplicating a BigBlueButton activity, the original meeting ID was also duplicated instead of using a new ID for the new activity. This could provide unintended access to the original meeting...

CVE-2024-1356

creationtimestamp| type| source ---|---|--- 2024-03-05 22:26:17+00:00| seen| https://t.me/ctinow/200753 2024-03-05 22:32:08+00:00| seen| https://t.me/ctinow/200763...

American Express warns customers about third party data breach

American Express has sent affected customers a warning that “a third party service provider engaged by numerous merchants experienced unauthorized access to its system.” In a subsequent update, American Express explained that it was not a service provider, but a merchant processor that suffered t...

CVE-2024-26334

creationtimestamp| type| source ---|---|--- 2024-03-05 10:27:26+00:00| seen| https://t.me/ctinow/200074 2024-03-05 10:27:30+00:00| seen| https://t.me/ctinow/200078...

RHSA-2024:1072

creationtimestamp| type| source ---|---|--- 2024-03-04 21:16:53+00:00| seen| https://t.me/ctinow/199602...

CVE-2024-22463

creationtimestamp| type| source ---|---|--- 2024-03-04 15:27:09+00:00| seen| https://t.me/ctinow/199310 2024-03-04 15:27:22+00:00| seen| https://t.me/ctinow/199321...

CVE-2023-52514

creationtimestamp| type| source ---|---|--- 2024-03-02 23:26:23+00:00| seen| https://t.me/ctinow/198492 2024-03-04 21:11:37+00:00| seen| https://t.me/ctinow/199587...

MAL-2024-1051 Malicious code in build-benchmarks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9051e586242e7f4cb76bca3b533a915678a64eb52f0b8812e1a1d1f35e358fd5 The OpenSSF Package Analysis project identified 'build-benchmarks' @ 15.2.4 npm as malicious. It is considered malicious because: - The package...

Delta Electronics CNCSoft-B

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Low attack complexity Vendor : Delta Electronics Equipment : CNCSoft-B Vulnerability : Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code. 3...

CVE-2023-50905

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Melapress WP Activity Log allows Stored XSS.This issue affects WP Activity Log: from n/a through 4.6.1...

CVE-2023-50905

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Melapress WP Activity Log allows Stored XSS.This issue affects WP Activity Log: from n/a through 4.6.1...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Melapress WP Activity Log allows Stored XSS.This issue affects WP Activity Log: from n/a through 4.6.1...

CVE-2023-50905

CVE-2023-50905 is a stored XSS in the WordPress plugin WP Activity Log (Melapress) affecting versions up to 4.6.1. The root cause is improper neutralization of input during web page generation. Consequences include stored JavaScript execution if an attacker injects payload into the vulnerable fie...

CVE-2023-50905 WordPress WP Activity Log Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Melapress WP Activity Log allows Stored XSS.This issue affects WP Activity Log: from n/a through 4.6.1...

CVE-2023-50905 WordPress WP Activity Log Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Melapress WP Activity Log allows Stored XSS.This issue affects WP Activity Log: from n/a through 4.6.1...

CVE-2024-24150

creationtimestamp| type| source ---|---|--- 2024-02-29 02:56:34+00:00| seen| https://t.me/ctinow/196117 2024-02-29 03:03:08+00:00| seen| https://t.me/ctinow/196134 2024-03-12 18:16:54+00:00| seen| https://t.me/ctinow/205953...