10247 matches found
CVE-2023-28694
Cross-Site Request Forgery CSRF vulnerability in Wbcom Designs Wbcom Designs – BuddyPress Activity Social Share plugin = 3.5.0 versions...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability in Wbcom Designs Wbcom Designs – BuddyPress Activity Social Share plugin = 3.5.0 versions...
CVE-2023-28694
CVE-2023-28694 describes a CSRF vulnerability in the WordPress plugin Wbcom Designs – BuddyPress Activity Social Share, affecting versions up to 3.5.0. The issue is identified as CSRF with attacker-required user privileges, and Patchstack notes a fix in version 3.5.1. Public disclosures and entri...
WordPress Plugin bp-activity-social-share Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
MAL-2023-8508 Malicious code in zoo-web-components-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5f5a033ba4e84e9b29f5eb20d41c448241b24f20fb48b6ad382babb24543441f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in flink-dashboard (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e9f73b295599c7e74ec00ae60260502674bcb6b7077f1845295691fee703495 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Remote Code Execution
Moodle is vulnerable to Remote Code Execution. The vulnerability is due to improper sanitization of objects in the lesson activity. The issue can be exploited by the attacker to gain remote code execution...
Malicious code in jsii-calc-base (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ca8b3646065a7003a827368b4c1ece0f6ab69346c13662e971a5cc0c223f6f13 The OpenSSF Package Analysis project identified 'jsii-calc-base' @ 0.0.1 npm as malicious. It is considered malicious because: - The package...
CVE-2023-5543
When duplicating a BigBlueButton activity, the original meeting ID was also duplicated instead of using a new ID for the new activity. This could provide unintended access to the original meeting...
Code injection
When duplicating a BigBlueButton activity, the original meeting ID was also duplicated instead of using a new ID for the new activity. This could provide unintended access to the original meeting...
Moodle Code Injection vulnerability
A remote code execution risk was identified in the Lesson activity. By default this was only available to teachers and managers...
Malicious code in one-host-app-context (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c17ed3eae2517098a0d480f80d6166610d23a6d0e082bf72cc8853b96a71a613 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-5540
A remote code execution risk was identified in the IMSCP activity. By default this was only available to teachers and managers...
CVE-2023-5539
A remote code execution risk was identified in the Lesson activity. By default this was only available to teachers and managers...
CVE-2023-5539
A remote code execution risk was identified in the Lesson activity. By default this was only available to teachers and managers...
Remote code execution
A remote code execution risk was identified in the Lesson activity. By default this was only available to teachers and managers...
Remote code execution
A remote code execution risk was identified in the IMSCP activity. By default this was only available to teachers and managers...
CVE-2023-5540
A remote code execution risk was identified in the IMSCP activity. By default this was only available to teachers and managers...