WhatTheHack

What The Hack - 저장소 What The Hack GitHub 저장소에 오신 것을 환영합니다. 이 저장소는 조직에서 학생들과 함께 What The Hack 이벤트를 주최하려는 사람들을 위해 설계된 코치 콘텐츠를 포함하고 있습니다. What The Hack 이벤트에 참석하거나 주최하는 데 관심이 있는 조직은 What The Hack 웹사이트를 방문해 주세요: https://aka.ms/wth What The Hack 이벤트에 참석하는 학생은What The Hack 웹사이트로 이동해 주세요. What The Hack이란...

Kernel-Dojo-Labs

Kernel-Dojo Lab An interactive practice environment for the...

CVE-2026-32932

Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, an Open Redirect vulnerability in the session course edit page allows an attacker to redirect an authenticated administrator to an arbitrary external URL after saving coach assignment changes. The redirect also leaks th...

CVE-2026-32932

Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, an Open Redirect vulnerability in the session course edit page allows an attacker to redirect an authenticated administrator to an arbitrary external URL after saving coach assignment changes. The redirect also leaks th...

CVE-2026-32932 Chamilo LMS has an Open Redirect via Unvalidated 'page' Parameter in Session Course Edit

Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, an Open Redirect vulnerability in the session course edit page allows an attacker to redirect an authenticated administrator to an arbitrary external URL after saving coach assignment changes. The redirect also leaks th...

Malicious code in coach-improve-screen (npm)

The package coach-improve-screen was found to contain malicious code...

MAL-2025-43839 Malicious code in coach-fix-composed (npm)

The package coach-fix-composed was found to contain malicious code...

Malicious code in coach-fix-composed (npm)

The package coach-fix-composed was found to contain malicious code...

MAL-2025-45777 Malicious code in recent-coach-suddenly (npm)

The package recent-coach-suddenly was found to contain malicious code...

Malicious code in recent-coach-suddenly (npm)

The package recent-coach-suddenly was found to contain malicious code...

MAL-2025-43841 Malicious code in coach-improve-screen (npm)

The package coach-improve-screen was found to contain malicious code...

Malicious code in coach-gas-police (npm)

The package coach-gas-police was found to contain malicious code...

MAL-2025-43840 Malicious code in coach-gas-police (npm)

The package coach-gas-police was found to contain malicious code...

PT-2025-3875 · Unknown · Liujianview Gymxmjpa

Name of the Vulnerable Software and Affected Versions: liujianview gymxmjpa version 1.0 Description: A critical vulnerability has been found in the CoachController function of the file src/main/java/com/liujian/gymxmjpa/controller/CoachController.java. The manipulation of the coachName argument...

CVE-2024-56262: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in GS Plugins GS Coaches gs-coach allows Stored XSS.This issue affects GS Coaches: from n/a through = 1.1.0...

MAL-2024-2158 Malicious code in down_load_ebook_coacher_avec_l_appreciative_inquiry_by_jean_pages_l68qu (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-3627

CVE-2024-3627 affects Wheel of Life: Coaching and Assessment Tool for Life Coach (WordPress). The WordPress plugin versions up to 1.1.7 are vulnerable due to missing authorization checks in AjaxFunctions.php, allowing authenticated attackers with subscriber-level access or higher to delete arbitr...

CVE-2024-3627: Missing Authorization

The Wheel of Life: Coaching and Assessment Tool for Life Coach plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on several functions in the AjaxFunctions.php file in all versions up to, and including, 1.1.7. This makes it possible...

@alphabatem/metaplex-shadow-drive (>=2.0.4, <=2.0.5), @builderdao/apis (>=0.0.4, <=0.0.8) +1 more potentially affected by CVE-2024-30253 via @solana/web3.js (1.33.0)

@solana/web3.js NPM version 1.33.0 is affected by a known vulnerability. The following packages have a transitive dependency on @solana/web3.js and may be impacted: - @alphabatem/metaplex-shadow-drive =2.0.4, =0.0.4, =0.0.2, =0.0.3 Source cves: CVE-2024-30253 Source advisory: OSV:GHSA-8M45-2RJM-J...

coach-ability.de Cross Site Scripting vulnerability OBB-3905115

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...