Today’s File Security is So ’80s, Part 3: Dynamic Peer Groups – 3 Examples from Customer Data

In the first two parts of this series, we discussed why permissions management, the traditional approach to file security, no longer works and introduced a new approach to file security that leverages machine learning to build dynamic peer groups based on how users actually access files. In this...

therapytools.us XSS vulnerability

Vulnerable URL: http://www.therapytools.us/coursearticle.php?courseid=1/-///'/"//--...

Cross-site scripting vulnerability in moodle course management system

Moodle Modular Object-Oriented Dynamic Learning Environment is a software package for creating online courses or websites. A cross-site scripting vulnerability exists in the Moodle course management system due to the program's lax filtering of link content. This allows an attacker to construct...

hwk-luebeck.de XSS vulnerability

Vulnerable URL: https://www.hwk-luebeck.de/service-center/kurse-seminare-finden.html?id=92=fortbildung=view.cgi=1=0==%3E%27%3E%22%3Et%3Ci%3Ep%3Cimg+src%3Dx+onerror%3Dprompt%28%2Fopenbugbounty%2F%29%3E=liste Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017...

[SECURITY] Fedora 25 Update: moodle-3.1.6-1.fc25

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

[SECURITY] Fedora 24 Update: moodle-3.1.6-1.fc24

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

Moodle 3.0.x < 3.0.10 Multiple Vulnerabilities

Binary data 700124.prm...

Cross-site Request Forgery (CSRF)

Moodle is vulnerable to cross-site request forgery CSRF attacks. Attackers are able to change the "number of courses displayed in the course overview block" configuration setting using this vector...

Cross-site Scripting (XSS)

Moodle is vulnerable to cross-site scripting attacks. These attacks are possible through the course summary filter on the Add a new course page by passing an attribute to it. Note: This is not going to be fixed by the Moodle team...

Moodle Cross-Site Request Forgery Vulnerability (CNVD-2017-06926)

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A cross-site request forgery vulnerability exists in Moodle version 2.x and version 3....

CVE-2017-7491

In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the "number of courses displayed in the course overview block" configuration setting...

UBUNTU-CVE-2017-7491

In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the "number of courses displayed in the course overview block" configuration setting...

CVE-2017-7491

CVE-2017-7491 affects Moodle 2.x and 3.x and describes a Cross-Site Request Forgery (CSRF) vulnerability that enables an attacker to modify the "number of courses displayed in the course overview block" configuration setting. The entry is supported by multiple connected advisories (GHSA-3HMR-948V...

Radancy: IDOR in editing courses

Description This vulnerability consists in : https://mijn.werkenbijdefensie.nl/instellingen/gegevens/ This vulnerability allows an attacker to edit courses that do not belong to him and remove them from the users account. The edited course ends up in the attackers account, but gets deleted from t...

Learn Practical Hacking Online — Get Training For Just $45!

Due to recent highly publicised hacks and high-profile data breaches, certified hackers are in huge demand and being hired by almost all industry to help them keep their networks protected. These ethical hackers not only gain reputation in the IT industry but are also one of the most well-paid...

Stored Cross-site Scripting Vulnerability in Template/View.aspx Page of Shanghai Excellence Ruixin Digital Technology Co.

Excellence Course Center System is a teaching and learning system specially developed by Shanghai Excellence Ruixin Digital Technology Co. for teaching in colleges and universities. A stored cross-site scripting vulnerability exists in the comments of the Template/View.aspx page of the Excellence...

CVE-2016-3733

The "restore teacher" feature in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to overwrite the course idnumber...

CVE-2016-3733

The "restore teacher" feature in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to overwrite the course idnumber...

UBUNTU-CVE-2016-3733

The "restore teacher" feature in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to overwrite the course idnumber...

Design/Logic Flaw

The "restore teacher" feature in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to overwrite the course idnumber...