CVE-2021-36396-Moodle-Time-Based-SQLi-Exploit

CVE-2021-36396 Exploit Description This repository holds a Python-based exploit targeting CVE-2021-36393, a severe vulnerability found within Moodle's recent courses feature. The flaw resides in the 'sort' parameter, enabling SQL injection attacks that can lead to unauthorized database access...

CVE-2024-12172

CVE-2024-12172 WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses = 3.2.21 - Missing Authorization to Authenticated Subscriber+ Arbitrary User Meta Update Description The WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution,...

Cappriciosec-University

📚 Cappriciosec University – India’s First Hacker E-Learning Platform Cappriciosec University is India’s first e-learning platform for hackers, cybersecurity beginners, and bug bounty hunters. We are focused on ethical hacking, penetration testing, IoT hacking, cyber crime investigation, and...

FreeLabFriday_Labs

Welcome to the Free Lab Friday Lab Platform! Need 1 lab?? Maybe 2???? Well we've got 200+ so go crazy! This repository contains all lab instructions for the following content: Information Security Core Skills SOC Core Skills Active Defense & Cyber Deception SOC Analyst Labs Backdoors & Breaches...

MasterStudy LMS WordPress Plugin <= 3.2.5 - SQL Injection

The MasterStudy LMS WordPress Plugin for Online Courses and Education plugin for WordPress is vulnerable to union based SQL Injection via the 'user' parameter of the /lms/stm-lms/order/items REST route in all versions up to, and including, 3.2.5 due to insufficient escaping on the user supplied...

CVE-2026-92715

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.1.0 via the 'ID' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, wi...

EUVD-2026-103222

The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.1.0 via the 'ID' parameter due to missing validation on a user controlled key. This makes it possible for authenticated attackers, wi...

PT-2026-116362

Name of the Vulnerable Software and Affected Versions Tutor LMS versions prior to 4.1.1 Description The Tutor LMS plugin for WordPress contains an Insecure Direct Object Reference IDOR flaw. This occurs because the Input::sanitize array function fails to strip attacker-supplied POST keys, allowin...

CVE-2026-111603 PlayEdu through 2.3 Missing Authorization via Student CourseController Endpoints

PlayEdu through 2.3 contains a missing authorization vulnerability in the CourseController that allows authenticated students to access department-restricted courses by omitting the department visibility check. Attackers can enumerate sequential course and attachment IDs via the course details an...

CVE-2026-111603 PlayEdu through 2.3 Missing Authorization via Student CourseController Endpoints

PlayEdu through 2.3 contains a missing authorization vulnerability in the CourseController that allows authenticated students to access department-restricted courses by omitting the department visibility check. Attackers can enumerate sequential course and attachment IDs via the course details an...

CVE-2026-111603

PlayEdu versions through 2.3 are affected by a missing authorization vulnerability within the CourseController . The root cause is the omission of a department visibility check , which allows authenticated students to access department-restricted courses. Attackers can perform ID enumeration on s...

CVE-2026-111603 PlayEdu through 2.3 Missing Authorization via Student CourseController Endpoints

PlayEdu through 2.3 contains a missing authorization vulnerability in the CourseController that allows authenticated students to access department-restricted courses by omitting the department visibility check. Attackers can enumerate sequential course and attachment IDs via the course details an...

WordPress SureDash – Community, Courses & Member Dashboard plugin <= 1.12.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability

Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by Jacek Sowiński dzaku in WordPress Plugin SureDash versions = 1.12.0...

EUVD-2026-102818

The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'displayname' parameter in all versions up to, and including, 1.12.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

PlayEdu authorization issue vulnerability

PlayEdu versions 2.3 and earlier have an authorization issue vulnerability. This vulnerability stems from a lack of authorization verification in the CourseController. It allows authenticated students to access restricted courses by bypassing department visibility checks. Additionally, it enables...

Jacky Huang – Tencent Cloud Authorization Issue Vulnerability

The Tencent Cloud courses for versions 2.0.1 and earlier have an authorization issue vulnerability. This vulnerability stems from improper restrictions on authentication attempts. No expiration time or attempt limit is set for the 6-digit SMS/email verification codes. This allows unauthorized...

EUVD-2026-100904

The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 10.3.1 via attacker-controlled attributes of the lifterlmscheckout shortcode. This is due to the llmsgettemplate helper performing extract o...

CVE-2026-110284: Improper Control of Filename for Include/Require Statement in PHP Program

The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 10.3.1 via attacker-controlled attributes of the lifterlmscheckout shortcode. This is due to the llmsgettemplate helper performing extract o...

EUVD-2026-96285

The SureDash – Community, Courses & Member Dashboard plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via Image 'alt' Attribute in Community Post Content in all versions up to, and including, 1.12.1 due to insufficient input sanitization and output escaping. This makes ...

EUVD-2026-96108

The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 10.2.1 via deserialization of untrusted input . This makes it possible for authenticated attackers, with custom-level access and above, ...