CVE-2017-7531

In Moodle 3.3, the course overview block reveals activities in hidden courses...

CVE-2017-7532

In Moodle 3.x, course creators are able to change system default settings for courses...

nicpld.org XSS vulnerability

Vulnerable URL: https://www.nicpld.org/courses/index.asp?programme=1"...

uisv.it XSS vulnerability

Vulnerable URL: http://www.uisv.it/index.asp?draw=Courses=1/-///'/"//--...

Historical courses and resorts in Elliptic Curves Cryptography - Is Curve25519 dead?

tl;dr This short blog post serves to me to recollect some of the thing I have been learning climbing about Elliptic Curves Cryptography ECC from now on during the last months/years, so please take it with a grain of salt since it might contains some erroneous beliefs. '80 - Introduction...

Radancy: Possible to view and takeover other user's education and courses @ mijn.werkenbijdefensie.nl

Domain and URL: https://mijn.werkenbijdefensie.nl/instellingen/gegevens/tab2 Summary: IDOR vulnerability in editing education/courses Description: It is possible to view and change courses and education of other users also known as an IDOR. It's also possible to save these, and after saving the...

The Hacker News (THN) Celebrates 6th Anniversary Today

Can you believe that it's been 6 years since we first launched The Hacker News? Yes, The Hacker News is celebrating its sixth anniversary today on 1st November. We started this site on this same day back in 2010 with the purpose of providing a dedicated platform to deliver latest infosec news and...

The Hacker News launches Online Deals Store – Get Best Deals & Offers

Hey readers, guess what? The Hacker News THN is about to complete its 6 years as a leading Information Security Channel – attracting over 9 Million readers worldwide – and a trusted source for Hacking, Cyber Security and Infosec News for the enthusiasts, technologists & nerds. In the special...

Stepic.org: Free Courses - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Stepic.org: Free Courses published at the 'play' market has multiple vulnerabilities...

Joomla Guru Pro Component (com_guru) - SQL Injection

Exploit for php platform in category web applications Exploit Title: Joomla Guru Pro comguru Component - SQL Injection Exploit Author: s0nk3y Date: 14/07/2016 Vendor Homepage: https://www.ijoomla.com Software Link:...

Joomla! Component Guru Pro - 'Itemid' SQL Injection

Exploit Title: Joomla Guru Pro comguru Component - SQL Injection Exploit Author: s0nk3y Date: 14/07/2016 Vendor Homepage: https://www.ijoomla.com Software Link: https://www.ijoomla.com/component/digistore/products/47-joomla-add-ons/119-guru-pro/189?Itemid=189 Category: webapps Version: All Tested...

SQL injection vulnerability in the distance learning platform courses.htm?recommend= parameter of Shenzhen Tengchuang Network Technology Co.

Tengchuang Internet Distance Education Platform is an online knowledge trading platform centered on real-time interactive online classroom, combining powerful functions such as courseware on-demand, course transaction, online payment, and online examination, etc. for students and teachers in...

UBUNTU-CVE-2016-2154

admin/tool/monitor/lib.php in Event Monitor in Moodle 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 does not consider the moodle/course:viewhiddencourses capability, which allows remote authenticated users to discover hidden course names by subscribing to a rule...

Udemy Online Courses - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Udemy Online Courses published at the 'play' market has multiple vulnerabilities...

FreeBSD : moodle -- multiple vulnerabilities (a430e15d-f93f-11e5-92ce-002590263bf5)

Marina Glancy reports : - MSA-16-0003: Incorrect capability check when displaying users emails in Participants list - MSA-16-0004: XSS from profile fields from external db - MSA-16-0005: Reflected XSS in moddata advanced search - MSA-16-0006: Hidden courses are shown to students in Event Monitor ...

EdX - Online Courses - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application EdX - Online Courses published at the 'play' market has multiple vulnerabilities...

English Conversation Courses - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application English Conversation Courses published at the 'play' market has multiple vulnerabilities...

German Courses for Beginner - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application German Courses for Beginner published at the 'play' market has multiple vulnerabilities...

Updated moodle packages fix security vulnerability

In Moodle before 2.8.11, teachers who otherwise were not supposed to see students' emails could see them in the participants list CVE-2016-2151. In Moodle before 2.8.11, Moodle traditionally trusted content from external DB, however it was decided that external datasources may not be aware of web...

Moodle Event Monitor Design Vulnerability

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A security vulnerability exists in Event Monitor in version 2.8.x prior to Moodle...