499 matches found
EdX - Online Courses - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application EdX - Online Courses published at the 'play' market has multiple vulnerabilities...
English Conversation Courses - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities
HackApp vulnerability scanner discovered that application English Conversation Courses published at the 'play' market has multiple vulnerabilities...
German Courses for Beginner - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application German Courses for Beginner published at the 'play' market has multiple vulnerabilities...
Updated moodle packages fix security vulnerability
In Moodle before 2.8.11, teachers who otherwise were not supposed to see students' emails could see them in the participants list CVE-2016-2151. In Moodle before 2.8.11, Moodle traditionally trusted content from external DB, however it was decided that external datasources may not be aware of web...
Moodle Event Monitor Design Vulnerability
Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment, developed by Dr. Martin Dougiamas of Australia. A security vulnerability exists in Event Monitor in version 2.8.x prior to Moodle...
moodle -- multiple vulnerabilities
Marina Glancy reports: MSA-16-0003: Incorrect capability check when displaying users emails in Participants list MSA-16-0004: XSS from profile fields from external db MSA-16-0005: Reflected XSS in moddata advanced search MSA-16-0006: Hidden courses are shown to students in Event Monitor...
UBUNTU-CVE-2016-0724
The 1 coreenrolgetcourseenrolmentmethods and 2 enrolselfgetinstanceinfo web services in Moodle through 2.6.11, 2.7.x before 2.7.12, 2.8.x before 2.8.10, 2.9.x before 2.9.4, and 3.0.x before 3.0.2 do not consider the moodle/course:viewhiddencourses capability, which allows remote authenticated use...
bradford.ac.uk XSS vulnerability
Vulnerable URL: http://www.bradford.ac.uk/study/courses/ Details: Description| Value ---|--- Patched:| Yes, at 01.12.2015 Latest check for patch:| 01.12.2015 14:54 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 89103 Google Pagerank| 7 VIP website status:| Yes...
src.ac.uk XSS vulnerability
Vulnerable URL: http://www.src.ac.uk/student-life/134-courses/part-time-courses/engineering-skills/641-recreational-welding? Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 22:42 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...
Moodle 'lib/moodlelib.php' Sensitive Information Disclosure Vulnerability
Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A sensitive information disclosure vulnerability exists in the Moodle 'lib/moodlelib.php' script. As the theme uses the blocks-regions...
SA-CONTRIB-2015-002 - Course - Cross Site Scripting (XSS)
Course module enables you to create e-learning courses with any number of requirements for completion. The module doesn't sufficiently filter node title displays when being used in a course. This vulnerability is mitigated by the fact that an attacker must have a role with the permission to creat...
Udemy Paid Courses Bypasser - Downloader
This Tool Bypasses any Paid Udemy Course and Download it Without Paying a Single Peny. Requirments: Full Course URL Example: https://www.udemy.com/become-an-android-developer-from-scratch/ ONLY. Usage Info This Tools is Coded in Python So You'll Need to Have Python Installed and Some Python...
Design/Logic Flaw
enrol/index.php in Moodle 2.6.x before 2.6.3 does not check for the moodle/course:viewhiddencourses capability before listing hidden courses, which allows remote attackers to obtain sensitive name and summary information about these courses by leveraging the guest role and visiting a crafted URL...
CVE-2014-0217: Exposure of Sensitive Information to an Unauthorized Actor
enrol/index.php in Moodle 2.6.x before 2.6.3 does not check for the moodle/course:viewhiddencourses capability before listing hidden courses, which allows remote attackers to obtain sensitive name and summary information about these courses by leveraging the guest role and visiting a crafted URL...
CVE-2014-0217
enrol/index.php in Moodle 2.6.x before 2.6.3 does not check for the moodle/course:viewhiddencourses capability before listing hidden courses, which allows remote attackers to obtain sensitive name and summary information about these courses by leveraging the guest role and visiting a crafted URL...
eFront 3.6.14 (build 18012) - Multiple Persistent Cross-Site Scripting Vulnerabilities
eFront 3.6.14 build 18012 - Multiple Persistent Cross-Site Scripting Vulnerabilities Exploit-DB Note: Screenshot provided by exploit author. Exploit Title: eFront v3.6.14 build 18012 -Stored XSS in multiple Parameters Author: sajith version: eFront v3.6.14- build 18012 Vendor Homepage:...
Fedora Update for kolf FEDORA-2013-13499
Check for the Version of kolf OpenVAS Vulnerability Test Fedora Update for kolf FEDORA-2013-13499 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...
[SECURITY] Fedora 18 Update: kolf-4.10.5-1.fc18
Kolf is a miniature golf game with 2d top-down view. Courses are dynamic, and up to 10 people can play at once in competition...
Fedora Update for kolf FEDORA-2013-10182
Check for the Version of kolf OpenVAS Vulnerability Test Fedora Update for kolf FEDORA-2013-10182 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...