GHSA-CW72-69WQ-F9F2 Moodle External function mod_assign_save_submission does not check due dates

The savesubmission function in mod/assign/externallib.php in Moodle through 2.6.11, 2.7.x before 2.7.13, 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 allows remote authenticated users to bypass intended due-date restrictions by leveraging the student role for a web-service...

CVE-2022-29846

creationtimestamp| type| source ---|---|--- 2022-05-11 22:40:48+00:00| seen| https://t.me/cibsecurity/42441 2023-03-17 21:59:16+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/post/windows/gather/credentials/whatsupgoldcredentialdump.rb 2025-02-06 03:13:45+00:00|...

CVE-2022-24816

creationtimestamp| type| source ---|---|--- 2022-04-14 00:18:15+00:00| seen| https://t.me/cibsecurity/40743 2024-06-26 18:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-11-08 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-08 2024-11-13...

CVE-2022-22954

creationtimestamp| type| source ---|---|--- 2022-04-07 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=775 2022-04-07 07:51:03+00:00| seen| https://t.me/thehackernews/2058 2022-04-07 15:10:55+00:00| seen| https://t.me/ptswarm/119 2022-04-11 10:48:25+00:00|...

CVE-2022-0760

creationtimestamp| type| source ---|---|--- 2022-03-21 21:26:39+00:00| seen| https://t.me/cibsecurity/39334 2024-12-24 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-24 2025-01-17 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-17...

CVE-2022-0715

creationtimestamp| type| source ---|---|--- 2022-03-09 10:42:42+00:00| published-proof-of-concept| https://t.me/habrcomnews/3948 2022-03-09 15:30:00+00:00| seen| https://t.me/truesecator/2711 2022-03-09 22:15:14+00:00| seen| https://t.me/cibsecurity/38624 2022-03-10 17:35:45+00:00| exploited|...

Loki RAT (Relapse) SQL Injection Vulnerability

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/aabb54951546132e70a8e9f02bf8b5baB.txt Contact: email protected Media: twitter.com/malvuln Threat: Loki RAT Relapse Vulnerability: SQL Injection Description: The LokiRAT WebUI panel for LokiRATRelapse.e...

OpenJDK: Certificates with end dates too far in the future can corrupt keystore (Keytool, 8266137)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Keytool. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...

dates-md.de Cross Site Scripting vulnerability OBB-2337745

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-34993

creationtimestamp| type| source ---|---|--- 2022-01-14 00:23:58+00:00| seen| https://t.me/cibsecurity/35462 2025-01-15 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-15 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26...

CVE-2012-0151

creationtimestamp| type| source ---|---|--- 2022-01-05 12:37:10+00:00| seen| MISP/a8009d56-7dab-4b65-a6ee-3caf2773c960 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-03 17:18:47+00:00| seen| https://t.me/arpsyndicate/987 2024-12-24 20:32:10+00:00| seen|...

CVE-2021-30351

creationtimestamp| type| source ---|---|--- 2022-01-03 12:38:19+00:00| seen| https://t.me/cibsecurity/34842 2022-04-21 13:12:06+00:00| published-proof-of-concept| https://t.me/cKure/9397 2022-04-21 15:39:41+00:00| seen| https://t.me/AnonymousHackersnomo/174 2022-04-22 11:53:08+00:00| seen|...

CVE-2021-24842

The Bulk Datetime Change WordPress plugin before 1.12 does not enforce capability checks which allows users with Contributor roles to 1 list private post titles of other users and 2 change the posted date of other users' posts...

WordPress plugin Bulk Datetime Change 安全漏洞

WordPress is the Wordpress Foundation's set of blogging platforms developed using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL. An authorization issue vulnerability exists in the WordPress Bulk Datetime Change plugin, which stems from a...

CVE-2021-3577

creationtimestamp| type| source ---|---|--- 2021-11-13 00:39:34+00:00| seen| https://t.me/cibsecurity/32346 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-3577.yaml 2024-12-24 00:00:00+00:00| seen| The Shadowserver...

OpenJDK: Certificates with end dates too far in the future can corrupt keystore (Keytool, 8266137)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Keytool. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated...

Robinhood Trading Platform Data Breach Hits 7M Customers

Investor trading app company Robinhood Markets has confirmed a data breach that affects the personal information of about 7 million customers – roughly a third of its user base. A cyberattacker made off with emails and more, which could lead to follow-on attacks for Robinhood customers. The tradi...

PT-2021-22580 · Unknown · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Hospital Management System version 4.0 Description: Multiple Cross Site Scripting XSS vulnerabilities exist in the system. The issue is related to the searchdata parameter in "/doctor/search.php" and "/admin/patient-search.php" API...

PHPGurukul Hospital Management System 跨站脚本漏洞

PHPGurukul Hospital Management System is a PHP and MySQL based hospital management system. PHPGurukul Hospital Management System 4.0 has a security vulnerability that can be exploited by an attacker to conduct xss attacks using multiple parameters. The parameters that can be exploited are 1...

CVE-2021-38000

creationtimestamp| type| source ---|---|--- 2021-10-29 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=682 2021-10-29 06:14:24+00:00| exploited| https://t.me/cKure/7810 2021-10-29 16:50:00+00:00| exploited| https://t.me/truesecator/2268 2021-10-30 15:46:49+00:00| seen|...