CVE-2025-31859

Cross-Site Request Forgery CSRF vulnerability in Feedbucket Feedbucket – Website Feedback Tool feedbucket allows Cross Site Request Forgery.This issue affects Feedbucket – Website Feedback Tool: from n/a through = 1.0.6...

kernel security update

5.14.0-503.35.15.OL9 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug:...

CVE-2025-31859

Cross-Site Request Forgery CSRF vulnerability in Feedbucket Feedbucket – Website Feedback Tool feedbucket allows Cross Site Request Forgery.This issue affects Feedbucket – Website Feedback Tool: from n/a through = 1.0.6...

CVE-2025-31859 WordPress Feedbucket – Website Feedback Tool Plugin <= 1.0.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Feedbucket Feedbucket – Website Feedback Tool feedbucket allows Cross Site Request Forgery.This issue affects Feedbucket – Website Feedback Tool: from n/a through = 1.0.6...

CVE-2025-31859

Technical details about CVE-2025-31859 are not publicly provided in the provided documents; the materials only mention a CSRF flaw in Feedbucket up to version 1.0.6, with no explicit impact, affected components, or fixes.

CVE-2025-31859 WordPress Feedbucket – Website Feedback Tool Plugin <= 1.0.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Feedbucket Feedbucket – Website Feedback Tool allows Cross Site Request Forgery. This issue affects Feedbucket – Website Feedback Tool: from n/a through 1.0.6...

CVE-2025-31859: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Feedbucket Feedbucket – Website Feedback Tool feedbucket allows Cross Site Request Forgery.This issue affects Feedbucket – Website Feedback Tool: from n/a through = 1.0.6...

WordPress plugin Feedbucket – Website Feedback Tool: Cross-site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists in...

Moodle Permission Issues Vulnerability (CNVD-2025-10589)

Moodle is an open source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A permission issue vulnerability exists in Moodle. The vulnerability stems from a permission check that does not properly consider grouping...

CVE-2025-2419

A vulnerability classified as critical has been found in code-projects Real Estate Property Management System 1.0. Affected is an unknown function of the file /InsertFeedback.php. The manipulation of the argument txtName/txtEmail/txtMobile/txtFeedback leads to sql injection. It is possible to...

Linux Distros Unpatched Vulnerability : CVE-2022-49224

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: power: supply: ab8500: Fix memory leak in ab8500fgsysfsinit kobjectinitandadd takes referenc...

Improper Access Control

moodle/moodle is vulnerable to Improper access control. The vulnerability is due to missing Separate Groups mode restrictions in permission checks, allowing unauthorized viewing or deletion of responses in Feedback activities...

GHSA-PXG4-XJP7-W9C5 Moodle's feedback response viewing and deletions did not respect Separate Groups mode

Separate Groups mode restrictions were not factored into permission checks before allowing viewing or deletion of responses in Feedback activities...

Incorrect Authorization

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Incorrect Authorization due to improper enforcement of access controls in the feedback response handling process. An attacker can view or delete feedback responses by exploiting the lack of proper...

Moodle's feedback response viewing and deletions did not respect Separate Groups mode

Separate Groups mode restrictions were not factored into permission checks before allowing viewing or deletion of responses in Feedback activities...

CVE-2025-26526

Separate Groups mode restrictions were not factored into permission checks before allowing viewing or deletion of responses in Feedback activities...

UBUNTU-CVE-2025-26526

Separate Groups mode restrictions were not factored into permission checks before allowing viewing or deletion of responses in Feedback activities...

CVE-2025-26526 Feedback response viewing and deletions did not respect Separate Groups mode

Separate Groups mode restrictions were not factored into permission checks before allowing viewing or deletion of responses in Feedback activities...

CVE-2025-26526

CVE-2025-26526 affects Moodle: Separate Groups mode restrictions were not factored into permission checks when viewing or deleting Feedback activity responses. Root cause: permission checks for viewing/deleting Feedback responses fail to account for grouping, enabling improper access or deletion ...

CVE-2025-26526 Feedback response viewing and deletions did not respect Separate Groups mode

Separate Groups mode restrictions were not factored into permission checks before allowing viewing or deletion of responses in Feedback activities...