CVE-2024-43438

CVE-2024-43438 affects Moodle’s Feedback feature: in the activity’s non-respondents report, bulk messaging did not verify that recipients are limited to the users returned by the report, enabling potential messaging of unintended users. The CVSS 3.1 vector indicates Network attack vector, Low att...

CVE-2024-43438 Moodle: idor in feedback non-respondents report allows messaging arbitrary site users

A flaw was found in Feedback. Bulk messaging in the activity's non-respondents report did not verify message recipients belonging to the set of users returned by the report...

CVE-2024-43434

CVE-2024-43434 describes a CSRF vulnerability in Moodle’s Feedback module non-respondents report caused by an incorrect CSRF token check. The issue is supported by multiple sources in the connected documents (NVD entry with CVSS 3.1 score 8.1; related advisories). The exact affected Moodle versio...

CVE-2024-43434 Moodle: csrf risk in feedback non-respondents report

The bulk message sending feature in Moodle's Feedback module's non-respondents report had an incorrect CSRF token check, leading to a CSRF vulnerability...

CVE-2024-43434 Moodle: csrf risk in feedback non-respondents report

The bulk message sending feature in Moodle's Feedback module's non-respondents report had an incorrect CSRF token check, leading to a CSRF vulnerability...

CVE-2024-9926: Undefined Security Weakness

The Jetpack WordPress plugin does not have proper authorisation in one of its REST endpoint, allowing any authenticated users, such as subscriber to read arbitrary feedbacks data sent via the Jetpack Contact Form...

CVE-2024-43434: Improper Limitation of a Pathname to a Restricted Directory

The bulk message sending feature in Moodle's Feedback module's non-respondents report had an incorrect CSRF token check, leading to a CSRF vulnerability...

Stable Channel Update for ChromeOS / ChromeOS Flex

The Stable channel is being updated to OS version: 16033.43.0 Browser version: 130.0.6723.84 for most ChromeOS devices. If you find new issues, please let us know one of the following ways 1. File a bug 2. Visit our ChromeOS communities 1. General: Chromebook Help Community 2. Beta Specific:...

After Upgrade Veeam Backup for Oracle Linux Virtualization Manager and Red Hat Virtualization Appliance Is Listed as Unavailable

Challenge After the upgrade of Veeam Backup & Replication to version 12.2 and subsequent upgrade of Veeam Backup for Oracle Linux Virtualization Manager and Red Hat Virtualization to version 5, the Appliance is listed as Unavailable in the Veeam Backup & Replication Console. When this occurs,...

WordPress Jetpack plugin < 13.9.1 - Authenticated Arbitrary Feedback Access vulnerability

Authenticated Arbitrary Feedback Access vulnerability discovered by Marc Montpas in WordPress Plugin Jetpack versions 13.9.1...

LVDA get unregistered randomly after reboot

The customer said their LVDA get unregistered randomly after reboot...

Malicious code in customer-feedback-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cf15dcf2318155d18aee75e77887bfe0709b51548def3d5e5906527670e25631 The OpenSSF Package Analysis project identified 'customer-feedback-widget' @ 1.5.8 npm as malicious. It is considered malicious because: - The...

MAL-2024-9112 Malicious code in customer-feedback-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cf15dcf2318155d18aee75e77887bfe0709b51548def3d5e5906527670e25631 The OpenSSF Package Analysis project identified 'customer-feedback-widget' @ 1.5.8 npm as malicious. It is considered malicious because: - The...

CVE-2024-7714

The AI ChatBot with ChatGPT and Content Generator by AYS WordPress plugin before 2.1.0 lacks sufficient access controls allowing an unauthenticated user to disconnect the AI ChatBot with ChatGPT and Content Generator by AYS WordPress plugin before 2.1.0 from OpenAI, thereby disabling the AI ChatB...

PT-2024-38530 · Ays · Ai Chatbot With Chatgpt/Content Generator

Name of the Vulnerable Software and Affected Versions: AI ChatBot with ChatGPT and Content Generator by AYS WordPress plugin versions prior to 2.1.0 Description: The issue is related to insufficient access controls in the AI ChatBot with ChatGPT and Content Generator by AYS WordPress plugin,...

The FIPS Compliance of HKDF

HKDF is an HMAC-based key-derivation function specified in RFC 5869. It’s nice and we generally like using it. FIPS Federal Information Processing Standards is used generally as a moniker for the set of standards, recommendations, and guidance published by the U.S. National Institute of Standards...

Online mcq System 1.0 Cross Site Scripting

============================================================================================================================================= | Title : Online mcq System 1.0 XSS vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0.0 64 bits | |...

Evaluating the Effectiveness of Reward Modeling of Generative AI Systems

New research evaluating the effectiveness of reward modeling during Reinforcement Learning from Human Feedback RLHF: "SEAL: Systematic Error Analysis for Value ALignment." The paper introduces quantitative metrics for evaluating the effectiveness of modeling and aligning human values: Abstract:...

Fedora: Security Advisory (FEDORA-2023-d88521bfc5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2023-af8489dc5b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...