1693 matches found
Vanilla Forums < 2.3 - Remote Code Execution
!/bin/bash / / / / / / / / / / / / / / / / / / // / / / /// / / / / // / // / // / / / / // / // , / / / ///, /,// // //,///||// // // Vanilla Forums = 2.3 Remote Code Execution RCE PoC Exploit 0day Core version no plugins, default config. CVE-2016-10033 RCE CVE-2016-10073 Header Injection...
linuxforums.org Open Redirect vulnerability
Vulnerable URL: http://www.linuxforums.org/forum/redirect-to/?redirect=https://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 65316 VIP website...
Design/Logic Flaw
Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, and 2.8 through 2.8.11 allows remote attackers to obtain the names of hidden forums and forum discussions...
CVE-2016-3731
Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, and 2.8 through 2.8.11 allows remote attackers to obtain the names of hidden forums and forum discussions...
UBUNTU-CVE-2016-3731
Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, and 2.8 through 2.8.11 allows remote attackers to obtain the names of hidden forums and forum discussions...
CVE-2016-3731
Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, and 2.8 through 2.8.11 allows remote attackers to obtain the names of hidden forums and forum discussions...
CVE-2016-3731
CVE-2016-3731 affects Moodle 3.0 (3.0.0–3.0.3), 2.9 (2.9.0–2.9.5), and 2.8 (2.8.0–2.8.11). The vulnerability allows remote attackers to obtain the names of hidden forums and forum discussions. The provided documents do not include exploit details, affected module specifics beyond the version rang...
CVE-2016-3731: Exposure of Sensitive Information to an Unauthorized Actor
Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, and 2.8 through 2.8.11 allows remote attackers to obtain the names of hidden forums and forum discussions...
Low-Cost Ransomware Service Discovered
A new ransomware as a service RaaS called Karmen has been discovered by security researchers at Recorded Future. This service allows anyone, including novices, to set up an account and customize their own ransomware campaign. The Karmen RaaS costs $175 and lets buyers set ransom prices, determine...
FreeBSD : moodle -- multiple vulnerabilities (f72d98d1-0b7e-11e7-970f-002590263bf5)
Marina Glancy reports : - MSA-17-0001: System file inclusion when adding own preset file in Boost theme - MSA-17-0002: Incorrect sanitation of attributes in forums - MSA-17-0003: PHPMailer vulnerability in no-reply address - MSA-17-0004: XSS in assignment submission page %NASLMINLEVEL 70300 C...
CVE-2017-6479
FenixHosting/fenix-open-source before 2017-03-04 is vulnerable to a reflected XSS in forums/search.php search-by-topic parameter...
CVE-2017-6479
FenixHosting/fenix-open-source before 2017-03-04 is vulnerable to a reflected XSS in forums/search.php search-by-topic parameter...
CVE-2017-6479
FenixHosting/fenix-open-source before 2017-03-04 is vulnerable to a reflected XSS in forums/search.php search-by-topic parameter...
CVE-2017-6479
The CVE-2017-6479 entry concerns FenixHosting/fenix-open-source prior to 2017-03-04, which is vulnerable to a reflected XSS in forums/search.php via the search-by-topic parameter. The connected documents confirm the vulnerability class as reflected XSS and name the affected software and vector, b...
CVE-2017-6479: Improper Neutralization of Input During Web Page Generation
FenixHosting/fenix-open-source before 2017-03-04 is vulnerable to a reflected XSS in forums/search.php search-by-topic parameter...
PT-2017-17096
Name of the Vulnerable Software and Affected Versions FenixHosting/fenix-open-source versions prior to 2017-03-04 Description The issue concerns a reflected XSS in the forums/search.php endpoint, specifically affecting the search-by-topic parameter. Recommendations For versions prior to 2017-03-0...
Popular PlayStation and Xbox Gaming Forums Hacked; 2.5 Million Users' Data Leaked
Do you own an account on one of the two hugely popular PlayStation and Xbox gaming forums? Your details may have been exposed, as it has been revealed that the two popular video gaming forums, "XBOX360 ISO" and "PSP ISO," has been hacked, exposing email addresses, account passwords and IP address...
Code injection
In Moodle 2.x and 3.x, there is incorrect sanitization of attributes in forums...
