coraza

Coraza - Web Application Firewall Coraza is an open source, enterprise-grade, high performance Web Application Firewall WAF ready to protect your beloved applications. It is written in Go, supports ModSecurity SecLang rulesets and is 100% compatible with the OWASP Core Rule Set v4. Website:...

MeshTNC

MeshTNC MeshTNC is a tool for piping LoRa data to and from consumer grade radios. Code - github.com/datapartyjs/MeshTNC Releases - github.com/datapartyjs/MeshTNC/releases Support - ko-fi/dataparty Features Simple serial cli built into the firmware Transmit raw bytes hex over LoRA using serial CLI...

CVE-2025-70330

🧩 CVE-2025-70330: Easy Grade Pro 4.1 File Parsing Vulnerability An educational example created to show beginners that vulnerability research through reverse engineering is possible from the very start. 📑 Table of Contents Why this repository exists Relation to "The Path That Leads to Your First...

CVE-2026-120199 LearnHouse before 1.1.1 Missing Authorization via Assignment Submissions API

LearnHouse before 1.1.1 contains a missing authorization vulnerability in the assignment API that allows authenticated users to read other users' grades and submissions. Attackers can supply another userid to the submissions grade endpoint or query submission read functions to view other students...

CVE-2026-120199 LearnHouse before 1.1.1 Missing Authorization via Assignment Submissions API

LearnHouse before 1.1.1 contains a missing authorization vulnerability in the assignment API that allows authenticated users to read other users' grades and submissions. Attackers can supply another userid to the submissions grade endpoint or query submission read functions to view other students...

CVE-2026-119555

A flaw was found in Moodle. The grade feedback web service coregradesgetfeedback fails to properly enforce group-membership and course enrolment checks. An authenticated remote user with a non-editing teacher role can exploit this vulnerability by querying arbitrary user identifiers. This can lea...

CVE-2026-119555

Moodle 4.2.0 through 4.5.15, 5.0.0 through 5.0.11, 5.1.0 through 5.1.8, 5.2.0 through 5.2.4, and 5.3.0 contain an information disclosure vulnerability in the coregradesgetfeedback web service. The service lacks group-membership and enrolment checks, so non-editing teachers can iterate userid valu...

CVE-2026-119556 Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Missing Authorization via core_grades_get_gradeitems

Moodle 4.2.0 through 4.5.15, 5.0.0 through 5.0.11, 5.1.0 through 5.1.8, 5.2.0 through 5.2.4, and 5.3.0 contain a missing capability check in the coregradesgetgradeitems web service that allows enrolled students to view hidden grade items. Authenticated course users can call the AJAX or mobile web...

EUVD-2026-113821

Moodle 4.2.0 through 4.5.15, 5.0.0 through 5.0.11, 5.1.0 through 5.1.8, 5.2.0 through 5.2.4, and 5.3.0 contain a missing capability check in the coregradesgetgradeitems web service that allows enrolled students to view hidden grade items. Authenticated course users can call the AJAX or mobile web...

CVE-2026-119556 Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Missing Authorization via core_grades_get_gradeitems

Moodle 4.2.0 through 4.5.15, 5.0.0 through 5.0.11, 5.1.0 through 5.1.8, 5.2.0 through 5.2.4, and 5.3.0 contain a missing capability check in the coregradesgetgradeitems web service that allows enrolled students to view hidden grade items. Authenticated course users can call the AJAX or mobile web...

CVE-2026-119556 Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Missing Authorization via core_grades_get_gradeitems

Moodle 4.2.0 through 4.5.15, 5.0.0 through 5.0.11, 5.1.0 through 5.1.8, 5.2.0 through 5.2.4, and 5.3.0 contain a missing capability check in the coregradesgetgradeitems web service that allows enrolled students to view hidden grade items. Authenticated course users can call the AJAX or mobile web...

CVE-2026-119555 Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Information Disclosure via core_grades_get_feedback

Moodle 4.2.0 through 4.5.15, 5.0.0 through 5.0.11, 5.1.0 through 5.1.8, 5.2.0 through 5.2.4, and 5.3.0 contain an information disclosure vulnerability in the coregradesgetfeedback web service. The service lacks group-membership and enrolment checks, so non-editing teachers can iterate userid valu...

CVE-2026-119555 Moodle through 5.3.0, 5.2.4, 5.1.8, 5.0.11 and 4.5.15 Information Disclosure via core_grades_get_feedback

Moodle 4.2.0 through 4.5.15, 5.0.0 through 5.0.11, 5.1.0 through 5.1.8, 5.2.0 through 5.2.4, and 5.3.0 contain an information disclosure vulnerability in the coregradesgetfeedback web service. The service lacks group-membership and enrolment checks, so non-editing teachers can iterate userid valu...

CVE-2026-119555

Moodle versions 4.2.0 through 4.5.15 , 5.0.0 through 5.0.11 , 5.1.0 through 5.1.8 , 5.2.0 through 5.2.4 , and 5.3.0 are vulnerable to an information disclosure vulnerability in the core_grades_get_feedback web service. The root cause is a lack of group-membership and enrolment checks, allowing no...

EUVD-2026-113820

Moodle 4.2.0 through 4.5.15, 5.0.0 through 5.0.11, 5.1.0 through 5.1.8, 5.2.0 through 5.2.4, and 5.3.0 contain an information disclosure vulnerability in the coregradesgetfeedback web service. The service lacks group-membership and enrolment checks, so non-editing teachers can iterate userid valu...

PT-2026-133494

Moodle 4.2.0 through 4.5.15, 5.0.0 through 5.0.11, 5.1.0 through 5.1.8, 5.2.0 through 5.2.4, and 5.3.0 contain a missing capability check in the core grades get gradeitems web service that allows enrolled students to view hidden grade items. Authenticated course users can call the AJAX or mobile...

CVE-2026-113607

Configurable Reports block for Moodle before 5.3.0 contains an authorization bypass vulnerability that allows authenticated users to read restricted reports through the blockconfigurablereportsgetreportdata web service. When checkpermissions fails, the function only adds a warning and still retur...

CVE-2026-113607 Configurable Reports block for Moodle before 5.3.0 Authorization Bypass via get_report_data

Configurable Reports block for Moodle before 5.3.0 contains an authorization bypass vulnerability that allows authenticated users to read restricted reports through the blockconfigurablereportsgetreportdata web service. When checkpermissions fails, the function only adds a warning and still retur...

CVE-2026-113607 Configurable Reports block for Moodle before 5.3.0 Authorization Bypass via get_report_data

Configurable Reports block for Moodle before 5.3.0 contains an authorization bypass vulnerability that allows authenticated users to read restricted reports through the blockconfigurablereportsgetreportdata web service. When checkpermissions fails, the function only adds a warning and still retur...

CVE-2026-113607 Configurable Reports block for Moodle before 5.3.0 Authorization Bypass via get_report_data

Configurable Reports block for Moodle before 5.3.0 contains an authorization bypass vulnerability that allows authenticated users to read restricted reports through the blockconfigurablereportsgetreportdata web service. When checkpermissions fails, the function only adds a warning and still retur...