EUVD-2024-50520

Malicious code in bioql PyPI...

CVE-2024-52584

Autolab is a course management service that enables auto-graded programming assignments. There is a vulnerability in version 3.0.1 where CAs can view or edit the grade for any submission ID, even if they are not a CA for the class that has the submission. The endpoints only check that the CAs hav...

CVE-2024-52585

Autolab is a course management service that enables auto-graded programming assignments. There is an HTML injection vulnerability in version 3.0.1 that can affect instructors and CAs on the grade submissions page. The issue is patched in version 3.0.2. One may apply the patch manually by editing...

CVE-2024-52585 Autolab has HTML Injection Vulnerability

Autolab is a course management service that enables auto-graded programming assignments. There is an HTML injection vulnerability in version 3.0.1 that can affect instructors and CAs on the grade submissions page. The issue is patched in version 3.0.2. One may apply the patch manually by editing...

CVE-2024-52584 Autolab has vulnerable submission endpoints

Autolab is a course management service that enables auto-graded programming assignments. There is a vulnerability in version 3.0.1 where CAs can view or edit the grade for any submission ID, even if they are not a CA for the class that has the submission. The endpoints only check that the CAs hav...

Code injection

Autolab is a course management service that enables auto-graded programming assignments. A Tar slip vulnerability was found in the Install assessment functionality of Autolab. To exploit this vulnerability an authenticated attacker with instructor permissions needs to upload a specially crafted T...

lowiecki.pl XSS vulnerability

Vulnerable URL: http://www.lowiecki.pl/szukaj/index.php Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 26.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 556001 VIP website status:| No Check lowiecki.pl SSL...

hsflange.co.kr XSS vulnerability

Vulnerable URL: http://www.hsflange.co.kr/news/infocenter.php/'%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E?mode=view=52 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

wirelessgroup.it XSS vulnerability

Vulnerable URL: http://wirelessgroup.it/adsl/cerca/risultati?q=%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2719157 VIP...

shawlpublika.com XSS vulnerability

Vulnerable URL: http://www.shawlpublika.com/contactus.php/'%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22XSSPOSED%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 29.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1229659 VIP...

weimaranerruede.de XSS vulnerability

Vulnerable URL: http://www.weimaranerruede.de/mynews.php?newsid=37"'--!== Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

niederkappel.at XSS vulnerability

Vulnerable URL: http://www.niederkappel.at/system/web/suche.aspx?search="-confirmopenbugbounty-" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12703947 VIP website status:| No Che...

momxxx.com XSS vulnerability

Vulnerable URL: http://www.momxxx.com/tour/model/3061/ricci%22%3E%3Cimg%20src=x%20onerror=prompt'OPENBUGBOUNTY'%3E-hulk/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 182961 VIP website status:| No Check...

www1.lsbu.ac.uk XSS vulnerability

Vulnerable URL: http://www1.lsbu.ac.uk/php4-cgiwrap/hscweb/cm/public/news/newsarchive.php?newsid=38"--!" Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 10:25 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

wlake.org XSS vulnerability

Vulnerable URL: http://www.wlake.org/search/Pages/results.aspx?k=test=%27-confirmOPENBUGBOUNTY-%27 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1613933 VIP website status:| No...

kmprod.com XSS vulnerability

Vulnerable URL: http://www.kmprod.com/search.php?keyword=%22%3E%3C/title%3E%27%3E;%3C/script%3E%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6828782 VIP website status:| No...

tehran-city.locopoc.com XSS vulnerability

Vulnerable URL: http://tehran-city.locopoc.com/q-dd524-'-alert'OPENBUGBOUNTY'-' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Chec...

zarrin-dasht.locopoc.com XSS vulnerability

Vulnerable URL: http://zarrin-dasht.locopoc.com/q-dd524-'-alert'OPENBUGBOUNTY'-' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Che...

onlinewebfonts.com XSS vulnerability

Vulnerable URL: https://www.onlinewebfonts.com/search?q=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 50348 VIP website status:| No Check onlinewebfonts.com SSL connection:|...

wyoung.org XSS vulnerability

Vulnerable URL: http://www.wyoung.org/apps/video/watch.jsp?v=440991%22--%3E%3C/script%3E%3Csvg/onload=%27;alert%28/OPENBUGBOUNTY/%29;%27%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...