Lucene search
K

357 matches found

Packet Storm News
Packet Storm News
added 2026/02/10 12:0 a.m.2 views

GNU Transport Layer Security Library 3.8.12

GnuTLS is a secure communications library implementing the SSL and TLS protocols and technologies around them. It provides a simple C language application programming interface API to access the secure communications protocols, as well as APIs to parse and write X.509, PKCS 12, OpenPGP, and other...

5.3CVSS5.4AI score0.0011EPSS
Exploits1
OSV
OSV
added 2026/02/03 12:30 p.m.4 views

GHSA-J5JV-W5CW-J9FF Moodle authentication bypass vulnerability

A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through the Learning Tools Interoperability LTI Provider. The issue arises from the LTI authentication handlers failing to enforce the user's suspension status, enabling unauthorized access...

8.1CVSS5.4AI score0.00046EPSS
Exploits0References7
Github Security Blog
Github Security Blog
added 2026/02/03 12:30 p.m.7 views

Moodle authentication bypass vulnerability

A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through the Learning Tools Interoperability LTI Provider. The issue arises from the LTI authentication handlers failing to enforce the user's suspension status, enabling unauthorized access...

8.1CVSS5.4AI score0.00046EPSS
Exploits0References7Affected Software1
NVD
NVD
added 2026/02/03 11:15 a.m.3 views

CVE-2025-67848

A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through the Learning Tools Interoperability LTI Provider. The issue arises from the LTI authentication handlers failing to enforce the user's suspension status, enabling unauthorized access...

8.1CVSS0.00046EPSS
Exploits0References3
OSV
OSV
added 2026/02/03 11:15 a.m.1 views

CVE-2025-67848

A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through the Learning Tools Interoperability LTI Provider. The issue arises from the LTI authentication handlers failing to enforce the user's suspension status, enabling unauthorized access...

8.1CVSS5.4AI score0.00046EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2026/02/03 11:15 a.m.2 views

CVE-2025-67848

A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through the Learning Tools Interoperability LTI Provider. The issue arises from the LTI authentication handlers failing to enforce the user's suspension status, enabling unauthorized access...

8.1CVSS5.8AI score0.00046EPSS
Exploits0References4
OSV
OSV
added 2026/02/03 11:15 a.m.0 views

UBUNTU-CVE-2025-67848

A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through the Learning Tools Interoperability LTI Provider. The issue arises from the LTI authentication handlers failing to enforce the user's suspension status, enabling unauthorized access...

8.1CVSS5.7AI score0.00046EPSS
Exploits0References5
CVE
CVE
added 2026/02/03 10:51 a.m.24 views

CVE-2025-67848

CVE-2025-67848 affects Moodle. A flaw in the LTI Provider authentication flow allows suspended users to authenticate, because the LTI authentication handlers fail to enforce the user’s suspension status. Implication: unauthorized access that could lead to information disclosure or other restricte...

8.1CVSS5.4AI score0.00046EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/03 10:51 a.m.1 views

CVE-2025-67848 Moodle: moodle: authentication bypass via lti provider allows suspended users to gain unauthorized access.

A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through the Learning Tools Interoperability LTI Provider. The issue arises from the LTI authentication handlers failing to enforce the user's suspension status, enabling unauthorized access...

8.1CVSS5.4AI score0.00046EPSS
Exploits0References3
EUVD
EUVD
added 2026/02/03 10:51 a.m.2 views

EUVD-2025-206738

A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through the Learning Tools Interoperability LTI Provider. The issue arises from the LTI authentication handlers failing to enforce the user's suspension status, enabling unauthorized access...

8.1CVSS5.4AI score0.00046EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/02/03 10:51 a.m.3 views

CVE-2025-67848

A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through the Learning Tools Interoperability LTI Provider. The issue arises from the LTI authentication handlers failing to enforce the user's suspension status, enabling unauthorized access...

8.1CVSS5.4AI score0.00046EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/02/03 10:51 a.m.26 views

CVE-2025-67848 Moodle: moodle: authentication bypass via lti provider allows suspended users to gain unauthorized access.

A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through the Learning Tools Interoperability LTI Provider. The issue arises from the LTI authentication handlers failing to enforce the user's suspension status, enabling unauthorized access...

8.1CVSS0.00046EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/02/03 12:0 a.m.4 views

Moodle 安全漏洞

Moodle is an open-source e-learning software platform developed by Moodle. It is also known as a course management system, learning management system, or virtual learning environment. Moodle has security vulnerabilities. These vulnerabilities stem from the fact that the LTI authentication...

8.1CVSS5.8AI score0.00046EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/02/03 12:0 a.m.3 views

PT-2026-5958

Name of the Vulnerable Software and Affected Versions Moodle affected versions not specified Description A flaw exists in Moodle that allows suspended users to authenticate through the Learning Tools Interoperability LTI Provider. The issue stems from LTI authentication handlers not enforcing use...

8.1CVSS5.4AI score0.00046EPSS
Exploits0References17
Spring Engineering
Spring Engineering
added 2026/01/29 12:0 a.m.5 views

Spring AI Agentic Patterns (Part 5): Building Interoperable Agents with the Agent2Agent (A2A) Protocol

The Agent2Agent A2A Protocol is an open standard for seamless AI agent communication. It enables agents to discover capabilities, exchange messages, and coordinate workflows across platforms—regardless of their implementation. Spring AI A2A integrates the A2A Java SDK with Spring AI through Sprin...

6AI score
Exploits0
GithubExploit
GithubExploit
added 2026/01/21 5:1 p.m.113 views

A2A-POC

A2A Travel Agency Multi-Agent System A Proof of Concept demon...

5.7AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/12/19 12:37 p.m.3 views

CVE-2025-67848

A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through the Learning Tools Interoperability LTI Provider. The issue arises from the LTI authentication handlers failing to enforce the user's suspension status, enabling unauthorized access...

6.2AI score0.00046EPSS
Exploits0References2
The Hacker News
The Hacker News
added 2025/11/21 1:0 p.m.4 views

Google Brings AirDrop Compatibility to Android's Quick Share Using Rust-Hardened Security

In a surprise move, Google on Thursday announced that it has updated Quick Share, its peer-to-peer file transfer service, to work with Apple's equipment AirDrop, allowing users to more easily share files and photos between Android and iPhone devices. The cross-platform sharing feature is currentl...

6.1AI score
Exploits0
OSV
OSV
added 2025/11/03 9:18 p.m.2 views

CVE-2025-12657

The KMIP response parser built into mongo binaries is overly tolerant of certain malformed packets, and may parse them into invalid objects. Later reads of this object can result in read access violations...

5.5CVSS6.8AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/11/03 9:3 p.m.3 views

CVE-2025-12657 Malformed KMIP response may result in access violation

The KMIP response parser built into mongo binaries is overly tolerant of certain malformed packets, and may parse them into invalid objects. Later reads of this object can result in read access violations...

5.9CVSS6.5AI score0.00065EPSS
Exploits0References1
Rows per page
Query Builder