150 matches found
CVE-2023-4226
🛠️ Exploitation CVE-2023-4226 for Chamilo LMS 📋 Description Python script that automates the exploitation of CVE-2023-4226 , an unrestricted file upload vulnerability in Chamilo LMS = v1.11.24. Uploads a PHP web shell based on PentesterMonkey and configures .htaccess to achieve a reverse shell...
CVE-2021-36747
CVE-2021-36747 Blackboard Learn through 9.1 allows XSS by an authenticated user via the Feedback to Learner form. Discovered: May 11th, 2018 The Blackboard Security Team has been notified of this issue. They acknowledged the vulnerability on May 14, 2018. Description: The Blackboard tool commonly...
Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.1 security update
Updated images are now available for Red Hat Ansible Automation Platform 2.1, which include new features, bug fixes, and enhancements for Red Hat Ansible Automation Platform integration with Red Hat Developer Hub. Red Hat Ansible Automation Platform 2.1 delivers an Ansible-first Red Hat Developer...
CVE-2026-63242
A business logic vulnerability in Koollab LMS allowed an authenticated learner to set their lesson completion status to completed via the SCORM commit endpoint without viewing the lesson material, compromising training and completion records...
CVE-2026-63242 Business logic vulnerability
A business logic vulnerability in Koollab LMS allowed an authenticated learner to set their lesson completion status to completed via the SCORM commit endpoint without viewing the lesson material, compromising training and completion records...
CVE-2026-63242
A business logic vulnerability in Koollab LMS allowed an authenticated learner to set their lesson completion status to completed via the SCORM commit endpoint without viewing the lesson material, compromising training and completion records...
EUVD-2026-50135
An information disclosure vulnerability in Koollab LMS allowed an authenticated learner to obtain correct quiz answers from the course status endpoint without completing the assessment legitimately, compromising the integrity of assessments...
CVE-2026-63240
Technical details (affected software/versions, root cause, fix) are not publicly provided in the supplied documents. Monitor for updates from official sources.
PT-2026-65713
A business logic vulnerability in Koollab LMS allowed an authenticated learner to set their lesson completion status to completed via the SCORM commit endpoint without viewing the lesson material, compromising training and completion records...
CVE-2026-63242: Authorization Bypass Through User-Controlled Key
A business logic vulnerability in Koollab LMS allowed an authenticated learner to set their lesson completion status to completed via the SCORM commit endpoint without viewing the lesson material, compromising training and completion records...
CVE-2026-63240: Exposure of Sensitive Information to an Unauthorized Actor
An information disclosure vulnerability in Koollab LMS allowed an authenticated learner to obtain correct quiz answers from the course status endpoint without completing the assessment legitimately, compromising the integrity of assessments...
keras-pandas (>=1.1.2, <=2.0.1), learna-tools (0.1.0) potentially affected by CVE-2022-35959 via tensorflow (1.4.0)
tensorflow PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - keras-pandas =1.1.2, =2.0.1 - learna-tools 0.1.0 Source cves: CVE-2022-35959 Source advisory: OSV:PYSEC-2026-3257...
keras-pandas (>=1.1.2, <=2.0.1), learna-tools (0.1.0) potentially affected by CVE-2022-35997 via tensorflow (1.4.0)
tensorflow PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - keras-pandas =1.1.2, =2.0.1 - learna-tools 0.1.0 Source cves: CVE-2022-35997 Source advisory: OSV:PYSEC-2026-3220...
keras-pandas (>=1.1.2, <=2.0.1), learna-tools (0.1.0) potentially affected by CVE-2022-29207 via tensorflow (1.4.0)
tensorflow PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - keras-pandas =1.1.2, =2.0.1 - learna-tools 0.1.0 Source cves: CVE-2022-29207 Source advisory: OSV:PYSEC-2026-3112...
Meta-Quantum Ensemble Framework for Robust Network Intrusion Detection
Intrusion Detection Systems IDSs must maintain high detection sensitivity while operating under strict false-positive constraints, a challenge intensified by class imbalance and heterogeneous IoT traffic. This work investigates whether heterogeneous quantum learners can provide useful and...
GHSA-37QJ-FRW5-HHJH
creationtimestamp| type| source ---|---|--- 2026-04-21 11:51:12+00:00| seen| https://gist.github.com/MindfulLearner/6d7eef9c065da267822dabd41aeaec98 2026-04-21 11:56:50+00:00| seen| https://gist.github.com/MindfulLearner/c8453868d5bef6ee64c2f01d7c7f658d...
rastervision (>=0.20.0, <=0.20.2), rastervision-core (>=0.20.0, <=0.20.2) +3 more potentially affected by CVE-2025-69662 via geopandas (0.12.0)
geopandas PYPI version 0.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on geopandas and may be impacted: - rastervision =0.20.0, =0.20.0, =0.20.0, =0.20.0, =0.3.7, =0.4.1 Source cves: CVE-2025-69662 Source advisory: OSV:GHSA-6497-PRX7-GPMQ...
rastervision (>=0.20.0, <=0.20.2), rastervision-core (>=0.20.0, <=0.20.2) +3 more potentially affected by CVE-2025-69662 via geopandas (0.12.0)
geopandas PYPI version 0.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on geopandas and may be impacted: - rastervision =0.20.0, =0.20.0, =0.20.0, =0.20.0, =0.3.7, =0.4.1 Source cves: CVE-2025-69662 Source advisory: OSV:PYSEC-2026-62...
CVE-2023-4223
Unrestricted file upload in /main/inc/ajax/document.ajax.php in Chamilo LMS = v1.11.24 allows authenticated attackers with learner role to obtain remote code execution via uploading of PHP files...