CVE-2017-2644

In Moodle 3.x, XSS can occur via evidence of prior learning...

CVE-2017-2644

In Moodle 3.x, XSS can occur via evidence of prior learning...

CVE-2017-2645

CVE-2017-2645 describes an XSS vulnerability in Moodle 3.x, triggerable through attachments to evidence of prior learning. The entry specifies a cross-site scripting flaw with a CVSS base score of 4.3 (NVD CVSS2) and 6.1 (CVSS3), indicating network access, no authentication, and user interaction ...

CVE-2017-2645

In Moodle 3.x, XSS can occur via attachments to evidence of prior learning...

CVE-2017-2644

In Moodle 3.x, XSS can occur via evidence of prior learning...

CVE-2017-2644

CVE-2017-2644 affects Moodle 3.x and enables cross-site scripting via evidence of prior learning. It is a network‑based XSS with no authentication, requiring user interaction per CVSS, and results in partial integrity impact and low confidentiality impact. Public details indicate multiple advisor...

CVE-2017-2644

In Moodle 3.x, XSS can occur via evidence of prior learning...

PT-2017-15462

Name of the Vulnerable Software and Affected Versions Moodle versions 3.x Description A cross-site scripting XSS issue can occur in Moodle via evidence of prior learning, allowing for potential malicious script execution. Recommendations For Moodle versions 3.x, update to a version that includes ...

CVE-2017-2644: Improper Neutralization of Input During Web Page Generation

In Moodle 3.x, XSS can occur via evidence of prior learning...

PT-2017-15463

Name of the Vulnerable Software and Affected Versions Moodle versions 3.x Description A cross-site scripting XSS issue can occur via attachments to evidence of prior learning, allowing for potential exploitation. Recommendations For Moodle versions 3.x, update to a version that includes a fix for...

CVE-2017-2645: Improper Neutralization of Input During Web Page Generation

In Moodle 3.x, XSS can occur via attachments to evidence of prior learning...

wandb

Use W&B to build better models faster. Track and visualize all t...

IBM Kenexa LCMS Premier on Cloud SQL Injection Vulnerability

IBM Kenexa LCMS Premier on Cloud is an adjustable Learning Content Management System LCMS for developing, maintaining, and delivering effective employee training from IBM USA. IBM Kenexa LCMS Premier on Cloud suffers from a SQL injection vulnerability that could allow a remote attacker to view,...

Detects Clickbait Headlines Using Deep Learning: Clickbait Detector

Detects Clickbait Headlines Using Deep Learning People continually fall for clickbait and as Wired in it’s article mentioned Whether you think clickbait is on the rise, obscurant and self-negating, not such a big deal, or the root of all evil, one thing is clear about it: It’s increasingly hard t...

Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to cross-site request forgery

Overview AppGoat provided by INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN IPA is a hands-on vulnerability learning tool. Hands-on Vulnerability Learning Tool "AppGoat" for Web Application contains a cross-site request forgery vulnerability. Shoji Baba reported this vulnerability to IPA. JPCERT/...

JVN#87662835: Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to DNS rebinding

AppGoat provided by INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN IPA is a hands-on vulnerability learning tool. Hands-on Vulnerability Learning Tool "AppGoat" for Web Application contains a DNS rebinding vulnerability. Impact If a user accesses a malicious web page, arbitrary code may be...

IBM Kenexa LCMS Premier on Cloud Information Disclosure Vulnerability (CNVD-2017-01326)

IBM Kenexa LCMS Premier on Cloud is an adjustable Learning Content Management System LCMS for developing, maintaining, and delivering effective employee training from IBM USA. A security vulnerability exists in IBM Kenexa LCMS Premier on Cloud. An attacker could exploit the vulnerability by sendi...

[SECURITY] Fedora 25 Update: moodle-3.1.4-1.fc25

Moodle is a course management system CMS - a free, Open Source software package designed using sound pedagogical principles, to help educators crea te effective online learning communities...

Incident Detection and Investigation - How Math Helps But Is Not Enough

I love math. I am even going to own up to having been a "mathlete" and looking forward to the annual UVM Math Contest in high school. I pursued a degree in engineering, so I can now more accurately say that I love applied mathematics, which have a much different goal than pure mathematics. Taking...

CVE-2016-8933

IBM Kenexa LMS on Cloud could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing dot dot sequences /../ to view arbitrary files on the system...