172 matches found
Moodle LTI module Reflected - Cross-Site Scripting
A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's brows...
PYSEC-2026-2533 LTI JupyterHub Authenticator: Unbounded Memory Growth via Nonce Storage (Denial of Service)
Summary The LTI 1.1 validator stores OAuth nonces in a class-level dictionary that grows without bounds. Nonces are added before signature validation, so an attacker with knowledge of a valid consumer key can send repeated requests with unique nonces to gradually exhaust server memory, causing a...
CVE-2026-34052
LTI JupyterHub Authenticator is a JupyterHub authenticator for LTI. Prior to version 1.6.3, the LTI 1.1 validator stores OAuth nonces in a class-level dictionary that grows without bounds. Nonces are added before signature validation, so an attacker with knowledge of a valid consumer key can send...
CVE-2026-34052
CVE-2026-34052 affects the LTI JupyterHub Authenticator used with JupyterHub. Prior to version 1.6.3, the LTI 1.1 validator stores OAuth nonces in a class-level dictionary that grows without bounds, with nonces added before signature validation. An attacker who knows a valid consumer key can send...
LTI JupyterHub Authenticator: Unbounded Memory Growth via Nonce Storage (Denial of Service)
Summary The LTI 1.1 validator stores OAuth nonces in a class-level dictionary that grows without bounds. Nonces are added before signature validation, so an attacker with knowledge of a valid consumer key can send repeated requests with unique nonces to gradually exhaust server memory, causing a...
Linux Distros Unpatched Vulnerability : CVE-2025-67848
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Moodle. This authentication bypass vulnerability allows suspended users to authenticate through the Learning Tools Interoperability LTI...
Moodle Multiple Vulnerabilities (Dec 2025)
Moodle is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:moodle:moodle"; ifdescription...
VulnCheck KEV: CVE-2021-32478
The redirect URI in the LTI authorization endpoint required extra sanitizing to prevent reflected XSS and open redirect risks. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8 and earlier unsupported versions are affected...
EUVD-2012-3360
Malware in sbrugna...
EUVD-2013-4783
Malware in sbrugna...
EUVD-2022-4602
Malicious code in bioql PyPI...
EUVD-2022-2666
Malicious code in bioql PyPI...
EUVD-2022-3532
Malicious code in bioql PyPI...
EUVD-2022-6249
Malicious code in bioql PyPI...
EUVD-2023-0127
Malicious code in bioql PyPI...
EUVD-2023-38872
Malicious code in bioql PyPI...
EUVD-2022-3828
Malicious code in bioql PyPI...
EUVD-2022-6276
Malicious code in bioql PyPI...
EUVD-2022-7466
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2021-32478
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The redirect URI in the LTI authorization endpoint required extra sanitizing to prevent reflected XSS and open redirect risks. Moodle versions 3.10 to 3.10.3, 3...