CVE-2024-45691 Moodle: lesson activity password bypass through php loose comparison

A flaw was found in Moodle. When restricting access to a lesson activity with a password, certain passwords could be bypassed or less secure due to a loose comparison in the password-checking logic. This issue only affected passwords set to "magic hash" values...

CVE-2024-45691: Undefined Security Weakness

A flaw was found in Moodle. When restricting access to a lesson activity with a password, certain passwords could be bypassed or less secure due to a loose comparison in the password-checking logic. This issue only affected passwords set to "magic hash" values...

CVE-2024-51896

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webvitaly Magic Slider magic-slider allows Stored XSS.This issue affects Magic Slider: from n/a through = 1.3...

CVE-2024-51896

CVE-2024-51896: WordPress Magic Slider

CVE-2024-51896 WordPress Magic Slider plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webvitaly Magic Slider allows Stored XSS.This issue affects Magic Slider: from n/a through 1.3...

PT-2024-35027

Name of the Vulnerable Software and Affected Versions webvitaly Magic Slider versions 1.3 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations For...

WordPress plugin Magic Slider 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2024-51896: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in webvitaly Magic Slider magic-slider allows Stored XSS.This issue affects Magic Slider: from n/a through = 1.3...

Malicious code in magic-umi-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb4f026691827b0fc765f9ef1d86d699d1044f815fbe81787619c55de35ba765 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10752 Malicious code in magic-umi-request (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eb4f026691827b0fc765f9ef1d86d699d1044f815fbe81787619c55de35ba765 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

tpm2-tools: arbitrary quote data may go undetected by tpm2_checkquote

A flaw was found in the tpm2-tools package. This issue occurs due to a missing check whether the magic number in attest is equal to TPM2GENERATEDVALUE, which can allow an attacker to generate arbitrary quote data that may not be detected by tpm2checkquote...

Malicious code in magic-porta1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 99c7a2e9e880fc3afb6fece163e5b896d033d90de3b65042398153594ffd3cea The OpenSSF Package Analysis project identified 'magic-porta1' @ 89.3.5 npm as malicious. It is considered malicious because: - The package...

WordPress Magic Slider plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin Magic Slider versions = 1.3...

WordPress Magic Slider Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)

Software Magic Slider Type Plugin Vulnerable versions = 1.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51896 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID bd20a951d682 Credits SOPROBRO Required privilege Contributor...

Information Exposure

Overview taegis-magic is a Taegis IPython Magics Affected versions of this package are vulnerable to Information Exposure due to the exposure of inspect.currentframe.flocals in the search function in events.py, which exposes a GraphQLService object. This may include sensitive internal values such...

file:magic_fuzzer_loaddb: Heap-buffer-overflow in load_1

Project: https://github.com/file/file.git Detailed Report: https://oss-fuzz.com/testcase?key=4840976908615680 Project: file Fuzzing Engine: libFuzzer Fuzz Target: magicfuzzerloaddb Job Type: libfuzzerasanfile Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60c000000478...

PT-2024-8661 · Moodle +2 · Moodle +2

Name of the Vulnerable Software and Affected Versions: Moodle affected versions not specified Description: The issue is related to a flaw in the authentication procedure when handling "magic hash" passwords. This flaw can allow a remote attacker to bypass the authentication process due to a loose...

EulerOS Virtualization 2.12.1 : tpm2-tss (EulerOS-SA-2024-2319)

According to the versions of the tpm2-tss package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : This repository hosts source code implementing the Trusted Computing Group's TCG TPM2 Software Stack TSS. The JSON Quote Info...

EulerOS Virtualization 2.12.0 : tpm2-tss (EulerOS-SA-2024-2339)

According to the versions of the tpm2-tss package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : This repository hosts source code implementing the Trusted Computing Group's TCG TPM2 Software Stack TSS. The JSON Quote Info...

CVE-2024-43921

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Magic Post Thumbnail allows Reflected XSS.This issue affects Magic Post Thumbnail: from n/a through 5.2.9...