UBUNTU-CVE-2023-28329

Insufficient validation of profile field availability condition resulted in an SQL injection risk by default only available to teachers and managers...

CVE-2023-28329

Insufficient validation of profile field availability condition resulted in an SQL injection risk by default only available to teachers and managers...

Design/Logic Flaw

Insufficient sanitizing in backup resulted in an arbitrary file read risk. The capability to access this feature is only available to teachers, managers and admins by default...

CVE-2023-28329 Moodle: authenticated sql injection via availability check

Insufficient validation of profile field availability condition resulted in an SQL injection risk by default only available to teachers and managers...

CVE-2023-28329 Moodle: authenticated sql injection via availability check

Insufficient validation of profile field availability condition resulted in an SQL injection risk by default only available to teachers and managers...

CVE-2023-28330 Moodle: authenticated arbitrary file read through malformed backup file

Insufficient sanitizing in backup resulted in an arbitrary file read risk. The capability to access this feature is only available to teachers, managers and admins by default...

CVE-2023-28329 Moodle: authenticated sql injection via availability check

Insufficient validation of profile field availability condition resulted in an SQL injection risk by default only available to teachers and managers...

CVE-2023-28329

CVE-2023-28329 concerns Moodle with an authenticated SQL injection via the profile field availability check. Documented affected ranges include Moodle 3.11–3.11.14, 4.0–4.0.8, 4.1–4.1.3, and 4.2. Affected vendor notes describe insufficient validation enabling SQL injection when retrieving profile...

CVE-2023-28330

CVE-2023-28330: In Moodle, insufficient sanitizing in the backup feature enables an authenticated arbitrary file read. Access to this backup-related capability is restricted by default to teachers, managers, and admins. Connected documents corroborate a backup-file read risk and reference unpatch...

CVE-2023-28330 Moodle: authenticated arbitrary file read through malformed backup file

Insufficient sanitizing in backup resulted in an arbitrary file read risk. The capability to access this feature is only available to teachers, managers and admins by default...

Apache Spark < 2.4.6 RCE (CVE-2020-9480)

In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication spark.authenticate via a shared secret. When enabled, however, a specially-crafted RPC to the master can succeed in starting an application's resources on the Spark cluster, even...

4 Things You May Not Know About Performance Analytics Technology

By Owais Sultan Managers are aware that they are being held accountable for their teams performance. How well their teams do… This is a post from HackRead.com Read the original post: 4 Things You May Not Know About Performance Analytics Technology...

GNOME Web 安全漏洞

GNOME Web Epiphany is a Web browser based on the WebKit rendering engine. The product offers paging, cookie management, pop-up ad control, and other features. A security vulnerability exists in Epiphany GNOME Web prior to version 43.0, which stems from a vulnerability that can induce multiple...

SUSE CVE-2016-8643

In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services...

Why Cybersecurity Awareness Month is Every Month

Cybersecurity is a year-round issue Cybersecurity awareness is important year-round for the security of our businesses and customers. We’re proud to be a supporter of Cybersecurity Awareness Month. It has been invaluable in raising awareness of digital safety issues for a broad cross-section of...

CVE-2022-3154

The Woo Billingo Plus WordPress plugin before 4.4.5.4, Integration for Billingo & Gravity Forms WordPress plugin before 1.0.4, Integration for Szamlazz.hu & Gravity Forms WordPress plugin before 1.2.7 are lacking CSRF checks in various AJAX actions, which could allow attackers to make logged in...

CVE-2022-3154

The Woo Billingo Plus WordPress plugin before 4.4.5.4, Integration for Billingo & Gravity Forms WordPress plugin before 1.0.4, Integration for Szamlazz.hu & Gravity Forms WordPress plugin before 1.2.7 are lacking CSRF checks in various AJAX actions, which could allow attackers to make logged in...

Cross site request forgery (csrf)

The Woo Billingo Plus WordPress plugin before 4.4.5.4, Integration for Billingo & Gravity Forms WordPress plugin before 1.0.4, Integration for Szamlazz.hu & Gravity Forms WordPress plugin before 1.2.7 are lacking CSRF checks in various AJAX actions, which could allow attackers to make logged in...

CVE-2022-3154 Multiple Plugins from Viszt Peter - Multiple CSRF

The Woo Billingo Plus WordPress plugin before 4.4.5.4, Integration for Billingo & Gravity Forms WordPress plugin before 1.0.4, Integration for Szamlazz.hu & Gravity Forms WordPress plugin before 1.2.7 are lacking CSRF checks in various AJAX actions, which could allow attackers to make logged in...

Ivanti Endpoint Manager Elevation of Privilege Vulnerability

Ivanti Endpoint Manager EPM is a suite of endpoint security managers from Ivanti, USA. An elevation of privilege vulnerability exists in Ivanti Endpoint Manager, which stems from the "LANDeskR Management Agent" service exposing a socket that, once connected, can be used to launch commands only fo...