CVE-2023-5550

In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user who also has direct access to the web server outside of the Moodle webroot could utilise a local file include to achieve remote code execution...

Remote code execution

In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user who also has direct access to the web server outside of the Moodle webroot could utilise a local file include to achieve remote code execution...

CVE-2023-5550

In a shared hosting environment that has been misconfigured to allow access to other users' content, a Moodle user who also has direct access to the web server outside of the Moodle webroot could utilise a local file include to achieve remote code execution...

Moodle Security Breach

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A security vulnerability exists in Moodle versions prior to 4.2 to 4.2.2, 4.1 to 4.1.5, 4.0 to 4.0.10, 3.11 to 3.11.16, and 3.9.24, whi...

Collabora Online Security Breach

Collabora Online is an application from Collabora UK. A powerful LibreOffice-based online office that supports all major document, spreadsheet and presentation file formats. A security vulnerability exists in Collabora Online versions 1.0 through prior to 1.3, which stems from a misconfigured...

CVE-2023-5136

An incorrect permission assignment in the TopoGrafix DataPlugin for GPX could result in information disclosure. An attacker could exploit this vulnerability by getting a user to open a specially crafted data file...

The software for remote control of computers with Intel vPro processors is vulnerable due to a misconfiguration in the link that is accessed before accessing the file. This allows a malicious user to delete any folder they choose.

The vulnerability of the software for remote control of computers with Intel vPro processors in Dell Command Intel vPro Out of Band mode is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability could allow a malicious individual to delete any...

Misconfigured Security Controls

chromium is vulnerable to Misconfigured Security Controls. The vulnerability exists because of an improper implementation in the Fullscreen feature of the library, which could allow an attacker to deceive a user into installing a malicious extension. This would enable the attacker to bypass...

Default credentials

In Terminalfour before 8.3.16, misconfigured LDAP users are able to login with an invalid password...

PT-2023-22276 · Terminalfour · Terminalfour

Name of the Vulnerable Software and Affected Versions: Terminalfour versions prior to 8.3.16 Description: The issue allows misconfigured LDAP users to login with an invalid password. Recommendations: For versions prior to 8.3.16, update to version 8.3.16 or later to resolve the issue...

ProIntegra Uptime DC Security Vulnerability

ProIntegra Uptime DC is a dashboard from ProIntegra. A security vulnerability exists in versions prior to ProIntegra Uptime DC 2.0.0.33940, which stems from a misconfiguration of permissions, resulting in elevated privileges being available to normal users...

rami.io pretix security breach

rami.io pretix is a ticket store application for conferences, festivals, concerts, tech events, shows, exhibitions, workshops, bars, etc. from the German company rami.io. A security vulnerability exists in pretix versions prior to 2023.7.1, which stems from the fact that incorrect analysis of...

38TB of data accidentally exposed by Microsoft AI researchers

Wiz Research found a data exposure incident on Microsoft’s AI GitHub repository, including over 30,000 internal Microsoft Teams messages – all caused by one misconfigured SAS token...

WiFi-Pineapple-MK7_REST-Client - WiFi Hacking Workflow With WiFi Pineapple Mark VII API

PINEAPPLE MARK VII REST CLIENT The leading rogue access point and WiFi pentest toolkit for close access operations. Passive and active attacks analyze vulnerable and misconfigured devices. https://hak5.org/collections/sale/products/wifi-pineapple Author :: TW-D Version :: 1.3.7 Copyright ::...

Deciso OPNsense Security Vulnerability

Deciso OPNsense is a suite of FreeBSD-based open source firewall and routing software from Dutch company Deciso. A security vulnerability exists in OPNsense versions prior to 23.7, which stems from a directory with misconfigured permissions. An attacker can exploit this vulnerability to access...

Cryptomining and Malware Flourish on Misconfigured Kubernetes Clusters

By Habiba Rashid Aquasec Investigation Exposes Alarming Rise in Kubernetes Misconfigurations Leading to Catastrophic Breaches. This is a post from HackRead.com Read the original post: Cryptomining and Malware Flourish on Misconfigured Kubernetes Clusters...

MeterSphere Information Disclosure Vulnerability

MeterSphere is MeterSphere open source one-stop open source continuous testing platform. MeterSphere 2.10.4 LTS prior to the version of the information leakage vulnerability , the vulnerability stems from part of the interface is not configured permissions , resulting in the existence of...

Rockwell Automation Enhanced HIM 跨站请求伪造漏洞

The Rockwell Automation Enhanced HIM is an advanced human interface module from Rockwell Automation. It is a device used to interact with Rockwell Automation control systems, providing a more intuitive and convenient interface for operation and monitoring. A cross-site request forgery vulnerabili...

CVE-2023-28953

IBM Cognos Analytics on Cloud Pak for Data 4.0 could allow an attacker to make system calls that might compromise the security of the containers due to misconfigured security context. IBM X-Force ID: 251465...

CVE-2023-28953

IBM Cognos Analytics on Cloud Pak for Data 4.0 could allow an attacker to make system calls that might compromise the security of the containers due to misconfigured security context. IBM X-Force ID: 251465...