CVE-2026-31282

CVE-2026-31282 描述 Totara LMS 存在不正确的访问控制漏洞。登录页面代码可被操纵以泄露登录表单并绕过 Octa 登录。攻击者可将此与登录表单上缺失的速率限制相结合，发起暴力破解攻击以获取用户凭据。 CVSS 3 评分: 9.1 严重 攻击类型 远程 未认证 受影响版本 低于或等于 19.1.5 的版本 产品供应商 Totara 受影响产品代码库 Totara LMS 受影响组件 登录页面。 缓解措施 登录表单验证应依赖服务器端验证，而不仅仅是客户端，并且应在登录表单上实施速率限制以防止暴力破解攻击。 漏洞详情 Totara LMS...

EUVD-2024-22104

Malicious code in bioql PyPI...

Malicious code in testing-octa (npm)

The package testing-octa was found to contain malicious code...

MAL-2025-36726 Malicious code in testing-octa (npm)

The package testing-octa was found to contain malicious code...

CVE-2024-24705

Cross-Site Request Forgery CSRF vulnerability in Octa Code Accessibility.This issue affects Accessibility: from n/a through 1.0.6...

CVE-2024-24705

Cross-Site Request Forgery CSRF vulnerability in Octa Code Accessibility.This issue affects Accessibility: from n/a through 1.0.6...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Octa Code Accessibility.This issue affects Accessibility: from n/a through 1.0.6...

CVE-2024-24705 WordPress Accessibility Plugin <= 1.0.6 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Octa Code Accessibility.This issue affects Accessibility: from n/a through 1.0.6...

CVE-2024-24705 WordPress Accessibility Plugin <= 1.0.6 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Octa Code Accessibility.This issue affects Accessibility: from n/a through 1.0.6...

CVE-2024-24705

CVE-2024-24705 : CSRF vulnerability in the WordPress Accessibility plugin (

PT-2024-20501 · Unknown · Octa Code Accessibility

Name of the Vulnerable Software and Affected Versions: Octa Code Accessibility versions n/a through 1.0.6 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web applicatio...

Arista Networks Arista EOS 安全漏洞

Arista Networks Arista EOS is a scalable operating system for data centers and cloud network centers from Arista Networks, Inc. Arista EOS builds cloud architectures that scale to hundreds of thousands of compute and storage nodes with management and provisioning capabilities for large-scale jobs...

Arista Networks Arista EOS 安全漏洞

Arista Networks Arista EOS is a scalable operating system for data centers and cloud network centers from Arista Networks, Inc. Arista EOS builds cloud architectures that scale to hundreds of thousands of compute and storage nodes with management and provisioning capabilities for large-scale jobs...

Security Advisory 0077

Security Advisory 0077 . CSAF PDF Date: May 27th, 2022 Revision | Date | Changes ---|---|--- 1.1 | May 27th 2022 | Update the CVE impact of Octa 1.0 | May 25th 2022 | Initial release CVE-2021-28508 CVSSv3.1 Base Score: 6.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H CWE: CWE-255 Credentials...