moodle-rce-calculatedquestions

Script per testare la validazione dell'input nelle domande calcolate di Moodle CVE-2024-43425 Questo repository contiene gli script di accompagnamento al post del blog Back to School - Exploiting a Remote Code Execution Vulnerability in Moodle, che descrive una vulnerabilità di esecuzione di codi...

CVE-2022-26138

CVE-2022-26138 POC Beschreibung root@kitploit: The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in the confluence-users group with the username disabledsystemuser and a hardcoded password. A remote, unauthenticated attacker with...

Security_Engineer_Interview_Questions

SecurityEngineerInterviewQuestions Nella primavera del 2016 ho passato un paio d'ore a leggere Glassdoor.com per vedere quali domande di sicurezza gli utenti avevano riportato di aver ricevuto durante i colloqui per lavori da ingegnere della sicurezza. Ho annotato tutte quelle non duplicate ed ec...

Confluence-Question-CVE-2022-26138-

Confluence-Question-CVE-2022-26138 Atlassian Confluence Server und Data Center: CVE-2022-26138 Wenn die App 'Questions for Confluence' auf Confluence Server oder Data Center installiert und aktiviert ist, erstellt sie ein Confluence-Benutzerkonto mit dem Benutzernamen 'disabledsystemuser' und dem...

CVE-2022-37177

CVE-2022-37177 - Algoritmo Criptográfico Quebrado ou Arriscado do HireVue Ao visitar o link de convite para entrevista que o HireVue fornece para uma entrevista, você é direcionado a uma página de termos onde concorda com os termos antes de iniciar o processo de entrevista gravada e cronometrada...

CVE-2024-1208-and-CVE-2024-1210

CVE-2024-1208 e CVE-2024-1210 Esposizione di informazioni sensibili tramite API in LearnDash. I visitatori non autenticati possono sfogliare i quiz e le domande dei quiz senza essere iscritti a un corso collegato. Vulnerabilità: CVE-2024-1208 e CVE-2024-1210 Esposizione di informazioni sensibili...

test-your-sysadmin-skills

:star: "Un grande amministratore non ha bisogno di sapere tutto, ma deve essere in grado di trovare soluzioni straordinarie a progetti impossibili. " - cwheeler33 ServerFault :star: "La mia abilità è far funzionare le cose, non conoscere un miliardo di fatti. ... Se devo riparare un sistema,...

Moodle - Remote Code Execution

Attackers with the permission to create or modify questions in Moodle courses are able to craft malicious inputs for calculated questions, which can be abused to execute arbitrary commands on the underlying system. id: CVE-2024-43425 info: name: Moodle - Remote Code Execution author:...

security-interview-questions

Fonti QUIZ: https://quizlet.com/231268221/general-information-security-questions-flash-cards/ SANS Cheat Sheets: https://www.sans.org/blog/the-ultimate-list-of-sans-cheat-sheets/ Offensive Security OSCP: https://411hall.github.io/OSCP-Preparation/...

cybersecurity-interview-questions

Perguntas de Entrevista em Cibersegurança Uma Coleção Gratuita e de Código Aberto para Red Team, Blue Team, Segurança Web, Resposta a Incidentes e Mais...

infosec-interview-questions

Fragen für Vorstellungsgespräche im Bereich Informationssicherheit Eine Sammlung von Interviewfragen für Rollen in der Informationssicherheit Inhaltsverzeichnis Anwendungssicherheit Architekt Blue Team Verschlüsselung Forensik Allgemein Incidence Response Netzwerke Red Team Schwachstellenmanageme...

CVE-2026-45126

MyBB is free and open source forum software. Prior to 1.8.40, the Admin CP Security Questions module does not validate the anti-CSRF token correctly, allowing same-site attackers to enable or disable registration challenge questions with a specially crafted URL. The controller processes GET...

EUVD-2026-61037

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend product question operations allow a low-privileged Vendor to manage questions under another Vendor's products. The admin/sql/sqlite/productquestion.sql queries...

CVE-2026-49222 Vvveb product question authorization bypass allows Vendors to read, approve, edit, or delete questions under other Vendors' products

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend product question operations allow a low-privileged Vendor to manage questions under another Vendor's products. The admin/sql/sqlite/productquestion.sql queries...

CVE-2026-49222 Vvveb product question authorization bypass allows Vendors to read, approve, edit, or delete questions under other Vendors' products

Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to 1.0.8.4, Vvveb backend product question operations allow a low-privileged Vendor to manage questions under another Vendor's products. The admin/sql/sqlite/productquestion.sql queries...

EUVD-2026-61007

MyBB is free and open source forum software. Prior to 1.8.40, the Admin CP Security Questions module does not validate the anti-CSRF token correctly, allowing same-site attackers to enable or disable registration challenge questions with a specially crafted URL. The controller processes GET...

CVE-2026-45126 MyBB: ACP Questions state CSRF

MyBB is free and open source forum software. Prior to 1.8.40, the Admin CP Security Questions module does not validate the anti-CSRF token correctly, allowing same-site attackers to enable or disable registration challenge questions with a specially crafted URL. The controller processes GET...

CVE-2026-45126

MyBB (open-source forum software) prior to 1.8.40 contains a CSRF vulnerability in the Admin CP Security Questions module (admin/modules/config/questions.php). The controller processes GET requests for enable/disable actions that modify mybb_questions.active without verifying the my_post_key anti...

CVE-2026-45126

MyBB is free and open source forum software. Prior to 1.8.40, the Admin CP Security Questions module does not validate the anti-CSRF token correctly, allowing same-site attackers to enable or disable registration challenge questions with a specially crafted URL. The controller processes GET...

PT-2026-77180

MyBB is free and open source forum software. Prior to 1.8.40, the Admin CP Security Questions module does not validate the anti-CSRF token correctly, allowing same-site attackers to enable or disable registration challenge questions with a specially crafted URL. The controller processes GET...