CVE-2026-60701

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite component: Work Provider Site Level Administration. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to...

CVE-2026-46824

Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite component: Work Provider Site Level Administration. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromi...

EUVD-2021-20042

Malware in sbrugna...

EUVD-2007-4900

Malware in sbrugna...

EUVD-2022-7134

Malicious code in bioql PyPI...

EUVD-2022-3698

Malicious code in bioql PyPI...

EUVD-2025-4274

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2022-40315

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A limited SQL injection risk was identified in the browse list of users site administration page. CVE-2022-40315 Note that Nessus relies on the presence of the...

Cross-site Scripting (XSS)

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Cross-site Scripting XSS through the site administration live log. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker “injects” a malicious script into an...

CVE-2025-26529

Description information displayed in the site administration live log required additional sanitizing to prevent a stored XSS risk...

UBUNTU-CVE-2025-26529

Description information displayed in the site administration live log required additional sanitizing to prevent a stored XSS risk...

CVE-2025-26529

CVE-2025-26529 affects Moodle, with the root cause a vulnerability in how Description information is displayed in the site administration live log, requiring additional sanitizing to prevent stored XSS. The entry is evidenced across multiple feeds, including a GitHub PoC claiming a Moodle XSS to ...

CVE-2025-26529 Stored XSS risk in admin live log

Description information displayed in the site administration live log required additional sanitizing to prevent a stored XSS risk...

CVE-2025-26529 Stored XSS risk in admin live log

Description information displayed in the site administration live log required additional sanitizing to prevent a stored XSS risk...

CVE-2025-26529: Improper Neutralization of Input During Web Page Generation

Description information displayed in the site administration live log required additional sanitizing to prevent a stored XSS risk...

PT-2025-7686

Name of the Vulnerable Software and Affected Versions Moodle affected versions not specified Description Insufficient sanitization of description information displayed in the site administration live log allows a remote attacker to perform a stored Cross-Site Scripting XSS attack. Stored XSS occu...

Sensitive Information Exposure

Moodle is vulnerable to Sensitive Information Exposure. The vulnerability is due to sensitive secrets and keys not being excluded from site administration preset exports, potentially leading to unintentional data leaks when presets are shared with third parties...

UBUNTU-CVE-2024-43427

A flaw was found in moodle. When creating an export of site administration presets, some sensitive secrets and keys are not being excluded from the export, which could result in them unintentionally being leaked if the presets are shared with a third party...

CVE-2024-43427 Moodle: admin presets export tool includes some secrets that should not be exported

A flaw was found in moodle. When creating an export of site administration presets, some sensitive secrets and keys are not being excluded from the export, which could result in them unintentionally being leaked if the presets are shared with a third party...

CVE-2024-43427: Insecure Storage of Sensitive Information

A flaw was found in moodle. When creating an export of site administration presets, some sensitive secrets and keys are not being excluded from the export, which could result in them unintentionally being leaked if the presets are shared with a third party...