20 matches found
CVE-2026-55435: Incorrect Authorization
Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.30.0 and prior to versions 2.32.7, 2.33.8, and 2.34.2, AI Bridge proxy endpoints authenticate via Server.IsAuthorized in coderd/aibridgedserver, which validates key format, expiry, secret...
CVE-2026-43918: Insufficient Session Expiration
FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, when a client or staff/admin account is suspended or marked inactive, existing authenticated sessions are not invalidated. The session identity loaders in src/di.php loggedinclient and loggedinadmin...
EUVD-2022-2418
Malicious code in bioql PyPI...
CVE-2024-30187
Anope before 2.0.15 does not prevent resetting the password of a suspended account...
UBUNTU-CVE-2024-30187
Anope before 2.0.15 does not prevent resetting the password of a suspended account...
CVE-2024-30187
Anope before 2.0.15 does not prevent resetting the password of a suspended account...
CVE-2024-30187
Anope before 2.0.15 does not prevent resetting the password of a suspended account...
CVE-2024-30187: Improper Preservation of Permissions
Anope before 2.0.15 does not prevent resetting the password of a suspended account...
CVE-2024-30187
Anope before 2.0.15 does not prevent resetting the password of a suspended account...
Anope 安全漏洞
Anope is a set of open source IRC services open sourced by Anope IRC Services. A security vulnerability exists in Anope versions prior to 2.0.15, which stems from a vulnerability that does not prevent an attacker from resetting the password of a suspended account...
SUSE CVE-2015-3179
login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to bypass intended login restrictions by leveraging access to an unconfirmed suspended account...
CVE-2018-1082
A flaw was found in Moodle 3.4 to 3.4.1, and 3.3 to 3.3.4. If a user account using OAuth2 authentication method was once confirmed but later suspended, the user could still login to the site...
CVE-2018-1082: Improper Authorization
A flaw was found in Moodle 3.4 to 3.4.1, and 3.3 to 3.3.4. If a user account using OAuth2 authentication method was once confirmed but later suspended, the user could still login to the site...
Login Restriction Bypass
Moodle is vulnerable to login restrition bypasses. A malicious user with a suspended account is still able to login by confirming their email if they have yet to confirm it...
The vulnerability of the Moodle learning management system allows a hacker to bypass access restrictions to the system.
The vulnerability of the Moodle learning management system’s sub-component login/confirm.php is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a malicious actor to bypass system access restrictions by obtaining access using an account...
UBUNTU-CVE-2015-3179
login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to bypass intended login restrictions by leveraging access to an unconfirmed suspended account...
Design/Logic Flaw
login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to bypass intended login restrictions by leveraging access to an unconfirmed suspended account...
CVE-2015-3179: Undefined Security Weakness
login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to bypass intended login restrictions by leveraging access to an unconfirmed suspended account...
Twitter Locks Out Wikileaks DDoS Group As Attacks Spread
Twitter has suspended the account used by Anonymous, an umbrella group of online hacker-activists that have claimed responsibility for denial of service DoS attacks on Visa, MasterCard, Paypal and a host of other public and private entities who have taken action against Wikileaks and its founder,...
