CVE-2026-63238

CVE-2026-63238 describes an authentication bypass in Koollab LMS where an unauthenticated attacker can take over any account (including administrator) by supplying a valid user UUID to the 2FA validation endpoint. The connected records reiterate this access path but do not provide version, patch,...

CVE-2026-63231

Koollab LMS contains a post-authentication SQL injection in the face-to-face runs update endpoint. An authenticated attacker can trigger an error-based SQL condition to read the application database and obtain valid JWT tokens, enabling account takeover. The vulnerability is described across mult...

CVE-2026-63231

A post-authentication SQL injection vulnerability in Koollab LMS allowed an authenticated attacker to use an error-based SQL oracle via the face-to-face runs update endpoint to read the entire application database and obtain valid JWT tokens for account takeover...

EUVD-2026-50126

A post-authentication SQL injection vulnerability in Koollab LMS allowed an authenticated attacker to use an error-based SQL oracle via the face-to-face runs update endpoint to read the entire application database and obtain valid JWT tokens for account takeover...

CVE-2026-63230

Koollab LMS is affected by CVE-2026-63230, a pre-authentication SQL injection on the SCORM report endpoint. The vulnerability allows an unauthenticated attacker to read sensitive data, including personally identifiable information, credentials, and valid JWT tokens that could enable account takeo...

CVE-2026-63229 Pre-authentication blind SQL injection vulnerability

A pre-authentication blind SQL injection vulnerability in Koollab LMS allowed an unauthenticated attacker to use a time-based SQL oracle via the SSO OAuth endpoint to read sensitive database contents, including personally identifiable information, credentials, and valid JWT tokens that may enable...

CVE-2026-63229

Koollab LMS is affected by CVE-2026-63229, a pre-authentication blind SQL injection in the SSO OAuth endpoint. An unauthenticated attacker can use a time-based SQL oracle to read sensitive data from the database, including personally identifiable information, credentials, and valid JWT tokens, po...

CVE-2026-14300

The issue affects the WordPress plugin miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) versions prior to 7.8.0. The root cause is that the one-time code used by the optional email-verification (Profile Completion) feature is not bound to the intended account, allowing an...

OPENSUSE-SU-2026:21475-1 Security update for samba

This update for samba fixes the following issues: - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server bsc1271672. - CVE-2026-15779: pamwinbind module with mkhomedir set allows chown of critical system paths without validation bsc1271469. - CVE-2026-58216: 6-by...

SUSE-SU-2026:22977-1 Security update for samba

This update for samba fixes the following issues: - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server bsc1271672. - CVE-2026-15779: pamwinbind module with mkhomedir set allows chown of critical system paths without validation bsc1271469. - CVE-2026-58216: 6-by...

PT-2026-65801

Name of the Vulnerable Software and Affected Versions Gridbox versions prior to 2.20.2 Description An account takeover issue exists in the socialLogin method, which allows an attacker to authenticate as any user on the target site. Recommendations Update Gridbox to version 2.20.2 or later. As a...

Oracle Solaris Critical Patch Update : jul2026_SRU11_4_94_221_2

The version of Solaris installed on the remote host is prior to 11.4.94.221.2. It is, therefore, affected by multiple vulnerabilities as referenced in the solaris11jul2026SRU114942212 advisory. - Vulnerability in the Oracle Solaris product of Oracle Systems component: Filesystems. The supported...

Poweradmin has Host Header Injection in OIDC redirect_uri, SAML ACS/SLO URL, and Logout Redirect Construction.

Summary Poweradmin v4.3.2 uses the attacker-controlled HTTPHOST request header as the authoritative source for building callback URLs in its OIDC, SAML, and logout authentication flows without any validation. An unauthenticated attacker can poison the redirecturi sent to the Identity Provider,...

[SECURITY] [DSA 6401-1] samba security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6401-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 28, 2026 https://www.debian.org/security/faq -...

Malicious code in xerohub-discord-voice-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 066cb7d27a71055b89630648ee5ae6eed64d6db93e883de66a5db678cfa7663c xerohub-discord-voice-v2 advertises itself as a Discord voice-channel joiner but its exported startVoiceJoiner flow covertly forwards the caller's...

SUSE-SU-2026:3367-1 Security update for samba

This update for samba fixes the following issues - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server bsc1271672. - CVE-2026-15779: pamwinbind module with mkhomedir set allows chown of critical system paths without validation bsc1271469. - CVE-2026-58216: 6-byt...

SUSE-SU-2026:3366-1 Security update for samba

This update for samba fixes the following issues - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server bsc1271672. - CVE-2026-15779: pamwinbind module with mkhomedir set allows chown of critical system paths without validation bsc1271469. - CVE-2026-58216: 6-byt...

Security update for samba

This update for samba fixes the following issues CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server bsc1271672. CVE-2026-15779: pamwinbind module with mkhomedir set allows chown of critical system paths without validation bsc1271469. CVE-2026-58216: 6-byte heap...

SUSE-SU-2026:3365-1 Security update for samba

This update for samba fixes the following issues - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server bsc1271672. - CVE-2026-15779: pamwinbind module with mkhomedir set allows chown of critical system paths without validation bsc1271469. - CVE-2026-58216: 6-byt...

SUSE-SU-2026:3364-1 Security update for samba

This update for samba fixes the following issues - CVE-2026-6949: TSIG packet with crafted name compression can crash internal DNS server bsc1271672. - CVE-2026-15779: pamwinbind module with mkhomedir set allows chown of critical system paths without validation bsc1271469. - CVE-2026-58216: 6-byt...