PT-2024-28444 · Totara · Totara Lms

Name of the Vulnerable Software and Affected Versions: Totara LMS version 18.0.1 Build 20231128.01 Description: A problematic vulnerability has been found in Totara LMS, affecting an unknown part. The manipulation leads to cross-site request forgery, and it is possible to initiate the attack...

Command Injection

github.com/txthinking/brook is vulnerable to Command Injection. The vulnerability exists due to a lack of user request validation in the local tproxy service, which allows an attacker to inject and execute arbitrary commands...

PT-2022-22688 · Ibm · Ibm Security Verify Information Queue

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Information Queue version 10.0.2 Description: The issue allows an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts due to cross-site request forgery. Recommendations: F...