2193 matches found
Cross-Site Scripting (XSS)
moodle/moodle is vulnerable to cross-site scripting XSS. An attacker is able to inject and execute arbitrary Javascript in user's browser via by storing a malicious payload within the ID number from the user profile field...
CVE-2021-20279
The ID number user profile field required additional sanitizing to prevent a stored XSS risk in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17...
CVE-2021-20279
The ID number user profile field required additional sanitizing to prevent a stored XSS risk in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17...
CVE-2021-20279
CVE-2021-20279 affects Moodle before versions 3.10.2, 3.9.5, 3.8.8, and 3.5.17, where the id number user profile field sanitization allows stored XSS. The vulnerability is a result of insufficient sanitization of the user profile ID field, enabling stored XSS attacks. The connected documents indi...
CVE-2021-20279
The ID number user profile field required additional sanitizing to prevent a stored XSS risk in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17...
Sonlogger 4.2.3.3 - SuperAdmin Account Creation / Information Disclosure
Exploit Title: Sonlogger 4.2.3.3 - SuperAdmin Account Creation / Information Disclosure Date: 04-02-2021 Exploit Author: Berkan Er Vendor Homepage: https://www.sonlogger.com/ Version: 4.2.3.3 Tested on: Windows 10 Enterprise x64 Version 1803 A remote attacker can be create an user with SuperAdmin...
Moodle 跨站脚本漏洞
Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A cross-site scripting vulnerability exists in moodle that originates in the user profile field. No detailed vulnerability details are...
Microsoft Windows User Profile Service Directory Junction Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the User Profile...
CVE-2021-26886
User Profile Service Denial of Service Vulnerability...
CVE-2021-26886
User Profile Service Denial of Service Vulnerability...
CVE-2021-26873
Windows User Profile Service Elevation of Privilege Vulnerability...
CVE-2021-26873
Windows User Profile Service Elevation of Privilege Vulnerability...
CVE-2021-26873
Windows User Profile Service Elevation of Privilege Vulnerability...
Privilege escalation
Windows User Profile Service Elevation of Privilege Vulnerability...
CVE-2021-26886
User Profile Service Denial of Service Vulnerability...
Denial of service
User Profile Service Denial of Service Vulnerability...
CVE-2021-26886
CVE-2021-26886 is a Microsoft Windows User Profile Service Denial of Service vulnerability affecting the User Profile Service component. CVSS v3.1 base score 6.1 (Medium): attack vector LOCAL, privileges required LOW, user interaction NONE, with high impact on availability and low impact on integ...
CVE-2021-26886 User Profile Service Denial of Service Vulnerability
...
CVE-2021-26873
Technical details about CVE-2021-26873 (affected product/version, root cause, exploitability, fixes) are not provided in the connected documents. Monitor for updates from official advisories.