PMB v7.4.6 was discovered to contain an open redirect vulnerability via the component /opac_css/pmb.php. This vulnerability allows attackers to redirect victim users to an external domain via a crafte ...
Continue ReadingMarch 06, 2023
In Moodle, an SQL injection risk was identified in the library fetching a user's enrolled courses.Read More ...
Continue ReadingMarch 06, 2023
In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses.Read More ...
Continue ReadingMarch 06, 2023
An arbitrary file upload vulnerability in the camera_upload.php component of PMB v7.4.6 allows attackers to execute arbitrary code via a crafted image file.Read More ...
Continue ReadingMarch 06, 2023
ISO 15765 and ISO 10681 dissector crash in Wireshark 4.0.0 to 4.0.3 and 3.6.0 to 3.6.11 allows denial of service via packet injection or crafted capture fileRead More ...
Continue ReadingMarch 06, 2023
An arbitrary file upload vulnerability in the component /admin1/config/update of onekeyadmin v1.3.9 allows attackers to execute arbitrary code via a crafted PHP file.Read More ...
Continue ReadingMarch 06, 2023
A vulnerability classified as problematic has been found in woo-popup Plugin up to 1.2.2. This affects an unknown part of the file admin/class-woo-popup-admin.php. The manipulation leads to cross site ...
Continue ReadingMarch 06, 2023
In Moodle, insufficient capability checks meant message deletions were not limited to the current user.Read More ...
Continue ReadingMarch 06, 2023
Back to Main