physiouk.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-323387 Description| Value ---|--- Affected Website:| physiouk.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

fbichefschool.co.za XSS vulnerability

Vulnerable URL: http://www.fbichefschool.co.za/full-time-courses/!prettyPhoto/0,%3Ca%20onclick=%22alert%27OPENBUGBOUNTY%27;%22%3E/ Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 30.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

Promoting Online Safety in Canada: Trend Micro Launches Video Contest for Local Kids

At Trend Micro we always strive to be a responsible corporate citizen. Right from the beginning the company has devoted significant time and resources to a variety of projects: from house building in the Philippines, to our Give and Match programs around the world designed to support vital...

Information Disclosure

Moodle is vulnerable to information disclosure. The library functions coreenrolgetcourseenrolmentmethods and enrolselfgetinstanceinfo don't check course visibility permissions, allowing a malicious user to access hidden courses...

Information Disclosure

Moodle is vulnerable to information disclosure. The timeline view in the overview for a new course can show activities from hidden courses...

CVE-2017-7531

In Moodle 3.3, the course overview block reveals activities in hidden courses...

UBUNTU-CVE-2017-7531

In Moodle 3.3, the course overview block reveals activities in hidden courses...

UBUNTU-CVE-2017-7532

In Moodle 3.x, course creators are able to change system default settings for courses...

Code injection

In Moodle 3.3, the course overview block reveals activities in hidden courses...

CVE-2017-7531

In Moodle 3.3, the course overview block reveals activities in hidden courses...

CVE-2017-7531

In Moodle 3.3, the course overview block reveals activities in hidden courses...

CVE-2017-7532

In Moodle 3.x, course creators are able to change system default settings for courses...

nicpld.org XSS vulnerability

Vulnerable URL: https://www.nicpld.org/courses/index.asp?programme=1"...

uisv.it XSS vulnerability

Vulnerable URL: http://www.uisv.it/index.asp?draw=Courses=1/-///'/"//--...

Historical courses and resorts in Elliptic Curves Cryptography - Is Curve25519 dead?

tl;dr This short blog post serves to me to recollect some of the thing I have been learning climbing about Elliptic Curves Cryptography ECC from now on during the last months/years, so please take it with a grain of salt since it might contains some erroneous beliefs. '80 - Introduction...

Radancy: Possible to view and takeover other user's education and courses @ mijn.werkenbijdefensie.nl

Domain and URL: https://mijn.werkenbijdefensie.nl/instellingen/gegevens/tab2 Summary: IDOR vulnerability in editing education/courses Description: It is possible to view and change courses and education of other users also known as an IDOR. It's also possible to save these, and after saving the...

The Hacker News (THN) Celebrates 6th Anniversary Today

Can you believe that it's been 6 years since we first launched The Hacker News? Yes, The Hacker News is celebrating its sixth anniversary today on 1st November. We started this site on this same day back in 2010 with the purpose of providing a dedicated platform to deliver latest infosec news and...

The Hacker News launches Online Deals Store – Get Best Deals & Offers

Hey readers, guess what? The Hacker News THN is about to complete its 6 years as a leading Information Security Channel – attracting over 9 Million readers worldwide – and a trusted source for Hacking, Cyber Security and Infosec News for the enthusiasts, technologists & nerds. In the special...

Stepic.org: Free Courses - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Stepic.org: Free Courses published at the 'play' market has multiple vulnerabilities...

Joomla Guru Pro Component (com_guru) - SQL Injection

Exploit for php platform in category web applications Exploit Title: Joomla Guru Pro comguru Component - SQL Injection Exploit Author: s0nk3y Date: 14/07/2016 Vendor Homepage: https://www.ijoomla.com Software Link:...