CVE-2020-12882

Submitty through 20.04.01 allows XSS via upload of an SVG document, as demonstrated by an attack by a Student against a Teaching Fellow...

CVE-2020-12882

Submitty through 20.04.01 allows XSS via upload of an SVG document, as demonstrated by an attack by a Student against a Teaching Fellow...

Cross site scripting

Submitty through 20.04.01 allows XSS via upload of an SVG document, as demonstrated by an attack by a Student against a Teaching Fellow...

CVE-2020-12882

Submitty through 20.04.01 allows XSS via upload of an SVG document, as demonstrated by an attack by a Student against a Teaching Fellow...

Huawei P20 Improper Authentication Vulnerability

Huawei P20 is a smartphone from Chinese company Huawei Huawei. A security vulnerability exists in previous versions of Huawei P20 10.0.0.156 C00E156R1P4, which stems from the program not adequately verifying the user's identity. An attacker can exploit the vulnerability to bypass the restrictions...

School ERP Pro 1.0 - Remote Code Execution Vulnerability

Exploit for php platform in category web applications Exploit Title: School ERP Pro 1.0 - Remote Code Execution Author: Besim ALTINOK Vendor Homepage: http://arox.in Software Link: https://sourceforge.net/projects/school-erp-ultimate/ Version: latest version Tested on: Xampp Credit: İsmail BOZKUR...

School ERP Pro 1.0 Remote Code Execution

Exploit Title: School ERP Pro 1.0 - Remote Code Execution Date: 2020-04-28 Author: Besim ALTINOK Vendor Homepage: http://arox.in Software Link: https://sourceforge.net/projects/school-erp-ultimate/ Version: latest version Tested on: Xampp Credit: İsmail BOZKURT Description...

School ERP Pro 1.0 - Remote Code Execution

Exploit Title: School ERP Pro 1.0 - Remote Code Execution Date: 2020-04-28 Author: Besim ALTINOK Vendor Homepage: http://arox.in Software Link: https://sourceforge.net/projects/school-erp-ultimate/ Version: latest version Tested on: Xampp Credit: İsmail BOZKURT Description...

Description of the Office 2013 update: September 10, 2013

Description of the Office 2013 update: September 10, 2013 INTRODUCTION Microsoft has released an update for Microsoft Office 2013. This update provides the latest fixes for the 32-bit and 64-bit editions of Office 2013 and Office Home and Student 2013 RT. Additionally, this update contains...

Logic Flaw Vulnerability in Spectrum's Smart Sports Platform

Spectrum Smart Sports Platform is a sports data management system with rich modeling functions such as physical fitness test, extracurricular exercise, sports scores, online course selection, theoretical exams and so on. A logic flaw vulnerability exists in the Spectrum Intelligent Sports Platfor...

SQL Injection Vulnerability in the Student Management Service Platform of Beijing Sanyituo Technology Co.

Beijing SANYITO Technology Co., Ltd. is an intelligent and intensive high-tech enterprise specializing in computer software research and development, application and service. There is a SQL injection vulnerability in the student management service platform of Beijing SanYiTuo Technology Co., Ltd,...

Logic flaw vulnerability in student fee management cloud platform

Student Fee Management Cloud Platform is an online self-service fee payment system for students of Industrial Bank Co. A logic flaw vulnerability exists in the Student Fee Management Cloud Platform, which can be exploited by an attacker to reset arbitrary user passwords...

Information leakage vulnerability in smart bill payment platforms

Guilin Jiapeng Information Technology Co., Ltd. is a company that gathers high-quality software development talents and marketing talents and focuses on the development and application of college management software. There is an information leakage vulnerability in the smart fee payment platform...

GUnet OpenEclass 1.7.3 E-learning platform - month SQL Injection

GUnet OpenEclass 1.7.3 E-learning platform - month SQL Injection Exploit Title: GUnet OpenEclass 1.7.3 E-learning platform - 'month' SQL Injection Google Dork: intext:"© GUnet 2003-2007" Date: 2020-03-02 Exploit Author: emaragkos Vendor Homepage: https://www.openeclass.org/ Software Link:...

GUnet OpenEclass 1.7.3 E-learning platform - (month) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: GUnet OpenEclass 1.7.3 E-learning platform - 'month' SQL Injection Google Dork: intext:"© GUnet 2003-2007" Exploit Author: emaragkos Vendor Homepage: https://www.openeclass.org/ Software Link:...

Clearview AI's Massive Client List Got Hacked

Clever malware, student surveillance, and more of the week's top security news...

studenthousingaarhus.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1102032 Security Researcher geeknik Helped patch 8826 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting studenthousingaarhus.com...

Institute of International Education leaks data of thousands of students

By Waqas Another day, another data breach - This time, MongoDB instances at it again owned by the Institute of International Education IIE. This is a post from HackRead.com Read the original post: Institute of International Education leaks data of thousands of students...

WhatTheHack - A Collection Of Challenge Based Hack-A-Thons Including Student Guide, Proctor Guide, Lecture Presentations, Sample/Instructional Code And Templates

WhatTheHack is a collection of challenge based hack-a-thons including student guide, proctor guide, lecture presentations, sample/instructional code and templates. What, Why and How "What the Hack" is a challenge based hackathon format Challenges describe high-level tasks and goals to be...

Online Course Registration 2.0 - Remote Code Execution Exploit

Exploit for php platform in category web applications Exploit Title: Online Course Registration 2.0 - Remote Code Execution Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/online-course-registration-free-download/ Version: v2.0...