IC3 Issues Alert on CryptoWall Ransomware

The Internet Crime Complaint Center IC3 has issued an alert warning that U.S. individuals and businesses are still at risk of CryptoWall ransomware fraud. Scam operators use ransomware—a type of malicious software—to infect a device and restrict access until a ransom fee is paid­­. Individuals an...

ta-k.com XSS vulnerability

Open Bug Bounty ID: OBB-67052 Description| Value ---|--- Affected Website:| ta-k.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

某教育门户CMS存在五处SQL注入

简要描述： RT 详细说明： 释锐是全国领先的智慧教育解决方案供应商。致力于通过技术创新为中小学、职校、高校和教育行政管理机构提供有竞争力的智慧教育解决方案和服务，持续提升客户体验，为客户创造最大价值。目前，释锐的产品和解决方案已经应用于 25 个省市，服务全国 3000 多所学校。 注入点：index.jsp?groupId=，labelGroup.jsp?labelName=， searchInfo.jsp?orderBy=， groupList.jsp?orderBy=，ta.jsp?tpId=&uuid= 案例： 注入点1：...