559 matches found
FBI To Probe California University Hack That Changed Student's Grades
More than 60 current and former students at Santa Clara University had their academic records hacked into and grades changed – for the better, according to a letter posted to the school’s site on Monday by university president Michael Engh. The note claims that there was unauthorized access to th...
University of Wisconsin-Milwaukee hacked - 75,000 social security numbers exposed
University of Wisconsin-Milwaukee hacked - 75,000 social security numbers exposed University of Wisconsin-Milwaukee was the target. Malicious code was discovered on a document management database server. The university contacted law enforcement and after a month-long investigation realized that t...
New Leak of Documents Is Protest Over Harvard Fellow's Arrest
More than 18,000 academic documents have been copied from an online scholarly archive and posted on Pirate Bay, the file sharing Web site, but questions arose on Friday about where the documents really came from. The documents in question, totalling 18,592 scientific publications and about 33...
Experts Converge at RFIDsec to Discuss NFC Security Implications
RFID security problems have been biting at the ankles of users and companies that deploy the technology for several years now, but they’ve been mostly on the fringes of mainstream security concerns. But now, as the technology becomes more widespread and pervasive, that is beginning to change...
Time to Focus on Results-Oriented Security
The security industry is full of pernicious problems with no easy solutions. Take spam, for example. The current best defense is filtering out the obvious spam messages. Yet, the countermeasure is not a solution: As anti-spam technology gets better, spammers merely churn out more spam and achieve...
Google Announces HITB2011AMS Conference Grant for Women Hackers !
As part of Google's ongoing commitment to encouraging women to excel in computing and technology, Google is pleased to announce the HITB2011AMS Conference Grant. This grant is set up to enable more female computer scientists to attend and participate in HITB2011AMS. The grant includes a pass to t...
100 BitTorrent Users Do Most Illegal Sharing
BitTorrent, the peer to peer file sharing network, has gained a reputation for enabling the masses to share and distribute files. But when it comes to sharing copyrighted content, just 100 users are responsible for most of the content. The findings, published by academic researchers in Spain,...
Yektaweb CMS Cross Site Scripting
================= IUT-CERT ================= Title: YEKTAWEB CMS XSS Vulnerability Vendor: www.yektaweb.com Dork: Powered by Academic Web Tools AWT - Yektaweb Collection Type: Input.Validation.Vulnerability cross-Site scripting Fix: N/A ================== nsec.ir ================= Description:...
Ganesha Digital Library 4.2 SQL Injection
Ganesha Digital Library GDL Vulnerability Author : Arianom [email protected] Homepage : http://indonesiancoder.com o INDEX o I. Software Information II. POC III. About Software IV. Bug Fix V. Shout I. Software Information Vendor : http://kmrg.itb.ac.id/ Download :...
SentinelLM UDP Buffer Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'SentinelLM U...
Some Researchers Lack Basic Ethics
By Roel Schouwenberg Once upon a time we were living in a world where creating malware, then still called viruses, was a very bad thing to do. These days, people seem much more relaxed with the idea of someone writing malware. Over the years I’ve spent quite some time thinking about this change a...
YEKTA WEB Academic Web Tools CMS Multiple XSS
============================================ IUT-CERT ============================================ Title: Academic Web Tools CMS Multiple XSS Vendor: www.yektaweb.com Vulnerable Version: 1.5.7 and priors Type: XSS Fix: N/A Dork: AWT YEKTA ============================================ nsec.ir...
Yektaweb Academic Web Tools CMS 1.4.2.8/1.5.7 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/33944/info Yektaweb Academic Web Tools CMS is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. Attacker-supplied HTML and script code would execute in the context of the affected site,...
Yektaweb Academic Web Tools CMS 1.4.2.81.5.7 - Multiple Cross-Site Scripting Vulnerabilities
Yektaweb Academic Web Tools CMS 1.4.2.81.5.7 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/33944/info Yektaweb Academic Web Tools CMS is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input...
Academic Web Tools CMS Cross Site Scripting
============================================ IUT-CERT ============================================ Title: Academic Web Tools CMS Multiple XSS Vendor: www.yektaweb.com Vulnerable Version: 1.5.7 and priors Type: XSS Fix: N/A Dork: AWT YEKTA ============================================ nsec.ir...
siu guarani - Multiple Vulnerabilities
multiple remote vulnerabilities siu guarani general information ------------------- bug type : multiple remote vulnerabilities software name : SIU Guarani vendor : SIU www.siu.edu.ar authors : proudhon & Ubik date : the 341st day of the year 2008 contact : N/A description : SIU-Guarani is a web...
CVE-2008-3421
Multiple cross-site request forgery CSRF vulnerabilities in Blackboard Academic Suite 8.0.260.7 allow remote attackers to hijack the authentication of student users for requests that change configuration and enrollments via unspecified input to 1 updatemodule.jsp, 2 enrollcourse.pl, and 3...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in Blackboard Academic Suite 8.0.260.7 allow remote attackers to hijack the authentication of student users for requests that change configuration and enrollments via unspecified input to 1 updatemodule.jsp, 2 enrollcourse.pl, and 3...
CVE-2008-3421
CVE-2008-3421 describes multiple CSRF vulnerabilities in Blackboard Academic Suite 8.0.260.7 that allow remote attackers to hijack student-authenticated sessions to change configuration and enrollments via input to update_module.jsp, enroll_course.pl, and unenroll.jsp. The impact is unauthorized ...
CVE-2008-3421
Multiple cross-site request forgery CSRF vulnerabilities in Blackboard Academic Suite 8.0.260.7 allow remote attackers to hijack the authentication of student users for requests that change configuration and enrollments via unspecified input to 1 updatemodule.jsp, 2 enrollcourse.pl, and 3...