PortSwigger-Web-Security-Academy

PortSwigger-Web-Security-Academy 興味深いケースとさらに多くのもの nu11secur1tyと共に 😎 2022年6月時点のレポート JWT - モジュール:...

Academy Learning Management System <5.9.1 - Cross-Site Scripting

Academy Learning Management System before 5.9.1 contains a cross-site scripting vulnerability via the Search parameter. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

Academy LMS 6.2 - SQL Injection

A vulnerability was found in Academy LMS 6.2. It has been rated as critical. Affected by this issue is some unknown functionality of the file /academy/tutor/filter of the component GET Parameter Handler. The manipulation of the argument pricemin/pricemax leads to sql injection. The attack may be...

Academy LMS 6.0 - Cross-Site Scripting

Creative Item Academy LMS 6.0 was discovered to contain a cross-site scripting XSS vulnerability through query parameter. id: CVE-2023-38964 info: name: Academy LMS 6.0 - Cross-Site Scripting author: ritikchaddha severity: medium description: | Creative Item Academy LMS 6.0 was discovered to...

GhostlyHollowingViaTamperedSyscalls2

改ざんされたシステムコールを介したGhostly Hollowing 再アップロードに関するお知らせ !NOTE 元のリポジトリでは、DeceptIQの創設者である@Rad9800への帰属を省略した誤ったライセンスが使用されていました。彼のTamperingSyscallsリポジトリはMITライセンスの下で公開されています。彼の業績は、コースモジュール（Tampered Syscalls Via Hardware BreakPoints）内で既にクレジットされており、公開されているThird-Party Licenses Pageにも反映されています。...

Burp-Suite-Certified-Practitioner-Exam-Study

Burp Suite Certified Practitioner 試験対策 これは、110以上のPortSwigger Academyラボを使用した私の学習ノートです。 これらのラボを使用して、2023年のBurp Suite Certified Practitioner試験に合格しました。 私のBSCP認定資格。 最新の学習教材については、PortSwigger Academyをご覧ください。 スキャニング - 列挙 フォーカススキャン 非標準エンティティのスキャン 足場 - ステージ1 コンテンツ発見 DOM-XSS XSS クロスサイトスクリプティング...

CVE-2022-38553

CVE-2022-38553 关于"ACADEMY LEARNING MANAGEMENT SYSTEM" POC 视频： 安全风险： 此安全漏洞允许攻击者在用户访问其准备好的URL时，在用户浏览器中执行任意JavaScript代码。...

CVE-2022-47131

CVE-2022-47131 Academy LMS history.pushState'', '', '/'...

CVE-2022-47130

CVE-2022-47130 Academy LMS history.pushState'', '', '/'...

CVE-2022-29380

CVE-2022-29380 CVE-2022-29380 Date: 25/05/2022 Author: OpenXP Team Software: Academy LMS Version: Academy LMS = v4.3 Type: Cross-Site Scripting OWASP TOP 10: A03:2021-Injection CWE: CWE-79 Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' References:...

CVE-2025-15521

CVE-2025-15521 WordPress 用プラグイン「Academy LMS – WordPress LMS Plugin for Complete eLearning Solution」は、バージョン 3.5.0 までの全バージョンにおいて、アカウント乗っ取りによる権限昇格の脆弱性が存在します。 | | | | || | | | || | | | | | | | --| | | || | | | | ||| || | | || | ||/|| ||||| |||||| 📡 @KNxploited をフォロー — CVE の開示と動作するエクスプロイトを遅延なく配信。 What...

AlmaLinux 9.2 [TuxCare] Security Update: openexr / openexr-devel / openexr-libs (ALMALINUX9.2:CLSA-2025:1759413150)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1759413150 advisory. - An issue in Academy Software Foundation openexr v.3.2.3 and before allows a local attacker to cause a denial of service DoS via the convert...

AlmaLinux 9.6 [TuxCare] Security Update: openexr / openexr-devel / openexr-libs Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1775211239)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1775211239 advisory. - Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This...

Rocky Linux 9.6 [TuxCare] Security Update: openexr / openexr-devel / openexr-libs Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1775211239)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1775211239 advisory. - Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This...

AlmaLinux 9.2 [TuxCare] Security Update: openexr / openexr-devel / openexr-libs Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1775234419)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1775234419 advisory. - Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This...

EmbedPayloadInPng

EmbedPayloadInPng ペイロードを複数の IDAT セクションに分割して PNG ファイル内に埋め込みます。各セクションは、RC4 暗号化アルゴリズムを使用して、それぞれ独自の 16バイト鍵で個別に暗号化されます。 クイックリンク Maldev Academy ホーム Maldev Academy シラバス Maldev Academy 料金 実装 このリポジトリには、以下の2つの実装が含まれています： EmbedPayloadInPng.py - 入力ペイロードを指定された PNG ファイルに埋め込む Python スクリプトです。 FetchPayloadFromPng...

CVE-2022-47132

CVE-2022-47132 Academy LMS history.pushState'', '', '/'...

WordPress Academy LMS plugin < 3.8.3 - Subscriber+ Arbitrary Lesson Content Disclosure via lessons REST Endpoint vulnerability

Subscriber+ Arbitrary Lesson Content Disclosure via lessons REST Endpoint vulnerability discovered by Pedro Pinho in WordPress Plugin Academy LMS versions 3.8.3...

WordPress Academy LMS plugin <= 3.8.2 - Subscriber+ Sensitive Information Disclosure vulnerability

Subscriber+ Sensitive Information Disclosure vulnerability discovered by Stefan Spasic in WordPress Plugin Academy LMS versions = 3.8.2...

CVE-2026-16563

The Academy LMS WordPress plugin before 3.8.3 does not verify course enrollment or lesson publication status when returning a single lesson through its REST API, allowing users with a self-service student Subscriber-level account to disclose the content of arbitrary lessons, including lessons of...