GhostlyHollowingViaTamperedSyscalls2

基于篡改系统调用的幽灵镂空 重新上传说明 !NOTE 原仓库此前使用了不正确的许可证，遗漏了对 DeceptIQ 创始人 @Rad9800 的署名，其 TamperingSyscalls 仓库以 MIT 许可证发布。他的工作已在课程模块（Tampered Syscalls Via Hardware BreakPoints）中获得署名，也已反映在我们的公开第三方许可证页面上。 在意识到这一疏漏后，我们立即更正了原仓库，并在 当天 就联系 Rad 为这一疏忽道歉。尽管我们尽力纠正这一无意中的错误，但他没有回复，并阻断了进一步的沟通。五个月后，我们收到了 DMCA 下架通知，导致原仓库被删除。...

Burp-Suite-Certified-Practitioner-Exam-Study

Burp Suite 认证从业者考试备考 这是我的学习笔记，涵盖了超过 110 个 PortSwigger Academy 实验室。 我使用这些实验室通过了 2023 年 Burp Suite 认证从业者 考试。 我的 BSCP 认证。 更多信息请访问 PortSwigger Academy 获取最新学习资料。 扫描 - 枚举 内容发现 聚焦扫描 扫描非标准实体 立足点 - 阶段 1 内容发现 DOM-XSS XSS 跨站脚本 Web 缓存投毒 主机头 HTTP 请求走私 暴力破解 身份认证 权限提升 - 阶段 2 CSRF - 账户接管 密码重置 SQLi - SQL 注入 JWT...

PortSwigger-Web-Security-Academy

PortSwigger-Web-Security-Academy Los casos interesantes y m0r3 Con nu11secur1ty 😎 Informe de junio de 2022 Módulo JWT:...

Academy Learning Management System <5.9.1 - Cross-Site Scripting

Academy Learning Management System before 5.9.1 contains a cross-site scripting vulnerability via the Search parameter. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

Academy LMS 6.2 - SQL Injection

A vulnerability was found in Academy LMS 6.2. It has been rated as critical. Affected by this issue is some unknown functionality of the file /academy/tutor/filter of the component GET Parameter Handler. The manipulation of the argument pricemin/pricemax leads to sql injection. The attack may be...

Academy LMS 6.0 - Cross-Site Scripting

Creative Item Academy LMS 6.0 was discovered to contain a cross-site scripting XSS vulnerability through query parameter. id: CVE-2023-38964 info: name: Academy LMS 6.0 - Cross-Site Scripting author: ritikchaddha severity: medium description: | Creative Item Academy LMS 6.0 was discovered to...

CVE-2022-47131

CVE-2022-47131 Academy LMS history.pushState'', '', '/'...

CVE-2022-47130

CVE-2022-47130 Academy LMS history.pushState'', '', '/'...

CVE-2022-29380

CVE-2022-29380 CVE-2022-29380 root@kitploit: Date: 25/05/2022 Author: OpenXP Team Software: Academy LMS Version: Academy LMS = v4.3 Type: Cross-Site Scripting OWASP TOP 10: A03:2021-Injection CWE: CWE-79 Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' References...

CVE-2025-15521

CVE-2025-15521 Academy LMS – WordPress LMS Plugin for Complete eLearning Solution（WordPress 学习管理系统插件）在所有版本中（包括 3.5.0）存在通过账户接管进行权限提升的漏洞。 root@kitploit: | | | | || | | | || | | | | | | | --| | | || | | | | ||| || | | || | ||/|| ||||| |||||| 📡 关注 @KNxploited — 第一时间获取 CVE 披露和可用的利用工具。 这是什么...

EmbedPayloadInPng

EmbedPayloadInPng 通过将载荷拆分到多个 IDAT 区块中，将载荷嵌入 PNG 文件。每个区块使用 RC4 加密算法，以各自的 16 字节密钥单独加密。 快速链接 Maldev Academy 主页 Maldev Academy 课程大纲 Maldev Academy 价格 实现 本仓库包含两种实现： EmbedPayloadInPng.py - 用于将输入载荷嵌入指定 PNG 文件的 Python 脚本。 FetchPayloadFromPng - 从 EmbedPayloadInPng.py 输出的 PNG 文件中提取载荷，并使用...

CVE-2022-38553

CVE-2022-38553 CROSS SITE SCRIPTING XSS EN "ACADEMY LEARNING MANAGEMENT SYSTEM" VIDEO POC:...

CVE-2022-47132

CVE-2022-47132 Academy LMS history.pushState'', '', '/'...

CVE-2026-16563

The Academy LMS WordPress plugin before 3.8.3 does not verify course enrollment or lesson publication status when returning a single lesson through its REST API, allowing users with a self-service student Subscriber-level account to disclose the content of arbitrary lessons, including lessons of...

CVE-2026-16563

The Academy LMS WordPress plugin before 3.8.3 does not verify course enrollment or lesson publication status when returning a single lesson through its REST API, allowing users with a self-service student Subscriber-level account to disclose the content of arbitrary lessons, including lessons of...

CVE-2026-16563 Academy LMS < 3.8.3 - Subscriber+ Arbitrary Lesson Content Disclosure via lessons REST Endpoint

The Academy LMS WordPress plugin before 3.8.3 does not verify course enrollment or lesson publication status when returning a single lesson through its REST API, allowing users with a self-service student Subscriber-level account to disclose the content of arbitrary lessons, including lessons of...

CVE-2026-16563

Affected software & version: Academy LMS WordPress plugin, prior to 3.8.3. Vulnerability: REST API used to fetch a single lesson does not verify course enrollment or lesson publication status. Impact: Subscribers (self-service student level) can disclose content of arbitrary lessons, including pa...

CVE-2026-12376

The Academy LMS WordPress plugin through 3.8.2 does not restrict access to quiz attempt records to their owner, allowing any authenticated user with subscriber-level access and above enrolled in any single course to read every user's quiz attempts across the whole site, including personal data su...

CVE-2026-12376

The Academy LMS WordPress plugin through 3.8.2 does not restrict access to quiz attempt records to their owner, allowing any authenticated user with subscriber-level access and above enrolled in any single course to read every user's quiz attempts across the whole site, including personal data su...

EUVD-2026-51435

The Academy LMS WordPress plugin through 3.8.2 does not restrict access to quiz attempt records to their owner, allowing any authenticated user with subscriber-level access and above enrolled in any single course to read every user's quiz attempts across the whole site, including personal data su...