Khan Academy: Full Path Disclosure on [smarthistory.khanacademy.org]

Hello, I have found a full path disclosure on a website that runs a wordpress installation. There isn't much to explain about this bug, as it's pretty self explanatory. What an attack can do with this bug is identify the full path, and the user the site is running under. If the attacker finds a...

Khan Academy: https://www.khanacademy.org/login open-redirect

Hi, I found a bypass in the redirects : https://www.khanacademy.org/login?continue=http://www.olivierbeg.nl won't work. https://www.khanacademy.org/login?continue=http:/www.olivierbeg.nl will work :- Best regards, Olivier Beg...

Khan Academy: Dom based XSS https://www.khanacademy.org/

Hi. I found a XSS located here : https://www.khanacademy.org/profile/LOL/discussion/comments" Best regards, Olivier Beg...

Khan Academy: http://smarthistory.khanacademy.org/search-results.html XSS

Hi, When you go to http://smarthistory.khanacademy.org/search-results.html use firefox and search for " onclick="alert1 and after that click on the search bar a XSS will popup! Best regards, Olivier Beg...

China military to conduct training on digital warfare

As concerns are growing regarding Chinese hacking attacks, the country will undergo its first digital war games. Only two days after the U.S. has attributed cyber espionage attacks against U.S. government and business entities to the Chinese Government and Military, it was announced that the...

DoD Inspector General Calls Out Army CIO For Poor Mobile Device Security

The CIO of the U.S. Army failed to put in place a comprehensive security program capable of protecting data stored on commercial mobile devices such as iPhones and Androids, leaving sensitive information in key Army installations exposed. The Inspector General of the Department of Defense took th...

Hacker ruined Australian military security in 3 Minutes

Some 22,300 purported student and staff records held by the Australian Defence Force Academy were stolen and published online last month. A member of the Anonymous group, known as Darwinaire, is claiming responsibility for the theft. The systems were compromised in November, with UNSW notifying...

Hacker ruined Australian military security in 3 Minutes

Some 22,300 purported student and staff records held by the Australian Defence Force Academy were stolen and published online last month. A member of the Anonymous group, known as Darwinaire, is claiming responsibility for the theft. The systems were compromised in November, with UNSW notifying...

Scamming site taken down by Hackers

Scamming site taken down by Hackers When hundreds of kids were duped into taking courses to improve their grades with a promise of an ipod if they succeeded, many pressured their parents to help find the company called Advantage Point Academy https://www.advantagepoint.org/ a place to administer...

Chengdu Bureau Of Commerce SQL Injection

Title: ====== Chengdu Bureau of Commerce - SQL Injection Vulnerability Date: ===== 2012-04-23 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=312 VL-ID: ===== 312 Introduction: ============= May 20, by my bureau composed of 10 members, participated in by the Chinese...

Oracle Service Applications SQL Injection

Title: ====== Oracle Service Applications - SQL Injection Vulnerabilities Date: ===== 2012-04-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=478 VL-ID: ===== 478 Introduction: ============= Oracle Corporation NASDAQ: ORCL is an American multinational computer...

FAA US Academy SQL Injection

Title: ====== FAA US Academy AFS - Auth Bypass Vulnerability Date: ===== 2012-01-28 References: =========== http://vulnerability-lab.com/getcontent.php?id=171 VL-ID: ===== 171 Introduction: ============= This is a FAA computer system. FAA computer systems are provided for the processing of Offici...

FAA US Academy (AFS) - Auth Bypass Vulnerability

Document Title: =============== FAA US Academy AFS - Auth Bypass Vulnerability References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=171 Release Date: ============= 2012-01-27 Vulnerability Laboratory ID VL-ID: ==================================== 171 Common...

CN Academy of Governance NSA - Postgre SQL Injection

Document Title: =============== CN Academy of Governance NSA - Postgre SQL Injection References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=311 CNNVD ID: CNNVD-201111-474 Release Date: ============= 2011-11-25 Vulnerability Laboratory ID VL-ID:...

CN Academy of Governance NSA - Postgre SQL Injection

Document Title: =============== CN Academy of Governance NSA - Postgre SQL Injection References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=311 CNNVD ID: CNNVD-201111-474 Release Date: ============= 2011-11-25 Vulnerability Laboratory ID VL-ID:...

Facebook A+ Academy SQL Injection

Title: ====== Facebook A+ Academy - SQL Injection Vulnerability Date: ===== 2011-11-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=276 VL-ID: ===== 276 Introduction: ============= The application is currently included and viewable by all facebook users. The service ...

CaupoShop Pro (2.x < 3.70) Classic 3.01 - Local File Inclusion

CaupoShop Pro 2.x/ = 3.70 Local File Include Vulnerability ----------------------------------------------------------------------------------------- Vuln Softwares : CaupoShop Pro 2.x CaupoShop Classic 3.01 CaupoShop Pro 3.70 Discovered By : Rami Salama Contact : eng.ramisalamaatgmaildotcom Vendo...

CaupoShop Pro (2.x/ <= 3.70) Classic 3.01 Local File Include Vulnerability

Exploit for php platform in category web applications CaupoShop Pro 2.x/ = 3.70 Local File Include Vulnerability ----------------------------------------------------------------------------------------- Vuln Softwares : CaupoShop Pro 2.x CaupoShop Classic 3.01 CaupoShop Pro 3.70 Discovered By :...

Facebook content restrictions bypass Vulnerability

Facebook content restrictions bypass Vulnerability Blackhat Academy claims to have found a way to bypass content restrictions on links, as posted on their site and posts put on a user's public wall. Even Security Analysts claim that Facebook was notified of these vulnerabilities on July 31st, 201...

Facebook content restrictions bypass Vulnerability

Facebook content restrictions bypass Vulnerability Blackhat Academy claims to have found a way to bypass content restrictions on links, as posted on their site and posts put on a user's public wall. Even Security Analysts claim that Facebook was notified of these vulnerabilities on July 31st, 201...