PT-2019-18972

Name of the Vulnerable Software and Affected Versions SchoolCMS version 2.3.1 Description An issue was discovered that allows for an XSS vulnerability. The vulnerability can be exploited via the index.php endpoint with specific parameters, including a=Index, c=Channel, m=Home, and id set to a...

This Week in Security News

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back...

Tunneling C&C Over DNS: dnscat2

This tool is designed to create a command-and-control C&C channel over the DNS protocol, which is an effective tunnel out of almost every network. dnscat2 comes in two parts: the client and the server. The client is designed to be run on a compromised machine. It’s written in C and has the minimu...