Academy LMS 6.1 Cross Site Scripting / File Upload Vulnerabilities

Exploit Title: Academy LMS 6.1 - Arbitrary File Upload Exploit Author: CraCkEr Vendor: Creativeitem Vendor Homepage: https://academylms.net/ Software Link: https://demo.academylms.net/ Tested on: Windows 10 Pro Impact: Allows User to upload files to the web server CWE: CWE-79 - CWE-74 - CWE-707...

CVE-2019-25004

CVE-2019-25004 affects the Rust crate flatbuffers prior to 0.6.1. The root cause is an implementation of impl Follow for bool that allows arbitrary bytes to be reinterpreted as a bool, defeating soundness. This could enable a remote attacker to bypass security restrictions by sending specially cr...