Logic Flaw Vulnerability in Large Practice Series Instructional Management System (CNVD-2021-21598)

Kok Jin Information Technology Co., Ltd. is a domestic educational software and informationization service provider. A logic flaw vulnerability exists in the Great Practice Series Teaching Management System, which can be exploited by attackers to obtain sensitive information...

Exploit for OS Command Injection in Systeminformation

CVE-2021-21315-systeminformation This is Proof of Concept for...

File Upload Vulnerability in the Cloud Platform of Teaching Video Application of Guangzhou Aoweiya Electronic Technology Co.

Teaching video application cloud platform is based on the background of the current educational video resources construction and user demand research, developed to adapt to the development of the times and meet the needs of the school, with the effectiveness, multi-functional, distinctive feature...

Logic flaw vulnerability in Kok Jin Practice Series teaching management system

Kok Jin Information Technology Limited is an educational software and information technology service provider. A logic flaw vulnerability exists in the Kok Jin Practice Series Teaching Management System, which can be exploited by attackers to obtain sensitive information...

DDoS attacks in Q4 2020

News overview Cybercriminals are constantly on the lookout for means and methods to make attacks more destructive. In Q4 2020, Citrix ADC application delivery controller devices became one such tool, when perpetrators abused their DTLS interface. The DTLS Datagram Transport Layer Security protoco...

ShellShockHunter - It's A Simple Tool For Test Vulnerability Shellshock

It's a simple tool for test vulnerability shellshock Autor: MrCl0wn Blog: http://blog.mrcl0wn.com GitHub: https://github.com/MrCl0wnLab Twitter: https://twitter.com/MrCl0wnLab Email: mrcl0wnlab@\gmail.com Shellshock software bug Shellshock, also known as Bashdoor, is a family of security bugs in...

GitLab: Change project visibility to a restricted option

Summary When a GitLab administrator on gitlab.com or a private instance has restricted a project visibility option, the project visibility can still be changed to that option. This can be done using the API route. The same applies to groups. They can also be set to for example internal on the...

Exploit for CVE-2020-14644

It is an offensive tool for WebLogic. The repository contains a basic proof-of-concept PoC and exploit script for WebLogic, with the goal of creating a unified detection and exploitation tool. The script, named weblogicpoc.py, uses the T3 protocol to connect to a WebLogic server and exploit...

Exploit for Improperly Implemented Security Check for Standard in Thekelleys Dnsmasq

dnspooq DNSpooq PoC - dnsmasq cache poisoning CVE-2020-25686,...

New Educational Video Series for CISOs with Small Security Teams

Cybersecurity is hard. For a CISO that faces the cyber threat landscape with a small security team, the challenge is compounded. Compared to CISOs at large enterprises, CISOs small to medium-sized enterprises SMEs have smaller teams with less expertise, smaller budgets for technology and outside...

Tencent Penguin Tutoring PC version suffers from DLL hijacking vulnerability (CNVD-2021-05483)

Tencent Penguin Tutoring for PC is an educational software, is a tutoring application launched by Tencent for primary and secondary school students to learn. Tencent Penguin Tutoring PC version of the existence of DLL hijacking vulnerability, attackers can use this vulnerability to obtain control...

Tencent Penguin Tutoring PC version suffers from DLL hijacking vulnerability

Tencent Penguin Tutoring for PC is an educational software, is a tutoring application launched by Tencent for primary and secondary school students to learn. Tencent Penguin Tutoring PC version of the existence of DLL hijacking vulnerability, attackers can use this vulnerability to obtain control...

Tencent Penguin Tutoring PC version suffers from DLL hijacking vulnerability (CNVD-2021-05482)

Tencent Penguin Tutoring for PC is an educational software, is a tutoring application launched by Tencent for primary and secondary school students to learn. Tencent Penguin Tutoring PC version of the existence of DLL hijacking vulnerability, attackers can use this vulnerability to obtain control...

Tencent Penguin Tutoring PC version suffers from DLL hijacking vulnerability (CNVD-2021-05485)

Tencent Penguin Tutoring for PC is an educational software, is a tutoring application launched by Tencent for primary and secondary school students to learn. Tencent Penguin Tutoring PC version of the existence of DLL hijacking vulnerability, attackers can use this vulnerability to obtain control...

vulhub_v2

It is an offensive tool for web application security training. The repository contains a collection of vulnerable Docker environments for web application security training. The tool is designed to be easy to use, requiring only two simple commands to set up a vulnerable environment. The tool is n...

SQL Injection Vulnerability in CSC VIPExam Exam Study Resources Database

Zhongke VIPExam Exam Learning Resources Database is a set of educational resources database integrating the functions of daily study, review and preparation for exams, online paperless exams and so on. A SQL injection vulnerability exists in the ZK VIPExam Exam Learning Resources Database. An...

How to Increase Your Security Posture with Fewer Resources

With the number of COVID-19 cases increasing, another round of attacks is looming over schools and universities as they move into holiday break and prepare for the spring semester. According to a recent article the Wall Street Journal, there have been “nearly three dozen ransomware attacks agains...

vulhub

It is an offensive tool for Docker environments. The primary vulnerability is not specified, but the repository contains a collection of vulnerable Docker environments, including CouchDB, FFmpeg, Git, InfluxDB, and others. The environments are designed to be vulnerable to various attacks, allowin...

vulhub

This repository is an open-source collection of pre-built vulnerable docker environments, known as Vulhub. It is an offensive tool for testing and demonstrating vulnerabilities in various software and systems. The primary purpose of Vulhub is to provide a simple and easy-to-use platform for...

Education predictions 2021

Changes in the education system have been brewing for a long time, with digitalization as the main direction of this transformation. The breakthrough came this year as about 1.5 billion students were unable to attend school due to the COVID-19 pandemic. As a result, educational systems all over t...