11 matches found
ls-poc
CVE-2026-30368 概念実証コード !IMPORTANT これはパッチ適用済みであり、現在は認証情報が必要です。回避策を使用して自分自身に対して操作を実行してください。 はじめに CVE-2026-30368 により、攻撃者は Lightspeed Classroom 管理の脆弱な認証の欠陥を介して生徒のデバイスを制御できます。 この POC（poc.js）は、LS Classroom 拡張機能のサービスワーカーをグローバルコンテキストで実行します。ワーカーは一部の機能で classroom.wasm も実行します。wasm-loader.js...
CVE-2026-30368
A client-side authorization flaw in Lightspeed Classroom v5.1.2.1763770643 allows unauthenticated attackers to impersonate users by bypassing integrity checks and abusing client-generated authorization tokens, leading to unauthorized control and monitoring of student devices...
CVE-2026-30368
A client-side authorization flaw in Lightspeed Systems Classroom v5.1.2.1763770643 allows unauthenticated attackers to impersonate users by bypassing integrity checks and abusing client-generated authorization tokens, leading to unauthorized control and monitoring of student devices...
CVE-2026-30368
A client-side authorization flaw in Lightspeed Systems Classroom v5.1.2.1763770643 allows unauthenticated attackers to impersonate users by bypassing integrity checks and abusing client-generated authorization tokens, leading to unauthorized control and monitoring of student devices...
Lightspeed Classroom 安全漏洞
Lightspeed Classroom is a teaching management platform developed by Lightspeed in the United States, used for classroom device management and student behavior monitoring. Version 5.1.2.1763770643 of Lightspeed Classroom contains a security vulnerability. This vulnerability stems from a client...
CVE-2026-30368
A client-side authorization flaw in Lightspeed Systems Classroom v5.1.2.1763770643 allows unauthenticated attackers to impersonate users by bypassing integrity checks and abusing client-generated authorization tokens, leading to unauthorized control and monitoring of student devices...
CVE-2026-30368
CVE-2026-30368 concerns Lightspeed Classroom (v5.1.2.1763770643). A client‑side authorization flaw allows unauthenticated attackers to impersonate users by bypassing integrity checks and abusing client‑generated authorization tokens, enabling unauthorized control and monitoring of student devices...
CVE-2026-30368
A client-side authorization flaw in Lightspeed Classroom v5.1.2.1763770643 allows unauthenticated attackers to impersonate users by bypassing integrity checks and abusing client-generated authorization tokens, leading to unauthorized control and monitoring of student devices...
PT-2026-35025
Name of the Vulnerable Software and Affected Versions Lightspeed Classroom version 5.1.2.1763770643 Description A client-side authorization flaw allows unauthenticated attackers to impersonate users. This is achieved by bypassing integrity checks and abusing client-generated authorization tokens,...
EUVD-2026-25567
A client-side authorization flaw in Lightspeed Classroom v5.1.2.1763770643 allows unauthenticated attackers to impersonate users by bypassing integrity checks and abusing client-generated authorization tokens, leading to unauthorized control and monitoring of student devices...
