Chamilo LMS SQL Injection Vulnerability (CNVD-2021-95221)

Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, remote training, and online question answering. chamilo LMS is vulnerable to a SQL injection vulnerability that originates in the main...

Chamilo LMS Cross-Site Scripting Vulnerability (CNVD-2021-95223)

Chamilo LMS is an open source online learning and collaboration system from the Chamilo Association. The system supports the creation of instructional content, remote training, and online question answering, etc. A cross-site scripting vulnerability exists in Chamilo LMS, which stems from a...

Deserialization Vulnerability in Adobe Connect Untrusted Data

Adobe Connect is a suite of software for remote training, web conferencing, presentations and desktop sharing. A deserialization of untrusted data vulnerability exists in Adobe Connect 11.2.2 and earlier versions. An attacker could exploit this vulnerability to execute arbitrary code...

Adobe Connect Cross-Site Scripting Vulnerability (CNVD-2021-101533)

Adobe Connect is a suite of software for remote training, web conferencing, presentations and desktop sharing. A reflected cross-site scripting vulnerability exists in Adobe Connect 11.2.2 and earlier versions. An attacker could exploit this vulnerability to execute arbitrary code...

Housemates. The new Red Team?

You have the VPN set up, you have 2FA, you have a good enforced password policy, firewalls are in place, you even managed to squeeze in some remote training to make employees more aware of potential phishing. You stop, breathe a sigh of relief, and then think… I've no idea who my employees live...