4250 matches found
The Internet did my homework
By Jaeson Schultz and Matt Valites. As students return to school for in-person and virtual learning, Cisco Talos discovered an increase in DNS requests coming into Umbrella resolving domains we classify as "academic fraud." Data from Pew Research on back-to-school dates aligns with the growth we...
berlinschoolofcoffee.de Cross Site Scripting vulnerability OBB-1348307
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
California Elementary Kids Kicked Off Online Learning by Ransomware
As students head back to the classroom, the spate of ransomware attacks against schools is continuing. The latest is a strike against a California school district that closed down remote learning for 6,000 elementary school students, according to city officials. The cyberattack, against the Newha...
Ransomware And Zoom-Bombing: Cyberattacks Disrupt Back-to-School Plans
UPDATE A slew of ransomware attacks and other cyberthreats have plagued back-to-school plans — as if dealing with the pandemic weren’t stressful enough for administrators. Just this week, attacks in Hartford, Conn. and Clark County, Nev. forced public schools to postpone the first day of school, ...
clatskaniehigh.or.ch.schoolinsites.com Cross Site Scripting vulnerability OBB-1311276
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
troyhsalumni.com Cross Site Scripting vulnerability OBB-1308677
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
A Florida Teen Allegedly Shut Down School With a DDoS Attack
Plus: Predictive policing taken even farther, Amazon surveillance of private Facebook groups, and more of the week’s top security news...
OS4Ed openSIS login SQL injection vulnerability
Summary An exploitable SQL injection vulnerability exists in the login functionality of OS4Ed openSIS 7.3. A specially crafted HTTP request can lead to SQL injection. An attacker can send an HTTP request to trigger this vulnerability. Tested Versions OS4Ed openSIS 7.3 Product URLs...
OS4Ed openSIS CheckDuplicateStudent.php page SQL injection vulnerability
Talos Vulnerability Report TALOS-2020-1072 OS4Ed openSIS CheckDuplicateStudent.php page SQL injection vulnerability August 31, 2020 CVE Number CVE-2020-6117,CVE-2020-6119,CVE-2020-6121,CVE-2020-6118,CVE-2020-6120,CVE-2020-6122 SUMMARY Multiple exploitable SQL injection vulnerabilities exist in th...
Bumblebee Online School System V5.0.4 Exists Arbitrary File Upload Vulnerability
Bumblebee Online School System is an open source video management system for small and medium-sized enterprises SMEs using the excellent domestic open source framework THinkPHP, based on PHP+MySQL development and B/S architecture. Hornet Online School System V5.0.4 exists arbitrary file upload...
durangohighschool.net Improper Access Control vulnerability OBB-1270987
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
fairfield.bristol.sch.uk Cross Site Scripting vulnerability OBB-1266161
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
louisa-muscatine.k12.ia.us Improper Access Control vulnerability OBB-1257968
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
vancouverschoolsports.ca Cross Site Scripting vulnerability OBB-1248828
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Shenzhen RuiTao Information Technology Co., Ltd. RuiTao Education Cloud Resource Management Platform Has Logic Flaw Vulnerability
Ltd. was founded in 2003, headquartered in Shenzhen Nanshan District National Science and Technology Park, RuiTao puts forward the new concept of "scene recording and broadcasting", so that the recording and broadcasting into the wireless portable era. Shenzhen RuiTao Information Technology Co.,...
A week in security (July 6 – 12)
Last week on Malwarebytes Labs, we took an in-depth look at card skimmers targeting ASP sites, we released another episode of Lock and Code exploring the Internet of Things, and we dug into a Mac mystery. We also examined some pre-installed malware, and put out a threat spotlight on some customiz...
The Children's Internet Protection Act (CIPA)
What Is CIPA? Enacted in 2000 by the United States Congress, the Children's Internet Protection Act CIPA limits children's exposure to explicit internet material such as obscene content. CIPA mandates that K-12 schools and public libraries must deploy technologies that filter this type of content...
manchesterwineschool.com Cross Site Scripting vulnerability OBB-1219643
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
S-CMS School Building System aj***.php suffers from SQL Injection Vulnerability
S-CMS school station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS school website builder system aj.php SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database...
Command Execution Vulnerability in the Single-Institution Online School System of Hefei Qifan Network Technology Co.
Hefei Qifan Network Technology Co., Ltd. is engaged in website construction, website optimization, web hosting, domain name registration and other network services. Hefei Qifan Network Technology Co., Ltd. single-agency online school system there is a command execution vulnerability, attackers ca...