CVE-2017-12759

CVE-2017-12759 affects Ynet Interactive’s SOA School Management 3.0. Connected documents confirm that the vulnerability arises from SQL Injection in the web application (demo.ynetinteractive.com/soa/), with impact described as remote code execution. The issue is associated with multiple sources (...

Executive hacked competitor’s website to steal students meal preferences

By Ryan De Souza Top Executive at Bay Area School Lunch Provider Arrested for Hacking into Competitor’s Website to Access Students Meal Preferences. Personal rivalry and competitiveness can compel people to get involved in all sorts of bizarre activities and the latest incident is clear proof of...

2 students arrested for disrupting school WiFi to skip exam

By Waqas Two 14-year old 9th graders have been arrested by the police for disrupting the WiFi system of their school, Secaucus High School, Hudson County in March. According to reports, the students used an especially designed app to make the connection so overloaded with traffic that it became...

A Go implementation of Poly1305 that makes sense

Poly1305 is a Message Authentication Code--a cryptographic primitive for authenticating a message with a shared secret key, like HMAC. Although its really a fraction of the complexity of e.g. elliptic curves, most of the implementations Ive read look decidedly like magic, mysteriously multiplying...

Multiple Reflective XSS Vulnerabilities in S-CMS School Building System PHP Version

S-CMS is a content management system CMS based on PHP and MySQL. A cross-site scripting vulnerability exists in S-CMS PHP version 1.0, which stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit this vulnerability to execute client-side code...

CyberAegis Aether Competition Team Reflects Bright Future for Young Women in STEM & Cybersecurity

I am always excited to get involved in conversations around getting more young women into STEM earlier. Recently, I was able to catch up with the members of the CyberAegis Aether team, an all-girls, middle school cybersecurity competition team. Here is what they had to say: Tell us a little bit...

Arbitrary Password Reset Vulnerability in Zhirui School Course Selection System

Zhirui school course selection system positioning school education development system, specialized for secondary schools, colleges and universities students online course selection, results query system, for the integrated campus information system. Zhi Rui School Selection System has an arbitrar...

SQL Injection Vulnerability in Zhirui School Course Selection System

Zhirui school course selection system positioning school education development system, specialized for secondary schools, colleges and universities students online course selection, results query system, for the integrated campus information system. Zhirui School Selection System suffers from SQL...

xss vulnerability in online school system

Online School System is an online education platform developed by Beijing IncuTime Technology Co. An xss vulnerability exists in the evaluation and modification of personal information of the online school system, which can be exploited by attackers to inject arbitrary Web script or HTML...

SQL Injection Vulnerability in Zhirui Elementary and Middle School Students' School Registration Information Management System

Zhirui Elementary and Middle School Students' School Registration Information Management System is an information system that collects students' basic information and reports it to the education administration department. SQL injection vulnerability exists in Zhirui Primary and Secondary School...

Arbitrary Password Change Vulnerability in Zhi Rui Elementary and Middle School Students' School Registration Information Management System

Zhirui Elementary and Middle School Students' School Registration Information Management System is an information system that collects students' basic information and reports it to the education administration department. There is an arbitrary password change vulnerability in Zhirui Elementary an...

Vulnerability Management at Tinkoff Fintech School

In the last three weeks, I participated in Tinkoff Fintech School - educational program for university students. Together with my colleagues, we prepared a three-month practical Information Security course: 1 lecture per week with tests and home tasks. Each lecture is given by a member of our...

SchoolCMS Arbitrary PHP Code Execution Vulnerability

SchoolCMS is an open source school teaching management system based on ThinkPHP framework. The system includes student management , grade management and teacher management . A security vulnerability exists in SchoolCMS version 2.3.1. An attacker can exploit this vulnerability to execute arbitrary...

SQL Injection Vulnerability in SchoolCMS v2.3.1 Us***.class File

SchoolCMS is a school teaching management system based on PHP+MySQL. A SQL injection vulnerability exists in the SchoolCMS v2.3.1Us.class file, which can be exploited by attackers to obtain sensitive information...

shs.yadkin.k12.nc.us XSS vulnerability

Open Bug Bounty ID: OBB-715627 Description| Value ---|--- Affected Website:| shs.yadkin.k12.nc.us Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

bleckley.k12.ga.us XSS vulnerability

Open Bug Bounty ID: OBB-715588 Description| Value ---|--- Affected Website:| bleckley.k12.ga.us Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidd...

wheeler.k12.hi.us XSS vulnerability

Open Bug Bounty ID: OBB-715560 Description| Value ---|--- Affected Website:| wheeler.k12.hi.us Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidde...

tmms.mcduffie.k12.ga.us XSS vulnerability

Open Bug Bounty ID: OBB-715548 Description| Value ---|--- Affected Website:| tmms.mcduffie.k12.ga.us Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

fruitvale.hemetusd.org XSS vulnerability

Open Bug Bounty ID: OBB-715523 Description| Value ---|--- Affected Website:| fruitvale.hemetusd.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

blandfordschool.org XSS vulnerability

Open Bug Bounty ID: OBB-715447 Description| Value ---|--- Affected Website:| blandfordschool.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...