A week in security (August 13 – August 19)

Last week on Malwarebytes Labs, we talked about how Process Doppelgänging meets Process Hollowing in the Osiris dropper, provided hints, tips, and links for a safer school year, gave a recap of Black Hat USA 2018, offered some tips for a secure content management system, highlighted a silly...

cactustefl.com XSS vulnerability

Open Bug Bounty ID: OBB-665627 Description| Value ---|--- Affected Website:| cactustefl.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cliftonwineschool.com XSS vulnerability

Open Bug Bounty ID: OBB-664459 Description| Value ---|--- Affected Website:| cliftonwineschool.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Back to school cybersecurity: hints, tips, and links for a safer school year

It's that time of year again when parents are slowly gearing up for a new school term. Some schools have a strict policy of only using their own pre-approved lab devices, while others allow students to bring their own devices. Whatever the plan, it's never too early to start thinking about some o...

Back-to-School Cyber Safety

As summer break ends, many students will return to school with mobile devices, such as smart phones, tablets, and laptops. Although these devices can help students with their schoolwork and stay in touch with family and friends, there are risks associated with using them. However, there are simpl...

school-we.ru XSS vulnerability

Open Bug Bounty ID: OBB-661687 Description| Value ---|--- Affected Website:| school-we.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

madisonps.sa.edu.au XSS vulnerability

Open Bug Bounty ID: OBB-660168 Description| Value ---|--- Affected Website:| madisonps.sa.edu.au Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

How the US Military Can Better Keep Hackers

Interesting commentary: The military is an impossible place for hackers thanks to antiquated career management, forced time away from technical positions, lack of mission, non-technical mid- and senior-level leadership, and staggering pay gaps, among other issues. It is possible the military need...

SQL Injection Vulnerability in the Search of Complaint and Suggestion Module of SMiCMS School Cluster System

State Micro CMS is one of the mainstream CMS systems in China, and is also the largest open source platform provider in the field of PHP in Southern China. State Micro CMS school cluster system complaints and suggestions module search at the existence of SQL injection vulnerabilities. Attackers c...

SQL injection vulnerability in the se***.php page of the Leader Mailbox module of the SMiCMS school group system

State Micro CMS is one of the mainstream CMS systems in China, and is also the largest open source platform provider in the field of PHP in Southern China. State Micro CMS school group system leadership mailbox module se.php page SQL injection vulnerability. Attackers can use the vulnerability to...

SQL Injection Vulnerability at My Forms in SMiCMS School Crowd System

State Micro CMS is one of the mainstream CMS systems in China, and is also the largest open source platform provider in the field of PHP in Southern China. State Micro CMS school station group system my form at the existence of SQL injection vulnerability . Attackers can use the vulnerability to...

SQL Injection Vulnerability in the Universal Forms Module of SMiCMS School Group System

State Micro CMS is one of the mainstream CMS systems in China, and is also the largest open source platform provider in the field of PHP in Southern China. State Micro CMS school station system universal form module SQL injection vulnerability. Attackers can use the vulnerability to obtain...

SQL Injection Vulnerability in the Message Board Module of Guowei CMS School Group System

State Micro CMS is one of the mainstream CMS systems in China, and is also the largest open source platform provider in the field of PHP in Southern China. State Micro CMS school cluster system message board module SQL injection vulnerabilities. Attackers can use the vulnerability to obtain...

SQL Injection Vulnerability in the Registration Module of Guowei CMS School Cluster System

State Micro CMS is one of the mainstream CMS systems in China, and is also the largest open source platform provider in the field of PHP in Southern China. State Micro CMS school station group system registration module SQL injection vulnerability. Attackers can use the vulnerability to obtain...

SQL Injection Vulnerability in the Search of the Opinion Collection Module of SMiCMS School CMS Group System

State Micro CMS is one of the mainstream CMS systems in China, and is also the largest open source platform provider in the field of PHP in Southern China. SQL injection vulnerability exists in the search of the opinion collection module of the State Micro CMS school cluster system. Attackers can...

SQL injection vulnerability in the li***.php page of the Leader Mailbox module of the SMiCMS School Group System

State Micro CMS is one of the mainstream CMS systems in China, and is also the largest open source platform provider in the field of PHP in Southern China. SQL injection vulnerability exists in the li.php page in the Leader Mailbox module of the State Micro CMS School CMS. An attacker can use the...

SQL Injection Vulnerability in Interview Module of State Micro CMS School Crowd System

State Micro CMS is one of the mainstream CMS systems in China, and is also the largest open source platform provider in the field of PHP in Southern China. State Micro CMS school station group system interview module SQL injection vulnerability. Attackers can use the vulnerability to obtain...

SQL Injection Vulnerability in the Messaging Module of SMiCMS School Group System

State Micro CMS is one of the mainstream CMS systems in China, and is also the largest open source platform provider in the field of PHP in Southern China. SQL injection vulnerability exists in the station message module of the State Micro CMS school station group system. Attackers can use the...

lac-school.com XSS vulnerability

Open Bug Bounty ID: OBB-653829 Description| Value ---|--- Affected Website:| lac-school.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

kentuckyhorseshoeingschool.vfao.com XSS vulnerability

Open Bug Bounty ID: OBB-652499 Description| Value ---|--- Affected Website:| kentuckyhorseshoeingschool.vfao.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...