WebConnection / Toto / Tides Cross Site Scripting

Exploit Title : WebConnection Cross-Site Scripting Vulnerability Author : IrIsT.Ir Discovered By : Am!r Home : http://IrIsT.Ir/forum Software Link : http://www.webconnection.com Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : intext:"Site...

School CMS Persistent XSS Vulnerability

Exploit for php platform in category web applications Title: SchoolCMS Persistant XSS. Date: 03/12/12 Author: VipVince Vendor: www.poweritschools.com Google Dork: /oldcore/cal/eventform.php Tested on: Windows. This is a Persistant XSS used in the software by many schools. About 225 results 0.21...

Student hacked into school's computer to obtain a girl's details

Matthew Higgins, now 20 and a university student, hacked into his school computer system to obtain a girl's details and then boasted on a hackers' forum. Matthew is son of a police inspector. Caernarfon Crown Court heard it was the case of a clever young man caught red-handed. The defendant says...

Stanford Cross Site Scripting

======================================================================= XSS on Stanford University - School of Medicine ======================================================================= Site: med.stanford.edu Date: 17/09/2012 Author: s4r4d0 Contact: s4r4d0atyahoodotcom Team: Fatal Error...

School Management System 1.0 Password / Backup Disclosure

Exploit Title: School Management System v 1.0 Remote Create SQL & Files Backup Date: 08/08/2012 Author: L0n3ly-H34rT Homepage: http://se3c.tk/ Contact: [email protected] Software Link: http://nigeriasocialforum.org/DSM1.0.zip Tested on: Linux/Windows P.O.C : 1- If you run this file in brows...

A school/government CMS default background account password-loophole warning-the black bar safety net

Author:Exp1oITs Not a Oday Today went to zone-h submitted to the Black page, find foreign a hacking the Black page all the Chinese gov site. So see, a lot of government and school station there is this problem, should not back door. However, the government so do not mind let us Heavenly good...

School hassle-free voting system The use of 0day-vulnerability warning-the black bar safety net

Actually, it's not a 0day. Just a thought., recently bored. Disregard on the A5 looked under and found a voting system, rough look, with people a lot, so it is down under, study, the machine is set up to see, the code basically is nothing vulnerability, is my art bad bar, and transfer station, th...

Upload Wap Remote File Upload Vulnerability

Exploit for php platform in category web applications -------------------------------------------------------------------+ Exploit Title : Upload Wap Remote File UpLoad Author : Dr.SiLnT HilL Version : all Dork : inurl:"/upload/jpeg.php" Tested on : Window xp , pc3 Site : Hack-School.com MaiL :...

35mm Slide Gallery v6.0 Remote File Upload Vulnerability

Exploit for php platform in category web applications Author : Dr.SiLnT HilL Title : 35mm Slide Gallery v6.0 Remote File Upload Data: 27-5-2012 Download : http://www.andymack.com/freescripts/35mmSlideGallery/35mmslidegallery6.zip Email : email protected Dork : allintext: "powered by 35mm Slide...

Elk Cloner

1982 The first example of Apple malware can be traced back thirty years ago to a high school classroom in Mount Lebanon, Penn. It was there that Richard Skrenta, a student at Mt. Lebanon High School coded Elk Cloner, a virus that was passed around via the now archaic Apple II platform. The virus ...

JVN#95378720: Multiple JustSystems products may insecurely load dynamic libraries

Multiple JustSystems products contain an issue with the DLL search path, which may lead to insecurely loading dynamic libraries. Impact Arbitrary code may be executed with the privileges of the running application. Solution Update the software Apply the appropriate update according to the...

JVN#09619876: Multiple JustSystems products vulnerable to buffer overflow

Multiple products provided by JustSystems Corporation contain a buffer overflow vulnerability due to improper handling of image files. Impact If this vulnerability is exploited, a system may be crashed or arbitrary code may be executed. Solution Update the Software Apply the appropriate update...

LA Times Profiles Cyber Defense Competition For Teens

The U.S. and other advanced nations face a drastic cyber security skills gap. Attacks from sophisticated and unsophisticated attackers are on the rise, even as more and more companies and government agencies move more of what they do online to Web based services and the cloud. Of course, the skil...

Want lunch? Palm it over

Fed up with using swipe cards and PINs for their students’ lunch payments, a school board district in Clearwater, Fla. recently partnered with microelectronic company Fujitsu to use palm vein readers for nearly half of their 102,000 students. Pinellas County School Board District spent $120,000 t...

Adam Shostack on Methods of Compromise, the New School and Learning

Dennis Fisher talks with Adam Shostack of Microsoft about the taxonomy he helped develop for classifying how PCs are compromised, what he would and wouldn’t change in The New School of Information Security and who he’s learned the most from. Podcast audio courtesy of sykboy65 Subscribe to the...

Site@School 2.4.10 SQL Injection & XSS vulnerabilities

Advisory: Site@School 2.4.10 SQL Injection & XSS vulnerabilities Advisory ID: SSCHADV2011-030 Author: Stefan Schurtz Affected Software: Successfully tested on Site@School 2.4.10 Vendor URL: http://sourceforge.net/projects/siteatschool/ Vendor Status: insecure and no longer maintained CVE-ID: -...

Site@School 2.4.10 Cross Site Scripting / SQL Injection

Advisory: Site@School 2.4.10 SQL Injection & XSS vulnerabilities Advisory ID: SSCHADV2011-030 Author: Stefan Schurtz Affected Software: Successfully tested on Site@School 2.4.10 Vendor URL: http://sourceforge.net/projects/siteatschool/ Vendor Status: insecure and no longer maintained CVE-ID: -...

Site@School 2.4.10 - '/index.php' Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/50195/info Site@School is prone to multiple SQL-injection and cross-site scripting vulnerabilities. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or...

Site@School 2.4.10 - index.php Cross-Site Scripting SQL Injection

Site@School 2.4.10 - index.php Cross-Site Scripting SQL Injection source: https://www.securityfocus.com/bid/50195/info Site@School is prone to multiple SQL-injection and cross-site scripting vulnerabilities. Exploiting these issues could allow an attacker to steal cookie-based authentication...

CF Image Hosting Script 1.3.82 File Disclosure

!/usr/bin/perl CF Image Hosting Script 1.3.82 File Disclosure Exploit Bugfounder and Exploitcoder: bd0rk Contact: www.sohcrew.school-of-hack.net eMail: bd0rkathackermail.com Affected-Software: CF Image Hosting Script 1.3.82 Vendor: http://www.phpkode.com Download:...