Louisiana Gov Declares Emergency After Rampant Cyberattacks Plague Schools

After a rash of public schools were hit with ransomware, Louisiana’s governor has declared a statewide state of emergency. School districts in the northern part of the state – including Monroe City, Morehouse Parish and Sabine Parish – have been affected. Monroe City, on its website, noted that i...

mail2.smartchoiceschools.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-898687 Security Researcher Gh05tPT Helped patch 6892 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

alabama.smartchoiceschools.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-898559 Security Researcher Gh05tPT Helped patch 6893 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting...

Vulnerability of the Data Management System of National Secondary Vocational Schools' Talent Cultivation Work Status due to Arbitrary Password Reset in the Backstage

Xinpengcheng is a high-tech enterprise specializing in vocational education informatization business. There is an arbitrary password reset vulnerability in the background of the National Secondary Vocational School Talent Cultivation Work Status Data Management System. An attacker can utilize thi...

A week in security (February 25 – March 3)

Last week, we delved into the realm of K-12 schools and security, explored the world of compromised websites and Golang bruteforcers, and examined the possible realms of pay for privacy. We also looked at identity management solutions, Google’s Universal Read Gadget, and did the deepest of dives...

inspirenolacharterschools.org XSS vulnerability

Open Bug Bounty ID: OBB-715357 Description| Value ---|--- Affected Website:| inspirenolacharterschools.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

highschool.riverviewschools.com XSS vulnerability

Open Bug Bounty ID: OBB-705595 Description| Value ---|--- Affected Website:| highschool.riverviewschools.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

wheelercountyschools.org XSS vulnerability

Open Bug Bounty ID: OBB-705530 Description| Value ---|--- Affected Website:| wheelercountyschools.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

magnoliapublicschools.org XSS vulnerability

Open Bug Bounty ID: OBB-705525 Description| Value ---|--- Affected Website:| magnoliapublicschools.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

msa1.magnoliapublicschools.org XSS vulnerability

Open Bug Bounty ID: OBB-705346 Description| Value ---|--- Affected Website:| msa1.magnoliapublicschools.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

onmedia.wyomingcityschools.org XSS vulnerability

Open Bug Bounty ID: OBB-696136 Description| Value ---|--- Affected Website:| onmedia.wyomingcityschools.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

meet.braziliansoccerschools.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-691347 Description| Value ---|--- Affected Website:| meet.braziliansoccerschools.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSS...

riding-schools.com XSS vulnerability

Open Bug Bounty ID: OBB-681828 Description| Value ---|--- Affected Website:| riding-schools.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

19-Year-Old Hacker Arrested Over Making Hoax School and Flight Bomb Threats

British police have arrested a 19-year-old teen who is an alleged member of Apophis Squad cybercriminal group responsible for making hoax bomb threats to thousands of schools and airlines; and DDoSing ProtonMail and Tutanota secure email services. George Duke-Cohan was arrested in his bedroom at...

jobs.washoeschools.net XSS vulnerability

Open Bug Bounty ID: OBB-648944 Description| Value ---|--- Affected Website:| jobs.washoeschools.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

cornwallhealthyschools.org XSS vulnerability

Open Bug Bounty ID: OBB-635668 Description| Value ---|--- Affected Website:| cornwallhealthyschools.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Schools Alert Management Script Arbitrary File Delete

Exploit Title: Schools Alert Management Script - Arbitrary File Deletion Date: 2018-06-07 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/schools-alert-management-system/ Category: Web Application Exploit Author: M3@Pandas Web:...

Schools Alert Management Script SQL Injection Vulnerability (CNVD-2018-11296)

PHP Scripts Mall Schools Alert Management Script is a school management system script by PHP Scripts Mall India. A SQL injection vulnerability exists in several cgi's in PHP Scripts Mall Schools Alert Management Script. A remote attacker can exploit this vulnerability by sending specially crafted...

Schools Alert Management Script - get_sec.php SQL Injection

Schools Alert Management Script - getsec.php SQL Injection Exploit Title: Schools Alert Management Script - 'getsec.php' SQL Injection Date: 2018-06-07 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/schools-alert-management-system/ Category:...

Schools Alert Management Script SQL Injection

Exploit Title: Schools Alert Management Script - SQL Injection Date: 2018-06-07 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/schools-alert-management-system/ Category: Web Application Exploit Author: M3@Pandas Web:...