5350 matches found
CVE-2018-18801
The BSEN Ordering software 1.0 has SQL Injection via student/index.php?view=view&id=SQL or index.php?q=single-item&id=SQL...
CVE-2018-18795: Improper Neutralization of Special Elements used in an SQL Command
School Event Management System 1.0 has SQL Injection via the student/index.php or event/index.php id parameter...
CVE-2018-18801: Improper Neutralization of Special Elements used in an SQL Command
The BSEN Ordering software 1.0 has SQL Injection via student/index.php?view=view&id=SQL or index.php?q=single-item&id=SQL...
PT-2018-14659
Name of the Vulnerable Software and Affected Versions School Event Management System version 1.0 Description The issue is related to SQL Injection, which can be exploited via the id parameter in the "student/index.php" or "event/index.php" API endpoints. Recommendations For School Event Managemen...
SWA SWA.JACAD SQL Injection Vulnerability
SWA SWA.JACAD is an academic management system. The system features academic management, financial management and a web portal. A SQL injection vulnerability exists in the /academico/aluno/esqueci-minha-senha/ page in SWA SWA.JACAD version 3.1.37 Build 024. A remote attacker can exploit this...
Malwarebytes is a champion of National Cybersecurity Awareness Month
October is here. For most of us in the US cybersecurity industry, it’s the month when we commemorate National Cybersecurity Awareness Month NCSAM. For those who are unfamiliar with this campaign, NCSAM generally aims at driving awareness for safe Internet use, whether you're a regular consumer or...
CVE-2018-17575
SWA SWA.JACAD 3.1.37 Build 024 has SQL Injection via the /academico/aluno/esqueci-minha-senha/ studentId parameter...
Arbitrary User Password Recovery Vulnerability in Smart Campus Platforms
Smart Campus Platform is a set of smart campus system developed by Guangdong ZhiNai Internet of Things Technology Co. The system involves a number of functional modules such as teaching scheduling, class transfer, class time statistics, teacher leave, student big data management platform,...
Linux/x86 - Reverse TCP (::FFFF:192.168.1.5:4444/TCP) Shell (/bin/sh) + Null-Free + IPv6 Shellcode (86 bytes)
Linux/x86 - Reverse TCP ::FFFF:192.168.1.5:4444/TCP Shell /bin/sh + Null-Free + IPv6 Shellcode 86 bytes. Shellcode exploit for Linuxx86 platform Title: Linux/x86 - Reverse TCP shell IPv6 + Null Free Shellcode Author: Kartik Durg Shellcode Length: 86 BYTES Student-ID: SLAE-1233 Note...
clydestudentliving.co.uk Improper Access Control vulnerability
Open Bug Bounty ID: OBB-635517 Description| Value ---|--- Affected Website:| clydestudentliving.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Other Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...
Unauthorised Arbitrary File Downloads
Moodle is vulnerable to unauthorised arbitrary file downloads. It is possible because any authorized student with access to portfolio forum caller class can change the download URL to download any files...
Unauthorised Downloads
Moodle is vulnerable to unauthorised downloads. It is possible because any authorized student with access to portfolio assignment caller class can change the download URL to download any files...
CVE-2018-1134
An issue was discovered in Moodle 3.x. Students who submitted assignments and exported them to portfolios can download any stored Moodle file by changing the download URL...
CVE-2018-1135
An issue was discovered in Moodle 3.x. Students who posted on forums and exported the posts to portfolios can download any stored Moodle file by changing the download URL...
iyfipgun.com XSS vulnerability
Open Bug Bounty ID: OBB-614767 Description| Value ---|--- Affected Website:| iyfipgun.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Engaging students in cybersecurity: a primer for educators
Give a man a fish and you feed him for a day; teach a man to fish and you feed him for a lifetime. Maimonides The education sector has had its share of breaches. And schools, like medical and retail institutions, continue to struggle when it comes to securing their highly-priced assets: student a...
4chan hackers tried changing voting results of NASA student challenge
By Waqas Apparently, 4chan hackers conducted the cyber attack to stop a This is a post from HackRead.com Read the original post: 4chan hackers tried changing voting results of NASA student challenge...
Linux/x86 Reverse TCP 127.1.1.1:5555 #Shellcode (73 Bytes)
/ Linux x86 Reverse TCP shellcode 127.1.1.1/5555 Shellcode Author: Anurag Srivastava Shellcode Length: 73 Student-ID: SLAE-1219 Note http://www.theanuragsrivastava.in/2018/04/reverse-tcp-shellcode-x86-slae.html reverse: file format elf32-i386 Disassembly of section .text: 08048060 : 8048060: 6a 6...
