How We Accidentally Hacked the #1 University in Canada
How a MarkUs bug chain went from CSRF and zip slip to RCE.
Read write-up
Featured Writing
Security Research
View allMarkUs
Zip Slip / arbitrary file write
Critical 9.1
MarkUs
Stored XSS / instructor-context actions
High 8.0
Progress Kemp LoadMaster
Uninitialized memory / remote code execution
High 7.2
Security Research
How We Accidentally Hacked the #1 University in Canada
How a MarkUs bug chain went from CSRF and zip slip to RCE.