America's Army Security Vulnerabilities

Joomla SpiderCalendar 3.2.17 SQL Injection

...

Zarr Software Warwickshire 1.x Open Redirection

...

AsureForce Time 12.0 Open Redirection

...

Joomla Furniture Virtuemart Templates 1.5 SQL Injection

...

Joomla Contact Enhanced 3.9.2 SQL Injection

...

Joomla RD e-Tickets TicketMasterExt 3.5.7 SQL Injection

...

Joomla Responsive Grid For Articles Grid 3.4.5 SQL Injection

...

Joomla Matukio Events 7.0.15 SQL Injection

...

MyBB 1.6.x ChangUonDyU Chatbox 3.6.0 Cross Site Scripting

...

Web Wiz Forums 12.01 Database Disclosure

...

MeteoTemplate 17.1 Nectarine windDirection 2.2 Open Redirection

...

Joomla FlexiContent 3.2.1.15 SQL Injection

...

MeteoTemplate 17.1 Nectarine Deviations Open Redirection

...

MeteoTemplate 17.1 Nectarine stationExtremes 2.0 Open Redirection

...

Joomla Geommunity3es 1.4 SQL Injection

...

Joomla JM Car Classifieds CarAgent Templates 3.8.12 SQL Injection

...

Joomla BookingCalendarForJoomla 3.4.0 SQL Injection

...

The Advanced Persistent Threat Files: APT1

We've heard a lot about Advanced Persistent Threats (APTs) over the past few years. As a refresher, APTs are prolonged, aimed attacks on specific targets with the intention to compromise their systems and gain information from or about that target. While the targets may be anyone or anything—a...

HanYazilim Paper Submission System .NET 1.0 Shell Upload

...

WordPress Village 5.0 CSRF / Backdoor / SQL Injection

...

Drupal Pubdlcnt 7.x-1.2 Open Redirection

...

Typo3 CMS Modern Guestbook tx_veguestbook_pi1 3.3.0 SQL Injection

...

Joomla AdsManager 3.2.0 CSRF / Database Disclosure / SQL Injection

...

Joomla Attachments 3.2.6 Shell Upload

...

Joomla JWallPapers 2.0.1 Cross Site Request Forgery / Shell Upload

...

Typo3 CMS Realty Manager tx_realty_pi1 2.0.0 Database Disclosure / SQL Injection

...

Typo3 CMS Shop System tt_products 2.9.4 SQL Injection

...

Typo3 CMS BrowserMaps Leaflet Tutorial tx_browser_pi1 8.0.39 SQL Injection

...

Typo3 CMS T3 EasyEvent tx_easyevent_pi1 0.37.3 SQL Injection

...

Typo3 Calendar Base tx_pxkalender_pi1 2.0.0 Database Disclosure / SQL Injection

...

Typo3 CMS Commerce DAM connector tx_commerce_pi1 0.1.0 SQL Injection

...

Kali Linux 2019.1 Released — Operating System For Hackers

Wohooo! Great news for hackers and penetration testers. Offensive Security has just released Kali Linux 2019.1, the first 2019 version of its Swiss army knife for cybersecurity professionals. The latest version of Kali Linux operating system includes kernel up to version 4.19.13 and patches...

Critical OkCupid Flaw Exposed Daters to App Takeovers

A critical flaw in the OkCupid app has been found that could allow a bad actor to steal credentials, launch man-in-the-middle attacks or completely compromise the victim’s application. This is separate from the OKCupid account-takeover incident reported earlier in the week, but it does fit the...

ph7CMS Social Dating Community 14.8 Database Configuration Disclosure

...

phpMyVisites CNTNT Templates 2.4 SQL Injection

...

Zend Framework ZF1 1.x Database Configuration Disclosure

...

Joomla DT Register 4.0.3 SQL Injection

...

Zend Framework 1.11.11 Database Configuration Disclosure

...

BizPotential EasyWebTime 8.6.2 Bypass / SQL Injection

...

Joomla LightGallery 1.2.1 SQL Injection

...

Joomla EasyBookReloaded 3.3.2 SQL Injection

...

Joomla VirtueMart 3.4.1 SQL Injection

...

TinyMCE JBimages 3.x JustBoilMe Arbitrary File Upload

...

F3-CMS FatFreeFramework 0.0.1 Database Disclosure

...

Slims CMS Senayan Library Management System 7.0 Shell Upload

...

WordPress WP-JS-External-Link-Info 2.2.0 Open Redirection

...

Joomla OSMap 4.2.19 Database Disclosure / SQL Injection

...

Joomla PrayerCenter 3.0.4 Database Disclosure / SQL Injection

...

ZRECore 1.3.1 Database Configuration Disclosure

...

WordPress Jssor-Slider 3.1.24 Cross Site Request Forgery / File Upload

...