Joomla! Component com_payplans 3.3.6 - SQL Injection

Joomla! Component compayplans 3.3.6 - SQL Injection Exploit Title : Joomla compayplans - SQL Injection Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/payplans Category: Webapps Tested on: Win Version: 3.3.6 Date: 2016/06/08 PoC: groupid Parameter...

Security update for MozillaFirefox, mozilla-nss (important)

This update to Mozilla Firefox 47 fixes the following issues boo983549: Security fixes: - CVE-2016-2815/CVE-2016-2818: Miscellaneous memory safety hazards boo983638 MFSA 2016-49 - CVE-2016-2819: Buffer overflow parsing HTML5 fragments boo983655 MFSA 2016-50 - CVE-2016-2821: Use-after-free deletin...

Joomla Maqma Helpdesk 4.2.3 Cross Site Scripting

Exploit Title : Joomla commaqmahelpdesk - XSS Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/maqma-helpdesk Category: Webapps Tested on: Win Date: 2016/06/09 Version : 4.2.3 PoC: Add Your Tiket sometimes you must login First in Message Te...

Joomla AvailCal 05 SQL Injection

Exploit Title : Joomla comavailcal - SQL Injection Exploit Author : Persian Hack Team Dork : inurl:index.php?option=comavailcal Vendor Homepage : https://github.com/lorelay90210/jpm-joomla-extensions/tree/master/availcal/availcal Category: Webapps Tested on: Win Version: 05 Date: 2016/06/08 PoC: ...

Joomla Easy Youtube Gallery SQLi Vulnerability

Joomla component Easy Youtube Gallery is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Joomla Easy Youtube Gallery 1.0.2 - SQL Injection Vulnerability

No description provided by source...

Adobe to issue Emergency Patch for Critical Flash Player Vulnerability

Adobe has been one of the favorite picks of the Hackers to mess with any systems devoid of any operating systems, as Flash Player is a front runner in all the browsers. Hackers have already been targeting Flash Player for long by exploiting known vulnerabilities roaming in the wild. Despite Adobe...

MyTube YouTube Playlist Maker - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application MyTube YouTube Playlist Maker published at the 'play' market has multiple vulnerabilities...

Get Subscribers - for YouTube! - Customized SSL, Redefined SSL Common Names verifier, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Get Subscribers - for YouTube! published at the 'play' market has multiple vulnerabilities...

My YouTube Playlist - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application My YouTube Playlist published at the 'play' market has multiple vulnerabilities...

Video for Android Wear&YouTube - Certificates or keys found, Dangerous filesystem permissions, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Video for Android Wear&YouTube published at the 'play' market has multiple vulnerabilities...

YouTube Creator Studio - External URLs, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application YouTube Creator Studio published at the 'play' market has multiple vulnerabilities...

Joomla Easy Youtube Gallery 1.0.2 SQL Injection

Exploit Title : Joomla Easy Youtube Gallery 1.0.2 SQL Injection Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/easy-youtube-gallery Google Dork : inurl:comeasyyoutubegallery mycategory Date: 2016/03/22 Version: 1.0.2 PoC: mycategory=SQL...

Uber: Self-XSS Vulnerability on Password Reset Form

Hello Security Team, I have found Third Security Vulnerability on your website :- https://partners.uber.com/ Vulnerability :-"XSS vulnerability on password reset time :" My Payload is this :- '" Following This Reproduce Steps : 1 send password reset link on your email id 2 open password reset lin...

Joomla! Component Easy Youtube Gallery 1.0.2 - SQL Injection

Exploit Title : Joomla Easy Youtube Gallery 1.0.2 SQL Injection Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/easy-youtube-gallery Google Dork : inurl:comeasyyoutubegallery mycategory Date: 2016/03/22 Version: 1.0.2 PoC: mycategory=SQL...

Joomla Easy YouTube Gallery 1.0.2 - SQL Injection

Exploit for php platform in category web applications Exploit Title : Joomla Easy Youtube Gallery 1.0.2 SQL Injection Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/easy-youtube-gallery Google Dork : inurl:comeasyyoutubegallery mycategory...

Joomla! Component Easy Youtube Gallery 1.0.2 - SQL Injection

Joomla! Component Easy Youtube Gallery 1.0.2 - SQL Injection Exploit Title : Joomla Easy Youtube Gallery 1.0.2 SQL Injection Vulnerability Exploit Author : Persian Hack Team Vendor Homepage : http://extensions.joomla.org/extension/easy-youtube-gallery Google Dork : inurl:comeasyyoutubegallery...

Anonymous claims they Hacked Donald Trump ...Really?

The 'Hacktivist' collective group Anonymous claimed to have leaked personal details of the controversial US presidential candidate Donald Trump, including his Mobile Phone Number and Social Security Number SSN. Donald Trump SSN: 086-38-5955 DOB: 06/14/1946 Phone Number: 212-832-2000 Cell/Mobile...

billiger-check.de XSS vulnerability

Vulnerable URL: http://www.billiger-check.de/youTube/upload/upload.php?shopName=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown...

openSUSE Security Update : MozillaFirefox (openSUSE-2016-6) (SLOTH)

This update to MozillaFirefox 43.0.3 fixes the following issues : - CVE-2015-7575: MD5 signatures accepted within TLS 1.2 ServerKeyExchange in server signature, in combination wit NSS 3.20.2 boo959888 Further fixes : - workaround Youtube user agent detection issue bmo1233970 - fix file download...