Typo3 CMS Site Crawler 6.1.2 Database Disclosure

Exploit Title : Typo3 CMS Site Crawler Extension 6.1.2 Database Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 02/01/2019 Vendor Homepage : typo3.org Software Download Link : extensions.typo3.org/extension/download/crawler/6.1.2/zip/ Tested On : Window...

Typo3 CMS YAG Themepack jQuery 1.3.2 Database Disclosure

Exploit Title : Typo3 CMS YAG Themepack jQuery Extension 1.3.2 Database Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 02/01/2019 Vendor Homepage : typo3.org yag-gallery.de Software Download Link :...

Typo3 CMS Static Info Tables 6.7.3 Database Disclosure

Exploit Title : Typo3 CMS Static Info Tables Extension 6.7.3 Database Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 02/01/2019 Vendor Homepage : typo3.org - extensions.typo3.org/extension/staticinfotables/ Software Download Link :...

Typo3 CMS twwc_pages 8.7.x Database Disclosure

Exploit Title : Typo3 CMS twwcpages Extension 8.7.x Database Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 02/01/2019 Vendor Homepage : typo3.org Software Download Link : gosign.de/typo3-extension/twwcpages/ Tested On : Windows and Linux Category :...

SUSE SLED15 / SLES15 Security Update : xen (SUSE-SU-2018:1981-1)

This update for xen fixes the following issues: Security issues fixed : - CVE-2018-3665: Fix Lazy FP Save/Restore issue XSA-267 bsc1095242. - CVE-2018-12891: Fix possible Denial of Service DoS via certain PV MMU operations that affect the entire host XSA-264 bsc1097521. - CVE-2018-12892: Fix libx...

Typo3 CMS pw_highslide_gallery 0.3.1 Database Disclosure

Exploit Title : Typo3 CMS pwhighslidegallery Extension 0.3.1 Database Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 02/01/2019 Vendor Homepage : typo3.org Software Download Link : extensions.typo3.org/extension/download/pwhighslidegallery/0.3.1/zip/...

Drupal 7 CivicRM 5.8.2 Database Disclosure

Exploit Title : Drupal 7 CivicRM Modules 5.8.2 Database Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 24/12/2018 Vendor Homepage : drupal.org - civicrm.org Software Download Link : download.civicrm.org/civicrm-5.8.2-drupal.tar.gz +...

PrestaShop PM_ModalCart 1.6.1.4 Database Disclosure

Exploit Title : PrestaShop PMModalCart 1.6.1.4 Database Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 24/12/2018 Vendor Homepage : prestashop.com Software Download Link : addons.prestashop.com/ru/pop-up/2438-modal-cart-3.html +...

WordPress cvp-irontec 4.8.3 Shell Upload

Exploit Title : WordPress cvp-irontec Themes 4.8.3 Remote Shell Upload Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 22/12/2018 Vendor Homepage : wordpress.org Software Download Link : N/A Tested On : Windows and Linux Category : WebApps Version...

PrestaShop FacebookPsConnect 1.6.1.4 Database Disclosure

Exploit Title : PrestaShop FacebookPsConnect Modules 1.6.1.4 Database Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 24/12/2018 Vendor Homepage : prestashop.com businesstech.fr Software Download Link : modulebazaar.com/prestashop-facebook-connect.html ...

PrestaShop PM_AdvancedSearch4 1.6.1.18 Database Disclosure

Exploit Title : PrestaShop PMAdvancedSearch4 Modules 1.6.1.18 Database Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 24/12/2018 Vendor Homepage : prestashop.com Software Download Link :...

PrestaShop Google GSnippetsReviews 1.6.1.4 Database Disclosure

Exploit Title : PrestaShop Google GSnippetsReviews Modules 1.6.1.4 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 24/12/2018 Vendor Homepage : prestashop.com Software Download Link :...

PrestaShop yllyaidechantier 1.4.9.0 Database Disclosure

Exploit Title : PrestaShop yllyaidechantier Modules 1.4.9.0 Database Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 24/12/2018 Vendor Homepage : prestashop.com Software Download Link : N/A Tested On : Windows and Linux Category : WebApps Version...

PrestaShop PM_AdvancedTopMenu 1.4.6.2 Database Disclosure / SQL Injection

Exploit Title : PrestaShop PMAdvancedTopMenu 1.4.6.2 Database Disclosure and SQL Injection Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 24/12/2018 Vendor Homepage : prestashop.com Software Download Link :...

WordPress WP-Ajax-Form-Pro 5.0.2 Shell Upload

Exploit Title : WordPress WP-Ajax-Form-Pro Plugins 5.0.2 Remote Shell Upload Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 22/12/2018 Vendor Homepage : wordpress.org ajaxformpro.com Software Download Link : ajaxformpro.com Software Script Owner and...

WordPress Cvp-Adegrontec 4.8.3 Shell Upload

Exploit Title : WordPress Cvp-Adegrontec Themes 4.8.3 Remote Shell Upload Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 22/12/2018 Vendor Homepage : wordpress.org Software Download Link : N/A Tested On : Windows and Linux Category : WebApps Version...

WordPress Share-Buttons 4.9.9 Shell Upload

Exploit Title : WordPress Share-Buttons Plugins 4.9.9 Remote Shell Upload Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 22/12/2018 Vendor Homepage : wordpress.org sbuttons.ru Software Download Link : atwebresults.com/phpajaximageupload/ +...

JVN#13199224: PgpoolAdmin fails to restrict access permissions

PgpoolAdmin provided by PgPool Global Development Group fails to restrict access permissions CWE-264. Impact A remote attacker may bypass the login authentication and obtain the administrative privilege of the PostgreSQL database. Solution Update the Software Update to the latest version accordin...

WordPress Sem-Wysiwyg 1.0 Shell Upload

Exploit Title : WordPress Sem-Wysiwyg Plugins 1.0 Remote Shell Upload Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 20/12/2018 Vendor Homepage : wordpress.org Software Download Link : N/A Tested On : Windows and Linux Category : WebApps Version...

WordPress FCKEditor-For-Wordpress-Plugin 3.3.1 Shell Upload

Exploit Title : WordPress FCKEditor-For-Wordpress-Plugin 3.3.1 Remote Shell Upload Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 20/12/2018 Vendor Homepage : wordpress.org/support/plugin/fckeditor-for-wordpress-plugin Software Download Link :...