Joomla RealEstateManager 4.2.0 SQL Injection

Title: Joomla RealEstateManager 4.2.0 - SQL injection Credit: Bilal KARDADOU Vendor: http://ordasoft.com/ URL: https://extensions.joomla.org/extensions/extension/vertical-markets/real-estate/realestatemanager/ Product: 'Joomla RealEstateManager 4.2.0' Developer: OrdaSoft Extension type: Plugin La...

Joomla! JEXTN Membership 3.1.0 SQL Injection

Title: Joomla! JEXTN Membership 3.1.0 - SQL injection Credit: Bilal KARDADOU Vendor: http://www.jextn.com URL: https://extensions.joomla.org/extensions/extension/e-commerce/membership-a-subscriptions/jextn-membership/ Product: 'Joomla! JEXTN Membership 3.1.0' Developer: jextn.com Last updated: Ja...

Joomla! JEXTN Groupbuy 4.0.0 Cross Site Scripting

Title: Joomla! JEXTN Groupbuy 4.0.0 - XSS Credit: Bilal KARDADOU Vendor: http://www.jextn.com URL: https://extensions.joomla.org/extensions/extension/social-web/social-buy/jextn-groupbuy/ Product: 'Joomla! JEXTN Groupbuy 4.0.0' Developer: jextn.com Last updated: Jan 04 2016 Compatibility: 3.X Typ...

Joomla Jtag Minicart 4.1.0 SQL Injection Vulnerability

Exploit for php platform in category web applications Title: Joomla Jtag Minicart 4.1.0 - SQL injection Credit: Bilal KARDADOU Vendor: https://joomlatag.com URL: https://extensions.joomla.org/extensions/extension/e-commerce/shopping-cart/jtag-minicart/ Product: 'Joomla Jtag Minicart 4.1.0'...

CVE-2017-1465

IBM TRIRIGA is affected in 3.3.x, 3.4.x, and 3.5.x releases, where a remote attacker could hijack a user’s click actions by enticing a victim to a malicious site (clickjacking). The security bulletin lists confirmed affected versions and provides remediation via fixes: 3.5.3.1 (for 3.5), 3.4.2.6 ...

CVE-2017-17384

ISPConfig 3.x before 3.1.9 allows remote authenticated users to obtain root access by creating a crafted cron job...

CVE-2017-17384

ISPConfig 3.x before 3.1.9 allows remote authenticated users to obtain root access by creating a crafted cron job...

Design/Logic Flaw

ISPConfig 3.x before 3.1.9 allows remote authenticated users to obtain root access by creating a crafted cron job...

CVE-2017-17384

ISPConfig 3.x before 3.1.9 allows remote authenticated users to obtain root access by creating a crafted cron job...

Cr3dOv3r v0.2 - Know The Dangers Of Credential Reuse Attacks

Your best friend in credential reuse attacks. Cr3dOv3r simply you give it an email then it does two simple jobs but useful : Search for public leaks for the email and if it any, it returns with all available details about the leak Using hacked-emails site API. Now you give it this email's old or...

CVE-2017-15110

In Moodle 3.x, students can find out email addresses of other students in the same course. Using search on the Participants page, students could search email addresses of all participants regardless of email visibility. This allows enumerating and guessing emails of other students...

CVE-2017-15110

In Moodle 3.x, students can find out email addresses of other students in the same course. Using search on the Participants page, students could search email addresses of all participants regardless of email visibility. This allows enumerating and guessing emails of other students...

CVE-2017-15110

Moodle 3.x exposes student emails through the Participants search: an information disclosure where emails of all course participants could be enumerated regardless of email visibility. This requires pattern in Moodle installations to be vulnerable; the root cause is improper visibility control on...

CVE-2017-15110

In Moodle 3.x, students can find out email addresses of other students in the same course. Using search on the Participants page, students could search email addresses of all participants regardless of email visibility. This allows enumerating and guessing emails of other students...

Cr3dOv3r - Know The Dangers Of Credential Reuse Attacks

Your best friend in credential reuse attacks. Cr3dOv3r simply you give it an email then it does two simple jobs but useful : Search for public leaks for the email and if it any, it returns with all available details about the leak Using hacked-emails site API. Now you give it this email's old or...

PYSEC-2017-73

sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sosreport-$hostname-$date.tar in /tmp/sosreport-$hostname-$date...

CVE-2015-7529

sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sosreport-$hostname-$date.tar in /tmp/sosreport-$hostname-$date...

CVE-2015-7529

sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sosreport-$hostname-$date.tar in /tmp/sosreport-$hostname-$date...

CVE-2015-7529

sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sosreport-$hostname-$date.tar in /tmp/sosreport-$hostname-$date...

CVE-2015-7529

CVE-2015-7529 concerns sosreport in SoS 3.x where a local attacker can read sensitive data from sosreport archives or gain privileges via a symlink attack on temporary archive files (example: sosreport-$hostname-$date.tar in /tmp). Root cause: use of predictable temporary file names in sosreport’...