Ncat TLS Listener

This host seems to be running an instance of Ncat that is listening over TLS. Ncat is an open source networking tool that can be used as a backdoor to allow unauthorized entry and control of the remote host An attacker may use it to steal your passwords, modify your data, and prevent you from...

Joomla DT Register 4.0.3 SQL Injection

Exploit Title : Joomla DT Register Components 4.0.3 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : dthdevelopment.com Software Download Link :...

Joomla EasyBookReloaded 3.3.2 SQL Injection

Exploit Title : Joomla EasyBookReloaded Components 3.3.2 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : joomla-extensions.kubik-rubik.de Software Download Link :...

phpMyVisites CNTNT Templates 2.4 SQL Injection

Exploit Title : phpMyVisites CNTNT Templates 2.4 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : phpmyvisites.net Software Download Link : phpmyvisites.net/telechargements.html Software Information Link :...

Joomla ExtCalendar 2.0 SQL Injection

Exploit Title : Joomla ExtCalendar 2.0 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 12/02/2019 Vendor Homepage : sourceforge.net/projects/extcal/ - github.com/simoami Software Download Link : sourceforge.net/projects/extcal/files/latest/download...

Joomla WordPress Blog 4.8.0 SQL Injection

Exploit Title : Joomla WordPress Blog 4.8.0 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 12/02/2019 Vendor Homepage : cms2cms.com - corephp.com Software Download Link : corephp.com/joomla-products/wordpress-for-joomla/buy-now/new Software...

What are Data Manipulation Attacks, and How to Mitigate Against Them

Conventional wisdom says that once an attacker is in the system, moving laterally from network to network, the damage is already done. The adversary has found a way in and more than likely identified the data they’re after. They simply need to exfiltrate it, the last step of the kill chain, to la...

Joomla ActivityManager 5.3 SQL Injection

Exploit Title : Joomla ActivityManager Components 5.3 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 04/02/2019 Vendor Homepage : codecanyon.net Software Information Link : codecanyon.net/item/activity-board-activity-manager/634766 Software Versio...

Joomla JEvents 3.4.47 SQL Injection

Exploit Title : Joomla JEvents Components 3.4.47 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 31/01/2019 Vendor Homepage : jevents.net Software Download Link : jevents.net/download-area/jevents Software Information Link :...

Advantech WebAccess/SCADA Authorization Issues Vulnerability

Advantech WebAccess/SCADA is a set of SCADA software from Advantech based on browser architecture. The software supports dynamic graphical display and real-time data control, and provides remote control and management of automation equipment. An authorization issue vulnerability exists in Advante...

Unspecified Vulnerability in Oracle PeopleSoft Products (CNVD-2019-29280)

Oracle PeopleSoft Products is a set of enterprise human capital management solutions from Oracle, which provides human capital management, financial management, supplier relationship management, etc. PeopleSoft Enterprise CC Common Application Objects are One of the Common Application Objects...

Buffer overflow

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. Supported versions that are affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

Code injection

Vulnerability in the PeopleSoft Enterprise SCM eProcurement component of Oracle PeopleSoft Products subcomponent: Manage Requisition Status. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

Code injection

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Panel Processor. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2019-2540

Vulnerability in the Java Advanced Management Console component of Oracle Java SE subcomponent: Server. The supported version that is affected is Java Advanced Management Console: 2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to...

CVE-2019-2418

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: WLS Core Components. Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via T3 to compromis...

CVE-2019-2546

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite subcomponent: SQL Extensions. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker...

CVE-2019-2497

Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite subcomponent: Messages. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

CVE-2019-2549

Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications subcomponent: Logoff Page. The supported version that is affected is 12.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2019-2546

Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite subcomponent: SQL Extensions. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker...