Joomla MGM Remote File Inclusion

=========================================== Joomla Component commgm RFI Vulnerability =========================================== + Author : josalijoe + Homepage : http://josalijoe.org/ & http://indonesiancoder.com/ + Mail : josalijoeatyahoodotcom + Date : oktober 09,2010 + Vendor : N/A + Dork :...

Joomla PollXT Remote File Inclusion

=========================================== Joomla Component compollxt RFI Vulnerability =========================================== + Author : josalijoe + Homepage : http://josalijoe.org/ & http://indonesiancoder.com/ + Mail : josalijoeatyahoodotcom + Date : oktober 08,2010 + Vendor : N/A + Dork...

Joomla THopper Remote File Inclusion

=========================================== Joomla Component comthopper RFI Vulnerability =========================================== + Author : josalijoe + Homepage : http://josalijoe.org/ & http://indonesiancoder.com/ + Mail : josalijoeatyahoodotcom + Date : oktober 08,2010 + Vendor : N/A + Dor...

Oracle Plans Monster Patch Tuesday Release

Oracle will join Microsoft on next week’s Patch Tuesday freight train and it will be another mega-release. The database server giant says in a pre-release announcement that it will patch a whopping 81 vulnerabilities, some serious enough to be remotely exploitable without authentication over a...

Joomla Picasa2 Local File Inclusion

======================================================= Joomla Component comjoomlapicasa2 LFI Vulnerability ======================================================= + Author : josalijoe + Homepage : http://josalijoe.org/ & http://indonesiancoder.com/ + Mail : josalijoeatyahoodotcom + Date : oktobe...

Joomla Component com_jeformcr LFI Vulnerability

Exploit for php platform in category web applications =============================================== Joomla Component comjeformcr LFI Vulnerability =============================================== + Author : josalijoe + Homepage : http://josalijoe.org/ & http://indonesiancoder.com/ + Mail :...

Joomla Component com_lurm RFI Vulnerability

Exploit for php platform in category web applications =========================================== Joomla Component comlurm RFI Vulnerability =========================================== + Author : josalijoe + Homepage : http://josalijoe.org/ & http://indonesiancoder.com/ + Mail :...

Joomla Lurm Remote File Inclusion

======================================================= Joomla Component comlurm RFI Vulnerability ======================================================= + Author : josalijoe + Homepage : http://josalijoe.org/ & http://indonesiancoder.com/ + Mail : josalijoeatyahoodotcom + Date : oktober 07,2010...

Oracle Releases Pre-Release Announcement for October 2010

Oracle has issued a critical patch update pre-release announcement indicating that its October release will contain 81 new vulnerability fixes. Release of the critical patch update is scheduled for Tuesday, October 12, 2010. US-CERT encourages users and administrators to review the pre-release...

Microsoft Releases Advance Notification for October Security Bulletin

Microsoft has issued a Security Bulletin Advance Notification indicating that its October release will contain sixteen bulletins. Four bulletins will have the severity rating of critical and will be for Microsoft Windows and Internet Explorer. Ten bulletins will have the severity rating of...

(CORE-2010-0701) Adobe Acrobat Reader Acrord32.dll Use After Free Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ Adobe Acrobat Reader Acrord32.dll Use After Free Vulnerability 1. Advisory Information Title: Adobe Acrobat Reader Acrord32.dll Use After Free Vulnerability Advisory Id:...

ZDI-10-193: Adobe Acrobat Reader Multimedia Playing Remote Code Execution Vulnerability

ZDI-10-193: Adobe Acrobat Reader Multimedia Playing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-193 October 6, 2010 -- CVE ID: CVE-2010-3632 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Adobe -- Affected Products: Adobe Acrobat --...

Day-Con

Dayton, Ohio When I say “Dayton,Ohio,” what image comes to mind? Hacking, right? If not, then you’ve never been to Day-Con, the annual Ohio-based hacker con now in its fourth year. This year’s Day-Con is scheduled for October 22nd and 23rd, with three days of training preceding the main conferenc...

PHP Category SQL Injection

======================================================= PHP Category categoryid SQL Injection Vulnerability ======================================================= Exploit Title: PHP Category categoryid SQL Injection Vulnerability Date: oktober 02, 2010 Author: josalijoe Category? : PHP Category...

New Adobe PDF Zero-Day Flaw Under Attack

Adobe today sounded an alarm for a new zero-day flaw in its PDF Reader/Acrobat software, warning that hackers are actively exploiting the vulnerability in-the-wild. Details on the vulnerability are not yet public but the sudden warning from Adobe is a sure sign that rigged PDF documents are being...

Hijacked Brands Grew in 2009 Phishing Attacks

The Anti-Phishing Working Group APWG released its Q4, 2009 Phishing Activity Trends Report, which reveals that eCrime syndicates are expanding the base of brands they exploit for online fraud far beyond major financial institutions and online merchants, with the number of hijacked brands reaching...

Horde 3.3.5 - PHP_SELF Cross-Site Scripting

Horde 3.3.5 - PHPSELF Cross-Site Scripting ============================================= INTERNET SECURITY AUDITORS ALERT 2009-012 - Original release date: October 13th, 2009 - Last revised: December 16th, 2009 - Discovered by: Juan Galiana Lara - CVE ID: CVE-2009-3701 - Severity: 6.3/10 CVSS Bas...

[DSECRG-09-010] Oracle 10g CTXSYS.DRVXTABC - plsql injection

Digital Security Research Group DSecRG Advisory DSECRG-09-010 http://dsecrg.com/pages/vul/show.php?id=110 Application: Oracle Database 10G Versions Affected: Oracle 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4 Vendor URL: http://oracle.com Bugs: PL/SQL Injections Exploits: YES Reported: 29.01.2008 Vend...

Mozilla Foundation Security Advisory 2009-62

Mozilla Foundation Security Advisory 2009-62 Title: Download filename spoofing with RTL override Impact: Low Announced: October 27, 2009 Reporter: Jesse Ruderman, Sid Stamm Products: Firefox, SeaMonkey Fixed in: Firefox 3.5.4 Firefox 3.0.15 SeaMonkey 2.0 Description Mozilla security researchers...

Mozilla Foundation Security Advisory 2009-52

Mozilla Foundation Security Advisory 2009-52 Title: Form history vulnerable to stealing Impact: Moderate Announced: October 27, 2009 Reporter: Paul Stone Products: Firefox Fixed in: Firefox 3.5.4 Firefox 3.0.15 Description Security researcher Paul Stone reported that a user's form history, both...