New Metasploit 3.6 Targets Security Compliance !

Security vulnerability testing is getting a boost this week with the release of Metasploit 3.6. Metasploit Pro, the commercial version of the product, now includes new PCI compliance reporting capabilities. There is also a new Project Activity Report, which helps organization manage and track...

HTB22870: SQL Injection in GRAND Flash Album Gallery wordpress plugin

Vulnerability ID: HTB22870 Reference: http://www.htbridge.ch/advisory/sqlinjectioningrandflashalbumgallerywordpressplugin.html Product: GRAND Flash Album Gallery wordpress plugin Vendor: Sergey Pasyuk http://codeasily.com/ Vulnerable Version: 0.55 Vendor Notification: 22 February 2011 Vulnerabili...

PhotoSmash 1.0.1 Cross Site Scripting

Vulnerability ID: HTB22867 Reference: http://www.htbridge.ch/advisory/xssinphotosmashwordpressplugin.html Product: PhotoSmash wordpress plugin Vendor: Byron Bennett http://smashly.net/ Vulnerable Version: 1.0.1 Vendor Notification: 22 February 2011 Vulnerability Type: XSS Cross Site Scripting...

GRAND Flash Album Gallery 0.55 SQL Injection / File Disclosure

=============================== Vulnerability ID: HTB22871 Reference: http://www.htbridge.ch/advisory/filecontentdisclosureingrandflashalbumgallerywordpressplugin.html Product: GRAND Flash Album Gallery wordpress plugin Vendor: Sergey Pasyuk http://codeasily.com/ Vulnerable Version: 0.55 Vendor...

GnackTrackR6 Released , available for Download !

GnackTrackR6 Released , available for Download ! GnackTrack is a Live and installable Linux distribution designed for Penetration Testing and is based on Ubuntu. Although this sounds like BackTrack, it is most certainly not; it's very similar but based on the much loved GNOME! GnackTrackR6 has ju...

HTB22864: XSS vulnerability in xtcModified

Vulnerability ID: HTB22864 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinxtcmodified1.html Product: xtcModified Vendor: xtcModified Team http://www.xtc-modified.org/ Vulnerable Version: 1.05 and probably prior versions Vendor Notification: 17 February 2011 Vulnerability Type: Store...

NextGEN Gallery WordPress Plugin 1.7.3 Path Disclosure

Vulnerability ID: HTB22862 Reference: http://www.htbridge.ch/advisory/pathdisclosureinnextgengallerywordpressplugin.html Product: NextGEN Gallery wordpress plugin Vendor: Alex Rabe http://alexrabe.de/ Vulnerable Version: 1.7.3 Vendor Notification: 15 February 2011 Vulnerability Type: Path...

WP Forum Server 1.6.5 Wordpress Plugin SQL Injection Vulnerability

Exploit for php platform in category web applications Product: WP Forum Server wordpress plugin Vendor: VastHTML Vulnerable Version: 1.6.5 Vendor Notification: 10 February 2011 Vulnerability Type: SQL Injection Risk level: High Credit: High-Tech Bridge SA - Ethical Hacking & Penetration Testing...

WordPress Plugin IWantOneButton 3.0.1 - Multiple Vulnerabilities

WordPress Plugin IWantOneButton 3.0.1 - Multiple Vulnerabilities Vulnerability ID: HTB22846 Reference: http://www.htbridge.ch/advisory/sqlinjectioniniwantonebuttonwordpres splugin.html Product: IWantOneButton wordpress plugin Vendor: Daniel Sands http://www.danielsands.co.cc/ Vulnerable Version:...

Z-Vote 1.1 Wordpress Plugin SQL Injection Vulnerability

Exploit for php platform in category web applications Vulnerability ID: HTB22839 Reference: http://www.htbridge.ch/advisory/sqlinjectioninzvotewordpressplugin.html Product: Z-Vote wordpress plugin Vendor: 140hours http://wordpress.org/extend/plugins/z-vote/ Vulnerable Version: 1.1 Vendor...

WordPress Plugin Z-Vote 1.1 - SQL Injection

Source: http://packetstormsecurity.org/files/view/98671/zvote-sql.txt Vulnerability ID: HTB22839 Reference: http://www.htbridge.ch/advisory/sqlinjectioninzvotewordpressplugin.html Product: Z-Vote wordpress plugin Vendor: 140hours http://wordpress.org/extend/plugins/z-vote/ Vulnerable Version: 1.1...

HTB22841: SQL Injection in Comment Rating wordpress plugin

Vulnerability ID: HTB22841 Reference: http://www.htbridge.ch/advisory/sqlinjectionincommentratingwordpressplugin.html Product: Comment Rating wordpress plugin Vendor: Bob King http://wealthynetizen.com/ Vulnerable Version: 2.9.23 Vendor Notification: 08 February 2011 Vulnerability Type: SQL...

HTB22843: Path disclosure in GD Star Rating wordpress plugin

Vulnerability ID: HTB22843 Reference: http://www.htbridge.ch/advisory/pathdisclosureingdstarratingwordpressplugin.html Product: GD Star Rating wordpress plugin Vendor: Milan Petrovic http://www.gdstarrating.com/ Vulnerable Version: 1.9.7 Vendor Notification: 08 February 2011 Vulnerability Type:...

CDNVote 0.4.1 SQL Injection

Vulnerability ID: HTB22845 Reference: http://www.htbridge.ch/advisory/sqlinjectionincdnvotewordpressplugin.html Product: cdnvote wordpress plugin Vendor: Nakahira http://www.crossdrive.net/ Vulnerable Version: 0.4.1 Vendor Notification: 08 February 2011 Vulnerability Type: SQL Injection Risk leve...

HTB22824: SQL Injection in Seo Panel

Vulnerability ID: HTB22824 Reference: http://www.htbridge.ch/advisory/sqlinjectioninseopanel1.html Product: Seo Panel Vendor: http://www.seopanel.in/ http://www.seopanel.in/ Vulnerable Version: 2.2.0 Vendor Notification: 01 February 2011 Vulnerability Type: SQL Injection Risk level: High Credit:...

Seo Panel 2.2.0 - SQL Injection

Vulnerability ID: HTB22824 Reference: http://www.htbridge.ch/advisory/sqlinjectioninseopanel1.html Product: Seo Panel Vendor: http://www.seopanel.in/ http://www.seopanel.in/ Vulnerable Version: 2.2.0 Vendor Notification: 01 February 2011 Vulnerability Type: SQL Injection Risk level: High Credit:...

Metasploit Framework v3.5.2 latest version download !

Our favourite exploitation framework – The Metasploit Framework has been updated! We now have Metasploit Framework version 3.5.2! "The Metasploit Framework is a penetration testing toolkit, exploit development platform, and research tool. The framework includes hundreds of working remote exploits...

ViArt Shop 4.0.5 Cross Site Scripting

==================================== Vulnerability ID: HTB22814 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinviartshop.html Product: ViArt Shop Vendor: Viart Software http://www.viart.com/ Vulnerable Version: Enterprise v.4.0.5 Vendor Notification: 25 January 2011 Vulnerability...

Podcast Generator 1.3 - Multiple Vulnerabilities

======================================== Vulnerability ID: HTB22801 Reference: http://www.htbridge.ch/advisory/localfileinclusioninpodcastgenerator.html Product: Podcast Generator Vendor: Alberto Betella http://podcastgen.sourceforge.net/ Vulnerable Version: 1.3 Vendor Notification: 20 January 20...

HTB22801: Local File Inclusion in Podcast Generator

Vulnerability ID: HTB22801 Reference: http://www.htbridge.ch/advisory/localfileinclusioninpodcastgenerator.html Product: Podcast Generator Vendor: Alberto Betella http://podcastgen.sourceforge.net/ Vulnerable Version: 1.3 Vendor Notification: 20 January 2011 Vulnerability Type: Local File Inclusi...