CVE-2018-17375

CVE-2018-17375 affects the Joomla! extension Music Collection 3.0.3. The vulnerability is an SQL Injection in the id parameter of the Music Collection component, caused by unsanitized input in that parameter. Exploit details are available in public advisories (e.g., Exploit-DB and Packet Storm) s...

CVE-2018-17383

CVE-2018-17383 concerns a SQL Injection in the Joomla! component “Collection Factory” version 4.1.9. The vulnerability is triggered via user-controllable inputs in the query path, specifically the parameters filter_order and filter_order_Dir , allowing an attacker to manipulate SQL commands execu...

CVE-2018-17375

SQL Injection exists in the Music Collection 3.0.3 component for Joomla! via the id parameter...

Component Collection Factory SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Collection Factory component of Joomla! The vulnerability is caused by inserting SQL commands into the query string of a web form...

Component Music Collection SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Music Collection component of Joomla! The vulnerability is caused by inserting SQL commands into the query string of a web form submissio...

Joomla! Component Collection Factory 4.1.9 - SQL Injection

Joomla! Component Collection Factory 4.1.9 - SQL Injection Exploit Title: Joomla! Component Collection Factory 4.1.9 - SQL Injection Dork: N/A Date: 2018-09-24 Vendor Homepage: https://thephpfactory.com/ Software Link:...

Joomla! Component Music Collection 3.0.3 - SQL Injection

Joomla! Component Music Collection 3.0.3 - SQL Injection Exploit Title: Joomla! Component Music Collection 3.0.3 - SQL Injection Dork: N/A Date: 2018-09-24 Vendor Homepage: http://joomlathat.com/ Software Link:...

Joomla Collection Factory 4.1.9 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Collection Factory 4.1.9 - SQL Injection Vendor Homepage: https://thephpfactory.com/ Software Link: https://extensions.joomla.org/extensions/extension/vertical-markets/thematic-directory/collection-factory/...

Joomla Music Collection 3.0.3 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Music Collection 3.0.3 - SQL Injection Vendor Homepage: http://joomlathat.com/ Software Link: https://extensions.joomla.org/extensions/extension/multimedia/multimedia-players/music-collection/ Version: 3.0.3...

Joomla! Collection Factory 4.1.9 SQL Injection

Exploit Title: Joomla! Component Collection Factory 4.1.9 - SQL Injection Dork: N/A Date: 2018-09-24 Vendor Homepage: https://thephpfactory.com/ Software Link: https://extensions.joomla.org/extensions/extension/vertical-markets/thematic-directory/collection-factory/ Version: 4.1.9 Category: Webap...

Joomla! Music Collection 3.0.3 SQL Injection

Exploit Title: Joomla! Component Music Collection 3.0.3 - SQL Injection Dork: N/A Date: 2018-09-24 Vendor Homepage: http://joomlathat.com/ Software Link: https://extensions.joomla.org/extensions/extension/multimedia/multimedia-players/music-collection/ Version: 3.0.3 Category: Webapps Tested on:...

Joomla! Component Music Collection 3.0.3 - SQL Injection

Exploit Title: Joomla! Component Music Collection 3.0.3 - SQL Injection Dork: N/A Date: 2018-09-24 Vendor Homepage: http://joomlathat.com/ Software Link: https://extensions.joomla.org/extensions/extension/multimedia/multimedia-players/music-collection/ Version: 3.0.3 Category: Webapps Tested on:...

How to collect Receiver for Android Logs

Different ways of collecting Receiver logs from Android Device...

Veeam Service Provider Console – Compile and Upload Server Logs

Purpose This article provides information about collecting Veeam Service Provider Console logs. Solution The log collection procedure for Veeam Service Provider Console is documented in the User Guide: Downloading Veeam Service Provider Console Logs Tip: Use the Archive button in the top-right of...

Fuji Electric V-Server Integer Overflow Vulnerability

Fuji Electric V-Server VPR is a data collection software from Fuji Electric Japan. An integer overflow vulnerability exists in Fuji Electric V-Server VPR 4.0.3.0 and earlier versions. A remote attacker could exploit this vulnerability to execute code...

Fuji Electric V-Server Buffer Overflow Vulnerability

Fuji Electric V-Server VPR is a data collection software from Fuji Electric Japan. A heap buffer overflow vulnerability exists in Fuji Electric V-Server VPR 4.0.3.0 and earlier versions. A remote attacker could exploit this vulnerability to execute code...

Microsoft Windows: Configure Connected User Experiences and Telemetry

With this policy setting, you can forward Connected User Experience and Telemetry requests to a proxy server. If you enable this policy setting, you can specify the FQDN or IP address of the destination device within your organization SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptio...

Veeam ONE Reporter error "Failed to RetrieveProperties: Insufficient privileges"

Challenge Veeam ONE Reporter shows the following error message during the Object properties collection task: 2018-01-08 03:00:10.3791 ERROR 5984 18 EXCEPTION: Permission to perform this operation was denied. 2018-01-08 03:00:12.9585 ERROR 5984 18 EXCEPTION: Failed to RetrieveProperties: ""...

Apple Removes Several Trend Micro Apps For Collecting MacOS Users' Data

Apple has removed almost all popular security apps offered by well-known cyber-security vendor Trend Micro from its official Mac App Store after they were caught stealing users' sensitive data without their consent. The controversial apps in question include Dr Cleaner, Dr Cleaner Pro, Dr...

Answers to Your Questions on Our Apps in the Mac App Store

Updated Oct. 4; please scroll down for latest information. Reports that Trend Micro is “stealing user data” and sending them to an unidentified server in China are absolutely false. Trend Micro has completed an initial investigation of a privacy concern related to some of its macOS consumer...