WordPress BlackHawk 1.0 Open Redirection

Exploit Title : WordPress BlackHawk Themes 1.0 Open Redirection Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 02/12/2018 Vendor Homepage : wordpress.org themetix.com/black-hawk/ Tested On : Windows and Linux Category : WebApps Version Information :...

Siyah Beyaz Bilisim Web Design 1.0 SQL Injection

Exploit Title : Siyah Beyaz BiliAim Web Design 1.0 SQL Injection Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 02/12/2018 Vendor Homepage : siyahbeyazbilisim.com Software Download Link : N/A Tested On : Windows and Linux Category : WebApps Version Information :...

Joomla JCE 2.6.33 Database Backup Disclosure

Exploit Title : Joomla Content Editor ComJCE Components 2.5.24 Database Backup Disclosure Information Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 30/11/2018 Vendor Homepage : joomlacontenteditor.net Software Download Links :...

WordPress sermon-shortcodes 1.0 Arbitrary File Download

Exploit Title : WordPress sermon-shortcodes 1.0 Plugins Arbitrary File Download Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 27/11/2018 Vendor Homepage : wordpress.org sermonmanager.pro...

WordPress WP Complete Backup 3.0.5 Database Backup Disclosure

Exploit Title : WordPress wp-complete-backup Plugins 3.0.5 Database Backup Information Disclosure Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 30/11/2018 Vendor Homepage : wordpress.org/plugins/wp-complete-backup/ Software Download Link :...

WordPress hwm_board 1.0 Arbitrary File Disclosure

Exploit Title : WordPress hwmboard 1.0 Plugins Korea Arbitrary File Download Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 28/11/2018 Vendor Homepage : wordpress.org Tested On : Windows and Linux Category : WebApps Version Information : All Current...

WordPress Events Calendar Premium 1.0 Database Disclosure

Exploit Title : WordPress events-calendar-premium Plugins 1.0 Database Backup Information Disclosure Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 30/11/2018 Vendor Homepage : wordpress.org Tested On : Windows and Linux Category : WebApps Version...

WordPress pm_market 1.0 Database Backup Disclosure

Exploit Title : WordPress pmmarket Plugins 1.0 Database Backup Information Disclosure Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 30/11/2018 Vendor Homepage : wordpress.org power.com.pl Tested On : Windows and Linux Category : WebApps Version...

WordPress Jazzy Forms 1.1.1 Database Backup Disclosure

Exploit Title : WordPress jazzy-forms Plugins 1.1.1 Database Backup Information Disclosure Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 30/11/2018 Vendor Homepage : wordpress.org/plugins/jazzy-forms/ Software Download Link :...

WordPress user-spam-remover 1.0 Database Disclosure

Exploit Title : WordPress user-spam-remover 1.0 Plugins Database Backup Information Disclosure Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 28/11/2018 Vendor Homepage : wordpress.org/plugins/user-spam-remover/ + lyncd.com/user-spam-remover/ Tested...

WordPress wawp_framework 1.0 Database Backup Disclosure

Exploit Title : WordPress wawpframework Plugins 1.0 Database Backup Information Disclosure Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 30/11/2018 Vendor Homepages : wordpress.org cryonix.cz webarts.name Tested On : Windows and Linux Category :...

Joomla DJ Image Slider 3.2.3 Database Disclosure

Exploit Title : Joomla comdjimageslider Components All in One 3.2.3 Database Backup Information Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 27/11/2018 Vendor Homepage : joomla.org dj-extensions.com Tested On : Windows and Linux Software Download Lin...

The Origin of the Term Indicators of Compromise (IOCs)

I am an historian. I practice digital security, but I earned a bachelor's of science degree in history from the United States Air Force Academy. 1 Historians create products by analyzing artifacts, among which the most significant is the written word. In my last post, I talked about IOCs, or...

Joomla Admin 3.7.4 Database Disclosure

Exploit Title : Joomla comadmin Components from V2.5.4 to V3.7.4 Database Backup Arbitrary File Download Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 19/11/2018 Vendor Homepage : joomla.org +...

WordPress Universal Post Manager 1.5.0 Database Disclosure

Exploit Title : WordPress universal-post-manager 1.5.0 Plugins Database Backup Information Disclosure Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 22/11/2018 Vendor Homepage : wordpress.org/support/plugin/universal-post-manager/...

WordPress Pods 2.7.9 Database Disclosure

Exploit Title : WordPress Pods Plugins 2.7.9 Database Backup Arbitrary File Download Vulnerability Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 22/11/2018 Vendor Homepage : + wordpress.org/plugins/pods/ pods.io +...

Cybercrime in the Spotlight: How Crooks Capitalize on Cultural Events

ARCHIVED STORY Cybercrime in the Spotlight: How Crooks Capitalize on Cultural Events By John Fokker · July 03, 2018 Every four years, everyone’s head around the globe turns toward the television. The Olympics, the World Cup – world events like these have all eyes viewing friendly competition...

Cybercrime in the Spotlight: How Crooks Capitalize on Cultural Events

ARCHIVED STORY Cybercrime in the Spotlight: How Crooks Capitalize on Cultural Events By John Fokker · July 03, 2018 Every four years, everyone’s head around the globe turns toward the television. The Olympics, the World Cup – world events like these have all eyes viewing friendly competition...

Plant Your Flag, Mark Your Territory

Many people, particularly older folks, proudly declare they avoid using the Web to manage various accounts tied to their personal and financial data -- including everything from utilities and mobile phones to retirement benefits and online banking services. The reasoning behind this strategy is a...

U.S. sanctions against Russian cybersecurity companies

I never thought that I will write here about state sanctions. Usually I try to ignore political topics. But now it's necessary. Yesterday OFAC introduced sanctions against 5 Russian companies. I would like to mention 3 of them: Digital Security - one of the leading Russian Information Security...