Joomla Extensions 1.6.0 SQL Injection

Title : Joomla extensions in ../extensions/languages/ : http://localhost/path/index.php/using-joomla/extensions/languages/?filterorder=AAAAAAAAAAAAAAAAA.ked-h@exploit-id.com.AAAAAAAAAAAAAAAA,&limit=3&limitstart=4 /2- in ../extensions/templates/ :...

HTB22915: Path disclosure in Joomla

Vulnerability ID: HTB22915 Reference: http://www.htbridge.ch/advisory/pathdisclosureinjoomla.html Product: Joomla Vendor: http://www.joomla.org/ http://www.joomla.org/ Vulnerable Version: 1.6.1 Vendor Notification: 24 March 2011 Vulnerability Type: Path disclosure Risk level: Low Credit: High-Tec...

The Underground Cyber Hacking Challenge !

The Underground Cyber Hacking Challenge ! Menu of the day 0x00 - 0p3nH4x 1 2011 - Ezine 1 0x01 - The structure of 0p3nH4x 1 2011 0x02 - About the targets 0x03 - Goals 0x04 - Points system 0x05 - Reporting and Documentation 0x06 - Prizes, biatchez 0x07 - Rules 0x08 - Registrations and information...

Hugh Grant's Turns Snitch

Hugh Grant went all mafia informant when he concealed a microphone on his persons in order to out former News of the World journalists that had been involved in a rather shady phone-hacking scandal. Evidently, News of the World has, for some time, been implicated in a phone-hacking scandal whereb...

Microsoft warns against hacked Windows Phone 7 updates !

Microsoft is sorry, quite sorry indeed, that so many Windows Phone 7 owners have yet to receive the NoDo update for their handset. In a weekly written update today, the Windows Phone 7 team expressed sympathy to owners frustrated over the lag in receiving the update: "You want the latest technolo...

India's CBI plans to send teams to US, Europe to trace hackers !

Against the backdrop of the attack on its website by "Pakistan Cyber Army", the CBI is considering to send its team to the US and Europe to trace hackers involved in the defacement. Sources said the agency officials have pin-pointed three Internet Protocol IP address -- a unique numerical label...

Eleanor CMS rc5 Cross Site Scripting / SQL Injection

================================= Vulnerability ID: HTB22912 Reference: http://www.htbridge.ch/advisory/multiplesqlinjectionsineleanorcms.html Product: Eleanor CMS Vendor: Eleanor CMS http://eleanor-cms.ru/ Vulnerable Version: rc5 Vendor Notification: 22 March 2011 Vulnerability Type: SQL Injecti...

April Fool Hack : Innobuzz (Ethical Hacking Training Institute) hacked

April Fool Hack : Innobuzz Ethical Hacking Training Institute hacked The site was self Defaced by Innobuzz for making April Fool to all ;-...

Feng Office 1.7.3.3 CSRF Vulnerability

Exploit for php platform in category web applications Product: Feng Office Vendor: Secure Data SRL http://www.fengoffice.com/ Vulnerable Version: 1.7.3.3 and probably prior versions Vendor Notification: 17 March 2011 Vulnerability Type: CSRF Cross-Site Request Forgery Risk level: Low Credit:...

InTerra Blog Machine 1.84 XSS Vulnerability

Exploit for php platform in category web applications Product: InTerra Blog Machine Vendor: InTerra Blog Machine Team http://code.google.com/p/interra/ Vulnerable Version: 1.84 and probably prior versions Vendor Notification: 31 March 2011 Vulnerability Type: Stored XSS Cross Site Scripting Risk...

PHPBoost 3.0 Remote Download Backup Vulnerability

No description provided by source. Title : PHPBoost 3.0 Remote Download Backup Vulnerability Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Download Backup Database .sql File Tested on :...

PHPBoost 3.0 - Remote Download Backup

PHPBoost 3.0 - Remote Download Backup Title : PHPBoost 3.0 Remote Download Backup Vulnerability Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Download Backup Database .sql File Tested on ...

HTB22931: XSS vulnerability in InTerra Blog Machine

Vulnerability ID: HTB22931 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityininterrablogmachine.html Product: InTerra Blog Machine Vendor: InTerra Blog Machine Team http://code.google.com/p/interra/ Vulnerable Version: 1.84 and probably prior versions Vendor Notification: 31 March 2011...

HTB22907: Directory Traversal in Collabtive

Vulnerability ID: HTB22907 Reference: http://www.htbridge.ch/advisory/directorytraversalincollabtive.html Product: Collabtive Vendor: Open Dynamics http://collabtive.o-dyn.de/ Vulnerable Version: 0.6.5 and probably prior versions Vendor Notification: 17 March 2011 Vulnerability Type: Directory...

University of Regina's website up and running after apparent hacking !

University of Regina's website up and running after apparent hacking ! The University of Regina's website was down for much of Monday. Dale Johnson, spokesperson for the University, says it appears the website was hacked. Some of the essential web services including Web Mail and UR Courses were...

ANC Youth League's website hacked !

ANC Youth League's website hacked ! The ANC Youth League's website has been hacked, with the attackers leaving a message in the name of league president Julius Malema. The fake post said Malema was stepping down as ANCYL leader, iafrica news reported In response to questions about the alleged...

iCloudCenter JobSite PHP Script SQL Injection

========================================================================= ICloudCenter JobSite PHP Script SQL-i Vulnerability ========================================================================== +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= +=+=+= +=+=+=...

Multiple Vulnerability in McAfee Website , XSS and Other Attacks !

Multiple Vulnerability in McAfee Website , XSS and Other Attacks ! Researchers at the YGN Ethical Hacker Group have revealed multiple security vulnerabilities found in the McAfee.com website that leaves the company's portal susceptible to attacks and data leakage. The group found that the McAfee...

Honey Soft SQL Injection / Cross Site Scripting

----------------------------------------------------------------------------------------- Honey Soft detail.php?proddetail= & products.php?catid= SQL-i/XSS Multiple Vulnerabilities -----------------------------------------------------------------------------------------...

The Open Pentest Bookmark Collection v1.4

We are pleased to announce the release of version 1.4 yes 1.3 squeaked by without a blog post of the Open Pentest Bookmarks Collection. They have added a large amount of community submissions, with the addition of severalnew sections. They have also moved around some of the bookmarks to better...