Joomla! Component SecurityCheck 2.8.9 - Multiple Vulnerabilities

Information ------------------------------ Advisory by ADEO Security Team Name: Stored XSS and SQL Injection in Joomla SecurityCheck extension Affected Software : SecurityCheck and SecurityCheck Pro Vulnerable Versions: 2.8.9 possibly below Vendor Homepage :...

Joomla SecurityCheck 2.8.9 Cross Site Scripting / SQL Injection

Information ------------------------------ Advisory by ADEO Security Team Name: Stored XSS and SQL Injection in Joomla SecurityCheck extension Affected Software : SecurityCheck and SecurityCheck Pro Vulnerable Versions: 2.8.9 possibly below Vendor Homepage :...

Researcher Pockets $30,000 in Chrome Bounties

Security researcher Mariusz Mlynski is having a good month. Having cashed in earlier in May to the tune of $15,500, Mlynski pocketed another $30,000 courtesy of Google’s bug bounty program after four high-severity vulnerabilities were patched in the Chrome browser, each worth $7,500 to the...

Web interface for DNSmasq / Mikrotik - SQL Injection

Exploit for php platform in category web applications / + Credits: hyp3rlinx Vendor: ==================== tmcdos / sourceforge Product: ====================== dnsdhcp Web Interface Download: sourceforge.net/projects/dnsmasq-mikrotik-admin/?source=directory This is a very simple web interface for...

Web Interface for DNSmasq / Mikrotik - SQL Injection

/ + Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/DNSDHCP-WEB-INTERFACE-SQL-INJECTION.txt + ISR: apparitionsec Vendor: ==================== tmcdos / sourceforge Product: ====================== dnsdhcp Web Interface Download:...

Teampass v2.1.25 - Arbitrary File Download Vulnerability

Document Title: =============== Teampass v2.1.25 - Arbitrary File Download Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1843 Release Date: ============= 2016-05-16 Vulnerability Laboratory ID VL-ID: ====================================...

5 Vulnerabilities Fixed In Chrome Browser, Google Pays $20K to Bug Hunters

Google is urging Windows, Mac and Linux users to update their Chrome browser to fix five security holes – two which rate as high severity. Google warned users of the vulnerabilities Wednesday as it released a new version, 50.0.2661.102, of the browser. The Chrome security holes were found by four...

Intuit QuickBooks Desktop 2007 2016 - Arbitrary Code Execution

Intuit QuickBooks Desktop 2007 2016 - Arbitrary Code Execution + Credits: Maxim Tomashevich from Thegrideon Software + Website: https://www.thegrideon.com/ + Details: https://www.thegrideon.com/qb-internals-sql.html Vendor: --------------------- www.intuit.com www.intuit.ca www.intuit.co.uk...

Intuit QuickBooks Desktop 2007 < 2016 - Arbitrary Code Execution

Credits: Maxim Tomashevich from Thegrideon Software + Website: https://www.thegrideon.com/ + Details: https://www.thegrideon.com/qb-internals-sql.html Vendor: --------------------- www.intuit.com www.intuit.ca www.intuit.co.uk Product: --------------------- QuickBooks Desktop versions: 2007 -...

Stanford University - Multiple SQL Injection Vulnerabilities

Document Title: =============== Stanford University - Multiple SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1829 Release Date: ============= 2016-05-09 Vulnerability Laboratory ID VL-ID: ==================================...

OpenSSL Patches Padding Oracle Attack Bug

The latest batch of OpenSSL security patches were released today, with a pair of high-severity flaws and four low-severity issues addressed in OpenSSL 1.0.1t and OpenSSL 1.0.2h. One of the high-severity flaws, CVE-2016-2107, opens the door to a padding oracle attack that can allow for the...

Firefox 46 Patches Critical Memory Vulnerabilities

Mozilla yesterday updated Firefox and patched 10 vulnerabilities, one which was rated critical. Firefox 46 also included patches for four vulnerabilities that Mozilla rated as high severity. Critical bugs enabled remote code execution without user interaction, while bugs rated high can be exploit...

Negin Group CMS SQL Injection

Document Title: =============== Negin Group CMS - v Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1831 Release Date: ============= 2016-04-25 Vulnerability Laboratory ID VL-ID: ==================================== 1831 Comm...

Ahrare Andeysheh CMS - Multiple Web Vulnerabilities

Document Title: =============== Ahrare Andeysheh CMS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1827 Release Date: ============= 2016-04-17 Vulnerability Laboratory ID VL-ID: ==================================== 1827...

WP Robo Gallery v2.0.14 - Code Execution Vulnerability

Document Title: =============== WP Robo Gallery v2.0.14 - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1822 Release Date: ============= 2016-04-12 Vulnerability Laboratory ID VL-ID: ==================================== 182...

Arbitrary File Disclosure in Form Component

It has been discovered, that TYPO3 Form Component is susceptible to Arbitrary File Disclosure. Component Type: TYPO3 CMS Release Date: April 12, 2016 Vulnerable subcomponent: Form Vulnerability Type: Arbitrary File Disclosure Affected Versions: Versions 6.2.0 to 6.2.19 Severity: High Suggested CV...

Quicksilver HQ VoHo Concept4E CMS 1.0 SQL Injection

Document Title: =============== Quicksilver HQ VoHo Concept4E CMS v1.0 - Multiple SQL Injection Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1816 Release Date: ============= 2016-04-06 Vulnerability Laboratory ID VL-ID:...

op5 7.1.9 - Remote Command Execution

Exploit for php platform in category web applications + Credits: hyp3rlinx Vendor: ============ www.op5.com Product: =========== op5 v7.1.9 op5 Monitor is a software product for server, Network monitoring and management based on the open source Project Nagios. Vulnerability Type:...

op5 7.1.9 - Remote Command Execution

op5 7.1.9 - Remote Command Execution + Credits: hyp3rlinx + Website: http://hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/OP5-REMOTE-CMD-EXECUTION.txt Vendor: ============ www.op5.com Product: =========== op5 v7.1.9 op5 Monitor is a software product for server,...

AccelSite Content Manager v1.0 - SQL Injection Vulnerability

Document Title: =============== AccelSite Content Manager v1.0 - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1817 Release Date: ============= 2016-04-06 Vulnerability Laboratory ID VL-ID: ==================================...