Joomla Huge-IT Video Gallery 1.0.9 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Title: Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla Author: Larry W. Cashdollar, @larry0 Date: 2016-09-15 Download Site: http://huge-it.com/joomla-video-gallery/ Vendor: www.huge-it.com, fixed v1.1.0 Vendor Notified...

elite-it.com XSS vulnerability

Vulnerable URL: http://www.elite-it.com/en/search/site/%22%3E%3C/script%3E%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 327748 VIP...

Joomla! Component Catalog 1.0.7 - SQL Injection

Title: Unauthenticated SQL Injection in Huge-IT Catalog v1.0.7 for Joomla Author: Larry W. Cashdollar, @larry0 Date: 2016-09-16 Download Site: http://huge-it.com/joomla-catalog/ Vendor: huge-it.com Vendor Notified: 2016-09-17 Vendor Contact: [email protected] Description: Huge-IT Product Catalog i...

Joomla! Component Portfolio Gallery 1.0.6 - SQL Injection

Title: Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Joomla extension v1.0.6 Author: Larry W. Cashdollar, @larry0 Date: 2016-09-16 Download Site: http://huge-it.com/joomla-portfolio-gallery/ Vendor: huge-it.com Vendor Notified: 2016-09-17 Vendor Contact: [email protected] Description:...

Joomla! Component Catalog 1.0.7 - SQL Injection

Joomla! Component Catalog 1.0.7 - SQL Injection Title: Unauthenticated SQL Injection in Huge-IT Catalog v1.0.7 for Joomla Author: Larry W. Cashdollar, @larry0 Date: 2016-09-16 Download Site: http://huge-it.com/joomla-catalog/ Vendor: huge-it.com Vendor Notified: 2016-09-17 Vendor Contact:...

MS16-107: Description of the security update for Excel Services on SharePoint Server 2013: September 13, 2016

MS16-107: Description of the security update for Excel Services on SharePoint Server 2013: September 13, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Microsoft Office file. To learn more...

Internet Explorer help

None None...

it-club.od.ua Open Redirect vulnerability

Open Bug Bounty ID: OBB-179227 Description| Value ---|--- Affected Website:| it-club.od.ua Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

Huge IT Portfolio Gallery 1.0.7 and previous

Huge IT Portfolio Gallery 1.0.7 and previous Security updates connected with CSRF and XSS resolution: update to 1.1.0...

it-jobbank.dk Open Redirect vulnerability

Vulnerable URL: http://www.it-jobbank.dk/cgi/click.cgi?jobid=526171=h=w=http://www.openbugbounty.org Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 297264 VIP website status:| No Check it-jobbank.dk SS...

MS16-097: Description of the security update for Office 2010: August 9, 2016

MS16-097: Description of the security update for Office 2010: August 9, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user either visits a specially crafted website or opens a specially crafted document. To learn more...

MS16-099: Description of the security update for Office 2010: August 9, 2016

MS16-099: Description of the security update for Office 2010: August 9, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft...

lineage2.by XSS vulnerability

Vulnerable URL: http://www.lineage2.by/it-search.php?itemname=%22%3E%3C/title%3E%27%3E;%3C/script%3E%3Csvg/onload=alert/OPENBUGBOUNTY/%3E=guest==3id=0id=0==3=4=5 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:|...

Huge-IT Slideshow SQL Injection Vulnerability

Huge-IT Slideshow is an extension developed by the Huge-IT team for use in Joomla! to attract visitors by improving the style and character of your website. Huge-IT Slideshow v1.0.4 in . /models/slideshow.php file contains a SQL injection vulnerability. An attacker can exploit this vulnerability ...

Huge-IT Slideshow Cross-Site Scripting Vulnerability

Huge-IT Slideshow is an extension developed by the Huge-IT team for use in Joomla! to attract visitors by improving the style and character of your website. Huge-IT Slideshow v1.0.4 in . /views/slideshow/tmpl/default.php file is vulnerable to cross-site scripting. The vulnerability can be exploit...

Huge-IT Portfolio Gallery manager cross-site scripting vulnerability

Huge-IT Portfolio Gallery manager is Huge-IT team developed an extension plugin for Joomla! in the management and display of photos, videos and so on. A cross-site scripting vulnerability exists in Huge-IT Portfolio Gallery manager v1.1.5. An attacker can exploit this vulnerability to inject...

officine08.it XSS vulnerability

Vulnerable URL: https://www.officine08.it/web/ricerca.php?daform=1=%27;%22%3E;;--%3E%3C/SCRIPT%3E-%3C/style%3E-%3C/title%3E-%3C/BoDy%3E-%3Cmarquee%3E-%3Ch1%3EOmniGooch%3C/h1%3E-%3C/marquee%3E-%3Csvg/onload=alert%27XSSPOSED%27;%3E;%27 Details: Description| Value ---|--- Patched:| No Latest check f...

HellRaiser - Vulnerability Scanner

Install Install ruby, bundler and rails. https://gorails.com/setup/ubuntu/16.04 Install redis-server and nmap. sudo apt-get update sudo apt-get install redis-server nmap Clone HellRaiser repository, change to hellraiser web app directory and run bundle install. git clone...

Multiple Vulnerabilities in Joomla! Huge-IT Catalog Extension

Joomla! is an open source content management system CMS developed by the Open Source Matters team in the United States. The system provides RSS feeds, site search, etc. Huge-IT Catalog is one of the extensions to display products in the most attractive way. SQL injection vulnerabilities and...

Multiple vulnerabilities in the Joomla! Huge-IT Catalog extension (CNVD-2016-05855)

Joomla! is an open source content management system CMS developed by the Open Source Matters team in the United States. The system provides RSS feeds, site search, etc. Huge-IT Catalog is one of the extensions to display products in the most attractive way. SQL injection vulnerabilities and...