Chamilo LCMS Connect 4.1 Cross Site Request Forgery

Hi Team, Affected Vendor: http://lcms.chamilo.org/ Date: 27/03/2015 Discovered by: Joel Vadodil Varghese Type of vulnerability: XSRF Tested on: Windows 7 Product: LCMS Connect Version: 4.1 Description: Chamilo is an open-source under GNU/GPL licensing e-learning and content management system, aim...

Ubercart Webform Checkout Pane - Moderately Critical - Cross Site Scripting (XSS) - SA-CONTRIB-2015-087

Ubercart Webform Checkout Pane module allows you to define Webform nodes as checkout/order panes in Ubercart. The module doesn't sufficiently sanitize user supplied text in some pages, thereby exposing a Cross Site Scripting vulnerability. This vulnerability is mitigated by the fact that an...

SA-CONTRIB-2012-048 - Contact Save - Cross Site Scripting

CVE: CVE-2012-2075 This module stores in the database all messages submitted through the core contact forms, and provides a way to respond to these messages through the website. The module doesn't sufficiently filter user supplied text, leading to a cross-site scripting XSS vulnerability. This...

SA-CONTRIB-2011-054 - CKEditor - Access bypass

The CKEditor module allows Drupal to replace textarea fields with the CKEditor - a visual HTML editor, sometimes called WYSIWYG editor. The module doesn't protect private files appropriately. Private files can downloaded by anyone able to guess their URL. CVE identifiers issued CVE-2011-4972...

Stuxnet Worm Revealed – Installation, Injection and Mitigation !

In the videos below, Joel Langill deconstructs each part of the worm to show it in action. In the second video you'll see the best practices that InfoSec Institute uses we have a training course dedicated to SCADA control systems which includes a robust Stuxnet lab to mitigate this type of...

DSA-2119-1 poppler - several vulnerabilities

Bulletin has no description...

Microsoft Windows - GDI Privilege Escalation (MS07-017) (1)

Microsoft Windows - GDI Privilege Escalation MS07-017 1 define WIN32WINNT 0x0500 include include include pragma comment lib, "user32.lib" pragma comment lib, "gdi32.lib" pragma comment lib, "shlwapi.lib" pragma comment lib, "ntdll.lib" / Here is a sploit for the GDI MS07-017 Local Privilege...

[0xbadc0ded #03] DeleGate (SSL-filter) <= 8.9.2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ========================================================================== 0xbadc0ded Advisory 03 - 2004/05/06 - DeleGate = 8.9.2 SSL-filter ========================================================================== Reference...