Windows Net-NTLMv2 Reflection DCOM/RPC (Juicy)

This module utilizes the Net-NTLMv2 reflection between DCOM/RPC to achieve a SYSTEM handle for elevation of privilege. It requires a CLSID string. Windows 10 after version 1803, April 2018 update, build 17134 and all versions of Windows Server 2019 are not vulnerable. Module Options msf use...

Joomla! Component Juicy Gallery - 'picId' SQL Injection

source: https://www.securityfocus.com/bid/48688/info The Juicy Gallery component for Joomla! is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit may allow an attacker to compromise...

Joomla! Component Juicy Gallery - picId SQL Injection

Joomla! Component Juicy Gallery - picId SQL Injection source: https://www.securityfocus.com/bid/48688/info The Juicy Gallery component for Joomla! is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A...