Joomla NoNumber Framework Local File Inclusion / Shell Upload

Exploit Title: NoNumber Framework Joomla! Plugin Multiple Vulnerabilities Discovery Date: 10 October 2011 Reported Date: 11 October 2011 Patch Date: 17 October 2011 Release Date: 17 October 2011 Author: jdc Software Link: http://nonumber.nl The nnframework plugin by NoNumber! contains multiple...

ATutor 2.0.2 (lang) HTTP Response Splitting Vulnerability

Summary ATutor is an Open Source Web-based Learning Content Management System LCMS designed with accessibility and adaptability in mind. Educators can quickly assemble, package, and redistribute Web-based instructional content, easily retrieve and import prepackaged content, and conduct their...

BackTrack 5 Release 1 will be available on 10th of August,2011

BackTrack 5 Release 1 will be available on 10th of August,2011 BackTrack 5 R1 Release one will be available for download on the 10th of August,2011. This will complete our first 3 month cycle since the last release. With over 100 bug fixes, numerous package updates and the addition of over 30 new...

Web Browser - Remote Exploitation Session

Document Title: =============== Web Browser - Remote Exploitation Session References: =========== Download: http://www.vulnerability-lab.com/resources/videos/14.wmv View: http://www.youtube.com/watch?v=zSFJw9PMHU Release Date: ============= 2011-06-18 Vulnerability Laboratory ID VL-ID:...

MS11-037: Vulnerability in MHTML could allow information disclosure: June 14, 2011

None None...

Cross-Site Scripting and Open Redirection vulnerability in extension phpMyAdmin (phpmyadmin)

It has been discovered that the extension phpMyAdmin phpmyadmin is vulnerable to Cross-Site Scripting and Open Redirection. Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 4.10.3 and below Vulnerability Type:...

Microsoft Releases Advance Notification for April Security Bulletin

Microsoft has issued a Security Bulletin Advance Notification indicating its April release will contain 17 bulletins. Nine of these bulletins will have the severity rating of critical and will be for Microsoft Windows, Internet Explorer and Office. The remaining bulletins will have the severity...

Wordpress jQuery Mega Menu 1.0 Plugin Local File Inclusion

Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................WordPress jQuery Mega Menu 1.0 Vulnerability...........Local File Inclusion...

phreebooks r30rc4 - Multiple Vulnerabilities

phreebooks r30rc4 - Multiple Vulnerabilities ------------------------------------------------------------------------ Software................PhreeBooks R30RC4 Vulnerability...........Local File Inclusion Download................http://sourceforge.net/projects/phreebooks Release...

omegabill 1.0 build 6 - Multiple Vulnerabilities

Source: http://packetstormsecurity.org/files/view/98480/OmegaBillv1.0Build6-php.txt ------------------------------------------------------------------------ Software................OmegaBill v1.0 Build 6 Vulnerability...........Arbitrary PHP Execution...

WordPress TagNinja 1.0 Cross Site Scripting

------------------------------------------------------------------------ Software................WordPress TagNinja 1.0 Vulnerability...........Reflected Cross-site Scripting Download................http://wordpress.org/extend/plugins/tagninja/ Release Date............1/30/2011 Tested...

Microsoft Releases Advance Notification for January Security Bulletin

Microsoft has issued a Security Bulletin Advance Notification indicating that its January release will contain two bulletins. These bulletins will have the severity ratings of critical and important and will be for Microsoft Windows. Release of these bulletins is scheduled for Tuesday, January 11...

QuickPHP Web Server 1.9.1 - Directory Traversal

------------------------------------------------------------------------ Software................QuickPHP Web Server 1.9.1 Vulnerability...........Directory Traversal Download................http://www.zachsaw.co.cc/?pg=quickphpphptesterdebugger Release Date............12/27/2010 Tested...

QuickPHP Web Server 1.9.1 Directory Traversal

------------------------------------------------------------------------ Software................QuickPHP Web Server 1.9.1 Vulnerability...........Directory Traversal Download................http://www.zachsaw.co.cc/?pg=quickphpphptesterdebugger Release Date............12/27/2010 Tested...

Elcom CommunityManager.NET - Authentication Bypass

Elcom CommunityManager.NET - Authentication Bypass Elcom CommunityManager.NET Auth Bypass Vulnerability - Security Advisory - SOS-10-004 Release Date. 20-Dec-2010 Last Update. - Vendor Notification Date. 22-Jan-2010 Product. Elcom Technology's CommunityManager.NET Platform. IIS with ASP.NET...

WordPress jRSS Widget 1.1.1 Local File Inclusion

------------------------------------------------------------------------ Software................WordPress jRSS Widget 1.1.1 Vulnerability...........Local File Inclusion Download................http://wordpress.org/extend/plugins/jrss-widget/ Release Date............11/5/2010 Tested...

WordPress Feed List 2.61.01 Cross Site Scripting

------------------------------------------------------------------------ Software................WordPress Feed List 2.61.01 Vulnerability...........Reflected Cross-site Scripting Download................http://wordpress.org/extend/plugins/feedlist/ Release Date............11/5/2010 Tested...

Cisco Unified Communications Manager Privilege Escalation

nSense Vulnerability Research Security Advisory NSENSE-2010-003 --------------------------------------------------------------- Affected Vendor: Cisco Systems, Inc Affected Product: Cisco Unified Communications Manager Platform: All Impact: Privilege Escalation Vendor response: Patch. IntelliShie...

Zen Cart 1.3.9f Local File Inclusion

Zen Cart v1.3.9f typefilter Local File Inclusion Vulnerability Vendor: Zen Ventures, LLC Product web page: http://www.zen-cart.com Version affected: 1.3.9f Summary: Zen Cart is an online store management system. It is PHP-based, using a MySQL database and HTML components. Support is provided for...

Pinky 1.0 Directory Traversal

------------------------------------------------------------------------ Software................Pinky 1.0 Vulnerability...........Directory Traversal Download................http://www.yellosoft.us/pinky Release Date............9/16/2010 Tested On...............Windows XP...