full-disclosure - [FD] New CVE's to be released the 17th of June.

Open Source and information security mailing list archives

Message-Id: <F2A0EAEE-B737-4C73-91ED-52EC7B846AD2@outpost24.com>
Date: Thu, 16 Jul 2015 16:12:13 +0200
From: Kasper Westphal Bertelsen <kb@...post24.com>
To: fulldisclosure@...lists.org
Subject: [FD] New CVE's to be released the 17th of June.

Hi Full Disclosure,

New vulnerabilities has been discovered in Joomla Helpdesk Pro by Outpost24 ethical hackers.

Release date tomorrow the 17th of June 10 GMT(+2) time. Don’t reveal before tomorrow.

Exploits: 

Link to blog:
https://www.outpost24.com/outpost24-has-found-critical-vulnerabilities-in-joomla-helpdesk-pro/ <https://www.outpost24.com/outpost24-has-found-critical-vulnerabilities-in-joomla-helpdesk-pro/>

References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4071
 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4071>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4072 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4072>
 <https://www.outpost24.com/outpost24-has-found-critical-vulnerabilities-in-joomla-helpdesk-pro/%22x%3C/a>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4073 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4073>
 <https://www.outpost24.com/outpost24-has-found-critical-vulnerabilities-in-joomla-helpdesk-pro/%22x%3C/a>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4074 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4074>
 <https://www.outpost24.com/outpost24-has-found-critical-vulnerabilities-in-joomla-helpdesk-pro/%22x%3C/a>http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4075 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4075>

If you have any questions don’t hesitate to contact me.

Best Regards,

------------------------------------------------------------------------------------------
Kasper Bertelsen
Marketing Manager
Outpost24 Denmark ApS
Højbro Plads 21A, 2tv | 1200 Copenhagen | Denmark
M: +45 53 73 05 65 | T: +45 31 77 11 70
Web:www.outpost24.com <http://www.outpost24.com/>| Skype:kasper.westphal.bertelsen| Linkedin.com/in/kasperwbertelsen <http://linkedin.com/in/kasperwbertelsen>|  
---Outpost24 - Vulnerability Management Made Easy!--

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives