Filipe Reis

Filipe Reis

Pentester, Security Researcher, Bug Hunter and Organizer of BSidesLisbon

Posts by Category

advisory

CVE-2016-4056 – Stored Cross-Site Scripting in TYPO3 Bookmarks

less than 1 minute read

1. Vulnerability Properties Title: Stored Cross-Site Scripting in TYPO3 Bookmarks CVE ID: CVE-2016-4056 CVSSv3 Base Score: 4.6 (AV:N/AC:L/PR:L/UI:R/S...

CVE-2015-7342 - Multiple SQL Injection in JNews Joomla Component

1 minute read

1. Vulnerability Properties Title: Multiple SQL Injection in JNews Joomla Component CVE ID: CVE-2015-7342 CVSSv3 Base Score: 6.6 (AV:N/AC:L/PR:H/UI:N...

CVE-2015-7340 - SQL Injection in JEvents Joomla Component

1 minute read

1. Vulnerability Properties Title: SQL Injection in JEvents Joomla Component CVE ID: CVE-2015-7340 CVSSv3 Base Score: 6.6 (AV:N/AC:L/PR:H/UI:N/S:C/C:...

CVE-2015-7338 - SQL Injection in AcyMailing Joomla Component

1 minute read

1. Vulnerability Properties Title: SQL Injection in AcyMailing Joomla Component CVE ID: CVE-2015-7338 CVSSv3 Base Score: 6.6 (AV:N/AC:L/PR:H/UI:N/S:C...

CVE-2015-7344 - Cross-Site Scripting in Hicksdhop Joomla Component

1 minute read

1. Vulnerability Properties Title: Cross-Site Scripting in HikaShop Joomla Component CVE ID: CVE-2015-7344 CVSSv3 Base Score: 2.4 (AV:N/AC:L/PR:H/UI:...

CVE-2015-7343 - Reflected Cross-Site Scripting in JNews Joomla Component

less than 1 minute read

1. Vulnerability Properties Title: Cross-Site Scripting in JNews Joomla Component CVE ID: CVE-2015-7343 CVSSv3 Base Score: 6.7 (AV:N/AC:L/PR:H/UI:N/S...

CVE-2015-7341 - Bypass File Upload Restriction in JNews Joomla Component

1 minute read

1. Vulnerability Properties Title: Bypass File Upload Restriction in JNews Joomla Component CVE ID: CVE-2015-7341 CVSSv3 Base Score: 7.4 (AV:N/AC:L/P...

CVE-2015-7339 - Bypass File Upload Restriction in JCE Joomla Component

1 minute read

1. Vulnerability Properties Title: Bypass File Upload Restriction in JCE Joomla Component CVE ID: CVE-2015-7339 CVSSv3 Base Score: 7.4 (AV:N/AC:L/PR:...

mobile

Getting to know Android (Part 2) - Setting up your testing environment

10 minute read

As we previously referenced, in this second part series we’re going to show you how to setup a testing environment for running android applications. For test...

Getting to know Android (Part 1)

9 minute read

The consumer mobile application market has grown in the last couple of years with the introduction of Android, iPhone and iPad platforms among others. These ...

security

Open Redirect in LinkedIn and Yahoo

2 minute read

This all started as any other day. As Pentesters, we come across many types of platforms and frameworks and because of that there is a need on trying to keep...