Karma(In)Security

Dust off your dial-up modem and fire up your favorite IRC client — today, we’re boarding a time machine straight into the golden era of web forums.

vBulletin is one of the most widely used commercial forum solutions over the Internet, powering thousands of online communities ranging from niche hobbyist sites to large-scale tech forums.

Kerio Control, formerly known as Kerio WinRoute Firewall, is nowadays quite a popular firewall and Unified Threat Management (UTM) product owned and developed by GFI Software: according to Censys, at the moment there are around twenty thousands Kerio Cont…

Artifactory, developed by JFrog, is an industry-leading software repository manager, a single solution for storing and managing all the artifacts, binaries, packages, files, containers, and components for use throughout the software supply chain.

vBulletin is one of the most popular proprietary forum solutions over the Internet.

According to the official website ImpressCMS is an open source Content Management System (CMS) designed to easily and securely manage multilingual web sites.

SugarCRM is a pretty popular Customer Relationship Management (CRM) application written in PHP code.

Magento, which was acquired by Ebay Inc back in 2011, is one of the most popular e-commerce platforms written in PHP.

Just a year ago I had the pleasure to talk about the PHP Object Injection vulnerabilities I discovered in Joomla at the JoomlaDay Italy 2013 held in Naples, one of the most beautiful cities I have ever seen.

Welcome to my third blog post ever, the first in this new year, but still talking about an old friend of mine.

Last week I have disclosed KIS-2013-04, another PHP Object Injection vulnerability which affects the Joomla CMS.

Today I have disclosed KIS-2013-03, a PHP Object Injection vulnerability which affects the Joomla CMS.