Lucene search
+L

108012 matches found

EUVD
EUVD
added 2026/07/23 9:15 a.m.5 views

EUVD-2026-47898

Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumerate unintended directories...

5.2AI score0.00224EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/23 9:15 a.m.9 views

CVE-2026-65713

CVE-2026-65713 concerns the Joomla Extension from regularlabs.com, specifically the Modals Pro extension. The issue is insecure path handling in the Modals gallery paths, which could allow enumeration of unintended directories. The available data lists a CVSS v3.1 base score of 6.5 (Medium) with ...

6.5CVSS5.2AI score0.00224EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/23 9:15 a.m.34 views

CVE-2026-65713 Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension

Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery paths could enumerate unintended directories...

0.00224EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/07/23 9:13 a.m.2 views

CVE-2026-65754 Joomla Extension - regularlabs.com - Insecure path handling in ReReplacer Pro extension

Joomla Extension - regularlabs.com - Insecure path handling in ReReplacer Pro extension - ReReplacer XML include paths could read files outside the site directory...

5.7AI score0.00335EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/23 9:13 a.m.33 views

CVE-2026-65754 Joomla Extension - regularlabs.com - Insecure path handling in ReReplacer Pro extension

Joomla Extension - regularlabs.com - Insecure path handling in ReReplacer Pro extension - ReReplacer XML include paths could read files outside the site directory...

0.00335EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/23 9:13 a.m.10 views

CVE-2026-65754

CVE-2026-65754 concerns Joomla Extension RegularLabs ReReplacer Pro, with insecure path handling: ReReplacer XML include paths could read files outside the site directory. The CVSS 3.1 vector indicates network attack, low complexity, no user interaction, with high confidentiality impact and no in...

7.5CVSS5.1AI score0.00335EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/23 9:12 a.m.7 views

CVE-2026-64872

The CVE-2026-64872 entry concerns a Joomla extension from regularlabs.com, specifically the Cache Cleaner Pro extension. The vulnerability is a path traversal issue where custom purge and log paths could escape the site webroot directory. Documents consistently reference this path traversal flaw ...

6.5CVSS5.1AI score0.00224EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/07/23 9:12 a.m.6 views

CVE-2026-64872 Joomla Extension - regularlabs.com - Path traversal in Cache Cleaner Pro extension

Joomla Extension - regularlabs.com - Path traversal in Cache Cleaner Pro extension - Custom purge and log paths could escape the site webroot directory...

5.7AI score0.00224EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/23 9:12 a.m.36 views

CVE-2026-64872 Joomla Extension - regularlabs.com - Path traversal in Cache Cleaner Pro extension

Joomla Extension - regularlabs.com - Path traversal in Cache Cleaner Pro extension - Custom purge and log paths could escape the site webroot directory...

0.00224EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/23 9:11 a.m.8 views

CVE-2026-65712

Joomla Extension - regularlabs.com - Insecure path handling in CDN for Joomla Pro extension - CDN versioning could check file paths outside the site directory, exposing local file existence and modification metadata...

5AI score0.00145EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/07/23 9:11 a.m.12 views

CVE-2026-65712

CVE-2026-65712 concerns Joomla Extension - regularlabs.com, specifically the Joomla Pro CDN feature. The issue is insecure path handling in the CDN versioning system, which could check file paths outside the site directory, potentially exposing local file existence and modification metadata. The ...

6.2CVSS5AI score0.00145EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/23 9:11 a.m.33 views

CVE-2026-65712 Joomla Extension - regularlabs.com - Insecure path handling in CDN for Joomla Pro extension

Joomla Extension - regularlabs.com - Insecure path handling in CDN for Joomla Pro extension - CDN versioning could check file paths outside the site directory, exposing local file existence and modification metadata...

0.00145EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/07/23 9:11 a.m.8 views

CVE-2026-65712 Joomla Extension - regularlabs.com - Insecure path handling in CDN for Joomla Pro extension

Joomla Extension - regularlabs.com - Insecure path handling in CDN for Joomla Pro extension - CDN versioning could check file paths outside the site directory, exposing local file existence and modification metadata...

5.7AI score0.00145EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/23 9:9 a.m.6 views

CVE-2026-65431

Joomla Extension - regularlabs.com - Zipslip in GeoIP extension - Geo IP database update archives have been broadly extracted without path validation, leading to unsafe file extractions...

5.3AI score0.0038EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/07/23 9:9 a.m.32 views

CVE-2026-65431 Joomla Extension - regularlabs.com - Zipslip in GeoIP extension

Joomla Extension - regularlabs.com - Zipslip in GeoIP extension - Geo IP database update archives have been broadly extracted without path validation, leading to unsafe file extractions...

0.0038EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/23 9:9 a.m.5 views

EUVD-2026-47917

Joomla Extension - regularlabs.com - Zipslip in GeoIP extension - Geo IP database update archives have been broadly extracted without path validation, leading to unsafe file extractions...

5.3AI score0.0038EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2026/07/23 8:48 a.m.65 views

Exploit for Path Traversal in Jugmac00 Flask-Reuploaded

CVE-2026-27641 is a critical security vulnerability affecting ve...

9.8CVSS5.6AI score0.01046EPSS
SaveExploits2
EUVD
EUVD
added 2026/07/23 8:34 a.m.6 views

EUVD-2026-47918

The Customer Support Ticket System & Helpdesk plugin for WordPress is vulnerable to Code Injection via the 'path' parameter in all versions up to, and including, 6.0.5 due to the use of dynamic function invocation on an attacker-controlled value with insufficient validation. This makes it possibl...

9.8CVSS5.6AI score0.00494EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/23 8:34 a.m.13 views

CVE-2026-15011

CVE-2026-15011 concerns the WordPress plugin “Customer Support Ticket System & Helpdesk” (up to version 6.0.5). The vulnerability stems from dynamic function invocation on an attacker-controlled value via the public-facing path parameter, with insufficient validation. This allows unauthenticated ...

9.8CVSS5.6AI score0.00494EPSS
SaveExploits0References6
Microsoft CVE
Microsoft CVE
added 2026/07/23 8:4 a.m.116 views

A wildcard replay, as another piece of data, triggers poisoning in the serve expired reply path

...

3.7CVSS5.8AI score0.00181EPSS
SaveExploits0
Rows per page
Query Builder