Lucene search
+L

388 matches found

Kitploit
Kitploit
added 2026/08/26 8:55 a.m.2 views

netview

= netview Netview ist ein Enumerationstool. Es verwendet mit -d die aktuelle Domäne oder eine angegebene Domäne mit -d Domäne, um Hosts aufzulisten. Sie können auch -f verwenden, wenn Sie stattdessen eine Datei mit einer Liste von Hosts angeben möchten. Beliebige Hostnamen, die Sie ausschließen...

5.7AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/25 3:49 p.m.2 views

cve-2025-21479_iqooneo8

CVE-2025-21479 — Exploit di escalation di privilegi per GPU Qualcomm Adreno SM8475 / iQOO Neo8 Codice sperimentale di escalation di privilegi locale per CVE-2025-21479 , che ha come bersaglio la GPU Qualcomm Adreno KGSL su vivo V2301A iQOO Neo8 / PD2301, Snapdragon 8+ Gen 1 / SM8475, Adreno A730,...

8.6CVSS8.4AI score0.00809EPSS
SaveExploits7
NVD
NVD
added 2026/08/25 12:16 p.m.6 views

CVE-2026-77997

Joomla Extension - yootheme.com - Authenticated, privileged information disclosure in YOOtheme Pro 1.0.0-5.0.41 - A missing access check allowed users with comtemplate editing permissions to access information about arbitrary modules without the respective commodules permissions...

5.1CVSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/25 11:53 a.m.6 views

EUVD-2026-65472

Joomla Extension - yootheme.com - Authenticated, privileged information disclosure in YOOtheme Pro 1.0.0-5.0.41 - A missing access check allowed users with comtemplate editing permissions to access information about arbitrary modules without the respective commodules permissions...

5.1CVSS5.5AI score
SaveExploits0References1
CVE
CVE
added 2026/08/25 11:53 a.m.8 views

CVE-2026-77997

YOOtheme Pro (a Joomla extension by yootheme.com) versions 1.0.0 through 5.0.41 contain a missing access check that allows authenticated users holding com_template editing permissions to view information about arbitrary site modules without the corresponding com_modules permissions. This constitu...

5.1CVSS5.6AI score
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/25 11:53 a.m.4 views

CVE-2026-77997 Joomla Extension - yootheme.com - Authenticated, privileged information disclosure about site modules YOOtheme Pro 1.0.0-5.0.40

Joomla Extension - yootheme.com - Authenticated, privileged information disclosure in YOOtheme Pro 1.0.0-5.0.41 - A missing access check allowed users with comtemplate editing permissions to access information about arbitrary modules without the respective commodules permissions...

5.1CVSS5.6AI score
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/25 11:53 a.m.17 views

CVE-2026-77997 Joomla Extension - yootheme.com - Authenticated, privileged information disclosure about site modules YOOtheme Pro 1.0.0-5.0.40

Joomla Extension - yootheme.com - Authenticated, privileged information disclosure in YOOtheme Pro 1.0.0-5.0.41 - A missing access check allowed users with comtemplate editing permissions to access information about arbitrary modules without the respective commodules permissions...

5.1CVSS
SaveExploits0References1
Nuclei
Nuclei
added 2026/08/25 6:03 a.m.93 views

Joomla! Webservice - Password Disclosure

An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints. id: CVE-2023-23752 info: name: Joomla! Webservice - Password Disclosure author: badboycxcc,Sascha Brendel severity: medium description: | An issue was discovered in...

7.5CVSS6.5AI score0.99827EPSS
SaveExploits43References5
NVD
NVD
added 2026/08/22 3:16 p.m.9 views

CVE-2026-76609

Joomla Extension - fabrikar.com - Unauthenticated modification of any comment in Fabrik 4.7.2 - The onUpdateComment endpoint did not perform any access checks...

6.9CVSS0.00239EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/22 3:16 p.m.9 views

CVE-2026-77992

Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik 4.7.2 - The onUpdateComment endpoint did not perform any access checks...

9.5CVSS0.00262EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/22 3:16 p.m.11 views

CVE-2026-76601

Joomla Extension - fabrikar.com - Unauthenticated row reordering in Fabrik 4.7.2 - The order plugin did not perform any access checks...

6.9CVSS0.00295EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/22 3:16 p.m.8 views

CVE-2026-76600

Joomla Extension - fabrikar.com - Unauthenticated deletion of any comment in Fabrik 4.7.2 - The DeleteComment endpoint did not perform any access checks...

6.9CVSS0.00239EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/22 2:20 p.m.28 views

CVE-2026-77992 Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2

Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik 4.7.2 - The onUpdateComment endpoint did not perform any access checks...

9.5CVSS0.00262EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/22 2:20 p.m.5 views

CVE-2026-77992 Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.2

Joomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik 4.7.2 - The onUpdateComment endpoint did not perform any access checks...

9.5CVSS5.2AI score0.00262EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/22 2:19 p.m.13 views

CVE-2026-76600

Fabrik (a Joomla extension by fabrikar.com) versions prior to 4.7.2 are affected by an unauthenticated comment deletion vulnerability. The DeleteComment endpoint performed no access checks, allowing any unauthenticated network attacker to delete any comment. The CVSS 4.0 base score is 6.9 (MEDIUM...

6.9CVSS5.2AI score0.00239EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/22 2:15 p.m.7 views

CVE-2026-76609 Joomla Extension - fabrikar.com - Unauthenticated modification of any comment in Fabrik < 4.7.2

Joomla Extension - fabrikar.com - Unauthenticated modification of any comment in Fabrik 4.7.2 - The onUpdateComment endpoint did not perform any access checks...

6.9CVSS5.2AI score0.00239EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/22 2:14 p.m.10 views

CVE-2026-76608

Fabrik is a Joomla extension that provides form and database functionality. In versions prior to 4.7.2 , the onGetEmail endpoint lacked any access control checks, allowing an unauthenticated attacker to disclose the email address of any commenter. This constitutes an information disclosure vulner...

6.9CVSS5.2AI score0.00295EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/21 11:16 p.m.10 views

CVE-2026-34948

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, only classes present in the SELECT clause are protected by the silos access check in OQL. This issue has been fixed in version 3.2.3...

7.7CVSS0.00227EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/21 10:26 p.m.11 views

EUVD-2026-64187

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, only classes present in the SELECT clause are protected by the silos access check in OQL. This issue has been fixed in version 3.2.3...

7.7CVSS5.3AI score0.00227EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/20 7:16 p.m.10 views

CVE-2026-54624

django CMS is an easy-to-use and developer-friendly enterprise content management system powered by Django. Prior to 5.0.8, renderobjectstructure in cms/views.py renders cms/toolbar/structure.html for a PageContent object without calling usercanviewpage. Any staff account can request a restricted...

6.5CVSS0.00244EPSS
SaveExploits0References4
Rows per page
Query Builder