joomla_CVE-2023-23752

joomlaCVE-2023-23752 Joomla - 一个请求参数突破Rest API 受影响版本 ​ Joomla大约有三个路由入口，分别是 根目录下的index.php（用户访问文章） 根目录下的administrator/index.php（管理员管理） 根目录下的api/index.php（开发者使用的Rest API） 未授权接口正是第三个入口。因此只有 Joomla 4.0.0——Joomla 4.2.7 受影响（Rest API 4.x 为官方开发） 当 public=true 时的API列表...

CVE-2023-23752

Joomla 未授权信息泄露漏洞利用 CVE-2023-23752 利用脚本 描述 此仓库包含一个针对名为“Joomla 未授权信息泄露”（CVE-2023-23752）漏洞的利用脚本。请注意，这仅是一个为教育目的创建的概念验证脚本，应负责任地使用。 该利用脚本旨在演示未授权信息泄露漏洞可能被利用的方式。 免责声明 此仓库仅供教育目的使用。请勿将此代码或其中任何信息用于恶意目的。始终遵守道德准则并尊重法律。 用法： python3 juid.py 选项 URL 示例： python3 juid.py -a http://vulnerable-website.com 选项： -u 转储用户...

CVE-2025-2539---File-Away-WordPress-Plugin-Arbitrary-File-Read

CVE-2025-2539 - File Away WordPress 插件任意文件读取漏洞 📋 执行摘要 CVE ID: CVE-2025-2539 插件: File Away（版本 = 3.9.9.0.1） 漏洞类型: 需认证的任意文件读取 CVSS 评分: 8.5（高危） 利用可用性: 已有公开 PoC 影响: 未经授权的文件泄露，包括 wp-config.php、数据库凭据和系统文件 🎯 发现时间线 · 最初发现: 2025年12月，通过 GitHub 安全研究 · 首次利用测试: 2025年12月13日 · 成功入侵: 多个 WordPress 实例确认存在漏洞 🔧 技术细节...

CVE-2026-77136 Server-Side Template Injection in extension "powermail" (powermail)

The extension passes the raw value of a form field configured as "This field contains the name of the sender" directly into a Fluid View as template source, without any sanitization, and renders it. An anonymous, unauthenticated user can submit Fluid template syntax in that field to execute...

389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check

A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into the CleanAllRUV replication status-check extended operation. Because the handler performs the search against cn=config with elevated replication plugin privileges and returns a boolean...

CVE-2025-32781 Apollo: Apollo Portal release endpoint allows cross-application configuration disclosure via releaseId

Apollo is a reliable configuration management system suitable for microservice configuration management scenarios. Prior to 2.5.0, Apollo Portal does not verify application and namespace permissions when an authenticated user requests a release by ID through GET /envs/env/releases/releaseId while...

CVE-2026-61450 Grav before 2.0.2 Config Exfiltration via offsetGet Filter

Grav before 2.0.2 contains a Twig sandbox bypass that allows a page author any admin.pages user, or anyone able to write to user/pages to exfiltrate configuration secrets. Although the sandbox replaces the 'config' variable with a redacted facade and strips Config::get/toArray from the method...

CVE-2026-54514

A flaw was found in jackson-databind, a library used for processing JSON data. This vulnerability allows a remote attacker to force the application to perform an attacker-chosen DNS Domain Name System query. This occurs when untrusted JSON input containing specific network address information is...

📄 WBCE CMS 1.6.5 LFI / Config Disclosure / Cross Site Scripting

The WBCE CMS frontend loader includes template files without sanitization. This allows local file inclusion, reading configuration files, and persistent cross site scripting via crafted templates. Version 1.6.5 is affected...

VOC++ Business Special Edition Creatiff Original 1.3 Information Disclosure

==================================================================================================================================== | Title : VOC++ Business Special Edition Creatiff Original v1.3 Config Disclosure Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro /...

Kubernetes: Development Application Credentials + Information Exposed

Issue Description When I browsed through all the JS files on prow.k8s.io I came across a link called /config which contains a configuration disclosure for the development files URL Vulnerabilities https://prow.k8s.io/config Proof On Concept javascript - continuous-integration/travis-ci kubespray:...

File Inclusion Vulnerability in Ocean CMS V6.57 cache.inc.php file

Ocean CMS seacms is a video-on-demand system designed for webmasters with different needs. A file inclusion vulnerability exists in the ocean CMS V6.57 cache.inc.php file. The vulnerability is due to the background modification of the configuration file at the user input is not filtered, the...

Design/Logic Flaw

The version checking subroutine in percona-toolkit before 2.2.13 and xtrabackup before 2.2.9 was vulnerable to silent HTTP downgrade attacks and Man In The Middle attacks in which the server response could be modified to allow the attacker to respond with modified command payload and have the...

LifeSize Room 5.0.9 - Multiple Vulnerabilities

Exploit for hardware platform in category web applications Source: https://github.com/XiphosResearch/exploits/tree/master/deathsize LifeSize Room 5.0.9, remote config disclosure, code execution & local privilege escalation Ultimately the Lifesize Room products have fundamentally flawed firmware,...

LifeSize Room 5.0.9 - Multiple Vulnerabilities

Source: https://github.com/XiphosResearch/exploits/tree/master/deathsize LifeSize Room 5.0.9, remote config disclosure, code execution & local privilege escalation Ultimately the Lifesize Room products have fundamentally flawed firmware, many similar very bugs in the WebUI exist and thier support...

LifeSize Room 5.0.9 - Multiple Vulnerabilities

LifeSize Room 5.0.9 - Multiple Vulnerabilities Source: https://github.com/XiphosResearch/exploits/tree/master/deathsize LifeSize Room 5.0.9, remote config disclosure, code execution & local privilege escalation Ultimately the Lifesize Room products have fundamentally flawed firmware, many similar...

D-Link Access-Point <= 2.10na (DWL Series) Config Disclosure Vuln

No description provided by source...

LightNEasy sql/no-db <= 2.2.x system Config Disclosure Exploit

No description provided by source. !/usr/bin/perl LightNEasy sql/no-db = 2.2.x system config disclosure exploit by staker ------------------------------ mail: stakerathotmaildotit url: http://www.lightneasy.org ------------------------------ it works with magicquotesgpc=off short explanation:...

Sulata iSoft - 'stream.php' Local File Disclosure

========================================================= Sulata iSoft stream.php Local File Disclosure Exploit ========================================================= Exploit Title : Sulata iSoft developer by Rizwan Azam you look site.com/about.php Date : 10 December 2010 Author : Suddendeath...

Radio istek Configuration Disclosure

turkish radio php script ====================================================== RADIO istek scripti tr Version 2.5 tr Remote config Vulnerability Found by : kurdish hackers team C0ntact : pshela at YaHoo .com Groups : Kurd-Team site : www.kurdteam.org...