Lucene search
+L

102894 matches found

NVD
NVD
•added 2026/07/22 9:18 p.m.•34 views

CVE-2026-63684

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension - Administrator actions, editor popups and import/export requests lacked consistent token, item-permission and input-validation checks...

8.8CVSS0.00196EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/22 9:18 p.m.•33 views

CVE-2026-63685

Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer extension - Administrator routes and replacement requests did not consistently require Super User permission and a valid token. An unauthorized backend user or CSRF attack could perform database replacements, potentially...

8.8CVSS0.00419EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/22 8:44 p.m.•19 views

CVE-2026-63265 Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints - Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form...

5.8AI score0.00177EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/22 8:44 p.m.•62 views

CVE-2026-63265

The Joomla Extension - regularlabs.com is vulnerable to inconsistent CSRF token checks and privilege checks across various AJAX endpoints. The root cause is that privileged endpoints do not consistently require valid CSRF tokens, match component/item permissions, or verify trusted server-generate...

8CVSS5.8AI score0.00177EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/22 8:44 p.m.•26 views

EUVD-2026-47814

Privileged Regular Labs AJAX endpoints did not consistently require valid CSRF tokens, matching component/item permissions and trusted server-generated form configuration. Authenticated lower-privileged users or CSRF attacks could invoke lookups or mutations outside their authorization...

5.3AI score0.00177EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/22 8:43 p.m.•23 views

CVE-2026-63685 Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer extension

Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer extension - Administrator routes and replacement requests did not consistently require Super User permission and a valid token. An unauthorized backend user or CSRF attack could perform database replacements, potentially...

5.8AI score0.00419EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/22 8:43 p.m.•23 views

CVE-2026-63685

Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer extension - Administrator routes and replacement requests did not consistently require Super User permission and a valid token. An unauthorized backend user or CSRF attack could perform database replacements, potentially...

5.2AI score0.00419EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2026/07/22 8:43 p.m.•56 views

CVE-2026-63685

The Joomla Extension by regularlabs.com contains an authorization bypass vulnerability in the DB Replacer extension . The flaw exists because administrator routes and replacement requests do not consistently require Super User permission or a valid token . This allows an unauthorized backend user...

8.8CVSS5.8AI score0.00419EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/22 8:43 p.m.•28 views

EUVD-2026-47813

Administrator routes and replacement requests did not consistently require Super User permission and a valid token. An unauthorized backend user or CSRF attack could perform database replacements, potentially causing major data corruption or site compromise...

5.3AI score0.00419EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/22 8:43 p.m.•21 views

CVE-2026-63280 Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager - Conditions administration did not consistently enforce tokens and component/mapped-item permissions...

5.8AI score0.00196EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/22 8:43 p.m.•60 views

CVE-2026-63280 Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager - Conditions administration did not consistently enforce tokens and component/mapped-item permissions...

0.00196EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/22 8:43 p.m.•58 views

CVE-2026-63280

The Joomla Extension - regularlabs.com is vulnerable to Cross-Site Request Forgery (CSRF) due to inconsistent CSRF token checks and privilege checks within the Regular Labs conditions manager . Specifically, the conditions administration interface failed to consistently enforce tokens and compone...

8.8CVSS5.8AI score0.00196EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/22 8:40 p.m.•32 views

CVE-2026-64791

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Manager - Administrator routes and install/update/uninstall processing did not consistently enforce component-management and installation permissions. An unauthorized backend user or...

5.2AI score0.00196EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2026/07/22 8:40 p.m.•55 views

CVE-2026-64791

The Regular Labs Extension Manager for Joomla suffers from inconsistent CSRF token checks and privilege checks. Specifically, administrator routes and the processing of install, update, and uninstall actions do not consistently enforce component-management and installation permissions. This flaw ...

8.8CVSS5.8AI score0.00196EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/22 8:40 p.m.•24 views

EUVD-2026-47805

Administrator routes and install/update/uninstall processing did not consistently enforce component-management and installation permissions. An unauthorized backend user or CSRF attack could install, update or remove extensions...

5.3AI score0.00196EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/22 8:40 p.m.•17 views

CVE-2026-64791 Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Manager

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Manager - Administrator routes and install/update/uninstall processing did not consistently enforce component-management and installation permissions. An unauthorized backend user or...

5.8AI score0.00196EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/22 8:40 p.m.•64 views

CVE-2026-64791 Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Manager

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Manager - Administrator routes and install/update/uninstall processing did not consistently enforce component-management and installation permissions. An unauthorized backend user or...

0.00196EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/07/22 8:39 p.m.•16 views

CVE-2026-63684 Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension - Administrator actions, editor popups and import/export requests lacked consistent token, item-permission and input-validation checks...

5.8AI score0.00196EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/22 8:39 p.m.•61 views

CVE-2026-63684 Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension - Administrator actions, editor popups and import/export requests lacked consistent token, item-permission and input-validation checks...

0.00196EPSS
SaveExploits0References1
osv_go
osv_go
•added 2026/07/22 8:36 p.m.•31 views

GO-2026-6038 Gitea: Two SSRF findings in gitea.dev

Gitea: Two SSRF findings in gitea.dev...

7.7CVSS7.5AI score0.00402EPSS
SaveExploits0References2
Rows per page
Query Builder