19238 matches found
[20240202] - Core - Open redirect in installation application
Inadequate parsing of URLs could result into an open redirect...
joomla-update-service.de Improper Access Control vulnerability OBB-3770549
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Exploit for Improper Access Control in Joomla Joomla\!
CVE-2023-23752 Joomla Unauthorized Access Vulnerability CVE...
Exploit for Improper Access Control in Joomla Joomla\!
CVE-2023-23752 Exploit for CVE-2023-23752 4.0.0 = Joomla...
Exploit for Improper Access Control in Joomla Joomla\!
Joomla Unauthenticated Information Disclosure Exploit CVE-202...
Exploit for Improper Access Control in Joomla Joomla\!
Joomla Unauthenticated Information Disclosure Exploit CVE-202...
Exploit for Improper Access Control in Joomla Joomla\!
CVE-2023-23752 – Recurrence of Joomla Unauthorized Access Vulner...
static-server path traversal vulnerability
statics-server is a server used to collect information about the environment in which Joomla is installed. A path traversal vulnerability exists in statics-server, which stems from improperly cleaned input passed via the validPath function of server.js, making it susceptible to directory traversa...
Exploit for CVE-2013-0422
K8tools 20190727 声明: 工具仅供安全研究或授权渗透，非法用途后果自负。 博客: https://www.cnblogs.com/k8gege 下载: https://github.com/k8gege/K8tools PS: 不定期更新,文件比较大，可按需下载。工具有BUG或建议可直接Github上留言 提权工具均可在远控Cmd或WebShell运行，大部份经过修改编译兼容性稳定性更好 注意：不保证永久有效,喜欢自行保存。 综合工具 + 综合工具 K8飞刀Final.rar + K8data.mdb K8飞刀漏洞数据库20190402 + K8expList.txt...
CVE-2023-39974
Exposure of Sensitive Information vulnerability in AcyMailing Enterprise component for Joomla. It allows unauthorized actors to get the number of subscribers in a specific list...
CVE-2023-39971
Improper Neutralization of Input During Web Page Generation vulnerability in AcyMailing Enterprise component for Joomla allows XSS. This issue affects AcyMailing Enterprise component for Joomla: 6.7.0-8.6.3...
CVE-2023-39970
Unrestricted Upload of File with Dangerous Type vulnerability in AcyMailing component for Joomla. It allows remote code execution...
CVE-2023-39971
Improper Neutralization of Input During Web Page Generation vulnerability in AcyMailing Enterprise component for Joomla allows XSS. This issue affects AcyMailing Enterprise component for Joomla: 6.7.0-8.6.3...
CVE-2023-39970
Unrestricted Upload of File with Dangerous Type vulnerability in AcyMailing component for Joomla. It allows remote code execution...
CVE-2023-39973
Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows the unauthorized removal of attachments from campaigns...
CVE-2023-39973
Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows the unauthorized removal of attachments from campaigns...
CVE-2023-39972
Improper Access Control vulnerability in AcyMailing Enterprise component for Joomla. It allows unauthorized users to create new mailing lists...
CVE-2023-39974
Exposure of Sensitive Information vulnerability in AcyMailing Enterprise component for Joomla. It allows unauthorized actors to get the number of subscribers in a specific list...
