CVE-2026-78070

plgcontentdpcalendar 中的 ORDER BY 短代码 SQL 注入 DPCalendar Free ≤ 10.11.2 — 作者级用户通过基于时间的盲注提取完整数据库 摘要 plgcontentdpcalendar 内容插件会解析嵌入在 Joomla 文章正文中的 events order="..."/events 短代码。order 参数值被直接传递给 EventsModel::setState'list.ordering', ...，完全绕过了模型自身的 populateState 白名单。该值随后被插入到 SQL ORDER BY 子句中，仅受...

CVE-2026-21627---Tassos-Novarain-Framework-plg_system_nrframework-Exploit---Joomla

CVE-2026-21627 Joomla 的 Novarain 框架（nrframework）中存在未认证的任意文件包含漏洞 概述 Tassos/Novarain 框架 （plgsystemnrframework）Joomla 插件中存在一个严重漏洞，允许未认证的攻击者在服务器上包含任意 PHP 文件、实例化任意类，并与内置的 gadget 类链式利用，从而实现任意文件上传 和任意文件删除 ——全程无需认证。...

CVE-2020-13424

Título del exploit: Joomla! Plugin XCloner Backup 3.5.3 - Inclusión de archivo local Autenticado Fecha: 2020-05-10 Autor del exploit: Mehmet Kelepçe / Gais Cyber Security ID de autor en Exploit-Db: 8763 Referencia:...

CVE-2026-57829

Helix Ultimate 框架 — 未认证存储型 XSS comajax → 管理员会话骑乘 → 完全账户接管 这是本研究文件夹中最强的发现——严重程度为 CRITICAL，且已端到端完全确认。 与 helixultimatedeletepoc.md 中仅可删除的漏洞不同，该漏洞具有一条真实、可行的完整入侵站点路径。 组件： JoomShaper Helix Ultimate 框架（plgsystemhelixultimate + shaperhelixultimate 模板） 测试版本： 2.2.6（GitHub JoomShaper/helix-ultimate，HEAD...

CVE-2026-49049

CVE-2026-49049 — Helix3 JoomShaper Joomla 未认证 AJAX RCE 扫描器 针对 CVE-2026-49049 的批量扫描器 / 验证器：Joomla 的 Helix3 Framework 插件中存在未认证的 AJAX 处理器（v1.0 – 3.1.0 ，在 3.1.1+ 中已修复）。 仅限授权测试。 只能对您拥有或已获得书面测试许可的系统使用。 目录 漏洞概述 RCE 利用链 安装 使用方法 Usage 示例输出 侦察 Dorks（搜索语法） 修复方法 Remediation 项目结构 贡献指南 参考链接 免责声明 漏洞概述 位于...

CVE-2020-15399

Exploit Title: Joomla! J2 JOBS 1.3.0 - 'sortby' 经过身份验证的SQL注入 Date: 2020-06-17 Exploit Author: Mehmet Kelepçe / Gais Cyber Security Vendor Homepage: https://joomsky.com/ Software Link: https://joomsky.com/products/js-jobs-pro.html Change Log Update : https://joomsky.com/products/js-jobs.html...

CVE-2026-78074 Joomla Extension - miniorgange.com - Unauthenticated arbitrary extension deinstallation via various miniOrange extensions

Joomla Extension - miniorgange.com - Unauthenticated arbitrary extension deinstallation via various miniOrange extensions - a missing authentication check allows unauthenticated actors to delete arbitrary installed extensions. Only the free versions of the miniOrange plugins are affected...

CVE-2026-66915 Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.7.2

Joomla Extension - fabrikar.com - Remote code execution in Fabrik 4.7.2 - An unauthenticated attacker could execute arbitrary code by using the ajaxcalc feature of the calc plugin...

EUVD-2026-40122

The Helix3 plugin for Joomla exposes an ajax handler task, that allows unauthenticated attackers to delete arbitrary files, write arbitrary JSON files and update template parameters...

EUVD-2026-15653

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RSJoomla! RSFirewall! rsfirewall allows Stored XSS.This issue affects RSFirewall!: from n/a through = 1.1.45...

CVE-2026-21627 Extension - tassos.gr - SQL injection and Unauthenticated File Read in Novarain/Tassos Framework v4.10.14 – v6.0.37 for Joomla

The vulnerability was rooted in how the Tassos Framework plugin handled specific AJAX requests through Joomla’s comajax entry point. Under certain conditions, internal framework functionality could be invoked without proper restriction...

CVE-2026-21627

The CVE concerns the Tassos Framework plugin (Joomla) versions 4.10.14 through 6.0.37, where specific AJAX handling via Joomla com_ajax can invoke internal framework functionality without proper restrictions. This leads to a SQL injection and an unauthenticated file read, driven by how the plugin...

CVE-2010-0635

SQL injection vulnerability in the plgSearchEventsearch::onSearch method in eventsearch.php in the JEvents Search plugin 1.5 through 1.5.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: some of these details are obtained from third party...

EUVD-2010-0785

Malware in sbrugna...

EUVD-2023-32369

Malicious code in bioql PyPI...

EUVD-2023-32370

Malicious code in bioql PyPI...

EUVD-2025-21872

Malicious code in bioql PyPI...

EUVD-2023-32371

Malicious code in bioql PyPI...

CVE-2025-54475

A SQL injection vulnerability in the JS Jobs plugin versions 1.3.2-1.4.4 for Joomla allows low-privilege users to execute arbitrary SQL commands...

CVE-2025-49486

A stored XSS vulnerability in the Balbooa Gallery plugin 1.0.0-2.4.0 for Joomla allows privileged users to store malicious scripts in gallery items...