389 matches found
PT-2026-29502
Name of the Vulnerable Software and Affected Versions versions not specified Description Improperly built order clauses lead to a SQL injection vulnerability in the articles webservice endpoint. The vulnerability exists due to a flaw in how order clauses are constructed, potentially allowing an...
Joomla! CMS SQL注入漏洞
Joomla! CMS is a content management system developed under the open source Joomla! framework. The Joomla! CMS has a SQL injection vulnerability, which stems from improper construction of the order clause. This vulnerability may lead to SQL injection attacks at the articles webservice endpoint...
Joomla 4.0.x < 5.4.4 / 6.0.x < 6.0.4 Joomla 6.0.4 & 5.4.4 Security & Bugfix Release (5944-joomla-6-0-4-5-4-4-security-bugfix-release)
According to its self-reported version, the instance of Joomla! running on the remote web server is 4.0.x prior to 5.4.4 or 6.0.x prior to 6.0.4. It is, therefore, affected by a vulnerability. - An improper access check allows unauthorized access to webservice endpoints. CVE-2026-23899 Note that...
[20260306] - Core - Improper access check in webservice endpoints
An improper access check allows unauthorized access to webservice endpoints...
[20260302] - Core - SQL injection in com_content articles webservice endpoint
Improperly built order clauses lead to a SQL injection vulnerability in the articles webservice endpoint...
CVE-2025-50192
CVE-2025-50192 affects Chamilo LMS prior to version 1.11.30. A time-based SQL injection exists in the SOAP web service endpoint at /main/webservices/registration.soap.php , arising from insufficient validation of XML object sequences. The vulnerability is fixed in Chamilo 1.11.30 . Multiple conne...
CVE-2026-1697 Use of unsecure cookies for GraphicalData web service and WebClient web app
The Secure and SameSite attribute are missing in the GraphicalData web services and WebClient web app of PcVue in version 12.0.0 through 16.3.3 included...
CVE-2026-3025
A flaw has been found in ShuoRen Smart Heating Integrated Management Platform 1.0.0. Affected by this vulnerability is an unknown functionality of the file /MP/Service/Webservice/ExampleNodeService.asmx. Executing a manipulation of the argument File can lead to unrestricted upload. It is possible...
CVE-2021-41063
SQL injection vulnerability was discovered in Aanderaa GeoView Webservice prior to version 2.1.3 that could allow an unauthenticated attackers to execute arbitrary commands...
Brute Force
Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Brute Force via the authentication endpoints for the mobile client and authwebservice. An attacker can repeatedly attempt to guess user credentials by sending multiple authentication requests withou...
EUVD-2015-3061
Malware in sbrugna...
EUVD-2019-17020
Malware in sbrugna...
EUVD-2007-3586
Malware in sbrugna...
EUVD-2017-16977
Malware in sbrugna...
EUVD-2015-3062
Malware in sbrugna...
EUVD-2015-3060
Malware in sbrugna...
EUVD-2013-5237
Malware in sbrugna...
EUVD-2015-9093
Malware in sbrugna...