Lucene search
+L

4 matches found

Kitploit
Kitploit
•added 2026/10/29 4:52 a.m.•24 views

-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server

-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server This vulnerability could allow an attacker to take complete control of a vulnerable Confluence server. This could allow the attacker to steal data, modify data, or disrupt the availability of the server. Poc Create a JavaScript file and giv...

8.8CVSS8AI score0.88267EPSS
SaveExploits9
NVD
NVD
•added 2026/10/08 1:17 p.m.•12 views

CVE-2026-102784

Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox 2.20.4.0 - PagesController uses a trait that validates the Joomla session token only when the HTTP method is POST. addLanguage does not require POST inside the action and reads url and zip through the generic request...

8.7CVSS0.00171EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/08 12:32 p.m.•45 views

CVE-2026-102784 Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox < 2.20.4.0

Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox 2.20.4.0 - PagesController uses a trait that validates the Joomla session token only when the HTTP method is POST. addLanguage does not require POST inside the action and reads url and zip through the generic request...

8.7CVSS0.00171EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/08 12:00 a.m.•6 views

CVE-2026-102784: Cross-Site Request Forgery (CSRF)

Joomla Extension - balbooa.com - CSRF in language installation feature Gridbox 2.20.4.0 - PagesController uses a trait that validates the Joomla session token only when the HTTP method is POST. addLanguage does not require POST inside the action and reads url and zip through the generic request...

8.7CVSS5.8AI score0.00171EPSS
SaveExploits0References2
Rows per page
Query Builder