Automation Anywhere Automation 360 - Server-Side Request Forgery

Automation Anywhere Automation 360 v21-v32 is vulnerable to Server-Side Request Forgery in a web API component. id: CVE-2024-6922 info: name: Automation Anywhere Automation 360 - Server-Side Request Forgery author: DhiyaneshDK severity: high description: | Automation Anywhere Automation 360 v21-v...

not-slithering-anywhere

概要 Not Slithering Anywhere は、Not Go-ing Anywhere 脆弱性アプリケーションの Python3 版です。Python アプリケーションで一般的に見られる数多くのセキュリティ問題を示すことを目的としており、静的・動的ツールのテスト環境の基盤としても機能します。 はじめに 1. python3 -m venv /.venv/class のように venv をセットアップします 2. source /.venv/class/bin/activate のように venv に入ります 3. 依存関係をインストールします: pip3 install -r...

CVE-2026-85196

Joomla Extension - regularlabs.com - Reflected XSS in Articles Anywhere extension for Joomla 20.0.0, Users Anywhere extension for Joomla 2.1.0 - Articles Anywhere Pro and Users Anywhere Pro return values from request-input data tags without making them safe for the context in which the tag is use...

CVE-2026-85195

Joomla Extension - regularlabs.com - Privileged stored XSS via link option in Articles Anywhere extension for Joomla 20.0.0 - Articles Anywhere accepts link options such as onclick and onmouseover. In affected versions, those options become real HTML event attributes without checking the article...

CVE-2026-85196

CVE-2026-85196 affects the Articles Anywhere Pro (versions < 20.0.0) and Users Anywhere Pro (versions

EUVD-2026-77214

Joomla Extension - regularlabs.com - Reflected XSS in Articles Anywhere extension for Joomla 20.0.0, Users Anywhere extension for Joomla 2.1.0 - Articles Anywhere Pro and Users Anywhere Pro return values from request-input data tags without making them safe for the context in which the tag is use...

CVE-2026-85196 Joomla Extension - regularlabs.com - Reflected XSS in Articles Anywhere extension for Joomla < 20.0.0, Users Anywhere extension for Joomla < 2.1.0

Joomla Extension - regularlabs.com - Reflected XSS in Articles Anywhere extension for Joomla 20.0.0, Users Anywhere extension for Joomla 2.1.0 - Articles Anywhere Pro and Users Anywhere Pro return values from request-input data tags without making them safe for the context in which the tag is use...

EUVD-2026-77310

Joomla Extension - regularlabs.com - Privileged stored XSS via link option in Articles Anywhere extension for Joomla 20.0.0 - Articles Anywhere accepts link options such as onclick and onmouseover. In affected versions, those options become real HTML event attributes without checking the article...

CVE-2026-85195

Articles Anywhere is a Joomla extension published by regularlabs.com . In versions

CVE-2026-85195 Joomla Extension - regularlabs.com - Privileged stored XSS via link option in Articles Anywhere extension for Joomla < 20.0.0

Joomla Extension - regularlabs.com - Privileged stored XSS via link option in Articles Anywhere extension for Joomla 20.0.0 - Articles Anywhere accepts link options such as onclick and onmouseover. In affected versions, those options become real HTML event attributes without checking the article...

not-going-anywhere

概要 Not Go-ing Anywhere は、一般的な脆弱性を示し、ユーザーが Golang の脆弱性を発見・修正・是正するためのテストベッドを提供することを目的とした、脆弱な Golang プログラムのセットです。 これは、当社の not so smart contracts リポジトリをモデルにしており、次の2種類のプログラムが含まれています。 gRPC、Web、database/sql を使用した脆弱性の総合的なエコシステム 私たちが目にする一般的な Golang の問題をデモすることを目的とした、焦点を絞ったプログラムのセット...

CVE-2026-65757

CVE-2026-65757 affects the Joomla Extension from Regular Labs (Modules Anywhere). The vulnerability arises from inconsistent CSRF token checks and privilege checks in the editor popup, which could allow an authenticated user to access restricted module data without the required module permissions...

CVE-2026-65757 Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extension

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extension - The editor popup could expose restricted module data to authenticated users without the required module permissions or valid request tokens...

CVE-2026-65757 Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extension

Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extension - The editor popup could expose restricted module data to authenticated users without the required module permissions or valid request tokens...

CVE-2026-65755 Joomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extension

Joomla Extension - regularlabs.com - Date-sensitive query-cache leakage in Articles Anywhere and Users Anywhere extension - Date-sensitive query cache keys did not retain a bounded time component. Cached results could remain active across future publication or expiry boundaries, potentially...

CVE-2026-65755

Summary: CVE-2026-65755 concerns the Joomla extension family from regularlabs.com (Articles Anywhere and Users Anywhere). The issue is a date-sensitive query-cache leakage caused by cache keys that do not retain a bounded time component, allowing cached results to remain active across future publ...

CVE-2026-64799

CVE-2026-64799 affects Joomla extensions from Regular Labs (Articles Anywhere and Users Anywhere). The issue is SSRF via remote image downloads where content-controlled image URLs can touch private or reserved network services, follow unsafe redirects, and save responses without validating they a...

CVE-2026-64799 Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions

Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions - Content-controlled image URLs could request private or reserved network services, follow unsafe redirects and save responses without validating that they were images. This cou...

CVE-2026-64799 Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions

Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions - Content-controlled image URLs could request private or reserved network services, follow unsafe redirects and save responses without validating that they were images. This cou...

CVE-2026-64793 Joomla Extension - regularlabs.com - Content access and publication bypass in Articles Anywhere and Modules Anywhere extensions

Joomla Extension - regularlabs.com - Content access and publication bypass in Articles Anywhere and Modules Anywhere extensions - Content tags could use ignore flags or property overrides to render restricted or unpublished articles or modules. A content author could thereby expose content to...