not-going-anywhere

概要 Not Go-ing Anywhere は、一般的な脆弱性を示し、ユーザーが Golang の脆弱性を発見・修正・是正するためのテストベッドを提供することを目的とした、脆弱な Golang プログラムのセットです。 これは、当社の not so smart contracts リポジトリをモデルにしており、次の2種類のプログラムが含まれています。 gRPC、Web、database/sql を使用した脆弱性の総合的なエコシステム 私たちが目にする一般的な Golang の問題をデモすることを目的とした、焦点を絞ったプログラムのセット...

Automation Anywhere Automation 360 - Server-Side Request Forgery

Automation Anywhere Automation 360 v21-v32 is vulnerable to Server-Side Request Forgery in a web API component. id: CVE-2024-6922 info: name: Automation Anywhere Automation 360 - Server-Side Request Forgery author: DhiyaneshDK severity: high description: | Automation Anywhere Automation 360 v21-v...

not-slithering-anywhere

概要 Not Slithering Anywhere は、Not Go-ing Anywhere 脆弱性アプリケーションの Python3 版です。Python アプリケーションで一般的に見られる数多くのセキュリティ問題を示すことを目的としており、静的・動的ツールのテスト環境の基盤としても機能します。 はじめに 1. python3 -m venv /.venv/class のように venv をセットアップします 2. source /.venv/class/bin/activate のように venv に入ります 3. 依存関係をインストールします: pip3 install -r...

CVE-2026-100750

Joomla Extension - regularlabs.com - LFI / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joomla - Modules Anywhere Pro lets additional attributes on a module tag replace arbitrary parameters of the selected module. This feature is enabled by default in affected versions. The overrides are applied...

EUVD-2026-88107

Joomla Extension - regularlabs.com - LFI / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joomla - Modules Anywhere Pro lets additional attributes on a module tag replace arbitrary parameters of the selected module. This feature is enabled by default in affected versions. The overrides are applied...

CVE-2026-100750

The Modules Anywhere Joomla extension (versions 1.5.0 - 9.0.5 ) contains a vulnerability allowing Local File Inclusion (LFI) and Server-Side Request Forgery (SSRF) . The issue stems from a feature that allows additional attributes on a module tag to replace arbitrary parameters of the selected mo...

CVE-2026-100750 Joomla Extension - regularlabs.com - Arbitrary file read / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joomla

Joomla Extension - regularlabs.com - LFI / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joomla - Modules Anywhere Pro lets additional attributes on a module tag replace arbitrary parameters of the selected module. This feature is enabled by default in affected versions. The overrides are applied...

CVE-2026-100750 Joomla Extension - regularlabs.com - Arbitrary file read / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joomla

Joomla Extension - regularlabs.com - LFI / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joomla - Modules Anywhere Pro lets additional attributes on a module tag replace arbitrary parameters of the selected module. This feature is enabled by default in affected versions. The overrides are applied...

CVE-2026-100750: Server-Side Request Forgery (SSRF)

Joomla Extension - regularlabs.com - LFI / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joomla - Modules Anywhere Pro lets additional attributes on a module tag replace arbitrary parameters of the selected module. This feature is enabled by default in affected versions. The overrides are applied...

PT-2026-99781

Name of the Vulnerable Software and Affected Versions Modules Anywhere versions 1.5.0 through 9.0.5 Description Modules Anywhere Pro allows additional attributes on a module tag to replace arbitrary parameters of the selected module, a feature enabled by default. These overrides are applied witho...

CVE-2026-85196

Joomla Extension - regularlabs.com - Reflected XSS in Articles Anywhere extension for Joomla 20.0.0, Users Anywhere extension for Joomla 2.1.0 - Articles Anywhere Pro and Users Anywhere Pro return values from request-input data tags without making them safe for the context in which the tag is use...

CVE-2026-85195

Joomla Extension - regularlabs.com - Privileged stored XSS via link option in Articles Anywhere extension for Joomla 20.0.0 - Articles Anywhere accepts link options such as onclick and onmouseover. In affected versions, those options become real HTML event attributes without checking the article...

EUVD-2026-77214

Joomla Extension - regularlabs.com - Reflected XSS in Articles Anywhere extension for Joomla 20.0.0, Users Anywhere extension for Joomla 2.1.0 - Articles Anywhere Pro and Users Anywhere Pro return values from request-input data tags without making them safe for the context in which the tag is use...

CVE-2026-85196

CVE-2026-85196 affects the Articles Anywhere Pro (versions < 20.0.0) and Users Anywhere Pro (versions

CVE-2026-85196 Joomla Extension - regularlabs.com - Reflected XSS in Articles Anywhere extension for Joomla < 20.0.0, Users Anywhere extension for Joomla < 2.1.0

Joomla Extension - regularlabs.com - Reflected XSS in Articles Anywhere extension for Joomla 20.0.0, Users Anywhere extension for Joomla 2.1.0 - Articles Anywhere Pro and Users Anywhere Pro return values from request-input data tags without making them safe for the context in which the tag is use...

CVE-2026-85195 Joomla Extension - regularlabs.com - Privileged stored XSS via link option in Articles Anywhere extension for Joomla < 20.0.0

Joomla Extension - regularlabs.com - Privileged stored XSS via link option in Articles Anywhere extension for Joomla 20.0.0 - Articles Anywhere accepts link options such as onclick and onmouseover. In affected versions, those options become real HTML event attributes without checking the article...

CVE-2026-85195

Articles Anywhere is a Joomla extension published by regularlabs.com . In versions

EUVD-2026-77310

Joomla Extension - regularlabs.com - Privileged stored XSS via link option in Articles Anywhere extension for Joomla 20.0.0 - Articles Anywhere accepts link options such as onclick and onmouseover. In affected versions, those options become real HTML event attributes without checking the article...

CVE-2026-85195 Joomla Extension - regularlabs.com - Privileged stored XSS via link option in Articles Anywhere extension for Joomla < 20.0.0

Joomla Extension - regularlabs.com - Privileged stored XSS via link option in Articles Anywhere extension for Joomla 20.0.0 - Articles Anywhere accepts link options such as onclick and onmouseover. In affected versions, those options become real HTML event attributes without checking the article...

PT-2026-91105

Joomla Extension - regularlabs.com - Reflected XSS in Articles Anywhere extension for Joomla 20.0.0, Users Anywhere extension for Joomla 2.1.0 - Articles Anywhere Pro and Users Anywhere Pro return values from request-input data tags without making them safe for the context in which the tag is use...