PT-2025-38255

Name of the Vulnerable Software and Affected Versions: The Scratch Channel versions prior to 1.2 Description: The Scratch Channel is a news website where a user with fork privileges can modify administrators and create articles via a POST request to the API. Recommendations: Update to version 1.2...

CVE-2025-57759

Contao is an Open Source CMS. In versions starting from 5.3.0 and prior to 5.3.38 and 5.6.1, under certain conditions, back end users may be able to edit fields of pages and articles without having the necessary permissions. This issue has been patched in versions 5.3.38 and 5.6.1. There are no...

CVE-2025-57759 Contao has improper privilege management for page and article fields

Contao is an Open Source CMS. In versions starting from 5.3.0 and prior to 5.3.38 and 5.6.1, under certain conditions, back end users may be able to edit fields of pages and articles without having the necessary permissions. This issue has been patched in versions 5.3.38 and 5.6.1. There are no...

graph-rag-poc

Graph RAG Pipeline - Proof of Concept A locally-executable Gr...

Linux Distros Unpatched Vulnerability : CVE-2018-10198

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in OTRS 6.0.x before 6.0.7. An attacker who is logged into OTRS as a customer can use the ticket overview screen to disclose internal...

CVE-2025-57805

The Scratch Channel is a news website. In versions 1 and 1.1, a POST request to the endpoint used to publish articles, can be used to post an article in any category with any date, regardless of who's logged in. This issue has been patched in version 1.2...

CVE-2025-57805 The Scratch Channel's Publish Articles POST Request Can Upload Articles Without Validation

The Scratch Channel is a news website. In versions 1 and 1.1, a POST request to the endpoint used to publish articles, can be used to post an article in any category with any date, regardless of who's logged in. This issue has been patched in version 1.2...

CVE-2025-26855

A SQL injection in Articles Calendar extension 1.0.0 - 1.0.1.0007 for Joomla allows attackers to execute arbitrary SQL commands...

CVE-2025-26854

A SQL injection in Articles Good Search extension 1.0.0 - 1.2.4.0011 for Joomla allows attackers to execute arbitrary SQL commands...

CVE-2025-26855

A SQL injection in Articles Calendar extension 1.0.0 - 1.0.1.0007 for Joomla allows attackers to execute arbitrary SQL commands...

CVE-2025-26854

A SQL injection in Articles Good Search extension 1.0.0 - 1.2.4.0011 for Joomla allows attackers to execute arbitrary SQL commands...

CVE-2025-26855 Extension - joomcar.net - SQL injection in Articles Calendar 1.0.0 - 1.0.1.0007 for Joomla

A SQL injection in Articles Calendar extension 1.0.0 - 1.0.1.0007 for Joomla allows attackers to execute arbitrary SQL commands...

CVE-2025-26855 Extension - joomcar.net - SQL injection in Articles Calendar 1.0.0 - 1.0.1.0007 for Joomla

A SQL injection in Articles Calendar extension 1.0.0 - 1.0.1.0007 for Joomla allows attackers to execute arbitrary SQL commands...

CVE-2025-26855

The CVE-2025-26855 entry pertains to a SQL injection in the Joomla plugin/extension “Articles Calendar” (versions 1.0.0 through 1.0.1.0007) by Joomcar Extensions. The vulnerability arises in this extension and allows an attacker to execute arbitrary SQL commands. Affected component: Articles Cale...

CVE-2025-26854 Extension - joomcar.net - SQL injection in Articles Good Search 1.0.0 - 1.2.4.0011 for Joomla

A SQL injection in Articles Good Search extension 1.0.0 - 1.2.4.0011 for Joomla allows attackers to execute arbitrary SQL commands...

CVE-2025-26854

The CVE-2025-26854 entry describes a SQL injection in the Joomla extension Articles Good Search (versions 1.0.0–1.2.4.0011). In affected releases, attackers can execute arbitrary SQL commands. Mitigation: upgrade to a version later than 1.2.4.0011 (per PT-2025-30010) or apply vendor-provided fixe...

CVE-2025-26854 Extension - joomcar.net - SQL injection in Articles Good Search 1.0.0 - 1.2.4.0011 for Joomla

A SQL injection in Articles Good Search extension 1.0.0 - 1.2.4.0011 for Joomla allows attackers to execute arbitrary SQL commands...

Joomcar Extensions Articles Good Search SQL注入漏洞

Joomcar Extensions Articles Good Search is a Joomla plugin from Joomcar Extensions, Inc. A SQL injection vulnerability exists in Joomcar Extensions Articles Good Search versions 1.0.0 through 1.2.4.0011, which stems from vulnerability to SQL injection attacks...

PT-2025-30010 · Joomla · Joomla! +1

Name of the Vulnerable Software and Affected Versions: Articles Good Search extension for Joomla versions 1.0.0 through 1.2.4.0011 Description: A SQL injection issue exists in the Articles Good Search extension for Joomla. This allows attackers to execute arbitrary SQL commands. Recommendations:...

Joomcar Extensions Articles Calendar 注入漏洞

Joomcar Extensions Articles Calendar is a Joomla plugin from Joomcar Extensions. A SQL injection vulnerability exists in Joomcar Extensions Articles Calendar versions 1.0.0 through 1.0.1.0007, which stems from vulnerability to SQL injection attacks...