19113 matches found
CVE-2018-6376
CVE-2018-6376 Joomla!, Second Order SQL Injection Avvia Joomla! root@kitploit: $ docker-compose up -d Accedi a localhost tramite browser http://localhost:10080...
CVE-2026-48907
🚨 CVE-2026-48907 - JCE Joomla Content Editor अनधिकृत दूरस्थ कोड निष्पादन ⚠️ JCE Joomla Content Editor में महत्वपूर्ण अनधिकृत RCE एक महत्वपूर्ण अभिगम नियंत्रण भेद्यता जो अनधिकृत हमलावरों को JCE चला रहे असुरक्षित Joomla इंस्टॉलेशन से समझौता करने की अनुमति देती है। 📖 अवलोकन CVE-2026-48907 Joomla...
CVE-2026-48907
CVE-2026-48907 — Nicht authentifizierte RCE in Joomla Content Editor JCE ≤ 2.9.99.4 Proof-of-Concept-Exploit für CVE-2026-48907 – eine CVSS 10.0 nicht authentifizierte Remote-Code-Ausführung-Schwachstelle in der Joomla Content Editor JCE-Erweiterung. Forschung vom Grayxploit Security Team...
joomla_CVE-2017-8917
joomlaCVE-2017-8917 Die "Exploitation" wurde nur zu Bildungszwecken im Rahmen des Projekts für den Kurs Cyberspace-Sicherheit durchgeführt. Alle Schritte sind in der rumänischen Sprache beschrieben...
CVE-2026-48908
🚨 CVE-2026-48908 — Compromission totale du serveur via téléchargement arbitraire de fichiers Téléchargement critique de fichier non authentifié → Exécution de code à distance RCE Une vulnérabilité critique dans SP Page Builder permet à des attaquants non authentifiés de télécharger des fichiers...
CVE-2023-23752
CVE-2023-23752 Exploit per CVE-2023-23752 4.0.0 GET /api/index.php/v1/config/application?public=true HTTP/1.1 Host: 10.9.49.205 User-Agent: curl/7.68.0 Accept: / Mark bundle as not supporting multiuse HTTP/1.1 200 OK Date: Mon, 20 Mar 2023 15:14:05 GMT Server: Apache/2.4.41 Ubuntu x-frame-options...
CVE-2023-23752
Exploit di Divulgazione di Informazioni non Autenticata di Joomla CVE-2023-23752 Exploit Descrizione Questo repository contiene un exploit per una vulnerabilità chiamata "Divulgazione di Informazioni non Autenticata di Joomla" CVE-2023-23752. Si prega di notare che si tratta solo di uno script...
CVE-2017-8917
CVE-2017-8917 - Iniezione SQL 'comfields' in Joomla 3.7.0 PoC di CVE-2017-8917...
cve-2016-8870
CVE-2016-8870 Questo fa parte di Cved: uno strumento per gestire contenitori docker vulnerabili. Cved: https://github.com/git-rep-src/cved Sorgente dell'immagine: https://github.com/cved-sources/cve-2016-8870 Autore dell'immagine: https://github.com/Medicean/VulApps/tree/master/j/joomla/1...
Joomla-Scanner
Joomla Scanner Vulnerabilità di accesso non autorizzato a Joomla CVE-2023-23752 realizzato con python Visualizzazione dell'utilizzo Result.txt URL | Nome Database | Nome utente | Password | Host Dichiarazione di non responsabilità Questo strumento è solo per scopi educativi, è vietato venderlo o...
CVE-2020-15399
Exploit Titel: Joomla! J2 JOBS 1.3.0 - 'sortby' Authentifizierte SQL-Injection Datum: 2020-06-17 Exploit-Autor: Mehmet Kelepçe / Gais Cyber Security Anbieter-Homepage: https://joomsky.com/ Software-Link: https://joomsky.com/products/js-jobs-pro.html Änderungsprotokoll Update:...
CVE-2020-13424
Titolo exploit: Joomla! Plugin XCloner Backup 3.5.3 - Local File Inclusion Autenticato Data: 2020-05-10 Autore exploit: Mehmet Kelepçe / Gais Cyber Security ID autore Exploit-DB: 8763 Riferimento: https://www.xcloner.com/xcloner-news/security-release-available-for-archived-joomla-version/ Homepag...
CVE-2026-77998
Joomla Extension - miniorange.com - Unauthenticated Authentication Bypass via SAMLResponse Parameter in miniOrange SAML SSO 11.0.2, SAML SP Single Sign On – Login with ADFS 6.4, SAML SP Single Sign On – SAML SSO login with Google Apps 6.4 - This is due to the mosamlvalidatesignature function...
CVE-2026-77998 Joomla Extension - miniorange.com - Unauthenticated Authentication Bypass via SAMLResponse Parameter in miniOrange SAML SSO < 11.0.2, SAML SP Single Sign On – Login with ADFS < 6.4, SAML SP Single Sign On – SAML SSO login with Google Apps < 6.4
Joomla Extension - miniorange.com - Unauthenticated Authentication Bypass via SAMLResponse Parameter in miniOrange SAML SSO 11.0.2, SAML SP Single Sign On – Login with ADFS 6.4, SAML SP Single Sign On – SAML SSO login with Google Apps 6.4 - This is due to the mosamlvalidatesignature function...
CVE-2026-77998
This CVSS 10.0 (Critical) vulnerability affects three miniOrange Joomla SAML SSO extensions: miniOrange SAML SSO (< 11.0.2), SAML SP Single Sign On – Login with ADFS (< 6.4), and SAML SP Single Sign On – SAML SSO login with Google Apps (
EUVD-2026-65476
Joomla Extension - miniorange.com - Unauthenticated Authentication Bypass via SAMLResponse Parameter in miniOrange SAML SSO 11.0.2, SAML SP Single Sign On – Login with ADFS 6.4, SAML SP Single Sign On – SAML SSO login with Google Apps 6.4 - This is due to the mosamlvalidatesignature function...
CVE-2026-77997
Joomla Extension - yootheme.com - Authenticated, privileged information disclosure in YOOtheme Pro 1.0.0-5.0.41 - A missing access check allowed users with comtemplate editing permissions to access information about arbitrary modules without the respective commodules permissions...
CVE-2026-77996
Joomla Extension - yootheme.com - Authenticated, privileged stored XSS in YOOtheme Pro 1.0.0-5.0.41 - Lack of escaping in the location custom field lead to a XSS vector...
CVE-2026-77997
YOOtheme Pro (a Joomla extension by yootheme.com) versions 1.0.0 through 5.0.41 contain a missing access check that allows authenticated users holding com_template editing permissions to view information about arbitrary site modules without the corresponding com_modules permissions. This constitu...
CVE-2026-77996
YOOtheme Pro (a Joomla extension) is affected by an authenticated, privileged stored XSS in versions 1.0.0 through 5.0.41 . The root cause is a lack of escaping in the location custom field , which allows a privileged user to inject a cross-site scripting payload. The CVSS 4.0 base score is 7.5 (...