CVE-2026-77996 Joomla Extension - yootheme.com - Authenticated, privileged stored XSS in YOOtheme Pro 1.0.0-5.0.41

Joomla Extension - yootheme.com - Authenticated, privileged stored XSS in YOOtheme Pro 1.0.0-5.0.41 - Lack of escaping in the location custom field lead to a XSS vector...

EUVD-2026-65477

Joomla Extension - yootheme.com - Authenticated, privileged stored XSS in YOOtheme Pro 1.0.0-5.0.41 - Lack of escaping in the location custom field lead to a XSS vector...

CVE-2026-77996 Joomla Extension - yootheme.com - Authenticated, privileged stored XSS in YOOtheme Pro 1.0.0-5.0.41

Joomla Extension - yootheme.com - Authenticated, privileged stored XSS in YOOtheme Pro 1.0.0-5.0.41 - Lack of escaping in the location custom field lead to a XSS vector...

CVE-2023-23752-Python

CVE-2023-23752-Python root@kitploit: usage: CVE-2023-23752.py -h url Joomla! 4.2.8 - Unauthenticated information disclosure positional arguments: url Root URL base path including HTTP scheme, port, and root folder options: -h, --help show this help message and exit...

setup-cve-2015-8562

Joomla! RCE CVE 2015-8562 Docker-Compose-Datei zum Einrichten der Umgebung für CVE-2015-8562-Tests Inhaltsverzeichnis 1. Über das Projekt 2. Erste Schritte Voraussetzungen Installation 3. Nutzung 4. Mitwirken 5. Lizenz Über das Projekt Dieses Projekt enthält eine Docker-Compose-Datei zum Einricht...

CVE-2023-23752

CVE-2023-23752 Joomla! v4.2.8 - Divulgazione di informazioni non autenticata Per eseguire questo script, dobbiamo installare alcune gemme mancanti: root@kitploit: sudo gem install httpx sudo gem install docopt sudo gem install paint root@kitploit: ruby exploit.rb http://dev.devvortex.htb...

Joomblah

Joomblah Exploit per Joomla 3.7.0 CVE-2017-8917 Spiegazione della vulnerabilità: https://blog.sucuri.net/2017/05/sql-injection-vulnerability-joomla-3-7.html Modifica del codice Modifica alla riga 46 root@kitploit: ... result += value.decode'utf-8' ... Utilizzo Punta lo script joomblah.py...

Joomla HTTP Header Unauthenticated - Remote Code Execution

Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via the HTTP User-Agent header, as exploited in the wild in December 2015 id: CVE-2015-8562 info: name: Joomla HTTP Header Unauthenticated - Remote Code Execution...

Joomla! Core SQL Injection

A SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands. id: CVE-2015-7297 info: name: Joomla! Core SQL Injection author: princechaddha severity: high description: A SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote...

exploit-joomla

exploit-joomla Un semplice exploit che sfrutta CVE-2015-7297, CVE-2015-7857 and CVE-2015-7858 per elencare gli utenti con la psw del db Exploit Title : Joomla 3.2 to 3.4.4 Remote SQL Injection Mass Exploit Date : 12-09-2020 Requirements : Python 3.4.x , Requests module python -m pip install...

CVE-2024-5737

CVE-2024-5737 Estensione AdmirorFrames Joomla! : root@kitploit: $height=0x3c; $im = imagecreate$width, $height; $hex=unpack'H',$payload; $chunks=strsplit$hex1, 6; for$i=0; $i count$chunks; $i++ $colorchunks=strsplit$chunks$i, 2;...

CVE-2024-5736

CVE-2024-5736 AdmirorFrames Joomla! Estensione 5.0 - Falsificazione di richiesta lato server Cronologia Vulnerabilità segnalata al fornitore: 26.01.2024 Nuova versione corretta 5.0 rilasciata: 06.06.2024 Divulgazione pubblica: 28.06.2024 Descrizione Falsificazione di richiesta lato server in...

CVE-2024-5735

CVE-2024-5735 Estensione AdmirorFrames per Joomla! params'templatesBASE' = JPATHBASE . DIRECTORYSEPARATOR . 'plugins' . DIRECTORYSEPARATOR . 'content' . $path . 'templates' . DIRECTORYSEPARATOR;...

PT-2026-81296

Name of the Vulnerable Software and Affected Versions miniOrange SAML SSO versions prior to 11.0.2 SAML SP Single Sign On – Login with ADFS versions prior to 6.4 SAML SP Single Sign On – SAML SSO login with Google Apps versions prior to 6.4 Description An authentication bypass exists due to the m...

CVE-2017-8917-Joomla

CVE-2017-8917-Joomla Script Python per sfruttare la vulnerabilità di SQL injection CVE-2017-8917 in Joomla! 3.7.0 Creato solo per scopi educativi. Utilizzato per il TryHackMe Dailybugle CTF Avviso Tutti gli script/binary in questo repository dovrebbero essere utilizzati solo per test di...

Joomla-CVE-2015-8562-PHP-POC

Joomla-CVE-2015-8562-PHP-POC Una proof of concept per la vulnerabilità CVE-2015-8562 di Joomla Introduzione Questa PoC è una copia quasi 1:1 dell'implementazione Python di Gary ospitata su exploit-db. Utilizzo È molto semplice da installare: root@kitploit: git clone...

Exploit-Joomla

ep4-redes CVE-2017-8917 Vulnerabilità di SQL injection in Joomla! 3.7.0 exploit Spiegazione della vulnerabilità: https://blog.sucuri.net/2017/05/sql-injection-vulnerability-joomla-3-7.html...

ContentHistory

Joomla! 3.2 à 3.4.4 - Injection SQL expl.php Checker.pl joomlacontenthistorysqli.rb www.sec4ever.com...

CVE-2026-76565

Reflected XSS via pricefrom / priceto Filter Parameters in PhocaCart PhocaCart ≤ 6.1.7 — مهاجم غير مصادق يحقن JavaScript عشوائيًا عبر عنوان URL مخصص لفلتر السعر الملخص إصدار PhocaCart 6.1.7 لنظام Joomla عرضة لثغرة XSS المنعكسة Reflected Cross-Site Scripting عبر معاملي GET pricefrom و priceto عند...

JCEzploit-CVE-2026-48907

JCEzploit Joomla-JCE-Sicherheitstest-Framework Ein professionelles Kommandozeilen-Dienstprogramm für autorisierte Penetrationstests, kontrollierte Schwachstellenforschung und defensive Validierung. Nur für autorisierte Nutzung. Führen Sie dieses Projekt ausschließlich gegen Systeme aus, die Ihnen...