CVE-2026-79700

Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass via Request-Controlled CAPTCHA Configuration in SP Page Builder Pro 5.1.4 - 6.9.0 - The optinform addon read the CAPTCHA type, the expected answer and the enabled flag from the request rather than from the stored addon...

CVE-2026-79701 Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass in Module Context in the Contact, Opt-in and Form Builder Addons in SP Page Builder Pro 3.2.6 - 6.9.0

Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass in Module Context in the Contact, Opt-in and Form Builder Addons in SP Page Builder Pro 3.2.6 - 6.9.0 - In the ajaxcontact, optinform and formbuilder addons, the result returned by the CAPTCHA plugin's onCheckAnswer event was...

CVE-2026-79700 Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass via Request-Controlled CAPTCHA Configuration in SP Page Builder Pro 5.1.4 - 6.9.0

Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass via Request-Controlled CAPTCHA Configuration in SP Page Builder Pro 5.1.4 - 6.9.0 - The optinform addon read the CAPTCHA type, the expected answer and the enabled flag from the request rather than from the stored addon...

CVE-2025-6440-Poc-Exploit

WC Designer Pro — 인증되지 않은 임의 파일 업로드 보안 연구 개념 증명 WC Designer Pro WordPress 플러그인에 영향을 미치는 인증되지 않은 임의 파일 업로드 취약점에 대한 비파괴적 개념 증명입니다. 목차 취약점 개요 보안 영향 영향을 받는 버전 근본 원인 공격 흐름 요구 사항 설치 사용 방법 기술적 세부 사항 안전한 검증 노출 지표 수정 조치 법적 및 윤리적 사용 공개 상태 참고 자료 크레딧 취약점 개요 WC Designer Pro에는 WordPress의 admin-ajax.php 엔드포인트를 ...

pmp-exploit

pmp-exploit このエクスプロイトは、Password Manager Pro 内で発見された特権昇格の脆弱性を利用して、一般ユーザーを SuperAdmin に昇格させ、アプリケーション内に保存されているパスワードやファイルをダウンロードします。 影響を受けるシステム root@kitploit: 製品 : ManageEngine Password Manager Pro 会社 : ZOHO Corp. ビルド番号 : 8.1 およびおそらくそれ以前のバージョン 影響を受けるバージョン : 8102 およびおそらくそれ以前のバージョン 使用方法...

CVE-2026-88853

Joomla Extension - regularlabs.com - Privileged stored XSS via event handler option in Modals Pro extension for Joomla 17.0.0 - Modals Pro intentionally supports JavaScript Events such as on-open and on-closed. Affected versions do not distinguish trusted extension configuration from event code...

CVE-2025-6934

CVE-2025-6934 Opal Estate Pro에서 인증되지 않은 권한 상승 설명 CVE-2025-6934는 Opal Estate Pro WordPress 플러그인≤ v1.7.5의 치명적인 취약점입니다. 이 버그는 인증되지 않은 공격자 가 조작된 요청을 다음 URL로 전송하여 새로운 관리자 계정을 생성할 수 있게 합니다: root@kitploit: /wp-admin/admin-ajax.php?action=opalestate\register\form 근본 원인은 등록 과정에서 nonce...

CVE-2026-88852

CVE-2026-88852 is a privileged stored XSS in the Snippets Free (Joomla < 7.0.0) and Snippets Pro (Joomla

EUVD-2026-77313

Joomla Extension - regularlabs.com - Authenticated, privileged remote code execution in Conditional Content extension for Joomla 8.0.0 - Conditional Content Pro accepts inline PHP Condition Rules in article syntax. In affected versions, the PHP is passed to the Conditions evaluator without checki...

CVE-2026-85192 Joomla Extension - regularlabs.com - Authenticated, privileged remote code execution in Conditional Content extension for Joomla < 8.0.0

Joomla Extension - regularlabs.com - Authenticated, privileged remote code execution in Conditional Content extension for Joomla 8.0.0 - Conditional Content Pro accepts inline PHP Condition Rules in article syntax. In affected versions, the PHP is passed to the Conditions evaluator without checki...

CVE-2026-85192

The Conditional Content Pro extension for Joomla (by regularlabs.com) suffers from an authenticated, privileged remote code execution flaw in versions prior to 8.0.0 . The extension accepts inline PHP Condition Rules in article syntax and passes them to its Conditions evaluator without verifying ...

CVE-2026-88853

Modals Pro is a Joomla extension by regularlabs.com that supports JavaScript event handlers such as on-open and on-closed . Affected versions (prior to 17.0.0 ) fail to distinguish trusted extension configuration from event code supplied in ordinary article content, allowing a lower-privileged au...

CVE-2026-88853 Joomla Extension - regularlabs.com - Privileged stored XSS via event handler option in Modals Pro extension for Joomla < 17.0.0

Joomla Extension - regularlabs.com - Privileged stored XSS via event handler option in Modals Pro extension for Joomla 17.0.0 - Modals Pro intentionally supports JavaScript Events such as on-open and on-closed. Affected versions do not distinguish trusted extension configuration from event code...

CVE-2026-88853 Joomla Extension - regularlabs.com - Privileged stored XSS via event handler option in Modals Pro extension for Joomla < 17.0.0

Joomla Extension - regularlabs.com - Privileged stored XSS via event handler option in Modals Pro extension for Joomla 17.0.0 - Modals Pro intentionally supports JavaScript Events such as on-open and on-closed. Affected versions do not distinguish trusted extension configuration from event code...

EUVD-2026-77309

Joomla Extension - regularlabs.com - Privileged stored XSS via event handler option in Modals Pro extension for Joomla 17.0.0 - Modals Pro intentionally supports JavaScript Events such as on-open and on-closed. Affected versions do not distinguish trusted extension configuration from event code...

gemini-2.5-pro-nf-tables-red-teamin

gemini-2.5-pro-nf-tables-red-teamin Google Gemini 2.5 Proの安全性アライメントポリシー、ガードレール、及び拒否行動の進化に関する、レガシーなLinuxカーネルの脆弱性プリミティブ（CVE-2023-32233）を文書化した技術的ケーススタディとタイムラインデータセットです。 ケーススタディウェブサイトへのリンク : https://destawell.github.io/gemini-2.5-pro-nf-tables-red-teamin/...

CVE-2025-6440

🧨 CVE-2025-6440 – WooCommerce Designer Pro 無制限ファイルアップロード wcdpsavecanvasdesignajax を介した認証なしの任意ファイルアップロード WooCommerce Designer Pro プラグイン – リモートコード実行（RCE） 📖 説明 WordPress 用 WooCommerce Designer Pro プラグインには、AJAX アクション wcdpsavecanvasdesignajax にの脆弱性が存在します。攻撃者は認証なしで任意のファイル（悪意のある PHP...

By-Poloss..-..CVE-2026-7515-PoC

CVE-2026-7515: BetterDocs Pro = 3.8.0 - 인증되지 않은 로컬 파일 포함 개요...

PT-2026-91165

Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass via Request-Controlled CAPTCHA Configuration in SP Page Builder Pro 5.1.4 - 6.9.0 - The optin form addon read the CAPTCHA type, the expected answer and the enabled flag from the request rather than from the stored addon...

About the security content of visionOS 27

About the security content of visionOS 27 This document describes the security content of visionOS 27. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...