475138 matches found
CVE-2026-65947
Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox 2.20.2...
CVE-2026-65947 Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox < 2.20.2
Joomla Extension - balbooa.com - Various CSRF vectors in the admin interface in Gridbox 2.20.2...
CVE-2026-65888 Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2
Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox 2.20.2 - The socialLogin method allows actors to login as any given user on the target site...
CVE-2026-65890 Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2
Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox 2.20.2 - Multiple SQLi vectors allow unauthenticated actors to inject SQL in queries...
CVE-2026-65890 Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2
Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox 2.20.2 - Multiple SQLi vectors allow unauthenticated actors to inject SQL in queries...
CVE-2026-66488 Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2
Joomla Extension - balbooa.com - Payment bypass in Gridbox 2.20.2...
CVE-2026-66488
Technical details about CVE-2026-66488 (affected Joomla Gridbox extension) are not publicly available in the provided documents. Monitor for updates.
CVE-2026-66488 Joomla Extension - balbooa.com - Payment bypass in Gridbox < 2.20.2
Joomla Extension - balbooa.com - Payment bypass in Gridbox 2.20.2...
EUVD-2026-50335
Joomla Extension - balbooa.com - Payment bypass in Gridbox 2.20.2...
EUVD-2026-50334
Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion 2.20.2 - The generateNewApp method allows actors to recursively delete directories...
CVE-2026-66490 Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox < 2.20.2
Joomla Extension - balbooa.com - Stored cross-site scripting via a comment avatar in Gridbox 2.20.2...
MINI-FVCR-FC73-R2W5
Bulletin has no description...
CVE-2026-55995 Double-free in the iSNS attribute decoder in open-iscsi
A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb...
CVE-2026-67215
The CVE-2026-67215 entry applies to cJSON 1.7.19 and earlier where applying an untrusted RFC 6902 JSON Patch via cJSONUtils_ApplyPatches() or cJSONUtils_ApplyPatchesCaseSensitive() can cause uncontrolled recursion, leading to stack exhaustion and DoS. The patch’s add and copy operations may graft...
CVE-2026-67215
cJSON through 1.7.19 is vulnerable to uncontrolled recursion leading to stack exhaustion when an untrusted RFC 6902 JSON Patch is applied via cJSONUtilsApplyPatches or cJSONUtilsApplyPatchesCaseSensitive. A patch containing add and copy operations grafts duplicated subtrees to amplify document...
CVE-2026-65891
Joomla Extension - joomlacontenteditor.net - Creation of hidden files and unintended file overwrite via rename function in Joomla Content Editor JCE 2.20.2 - Improper input validation in the file rename functionality allowed an authenticated user with file management permissions to rename files t...
CVE-2026-33385
A Blind SQL injection vulnerability has been identified in Quick.CMS. Improper neutralization of input provided by a high-privileged user into multiple fields in administration panel allows for Blind SQL Injection attacks. The vendor states that this administration panel already allows for...
EUVD-2026-50310
A Blind SQL injection vulnerability has been identified in Quick.CMS. Improper neutralization of input provided by a high-privileged user into multiple fields in administration panel allows for Blind SQL Injection attacks. The vendor states that this administration panel already allows for...
CVE-2026-33385 Blind SQL Injection in Quick.CMS
A Blind SQL injection vulnerability has been identified in Quick.CMS. Improper neutralization of input provided by a high-privileged user into multiple fields in administration panel allows for Blind SQL Injection attacks. The vendor states that this administration panel already allows for...