Team IT Security (TSEC) Nachrichtenportal Logo

🕵️ Local File Inclusion in Joomla HTMLView Layout Parameter


Nachrichtenbereich: 🕵️ Sicherheitslücken
🔗 Quelle: portal.patchman.co

Joomla's HtmlView::loadTemplate() sanitized the file and tpl parameters but left the caller-controllable $layoutTemplate (often originating from URL input) unvalidated. An attacker could supply a... [Weiterlesen]

Sharing is caring on Social Media

Reddit
Telegram
LinkedIn
Xing
Twitter
Whatsapp
Facebook
Flipboard

🕵️ [20260304] - Core - XSS vectors in various article title outputs


📈 1870.73 Punkte
🕵️ Sicherheitslücken

🕵️ [20260518] - Core - Transport encryption downgrade for password and username reset links


📈 1855.45 Punkte
🕵️ Sicherheitslücken

🕵️ [20260501] - Core - XSS in feed modules


📈 1679.84 Punkte
🕵️ Sicherheitslücken

🕵️ SQL Injection in Joomla Tags Component


📈 1656.93 Punkte
🕵️ Sicherheitslücken

🕵️ Cross-Site Scripting in Joomla InputFilter cleanAttributes


📈 1511.85 Punkte
🕵️ Sicherheitslücken

🕵️ [20260102] - XSS vectors in the pagebreak and pagenavigation plugins


📈 1427.86 Punkte
🕵️ Sicherheitslücken

🕵️ [20250901] - Inadequate content filtering within the checkAttribute filter code


📈 1382.05 Punkte
🕵️ Sicherheitslücken

🕵️ Local File Inclusion in Joomla HTMLView Layout Parameter


📈 1117.84 Punkte
🕵️ Sicherheitslücken

🕵️ Incorrect Cache Key Construction in Joomla InputFilter


📈 1107.16 Punkte
🕵️ Sicherheitslücken

🕵️ Cross-Site Scripting in Joomla Content History Preview


📈 595.58 Punkte
🕵️ Sicherheitslücken

🕵️ Incorrect Access Control in Joomla Sample Data Plugins


📈 587.94 Punkte
🕵️ Sicherheitslücken

🕵️ [20260504] - Core - XSS in readmore links


📈 580.31 Punkte
🕵️ Sicherheitslücken

🕵️ [20260508] - Core - Improper access check in com_config webservice endpoints


📈 580.31 Punkte
🕵️ Sicherheitslücken

🕵️ [20260513] - Core - Privilege escalation through com_users batch task


📈 580.31 Punkte
🕵️ Sicherheitslücken

🕵️ [20260502] - Core - XSS in com_associations


📈 580.31 Punkte
🕵️ Sicherheitslücken

🕵️ [20260510] - Core - Path traversal in com_media webservice endpoint


📈 580.31 Punkte
🕵️ Sicherheitslücken

🕵️ [20260303] - XSS vector in com_associations comparison view


📈 549.76 Punkte
🕵️ Sicherheitslücken

🕵️ [20260306] - Core - Improper access check in webservice endpoints


📈 549.76 Punkte
🕵️ Sicherheitslücken

🕵️ Incorrect Access Control in com_ajax


📈 549.76 Punkte
🕵️ Sicherheitslücken

🕵️ [20260302] - Core - SQL injection in com_content articles webservice endpoint


📈 549.76 Punkte
🕵️ Sicherheitslücken

🕵️ Incorrect Access Control in Joomla Scheduler Component


📈 542.13 Punkte
🕵️ Sicherheitslücken

🕵️ [20260514] - Core - Privilege escalation through com_users webservice endpoints


📈 526.86 Punkte
🕵️ Sicherheitslücken

🕵️ [20260511] - Core - MFA Authentication Bypass


📈 481.04 Punkte
🕵️ Sicherheitslücken

🕵️ [20250902] - User-Enumeration in passkey authentication method


📈 473.41 Punkte
🕵️ Sicherheitslücken

🕵️ [20260101] - Inadequate content filtering for data URLs


📈 419.96 Punkte
🕵️ Sicherheitslücken

🕵️ MFA Authentication Bypass on Login in Joomla


📈 374.15 Punkte
🕵️ Sicherheitslücken

🔧 Analyzing ZIP Encryption: When to Act


📈 326.37 Punkte
🔧 Programmierung

🔧 Supabase Managing database migrations across multiple environments (Local, Staging, Production)


📈 246.68 Punkte
🔧 Programmierung

🔧 Self-Hosting Codecov with GitLab Using Terraform: A Practical Deployment Guide


📈 245.96 Punkte
🔧 Programmierung

🔧 The Complete Git Command Reference: Mastering Version Control from Basics to Advanced


📈 245.49 Punkte
🔧 Programmierung

🔧 Part 09: Building a Sovereign Software Factory: Monitoring with Prometheus & Grafana


📈 201.82 Punkte
🔧 Programmierung

🔧 Deploying Joomla CMS: Two Tier Architecture on AWS With EC2 and RDS


📈 192.65 Punkte
🔧 Programmierung

🕵️ VulnHub — Shenron: 1 | Full Walkthrough


📈 184.08 Punkte
🕵️ Hacking

🔧 Pingora Guide - How To Make A Programmable API Gateway


📈 176.54 Punkte
🔧 Programmierung

📰 Schneider Electric devices using CODESYS Runtime


📈 164.63 Punkte
📰 IT Security Nachrichten