Attributed metadata history
Up to 100 retained publisher events per page for c34ae7da716d036c232c503ece283404d4cc6166258620c2778b6005a86fd815. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_dd4a4c98d64bc46b3f
observed · 2026-10-12 15:55:04 UTC
available
Fingerprint: 412205efeb4951e4cf52e76cd81d6198ec880146f81b3192d0a4bbd93bc7c1d1
intelligence_src_dd4a4c98d64bc46b3f
observed · 2026-10-12 15:55:04 UTC
VulnCheck's Initial Access Intelligence team details an unauthenticated JSON CRUD API in the JCTables component for Joomla whose escape helper trusts any value already wrapped in single quotes, turning one URL into arbitrary SQL read and write and, through a borrowed admin session, into remote code execution.
Fingerprint: de855c0e21491328f3954189ee24861e046a79638784b59b9fd8aa525f4fed66