Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Loglama.net TurkHotspot allows Reflected XSS. This issue affects TurkHotspot: through 2026-10-02. NOTE: The vendor was contacted and it was learned that the product is not supported.
[POC] GHSA-8gj2-2cvc-6xx7 — rsfiles-CVE-2026-57827
Unauthenticated File Upload → RCE PoC for CVE-2026-57827 (RSFiles! Joomla < 1.17.12). Authorized security research use only.
[POC] CVE-2026-57829 — CVE-2026-57829
Unauthenticated Stored XSS in Joomla Helix Ultimate (JoomShaper) <= 2.2.6
[POC] GHSA-3whf-vgf2-9w6g — CVE-2026-57827
Demonstrate the unauthenticated remote code execution vulnerability in the RSFiles! Joomla component through an arbitrary file upload.
[POC] GHSA-3whf-vgf2-9w6g — CVE-2026-57827
CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE. Split-controller upload bypass. CVSS 9.8 | CWE-434 | com_rsfiles < 1.17.12
[POC] GHSA-8qqm-fp2q-v734 — CVE-2026-57821-PoC-Exploit
🔐 CVE-2026-57821 - Apache Fineract SQL Injection Toolkit (Educational) 📚 Two Python scripts for authorized security testing: verifier.py (safe detection, no extraction) and exploit.py (deep analysis). Supports 11 DB types. Perfect for understanding SQL injection vulnerabilities. ⚠️ for educational & research purposes only.
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Get alerted for CVEs like this
Register your stack and get notified within minutes when a matching CVE drops.
Start monitoring free