Search: “Joomla”

44 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 44 Malware 26 Exploit / PoC 22 Advisory 11 Ransomware 11 Threat actor 5 Data breach 5 AI tools & infra 2 Research 1 Tools 1 Industry 1 Phishing & fraud 1 Policy & legal 1

SeverityAll critical 49 high 43 medium 31 low 5 info 3

Joomla 3.8.4 release addresses three XSS and SQL Injection vulnerabilities

Security AffairsFeb 8, 11:33 UTC · Feb 8, 2018Vulnerability CVE-2018-6376

35

Two Critical Vulnerabilities Patched in Joomla 3.6.4. Update it asap!

Security AffairsOct 26, 06:15 UTC · Oct 26, 2016Vulnerability CVE-2016-8870 CVE-2016-8869

60

Massive hacking campaign on Joomla sites via recently patched flaws

Security AffairsOct 31, 08:37 UTC · Oct 31, 2016Vulnerability in the wildCVE-2016-8870 CVE-2016-8869

60

Joomla Joomla! Two Critical Flaws Discovered — Update to Protect Your Site

The Hacker NewsOct 25, 14:50 UTC · Oct 25, 2016Vulnerability CVE-2016-8870 CVE-2016-8869

60

Critical SQL Injection CVE-2017-8917 vulnerability patched in Joomla, update it now!

Security AffairsMay 18, 07:39 UTC · May 18, 2017Vulnerability CVE-2017-8917 CVE-2016-8870 CVE-2016-8869

60

Multiple XSS flaws in Joomla can lead to remote code execution

Security AffairsFeb 22, 15:14 UTC · Feb 22, 2024Vulnerability CVE-2024-21722 CVE-2024-21723 CVE-2024-21724+3 CVEs

47

Latest Joomla 3.7.1 Release Patches Critical SQL Injection Attack

The Hacker NewsMay 18, 07:41 UTC · May 18, 2017Vulnerability CVE-2017-8917

60

Most unpatched Joomla sites compromised in latest wave of attacks

Help Net SecurityOct 31, 00:00 UTC · Oct 31, 2016Vulnerability in the wildCVE-2016-8870 CVE-2016-8869

60

Joomla vulnerability can be exploited to hijack sites, so patch now!

Help Net SecurityDec 15, 00:00 UTC · Dec 15, 2016Vulnerability CVE-2016-9838

60

Joomla users: Update immediately to kill severe SQLi vulnerability

Help Net SecurityOct 15, 09:22 UTC · Oct 15, 2018Vulnerability CVE-2017-8917

35

China-Nexus TAG-112 Compromises Tibetan Websites to Distribute Cobalt Strike

Recorded FutureAug 21, 00:00 UTC · Aug 21, 2025Vulnerability

42

Surging CMS attacks keep SQL injections on the radar during the next normal

Help Net SecurityNov 14, 09:12 UTC · Nov 14, 2023Vulnerability

42

Shell No! Adversary Web Shell Trends and Mitigations (Part 1)

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Vulnerability

42

VMware Alert: Uninstall EAP Now - Critical Flaw Puts Active Directory at Risk

The Hacker NewsFeb 22, 02:28 UTC · Feb 22, 2024Vulnerability CVE-2024-22245 CVE-2024-22250 CVE-2024-21726

60

Pavlov’s Digital House: Russia Focuses Inward for Vulnerability Analysis

Recorded FutureNov 21, 00:00 UTC · Nov 21, 2025Vulnerability CVE-2018-8148

60

API Threats Surge to 40,000 Incidents in 1H 2025

Infosecurity MagazineSep 16, 10:45 UTC · Sep 16, 2025Vulnerability

42

China-linked group hacked Tibetan media and university sites to distribute Cobalt Strike payload

The RecordNov 13, 03:38 UTC · Nov 13, 2024Vulnerability

30

Argus: Open-source information gathering toolkit

Help Net SecurityOct 23, 00:00 UTC · Oct 23, 2024Vulnerability

30

VexTrio: The Uber of Cybercrime

The Hacker NewsJan 29, 03:44 UTC · Jan 29, 2024Vulnerability

30

CISA Flags 6 Vulnerabilities - Apple, Apache, Adobe, D

The Hacker NewsJan 17, 01:51 UTC · Jan 17, 2024Vulnerability in the wildCVE-2023-27524 CVE-2023-38203 CVE-2023-29300+3 CVEs1

60

Friday Squid Blogging: Underwater Sculptures Use Squid Ink for Coloring

Schneier on SecurityDec 15, 00:00 UTC · Dec 15, 2023Vulnerability1

30

New Hacker Group 'GambleForce' Tageting APAC Firms Using SQL Injection Attacks

The Hacker NewsDec 15, 00:00 UTC · Dec 15, 2023Vulnerability CVE-2023-23752

47

GambleForce Group Targets Websites With SQL Injection

Infosecurity MagazineDec 14, 10:00 UTC · Dec 14, 2023Vulnerability

30

The Wild West of drive-by cryptocurrency mining

Help Net SecurityNov 21, 07:41 UTC · Nov 21, 2023Vulnerability

30

Vulnerability in popular ‘libwebp’ code more widespread than expected

The RecordSep 27, 18:08 UTC · Sep 27, 2023Vulnerability in the wildCVE-2023-4863 CVE-2023-5129 CVE-2023-41064

60

Watch out! CVE-2023-5129 in libwebp library affects millions apps

Security AffairsSep 27, 13:35 UTC · Sep 27, 2023Vulnerability in the wildCVE-2023-5129 CVE-2023-4863 CVE-2023-41064+1 CVEs1

60

Strapi releases update addressing two bugs that lead to data exposure

The RecordJan 13, 00:00 UTC · Jan 13, 2023Vulnerability CVE-2022-30617 CVE-2022-30618

35

CMS-based sites under attack: The latest threats and trends

Help Net SecurityMay 3, 00:00 UTC · May 3, 2022Vulnerability

42

Drupal-based sites open to attack via double extension files (CVE-2020-13671)

Help Net SecurityNov 25, 07:22 UTC · Nov 25, 2020Vulnerability in the wildCVE-2020-13671

60

Substantial Rise in Attacks on Orgs’ Web Apps Last Year

Infosecurity MagazineAug 7, 09:30 UTC · Aug 7, 2020Vulnerability in the wild

60

The cybercrime ecosystem: attacking blogs

Kaspersky SecurelistNov 21, 10:00 UTC · Nov 21, 2019Vulnerability

42

phpMyAdmin Releases Critical Software Update — Patch Your Sites Now!

The Hacker NewsDec 11, 15:49 UTC · Dec 11, 2018Vulnerability CVE-2018-19968 CVE-2018-19969 CVE-2018-19970

60

Comodo CA acquires CodeGuard

Help Net SecurityAug 17, 00:00 UTC · Aug 17, 2018Vulnerability

30

Prowli Operation - Crooks already compromised over 40,000 servers and IoT Devices

Security AffairsJun 7, 06:27 UTC · Jun 7, 2018Vulnerability CVE-2018-7482 CVE-2014-2623

47

Better code won't save developers in the short run

Help Net SecurityApr 26, 00:00 UTC · Apr 26, 2018Vulnerability

55

Critical Flaw Reported In phpMyAdmin Lets Attackers Damage Databases

The Hacker NewsJan 2, 18:35 UTC · Jan 2, 2018Vulnerability

55

Qualys brings web application security automation to a new level

Help Net SecurityFeb 13, 00:00 UTC · Feb 13, 2017Vulnerability

55

Donald Trump appoints a CyberSecurity Advisor Whose Own Site is Damn Vulnerable

The Hacker NewsJan 15, 00:00 UTC · Jan 15, 2017Vulnerability

30

Critical Updates — RCE Flaws Found in SwiftMailer, PhpMailer and ZendMail

The Hacker NewsJan 5, 07:21 UTC · Jan 5, 2017Vulnerability CVE-2016-10033 CVE-2016-10045 CVE-2016-10074+1 CVEs

60

Critical RCE vulnerabilities affect SwiftMailer, PhpMailer and ZendMail

Security AffairsJan 3, 13:26 UTC · Jan 3, 2017Vulnerability CVE-2016-10033 CVE-2016-10045 CVE-2016-10074+1 CVEs

60