AI Midnight
·
History
·
Weekly reports
·
The five risk categories
·
Methodology
·
Sources
·
Glossary
·
Why AIs differ
·
Analyst track record
·
Who are the analysts?
·
Methods log
·
Experiments and rules fixed in advance
·
Corrections and replaced versions
·
What changed this week
·
Weighting simulator
·
Public API and widgets
·
System status
·
About
·
Compare two weeks
·
Timeline of AI developments
·
JJ HUB
·
Newsletter
·
Open data
·
Public predictions
·
Verify a publication
·
My alerts
·
Ask the watch
·
Legal notice
·
Privacy
IT security watch
·
Daily digests archive
·
Story timeline
·
Compare days
·
Newly exploited vulnerabilities
·
Last hour
·
What changed since yesterday
·
Am I exposed?
·
Security of the AI ecosystem
·
Track record
·
Vendors and weakness types
·
Security methodology
·
Security sources
·
Security watch status
·
About the security watch
balbooa
7 published stories · 1 KEV
CVE-2026-102425 — CVE-2026-102425 — Joomla Extension - balbooa.com - Unauthenticated RCE via field shortcode injection in Balbooa Forms < 2.4.3.4… (37/100)
CVE-2026-101127 — CVE-2026-101127 — Joomla Extension - balbooa.com - Unauthenticated upload filename stored XSS in Balbooa Forms < 2.4.3.4 - The… (33/100)
CVE-2026-65884 — CVE-2026-65884 — Joomla Extension - balbooa.com - Privilege Escalation in Gridbox < 2.20.2 - The registration method allows us… (39/100)
CVE-2026-65887 — CVE-2026-65887 — Joomla Extension - balbooa.com - Unauthenticated arbitrary password reset in Gridbox < 2.20.2 - The resetPass… (39/100)
CVE-2026-65888 — CVE-2026-65888 — Joomla Extension - balbooa.com - Account takeover vulnerability in Gridbox < 2.20.2 - The socialLogin method… (39/100)
CVE-2026-65890 — CVE-2026-65890 — Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2 - Multiple SQLi vectors al… (35/100)
CVE-2026-56291 — Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability (68/100)