JCEzploit-CVE-2026-48907

JCEzploit Joomla JCE Security Testing Framework A professional command-line utility for authorized penetration testing, controlled vulnerability research, and defensive validation. Authorized use only. Run this project exclusively against systems you own or are explicitly permitted to test. Use a...

CVE-2026-48907

This repository does not have a README...

masta-cve-2026-48907

MASTA CVE-2026-48907 Scanner Single-file, self-contained scanner for Joomla! JCE Editor Author: Hussein Mohamed masta ghimau !CAUTION 🚨 DISCLAIMER — READ BEFORE USE THIS IS AN INTRUSIVE SECURITY TESTING TOOL. THIS TOOL IS FOR AUTHORIZED SECURITY ASSESSMENTS ONLY. Scanning systems you do NOT own o...

CVE-2026-48907

This repository does not have a README...

CVE-2026-48907-Joomla-JCE-detection

Joomla JCE CVE-2026-48907 — PoC Validation, Webshell Artifacts and SOC Detection Defensive validation report and SOC-oriented detection notes for CVE-2026-48907 affecting Joomla Content Editor JCE versions up to 2.9.99.4. Repository purpose This repository documents a controlled laboratory...

-CVE-2026-48907-

This repository does not have a README...

CVE-2026-48907_PoC

This repository does not have a README...

CVE-2026-48907

CVE-2026-48907 - Proof of Concept PoC ⚠️ Disclaimer This repository is created for educational and security research purposes only. The author does not condone or support any unauthorized or malicious use of this code. Use it only in environments where you have explicit permission to test security...

Exploit for Improper Access Control in Widgetfactorylimited Jce

-CVE-2026-48907- INSTRUKSI UNTUK PAKAI TOOLS MODIF: untuk mel...

Exploit for Improper Access Control in Widgetfactorylimited Jce

JCEzploit-CVE-2026-48907 JCEzploit is a powerful, fully-aut...

Joomla JCE_2.9.15 - Remote Code Execution

Exploit Title: Joomla JCE2.9.15 - Remote Code Execution Date: 2026-07-10 Exploit Author: K3ysTr0K3R Jared Brits Vendor Homepage: https://www.joomla.org/ Software Link: https://extensions.joomla.org/extension/jce/ Version: JCE 1.0.0 through 2.9.99.4 fixed in 2.9.99.5 Tested on: Joomla 3.10.11 / JC...

Joomla JCE 2.9.99.4 Remote Code Execution

The JCE Joomla Content Editor profile import functionality lacks proper authentication and CSRF protections. An unauthenticated attacker can upload a crafted XML file containing PHP code; the file is stored in the /tmp/ directory and can be accessed via HTTP, leading to remote code execution...

Joomla 2.9.99.4 - Unauthenticated Remote Code Execution

Exploit Title: Joomla 2.9.99.4 -Unauthenticated Remote Code Execution Date: 2026-07-10 Exploit Author: K3ysTr0K3R Jared Brits Vendor Homepage: https://www.joomla.org/ Software Link: https://extensions.joomla.org/extension/jce/ Version: JCE 1.0.0 through 2.9.99.4 fixed in 2.9.99.5 Tested on: Jooml...

📄 Joomla Content Editor 2.9.99.4 Shell Upload

This Metasploit module exploits an unauthenticated arbitrary profile creation vulnerability in the JCE Joomla Content Editor extension for Joomla!. The profiles.import task fails to enforce authentication, allowing the import of a crafted profile that is directly written to disk as a PHP web shel...

COM_JCE_VANDA

COMJCEVANDA - CVE-2026-48907 Exploit de upload de arquivo sem...

Exploit for Improper Access Control in Widgetfactorylimited Jce

Joomla JCE CVE-2026-48907 — PoC Validation, Webshell Artifacts...

Exploit for CVE-2026-48907

CVE-2026-48907 TODO - Init own cve ⚡ Simple Usage U...

Exploit for CVE-2026-48907

CVE-2026-48907 Educational PoC ⚠️ This repository is for ed...

CVE-2026-48907

A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution...

Joomla Content Editor Unauthenticated File Upload RCE

This module exploits an unauthenticated arbitrary profile creation vulnerability in the JCE Joomla Content Editor extension for Joomla! CVE-2026-48907. The profiles.import task fails to enforce authentication, allowing the import of a crafted profile that is directly written to disk as a PHP web...