Lucene search
+L

10 matches found

Kitploit
Kitploit
added 2026/09/14 11:37 p.m.6 views

masta-cve-2026-48907

MASTA CVE-2026-48907 Scanner Single-file, self-contained scanner for Joomla! JCE Editor Author: Hussein Mohamed masta ghimau !CAUTION 🚨 DISCLAIMER — READ BEFORE USE THIS IS AN INTRUSIVE SECURITY TESTING TOOL. root@kitploit: THIS TOOL IS FOR AUTHORIZED SECURITY ASSESSMENTS ONLY. Scanning systems y...

10CVSS8.4AI score0.781EPSS
SaveExploits28
Kitploit
Kitploit
added 2026/09/14 6:39 a.m.5 views

Joomla_CVE_2026_48907

MASTA CVE-2026-48907 Scanner Single-file, self-contained scanner for Joomla! JCE Editor Author: Alma !CAUTION 🚨 DISCLAIMER — READ BEFORE USE THIS IS AN INTRUSIVE SECURITY TESTING TOOL. root@kitploit: THIS TOOL IS FOR AUTHORIZED SECURITY ASSESSMENTS ONLY. Scanning systems you do NOT own or have...

10CVSS8.5AI score0.781EPSS
SaveExploits28
Kitploit
Kitploit
added 2026/09/08 6:58 p.m.4 views

CVE-2026-48907-

CVE-2026-48907 — Joomla JCE Editor Unauthenticated RCE Scanner & Exploit CVSS 10.0 | CWE-284 | CISA KEV | EPSS 80% A Python-based vulnerability scanner and exploitation tool for CVE-2026-48907 , a critical unauthenticated remote code execution vulnerability in the JCE Joomla Content Editor...

10CVSS8.4AI score0.781EPSS
SaveExploits28
Kitploit
Kitploit
added 2026/09/08 1:12 p.m.5 views

CVE-2026-48907

CVE-2026-48907 CVE-2026-48907 是 Joomla 的 JCE 编辑器扩展中的一个严重的不当访问控制漏洞。它允许未认证的攻击者创建新的编辑器配置文件,最终可能导致在受影响系统上任意上传 PHP 文件并执行远程代码。 此外,如果你想要 webshell,可以使用任意 webshell,只需将其重命名为 alfa.php 或使用自定义的 php 名称,但你必须更改 Python 代码中的名称,所以尽情享受吧。 另一件事:永远不要使用从垃圾 Python pypi 安装的 nuclei,始终使用 Go 版本的 nuclei 以获得更好的结果,使用 httpx...

10CVSS8.4AI score0.781EPSS
SaveExploits28
GithubExploit
GithubExploit
added 2026/07/13 1:23 p.m.83 views

Exploit for Improper Access Control in Widgetfactorylimited Jce

─── CVE-2026-48907 ─── 🏴 AMN SECURITY 🏴 مركز أب...

10CVSS7.4AI score0.781EPSS
SaveExploits28
GithubExploit
GithubExploit
added 2026/06/17 3:06 p.m.135 views

Exploit for CVE-2026-48907

CVE-2026-48907 CVE-2026-48907 is a critical improper acc...

10CVSS6.8AI score0.781EPSS
SaveExploits28
VulnCheck KEV
VulnCheck KEV
added 2026/06/12 12:00 a.m.30 views

VulnCheck KEV: CVE-2026-48907

A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution...

10CVSS5.3AI score0.781EPSS
SaveIn wildExploits28References24
ATTACKERKB
ATTACKERKB
added 2026/06/05 7:31 a.m.23 views

CVE-2026-48907

A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution...

10CVSS5.6AI score0.781EPSS
SaveIn wildExploits28References4Affected Software1
CVE
CVE
added 2026/06/05 7:31 a.m.637 views

CVE-2026-48907

CVE-2026-48907 — Joomla JCE extension unauthenticated RCE is a vulnerability in the Joomla Content Editor (JCE) that allows unauthenticated users to create editor profiles and upload PHP payloads, enabling remote code execution. Technical details across documents show an unrestricted file upload ...

10CVSS5.6AI score0.781EPSS
SaveIn wildExploits28References3Affected Software1
Joomla! Vulnerable Extensions List
Joomla! Vulnerable Extensions List
added 2018/01/31 12:00 a.m.29 views

JCE Editor,2.6.25, XSS (Cross Site Scripting)

JCE Editor Pro, Version 2.6.25 only, XSS Cross Site Scripting Resolution: update to 2.6.26 Update notice: https://www.joomlacontenteditor.net/news/jce-pro-2-6-26-released...

6.2AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder