CVE-2023-23752

CVE-2023-23752 Joomla Unauthorized Access Vulnerability CVE-2023–23752 This readme file provides information about the Joomla Unauthorized Access Vulnerability CVE-2023–23752 and how to detect. This vulnerability allows an attacker to bypass the Joomla access control system and gain unauthorized...

rapidscan

🟥 RapidScan v1.2 - The Multi-Tool Web Vulnerability Scanner RapidScan has been ported to Python3 i.e. v1.2. The Python2.7 codebase is available on v1.1 releases section. Download and use it if you still haven't upgraded to Python 3. Kindly note that the v1.1 Python2.7 will not be enhanced further...

CVE-2026-48908-SP-Page-Builder-Joomla

CVE-2026-48908: SP Page Builder Joomla Unauthenticated RCE Proof of Concept exploit for CVE-2026-48908, an unauthenticated Remote Code Execution vulnerability in Joomla SP Page Builder component. Vulnerability Overview CVE-2026-48908 is a critical security vulnerability that allows unauthenticate...

CVE-2019-10945

Code Conversion to Python 3 This code is taken from Joomla! Core 1.5.0 - 3.9.4 - Directory Traversal / Authenticated Arbitrary File Deletion and was converted to Python 3 to suit the exercise in Academy for Module "Attacking Commoon Applications" and section "Attacking Joomla". The original code...

cve-2017-8917

CVE-2017-8917 This is part of Cved: a tool to manage vulnerable docker containers. Cved: https://github.com/git-rep-src/cved Image source: https://github.com/cved-sources/cve-2017-8917 Image author: https://github.com/Medicean/VulApps/tree/master/j/joomla/2...

CVE-2023-23752

CVE-2023-23752 Joomla! v4.2.8 - Unauthenticated information disclosure To execute this script, we need to install few missing gems: root@kitploit: sudo gem install httpx sudo gem install docopt sudo gem install paint root@kitploit: ruby exploit.rb http://dev.devvortex.htb...

PageBuilderCK-CVE-2026-56290-Exploit

Page Builder CK — fonts.save RCE Probe CVE-2026-56290 BlackHat Team proof-of-concept scanner for the Joomla Page Builder CK fonts.save vulnerability. POC CVE-2026-56290 Author: @mrzblackhat Team: BlackHat Team Credits: Peyman Siyahi · MR.PERSIA Overview This tool probes Joomla sites running the...

CVE-2026-48908

🚨 CVE-2026-48908 — Full Server Compromise via Arbitrary File Upload Critical Unauthenticated File Upload → Remote Code Execution RCE A critical vulnerability in SP Page Builder allows unauthenticated attackers to upload arbitrary files and achieve Remote Code Execution RCE , potentially leading t...

CVE-2017-8917-Joomla-370-SQL-Injection

This repository does not have a README...

Joomblah

Joomblah Exploit for Joomla 3.7.0 CVE-2017-8917 Explanation about the vulnerability: https://blog.sucuri.net/2017/05/sql-injection-vulnerability-joomla-3-7.html Code modification Modification in line 46 root@kitploit: ... result += value.decode'utf-8' ... Usage Point the joomblah.py script at the...

CVE-2023-23752

This is a POC for CVE-2023-23752 written in Python that displays username and password information. CVE-2023-23752 Joomla! 4.0.0 4.2.8 Usage = python3 exploit.py The execution of the script is demonstrated in the GIF below:...

CVE-2023-23752-Docker

CVE-2023-23752 Joomla Unauthorized Access Vulnerability CVE-2023-23752 Dockerized Installation Recommended automatic 1. Clone this repo git clone https://github.com/karthikuj/CVE-2023-23752-Docker.git 2. Change directory cd CVE-2023-23752-Docker 3. Run ./setup.sh 4. Open your browser and go to...

CVE-2023-23752-Python

CVE-2023-23752-Python root@kitploit: usage: CVE-2023-23752.py -h url Joomla! 4.2.8 - Unauthenticated information disclosure positional arguments: url Root URL base path including HTTP scheme, port, and root folder options: -h, --help show this help message and exit...

CVE-2026-56291

CVE-2026-56291 — Balbooa Forms Joomla Mass RCE Exploit Pre-Auth form.uploadAttachmentFile → No CSRF → PHP Upload Overview CVE-2026-56291 is a critical CVSS 9.8 unauthenticated arbitrary file upload vulnerability in the Balbooa Forms combaforms Joomla extension 2.4.1. The form.uploadAttachmentFile...

CVE-2026-48907

CVE-2026-48907 — Joomla JCE Unauthenticated RCE Lab PSsec Educational security research lab for CVE-2026-48907. Overview CVE-2026-48907 is a critical CVSS 10.0 unauthenticated remote code execution vulnerability in JCE Joomla Content Editor , the most widely installed editor extension for Joomla,...

CVE-2018-8045

CVE-2018-8045 Joomla core SQL injection vulnerability principle and poc...

setup-cve-2015-8562

Joomla! RCE CVE 2015-8562 Docker compose file to setup environment for CVE 2015-8562 testing Table of Contents 1. About The Project 2. Getting Started Prerequisites Installation 3. Usage 4. Contributing 5. License About The Project This project includes a Docker compose file to setup environment...

CVE-2023-23752_Joomla

CVE-2023-23752 Joomla! v4.2.8 - Unauthenticated Information Disclosure A proof-of-concept for CVE-2023-23752 Joomla! v4.2.8 - Unauthenticated Information Disclosure. For versions 4.0.0 4.2.8 it means from 4.0.0 up to 4.2.7. Getting Started Executing program With python3 root@kitploit: python3...

rsfiles-CVE-2026-57827

CVE-2026-57827 — RSFiles! 未授权文件上传 → RCE 免责声明 — 仅限授权使用。 这是一个概念验证 ，用于安全研究与防御性测试 。 你只能在自己拥有或获得明确书面许可 的系统上使用它。 未经同意对第三方进行滥用是违法的。负责任披露立场请参阅 SECURITY.md。 针对 Joomla 的 RSFiles! （comrsfiles）组件中 CVE-2026-57827 的漏洞利用程序 + 独立检测器，影响版本 1.17.12（已在 1.17.12 中修复，CVSS 9.8 / 10.0）。 前端上传分为两个任务： 1. rsfiles.checkupload ...

CVE-2023-27842

CVE-2023-27842 eXtplorer 2.1.15 – Insecure Permissions following Remote Code Execution Authenticated Vendor Homepage: http://extplorer.net/ Software Link: http://extplorer.net/attachments/download/99/eXtplorer2.1.15.zip Version: 2.1.15 Installation root@kitploit: git clone...