20 matches found
masta-cve-2026-48907
MASTA CVE-2026-48907 Scanner Single-file, self-contained scanner for Joomla! JCE Editor Author: Hussein Mohamed masta ghimau !CAUTION 🚨 DISCLAIMER — READ BEFORE USE THIS IS AN INTRUSIVE SECURITY TESTING TOOL. root@kitploit: THIS TOOL IS FOR AUTHORIZED SECURITY ASSESSMENTS ONLY. Scanning systems y...
CVE-2026-48907
CVE-2026-48907 - Proof of Concept PoC ⚠️ Disclaimer This repository is created for educational and security research purposes only. The author does not condone or support any unauthorized or malicious use of this code. Use it only in environments where you have explicit permission to test security...
JCEzploit-CVE-2026-48907
JCEzploit Joomla JCE Security Testing Framework A professional command-line utility for authorized penetration testing, controlled vulnerability research, and defensive validation. Authorized use only. Run this project exclusively against systems you own or are explicitly permitted to test. Use a...
CVE-2026-48907
This repository does not have a README...
CVE-2026-48907
This repository does not have a README...
CVE-2026-48907-Joomla-JCE-detection
Joomla JCE CVE-2026-48907 — PoC Validation, Webshell Artifacts and SOC Detection Defensive validation report and SOC-oriented detection notes for CVE-2026-48907 affecting Joomla Content Editor JCE versions up to 2.9.99.4. Repository purpose This repository documents a controlled laboratory...
-CVE-2026-48907-
This repository does not have a README...
CVE-2026-48907_PoC
This repository does not have a README...
Exploit for Improper Access Control in Widgetfactorylimited Jce
-CVE-2026-48907- INSTRUKSI UNTUK PAKAI TOOLS MODIF: untuk mel...
Exploit for Improper Access Control in Widgetfactorylimited Jce
JCEzploit-CVE-2026-48907 JCEzploit is a powerful, fully-aut...
Joomla JCE_2.9.15 - Remote Code Execution
Exploit Title: Joomla JCE2.9.15 - Remote Code Execution Date: 2026-07-10 Exploit Author: K3ysTr0K3R Jared Brits Vendor Homepage: https://www.joomla.org/ Software Link: https://extensions.joomla.org/extension/jce/ Version: JCE 1.0.0 through 2.9.99.4 fixed in 2.9.99.5 Tested on: Joomla 3.10.11 / JC...
Joomla JCE 2.9.99.4 Remote Code Execution
The JCE Joomla Content Editor profile import functionality lacks proper authentication and CSRF protections. An unauthenticated attacker can upload a crafted XML file containing PHP code; the file is stored in the /tmp/ directory and can be accessed via HTTP, leading to remote code execution...
Joomla 2.9.99.4 - Unauthenticated Remote Code Execution
Exploit Title: Joomla 2.9.99.4 -Unauthenticated Remote Code Execution Date: 2026-07-10 Exploit Author: K3ysTr0K3R Jared Brits Vendor Homepage: https://www.joomla.org/ Software Link: https://extensions.joomla.org/extension/jce/ Version: JCE 1.0.0 through 2.9.99.4 fixed in 2.9.99.5 Tested on: Jooml...
📄 Joomla Content Editor 2.9.99.4 Shell Upload
This Metasploit module exploits an unauthenticated arbitrary profile creation vulnerability in the JCE Joomla Content Editor extension for Joomla!. The profiles.import task fails to enforce authentication, allowing the import of a crafted profile that is directly written to disk as a PHP web shel...
COM_JCE_VANDA
COMJCEVANDA - CVE-2026-48907 Exploit de upload de arquivo sem...
Exploit for Improper Access Control in Widgetfactorylimited Jce
Joomla JCE CVE-2026-48907 — PoC Validation, Webshell Artifacts...
Exploit for CVE-2026-48907
CVE-2026-48907 TODO - Init own cve ⚡ Simple Usage U...
Exploit for CVE-2026-48907
CVE-2026-48907 Educational PoC ⚠️ This repository is for ed...
CVE-2026-48907
A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution...
Joomla Content Editor Unauthenticated File Upload RCE
This module exploits an unauthenticated arbitrary profile creation vulnerability in the JCE Joomla Content Editor extension for Joomla! CVE-2026-48907. The profiles.import task fails to enforce authentication, allowing the import of a crafted profile that is directly written to disk as a PHP web...