JCS

JCS Joomla Component Scanner made for penetration testing purpose on Joomla CMS JCS can help you with the latest component vulnerablities and exploits. Database can update from several resources and a Crawler has been implemented to find components and component's link. This version supports...

JoomlaScan

Joomla Scan A free and open source software to find the components installed in Joomla CMS, built out of the ashes of Joomscan. Features Scanning the Joomla CMS sites in search of components/extensions database of more than 600 components; Locate the browsable folders of component Index of ...;...

CVE-2017-18345-COM_JOOMANAGER-ARBITRARY-FILE-DOWNLOAD

COMJOOMANAGER 2.0 - DESCARGA ARBITRARIA DE ARCHIVOS Recolectando bases de datos en masa con el plugin: COMJOOMANAGER, del CMS: Joomla. Proyecto desarrollado en python 2.x. Para más información, accede al video de YouTube. CVE: 2017-18345 Riesgo : Alto riesgo de seguridad 0day.Today-ID: 29950...

CVE-2026-48907-

CVE-2026-48907 — Joomla JCE Editor Unauthenticated RCE Scanner & Exploit CVSS 10.0 | CWE-284 | CISA KEV | EPSS 80% A Python-based vulnerability scanner and exploitation tool for CVE-2026-48907 , a critical unauthenticated remote code execution vulnerability in the JCE Joomla Content Editor...

joombrute

JoomBrute Toolkit moderno per attacchi di autenticazione Joomla J3 / J4 / J5 - CVE-2023-23752 · CVE-2023-23755 · CVE-2025-25227 Descrizione Toolkit per attacchi alle credenziali Joomla che copre le versioni CMS 3, 4 e 5. Sei sottocomandi gestiscono l'intera catena di attacco end-to-end: detect -...

CVE-2026-48909

CVE-2026-48909 — SP LMS PHP Object Injection → RCE Nicht authentifizierte Remote Code Execution durch PHP Object Injection in JoomShaper SP LMS comsplms ≤ 4.1.3 für Joomla CMS. Autor: Amin İsayev / Proxima Cyber Security Überblick SP LMS ist eine beliebte Joomla-Lernmanagement-Erweiterung von...

CVE-2017-9934

CVE-2017-9934 Sono il segnalatore di questo exploit, con il nome: Envo PoC dell'exploit CSRF di Joomla 1.7.3 - 3.7.2 Questa vulnerabilità è dovuta al fatto che le versioni di Joomla dalla 1.7.3 alla 3.7.2 non sanitizzano l'input base64. Headers: root@kitploit: POST...

CVE-2023-23752

CVE-2023-23752 semplice script bash per CVE-2023-23752 joomla CMS Puoi usare l'opzione -u per specificare un singolo URL o l'opzione -l per fornire un file contenente un elenco di URL per testare l'endpoint vulnerabile. Questo script salva tutti i dati delle risposte HTTP e mostra le informazioni...

CVE-2023-23752

CVE-2023-23752 Descrição Este repositório contém scripts Python e Bash que servem como portas do Proof of Concept PoC original escrito em Ruby para a vulnerabilidade CVE-2023-23752 no Joomla! CMS versões 4.0.0 a 4.2.7 feito por 'noraj' Alexandre ZANNI. Foi identificada uma falha de controle de...

The vulnerability of the Phoca Cart component in the Joomla content management system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Phoca Cart component in the Joomla content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Exploit for Improper Access Control in Widgetfactorylimited Jce

─── CVE-2026-48907 ─── 🏴 AMN SECURITY 🏴 مركز أب...

Joomla! CMS 跨站脚本漏洞

Joomla! CMS is a content management system developed under the open source Joomla! framework. Joomla! CMS has a cross-site scripting vulnerability, which stems from the lack of output escaping. This vulnerability may lead to cross-site scripting attacks through the "readmore" link in the comconte...

Joomla! CMS 安全漏洞

Joomla! CMS is a content management system developed under the open source Joomla! framework. There is a security vulnerability in Joomla! CMS, which stems from the InputFilter::getInstance method omitting secure-sensitive parameters from the instance cache key...

Joomla! CMS 安全漏洞

Joomla! CMS is a content management system developed under the open source Joomla! framework. The Joomla! CMS has a security vulnerability, which stems from the password and username reset function creating plaintext HTTP links for HTTPS connections when a mandatory SSL flag is not set...

Joomla! CMS 访问控制错误漏洞

Joomla! CMS is a content management system developed under the open source Joomla! framework. The Joomla! CMS has a vulnerability related to access control, which stems from improper access checks. This vulnerability allows for privilege escalation through the comusers batch task...

Joomla! CMS 访问控制错误漏洞

Joomla! CMS is a content management system developed under the open source Joomla! framework. The Joomla! CMS has a vulnerability related to access control, which stems from improper access checks. As a result, users with low privileges can edit the task types of existing scheduling programs...

Joomla! CMS 跨站请求伪造漏洞

Joomla! CMS is a content management system developed under the open source Joomla! framework. Joomla! CMS has a cross-site request forgeing vulnerability, which stems from the lack of CSRF token validation. This vulnerability may lead to cross-site request forgeing attacks at the comusers...

Joomla! CMS 路径遍历漏洞

Joomla! CMS is a content management system developed under the open source Joomla! framework. The Joomla! CMS has a path traversal vulnerability, which stems from improper validation of search parameters in the commedia file API endpoints, potentially leading to path traversal attacks...

Exploit for OS Command Injection in Gnu Bash

AppAssault Lab — Attacking Common Applications ╔═════...

Joomla! CMS 访问控制错误漏洞

Joomla! CMS is a content management system developed under the open source Joomla! framework. The Joomla! CMS has a vulnerability related to access control, which stems from improper access checks. This vulnerability may allow unauthorized access to web service endpoints...