17 matches found
CVE-2026-48907-Joomla-JCE-detection
Joomla JCE CVE-2026-48907 — PoC Validation, Webshell Artifacts and SOC Detection Defensive validation report and SOC-oriented detection notes for CVE-2026-48907 affecting Joomla Content Editor JCE versions up to 2.9.99.4. Repository purpose This repository documents a controlled laboratory...
CVE-2026-65891
CVE-2026-65891 — Joomla JCE Rename PoC Proof-of-concept scanner for CVE-2026-65891 in the Joomla Content Editor JCE extension. Improper input validation in the JCE file manager rename function allows an authenticated user with file-management permissions to: create hidden files dot-prefixed names...
CVE-2026-48907
CVE-2026-48907 - Joomla! JCE Unauthenticated RCE Joomla! JCE extension This tool is for educational and authorized testing purposes only. Use only on systems you own or have explicit permission to test The author is not responsible for any misuse or illegal activities Always obtain proper...
CVE-2026-48907
CVE-2026-48907 Educational PoC ⚠️ This repository is for educational and defensive security purposes only. Test only on systems you own or are explicitly authorized to assess. Do not use this project against third-party systems. This PoC demonstrates CVE-2026-48907, an unauthenticated RCE...
Exploit for Improper Access Control in Widgetfactorylimited Jce
CVE-2026-48907...
JCEzploit-CVE-2026-48907
JCEzploit Joomla JCE Security Testing Framework A professional command-line utility for authorized penetration testing, controlled vulnerability research, and defensive validation. Authorized use only. Run this project exclusively against systems you own or are explicitly permitted to test. Use a...
Joomla JCE 2.9.99.4 Unauthenticated Remote Code Execution
Joomla JCE versions through 2.9.99.4 contain an unauthenticated arbitrary file upload vulnerability in profile import functionality that can lead to remote code execution. The included proof of concept uploads and verifies a PHP shell on affected targets. https://packetstorm.news/download/236154...
Exploit for Improper Access Control in Widgetfactorylimited Jce
JCEzploit-CVE-2026-48907 JCEzploit is a powerful, fully-aut...
Exploit for Improper Input Validation in Widgetfactorylimited Jce
CVE-2026-65891 — Joomla JCE Rename PoC Proof-of-concept scann...
Exploit for Improper Access Control in Widgetfactorylimited Jce
CVE-2026-48907 — Joomla JCE Unauthenticated RCE Lab PSsec...
Exploit for Improper Access Control in Widgetfactorylimited Jce
CVE-2026-48907 – Joomla JCE Unauthenticated Remote Code Execut...
Joomla JCE < 2.9.99.5 - Unauthenticated RCE (CVE-2026-48907)
Exploits CVE-2026-48907 in Joomla JCE Editor 2.9.99.5: unauthenticated arbitrary file upload via profile import or JCE browser chain, followed by PHP webshell execution. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.protocols.http.httpclient import Httpclient from...
Exploit for Improper Access Control in Widgetfactorylimited Jce
MASTA CVE-2026-48907 Scanner Joomla! JCE 2.9.99.5 Unauthe...
Exploit for Improper Access Control in Widgetfactorylimited Jce
CVE-2025-48907 - Joomla! JCE Unauthenticated RCE Joomla! JCE e...
Exploit for Improper Access Control in Widgetfactorylimited Jce
Joomla JCE CVE-2026-48907 — PoC Validation, Webshell Artifacts...
CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added a maximum-severity security flaw impacting Widget Factory Joomla Content Editor JCE to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerability, tracked as...