CVE-2026-48939

CVE-2026-48939 — Exploit RCE per iCagenda Joomla Caricamento file arbitrario senza autenticazione → Esecuzione codice PHP Panoramica CVE-2026-48939 è una vulnerabilità critica con CVSS 10.0 nell'estensione iCagenda events calendar per Joomla. La funzionalità di allegato file del modulo di...

CVE-2023-23752

CVE-2023-23752 Codice di exploit per la divulgazione di informazioni in Joomla, scritto in C++...

PageBuilderCK-CVE-2026-56290-Exploit

Page Builder CK — Sonda RCE fonts.save CVE-2026-56290 BlackHat Team scanner proof-of-concept per la vulnerabilità fonts.save di Joomla Page Builder CK. POC CVE-2026-56290 Autore: @mrzblackhat Team: BlackHat Team Crediti: Peyman Siyahi · MR.PERSIA Panoramica Questo strumento sonda i siti Joomla ch...

JoomlaCVE20168869

Exploit para Joomla 3.4.4 - 3.6.4 CVE-2016-8869 e CVE-2016-8870 com web shell via upload de arquivo Esta é uma versão em PHP, o código-fonte original em Python é fornecido por @link https://github.com/XiphosResearch/exploits/tree/master/Joomraa Uso: php exploit.php --username hacker -p password -...

CVE-2026-48907-Joomla-JCE-detection

Joomla JCE CVE-2026-48907 — Validazione PoC, Artefatti Webshell e Rilevamento SOC Rapporto di validazione difensiva e note di rilevamento orientate al SOC per CVE-2026-48907 che interessa Joomla Content Editor JCE versioni fino alla 2.9.99.4. Scopo del repository Questo repository documenta una...

CVE-2023-23752

Questa è una POC per CVE-2023-23752 scritta in Python che mostra le informazioni relative a nome utente e password. CVE-2023-23752 Joomla! 4.0.0 4.2.8 Usage = python3 exploit.py L'esecuzione dello script è dimostrata nella GIF seguente:...

CVE-2026-48907

CVE-2026-48907 — Joomla JCE Laboratorio RCE non autenticato PSsec Laboratorio educativo di ricerca sulla sicurezza per CVE-2026-48907. Panoramica CVE-2026-48907 è una vulnerabilità critica CVSS 10.0 di esecuzione di codice remoto non autenticata in JCE Joomla Content Editor , l'estensione editor...

CVE-2019-6263-Joomla-POC

CVE-2019-6263-Joomla-POC...

rapidscan

🟥 RapidScan v1.2 - The Multi-Tool Web Vulnerability Scanner RapidScan has been ported to Python3 i.e. v1.2. The Python2.7 codebase is available on v1.1 releases section. Download and use it if you still haven't upgraded to Python 3. Kindly note that the v1.1 Python2.7 will not be enhanced further...

CVE-2015-8562

CVE-2015-8562 - Reverse shell python Exploit: Joomla 1.5 - 3.4.5 Object Injection RCE header X-Forwarded-For: root@kitploit: Data vulnerabilità: 12/17/2015 Autore exploit: anarc0der Versione: Joomla 1.5 a 3.4.5 CVE : CVE-2015-8562 Come usare: root@kitploit: Apri un terminale e mettiti in ascolto...

CVE-2026-48908-PoC

CVE-2026-48908 — SP Page Builder Joomla RCE non autenticata Proof-of-concept per CVE-2026-48908 , una vulnerabilità critica CVSS 4.0 = 10.0 di esecuzione di codice in remoto non autenticata nel componente SP Page Builder comsppagebuilder per Joomla, di JoomShaper...

CVE-2026-21627---Tassos-Novarain-Framework-plg_system_nrframework-Exploit---Joomla

CVE-2026-21627 Nicht authentifizierte beliebige Dateieinbindung im Novarain Framework von Joomla nrframework Überblick Eine kritische Schwachstelle im Tassos/Novarain Framework plgsystemnrframework Joomla-Plugin ermöglicht es nicht authentifizierten Angreifern, beliebige PHP-Dateien auf dem Serve...

CVE-2026-77989

Joomla Extension - joomlaeventmanager.net - Reflected XSS via the PDF export link in Joomla Events Manager 5.0.1 - buildCurrentPdfLink copies the current request query string into the PDF button URL, and pdfbutton echoes it unescaped, leading to an reflected XSS vector...

CVE-2026-77035

Joomla Extension - joomlaeventmanager.net - Cross-user event and venue takeover through forged form fields in Joomla Event Manager 5.0.1 - A registered user with edit-own rights the eventowner=1 setting or core.edit.own can POST another user's record id together with their own id as createdby and...

CVE-2026-77990

Joomla Extension - joomlaeventmanager.net - Attendee lists readable by any logged-in user in Joomla Event Manager 5.0.1 - A non-manager can therefore read attendee names, usernames, registration dates and statuses for events they do not manage, including lists belonging to unpublished events...

CVE-2026-77991

Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager 5.0.1 - The administrator source model allows to write dangerous file type incl. PHP, leading to remote code execution...

CVE-2026-77034

Joomla Extension - joomlaeventmanager.net - Unauthenticated article overwrite and force-publish in Joomla Event Manager 5.0.1 - Any visitor holding their own session token can republish and overwrite an article associated with an event...

CVE-2026-77991 Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager < 5.0.1

Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager 5.0.1 - The administrator source model allows to write dangerous file type incl. PHP, leading to remote code execution...

CVE-2026-77991

Joomla Event Manager (a Joomla extension from joomlaeventmanager.net) versions prior to 5.0.1 are vulnerable to privileged remote code execution due to a flaw in the administrator source model , which allows writing dangerous file types including PHP. An authenticated attacker with high privilege...

EUVD-2026-66866

Joomla Extension - joomlaeventmanager.net - Privileged remote code execution in Joomla Event Manager 5.0.1 - The administrator source model allows to write dangerous file type incl. PHP, leading to remote code execution...