PoC for CVE-2026-48907 - Joomla! JCE extension < 2.9.99.5 unauthenticated RCE
☆16Jun 11, 2026Updated 5 months ago
Alternatives and similar repositories for CVE-2026-48907
Users that are interested in CVE-2026-48907 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Cockpit: Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection☆15Apr 18, 2026Updated 6 months ago
- CVE-2023-34992: Fortinet FortiSIEM Command Injection Proof of Concept Exploit☆27May 21, 2024Updated 2 years ago
- Drupal Core PostgreSQL SQL Injection PoC - CVE-2026-9082. Ethical PoC for the Drupal vulnerability allowing anonymous SQL injection throu…☆24May 21, 2026Updated 5 months ago
- PoC for CVE-2026-2005☆27May 13, 2026Updated 5 months ago
- CVE-2026-45250: FreeBSD 14.4 setcred kernel buffer overflow (LPE)☆22Jul 23, 2026Updated 3 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Windfall - Unauthenticated RCE exploit chain for Windmill & Nextcloud Flow (CVE-2026-29059). Path traversal + credential leak + PostgreSQ…☆18Apr 7, 2026Updated 7 months ago
- A simple recon pipeline☆40Sep 24, 2026Updated last month
- This repository contains a proof-of-concept exploit script for CVE-2025-32432, a pre-authentication Remote Code Execution (RCE) vulnerabi…☆27Apr 27, 2025Updated last year
- This tool serves as an initial version scanner specifically designed for PrestaShop, a popular e-commerce platform. The primary purpose o…☆20Jun 2, 2025Updated last year
- Full and complete RCE exploit for Magento Polyshell☆30Apr 9, 2026Updated 7 months ago
- 编码解码工具☆21Jan 7, 2025Updated last year
- Download & Execute file using DigiSpark ATtiny85, RubberDucky, Arduino Pro Micro☆20Jan 10, 2025Updated last year
- This is an implementation of the SOCKS v5 server in the Go programming language.☆13Mar 13, 2021Updated 5 years ago
- PoC for CVE-2026-87902 — unauthenticated path traversal in WordPress page-template resolution (local PHP inclusion, conditional RCE) with…☆46Sep 22, 2026Updated last month
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Black Hat Asia 2026 Ghost Bits payload 生成工具☆14Apr 29, 2026Updated 6 months ago
- Exploit for CVE-2025-61882 (do not use without any written permission).☆11Oct 6, 2025Updated last year
- CVE-2024-8381: A SpiderMonkey Interpreter Type Confusion Bug.☆15Feb 12, 2025Updated last year
- Chrome MV3 parameter/endpoint/secret harvester for authorized web security testing (GAP-style + Next.js RSC path maps)☆12Sep 9, 2026Updated 2 months ago
- CVE-2023-22894☆13Apr 24, 2023Updated 3 years ago
- NextForge — unified Next.js exploitation framework. RCE · SSRF · middleware · authorized lab only.☆18Sep 23, 2026Updated last month
- This is a proof of concept for CVE-2024-20356, a Command Injection vulnerability in Cisco's CIMC.☆54Apr 18, 2024Updated 2 years ago
- A V8 Sandbox Escape Technique.☆20Feb 8, 2025Updated last year
- SuperShell AI is an advanced penetration testing tool that creates highly obfuscated PowerShell reverse shell payloads with integrated AI…☆12Oct 30, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- An offensive-security methodology that an AI coding agent can actually execute — 88 class docs, 6 agents, 24 scripts, evidence-first vali…☆27Nov 2, 2026Updated last week
- cobaltstrike4.5版本破/解、去除checksum8特征、bypass BeaconEye、修复错误路径泄漏stage、增加totp双因子验证、修复CVE-2022-39197等☆12Sep 22, 2022Updated 4 years ago
- sigtool for signed PE files in GO☆11May 15, 2019Updated 7 years ago
- ☆16Apr 17, 2026Updated 6 months ago
- TK-CVE-Repo☆50Jun 7, 2026Updated 5 months ago
- D-Link NAS CVE-2024-3273 Exploit Tool☆99Apr 7, 2024Updated 2 years ago
- 360网络空间测绘系统（Quake）API☆13Feb 15, 2021Updated 5 years ago
- Netlogon and CLDAP vulnerability research with a proof of concept.☆234Jun 2, 2026Updated 5 months ago
- WordPress Elementor 3.6.0 3.6.1 3.6.2 RCE POC☆17Apr 17, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- collection of various nuclei templates☆11Apr 18, 2023Updated 3 years ago
- Find world writable directories that contain a .exe or .dll file☆13Aug 31, 2021Updated 5 years ago
- A React/Next.js-aware secret hunter for single-page applications.☆20Sep 5, 2026Updated 2 months ago
- ☆114Aug 25, 2023Updated 3 years ago
- 7z exploit POC versions prior to 25.01☆32Aug 11, 2025Updated last year
- An AI-driven remote command execution platform built with Rust. VectorShell bridges AI agents and remote targets — run shell commands, ma…☆18Jun 24, 2026Updated 4 months ago
- 本项目集成了全网优秀的攻防武器工具项目，包含自动化利用，子域名、目录扫描、端口扫描等信息收集工具，各大中间件、cms漏洞利用工具，爆破工具、内网横向及免杀、社工钓鱼以及应急响应等资料。☆14Jun 30, 2023Updated 3 years ago
Are these results useful?