Files
PoC-in-GitHub/2026/CVE-2026-49049.json

295 lines
10 KiB
JSON
Raw Permalink Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
[
{
"id": 1289349374,
"name": "CVE-2026-49049",
"full_name": "shinthink\/CVE-2026-49049",
"owner": {
"login": "shinthink",
"id": 292174078,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/292174078?v=4",
"html_url": "https:\/\/github.com\/shinthink",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/shinthink\/CVE-2026-49049",
"description": "Read-only vulnerability scanner for CVE-2026-49049 — Helix3 Joomla plugin unauthenticated AJAX handler",
"fork": false,
"created_at": "2026-07-04T16:28:06Z",
"updated_at": "2026-09-04T07:13:19Z",
"pushed_at": "2026-07-04T23:04:41Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-49049",
"helix3",
"joomla",
"joomshaper",
"pentesting",
"python",
"security-tools",
"vulnerability-scanner"
],
"visibility": "public",
"forks": 0,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
{
"id": 1289985625,
"name": "asdsadsadasdasdsadsad",
"full_name": "frada321\/asdsadsadasdasdsadsad",
"owner": {
"login": "frada321",
"id": 290931784,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/290931784?v=4",
"html_url": "https:\/\/github.com\/frada321",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/frada321\/asdsadsadasdasdsadsad",
"description": " CVE-2026-49049 - Unauthenticated File Deletion, Arbitrary Write & XSS Injection for Helix3 Joomla Extension",
"fork": false,
"created_at": "2026-07-05T12:52:49Z",
"updated_at": "2026-07-05T12:56:01Z",
"pushed_at": "2026-07-05T12:55:57Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1296272977,
"name": "CVE-2026-49049",
"full_name": "Dr-D25\/CVE-2026-49049",
"owner": {
"login": "Dr-D25",
"id": 292827243,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/292827243?v=4",
"html_url": "https:\/\/github.com\/Dr-D25",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Dr-D25\/CVE-2026-49049",
"description": null,
"fork": false,
"created_at": "2026-07-10T08:26:45Z",
"updated_at": "2026-07-10T08:32:09Z",
"pushed_at": "2026-07-10T08:31:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1299672113,
"name": "CVE-2026-49049",
"full_name": "ExDev994\/CVE-2026-49049",
"owner": {
"login": "ExDev994",
"id": 258240664,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/258240664?v=4",
"html_url": "https:\/\/github.com\/ExDev994",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ExDev994\/CVE-2026-49049",
"description": "CVE-2026-49049 Helix3 (JoomShaper) Joomla Unauthenticated AJAX RCE Scanner",
"fork": false,
"created_at": "2026-07-13T19:38:34Z",
"updated_at": "2026-07-13T19:56:12Z",
"pushed_at": "2026-07-13T19:56:04Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1301141184,
"name": "Helix3-Mass-Exploiter",
"full_name": "6ickzone\/Helix3-Mass-Exploiter",
"owner": {
"login": "6ickzone",
"id": 208737148,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/208737148?v=4",
"html_url": "https:\/\/github.com\/6ickzone",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/6ickzone\/Helix3-Mass-Exploiter",
"description": "Mass Exploiter for CVE-2026-49049",
"fork": false,
"created_at": "2026-07-15T02:59:18Z",
"updated_at": "2026-09-21T14:44:26Z",
"pushed_at": "2026-09-21T14:40:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-49049",
"exploitation",
"file-upload",
"helix3",
"joomla-plugin",
"security",
"security-testing",
"unauthenticated"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1319761020,
"name": "CVE-2026-49049",
"full_name": "Jenderal92\/CVE-2026-49049",
"owner": {
"login": "Jenderal92",
"id": 59664965,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59664965?v=4",
"html_url": "https:\/\/github.com\/Jenderal92",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Jenderal92\/CVE-2026-49049",
"description": "Mass vulnerability scanner for CVE-2026-49049 – Unauthenticated Remote Code Execution in Joomla Helix3 plugin. Multi‑threaded, detects both executed and raw PHP payloads.",
"fork": false,
"created_at": "2026-08-02T02:42:32Z",
"updated_at": "2026-09-09T17:39:55Z",
"pushed_at": "2026-08-02T02:50:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-49049",
"directory-traversal",
"file-upload",
"helix3",
"joomla",
"mass-scanner",
"pentesting",
"security",
"unauthenticated",
"vulnerability-scanner"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1366811753,
"name": "CVE-2026-49049",
"full_name": "MataKucing-OFC\/CVE-2026-49049",
"owner": {
"login": "MataKucing-OFC",
"id": 72303820,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/72303820?v=4",
"html_url": "https:\/\/github.com\/MataKucing-OFC",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/MataKucing-OFC\/CVE-2026-49049",
"description": null,
"fork": false,
"created_at": "2026-09-12T00:39:46Z",
"updated_at": "2026-09-12T00:41:13Z",
"pushed_at": "2026-09-12T00:41:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1409676366,
"name": "CVE-2026-49049",
"full_name": "theendofabbys\/CVE-2026-49049",
"owner": {
"login": "theendofabbys",
"id": 266911070,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/266911070?v=4",
"html_url": "https:\/\/github.com\/theendofabbys",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/theendofabbys\/CVE-2026-49049",
"description": null,
"fork": false,
"created_at": "2026-10-08T03:35:47Z",
"updated_at": "2026-10-08T03:37:36Z",
"pushed_at": "2026-10-08T03:37:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]