CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence…
Tag: CVE-2026-48908
SP Page Builder: JoomShaper Page Builder
SP Page Builder by JoomShaper is a Joomla page builder affected by CVE-2026-48908, an unrestricted file upload vulnerability allowing unauthenticated PHP code…
CVE-2026-48908 — JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability
JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with…
ChocoPoC RAT Targets Researchers via Fake PoC Exploit Repos on GitHub
Attackers are distributing a data-stealing trojan named ChocoPoC through fake proof-of-concept (PoC) exploit repositories on GitHub, specifically targeting vulnerability researchers. The malware,…