Arbitrary-File-Delete โ€” PoC Archivehttps://poc.intelseclab.com/tags/arbitrary-file-delete/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Joomla Novarain Framework (nrframework) Unauthenticated Arbitrary File Inclusion โ€” CVE-2026-21627https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-21627-joomla-nrframework-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-21627-joomla-nrframework-rce/Critical severity (CVSS 9.5) โ€” web ยท CVE-2026-21627. Status: Weaponized. Affects: plg_system_nrframework (Tassos/Novarain Framework) Joomla plugin, bundled with Convert Forms, Engage Box, Google Structured Data, and other Tassos.gr extensions. Tags: joomla, nrframework, file-inclusion, unauthenticated, arbitrary-file-upload, arbitrary-file-delete, php, cms.webCriticaljoomlanrframeworkfile-inclusionunauthenticatedarbitrary-file-uploadarbitrary-file-deletephpcms