php-cgi-Injector

PHP-CGI Injector 🚀 CVE-2024-4577 & CVE-2024-8926 Exploit Tool Automated testing tool for PHP-CGI parameter injection vulnerabilities , supporting CVE-2024-4577 and CVE-2024-8926 , with capabilities for command execution, file upload, download , etc. 📌 Introduction This tool can be used to test...

CVE-2021-25790-Multiple-Stored-XSS

CVE-2021-25790-Multiple-Stored-XSS: Multiple Stored XSS in House Rental and Property Listing V1.0 Software Link: https://www.sourcecodester.com/download-code?nid=14649&title=House+Rental+and+Property+Listing+in+PHP+with+Full+Source+Code https://vulners.com/cve/CVE-2021-25790...

CVE-2024-1874

CVE-2024-1874 Proof Of Concept for CVE-2024-1874 Command Injection via Array-ish $command Parameter of procopen bypass CVE-2024-1874 fix The CVE: In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, the fix for CVE-2024-1874 does not work if the command name includes trailin...

PHPunit-Exploit

PHPunit Explotador + Comprobador CVE-2017-9841 Resumen : PHPUnit es un marco de pruebas unitarias para el lenguaje de programación PHP. Esta es una arquitectura xUnit de muestra para un marco de pruebas unitarias que se originó con SUnit y se popularizó con JUnit. PHPUnit fue creado por Sebastian...

CVE-2020-13756-env

CVE-2020-13756 Vulnerable Environment Vulnerable test environment for CVE-2020-13756 - Sabberworm PHP CSS Parser Remote Code Execution. Vulnerability Details Field| Value ---|--- CVE| CVE-2020-13756 Product| Sabberworm PHP CSS Parser Vulnerable Versions| getSelectorsBySpecificity' ' . $GET'n'; //...

cve-2024-4577

CVE-2024-4577 Vulnerability Test Script This Python script is a simple Proof of Concept PoC tool for diagnosing the latest PHP vulnerability CVE-2024-4577. ⚠️ This tool is provided for security assessment purposes and should only be used on systems you own or targets with prior authorization. 📌...

CVE-2024-39210

CVE ID CVE-2024-39210 PRODUCT Best house rental management system VERSION =1.0 PROBLEM TYPE Incorrect Access Control Description Best House Rental Management System v1.0 was discovered to contain an arbitrary file read vulnerability via the Page parameter at index.php. This vulnerability allows...

0-click-RCE-Exploit-for-CVE-2024-51791

CVE-2024-51791 / 0-Click RCE Exploit Author: Joshua Provoste https://x.com/JoshuaProvoste/status/1858910306140893268 This repository contains a proof-of-concept exploit for CVE-2024-51791, an unauthenticated arbitrary file upload vulnerability in a vulnerable WordPress forms plugin, leading to...

CVE-2023-30253-exploit

CVE-2023-30253 — Dolibarr ERP/CRM 17.0.0 Remote Code Execution PHP code injection exploit for Dolibarr ERP/CRM v17.0.0 that allows obtaining a reverse shell as www-data user via the Website/CMS module. ⚠️ For educational purposes and authorized audits only. 📑 Table of Contents What is...

CVE-2026-105830

The league/commonmark library (versions 2.0.0 before 2.10.2 ) is vulnerable to a quadratic-time denial of service (DoS) attack within the GitHub Flavored Markdown Table extension. The issue resides in the TableStartParser::tryStart() block-start scan, where unauthenticated attackers can submit a ...

CVE-2026-105830 league/commonmark 2.0.0 before 2.10.2 Quadratic DoS via TableStartParser

league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability in the GitHub Flavored Markdown Table extension's TableStartParser::tryStart block-start scan. Unauthenticated attackers can submit a large paragraph of pipe-free lines not starting with letters,...

CVE-2026-105830

league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability in the GitHub Flavored Markdown Table extension's TableStartParser::tryStart block-start scan. Unauthenticated attackers can submit a large paragraph of pipe-free lines not starting with letters,...

CVE-2026-105830 league/commonmark 2.0.0 before 2.10.2 Quadratic DoS via TableStartParser

league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability in the GitHub Flavored Markdown Table extension's TableStartParser::tryStart block-start scan. Unauthenticated attackers can submit a large paragraph of pipe-free lines not starting with letters,...

EUVD-2026-95017

league/commonmark from 2.0.0 before 2.10.2 contains a quadratic-time denial of service vulnerability in the GitHub Flavored Markdown Table extension's TableStartParser::tryStart block-start scan. Unauthenticated attackers can submit a large paragraph of pipe-free lines not starting with letters,...

Python-CVE-2020-25213

Python-CVE-2020-25213 Python Interactive Exploit for WP File Manager Vulnerability. The File Manager wp-file-manager plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to have the .php...

CVE-2024-4577

CVE-2024-4577 Argument injection vulnerability in PHP INSTALL git clone https://github.com/didarul342/CVE-2024-4577.git cd CVE-2024-4577 pip3 install -r requirements.txt USAGE Scan A Target python3 CVE-2024-4577.py -t https://160.153.61.66/ -c "" Scan a list of Targets python3 CVE-2024-4577.py -f...

CVE-2024-4577

CVE-2024-4577 A Proof of Concept developed by @watchTowr exploiting the PHP CGI Argument Injection vulnerability CVE-2024-4577 to obtain RCE on a vulnerable PHP version running in a Windows environment. Detailed technical analysis for this vulnerability Orange Tsi 🍊 This vulnerability was found b...

CVE-2024-46377

CVE-2024-46377 PoC for Arbitrary File Upload Vulnerability in Best House Rental Management System 1.0 Overview This Python script demonstrates how to exploit the arbitrary file upload vulnerability in Best House Rental Management System 1.0. The vulnerability allows an attacker to upload a...

CVE-2021-3007-docker-poc

CVE-2021-3007 — Laminas/Zend HTTP Deserialization RCE This repository contains a fully reproducible Proof-of-Concept and Nuclei exploit template for CVE-2021-3007, a critical PHP deserialization vulnerability in Zend\Http\Response\Stream laminas-http Nuclei exploit template ├── docker-compose.yml...

CVE-2026-46275

CVE-2026-46725 — TYPO3 ceselector Extension RCE PHP Object Injection viaunserialize Cookie Bypass → Remote Code Execution 📋 Table of Contents About the Vulnerability Technical Details Requirements Installation Usage Examples Output Format How It Works References Legal Disclaimer 🔍 About the...