CVE-2020-15148-bypasses

CVE-2020-15148-bypasses Several bypasses for CVE-2020-15148 Yii2 deserialization poc1 This one is exploitable in version 2.0.37, fixed in 2.0.38, which was assigned CVE-2020-15148. The following three are bypasses. checkAccess = 'system'; $this-id = 'ls'; namespace Faker use yii\rest\CreateAction...

backcookie

backcookie Small backdoor using cookie. ========== Example one: python backcookie.py -u http://target.com/shell.php -c namecookie Example two: python backcookie.py --url http://target.com/shell.php --cookie namecookie Custom command binfo, You get objective information @pwned:$ binfo Custom comma...

CVE-2025-7384

CVE-2025-7384 — PHP Object Injection to RCE Plugin: Database for Contact Form 7 contact-form-entries ≤ 1.4.3 CVSS: 9.8 Critical CWE: CWE-502 — Deserialization of Untrusted Data Authentication Requirement: None Unauthenticated Impact: Remote Code Execution Table of Contents 1. Vulnerability Overvi...

CVE-2025-12973

S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator = 1.7.7 - Authenticated Editor+ Arbitrary File Upload The WordPress S2B AI Assistant plugin versions 2.47 and prior contains an arbitrary file upload vulnerability that allows authenticated WordPress users with Editor role or...

CVE-2026-3891

Pix for WooCommerce = 1.5.0 - Unauthenticated Arbitrary File Upload CVE-2026-3891 PoC 📜 Description CVE-2026-3891 is an unauthenticated arbitrary file upload vulnerability in the Pix for WooCommerce WordPress plugin. The plugin exposes an AJAX endpoint lknpixforwoocommercec6savesettings that...

PHP_CVE-2012-1823

PHP-CGI Remote Code Execution Vulnerability CVE-2012-1823 Principle Reference article http://eindbazen.net/2012/05/php-cgi-advisory-cve-2012-1823/ Affected versions: php Vulnerability Analysis PHP SAPI and Operation Modes First, let's introduce the operation modes of PHP. Download the PHP source...

CVE-2021-43617

CVE-2021-43617 This is a reproduction of PHP Laravel 8.70.1 - Cross Site Scripting XSS to Cross Site Request Forgery CSRF vulnerability Description The vulnerability exploits the fact that we can bypass laravel image file upload functionality to upload arbitary files on the web server which let u...

CVE-2026-61511-PoC-Exploit

CVE-2026-61511 – vBulletin Pre‑Auth RCE Exploit & Verifier ETHICAL USE ONLY – AUTHORIZED SECURITY TESTING This repository provides tools for authorized security professionals, blue teams, and penetration testers only. Unauthorized access to computer systems is illegal under CFAA US, Computer Misu...

CVE-2023-4542

poc The D-LINK-DAR-8000-10 Online behavior audit gateway has rce vulnerabilities official website:http://www.dlink.com.cn/ version:D-LINK DAR-8000-10 See the login page. Construct url:...

wp2shell-scan

wp2shell-scan A scanner and proof-of-concept toolkit for CVE-2026-63030 wp2shell, a pre-authenticated remote code execution vulnerability in WordPress core Features Two non-destructive detection methods: --check-type time-based SLEEP timing and --check-type error-based TRUE/FALSE/broken...

CVE-2026-22200

CVE-2026-22200: osTicket PDF File Read + CNEXT RCE Proof of concept exploit for osTicket CVE-2026-22200 which abuses PHP filters to exfiltrate files through the mPDF library and can be chained to RCE via CVE-2024-2961 CNEXT. Blog Post Deep-dive here: Horizon3.ai - Ticket to Shell: Exploiting PHP...

CVE-2020-13405

CVE-2020-13405 Base Score: 7.5 HIGH🟥 MicroWeber is an open-source Content Management System CMS written in PHP. It allows web administrators to easily build a website by dragging and dropping components where they want them to be. It is a popular choice among those looking to start a website that...

CVE-2023-36845

CVE-2023-36845 A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to control certain environments variables. Script Usage $ dos2unix CVE-2023-36845.sh $ CVE-2023-36845.sh example.co...

CVE-2020-8644-PlaySMS-1.4

CVE-2020-8644-PlaySMS-1.4 Python script to exploit PlaySMS before 1.4.3 Execution Open a port on your machine: And the execute exploit.py: ./exploit.py Changing the exploit Tou may want to change the reverse shell created by exploit.py To do this, you can change the function createrevshellencoded...

flashsploit

Exploitation Framework for ATtiny85 HID Attacks Twitter - Telegram - Blog Available in Flashsploit is an Exploitation Framework for Attacks using ATtiny85 HID Devices such as Digispark USB Development Board, flashsploit generates Arduino IDE Compatible .ino Scripts based on User Input and then...

CVE-2026-58025

CVE-2026-58025 — MediaWiki PHP Deserialization RCE via Log Entry Import WikiImporter → LogEntryBase::extractParams → unserialize user-controlled logparams → RCE Overview CVE-2026-58025 is a critical CVSS 9.8 deserialization of untrusted data vulnerability in MediaWiki Wikimedia Foundation. The...

Test-7-2-0-PHP-CVE-2018-5711

This repository does not have a README...

CVE-2022-30887

CVE-2022-30887 Pharmacy Management System 1.0 Shell Upload This application built by Mayurik Pharmacy management system project in PHP has been developed to improve the accuracy and efficiency of pharmaceutical stores through security and management. In short, it is a product inventory applicatio...

juicy-php

juicy-php Juicy-php - finds PHP info files with juicy information...

Public_Exploit-1--Wordpress-CVE-2021-29447

PublicExploit-1--Wordpress-CVE-2021-29447 CVE-2021-29447 is an authenticated XML External Entity XXE vulnerability in WordPress The vulnerability exists in the WordPress Media Library when WordPress is running on PHP 8 and the user has permission to upload media files. A specially crafted .wav fi...