CVE-2023-4220-Proof-of-concept

CVE-2023-4220-概念実証 Chamilo LMS の未認証の大きなファイルアップロード機能により、リモートコード実行が可能 このコードは HACKTHEBOX CTF PERMX のために作成・使用されています Chamilo LMS v1.11.24 以下の /main/inc/lib/javascript/bigupload/inc/bigUpload.php における大きなファイルアップロード機能の未認証ファイルアップロードにより、任意のファイルをサーバーにアップロードでき、PHPリバースシェルをアップロードすることが可能です。...

CVE-2025-49132-PHP-PEAR

CVE-2025-49132: PHP PEAR メソッドによる Pterodactyl Panel の未認証 RCE 目次 概要 脆弱性の詳細 技術的分析 エクスプロイトの流れ インストール 使用方法 使用例 緩和策 免責事項 参考情報 作者 概要 このリポジトリには、CVE-2025-49132 の概念実証（PoC）エクスプロイトが含まれています。これは、Pterodactyl Panel バージョン 1.11.11 未満における重大な未認証リモートコード実行の脆弱性です。 Pterodactyl Panel は、PHP...

CVE-2026-93957

A vulnerability has been found in olivier-ls PHP-FTS up to 1.1.3. This affects the function SearchEngine::matchesSingleFilter of the file src/SearchEngine.php of the component Filter Matching. The manipulation leads to incorrect comparison. Remote exploitation of the attack is possible. The explo...

Cacti cmd_realtime.php - Command Injection

Cacti provides an operational monitoring and fault management framework. A command injection vulnerability on the 1.3.x DEV branch allows any unauthenticated user to execute arbitrary command on the server when registerargcargv option of PHP is On. In cmdrealtime.php line 119, the $pollerid used ...

php-8.1.0-dev-exploit

php-8.1-dev-Exploit ⚠️ 重要（请先阅读） 本仓库包含一个 Java 概念验证（PoC），仅供 CTF / 实验环境使用。请勿对非您拥有或未经明确书面授权测试的系统运行此代码。未经授权的利用行为属违法行为。请仅在隔离环境（虚拟机、容器、私有 CTF/HTB 靶机）中使用。 前置条件 已安装 Java JDK（8+）（javac 和 java 已加入 PATH） 攻击机与目标机之间存在网络连通性（实验室 / CTF 网络） 在主机上准备好一个用于接收反向 shell 的监听器（例如 nc -lvnp ），并在尝试 PoC 前在单独的终端中运行。...

CVE-2026-93957 olivier-ls PHP-FTS Filter Matching SearchEngine.php matchesSingleFilter comparison

A vulnerability has been found in olivier-ls PHP-FTS up to 1.1.3. This affects the function SearchEngine::matchesSingleFilter of the file src/SearchEngine.php of the component Filter Matching. The manipulation leads to incorrect comparison. Remote exploitation of the attack is possible. The explo...

CVE-2026-93957 olivier-ls PHP-FTS Filter Matching SearchEngine.php matchesSingleFilter comparison

A vulnerability has been found in olivier-ls PHP-FTS up to 1.1.3. This affects the function SearchEngine::matchesSingleFilter of the file src/SearchEngine.php of the component Filter Matching. The manipulation leads to incorrect comparison. Remote exploitation of the attack is possible. The explo...

CVE-2026-93957 olivier-ls PHP-FTS Filter Matching SearchEngine.php matchesSingleFilter comparison

A vulnerability has been found in olivier-ls PHP-FTS up to 1.1.3. This affects the function SearchEngine::matchesSingleFilter of the file src/SearchEngine.php of the component Filter Matching. The manipulation leads to incorrect comparison. Remote exploitation of the attack is possible. The explo...

EUVD-2026-83636

A vulnerability has been found in olivier-ls PHP-FTS up to 1.1.3. This affects the function SearchEngine::matchesSingleFilter of the file src/SearchEngine.php of the component Filter Matching. The manipulation leads to incorrect comparison. Remote exploitation of the attack is possible. The explo...

CVE-2026-93957

CVE-2026-93957 affects olivier-ls PHP-FTS up to version 1.1.3. The vulnerability resides in the SearchEngine::matchesSingleFilter function within src/SearchEngine.php, part of the Filter Matching component. The root cause is an incorrect comparison (loose comparison leading to a filter bypass, CW...

EUVD-2026-83622

A flaw has been found in olivier-ls PHP-FTS up to 1.1.2. Affected by this issue is the function SearchEngine::buildHighlights of the file src/SearchEngine.php of the component Search Engine. Executing a manipulation of the argument Query can lead to cross site scripting. The attack may be launche...

CVE-2024-52433

CVE-2024-52433 My Geo Posts Free = 1.2 - 認証されていないPHPオブジェクトインジェクション 説明 WordPress用プラグイン My Geo Posts Free には、バージョン 1.2 まで（1.2...

CVE-2026-85017: Deserialization of Untrusted Data

The Unlimited Elements For Elementor WordPress plugin before 2.0.20 does not perform a capability check on an AJAX action and deserializes attacker-controlled stored data through it, which makes it possible for authenticated attackers with subscriber-level access to inject arbitrary PHP objects. ...

CVE-2026-94104: Unrestricted Upload of File with Dangerous Type

NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi endpoint that fails to validate file extensions for new filenames or when chunks parameter is 2 or higher. Attackers with view-only back-office access can upload PHP files to the web-accessible...

CVE-2026-93957: Incorrect Comparison

A vulnerability has been found in olivier-ls PHP-FTS up to 1.1.3. This affects the function SearchEngine::matchesSingleFilter of the file src/SearchEngine.php of the component Filter Matching. The manipulation leads to incorrect comparison. Remote exploitation of the attack is possible. The explo...

CVE-2026-88856: Improper Control of Generation of Code

Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla 6.2.7 - The extensions updateOSGallery, reached via task=updateosgallery, read a JSON request body and called the value of a method field as a live PHP function, passi...

CVE-2026-93956

A flaw has been found in olivier-ls PHP-FTS up to 1.1.2. Affected by this issue is the function SearchEngine::buildHighlights of the file src/SearchEngine.php of the component Search Engine. Executing a manipulation of the argument Query can lead to cross site scripting. The attack may be launche...

CVE-2026-93956

CVE-2026-93956 is a cross-site scripting (XSS) vulnerability in the SearchEngine::buildHighlights function of src/SearchEngine.php in the PHP-FTS library (olivier-ls/php-fts) versions up to 1.1.2 . Manipulating the Query argument allows an attacker to inject malicious scripts, which execute in th...

CVE-2026-93956 olivier-ls PHP-FTS Search SearchEngine.php buildHighlights cross site scripting

A flaw has been found in olivier-ls PHP-FTS up to 1.1.2. Affected by this issue is the function SearchEngine::buildHighlights of the file src/SearchEngine.php of the component Search Engine. Executing a manipulation of the argument Query can lead to cross site scripting. The attack may be launche...

CVE-2026-93956 olivier-ls PHP-FTS Search SearchEngine.php buildHighlights cross site scripting

A flaw has been found in olivier-ls PHP-FTS up to 1.1.2. Affected by this issue is the function SearchEngine::buildHighlights of the file src/SearchEngine.php of the component Search Engine. Executing a manipulation of the argument Query can lead to cross site scripting. The attack may be launche...