Audit-BlackBox-Web-to-Root

Pentest Lab: Web and System Exploitation Chain Drupal to Root Disclaimer This project was carried out in a controlled and isolated laboratory environment for educational and academic purposes. No real infrastructure was targeted. The goal is to learn how to secure systems by understanding attack...

CVE-2026-44011-poc

CVE-2026-44011: Craft CMS 認証済み RCE PoC この Python スクリプトは、Craft CMS セキュリティアドバイザリで説明されている攻撃を応用したものです。認証済みの Craft ユーザーは、脆弱なフィールドレイアウト設定パスに到達し、サーバーにコマンドを実行させることができます。 対象範囲と要件 影響を受けるバージョンは Craft CMS =4.0.0, =5.0.0, 5.9.18 です。 このスクリプトは両方のホストで curl を必要とします。サーバー上では Bash を使用します。サーバー上の Python3 も対話型 PTY...

CVE-2026-44011-craftcms-auth-rce

CVE-2026-44011 Craft CMS 認証済み RCE PoC 許可されたテストでのみ使用してください。 Craft CMS のアドバイザリでは、影響を受けるバージョンとして =4.0.0, =5.0.0, ' -c '' 必須引数: -b, --base-url: Craft の URL http:// または https:// を含む。 -u, --username: コントロールパネルのユーザー名。 -p, --password: コントロールパネルのパスワード。 -c, --command: 実行し、出力を取得するコマンド。 任意引数: -P, --cp-path:...

CVE-2023-41892

CVE-2023-41892 - Craft CMS 원격 코드 실행 RCE 참조: https://github.com/advisories/GHSA-4w8r-3xrw-v25g https://securityonline.info/craft-cms-fixes-rce-cve-2023-41892-flaw-rated-10-out-of-10-on-severity-scale/ https://blog.calif.io/p/craftcms-rce...

CVE-2023-23752

CVE-2023-23752 説明 このリポジトリには、'noraj'（Alexandre ZANNI）によって作成された、Joomla! CMS バージョン4.0.0から4.2.7におけるCVE-2023-23752脆弱性のためのRuby製オリジナルProof of Concept（PoC）の移植版である、PythonおよびBashスクリプトが含まれています。アクセス制御の欠陥が特定され、重要なWebサービスエンドポイントへの不正アクセスにつながる可能性があります。この脆弱性は、攻撃者によって悪用され、機密情報への不正アクセスや不正な操作の実行を可能にする可能性があります。 使い方:...

CVE-2018-16763

CVE-2018-16763 CVE-2018-16763 FuelCMS 1.4 Remote Code Execution, this version of FuelCMS is still vulnerable until now...

CVE-2026-70376

CVE-2026-70376 — Pluck CMS 사이트 전역 CSRF → RCE Fail-open Referer 검사 + CSRF 토큰 없음 + 이중 확장자 업로드 단 한 번의 관리자 페이지 방문으로 콘텐츠 삭제, 페이지 주입, 웹셸webshell 설치가 가능합니다 한눈에 보기 · 요약 · 근본 원인 · 공격 체인 · 익스플로잇 · 수정 방안 · 타임라인 📋 한눈에 보기 | ---|--- CVE ID| CVE-2026-70376 Tracking ID| PT-2026-68036 제품| pluck-cms/pluck — Pluck...

CVE-2026-95153

An issue in Bludit CMS 3.22.0 allows a remote attacker to obtain sensitive information via the /admin/ajax/clippy and /admin/ajax/save-as-draft endpoints...

CVE-2019-9053-exploit

CVE-2019-9053 — CMS Made Simple의 인증되지 않은 SQL 인젝션 설명 CVE-2019-9053 은 CMS Made Simple ≤ 2.2.9 버전에 영향을 주는 시간 기반 블라인드Time-based Blind SQL 인젝션 취약점입니다. 인증이 필요하지 않습니다. 취약한 매개변수는 News 모듈moduleinterface.php의 m1idlist입니다. 공격자는 이를 악용하여 관리자 비밀번호 해시, 사용자 이름, 이메일 및 해시에 사용된 salt를 추출할 수 있습니다. 비밀번호 저장 방식은 MD5salt...

CVE-2021-46366

CVE-2021-46366: Credential Bruteforce Attack via CSRF + Open Redirect in Magnolia CMS An issue in the Login page of Magnolia CMS v6.2.3 and below allows attackers to exploit both an Open Redirect vulnerability and Cross-Site Request Forgery CSRF in order to brute force and exfiltrate users'...

CVE-2021-46364

CVE-2021-46364: YAML Deserialization in Magnolia CMS Magnolia versions =6.2.3 has a Snake YAML parser which is vulnerable to deserialization attacks that can allow an attacker to call arbitrary Java constructors when importing YAML files. Remote Code Execution has been achieved using this...

CVE-2021-46362

CVE-2021-46362: FreeMarker Server-Side Template Injection in Magnolia CMS A Server-Side Template Injection SSTI vulnerability in the Registration and Forgotten Password forms of Magnolia v6.2.3 and below allows unauthenticated attackers to execute arbitrary code via a crafted payload entered into...

CVE-2021-46361

CVE-2021-46361: FreeMarker Restriction Bypass in Magnolia CMS An issue in the FreeMarker Filter of Magnolia CMS v6.2.11 and below allows attackers to bypass security restrictions and execute arbitrary code via a crafted FreeMarker payload. Vendor Disclosure: The vendor's disclosure and fix for th...

CVE-2026-105867 Payload: Client uploads could overwrite S3 objects

Payload is a free and open source headless content management system. In @payloadcms/storage-s3 versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated user can overwrite an existing S3 object belonging to another upload collection when client uploads are enabled for...

Magnolia-CMS-6.2.19-Stored-Cross-Site-Scripting-CVE-2022-33098

Magnolia CMS 응답 업로드가 허용되며, SVG가 연락처 또는 에셋 보기에서 렌더링될 때 페이로드가 실행됩니다. 해결 방법 Magnolia CMS 6.2.20 릴리스 노트를 참조하고 수정된 버전으로 업그레이드하십시오. 공개 타임라인 2022-06-17: Magnolia CMS 6.2.20 출시, 에셋 업로드 처리 강화 2022-07-07: CVE-2022-33098이 NVD에 게시됨 2022-07-14: NVD 초기 분석이 CVSS 및 CWE 데이터로 업데이트됨 참고 자료 1...

CVE-2021-21425-RCE

this is my version i found a lot in internet but those are too bad USAGE python3 exploit.py -u http://IP/grav-admin/ --lhost YOUR TUN0 IP --lport 4444 wait.. for 60sec you will get shell at your listener...

CVE-2019-9053-CMS-Made-Simple-2.2.10---SQL-Injection-Exploit

CMS-Made-Simple-2.2.10---SQL-Injection-Exploit-com-corre-o-de-Bugs 이 익스플로잇은 Python 3를 지원하도록 수정되었습니다. CVE-2019-9053 원본 익스플로잇 출처: https://www.exploit-db.com/exploits/46635 가능한 오류 및 수정 Traceback most recent call last: File "46635.py", line 12, in from termcolor import colored ImportError: No module...

CVE-2026-105985

Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. Any authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding...

CVE-2026-44011-poc

CVE-2026-44011 Yiiのbehaviorインジェクションを介したCraft CMSの認証済みRCE。 影響を受けるバージョン: 4.0.0–4.17.11、5.0.0–5.9.17 修正バージョン: 4.17.12、5.9.18 アドバイザリ: GHSA-qrgm-p9w5-rrfw 脆弱性 /admin/actions/element-search/search エンドポイントは condition パラメータを受け取り、それを Component::cleanseConfig を最初に呼び出すことなく ElementCondition::createCondition...

CVE-2026-105985 Authenticated RCE via render-components Entry Type overrides

Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. Any authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding...