329916 matches found
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell — CVE-2026-109618 / CVE-2026-109619 Peringatan...
CVE-2025-4336
eMagicOne Store Manager for WooCommerce 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo...
CVE-2018-7600
Proof-Of-Concept for CVE-2018-7600 / SA-CORE-2018-002 codebeat badge Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations. H...
CVE-2019-16278
CVE-2019-16278 💻 -h3x0v3rl0rd- nostromo 1.9.6 - Remote Code Execution...
CVE-2024-3400
CVE-2024-3400 PoC for educational purposes only. only use on servers you have permission to test. How-To-Use deps: $ pip install rich scan targets.txt： $ python run.py -f targets.txt -t 10 - Sending 102 requests... + Requests sent. Writing check file... - Polling 36... - Checking...
CVE-2021-3129
CVE-2021-3129 Laravel debug mode - Remote Code Execution RCE https://vulners.com/cve/CVE-2021-3129 https://www.ambionics.io/blog/laravel-debug-rce https://github.com/ambionics/phpggc Example python3 exploit.py http://127.0.0.1:8080 python3 exploit.py http://127.0.0.1:8080 --phar $php -d...
CVE-2024-42448-RCE
CVE-2024-42448-RCE Veeam Service Provider Console VSPC remote code execution. Download link here Details: is a critical vulnerability identified in the Veeam Service Provider Console VSPC with a CVSS score of 9.9. This vulnerability allows for remote code execution RCE. About: files.zip here you'...
CVE-2021-44228-Apache-Log4j-Rce-main
CVE-2021-44228Apache Log4j Remote Code Execution） all log4j-core versions =2.0-beta9 and =2.14.1 The version of 1.x have other vulnerabilities, we recommend that you update the latest version. Security Advisories / Bulletins linked to Log4Shell CVE-2021-44228 Usage: download this project, compile...
php2shell-check
php2shell-check A read-only triage script for WordPress sites after PHP2Shell CVE-2026-109618 and CVE-2026-109619, the pair of critical remote code execution bugs in the PHP engine disclosed on October 21, 2026. Patching PHP closes the door, but Amazon's honeypots logged an exploitation attempt o...
Apache OFBiz Directory Traversal - Remote Code Execution
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.13 id: CVE-2024-32113 info: name: Apache OFBiz Directory Traversal - Remote Code Execution author: DhiyaneshDK severity: high description: |...
CVE-2020-0796-RCE-POC
CVE-2020-0796 Remote Code Execution POC c 2020 ZecOps, Inc. - https://www.zecops.com - Find Attackers' Mistakes Remote Code Execution POC for CVE-2020-0796 / "SMBGhost" Expected outcome: Reverse shell with system access. Intended only for educational and testing in corporate environments. ZecOps...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-migration A skill for AI coding agents that finds...
Amazon Linux 2023 : brotli, brotli-devel, libbrotli (ALAS2023-2026-3334)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3334 advisory. A vulnerability in the Node.js Brotli decoder can result in an out-of-bounds memory write when processing crafted Brotli input. Successful exploitation may lead to memory corruption and remote code...
FreeBSD : Node.js -- multiple vulnerabilities (33a752ba-4cbe-46d8-abda-587011d90575)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 33a752ba-4cbe-46d8-abda-587011d90575 advisory. Node.js reports: dns.resolve truncates names containing NUL char CVE-2026-105482 - high TLS...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-probe A focused, open-source scanning probe for C...
php-oom-longjmp
php2shell - php-oom-longjmp Someone on the internet can talk to your PHP site the same way a browser does, with no password. On last-affected PHP they can send a crafted file-upload request that makes the engine run out of memory while it is still reading the request, before your application...
php-stale-global-uaf
php2shell/php2dos - php-stale-global-uaf Someone on the internet can talk to your PHP site the same way a browser does, with no password. On last-affected PHP 8.5 they can force one request to die with a fatal error, then send a second request to the same worker. PHP 8.5 keeps a backtrace from th...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
patchferry-check Free, read-only scripts that check a server...
CVE-2026-109619
CVE-2026-109618 / CVE-2026-109619 PHP2Shell RCE ★ CVE-2026-109618 / CVE-2026-109619 PHP session.uploadprogress Pre-Auth RCE PoC ★ Overview PHP2Shell CVE-2026-109618 / CVE-2026-109619 is an unauthenticated Remote Code Execution flaw in PHP under Apache modphp. A crafted multipart/form-data request...