25 matches found
laravel-rce-cve-2018-15133
laravel-rce-cve-2018-15133 CVE-2018-15133...
laravel-poc-CVE-2018-15133
Ejecución remota de código en Laravel cuando se filtra APPKEY PoC CVE-2018-15133 Este repositorio contiene una aplicación simple de Laravel 5.6.29 en PHP 7.2.10 con una ruta noop básica añadida en routes/web.php ver Dockerfile y un exploit de Prueba de Concepto cve-2018-15133.php para...
CVE-2018-15133-Lavel-Expliot
Este repositorio no tiene un README...
CVE-2018-15133
CVE-2018-15133 Laravel Unserialized RCE pip install requests colorama multiprocessing...
Larascript
| | | | | | / || '| / |/ | /|| ' || || ' \ | | | | | || | | | | | | | | || | || | || , ||| ,|| / ||| ||| ./ | || Autores: @pwnedshell & @rsgbengi 📌 ¿Qué es Larascript? Larascript es un script que aprovecha el CVE-2018-15133 y puede ejecutar comandos remotos si una aplicación Laravel vulnerable es...
better-poc-for-CVE-2018-15133
Mejor PoC para CVE-2018-15133 Un PoC automatizado para CVE-2018-15133 Todo el crédito es para kozmic, quien hizo el PoC original de CVE-2018-15133 Este es solo un script de automatización que hice mientras resolvía una máquina de laboratorio que tenía esta vulnerabilidad, porque no quería crear u...
K000161869: PHP Laravel framework vulnerabilities CVE-2024-52301 and CVE-2018-15133
Security Advisory Description CVE-2024-52301 Laravel is a web application framework. When the registerargcargv php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request. The...
Exploit for Deserialization of Untrusted Data in Laravel
CVE-2018-15133-PoC Este script Python implementa un exploit d...
Laravel < 5.6.30 RCE Vulnerability
Laravel is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:laravel:laravel"; ...
AndroxGh0st Malware Targets Laravel Apps to Steal Cloud Credentials
Cybersecurity researchers have shed light on a tool referred to as AndroxGh0st that's used to target Laravel applications and steal sensitive data. "It works by scanning and taking out important information from .env files, revealing login details linked to AWS and Twilio," Juniper Threat Labs...
Imperva uncovers new Indicators of Compromise for FBI and CISA-flagged AndroxGh0st botnet
On January 16, a joint alert from FBI and CISA warned about a concerning development: the emergence of a botnet driven by AndroxGh0st malware targeting vulnerable applications and web servers. AndroxGh0st is a Python-based malware, first seen in late 2022, designed to target Laravel .env files an...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2018-15133 Laravel Deserialization of Untrusted Data Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose...
VulnCheck KEV: CVE-2018-15133
Laravel Framework contains a deserialization of untrusted data vulnerability, allowing for remote command execution. This vulnerability may only be exploited if a malicious user has accessed the application encryption key APPKEY environment variable...
Laravel Framework Remote Code Execution (CVE-2018-15133)
A command injection vulnerability exists in Laravel Framework. This is due to insufficient handling of X-XSRF-TOKEN header in phpgcc library. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Exploit for Deserialization of Untrusted Data in Laravel
CVE-2018-15133...
Exploit for Deserialization of Untrusted Data in Laravel
| |...
Exploit for Deserialization of Untrusted Data in Laravel
Laravel exploit for CVE-2018-15133 This code exploit CVE-201...
PHP Laravel Framework 5.5.40 / 5.6.x < 5.6.30 - token Unserialize Remote Command Execution (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'PHP Laravel Framework token Unserialize Remote Command Execution', 'Description' = %q This module exploits a vulnerability in the PHP Laravel...
CVE-2018-15133
creationtimestamp| type| source ---|---|--- 2019-07-12 14:46:12+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/http/laraveltokenunserializeexec.rb 2019-07-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/47129 2019-10-07...