Lucene search
+L

226 matches found

Kitploit
Kitploit
added 2026/08/27 2:33 a.m.2 views

CVE-2024-4577

CVE-2024-4577 के लिए Nuclei टेम्पलेट यह Nuclei टेम्पलेट CVE-2024-4577 के लिए एक Proof of Concept PoC के रूप में कार्य करता है, जो एक PHP CGI Argument Injection भेद्यता है। उदाहरण कमांड root@kitploit: nuclei -t CVE-2024-4577.yaml -u https://example.com...

9.8CVSS7.7AI score0.99987EPSS
SaveExploits68
Kitploit
Kitploit
added 2026/08/26 9:24 p.m.6 views

ctf-cve-2024-4577

تحدي CTF الخاص بـ CVE-2024-4577 نظرة عامة يُظهر هذا التحدي من نوع CTF ثغرة CVE-2024-4577، وهي ثغرة حرجة في حقن وسائط سطر الأوامر في PHP CGI تؤثر على إصدارات PHP 8.1.x 8.1.21 و 8.2.x 8.2.8 و 8.3.x 8.3.1. تفاصيل الثغرة CVE-2024-4577 هي ثغرة حقن وسائط سطر الأوامر في PHP CGI تحدث عندما يتم تكوين PHP...

9.8CVSS7.7AI score0.99987EPSS
SaveExploits68
Kitploit
Kitploit
added 2026/08/26 9:10 p.m.3 views

Shodan-CVE-2024-4577

Questo repository non contiene un README...

9.8CVSS7.6AI score0.99987EPSS
SaveExploits68
Kitploit
Kitploit
added 2026/08/26 8:58 p.m.3 views

CVE-2024-4577

CVE-2024-4577 Python PoC-Schreibübung, kann einzelne Ziele oder Batch-Erkennung durchführen...

9.8CVSS7.6AI score0.99987EPSS
SaveExploits68
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.2 views

CVE-2024-4577

CVE-2024-4577 CVE-2024-4577...

9.8CVSS7.6AI score0.99987EPSS
SaveExploits68
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.2 views

CVE-2024-4577-nuclei

CVE-2024-4577-nuclei Payload: root@kitploit: ?%ADd+allowurlinclude%3d1+%ADd+autoprependfile%3dphp://input root@kitploit: URL de teste: root@kitploit: /unfxu9a.phppayload /php-cgi/unfxu9a.phppayload /cgi-bin/php-cgi.exepayload /php-cgi/php-cgi.exepayload /php-cgi/php.exepayload...

9.8CVSS7.5AI score0.99987EPSS
SaveExploits68
Kitploit
Kitploit
added 2026/08/25 10:39 a.m.3 views

PHP-CGI-INTERNAL-RCE

PHP-CGI-INTERNAL-RCE Questa PoC dimostra come un attaccante può concatenare di Orange Tsai CVE-2024-4577 con il DNS rebinding per ottenere l'esecuzione remota di codice sull'infrastruttura di rete interna direttamente tramite il browser della vittima. Bypassando la Same-Origin Policy SOP e...

9.8CVSS7.5AI score0.99987EPSS
SaveExploits68References1
Kitploit
Kitploit
added 2026/08/25 7:26 a.m.3 views

CVE-2024-4577-PHP-RCE

CVE 2024-4577 PHP दूरस्थ कोड निष्पादन स्वचालित स्कैनर, Waived द्वारा प्रभावित संस्करण: PHP 8.3. 8.3.8, 8.2. 8.2.20, 8.1. 8.1.29 विवरण: https://nvd.nist.gov/vuln/detail/CVE-2024-4577 https://www.exploit-db.com/exploits/52047 https://vulners.com/cve/CVE-2024-4577 अवलोकन: यह एक स्कैनर है जो वेब...

9.8CVSS7.7AI score0.99987EPSS
SaveExploits68
Kitploit
Kitploit
added 2026/08/24 11:47 p.m.3 views

CVE-2024-4577-PHP-RCE

PHP RCE PoC CVE-2024-4577: Argument-Injektion in PHP-CGI Übersicht Dieses Repository enthält Skripte, um die Schwachstelle CVE-2024-4577 zu prüfen, eine Argument-Injektionsschwachstelle in PHP-CGI. Du kannst die bereitgestellten Bash-, Go- und Python-Skripte verwenden, um eine Liste von Domänen a...

9.8CVSS7.7AI score0.99987EPSS
SaveExploits68
Chainguard
Chainguard
added 2026/07/01 2:17 p.m.24 views

CVE-2023-4577 vulnerabilities

Vulnerabilities for packages: firefox-esr...

6.5CVSS6.8AI score0.00647EPSS
SaveExploits0
Nuclei
Nuclei
added 2026/06/16 7:13 a.m.1022 views

PHP CGI - Argument Injection

PHP CGI - Argument Injection CVE-2024-4577 is a critical argument injection flaw in PHP. id: CVE-2024-4577 info: name: PHP CGI - Argument Injection author: Hüseyin TINTAŞ,sw0rk17,s4e-io,pdresearch severity: critical description: | PHP CGI - Argument Injection CVE-2024-4577 is a critical argument...

9.8CVSS7.7AI score0.99987EPSS
SaveExploits68References4
GithubExploit
GithubExploit
added 2026/04/29 3:58 a.m.170 views

Exploit for OS Command Injection in Php

PHP CVE Autopilot Fully automated detection and exploitat...

9.8CVSS7.2AI score0.99987EPSS
SaveExploits71
ATTACKERKB
ATTACKERKB
added 2026/03/23 6:35 a.m.6 views

CVE-2026-4577

A vulnerability was found in code-projects Exam Form Submission 1.0. The affected element is an unknown function of the file /admin/updates4.php. Performing a manipulation of the argument sname results in cross site scripting. The attack may be initiated remotely. The exploit has been made public...

4.8CVSS4.2AI score0.00206EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2026/03/10 8:30 p.m.6 views

MINI-WWR5-38FQ-4577

Bulletin has no description...

5.9CVSS5.7AI score0.0035EPSS
SaveExploits0
EUVD
EUVD
added 2026/01/24 7:26 a.m.8 views

EUVD-2026-4577

The Frontis Blocks plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.1.6. This is due to insufficient restriction on the 'url' parameter in the 'templateproxy' function. This makes it possible for unauthenticated attackers to make web reques...

7.2CVSS5.7AI score0.00337EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2025/08/11 12:00 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2023-4577

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When UpdateRegExpStatics attempted to access initialStringHeap it could already have been garbage collected prior to entering the function, which could...

6.5CVSS6.9AI score0.00647EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2025/07/23 12:49 a.m.423 views

Exploit for OS Command Injection in Php

CVE-2024-4577 Mass Scanner & Exploit Tool PoC This Python s...

9.8CVSS9.5AI score0.99987EPSS
SaveExploits68
GithubExploit
GithubExploit
added 2025/06/23 5:27 a.m.362 views

Exploit for OS Command Injection in Php

CVE-2024-4577 PHP CGI Remote Code Execution Exploit Author:...

9.8CVSS9.1AI score0.99987EPSS
SaveExploits68
Exploit DB
Exploit DB
added 2025/06/15 12:00 a.m.352 views

PHP CGI Module 8.3.4 - Remote Code Execution (RCE)

!/usr/bin/env python3 Exploit Title: PHP CGI Module 8.3.4 - Remote Code Execution RCE Date: 2025-06-13 Exploit Author: @ibrahimsql Exploit Author's github: https://github.com/yigitsql old account banned Vendor Homepage: https://www.php.net/ Software Link: https://www.php.net/downloads Version: PH...

9.8CVSS7.4AI score0.99987EPSS
SaveExploits68
RedhatCVE
RedhatCVE
added 2025/06/12 12:21 p.m.9 views

CVE-2025-4577

The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the data-color attribute in all versions up to, and including, 4.3.1 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS5.8AI score0.00281EPSS
SaveExploits0References1
Rows per page
Query Builder