CVE-2021-3129---Laravel-RCE

CVE-2021-3129---Laravel-RCE Описание Скрипт создан для эксплуатации уязвимости Laravel RCE CVE-2021-3129. Этот скрипт позволяет записывать/выполнять команды на веб-сайте, работающем на Laravel , у которого в файле ".env" установлено значение "APPDEBUG" = "true"...

CVE-2021-3129

Удаленное выполнение кода: Laravel CVE-2021-3129 📜 Описание Этот скрипт предназначен для эксплуатации уязвимости удаленного выполнения кода RCE, обнаруженной в нескольких версиях Laravel, известной как CVE-2021-3129. Используя эту уязвимость, скрипт позволяет пользователям выполнять команды на...

EUVD-2026-91033

The Cadmos LTI application hosted at cadmos.eummena.io had Laravel debug mode enabled APPDEBUG=true, APPENV=local in a publicly accessible environment. An unauthenticated attacker could send a GET request and trigger an unhandled exception, causing Laravel to expose the entire server environment,...

EUVD-2026-88508

Laravel: XSS in Debug Page Information...

CVE-2026-102279

Laravel is a web application framework. Prior to 12.69.0 and 13.30.0, Laravel exception debug pages with APPDEBUG=true pass attacker-controlled input to a Tippy.js tooltip configured with allowHTML true, enabling DOM-based cross-site scripting when a user hovers over the tooltip. This issue is...

CVE-2026-102279 Laravel: XSS in Debug Page Information

Laravel is a web application framework. Prior to 12.69.0 and 13.30.0, Laravel exception debug pages with APPDEBUG=true pass attacker-controlled input to a Tippy.js tooltip configured with allowHTML true, enabling DOM-based cross-site scripting when a user hovers over the tooltip. This issue is...

CVE-2026-102279

The Laravel web application framework is vulnerable to DOM-based cross-site scripting (XSS) in versions prior to 12.69.0 and 13.30.0 . When APP_DEBUG=true , the exception debug pages pass attacker-controlled input to a Tippy.js tooltip with allowHTML set to true. This allows an attacker to execut...

EUVD-2026-44349

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 5.4.46 until 5.4.52, 6.4.40, 7.4.12, and 8.0.12, the CVE-2024-50340 fix gated runtime argv parsing on empty$GET, but parsestr and the web SAPI can disagree, allowing a crafted query string to...

CVE-2026-47767: Interpretation Conflict

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 5.4.46 until 5.4.52, 6.4.40, 7.4.12, and 8.0.12, the CVE-2024-50340 fix gated runtime argv parsing on empty$GET, but parsestr and the web SAPI can disagree, allowing a crafted query string to...