CVE-2024-4577

Plantilla de Nuclei para CVE-2024-4577 Esta plantilla de Nuclei sirve como Prueba de Concepto PoC para CVE-2024-4577, una vulnerabilidad de Inyección de Argumentos en PHP CGI. Comando de Ejemplo root@kitploit: nuclei -t CVE-2024-4577.yaml -u https://example.com...

CVE-2026-24061-GNU-InetUtils-telnetd

CVE-2026–24061 : GNU InetUtils telnetd Authentication Bypass Vulnerability CVE-2026–24061 is a critical weakness in the telnetd service of GNU InetUtils CVE ID : CVE-2026–24061 Severity : Critical CVSS 9.8 Attack Vector : Network Authentication Required : None Impact : Full system compromise root...

CVE-2024-4577

CVE-2024-4577 This is a PoC for PHP CVE-2024-4577. Introduction Security in the digital environment is more important than ever. That said, imagine an invisible door opens on millions of websites due to a new vulnerability in PHP, one of the most used programming languages ​​on the web. This...

CVE-2024-4577-RCE-PoC

CVE-2024-4577 RCE Exploit While implementing PHP, the team did not notice the Best-Fit feature of encoding conversion within the Windows operating system. This oversight allows unauthenticated attackers to bypass the previous protection of CVE-2012-1823 by specific character sequences. Arbitrary...

CVE-2025-64155

CVE-2025-64155: Inyección de Argumentos en Fortinet FortiSIEM para Ejecución Remota de Código Exploit de prueba de concepto para Fortinet FortiSIEM que abusa de una inyección de argumentos para escribir un archivo y obtener ejecución de código como root Blog Post Análisis en profundidad aquí:...

ctf-cve-2024-4577

CVE-2024-4577 CTF Challenge Overview This CTF challenge demonstrates CVE-2024-4577, a critical PHP CGI argument injection vulnerability affecting PHP versions 8.1.x 8.1.21, 8.2.x 8.2.8, and 8.3.x 8.3.1. Vulnerability Details CVE-2024-4577 is a PHP CGI argument injection vulnerability that occurs...

CVE-2021-33564

CVE-2021-33564 PoC Exploit script for CVE-2021-33564 Argument Injection in Dragonfly Ruby Gem. Usage Arbitrary File Read python3 poc.py -u https:///system/refinery/images -r /etc/passwd Arbitrary File Write python3 poc.py -u https:///system/refinery/images -w public/test.txt -c test.txt -lu http:...

CVE-2026-14459-14460-pardus-software

Pardus Software Center — Local Privilege Escalation CVE-2026-14459 & CVE-2026-14460 Proof-of-concept and exploit-ready code for two local privilege escalation issues in the pardus-software package Pardus Software Center version 1.0.4 , both fixed in 1.0.5. CVE| Class| Summary| CVSS 3.1 CERT-TR...

CVE-2024-4577

PHP-CGI Windows Platform Remote Code Execution Vulnerability CVE-2024-4577 Introduction PHP is an acronym for Hypertext Preprocessor. It is now a widely used open-source scripting language that is particularly suitable for web development and embedding in HTML, and is very simple to use. CGI, whi...

CVE-2020-7115

CVE-2020-7115 Crea tu motor malicioso en segundos buildengine.sh Script sencillo para generar un motor malicioso listo para usarse en escenarios de inyección de argumentos de openssl. ¿Cómo usarlo? Es muy simple, solo modifica el archivo engine.c con el comando de tu elección: root@kitploit:...

CVE-2024-4577-Exploit

CVE-2024-4577 Exploit Exploit of the PHP CGI Argument Injection vulnerability CVE-2024-4577 to achieve Remote Code Execution RCE on a vulnerable PHP version running in a Windows environment, discovered by Orange Tsai. For more details, check out DEVCORE's Blog. Requirements Language Used = Python...

CVE-2024-24576-PoC-BatBadBut

CVE-2024-24576-PoC-BatBadBut PoC for CVE-2024-24576 vulnerability "BatBadBut" Information After running the script will ask you for an argument, the argument will be passed the the bat file, if you close the argument with " and after that & you can run any Windows command. For example:...

CVE-2024-4577

CVE-2024-4577 - PHP CGI Argument Injection RCE Summary CVE-2024-4577 is a critical PHP CGI argument injection vulnerability that affects Windows systems running PHP in CGI mode. This flaw allows remote attackers to inject arguments into PHP's command line via specially crafted URLs, leading to...

CVE-2024-4577-rayng

CVE-2024-4577 - PHP CGI Argument Injection Detection Lab A complete detection engineering lab for CVE-2024-4577 PHP CGI Argument Injection. Includes pre-built Vagrant boxes, Wazuh SIEM rules, and exploit tools for Blue Team training. What's Included Windows Server 2022 VM - Vulnerable XAMPP +...

CVE-2012-1823

PHP CGI Argument Injection CVE-2012-1823 Description sapi/cgi/cgimain.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script aka php-cgi, does not properly handle query strings that lack an = equals sign character, which allows remote attackers to execute arbitrary code by...

CVE-2026-11765

Improper neutralization of argument delimiters in a command 'argument injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Argument Injection. This issue affects Pardus Pen: before 4.2.1...

CVE-2026-11765 Argument Injection in TUBITAK BILGEM's Pardus Pen

Improper neutralization of argument delimiters in a command 'argument injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Argument Injection. This issue affects Pardus Pen: before 4.2.1...

CVE-2026-11765

CVE-2026-11765 is an argument injection vulnerability (improper neutralization of argument delimiters in a command) in TUBITAK BILGEM Pardus Pen , a Turkish Linux distribution. The issue affects versions before 4.2.1 , which is the recommended fix. The CVSS 3.1 score is 3.3 (LOW) with a local att...

CVE-2026-11765 Argument Injection in TUBITAK BILGEM's Pardus Pen

Improper neutralization of argument delimiters in a command 'argument injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Argument Injection. This issue affects Pardus Pen: before 4.2.1...

EUVD-2026-76102

Improper neutralization of argument delimiters in a command 'argument injection' vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Pen allows Argument Injection. This issue affects Pardus Pen: before 4.2.1...