keystone

Keystone Engine Keystone is a lightweight multi-platform, multi-architecture assembler framework. It offers some unparalleled features: Multi-architecture, with support for Arm, Arm64 AArch64/Armv8, Ethereum Virtual Machine, Hexagon, Mips, PowerPC, RISC-V, Sparc, SystemZ & X86 include 16/32/64bit...

CVE-2024-56145-craftcms-rce

Avant de relancer le script, faites fuser -k 6666/tcp Utilisation - python3 poc.py -f targets.txt -i 127.0.0.1 -pr 4 -t 200 Une commande personnalisée peut être utilisée comme python3 poc.py -f targets.txt -i 127.0.0.1 -c "whoami" -i est votre IP ou l'IP de votre VPS utilisez celle-ci en faisant...

Craft CMS - Remote Code Execution via Template Path Manipulation

This template identifies a critical Remote Code Execution RCE vulnerability in Craft CMS, identified as GHSA-2p6p-9rc9-62j9. The vulnerability exists due to improper handling of the --templatesPath query parameter, allowing attackers to execute arbitrary code by referencing malicious Twig...

CVE-2024-37843-POC

CVE-2024-37843-POC POC для CVE-2024-37843. Слепая time-based SQL-инъекция в Craft CMS Подробности доступны в блоге POC curl -X POST '/api/' -H 'Content-Type:application/json' -d '"query":"query IntrospectionQuery assetsorderBy: "assets.volumeId -- \\ \n \n LIMIT 5 AS subquery\nINNER JOIN...

CVE-2026-44011-poc

CVE-2026-44011: PoC для аутентифицированного RCE в Craft CMS Этот скрипт на Python адаптирует атаку, описанную в рекомендации по безопасности Craft CMS. Аутентифицированный пользователь Craft может достичь уязвимого пути конфигурации макета поля и заставить сервер выполнить команды. Область...

CVE-2026-44011-craftcms-auth-rce

CVE-2026-44011 Craft CMS authenticated RCE PoC Только для авторизованного тестирования. В рекомендации Craft CMS указаны уязвимые версии =4.0.0, =5.0.0, ' -c '' Обязательные аргументы: -b, --base-url: URL Craft, включая http:// или https://. -u, --username: Имя пользователя панели управления. -p,...

Craft-CMS-Exploit

Этот скрипт на Python эксплуатирует уязвимость удаленного выполнения кода CVE-2023-41892 в Craft CMS — популярной системе управления контентом. Версии от 4.0.0-RC1 до 4.4.14 подвержены этой уязвимости, позволяющей злоумышленникам удаленно выполнять произвольный код, например, PHP-реверс-шелл...

CVE-2023-41892

CVE-2023-41892 - Удаленное выполнение кода в Craft CMS RCE Ссылки: https://github.com/advisories/GHSA-4w8r-3xrw-v25g https://securityonline.info/craft-cms-fixes-rce-cve-2023-41892-flaw-rated-10-out-of-10-on-severity-scale/ https://blog.calif.io/p/craftcms-rce...

CVE-2026-105985

Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. Any authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding...

CVE-2026-44011-poc

CVE-2026-44011 Аутентифицированное RCE в Craft CMS через инъекцию поведения Yii. Затронуто: 4.0.0–4.17.11, 5.0.0–5.9.17 Исправлено в: 4.17.12, 5.9.18 Рекомендация: GHSA-qrgm-p9w5-rrfw Уязвимость Конечная точка /admin/actions/element-search/search принимает параметр condition, который передаётся...

CVE-2026-105985 Authenticated RCE via render-components Entry Type overrides

Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. Any authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding...

EUVD-2026-93362

Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. Any authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding...

CVE-2026-105985 Authenticated RCE via render-components Entry Type overrides

Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. Any authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding...

CVE-2026-105985

Craft CMS 5.10.13.2 is vulnerable to authenticated remote code execution (RCE) within the Control Panel's app/render-components action. An authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides to manipulate an EntryType object's ...

CVE-2023-41892_PoC

CVE-2023-41892 Craft CMS PoC 이 저장소는 Craft CMS의 사전 인증 원격 코드 실행 취약점인 CVE-2023-41892를 재현하기 위한 개념 증명PoC 스크립트와 로컬 Vulhub 랩을 포함합니다. 이 프로젝트는 승인된 로컬 랩 또는 테스트에 대한 명시적 권한이 있는 다른 시스템에서만 사용하십시오. 프로젝트 구조 CVE-2323-41892PoC/ +-- README.md +-- LFItoRCE.py +-- ImagickPoC.py +-- Vulnhubenv/ +-- docker-compose.yml...

PT-2026-106708

Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. Any authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding...

craft-cms-RCE-CVE-2024-56145

craft-cms-RCE-CVE-2024-56145 Un environnement de laboratoire POC pour CVE-2024-56145 CraftCMS RCE. Description de la vulnérabilité Une vulnérabilité RCE potentielle a été découverte dans craftCMS si l'option registerargcargv est activée dans php.ini. Il s'agit d'un environnement de laboratoire PO...

CraftCMS_CVE-2023-41892

Craft CMS CVE-2023-41892 Il existe une Exécution de code à distance non authentifiée RCE affectant CraftCMS 4.0.0-RC1 - 4.4.14. Utilisation python3 craft-cms.py http://target Prérequis L'exploit utilise requests. Installez-le avec : python3 -m pip install requests Remerciements...

Craftcms-PoC-CVE-2026-31266

CVE-2026-31266 - Autorisation manquante dans Craft CMS Informations CVE Champ| Valeur ---|--- ID CVE| CVE-2026-31266 Fournisseur| Pixel & Tonic Produit| Craft CMS Versions concernées| self::ALLOWANONYMOUSLIVE | self::ALLOWANONYMOUSOFFLINE, ; Preuve de concept Avec allowAdminChanges=false curl -X...

CVE-2025-32432

CVE-2025-32432 Craft CMS 사전 인증 RCE PoC Craft CMS의 치명적인 사전 인증 원격 코드 실행 영향: Craft CMS 3.x, 4.x 및 5.x 5.6.16까지 정보: 이 익스플로잇은 HackTheBox Orion 머신에서 테스트되었습니다. 개요 이 저장소는 CVE-2025-32432 에 대한 개념 증명 익스플로잇을 포함하고 있습니다. 이는 Craft CMS의 치명적인 사전 인증 원격 코드 실행 취약점입니다. 이 취약점은 인증되지 않은 공격자가 Yii2의 동작 첨부 메커니즘과 class 오버라이...