CVE-2012-1823

CVE-2012-1823 autoCheck...

CVE-2012-1823-Analyze

此存储库没有 README。...

Vulnerable-Lab-Exploitation

Vulnerable-Lab-Exploitation 一个动手实践项目，演示了虚拟安全实验室的搭建、网络侦察以及对 CVE-2012-1823 的利用过程。 易受攻击实验室搭建与 PHP CGI 利用（CVE-2012-1823） 🎯 项目概述 本项目演示了如何创建一个隔离的虚拟实验室环境，用于执行全流程渗透测试。我模拟了一场针对过时 Linux 服务器的真实攻击，从网络发现到获取未经授权的远程访问权。 🛠️ 工具与技术 虚拟机管理程序： VirtualBox 攻击机操作系统： Kali Linux 靶机操作系统： Metasploitable 2 网络： 虚拟仅主机适配器（隔离沙箱）...

cve-2024-4577-lab

CVE-2024-4577 — Inyección de Argumentos en PHP-CGI → RCE Laboratorio Docker / CTF Un laboratorio Docker autónomo, desde cero , que demuestra la primitiva real de inyección de argumentos → Ejecución Remota de Código detrás de CVE-2024-4577. Explótalo a través de http://localhost:8080, obtén una...

Open-Worldwide-Application-Security-Project-OWASP-

开放全球应用安全项目（OWASP） 使用 OWASP ZAP 对 DVWA 进行自动化 Web 漏洞评估，以识别并分析关键安全漏洞，如远程代码执行（CVE-2012-1823）。...

CVE-2012-1823-exploit-for-https-user-password-web

CVE-2012-1823 文件是漏洞利用程序 使用：python3 CVE-2012-1823.py CVE-2012-1823,CVE-2021-2291.py 文件用于检测网站是否存在 CVE-2012-1823 或 CVE-2021-2291 漏洞 使用：python3 CVE-2012-1823,CVE-2021-2291.py 命令：whoami cd ls 已在 Kali Linux 上测试...

DVWA-ZAP-PENTEST

使用 OWASP ZAP 对 DVWA 进行漏洞评估 一次针对 DVWA（Damn Vulnerable Web App） 的实战型 Web 应用安全评估，使用 OWASP ZAP（Zed Attack Proxy）2.17.0 执行。本项目记录了完整的工作流程：侦察（爬取）、自动化漏洞扫描，以及对所产生告警的分析——包括一项 远程代码执行（CVE-2012-1823） 漏洞发现。 ⚠️ 免责声明： 本次评估是在隔离的实验环境中针对 DVWA 进行的，DVWA 是一个特意构建为易受攻击、用于培训目的的应用程序。切勿扫描或攻击您不拥有、或未经明确书面许可测试的系统。 目录 目标 使用的工具...

Vulnerability-Assessment-and-OSINT-CVE-2012-1823

漏洞评估与OSINT：CVE-2012-1823 我的仓库记录了在目标网络扫描中发现、分析并收集特定安全漏洞的开源情报（OSINT）的完整过程。 流程概览 本次评估执行的工作流程分为四个主要阶段： 1. 侦察与漏洞检测 使用工具 ：Nmap 操作 ：使用以下命令执行高级网络扫描： root@kitploit: nmap --script-help http-vuln-cve2012-1823 发现结果 ：目标环境正在运行过时的 PHP-CGI 配置。NSE（Nmap 脚本引擎）脚本确认存在 CVE-2012-1823 ，这是一个侵入性的 PHP-CGI...

PHP CGI v5.3.12/5.4.2 Remote Code Execution

sapi/cgi/cgimain.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script aka php-cgi, does not properly handle query strings that lack an = equals sign character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string,...

Exploit for Command Injection in Php

Vulnerability Assessment and OSINT: CVE-2012-1823 My reposito...

Exploit for Command Injection in Php

CVE-2012-1823 - PHP CGI Argument Injection Remote Code Executi...

MiracleLinux 3 : php-5.1.6-34.0.1.AXS3 (AXSA:2012-548:04)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2012-548:04 advisory. PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated webpages. PHP also offers built-in...

Linux Distros Unpatched Vulnerability : CVE-2012-1823

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sapi/cgi/cgimain.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script aka php- cgi, does not properly handle query strings that lack a...

curl: Incorrect Encoding Conversion in hostname results in indeterminate SSRF vulnerabilities

Vulnerability description not provided...

PHP-CGI OS Command Injection Vulnerability

PHP, specifically Windows-based PHP used in CGI mode, contains an OS command injection vulnerability that allows for arbitrary code execution. This vulnerability is a patch bypass for CVE-2012-1823...

Exploit for OS Command Injection in Php

CVE-2024-4577 This is a PoC for PHP CVE-2024-4577. Introdu...

PHP 8.1.x < 8.1.29 Multiple Vulnerabilities

According to its self-reported version number, the version of PHP installed on the remote host is 8.1.x prior to 8.1.29, 8.2.x prior to 8.2.20, or 8.3.x prior to 8.3.8. It is, therefore, affected by multiple vulnerabilities: - An argument Injection in PHP-CGI with a bypass of CVE-2012-1823...

Slackware: Security Advisory (SSA:2024-158-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] php

New php packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: extra/php81/php81-8.1.29-i586-1slack15.0.txz: Upgraded. This update fixes bugs and security issues: Bypass of CVE-2012-1823, Argument Injection in PHP-CGI...

Slackware Linux 15.0 / current php81 Multiple Vulnerabilities (SSA:2024-158-01)

The version of php81 installed on the remote host is prior to 8.1.29 / 8.3.8. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-158-01 advisory. New php packages are available for Slackware 15.0 and -current to fix security issues. Tenable has extracted the...