CVE-2025-49132

CVE-2025-49132-POC मैंने इस PoC को अपनी व्यक्तिगत चुनौती के लिए बनाया है, जो 0xtensho से प्रेरित है। यह स्वच्छ आउटपुट के लिए और केवल रिवर्स शेल के लिए बनाया गया है। उपयोग: root@kitploit: Change the host and the listener variable first python3 CVE-2025-49132POC.py अस्वीकरण कानूनी अस्वीकरण: यह Proo...

CVE-2025-49132

This repository does not have a README...

HTB-Pterodactyl-Writeup

Penetration Test Report — HackTheBox: Pterodactyl Date: April 8, 2026 Target: Pterodactyl HackTheBox Difficulty: Medium OS: Linux openSUSE Leap 15.6 Tester: V0idW1re Executive Summary The Pterodactyl machine on HackTheBox presented a realistic attack scenario involving a misconfigured web...

HTB-Pterodactyl-RCE-CVE-2025-49132

Pterodactyl Panel Locale RCE CVE-2025-49132 — Educational PoC -6f42c1 For authorized testing and defensive learning only. This repository is intended for controlled lab environments e.g., CTF/HTB-style setups where you own the target or haveexplicit written permission to test it. Context This...

CVE-2025-49132

CVE-2025-49132 Standalone Vulnerability Scanner Non-Docker Implementation This scanner operates directly on Python without Docker dependencies, suitable for environments where Docker is not available or preferred. Installation root@kitploit: pip install -r requirements-standalone.txt Manual...

CVE-2025-49132_poc

CVE-2025-49132 PoC बेहतर संस्करण यह CVE-2025-49132 प्रूफ ऑफ कॉन्सेप्ट एक्सप्लॉइट का बेहतर संस्करण है। CVE जानकारी CVE ID : CVE-2025-49132 NVD संदर्भ : https://nvd.nist.gov/vuln/detail/cve-2025-49132 Wiz डेटाबेस : https://www.wiz.io/vulnerability-database/cve/cve-2025-49132 मूल कार्य यह सुधार...

Metasploit Wrap Up: Lot of summer shells and fit http profiles

This wrap-up brings a full-on shell parade. Thirteen shiny new modules landed, starting with a buffet of RCEs. WordPress WP2Shell, Ghost CMS, Joomla JCE, Langflow, OpenCATS, Pterodactyl Panel, SonicWall SMA1000, Ray Dashboard, a Pix-for-WooCommerce, and for those who like their exploits closer to...

Exploit for CVE-2025-49132

CVE-2025-49132 Pterodactyl is a free, open-source game server...

HTB-Pterodactyl-Writeup

HackTheBox — Pterodactyl Writeup Difficulty: Medium |...

Exploit for CVE-2025-49132

CVE-2025-49132-POC I made this poc for my personal cha...

Exploit for CVE-2025-49132

CVE-2025-49132-poc I made this poc for CVE-2025-49132https...

Pterodactyl Panel 1.11.11 - Remote Code Execution (RCE)

Exploit Title: Pterodactyl Panel 1.11.11 - Remote Code Execution RCE Date: 22/06/2025 Exploit Author: Zen-kun04 Vendor Homepage: https://pterodactyl.io/ Software Link: https://github.com/pterodactyl/panel Version: 1.11.11 Tested on: Ubuntu 22.04.5 LTS CVE: CVE-2025-49132 import requests import js...

Exploit for CVE-2025-49132

CVE-2025-49132 Standalone Vulnerability Scanner Non-Docker...

Exploit for CVE-2025-49132

CVE-2025-49132poc Usage Examples 1. Scanning a single...

Exploit for CVE-2025-49132

CVE-2025-49132 Pterodactyl is a free, open-source game server...

CVE-2025-49132

Pterodactyl is a free, open-source game server management panel. Prior to version 1.11.11, using the /locales/locale.json with the locale and namespace query parameters, a malicious actor is able to execute arbitrary code without being authenticated. With the ability to execute arbitrary code it...

CVE-2025-49132 Pterodactyl Panel Allows Unauthenticated Arbitrary Remote Code Execution

Pterodactyl is a free, open-source game server management panel. Prior to version 1.11.11, using the /locales/locale.json with the locale and namespace query parameters, a malicious actor is able to execute arbitrary code without being authenticated. With the ability to execute arbitrary code it...

CVE-2025-49132

Summary (CVE-2025-49132) Pterodactyl Panel versions up to 1.11.10 are affected by an unauthenticated remote code execution via the /locales/locale.json endpoint, where locale and namespace query parameters are passed to PHP include() unsafely. The vulnerability can lead to local file inclusion an...

CVE-2025-49132

creationtimestamp| type| source ---|---|--- 2025-06-19 16:52:25+00:00| seen| https://bsky.app/profile/ryan.staticnoi.se/post/3lrxycwhe7s2g 2025-06-19 16:52:25+00:00| seen| https://bsky.app/profile/ryan.staticnoi.se/post/3lrxycurark2g 2025-06-20 02:20:35+00:00| seen|...

Pterodactyl Panel CVE-2025-49132 Remote Code Execution

This module exploits a vulnerability in Pterodactyl Panel before version 1.11.11 that allows unauthenticated remote code execution through improper handling of locale file operations. The vulnerability exists in the locale.json endpoint which allows path traversal and arbitrary file creation. Cod...