cve-2024-4577-phpcgi_rce_reproduction

CVE-2024-4577 - PHP CGI 参数注入漏洞（Windows "WorstFit"） 概述 CVE-2024-4577 是 Windows 上 PHP CGI 实现中的一个严重远程代码执行漏洞。它绕过了原始 CVE-2012-1823 的修复，利用了 Windows "最佳匹配"（Best-Fit）代码页转换功能，通过 CGI 查询字符串夹带命令行参数。 CVSS 评分： 9.8（严重） 发现者： Orange Tsai（DEVCORE） 类型： 操作系统命令注入 / 参数注入 补丁日期： 2024 年 6 月 6 日 技术细节 当 PHP 以 CGI...

CVE-2024-5082

概述 此仓库包含 CVE-2024-5082 的 Python 概念验证代码，这是 Sonatype Nexus Repository Manager 2 中的一个远程代码执行漏洞。 该漏洞允许具有足够权限的用户发布特制的 Maven 工件，并将其标记为由 Velocity 内容生成器处理。当检索该工件时，Velocity 模板会被 Nexus 解析，并可能在 Nexus JVM 的安全上下文中执行命令。 根据 Sonatype 的说法： 受影响版本包括 Nexus Repository Manager 2.x 至 2.15.1 ； 该问题已在 2.15.2 中修复； Nexus...

CVE-2026-41179

CVE-2026-47668 rclone RCE 的测试环境 REF1: https://github.com/rclone/rclone/security/advisories/GHSA-jfwf-28xr-xw6q REF2: https://github.com/pssec-io/CVE-2026-41179 rce.py 在 /operations/fdinfo 上执行 RCE，为方便起见将输出重定向到 stderr root@kitploit: ./rce.py uname -a exit status 1 Return code: OK OUTPUT Linux...

CVE-2026-87464

A flaw was found in WebGL within Google Chrome. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. Exploitation occurs when a user visits a specially crafted HTML page, leading to a critical security compromise...

CVE-2026-87455

A flaw was found in Aura in Google Chrome. A remote attacker could exploit a use-after-free vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security sandbox...

CVE-2026-87438

A flaw was found in chromium-browser. An out-of-bounds write vulnerability in the WebGL component of Google Chrome on Android allows a remote attacker to execute arbitrary code outside of the sandbox. This can be exploited by enticing a user to visit a specially crafted HTML page...

apache-cve-2021-42013-lab

Apache HTTP Server 2.4.49 路径遍历与远程代码执行 CVE-2021-42013 关于项目 在本项目中，我使用Docker搭建的实验室环境展示了Apache HTTP Server 2.4.49版本中存在的CVE-2021-42013漏洞。 目的是在可控环境中研究漏洞的产生原理、运行机制及其对系统的影响。 本研究仅供教育和实验室目的使用。 使用的技术 Docker Ubuntu 22.04 Apache HTTP Server 2.4.49 Bash curl 项目文件结构 root@kitploit: . ├── Dockerfile ├── index.htm...

Cisco-Unified-Communications-Manager-Server-Side-Forgery-Request-Vulnerability-CVE-2026-20230

CVE-2026-20230 Cisco Unified Communications Manager SSRF 任意文件写入到 RCE PoC 推导过程与思考 适用范围：仅用于本地靶场、授权复现环境、漏洞验证和防护规则分析。不要对未授权目标使用。本文主要分析 CVE-2026-20230 的利用链条、可验证现象、判断逻辑和防护思路，不提供可直接复制执行的攻击报文、WebShell 内容或命令执行载荷。 1. 漏洞背景 CVE-2026-20230 是 Cisco Unified Communications Manager（Unified CM / CUCM）和 Cisco...

CVE-2026-80469

An attacker may achieve arbitrary code execution on a target system by uploading a malicious device driver package, bypassing driver verification mechanisms, and triggering the execution of attacker-controlled code. User interaction is required...

CVE-2019-11043-Vulnerability

协作者：Olaf Madejski、Andrew Masone、Nate Desany PHP-FPM 反向隧道利用与持久化演示 CVE-2019-11043 — Debian PHP-FPM 路径处理漏洞 项目概述 2019 年 10 月，Debian 安全公告团队的研究人员 Emil Lerner 和 Andrew Danau 发布公告，警告 Debian 社区 PHP-FPM 中存在一个严重漏洞。由于 PHP-FPM 的路径处理代码验证不足 ，攻击者可以操纵特制请求，在某些 NGINX + PHP-FPM 配置下实现远程任意代码执行 。 本实验演示了以下漏洞的利用：...

GHSA-763M-79HH-57F2 vulnerabilities

Vulnerabilities for packages: open-webui...

-CVE-2021-44790

CVE-2021-44790 描述 CVE-2021-44790 CVE-2021-44790 描述了 Apache HTTP Server 的 modlua 中存在的一个系统级安全漏洞，特别是在 2.4.51 及更早版本中。该漏洞在 r:parsebody 函数不正确地处理 HTTP multipart/form-data 请求时触发，通常是由于发送了非标准格式的表单数据。 该问题不仅增加了拒绝服务攻击的可能性，而且还为通过精心构造的请求远程执行恶意代码提供了机会。 实验 CVE-2023-25690 使用 Ubuntu 22.04 作为攻击机 使用 Windows 10 64bit...

POC-WP-XSS2Shell-CVE-2026-64638

XSS2Shell — CVE-2026-64638 的 PoC 关于 XSS2Shell （CVE-2026-64638）攻击链的教育性概念验证（PoC）， 这是 pwn.ai 自主发现并于 2026 年 8 月 7 日披露的 WordPress Core 预认证 XSS → RCE 漏洞。 目录 1. 执行摘要 2. 法律声明 3. 攻击链架构 4. 环境要求 5. 仓库结构 6. 快速使用指南 7. 利用验证 8. 补充文档 执行摘要 CVE-2026-64638 是 WordPress 登录界面（wp-login.php）中一个预认证的反射型 跨站脚本...

CVE-2026-80469

CVE-2026-80469 affects the Device Manager extension shipped with SICK Sentio Creator , in releases up to and including version 2026.2 . An attacker can achieve arbitrary code execution on a target system by uploading a malicious device driver package that bypasses driver verification mechanisms, ...

EUVD-2026-76022

An attacker may achieve arbitrary code execution on a target system by uploading a malicious device driver package, bypassing driver verification mechanisms, and triggering the execution of attacker-controlled code. User interaction is required...

CVE-2026-88052

A flaw was found in Tesseract, an open-source Optical Character Recognition OCR engine. The UNICHARSET::loadviafgets function incorrectly trusts a declared character count, which can lead to an out-of-bounds write in memory. A remote attacker could exploit this vulnerability by providing a...

CVE-2026-88051

A flaw was found in Tesseract, an open-source Optical Character Recognition OCR engine. A heap out-of-bounds write vulnerability exists in the GenericVector::read function when processing a specially crafted .traineddata model. By manipulating the reserved and sizeused fields, a local attacker ca...

CVE-2026-84353

A flaw was found in Google Chrome on Android. This vulnerability, located in the Shared Tab Groups component, is a 'use after free' issue, which means the software attempts to use memory after it has been freed, potentially leading to corruption. A remote attacker could exploit this by leveraging...

CVE-2026-84354

A flaw was found in Google Chrome's FileSystem component. A remote attacker could exploit this vulnerability by leveraging social engineering techniques to trick a user into opening a specially crafted HTML page. This could lead to the execution of arbitrary code outside of the browser's security...

CVE-2026-84352

A flaw was found in Google Chrome's WebGL component on Android. This use-after-free vulnerability allows a remote attacker to execute arbitrary code outside the sandbox. The flaw can be exploited by enticing a user to visit a specially crafted HTML page...