SecurityNotFound

Webshell 404 Page introuvable 📼 Clonez-moi ! Clonez ou téléchargez le projet : git clone --depth=1 https://github.com/CosasDePuma/SecurityNotFound.git 📦 « Installation » Le fichier src/404.php doit être placé sur le serveur cible et celui-ci doit pouvoir exécuter les fichiers .php. Voici un exemp...

CPLDCOMTrigger

CPLCOMTrigger Описание Скрипт на Python, использующий сценарии Impacket для запуска загрузки .cpl-файла в память через DCOM-объект. Путь к CPL-файлу должен быть предварительно добавлен в реестр. Скрипт использует функцию Open в интерфейсе IOpenControlPanel для загрузки DLL-библиотеки CPL элемента...

cyberpanel

🛠️ CyberPanel Панель управления веб-хостингом на базе OpenLiteSpeed, созданная для упрощения управления хостингом. 🔧 Возможности и сервисы 🔐 Различные уровни доступа пользователей через ACL. 🌌 Автоматический SSL для безопасных веб-сайтов. 💻 FTP-сервер для передачи файлов. 🕒 Лёгкий DNS-сервер...

CPLDCOMTrigger

CPLDCOMTrigger Description Un script Python dépend des scripts Impacket pour déclencher le chargement d'un fichier .cpl en mémoire à l'aide d'un objet DCOM. Le chemin du fichier CPL doit déjà être ajouté au registre. Le script utilise la fonction Open de l'interface IOpenControlPanel pour charger...

silverboxcc

Reverse engineered android malware called Red Alert V2.0. At the time of analysis, there were no longer any C2 servers running and so we were unable to observe any traffic between the malware and the C2 server. So we figured out the C2 protocol and wrote this control panel. Bot's traffic from the...

CVE-2023-41362_MyBB_ACP_RCE

CVE-2023-41362 - MyBB ACP RCE Эксплойт для CVE-2023-41362 Пост в блоге: https://blog.sorcery.ie/posts/mybbacprce...

CVE-2026-105985

Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. Any authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding...

CVE-2026-105985 Authenticated RCE via render-components Entry Type overrides

Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. Any authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding...

EUVD-2026-93362

Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. Any authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding...

CVE-2026-105985 Authenticated RCE via render-components Entry Type overrides

Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. Any authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding...

CVE-2026-105985

Craft CMS 5.10.13.2 is vulnerable to authenticated remote code execution (RCE) within the Control Panel's app/render-components action. An authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides to manipulate an EntryType object's ...

PT-2026-106708

Craft CMS 5.10.13.2 contains an authenticated remote code execution vulnerability in the Control Panel action app/render-components. Any authenticated user with basic Control Panel access can submit request-controlled component classes and property overrides. By first overriding...

CVE-2026-36670

CVE-2026-36670 Эксплойт для слепой SQL-инъекции на основе времени в панели управления OpenSIPS. Этот эксплойт использует аутентифицированную уязвимость SQL-инъекции в модуле aliasmanagement.php проекта opensips. GET-параметр table некорректно санитизируется, что позволяет атакующему внедрить...

cve-2020-0688

cve-2020-0688 cve-2020-0688 Se connecter avec un utilisateur disposant d'un privilège d'adresse e-mail n'est pas un problème. Récupérer - VIEWSTATEGENERATOR depuis le code source de la page Récupérer - la valeur du cookie ASP.NETSessionId pour la valeur viewstateuserkey Télécharger YSO ici...

AhMyth-Android-RAT

AhMyth Android Rat Version bêta Il se compose de deux parties : Côté serveur : application de bureau basée sur le framework Electron panneau de contrôle Côté client : application Android porte dérobée Pour commencer Vous avez deux options pour l'installer 1 À partir du code source Prérequis :...

CVE-2026-70650 GetSimple CMS: Authenticated Stored XSS in backup viewer (backup-edit.php) via output decoding of page meta fields and content

GetSimple CMS is a content management system CMS, and GetSimple CMS CE is the community edition of that CMS. In versions 3.3.22 and prior, an authenticated stored Cross-Site Scripting XSS vulnerability exists in the page backup viewer admin/backup-edit.php. Page fields are correctly HTML-encoded...

CVE-2026-70650 GetSimple CMS: Authenticated Stored XSS in backup viewer (backup-edit.php) via output decoding of page meta fields and content

GetSimple CMS is a content management system CMS, and GetSimple CMS CE is the community edition of that CMS. In versions 3.3.22 and prior, an authenticated stored Cross-Site Scripting XSS vulnerability exists in the page backup viewer admin/backup-edit.php. Page fields are correctly HTML-encoded...

CVE-2026-31857

CVE-2026-31857: RCE в панели управления Craft CMS CVE-2026-31857 — это уязвимость удалённого выполнения кода в правилах реляционных условий Craft CMS. BaseElementSelectConditionRule::getElementIds отображает контролируемый пользователем ввод как Twig-шаблон без песочницы. Аутентифицированный...

CVE-2026-54674

FreePBX is an open source IP PBX. Prior to versions 16.0.39 and 17.0.7, users authenticated via User Control Panel UCP are able to execute arbitrary commands on the PBX as the webserver user typically asterisk using specially crafted HTTP strings. Authenticated access to UCP is required. Note tha...

CVE-2026-54674 Authenticated Command Injection in FreePBX UCP Interface

FreePBX is an open source IP PBX. Prior to versions 16.0.39 and 17.0.7, users authenticated via User Control Panel UCP are able to execute arbitrary commands on the PBX as the webserver user typically asterisk using specially crafted HTTP strings. Authenticated access to UCP is required. Note tha...