CVE-2024-21546

CVE-2024-21546 Python エクスプロイト 🔥 説明 この Python エクスプロイトスクリプトは、UniSharp が作成した脆弱性のある Laravel Filemanager を標的とし、認証済みユーザーがファイル制限を回避して悪意のあるファイルをアップロードできるようにします。アップロードされたペイロードが実行されると、リモートコード実行 RCE につながる可能性があります。 このエクスプロイトは以下を実行します: ユーザー指定の laravelsession を検証します 正規表現で CSRF token を抽出します PHP リバースシェルペイロードを含む偽...

CVE-2024-21546

UniSharp Laravel Filemanager 未认证 RCE（CVE-2024-21546） 本仓库包含安全评估工具、检测模板以及自动化利用工具包，用于识别和利用使用 UniSharp/laravel-filemanager 包（版本 file-getClientOriginalExtension; if inarray$extension, $unallowedextensions throw new \Exception'File extension is not allowed.'; return $this; 当攻击者上传名为 poc.php. 的文件时： Symfo...

CVE-2025-58440

CVE-2025-58440 Laravel FileManager 上的多语言文件攻击和空字节注入导致的远程代码执行 RCE 概述 unisharp/laravel-filemanager 包的 2.11 版本存在 远程代码执行 RCE 漏洞，原因是文件上传时的文件类型验证不当。攻击者可以利用文件扩展名验证的缺陷，上传伪装成 GIF 图像的恶意 PHP 文件。具体来说，攻击者可以在 .php 文件扩展名后附加一个点（.）并包含 GIF89a; 头，使文件看起来像图像，从而绕过验证检查。这使得攻击者能够在服务器上执行任意 PHP 代码，导致 远程代码执行 RCE 。 Docker 设置演...

Exploit for CVE-2024-21546

UniSharp Laravel Filemanager Unauthenticated RCE CVE-2024-215...

Arbitrary File Upload

Overview unisharp/laravel-filemanager is an A file upload/editor intended for use with Laravel 5 to 6 and CKEditor / TinyMCE. Affected versions of this package are vulnerable to Arbitrary File Upload via the upload process. An attacker can execute arbitrary code by uploading a malicious file usin...

EUVD-2024-3559

Malicious code in bioql PyPI...

Exploit for CVE-2025-58440

CVE-2025-58440 Remote Code Execution RCE via Polyglot File A...

CVE-2022-40734

UniSharp laravel-filemanager aka Laravel Filemanager before 2.6.4 allows download?workingdir=%2F.. directory traversal to read arbitrary files, as exploited in the wild in June 2022. This is related to league/flysystem before 2.0.0...

Arbitrary Code Injection

Overview unisharp/laravel-filemanager is an A file upload/editor intended for use with Laravel 5 to 6 and CKEditor / TinyMCE. Affected versions of this package are vulnerable to Arbitrary Code Injection through using a valid mimetype and inserting the . character after the php file extension. Thi...

Exploit for CVE-2024-21546

CVE-2024-21546 Python Exploit 🔥 Description This Python ex...

CVE-2024-21546

Versions of the package unisharp/laravel-filemanager before 2.9.1 are vulnerable to Remote Code Execution RCE through using a valid mimetype and inserting the . character after the php file extension. This allows the attacker to execute malicious code...

UniSharp Laravel Filemanager Code Injection vulnerability

Versions of the package unisharp/laravel-filemanager before 2.9.1 are vulnerable to Remote Code Execution RCE through using a valid mimetype and inserting the . character after the php file extension. This allows the attacker to execute malicious code...

GHSA-6569-3785-R3V6 UniSharp Laravel Filemanager Code Injection vulnerability

Versions of the package unisharp/laravel-filemanager before 2.9.1 are vulnerable to Remote Code Execution RCE through using a valid mimetype and inserting the . character after the php file extension. This allows the attacker to execute malicious code...

CVE-2024-21546

Versions of the package unisharp/laravel-filemanager before 2.9.1 are vulnerable to Remote Code Execution RCE through using a valid mimetype and inserting the . character after the php file extension. This allows the attacker to execute malicious code...

CVE-2024-21546

Versions of the package unisharp/laravel-filemanager before 2.9.1 are vulnerable to Remote Code Execution RCE through using a valid mimetype and inserting the . character after the php file extension. This allows the attacker to execute malicious code...

CVE-2024-21546

Versions of the package unisharp/laravel-filemanager before 2.9.1 are vulnerable to Remote Code Execution RCE through using a valid mimetype and inserting the . character after the php file extension. This allows the attacker to execute malicious code...

CVE-2024-21546

The CVE-2024-21546 entry specifies a Laravel Filemanager (unisharp/laravel-filemanager) vulnerability: versions before 2.9.1 are susceptible to Remote Code Execution (RCE) via a crafted request that uses a valid mimetype and inserts a dot after the PHP file extension, enabling execution of arbitr...

CVE-2024-21546

Versions of the package unisharp/laravel-filemanager before 2.9.1 are vulnerable to Remote Code Execution RCE through using a valid mimetype and inserting the . character after the php file extension. This allows the attacker to execute malicious code...

CVE-2024-21546: Improper Control of Generation of Code

Versions of the package unisharp/laravel-filemanager before 2.9.1 are vulnerable to Remote Code Execution RCE through using a valid mimetype and inserting the . character after the php file extension. This allows the attacker to execute malicious code...

laravel-filemanager 代码注入漏洞

laravel-filemanager is an open source tool from UniSharp. A security vulnerability exists in laravel-filemanager versions prior to 2.9.1 that stems from vulnerability to remote code execution attacks and allows attackers to execute malicious code...