277 matches found
OctoberCMS - Account Takeover
octobercms in a CMS platform based on the Laravel PHP Framework. In affected versions of the october/system package an attacker can request an account password reset and then gain access to the account using a specially crafted request. The issue has been patched in Build 472 and v1.1.5. id:...
CVE-2021-32708
CVE-2021-32708 Affected versions of this package are vulnerable to Race Condition. The whitespace normalisation using in 1.x and 2.x removes any unicode whitespace. Under certain specific conditions this could potentially allow a malicious user to execute code remotely. How the Exploit Works...
exploit_laravel_cve-2018-15133
Exploit Laravel pour CVE-2018-15133 Ce code exploite CVE-2018-15133 et est basé sur le PoC de kosmiz et l'exploit Metasploit pour cette vulnérabilité. Je l'ai surtout réalisé pour une machine sur Hack The Box, parce que je ne voulais pas utiliser Metasploit à ce moment-là et comme excuse pour...
EXPLOIT-CVE-2025-27515
CVE-2025-27515 Proof of Concept A practical demonstration of CVE-2025-27515 , a file upload validation bypass vulnerability in Laravel Framework ≤ 12.0.0. Vulnerability Overview CVE-2025-27515 is a validation bypass that allows attackers to circumvent file upload restrictions when Laravel...
laravel-framework
About Laravel Note: This repository contains the core code of the Laravel framework. If you want to build an application using Laravel, visit the main Laravel repository. Laravel is a web application framework with expressive, elegant syntax. We believe development must be an enjoyable, creative...
CLSA-2026-1790868507 TuxCare security update for laravel/framework (1 CVE)
TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 12.58.0-p4+tuxcare...
Lab-for-cve-2018-15133
Summary: MExploiting CVE-2018-15133 Deserialization Vulnerability This exploit takes advantage of a deserialization vulnerability in the Laravel Framework through 5.5.40 and 5.6.x through 5.6.29. Description Remote code execution might occur as a result of an unserialize call on a potentially...
CVE-2018-15133-laravel-framework
CVE-2018-15133 - Laravel Framework 5.6.x Vulnerable Lab This repo provides a reproducible Docker lab for CVE-2018-15133 Laravel Framework token unserialize RCE when APPKEY is known. The app is pinned to a vulnerable Laravel 5.6.x version and exposes a simple /poc POST route under the web middlewa...
Larascript
| | | | | | / || '| / |/ | / || '|| || ' \ | | | | | | || | | | |\ | | | | || | || | || ,||| ,||/ ||| ||| ./ | || Authors: @pwnedshell & @rsgbengi 📌 What its Larascript? Larascript is a script which take advantage from CVE-2018-15133 and can execute remote commands if a vulnerable Laravel app...
EUVD-2026-68765
Livewire DOM-based cross-site scripting during client-side state handling...
CVE-2026-81887 Livewire DOM-based cross-site scripting during client-side state handling
Livewire is a full-stack framework for Laravel. From 3.0.0-beta.1 until 3.8.3 and 4.3.4, the dot-notated query-string parser in js/plugins/history/index.js, including fromQueryString and insertDotNotatedValueIntoData, accepts the proto, constructor, and prototype path segments and creates inherit...
CVE-2026-35445 Winter: Authenticated backend users can bypass Users controller permission checks
Winter CMS is a content management system built on the Laravel PHP framework. In versions prior to 1.2.13, the backend did not validate the handler name submitted through the form postback handler POST field, allowing an authenticated backend user to invoke arbitrary controller methods, including...
PT-2026-80078
TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 6.20.45-p2+tuxcare...
CLSA-2026-1784077493 TuxCare security update for laravel/framework (1 CVE)
TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 7.30.7-p2+tuxcare...
CLSA-2026-1783558967 TuxCare security update for laravel/framework (1 CVE)
TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 9.52.21-p2+tuxcare...
CLSA-2025-1765932544 TuxCare security update for laravel/framework (5 CVEs)
TuxCare rebuilt laravel/framework to address 5 CVEs. Fixed in 5.8.38-p1+tuxcare...
CLSA-2026-1774486145 TuxCare security update for laravel/framework (3 CVEs)
TuxCare rebuilt laravel/framework to address 3 CVEs. Fixed in 8.12.0-p1+tuxcare...
CLSA-2026-1776214146 TuxCare security update for laravel/framework (5 CVEs)
TuxCare rebuilt laravel/framework to address 5 CVEs. Fixed in 8.12.0-p3+tuxcare...