38 matches found
wordpress-php-object-helper
wordpress-php-object-helper 概要 既知のプラグインにPHPオブジェクトエクスプロイトがあるが、その問題を悪用してphpggcで実行するためにどのライブラリを使うべきか判断する必要がある、という場合に役立ちます。 これがあなたの助けになるはずです。 出力例 $ python3 finder.py -u http://wordpress.lan -f wp-plugins.lst Processing URLs:...
CVE-2025-49113
📧 Roundcube ≤ 1.6.10 인증 후 RCE PHP 객체 역직렬화를 통한 CVE-2025-49113 🔍 분석 보고서 Roundcube버전 ≤ 1.6.10에서 안전하지 않은 PHP 객체 역직렬화로 인한 심각한 인증 후 원격 코드 실행 취약점이 발견되었습니다. 이 심각한 결함은 10년 이상 코드베이스에 조용히 존재해 왔습니다. 전체 기술 분석 및 익스플로잇 세부 정보는 다음을 방문하세요: 👉 https://fearsoff.org/research/roundcube 🐳 빠른 설치 Docker 사용 다음 명령은 Docker...
CVE-2025-49113-Simulation
Roundcube RCE 실습 환경 CVE-2025-49113 Roundcube Webmail에서 식별된 중요한 인증 후 RCE 취약점CVE-2025-49113을 시뮬레이션하고 익스플로잇하기 위한 실습형 컨테이너 기반 실습 환경입니다. 📖 취약점 정보 이 실습은 Roundcube 웹메일 클라이언트를 대상으로 하는 정교한 공격 체인을 보여줍니다. 이 취약점은 인증 후 원격 코드 실행RCE 으로, PHP 세션 데이터의 부적절한 처리로 인해 발생하며 PHP 객체 역직렬화 로 이어집니다. 인증된 공격자는 악성 PHP 객체를 제작하여...
CVE-2025-49113
Python Script for CVE-2025-49113 사용법: python exploit.py https://ubuntu.com/security/CVE-2025-49113 설명: Roundcube Webmail 1.5.10 미만 및 1.6.x 1.6.11 미만 버전에서는 인증된 사용자가 URL의 from 매개변수가 program/actions/settings/upload.php에서 검증되지 않아 원격 코드 실행이 가능하며, 이로 인해 PHP 객체 역직렬화가 발생합니다...
givewp-cve-2026-82222-rce-lab
CVE-2026-82222 — GiveWP マーカーのみのRCE検証ラボ CVE-2026-82222を隔離されたDockerラボで再現・検証するためのセキュリティ研究用マテリアルです。 直接RCE PoCとURLスキャンにはCVE-2026-8222-RCE.py を使用してください 判定 ステータス: 提供されたラボで実証済み GiveWP 4.16.5.1では、初期状態で認証されていない攻撃者がPHPオブジェクトグラフを永続化し、GiveWPのセッション処理を通じてそれを復元し、WordPressのWebサーバーユーザーとして固定マーカーコマンドを実行することが可能です。...
exploit-CVE-2025-49113
CVE-2025-49113 PoC リポジトリ CVE-2025-49113 の概要 CVE-2025-49113 は、Roundcube Webmail バージョン 1.5.10 および 1.6.11 より前のバージョンに影響する重大な脆弱性です。2025年に発見されたこの欠陥は、/settings/upload.php エンドポイントにおける PHP オブジェクトデシリアライゼーションを通じて、リモートコード実行 RCE を可能にします。この脆弱性は、from...
CVE-2026-45077 Symfony: Unauthenticated PHP Object Deserialization in MonologBridge server:log Listener
Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.52, 6.4.40, 7.4.12, and 8.0.12, the server:log listener Symfony\Bridge\Monolog\Command\ServerLogCommand binds to 0.0.0.0:9911 by default and processes each received frame with...
[SECURITY] [DSA 6317-1] symfony security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6317-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 01, 2026 https://www.debian.org/security/faq -...
GHSA-M7V2-7GXM-VC2V Symfony has Unauthenticated PHP Object Deserialization in MonologBridge server:log Listener
Description Symfony\Bridge\Monolog\Command\ServerLogCommand the server:log console command is a development-time helper that opens a TCP listener and displays log records pushed to it by the application's logging pipeline. Two unsafe defaults combine into a remotely reachable PHP...
Exploit for Deserialization of Untrusted Data in Roundcube Webmail
CVE-2025-49113 — Roundcube Post-Auth RCE via PHP Object Deseri...
VulnCheck KEV: CVE-2024-2053
The Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user. This issue was demonstrated on version 4.50 of the The Artica-Proxy administrative web application attempts to...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 / 25.04 : Roundcube vulnerability (USN-7584-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 / 25.04 host has packages installed that are affected by a vulnerability as referenced in the USN-7584-1 advisory. It was discovered that Roundcube Webmail did not properly sanitize the from parameter in a URL,...
Ubuntu: Security Advisory (USN-7584-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-7584-1: Roundcube vulnerability
It was discovered that Roundcube Webmail did not properly sanitize the from parameter in a URL, leading to PHP Object Deserialization. A remote attacker could possibly use this issue to execute arbitrary code...
Exploit for CVE-2025-49113
CVE‑2025‑49113 – Post‑Auth Remote Code Execution in Roundcube...
Roundcube 1.6.10 - Remote Code Execution (RCE)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Roundcube ≤ 1.6.10 Post-Auth RCE via PHP Object Deserialization', 'Description' = %q Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allo...
Fedora 42 : roundcubemail (2025-70701de9de)
The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-70701de9de advisory. This is a security update to the stable version 1.6 of Roundcube Webmail. It provides fixes to recently reported security vulnerabilities: Fix Post-Auth RCE...
Fedora 41 : roundcubemail (2025-a5f56fe8ff)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-a5f56fe8ff advisory. This is a security update to the stable version 1.6 of Roundcube Webmail. It provides fixes to recently reported security vulnerabilities: Fix Post-Auth RCE...