144 matches found
masta-cve-2026-48907
MASTA CVE-2026-48907 Scanner Scanner autonome et monofichier pour Joomla! JCE Editor Auteur : Hussein Mohamed masta ghimau !CAUTION 🚨 AVERTISSEMENT — À LIRE AVANT UTILISATION CECI EST UN OUTIL DE TEST DE SÉCURITÉ INTRUSIF. THIS TOOL IS FOR AUTHORIZED SECURITY ASSESSMENTS ONLY. Scanning systems yo...
CVE-2022-22909
CVE-2022-22909 Hotel Druid 3.0.3 - Exécution de code à distance RCE Exploit par kaal Exploits 1. HotelDruidExploit.py Cet exploit créera une nouvelle chambre avec notre charge utile PHP comme nom de chambre. Utilisation : $ ./HotelDruidExploit.py -h $ ./HotelDruidExploit.py -u...
CVE-2025-49113-Roundcube_1.6.10
CVE-2025-49113 – Exécution de code à distance authentifiée dans Roundcube 1.6.10 ⚠️ Avertissement Ce dépôt est destiné strictement à des fins éducatives et de recherche. Toutes les démonstrations ont été réalisées dans un environnement de laboratoire contrôlé. Tester ou exploiter des systèmes sans...
CVE-2025-34085-Multi-target
CVE-2025-34085 Scanner RCE Multi-Cible Scanner d'exploitation de masse pour CVE-2025-34085 — une vulnérabilité de code à distance non authentifié dans le plugin WordPress Simple File List. Cet outil téléverse une charge utile PHP déguisée en image, la renomme via un moteur de fichier vulnérable, ...
0-click-RCE-Exploit-for-CVE-2024-51791
CVE-2024-51791 / 0-Click RCE 익스플로잇 작성자: Joshua Provoste https://x.com/JoshuaProvoste/status/1858910306140893268 이 저장소는 CVE-2024-51791에 대한 개념 증명 익스플로잇을 포함합니다. 이 취약점은 취약한 WordPress 폼 플러그인에서 인증 없이 임의의 파일을 업로드할 수 있게 하여 원격 코드 실행RCE으로 이어집니다. 스크립트가 수행하는 작업 이 스크립트는 인증 없이 취약한 폼 엔드포인트를 통해 PHP 페이로드를 업로드합니다...
exploit-CVE-2015-3306
ProFTPd 1.3.5 - modcopy Удаленное выполнение команд ProFTPD — это высоконастраиваемый FTP-демон для Unix и Unix-подобных операционных систем. ProFTPD возник из желания создать безопасный и настраиваемый FTP-сервер. Он был вдохновлён значительным восхищением веб-сервером Apache. В отличие от...
CVE-2015-8351
gwollebuster Ce script est un exploit pour l'ancien plugin WordPress gwolle utilisation : ./gwollebuster.py premier argument = l'URL cible de votre WordPress qui a installé gwolle deuxième argument = votre IP troisième argument = port d'écoute pour le reverse shell exemple : ./gwollebuster.py...
SPIP-BigUp-Unauthenticated-RCE-Exploit-CVE-2024-8517
SPIP BigUp: неаутентифицированный RCE-эксплойт CVE-2024-8517 Описание Этот Python-скрипт эксплуатирует уязвимость неаутентифицированного удалённого выполнения кода RCE в плагине BigUp системы управления содержимым SPIP Système de Publication pour l'Internet Partagé. Проблема кроется в функции...
0-click-RCE-Exploit-for-CVE-2024-51793
CVE-2024-51793 / 0-Click RCE Exploit Автор: Joshua Provoste https://x.com/JoshuaProvoste/status/1858668072279626138 Этот репозиторий содержит proof-of-concept эксплойт для CVE-2024-51793 — уязвимости произвольной загрузки файлов без аутентификации в уязвимом плагине WordPress, приводящей к...
CVE-2026-36471
Deserialization of Untrusted Data of the postdata parameter in cnparseurl in CuteNews v.2.1.2 allows a remote attacker to inject arbitrary values into internal request variables including referer via a crafted base64-encoded serialized PHP payload submitted as a POST parameter...
CVE-2026-39932
OpenEMR through 8.2.0 contains a remote code execution vulnerability in the document category tree component library/classes/Tree.class.php that allows authenticated administrators to execute arbitrary operating system commands by injecting PHP payloads into the categories database table. Attacke...
CVE-2026-39932
OpenEMR through 8.2.0 contains a remote code execution vulnerability in the document category tree component library/classes/Tree.class.php that allows authenticated administrators to execute arbitrary operating system commands by injecting PHP payloads into the categories database table. Attacke...
CVE-2026-39932
CVE-2026-39932 affects OpenEMR 8.2.0, enabling remote code execution through the document category tree component. The vulnerability arises from an unsanitized eval() in CategoryTree (library/classes/Tree.class.php) that executes PHP payloads injected into the categories table. An authenticated a...
EUVD-2026-52345
OpenEMR through 8.2.0 contains a remote code execution vulnerability in the document category tree component library/classes/Tree.class.php that allows authenticated administrators to execute arbitrary operating system commands by injecting PHP payloads into the categories database table. Attacke...
PT-2026-67435
OpenEMR through 8.2.0 contains a remote code execution vulnerability in the document category tree component library/classes/Tree.class.php that allows authenticated administrators to execute arbitrary operating system commands by injecting PHP payloads into the categories database table. Attacke...
CVE-2026-39932: Improper Neutralization of Directives in Dynamically Evaluated Code
OpenEMR through 8.2.0 contains a remote code execution vulnerability in the document category tree component library/classes/Tree.class.php that allows authenticated administrators to execute arbitrary operating system commands by injecting PHP payloads into the categories database table. Attacke...
OS Command Exec, Unix Command Shell, Bind TCP (via socat)
Execute an OS command from PHP. Creates an interactive shell via socat Module Options msf use payload/php/unix/cmd/bindsocattcp msf payloadbindsocattcp show actions ...actions... msf payloadbindsocattcp set ACTION msf payloadbindsocattcp show options ...show and set options... msf...
Exploit for CVE-2026-6433
CVE-2026-6433 — Proof of Concept FlipperCode — Custom CSS,...
CVE-2021-47936
OpenCATS 0.9.4 is affected by a remote code execution vulnerability. Unauthenticated attackers can upload PHP payloads disguised as resume attachments via the careers job application endpoint and then execute commands by accessing the uploaded file. The CVE description in the connected sources co...