CVE-2018-16763

Fuel CMS 1.4.1 - リモートコード実行 FUEL CMS 1.4.1 では、pages/select/ フィルターパラメーターまたは preview/ データパラメーターを介して PHP コード評価が可能です。これにより、認証前（Pre-Auth）リモートコード実行につながる可能性があります。 インストール root@kitploit: git clone https://github.com/Trushal2004/CVE-2018-16763.git cd CVE-2018-16763/ python3 -m pip install -r requirements.tx...

CVE-2024-25641-CACTI-RCE-1.2.26

CVE-2024-25641 - Cacti 1.2.26 - 任意ファイル書き込みからRCEへ 🌵 認証済みRCE Cacti version v1.2.26 概要 「パッケージインポート」機能を介して悪用可能な任意ファイル書き込みの脆弱性により、「テンプレートのインポート」権限を持つ認証済みユーザーが、Webサーバー上で任意のPHPコードを実行（RCE）できます。 概念実証 使用方法 root@kitploit: git clone https://github.com/StopThatTalace/CVE-2024-25641-CACTI-RCE-1.2.26.git && cd...

CVE-2023-46818-python-exploit

CVE-2023-46818 익스플로잇 이것은 ispconfig 3.2.11 및 이전 버전에 영향을 미치는 취약점에 대한 원본 php 스크립트의 python 버전입니다. 원본 PHP 소스: https://packetstormsecurity.com/files/176126/ISPConfig-3.2.11-PHP-Code-Injection.html 이 개념 증명은 교육 목적으로만 제공됩니다. 사용법 root@kitploit: python exploit.py http://10.10.10.10/ adminuser passwd 취약점 설명...

elFinder < 2.1.58 - Remote Code Execution

studio-42/elfinder before 2.1.58 contains a remote code execution caused by execution of PHP code in a .phar file, letting attackers execute arbitrary PHP code if the server parses .phar files as PHP, exploit requires server to parse .phar files as PHP. id: CVE-2021-23394 info: name: elFinder...

Citrix SD-WAN Center - Local File Inclusion

Citrix SD-WAN Center is susceptible to local file inclusion via the applianceSettingsFileTransfer function in ApplianceSettingsController. The function does not sufficiently validate or sanitize HTTP request parameter values used to construct a file system path. An attacker can trigger this...

MetInfo CMS <= 8.1 - Remote Code Execution

MetInfo CMS 7.9, 8.0, and 8.1 contain an unauthenticated PHP code injection vulnerability caused by insufficient input neutralization in the execution path, letting remote attackers execute arbitrary code remotely, exploit requires crafted requests. id: CVE-2026-29014 info: name: MetInfo CMS = 8....

Shield Security WP Plugin <= 18.5.9 - Local File Inclusion

The Shield Security Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 18.5.9 via the renderactiontemplate parameter. This makes it possible for unauthenticated attacker to include and execute PHP fil...

Invision Community <=5.0.6 Unauthenticated RCE via Template Injection

Invision Community 5.0.0 before 5.0.7 allows remote code execution via crafted template strings to themeeditor.php. The issue lies within the themeeditor controller /applications/core/modules/front/system/themeeditor.php, where a protected method named customCss can be invoked by unauthenticated...

OpenCATS - Command Injection

OpenCATS prior to commit 3002a29 contains a command injection caused by injection of PHP statements into the installer AJAX endpoint's databaseConnectivity action parameter, letting unauthenticated attackers execute arbitrary code, exploit requires incomplete installation wizard. id: CVE-2026-277...

HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.5 - Unauthenticated Local File Inclusion

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.6.5 via the 'template' parameter of the wooftextsearch AJAX action. This makes it possible for unauthenticated attackers to include and...

Ads Pro Plugin <= 4.89 - Local File Inclusion

The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.89 via the 'bsatemplate' parameter of the bsapreviewcallback function. This makes it possible for unauthenticated attackers to includ...

CVE-2024-9441

Nortek Linear eMerge E3 Pre-Auth RCE PoC CVE-2024-9441 Descrizione: Questo repository contiene un Proof of Concept PoC per lo sfruttamento di Nortek Linear eMerge E3 CVE-2024-9441, vulnerabile a Remote Code Execution RCE in stato di pre-autenticazione. La vulnerabilità viene attivata tramite un...

CVE-2023-46818-Exploit

CVE-2023-46818-Exploit Questo è il mio exploit personale per CVE-2023-46818, buon hacking! Questo exploit automatizza l'attacco descritto in CVE-2023-46818 sfruttando una vulnerabilità di injection PHP in ISPConfig versione 3.2.11 e precedenti. Accede al pannello ISPConfig utilizzando credenziali...

CVE-2023-46818

CVE-2023-46818 ISPConfig 3.2.11p1 से पहले के संस्करण में एक समस्या पाई गई। यदि adminallowlangedit सक्षम है, तो एक व्यवस्थापक द्वारा भाषा फ़ाइल संपादक में PHP कोड इंजेक्शन किया जा सकता है। उपयोग root@kitploit: ❯ python3 CVE-2023-46818.py Usage: python3 CVE-2023-46818.py Poc of CVE-2023-46818...

CVE-2023-46818

CVE-2023-46818 ISPConfig - PHP-Code-Injection PoC Exploit Bash CVE-2023-46818 Authentifizierte PHP-Code-Injection in ISPConfig Weitere Details: Advisory CVE-2023-46818 PoC Einleitung ISPConfig Versionen Hinweis: Dieser Exploit erfordert gültige ISPConfig-Admin-Anmeldeinformationen und stellt eine...

php_code_analysis

questo script scannerà il tuo codice lo script può trovare 1. checkfileupload issues 2. hostheaderinjection 3. SQl injection 4. insecure deserialization 5. openredirect 6. SSRF 7. XSS 8. LFI 9. commandinjection caratteristiche 1. veloce 2. report semplice utilizzo: root@kitploit: python code.py...

CVE-2023-27372

Exploit CVE-2023-27372 Exploit per CVE-2023-27372 , una vulnerabilità di esecuzione remota di codice non autenticata nel CMS SPIP che interessa le versioni precedenti alla 4.2.1. ⚠️ Solo a scopo educativo. Utilizzare esclusivamente su sistemi di propria proprietà o per i quali si dispone di...

php-jpeg-injector

php-jpeg-injector Injiziert PHP-Payloads in JPEG-Bilder. Verwandt mit diesem Beitrag. Anwendungsfall Sie haben eine Webanwendung, die ein JPEG-Bild durch die GD-Grafikbibliothek von PHP ausführt. Beschreibung Dieses Skript injiziert PHP-Code in ein angegebenes JPEG-Bild. Die Webanwendung führt de...

CVE-2025-49132_HTB_SEASON10

CVE-2025-49132 - Exploit RCE del Pannello Pterodactyl Stagione 10 HTB - Writeup della macchina Pterodactyl Panoramica Obiettivo: Macchina HTB Pterodactyl Difficoltà Media CVE: CVE-2025-49132 Gravità: Critica CVSS 9.8 Tipo di attacco: Esecuzione di codice remoto non autenticata Interessati: Pannel...

CVE-2026-49049

Scanner di massa CVE-2026-49049 Scanner di massa per vulnerabilità CVE-2026-49049 - Esecuzione remota di codice non autenticata nel framework Helix3 di Joomla. 📌 Descrizione Questo strumento verifica più siti Joomla per la vulnerabilità CVE-2026-49049 presente nel plugin Helix3. La vulnerabilità...