CVE-2025-49113

CVE-2025-49113 – PoC de Ejecución Remota de Código RCE en Roundcube Este repositorio contiene un exploit Proof-of-Concept PoC para CVE-2025-49113 , una vulnerabilidad crítica de ejecución remota de código en versiones de Roundcube Webmail anteriores a 1.5.10 y 1.6.11. La vulnerabilidad surge de u...

CVE-2021-24307-all-in-one-seo-pack-admin-rce

Admin PHP unserialization RCE in All in one SEO pack CVE-2021-24307 Simple PoC of an admin authenticated RCE in AISEO = 4.1.0.1 provided as an example. Full write-up here: https://darkpills.com/php-unserialize-write-up-with-admin-rce-in-all-in-one-seo-pack-cve-2021-24307/ Usage: root@kitploit: ph...

Roundcube-1.6.10-Post-Auth-RCE-CVE-2025-49113-

🚨 漏洞报告：Roundcube Webmail 中的 CVE-2025-49113 ⚠️ 重要提醒 — 负责任使用 本材料仅供教育和研究目的使用。 严格禁止将此处描述的信息和工具用于任何非法或恶意 活动。 作者对滥用此内容不承担任何责任 。 本仓库包含关于 CVE-2025-49113 漏洞的详细报告，这是一个由于 PHP 对象反序列化导致的关键远程代码执行（RCE）缺陷，影响 Roundcube Webmail 直至 1.6.10 的版本。 本项目的目的是作为教育和研究资源，演示如何在受控环境中识别和利用该漏洞。 📄 完整文档 要访问有关此漏洞的完整信息，包括服务部署、使用...

CVE-2024-2054

CVE-2024-2054 Artica-Proxy 管理 Web 应用程序不安全反序列化（RCE） 针对 ARTICA PROXY 管理 Web 应用程序 CVE-2024-2054 的漏洞利用概念验证（PoC） 博客文章 更多详情请参见：https://blog.sonicwall.com/en-us/2024/03/unpatched-php-deserialization-vulnerability-in-artica-proxy/ 使用方法 root@kitploit: $ python3 CVE-2024-2054.py Enter url:...

CVE-2026-58025

CVE-2026-58025 — MediaWiki PHP Deserialization RCE via Log Entry Import WikiImporter → LogEntryBase::extractParams → unserialize user-controlled logparams → RCE Overview CVE-2026-58025 is a critical CVSS 9.8 deserialization of untrusted data vulnerability in MediaWiki Wikimedia Foundation. The...

CVE-2022-30778

Advertencia La vulnerabilidad ha sido revocada Override Esto trata sobre CVE-2021-43503. Requisitos PHP = 8.0 Composer Reproducir la vulnerabilidad 1. Iniciar el servicio root@kitploit: composer install cp .env.example .env php artisan key:generate php artisan serve it will listening 8000 port in...

CVE-2021-3007-docker-poc

CVE-2021-3007 — ثغرة إلغاء تسلسل HTTP في Laminas/Zend RCE يحتوي هذا المستودع على إثبات مفهوم PoC قابل لإعادة الإنتاج بالكامل وقالب استغلال Nuclei خاص بثغرة CVE-2021-3007، وهي ثغرة حرجة في إلغاء تسلسل PHP ضمن Zend\Http\Response\Stream laminas-http قالب استغلال Nuclei ├── docker-compose.yml - بيئة...

CVE-2025-49113

Exploit CVE-2025-49113 Roundcube Un exploit Python per CVE-2025-49113, che sfrutta una vulnerabilità in Roundcube webmail che consente l'esecuzione remota di codice tramite deserializzazione di oggetti PHP. Panoramica Questo exploit sfrutta una vulnerabilità di deserializzazione nella funzionalit...

CVE-2025-1913-PoC

CVE-2025-1913 -- Prova de Conceito PoC Este repositório contém uma Prova de Conceito PoC apenas educacional para CVE-2025-1913 , criada por Suhaib518 🇸🇦. Esta PoC demonstra como uma entrada PHP serializada especialmente manipulada pode acionar lógica vulnerável em componentes afetados do WordPress...

cve-2020-9006

CVE-2020-9006: Эксплойт для плагина Popup-Builder WordPress Использование: root@kitploit: Create and upload payload Also see: php create-serialized-payload.php -h $ php create-serialized-payload.php | curl -F 'sprunge=-' http://sprunge.us http://sprunge.us/XXXXXX Run exploit $ nmap --script...

better-poc-for-CVE-2018-15133

PoC migliore per CVE-2018-15133 Un PoC automatizzato per CVE 2018-15133 Tutti i crediti vanno a kozmic che ha realizzato il PoC originale di CVE 2018-15133 Questo è solo uno script di automazione che ho creato mentre lavoravo su una macchina di laboratorio con questa vulnerabilità, perché non...

CVE-2021-43503

Avviso La vulnerabilità è stata revocata Override Questo riguarda CVE-2021-43503, non sono riuscito a replicare questa vulnerabilità attraverso exp Requisiti PHP 7.1. Composer registrar=$b; namespace Illuminate\Queue\Capsule class Manager protected $manager; public function construct$c...

Roundcube Webmail - Remote Code Execution

Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execution by authenticated users because the from parameter in a URL is not validated in program/actions/settings/upload.php, leading to PHP Object Deserialization. id: CVE-2025-49113 info: name: Roundcube Webmail - Remote...

CVE-2025-49113

CVE-2025-49113 Roundcube ≤ 1.6.10 RCE post-autenticazione tramite deserializzazione di oggetti PHP...

CVE-2025-49113-Roundcube-RCE

CVE-2025-49113 — Roundcube RCE nach Authentifizierung durch PHP-Objektdeserialisierung Übersicht...

CVE-2026-73397

Unauthenticated Deserialization of untrusted data in Youzify = 1.3.7 versions...

CVE-2026-73397

Unauthenticated Deserialization of untrusted data in Youzify = 1.3.7 versions...

CVE-2025-15672 Chama < 1.0.13 - Unauthenticated PHP Object Injection

The ChamaWP WordPress plugin before 1.0.13 does not properly validate user input before passing it to a PHP deserialization function, allowing unauthenticated attackers to inject arbitrary PHP objects, which could lead to remote code execution when a suitable gadget chain is present via other...

CVE-2026-15962

The Fluent Forms Pro Add On Pack plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.2.6 via deserialization of untrusted input. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject a PHP Object. The...

CVE-2026-45162 Pimcore: Unsafe PHP Deserialization in Multiple Locations Without allowed_classes Restriction

Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 LTS and 12.3.7, multiple Pimcore locations call PHP's unserialize on data from database columns and filesystem files without the allowedclasses restriction, including lib/Tool/Authentication.php, models/Site/Dao.php...