CVE-2019-11447_reverse_shell_upload

CVE-2019-11447 CuteNews 2.1.2 リバースシェルアップロード Mt-Code POC を少し修正したバージョンで、Webシェルではなく完全なリバースシェルを起動します。 このエクスプロイトは、有名な PentestMonkey PHP Reverse Shell を使用しています。 インストール pip install -r requirements.txt 使用例: アプリケーション上でユーザーを作成する 次を実行する python exploit.py http://target/index.php myuser mypassword...

CVE-2021-3831

PHP Exploit CVE-2021-3831 脚本 概述 该 PHP 脚本旨在通过生成特定的 MD5 哈希值并发送 HTTP 请求来与目标网站交互，以利用潜在漏洞。本脚本仅用于教育目的，且仅允许在您已获得明确授权进行漏洞测试的环境中使用。 特性 动态目标输入： 脚本接受目标 URL 作为命令行参数，使用灵活。 安全的 HTTP 请求： 利用 cURL 发起 HTTP 请求，提供稳健的错误处理与安全性。 错误日志记录： 记录错误信息，辅助调试与监控脚本执行。 模块化设计： 脚本通过清晰的函数定义组织，便于阅读与维护。 工作原理 1. MD5 哈希生成： 脚本基于目标 URL...

Polkit-CVE-2021-4034-HLP

Polkit-CVE-2021-4034-HLP Polkit CVE-2021-4034 exploitation in High-Level Programming Language Build root@kitploit: make LHOST=ip.or.domain.tld LPORT=8000 Usage Open TCP port listener, example with ncat on loopback root@kitploit: ncat -vl 127.0.0.1 8000 Run exploit root@kitploit: php...

CVE-2026-11485

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. Affected is an unknown function of the file /archive2.php. Such manipulation of the argument sy leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly...

📄 Mutiny 5.0-1.07 Directory Traversal

Mutiny version 5.0-1.07 directory traversal proof of concept exploit that demonstrates an issue originally discovered in 2013. ============================================================================================================================================= | Title : Mutiny 5.0-1.07...

📄 ZITADEL 4.7.0 Server-Side Request Forgery

This is a ZITADEL version 4.7.0 server-side request forgery proof of concept exploit written in PHP. ============================================================================================================================================= | Title : ZITADEL 4.7.0 SSRF Exploit - PHP Version | |...

EUVD-2006-0694

Malware in sbrugna...

EUVD-2018-11209

Malware in sbrugna...

EUVD-2008-3386

Malware in sbrugna...

EUVD-2018-10891

Malware in sbrugna...

EUVD-2017-2606

Malware in sbrugna...

EUVD-2022-2615

Malicious code in bioql PyPI...

Exploit for Out-of-bounds Write in Php

Task Management APP CVE-2019-11043 Lab Minimal PHP app with...

CVE-2025-54139

CVE-2025-54139 affects HAX CMS NodeJS and PHP backends. Versions haxcms-nodejs ≤ 11.0.12 and haxcms-php ≤ 11.0.7 expose pages without anti-iframe headers, enabling unauthenticated attackers to load sensitive pages (including login) in an iframe and perform a UI redress (clickjacking). Impact is U...

WordPress GiftXtore plugin file inclusion vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A file inclusion vulnerability exists in the WordPress GiftXtore plugin that stems from not doing effective filtering of local file resource calls, which can be exploited by an...

Exploit for CVE-2024-32830

CVE-2024-32830-poc PoC code to download files with CVE-2024-32...

Advantech WebAccess 7.1 SQL Injection

Advantech WebAccess version 7.1 proof of concept exploit that demonstrates a SQL injection vulnerability original discovered in 2014. ============================================================================================================================================= | Title : Advantech...

Ghostscript 9.21 Arbitrary Command Execution

Ghostscript version 9.21 exploit that leverages a flaw from 2017 to execute arbitrary commands and provides a reverse shell. ============================================================================================================================================= | Title : Ghostscript versions...

Linux Distros Unpatched Vulnerability : CVE-2015-6836

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The SoapClient call method in ext/soap/soap.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 does not properly manage headers, which allows...

Linux Distros Unpatched Vulnerability : CVE-2016-3185

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The makehttpsoaprequest function in ext/soap/phphttp.c in PHP before 5.4.44, 5.5.x before 5.5.28, 5.6.x before 5.6.12, and 7.x before 7.0.4 allows remote...