Python-CVE-2020-25213

Python-CVE-2020-25213 Python Interactive Exploit for WP File Manager Vulnerability. The File Manager wp-file-manager plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to have the .php...

SEPM-EoP

Summary Product Name : Symantec Endpoint Protection Manager Version 14 14 MP1 .2 build 1023 14.2.1023.0100 - older versions may also be affected Impact : High. A standard windows user not an admin can escalate to NT SERVICE\semwebsrv . With this user role he has access to many of the SEPM...

CVE-2024-4577

CVE-2024-4577 Argument injection vulnerability in PHP INSTALL git clone https://github.com/didarul342/CVE-2024-4577.git cd CVE-2024-4577 pip3 install -r requirements.txt USAGE Scan A Target python3 CVE-2024-4577.py -t https://160.153.61.66/ -c "" Scan a list of Targets python3 CVE-2024-4577.py -f...

CVE-2024-4577

CVE-2024-4577 A Proof of Concept developed by @watchTowr exploiting the PHP CGI Argument Injection vulnerability CVE-2024-4577 to obtain RCE on a vulnerable PHP version running in a Windows environment. Detailed technical analysis for this vulnerability Orange Tsi 🍊 This vulnerability was found b...

CVE-2024-46377

CVE-2024-46377 PoC for Arbitrary File Upload Vulnerability in Best House Rental Management System 1.0 Overview This Python script demonstrates how to exploit the arbitrary file upload vulnerability in Best House Rental Management System 1.0. The vulnerability allows an attacker to upload a...

CVE-2021-3007-docker-poc

CVE-2021-3007 — Laminas/Zend HTTP Deserialization RCE This repository contains a fully reproducible Proof-of-Concept and Nuclei exploit template for CVE-2021-3007, a critical PHP deserialization vulnerability in Zend\Http\Response\Stream laminas-http Nuclei exploit template ├── docker-compose.yml...

CVE-2026-46275

CVE-2026-46725 — TYPO3 ceselector Extension RCE PHP Object Injection viaunserialize Cookie Bypass → Remote Code Execution 📋 Table of Contents About the Vulnerability Technical Details Requirements Installation Usage Examples Output Format How It Works References Legal Disclaimer 🔍 About the...

CVE-2019-15813

CVE-2019-15813 This container was made to explain and demonstrate how CVE-2019-15813 Sentrifugo works Sentrifugo V3.2 Sentrifugo is a Human Resource Management System How to Install docker-compose up Default crentials to test ----Super Admin---- Username : empp0001 Password : 5faa7bdf3d7af...

juniper-rce_cve-2023-36844

CVE-2023-36844 , CVE-2023-36845 , CVE-2023-36846 , CVE-2023-36847 A Proof of Concept for chaining the CVEs CVE-2023-36844, CVE-2023-36845, CVE-2023-36846, CVE-2023-36847 developed by @watchTowr to achieve Remote Code Execution in Juniper JunOS within SRX and EX Series products. Follow the watchTo...

CVE-2024-4577

CVE-2024-4577 A Proof of Concept developed by @watchTowr exploiting the PHP CGI Argument Injection vulnerability CVE-2024-4577 to obtain RCE on a vulnerable PHP version running in a Windows environment. Detailed technical analysis for this vulnerability Orange Tsi 🍊 This vulnerability was found b...

php-cgi-cve-2024-4577

php-cgi-cve-2024-4577 php-cgi-cve-2024-4577 A remote code execution vulnerability occurring in CGI mode of PHP language registered in the detection of PHP-CGI CVE-2024-4577 Argument Injection events from external IPs to internal servers. This is an event that occurs when PHP is executed in CGI mo...

CVE-2019-11043

1）Official update notice: https://bugs.php.net/bug.php?id=78599 2）Open source community introduction: https://github.com/neex/phuip-fpizdam/...

CVE-2024-4577_PowerShell

CVE-2024-4577PowerShell Please note: Ensure that you are authorized to conduct such penetration testing in the target environment; unauthorized use of attack techniques may violate relevant laws. The code is for educational and research purposes only, and should be used within legal and ethical...

Vulnerable-Lab-Exploitation

Vulnerable-Lab-Exploitation A hands-on project demonstrating the setup of virtual security lab, network reconnaissance, and exploitation of CVE-2012-1823. Vulnerable Lab Setup & PHP CGI Exploitation CVE-2012-1823 🎯 Project Overview This project demonstrates the creation of an isolated virtual lab...

exploit-CVE-2015-3306

ProFTPd 1.3.5 - modcopy Remote Command Execution ProFTPD is a highly configurable FTP daemon for Unix and Unix-like operating systems. ProFTPD grew from a desire for a secure and configurable FTP server. It was inspired by a significant admiration of the Apache web server. Unlike most other Unix...

SUSE-SU-2026:4589-1 Security update for php-composer2

This update for php-composer2 fixes the following issues: - CVE-2026-59946: package bin entries with path segments can cause unintended host file permission modifications bsc1271152. - CVE-2026-59947: unsanitized URL credential handling in debug output within Composer can allow sensitive token...

HeimShell

HeimShell CVE-2023-51803 HeimShell is an exploit for CVE-2023-51803, leveraging an arbitrary file-upload vulnerability in LinuxServer.io Heimdall ≤ 2.5.6. It will auto-detect the target version and either warn of exploitability or remote fetch a php shell defined by SHELLURL ≤ 2.2.2 : Aribtrary...

cve-2023-30212

cve-2023-30212 PoC for CVE-2023-30212 using Docker CVE-2023-30212 Environment Setup and PoC Report 📌 Overview This report details the direct construction of a Docker-based vulnerable web environment for CVE-2023-30212, a vulnerability not present in Vulhub, and demonstrates the vulnerability...

CVE-2024-4577

CVE-2024-4577 usage: CVE-2024-4577.py -h -v RHOST RPORT URL COMMAND PHP CGI CVE-2024-4577 PoC. Reference: https://nvd.nist.gov/vuln/detail/CVE-2024-4577 positional arguments: RHOST remote host RPORT remote port URL target address COMMAND command to execute e.g. optional arguments: -h, --help show...

CVE-2023-36845

CVE-2023-36845 Mass check One liner CVE-2023-36845 cat ip.txt| while read host do;do curl -sk "http://$host/?PHPRC=/dev/fd/0" -X POST -d 'autoprependfile="/etc/passwd"'| grep -i 'root:' && echo $host "is VULNERABLE";done...