CVE-2023-32692-CodeIgniter4

CVE-2023-32692 — Iniezione di regole di validazione in CodeIgniter 4 CVE-2023-32692 è una vulnerabilità di code injection nel framework PHP CodeIgniter 4, che interessa le versioni dalla 4.0.0 alla 4.3.4. È stata corretta nella versione 4.3.5 rilasciata a giugno 2023. Questo è un ambiente demo pe...

CVE-2026-95534

The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) WordPress plugin, affecting versions up to and including 2.0.19 , is vulnerable to a PHP Object Injection flaw. This issue stems from the deserialization of untrusted data , which could allow an attacker to execute arbitrary c...

CVE-2026-95534 WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - PHP Object Injection vulnerability

Deserialization of Untrusted Data vulnerability in Unlimited Elements Unlimited Elements For Elementor Free Widgets, Addons, Templates allows Object Injection. This issue affects Unlimited Elements For Elementor Free Widgets, Addons, Templates: from n/a through 2.0.19...

DRUPAL-CONTRIB-2026-192

The Block AJAX module enables you to load blocks asynchronously via Ajax. The module doesn't sufficiently validate user-supplied data which is used to construct a block. In the worst case scenario, this can lead to PHP Object Injection and Remote Code Execution. The vulnerability is mitigated by...

CVE-2023-3519

Citrix ADC RCE CVE-2023-3519 Questo exploit utilizza indirizzi e shellcode per Citrix VPX 13.1-48.47. Per l'analisi completa, clicca qui. Utilizzo NASM è richiesto per compilare lo shellcode. $ sudo apt install nasm Lo shellcode incluso scaricherà ed eseguirà uno script shell da un server https...

pocs

minervais.com.phpMyAdminRCE.sh POC di PHP Code Injection RCE in phpMyAdmin '/scripts/setup.php'. Questo è stato il primo exploit rilasciato pubblicamente per CVE-2009-1151. Sintassi $ ./phpMyAdminRCE.sh usage: ./phpMyAdminRCE.sh i.e.: ./phpMyAdminRCE.sh http://target.tld/phpMyAdmin/ Demo $...

CVE-2018-9206-jquery-file-upload

CVE-2018-9206 - Blueimp jQuery-File-Upload Lab Ambiente Docker vulnerabile per CVE-2018-9206 - Caricamento file senza restrizioni in Blueimp jQuery-File-Upload ' Execute it curl "http://localhost:8888/jQuery-File-Upload/server/php/files/test.php" Output: CVE-2018-9206-PWNED Oppure esegui lo scrip...

-Limesurvey-RCE-CVE-2021-44967

🚀 LimeSurvey RCE CVE-2021-44967 - Esecuzione Remota di Codice Autenticata Questo repository contiene un exploit funzionante per CVE-2021-44967 , una vulnerabilità di Esecuzione Remota di Codice autenticata in LimeSurvey. 🎯 Compatibilità Testato e confermato funzionante su: LimeSurvey 5.2.x...

CVE-2020-15568

CVE-2020-15568 Un POC rapido e semplice per CVE-2020-15568. Non testato ma basato sulle informazioni trovate qui: https://ssd-disclosure.com/ssd-advisory-terramaster-os-exportuser-php-remote-code-execution/...

ChamiloLMS-CVE-2023-4220

Exploit ChamiloLMS CVE-2023-4220 Exploit Python per CVE-2023-4220 , una vulnerabilità di upload arbitrario di file non autenticato che interessa Chamilo LMS = 1.11.24. La vulnerabilità si trova nel componente BigUpload di Chamilo. Sulle installazioni vulnerabili, il gestore di upload permette di...

CVE-2024-43363

CVE-2024-43363 Script di exploit per CVE-2024-43363 Questo script Python è progettato per verificare se un'istanza Cacti è vulnerabile a CVE-2024-43363, una vulnerabilità di Remote Code Execution RCE causata da log poisoning. Come funziona la vulnerabilità: Log Poisoning: un attaccante inietta...

WordPress ColorFolio theme <= 1.3 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme ColorFolio versions = 1.3...

WordPress Neo | Barber Shop WordPress Theme theme <= 3.5 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Neo | Barber Shop WordPress Theme versions = 3.5...

WordPress CleanSkin theme <= 1.5.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme CleanSkin versions = 1.5.0...

cve-2026-87902-wordpress-lfi-lab

CVE-2026-87902 / GHSA-7hp8-65ch-5whp — WordPress getpagetemplate unauthentifizierte LFI → bedingte RCE Reproduktions-Lab + URL-Listen-Scanner + PoC, gebaut und Ende-zu-Ende validiert gegen echte WordPress 7.1.1 verwundbar und 7.1.2 gepatcht im Docker-Lab. Advisory:...

WordPress Payever - WooCommerce Gateway plugin <= 4.8.2 - PHP Object Injection vulnerability

WordPress Payever - WooCommerce Gateway plugin = 4.8.2 - PHP Object Injection vulnerability discovered by Lee chul woong in WordPress Plugin Payever - WooCommerce Gateway versions = 4.8.2...

WordPress Dynamic User Directory plugin <= 2.4 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Hiro Code016Hiro in WordPress Plugin Dynamic User Directory versions = 2.4...

WordPress Quiz And Survey Master plugin <= 11.2.7 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Quiz And Survey Master versions = 11.2.7...

OpenSTAManager_RCE_Exploit-CVE-2026-38751-

Exploit RCE per OpenSTAManager CVE-2026-38751 Panoramica Questo script Python sfrutta una vulnerabilità di Remote Code Execution in OpenSTAManager versione 2.10, identificata come CVE-2026-38751. L'exploit consente agli utenti autenticati di caricare un modulo dannoso ed eseguire comandi arbitrar...

WordPress Product Configurator for WooCommerce plugin <= 1.7.5 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Product Configurator for WooCommerce versions = 1.7.5...