MySQL-Fu.rb

MySQL-Fu.rb MySQL-Fu è uno script client MySQL basato su Ruby che ho scritto. Fa la maggior parte delle cose che un normale client MySQL potrebbe fare: shell SQL, aggiornamento/cancellazione/eliminazione di database/tabelle, aggiunta/rimozione di utenti, dump di database/tabelle con opzione per...

tirreno

tirreno tirreno è un sistema open di security analytics. tirreno tir.ˈrɛ.no aiuta a comprendere, monitorare e proteggere le tue applicazioni da minacce informatiche, compromissioni di account, bot e abusi. Mentre la cybersecurity classica si concentra su infrastrutture e perimetro di rete, la...

WonderCMS-CVE-2020-35314

CVE-2020-35314 - Esecuzione Remota di Codice Autenticata in WonderCMS 3.1.3 Questo repository è stato creato con l'obiettivo di testare la vulnerabilità di Esecuzione Remota di Codice su WonderCMS v3.1.3. Questo plugin falso include una backdoor php shell, che si trova nel file evil.php. Si...

WordPress String locator plugin < 2.6.8 - Unauthenticated PHP Object Injection vulnerability

Unauthenticated PHP Object Injection vulnerability discovered by Raphael P. Cigana in WordPress Plugin String locator versions 2.6.8...

CVE-2026-104677

The WP Coder WordPress plugin before 4.5.2 does not restrict access to its PHP code-execution feature to administrators, gating it on a content capability that the Editor role holds by default, which allows Editor-level users to save and execute arbitrary PHP code on the server and fully compromi...

Juniper-exploit-CVE-2023-36845

CVE-2023-36845 Descrizione CVE-2023-36845 rappresenta una notevole vulnerabilità di manipolazione delle variabili d'ambiente PHP che interessa i firewall Juniper SRX e gli switch EX. Sebbene Juniper abbia classificato questa vulnerabilità come di media gravità, in questo articolo chiariremo come...

CVE-2026-97188 String Locator < 2.6.8 - Unauthenticated PHP Object Injection via Database Editor

The String locator WordPress plugin before 2.6.8 does not restrict the classes allowed when deserializing the content of a database row saved through its database editor, allowing unauthenticated attackers to store a serialized PHP object that is instantiated when an administrator later opens and...

EUVD-2026-94190

The String locator WordPress plugin before 2.6.8 does not restrict the classes allowed when deserializing the content of a database row saved through its database editor, allowing unauthenticated attackers to store a serialized PHP object that is instantiated when an administrator later opens and...

CVE-2026-97188 String Locator < 2.6.8 - Unauthenticated PHP Object Injection via Database Editor

The String locator WordPress plugin before 2.6.8 does not restrict the classes allowed when deserializing the content of a database row saved through its database editor, allowing unauthenticated attackers to store a serialized PHP object that is instantiated when an administrator later opens and...

CVE-2026-97188

The String locator WordPress plugin, in versions before 2.6.8 , is vulnerable to an unauthenticated PHP Object Injection vulnerability. The root cause is the failure to restrict allowed classes during the deserialization of database row content saved via the plugin's database editor . This allows...

CVE-2026-104677

The WP Coder WordPress plugin (versions 4.0-4.5.1 ) contains a vulnerability where the PHP code-execution feature is not restricted to administrators. Instead, it is gated on a content capability held by the Editor role by default. This allows users with Editor-level privileges to save and execut...

EUVD-2026-94182

The WP Coder WordPress plugin before 4.5.2 does not restrict access to its PHP code-execution feature to administrators, gating it on a content capability that the Editor role holds by default, which allows Editor-level users to save and execute arbitrary PHP code on the server and fully compromi...

CVE-2026-104677 WP Coder 4.0 - 4.5.1 - Editor+ RCE via Global PHP

The WP Coder WordPress plugin before 4.5.2 does not restrict access to its PHP code-execution feature to administrators, gating it on a content capability that the Editor role holds by default, which allows Editor-level users to save and execute arbitrary PHP code on the server and fully compromi...

CVE-2026-104677 WP Coder 4.0 - 4.5.1 - Editor+ RCE via Global PHP

The WP Coder WordPress plugin before 4.5.2 does not restrict access to its PHP code-execution feature to administrators, gating it on a content capability that the Editor role holds by default, which allows Editor-level users to save and execute arbitrary PHP code on the server and fully compromi...

upb-any-recursion-audit

upb Any-recursion audit Ruby / PHP / C bindings Status: Complete. Six recursion-guard checks across three independent implementations Ruby/PHP shared upb core, C's separate managed implementation, all falsified except the one already-public, already-patched Python CVE this audit was checking...

Roundcube Webmail - Remote Code Execution

Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execution by authenticated users because the from parameter in a URL is not validated in program/actions/settings/upload.php, leading to PHP Object Deserialization. id: CVE-2025-49113 info: name: Roundcube Webmail - Remote...

D-Link DAR-8000-10 - Command Injection

D-Link DAR-8000-10 version has an operating system command injection vulnerability. The vulnerability originates from the parameter id of the file /app/sys1.php which can lead to operating system command injection. id: CVE-2023-4542 info: name: D-Link DAR-8000-10 - Command Injection author:...

CVE-2019-9081_PoC

CVE-2019-9081poc PoC per CVE-2019-9081, questa CVE è solo una nuova catena POP. Il progetto è un'applicazione Laravel 5.7.x vulnerabile pre-costruita con un punto di ingresso per la vulnerabilità POI all'URI /deserialize richiesta POST. Configurazione del laboratorio: Avvio dell'applicazione...

Block AJAX - Highly critical - PHP object injection - SA-CONTRIB-2026-192

The Block AJAX module enables you to load blocks asynchronously via Ajax. The module doesn't sufficiently validate user-supplied data which is used to construct a block. In the worst case scenario, this can lead to PHP Object Injection and Remote Code Execution. The vulnerability is mitigated by...

CentOS Linux 8 [TuxCare] Security Update: php / php-bcmath / php-cli / php-common / php-dba / php-dbg / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1791395301)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1791395301 advisory. - The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes fo...