Magneto-PolyShell

Magento 2 RCE Exploit - Unauthenticated File Upload to RCE ⚠️ This tool is for educational and authorized security testing only. Unauthorized use against systems you do not own is illegal. This exploit targets a critical unauthenticated remote code execution RCE vulnerability in Magento 2 Adobe...

rips-scanner

RIPS A static source code analyser for vulnerabilities in PHP scripts Requirements web server: Apache or Nginx recommended PHP: latest version recommended browser: Firefox recommended Installation 1. Download the latest release 2. Extract the files to your local web server's document root 3. Make...

CVE-2024-4577-rayng

CVE-2024-4577 - PHP CGI Argument Injection Detection Lab A complete detection engineering lab for CVE-2024-4577 PHP CGI Argument Injection. Includes pre-built Vagrant boxes, Wazuh SIEM rules, and exploit tools for Blue Team training. What's Included Windows Server 2022 VM - Vulnerable XAMPP +...

webshell

webshell | English | Türkiye 이것은 webshell 수집 프로젝트입니다 장미를 선물하면 손에 향기가 남듯이, 이 프로젝트를 다운로드하셨다면 shell도 제출해 주시기 바랍니다 이 프로젝트는 다양한 일반적인 스크립트를 포함합니다 예: asp,aspx,php,jsp,pl,py 다양한 webshell을 제출할 경우 이름과 비밀번호를 변경하지 마십시오 주의: 모든 shell에 백도어가 있는지 여부는 보장하지 않습니다. 다만 제가 직접 업로드한 것은 절대 고의로 백도어를 추가하지 않습니다 제출하시는 분들도 백도어...

marfil

Marfil Marfil is an extension of the Aircrack-ng suite, used to assess WiFi network security. It allows to split the work of performing long running dictionary attacks among many computers. Motivation The Aircrack-ng suite provides the aircrack-ng tool, which is a 802.11 WEP and WPA/WPA2-PSK key...

CVE-2025-34085-Multi-target

CVE-2025-34085 Multi-Target RCE Scanner Mass-exploitation scanner for CVE-2025-34085 — an unauthenticated remote code execution vulnerability in the WordPress Simple File List plugin. This tool uploads a PHP payload disguised as an image, renames it via a vulnerable file engine, and triggers shel...

CVE-2023-30253-exploit

CVE-2023-30253 — Dolibarr ERP/CRM 17.0.0 Удаленное выполнение кода Эксплойт PHP-инъекции для Dolibarr ERP/CRM v17.0.0 , позволяющий получить обратную оболочку от пользователя www-data через модуль Website/CMS. ⚠️ Только для образовательных целей и аудита с разрешения. 📑 Содержание Что такое...

CVE-2024-56264

CVE-2024-56264 WordPress ACF City Selector - Arbitrary File Upload Exploit CVE-2024-56264 Overview This repository contains an exploit for CVE-2024-56264 , which is an Arbitrary File Upload vulnerability found in the WordPress ACF City Selector plugin versions = 1.14.0. This vulnerability allows ...

BlackThrone

BlackThrone PHP BlackThrone Script An open source Alternative to burp collaborator BlackThrone created To detect websockets and HTTP traffic in the main website with provide some server header and client info. BlackThrone is web based tool to run on webservers with PHP . It will detect the visito...

Low: Red Hat Security Advisory: php security, bug fix, and enhancement update

An update for php is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE lin...

php: ext-pgsql: PHP: SQL injection via improper backslash escaping

A flaw was found in PHP. Improper escaping of backslashes in attacker-provided parameters can lead to a SQL injection vulnerability. A remote attacker could exploit this flaw by crafting malicious input, potentially gaining unauthorized access to sensitive information, manipulating data, or causi...

php: ext/openssl: memory corruption in openssl_encrypt with AES-WRAP-PAD

A flaw was found in the OpenSSL extension of PHP. The AES-WRAP-PAD algorithm implementation uses the size of the plaintext length without accounting for the RFC 5649 expansion to allocate the output buffer for the AES key-wrap-with-padding operation. This may lead to an undersized memory allocati...

php: PHP: Denial of Service via circular symbolic links in phar archives

A flaw was found in PHP. When processing a specially crafted PHP Archive phar file containing circular symbolic links, the PHP process can enter an uncontrolled loop. This unbounded recursion exhausts the program's memory stack, causing the PHP application to crash. This vulnerability could allow...

suhosin

Suhosin Suhosin pronounced 'su-ho-shin' is an advanced protection system for PHP installations. It was designed to protect servers and users from known and unknown flaws in PHP applications and the PHP core...

tinyfilemanager-wh1z-edition

Tiny File Manager WH1Z-Edition Introducing Tiny File Manager WH1Z-Edition, the compact and efficient solution for managing your files and folders with enhanced privacy and security features. Gone are the days of relying on external resources – I've stripped down the code to its core, making it...

CVE-2007-3831

CVE-2007-3831 PHP remote file inclusion in main.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5 Exploit-db publication at https://www.exploit-db.com/exploits/30290/ Exploit-db paper at :...

CVE-2016-3141

CVE-2016-3141 1. Vulnerability Detail. Use-after-free vulnerability in wddx.c in the WDDX extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to cause a denial of service memory corruption and application crash or possibly have unspecified other impact by triggering a...

DVWA

DAMN VULNERABLE WEB APPLICATION Damn Vulnerable Web Application DVWA is a PHP/MariaDB web application that is damn vulnerable. Its main goal is to be an aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of...

CVE-2018-16763-FuelCMS-1.4.1-RCE

CVE-2018-16763 - FuelCMS = 1.4.1 RCE CVE-2018-16763을 통해 FuelCMS = 1.4.1에서 RCE를 트리거하고 대화형 셸을 사용하는 익스플로잇입니다. 기능 CVE-2018-16763을 사용하여 FuelCMS에 PHP 웹셸 API를 자동으로 업로드합니다. ?action=exec을 통해 API로 시스템 명령어를 실행합니다. ?action=download를 통해 원격 시스템에서 공격 머신으로 파일을 다운로드합니다. 사용법 요구사항 : 필요 없음, 이 익스플로잇은 인증 없이 사용 가능합니다...

CVE-2022-45599

CVE-2022-45599 CVE URL:| https://vulners.com/cve/CVE-2022-45599 ---|--- Reported by:| TanYeeTat Product:| Aztech WMB250AC Wireless Mesh Routers Affected Firmware:| 2020 Release topaz-linux.lzma.img Firmware download:| closed source Product Manual: https://kylaconnect.com/download-center/...