php_reverse_shell

Dieses Repository hat keine README-Datei...

CVE-2025-29017

CVE-2025-29017 - Esecuzione di codice remoto tramite caricamento immagine profilo in Internet Banking System 2.0.0 Descrizione Esiste una vulnerabilità di Esecuzione di Codice Remoto RCE in Code Astro Internet Banking System 2.0.0 a causa di una convalida impropria del caricamento dei file nel...

PHP-Injection-in-M4-PDF-Extensions

PHP-Injection-in-M4-PDF-Extensions CVE-2023-50029 è una vulnerabilità di iniezione PHP nel modulo M4 PDF Extensions. Questa vulnerabilità consente agli attaccanti di iniettare ed eseguire codice PHP arbitrario sul server, permettendo loro di ottenere il pieno controllo del sistema target. Il...

CVE-2026-14280 Events Manager <= 7.3.7.4 - Authenticated (Administrator+) Local File Inclusion via 'dbem_data[updates]' Array Keys

The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7.3.7.4 via the emoptionssave function. This makes it possible for authenticated attackers, with administrator-level access and above, to...

CVE-2024-48762

CVE-2024-48762 Beschreibung Command injection vulnerability in /usr/www/application/models/settingscamera.php in FLIR AX8 bis 1.46.16 ermöglicht es Angreifern, beliebige Befehle über den Wertparameter auszuführen. POC root@kitploit: GET /settings/applyfirmware/;idtest123.txt;/false HTTP/1.1 Host:...

CVE-2026-56702

Adminer versions before 5.4.3 contain an unrestricted file upload vulnerability in the AdminerFileUpload plugin that allows authenticated users to upload PHP files by exploiting a permissive default extension allowlist. Attackers can upload PHP webshells to columns ending in path and execute...

CVE-2021-3831

Script PHP Exploit CVE-2021-3831 Panoramica Questo script PHP è progettato per interagire con un sito web target generando specifici hash MD5 ed effettuando richieste HTTP per sfruttare potenziali vulnerabilità. È destinato a scopi educativi e dovrebbe essere utilizzato solo in ambienti in cui si...

CVE-2022-31897

CVE-2022-31897 Data: 06/22/2022 Autore dell'exploit: Angelo Pio Amirante Homepage del fornitore: https://www.sourcecodester.com/ Link del software: https://www.sourcecodester.com/php/15344/zoo-management-system-phpoop-free-source-code.html Versione: 1.0...

DolibabyPhp

DolibabyPhp Ein authentifizierter RCE-Exploit für Dolibarr ERP/CRM CVE-2023-30253. Installation Du kannst das Paket entweder aus dem PyPi-Repository mit pip installieren oder den Quellcode direkt von GitHub mit git clone klonen. root@kitploit: pip install dolibabyphp Verwendung root@kitploit:...

CVE-2026-56703 Adminer before 5.4.3 Remote Code Execution via SQLite VACUUM INTO

Adminer before 5.4.3 contains a remote code execution vulnerability in SQLite query handling where VACUUM INTO is not blocked despite ATTACH restrictions. Authenticated attackers can execute VACUUM INTO to write PHP code to arbitrary file paths and execute commands on the server...

CVE-2026-56703

Adminer before 5.4.3 is affected by a remote code execution vulnerability in its SQLite query handling . The root cause is that the VACUUM INTO statement is not blocked despite ATTACH restrictions being in place, allowing an authenticated attacker to write arbitrary PHP code to chosen file paths ...

CVE-2026-56703 Adminer before 5.4.3 Remote Code Execution via SQLite VACUUM INTO

Adminer before 5.4.3 contains a remote code execution vulnerability in SQLite query handling where VACUUM INTO is not blocked despite ATTACH restrictions. Authenticated attackers can execute VACUUM INTO to write PHP code to arbitrary file paths and execute commands on the server...

CVE-2026-56702

Adminer versions before 5.4.3 contain an unrestricted file upload vulnerability in the AdminerFileUpload plugin that allows authenticated users to upload PHP files by exploiting a permissive default extension allowlist. Attackers can upload PHP webshells to columns ending in path and execute...

CVE-2026-56702

Adminer versions prior to 5.4.3 are affected by an unrestricted file upload vulnerability in the AdminerFileUpload plugin. The root cause is a permissive default extension allowlist that allows authenticated users to upload PHP files by targeting columns ending in _path. When the uploadPath direc...

CVE-2026-56702 Adminer before 5.4.3 Unrestricted File Upload via AdminerFileUpload

Adminer versions before 5.4.3 contain an unrestricted file upload vulnerability in the AdminerFileUpload plugin that allows authenticated users to upload PHP files by exploiting a permissive default extension allowlist. Attackers can upload PHP webshells to columns ending in path and execute...

CVE-2026-56702 Adminer before 5.4.3 Unrestricted File Upload via AdminerFileUpload

Adminer versions before 5.4.3 contain an unrestricted file upload vulnerability in the AdminerFileUpload plugin that allows authenticated users to upload PHP files by exploiting a permissive default extension allowlist. Attackers can upload PHP webshells to columns ending in path and execute...

EUVD-2026-65200

Adminer versions before 5.4.3 contain an unrestricted file upload vulnerability in the AdminerFileUpload plugin that allows authenticated users to upload PHP files by exploiting a permissive default extension allowlist. Attackers can upload PHP webshells to columns ending in path and execute...

CVE-2026-34968

Adminer before 5.4.3 contains an arbitrary file deletion vulnerability in SQLite mode where the database-list drop action fails to validate file extensions before deletion. An authenticated attacker can submit arbitrary relative file paths in the db parameter to delete any files writable by the P...

CVE-2007-3831

CVE-2007-3831 PHP Remote File Inclusion in main.php in ISS Proventia Network IPS GX5108 1.3 und GX5008 1.5 Exploit-db Veröffentlichung unter https://www.exploit-db.com/exploits/30290/ Exploit-db Paper unter:...

CVE-2025-69212-PoC

CVE-2025-69212 - OpenSTAManager PoC di iniezione di comandi del sistema operativo Utilizzo Installa le dipendenze: root@kitploit: pip install -r requirements.txt Esegui un singolo comando e stampa il suo output: root@kitploit: python3 cve-2025-69212poc.py -u http://target.com -U admin -P 'passwor...