Lucene search
+L

8 matches found

Kitploit
Kitploit
•added 2026/10/21 1:37 p.m.•1 views

php2shell-poc

php2shell — CVE-2026-109618 / CVE-2026-109619 Research Independent security research on the critical PHP session.uploadprogress vulnerabilities CVSS v4.0 9.2. Author: Qi Deng @ikow Date: 2026-10-21 Full writeup: qideng.substack.com Overview Two critical pre-auth RCE vulnerabilities in PHP core's...

9.2CVSS8.8AI score
SaveExploits162References2
GithubExploit
GithubExploit
•added 2026/10/21 1:04 p.m.•4 views

Exploit for CVE-2026-109618

php2shell — CVE-2026-109618 / CVE-2026-109619 Research Indepe...

8.6AI score
SaveExploits162
GithubExploit
GithubExploit
•added 2026/10/21 7:55 a.m.•20 views

Exploit for CVE-2026-109618

php2shell — CVE-2026-109618 / CVE-2026-109619 Research Indepe...

8.6AI score
SaveExploits162
GithubExploit
GithubExploit
•added 2026/06/28 7:13 a.m.•100 views

Exploit for Missing Authentication for Critical Function in Cpanel

CVE-2026-41940 ⚠ This tool is created solely for education...

9.8CVSS9AI score0.98527EPSS
SaveExploits79
GithubExploit
GithubExploit
•added 2026/05/24 11:10 a.m.•152 views

Exploit for Missing Authentication for Critical Function in Cpanel

CPANEL CVE EXPLOIT English | فارسی PersianREADME...

9.8CVSS9AI score0.98527EPSS
SaveExploits79
osv_cve
osv_cve
•added 2025/05/07 10:41 p.m.•22 views

CVE-2025-35939 Craft CMS stores user-provided content in session files

Craft CMS stores arbitrary content provided by unauthenticated users in session files. This content could be accessed and executed, possibly using an independent vulnerability. Craft CMS redirects requests that require authentication to the login page and generates a session file on the server at...

6.9CVSS7AI score
SaveExploits0References8
CNVD
CNVD
•added 2019/10/16 12:00 a.m.•22 views

cPanel Injection Vulnerability (CNVD-2019-36149)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An injection vulnerability exists in versions of cPanel prior to 70.0.23. An attacker can exploit this vulnerability to inject...

7.3CVSS7.3AI score0.00834EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2019/08/01 3:15 p.m.•20 views

CVE-2018-20914

In cPanel before 70.0.23, OpenID providers can inject arbitrary data into cPanel session files SEC-368...

7.3CVSS5.9AI score0.00834EPSS
SaveExploits0References1
Rows per page
Query Builder