CVE-2023-27372

CVE-2023-27372 Exploit Exploit for CVE-2023-27372 , an unauthenticated Remote Code Execution vulnerability in the SPIP CMS affecting versions prior to 4.2.1. ⚠️ For educational purposes only. Use exclusively on systems you own or have explicit written permission to test. Unauthorized use is...

SPIP-BigUp-Unauthenticated-RCE-Exploit-CVE-2024-8517

Exploit de RCE no autenticado en SPIP BigUp CVE-2024-8517 Descripción Este script de Python explota una vulnerabilidad de ejecución remota de código RCE no autenticada en el plugin BigUp del CMS SPIP Système de Publication pour l'Internet Partagé. La falla radica en la función...

spip-cve-2023-27372-rce

Exploit de RCE no autenticada CVE-2023-27372 en SPIP Subida de Web Shell Este script de Python explota CVE-2023-27372, una vulnerabilidad de ejecución remota de código no autenticada en SPIP CMS versiones anteriores a 4.2.1. Aprovecha una falla de envenenamiento de caché en el mecanismo de...

CVE-2024-7954

CVE-2024-7954 - Exploit de Ejecución Remota de Comandos RCE en SPIP 4.2.8 Este script explota una vulnerabilidad de Ejecución Remota de Código en SPIP versión 4.2.8 a través del endpoint porteplumeprevisu. La vulnerabilidad permite a atacantes no autenticados inyectar código PHP mediante la...

SPIPScan

SPIPScan Escáner de SPIP CMS para fines de pruebas de penetración escrito en Python, y publicado bajo licencia MIT. Esta herramienta ha sido diseñada para realizar la detección de instalaciones de SPIP durante pruebas de penetración. Actualmente, la herramienta detecta la versión de la instalació...

Exploitation-of-a-Remote-Code-Execution-vulnerability--CVE-2024-7954-

Explotación de Vulnerabilidad de Ejecución Remota de Código CVE-2024-7954 Proyecto de Pruebas de Vulnerabilidad de Software Presentado por: Shivansh Kuntal Resumen Este proyecto demuestra la explotación de CVE-2024-7954 , una vulnerabilidad crítica de Ejecución Remota de Código RCE que afecta a...

Silent_CVE_2019_16394

CVE-2019-16394 Un simple script Python de POC para CVE-2019-16394 El script está ajustado para un sitio web francés, es posible que necesites modificarlo si el idioma del sitio web es diferente. Instalación root@kitploit: pip install -r requirements.txt Uso root@kitploit: usage: cve201916394.py -...

Linux Distros Unpatched Vulnerability : CVE-2026-48832

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - action/cookie.php in ecrire in SPIP before 4.4.15 is prone to an open redirect vulnerability. CVE-2026-48832 Note that Nessus relies on the presence of the...

SPIP 代码注入漏洞

SPIP is an open-source software developed by SPIP for creating Internet websites. Versions of SPIP prior to 4.4.14 had a code injection vulnerability, which was caused by remote code execution from private spaces, potentially allowing arbitrary code to be executed...

📄 SPIP CMS Analysis Scanner Script

This is an exploitation tool designed for websites running the SPIP CMS versions 5.4.0 through 5.11.0. The tool performs automated detection and enumeration of SPIP installations, identifies installed plugins, attempts to determine plugin versions, and searches for forms using the saisies plugin...

CVE-2026-22206

SPIP versions prior to 4.4.10 contain a SQL injection vulnerability that allows authenticated low-privilege users to execute arbitrary SQL queries by manipulating union-based injection techniques. Attackers can exploit this SQL injection flaw combined with PHP tag processing to achieve remote cod...

SPIP Ultimate Auditor – Comprehensive Security Assessment Script

SPIP Ultimate Auditor is a Python-based security assessment script designed to perform a multi-phase audit against a SPIP CMS installation. The tool automates reconnaissance and misconfiguration detection tasks to identify potential security weaknesses in a target deployment...

CVE-2026-27473

SPIP before 4.4.9 allows Stored Cross-Site Scripting XSS via syndicated sites in the private area. The URLSYNDIC output is not properly sanitized on the private syndicated site page, allowing an attacker who can set a malicious syndication URL to inject persistent scripts that execute when other...

CVE-2025-71240

SPIP before 4.2.15 allows Cross-Site Scripting XSS via crafted content in HTML code tags. The application does not properly verify JavaScript within code tags, allowing an attacker to inject malicious scripts that execute in a victim's browser...

CVE-2025-71250

...

Linux Distros Unpatched Vulnerability : CVE-2026-26223

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SPIP before 4.4.8 allows cross-site scripting XSS in the private area via malicious iframe tags. The application does not properly sandbox or escape iframe...

Exploit for CVE-2024-7954

Exploitation of Remote Code Execution Vulnerability CVE-2024-...

Exploit for Reliance on File Name or Extension of Externally-Supplied File in Spip

PoC exploit for CVE-2024-8517, an unauthenticated Remote Code Ex...

Exploit for CVE-2024-7954

CVE-2024-7954 - SPIP 4.2.8 Remote Command Execution RCE Expl...

Exploit for Deserialization of Untrusted Data in Spip

SPIP CVE-2023-27372 Unauthenticated RCE Exploit Web Shell Upl...