RCE-CVE-2024-7954

RCE-CVE-2024-7954 설명 porteplume 플러그인은 4.30-alpha2 , 4.2.13 , 4.1.16 이전 버전의 SPIP에서 사용되며, 심각한 원격 코드 실행RCE 취약점에 영향을 받습니다. 이 결함을 통해 원격의 인증되지 않은 공격자는 특정 HTTP 요청을 조작하여 SPIP 사용자 권한으로 임의의 PHP 코드를 실행할 수 있습니다. 익스플로잇 가능성이 매우 높아, 공격자가 서버에서 악성 명령을 실행하여 무단 접근, 데이터 유출 또는 추가 시스템 손상을 초래할 수 있습니다. 취약점 세부 정보 영향받는...

RCE_CVE-2024-7954-

RCECVE-2024-7954- SPIP 4.30-alpha2、4.2.13 和 4.1.16 之前版本使用的 porteplume 插件存在任意代码执行漏洞。远程未认证的攻击者可以通过发送特制的 HTTP 请求，以 SPIP 用户的身份执行任意 PHP 代码。（严重） 利用方式： POST /index.php?action=porteplumeprevisu HTTP/1.1 Host: Hostname Content-Type: application/x-www-form-urlencoded data=AA-URLBB 使用工具： Nuclei -ltarget fil...

CVE-2023-27372-PoC

Этот PoC был написан быстро, в нём нет ничего особенного. Он эксплуатирует новую уязвимость CVE-2023-27372 SPIP RCE. Это ошибка десериализации, которая использует опасное использование тега ENV во время функции сброса пароля spip.php?page=spippass в файле "/ecrire/balise/formulaire.php". А именно...

CVE-2023-27372

CVE-2023-27372 이 취약점은 oubli 매개변수에 존재하며, 인증되지 않은 사용자가 웹 사용자 권한으로 임의 명령을 실행할 수 있습니다. 영향을 받는 브랜치는 3.2, 4.0, 4.1, 4.2입니다. 취약한 버전은 3.2.18 미만, 4.0.10 미만, 4.1.18 미만, 4.2.1 미만입니다. 스크린샷 요구 사항 Python3.7+ 지원 OS 리눅서 윈게이즈 시작하기 root@kitploit: $ git clone https://github.com/Pari-Malam/CVE-2023-27372 $ cd...

SPIP Porte Plume Plugin - Remote Code Execution

The porteplume plugin used by SPIP before 4.30-alpha2, 4.2.13, and 4.1.16 is vulnerable to an arbitrary code execution vulnerability. A remote and unauthenticated attacker can execute arbitrary PHP as the SPIP user by sending a crafted HTTP request. id: CVE-2024-7954 info: name: SPIP Porte Plume...

SPIP-BigUp-Unauthenticated-RCE-Exploit-CVE-2024-8517

SPIP BigUp 인증되지 않은 RCE 익스플로잇 CVE-2024-8517 설명 이 Python 스크립트는 SPIP CMSSystème de Publication pour l'Internet Partagé의 BigUp 플러그인 에서 발견된 인증되지 않은 원격 코드 실행RCE 취약점을 악용합니다. 이 결함은 bigupretrouverfichiers 매개변수가 1로 설정되었을 때 listerfichiersparchamps 함수가 입력값을 제대로 검증하지 못하는 데 있습니다. 이를 통해 공격자는 악성 PHP 페이로드를 업로드하고 ...

spip-cve-2023-27372-rce

SPIP CVE-2023-27372 Эксплойт неаутентифицированного RCE загрузка веб-шелла Этот скрипт на Python эксплуатирует уязвимость CVE-2023-27372 — неаутентифицированное удаленное выполнение кода в SPIP CMS версий до 4.2.1. Он использует ошибку отравления кеша в механизме сброса пароля для загрузки...

CVE-2024-7954POC

CVE-2024-7954POC In der porteplume-Plugin-Version vor SPIP 4.30-alpha2, 4.2.13, 4.1.16 existiert eine Schwachstelle zur beliebigen Codeausführung. Ein entfernter, nicht authentifizierter Angreifer kann durch Senden einer speziell gestalteten HTTP-Anfrage beliebigen PHP-Code als SPIP-Benutzer...

SPIP BigUp Plugin - Remote Code Execution

SPIP before 4.3.2, 4.2.16, and 4.1.18 is vulnerable to a command injection issue. A remote and unauthenticated attacker can execute arbitrary operating system commands by sending a crafted multipart file upload HTTP request. id: CVE-2024-8517 info: name: SPIP BigUp Plugin - Remote Code Execution...

August Linux Patch Wednesday

August Linux Patch Wednesday. A total of 3,060 vulnerabilities. For comparison, there were 2,017 in July. That's a 52% increase and another new record. This time, there are 1,354 vulnerabilities in the Linux Kernel and 447 in Chromium. For 3 vulnerabilities, there are signs of exploitation in the...

SPIP - Remote Command Execution

SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions are 3.2.18, 4.0.10, 4.1.8, and 4.2.1. id: CVE-2023-27372 info: name: SPIP - Remote Command Execution author: DhiyaneshDK,nuts7 severity: critical description: ...

Linux Distros Unpatched Vulnerability : CVE-2026-77806

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to code injection...

CVE-2026-77806

SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to code injection via an X-Spip-Filtre HTTP request header that is mishandled by analyseresultatskel...

CVE-2026-77806

SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to code injection via an X-Spip-Filtre HTTP request header that is mishandled by analyseresultatskel...

EUVD-2026-63948

SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to code injection via an X-Spip-Filtre HTTP request header that is mishandled by analyseresultatskel...

CVE-2026-77806

SPIP versions before 4.4.21 are vulnerable to unauthenticated remote code execution via a code injection flaw in the analyse_resultat_skel function, which mishandles the X-Spip-Filtre HTTP request header. The vulnerability has been exploited in the wild since August 2026 and is rated CVSS 9.8 (Cr...

EUVD-2026-63757

SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to incorrect identification of ?php blocks, and varexport's mishandling of certain cases such as presence of a '' character...

Linux Distros Unpatched Vulnerability : CVE-2026-77647

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to incorrect...

VulnCheck KEV: CVE-2026-77806

SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to code injection via an X-Spip-Filtre HTTP request header that is mishandled by analyseresultatskel...

CVE-2026-77647

SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to incorrect identification of ?php blocks, and varexport's mishandling of certain cases such as presence of a '' character...