845 matches found
vulhub
Vulhub is an open-source collection of pre-built, ready-to-use vulnerable Docker environments. With just one command you can launch a vulnerable environment for security research, learning, or demonstration, no prior Docker experience required. 中文版本Chinese version Quick Start Install Docker examp...
CVE-2024-44902
CVE-2024-44902 Descrizione della vulnerabilità Una vulnerabilità di deserializzazione in Thinkphp v6.1.3 fino a v8.0.4 consente agli attaccanti di eseguire codice arbitrario. Versioni interessate Thinkphp v6.1.3 fino a v8.0.4 Condizione per lo sfruttamento Il framework thinkphp deve avere...
CVE-2018-20062
CVE-2018-20062 thinkphp 5.0.23 Adatto per la vulnerabilità ThinkPHP di vulhub Sono troppo scarso, ottimizzerò gradualmente in seguito, per favore non insultatemi, esperti...
Thinkphp Lang - Local File Inclusion
ThinkPHP Framework before 6.0.14 allows local file inclusion via the lang parameter when the language pack feature is enabled langswitchon=true. An unauthenticated and remote attacker can exploit this to execute arbitrary operating system commands, as demonstrated by including pearcmd.php. id:...
ThinkPHP 5.0.24 - Information Disclosure
ThinkPHP 5.0.24 is susceptible to information disclosure. This version was configured without the PATHINFO parameter. This can allow an attacker to access all system environment parameters from index.php, thereby possibly obtaining sensitive information, modifying data, and/or executing...
thinkphp5.XRce
Script di rilevamento vulnerabilità ThinkPHP5.0 Riscritto basandosi sullo script di @tdcoming Introduction: Ambito di impatto: v5.1.x 5.1.31 v5.0.x= 5.0.23 Usage: 1. pip install -r requirements.txt 2. Crea un file url.txt nella directory dello script 3. Inserisci gli URL da testare 4. Esegui lo...
RedArrow
RedArrow3.2 - Documentazione dello strumento di esecuzione remota di comandi per ThinkPHP 5.0.23 1. Introduzione allo strumento RedArrow3.2 è uno strumento grafico per la vulnerabilità di esecuzione remota di comandi in ThinkPHP 5.0.23, che offre due funzionalità principali: esecuzione singola di...
CVE-2024-44902-env
CVE-2024-44902 - ThinkPHP असुरक्षित डिसीरियलाइज़ेशन आरसीई असुरक्षित वातावरण nuclei-templates सत्यापन के लिए। भेद्यता विवरण...
thinkphp5.0.1-automatic-getshell
thinkphp5.0.1-automatic-getshell thinkphp5.0.1 स्वचालित getshell स्क्रिप्ट thinkphp5.0.1 का उपयोग करते समय आने वाली कुछ छोटी समस्याओं को हल करता है, और स्वयं का पहिया बनाकर मैन्युअल पुनरुत्पादन की परेशानी से बचाता है।...
SQL-ThinkPHP-5.0.24-RCE-
SQL-ThinkPHP-5.0.24-RCE- SQL注入漏洞复现报告——OWASP靶场实战，通过UNION注入提取数据库29条用户凭证 ThinkPHP 5.0.24 RCE漏洞复现报告——CVE-2018-16385，验证代码执行能力...
ThinkPHP < 3.2.4 - Remote Code Execution
ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via the s parameter in index.php through the invokefunction functionality. id: CVE-2019-9082 info: name: ThinkPHP 3.2.4 - Remote Code Execution author: 0xanis severity: high description: |...
cve-2025-63888-exploit
CVE-2025-63888 ThinkPHP 5.0.24 File Inclusion RCE Exploit Uno strumento di ricerca sulla sicurezza per rilevare e testare la vulnerabilità CVE-2025-63888 in ThinkPHP 5.0.24, che consente l'esecuzione remota di codice tramite attacchi di inclusione di file. ⚠️ Disclaimer Questo strumento è destinat...
ThinkPHP 5.0.23 - Remote Code Execution
An issue was discovered in NoneCms V1.3. thinkphp/library/think/App.php allows remote attackers to execute arbitrary PHP code via crafted use of the filter parameter, as demonstrated by the s=index/\think\Request/input&filter=phpinfo&data=1 query string. id: CVE-2018-20062 info: name: ThinkPHP...
CVE-2026-71232
MacCMS10's admin template editor application/admin/controller/Template.php blocks dangerous PHP functions in template content via a blacklist regex, but the blacklist omitted exec, passthru, popen, showsource, createfunction, registershutdownfunction, registertickfunction, and errorlog...
CVE-2026-71232
MacCMS10's admin template editor application/admin/controller/Template.php blocks dangerous PHP functions in template content via a blacklist regex, but the blacklist omitted exec, passthru, popen, showsource, createfunction, registershutdownfunction, registertickfunction, and errorlog. Combined...
EUVD-2026-53305
MacCMS10's admin template editor application/admin/controller/Template.php blocks dangerous PHP functions in template content via a blacklist regex, but the blacklist omitted exec, passthru, popen, showsource, createfunction, registershutdownfunction, registertickfunction, and errorlog. Combined...
CVE-2026-71232 MacCMS10 - Incomplete Function Blacklist in Template Editor Enables Authenticated RCE
MacCMS10's admin template editor application/admin/controller/Template.php blocks dangerous PHP functions in template content via a blacklist regex, but the blacklist omitted exec, passthru, popen, showsource, createfunction, registershutdownfunction, registertickfunction, and errorlog...
CVE-2026-71232 MacCMS10 - Incomplete Function Blacklist in Template Editor Enables Authenticated RCE
MacCMS10's admin template editor application/admin/controller/Template.php blocks dangerous PHP functions in template content via a blacklist regex, but the blacklist omitted exec, passthru, popen, showsource, createfunction, registershutdownfunction, registertickfunction, and errorlog...
VulnCheck KEV: CVE-2018-25270
ThinkPHP 5.0.23 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by invoking functions through the routing parameter. Attackers can craft requests to the index.php endpoint with malicious function parameters to execute system...
