Lucene search
+L

1129 matches found

Kitploit
Kitploit
added 2026/09/13 5:50 p.m.9 views

ricerca-tesi

ricerca-tesi 针对 cve-2026-7228 的研究资源 工具 安装 virtual-box virtual-box 安装:https://www.virtualbox.org/wiki/Downloads 安装 windows 11 iso https://www.microsoft.com/it-it/software-download/windows11 安装 linux 发行版:lubuntu https://lubuntu.me/downloads/ Pizzafy 电子商务系统源代码网站...

7.5CVSS7.3AI score0.00254EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/13 3:30 p.m.5 views

CVE-2022-31897

CVE-2022-31897 Date: 06/22/2022 Exploit Author: Angelo Pio Amirante Vendor Homepage: https://www.sourcecodester.com/ Software Link: https://www.sourcecodester.com/php/15344/zoo-management-system-phpoop-free-source-code.html Version: 1.0 Tested on: Server: XAMPP on Windows 10...

6.1CVSS6.4AI score0.00881EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/13 3:03 p.m.10 views

CVE-2024-4577

仅用于研究 默认XAMPP的PoC root@kitploit: curl -v -d "" http://127.0.0.1/php-cgi/php-cgi.exe/?%add+allowurlinclude%3Don+-d+autoprependfile%3Dphp%3A//input+-d+cgi.forceredirect%3D0...

9.8CVSS7.5AI score0.99987EPSS
SaveExploits68
Kitploit
Kitploit
added 2026/09/13 1:48 p.m.10 views

CVE-2024-4577-PHP-RCE

CVE-2024-4577-PHP-RCE 项目简介与原理 全球首款利用PHP默认环境(XAMPP)的CVE-2024-4577 PHP-CGI RCE 漏洞 EXP。 The world's first CVE-2024-4577 PHP-CGI RCE exploit utilizing the default PHP environment. Sharing original exploit, supports SSRF, supports WAF bypass. 实现PHP默认环境RCE。原理:cgi.forceredirect + REDIRECT-STATUS。...

9.8CVSS7.4AI score0.99987EPSS
SaveExploits68
Kitploit
Kitploit
added 2026/09/13 1:24 p.m.6 views

CVE-2024-4577

PHP CGI Argument Injection CVE-2024-4577 RCE 📜 Description In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command...

9.8CVSS7.4AI score0.99987EPSS
SaveExploits68References3
Kitploit
Kitploit
added 2026/09/13 8:25 a.m.13 views

CVE-2024-4577

CVE-2024-4577 FOFA Search: header="Xamppsinfo" || body="/xampps.jpg" || header="location http" && header="xampp" || body="content="Kai Oswald Seidler" || title="XAMPP for" || title="XAMPP Version" || body="font-size: 1.2em; color: red;"New XAMPP" Censys Search:...

9.8CVSS7.4AI score0.99987EPSS
SaveExploits68
Kitploit
Kitploit
added 2026/09/13 7:33 a.m.6 views

CVE-2024-4577

CVE-2024-4577 PoC Exploit Description This repository contains a proof-of-concept PoC exploit for CVE-2024-4577, a critical vulnerability affecting all versions of PHP running on Windows. The vulnerability allows attackers to execute arbitrary code remotely. The flaw also impacts the XAMPP...

9.8CVSS7.5AI score0.99987EPSS
SaveExploits68
Kitploit
Kitploit
added 2026/09/13 7:29 a.m.7 views

CVE-2024-4577-RCE

PHP CGI Argument Injection CVE-2024-4577 RCE 📜 Description In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command...

9.8CVSS7.4AI score0.99987EPSS
SaveExploits68
Kitploit
Kitploit
added 2026/09/13 6:21 a.m.6 views

CVE-2024-4577-RCE-EXP

TG Join Us https://t.me/WanLiChangChengWanLiChang Join us to regularly receive various vulnerability EXP and POC CVE-2024-4577-RCE-EXP CVE-2024-4577 PHP CGI Remote Code Execution Vulnerability on Windows Platform CVE-2024-4577 PHP CGI Remote Code Execution Vulnerability on Windows Platform RCE EX...

9.8CVSS7.4AI score0.99987EPSS
SaveExploits68
Kitploit
Kitploit
added 2026/09/13 4:36 a.m.6 views

CVE-2020-11107

CVE-2020-11107 This is a writeup for CVE-2020-11107 I've found. An issue was discovered in XAMPP before 7.2.29, 7.3.x before 7.3.16 , and 7.4.x before 7.4.4 on Windows. An unprivileged user can change a .exe configuration in xampp-contol.ini for all users including admins to enable arbitrary...

8.8CVSS7.8AI score0.2247EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/13 2:21 a.m.6 views

CVE-2020-11107

CVE-2020-11107 这是我发现的 CVE-2020-11107 的漏洞分析。 在 Windows 上,XAMPP 7.2.29 之前版本、7.3.x 系列 7.3.16 之前版本以及 7.4.x 系列 7.4.4 之前版本中存在一个问题。 一个非特权用户可以为所有用户(包括管理员)更改 xampp-contol.ini 中的 .exe 配置,从而启用任意命令执行。 这一切都可以通过 XAMPP 的控制面板完成。 XAMPP 允许非特权用户访问和修改其编辑器和浏览器配置。默认值为 notepad.exe。 默认值可以更改为将 .bat...

8.8CVSS7.9AI score0.2247EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/12 8:29 p.m.8 views

XAMPPv3.3.0-BOF

XAMPPv3.3.0-BOF Código de exploit de prueba de concepto para XAMPP v3.3.0 — Desbordamiento de búfer en '.ini' Unicode + SEH Pasos para reproducir: 1. Ejecuta el script de Python "poc.py"; creará un nuevo archivo "xampp-control.ini" 2. Abre la aplicación xampp-control.exe 3. Haz clic en el botón...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/12 1:27 p.m.3 views

Mohnad-AL-saif-CVE-2020-11107-XAMPP-Local-Privilege-Escalation

🧨 CVE-2020-11107 – XAMPP Local Privilege Escalation Windows 📌 Overview CVE-2020-11107 is a Local Privilege Escalation LPE vulnerability affecting Apache Friends XAMPP on Windows. An unprivileged user can modify the XAMPP Control Panel configuration file xampp-control.ini and replace the default...

8.8CVSS7.8AI score0.2247EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/12 10:58 a.m.5 views

CVE-2024-4577-rayng

CVE-2024-4577 - PHP CGI Argument Injection Detection Lab A complete detection engineering lab for CVE-2024-4577 PHP CGI Argument Injection. Includes pre-built Vagrant boxes, Wazuh SIEM rules, and exploit tools for Blue Team training. What's Included Windows Server 2022 VM - Vulnerable XAMPP +...

9.8CVSS7.4AI score0.99987EPSS
SaveExploits68
Packet Storm
Packet Storm
added 2026/04/22 12:00 a.m.104 views

📄 WebDAV PHP Upload

This Metasploit module exploits WebDAV which also has PHP enabled, such as found on XAMPP servers. It can use do by using any supplied credentials to upload via WebDAV, a PHP payload and then execute it. This module requires Metasploit: https://metasploit.com/download Current source:...

8.7CVSS5.8AI score0.01296EPSS
SaveExploits2
GithubExploit
GithubExploit
added 2026/01/29 3:40 p.m.212 views

Exploit for Incorrect Permission Assignment for Critical Resource in Apachefriends Xampp

CVE-2020-11107 – XAMPP Local Privilege Escalation Descript...

8.8CVSS5.9AI score0.2247EPSS
SaveExploits5
Packet Storm News
Packet Storm News
added 2026/01/27 12:00 a.m.12 views

XAMPP and PHPMyAdmin Web Security Research Playbook

This is a comprehensive security testing guide for XAMPP services. It follows a structured approach: 1 Reconnaissance and Information Gathering, 2 Initial Access Attempts, 3 Post-Authentication Exploitation. Each scenario includes realistic commands and expected outcomes for professional security...

5.9AI score
SaveExploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2005-2045

Malware in sbrugna...

5CVSS6.4AI score0.0164EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2018-9674

Malware in sbrugna...

8.8CVSS8.8AI score0.01206EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2008-6469

Malware in sbrugna...

5.5CVSS6.4AI score0.01556EPSS
SaveExploits1References3
Rows per page
Query Builder