44 matches found
CVE-2024-4577-Nuclei-Template
Plantilla Nuclei para CVE-2024-4577 Este repositorio contiene una plantilla Nuclei para detectar la vulnerabilidad de inyecciĆ³n de argumentos PHP CGI identificada como CVE-2024-4577. Detalles de la Plantilla root@kitploit: id: CVE-2024-4577 info: name: CVE-2024-4577 PHP CGI Argument Injection...
CVE-2023-3452-PoC
CVE-2023-3452-PoC - Plugin Canto de WordPress 3.0.5 - InclusiĆ³n Remota de Archivos RFI - EjecuciĆ³n Remota de CĆ³digo RCE - No autenticado AquĆ explicamos un PoC de la Ćŗltima vulnerabilidad de RFI InclusiĆ³n Remota de Archivos del plugin Canto de WordPress, y hemos desarrollado un exploit para...
CVE-2024-4577
Comprobador de Vulnerabilidad CVE-2024-4577 Este script estĆ” diseƱado para comprobar la vulnerabilidad descrita por CVE-2024-4577, que implica explotar ciertas configuraciones de PHP para ejecutar cĆ³digo arbitrario de forma remota. EnvĆa una solicitud POST a endpoints especificados en una lista d...
CVE-2024-4577_PowerShell
CVE-2024-4577PowerShell Please note: Ensure that you are authorized to conduct such penetration testing in the target environment; unauthorized use of attack techniques may violate relevant laws. The code is for educational and research purposes only, and should be used within legal and ethical...
CVE-2024-4577-nuclei
CVE-2024-4577-nuclei Carga Ćŗtil: root@kitploit: ?%ADd+allowurlinclude%3d1+%ADd+autoprependfile%3dphp://input root@kitploit: URL de prueba: root@kitploit: /unfxu9a.phppayload /php-cgi/unfxu9a.phppayload /cgi-bin/php-cgi.exepayload /php-cgi/php-cgi.exepayload /php-cgi/php.exepayload...
CVE-2024-4577
CVE-2024-4577, InyecciĆ³n de Argumentos en PHP-CGI root@kitploit: ./CVE-2024-4577.sh /path/to/domains-list POC : root@kitploit: POST /test.hello?%ADd+allowurlinclude%3d1+%ADd+autoprependfile%3dphp://input HTTP/1.1 Host: host User-Agent: curl/8.3.0 Accept: / Content-Length: 23 Content-Type:...
CVE-2024-4577
Archivo de configuraciĆ³n del entorno CVE-2024-4577 y archivo PHP --poc-- Invoke-WebRequest -Method POST -Headers @"Content-Type" = "application/x-www-form-urlencoded" -Body "" -Uri "http://localhost/test.php?%ADd+allowurlinclude%3D1+%ADd+autoprepend file%3Dphp://input"...
CVE-2024-4936
The Canto plugin for WordPress is vulnerable to Remote File Inclusion in all versions up to, and including, 3.0.8 via the abspath parameter. This makes it possible for unauthenticated attackers to include remote files on the server, resulting in code execution. This required allowurlinclude to be...
CVE-2024-4936
The Canto plugin for WordPress is vulnerable to Remote File Inclusion in all versions up to, and including, 3.0.8 via the abspath parameter. This makes it possible for unauthenticated attackers to include remote files on the server, resulting in code execution. This required allowurlinclude to be...
CVE-2024-4936 Canto <= 3.0.8 - Unauthenticated Remote File Inclusion
The Canto plugin for WordPress is vulnerable to Remote File Inclusion in all versions up to, and including, 3.0.8 via the abspath parameter. This makes it possible for unauthenticated attackers to include remote files on the server, resulting in code execution. This required allowurlinclude to be...
CVE-2024-4936 Canto <= 3.0.8 - Unauthenticated Remote File Inclusion
The Canto plugin for WordPress is vulnerable to Remote File Inclusion in all versions up to, and including, 3.0.8 via the abspath parameter. This makes it possible for unauthenticated attackers to include remote files on the server, resulting in code execution. This required allowurlinclude to be...
Canto <= 3.0.8 - Unauthenticated Remote File Inclusion
Description The Canto plugin for WordPress is vulnerable to Remote File Inclusion in all versions up to, and including, 3.0.8 via the abspath parameter. This makes it possible for unauthenticated attackers to include remote files on the server, resulting in code execution. This required...
VuFind Server-Side Request Forgery (SSRF) vulnerability
A Server-Side Request Forgery SSRF vulnerability in the /Upgrade/FixConfig route in Open Library Foundation VuFind 2.0 through 9.1 before 9.1.1 allows a remote attacker to overwrite local configuration files to gain access to the administrator panel and achieve Remote Code Execution. A mitigating...
CVE-2024-25738
A Server-Side Request Forgery SSRF vulnerability in the /Upgrade/FixConfig route in Open Library Foundation VuFind 2.0 through 9.1 before 9.1.1 allows a remote attacker to overwrite local configuration files to gain access to the administrator panel and achieve Remote Code Execution. A mitigating...
Design/Logic Flaw
The Backup Migration plugin for WordPress is vulnerable to Remote File Inclusion in versions 1.0.8 to 1.3.9 via the 'content-dir' HTTP header. This makes it possible for unauthenticated attackers to include remote files on the server, resulting in code execution. NOTE: Successful exploitation of...
Juniper SRX Firewall / EX Switch Remote Code Execution Exploit
This Metasploit module exploits a PHP environment variable manipulation vulnerability affecting Juniper SRX firewalls and EX switches. The affected Juniper devices running FreeBSD and every FreeBSD process can access their stdin by opening /dev/fd/0. The exploit also makes use of two useful PHP...
Remote file inclusion
The Canto plugin for WordPress is vulnerable to Remote File Inclusion in versions up to, and including, 3.0.4 via the 'wpabspath' parameter. This allows unauthenticated attackers to include and execute arbitrary remote code on the server, provided that allowurlinclude is enabled. Local File...
CVE-2023-3452
The Canto plugin for WordPress is vulnerable to Remote File Inclusion in versions up to, and including, 3.0.4 via the 'wpabspath' parameter. This allows unauthenticated attackers to include and execute arbitrary remote code on the server, provided that allowurlinclude is enabled. Local File...
CVE-2022-40089
A remote file inclusion RFI vulnerability in Simple College Website v1.0 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is exploitable when the directive allowurlinclude is set to On...
Remote file inclusion
A remote file inclusion RFI vulnerability in Simple College Website v1.0 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is exploitable when the directive allowurlinclude is set to On...