CVE-2025-56399

CVE-2025-56399 – laravel-file-manager v3.3.1 中的认证远程代码执行漏洞 🧭 概述 在 laravel-file-manager v3.3.1 及更早版本中存在一个认证远程代码执行（RCE）漏洞，允许具有文件管理器界面访问权限的攻击者在服务器上执行任意代码。通过上传一个包含恶意 PHP 代码的允许的非 PHP 扩展名（例如 .png、.pdf）文件，并将其重命名为 .php 扩展名，或者直接创建并编辑一个 .php 文件，当通过公共 URL 访问该文件时，攻击者即可实现 RCE。 🧱 受影响组件 项目： laravel-file-manager...

CVE-2019-19369

CVE-2019-19369 - FusionPBX = 4.5.10 认证远程代码执行（RCE） 经过认证的攻击者可以利用FusionPBX版本 = 4.5.10中的PHP编辑器功能，编辑现有的PHP页面以插入PHP有效载荷。通过导航到已更改的文件，我们能够以www-data用户身份获取shell。 发现者：TheCyberGeek...

CVE-2026-44403-WingFTP-v8.1.2-POC-Exploit

Wing FTP Server v8.1.2 contiene una vulnerabilidad de Ejecución Remota de Código RCE en el mecanismo de serialización de sesiones. Un administrador autenticado puede inyectar código Lua arbitrario a través del campo mydirectory basefolder del administrador de dominio, que se ejecuta del lado del...

CVE-2023-37739---Path-Traversal-in-i-doit-Pro-25-and-below

CVE-2023-37739 - Path Traversal en i-doit Pro 25 y anteriores i-doit Pro 25 y versiones anteriores son vulnerables a una vulnerabilidad de Path Traversal. Estas vulnerabilidades podrían permitir a atacantes autenticados remotos con privilegios bajos o altos navegar a ubicaciones que no deberían s...

DolibabyPhp

DolibabyPhp Un exploit de RCE autenticado para Dolibarr ERP/CRM CVE-2023-30253. Instalación Puedes instalar el paquete desde el repositorio PyPi con pip o clonar el código fuente directamente desde GitHub con git clone. pip install dolibabyphp Uso Usage: dolibabyphp OPTIONS TARGETURL USERNAME...

chyrp-lite-rce-poc

chyrp-lite-rce-poc CVE-2026-53767 + CVE-2026-53768 - Authenticated RCE in Chyrp Lite ≤ 2026.01 "Iriomote" Chained attack: uploadspath blocklist bypass CVE-2026-53768 + missing file extension validation in adminupdateupload CVE-2026-53767 → Remote Code Execution as www-data Overview Chyrp Lite ≤...

postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator

A flaw was found in PostgreSQL. This vulnerability, stemming from a type confusion issue in the ctid data type selectivity estimator, could allow an authenticated object creator to access and potentially recover sensitive information from memory. By manipulating input, an attacker could gain...

postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists

A flaw was found in PostgreSQL pgdump. A heap buffer overflow vulnerability exists when processing long function transform lists. An authenticated object creator can exploit this by providing a specially crafted transform list. This allows the attacker to execute arbitrary code as the operating...

Royal-Event-Management-System-todate-SQL-Injection-Authenticated

Royal Event Management System - 'todate' SQL 注入（已验证） 1. 描述： Royal Event Management System 1.0 允许通过参数 'todate' 进行 SQL 注入， 位于 /royalevent/btndatesreport.php?= 利用此问题可能允许攻击者破坏 应用程序，访问或修改数据，或利用底层数据库中的潜在漏洞。 2. 概念验证： 在 Burpsuite 中拦截受影响页面请求中带有 'todate' 参数的数据包，并将其保存为 poc.txt。然后运行 SQLmap 从数据库中提取数据： sqlmap ...

RRAS-VULNERABILITY-CVE-2026-25172-CVE-2026-25173-CVE-2026--26111

Laboratorio de simulación de vulnerabilidades RRAS de Windows 11 CVE-2026-25172, CVE-2026-25173, CVE-2026-26111 ⚠️ IMPORTANTE – Solo para uso educativo y defensivo Esta guía sirve para configurar un entorno de laboratorio aislado y controlado con el fin de comprender las vulnerabilidades de...

CVE-2019-11447_CuteNews-AvatarUploadRCE

CVE-2019-11447 Exploit/PoC - CuteNews 2.1.2 Carga de avatar RCE Autenticado Código de Exploit para CVE-2019-11447 también conocido como CuteNews 2.1.2 Carga de avatar RCE Autenticado Enlaces del Exploit: Resultado esperado: Iniciar sesión/Registrar una cuenta, crear un archivo PHP seleccionado po...

WebTareas 2.4p5 - Cross-Site Scripting

webtareas 2.4p5 was discovered to contain a cross-site scripting XSS vulnerability in the component /clients/listclients.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field. id: CVE-2022-44957 info: name: WebTareas...

WordPress Select All Categories and Taxonomies <1.3.2 - Cross-Site Scripting

WordPress Select All Categories and Taxonomies plugin before 1.3.2 contains a cross-site scripting vulnerability. The settings page of the plugin does not properly sanitize the tab parameter before outputting it back. An attacker can inject arbitrary script in the browser of an unsuspecting user ...

FlatPress 1.2.1 - Stored Cross-Site Scripting

FlatPress 1.2.1 contains a stored cross-site scripting vulnerability that allows for arbitrary execution of JavaScript commands through blog content. An attacker can possibly steal cookie-based authentication credentials and launch other attacks. id: CVE-2021-41432 info: name: FlatPress 1.2.1 -...

Prismatic < 2.8 - Cross-Site Scripting

The plugin does not escape the 'tab' GET parameter before outputting it back in an attribute, leading to a reflected Cross-Site Scripting issue which will be executed in the context of a logged in administrator id: CVE-2021-24409 info: name: Prismatic 2.8 - Cross-Site Scripting author: Harsh...

School Dormitory Management System 1.0 - Authenticated Cross-Site Scripting

School Dormitory Management System 1.0 contains an authenticated cross-site scripting vulnerability in admin/inc/navigation.php:126. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-base...

Microweber <1.2.11 - Information Disclosure

Microweber before 1.2.11 is susceptible to information disclosure. An error message is generated in microweber/microweber which contains sensitive information while viewing comments from loadmodule:commentssearch=. An attacker can possibly obtain sensitive information, modify data, and/or execute...

School Dormitory Management System 1.0 - Authenticated Cross-Site Scripting

School Dormitory Management System 1.0 contains an authenticated cross-site scripting vulnerability via admin/inc/navigation.php:125. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-bas...

WebTareas 2.4p5 - SQL Injection

webTareas 2.4p5 was discovered to contain a SQL injection vulnerability via the id parameter in phasesets.php. id: CVE-2022-44291 info: name: WebTareas 2.4p5 - SQL Injection author: theamanrawat severity: critical description: | webTareas 2.4p5 was discovered to contain a SQL injection...

OpenCATS 0.9.6 - Cross-Site Scripting

OpenCATS 0.9.6 contains a cross-site scripting vulnerability via the joborderID parameter. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch...