safeshell

safeshell Prevent PHP vulnerabilities similar to CVE-2016-10033 and CVE-2016-10045...

POC-CVE-2016-10033

POC-CVE-2016-10033 First let’s get the Vulnerable application up and running Step 1: Run the following command to retrieve the vulnerable Docker Image from the Docker repository. Command: docker pull vulnerables/cve-2016-10033 Step 2: Running the Docker image in Docker Desktop, exposing port 8080...

CVE-2016-10033

This repository does not have a README...

exploit-CVE-2016-10033

PHPMailer 5.2.18 Удаленное выполнение кода PHPMailer — самый популярный транспортный класс в мире, с примерно 9 миллионами пользователей по всему миру. Загрузки продолжаются со значительной скоростью ежедневно. Используется многими проектами с открытым исходным кодом: WordPress, Drupal, 1CRM,...

CVE-2016-2098-PoC

CVE-2016-10033-PoC Écrit pour PentesterLab Si vous êtes de PentesterLab, ne trichez pas, c'est bien mieux d'apprendre. J'espère que cela sera utile à quelqu'un, sinon à moi-même dans le futur : Possède un shell interactif, du joli argparse aussi Utilisation usage: script.py -h --url URL --param...

CVE-2016-10033-PoC

CVE-2016-10033-PoC Écrit pour PentesterLab Si vous venez de PentesterLab, ne trichez pas, c'est bien mieux d'apprendre. J'espère que cela sera utile à quelqu'un, sinon à moi-même dans le futur : Possède un shell interactif, des trucs argparse sympas aussi Utilisation usage: poc.py -h --target...

CVE-2016-10033

Ce depot n’a pas de fichier README...

cve-2016-10033-45

Pour construire les dockers : $ sudo docker build . -t ep4/5.2.17 remplacez 5.2.17 par 18 et 20. pour lancer les dockers : $ sudo docker run -p 7001:80 ep4/5.2.17 remplacez par 7001/7002/7003 et 5.2.17/18/20 dans les dossiers respectifs...

Ubuntu: Security Advisory (USN-5956-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-5956-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-5956-2 libphp-phpmailer vulnerability

USN-5956-1 fixed vulnerabilities in PHPMailer. It was discovered that the fix for CVE-2017-11503 was incomplete. This update fixes the problem. Original advisory details: Dawid Golunski discovered that PHPMailer was not properly escaping user input data used as arguments to functions executed by...

SUSE CVE-2016-10033

The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a " backslash double quote in a crafted Sender property...

Metasploit Weekly Wrap-Up

SAMR Auxiliary Module A new SAMR auxiliary module has been added that allows users to add, lookup, and delete computer accounts from an AD domain. This should be useful for pentesters on engagements who need to create an AD account to gain an initial foothold into the domain for lateral movement...

Mageia: Security Advisory (MGASA-2017-0022)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-5F37-GXVH-23V6 Remote code execution in PHPMailer

Impact The mailSend function in the default isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a " backslash double quote in a crafted Sender property. Patches Fixed in 5.2.18 Workaround...

Exploit for Argument Injection in Phpmailer_Project Phpmailer

CVE-2016-10033 This vulnerability affects PHPMailer 5.2.18 a...

Remote Code Execution (RCE)

PHPMailer is vulnerable to remote code execution RCE attacks. A malicious user can inject and execute arbitrary code by passing extra parameters to the mail command. This is due to the improper interaction with the library's escapeshellarg function and internal escaping function performed in PHP...

PHPMailer < 5.2.20 with Exim MTA - Remote Code Execution Exploit

Exploit for php platform in category web applications !/usr/bin/python Exploit Title: RCE for PHPMailer 5.2.20 with Exim MTA Date: 16/06/2017 Exploit Author: @phacktul Software Link: https://github.com/PHPMailer/PHPMailer Version: 5.2.20 Tested on: Debian x86/x64 CVE :...

PHPMailer 5.2.20 with Exim MTA - Remote Code Execution

PHPMailer 5.2.20 with Exim MTA - Remote Code Execution !/usr/bin/python Exploit Title: RCE for PHPMailer 5.2.20 with Exim MTA Date: 16/06/2017 Exploit Author: @phacktul Software Link: https://github.com/PHPMailer/PHPMailer Version: 5.2.20 Tested on: Debian x86/x64 CVE :...

PHPMailer < 5.2.20 with Exim MTA - Remote Code Execution

!/usr/bin/python Exploit Title: RCE for PHPMailer 5.2.20 with Exim MTA Date: 16/06/2017 Exploit Author: @phacktul Software Link: https://github.com/PHPMailer/PHPMailer Version: 5.2.20 Tested on: Debian x86/x64 CVE : CVE-2016-10033,CVE-2016-10074,CVE-2016-10034,CVE-2016-10045 @phacktul -...