OctoberCMS - Account Takeover

octobercms in a CMS platform based on the Laravel PHP Framework. In affected versions of the october/system package an attacker can request an account password reset and then gain access to the account using a specially crafted request. The issue has been patched in Build 472 and v1.1.5. id:...

laravel-framework

About Laravel Note: This repository contains the core code of the Laravel framework. If you want to build an application using Laravel, visit the main Laravel repository. Laravel is a web application framework with expressive, elegant syntax. We believe development must be an enjoyable, creative...

Larascript

| | | | | | / || '| / |/ | / || '|| || ' \ | | | | | | || | | | |\ | | | | || | || | || ,||| ,||/ ||| ||| ./ | || Authors: @pwnedshell & @rsgbengi 📌 What its Larascript? Larascript is a script which take advantage from CVE-2018-15133 and can execute remote commands if a vulnerable Laravel app...

Lab-for-cve-2018-15133

Summary: MExploiting CVE-2018-15133 Deserialization Vulnerability This exploit takes advantage of a deserialization vulnerability in the Laravel Framework through 5.5.40 and 5.6.x through 5.6.29. Description Remote code execution might occur as a result of an unserialize call on a potentially...

CVE-2018-15133-laravel-framework

CVE-2018-15133 - Laravel Framework 5.6.x Vulnerable Lab This repo provides a reproducible Docker lab for CVE-2018-15133 Laravel Framework token unserialize RCE when APPKEY is known. The app is pinned to a vulnerable Laravel 5.6.x version and exposes a simple /poc POST route under the web middlewa...

CVE-2021-32708

CVE-2021-32708 Affected versions of this package are vulnerable to Race Condition. The whitespace normalisation using in 1.x and 2.x removes any unicode whitespace. Under certain specific conditions this could potentially allow a malicious user to execute code remotely. How the Exploit Works...

EXPLOIT-CVE-2025-27515

CVE-2025-27515 Proof of Concept A practical demonstration of CVE-2025-27515 , a file upload validation bypass vulnerability in Laravel Framework ≤ 12.0.0. Vulnerability Overview CVE-2025-27515 is a validation bypass that allows attackers to circumvent file upload restrictions when Laravel...

CVE-2026-114509

CVE-2026-114509 Laravel TokenGuard authentication bypass through non-string API credentials 🔴 CVE-2026-114509 — Laravel TokenGuard Authentication Bypass Unauthenticated Authentication Bypass in Laravel Framework — TokenGuard API Guard 📋 Overview CVE-2026-114509 is a critical authentication bypass...

CLSA-2026-1793092408 TuxCare security update for laravel/framework (1 CVE)

TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 11.44.0-p4+tuxcare...

Exploit for CVE-2026-114509

CVE-2026-114509 Laravel TokenGuard authentication bypass thro...

Laravel Framework 13.28.0 TokenGuard Authentication Bypass

Laravel Framework versions prior to 12.68.0 and 13.29.0 contain an authentication bypass in TokenGuard when non-string API credentials are processed with MySQL or MariaDB. The supplied proof of concept scans for affected targets and attempts authentication bypasses...

CLSA-2026-1793031697 TuxCare security update for laravel/framework (1 CVE)

TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 10.48.28-p3+tuxcare...

Laravel Framework 13.28.0 TokenGuard Authentication Bypass

Laravel Framework versions before 12.68.0 and versions 13.0.0 through 13.28.0 contain a TokenGuard authentication bypass when non-string API credentials are mishandled. The included proof of concept performs bounded local and remote checks. https://packetstorm.news/download/237478...

Laravel Framework 13.28.0 TokenGuard Authentication Bypass

Laravel Framework versions before 13.29.0 contain an authentication bypass in TokenGuard on MySQL or MariaDB. This proof of concept submits a non-string API token value that can authenticate as an unintended existing user. https://packetstorm.news/download/237418...

Laravel Framework 12.67.0 TokenGuard Authentication Bypass

Laravel Framework version 12.67.0 contains an authentication bypass in TokenGuard when used with an Eloquent user provider and MySQL or MariaDB. The supplied proof of concept demonstrates authentication with a crafted non-string API token. https://packetstorm.news/download/237410...

Improper Authentication

Overview laravel/framework is a PHP framework for web artisans. Affected versions of this package are vulnerable to Improper Authentication via TokenGuard in src/Illuminate/Auth/TokenGuard.php, where the token retrieved from the request is not validated to be a string before being used for...

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

Overview laravel/framework is a PHP framework for web artisans. Affected versions of this package are vulnerable to Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' via the ResolvesJsonApiElements trait in JSON:API resource loading, where an attacker with read-only...

Laravel Framework 13.28.0 TokenGuard Authentication Bypass

Laravel Framework versions before 12.68.0 and 13.29.0 contain an authentication bypass in TokenGuard. The proof of concept submits a non-string apitoken value to cause unintended credential matching on MySQL or MariaDB. https://packetstorm.news/download/237014...

WS-2026-0147

laravel/framework v5.2.0-beta1 - v11.56.0, v12.0.0 - v12.67.0, v13.0.0 - v13.26.1 and illuminate/auth v5.2.0 - v11.51.0, v12.0.0 - v12.67.0, v13.0.0 - v13.27.0: TokenGuard passes non-string apitoken values arrays or JSON scalars to the user provider lookup, so on MySQL/MariaDB type juggling match...

exploit_laravel_cve-2018-15133

Exploit de Laravel para CVE-2018-15133 Este código explota CVE-2018-15133 y está basado en el PoC de kosmiz y el exploit de Metasploit para esta vulnerabilidad. Básicamente lo hice para una máquina en Hack The Box, porque no quería usar Metasploit en ese momento y como excusa para practicar Pytho...