353 matches found
CVE-2021-32708
CVE-2021-32708 Affected versions of this package are vulnerable to Race Condition. The whitespace normalisation using in 1.x and 2.x removes any unicode whitespace. Under certain specific conditions this could potentially allow a malicious user to execute code remotely. How the Exploit Works...
Larascript
| | | | | | / || '| / |/ | / || '|| || ' \ | | | | | | || | | | |\ | | | | || | || | || ,||| ,||/ ||| ||| ./ | || Authors: @pwnedshell & @rsgbengi 📌 What its Larascript? Larascript is a script which take advantage from CVE-2018-15133 and can execute remote commands if a vulnerable Laravel app...
exploit_laravel_cve-2018-15133
Exploit de Laravel para CVE-2018-15133 Este código explota CVE-2018-15133 y está basado en el PoC de kosmiz y el exploit de Metasploit para esta vulnerabilidad. Básicamente lo hice para una máquina en Hack The Box, porque no quería usar Metasploit en ese momento y como excusa para practicar Pytho...
EXPLOIT-CVE-2025-27515
CVE-2025-27515 Proof of Concept A practical demonstration of CVE-2025-27515 , a file upload validation bypass vulnerability in Laravel Framework ≤ 12.0.0. Vulnerability Overview CVE-2025-27515 is a validation bypass that allows attackers to circumvent file upload restrictions when Laravel...
laravel-framework
About Laravel Note: This repository contains the core code of the Laravel framework. If you want to build an application using Laravel, visit the main Laravel repository. Laravel is a web application framework with expressive, elegant syntax. We believe development must be an enjoyable, creative...
Lab-for-cve-2018-15133
Summary: MExploiting CVE-2018-15133 Deserialization Vulnerability This exploit takes advantage of a deserialization vulnerability in the Laravel Framework through 5.5.40 and 5.6.x through 5.6.29. Description Remote code execution might occur as a result of an unserialize call on a potentially...
CVE-2018-15133-laravel-framework
CVE-2018-15133 - Laravel Framework 5.6.x Vulnerable Lab This repo provides a reproducible Docker lab for CVE-2018-15133 Laravel Framework token unserialize RCE when APPKEY is known. The app is pinned to a vulnerable Laravel 5.6.x version and exposes a simple /poc POST route under the web middlewa...
OctoberCMS - Account Takeover
octobercms in a CMS platform based on the Laravel PHP Framework. In affected versions of the october/system package an attacker can request an account password reset and then gain access to the account using a specially crafted request. The issue has been patched in Build 472 and v1.1.5. id:...
CLSA-2026-1790868507 TuxCare security update for laravel/framework (1 CVE)
TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 12.58.0-p4+tuxcare...
EUVD-2026-68765
Livewire DOM-based cross-site scripting during client-side state handling...
CVE-2026-81887 Livewire DOM-based cross-site scripting during client-side state handling
Livewire is a full-stack framework for Laravel. From 3.0.0-beta.1 until 3.8.3 and 4.3.4, the dot-notated query-string parser in js/plugins/history/index.js, including fromQueryString and insertDotNotatedValueIntoData, accepts the proto, constructor, and prototype path segments and creates inherit...
CVE-2026-35445 Winter: Authenticated backend users can bypass Users controller permission checks
Winter CMS is a content management system built on the Laravel PHP framework. In versions prior to 1.2.13, the backend did not validate the handler name submitted through the form postback handler POST field, allowing an authenticated backend user to invoke arbitrary controller methods, including...
CLSA-2026-1787229037 TuxCare security update for laravel/framework (1 CVE)
TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 5.8.38-p5+tuxcare...
PT-2026-83604
TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 5.8.38-p5+tuxcare...
CLSA-2026-1786443515 TuxCare security update for laravel/framework (1 CVE)
TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 6.20.45-p2+tuxcare...
PT-2026-80078
TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 6.20.45-p2+tuxcare...
CLSA-2026-1786014841 TuxCare security update for laravel/framework (1 CVE)
TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 7.30.7-p3+tuxcare...
PT-2026-75894
TuxCare rebuilt laravel/framework to address 1 CVE. Fixed in 7.30.7-p3+tuxcare...