35 matches found
CVE-2024-21546
UniSharp Laravel Filemanager RCE No Autenticado CVE-2024-21546 Este repositorio contiene herramientas de evaluación de seguridad, plantillas de detección y un kit de explotación automatizado para identificar y explotar Ejecución Remota de Código RCE No Autenticada en aplicaciones que utilizan el...
CVE-2024-21546
CVE-2024-21546 Python エクスプロイト 🔥 説明 この Python エクスプロイトスクリプトは、UniSharp が作成した脆弱性のある Laravel Filemanager を標的とし、認証済みユーザーがファイル制限を回避して悪意のあるファイルをアップロードできるようにします。アップロードされたペイロードが実行されると、リモートコード実行 RCE につながる可能性があります。 このエクスプロイトは以下を実行します: ユーザー指定の laravelsession を検証します 正規表現で CSRF token を抽出します PHP リバースシェルペイロードを含む偽...
CVE-2025-58440
CVE-2025-58440 Laravel FileManager におけるポリグロットファイル攻撃とヌルバイトインジェクションによるリモートコード実行（RCE） 概要 unisharp/laravel-filemanager パッケージのバージョン 2.11 は、ファイルアップロード時のファイルタイプ検証が不適切なため、リモートコード実行（RCE） に対して脆弱です。この脆弱性により、攻撃者はファイル拡張子の検証を悪用して、GIF 画像を装った悪意のある PHP ファイルをアップロードできます。具体的には、攻撃者は .php 拡張子にピリオド（.）を追加し、GIF89a;...
Arbitrary File Upload
Overview unisharp/laravel-filemanager is an A file upload/editor intended for use with Laravel 5 to 6 and CKEditor / TinyMCE. Affected versions of this package are vulnerable to Arbitrary File Upload via the upload process. An attacker can execute arbitrary code by uploading a malicious file usin...
EUVD-2024-3559
Malicious code in bioql PyPI...
Exploit for CVE-2025-58440
CVE-2025-58440 Remote Code Execution RCE via Polyglot File A...
CVE-2022-40734
UniSharp laravel-filemanager aka Laravel Filemanager before 2.6.4 allows download?workingdir=%2F.. directory traversal to read arbitrary files, as exploited in the wild in June 2022. This is related to league/flysystem before 2.0.0...
Arbitrary Code Injection
Overview unisharp/laravel-filemanager is an A file upload/editor intended for use with Laravel 5 to 6 and CKEditor / TinyMCE. Affected versions of this package are vulnerable to Arbitrary Code Injection through using a valid mimetype and inserting the . character after the php file extension. Thi...
Exploit for CVE-2024-21546
CVE-2024-21546 Python Exploit 🔥 Description This Python ex...
CVE-2024-21546
Versions of the package unisharp/laravel-filemanager before 2.9.1 are vulnerable to Remote Code Execution RCE through using a valid mimetype and inserting the . character after the php file extension. This allows the attacker to execute malicious code...
UniSharp Laravel Filemanager Code Injection vulnerability
Versions of the package unisharp/laravel-filemanager before 2.9.1 are vulnerable to Remote Code Execution RCE through using a valid mimetype and inserting the . character after the php file extension. This allows the attacker to execute malicious code...
GHSA-6569-3785-R3V6 UniSharp Laravel Filemanager Code Injection vulnerability
Versions of the package unisharp/laravel-filemanager before 2.9.1 are vulnerable to Remote Code Execution RCE through using a valid mimetype and inserting the . character after the php file extension. This allows the attacker to execute malicious code...
CVE-2024-21546
Versions of the package unisharp/laravel-filemanager before 2.9.1 are vulnerable to Remote Code Execution RCE through using a valid mimetype and inserting the . character after the php file extension. This allows the attacker to execute malicious code...
CVE-2024-21546
Versions of the package unisharp/laravel-filemanager before 2.9.1 are vulnerable to Remote Code Execution RCE through using a valid mimetype and inserting the . character after the php file extension. This allows the attacker to execute malicious code...
CVE-2024-21546
Versions of the package unisharp/laravel-filemanager before 2.9.1 are vulnerable to Remote Code Execution RCE through using a valid mimetype and inserting the . character after the php file extension. This allows the attacker to execute malicious code...
CVE-2024-21546
Versions of the package unisharp/laravel-filemanager before 2.9.1 are vulnerable to Remote Code Execution RCE through using a valid mimetype and inserting the . character after the php file extension. This allows the attacker to execute malicious code...
CVE-2024-21546
The CVE-2024-21546 entry specifies a Laravel Filemanager (unisharp/laravel-filemanager) vulnerability: versions before 2.9.1 are susceptible to Remote Code Execution (RCE) via a crafted request that uses a valid mimetype and inserts a dot after the PHP file extension, enabling execution of arbitr...
laravel-filemanager 代码注入漏洞
laravel-filemanager is an open source tool from UniSharp. A security vulnerability exists in laravel-filemanager versions prior to 2.9.1 that stems from vulnerability to remote code execution attacks and allows attackers to execute malicious code...
Remote Code Execution (RCE)
Overview unisharp/laravel-filemanager is an A file upload/editor intended for use with Laravel 5 to 6 and CKEditor / TinyMCE. Affected versions of this package are vulnerable to Remote Code Execution RCE through using a valid mimetype and inserting the . character after the php file extension. Th...