CVE-2025-24801

CVE-2025-24801 PoC for GLPI RCE This repository contains a proof-of-concept script poc.py that exploits CVE-2025-24801, an LFI-to-RCE vulnerability in GLPI 10.0.17. It automates: Logging into GLPI Enabling .php uploads by updating document type settings Uploading a PHP reverse shell via the AJAX...

CVE-2023-41892_PoC

CraftCMS 未授权远程代码执行漏洞（CVE-2023-41892） Craft CMS 是一个灵活、用户友好的内容管理系统，用于在 Web 上创建自定义的数字体验。它为用户提供了一个后端界面来实现网站并配置 CMS。 Craft CMS 4.4.0 至 4.4.14 版本中存在一个远程代码执行漏洞。未经身份验证的攻击者可以通过 ConditionsController 实现远程代码执行。该漏洞存在于控制器的 beforeAction 方法中，由于输入验证不足，攻击者可以利用该漏洞创建任意对象并实现代码执行。 参考链接：...

CVE-2024-4577-RCE-PoC

CVE-2024-4577 RCE Exploit While implementing PHP, the team did not notice the Best-Fit feature of encoding conversion within the Windows operating system. This oversight allows unauthenticated attackers to bypass the previous protection of CVE-2012-1823 by specific character sequences. Arbitrary...

HTB-Pterodactyl-Writeup

HackTheBox — Pterodactyl Writeup Difficulty: Medium | OS: Linux openSUSE Leap 15.6 | Season: 10 Summary Pterodactyl is a medium-difficulty Linux machine running the Pterodactyl game server panel. The attack chain involves an unauthenticated LFI-to-RCE vulnerability in the panel, credential...

ANT-2026-HHD77M82 · joomla · Path-traversal

path-traversal high CVE-2026-40383 GHSA-v8h9-9g8j-w7h4 Severity Claude high · Security research firm high · Maintainer high Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Doyensec. ANT-2026-HHD77M82: Path Traversa...

fuzzylime cms 3.01a (file) Local File Inclusion Exploit

No description provided by source. !/usr/bin/perl Fuzzylime CMS 3.01 LFI / RCE author : Cod3rZ website : http://cod3rz.helloweb.eu http://site/blog.php?file=../file\0 LFI TO RCE use LWP::UserAgent; system"cls"; system"clear"; print " -------------------------------------------------\n"; print "...

Fuzzylime CMS 3.01a - 'file' Local File Inclusion

!/usr/bin/perl ---------------------------------------------------------- Fuzzylime CMS 3.01 Multiple LFI / RCE author : Cod3rZ website : http://cod3rz.helloweb.eu ---------------------------------------------------------- http://site/blog.php?file=../file\0...