Exploit for PHP Remote File Inclusion in Wordpress

⚡ XWPRCE — CVE-2026-87902 Hacker Console WordPress Core g...

CVE-2023-41892_PoC

CVE-2023-41892 Craft CMS PoC このリポジトリには、Craft CMS の CVE-2023-41892（認証不要のリモートコード実行の脆弱性）を再現するための概念実証スクリプトとローカルの Vulhub ラボが含まれています。 このプロジェクトは、許可されたローカルラボまたは明示的なテスト許可があるシステムでのみ使用してください。 プロジェクト構成 CVE-2323-41892PoC/ +-- README.md +-- LFItoRCE.py +-- ImagickPoC.py +-- Vulnhubenv/ +-- docker-compose.yml +...

Exploit for PHP Remote File Inclusion in Wordpress

markdown 🎯 CVE-2026-87902 — WordPress Core LFI → RCE...

Exploit for PHP Remote File Inclusion in Wordpress

markdown 🎯 CVE-2026-87902 — WordPress Core LFI → RCE...

CVE-2024-23334

CVE-2024-23334 Aiohttp = !IMPORTANT このスクリプトは教育目的のみを意図しています。 不正利用は固く禁止されています。 実行方法 $ git clone https://github.com/wizarddos/CVE-2024-23334 $ cd CVE-2024-23334 $ python3 exploit.py -u url -f file -d static directory !Note URL と静的ディレクトリのスラッシュを一致させることを忘れないでください。http://127.0.0.1/...

CVE-2026-100750

Joomla Extension - regularlabs.com - LFI / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joomla - Modules Anywhere Pro lets additional attributes on a module tag replace arbitrary parameters of the selected module. This feature is enabled by default in affected versions. The overrides are applied...

EUVD-2026-88107

Joomla Extension - regularlabs.com - LFI / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joomla - Modules Anywhere Pro lets additional attributes on a module tag replace arbitrary parameters of the selected module. This feature is enabled by default in affected versions. The overrides are applied...

CVE-2026-100750

The Modules Anywhere Joomla extension (versions 1.5.0 - 9.0.5 ) contains a vulnerability allowing Local File Inclusion (LFI) and Server-Side Request Forgery (SSRF) . The issue stems from a feature that allows additional attributes on a module tag to replace arbitrary parameters of the selected mo...

SonicWall SMA1000 LFI

Pre-authentication path traversal vulnerability in SMA1000 firmware version 12.4.2, which allows an unauthenticated attacker to access arbitrary files and directories stored outside the web root directory. id: CVE-2023-0126 info: name: SonicWall SMA1000 LFI author: tess severity: high description...

CVE-2026-100750: Server-Side Request Forgery (SSRF)

Joomla Extension - regularlabs.com - LFI / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joomla - Modules Anywhere Pro lets additional attributes on a module tag replace arbitrary parameters of the selected module. This feature is enabled by default in affected versions. The overrides are applied...

Exploit for CVE-2026-87902

CVE-2026-87902 — WordPress Core · LFI → RCE Exploit no aute...

CVE-2009-2265

cf8-upload.py ⭐ CVE-2009-2265를 악용하는 python3 스크립트입니다. 익스플로잇 - CVE-2009-2265 ❗ 이 스크립트는 adobe coldfusion 8.0.1에 포함된 FCKeditor 2.6.4.1에서 발견된 취약점을 악용합니다: https://vulners.com/cve/CVE-2009-2265 이 스크립트는 사용자가 coldfusion 8.0.1을 실행하는 대상 컴퓨터에 업로드할 파일을 제출하고 실행할 수 있게 합니다. 사전 요구사항 ✔ python3 python3용 requests 모듈...

Exploit for CVE-2026-87902

CVE-2026-87902 — WordPress Core Unauthenticated Local File Inc...

WordPress WebFacing Email Accounts for cPanel plugin 5.3-5.3.6 - Unauthenticated LFI vulnerability

Unauthenticated LFI vulnerability discovered by nobody in WordPress Plugin WebFacing Email Accounts for cPanel versions 5.3-5.3.6...

CVE-2026-84069 WebFacing Email Accounts for cPanel 5.3 - 5.3.6 - Unauthenticated LFI via assets/index.php

The WebFacing™ WordPress plugin before 5.4 does not restrict access to one of its bundled scripts and does not validate a user-supplied path before using it to include a local file, allowing unauthenticated users to perform Local File Inclusion...

LFI-Destruction

🔥 LFI-Destruction – 공인 침투 테스트 프레임워크 LFI-Destroyer는 공인된 보안 전문가를 위해 설계된 포괄적이고 모듈식 LFILocal File Inclusion 익스플로잇 프레임워크입니다. 여러 공격 기술을 단일의 사용하기 쉬운 도구로 결합합니다: SSH 및 브라우저 아티팩트 퍼징 – Linux 및 Windows에서 SSH 키, Putty PPK, WinSCP, FileZilla, Firefox, Chrome, Edge, Brave 자격 증명을 찾습니다. 로그 포이즈닝 → 리버스 셸 – 쓰기 가능한 로...

Citrix - Local File Inclusion

Citrix ADC and Citrix Gateway versions before 13.0-58.30, 12.1-57.18, 12.0-63.21, 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a, 11.0.3d and 10.2.7 are vulnerable to local file inclusion because they allow unauthenticated access to certain URL endpoints. id:...

Pulse Connect Secure SSL VPN Arbitrary File Read

Pulse Secure Pulse Connect Secure PCS 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4 all contain an arbitrary file reading vulnerability that could allow unauthenticated remote attackers to send a specially crafted URI to gain improper access. id: CVE-2019-11510 info: name: Pulse...

CVE-2024-4577-RCE-PoC

CVE-2024-4577 RCE 익스플로잇 PHP를 구현하는 동안 팀은 Windows 운영 체제 내의 인코딩 변환 Best-Fit 기능을 인지하지 못했습니다. 이로 인해 인증되지 않은 공격자가 특정 문자 시퀀스를 통해 이전 CVE-2012-1823 보호를 우회할 수 있습니다. 인수 주입 공격을 통해 원격 PHP 서버에서 임의 코드를 실행할 수 있습니다. 이 PoC는 학습 및 연구 목적으로만 제공됩니다. 불법 활동에 사용하지 마십시오; 모든 법적 책임은 사용자에게 있습니다. 이 취약점은DEVCORE @d3vc0r3의 Orange...

Ivanti Avalanche 6.3.2 - Local File Inclusion

Ivanti Avalanche 6.3.2 is vulnerable to local file inclusion because it allows remote unauthenticated user to access files that reside outside the 'image' folder. id: CVE-2021-30497 info: name: Ivanti Avalanche 6.3.2 - Local File Inclusion author: gy741 severity: high description: Ivanti Avalanch...