CVE-2025-49132_HTB_SEASON10

CVE-2025-49132 - Pterodactyl Panel RCE エクスプロイト HTB Season 10 - Pterodactyl マシンの writeup 概要 ターゲット: Pterodactyl HTB マシン 中程度の難易度 CVE: CVE-2025-49132 深刻度: Critical CVSS 9.8 攻撃タイプ: 認証なしリモートコード実行 影響を受けるバージョン: Pterodactyl Panel リモートコード実行 方法 1: 提供された exploit.sh を使用 root@kitploit: chmod +x exploit.sh Get...

HTB-Pterodactyl-RCE-CVE-2025-49132

Pterodactyl Panel Locale RCE CVE-2025-49132 — 教育用PoC -6f42c1 認可されたテストおよび防御学習専用です。 このリポジトリは、管理されたラボ環境（例: CTF/HTB形式）を対象としており、ターゲットを所有しているか、テストする明示的な書面による許可を得ている場合に限ります。 背景 このリポジトリには、v1.11.11より前のPterodactyl Panelバージョン に影響する実世界の脆弱性に対する教育用Python PoC（pterodactylrce.py）が含まれています。脆弱な構成では、認証されていない攻撃者が loca...

CVE-2025-49132

CVE-2025-49132 개념 증명PoC 이 저장소는 Pterodactyl Panel 버전 1.11.11 이전에서 발생하는 중요 인증되지 않은 원격 코드 실행RCE 취약점인 CVE-2025-49132에 대한 개념 증명PoC을 포함합니다. 취약점 상세 정보 CVE ID : CVE-2025-49132 심각도 : 10.0 치명적 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H 영향받는 버전 : 1.11.11 예: 1.9.0 1.11.10 설명 : Pterodactyl Panel의...

CVE-2026-40909

WWBN AVideo is an open source video platform. In versions 29.0 and prior, the locale save endpoint locale/save.php constructs a file path by directly concatenating $POST'flag' into the path at line 30 without any sanitization. The $POST'code' parameter is then written verbatim to that path via...

CVE-2026-33513 AVideo has an Unauthenticated Local File Inclusion in API locale (RCE possible with writable PHP)

WWBN AVideo is an open source video platform. In versions up to and including 26.0, an unauthenticated API endpoint APIName=locale concatenates user input into an include path with no canonicalization or whitelist. Path traversal is accepted, so arbitrary PHP files under the web root can be...

CVE-2026-33513

WWBN AVideo is an open source video platform. In versions up to and including 26.0, an unauthenticated API endpoint APIName=locale concatenates user input into an include path with no canonicalization or whitelist. Path traversal is accepted, so arbitrary PHP files under the web root can be...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the block/locale endpoint due to improper sanitization of the locale parameter. PoC html https://redacted.de/cookiebar/block/dens82w%22%3E%3Cimg%20src%3da%20onerror%3dalert1%3Ew9qt...

PT-2024-32386 · Contao +1 · Contao Open Source Cms +1

Name of the Vulnerable Software and Affected Versions: Oveleon Cookie Bar versions prior to 1.16.3 and 2.1.3 Description: The block/locale endpoint does not properly sanitize the user-controlled locale input before including it in the backend's HTTP response, thereby causing reflected cross-site...

CVE-2023-29562

TP-Link TL-WPA7510 EUV2190125 was discovered to contain a stack overflow via the operation parameter at /admin/locale...