CVE-2025-49132-Mods

CVE-2025-49132 - RCE Simple 📝 Overview This repository contains a specialized exploit for CVE-2025-49132, a critical unauthenticated Remote Code Execution RCE vulnerability in the Pterodactyl Panel prior to v1.11.11. The vulnerability exists in the /locales/locale.json endpoint. By manipulating t...

CVE-2026-87902

CVE-2026-87902 - WordPress Core Неаутентифицированный LFI → RCE Лаборатория валидации Материалы для исследования безопасности, предназначенные для воспроизведения и валидации CVE-2026-87902 GHSA-7hp8-65ch-5whp в изолированной Docker-лаборатории, доступной только через loopback:...

CVE-2025-49132

CVE-2025-49132 - Pterodactyl Panel Exploit ⚠️ Disclaimer : This repository is created for educational and research purposes only as part of my security research to understand and document CVE-2025-49132. All credit for the vulnerability discovery goes to the original researchers. / |\ \ / /| | | /...

CVE-2025-49132-poc

CVE-2025-49132-poc I made this poc for CVE-2025-49132, as it was interesting to make and it's part of a challenge over at my cyber platform deepreview ! This CVE takes advantage of a file inclusion vulnerability that can be escalated to a Remote Code Execution with the pearcmd.php script. This is...

CVE-2026-87902

CVE-2026-87902 — PoC: неаутентифицированный path traversal в разрешении page-template WordPress Файл эксплойта: exploitlocatetemplaterce.py — Python 3.6+ только stdlib. Пайплайн одной командой: безопасное обнаружение дифференциал LFI, без записи →, если уязвимо, RCE через гаджет pearcmd.php,...

wordpress-cve-2026-87902

CVE-2026-87902 — Conditional LFI Love for Humans - Keep Simple WordPress Core +/tmp/pwn.php' curl -s 'http://10.137.137.49:18092/?pageid=2&pagename=templates%252F%252e%252e%252F%252e%252e%252F%252e%252e%252F%252e%252e%252F%252e%252e%252F%252e%252e%252F%252e%252e%252Ftmp%252Fpwn&=id' Reverse Shell...

Exploit for PHP Remote File Inclusion in Wordpress

⚡ XWPRCE — CVE-2026-87902 Hacker Console WordPress Core g...

Exploit for CVE-2026-87902

CVE-2026-87902 — WordPress Core · LFI → RCE Exploit no aute...

Exploit for CVE-2026-87902

cve-2026-87902 CVE-2026-87902 – WordPress Core LFI to RCE E...

Exploit for CVE-2026-87902

CVE-2026-87902 - WordPress Core Unauthenticated LFI → RCE Vali...

Exploit for CVE-2026-87902

CVE-2026-87902 — Unauthenticated local file inclusion in WordP...

Exploit for CVE-2026-87902

CVE-2026-87902 — PoC Unauthenticated remote code execution...