snuffleupagus

Snuffleupagus Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest! Key Features • Download • Examples • Documentation • License • Thanks Snuffleupagus is a PHP 7+ and 8+ module designed to drastically raise the cost of attacks against websites, by killing entire b...

exploit_cve-2021-29447

exploitcve-2021-29447 À des fins éducatives uniquement. Cet exploit est censé être un outil vraiment pratique pour obtenir n'importe quel fichier d'un serveur exécutant WordPress 5.6.2 et php8. voir https://wpscan.com/vulnerability/cbbe6c17-b24e-4be4-8937-c78472a138b5 Tout ce dont vous avez besoi...

TimeAfterFree

TimeAfterFree PoC для побега из песочницы PHP 8, демонстрирующий обход disablefunctions на Unix-подобных системах. Эта эксплойтация использует уязвимость use-after-free для обхода disablefunctions и выполнения системных команд. Методы эксплуатации для утечки указателей кучи и получения примитивов...

snuffleupagus

Snuffleupagus Module de sécurité pour php7 et php8 - Éliminer les classes de bugs et patcher virtuellement le reste ! Fonctionnalités clés • Téléchargement • Exemples • Documentation • Licence • Remerciements Snuffleupagus est un module pour PHP 7+ et 8+ conçu pour augmenter considérablement le...

Public_Exploit-1--Wordpress-CVE-2021-29447

PublicExploit-1--Wordpress-CVE-2021-29447 CVE-2021-29447은 WordPress의 인증된 XML 외부 엔티티XXE 취약점입니다 이 취약점은 WordPress가 PHP 8에서 실행되고 사용자가 미디어 파일을 업로드할 권한이 있을 때 WordPress 미디어 라이브러리에 존재합니다. 특수하게 조작된 .wav 파일은 WordPress가 악성 XML을 처리하고 외부 엔티티를 확인하도록 유발할 수 있습니다. 이는 다음으로 이어질 수 있습니다: ● 임의 파일 노출 — 대상 서버에서 파일을 읽습니다...

CVE-2021-29447

CVE-2021-29447 POC pour exploiter l'injection XXE authentifiée dans WordPress 5.6-5.7 PHP 8+. Plus d'informations sur cette CVE ici Exemple Exemple d'utilisation contre la machine MetaTwo de HackTheBox, qui héberge un site WordPress avec une médiathèque vulnérable à l'injection XXE. python lfi.py...

CVE-2021-29447-PoC

CVE-2021-29447 Preuve de concept ╔═╗╦ ╦╔═╗ ║ ╚╗╔╝║╣────2021-29447 ╚═╝ ╚╝ ╚═╝ Écrit par Isa Ebrahim - 0xRar en janvier 2023 ═══════════════════════════════════════════════════════════════════════════ Titre : Problème d'analyse XML dans la bibliothèque multimédia de Wordpress menant à XXE Versions...

CVE-2021-29447

CVE-2021-29447 PoC Ce dépôt contient un exploit de preuve de concept PoC pour la vulnérabilité CVE-2021-29447 , affectant WordPress 5.6 et 5.7 fonctionnant sous PHP 8. L'exploit démontre comment un attaquant, capable de téléverser des fichiers, peut exploiter une vulnérabilité d'analyse XML dans ...

CVE-2026-44642

Piwigo is a full featured open source photo gallery application for the web. Prior to 16.4.0, checkupgradeaccessrights in admin/include/functionsupgrade.php conditionally escapes the submitted username only when the removed getmagicquotesgpc function exists, so PHP 8 and later concatenate an...

CVE-2026-44642

Prior to version 16.4.0 , the Piwigo photo gallery application is vulnerable to an authentication bypass due to an SQL injection flaw in the check_upgrade_access_rights() function located in admin/include/functions_upgrade.php. On PHP 8 and later versions, the application fails to properly escape...

CVE-2026-44642 Piwigo: SQL injection in upgrade authentication allows unauthenticated upgrade authorization bypass (PHP 8+)

Piwigo is a full featured open source photo gallery application for the web. Prior to 16.4.0, checkupgradeaccessrights in admin/include/functionsupgrade.php conditionally escapes the submitted username only when the removed getmagicquotesgpc function exists, so PHP 8 and later concatenate an...

CVE-2026-44642: Improper Neutralization of Special Elements used in an SQL Command

Piwigo is a full featured open source photo gallery application for the web. Prior to 16.4.0, checkupgradeaccessrights in admin/include/functionsupgrade.php conditionally escapes the submitted username only when the removed getmagicquotesgpc function exists, so PHP 8 and later concatenate an...

CVE-2026-53933: Observable Discrepancy

Maravel, a PHP framework oriented towards dependency injection, prior to version 10.73.1 has a side-channel information disclosure issue. When a route was compiled with dynamic placeholders e.g., /api/v1/users/id, the raw string placeholder key was mistakenly registered into the flat static route...

CVE-2026-35048: Improper Input Validation

The Piwigo installer in versions 16.3.0 and earlier accepts POST parameters for database configuration and writes them directly into a PHP configuration file without proper sanitization. On PHP 8+, the addslashes protection is bypassed because it checks for getmagicquotesgpc, a function removed i...

CVE-2026-5957: Improper Limitation of a Pathname to a Restricted Directory

The EmailKit plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to and including 1.6.5. This is due to a flawed path traversal validation in the createtemplate method of the CheckForm class, where realpath is called on the allowed base directory...

EUVD-2023-51635

Malicious code in bioql PyPI...

CVE-2024-4577 Argument Injection in PHP-CGI

In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command line given to Win32 API functions. PHP CGI module may...

SUSE SLES15: apache2-mod_php8 / php8 / php8-bcmath / php8-bz2 / php8-calendar / etc (SUSE-SU-2024:1446-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1446-1 advisory. - CVE-2024-2756: Fixed bypass of security fix applied for CVE-2022-31629 that lead PHP to consider not secure cookies...

CVE-2024-28859

Symfony1 is a community fork of symfony 1.4 with DIC, form enhancements, latest Swiftmailer, better performance, composer compatible and PHP 8 support. Symfony 1 has a gadget chain due to vulnerable Swift Mailer dependency that would enable an attacker to get remote code execution if a developer...

CVE-2024-28859 Gadget chain in Symfony 1 due to vulnerable Swift Mailer dependency

Symfony1 is a community fork of symfony 1.4 with DIC, form enhancements, latest Swiftmailer, better performance, composer compatible and PHP 8 support. Symfony 1 has a gadget chain due to vulnerable Swift Mailer dependency that would enable an attacker to get remote code execution if a developer...