snuffleupagus

Snuffleupagus Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest! Key Features • Download • Examples • Documentation • License • Thanks Snuffleupagus is a PHP 7+ and 8+ module designed to drastically raise the cost of attacks against websites, by killing entire b...

exploit_cve-2021-29447

exploitcve-2021-29447 لأغراض تعليمية فقط. من المفترض أن تكون هذه الأداة أداة مريحة حقاً للحصول على أي ملف من خادم يعمل بنظام WordPress 5.6.2 و php8. انظر https://wpscan.com/vulnerability/cbbe6c17-b24e-4be4-8937-c78472a138b5 كل ما تحتاجه هو وصول أساسي إلى wp-admin والقدرة على رفع ملف وسائط. سيقوم...

TimeAfterFree

TimeAfterFree PoC d'évasion de sandbox PHP 8 démontrant un contournement de disablefunctions sur les systèmes de type Unix. Cette exploitation tire parti d'un bug use-after-free pour contourner disablefunctions et exécuter des commandes système. Les techniques d'exploitation utilisées pour fuiter...

snuffleupagus

Snuffleupagus وحدة أمان لـ PHP7 و PHP8 - قتل فئات الثغرات وتصحيح الباقي افتراضياً! الميزات الرئيسية • التحميل • أمثلة • التوثيق • الترخيص • الشكر Snuffleupagus هي وحدة PHP 7+ و 8+ مصممة لرفع تكلفة الهجمات على مواقع الويب بشكل كبير، من خلال القضاء على فئات كاملة من الثغرات. كما توفر نظاماً قوياً...

Public_Exploit-1--Wordpress-CVE-2021-29447

PublicExploit-1--Wordpress-CVE-2021-29447 CVE-2021-29447 est une vulnérabilité XXE XML External Entity authentifiée dans WordPress La vulnérabilité existe dans la bibliothèque de médias de WordPress lorsque WordPress fonctionne sur PHP 8 et que l'utilisateur dispose de la permission de téléverser...

CVE-2021-29447

CVE-2021-29447 POC pour exploiter l'injection XXE authentifiée dans WordPress 5.6-5.7 PHP 8+. Plus d'informations sur cette CVE ici Exemple Exemple d'utilisation contre la machine MetaTwo de HackTheBox, qui héberge un site WordPress avec une médiathèque vulnérable à l'injection XXE. python lfi.py...

CVE-2021-29447-PoC

CVE-2021-29447 إثبات المفهوم ╔═╗╦ ╦╔═╗ ║ ╚╗╔╝║╣────2021-29447 ╚═╝ ╚╝ ╚═╝ Written By Isa Ebrahim - 0xRar on January, 2023 ═══════════════════════════════════════════════════════════════════════════ Title: Wordpress XML parsing issue in the Media Library leading to XXE Affected versions: Wordpress...

CVE-2021-29447

CVE-2021-29447 إثبات المفهوم PoC يحتوي هذا المستودع على إثبات مفهوم PoC لاستغلال الثغرة CVE-2021-29447 ، والتي تؤثر على WordPress 5.6 و5.7 باستخدام PHP 8. يوضح الاستغلال كيف يمكن للمهاجم، الذي يمتلك القدرة على رفع الملفات، استغلال ثغرة في تحليل XML في مكتبة الوسائط Media Library، مما يؤدي إلى هجو...

CVE-2026-44642

Piwigo is a full featured open source photo gallery application for the web. Prior to 16.4.0, checkupgradeaccessrights in admin/include/functionsupgrade.php conditionally escapes the submitted username only when the removed getmagicquotesgpc function exists, so PHP 8 and later concatenate an...

CVE-2026-44642

Prior to version 16.4.0 , the Piwigo photo gallery application is vulnerable to an authentication bypass due to an SQL injection flaw in the check_upgrade_access_rights() function located in admin/include/functions_upgrade.php. On PHP 8 and later versions, the application fails to properly escape...

CVE-2026-44642 Piwigo: SQL injection in upgrade authentication allows unauthenticated upgrade authorization bypass (PHP 8+)

Piwigo is a full featured open source photo gallery application for the web. Prior to 16.4.0, checkupgradeaccessrights in admin/include/functionsupgrade.php conditionally escapes the submitted username only when the removed getmagicquotesgpc function exists, so PHP 8 and later concatenate an...

CVE-2026-44642: Improper Neutralization of Special Elements used in an SQL Command

Piwigo is a full featured open source photo gallery application for the web. Prior to 16.4.0, checkupgradeaccessrights in admin/include/functionsupgrade.php conditionally escapes the submitted username only when the removed getmagicquotesgpc function exists, so PHP 8 and later concatenate an...

CVE-2026-53933: Observable Discrepancy

Maravel, a PHP framework oriented towards dependency injection, prior to version 10.73.1 has a side-channel information disclosure issue. When a route was compiled with dynamic placeholders e.g., /api/v1/users/id, the raw string placeholder key was mistakenly registered into the flat static route...

CVE-2026-35048: Improper Input Validation

The Piwigo installer in versions 16.3.0 and earlier accepts POST parameters for database configuration and writes them directly into a PHP configuration file without proper sanitization. On PHP 8+, the addslashes protection is bypassed because it checks for getmagicquotesgpc, a function removed i...

CVE-2026-5957: Improper Limitation of a Pathname to a Restricted Directory

The EmailKit plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to and including 1.6.5. This is due to a flawed path traversal validation in the createtemplate method of the CheckForm class, where realpath is called on the allowed base directory...

EUVD-2023-51635

Malicious code in bioql PyPI...

CVE-2024-4577 Argument Injection in PHP-CGI

In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command line given to Win32 API functions. PHP CGI module may...

SUSE SLES15: apache2-mod_php8 / php8 / php8-bcmath / php8-bz2 / php8-calendar / etc (SUSE-SU-2024:1446-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1446-1 advisory. - CVE-2024-2756: Fixed bypass of security fix applied for CVE-2022-31629 that lead PHP to consider not secure cookies...

CVE-2024-28859

Symfony1 is a community fork of symfony 1.4 with DIC, form enhancements, latest Swiftmailer, better performance, composer compatible and PHP 8 support. Symfony 1 has a gadget chain due to vulnerable Swift Mailer dependency that would enable an attacker to get remote code execution if a developer...

CVE-2024-28859 Gadget chain in Symfony 1 due to vulnerable Swift Mailer dependency

Symfony1 is a community fork of symfony 1.4 with DIC, form enhancements, latest Swiftmailer, better performance, composer compatible and PHP 8 support. Symfony 1 has a gadget chain due to vulnerable Swift Mailer dependency that would enable an attacker to get remote code execution if a developer...