CVE-2026-54710

FreePBX is an open source IP PBX. Prior to versions 16.0.40 and 17.0.7, a critical remote code execution RCE vulnerability exists in the superfecta module due to unsafe inclusion of arbitrary PHP files, allowing authenticated attackers to execute arbitrary PHP code on the server with the privileg...

RCE_CVE-2024-7954-

RCECVE-2024-7954- SPIP 4.30-alpha2、4.2.13、4.1.16 より前のバージョンで使用される porteplume プラグインは、任意コード実行の脆弱性の影響を受けます。リモートの認証されていない攻撃者は、特別に細工された HTTP リクエストを送信することで、SPIP ユーザーとして任意の PHP コードを実行できます。CRITICAL エクスプロイト: POST /index.php?action=porteplumeprevisu HTTP/1.1 Host: Hostname Content-Type:...

CVE-2026-54710 FreePBX: Authenticated Superfecta Arbitrary PHP Code Execution (RCE via Unsafe File Inclusion)

FreePBX is an open source IP PBX. Prior to versions 16.0.40 and 17.0.7, a critical remote code execution RCE vulnerability exists in the superfecta module due to unsafe inclusion of arbitrary PHP files, allowing authenticated attackers to execute arbitrary PHP code on the server with the privileg...

CVE-2021-44967

CVE-2021-44967 Exploit Title: LimeSurvey 5.2.4 - Authenticated Remote Code Execution RCE Google Dork: inurl:limesurvey/index.php/admin/authentication/sa/login Date: 05/12/2021 Discovered by: Y1LD1R1M Exploit Author: D3Ext Vendor Homepage: https://www.limesurvey.org/ Software Link:...

CVE-2024-25641

CVE-2024-25641 Cacti 1.2.26 用 RCE このリポジトリは、Cacti 1.2.26 における CVE-2024-25641 の悪用プロセスを自動化します。 ユーザーが認証されている場合、「Package Import」機能を介して悪用可能な任意のファイル書き込みの脆弱性により、「Import Templates」権限を持つ認証ユーザーが Web サーバー上で任意の PHP コードを実行 RCE できるようになります。 オリジナルレポート:...

CVE-2018-16370

CVE-2018-16370 En PESCMS Team 2.2.1, los atacantes pueden subir y ejecutar código PHP arbitrario a través de /Public/?g=Team&m=Setting&a=upgrade colocando un archivo .php en un archivo ZIP. Más detalles en https://github.com/lazyphp/PESCMS-TEAM/issues/2...

CVE-2025-49132_HTB_SEASON10

CVE-2025-49132 - Pterodactyl Panel RCE エクスプロイト HTB Season 10 - Pterodactyl マシン Writeup 概要 ターゲット: Pterodactyl HTB マシン 中程度の難易度 CVE: CVE-2025-49132 重要度: Critical CVSS 9.8 攻撃タイプ: 認証なしのリモートコード実行 影響を受けるバージョン: Pterodactyl Panel リモートコード実行 方法: 提供された exploit.sh を使用 chmod +x exploit.sh Get user flag...

CVE-2017-9841-EXPLOIT

CVE-2017-9841 - PHPUnit Remote Code ExecutionRCE This vulnerability affects PHPUnit versions before 4.8.28 and all 5.x versions before 5.6.3. It allows attackers to execute arbitrary PHP code on servers where PHPUnit is exposed. The issue exists in the eval-stdin.php file located in PHPUnit's...

EUVD-2026-86595

The WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.8 via the 'page' parameter parameter. This makes it possible for authenticated attackers, with...

CVE-2026-13456 WP Maps <= 4.9.8 - Authenticated (Subscriber+) Local File Inclusion via 'page' Parameter

The WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory & Filters plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.9.8 via the 'page' parameter parameter. This makes it possible for authenticated attackers, with...

CVE-2026-97730

In Netgate pfSense Plus before 26.07 and pfSense CE before 2.9.0, a Local File Inclusion LFI vulnerability in the Dashboard index.php widget sequence data handling allows an authenticated attacker to execute arbitrary PHP code. To exploit this, an attacker with privileges to modify Dashboard...

CVE-2026-97730

A Local File Inclusion (LFI) vulnerability exists in Netgate pfSense Plus before version 26.07 and pfSense CE before version 2.9.0. The flaw resides in the Dashboard (index.php) widget sequence data handling. An authenticated attacker with permissions to modify Dashboard settings and write files ...

CVE-2026-97730

In Netgate pfSense Plus before 26.07 and pfSense CE before 2.9.0, a Local File Inclusion LFI vulnerability in the Dashboard index.php widget sequence data handling allows an authenticated attacker to execute arbitrary PHP code. To exploit this, an attacker with privileges to modify Dashboard...

Invision Community <=5.0.6 Unauthenticated RCE via Template Injection

Invision Community 5.0.0 before 5.0.7 allows remote code execution via crafted template strings to themeeditor.php. The issue lies within the themeeditor controller /applications/core/modules/front/system/themeeditor.php, where a protected method named customCss can be invoked by unauthenticated...

CVE-2026-12227

The Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 45.16.0 via the vcv-template parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the...

CVE-2026-12227

The Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclusion (LFI) in all versions up to and including 45.16.0 . The flaw exists within the vcv-template parameter, which allows unauthenticated attackers to include and execute arbitrary files on the server. This c...

PT-2026-97774

Name of the Vulnerable Software and Affected Versions Visual Composer Website Builder versions prior to 45.16.1 Description The plugin is subject to Local File Inclusion, a condition where an application includes files from the local file system without proper validation. Unauthenticated attacker...

CVE-2026-88419

An unrestricted upload of files with a dangerous type in the thumbnail-upload endpoint /index.php?m=member&f=article&v=thumbUpload of WuzhiCMS 5.0.0 allows an authenticated low-privileged member to upload a crafted .php file and execute arbitrary PHP code on the server, because the stored file...

Exploit for CVE-2026-87902

CVE-2026-87902 — WordPress Core: unauthenticated path traversa...

CVE-2026-9231

The WP Travel Engine – Tour Booking Plugin – Tour Operator Software for WordPress is vulnerable to Local File Inclusion (LFI) in all versions up to and including 6.8.0 . The root cause lies in the wte_get_template function, which allows authenticated attackers with contributor-level access or hig...