CVE-2023-36845-POC

CVE-2023-36845 PoC 自动化脚本 该脚本为漏洞 CVE-2023-36845 提供了自动化概念验证（PoC），该漏洞影响 Juniper Networks Junos OS 中 EX 和 SRX 系列设备上的 J-Web 组件。它展示了远程修改 PHP 环境中 PHPRC 变量的可能性，从而导致代码注入和执行。 前提条件 Python 3.x 所需：requests==2.26.0 安装 1. 克隆仓库：git clone https://github.com/cyberh3als/CVE-2023-36845-POC.git 2. cd 你的目录名 3. 安装所需库：p...

CVE-2023-36845

CVE-2023-36845 描述 CVE-2023-36845 是一个显著的 PHP 环境变量操纵漏洞，影响 Juniper SRX 防火墙和 EX 交换机。尽管 Juniper 将该漏洞归类为中危，但在本文中，我们将阐述如何利用这一单一漏洞实现远程、未经过身份验证的代码执行。 搜索 - Shodan title:"Juniper Web Device Manager" title:"Juniper" http.favicon.hash:2141724739 使用方法 🛠 检测 python3 CVE-2023-36845.py -f targets.txt -o output.txt...

Juniper-exploit-CVE-2023-36845

CVE-2023-36845 描述 CVE-2023-36845 是一项值得注意的 PHP 环境变量操纵漏洞，影响 Juniper SRX 防火墙和 EX 交换机。虽然 Juniper 将此漏洞归类为中等严重性，但在本文中，我们将阐述如何利用这一单一漏洞实现远程、未经身份验证的代码执行。 搜索 - Shodan title:"Juniper Web Device Manager" title:"Juniper" http.favicon.hash:2141724739 使用方法 🛠 检测 python3 CVE-2023-36845.py -f targets.txt -o...

CVE-2024-44820

A sensitive information disclosure vulnerability exists in ZZCMS v.2023 and before within the eginfo.php file located at /3/Ebak5.1/upload/. When accessed with the query parameter phome=ShowPHPInfo, the application executes the phpinfo function, which exposes detailed information about the PHP...

CVE-2024-44820

A sensitive information disclosure vulnerability exists in ZZCMS v.2023 and before . The issue is located in the eginfo.php file at the path /3/E_bak5.1/upload/. When an attacker accesses this file using the query parameter phome=ShowPHPInfo , the application executes the phpinfo() function. This...

Mars: phpinfo() exposed on ██████████

The phpinfo page was exposed on the Royal Canin email automation API server, revealing sensitive system configuration details and technical information about the PHP environment...

Exploit for OS Command Injection in Php

CVE-2024-4577-PHP-RCE Project Overview and Mechanism - Th...

Zendframework Remote Address Spoofing Vector in `Zend\Http\PhpEnvironment\RemoteAddress`

The Zend\Http\PhpEnvironment\RemoteAddress class provides features around detecting the internet protocol IP address for an incoming proxied request via the X-Forwarded-For header, taking into account a provided list of trusted proxy server IPs. Prior to 2.2.5, the class was not taking into accou...

OwnCloud graphapi 0.2.x < 0.2.1 / 0.3.x < 0.3.1 Sensitive Informations Disclosure

An issue was discovered in OwnCloud graphapi plugin 0.2.x 0.2.1 and 0.3.x 0.3.1. The graphapi plugin relies on a third-party GetPhpInfo.php library that provides a URL. When this URL is accessed, it reveals the configuration details of the PHP environment phpinfo. This information includes all th...

ownCloud vulnerability can be used to extract admin passwords

ownCloud has warned users about three critical security flaws in its file-sharing software which, if exploited, could reveal sensitive information and modify files. An especially and potentially impactful one is a vulnerability that could lead to disclosure of sensitive credentials and...

Design/Logic Flaw

An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies on a third-party GetPhpInfo.php library that provides a URL. When this URL is accessed, it reveals the configuration details of the PHP environment phpinfo. This information...

CVE-2023-49103

An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies on a third-party GetPhpInfo.php library that provides a URL. When this URL is accessed, it reveals the configuration details of the PHP environment phpinfo. This information...

CVE-2023-49103

An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies on a third-party GetPhpInfo.php library that provides a URL. When this URL is accessed, it reveals the configuration details of the PHP environment phpinfo. This information...

Disclosure of sensitive credentials and configuration in containerized deployments - ownCloud

The “graphapi” app relies on a third-party library that provides a URL. When this URL is accessed, it reveals the configuration details of the PHP environment phpinfo. This information includes all the environment variables of the webserver. In containerized deployments, these environment variabl...

CVE-2023-49103

The CVE-2023-49103 vulnerability affects ownCloud graphapi in versions 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The issue stems from a third‑party GetPhpInfo.php that returns a phpinfo() output, exposing the PHP environment and webserver variables (potentially including admin passwords, mail cr...

VulnCheck KEV: CVE-2023-36845

Juniper Junos OS on EX Series and SRX Series contains a PHP external variable modification vulnerability that allows an unauthenticated, network-based attacker to control an important environment variable. Using a crafted request, which sets the variable PHPRC, an attacker is able to modify the P...

SUSE CVE-2016-5385

PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTPPROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP...

UBUNTU-CVE-2022-24953

The CryptGPG extension before 1.6.7 for PHP does not prevent additional options in GPG calls, which presents a risk for certain environments and GPG versions...

slopShell - The Only Php Webshell You Need

php webshell Since I derped, and forgot to talk about usage. Here goes. For this shell to work, you need 2 things, a victim that allows php file uploadyourself, in an educational environment and a way to send http requests to this webshell. Basic Usage VideoHosted on Youtube: Current VT Detection...

DokuWiki fetch.php SSRF vulnerability

Author: baolongniucow protection Dragon About DokuWiki DokuWiki is an open source wiki engine program, running on PHP environment. DokuWiki program small but powerful, flexible, suitable for small teams and personal web site Knowledge Base management. Vulnerability description DokuWiki latest...