Lucene search
+L

126 matches found

Metasploit
Metasploit
added 2025/06/09 6:51 p.m.512 views

OS Command Exec, Unix Command Shell, Reverse TCP SSL (via php)

Execute an OS command from PHP. Creates an interactive shell via php, uses SSL Module Options msf use payload/php/unix/cmd/reversephpssl msf payloadreversephpssl show actions ...actions... msf payloadreversephpssl set ACTION msf payloadreversephpssl show options ...show and set options... msf...

5.8AI score
SaveExploits0
Metasploit
Metasploit
added 2025/06/09 6:51 p.m.463 views

OS Command Exec, Unix Command Shell, Reverse TCP (via jjs)

Execute an OS command from PHP. Connect back and create a command shell via jjs Module Options msf use payload/php/unix/cmd/reversejjs msf payloadreversejjs show actions ...actions... msf payloadreversejjs set ACTION msf payloadreversejjs show options ...show and set options... msf...

5.8AI score
SaveExploits0
Metasploit
Metasploit
added 2025/05/29 6:52 p.m.590 views

PHP Exec, PHP Meterpreter, Bind TCP Stager

Execute a PHP payload as an OS command from a Posix-compatible shell. Run a meterpreter server in PHP. Listen for a connection Module Options msf use payload/cmd/unix/php/meterpreter/bindtcp msf payloadbindtcp show actions ...actions... msf payloadbindtcp set ACTION msf payloadbindtcp show option...

5.8AI score
SaveExploits0
Metasploit
Metasploit
added 2025/05/29 6:52 p.m.527 views

PHP Exec, PHP Command Shell, Reverse TCP (via PHP)

Execute a PHP payload as an OS command from a Posix-compatible shell. Reverse PHP connect back shell with checks for disabled functions Module Options msf use payload/cmd/unix/php/reversephp msf payloadreversephp show actions ...actions... msf payloadreversephp set ACTION msf payloadreversephp sh...

5.8AI score
SaveExploits0
Metasploit
Metasploit
added 2025/05/14 6:51 p.m.585 views

WP User Registration and Membership Unauthenticated Privilege Escalation (CVE-2025-2563)

Exploits CVE-2025-2563 in the WordPress User Registration & Membership plugin. 1 Registers a free-membership user via AJAX. 2 Elevates that user to administrator via the membership AJAX action. 3 Logs in, uploads & executes a PHP payload. Module Options msf use...

8.1CVSS8.3AI score0.46384EPSS
SaveExploits7
Packet Storm
Packet Storm
added 2025/05/14 12:0 a.m.125 views

📄 WordPress SureTriggers 1.0.78 Authentication Bypass / Remote Code Execution

This Metasploit module exploits an authorization bypass in the WordPress SureTriggers plugin versions 1.0.78 and below to create an administrator account and then uploads and executes a PHP payload. This module requires Metasploit: https://metasploit.com/download Current source:...

8.1CVSS8.2AI score0.7568EPSS
SaveExploits8
GithubExploit
GithubExploit
added 2025/04/19 7:56 p.m.474 views

Exploit for CVE-2025-39436

🚨 WordPress Plugin Exploit: CVE-2025-39436 📝 Description A...

9.1CVSS9.5AI score0.00689EPSS
SaveExploits1
GithubExploit
GithubExploit
added 2025/03/17 4:26 p.m.339 views

Exploit for Improper Input Validation in Cacti

CVE-2024-25641 Exploit for Cacti 1.2.26 Exploiting CVE-2024-2...

9.1CVSS9.6AI score0.86303EPSS
SaveExploits17
Packet Storm
Packet Storm
added 2025/03/11 12:0 a.m.229 views

WordPress XMLRPC 3.9.2 Denial of Service

WordPress version 3.9.2 XMLRPC proof of concept denial of service exploit that leverages a vulnerability from 2014 and was originally discovered by Nir Goldshlager...

5CVSS6.8AI score0.24385EPSS
SaveExploits3
Packet Storm
Packet Storm
added 2025/02/28 12:0 a.m.410 views

BeyondTrust 24.3.1 Code Execution

BeyondTrust version 24.3.1 suffers from a code execution vulnerability. ============================================================================================================================================= | Title : BeyondTrust v24.3.1 PHP Code Injection Vulnerability | | Author : indoush...

7.9AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/02/04 11:14 p.m.10 views

CVE-2024-39165

QR/demoapp/qrimage.php in Asial JpGraph Professional through 4.2.6-pro allows remote attackers to execute arbitrary code via a PHP payload in the data parameter in conjunction with a .php file name in the filename parameter. This occurs because an unnecessary QR/demoapp folder.is shipped with the...

9.8CVSS9.7AI score0.00806EPSS
SaveExploits0
Packet Storm
Packet Storm
added 2024/10/11 12:0 a.m.330 views

Chamilo 1.11.18 Code Injection

============================================================================================================================================= | Title : Chamilo 1.11.18 Code Injection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0.2 64 bits ...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/10/03 12:0 a.m.240 views

AVideo 12.4 Code Injection

============================================================================================================================================= | Title : AVideo 12.4 php code injection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0.0 64 bits ...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/10/01 12:0 a.m.227 views

Student Attendance Management System 1.0 Code Injection

============================================================================================================================================= | Title : Student Attendance Management System 1.0 code injection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla...

7.4AI score
SaveExploits0
Rapid7 Blog
Rapid7 Blog
added 2024/09/06 5:56 p.m.7 views

Metasploit Weekly Wrap-Up 09/06/2024

Honey, I shrunk the PHP payloads This release contains more PHP payload improvements from Julien Voisin. Last week we landed a PR from Julien that added a datastore option to the php/base64 encoder that when enabled, will use zlib to compress the payload which significantly reduced the size,...

7.4AI score
SaveExploits0
GithubExploit
GithubExploit
added 2024/08/26 1:34 p.m.590 views

Exploit for Improper Input Validation in Cacti

This repository is a PoC exploit for CVE-2024-25641, a vulnerabi...

9.1CVSS10AI score0.86303EPSS
SaveExploits17
Packet Storm
Packet Storm
added 2024/08/20 12:0 a.m.319 views

Simple Machines Forum 2.1.4 Code Injection

Exploit Title: Authenticated Code Injection - smfv2.1.4 Date: 8/2024 Exploit Author: Andrey Stoykov Version: 2.1.4 Tested on: Ubuntu 22.04 Blog: https://msecureltd.blogspot.com/2024/06/friday-fun-pentest-series-7-smfv214.html Code Injection Authenticated: Steps to Reproduce: 1. Login as admin 2...

7.4AI score
SaveExploits0
NVD
NVD
added 2024/07/04 1:15 p.m.25 views

CVE-2024-39165

QR/demoapp/qrimage.php in Asial JpGraph Professional through 4.2.6-pro allows remote attackers to execute arbitrary code via a PHP payload in the data parameter in conjunction with a .php file name in the filename parameter. This occurs because an unnecessary QR/demoapp folder.is shipped with the...

9.8CVSS0.00806EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/07/04 12:0 a.m.12 views

CVE-2024-39165

QR/demoapp/qrimage.php in Asial JpGraph Professional through 4.2.6-pro allows remote attackers to execute arbitrary code via a PHP payload in the data parameter in conjunction with a .php file name in the filename parameter. This occurs because an unnecessary QR/demoapp folder.is shipped with the...

9.8CVSS8AI score0.00806EPSS
SaveExploits0References1
Rapid7 Blog
Rapid7 Blog
added 2024/01/19 9:36 p.m.50 views

Metasploit Weekly Wrap-Up 01/19/24

Unicode your way to a php payload and three modules to add to your playbook for Ansible Our own jheysel-r7 added an exploit leveraging the fascinating tool of php filter chaining to prepend a payload using encoding conversion characters and h00die et. al. have come through and added 3 new Ansible...

7.5CVSS7AI score0.97846EPSS
SaveExploits14
Rows per page
Query Builder