LFISuite

LFI Suite Qu'est-ce que LFI Suite ? LFI Suite est un outil totalement automatique capable de scanner et d'exploiter les vulnérabilités d'inclusion de fichiers locaux en utilisant de nombreuses méthodes d'attaque, listées dans la section Features. Fonctionnalités Fonctionne avec Windows, Linux et ...

CVE-2014-2383-LFI-to-RCE-Escalation

CVE-2014-2383 эскалация LFI/RFI до RCE Тестовая среда: dompdf 0.6.0 - php 7.3.33 - apache 2.4.25 В ходе оценки безопасности было обнаружено наличие CVE-2014-2383. Этот документ является доказательством концепции и не содержит деталей первоначального обнаружения для защиты конфиденциальности...

October CMS: Incomplete Scheme Validation in Image Resizer

The image resizer classified external sources by testing whether the source string began with the substring http, and the string-source branch in ResizeImageItem::fromObject accepted any value containing :// as a URL. As a result, non-https PHP stream wrappers such as phar://, file:// and ftp://...

GHSA-2XMM-M4WV-3FJH October CMS: Incomplete Scheme Validation in Image Resizer

The image resizer classified external sources by testing whether the source string began with the substring http, and the string-source branch in ResizeImageItem::fromObject accepted any value containing :// as a URL. As a result, non-https PHP stream wrappers such as phar://, file:// and ftp://...

CVE-2026-62996

Smarty is a template engine for PHP, facilitating the separation of presentation HTML/CSS from application logic. From 5.0.0 until 5.8.4, Smarty's stream: resource-name handling does not adequately restrict which PHP stream wrappers and filter chains can be referenced from a template, allowing a...