exploit_cve-2023-26326_using_cve-2024-2961

Exploit BuddyForms CVE-2023-26326 using Iconv CVE-2024-2961 This work was done by me, Omar Elshopky, and Nour El Dien Bassiouny. This repository contains an exploit for the WordPress BuddyForms Plugin CVE-2023-26326, initially reported in the advisory by Joshua Martinelle. The exploit leverages a...

CVE-2021-40845

CVE-2021-40845 I. VULNERABILITY AlphaWeb XE - Authenticated Insecure File Upload leading to RCE II. CVE REFERENCE CVE-2021-40845 III. VENDOR https://www.zenitel.com/ IV. DESCRIPTION The web part of Zenitel AlphaCom XE Audio Server through 11.2.3.10, called AlphaWeb XE, does not restrict file uplo...

wpBullet

wpBullet A static code analysis for WordPress Plugins/Themes and PHP Installation...

wordpress_cropimage

WordPress Crop-Image CVE-2019-8943 A python3 script for WordPress Crop-Image CVE-2019-8943 Authenticated Remote Code Execution RCE. It drops a malicious PHP backdoor. Getting Started Executing program RCE root@kitploit: python3 wprce.py -t http://wordpress.rce/ -u admin -p password -m twentytwent...

CVE-2024-9441

Nortek Linear eMerge E3 Pre-Auth RCE PoC CVE-2024-9441 Description: This repository contains a Proof of Concept PoC exploit for Nortek Linear eMerge E3 CVE-2024-9441, which is vulnerable to Remote Code Execution RCE in a pre-authentication state. The vulnerability is triggered via a flaw in the...

Grawler

Grawler - v1.0 This project isnot maintained anymore. Grawler is the best tool ever, made for automating google dorks it's a tool written in PHP which comes with a web interface that automates the task of using google dorks, scrapes the results, and stores them in a file, version 1.0 is the more...

snuffleupagus

Snuffleupagus Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest! Key Features • Download • Examples • Documentation • License • Thanks Snuffleupagus is a PHP 7+ and 8+ module designed to drastically raise the cost of attacks against websites, by killing entire b...

snuffleupagus

Snuffleupagus Módulo de seguridad para php7 y php8: ¡eliminando clases de bugs y aplicando parches virtuales al resto!...

CVE-2026-100874

A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This affects an unknown function of the file addnewstudent.php. This manipulation causes sql injection. The attack may be initiated remotely. The exploit has been published and may be...

EUVD-2026-88008

A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This affects an unknown function of the file addnewstudent.php. This manipulation causes sql injection. The attack may be initiated remotely. The exploit has been published and may be...

Cloudflare-Bypass

Cloudflare-Bypass Cloudflare Bypass tools | PentestCore Is a tool for bypassing Cloudflare that you can use to get the master IP of site server. How to use Linux : Enter the below command in the terminal : git clone https://github.com/pentestcore/Cloudflare-Bypass.git cd Cloudflare-Bypass Install...

ExpStruts

ExpStruts ExpStruts is a php-based mass exploiter for CVE-2017-5638 .. Screenshots ⚠️ Requirements Python3 for MakMan's Google Scraper Abk Khan @asystolik...

CVE-2024-2961

CVE-2024-2961 CVE-2024–2961 Security Issue Mitigation Script Description This repository contains a Bash script to check and mitigate the buffer overflow vulnerability identified in GNU libc glibc versions 2.39 and older, known as CVE-2024-2961. This vulnerability affects PHP when the iconv...

p0wny-shell

p0wny@shell: -- Shell PHP de un solo archivo p0wny@shell: es un shell PHP muy básico de un solo archivo. Puede usarse para ejecutar rápidamente comandos en un servidor al hacer pentesting a una aplicación PHP. Úsalo con precaución: este script representa un riesgo de seguridad para el servidor...

CVE-2026-100873

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. The impacted element is an unknown function. The manipulation results in cross-site request forgery. The attack can be launched remotely. The exploit is now public and may be...

EUVD-2026-88006

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. The impacted element is an unknown function. The manipulation results in cross-site request forgery. The attack can be launched remotely. The exploit is now public and may be...

ShellUpload

ShellUpload kurosava.php kurosava.php es un cargador malicioso de shell web PHP...

CVE-2024-4577-checker

CVE-2024-4577 Vulnerability Checker The CVE-2024-4577 Vulnerability Checker is a Bash script designed to scan multiple domains for the CVE-2024-4577 vulnerability in PHP-CGI. This tool allows security researchers and system administrators to quickly assess whether their systems or a list of domai...

carina

About Carina Carina is a web application used to store webshell, Virtual Private Server VPS and cPanel data. Carina is made so that we don't need to store webshell, VPS or cPanel data in "strange places". Install Carina 1. $ git clone https://github.com/c0delatte/carina && cd carina 2. Run compos...

php_filter_chain_oracle_poc

phpfilterchainoraclepoc Overview The Synacktiv team published an in-depth research article, PHP Filter Chains: File Read from Error-Based Oracle , initially disclosed at DownUnder CTF 2022. This research was based on a challenge by @hashkitten, where players were tasked with leaking the /flag fil...