CVE-2026-101012

A weakness has been identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file makeresult.php. This manipulation of the argument makeid causes sql injection. The attack can be initiated remotely. The exploit h...

CVE-2026-101013

A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected is an unknown function of the file updateresultdetails.php. Such manipulation of the argument editid leads to sql injection. The attack can be launched...

CVE-2021-43503

Advertencia La vulnerabilidad ha sido revocada Override Esto trata sobre CVE-2021-43503, no pude replicar esta vulnerabilidad a través de exp Requisitos PHP 7.1. Composer registrar=$b; namespace Illuminate\Queue\Capsule class Manager protected $manager; public function construct$c...

CVE-2019-11447_reverse_shell_upload

CVE-2019-11447 CuteNews 2.1.2 Subida de shell inversa Una versión ligeramente modificada del Mt-Code POC que genera una shell inversa completa en lugar de una web shell. Este exploit utiliza el famoso PentestMonkey PHP Reverse Shell. Instalación pip install -r requirements.txt Ejemplo de uso: Cre...

CVE-2026-101013 mathurvishal CloudClassroom-PHP-Project updateresultdetails.php sql injection

A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected is an unknown function of the file updateresultdetails.php. Such manipulation of the argument editid leads to sql injection. The attack can be launched...

CVE-2026-101013

A security vulnerability exists in mathurvishal CloudClassroom-PHP-Project (up to commit 5dadec098bfbbf3300d60c3494db3fb95b66e7be ) involving a SQL injection flaw. The vulnerability is located within an unknown function in the updateresultdetails.php file, where manipulation of the editid argumen...

EUVD-2026-88143

A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected is an unknown function of the file updateresultdetails.php. Such manipulation of the argument editid leads to sql injection. The attack can be launched...

webvulscan

WebVulScan Sinopsis WebVulScan es un escáner de vulnerabilidades de aplicaciones web. Es una aplicación web escrita en PHP que se puede utilizar para probar aplicaciones web remotas o locales en busca de vulnerabilidades de seguridad. Mientras se ejecuta un escaneo, los detalles del escaneo se...

webvulscan

WebVulScan Synopsis WebVulScan is a web application vulnerability scanner. It is a web application itself written in PHP and can be used to test remote, or local, web applications for security vulnerabilities. As a scan is running, details of the scan are dynamically updated to the user. These...

EUVD-2026-88132

A weakness has been identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file makeresult.php. This manipulation of the argument makeid causes sql injection. The attack can be initiated remotely. The exploit h...

CVE-2026-101012

A SQL injection vulnerability exists in the mathurvishal CloudClassroom-PHP-Project (up to commit 5dadec098bfbbf3300d60c3494db3fb95b66e7be). The flaw is located within an unknown function in the makeresult.php file, where manipulation of the makeid argument allows for remote execution. Public exp...

CVE-2014-2383-LFI-to-RCE-Escalation

CVE-2014-2383 Escalada de LFI/RFI a RCE Entorno de prueba: dompdf 0.6.0 - php 7.3.33 - apache 2.4.25 Durante una evaluación de seguridad se descubrió la presencia de CVE-2014-2383. Este documento es una prueba de concepto y no incluye los detalles del descubrimiento inicial para proteger la...

rips-scanner

RIPS Un analizador estático de código fuente para vulnerabilidades en scripts PHP Requisitos servidor web: Apache o Nginx recomendado PHP: última versión recomendada navegador: Firefox recomendado Instalación 1. Descargue la última versión 2. Extraiga los archivos a la raíz de documentos de su...

webshell

webshell | English | Türkiye Este es un proyecto de recopilación de webshells. Quien da una rosa se queda con el aroma en la mano; si descargan este proyecto, por favor, envíen también shells. Este proyecto incluye varios scripts de uso común. como: asp, aspx, php, jsp, pl, py Si envían webshells...

CVE-2021-30461

Productos afectados VoIPmonitor 24.60 Cómo ejecutar RCE python3 CVE-2021-30461.py -t ipaddress Shell en el navegador: http://x.x.x.x/namrlblgel.php?a=whoami Referencia https://ssd-disclosure.com/ssd-advisory-voipmonitor-unauth-rce/...

suhosin

Suhosin Suhosin pronunciado 'su-ho-shin' es un sistema de protección avanzado para instalaciones de PHP. Fue diseñado para proteger servidores y usuarios de fallos conocidos y desconocidos en las aplicaciones PHP y en el núcleo de PHP...

bucky

Project is on temporary hold. Bucky Bucky is an automatic tool designed to discover S3 bucket misconfiguration, Bucky consists up of two modules Bucky firefox addon and Bucky backend engine. Bucky addon reads the source code of the webpages and uses Regular ExpressionRegex to match the S3 bucket...

CVE-2024-4577

CVE-2024-4577 Disclaimer This tool is intended only for personal security research and learning. Any direct or indirect consequences or losses caused by the dissemination or use of this tool are the sole responsibility of the user; the tool author assumes no responsibility. PHP NAME: PHP-CGI -...

CVE-2024-48762

CVE-2024-48762 Description Command injection vulnerability in /usr/www/application/models/settingscamera.php in FLIR AX8 up to 1.46.16 allows attackers to run arbitrary commands via the value parameter. POC root@kitploit: GET /settings/applyfirmware/;idtest123.txt;/false HTTP/1.1 Host: XXXX...

CVE-2018-16370

CVE-2018-16370 In PESCMS Team 2.2.1, attackers may upload and execute arbitrary PHP code through /Public/?g=Team&m=Setting&a=upgrade by placing a .php file in a ZIP archive.More details see https://github.com/lazyphp/PESCMS-TEAM/issues/2...