WordPress eCommerce Product Catalog plugin <= 3.6.0 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin eCommerce Product Catalog versions = 3.6.0...

CVE-2023-43154-PoC

CVE-2023-43154 - Macs Framework v1.1.4f CMS Type Confusion Vulnerability Table of Contents 1. Overview 2. Proof of Concept 3. Technical Debrief 4. Mitigation Overview CVE-ID : CVE-2023-43154 CVSS 3.1 : 9.8 Vulnerability Description : A loose comparison in the isValidLogin function results in a PH...

CVE-2024-4577

PHP-CGI Windows Platform Remote Code Execution Vulnerability CVE-2024-4577 Introduction PHP is an acronym for Hypertext Preprocessor. It is now a widely used open-source scripting language that is particularly suitable for web development and embedding in HTML, and is very simple to use. CGI, whi...

CVE-2016-10033

CVE-2016-10033 Vulnerabilidad de ejecución remota de código en PHPMailer. Más información sobre CVE-2016-10033: CVE-2016-10033 Wiki...

By-Poloss..-..CVE-2017-20251

CVE-2017-20251: Inyección de Código PHP en el Plugin Insert PHP Título de la Vulnerabilidad Inyección de Código PHP sin Autenticación a través del Procesamiento de Shortcodes en el Plugin Insert PHP Información Básica Campo| Valor ---|--- CVE ID| CVE-2017-20251 Plugin| Insert PHP ahora Woody Code...

CVE-2023-6553-RCE-Exploit

🔥 CVE-2023-6553 — WordPress Backup Migration RCE Unauthenticated Remote Code Execution via PHP Filter Chain Proof of Concept exploit for CVE-2023-6553 — a critical unauthenticated RCE vulnerability in the WordPress "Backup Migration" plugin versions ≤ 1.3.7. 📋 Vulnerability Overview Property|...

CVE-2026-101012

A weakness has been identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file makeresult.php. This manipulation of the argument makeid causes sql injection. The attack can be initiated remotely. The exploit h...

CVE-2026-101013

A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected is an unknown function of the file updateresultdetails.php. Such manipulation of the argument editid leads to sql injection. The attack can be launched...

CVE-2021-43503

Warning The vulnerability has been revoked Override This is Abount CVE-2021-43503, I can not replicate this vulnerability through exp Requirement PHP 7.1. Composer registrar=$b; namespace Illuminate\Queue\Capsule class Manager protected $manager; public function construct$c $this-manager-method=$...

CVE-2019-11447_reverse_shell_upload

CVE-2019-11447 CuteNews 2.1.2 Reverse Shell Upload A slightly modified version of the Mt-Code POC which spawns a full reverse shell rather than a web shell. This exploit uses the famous PentestMonkey PHP Reverse Shell. Install pip install -r requirements.txt Example use: Create a user on the...

CVE-2026-101013 mathurvishal CloudClassroom-PHP-Project updateresultdetails.php sql injection

A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected is an unknown function of the file updateresultdetails.php. Such manipulation of the argument editid leads to sql injection. The attack can be launched...

CVE-2026-101013

A security vulnerability exists in mathurvishal CloudClassroom-PHP-Project (up to commit 5dadec098bfbbf3300d60c3494db3fb95b66e7be ) involving a SQL injection flaw. The vulnerability is located within an unknown function in the updateresultdetails.php file, where manipulation of the editid argumen...

EUVD-2026-88143

A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. Affected is an unknown function of the file updateresultdetails.php. Such manipulation of the argument editid leads to sql injection. The attack can be launched...

EUVD-2026-88132

A weakness has been identified in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file makeresult.php. This manipulation of the argument makeid causes sql injection. The attack can be initiated remotely. The exploit h...

CVE-2026-101012

A SQL injection vulnerability exists in the mathurvishal CloudClassroom-PHP-Project (up to commit 5dadec098bfbbf3300d60c3494db3fb95b66e7be). The flaw is located within an unknown function in the makeresult.php file, where manipulation of the makeid argument allows for remote execution. Public exp...

CVE-2014-2383-LFI-to-RCE-Escalation

CVE-2014-2383 Escalada de LFI/RFI a RCE Entorno de prueba: dompdf 0.6.0 - php 7.3.33 - apache 2.4.25 Durante una evaluación de seguridad se descubrió la presencia de CVE-2014-2383. Este documento es una prueba de concepto y no incluye los detalles del descubrimiento inicial para proteger la...

rips-scanner

RIPS Un analizador estático de código fuente para vulnerabilidades en scripts PHP Requisitos servidor web: Apache o Nginx recomendado PHP: última versión recomendada navegador: Firefox recomendado Instalación 1. Descargue la última versión 2. Extraiga los archivos a la raíz de documentos de su...

WordPress Cost of Goods for WooCommerce plugin <= 3.5.2 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Cost of Goods for WooCommerce versions = 3.5.2...

webshell

webshell | English | Türkiye Este es un proyecto de recopilación de webshells. Quien da una rosa se queda con el aroma en la mano; si descargan este proyecto, por favor, envíen también shells. Este proyecto incluye varios scripts de uso común. como: asp, aspx, php, jsp, pl, py Si envían webshells...

CVE-2021-30461

Impacted Products VoIPmonitor 24.60 How to RCE python3 CVE-2021-30461.py -t ipaddress Browser shell: http://x.x.x.x/namrlblgel.php?a=whoami Reference https://ssd-disclosure.com/ssd-advisory-voipmonitor-unauth-rce/...