CVE-2025-49132-poc

CVE-2025-49132-poc 我针对 CVE-2025-49132 编写了这个 PoC，因为它制作起来很有趣，并且是我在 deepreview 网络安全平台上的一个挑战的一部分！ 该 CVE 利用了一个文件包含漏洞，可通过 pearcmd.php 脚本升级为远程代码执行。这是一项很酷的技术，如需完整解释，请在我的网站上完成 关于此 CVE 的挑战，并阅读包含所有技术细节的解答页面。 使用方法： python3 poc.py 127.0.0.1 'touch /tmp/omgitworks' 如果运行正常，响应中应该会看到一个内部服务器错误。另外，如果你的 payload 中包含 ...

CVE-2026-6271

CVE-2026-6271 — Career Section WordPress插件RCE扫描器 插件: Career Section career-section CVE ID: CVE-2026-6271 CVSS Score: 9.8 Critical CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 漏洞类型: 未认证任意文件上传 → 远程代码执行 受影响版本: 任何未认证的访问者都可以获得有效的nonce并通过验证检查。 缺少文件类型验证 // templates/single-csection.php —...

CVE-2024-10410

Código fuente Online Hotel Reservation System en PHP/MySQLi con Código Fuente | SourceCodester Descripción Se encontró una vulnerabilidad de alto riesgo en Online Hotel Reservation System, que afecta a la función de carga del archivo /marimar/admin/modroom/controller.php. La operación de evasión ...

CVE-2026-105181

A vulnerability was identified in itsourcecode Online Admission System 1.0. This issue affects some unknown processing of the file register1.php. The manipulation of the argument fname leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and...

PHP-CGI-RCE-Scanner

Escáner de PHP CGI RCE CVE-2024-4577 Solo una herramienta con fines educativos. Sin responsabilidad legal. Escaneo de la vulnerabilidad CVE-2024-4577 con una lista de URL. No solo envía el exploit, sino que también comprueba la versión de PHP y si php-cgi existe. Lo hace más informativo para sabe...

CVE-2025-29306

CVE-2025-29306 FOXCMS黔狐内容管理系统服务参数注入漏洞 一、漏洞简介 FoxCMS是一套可免费商用且开源的网站管理系统,采用PHP+MySQL架构。 FOXCMS黔狐内容管理系统存在服务参数注入漏洞，攻击者可利用该漏洞获取服务器控制权。 二、漏洞影响 FOXCMS黔狐内容管理系统 V1.2 三、复现过程 POC http://xx/images/index.html?id=%24%40printphpinfo 输入Poc访问漏洞页面 发现phpinfo命令执行后的信息...

CVE-2019-11447_CuteNews-AvatarUploadRCE

CVE-2019-11447 漏洞利用/PoC - CuteNews 2.1.2 头像上传 RCE（需认证） 针对 CVE-2019-11447（即 CuteNews 2.1.2 头像上传 RCE，需认证）的漏洞利用代码 漏洞利用链接： 预期结果：登录/注册一个账户，构造带有 .gif 魔数字节的用户 PHP 文件，以头像形式上传该文件，并触发它以实现远程代码执行。 仅用于教育目的和企业环境测试。 此漏洞利用已在 Python 3.8.6 上测试通过。 使用方法 cfx: /cutenews → ./exploit.py -h usage: exploit.py -h -l URL -u...

CVE-2026-13001

CVE-2026-13001 — Podlove Podcast Publisher 未经身份验证的文件上传远程代码执行（RCE） isimage 与 extractfileextension 不匹配 → PHP 多语言文件上传 概述 CVE-2026-13001 是 Podlove Podcast Publisher WordPress 插件版本 ≤ 4.5.1 中的一个严重性（CVSS 9.8）未经身份验证 的任意文件上传漏洞。 该漏洞利用了插件内部两个函数对文件扩展名解析方式的不同： isimage 使用 basename，该函数包含查询字符串 → URL shell.php?.g...

Nette Framework - Remote Code Execution

Nette Framework versions before 2.0.19, 2.1.13, 2.2.10, 2.3.14, 2.4.16, and 3.0.6 are vulnerable to a code injection attack via specially formed parameters being passed to a URL. Nette is a PHP/Composer MVC Framework. id: CVE-2020-15227 info: name: Nette Framework - Remote Code Execution author:...

Better Search Replace < 1.4.5 - PHP Object Injection

The Better Search Replace plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.4 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject a PHP Object. No POP chain is present in the vulnerable plugin. I...

CVE-2026-105181 itsourcecode Online Admission System register1.php sql injection

A vulnerability was identified in itsourcecode Online Admission System 1.0. This issue affects some unknown processing of the file register1.php. The manipulation of the argument fname leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and...

CVE-2026-105181

A SQL injection vulnerability exists in the itsourcecode Online Admission System 1.0 . The flaw is located in the processing of the register1.php file, where manipulating the fname argument allows for remote exploitation. While the specific processing logic is not detailed in the documents, the v...

EUVD-2026-92177

A vulnerability was identified in itsourcecode Online Admission System 1.0. This issue affects some unknown processing of the file register1.php. The manipulation of the argument fname leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and...

CVE-2020-12629

Título: osTicket 1.14.1 - Cross-Site Scripting persistente autenticado Autor: Mehmet Kelepce / Gais Cyber Security Fecha : 2020-03-24 Enlace de origen: https://github.com/osticket/osticket/commit/fc4c8608fa122f38673b9dddcb8fef4a15a9c884 CVE: https://vulners.com/cve/CVE-2020-12629 Exploit-Db :...

CVE-2025-64714-privatebin-2.0.2-PoC

CVE-2025-64714 — Inclusión Local de Archivos en PrivateBin mediante Path Traversal en la Cookie de Plantilla Severidad: Media CVSS v3.1: 5.8 Vector: AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N Versiones afectadas: PrivateBin = 1.7.7 Versión parcheada: 2.0.3 CWE: CWE-23 Path Traversal Relativo, CWE-73...

CVE-2026-105172

A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functionality of the file /login1.php. Performing a manipulation of the argument User results in sql injection. The attack may be initiated remotely. The exploit is now public and may ...

CVE-2016-3714

CVE-2016-3714 Ejecución de código en ImageMagick CVE-2016-3714 imagickbuilder.py = Constructor de payloads simple para explotar CVE-2016-3714 imagickbypassshell.php = Web shell basada en PHP que aprovecha el wrapper de la extensión PHP imagick para evadir funciones deshabilitadas Algunas imágenes...

CVE-2026-82222

CVE-2026-82222 — GiveWP Autor: Rx019 CVSS: 10.0 Crítico Tipo: Inyección de Objetos PHP No Autenticada → Ejecución Remota de Código Plugin: GiveWP give — Plugin de Donaciones y Plataforma de Recaudación de Fondos Afectado: Parcheado: 4.16.8 Descripción GiveWP almacena el lastname de un donante en ...

zend-crypt

zend-crypt Repositorio abandonado 2019-12-31 Este repositorio se ha movido a laminas/laminas-crypt. Zend\Crypt proporciona soporte para algunas herramientas criptográficas. Algunas de las características disponibles son: cifrar-luego-autenticar usando cifrados simétricos el paso de autenticación ...

EUVD-2026-92152

A vulnerability was detected in itsourcecode Online Admission System 1.0. Affected by this issue is some unknown functionality of the file /login1.php. Performing a manipulation of the argument User results in sql injection. The attack may be initiated remotely. The exploit is now public and may ...