CVE-2025-49132-poc

CVE-2025-49132-poc Ho realizzato questo PoC per CVE-2025-49132, perché era interessante da sviluppare e fa parte di una challenge sulla mia piattaforma cyber deepreview ! Questa CVE sfrutta una vulnerabilità di inclusione di file che può essere escalata a esecuzione di codice remoto con lo script...

CVE-2019-11043

PoC CVE-2019-11043 CVE-2019-11043 शोषण का एक पायथन कार्यान्वयन CVE-2019-11043 के रूप में दर्ज शोषण, PHP-FPM के कार्यान्वयन में एक बग का लाभ उठाता है जो NGINX सर्वर के संयोजन में होता है। कुछ विन्यासों में, FastCGI pathinfo में एक नियमित अभिव्यक्ति FPM मॉड्यूल को आवंटित बफ़र्स से परे FastCGI...

CVE-2024-4577

🚀 CVE-2024-4577: Scanner ed Exploit per l'Iniezione di Argomenti CGI in PHP 🛡️ Panoramica CVE-2024-4577 è una vulnerabilità critica che colpisce le applicazioni PHP che utilizzano la Common Gateway Interface CGI. Questo strumento funge sia da scanner che da exploit , consentendo ai professionisti...

CVE-2023-35840

CVE-2023-35840 elFinder 2.1.62 - Path Traversal-Schwachstelle im PHP LocalVolumeDriver Connector Beschreibung Path Traversal-Schwachstelle im PHP LocalVolumeDriver Connector. Diese Schwachstelle kann ausgenutzt werden, indem nicht vertrauenswürdigen Benutzern erlaubt wird, in das lokale Dateisyst...

ExWA

ExWa WhatsApp per CLI con API ExWa è un semplice strumento scritto in PHP, che permette di utilizzare un'applicazione WhatsApp in versione CLI con l'aiuto di un'API del sito rapiwha.com Installazione : $ git clone https://github.com/dalpan/ExWa $ cd ExWa $ php exwa.php Utilizzo : Registrati prima...

CVE-2022-28368

CVE-2022-28368 - Dompdf RCE Exploit PoC di Dompdf RCE testo alternativo ExploitDB Le versioni di Dompdf 1.2.1 sono vulnerabili all'esecuzione di codice remoto RCE tramite l'iniezione di CSS nei dati. Il file può essere indotto a memorizzare un font dannoso con estensione .php nella sua cache dei...

safeshell

safeshell Previene vulnerabilità PHP simili a CVE-2016-10033 e CVE-2016-10045...

Citrix SD-WAN Center - Local File Inclusion

Citrix SD-WAN Center is susceptible to local file inclusion via the applianceSettingsFileTransfer function in ApplianceSettingsController. The function does not sufficiently validate or sanitize HTTP request parameter values used to construct a file system path. An attacker can trigger this...

Aquatronica Controller System <= 5.1.6 - Information Disclosure

Aquatronica Controller System firmware 5.1.6 and earlier and web interface 2.0 and earlier contain an information disclosure vulnerability caused by unauthenticated access to tcp.php endpoint, letting remote attackers retrieve sensitive configuration data including plaintext credentials, exploit...

Roundcube Webmail - Remote Code Execution

Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execution by authenticated users because the from parameter in a URL is not validated in program/actions/settings/upload.php, leading to PHP Object Deserialization. id: CVE-2025-49113 info: name: Roundcube Webmail - Remote...

Pinger 1.0 - Remote Code Execution

Pinger 1.0 contains a remote code execution vulnerability that allows attackers to inject shell commands through the ping and socket parameters. Attackers can exploit the unsanitized input in ping.php to write arbitrary PHP files and execute system commands by appending shell metacharacters. id:...

LotusCMS 3.0 - Remote Code Execution

LotusCMS 3.0 is susceptible to remote code execution via the Router function. This is done by embedding PHP code in the 'page' parameter, which will be passed to a eval call and allow remote code execution. id: CVE-2011-0518 info: name: LotusCMS 3.0 - Remote Code Execution author: pikpikcu...

FUEL CMS 1.4.1 - Remote Code Execution

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. id: CVE-2018-16763 info: name: FUEL CMS 1.4.1 - Remote Code Execution author: pikpikcu severity: critical description: FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/...

Apache2 - Transfer-Encoding Chunked XSS

Apache2 PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10 contain a reflected cross-site scripting vulnerability caused by mishandling of chunked transfer-encoding requests in sapi/apache2handler/sapiapache2.c. Attackers can execute malicious scripts via crafted...

Nette Framework - Remote Code Execution

Nette Framework versions before 2.0.19, 2.1.13, 2.2.10, 2.3.14, 2.4.16, and 3.0.6 are vulnerable to a code injection attack via specially formed parameters being passed to a URL. Nette is a PHP/Composer MVC Framework. id: CVE-2020-15227 info: name: Nette Framework - Remote Code Execution author:...

NUUO Camera <=20250203 - OS Command Injection

NUUO Camera up to 20250203 contains a command injection caused by manipulation of the 'log' argument in /handleconfig.php, letting remote attackers execute arbitrary commands, exploit requires remote access. id: CVE-2025-1338 info: name: NUUO Camera =20250203 - OS Command Injection author: Ark...

elFinder < 2.1.58 - Remote Code Execution

studio-42/elfinder before 2.1.58 contains a remote code execution caused by execution of PHP code in a .phar file, letting attackers execute arbitrary PHP code if the server parses .phar files as PHP, exploit requires server to parse .phar files as PHP. id: CVE-2021-23394 info: name: elFinder...

elFinder <= 2.1.47 - Command Injection

elFinder before 2.1.48 has a command injection vulnerability in the PHP connector. The vulnerability occurs when performing image operations on JPEG files, where the filename is passed to the exiftran utility without proper sanitization, allowing command injection. id: CVE-2019-9194 info: name:...

Qualitor <= 8.20 - Remote Code Execution

Qualitor through 8.20 allows remote attackers to execute arbitrary code via PHP code in the html/ad/adpesquisasql/request/processVariavel.php gridValoresPopHidden parameter. id: CVE-2023-47253 info: name: Qualitor = 8.20 - Remote Code Execution author: s4e-io severity: critical description: |...

Online Security Guards Hiring System - Cross-Site Scripting

A vulnerability was found in PHPGurukul Online Security Guards Hiring System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file search-request.php. id: CVE-2023-0527 info: name: Online Security Guards Hiring System - Cross-Site Scripting author:...