113755 matches found
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-poc CLI scanner and PoC for CVE-2026-109618 / CVE-20...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-poc CVE-2026-109618...
CVE-2026-6201-IDOR
Broken Access Control in CodeAstro Online Job Portal Allows Arbitrary Job Deletion Details Vendor: CodeAstro Product: Online Job Portal Project in PHP MySQL Version: 1.0 Vulnerability Type: Broken Access Control IDOR CWE: CWE-639 Affected File: /jobs/job-delete.php Parameter: id GET Impact: An...
Exploit for CVE-2026-10795
ushort Redirect Cleanup Ein Wizard in einer einzigen PHP-Date...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell CVE-2026-109618 & CVE-2026-109619 — Pre-Auth RCE...
php2shell-bypass-aslr-exp
php2shell - Official environment, no displayerrors needed, memorylimit untouched 中文 | English | 日本語 Official prefork configuration MaxRequestWorkers=150. In a fully remote, HTTP-only setting, with only on the target page and no PHP written on the target side, one command reaches RCE: stock offici...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-advisory-response PHP2Shell Advisory Response — Inv...
WordPress ProfileGrid plugin < 6.0.0.5 - Unauthenticated PHP Object Injection vulnerability
Unauthenticated PHP Object Injection vulnerability discovered by sungbyeongchan in WordPress Plugin ProfileGrid versions 6.0.0.5...
WordPress Frontend Dashboard plugin < 3.0.5 - Unauthenticated PHP Object Injection vulnerability
Unauthenticated PHP Object Injection vulnerability discovered by sungbyeongchan in WordPress Plugin Frontend Dashboard versions 3.0.5...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
...
php8511-exact-build-poc
PHP 8.5.11 Exact-Build Disclosure and RCE PoC Authorized...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2shell — Exploitation for CVE-2026-109618 / CVE-2026-109619...
CVE-2026-103693
The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before 6.0.0.5 do not prevent an unauthenticated user from storing a serialized PHP object in user metadata that is deserialized when a public profile is viewed, allowing PHP object injection that can lead to...
CVE-2026-103693 Frontend Dashboard < 3.0.5 and ProfileGrid < 6.0.0.5 - Unauthenticated PHP Object Injection
The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before 6.0.0.5 do not prevent an unauthenticated user from storing a serialized PHP object in user metadata that is deserialized when a public profile is viewed, allowing PHP object injection that can lead to...
CVE-2026-103693 Frontend Dashboard < 3.0.5 and ProfileGrid < 6.0.0.5 - Unauthenticated PHP Object Injection
The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before 6.0.0.5 do not prevent an unauthenticated user from storing a serialized PHP object in user metadata that is deserialized when a public profile is viewed, allowing PHP object injection that can lead to...
CVE-2026-103693
The Frontend Dashboard WordPress plugin (before 3.0.5 ) and the ProfileGrid WordPress plugin (before 6.0.0.5 ) are vulnerable to an unauthenticated PHP object injection vulnerability. The root cause is a failure to prevent unauthenticated users from storing a serialized PHP object in user metadat...
EUVD-2026-112616
The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before 6.0.0.5 do not prevent an unauthenticated user from storing a serialized PHP object in user metadata that is deserialized when a public profile is viewed, allowing PHP object injection that can lead to...
metasploit-javapayload
This repository has been merged into metasploit-payloads Please note that this repository has been merged into a unified repository for meterpreters: https://github.com/rapid7/metasploit-payloads The history has been preserved, along with prehistory from metasploit-framwork:...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell Check — Claude Skill A Claude Skill that passively...
ThemeREX Ozisti deserialization injection vulnerability
ThemeREX Ozisti versions 1.1.10 and earlier contain a deserialization injection vulnerability. This vulnerability stems from unauthenticated PHP object injection...