113783 matches found
myDBR — Admin File-Editor PHP Code Injection RCE — Detect
Fingerprint / reachability check for myDBR — Admin File-Editor PHP Code Injection RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for myDBR — Admin File-Editor PHP Code Injection RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...
Maian Gallery authenticated admin upload PHP webshell RCE
Admin login then cmd=addimages thumb upload writes picN-cat.php under content/galleries///. """Maian Gallery admin thumbnail upload PHP webshell RCE.""" from future import annotations import re import uuid from urllib.parse import quote, urlencode from kittysploit import from...
Codoforum admin category-image polyglot upload RCE
Authenticated admin upload of GIF/PHP polyglot to sites/default/assets/img/cats/; GET ?c= runs shellexec. """Codoforum admin category-image polyglot upload RCE.""" from future import annotations import re import time from urllib.parse import quote, urlencode from kittysploit import from...
Maian Pal product image upload PHP webshell RCE
Admin ajax-ops=add stores fmifile as content/products//.php with extension preserved. """Maian Pal 2.1 admin product image upload PHP webshell RCE.""" from future import annotations import re import uuid from urllib.parse import quote, urlencode from kittysploit import from...
checkmk_php2shell
checkmkphp2shell A Checkmk extension that shows, for every PHP installation on a Linux host, whether it is affected by PHP2Shell - the pre-authentication remote code execution vulnerabilities CVE-2026-109618 and CVE-2026-109619 , disclosed and fixed on 2026-10-21 in PHP 8.2.35, 8.3.36, 8.4.27 and...
The web’s having a rough week. Here’s how to browse safely
You recognize the website. You’ve visited it before. You may even have it bookmarked. Then it asks you to do something unusual: install an update, allow notifications, or run a command to prove you’re human. Stop and check first. A website you trust can still display instructions you shouldn’t...
php2shell-lab
php2shell-lab !labhttps://github.com/qualixar/php2shell-l...
CVE-2026-117540
svg-sanitizer from 0.5.3 before 1.1.0 contains a denial of service vulnerability in Sanitizer::sanitize that repeatedly rescans the whole input while stripping PHP tags. Unauthenticated attackers can upload SVGs with many overlapping PHP tag openers and closers, forcing quadratic pregreplace pass...
CVE-2026-117540 svg-sanitizer before 1.1.0 Quadratic CPU-Exhaustion DoS via PHP-Tag Stripping Loop
svg-sanitizer from 0.5.3 before 1.1.0 contains a denial of service vulnerability in Sanitizer::sanitize that repeatedly rescans the whole input while stripping PHP tags. Unauthenticated attackers can upload SVGs with many overlapping PHP tag openers and closers, forcing quadratic pregreplace pass...
CVE-2026-117540
svg-sanitizer from 0.5.3 before 1.1.0 contains a denial of service vulnerability in Sanitizer::sanitize that repeatedly rescans the whole input while stripping PHP tags. Unauthenticated attackers can upload SVGs with many overlapping PHP tag openers and closers, forcing quadratic pregreplace pass...
EUVD-2026-110805
svg-sanitizer from 0.5.3 before 1.1.0 contains a denial of service vulnerability in Sanitizer::sanitize that repeatedly rescans the whole input while stripping PHP tags. Unauthenticated attackers can upload SVGs with many overlapping PHP tag openers and closers, forcing quadratic pregreplace pass...
CVE-2026-117540
The svg-sanitizer library (versions 0.5.3 before 1.1.0 ) is vulnerable to a Denial of Service (DoS) attack within the Sanitizer::sanitize() function. The root cause is an inefficient algorithmic complexity issue where the software repeatedly rescans the entire input while stripping PHP tags. An u...
CVE-2026-117540 svg-sanitizer before 1.1.0 Quadratic CPU-Exhaustion DoS via PHP-Tag Stripping Loop
svg-sanitizer from 0.5.3 before 1.1.0 contains a denial of service vulnerability in Sanitizer::sanitize that repeatedly rescans the whole input while stripping PHP tags. Unauthenticated attackers can upload SVGs with many overlapping PHP tag openers and closers, forcing quadratic pregreplace pass...
CVE-2026-117540 svg-sanitizer before 1.1.0 Quadratic CPU-Exhaustion DoS via PHP-Tag Stripping Loop
svg-sanitizer from 0.5.3 before 1.1.0 contains a denial of service vulnerability in Sanitizer::sanitize that repeatedly rescans the whole input while stripping PHP tags. Unauthenticated attackers can upload SVGs with many overlapping PHP tag openers and closers, forcing quadratic pregreplace pass...
CVE-2026-116878 Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via Special:PropertyLabelSimilarity
Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows anonymous attackers to force quadratic computation by supplying a zero limit to Special:PropertyLabelSimilarity. Attackers can send repeated requests with limit=0 to bypass the SQL...
CVE-2026-116878
Semantic MediaWiki versions 2.5.0 through 7.3.1 are vulnerable to an uncontrolled resource consumption vulnerability (CWE-400) via the Special:PropertyLabelSimilarity functionality. An anonymous attacker can trigger quadratic computation by providing a limit=0 parameter, which bypasses the SQL LI...
CVE-2026-116878 Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via Special:PropertyLabelSimilarity
Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows anonymous attackers to force quadratic computation by supplying a zero limit to Special:PropertyLabelSimilarity. Attackers can send repeated requests with limit=0 to bypass the SQL...
CVE-2026-116878 Semantic MediaWiki 2.5.0 before 7.3.1 Resource Exhaustion via Special:PropertyLabelSimilarity
Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows anonymous attackers to force quadratic computation by supplying a zero limit to Special:PropertyLabelSimilarity. Attackers can send repeated requests with limit=0 to bypass the SQL...