CVE-2026-102802: regularlabs.com: Joomla Extension - regularlabs.com - PHP code injection vector in Sourcerer extension < 17.0.1 when used with Articles…

Joomla Extension - regularlabs.com - PHP code injection vector in Sourcerer extension 17.0.1 when used with Articles Anywhere extension 20.1.1 - Sourcerer can restrict PHP in articles according to article-author trust; the exact creator and last-editor rule varies by release. Articles Anywhere ca...

CVE-2026-120343: mathurvishal CloudClassroom-PHP-Project: A flaw has been found in mathurvishal CloudClassroom-PHP-Project

A flaw has been found in mathurvishal CloudClassroom-PHP-Project. The impacted element is an unknown function of the file manageassessment2.php. This manipulation of the argument ExamName/Q1/Q2/Q3/Q4/Q5 causes cross site scripting. The attack is possible to be carried out remotely. The exploit ha...

CVE-2026-120342: mathurvishal CloudClassroom-PHP-Project: A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project. The affected element is an unknown function of the file viewquery.php. The manipulation of the argument eid results in sql injection. The attack can be executed remotely. The exploit is now public and may be used. This produ...

PT-2026-135329

A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project. Impacted is an unknown function of the file studentdetails.php. The manipulation leads to execution after redirect. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may...

PT-2026-135328

A weakness has been identified in mathurvishal CloudClassroom-PHP-Project. This issue affects some unknown processing of the component Global Session Handler. Executing a manipulation can lead to session expiration. The attack may be launched remotely. A high complexity level is associated with...

PT-2026-135327

A security flaw has been discovered in mathurvishal CloudClassroom-PHP-Project. This vulnerability affects unknown code of the file updatedetailsfromfaculty.php. Performing a manipulation of the argument fname results in cross site scripting. The attack may be initiated remotely. The exploit has...

PT-2026-135331

A flaw has been found in mathurvishal CloudClassroom-PHP-Project. The impacted element is an unknown function of the file manageassessment2.php. This manipulation of the argument ExamName/Q1/Q2/Q3/Q4/Q5 causes cross site scripting. The attack is possible to be carried out remotely. The exploit ha...

PT-2026-135434

Joomla Extension - php-web-design.com - CSRF for various actions in StageIt 1.0-5.7.5, 6.0-6.3.5...

CVE-2026-73695: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.16 contains a path traversal vulnerability in…

Control Web Panel CWP before webpanelversion 1.16 contains a path traversal vulnerability in services/users/index.php that allows attackers to include arbitrary local PHP files by supplying an unsanitized module name parameter concatenated directly into an include path. Attackers can inject...

CVE-2026-120341: mathurvishal CloudClassroom-PHP-Project: A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project

A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project. Impacted is an unknown function of the file studentdetails.php. The manipulation leads to execution after redirect. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may...

PT-2026-135483

Name of the Vulnerable Software and Affected Versions Control Web Panel versions prior to 1.16 Description A path traversal issue exists in the services/users/index.php endpoint. This occurs because the module name parameter is not properly sanitized before being concatenated into an include path...

PT-2026-135484

Name of the Vulnerable Software and Affected Versions Control Web Panel versions prior to 1.12 Description An execution after redirect issue exists in the user panel authentication flow CWPUserIndex. This occurs because of a missing exit call following a header'Location: ...' redirect, which allo...

PT-2026-135330

A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project. The affected element is an unknown function of the file viewquery.php. The manipulation of the argument eid results in sql injection. The attack can be executed remotely. The exploit is now public and may be used. This produ...

PT-2026-135422

Joomla Extension - php-web-design.com - RCE via setting strings in StageIt 1.0-5.7.5, 6.0-6.3.5...

osTicket PDF PHP Filter File Read (CVE-2026-22200)

Horizon3: submits an open.php ticket whose rich-text message abuses mPDF list-style-image php://filter chains. Retrieve bytes from the ticket PDF extract BMP / use Horizon3 extractpdfimages.py. No framework session. !/usr/bin/env python3 -- coding: utf-8 -- """ CVE-2026-22200 — osTicket anonymous...

DDoS-PHP-Script

DDoS PHP Script Script to perform a DDoS UDP flood by PHP Usage From web server visit the page: http://127.0.0.1/ddos.php?pass=apple&host=TARGET&port=PORT&time=SECONDS&packet=NUMBER&bytes=NUMBER From terminal: php ./ddos.php host=TARGET port=PORT time=SECONDS packet=NUMBER bytes=NUMBER Parameters...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

CVE-2026-109618PHP2SHELL This lab demonstrates PHP 8.4.26 c...

Exploit for CVE-2022-36532

CVE 2022 36532 Bolt CMS Authenticated Remote Code Execution...

PHP2SHELL

PHP2Shell detector Evidence-based assessment for CVE-2026-1...

CVE-2024-53345

CVE-2024-53345 Critical 0 Day in Car Rental Management System Versions 1.0 - 1.3 Description: A critical vulnerability exists in the System Settings module's file upload functionality within the Car Rental Management System versions 1.0 to 1.3, allowing low-privileged users to upload arbitrary...