113750 matches found
CLEANSTART-2025-PH67214 In PHP 8
CVE-2023-0662 affects multiple packages. In PHP 8. See references for individual vulnerability details...
CLEANSTART-2025-VE59528 In PHP 8
CVE-2023-0568 affects multiple packages. In PHP 8. See references for individual vulnerability details...
CLEANSTART-2025-GN31444 In PHP 8
CVE-2023-0567 affects multiple packages. In PHP 8. See references for individual vulnerability details...
CLEANSTART-2026-XV47321 In PHP version 8
CVE-2024-3096 affects multiple packages. In PHP version 8. See references for individual vulnerability details...
CLEANSTART-2026-HX01317 In PHP versions 8
CVE-2024-1874 affects multiple packages. In PHP versions 8. See references for individual vulnerability details...
CVE-2024-9441
Nortek Linear eMerge E3 Pre-Auth RCE PoC CVE-2024-9441 Description: This repository contains a Proof of Concept PoC exploit for Nortek Linear eMerge E3 CVE-2024-9441, which is vulnerable to Remote Code Execution RCE in a pre-authentication state. The vulnerability is triggered via a flaw in the...
CVE-2024-56059
CVE-2024-56059 Partners = 0.2.0 - Unauthenticated PHP Object Injection Description The Partners plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 0.2.0 via deserialization of untrusted input. This makes it possible for unauthenticated attackers to inject...
CVE-2020-13405
CVE-2020-13405 Base Score: 7.5 HIGH🟥 MicroWeber is an open-source Content Management System CMS written in PHP. It allows web administrators to easily build a website by dragging and dropping components where they want them to be. It is a popular choice among those looking to start a website that...
CVE-2020-15568
CVE-2020-15568 A quick and easy POC for CVE-2020-15568. Not tested but going off of information found here: https://ssd-disclosure.com/ssd-advisory-terramaster-os-exportuser-php-remote-code-execution/...
Log4j-RCE
Log4j-RCE Log4j RCE - CVE-2021-44228 How To Run? php log4j.php https://1337.com Requirements PHP CURL PAYLOAD DNS LOG Collaborator Burpsuite or use dnslog.cn List Payload $ctx:loginId $map:type $filename $date:MM-dd-yyyy $docker:containerId $docker:containerName $docker:imageName $env:USER...
ShellUpload
ShellUpload kurosava.php kurosava.php is a malicious PHP web shell uploader...
CVE-2021-30461
Impacted Products VoIPmonitor 24.60 How to RCE python3 CVE-2021-30461.py -t ipaddress Browser shell: http://x.x.x.x/namrlblgel.php?a=whoami Reference https://ssd-disclosure.com/ssd-advisory-voipmonitor-unauth-rce/...
CVE-2026-65883
CVE-2026-65883 — Aimy Captcha-Less Form Guard = 20.0 clfgd Field → XOR Recovery → unserialize → FormattedtextLogger → RCE Overview Unauthenticated PHP Object Injection in Aimy Captcha-Less Form Guard for Joomla. The onCheckAnswer method base64-decodes the attacker-controlled clfgd POST field, run...
CVE-2024-25600
MODIFIED CVE-2024-25600 original - https://github.com/K3ysTr0K3R/CVE-2024-25600-EXPLOIT WordPress Bricks Builder RCE Exploit A Python exploit for CVE-2024-25600 - WordPress Bricks Builder Remote Code Execution vulnerability. Description This tool exploits a critical vulnerability in WordPress...
CVE-2024-4577
Just for researching Poc For Default XAMPP curl -v -d "" http://127.0.0.1/php-cgi/php-cgi.exe/?%add+allowurlinclude%3Don+-d+autoprependfile%3Dphp%3A//input+-d+cgi.forceredirect%3D0...
CLEANSTART-2026-ND50222 In PHP 8
CVE-2024-2757 affects multiple packages. In PHP 8. See references for individual vulnerability details...
CLEANSTART-2026-LG29866 In PHP versions 8
CVE-2024-9026 affects multiple packages. In PHP versions 8. See references for individual vulnerability details...
CLEANSTART-2026-UN84253 In PHP versions 8
CVE-2024-8927 affects multiple packages. In PHP versions 8. See references for individual vulnerability details...