Trinity-Audio-CVE-Report

Trinity-Audio-CVE-Report Раскрытие информации о CVE-2025-9196 CVE-2025-9196 — Уязвимость в Trinity Audio В этом репозитории раскрывается уязвимость, обнаруженная в Trinity Audio = 5.20.1, плагине WordPress, разработанном sergiotrinity. 🛠 Затронутая версия Продукт : Trinity Audio Версия : v5.20.1...

CVE-2023-49103

CVE-2023-49103 PoC pour le CVE-2023-49103 Aperçu Ce script Python est conçu pour traiter efficacement une grande liste d'URLs afin de vérifier la présence d'une sortie phpinfo. Il utilise le multi-threading pour gérer de nombreuses URLs simultanément, accélérant considérablement le processus. Le...

CVE-2023-27372-POC

CVE-2023-27372-POC Обзор Этот код представляет собой Python POC Proof of Concept для обнаружения уязвимости CVE-2023-27372 на целевом сайте. Вы можете запустить код, указав один URL или текстовый файл, содержащий несколько URL. Затрагиваемые версии: SPIP "; Функции Проверка, существует ли на...

pcc

PHP Secure Configuration Checker Check current PHP configuration for potential security flaws. Simply access this file from your webserver or run on CLI. Author This software was written by Ben Fuhrmannek, SektionEins GmbH, in an effort to automate php.ini checks and spend more time on cheerful...

Symfony Profiler - Remote Access via Injected Arguments

symfony/runtime is a module for the Symphony PHP framework which enables decoupling PHP applications from global state. When the registerargvargc php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment or debug mode used by...

Imcat 4.4 - Phpinfo Configuration

Imcat 4.4 allows remote attackers to read phpinfo output via the root/tools/adbug/binfo.php?phpinfo1 URI. id: CVE-2018-20608 info: name: Imcat 4.4 - Phpinfo Configuration author: ritikchaddha severity: high description: Imcat 4.4 allows remote attackers to read phpinfo output via the...

phpfastcache - phpinfo Resource Exposure

phpinfo is susceptible to resource exposure in unprotected composer vendor folders via phpfastcache/phpfastcache. id: CVE-2021-37704 info: name: phpfastcache - phpinfo Resource Exposure author: whoever severity: medium description: phpinfo is susceptible to resource exposure in unprotected compos...

WordPress EasyCart <2.0.6 - Information Disclosure

WordPress EasyCart plugin before 2.0.6 contains an information disclosure vulnerability. An attacker can obtain configuration information via a direct request to inc/admin/phpinfo.php, which calls the phpinfo function. id: CVE-2014-4942 info: name: WordPress EasyCart 2.0.6 - Information Disclosur...

FacturaScripts - Unauthenticated phpinfo Disclosure

Detected FacturaScripts exposes a debug branch in the Installer controller that calls phpinfo when the request carries the phpinfo=TRUE query parameter, and on an instance that has not finished installation, this endpoint was reachable without authentication. id: CVE-2026-42878 info: name:...

PrestaShop MyPrestaModules - PhpInfo Disclosure

PrestaShop modules by MyPrestaModules expose PHPInfo id: CVE-2023-39677 info: name: PrestaShop MyPrestaModules - PhpInfo Disclosure author: meme-lord severity: high description: | PrestaShop modules by MyPrestaModules expose PHPInfo remediation: | Apply the latest security patches and updates fro...

phpinfo-files-leaks

Значки Лицензия MIT Установка 1. Установите Python3 и pip Инструкции здесь Если вы не можете с этим разобраться, вам не стоит использовать этот инструмент Установка через pip pip install phpinfo-file-leaks Выполните команду ниже для проверки phpinfo-file-leaks -h Настройка 2. Мы интегрировали...

CVE-2024-12535

CVE-2024-12535 Host PHP Info = 1.0.4 - Отсутствие авторизации, приводящее к неаутентифицированному раскрытию конфиденциальной информации Описание Плагин Host PHP Info для WordPress уязвим к несанкционированному доступу к данным из-за отсутствия проверки прав при вызове функции 'phpinfo' во всех...

WP Query Console <= 1.0 - Remote Code Execution

Improper Control of Generation of Code 'Code Injection' vulnerability in LUBUS WP Query Console allows Code Injection.This issue affects WP Query Console- from n/a through 1.0. id: CVE-2024-50498 info: name: WP Query Console = 1.0 - Remote Code Execution author: s4e-io severity: critical...

OwnCloud - Phpinfo Configuration

An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1. The graphapi app relies on a third-party GetPhpInfo.php library that provides a URL. When this URL is accessed, it reveals the configuration details of the PHP environment phpinfo. This information...

CVE-2024-12542-PoC

CVE-2024-12542-PoC Absence d'autorisation menant à une exposition d'informations sensibles sans authentification Description de la vulnérabilité Le plugin linkID pour WordPress est vulnérable à un accès non autorisé aux données en raison d'un contrôle de capacité manquant lors de l'inclusion de l...

cve-2023-2523-and-cve-2023-2648

cve-2023-2523 Remarque : le script télécharge un fichier phpinfo Utilisation : Les résultats sont automatiquement enregistrés dans le fichier result.txt Image POC manuel : POST /E-mobile/App/Ajax/ajax.php?action=mobileuploadsave HTTP/1.1 Host: your-ip Content-Length: 352 Cache-Control: max-age=0...

CVE-2024-12542

CVE-2024-12542 linkID = 0.1.2 — Отсутствие авторизации, приводящее к раскрытию конфиденциальной информации без аутентификации Описание Плагин linkID для WordPress уязвим к несанкционированному доступу к данным из-за отсутствия проверки прав при подключении функции 'phpinfo' во всех версиях до 0.1...

LFI-Destruction

🔥 LFI-Destruction – Framework de Tests d'Intrusion Autorisés LFI-Destroyer est un framework d'exploitation complet et modulaire pour les inclusions de fichiers locaux LFI, conçu pour les professionnels de la sécurité autorisés. Il combine plusieurs techniques d'attaque en un seul outil simple...

PHPCGIScanner

PHP CGI Scanner Screenshot Overview PHP CGI Scanner is a Python 3 utility designed to help identify systems potentially exposed to CVE-2024-4577. It checks for visible PHP versions, common CGI endpoints, and phpinfo outputs to provide a quick risk assessment. Disclaimer: This tool is for authoriz...

GHSA-86VW-X4WW-X467 Craft CMS: RCE via missing cleanseConfig in FieldsController::actionRenderCardPreview

The actionRenderCardPreview method in FieldsController passes the fieldLayoutConfig POST parameter directly to Fields::createLayout without calling Component::cleanseConfig. This allows Yii2 event handler injection via on eventName keys in the config array, leading to arbitrary code execution. Th...