wordlistgen

wordlistgen What and why? wordlistgen is a tool to pass a list of URLs and get back a list of relevant words for your wordlists. Wordlists are much more effective when you take the application's context into consideration. wordlistgen pulls out URL components, such as subdomain names, paths, quer...

CVE-2019-11043

PoC CVE-2019-11043 A Python version of the CVE-2019-11043 exploit https://github.com/neex/phuip-fpizdam This PoC is still a draft, please use the exploit written by @neex Vulnerability Analysis: https://paper.seebug.org/1064/ PoC Setup Just run docker compose to bring up nginx and php-fpm:...

WordPress amtyThumb Posts 8.1.3 - Cross-Site Scripting

WordPress amty-thumb-recent-post plugin 8.1.3 contains a cross-site scripting vulnerability via the query string to amtyThumbPostsAdminPg.php. id: CVE-2017-17059 info: name: WordPress amtyThumb Posts 8.1.3 - Cross-Site Scripting author: daffainfo severity: medium description: WordPress...

CVE-2019-12189

CVE-2019-12189 - Zoho ManageEngine ServiceDesk Plus 9.3 XSS vulnerability Information Description:XSS was discovered in ManageEngine ServiceDesk Plus version Versions Affected: 9.3 Researcher: Dang The Tuyen Proof-of-concept The vulnerability stems from the confusion of both single quotes and...

CVE-2025-30208-PoC

CVE-2025-30208 - Vite Arbitrary File Read PoC This is a Proof-of-Concept PoC script to exploit CVE-2025-30208, allowing arbitrary file reads on Vite development servers. Vulnerability Details Vite, a provider of frontend development tooling, has a vulnerability in versions prior to 6.2.3, 6.1.2,...

CVE-2019-11043

CVE-2019-11043 PHP-FPM Remote Code Execution Screencast: https://youtu.be/d6benC5FVZM Overview This zero-day exploit in common PHP-FPM configurations was discovered during the Realworld CTF competition in 2019. A regular expression is used to parse the requested URI, but newline characters %0a ar...

CVE-2019-0232

CVE-2019-0232 Apache Tomcat CGIServlet enableCmdLineArguments RCE Windows batch script injection via query string arguments Description Apache Tomcat with the CGI servlet enabled and enableCmdLineArguments=true passes query string parameters as command-line arguments to CGI scripts. On Windows,...

CVE-2019-11043-Docker

A docker image with a vulnerable version of PHP-FPM CVE-2019-11043 and nginx. Run docker run --rm -p8080:80 akamajoris/cve-2019-11043 You should be able to access the web application at http://your-ip:8080/. Exploitation Build a binary from https://github.com/neex/phuip-fpizdam, then...

CVE-2025-50110

CVE-2025-50110 Cleartext Transmission of Sensitive Information in EagleEyes Lite Android Application 1. Overview Name : EagleEyesLite Version : 2.0.0 Vendor : AVTECH CWE : CWE-319: Cleartext Transmission of Sensitive Information, CWE-598: Use of GET Request Method With Sensitive Query Strings CVS...

CVE-2012-1823

PHP CGI Argument Injection CVE-2012-1823 Description sapi/cgi/cgimain.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script aka php-cgi, does not properly handle query strings that lack an = equals sign character, which allows remote attackers to execute arbitrary code by...

CVE-2025-30208

CVE-2025-30208 — Vite Arbitrary File Read · v5 CVE: CVE-2025-30208 GHSA: GHSA-x574-m823-4x7w Severity: CVSS 5.3 Medium network-accessible dev server ⚠ For authorized security engagements only. Unauthorized use against systems you do not own or have explicit written permission to test is illegal...

CVE-2025-52097

Cross Site Scripting vulnerability in InstantASP ltd, InstantForum.NET v.4.1.4 allows an attacker to execute arbitrary code via reflecting un-sanitized input from query string parameters directly into the HTML response without proper output encoding...

cve-2024-4577-phpcgi_rce_reproduction

CVE-2024-4577 - PHP CGI Argument Injection on Windows "WorstFit" Overview CVE-2024-4577 is a critical remote code execution vulnerability in PHP's CGI implementation on Windows. It bypasses the fix for the original CVE-2012-1823 by exploiting Windows "Best-Fit" code page conversion to smuggle...

CVE-2012-1823---PHP-CGI---RCE

CVE-2012-1823 | PHP-CGI Remote Code Execution RCE Exploit A Python-based exploit for CVE-2012-1823. This vulnerability allows an attacker to execute arbitrary code on a server running a vulnerable version of PHP-CGI by injecting command-line arguments via the query string. 📝 Vulnerability Overvie...

CVE-2025-52097

A reflected Cross-Site Scripting (XSS) vulnerability exists in InstantForum.NET v4.1.4 by InstantASP Ltd . The root cause is the reflection of un-sanitized input from the hbhxg query string parameter directly into the HTML response without proper output encoding. This allows an unauthenticated at...

EUVD-2025-211106

Cross Site Scripting vulnerability in InstantASP ltd, InstantForum.NET v.4.1.4 allows an attacker to execute arbitrary code via reflecting un-sanitized input from query string parameters directly into the HTML response without proper output encoding...

nanwinata-CVE-2024-52301

This script using simple tools subfinder,httpx. Laravel is a web application framework. When the registerargcargv php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request. The...

Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Struts

Summary Multiple vulnerabilities were addressed in IBM Library Support for Struts 1.0 Vulnerability Details CVEID:CVE-2005-3745 DESCRIPTION: Cross-site scripting XSS vulnerability in Apache Struts 1.2.7, and possibly other versions allows remote attackers to inject arbitrary web script or HTML vi...

PT-2026-113636

The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.4.5 via the 'Last referrers' meta box on the plugin's Overview admin page. This is due to insufficient output escaping of the visitor-supplied query string that the plugin record...

PT-2026-113611

The NewStatPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'QUERY STRING / REQUEST URI' parameter in all versions up to, and including, 1.4.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...