SPIPScan

SPIPScan Scanner SPIP CMS à des fins de test d'intrusion écrit en Python, et distribué sous licence MIT. Cet outil a été conçu pour détecter les installations SPIP lors de tests d'intrusion. Actuellement, l'outil détecte la version de l'installation SPIP et tente de détecter si la plateforme...

CVE-2024-7954

CVE-2024-7954 - SPIP 4.2.8 원격 명령 실행 RCE 익스플로잇 이 스크립트는 porteplumeprevisu 엔드포인트를 통해 SPIP 4.2.8 버전의 원격 코드 실행 취약점을 악용합니다. 이 취약점으로 인해 인증되지 않은 공격자가 조작된 이미지 태그의 미리보기 렌더링을 통해 PHP 코드를 주입할 수 있습니다. CVE ID: CVE-2024-7954 구성 요소: SPIP CMS porteplumeprevisu 영향: 인증되지 않은 원격 명령 실행 심각도: 치명적Critical 익스플로잇 기능 임의의 시스템...

Silent_CVE_2019_16394

CVE-2019-16394 Простой POC-скрипт на Python для CVE-2019-16394 Скрипт настроен для французского веб-сайта; возможно, потребуется его изменить, если язык сайта отличается. Установка root@kitploit: pip install -r requirements.txt Использование root@kitploit: usage: cve201916394.py -h -u URL -f FILE...

Exploitation-of-a-Remote-Code-Execution-vulnerability--CVE-2024-7954-

Эксплуатация уязвимости удаленного выполнения кода CVE-2024-7954 Проект тестирования уязвимостей программного обеспечения Представлено: Shivansh Kuntal Обзор Этот проект демонстрирует эксплуатацию CVE-2024-7954 , критической уязвимости удаленного выполнения кода RCE, затрагивающей SPIP CMS через...

SPIP-BigUp-Unauthenticated-RCE-Exploit-CVE-2024-8517

SPIP BigUp: неаутентифицированный RCE-эксплойт CVE-2024-8517 Описание Этот Python-скрипт эксплуатирует уязвимость неаутентифицированного удалённого выполнения кода RCE в плагине BigUp системы управления содержимым SPIP Système de Publication pour l'Internet Partagé. Проблема кроется в функции...

spip-cve-2023-27372-rce

Exploitation RCE non authentifiée SPIP CVE-2023-27372 Téléchargement de Web Shell Ce script Python exploite la CVE-2023-27372, une vulnérabilité d'exécution de code à distance non authentifiée dans les versions de SPIP CMS antérieures à 4.2.1. Il tire parti d'une faille d'empoisonnement du cache...

CVE-2023-27372

Exploit CVE-2023-27372 Exploit per CVE-2023-27372 , una vulnerabilità di esecuzione remota di codice non autenticata nel CMS SPIP che interessa le versioni precedenti alla 4.2.1. ⚠️ Solo a scopo educativo. Utilizzare esclusivamente su sistemi di propria proprietà o per i quali si dispone di...

Linux Distros Unpatched Vulnerability : CVE-2026-48832

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - action/cookie.php in ecrire in SPIP before 4.4.15 is prone to an open redirect vulnerability. CVE-2026-48832 Note that Nessus relies on the presence of the...

SPIP 代码注入漏洞

SPIP is an open-source software developed by SPIP for creating Internet websites. Versions of SPIP prior to 4.4.14 had a code injection vulnerability, which was caused by remote code execution from private spaces, potentially allowing arbitrary code to be executed...

📄 SPIP CMS Analysis Scanner Script

This is an exploitation tool designed for websites running the SPIP CMS versions 5.4.0 through 5.11.0. The tool performs automated detection and enumeration of SPIP installations, identifies installed plugins, attempts to determine plugin versions, and searches for forms using the saisies plugin...

CVE-2026-22206

SPIP versions prior to 4.4.10 contain a SQL injection vulnerability that allows authenticated low-privilege users to execute arbitrary SQL queries by manipulating union-based injection techniques. Attackers can exploit this SQL injection flaw combined with PHP tag processing to achieve remote cod...

SPIP Ultimate Auditor – Comprehensive Security Assessment Script

SPIP Ultimate Auditor is a Python-based security assessment script designed to perform a multi-phase audit against a SPIP CMS installation. The tool automates reconnaissance and misconfiguration detection tasks to identify potential security weaknesses in a target deployment...

CVE-2026-27473

SPIP before 4.4.9 allows Stored Cross-Site Scripting XSS via syndicated sites in the private area. The URLSYNDIC output is not properly sanitized on the private syndicated site page, allowing an attacker who can set a malicious syndication URL to inject persistent scripts that execute when other...

CVE-2025-71240

SPIP before 4.2.15 allows Cross-Site Scripting XSS via crafted content in HTML code tags. The application does not properly verify JavaScript within code tags, allowing an attacker to inject malicious scripts that execute in a victim's browser...

CVE-2025-71250

...

Linux Distros Unpatched Vulnerability : CVE-2026-26223

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SPIP before 4.4.8 allows cross-site scripting XSS in the private area via malicious iframe tags. The application does not properly sandbox or escape iframe...

Exploit for CVE-2024-7954

Exploitation of Remote Code Execution Vulnerability CVE-2024-...

Exploit for Reliance on File Name or Extension of Externally-Supplied File in Spip

PoC exploit for CVE-2024-8517, an unauthenticated Remote Code Ex...

Exploit for CVE-2024-7954

CVE-2024-7954 - SPIP 4.2.8 Remote Command Execution RCE Expl...

Exploit for Deserialization of Untrusted Data in Spip

SPIP CVE-2023-27372 Unauthenticated RCE Exploit Web Shell Upl...