PT-2026-65703

A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authenticated attacker to inject through the assessment reinforcement endpoint, control data passed to unserialize, write a webshell to a publicly accessible location, and execute arbitrary code on the server...

SharePoint Webshell - ToolShell Detection

Detects a persistent webshell named 'spinstall0.aspx' deployed on Microsoft SharePoint servers. This file exposes sensitive cryptographic machineKey values from the SharePoint configuration, indicating the presence of a ToolShell backdoor implant. This implant is linked to targeted post-auth RCE...

Exploit for Incorrect Authorization in Adobe Coldfusion

CVE-2025-43564 — Apache Tomcat Partial PUT Request Handling RC...

China-Nexus JadeProx Uses New TriBack Loader in Government and Healthcare Attacks

An exposed Alibaba Cloud server has revealed a China-nexus operation that Group-IB tracks as JadeProx. The cluster has targeted government, healthcare, and education organizations across Asia and Latin America with a previously undocumented Windows loader called TriBack Loader. Group-IB found the...

Exploit for Interpretation Conflict in Wordpress

CVE-2026-63030 / CVE-2026-60137 — "wp2shell" WordPress Core RC...

📄 WordPress Copymatic 1.6 Unauthenticated Shell Upload

WordPress Copymatic plugin version 1.6 contains an unauthenticated arbitrary file upload to remote code execution vulnerability. A remote attacker can upload executable PHP code and achieve remote code execution. This proof of concept exploit demonstrates the vulnerable request flow against the...

📄 WordPress YayExtra 1.3.6 Unauthenticated Shell Upload

WordPress YayExtra WooCommerce Extra Product Options plugin version 1.3.6 suffers from an unauthenticated shell upload vulnerability that achieves remote code execution. This proof of concept exploit demonstrates the vulnerable request flow against the affected plugin. !/usr/bin/env python3 Explo...

📄 WordPress Enable SVG, WebP and ICO Upload 1.1.2 Shell Upload

WordPress Enable SVG, WebP and ICO Upload plugin version 1.1.2 contains an authenticated Author+ arbitrary file upload to remote code execution vulnerability. A remote attacker can upload executable PHP code and achieve remote code execution. This proof of concept exploit demonstrates the...

Exploit for CVE-2026-60137

Compromise Scanner for wp2shell read-only A standalone, r...

wp2shell

WP2Shell - WordPress REST API Exploitation Framework Automate...

Exploit for CVE-2026-63030

WordPresShell Pre-auth RCE PoC for CVE-2026-63030 + CVE...

Exploit for CVE-2026-60137

Unauthenticated pre-auth RCE PoC for the WordPress wp2shell chai...

CVE-2026-54159 ps_facetedsearch: PHP Object Injection in faceted search cache allows unauthenticated RCE

PrestaShop psfacetedsearch is a module that adds layered navigation filters. From 3.0.0 until 4.0.4, the psfacetedsearch module rebuilds selected search filters from the request URL, and the value of a slider filter, price or weight, is taken from the URL without sufficient validation and stored ...

CVE-2026-54159

PrestaShop psfacetedsearch is a module that adds layered navigation filters. From 3.0.0 until 4.0.4, the psfacetedsearch module rebuilds selected search filters from the request URL, and the value of a slider filter, price or weight, is taken from the URL without sufficient validation and stored ...

EUVD-2026-45327

PrestaShop psfacetedsearch is a module that adds layered navigation filters. From 3.0.0 until 4.0.4, the psfacetedsearch module rebuilds selected search filters from the request URL, and the value of a slider filter, price or weight, is taken from the URL without sufficient validation and stored ...

CVE-2026-54159: Improper Neutralization of Special Elements in Output Used by a Downstream Component

PrestaShop psfacetedsearch is a module that adds layered navigation filters. From 3.0.0 until 4.0.4, the psfacetedsearch module rebuilds selected search filters from the request URL, and the value of a slider filter, price or weight, is taken from the URL without sufficient validation and stored ...

SMB Linux Deploy PHP Webshell

Uploads a PHP command webshell through a writable Samba share. Use when the SMB share is also served by a web server. !/usr/bin/env python3 -- coding: utf-8 -- """Deploy a small PHP webshell through a writable Samba share.""" import os import tempfile from urllib.parse import quote, urlparse from...

Moodle Webshell Plugin

Generate a Moodle local plugin webshell that can be installed under local/ and activated from Site administration Plugins from kittysploit import import os import re import zipfile class ModuleBackdoor: info = 'name': 'Moodle Webshell Plugin', 'description': 'Generate a Moodle local plugin webshe...

Exploit for CVE-2026-48909

CVE-2026-48909-Joomla-SP-Exploit CVE-2026-48909 - Unauthentica...

CVE-2026-61873

Grav before 9.1.8 contains an arbitrary file write vulnerability in the Form plugin's process.save.filename parameter, which is validated against path traversal before Twig processing but never re-validated after rendering. Attackers can submit form data containing path traversal sequences that a...