TagsTags

file-upload

1 entry1 entrada

exploitJul 12, 2026CVE-2025-27515
CVE-2025-27515: Laravel file-upload validation bypass — polyglot JPEG/PHP PoC
A PoC lab for CVE-2025-27515: bypassing Laravel's array/wildcard file-upload validation with a JPEG+PHP polyglot to smuggle a webshell past MIME and extension filters, driven by a Python exploit against a vulnerable upload endpoint.
cvelaravelfile-uploadwebshellpoc

exploit12 jul 2026CVE-2025-27515
CVE-2025-27515: bypass de validação de upload no Laravel — PoC com polyglot JPEG/PHP
Um lab de PoC para a CVE-2025-27515: burlando a validação de upload por array/wildcard do Laravel com um polyglot JPEG+PHP para passar uma webshell pelos filtros de MIME e extensão, com um exploit em Python contra um endpoint de upload vulnerável.
cvelaravelfile-uploadwebshellpoc

All tags →Todas as tags →