Back to the CVE list
CVE-2021-3129 CISA KEV · Actively exploitedLinked to ransomware

Laravel Ignition File Upload Vulnerability

CVSS score

—

EPSS probability

%99.9

Risk score

—

Published

3 y ago

OverviewPublic Exploits (26)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
ambionics/laravel-exploits
GitHub

Exploit for CVE-2021-3129 (★213)

Public PoCSource updated: 21.05.2022 02:47:53
G
SNCKER/CVE-2021-3129
GitHub

Laravel debug rce (★108)

Public PoCSource updated: 06.05.2022 02:07:33
G
zhzyker/CVE-2021-3129
GitHub

Laravel <= v8.4.2 debug mode: Remote code execution (CVE-2021-3129) (★90)

Public PoCSource updated: 13.05.2022 21:53:02
G
nth347/CVE-2021-3129_exploit
GitHub

Exploit for CVE-2021-3129 (★53)

Public PoCSource updated: 12.05.2022 02:38:38
G
knqyf263/CVE-2021-3129
GitHub

PoC for CVE-2021-3129 (Laravel) (★13)

Public PoCSource updated: 04.09.2022 07:05:43
G
joshuavanderpoll/CVE-2021-3129
GitHub

Laravel RCE (CVE-2021-3129) (★10)

Public PoCSource updated: 20.04.2022 16:49:39
G
cuongtop4598/CVE-2021-3129-Script
GitHub

Add revert shell (★5)

Public PoCSource updated: 20.05.2022 19:02:53
G
simonlee-hello/CVE-2021-3129
GitHub

CVE-2021-3129-Laravel Debug mode 远程代码执行漏洞 (★4)

Public PoCSource updated: 06.12.2021 06:01:27
G
0nion1/CVE-2021-3129
GitHub

CVE-2021-3129-Laravel Debug mode (★2)

Public PoCSource updated: 11.10.2022 18:03:56
G
ajisai-babu/CVE-2021-3129-exp
GitHub

Laravel Debug mode RCE漏洞（CVE-2021-3129）poc / exp (★2)

Public PoCSource updated: 05.03.2023 13:43:51
G
914525753/Laravel-CVE-2021-3129
GitHub

CVE-2021-3129 (★1)

Public PoCSource updated: 04.06.2022 20:57:48
G
MadExploits/Laravel-debug-Checker
GitHub

CVE-2021-3129 Exploit Checker By ./MrMad (★1)

Public PoCSource updated: 10.12.2022 13:57:08
G
Y0s9/CVE-2021-3129
GitHub

CVE-2021-3129-Laravel Debug mode 远程代码执行漏洞 (★0)

Public PoCSource updated: 11.04.2021 14:47:44
G
JacobEbben/CVE-2021-3129
GitHub

Unauthenticated RCE in Laravel Debug Mode <8.4.2 (★0)

Public PoCSource updated: 04.09.2022 00:29:49
G
hupe1980/CVE-2021-3129
GitHub

Laravel debug mode - Remote Code Execution (RCE) (★0)

Public PoCSource updated: 01.10.2022 06:03:46
E
Laravel 8.4.2 debug mode - Remote code execution
Exploit-DB

Laravel 8.4.2 debug mode - Remote code execution

Exploit referenceSource updated: 14.01.2021 00:00:00
N
projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3129.yaml
Nuclei

Nuclei: Laravel with Ignition <= v8.4.2 Debug Mode - Remote Code Execution

Exploit reference
G
0x0d3ad/CVE-2021-3129
GitHub

CVE-2021-3129 (Laravel Ignition RCE Exploit)

Public PoC
G
cc3305/CVE-2021-3129
GitHub

A exploit script for CVE-2021-3129

Public PoC
G
cchiaravalentini/CVE-2021-3129
GitHub

Reproduction and patch verification of CVE-2021-3129 (Laravel Ignition RCE) in Docker. University project, Data Privacy and Security, LUISS.

Public PoC
G
CyberCTF/vulhub-laravel-cve-2021-3129
GitHub

Vulhub laravel/CVE-2021-3129: Laravel Ignition RCE (CVE-2021-3129), run with Isoloom

Public PoC
G
Giangdurian/CVE-2021-3129
GitHub

Giangdurian/CVE-2021-3129

Public PoC
G
GodOfServer/CVE-2021-3129
GitHub

GodOfServer/CVE-2021-3129

Public PoC
G
lukwagoasuman/CVE-2021-3129---Laravel-RCE
GitHub

## About The script has been made for exploiting the Laravel RCE (CVE-2021-3129) vulnerability.<br> This script allows you to write/execute commands on a website running <b>Laravel <= v8.4.2</b>, that has "APP_DEBUG" set to "true" in its ".env" file.

Public PoC
G
Prabesh01/hoh4
GitHub

Modified version of laravel ignition RCE (CVE-2021-3129) exploit script for Hour of Hack Session-4

Public PoC
G
theNareshofficial/CVE-2021-3129-Lab
GitHub

CVE-2021-3129: Laravel Debug Mode RCE - Complete exploitation lab with Python exploit, Docker container, and security analysis guide.

Public PoC

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2021-3129"