CVE-2024-50379-exp

CVE-2024-50379-exp -t race condition time -u domain -f write webshell Testing found that during the first race condition, there is a high probability that writing will fail. Another race condition is required to write the webshell. Therefore, the script first performs a fixed 6-second race...

CVE-2025-34085

CVE-2025-34085 — WordPress Simple File List Unauthenticated RCE An automated exploit for CVE-2025-34085 duplicate of CVE-2020-36847, a critical unauthenticated remote code execution vulnerability in the WordPress Simple File List plugin versions ≤ 4.2.2. Note: CVE-2025-34085 was rejected by MITRE...

CVE-2025-49132-Mods

CVE-2025-49132 - RCE Simple 📝 Overview This repository contains a specialized exploit for CVE-2025-49132, a critical unauthenticated Remote Code Execution RCE vulnerability in the Pterodactyl Panel prior to v1.11.11. The vulnerability exists in the /locales/locale.json endpoint. By manipulating t...

CVE-2025-12973

S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator = 1.7.7 - Authenticated Editor+ Arbitrary File Upload The WordPress S2B AI Assistant plugin versions 2.47 and prior contains an arbitrary file upload vulnerability that allows authenticated WordPress users with Editor role or...

CVE-2026-3891

Pix for WooCommerce = 1.5.0 - Unauthenticated Arbitrary File Upload CVE-2026-3891 PoC 📜 Description CVE-2026-3891 is an unauthenticated arbitrary file upload vulnerability in the Pix for WooCommerce WordPress plugin. The plugin exposes an AJAX endpoint lknpixforwoocommercec6savesettings that...

Malicious code in py-wormgpt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6f7fef8f962798019886211ac43e0e0660feae94e4396fc7969643400b2fa139 The package installs a persistent job that allows the attacker for exfiltrating files and executing remote code on the victim's machine. --- Category: MALICIOU...

MAL-2026-17886 Malicious code in py-wormgpt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6f7fef8f962798019886211ac43e0e0660feae94e4396fc7969643400b2fa139 The package installs a persistent job that allows the attacker for exfiltrating files and executing remote code on the victim's machine. --- Category: MALICIOU...

CVE-2024-36527

CVE-2024-36527 PoC and Bulk Scanner Overview POC for CVE-2024-36527: puppeteer-renderer v.3.2.0 and before is vulnerable to Directory Traversal. Attackers can exploit the URL parameter using the file protocol to read sensitive information from the server. Based on the security advisory published ...

CVE-2021-43617

CVE-2021-43617 This is a reproduction of PHP Laravel 8.70.1 - Cross Site Scripting XSS to Cross Site Request Forgery CSRF vulnerability Description The vulnerability exploits the fact that we can bypass laravel image file upload functionality to upload arbitary files on the web server which let u...

CVE-2024-33231

Ferozo Webmail XSS Vulnerability via File Upload CVE-2024-33231 Description Ferozo Webmail version 1.1 is vulnerable to Cross-Site Scripting XSS through the file upload functionality. An attacker can exploit this vulnerability by uploading a specially crafted file containing malicious JavaScript...

CVE-2021-22201

CVE-2021-22201 CVE-2021–22201 Arbitrary file read on Gitlab 13.9.0 = Gitlab 13.9.5 Usage python CVE-2021-22201.py url username password 参考 CVE-2021–22201: Arbitrary file read on Gitlab | by Son Nguy3n | Jun, 2021 | tradahacking Project import/export API | GitLab 1132378 Arbitrary file read during...

CVE-2024-23897

CVE-2024-23897 Jenkins CI Authenticated Arbitrary File Read Through the CLI Leads to Remote Code Execution RCE Jenkins is a self-contained open source continuous integration/continuous delivery and deployment CI/CD automation software DevOps tool written in the Java programming language. It is us...

CVE-2023-4220_Chamilo_RCE

CVE-2023-4220 Python exploit for Chamilo Unrestricted File Upload Vuln - CVE-2023-4220 The code contained within the repository is meant for educational purposes only. Description: Unrestricted file upload in big file upload functionality in /main/inc/lib/javascript/bigupload/inc/bigUpload.php in...

CVE-2025-4524

CVE-2025-4524 - Unauthenticated madara-core Wordpress theme LFI WordFence link Description A vulnerability lies in madara's madaraloadmore action, where a template parameter is arbitrary data from the user and passed to PHP's include function. Vulnerability A vulnerability lies in madara's...

PoC_CVE-2023-24055

PoCCVE-2023-24055 How to run ? Edit the $User var in the script and replace value with your Username. Open a PowerShell as administrator and run the script : ./PoCCVE-2023-24055.ps1 After the script execution open KeePass. Result is stored under "C:\Users\yourusername\AppData\Local\Temp\output.xm...

CVE-2025-5058

eMagicOne Store Manager for WooCommerce Warning: Trying to access array offset on false in /home/vagrant/research/Lab1/wp-content/plugins/store-manager-connector/classes/class-emosmcwoocommerceoverrider.php on line 324 Warning: Trying to access array offset on false in...

CVE-2022-41401

OpenRefine = v3.5.2 SSRF OpenRefine v=3.5.2 contains a Server-Side Request Forgery SSRF vulnerability, which permits unauthorized users to exploit the system, potentially leading to unauthorized access to internal resources and sensitive file disclosure. The root cause of this vulnerability lies ...

ColdFusion_EXp

CVE-2023-29298/CVE-2023-26360 Vulnerability Exploitation Reverse Shell Tool Introduction The vulnerability principle is that when we construct CFML data, the client's request data is saved to the server's coldfusion-out.log. This directory records error information from requests. The...

CVE-2025-4603

eMagicOne Store Manager for WooCommerce = 1.2.5 - Unauthenticated Arbitrary File Deletion The eMagicOne Store Manager for WooCommerce plugin exposes a remote management protocol endpoint ?connector=bridge that allows file deletion operations on the server. The authentication mechanism relies on a...

PYSEC-2026-4293 pyLoad: Lack of Input Size Validation Leads to Denial of Service (DoS) and Process Termination

Description: The API rpc function in apiblueprint.py handles multipart/form-data uploads by reading the whole content of the uploaded file into memory with file.read. This occurs before the data is sent to the underlying function. Since there is no size limit set at this point, a large file uploa...