EUVD-2026-96795

The Piotnet Forms WordPress plugin through 1.0.30 does not authenticate or validate a form-submission file-upload request and permits browser-renderable file types to be stored, allowing unauthenticated attackers to store a file that executes arbitrary JavaScript in the site's origin when it is...

CVE-2026-104028

The Anton Extensions WordPress plugin, in versions up to and including 1.2.2 , is vulnerable to an unauthenticated arbitrary file upload. The flaw exists because the plugin fails to perform capability checks , nonce verification , or file-type validation when writing attacker-supplied content to ...

CVE-2026-104028 Anton Extensions <= 1.2.2 - Unauthenticated Arbitrary File Upload to RCE

The Anton Extensions WordPress plugin through 1.2.2 does not perform any capability check, nonce verification, or file-type validation before writing attacker-supplied content to an attacker-chosen path, allowing unauthenticated attackers to upload arbitrary PHP files and achieve remote code...

EUVD-2026-96738

The Anton Extensions WordPress plugin through 1.2.2 does not perform any capability check, nonce verification, or file-type validation before writing attacker-supplied content to an attacker-chosen path, allowing unauthenticated attackers to upload arbitrary PHP files and achieve remote code...

CVE-2024-31835

CVE-2024-31835 Vulnerabilidad de Cross Site Scripting XSS en flatpress CMS Flatpress v1.3 permite a un atacante remoto ejecutar código arbitrario a través de un payload manipulado en el parámetro file name. Componente afectado: Campo de carga de archivos del panel de administración de FlatPress C...

AttackTomcat

AttackTomcat Vulnerability Detection List CVE-2017-12615 PUT file upload vulnerability tomcat-pass-getshell weak authentication deployment war package Weak password brute force CVE-2020-1938 Tomcat file read/inclusion Usage Before first use, please reset the configuration file in settings. For...

cmsPoc

Attention The project is being refactored: cmsPoc 2.0 Note: The POC library for version 2.0 has not yet been updated with the corresponding interfaces, so it cannot be used. If you need to use it, it is recommended to use version 1.0 first. cmsPoc 1.0 Requirements python2.7 Works on Linux, Window...

php_code_analysis

this script will scan your code the script can find 1. checkfileupload issues 2. hostheaderinjection 3. SQl injection 4. insecure deserialization 5. openredirect 6. SSRF 7. XSS 8. LFI 9. commandinjection features 1. fast 2. simple report usage: python code.py file.php -this will scan one file...

OA-tongda-RCE

OA-tongda-RCE | Office Anywhere Web-based Intelligent Office System Backend Getshell No Authentication Required 1. Arbitrary file upload vulnerability /ispirit/im/upload.php 2. Local file inclusion vulnerability /ispirit/interface/gateway.php Command Execution Bypass: exec"cmd /c ".$command;...

CVE-2018-2894

CVE-2018-2894 CVE-2018-2894 Vulnerabilidad de carga arbitraria de archivos/RCE por acceso no autorizado a WebLogic script de verificación...

CVE-2024-27198-POC

CVE-2024-27198 – Bypass de Autenticación y RCE en JetBrains TeamCity PoC Autor: EynaExp Ámbito: Investigación / Validación Defensiva / Solo Pruebas Autorizadas Resumen Este repositorio contiene un escáner masivo de prueba de concepto dirigido a instancias de JetBrains TeamCity afectadas por...

CVE-2025-55449-AstrBot-RCE

Introducción AstrBot=3.5.17 tiene un JWT secret hardcodeado en el código fuente, lo que permite subir plugins arbitrariamente y lograr RCE Uso python main.py 'http://127.0.0.1:6185' Código fuente https://github.com/AstrBotDevs/AstrBot.git...

exe2powershell

exe2powershell exe2powershell - exe2bat reborn for modern Windows exe2bat reborn in exe2powershell for modern Windows exe2powershell is used to convert any binary file .exe to a BAT file. The resulting BAT file contains only "echo" command and finally a powershell command to re-create the origina...

exploit-CVE-2017-7494

Exploit RCE SambaCry para Samba 4.5.9 Samba es una reimplementación de software libre del protocolo de red SMB/CIFS. Samba proporciona servicios de archivos e impresión para varios clientes de Microsoft Windows y puede integrarse con un dominio de Microsoft Windows Server, ya sea como Controlador...

CloudMiner

CloudMiner Esegui codice all'interno del servizio Azure Automation senza essere addebitato Descrizione CloudMiner è uno strumento progettato per ottenere potenza di calcolo gratuita all'interno del servizio Azure Automation. Lo strumento utilizza il flusso di caricamento dei moduli/pacchetti per...

CVE-2026-3844

CVE-2026-3844 PoC exploit for CVE-2026-3844, a critical unauthenticated file upload vulnerability in the WordPress Breeze plugin leading to RCE. 📌 Overview CVE-2026-3844 is a CRITICAL unauthenticated arbitrary file upload vulnerability in the Breeze Cache WordPr...

CVE-2024-27198-RCE

Dork de mapeo de ciberespacio Fofa app="JETBRAINS-TeamCity" ZoomEye app:"JetBrains TeamCity" Hunter.how product.name="TeamCity" Shodan http.component:"teamcity" Cómo usar Estoy usando Python3.9. pip install requests urllib3 faker python CVE-2024-27198-RCE.py -t http://192.168.198.173:8111...

CVE-2024-53677

CVE-2024-53677 - Entorno de Laboratorio de Análisis de Causa Raíz de Apache Struts 2 Este repositorio proporciona un entorno basado en Docker para reproducir la vulnerabilidad CVE-2024-53677 en Apache Struts 2. Esta vulnerabilidad implica un traversal de ruta a través de la funcionalidad de carga...

CVE-2025-25620

CVE-2025-25620 Unifiedtransform v2.0 es vulnerable a Cross-Site Scripting XSS almacenado en la función "Crear Tarea", lo que permite a los atacantes ejecutar scripts maliciosos en el contexto de las sesiones de otros usuarios. Vendedor: Unifiedtransform PoC Paso 1: Inicie sesión en la aplicación...

SharpWMI

SharpWMI SharpWMI es una implementación en C de varias funcionalidades de WMI. Esto incluye consultas WMI locales/remotas, creación remota de procesos a través de win32process y ejecución remota de VBS arbitrario mediante suscripciones a eventos WMI. También se admiten credenciales alternativas...