CVE-2023-4220-RCE

CVE-2023-4220-RCE Resumen Aviso de Starlabs Producto afectado: Chamilo , -p --port REMOTE PORT -c --comand Banderas para reverse shell -lh/--localhost: IP del atacante -lp/--localtcat listener port...

VcenterKiller

VcenterKiller -1. Note For those setting up a vulnerable environment locally, using vckiller to verify log4j will mostly fail, because under VMware's NAT mode, the outgoing network interface in the verification module will be determined as 127.0.0.1, causing the target's LDAP Server address to...

CVE-2023-37756-CWE-521-lead-to-malicious-plugin-upload-in-the-i-doit-Pro-25-and-below

CVE-2023-37756 – Weak Password Requirement in admin-center lead to malicious plugin upload in the i-doit Pro 25 and below i-doit Pro 25 and below are vulnerable to weak password requirement vulnerability in admin-center + malicious plugin upload lead to RCE vulnerability. These vulnerabilities...

CVE-2020-7115

CVE-2020-7115 Create your malicious engine in seconds buildengine.sh Simple script to generate a malicious engine ready to be used in openssl argument injection scenarios. How to use? It's very simple, just modify the engine.c file with the command of your choice: include attributeconstructor...

CVE-2026-38526-POC

CVE-2026-38526 - Krayin CRM RCE Exploit Krayin CRM ≤ 2.2.x - Unrestricted File Upload leading to Remote Code Execution. This PoC exploits the vulnerable TinyMCE upload endpoint /admin/tinymce/upload to upload a PHP webshell and achieve command execution on the server. Features Full automatic logi...

Chamilo-LMS-Unauthenticated-File-Upload-CVE-2023-4220

Chamilo-LMS-Unauthenticated-File-Upload- Unrestricted file upload in big file upload functionality in /main/inc/lib/javascript/bigupload/inc/bigUpload.php in Chamilo LMS ' dollarboysushil.php .png We can then upload this file by issuing following command $ curl -F '[email protected]'...

tomcat-cve-2017-12617

Tomcat CVE-2017-12617 Exploit/PoC Apache Tomcat 9.0.1 Beta / 8.5.23 / 8.0.47 / 7.0.8 - JSP Upload Bypass / Remote Code Execution for Python3 I just made a few adjustments to the original script to be compatible with Python 3! If there's any problems or issues faced, feel free to shoot me an email...

CVE-2022-41840-PoC

Zenario CMS 9.3 - Unauthenticated RCE Exploit CVE-2022-41840 An unauthenticated remote code execution RCE vulnerability affecting Zenario CMS version 9.3 and earlier. The exploit leverages a file upload vulnerability in the AJAX endpoint to upload a PHP webshell and achieve code execution...

CVE-2025-43990-Magento-RCE

Magento APSB25-94 — Unauthenticated File Upload to RCE Overview Exploits unauthenticated file upload in Magento / Adobe Commerce via REST API guest cart customoptions file upload. Attack Chain 1. GraphQL → leak product SKU 2. REST API → create guest cart 3. REST API → upload PNG polyshell via...

cve-2025-8110-GOGS-RCE

GOGS RCE cve-2025-8110 Gogs is a lightweight and self-hosted Git service similar to a private version of GitHub, designed to run easily on low-resource servers. The CVE-2025-8110 vulnerability is a critical security flaw that allows an attacker to bypass path restrictions by using symlinks. By...

CVE-2021-29447-POC

CVE-2021-29447 Proof of Concept Proof of Concept for CVE-2021-29447 written in Python. Details about the CVE can be found at https://vulners.com/cve/CVE-2021-29447 Disclaimer This script is a PoC for authorized ethical security testing only. Usage usage: python3 CVE-2021-29447.py -h --url URL...

CVE-2021-44967

CVE-2021-44967 - RCE autenticado privilegiado La ejecución remota de comandos autenticada privilegiada en LimeSurvey Versión 5.2.4 mediante la carga e instalación de complementos permite a un usuario remoto cargar un archivo de código PHP arbitrario. Uso python3 exploit.py --url --user --password...

CVE-2025-6085

Make Connector shello.php ".shellexec$GET"cmd".""; ? EOF curl -k -X POST https://lab1.hacker/wp-json/wp/v2/media \ -H "IWC-API-KEY: YOURFRIENDLYKEYHERE" \ -F "[email protected]" \ -F "title=Hacker World" \ -F "description=A test file" \ -F "caption=Hacker Caption" \ Leveraging the shell once...

CVE-2024-9756

🚀 WooCommerce Arbitrary File Upload Exploit CVE-2024-9756 📌 Overview This exploit leverages an unauthorized limited arbitrary file upload vulnerability in the Order Attachments for WooCommerce plugin versions 2.0 to 2.4.1 for WordPress. The vulnerability allows authenticated users Subscriber+ to...

CVE-2017-12615-EXP

CVE-2017-12615-EXP .\CVE-2017-12615.exe @@@@@@@ @@@ @@@ @@@@@@@@ @@@@@@ @@@@@@ @@@ @@@@@@@@ @@@ @@@@@@ @@@@@ @@@ @@@@@@@ !@@ @@! @@@ @@! @@ @@@ @@! @@@ @@@@ @@! @@@@ @@ @@@ @@!@ @@@@ !@@ !@! @!@ !@! @!!!:! @!@!@!@! .!!@! @!@ !@! !@! @!! @!@!@!@! !@! .!!@! @!@!@!@ !@! !!@@!! :!! !: .:! !!: !!: !!:...

weevely3

Weevely - Weaponized web shell Description Weevely is a web shell designed for post-exploitation purposes that can be extended over the network at runtime. Upload weevely PHP agent to a target web server to get remote shell access to it. It has more than 30 modules to assist administrative tasks,...

CVE-2014-4725

CVE-2014-4725 this script is used to scan and exploit cve-2014-4725 vulnerability mailpoet/wysija newsletters in wordpress. features scan mode detect wordpress targets vulnerable to cve-2014-4725 exploit mode upload a zip payload to vulnerable targets installation 1. clone the repository: git clo...

vaultize_CVE-2024-36079

About Vulnerability The on-premise Vaultize DRM v.21.07.27 is vulnerable to the upload of arbitrary files. Files whose names contain part of the absolute path of the file system may be uploaded due to the lack of filename filtering. When you try to download the files the application creates a...

CVE-2021-1675

CVE-2021-1675 Modified from https://github.com/sailay1996/PrintNightmare-LPE, supports remote exploitation. 1. Upload PrintNightmareLPE.exe and vlib.dll to the remote server, then execute PrintNightmareLPE.exe. 2. Set up port forwarding locally: netsh interface portproxy add v4tov4 listenport=313...

CVE-2024-51568---CyberPanel-Command-Injection-Nuclei-Template

CVE-2024-51568 - CyberPanel Command Injection PoC A proof-of-concept environment and Nuclei template for testing CVE-2024-51568, a critical pre-authentication command injection vulnerability in CyberPanel. Vulnerability Details CVE: CVE-2024-51568 Severity: Critical CVSS 9.8 Type:...