CVE-2025-31324

🔴 CVE-2025-31324 — SAP NetWeaver Visual Composer Unauthenticated File Upload Type: Proof of Concept — Vulnerability Research CVE: CVE-2025-31324 CVSS: 10.0 Critical AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Status: Patched — SAP Security Note 3594142 + 3604119 Added to CISA KEV: May 2025 ⚠️ This PoC...

CVE-2021-3166

An issue was discovered on Asus DSL-N14UB1 v.1.1.2.3805. An attacker can upload any file to the Firmware box as long as it is renamed as SettingsProductName.trx eg. SettingsDSL-N14U-B1.trx. Once the file is loaded, shutdown measures on a wide range of services are triggered as if it were a real...

CVE-2024-8743-PoC

CVE-2024-8743 PoC Background Proof-of-Concept script for WordPress plugin Bit File Manager version = 6.5.7 Authenticated Subscriber+ Limited JavaScript File Upload CVE-2024-8743 vulnerability Information Description: The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for...

CVE-2025-47577

CVE-2025-47577 A proof of concept developed to exploit CVE-2025-47577. Based on PatchStack's article. Usage usage: python CVE-2025-47577.py --help TI WooCommerce Wishlist WordPress plugin = 2.9.2 CVE-2025-47577 PoC positional arguments: FILE local file to upload URLPATH base path of the wish list...

CVE-2025-60655

CVE-2025-60655 - Remote Code Execution RCE via Unrestricted Upload | ---|--- Researchers| DotAdrien Severity| 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Software| Script Pag Description A critical vulnerability in the image upload system allows for Remote Code Execution RCE. The...

CVE-2024-52794-Discourse-Stored-XSS

CVE-2024-52794 – Stored Cross-Site Scripting XSS in Discourse Summary I discovered a stored cross-site scripting XSS vulnerability in Discourse, an open-source forum platform. The vulnerability allows an attacker to execute arbitrary JavaScript in the victim’s browser by injecting a malicious...

CVE-2016-4971

CVE-2016-4971 CVE-2016-4971 Wget 1.18/1.14-13.el7 Client Exploit Wget 1.18 Arbitrary File Upload Exploit AND Wget 1.14-13.el7 Arbitrary File Upload Exploit Modifications by: mbadanoiu Original Exploit Dawid Golunski dawid at legalhackers.com...

CVE-2024-45590-PoC

CVE-2024-45590 - WordPress Plugin RCE PoC Vulnerability Details - CVE: CVE-2024-45590 - CVSS: 9.8 Critical - Type: Unauthenticated RCE via Arbitrary File Upload - Affected: WordPress Plugin Proof of Concept Demonstrates safe RCE exploitation with two commands: 1. id - Command execution proof 2...

CVE-2026-44402

CVE-2026-44402 — Voltronic Power SNMP Web Pro 1.1 Unauthenticated RCE -red.svg Critical Unauthenticated Remote Code Execution CVSS 9.8 — Voltronic Power SNMP Web Pro 1.1 This tool exploits CVE-2026-44402 , a vulnerability in the Voltronic Power SNMP Web Pro 1.1 device that allows unauthenticated...

CVE-2024-2667

InstaWP Connect – 1-click WP Staging & Migration You can use any valid or invalid API Key. overridepluginzip - Path to the zip file which contains malicious WordPress Plugin with a backdoor. Once imported you can access the backdoor via...

CVE-2019-12185

CVE-2019-12185 eLabFTW 1.8.5 is vulnerable to arbitrary file uploads via the /app/controllers/EntityController.php component. This may result in remote command execution. An attacker can use a user account to fully compromise the system using a POST request. This will allow for PHP files to be...

CVE-2021-22204-Gitlab

Gitlab-Exiftool-RCE Original repos : https://github.com/CsEnox/Gitlab-Exiftool-RCE Creds to CsEnox. RCE Exploit for Gitlab 13.10.3 GitLab Workhorse will pass any file to ExifTool. The current bug is in the DjVu module of ExifTool. Anyone with the ability to upload an image that goes through the...

CVE-2024-53677-Analysis

CVE-2024-53677 Analysis This repository contains documentation and lab artifacts prepared for analyzing CVE-2024-53677 in Apache Struts. Overview CVE-2024-53677 is a vulnerability in Apache Struts file upload handling. The issue occurs when filename-related metadata from the legacy...

CVE-2025-46157

CVE-2025-46157 CVE-2025-46157 – Timetrax V1 2025 Remote Code Execution and Privilege Escalation Summary A critical vulnerability was discovered in Timetrax V1 2025 that allows authenticated users to bypass file upload restrictions and achieve remote code execution RCE. The issue exists in the Lea...

CVE-2023-4220

Exploit de ejecución remota de código no autenticada en Chamilo LMS CVE-2023-4220 Resumen Este repositorio contiene un script Bash que explota una vulnerabilidad de ejecución remota de código RCE no autenticada en Chamilo LMS mediante la escritura arbitraria de archivos. La vulnerabilidad está...

WordPress-HT-Contact-CVE-2025-7340-RCE

WordPress HT Contact Form Widget | CVE-2025-7340 File Upload Vulnerability Analysis Vulnerability Location Vulnerability Location: ht-contactform/admin/Includes/Services/FileManager.php Key Function: tempfileupload 1. Main Vulnerability Point: tempfileupload function Line 63 public function...

CVE-2025-8889

Exploit Title: WordPress Compress Then Upload Plugin 1.0.3 Arbitrary File Upload to RCE Date: 2025-07-23 Exploit Author: Muhammed Çelik Vendor Homepage: https://wordpress.com/plugins/compress-then-upload Software Link: https://downloads.wordpress.org/plugin/compress-then-upload.latest-stable.zip...

CVE-2025-12399

Alex Reservations: Smart Restaurant Booking = 2.2.3 - Authenticated Admin+ Arbitrary File Upload The WordPress Alex Reservations plugin versions 2.2.3 and prior contains an arbitrary file upload vulnerability that allows authenticated WordPress administrators to upload malicious PHP files to the...

CVE-2025-6002

Exploit for CVE-2025-6002 This script exploits the authenticated arbitrary file upload vulnerability in VirtueMart 4.4.10 CVE-2025-6002, which is described in this blog post: https://blog.blacklanternsecurity.com/p/doomla-zero-days This script logs in to VirtueMart with the given credentials,...

CVE-2025-34100-demo

CVE-2025-34100-demo Demo web server !NOTE Please note that this is just the PHP files for the website, to understand the CVE better and create a more effective PoC, visit https://nvd.nist.gov/vuln/detail/CVE-2025-34100 These files will not cause the CVE, but rather are the entry point to exploit...