TotalCMS-Arbitrary_File-Upload--XSS_Steal_Cookies---TotalDepot

TotalCMS Carga Arbitraria de Archivos - XSS y robo de cookies Autor: Sergio Descripción: TotalCMS está afectado por la vulnerabilidad de Carga Arbitraria de Archivos - XSS que permite Cross-Site Scripting XSS y también el robo de cookies de sesión. Vectores de ataque: Una vulnerabilidad en la...

CVE-2020-14882

CVE-2020-14882 desplegando un memory shell de Behinder Como es bien sabido, CVE-2020-14882 es una vulnerabilidad no autenticada que permite a un atacante ejecutar código arbitrario en el WebLogic Server afectado. En los PoC públicos, el acceso se logra mediante la omisión de caracteres ilegales y...

CVE-2019-2615

CVE-2019-2615 GET /beawlsmanagementinternal2/wlmanagement HTTP/1.1 Host: 192.168.5.137:7001 User-Agent: Mozilla/5.0 Windows NT 6.1; Win64; x64; rv:66.0 Gecko/20100101 Firefox/66.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/ ;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encodin...

CVE-2025-30208-31125-31486-32395

Vite Vulnerability Exploitation Guide CVE-2025-30208/31125/31486/32395 This document summarizes exploitation methods for four arbitrary file read vulnerabilities in the Vite development server, including examples for Linux and Windows systems. Note: For use only in authorized security testing...

[SECURITY] [DLA 4812-1] libio-compress-perl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4812-1 [email protected] https://www.debian.org/lts/security/ Arnaud Rebillout October 02, 2026 https://wiki.debian.org/LTS -...

CVE-2018-15982_EXP_IE

CVE-2018-15982EXP Uso msfvenom -p windows/exec cmd=calc.exe -f raw 86.bin msfvenom -p windows/x64/exec cmd=calc.exe -f raw 64.bin python CVE201815982.py -i 86.bin -I 64.bin Genera exp.swf e index.html. Demo https://twitter.com/Evi1cg/status/1071284773169950721...

vss-fr2system

vss-fr2system Two small tools that turn an arbitrary file read bug on Windows into a SYSTEM shell. vssfreeze/ — creates a Volume Shadow Copy as a standard user , then holds it open so you have time to read the SAM/SECURITY/SYSTEM hives out of it fr2system/ — takes the hives you copied out, decryp...

ActiveMQ_Crack

ActiveMQCrack Resumen Herramienta de detección y explotación de vulnerabilidades de la serie ActiveMQ, incluyendo la vulnerabilidad de contraseña predeterminada de ActiveMQ y la vulnerabilidad de escritura arbitraria de archivos de ActiveMQ CVE-2016-3088, admite detección y explotación por lotes...

CVE-2016-2434

CVE-2016-2434...

VmWare-vCenter-vulnerability

Vulnerabilidades de VMware Lectura arbitraria de archivos no autorizada en VMware vCenter PoC que funciona en versiones anteriores 7.0.2.00100 Consulta de Shodan solo para miembros privados PoC PoC de CVE-2021-21972 | RCE no autorizado en VMware PoC de CVE-2021-21972 PoC de SSRF en VMware | PoC d...

CVE-2024-46987

CVE-2024-46987 – Camaleon CMS Authenticated Path Traversal / Arbitrary File Read CVE-2024-46987 is an authenticated path traversal vulnerability CWE-22 in Camaleon CMS a Ruby on Rails-based content management system. It allows a logged-in user even with low privileges to read arbitrary files on t...

CVE-2025-25279

Security Advisory MMSA-2025-00430 / CVE-2025-25279 Summary After uploading a file to Mattermost Boards, when the fileId parameter is modified and the board is copied, the file now points to and downloads the target file specified in the parameter. Affected Versions: Mattermost instances with Boar...

CVE-2021-39433

CVE-2021-39433 A local file inclusion LFI vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server with the permissions of the configured web-use...

CVE-2026-45504

CVE-2026-45504 Exchange File Read CVE-2026-45504 Exchange File Read Research Blog python3 CVE-2026-45504.py --attacker-ip 192.168.2.238 --attacker-port 9020 --creds [email protected] --password Hawktrace1 --target https://mail.exchange.local --target-file...

EUVD-2026-91157

Improper access control in ManagedProvisioning prior to SMR Sep-2026 Release 1 allows local attackers to install arbitrary applications...

CVE-2022-29464

CVE-2022-29464 WSO2 RCE CVE-2022-29464 exploit and writeup. Details CVE-2022-29464 is critical vulnerability on WSO2 discovered by Orange Tsai. the vulnerability is an unauthenticated unrestricted arbitrary file upload which allows unauthenticated attackers to gain RCE on WSO2 servers via uploadi...

CVE-2023-45878

CVE-2023-45878 GibbonEdu: Escritura arbitraria de archivos para ejecución de una web shell Descripción Este repositorio contiene un exploit para CVE-2023-45878 , una vulnerabilidad de escritura arbitraria de archivos en GibbonEdu. La vulnerabilidad afecta al endpoint rubricsvisualisesaveAjax.php ...

CVE-2019-11510-poc

CVE-2019-11510-poc Pulse Secure SSL VPN Lectura de archivos antes de autenticación Referencia 1. https://hackerone.com/reports/591295 2. https://github.com/projectzeroindia/CVE-2019-11510/blob/master/CVE-2019-11510.sh 3...

CVE-2026-103484

A flaw was found in pgvector. An authenticated database user can trigger an out-of-bounds write during an Inverted File Flat IVFFlat index build operation. This vulnerability may allow the attacker to achieve arbitrary code execution or cause a crash resulting in a denial of service on the databa...

CVE-2026-63292

A flaw was found in httpd's modvhostalias module. A remote attacker can exploit a stack-based buffer overflow by sending a crafted HTTP request with an excessively large Host header to a server using specific virtual hosting configurations. This issue can lead to arbitrary code execution or cause...