CVE-2025-29093-Arbitrary-File-Upload

CVE-2025-29093-Arbitrary-File-Upload This repository reveals a security vulnerability discovered in Motivian Content Management System v.41.0.0. CVE-2025-29093: Arbitrary File Upload This vulnerability was reported to the vendor in accordance with responsible disclosure practices, and to MITRE,...

CVE-2024-43044-POC

Usage Download the JAR package via http://ip:port/jnlpJars/agent.jar Modify the corresponding code in \hudson\remoting\RemoteClassLoader.class Recompile and repackage Need to know the node's secret and name in advance java -jar agent.jar -url http://ip:port/ -secret -name Add the following conten...

CVE-2025-63589

CVE-2025-63589 Reflected XSS in CMSimpleXH index.php path handling Discovered: October 6, 2025 Products: CMSimpleXH open-source flat-file CMS Affected versions: 1.8 CVEs: CVE-2025-63589 Authentication required: None unauthenticated Attack type: Reflected Cross-Site Scripting XSS Estimated CVSS...

pyvex

PyVEX PyVEX is Python bindings for the VEX IR. Project Links Project repository: https://github.com/angr/pyvex Documentation: https://api.angr.io/projects/pyvex/en/latest/ Installing PyVEX PyVEX can be pip-installed: pip install pyvex Using PyVEX import pyvex import archinfo translate an AMD64...

CVE-2025-27591

CVE-2025-27591 - Privilege Escalation via below This repository contains an exploit for CVE-2025-27591 , a privilege escalation vulnerability in the Linux monitoring tool Below. 🛠️ Vulnerability Details CVE : CVE-2025-27591 CVSS Score : 7.8 High Affected Tool : below prior to v0.9.0 Vulnerability ...

CVE-2025-67325

🚨 Unauthenticated Remote Code Execution RCE via File Upload 📌 Overview Project: QloApps Repository: https://github.com/Qloapps/QloApps Affected Versions: = 1.7.0 Vulnerability Class: Unauthenticated Remote Code Execution Severity: Critical CVSS v3.1: Critical 9.8...

CVE-2024-24919

CVE-2024-24919 nuclei template of CVE-2024-24919 This template will help detect the described vulnerability by checking if the system leaks the contents of the /etc/shadow file...

CVE-2024-44623

CVE-2024-44623 In SPX-GC 1.3.0v and below versions, user-controlled input was passed in the exec function of the childprocess module without any sanitization, leading to unauthenticated blind remote code execution. Vulnerability In /routes/routes-api.js, user input received from file param and...

CVE-2025-12399

Alex Reservations: Smart Restaurant Booking = 2.2.3 - Authenticated Admin+ Arbitrary File Upload The WordPress Alex Reservations plugin versions 2.2.3 and prior contains an arbitrary file upload vulnerability that allows authenticated WordPress administrators to upload malicious PHP files to the...

CVE-2023-3824

PHP Malicious Phar File PoC CVE-2023-3824 Description This Proof of Concept PoC demonstrates how to create a malicious Phar file in PHP and trigger a buffer overflow vulnerability. Usage Creating the Malicious Phar File 1. Create a new PHP file e.g., createphar.php and add the following code:...

CVE-2022-39196-

CVE-2022-39196 Black board CMS Escalation of Privileges Blackboard Learn version 1.10.1 allows remote authenticated users to read unintended files by entering student credentials and then directly visiting a certain webapps/bbcms/execute/ URL. Additional Information Step 1: Use a student...

CVE-2021-29447-PoC

CVE-2021-29447-PoC Overview CVE-2021-29447 is an XML External Entity XXE injection vulnerability affecting WordPress versions 5.6–5.7 patched in 5.7.1 when running PHP 8.0+. The vulnerability resides in the getID3 library used for media metadata parsing. WordPress processes WAV file iXML chunks v...

CVE-2020-9484

Apache Tomcat Deserialization Vulnerability CVE-2020-9484 Vulnerable target setup Clone this repository Run docker-compose up -d That's it ! Exploit POC Run curl -v 'http://127.0.0.1:8080/index.jsp' -H 'Cookie: JSESSIONID=../../../../../usr/local/tomcat/cfx File named coldfx gets created in tmp...

CVE-2026-35029-PoC

CVE-2026-35029 — LiteLLM /config/update Broken Access Control LiteLLM 's /config/update endpoint does not check the caller's role privileges. Any authenticated user with a valid API Key without admin privileges can modify the proxy configuration, register malicious Pass-Through endpoints to achie...

cve-2017-7374

cve-2017-7374 To trigger the vulnerability, we need a ext4 file system with encryption support and create a encrypted directory...

BetterAndroRAT

Better Android RAT Dendroid Based Android Remote Access Trojan All responsibilities are at your own risk. Please use it only for research purposes. Feature Remote Update & Install Application Remote WebCam Remote Microphone Record Remote File Management Remote Call & SMS Remote Device Controller...

CVE-2025-2539

POC - CVE-2025-2539 File Away Disclaimer : This Proof of Concept POC is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. It is the end user’s responsibility to obey all applicable local, state, and federal...

CVE-2025-11371

CVE-2025-11371 In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild. This issue impacts Gladinet...

CVE-2023-50564

CVE-2023-50564 CVE-2023-50564 is an RCE vulnerability in Pluck CMS v4.7.18. It is made possible through an arbitrary file upload vulnerability in the /inc/modulesinstall.php component allowing to execute arbitrary code by uploading a malicious .zip file. Usage Before running the exploit, the...

CVE-2022-29072

7-Zip CVE 2022-29072 - Powershell Detection/Mitigation The deletion of the offending CHM file is commented out. Uncommenting causes the script to forcefully delete files - use at your own risk! If submitting a PR with a new hash please provide file as well for verification...