check_38077

File Name: check38077.exe MD5: 3083C2EA88558D2853FC12214BD3C714 SHA1: 1DF92598CA45B788BA9ED841F5A529AD3F6F85CB SHA256: 7B8AB88220D02A125ACB02E38AF3F4DE71FD6425B2C48D310ABE11603BA633B9 CRC32: F444BBAC...

By-Poloss..-..CVE-2026-39938

CVE-2026-39938: Cacti = 1.2.30 - Unauthenticated LFI Executive Summary Field| Value ---|--- CVE ID| CVE-2026-39938 CVSS Score| 9.8 Critical Affected Product| Cacti Affected Versions| = 1.2.30 Patched Version| 1.2.31 Fix Commit| 9871f0c Vulnerability Details Root Cause The vulnerability exists in...

CVE-2024-23897

CVE-2024-23897 Jenkins CI Authenticated Arbitrary File Read Through the CLI Leads to Remote Code Execution RCE Jenkins is a self-contained open source continuous integration/continuous delivery and deployment CI/CD automation software DevOps tool written in the Java programming language. It is us...

CVE-2025-54236

Adobe Magento SessionReaper LFI PoC A simple Python proof-of-concept demonstrating the CVE-2025-54236 SessionReaper vulnerability affecting vulnerable Adobe Magento versions. Educational and authorized security testing only. Features Automatic target URL normalization Random formkey generation Fi...

ActiveMQ_Crack

ActiveMQCrack Overview ActiveMQ series vulnerability detection and exploitation tool, including ActiveMQ default password vulnerability and ActiveMQ arbitrary file write vulnerability CVE-2016-3088, supports batch detection and exploitation. Usage Batch detection: Write the URLs to be detected li...

CVE-2022-32114

Strapi v4.1.12 Vulnerability Explanation: An unrestricted file upload vulnerability in the Add New Assets function of Strapi v4.1.12 allows attackers to execute arbitrary code via a crafted file Attack Vectors: After uploading a file containing malicious content, when the user opens the link to t...

CVE-2006-2842

Badges License MIT Installation Install cve-2006-2842 with npm npm install cve-2006-2842 -g Usage Example for single url cve-2006-2842 -u http://example.com Usage Example for list of urls cve-2006-2842 -l urls.txt -o out.txt Screenshots Help menu Get all items 👋 Hey karthithehacker...

CVE-2025-5394

🚨 CVE-2025-5394 - Unauthenticated Arbitrary Plugin Upload in Alone Theme 📌 Affected Product: Alone – Charity Multipurpose Non-profit WordPress Theme Versions: 🚀 Example Usage: python3 CVE-2025-5394.py -help usage: CVE-2025-5394.py...

CVE-2021-43798-Grafana-Exp

Grafana V8. Arbitrary File Read Exploit – Batch Verification Script Vulnerability Description Grafana is an open-source metrics analysis and visualization suite. It is commonly used as a visualizer for time series data and application analytics in infrastructure, and is also widely adopted in oth...

CVE-2025-6440

CVE-2025-6440 WooCommerce Designer Pro = 1.9.26 - Unauthenticated Arbitrary File Upload Description WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services WordPress theme, is vulnerable to arbitrary file uploads due to missing file type validation i...

CVE-2026-54424

CVE-2026-54424 Exploiting Parsec for Windows versions 150-104a to gain: Remote code execution as SYSTEM Arbitrary file read as SYSTEM NTLM hash capture for SYSTEM The exploits stem from the same vulnerability, but the actual paths diverge. Technical writeup:...

CVE-2023-20178

CVE-2023-20178 This is PoC for Arbitrary File Delete vulnerability in Cisco Secure Client tested on 5.0.01242 and Cisco AnyConnect tested on 4.10.06079. When a user connect to vpn, vpndownloader.exe process is started in background and it will create directory in c:\windows\temp with default...

CVE-2025-12674

CVE-2025-12674 KiotViet Sync = 1.8.5 - Unauthenticated Arbitrary File Upload 🐚 KiotViet Sync = 1.8.5 - Unauthenticated Arbitrary File Upload 📝 Description The KiotViet Sync plugin for WordPress versions up to and including 1.8.5 is vulnerable to arbitrary file uploads, due to missing file type...

CVE-2019-7216

CVE-2019-7216 In filechucker.cgi version 5.09 and filechuckerprefs.cgi version 4.99e-free-e02 there is a filter bypass, upon upload, that can lead to remote code execution providing that the user uploads a malicious file. The bypass occurs when filechucker attempts to filter out the file extensio...

POC-CVE-2025-54988

CVE-2025-54988 - POC Disclaimer: I am not the original discoverer of this vulnerability. This post documents my process of reproducing the issue in a controlled environment for educational purposes and to help others validate their own systems. The tests were conducted in an isolated lab with no...

ExportDumper

ExportDumper A small tool I made to dump the export table of PE files. The primary use case was intended for use within DLL proxying. Usage .\ExportDump dllpath e.g. .\ExportDump C:\Windows\System32\version.dll Dumping all 17 exported functions from C:\windows\system32\version.dll. + Dumping done...

CVE-2026-8713

CVE-2026-8713 — Avada Fusion Builder WordPress Exploit Pre-Auth Path Traversal → Arbitrary File Delete → Force Reinstall → RCE Overview CVE-2026-8713 is a CVSS 9.1 critical vulnerability in the Avada Fusion Builder plugin/theme for WordPress. The maybedeletefiles function in the FusionFormDBEntri...

Vmware_vCenter

VMware vCenter 低版本存在未授权任意文件读取漏洞 Arbitrary File Read vulnerability in VMware vCenterUnauthenticated Poc from: https://twitter.com/ptswarm/status/1316016337550938122 e.g. https://www.jas502n.com/eam/vib?id=C:\ProgramData\VMware\vCenterServer\cfg\vmware-vpx\vcdb.properties...

CVE-2021-3129---Laravel-RCE

CVE-2021-3129---Laravel-RCE About The script has been made for exploiting the Laravel RCE CVE-2021-3129 vulnerability. This script allows you to write/execute commands on a website running Laravel , that has "APPDEBUG" set to "true" in its ".env" file...

DEBIAN-CVE-2026-120210

FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in the IMF demuxer that allows attackers to open files outside the package via unvalidated ASSETMAP Path elements. Attackers can supply a crafted IMF package with '..' or absolute paths to demux local MXF files, probe file existence...