CVE-2020-9484

Remote Code Execution Exploit in Apache Tomcat 9.0.27 Apache Tomcat 9.0.27 is vulnerable to Remote Code Execution with the CVE-ID CVE-2020-9484. Other versions may be affected as well. Tested on Kali 2020.4 and JDK 8. This bash script is a simpel proof-of-concept. For educational purpose only...

CVE-2024-50623

CVE-2024-50623 Cleo Unrestricted file upload and download PoC CVE-2024-50623 Arbitrary File Write python CVE-2024-50623.py --target http://192.168.1.18:5080/Synchronization --action write --what poc.dll --where "........\poc.dll" / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y...

CVE-2018-11235-PoC

PoC exploit for CVE-2018-11235 repository: http://REDACTED/2018-11235PoC.git/ return: Submodule 'aaa' https://repo1 registered for path 'aaa' Submodule '../../fakegit/modules/evil' https://repo2 registered for path 'evil' Submodule path 'aaa': checked out '9c48e0a785dec84cb252677a8a7d55feaeac056c...

CVE-2026-118235

The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.10.2 via the handleupload function. This is due to missing server-side file key allowlist and pre-sanitization...

CVE-2026-103882

The Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the postdeleteassessmentfilebyid function in all versions up to, and including, 1.1.9. This makes it possible for...

CVE-2017-5638

CVE-2017-5638 Apache Struts 2.3.5 Example:...

CVE-2021-41078

CVE-2021-41078 nameko Arbitrary code execution due to YAML deserialization NVD Description Nameko through 2.13.0 can be tricked into performing arbitrary code execution when deserializing the config file. Demo Set Up 1. Build an image from a Dockerfile docker build -t cve-2021-41078 . 2. Run pyth...

CVE-2019-6447-ES-File-Explorer

CVE-2019-6447: ES File Explorer Unauthenticated HTTP Service An independently implemented, safety-conscious research harness and technical analysis for CVE-2019-6447 , an unauthenticated HTTP service exposed by vulnerable versions of ES File Explorer for Android. Authorized research only. Use thi...

CVE-2022-44268-pilgrimage

CVE-2022-44268 Arbitrary File Read PoC - PNG generator This is a proof of concept of the ImageMagick bug discovered by https://www.metabaseq.com/imagemagick-zero-days/ This is an automated tool for Pilgrimage HackTheBox challenge. This is a fork from https://git.rotfl.io/v/CVE-2022-44268. Tested ...

CVE-2023-46694

CVE-2023-46694 Discovered by: Federico Zambito with Innovery Summary Vtenext 21.02 allows an authenticated attacker to upload arbitrary files, resulting in remote code execution. This flaw exists due to the application's failure to enforce proper authentication controls when accessing the Ckedito...

CVE-2025-66516-Writeup-POC

CVE-2025-66516: Critical XXE Vulnerability in Apache Tika Executive Summary CVE-2025-66516 is a critical XML External Entity XXE injection vulnerability in Apache Tika with a CVSS score of 10.0 maximum severity. The vulnerability allows remote attackers to read arbitrary files, perform Server-Sid...

SecAssignment

CVE-2020-7246 qdPM 9.1 For educational purposes only. See Reference for the details. Run $ git clone https://github.com/arafatansari/SecAssignment.git $ cd SecAssignment $ docker build -t cve-assignment:ine . $ docker run -it -p 80:80 cve-assignment:ine $ service apache2 start | service mysql sta...

CVE-2018-17246

CVE-2018-17246 - Kibana LFI There is no input validation so we can change the name of the JavaScript file to anything we want. In this case, with the path traversal technique, we can choose any file on the Kibana server. One thing to be aware of, however, is node's module caching feature...

CVE-2026-39875-macOS-CUPS-LPE

CVE-2026-39875-macOS-CUPS-LPE Unprivileged user to root via CUPS vulnerability affecting macOS Tahoe, Sequoia, and Sonoma prior to macOS 26.6 / 15.7.8 / 14.8.8. Proof of Concept Demonstrations macOS Tahoe 26.4.1 macOS Sequoia 15.7.5 macOS Sonoma 14.8.5 Root Cause The vulnerability arises from two...

CVE-2023-4357

【CVE-2023-4357】Chrome-XXE Arbitrary File Read Vulnerability Reproduction REPRODUCTION CASE Use files shown above or browse to http://188.68.220.248/js.svg...

CVE-2001-0758

CVE-2001-0758 Directory traversal vulnerability in Shambala 4.5 Packetstorm publication at https://dl.packetstormsecurity.net/0106-exploits/alt3kx-advisories-2001.txt Securiteam publication at http://www.securiteam.com/windowsntfocus/5SP011P4KC.html Author Alex Hernandez aka @alt3kx...

CVE-2020-5398

CVE-2020-5398 - RFDReflected File Download Attack for Spring MVC In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download RFD attack when it sets a “Content-Disposition” header...

CVE-2025-2294

CVE-2025-4403 Exploit Details Published : March 27, 2025 Updated : March 28, 2025 Severity : Critical CVSS Score: 9.8 CWE : CWE-22: CWE-22 Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' Affected Versions : All versions from n/a through 2.5.1 Researcher :...

CVE-2026-83991-writeup-and-poc

CVE-2026-83991: superseding a file that the caller cannot delete I kept these lines next to each other because separating them makes the bug look more complicated than it is: CreateFileW, GENERICWRITE error 5 DeleteFileW error 5 CfCreatePlaceholders, SUPERSEDE SOK per-entry Result SOK The write...

CVE-2024-33775

CVE Discovered by: K. Wahab NeoX Vulnerability Details: Product: Nagios XI Version 2024R1.01 Vulnerability: Privilege Escalation from Users "NAGIOS" or "APACHE" Result: Full root access on the target system CVE: https://vulners.com/cve/CVE-2024-33775 Exploit: RSS Dashlet is used in this example...