CVE-2023-50780

CVE-2023-50780: Dangerous MBeans Accessible via Jolokia API in Apache ActiveMQ Artemis By listing and inspecting the MBeans exposed by the Jolokia API at http://127.0.0.1:8161/console/jolokia the following attack vectors have been identified: Arbitrary File Write using Log4J indirectly resulting ...

INE-Web-Application-Penetration-Testing-CTF-1

INE – Web Application Penetration Testing CTF 1 Overview...

Ruby-On-Rails-Path-Traversal-Vulnerability-CVE-2018-3760-

Ruby On Rails Path Traversal Vulnerability（CVE-2018-3760） 中文版本Chinese version Ruby On Rails is a well-known Ruby Web development framework, which uses Sprockets as a static file server in development environment. Sprockets is a Ruby library that compiles and distributes static resource files. The...

CVE-2026-110251 Photo Reviews for WooCommerce <= 1.2.31 - Unauthenticated File Deletion via 'wcpr_image_upload_id' Parameter

The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized Media Library File Deletion in all versions up to, and including, 1.2.31. This is due to the deletereviewsimage function's deletecomment hook trusting attachment IDs supplied via the wcprimageuploadid POST...

CVE-2026-110251

The Photo Reviews for WooCommerce plugin for WordPress (versions up to and including 1.2.31 ) is vulnerable to unauthorized Media Library File Deletion . The root cause lies in the delete_reviews_image() function's delete_comment hook, which trusts attachment IDs from the wcpr_image_upload_id POS...

EUVD-2026-114611

The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized Media Library File Deletion in all versions up to, and including, 1.2.31. This is due to the deletereviewsimage function's deletecomment hook trusting attachment IDs supplied via the wcprimageuploadid POST...

CVE-2026-79985

CVE-2026-79985 — camel-smb: consumer builds the remote path from the share listing without containment Reproducer repository for the Apache Camel vulnerability where the smb consumer builds the remote path of each polled file by concatenating the configured directory with the name reported in the...

CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit

CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit 🛡️ Description CVE-2026-3891 is a critical Unauthenticated Arbitrary File Upload vulnerability found in the Pix for WooCommerce WordPress plugin in versions up to and including 1.5.0. The vulnerability exists in the lknpixforwoocommercec6savesetting...

CVE-2024-57394

CVE-2024-57394 A vulnerability was identified in the Qi-ANXIN Tianqing Endpoint Security Management System tested on version 10.0. This vulnerability allows low-privilege users to restore a quarantined file to an arbitrary location, such as C:\Windows\System32. An attacker can craft a malicious D...

CVE-2019-11510_poc

CVE-2019-11510 PoC Python script to exploit CVE-2019-11510 and read '/etc/passwd' file Pulse Secure 8.1R15.1/8.2/8.3/9.0 SSL VPN - Arbitrary File Disclosure vulnerability USAGE: python3 CVE-2019-11510.py...

WeblogicScan

WeblogicScan Weblogic one-click vulnerability detection tool, V1.5 Software Author: TideRabbitMask Disclaimer: Pia!ｏ ‵-′ノ”ノ﹏。 This tool is for security testing only, please do not use it for illegal purposes, be good V 1.5 Feature Introduction: Provides one-click poc detection, covering almost al...

CVE-2024-24919-Check-Point-Remote-Access-VPN

CVE-2024-24919-Check-Point-Remote-Access-VPN CVE-2024-24919 is an unauthenticated arbitrary file read vulnerability that can be treated nothing less than a full unauthenticated RCE. An attacker can read any sensitive files located on the affected appliance with superuser access. An attacker can...

CVE-2017-0199-v5.0

Exploit toolkit CVE-2017-0199 - v5.0 Exploit toolkit CVE-2017-0199 - v5.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF/PPSX file and deliver metasploit / meterpreter / other...

CVE-2026-6960

CVE-2026-6960 — BookingPress Pro ≤ 5.6 | Unauthenticated Arbitrary File Upload Research by: Atomic Edge Severity: Critical | CVSS: 9.8 | Auth Required: None ⚠️ v2 — Technical corrections applied based on community feedback. See Changelog for details. Overview A critical unauthenticated arbitrary...

CVE-2023-4220

Chamilo CVE-2023-4220 Exploit The CVE-2023-4220 vulnerability is a file upload vulnerability affecting Chamilo versions = 1.11.24. This vulnerability allows an attacker to achieve remote command execution by uploading a webshell via the path /main/inc/lib/javascript/bigupload/inc/bigUpload.php,...

CVE-2024-53677

This post is a research article published by EQSTLab. CVE-2024-53677 ★ CVE-2024-53677 Unrestricted Upload of File with Dangerous Type and RCE PoC ★ Lab Setup cd docker docker build --ulimit nofile=122880:122880 -m 3G -t cve-2024-53677 . docker run -p 8080:8080 --ulimit nofile=122880:122880 -m 3G...

cve-2021-44228-log4j-test

cve-2021-44228-log4j-test Test 1. LDAP Server and Exploit File Download Server 1.1 Running Docker-compose docker-compose.yml version: '2' services: dockerdj: image: openidentityplatform/opendj:latest containername: ldap environment: ROOTUSERDN: "cn=han" ROOTPASSWORD: "han" BASEDN:...

send

@fastify/send Send is a library for streaming files from the file system as an HTTP response supporting partial responses Ranges, conditional-GET negotiation If-Match, If-Unmodified-Since, If-None-Match, If-Modified-Since, high test coverage, and granular events which may be leveraged to take...

ESLockDecryptor

ESLockDecryptor ESLockDecryptor is a command-line tool designed to recover and decrypt files encrypted by ES File Explorer files with the .eslock extension. It demonstrates the real-world impact of CWE-327 Use of a Broken or Risky Cryptographic Algorithm present in the ES File Explorer applicatio...

CVE-2026-66066-POC

PoC for CVE-2026-66066 - Minimal stock Rails/libvips lab This repository reproduces the Rails Active Storage file-read-to-RCE chain described by GHSA-xr9x-r78c-5hrm against Rails 8.1.3, the newest affected Rails 8.1 release. Rails 8.1.3.1 is the patched control. Use it only in the disposable loca...