489388 matches found
CVE-2026-92247
SynaptikCMS File Manager — Authenticated RCE Vulnerability SynaptikCMS File Manager Authenticated Remote Code Execution SynaptikCMS's file manager allows an authenticated attacker to upload a file and subsequently rename it to a PHP file. This upload and rename behavior can be abused to place...
CVE-2025-27817
Disclaimer: The vulnerabilities and reproduction steps described in this document are for cybersecurity research and educational purposes only. No one may use the information provided in this document for illegal purposes or unauthorized system testing. The author assumes no liability for any...
CVE-2025-24813
🚨 CVE-2025-24813 – Apache Tomcat PUT JSP RCE Exploit This repository contains a complete proof-of-concept PoC for CVE-2025-24813 , a Remote Code Execution RCE vulnerability in Apache Tomcat using the HTTP PUT method to deploy a malicious JSP web shell. 🔥 This exploit demonstrates how an attacker...
CVE-2018-7600
CVE-2018-7600 CVE-2018-7600 Exploit Change TARGET in exploit.py $ python3 exploit.py Success: Check http://127.0.0.1:8080/hello.txt...
dnssearch
dnssearch This software is a subdomain enumeration tool. Purpose dnssearch takes an input domain -domain parameter and a wordlist -wordlist parameter , it will then perform concurrent DNS requests using the lines of the wordlist as sub domains eventually bruteforcing every sub domain available on...
pfsense-cp-filename-xss
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · pfsense-cp-filename-xss pfsense-cp-filename-xss Class: XSS Reach: Remote pfSense CE 2.9.0-DEVELOPMENT 9363ac5 - pfsense.org Filename interpolates into / CSS url... on default login HTML with no encode. Portal origin i...
proftpd-site-copy-dest-follow
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · proftpd-site-copy-dest-follow Write-up: https://abraxaslabs.tech/research/proftpd-site-copy-dest-follow proftpd-site-copy-dest-follow Class: Privilege leftover / File write Reach: Remote ProFTPD 1.3.9d f59f248 -...
abstractshimmer
ABSTRACT SHIMMER CVE-2020-15257 This repo contains proof-of-concept exploit code for CVE-2020-15257 as described in our blog post. While written for containerd 1.2.x and 1.3.x, it should work on pre-patch versions of containerd 1.4.x. $ go build $ docker build -t abstractshimmer . $ docker run --...
CVE-2026-81648
abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-81648 Write-up: https://abraxaslabs.tech/research/CVE-2026-81648 CVE-2026-81648 CryptoPayment Gateway 1.2.2 - Granwill I am @abraxasnull. Loopback lab. The client is CVE-2026-81648-Abraxas-Labs.py. The guard...
CVE-2026-96515
CVE-2026-96515: authenticated root command execution in Netlink HG323RW An authenticated limited web user can upload a shell script through the Netlink HG323RW diagnostic import handler and have the UID-0 BOA process execute it. Authentication and valid verification/CSRF values are required; this...
EUVD-2026-112629
The Chat AI with Dispatcher WordPress plugin before 2.4 does not properly validate uploaded files, relying only on a spoofable client-supplied content type, allowing unauthenticated attackers to upload arbitrary files, including PHP, which can lead to remote code execution...
CVE-2026-115245
The Chat AI with Dispatcher WordPress plugin (versions before 2.4 ) contains an unauthenticated arbitrary file upload vulnerability. The root cause is insufficient validation of uploaded files, as the plugin relies on a spoofable client-supplied content type. This allows an attacker to upload arb...
CVE-2026-115245 Chat AI with Dispatcher < 2.4 - Unauthenticated Arbitrary File Upload
The Chat AI with Dispatcher WordPress plugin before 2.4 does not properly validate uploaded files, relying only on a spoofable client-supplied content type, allowing unauthenticated attackers to upload arbitrary files, including PHP, which can lead to remote code execution...
EUVD-2026-112627
The Automated Import Products to Cart WordPress plugin before 1.0.4 does not sanitize a user-supplied file path before using it to read and delete files, allowing users with minimal permissions, such as subscribers, to read arbitrary files including ones containing the database credentials and...
CVE-2026-113617 Automated Import Products to Cart < 1.0.4 - Subscriber+ Arbitrary File Read and Deletion via Path Traversal
The Automated Import Products to Cart WordPress plugin before 1.0.4 does not sanitize a user-supplied file path before using it to read and delete files, allowing users with minimal permissions, such as subscribers, to read arbitrary files including ones containing the database credentials and...
CVE-2026-113617
The Automated Import Products to Cart WordPress plugin (versions prior to 1.0.4 ) is vulnerable to arbitrary file read and deletion due to a path traversal flaw (CWE-22). The application fails to sanitize user-supplied file paths before using them in file system operations. This allows users with...
CVE-2026-103693
The Frontend Dashboard WordPress plugin (before 3.0.5 ) and the ProfileGrid WordPress plugin (before 6.0.0.5 ) are vulnerable to an unauthenticated PHP object injection vulnerability. The root cause is a failure to prevent unauthenticated users from storing a serialized PHP object in user metadat...
EUVD-2026-112616
The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before 6.0.0.5 do not prevent an unauthenticated user from storing a serialized PHP object in user metadata that is deserialized when a public profile is viewed, allowing PHP object injection that can lead to...
OSXAuditor
OS X Auditor OS X Auditor is a free Mac OS X computer forensics tool. OS X Auditor parses and hashes the following artifacts on the running system or a copy of a system you want to analyze: the kernel extensions the system agents and daemons the third party's agents and daemons the old and...
CVE-2026-103693 Frontend Dashboard < 3.0.5 and ProfileGrid < 6.0.0.5 - Unauthenticated PHP Object Injection
The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before 6.0.0.5 do not prevent an unauthenticated user from storing a serialized PHP object in user metadata that is deserialized when a public profile is viewed, allowing PHP object injection that can lead to...