CVE-2025-69906-Monstra-CMS-3.0.4-Arbitrary-File-Upload-to-RCE

make it a readme.md to paste into it CVE-2025-69906: Monstra CMS 3.0.4 Arbitrary File Upload to RCE Author : David PS Abraham Date : February 5, 2026 Severity : Critical - Remote Code Execution CVSS 8.8+ CWE : 434 Unrestricted Upload of File with Dangerous Type Vulnerability Description Monstra C...

testdisk

TestDisk checks the partition and boot sectors of your disks. It is very useful in recovering lost partitions. It works with: DOS/Windows FAT12, FAT16 and FAT32 NTFS Windows NT/2K/XP Linux Ext2 and Ext3 BeFS BeOS BSD disklabel FreeBSD/OpenBSD/NetBSD CramFS Compressed File System HFS and HFS+,...

CVE-2019-2618

PoC POST /beawlsdeploymentinternal/DeploymentService HTTP/1.1 Host: 127.0.0.1:7001 User-Agent: Mozilla/5.0 X11; Ubuntu; Linux i686; rv:20.0 Gecko/20100101 Firefox/20.0 Accept: text/html, image/gif, image/jpeg, /; q=.2 Connection: keep-alive username: weblogic password: weblogic wlrequesttype:...

Webmin-CVE-2022-0824-revshell

Webmin-CVE-2022-0824-revshell Vulnerability Description Webmin 1.984 and below - File Manager privilege exploit CVE-2022-0824 and CVE-2022-0829 Less privileged Webmin users who do not have any File Manager module restrictions configured can access files with root privileges, if using the default...

CVE-2023-26255-6

Jira plugin STAGIL Navigation FileName Parameter Arbitrary File Read Vulnerability POC Script Usage as follows: Single URL Detection 1. Use the command line to detect a single URL, pass the URL parameter with -U 2. Observe the returned result; if it shows "is vulnerable!", then the vulnerability...

CVE-2026-48908-Joomla-SP-Page-Builder-RCE

🛡️ CVE-2026-48908 Analysis Unauthenticated Arbitrary File Upload to RCE in JoomShaper SP Page Builder -critical?style=for-the-badge&logo=alert -black?style=for-the-badge&logo=github A comprehensive technical breakdown of an unauthenticated remote code execution vulnerability. 📌 Executive Summary...

CVE-2020-12800

CVE-2020-12800 POC Script for CVE-2020-12800: RCE through Unrestricted File Type Upload Vulnerable plugin for testing hosted at: https://mega.nz/file/aQUClQKCZYeiTYSrPuRnwwlRavy4cqfEXs34Tkq6KQig2RcOas Pentester Academy lab...

CVE-2026-1405

CVE-2026-1405 Slider Future = 1.0.5 - Unauthenticated Arbitrary File Upload 🚀 CVE-2026-1405.py — Slider Future Mass Exploit Tool 🩸 Vulnerability Overview Component: Slider Future WordPress plugin Affected Versions: ≤ 1.0.5 Vulnerability: Unauthenticated Arbitrary File Upload CVE: CVE-2026-1405 CV...

CVE-2024-4367-hands-on-01

!IMPORTANT This repository is for learning about vulnerabilities. Perform this hands-on only on an appropriate computer that you manage. Never engage in illegal activities. The author accepts no responsibility or liability for any damage arising from this repository. CVE-2024-4367-hands-on A...

CVE-2024-24919-POC

CVE-2024-24919-POC Read about it - https://nvd.nist.gov/vuln/detail/CVE-2024-24919 The vulnerability allows an unauthenticated remote attacker to read the contents of an arbitrary file located on the affected appliance. Nuclei Template:...

CVE-2022-46364-Proof-of-the-concept

CVE-2022-46364: Apache CXF MTOM XOP:Include SSRF to LFI Exploit ⚠️ DISCLAIMER THIS TOOL IS FOR EDUCATIONAL AND AUTHORIZED SECURITY TESTING ONLY This proof-of-concept exploit is provided for educational purposes to help security professionals understand the vulnerability and protect their systems...

domhttpx

domhttpx is a google search engine dorker with HTTP toolkit built with python, can make it easier for you to find many URLs/IPs at once with fast time. List Install Usage Flags Basic Usage One Keyword Multiple Keyword Extract Title Page Extract Title Page from Real Path Extract Status Code Extrac...

sleuthkit

The Sleuth Kit INTRODUCTION The Sleuth Kit is an open source forensic toolkit for analyzing Microsoft and UNIX file systems and disks. The Sleuth Kit enables investigators to identify and recover evidence from images acquired during incident response or from live systems. The Sleuth Kit is open...

binwalk

Binwalk v3 This is an updated version of the Binwalk firmware analysis tool, re-written in Rust for speed and accuracy. What does it do? Binwalk can identify, and optionally extract, files and data that have been embedded inside of other files. While its primary focus is firmware analysis, it...

CVE-2024-27630

CVE-2024–27630 Vulnerability Details Overview In Savane v3.12 and prior, a lack of validation on the fileid parameter when deleting a file from /bugs/index.php leads to an Insecure Direct Object Reference IDOR vulnerability that can cause an authenticated administrator of a group with a bug track...

CVE-2012-2982

CVE-2012-2982 John Hammond | September 4th, 2021 Checking searchsploit for Webmin 1.580 I only saw a Metasploit module for the /file/show.cgi Remote Code Execution attack on that legacy Webmin version. This code is an attempt to recreate that in Python without using Metasploit. Files...

CVE-2024-53677

CVE-2024-53677 - Apache Struts 2 Root Cause Analysis Lab Environment This repository provides a Docker-based environment to reproduce the CVE-2024-53677 vulnerability in Apache Struts 2. This vulnerability involves path traversal through the file upload functionality in Struts 2. Source This lab...

CVE-2021-41773-PoC

CVE-2021-41773 Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 This script test Apache HTTP Server 2.4.49 Usage: CVE-2021-41773.py options Only for one IP: python CVE-2021-41773.py IPaddress Option -f For IP list in file Example: python CVE-2021-41773.py -f...

BOF_ExecuteAssembly

BOF Execute-Assembly Beacon Object File for Cobalt Strike that executes .NET assemblies in beacon with evasion techniques. Overview Core Architecture ┌──────────────────────────────────────────────────────────────────────────────┐ │ Cobalt Strike Beacon │ │ Parent Process │...

CVE-2026-36851

CVE-2026-36851 Path traversal / arbitrary file read in UnPoller v2.33.0 via the file:// password prefix. File contents are read from disk and transmitted to the configured UniFi controller URL during authentication. | ---|--- CVE| CVE-2026-36851 Product| UnPoller v2.33.0 earlier versions likely...