CVE-2026-75865

CVE-2026-75865 — WPLP Cookie Consent gdpr-cookie-consent ≤ 4.4.1 Proof-of-concept и техническое описание для CVE-2026-75865 — неаутентифицированная произвольная загрузка файлов, приводящая к удалённому выполнению кода в плагине WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CC...

CVE-2023-5360

CVE-2023-5360 Elementor File Upload Exploit The Royal Elementor Addons and Templates WordPress plugin before 1.3.79 does not properly validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE. / / | / / / / / | | / / / / / | |/ /// /...

covert-control

covert-control Contrôlez des systèmes à distance en téléchargeant des fichiers vers Google Drive, OneDrive, YouTube ou Telegram en utilisant Python pour créer les fichiers et les écouteurs. Il permet de créer des fichiers texte, des images, de l'audio ou des vidéos, avec les commandes en clair ou...

CVE-2023-5360-exploit-with-native-libraries

Royal Elementor Addons ≤ 1.3.78 – Unauthenticated Arbitrary File Upload RCE 📌 Overview This repository contains a modified proof-of-concept exploit for the WordPress plugin Royal Elementor Addons and Templates versions ≤ 1.3.78. The vulnerability allows unauthenticated arbitrary file upload , whi...

CVE-2019-19634

CVE-2019-19634 - class.upload.php = 2.0.4 Arbitrary file upload Author - Jinny Ramsmark Affected vendor - Verot.net Affected product - class.upload.php = 2.0.4 Tested on newly installed Ubuntu 14.04 with PHP5 and Apache Specifically Debian/Ubuntu has been found to be vulnerable since they add the...

CVE-2020-24186-wpDiscuz-7.0.4-RCE

POC CVE-2020-24186-wpDiscuz-7.0.4-RCE WordPress wpDiscuz 7.0.4 Remote Code Execution A Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4 for WordPress, which allows unauthenticated users to upload any type of file, including PHP files via the...

RAU_crypto

RAUcrypto Combined exploit for Telerik UI for ASP.NET AJAX. File upload for CVE-2017-11317 and CVE-2017-11357 - will automatically upload the file .NET deserialisation for CVE-2019-18935 Now supports testing for the target's ability to pull in remote payloads from an attacker-hosted SMB service...

PageMyadmin_file_upload_getshell

В этом репозитории нет README...

php_filter_chain_generator

Генератор цепочек PHP-фильтров CLI-генератор цепочек PHP-фильтров: получайте RCE без загрузки файла, если вы полностью контролируете параметр, передаваемый в require или include в PHP! Использование Справка $ python3 phpfilterchaingenerator.py --help usage: phpfilterchaingenerator.py -h --chain...

CVE-2022-29464

CVE-2022-29464 WSO2 RCE CVE-2022-29464 exploit and writeup. Details CVE-2022-29464 is critical vulnerability on WSO2 discovered by Orange Tsai. the vulnerability is an unauthenticated unrestricted arbitrary file upload which allows unauthenticated attackers to gain RCE on WSO2 servers via uploadi...

CVE-2024-6366

To create a Metasploit module to exploit the RCE vulnerability in the User Profile Builder WordPress plugin before version 3.11.8, we need to take advantage of the lack of proper authorization in the media file upload functionality. Here is how you can create such a Metasploit module: Metasploit...

CVE-2024-21546

CVE-2024-21546 Python Exploit 🔥 Description This Python exploit script targets a vulnerable Laravel Filemanager created by UniSharp , which allows authenticated users to bypass file restrictions and upload malicious files. This can lead to Remote Code Execution RCE when the uploaded payload is...

CVE-2021-40870

CVE-2021-40870 Unrestricted upload of file with dangerous type in Aviatrix allows an authenticated user to execute arbitrary code...

CVE-2022-29464

CVE-2022-29464 A preauth arbitrary file upload that leads to RCE in WSO2 Summary of the CVE CVE-2022-29464 is a RCE vulnerability for WSO2 discovered by Orange Tsai. A unauthenticated arbitrary file upload allows an attacker to execute code by uploading a malicious JSP file. Affected Versions WSO...

CVE-2025-64095---DNN-Unauthenticated-arbitrary-file-upload

CVE-2025-64095---DNN-Unauthenticated-arbitrary-file-upload POC du contrôle d'accès insuffisant de DNN - Le téléchargement d'images permet la réécriture du contenu du site Je suis un homme simple, je vois cvss:10/10 et j'y vais xD J'ai vu cette nouvelle CVE CVE-2025-64095 DNN Contrôle d'accès...

CVE-2025-26319

CVE-2025-26319 1. Basic File Upload python flowiseexploit.py -u http://target:3000 -f localfile.txt -d /path/on/server/file.txt 2. Upload Configuration File Modify API key configuration python flowiseexploit.py -u http://target:3000 -f newapi.json -d /root/.flowise/api.json 3. Auto-generate and...

CVE-2026-Pending-Flask-Uploads-Path-Traversal-PoC

CVE-2026-XXXXX Ожидается: Обход пути в Flask-Uploads Информация об уязвимости Продукт : Flask-Uploads Версия : 0.2.1 и, возможно, более старые версии Тип уязвимости : Обход пути Directory Traversal CWE-ID : CWE-22 Серьезность : ВЫСОКИЙ CVSS 7.5 Воздействие : Произвольная запись файлов, удаленное...

SuiteCRM-RCE

CVE-2020-28328 SuiteCRM Exécution de code à distance via le paramètre de fichier journal et l'empoisonnement du fichier journal Aperçu J'ai récemment découvert deux vulnérabilités dans SuiteCRM qui fournissent une chaîne d'attaque permettant à un utilisateur à faible privilège d'exécuter du code...

CVE-2025-45955

CVE-2025-45955 Server-Side Request Forgery in DonWeb Ferozo CVE-2025-45955 Description An attacker can exploit this vulnerability by uploading and executing a specially crafted PHP file on the Ferozo hosting platform. When accessed, the file launches a series of SSRF attempts targeting internal...

CVE-2021-22006

CVE-2021-22005 - VMWare vCenter Server File Upload to RCE Analyze Usage ------------------------------------------------------------- CVE-2021-22005 - VMWare vCenter Server File Upload to RCE Github: https://github.com/r0ckysec Twitter: https://twitter.com/r0cky6861636b Author: r0cky...