CVE-2026-0740

ninja.py Экспериментальный/инструментальный скрипт для WordPress-сайтов, использующий конечные точки загрузки файлов upload плагина Ninja Forms. Последовательно отправляет запросы к целям из list.txt, записывает успешные загрузки в файл shell.txt. Требования Python 3 requests обычно устанавливает...

CVE-2026-37748

CVE-2026-37748 — Visitor Management System 1.0 — Неограниченная загрузка файлов → RCE Детали Поле| Информация ---|--- CVE ID| CVE-2026-37748 Тип| Неограниченная загрузка файлов → Удалённое выполнение кода Серьёзность| Высокая CVSSv3: 7.2 Поставщик| sanjay1313 Продукт| Visitor Management System...

PoC-CVE-2026-1357

PoC CVE-2026-1357: WPvivid Backup & Migration Плагин Migration, Backup, Staging – WPvivid Backup & Migration для WordPress уязвим к неаутентифицированной произвольной загрузке файлов в версиях до 0.9.123 включительно. Это связано с некорректной обработкой ошибок в процессе расшифровки RSA в...

cve-2023-5966

Poc from CVE-2023-5966 Advisory EspoCRM 2.7.4 and earlier is vulnerable to an arbitrary file upload that can lead to code execution in the add extension functionality. The zip file on this repo upload a web shell to /webshell.php...

CVE-2025-10353-POC

CVE-2025-10353 POC - File Upload RCE 🛠️ POC for CVE-2025-10353: A file-upload vulnerability in the melis-cms-slider module of Melis Platform that can lead to remote code execution RCE when an attacker uploads a malicious file via the mcsdetailimg parameter to:...

CVE-2026-3844

CVE-2026-3844 Mass Exploit CVE-2026-3844 – Breeze Cache WordPress =2.4.4 allows unauthenticated file upload via fetchgravatarfromremote when local gravatar hosting is enabled. Installation Download repository git clone https://github.com/im-hanzou/CVE-2026-3844 Go to repository folder cd...

ICS-MoxieManager-FileUpload-PoC

ICS-MoxieManager-RCE-CVE-2026-30-03 CVE-2026-30-03 9.8 Critical Possible RCE Jenzabar ICS + MoxieManager proof https://www.youtube.com/watch?v=lcfUL6Xx3f4&feature=youtu.be CVE CVSS Impact Affected CVE-2026-30-03 9.8 Critical Possible RCE Jenzabar ICS + MoxieManager A vulnerability in the...

CVE-2026-42879

CVE-2026-42879 - FacturaScripts - Authenticated Unrestricted File Upload via MIME Type Bypass Summary An authenticated unrestricted file upload vulnerability exists in FacturaScripts' product image upload functionality. An attacker with valid credentials can upload a PHP file disguised as a GIF...

CVE-2026-3844

CVE-2026-3844 — Breeze Cache RCE Неаутентифицированная произвольная загрузка файлов → удалённое выполнение кода Поле| Значение ---|--- CVE| CVE-2026-3844 CVSS| 9.8 Critical Плагин| Breeze Cache Cloudways Затронутые версии| ≤ 2.4.4 Исправлено в| 2.4.5 Обнаружил| Hung Nguyen bashu PoC от|...

CVE-2021-45010-TinyFileManager-Exploit

CVE-2021-45010 CVE-2021-45010: A Path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager Project’s Tiny File Manager = 2.4.3 allows remote attackers with valid user accounts to upload malicious PHP files to the webroot and achieve code execution o...

exploits

exploits Published PoCs can be found at exploitdb.com Patient Appointment Scheduler System v1.0: Inbit Messenger v4.6.0:...

Unrestricted-File-Upload-on-SiteMagic-CMS-4.4.2

Unrestricted File Upload on SiteMagic CMS 4.4.2 This repo describe how to exploit unrestricted file upload vulnerability on SiteMagic CMS 4.4.2 About SiteMagic CMS 4.4.2 Website: https://sitemagic.org/ Download: https://sitemagic.org/Download.html PoC - Exploiting unrestricted file upload...

CVE-2026-7537

MDJM Event Management = 1.7.8.3 - Authenticated Administrator+ Arbitrary File Upload via 'mdjmemailuploadfile' Parameter The WordPress MDJM Event Management plugin version 1.7.8.3 and prior contains an arbitrary file upload vulnerability that allows authenticated administrators to upload maliciou...

tpadmin-CVE-2026-2113-poc

tpadmin-CVE-2026-2113-poc A proof-of-concept exploiting a Remote Code Execution with web server privileges via Arbitrary File Upload. Vulnerability Description A critical Remote Code Execution vulnerability exists in H-ui.admin system's WebUploader preview component. The...

CVE-2026-3844

CVE-2026-3844 — Breeze Cache = 2.4.4 Unauthenticated Arbitrary File Upload to RCE Overview Field| Value ---|--- CVE| CVE-2026-3844 CVSS| 9.8 Critical CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| CWE-434 — Unrestricted Upload of File with Dangerous Type Plugin| Breeze Cache by Cloudways...

CVE-2026-36340

CVE-2026-36340 Remote Code Execution RCE Vulnerability in Krayin CRM v2.1.5 Remote Code Execution RCE Vulnerability in Krayin CRM v2.1.5 CVE: CVE-2026-36340 Severity: Critical Affected Product: Krayin CRM v2.1.5 Vulnerability Type: Remote Code Execution RCE Authentication Required: Yes Summary A...

CVE-2024-57487-and-CVE-2024-57488

Online Car Rental System Vulnerabilities This repository contains details about the vulnerabilities identified in Code-Projects Online Car Rental System project Version 1.0. The vulnerabilities have been assigned CVEs and include comprehensive writeups to assist in understanding and mitigating th...

CVE-2023-46474

PMB =7.5.3 - Remote Code Execution via Unrestricted File Upload CVE-2023-46474 CVSS v3.1 Vector| CVSS v3.1 Score ---|--- AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H| 9.1 Discovered during a penetration test by Marcus Reynaud of Devensys Cybersecurity Description The script pmb/admin/convert/startimport.p...

CVE-2024-11613-wp-file-upload

CVE-2024-11613-wp-file-upload Exploit by Chirag Artani https://3rag.com for CVE-2024-11613 in WordPress File Upload Here is information - The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Execution, Arbitrary File Read, and Arbitrary File Deletion in all versions up to,...

CVE-2026-37637

CVE-2026-37637 Proof of Concept for CVE-2026-37637 - Remote Code Execution in Alexantr filemanager v1.0 via unrestricted file upload in filemanager.php. Overview CVE-2026-37637 is a Remote Code Execution vulnerability affecting Alexantr filemanager v1.0. The vulnerability exists in the...