CVE-2019-2618

PoC POST /beawlsdeploymentinternal/DeploymentService HTTP/1.1 Host: 127.0.0.1:7001 User-Agent: Mozilla/5.0 X11; Ubuntu; Linux i686; rv:20.0 Gecko/20100101 Firefox/20.0 Accept: text/html, image/gif, image/jpeg, /; q=.2 Connection: keep-alive username: weblogic password: weblogic wlrequesttype:...

Pluck-CMS-v4.7.18-Remote-Code-Execution-CVE-2023-50564

CVE-2023-50564 - Pluck CMS v4.7.18 Exploit de Ejecución Remota de Código RCE Descripción Este script explota una vulnerabilidad de Ejecución Remota de Código RCE en Pluck CMS v4.7.18. La vulnerabilidad permite a un usuario malintencionado subir un archivo PHP malicioso al servidor y ejecutarlo,...

cve-2025-0364

CVE-2025-0364: BigAntSoft BigAnt Server Account Registration Bypass to File Upload RCE The BigAntSoft BigAnt Server, which provides a Windows hosted on-premises chat server that focuses on business use cases, is vulnerable to unauthenticated remote code execution via account registration and PHP...

WeblogicScan

WeblogicScan Weblogic one-click vulnerability detection tool, V1.5 Software Author: TideRabbitMask Disclaimer: Pia!ｏ ‵-′ノ”ノ﹏。 This tool is for security testing only, please do not use it for illegal purposes, be good V 1.5 Feature Introduction: Provides one-click poc detection, covering almost al...

cve-2026-32475-elementor-pro-lab

CVE-2026-32475 — Elementor Pro Forms unauthenticated arbitrary file upload → RCE A/B Docker lab that reproduces CVE-2026-32475 CVSS 9.x, Patchstack; Elementor Pro Forms File Upload field, affected ≤ 4.2.1, fixed 4.2.2 on 2026-08-19; reported by Tin Pham / TF1T. Unauthenticated, no user interactio...

CVE-2026-75865

CVE-2026-75865 — WPLP Cookie Consent gdpr-cookie-consent ≤ 4.4.1 Proof-of-concept and technical write-up for CVE-2026-75865 , an unauthenticated arbitrary file upload leading to remote code execution in the WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent...

CVE-2023-5360-exploit-with-native-libraries

Royal Elementor Addons ≤ 1.3.78 – Carga Arbitraria de Archivos No Autenticada RCE 📌 Resumen Este repositorio contiene un exploit de prueba de concepto modificado para el plugin de WordPress Royal Elementor Addons and Templates versiones ≤ 1.3.78. La vulnerabilidad permite la carga arbitraria de...

CVE-2024-6366

Para crear un módulo de Metasploit para explotar la vulnerabilidad RCE en el plugin User Profile Builder de WordPress anterior a la versión 3.11.8, necesitamos aprovechar la falta de autorización adecuada en la funcionalidad de carga de archivos multimedia. Así es como puedes crear dicho módulo d...

CVE-2025-26319

CVE-2025-26319 1. Subida básica de archivos python flowiseexploit.py -u http://target:3000 -f localfile.txt -d /path/on/server/file.txt 2. Subir archivo de configuración Modificar configuración de clave API python flowiseexploit.py -u http://target:3000 -f newapi.json -d /root/.flowise/api.json 3...

CVE-2026-Pending-Flask-Uploads-Path-Traversal-PoC

CVE-2026-XXXXX Pending: Path Traversal in Flask-Uploads Vulnerability Information Product : Flask-Uploads Version : 0.2.1 and potentially older versions Vulnerability Type : Path Traversal Directory Traversal CWE-ID : CWE-22 Severity : HIGH CVSS 7.5 Impact : Arbitrary File Write, Remote Code...

CVE-2025-45955

CVE-2025-45955 Server-Side Request Forgery in DonWeb Ferozo CVE-2025-45955 Description An attacker can exploit this vulnerability by uploading and executing a specially crafted PHP file on the Ferozo hosting platform. When accessed, the file launches a series of SSRF attempts targeting internal...

CVE-2026-32475

CVE-2026-32475 PoC : Elementor Pro Unauthenticated Arbitrary File Upload to RCE Elementor Pro Pre-Authentication Arbitrary File Upload Leading to Remote Code Execution Proof-of-concept for CVE-2026-32475, a critical unauthenticated arbitrary file upload in Elementor Pro's Forms module that ends i...

CVE-2024-50482

CVE-2024-50482 Woocommerce Product Design = 1.0.0 - Unauthenticated Arbitrary File Upload Description: The Woocommerce Product Design plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 1.0.0. This makes it possibl...

CVE-2025-39538

🛡️ CVE-2025-39538 - WordPress WP-Advanced-Search = 3.3.9.3 任意ファイルアップロード CVE-2025-39538 公開日: 2025-04-16 脆弱性タイプ: 任意ファイルアップロード（危険なタイプのファイルの無制限アップロード） 影響を受けるプラグイン: Mathieu Chartier による WP-Advanced-Search 影響を受けるバージョン: 3.3.9.3 までの全バージョン...

langflow-rce-exploit

Exploit RCE de Langflow CVE-2025-3248 Exploit de Ejecución Remota de Código para Langflow CVE-2025-3248 Características Detección automática de vulnerabilidades Múltiples modos de explotación: Shell interactivo Ejecución de un solo comando Conexión reverse shell Capacidad de subida de archivos...

CVE-2026-80517

The WP Ultimate CSV Importer WordPress plugin (versions before 9.2 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly validate file types within uploaded archives or sanitize their content before storing them in a publicly served location. This allows...

lab-cve-2025-3515

CVE-2025-3515 Laboratorio WordPress Drag and Drop Multiple File Upload for Contact Form 7 Levanta un entorno vulnerable de WordPress para reproducir y validar CVE-2025-3515 — subida de archivos sin restricciones a través de ddmuuploadfile en el plugin...

Links.a

CVE-2023-44962 PoC para CVE-2023-44962 Análisis La subida de archivos comprimidos que contienen enlaces simbólicos en upload-cover-image.pl puede filtrar parte del contenido de los archivos enlazados. ... foreach my $dir @directories my $file; if -e "$dir/idlink.txt" $file = "$dir/idlink.txt";...

CVE-2025-52691

CVE-2025-52691 This repository contains a safe Proof of Concept PoC to detect vulnerable SmarterMail versions affected by CVE‑2025‑52691. The script performs version detection only and does not exploit the vulnerability. CVE-2025-52691 – SmarterMail Version Detection PoC 📌 Description This...

CVE-2018-19422

CVE-2018-19422 Exploit Title: File Upload Bypass to RCE Authenticated Google Dork: N/A Date: 17/05/2021 Exploit Author: Drew Alleman Based on an exploit written by: Fellipe Oliveira Vendor Homepage: https://subrion.org/ Software Link: https://github.com/intelliants/subrion Version: SubrionCMS 4.2...