CVE-2026-21627---Tassos-Novarain-Framework-plg_system_nrframework-Exploit---Joomla

CVE-2026-21627 Unauthenticated Arbitrary File Inclusion in Joomla's Novarain Framework nrframework Overview A critical vulnerability in the Tassos/Novarain Framework plgsystemnrframework Joomla plugin allows unauthenticated attackers to include arbitrary PHP files on the server, instantiate...

CVE-2026-4350

CVE-2026-4350 - Perfmatters WordPress Arbitrary File Deletion Description CVE-2026-4350 is an arbitrary file deletion vulnerability in the Perfmatters WordPress plugin. CVE Details CVE: CVE-2026-4350 Severity: HIGH CVSS: 8.1 Affected Plugin: Perfmatters Affected Version: = 2.5.9.1 Exploit python3...

CVE-2026-1056-POC

CVE-2026-1056-POC Snow Monkey Forms - Unauthenticated Arbitrary File Deletion PoC This repository contains a Proof of Concept PoC for a critical vulnerability in the Snow Monkey Forms WordPress plugin versions send; // Direct execution flow to send // CSRF check is only performed for other method...

CVE-2021-31805

CVE-2021-31805 PoC for CVE-2021-31805 Apache Struts2 This is the application used in the CVE-2021-31805 explanation article. Setup $ docker-compose build $ docker-compose up -d Verification Access http://localhost:8080/struts2-showcase-2.5.29/index.html and confirm that the Welcome page is...

CVE-2019-10945

Code Conversion to Python 3 This code is taken from Joomla! Core 1.5.0 - 3.9.4 - Directory Traversal / Authenticated Arbitrary File Deletion and was converted to Python 3 to suit the exercise in Academy for Module "Attacking Commoon Applications" and section "Attacking Joomla". The original code...

CVE-2026-30498

CVE-2026-30498 – CSRF Vulnerability AdminPanel 4.0 Overview CVE ID: CVE-2026-30498 Reserved by MITRE Discoverer: Mehdi Ben Hamou A Cross-Site Request Forgery CSRF vulnerability exists in the delete.php endpoint of AdminPanel 4.0. This vulnerability allows an attacker to trigger sensitive actions...

CVE-2024-5932

This post is a research article published by EQSTLab. ❗❗ IMPORTANT ❗❗ There are currently fake PoC github repositories running xmrig. Check out the link below for more information : URL1: https://x.com/win3zz/status/1828704644987511107 URL2: https://x.com/bornunique911/status/1828712791844524453...

CVE-2026-9789

CVE ID: CVE-2026-9789 Researcher: Vo Duc Thang ugvxb Acknowledgement: https://community.acer.com/en/kb/articles/19670 Video POC: https://drive.google.com/file/d/1B8b42bE68CWMnlqG6eJWi0txGFsHAJZc/view?usp=sharing 1. Executive Summary A critical local privilege escalation vulnerability has been...

7-Zip.chm-Mitigation

7-Zip.chm-mitigiation 7-Zip Mtigation CVE-2022-29072 Explaination : https://user-images.githubusercontent.com/33525376/163654035-d40ca72a-7dbc-425f-ade2-3820cfababb2.mp4 Author CVE Founder : https://github.com/kagancapar/CVE-2022-29072 A vulnerability has been discovered in 7-zip, the popular...

delete-self-poc

🗑️ delete-self-poc The delete-self-poc is a demonstration of a method to delete a locked executable or currently running file from disk. This concept was initially discovered by Jonas Lykkegaard, and I have created the proof of concept POC for it. Additionally, it can be used to delete locked file...

CVE-2022-32199

CVE-2022-32199 ScriptCase python CVE-2022-32199.py -t 127.0.0.1 -u admin -p admin -path windows/win.ini Example of deleting file in the root directory...

CVE-2025-26125

Description The PoC program exploits the IMFForceDelete driver which exposes an ioctl that allows unprivileged users to delete files and folders. We can turn this into a privilege escalation by using a technique explained by ZDI and Halov, which exploits the MSI rollback mechanism which is design...

autoresponder

AutoResponder Carbon Black Response IR tool for hunting threats in an environment What is it? AutoResponder is a tool aimed to help people to carry out their Incident Response tasks WITH the help of Carbon Black Response's awesome capabilities and WITHOUT much bothering IT/System/Network Teams Wh...

The vulnerability of the platform for creating individual web applications in CRM involves an incorrect restriction on the path to the catalog, allowing attackers to delete arbitrary files.

The vulnerability of the platform for creating individual web applications in CRM involves incorrect restrictions on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files remotely...

The vulnerability of the Enlogic SCADA system’s virtual controller “ENTEK” arises from improper external control of file names or paths, allowing attackers to delete arbitrary files.

The vulnerability of the Enlogic SCADA system “ENTEK”’s virtual controller is related to incorrect external control using filenames or paths. Exploiting this vulnerability could allow a malicious actor to delete any files at will...

CVE-2024-27460

CVE-2024-27460 - Plantronics Desktop Hub LPE Arbitrary File Delete to SYSTEM. Majority of code is based on the referenced PoC by @filipdragovic. Thanks @filipdragovic & @k0zmer : Blog Post: https://mantodeasecurity.de/en/2024/05/cve-2024-27460-plantronics-hub-lpe References...

CVE-2020-3187

CVE-2020-3187 curl -H "Cookie: token=. ./+CSOU+/cscologo.gif" https://target.com/+CSCOE+/sessionpassword.html logo.gif will get deleted...

LockingGirl-----CVE-2022-0847-Dirty_Pipe_virus

DirtyPipevirus Dirty Pipe is a kind of Linux exploit. Its CVE is CVE 2022-0847. We use it to delete all files on your Ubuntu. Environment: Ubuntu 20.04 Linux Kernel 5.8 This is the ova file of Ubuntu 20.04:...

CVE-2024-7856

CVE-2024-7856 ★ CVE-2024-7856 Arbitrary File deletion PoC ★ Description CVE-2024-7856 : MP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar -f python3 CVE-2024-7856.py -u -f -i -p Example python3 CVE-2024-7856.py -u http://example.com/ -f /tmp/test python3 CVE-2024-7856.py -u...

CVE-2024-5932

This post is a research article published by EQSTLab. ❗❗ IMPORTANT ❗❗ There are currently fake PoC github repositories running xmrig. Check out the link below for more information : URL1: https://x.com/win3zz/status/1828704644987511107 URL2: https://x.com/bornunique911/status/1828712791844524453...