CVE-2025-26892

CVE-2025-26892 – WordPress Celestial Aura Theme = 2.2 Arbitrary File Upload Authenticated 📄 Description An Unrestricted File Upload vulnerability exists in the WordPress Celestial Aura theme developed by dkszone up to version 2.2. A low-privileged authenticated user can upload arbitrary PHP files...

PutScanner

🔍 PUT Directory Scanner A penetration testing tool that identifies writable web directories via HTTP PUT method, specifically designed to detect CVE-2025-24813 Arbitrary File Upload in Apache Tomcat. 📌 Features Smart Protocol Handling : Auto-detects HTTPS/HTTP with fallback Comprehensive Checks :...

CVE-2026-48908-joomla-sp-page-builder-detection

CVE-2026-48908 — Joomla SP Page Builder Validation and Detection Laboratory validation of CVE-2026-48908 in the Joomla SP Page Builder component, focused on technical evidence, event reconstruction, and defensive detection opportunities. The repository documents a controlled test in which the SP...

Chamilo-CVE-2023-4220-Exploit

Chamilo-LMS-CVE-2023-4220-Exploit This is an Exploit for Unrestricted file upload in big file upload functionality in Chamilo-LMS for this location /main/inc/lib/javascript/bigupload/inc/bigUpload.php in Chamilo LMS = v1.11.24, and Attackers can obtain remote code execution via uploading of web...

CVE-2023-33404

CVE-2023-33404 A user who has EditOwnPosts right on BlogEngine.NET CMS version 3.3.8.0 and earlier has the ability to upload a malicious file to a hard-coded location. POST request to /api/upload endpoint with "action=video" parameters, as shown in the screenshot below, triggers a file upload...

eLabFTW-1.8.5-EntityController-Arbitrary-File-Upload-RCE

Exploit Title : eLabFTW 1.8.5 'EntityController' Arbitrary File Upload / RCE Date : 5/18/19 Exploit Author : liquidsky Joseph McPeters Vulnerable Software : eLabFTW 1.8.5 Vendor Homepage : https://www.elabftw.net/ Version : 1.8.5 Software Link : https://doc.elabftw.net/ Tested On : Linux / PHP...

CVE-2025-24813

Exploitation Conditions DefaultServlet Write Function Enabled: Must configure readonly=false in web.xml Partial PUT Request Support: Tomcat supports chunked upload by default File Session Persistence Enabled: Must configure PersistentManager and FileStore in context.xml Deserialization Exploit...

CVE-2017-12615-PoC

CVE 2017-12615 Apache Tomcat Windows RCE ⚠️Warning This is a proof of concept environment and exploit for known CVEs, strictly for learning and educational purposes. Do not use these scripts or techniques on systems you do not own or have explicit permission to test. Unauthorised access or...

POC-CVE-2026-19681

CVE-2026-19681 — command injection in file upload processing authenticated Status: CONFIRMED on a 6.7.2-14.el9 lab 2026-08-20. Staged filename p;sleep$IFS20;-EvvfJk via POST /rest/file/upload context prefix carries the metachars, then POST /rest/auditFile type=scapLinux, version=1.2 stalled exact...

Modified-CVE-2015-3306-Exploit

Modified-CVE-2015-3306-Exploit How to 1. Create a php reverse shell 2. Start server to host shell in the same directory python3 -m http.server 3. Start netcat listener on local port of choice example: nc -nlvp port of choice 4. Run exploit example provided below python3 modifiedCVE20153306.py...

CVE-2026-32475-PoC

CVE-2026-32475 — Elementor Pro Unauthenticated Arbitrary File Upload → RCE Proof-of-concept for CVE-2026-32475 CVSS 9.0: an unauthenticated arbitrary file upload vulnerability in the Elementor Pro WordPress plugin ≤ 4.2.1 that leads to remote code execution. | ---|--- CVE| CVE-2026-32475 CVSS| 9....

CVE-2026-0740-upload-template

This repository does not have a README...

CVE-2026-32475

🔴 CVE-2026-32475 — Elementor Pro Unrestricted File Upload → RCE Critical Unrestricted File Upload vulnerability in Elementor Pro Potentially leading to Remote Code Execution RCE ⚠️ Overview CVE-2026-32475 is a critical security vulnerability affecting Elementor Pro , a widely deployed WordPress...

TongDa-RCE

TongDa-RCE Tongda file inclusion + file upload leads to RCE Usage Remote RCE: python3 tongdarce.py targert getsehll: python3 tongdashell.py target...

CVE-2025-9216

StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More = 1.4.0 - Authenticated Subscriber+ Arbitrary File Upload The StoreEngine plugin contains a vulnerability in it's CSV Import/Export feature that allows any authenticated user subscriber, author,...

CVE-2023-50164-Apache-Struts-RCE

CVE-2023-50164: Apache Struts path traversal to RCE vulnerability A critical security vulnerability, identified as CVE-2023-50164 CVE: 9.8 was found in Apache Struts, allowing attackers to manipulate file upload parameters that can potentially lead to unauthorized path traversal and remote code...

CVE-2020-29607

CVE-2020-29607-Exploit Exploit Title: Pluck CMS 4.7.13 - File Upload Remote Code Execution Authenticated CVE description: A file upload restriction bypass vulnerability in Pluck CMS before 4.7.13 allows an admin privileged user to gain access in the host through the "manage files" functionality,...

JoomlaCVE20168869

Exploit for Joomla 3.4.4 - 3.6.4 CVE-2016-8869 and CVE-2016-8870 with File Upload web shell This is PHP port, original python source code provided by @link https://github.com/XiphosResearch/exploits/tree/master/Joomraa Usage: php exploit.php --username hacker -p password -e [email protected]...

CVE-2015-4133

CVE-2015-4133 CVE 2015-4133 - Reflex Gallery 3.1.3 Arbitrary File Upload to RCE Description Reflex Gallery is a Wordpress plugins which has a vulnerability on its 3.1.3 version which can be exploited easily by attackers to upload arbitrary files, for example PHP code to achieve Remote Command...

RCE-Simplephpblog-biggiedroid

CVE-2025-15495 - Arbitrary File Upload Leading to Remote Code Execution RCE Product BiggiDroid – Simple PHP Blog CMS Product page: https://biggidroid.com/product/simple-php-blog/ Vulnerability Type Arbitrary File Upload Unrestricted File Upload Remote Code Execution RCE Severity Critical CVSS...