CVE-2026-13714

Realtyna WPL 5.3.0 - Nicht authentifizierter RCE-Exploit Beschreibung Dieser Exploit zielt auf eine kritische Schwachstelle in den Versionen vor 5.3.0 des Plugins Realtyna Organic IDX + WPL Real Estate ab. Das Plugin verwendet fest verdrahtete Zugangsdaten und erlaubt nicht authentifizierte...

CVE-2025-6440

🧨 CVE-2025-6440 – WooCommerce Designer Pro Caricamento di File Senza Restrizioni Caricamento di File Arbitrario Non Autenticato tramitewcdpsavecanvasdesignajax Plugin WooCommerce Designer Pro – Esecuzione di codice in remoto RCE 📖 Descrizione Il plugin WooCommerce Designer Pro per WordPress...

CVE-2025-64512

Stellen Sie sicher, dass Sie den Parameter ausfüllen, d. h. Target und Uploaddir...

CVE-2022-32114

Strapi v4.1.12 Explicação da Vulnerabilidade: Uma vulnerabilidade de upload de arquivo irrestrito na função Add New Assets do Strapi v4.1.12 permite que atacantes executem código arbitrário por meio de um arquivo criado Vetores de Ataque: Após fazer upload de um arquivo contendo conteúdo malicios...

CVE-2026-13157

CVE-2026-13157 Theme Demo Import = 1.1.3 — Caricamento Arbitrario di File & Esecuzione di Codice Remota -E5A500?style=for-the-badge&logo=security&logoColor=white 📖 Panoramica dell'Advisory CVE-2026-13157 è una vulnerabilità autenticata di caricamento arbitrario di file che colpisce il plugin...

CVE-2026-4040-Race-Condition-in-File-Upload-Leading-to-RCE

CVE-2026-4040 – Wettlaufsituation beim Datei-Upload führt zu RCE Programmcode Python Flask root@kitploit: uploadserver.py - File upload with race condition from flask import Flask, request import os, tempfile, time, threading app = Flaskname UPLOADDIR = '/tmp/uploads' os.makedirsUPLOADDIR,...

weevely3

Weevely - Weaponized web shell Description Weevely is a web shell designed for post-exploitation purposes that can be extended over the network at runtime. Upload weevely PHP agent to a target web server to get remote shell access to it. It has more than 30 modules to assist administrative tasks,...

Inject-PHP-to-JPG-Using-Jhead

Inject-PHP-to-JPG-Using-Jhead $ pkg install vim oder apt-get install vim $ pkg install jhead oder apt-get install jhead $ jhead -h für Hilfe $ jhead -purejpg yourfiles.jpg $ jhead -ce yourfiles.jpg Drücke ESC und tippe :x zum Speichern $ jhead yourfiles.jpg Beispiel :...

php_filter_chain_generator

Generatore di catene di filtri PHP Una CLI per generare catene di filtri PHP, ottieni la tua RCE senza caricare un file se controlli interamente il parametro passato a una require o a una include in PHP! Utilizzo Aiuto root@kitploit: $ python3 phpfilterchaingenerator.py --help usage:...

wp-file-manager

wp-file-manager WP File Manager 6.9 — произвольная загрузка файлов, ведущая к RCE root@kitploit: usage: wp-file-manager.py -h -u URL -f FILE optional arguments: -h, --help show this help message and exit -u URL, --url URL URL of host to check will need http or https -f FILE, --file FILE File of...

CVE-2024-2667-Poc

CVE-2024-2667-Poc 🚀 Descrizione Il plugin InstaWP Connect – 1-click WP Staging & Migration per WordPress è vulnerabile a caricamenti arbitrari di file a causa di una validazione insufficiente dei file nell'endpoint REST API /wp-json/instawp-connect/v1/config in tutte le versioni fino alla 0.1.0.2...

CVE-2026-7393-RCE

Pizzafy Ecommerce System 1.0 – Upload di file senza restrizioni in savemenu consente l'esecuzione di codice in remoto Dettagli...

CVE-2026-41651

CVE-2026-41651 In breve: Carica sul target, poi esegui python3 exploit.py...

CVE-2026-13001

CVE-2026-13001 Podlove Podcast Publisher CVSS 9.8 Critico | Caricamento arbitrario di file non autenticato che porta all'esecuzione remota di codice Panoramica Vulnerabilità critica nel plugin WordPress Podlove Podcast Publisher versioni fino alla 4.5.1 inclusa che consente ad aggressori non...

CVE-2022-40471

CVE-2022-40471 Exécution de code à distance via une vulnérabilité de téléchargement de fichier sans restriction dans le Clinic's Patient Management System v 1.0 Description technique : L'exécution de code à distance dans Clinic's Patient Management System v 1.0 permet à un attaquant de télécharge...

CVE-2025-29017

CVE-2025-29017 - Esecuzione di codice remoto tramite caricamento immagine profilo in Internet Banking System 2.0.0 Descrizione Esiste una vulnerabilità di Esecuzione di Codice Remoto RCE in Code Astro Internet Banking System 2.0.0 a causa di una convalida impropria del caricamento dei file nel...

CVE-2025-28915

CVE-2025-28915 وصف الثغرة: ووردبريس هي منصة تدوين تعتمد على لغة PHP، وتتيح إنشاء مواقع مدونات شخصية على خوادم PHP وMySQL. يوجد ثغرة في إصدارات ThemeEgg ToolKit 1.2.9 والإصدارات الأقدم، سببها السماح برفع ملفات من أنواع خطيرة، مما قد يؤدي إلى رفع Web Shell. إعداد البيئة: docker pull wordpress الإضا...

CVE-2024-9234

CVE-2024-9234 GutenKit = 2.1.0 - Nicht authentifizierter beliebiger Dateiupload POC python CVE-2024-9234.py -h baseurl Hinweis Dieses Skript dient ausschließlich zu Bildungszwecken. Der Autor übernimmt keine Verantwortung für Schäden, die durch Missbrauch dieses Skripts entstehen...

CVE-2023-42362

CVE-2023-42362 Autor: Abdelrahman Mohamed Mr-n0b3dy Linked-in: https://www.linkedin.com/in/abdelrhman-mohamed-ashraf-7bb43410b/ Nome da Vulnerabilidade: Upload de Arquivo Irrestrito que levou a ATO Gravidade: Alta Produto: NCR teller web app Versão: 4.4.0 Descrição:...

CVE-2026-38751-OpenSTAManager-Arbitrary-File-Upload-PoC

CVE-2026-38751 – رفع ملف تعسفي في OpenSTAManager إثبات المفهوم يحتوي هذا المستودع على استغلال إثبات المفهوم PoC لـ CVE-2026-38751، والذي يؤثر على OpenSTAManager ≤ 2.10. تسمح الثغرة لمهاجم مصادق برفع وحدة ضارة عبر وظيفة تحديث الوحدة، مما يؤدي إلى رفع ملف تعسفي وتنفيذ تعليمات برمجية عن بُعد RCE. مر...