CVE-2026-4885

CVE-2026-4885 – Piotnet Addons for Elementor Pro Mass Exploit Unauthenticated arbitrary file upload leading to Remote Code Execution RCE in Piotnet Addons for Elementor Pro ≤ 7.1.70. This tool is designed for mass exploitation – feed it a list of targets, and it will automatically: Detect the...

AutoPwn-Titanic.htb

Titanic AutoPWN - HTB Machine This is an automated exploitation script for the Hack The Box machine Titanic. A full exploitation automation script for the Titanic HTB Linux machine on Hack The Box. Full write Up - WriteUp.md 📋 Description It performs the following actions: Phase 1: Retrieve and...

CVE-2020-5902

CVE-2020-5902 Python script to check CVE-2020-5902 F5 BIG-IP devices. Usage python3 CVE-2020-5902.py -i Output - Python script to check CVE-2020-5902 F5 BIG-IP devices. | coded by Abdullah AlZahrani ! Your target: 127.0.0.1 I /etc/passwd readable PoC...

CVE-2021-22204-Gitlab

Gitlab-Exiftool-RCE Original repos : https://github.com/CsEnox/Gitlab-Exiftool-RCE Creds to CsEnox. RCE Exploit for Gitlab 13.10.3 GitLab Workhorse will pass any file to ExifTool. The current bug is in the DjVu module of ExifTool. Anyone with the ability to upload an image that goes through the...

CVE-2019-12185

CVE-2019-12185 eLabFTW 1.8.5 is vulnerable to arbitrary file uploads via the /app/controllers/EntityController.php component. This may result in remote command execution. An attacker can use a user account to fully compromise the system using a POST request. This will allow for PHP files to be...

Mitigation-Apache-CVE-2021-41773-

Mitigation-CVE-2021-41773- Shell Script to mitigate CVE-2021-41773 A Path Traversal And File Disclosure Vulnerability In Apache Installation wget https://github.com/EkamSinghWalia/Mitigation-CVE-2021-41773-.git Usage Complete fix and suggested way to mitigate the vulnerabilty This script will...

CVE-2025-47577

CVE-2025-47577 A proof of concept developed to exploit CVE-2025-47577. Based on PatchStack's article. Usage usage: python CVE-2025-47577.py --help TI WooCommerce Wishlist WordPress plugin = 2.9.2 CVE-2025-47577 PoC positional arguments: FILE local file to upload URLPATH base path of the wish list...

CVE-2024-24919-CHECKPOINT

CVE-2024-24919 Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available. FIRST: I AM NOT RESPONSIB...

CVE-2022-0847

CVE-2022-0847 Vulnerability in the Linux kernel since 5.8 which allows overwriting data in arbitrary read-only files. This leads to privilege escalation because unprivileged processes can inject code into root processes. To compile: gcc poc.c -o poc Usage: ./poc TARGETFILE OFFSET DATA Author and...

CVE-2025-32579

⚠️ CVE-2025-32579 - Critical RCE via Sync Posts Plugin WordPress 📦 Affects: Sync Posts 🧨 CVSS Score: 9.9 CRITICAL 📁 CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 🧠 Vulnerability Overview The Sync Posts WordPress plugin by SoftClever Limited is vulnerable to an Unrestricted File Upload...

-CVE-2015-10137-WordPress-N-Media-Website-Contact-Form-with-File-Upload-1.3.4

WordPress N-Media Website Contact Form with File Uploader File Upload Vulnerability Analysis 1. Vulnerability Point Code Analysis Plugin file: classes/plugin.class.php, method: uploadfile function uploadfile // ... if ! empty $FILES $tempFile = $FILES 'Filedata' 'tmpname'; $targetPath = $dirPath;...

File-Read-CVE-2024-9264

File-Read-CVE-2024-9264 Proof Of Concept for File Read in Grafana CVE-2024-9264 Prerequisites authenticated Grafana user with Viewer permissions or higher DuckDB binary must be installed and accessible through Grafana's PATH Impacted version Grafana = v11.0.0 all v11.x.y are impacted Usage python...

CVE-2025-8889

Exploit Title: WordPress Compress Then Upload Plugin 1.0.3 Arbitrary File Upload to RCE Date: 2025-07-23 Exploit Author: Muhammed Çelik Vendor Homepage: https://wordpress.com/plugins/compress-then-upload Software Link: https://downloads.wordpress.org/plugin/compress-then-upload.latest-stable.zip...

CVE-2026-65694-PoC

CVE-2026-65694 — Microweber CMS Unauthenticated Arbitrary File Read Proof-of-concept for CVE-2026-65694 , an unauthenticated path-traversal → arbitrary file read in Microweber CMS. An unauthenticated attacker can read any file the web-server user can access — the Laravel .env APPKEY, DB...

CVE-2021-43798

CVE-2021-43798 Grafana 8.x Arbitrary File Read http://ryze-t.com/posts/2021/12/15/CVE-2021-43798-Grafana%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96.html Usage exp http://example.com /etc/passwd Results...

log4jjndilookupremove

log4jjndilookupremove A simple script to remove Log4J JndiLookup.class from jars in given directory. This script can be used to temporarily resolve the CVE-2021-45046 and CVE-2021-44228, until the application can be repackaged with a proper Log4J version. Usage On Linux or other nix system just r...

CVE-2024-54262

CVE-2024-54262 Exploit CVE-2024-54262: Arbitrary File Upload in Import Export for WooCommerce Overview This script exploits a vulnerability in the "Import Export for WooCommerce" WordPress plugin. The vulnerability allows unauthorized users to upload arbitrary files, leading to potential remote...

COM-Hunter

COM-Hunter COM Hijacking VOODOO Description COM-Hunter is a COM Hijacking persistence tool. Available in both a .NET version and a BOF variant fully compatible with Cobalt Strike. The following list explains the available modes: Search Mode : Searches for CLSIDs based on LocalServer32,...

PoC-CVE-2026-1357

PoC CVE-2026-1357: WPvivid Backup & Migration The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Upload in versions up to and including 0.9.123. This is due to improper error handling in the RSA decryption process...

Exploit-CVE-2025-24801

CVE-2025-24801 This exploit uses CVE-2025-24801 to get Remote Code Execution RCE via Local File Inclusion LFI at GLPI 10.0.17. Proof of Concept PoC of this CVE with explaination to this vulnerability in GLPI. Observation Some applications expose the /glpi/ endpoint e.g.,...