55 matches found
Shelly
Shelly | Gestor de Backdoors Simple con Python basado en weevely Shelly es una herramienta simple escrita en Python, que sirve para acceder remotamente a un sitio web Instalación : $ git clone https://github.com/tegal1337/Shelly $ cd Shelly $ python3 shell.py Requisitos : root@kitploit: sudo pip...
CVE-2024-56264
CVE-2024-56264 WordPress ACF City Selector - Arbitrary File Upload Exploit CVE-2024-56264 Overview This repository contains an exploit for CVE-2024-56264 , which is an Arbitrary File Upload vulnerability found in the WordPress ACF City Selector plugin versions = 1.14.0. This vulnerability allows ...
Jatayu
JATAYU Shell PHP Autónomo Sigiloso CARACTERÍSTICAS Autenticación basada en cabeceras HTTP. 100% Indetectable. Cambiador de función Exec. Sin complicaciones. USO...
b374k
b374k shell 3.2 このPHPシェルは、システム管理者やウェブ管理者がcpanelを使わずに、sshやftpなどを利用してリモート管理を行うための便利なツールです。すべての操作はウェブブラウザ上で実行されます。 機能： ファイルマネージャ（表示、編集、名前変更、削除、アップロード、ダウンロード、アーカイバなど） ファイル、ファイル内容、フォルダの検索（正規表現も使用可能） コマンド実行 スクリプト実行（php、perl、python、ruby、java、node.js、c） bind/reverse shell 経由でシェルを提供 シンプルなパケットクラフター DBMS...
p0wny-shell
p0wny@shell: -- 单文件 PHP Shell p0wny@shell: 是一个非常基础的单文件 PHP Shell。在渗透测试 PHP 应用程序时，可以用它快速在服务器上执行命令。请谨慎使用：该脚本会对服务器构成安全风险。 功能： 命令历史（使用方向键 ↑ ↓） 命令和文件名的自动补全（使用 Tab 键） 在远程文件系统中导航（使用 cd 命令） 上传文件到服务器（使用 upload 命令） 从服务器下载文件（使用 download 命令） 警告： 此脚本是一个安全漏洞。切勿 将其上传到服务器，除非你清楚自己在做什么！ Docker 演示： root@kitploit:...
CVE-2026-49049
CVE-2026-49049 This repository contains a Python-based scanner and proof-of-concept for a vulnerability in the Joomla Helix3 component. The bug is an arbitrary file write issue that can lead to remote code execution RCE when an attacker is able to write a PHP payload into a web-accessible locatio...
wwwolf-php-webshell
wwwolf's PHP web shell I frequently encountered issues when using other web shells: They use new PHP syntax features not compatible with the old PHP version running on some targets. They make wrong assumption on the remote URL, breaking PHP code injection or GET parameters unexpected by the serve...
casper-shell
🦇 Casper@shell: - Shell Web PHP Avanzado Casper@shell: es una versión mejorada y más fácil de usar de p0wny shell, con muchas nuevas funcionalidades. Esta versión tiene como objetivo ser más útil para realizar rápidamente reconocimiento, exfiltración o implementar mecanismos de persistencia. ✨...
CVE-2026-25099
CVE-2026-25099 - Bludit CMS API Unrestricted File Upload to RCE Description Bludit CMS versions before 3.18.4 allow an authenticated attacker with a valid API token to upload files of any type and extension via the POST /api/files/ endpoint. The uploadFile function performs no file extension or...
CVE-2024-46377
CVE-2024-46377 PoC for Arbitrary File Upload Vulnerability in Best House Rental Management System 1.0 Overview This Python script demonstrates how to exploit the arbitrary file upload vulnerability in Best House Rental Management System 1.0. The vulnerability allows an attacker to upload a...
Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell
Adobe on Monday released security patches to address a maximum-severity flaw impacting Adobe Commerce and Magento Open Source that has come under active exploitation in the wild. The vulnerability, now tracked as CVE-2026-75650 CVSS score: 10.0, has been codenamed StyleSmuggler by Sansec, which...
EUVD-2026-70265
UnoPim before 2.1.5 contains an authenticated file upload vulnerability that allows authenticated administrators to upload arbitrary PHP files through the TinyMCE image upload endpoint due to missing file extension and MIME type validation. Attackers can upload a PHP web shell to the public stora...
CVE-2026-82524 UnoPim File Upload RCE via TinyMCE Image Upload Endpoint
UnoPim before 2.1.5 contains an authenticated file upload vulnerability that allows authenticated administrators to upload arbitrary PHP files through the TinyMCE image upload endpoint due to missing file extension and MIME type validation. Attackers can upload a PHP web shell to the public stora...
PT-2026-84863
Name of the Vulnerable Software and Affected Versions UnoPim versions prior to 2.1.5 Description Authenticated administrators can upload arbitrary PHP files through the TinyMCE image upload endpoint because the system fails to validate file extensions and MIME types. This allows an attacker to...
CVE-2026-23698 Vtiger CRM 8.4.0 Authenticated RCE via Module Import File Upload
Vtiger CRM through 8.4.0 contains an authenticated remote code execution vulnerability in the admin module import feature that allows administrator-level attackers to upload arbitrary PHP files by submitting a crafted zip archive through the ModuleManager import function, which extracts contents...
cPanel CVE-2026-41940 Under Active Exploitation to Deploy Filemanager Backdoor
A threat actor named MrRot13 has been attributed to the exploitation of a recently disclosed critical cPanel flaw to deploy a backdoor codenamed Filemanager on compromised environments. The attack exploits CVE-2026-41940, a vulnerability impacting cPanel and WebHost Manager WHM that could result ...
odfs_rce_poc
Online Discussion Forum Site 1.0 - Remote Code Execution PoC...
PT-2025-52212
Name of the Vulnerable Software and Affected Versions Bitrix24 versions prior to 25.100.301 Description Remote Code Execution is possible because an actor with SOURCE/WRITE permissions for the Translate Module can upload and execute code by sending a PHP file and a .htaccess file. The supplier...