CVE-2021-44967

CVE-2021-44967 - RCE autenticado privilegiado La ejecución remota de comandos autenticada privilegiada en LimeSurvey Versión 5.2.4 mediante la carga e instalación de complementos permite a un usuario remoto cargar un archivo de código PHP arbitrario. Uso python3 exploit.py --url --user --password...

MSAPer

MSAPer | CVE-2023-3076 - MStore API Herramienta automática masiva para verificar y explotar la vulnerabilidad en CVE-2023-3076 - MStore API install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh bash install.sh Cómo Usar ¡Asegúrate de tener Parallel instalado! Luego...

CVE-2020-5844

CVE-2020-5844 RCE autenticado en PandoraFMS 7.0-NG 742 Atacantes con privilegios de administrador pueden subir documentos PHP maliciosos. Decodificando la ubicación del archivo en base64 los usuarios pueden obtener una shell como usuario apache. Descubierto por TheCyberGeek Script de PoC en Pytho...

CVE-2025-6058

🚨 CVE-2025-6058 — WordPress WPBookit ≤ 1.0.4 Unauthenticated File Upload Exploit Unauthenticated Arbitrary File Upload Exploit targeting WordPress WPBookit Plugin ≤ 1.0.4 Exploit allows remote shell upload and full command execution. Author: 0xgh057r3c0n 📌 About The Vulnerability CVE-2025-6058 is...

CVE-2022-1329

WP Elementor 3.6.0/1/2 Ejecución Remota de Código Google Dork: none Date: April 16 2022 Exploit Author: AkuCyberSec https://github.com/AkuCyberSec Vendor Homepage: https://elementor.com/ Software Link: https://wordpress.org/plugins/elementor/advanced/ scroll down to select the version Version:...

CVE-2020-12640

CVE-2020-12640: Local PHP File Inclusion via "Plugin Value" in Roundcube Webmail A Path Traversal vulnerability exists in Roundcube versions before 1.4.4, 1.3.11 and 1.2.10. Because the "plugins" parameters do not perform sanitization/input filtering, an attacker with access to the Roundcube...

CVE-2026-48907

CVE-2026-48907 – Vulnerabilidad de Ejecución Remota de Código RCE no autenticada en Joomla JCE Gravedad: Crítica CVSS 9.8 / CVSS v4 10.0 CVE: CVE-2026-48907 CWE: CWE-284 – Control de Acceso Inadecuado Software afectado: Extensión Joomla Content Editor JCE para Joomla Estado: Divulgada públicament...

CVE-2024-33113

CVE-2024-33113 D-LINK DIR-845L es vulnerable a la divulgación de información a través del archivo bscsmsinbox.php. CVE-2024-33113 es una vulnerabilidad en el router D-LINK DIR-845L que permite la divulgación de información a través del archivo bscsmsinbox.php. La vulnerabilidad surge del manejo...

CVE-2025-24801

CVE-2025-24801 PoC for GLPI RCE This repository contains a proof-of-concept script poc.py that exploits CVE-2025-24801, an LFI-to-RCE vulnerability in GLPI 10.0.17. It automates: Logging into GLPI Enabling .php uploads by updating document type settings Uploading a PHP reverse shell via the AJAX...

CVE-2023-49544

CVE-2023-49544 Customer Support System 1.0 - Local File Inclusion Description : Customer Support System 1.0 is vulnerable to Local File Inclusion. An authenticated user has the capability to access and read PHP files from the operating system by exploiting a Local File Inclusion LFI vulnerability...

CVE-2026-54708

FreePBX is an open source IP PBX. Prior to versions 16.0.72 and 17.0.7, a critical vulnerability exists in the FreePBX backup Module that allows authenticated attackers to execute arbitrary code on the server. Authentication with a known username that has sufficient access permissions and/or writ...

CVE-2026-54708

The FreePBX open source IP PBX contains a critical vulnerability in the backup Module affecting versions prior to 16.0.72 and 17.0.7 . The root cause is improper path sanitization within the backup restore functionality. This flaw allows authenticated attackers with sufficient permissions or writ...

CVE-2026-54708 Authenticated Remote Code Execution via Path Traversal in FreePBX Backup Module

FreePBX is an open source IP PBX. Prior to versions 16.0.72 and 17.0.7, a critical vulnerability exists in the FreePBX backup Module that allows authenticated attackers to execute arbitrary code on the server. Authentication with a known username that has sufficient access permissions and/or writ...

CVE-2024-34833-payroll-management-system-rce

CVE-2024-34833 Payroll Management System RCE Sin autenticación PoC RCE mediante carga de archivos para https://www.sourcecodester.com/php/14475/payroll-management-system-using-phpmysql-source-code.html. Los nombres de archivo tienen una marca de tiempo antepuesta con precisión de minuto. El scrip...

exploit-CVE-2020-5844

Exploit para CVE-2020-5844 Pandora FMS v7.0NG.742 - Ejecución remota de código ¿Te gusta este repo? ¡Danos una ⭐! Solo para fines educativos y de investigación de seguridad autorizada. Autor del exploit @UNICORDev por @NicPWNs y @Dev-Yeoj Descripción de la vulnerabilidad...

CVE-2022-1329-WordPress-Elementor-3.6.0-3.6.1-3.6.2-Remote-Code-Execution-Exploit

WordPress Plugin - Elementor 3.6.0 3.6.1 3.6.2 Remote Code Execution root@kitploit: Google Dork: none Date: April 16 2022 Exploit Author: AkuCyberSec https://github.com/AkuCyberSec Vendor Homepage: https://elementor.com/ Software Link: https://wordpress.org/plugins/elementor/advanced/ scroll down...

CVE-2018-10517

CVE-2018-12613 Authenticated remote command execution by uploading a fake module, dropping PHP files on remote web server. Software Affected 1. CMS Made Simple 2.2.7; How to use This PowerShell scripts need two parameters to craft a exploit HTTP request: root@kitploit: 1. CMS Made Simple URL...

vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion

A flaw was found in Vim, an open-source command-line text editor. The PHP omni-completion script improperly handles specially crafted input. When a victim opens a malicious PHP file and invokes omni-completion, an unescaped class or trait name can be interpreted as Ex commands. This allows a remo...

CVE-2022-28368

CVE-2022-28368 - Dompdf RCE Exploit PoC de Dompdf RCE alt text ExploitDB Las versiones de Dompdf 1.2.1 son vulnerables a Ejecución Remota de Código RCE mediante la inyección de CSS en los datos. Se puede engañar al archivo para que almacene una fuente maliciosa con extensión .php en su caché de...

CVE-2019-11447_CuteNews-AvatarUploadRCE

CVE-2019-11447 Exploit/PoC - CuteNews 2.1.2 Avatar upload RCE Authenticated Exploit Code for CVE-2019-11447 aka CuteNews 2.1.2 Avatar upload RCE Authenticated Exploit Links: Expected outcome: Login/Register an account, craft user selected PHP file with .gif magic bytes, uploads the file as an...