CVE-2025-34085-Multi-target

CVE-2025-34085 多目标 RCE 扫描器 CVE-2025-34085 的大规模利用扫描器 —— 针对 WordPress Simple File List 插件的未认证远程代码执行漏洞。 该工具上传一个伪装成图片的 PHP 载荷，通过易受攻击的文件引擎重命名，并用自定义命令触发 shell 执行。支持多线程扫描大规模目标集。 🔥 功能特性 多目标扫描（从 targets.txt 读取） 自动上传并重命名恶意载荷 可自定义命令的 WebShell 触发 线程化执行以提高速度 成功 RCE 记录到 vuln.txt ⚙️ 使用方法 python3 CVE-2025-34085.p...

CVE-2023-38571-a-macOS-TCC-bypass-in-Music-and-TV

Executive summary macOS Music and TV do an insecure rename resulting in FDA by gaining full control over the user's TCC.db I reported this bug in separate tickets for each app, feel free to merge if applicable. The underlying problem is that these apps have FDA but fail to sanitize their file...

auto_re

AutoRE 特性 1. 自动重命名只有一个API调用或跳转到导入的API的虚拟函数 之前 之后 2. 根据内部调用的API指示符为函数分配TAGS 将标签设置为可重复的函数注释，并在单独的视图中显示标签树 TAGS视图的一些截图： TAG在未探索代码中的显示： 您可以使用右键菜单或按 n 快捷键轻松重命名函数： 安装 只需将 autore.py 复制到 IDA\plugins 目录，然后通过 Edit - Plugins - Auto RE 菜单即可使用。...

delete-self-poc

🗑️ delete-self-poc El delete-self-poc es una demostración de un método para eliminar un ejecutable bloqueado o un archivo actualmente en ejecución del disco. Este concepto fue descubierto inicialmente por Jonas Lykkegaard, y yo he creado la prueba de concepto POC para el mismo. Además, puede...

auto_re

AutoRE Features 1. Auto-renaming dummy-named functions, which have one API call or jump to the imported API Before After 2. Assigning TAGS to functions accordingly to called API-indicators inside Sets tags as repeatable function comments and displays TAG tree in the separate view Some screenshots...

CVE-2025-34085

CVE-2025-34085 — WordPress Simple File List 未认证远程代码执行漏洞利用 针对 CVE-2025-34085 的自动化利用与扫描器，该漏洞存在于 WordPress Simple File List 插件中，通过任意文件上传和重命名功能实现未认证远程代码执行 。 📄 CVE 概要 CVE ID: CVE-2025-34085 受影响组件: WordPress 插件 — Simple File List 漏洞类型: 未认证文件上传和文件重命名为可执行文件 影响: 远程代码执行 RCE 漏洞利用作者: 0xgh057r3c0n 攻击途径: 远程，未认...

laravel-filemanager-unrestricted-upload

Laravel FileManager Unrestricted File Upload CVE-2025-56399 CWE-434: Unrestricted Upload of File with Dangerous Type CVSS Score: 8.5 High 📋 Description This tool provides a Proof of Concept PoC for CVE-2025-56399 , a critical vulnerability in alexusmai/laravel-file-manager versions ≤ 3.3.1. The...

CVE-2025-56399

CVE-2025-56399 – laravel-file-manager v3.3.1 中的认证远程代码执行漏洞 🧭 概述 在 laravel-file-manager v3.3.1 及更早版本中存在一个认证远程代码执行（RCE）漏洞，允许具有文件管理器界面访问权限的攻击者在服务器上执行任意代码。通过上传一个包含恶意 PHP 代码的允许的非 PHP 扩展名（例如 .png、.pdf）文件，并将其重命名为 .php 扩展名，或者直接创建并编辑一个 .php 文件，当通过公共 URL 访问该文件时，攻击者即可实现 RCE。 🧱 受影响组件 项目： laravel-file-manager...

POC-CVE-2026-58048

CVE-2026-58048 CVSS 4.0: 9.4 Crítico | CWE-89: Inyección SQL | NVD Un usuario autenticado de cPanel → SQL arbitrario como root de MySQL mediante el renombrado de bases de datos. cPanel conserva incorrectamente el sqlmode de la sesión del usuario ANSIQUOTES al ejecutar operaciones de renombrado co...

Frontend File Manager < 21.3 - Unauthenticated File Renaming

The Frontend File Manager Plugin WordPress plugin before 21.3 allows any unauthenticated user to rename uploaded files from users. Furthermore, due to the lack of validation in the destination filename, this could allow allow them to change the content of arbitrary files on the web server id:...

CVE-2026-37071

CVE-2026-37071 Veno File Manager Project 4.4.9 中 Actions::renameFile 函数存在任意文件重命名漏洞，可导致权限提升。经认证且拥有 'reanme' 权限的攻击者可通过向受影响端点发送特制 POST 请求，重命名应用程序配置文件，触发配置重建并将超级管理员凭据重置为默认值，从而接管超级管理员账户。 https://github.com/user-attachments/assets/c729b835-3285-4853-8fe2-a485bc88ab79...

CVE-2024-44871

MoziloCMS = 3.0.1 RCE autenticado Descripción Este script es una herramienta de explotación diseñada para probar aplicaciones web que ejecutan MoziloCMS. Permite a un atacante utilizar credenciales de administrador para subir una web shell PHP mediante un archivo jpg, renombrar el archivo subido ...

CVE-2026-100683 Budibase before 3.45.0 SQL Injection via column-rename DDL

Budibase @budibase/server before 3.45.0 builds MySQL and MSSQL column-rename DDL in packages/backend-core/src/sql/sqlTable.ts by interpolating identifiers directly into a raw query string backtick-quoted for MySQL, a single-quoted sprename literal for MSSQL without applying the project's...

CVE-2026-65891

CVE-2026-65891 — PoC de Rename para Joomla JCE Escáner de prueba de concepto para CVE-2026-65891 en la extensión Joomla Content Editor JCE. La validación de entrada incorrecta en la función rename del administrador de archivos de JCE permite a un usuario autenticado con permisos de gestión de...

AZL-104747 CVE-2026-97594 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: landlock: Fix use-after-free of the source's parent directory currentcheckreferpath reads olddentry-dparent without holding a reference nor a lock on it, and then dereferences it in collectdomainaccesses and in the audit record. ...

CVE-2026-97594

The Linux kernel contains a use-after-free vulnerability in the landlock LSM. The current_check_refer_path() function reads old_dentry-&gt;d_parent without holding a reference or lock, leading to a race condition during filename_linkat(). Because hook_path_link() does not lock the parent, a concu...

CVE-2026-97594 landlock: Fix use-after-free of the source's parent directory

In the Linux kernel, the following vulnerability has been resolved: landlock: Fix use-after-free of the source's parent directory currentcheckreferpath reads olddentry-dparent without holding a reference nor a lock on it, and then dereferences it in collectdomainaccesses and in the audit record. ...

CVE-2026-58048-PoC-Exploit

💥 CVE‑2026‑58048 – Kit de ejecución SQL como root en cPanel ⚠️ SOLO USO ÉTICO – PRUEBAS DE SEGURIDAD AUTORIZADAS Este repositorio proporciona herramientas únicamente para profesionales de seguridad autorizados, equipos azules y testers de penetración. El acceso no autorizado a sistemas informático...

Linux Distros Unpatched Vulnerability : CVE-2026-97594

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - landlock: Fix use-after-free of the source's parent directory currentcheckreferpath reads olddentry-dparent without holding a reference nor a lock on it, and th...

CVE-2024-21546

UniSharp Laravel Filemanager RCE No Autenticado CVE-2024-21546 Este repositorio contiene herramientas de evaluación de seguridad, plantillas de detección y un kit de explotación automatizado para identificar y explotar Ejecución Remota de Código RCE No Autenticada en aplicaciones que utilizan el...