CVE-2025-13374

Kalrav AI Agent = 2.3.3 - Carga de archivos arbitraria no autenticada a través de la acción AJAX kalravuploadfile El plugin Kalrav AI Agent de WordPress versión 2.3.3 y anteriores contiene una vulnerabilidad de carga de archivos arbitraria que permite a usuarios no autenticados subir archivos PHP...

CVE-2026-64949

Pandora FMS versions 777 onwards are susceptible to a vulnerability in the File Manager module caused by an incomplete extension blacklist . This flaw allows authenticated users to upload and execute arbitrary .phar files , potentially leading to unauthorized code execution. No specific remediati...

EUVD-2026-90598

Incomplete extension blacklist in the File Manager module allows authenticated upload and execution of arbitrary .phar files. Affects Pandora FMS from 777 onwards...

CVE-2026-64947

The Pandora FMS software, version 777 onwards , is vulnerable to a chained CSRF bypass and unrestricted file upload vulnerability within the Plugin File Manager . This flaw allows an attacker to upload and execute arbitrary PHP code , leading to Remote Code Execution (RCE) . No specific remediati...

EUVD-2026-90596

A chained CSRF bypass and unrestricted file upload vulnerability in the Plugin File Manager allows an attacker to upload and execute arbitrary PHP code, resulting in Remote Code Execution. This issue affects Pandora FMS: from 777 onwards...

CVE-2026-64947 CSRF Bypass Leading to Remote Code Execution via Unrestricted File Upload in Plugin File Manager

A chained CSRF bypass and unrestricted file upload vulnerability in the Plugin File Manager allows an attacker to upload and execute arbitrary PHP code, resulting in Remote Code Execution. This issue affects Pandora FMS: from 777 onwards...

CVE-2026-64946 CSRF Bypass Leading to Stored Cross-Site Scripting via Unrestricted SVG Upload in File Manager

A chained CSRF and unrestricted SVG file upload vulnerability in the File Manager module allows stored Cross-Site Scripting, enabling session cookie exfiltration and administrator account takeover. This issue affects Pandora FMS: from 777 onwards...

CVE-2026-64946

The Pandora FMS monitoring platform is affected by a chained vulnerability involving CSRF and unrestricted SVG file upload within the File Manager module . This flaw allows for stored Cross-Site Scripting (XSS) , which can be leveraged to exfiltrate session cookies and perform administrator accou...

EUVD-2026-90593

A chained CSRF and unrestricted SVG file upload vulnerability in the File Manager module allows stored Cross-Site Scripting, enabling session cookie exfiltration and administrator account takeover. This issue affects Pandora FMS: from 777 onwards...

CVE-2023-40028

CVE-2023-40028：Ghost 任意文件读取 CVE-2023-40028 的概念验证，这是 Ghost 内容导入功能中的一个经过身份验证的任意文件读取漏洞。一个精心构造的 ZIP 归档会在 content/images 下创建一个符号链接，使脚本能够从 Ghost 主机请求文件。 5.59.1 之前的 Ghost 版本会受到影响。请升级到 5.59.1 或更高版本。 仅在你拥有或获得授权测试的系统上使用此工具。 要求 Python 3 requests Ghost 管理员凭据或有效的 ghost-admin-api-session cookie python3 -m venv...

CVE-2019-11231-PoC

GetSimpleCMS CVE-2019-11231 RCE 漏洞利用 针对 GetSimpleCMS ≤ 3.3.15 的未认证远程代码执行漏洞利用 漏洞 GetSimpleCMS 会公开暴露敏感文件（/data/other/authorization.xml、/data/users/），攻击者可以： 1. 泄漏 API 密钥和用户名 2. 伪造认证 Cookie 3. 获取 CSRF 令牌 4. 上传并执行任意 PHP 代码 CVSS 评分： 9.8（严重） 使用方法 pip install -r requirements.txt python3 exploit.py...

CVE-2025-13597

AI Feeds = 1.0.11 - 未经验证的任意文件上传 AI Feeds WordPress 插件 1.0.11 及以下版本在 actualizadorgit.php 文件中存在一个未经验证的远程代码执行漏洞。该文件可直接通过 HTTP 访问，无需任何身份验证或授权检查，允许未经验证的攻击者下载任意 GitHub 仓库并覆盖插件文件，从而导致远程代码执行。 快速漏洞利用 提供了一个 CVE-2025-13597.py 脚本来演示远程攻击者上传 shell.php 并执行远程代码： python3 CVE-2025-13597.py -t http://techcorp.cc -o...

WordPress Zella Theme theme < 2.6.3 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by Mike Gozdiskowski in WordPress Theme Zella Theme versions 2.6.3...

CVE-2023-3722

CVE-2023-3722 针对 Avaya Aura Device Services 不受限制的文件上传远程代码执行（RCE）漏洞（CVE-2023-3722）的 Python POC。 该脚本将使用 PUT 请求上传一个带有八位随机生成文件名的 PHP 文件，然后发起 GET 请求获取该文件并解析其输出，从而获得命令执行结果。 运行 python3 ./CVE-2023-3722.py example.com:444 --query "id" python3 ./CVE-2023-3722.py example.com:444 --query "hostname"...

sudowp-postgallery

SudoWP PostGallery（安全分支） 贡献者： SudoWP, WP Republic 原始作者： RTO GmbH 标签： 画廊, 安全, 已修补, cve-2025-13543 最低要求： 5.8 测试至： 6.7 稳定版本： 1.12.6 许可证： GPLv2 或更高版本 安全声明 这是已废弃的“PostGallery”插件的安全强化分支 。原始插件因严重安全漏洞于2025年12月2日在 WordPress.org 关闭。 原始插件链接： https://wordpress.org/plugins/postgallery/ 描述 SudoWP PostGallery...

CVE-2026-103541

A vulnerability was detected in formtools.org Form Tools up to 3.1.1. This issue affects the function Files::uploadFile of the file global/code/actions.php of the component Ajax Handler. The manipulation results in unrestricted upload. It is possible to launch the attack remotely. The exploit is...

CVE-2026-38526-PoC-htb-nexus

CVE-2026-38526-PoC-htb-nexus 一个针对CVE-2026-38526的PoC脚本，通过webkul krayin 2.2.x的/admin/tinymce/upload端点中的文件上传漏洞实现远程代码执行（专为htb-nexus构建） 🛠 快速开始和使用 1. 克隆仓库： git clone https://github.com/Resolvdd/CVE-2026-38526-PoC-htb-nexus.git cd CVE-2026-38526-PoC-htb-nexus 2. 创建Python虚拟环境： python3 -m venv .venv sourc...

CVE-2026-11344-RCE

Vehicle Management System In PHP - 通过 newdriver.php 文件上传实现未认证远程代码执行 漏洞信息 字段| 详情 ---|--- 产品| Vehicle Management System In PHP 供应商| code-projects.org 版本| V1.0 漏洞类型| 未限制文件上传导致远程代码执行 CWE-434 受影响文件| newdriver.php, newvehicle.php 参数| photo POST, multipart/form-data 是否需要认证| 否（未认证） CVSS 分数| 10.0 严重 攻击向量|...

CVE-2026-39292

CVE-2026-39292 – Falco Solutions PHPPageBuilder v0.31.0 中的任意文件上传导致远程代码执行 摘要： pagemanager/pagebuilder 模块中的一个文件上传漏洞允许已验证/未验证的攻击者上传任意文件，从而导致远程代码执行。 受影响版本： PHPPageBuilder v0.31.0 影响： 远程代码执行 供应商： Falco Solutions 致谢： 由 Krishnadev P Melevila 发现...

EUVD-2026-90499

A vulnerability was detected in formtools.org Form Tools up to 3.1.1. This issue affects the function Files::uploadFile of the file global/code/actions.php of the component Ajax Handler. The manipulation results in unrestricted upload. It is possible to launch the attack remotely. The exploit is...