CVE-2024-8232

CVE-2024-8232 – SpiderControl SCADA Web Server File Upload Vulnerability Summary SpiderControl SCADA Web Server is vulnerable to unauthenticated arbitrary file uploads, allowing attackers to upload malicious scripts e.g., web shells and gain remote code execution. CVE ID : CVE-2024-8232 Vendor :...

CVE-2019-16113

CVE-2019-16113 This is a python implementaiton PoC for the Bludit Directory Traversal Image File Upload Vulnerability CVE-2019-16113 Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .jpg or .png file name, and then this PHP code...

CVE-2024-53677

POC from https://y4tacker.github.io/2024/12/16/year/2024/12/Apache-Struts2-%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E9%80%BB%E8%BE%91%E7%BB%95%E8%BF%87-CVE-2024-53677-S2-067/ RCE Conditions No restriction on dangerous file extensions File name obtained from upload parameters when uploading files...

fortipwn

fortipwn Forti CVE-2022-40684 enumeration script built in Rust. Uploads an SSH public key into authorizedkeys, allowing an attacker to SSH into a server running FortiOS as admin. Usage $ ./fortipwn Build $ git clone https://github.com/Grapphy/fortipwn/ $ cd fortipwn $ cargo build --release $ cd...

CVE-2026-6960

CVE-2026-6960 — BookingPress Pro ≤ 5.6 | Unauthenticated Arbitrary File Upload Research by: Atomic Edge Severity: Critical | CVSS: 9.8 | Auth Required: None ⚠️ v2 — Technical corrections applied based on community feedback. See Changelog for details. Overview A critical unauthenticated arbitrary...

CVE-2019-15813

CVE-2019-15813 This container was made to explain and demonstrate how CVE-2019-15813 Sentrifugo works Sentrifugo V3.2 Sentrifugo is a Human Resource Management System How to Install docker-compose up Default crentials to test ----Super Admin---- Username : empp0001 Password : 5faa7bdf3d7af...

research-cve-2025-68971

CVE 2025-68971 | Investigación de Conocimiento de Holloway Chew, Kean Ho El 22 de diciembre de 2025, se descubrió una vulnerabilidad de seguridad CVE 2025-68971 CVSS: 5.5/MEDIUM en la aplicación de código abierto Forgejo 13.0.3, detectada por primera vez en el sistema operativo FreeBSD14. Provocó...

CVE-2026-3891-Linux

███████╗██████╗ ██╗███████╗███╗ ██╗██████╗ ███████╗ ██╔════╝██╔══██╗██║██╔════╝████╗ ██║██╔══██╗██╔════╝ █████╗ ██████╔╝██║█████╗ ██╔██╗ ██║██║ ██║███████╗ ██╔══╝ ██╔══██╗██║██╔══╝ ██║╚██╗██║██║ ██║╚════██║ ██║ ██║ ██║██║███████╗██║ ╚████║██████╔╝███████║ ╚═╝ ╚═╝ ╚═╝╚═╝╚══════╝╚═╝ ╚═══╝╚═════╝...

juniper-rce_cve-2023-36844

CVE-2023-36844 , CVE-2023-36845 , CVE-2023-36846 , CVE-2023-36847 A Proof of Concept for chaining the CVEs CVE-2023-36844, CVE-2023-36845, CVE-2023-36846, CVE-2023-36847 developed by @watchTowr to achieve Remote Code Execution in Juniper JunOS within SRX and EX Series products. Follow the watchTo...

cve-2023-2523-and-cve-2023-2648

cve-2023-2523 Nota: El script sube un archivo phpinfo Instrucciones de uso: Los resultados se guardan automáticamente en el archivo result.txt imagen POC manual: POST /E-mobile/App/Ajax/ajax.php?action=mobileuploadsave HTTP/1.1 Host: your-ip Content-Length: 352 Cache-Control: max-age=0...

CVE-2024-50623

CVE-2024-50623 Cleo Unrestricted file upload and download PoC CVE-2024-50623 Arbitrary File Write python CVE-2024-50623.py --target http://192.168.1.18:5080/Synchronization --action write --what poc.dll --where "........\poc.dll" / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y...

CVE-2023-29386

CVE-2023-29386 — Manager for Icomoon This README documents a disclosed vulnerability for educational and defensive use only. Donot run tests against production systems or systems you do not own or have explicit permission to test. Discovered by: deokhunKim Status: Public Disclosure Date Reported:...

CVE-2024-50379-POC

Explotación y POC de CVE-2024-50379 Este repositorio contiene una Prueba de Concepto POC para CVE-2024-50379 , una vulnerabilidad que afecta a Apache Tomcat. El problema implica una condición de carrera de Tiempo de Verificación Tiempo de Uso TOCTOU , que puede llevar a Ejecución Remota de Código...

Tomcat-CVE_2025_24813

Tomcat CVE-2025-24813 playground Exploit was forked from https://github.com/absholi7ly/POC-CVE-2025-24813/blob/main/README.md did not work for me Content 1. ROOT.war is a minimal app with one servlet including apache-common-3.1 and spawing a session 2. ysoserial.jar taken original from ysoserial...

CVE-2024-9047

CVE-2024-9047 CVE-2024-9047, wfufiledownloader.php Access via wfufiledownloader.php file, WordPress File Upload Solution poc, solution vulnerability occurs, arbitrary file access, manipulation, or modification is possible...

2023-2245

A vulnerability was found in hansunCMS 1.4.3. It has been declared as critical. This vulnerability affects unknown code of the file /ueditor/net/controller.ashx?action=catchimage. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed t...

cve-2021-31630

cve-2021-31630 OpenPLC WebServer v3 - RCE autenticado Este script PoC está basado en el exploit proporcionado por Fellipe Oliveira. Características : Sube directamente código C a /hardware en lugar de cargar un archivo st Restaura el programa predeterminado antes de cargar la reverse shell Revers...

CVE-2017-10271

CVE-2017-10271 CVE-2017-10271 Ejecución de comandos con retorno de salida Subir shell directamente Probado en Linux con Weblogic 10.3.6.0 OK Uso y parámetros python weblogicwlswsatexp.py -t IP:7001 usage: weblogicwlswsatexp.py -h -t TARGET -c CMD -o OUTPUT -s SHELL optional arguments: -h, --help...

CVE-2025-12673

Flex QR Code Generator ' shell.php curl -X POST "https://victimsite.com/wp-admin/admin-ajax.php" \ -F "action=flexqrupdateqr" \ -F "qrId=1" \ -F "qrData="data":"https://example.com"" \ -F "[email protected]" Detalles La vulnerabilidad existe en el método updateqrcode de la clase...

FreePBX-Multiple-CVEs-2025

FreePBX-Multiple-CVEs-2025 This repository documents three security vulnerabilities discovered in FreePBX CVE-2025-66039, CVE-2025-61678, CVE-2025-61675, including analysis, impact, and proof-of-concept details for security research and awareness purposes. Description CVEs 🔴 CVE-2025-61675 A...