CVE-2018-19422

CVE-2018-19422 root@kitploit: Exploit Title: File Upload Bypass to RCE Authenticated Google Dork: N/A Date: 17/05/2021 Exploit Author: Drew Alleman Based on an exploit written by: Fellipe Oliveira Vendor Homepage: https://subrion.org/ Software Link: https://github.com/intelliants/subrion Version:...

CVE-2020-29607

Alienfader Exploit / Alien@shell Webshell Upload Exploit Beschreibung: Dieses Python-Skript nutzt eine Schwachstelle zur Umgehung der Datei-Upload-Beschränkung in Pluck CMS z. B. Versionen vor 4.7.13 aus, um eine PHP-Webshell hochzuladen. Nach dem Hochladen kann die Shell mit dem Namen "shell.pha...

CVE-2026-57827

CVE-2026-57827 — RSFiles! Joomla-Komponente: Nicht authentifizierter Datei-Upload führt zu RCE Split-Controller-Upload-Bypass → direkter Schreib-Task → /downloads/shell.php → RCE Übersicht CVE-2026-57827 ist eine kritische CVSS 9.8 nicht authentifizierte Schwachstelle für beliebigen Datei-Upload ...

CVE-2020-29607-POC

Pluck CMS 4.7.13 Exploit RCE con Upload File 🚨 Exploit Didattico di Esecuzione Remota di Codice 🚨 Autore: Ron Jost Hacker5preme Riferimento: Exploit-DB CVE: CVE-2020-29607 ⚠️ Dichiarazione di esclusione: Questo script è destinato esclusivamente a scopi didattici e di test autorizzati. Non...

CVE-2024-21546

CVE-2024-21546 Python Exploit 🔥 Descrizione Questo script exploit Python ha come bersaglio un vulnerabile Laravel Filemanager creato da UniSharp , che consente agli utenti autenticati di bypassare le restrizioni sui file e caricare file dannosi. Ciò può portare a Esecuzione di codice in remoto RC...

EXPLOIT-CVE-2025-27515

CVE-2025-27515 Prova di Concetto Una dimostrazione pratica di CVE-2025-27515 , una vulnerabilità di bypass della convalida del caricamento di file in Laravel Framework ≤ 12.0.0. Panoramica della Vulnerabilità CVE-2025-27515 è un bypass della convalida che consente agli attaccanti di aggirare le...

CVE-2023-47129

CVE-2023-47129 - Statamic CMS versioni 4.33.0 - Esecuzione remota di codice Descrizione Nelle versioni 4.33.0 di Statamic CMS, dove il front-end ha un modulo con upload di file attivo, è possibile inviare file PHP creati per sembrare immagini, indipendentemente dalle regole di validazione MIME...

tomcat-cve-2017-12617

Tomcat CVE-2017-12617 Exploit/PoC Apache Tomcat 9.0.1 Beta / 8.5.23 / 8.0.47 / 7.0.8 - Bypass del caricamento JSP / Esecuzione remota di codice per Python3 Ho apportato alcune modifiche allo script originale per renderlo compatibile con Python 3! Se ci sono problemi o difficoltà, sentiti libero d...

vuln-chain-lab

File Upload Bypass + Stored XSS PoC Labor Eine bewusst verwundbare Webanwendung, die zeigt, wie ein File-Upload-Bypass mit Stored-XSS verkettet wird, um Backdoor-Admin-Konten zu erstellen, selbst wenn CSP-, CORS- und CSRF-Schutzmaßnahmen vorhanden sind. Ausführlicher Blogbeitrag: KurtiseBear Blog...

Inject-PHP-to-JPG-Using-Jhead

Inject-PHP-to-JPG-Using-Jhead $ pkg install vim oder apt-get install vim $ pkg install jhead oder apt-get install jhead $ jhead -h für Hilfe $ jhead -purejpg yourfiles.jpg $ jhead -ce yourfiles.jpg Drücke ESC und tippe :x zum Speichern $ jhead yourfiles.jpg Beispiel :...

Upload_Bypass

UploadBypass v3 حول Upload Bypass هي أداة بسيطة مصممة لمساعدة مختبرى الاختراق ومطاردي الثغرات في اختبار آليات رفع الملفات. تستخدم الأداة تقنيات متنوعة من برامج مكافآت الثغرات لتبسيط عملية تحديد واستغلال نقاط الضعف، مما يضمن تقييماً شاملاً لتطبيقات الويب. تم التطوير بواسطة Sagiv 🚀 التحديثات تمت...

CVE-2026-18781

The Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin before 1.3.9.9 does not validate the final name of an uploaded file after stripping characters from it, allowing unauthenticated users to defeat its file type restrictions and execute arbitrary code on the server...

CVE-2026-18781 Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.9 - Unauthenticated RCE via Control Character Filename Bypass

The Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin before 1.3.9.9 does not validate the final name of an uploaded file after stripping characters from it, allowing unauthenticated users to defeat its file type restrictions and execute arbitrary code on the server...

Bypass-File-Upload-on-Koken-CMS

Bypass del File Upload su Koken CMS Questo repository spiega come bypassare le restrizioni di File Upload su Koken CMS - 0.22.24 autenticato Informazioni su Koken CMS Koken è un sistema di gestione dei contenuti gratuito progettato per fotografi, designer e artisti. Website: http://koken.me/ Koke...

PT-2026-78989

Subscriber Arbitrary File Upload in IT Residence = 3.2.1 versions...

EUVD-2026-62278

The JetEngine WordPress plugin before 3.8.14 adds SVG to the site-wide list of allowed upload types without sanitising the file contents, allowing users with the upload files capability, such as Authors, to upload a file containing malicious JavaScript that executes in the browser of any user who...

EUVD-2026-60589

Grav plugin-api before 1.0.15 contains a script injection vulnerability where the SVG sanitizer only checks for the exact extension 'svg', allowing .svgz and .xhtml files to bypass sanitization and be stored unsanitized. Attackers with api.media.write permission can upload files containing...

CVE-2026-72583

A stored cross-site scripting XSS vulnerability in fastschema through v0.15.1 allows a low-privileged authenticated user to upload an SVG file containing malicious JavaScript by bypassing the MIME type allow-list check...

CVE-2026-63223

CodeIgniter (PHP framework) prior to version 4.7.4 is affected by an upload validation bypass in the is_image and mime_in rules. If an application preserves the client-supplied filename and stores uploads in a web-accessible, script-enabled directory, a remote attacker could upload executable con...

GHSA-JQH4-M9W3-8HP9 Axios: Fetch adapter `ReadableStream` uploads bypass `maxBodyLength`

Summary axios’ fetch adapter does not enforce maxBodyLength for live WHATWG ReadableStream request bodies whose size cannot be determined before dispatch. Applications that use adapter: "fetch" and rely on maxBodyLength to cap untrusted upload/proxy streams can send the full stream even when it...