CVE-2023-40028

CVE-2023-40028 Proof of Concept This repository contains a proof of concept POC for CVE-2023-40028, demonstrating a vulnerability in the Ghost content management system where authenticated users can upload symlinks, leading to arbitrary file read vulnerabilities. Disclaimer This POC is provided f...

CVE-2026-57811

CVE-2026-57811 — Realtyna Organic IDX + WPL Real Estate RCE non autenticata -red.svg Esecuzione Remota di Codice Critica Non Autenticata CVSS 10.0 — Realtyna Organic IDX + WPL Real Estate ≤ 5.2.0 Questo strumento sfrutta CVE-2026-57811 , una vulnerabilità critica nel plugin WordPress Realtyna...

CVE-2025-34085

CVE-2025-34085 — Exploit für nicht authentifizierte Remote-Codeausführung in WordPress Simple File List Ein automatisierter Exploit und Scanner für CVE-2025-34085 , eine kritische Schwachstelle im WordPress Simple File List Plugin, die nicht authentifizierte Remote-Codeausführung durch...

CVE-2017-10271

Brief Description Command execution with echo output Direct shell upload Tested OK on Linux with WebLogic 10.3.6.0 Usage python weblogicwlswsatexp.py -t 172.16.80.131:7001 usage: weblogicwlswsatexp.py -h -t TARGET -c CMD -o OUTPUT -s SHELL optional arguments: -h, --help show this help message and...

CVE-2024-23346-exploit

CVE-2024-23346-exploit Dies ist ein Exploit für die bekannte Remote-Code-Ausführungs-Schwachstelle RCE in der Python-Bibliothek pymatgen CVE-2024-23346 durch das Hochladen einer bösartigen CIF-Datei auf die gehostete CIF Analyzer-Website der Chemistry-Maschine von Hack the Box. NVD-CVE-Link :...

watchTowr-vs-Commvault-PreAuth-RCE-CVE-2025-34028

CVE-2025-34028 Una prova di concetto di Remote Code Execution pre-autenticata per Commvault Consulta il nostro blog post per i dettagli tecnici Rilevamento in azione python watchtowr-vs-commvault-rce-CVE-2025-34028.py --url https://192.168.1.1 / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / /...

PoC-CVE-2026-38526

CVE-2026-38526 - Krayin CRM PHP Upload RCE Exploit automatizzato per Krayin CRM ≤ 2.2.x. Questo script sfrutta una vulnerabilità di caricamento file senza restrizioni nell'endpoint TinyMCE /admin/tinymce/upload, aggira la validazione del tipo MIME fingendo image/jpeg, carica una webshell PHP ed...

WordPress Doctreat theme <= 1.7.0 - Arbitrary File Upload vulnerability

Arbitrary File Upload vulnerability discovered by Jamaal ahmed in WordPress Theme Doctreat versions = 1.7.0...

CVE-2026-36669-FengOffice

Security Advisory: CVE-2026-36669 Unauthenticated Arbitrary File Upload in Feng Office Community Edition An unauthenticated arbitrary file upload vulnerability exists in ckuploadhandler.php in Feng Office Community Edition version 3.11.13.11. This flaw allows remote, unauthenticated attackers to...

CVE-2022-29464

CVE-2022-29464 CVE-2022-29464 is a critical vulnerability in WSO2 Identity Server, an open-source identity and access management platform. The vulnerability allows remote attackers to upload malicious JSP files that can execute arbitrary commands on the target system with administrative privilege...

CVE-2026-48908-SP-Page-Builder-Joomla

CVE-2026-48908: SP Page Builder Joomla Unauthenticated RCE Proof of Concept exploit for CVE-2026-48908, an unauthenticated Remote Code Execution vulnerability in Joomla SP Page Builder component. Vulnerability Overview CVE-2026-48908 is a critical security vulnerability that allows unauthenticate...

CVE-2021-40870

CVE-2021-40870 Exploitation An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous type is possible, which allows an unauthenticated user to execute arbitrary code via directory traversal. Modules need to Install To run this project...

CVE-2019-16113-Dockerfile

Vulnerabilità di Directory Traversal in Bludit CVE-2019-16113 Bludit-3.9.2 è un CMS leggero che richiede solo un ambiente LAMP per funzionare. Durante il caricamento delle immagini, Bludit controlla l'estensione del file ma non lo elimina tempestivamente, consentendo a un aggressore di controllar...

CVE-2026-88396

ApiAdmin v5.0 and before is vulnerable to Directory Traversal. The admin file-upload endpoint POST /admin/Index/upload in ApiAdmin takes the uploaded file's extension verbatim there is no whitelist, blacklist or content check and moveuploadedfile drops the file into the web-accessible directory...

CVE-2025-2005

CVE-2025-2005 Il plugin WordPress Front End Users = 3.2.32 è vulnerabile al caricamento arbitrario di file Exploit del Plugin WordPress Front-End Users Informazioni sulla Vulnerabilità Nome del Plugin : Front-End Users Plugin Versione Affetta : = 3.2.32 Tipo di Vulnerabilità : Caricamento...

CVE-2026-102777

The Joomla Extension - svenbluege.de Event Gallery extension (versions

CVE-2026-102777 Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension < 6.6.0

Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension 6.6.0 - The Google Photos picker of the back-end upload page fetches the thumbnails of the picked images through the server, with the OAuth access token of the Google Photos...

CVE-2026-0740-upload-template

Questo repository non contiene un README...

CVE-2026-4040-Race-Condition-in-File-Upload-Leading-to-RCE

CVE-2026-4040 – Race Condition nel caricamento dei file che porta a RCE Codice del programma Python Flask uploadserver.py - File upload with race condition from flask import Flask, request import os, tempfile, time, threading app = Flaskname UPLOADDIR = '/tmp/uploads' os.makedirsUPLOADDIR,...

CVE-2024-25832-PoC

CVE-2024-25830 and CVE-2024-25832 - DataCube3 Improper Access Control and Unrestricted File Upload. Overview This repository features a Proof of Concept PoC for a two-step exploit chain targeting DataCube3 devices. It combines CVE-2024-25830 Improper Access Control to extract root passwords and...