85757 matches found
KrayinCRM-RCE-Exploit-CVE-2026-38526
🔓 Krayin CRM v2.2.x - Authenticated Remote Code Execution Exploit ⚠️ FOR AUTHORIZED SECURITY TESTING ONLY - Unauthorized use is illegal and unethical. 📋 Overview This exploit tool demonstrates a critical authenticated remote code execution RCE vulnerability discovered in Krayin CRM version 2.2.x...
CVE-2026-56291
CVE-2026-56291 — Balbooa Forms Joomla Mass RCE Exploit Pre-Auth form.uploadAttachmentFile → No CSRF → PHP Upload Overview CVE-2026-56291 is a critical CVSS 9.8 unauthenticated arbitrary file upload vulnerability in the Balbooa Forms combaforms Joomla extension CISA KEV: Added July 10, 2026 — acti...
CVE-2026-48907
CVE-2026-48907 — Joomla JCE Unauthenticated RCE Lab PSsec Educational security research lab for CVE-2026-48907. Overview CVE-2026-48907 is a critical CVSS 10.0 unauthenticated remote code execution vulnerability in JCE Joomla Content Editor , the most widely installed editor extension for Joomla,...
CVE-2026-20245
🚨 CVE-2026-20245 - Cisco Catalyst SD-WAN Manager Privilege Escalation Authenticated Privilege Escalation via Crafted File Upload A vulnerability affecting Cisco Catalyst SD-WAN Manager that allows authenticated attackers with administrative privileges to execute arbitrary commands as root. 📖...
CVE-2025-69212-PoC
CVE-2025-69212 — OpenSTAManager P7M Command Injection PoC OpenSTAManager = 2.9.8 — OS Command Injection via malicious .p7m filename in ZIP upload. File: src/Util/XML.php:100 — unsanitized $file in exec Vector: /plugins/importFEZIP/actions.php → ZIP → .p7m filename → exec"openssl smime ... -in...
Hack-The-Box-Nexus-Findings-Report
🛡️ Hack The Box - Nexus Findings Report 📋 Overview This repository contains a comprehensive penetration test report for the Hack The Box machine Nexus. 🔍 Key Findings Exposed Credentials in Gitea Commit History - Medium Severity Krayin CRM Unrestricted File Upload CVE-2026-38526 - High Severity...
CVE-2026-14894
CVE-2026-14894 — Super Forms ≤ 6.3.313 Overview Unauthenticated Arbitrary File Upload → Remote Code Execution in the WordPress plugin Super Forms versions ≤ 6.3.313. The vulnerability resides in the AJAX handler supersubmitform which processes file uploads through a datauristring field without...
By-Poloss..-..CVE-2026-48939
CVE-2026-48939 - iCagenda Unauthenticated File Upload to RCE Overview Field| Value ---|--- CVE ID| CVE-2026-48939 CVSS 4.0 Score| 10.0 Critical CVSS Vector| CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H CWE| CWE-284: Improper Access Control Affected Versions| iCagenda 3.2.1 -...
CVE_POC_test
CVEPOCtest Reproducción del CVE-2019-13086 y código experimental del POC Información original del CVE: https://vulners.com/cve/CVE-2019-13086 Entorno de prueba: Arquitectura CSZ CMS + php5.4 + MySQL 5.5 + Apache 2.4 Tipo de vulnerabilidad: Inyección SQL Subida de archivos Breve descripción: En la...
CVE-2026-15282
CVE-2026-15282 — Instant Appointment Mass RCE Exploit Pre-Auth filegetcontents + fileputcontents → PHP Webshell Overview CVE-2026-15282 is a critical CVSS 9.8 unauthenticated arbitrary file upload vulnerability in the Instant Appointment WordPress plugin ≤ 1.2. The addservicefront AJAX action is...
cve-2020-24572
CVE-2020-24572 Se descubrió un problema en includes/webconsole.php en RaspAP 2.5. Con acceso autenticado, un atacante puede utilizar una consola web mal configurada y prácticamente sin restricciones para atacar el sistema operativo subyacente que ejecuta este software, y ejecutar comandos en el...
cve-2020-24572
CVE-2020-24572 An issue was discovered in includes/webconsole.php in RaspAP 2.5. With authenticated access, an attacker can use a misconfigured and virtually unrestricted web console to attack the underlying OS running this software, and execute commands on the system including ones for uploading...
CVE-2026-105762
Dify is an open-source LLM app development platform. Prior to 1.13.0, the /console/api/remote-files/upload endpoint in api/controllers/web/remotefiles.py accepted an attacker-controlled URL without authentication and caused the Dify server to retrieve it. A remote attacker could use the endpoint ...
PT-2026-106405
Name of the Vulnerable Software and Affected Versions Kognetiks Chatbot for WordPress versions prior to 2.5.0 Description An unauthenticated arbitrary file upload issue exists in the Kognetiks Chatbot for WordPress plugin. This allows an attacker to upload files to the server without requiring...
PT-2026-106794
Name of the Vulnerable Software and Affected Versions Payload versions 3.0.1 through 3.89.9 Description Authenticated external URL-based upload retrieval can forward authentication data to a redirected destination that has not been verified as trusted. This behavior may expose a valid session to ...
PT-2026-106442
Name of the Vulnerable Software and Affected Versions Doctreat versions prior to 1.7.1 Description An unauthenticated arbitrary file upload issue exists in the Doctreat WordPress theme. This allows an attacker to upload files to the server without requiring authentication. Recommendations Update ...
PT-2026-106433
Employer / Sales Representative Arbitrary File Upload in Workreap Core = 3.4.5 versions...
PT-2026-106431
Subscriber Arbitrary File Upload in Taskbot = 6.6 versions...
PT-2026-106795
Name of the Vulnerable Software and Affected Versions Payload versions prior to 3.90.0 Payload canary versions prior to 4.0.0-canary.34 Description A collection that allows downloadable SVG uploads can store a malicious SVG file. This file can bypass sanitization, allowing the execution of...