Python-CVE-2020-25213

Python-CVE-2020-25213 Python Interactive Exploit for WP File Manager Vulnerability. The File Manager wp-file-manager plugin before 6.9 for WordPress allows remote attackers to upload and execute arbitrary PHP code because it renames an unsafe example elFinder connector file to have the .php...

CVE-2019-12102-Scanner

CVE-2019-12102 Scanner The CVE-2019-12102 Scanner is an automated tool to scan for the Unauthenticated File Upload / File Exposure vulnerability in Kentico CMS versions 11 to 12. This vulnerability is caused by improper access control on the endpoint...

CVE-2023-41425-WonderCMS-Authenticated-RCE

CVE-2023-41425-WonderCMS-Authenticated-RCE Description WonderCMS v3.2.0 - v3.4.2 is vulnerable. Remote attackers can take full control of the server using a Cross-Site Scripting XSS exploit For educational purposes only . Here's the game plan: How it works: The exploit abuses the installModule...

CVE-2022-34169

CVE-2022-34169 PoC A malleable PoC and solution for the SUpwn challenge from SUCTF 2025. Based on this issue from the original discoverer Felix Wilhelm and this blog post thanat0s. Tries not to rely as much on hard constants as the existing PoCs out there. If you want to deliver a different java...

CVE-2024-53677-POC

CVE-2024-53677 A kind old vulnerability that effect Apache Struts leading to LFI, and remote exection. more info about the vulnerability you can refer to this great blog. Apache Struts path traversal → RCE CVE-2024-53677 POC usage I have send much time make this as custamizable as possiable becau...

CVE-2026-91844

İzometri IT Services Domestic and Foreign Trade Co. Ltd. eimzamip is vulnerable to Remote Code Execution via an unrestricted file upload of dangerous types. This vulnerability affects versions from v1.6.4 before v1.6.6 . The root cause allows an attacker to upload malicious files , leading to a H...

EUVD-2026-94982

Unrestricted upload of file with dangerous type vulnerability in İzometri IT Services Domestic and Foreign Trade Co. Ltd. Eimzamip allows Using Malicious Files. This issue affects eimzamip: from v1.6.4 before v1.6.6...

CVE-2024-11635

WordPress File Upload This README documents a disclosed vulnerability for educational and defensive use only. Donot run tests against production systems or systems you do not own or have explicit permission to test. Discovered by: abrahack Status: Public Disclosure Date Reported: 2025-01-07 CVE I...

CVE-2024-46377

CVE-2024-46377 PoC for Arbitrary File Upload Vulnerability in Best House Rental Management System 1.0 Overview This Python script demonstrates how to exploit the arbitrary file upload vulnerability in Best House Rental Management System 1.0. The vulnerability allows an attacker to upload a...

CVE-2024-8232

CVE-2024-8232 – SpiderControl SCADA Web Server File Upload Vulnerability Summary SpiderControl SCADA Web Server is vulnerable to unauthenticated arbitrary file uploads, allowing attackers to upload malicious scripts e.g., web shells and gain remote code execution. CVE ID : CVE-2024-8232 Vendor :...

CVE-2025-34085

Cyberlone Indonesia 🛠️ WordPress Simple File List RCE Scanner + Auto-Clean 인증 없이 WordPress Simple File List 플러그인, 특히 CVE-2025-34085 에 취약한 플러그인의 원격 코드 실행RCE 을 탐지하고 익스플로잇하기 위한 자동화 도구입니다. 대상 자동 정리 시스템과 멀티스레드를 지원하여 대규모 작업에 효율적입니다. 📌 취약점 정보 CVE ID : CVE-2025-34085 구성 요소 : WordPress 플러그인 – Simple File...

CVE-2024-53677

POC from https://y4tacker.github.io/2024/12/16/year/2024/12/Apache-Struts2-%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E9%80%BB%E8%BE%91%E7%BB%95%E8%BF%87-CVE-2024-53677-S2-067/ RCE Conditions No restriction on dangerous file extensions File name obtained from upload parameters when uploading files...

fortipwn

fortipwn Forti CVE-2022-40684 enumeration script built in Rust. Uploads an SSH public key into authorizedkeys, allowing an attacker to SSH into a server running FortiOS as admin. Usage $ ./fortipwn Build $ git clone https://github.com/Grapphy/fortipwn/ $ cd fortipwn $ cargo build --release $ cd...

CVE-2026-6960

CVE-2026-6960 — BookingPress Pro ≤ 5.6 | 인증되지 않은 임의 파일 업로드 연구: Atomic Edge 심각도: Critical | CVSS: 9.8 | 인증 필요: 없음 ⚠️ v2 — 기술적 수정 적용 커뮤니티 피드백 반영 자세한 내용은 변경 로그를 참조하세요. 개요 BookingPress Pro WordPress 플러그인버전 ≤ 5.6에 중요한 인증되지 않은 임의 파일 업로드 취약점이 존재합니다. 예약 제출 핸들러 bookingpressbookappointmentbooking은 서명 사용자 정의...

CVE-2019-15813

CVE-2019-15813 This container was made to explain and demonstrate how CVE-2019-15813 Sentrifugo works Sentrifugo V3.2 Sentrifugo is a Human Resource Management System How to Install docker-compose up Default crentials to test ----Super Admin---- Username : empp0001 Password : 5faa7bdf3d7af...

research-cve-2025-68971

CVE 2025-68971 | Holloway Chew, Kean Ho's Knowledge Research On 2025-12-22, a security vulnerability CVE 2025-68971 CVSS: 5.5/MEDIUM was discovered in open-source Forgejo 13.0.3 application first detected on FreeBSD14 operating system. It caused the operating system went into mass-killing all...

CVE-2026-3891-Linux

███████╗██████╗ ██╗███████╗███╗ ██╗██████╗ ███████╗ ██╔════╝██╔══██╗██║██╔════╝████╗ ██║██╔══██╗██╔════╝ █████╗ ██████╔╝██║█████╗ ██╔██╗ ██║██║ ██║███████╗ ██╔══╝ ██╔══██╗██║██╔══╝ ██║╚██╗██║██║ ██║╚════██║ ██║ ██║ ██║██║███████╗██║ ╚████║██████╔╝███████║ ╚═╝ ╚═╝ ╚═╝╚═╝╚══════╝╚═╝ ╚═══╝╚═════╝...

cve-2023-2523-and-cve-2023-2648

cve-2023-2523 Note: The script uploads a phpinfo file Usage: Results are automatically saved to result.txt Image Manual POC: POST /E-mobile/App/Ajax/ajax.php?action=mobileuploadsave HTTP/1.1 Host: your-ip Content-Length: 352 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 Origin: null...

juniper-rce_cve-2023-36844

CVE-2023-36844 , CVE-2023-36845 , CVE-2023-36846 , CVE-2023-36847 A Proof of Concept for chaining the CVEs CVE-2023-36844, CVE-2023-36845, CVE-2023-36846, CVE-2023-36847 developed by @watchTowr to achieve Remote Code Execution in Juniper JunOS within SRX and EX Series products. Follow the watchTo...

CVE-2024-50623

CVE-2024-50623 Cleo Unrestricted file upload and download PoC CVE-2024-50623 Arbitrary File Write python CVE-2024-50623.py --target http://192.168.1.18:5080/Synchronization --action write --what poc.dll --where "........\poc.dll" / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y...