Camaleon CMS < 2.8.1 Arbitrary File Write to RCE

An arbitrary file write vulnerability accessible via the upload method of the MediaController allows authenticated users to write arbitrary files to any location on the web server Camaleon CMS is running on depending on the permissions of the underlying filesystem. E.g. This can lead to a remote...

Dahua Smart Park Management - Arbitrary File Upload

Dahua wisdom park integrated management platform is a comprehensive management platform, a park operations,resource allocation, and intelligence services,and other functions, including/emap/devicePointaddImgIco?. id: CVE-2023-3836 info: name: Dahua Smart Park Management - Arbitrary File Upload...

WordPress < 4.9.1 - Authenticated JavaScript File Upload

WordPress before 4.9.1 contains a cross-site scripting caused by not requiring unfilteredhtml capability for uploading .js files in functions.php, letting remote attackers execute scripts via crafted files, exploit requires upload permissions. id: CVE-2017-17092 info: name: WordPress 4.9.1 -...

SOPlanning - Remote Code Execution

Detects a remote code execution vulnerability in SOPlanning version 1.52.01 through authenticated PHP file upload. id: CVE-2024-27115 info: name: SOPlanning - Remote Code Execution author: [email protected] severity: high description: | Detects a remote code execution vulnerability in SOPlanni...

WordPress ShowBiz Pro <= 1.7.1 - Authenticated Arbitrary File Upload to RCE

The WordPress ShowBiz Pro plugin version = 1.7.1 allows arbitrary PHP file upload via the admin-ajax.php endpoint.This leads to unauthenticated remote code execution. id: CVE-2015-9499 info: name: WordPress ShowBiz Pro = 1.7.1 - Authenticated Arbitrary File Upload to RCE author:...

Page Builder CK <= 3.5.10 - Unauthenticated Arbitrary File Upload

Joomla Page Builder CK contains an unrestricted file upload vulnerability caused by lack of proper validation, letting unauthenticated attackers upload executable files and achieve remote code execution. id: CVE-2026-56290 info: name: Page Builder CK = 3.5.10 - Unauthenticated Arbitrary File Uplo...

Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload

The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file type validation in the 'lknpixforwoocommercec6savesettings' function in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated...

DevDojo Voyager <= 1.8.0 - Arbitrary File Write vulnerability

DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user uploads a file via /admin/media/upload. An authenticated user can upload a web shell causing arbitrary code execution on the server. id: CVE-2024-55417 info: name: DevDojo Voyage...

CVE-2024-2667

InstaWP Connect – Staging y migración de WP en 1 clic Puedes usar cualquier clave de API válida o inválida. overridepluginzip - Ruta al archivo zip que contiene un plugin de WordPress malicioso con una puerta trasera. Una vez importado, puedes acceder a la puerta trasera a través de...

CVE-2020-7115

CVE-2020-7115 Create your malicious engine in seconds buildengine.sh Simple script to generate a malicious engine ready to be used in openssl argument injection scenarios. How to use? It's very simple, just modify the engine.c file with the command of your choice: root@kitploit: include...

CVE-2019-12185

CVE-2019-12185 eLabFTW 1.8.5 es vulnerable a la subida arbitraria de archivos a través del componente /app/controllers/EntityController.php. Esto puede resultar en la ejecución remota de comandos. Un atacante puede usar una cuenta de usuario para comprometer totalmente el sistema mediante una...

CVE-2025-50286

Grav CMS v1.7.48 / Admin Plugin v1.10.48 - RCE autenticado a través de la subida de plugins CVE-2025-50286 Grav CMS v1.7.48 con Admin Plugin v1.10.48 es vulnerable a Ejecución Remota de Código RCE a través de la función de subida de plugins "Instalación Directa", permitiendo a administradores...

CVE-2021-22204-Gitlab

Gitlab-Exiftool-RCE Repositorio original : https://github.com/CsEnox/Gitlab-Exiftool-RCE Créditos a CsEnox. Exploit de RCE para Gitlab 13.10.3 GitLab Workhorse pasará cualquier archivo a ExifTool. El error actual está en el módulo DjVu de ExifTool. Cualquier persona con la capacidad de subir una...

CVE-2024-25600

TG Únete a nosotros https://t.me/WanLiChangChengWanLiChang Únete a nosotros para recibir periódicamente varios EXP POC de vulnerabilidades. Exploit CVE-2024-25600 El plugin de WordPress Bricks Builder tiene una vulnerabilidad RCE CVE-2024-25600. Script de explotación de la vulnerabilidad RCE...

CVE-2025-27590

CVE-2025-27590 - PoC Exploit Command Injection via Multipart Form Upload 📌 Description This is a Proof-of-Concept PoC exploit for CVE-2025-27590 , a command injection vulnerability affecting web applications that process multipart file uploads without proper sanitization. The vulnerability allows...

Node.js-CVE-2024-39943

Vulnerabilidad de ejecución de comandos en HFS basado en Node.js CVE-2024-39943 Escuela White Hat 3ª promoción – 노정민 @JenmrR Resumen En el entorno del servidor HFS basado en Node.js, existe una vulnerabilidad que ejecuta el contenido de los archivos subidos mediante childprocess.execSync. Un...

VcenterKiller

VcenterKiller -1. Atención Compañeros que construyen un entorno de vulnerabilidad localmente, al usar vckiller para verificar log4j, generalmente fallará, porque en el entorno de Vmware con modo NAT, la tarjeta de red de salida en el módulo de verificación se determina como 127.0.0.1, por lo que ...

CVE-2024-53677-Analysis

Análisis de CVE-2024-53677 Este repositorio contiene documentación y artefactos de laboratorio preparados para analizar CVE-2024-53677 en Apache Struts. Descripción general CVE-2024-53677 es una vulnerabilidad en el manejo de carga de archivos de Apache Struts. El problema ocurre cuando los...

whoc

whoc A container image that extracts the underlying container runtime and sends it to a remote server. Poke at the underlying container runtime of your favorite CSP container platform! WhoC at Defcon 29 Cloud Village Azurescape - whoc-powered research, the first cross-account container takeover i...

CVE-2025-52078

🚨 CVE-2025-52078 - Carga Arbitraria de Archivos No Autenticada - Writebot Plantilla SaaS React Este repositorio contiene un exploit de prueba de concepto para una vulnerabilidad de Carga Arbitraria de Archivos No Autenticada encontrada en la Plantilla SaaS React Writebot – Generador de Contenido...