CVE-2019-10869

CVE-2019-10869 Wordpress Ninja Forms File Uploads Extension -----------------------------16345274557837-- Response: root@kitploit: HTTP/1.1 200 OK Server: nginx/1.14.0 "data": "files": "name":"test.png.doc", "type":"application/msword", "tmpname":"nftmp-14FpD-...

Atom-CMS-2.0---File-Upload-Remote-Code-Execution-Un-Authenticated-POC

Atom-CMS-2.0---Subida-de-archivos-Ejecución-remota-de-código-Sin-autenticación- Ejecución remota de código RCE Autor del exploit: Ashish Koli Shikari Página principal del proveedor: https://thedigitalcraft.com/ Enlace del software: https://github.com/thedigicraft/Atom.CMS Versión: 2.0 CVE:...

cve-2020-10977

CVE-2020-10977 GitLab 12.9.0 Произвольное чтение файлов Цель : 12.9.0 и ниже Протестировано : GitLab 12.8.1 В ходе недавнего пентеста я обнаружил экземпляр GitLab на цели, нашёл PoC на Exploit-DB, но он использует LDAP для аутентификации, которая в данном случае была отключена, поэтому я создал...

CVE-2015-4133

CVE-2015-4133 root@kitploit: usage: CVE-2015-4133.py -h --RHOST RHOST --RPORT RPORT -v YEAR MONTH FILE ReFlex Gallery WordPress plugin = 3.1.3 CVE-2015-4133 PoC. Reference: https://nvd.nist.gov/vuln/detail/CVE-2015-4133 positional arguments: YEAR подкаталог wp-content/uploads MONTH подкаталог...

CVE-2024-22515-File-Upload-Vulnerability

CVE-2024-22515: Vulnerabilità di Upload di File in Agent DVR Informazioni Descrizione In iSpyConnect.com Agent DVR 5.1.6.0, manca la verifica del tipo di file per i caricamenti di file audio. Ciò consente a un utente autenticato di caricare qualsiasi tipo di file tramite il componente di upload...

ADTrapper

ADTrapper - Piattaforma di Analisi della Sicurezza di Active Directory Piattaforma professionale di analisi della sicurezza e rilevamento delle minacce per Active Directory Trasforma i log di autenticazione di Windows in informazioni di sicurezza azionabili con rilevamento avanzato delle minacce ...

CVE-2024-50379-POC

CVE-2024-50379-POC Ce dépôt contient un script Python conçu pour exploiter CVE-2024-50379 , une vulnérabilité qui permet à un attaquant de télécharger un shell JSP sur un serveur vulnérable et d'exécuter des commandes arbitraires à distance. Cette exploitation est particulièrement utile lorsque l...

CVE-2021-42671

CVE-2021-42671 - Sicherheitslücke durch fehlerhafte Zugriffskontrolle im Online-Portal für Ingenieure. Technische Beschreibung: Im Engineers Online Portal besteht eine Sicherheitslücke durch eine fehlerhafte Zugriffskontrolle. Ein Angreifer kann diese Sicherheitslücke ausnutzen, um die...

CVE-2020-10977

GitLab v12.4.0-12.8.1 RCE पूरी तरह से https://github.com/dotPY-hax/gitlabRCE पर आधारित, जो मेरे लिए काम नहीं किया और HTML पार्सिंग का काम बोझिल लगा, इसलिए मैंने इसे js में फिर से लिखा। उपयोग सामान्य तरीके से एक रिवर्स शेल हैंडलर शुरू करें, फिर इस स्क्रिप्ट को इस प्रकार चलाएँ: root@kitploit:...

Adning Advertising <= 1.5.5 - Arbitrary File Upload

The Adning Advertising plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ninguploadimage function in versions up to, and including, 1.5.5. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites...

WordPress File Manager <= 7.2.1 - Directory Traversal

File Manager and File Manager Pro plugins for WordPress versions up to 7.2.1 and 8.3.4 contain a directory traversal caused by the 'target' parameter in mkfilefoldermanageractioncallbackshortcode, letting attackers read arbitrary files and upload files outside designated directories, exploit...

MinIO - Incomplete Signature Validation for Unsigned-Trailer Uploads

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. The signature component of the authorization may be invalid, which would mean that as a client you can use any arbitrary secret to upload objects given the user already has prior WRITE permissions on...

CVE-2024-11680_PoC_Exploit

CVE-2024-11680 PoC शोषण इस रिपॉज़िटरी में CVE-2024-11680 के लिए एक Proof of Concept PoC शोषण है, जो ProjectSend r1605 और पुराने संस्करणों में एक गंभीर भेद्यता है। यह शोषण विशेषाधिकार गलत कॉन्फ़िगरेशन के कारण अनुचित प्रमाणीकरण दोष को लक्षित करता है। विशेषताएँ एप्लिकेशन शीर्षक को संशोधित करने के लि...

CVE-2024-1209

CVE-2024-1209 Esposizione di informazioni sensibili tramite gli assignment in LearnDash. Visitatori non autenticati possono sfogliare e scaricare gli assignment caricati. Vulnerability: CVE-2024-1209 Esposizione di informazioni sensibili tramite assignment CVSS: 5.3 Media Software: LearnDash...

Cisco VPN Routers - Unauthenticated Arbitrary File Upload

A vulnerability in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device. This vulnerability is due to insufficient authorization enforcement...

Ninja Forms File Uploads <= 3.3.26 - Arbitrary File Upload

Ninja Forms File Uploads plugin for WordPress versions up to and including 3.3.26 is vulnerable to unauthenticated arbitrary file upload which could lead to remote code execution. id: CVE-2026-0740 info: name: Ninja Forms File Uploads = 3.3.26 - Arbitrary File Upload author: whattheslime severity...

osi.ig

Open Source Information Instagram so recently ig started sending html response insted of json to "unknown" requests. i REALLY wanted this to work without login since i don't use ig anymore, tried few ways i knew to get it working without login but it didn't work :/ anyways since lot of people are...

CVE-2026-Pending-Flask-Uploads-Path-Traversal-PoC

CVE-2026-XXXXX In attesa: Path Traversal in Flask-Uploads Informazioni sulla vulnerabilità Prodotto : Flask-Uploads Versione : 0.2.1 e potenzialmente versioni precedenti Tipo di vulnerabilità : Path Traversal Directory Traversal CWE-ID : CWE-22 Gravità : ALTA CVSS 7.5 Impatto : Scrittura arbitrar...

chyrp-lite-rce-poc

chyrp-lite-rce-poc CVE-2026-53767 + CVE-2026-53768 - RCE autenticata in Chyrp Lite ≤ 2026.01 "Iriomote" Attacco concatenato: bypass della blocklist di uploadspath CVE-2026-53768 + mancata validazione dell'estensione del file in adminupdateupload CVE-2026-53767 → Remote Code Execution come www-dat...

CVE-2026-75952

Joomla Extension - cmsjunkie.com - Cross-site request forgery in J-BusinessDirectory 6.2.3 - Tokens were missing on many AJAX/state-changing tasks: contact/quote forms, cart, bookmarks, uploads, messages, AI text generation, and several administrator actions app install, demo-data wipe,...