2676 matches found
CVE-2024-56249
🛠️ WordPress Master Toolkit Exploit CVE-2024-56249 🌟 Overview This script exploits an Arbitrary File Upload vulnerability in the WordPress WPMasterToolKit plugin, allowing an attacker to upload a web shell to the server. The vulnerability exists in versions -un -p -fn 📋 Parameters -u / --url:...
CVE-2024-51793
🛡️ WordPress RepairBuddy Plugin Exploit 📜 CVE Information CVE-ID: CVE-2024-51793 Published: 2024-11-11 Updated: 2024-11-11 Title: WordPress RepairBuddy plugin = 3.8115 - Arbitrary File Upload vulnerability Description: Unrestricted Upload of File with Dangerous Type vulnerability in Webful...
CVE-2024-46377
CVE-2024-46377 PoC for Arbitrary File Upload Vulnerability in Best House Rental Management System 1.0 Overview This Python script demonstrates how to exploit the arbitrary file upload vulnerability in Best House Rental Management System 1.0. The vulnerability allows an attacker to upload a...
cve-2022-22947-godzilla-memshell
CVE-2022-22947 godzilla-memshell CVE-2022-22947 注入哥斯拉内存马...
citrixInspector
citrixInspector citrixInspector.py formerly cve20233519inspector.py is a Python-based, passive vulnerability scanner for Citrix ADC / Citrix Gateway / NetScaler ADC / NetScaler Gateway appliances. It fingerprints the exact firmware build of a target without authentication, and reports every known...
CVE-2018-17431-Comodo
CVE-2018-17431-PoC Prueba de concepto para CVE-2018-17431 Título del Exploit: Comodo Firewall & Central Manager UTM todas las versiones anteriores a 2.7.0 y 1.5.0 Ejecución remota de comandos basado en Web Shell Autor del Exploit: Milad Fadavvi Página del proveedor: https://www.comodo.com/ Enlace...
casper-shell
🦇 Casper@shell: - Advanced PHP Web Shell Casper@shell: is an enhanced, more user-friendly version of p0wny shell with many new features. This version aims to be more helpful for quickly performing reconnaissance, exfiltration, or deploying persistence mechanisms. ✨ Features 🖥️ Advanced Terminal...
Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets
Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite ZCS to deploy web shells and access mailbox data, according to findings from the Microsoft Security Research team. The attack exploits CVE-2026-73570 CVSS score: 8.9, an unauthenticated operating system comman...
CVE-2026-102454
EasyFlow .NET developed by Digiwin has an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...
CVE-2026-102454 DigiWin｜EasyFlow .NET - Arbitrary File Upload
EasyFlow .NET developed by Digiwin has an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...
CVE-2026-102454 DigiWin｜EasyFlow .NET - Arbitrary File Upload
EasyFlow .NET developed by Digiwin has an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...
CVE-2026-102454
The EasyFlow .NET software developed by Digiwin is susceptible to an Arbitrary File Upload vulnerability. A privileged remote attacker can exploit this flaw to upload and execute web shell backdoors , which leads to arbitrary code execution on the server. No specific affected versions, root cause...
EUVD-2026-89681
EasyFlow .NET developed by Digiwin has an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server...
CVE-2026-85134
Unrestricted upload of file with dangerous type vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Upload a Web Shell to a Web Server. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.11...
EUVD-2026-88171
Unrestricted upload of file with dangerous type vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Upload a Web Shell to a Web Server. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.11...
CVE-2026-85134
The eBA Plus Document and Workflow Management System by Bimser Solution Software Trade Inc. is vulnerable to an unrestricted upload of files with dangerous types . This flaw allows an attacker to upload a web shell to the web server, potentially leading to Remote Command Execution . The issue imp...
CVE-2026-85134 Arbitrary File Upload Leading to Remote Command Execution in Bimser's eBA Plus
Unrestricted upload of file with dangerous type vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Upload a Web Shell to a Web Server. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.11...
CVE-2026-85134 Arbitrary File Upload Leading to Remote Command Execution in Bimser's eBA Plus
Unrestricted upload of file with dangerous type vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Upload a Web Shell to a Web Server. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.11...
CVE-2026-85134: Unrestricted Upload of File with Dangerous Type
Unrestricted upload of file with dangerous type vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Upload a Web Shell to a Web Server. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.11...
