CVE-2024-23897

CVE-2024-23897 Jenkins CVE-2024-23897: Vulnerabilidad de Lectura Arbitraria de Archivos Este código te ayudará a entender la combinación de solicitud y respuesta del ataque. Usa una herramienta proxy para ver el resultado. python3 CVE-2024-23897.py -u $url -p $filepathtoread...

CVE-2023-4698

CVE-2023-4698 Local File Inclusion LFI in usememos/memos 0.13.2 Description Today, I want to shine a spotlight on a significant discovery — a critical security vulnerability that has been identified in usememos/memos. This vulnerability, which falls under the category of Local File Inclusion LFI,...

CVE-2021-36749

CVE-2021-36749 Apache Druid Arbitrary File Read Affected versions: version = 0.21.1 Either of the following two methods can be used Command Line Method curl http://127.0.0.1:8888/druid/indexer/v1/sampler?for=connect -H "Content-Type:application/json" -X POST -d...

CVE-2017-6516-mcsiwrapper-

CVE-2017-6516 CVE-2017-6516 is a privilege escalation vulnerability that targets the .mcsiwrapper binary from MagniCorp SysInfo under version 10-H64. When this binary has the SUID bit set and is outdated, a user may execute arbitrary code as the owner of the binary - which is often root...

file-away-exploit

File-Away Exploit CVE-2025-2539 & CVE-2025-2512 📌 Purpose This repository contains vulnerabilities details and scripts found on File-Away, which is a WordPress plugin used to file management. This plugin contains two vulnerabilities that can lead to remote code execution Tested on File-Away...

CVE-2025-1304

🚨 WordPress NewsBlogger Theme = 0.2.5.1 - Arbitrary File Upload CVE-2025-1304 CVSS Score: 8.8 High Vulnerability Type: Arbitrary File Upload Component: WordPress Theme CVE ID: CVE-2025-1304 🔥 Vulnerability Overview The NewsBlogger WordPress theme versions = 0.2.5.1 is vulnerable to an Arbitrary...

CVE-2026-108551

openapi-typescript-codegen through 0.31.0 contains a code injection vulnerability that allows attackers controlling an OpenAPI document to inject JavaScript by supplying unescaped values interpolated into single-quoted string literals. Attackers can embed a single quote in path keys, parameter...

CVE-2025-57176

CVE-2025-57176 CVE-2025-57176 - Siklu EtherHaul Series - Unauthenticated Arbitrary File Upload Affected Versions: Firmware 7.4.0 - 10.7.3 likely all versions since 7.4.0...

CVE-2024-13346

CVE-2024-13346 Avada Theme 7.11.14 - Unauthenticated Arbitrary Shortcode Execution CVE-2024-13346 exploit script Installation Code git clone https://github.com/tausifzaman/CVE-2024-13346.git cd CVE-2024-13346 pip install -r requirements.txt python3 exploit.py Google Cloud Console Cloud Shell...

CVE-2020-25540

cve-2020-25540 This script is used to exploit arbitrary file read vulnerabilities in ThinkAdmin v5 and v6 versions ==Note that the interface path may vary across different versions some are based on the original ThinkAdmin with secondary development== The original interface is:...

Bazaar_poc

Bazaarpoc Bazaar v1.4.3 Arbitrary File Read Vulnerability CVE-2024-40348 python Bazaarpoc.py -h -. -. OO . OO . /. -. ,-.-'/. -. ,-.-' \ .' / | |OO\ .' / | |OO \ /\ | | \ \ /\ | | \ \ \ | | |/ \ \ | | |/ .' ,| |.' .' ,| |.' / .'. | | / .'. | | '--' '--' --' '--' '--' --' usage: Bazaarpoc.py...

CVE-2016-2098

CVE-2016-2098 Action Pack in Ruby on Rails before 3.2.22.2, 4.x before 4.1.14.2, and 4.2.x before 4.2.5.2 allows remote attackers to execute arbitrary Ruby code by leveraging an application's unrestricted use of the render method RCE https://nvd.nist.gov/vuln/detail/CVE-2016-2098 Use git clone...

CVE-2024-31351_wordpress_exploit

Wordpress - Copymatic – AI Content Writer & Generator = 1.6 - Unauthenticated Arbitrary File Upload CVE-2024-31351 Unrestricted Upload of File with Dangerous Type vulnerability in Copymatic Copymatic – AI Content Writer & Generator.This issue affects Copymatic – AI Content Writer & Generator: fro...

heroku-CVE-2013-0333

heroku-CVE-2013-0333 Inspect all of your heroku apps to see if they are running a vulnerable version of Rails Background A serious security vulnerability has been found in the Ruby on Rails framework. This exploit affects nearly all applications running Rails versions 2.3 and 3.0, and a patch has...

CVE-2019-14223

CVE-2019-14223: Open Redirect in Alfresco Share The Alfresco Share application is vulnerable to an Open Redirect attack via a crafted POST request. By manipulation the “failure” parameter an attacker can redirect a victim to a malicious website over any protocol the attacker desires E.g. http,...

CVE-2019-6447

️⃣ CVE-2019-6447 🖥️ -h3x0v3rl0rd- ES File Explorer 4.1.9.7.4 - Lectura Arbitraria de Archivos...

EUVD-2026-96321

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPMU DEV Forminator forminator allows Stored XSS.This issue affects Forminator: from n/a through 1.57.3...

Jmeter-CVE-2018-1297-

Jmeter RMI Deserialization Command Execution Vulnerability CVE-2018-1297 Apache JMeter is an open-source software suite written in Java by the American Apache Software Foundation for stress testing and performance testing. Versions 2.x and 3.x contain a deserialization vulnerability that allows a...

CVE-2024-7954POC

CVE-2024-7954POC The porteplume plugin used in SPIP versions before 4.30-alpha2, 4.2.13, and 4.1.16 has an arbitrary code execution vulnerability. Remote unauthenticated attackers can execute arbitrary PHP code as SPIP users by sending specially crafted HTTP requests...

CVE-2024-54262

CVE-2024-54262 Import Export For WooCommerce = 1.5 - Authenticated Subscriber+ Arbitrary File Upload Description The Import Export For WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 1.5. This makes...