CVE-2026-37065

CVE-2026-37065 Veno File Manager Project 4.4.9 is vulnerable to Arbitrary File Deletion. To exploit the vulnerability, an authenticated attacker with the role of superadmin can send a specially crafted POST request to the affected endpoint using the url parameter remove to control the file to be...

CVE-2024-50379-POC

CVE-2024-50379-POC This repository contains a Python script designed to exploit CVE-2024-50379 , a vulnerability that allows attackers to upload a JSP shell to a vulnerable server and execute arbitrary commands remotely. This exploit is particularly useful when the /uploads directory is either...

CVE-2024-29973

CVE-2024-29973 GET /cmd,/simZysh/registermain/setCookie?c0=storageextcgi+CGIGetExtStoInfo+None+and+False+or+import"subprocess".checkoutput"id",+shell=True%23 HTTP/1.1 Host: xxxx User-Agent: Mozilla/5.0 X11; Linux x8664; rv:109.0 Gecko/20100101 Firefox/115.0 Accept: / Accept-Language: en-US,en;q=0...

CVE_2024_42007

CVE-2024-42007 - php-spx Path Traversal Exploit This repository contains a Python 3 proof-of-concept PoC script for CVE-2024-42007. Vulnerability Summary: php-spx = 0.4.15 suffers from a path traversal vulnerability via the SPXUIURI parameter, allowing unauthenticated attackers to read arbitrary...

CVE-2026-36848

CVE-2026-36848 A critical path traversal vulnerability was identified in the web-based management engine on port 8089 of Gigamon-VUE OS GVOS appliances. This flaw exists in the legacy H-VUE subsystem within the persistd daemon and allows an unauthenticated, remote attacker with network access to...

eLabFTW-1.8.5-EntityController-Arbitrary-File-Upload-RCE

Exploit Title : eLabFTW 1.8.5 'EntityController' Arbitrary File Upload / RCE Date : 5/18/19 Exploit Author : liquidsky Joseph McPeters Vulnerable Software : eLabFTW 1.8.5 Vendor Homepage : https://www.elabftw.net/ Version : 1.8.5 Software Link : https://doc.elabftw.net/ Tested On : Linux / PHP...

CVE-2022-44268

CVE-2022-44268 🧙‍♂️ CVE-2022-44268 ImageMagick Arbitrary File Read - Proof of Concept exploit Video 📼 https://youtu.be/quKxwNAMBIA Usage 🛠 Poison the image ☣️ python3 CVE-2022-44268.py --image imagetopoison.png --file-to-read /etc/hosts --output poisoned.png Upload poisoned PNG image. Check if...

CVE-2023-36168

CVE-2023-36168 An issue in AVG AVG Anti-Spyware v.7.5 allows an attacker to execute arbitrary code via a crafted script to the guard.exe component Exploit Title: AVG Anti Spyware 7.5 - Unquoted Service Path Date: 05/08/2023 Exploit Author: Idan Malihi Vendor Homepage: https://www.avg.com Software...

CVE-2025-2266

🚨 CVE-2025-2266 — WordPress Plugin Exploit 🔍 Vulnerability Summary The Checkout Mestres do WP for WooCommerce plugin for WordPress is affected by an unauthenticated arbitrary options update vulnerability in versions 8.6.5 through 8.7.5. The vulnerable function cwmpUpdateOptions lacks proper...

CVE-2019-1315

Windows Error Reporting Manager arbitrary file move Elevation of Privilege Details: https://offsec.almond.consulting/windows-error-reporting-arbitrary-file-move-eop.html You will need the NtApiDotNet library to run it, as well as a valid Report.wer file, both to be placed in the same directory as...

exploit_cve-2021-29447

exploitcve-2021-29447 For educational purposes only. This exploit is supposed to be really convenient tool to get any file from server running wordpress 5.6.2 and php8. see https://wpscan.com/vulnerability/cbbe6c17-b24e-4be4-8937-c78472a138b5 All you need is base wp-admin access and ability to...

CVE-2022-37042

CVE-2022-37042 Usage View vulnerability information. go run main.go -s / / | / / / | \ / \ | \ | / / / // /| \ / / | | / / // // / / // // / / / / / / // // / / / | |/ / /// // // / // /// / / / // / / / / |// ///// // /// // // @0xf4n9x WRN Use with caution. You are responsible for your...

CVE-2024-2887

CVE-2024-2887 This is a short writeup for the CVE-2024-2887, which I used to claim V8CTF M123. When define more types than kV8MaxWasmTypes, which can be achieved by padding more types in RecGroup, the types index can be more than 20bits and then overflowed. Then two types can be considered same a...

CVE-2019-17662

CVE-2019-17662 Golang implementation of CVE-2019-17662 TinyVNC Arbitrary File Read leading to Authentication Bypass Exploit Copy of MuirlandOracle's python script...

CVE-2022-42889-text4shell

CVE-2022-42889 aka text4shell PoC for recently discovered vulnerability in Apache Commons Text by @pwntester: As mentioned in https://www.rapid7.com/blog/post/2022/10/17/cve-2022-42889-keep-calm-and-stop-saying-4shell/: The vulnerability exists in the StringSubstitutor interpolator object. An...

CVE-2024-25641

CVE-2024-25641 RCE for Cacti 1.2.26 This repository automates the process of exploiting CVE-2024-25641 on Cacti 1.2.26. When a user is authenticated, An arbitrary file write vulnerability, exploitable through the "Package Import" feature, allows authenticated users having the "Import Templates"...

CVE-2023-45878

CVE-2023-45878 Wrote this script based on the work of https://herolab.usd.de/security-advisories/usd-2023-0025/ . The exploit works by using an Arbitrary File Write exploit in Gibbon LMS 25.0.1 . This PoC will use upload a simple php cmd script, and then use that to load a powershell revshell...

SpringBreakVulnerableApp

Spring Break Vulnerable Application This is a vulnerable application to test the exploit for the Spring Break vulnerability CVE-2017-8046. WARNING! This application contains serious security vulnerabilities. Run it at your own risk! It is recommended using a backed-up and sheltered environment su...

CVE-2023-52076-PoC

CVE-2023-52076-PoC Proof-of-concept for CVE-2023-52076, a critical path traversal and arbitrary file write vulnerability in Atril/Xreader document viewers affecting MATE Desktop environments. The script generates a crafted EPUB payload with zip-slip paths targeting either SSH configuration or...

ProxyLogon

ProxyLogon ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability,...