1324864 matches found
CVE-2026-103688
The Checkout Files Upload for WooCommerce WordPress plugin (versions before 2.4.0 ) is vulnerable to an unauthenticated arbitrary file upload vulnerability. The root cause is a lack of file type validation when the "accepted file types" setting is left empty, which is the documented method for al...
EUVD-2026-111699
The Checkout Files Upload for WooCommerce WordPress plugin before 2.4.0 does not validate uploaded file types when its accepted file types setting is left empty, which it documents as the way to accept all files, allowing unauthenticated users to upload arbitrary files, including PHP files that...
CVE-2026-103688 Checkout Files Upload for WooCommerce < 2.4.0 - Unauthenticated Arbitrary File Upload
The Checkout Files Upload for WooCommerce WordPress plugin before 2.4.0 does not validate uploaded file types when its accepted file types setting is left empty, which it documents as the way to accept all files, allowing unauthenticated users to upload arbitrary files, including PHP files that...
redis-exploitation
redis-exploitation CONFIG SET For educational purposes only Build $ docker build -t victim . Run $ docker run -d --name victim victim Attack $ docker exec -it victim bash root@34ea33cb2eb2 / ls /var/spool/cron/ root@34ea33cb2eb2 / redis-cli 127.0.0.1:6379 config set dir /var/spool/cron/ OK...
Drupalgeddon2
CVE-2018-7600 | Drupal 7.58 / 8.3.9 / 8.4.6 / 8.5.1 - 'Drupalgeddon2' RCE SA-CORE-2018-002 Inspired from https://github.com/dreadlocked/Drupalgeddon2 Supports: Drupal 8.3.9 / 8.4.6 / 8.5.1 user/register URL, attacking account/mail & postrender parameter, using PHP's passthru function Pending Yet ...
gxdlmsdirector-cve
Multiple vulnerabilities in Gurux GXDLMS Director – remote code execution Gurux GXDLMS Director is an open-source Windows program for interacting with energy meters through the use of DLMS/COSEM protocol. The software has a remote update functionality for add-in DLLs as well as for files containi...
CoD-MW-Warzone-2---CVE-2023-38821
CoD-MW-Warzone-2 - CVE-2023-38821 DLL Planting in the CoD MW Warzone 2 - CVE-2023-38821 Discoverer: Idan Malihi Description An issue in Activision Call of Duty Modern Warfare: Warzone v.2 allows a local attacker to execute arbitrary code via a crafted file to the UMPDC.dll, MSIMG32.dll,...
PoC_CVEs
PoC CVEs — Proof-of-Concept Repository Index A continuously updated index of public GitHub proof-of-concept repositories mapped to CVE identifiers. Strictly for educational and defensive security research purposes. Live Search Interface labs.jamessawyer.co.uk/cves/ A searchable web interface over...
Lab-for-cve-2018-15133
Summary: MExploiting CVE-2018-15133 Deserialization Vulnerability This exploit takes advantage of a deserialization vulnerability in the Laravel Framework through 5.5.40 and 5.6.x through 5.6.29. Description Remote code execution might occur as a result of an unserialize call on a potentially...
CVE-2023-47253
CVE-2023-47253 | Qualitor povoaVoComArray$REQUEST; if inarray$REQUEST'nmalias', array'dtiniciomesatual', 'dtfimmesatual', 'dtiniciomespassado', Proof of Concept POC Just access the URL with your PHP code in "gridValoresPopHidden" parameter. Researches h...
CVE-2020-11984
Quick start docker build --no-cache -t cve-2020-11984 . docker run --rm -it -p 8080:80 --name cve-2020-11984 cve-2020-11984 pipenv run python3 exploit.py -u localhost:8080/ -c "echo 111/tmp/abc" Reference https://github.com/RubenBar/MLW-upcrans/...
CVE-2018-1207-better
Exploit PoC for CVE-2018-1207: Dell iDRAC7/iDRAC8 RCE Reverse Shell This repository contains a Proof of Concept python script to demonstrate a remote code execution exploit present in iDRAC7 and iDRAC8 devices with firmware versions 2.52.52.52 and below. This exploit allows attacks to run code as...
CVE-2020-35476
CVE-2020-35476 A remote code execution vulnerability occurs in OpenTSDB through 2.4.0 via command injection in the yrange parameter. Not finished and doesn't work. Most of the code is there but payload has to be fixed...
cve-2024-27130-poc
CVE-2024-27130-poc CVE-2024-27130 is a critical vulnerability affecting QNAP Network Attached Storage NAS devices. The flaw originates from the unsafe use of the strcpy function in the NoSupportACL function of the share.cgi script within the QTS operating system, leading to a stack buffer overflo...
CVE-2020-17533
Recently, a remote code execution vulnerability was discovered in Apache Struts2 CVE ID: CVE-2020-17530. The Apache Struts2 framework is a web framework for developing Java EE web applications. It is widely used, thus the threat impact scope is large. 2. Vulnerability Description If developers...
CVE-2025-6220
Ultimate Addons for Contact Form 7 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft forever preferredlft forever 2: eth0...
CVE-2023-47253
CVE-2023-47253 CVE-2023-47253 | Qualitor povoaVoComArray$REQUEST; if inarray$REQUEST'nmalias', array'dtiniciomesatual', 'dtfimmesatual', 'dtiniciomespassado', Proof of Concept POC Just access the URL with your PHP code in "gridValoresPopHidden" parameter. Researches...
CVE-2018-7600
Alright boss, I've also added the usage section starting from git clone, so the README is complete. This is the final version that you just need to copy-paste into README.md on your GitHub repo. CVE-2018-7600 - Drupalgeddon2 RCE Exploit This exploit exploits a vulnerability in Drupal 7.56 and som...
cve-2021-44228-log4j-exploits
CVE-2021-4428 Reproduction This DEMO is a replication of the Log4j2 ultra-high-risk RCE vulnerability CVE-2021-4428, aiming to understand the harmfulness of this vulnerability and make targeted defenses based on your system's situation. Warning This DEMO is solely for technical research purposes...