CVE-2026-87796 Multi Uploader for Gravity Forms <= 1.1.9 - Unauthenticated Arbitrary File Upload via Chunked File Upload

The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.1.9 via the movefile function. This is due to insufficient file type validation during chunked upload handling. This makes it possible for unauthenticated...

CVE-2026-87796 Multi Uploader for Gravity Forms <= 1.1.9 - Unauthenticated Arbitrary File Upload via Chunked File Upload

The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.1.9 via the movefile function. This is due to insufficient file type validation during chunked upload handling. This makes it possible for unauthenticated...

EUVD-2026-81335

The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.1.9 via the movefile function. This is due to insufficient file type validation during chunked upload handling. This makes it possible for unauthenticated...

CVE-2026-87796

The Multi Uploader for Gravity Forms WordPress plugin is vulnerable to unauthenticated arbitrary file upload in all versions up to and including 1.1.9 . The flaw resides in the move_file function in GFMU_FileUploader.php, where insufficient file type validation during chunked upload handling allo...

CVE-2026-87935 Paid Downloads <= 3.15 - Unauthenticated Arbitrary File Upload via 'paiddownloads_update_file' Action

The Paid Downloads plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.15 via the adminrequesthandler function. This is due to missing authorization and file type validation in the adminrequesthandler function, which is reachable unauthenticated via...

CVE-2026-87935 Paid Downloads <= 3.15 - Unauthenticated Arbitrary File Upload via 'paiddownloads_update_file' Action

The Paid Downloads plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.15 via the adminrequesthandler function. This is due to missing authorization and file type validation in the adminrequesthandler function, which is reachable unauthenticated via...

EUVD-2026-81334

The Paid Downloads plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.15 via the adminrequesthandler function. This is due to missing authorization and file type validation in the adminrequesthandler function, which is reachable unauthenticated via...

CVE-2026-87935

The Paid Downloads WordPress plugin (versions ≤ 3.15) is vulnerable to an unauthenticated arbitrary file upload via the paiddownloads_update_file action. The root cause is missing authorization and file type validation in the admin_request_handler function, which is reachable without authenticati...

opac-fast-automation

CVE-2025-65862 — Documentación, Análisis y Herramienta de Automatización Solo con fines de investigación ⚠️ Advertencia Ética y Legal Todo el material de este repositorio se proporciona únicamente para: investigación de seguridad, aprendizaje, análisis de vulnerabilidades, y pruebas en entornos...

fil-c v0.685

Fil-C 0.684 Fil-C is a fanatically compatible memory-safe implementation of C and C++. Lots of software compiles and runs with Fil-C with zero or minimal changes. All memory safety errors are caught as Fil-C panics. Fil-C achieves this using a combination of concurrent garbage collection and...

CVE-2026-9490

ID de CVE: CVE-2026-9490 Investigador: Vo Duc Thang ugvxb Reconocimiento: https://community.acer.com/en/kb/articles/19668 1. Resumen Ejecutivo Se ha identificado una vulnerabilidad de seguridad crítica en el servicio Acer Care Center ACCSvc.exe. La vulnerabilidad permite a cualquier usuario local...

POC_CVE-2024-10829

POCCVE-2024-36420 针对影响 Flowise 的 CVE-2024-36420 的本地复现实验室和 nuclei 模板草稿。 摘要 CVE-2024-36420 是 Flowise 中的一个任意文件读取漏洞，由对以下端点的 fileName 请求体参数的不安全使用导致： POST /api/v1/openai-assistants-file 该实验室用于验证： 易受攻击行为（flowiseai/flowise:1.4.3） 拒绝访问行为（更新的 flowiseai/flowise:3.1.2） 参考...

ZipRarHunter

ZipRarHunter ZipRarHunter 是一款功能强大的命令行道德黑客工具，旨在使用字典破解 ZIP 和 RAR 存档文件的密码。它自动化了从加密存档中恢复密码的过程。 功能 破解使用 ZipCrypto 和 AES-256 加密的 ZIP 文件 使用多线程暴力破解攻击破解 RAR4 存档 （如果安装了付费版本的 UnRAR，也支持 RAR5） 使用 --threads 参数（线程模式，默认值：4）或 --cores 参数（进程模式，默认值：使用所有 CPU 核心）提高破解速度。 通过逐行读取字典（流式读取）实现高效内存使用 自动检测 ZIP 加密方法 支持编码回退（UTF-...

Orchestrated-Powershell-for-CVE-2023-24932

安全启动编排器 CVE-2023-24932 自动完成针对 CVE-2023-24932 BlackLotus 的完整安全启动缓解措施。自动处理所有注册表更改、重启和验证。 要求 Windows 10/11 或 Server 2016+ 管理员权限 已启用安全启动 已安装 2024 年 7 月及之后的累积更新 已备份 BitLocker 恢复密钥 如果 BitLocker 已启用 快速入门（单台服务器） root@kitploit: 1. 下载并安装（单行命令，以管理员身份在 PowerShell 中运行） irm...

RAGE

RAGE - Relational Attack Graph Exchange An attack graph you can actually hand to someone else. Every graph-based security product keeps your attack graph locked inside a proprietary store. You cannot export it, diff two scans, put it in version control, or query it with anything but the vendor's...

react2shell-scanner-rust

react2shell-scanner-rust 检测 Next.js/RSC 应用程序中的 CVE-2025-55182 和 CVE-2025-66478。 安装 root@kitploit: cargo build --release 使用方法 root@kitploit: ./scanner -u https://example.com ./scanner -l hosts.txt -t 20 -o results.json ./scanner -u https://example.com --crawl --max-depth 3 ./scanner -u...

acropalypse-reconstructor

Acropalypse CLI Multi-Tool A lightweight, headless Python script designed to detect and reconstruct cropped images that are vulnerable to the Acropalypse vulnerability CVE-2023-21036 for Google Pixel Markup and CVE-2023-28303 for Windows Snipping Tool. This tool allows you to recover trailing pix...

pwn2own2018

Pwn2Own 2018: Safari + macOS Safari RCE, sandbox escape, and LPE to kernel for macOS 10.13.3. Usage Install nasm and tornado: root@kitploit: brew install nasm pip3 install tornado Check config.py if you want to change the host or ports. Afterwards start the server with ./server.py and navigate to...

0xCr0ssCrush

0xCr0ssCrush Two signed drivers. One dangerous kernel primitive. 0xCr0ssCrush is a Windows BYOVD research project covering the DCRCVDrv.sys and Alinubx.sys drivers abused by the Cruciferra malware-as-a-service loader: their interfaces, their kernel primitives, their provenance, and how to detect...

WordPress Contact Form 7 <1.3.3.3 - Remote Code Execution

WordPress Contact Form 7 before 1.3.3.3 allows unrestricted file upload and remote code execution by setting supportedtype to php% and uploading a .php% file. id: CVE-2020-12800 info: name: WordPress Contact Form 7 1.3.3.3 - Remote Code Execution author: dwisiswant0 severity: critical description...