CVE-2025-3054-Exploit

CVE-2025-3054 Exploit: Download here Details CVE ID : CVE-2025-3054 Published : June 5, 2025 CVSS : 8.8 Patch Available: No official patch yet Impact The WP User Frontend Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the uploadfiles functi...

CVE-2025-4389

CVE-2025-4389 Exploit Details Published : May 16, 2025 Updated : May 17, 2025 Severity : Critical CVSS Score: 9.8 CWE : CWE-434: CWE-434 Unrestricted Upload of File with Dangerous Type Affected Versions : All versions from n/a through 2.6.8.1 Researcher :...

CVE-2021-22205

Vuln Impact An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution. Vuln Product Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6 Gitlab CE/EE...

CVE-2021-43617

CVE-2021-43617 Esta es una reproducción de la vulnerabilidad PHP Laravel 8.70.1 - Cross Site Scripting XSS a Cross Site Request Forgery CSRF Descripción La vulnerabilidad explota el hecho de que podemos evadir la funcionalidad de carga de archivos de imagen de Laravel para subir archivos...

CVE-2024-43160

Wordpress BerqWP = 1.7.6 - Unauthenticated Arbitrary File Uplaod CVE-2024-43160 The BerqWP – Automated All-In-One PageSpeed Optimization Plugin for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type...

Zhiyuan OA Platform - Arbitrary File Upload

An arbitrary file upload vulnerability exists in the Zhiyuan OA platform 5.0, 5.1 - 5.6sp1, 6.0 - 6.1sp2, 7.0, 7.0sp1 - 7.1, 7.1sp1, and 8.0 - 8.0sp2 via the wpsAssistServlet interface. The realFileType and fileId parameters are improperly validated during multipart file uploads, allowing...

CVE-2021-22205

Impacto de la vulnerabilidad Se ha descubierto un problema en GitLab CE/EE que afecta a todas las versiones a partir de 11.9. GitLab no validaba correctamente los archivos de imagen que se pasaban a un analizador de archivos, lo que resultaba en una ejecución remota de comandos. Producto afectado...

CVE-2025-5961

🚨 마이그레이션, 백업, 스테이징 – WPvivid Backup & Migration 📈 이 취약점은700,000개 이상의 설치 수 를 가진 플러그인에 영향을 미칩니다 📝 CVE 세부 정보 CVE: CVE-2025-5961 CVSS: 7.2 높음 게시일: 2025년 7월 3일 🔍 설명 WordPress용 Migration, Backup, Staging – WPvivid Backup & Migration 플러그인은 0.9.116을 포함한 모든 버전에서 wpvividuploadimportfiles 함수의 파일 형식 검증 누락으로 ...

CVE-2024-52380

CVE-2024-52380 Picsmize = 1.0.0 - Unauthenticated Arbitrary File Upload Description The Picsmize plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 1.0.0. This makes it possible for unauthenticated attackers to...

CVE-2024-54262

CVE-2024-54262 Import Export For WooCommerce = 1.5 - Authenticated Subscriber+ Arbitrary File Upload Description The Import Export For WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 1.5. This makes...

CVE-2024-50510

CVE-2024-50510 AR For Woocommerce = 6.2 - Unauthenticated Arbitrary File Upload Description The AR for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 6.2. This makes it possible for unauthenticated...

CVE-2021-22205

Impacto de la Vulnerabilidad Se ha descubierto un problema en GitLab CE/EE que afecta a todas las versiones a partir de la 11.9. GitLab no validaba correctamente los archivos de imagen que se pasaban a un analizador de archivos, lo que resultó en una ejecución remota de comandos. Producto...

CVE-2026-3844

root@kitploit: ╔════════════════════════════════════════════════════════════╗ ║ CVE-2026-3844 ║ ║ Breeze Cache = 2.4.4 Arbitrary File Upload ║ ║ Unauthenticated RCE | Authorized Lab Use Only ║ ╚════════════════════════════════════════════════════════════╝ Overview CVE-2026-3844 is an arbitrary fi...

CVE-2026-56590

HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability due to improper file validation controls, which could allow an unauthenticated attacker to upload and execute malicious payloads, resulting in a complete server compromise...

CVE-2026-56590

HCL BigFix Service Management is affected by an Unrestricted File Upload vulnerability caused by improper file validation controls. An unauthenticated attacker can upload and execute malicious payloads, potentially leading to complete server compromise . The CNA-assigned CVSS 3.1 score is 6.4 (ME...

CVE-2021-22205

CVE-2021-22205 GitLab CE/EE Preauth RCE usando ExifTool Este proyecto es solo con fines educativos. Si se han violado los derechos de alguien, comuníquese conmigo para eliminar el proyecto. Por último,NO LO USE ILEGALMENTE. Si durante el uso de esta herramienta realiza alguna actividad ilegal,...

CVE-2025-48148

CVE-2025-48148 StoreKeeper for WooCommerce = 14.4.4 - Unauthenticated Arbitrary File Upload 🚀 StoreKeeper for WooCommerce = 14.4.4 - Unauthenticated Arbitrary File Upload Exploit 📝 Description The StoreKeeper for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to...

CVE-2021-22205-gitlab

Влияние уязвимости В GitLab CE/EE обнаружена проблема, затрагивающая все версии, начиная с 11.9. GitLab не выполнял надлежащую проверку файлов изображений, передаваемых в анализатор файлов, что приводило к удалённому выполнению команд. Уязвимый продукт Gitlab CE/EE 13.10.3 Gitlab CE/EE 13.9.6...

CVE-2024-25082

⚠️ CVE-2024-25082 - FontForge ZIP Remote Code Execution PoC Proof-of-Concept exploit for CVE-2024-25082 , a vulnerability affecting FontForge that allows Remote Code Execution RCE through a crafted ZIP archive. This repository demonstrates how the vulnerability can be exploited in a controlled lab...

CVE-2026-0911

CVE-2026-0911 — Hustle Module Import PoC A research / pentest helper tool that tests the upload behavior via the authenticated module import endpoint for the WordPress plugin Hustle wordpress-popup, WPMU DEV under CVE-2026-0911. The CVE-2026-0911.py script in this repository or file set should on...