CVE-2026-108573

A vulnerability exists in the Open Asset Import Library Assimp (versions up to 6.0.5 ). Specifically, the PLY File Handler component contains a flaw in the IOStreamBuffer::getNextBlock function. An attacker can perform manipulations resulting in an out-of-bounds read , which can be initiated remo...

CVE-2021-41773

https://target/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts id: CVE-2021-41773 info: name: Apache 2.4.49 Exploit author: numanturle severity: high requests: - method: GET path: - "BaseURL/cgi-bin/.%2e/%2e%2e/%2e%2e/%2e%2e/etc/hosts" matchers-condition: and matchers: - type: regex regex: -...

NagiosXI-RCE-all-version-CVE-2021-40345

NagiosXI RCE File-Upload CVE-2021-40345 Authentified RFI to RCE Nagios/NagiosXI exploitation Step 1 : Go on the "dashlets" managing page and download one of them I'm using "rssdashlet" for the exemple : http://TARGETIP/nagiosxi/admin/dashlets.php?download=rssdashlet Step 2 : Modify the .inc.php I...

CVE-2020-25265-25266

CVE-2020-25265 / CVE-2020-25266 CVE-2020-25265 CVE-2020-25266 This is a PoC exploit of libappimage and appimaged. Using a combination of the two CVEs, one cancreate a file that does not appear to be an appimage that is both implicitly picked up by appimaged and installed, overriding a system...

CVE-2022-44136-poc

CVE-2022-44136-poc Zenar CMS 9.3 suffers from an ​​unrestricted file upload vulnerability​​ in its file management module, allowing authenticated attackers with minimal privileges to upload arbitrary files, including malicious PHP scripts, to the web server. Due to insufficient file extension...

CVE-2023-39115

CVE-2023-39115 Description: Campcodes Online Matrimonial Website System Script v3.3 is vulnerable to an arbitrary file upload vulnerability, potentially allowing attackers to execute arbitrary code on the targeted server. The vulnerability arises from insufficient validation of uploaded files,...

cve-2024-43451-ntlm_hash_disclosure_reproduction

CVE-2024-43451 — Windows NTLM Hash Disclosure Spoofing Vulnerability Overview CVE-2024-43451 is an NTLMv2 hash disclosure spoofing vulnerability in Windows. It allows an unauthenticated remote attacker to leak a victim's NTLM hash by convincing them to interact with a malicious .url shortcut file...

Burp_CVE-2025-31324

CVE-2025-31324 Burp Suite Extension Overview This Python-based Burp Suite extension is designed to detect the presence of CVE-2025-31324 , a critical vulnerability in SAP NetWeaver Visual Composer’s Metadata Uploader component. The vulnerability allows unauthenticated remote code execution via fi...

CVE-2022-29464

CVE-2022-29464 CVE-2022-29464 POC exploit https://github.com/superzerosec/CVE-2022-29464 https://github.com/hakivvi/CVE-2022-29464 Based on it, the functions of detection and arbitrary file upload are added. Vulnerability author: superzerosec Original author: hakivvi Usage optional arguments: -h,...

dnsteal

dnsteal v 2.0 Este es un servidor DNS falso que te permite extraer sigilosamente archivos de una máquina víctima a través de solicitudes DNS. A continuación se muestran un par de imágenes diferentes que muestran ejemplos de transferencia de múltiples archivos y transferencia de un solo archivo en...

fortilogger_arbitrary_fileupload

CVE-2021-3378 | FortiLogger - Unauthenticated Arbitrary File Upload Metasploit Date: 30-01-2021 Exploit Author: Berkan Er [email protected] Vendor Homepage: https://www.fortilogger.com/ Software Link: https://www.fortilogger.com/download Version: 4.4.2.2 Tested on: Windows 10 Enterprise x64...

CVE-2024-12970

CVE-2024-12970 CVE-2024-12970 describes an OS Command Injection vulnerability found in the My Computer software of the Pardus operating system. This vulnerability allows a user to inject system commands through the file name parameter, thus enabling an attacker to execute malicious commands on th...

shepard

SHEPARD BITS Esta es una herramienta de persistencia que utiliza el Servicio de Transferencia Inteligente en Segundo Plano de Windows BITS. Funcionalidad Descarga de archivos, Exfiltración de archivos, Descarga de archivos + Ejecución persistente Uso Ejecute shepard.exe como Administrador con los...

CVE-2025-61506

An issue was discovered in MediaCrush thru 1.0.1 allowing remote unauthenticated attackers to upload arbitrary files of any size to the /upload endpoint. Vulnerability: Unrestricted File Upload CWE-434 CVE ID: CVE-2025-61506 DISCOVRED : 18 september ASSIGNED : 9 october Affected Component:...

CVE-2025-31324

Proof of Concept - CVE-2025-31324 [email protected] Proof of concept exploit for vulnerability CVE-2025-31324 in SAP NetWeaver Visual Composer , which allows arbitrary file upload without authentication via the /developmentserver/metadatauploader endpoint. ⚠️ This code is for educational...

CVE-2019-10945----Python3

CVE-2019-10945----Python3 Joomla! Core 1.5.0 - 3.9.4 - Directory Traversal / Authenticated Arbitrary File Deletion...

CVE-2021-29447

WordPress 5.6-5.7 - Authenticated Author+ XXE CVE-2021-29447 Using Step1. Run WordPress $ make up-wp Step2. Run Attacker web server $ make up-mal Step3. Generate malicious WAV file Without wavefile npm Recommend $ echo -en 'RIFF\xb8\x00\x00\x00WAVEiXML\x7b\x00\x00\x00%remote;%init;%trick; \x00'...

CVE-2021-40905

CVE-2021-40905 - RCE via a crafted .mkp file Application: CheckMK Management Web Console Software Revision: Less than or equal to 2.0.0p17 Attack type: RCE Solution: TBD or the MKPs shared on https://exchange.checkmk.com/ are manually reviewed by CheckMk and they look for malicious code or...

CVE-2017-5638

CVE-2017-5638 The Apache Struts 2 versions 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 have a flaw in their Jakarta Multipart parser. This flaw causes incorrect handling of exceptions and generation of error messages when attempting to upload files. As a result, attackers can remotely execute...

ninjasworkout

Aplicación NodeJS Vulnerable a Propósito Inicio Rápido Download the Repo = run npm i Después de instalar todas las dependencias, simplemente ejecute la aplicación node app.js or nodemon app.js VULNERABILIDADES AGREGADAS Contaminación de Prototipos ✅1 Inyección NoSQL ✅2 Cross-site Scripting XSS ✅3...