CVE-2019-1315

Windows Error Reporting Manager arbitrary file move Elevation of Privilege Details: https://offsec.almond.consulting/windows-error-reporting-arbitrary-file-move-eop.html You will need the NtApiDotNet library to run it, as well as a valid Report.wer file, both to be placed in the same directory as...

parsec-cloud

.. raw:: html Simple, secure, end-to-end encrypted file sharing in the cloud Parsec Parsec is a cloud-based application for simple and cryptographically secure file sharing. 🔐 Client-side E2EE to ensure your data is only accessed by you and the people you share it with. ✒️ Cryptographic signature...

CVE-2024-22532

CVE-2024-22532 Description XnSoft XnView Classic 2.51.5 and NConvert 7.163 are vulnerable to Heap-based Buffer Overflow via a crafted .xwd file Vendor XnSoft Affected Products XnView Classic 2.51.5 NConvert 7.163 Impact Denial of Service Remote Code Execution PoC Denial of Service cmdline used...

CVE-2026-92820

The Ninja Forms - File Uploads plugin for WordPress is vulnerable to arbitrary file operations in all versions up to, and including, 3.3.34 via the external Amazon S3 upload flow. The plugin trusts an attacker-supplied file path from the form submission and stores it as the upload's filepath, whi...

CVE-2026-92174

The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.73.2 via the 'theme' parameter parameter. This makes it possible for authenticated attackers, with contributor-level access and above, to include and execute arbitrary...

CIMCown

CIMCown CVE-2026-20200 Argument Injection in Cisco IMC with RCE Christoph Peil @ NSIDE ATTACK LOGIC 2026 CVE: CVE-2026-20200 CVSS v3.1 CISCO: 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS v3.1 NSIDE: 9.9 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H Advisory: NSIDE-SA-2026-003 Blogpost:...

webuploader-0.1.15-Demo

webuploader-v-0.1.15 Component Has an Unauthorized File Upload Vulnerability Introduction: Baidu's WebUploader component has a file upload vulnerability. This vulnerability is caused by the upload page of the WebUploader component not strictly filtering file types or file extensions. Attackers ca...

CVE-2026-57827

CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE Split-Controller Upload Bypass → Direct Write Task → /downloads/shell.php → RCE Overview CVE-2026-57827 is a critical-severity CVSS 9.8 unauthenticated arbitrary file upload vulnerability in RSFiles! comrsfiles, a widely...

phpweb

phpweb Frontend Arbitrary File Upload...

JSScanner

JSScanner You can find the article related to this script here https://securityjunky.com/scanning-js-files-for-endpoint-and-secrets/ To install the required tools use bash install.sh Change the alive.txt with the domains you need to test. These should be in below format http://example.com...

Vmware_vCenter

VMware vCenter 低版本存在未授权任意文件读取漏洞 Arbitrary File Read vulnerability in VMware vCenterUnauthenticated Poc from: https://twitter.com/ptswarm/status/1316016337550938122 e.g. https://www.jas502n.com/eam/vib?id=C:\ProgramData\VMware\vCenterServer\cfg\vmware-vpx\vcdb.properties...

CVE-2025-64095---DNN-Unauthenticated-arbitrary-file-upload

CVE-2025-64095---DNN-Unauthenticated-arbitrary-file-upload POC of DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite I'm a simple man, I see cvss:10/10 I go in xD I saw this new CVE CVE-2025-64095 DNN Insufficient Access Control - Image Upload allows for Site Content...

CVE-2025-24054_CVE-2025-24071-PoC

CVE-2025-24054 and CVE-2025-24071 - NTLM Hash Leak via .library-ms Exploit This PoC demonstrates the exploitation of the NTLM hash leak via .library-ms files on unpatched Windows systems March 2025 Patch Tuesday. ⚠️ This is for educational and research purposes only. Do not use this on production...

CVE-2024-53677-S2-067

🚨🚨 CVE-2024-53677-S2-067🚨🚨 Security Advisory: CVE-2024-53677 – Critical Apache Struts Remote Code Execution Vulnerability Advisory Date: December 14, 2024 CVE ID: CVE-2024-53677 CVSS Score: 9.5 Critical Overview A critical vulnerability, CVE-2024-53677, has been identified in the popular Apache...

CVE-2026-11111-TOCTOU-in-File-Permission-Check-Before-Open

CVE-2026-11111 – TOCTOU in File Permission Check Before Open Program Code Python toctouserver.py - File server that checks permission then opens import os, time, tempfile from flask import Flask, request app = Flaskname SAFEDIR = '/tmp/safe' @app.route'/read' def readfile: filename =...

ThinkCMF_getshell

ThinkCMFgetshell - Arbitrary File Inclusion Vulnerability in the ThinkCMF Framework A remote attacker can execute arbitrary code on the remote server by crafting a specific request packet without requiring any privileges. Python usage: + python ThinkCMFgetshell.py http://x.x.x.x/ python...

010-Editor-Template

010-Editor-Template https://www.sweetscape.com/010editor/repository/files/010.bt https://www.sweetscape.com/010editor/repository/files/010Theme.bt https://www.sweetscape.com/010editor/repository/files/7ZIP.bt https://www.sweetscape.com/010editor/repository/files/ADF.bt...

CVE-2021-43287

CVE-2021-43287 POC: pocsuite -r CVE-2021-43287GoCDfilereadPOCEXP -u url EXP: pocsuite -r CVE-2021-43287GoCDfilereadPOCEXP -u url --attack --command "command" 免责声明 此工具仅用于学习、研究和自查。不应将其用于非法目的。使用本工具产生的一切风险与我无关！ Disclaimer This tool is for study, research, and self-examination only. It should not be...

WSO2-2021-1260

WSO2-2021-1260: Deletion of Arbitrary files via Path Traversal in Artifact Name in WSO2 ESB Due to the unsanitized user input in the Artifact Upload feature, an arbitrary file deletion attack could be carried out by leveraging path traversal in the "artifactName" parameter. Vendor Disclosure: The...

IOCScraper

IOC Scraper IOC Scraper utilises IOCPARSER service to fetch IOCs from different vendor Blogs, PDFs, and CSV files. Parsing IOCs is time-consuming process, using current script one can automatically extract and aggregate IOCs easily. Features Defanged IOCs : Supports extracting and defanging IOCs...