wp-file-manager-0day

CVE-2020-25213 wp-file-manager 6.7 20th Aug 2020 Wordpress Plugin 0day elFinder vulnerability is a well-know vulnerability, my script only changes path to "/wp-content/plugins/wp-file-manager/". Stop requesting fixes in script or something else for me. RTFM... References:...

CVE-2019-8389

CVE-2019-8389 - Arbitrary file read in Musicloud for iOS v1.6 CVE-2019-8389 An exploit code for exploiting a local file read vulnerability in Musicloud v1.6 iOS Application Description: A file-read vulnerability was identified in the Wi-Fi transfer feature of Musicloud 1.6. By default, the...

cve-2023-50164-poc

PoC for CVE-2023-50164 Install To install this tool you must have Go version at least 1.20 installed and configured. $ go install github.com/dwisiswant0/cve-2023-50164-poc@latest Alternatively, you can compile it by DIY: $ git clone http://github.com/dwisiswant0/cve-2023-50164-poc...

GhostCat-LFI-exp

GhostCat-LFI-exp CVE-2020-1938 Original EXP: https://github.com/YDHCUI/CNVD-2020-10487-Tomcat-Ajp-lfi Only modified one place, can include execute arbitrary files under any project...

CVE-2024-29272

CVE-2024-29272 This is a Proof-of-Concept for CVE-2024-29272, an unauthenticated arbritrary file upload vulnerability that leads to remote code execution on versions of VvvebJS -l -p in another terminal: nc -lvnp...

CVE-2022-29464

Exploit CVE-2022-29464 This repository contains a script to exploit the CVE-2022-29464 vulnerability, which allows file uploads to vulnerable servers. Use it only in authorized environments and for educational purposes. Requirements Python 3.8 or higher Installation Step 1: Clone the repository...

Safer_PoC_CVE-2022-22965

SaferPoCCVE-2022-22965 A Safer PoC for CVE-2022-22965 Spring4Shell Functionality Creates a file called CVE2022-22965exploited.txt in the tomcat directory 'webapps/ROOT' Option user argument to change the output directory Exploit validation is performed by requesting the output .txt file, dependin...

GrafanaDirectoryScanner

PoC for CVE-2021-43798 Grafana is an open-source platform for monitoring and observability. Grafana versions from 8.0.0-beta1 to 8.3.0 except patched versions are vulnerable to directory traversal, allowing access to local files. The vulnerable URL is: /public/plugins//, where is the plugin ID fo...

CVE-2009-4623

CVE-2009-4623 Advanced Comment System 1.0 Reverse Shell Multiple PHP remote file inclusion vulnerabilities in Advanced Comment System 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the ACSpath parameter to 1 index.php and 2 admin.php in advancedcommentsystem/. NOTE: this...

CVE-2023-4220

Proof of concept exploit for CVE-2023-4220 Affected product : Chamilo = 1.11.24 This CVE abuses an unauthenticated file upload vulnerability in Chamilo 1.11.24 and lower. An attacker has the ability to upload PHP files with no restrictions, leading to RCE. How to use python3 exploit.py -u URL -c...

CVE-2025-66680

CVE-2025-66680 In Wise Force Deleter 1.5.7.59 and earlier, an attacker with local administrator access can delete arbitrary file in the file system by weaponizing the app. Usage 1. Place WiseDelfile64.sys in C:\Windows 2. Compile the project 3. Create file.txt which contain the a list of files yo...

CVE-2022-44268-ImageMagick-Vulnerable-Docker-Environment

CVE-2022-44268 ImageMagick Arbitrary Local File Read https://www.metabaseq.com/imagemagick-zero-days/ Based on the PoC CVE-2022-44268 ImageMagick Arbitrary File Read PoC, I created a vulnerability testing environment by using docker. Usage get image docker pull y1nglamore/cve202244268:latest you...

CVE-2025-58180

CVE-2025-58180 RCE in OctoPrint via Unsanitized Filename in File Upload In OctoPrint version =1.11.2, an attacker with file upload access e.g., valid API key or session can craft a malicious filename that bypasses sanitization and is later executed by OctoPrint’s event system, leading to remote...

CVE-2026-8461-PoC

CVE-2026-8461 PoC !WARNING This PoC is entirely generated by AI. Usage: python exploitcve20268461.py --baseline --frames 25 -o baseline.avi An unpatched version of ffmpeg will crash when processing baseline.avi...

antispy

AntiSpy English | 简体中文 A powerful anti rootkit toolkit AntiSpy is a free but powerful anti virus and rootkits toolkit. It offers you the ability with the highest privileges that can detect,analyze and restore various kernel modifications and hooks. With its assistance,you can easily spot and...

CVE-2022-45299

CVE-2022-45299 Affected Library : webbrowser.rs before version 0.8.3 https://github.com/amodm/webbrowser-rs Summary: The library fails to validate that the provided input is actually an URL. An attacker in control of an unfiltered URL passed to webbrowser::openURL can, therefore, provide a local...

MoveIT-CVE-2023-34362-RCE

CVE-2023-34362: MOVEit Transfer Unauthenticated RCE For a full technical description of the vulnerability and exploitation, please read our AttackerKB Analysis. Usage ruby move.rb ruby move.rb 192.168.86.111 + Starting. target='https://192.168.86.111'. + Retrieved initial session token...

MLflow-Vuln

Vuln replication-mlflow ver 2.1.1-prep by Saima.pdf MLflow-Vulnerability MLflow LFI/RFI Vulnerability -CVE-2023-1177 - Reproduced One of the most popular tools in a ML system is MLflow that is used for managing end-to-end machine learning lifecycle. I tested the security of MLflow and reproduced ...

CVE-2021-4034-touch

CVE-2021-4034-touch touch creates file...

evilrdp

🚩 Sponsors If you like this project, consider sponsoring it on GitHub! Sponsors EVILRDP - More control over RDP Th evil twin of aardwolfgui using the aardwolf RDP client library that gives you extended control over the target and additional scripting capabilities from the command line. Features...