CVE-2022-28368

CVE-2022-28368 - Dompdf RCE Dompdf RCE PoC Exploit alt text ExploitDB Dompdf versions 1.2.1 are vulnerable to Remote Code Execution RCE by injecting CSS into the data. The file can be tricked into storing a malicious font with a .php file extension in its font cache, which can later be executed b...

Ghostcat-CNVD-2020-10487

Ghostcat exp for CNVD-2020-10487CVE-2020-1938 File reading and file execution caused by arbitrary attribute setting in the Tomcat AJP protocol. Vulnerability Analysis The code is for security testing only. Do not use it for illegal purposes. The user is responsible for any consequences, and I am...

shepard

SHEPARD BITS Это инструмент персистентности, использующий фоновую интеллектуальную службу передачи Windows BITS. Функциональность Загрузка файлов, Экфильтрация файлов, Загрузка файлов + Постоянное выполнение Использование Запустите shepard.exe от имени администратора со следующими аргументами...

Chartify – WordPress Chart Plugin < 2.9.6 - Local File Inclusion

The Chartify – WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.5 via the 'source' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the executio...

WP Umbrella Update Backup Restore & Monitoring <= 2.17.0 - Local File Inclusion

The WP Umbrella: Update Backup Restore & Monitoring plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.17.0 via the 'filename' parameter of the 'umbrella-restore' action. This makes it possible for unauthenticated attackers to include and execute...

HUSKY – Products Filter Professional for WooCommerce <= 1.3.6.5 - Unauthenticated Local File Inclusion

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.6.5 via the 'template' parameter of the wooftextsearch AJAX action. This makes it possible for unauthenticated attackers to include and...

ColdFusion_EXp

Strumento di reverse shell per lo sfruttamento delle vulnerabilità CVE-2023-29298/CVE-2023-26360 Introduzione Il principio della vulnerabilità è che i dati delle richieste del client CFML che costruiamo vengono salvati nel coldfusion-out.log del server; questa directory registra le informazioni...

LocalNet_Attacker

LocalNetAttacker Questo è uno strumento di attacco alla rete locale basato su Java. Utilizzando questo strumento puoi attaccare o raccogliere informazioni sui sistemi Windows target connessi a te nella stessa rete. Caratteristiche Recupera i dettagli IP Recupera i dettagli di sistema Attacchi web...

AgentDVR-5.1.6.0-File-Upload-and-Remote-Code-Execution

AgentDVR-5.1.6.0-Caricamento-file-ed-Esecuzione-Remota-di-Codice CVE-2024-22515 caricamento file arbitrario e CVE-2024-22514 esecuzione remota di codice per AgentDVR 5.1.6.0 Autenticato Versioni precedenti probabilmente affette https://github.com/Orange-418/CVE-2024-22514-Remote-Code-Execution...

CVE-2024-54374

CVE-2024-54374 Sogrid = 1.5.6 - Inclusione Locale di File non autenticata Descrizione Il plugin Sogrid per WordPress è vulnerabile all'Inclusione Locale di File nelle versioni fino alla 1.5.6 inclusa. Ciò consente ad attaccanti non autenticati di includere ed eseguire file arbitrari sul server,...

Docx-Exploit-2021

Docx-Exploit-2021 Este exploit docx utiliza arquivos res dentro de arquivos .docx do Microsoft para executar arquivos maliciosos. Este exploit está relacionado ao CVE-2021-40444 Se não conseguir reproduzir Por favor, envie-me uma mensagem no Telegram: LazarusRebor...

WinRAR-CVE-2025-8088-Exploitation-Toolkit

☠️ CVE-2025-8088 Strumento Exploit per WinRAR ☠️ ACCESSO AL SISTEMA: CONCESSO BERSAGLIO: VULNERABILITÀ WINRAR Uno strumento GUI sofisticato, di livello militare, progettato per creare archivi RAR dannosi che sfruttano la vulnerabilità di path traversal di WinRAR CVE-2025-8088. Questo strumento...

CVE-2017-8570

Cosa? Questo repository contiene un exploit Proof of Concept per CVE-2017-8570, la vulnerabilità nota anche come "Composite Moniker". Dimostra l'utilizzo del trucco di Packager.dll per rilasciare un file sct nella directory %TEMP% ed eseguirlo usando la primitiva fornita dalla vulnerabilità...

CVE-2018-6546-Exploit

Exploit POC CVE-2018-6546 Ceci est un exploit de preuve de concept pour la version 1.27.5.0 et antérieures du service Plays.tv playsservice.exe. Plus de détails sur les vulnérabilités sont disponibles sur : https://www.securifera.com/advisories/cve-2018-6546/...

CVE-2021-23394

Configurazione di riproduzione di elFinder CVE-2021-23394 Questo repository contiene una configurazione di riproduzione per CVE-2021-23394 Esecuzione arbitraria di file in elFinder utilizzando Docker. Configura quattro ambienti per confrontare le versioni vulnerabili e corrette su Apache e Nginx...

CVE-2026-34741

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, authentication bypass allows unauthenticated remote attackers to execute arbitrary PHP files from the env-production directory on a new iTop instance in the production environment. This issue has been fixed in version 3.2.3...

CVE-2026-34741 Combodo iTop: Authentication bypass in exec.php allows PHP file execution

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, authentication bypass allows unauthenticated remote attackers to execute arbitrary PHP files from the env-production directory on a new iTop instance in the production environment. This issue has been fixed in version 3.2.3...

CVE-2026-34741

Combodo iTop (web-based IT service management tool) is affected by an authentication bypass in exec.php that allows unauthenticated remote attackers to execute arbitrary PHP files from the env-production directory on a new iTop instance in the production environment. The vulnerability is rated CV...

CVE-2026-34741 Combodo iTop: Authentication bypass in exec.php allows PHP file execution

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, authentication bypass allows unauthenticated remote attackers to execute arbitrary PHP files from the env-production directory on a new iTop instance in the production environment. This issue has been fixed in version 3.2.3...

EUVD-2026-64183

Combodo iTop is a web based IT service management tool. Prior to 3.2.3, authentication bypass allows unauthenticated remote attackers to execute arbitrary PHP files from the env-production directory on a new iTop instance in the production environment. This issue has been fixed in version 3.2.3...