PyShell

PyShell PyShell is Multiplatform Python WebShell. This tool helps you to obtain a shell-like interface on a web server to be remotely accessed. Unlike other webshells, the main goal of the tool is to use as little code as possible on the server side, regardless of the language used or the operati...

odat

Quentin HARDY --- [email protected] [email protected] ODAT ODAT Oracle Database Attacking Tool is an open source penetration testing tool that tests the security of Oracle Databases remotely. Usage examples of ODAT: You have an Oracle database listening remotely and want to find valid...

android-c-sharp-rat-server

Android C R.A.T Server 이것은 C R.A.T Server의 플러그인 시스템을 위해 구축된 플러그인입니다. 1. 이 플러그인을 설치하려면 AndroidExtension/bin/Debug에 있는 AndroidExtension.dll 파일을 /TutServer/bin/Debug/scripts에 복사하십시오. 2. 그런 다음 서버를 시작하고 Plugins 탭을 선택하십시오. 3. 목록에서 AndroidExtension.dll을 선택하고 Execute를 클릭하십시오. 4. 서버 포트클라이언트에 사용하는 것과 동일한 포...

b374k

b374k shell 3.2 This PHP Shell is a useful tool for system or web administrator to do remote management without using cpanel, connecting using ssh, ftp etc. All actions take place within a web browser Features : File manager view, edit, rename, delete, upload, download, archiver, etc Search file,...

BetterAndroRAT

향상된 안드로이드 RAT Dendroid 기반 안드로이드 원격 접속 트로이 목마 모든 책임은 사용자 본인에게 있습니다. 연구 목적으로만 사용하십시오. 기능 원격 업데이트 및 애플리케이션 설치 원격 웹캠 원격 마이크 녹음 원격 파일 관리 원격 통화 및 SMS 원격 장치 제어...

CVE-2022-44136-poc

CVE-2022-44136-poc Zenar CMS 9.3 suffers from an ​​unrestricted file upload vulnerability​​ in its file management module, allowing authenticated attackers with minimal privileges to upload arbitrary files, including malicious PHP scripts, to the web server. Due to insufficient file extension...

CVE-2024-24137

CVE-2024-24137: Student File Managment System SQL Injection Proof of ConceptPoC : https://github.com/BurakSevben/CVEs/blob/main/CVE-2024-24137.md Proof of ConceptPoC : https://github.com/BurakSevben/CVE-2024-24137/blob/main/CVE-2024-24137.md...

CVE-2026-29909-MRCMS-vulnerability

CVE-2026-29909: MRCMS V3.1.2 - 인증되지 않은 디렉터리 열거 CVE ID CVE-2026-29909 설명 MRCMS V3.1.2에는 파일 관리 모듈에 인증되지 않은 디렉터리 열거 취약점이 존재합니다. /admin/file/list.do 엔드포인트는 인증 제어 및 적절한 입력 검증이 부족하여, 원격 공격자가 자격 증명 없이 서버의 디렉터리 내용을 열거할 수 있습니다. 개념 증명PoC GET /admin/file/list.do?path=../../../src/main/resources/ HTTP/1.1...

oracleShell

oracleShell oracle 데이터베이스 명령 실행 테스트 환경-DBA 권한: SELECT FROM v$version Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - Production PL/SQL Release 11.2.0.1.0 - Production "CORE 11.2.0.1.0 Production" TNS for 32-bit Windows: Version 11.2.0.1.0 - Production NLSRTL Version 11.2.0.1.0 -...

PT-2026-98145

Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 8.7.0 Description An authenticated user with file-management access can upload malicious XML and XSLT Extensible Stylesheet Language Transformations attachments. The API endpoint 'GET /api/v1/object type/id/files/fil...

CVE-2026-76431

A vulnerability in the file management function of the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to delete arbitrary files and directories on an affected device. To exploit this vulnerability, the attacker must have valid...

CVE-2026-76431 Cisco Identity Services Engine Arbitrary File Deletion Vulnerability

A vulnerability in the file management function of the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to delete arbitrary files and directories on an affected device. To exploit this vulnerability, the attacker must have valid...

EUVD-2026-81016

A vulnerability in the file management function of the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker to delete arbitrary files and directories on an affected device. To exploit this vulnerability, the attacker must have valid...

CVE-2026-76431

A vulnerability in the file management function of the web-based management interface of Cisco ISE and Cisco ISE-PIC allows an authenticated, remote attacker with administrative credentials to delete arbitrary files and directories on the underlying operating system. The root cause is improper va...

CVE-2026-86774 Snipe-IT before 8.7.0 Broken Access Control via AssetModelPolicy

Snipe-IT versions before 8.7.0 contain a broken access control vulnerability in AssetModelPolicy where the files method cascades from assets.files permission, allowing authenticated users to upload and delete file attachments on Asset Model records without the required models.files permission...

CVE-2026-86774 Snipe-IT before 8.7.0 Broken Access Control via AssetModelPolicy

Snipe-IT versions before 8.7.0 contain a broken access control vulnerability in AssetModelPolicy where the files method cascades from assets.files permission, allowing authenticated users to upload and delete file attachments on Asset Model records without the required models.files permission...

SUSE CVE-2026-55499

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, a single-file share event-stream subscription resolves the share root to the owner's parent folder and subscribes to that folder topic, allowing an authenticated share recipient to receive names, paths, rename targets...

ROS-20260901-73-0030

The vulnerability in the incus is related to incorrect external management of the name or file. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the SSHFS file remote management program lies in the improper definition of symbolic links before accessing the file. This allows a malicious actor to trigger a service failure.

The vulnerability of the SSHFS file system for remote file management is related to incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability can allow a malicious actor to cause service failures...

CVE-2026-16617: Improper Neutralization of Input During Web Page Generation

The Simple File List WordPress plugin through 6.3.11 does not properly sanitise and escape a file's description before outputting it on the public file list, allowing unauthenticated users when front-end file management is enabled to perform Stored Cross-Site Scripting attacks that execute in the...