CVE-2020-17519

Vulnerable Application This module exploits an unauthenticated directory traversal vulnerability in Apache Flink version 1.11.0 and released in 1.11.1 and 1.11.2 as well, allowing arbitrary file read with the web server privileges Vulnerable version: flink-1.11.0-src.tgz, Verification Steps 1...

CVE-2026-21858-and-CVE-2025-68613

Ni8mare: n8n Pre-Auth RCE CVE-2026-21858 & CVE-2025-68613 — Laboratorio de Vulnerabilidad e Informe de PoC Entorno práctico Laboratorio Vulnerable e informe detallado de análisis y explotación de la cadena de vulnerabilidades Ni8mare en la plataforma n8n — desde Lectura Arbitraria de Archivos...

CVE-2024-40422

CVE-2024-40422 Found this on exploit-db, decided to make my own for practice. This exploit will search out the passwd file and print the contents on a vulnerable system. This script exploits a path transversal vulnerability in Devika v1. Credit to Alperen Ergel for finding the vulnerability to...

CVE-2020-25068

CVE-2020-25068 Python exploit for Conacwin v3.7.1.2. Setelsa Conacwin v3.7.1.2 is vulnerable to a local file inclusion vulnerability. This vulnerability allows a remote unauthenticated attacker to read internal files on the server via an http:IP:PORT/../../path/filetodisclose Directory Traversal...

CVE-2025-2539

CVE-2025-2539 - WordPress File Away = 3.9.9.0.1 - Arbitrary File Read 🔥 Vulnerability Summary The WordPress plugin File Away version = 3.9.9.0.1 is vulnerable to an unauthenticated arbitrary file read vulnerability. This allows attackers to read any file on the server, such as wp-config.php,...

postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin

A flaw was found in PostgreSQL. Missing authorization in PostgreSQL's logical decoding feature allows a non-superuser with REPLICATION privilege to load arbitrary files. This can lead to arbitrary code execution as the operating system account running the server...

CVE-2026-3576

CVE-2026-3576 - Plugin de WordPress Planyo Online Reservation System = 3.0 - Lectura Arbitraria de Archivos mediante SSRF Este repositorio contiene un PoC Prueba de Concepto basado en Python para el exploit de CVE-2026-3576. También se puede encontrar en Exploit-DB aquí. También he desarrollado u...

CVE-2026-9231

The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 6.8.0 via the wtegettemplate function. This makes it possible for authenticated attackers, with contributor-level access and above, ...

ROOT-APP-MAVEN-CVE-2026-40987 CVE-2026-40987 in org.springframework.integration:spring-integration-file - Patched by Root

Root has patched CVE-2026-40987 in the org.springframework.integration:spring-integration-file package for Root:Maven. Multiple fixed versions available...

CVE-2025-39401

CVE-2025-39401 WordPress WPAMS 插件 WordPress WPAMS 插件 CVE： CVE-2025-39401 基础评分： 10.0 严重 mojoomla WPAMS 的危险类型文件无限制上传漏洞使攻击者能够向服务器上传 Web shell，从而导致完全沦陷。 影响 WPAMS 版本：从 n/a 至 44.0 2023-08-17。 🚀 脚本概述 脚本名称： CVE-2025-39401.py 该脚本是一个专业的自动化批量利用工具，利用 WPAMS 插件中的文件上传漏洞。 其执行以下操作： 利用多线程快速批量攻击多个 WordPress 目标。...

DirtyPipe

Dirty Pipe Exploit: CVE-2022-0847 The Dirty Pipe vulnerability, also known as CVE-2022-0847, is a significant flaw within the Linux kernel. This repository provides an adapted version of the widely used exploit code to make it more user-friendly and modular. A very good explanation of this...

CVE-2025-46822

CVE-2025-46822 Unauthenticated Arbitrary File Read via Absolute Path Description: While Path.resolve method is being used to protect against path traversal I have found that the usage of absolute path successfully read internal files , the endpoint is also not authenticated this means anyone can...

CVE-2021-3019

CVE-2021-3019 Add IPs to the ip.txt file, note the format: http://127.0.0.1 One per line Open Cheeetah and run it...

CVE-2025-9216

StoreEngine – Powerful WordPress eCommerce Plugin for Payments, Memberships, Affiliates, Sales & More = 1.4.0 - Authenticated Subscriber+ Arbitrary File Upload The StoreEngine plugin contains a vulnerability in it's CSV Import/Export feature that allows any authenticated user subscriber, author,...

CVE-2021-41773-Apache-Lab

CVE-2021-41773 — Laboratorio de Apache HTTP Server 2.4.49 Reproducción de CVE-2021-41773 , una vulnerabilidad de path traversal recorrido de rutas en Apache HTTP Server 2.4.49. Este proyecto usa Docker para crear un entorno vulnerable aislado y un PoC en Python para demostrar la divulgación...

CVE-2026-3891

CVE-2026-3891 Pix for WooCommerce = 1.5.0 - Subida de archivos arbitraria no autenticada 💣 Pix for WooCommerce = 1.5.0 – Subida de archivos arbitraria no autenticada CVE-2026-3891 👤 Nxploited 🧩 Descripción El plugin Pix for WooCommerce para WordPress es vulnerable a la subida de archivos arbitrar...

CVE-2021-22205

CVE-2021-22205 - Ejecución Remota de Código no Autenticada en GitLab CVE-2021-22205 es una vulnerabilidad crítica de Ejecución Remota de Código RCE que afecta a GitLab Community Edition CE y Enterprise Edition EE. La vulnerabilidad se origina en una validación incorrecta de los archivos de imagen...

CVE-2026-14894

CVE-2026-14894 — Super Forms: RCE por subida de archivos no autenticada Fuga de nonce → Subida datauristring → Ejecución de código Descripción general CVE-2026-14894 es una vulnerabilidad de subida arbitraria de archivos no autenticada de severidad crítica CVSS 9.8 en el plugin de WordPress Super...

CVE-2026-48907

CVE-2026-48907 - Joomla! JCE Unauthenticated RCE Joomla! JCE extension 2.9.99.5 - Unauthenticated Arbitrary PHP File Upload & Remote Code Execution 🔎 Search Engine Queries Shodan root@kitploit:...

CVE-2023-25202

CVE-2023-25202: Insecure file upload mechanism Description CVE-2023-25202 involves an insecure file upload mechanism within the Therefore application, which is overly permissive in the types of files users can upload. The application only blocks uploads of HTML, EXE, and BAK files, leaving it...