CVE-2024-22515-File-Upload-Vulnerability

CVE-2024-22515: Vulnerabilidad de Carga de Archivos en Agent DVR Información Descripción En iSpyConnect.com Agent DVR 5.1.6.0, hay una falta de verificación del tipo de archivo para las cargas de archivos de sonido. Esto permite que un usuario autenticado cargue cualquier tipo de archivo a través...

Mikrotik-router-hack

WinboxExploit Esta es una prueba de concepto de la vulnerabilidad crítica de WinBox CVE-2018-14847 que permite la lectura arbitraria de archivos con contraseñas en texto plano. La vulnerabilidad ya fue corregida hace tiempo, por lo que este proyecto ha terminado y ya no recibirá soporte ni...

CVE-2012-2982

CVE-2012-2982 This python script is written for vulnerability in Webmin 1.580, CVE-2012-2982. The vulnerability exists in the /file/show.cgi component and allows an authenticated user, with access to the File Manager Module, to execute arbitrary commands with root privileges. Installation Tested...

malicious-pdf

Malicious PDF Generator ☠️ Generate 67 malicious PDF test files for testing phone-home callbacks, SSRF, XSS, XXE, NTLM credential theft, and data exfiltration in PDF viewers, converters, and web applications. Can be used with Burp Collaborator or Interact.sh Used for penetration testing, bug bount...

MemProcFS

MemProcFS: MemProcFS es una forma fácil y conveniente de ver la memoria física como archivos en un sistema de archivos virtual. ¡Análisis de memoria fácil y trivial con un solo clic sin necesidad de complicados argumentos de línea de comandos! ¡Accede al contenido de la memoria y a los artefactos...

CVE-2015-6967

CVE-2015-6967 Nibbleblog 4.0.3 - Subida de archivos arbitraria CVE-2015-6967 requisitos python 3 requests uso root@kitploit: usage: exploit.py -h --url URL --username USERNAME --password PASSWORD --payload PAYLOAD optional arguments: -h, --help muestra este mensaje de ayuda y sale --url URL, -l U...

vt-py-scanner

VirusTotal Scanner Python script to analyze ALL files with the VirusTotal API, scanning folders and subfolders recursively. Optimized for Windows. Features Scans ALL files in a folder and its subfolders Configuration via .env file - Save your API key and settings Interactive mode - Also works...

CVE-2025-32118

🚀 CVE-2025-32118 - Exploit RCE del Plugin CMP de WordPress 🔍 Título: WordPress CMP – Coming Soon & Maintenance plugin = 4.1.13 - Ejecución Remota de Código RCE 🗓️ Publicado: 2025-04-04 🔐 CWE: CWE-434 - Carga sin restricciones de archivos de tipo peligroso 📊 CVSS: 9.1 CRÍTICO —...

cve-2024-23897-jenkins_lfi_reproduction

CVE-2024-23897 — Jenkins CLI Arbitrary File Read Vulnerability CVSS 9.8 CRITICAL — Actively exploited in the wild Overview CVE-2024-23897 is a critical arbitrary file read vulnerability in Jenkins' command-line interface CLI. The Jenkins CLI uses the args4j library for parsing command arguments...

The vulnerability of the platform for creating individual web applications in CRM involves an incorrect restriction on the path to the catalog, allowing attackers to delete arbitrary files.

The vulnerability of the platform for creating individual web applications in CRM involves incorrect restrictions on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files remotely...

CVE-2025-23922

CVE-2025-23922 - WordPress iSpring Embedder CSRF to Arbitrary File Upload 📌 CVE Details CVE ID: CVE-2025-23922 Published: 2025-01-16 Plugin Affected: WordPress iSpring Embedder plugin Versions Affected: = 1.0 Author of Plugin: Harsh Vulnerability Type: Cross-Site Request Forgery CSRF → Arbitrary...

Vulnerability of “Before and After Photos”: Comparison of images before/after by a content management system (CMS) like 1C-Bitrix. This feature allows unauthorized users to execute arbitrary code by enabling unlimited uploading of dangerous types of files.

Vulnerability of “Before and After Photos”: Comparison of images before/after by a content management system CMS like 1C-Bitrix. Website management involves unlimited uploading of dangerous files. Exploitation of this vulnerability could allow an attacker to execute arbitrary code remotely...

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in improper restrictions on path names to the catalog. This allows attackers to gain unauthorized access to local files and directories.

The vulnerability of the Webasyst content management framework and the Shop-Script CMS system lies in incorrect restrictions on the path to the catalog. Exploiting this vulnerability can allow an attacker to gain unauthorized access to local files and directories on the server...

CVE-2024-9698

CVE-2024-9698 Crafthemes Demo Import = 3.3 - Arbitrary File Upload Exploit 📌 Overview This exploit targets a critical vulnerability CVE-2024-9698 in the Crafthemes Demo Import plugin for WordPress. The vulnerability allows authenticated administrators to upload arbitrary files to the affected...

CVE-2024-7985-PoC

CVE-2024-7985-PoC FileOrganizer = 1.0.9 - Subida Arbitraria de Archivos Autenticada Suscriptor+ Exploit de FileOrganizer - CVE-2024-7985 📌 Resumen CVE-2024-7985 - El plugin FileOrganizer = 1.0.9 de WordPress es vulnerable a subidas arbitrarias de archivos autenticadas , permitiendo a atacantes co...

CVE-2024-9234

CVE-2024-9234 GutenKit = 2.1.0 - Subida de archivos arbitraria no autenticada POC python CVE-2024-9234.py -h baseurl Nota Este script se proporciona únicamente con fines educativos. El autor no se responsabiliza por los daños causados por el mal uso de este script...

CVE-2024-6460

CVE-2024-6460 Grow by Tradedoubler 2.0.22 - Unauthenticated LFI Usage root@kitploit: usage: CVE-2024-6460.py -h -u URL -U USERNAME -P PASSWORD -c COMPONENT Grow by Tradedoubler 2.0.22 - Unauthenticated LFI options: -h, --help show this help message and exit -u URL, --url URL Target WordPress site...

The vulnerability of the OpenSky flight planning and operational management system, related to unlimited loading of dangerous file types, allows a perpetrator to execute arbitrary commands.

The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the OpenSky flight planning and operational management system, related to unlimited loading of dangerous file types, allows a perpetrator to execute arbitrary commands.

The vulnerability of the OpenSky flight planning and operational management system lies in its ability to load files of a dangerous type without limitation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

CVE-2025-1306

Exploit de Newscrunch CVE-2025-1306 🚨 Descripción general Este exploit apunta a una vulnerabilidad de Cross-Site Request Forgery CSRF a Subida Arbitraria de Archivos CVE-2025-1306 en el tema Newscrunch para WordPress. Debido a la falta de validación de nonce en la función...