CVE-2024-38077-check

Análisis de vulnerabilidad de archivos PDF asíncronos. Mi capacidad es limitada, todavía no puedo lograr RCE. Por favor, que los expertos me guíen. Para la verificación de la vulnerabilidad, solo es necesario cambiar la IP. root@kitploit: if name == 'main': printlogo...

CVE-2025-63307

CVE-2025-63307 – Cross-site Scripting XSS almacenado autenticado en laravel-file-manager v3.3.1 🧭 Resumen Una vulnerabilidad de Cross-site Scripting XSS almacenado autenticado en laravel-file-manager v3.3.1 y versiones anteriores permite a los atacantes con acceso a la interfaz del administrador ...

full-poc-CVE-2025_21298

Revisión de la vulnerabilidad CVE-2025-21298 CVE-2025-21298 es una vulnerabilidad crítica en la tecnología OLE Object Linking and Embedding utilizada en Microsoft Windows. Afecta específicamente a la función UtOlePresStmToContentsStm en la biblioteca ole32.dll. Esta función se encarga de converti...

CVE-2025-13595

CIBELES AI = 1.10.8 - Unauthenticated Arbitrary File Upload The Cibeles AI WordPress plugin versions 1.10.8 and below contain an unauthenticated remote code execution vulnerability in the actualizadorgit.php file. This file is directly accessible via HTTP without any authentication or authorizati...

CVE-2025-34085

CVE-2025-34085 — WordPress Simple File List RCE no autenticado Un exploit automatizado para CVE-2025-34085 duplicado de CVE-2020-36847, una vulnerabilidad crítica de ejecución remota de código sin autenticación en el plugin WordPress Simple File List versiones ≤ 4.2.2. Nota: CVE-2025-34085 fue...

CVE-2025-12973

S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Generador de Contenido e Imágenes = 1.7.7 - Autenticado Editor+ Subida Arbitraria de Archivos El complemento S2B AI Assistant de WordPress versiones 2.47 y anteriores contiene una vulnerabilidad de subida arbitraria de archivos que permite a usuarios...

CVE-2026-88841

BusyBox dpkg writestatusfile does not reset a stale field cursor between package stanzas, causing out-of-bounds reads and status file corruption when removing multiple packages. Mitigation Do not use the BusyBox dpkg applet for package management on systems where package integrity is critical...

cve-2026-80428-ctf

CVE-2026-80428 CTF Training Lab Educational emulator of CVE-2026-80428 CWE-502: Deserialization of Untrusted Data. This is not a real ILIAS installation and not a weaponized exploit package. It is a fully containerized, isolated laboratory for students and security researchers. Quick start...

CVE-2026-12227

The Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 45.16.0 via the vcv-template parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the...

CVE-2025-57460

CVE-2025-57460 Des: File upload vulnerability in machsol machpanel 8.0.32 allows attacker gain a webshell. POC: Navigate to https://controlpaneldomain/Client/SubmitTicket.aspx and Upload ASPx webshell then submit the ticket, finally open the file to execute shell and execute commands such as...

CVE-2025-23968

AI Bud – Generador de contenido AI, Chatbot AI, ChatGPT, Gemini, GPT-4o El plugin AI Bud expone un endpoint de API REST /wp-json/ai-buddy/v1/wp/attachments que permite subir archivos a la biblioteca de medios de WordPress. La lógica de archivos del endpoint contiene funcionalidad de renombrado qu...

CVE-2025-65346

CVE-2025-65346 – Path Traversal autenticado desde la función UnZip que conduce a escritura arbitraria de archivos en laravel-file-manager v3.3.1 🧭 Resumen Una vulnerabilidad de Path Traversal en la funcionalidad de descompresión/extracción de la aplicación afectada permite a un atacante escribir...

CVE-2024-21545-PoC

CVE-2024-21545-PoC Proxmox VE Arbitrary File Read - Full System Compromise . Not Testeted yet... will test them this week...

CVE-2025-68705

CVE-2025-68705 - Exploit de Path Traversal en RustFS Descripción Este script explota una vulnerabilidad de path traversal CVE-2025-68705 en RustFS que permite leer archivos arbitrarios en el servidor. Requisitos Python 3.6+ Consulta requirements.txt para las dependencias Instalación root@kitploit...

CVE-2025-13374

Kalrav AI Agent = 2.3.3 - Unauthenticated Arbitrary File Upload via kalravuploadfile AJAX Action The WordPress Kalrav AI Agent plugin version 2.3.3 and prior contains an arbitrary file upload vulnerability that allows unauthenticated users to upload malicious PHP files to the server, potentially...

CVE-2026-12227

The Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclusion (LFI) in all versions up to and including 45.16.0 . The flaw exists within the vcv-template parameter, which allows unauthenticated attackers to include and execute arbitrary files on the server. This c...

CVE-2026-12227 Visual Composer Website Builder <= 45.16.0 - Unauthenticated Local File Inclusion via 'vcv-template' Parameter

The Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 45.16.0 via the vcv-template parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the...

EUVD-2026-85839

The Visual Composer Website Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 45.16.0 via the vcv-template parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the...

CVE-2023-40028

CVE-2023-40028: Ghost CMS Arbitrary File Read Description This Proof-of-Concept POC can be used to exploit CVE-2023-40028 to achieve file-read access in Ghost CMS. Ghost is an open source content management system CMS. Versions prior to 5.59.1 are subject to a vulnerability which allows...

CVE-2026-77193

The eesyID2WP – Publish InDesign HTML5 plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.0.3 via the id2wppath parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain...