Exploit-CVE-2026-1357

Instalar dependencias pip3 install pycryptodome requests Exploit básico python3 wpvivi.py http://target.com Webshell personalizada python3 wpvivi.py http://target.com --shell backdoor.php python3 wpvivi.py http://target.com --code "" Explicación técnica: Null Byte Key: Cuando RSA decrypt falla,...

CVE-2026-23907

Vulnerabilidad de Path Traversal en Apache PDFBox Resumen de la Vulnerabilidad Descripción El código de ejemplo ExtractEmbeddedFiles de Apache PDFBox no sanitiza los nombres de archivo al extraer archivos incrustados de PDFs. Un atacante puede incrustar archivos con secuencias de path traversal ....

detect-ransomware-filenames

Detectar nombres de archivo de ransomware Este paquete/script supervisa las transacciones SMB para buscar nombres de archivo maliciosos conocidos que el ransomware suele utilizar. Se basa en las listas de Anti-Ransomware File System Resource Manager mantenidas aquí. Cómo usar Se incluye un script...

CVE-2025-60787-Detection-motionEye-RCE-via-Config-Injection

README.md Detección de CVE-2025-60787: RCE en motionEye mediante inyección de configuración Ejecución remota de código no autenticada en motionEye Imágenes fijas - Nombre de archivo de imagen Ejemplo de payload PoC: $touch /tmp/test.%Y-%m-%d-%H-%M-%S Cuando motion se reinicia, el comando de shell...

CVE-2024-53677

El POC proviene de https://y4tacker.github.io/2024/12/16/year/2024/12/Apache-Struts2-%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E9%80%BB%E8%BE%91%E7%BB%95%E8%BF%87-CVE-2024-53677-S2-067/ Condiciones de RCE 1. Sin restricción en las extensiones de archivo peligrosas 2. El nombre del archivo se obtiene d...

CVE-2025-65754

CVE-2025-65754: XSS almacenado en Algernon 1.17.4 Descripción Algernon v1.17.4 está afectado por una vulnerabilidad de Cross-Site Scripting XSS que permite a los atacantes ejecutar código arbitrario mediante un payload manipulado en un nombre de archivo. Proyecto afectado: Algernon - 1.17.4...

cve-2020-27358-27359

CVE-2020-27358 / CVE-2020-27359 Pasos de explotación para CVE-2020-27358 y CVE-2020-27359 CVE-2020-27358 Se descubrió un problema en REDCap 8.11.6 hasta 9.x anteriores a 10. La función CSV del messenger que permite a los usuarios exportar sus hilos de conversación como CSV permite a usuarios no...

gin-vulnerable

gin-vulnerable Consumidor de demostración fijado en github.com/gin-gonic/gin v1.7.0 vulnerable a CVE-2023-29401. El manejador /download/:filename pasa la entrada del usuario directamente a Context.FileAttachment — el patrón de condición de explotación que Endor marca como explotable...

POC_CVE-2024-10829

POCCVE-2024-36420 Laboratorio de reproducción local y borrador de plantilla de nuclei para CVE-2024-36420 que afecta a Flowise. Resumen CVE-2024-36420 es una lectura arbitraria de archivos en Flowise causada por el uso no saneado del parámetro del cuerpo fileName en: POST...

CentOS Linux 8.4 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-filesystem / etc (CENTOS8.4:CLSA-2026:1777396606)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1777396606 advisory. - NGINX Open Source and NGINX Plus have a vulnerability in the ngxhttpdavmodule module that might allow an attacker to trigger a buffer...

CentOS Linux 8.5 [TuxCare] Security Update: mod_dav_svn / subversion / subversion-devel / subversion-gnome / etc (CENTOS8.5:CLSA-2025:1756409018)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2025:1756409018 advisory. - Insufficient validation of filenames against control characters in Apache Subversion repositories served via moddavsvn allows authenticated...

CentOS Linux 8 [TuxCare] Security Update: mod_dav_svn / subversion / subversion-devel / subversion-gnome / etc (CENTOS-STREAM8:CLSA-2025:1756489732)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2025:1756489732 advisory. - Insufficient validation of filenames against control characters in Apache Subversion repositories served via moddavsvn allows...

CVE-2026-101127 Joomla Extension - balbooa.com - Unauthenticated upload filename stored XSS in Balbooa Forms < 2.4.3.4

Joomla Extension - balbooa.com - Unauthenticated upload filename stored XSS in Balbooa Forms 2.4.3.4 - The public form upload endpoint validates the uploaded file's extension and detected MIME type, but stores the attacker-supplied original multipart filename verbatim in...

CVE-2026-101127

The Joomla Extension - balbooa.com (specifically Balbooa Forms ) is vulnerable to an unauthenticated stored Cross-Site Scripting (XSS) in versions prior to 2.4.3.4 . The root cause is that the public form upload endpoint validates file extensions and MIME types but stores the attacker-supplied or...

CVE-2026-101127 Joomla Extension - balbooa.com - Unauthenticated upload filename stored XSS in Balbooa Forms < 2.4.3.4

Joomla Extension - balbooa.com - Unauthenticated upload filename stored XSS in Balbooa Forms 2.4.3.4 - The public form upload endpoint validates the uploaded file's extension and detected MIME type, but stores the attacker-supplied original multipart filename verbatim in...

EUVD-2026-89096

Joomla Extension - balbooa.com - Unauthenticated upload filename stored XSS in Balbooa Forms 2.4.3.4 - The public form upload endpoint validates the uploaded file's extension and detected MIME type, but stores the attacker-supplied original multipart filename verbatim in...

PT-2026-102706

Name of the Vulnerable Software and Affected Versions Balbooa Forms versions prior to 2.4.3.4 Description An unauthenticated stored Cross-Site Scripting XSS issue exists in the public form upload endpoint. While the endpoint validates file extensions and MIME types, it stores the original multipa...

CVE-2026-101082

A weakness has been identified in PMWeb 7.x/8.x/2025.x. This issue affects some unknown processing of the file downloader.aspx. This manipulation of the argument FullFileName/FileName causes path traversal. The attack may be initiated remotely. The exploit has been made available to the public an...

EUVD-2026-88375

A weakness has been identified in PMWeb 7.x/8.x/2025.x. This issue affects some unknown processing of the file downloader.aspx. This manipulation of the argument FullFileName/FileName causes path traversal. The attack may be initiated remotely. The exploit has been made available to the public an...

CVE-2026-101082 PMWeb downloader.aspx path traversal

A weakness has been identified in PMWeb 7.x/8.x/2025.x. This issue affects some unknown processing of the file downloader.aspx. This manipulation of the argument FullFileName/FileName causes path traversal. The attack may be initiated remotely. The exploit has been made available to the public an...