CVE-2023-44767_RiteCMS-File-Upload--XSS---Filemanager

RiteCMS 3.0 File Upload - XSS Author: Sergio Description: File upload vulnerability in RiteCMS 3.0 allows a local attacker to upload a svg file with XSS content. Attack Vectors: AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L POC: We create an svg file with the following content: root@kitploit: When logging...

CVE-2024-21546

CVE-2024-21546 Python Exploit 🔥 Description This Python exploit script targets a vulnerable Laravel Filemanager created by UniSharp , which allows authenticated users to bypass file restrictions and upload malicious files. This can lead to Remote Code Execution RCE when the uploaded payload is...

pyradm

🔮 pyradm Remote administration crossplatfrom tool via telegram Coded with ❤️ python3 + aiogram3 https://t.me/whlab Screenshots Disclaimer All information contained in this repository is provided for educational and research purposes only The author is not responsible for any illegal use of this...

cve-2026-16219-croogo-lab

CVE-2026-16219: Croogo FileManager defensive lab This repository documents and safely demonstrates the path-authorization flaw tracked as CVE-2026-16219 in Croogo CMS. It is intended for defenders, maintainers, students, and researchers testing systems they own or are explicitly authorized to...

CVE-2020-10567

POC-CVE-2020-10567 RCE poc - RESPONSIVE filemanager v.9.14.0. not Main branche ⚠️ Github project : https://github.com/trippo/ResponsiveFilemanager Requirements: Nothing is required, this exploit is unauthenticated. The Responsive Filemanager application is a web-based file management tool used to...

ResponsiveFileManager-CVE-2022-46604

ResponsiveFileManager-CVE-2022-46604 Responsive FileManager v.9.9.5 vulnerable to CVE-2022-46604 File Creation Extension Bypass which leads to RCE. The current exploit is made in Python 3 and exploits the vulnerability to upload a webshell which allows the remote execution of commands in the...

CVE-2024-51568---CyberPanel-Command-Injection-Nuclei-Template

CVE-2024-51568 - CyberPanel Command Injection PoC A proof-of-concept environment and Nuclei template for testing CVE-2024-51568, a critical pre-authentication command injection vulnerability in CyberPanel. Vulnerability Details CVE: CVE-2024-51568 Severity: Critical CVSS 9.8 Type:...

BlogEngine.NET 3.3.7.0 - Local File Inclusion

BlogEngine.NET 3.3.7.0 allows /api/filemanager local file inclusion via the path parameter id: CVE-2019-10717 info: name: BlogEngine.NET 3.3.7.0 - Local File Inclusion author: arafatansari severity: high description: | BlogEngine.NET 3.3.7.0 allows /api/filemanager local file inclusion via the pa...

CVE-2022-44276-PoC

CVE-2022-44276-PoC PoC for Responsive Filemanager 9.12.0 bypass upload restrictions lead to RCE Where's vuln? When uploading new file we go through function fixfilename: https://github.com/trippo/ResponsiveFilemanager/blob/9a7411f3eab3b7d8e2c78dcf40b4325bde2c548d/filemanager/upload.phpL112 In thi...

CVE-2024-21546

UniSharp Laravel Filemanager Unauthenticated RCE CVE-2024-21546 This repository contains security assessment tooling, detection templates, and an automated exploit toolkit for identifying and exploiting Unauthenticated Remote Code Execution RCE in applications utilizing the...

cpanel-cve-41940-detector

cPanel IOC Detector for CVE-2026-41940 Read-only IOC detector for cPanel/WHM servers that may have been affected by CVE-2026-41940 and related post-compromise activity. The script helps an operator review .sorry ransomware indicators, MrRot13 Filemanager backdoor traces, suspicious cron entries,...

CVE-2026-37637

CVE-2026-37637 Proof of Concept for CVE-2026-37637 - Remote Code Execution in Alexantr filemanager v1.0 via unrestricted file upload in filemanager.php. Overview CVE-2026-37637 is a Remote Code Execution vulnerability affecting Alexantr filemanager v1.0. The vulnerability exists in the...

CVE-2023-26563-26564-26565

The vendor has reportedly fixed all vulnerabilities detailed as of releases made after 2024. Ruptura InfoSecurity has not verified that these fixes are complete. See vendor comments in https://github.com/RupturaInfoSec/CVE-2023-26563-26564-26565/issues/1. CVE-2023-26563 - Local File Read in ASPCo...

CVE-2018-15961

CVE-2018-15961 - Adobe ColdFusion 2018 RCE This repository contains my exploit code for the RCE vulnerability in Adobe ColdFusion 2018. Exploit Description The exploit sends a POST request containing a JSP reverse shell to /cfscripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm. If...

CVE-2018-15961

CVE-2018-15961 - Adobe ColdFusion RCE This repository contains my exploit code for the RCE vulnerability in Adobe ColdFusion 2021. Exploit Description The exploit sends a POST request containing a JSP reverse shell to /cfscripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm. If successfull...

FileManager

FileManager Hacked together File Manager for CVE-2022-46689...

CVE-2026-39023

CVE-2026-39023 RCE poc - RESPONSIVE filemanager v.9.14.0 last version - not patched Github project : https://github.com/trippo/ResponsiveFilemanager Requirements: Nothing is required, this exploit is unauthenticated. The Responsive Filemanager application is a web-based file management tool used ...

CVE-2025-58440

CVE-2025-58440 Remote Code Execution RCE via Polyglot File Attack and Null Byte Injection on Laravel FileManager Overview The unisharp/laravel-filemanager package versions 2.11 are vulnerable to Remote Code Execution RCE due to improper file type validation during file uploads. The vulnerability...

CWP (Control Web Panel) < 0.9.8.1205 - Remote Code Execution

CWP Control Web Panel 0.9.8.1205 contains a remote code execution caused by shell metacharacters in the ttotal parameter in filemanager changePerm request, letting unauthenticated attackers execute code remotely, exploit requires knowledge of a valid non-root username. id: CVE-2025-48703 info:...

WordPress-HT-Contact-CVE-2025-7340-RCE

WordPress HT Contact Form Widget | CVE-2025-7340 Análisis de la vulnerabilidad de carga de archivos Ubicación de la vulnerabilidad Ubicación de la vulnerabilidad: ht-contactform/admin/Includes/Services/FileManager.php Función clave: tempfileupload 1. Punto principal de la vulnerabilidad: función...