Lucene search
+L

761 matches found

Kitploit
Kitploit
added 2026/09/13 5:38 a.m.4 views

cve-2026-16219-croogo-lab

CVE-2026-16219: Laboratorio defensivo del FileManager de Croogo Este repositorio documenta y demuestra de forma segura la falla de autorización de rutas registrada como CVE-2026-16219 en Croogo CMS. Está dirigido a defensores, mantenedores, estudiantes e investigadores que prueban sistemas propio...

6.5CVSS6.7AI score0.00425EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 5:20 a.m.8 views

CVE-2020-10567

POC-CVE-2020-10567 RCE poc - RESPONSIVE filemanager v.9.14.0. not Main branche ⚠️ Github project : https://github.com/trippo/ResponsiveFilemanager Requirements: Nothing is required, this exploit is unauthenticated. The Responsive Filemanager application is a web-based file management tool used to...

9.8CVSS8.2AI score0.1964EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/13 4:33 a.m.7 views

ResponsiveFileManager-CVE-2022-46604

ResponsiveFileManager-CVE-2022-46604 Responsive FileManager v.9.9.5 vulnerable a CVE-2022-46604 Bypass de extensión de creación de archivos que conduce a RCE. El exploit actual está realizado en Python 3 y explota la vulnerabilidad para subir una webshell que permite la ejecución remota de comand...

8.8CVSS7.8AI score0.08627EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/13 3:47 a.m.3 views

CVE-2024-51568---CyberPanel-Command-Injection-Nuclei-Template

CVE-2024-51568 - PoC de Inyección de Comandos en CyberPanel Un entorno de prueba de concepto y plantilla Nuclei para probar CVE-2024-51568, una vulnerabilidad crítica de inyección de comandos sin autenticación en CyberPanel. Detalles de la Vulnerabilidad CVE: CVE-2024-51568 Severidad: Crítica CVS...

10CVSS8.2AI score0.4546EPSS
SaveExploits4
Nuclei
Nuclei
added 2026/09/13 2:04 a.m.178 views

BlogEngine.NET 3.3.7.0 - Local File Inclusion

BlogEngine.NET 3.3.7.0 allows /api/filemanager local file inclusion via the path parameter id: CVE-2019-10717 info: name: BlogEngine.NET 3.3.7.0 - Local File Inclusion author: arafatansari severity: high description: | BlogEngine.NET 3.3.7.0 allows /api/filemanager local file inclusion via the pa...

7.1CVSS7AI score0.05399EPSS
SaveExploits5References5
Kitploit
Kitploit
added 2026/09/12 7:37 p.m.8 views

CVE-2022-44276-PoC

CVE-2022-44276-PoC PoC for Responsive Filemanager 9.12.0 bypass upload restrictions lead to RCE Where's vuln? When uploading new file we go through function fixfilename: https://github.com/trippo/ResponsiveFilemanager/blob/9a7411f3eab3b7d8e2c78dcf40b4325bde2c548d/filemanager/upload.phpL112 In thi...

9.8CVSS8.1AI score0.02302EPSS
SaveExploits2References3
Kitploit
Kitploit
added 2026/09/12 5:01 p.m.4 views

CVE-2023-44767_RiteCMS-File-Upload--XSS---Filemanager

RiteCMS 3.0 Subida de Archivos - XSS Autor: Sergio Descripción: La vulnerabilidad de subida de archivos en RiteCMS 3.0 permite a un atacante local subir un archivo svg con contenido XSS. Vectores de ataque: AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L Prueba de concepto: Creamos un archivo svg con el...

4.8CVSS5.8AI score0.00455EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/12 4:56 p.m.12 views

CVE-2024-21546

CVE-2024-21546 Python Exploit 🔥 Description This Python exploit script targets a vulnerable Laravel Filemanager created by UniSharp , which allows authenticated users to bypass file restrictions and upload malicious files. This can lead to Remote Code Execution RCE when the uploaded payload is...

9.8CVSS8.2AI score0.01275EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/12 4:17 p.m.49 views

pyradm

🔮 pyradm Remote administration crossplatfrom tool via telegram Coded with ❤️ python3 + aiogram3 https://t.me/whlab Screenshots Disclaimer All information contained in this repository is provided for educational and research purposes only The author is not responsible for any illegal use of this...

5.6AI score
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/10 8:06 p.m.9 views

CVE-2024-21546

UniSharp Laravel Filemanager Unauthenticated RCE CVE-2024-21546 This repository contains security assessment tooling, detection templates, and an automated exploit toolkit for identifying and exploiting Unauthenticated Remote Code Execution RCE in applications utilizing the...

9.8CVSS8.2AI score0.01275EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/10 1:10 p.m.8 views

cpanel-cve-41940-detector

Detector de IOC de cPanel para CVE-2026-41940 Detector de IOC de solo lectura para servidores cPanel/WHM que puedan haber sido afectados por CVE-2026-41940 y actividad posterior al compromiso relacionada. El script ayuda a un operador a revisar indicadores de ransomware .sorry, rastros de backdoo...

9.8CVSS8.5AI score0.98527EPSS
SaveExploits75References1
Kitploit
Kitploit
added 2026/09/10 12:53 a.m.10 views

CVE-2026-37637

CVE-2026-37637 Proof of Concept for CVE-2026-37637 - Remote Code Execution in Alexantr filemanager v1.0 via unrestricted file upload in filemanager.php. Overview CVE-2026-37637 is a Remote Code Execution vulnerability affecting Alexantr filemanager v1.0. The vulnerability exists in the...

9.1CVSS5.8AI score0.00664EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/09 5:23 p.m.7 views

CVE-2023-26563-26564-26565

The vendor has reportedly fixed all vulnerabilities detailed as of releases made after 2024. Ruptura InfoSecurity has not verified that these fixes are complete. See vendor comments in https://github.com/RupturaInfoSec/CVE-2023-26563-26564-26565/issues/1. CVE-2023-26563 - Local File Read in ASPCo...

9.8CVSS7.9AI score0.01886EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/09 2:36 a.m.10 views

CVE-2018-15961

CVE-2018-15961 - Adobe ColdFusion 2018 RCE Este repositorio contiene mi código de exploit para la vulnerabilidad RCE en Adobe ColdFusion 2018. Descripción del Exploit El exploit envía una solicitud POST que contiene una reverse shell JSP a...

10CVSS8.5AI score0.9995EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/08 7:23 p.m.5 views

CVE-2018-15961

CVE-2018-15961 - Adobe ColdFusion RCE Este repositorio contiene mi código de exploit para la vulnerabilidad RCE en Adobe ColdFusion 2021. Descripción del Exploit El exploit envía una solicitud POST que contiene un reverse shell JSP a /cfscripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm...

10CVSS8.5AI score0.9995EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/08 5:15 p.m.7 views

FileManager

FileManager Hacked together File Manager for CVE-2022-46689...

7CVSS7.3AI score0.44678EPSS
SaveExploits9
Kitploit
Kitploit
added 2026/09/08 3:45 p.m.9 views

CVE-2026-39023

CVE-2026-39023 PoC de RCE - RESPONSIVE filemanager v.9.14.0 última versión - sin parche Proyecto de Github : https://github.com/trippo/ResponsiveFilemanager Requisitos: No se requiere nada, este exploit no está autenticado. La aplicación Responsive Filemanager es una herramienta de gestión de...

5.9AI score
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/08 1:24 p.m.5 views

CVE-2025-58440

CVE-2025-58440 Remote Code Execution RCE via Polyglot File Attack and Null Byte Injection on Laravel FileManager Overview The unisharp/laravel-filemanager package versions 2.11 are vulnerable to Remote Code Execution RCE due to improper file type validation during file uploads. The vulnerability...

6.3AI score
SaveExploits1References1
Nuclei
Nuclei
added 2026/09/08 9:47 a.m.28 views

CWP (Control Web Panel) < 0.9.8.1205 - Remote Code Execution

CWP Control Web Panel 0.9.8.1205 contains a remote code execution caused by shell metacharacters in the ttotal parameter in filemanager changePerm request, letting unauthenticated attackers execute code remotely, exploit requires knowledge of a valid non-root username. id: CVE-2025-48703 info:...

9CVSS9.8AI score0.99655EPSS
SaveExploits3References2
Kitploit
Kitploit
added 2026/09/06 4:01 p.m.5 views

WordPress-HT-Contact-CVE-2025-7340-RCE

WordPress HT Contact Form Widget | CVE-2025-7340 Análisis de la vulnerabilidad de carga de archivos Ubicación de la vulnerabilidad Ubicación de la vulnerabilidad: ht-contactform/admin/Includes/Services/FileManager.php Función clave: tempfileupload 1. Punto principal de la vulnerabilidad: función...

9.8CVSS6.2AI score0.01668EPSS
SaveExploits2
Rows per page
Query Builder