2074 matches found
FOXCMS-CVE-2025-29306-POC
FOXCMS Parameter Injection RCE – CVE-2025-29306 This repository contains a Python-based PoC for a Remote Code Execution RCE vulnerability affecting FOXCMS v1.2, a Chinese open-source content management system. CVE-ID: CVE-2025-29306 Affects: FOXCMS v1.2 Type: Service Parameter Injection → Code...
CVE-2021-40964
Tiny File Manager = 2.4.6 - Remote Code Execution Authenticated 🚨 About the Exploit This is a Bash-based authenticated Remote Code Execution RCE exploit for Tiny File Manager versions = 2.4.6, vulnerable under CVE-2021-40964. The script leverages: Weak upload validation and webroot disclosure, An...
CVE-2024-25641-RCE-Automated-Exploit-Cacti-1.2.26
CVE-2024-25641-RCE-Automated-Exploit-Cacti-1.2.26 Exploit totalmente automatizado para CVE-2024-25641. Cuando un usuario está autenticado, Cacti versión 1.2.26 es vulnerable a una vulnerabilidad de escritura arbitraria de archivos, explotable a través de la función "Package Import", permite a...
RCE_CVE-2024-7954-
RCECVE-2024-7954- The porteplume plugin used by SPIP before 4.30-alpha2, 4.2.13, and 4.1.16 is vulnerable to an arbitrary code execution vulnerability. A remote and unauthenticated attacker can execute arbitrary PHP as the SPIP user by sending a crafted HTTP request. CRITICAL Exploit: POST...
CVE-2023-46304
CVE-2023-46304 Authenticated Remote Code Execution in VTiger Open Source CRM v7.5 Summary A vulnerability exists in the Users module in the current release of VTiger CRM Open Source version 7.5.0 which allows an authenticated attacker to write and execute arbitrary PHP code to config.inc.php...
CVE-2021-44967
CVE-2021-44967 root@kitploit: Exploit Title: LimeSurvey 5.2.4 - Authenticated Remote Code Execution RCE Google Dork: inurl:limesurvey/index.php/admin/authentication/sa/login Date: 05/12/2021 Discovered by: Y1LD1R1M Exploit Author: D3Ext Vendor Homepage: https://www.limesurvey.org/ Software Link:...
CVE-2024-25641
CVE-2024-25641 RCE for Cacti 1.2.26 This repository automates the process of exploiting CVE-2024-25641 on Cacti 1.2.26. When a user is authenticated, An arbitrary file write vulnerability, exploitable through the "Package Import" feature, allows authenticated users having the "Import Templates"...
CVE-2024-25641-CACTI-RCE-1.2.26
CVE-2024-25641 - Cacti 1.2.26 - Arbitrary file write to RCE 🌵 Authenticated RCE Cacti version v1.2.26 Summary An arbitrary file write vulnerability, exploitable through the "Package Import" feature, allows authenticated users having the "Import Templates" permission to execute arbitrary PHP code ...
CVE-2023-47253
CVE-2023-47253 | Qualitor povoaVoComArray$REQUEST; if inarray$REQUEST'nmalias', array'dtiniciomesatual', 'dtfimmesatual', 'dtiniciomespassado', Prueba de Concepto PoC Simplemente accede a la URL con tu código PHP en el parámetro "gridValoresPopHidden"...
CVE-2023-5965
PoC para Espo CRM 7.2.4 CVE-2023-5965 y CVE-2023-5965 CVE-2023-5965 Aviso Un atacante autenticado con privilegios podría subir un zip especialmente manipulado al servidor EspoCRM en la versión 7.2.5, a través del formulario de actualización, lo que podría llevar a la ejecución arbitraria de códig...
Magento-CVE-2016-4010
Analysis and Exploitation of Magento Unauthenticated Remote Code Execution Vulnerability CVE-2016-4010 0x00 Preface On May 17, foreign security researcher Netanel Rubin publicly disclosed an unauthenticated remote code execution vulnerability in Magento CVE-2016-4010. This vulnerability actually...
CVE-2018-16370
CVE-2018-16370 En PESCMS Team 2.2.1, los atacantes pueden subir y ejecutar código PHP arbitrario a través de /Public/?g=Team&m=Setting&a=upgrade colocando un archivo .php en un archivo ZIP. Más detalles en https://github.com/lazyphp/PESCMS-TEAM/issues/2...
OpenCATS - Command Injection
OpenCATS prior to commit 3002a29 contains a command injection caused by injection of PHP statements into the installer AJAX endpoint's databaseConnectivity action parameter, letting unauthenticated attackers execute arbitrary code, exploit requires incomplete installation wizard. id: CVE-2026-277...
CVE-2025-49132_HTB_SEASON10
CVE-2025-49132 - Pterodactyl Panel RCE Exploit HTB Season 10 - Pterodactyl Machine Writeup Overview Target: Pterodactyl HTB Machine Medium Difficulty CVE: CVE-2025-49132 Severity: Critical CVSS 9.8 Attack Type: Unauthenticated Remote Code Execution Affected: Pterodactyl Panel v1.11.11 This exploi...
Ads Pro Plugin <= 4.89 - Local File Inclusion
The Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.89 via the 'bsatemplate' parameter of the bsapreviewcallback function. This makes it possible for unauthenticated attackers to includ...
CVE-2017-9841-EXPLOIT
CVE-2017-9841 - Ejecución Remota de CódigoRCE en PHPUnit Esta vulnerabilidad afecta a versiones de PHPUnit anteriores a la 4.8.28 y a todas las versiones 5.x anteriores a la 5.6.3. Permite a los atacantes ejecutar código PHP arbitrario en servidores donde PHPUnit está expuesto. El problema existe...
CVE-2026-85200 GEO my WP <= 4.5.5.3 - Unauthenticated Local File Inclusion
The GEO my WP plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.5.5.3 via the gmwpostslocatorajaxinfowindowloader function. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the...
CVE-2026-85200
GEO my WP is a WordPress plugin vulnerable to an unauthenticated Local File Inclusion (LFI) in all versions up to and including 4.5.5.3 , via the gmw_posts_locator_ajax_info_window_loader function. An attacker can include and execute arbitrary .php files on the server, enabling bypass of access c...
EUVD-2026-76829
The GEO my WP plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.5.5.3 via the gmwpostslocatorajaxinfowindowloader function. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the...