413 matches found
Unrestricted-File-Upload-on-SiteMagic-CMS-4.4.2
Upload di file senza restrizioni su SiteMagic CMS 4.4.2 Questo repository descrive come sfruttare la vulnerabilità di upload di file senza restrizioni su SiteMagic CMS 4.4.2 Informazioni su SiteMagic CMS 4.4.2 Sito web: https://sitemagic.org/ Download: https://sitemagic.org/Download.html PoC -...
CVE-2022-1329
WordPress Plugin - Elementor 3.6.0 3.6.1 3.6.2 Remote Code Execution root@kitploit: Datum: 16. April 2023 Exploit-Autor: Việt Hùng https://github.com/phanthibichtram12 Anbieter-Website: https://elementor.com/ Software-Link: https://wordpress.org/plugins/elementor/advanced/ nach unten scrollen und...
CVE-2025-44608
CVE-2025-44608 CloudClassroom-PHP Project v1.0은 SQL Injection을 통한 RCE에 취약합니다. Vendor: https://github.com/mathurvishal/CloudClassroom-PHP-Project Software Link: https://github.com/mathurvishal/CloudClassroom-PHP-Project/archive/refs/heads/master.zip PoC Step 1: 영향을 받는 URL로 이동하여 ?viewid=1 매개변수에...
CVE-2024-27115-Exploit
SOPlanning 1.52.01 - Esecuzione di Codice Remota RCE Autenticato Dettagli dell'Exploit Titolo dell'Exploit : SOPlanning 1.52.01 Strumento di Pianificazione Online Semplice - Esecuzione di Codice Remota RCE Autenticato Data : 6 ottobre 2024 Autore dell'Exploit : Ardayfio Samuel Nii Aryee Versione ...
CVE-2026-36340
CVE-2026-36340 Vulnerabilità di Remote Code Execution RCE in Krayin CRM v2.1.5 Vulnerabilità di Remote Code Execution RCE in Krayin CRM v2.1.5 CVE: CVE-2026-36340 Severity: Critica Prodotto interessato: Krayin CRM v2.1.5 Tipo di vulnerabilità: Remote Code Execution RCE Autenticazione richiesta: S...
textpattern-exploit-rce
Textpattern = 4.8.3 Remote Code Execution Authentifiziert Textpattern bis einschließlich Version 4.8.3 erlaubt authentifizierten Benutzern, beliebige PHP-Dateien hochzuladen. Dieses Skript automatisiert den Prozess und ermöglicht das Löschen der hochgeladenen Datei. Verwendung root@kitploit:...
CVE-2022-1329-WordPress-Elementor-3.6.0-3.6.1-3.6.2-Remote-Code-Execution-Exploit
WordPress Plugin - Elementor 3.6.0 3.6.1 3.6.2 Remote Code Execution root@kitploit: Google Dork: none Date: April 16 2022 Exploit Author: AkuCyberSec https://github.com/AkuCyberSec Vendor Homepage: https://elementor.com/ Software Link: https://wordpress.org/plugins/elementor/advanced/ scroll down...
CVE-2022-4047
CVE-2022-4047 Return Refund and Exchange For WooCommerce 4.0.9 - Caricamento Arbitrario di File Non Autenticato Utilizzo root@kitploit: @@@@@@@ @@@ @@@ @@@@@@@@ @@@@@@ @@@@@@@@ @@@@@@ @@@@@@ @@@ @@@@@@@@ @@@ @@@@@@@@ @@@@@@@@ @@@ @@@ @@@@@@@@ @@@@@@@@ @@@@@@@@@@ @@@@@@@@ @@@@@@@@ @@@@ @@@@@@@@@@...
Pluck-CMS-v4.7.18-Remote-Code-Execution-CVE-2023-50564
CVE-2023-50564 - Pluck CMS v4.7.18 Remote Code Execution RCE Exploit Beschreibung Dieses Skript nutzt eine Remote Code Execution RCE-Sicherheitslücke in Pluck CMS v4.7.18 aus. Die Schwachstelle erlaubt es einem Angreifer, eine schadhafte PHP-Datei auf den Server hochzuladen und auszuführen, wodur...
CVE-2022-1329
WP Elementor 3.6.0/1/2 रिमोट कोड निष्पादन root@kitploit: Google Dork: none Date: April 16 2022 Exploit Author: AkuCyberSec https://github.com/AkuCyberSec Vendor Homepage: https://elementor.com/ Software Link: https://wordpress.org/plugins/elementor/advanced/ scroll down to select the version...
CVE-2025-6058
🚨 CVE-2025-6058 — WordPress WPBookit ≤ 1.0.4 बिना प्रमाणीकरण के फ़ाइल अपलोड शोषण WordPress WPBookit प्लगइन ≤ 1.0.4 को लक्षित करने वाला बिना प्रमाणीकरण का मनमाना फ़ाइल अपलोड शोषण यह शोषण रिमोट शेल अपलोड और पूर्ण कमांड निष्पादन की अनुमति देता है। लेखक: 0xgh057r3c0n 📌 भेद्यता के बारे में CVE-2025-60...
CVE-2026-49849
xShop is an open-source shop developed in Laravel. An Unrestricted File Upload vulnerability in xShop version 3.0.3 allows an authenticated administrator to upload executable files e.g., .php. By uploading a specially crafted php file, an attacker can achieve Remote Code Execution RCE on the...
PT-2026-79481
Name of the Vulnerable Software and Affected Versions xShop version 3.0.3 Description An unrestricted file upload flaw exists in this open-source shop developed in Laravel. The issue stems from insufficient validation of uploaded files, allowing an authenticated administrator to upload executable...
EUVD-2026-63217
A high privileged remote attacker can upload a .php file and then request it directly from /uploads/.php to achieve arbitrary code execution due to improper file type validation which could result in full system compromise...
CVE-2026-19839
A vulnerability was detected in SourceCodester Simple Doctors Appointment System 1.0. This issue affects the function savedoctor of the file /savefile.php. The manipulation results in unrestricted upload. The attack can be executed remotely. The exploit is now public and may be used...
CVE-2026-49827
WebErpMesv2 is a Resource Management and Manufacturing execution system Web for industry. Versions 1.19 and prior allow any self-registered user to upload arbitrary PHP files through the HR Expense scanfile parameter, leading to Remote Code Execution. Combined with open registration no invite...
EUVD-2026-57830
WebErpMesv2 is a Resource Management and Manufacturing execution system Web for industry. Versions 1.19 and prior allow any self-registered user to upload arbitrary PHP files through the HR Expense scanfile parameter, leading to Remote Code Execution. Combined with open registration no invite...
PT-2026-71486
WebErpMesv2 is a Resource Management and Manufacturing execution system Web for industry. Versions 1.19 and prior allow any self-registered user to upload arbitrary PHP files through the HR Expense scan file parameter, leading to Remote Code Execution. Combined with open registration no invite...
CVE-2026-55676
Malcolm is a network traffic analysis tool suite. The file-upload component FilePond PHP backend accepts uploads at POST /server/php/submit.php and stores them in a directory served by the same nginx and php-fpm instance. The allow-list that should restrict accepted file types is an empty array b...
