CVE-2023-45878

CVE-2023-45878 J'ai écrit ce script basé sur les travaux de https://herolab.usd.de/security-advisories/usd-2023-0025/ . L'exploit fonctionne en utilisant une vulnérabilité d'écriture arbitraire de fichier dans Gibbon LMS 25.0.1 . Ce PoC télécharge un simple script PHP cmd, puis l'utilise pour...

CVE-2021-30461

Produits concernés VoIPmonitor 24.60 Comment exécuter une RCE python3 CVE-2021-30461.py -t ipaddress Shell dans le navigateur : http://x.x.x.x/namrlblgel.php?a=whoami Référence https://ssd-disclosure.com/ssd-advisory-voipmonitor-unauth-rce/...

CVE-2021-30461

Produits impactés VoIPmonitor 24.60 Comment exécuter une RCE python3 CVE-2021-30461.py -t ipaddress Shell navigateur : http://x.x.x.x/namrlblgel.php?a=whoami Référence https://ssd-disclosure.com/ssd-advisory-voipmonitor-unauth-rce/...

Prestashop-CVE-2024-34716

Script d'exploitation pour attaque CSRF et reverse shell Ce script automatise une exploitation CSRF Cross-Site Request Forgery pour téléverser un reverse shell PHP sur le serveur web d'une cible et l'exécuter. Le reverse shell est livré sous forme de fichier ZIP via une charge utile CSRF conçue,...

CVE-2023-5360

CVE-2023-5360 Открытый эксплойт для WordPress-плагина Royal Elementor Addons and Templates. До версии 1.3.79 плагин некорректно проверяет загружаемые файлы, что позволяет неаутентифицированным пользователям загружать произвольные файлы, например PHP, и добиваться RCE. Оглавление Введение...

CVE-2023-50564

CVE-2023-50564 Только для образовательных целей. Этот скрипт использует CVE-2023-50564 для загрузки reverse-php shell на целевой сервер. Вы можете использовать такую оболочку, как эта. Просто запакуйте php-файл в zip и передайте его этому скрипту. Пример python3 cve-2023-50564.py -u...

CVE-2026-82524: Unrestricted Upload of File with Dangerous Type

UnoPim before 2.1.5 contains an authenticated file upload vulnerability that allows authenticated administrators to upload arbitrary PHP files through the TinyMCE image upload endpoint due to missing file extension and MIME type validation. Attackers can upload a PHP web shell to the public stora...

CVE-2026-53599

REDAXO is a PHP-based content management system. From 5.18.2 until 5.21.1, rexmediapool::isAllowedExtension in redaxo/src/addons/mediapool/lib/mediapool.php lets an authenticated backend user with mediaupload permission upload a JPEG/PHP polyglot named shell.php.any.jpg, which web servers with...

CVE-2026-53599

CVE-2026-53599 affects REDAXO CMS versions 5.18.2–5.21.1 where rex_mediapool::isAllowedExtension lets an authenticated backend user with media[upload] permission upload a JPEG/PHP polyglot named shell.php.any.jpg. On servers with multi-extension PHP handlers, this can be executed as the web serve...

CVE-2026-48946

The K2 extension for Joomla (versions

CVE-2026-48946 Joomla Extension - getk2.com - Privileged RCE vulnerability in K2 extension for Joomla < 2.26

The K2 frontend article-attachment upload path accepts files whose extension is .php, and Apache's standard modphp matches .php$ and executes them under the K2 web user. A K2 Author can upload a shell.php, then fetch /media/k2/attachments/shell.php and execute arbitrary PHP code in the web...

CVE-2016-20075 WordPress Ultimate Product Catalog 3.8.6 Arbitrary File Upload RCE

WordPress Ultimate Product Catalog 3.8.6 contains an arbitrary file upload vulnerability that allows authenticated users with contributor, editor, author, or administrator roles to upload malicious files by exploiting the custom fields functionality. Attackers can upload PHP shells through the...

CVE-2023-54352

WordPress Seotheme contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary PHP code by uploading malicious files to the theme directory. Attackers can access the uploaded PHP shell at /wp-content/themes/seotheme/mar.php to execute system commands...

Exploit for CVE-2026-4885

CVE-2026-4885 – Piotnet Addons for Elementor Pro Mass Exploit...

CVE-2021-47943

TextPattern CMS 4.8.7 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by uploading malicious PHP files through the file upload functionality. Attackers can upload a PHP shell via the Files section in the content area and execute...

EUVD-2021-34803

TextPattern CMS 4.8.7 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by uploading malicious PHP files through the file upload functionality. Attackers can upload a PHP shell via the Files section in the content area and execute...

PT-2026-39517

TextPattern CMS 4.8.7 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by uploading malicious PHP files through the file upload functionality. Attackers can upload a PHP shell via the Files section in the content area and execute...

CVE-2021-47940: Missing Authentication for Critical Function

WordPress Plugin Download From Files version 1.48 and earlier contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by exploiting the AJAX fileupload action. Attackers can send POST requests to the admin-ajax.php endpoint with the...

Exploit for CVE-2026-7537

MDJM Event Management = 1.7.8.3 - Authenticated Administrato...

PT-2026-31607

Disclosure from our research team at Pentest-Tools.com "It's just dev mode" is doing a lot of heavy lifting here. FuelCMS has no enforced access control on the add git submodule installer function. Dev mode on, git over SSH enabled, a valid .git directory in the root: any authenticated user can...