OpenEMR_Vulnerabilities

OpenEMR 远程代码执行漏洞 OpenEMR 5.0.1 允许经过身份验证的攻击者上传并执行恶意的 PHP 代码。 PoC git clone https://github.com/EmreOvunc/OpenEMRVulnerabilities.git cd OpenEMRVulnerabilities python3 openemrrcepoc.py -t http://127.0.0.1/openemr -u admin -p Passw0rd usage: openemrrcepoc.py -h --target TARGET --username USERNAME...

PanaceaSoft-0day-Exploit

PanaceaSoft-0day-Exploit PanaceaSoft 所有产品 0day 漏洞利用 https://packetstormsecurity.com/files/157869/PanaceaSoft-Shell-Upload.html 无 write-up 阅读： jQuery File Upload 的 PHP 上传处理器...

CVE-2025-12973

S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Generador de Contenido e Imágenes = 1.7.7 - Autenticado Editor+ Subida Arbitraria de Archivos El complemento S2B AI Assistant de WordPress versiones 2.47 y anteriores contiene una vulnerabilidad de subida arbitraria de archivos que permite a usuarios...

CVE-2019-11231-PoC

GetSimpleCMS CVE-2019-11231 RCE 漏洞利用 针对 GetSimpleCMS ≤ 3.3.15 的未认证远程代码执行漏洞利用 漏洞 GetSimpleCMS 会公开暴露敏感文件（/data/other/authorization.xml、/data/users/），攻击者可以： 1. 泄漏 API 密钥和用户名 2. 伪造认证 Cookie 3. 获取 CSRF 令牌 4. 上传并执行任意 PHP 代码 CVSS 评分： 9.8（严重） 使用方法 pip install -r requirements.txt python3 exploit.py...

CVE-2018-9206-jquery-file-upload

CVE-2018-9206 - Blueimp jQuery-File-Upload ラボ CVE-2018-9206 の脆弱なDocker環境 - Blueimp jQuery-File-Upload ' Execute it curl "http://localhost:8888/jQuery-File-Upload/server/php/files/test.php" Output: CVE-2018-9206-PWNED またはPoCスクリプトを実行: ./scripts/poc.sh クリーンアップ docker compose down -v 詳細 フィールド| 値...

Python-exploit-CVE-2020-25213

説明 WordPress用プラグイン「File Manager wp-file-manager」のバージョン6.9未満では、安全でないサンプルelFinderコネクタファイルを.php拡張子にリネームするため、リモート攻撃者が任意のPHPコードをアップロードして実行できます。これにより、攻撃者はelFinderのupload（またはmkfileとput）コマンドを実行して、wp-content/plugins/wp-file-manager/lib/files/ディレクトリにPHPコードを書き込むことが可能です。この脆弱性は2020年8月から9月にかけて実際に悪用されました。 デモ...

CVE-2015-4133

CVE-2015-4133 CVE 2015-4133 - Reflex Gallery 3.1.3 任意文件上传到远程命令执行 描述 Reflex Gallery 是一款 WordPress 插件，其 3.1.3 版本存在一个漏洞，攻击者可以轻易利用该漏洞上传任意文件，例如 PHP 代码，从而实现远程命令执行。 Exploit Title: Wordpress Plugin Reflex Gallery - Arbitrary File Upload Google Dork: inurl:wp-content/plugins/reflex-gallery/ Date: 08.03.20...

CVE-2026-6271

CVE-2026-6271 — Career Section WordPressプラグインRCEスキャナー Plugin: Career Section career-section CVE ID: CVE-2026-6271 CVSS Score: 9.8 Critical CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 脆弱性の種類: 未認証の任意ファイルアップロード → リモートコード実行 影響を受けるバージョン: 認証されていない訪問者でも有効なnonceを取得し、検証チェックを通過できます。...

CVE-2023-4220

CVE-2023-4220 概念验证漏洞利用代码 受影响的产品 ：Chamilo = 1.11.24 该 CVE 利用了 Chamilo 1.11.24 及更低版本中未经身份验证的文件上传漏洞。攻击者能够无任何限制地上传 PHP 文件，从而导致远程代码执行（RCE）。 使用方法 python3 exploit.py -u URL -c COMMAND...

cve-2023-4220-poc

CVE-2023-4220 Chamilio エクスプロイト PoC 恥知らずにもコピーしたもの 直接インスパイアされた元: https://starlabs.sg/advisories/23/23-4220/ 使用方法: Chamilio CVE-2023-4220 POC Exploit positional arguments: url The Chamilio Url. e.g. http://example.com options: -h, --help show this help message and exit -c C The command to execute...

PT-2026-97623

Name of the Vulnerable Software and Affected Versions SEMCMS versions prior to 4.3 Description A flaw exists in the KindEditor Upload Interface component within the file '/Edit/php/upload json.php'. Remote manipulation of the imgFile argument allows for cross-site scripting, a technique where...

CVE-2026-84738

The AF Companion WordPress plugin, in versions before 2.2.0 , contains a vulnerability where it fails to validate file types during one of its import features . This oversight allows users with a low-privileged store-management role to upload arbitrary files, such as PHP files , resulting in Remo...

EUVD-2026-76784

The DS Ad Rotator WordPress plugin through 0.8 does not perform any capability check, nonce verification, or file-type validation on its image upload handler, allowing unauthenticated attackers to upload arbitrary files, including PHP, to a web-accessible directory, which can lead to remote code...

CVE-2026-14560: Improper Control of Generation of Code

The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not properly validate uploaded files, relying on a client-supplied content type and preserving the original filename, allowing unauthenticated attackers to upload arbitrary PHP files and execute code on the server...

CVE-2026-54611 InstantCMS has Remote Code Execution in package installer

InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Remote Code Execution RCE issue that allows remote authenticated attackers to execute any PHP code via the component installer. It is possible to upload a malicious component into the server, however, ...

Exploit for CVE-2026-11613

CVE-2026-11613 — Divi Ajax Filter RCE | | | |---|---| | Plug...

EUVD-2026-71098

The LearnDash LMS plugin for WordPress is vulnerable to Unrestricted File Type Upload in versions up to and including 5.1.5. This is due to insufficient input validation in the 'learndashfileuploadprocess' function, which iterates through an entire array and validates only the first file. This...

PT-2026-85525

The LearnDash LMS plugin for WordPress is vulnerable to Unrestricted File Type Upload in versions up to and including 5.1.5. This is due to insufficient input validation in the 'learndash fileupload process' function, which iterates through an entire array and validates only the first file. This...

CVE-2026-76174

Ocsreports for OCS Inventory NG has an unrestricted file upload vulnerability in the CSV file upload functionality of the admin_info endpoint . The application validates files solely by the client-provided name, without inspecting content or restricting permitted file types. An administrator user...

CVE-2026-76174

Unrestricted file upload vulnerability in the CSV file upload functionality of the Ocsreports admininfo endpoint. The application validates files solely based on the name provided by the client, without properly checking their content or securely restricting the permitted file types. This allows ...