OpenEMR_Vulnerabilities

Уязвимость удалённого выполнения кода в OpenEMR OpenEMR 5.0.1 позволяет аутентифицированному атакующему загружать и выполнять вредоносный PHP-код. PoC git clone https://github.com/EmreOvunc/OpenEMRVulnerabilities.git cd OpenEMRVulnerabilities python3 openemrrcepoc.py -t http://127.0.0.1/openemr -...

PanaceaSoft-0day-Exploit

PanaceaSoft-0day-Exploit PanaceaSoft все продукты 0day-эксплойт https://packetstormsecurity.com/files/157869/PanaceaSoft-Shell-Upload.html без описания читайте: jQuery File Upload's PHP Upload Handler...

CVE-2025-12973

S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator = 1.7.7 - Произвольная загрузка файлов аутентифицированными пользователями Editor+ Плагин WordPress S2B AI Assistant версии 2.47 и более ранние содержит уязвимость произвольной загрузки файлов, которая позволяет...

CVE-2019-11231-PoC

Exploit RCE GetSimpleCMS CVE-2019-11231 Exploit d'exécution de code à distance non authentifié pour GetSimpleCMS ≤ 3.3.15 Vulnérabilité GetSimpleCMS expose publiquement des fichiers sensibles /data/other/authorization.xml, /data/users/ permettant aux attaquants de : 1. Fuiter des clés API et noms...

CVE-2018-9206-jquery-file-upload

CVE-2018-9206 - лаборатория Blueimp jQuery-File-Upload Уязвимое Docker-окружение для CVE-2018-9206 - неограниченная загрузка файлов в Blueimp jQuery-File-Upload ' Execute it curl "http://localhost:8888/jQuery-File-Upload/server/php/files/test.php" Output: CVE-2018-9206-PWNED Или запустите...

Python-exploit-CVE-2020-25213

Description Le plugin File Manager wp-file-manager avant la version 6.9 pour WordPress permet à des attaquants distants de télécharger et d'exécuter du code PHP arbitraire car il renomme un fichier de connecteur elFinder d'exemple non sécurisé avec l'extension .php. Cela permet par exemple aux...

CVE-2015-4133

CVE-2015-4133 CVE 2015-4133 - Reflex Gallery 3.1.3 Téléchargement arbitraire de fichier vers RCE Description Reflex Gallery est un plugin WordPress qui présente une vulnérabilité dans sa version 3.1.3, pouvant être exploitée facilement par des attaquants pour télécharger des fichiers arbitraires,...

CVE-2026-6271

CVE-2026-6271 — Scanner RCE pour l'extension WordPress Career Section Extension : Career Section career-section Identifiant CVE : CVE-2026-6271 Score CVSS : 9.8 Critique Vecteur CVSS : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Type de vulnérabilité : Téléchargement de fichier arbitraire non...

CVE-2023-4220

Preuve de concept d'exploitation pour CVE-2023-4220 Produit concerné : Chamilo = 1.11.24 Cette CVE exploite une vulnérabilité de téléchargement de fichier non authentifié dans Chamilo 1.11.24 et versions antérieures. Un attaquant peut télécharger des fichiers PHP sans aucune restriction, conduisa...

cve-2023-4220-poc

CVE-2023-4220 эксплойт PoC для Chamilio Бесстыдно скопировано из Непосредственно вдохновлено: https://starlabs.sg/advisories/23/23-4220/ Использование: Chamilio CVE-2023-4220 POC Exploit positional arguments: url The Chamilio Url. e.g. http://example.com options: -h, --help show this help message...

PT-2026-97623

Name of the Vulnerable Software and Affected Versions SEMCMS versions prior to 4.3 Description A flaw exists in the KindEditor Upload Interface component within the file '/Edit/php/upload json.php'. Remote manipulation of the imgFile argument allows for cross-site scripting, a technique where...

CVE-2026-84738

The AF Companion WordPress plugin, in versions before 2.2.0 , contains a vulnerability where it fails to validate file types during one of its import features . This oversight allows users with a low-privileged store-management role to upload arbitrary files, such as PHP files , resulting in Remo...

EUVD-2026-76784

The DS Ad Rotator WordPress plugin through 0.8 does not perform any capability check, nonce verification, or file-type validation on its image upload handler, allowing unauthenticated attackers to upload arbitrary files, including PHP, to a web-accessible directory, which can lead to remote code...

CVE-2026-14560: Improper Control of Generation of Code

The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not properly validate uploaded files, relying on a client-supplied content type and preserving the original filename, allowing unauthenticated attackers to upload arbitrary PHP files and execute code on the server...

CVE-2026-54611 InstantCMS has Remote Code Execution in package installer

InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Remote Code Execution RCE issue that allows remote authenticated attackers to execute any PHP code via the component installer. It is possible to upload a malicious component into the server, however, ...

Exploit for CVE-2026-11613

CVE-2026-11613 — Divi Ajax Filter RCE | | | |---|---| | Plug...

EUVD-2026-71098

The LearnDash LMS plugin for WordPress is vulnerable to Unrestricted File Type Upload in versions up to and including 5.1.5. This is due to insufficient input validation in the 'learndashfileuploadprocess' function, which iterates through an entire array and validates only the first file. This...

PT-2026-85525

The LearnDash LMS plugin for WordPress is vulnerable to Unrestricted File Type Upload in versions up to and including 5.1.5. This is due to insufficient input validation in the 'learndash fileupload process' function, which iterates through an entire array and validates only the first file. This...

CVE-2026-76174

Ocsreports for OCS Inventory NG has an unrestricted file upload vulnerability in the CSV file upload functionality of the admin_info endpoint . The application validates files solely by the client-provided name, without inspecting content or restricting permitted file types. An administrator user...

CVE-2026-76174

Unrestricted file upload vulnerability in the CSV file upload functionality of the Ocsreports admininfo endpoint. The application validates files solely based on the name provided by the client, without properly checking their content or securely restricting the permitted file types. This allows ...