50 matches found
CVE-2024-46377
CVE-2024-46377 PoC for Arbitrary File Upload Vulnerability in Best House Rental Management System 1.0 Overview This Python script demonstrates how to exploit the arbitrary file upload vulnerability in Best House Rental Management System 1.0. The vulnerability allows an attacker to upload a...
casper-shell
🦇 Casper@shell: - Advanced PHP Web Shell Casper@shell: is an enhanced, more user-friendly version of p0wny shell with many new features. This version aims to be more helpful for quickly performing reconnaissance, exfiltration, or deploying persistence mechanisms. ✨ Features 🖥️ Advanced Terminal...
p0wny-shell
p0wny@shell: -- Shell PHP de un solo archivo p0wny@shell: es un shell PHP muy básico de un solo archivo. Puede usarse para ejecutar rápidamente comandos en un servidor al hacer pentesting a una aplicación PHP. Úsalo con precaución: este script representa un riesgo de seguridad para el servidor...
Jatayu
JATAYU Stealthy Stand Alone PHP Web Shell FEATURES Http Header Based Authentication. 100% Undetectable. Exec Function Changer. Nothing Fancy USAGE...
Shelly
Shelly | Simple Backdoor Manager with Python based on weevely Shelly is a simple tool that is written using Python, which functions to remote a website Instalation : $ git clone https://github.com/tegal1337/Shelly $ cd Shelly $ python3 shell.py Requirements : root@kitploit: sudo pip install -r...
b374k
b374k shell 3.2 Este PHP Shell es una herramienta útil para administradores de sistemas o web para realizar gestión remota sin usar cpanel, conectarse mediante ssh, ftp, etc. Todas las acciones se realizan dentro de un navegador web. Características: Gestor de archivos ver, editar, renombrar,...
CVE-2024-56264
CVE-2024-56264 WordPress ACF City Selector - Arbitrary File Upload Exploit CVE-2024-56264 Overview This repository contains an exploit for CVE-2024-56264 , which is an Arbitrary File Upload vulnerability found in the WordPress ACF City Selector plugin versions = 1.14.0. This vulnerability allows ...
wwwolf-php-webshell
wwwolf's PHP web shell Enfrentei frequentemente problemas ao usar outras web shells: Elas usam recursos novos de sintaxe do PHP incompatíveis com a versão antiga do PHP em execução em alguns alvos. Elas fazem suposições erradas sobre o URL remoto, quebrando a injeção de código PHP ou os parâmetro...
CVE-2026-25099
CVE-2026-25099 - Bludit CMS API Unbeschränkter Datei-Upload zu RCE Beschreibung Bludit CMS-Versionen vor 3.18.4 erlauben einem authentifizierten Angreifer mit einem gültigen API-Token, Dateien beliebigen Typs und beliebiger Erweiterung über den Endpunkt POST /api/files/ hochzuladen. Die Funktion...
CVE-2026-23698 Vtiger CRM 8.4.0 Authenticated RCE via Module Import File Upload
Vtiger CRM through 8.4.0 contains an authenticated remote code execution vulnerability in the admin module import feature that allows administrator-level attackers to upload arbitrary PHP files by submitting a crafted zip archive through the ModuleManager import function, which extracts contents...
cPanel CVE-2026-41940 Under Active Exploitation to Deploy Filemanager Backdoor
A threat actor named MrRot13 has been attributed to the exploitation of a recently disclosed critical cPanel flaw to deploy a backdoor codenamed Filemanager on compromised environments. The attack exploits CVE-2026-41940, a vulnerability impacting cPanel and WebHost Manager WHM that could result ...
odfs_rce_poc
Online Discussion Forum Site 1.0 - Remote Code Execution PoC...
PT-2025-52212
Name of the Vulnerable Software and Affected Versions Bitrix24 versions prior to 25.100.301 Description Remote Code Execution is possible because an actor with SOURCE/WRITE permissions for the Translate Module can upload and execute code by sending a PHP file and a .htaccess file. The supplier...
EUVD-2020-16566
Malware in sbrugna...
EUVD-2025-23552
Malicious code in bioql PyPI...
EUVD-2023-29716
Malicious code in bioql PyPI...
CVE-2025-50754
Unisite CMS version 5.0 contains a stored Cross-Site Scripting XSS vulnerability in the "Report" functionality. A malicious script submitted by an attacker is rendered in the admin panel when viewed by an administrator. This allows attackers to hijack the admin session and, by leveraging the...
PT-2025-31863 · Unknown · Unisite Cms
Name of the Vulnerable Software and Affected Versions: Unisite CMS version 5.0 Description: Unisite CMS version 5.0 contains a stored Cross-Site Scripting XSS vulnerability in the "Report" functionality. A malicious script submitted by an attacker is rendered in the admin panel when viewed by an...
CVE-2023-38874
A remote code execution RCE vulnerability via an insecure file upload exists in gugoan's Economizzer v.0.9-beta1 and commit 3730880 April 2023. A malicious attacker can upload a PHP web shell as an attachment when adding a new cash book entry. Afterwards, the attacker may visit the web shell and...