Lucene search
+L

1902 matches found

Kitploit
Kitploit
added 2026/09/17 1:22 a.m.10 views

CVE-2025-34085-Multi-target

CVE-2025-34085 Escáner RCE Multiobjetivo Escáner de explotación masiva para CVE-2025-34085 — una vulnerabilidad de ejecución remota de código no autenticada en el plugin Simple File List de WordPress. Esta herramienta sube un payload PHP disfrazado como imagen, lo renombra mediante un motor de...

6.4AI score
SaveExploits9
Kitploit
Kitploit
added 2026/09/16 9:39 p.m.11 views

CVE-2026-58048-PoC-Exploit

💥 CVE‑2026‑58048 – Kit de ejecución SQL como root en cPanel ⚠️ SOLO USO ÉTICO – PRUEBAS DE SEGURIDAD AUTORIZADAS Este repositorio proporciona herramientas únicamente para profesionales de seguridad autorizados, equipos azules y testers de penetración. El acceso no autorizado a sistemas informático...

9.4CVSS6.7AI score0.00967EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/16 8:07 p.m.9 views

delete-self-poc

🗑️ delete-self-poc El delete-self-poc es una demostración de un método para eliminar un ejecutable bloqueado o un archivo actualmente en ejecución del disco. Este concepto fue descubierto inicialmente por Jonas Lykkegaard, y yo he creado la prueba de concepto POC para el mismo. Además, puede...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 7:07 p.m.132 views

auto_re

AutoRE Features 1. Auto-renaming dummy-named functions, which have one API call or jump to the imported API Before After 2. Assigning TAGS to functions accordingly to called API-indicators inside Sets tags as repeatable function comments and displays TAG tree in the separate view Some screenshots...

5.9AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 7:07 p.m.13 views

auto_re

AutoRE 特性 1. 自动重命名只有一个API调用或跳转到导入的API的虚拟函数 之前 之后 2. 根据内部调用的API指示符为函数分配TAGS 将标签设置为可重复的函数注释,并在单独的视图中显示标签树 TAGS视图的一些截图: TAG在未探索代码中的显示: 您可以使用右键菜单或按 n 快捷键轻松重命名函数: 安装 只需将 autore.py 复制到 IDA\plugins 目录,然后通过 Edit - Plugins - Auto RE 菜单即可使用。...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 6:18 p.m.8 views

CVE-2023-38571-a-macOS-TCC-bypass-in-Music-and-TV

Executive summary macOS Music and TV do an insecure rename resulting in FDA by gaining full control over the user's TCC.db I reported this bug in separate tickets for each app, feel free to merge if applicable. The underlying problem is that these apps have FDA but fail to sanitize their file...

7.5CVSS7.1AI score0.01567EPSS
SaveExploits0
Nuclei
Nuclei
added 2026/09/16 2:04 p.m.26 views

Frontend File Manager < 21.3 - Unauthenticated File Renaming

The Frontend File Manager Plugin WordPress plugin before 21.3 allows any unauthenticated user to rename uploaded files from users. Furthermore, due to the lack of validation in the destination filename, this could allow allow them to change the content of arbitrary files on the web server id:...

5.3CVSS6.1AI score0.0687EPSS
SaveExploits2References2
Kitploit
Kitploit
added 2026/09/16 12:35 p.m.4 views

CVE-2026-92247

SynaptikCMS File Manager — RCE Autenticado Vulnerabilidad Ejecución Remota de Código Autenticada en el Gestor de Archivos de SynaptikCMS El gestor de archivos de SynaptikCMS permite a un atacante autenticado subir un archivo y posteriormente renombrarlo a un archivo PHP. Este comportamiento de...

5.8CVSS0.00294EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/16 11:35 a.m.10 views

CVE-2025-34085

📂 Simple File List – Exploit RCE no autenticado CVE-2025-34085 ⚠️ Código de exploit por: Mrj Haxcore Un exploit Python completamente funcional para el plugin Simple File List de WordPress = 4.2.3, el cual es vulnerable a ejecución remota de código no autenticada RCE debido a una lógica insegura de...

6.7AI score
SaveExploits9
Kitploit
Kitploit
added 2026/09/16 4:22 a.m.8 views

CVE-2025-34085

Cyberlone Indonesia 🛠️ Escáner de RCE de WordPress Simple File List + Limpieza Automática Herramienta automática para detectar y explotar Remote Code Execution RCE no autenticado en el plugin WordPress Simple File List , especialmente vulnerable a CVE-2025-34085. Equipado con un sistema de limpiez...

5.9AI score
SaveExploits9
NVD
NVD
added 2026/09/16 3:17 a.m.8 views

CVE-2026-92247

A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This affects the function rename of the file admin/file-manager.php of the component Admin File Manager. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...

5.8CVSS0.00294EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/09/16 2:45 a.m.19 views

CVE-2026-92247 synaptikcms synaptik-cms Admin File Manager file-manager.php rename unrestricted upload

A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This affects the function rename of the file admin/file-manager.php of the component Admin File Manager. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...

5.8CVSS0.00294EPSS
SaveExploits0References6
CVE
CVE
added 2026/09/16 2:45 a.m.9 views

CVE-2026-92247

CVE-2026-92247 affects synaptik-cms up to version 1.3.4.4 . The vulnerability resides in the rename function of admin/file-manager.php within the Admin File Manager component, where manipulation of this function leads to unrestricted upload of files. The attack can be initiated remotely but requi...

5.8CVSS4.9AI score0.00294EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/16 2:45 a.m.8 views

EUVD-2026-80091

A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This affects the function rename of the file admin/file-manager.php of the component Admin File Manager. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...

5.8CVSS4.8AI score0.00294EPSS
SaveExploits0References6
OSV
OSV
added 2026/09/16 2:45 a.m.3 views

CVE-2026-92247 synaptikcms synaptik-cms Admin File Manager file-manager.php rename unrestricted upload

A security vulnerability has been detected in synaptikcms synaptik-cms up to 1.3.4.4. This affects the function rename of the file admin/file-manager.php of the component Admin File Manager. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been...

5.1CVSS5.1AI score
SaveExploits0References8
CVE
CVE
added 2026/09/15 7:30 p.m.10 views

CVE-2026-18423

Concrete CMS versions 9.0.0 through 9.5.2 contain an Insecure Direct Object Reference (IDOR) flaw in the Express saved search preset delete and edit dialogs. An authenticated user holding only view permission on a single Express entity could permanently delete (no undo) or rename saved search pre...

2.1CVSS5.8AI score0.00282EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/09/14 7:43 p.m.9 views

rsync: rsync: Arbitrary file write via --temp-dir or --link-dest options

A flaw was found in rsync. A remote attacker can exploit this vulnerability by specifying an absolute path using the --temp-dir or --link-dest options. This bypasses the rename-confinement logic, allowing the attacker to write files to arbitrary locations outside the intended destination tree,...

8.1CVSS6.7AI score0.00396EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/09/14 7:33 p.m.7 views

rsync: rsync: Arbitrary file write via --temp-dir or --link-dest options

A flaw was found in rsync. A remote attacker can exploit this vulnerability by specifying an absolute path using the --temp-dir or --link-dest options. This bypasses the rename-confinement logic, allowing the attacker to write files to arbitrary locations outside the intended destination tree,...

8.1CVSS6.7AI score0.00396EPSS
SaveExploits0References7
NVD
NVD
added 2026/09/14 7:17 p.m.7 views

CVE-2026-59178

ESPHome Device Builder Dashboard is a dashboard for the ESPHome home management software. Prior to version 1.0.12, the dashboard reads its authentication credentials from $ESPHOMEUSERNAME and $ESPHOMEPASSWORD. Earlier versions, and the legacy esphome dashboard, read the bare $USERNAME and $PASSWO...

9.8CVSS0.00417EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/14 6:11 p.m.30 views

CVE-2026-59178 ESPHome Device Builder: Renamed auth env vars silently disable dashboard authentication on upgrade

ESPHome Device Builder Dashboard is a dashboard for the ESPHome home management software. Prior to version 1.0.12, the dashboard reads its authentication credentials from $ESPHOMEUSERNAME and $ESPHOMEPASSWORD. Earlier versions, and the legacy esphome dashboard, read the bare $USERNAME and $PASSWO...

9.8CVSS0.00417EPSS
SaveExploits0References4
Rows per page
Query Builder