Lucene search
+L

3438 matches found

Kitploit
Kitploit
added 2026/09/15 8:32 a.m.8 views

CVE-2021-40870

CVE-2021-40870 Unrestricted upload of file with dangerous type in Aviatrix allows an authenticated user to execute arbitrary code...

9.8CVSS8.1AI score0.93019EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/15 4:09 a.m.7 views

CVE-2022-42092

CVE-2022-42092 Python Exploit 🔥 Description This Python exploit script targets an unrestricted file upload in Backdrop CMS to achieve a Remote Code Execution RCE. ⚠️ Affected Versions Version 1.22.0 and prior version Note: Backdrop CMS disputes this and argues that advanced permissions are...

8.8CVSS7.3AI score0.01654EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/15 3:41 a.m.3 views

Chamilo-CVE-2023-4220-Exploit

Chamilo-LMS-CVE-2023-4220-Exploit This is an Exploit for Unrestricted file upload in big file upload functionality in Chamilo-LMS for this location /main/inc/lib/javascript/bigupload/inc/bigUpload.php in Chamilo LMS = v1.11.24, and Attackers can obtain remote code execution via uploading of web...

8.1CVSS7.2AI score0.76084EPSS
SaveExploits27
EUVD
EUVD
added 2026/09/15 3:15 a.m.3 views

EUVD-2026-78260

A vulnerability was detected in SourceCodester College Notes Gallery Management System 1.0. Affected is an unknown function of the file /dashboard/userprofile.php of the component Profile Upload. Performing a manipulation of the argument image results in unrestricted upload. The attack may be...

6.5CVSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/15 2:44 a.m.5 views

CVE-2026-56290

CVE-2026-56290 - Explotación Masiva de Compagebuilderck ⚠️ Descargo de Responsabilidad Esta herramienta es solo para fines educativos y de pruebas de seguridad autorizadas. El acceso no autorizado a sistemas informáticos es ilegal Use esta herramienta solo en sistemas que posea o tenga permiso...

10CVSS8.4AI score0.30375EPSS
SaveExploits7References1
Kitploit
Kitploit
added 2026/09/15 1:24 a.m.8 views

Hack-The-Box-Nexus-Findings-Report

🛡️ Hack The Box - Informe de Hallazgos de Nexus 📋 Resumen Este repositorio contiene un informe completo de pruebas de penetración para la máquina Nexus de Hack The Box. 🔍 Hallazgos Clave Credenciales Expuestas en el Historial de Commits de Gitea - Severidad Media Carga de Archivos Sin...

9.9CVSS5.9AI score0.03824EPSS
SaveExploits13References2
Kitploit
Kitploit
added 2026/09/14 10:39 p.m.9 views

CVE-2021-21972

CVE-2021-21972 comprobador Vulnerabilidad de ejecución remota de código CVE-2021-21972 en VMware vCenter Server Este script comprueba la existencia de la CVE-2021-21972 basándose en la siguiente RUTA "/ui/vropspluginui/rest/services/uploadova" mediante una petición POST y buscando en el cuerpo de...

10CVSS8.5AI score0.99865EPSS
SaveExploits48
Kitploit
Kitploit
added 2026/09/14 10:37 p.m.7 views

TFTPlunder

TFTPlunder: an exploit for CVE-2023-29930 This is an exploit script for a blind file read / write vulnerability in the Genesys formerly InIn TFTP provisioning server. Vulnerability info This vulnerability is due to unrestricted configuration options for the TFTP root path and file extensions. In...

8.8CVSS7.8AI score0.02014EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/14 8:38 p.m.7 views

CVE-2026-22241

CVE-2026-22241 Entorno de laboratorio para CVE-2026-22241 Descripción de la vulnerabilidad: Vulnerabilidad: Carga sin restricciones de archivos con tipo peligroso. Impacto: Ejecución remota de código RCE. Descripción: Esta falla permite a un atacante con privilegios administrativos cargar un...

8.6CVSS5.8AI score0.03311EPSS
SaveExploits3References1
Kitploit
Kitploit
added 2026/09/14 8:21 p.m.6 views

CVE-2025-32206

CVE-2025-32206 - WordPress Processing Projects "Unrestricted Upload of File with Dangerous Type vulnerability in LABCAT Processing Projects allows attackers to upload a web shell to a web server. This can lead to full compromise." 🧑‍💻 Exploit Description This Python exploit script targets WordPress...

9.1CVSS8.1AI score0.00599EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/14 6:22 p.m.7 views

CVE-2021-40870

CVE-2021-40870 Carga sin restricciones de archivos con tipo peligroso en Aviatrix permite a un usuario autenticado ejecutar código arbitrario https://attackerkb.com/assessments/970a9fa9-223d-4d07-bafa-a338147934f3...

9.8CVSS8.1AI score0.93019EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/14 6:07 p.m.7 views

CVE-2025-4389

CVE-2025-4389 Exploit Details Published : May 16, 2025 Updated : May 17, 2025 Severity : Critical CVSS Score: 9.8 CWE : CWE-434: CWE-434 Unrestricted Upload of File with Dangerous Type Affected Versions : All versions from n/a through 2.6.8.1 Researcher :...

9.8CVSS8.2AI score0.01006EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/14 5:36 p.m.7 views

CVE-2025-23942-poc

Exploit de WP Load Gallery CVE-2025-23942 📌 Descripción La vulnerabilidad de carga sin restricciones de archivos de tipo peligroso en NgocCode WP Load Gallery permite cargar un Web Shell a un servidor web. Este problema afecta a WP Load Gallery: desde n/a hasta 2.1.6. ⚠️ Detalles de la...

9.1CVSS8.2AI score0.0272EPSS
SaveExploits1
CVE
CVE
added 2026/09/14 5:35 p.m.6 views

CVE-2026-57581

DotVVM , an open-source MVVM framework for web applications, is affected by an unrestricted file upload vulnerability in DotvvmFileUploadMiddleware . Prior to versions 4.2.11 , 4.3.15 , and 5.0.0-preview09-final , applications with configured file upload storage do not validate the X-DotVVM-Uploa...

5.3CVSS
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/14 5:20 p.m.7 views

CVE-2024-50623

POC - CVE-2024-50623- Carga y descarga de archivos sin restricciones en Cleo Resumen CVE-2024-50623 es una vulnerabilidad crítica identificada en los productos de software de transferencia de archivos de Cleo —Cleo Harmony, Cleo VLTrader y Cleo LexiCom— en versiones anteriores a la 5.8.0.21. Esta...

9.8CVSS8.4AI score0.98607EPSS
SaveExploits6References1
Kitploit
Kitploit
added 2026/09/14 4:20 p.m.7 views

CVE-2021-40870

CVE-2021-40870 Exploitation An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous type is possible, which allows an unauthenticated user to execute arbitrary code via directory traversal. Modules need to Install...

9.8CVSS8.6AI score0.93019EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/14 2:55 p.m.8 views

Better-CVE-2022-29464

Mejor CVE-2022-29464 Ciertos productos WSO2 permiten la subida de archivos sin restricciones, lo que resulta en la ejecución remota de código. El atacante debe usar un endpoint /fileupload con una secuencia de directory traversal en Content-Disposition para alcanzar un directorio bajo la raíz web...

10CVSS8.6AI score0.99999EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/09/14 1:22 p.m.5 views

CVE-2023-4220-RCE

CVE-2023-4220-RCE Summary Starlabs advisory Affected product: Chamilo , -p --port REMOTE PORT -c --comand Flags for reverse shell -lh/--localhost: Attacker IP -lp/--localtcat listener port...

8.1CVSS7.2AI score0.76084EPSS
SaveExploits27
Kitploit
Kitploit
added 2026/09/14 1:12 p.m.8 views

CVE-2018-15961

CVE-2018-15961 Carga de archivos sin restricción en Adobe ColdFusion root@kitploit: POST /cfscripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm HTTP/1.1 Host: coldfusion:port User-Agent: Mozilla/5.0 Windows NT 10.0; WOW64 AppleWebKit/537.36 KHTML, like Gecko Chrome/62.0.3202.9...

10CVSS8.5AI score0.9995EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/14 12:18 p.m.6 views

CVE-2019-10869

CVE-2019-10869 Wordpress Ninja Forms File Uploads Extension -----------------------------16345274557837--...

8.1CVSS7.7AI score0.07994EPSS
SaveExploits1
Rows per page
Query Builder