Lucene search
+L

3435 matches found

Kitploit
Kitploit
added 2026/09/14 10:23 a.m.6 views

CVE-2024-10410

Source code Online Hotel Reservation System in PHP/MySQLi with Source Code | SourceCodester Description A high risk vulnerability was found in Online Hotel Reservation System, affecting the upload function of /marimar/admin/modroom/controller.php file. The bypass detection operation of image...

7.2CVSS6.6AI score0.01151EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/14 10:19 a.m.8 views

CVE-2021-40870

CVE-2021-40870 Unrestricted upload of file with dangerous type in Aviatrix allows an authenticated user to execute arbitrary code...

9.8CVSS8.1AI score0.93019EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/14 9:48 a.m.10 views

laravel-filemanager-unrestricted-upload

Laravel FileManager Unrestricted File Upload CVE-2025-56399 CWE-434: Unrestricted Upload of File with Dangerous Type CVSS Score: 8.5 High 📋 Description This tool provides a Proof of Concept PoC for CVE-2025-56399 , a critical vulnerability in alexusmai/laravel-file-manager versions ≤ 3.3.1. The...

8.8CVSS5.9AI score0.00556EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/14 9:14 a.m.10 views

Check-WP-CVE-2020-35489

Check-WP-CVE-2020-35489 CVE-2020-35489 The CVE-2020-35489 is discovered in the WordPress plugin Contact Form 7 5.3.1 and older versions. By exploiting this vulnerability, attackers could simply upload files of any type, bypassing all restrictions placed regarding the allowed upload-able file type...

10CVSS8.2AI score0.8928EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/14 9:13 a.m.5 views

CVE-2022-32114

Strapi v4.1.12 Vulnerability Explanation: An unrestricted file upload vulnerability in the Add New Assets function of Strapi v4.1.12 allows attackers to execute arbitrary code via a crafted file Attack Vectors: After uploading a file containing malicious content, when the user opens the link to t...

8.8CVSS7.8AI score0.01999EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/09/14 7:27 a.m.6 views

CVE-2022-40471

CVE-2022-40471 Remote code execution via unrestricted file upload vulnerability in the Clinic's Patient Management System v 1.0 Technical description: Remote Code Execution in Clinic's Patient Management System v 1.0 allows Attacker to Upload arbitrary php webshell via profile picture upload...

9.8CVSS8.2AI score0.21769EPSS
SaveExploits5
NVD
NVD
added 2026/09/14 7:17 a.m.5 views

CVE-2026-82780

Unrestricted upload of file with dangerous type issue exists in CONPROSYS TM Series. If a specially crafted file is uploaded by a remote authenticated attacker, an arbitrary command may be executed on the product...

8.8CVSS0.00337EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/14 6:45 a.m.16 views

CVE-2026-82793

CVE-2026-82793 affects the Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit , an industrial communication device. The root cause is an unrestricted file upload with dangerous type : a remote authenticated attacker can upload a specially crafted file, leading to arbitrary code execu...

8.6CVSS0.00351EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/09/14 6:45 a.m.5 views

EUVD-2026-77249

Unrestricted upload of file with dangerous type issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If a specially crafted file is uploaded by a remote authenticated attacker, arbitrary code may be executed on the product...

8.6CVSS0.00351EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/14 6:45 a.m.10 views

CVE-2026-82793

Unrestricted upload of file with dangerous type issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit. If a specially crafted file is uploaded by a remote authenticated attacker, arbitrary code may be executed on the product...

8.6CVSS0.00351EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/14 6:41 a.m.16 views

CVE-2026-82780

An unrestricted file upload vulnerability (dangerous file type) affects the CONPROSYS TM Series by Consec . A remote authenticated attacker can upload a specially crafted file to achieve arbitrary command execution on the product. The flaw is scored CVSS 3.1: 8.8 (HIGH) — network vector, low comp...

8.8CVSS0.00337EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/14 6:30 a.m.3 views

Chamilo-CVE-2023-4220-Exploit

Chamilo-LMS-CVE-2023-4220-Exploit This is an Exploit for Unrestricted file upload in big file upload functionality in Chamilo-LMS for this location /main/inc/lib/javascript/bigupload/inc/bigUpload.php in Chamilo LMS = v1.11.24, and Attackers can obtain remote code execution via uploading of web...

8.1CVSS7.2AI score0.76084EPSS
SaveExploits27
Nuclei
Nuclei
added 2026/09/14 5:13 a.m.40 views

MikoPBX - Unrestricted File Upload

MikoPBX through 2024.1.114 contains an authenticated unrestricted file upload vulnerability caused by allowing PHP script uploads in PBXCoreREST/Controllers/Files/PostController.php. id: CVE-2025-52207 info: name: MikoPBX - Unrestricted File Upload author: darses severity: critical description: |...

9.9CVSS5.8AI score0.01499EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 4:42 a.m.6 views

CVE-2025-66802

CVE-2025-66802 Sourcecodester Covid-19 Contact Tracing System 1.0 – Unrestricted File Upload Leading to Remote Code Execution Description Sourcecodester Covid-19 Contact Tracing System version 1.0 contains a vulnerability classified as Unrestricted Upload of File with Dangerous Type CWE-434. The...

9.8CVSS5.9AI score0.009EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/14 4:21 a.m.12 views

monitorr-exploit-toolkit

Kit de exploits para Monitorr RCE mediante carga de archivos no segura reverse shell PHP, webshell, etc. Creación de cuenta de administrador mediante bypass de autorización Fuga de información técnica : versión de Monitorr, versión de PHP, versión y kernel del sistema, configuración de PHP, etc...

9.8CVSS8.1AI score0.85785EPSS
SaveExploits9References4
Kitploit
Kitploit
added 2026/09/14 2:29 a.m.6 views

CVE-2023-4220-HTB-PermX

Chamilo-LMS-CVE-2023-4220-Exploit Description This exploit demonstrates an Unrestricted file upload vulnerability in Chamilo-LMS. The vulnerability affects the big file upload functionality located at: root@kitploit: /main/inc/lib/javascript/bigupload/inc/bigUpload.php Affected Versions : Chamilo...

8.1CVSS7.2AI score0.76084EPSS
SaveExploits27
Kitploit
Kitploit
added 2026/09/14 12:37 a.m.8 views

CVE-2021-21972

CVE-2021-21972 checker VMware vCenter Server CVE-2021-21972 Remote Code Execution Vulnerability This script looks the existence of CVE-2021-21972 based on the following PATH "/ui/vropspluginui/rest/services/uploadova" trough a POST request and looking in response body 500 the words...

10CVSS8.5AI score0.99865EPSS
SaveExploits48
Kitploit
Kitploit
added 2026/09/13 11:39 p.m.8 views

CVE-2025-39436

🚨 WordPress Plugin Exploit: CVE-2025-39436 📝 Description An Unrestricted Upload of File with Dangerous Type vulnerability exists in the "I Draw" WordPress plugin. This exploit allows attackers to upload malicious files without restriction. The issue impacts I Draw versions up to 1.0. 🛠️ Exploit...

9.1CVSS8.2AI score0.00719EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/13 11:23 p.m.5 views

CVE-2023-4220-Exploit

CVE-2023-4220-Exploit LMS Chamilo 1.11.24 CVE-2023-4220 Exploit Exploit usado para CVE-2023-4220 aprovecha el error de programacion del LMS Chamillo el cual nos permite subir un fichero al servidor sin ningun tipo de restriccion. Este Exploit fue escrito para nuestra maquinita Easy permX de HTB,...

8.1CVSS7.2AI score0.76084EPSS
SaveExploits27
Kitploit
Kitploit
added 2026/09/13 10:46 p.m.6 views

CVE-2025-32206

CVE-2025-32206 - Exploit de Subida Arbitraria de Archivos en WordPress Processing Projects "La vulnerabilidad de subida sin restricciones de archivos con tipo peligroso en LABCAT Processing Projects permite a atacantes subir una web shell a un servidor web. Esto puede llevar a un compromiso total...

9.1CVSS8.1AI score0.00599EPSS
SaveExploits1
Rows per page
Query Builder