Lucene search
+L

3421 matches found

Kitploit
Kitploit
added 2026/09/09 1:37 a.m.6 views

CVE-2025-32206

CVE-2025-32206 - WordPress Processing Projects "Unrestricted Upload of File with Dangerous Type vulnerability in LABCAT Processing Projects allows attackers to upload a web shell to a web server. This can lead to full compromise." 🧑‍💻 Exploit Description This Python exploit script targets WordPress...

9.1CVSS8.1AI score0.00599EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/09 12:55 a.m.8 views

2023-2245

A vulnerability was found in hansunCMS 1.4.3. It has been declared as critical. This vulnerability affects unknown code of the file /ueditor/net/controller.ashx?action=catchimage. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed t...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 11:14 p.m.7 views

TFTPlunder

TFTPlunder: an exploit for CVE-2023-29930 This is an exploit script for a blind file read / write vulnerability in the Genesys formerly InIn TFTP provisioning server. Vulnerability info This vulnerability is due to unrestricted configuration options for the TFTP root path and file extensions. In...

8.8CVSS7.8AI score0.02014EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/09/08 10:44 p.m.8 views

CVE-2021-21972

CVE-2021-21972 checker VMware vCenter Server CVE-2021-21972 Remote Code Execution Vulnerability This script looks the existence of CVE-2021-21972 based on the following PATH "/ui/vropspluginui/rest/services/uploadova" trough a POST request and looking in response body 500 the words...

10CVSS8.5AI score0.99865EPSS
SaveExploits48
Kitploit
Kitploit
added 2026/09/08 10:37 p.m.6 views

CVE-2025-4389

CVE-2025-4389 Exploit Details Published : May 16, 2025 Updated : May 17, 2025 Severity : Critical CVSS Score: 9.8 CWE : CWE-434: CWE-434 Unrestricted Upload of File with Dangerous Type Affected Versions : All versions from n/a through 2.6.8.1 Researcher :...

9.8CVSS8.2AI score0.01006EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/08 9:38 p.m.7 views

Better-CVE-2022-29464

Better CVE-2022-29464 Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with a Content-Disposition directory traversal sequence to reach a directory under the web root, such as a...

10CVSS8.6AI score0.99999EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/09/08 9:19 p.m.5 views

CVE-2017-16524

CVE-2017-16524 Descubierto por Omar Mezrag - 0xFFFFFF Producto afectado Grabadores de red Samsung - Web Viewer 1.0.0.193 en Samsung SRN-1670D Proveedor del producto Hanwha / Samsung Security - https://www.hanwhasecurity.com/ Tipo de vulnerabilidad Vulnerabilidad de carga de archivos sin...

8.8CVSS8AI score0.30296EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/08 8:24 p.m.6 views

CVE-2023-3722

CVE-2023-3722 Python POC for CVE-2023-3722 Avaya Aura Device Services Unrestricted File Upload RCE. This script will use a PUT request to upload a php file with an eight-digit randomly generated filename. Then it will make a GET request to retrieve this file and parse the output to get the comman...

9.8CVSS8.2AI score0.0386EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/08 7:34 p.m.4 views

CVE-2023-4220-HTB-PermX

Chamilo-LMS-CVE-2023-4220-Exploit Description This exploit demonstrates an Unrestricted file upload vulnerability in Chamilo-LMS. The vulnerability affects the big file upload functionality located at: root@kitploit: /main/inc/lib/javascript/bigupload/inc/bigUpload.php Affected Versions : Chamilo...

8.1CVSS7.2AI score0.76084EPSS
SaveExploits26
Kitploit
Kitploit
added 2026/09/08 4:16 p.m.5 views

CVE-2024-10410

Source code Online Hotel Reservation System in PHP/MySQLi with Source Code | SourceCodester Description A high risk vulnerability was found in Online Hotel Reservation System, affecting the upload function of /marimar/admin/modroom/controller.php file. The bypass detection operation of image...

7.2CVSS6.6AI score0.01151EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/08 3:08 p.m.5 views

CVE-2021-40870

CVE-2021-40870 Unrestricted upload of file with dangerous type in Aviatrix allows an authenticated user to execute arbitrary code https://attackerkb.com/assessments/970a9fa9-223d-4d07-bafa-a338147934f3...

9.8CVSS8.1AI score0.93019EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/08 2:13 p.m.4 views

CVE-2019-10869

CVE-2019-10869 Wordpress Ninja Forms File Uploads Extension -----------------------------16345274557837--...

8.1CVSS7.7AI score0.07994EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/08 1:22 p.m.4 views

CVE-2024-50623

POC - CVE-2024-50623- Cleo Unrestricted file upload and download Overview CVE-2024-50623 is a critical vulnerability identified in Cleo's file transfer software products—Cleo Harmony, Cleo VLTrader, and Cleo LexiCom—versions prior to 5.8.0.21. This flaw allows for unrestricted file uploads and...

9.8CVSS8.4AI score0.98607EPSS
SaveExploits6References1
Kitploit
Kitploit
added 2026/09/08 12:55 p.m.5 views

CVE-2023-4220-RCE

CVE-2023-4220-RCE Summary Starlabs advisory Affected product: Chamilo , -p --port REMOTE PORT -c --comand Flags for reverse shell -lh/--localhost: Attacker IP -lp/--localtcat listener port...

8.1CVSS7.2AI score0.76084EPSS
SaveExploits26
Nuclei
Nuclei
added 2026/09/08 9:47 a.m.36 views

WP Mobile Detector <= 3.5 - Unrestricted File Upload

WP Mobile Detector plugin for WordPress = 3.5 contains an unrestricted file upload vulnerability caused by missing file type validation in resize.php, letting unauthenticated attackers upload arbitrary files, potentially leading to remote code execution. id: CVE-2016-15043 info: name: WP Mobile...

9.8CVSS6.1AI score0.07761EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/09/08 9:11 a.m.47 views

Zimbra Collaboration - Unrestricted File Upload

An issue was discovered in Zimbra Collaboration ZCS 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole extraction to /opt/zimbra/jetty/webapps/zimbra/public that can lead to incorrect access to any other user accounts. Zimbra recommends pax over cpio. Also,...

9.8CVSS8.3AI score0.95478EPSS
SaveExploits7References2
Nuclei
Nuclei
added 2026/09/08 9:11 a.m.39 views

MikoPBX - Unrestricted File Upload

MikoPBX through 2024.1.114 contains an authenticated unrestricted file upload vulnerability caused by allowing PHP script uploads in PBXCoreREST/Controllers/Files/PostController.php. id: CVE-2025-52207 info: name: MikoPBX - Unrestricted File Upload author: darses severity: critical description: |...

9.9CVSS5.8AI score0.01499EPSS
SaveExploits0References1
Nuclei
Nuclei
added 2026/09/08 9:11 a.m.59 views

Melis Technology Melis Platform - Unrestricted File Upload & Remote Code Execution

Melis Technology Melis Platform contains an unrestricted file upload caused by insufficient validation of 'mcsdetailimg' parameter in /melis/MelisCmsSlider/MelisCmsSliderDetails/saveDetailsForm, letting attackers upload malicious files and achieve remote code execution, exploit requires crafted...

9.3CVSS5.9AI score0.0266EPSS
SaveExploits3References3
Kitploit
Kitploit
added 2026/09/08 9:06 a.m.5 views

CVE-2022-40471

CVE-2022-40471 Ejecución remota de código mediante una vulnerabilidad de carga de archivos sin restricciones en el Sistema de Gestión de Pacientes de la Clínica v 1.0 Descripción técnica: La ejecución remota de código en el Sistema de Gestión de Pacientes de la Clínica v 1.0 permite al atacante...

9.8CVSS8.2AI score0.21769EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/08 8:46 a.m.10 views

Check-WP-CVE-2020-35489

Check-WP-CVE-2020-35489 CVE-2020-35489 The CVE-2020-35489 is discovered in the WordPress plugin Contact Form 7 5.3.1 and older versions. By exploiting this vulnerability, attackers could simply upload files of any type, bypassing all restrictions placed regarding the allowed upload-able file type...

10CVSS8.2AI score0.8928EPSS
SaveExploits4
Rows per page
Query Builder