Lucene search
+L

3402 matches found

Kitploit
Kitploit
added 2026/09/02 5:21 p.m.5 views

Better-CVE-2022-29464

Better CVE-2022-29464 Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /fileupload endpoint with a Content-Disposition directory traversal sequence to reach a directory under the web root, such as a...

10CVSS7.3AI score0.99999EPSS
SaveExploits22
Kitploit
Kitploit
added 2026/09/02 4:47 p.m.7 views

CVE-2021-21972

CVE-2021-21972 checker VMware vCenter Server CVE-2021-21972 Remote Code Execution Vulnerability This script looks the existence of CVE-2021-21972 based on the following PATH "/ui/vropspluginui/rest/services/uploadova" trough a POST request and looking in response body 500 the words...

10CVSS7.4AI score0.99865EPSS
SaveExploits48
Kitploit
Kitploit
added 2026/09/02 3:44 p.m.4 views

CVE-2024-10410

Source code Online Hotel Reservation System in PHP/MySQLi with Source Code | SourceCodester Description A high risk vulnerability was found in Online Hotel Reservation System, affecting the upload function of /marimar/admin/modroom/controller.php file. The bypass detection operation of image...

7.2CVSS6.7AI score0.01151EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 3:31 p.m.2 views

Chamilo-CVE-2023-4220-Exploit

Chamilo-LMS-CVE-2023-4220-Exploit This is an Exploit for Unrestricted file upload in big file upload functionality in Chamilo-LMS for this location /main/inc/lib/javascript/bigupload/inc/bigUpload.php in Chamilo LMS = v1.11.24, and Attackers can obtain remote code execution via uploading of web...

8.1CVSS6.8AI score0.76084EPSS
SaveExploits26
Kitploit
Kitploit
added 2026/09/02 2:56 p.m.3 views

CVE-2019-10869

CVE-2019-10869 Wordpress Ninja Forms File Uploads Extension -----------------------------16345274557837-- Response: root@kitploit: HTTP/1.1 200 OK Server: nginx/1.14.0 "data": "files": "name":"test.png.doc", "type":"application/msword", "tmpname":"nftmp-14FpD-...

8.1CVSS7.2AI score0.07994EPSS
SaveExploits1
EUVD
EUVD
added 2026/09/02 2:16 p.m.3 views

EUVD-2026-70038

The Embed HTML5 Game WordPress plugin through 1.3 does not properly restrict who can upload files via the plugin, as well as what can be uploaded, making it possible for unauthenticated attackers to upload PHP backdoors on affected sites...

10CVSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/02 11:59 a.m.3 views

CVE-2022-40471

CVE-2022-40471 Remote code execution via unrestricted file upload vulnerability in the Clinic's Patient Management System v 1.0 Technical description: Remote Code Execution in Clinic's Patient Management System v 1.0 allows Attacker to Upload arbitrary php webshell via profile picture upload...

9.8CVSS7.2AI score0.21769EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/02 11:42 a.m.4 views

CVE-2025-32118

🚀 CVE-2025-32118 - WordPress CMP Plugin RCE Exploit 🔍 Title: WordPress CMP – Coming Soon & Maintenance plugin = 4.1.13 - Remote Code Execution RCE 🗓️ Published: 2025-04-04 🔐 CWE: CWE-434 - Unrestricted Upload of File with Dangerous Type 📊 CVSS: 9.1 CRITICAL —...

9.1CVSS7.3AI score0.00658EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 11:42 a.m.6 views

CVE-2025-39436

🚨 WordPress Plugin Exploit: CVE-2025-39436 📝 Description An Unrestricted Upload of File with Dangerous Type vulnerability exists in the "I Draw" WordPress plugin. This exploit allows attackers to upload malicious files without restriction. The issue impacts I Draw versions up to 1.0. 🛠️ Exploit...

9.1CVSS7.2AI score0.00689EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 11:42 a.m.7 views

CVE-2025-28915

CVE-2025-28915 - WordPress ThemeEgg ToolKit Arbitrary File Upload Exploit 📌 Description An Unrestricted File Upload vulnerability in the ThemeEgg ToolKit plugin for WordPress versions ≤ 1.2.9 allows authenticated attackers to upload web shells to the server. This can lead to remote code execution...

9.1CVSS7.3AI score0.0125EPSS
SaveExploits3
Kitploit
Kitploit
added 2026/09/02 10:34 a.m.3 views

CVE-2021-40870

CVE-2021-40870 Unrestricted upload of file with dangerous type in Aviatrix allows an authenticated user to execute arbitrary code https://attackerkb.com/assessments/970a9fa9-223d-4d07-bafa-a338147934f3...

9.8CVSS7.5AI score0.93019EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/02 10:30 a.m.4 views

CVE-2022-32119

CVE-2022-32119 - Arox-Unrestricted-File-Upload There are multiple unrestricted file uploads that result in the arbitrary execution of PHP code. Authenticated Vulnerable Pages: localhost/officeadmin/?pid=54&action=add root@kitploit: -----------------------------181967832439954202373233921976...

8.8CVSS7.3AI score0.01953EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 9:53 a.m.5 views

CVE-2023-4220_Chamilo_RCE

CVE-2023-4220 Python exploit for Chamilo Unrestricted File Upload Vuln - CVE-2023-4220 The code contained within the repository is meant for educational purposes only. Description: Unrestricted file upload in big file upload functionality in /main/inc/lib/javascript/bigupload/inc/bigUpload.php in...

8.1CVSS6.7AI score0.76084EPSS
SaveExploits26
Kitploit
Kitploit
added 2026/09/02 9:05 a.m.7 views

Check-WP-CVE-2020-35489

Check-WP-CVE-2020-35489 CVE-2020-35489 The CVE-2020-35489 is discovered in the WordPress plugin Contact Form 7 5.3.1 and older versions. By exploiting this vulnerability, attackers could simply upload files of any type, bypassing all restrictions placed regarding the allowed upload-able file type...

10CVSS7.2AI score0.8928EPSS
SaveExploits4
Nuclei
Nuclei
added 2026/09/02 7:49 a.m.36 views

WP Mobile Detector <= 3.5 - Unrestricted File Upload

WP Mobile Detector plugin for WordPress = 3.5 contains an unrestricted file upload vulnerability caused by missing file type validation in resize.php, letting unauthenticated attackers upload arbitrary files, potentially leading to remote code execution. id: CVE-2016-15043 info: name: WP Mobile...

9.8CVSS6.2AI score0.10032EPSS
SaveExploits2References3
Nuclei
Nuclei
added 2026/09/02 7:49 a.m.56 views

Melis Technology Melis Platform - Unrestricted File Upload & Remote Code Execution

Melis Technology Melis Platform contains an unrestricted file upload caused by insufficient validation of 'mcsdetailimg' parameter in /melis/MelisCmsSlider/MelisCmsSliderDetails/saveDetailsForm, letting attackers upload malicious files and achieve remote code execution, exploit requires crafted...

9.3CVSS6.1AI score0.02482EPSS
SaveExploits3References3
Nuclei
Nuclei
added 2026/09/02 7:49 a.m.35 views

MikoPBX - Unrestricted File Upload

MikoPBX through 2024.1.114 contains an authenticated unrestricted file upload vulnerability caused by allowing PHP script uploads in PBXCoreREST/Controllers/Files/PostController.php. id: CVE-2025-52207 info: name: MikoPBX - Unrestricted File Upload author: darses severity: critical description: |...

9.9CVSS5.8AI score0.01499EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/02 7:29 a.m.4 views

CVE-2023-4220-RCE

CVE-2023-4220-RCE Summary Starlabs advisory Affected product: Chamilo , -p --port REMOTE PORT -c --comand Flags for reverse shell -lh/--localhost: Attacker IP -lp/--localtcat listener port...

8.1CVSS7.2AI score0.76084EPSS
SaveExploits26
Kitploit
Kitploit
added 2026/09/02 7:26 a.m.3 views

CVE-2022-42092

CVE-2022-42092 Python エクスプロイト 🔥 説明 この Python エクスプロイトスクリプトは、Backdrop CMS における無制限なファイルアップロード脆弱性を狙い、リモートコード実行 RCE を達成します。 ⚠️ 影響を受けるバージョン バージョン 1.22.0 およびそれ以前のバージョン 注: Backdrop CMS はこの脆弱性を否認しており、高度な権限が必要であると主張しています。そのため、1.22.0...

7.2CVSS7.1AI score0.01588EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/02 6:35 a.m.4 views

CVE-2022-32114

Strapi v4.1.12 Vulnerability Explanation: An unrestricted file upload vulnerability in the Add New Assets function of Strapi v4.1.12 allows attackers to execute arbitrary code via a crafted file Attack Vectors: After uploading a file containing malicious content, when the user opens the link to t...

8.8CVSS7.5AI score0.01956EPSS
SaveExploits1References1
Rows per page
Query Builder