Lucene search
+L

3422 matches found

Kitploit
Kitploit
β€’added 2026/09/09 9:25 p.m.β€’6 views

CVE-2025-4389

CVE-2025-4389 Exploit Details Published : May 16, 2025 Updated : May 17, 2025 Severity : Critical CVSS Score: 9.8 CWE : CWE-434: CWE-434 Unrestricted Upload of File with Dangerous Type Affected Versions : All versions from n/a through 2.6.8.1 Researcher :...

9.8CVSS8.2AI score0.01006EPSS
SaveExploits1
Kitploit
Kitploit
β€’added 2026/09/09 8:38 p.m.β€’8 views

CVE-2021-21972

CVE-2021-21972 checker VMware vCenter Server CVE-2021-21972 Remote Code Execution Vulnerability This script looks the existence of CVE-2021-21972 based on the following PATH "/ui/vropspluginui/rest/services/uploadova" trough a POST request and looking in response body 500 the words...

10CVSS8.5AI score0.99865EPSS
SaveExploits48
Kitploit
Kitploit
β€’added 2026/09/09 2:39 p.m.β€’7 views

CVE-2018-9206-jquery-file-upload

CVE-2018-9206 - Blueimp jQuery-File-Upload Lab Vulnerable Docker environment for CVE-2018-9206 - Unrestricted File Upload in Blueimp jQuery-File-Upload ' Execute it curl "http://localhost:8888/jQuery-File-Upload/server/php/files/test.php" Output: CVE-2018-9206-PWNED Or run the PoC script:...

9.8CVSS8.1AI score0.97255EPSS
SaveExploits17
Kitploit
Kitploit
β€’added 2026/09/09 12:38 p.m.β€’5 views

CVE-2023-4220-RCE

CVE-2023-4220-RCE Summary Starlabs advisory Affected product: Chamilo , -p --port REMOTE PORT -c --comand Flags for reverse shell -lh/--localhost: Attacker IP -lp/--localtcat listener port...

8.1CVSS7.2AI score0.76084EPSS
SaveExploits26
Kitploit
Kitploit
β€’added 2026/09/09 11:52 a.m.β€’6 views

CVE-2024-50623

POC - CVE-2024-50623- Cleo Unrestricted file upload and download Overview CVE-2024-50623 is a critical vulnerability identified in Cleo's file transfer software productsβ€”Cleo Harmony, Cleo VLTrader, and Cleo LexiComβ€”versions prior to 5.8.0.21. This flaw allows for unrestricted file uploads and...

9.8CVSS8.4AI score0.98607EPSS
SaveExploits6References1
Kitploit
Kitploit
β€’added 2026/09/09 11:43 a.m.β€’5 views

CVE-2025-32118

πŸš€ CVE-2025-32118 - WordPress CMP Plugin RCE Exploit πŸ” Title: WordPress CMP – Coming Soon & Maintenance plugin = 4.1.13 - Remote Code Execution RCE πŸ—“οΈ Published: 2025-04-04 πŸ” CWE: CWE-434 - Unrestricted Upload of File with Dangerous Type πŸ“Š CVSS: 9.1 CRITICAL β€”...

9.1CVSS8.2AI score0.00658EPSS
SaveExploits1
Kitploit
Kitploit
β€’added 2026/09/09 11:42 a.m.β€’7 views

CVE-2025-28915

CVE-2025-28915 - WordPress ThemeEgg ToolKit Arbitrary File Upload Exploit πŸ“Œ Description An Unrestricted File Upload vulnerability in the ThemeEgg ToolKit plugin for WordPress versions ≀ 1.2.9 allows authenticated attackers to upload web shells to the server. This can lead to remote code execution...

9.1CVSS8.2AI score0.0125EPSS
SaveExploits3
Kitploit
Kitploit
β€’added 2026/09/09 11:42 a.m.β€’7 views

CVE-2025-39436

🚨 WordPress Plugin Exploit: CVE-2025-39436 πŸ“ Description An Unrestricted Upload of File with Dangerous Type vulnerability exists in the "I Draw" WordPress plugin. This exploit allows attackers to upload malicious files without restriction. The issue impacts I Draw versions up to 1.0. πŸ› οΈ Exploit...

9.1CVSS8.2AI score0.00689EPSS
SaveExploits1
Kitploit
Kitploit
β€’added 2026/09/09 11:00 a.m.β€’4 views

CVE-2019-10869

CVE-2019-10869 Wordpress Ninja Forms File Uploads Extension -----------------------------16345274557837-- Response: root@kitploit: HTTP/1.1 200 OK Server: nginx/1.14.0 "data": "files": "name":"test.png.doc", "type":"application/msword", "tmpname":"nftmp-14FpD-...

8.1CVSS7.7AI score0.07994EPSS
SaveExploits1
Kitploit
Kitploit
β€’added 2026/09/09 10:59 a.m.β€’4 views

CVE-2022-42092

CVE-2022-42092 Python Exploit πŸ”₯ Description This Python exploit script targets an unrestricted file upload in Backdrop CMS to achieve a Remote Code Execution RCE. ⚠️ Affected Versions Version 1.22.0 and prior version Note: Backdrop CMS disputes this and argues that advanced permissions are...

8.8CVSS7.3AI score0.01588EPSS
SaveExploits2
Kitploit
Kitploit
β€’added 2026/09/09 10:47 a.m.β€’5 views

CVE-2022-40471

CVE-2022-40471 Remote code execution via unrestricted file upload vulnerability in the Clinic's Patient Management System v 1.0 Technical description: Remote Code Execution in Clinic's Patient Management System v 1.0 allows Attacker to Upload arbitrary php webshell via profile picture upload...

9.8CVSS8.2AI score0.21769EPSS
SaveExploits5
Kitploit
Kitploit
β€’added 2026/09/09 10:30 a.m.β€’6 views

CVE-2022-32119

CVE-2022-32119 - Arox-Unrestricted-File-Upload There are multiple unrestricted file uploads that result in the arbitrary execution of PHP code. Authenticated Vulnerable Pages: localhost/officeadmin/?pid=54&action=add root@kitploit: -----------------------------181967832439954202373233921976...

8.8CVSS7.9AI score0.01996EPSS
SaveExploits1
Kitploit
Kitploit
β€’added 2026/09/09 9:58 a.m.β€’3 views

Chamilo-CVE-2023-4220-Exploit

Chamilo-LMS-CVE-2023-4220-Exploit This is an Exploit for Unrestricted file upload in big file upload functionality in Chamilo-LMS for this location /main/inc/lib/javascript/bigupload/inc/bigUpload.php in Chamilo LMS = v1.11.24, and Attackers can obtain remote code execution via uploading of web...

8.1CVSS7.2AI score0.76084EPSS
SaveExploits26
Kitploit
Kitploit
β€’added 2026/09/09 8:11 a.m.β€’8 views

CVE-2021-40870

CVE-2021-40870 Unrestricted upload of file with dangerous type in Aviatrix allows an authenticated user to execute arbitrary code...

9.8CVSS8.1AI score0.93019EPSS
SaveExploits5
Kitploit
Kitploit
β€’added 2026/09/09 7:40 a.m.β€’10 views

Check-WP-CVE-2020-35489

Check-WP-CVE-2020-35489 CVE-2020-35489 The CVE-2020-35489 is discovered in the WordPress plugin Contact Form 7 5.3.1 and older versions. By exploiting this vulnerability, attackers could simply upload files of any type, bypassing all restrictions placed regarding the allowed upload-able file type...

10CVSS8.2AI score0.8928EPSS
SaveExploits4
Kitploit
Kitploit
β€’added 2026/09/09 7:09 a.m.β€’7 views

CVE-2023-4220_Chamilo_RCE

CVE-2023-4220 Python exploit for Chamilo Unrestricted File Upload Vuln - CVE-2023-4220 The code contained within the repository is meant for educational purposes only. Description: Unrestricted file upload in big file upload functionality in /main/inc/lib/javascript/bigupload/inc/bigUpload.php in...

8.1CVSS7.2AI score0.76084EPSS
SaveExploits26
Kitploit
Kitploit
β€’added 2026/09/09 6:56 a.m.β€’5 views

CVE-2022-32114

Strapi v4.1.12 Vulnerability Explanation: An unrestricted file upload vulnerability in the Add New Assets function of Strapi v4.1.12 allows attackers to execute arbitrary code via a crafted file Attack Vectors: After uploading a file containing malicious content, when the user opens the link to t...

8.8CVSS7.8AI score0.01999EPSS
SaveExploits1References1
Nuclei
Nuclei
β€’added 2026/09/09 2:52 a.m.β€’39 views

MikoPBX - Unrestricted File Upload

MikoPBX through 2024.1.114 contains an authenticated unrestricted file upload vulnerability caused by allowing PHP script uploads in PBXCoreREST/Controllers/Files/PostController.php. id: CVE-2025-52207 info: name: MikoPBX - Unrestricted File Upload author: darses severity: critical description: |...

9.9CVSS5.8AI score0.01499EPSS
SaveExploits0References1
Nuclei
Nuclei
β€’added 2026/09/09 2:52 a.m.β€’59 views

Melis Technology Melis Platform - Unrestricted File Upload & Remote Code Execution

Melis Technology Melis Platform contains an unrestricted file upload caused by insufficient validation of 'mcsdetailimg' parameter in /melis/MelisCmsSlider/MelisCmsSliderDetails/saveDetailsForm, letting attackers upload malicious files and achieve remote code execution, exploit requires crafted...

9.3CVSS5.9AI score0.0266EPSS
SaveExploits3References3
Nuclei
Nuclei
β€’added 2026/09/09 2:52 a.m.β€’36 views

WP Mobile Detector <= 3.5 - Unrestricted File Upload

WP Mobile Detector plugin for WordPress = 3.5 contains an unrestricted file upload vulnerability caused by missing file type validation in resize.php, letting unauthenticated attackers upload arbitrary files, potentially leading to remote code execution. id: CVE-2016-15043 info: name: WP Mobile...

9.8CVSS6.1AI score0.07761EPSS
SaveExploits2References3
Rows per page
Query Builder