Better-CVE-2022-29464

更好的CVE-2022-29464 某些WSO2产品允许无限制的文件上传，导致远程代码执行。攻击者必须使用一个/fileupload端点，并带有Content-Disposition目录遍历序列，以到达web根目录下的一个目录，例如../../../../repository/deployment/server/webapps目录。 使用方法 root@kitploit: python3 main.py https://example.com shell.jsp 将 https://example.com 替换为易受攻击的服务器，并将 shell.jsp 替换为您要用于上传的文件名。...

Chamilo-CVE-2023-4220-Exploit

Chamilo-LMS-CVE-2023-4220-Exploit 这是一个针对 Chamilo LMS 中大文件上传功能 /main/inc/lib/javascript/bigupload/inc/bigUpload.php 的未限制文件上传漏洞（CVE-2023-4220）的利用程序。受影响版本为 Chamilo LMS = v1.11.24。攻击者可通过上传 Web Shell 获得远程代码执行权限，从而允许任意文件被上传到 /main/inc/lib/javascript/bigupload/files 目录。 漏洞利用演示 你可以首先运行该漏洞利用程序以了解如何使用它：...

CVE-2025-32579

⚠️ CVE-2025-32579 - Critical RCE via Sync Posts Plugin WordPress 📦 Affects: Sync Posts 🧨 CVSS Score: 9.9 CRITICAL 📁 CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 🧠 Vulnerability Overview The Sync Posts WordPress plugin by SoftClever Limited is vulnerable to an Unrestricted File Upload...

CVE-2019-10869

CVE-2019-10869 Wordpress Ninja Forms 文件上传扩展 -----------------------------16345274557837-- 响应： root@kitploit: HTTP/1.1 200 OK Server: nginx/1.14.0 "data": "files": "name":"test.png.doc", "type":"application/msword", "tmpname":"nftmp-14FpD-test.png.doc", "error":0, "size":19 当表单被提交时，最初上传的临时文件（tmp...

CVE-2026-Pending-Django-Summernote-RCE

CVE-2026-XXXXX Pendiente: django-summernote Carga Arbitraria de Archivos RCE Este repositorio contiene una Prueba de Concepto PoC para una vulnerabilidad de Ejecución Remota de Código RCE Condicional descubierta en django-summernote versión 0.8.20.0 y anteriores. Detalles de la Vulnerabilidad...

Check-WP-CVE-2020-35489

Check-WP-CVE-2020-35489 CVE-2020-35489 CVE-2020-35489 存在于 WordPress 插件 Contact Form 7 5.3.1 及更早版本中。攻击者利用此漏洞可以绕过网站对允许上传文件类型的所有限制，直接上传任意类型的文件。 据估计，受影响网站多达 500 万 个。 PoC 将于 2020 年 12 月 31 日公布，以便用户有时间更新。 参考 https://wpscan.com/vulnerability/10508...

WP Mobile Detector <= 3.5 - Unrestricted File Upload

WP Mobile Detector plugin for WordPress = 3.5 contains an unrestricted file upload vulnerability caused by missing file type validation in resize.php, letting unauthenticated attackers upload arbitrary files, potentially leading to remote code execution. id: CVE-2016-15043 info: name: WP Mobile...

MikoPBX - Unrestricted File Upload

MikoPBX through 2024.1.114 contains an authenticated unrestricted file upload vulnerability caused by allowing PHP script uploads in PBXCoreREST/Controllers/Files/PostController.php. id: CVE-2025-52207 info: name: MikoPBX - Unrestricted File Upload author: darses severity: critical description: |...

Zimbra Collaboration - Unrestricted File Upload

An issue was discovered in Zimbra Collaboration ZCS 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole extraction to /opt/zimbra/jetty/webapps/zimbra/public that can lead to incorrect access to any other user accounts. Zimbra recommends pax over cpio. Also,...

Melis Technology Melis Platform - Unrestricted File Upload & Remote Code Execution

Melis Technology Melis Platform contains an unrestricted file upload caused by insufficient validation of 'mcsdetailimg' parameter in /melis/MelisCmsSlider/MelisCmsSliderDetails/saveDetailsForm, letting attackers upload malicious files and achieve remote code execution, exploit requires crafted...

Roxy Fileman 1.4.5 - Unrestricted File Upload

Roxy Fileman 1.4.5 is susceptible to unrestricted file upload via upload.php. An attacker can execute malware, obtain sensitive information, modify data, and/or gain full control over a compromised system without entering necessary credentials. id: CVE-2018-20526 info: name: Roxy Fileman 1.4.5 -...

CVE-2021-21972

CVE-2021-21972 Prüfer VMware vCenter Server CVE-2021-21972 Sicherheitslücke zur Remotecodeausführung RCE Dieses Skript prüft das Vorhandensein von CVE-2021-21972 basierend auf folgendem Pfad "/ui/vropspluginui/rest/services/uploadova" mittels einer POST-Anfrage und sucht im Antwortkörper 500 nach...

CVE-2026-32475

🔴 CVE-2026-32475 — Elementor Pro Unrestricted File Upload → RCE Critica vulnerabilità di Unrestricted File Upload in Elementor Pro Potenzialmente in grado di portare a Remote Code Execution RCE ⚠️ Panoramica CVE-2026-32475 è una vulnerabilità critica che interessa Elementor Pro , un plugin...

laravel-filemanager-unrestricted-upload

Laravel FileManager Unrestricted File Upload CVE-2025-56399 CWE-434: Uneingeschränkter Upload von Dateien mit gefährlichem Typ CVSS-Score: 8.5 Hoch 📋 Beschreibung Dieses Tool bietet einen Proof of Concept PoC für CVE-2025-56399 , eine kritische Schwachstelle in alexusmai/laravel-file-manager...

CVE-2022-42092

CVE-2022-42092 Exploit Python 🔥 Descrizione Questo script di exploit Python sfrutta un caricamento di file senza restrizioni in Backdrop CMS per ottenere un'esecuzione remota di codice RCE. ⚠️ Versioni Affette Versione 1.22.0 e versioni precedenti Nota: Backdrop CMS contesta ciò e sostiene che...

CVE-2022-32114

Strapi v4.1.12 Spiegazione della vulnerabilità: Una vulnerabilità di caricamento file senza restrizioni nella funzione Add New Assets di Strapi v4.1.12 consente agli attaccanti di eseguire codice arbitrario tramite un file appositamente predisposto. Vettori di attacco: Dopo aver caricato un file...

CVE-2025-32206

CVE-2025-32206 - Plugin WordPress Processing Projects "Vulnerabilità di Upload senza Restrizioni di File con Tipo Pericoloso in LABCAT Processing Projects permette agli attaccanti di caricare una web shell su un server web. Ciò può portare al compromesso completo." 🧑‍💻 Descrizione dell'Exploit...

CVE-2025-26892

CVE-2025-26892 – Tema WordPress Celestial Aura = 2.2 Caricamento Arbitrario di File Autenticato 📄 Descrizione Una vulnerabilità di Caricamento File Senza Restrizioni è presente nel tema WordPress Celestial Aura sviluppato da dkszone fino alla versione 2.2. Un utente autenticato con privilegi bass...

CVE-2025-66802

CVE-2025-66802 Sourcecodester Covid-19 Contact Tracing System 1.0 – Caricamento illimitato di file che porta all'esecuzione remota di codice Descrizione Sourcecodester Covid-19 Contact Tracing System versione 1.0 contiene una vulnerabilità classificata come Caricamento illimitato di file con tipo...

monitorr-exploit-toolkit

Monitorr-Exploit-Toolkit RCE über unsicheren Datei-Upload PHP-Reverse-Shell, Webshell usw. Erstellung von Administratorkonten über Autorisierungs-Bypass Technischer Informationsabfluss : Monitorr-Version, PHP-Version, Systemversion & Kernel, PHP-Konfiguration usw. Exploit für CVE-2020-28872 und...