CVE-2018-19422

CVE-2018-19422 root@kitploit: Exploit Title: File Upload Bypass to RCE Authenticated Google Dork: N/A Date: 17/05/2021 Exploit Author: Drew Alleman Based on an exploit written by: Fellipe Oliveira Vendor Homepage: https://subrion.org/ Software Link: https://github.com/intelliants/subrion Version:...

Upload_Bypass

UploadBypass v3 About Upload Bypass is a simple tool designed to assist penetration testers and bug hunters in testing file upload mechanisms. It leverages various bug bounty techniques to simplify the process of identifying and exploiting vulnerabilities, ensuring thorough assessments of web...

CVE-2026-57827

CVE-2026-57827 — компонент RSFiles! для Joomla: RCE через неаутентифицированную загрузку файлов Обход защиты загрузки через split-контроллер → прямой вызов задачи записи → /downloads/shell.php → RCE Обзор CVE-2026-57827 — это уязвимость критической степени серьёзности CVSS 9.8, позволяющая...

EXPLOIT-CVE-2025-27515

Preuve de concept de CVE-2025-27515 Une démonstration pratique de CVE-2025-27515 , une vulnérabilité de contournement de validation d'upload de fichiers dans le Framework Laravel ≤ 12.0.0. Aperçu de la vulnérabilité CVE-2025-27515 est un contournement de validation qui permet aux attaquants de...

CVE-2024-21546

CVE-2024-21546 Эксплойт на Python 🔥 Описание Этот скрипт эксплойта на Python нацелен на уязвимый Laravel Filemanager, созданный UniSharp , который позволяет аутентифицированным пользователям обходить ограничения на файлы и загружать вредоносные файлы. Это может привести к удаленному выполнению ко...

Bypass-File-Upload-on-Koken-CMS

Contournement de l'upload de fichiers sur Koken CMS Ce dépôt explique comment contourner les restrictions d'upload de fichiers sur Koken CMS - 0.22.24 authentifié. À propos de Koken CMS Koken est un système de gestion de contenu gratuit conçu pour les photographes, les designers et les artistes...

Inject-PHP-to-JPG-Using-Jhead

Inject-PHP-to-JPG-Using-Jhead $ pkg install vim ou apt-get install vim $ pkg install jhead ou apt-get install jhead $ jhead -h pour l'aide $ jhead -purejpg yourfiles.jpg $ jhead -ce yourfiles.jpg Appuyez sur ESC, tapez :x pour enregistrer $ jhead yourfiles.jpg Exemple :...

CVE-2020-29607-POC

Pluck CMS 4.7.13 Эксплойт RCE через загрузку файлов 🚨 Учебный эксплойт удаленного выполнения кода 🚨 Автор: Ron Jost Hacker5preme Ссылка: Exploit-DB CVE: CVE-2020-29607 ⚠️ Отказ от ответственности: Этот скрипт предназначен только для образовательного и авторизованного тестирования. Не используйте...

vuln-chain-lab

File Upload Bypass + Stored XSS PoC Lab A deliberately vulnerable web application demonstrating how a file upload bypass chains with stored XSS to create backdoor admin accounts, even when CSP, CORS, and CSRF protections are in place. Full Blog Post: KurtiseBear Blog This is an educational lab fo...

CVE-2023-47129

CVE-2023-47129 - Statamic CMS версии 4.33.0 - Удаленное выполнение кода Описание В версиях 4.33.0 Statamic CMS, где интерфейс имеет форму с активной загрузкой файлов, можно отправлять PHP-файлы, созданные похожими на изображения, независимо от правил проверки mime. Эта уязвимость позволяет...

tomcat-cve-2017-12617

Tomcat CVE-2017-12617 Exploit/PoC Apache Tomcat 9.0.1 Beta / 8.5.23 / 8.0.47 / 7.0.8 - Contournement de téléchargement JSP / Exécution de code à distance pour Python3 J'ai juste apporté quelques ajustements au script original pour le rendre compatible avec Python 3 ! Si vous rencontrez des...

CVE-2020-29607

Exploit Alienfader / Exploit de téléchargement de webshell Alien@shell Description : Ce script Python exploite une vulnérabilité de contournement de restriction de téléchargement de fichiers dans Pluck CMS par exemple, versions antérieures à 4.7.13 pour télécharger un webshell PHP. Une fois...

CVE-2026-78078 Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10

Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate 2.2.10 - Image uploads previously validated only file extension and basic size parameters. Non-image files disguised with raster extensions could be uploaded. Added strict MIME verification an...

CVE-2026-78078

Helix Ultimate is a Joomla template by joomshaper.com. In versions prior to 2.2.10 , image uploads were validated only by file extension and basic size parameters, allowing an attacker with privileged access to upload non-image files disguised with raster extensions — a content spoofing bypass. T...

CVE-2026-78079 Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10

Joomla Extension - joomshaper.com - Open Redirect via Base64 Return Parameter in Helix Ultimate 2.2.10 - Return redirect parameters accepted arbitrary Base64 strings without verifying whether the resolved target was an internal site URL via Uri::isInternal...

CVE-2026-78079 Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10

Joomla Extension - joomshaper.com - Open Redirect via Base64 Return Parameter in Helix Ultimate 2.2.10 - Return redirect parameters accepted arbitrary Base64 strings without verifying whether the resolved target was an internal site URL via Uri::isInternal...

CVE-2026-78079

Helix Ultimate is a Joomla template published by joomshaper.com . In versions prior to 2.2.10 , an open redirect vulnerability exists in the return redirect handling: arbitrary Base64-encoded strings were accepted as return parameters without verifying that the resolved target was an internal sit...

CVE-2026-18781

The Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin before 1.3.9.9 does not validate the final name of an uploaded file after stripping characters from it, allowing unauthenticated users to defeat its file type restrictions and execute arbitrary code on the server...

CVE-2026-18781 Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.9 - Unauthenticated RCE via Control Character Filename Bypass

The Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin before 1.3.9.9 does not validate the final name of an uploaded file after stripping characters from it, allowing unauthenticated users to defeat its file type restrictions and execute arbitrary code on the server...

GHSA-8HW4-7QJR-3WXG Laravel Backpack CRUD: SingleBase64Image accepts any base64 payload behind a `data:image` prefix — SVG-with-script lands on the public disk

Summary SingleBase64Image::uploadFiles — the uploader bound to image-typed fields via withFiles — only verifies that the submitted value starts with the string data:image. The MIME subtype and the base64-decoded bytes are never inspected or validated. A related bug in FileNameGenerator causes the...