CVE-2020-29607

Alienfader Exploit / Alien@shell Webshell Upload Exploit Description: This Python script exploits a file upload restriction bypass vulnerability in Pluck CMS e.g., versions prior to 4.7.13 to upload a PHP webshell. Once uploaded, the shell named "shell.phar" can be used to execute commands on the...

CVE-2018-19422

CVE-2018-19422 Exploit Title: File Upload Bypass to RCE Authenticated Google Dork: N/A Date: 17/05/2021 Exploit Author: Drew Alleman Based on an exploit written by: Fellipe Oliveira Vendor Homepage: https://subrion.org/ Software Link: https://github.com/intelliants/subrion Version: SubrionCMS 4.2...

Bypass-File-Upload-on-Koken-CMS

Koken CMS 파일 업로드 우회 이 저장소는 Koken CMS - 0.22.24인증됨에서 파일 업로드 제한을 우회하는 방법을 설명합니다. Koken CMS 정보 Koken은 사진 작가, 디자이너 및 아티스트를 위해 설계된 무료 콘텐츠 관리 시스템입니다. 웹사이트: http://koken.me/ Koken CMS는 Softaculous에서도 사용할 수 있습니다: https://www.softaculous.com/apps/cms/Koken 파일 업로드 제한 우회PoC Koken CMS 업로드 제한은 허용된 파일 확장자...

CVE-2026-57827

CVE-2026-57827 — RSFiles! Joomla 컴포넌트 인증 없는 파일 업로드 RCE 분할 컨트롤러 업로드 우회 → 직접 쓰기 태스크 → /downloads/shell.php → RCE 개요 CVE-2026-57827 은 Joomla용으로 널리 사용되는 파일 관리 및 다운로드 컴포넌트인 RSFiles!comrsfiles 버전 발견자: Phil Taylor, mySites.guru 2026년 7월 10일 공급업체: RSJoomla rsjoomla.com 컴포넌트: comrsfiles 취약점 메커니즘 근본 원인...

CVE-2024-21546

CVE-2024-21546 Python Exploit 🔥 Description This Python exploit script targets a vulnerable Laravel Filemanager created by UniSharp , which allows authenticated users to bypass file restrictions and upload malicious files. This can lead to Remote Code Execution RCE when the uploaded payload is...

Upload_Bypass

UploadBypass v3 About Upload Bypass is a simple tool designed to assist penetration testers and bug hunters in testing file upload mechanisms. It leverages various bug bounty techniques to simplify the process of identifying and exploiting vulnerabilities, ensuring thorough assessments of web...

EXPLOIT-CVE-2025-27515

CVE-2025-27515 개념 증명 Laravel 프레임워크≤ 12.0.0의 파일 업로드 검증 우회 취약점인 CVE-2025-27515 에 대한 실용적인 시연입니다. 취약점 개요 CVE-2025-27515 는 Laravel 애플리케이션이 와일드카드 검증 패턴files.을 사용할 때 공격자가 파일 업로드 제한을 우회할 수 있게 하는 검증 우회 취약점입니다. 이 취약점은 Laravel이 배열 기반 파일 업로드를 처리하는 방식의 약점을 악용하여 악성 파일을 업로드할 수 있게 합니다. 심각도: 중간/높음 CWE: CWE-20 부적절...

Inject-PHP-to-JPG-Using-Jhead

Jhead를 사용하여 JPG에 PHP 주입하기 $ pkg install vim or apt-get install vim $ pkg install jhead or apt-get install jhead $ jhead -h 도움말 보기 $ jhead -purejpg yourfiles.jpg $ jhead -ce yourfiles.jpg ESC를 누른 후 :x를 입력하여 저장하세요 $ jhead yourfiles.jpg 예시 : site.com/youfiles.php?cmd=Command Here...

CVE-2020-29607-POC

Pluck CMS 4.7.13 File Upload RCE Exploit 🚨 Educational Remote Code Execution Exploit 🚨 Author: Ron Jost Hacker5preme Reference: Exploit-DB CVE: CVE-2020-29607 ⚠️ Disclaimer: This script is for educational and authorized testing purposes only. Do not use it on systems you do not own or have explici...

vuln-chain-lab

File Upload Bypass + Stored XSS PoC Lab A deliberately vulnerable web application demonstrating how a file upload bypass chains with stored XSS to create backdoor admin accounts, even when CSP, CORS, and CSRF protections are in place. Full Blog Post: KurtiseBear Blog This is an educational lab fo...

CVE-2023-47129

CVE-2023-47129 - Statamic CMS 버전 " image.jpg 4 이 파일의 이름을 image.php로 변경합니다. 5 양식 페이지에서 생성한 image.php 파일을 업로드합니다. 6 이제 이 파일을 실행하려면 https://yoursite.com/assets/image.php에 접속하면 됩니다. 참고:https://yoursite.com을 테스트 설치 주소로 바꾸세요. 참조 GHSA-72hg-5wr5-rmfc...

tomcat-cve-2017-12617

Tomcat CVE-2017-12617 익스플로잇/PoC Apache Tomcat 9.0.1 베타 / 8.5.23 / 8.0.47 / 7.0.8 - JSP 업로드 우회 / 원격 코드 실행 Python3용 원본 스크립트를 Python 3와 호환되도록 몇 가지 조정만 했습니다. 문제나 이슈가 있을 경우, 언제든지 이메일 [email protected]로 연락주세요. 또는 원하시면 저에게 연락하셔도 됩니다. 이메일을 판단하지 마세요, 임시용으로 사용됩니다 사용 방법 ./cve-2017-12617.py options 옵션: ...

Rocky Linux 8 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2024_7699)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20247699 advisory. thunderbird: 115.16/128.3 firefox: thunderbird: Specially crafted WebTransport requests could lead to denial of service CVE-2024-9399 firefox: thunderbird:...

CVE-2026-78078 Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10

Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate 2.2.10 - Image uploads previously validated only file extension and basic size parameters. Non-image files disguised with raster extensions could be uploaded. Added strict MIME verification an...

CVE-2026-78078

Helix Ultimate is a Joomla template by joomshaper.com. In versions prior to 2.2.10 , image uploads were validated only by file extension and basic size parameters, allowing an attacker with privileged access to upload non-image files disguised with raster extensions — a content spoofing bypass. T...

CVE-2026-78079 Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10

Joomla Extension - joomshaper.com - Open Redirect via Base64 Return Parameter in Helix Ultimate 2.2.10 - Return redirect parameters accepted arbitrary Base64 strings without verifying whether the resolved target was an internal site URL via Uri::isInternal...

CVE-2026-78079 Joomla Extension - joomshaper.com - Privileged File Upload Bypass via Content Spoofing in Helix Ultimate < 2.2.10

Joomla Extension - joomshaper.com - Open Redirect via Base64 Return Parameter in Helix Ultimate 2.2.10 - Return redirect parameters accepted arbitrary Base64 strings without verifying whether the resolved target was an internal site URL via Uri::isInternal...

CVE-2026-78079

Helix Ultimate is a Joomla template published by joomshaper.com . In versions prior to 2.2.10 , an open redirect vulnerability exists in the return redirect handling: arbitrary Base64-encoded strings were accepted as return parameters without verifying that the resolved target was an internal sit...

CVE-2026-18781

The Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin before 1.3.9.9 does not validate the final name of an uploaded file after stripping characters from it, allowing unauthenticated users to defeat its file type restrictions and execute arbitrary code on the server...

CVE-2026-18781 Drag and Drop Multiple File Upload for Contact Form 7 < 1.3.9.9 - Unauthenticated RCE via Control Character Filename Bypass

The Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin before 1.3.9.9 does not validate the final name of an uploaded file after stripping characters from it, allowing unauthenticated users to defeat its file type restrictions and execute arbitrary code on the server...