CVE-2021-29447-POC

CVE-2021-29447 Prueba de concepto Prueba de concepto para CVE-2021-29447 escrita en Python. Los detalles sobre el CVE se pueden encontrar en https://vulners.com/cve/CVE-2021-29447 Descargo de responsabilidad Este script es una PoC solo para pruebas de seguridad ética autorizadas. Uso usage: pytho...

CVE-2026-7393-RCE

Pizzafy Ecommerce System 1.0 – Unrestricted File Upload in savemenu Leads to Remote Code Execution Details Field| Value ---|--- Vendor| SourceCodester Vendor URL| https://www.sourcecodester.com Product| Pizzafy Ecommerce System using PHP and MySQL Product URL|...

CVE-2017-12615-EXP

CVE-2017-12615-EXP .\CVE-2017-12615.exe @@@@@@@ @@@ @@@ @@@@@@@@ @@@@@@ @@@@@@ @@@ @@@@@@@@ @@@ @@@@@@ @@@@@ @@@ @@@@@@@ !@@ @@! @@@ @@! @@ @@@ @@! @@@ @@@@ @@! @@@@ @@ @@@ @@!@ @@@@ !@@ !@! @!@ !@! @!!!:! @!@!@!@! .!!@! @!@ !@! !@! @!! @!@!@!@! !@! .!!@! @!@!@!@ !@! !!@@!! :!! !: .:! !!: !!: !!:...

zip-shotgun

ZIP Shotgun Script de utilidad para probar la funcionalidad de carga de archivos zip y posible extracción de archivos zip en busca de vulnerabilidades también conocido como Zip Slip. La idea de este script proviene de esta publicación en Silent Signal Techblog - Compressed File Upload And Command...

CVE-2021-40870

CVE-2021-40870 Carga sin restricciones de archivos con tipo peligroso en Aviatrix permite a un usuario autenticado ejecutar código arbitrario https://attackerkb.com/assessments/970a9fa9-223d-4d07-bafa-a338147934f3...

fortilogger_arbitrary_fileupload

CVE-2021-3378 | FortiLogger - Unauthenticated Arbitrary File Upload Metasploit Date: 30-01-2021 Exploit Author: Berkan Er [email protected] Vendor Homepage: https://www.fortilogger.com/ Software Link: https://www.fortilogger.com/download Version: 4.4.2.2 Tested on: Windows 10 Enterprise x64...

CVE-2020-29607-Pluck-CMS-4.7.13-Authenticated-File-Upload-RCE-PoC

CVE-2020-29607 — Pluck CMS Authenticated remote code execution in Pluck CMS before 4.7.13. The admin file manager admin.php?action=files does not validate file extensions, allowing upload of .phar files which Apache executes as PHP. Uploading a webshell through this endpoint results in RCE as the...

CVE-2024-44849

CVE-2024-44849 Autor: Extencil [email protected] CVE-2024-44849 es una vulnerabilidad crítica de ejecución remota de código RCE que afecta a todas las versiones anteriores hasta Qualitor 8.24. Sitio web de Qualitor Usar este programa para atacar o comprometer cualquier empresa o sistema sin...

CVE-2021-1675

CVE-2021-1675 Modificado de https://github.com/sailay1996/PrintNightmare-LPE ，soporta invocación remota. 1、Sube PrintNightmareLPE.exe y vlib.dll al servidor remoto y ejecuta PrintNightmareLPE.exe. 2、En el equipo local, configura el reenvío de puertos netsh interface portproxy add v4tov4...

CVE-2025-56399

Explotación Masiva CVE-2025-56399 CVE-2025-56399 – Ejecución Remota de Código en laravel-file-manager v3.3.1. Explota la configuración incorrecta en Laravel File Manager para subir y verificar un shell PHP mediante carga de archivos sin autenticación. Instalación Descargar repositorio git clone...

CVE-2021-21972

CVE-2021-21972 CVE-2021-21972 Works On VMware-VCSA-all-6.7.0-8217866, VMware-VIM-all-6.7.0-8217866 ✔ VMware-VCSA-all-6.5.0-16613358 ✔ For vCenter6.7 U2+ vCenter 6.7U2+ runs the website in memory, so this exploit cannot work for 6.7 u2+. Needs Testing vCenter 6.5 Linux VCSA/WindowsAwaiting Testing...

CVE-2020-14144-GiTea-git-hooks-rce

CVE-2020-14144 - GiTea authenticated RCE A script to exploit CVE-2020-14144 - GiTea authenticated Remote Code Execution using git hooks Features Automatic reverse shell payload generation from IP and PORT Upload custom shell script and execute it remotely with option -f Automatic login with...

0-click-RCE-Exploit-for-CVE-2024-9932

CVE-2024-9932 / 0-Click RCE Exploit Author: Joshua Provoste https://x.com/JoshuaProvoste/status/1858329238153072668 This repository contains a proof-of-concept exploit for CVE-2024-9932, an unauthenticated arbitrary file upload vulnerability in the Wux Blog Editor WordPress plugin, leading to...

CVE-2024-0757-Exploit

CVE-2024-0757 Exploit Descripción El plugin Insert or Embed Articulate Content into WordPress para WordPress es vulnerable a subidas arbitrarias de archivos a través de subidas inseguras de archivos en un archivo zip en todas las versiones hasta, e incluyendo, la 4.3000000023. Esto permite que...

CVE-2022-30887

CVE-2022-30887 Pharmacy Management System 1.0 Shell Upload This application built by Mayurik Pharmacy management system project in PHP has been developed to improve the accuracy and efficiency of pharmaceutical stores through security and management. In short, it is a product inventory applicatio...

CVE-2024-43160

Wordpress BerqWP = 1.7.6 - Unauthenticated Arbitrary File Uplaod CVE-2024-43160 The BerqWP – Automated All-In-One PageSpeed Optimization Plugin for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type...

CVE-2024-8425

Wordpress WooCommerce Ultimate Gift Card = 2.6.0 - Unauthenticated Arbitrary File Upload CVE-2024-8425 The WooCommerce Ultimate Gift Card plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'mwbwgmpreviewmail' and...

Exploit-CVE-2024-31777

CVE-2024-31777 | GUnet OpenEclass E-learning platform Unrestricted File Upload PoC 📜 Description This script presents a proof of concept PoC for CVE-2024-31777, a security vulnerability discovered in GUnet OpenEclass E-learning platform with a CVSS of 9.8 which affects the endpoint of...

CVE-2018-7600-Drupal-0day-RCE

CVE-2018-7600-Drupal-0day-RCE Drupal 0day Remote PHP Code Execution Perl This is a 0day RCE Exploit in Drupal CMS You Can Upload Payload on server. CVE : CVE-2018-7600 Cxsecurity : https://cxsecurity.com/issue/WLB-2018040108 How Run Exploit : 1-git clone...

sqlmap

sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...