CVE-2024-10629

🛠️ GPX Viewer Exploit CVE-2024-10629 This repository contains a proof-of-concept exploit for the GPX Viewer plugin for WordPress, which is vulnerable to arbitrary file creation CVE-2024-10629. The vulnerability allows authenticated attackers with subscriber-level access and above to create...

ClearML-CVE-2024-24590

root@kitploit: / | | | / | | | \ / \ / | | | | | | \ / | | | | | | | | | | | | |/ / | '| |/| | | | /| | | | | | || | / | | | | | | | | | | | || | | |||,|| || ||| || / | - 2024-24590 x OxyDe ClearML Pickle Artifact Upload PoC This project demonstrates how to dynamically upload a pickle...

CVE-2024-22515-File-Upload-Vulnerability

CVE-2024-22515: File Upload Vulnerability in Agent DVR Information Description In iSpyConnect.com Agent DVR 5.1.6.0, there is a lack of verification of file type for sound file uploads. This allows an authenticated user to upload any file type through the upload audio component simply by toggling...

CVE-2023-2825

CVE-2023-2825 - GitLab CE/EE 16.0.0 Arbitrary File Read via Path Traversal On May 23, 2023 GitLab released version 16.0.1 which fixed a critical vulnerability, CVE-2023-2825, affecting the Community Edition CE and Enterprise Edition EE version 16.0.0. The vulnerability allows unauthenticated user...

CVE-2025-32118

🚀 CVE-2025-32118 - WordPress CMP 插件 RCE 利用工具 🔍 标题： WordPress CMP – Coming Soon & Maintenance 插件 = 4.1.13 - 远程代码执行 RCE 🗓️ 发布时间： 2025-04-04 🔐 CWE： CWE-434 - 危险类型文件的无限制上传 📊 CVSS： 9.1 严重 — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H 📜 描述 WordPress 的 CMP – Coming Soon & Maintenance 插件（=...

CVE-2025-23922

CVE-2025-23922 - WordPress iSpring Embedder 插件的 CSRF 导致任意文件上传 📌 CVE 详情 CVE ID: CVE-2025-23922 发布时间: 2025-01-16 受影响插件: WordPress iSpring Embedder 插件 受影响版本: CSRF 文件上传利用 body font-family: Arial, sans-serif; background-color: f4f4f4; padding: 20px; .container background: fff; padding: 25px;...

CVE-2024-9698

CVE-2024-9698 Crafthemes Demo Import " 🔥 示例输出 root@kitploit: + Target is vulnerable, proceeding with exploit... + Logged in successfully. + Extracted nonce: abc123xyz + Shell uploaded successfully: http://target.com/wp-content/uploads/2025/02/Nxploit.php 🛡️ 缓解措施 更新插件 到可用的修补版本。 限制管理员访问权限，仅限受信任的用户。...

CVE-2024-7985-PoC

CVE-2024-7985-PoC FileOrganizer = 1.0.9 - Authenticated Subscriber+ Arbitrary File Upload FileOrganizer Exploit - CVE-2024-7985 📌 Overview CVE-2024-7985 - WordPress Plugin FileOrganizer = 1.0.9 is vulnerable to authenticated arbitrary file uploads , allowing attackers with Subscriber+ privileges...

CVE-2024-9234

CVE-2024-9234 GutenKit = 2.1.0 - Unauthenticated Arbitrary File Upload POC python CVE-2024-9234.py -h baseurl note This script is provided for educational purposes only. The author is not responsible for any damages caused by the misuse of this script...

CVE-2025-1306

Newscrunch 漏洞利用 CVE-2025-1306 🚨 概述 此漏洞利用针对 Newscrunch WordPress 主题中的跨站请求伪造 CSRF 导致任意文件上传 漏洞 CVE-2025-1306。由于 newscrunchinstallandactivateplugin 函数缺少 nonce 验证 ，未经认证的攻击者 可以诱骗已登录的管理员将任意文件上传到服务器，从而导致远程代码执行 RCE。 🔥 漏洞详情 CVE ID: CVE-2025-1306 受影响软件: Newscrunch WordPress 主题 CSRF Exploit CVE-2025-1306 By...

CVE-2024-56249

🛠️ WordPress Master Toolkit 漏洞利用脚本 CVE-2024-56249 🌟 概述 该脚本利用 WordPress WPMasterToolKit 插件中的任意文件上传漏洞，允许攻击者将网页后门上传到服务器。该漏洞存在于插件版本 -un -p -fn 📋 参数 -u / --url: 目标 WordPress URL（例如 http://192.168.100.74:888/wordpress） -un / --username: WordPress 管理员用户名 -p / --password: WordPress 管理员密码 -fp / --filepath:...

CVE-2024-54262

CVE-2024-54262 Explotación de CVE-2024-54262: Carga arbitraria de archivos en Import Export para WooCommerce Resumen Este script explota una vulnerabilidad en el plugin "Import Export for WooCommerce" de WordPress. La vulnerabilidad permite a usuarios no autorizados subir archivos arbitrarios, lo...

CVE-2024-51793

🛡️ WordPress RepairBuddy Plugin Exploit 📜 CVE Information CVE-ID: CVE-2024-51793 Published: 2024-11-11 Updated: 2024-11-11 Title: WordPress RepairBuddy plugin = 3.8115 - Arbitrary File Upload vulnerability Description: Unrestricted Upload of File with Dangerous Type vulnerability in Webful...

CVE-2024-1247-PoC

CVE-2024-1247-PoC Post Saint = 1.3.1 plugin for WordPress Arbitrary File Upload Description The Post Saint plugin for WordPress versions up to and including 1.3.1 is vulnerable to arbitrary file uploads due to missing capability checks and file type validation. Authenticated attackers with at lea...

CVE-2018-6574

Code n stuff...

php-cgi-Injector

PHP-CGI Injector 🚀 CVE-2024-4577 & CVE-2024-8926 Exploit Tool Automated testing tool for PHP-CGI parameter injection vulnerabilities , supporting CVE-2024-4577 and CVE-2024-8926 , with capabilities for command execution, file upload, download , etc. 📌 Introduction This tool can be used to test...

CVE-2025-34085

📂 Simple File List – Unauthenticated RCE Exploit CVE-2025-34085 ⚠️ Exploit Code by: Mrj Haxcore A fully working Python exploit for the WordPress Simple File List plugin = 4.2.3, which is vulnerable to unauthenticated remote code execution RCE due to insecure file upload and rename logic. 💣...

CVE-2023-50564

CVE-2023-50564 - Pluck CMS v4.7.18 Exploit Overview This script exploits an authenticated arbitrary file upload vulnerability in Pluck CMS v4.7.18 CVE-2023-50564. By leveraging this vulnerability, an authenticated attacker can upload a malicious PHP file, enabling the execution of arbitrary code ...

CVE-2026-29053

这是对 rootxran 针对同一 CVE 的仓库的重制版本 - https://github.com/rootxran/CVE-2026-29053 在针对特定 Ghost CMS 环境进行测试时，原始主题载荷触发了致命 Handlebars 错误。由于该 CMS 在 author.hbs 文件中引用了已弃用或缺失的辅助函数（socialurl），导致其无法激活恶意主题。 我已更新 Handlebars 模板，改用原生且兼容的辅助函数。这确保了主题能够通过 Ghost 的内部验证检查，使漏洞利用能够成功激活，而不会被主题引擎的安全解析器阻止。 使用方法：（视频指南请参考原始漏洞利用）。...

PoC-CVE-2026-1357

PoC CVE-2026-1357: WPvivid Backup & Migration El plugin para WordPress Migration, Backup, Staging – WPvivid Backup & Migration es vulnerable a la Subida Arbitraria de Archivos sin Autenticación en versiones hasta la 0.9.123 inclusive. Esto se debe a un manejo inadecuado de errores en el proceso d...