CVE-2025-65482-XXE-

CVE-2025-65482 XXE XML External Entity Injection XXE en XDocReport Definición del error XML External Entity Injection Resumen de la vulnerabilidad XML External Entity Injection XXE es una vulnerabilidad en el procesamiento de datos en formato XML, donde el usuario inserta datos XML que hacen...

pwnacle-fusion

pwnacle-fusion Exploit automatizado para Oracle Reports, CVE-2012-3153 / CVE-2012-3152 Créditos a @misssudo por la divulgación Uso: ./pwnacle.rb targeturl payloadurl Este exploit utiliza ambos CVEs para subir una shell .jsp desde tu payloadurl, que luego es accesible desde /reports/images/shell.j...

WG-CVE-2026-1555-Linux

██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ██████╗ ██╔════╝██║ ██║██╔════╝ ╚════██╗██╔═████╗╚════██╗██╔════╝ ██║ ██║ ██║█████╗ █████╔╝██║██╔██║ █████╔╝███████╗ ██║ ╚██╗ ██╔╝██╔══╝ ██╔═══╝ ████╔╝██║██╔═══╝ ██╔═══██╗ ╚██████╗ ╚████╔╝ ███████╗ ███████╗╚██████╔╝███████╗╚██████╔╝ ╚═════╝ ╚═══╝...

CVE-2026-62129

Contributor Arbitrary File Upload in Creator LMS = 1.2.21 versions...

CVE-2026-62024

Subscriber Arbitrary File Upload in CodeBard Help Desk = 1.1.2 versions...

CVE-2026-62025

Unauthenticated Arbitrary File Upload in Tailored Tools = 3.0.3 versions...

CVE-2022-40471

CVE-2022-40471 – CPMS Authenticated File Upload RCE 📌 Overview CVE-2022-40471 is an authenticated Remote Code Execution vulnerability affecting Clinic's Patient Management System CPMS. The vulnerability exists due to insufficient validation of uploaded files in the user profile image upload...

CVE-2020-7699_reproduce

Reproducción de CVE-2020-7699 Reproducción de la vulnerabilidad RCE en Node.js CVE-2020-7699, mi trabajo de laboratorio Configuración Versión de Node.js: v14.16.1, asegúrate de que la versión de Node.js sea 14 otras versiones probablemente funcionen, no lo probé Versión de Python: 3.9.5, Python...

CVE-2025-34299

CVE-2025-34299 Monsta FTP versions 2.11 and earlier contain a vulnerability that allows unauthenticated arbitrary file uploads. This flaw enables attackers to execute arbitrary code by uploading a specially crafted file from a malicious SFTP server. How does this detection method work? This...

EUVD-2026-96511

Contributor Arbitrary File Upload in Creator LMS = 1.2.21 versions...

CVE-2026-62129

The Creator LMS WordPress plugin (versions

CVE-2026-62129 WordPress Creator LMS plugin <= 1.2.21 - Arbitrary File Upload vulnerability

Contributor Arbitrary File Upload in Creator LMS = 1.2.21 versions...

CVE-2026-62024 WordPress CodeBard Help Desk plugin <= 1.1.2 - Arbitrary File Upload vulnerability

Subscriber Arbitrary File Upload in CodeBard Help Desk = 1.1.2 versions...

CVE-2026-62025 WordPress Tailored Tools plugin <= 3.0.3 - Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload in Tailored Tools = 3.0.3 versions...

EUVD-2026-96463

Unauthenticated Arbitrary File Upload in Tailored Tools = 3.0.3 versions...

EUVD-2026-96462

Subscriber Arbitrary File Upload in CodeBard Help Desk = 1.1.2 versions...

CVE-2026-62025

The Tailored Tools plugin for WordPress (versions

CVE-2026-62024

The CodeBard Help Desk WordPress plugin, versions

Ashwesker-CVE-2025-52691

🚨 CVE-2025-52691 — Critical SmarterMail Vulnerability Status: 🔥 Critical — Immediate action required CVSS v3.1 Score: 10.0 / 10 Disclosure Date: December 29–30, 2025 🧩 Vulnerability Summary CVE-2025-52691 is a critical, unauthenticated arbitrary file upload vulnerability affecting SmarterTools...

CVE-2025-32140

🚨 CVE-2025-32140 – Explotación de WP Remote Thumbnail Carga Arbitraria de Archivos 📝 Descripción CVE-2025-32140 es una vulnerabilidad crítica en el plugin WP Remote Thumbnail para WordPress. Permite a atacantes autenticados con permisos de colaborador o superiores cargar archivos arbitrarios , co...