CVE-2021-22006

CVE-2021-22005 - VMWare vCenter Server File Upload to RCE Analyze Usage ------------------------------------------------------------- CVE-2021-22005 - VMWare vCenter Server File Upload to RCE Github: https://github.com/r0ckysec Twitter: https://twitter.com/r0cky6861636b Author: r0cky...

phpweb

phpweb Frontend Arbitrary File Upload...

POC-CVE-2025-24813

CVE-2025-24813 Apache Tomcat RCE PoC Proof of Concept PoC exploiting CVE-2025-24813, a Remote Code Execution RCE vulnerability in Apache Tomcat. The vulnerability allows an attacker to upload a malicious serialized payload to the server, leading to arbitrary code execution via deserialization whe...

CVE-2025-12973

S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator = 1.7.7 - Authenticated Editor+ Arbitrary File Upload The WordPress S2B AI Assistant plugin versions 2.47 and prior contains an arbitrary file upload vulnerability that allows authenticated WordPress users with Editor role or...

smartermail-cve-scanner

SmarterMail CVE-2025-52691 Scanner CVSS 10.0 RCE vulnerability in SmarterMail. Is your mail server vulnerable? Fast, accurate scanner for CVE-2025-52691 - a critical unauthenticated arbitrary file upload vulnerability that enables remote code execution on SmarterMail servers. About CVE-2025-52691...

CVE-2025-13595

CIBELES AI = 1.10.8 - Unauthenticated Arbitrary File Upload The Cibeles AI WordPress plugin versions 1.10.8 and below contain an unauthenticated remote code execution vulnerability in the actualizadorgit.php file. This file is directly accessible via HTTP without any authentication or authorizati...

CVE-2021-21972

CVE-2021-21972 CVE-2021-21972 VMware vSphere Client Unauthorized File Upload to Remote Code Execution RCE The vSphere Web Client HTML5 is essentially an administrative interface that enables management of a vSphere installation. The vSphere Client provides an administrator with access to the key...

CVE-2025-57460

CVE-2025-57460 Des: File upload vulnerability in machsol machpanel 8.0.32 allows attacker gain a webshell. POC: Navigate to https://controlpaneldomain/Client/SubmitTicket.aspx and Upload ASPx webshell then submit the ticket, finally open the file to execute shell and execute commands such as...

CVE-2019-11231-PoC

GetSimpleCMS CVE-2019-11231 RCE Exploit Unauthenticated Remote Code Execution exploit for GetSimpleCMS ≤ 3.3.15 Vulnerability GetSimpleCMS exposes sensitive files publicly /data/other/authorization.xml, /data/users/ allowing attackers to: 1. Leak API keys and usernames 2. Forge authentication...

WeblogicScan

WeblogicScan Weblogic one-click vulnerability detection tool, V1.5 Software Author: TideRabbitMask Disclaimer: Pia!ｏ ‵-′ノ”ノ﹏。 This tool is for security testing only, please do not use it for illegal purposes, be good V 1.5 Feature Introduction: Provides one-click poc detection, covering almost al...

CVE-2025-13597

AI Feeds = 1.0.11 - Unauthenticated Arbitrary File Upload The AI Feeds WordPress plugin versions 1.0.11 and below contain an unauthenticated remote code execution vulnerability in the actualizadorgit.php file. This file is directly accessible via HTTP without any authentication or authorization...

CVE-2026-1357

🧨 CVE-2026-1357 – WPvivid Null-Key Exploit Tool CVE-2026-1357.py Migration, Backup, Staging – WPvivid Backup & Migration ≤ 0.9.123 Vulnerability: Unauthenticated Arbitrary File Upload → Remote Code Execution CVE: CVE-2026-1357 – CVSS 9.8 Critical GitHub: https://github.com/Nxploited Telegram:...

CVE-2025-13374

Kalrav AI Agent = 2.3.3 - Unauthenticated Arbitrary File Upload via kalravuploadfile AJAX Action The WordPress Kalrav AI Agent plugin version 2.3.3 and prior contains an arbitrary file upload vulnerability that allows unauthenticated users to upload malicious PHP files to the server, potentially...

CVE-2025-23968

AI Bud – AI Content Generator, AI Chatbot, ChatGPT, Gemini, GPT-4o The AI Bud plugin exposes a REST API endpoint /wp-json/ai-buddy/v1/wp/attachments that allows uploading files to the WordPress media library. The endpoint’s file logic contains file renaming functionality that triggers after file...

0-click-RCE-Exploit-for-CVE-2024-51791

CVE-2024-51791 / 0-Click RCE Exploit Author: Joshua Provoste https://x.com/JoshuaProvoste/status/1858910306140893268 This repository contains a proof-of-concept exploit for CVE-2024-51791, an unauthenticated arbitrary file upload vulnerability in a vulnerable WordPress forms plugin, leading to...

CVE-2024-11635

WordPress File Upload This README documents a disclosed vulnerability for educational and defensive use only. Donot run tests against production systems or systems you do not own or have explicit permission to test. Discovered by: abrahack Status: Public Disclosure Date Reported: 2025-01-07 CVE I...

0-click-RCE-Exploit-for-CVE-2023-51409

CVE-2023-51409 / 0-Click RCE Exploit Author: Joshua Provoste https://x.com/JoshuaProvoste/status/1858586463777989073 This repository contains a proof-of-concept exploit for CVE-2023-51409, an unauthenticated arbitrary file upload vulnerability in the AI Engine: ChatGPT Chatbot WordPress plugin,...

CVE-2024-7399-POC

CVE-2024-7399 Exploit for CVE-2024-7399. More details can be found here: https://davidxbors.github.io/0xpages/posts/cve-2024-7399/. Usage: python3 CVE-2024-7399.py https://localhost:7002/ --check python3 CVE-2024-7399.py https://localhost:7002/ --execute python3 CVE-2024-7399.py...

CVE-2018-7600-Drupal-0day-RCE

CVE-2018-7600-Drupal-0day-RCE Drupal 0day Remote PHP Code Execution Perl This is a 0day RCE Exploit in Drupal CMS You Can Upload Payload on server. CVE : CVE-2018-7600 Cxsecurity : https://cxsecurity.com/issue/WLB-2018040108 How Run Exploit : 1-git clone...

CVE-2023-4220

CVE-2023-4220 PoC Chamilo LMS Unauthenticated Big Upload File RCE This repository contains a Proof of Concept PoC for CVE-2023-4220 , a Remote Code Execution RCE vulnerability affecting Chamilo LMS. This vulnerability allows unauthenticated attackers to exploit a large file upload feature, leadin...