85742 matches found
wordpress-rce-vapt-cve-2020-25213
WordPress RCE Exploitation & Mitigation CVE-2020-25213 📌 Project Overview This project was developed as part of the IE4012 – Offensive Hacking Tactics & Strategies module. It demonstrates a full cybersecurity attack lifecycle in a controlled lab environment, including: Social engineering attack...
CVE-2026-4885
CVE-2026-4885 – Piotnet Addons for Elementor Pro Mass Exploit Unauthenticated arbitrary file upload leading to Remote Code Execution RCE in Piotnet Addons for Elementor Pro ≤ 7.1.70. This tool is designed for mass exploitation – feed it a list of targets, and it will automatically: Detect the...
Magnolia-CMS-6.2.19-Stored-Cross-Site-Scripting-CVE-2022-33098
Magnolia CMS = 6.2.19 Stored Cross Site Scripting CVE-2022-33098 Table of Contents 1. Overview 2. Detailed Description 3. Proof of Concept 4. Solution 5. Disclosure Timeline 6. References 7. Credits 8. Legal Notices Overview Revision: 1.0 Impact: Stored cross-site scripting in Magnolia CMS 6.2.19...
CVE-2025-58440
CVE-2025-58440 Remote Code Execution RCE via Polyglot File Attack and Null Byte Injection on Laravel FileManager Overview The unisharp/laravel-filemanager package versions 2.11 are vulnerable to Remote Code Execution RCE due to improper file type validation during file uploads. The vulnerability...
CVE-2026-54337-PoC
CVE-2026-54337 PoC CVE-2026-54337 - Unauthenticated File Write/Overwrite in fireshare test.mp4 Step 2 : Run the following curl command make sure to change the placeholder $ curl -s -w "HTTP %httpcode\n" \ -F "file=@;filename= -selectstreams v.mp4" \ -F "folder=testfolder -o " ...
CVE-2026-0740
CVE-2026-0740 Ninja Forms File Uploads = 3.3.26 - Subida de archivos arbitraria no autenticada a RCE Exploit para CVE-2026-0740 descubierta por Selim Lanouar whattheslime. Para una inmersión técnica completa, lea el artículo completo en el blog de Lexfo. Descargo de responsabilidad Este repositor...
CVE-2026-2942
ProSolution WP Client — Unauthenticated File Upload & RCE Scanner Plugin: prosolution-wp-client Affected Version: Vulnerability Type: Unauthenticated Arbitrary File Upload → Remote Code Execution Risk Level: 🔴 Critical CVSS 9.8 Requirement: Public page containing prosolfrontend shortcode 📌 About...
CVE-2026-48907
CVE-2026-48907 CVE-2026-48907 is a critical improper access control vulnerability in the JCE editor extension for Joomla. It allows unauthenticated attackers to create new editor profiles, which can ultimately lead to arbitrary PHP file upload and remote code execution on affected systems Also if...
CVE-2026-0740-mass
CVE-2026-0740 — Mass-Target Exploit Engine Author: 0xNuts Contributor: Cursor Repository: https://github.com/ExDev994/CVE-2026-0740-mass PoC for CVE-2026-0740: Ninja Forms File Uploads = 3.3.26 — Unauthenticated Arbitrary File Upload which can lead to RCE. Original vulnerability discovered by Sél...
CVE-2021-21972
CVE-2021-21972 CVE-2021-21972 Tested against VMware VCSA 6.7 create ssh keypair ssh-keygen -t rsa -f vcsa.key -N '' create tarbal with ../../../../../home/vsphere-ui/.ssh/authorizedkeys python2 evilarc.py -d 5 -p 'home/vsphere-ui/.ssh' -o unix -f evil.tar authorizedkeys mv evil.tar evil.ova uploa...
CVE-2026-5718
CVE-2026-5718 CVE-2026-5718: Subida de archivos no autenticada a RCE en el plugin DnD Upload CF7 CVE-2026-5718 — Escáner de subida de archivos DnD CF7 a RCE Plugin: Drag and Drop Multiple File Upload for Contact Form 7 Slug del plugin: drag-and-drop-multiple-file-upload-contact-form-7 ID CVE:...
CVE-2026-48939
CVE-2026-48939 — iCagenda Joomla RCE Exploit Pre-Auth Arbitrary File Upload → PHP Code Execution Overview CVE-2026-48939 is a CVSS 10.0 critical vulnerability in the iCagenda events calendar extension for Joomla. The frontend event registration form's file attachment feature enforces access...
CVE-2020-14008
CVE-2020-14008 - ManageEngine Applications Manager RCE Authenticated Remote Code Execution via Arbitrary File Upload in Zoho ManageEngine Applications Manager versions Examples Basic python3 cve-2020-14008.py https://192.168.100.2:8443 admin admin 192.168.100.3 1337 Exploit Flow 1. Login -...
CVE-2025-7441
CVE-2025-7441 StoryChief 1.0.42 - Arbitrary File Upload Vulnerability CVE-2025-7441 - Technical summary Affected component: StoryChief WordPress plugin Vulnerability type: Unauthenticated arbitrary file upload Vulnerable endpoint: /wp-json/storychief/webhook Root cause: The plugin accepts a JSON...
CVE-2026-4883
CVE-2026-4883: Piotnet Forms Pro = 2.1.40 - Unauthenticated Arbitrary File Upload → RCE The vulnerability stems from inadequate file type validation in the piotnetformsajaxformbuilder function. The plugin employs an incomplete extension blacklist blocking only php, phpt, php5, php7, and exe while...
CVE-2023-2825-PoC
CVE-2023-2825-PoC Proof-of-concept for CVE-2023-2825, an arbitrary file read vulnerability in GitLab CE/EE 16.0.0. The script logs in with a valid GitLab account, creates the required public nested group structure, creates a public project, uploads an attachment, and uses the vulnerable upload pa...
CVE-2025-69212-PoC
CVE-2025-69212-PoC https://github.com/advisories/GHSA-25fp-8w8p-mx36 OpenSTAManager versions Usage CVE-2025-69212.py -h -u URL -C COOKIE options: -h, --help show this help message and exit -u, --url URL target url, eg http://127.0.0.1 -C, --cookie COOKIE cookie value...
CVE-2026-39770
Unauthenticated Arbitrary File Upload in Doctreat = 1.7.0 versions...