CVE-2024-56249

🛠️ Эксплойт WordPress Master Toolkit CVE-2024-56249 🌟 Обзор Этот скрипт эксплуатирует уязвимость произвольной загрузки файлов в плагине WPMasterToolKit для WordPress, позволяя злоумышленнику загрузить веб-шелл на сервер. Уязвимость существует в версиях плагина -un -p -fn 📋 Параметры -u / --url:...

EUVD-2026-94793

The Bricksforge plugin for WordPress is vulnerable to unauthenticated arbitrary file upload in versions up to, and including, 3.1.8.9. This is due to insufficient validation of the attacker-controlled URL field in the 'temporaryFileUploads' parameter during form submission. An unauthenticated...

CVE-2026-85097

The Bricksforge plugin for WordPress (versions up to and including 3.1.8.9 ) is vulnerable to unauthenticated arbitrary file upload . The root cause is insufficient validation of the attacker-controlled URL field within the 'temporaryFileUploads' parameter during form submission. An unauthenticat...

CVE-2026-85097 Bricksforge <= 3.1.8.9 - Unauthenticated Arbitrary File Upload via 'temporaryFileUploads' Parameter

The Bricksforge plugin for WordPress is vulnerable to unauthenticated arbitrary file upload in versions up to, and including, 3.1.8.9. This is due to insufficient validation of the attacker-controlled URL field in the 'temporaryFileUploads' parameter during form submission. An unauthenticated...

CVE-2023-3722

CVE-2023-3722 Python PoC для CVE-2023-3722 Avaya Aura Device Services: неограниченная загрузка файлов и удаленное выполнение кода RCE. Этот скрипт использует PUT-запрос для загрузки PHP-файла с восьмизначным случайно сгенерированным именем файла. Затем он выполняет GET-запрос для получения этого...

sudowp-postgallery

SudoWP PostGallery Fork de sécurité Contributeurs : SudoWP, WP Republic Auteurs originaux : RTO GmbH Tags : gallery, security, patched, cve-2025-13543 Nécessite au moins : 5.8 Testé jusqu'à : 6.7 Version stable : 1.12.6 Licence : GPLv2 ou ultérieure Avis de sécurité Ceci est un fork renforcé sur ...

CVE-2026-38526-PoC-htb-nexus

CVE-2026-38526-PoC-htb-nexus Un script PoC pour CVE-2026-38526, RCE via une vulnérabilité de téléchargement de fichier dans le point de terminaison /admin/tinymce/upload de webkul krayin 2.2.x conçu pour htb-nexus 🛠 Démarrage rapide et utilisation 1. Clonez le dépôt : git clone...

CVE-2026-11344-RCE

Système de gestion de véhicules en PHP - Exécution de code à distance non authentifiée via téléchargement de fichier dans newdriver.php Informations sur la vulnérabilité Champ| Détails ---|--- Produit| Système de gestion de véhicules en PHP Vendeur| code-projects.org Version| V1.0 Type de...

CVE-2026-39292

CVE-2026-39292 – Falco Solutions PHPPageBuilder v0.31.0에서 임의 파일 업로드로 인한 RCE 요약: pagemanager/pagebuilder 모듈의 파일 업로드 취약점으로 인해 인증되었거나 인증되지 않은 공격자가 임의의 파일을 업로드하여 원격 코드 실행을 유발할 수 있습니다. 영향받는 버전: PHPPageBuilder v0.31.0 영향: 원격 코드 실행 공급업체: Falco Solutions 크레딧: Krishnadev P Melevila가 발견...

WordPress-File-Upload-4.24.11---Unauthenticated-Path-Traversal

WordPress-File-Upload-4.24.11---Unauthenticated-Path-Traversal CVE-2024-9047 Un outil de sécurité basé sur Python pour détecter et exploiter une vulnérabilité de lecture arbitraire de fichiers dans le plugin WordPress WP File Upload versions = 4.24.11...

CVE-2026-17196

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 6.3.316 via the uploadfiles function. This is due to missing file type validation in the uploadfiles function, which reads and applies an...

CVE-2016-16113-POC

Get RCE - Exploit pour Bludit CMS | | / / \ / | | \ \ / / ' | | | | ' | | | | | \ V /| | | | || | | | | | | | ,|/ / || ||/|| || ||| Un outil d'exploitation automatisé qui combine CVE-2019-17240 contournement d'authentification et CVE-2019-16113 téléchargement arbitraire de fichier pour obtenir...

CVE-2023-33404

CVE-2023-33404 Пользователь, имеющий права EditOwnPosts в BlogEngine.NET CMS версия 3.3.8.0 и более ранние, может загрузить вредоносный файл в жестко заданное расположение. POST-запрос к конечной точке /api/upload с параметрами "action=video", как показано на скриншоте ниже, запускает процесс...

CVE-2025-29009-POC

CVE-2025-29009-POC Плагин Medical Prescription Attachment для WooCommerce = 1.2.3 - Неаутентифицированная произвольная загрузка файлов. Смотреть демо здесь: https://youtu.be/WvW2shDBIFs...

CVE-2026-17196

The Super Forms WordPress plugin (versions up to and including 6.3.316 ) is vulnerable to Unrestricted File Type Upload via the upload_files function. The root cause is a lack of file type validation, where the application reads an attacker-controlled extensions string from the _super_elements po...

EUVD-2026-94737

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 6.3.316 via the uploadfiles function. This is due to missing file type validation in the uploadfiles function, which reads and applies an...

CVE-2026-17196 Super Forms <= 6.3.316 - Authenticated (Subscriber+) Arbitrary File Upload via 'extensions' Form Element Attribute

The Super Forms – Drag & Drop Form Builder plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 6.3.316 via the uploadfiles function. This is due to missing file type validation in the uploadfiles function, which reads and applies an...

Cisco-ASA-CVE-2025-20333-Scanner

CVE-2025-20333 Сканер Диагностический сканер на Python для Cisco ASA / FTD VPN Web Server Buffer Overflow CVE-2025-20333. CVE-2025-20333 — критическая уязвимость переполнения буфера в куче в обработчике загрузки файлов WebVPN, которая при успешной эксплуатации может привести к удаленному выполнен...

Exploit for CVE-2026-61424

CVE-2026-61424 Unauthenticated arbitrary file upload in the D...

CVE-2018-7600

Drupal 7 CVE-2018-7600 / SA-CORE-2018-002 Installer les bibliothèques requises avec : pip install requests pip install bs4 $ python3 drupa7-CVE-2018-7600.py -h ============================================================================= | DRUPAL 7 = 7.57 REMOTE CODE EXECUTION CVE-2018-7600 | | b...