CVE-2023-51409

CVE-2023-51409 AI Engine: ChatGPT Chatbot = 1.9.98 - Carga Arbitraria de Archivos No Autenticada a través de restupload Descripción: El plugin AI Engine: Chatbots, Generadores, Asistentes, GPT 4 y más! para WordPress es vulnerable a cargas arbitrarias de archivos debido a la falta de validación d...

CVE-2021-42669

CVE-2021-42669 CVE-2021-42669 - 远程代码执行漏洞，通过工程师在线门户系统中的无限制文件上传实现。 技术描述： 工程师在线门户系统中存在无限制文件上传漏洞。攻击者可利用此漏洞在受影响的Web服务器上获得远程代码执行。 一旦上传头像，该头像将被上传到 /admin/uploads/ 目录，并且所有用户均可访问。 通过上传一个简单的PHP webshell，攻击者可以在Web服务器上获得远程代码执行。 受影响组件 - 漏洞页面 - teacheravatar.php CVE-2021-42669.py 用法 - root@kitploit: Upload a...

spip-cve-2023-27372-rce

SPIP CVE-2023-27372 Unauthenticated RCE Exploit Web Shell Upload This Python script exploits CVE-2023-27372, an unauthenticated remote code execution vulnerability in SPIP CMS versions prior to 4.2.1. It leverages a cache poisoning flaw in the password reset mechanism to upload a web shell and...

CVE-2024-53677

CVE-2024-53677: Apache Struts 路径遍历导致远程代码执行漏洞 在 Apache Struts 中发现了一个严重的 CVE-2024-53677 安全漏洞，允许攻击者操纵文件上传参数，可能导致未经授权的路径遍历和远程代码执行（RCE）。 用法 安装 PIP 包： root@kitploit: python3 -m venv .venv source .venv/bin/activate pip install -r requirements.txt 然后，运行利用脚本，例如： root@kitploit: python3 exploit.py --url...

CVE-2026-66492

文件上传目标中的路径遍历 PhocaCommander ≤ 6.1.3 — 已认证管理员可在 Web 根目录之外写入文件 摘要 PhocaCommander 中的文件上传处理程序从攻击者可控的 base64 编码 folder 参数构造目标路径，且没有任何路径边界验证。经过身份验证的管理员可以将文件上传到 Web 根目录之外、Web 服务器进程可写的任意位置。 已在实验室确认：使用 folder=Li4vLi4vLi4vdG1w（即 ../../../tmp）上传时，上传的文件会被放置在 /tmp/——位于 /var/www/html/ 之外——且属主为 www-data。在生产环境的...

CVE-2026-Pending-Flask-Uploads-Path-Traversal-PoC

CVE-2026-XXXXX Pending: Path Traversal in Flask-Uploads Vulnerability Information Product : Flask-Uploads Version : 0.2.1 and potentially older versions Vulnerability Type : Path Traversal Directory Traversal CWE-ID : CWE-22 Severity : HIGH CVSS 7.5 Impact : Arbitrary File Write, Remote Code...

CVE-2026-Pending-Django-Summernote-RCE

CVE-2026-XXXXX（待定）：django-summernote 任意文件上传（RCE） 本仓库包含一个针对 django-summernote 0.8.20.0（及更早版本）中发现的条件远程代码执行（RCE）漏洞的概念验证（PoC）。 漏洞详情 产品 ：django-summernote 版本 ：= 0.8.20.0 类型 ：不受限制的文件上传（CWE-434） 严重性 ：高（CVSS 7.2） 影响 ：远程代码执行（RCE） 描述 该漏洞源于 setup.py 中未严格强制依赖，以及 forms.py 中的回退逻辑。 django-summernote 包将 Pillow...

XSS2Shell-CVE-2026-64638

XSS2Shell Multi-Target Scanner Developer: YogaGymn PoC/scanning utility for authorized WordPress security testing. The project contains a single-target exploitation workflow and a concurrent multi-target scan-only mode. Important: Use this project only on WordPress installations that you own or...

CVE-2026-1357

CVE-2026-1357 — WPvivid Backup & Migration ≤ 0.9.123 Upload Arbitrário de Arquivo Não Autenticado → RCE PoC para CVE-2026-1357 CVSS 9.8 Crítico, CWE-434: um upload arbitrário de arquivo não autenticado no plugin WPvivid Backup & Migration para WordPress que leva à execução remota de código...

CVE-2026-41651

CVE-2026-41651 In breve: Carica sul target, poi esegui python3 exploit.py...

CVE-2026-32475

🔴 CVE-2026-32475 — Elementor Pro Unrestricted File Upload → RCE Critica vulnerabilità di Unrestricted File Upload in Elementor Pro Potenzialmente in grado di portare a Remote Code Execution RCE ⚠️ Panoramica CVE-2026-32475 è una vulnerabilità critica che interessa Elementor Pro , un plugin...

CVE-2025-70559

cambia la directory di upload nello script python python3 exploit.py LHOST LPORT...

CVE-2025-32140

🚨 CVE-2025-32140 – WP Remote Thumbnail Exploit Arbitrary File Upload 📝 Beschreibung CVE-2025-32140 ist eine kritische Sicherheitslücke im WP Remote Thumbnail -Plugin für WordPress. Sie ermöglicht es authentifizierten Angreifern mit Beitragsersteller- oder höheren Berechtigungen, beliebige Dateien...

CVE-2026-82472

Documenso before 2.13.0 accepts PDF file uploads on the /api/files/upload-pdf endpoint without requiring authentication, session tokens, or API credentials. Unauthenticated attackers can upload arbitrary PDF files indefinitely to exhaust storage resources or fill the database with unlinked docume...

CVE-2024-48591

CVE-2024-48591 Divulgazione della vulnerabilità: XSS in Inflectra SpiraTeam 7.2.00 Descrizione Inflectra SpiraTeam versione 7.2.00 è vulnerabile a Cross-Site Scripting XSS attraverso il caricamento di file SVG appositamente creati, che possono eseguire JavaScript quando visualizzati direttamente...

CVE-2026-5718-Lab

CVE-2026-5718 Laboratório Docker Local Laboratório Docker local apenas local que compara a versão vulnerável e a corrigida para CVE-2026-5718 , que afeta o plugin WordPress Drag and Drop Multiple File Upload for Contact Form 7. Este laboratório demonstra a diferença entre a versão vulnerável...

CVE-2024-56264

CVE-2024-56264 Exploit per WordPress ACF City Selector - Caricamento Arbitrario di File CVE-2024-56264 Panoramica Questa repository contiene un exploit per CVE-2024-56264 , una vulnerabilità di Caricamento Arbitrario di File presente nel plugin WordPress ACF City Selector versioni = 1.14.0. Quest...

cve-2023-4220-poc

CVE-2023-4220 Chamilio exploit PoC Senza vergogna copiato da Direttamente ispirato da: https://starlabs.sg/advisories/23/23-4220/ Utilizzo: root@kitploit: Chamilio CVE-2023-4220 POC Exploit positional arguments: url The Chamilio Url. e.g. http://example.com options: -h, --help show this help...

CVE-2026-82472 Documenso before 2.13.0 Unauthenticated File Upload via /api/files/upload-pdf

Documenso before 2.13.0 accepts PDF file uploads on the /api/files/upload-pdf endpoint without requiring authentication, session tokens, or API credentials. Unauthenticated attackers can upload arbitrary PDF files indefinitely to exhaust storage resources or fill the database with unlinked docume...

CVE-2026-82472

Documenso before 2.13.0 exposes the /api/files/upload-pdf endpoint without requiring authentication, session tokens, or API credentials. This allows unauthenticated attackers to upload arbitrary PDF files indefinitely, potentially exhausting storage resources or filling the database with unlinked...