EUVD-2026-64745

DJI drones contain an FTP service that uses hardcoded credentials shared across affected models and permits authenticated users to upload files without limits on file size, file count, or total storage consumed in /blackbox/upgrade/, as well as overwrite existing files in that directory. An...

PanaceaSoft-0day-Exploit

PanaceaSoft-0day-Exploit Exploit 0day PanaceaSoft todos os produtos https://packetstormsecurity.com/files/157869/PanaceaSoft-Shell-Upload.html sem write-up leia: PHP Upload Handler do jQuery File Upload...

proxylogon-exploit

proxylogon Proof-of-concept-Exploit für CVE-2021-26855 und CVE-2021-27065, der eine nicht authentifizierte Remote-Codeausführung auf Microsoft Exchange ermöglicht, wie in den folgenden Ressourcen beschrieben: https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers...

Bypass-File-Upload-on-Koken-CMS

Koken CMS पर फ़ाइल अपलोड बाइपास करें यह रिपॉज़िटरी बताती है कि Koken CMS - 0.22.24 प्रमाणित पर फ़ाइल अपलोड प्रतिबंधों को कैसे बाइपास किया जाए। Koken CMS के बारे में Koken एक निःशुल्क सामग्री प्रबंधन प्रणाली है जो फोटोग्राफरों, डिज़ाइनरों और कलाकारों के लिए डिज़ाइन की गई है। वेबसाइट:...

Unrestricted-File-Upload-on-SiteMagic-CMS-4.4.2

Upload di file senza restrizioni su SiteMagic CMS 4.4.2 Questo repository descrive come sfruttare la vulnerabilità di upload di file senza restrizioni su SiteMagic CMS 4.4.2 Informazioni su SiteMagic CMS 4.4.2 Sito web: https://sitemagic.org/ Download: https://sitemagic.org/Download.html PoC -...

Limesurvey-RCE

Limesurvey-RCE LimeSurvey RCE autenticato Prova di concetto: 1. Crea i tuoi file config.xml e i file della reverse shell php 2. Crea un archivio con questi file 3. Accedi con le credenziali 4. Vai su Configurazione - Plugin - Carica e installa 5. Scegli il tuo file zippato 6. Carica 7. Installa 8...

exploits

exploits Le PoC pubblicate sono disponibili su exploitdb.com Patient Appointment Scheduler System v1.0: Inbit Messenger v4.6.0:...

CVE-2016-10204_Webshell

CVE-2016-10204Webshell Uno script bash che dimostra lo sfruttamento manuale di CVE-2016-10204 contro un endpoint target, portando al caricamento di una webshell php. Attualmente, la variabile webshell è impostata per un payload MySQL. Può essere sostituita con qualsiasi backend sia necessario...

CVE-2026-79653

In Eclipse SW360 versions 19.0.0, 19.1.0, 19.2.0, 20.0.0, 20.1.0, if the system is configured to use file system storage with config key enable.attachment.store.to.file.system, the attacker can manipulate the filename upon upload and can essentially cause arbitrary file path traversal. The...

CVE-2026-78251

DJI drones contain an FTP service that uses hardcoded credentials shared across affected models and permits authenticated users to upload files without limits on file size, file count, or total storage consumed in /blackbox/upgrade/, as well as overwrite existing files in that directory. An...

CVE-2023-4861-PoC

CVE-2023-4861 PoC Questo repository contiene una prova di concetto in Python per CVE-2023-4861 , un problema di esecuzione remota di codice autenticato nel plugin WordPress File Manager Pro - Filester. Riepilogo della vulnerabilità CVE: CVE-2023-4861 Prodotto: File Manager Pro - Filester filester...

EUVD-2026-67130

In Eclipse SW360 versions 19.0.0, 19.1.0, 19.2.0, 20.0.0, 20.1.0, if the system is configured to use file system storage with config key enable.attachment.store.to.file.system, the attacker can manipulate the filename upon upload and can essentially cause arbitrary file path traversal. The...

CVE-2026-79653

In Eclipse SW360 versions 19.0.0 through 20.1.0 , when the system is configured to store attachments on the file system via the config key enable.attachment.store.to.file.system , an authenticated attacker can manipulate the filename during upload to achieve arbitrary file path traversal . The CV...

CVE-2026-79653

In Eclipse SW360 versions 19.0.0, 19.1.0, 19.2.0, 20.0.0, 20.1.0, if the system is configured to use file system storage with config key enable.attachment.store.to.file.system, the attacker can manipulate the filename upon upload and can essentially cause arbitrary file path traversal. The...

CVE-2026-79653

In Eclipse SW360 versions 19.0.0, 19.1.0, 19.2.0, 20.0.0, 20.1.0, if the system is configured to use file system storage with config key enable.attachment.store.to.file.system, the attacker can manipulate the filename upon upload and can essentially cause arbitrary file path traversal. The...

WordPress Workeera plugin < 1.0.6 - Subscriber+ Arbitrary File Upload vulnerability

Subscriber+ Arbitrary File Upload vulnerability discovered by Erwan LR WPScan in WordPress Plugin Workeera versions 1.0.6...

By-Poloss..-..CVE-2026-18080

CVE-2026-18080 — ERP Complete HR, Accounting & CRM Suite = 1.17.7 Upload Arbitrário de Arquivo Não Autenticado via Anexo de E-mail do CRM Email Connect Path Traversal → RCE...

hdwebmobile-photo-video-reviews

HDWebmobile Avaliações com Foto e Vídeo Um plugin WooCommerce que permite aos clientes anexar fotos e vídeos curtos às suas avaliações de produtos, exibidos diretamente na lista de avaliações na página do produto. WordPress.org: https://wordpress.org/plugins/hdwebmobile-photo-video-reviews/...

CVE-2023-4861-PoC

CVE-2023-4861 PoC Este repositório contém uma prova de conceito em Python para CVE-2023-4861 , uma vulnerabilidade de execução remota de código autenticada no plugin WordPress File Manager Pro - Filester. Resumo da Vulnerabilidade CVE: CVE-2023-4861 Produto: File Manager Pro - Filester filester...

CVE-2026-5615

CVE-2026-5615 — VvvebJs Cross-Site Scripting Armazenado RXSS Visão Geral Este repositório contém um script de prova de conceito PoC em Python que demonstra uma vulnerabilidade de Cross-Site Scripting Armazenado RXSS que afeta o VvvebJs ⚠️ Este projeto destina-se estritamente a testes de segurança...