CVE-2026-48908-SP-Page-Builder-Joomla

CVE-2026-48908: SP Page Builder Joomla Unauthenticated RCE Proof of Concept exploit for CVE-2026-48908, an unauthenticated Remote Code Execution vulnerability in Joomla SP Page Builder component. Vulnerability Overview CVE-2026-48908 is a critical security vulnerability that allows unauthenticate...

CVE-2025-49071

CVE-2025-49071 Flozen 1.5.1 - Unauthenticated Arbitrary File Upload Description : Flozen Theme 1.5.1 - Unauthenticated Arbitrary File Upload Description The Flozen Theme for WordPress versions up to and including 1.5.1 is vulnerable to unauthenticated arbitrary file upload, due to missing...

CVE-2020-36842

CVE-2020-36842 CVE-2020-36842 - Vulnérabilité de téléchargement arbitraire de fichiers du plugin WPvivid Aperçu Identifiant CVE : CVE-2020-36842 Date de divulgation / mise à jour : 16 octobre 2024 Plugin concerné : WPvivid - Migration, Sauvegarde, Staging Versions concernées : Jusqu'à la version...

CVE-2025-24071-Exploit

CVE-2025-24071-Exploit Đây chỉ là tài liệu mang tính chất học tập. Chỉ xem tham khảo và đừng làm phiền chính quyền. This content is for educational purposes only. Use for reference only and do not contact the police. Vulnerability Details CVE ID : CVE-2025-24071 Vulnerable System : NTLM Hash Leak...

CVE-2025-24071-POC-NTLMHashDisclosure-

CVE-2025-24071-POC-NTLMHashDisclosure Triggers automatic SMB authentication to an attacker-controlled share. No interaction required — Windows Explorer initiates this NTLM authentication automatically. Results in NTLMv2 hash leakage information disclosure. Affects Windows 10/11 all versions,...

CVE-2025-24071-msfvenom

CVE-2025-24071: NTLM Hash Leak via .library-ms File Metasploit Module This repository contains a Metasploit module to exploit CVE-2025-24071, a vulnerability in Windows Explorer that leaks NTLM hashes when a malicious .library-ms file is extracted from a ZIP archive. Developed by: FOLKS-IWD...

winDED

winDED python का उपयोग करके CVE-2023-38831 के लिए कस्टम एक्सप्लॉइट। परिचय: WinRAR एक आर्काइविंग सॉफ्टवेयर है जो उपयोगकर्ताओं को फाइल आर्काइव और फाइलों/फोल्डरों के ज़िप किए गए संस्करण बनाने की अनुमति देता है, ताकि उपयोगकर्ता आसानी से फाइलों/फोल्डरों को स्थानांतरित कर सकें या उन्हें संपीड़ित आकार म...

evilarc

evilarc الغرض يتيح لك evilarc إنشاء ملف zip يحتوي على ملفات تتضمّن أحرف اجتياز الدليل directory traversal في مسارها المضمّن. تمنع معظم برامج الضغط التجارية مثل winzip وغيرها استخراج ملفات zip التي تحتوي ملفاتها المضمّنة على مسارات بأحرف اجتياز الدليل. غير أنّ العديد من مكتبات تطوير البرمجيات لا...

EUVD-2026-68800

elFinder: ZIP extraction bypasses uploadDeny MIME filter allowing PHP file upload RCE...

elFinder: ZIP extraction bypasses uploadDeny MIME filter allowing PHP file upload (RCE)

Summary elFinder provides uploadDeny and uploadAllow options in its connector configuration to restrict which MIME types may be uploaded. When uploadDeny includes text/x-php, direct upload of .php, .phtml, and .phar files is correctly blocked. However, the extract command ZIP decompression...

GHSA-GXMJ-R5RF-GGWQ elFinder: ZIP extraction bypasses uploadDeny MIME filter allowing PHP file upload (RCE)

Summary elFinder provides uploadDeny and uploadAllow options in its connector configuration to restrict which MIME types may be uploaded. When uploadDeny includes text/x-php, direct upload of .php, .phtml, and .phar files is correctly blocked. However, the extract command ZIP decompression...

NLTK: Downloader.download follows hardlinks and overwrites outside-root files

Summary NLTK's downloader now blocks symlink escapes during ZIP extraction, but it still treats pre-existing hardlinks inside the install tree as ordinary in-root files. A normal package install can therefore overwrite an outside-root inode through that hardlink. Details - Vulnerability type:...

GHSA-F794-5JV7-7672 NLTK: Downloader.download follows hardlinks and overwrites outside-root files

Summary NLTK's downloader now blocks symlink escapes during ZIP extraction, but it still treats pre-existing hardlinks inside the install tree as ordinary in-root files. A normal package install can therefore overwrite an outside-root inode through that hardlink. Details - Vulnerability type:...

cve-2003-0282

यह Info-ZIP समूह के पोर्टेबल UnZip zipfile-निष्कर्षण प्रोग्राम और संबंधित उपयोगिताओं के 22 मई 2004 के सार्वजनिक रिलीज़ के लिए README फ़ाइल है। unzip551.zip पोर्टेबल UnZip, संस्करण 5.51, स्रोत कोड वितरण unzip551.tar.Z उपरोक्त के समान, लेकिन compress'd tar प्रारूप में unzip551.tar.gz उपरोक्त के समा...

CVE-2025-65346

CVE-2025-65346 – Authenticated Path Traversal From UnZip Function Leading to Arbitrary File Write in laravel-file-manager v3.3.1 🧭 Overview A Path Traversal vulnerability in the unzip/extract functionality of the affected application allows an attacker to write files to arbitrary filesystem...

CVE-2025-24071

CVE-2025-24071 This Python script is designed to demonstrate the CVE-2025-24071 vulnerability in Windows Explorer. This vulnerability allows an attacker to capture netNTLMv2 credentials from a victim without any direct interaction from the victim. Description The CVE-2025-24071 vulnerability exis...

CVE-2019-14751_PoC

CVE-2019-14751PoC A Proof of Concept for CVE-2019-14751 Vulnerability Description NLTK Downloader before version 3.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ dot dot slash in an NLTK package ZIP archive that is mishandled during extraction. For...

CVE-2025-57055

CVE-2025-57055: WonderCMS 3.5.0 में प्रमाणित दूरस्थ कोड निष्पादन भेद्यता यांत्रिकी WonderCMS v3.5.0 में एक प्रमाणित दूरस्थ कोड निष्पादन RCE भेद्यता मौजूद है। यह समस्या एप्लिकेशन द्वारा JSON डिस्क्रिप्टर के माध्यम से दूरस्थ थीम/मॉड्यूल इंस्टॉलेशन को संभालने के तरीके से उत्पन्न होती है। जब कोई...

CVE-2026-75921

The Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.1.9 via the uploadtemplatekit function. This is due to incorrect...

CVE-2026-75921 Master Addons for Elementor <= 3.1.9 - Incorrect Authorization to Authenticated (Editor+) Arbitrary File Upload via upload_template_kit AJAX ZIP Extraction

The Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.1.9 via the uploadtemplatekit function. This is due to incorrect...