Java-Compressed-file-security

Java-Compressed-file-security java web Compressed File Security Vulnerability Test environment: Windows For Apache Tomcat/8.5.16 0x01 Crafting a Directory Traversal Malicious Compressed File Code: coding=utf-8 import zipfile import sys if name == "main": try: with open"404.jsp", "r" as f: binary ...

CSRF-to-RCE-on-Backdrop-CMS

CSRF to RCE on Backdrop CMS 1.20 This PoC describe how to exploit CSRF on Backdrop CMS Version 1.20 with escalation to RCE. CVE ID CVE-2021-45268 Description The Backdrop CMS version 1.20 allows plugins to be added via ZIP files uploaded to the site. And because it does not have anti-CSRF...

CVE-2025-32118

🚀 CVE-2025-32118 - WordPress CMP Plugin RCE Exploit 🔍 Title: WordPress CMP – Coming Soon & Maintenance plugin = 4.1.13 - Remote Code Execution RCE 🗓️ Published: 2025-04-04 🔐 CWE: CWE-434 - Unrestricted Upload of File with Dangerous Type 📊 CVSS: 9.1 CRITICAL —...

CVE-2024-53691

CVE-2024-53691 https://www.qnap.com/en/security-advisory/qsa-24-28 https://vulners.com/cve/CVE-2024-53691 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N 8.7 "If exploited, the link following vulnerability could allow remote attackers who have gained user access to traverse the fi...

CVE-2024-50404

CVE-2024-50404 https://www.qnap.com/en/security-advisory/qsa-24-48 https://www.cve.org/CVERecord?id=2024-50404 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N 6.8 "A link following vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow...

CVE-2025-69212-PoC

CVE-2025-69212-PoC https://github.com/advisories/GHSA-25fp-8w8p-mx36 OpenSTAManager versions Usage CVE-2025-69212.py -h -u URL -C COOKIE options: -h, --help show this help message and exit -u, --url URL target url, eg http://127.0.0.1 -C, --cookie COOKIE cookie value...

CVE-2025-32583

🚨 CVE-2025-32583 — WordPress PDF 2 Post RCE Exploit CRITICAL Vulnerability CVE-ID: CVE-2025-32583 Severity: 9.9 CRITICAL CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 📖 Description A vulnerability in the PDF 2 Post WordPress plugin developed by termel allows Remote Code Inclusion RCE...

CVE-2026-38751

CVE-2026-38751 — OpenSTAManager Module Upload RCE Authenticated RCE via unvalidated ZIP upload in the module update endpoint. Affected: OpenSTAManager = 2.10.x Requirements pip install requests Usage Reverse shell Penelope or any listener python3 exploit.py -u http://TARGET -U admin -P admin...

CVE-2021-25094-tatsu-preauth-rce

Preauth RCE in Tatsu builder Wordpress plugin CVE-2021-25094 Simple PoC of an unauthenticated RCE in Tatsu Builder = 3.3.11 provided as an example. Full write-up here: https://darkpills.com/wordpress-tatsu-builder-preauth-rce-cve-2021-25094/ Usage: python3 exploit-rce.py -h --technique TECHNIQUE...

CVE-2025-32206

CVE-2025-32206 - WordPress Processing Projects "Unrestricted Upload of File with Dangerous Type vulnerability in LABCAT Processing Projects allows attackers to upload a web shell to a web server. This can lead to full compromise." 🧑‍💻 Exploit Description This Python exploit script targets WordPress...

CVE-2014-4725

CVE-2014-4725 this script is used to scan and exploit cve-2014-4725 vulnerability mailpoet/wysija newsletters in wordpress. features scan mode detect wordpress targets vulnerable to cve-2014-4725 exploit mode upload a zip payload to vulnerable targets installation 1. clone the repository: git clo...

ZIPFileRaider

ZIP File Raider - Burp Extension for ZIP File Payload Testing ZIP File Raider is a Burp Suite extension for attacking web application with ZIP file upload functionality. You can easily inject Burp Scanner/Repeater payloads in ZIP content of the HTTP requests which is not feasible by default. This...

CVE-2026-48908

🌐 Language / Dil 📌 Özet SP Page Builder Joomla — Kimlik doğrulamasız ZIP yükleme → RCE | ---|--- Ürün| SP Page Builder — comsppagebuilder JoomShaper Sürüm| ≤ 6.6.1 Fixed| 6.6.2+ — upload artık admin ister Auth| Unauthenticated Vektör| POST …&task=asset.uploadCustomIcon Field| customicon icon-font...

cve-2023-5966

Poc from CVE-2023-5966 Advisory EspoCRM 2.7.4 and earlier is vulnerable to an arbitrary file upload that can lead to code execution in the add extension functionality. The zip file on this repo upload a web shell to /webshell.php...

CVE-2025-2249

🔐 WordPress SoJ SoundSlides Plugin ⚠️ DISCLAIMER: This exploit is for educational and authorized testing purposes only. 📌 Vulnerability Summary Plugin: SoJ SoundSlides Affected Versions: = 1.2.2 Type: Authenticated Contributor+ Arbitrary File Upload Patch Status: ❌ No official fix available The So...

CVE-2023-5965

PoC for Espo CRM 7.2.4 CVE-2023-5965 & CVE-2023-5965 CVE-2023-5965 Advisory An authenticated privileged attacker could upload a specially crafted zip to the EspoCRM server in version 7.2.5, via the update form, which could lead to arbitrary PHP code execution. To upload the file go to...

CVE-2025-69212-PoC

CVE-2025-69212 — OpenSTAManager P7M Command Injection PoC OpenSTAManager = 2.9.8 — OS Command Injection via malicious .p7m filename in ZIP upload. File: src/Util/XML.php:100 — unsanitized $file in exec Vector: /plugins/importFEZIP/actions.php → ZIP → .p7m filename → exec"openssl smime ... -in...

CVE-2026-69212

CVE-2025-69212 — OpenSTAManager OS Command Injection RCE Proof-of-concept exploit for CVE-2025-69212 , an OS Command Injection vulnerability in OpenSTAManager ;echo ".p7m Resulting shell execution: openssl smime ... -in "invoice.p7m";;echo ".p7m" ... ^^^^^^^^^^^^ injected here Note: The forward...

CVE-2026-103529

Thelia v2.6.0 permits authenticated administrators to upload and install modules via the ZIP upload function without validating or sandboxing embedded PHP code. An attacker can include malicious PHP code in a module's install method which will then be executed upon installation, enabling remote...

EUVD-2026-97481

Thelia v2.6.0 permits authenticated administrators to upload and install modules via the ZIP upload function without validating or sandboxing embedded PHP code. An attacker can include malicious PHP code in a module's install method which will then be executed upon installation, enabling remote...