CVE-2023-46694
invisiblebyte/cve-2023-46694Proof-of-concept exploit for CVE-2023-46694: authenticated remote code execution via arbitrary file upload in Vtenext 21.02 Ckeditor file manager.
code-analysisexploitationpenetration-testing+2
4
invisiblebyte/cve-2023-46694Proof-of-concept exploit for CVE-2023-46694: authenticated remote code execution via arbitrary file upload in Vtenext 21.02 Ckeditor file manager.
motoyasu-saburi/cve-2019-12086-jackson-databind-file-readProof-of-concept exploit for CVE-2019-12086: Jackson databind deserialization vulnerability enabling arbitrary file read via rogue MySQL server when…
xiaoxiaoranxxx/cve-2025-56815Datart 1.0.0-rc.3 is vulnerable to Directory Traversal in the POST /viz/image interface, since the server directly uses MultipartFile.transferTo() to…
ph-hitachi/cve-2025-58440Remote Code Execution (RCE) via Polyglot File Attack and Null Byte Injection on Laravel FileManager
unpredictable21/halo-2.25.4-backup-write-cve-2026-67920Proof-of-concept exploit for an arbitrary file write vulnerability in Halo CMS backup restoration, enabling RCE via plugin JAR replacement or…
minhhk68/cve-2026-13157Proof of concept and root-cause analysis for an authenticated arbitrary file upload in WordPress Theme Demo Import leading to remote code execution…
moritakaaz/cve-2026-12277Frontend File Manager Plugin (WordPress) <= 23.6 - Unauthenticated Arbitrary File Deletion to RCE
lutrasecurity/cve-2022-36532Proof-of-concept exploit script for CVE-2022-36532 enabling authenticated remote code execution via file upload in Bolt CMS 5.1.12 and below.
chiefyoru/cve-2026-48939_pociCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and…
sn0x-sharma/cve-2026-18718Found a 0-Day in Ghidra: Shared Project File Became a Code Execution Vector
joshuaprovoste/0-click-rce-exploit-for-cve-2024-9932Unauthenticated 0-click RCE exploit for CVE-2024-9932. Exploits an arbitrary file upload vulnerability in the Wux Blog Editor WordPress plugin to…
ktn1990/cve-2024-51793(CVE-2024-51793) Wordpress Plugin: Computer Repair Shop <= 3.8115 - Unauthenticated Arbitrary File Upload
xxconi/cve-2026-5718CVE-2026-5718: Unauthenticated File Upload To RCE in DnD Upload CF7 Plugin
sanupl/cve-2021-46076CVE-2021-46076 - Sourcecodester Vehicle Service Management System 1.0 is vulnerable to File upload. An attacker can upload a malicious php file in…
adamshaikhma/cve-2026-3300Exploit for CVE-2026-3300, an unauthenticated stored XSS leading to RCE in Everest Forms Pro WordPress plugin, with a Python script to generate a…
sanupl/cve-2021-46078CVE-2021-46078 - An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can…
xmyronn/cve-2026-11344-rceUnauthenticated remote code execution exploit for Vehicle Management System in PHP via unrestricted file upload in newdriver.php and newvehicle.php,…
unicorn-hyh/cve-2026-31156There is a path injection vulnerability in OpenPLC-v3, which arises from the program not performing any validity checks on the file path parameters…