CVE-2026-32475 The Elementor Pro Forms File Upload field handles validation and file processing in two separate loops with different handling of empty upload entries (UPLOAD_ERR_NO_FILE). An unauthenticated attacker can submit a multipart
☆13Aug 21, 2026Updated 2 months ago
Alternatives and similar repositories for Elementor-Pro-Unauthenticated-Arbitrary-File-Upload-to-RCE
Users that are interested in Elementor-Pro-Unauthenticated-Arbitrary-File-Upload-to-RCE are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A container/VM malware that finds and exploits SSRF opportunities in a compromised cloud environment☆10Apr 10, 2022Updated 4 years ago
- Stealth hybrid URL mapper☆56Updated this week
- ☆15Sep 24, 2026Updated last month
- A collaborative web exploitation framework.☆50Oct 14, 2026Updated last week
- meowless kaspersky☆15Sep 6, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆14Jun 9, 2026Updated 4 months ago
- 🩸 Modular honeypot for pentesting training. Simulates SSH, FTP, HTTP, Telnet, SMB, MySQL & RDP. Real-time attack detection & web dashboa…☆17Updated this week
- Windfall - Unauthenticated RCE exploit chain for Windmill & Nextcloud Flow (CVE-2026-29059). Path traversal + credential leak + PostgreSQ…☆18Apr 7, 2026Updated 6 months ago
- Rogue vSphere server that captures credentials from Veeam Backup & Replication.☆17Sep 3, 2026Updated last month
- This is a portable exe version of Ncat. It is different from ncat-portable-5.59BETA1 in that it uses the latest version of Ncat (Ncat-7.9…☆14Aug 16, 2024Updated 2 years ago
- pfSense CE 2.9.0-DEVELOPMENT - High - Remote - RCE - QinQ parent-if ifconfig☆18Oct 13, 2026Updated last week
- Offline decryptor for Synology Active Backup for Business — recovers the plaintext inventory credentials (ESXi, AD, MSQL, Oracle) stored …☆18Aug 19, 2026Updated 2 months ago
- CVE-2026-45250: FreeBSD 14.4 setcred kernel buffer overflow (LPE)☆22Jul 23, 2026Updated 3 months ago
- Honeypot detection toolkit☆12Jun 14, 2026Updated 4 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- This repository is for setting up the global VPN on Linux☆10May 30, 2021Updated 5 years ago
- Fortigate VPN-SSL Honeypot☆13Jun 28, 2026Updated 3 months ago
- 434 standalone Python-3 (stdlib-only) CVE exploits, each live-validated end-to-end against real vulnerable software with a write-up and a…☆16Oct 9, 2026Updated 2 weeks ago
- Telegram CVE-2026-107181☆20Oct 10, 2026Updated 2 weeks ago
- A Windows userland tool to enumerate and classify ALPC ports, including PPL-protected processes.☆31Aug 12, 2026Updated 2 months ago
- A single archive of public exploit PoCs and vulnerability research writeups. At the time I post these, none have been reported. Feel free…☆21Sep 18, 2026Updated last month
- Exim Log Analyzer (log parser). This tool help you quickly tell what going on your Exim mail server. Who and when sended or receive mail,…☆13Aug 12, 2026Updated 2 months ago
- Use PandoraNext to Getn and Refresh ChatGPT Web Access Token☆14Jan 19, 2024Updated 2 years ago
- CVE-2023-4634☆48Mar 14, 2026Updated 7 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- PoC for CVE-2026-87902 — unauthenticated path traversal in WordPress page-template resolution (local PHP inclusion, conditional RCE) with…☆43Sep 22, 2026Updated last month
- GitLab Unauthenticated Arbitrary File Read☆29Sep 28, 2026Updated 3 weeks ago
- Design Team — assemble AI agent teams with customizable personalities☆18Apr 19, 2026Updated 6 months ago
- An agentic coding CLI. It reads your code, edits it, runs your tests, and asks when the request is ambiguous — in a terminal UI, with eve…☆15Sep 17, 2026Updated last month
- Official Scrapfly MCP server for Cursor, Claude Desktop, and any MCP-compatible client. Enterprise-grade web scraping, AI extraction, and…☆14Updated this week
- Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when a…☆64Oct 6, 2026Updated 2 weeks ago
- iOS kernel exploit toolkit | DarkSword R/W | SSV Bypass | XPF offset verification☆28Oct 17, 2026Updated last week
- Authenticates your provider (Hermes, OpenCode, or any custom OpenAI-compatible API) and runs CLIProxyAPI as a local Claude/OpenAI/Gemini/…☆24Sep 26, 2026Updated last month
- StealthBench is a benchmark for evaluating whether autonomous agents operate with the operational security (OPSEC) discipline that separa…☆13Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Config files for my GitHub profile.☆26Updated this week
- Kaze's openly available CVE vulnerability data.☆16Apr 7, 2025Updated last year
- ☆18Jul 10, 2014Updated 12 years ago
- ☆27Jun 14, 2026Updated 4 months ago
- Stream Deck plugin showing Claude session/weekly usage☆20Oct 4, 2026Updated 3 weeks ago
- ☆19Aug 12, 2019Updated 7 years ago
- ☆19Mar 14, 2026Updated 7 months ago