CVE-2024-21546
digitalsurgn/cve-2024-21546Automated exploit toolkit and detection template for CVE-2024-21546, an unauthenticated RCE in UniSharp Laravel Filemanager, with WAF evasion and…
code-analysisexploitationpayload-development+4
digitalsurgn/cve-2024-21546Automated exploit toolkit and detection template for CVE-2024-21546, an unauthenticated RCE in UniSharp Laravel Filemanager, with WAF evasion and…
threalwinky/cve-2026-4800-pocProof-of-concept demonstrating remote code execution in lodash template via prototype pollution, with detailed analysis of the attack flow and…
moltengama/cve-2026-22686-remotecodeexecution-rce-pocProof-of-concept exploit for CVE-2026-22686, demonstrating remote code execution in Node.js ESM sandboxes via process.getBuiltinModule to bypass…
dxleryt/cve-2026-25731Proof of Concept for a Server-Side Template Injection (SSTI) vulnerability in Calibre’s Templite engine (GHSA-xrh9-w7qx-3gcc). Demonstrates arbitrary…
drkim-dev/cve-2026-25924Proof-of-concept exploit for CVE-2026-25924, demonstrating administrative remote code execution in Kanboard through a missing access control check on…
dinhvaren/cve-2026-33937Proof-of-concept exploit for CVE-2026-33937, a Handlebars AST injection vulnerability leading to remote code execution in Node.js. Demonstrates…
langbyyi/cve-2026-22785Exploit tool for CVE-2026-22785, a critical code injection in orval < 7.18.0. Provides shell command execution and file scanning to demonstrate the…
fevar54/cve-2026-0848-poc-improper-input-validationPoC de CVE-2026-0848: validacion de entrada indebida en NLTK que permite ejecucion de codigo via StanfordSegmenter.
dungsocool/cve-2026-64638Proof-of-concept exploit for CVE-2026-64638: reflected XSS in WordPress login chained with DOM clobbering to achieve admin account takeover and…
minhhk68/cve-2026-13157Proof of concept and root-cause analysis for an authenticated arbitrary file upload in WordPress Theme Demo Import leading to remote code execution…
randomrobbiebf/cve-2024-12877GiveWP – Donation Plugin and Fundraising Platform <= 3.19.2 - Unauthenticated PHP Object Injection
randomrobbiebf/cve-2024-49699ARPrice <= 4.0.3 - Authenticated (Subscriber+) PHP Object Injection
mbadanoiu/magnolia-8281MAGNOLIA-8281: FreeMarker Restriction Bypass 2 in Magnolia CMS
loaxert/cve-2018-15133-pocPython exploit for CVE-2018-15133, achieving remote code execution on vulnerable Laravel applications via insecure deserialization of encrypted…
xmyronn/cve-2026-7393-rceProof-of-concept exploit for CVE-2026-7393: unrestricted file upload in Pizzafy Ecommerce System 1.0 allowing authenticated administrators to upload…
haile01/perl_spreadsheet_excel_rce_pocPOC for RCE vulnerability in ParseExcel library, and ParseXLSX too, as a depending library
lleavesl/cve-2021-26084PoC exploit for CVE-2021-26084, an OGNL injection vulnerability in Atlassian Confluence allowing unauthenticated remote code execution via crafted…
luelueking/cve-2022-25845-in-springCVE-2022-25845 (fastjson 1.2.80) exploit for Spring environments with step-by-step PoC, file read, and arbitrary file write via Jackson/commons-io…