CVE-2025-12973
d0n601/cve-2025-12973S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator <= 1.7.7 - Authenticated (Editor+) Arbitrary File Upload
code-analysisexploitationpayload-generation+3
d0n601/cve-2025-12973S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator <= 1.7.7 - Authenticated (Editor+) Arbitrary File Upload
loaxert/cve-2018-15133-pocPython exploit for CVE-2018-15133, achieving remote code execution on vulnerable Laravel applications via insecure deserialization of encrypted…
kai-one001/-cve-2015-10137-wordpress-n-media-website-contact-form-with-file-upload-1.3.4Python exploit for CVE-2015-10137 targeting an arbitrary file upload vulnerability in the WordPress N-Media Website Contact Form plugin, enabling…
d0n601/cve-2025-13374Kalrav AI Agent <= 2.3.3 - Unauthenticated Arbitrary File Upload via kalrav_upload_file AJAX Action
d0n601/cve-2025-12673Flex QR Code Generator <= 1.2.6 - Unauthenticated Arbitrary File Upload
kerburenthusiasm/cve-2025-49132-pocProof-of-concept exploit for CVE-2025-49132 enabling unauthenticated remote code execution in Pterodactyl Panel <= 1.11.10 via locale parameter…
dharan10/cve-2022-40471Exploit code for Clinic patient management system v1 unauth rce cpms rce CVE-2022-40471
engranaabubakar/cve-2023-46818Proof-of-concept exploit for authenticated PHP code injection in ISPConfig <= 3.2.11, enabling remote code execution via unsanitized language file…
d0n601/cve-2025-6586Download Plugin <= 2.2.8 - Authenticated (Administrator+) Arbitrary File Upload
d0n601/cve-2025-6220Ultimate Addons for Contact Form 7 <= 3.5.12 - Authenticated (Administrator+) Arbitrary File Upload via 'save_options'
glynzr/cve-2023-50564Pluck v4.7.18 - Remote Code Execution (RCE)
d0n601/cve-2025-5961Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.116 - Authenticated (Administrator+) Arbitrary File Upload
ianxtianxt/cve-2019-11043Remote code execution exploit for CVE-2019-11043 targeting Nginx with php-fpm. Includes Go and pre-compiled exploit binaries for testing vulnerable…
sanupl/vehicle-service-management-system-multiple-file-upload-leads-to-code-executionCVE-2021-46076 - Sourcecodester Vehicle Service Management System 1.0 is vulnerable to File upload. An attacker can upload a malicious php file in…
istern/cve-2023-26262Proof-of-concept for authenticated arbitrary file upload in Sitecore 10.3, enabling webshell deployment and remote code execution via the import…
k1nakoo/cve-2024-10410Proof-of-concept exploit for CVE-2024-10410: unrestricted file upload in Online Hotel Reservation System. Demonstrates bypass of image validation via…
wudidwo/cve-2017-7504-pocProof-of-concept exploit for CVE-2017-7504 targeting JBoss 4.x JBossMQ JMS deserialization vulnerability. Includes usage help via -h flag.
rodfer0x80/log4j2-prosecutorCVE-2021-44228