CVE-2025-43960
far00t01/cve-2025-43960PHP Object Injection exploit for Adminer <4.8.1 via Monolog, causing Denial of Service through crafted serialized payloads. Includes PoC, CVSS…
code-analysisexploitationpayload-generation+2
1
far00t01/cve-2025-43960PHP Object Injection exploit for Adminer <4.8.1 via Monolog, causing Denial of Service through crafted serialized payloads. Includes PoC, CVSS…
andhrimnirr/mintinstall-object-injectionDemonstrates a Python object injection and arbitrary code execution exploit in Linux Mint's software manager (CVE-2019-17080) via unsafe pickle…
d3sca/cve-2024-52302PoC exploit for CVE-2024-52302: unrestricted file upload in common-user-management Spring Boot app leading to remote code execution via…
nanowraith/cve-2024-31982Proof-of-concept exploit for CVE-2024-31982: Java Server-Side Template Injection (SSTI) leading to remote code execution via Groovy payload injection.
d0n601/cve-2025-12973S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator <= 1.7.7 - Authenticated (Editor+) Arbitrary File Upload
d0n601/cve-2025-12673Flex QR Code Generator <= 1.2.6 - Unauthenticated Arbitrary File Upload
d0n601/cve-2025-13374Kalrav AI Agent <= 2.3.3 - Unauthenticated Arbitrary File Upload via kalrav_upload_file AJAX Action
dharan10/cve-2022-40471Authenticated file upload remote code execution exploit for Clinic's Patient Management System (CPMS). Uploads a malicious PHP shell via profile…
huangzccn/cve-2025-55182Proof-of-concept exploit for CVE-2025-55182, demonstrating remote code execution via multipart form data injection targeting Node.js vm and…
fatkz/cve-2025-24813Proof-of-concept exploit for CVE-2025-24813, achieving remote code execution on Apache Tomcat via session deserialization and partial PUT requests.
kai-one001/-cve-2015-10137-wordpress-n-media-website-contact-form-with-file-upload-1.3.4Python exploit for CVE-2015-10137 targeting an arbitrary file upload vulnerability in the WordPress N-Media Website Contact Form plugin, enabling…
jx0n0/monstra_cms-3.0.4--getshellExploit for Monstra CMS 3.0.4 file upload vulnerability (CVE-2018-17418) using case-sensitivity bypass to upload a PHP webshell.
loaxert/cve-2018-15133-pocPython exploit for CVE-2018-15133, achieving remote code execution on vulnerable Laravel applications via insecure deserialization of encrypted…
ianthinus/cve-2024-4577Proof-of-concept exploit for CVE-2024-4577, a PHP CGI argument injection vulnerability enabling remote code execution via crafted HTTP requests.
kerburenthusiasm/cve-2025-49132-pocProof-of-concept exploit for CVE-2025-49132 enabling unauthenticated remote code execution in Pterodactyl Panel <= 1.11.10 via locale parameter…
d0n601/cve-2025-5961Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.116 - Authenticated (Administrator+) Arbitrary File Upload
d0n601/cve-2025-6220Ultimate Addons for Contact Form 7 <= 3.5.12 - Authenticated (Administrator+) Arbitrary File Upload via 'save_options'
d0n601/cve-2025-6586Download Plugin <= 2.2.8 - Authenticated (Administrator+) Arbitrary File Upload