CVE-2023-50564
glynzr/cve-2023-50564Authenticated remote code execution exploit for Pluck CMS v4.7.18. Automatically creates and uploads a malicious ZIP module containing a PHP shell to…
code-analysisexploitationpayload-generation+3
glynzr/cve-2023-50564Authenticated remote code execution exploit for Pluck CMS v4.7.18. Automatically creates and uploads a malicious ZIP module containing a PHP shell to…
engranaabubakar/cve-2023-46818Proof-of-concept exploit for authenticated PHP code injection in ISPConfig <= 3.2.11, enabling remote code execution via unsanitized language file…
sanupl/vehicle-service-management-system-multiple-file-upload-leads-to-code-executionCVE-2021-46076 - Sourcecodester Vehicle Service Management System 1.0 is vulnerable to File upload. An attacker can upload a malicious php file in…
ianxtianxt/cve-2019-11043Remote code execution exploit for CVE-2019-11043 targeting Nginx with php-fpm. Includes Go and pre-compiled exploit binaries for testing vulnerable…
d0n601/cve-2025-47550Instantio - Wordpress Plugin <= 3.3.16 - Authenticated (Admin+) Arbitrary File Upload via ins_options_save
d0n601/cve-2025-47549Ultimate Before After Image Slider & Gallery – BEAF <= 4.6.10 - Authenticated (Admin+) Arbitrary File Upload via beaf_options_save
lvl23ht/poc-cve-2025-3914-aeropage-wordpress-file-uploadCVE-2025-3914-PoC | The Aeropage Sync for Airtable WordPress plugin (≤ v3.2.0) is vulnerable to authenticated arbitrary file uploads due to…
d0n601/cve-2024-13869Migration,Backup, Staging – WPvivid <= 0.9.112 - Authenticated (Admin+) Arbitrary File Upload via wpvivid_upload_file
randomrobbiebf/cve-2024-49699ARPrice <= 4.0.3 - Authenticated (Subscriber+) PHP Object Injection
randomrobbiebf/cve-2024-12877GiveWP – Donation Plugin and Fundraising Platform <= 3.19.2 - Unauthenticated PHP Object Injection
rodfer0x80/log4j2-prosecutorExploit tool for CVE-2021-44228 (Log4Shell) with LDAP/JNDI injection server, payload generation, and single-target exploitation script for testing…
benedridge/cve-2021-46703Builds proof-of-concept payloads for CVE-2021-46703, a RazorEngine template injection vulnerability, with C# and Python implementations for testing…
s-index/cve-2021-41078nameko Arbitrary code execution due to YAML deserialization
ptrstr/cve-2024-32830-pocProof-of-concept exploit for CVE-2024-32830 demonstrating file download via PHP filter chain bypassing getimagesize() restrictions using iconv and…
k1nakoo/cve-2024-10410Proof-of-concept exploit for CVE-2024-10410: unrestricted file upload in Online Hotel Reservation System. Demonstrates bypass of image validation via…
wudidwo/cve-2017-7504-pocProof-of-concept exploit for CVE-2017-7504 targeting JBoss 4.x JBossMQ JMS deserialization vulnerability. Includes usage help via -h flag.
istern/cve-2023-26262Proof-of-concept for authenticated arbitrary file upload in Sitecore 10.3, enabling webshell deployment and remote code execution via the import…
ybdegit2020/wonderpluginExploit for CVE-2020-35314 delivering a PHP code payload embedded in a ZIP file for web application exploitation.