CVE-2024-4577
ianthinus/cve-2024-4577Proof-of-concept exploit for CVE-2024-4577, a PHP CGI argument injection vulnerability enabling remote code execution via crafted HTTP requests.
code-analysisexploitationpayload-generation+3
ianthinus/cve-2024-4577Proof-of-concept exploit for CVE-2024-4577, a PHP CGI argument injection vulnerability enabling remote code execution via crafted HTTP requests.
glynzr/cve-2023-50564Pluck v4.7.18 - Remote Code Execution (RCE)
d0n601/cve-2025-6586Download Plugin <= 2.2.8 - Authenticated (Administrator+) Arbitrary File Upload
engranaabubakar/cve-2023-46818Proof-of-concept exploit for authenticated PHP code injection in ISPConfig <= 3.2.11, enabling remote code execution via unsanitized language file…
d0n601/cve-2025-6220Ultimate Addons for Contact Form 7 <= 3.5.12 - Authenticated (Administrator+) Arbitrary File Upload via 'save_options'
d0n601/cve-2025-5961Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.116 - Authenticated (Administrator+) Arbitrary File Upload
ianxtianxt/cve-2019-11043Remote code execution exploit for CVE-2019-11043 targeting Nginx with php-fpm. Includes Go and pre-compiled exploit binaries for testing vulnerable…
sanupl/vehicle-service-management-system-multiple-file-upload-leads-to-code-executionCVE-2021-46076 - Sourcecodester Vehicle Service Management System 1.0 is vulnerable to File upload. An attacker can upload a malicious php file in…
lvl23ht/poc-cve-2025-3914-aeropage-wordpress-file-uploadCVE-2025-3914-PoC | The Aeropage Sync for Airtable WordPress plugin (≤ v3.2.0) is vulnerable to authenticated arbitrary file uploads due to…
istern/cve-2023-26262Proof-of-concept for authenticated arbitrary file upload in Sitecore 10.3, enabling webshell deployment and remote code execution via the import…
wudidwo/cve-2017-7504-pocProof-of-concept exploit for CVE-2017-7504 targeting JBoss 4.x JBossMQ JMS deserialization vulnerability. Includes usage help via -h flag.
d0n601/cve-2024-13869Migration,Backup, Staging – WPvivid <= 0.9.112 - Authenticated (Admin+) Arbitrary File Upload via wpvivid_upload_file
rodfer0x80/log4j2-prosecutorCVE-2021-44228
d0n601/cve-2025-47550Instantio - Wordpress Plugin <= 3.3.16 - Authenticated (Admin+) Arbitrary File Upload via ins_options_save
d0n601/cve-2025-47549Ultimate Before After Image Slider & Gallery – BEAF <= 4.6.10 - Authenticated (Admin+) Arbitrary File Upload via beaf_options_save
randomrobbiebf/cve-2024-49699ARPrice <= 4.0.3 - Authenticated (Subscriber+) PHP Object Injection
randomrobbiebf/cve-2024-12877GiveWP – Donation Plugin and Fundraising Platform <= 3.19.2 - Unauthenticated PHP Object Injection
s-index/cve-2021-41078nameko Arbitrary code execution due to YAML deserialization