CVE-2025-4334
nxploited/cve-2025-4334Simple User Registration <= 6.3 - Unauthenticated Privilege Escalation
ctfeducationexploitation+4
nxploited/cve-2025-4334Simple User Registration <= 6.3 - Unauthenticated Privilege Escalation
cberman/cve-2023-2822-demoSimple flask application to implement an intentionally vulnerable web app to demo CVE-2023-2822.
mobetasec/cve-2024-1813-pocPoC exploit for CVE-2024-1813: PHP object injection in Simple Job Board WordPress plugin, achieving unauthenticated RCE via gadget chain. Includes…
d1se0/cve-2024-10924-bypass-mfa-wordpress-labLab environment and exploit script for CVE-2024-10924, demonstrating MFA bypass in WordPress via the Really Simple SSL plugin's skip_onboarding…
rideckszz/poc-cve-2019-9053PoC didático em Python 3 para a CVE-2019-9053, uma SQL Injection time-based blind no CMS Made Simple <= 2.2.9. Esta versão foi adaptada para uso em…
maradonam18/-cve-2025-59528-pocA simple python script to exploit CVE-2025-59528, this an Authenticated RCE vulnerability in Flowise application, a popular AI tool. That is also…
karimelsheikh1/htb-twomillion-writeupHackTheBox TwoMillion machine writeup — API abuse, command injection & CVE-2023-0386
felisha-elmer/sandbox-challenge-spring4shell-cve-2022-22965-Step-by-step walkthrough of exploiting CVE-2022-22965 (Spring4Shell) with Metasploit, deploying a C2 listener, and mitigating the vulnerability by…
imperialx1104/simple-ctf-writeupProfessional TryHackMe Simple CTF walkthrough covering enumeration, CMS Made Simple SQL Injection (CVE-2019-9053), credential recovery, SSH access,…
paulameg/simplectf-thm-walkthroughFirst CTF successfully completed! This repo documents my walkthrough of TryHackMe's Simple CTF. It covers network reconnaissance (Nmap), web…
perseus99999/cve-2019-9053-working-CMS Made Simple < 2.2.10 - SQL Injection . Actual working version
tim-karov/cmsms-sqliPython3 exploit for CVE-2019-9053 (CMS Made Simple <= 2.2.9 SQLi). No deps, time-based blind SQLi → admin creds dump. HTB Writeup owned.
pasan2002/cve-2019-9053---cms-made-simple-sql-injection-exploit-modified-This is a modified version of the time-based SQL injection exploit for CMS Made Simple <= 2.2.9. The exploit was originally created by Daniele Scanu…
behindsecurity/htb-wifinetictwo-exploitA simple python script to exploit CVE-2021-31630 on HTB WifineticTwo CTF
jtoalu/ctf-cve-2019-9053-gtfobinsStep-by-step CTF walkthrough demonstrating CVE-2019-9053 SQL injection exploitation and GTFOBins-based privilege escalation on a CMS Made Simple…
rishabh-kumar-cyber-sec/cve-2023-27163-ssrf-to-port-scanningIt is a simple script to automate internal port scanning dueto SSRF in requests-baskets v 1.2.1. this script can also assisst in solving 'SAU'…
b3nac/injuredandroidA vulnerable Android application that shows simple examples of vulnerabilities in a ctf style.
0xtensho/cve-2025-49132-pocProof-of-concept exploit for CVE-2025-49132, abusing a file inclusion vulnerability in Pterodactyl to achieve remote code execution via pearcmd.php.