cve-2019-9053-py3
vedantrana73/cve-2019-9053-py3Unauthenticated time-based blind SQL injection exploit for CMS Made Simple ≤ 2.2.9 (CVE-2019-9053), ported to Python 3.
educationexploitationpassword-cracking+3
vedantrana73/cve-2019-9053-py3Unauthenticated time-based blind SQL injection exploit for CMS Made Simple ≤ 2.2.9 (CVE-2019-9053), ported to Python 3.
0xk4rth1/cve-2025-2304A critical mass assignment vulnerability in Camaleon CMS (< 2.9.1) allows authenticated low-privileged users to elevate their privileges to…
aj2108/cve-2026-8239Security write-up for an IDOR in Concrete CMS exposing conversation ratings through missing authorization on the get_rating endpoint, with root…
aj2108/cve-2026-8237In-depth IDOR write-up for Concrete CMS, covering the message_detail endpoint, missing authorization root cause, attack scenarios, impact, and fix.
kaxm23/-cve-2023-33177-Xibo CMS CVE-2023-33177 Vulnerability Tester
csuribird/cve-2025-2304This Python script exploits a critical mass assignment vulnerability in Camaleon CMS version 2.9.0, allowing any registered user to escalate their…
jagdeepsinghceh/cms-made-simple-python3Python3-converted exploit and research notes for CMS Made Simple (CVE-2019-9053) — Unauthenticated SQL Injection vulnerability. Includes original…
the8frust/cve-2025-2304Exploit for CVE-2025-2304 | Camaleon CMS versions < 2.9.1
stp1t/cve-2023-40028Python exploit for CVE-2023-40028 enabling authenticated arbitrary file read on Ghost CMS, designed for educational use and HTB machines.
r0otk3r/cve-2024-7954Unauthenticated remote command execution exploit for SPIP CMS 4.2.8 (CVE-2024-7954) with proxy support and live output retrieval.
hackhoven/strapi-rceExploit script showcasing a mixture of CVE-2019-18818 and CVE-2019-19609 for unauthenticated remote code execution in Strapi CMS.
gh0stuncle/cve-2018-16763_fuel_cms_exploitA fuel CMS exploit based on Python for RCE mentioned in CVE-2018-16763.
pasan2002/cve-2019-9053---cms-made-simple-sql-injection-exploit-modified-This is a modified version of the time-based SQL injection exploit for CMS Made Simple <= 2.2.9. The exploit was originally created by Daniele Scanu…
anirbala98/cve-2026-67206PoC exploit for Wolf CMS <= 0.8.3.1: authenticates to Admin, writes an arbitrary PHP file to /public via FileManagerController, and executes commands…
vidura2/cve-2024-46986Automated Python exploit for Camaleon CMS arbitrary file upload vulnerability (CVE-2024-46986). Supports reverse shell and command execution payloads…
binneko/cve-2025-50286Authenticated RCE exploit for Grav CMS via plugin upload, demonstrating arbitrary PHP code execution and reverse shell.
caelumisme/cve-2020-29607-pocPython 3 exploit for Pluck CMS 4.7.13 file upload restriction bypass, enabling authenticated admin to upload a PHP webshell and achieve remote code…
princeaikinsbaidoo/cve-2022-41840-pocThis is the PoC exploit for CVE-2022-41840, running Zenario