CVE-2025-32432-PoC
ezramansor/cve-2025-32432-pocA simple PoC on the Remote Code Execution (RCE) Vulnerability of CraftCMS designated as CVE-2025-32432 written in Go
adversarial-attackexploitationpayload-generation+3
ezramansor/cve-2025-32432-pocA simple PoC on the Remote Code Execution (RCE) Vulnerability of CraftCMS designated as CVE-2025-32432 written in Go
woshidashabi1126/cve-2026-70553-pocProof-of-concept exploit for CVE-2026-70553, enabling unauthenticated RCE in MaxSite CMS via persistent PHP injection into database.php through the…
heltonpojo/cve-2025-32432Pre-auth RCE exploit for Craft CMS in Go. Grabs session/CSRF token, poisons PHP session, triggers deserialization for command execution or reverse…
sh4den/cve-2022-26265The first proof of concept of the Contao CMS RCE
s1lentf00thold/cve-2021-21425-rcePython exploit script for CVE-2021-21425 targeting Grav CMS admin panel, delivering a reverse shell via HTTP POST request with configurable LHOST and…
askiesec/cve-2025-2304-pocProof-of-concept exploit for CVE-2025-2304, a privilege escalation vulnerability in Camaleon CMS 2.9.0 via mass assignment on the password change…
caginkyr/cve-2026-5203Exploit for CVE-2026-5203 in CMS Made Simple, leveraging path traversal and arbitrary file upload to achieve remote code execution with an…
d3vn0mi/cve-2025-2304-pocProof-of-concept for CVE-2025-2304 — critical (CVSS 9.4) mass-assignment privilege escalation in Camaleon CMS.
jeanback1/cve-2025-2304-exploitPython exploit script for CVE-2025-2304, a mass assignment privilege escalation in Camaleon CMS. Automates CSRF token parsing and role parameter…
estebanzarate/cve-2018-16763-fuel-cms-1.4.1-remote-code-execution-pocPython PoC for unauthenticated remote code execution in Fuel CMS 1.4.1 via the `filter` parameter, providing an interactive shell for command…
ch35h1r3c47/cve-2022-44136-pocZenar CMS 9.3 suffers from an unrestricted file upload vulnerability in its file management module, allowing authenticated attackers (with…
kikechans/-pluck-cms-rce-cve-2023-50564📦 Pluck CMS 4.7.18 - Authenticated RCE Exploit (CVE-2023-50564). Bypass de restricciones de subida y ejecución remota. 🎯
kaxm23/exploit_cms_fuelPython3 exploit for Fuel CMS 1.4.1 Remote Code Execution (CVE-2018-16763) with Reverse Shell.
asim-qazi/rce-simplephpblog-biggiedroidCVE-2025-15495 - Arbitrary File Upload Leading to Remote Code Execution (RCE)
d3vn0mi/cve-2016-16113-poccve-2016-16113
cristibtz/cve-2025-62369This script exploits CVE-2025-62369 in Xibo CMS to execute a reverse shell command.
bahaabdelwahed/killshotA Penetration Testing Framework, Information gathering tool & Website Vulnerability Scanner
complexusprada/xibo-cms-zip-slip-rce-exploit-cve-2023-33177This exploit demonstrates a **path traversal vulnerability** in Xibo CMS (CVE-2023-33177) that allows remote code execution through malicious layout…