CVE-2023-50564
mrterrestrial/cve-2023-50564This script exploits the file upload feature in Pluck CMS v4.7.18 to upload a malicious PHP file, enabling remote access via a reverse shell. Once…
exploitationpayload-generationpenetration-testing+3
1
mrterrestrial/cve-2023-50564This script exploits the file upload feature in Pluck CMS v4.7.18 to upload a malicious PHP file, enabling remote access via a reverse shell. Once…
h3x0v3rl0rd/cve-2022-41544Python exploit script for CVE-2022-41544 in GetSimple CMS. Automates API key leakage, CSRF token extraction, PHP shell upload, and reverse shell…
pentestical/cve-2021-22204Shell script exploit for CVE-2021-22204 targeting Exiftool, generating a malicious .djvu file to achieve remote code execution on vulnerable systems.
ahmedshamsddin/cve-2025-55182Python exploit for CVE-2025-55182 in React Server Components, injecting a shell into Next.js 16.0.6 applications. Includes a vulnerable app for…
hood3drob1n/mysql-fu.rbMySQL-Fu is a Ruby based MySQL Client Script I wrote. It does most of the stuff a normal MySQL client might do: SQL Shell, Update/Delete/Drop…
d3ext/dfshellPython-based forward shell tool that creates a TTY-like interactive shell over HTTP using named pipes, enabling command execution on firewalled…
0xm4ud/proftpd_cve-2015-3306Exploit for ProFTPD 1.3.5 CVE-2015-3306 that writes a PHP backdoor to the target webroot and spawns a reverse shell for remote code execution.
housma/cve-2019-9978-social-warfare-wordpress-plugin-rceThe `swp_debug` parameter in `admin-post.php` allows remote attackers to include external files containing malicious PHP code, which are evaluated on…
ab0x90/cve-2021-44228_pocPython proof-of-concept for CVE-2021-44228 (Log4Shell) that automates exploitation via a crafted Java payload, with argparse options for customizable…
schn1tzelme1ster/cve-2025-6002Python exploit for CVE-2025-6002 targeting authenticated arbitrary file upload in VirtueMart < 4.4.10. Logs in, uploads a PHP webshell, and triggers…
husenjandev/cve-2023-422-chamilo-lms-rceRemote Code Execution for Chamilo LMS
dragonked2/cve-2024-50379-pocThis repository contains a Python script designed to exploit CVE-2024-50379, a vulnerability that allows attackers to upload a JSP shell to a…
nxploited/cve-2024-50498Exploit script for CVE-2024-50498 code injection in WordPress WP Query Console that checks vulnerability and delivers a reverse shell.
y1s4s/cve-2024-36401-pocProof-of-concept exploit for CVE-2024-36401 enabling remote code execution via HTTP requests with reverse shell payload generation and Base64…
g01d3nw01f/cve-2015-8351this script is exploit for wordpress old plugin gwolle
spidermate/jatayuStealthy standalone PHP web shell with HTTP header-based authentication, exec function switching, and undetectable design for remote command…
xxconi/cve-2026-6960Proof-of-concept exploit for CVE-2026-6960: unauthenticated arbitrary file upload in BookingPress Pro ≤ 5.6. Automates a 3-step chain to upload a PHP…