CVE-2023-41425
duck-sec/cve-2023-41425Python exploit for Wonder CMS XSS-to-RCE (CVE-2023-41425) that serves malicious scripts locally, enabling remote code execution without external…
exploitationpayload-generationpenetration-testing+3
3
duck-sec/cve-2023-41425Python exploit for Wonder CMS XSS-to-RCE (CVE-2023-41425) that serves malicious scripts locally, enabling remote code execution without external…
uphiago/recon-skillsField-validated offensive security skill pack with 169 techniques for reconnaissance and penetration testing. Covers CORS, SSRF, subdomain takeover,…
k0nnect/halo-cve-2026-67919halo cms plugin 1-request rce from a url, PoC + exploit chain
ezramansor/cve-2025-32432-pocA simple PoC on the Remote Code Execution (RCE) Vulnerability of CraftCMS designated as CVE-2025-32432 written in Go
boku7/cve-2020-23839Public PoC Disclosure for CVE-2020-23839 - GetSimple CMS v3.3.16 suffers from a Reflected XSS on the Admin Login Portal
mbanyamer/cve-2026-3395-maxsite-cms-unauthenticated-rceProof-of-concept exploit for unauthenticated remote code execution in MaxSite CMS <= 109.1 via MarkItUp editor AJAX endpoints, with detection and…
d3vn0mi/cve-2016-16113-poccve-2016-16113
sromanhu/pluck-cms-stored-xss---installationpluck CMS 4.7.18 is affected by a Multiple Stored Cross-Site Scripting (XSS) vulnerability that allows attackers to execute arbitrary code via a…
howiehz/cve-2025-70886A Proof of Concept (PoC) exploit for CVE-2025-70886, a persistent denial-of-service vulnerability in Halo CMS (v2.22.4 and earlier) that allows…
lorenzocamilli/cve-2026-45332-pocProof-of-concept exploit for CVE-2026-45332, a broken access control in Automad CMS allowing unauthenticated dump of admin bcrypt hashes and TOTP…
shadowr-root/fuel-cms-cve-2018-16763-python3-portMaintained Python 3 port of the original FUEL CMS CVE-2018-16763 proof-of-concept.
ghost-nemesis/cve-2021-20837-pocProof-of-concept exploit for CVE-2021-20837, a remote code execution vulnerability in MovableType CMS. Demonstrates exploitation technique for…
diegaccio/craft-cms-exploitPython exploit for Craft CMS CVE-2023-41892 Remote Code Execution vulnerability, delivering a PHP reverse shell for authorized penetration testing.
groppoxx/cve-2020-25042-pocPoC for CVE-2020-25042: automated Mara CMS 7.5 authenticated PHP upload to RCE, with login hash handling, shell reuse, custom payload support, and…
c0gnit00/cve-2025-32432Exploit, POC for CVE-2025-32432, CraftCMS2Shell
bluetoothstrawberry/cve-2021-21425working exploit for the old cve-2021-21425 grav cms 1.7.10 vuln
0xdtc/pluck-cms-v4.7.18-remote-code-execution-cve-2023-50564Bash exploit automating authenticated remote code execution in Pluck CMS 4.7.18 via malicious ZIP upload, triggering a PHP reverse shell for…
shivanshkuntal/exploitation-of-a-remote-code-execution-vulnerability--cve-2024-7954-Exploitation of a Remote Code Execution vulnerability- (CVE-2024-7954)