CVE-2026-48907
wearehackers160/cve-2026-48907CVE-2026-48907 is a critical improper access control vulnerability in the JCE editor extension for Joomla. It allows unauthenticated attackers to…
exploitationpayload-generationpenetration-testing+3
wearehackers160/cve-2026-48907CVE-2026-48907 is a critical improper access control vulnerability in the JCE editor extension for Joomla. It allows unauthenticated attackers to…
reggyraider/cve-2023-46604-rceCVE-2023-46604-RCE exploit with Linux reverse shell payload
schn1tzelme1ster/cve-2025-6002Python exploit for CVE-2025-6002 targeting authenticated arbitrary file upload in VirtueMart < 4.4.10. Logs in, uploads a PHP webshell, and triggers…
joshuaprovoste/0-click-rce-exploit-for-cve-2024-50498Unauthenticated 0-click RCE exploit for CVE-2024-50498. Exploits a code injection vulnerability in the LUBUS WP Query Console plugin to execute…
joshuaprovoste/0-click-rce-exploit-for-cve-2024-50526Unauthenticated 0-click RCE exploit for CVE-2024-50526. Exploits an arbitrary file upload vulnerability in a vulnerable WordPress form plugin to…
herantong/cve-2018-2628Python-based exploit for CVE-2018-2628 targeting Oracle WebLogic Server, providing vulnerability detection and remote shell access via JSP payload…
kai-one001/wordpress-ht-contact-cve-2025-7340-rcePython exploit for CVE-2025-7340, an unauthenticated file upload vulnerability in the WordPress HT Contact Form widget, enabling remote code…
h3x0v3rl0rd/cve-2022-41544Python exploit script for CVE-2022-41544 in GetSimple CMS. Automates API key leakage, CSRF token extraction, PHP shell upload, and reverse shell…
h3x0v3rl0rd/ms17-010_cve-2017-0143MS17-010_CVE-2017-0143
skyw4r33x/cve-2023-4226Vulnerabilidad de carga de archivos sin restricciones en **Chamilo LMS** (<= v1.11.24).
joelgmsec/invoke-stealthSimple & Powerful PowerShell Script Obfuscator
bakalmode/cve-2022-3552CVE-2022-3552 RCE with detailed exploitation steps
tenebrae93/cve-2025-3243A proof-of-concept exploit for CVE-2025-32433, a critical vulnerability in Erlang's SSH library that allows pre-authenticated code execution via…
nxploited/cve-2025-32206WordPress Processing Projects Plugin <= 1.0.2 is vulnerable to Arbitrary File Upload
b1gn0se/tomcat-cve-2025-24813Proof-of-concept exploit for Apache Tomcat CVE-2025-24813, demonstrating remote code execution via partial PUT and deserialization. Includes Docker…
gazettel/cve-2020-24186Exploit script for CVE-2020-24186 in WordPress that uploads a camouflaged PHP webshell and provides interactive or reverse shell access with optional…
0xdtc/wondercms-4.3.2-xss-to-rce-exploits-cve-2023-41425CVE-2023-41425 Refurbish
0xdtc/prestashop-cve-2024-34716Automates a CSRF attack against CVE-2024-34716 to deploy a PHP reverse shell on PrestaShop, with automated payload packaging and Netcat listener…