sangsenimanwartefak/cve-2025-6440Exploit for CVE-2025-6440: unauthenticated arbitrary file upload in WooCommerce Designer Pro WordPress plugin, enabling RCE via malicious PHP upload.
sangsenimanwartefak/cve-2026-45034PoC exploit for PHPSpreadsheet's phar:// deserialization vulnerability, bypassing prohibitWrappers to achieve remote code execution on vulnerable PHP…
ch4120n/cve-2026-3891PoC for CVE-2026-3891 – Unauthenticated File Upload RCE in Pix for WooCommerce ≤ 1.5.0. Automated nonce retrieval, PHP upload, and command execution.
syfi/panaceasoft-0day-exploitPanaceaSoft [all products] 0day exploit
febinrev/tinyfilemanager-2.4.3-exploitA Path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager Project's Tiny File Manager <= 2.4.6…
ianxtianxt/vbulletin-5.x-0day-pre-auth-rce-exploit
d0n601/cve-2026-7537MDJM Event Management <= 1.7.8.3 - Authenticated (Administrator+) Arbitrary File Upload via 'mdjm_email_upload_file' Parameter
owasp/vulnerable-web-applicationOWASP Vulnerable Web Application Project https://github.com/hummingbirdscyber
randomrobbiebf/cve-2024-52433My Geo Posts Free <= 1.2 - Unauthenticated PHP Object Injection
dirac231/cve-2024-40498Blind SQL Injection to RCE in a PHP open source application
mkelepce/cve-2020-13094Dolibarr 11.0.3 - Persistent Cross-Site Scripting
mbadanoiu/cve-2020-12640CVE-2020-12640: Local PHP File Inclusion via "Plugin Value" in Roundcube Webmail
chiefyoru/cve-2026-48939_pociCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and…
