Tools

chiefyoru/cve-2026-48939_poc

iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and…

jfs-jfs/cve-2026-37068

Arbitrary file write in /vfm-admin/index.php?section=translations&action=update in Veno File Manager Project 4.4.9 allows an authenticated user with…

sangsenimanwartefak/cve-2026-45034

PoC exploit for PHPSpreadsheet's phar:// deserialization vulnerability, bypassing prohibitWrappers to achieve remote code execution on vulnerable PHP…

sangsenimanwartefak/cve-2025-6440

Exploit for CVE-2025-6440: unauthenticated arbitrary file upload in WooCommerce Designer Pro WordPress plugin, enabling RCE via malicious PHP upload.

sp624/cve-2024-31509

SQL Injection in computer-laboratory-management-system-using-php-and-mysql - LMS - PHP v1.0

d0n601/cve-2026-7537

MDJM Event Management <= 1.7.8.3 - Authenticated (Administrator+) Arbitrary File Upload via 'mdjm_email_upload_file' Parameter

hackergovind/cve-2025-61246

CVE-2025-61246: SQL Injection vulnerability PoC in Online Shopping System PHP

designsecurity/progpilot

PHP static application security testing (SAST) tool that performs taint analysis to detect XSS, SQL injection, and other vulnerabilities using…

lichaser/cve-2024-12484

CVE-poc

randomrobbiebf/cve-2024-52430

Lis Video Gallery <= 0.2.1 - Unauthenticated PHP Object Injection

randomrobbiebf/cve-2024-52433

My Geo Posts Free <= 1.2 - Unauthenticated PHP Object Injection

dirac231/cve-2024-40498

Blind SQL Injection to RCE in a PHP open source application

efekaanakkar/cve-2024-35511

Men Salon Management System Using PHP and MySQL