110148 matches found
CVE-2016-10033-PoC
CVE-2016-10033-PoC Wrote this for PentesterLab If you are from PentesterLab's don't cheat, it's alot better to learn. Hope it's useful to someone, if not to me in the future : Has interactive shell, nice argparse stuff asw Usage usage: poc.py -h --target TARGET --backdoor BACKDOOR --proxy --raw...
CVE-2025-2294
🚨 Kubio AI Page Builder = 2.5.1 - Unauthenticated Local File Inclusion 📝 Description The Kubio AI Page Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.5.1 via the kubiohybridthemeloadtemplate function. This makes it possible for...
exploit-CVE-2025-49113
CVE-2025-49113 PoC Repository Overview of CVE-2025-49113 CVE-2025-49113 is a critical vulnerability affecting Roundcube Webmail versions prior to 1.5.10 and 1.6.11. Discovered in 2025, this flaw allows remote code execution RCE through PHP Object Deserialization in the /settings/upload.php...
CVE-2017-5638
CVE-2017-5638 CVE: 2017-5638 in different formats Most of them will require you to enter the url and you might want to change the command Please issue pull requests if you can make it so you can enter a url and command! PHP - Example http://localhost/2017-5638.php?url=TARGET&cmd=command...
CVE-2026-11518-XSS
Stored XSS in Inventory System using PHP and MySQL Vulnerability Details Field| Details ---|--- Vulnerability Type| Stored Cross-Site Scripting XSS Affected Application| Inventory System using PHP and MySQL Vendor| SourceCodester Affected Version| 1.0 Affected File| register.php Parameters|...
CVE-2025-12973
S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content & Image Generator = 1.7.7 - Authenticated Editor+ Arbitrary File Upload The WordPress S2B AI Assistant plugin versions 2.47 and prior contains an arbitrary file upload vulnerability that allows authenticated WordPress users with Editor role or...
Public_Exploit-1--Wordpress-CVE-2021-29447
PublicExploit-1--Wordpress-CVE-2021-29447 CVE-2021-29447 is an authenticated XML External Entity XXE vulnerability in WordPress The vulnerability exists in the WordPress Media Library when WordPress is running on PHP 8 and the user has permission to upload media files. A specially crafted .wav fi...
WordPress_Backup_Migration-RCE_Unauthenticated
CVE-2023-6553 — The Backup Migration plugin for WordPress - Reverse Shell An extended version of Chocapikk's CVE-2023-6553 exploit that adds a one-command reverse shell mode on top of the original interactive webshell. Vulnerability CVE-2023-6553 — Unauthenticated Remote Code Execution in the...
Exploit-for-Dolibarr-17.0.0-CVE-2023-30253
POC exploit for Dolibarr example: python3 exploit.py http://example.com login password 127.0.0.1 9001 ---Reverse Shell Exploit for Dolibarr = 17.0.0 CVE-2023-30253--- positional arguments: hostname Target hostname username Username of Dolibarr ERP/CRM password Password of Dolibarr ERP/CRM lhost...
CVE-2019-11231-PoC
GetSimpleCMS CVE-2019-11231 RCE Exploit Unauthenticated Remote Code Execution exploit for GetSimpleCMS ≤ 3.3.15 Vulnerability GetSimpleCMS exposes sensitive files publicly /data/other/authorization.xml, /data/users/ allowing attackers to: 1. Leak API keys and usernames 2. Forge authentication...
CVE-2026-85097
The Bricksforge plugin for WordPress is vulnerable to unauthenticated arbitrary file upload in versions up to, and including, 3.1.8.9. This is due to insufficient validation of the attacker-controlled URL field in the 'temporaryFileUploads' parameter during form submission. An unauthenticated...
WordPress Kicker theme <= 2.2.1 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme Kicker versions = 2.2.1...
WordPress FC United theme <= 1.1.1 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme FC United versions = 1.1.1...
WordPress Jacqueline theme <= 2.22 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Jacqueline versions = 2.22...
WordPress Alliance theme <= 3.11 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Alliance versions = 3.11...
WordPress ShiftCV theme <= 3.0.14 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme ShiftCV versions = 3.0.14...
WordPress Windsor theme <= 2.10 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Windsor versions = 2.10...
WordPress Education Center theme <= 3.6.12 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Bonds in WordPress Theme Education Center versions = 3.6.12...