WordPressMassExploiter

WordPressMassExploiter Mass exploiter of CVE-2015-1579 for WordPress CMS This mass exploiter is based on CVE-2015-1579, discovered by CLAUDIO VIVIANI https://www.exploit-db.com/exploits/36554/ How it works: 1 - I use Selenium Framework to make the search on google. 2 - The results of search, are...

CVE-2023-43344-Quick-CMS-Stored-XSS---SEO-Meta-description

Quick CMS Stored XSS v6.7 Author: Sergio Description: A Cross-Site Scripting XSS vulnerabiliti in Quick CMS v6.7 allows a local attacker to execute arbitrary code via a crafted script to the to the SEO - Meta description in the Pages Menu. Attack Vectors: Scripting A vulnerability in the...

CVE-2022-41840-PoC

Zenario CMS 9.3 - Unauthenticated RCE Exploit CVE-2022-41840 An unauthenticated remote code execution RCE vulnerability affecting Zenario CMS version 9.3 and earlier. The exploit leverages a file upload vulnerability in the AJAX endpoint to upload a PHP webshell and achieve code execution...

CVE-2023-43341-Evolution-Reflected-XSS---Installation-Connection-

Evolution CMS Reflected XSS v3.2.3 Author: Sergio Description: A cross-site scripting XSS reflected vulnerability in the evolution v.3.2.3 installation process connection allows a local attacker to execute arbitrary web scripts via a crafted payload injected into the uid parameter. Attack Vectors...

-CVE-2023-43340-Evolution-Reflected-XSS---Installation-Admin-Options

Evolution CMS Reflected XSS v3.2.3 Author: Sergio Description: Multiple Cross-site scripting XSS reflected vulnerabilities in the evolution v.3.2.3 installation process Admin options allows a local attacker to execute arbitrary web scripts via a crafted payload injected into the cmsadmin,...

CVE-2023-43342-Quick-CMS-Stored-XSS---Languages-Frontend

Quick CMS Stored XSS v6.7 Author: Sergio Description: A Cross-Site Scripting XSS vulnerability in Quick CMS v6.7 allows a local attacker to execute arbitrary code via a crafted script to the to the Front and back end - Pages in the Languages Menu. Attack Vectors: Scripting A vulnerability in the...

CVE-2022-26265

CVE-2022-26265 Contao CMS RCE This repo is part of the hgrab-framework Affected product Contao CMS v1.5.0 Installation Install the app on the server user@domain: git clone https://github.com/sh4den/CVE-2022-26265.git user@domain: cd ./CVE-2022-26265/ user@domain: python3 main.py The list file mus...

cms-made-simple-python3

CMS Made Simple – Exploitation Toolkit A collection of scripts, notes, and Python3–ready exploits for CMS Made Simple CMSMS , including the famous Unauthenticated Time-Based SQL Injection – CVE-2019-9053. This repository is created and maintained by Encrypticle Jagdeep Singh as part of my...

CVE-2025-2304

Camaleon CMS -p Arguments -t, --target Base target URL -u, --username Valid low-privileged username -p, --password User password Exploit Flow 1. Retrieve login page and extract CSRF token 2. Authenticate with provided credentials 3. Access profile edit page 4. Extract password update endpoint and...

CVE-2019-9053---CMS-Made-Simple-SQL-Injection-Exploit-Modified-

CVE-2019-9053 - CMS Made Simple SQL Injection Exploit Modified Description This is a modified version of the time-based SQL injection exploit for CMS Made Simple = 2.2.9. The exploit was originally created by Daniele Scanu and has been updated for better compatibility and modern Python practices...

CVE-2022-34919

CVE-2022-34919 Contensis Content Management System prior to version 15.2.1.79 has a flaw in their 'Classic' interface that allows an unauthenticated user to upload and approve arbitrary files. By uploading an aspx file, it is possible to execute commands in the context of the web server. This...

CVE-2025-29093-Arbitrary-File-Upload

CVE-2025-29093-Arbitrary-File-Upload This repository reveals a security vulnerability discovered in Motivian Content Management System v.41.0.0. CVE-2025-29093: Arbitrary File Upload This vulnerability was reported to the vendor in accordance with responsible disclosure practices, and to MITRE,...

Ghost-CMS-Exploit

Ghost-CMS-Exploit Ghost-CMS Exploit es un script de Python. Este script primero realiza intentos de autenticación por fuerza bruta utilizando las listas de palabras proporcionadas. Si se encuentran credenciales válidas, procede a verificar la vulnerabilidad CVE-2024-23724 y genera un payload de...

CVE-2024-46209

Redaxo Security Research CVE-2024-46209, CVE-2024-46210 Redaxo CMS v5.17.1 security research Completed at 09 August 2024 Contains detailed description of: CVE-2024-46210 - Stored Cross-Site Scripting via file Upload in MediaPool module CVE-2024-46209 - Authenticated arbitrary code execution...

Exploit-for-CVE-2024-46987

Exploit-for-CVE-2024-46987 Exploit for CVE-2024-46987 usage: exploit.py -h --url URL --username USERNAME --password PASSWORD --file FILE Vulnerability Description Camaleon CMS is a content management system built on Ruby on Rails. A path traversal vulnerability in the MediaController...

CVE-2022-41544

CVE-2022-41544 Exploit Script This repository contains a script to exploit CVE-2022-41544 vulnerability in GetSimple CMS. The script performs several steps to check for vulnerabilities, leak API keys, set cookies, obtain CSRF tokens, upload a shell, and trigger the shell. Changes and Improvements...

CVE-2023-27372

Exploit CVE-2023-27372 Exploit para CVE-2023-27372 , una vulnerabilidad de ejecución remota de código no autenticada en el CMS SPIP que afecta a versiones anteriores a la 4.2.1. ⚠️ Solo con fines educativos. Utilícelo exclusivamente en sistemas de su propiedad o para los que tenga permiso explícit...

CVE-2025-29094-Multiple-Stored-Cross-Site-Scripting-XSS

CVE-2025-29094-Multiple-Stored-Cross-Site-Scripting-XSS This repository reveals a security vulnerability discovered in Motivian Content Management System v.41.0.0. CVE-2025-29094: Multiple Stored Cross-Site Scripting XSS This vulnerability was reported to the vendor in accordance with responsible...

CVE-2024-46987

CVE-2024-46987 — Camaleon CMS Arbitrary Path Traversal For authorised security assessments, penetration testing engagements, and educational research only. Overview Field| Detail ---|--- CVE| CVE-2024-46987 Product| Camaleon CMS Versions| = 2.8.0, 2.8.2 also confirmed on 2.9.0 Type| Path Traversa...

CVE-2025-66849

CVE-2025-66849 Ghost CMS Privilege Escalation PoC Summary In Ghost Foundation Ghost CMS up to 6.4.0, the HTML block within the post draft editor fails to properly sanitize or encode user-supplied content, resulting in a stored cross-site scripting XSS vulnerability. A user with Contributor...