This repository contains a proof-of-concept exploit script for CVE-2025-32432, a pre-authentication Remote Code Execution (RCE) vulnerability affecting CraftCMS versions 4.x and 5.x. The vulnerability exists in the asset transform generation feature of CraftCMS.
☆27Apr 27, 2025Updated last year
Alternatives and similar repositories for CVE-2025-32432
Users that are interested in CVE-2025-32432 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Nuclei template to detect Apache servers vulnerable to CVE-2024-38473☆30Aug 24, 2024Updated 2 years ago
- POC - CVE-2024–4956 - Nexus Repository Manager 3 Unauthenticated Path Traversal☆16Nov 26, 2024Updated last year
- Widget Options – The #1 WordPress Widget & Block Control Plugin <= 4.0.7 - Authenticated (Contributor+) Remote Code Execution☆13Dec 2, 2024Updated last year
- CVE-2025-68428 Proof of Concept☆24Jan 8, 2026Updated 7 months ago
- CVE-2026-41940 latest cPanel & WHM 0day - 70 million websites are possible to expose by Chirag Artani☆26Apr 29, 2026Updated 4 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ☆24Apr 21, 2022Updated 4 years ago
- Wing FTP Server Remote Code Execution (RCE) Exploit (CVE-2025-47812)☆54Jul 14, 2025Updated last year
- ✪ Collection of Metasploit Modules ✪☆17Apr 17, 2026Updated 4 months ago
- This tool serves as an initial version scanner specifically designed for PrestaShop, a popular e-commerce platform. The primary purpose o…☆20Jun 2, 2025Updated last year
- File upload logic flaw in Apache Struts2 exploit☆17Jan 3, 2025Updated last year
- Linux kernel FUSE readdir cache out-of-bounds write (CVE-2026-31694): a malicious FUSE server overflows a page-cache page by 24 bytes. Po…☆17Jun 30, 2026Updated 2 months ago
- Simple script to bypass AMSI on Win 10 and Win 11 by exploiting AmsiOpenSession☆17Jan 2, 2026Updated 8 months ago
- Smart and efficient tool to automate open redirect detection at scale.☆10Mar 21, 2022Updated 4 years ago
- # 🕵️ PathCatcher v1.0 - Path Traversal & LFI Scanner☆24Jul 13, 2025Updated last year
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- POC for CVE-2024-36401. This POC will attempt to establish a reverse shell from the vlun targets.☆34Jul 4, 2024Updated 2 years ago
- Confluence Pre-Auth Remote Code Execution via OGNL Injection (CVE-2022-26134)☆44Jun 6, 2022Updated 4 years ago
- CVE-2024-21006 exp☆17Jul 29, 2024Updated 2 years ago
- CVE-2025-4138 / CVE-2025-4517 — Python tarfile PATH_MAX Symlink Filter Bypass☆17Jun 4, 2026Updated 3 months ago
- Grep subdomains from web pages.☆42Feb 10, 2025Updated last year
- A critical vulnerability, CVE-2024-53677, has been identified in the popular Apache Struts framework, potentially allowing attackers to e…☆96Dec 20, 2024Updated last year
- ☆14Aug 22, 2025Updated last year
- Wordlists for Wfuzz or Dirbuster☆27Feb 19, 2016Updated 10 years ago
- ☆12Dec 30, 2024Updated last year
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Authorization Bypass in Next.js Middleware☆10Mar 23, 2025Updated last year
- A tool for exploiting Kerberos tickets against system with Credential Guard enabled.☆21Sep 2, 2025Updated last year
- ☆31Jun 5, 2023Updated 3 years ago
- Authenticated privilege escalation in Camaleon CMS v2.9.0 via improper parameter handling in the updated_ajax endpoint.☆19Feb 4, 2026Updated 7 months ago
- ☆21Nov 27, 2022Updated 3 years ago
- PoC. Severity critical.☆74Aug 12, 2024Updated 2 years ago
- Chrome and Firefox extension that lists Amazon S3 Buckets while browsing☆133Mar 30, 2026Updated 5 months ago
- 渗透测试辅助工具箱，反弹shell，命令生成器，输入对应IP端口即可，实现一劳永逸☆37Feb 8, 2023Updated 3 years ago
- ☆75Nov 28, 2025Updated 9 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- CVE-2025-53770 Mass Scanner☆15Jul 29, 2025Updated last year
- AI exploit simulation and continuous security pipeline for LLM apps and AI agents☆16Mar 16, 2026Updated 5 months ago
- DictLoader / 字典匹配ShellCode加载器 / Code By:Tas9er☆16Oct 25, 2025Updated 10 months ago
- CVE-2023-22894☆13Apr 24, 2023Updated 3 years ago
- BuddyPress is an open source WordPress plugin to build a community site. In releases of BuddyPress from 5.0.0 before 7.2.1 it's possible …☆19May 31, 2021Updated 5 years ago
- 一款功能强大的Docker Registry 5000端口未授权浏览、下载和安全测试工具，集成了镜像管理、认证爆破、敏感信息搜索等多项实用功能。☆36May 8, 2026Updated 4 months ago
- In Detail Methodology of How I perform Web Pentesting☆10Oct 18, 2025Updated 10 months ago