This repository contains a proof-of-concept exploit script for CVE-2025-32432, a pre-authentication Remote Code Execution (RCE) vulnerability affecting CraftCMS versions 4.x and 5.x. The vulnerability exists in the asset transform generation feature of CraftCMS.
☆27Apr 27, 2025Updated last year
Alternatives and similar repositories for CVE-2025-32432
Users that are interested in CVE-2025-32432 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- POC - CVE-2024–4956 - Nexus Repository Manager 3 Unauthenticated Path Traversal☆16Nov 26, 2024Updated last year
- Widget Options – The #1 WordPress Widget & Block Control Plugin <= 4.0.7 - Authenticated (Contributor+) Remote Code Execution☆13Dec 2, 2024Updated last year
- CVE-2025-68428 Proof of Concept☆24Jan 8, 2026Updated 10 months ago
- CVE-2026-41940 latest cPanel & WHM 0day - 70 million websites are possible to expose by Chirag Artani☆26Apr 29, 2026Updated 6 months ago
- PoC for CVE-2026-48907 - Joomla! JCE extension < 2.9.99.5 unauthenticated RCE☆16Jun 11, 2026Updated 4 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- POC - Unauthenticated RCE Flaw in Rejetto HTTP File Server - CVE-2024-23692☆51Mar 24, 2025Updated last year
- Export to GBounty is a Burp Suite extension that enables users to export selected HTTP requests from Burp Suite into a compressed ZIP fil…☆11Oct 9, 2024Updated 2 years ago
- Grep subdomains from web pages.☆42Feb 10, 2025Updated last year
- ☆15Oct 6, 2026Updated last month
- Wing FTP Server Remote Code Execution (RCE) Exploit (CVE-2025-47812)☆54Jul 14, 2025Updated last year
- CVE-2024-28995 POC Vulnerability Scanner☆14Jun 15, 2024Updated 2 years ago
- ☆24Apr 21, 2022Updated 4 years ago
- Unauthenticated RCE on CraftCMS when PHP `register_argc_argv` config setting is enabled☆48Dec 23, 2024Updated last year
- Unauthenticated RCE PoC for CVE-2026-48908 — SP Page Builder for Joomla (≤ 6.6.1): arbitrary file upload via asset.uploadCustomIcon. Self…☆18Jun 23, 2026Updated 4 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Open Source Intelligence - Buscando informações sobre infraestruturas☆10Feb 13, 2019Updated 7 years ago
- File upload logic flaw in Apache Struts2 exploit☆17Jan 3, 2025Updated last year
- ✪ Collection of Metasploit Modules ✪☆17Apr 17, 2026Updated 6 months ago
- WordPress Plugin WP Statistics 13.0.7 - Time-Based Blind SQL Injection (Unauthenticated)☆13May 31, 2021Updated 5 years ago
- This tool serves as an initial version scanner specifically designed for PrestaShop, a popular e-commerce platform. The primary purpose o…☆20Jun 2, 2025Updated last year
- Simple script to bypass AMSI on Win 10 and Win 11 by exploiting AmsiOpenSession☆18Jan 2, 2026Updated 10 months ago
- Full and complete RCE exploit for Magento Polyshell☆30Apr 9, 2026Updated 6 months ago
- Combined PoC for CVE-2025-28434 and CVE-2025-59528☆18Apr 13, 2026Updated 6 months ago
- The script checks Jenkins endpoints for CVE-2024-43044 by retrieving the Jenkins version from the innstance and comparing it against know…☆21Aug 8, 2024Updated 2 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- A curated list of awesome swiss army knife libraries and projects.☆11Aug 12, 2020Updated 6 years ago
- # 🕵️ PathCatcher v1.0 - Path Traversal & LFI Scanner☆25Jul 13, 2025Updated last year
- ☆24Jun 16, 2019Updated 7 years ago
- Tool to try multiple paths for PHPunit RCE CVE-2017-9841☆28Oct 18, 2021Updated 5 years ago
- JEB MCP Server for Claude Desktop integration. AI-assisted Android APK reverse engineering with decompilation, batch renaming, cross-refe…☆25Apr 5, 2026Updated 7 months ago
- CVE-2024-21006 exp☆17Jul 29, 2024Updated 2 years ago
- CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion (conditional RCE)☆36Oct 28, 2026Updated last week
- ☆17Jun 26, 2026Updated 4 months ago
- Username OSINT — Búsqueda en 80+ plataformas simultáneamente | Ciberbrigada OSINT Suite☆32May 11, 2026Updated 5 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆12Dec 30, 2024Updated last year
- Burp Suite extension that enhances Burp Active Scan by adding template engine specific SSTI payloads.☆28Feb 20, 2024Updated 2 years ago
- POC for CVE-2024-36401. This POC will attempt to establish a reverse shell from the vlun targets.☆35Jul 4, 2024Updated 2 years ago
- A handy interactive shell through {code,command,template} injection☆11Oct 19, 2026Updated 3 weeks ago
- ☆35Jun 12, 2026Updated 4 months ago
- ☆41Oct 21, 2026Updated 2 weeks ago
- Remote Code Execution (RCE) Vulnerability In Evaluating Property Name Expressions with multies ways to exploit☆56Jul 6, 2024Updated 2 years ago