This repository contains a proof-of-concept exploit script for CVE-2025-32432, a pre-authentication Remote Code Execution (RCE) vulnerability affecting CraftCMS versions 4.x and 5.x. The vulnerability exists in the asset transform generation feature of CraftCMS.
☆27Apr 27, 2025Updated last year
Alternatives and similar repositories for CVE-2025-32432
Users that are interested in CVE-2025-32432 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- CraftCMS RCE Checker (CVE-2025-32432)☆10Apr 27, 2025Updated last year
- Nuclei template to detect Apache servers vulnerable to CVE-2024-38473☆30Aug 24, 2024Updated 2 years ago
- POC - CVE-2024–4956 - Nexus Repository Manager 3 Unauthenticated Path Traversal☆16Nov 26, 2024Updated last year
- CVE-2025-68428 Proof of Concept☆24Jan 8, 2026Updated 9 months ago
- ☆24Apr 21, 2022Updated 4 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Export to GBounty is a Burp Suite extension that enables users to export selected HTTP requests from Burp Suite into a compressed ZIP fil…☆11Oct 9, 2024Updated 2 years ago
- Wing FTP Server Remote Code Execution (RCE) Exploit (CVE-2025-47812)☆54Jul 14, 2025Updated last year
- Grep subdomains from web pages.☆42Feb 10, 2025Updated last year
- CVE-2024-28995 POC Vulnerability Scanner☆14Jun 15, 2024Updated 2 years ago
- This tool serves as an initial version scanner specifically designed for PrestaShop, a popular e-commerce platform. The primary purpose o…☆20Jun 2, 2025Updated last year
- Simple script to bypass AMSI on Win 10 and Win 11 by exploiting AmsiOpenSession☆18Jan 2, 2026Updated 9 months ago
- File upload logic flaw in Apache Struts2 exploit☆17Jan 3, 2025Updated last year
- ✪ Collection of Metasploit Modules ✪☆17Apr 17, 2026Updated 6 months ago
- Linux kernel FUSE readdir cache out-of-bounds write (CVE-2026-31694): a malicious FUSE server overflows a page-cache page by 24 bytes. Po…☆18Sep 14, 2026Updated last month
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- JEB MCP Server for Claude Desktop integration. AI-assisted Android APK reverse engineering with decompilation, batch renaming, cross-refe…☆25Apr 5, 2026Updated 6 months ago
- ☆16Jun 26, 2026Updated 3 months ago
- # 🕵️ PathCatcher v1.0 - Path Traversal & LFI Scanner☆24Jul 13, 2025Updated last year
- The script checks Jenkins endpoints for CVE-2024-43044 by retrieving the Jenkins version from the innstance and comparing it against know…☆21Aug 8, 2024Updated 2 years ago
- Remote Code Execution (RCE) Vulnerability In Evaluating Property Name Expressions with multies ways to exploit☆56Jul 6, 2024Updated 2 years ago
- CVE-2025-4138 / CVE-2025-4517 — Python tarfile PATH_MAX Symlink Filter Bypass☆17Jun 4, 2026Updated 4 months ago
- CVE-2024-21006 exp☆17Jul 29, 2024Updated 2 years ago
- Confluence Pre-Auth Remote Code Execution via OGNL Injection (CVE-2022-26134)☆44Jun 6, 2022Updated 4 years ago
- A web crawler written in Go☆10Sep 24, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆39Sep 8, 2026Updated last month
- Tool to try multiple paths for PHPunit RCE CVE-2017-9841☆30Oct 18, 2021Updated 5 years ago
- ☆39Dec 14, 2024Updated last year
- ☆14Aug 22, 2025Updated last year
- A Discord Bot to kick users that have specific roles too long.☆10Jun 18, 2020Updated 6 years ago
- ☆12Dec 30, 2024Updated last year
- Wordlists for Wfuzz or Dirbuster☆27Feb 19, 2016Updated 10 years ago
- ☆12Sep 22, 2025Updated last year
- A critical vulnerability, CVE-2024-53677, has been identified in the popular Apache Struts framework, potentially allowing attackers to e…☆96Dec 20, 2024Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- POC for CVE-2024-36401. This POC will attempt to establish a reverse shell from the vlun targets.☆35Jul 4, 2024Updated 2 years ago
- ☆31Jun 5, 2023Updated 3 years ago
- CVE-2019-0708 (BlueKeep) proof of concept allowing pre-auth RCE on Windows7☆150Mar 28, 2022Updated 4 years ago
- Authorization Bypass in Next.js Middleware☆10Mar 23, 2025Updated last year
- A tiny demo app using SSL pinning to block HTTPS MitM interception☆14Aug 8, 2022Updated 4 years ago
- Handheld WiFi Scanner based on ESP8266☆12Dec 17, 2021Updated 4 years ago
- 基于XOR加密的Shellcode加载器项目，通过内存解密执行实现基础免杀，包含C++加载器和Python加密脚本，可绕过常规静态检测。☆33Jul 24, 2025Updated last year