Exploit catalog results

Showing 17 PoCs on this page

Metasploit

Joomla HTTP Header Unauthenticated Remote Code Execution

Metasploit exploitby Marc-Alexandre MontpasAdded to Metasploit 2015-12-15
Not analyzedCVE-2015-85621 file

exploit_multi/http/joomla_http_header_rce · Ruby

Metasploit

Limesurvey Unauthenticated File Download

Metasploit auxiliary PoCby Pichaya MorimotoAdded to Metasploit 2015-12-01
Not analyzedCVE-2025-341201 file

auxiliary_admin/http/limesurvey_file_download · Ruby

Metasploit

VideoCharge Studio Buffer Overflow (SEH)

Metasploit exploitby Andrew Smith, plus 1 additional contributorAdded to Metasploit 2015-08-07
Not analyzedCVE-2025-341231 file

exploit_windows/fileformat/videocharge_studio · Ruby

Metasploit

WordPress W3 Total Cache PHP Code Execution

Metasploit exploitby Unknown, plus 2 additional contributorsAdded to Metasploit 2015-03-23
Not analyzedCVE-2013-20101 file

exploit_unix/webapp/wp_total_cache_exec · Ruby

Metasploit

WordPress Platform Theme File Upload Vulnerability

Metasploit exploitby Marc-Alexandre MontpasAdded to Metasploit 2015-01-31
Not analyzedCVE-2015-101431 file

exploit_unix/webapp/wp_platform_exec · Ruby

Metasploit

WordPress XMLRPC GHOST Vulnerability Scanner

Metasploit auxiliary PoCby Chaim Sanders, plus 5 additional contributorsAdded to Metasploit 2015-01-30
Not analyzedCVE-2015-02351 file

auxiliary_scanner/http/wordpress_ghost_scanner · Ruby

Metasploit

Wordpress Download Manager (download-manager) Unauthenticated File Upload

Metasploit exploitby Mickael NadeauAdded to Metasploit 2014-12-05
Not analyzedUnlinked1 file

exploit_unix/webapp/wp_downloadmanager_upload · Ruby

Metasploit

MantisBT XmlImportExport Plugin PHP Code Injection Vulnerability

Metasploit exploitby Egidio Romano, plus 1 additional contributorAdded to Metasploit 2014-11-09
Not analyzedCVE-2014-7146CVE-2014-85981 file

exploit_multi/http/mantisbt_php_exec · Ruby

Metasploit

Drupal HTTP Parameter Key/Value SQL Injection

Metasploit exploitby Brandon Perry, plus 2 additional contributorsAdded to Metasploit 2014-10-16
Not analyzedCVE-2014-37041 file

exploit_multi/http/drupal_drupageddon · Ruby

Metasploit

Wordpress XMLRPC DoS

Metasploit auxiliary PoCby Nir GoldshlagerAdded to Metasploit 2014-08-07
Not analyzedCVE-2014-52661 file

auxiliary_dos/http/wordpress_xmlrpc_dos · Ruby

Metasploit

WordPress WPTouch Authenticated File Upload

Metasploit exploitby Marc-Alexandre MontpasAdded to Metasploit 2014-07-14
Not analyzedUnlinked1 file

exploit_unix/webapp/wp_wptouch_file_upload · Ruby

Metasploit

Wordpress MailPoet Newsletters (wysija-newsletters) Unauthenticated File Upload

Metasploit exploitby Marc-Alexandre MontpasAdded to Metasploit 2014-07-02
Not analyzedCVE-2014-47251 file

exploit_unix/webapp/wp_wysija_newsletters_upload · Ruby

Metasploit

OpenSSL Heartbeat (Heartbleed) Information Leak

Metasploit auxiliary PoCby Antti, plus 12 additional contributorsAdded to Metasploit 2014-04-07
Not analyzedCVE-2014-01601 file

auxiliary_scanner/ssl/openssl_heartbleed · Ruby

Metasploit

Apache Struts ParametersInterceptor Remote Code Execution

Metasploit exploitby Meder Kydyraliev, plus 2 additional contributorsAdded to Metasploit 2013-03-21
Not analyzedCVE-2011-39231 file

exploit_multi/http/struts_code_exec_parameters · Ruby

Metasploit

Wordpress Pingback Locator

Metasploit auxiliary PoCby Brandon McCann "zeknox" <bmccann@accuvant.com>, plus 1 additional contributorAdded to Metasploit 2013-01-05
Not analyzedCVE-2013-02351 file

auxiliary_scanner/http/wordpress_pingback_access · Ruby

Metasploit

Hashtable Collisions

Metasploit auxiliary PoCby Alexander Klink, plus 4 additional contributorsAdded to Metasploit 2012-05-13
Not analyzedCVE-2011-4858CVE-2011-4885CVE-2011-5034CVE-2011-50351 file

auxiliary_dos/http/hashcollision_dos · Ruby

Metasploit

WordPress Brute Force and User Enumeration Utility

Metasploit auxiliary PoCby Tiago Ferreira <tiago.ccna@gmail.com>, plus 1 additional contributorAdded to Metasploit 2010-06-09
Not analyzedCVE-2009-23351 file

auxiliary_scanner/http/wordpress_login_enum · Ruby