CVE-2025-54424

This repository contains a functional exploit for CVE-2025-54424, which leverages a client certificate bypass vulnerability in 1Panel to achieve remote code execution (RCE) via WebSocket interaction. The exploit includes both scanning and interactive shell capabilities.

This repository contains a functional SQL injection exploit for WordPress Quiz Maker plugin (CVE-2025-10042). The Python script demonstrates time-based SQLi via crafted HTTP headers to extract admin credentials.

This repository contains a functional exploit for CVE-2025-54424, which leverages a client certificate bypass vulnerability in 1Panel to achieve remote code execution (RCE) via WebSocket connections. The exploit dynamically generates a self-signed certificate with a specific Common Name (CN) to bypass authentication and establish an interactive shell.

This repository contains a functional exploit for CVE-2025-54424, targeting a client certificate bypass vulnerability in 1Panel. The exploit dynamically generates a self-signed certificate to bypass authentication and establishes a WebSocket connection for remote command execution.