Craft CMS Code Injection Vulnerability

[POC] CVE-2025-32432 — CVE-2025-32432

This repository contains a proof-of-concept exploit script for CVE-2025-32432, a pre-authentication Remote Code Execution (RCE) vulnerability affecting CraftCMS versions 4.x and 5.x. The vulnerability exists in the asset transform generation feature of CraftCMS.

[POC] CVE-2025-32432 — CVE-2025-32432

CraftCMS RCE Checker (CVE-2025-32432)

[POC] CVE-2025-32432 — CVE-2025-32432

CVE-2025-32432 checker and exploit

[POC] CVE-2025-32432 — CVE-2025-32432

Working PoC for CVE-2025-32432 - Craft CMS <= 5.6.16 unauthenticated RCE via Yii2 PhpManager gadget + nginx access.log poisoning

[POC] GHSA-3mgp-fx93-9xv5 — PoC_CVE-2025-32432

CraftCMS CVE-2025-32432 - Clean PoC

[POC] CVE-2025-32432 — CVE-2025-32432-exploit-by-P34NUT

A exploit to obtain RCE in CRAFTCMS

[POC] CVE-2025-32432 — CVE-2025-32432

AI修复生成的CVE-2025-32432的poc

[POC] CVE-2025-32432 — Blackash-CVE-2025-32432

CVE-2025-32432

[POC] CVE-2025-32432 — CVE-2025-32432

Exploit, POC for CVE-2025-32432, CraftCMS2Shell

[POC] CVE-2025-32432 — craftcms-cve-2025-32432-rce

Craft CMS CVE-2025-32432 command runner adapted from Nicolas Bourras and Orange Cyberdefense research

PoC: CVE-2025-32432-PoC

A simple PoC on the Remote Code Execution (RCE) Vulnerability of CraftCMS designated as CVE-2025-32432 written in Go

PoC: htb-orion-writeup

Hack The Box - Orion (Easy) | CVE-2025-32432 & CVE-2026-24061