👾KEYWORD SERVICE 🏷#exploit
Name: test-app-txlz-appstudio-e2e-test-arrive-exploit
Github: https://github.com/redhat-appstudio-qe/test-app-txlz-appstudio-e2e-test-arrive-exploit

👾KEYWORD SERVICE 🏷#exploit
Name: tob-challenge
Github: https://github.com/droidada/tob-challenge

👾KEYWORD SERVICE 🏷#exploit
Name: Doomsday
Github: https://github.com/thomwalks/Doomsday

👾KEYWORD SERVICE 🏷#exploit
Name: NSA-Worthy-Exploits-Against-RISC-V
Github: https://github.com/cyberparzival0/NSA-Worthy-Exploits-Against-RISC-V

👾KEYWORD SERVICE 🏷#redteam
Name: CyberSecurityRSS
Github: https://github.com/zer0yu/CyberSecurityRSS

👾KEYWORD SERVICE 🏷#rce
Name: RCE_PD_research_project
Github: https://github.com/tigercatface/RCE_PD_research_project

👾KEYWORD SERVICE 🏷#exploit
Name: BorneoExploit.github.io
Github: https://github.com/BorneoExploit/BorneoExploit.github.io

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-37042
Github: https://github.com/GreyNoise-Intelligence/Zimbra_Collaboration_CVE-2022-37042-_CVE-2022-27925
Describe:
Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. By bypassing authentication (i.e., not having an authtoken), an attacker can upload arbitrary files to the system, leading to directory traversal and remote code execution. NOTE: this issue exists because of an incomplete fix for CVE-2022-27925.

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-2414
Github: https://github.com/superhac/CVE-2022-2414-POC
Describe:
Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests.

👾KEYWORD SERVICE 🏷#exploit
Name: Script-Executor-Exploit
Github: https://github.com/GMScriptSpace/Script-Executor-Exploit

👾KEYWORD SERVICE 🏷#exploit
Name: SmokingGun
Github: https://github.com/aahmad097/SmokingGun

👾KEYWORD SERVICE 🏷#rce
Name: zipclick
Github: https://github.com/AidanSpeakss/zipclick

👾KEYWORD SERVICE 🏷#exploit
Name: SILENT-DOC-EXPLOIT-CLEAN9
Github: https://github.com/codingcore2/SILENT-DOC-EXPLOIT-CLEAN9

👾KEYWORD SERVICE 🏷#exploit
Name: SILENT-EXCEL-XLS-EXPLOIT-CLEAN9
Github: https://github.com/codingcore2/SILENT-EXCEL-XLS-EXPLOIT-CLEAN9

👾KEYWORD SERVICE 🏷#exploit
Name: SILENT-PDF-EXPLOIT-CLEAN9
Github: https://github.com/codingcore2/SILENT-PDF-EXPLOIT-CLEAN9

👾KEYWORD SERVICE 🏷#sql_injection
Name: SQL_Injection
Github: https://github.com/GiaThinh1711/SQL_Injection

👾KEYWORD SERVICE 🏷#sql_injection
Name: sql_injection
Github: https://github.com/nguyen-manh81296/sql_injection

👾KEYWORD SERVICE 🏷#exploit
Name: barlon_victorious
Github: https://github.com/TronRoss/barlon_victorious

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-31793
Github: https://github.com/xpgdgit/CVE-2022-31793
Describe:
do_request in request.c in muhttpd before 1.1.7 allows remote attackers to read arbitrary files by constructing a URL with a single character before a desired path on the filesystem. This occurs because the code skips over the first character when serving files. Arris NVG443, NVG599, NVG589, and NVG510 devices and Arris-derived BGW210 and BGW320 devices are affected.

👾KEYWORD SERVICE 🏷#rce
Name: RCEL_506
Github: https://github.com/edavgaun/RCEL_506

👾KEYWORD SERVICE 🏷#sql_injection
Name: SQL_Injection-DylanR
Github: https://github.com/Rodas171315/SQL_Injection-DylanR