CVE-2024-9474

None

Github link:
https://github.com/coskper-papa/PAN-OS_CVE-2024-9474

CVE-2004-2761

None

Github link:
https://github.com/chaos198800/Windows-xia-SSL-zheng-shu-zhi-zuo-gong-ju--CVE-2004-2761-lou-dong-xiu-fu

CVE-2024-32002

Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, repositories with submodules can be crafted in a way that exploits a bug in Git whereby it can be fooled into writing files not into the submodule's worktree but into a `.git/` directory. This allows writing a hook that will be executed while the clone operation is still running, giving the user no opportunity to inspect the code that is being executed. The problem has been patched in versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4. If symbolic link support is disabled in Git (e.g. via `git config --global core.symlinks false`), the described attack won't work. As always, it is best to avoid cloning repositories from untrusted sources.

Github link:
https://github.com/jolibb55/donald

CVE-2024-0012

None

Github link:
https://github.com/TalatumLabs/CVE-2024-0012_CVE-2024-9474_PoC

CVE-2024-50623

None

Github link:
https://github.com/watchtowrlabs/CVE-2024-50623

CVE-2019-18634

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in Linux Mint and elementary OS; however, it is NOT the default for upstream and many other packages, and would exist only if enabled by an administrator.) The attacker needs to deliver a long string to the stdin of getln() in tgetpass.c.

Github link:
https://github.com/l0w3/CVE-2019-18634

CVE-2024-11728

None

Github link:
https://github.com/samogod/CVE-2024-11728

CVE-2024-4956

Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Fixed in version 3.68.1.

Github link:
https://github.com/XiaomingX/cve-2024-4956

CVE-2024-42327

None

Github link:
https://github.com/igorbf495/CVE-2024-42327

CVE-2023-3460

The Ultimate Member WordPress plugin before 2.6.7 does not prevent visitors from creating user accounts with arbitrary capabilities, effectively allowing attackers to create administrator accounts at will. This is actively being exploited in the wild.

Github link:
https://github.com/TranKuBao/CVE-2023-3460_FIX

CVE-2024-38475

None

Github link:
https://github.com/soltanali0/CVE-2024-38475

CVE-2024-53677

None

Github link:
https://github.com/cloudwafs/s2-067-CVE-2024-53677

CVE-2024-38998

None

Github link:
https://github.com/AlbedoPrime/PP_CVE-2024-38998

CVE-2024-55875

None

Github link:
https://github.com/JAckLosingHeart/CVE-2024-55875

CVE-2023-40028

None

Github link:
https://github.com/0xDTC/Ghost-5.58-Arbitrary-File-Read-CVE-2023-40028

CVE-2017-12617

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.

Github link:
https://github.com/DevaDJ/CVE-2017-12617

CVE-2024-10124

None

Github link:
https://github.com/RandomRobbieBF/CVE-2024-10124

CVE-2024-53677

None

Github link:
https://github.com/TAM-K592/CVE-2024-53677-S2-067

CVE-2022-22963

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.

Github link:
https://github.com/Shayz614/CVE-2022-22963

CVE-2024-46982

None

Github link:
https://github.com/CodePontiff/next_js_poisoning

CVE-2021-43798

Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: `<grafana_host_url>/public/plugins//`, where is the plugin ID for any installed plugin. At no time has Grafana Cloud been vulnerable. Users are advised to upgrade to patched versions 8.0.7, 8.1.8, 8.2.7, or 8.3.1. The GitHub Security Advisory contains more information about vulnerable URL paths, mitigation, and the disclosure timeline.

Github link:
https://github.com/wezoomagency/GrafXploit