CVE-2022-46169

Cacti is an open source platform which provides a robust and extensible operational monitoring and fault management framework for users. In affected versions a command injection vulnerability allows an unauthenticated user to execute arbitrary code on a server running Cacti, if a specific data source was selected for any monitored device. The vulnerability resides in the `remote_agent.php` file. This file can be accessed without authentication. This function retrieves the IP address of the client via `get_client_addr` and resolves this IP address to the corresponding hostname via `gethostbyaddr`. After this, it is verified that an entry within the `poller` table exists, where the hostname corresponds to the resolved hostname. If such an entry was found, the function returns `true` and the client is authorized. This authorization can be bypassed due to the implementation of the `get_client_addr` function. The function is defined in the file `lib/functions.php` and checks serval `$_SERVER` variables to determin

Github link:
https://github.com/lof1sec/CVE-2022-46169

CVE-2020-25223

A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5, v9.607 MR7, and v9.511 MR11

Github link:
https://github.com/gh-2025-02/poc-cve-2020-25223

CVE-2024-47575

A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager 6.2.0 through 6.2.12, Fortinet FortiManager Cloud 7.4.1 through 7.4.4, FortiManager Cloud 7.2.1 through 7.2.7, FortiManager Cloud 7.0.1 through 7.0.12, FortiManager Cloud 6.4.1 through 6.4.7 allows attacker to execute arbitrary code or commands via specially crafted requests.

Github link:
https://github.com/Axi0n1ze/CVE-2024-47575-POC

CVE-2024-49113

None

Github link:
https://github.com/YoonJae-rep/CVE-2024-49113

CVE-2023-6931

None

Github link:
https://github.com/jungju817/CVE-2023-6931

CVE-2024-4367

A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.

Github link:
https://github.com/exfil0/WEAPONIZING-CVE-2024-4367

CVE-2021-44967

None

Github link:
https://github.com/D3Ext/LimeSurvey-RCE

CVE-2024-49113

None

Github link:
https://github.com/Sachinart/CVE-2024-49113-Checker

CVE-2024-55976

None

Github link:
https://github.com/RandomRobbieBF/CVE-2024-55976

CVE-2024-55972

None

Github link:
https://github.com/RandomRobbieBF/CVE-2024-55972

CVE-2024-55981

None

Github link:
https://github.com/RandomRobbieBF/CVE-2024-55981

CVE-2024-55982

None

Github link:
https://github.com/RandomRobbieBF/CVE-2024-55982

CVE-2021-26828

None

Github link:
https://github.com/voidvxvt/CVE-2021-26828

CVE-2024-56512

None

Github link:
https://github.com/absholi7ly/CVE-2024-56512-Apache-NiFi-Exploit

CVE-2024-54374

None

Github link:
https://github.com/RandomRobbieBF/CVE-2024-54374

CVE-2024-54363

None

Github link:
https://github.com/RandomRobbieBF/CVE-2024-54363

CVE-2024-54385

None

Github link:
https://github.com/RandomRobbieBF/CVE-2024-54385

CVE-2024-55978

None

Github link:
https://github.com/RandomRobbieBF/CVE-2024-55978

CVE-2020-35489

The contact-form-7 (aka Contact Form 7) plugin before 5.3.2 for WordPress allows Unrestricted File Upload and remote code execution because a filename may contain special characters.

Github link:
https://github.com/gh202503/poc-cve-2020-35489

CVE-2014-3704

The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection attacks via an array containing crafted keys.

Github link:
https://github.com/RasmusKnothNielsen/Drupalgeddon-Python3

CVE-2024-25641

Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, an arbitrary file write vulnerability, exploitable through the "Package Import" feature, allows authenticated users having the "Import Templates" permission to execute arbitrary PHP code on the web server. The vulnerability is located within the `import_package()` function defined into the `/lib/import.php` script. The function blindly trusts the filename and file content provided within the XML data, and writes such files into the Cacti base path (or even outside, since path traversal sequences are not filtered). This can be exploited to write or overwrite arbitrary files on the web server, leading to execution of arbitrary PHP code or other security impacts. Version 1.2.27 contains a patch for this issue.

Github link:
https://github.com/D3Ext/CVE-2024-25641