CVE-2022-0847

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.

Github link:
https://github.com/Mephierr/DirtyPipe_exploit

CVE-2024-41570

An Unauthenticated Server-Side Request Forgery (SSRF) in demon callback handling in Havoc 2 0.7 allows attackers to send arbitrary network traffic originating from the team server.

Github link:
https://github.com/kit4py/CVE-2024-41570

CVE-2024-43451

None

Github link:
https://github.com/RonF98/CVE-2024-43451-POC

CVE-2024-6460

None

Github link:
https://github.com/Nxploited/CVE-2024-6460

CVE-2021-40438

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.

Github link:
https://github.com/element-security/check-point-gateways-rce

CVE-2024-27198

In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible

Github link:
https://github.com/ArtemCyberLab/Project-Exploiting-CVE-2024-27198-RCE-Vulnerability

CVE-2020-10136

None

Github link:
https://github.com/PapayaJackal/ipeeyoupeewepee

CVE-2025-0282

None

Github link:
https://github.com/chiefchainer/CVE-2025-0282

CVE-2025-0411

None

Github link:
https://github.com/dhmosfunk/7-Zip-CVE-2025-0411-POC

CVE-2024-6460

None

Github link:
https://github.com/E1-Bot141/CVE-2024-6460

CVE-2024-41570

An Unauthenticated Server-Side Request Forgery (SSRF) in demon callback handling in Havoc 2 0.7 allows attackers to send arbitrary network traffic originating from the team server.

Github link:
https://github.com/thisisveryfunny/CVE-2024-41570-Havoc-C2-RCE

CVE-2024-46982

None

Github link:
https://github.com/Lercas/CVE-2024-46982

CVE-2024-50379

None

Github link:
https://github.com/pwnosec/CVE-2024-50379

CVE-2024-38077

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

Github link:
https://github.com/Accord96/CVE-2024-38077-POC

CVE-2021-40438

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.

Github link:
https://github.com/yakir2b/check-point-gateways-rce

CVE-2024-54507

None

Github link:
https://github.com/jprx/CVE-2024-54507

CVE-2020-10136

None

Github link:
https://github.com/GustavoHGP/ipeeyoupeewepee

CVE-2023-4220

Unrestricted file upload in big file upload functionality in `/main/inc/lib/javascript/bigupload/inc/bigUpload.php` in Chamilo LMS <= v1.11.24 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via uploading of web shell.

Github link:
https://github.com/zora-beep/CVE-2023-4220

CVE-2024-41570

An Unauthenticated Server-Side Request Forgery (SSRF) in demon callback handling in Havoc 2 0.7 allows attackers to send arbitrary network traffic originating from the team server.

Github link:
https://github.com/0xLynk/CVE-2024-41570-POC

CVE-2024-45337

None

Github link:
https://github.com/peace-maker/CVE-2024-45337

CVE-2022-40684

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.

Github link:
https://github.com/niklasmato/fortileak-01-2025-Be