Exploits from Github

CVE-2018-19422

/panel/uploads in Subrion CMS 4.2.1 allows remote attackers to execute arbitrary PHP code via a .pht or .phar file, because the .htaccess file omits these.

Github link:
https://github.com/Drew-Alleman/CVE-2018-19422

GitHub

GitHub - Drew-Alleman/CVE-2018-19422: Subrion File Upload Bypass to RCE and Custom File Upload (Authenticated)

Subrion File Upload Bypass to RCE and Custom File Upload (Authenticated) - Drew-Alleman/CVE-2018-19422

39 views07:41

Exploits from Github

CVE-2025-30065

None

Github link:
https://github.com/bjornhels/CVE-2025-30065

GitHub

GitHub - bjornhels/CVE-2025-30065: PoC

PoC. Contribute to bjornhels/CVE-2025-30065 development by creating an account on GitHub.

34 views13:43

Exploits from Github

CVE-2024-23897

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read arbitrary files on the Jenkins controller file system.

Github link:
https://github.com/tvasari/CVE-2024-23897

GitHub

GitHub - tvasari/CVE-2024-23897: Jenkins CLI arbitrary read (CVE-2024-23897 applies to versions below 2.442 and LTS 2.426.3)

Jenkins CLI arbitrary read (CVE-2024-23897 applies to versions below 2.442 and LTS 2.426.3) - tvasari/CVE-2024-23897

37 views13:43

Exploits from Github

CVE-2025-30065

None

Github link:
https://github.com/h3st4k3r/CVE-2025-30065

GitHub

GitHub - h3st4k3r/CVE-2025-30065: This PoC targets CVE-2025-30065, an RCE vulnerability in Apache Parquet via Avro schema deserialization.…

This PoC targets CVE-2025-30065, an RCE vulnerability in Apache Parquet via Avro schema deserialization. It abuses the getDefaultValue() mechanism to instantiate arbitrary record types during parsi...

35 views13:43

Exploits from Github

CVE-2025-30911

None

Github link:
https://github.com/Nxploited/CVE-2025-30911

GitHub

GitHub - Nxploited/CVE-2025-30911: WordPress RomethemeKit For Elementor Plugin <= 1.5.4 is vulnerable to Remote Code Execution…

WordPress RomethemeKit For Elementor Plugin <= 1.5.4 is vulnerable to Remote Code Execution (RCE) - GitHub - Nxploited/CVE-2025-30911: WordPress RomethemeKit For Elementor Plugin <=...

39 views13:43

Exploits from Github

CVE-2025-666666

None

Github link:
https://github.com/anderruiz/CVE-2025-666666

GitHub

GitHub - anderruiz/CVE-2025-666666: Successful exploit for D

Successful exploit for D. Contribute to anderruiz/CVE-2025-666666 development by creating an account on GitHub.

45 views13:43

Exploits from Github

CVE-2025-26529

None

Github link:
https://github.com/NightBloodz/moodleTestingEnv

GitHub

GitHub - NightBloodz/moodleTestingEnv: Environment used to find Moodle CVE-2025-26529

Environment used to find Moodle CVE-2025-26529. Contribute to NightBloodz/moodleTestingEnv development by creating an account on GitHub.

33 views19:44

Exploits from Github

CVE-2024-25600

Improper Control of Generation of Code ('Code Injection') vulnerability in Codeer Limited Bricks Builder allows Code Injection.This issue affects Bricks Builder: from n/a through 1.9.6.

Github link:
https://github.com/meli0dasH4ck3r/cve-2024-25600

GitHub

GitHub - meli0dasH4ck3r/cve-2024-25600: PoC for CVE-2024-25600

PoC for CVE-2024-25600. Contribute to meli0dasH4ck3r/cve-2024-25600 development by creating an account on GitHub.

32 views19:45

Exploits from Github

CVE-2025-31131

None

Github link:
https://github.com/MuhammadWaseem29/CVE-2025-31131

GitHub

GitHub - MuhammadWaseem29/CVE-2025-31131: YesWiki is a wiki system written in PHP. The squelette parameter is vulnerable to path…

YesWiki is a wiki system written in PHP. The squelette parameter is vulnerable to path traversal attacks, enabling read access to arbitrary files on the server. - MuhammadWaseem29/CVE-2025-31131

34 views19:45

Exploits from Github

CVE-2023-40931

A SQL injection vulnerability in Nagios XI from version 5.11.0 up to and including 5.11.1 allows authenticated attackers to execute arbitrary SQL commands via the ID parameter in the POST request to /nagiosxi/admin/banner_message-ajaxhelper.php

Github link:
https://github.com/G4sp4rCS/CVE-2023-40931-POC

GitHub

GitHub - G4sp4rCS/CVE-2023-40931-POC: CVE-2023-40931 Proof of Concept made for HTB MONITORED

CVE-2023-40931 Proof of Concept made for HTB MONITORED - G4sp4rCS/CVE-2023-40931-POC

46 views19:45

Exploits from Github

CVE-2024-48139

None

Github link:
https://github.com/hannahbellesheart/blackbox.ai.security.analysis

GitHub

GitHub - hannahbellesheart/blackbox.ai.security.analysis: Blackbox AI Security Analysis This repo identifies possible security…

Blackbox AI Security Analysis This repo identifies possible security risks w/Blackbox.ai extensions/agents/svcs. Possible credential harvesting, unpatched vulnerabilities like CVE-2024-48139, and ...

43 views01:36

Exploits from Github

CVE-2025-44228

None

Github link:
https://github.com/Karitosmuan/Office-Exploit-Cve2025-Xml-Doc-Docx-Rce-Builder-Fud

44 views13:38

Exploits from Github

CVE-2025-30065

None

Github link:
https://github.com/ron-imperva/CVE-2025-30065-PoC

GitHub

GitHub - ron-imperva/CVE-2025-30065-PoC: CVE-2025-30065 PoC

CVE-2025-30065 PoC. Contribute to ron-imperva/CVE-2025-30065-PoC development by creating an account on GitHub.

37 views13:38

Exploits from Github

CVE-2025-44228

None

Github link:
https://github.com/Kariaoston/Lnk-Exploit-FileBinder-Certificate-Spoofer-Reg-Doc-Cve-Rce

39 views13:38

Exploits from Github

CVE-2025-24813

None

Github link:
https://github.com/AsaL1n/CVE-2025-24813

GitHub

GitHub - AsaL1n/CVE-2025-24813: simple exp for CVE-2025-24813

simple exp for CVE-2025-24813. Contribute to AsaL1n/CVE-2025-24813 development by creating an account on GitHub.

39 views13:38

Exploits from Github

CVE-2011-2523

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

Github link:
https://github.com/vedpakhare/vsftpd-234-vuln-report

GitHub

GitHub - vedpakhare/vsftpd-234-vuln-report: Vulnerability assessment and exploitation of vsftpd 2.3.4 (CVE-2011-2523) using Metasploit.…

Vulnerability assessment and exploitation of vsftpd 2.3.4 (CVE-2011-2523) using Metasploit. Full report and proof of root access included. - vedpakhare/vsftpd-234-vuln-report

39 views13:39

Exploits from Github

CVE-2025-32118

None

Github link:
https://github.com/Nxploited/CVE-2025-32118

GitHub

GitHub - Nxploited/CVE-2025-32118: WordPress CMP – Coming Soon & Maintenance plugin <= 4.1.13 - Remote Code Execution (RCE) vulnerability

WordPress CMP – Coming Soon & Maintenance plugin <= 4.1.13 - Remote Code Execution (RCE) vulnerability - Nxploited/CVE-2025-32118

39 views13:39

Exploits from Github

CVE-2025-30208

None

Github link:
https://github.com/lilil3333/Vite-CVE-2025-30208-EXP