CVE-2019-0567

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2019-0539, CVE-2019-0568.

Github link:
https://github.com/NatteeSetobol/CVE-2019-0567-MS-Edge

CVE-2024-0624

None

Github link:
https://github.com/kodaichodai/CVE-2024-0624

CVE-2024-0623

None

Github link:
https://github.com/kodaichodai/CVE-2024-0623

CVE-2024-0590

None

Github link:
https://github.com/kodaichodai/CVE-2024-0590

CVE-2024-0588

None

Github link:
https://github.com/kodaichodai/CVE-2024-0588

CVE-2024-0379

None

Github link:
https://github.com/kodaichodai/CVE-2024-0379

CVE-2021-44228

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.

Github link:
https://github.com/safeer-accuknox/log4j-shell-poc

CVE-2024-0509

None

Github link:
https://github.com/kodaichodai/CVE-2024-0509

CVE-2013-3900

The WinVerifyTrust function in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly validate PE file digests during Authenticode signature verification, which allows remote attackers to execute arbitrary code via a crafted PE file, aka "WinVerifyTrust Signature Validation Vulnerability."

Github link:
https://github.com/OtisSymbos/CVE-2013-3900-WinTrustVerify

CVE-2007-3280

None

Github link:
https://github.com/DenuwanJayasekara/CVE-Exploitation-Reports

CVE-2024-37084

None

Github link:
https://github.com/vuhz/CVE-2024-37084

CVE-2024-4577

In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command line given to Win32 API functions. PHP CGI module may misinterpret those characters as PHP options, which may allow a malicious user to pass options to PHP binary being run, and thus reveal the source code of scripts, run arbitrary PHP code on the server, etc.

Github link:
https://github.com/ywChen-NTUST/PHP-CGI-RCE-Scanner

CVE-2024-6624

None

Github link:
https://github.com/RandomRobbieBF/CVE-2024-6624

CVE-2024-8277

None

Github link:
https://github.com/realbotnet/CVE-2024-8277

CVE-2023-29357

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Github link:
https://github.com/AhmedMansour93/Event-ID-189-Rule-Name-SOC227-CVE-2023-29357

CVE-2022-1388

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all 12.1.x and 11.6.x versions, undisclosed requests may bypass iControl REST authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Github link:
https://github.com/impost0r/CVE-2022-1388

CVE-2024-8522

None

Github link:
https://github.com/realbotnet/CVE-2024-8522

CVE-2023-28753

None

Github link:
https://github.com/pingjuiliao/CVE-2023-28753

CVE-2024-1709

ConnectWise ScreenConnect 23.9.7 and prior are affected by an Authentication Bypass Using an Alternate Path or Channel

vulnerability, which may allow an attacker direct access to confidential information or

critical systems.



Github link:
https://github.com/AhmedMansour93/Event-ID-229-Rule-Name-SOC262-CVE-2024-1709-

CVE-2024-4577

In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command line given to Win32 API functions. PHP CGI module may misinterpret those characters as PHP options, which may allow a malicious user to pass options to PHP binary being run, and thus reveal the source code of scripts, run arbitrary PHP code on the server, etc.

Github link:
https://github.com/AhmedMansour93/Event-ID-268-Rule-Name-SOC292-Possible-PHP-Injection-Detected-CVE-2024-4577-

CVE-2023-51467

The vulnerability allows attackers to bypass authentication to achieve a simple Server-Side Request Forgery (SSRF)


Github link:
https://github.com/AhmedMansour93/Event-ID-217-Rule-Name-SOC254-Apache-OFBiz-Auth-Bypass-and-Code-Injection-0Day-CVE-2023-51467-