CVE-2024-38812

None

Github link:
https://github.com/groshi/CVE-2024-38812-POC-5-Hands-Private

CVE-2023-46747




Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated



Github link:
https://github.com/AMELYA13/CVE-2023-46747-Mass-RCE

CVE-2024-23113

A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, FortiPAM versions 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSwitchManager versions 7.2.0 through 7.2.3, 7.0.0 through 7.0.3 allows attacker to execute unauthorized code or commands via specially crafted packets.

Github link:
https://github.com/groshi/CVE-2024-23113-Private-POC

CVE-2022-20223

None

Github link:
https://github.com/xbee9/cve-2022-20223

CVE-2023-46747




Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated



Github link:
https://github.com/MacTavish2/CVE-2023-46747-Mass-RCE

CVE-2022-23131

In the case of instances where the SAML SSO authentication is enabled (non-default), session data can be modified by a malicious actor, because a user login stored in the session was not verified. Malicious unauthenticated actor may exploit this issue to escalate privileges and gain admin access to Zabbix Frontend. To perform the attack, SAML authentication is required to be enabled and the actor has to know the username of Zabbix user (or use the guest account, which is disabled by default).

Github link:
https://github.com/davidzzo23/CVE-2022-23131

CVE-2022-0944

None

Github link:
https://github.com/LipeOzyy/SQLPad-RCE-Exploit-CVE-2022-0944

CVE-2024-39205

None

Github link:
https://github.com/Marven11/CVE-2024-39205-Pyload-RCE

CVE-2019-9053

An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve unauthenticated blind time-based SQL injection via the m1_idlist parameter.

Github link:
https://github.com/louisthedonothing/CVE-2019-9053

CVE-2024-48569

None

Github link:
https://github.com/MarioTesoro/CVE-2024-48569

CVE-2024-23111

None

Github link:
https://github.com/zgimszhd61/CVE-2024-23111

CVE-2024-23114

None

Github link:
https://github.com/zgimszhd61/CVE-2024-23114

CVE-2023-41425

Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component.

Github link:
https://github.com/TanveerS1ngh/WonderCMS-4.3.2-XSS-to-RCE-Exploits-CVE-2023-41425

CVE-2022-0944

None

Github link:
https://github.com/TanveerS1ngh/SQLPad-6.10.0-Exploit-CVE-2022-0944

CVE-2023-50564

None

Github link:
https://github.com/TanveerS1ngh/Pluck-CMS-v4.7.18-Remote-Code-Execution-CVE-2023-50564-

CVE-2023-4220

Unrestricted file upload in big file upload functionality in `/main/inc/lib/javascript/bigupload/inc/bigUpload.php` in Chamilo LMS <= v1.11.24 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via uploading of web shell.

Github link:
https://github.com/TanveerS1ngh/Chamilo-LMS-CVE-2023-4220-Exploit

CVE-2023-33669

None

Github link:
https://github.com/Mohammaddvd/CVE-2023-33669

CVE-2024-47575

None

Github link:
https://github.com/groshi/CVE-2024-47575-POC

CVE-2019-19842

None

Github link:
https://github.com/bdunlap9/CVE-2019-19842

CVE-2024-23113

A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, FortiPAM versions 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSwitchManager versions 7.2.0 through 7.2.3, 7.0.0 through 7.0.3 allows attacker to execute unauthorized code or commands via specially crafted packets.

Github link:
https://github.com/hatvix1/CVE-2024-23113

CVE-2024-24919

Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.

Github link:
https://github.com/sar-3mar/CVE-2024-24919_POC