CVE-2025-46173

None

Github link:
https://github.com/pruthuraut/CVE-2025-46173

CVE-2025-24071

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.

Github link:
https://github.com/f4dee-backup/CVE-2025-24071

CVE-2025-4664

Insufficient policy enforcement in Loader in Google Chrome prior to 136.0.7103.113 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

Github link:
https://github.com/Leviticus-Triage/ChromSploit-Framework

CVE-2025-5196

None

Github link:
https://github.com/Nouvexr/Wing-FTP-Server-7.4.4-RCE-Authenticated

CVE-2024-38014

Windows Installer Elevation of Privilege Vulnerability

Github link:
https://github.com/Naman2701B/DLL-for-2024-38014

CVE-2025-4389

None

Github link:
https://github.com/Yucaerin/CVE-2025-4389

CVE-2021-44228

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.

Github link:
https://github.com/SerpilRivas/log4shell-homework9

CVE-2025-3248

Langflow versions prior to 1.3.0 are susceptible to code injection in
the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary
code.

Github link:
https://github.com/Vip3rLi0n/CVE-2025-3248

CVE-1999-0524

ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.

Github link:
https://github.com/Ransc0rp1on/ICMP-Timestamp-POC

CVE-2023-40130

None

Github link:
https://github.com/wrlu/CVE-2023-40130

CVE-2025-24071

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.

Github link:
https://github.com/LOOKY243/CVE-2025-24071-PoC

CVE-2025-24071

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.

Github link:
https://github.com/ex-cal1bur/SMB_CVE-2025-24071

CVE-2024-32462

None

Github link:
https://github.com/SpiralBL0CK/CVE-2024-32462

CVE-2025-5287

None

Github link:
https://github.com/Nxploited/CVE-2025-5287

CVE-2024-28995













SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine.









Github link:
https://github.com/ibrahimsql/CVE-2024-28995

CVE-2025-2539

None

Github link:
https://github.com/verylazytech/CVE-2025-2539

CVE-2018-8097

io/mongo/parser.py in Eve (aka pyeve) before 0.7.5 allows remote attackers to execute arbitrary code via Code Injection in the where parameter.

Github link:
https://github.com/StellarDriftLabs/CVE-2018-8097-PoC

CVE-2023-38600

None

Github link:
https://github.com/afrojack1/cve202338600test.github.io

CVE-2017-9248

Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKey, which makes it easier for remote attackers to defeat cryptographic protection mechanisms, leading to a MachineKey leak, arbitrary file uploads or downloads, XSS, or ASP.NET ViewState compromise.

Github link:
https://github.com/0xsharz/telerik-scanner-cve-2017-9248

CVE-2025-29632

None

Github link:
https://github.com/OHnogood/CVE-2025-29632