CVE-2024-10914

None

Github link:
https://github.com/verylazytech/CVE-2024-10914

CVE-2024-10586

None

Github link:
https://github.com/RandomRobbieBF/CVE-2024-10586

CVE-2024-50493

None

Github link:
https://github.com/RandomRobbieBF/CVE-2024-50493

CVE-2024-40443

None

Github link:
https://github.com/Yuma-Tsushima07/CVE-2024-40443

CVE-2015-1427

The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.

Github link:
https://github.com/Sebikea/CVE-2015-1427-for-trixie

CVE-2021-44228

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.

Github link:
https://github.com/AhmedMansour93/-Unveiling-the-Lessons-from-Log4Shell-A-Wake-Up-Call-for-Cybersecurity-

CVE-2024-23897

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path in an argument with the file's contents, allowing unauthenticated attackers to read arbitrary files on the Jenkins controller file system.

Github link:
https://github.com/safeer-accuknox/Jenkins-Args4j-CVE-2024-23897-POC

CVE-2024-11016

None

Github link:
https://github.com/hatvix1/CVE-2024-11016

CVE-2024-51026

None

Github link:
https://github.com/BrotherOfJhonny/CVE-2024-51026_Overview

CVE-2024-47062

None

Github link:
https://github.com/saisathvik1/CVE-2024-47062

CVE-2024-49368

None

Github link:
https://github.com/Aashay221999/CVE-2024-49368

CVE-2024-3400

A command injection vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code with root privileges on the firewall.

Fixes for PAN-OS 10.2, PAN-OS 11.0, and PAN-OS 11.1 are in development and are expected to be released by April 14, 2024. Cloud NGFW, Panorama appliances, and Prisma Access are not impacted by this vulnerability. All other versions of PAN-OS are also not impacted.

Github link:
https://github.com/workshop748/CVE-2024-3400

CVE-2019-16278

Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTTP request.

Github link:
https://github.com/cancela24/CVE-2019-16278-Nostromo-1.9.6-RCE

CVE-2024-50251

None

Github link:
https://github.com/slavin-ayu/CVE-2024-50251-PoC

CVE-2024-10629

None

Github link:
https://github.com/RandomRobbieBF/CVE-2024-10629

CVE-2015-1328

The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does not properly check permissions for file creation in the upper filesystem directory, which allows local users to obtain root access by leveraging a configuration in which overlayfs is permitted in an arbitrary mount namespace.

Github link:
https://github.com/YastrebX/CVE-2015-1328

CVE-2022-21661

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to improper sanitization in WP_Query, there can be cases where SQL injection is possible through plugins or themes that use it in a certain way. This has been patched in WordPress version 5.8.3. Older affected versions are also fixed via security release, that go back till 3.7.37. We strongly recommend that you keep auto-updates enabled. There are no known workarounds for this vulnerability.

Github link:
https://github.com/w0r1i0g1ht/CVE-2022-21661

CVE-2024-32640

None

Github link:
https://github.com/pizza-power/CVE-2024-32640

CVE-2024-50986

None

Github link:
https://github.com/riftsandroses/CVE-2024-50986

CVE-2013-0156

active_support/core_ext/hash/conversions.rb in Ruby on Rails before 2.3.15, 3.0.x before 3.0.19, 3.1.x before 3.1.10, and 3.2.x before 3.2.11 does not properly restrict casts of string values, which allows remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service (memory and CPU consumption) involving nested XML entity references, by leveraging Action Pack support for (1) YAML type conversion or (2) Symbol type conversion.

Github link:
https://github.com/oxBEN10/CVE-2013-0156