Exploits from Github
@github_exploits
571 subscribers
1 photo
669 files
3.61K links
https://t.me/PentestNotes

https://t.me/dbugs1337
Download Telegram
About
Blog
Apps
Platform
Join
Exploits from Github
571 subscribers
Exploits from Github
CVE-2024-50603

None

Github link:
https://github.com/th3gokul/CVE-2024-50603
GitHub
GitHub - th3gokul/CVE-2024-50603: CVE-2024-50603: Aviatrix Controller Unauthenticated Command Injection
CVE-2024-50603: Aviatrix Controller Unauthenticated Command Injection - th3gokul/CVE-2024-50603
20 views
Exploits from Github
CVE-2024-9707

The Hunk Companion plugin for WordPress is vulnerable to unauthorized plugin installation/activation due to a missing capability check on the /wp-json/hc/v1/themehunk-import REST API endpoint in all versions up to, and including, 1.8.4. This makes it possible for unauthenticated attackers to install and activate arbitrary plugins which can be leveraged to achieve remote code execution if another vulnerable plugin is installed and activated.

Github link:
https://github.com/Nxploited/CVE-2024-9707-Poc
GitHub
GitHub - Nxploited/CVE-2024-9707-Poc: he Hunk Companion Plugin for WordPress: Vulnerable to Unauthorized Plugin Installation/Activation…
he Hunk Companion Plugin for WordPress: Vulnerable to Unauthorized Plugin Installation/Activation (Versions Up to and Including 1.8.4) - Nxploited/CVE-2024-9707-Poc
22 views
Exploits from Github
CVE-2024-53691

None

Github link:
https://github.com/C411e/CVE-2024-53691
GitHub
GitHub - C411e/CVE-2024-53691: CVE-2024-53691
CVE-2024-53691. Contribute to C411e/CVE-2024-53691 development by creating an account on GitHub.
20 views
Exploits from Github
CVE-2024-50404

None

Github link:
https://github.com/C411e/CVE-2024-50404
GitHub
GitHub - C411e/CVE-2024-50404: CVE-2024-50404
CVE-2024-50404. Contribute to C411e/CVE-2024-50404 development by creating an account on GitHub.
23 views
Exploits from Github
CVE-2024-35250

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

Github link:
https://github.com/Brentlyw/GiveMeKernel
GitHub
GitHub - 0xROOTPLS/GiveMeKernel: CVE-2024-35250 PoC - Optimized & Condensed Form of Varwara's PoC
CVE-2024-35250 PoC - Optimized & Condensed Form of Varwara's PoC - 0xROOTPLS/GiveMeKernel
20 views
Exploits from Github
CVE-2023-46805

An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks.

Github link:
https://github.com/rxwx/pulse-meter
GitHub
GitHub - rxwx/pulse-meter: Parses the System Snapshot from an Ivanti Connect Secure applicance to identify possible IOCs related…
Parses the System Snapshot from an Ivanti Connect Secure applicance to identify possible IOCs related to CVE-2023-46805, CVE-2024-21887 and CVE-2025-0282. - rxwx/pulse-meter
15 views
Exploits from Github
CVE-2024-11396

None

Github link:
https://github.com/RandomRobbieBF/CVE-2024-11396
GitHub
GitHub - RandomRobbieBF/CVE-2024-11396: Event monster <= 1.4.3 - Information Exposure Via Visitors List Export
Event monster <= 1.4.3 - Information Exposure Via Visitors List Export - RandomRobbieBF/CVE-2024-11396
17 views
Exploits from Github
CVE-2024-56059

None

Github link:
https://github.com/RandomRobbieBF/CVE-2024-56059
GitHub
GitHub - RandomRobbieBF/CVE-2024-56059: Partners <= 0.2.0 - Unauthenticated PHP Object Injection
Partners <= 0.2.0 - Unauthenticated PHP Object Injection - RandomRobbieBF/CVE-2024-56059
19 views
Exploits from Github
CVE-2024-56058

None

Github link:
https://github.com/RandomRobbieBF/CVE-2024-56058
GitHub
GitHub - RandomRobbieBF/CVE-2024-56058: VRPConnector <= 2.0.1 - Unauthenticated PHP Object Injection
VRPConnector <= 2.0.1 - Unauthenticated PHP Object Injection - RandomRobbieBF/CVE-2024-56058
16 views
Exploits from Github
CVE-2024-10571

None

Github link:
https://github.com/RandomRobbieBF/CVE-2024-10571
GitHub
GitHub - RandomRobbieBF/CVE-2024-10571: Chartify – WordPress Chart Plugin <= 2.9.5 - Unauthenticated Local File Inclusion via source
Chartify – WordPress Chart Plugin <= 2.9.5 - Unauthenticated Local File Inclusion via source - RandomRobbieBF/CVE-2024-10571
15 views
Exploits from Github
CVE-2023-32590

None

Github link:
https://github.com/RandomRobbieBF/CVE-2023-32590
GitHub
GitHub - RandomRobbieBF/CVE-2023-32590: Subscribe to Category <= 2.7.4 - Unauthenticated SQL Injection
Subscribe to Category <= 2.7.4 - Unauthenticated SQL Injection - RandomRobbieBF/CVE-2023-32590
18 views
Exploits from Github
CVE-2024-3605

None

Github link:
https://github.com/RandomRobbieBF/CVE-2024-3605
GitHub
GitHub - RandomRobbieBF/CVE-2024-3605: WP Hotel Booking <= 2.1.0 - Unauthenticated SQL Injection
WP Hotel Booking <= 2.1.0 - Unauthenticated SQL Injection - RandomRobbieBF/CVE-2024-3605
19 views
Exploits from Github
CVE-2024-50491

None

Github link:
https://github.com/RandomRobbieBF/CVE-2024-50491
GitHub
GitHub - RandomRobbieBF/CVE-2024-50491: RSVP ME <= 1.9.9 - Unauthenticated SQL Injection
RSVP ME <= 1.9.9 - Unauthenticated SQL Injection. Contribute to RandomRobbieBF/CVE-2024-50491 development by creating an account on GitHub.
17 views
Exploits from Github
CVE-2024-49699

None

Github link:
https://github.com/RandomRobbieBF/CVE-2024-49699
GitHub
GitHub - RandomRobbieBF/CVE-2024-49699: ARPrice <= 4.0.3 - Authenticated (Subscriber+) PHP Object Injection
ARPrice <= 4.0.3 - Authenticated (Subscriber+) PHP Object Injection - RandomRobbieBF/CVE-2024-49699
17 views
Exploits from Github
CVE-2025-22783

None

Github link:
https://github.com/DoTTak/CVE-2025-22783
GitHub
GitHub - DoTTak/CVE-2025-22783: PoC of CVE-2025-22783
PoC of CVE-2025-22783. Contribute to DoTTak/CVE-2025-22783 development by creating an account on GitHub.
21 views
Exploits from Github
CVE-2024-49138

None

Github link:
https://github.com/MrAle98/CVE-2024-49138-POC
GitHub
GitHub - MrAle98/CVE-2024-49138-POC: POC exploit for CVE-2024-49138
POC exploit for CVE-2024-49138. Contribute to MrAle98/CVE-2024-49138-POC development by creating an account on GitHub.
19 views
Exploits from Github
CVE-2024-1247

None

Github link:
https://github.com/Nxploited/CVE-2024-1247-PoC
GitHub
GitHub - Nxploited/CVE-2024-1247-PoC: Post Saint <= 1.3.1 plugin for WordPress Arbitrary File Upload
Post Saint <= 1.3.1 plugin for WordPress Arbitrary File Upload - GitHub - Nxploited/CVE-2024-1247-PoC: Post Saint <= 1.3.1 plugin for WordPress Arbitrary File Upload
18 views
Exploits from Github
CVE-2024-53407

None

Github link:
https://github.com/SyFi/CVE-2024-53407
GitHub
GitHub - SyFi/CVE-2024-53407: CVE-2024-53407
CVE-2024-53407. Contribute to SyFi/CVE-2024-53407 development by creating an account on GitHub.
19 views
Exploits from Github
CVE-2024-49138

None

Github link:
https://github.com/aspire20x/CVE-2024-49138-POC
GitHub
GitHub - aspire20x/CVE-2024-49138-POC: POC exploit for CVE-2024-49138
POC exploit for CVE-2024-49138. Contribute to aspire20x/CVE-2024-49138-POC development by creating an account on GitHub.
18 views
Exploits from Github
CVE-2025-21385

None

Github link:
https://github.com/Pauloxc6/CVE-2025-21385
GitHub
GitHub - Pauloxc6/CVE-2025-21385: The SSRF vulnerability in Microsoft Purview
The SSRF vulnerability in Microsoft Purview. Contribute to Pauloxc6/CVE-2025-21385 development by creating an account on GitHub.
18 views