CVE-2024-41570

An Unauthenticated Server-Side Request Forgery (SSRF) in demon callback handling in Havoc 2 0.7 allows attackers to send arbitrary network traffic originating from the team server.

Github link:
https://github.com/thisisveryfunny/CVE-2024-41570-Havoc-C2-RCE

CVE-2024-46982

None

Github link:
https://github.com/Lercas/CVE-2024-46982

CVE-2024-50379

None

Github link:
https://github.com/pwnosec/CVE-2024-50379

CVE-2024-38077

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability

Github link:
https://github.com/Accord96/CVE-2024-38077-POC

CVE-2021-40438

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.

Github link:
https://github.com/yakir2b/check-point-gateways-rce

CVE-2024-54507

None

Github link:
https://github.com/jprx/CVE-2024-54507

CVE-2020-10136

None

Github link:
https://github.com/GustavoHGP/ipeeyoupeewepee

CVE-2023-4220

Unrestricted file upload in big file upload functionality in `/main/inc/lib/javascript/bigupload/inc/bigUpload.php` in Chamilo LMS <= v1.11.24 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via uploading of web shell.

Github link:
https://github.com/zora-beep/CVE-2023-4220

CVE-2024-41570

An Unauthenticated Server-Side Request Forgery (SSRF) in demon callback handling in Havoc 2 0.7 allows attackers to send arbitrary network traffic originating from the team server.

Github link:
https://github.com/0xLynk/CVE-2024-41570-POC

CVE-2024-45337

None

Github link:
https://github.com/peace-maker/CVE-2024-45337

CVE-2022-40684

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.

Github link:
https://github.com/niklasmato/fortileak-01-2025-Be

CVE-2024-55591

None

Github link:
https://github.com/amfg145/Private-CVE-2024-55591.

CVE-2024-3673

None

Github link:
https://github.com/Nxploited/CVE-2024-3673

CVE-2023-40029

None

Github link:
https://github.com/guobei233/CVE-2023-40029

CVE-2024-9047

None

Github link:
https://github.com/Nxploited/CVE-2024-9047-Exploit

CVE-2025-0411

None

Github link:
https://github.com/CastroJared/7-Zip-CVE-2025-0411-POC

CVE-2024-55591

None

Github link:
https://github.com/robomusk52/exp-cmd-add-admin-vpn-CVE-2024-55591

CVE-2024-57373

None

Github link:
https://github.com/cypherdavy/CVE-2024-57373

CVE-2016-2555

SQL injection vulnerability in include/lib/mysql_connect.inc.php in ATutor 2.2.1 allows remote attackers to execute arbitrary SQL commands via the searchFriends function to friends.inc.php.

Github link:
https://github.com/HussainFathy/CVE-2016-2555

CVE-2024-25600

Improper Control of Generation of Code ('Code Injection') vulnerability in Codeer Limited Bricks Builder allows Code Injection.This issue affects Bricks Builder: from n/a through 1.9.6.

Github link:
https://github.com/Sibul-Dan-Glokta/test-task-CVE-2024-25600