CVE-2021-40438

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.

Github link:
https://github.com/yakir2b/check-point-gateways-rce

CVE-2024-54507

None

Github link:
https://github.com/jprx/CVE-2024-54507

CVE-2020-10136

None

Github link:
https://github.com/GustavoHGP/ipeeyoupeewepee

CVE-2023-4220

Unrestricted file upload in big file upload functionality in `/main/inc/lib/javascript/bigupload/inc/bigUpload.php` in Chamilo LMS <= v1.11.24 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via uploading of web shell.

Github link:
https://github.com/zora-beep/CVE-2023-4220

CVE-2024-41570

An Unauthenticated Server-Side Request Forgery (SSRF) in demon callback handling in Havoc 2 0.7 allows attackers to send arbitrary network traffic originating from the team server.

Github link:
https://github.com/0xLynk/CVE-2024-41570-POC

CVE-2024-45337

None

Github link:
https://github.com/peace-maker/CVE-2024-45337

CVE-2022-40684

An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an unauthenticated atttacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.

Github link:
https://github.com/niklasmato/fortileak-01-2025-Be

CVE-2024-55591

None

Github link:
https://github.com/amfg145/Private-CVE-2024-55591.

CVE-2024-3673

None

Github link:
https://github.com/Nxploited/CVE-2024-3673

CVE-2023-40029

None

Github link:
https://github.com/guobei233/CVE-2023-40029

CVE-2024-9047

None

Github link:
https://github.com/Nxploited/CVE-2024-9047-Exploit

CVE-2025-0411

None

Github link:
https://github.com/CastroJared/7-Zip-CVE-2025-0411-POC

CVE-2024-55591

None

Github link:
https://github.com/robomusk52/exp-cmd-add-admin-vpn-CVE-2024-55591

CVE-2024-57373

None

Github link:
https://github.com/cypherdavy/CVE-2024-57373

CVE-2016-2555

SQL injection vulnerability in include/lib/mysql_connect.inc.php in ATutor 2.2.1 allows remote attackers to execute arbitrary SQL commands via the searchFriends function to friends.inc.php.

Github link:
https://github.com/HussainFathy/CVE-2016-2555

CVE-2024-25600

Improper Control of Generation of Code ('Code Injection') vulnerability in Codeer Limited Bricks Builder allows Code Injection.This issue affects Bricks Builder: from n/a through 1.9.6.

Github link:
https://github.com/Sibul-Dan-Glokta/test-task-CVE-2024-25600

CVE-2021-43798

Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: `<grafana_host_url>/public/plugins//`, where is the plugin ID for any installed plugin. At no time has Grafana Cloud been vulnerable. Users are advised to upgrade to patched versions 8.0.7, 8.1.8, 8.2.7, or 8.3.1. The GitHub Security Advisory contains more information about vulnerable URL paths, mitigation, and the disclosure timeline.

Github link:
https://github.com/davidr-io/Grafana-8.3-Directory-Traversal

CVE-2024-2961

The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.


Github link:
https://github.com/kyotozx/CVE-2024-2961-Remote-File-Read

CVE-2025-0411

None

Github link:
https://github.com/iSee857/CVE-2025-0411-PoC

CVE-2015-9235

In jsonwebtoken node module before 4.2.2 it is possible for an attacker to bypass verification when a token digitally signed with an asymmetric key (RS/ES family) of algorithms but instead the attacker send a token digitally signed with a symmetric algorithm (HS* family).

Github link:
https://github.com/z-bool/Venom-JWT