CVE-2021-41773

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default configuration "require all denied", these requests can succeed. If CGI scripts are also enabled for these aliased pathes, this could allow for remote code execution. This issue is known to be exploited in the wild. This issue only affects Apache 2.4.49 and not earlier versions. The fix in Apache HTTP Server 2.4.50 was found to be incomplete, see CVE-2021-42013.

Github link:
https://github.com/tiemio/SSH-key-and-RCE-PoC-for-CVE-2021-41773

CVE-2019-0232

When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 is vulnerable to Remote Code Execution due to a bug in the way the JRE passes command line arguments to Windows. The CGI Servlet is disabled by default. The CGI option enableCmdLineArguments is disable by default in Tomcat 9.0.x (and will be disabled by default in all versions in response to this vulnerability). For a detailed explanation of the JRE behaviour, see Markus Wulftange's blog (https://codewhitesec.blogspot.com/2016/02/java-and-command-line-injections-in-windows.html) and this archived MSDN blog (https://web.archive.org/web/20161228144344/https://blogs.msdn.microsoft.com/twistylittlepassagesallalike/2011/04/23/everyone-quotes-command-line-arguments-the-wrong-way/).

Github link:
https://github.com/iumiro/CVE-2019-0232

CVE-2022-22965

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.

Github link:
https://github.com/jashan-lefty/Spring4Shell

CVE-2012-4960

None

Github link:
https://github.com/ghcohu/Decrypt-passwords-for-Huawei-routers-and-switches-CVE-2012-4960

CVE-2017-0144

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0143, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148.

Github link:
https://github.com/MedX267/EternalBlue-Vulnerability-Scanner

CVE-2025-24813

None

Github link:
https://github.com/gregk4sec/CVE-2025-24813

CVE-2025-24813

None

Github link:
https://github.com/N0c1or/CVE-2025-24813_POC

CVE-2025-25101

None

Github link:
https://github.com/Nxploited/CVE-2025-25101

CVE-2024-24451

None

Github link:
https://github.com/SpiralBL0CK/CVE-2024-24451

CVE-2024-24450

None

Github link:
https://github.com/SpiralBL0CK/-CVE-2024-24450-

CVE-2025-0411

None

Github link:
https://github.com/dpextreme/7-Zip-CVE-2025-0411-POC

CVE-2025-1661

None

Github link:
https://github.com/gbrsh/CVE-2025-1661

CVE-2024-25092

Missing Authorization vulnerability in XLPlugins NextMove Lite.This issue affects NextMove Lite: from n/a through 2.17.0.

Github link:
https://github.com/Nxploited/CVE-2024-25092

CVE-2025-1639

None

Github link:
https://github.com/Nxploited/CVE-2025-1639

CVE-2025-24813

None

Github link:
https://github.com/iSee857/CVE-2025-24813-PoC

CVE-2019-2115

None

Github link:
https://github.com/Fred12301/CVE-2019-2115-Pixel-2-2-XL

CVE-2015-0009

The Group Policy Security Configuration policy implementation in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows man-in-the-middle attackers to disable a signing requirement and trigger a revert-to-default action by spoofing domain-controller responses, aka "Group Policy Security Feature Bypass Vulnerability."

Github link:
https://github.com/PhoenixC46/ExploitPOC_MS15-014_CVE-2015-0009

CVE-2024-10674

None

Github link:
https://github.com/Nxploited/CVE-2024-10674

CVE-2024-0760

None

Github link:
https://github.com/SpiralBL0CK/CVE-2024-0760

CVE-2017-0143

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607; and Windows Server 2016 allows remote attackers to execute arbitrary code via crafted packets, aka "Windows SMB Remote Code Execution Vulnerability." This vulnerability is different from those described in CVE-2017-0144, CVE-2017-0145, CVE-2017-0146, and CVE-2017-0148.

Github link:
https://github.com/n3rdh4x0r/MS17-010