Exploits from Github
@github_exploits
343 subscribers
1 photo
64 files
2.95K links
https://t.me/PentestNotes

https://t.me/dbugs1337
Download Telegram
About
Blog
Apps
Platform
Join
Exploits from Github
343 subscribers
Exploits from Github
CVE-2024-25600

Improper Control of Generation of Code ('Code Injection') vulnerability in Codeer Limited Bricks Builder allows Code Injection.This issue affects Bricks Builder: from n/a through 1.9.6.

Github link:
https://github.com/meli0dasH4ck3r/cve-2024-25600
GitHub
GitHub - meli0dasH4ck3r/cve-2024-25600: PoC for CVE-2024-25600
PoC for CVE-2024-25600. Contribute to meli0dasH4ck3r/cve-2024-25600 development by creating an account on GitHub.
32 views
Exploits from Github
CVE-2025-31131

None

Github link:
https://github.com/MuhammadWaseem29/CVE-2025-31131
GitHub
GitHub - MuhammadWaseem29/CVE-2025-31131: YesWiki is a wiki system written in PHP. The squelette parameter is vulnerable to path…
YesWiki is a wiki system written in PHP. The squelette parameter is vulnerable to path traversal attacks, enabling read access to arbitrary files on the server. - MuhammadWaseem29/CVE-2025-31131
33 views
Exploits from Github
CVE-2023-40931

A SQL injection vulnerability in Nagios XI from version 5.11.0 up to and including 5.11.1 allows authenticated attackers to execute arbitrary SQL commands via the ID parameter in the POST request to /nagiosxi/admin/banner_message-ajaxhelper.php

Github link:
https://github.com/G4sp4rCS/CVE-2023-40931-POC
GitHub
GitHub - G4sp4rCS/CVE-2023-40931-POC: CVE-2023-40931 Proof of Concept made for HTB MONITORED
CVE-2023-40931 Proof of Concept made for HTB MONITORED - G4sp4rCS/CVE-2023-40931-POC
46 views
Exploits from Github
CVE-2024-48139

None

Github link:
https://github.com/hannahbellesheart/blackbox.ai.security.analysis
GitHub
GitHub - hannahbellesheart/blackbox.ai.security.analysis: Blackbox AI Security Analysis This repo identifies possible security…
Blackbox AI Security Analysis This repo identifies possible security risks w/Blackbox.ai extensions/agents/svcs. Possible credential harvesting, unpatched vulnerabilities like CVE-2024-48139, and ...
42 views
Exploits from Github
CVE-2025-44228

None

Github link:
https://github.com/Karitosmuan/Office-Exploit-Cve2025-Xml-Doc-Docx-Rce-Builder-Fud
40 views
Exploits from Github
CVE-2025-30065

None

Github link:
https://github.com/ron-imperva/CVE-2025-30065-PoC
GitHub
GitHub - ron-imperva/CVE-2025-30065-PoC: CVE-2025-30065 PoC
CVE-2025-30065 PoC. Contribute to ron-imperva/CVE-2025-30065-PoC development by creating an account on GitHub.
35 views
Exploits from Github
CVE-2025-44228

None

Github link:
https://github.com/Kariaoston/Lnk-Exploit-FileBinder-Certificate-Spoofer-Reg-Doc-Cve-Rce
37 views
Exploits from Github
CVE-2025-24813

None

Github link:
https://github.com/AsaL1n/CVE-2025-24813
GitHub
GitHub - AsaL1n/CVE-2025-24813: simple exp for CVE-2025-24813
simple exp for CVE-2025-24813. Contribute to AsaL1n/CVE-2025-24813 development by creating an account on GitHub.
38 views
Exploits from Github
CVE-2011-2523

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

Github link:
https://github.com/vedpakhare/vsftpd-234-vuln-report
GitHub
GitHub - vedpakhare/vsftpd-234-vuln-report: Vulnerability assessment and exploitation of vsftpd 2.3.4 (CVE-2011-2523) using Metasploit.…
Vulnerability assessment and exploitation of vsftpd 2.3.4 (CVE-2011-2523) using Metasploit. Full report and proof of root access included. - vedpakhare/vsftpd-234-vuln-report
38 views
Exploits from Github
CVE-2025-32118

None

Github link:
https://github.com/Nxploited/CVE-2025-32118
GitHub
GitHub - Nxploited/CVE-2025-32118: WordPress CMP – Coming Soon & Maintenance plugin <= 4.1.13 - Remote Code Execution (RCE) vulnerability
WordPress CMP – Coming Soon & Maintenance plugin <= 4.1.13 - Remote Code Execution (RCE) vulnerability - Nxploited/CVE-2025-32118
37 views
Exploits from Github
CVE-2025-30208

None

Github link:
https://github.com/lilil3333/Vite-CVE-2025-30208-EXP
GitHub
GitHub - lilil3333/Vite-CVE-2025-30208-EXP: Vite-CVE-2025-30208-EXP单目标检测，支持自定义读取路径，深度检索
Vite-CVE-2025-30208-EXP单目标检测，支持自定义读取路径，深度检索. Contribute to lilil3333/Vite-CVE-2025-30208-EXP development by creating an account on GitHub.
39 views
Exploits from Github
CVE-2025-12654

None

Github link:
https://github.com/ThoristKaw/Anydesk-Exploit-CVE-2025-12654-RCE-Builder
35 views
Exploits from Github
CVE-2025-29927

None

Github link:
https://github.com/Balajih4kr/cve-2025-29927
GitHub
GitHub - Balajih4kr/cve-2025-29927: CVE-2025-29927 is a critical vulnerability in Next.js, a popular React-based web framework.…
CVE-2025-29927 is a critical vulnerability in Next.js, a popular React-based web framework. The flaw exists in how the middleware feature handles certain internal headers — specifically, the x-midd...
39 views
Exploits from Github
CVE-2025-2783

None

Github link:
https://github.com/Alchemist3dot14/CVE-2025-2783
GitHub
GitHub - Alchemist3dot14/CVE-2025-2783: Simulated PoC for CVE-2025-2783 — a sandbox escape vulnerability in Chrome's Mojo IPC.…
Simulated PoC for CVE-2025-2783 — a sandbox escape vulnerability in Chrome's Mojo IPC. Includes phishing delivery, memory fuzzing, IPC simulation, and logging. Safe for red team demos, dete...
39 views
Exploits from Github
CVE-2018-14714

System command injection in appGet.cgi on ASUS RT-AC3200 version 3.0.0.4.382.50010 allows attackers to execute system commands via the "load_script" URL parameter.

Github link:
https://github.com/ediop3SquadALT/TimeInjector
GitHub
GitHub - ediop3SquadALT/TimeInjector: Time injector is a CVE-2018-14714 exploitation script
Time injector is a CVE-2018-14714 exploitation script - ediop3SquadALT/TimeInjector
32 views
Exploits from Github
CVE-2024-56145

None

Github link:
https://github.com/hmhlol/craft-cms-RCE-CVE-2024-56145
GitHub
GitHub - hmhlol/craft-cms-RCE-CVE-2024-56145: A POC lab environment for CVE-2024-56145 CraftCMS RCE.
A POC lab environment for CVE-2024-56145 CraftCMS RCE. - hmhlol/craft-cms-RCE-CVE-2024-56145
35 views
Exploits from Github
CVE-2025-29927

None

Github link:
https://github.com/YEONDG/nextjs-cve-2025-29927
GitHub
GitHub - YEONDG/nextjs-cve-2025-29927: vulnerable-nextjs-14-CVE-2025-29927
vulnerable-nextjs-14-CVE-2025-29927. Contribute to YEONDG/nextjs-cve-2025-29927 development by creating an account on GitHub.
36 views
Exploits from Github
CVE-2025-2005

None

Github link:
https://github.com/mrmtwoj/CVE-2025-2005
GitHub
GitHub - mrmtwoj/CVE-2025-2005: WordPress FEUP Arbitrary File Upload Exploit (CVE-2025-2005)
WordPress FEUP Arbitrary File Upload Exploit (CVE-2025-2005) - mrmtwoj/CVE-2025-2005
34 views
Exploits from Github
CVE-2025-30567

None

Github link:
https://github.com/KaxuFF/CVE-2025-30567-PoC
36 views
Exploits from Github
CVE-2024-42007

None

Github link:
https://github.com/BubblyCola/CVE_2024_42007
GitHub
GitHub - BubblyCola/CVE_2024_42007: Python exploit for CVE-2024-42007 — a path traversal vulnerability in php-spx <= 0.4.15 that…
Python exploit for CVE-2024-42007 — a path traversal vulnerability in php-spx <= 0.4.15 that allows arbitrary file read via SPX_UI_URI parameter. - BubblyCola/CVE_2024_42007
43 views