Exploits from Github

CVE-2023-39141

webui-aria2 commit 4fe2e was discovered to contain a path traversal vulnerability.

Github link:
https://github.com/MartiSabate/CVE-2023-39141-LFI-enumerator

GitHub

GitHub - MartiSabate/CVE-2023-39141-LFI-enumerator: enumerate files and directories from a remote server

enumerate files and directories from a remote server - MartiSabate/CVE-2023-39141-LFI-enumerator

43 views13:40

Exploits from Github

CVE-2025-24221

None

Github link:
https://github.com/AnonymousDeveloper69/CVE-2025-24221

41 views13:40

Exploits from Github

CVE-2024-3640

None

Github link:
https://github.com/H1ng007/CVE-2024-3640_WafBypass

GitHub

GitHub - H1ng007/CVE-2024-3640_WafBypass: CVE-2024-3640绕过Waf进行漏洞利用

CVE-2024-3640绕过Waf进行漏洞利用. Contribute to H1ng007/CVE-2024-3640_WafBypass development by creating an account on GitHub.

38 views13:40

Exploits from Github

CVE-2025-29810

None

Github link:
https://github.com/aleongx/CVE-2025-29810-check

GitHub

GitHub - aleongx/CVE-2025-29810-check: Para verificar si tu entorno podría ser vulnerable al CVE-2025-29810, necesitamos hacer…

Para verificar si tu entorno podría ser vulnerable al CVE-2025-29810, necesitamos hacer algunas comprobaciones básicas, como: Versión del sistema operativo y nivel de parche. Presencia de la actu...

34 views19:41

Exploits from Github

CVE-2024-48887

None

Github link:
https://github.com/cybersecplayground/CVE-2024-48887-FortiSwitch-Exploit

GitHub

GitHub - cybersecplayground/CVE-2024-48887-FortiSwitch-Exploit: a lightweight JavaScript snippet showcasing how unauthorized password…

a lightweight JavaScript snippet showcasing how unauthorized password changes can be triggered on vulnerable Fortinet FortiSwitch GUI endpoints. - cybersecplayground/CVE-2024-48887-FortiSwitch-Exploit

35 views19:42

Exploits from Github

CVE-2024-21513

None

Github link:
https://github.com/nskath/CVE-2024-21513

GitHub

GitHub - nskath/CVE-2024-21513: PoC for CVE-2024-21513

PoC for CVE-2024-21513. Contribute to nskath/CVE-2024-21513 development by creating an account on GitHub.

34 views19:42

Exploits from Github

CVE-2025-24813

None

Github link:
https://github.com/f8l124/CVE-2025-24813-POC

GitHub

GitHub - f8l124/CVE-2025-24813-POC: A simple, easy-to-use POC for CVE-2025-42813 (Apache Tomcat versions below 9.0.99).

A simple, easy-to-use POC for CVE-2025-42813 (Apache Tomcat versions below 9.0.99). - f8l124/CVE-2025-24813-POC

34 views19:42

Exploits from Github

CVE-2025-29927

None

Github link:
https://github.com/l1uk/nextjs-middleware-exploit

GitHub

GitHub - l1uk/nextjs-middleware-exploit: Research on Next.js middleware vulnerability (CVE-2025-29927) allowing authorization bypass…

Research on Next.js middleware vulnerability (CVE-2025-29927) allowing authorization bypass and potential exploits. - l1uk/nextjs-middleware-exploit

33 views19:42

Exploits from Github

CVE-2024-56071

None

Github link:
https://github.com/Nxploited/CVE-2024-56071

GitHub

GitHub - Nxploited/CVE-2024-56071: Simple Dashboard <= 2.0 - Unauthenticated Privilege Escalation

Simple Dashboard <= 2.0 - Unauthenticated Privilege Escalation - Nxploited/CVE-2024-56071

38 views19:42

Exploits from Github

CVE-2021-27289

None

Github link:
https://github.com/TheMalwareGuardian/CVE-2021-27289

GitHub

GitHub - TheMalwareGuardian/CVE-2021-27289: CVE-2021-27289: Playback Protection Bypass on Ksix Zigbee devices

CVE-2021-27289: Playback Protection Bypass on Ksix Zigbee devices - TheMalwareGuardian/CVE-2021-27289

42 views19:42

Exploits from Github

CVE-2024-25600

Improper Control of Generation of Code ('Code Injection') vulnerability in Codeer Limited Bricks Builder allows Code Injection.This issue affects Bricks Builder: from n/a through 1.9.6.

Github link:
https://github.com/ivanbg2004/ODH-BricksBuilder-CVE-2024-25600-THM

GitHub

GitHub - ivanbg2004/ODH-BricksBuilder-CVE-2024-25600-THM: OD&H's scanner for CVE-2024-25600 vulnerability in the Bricks Builder…

OD&H's scanner for CVE-2024-25600 vulnerability in the Bricks Builder WordPress plugin. For use in Try Hack Me (THM) environments. - ivanbg2004/ODH-BricksBuilder-CVE-2024-25600-THM

45 views01:44

Exploits from Github

CVE-2025-22457

None

Github link:
https://github.com/securekomodo/CVE-2025-22457

GitHub

GitHub - securekomodo/CVE-2025-22457: CVE-2025-22457: Python Exploit POC Scanner to Detect Ivanti Connect Secure RCE

CVE-2025-22457: Python Exploit POC Scanner to Detect Ivanti Connect Secure RCE - securekomodo/CVE-2025-22457

40 views07:45

Exploits from Github

CVE-2024-48887

None

Github link:
https://github.com/groshi215/CVE-2024-48887-Exploit

GitHub

GitHub - groshi215/CVE-2024-48887-Exploit: Unverified Password Change (CWE-620)

Unverified Password Change (CWE-620). Contribute to groshi215/CVE-2024-48887-Exploit development by creating an account on GitHub.

39 views13:37

Exploits from Github

CVE-2024-4577

In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command line given to Win32 API functions. PHP CGI module may misinterpret those characters as PHP options, which may allow a malicious user to pass options to PHP binary being run, and thus reveal the source code of scripts, run arbitrary PHP code on the server, etc.

Github link:
https://github.com/deadlybangle/CVE-2024-4577-PHP-RCE

38 views13:37

Exploits from Github

CVE-2025-3248

None

Github link:
https://github.com/xuemian168/CVE-2025-3248

GitHub

GitHub - xuemian168/CVE-2025-3248: A vulnerability scanner for CVE-2025-3248 in Langflow applications. 用于扫描 Langflow 应用中 CVE-2025…

A vulnerability scanner for CVE-2025-3248 in Langflow applications. 用于扫描 Langflow 应用中 CVE-2025-3248 漏洞的工具。 - xuemian168/CVE-2025-3248

36 views13:38

Exploits from Github

CVE-2025-31033

None

Github link:
https://github.com/Nxploited/CVE-2025-31033

GitHub

GitHub - Nxploited/CVE-2025-31033: WordPress Buddypress Humanity Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)

WordPress Buddypress Humanity Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF) - GitHub - Nxploited/CVE-2025-31033: WordPress Buddypress Humanity Plugin <= 1.2 is vu...

37 views13:38

Exploits from Github

CVE-2025-1974

None

Github link:
https://github.com/Rubby2001/CVE-2025-1974-go

GitHub

GitHub - Rubby2001/CVE-2025-1974-go: Exploit CVE-2025-1974 with a single file.

Exploit CVE-2025-1974 with a single file. Contribute to Rubby2001/CVE-2025-1974-go development by creating an account on GitHub.

40 views13:38

Exploits from Github

CVE-2025-29705

None

Github link:
https://github.com/yxzrw/CVE-2025-29705

GitHub

GitHub - yxzrw/CVE-2025-29705: CVE-2025-29705

CVE-2025-29705. Contribute to yxzrw/CVE-2025-29705 development by creating an account on GitHub.

37 views19:39

Exploits from Github

CVE-2025-3248

None

Github link:
https://github.com/PuddinCat/CVE-2025-3248-POC

GitHub

GitHub - PuddinCat/CVE-2025-3248-POC: POC of CVE-2025-3248, RCE of LangFlow

POC of CVE-2025-3248, RCE of LangFlow. Contribute to PuddinCat/CVE-2025-3248-POC development by creating an account on GitHub.

42 views19:39

Exploits from Github

CVE-2019-15107

An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnerability.

Github link:
https://github.com/Mattb709/CVE-2019-15107-Webmin-RCE-PoC

GitHub

GitHub - Mattb709/CVE-2019-15107-Webmin-RCE-PoC: A Python proof-of-concept exploit for CVE-2019-15107 - an unauthenticated remote…

A Python proof-of-concept exploit for CVE-2019-15107 - an unauthenticated remote code execution vulnerability in Webmin versions 1.890 through 1.920. - Mattb709/CVE-2019-15107-Webmin-RCE-PoC

36 views01:40

About

Blog

Apps

Platform