CVE-2025-32206

None

Github link:
https://github.com/Nxploited/CVE-2025-32206

CVE-2019-10149

A flaw was found in Exim versions 4.87 to 4.91 (inclusive). Improper validation of recipient address in deliver_message() function in /src/deliver.c may lead to remote command execution.

Github link:
https://github.com/VoyagerOnne/Exim-CVE-2019-10149

CVE-2025-29927

None

Github link:
https://github.com/darklotuskdb/nextjs-CVE-2025-29927-hunter

CVE-2024-4367

A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.

Github link:
https://github.com/BektiHandoyo/cve-pdf-host

CVE-2025-3102

None

Github link:
https://github.com/xxmarcosrobertoxx/vanda-CVE-2025-3102

CVE-2024-36991

In Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10, an attacker could perform a path traversal on the /modules/messaging/ endpoint in Splunk Enterprise on Windows. This vulnerability should only affect Splunk Enterprise on Windows.

Github link:
https://github.com/xploitnik/CVE-2024-36991-modified

CVE-2024-4577

In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command line given to Win32 API functions. PHP CGI module may misinterpret those characters as PHP options, which may allow a malicious user to pass options to PHP binary being run, and thus reveal the source code of scripts, run arbitrary PHP code on the server, etc.

Github link:
https://github.com/sug4r-wr41th/CVE-2024-4577

CVE-2023-1177

Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1.

Github link:
https://github.com/paultheal1en/CVE-2023-1177-PoC-reproduce

CVE-2015-4133

None

Github link:
https://github.com/sug4r-wr41th/CVE-2015-4133

CVE-2023-28121

An issue in WooCommerce Payments plugin for WordPress (versions 5.6.1 and lower) allows an unauthenticated attacker to send requests on behalf of an elevated user, like administrator. This allows a remote, unauthenticated attacker to gain admin access on a site that has the affected version of the plugin activated.

Github link:
https://github.com/sug4r-wr41th/CVE-2023-28121

CVE-2011-2523

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

Github link:
https://github.com/sug4r-wr41th/CVE-2011-2523

CVE-2025-26529

None

Github link:
https://github.com/Astroo18/PoC-CVE-2025-26529

CVE-2025-24813

None

Github link:
https://github.com/Mattb709/CVE-2025-24813-Scanner

CVE-2018-16763

FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth Remote Code Execution.

Github link:
https://github.com/ArtemCyberLab/Project-Exploiting-a-Vulnerability-in-Fuel-CMS-CVE-2018-16763-

CVE-2025-29927

None

Github link:
https://github.com/ethanol1310/POC-CVE-2025-29927-

CVE-2023-35085

None

Github link:
https://github.com/maoruiQa/CVE-2023-35085-POC-EXP

CVE-2021-4034

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.

Github link:
https://github.com/marcosChoucino/CVE-2021-4034

CVE-2021-4034

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.

Github link:
https://github.com/igonzalez357/CVE-2021-4034-PwnKit-

CVE-2023-46818

An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if admin_allow_langedit is enabled.

Github link:
https://github.com/blindma1den/CVE-2023-46818-Exploit

CVE-2024-4367

A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.

Github link:
https://github.com/Bhavyakcwestern/Hacking-pdf.js-vulnerability