CVE-2020-1054

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1143.

Github link:
https://github.com/Naman2701B/CVE-2020-1054

CVE-2020-0665

An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trusting forest request delegation of a TGT for an identity from the trusted forest, aka 'Active Directory Elevation of Privilege Vulnerability'.

Github link:
https://github.com/gunzf0x/CVE-2020-0665

CVE-2025-29927

None

Github link:
https://github.com/Knotsecurity/CVE-2025-29927-NextJs-Middleware-Simulation

CVE-2025-2294

None

Github link:
https://github.com/rhz0d/CVE-2025-2294

CVE-2025-39601

None

Github link:
https://github.com/Nxploited/CVE-2025-39601

CVE-2024-57394

None

Github link:
https://github.com/cwjchoi01/CVE-2024-57394

CVE-2025-30967

None

Github link:
https://github.com/Anton-ai111/CVE-2025-30967

CVE-2024-3094

Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. The tarballs included extra .m4 files, which contained instructions for building with automake that did not exist in the repository. These instructions, through a series of complex obfuscations, extract a prebuilt object file from one of the test archives, which is then used to modify specific functions in the code while building the liblzma package. This issue results in liblzma being used by additional software, like sshd, to provide functionality that will be interpreted by the modified functions.

Github link:
https://github.com/been22426/CVE-2024-3094

CVE-2023-45878

None

Github link:
https://github.com/ulricvbs/gibbonlms-filewrite_rce

CVE-2025-24797

None

Github link:
https://github.com/Alainx277/CVE-2025-24797

CVE-2018-14847

MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface.

Github link:
https://github.com/tausifzaman/CVE-2018-14847

CVE-2025-26244

None

Github link:
https://github.com/JaRm222/CVE-2025-26244

CVE-2025-28009

None

Github link:
https://github.com/beardenx/CVE-2025-28009

CVE-2025-3568

None

Github link:
https://github.com/shellkraft/CVE-2025-3568

CVE-2021-23017

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

Github link:
https://github.com/Cybervixy/Vulnerability-Management

CVE-2024-45436

extractFromZipFile in model.go in Ollama before 0.1.47 can extract members of a ZIP archive outside of the parent directory.

Github link:
https://github.com/srcx404/CVE-2024-45436

CVE-2023-27163

request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/baskets/{name}. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request.

Github link:
https://github.com/lukehebe/CVE-2023-27163

CVE-2024-31317

None

Github link:
https://github.com/Anonymous941/zygote-injection-toolkit

CVE-2023-28303

None

Github link:
https://github.com/m31r0n/SnipRecover-CLI

CVE-2018-25031

Swagger UI before 4.1.3 could allow a remote attacker to conduct spoofing attacks. By persuading a victim to open a crafted URL, an attacker could exploit this vulnerability to display remote OpenAPI definitions.

Github link:
https://github.com/nigartest/CVE-2018-25031