CVE-2025-30967

None

Github link:
https://github.com/Anton-ai111/CVE-2025-30967

CVE-2024-3094

Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. The tarballs included extra .m4 files, which contained instructions for building with automake that did not exist in the repository. These instructions, through a series of complex obfuscations, extract a prebuilt object file from one of the test archives, which is then used to modify specific functions in the code while building the liblzma package. This issue results in liblzma being used by additional software, like sshd, to provide functionality that will be interpreted by the modified functions.

Github link:
https://github.com/been22426/CVE-2024-3094

CVE-2023-45878

None

Github link:
https://github.com/ulricvbs/gibbonlms-filewrite_rce

CVE-2025-24797

None

Github link:
https://github.com/Alainx277/CVE-2025-24797

CVE-2018-14847

MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface.

Github link:
https://github.com/tausifzaman/CVE-2018-14847

CVE-2025-26244

None

Github link:
https://github.com/JaRm222/CVE-2025-26244

CVE-2025-28009

None

Github link:
https://github.com/beardenx/CVE-2025-28009

CVE-2025-3568

None

Github link:
https://github.com/shellkraft/CVE-2025-3568

CVE-2021-23017

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

Github link:
https://github.com/Cybervixy/Vulnerability-Management

CVE-2024-45436

extractFromZipFile in model.go in Ollama before 0.1.47 can extract members of a ZIP archive outside of the parent directory.

Github link:
https://github.com/srcx404/CVE-2024-45436

CVE-2023-27163

request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/baskets/{name}. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request.

Github link:
https://github.com/lukehebe/CVE-2023-27163

CVE-2024-31317

None

Github link:
https://github.com/Anonymous941/zygote-injection-toolkit

CVE-2023-28303

None

Github link:
https://github.com/m31r0n/SnipRecover-CLI

CVE-2018-25031

Swagger UI before 4.1.3 could allow a remote attacker to conduct spoofing attacks. By persuading a victim to open a crafted URL, an attacker could exploit this vulnerability to display remote OpenAPI definitions.

Github link:
https://github.com/nigartest/CVE-2018-25031

CVE-2025-24054

None

Github link:
https://github.com/xigney/CVE-2025-24054_PoC

CVE-2025-24813

None

Github link:
https://github.com/Erosion2020/CVE-2025-24813-vulhub

CVE-2024-4577

In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, when using Apache and PHP-CGI on Windows, if the system is set up to use certain code pages, Windows may use "Best-Fit" behavior to replace characters in command line given to Win32 API functions. PHP CGI module may misinterpret those characters as PHP options, which may allow a malicious user to pass options to PHP binary being run, and thus reveal the source code of scripts, run arbitrary PHP code on the server, etc.

Github link:
https://github.com/Gill-Singh-A/CVE-2024-4577-Exploit

CVE-2021-44967

None

Github link:
https://github.com/monke443/CVE-2021-44967

CVE-2025-32433

None

Github link:
https://github.com/LemieOne/CVE-2025-32433

CVE-2025-32433

None

Github link:
https://github.com/darses/CVE-2025-32433