CVE-2025-30208

None

Github link:
https://github.com/imbas007/CVE-2025-30208-template

CVE-2025-30065

None

Github link:
https://github.com/ThreatRadarAI/TRA-001-Critical-RCE-Vulnerability-in-Apache-Parquet-CVE-2025-30065-Simulation-

CVE-2024-40445

None

Github link:
https://github.com/TaiYou-TW/CVE-2024-40445_CVE-2024-40446

CVE-2025-31161

None

Github link:
https://github.com/TX-One/CVE-2025-31161

CVE-2021-34371

Neo4j through 3.4.18 (with the shell server enabled) exposes an RMI service that arbitrarily deserializes Java objects, e.g., through setSessionVariable. An attacker can abuse this for remote code execution because there are dependencies with exploitable gadget chains.

Github link:
https://github.com/tavgar/CVE-2021-34371

CVE-2024-28987

The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.

Github link:
https://github.com/alecclyde/CVE-2024-28987

CVE-2025-24016

None

Github link:
https://github.com/cybersecplayground/CVE-2025-24016-Wazuh-Remote-Code-Execution-RCE-PoC

CVE-2025-43919

None

Github link:
https://github.com/cybersecplayground/CVE-2025-43919-POC

CVE-2023-44487

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

Github link:
https://github.com/zanks08/cve-2023-44487-demo

CVE-2025-29529

None

Github link:
https://github.com/Yoshik0xF6/CVE-2025-29529

CVE-2025-32140

None

Github link:
https://github.com/Nxploited/CVE-2025-32140

CVE-2025-24054

None

Github link:
https://github.com/helidem/CVE-2025-24054-PoC

CVE-2024-49138

None

Github link:
https://github.com/CyprianAtsyor/letsdefend-cve-2024-49138-investigation

CVE-2024-27876

None

Github link:
https://github.com/0xilis/CVE-2024-27876

CVE-2023-25157

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. GeoServer includes support for the OGC Filter expression language and the OGC Common Query Language (CQL) as part of the Web Feature Service (WFS) and Web Map Service (WMS) protocols. CQL is also supported through the Web Coverage Service (WCS) protocol for ImageMosaic coverages. Users are advised to upgrade to either version 2.21.4, or version 2.22.2 to resolve this issue. Users unable to upgrade should disable the PostGIS Datastore *encode functions* setting to mitigate ``strEndsWith``, ``strStartsWith`` and ``PropertyIsLike `` misuse and enable the PostGIS DataStore *preparedStatements* setting to mitigate the ``FeatureId`` misuse.

Github link:
https://github.com/charis3306/CVE-2023-25157

CVE-2024-12905

None

Github link:
https://github.com/theMcSam/CVE-2024-12905-PoC

CVE-2024-42471

None

Github link:
https://github.com/theMcSam/CVE-2024-42471-PoC

CVE-2021-43857

Gerapy is a distributed crawler management framework. Gerapy prior to version 0.9.8 is vulnerable to remote code execution, and this issue is patched in version 0.9.8.

Github link:
https://github.com/G4sp4rCS/CVE-2021-43857-POC

CVE-2023-30861

Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches `Set-Cookie` headers, it may send one client's `session` cookie to other clients. The severity depends on the application's use of the session and the proxy's behavior regarding cookies. The risk depends on all these conditions being met.

1. The application must be hosted behind a caching proxy that does not strip cookies or ignore responses with cookies.
2. The application sets `session.permanent = True`
3. The application does not access or modify the session at any point during a request.
4. `SESSION_REFRESH_EACH_REQUEST` enabled (the default).
5. The application does not set a `Cache-Control` header to indicate that a page is private or should not be cached.

This happens because vulnerable versions of Flask only set the `Vary: Cookie` header when the session is ac

Github link:
https://github.com/fromitive/cve-2023-30861-poc

CVE-2019-5420

A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess the automatically generated development mode secret token. This secret token can be used in combination with other Rails internals to escalate to a remote code execution exploit.

Github link:
https://github.com/sealldeveloper/CVE-2019-5420-PoC