CVE-2024-21532

None

Github link:
https://github.com/lirantal/CVE-2024-21532-PoC-ggit

CVE-2024-28752

None

Github link:
https://github.com/ReaJason/CVE-2024-28752

CVE-2025-21307

None

Github link:
https://github.com/git-account7/CVE-2025-21307

CVE-2025-3605

None

Github link:
https://github.com/Nxploited/CVE-2025-3605

CVE-2025-2748

None

Github link:
https://github.com/xirtam2669/Kentico-Xperience-before-13.0.178---XSS-POC

CVE-2024-25600

Improper Control of Generation of Code ('Code Injection') vulnerability in Codeer Limited Bricks Builder allows Code Injection.This issue affects Bricks Builder: from n/a through 1.9.6.

Github link:
https://github.com/DedsecTeam-BlackHat/Poleposph

CVE-2024-38475

None

Github link:
https://github.com/syaifulandy/CVE-2024-38475

CVE-2025-24203

None

Github link:
https://github.com/jailbreakdotparty/dirtyZero

CVE-2025-27533

None

Github link:
https://github.com/absholi7ly/CVE-2025-27533-Exploit-for-Apache-ActiveMQ

CVE-2024-13513

None

Github link:
https://github.com/KTN1990/CVE-2024-13513

CVE-2023-7231

None

Github link:
https://github.com/BBO513/CVE-2023-7231

CVE-2017-8917

SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspecified vectors.

Github link:
https://github.com/xcalts/CVE-2017-8917

CVE-2025-24203

None

Github link:
https://github.com/GeoSn0w/CVE-2025-24203-iOS-Exploit-in-Swift

CVE-2025-31258

None

Github link:
https://github.com/wh1te4ever/CVE-2025-31258-PoC

CVE-2022-21661

WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to improper sanitization in WP_Query, there can be cases where SQL injection is possible through plugins or themes that use it in a certain way. This has been patched in WordPress version 5.8.3. Older affected versions are also fixed via security release, that go back till 3.7.37. We strongly recommend that you keep auto-updates enabled. There are no known workarounds for this vulnerability.

Github link:
https://github.com/Fauzan-Aldi/CVE-2022-21661

CVE-2025-3248

Langflow versions prior to 1.3.0 are susceptible to code injection in
the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary
code.

Github link:
https://github.com/vigilante-1337/CVE-2025-3248

CVE-2025-24085

A use after free issue was addressed with improved memory management. This issue is fixed in visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2.

Github link:
https://github.com/pxx917144686/12345

CVE-2025-2294

The Kubio AI Page Builder plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.5.1 via thekubio_hybrid_theme_load_template function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.

Github link:
https://github.com/Yucaerin/CVE-2025-2294

CVE-2021-4034

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.

Github link:
https://github.com/Z3R0-0x30/CVE-2021-4034

CVE-2015-3306

The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.

Github link:
https://github.com/Z3R0-0x30/CVE-2015-3306