CVE-2025-45466

None

Github link:
https://github.com/zgsnj123/CVE-2025-45466

CVE-2025-0133

A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect™ gateway and portal features of Palo Alto Networks PAN-OS® software enables execution of malicious JavaScript in the context of an authenticated Captive Portal user's browser when they click on a specially crafted link. The primary risk is phishing attacks that can lead to credential theft—particularly if you enabled Clientless VPN.

There is no availability impact to GlobalProtect features or GlobalProtect users. Attackers cannot use this vulnerability to tamper with or modify contents or configurations of the GlobalProtect portal or gateways. The integrity impact of this vulnerability is limited to enabling an attacker to create phishing and credential-stealing links that appear to be hosted on the GlobalProtect portal.



For GlobalProtect users with Clientless VPN enabled, there is a limited impact on confidentiality due to inherent risks of Clientless VPN that facilitate credential theft. You can read more about this risk in the in

Github link:
https://github.com/INTELEON404/CVE-2025-0133

CVE-2025-5309

None

Github link:
https://github.com/issamjr/CVE-2025-5309-Scanner

CVE-2025-49144

None

Github link:
https://github.com/Vr00mm/CVE-2025-49144

CVE-2025-1718

None

Github link:
https://github.com/issamjr/CVE-2025-1718-Scanner

CVE-2022-1257

None

Github link:
https://github.com/kayes817/CVE-2022-1257

CVE-2025-49132

Pterodactyl is a free, open-source game server management panel. Prior to version 1.11.11, using the /locales/locale.json with the locale and namespace query parameters, a malicious actor is able to execute arbitrary code without being authenticated. With the ability to execute arbitrary code it could be used to gain access to the Panel's server, read credentials from the Panel's config, extract sensitive information from the database, access files of servers managed by the panel, etc. This issue has been patched in version 1.11.11. There are no software workarounds for this vulnerability, but use of an external Web Application Firewall (WAF) could help mitigate this attack.

Github link:
https://github.com/63square/CVE-2025-49132

CVE-2025-3248

Langflow versions prior to 1.3.0 are susceptible to code injection in
the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary
code.

Github link:
https://github.com/ill-deed/Langflow-CVE-2025-3248-Multi-target

CVE-2023-46818

An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if admin_allow_langedit is enabled.

Github link:
https://github.com/SyFi/CVE-2023-46818

CVE-2025-27558

None

Github link:
https://github.com/Atlas-ghostshell/CVE-2025-27558_Patching

CVE-2022-2588

It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.

Github link:
https://github.com/Igr1s-red/CVE-2022-2588

CVE-2019-5736

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to /proc/self/exe.

Github link:
https://github.com/Perimora/cve_2019-5736-PoC

CVE-2014-62

None

Github link:
https://github.com/sage954526/HFS_EXPLOIT_PROJECT

CVE-2025-49132

Pterodactyl is a free, open-source game server management panel. Prior to version 1.11.11, using the /locales/locale.json with the locale and namespace query parameters, a malicious actor is able to execute arbitrary code without being authenticated. With the ability to execute arbitrary code it could be used to gain access to the Panel's server, read credentials from the Panel's config, extract sensitive information from the database, access files of servers managed by the panel, etc. This issue has been patched in version 1.11.11. There are no software workarounds for this vulnerability, but use of an external Web Application Firewall (WAF) could help mitigate this attack.

Github link:
https://github.com/melonlonmeo/CVE-2025-49132

CVE-2025-51046

None

Github link:
https://github.com/0xMesh-X/CVE-2025-51046

CVE-2025-44608

None

Github link:
https://github.com/mr-xmen786/CVE-2025-44608

CVE-2025-48703

None

Github link:
https://github.com/trh4ckn0n/CVE-2025-48703

CVE-2025-48828

None

Github link:
https://github.com/ill-deed/vBulletin-CVE-2025-48828-Multi-target

CVE-2025-30712

None

Github link:
https://github.com/jamesb5959/CVE-2025-30712-_PoC

CVE-2025-47577

Unrestricted Upload of File with Dangerous Type vulnerability in TemplateInvaders TI WooCommerce Wishlist allows Upload a Web Shell to a Web Server.This issue affects TI WooCommerce Wishlist: from n/a through 2.9.2.

Github link:
https://github.com/sug4r-wr41th/CVE-2025-47577