CVE-2025-5309

None

Github link:
https://github.com/issamjr/CVE-2025-5309-Scanner

CVE-2025-49144

None

Github link:
https://github.com/Vr00mm/CVE-2025-49144

CVE-2025-1718

None

Github link:
https://github.com/issamjr/CVE-2025-1718-Scanner

CVE-2022-1257

None

Github link:
https://github.com/kayes817/CVE-2022-1257

CVE-2025-49132

Pterodactyl is a free, open-source game server management panel. Prior to version 1.11.11, using the /locales/locale.json with the locale and namespace query parameters, a malicious actor is able to execute arbitrary code without being authenticated. With the ability to execute arbitrary code it could be used to gain access to the Panel's server, read credentials from the Panel's config, extract sensitive information from the database, access files of servers managed by the panel, etc. This issue has been patched in version 1.11.11. There are no software workarounds for this vulnerability, but use of an external Web Application Firewall (WAF) could help mitigate this attack.

Github link:
https://github.com/63square/CVE-2025-49132

CVE-2025-3248

Langflow versions prior to 1.3.0 are susceptible to code injection in
the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary
code.

Github link:
https://github.com/ill-deed/Langflow-CVE-2025-3248-Multi-target

CVE-2023-46818

An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if admin_allow_langedit is enabled.

Github link:
https://github.com/SyFi/CVE-2023-46818

CVE-2025-27558

None

Github link:
https://github.com/Atlas-ghostshell/CVE-2025-27558_Patching

CVE-2022-2588

It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.

Github link:
https://github.com/Igr1s-red/CVE-2022-2588

CVE-2019-5736

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary (and consequently obtain host root access) by leveraging the ability to execute a command as root within one of these types of containers: (1) a new container with an attacker-controlled image, or (2) an existing container, to which the attacker previously had write access, that can be attached with docker exec. This occurs because of file-descriptor mishandling, related to /proc/self/exe.

Github link:
https://github.com/Perimora/cve_2019-5736-PoC

CVE-2014-62

None

Github link:
https://github.com/sage954526/HFS_EXPLOIT_PROJECT

CVE-2025-49132

Pterodactyl is a free, open-source game server management panel. Prior to version 1.11.11, using the /locales/locale.json with the locale and namespace query parameters, a malicious actor is able to execute arbitrary code without being authenticated. With the ability to execute arbitrary code it could be used to gain access to the Panel's server, read credentials from the Panel's config, extract sensitive information from the database, access files of servers managed by the panel, etc. This issue has been patched in version 1.11.11. There are no software workarounds for this vulnerability, but use of an external Web Application Firewall (WAF) could help mitigate this attack.

Github link:
https://github.com/melonlonmeo/CVE-2025-49132

CVE-2025-51046

None

Github link:
https://github.com/0xMesh-X/CVE-2025-51046

CVE-2025-44608

None

Github link:
https://github.com/mr-xmen786/CVE-2025-44608

CVE-2025-48703

None

Github link:
https://github.com/trh4ckn0n/CVE-2025-48703

CVE-2025-48828

None

Github link:
https://github.com/ill-deed/vBulletin-CVE-2025-48828-Multi-target

CVE-2025-30712

None

Github link:
https://github.com/jamesb5959/CVE-2025-30712-_PoC

CVE-2025-47577

Unrestricted Upload of File with Dangerous Type vulnerability in TemplateInvaders TI WooCommerce Wishlist allows Upload a Web Shell to a Web Server.This issue affects TI WooCommerce Wishlist: from n/a through 2.9.2.

Github link:
https://github.com/sug4r-wr41th/CVE-2025-47577

CVE-2024-43917

None

Github link:
https://github.com/sug4r-wr41th/CVE-2024-43917

CVE-2016-5195

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."

Github link:
https://github.com/Samuel-G3/Escalamiento-de-Privilegios-usando-el-Kernel-Exploit-Dirty-Cow