CVE-2021-29447

Wordpress is an open source CMS. A user with the ability to upload files (like an Author) can exploit an XML parsing issue in the Media Library leading to XXE attacks. This requires WordPress installation to be using PHP 8. Access to internal files is possible in a successful XXE attack. This has been patched in WordPress version 5.7.1, along with the older affected versions via a minor release. We strongly recommend you keep auto-updates enabled.

Github link:
https://github.com/Tea-On/CVE-2021-29447-Authenticated-XXE-WordPress-5.6-5.7

CVE-2025-41646

None

Github link:
https://github.com/cyberre124/CVE-2025-41646---Critical-Authentication-Bypass-

CVE-2025-32463

None

Github link:
https://github.com/yeremeu/CVE-2025-32463_chwoot

CVE-2025-47812

None

Github link:
https://github.com/ill-deed/WingFTP-CVE-2025-47812-illdeed

CVE-2025-29628

None

Github link:
https://github.com/mselbrede/gardyn

CVE-2025-20281

A vulnerability in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system as root. The attacker does not require any valid credentials to exploit this vulnerability.

This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by submitting a crafted API request. A successful exploit could allow the attacker to obtain root privileges on an affected device.

Github link:
https://github.com/ill-deed/Cisco-CVE-2025-20281-illdeed

CVE-2024-4040

VFS Sandbox Escape in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows remote attackers with low privileges to read files from the filesystem outside of VFS Sandbox.


Github link:
https://github.com/ill-deed/CrushFTP-CVE-2024-4040-illdeed

CVE-2025-32463

None

Github link:
https://github.com/zinzloun/CVE-2025-32463

CVE-2025-32463

None

Github link:
https://github.com/ill-deed/CVE-2025-32463_illdeed

CVE-2025-6907

None

Github link:
https://github.com/byteReaper77/cve-2025-6907

CVE-2025-32463

None

Github link:
https://github.com/SkylerMC/CVE-2025-32463

CVE-2025-32463

None

Github link:
https://github.com/B1ack4sh/Blackash-CVE-2025-32463

CVE-2025-5777

Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

Github link:
https://github.com/RickGeex/CVE-2025-5777-CitrixBleed

CVE-2025-32462

None

Github link:
https://github.com/cyberpoul/CVE-2025-32462-POC

CVE-2025-32463

None

Github link:
https://github.com/cyberpoul/CVE-2025-32463-POC

CVE-2025-5777

Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

Github link:
https://github.com/idobarel/CVE-2025-5777

CVE-2025-32462

None

Github link:
https://github.com/SpongeBob-369/cve-2025-32462

CVE-2025-32463

None

Github link:
https://github.com/junxian428/CVE-2025-32463

CVE-2025-0411

7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the handling of archived files. When extracting files from a crafted archive that bears the Mark-of-the-Web, 7-Zip does not propagate the Mark-of-the-Web to the extracted files. An attacker can leverage this vulnerability to execute arbitrary code in the context of the current user. Was ZDI-CAN-25456.

Github link:
https://github.com/B1ack4sh/Blackash-CVE-2025-0411

CVE-2023-27350

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vulnerability. The specific flaw exists within the SetupCompleted class. The issue results from improper access control. An attacker can leverage this vulnerability to bypass authentication and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-18987.

Github link:
https://github.com/Royall-Researchers/CVE-2023-27350