CVE-2025-6907

None

Github link:
https://github.com/byteReaper77/cve-2025-6907

CVE-2025-32463

None

Github link:
https://github.com/SkylerMC/CVE-2025-32463

CVE-2025-32463

None

Github link:
https://github.com/B1ack4sh/Blackash-CVE-2025-32463

CVE-2025-5777

Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

Github link:
https://github.com/RickGeex/CVE-2025-5777-CitrixBleed

CVE-2025-32462

None

Github link:
https://github.com/cyberpoul/CVE-2025-32462-POC

CVE-2025-32463

None

Github link:
https://github.com/cyberpoul/CVE-2025-32463-POC

CVE-2025-5777

Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

Github link:
https://github.com/idobarel/CVE-2025-5777

CVE-2025-32462

None

Github link:
https://github.com/SpongeBob-369/cve-2025-32462

CVE-2025-32463

None

Github link:
https://github.com/junxian428/CVE-2025-32463

CVE-2025-0411

7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the handling of archived files. When extracting files from a crafted archive that bears the Mark-of-the-Web, 7-Zip does not propagate the Mark-of-the-Web to the extracted files. An attacker can leverage this vulnerability to execute arbitrary code in the context of the current user. Was ZDI-CAN-25456.

Github link:
https://github.com/B1ack4sh/Blackash-CVE-2025-0411

CVE-2023-27350

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not required to exploit this vulnerability. The specific flaw exists within the SetupCompleted class. The issue results from improper access control. An attacker can leverage this vulnerability to bypass authentication and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-18987.

Github link:
https://github.com/Royall-Researchers/CVE-2023-27350

CVE-2025-49493

None

Github link:
https://github.com/B1ack4sh/Blackash-CVE-2025-49493

CVE-2024-55963

None

Github link:
https://github.com/superswan/CVE-2024-55963

CVE-2025-5777

Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

Github link:
https://github.com/nocerainfosec/cve-2025-5777

CVE-2024-9264

The SQL Expressions experimental feature of Grafana allows for the evaluation of `duckdb` queries containing user input. These queries are insufficiently sanitized before being passed to `duckdb`, leading to a command injection and local file inclusion vulnerability. Any user with the VIEWER or higher permission is capable of executing this attack. The `duckdb` binary must be present in Grafana's $PATH for this attack to function; by default, this binary is not installed in Grafana distributions.

Github link:
https://github.com/ruizii/CVE-2024-9264

CVE-2024-36991

In Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10, an attacker could perform a path traversal on the /modules/messaging/ endpoint in Splunk Enterprise on Windows. This vulnerability should only affect Splunk Enterprise on Windows.

Github link:
https://github.com/Zin0D/CVE-2024-36991

CVE-2025-5777

Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

Github link:
https://github.com/RaR1991/citrix_bleed_2

CVE-2021-25646

Apache Druid includes the ability to execute user-provided JavaScript code embedded in various types of requests. This functionality is intended for use in high-trust environments, and is disabled by default. However, in Druid 0.20.0 and earlier, it is possible for an authenticated user to send a specially-crafted request that forces Druid to run user-provided JavaScript code for that request, regardless of server configuration. This can be leveraged to execute code on the target machine with the privileges of the Druid server process.

Github link:
https://github.com/ShadowLance2/Apache-Druid-CVE-2021-25646-Exploit

CVE-2025-4403

The Drag and Drop Multiple File Upload for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads in all versions up to, and including, 1.1.6 due to accepting a user-supplied supported_type string and the uploaded filename without enforcing real extension or MIME checks within the upload() function. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.

Github link:
https://github.com/B1ack4sh/Blackash-CVE-2025-4403

CVE-2025-32463

None

Github link:
https://github.com/FreeDurok/CVE-2025-32463-PoC