CVE-2024-9264

The SQL Expressions experimental feature of Grafana allows for the evaluation of `duckdb` queries containing user input. These queries are insufficiently sanitized before being passed to `duckdb`, leading to a command injection and local file inclusion vulnerability. Any user with the VIEWER or higher permission is capable of executing this attack. The `duckdb` binary must be present in Grafana's $PATH for this attack to function; by default, this binary is not installed in Grafana distributions.

Github link:
https://github.com/rvizx/CVE-2024-9264

CVE-2025-48703

None

Github link:
https://github.com/Sq-CC/CVE-2025-48703

CVE-2018-10933

A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.

Github link:
https://github.com/bidaoui4905/CVE-2018-10933

CVE-2021-29427

None

Github link:
https://github.com/arsalanraja987/gradle-cve-2021-29427-demo

CVE-2025-47812

None

Github link:
https://github.com/pevinkumar10/CVE-2025-47812

CVE-2021-27568

None

Github link:
https://github.com/arsalanraja987/java-insecure-random-cve-2021-27568

CVE-2020-9488

None

Github link:
https://github.com/arsalanraja987/java-log4j-cve-2020-9488

CVE-2025-32463

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.

Github link:
https://github.com/SpongeBob-369/cve-2025-32463

CVE-2025-5777

Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

Github link:
https://github.com/Chocapikk/CVE-2025-5777

CVE-2025-32463

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.

Github link:
https://github.com/K3ysTr0K3R/CVE-2025-32463-EXPLOIT

CVE-2025-32463

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.

Github link:
https://github.com/abrewer251/CVE-2025-32463_Sudo_PoC

CVE-2025-32463

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.

Github link:
https://github.com/Alaric112/CVE-2025-32463-Chroot-Vulnerabilitity

CVE-2025-4866

None

Github link:
https://github.com/bloodcode-spasov/ble-cve2025-attack-new-version

CVE-2025-5777

Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

Github link:
https://github.com/win3zz/CVE-2025-5777

CVE-2025-48384

None

Github link:
https://github.com/acheong08/CVE-2025-48384

CVE-2025-32463

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.

Github link:
https://github.com/susancodes55/CVE-2025-32463-sudo-poc

CVE-2025-48903

None

Github link:
https://github.com/susancodes55/CVE-2025-48903-discord-poc

CVE-2025-48384

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed (CRLF). When writing a config entry, values with a trailing CR are not quoted, causing the CR to be lost when the config is later read. When initializing a submodule, if the submodule path contains a trailing CR, the altered path is read resulting in the submodule being checked out to an incorrect location. If a symlink exists that points the altered path to the submodule hooks directory, and the submodule contains an executable post-checkout hook, the script may be unintentionally executed after checkout. This vulnerability is fixed in v2.43.7, v2.44.4, v2.45.4, v2.46.4, v2.47.3, v2.48.2, v2.49.1, and v2.50.1.

Github link:
https://github.com/fishyyh/CVE-2025-48384

CVE-2022-0169

None

Github link:
https://github.com/X3RX3SSec/CVE-2022-0169

CVE-2025-5777

Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

Github link:
https://github.com/FrenzisRed/CVE-2025-5777