CVE-2025-53652

None

Github link:
https://github.com/pl4tyz/CVE-2025-53652-Jenkins-Git-Parameter-Analysis

CVE-2024-38112

None

Github link:
https://github.com/BunBunCodes/CPSC253Project

CVE-2025-54313

None

Github link:
https://github.com/nihilor/cve-2025-54313

CVE-2025-53770

None

Github link:
https://github.com/unk9vvn/sharepoint-toolpane

CVE-2025-32429

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 9.4-rc-1 through 16.10.5 and 17.0.0-rc-1 through 17.2.2, it's possible for anyone to inject SQL using the parameter sort of the getdeleteddocuments.vm. It's injected as is as an ORDER BY value. This is fixed in versions 16.10.6 and 17.3.0-rc-1.

Github link:
https://github.com/amir-othman/CVE-2025-32429

CVE-2024-25600

Improper Control of Generation of Code ('Code Injection') vulnerability in Codeer Limited Bricks Builder allows Code Injection.This issue affects Bricks Builder: from n/a through 1.9.6.

Github link:
https://github.com/frankfm-labs/bricks-rce-writeup

CVE-2024-27686

None

Github link:
https://github.com/ThemeHackers/CVE-2024-27686

CVE-2025-54309

None

Github link:
https://github.com/issamjr/CVE-2025-54309-EXPLOIT

CVE-2025-50867

None

Github link:
https://github.com/SacX-7/CVE-2025-50867

CVE-2025-8220

None

Github link:
https://github.com/m3m0o/engeman-web-languagecombobox-sqli

CVE-2025-54313

None

Github link:
https://github.com/ShinP451/scavenger_scanner

CVE-2025-7404

None

Github link:
https://github.com/mind2hex/CVE-2025-7404-CalibreWeb-0.6.24-BlindCommandInjection

CVE-2025-6998

None

Github link:
https://github.com/mind2hex/CVE-2025-6998-CalibreWeb-0.6.24-ReDoS

CVE-2023-42931

The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6.3, macOS Sonoma 14.2, macOS Monterey 12.7.2. A process may gain admin privileges without proper authentication.

Github link:
https://github.com/tageniu/CVE-2023-42931

CVE-2025-29927

Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior to versions 12.3.5, 13.5.9, 14.2.25, and 15.2.3, it is possible to bypass authorization checks within a Next.js application, if the authorization check occurs in middleware. If patching to a safe version is infeasible, it is recommend that you prevent external user requests which contain the x-middleware-subrequest header from reaching your Next.js application. This vulnerability is fixed in 12.3.5, 13.5.9, 14.2.25, and 15.2.3.

Github link:
https://github.com/sahbaazansari/CVE-2025-29927

CVE-2025-53770

None

Github link:
https://github.com/bossnick98/-SOC342---CVE-2025-53770-SharePoint-ToolShell-Auth-Bypass-and-RCE

CVE-2025-53770

None

Github link:
https://github.com/3a7/CVE-2025-53770

CVE-2023-34362

In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5), and 2023.0.1 (15.0.1), a SQL injection vulnerability has been found in the MOVEit Transfer web application that could allow an unauthenticated attacker to gain access to MOVEit Transfer's database. Depending on the database engine being used (MySQL, Microsoft SQL Server, or Azure SQL), an attacker may be able to infer information about the structure and contents of the database, and execute SQL statements that alter or delete database elements. NOTE: this is exploited in the wild in May and June 2023; exploitation of unpatched systems can occur via HTTP or HTTPS. All versions (e.g., 2020.0 and 2019x) before the five explicitly mentioned versions are affected, including older unsupported versions.

Github link:
https://github.com/Naveenbana5250/CVE-2023-34362-Defense-Package

CVE-2025-32462

Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines.

Github link:
https://github.com/j3r1ch0123/CVE-2025-32462

CVE-2025-8191

None

Github link:
https://github.com/byteReaper77/CVE-2025-8191