CVE-2021-30809

None

Github link:
https://github.com/seregonwar/CVE-2021-30809-UAF

CVE-2011-2523

vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

Github link:
https://github.com/BolivarJ/CVE-2011-2523

CVE-2025-8088

None

Github link:
https://github.com/jordan922/CVE-2025-8088

CVE-2025-55188

None

Github link:
https://github.com/hunters-sec/CVE-2025-55188-7z-exploit

CVE-2025-5777

Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server

Github link:
https://github.com/rootxsushant/Citrix-NetScaler-Memory-Leak-CVE-2025-5777

CVE-2021-41773

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default configuration "require all denied", these requests can succeed. If CGI scripts are also enabled for these aliased pathes, this could allow for remote code execution. This issue is known to be exploited in the wild. This issue only affects Apache 2.4.49 and not earlier versions. The fix in Apache HTTP Server 2.4.50 was found to be incomplete, see CVE-2021-42013.

Github link:
https://github.com/mah4nzfr/CVE-2021-41773

CVE-2024-7591

None

Github link:
https://github.com/butyraldehyde/CVE-2024-7591-PoC

CVE-2024-47533

Cobbler, a Linux installation server that allows for rapid setup of network installation environments, has an improper authentication vulnerability starting in version 3.0.0 and prior to versions 3.2.3 and 3.3.7. `utils.get_shared_secret()` always returns `-1`, which allows anyone to connect to cobbler XML-RPC as user `''` password `-1` and make any changes. This gives anyone with network access to a cobbler server full control of the server. Versions 3.2.3 and 3.3.7 fix the issue.

Github link:
https://github.com/baph00met/CVE-2024-47533

CVE-2025-8088

None

Github link:
https://github.com/travisbgreen/cve-2025-8088

CVE-2025-24813

Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet in Apache Tomcat.

This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.2, from 10.1.0-M1 through 10.1.34, from 9.0.0.M1 through 9.0.98.

If all of the following were true, a malicious user was able to view security sensitive files and/or inject content into those files:
- writes enabled for the default servlet (disabled by default)
- support for partial PUT (enabled by default)
- a target URL for security sensitive uploads that was a sub-directory of a target URL for public uploads
- attacker knowledge of the names of security sensitive files being uploaded
- the security sensitive files also being uploaded via partial PUT

If all of the following were true, a malicious user was able to perform remote code execution:
- writes enabled for the default servlet (disabled by default)
- support for partial

Github link:
https://github.com/137f/PoC-CVE-2025-24813

CVE-2025-55188

None

Github link:
https://github.com/vadim-belous/CVE-2025-55188-PoC

CVE-2018-7600

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations.

Github link:
https://github.com/xxxTectationxxx/CVE-2018-7600

CVE-2017-5871

None

Github link:
https://github.com/1337rokudenashi/CVE-2017-5871

CVE-2025-52216

None

Github link:
https://github.com/Arbatinis1/coolermaster-masterctrl-vuln

CVE-2025-52385

None

Github link:
https://github.com/Kov404/CVE-2025-52385

CVE-2025-54887

None

Github link:
https://github.com/shinigami-777/PoC_CVE-2025-54887

CVE-2024-47533

Cobbler, a Linux installation server that allows for rapid setup of network installation environments, has an improper authentication vulnerability starting in version 3.0.0 and prior to versions 3.2.3 and 3.3.7. `utils.get_shared_secret()` always returns `-1`, which allows anyone to connect to cobbler XML-RPC as user `''` password `-1` and make any changes. This gives anyone with network access to a cobbler server full control of the server. Versions 3.2.3 and 3.3.7 fix the issue.

Github link:
https://github.com/dollarboysushil/CVE-2024-47533-Cobbler-XMLRPC-Authentication-Bypass-RCE-Exploit-POC

CVE-2017-16995

The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging incorrect sign extension.

Github link:
https://github.com/xxxTectationxxx/CVE-2017-16995

CVE-2018-7600

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations.

Github link:
https://github.com/muhammedkayag/CVE-2018-7600

CVE-2025-8088

None

Github link:
https://github.com/knight0x07/WinRAR-CVE-2025-8088-PoC-RAR