CVE-2025-25257
Author: segfault-it

An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability CWE-89 in Fortinet FortiWeb version 7.6.0 through 7.6.3, 7.4.0 through 7.4.7, 7.2.0 through 7.2.10 and below 7.0.10 allows an unauthenticated attacker to execute unauthorized SQL code or commands via crafted HTTP or HTTPs requests.

GitHub Link:
https://github.com/segfault-it/CVE-2025-25257

CVE-2025-10035
Author: ThemeHackers

None

GitHub Link:
https://github.com/ThemeHackers/CVE-2025-10035

CVE-2018-13379
Author: kh4sh3i

An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to download system files via special crafted HTTP resource requests.

GitHub Link:
https://github.com/kh4sh3i/CVE-2018-13379

CVE-2025-25257
Author: segfault-it

An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability CWE-89 in Fortinet FortiWeb version 7.6.0 through 7.6.3, 7.4.0 through 7.4.7, 7.2.0 through 7.2.10 and below 7.0.10 allows an unauthenticated attacker to execute unauthorized SQL code or commands via crafted HTTP or HTTPs requests.

GitHub Link:
https://github.com/segfault-it/CVE-2025-25257

CVE-2025-10035
Author: ThemeHackers

None

GitHub Link:
https://github.com/ThemeHackers/CVE-2025-10035

CVE-2025-8088
Author: m4nbun

None

GitHub Link:
https://github.com/m4nbun/CVE-2025-8088

CVE-2025-34152
Author: kh4sh3i

An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) via the 'time' parameter of the '/protocol.csp?' endpoint. The input is processed by the internal date '-s' command without rebooting or disrupting HTTP service. Unlike other injection points, this vector allows remote compromise without triggering visible configuration changes.

GitHub Link:
https://github.com/kh4sh3i/CVE-2025-34152

CVE-2018-7600
Author: nika0x38

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations.

GitHub Link:
https://github.com/nika0x38/CVE-2018-7600

CVE-2020-0796
Author: Jagadeesh7532

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.

GitHub Link:
https://github.com/Jagadeesh7532/-CVE-2020-0796-SMBGhost-Windows-10-SMBv3-Remote-Code-Execution-Vulnerability

CVE-2023-1545
Author: lineeralgebra

SQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23.

GitHub Link:
https://github.com/lineeralgebra/CVE-2023-1545-POC

CVE-2025-40677
Author: PeterGabaldon

None

GitHub Link:
https://github.com/PeterGabaldon/CVE-2025-40677

CVE-2025-40677
Author: PeterGabaldon

None

GitHub Link:
https://github.com/PeterGabaldon/CVE-2025-40677

CVE-2023-1545
Author: lineeralgebra

SQL Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23.

GitHub Link:
https://github.com/lineeralgebra/CVE-2023-1545-POC

CVE-2018-7600
Author: nika0x38

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations.

GitHub Link:
https://github.com/nika0x38/CVE-2018-7600

CVE-2020-0796
Author: Jagadeesh7532

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.

GitHub Link:
https://github.com/Jagadeesh7532/-CVE-2020-0796-SMBGhost-Windows-10-SMBv3-Remote-Code-Execution-Vulnerability

CVE-2025-8088
Author: m4nbun

None

GitHub Link:
https://github.com/m4nbun/CVE-2025-8088

CVE-2025-34152
Author: kh4sh3i

An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) via the 'time' parameter of the '/protocol.csp?' endpoint. The input is processed by the internal date '-s' command without rebooting or disrupting HTTP service. Unlike other injection points, this vector allows remote compromise without triggering visible configuration changes.

GitHub Link:
https://github.com/kh4sh3i/CVE-2025-34152

CVE-2023-20048
Author: oguzhanozuzun301

A vulnerability in the web services interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute certain unauthorized configuration commands on a Firepower Threat Defense (FTD) device that is managed by the FMC Software. This vulnerability is due to insufficient authorization of configuration commands that are sent through the web service interface. An attacker could exploit this vulnerability by authenticating to the FMC web services interface and sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to execute certain configuration commands on the targeted FTD device. To successfully exploit this vulnerability, an attacker would need valid credentials on the FMC Software.

GitHub Link:
https://github.com/oguzhanozuzun301/cisco-rv-rce-poc

CVE-2010-2883
Author: avielzecharia

None

GitHub Link:
https://github.com/avielzecharia/CVE-2010-2883

CVE-2025-59424
Author: JOOJIII

None

GitHub Link:
https://github.com/JOOJIII/CVE-2025-59424