CVE-2024-7928

None

Github link:
https://github.com/wh6amiGit/CVE-2024-7928

CVE-2019-11447

An issue was discovered in CutePHP CuteNews 2.1.2. An attacker can infiltrate the server through the avatar upload process in the profile area via the avatar_file field to index.php?mod=main&opt=personal. There is no effective control of $imgsize in /core/modules/dashboard.php. The header content of a file can be changed and the control can be bypassed for code execution. (An attacker can use the GIF header for this.)

Github link:
https://github.com/ojo5/CVE-2019-11447.c

CVE-2023-41425

Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component.

Github link:
https://github.com/tiyeume25112004/CVE-2023-41425

CVE-2024-34351

None

Github link:
https://github.com/God4n/nextjs-CVE-2024-34351-_exploit

CVE-2024-38063

None

Github link:
https://github.com/Th3Tr1ckst3r/CVE-2024-38063

CVE-2024-38473

None

Github link:
https://github.com/juanschallibaum/Prueba-Repo

CVE-2024-38077

None

Github link:
https://github.com/Destiny0991/check_38077

CVE-2024-7928

None

Github link:
https://github.com/th3gokul/CVE-2024-7928

CVE-2024-21689

None

Github link:
https://github.com/salvadornakamura/CVE-2024-21689

CVE-2024-28000

None

Github link:
https://github.com/realbotnet/CVE-2024-28000

CVE-2024-41992

None

Github link:
https://github.com/fj016/CVE-2024-41992-PoC

CVE-2019-19470

None

Github link:
https://github.com/juliourena/CVE-2019-19470-RedTeamRD

CVE-2024-42845

None

Github link:
https://github.com/partywavesec/invesalius3_vulnerabilities

CVE-2024-43035

None

Github link:
https://github.com/ZeroPathAI/Fonoster-LFI-PoC

CVE-2024-28000

None

Github link:
https://github.com/Alucard0x1/CVE-2024-28000

CVE-2024-4358

In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via an authentication bypass vulnerability.

Github link:
https://github.com/fa-rrel/CVE-2024-4358

CVE-2023-42793

In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

Github link:
https://github.com/FlojBoj/CVE-2023-42793

CVE-2024-28995













SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine.









Github link:
https://github.com/gotr00t0day/CVE-2024-28995

CVE-2023-4220

Unrestricted file upload in big file upload functionality in `/main/inc/lib/javascript/bigupload/inc/bigUpload.php` in Chamilo LMS <= v1.11.24 allows unauthenticated attackers to perform stored cross-site scripting attacks and obtain remote code execution via uploading of web shell.

Github link:
https://github.com/thefizzyfish/CVE-2023-4220

CVE-2024-38063

None

Github link:
https://github.com/haroonawanofficial/CVE-2024-38063-Research-Tool