CVE-2018-0101

A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The vulnerability is due to an attempt to double free a region of memory when the webvpn feature is enabled on the Cisco ASA device. An attacker could exploit this vulnerability by sending multiple, crafted XML packets to a webvpn-configured interface on the affected system. An exploit could allow the attacker to execute arbitrary code and obtain full control of the system, or cause a reload of the affected device. This vulnerability affects Cisco ASA Software that is running on the following Cisco products: 3000 Series Industrial Security Appliance (ISA), ASA 5500 Series Adaptive Security Appliances, ASA 5500-X Series Next-Generation Firewalls, ASA Services Module for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers, ASA 1000V Cloud Firewall, Adaptive Se

Github link:
https://github.com/MikeHorn-git/CVE-2018-0101

CVE-2022-48656

None

Github link:
https://github.com/Einstein2150/CVE-2022-48656-POC

CVE-2023-46747




Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated



Github link:
https://github.com/Rizzler4562/CVE-2023-46747-Mass-RCE

CVE-2024-46538

None

Github link:
https://github.com/EQSTLab/CVE-2024-46538

CVE-2023-46747




Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated



Github link:
https://github.com/Xanexs/CVE-2023-46747-Mass-RCE

CVE-2024-37383

None

Github link:
https://github.com/bartfroklage/CVE-2024-37383-POC

CVE-2023-42326

None

Github link:
https://github.com/bl4ckarch/pf-pwnme

CVE-2024-4947

None

Github link:
https://github.com/uixss/PoC-CVE-2024-4947

CVE-2021-31755

None

Github link:
https://github.com/r3s3tt/CVE-2021-31755

CVE-2024-38178

None

Github link:
https://github.com/uixss/PoC-CVE-2024-38178

CVE-2022-41082

Microsoft Exchange Server Remote Code Execution Vulnerability.

Github link:
https://github.com/soltanali0/CVE-2022-41082

CVE-2024-38812

None

Github link:
https://github.com/groshi/CVE-2024-38812-POC-5-Hands-Private

CVE-2023-46747




Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated



Github link:
https://github.com/AMELYA13/CVE-2023-46747-Mass-RCE

CVE-2024-23113

A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, FortiPAM versions 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSwitchManager versions 7.2.0 through 7.2.3, 7.0.0 through 7.0.3 allows attacker to execute unauthorized code or commands via specially crafted packets.

Github link:
https://github.com/groshi/CVE-2024-23113-Private-POC

CVE-2022-20223

None

Github link:
https://github.com/xbee9/cve-2022-20223

CVE-2023-46747




Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated



Github link:
https://github.com/MacTavish2/CVE-2023-46747-Mass-RCE

CVE-2022-23131

In the case of instances where the SAML SSO authentication is enabled (non-default), session data can be modified by a malicious actor, because a user login stored in the session was not verified. Malicious unauthenticated actor may exploit this issue to escalate privileges and gain admin access to Zabbix Frontend. To perform the attack, SAML authentication is required to be enabled and the actor has to know the username of Zabbix user (or use the guest account, which is disabled by default).

Github link:
https://github.com/davidzzo23/CVE-2022-23131

CVE-2022-0944

None

Github link:
https://github.com/LipeOzyy/SQLPad-RCE-Exploit-CVE-2022-0944

CVE-2024-39205

None

Github link:
https://github.com/Marven11/CVE-2024-39205-Pyload-RCE

CVE-2019-9053

An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve unauthenticated blind time-based SQL injection via the m1_idlist parameter.

Github link:
https://github.com/louisthedonothing/CVE-2019-9053