CVE-2025-64458
Author: ch4n3-yoon

None

GitHub Link:
https://github.com/ch4n3-yoon/CVE-2025-64458-Demo

CVE-2024-4040
Author: juanorts

VFS Sandbox Escape in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows remote attackers with low privileges to read files from the filesystem outside of VFS Sandbox.


GitHub Link:
https://github.com/juanorts/CrushFTP10-Docker-CVE-2024-4040

CVE-2025-9209
Author: Nxploited

None

GitHub Link:
https://github.com/Nxploited/CVE-2025-9209

CVE-2020-2551
Author: B1ack4sh

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

GitHub Link:
https://github.com/B1ack4sh/Blackash-CVE-2020-2551

CVE-2020-14883
Author: B1ack4sh

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

GitHub Link:
https://github.com/B1ack4sh/Blackash-CVE-2020-14883

CVE-2023-50290
Author: desaivinayak449

None

GitHub Link:
https://github.com/desaivinayak449/bug-bounty-reports-desai-vinayak

CVE-2024-21413
Author: gurleen-147

Microsoft Outlook Remote Code Execution Vulnerability

GitHub Link:
https://github.com/gurleen-147/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability-PoC

CVE-2025-48593
Author: skolepc

None

GitHub Link:
https://github.com/skolepc/CVE-2025-48593

CVE-2022-21587
Author: B1ack4sh

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. Successful attacks of this vulnerability can result in takeover of Oracle Web Applications Desktop Integrator. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

GitHub Link:
https://github.com/B1ack4sh/Blackash-CVE-2022-21587

CVE-2019-2215
Author: i-redbyte

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network facing application.Product: AndroidAndroid ID: A-141720095

GitHub Link:
https://github.com/i-redbyte/android-badbinder-demo

CVE-2016-5195
Author: arturomartinvegue

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."

GitHub Link:
https://github.com/arturomartinvegue/escalada-privilegios-kernel-exploit-dirty-cow

CVE-2025-20354
Author: B1ack4sh

None

GitHub Link:
https://github.com/B1ack4sh/Blackash-CVE-2025-20354

CVE-2025-56643
Author: 0xBS0D27

None

GitHub Link:
https://github.com/0xBS0D27/CVE-2025-56643

CVE-2023-7024
Author: aka76bm

None

GitHub Link:
https://github.com/aka76bm/google-chrome-emergency-update

CVE-2025-20343
Author: B1ack4sh

None

GitHub Link:
https://github.com/B1ack4sh/Blackash-CVE-2025-20343

CVE-2020-5902
Author: B1ack4sh

In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface (TMUI), also referred to as the Configuration utility, has a Remote Code Execution (RCE) vulnerability in undisclosed pages.

GitHub Link:
https://github.com/B1ack4sh/Blackash-CVE-2020-5902

CVE-2017-12615
Author: Fa1c0n35

When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.

GitHub Link:
https://github.com/Fa1c0n35/CVE-2017-12615

CVE-2025-63420
Author: MMAKINGDOM

None

GitHub Link:
https://github.com/MMAKINGDOM/CVE-2025-63420

CVE-2023-5359
Author: enzocipher

The W3 Total Cache plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.7.5 via Google OAuth API secrets stored in plaintext in the publicly visible plugin source. This can allow unauthenticated attackers to impersonate W3 Total Cache and gain access to user account information in successful conditions. This would not impact the WordPress users site in any way.

GitHub Link:
https://github.com/enzocipher/CVE-2023-5359

CVE-2023-45612
Author: ksaweryr

In JetBrains Ktor before 2.3.5 default configuration of ContentNegotiation with XML format was vulnerable to XXE

GitHub Link:
https://github.com/ksaweryr/CVE-2023-45612-PoC

CVE-2023-45612
Author: stefan-500

In JetBrains Ktor before 2.3.5 default configuration of ContentNegotiation with XML format was vulnerable to XXE

GitHub Link:
https://github.com/stefan-500/ktor-cve-2023-45612-poc