CVE-2021-41773
Author: faizdotid

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default configuration "require all denied", these requests can succeed. If CGI scripts are also enabled for these aliased pathes, this could allow for remote code execution. This issue is known to be exploited in the wild. This issue only affects Apache 2.4.49 and not earlier versions. The fix in Apache HTTP Server 2.4.50 was found to be incomplete, see CVE-2021-42013.

GitHub Link:
https://github.com/faizdotid/CVE-2021-41773

CVE-2025-29306
Author: B1ack4sh

An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component.

GitHub Link:
https://github.com/B1ack4sh/Blackash-CVE-2025-29306

CVE-2025-58360
Author: B1ack4sh

None

GitHub Link:
https://github.com/B1ack4sh/Blackash-CVE-2025-58360

CVE-2019-15949
Author: 0xla1n

None

GitHub Link:
https://github.com/0xla1n/Nagios-CVE-2019-15949-RCE-Poc

CVE-2023-1189
Author: le0s1mba

None

GitHub Link:
https://github.com/le0s1mba/CVE-2023-1189

CVE-2025-10230
Author: marcostolosa

None

GitHub Link:
https://github.com/marcostolosa/CVE-2025-10230

CVE-2021-21980
Author: gui2000guix-ui

The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to gain access to sensitive information.

GitHub Link:
https://github.com/gui2000guix-ui/cve-2021-21980-mock-server

CVE-2021-21980
Author: pkxk5pr6m2-web

The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to gain access to sensitive information.

GitHub Link:
https://github.com/pkxk5pr6m2-web/cve-2021-21980-nuclei-poc

CVE-2025-65862
Author: rimbadirgantara

None

GitHub Link:
https://github.com/rimbadirgantara/opac-fast-automation

CVE-2025-57833
Author: Gayang2902

None

GitHub Link:
https://github.com/Gayang2902/CVE-2025-57833

CVE-2025-62593
Author: B1ack4sh

None

GitHub Link:
https://github.com/B1ack4sh/Blackash-CVE-2025-62593

CVE-2025-58360
Author: quyenheu

None

GitHub Link:
https://github.com/quyenheu/CVE-2025-58360

CVE-2023-42793
Author: cxdxnt

In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

GitHub Link:
https://github.com/cxdxnt/CVE-2023-42793

CVE-2025-8088
Author: 4daysday

None

GitHub Link:
https://github.com/4daysday/cve-2025-8088

CVE-2025-12735
Author: alecasg555

None

GitHub Link:
https://github.com/alecasg555/safe-expr-eval

CVE-2025-59528
Author: B1ack4sh

None

GitHub Link:
https://github.com/B1ack4sh/Blackash-CVE-2025-59528

CVE-2025-32463
Author: justjoeyking

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.

GitHub Link:
https://github.com/justjoeyking/CVE-2025-32463

CVE-2025-39401
Author: Nxploited

None

GitHub Link:
https://github.com/Nxploited/CVE-2025-39401

CVE-2017-7921
Author: f3d0rq

An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421, DS-2DFx Series V5.2.0 build 140805 to V5.4.5 Build 160928, and DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106 devices. The improper authentication vulnerability occurs when an application does not adequately or correctly authenticate users. This may allow a malicious user to escalate his or her privileges on the system and gain access to sensitive information.

GitHub Link:
https://github.com/f3d0rq/CVE-2017-7921

CVE-2021-43798
Author: f3d0rq

Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: <grafana_host_url>/public/plugins//, where is the plugin ID for any installed plugin. At no time has Grafana Cloud been vulnerable. Users are advised to upgrade to patched versions 8.0.7, 8.1.8, 8.2.7, or 8.3.1. The GitHub Security Advisory contains more information about vulnerable URL paths, mitigation, and the disclosure timeline.

GitHub Link:
https://github.com/f3d0rq/CVE-2021-43798

CVE-2025-32433
Author: soltanali0

Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.

GitHub Link:
https://github.com/soltanali0/CVE-2025-32433-Eploit