CVE-2025-31324

SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system.

Github link:
https://github.com/antichainalysis/sap-netweaver-0day-CVE-2025-31324

CVE-2025-8971

None

Github link:
https://github.com/byteReaper77/CVE-2025-8971

CVE-2024-3660

None

Github link:
https://github.com/aaryanbhujang/CVE-2024-3660-PoC

CVE-2025-8088

None

Github link:
https://github.com/pentestfunctions/CVE-2025-8088-Multi-Document

CVE-2025-54352

None

Github link:
https://github.com/ScarryParrot/-CVE-2025-54352

CVE-2019-15107

An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnerability.

Github link:
https://github.com/ArtemCyberLab/Project-Exploitation-of-Webmin-Authentication-Vulnerability

CVE-2018-7422

A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for WordPress allows remote attackers to retrieve arbitrary files via the ajax_path parameter to editor/extensions/pagebuilder/includes/ajax_shortcode_pattern.php, aka absolute path traversal.

Github link:
https://github.com/ndr-repo/CVE-2018-7422

CVE-2025-6934

None

Github link:
https://github.com/0xgh057r3c0n/CVE-2025-6934

CVE-2025-27591

A privilege escalation vulnerability existed in the Below service prior to v0.9.0 due to the creation of a world-writable directory at /var/log/below. This could have allowed local unprivileged users to escalate to root privileges through symlink attacks that manipulate files such as /etc/shadow.

Github link:
https://github.com/umutcamliyurt/CVE-2025-27591

CVE-2025-49667

None

Github link:
https://github.com/Yuri08loveElaina/CVE-2025-49667