CVE-2022-37017

Symantec Endpoint Protection (Windows) agent, prior to 14.3 RU6/14.3 RU5 Patch 1, may be susceptible to a Security Control Bypass vulnerability, which is a type of issue that can potentially allow a threat actor to circumvent existing security controls. This CVE applies narrowly to the Client User Interface Password protection and Policy Import/Export Password protection, if it has been enabled.

Github link:
https://github.com/apeppels/CVE-2022-37017

CVE-2023-22515

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown vulnerability in publicly accessible Confluence Data Center and Server instances to create unauthorized Confluence administrator accounts and access Confluence instances.

Atlassian Cloud sites are not affected by this vulnerability. If your Confluence site is accessed via an atlassian.net domain, it is hosted by Atlassian and is not vulnerable to this issue.

For more details, please review the linked advisory on this CVE.

Github link:
https://github.com/Onedy1703/CVE-2023-22515

CVE-2019-5784

None

Github link:
https://github.com/agenericapple/CVE-2019-5784-PoC

CVE-2020-13945

In Apache APISIX, the user enabled the Admin API and deleted the Admin API access IP restriction rules. Eventually, the default token is allowed to access APISIX management data. This affects versions 1.2, 1.3, 1.4, 1.5.

Github link:
https://github.com/K3ysTr0K3R/CVE-2020-13945-EXPLOIT

CVE-2024-5633

None

Github link:
https://github.com/Adikso/CVE-2024-5633

CVE-2024-24919

Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.

Github link:
https://github.com/H3KEY/CVE-2024-24919

CVE-2024-29863

None

Github link:
https://github.com/pawlokk/qlikview-poc-CVE-2024-29863

CVE-2023-1773

None

Github link:
https://github.com/CTF-Archives/xinhu-v2.3.2

CVE-2013-2028

The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a chunked Transfer-Encoding request with a large chunk size, which triggers an integer signedness error and a stack-based buffer overflow.

Github link:
https://github.com/xiw1ll/CVE-2013-2028_Checker

CVE-2024-41107

None

Github link:
https://github.com/d0rb/CVE-2024-41107

CVE-2024-41662

None

Github link:
https://github.com/sh3bu/CVE-2024-41662

CVE-2023-38831

RARLabs WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue occurs because a ZIP archive may include a benign file (such as an ordinary .JPG file) and also a folder that has the same name as the benign file, and the contents of the folder (which may include executable content) are processed during an attempt to access only the benign file. This was exploited in the wild in April through August 2023.

Github link:
https://github.com/MaorBuskila/Windows-X64-RAT

CVE-2023-0400

None

Github link:
https://github.com/pinpinsec/CVE-2023-0400

CVE-2008-3531

None

Github link:
https://github.com/test-one9/ps4-11.50.github.io

CVE-2021-31630

Command Injection in Open PLC Webserver v3 allows remote attackers to execute arbitrary code via the "Hardware Layer Code Box" component on the "/hardware" page of the application.

Github link:
https://github.com/manuelsantosiglesias/CVE-2021-31630

CVE-2024-22198

None

Github link:
https://github.com/xiw1ll/CVE-2024-22198_Checker

CVE-2023-7028

An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to an unverified email address.

Github link:
https://github.com/soltanali0/CVE-2023-7028

CVE-2022-3910

Use After Free vulnerability in Linux Kernel allows Privilege Escalation. An improper Update of Reference Count in io_uring leads to Use-After-Free and Local Privilege Escalation. When io_msg_ring was invoked with a fixed file, it called io_fput_file() which improperly decreased its reference count (leading to Use-After-Free and Local Privilege Escalation). Fixed files are permanently registered to the ring, and should not be put separately. We recommend upgrading past commit https://github.com/torvalds/linux/commit/fc7222c3a9f56271fba02aabbfbae999042f1679 https://github.com/torvalds/linux/commit/fc7222c3a9f56271fba02aabbfbae999042f1679

Github link:
https://github.com/TLD1027/CVE-2022-3910

CVE-2024-41110

None

Github link:
https://github.com/secsaburo/CVE-2024-41110-

CVE-2021-31630

Command Injection in Open PLC Webserver v3 allows remote attackers to execute arbitrary code via the "Hardware Layer Code Box" component on the "/hardware" page of the application.

Github link:
https://github.com/FlojBoj/CVE-2021-31630