CVE-2020-15368

AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by triggering a triple fault via a request to zero CR3.

Github link:
https://github.com/R7flex/asrockploit

CVE-2024-38077

None

Github link:
https://github.com/atlassion/CVE-2024-38077-check

CVE-2023-41425

Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component.

Github link:
https://github.com/charlesgargasson/CVE-2023-41425

CVE-2023-23752

An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints.

Github link:
https://github.com/Aureum01/CVE-2023-23752

CVE-2024-26308

None

Github link:
https://github.com/crazycatMyopic/cve

CVE-2023-41425

Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component.

Github link:
https://github.com/insomnia-jacob/CVE-2023-41425

CVE-2024-6387

A signal handler race condition was found in OpenSSH's server (sshd), where a client does not authenticate within LoginGraceTime seconds (120 by default, 600 in old OpenSSH versions), then sshd's SIGALRM handler is called asynchronously. However, this signal handler calls various functions that are not async-signal-safe, for example, syslog().

Github link:
https://github.com/niktoproject/CVE-202406387_Check.py

CVE-2024-0741

None

Github link:
https://github.com/HyHy100/Firefox-CVE-2024-0741

CVE-2024-27198

In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible

Github link:
https://github.com/Pypi-Project/RCity-CVE-2024-27198

CVE-2020-0796

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Remote Code Execution Vulnerability'.

Github link:
https://github.com/z3ena/Exploiting-and-Mitigating-CVE-2020-0796-SMBGhost-and-Print-Spooler-Vulnerabilities

CVE-2023-27216

None

Github link:
https://github.com/HoangREALER/CVE-2023-27216

CVE-2024-37085

None

Github link:
https://github.com/WTN-arny/Vmware-ESXI

CVE-2020-6308

SAP BusinessObjects Business Intelligence Platform (Web Services) versions - 410, 420, 430, allows an unauthenticated attacker to inject arbitrary values as CMS parameters to perform lookups on the internal network which is otherwise not accessible externally. On successful exploitation, attacker can scan internal network to determine internal infrastructure and gather information for further attacks like remote file inclusion, retrieve server files, bypass firewall and force the vulnerable server to perform malicious requests, resulting in a Server-Side Request Forgery vulnerability.

Github link:
https://github.com/MachadoOtto/sap_bo_launchpad-ssrf-timing_attack

CVE-2022-31814

pfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrary OS commands as root via shell metacharacters in the HTTP Host header. NOTE: 3.x is unaffected.

Github link:
https://github.com/ArunHAtter/CVE-2022-31814

CVE-2022-38725

None

Github link:
https://github.com/wdahlenburg/CVE-2022-38725

CVE-2024-56662

None

Github link:
https://github.com/nimosec/cve-2024-56662

CVE-2024-34102

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability by sending a crafted XML document that references external entities. Exploitation of this issue does not require user interaction.

Github link:
https://github.com/EQSTSeminar/CVE-2024-34102

CVE-2024-43044

None

Github link:
https://github.com/v9d0g/CVE-2024-43044-POC

CVE-2024-36424

None

Github link:
https://github.com/secunnix/CVE-2024-36424

CVE-2024-0044

In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.



Github link:
https://github.com/nahid0x1/CVE-2024-0044