CVE-2024-06666

None

Github link:
https://github.com/labc-dev/CVE-2024-06666

CVE-2021-3831

None

Github link:
https://github.com/aratane/CVE-2021-3831

CVE-2022-30190

Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability.

Github link:
https://github.com/ethicalblue/Follina-CVE-2022-30190-Sample

CVE-2024-34102

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability by sending a crafted XML document that references external entities. Exploitation of this issue does not require user interaction.

Github link:
https://github.com/ex-ARnX/CVE-2024-34102-PoC

CVE-2024-6205

None

Github link:
https://github.com/j3r1ch0123/CVE-2024-6205

CVE-2024-24590

Deserialization of untrusted data can occur in versions 0.17.0 to 1.14.2 of the client SDK of Allegro AI’s ClearML platform, enabling a maliciously uploaded artifact to run arbitrary code on an end user’s system when interacted with.


Github link:
https://github.com/sviim/ClearML-CVE-2024-24590

CVE-2024-38041

None

Github link:
https://github.com/varwara/CVE-2024-38041

CVE-2024-40348

None

Github link:
https://github.com/bigb0x/CVE-2024-40348

CVE-2022-37017

Symantec Endpoint Protection (Windows) agent, prior to 14.3 RU6/14.3 RU5 Patch 1, may be susceptible to a Security Control Bypass vulnerability, which is a type of issue that can potentially allow a threat actor to circumvent existing security controls. This CVE applies narrowly to the Client User Interface Password protection and Policy Import/Export Password protection, if it has been enabled.

Github link:
https://github.com/apeppels/CVE-2022-37017

CVE-2023-22515

Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown vulnerability in publicly accessible Confluence Data Center and Server instances to create unauthorized Confluence administrator accounts and access Confluence instances.

Atlassian Cloud sites are not affected by this vulnerability. If your Confluence site is accessed via an atlassian.net domain, it is hosted by Atlassian and is not vulnerable to this issue.

For more details, please review the linked advisory on this CVE.

Github link:
https://github.com/Onedy1703/CVE-2023-22515

CVE-2019-5784

None

Github link:
https://github.com/agenericapple/CVE-2019-5784-PoC

CVE-2020-13945

In Apache APISIX, the user enabled the Admin API and deleted the Admin API access IP restriction rules. Eventually, the default token is allowed to access APISIX management data. This affects versions 1.2, 1.3, 1.4, 1.5.

Github link:
https://github.com/K3ysTr0K3R/CVE-2020-13945-EXPLOIT

CVE-2024-5633

None

Github link:
https://github.com/Adikso/CVE-2024-5633

CVE-2024-24919

Potentially allowing an attacker to read certain information on Check Point Security Gateways once connected to the internet and enabled with remote Access VPN or Mobile Access Software Blades. A Security fix that mitigates this vulnerability is available.

Github link:
https://github.com/H3KEY/CVE-2024-24919

CVE-2024-29863

None

Github link:
https://github.com/pawlokk/qlikview-poc-CVE-2024-29863

CVE-2023-1773

None

Github link:
https://github.com/CTF-Archives/xinhu-v2.3.2

CVE-2013-2028

The ngx_http_parse_chunked function in http/ngx_http_parse.c in nginx 1.3.9 through 1.4.0 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a chunked Transfer-Encoding request with a large chunk size, which triggers an integer signedness error and a stack-based buffer overflow.

Github link:
https://github.com/xiw1ll/CVE-2013-2028_Checker

CVE-2024-41107

None

Github link:
https://github.com/d0rb/CVE-2024-41107

CVE-2024-41662

None

Github link:
https://github.com/sh3bu/CVE-2024-41662

CVE-2023-38831

RARLabs WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue occurs because a ZIP archive may include a benign file (such as an ordinary .JPG file) and also a folder that has the same name as the benign file, and the contents of the folder (which may include executable content) are processed during an attempt to access only the benign file. This was exploited in the wild in April through August 2023.

Github link:
https://github.com/MaorBuskila/Windows-X64-RAT