CVE-2025-10230
Author: marcostolosa

None

GitHub Link:
https://github.com/marcostolosa/CVE-2025-10230

CVE-2021-21980
Author: gui2000guix-ui

The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to gain access to sensitive information.

GitHub Link:
https://github.com/gui2000guix-ui/cve-2021-21980-mock-server

CVE-2021-21980
Author: pkxk5pr6m2-web

The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to gain access to sensitive information.

GitHub Link:
https://github.com/pkxk5pr6m2-web/cve-2021-21980-nuclei-poc

CVE-2025-65862
Author: rimbadirgantara

None

GitHub Link:
https://github.com/rimbadirgantara/opac-fast-automation

CVE-2025-57833
Author: Gayang2902

None

GitHub Link:
https://github.com/Gayang2902/CVE-2025-57833

CVE-2025-62593
Author: B1ack4sh

None

GitHub Link:
https://github.com/B1ack4sh/Blackash-CVE-2025-62593

CVE-2025-58360
Author: quyenheu

None

GitHub Link:
https://github.com/quyenheu/CVE-2025-58360

CVE-2023-42793
Author: cxdxnt

In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

GitHub Link:
https://github.com/cxdxnt/CVE-2023-42793

CVE-2025-8088
Author: 4daysday

None

GitHub Link:
https://github.com/4daysday/cve-2025-8088

CVE-2025-12735
Author: alecasg555

None

GitHub Link:
https://github.com/alecasg555/safe-expr-eval

CVE-2025-59528
Author: B1ack4sh

None

GitHub Link:
https://github.com/B1ack4sh/Blackash-CVE-2025-59528

CVE-2025-32463
Author: justjoeyking

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.

GitHub Link:
https://github.com/justjoeyking/CVE-2025-32463

CVE-2025-39401
Author: Nxploited

None

GitHub Link:
https://github.com/Nxploited/CVE-2025-39401

CVE-2017-7921
Author: f3d0rq

An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to V5.4.0 Build 160401, DS-2CD2xx2FWD Series V5.3.1 build 150410 to V5.4.4 Build 161125, DS-2CD4x2xFWD Series V5.2.0 build 140721 to V5.4.0 Build 160414, DS-2CD4xx5 Series V5.2.0 build 140721 to V5.4.0 Build 160421, DS-2DFx Series V5.2.0 build 140805 to V5.4.5 Build 160928, and DS-2CD63xx Series V5.0.9 build 140305 to V5.3.5 Build 160106 devices. The improper authentication vulnerability occurs when an application does not adequately or correctly authenticate users. This may allow a malicious user to escalate his or her privileges on the system and gain access to sensitive information.

GitHub Link:
https://github.com/f3d0rq/CVE-2017-7921

CVE-2021-43798
Author: f3d0rq

Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: <grafana_host_url>/public/plugins//, where is the plugin ID for any installed plugin. At no time has Grafana Cloud been vulnerable. Users are advised to upgrade to patched versions 8.0.7, 8.1.8, 8.2.7, or 8.3.1. The GitHub Security Advisory contains more information about vulnerable URL paths, mitigation, and the disclosure timeline.

GitHub Link:
https://github.com/f3d0rq/CVE-2021-43798

CVE-2025-32433
Author: soltanali0

Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.

GitHub Link:
https://github.com/soltanali0/CVE-2025-32433-Eploit

CVE-2010-2075
Author: earthbendergara

UnrealIRCd 3.2.8.1, as distributed on certain mirror sites from November 2009 through June 2010, contains an externally introduced modification (Trojan Horse) in the DEBUG3DOLOGSYSTEM macro, which allows remote attackers to execute arbitrary commands.

GitHub Link:
https://github.com/earthbendergara/unrealircd3.2.8.1-local-exploit

CVE-2025-66022
Author: wasfyelbaz

None

GitHub Link:
https://github.com/wasfyelbaz/CVE-2025-66022

CVE-2025-65881
Author: MMAKINGDOM

None

GitHub Link:
https://github.com/MMAKINGDOM/CVE-2025-65881

CVE-2024-25600
Author: ranjithxploit

Improper Control of Generation of Code ('Code Injection') vulnerability in Codeer Limited Bricks Builder allows Code Injection.This issue affects Bricks Builder: from n/a through 1.9.6.

GitHub Link:
https://github.com/ranjithxploit/CVE-2024-25600