CVE-2014-3704
Author: fbm31

The expandArguments function in the database abstraction API in Drupal core 7.x before 7.32 does not properly construct prepared statements, which allows remote attackers to conduct SQL injection attacks via an array containing crafted keys.

GitHub Link:
https://github.com/fbm31/Audit-BlackBox-Web-to-Root

CVE-2018-12633
Author: wiliam227user

None

GitHub Link:
https://github.com/wiliam227user/CVE-2018-12633-TPLink-Auth-Bypass

CVE-2025-14175
Author: CyberVinner

None

GitHub Link:
https://github.com/CyberVinner/TP-Link-TL-WR820N-CVE-2025-14175

CVE-2025-8110
Author: freiwi

None

GitHub Link:
https://github.com/freiwi/CVE-2025-8110

CVE-2026-00001
Author: sufnir

None

GitHub Link:
https://github.com/sufnir/POC-CVE-2026-00001

CVE-2024-41997
Author: xpcmdshell

None

GitHub Link:
https://github.com/xpcmdshell/CVE-2024-41997

CVE-2025-67730
Author: Dharan10

None

GitHub Link:
https://github.com/Dharan10/CVE-2025-67730

CVE-2025-54068
Author: z0d131482700x

None

GitHub Link:
https://github.com/z0d131482700x/Livewire2025CVE

CVE-2025-68645
Author: MaxMnMl

None

GitHub Link:
https://github.com/MaxMnMl/zimbramail-CVE-2025-68645-poc

CVE-2025-67160
Author: Remenis

None

GitHub Link:
https://github.com/Remenis/CVE-2025-67160

CVE-2025-67159
Author: Remenis

None

GitHub Link:
https://github.com/Remenis/CVE-2025-67159

CVE-2025-67158
Author: Remenis

None

GitHub Link:
https://github.com/Remenis/CVE-2025-67158

CVE-2022-26711
Author: xpcmdshell

None

GitHub Link:
https://github.com/xpcmdshell/CVE-2022-26711

CVE-2025-55182
Author: xiaoLvChen

None

GitHub Link:
https://github.com/xiaoLvChen/CVE-2025-55182

CVE-2024-25641
Author: declanmiddleton

Cacti provides an operational monitoring and fault management framework. Prior to version 1.2.27, an arbitrary file write vulnerability, exploitable through the "Package Import" feature, allows authenticated users having the "Import Templates" permission to execute arbitrary PHP code on the web server. The vulnerability is located within the import_package() function defined into the /lib/import.php script. The function blindly trusts the filename and file content provided within the XML data, and writes such files into the Cacti base path (or even outside, since path traversal sequences are not filtered). This can be exploited to write or overwrite arbitrary files on the web server, leading to execution of arbitrary PHP code or other security impacts. Version 1.2.27 contains a patch for this issue.

GitHub Link:
https://github.com/declanmiddleton/thorndr...

CVE-2024-21413
Author: eylommaayan

Microsoft Outlook Remote Code Execution Vulnerability

GitHub Link:
https://github.com/eylommaayan/THM---CVE-2024-21413-Moniker-Link-Microsoft-Outlook-

CVE-2025-14847
Author: Systemhaus-Schulz

None

GitHub Link:
https://github.com/Systemhaus-Schulz/MongoBleed-CVE-2025-14847

CVE-2025-15406
Author: rsecroot

None

GitHub Link:
https://github.com/rsecroot/CVE-2025-15406

CVE-2025-15390
Author: rsecroot

None

GitHub Link:
https://github.com/rsecroot/CVE-2025-15390

CVE-2025-0288
Author: MeisamEb

Various Paragon Software products contain an arbitrary kernel memory vulnerability within biontdrv.sys, facilitated by the memmove function, which does not validate or sanitize user controlled input, allowing an attacker the ability to write arbitrary kernel memory and perform privilege escalation.

GitHub Link:
https://github.com/MeisamEb/CVE-2025-0288