GitHub Feed
Explore the latest GitHub repositories gathered from our feed. Entries are grouped by day to help you track developments quickly.
Wed May 28, 2025
| Repository | Description | CVE | Metrics | Action |
|---|---|---|---|---|
| cve-auto-exploit-agent | n/a | n/a | Visit Repo | |
| AISA-Scanner | AISA-Scanner is an AI-powered autonomous vulnerability scanner | n/a | n/a | Visit Repo |
| CVE-2025-22252 | CVE-2025-22252 – Authentication Bypass in Fortinet Products | n/a | n/a | Visit Repo |
| CVE-2024-28995 | SolarWinds Serv-U Directory Traversal | SolarWinds Serv-U L Directory Transversal Vulnerability |
v3.1
HIGH
Score: 8.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
|
Visit Repo |
| CVE-2018-8097-PoC | POC for CVE-2018-8097 This script exploits CVE-2018-8097 and c | n/a | n/a | Visit Repo |
| CVE-2024-32462 | CVE-2024-32462 code exec sbx escape | Flatpak vulnerable to a sandbox escape via RequestBackground portal due to bad argument parsing |
v3.1
HIGH
Score: 8.4
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
|
Visit Repo |
| CVE-2025-5287 | WordPress Likes and Dislikes Plugin <= 1.0.0 is vulnerable to | n/a | n/a | Visit Repo |
| SMB_CVE-2025-24071 | Exploited CVE-2025-24071 via SMB by hosting a .library-ms file | Microsoft Windows File Explorer Spoofing Vulnerability |
v3.1
MEDIUM
Score: 6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
|
Visit Repo |
| cve-2024-4577 | Argument Injection in PHP-CGI |
v3.1
CRITICAL
Score: 9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
Visit Repo | |
| CVE-2025-2539 | File Away <= 3.9.9.0.1 - Missing Authorization to Unauthentica | File Away <= 3.9.9.0.1 - Missing Authorization to Unauthenticated Arbitrary File Read |
v3.1
HIGH
Score: 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
Visit Repo |
Tue May 27, 2025
| Repository | Description | CVE | Metrics | Action |
|---|---|---|---|---|
| ICMP-Timestamp-POC | A reconnaissance tool to detect CVE-1999-0524 (ICMP Timestamp | n/a | n/a | Visit Repo |
| CVE-2025-24071-PoC | A simple proof of concept for CVE-2025-24071 | Microsoft Windows File Explorer Spoofing Vulnerability |
v3.1
MEDIUM
Score: 6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
|
Visit Repo |
| CVE-2023-40130 | PoC of CVE-2023-40130 | n/a | n/a | Visit Repo |
| CVE-2024-8682 | JNews - WordPress Newspaper Magazine Blog AMP Theme <= 11.6.6 - Unauthorized User Registration |
v3.1
MEDIUM
Score: 5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
|
Visit Repo | |
| dockout | Red-team oriented CVE exploitation framework for container esc | n/a | n/a | Visit Repo |
| log4shell-homework9 | Log4Shell (CVE-2021-44228) exploit demo for SEAS 8405. Include | n/a | n/a | Visit Repo |
| CVE-2025-3248 | Perform Remote Code Execution using vulnerable API endpoint. | Langflow Unauth RCE |
v3.1
CRITICAL
Score: 9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
Visit Repo |
Mon May 26, 2025
| Repository | Description | CVE | Metrics | Action |
|---|---|---|---|---|
| CVE-2025-4389 | Crawlomatic Multipage Scraper Post Generator <= 2.6.8.1 - Unau | n/a | n/a | Visit Repo |
| DLL-for-2024-38014 | The DLL for CVE-2024-38014 | n/a | n/a | Visit Repo |
| CVE-2024-38014 | Windows Installer Elevation of Privilege Vulnerability |
v3.1
HIGH
Score: 7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
|
Visit Repo | |
| Go_vuln_scan | 用于快速匹配库中url的cms，读取出使用的cms与� | n/a | n/a | Visit Repo |
| Wing-FTP-Server-7.4.4-RCE-Authenticated | Wing FTP Server provides an administrative Lua scripting conso | n/a | n/a | Visit Repo |
| CVE-POC-JAGAT | n/a | n/a | Visit Repo | |
| ChromSploit-Framework | Advanced AI-Powered Exploitation Framework | CVE-2025-4664 & | n/a | n/a | Visit Repo |
| CVE-2025-32421 | n/a | n/a | Visit Repo | |
| CVE-2024-55591-POC | n/a |
v3.1
CRITICAL
Score: 9.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:W/RC:C
|
Visit Repo | |
| CVE-2025-29927 | Python-based smart scanner for CVE-2025-29927 — Next.js mid | Authorization Bypass in Next.js Middleware |
v3.1
CRITICAL
Score: 9.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
|
Visit Repo |
| CVE-2025-27363 | n/a |
v3.1
HIGH
Score: 8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C/CR:H/IR:H/AR:H/MAV:N/MAC:L/MPR:N/MUI:N/MS:U/MC:H/MI:H/MA:H
|
Visit Repo | |
| CVE-2025-46173 | poc for the CVE-2025-46173 | n/a | n/a | Visit Repo |
| unlimted-cve | collect cve and exploit | n/a | n/a | Visit Repo |
| CVE-2025-24071 | Windows File Explorer Spoofing Vulnerability - CVE-2025-24071 | Microsoft Windows File Explorer Spoofing Vulnerability |
v3.1
MEDIUM
Score: 6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
|
Visit Repo |
| CVE-2020-11097-POC | POC TO CRASH FREERDP USING CVE-2020-11097 | OOB read in ntlm_av_pair_get in FreeRDP |
v3.1
LOW
Score: 3.5
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N
|
Visit Repo |
| CVE-2025-2907 | Order Delivery Date Pro for WooCommerce < 12.3.1 - Unauthentic | Order Delivery Date Pro for WooCommerce < 12.3.1 - Unauthenticated Arbitrary Option Update | n/a | Visit Repo |
| CVE-2024-42008-9-exploit | The scripts in this repository are made to abuse CVE-2024-4200 | n/a | n/a | Visit Repo |
| CVE-2025-22457 | PoC CVE-2025-22457 | n/a |
v3.1
CRITICAL
Score: 9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
|
Visit Repo |
Sun May 25, 2025
| Repository | Description | CVE | Metrics | Action |
|---|---|---|---|---|
| CVE-2025-4664- | n/a | n/a | Visit Repo | |
| CVE-2025-4322 | n/a | n/a | Visit Repo | |
| PoC-crash-CVE-2020-13398- | CVE-2020-13398 PoC | n/a | n/a | Visit Repo |
| CVE-2025-4664 | CVE-2025-4664 – Remote Code Execution via Chrome Loader Refe | n/a | n/a | Visit Repo |
| CVE-2024-0204 | CVE-2024-0204 was discovered in January 2024 and affects all G | Authentication Bypass in GoAnywhere MFT |
v3.1
CRITICAL
Score: 9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
Visit Repo |
| When-Servers-Overshare-Information-disclosure-in-error-messages | Exploited verbose error messages to leak Apache Struts version | n/a | n/a | Visit Repo |
| iDevice_ZH | CVE-2025-24203漏洞 | n/a | n/a | Visit Repo |
| BadParcel | CVE-2023-20963 PoC (Android WorkSource parcel/unparcel logic m | n/a | n/a | Visit Repo |
| -Pymatgen-2024.1---Remote-Code-Execution-RCE- | Pymatgen 2024.1 - Remote Code Execution (RCE) CVE: 2024-2334 | n/a | n/a | Visit Repo |
| CVE-2025-48708 | CVE-2025-48708 Ghostscript PDF lack of argument sanitization l | n/a |
v3.1
MEDIUM
Score: 4
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
|
Visit Repo |
| CVE-2025-0868 | Remote Code Execution in DocsGPT |
v4.0
CRITICAL
Score: 9.3
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
|
Visit Repo | |
| CVE-2025-36535 | CVE-2025-36535 – AutomationDirect MB-Gateway Unauthenticated | n/a | n/a | Visit Repo |
| Apache-Tomcat---Remote-Code-Execution-via-Session-Deserialization-CVE-2025-24813- | Apache Tomcat - Remote Code Execution via Session Deserializat | Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT | n/a | Visit Repo |
Sat May 24, 2025
| Repository | Description | CVE | Metrics | Action |
|---|---|---|---|---|
| CVE-2024-42009-PoC | CVE-2024-42009 Proof of Concept | n/a | n/a | Visit Repo |
| CVE-2025-25014 | n/a | n/a | Visit Repo |
GitHub Threat Intelligence at a Glance
Stay on top of cybersecurity developments and open-source research through daily GitHub updates.
Jump into a repository to explore code, documentation, or CVE-related insights.