GitHub Feed
Explore the latest GitHub repositories gathered from our feed. Entries are grouped by day to help you track developments quickly.
Tue Jun 03, 2025
| Repository | Description | CVE | Metrics | Action |
|---|---|---|---|---|
| CVE-2025-2945_PoC | pgAdmin Proof of Concept | pgAdmin 4: Remote Code Execution in Query Tool and Cloud Deployment |
v3.1
CRITICAL
Score: 9.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
|
Visit Repo |
| CVE-2025-49113 | Detection for CVE-2025-49113 | n/a |
v3.1
CRITICAL
Score: 9.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
|
Visit Repo |
| Exploit_CVE-2023-27163 | Proof of Concept exploit for Server Side Request Forgery vulne | n/a | n/a | Visit Repo |
| CVE-2025-5419 | n/a | n/a | Visit Repo | |
| CVE-2025-22224 | Privilege Escalation via TOCTOU Race Condition in VMware VMX ( | n/a |
v3.1
CRITICAL
Score: 9.3
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
|
Visit Repo |
| CVE-2025-20188 | n/a | n/a | Visit Repo | |
| CVE-2024-53677 | Apache Struts: Mixing setters for uploaded files and normal fields can allow bypass file upload checks |
v4.0
CRITICAL
Score: 9.5
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:N/AU:Y/R:A/V:C/RE:L/U:Red
|
Visit Repo | |
| cve20254664 | n/a | n/a | Visit Repo | |
| CVE-2025-3102 | SureTriggers <= 1.0.78 - Authorization Bypass Exploit | SureTriggers <= 1.0.78 - Authorization Bypass due to Missing Empty Value Check to Unauthenticated Administrative User Creation |
v3.1
HIGH
Score: 8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
|
Visit Repo |
| CVE-2025-4123-template | n/a |
v3.1
HIGH
Score: 7.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
|
Visit Repo | |
| Bug-Bounty-Reports | Document ethical hacking findings, CVEs, writeups, and proof-o | n/a | n/a | Visit Repo |
| django-vulnerability-CVE-2025-32873 | Django Security Issue (CVE-2025-32873) | n/a | n/a | Visit Repo |
| cve-2024-3094 | A XZ backdoor vulnerability explained in details | Xz: malicious code in distributed source |
v3.1
CRITICAL
Score: 10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
|
Visit Repo |
| CVE-2025-46206 | n/a | n/a | Visit Repo | |
| Banco_vetorial_CVE | Automatize a extração e inserção de dados de vulnerabilida | n/a | n/a | Visit Repo |
| CVE-2014-4688-NodeJs-Exploit | Authenticated Remote Command Execution – pfSense <= 2.1.3 | n/a | n/a | Visit Repo |
| CVE-2024-28784 | Technical disclosure for CVE-2024-28784 — a stored XSS vulne | IBM QRadar cross-site scripting |
v3.1
MEDIUM
Score: 5.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
|
Visit Repo |
Mon Jun 02, 2025
| Repository | Description | CVE | Metrics | Action |
|---|---|---|---|---|
| PoC-CVE-2024-39924 | PoC for CVE-2024-39924 | n/a | n/a | Visit Repo |
| CVE-2025-44148 | A reflected cross-site scripting (XSS) vulnerability exists in | n/a | n/a | Visit Repo |
| Exploit_MS08-067 | MS08-067 | CVE-2008-4250 | n/a | n/a | Visit Repo |
| CVE-2025-5280-V8-OOB | Remote Code Execution via Out-of-Bounds Write in V8 (CVE-2025- | n/a | n/a | Visit Repo |
| CVE-2025-22224-PoC | Privilege Escalation via TOCTOU in VMware VMX (CVE-2025-22224) | n/a |
v3.1
CRITICAL
Score: 9.3
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
|
Visit Repo |
| DVR_Credential_Scanner | A tool for scanning DVR systems vulnerable to CVE-2018-9995 cr | n/a | n/a | Visit Repo |
Sun Jun 01, 2025
| Repository | Description | CVE | Metrics | Action |
|---|---|---|---|---|
| CVE-2011-0762 | Prova de Conceito corrigida do exploit-db | n/a | n/a | Visit Repo |
| CVE-2023-25690-POC | CVE 2023 25690 Proof of concept - mod_proxy vulnerable configu | Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy | n/a | Visit Repo |
| os-toolkit | A modular pentesting toolkit for scanning, exploitation simula | n/a | n/a | Visit Repo |
| msfcve | Metasploit Exploit CVE Coverage | n/a | n/a | Visit Repo |
| Discord-Image-Logger-Stealer | Ephemeral discourse is embodied by the likes of Messenger Sess | n/a | n/a | Visit Repo |
| RCE-CVE-2025-3248 | This Python script exploits CVE-2025-3248 to execute arbitrary | Langflow Unauth RCE |
v3.1
CRITICAL
Score: 9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
Visit Repo |
| HTA-Exploit | Microsoft Windows HTA (HTML Application) - Pinnacle of Remote | n/a | n/a | Visit Repo |
| Anydesk-Exploit-CVE-2025-12654-RCE-Builder | Exploit development targets vulnerabilities using tools like e | n/a | n/a | Visit Repo |
| PDF-FUD-Exploit | A meticulous scrutiny of the Exploit PDFs innards exposes a ne | n/a | n/a | Visit Repo |
| Slient-URL-Exploit | URL Contamination Exploit Muted Java Drive-By downloads can tr | n/a | n/a | Visit Repo |
| CVE-2024-9264 | A go implementation for CVE-2024-9264 which effect grafana ver | Grafana SQL Expressions allow for remote code execution |
v4.0
CRITICAL
Score: 9.4
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
|
Visit Repo |
Sat May 31, 2025
| Repository | Description | CVE | Metrics | Action |
|---|---|---|---|---|
| CVE-2025-48827 | Vbullettin RCE - CVE-2025-48827 | n/a |
v3.1
CRITICAL
Score: 10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
|
Visit Repo |
| exploitdb | Explore vulnerabilities with the lightweight Java CLI tool, Ex | n/a | n/a | Visit Repo |
| CVE-2011-0762 | Prova de Conceito corrigida do exploit-db | n/a | n/a | Visit Repo |
| CVE-2025-5328 | CVE-2025-5328 – Path Traversal in chshcms mccms 2.7 | n/a | n/a | Visit Repo |
| CVE-2025-20188 | CVE-2025-20188: Unauthenticated RCE in Cisco IOS XE WLC via Ha | n/a | n/a | Visit Repo |
| nvd-vulnerability-fetcher | Automated NVD Vulnerability Fetcher — A Python-based proof-o | n/a | n/a | Visit Repo |
| XSS-and-POC | Public cve | n/a | n/a | Visit Repo |
| DLang-file-encryptor | This is my biggest project yet: a DLang file encryptor that es | n/a | n/a | Visit Repo |
| CVE-2025-27590 | n/a |
v3.1
CRITICAL
Score: 9
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
|
Visit Repo | |
| CVE-2025-46204 | PoC of CVE-2025-46204 | n/a | n/a | Visit Repo |
| CVE-2021-22911 | Updated exploit for CVE-2021-22911 (Rocket.Chat 3.12.1 - NoSQL | n/a | n/a | Visit Repo |
| WIndows-7-automated-exploitation-using-metasploit-framework- | Automated bash script which scans an ip for potential vulnerab | n/a | n/a | Visit Repo |
| CVE-2025-46203 | PoC of CVE-2025-46203 | n/a | n/a | Visit Repo |
| CVE-2023-49496_PoC | n/a | n/a | Visit Repo | |
| CVE-2024-7399-POC | n/a |
v3.1
HIGH
Score: 8.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
Visit Repo | |
| nes-vuetify-cve-2025-1461 | Vuetify XSS through 'eventMoreText' prop of VCalendar |
v3.1
MEDIUM
Score: 5.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
|
Visit Repo |
GitHub Threat Intelligence at a Glance
Stay on top of cybersecurity developments and open-source research through daily GitHub updates.
Jump into a repository to explore code, documentation, or CVE-related insights.