sharma19d/CVE-2025-61148 The vulnerability exists in the Student Payment API. The application fails to properly validate whether the user requesting a receipt is authorized to view it. By modifying the rec_no parameter in the API request, an attacker can access the receipts of other users. Create: 2025-12-03 04:55:19 +0000 UTC Push: 2025-12-03 04:55:20 +0000 UTC |

alexlee820/CVE-2025-63945 Create: 2025-12-03 02:39:09 +0000 UTC Push: 2025-12-03 02:39:10 +0000 UTC |

alexlee820/CVE-2025-63945-Tencent-iOA-EoP Create: 2025-12-03 02:39:09 +0000 UTC Push: 2025-12-04 17:57:12 +0000 UTC |

ibnurusdianto/CVE-2025-59427 CVE-2025-59427 Cloudflare & Vite/Wrangler With Simple 403 Bypass Create: 2025-12-03 01:13:34 +0000 UTC Push: 2025-12-03 01:13:34 +0000 UTC |

bengabay1994/cve-2021-21551-PoC This repo contain a PoC I have done when blind analysis the dbutil_2_3.sys driver for vulnerability. This was created by personal analysis without looking at writeups or even know which CVE exist in this driver. All the knowledge I have is that this driver is vulnerable in some way. Create: 2025-12-02 19:47:51 +0000 UTC Push: 2025-12-02 19:47:52 +0000 UTC |

useci-sys/CVE-2025-50165 Proof-of-Concept exploit for the Untrusted Pointer Dereference vulnerability in Windows Graphics Component (CVE-2025-50165). Create: 2025-12-02 19:41:37 +0000 UTC Push: 2025-12-02 19:41:38 +0000 UTC |

akamai/CVE-2025-60719-AFD.SYS Create: 2025-12-02 14:16:53 +0000 UTC Push: 2025-12-02 15:12:01 +0000 UTC |

Zwique/CVE-2025-1337-POC POC of CVE-2025-1337 Create: 2025-12-02 13:12:37 +0000 UTC Push: 2025-12-02 13:12:37 +0000 UTC |

7amzahard/CVE-2025-43300 CVE-2025-43300: iOS/macOS DNG Image Processing Memory Corruption Create: 2025-12-02 12:22:14 +0000 UTC Push: 2025-12-02 12:22:14 +0000 UTC |

towaos/towaos-lab-cve-2020-11023 Create: 2025-12-02 11:44:15 +0000 UTC Push: 2025-12-02 11:44:15 +0000 UTC |

Bidon47/CVE-2025-65806 Advisory for CVE-2025-65806 – nested ZIP file upload validation bypass in E-POINT CMS Create: 2025-12-02 11:39:44 +0000 UTC Push: 2025-12-02 11:39:44 +0000 UTC |

muffinthecoder/CNEXT_BufferOverflow_CVE2024-2961 CNEXT (ISO-2022-CN-EXT) buffer overflow in glibc’s iconv: reproducible lab for detection, safe exploitation evidence, and layered mitigations (Docker + optional Kali VM). Includes scripts, PHP harness, and step-by-step setup to demonstrate impact and defenses. Create: 2025-12-02 10:29:53 +0000 UTC Push: 2025-12-02 10:29:54 +0000 UTC |

sudlit/CVE-2017-7494 Create: 2025-12-02 09:55:52 +0000 UTC Push: 2025-12-02 09:55:57 +0000 UTC |

liamromanis101/CVE-2025-29927-NextJS PoC for testing CVE-2025-29927 for Next.js versions 11.x, 12.x <= 12.3.5, 13.x <= 13.5.9, 14.x <=14.2.25, 15.x <= 15.2.3 Create: 2025-12-02 09:39:02 +0000 UTC Push: 2025-12-02 10:18:23 +0000 UTC |

Ashwesker/Blackash-CVE-2025-48633 CVE-2025-48633 Create: 2025-12-02 09:35:00 +0000 UTC Push: 2025-12-02 09:35:00 +0000 UTC |

poblaguev-tot/CVE-2025-63499 POC for CVE-2025-63499 Create: 2025-12-02 08:38:46 +0000 UTC Push: 2025-12-02 08:51:56 +0000 UTC |

pratikjojode/citrix-cve-2021-22941-lab Vulnerable environment for testing CVE-2021-22941 Nuclei template Create: 2025-12-02 05:58:11 +0000 UTC Push: 2025-12-02 05:58:54 +0000 UTC |

Jorge2Rubio/CVE-2019-0232 Create: 2025-12-02 05:09:50 +0000 UTC Push: 2025-12-02 05:09:51 +0000 UTC |

Smarttfoxx/CVE-2025-65321 Language Sloth Sloth Bot 1.0 is vulnerable to Directory Traversal in the gif() and png() functions. The functions build file paths using unsanitized user input for the 'name' parameter, allowing attackers to reference files outside the intended resource directories. Create: 2025-12-02 03:43:21 +0000 UTC Push: 2025-12-02 03:43:22 +0000 UTC |

abelreqma/CVE-2021-33026 Django file-based cache poisoning to RCE PoC Create: 2025-12-02 00:47:46 +0000 UTC Push: 2025-12-02 00:47:47 +0000 UTC |