nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/08/31 19:24:27

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-09-01 04:24:27 +09:00
1 parent 5488f251c2
commit 03528f0388
59 files changed
+431 -309
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2018/CVE-2018-14667.json
+33
View File
@@ -196,5 +196,38 @@
"watchers": 8,
"score": 0,
"subscribers_count": 1
},
{
"id": 1352421932,
"name": "CVE-2018-14667_Lab_POC",
"full_name": "aitLmalem\/CVE-2018-14667_Lab_POC",
"owner": {
"login": "aitLmalem",
"id": 86539043,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/86539043?v=4",
"html_url": "https:\/\/github.com\/aitLmalem",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/aitLmalem\/CVE-2018-14667_Lab_POC",
"description": "Demonstration of the expression language (EL) injection vulnerability CVE-2018-14667 using the photoalbum lab under Jboss application server",
"fork": false,
"created_at": "2026-08-31T13:05:14Z",
"updated_at": "2026-08-31T13:18:32Z",
"pushed_at": "2026-08-31T13:07:04Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2018/CVE-2018-9995.json
+4 -4
View File
@@ -848,10 +848,10 @@
"description": "POC of CVE-2018-9995 written in Rust.",
"fork": false,
"created_at": "2025-10-28T15:30:18Z",
"updated_at": "2026-04-28T14:03:14Z",
"updated_at": "2026-08-31T13:38:51Z",
"pushed_at": "2025-11-01T22:39:23Z",
"stargazers_count": 97,
"watchers_count": 97,
"stargazers_count": 95,
"watchers_count": 95,
"has_discussions": false,
"forks_count": 13,
"allow_forking": true,
@@ -862,7 +862,7 @@
"topics": [],
"visibility": "public",
"forks": 13,
"watchers": 97,
"watchers": 95,
"score": 0,
"subscribers_count": 1
},
2019/CVE-2019-0708.json
+1 -1
View File
@@ -1302,7 +1302,7 @@
"forks": 173,
"watchers": 496,
"score": 0,
"subscribers_count": 34
"subscribers_count": 35
},
{
"id": 187788453,
2020/CVE-2020-14321.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Python script to exploit CVE-2020-14321 - Moodle 3.9 - Course enrollments allowed privilege escalation from teacher role into manager role to RCE.",
"fork": false,
"created_at": "2021-04-28T19:46:55Z",
"updated_at": "2026-03-27T04:21:42Z",
"updated_at": "2026-08-31T16:13:20Z",
"pushed_at": "2021-12-03T03:56:29Z",
"stargazers_count": 21,
"watchers_count": 21,
"stargazers_count": 22,
"watchers_count": 22,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -64,7 +64,7 @@
],
"visibility": "public",
"forks": 3,
"watchers": 21,
"watchers": 22,
"score": 0,
"subscribers_count": 1
},
2020/CVE-2020-17087.json
-33
View File
@@ -65,39 +65,6 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 382397170,
"name": "Windows-Non-Paged-Pool-Overflow-Exploitation",
"full_name": "vp777\/Windows-Non-Paged-Pool-Overflow-Exploitation",
"owner": {
"login": "vp777",
"id": 28927034,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/28927034?v=4",
"html_url": "https:\/\/github.com\/vp777",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/vp777\/Windows-Non-Paged-Pool-Overflow-Exploitation",
"description": "Techniques based on named pipes for pool overflow exploitation targeting the most recent (and oldest) Windows versions demonstrated on CVE-2020-17087 and an off-by-one overflow",
"fork": false,
"created_at": "2021-07-02T16:03:16Z",
"updated_at": "2026-07-29T03:12:11Z",
"pushed_at": "2022-09-01T06:33:36Z",
"stargazers_count": 264,
"watchers_count": 264,
"has_discussions": false,
"forks_count": 58,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 58,
"watchers": 264,
"score": 0,
"subscribers_count": 4
},
{
"id": 640111892,
"name": "CVE-2020-17087",
2021/CVE-2021-31760.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Exploiting a Cross-site request forgery (CSRF) attack to get a Remote Command Execution (RCE) through the Webmin's running process feature",
"fork": false,
"created_at": "2021-04-21T00:09:54Z",
"updated_at": "2021-04-29T02:55:07Z",
"updated_at": "2026-08-31T15:17:33Z",
"pushed_at": "2021-04-24T20:07:02Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 1
},
2021/CVE-2021-4034.json
+8 -8
View File
@@ -150,10 +150,10 @@
"description": "PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec (CVE-2021-4034)",
"fork": false,
"created_at": "2022-01-26T00:56:36Z",
"updated_at": "2026-08-23T16:41:55Z",
"updated_at": "2026-08-31T12:49:08Z",
"pushed_at": "2023-05-04T19:24:39Z",
"stargazers_count": 1160,
"watchers_count": 1160,
"stargazers_count": 1161,
"watchers_count": 1161,
"has_discussions": false,
"forks_count": 312,
"allow_forking": true,
@@ -168,7 +168,7 @@
],
"visibility": "public",
"forks": 312,
"watchers": 1160,
"watchers": 1161,
"score": 0,
"subscribers_count": 13
},
@@ -994,10 +994,10 @@
"description": "Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation",
"fork": false,
"created_at": "2022-01-26T14:26:10Z",
"updated_at": "2026-08-29T05:03:41Z",
"updated_at": "2026-08-31T15:34:32Z",
"pushed_at": "2022-06-21T14:52:05Z",
"stargazers_count": 1327,
"watchers_count": 1327,
"stargazers_count": 1328,
"watchers_count": 1328,
"has_discussions": false,
"forks_count": 206,
"allow_forking": true,
@@ -1010,7 +1010,7 @@
],
"visibility": "public",
"forks": 206,
"watchers": 1327,
"watchers": 1328,
"score": 0,
"subscribers_count": 14
},
2021/CVE-2021-40444.json
+4 -4
View File
@@ -245,10 +245,10 @@
"description": "CVE-2021-40444 PoC",
"fork": false,
"created_at": "2021-09-10T16:55:53Z",
"updated_at": "2026-08-31T12:39:26Z",
"updated_at": "2026-08-31T16:17:55Z",
"pushed_at": "2021-12-25T18:31:02Z",
"stargazers_count": 1800,
"watchers_count": 1800,
"stargazers_count": 1801,
"watchers_count": 1801,
"has_discussions": false,
"forks_count": 473,
"allow_forking": true,
@@ -259,7 +259,7 @@
"topics": [],
"visibility": "public",
"forks": 473,
"watchers": 1800,
"watchers": 1801,
"score": 0,
"subscribers_count": 27
},
2022/CVE-2022-30075.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Tp-Link Archer AX50 Authenticated RCE (CVE-2022-30075)",
"fork": false,
"created_at": "2022-06-07T23:26:47Z",
"updated_at": "2026-08-24T14:52:03Z",
"updated_at": "2026-08-31T15:38:57Z",
"pushed_at": "2022-11-20T03:03:53Z",
"stargazers_count": 235,
"watchers_count": 235,
"stargazers_count": 236,
"watchers_count": 236,
"has_discussions": false,
"forks_count": 43,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 43,
"watchers": 235,
"watchers": 236,
"score": 0,
"subscribers_count": 4
},
2023/CVE-2023-26493.json
+39
View File
@@ -0,0 +1,39 @@
[
{
"id": 1352473117,
"name": "gha-lab-fb32aba4a3",
"full_name": "pvharmo2\/gha-lab-fb32aba4a3",
"owner": {
"login": "pvharmo2",
"id": 304171033,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/304171033?v=4",
"html_url": "https:\/\/github.com\/pvharmo2",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/pvharmo2\/gha-lab-fb32aba4a3",
"description": "Authorized lab reproduction of CVE-2023-26493 (GHSL-2023-027): command injection via github.head_ref in cocos-engine's <Web> Interface check pull_request_target workflow",
"fork": false,
"created_at": "2026-08-31T13:53:42Z",
"updated_at": "2026-08-31T14:08:59Z",
"pushed_at": "2026-08-31T14:01:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"academic-research",
"github-actions",
"research-artifact"
],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2023/CVE-2023-32434.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙",
"fork": false,
"created_at": "2025-08-13T09:19:29Z",
"updated_at": "2026-08-31T08:39:06Z",
"pushed_at": "2026-08-31T08:37:15Z",
"updated_at": "2026-08-31T17:05:40Z",
"pushed_at": "2026-08-31T16:40:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-39361.json
+33
View File
@@ -64,5 +64,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 1352638794,
"name": "cacti-cve-2023-39361",
"full_name": "spartanx-alejandro\/cacti-cve-2023-39361",
"owner": {
"login": "spartanx-alejandro",
"id": 195145877,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/195145877?v=4",
"html_url": "https:\/\/github.com\/spartanx-alejandro",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/spartanx-alejandro\/cacti-cve-2023-39361",
"description": null,
"fork": false,
"created_at": "2026-08-31T16:41:04Z",
"updated_at": "2026-08-31T16:51:29Z",
"pushed_at": "2026-08-31T16:41:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2023/CVE-2023-46747.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "exploit for f5-big-ip RCE cve-2023-46747",
"fork": false,
"created_at": "2023-11-01T09:31:05Z",
"updated_at": "2026-08-24T14:52:21Z",
"updated_at": "2026-08-31T13:38:48Z",
"pushed_at": "2024-10-20T10:27:37Z",
"stargazers_count": 207,
"watchers_count": 207,
"stargazers_count": 206,
"watchers_count": 206,
"has_discussions": false,
"forks_count": 46,
"allow_forking": true,
@@ -34,7 +34,7 @@
],
"visibility": "public",
"forks": 46,
"watchers": 207,
"watchers": 206,
"score": 0,
"subscribers_count": 1
},
2023/CVE-2023-49105.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "ownCloud exploits for CVE-2023-49105",
"fork": false,
"created_at": "2023-12-05T11:35:12Z",
"updated_at": "2026-08-24T18:36:18Z",
"updated_at": "2026-08-31T14:17:54Z",
"pushed_at": "2023-12-05T11:35:19Z",
"stargazers_count": 40,
"watchers_count": 40,
"stargazers_count": 41,
"watchers_count": 41,
"has_discussions": false,
"forks_count": 10,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 10,
"watchers": 40,
"watchers": 41,
"score": 0,
"subscribers_count": 1
}
2024/CVE-2024-10914.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Exploit for cve-2024-10914: D-Link DNS-320, DNS-320LW, DNS-325, DNS-340L Version 1.00, Version 1.01.0914.2012, Version 1.01, Version 1.02, Version 1.08 Command Injection",
"fork": false,
"created_at": "2024-11-09T19:30:39Z",
"updated_at": "2026-07-06T05:17:38Z",
"updated_at": "2026-08-31T13:38:49Z",
"pushed_at": "2024-11-09T19:31:42Z",
"stargazers_count": 15,
"watchers_count": 15,
"stargazers_count": 14,
"watchers_count": 14,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 15,
"watchers": 14,
"score": 0,
"subscribers_count": 2
},
2024/CVE-2024-12986.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2025-01-04T14:47:09Z",
"updated_at": "2026-08-30T21:04:47Z",
"updated_at": "2026-08-31T14:06:55Z",
"pushed_at": "2025-01-04T14:58:25Z",
"stargazers_count": 338,
"watchers_count": 338,
"stargazers_count": 337,
"watchers_count": 337,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 338,
"watchers": 337,
"score": 0,
"subscribers_count": 1
}
2024/CVE-2024-3094.json
+1 -1
View File
@@ -2617,7 +2617,7 @@
"description": null,
"fork": false,
"created_at": "2026-04-15T11:20:31Z",
"updated_at": "2026-04-23T09:46:57Z",
"updated_at": "2026-08-31T17:44:14Z",
"pushed_at": "2026-04-23T09:46:52Z",
"stargazers_count": 0,
"watchers_count": 0,
2024/CVE-2024-41570.json
+33
View File
@@ -98,6 +98,39 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 919229403,
"name": "HavocPwn",
"full_name": "UnDefinedCS\/HavocPwn",
"owner": {
"login": "UnDefinedCS",
"id": 238776048,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/238776048?v=4",
"html_url": "https:\/\/github.com\/UnDefinedCS",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/UnDefinedCS\/HavocPwn",
"description": "Expanded Exploit based on CVE-2024-41570",
"fork": false,
"created_at": "2025-01-20T02:11:21Z",
"updated_at": "2026-08-31T13:29:35Z",
"pushed_at": "2025-12-08T00:21:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 919853961,
"name": "Havoc-C2-SSRF-to-RCE",
2024/CVE-2024-43425.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": null,
"fork": false,
"created_at": "2025-02-07T19:48:05Z",
"updated_at": "2026-05-16T17:13:00Z",
"updated_at": "2026-08-31T16:17:16Z",
"pushed_at": "2025-02-07T22:12:52Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 1
},
2024/CVE-2024-45241.json
-33
View File
@@ -1,37 +1,4 @@
[
{
"id": 847361376,
"name": "CVE-2024-45241",
"full_name": "d4lyw\/CVE-2024-45241",
"owner": {
"login": "d4lyw",
"id": 53091736,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/53091736?v=4",
"html_url": "https:\/\/github.com\/d4lyw",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/d4lyw\/CVE-2024-45241",
"description": "Path Traversal in CentralSquare's CryWolf",
"fork": false,
"created_at": "2024-08-25T15:57:40Z",
"updated_at": "2024-09-18T22:48:09Z",
"pushed_at": "2024-08-25T16:09:34Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 859878308,
"name": "CVE-2024-45241",
2024/CVE-2024-46627.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 862873525,
"name": "CVE-2024-46627",
"full_name": "d4lyw\/CVE-2024-46627",
"owner": {
"login": "d4lyw",
"id": 53091736,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/53091736?v=4",
"html_url": "https:\/\/github.com\/d4lyw",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/d4lyw\/CVE-2024-46627",
"description": "CVE-2024-46627 - Incorrect access control in BECN DATAGERRY v2.2 allows attackers to > execute arbitrary commands via crafted web requests.",
"fork": false,
"created_at": "2024-09-25T10:32:53Z",
"updated_at": "2024-09-25T10:52:13Z",
"pushed_at": "2024-09-25T10:52:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
}
]
2025/CVE-2025-20197.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1352612803,
"name": "CVE-2025-20197-POC",
"full_name": "KaraRyougi\/CVE-2025-20197-POC",
"owner": {
"login": "KaraRyougi",
"id": 11702501,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/11702501?v=4",
"html_url": "https:\/\/github.com\/KaraRyougi",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/KaraRyougi\/CVE-2025-20197-POC",
"description": null,
"fork": false,
"created_at": "2026-08-31T16:13:06Z",
"updated_at": "2026-08-31T16:13:07Z",
"pushed_at": "2026-08-31T16:13:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-20333.json
+4 -4
View File
@@ -66,7 +66,7 @@
"subscribers_count": 0
},
{
"id": 1352418062,
"id": 1352508895,
"name": "cve-2025-20333",
"full_name": "cobbbex\/cve-2025-20333",
"owner": {
@@ -79,9 +79,9 @@
"html_url": "https:\/\/github.com\/cobbbex\/cve-2025-20333",
"description": null,
"fork": false,
"created_at": "2026-08-31T13:01:06Z",
"updated_at": "2026-08-31T13:01:07Z",
"pushed_at": "2026-08-31T13:01:07Z",
"created_at": "2026-08-31T14:29:28Z",
"updated_at": "2026-08-31T14:45:37Z",
"pushed_at": "2026-08-31T14:29:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-21479.json
+4 -4
View File
@@ -212,10 +212,10 @@
"description": null,
"fork": false,
"created_at": "2026-08-19T09:39:46Z",
"updated_at": "2026-08-28T10:34:13Z",
"updated_at": "2026-08-31T14:12:30Z",
"pushed_at": "2026-08-31T05:03:05Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -226,7 +226,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-24257.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis",
"fork": false,
"created_at": "2026-04-04T03:42:55Z",
"updated_at": "2026-08-31T09:15:25Z",
"pushed_at": "2026-08-31T09:10:07Z",
"updated_at": "2026-08-31T17:20:18Z",
"pushed_at": "2026-08-31T17:15:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-32463.json
+2 -2
View File
@@ -1496,8 +1496,8 @@
"description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.",
"fork": false,
"created_at": "2025-09-20T00:42:07Z",
"updated_at": "2026-08-31T08:40:57Z",
"pushed_at": "2026-08-31T08:39:23Z",
"updated_at": "2026-08-31T16:48:50Z",
"pushed_at": "2026-08-31T16:42:38Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-34085.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Multi-target unauthenticated RCE scanner for CVE-2025-34085 affecting WordPress Simple File List plugin. Uploads, renames, and triggers PHP webshells across large target sets.",
"fork": false,
"created_at": "2025-07-13T01:27:49Z",
"updated_at": "2026-08-23T15:30:07Z",
"updated_at": "2026-08-31T13:38:50Z",
"pushed_at": "2025-07-13T02:26:31Z",
"stargazers_count": 35,
"watchers_count": 35,
"stargazers_count": 34,
"watchers_count": 34,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 35,
"watchers": 34,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-36911.json
+10 -10
View File
@@ -152,10 +152,10 @@
"description": "WhisperPair (CVE-2025-36911) POC for ESP32 device ",
"fork": false,
"created_at": "2026-01-20T05:50:37Z",
"updated_at": "2026-08-27T10:53:32Z",
"updated_at": "2026-08-31T19:09:43Z",
"pushed_at": "2026-01-31T03:16:06Z",
"stargazers_count": 11,
"watchers_count": 11,
"stargazers_count": 12,
"watchers_count": 12,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -173,7 +173,7 @@
],
"visibility": "public",
"forks": 2,
"watchers": 11,
"watchers": 12,
"score": 0,
"subscribers_count": 0
},
@@ -263,7 +263,7 @@
"stargazers_count": 27,
"watchers_count": 27,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -274,7 +274,7 @@
"pentesting"
],
"visibility": "public",
"forks": 1,
"forks": 2,
"watchers": 27,
"score": 0,
"subscribers_count": 1
@@ -327,10 +327,10 @@
"description": "The official reference implementation & vulnerability verification of our attack WhisperPair (CVE-2025-36911) which affects Google's Fast Pair protocol.",
"fork": false,
"created_at": "2026-03-30T15:29:04Z",
"updated_at": "2026-08-29T22:04:02Z",
"updated_at": "2026-08-31T13:30:38Z",
"pushed_at": "2026-05-28T14:44:51Z",
"stargazers_count": 86,
"watchers_count": 86,
"stargazers_count": 87,
"watchers_count": 87,
"has_discussions": false,
"forks_count": 10,
"allow_forking": true,
@@ -346,7 +346,7 @@
],
"visibility": "public",
"forks": 10,
"watchers": 86,
"watchers": 87,
"score": 0,
"subscribers_count": 2
},
2025/CVE-2025-4524.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2025-4524 - Unauthenticated madara-core Wordpress theme LFI",
"fork": false,
"created_at": "2025-05-05T03:28:17Z",
"updated_at": "2026-05-25T11:33:10Z",
"updated_at": "2026-08-31T13:15:23Z",
"pushed_at": "2025-05-20T23:10:54Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-49844.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.",
"fork": false,
"created_at": "2019-04-13T07:51:09Z",
"updated_at": "2026-08-31T08:50:30Z",
"pushed_at": "2026-08-31T08:43:45Z",
"updated_at": "2026-08-31T16:56:55Z",
"pushed_at": "2026-08-31T16:47:18Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-52691.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 19,
"watchers_count": 19,
"has_discussions": false,
"forks_count": 5,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -32,7 +32,7 @@
"vulnerability"
],
"visibility": "public",
"forks": 5,
"forks": 4,
"watchers": 19,
"score": 0,
"subscribers_count": 0
2025/CVE-2025-55182.json
+8 -8
View File
@@ -3902,10 +3902,10 @@
"description": "CVE-2025-55182 (React2Shell) Scanner",
"fork": false,
"created_at": "2025-12-06T02:39:40Z",
"updated_at": "2026-03-24T05:58:21Z",
"updated_at": "2026-08-31T13:38:51Z",
"pushed_at": "2026-03-06T05:27:24Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -3916,7 +3916,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
@@ -9547,10 +9547,10 @@
"description": "Advanced Exploitation Toolkit for Next.js Server Actions (CVE-2025-55182)",
"fork": false,
"created_at": "2025-12-12T11:31:45Z",
"updated_at": "2026-08-28T20:18:13Z",
"updated_at": "2026-08-31T13:38:52Z",
"pushed_at": "2025-12-12T11:52:59Z",
"stargazers_count": 53,
"watchers_count": 53,
"stargazers_count": 52,
"watchers_count": 52,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -9569,7 +9569,7 @@
],
"visibility": "public",
"forks": 6,
"watchers": 53,
"watchers": 52,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-55575.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2025-08-22T19:04:24Z",
"updated_at": "2026-08-30T21:04:47Z",
"updated_at": "2026-08-31T14:06:54Z",
"pushed_at": "2025-08-25T18:42:48Z",
"stargazers_count": 337,
"watchers_count": 337,
"stargazers_count": 336,
"watchers_count": 336,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 337,
"watchers": 336,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-63353.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "This is a Proof-Of-Concept of CVE-2025-63353",
"fork": false,
"created_at": "2025-12-18T18:50:40Z",
"updated_at": "2026-06-01T02:31:20Z",
"updated_at": "2026-08-31T13:38:52Z",
"pushed_at": "2025-12-18T19:56:58Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 4,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-66478.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.",
"fork": false,
"created_at": "2025-10-01T07:40:09Z",
"updated_at": "2026-08-31T08:54:31Z",
"pushed_at": "2026-08-31T08:51:28Z",
"updated_at": "2026-08-31T17:07:07Z",
"pushed_at": "2026-08-31T16:55:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-68921.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.",
"fork": false,
"created_at": "2026-01-24T21:00:41Z",
"updated_at": "2026-08-31T09:00:46Z",
"pushed_at": "2026-08-31T08:56:35Z",
"updated_at": "2026-08-31T17:13:21Z",
"pushed_at": "2026-08-31T17:01:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-0300.json
+2 -2
View File
@@ -229,7 +229,7 @@
"stargazers_count": 21,
"watchers_count": 21,
"has_discussions": false,
"forks_count": 11,
"forks_count": 10,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -237,7 +237,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 11,
"forks": 10,
"watchers": 21,
"score": 0,
"subscribers_count": 1
2026/CVE-2026-0740.json
+2 -2
View File
@@ -97,7 +97,7 @@
"stargazers_count": 23,
"watchers_count": 23,
"has_discussions": false,
"forks_count": 5,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -105,7 +105,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 5,
"forks": 4,
"watchers": 23,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-18963.json
+5 -5
View File
@@ -14,10 +14,10 @@
"description": "Hunt for CVE-2026-18963 exploitation traces (Keycloak unauthenticated account takeover) in the Keycloak database",
"fork": false,
"created_at": "2026-08-20T09:25:27Z",
"updated_at": "2026-08-27T20:14:30Z",
"updated_at": "2026-08-31T16:27:07Z",
"pushed_at": "2026-08-24T15:28:14Z",
"stargazers_count": 14,
"watchers_count": 14,
"stargazers_count": 15,
"watchers_count": 15,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -34,7 +34,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 14,
"watchers": 15,
"score": 0,
"subscribers_count": 1
},
@@ -362,7 +362,7 @@
"fork": false,
"created_at": "2026-08-31T00:59:48Z",
"updated_at": "2026-08-31T10:33:52Z",
"pushed_at": "2026-08-31T10:24:38Z",
"pushed_at": "2026-08-31T19:24:44Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-20841.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.",
"fork": false,
"created_at": "2024-09-22T12:19:06Z",
"updated_at": "2026-08-31T09:09:24Z",
"pushed_at": "2026-08-31T09:02:12Z",
"updated_at": "2026-08-31T17:20:56Z",
"pushed_at": "2026-08-31T17:07:09Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-21962.json
+2 -2
View File
@@ -85,7 +85,7 @@
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 3,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -93,7 +93,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"forks": 4,
"watchers": 2,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-24061.json
+4 -4
View File
@@ -2141,10 +2141,10 @@
"description": "A PoC exploit for CVE-2026-24061 - GNU InetUtils telnetd Argument Injection Authentication Bypass",
"fork": false,
"created_at": "2026-06-08T15:04:56Z",
"updated_at": "2026-08-29T02:53:43Z",
"updated_at": "2026-08-31T16:03:59Z",
"pushed_at": "2026-06-08T15:28:15Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -2160,7 +2160,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-24291.json
+2 -2
View File
@@ -80,8 +80,8 @@
"description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions",
"fork": false,
"created_at": "2026-03-26T04:38:27Z",
"updated_at": "2026-08-31T09:11:32Z",
"pushed_at": "2026-08-31T09:08:21Z",
"updated_at": "2026-08-31T17:25:54Z",
"pushed_at": "2026-08-31T17:14:21Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-2472.json
+2 -2
View File
@@ -65,8 +65,8 @@
"description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.",
"fork": false,
"created_at": "2026-03-10T14:40:04Z",
"updated_at": "2026-08-31T09:07:30Z",
"pushed_at": "2026-08-31T09:04:26Z",
"updated_at": "2026-08-31T17:16:46Z",
"pushed_at": "2026-08-31T17:09:39Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-26980.json
+6 -6
View File
@@ -47,12 +47,12 @@
"description": "CVE-2026-26980 — Ghost CMS Content API SQL Injection Lab (unauthenticated blind SQLi via slug filter ordering)",
"fork": false,
"created_at": "2026-04-17T19:15:20Z",
"updated_at": "2026-08-27T09:12:48Z",
"updated_at": "2026-08-31T17:07:02Z",
"pushed_at": "2026-04-18T02:55:16Z",
"stargazers_count": 17,
"watchers_count": 17,
"stargazers_count": 18,
"watchers_count": 18,
"has_discussions": false,
"forks_count": 2,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,8 +60,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 17,
"forks": 3,
"watchers": 18,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-31431.json
+2 -2
View File
@@ -5968,8 +5968,8 @@
"description": "CVE-2026-31431 Copy Fail — Linux kernel LPE tester via MCP",
"fork": false,
"created_at": "2026-05-02T15:01:41Z",
"updated_at": "2026-08-31T10:24:08Z",
"pushed_at": "2026-08-31T10:15:30Z",
"updated_at": "2026-08-31T14:38:59Z",
"pushed_at": "2026-08-31T14:27:29Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-41940.json
+4 -4
View File
@@ -771,10 +771,10 @@
"description": "CVE-2026-41940 — cPanel & WHM Authentication Bypass via Session-File CRLF Injection",
"fork": false,
"created_at": "2026-05-01T12:09:26Z",
"updated_at": "2026-08-28T02:16:48Z",
"updated_at": "2026-08-31T18:21:29Z",
"pushed_at": "2026-05-01T12:10:32Z",
"stargazers_count": 494,
"watchers_count": 494,
"stargazers_count": 495,
"watchers_count": 495,
"has_discussions": false,
"forks_count": 138,
"allow_forking": true,
@@ -785,7 +785,7 @@
"topics": [],
"visibility": "public",
"forks": 138,
"watchers": 494,
"watchers": 495,
"score": 0,
"subscribers_count": 7
},
2026/CVE-2026-43499.json
+29 -29
View File
@@ -183,10 +183,10 @@
"description": "OPPO Find N2 GhostLock (CVE-2026-43499) exploit adaptation",
"fork": false,
"created_at": "2026-07-09T22:46:15Z",
"updated_at": "2026-08-19T02:53:33Z",
"updated_at": "2026-08-31T14:37:59Z",
"pushed_at": "2026-08-08T05:43:17Z",
"stargazers_count": 62,
"watchers_count": 62,
"stargazers_count": 63,
"watchers_count": 63,
"has_discussions": false,
"forks_count": 24,
"allow_forking": true,
@@ -197,7 +197,7 @@
"topics": [],
"visibility": "public",
"forks": 24,
"watchers": 62,
"watchers": 63,
"score": 0,
"subscribers_count": 0
},
@@ -348,10 +348,10 @@
"description": "GhostLock (CVE-2026-43499) kernel exploit for OnePlus devices with locked bootloader",
"fork": false,
"created_at": "2026-07-12T16:05:24Z",
"updated_at": "2026-08-30T16:03:51Z",
"updated_at": "2026-08-31T16:35:55Z",
"pushed_at": "2026-08-29T13:47:29Z",
"stargazers_count": 294,
"watchers_count": 294,
"stargazers_count": 295,
"watchers_count": 295,
"has_discussions": false,
"forks_count": 63,
"allow_forking": true,
@@ -369,7 +369,7 @@
],
"visibility": "public",
"forks": 63,
"watchers": 294,
"watchers": 295,
"score": 0,
"subscribers_count": 10
},
@@ -591,7 +591,7 @@
"stargazers_count": 81,
"watchers_count": 81,
"has_discussions": false,
"forks_count": 25,
"forks_count": 26,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -599,7 +599,7 @@
"pull_request_creation_policy": "collaborators_only",
"topics": [],
"visibility": "public",
"forks": 25,
"forks": 26,
"watchers": 81,
"score": 0,
"subscribers_count": 0
@@ -1081,10 +1081,10 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
"updated_at": "2026-08-31T12:05:24Z",
"updated_at": "2026-08-31T18:08:58Z",
"pushed_at": "2026-08-24T07:49:18Z",
"stargazers_count": 967,
"watchers_count": 967,
"stargazers_count": 969,
"watchers_count": 969,
"has_discussions": false,
"forks_count": 194,
"allow_forking": true,
@@ -1095,7 +1095,7 @@
"topics": [],
"visibility": "public",
"forks": 194,
"watchers": 967,
"watchers": 969,
"score": 0,
"subscribers_count": 28
},
@@ -1292,7 +1292,7 @@
"stargazers_count": 17,
"watchers_count": 17,
"has_discussions": false,
"forks_count": 4,
"forks_count": 5,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1311,7 +1311,7 @@
"scanner"
],
"visibility": "public",
"forks": 4,
"forks": 5,
"watchers": 17,
"score": 0,
"subscribers_count": 1
@@ -1727,12 +1727,12 @@
"description": "GhostLock One-Tap Execution App (CVE-2026-43499)",
"fork": false,
"created_at": "2026-07-29T05:04:25Z",
"updated_at": "2026-08-31T13:08:22Z",
"updated_at": "2026-08-31T18:40:27Z",
"pushed_at": "2026-08-31T05:24:52Z",
"stargazers_count": 627,
"watchers_count": 627,
"stargazers_count": 636,
"watchers_count": 636,
"has_discussions": true,
"forks_count": 194,
"forks_count": 199,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1740,8 +1740,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 194,
"watchers": 627,
"forks": 199,
"watchers": 636,
"score": 0,
"subscribers_count": 6
},
@@ -2103,10 +2103,10 @@
"description": "Jailbreak supported Google Pixel phones with CVE-2026-43499",
"fork": false,
"created_at": "2026-08-02T17:34:45Z",
"updated_at": "2026-08-31T13:14:20Z",
"updated_at": "2026-08-31T14:46:57Z",
"pushed_at": "2026-08-31T11:35:51Z",
"stargazers_count": 236,
"watchers_count": 236,
"stargazers_count": 238,
"watchers_count": 238,
"has_discussions": false,
"forks_count": 46,
"allow_forking": true,
@@ -2124,7 +2124,7 @@
],
"visibility": "public",
"forks": 46,
"watchers": 236,
"watchers": 238,
"score": 0,
"subscribers_count": 5
},
@@ -2918,7 +2918,7 @@
"stargazers_count": 29,
"watchers_count": 29,
"has_discussions": false,
"forks_count": 3,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2926,7 +2926,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"forks": 2,
"watchers": 29,
"score": 0,
"subscribers_count": 1
@@ -3474,7 +3474,7 @@
"description": "adb-driven KernelSU loader for stock Google Pixel: temporary kernel R\/W via CVE-2026-43499 (GhostLock), then late-loads a signature-matched kernelsu.ko for the running KMI. Manager-agnostic.",
"fork": false,
"created_at": "2026-08-25T11:59:16Z",
"updated_at": "2026-08-31T13:09:13Z",
"updated_at": "2026-08-31T18:48:06Z",
"pushed_at": "2026-08-31T13:05:04Z",
"stargazers_count": 11,
"watchers_count": 11,
2026/CVE-2026-62735.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1345692998,
"name": "CVE-2026-62735",
"full_name": "nhh9905\/CVE-2026-62735",
"owner": {
"login": "nhh9905",
"id": 156885325,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/156885325?v=4",
"html_url": "https:\/\/github.com\/nhh9905",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/nhh9905\/CVE-2026-62735",
"description": "CVE 1-day in http.sys",
"fork": false,
"created_at": "2026-08-25T04:55:10Z",
"updated_at": "2026-08-31T16:24:31Z",
"pushed_at": "2026-08-31T16:15:21Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-63030.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain",
"fork": false,
"created_at": "2026-07-17T20:18:33Z",
"updated_at": "2026-08-31T01:32:35Z",
"updated_at": "2026-08-31T18:34:25Z",
"pushed_at": "2026-08-11T13:41:27Z",
"stargazers_count": 760,
"watchers_count": 760,
"stargazers_count": 761,
"watchers_count": 761,
"has_discussions": false,
"forks_count": 172,
"forks_count": 171,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -31,8 +31,8 @@
"wp2shell-poc"
],
"visibility": "public",
"forks": 172,
"watchers": 760,
"forks": 171,
"watchers": 761,
"score": 0,
"subscribers_count": 3
},
2026/CVE-2026-64561.json
+2 -2
View File
@@ -80,8 +80,8 @@
"description": "Guest-to-host KVM\/x86 escape exploiting CVE-2026-64561, delivering a full PoC chain and analysis for security researchers.",
"fork": false,
"created_at": "2026-08-07T15:51:07Z",
"updated_at": "2026-08-31T09:32:24Z",
"pushed_at": "2026-08-31T09:24:42Z",
"updated_at": "2026-08-31T17:41:24Z",
"pushed_at": "2026-08-31T17:31:08Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-64564.json
+2 -2
View File
@@ -80,8 +80,8 @@
"description": "Tracking SCTPhantom (CVE-2026-64564), the Linux kernel SCTP ASCONF transport use-after-free",
"fork": false,
"created_at": "2026-08-10T05:16:43Z",
"updated_at": "2026-08-30T16:16:26Z",
"pushed_at": "2026-08-30T16:16:18Z",
"updated_at": "2026-08-31T16:05:16Z",
"pushed_at": "2026-08-31T15:21:35Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-64638.json
+4 -4
View File
@@ -278,10 +278,10 @@
"description": "CVE-2026-64638: WordPress Pre-auth XSS → RCE (XSS2Shell) PoC",
"fork": false,
"created_at": "2026-08-08T01:20:11Z",
"updated_at": "2026-08-15T10:36:23Z",
"updated_at": "2026-08-31T19:02:11Z",
"pushed_at": "2026-08-08T01:24:48Z",
"stargazers_count": 6,
"watchers_count": 6,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -301,7 +301,7 @@
],
"visibility": "public",
"forks": 2,
"watchers": 6,
"watchers": 7,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-68138.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "Tracking CVE-2026-68138, the Linux kernel net\/sched qdisc rate-table use-after-free",
"fork": false,
"created_at": "2026-08-17T07:33:31Z",
"updated_at": "2026-08-31T04:27:11Z",
"pushed_at": "2026-08-31T04:27:07Z",
"updated_at": "2026-08-31T15:43:35Z",
"pushed_at": "2026-08-31T15:20:46Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-75604.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-75604 Next.js Windows RCE poc",
"fork": false,
"created_at": "2026-08-25T19:06:37Z",
"updated_at": "2026-08-30T18:14:04Z",
"updated_at": "2026-08-31T16:49:46Z",
"pushed_at": "2026-08-28T02:53:24Z",
"stargazers_count": 79,
"watchers_count": 79,
"stargazers_count": 80,
"watchers_count": 80,
"has_discussions": false,
"forks_count": 38,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 38,
"watchers": 79,
"watchers": 80,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-76904.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "One-Day POC | GeoServer Unauthenticated SQL injection to complete RCE",
"fork": false,
"created_at": "2026-08-16T08:11:26Z",
"updated_at": "2026-08-26T08:47:17Z",
"updated_at": "2026-08-31T16:36:59Z",
"pushed_at": "2026-08-22T20:10:52Z",
"stargazers_count": 3,
"watchers_count": 3,
2026/CVE-2026-81578.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "#PaperCut CVE-2026-81578 + CVE-2026-82078 Defense Toolkit 2 3 A **defensive** toolkit to check and understand exposure to the chained",
"fork": false,
"created_at": "2026-08-29T15:08:43Z",
"updated_at": "2026-08-29T16:11:48Z",
"updated_at": "2026-08-31T13:42:26Z",
"pushed_at": "2026-08-29T16:09:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-9830.json
+6 -6
View File
@@ -47,12 +47,12 @@
"description": "CVE-2026-9830 Proof of Concept",
"fork": false,
"created_at": "2026-08-15T20:57:13Z",
"updated_at": "2026-08-31T12:39:07Z",
"updated_at": "2026-08-31T19:08:42Z",
"pushed_at": "2026-08-20T21:56:15Z",
"stargazers_count": 393,
"watchers_count": 393,
"stargazers_count": 402,
"watchers_count": 402,
"has_discussions": false,
"forks_count": 5,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -71,8 +71,8 @@
"vulnerability"
],
"visibility": "public",
"forks": 5,
"watchers": 393,
"forks": 4,
"watchers": 402,
"score": 0,
"subscribers_count": 0
}
README.md
+24 -9
View File
@@ -13175,6 +13175,13 @@
- [NicPWNs/CVE-2026-62183](https://github.com/NicPWNs/CVE-2026-62183)
### CVE-2026-62735 (2026-08-11)
<code>Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
</code>
- [nhh9905/CVE-2026-62735](https://github.com/nhh9905/CVE-2026-62735)
### CVE-2026-62737 (2026-08-11)
<code>Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.
@@ -18079,6 +18086,13 @@
- [gduma-phData/patch-CVE-2025-20115](https://github.com/gduma-phData/patch-CVE-2025-20115)
### CVE-2025-20197 (2025-05-07)
<code>A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device.\r\n\r This vulnerability is due to insufficient input validation when processing specific configuration commands. An attacker could exploit this vulnerability by including crafted input in specific configuration commands. A successful exploit could allow the attacker to elevate privileges to root on the underlying operating system of an affected device. The security impact rating (SIR) of this advisory has been raised to High because an attacker could gain access to the underlying operating system of the affected device and perform potentially undetected actions.\r\n\r Note: The attacker must have privileges to enter configuration mode on the affected device. This is usually referred to as privilege level 15.
</code>
- [KaraRyougi/CVE-2025-20197-POC](https://github.com/KaraRyougi/CVE-2025-20197-POC)
### CVE-2025-20260 (2025-06-18)
<code>A vulnerability in the PDF scanning processes of ClamAV could allow an unauthenticated, remote attacker to cause a buffer overflow condition, cause a denial of service (DoS) condition, or execute arbitrary code on an affected device.\r\n\r\nThis vulnerability exists because memory buffers are allocated incorrectly when PDF files are processed. An attacker could exploit this vulnerability by submitting a crafted PDF file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to trigger a buffer overflow, likely resulting in the termination of the ClamAV scanning process and a DoS condition on the affected software. Although unproven, there is also a possibility that an attacker could leverage the buffer overflow to execute arbitrary code with the privileges of the ClamAV process.
@@ -35959,6 +35973,7 @@
- [chebuya/Havoc-C2-SSRF-poc](https://github.com/chebuya/Havoc-C2-SSRF-poc)
- [HimmeL-Byte/CVE-2024-41570-SSRF-RCE](https://github.com/HimmeL-Byte/CVE-2024-41570-SSRF-RCE)
- [leo-mitch/CVE-2024-41570-Havoc-C2-RCE](https://github.com/leo-mitch/CVE-2024-41570-Havoc-C2-RCE)
- [UnDefinedCS/HavocPwn](https://github.com/UnDefinedCS/HavocPwn)
- [sebr-dev/Havoc-C2-SSRF-to-RCE](https://github.com/sebr-dev/Havoc-C2-SSRF-to-RCE)
- [diemoeve/CVE-2024-41570](https://github.com/diemoeve/CVE-2024-41570)
@@ -36587,7 +36602,6 @@
<code>A traversal vulnerability in GeneralDocs.aspx in CentralSquare CryWolf (False Alarm Management) through 2024-08-09 allows unauthenticated attackers to read files outside of the working web directory via the rpt parameter, leading to the disclosure of sensitive information.
</code>
- [d4lyw/CVE-2024-45241](https://github.com/d4lyw/CVE-2024-45241)
- [verylazytech/CVE-2024-45241](https://github.com/verylazytech/CVE-2024-45241)
### CVE-2024-45244 (2024-08-25)
@@ -36804,13 +36818,6 @@
- [EQSTLab/CVE-2024-46538](https://github.com/EQSTLab/CVE-2024-46538)
- [LauLeysen/CVE-2024-46538](https://github.com/LauLeysen/CVE-2024-46538)
### CVE-2024-46627 (2024-09-26)
<code>Incorrect access control in BECN DATAGERRY v2.2 allows attackers to execute arbitrary commands via crafted web requests.
</code>
- [d4lyw/CVE-2024-46627](https://github.com/d4lyw/CVE-2024-46627)
### CVE-2024-46635 (2024-09-30)
<code>An issue in the API endpoint /AccountMaster/GetCurrentUserInfo of INROAD before v202402060 allows attackers to access sensitive information via a crafted payload to the UserNameOrPhoneNumber parameter.
@@ -42445,6 +42452,13 @@
- [ISabbiI/PoC---CVE-2023-26482-RCE-LAB-Nextcloud](https://github.com/ISabbiI/PoC---CVE-2023-26482-RCE-LAB-Nextcloud)
### CVE-2023-26493 (2023-03-27)
<code>Cocos Engine is an open-source framework for building 2D &amp; 3D real-time rendering and interactive content. In the github repo for Cocos Engine the `web-interface-check.yml` was subject to command injection. The `web-interface-check.yml` was triggered when a pull request was opened or updated and contained the user controllable field `(${{ github.head_ref }} – the name of the fork’s branch)`. This would allow an attacker to take over the GitHub Runner and run custom commands (potentially stealing secrets such as GITHUB_TOKEN) and altering the repository. The workflow has since been removed for the repository. There are no actions required of users.
</code>
- [pvharmo2/gha-lab-fb32aba4a3](https://github.com/pvharmo2/gha-lab-fb32aba4a3)
### CVE-2023-26563 (2023-07-12)
<code>The Syncfusion EJ2 Node File Provider 0102271 is vulnerable to filesystem-server.js directory traversal. As a result, an unauthenticated attacker can: - On Windows, list files in any directory, read any file, delete any file, upload any file to any directory accessible by the web server. - On Linux, read any file, download any directory, delete any file, upload any file to any directory accessible by the web server.
@@ -45703,6 +45717,7 @@
- [HPT-Intern-Task-Submission/CVE-2023-39361](https://github.com/HPT-Intern-Task-Submission/CVE-2023-39361)
- [ChoDeokCheol/CVE-2023-39361](https://github.com/ChoDeokCheol/CVE-2023-39361)
- [spartanx-alejandro/cacti-cve-2023-39361](https://github.com/spartanx-alejandro/cacti-cve-2023-39361)
### CVE-2023-39362 (2023-09-05)
@@ -67901,7 +67916,6 @@
- [revengsh/CVE-2020-17087](https://github.com/revengsh/CVE-2020-17087)
- [ykg88/OHTS_IE6052-CVE-2020-17087](https://github.com/ykg88/OHTS_IE6052-CVE-2020-17087)
- [vp777/Windows-Non-Paged-Pool-Overflow-Exploitation](https://github.com/vp777/Windows-Non-Paged-Pool-Overflow-Exploitation)
- [raiden757/CVE-2020-17087](https://github.com/raiden757/CVE-2020-17087)
### CVE-2020-17103 (2020-12-09)
@@ -76627,6 +76641,7 @@
- [syriusbughunt/CVE-2018-14667](https://github.com/syriusbughunt/CVE-2018-14667)
- [quandqn/cve-2018-14667](https://github.com/quandqn/cve-2018-14667)
- [Venscor/CVE-2018-14667-poc](https://github.com/Venscor/CVE-2018-14667-poc)
- [aitLmalem/CVE-2018-14667_Lab_POC](https://github.com/aitLmalem/CVE-2018-14667_Lab_POC)
### CVE-2018-14699 (2018-12-03)