mirror of
https://github.com/nomi-sec/PoC-in-GitHub.git
synced 2026-11-07 08:30:25 -10:00
Auto Update 2026/04/29 06:53:58
This commit is contained in:
1 parent
2a14270325
commit
0463c4c987
77 files changed
+492
-238
No files matched your search
@@ -1384,5 +1384,38 @@
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
{
|
||||
"id": 1224156912,
|
||||
"name": "Kali-Metasploitable",
|
||||
"full_name": "IvoAlbacete\/Kali-Metasploitable",
|
||||
"owner": {
|
||||
"login": "IvoAlbacete",
|
||||
"id": 276732736,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/276732736?v=4",
|
||||
"html_url": "https:\/\/github.com\/IvoAlbacete",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/IvoAlbacete\/Kali-Metasploitable",
|
||||
"description": "Escaneo de vulnerabilidades, análisis de tráfico con Wireshark y explotación controlada del CVE-2011-2523 (vsftpd 2.3.4) en entorno de red segura.",
|
||||
"fork": false,
|
||||
"created_at": "2026-04-29T02:34:26Z",
|
||||
"updated_at": "2026-04-29T03:10:59Z",
|
||||
"pushed_at": "2026-04-29T03:10:55Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
]
|
||||
@@ -19,7 +19,7 @@
|
||||
"stargazers_count": 105,
|
||||
"watchers_count": 105,
|
||||
"has_discussions": false,
|
||||
"forks_count": 36,
|
||||
"forks_count": 35,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
@@ -27,7 +27,7 @@
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 36,
|
||||
"forks": 35,
|
||||
"watchers": 105,
|
||||
"score": 0,
|
||||
"subscribers_count": 15
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "🛠️ Validate and demonstrate CVE-2016-15042 with a Dockerized lab for unauthenticated file uploads in WordPress file managers.",
|
||||
"fork": false,
|
||||
"created_at": "2023-10-23T05:54:10Z",
|
||||
"updated_at": "2026-04-28T22:47:13Z",
|
||||
"pushed_at": "2026-04-28T22:47:10Z",
|
||||
"updated_at": "2026-04-29T04:53:56Z",
|
||||
"pushed_at": "2026-04-29T04:53:52Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -101,15 +101,15 @@
|
||||
{
|
||||
"id": 948739592,
|
||||
"name": "CVE-2016-6210",
|
||||
"full_name": "coolbabayaga\/CVE-2016-6210",
|
||||
"full_name": "wabiyagi\/CVE-2016-6210",
|
||||
"owner": {
|
||||
"login": "coolbabayaga",
|
||||
"login": "wabiyagi",
|
||||
"id": 123429557,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123429557?v=4",
|
||||
"html_url": "https:\/\/github.com\/coolbabayaga",
|
||||
"html_url": "https:\/\/github.com\/wabiyagi",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/coolbabayaga\/CVE-2016-6210",
|
||||
"html_url": "https:\/\/github.com\/wabiyagi\/CVE-2016-6210",
|
||||
"description": "User name enumeration against SSH daemons affected by CVE-2016-6210.",
|
||||
"fork": false,
|
||||
"created_at": "2025-03-14T21:50:49Z",
|
||||
|
||||
@@ -14,10 +14,10 @@
|
||||
"description": "CVE-2017-9506 - SSRF",
|
||||
"fork": false,
|
||||
"created_at": "2018-04-25T11:25:18Z",
|
||||
"updated_at": "2025-10-18T00:31:12Z",
|
||||
"updated_at": "2026-04-29T04:14:56Z",
|
||||
"pushed_at": "2022-02-14T22:00:28Z",
|
||||
"stargazers_count": 190,
|
||||
"watchers_count": 190,
|
||||
"stargazers_count": 191,
|
||||
"watchers_count": 191,
|
||||
"has_discussions": false,
|
||||
"forks_count": 45,
|
||||
"allow_forking": true,
|
||||
@@ -32,7 +32,7 @@
|
||||
],
|
||||
"visibility": "public",
|
||||
"forks": 45,
|
||||
"watchers": 190,
|
||||
"watchers": 191,
|
||||
"score": 0,
|
||||
"subscribers_count": 4
|
||||
},
|
||||
|
||||
@@ -3308,10 +3308,10 @@
|
||||
"description": "CVE-2019-0708 (BlueKeep) proof of concept allowing pre-auth RCE on Windows7",
|
||||
"fork": false,
|
||||
"created_at": "2020-03-15T19:33:53Z",
|
||||
"updated_at": "2026-04-06T02:56:30Z",
|
||||
"updated_at": "2026-04-29T02:53:06Z",
|
||||
"pushed_at": "2022-03-28T04:10:20Z",
|
||||
"stargazers_count": 148,
|
||||
"watchers_count": 148,
|
||||
"stargazers_count": 149,
|
||||
"watchers_count": 149,
|
||||
"has_discussions": false,
|
||||
"forks_count": 22,
|
||||
"allow_forking": true,
|
||||
@@ -3322,7 +3322,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 22,
|
||||
"watchers": 148,
|
||||
"watchers": 149,
|
||||
"score": 0,
|
||||
"subscribers_count": 4
|
||||
},
|
||||
|
||||
@@ -179,8 +179,8 @@
|
||||
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
|
||||
"fork": false,
|
||||
"created_at": "2025-12-06T19:56:12Z",
|
||||
"updated_at": "2026-04-28T23:33:20Z",
|
||||
"pushed_at": "2026-04-28T23:33:16Z",
|
||||
"updated_at": "2026-04-29T04:42:30Z",
|
||||
"pushed_at": "2026-04-29T04:42:26Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -58,8 +58,8 @@
|
||||
"description": "🔍 Create a safe lab environment for testing CVE-2020-0610, a critical RCE vulnerability in Windows RD Gateway, with minimal disruption using DTLS techniques.",
|
||||
"fork": false,
|
||||
"created_at": "2025-09-04T13:21:35Z",
|
||||
"updated_at": "2026-04-28T22:47:02Z",
|
||||
"pushed_at": "2026-04-28T22:46:58Z",
|
||||
"updated_at": "2026-04-29T04:53:47Z",
|
||||
"pushed_at": "2026-04-29T04:53:43Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -1484,10 +1484,10 @@
|
||||
"description": "CVE-2020-0796 Remote Code Execution POC",
|
||||
"fork": false,
|
||||
"created_at": "2020-04-20T14:35:48Z",
|
||||
"updated_at": "2026-04-28T05:11:06Z",
|
||||
"updated_at": "2026-04-29T03:53:08Z",
|
||||
"pushed_at": "2020-06-09T20:46:45Z",
|
||||
"stargazers_count": 574,
|
||||
"watchers_count": 574,
|
||||
"stargazers_count": 575,
|
||||
"watchers_count": 575,
|
||||
"has_discussions": false,
|
||||
"forks_count": 171,
|
||||
"allow_forking": true,
|
||||
@@ -1504,7 +1504,7 @@
|
||||
],
|
||||
"visibility": "public",
|
||||
"forks": 171,
|
||||
"watchers": 574,
|
||||
"watchers": 575,
|
||||
"score": 0,
|
||||
"subscribers_count": 21
|
||||
},
|
||||
@@ -2984,8 +2984,8 @@
|
||||
"description": null,
|
||||
"fork": false,
|
||||
"created_at": "2026-04-23T09:39:37Z",
|
||||
"updated_at": "2026-04-27T13:36:10Z",
|
||||
"pushed_at": "2026-04-27T13:36:06Z",
|
||||
"updated_at": "2026-04-29T04:36:30Z",
|
||||
"pushed_at": "2026-04-29T04:36:27Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -2383,8 +2383,8 @@
|
||||
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
|
||||
"fork": false,
|
||||
"created_at": "2025-12-06T10:17:38Z",
|
||||
"updated_at": "2026-04-29T00:03:42Z",
|
||||
"pushed_at": "2026-04-29T00:03:37Z",
|
||||
"updated_at": "2026-04-29T06:15:12Z",
|
||||
"pushed_at": "2026-04-29T06:15:08Z",
|
||||
"stargazers_count": 2,
|
||||
"watchers_count": 2,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -1236,10 +1236,10 @@
|
||||
"description": "[ProxyLogon] CVE-2021-26855 & CVE-2021-27065 Fixed RawIdentity Bug Exploit. [ProxyOracle] CVE-2021-31195 & CVE-2021-31196 Exploit Chains. [ProxyShell] CVE-2021-34473 & CVE-2021-34523 & CVE-2021-31207 Exploit Chains.",
|
||||
"fork": false,
|
||||
"created_at": "2021-04-14T11:12:30Z",
|
||||
"updated_at": "2026-02-12T18:40:18Z",
|
||||
"updated_at": "2026-04-29T04:12:21Z",
|
||||
"pushed_at": "2022-10-21T08:59:23Z",
|
||||
"stargazers_count": 177,
|
||||
"watchers_count": 177,
|
||||
"stargazers_count": 178,
|
||||
"watchers_count": 178,
|
||||
"has_discussions": false,
|
||||
"forks_count": 34,
|
||||
"allow_forking": true,
|
||||
@@ -1250,7 +1250,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 34,
|
||||
"watchers": 177,
|
||||
"watchers": 178,
|
||||
"score": 0,
|
||||
"subscribers_count": 4
|
||||
},
|
||||
|
||||
@@ -212,8 +212,8 @@
|
||||
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
|
||||
"fork": false,
|
||||
"created_at": "2026-03-28T17:42:44Z",
|
||||
"updated_at": "2026-04-28T23:35:21Z",
|
||||
"pushed_at": "2026-04-28T23:35:17Z",
|
||||
"updated_at": "2026-04-29T04:45:27Z",
|
||||
"pushed_at": "2026-04-29T04:45:23Z",
|
||||
"stargazers_count": 3,
|
||||
"watchers_count": 3,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -2050,8 +2050,8 @@
|
||||
"description": "🚀 Enhance your penetration testing with PwnKit Helper, a simple tool for exploiting the CVE-2021-4034 vulnerability in pkexec for local privilege escalation.",
|
||||
"fork": false,
|
||||
"created_at": "2025-10-01T09:53:03Z",
|
||||
"updated_at": "2026-04-28T22:53:42Z",
|
||||
"pushed_at": "2026-04-28T22:53:38Z",
|
||||
"updated_at": "2026-04-29T05:02:08Z",
|
||||
"pushed_at": "2026-04-29T05:02:04Z",
|
||||
"stargazers_count": 2,
|
||||
"watchers_count": 2,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -245,10 +245,10 @@
|
||||
"description": "CVE-2021-40444 PoC",
|
||||
"fork": false,
|
||||
"created_at": "2021-09-10T16:55:53Z",
|
||||
"updated_at": "2026-04-27T22:32:49Z",
|
||||
"updated_at": "2026-04-29T04:20:03Z",
|
||||
"pushed_at": "2021-12-25T18:31:02Z",
|
||||
"stargazers_count": 1730,
|
||||
"watchers_count": 1730,
|
||||
"stargazers_count": 1731,
|
||||
"watchers_count": 1731,
|
||||
"has_discussions": false,
|
||||
"forks_count": 477,
|
||||
"allow_forking": true,
|
||||
@@ -259,7 +259,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 477,
|
||||
"watchers": 1730,
|
||||
"watchers": 1731,
|
||||
"score": 0,
|
||||
"subscribers_count": 28
|
||||
},
|
||||
|
||||
@@ -4813,10 +4813,10 @@
|
||||
"description": "Recreation and analysis of a curious logic error in Apache 2.4.49 that escalated to remote code execution",
|
||||
"fork": false,
|
||||
"created_at": "2026-04-23T04:51:19Z",
|
||||
"updated_at": "2026-04-27T19:01:35Z",
|
||||
"updated_at": "2026-04-29T02:33:11Z",
|
||||
"pushed_at": "2026-04-27T19:01:31Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
@@ -4827,7 +4827,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 0,
|
||||
"watchers": 1,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
|
||||
@@ -14,10 +14,10 @@
|
||||
"description": "Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user ",
|
||||
"fork": false,
|
||||
"created_at": "2021-12-11T15:10:30Z",
|
||||
"updated_at": "2026-04-25T14:28:18Z",
|
||||
"updated_at": "2026-04-29T04:31:03Z",
|
||||
"pushed_at": "2022-07-10T22:23:13Z",
|
||||
"stargazers_count": 1054,
|
||||
"watchers_count": 1054,
|
||||
"stargazers_count": 1055,
|
||||
"watchers_count": 1055,
|
||||
"has_discussions": false,
|
||||
"forks_count": 193,
|
||||
"allow_forking": true,
|
||||
@@ -33,7 +33,7 @@
|
||||
],
|
||||
"visibility": "public",
|
||||
"forks": 193,
|
||||
"watchers": 1054,
|
||||
"watchers": 1055,
|
||||
"score": 0,
|
||||
"subscribers_count": 22
|
||||
},
|
||||
|
||||
@@ -14,10 +14,10 @@
|
||||
"description": "Exploit for CVE-2022-20452, privilege escalation on Android from installed app to system app (or another app) via LazyValue using Parcel after recycle()",
|
||||
"fork": false,
|
||||
"created_at": "2023-01-10T16:24:51Z",
|
||||
"updated_at": "2026-04-19T08:39:42Z",
|
||||
"updated_at": "2026-04-29T04:28:27Z",
|
||||
"pushed_at": "2023-04-12T17:28:49Z",
|
||||
"stargazers_count": 343,
|
||||
"watchers_count": 343,
|
||||
"stargazers_count": 344,
|
||||
"watchers_count": 344,
|
||||
"has_discussions": false,
|
||||
"forks_count": 64,
|
||||
"allow_forking": true,
|
||||
@@ -28,7 +28,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 64,
|
||||
"watchers": 343,
|
||||
"watchers": 344,
|
||||
"score": 0,
|
||||
"subscribers_count": 10
|
||||
}
|
||||
|
||||
@@ -19,7 +19,7 @@
|
||||
"stargazers_count": 4,
|
||||
"watchers_count": 4,
|
||||
"has_discussions": false,
|
||||
"forks_count": 3,
|
||||
"forks_count": 4,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
@@ -33,7 +33,7 @@
|
||||
"ring0"
|
||||
],
|
||||
"visibility": "public",
|
||||
"forks": 3,
|
||||
"forks": 4,
|
||||
"watchers": 4,
|
||||
"score": 0,
|
||||
"subscribers_count": 1
|
||||
|
||||
@@ -31,5 +31,38 @@
|
||||
"watchers": 3,
|
||||
"score": 0,
|
||||
"subscribers_count": 2
|
||||
},
|
||||
{
|
||||
"id": 1214259134,
|
||||
"name": "CVE-2022-4543-EntryBleed",
|
||||
"full_name": "ngtuonghung\/CVE-2022-4543-EntryBleed",
|
||||
"owner": {
|
||||
"login": "ngtuonghung",
|
||||
"id": 141505121,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/141505121?v=4",
|
||||
"html_url": "https:\/\/github.com\/ngtuonghung",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/ngtuonghung\/CVE-2022-4543-EntryBleed",
|
||||
"description": null,
|
||||
"fork": false,
|
||||
"created_at": "2026-04-18T10:26:41Z",
|
||||
"updated_at": "2026-04-29T05:11:21Z",
|
||||
"pushed_at": "2026-04-29T05:10:17Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
]
|
||||
@@ -47,8 +47,8 @@
|
||||
"description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙",
|
||||
"fork": false,
|
||||
"created_at": "2025-08-13T09:19:29Z",
|
||||
"updated_at": "2026-04-28T22:43:27Z",
|
||||
"pushed_at": "2026-04-28T22:43:22Z",
|
||||
"updated_at": "2026-04-29T04:49:21Z",
|
||||
"pushed_at": "2026-04-29T04:49:18Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -113,10 +113,10 @@
|
||||
"description": "Apache RocketMQ 远程代码执行漏洞(CVE-2023-33246) Exploit",
|
||||
"fork": false,
|
||||
"created_at": "2023-06-01T06:27:09Z",
|
||||
"updated_at": "2026-03-18T07:03:28Z",
|
||||
"updated_at": "2026-04-29T01:55:50Z",
|
||||
"pushed_at": "2023-06-01T05:54:25Z",
|
||||
"stargazers_count": 113,
|
||||
"watchers_count": 113,
|
||||
"stargazers_count": 114,
|
||||
"watchers_count": 114,
|
||||
"has_discussions": false,
|
||||
"forks_count": 26,
|
||||
"allow_forking": true,
|
||||
@@ -127,7 +127,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 26,
|
||||
"watchers": 113,
|
||||
"watchers": 114,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
|
||||
@@ -14,10 +14,10 @@
|
||||
"description": "Apache RocketMQ Arbitrary File Write Vulnerability Exploit",
|
||||
"fork": false,
|
||||
"created_at": "2023-07-14T12:22:45Z",
|
||||
"updated_at": "2025-11-14T12:59:47Z",
|
||||
"updated_at": "2026-04-29T06:26:07Z",
|
||||
"pushed_at": "2023-07-19T02:29:39Z",
|
||||
"stargazers_count": 45,
|
||||
"watchers_count": 45,
|
||||
"stargazers_count": 46,
|
||||
"watchers_count": 46,
|
||||
"has_discussions": false,
|
||||
"forks_count": 10,
|
||||
"allow_forking": true,
|
||||
@@ -28,7 +28,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 10,
|
||||
"watchers": 45,
|
||||
"watchers": 46,
|
||||
"score": 0,
|
||||
"subscribers_count": 1
|
||||
},
|
||||
|
||||
@@ -66,8 +66,8 @@
|
||||
"description": "🔒 Analyze the CVE-2023-39910 vulnerability in Libbitcoin Explorer to understand its impact on Bitcoin wallet security and protect your assets.",
|
||||
"fork": false,
|
||||
"created_at": "2026-01-07T14:24:08Z",
|
||||
"updated_at": "2026-04-28T23:45:57Z",
|
||||
"pushed_at": "2026-04-28T23:45:54Z",
|
||||
"updated_at": "2026-04-29T06:06:24Z",
|
||||
"pushed_at": "2026-04-29T06:06:21Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,10 +14,10 @@
|
||||
"description": "CVE-2023-42820",
|
||||
"fork": false,
|
||||
"created_at": "2023-10-10T06:32:51Z",
|
||||
"updated_at": "2026-04-07T10:00:15Z",
|
||||
"updated_at": "2026-04-29T02:24:49Z",
|
||||
"pushed_at": "2024-04-03T09:57:07Z",
|
||||
"stargazers_count": 56,
|
||||
"watchers_count": 56,
|
||||
"stargazers_count": 57,
|
||||
"watchers_count": 57,
|
||||
"has_discussions": false,
|
||||
"forks_count": 9,
|
||||
"allow_forking": true,
|
||||
@@ -28,7 +28,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 9,
|
||||
"watchers": 56,
|
||||
"watchers": 57,
|
||||
"score": 0,
|
||||
"subscribers_count": 2
|
||||
},
|
||||
|
||||
@@ -172,8 +172,8 @@
|
||||
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
|
||||
"fork": false,
|
||||
"created_at": "2026-01-08T01:32:09Z",
|
||||
"updated_at": "2026-04-28T23:46:18Z",
|
||||
"pushed_at": "2026-04-28T23:46:14Z",
|
||||
"updated_at": "2026-04-29T06:06:49Z",
|
||||
"pushed_at": "2026-04-29T06:06:46Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -80,8 +80,8 @@
|
||||
"description": "Analyze and deobfuscate the Coruna Exploit Kit (CVE-2024-23222) to enhance understanding and detection of related threats.",
|
||||
"fork": false,
|
||||
"created_at": "2026-03-15T16:36:07Z",
|
||||
"updated_at": "2026-04-29T00:31:20Z",
|
||||
"pushed_at": "2026-04-29T00:31:17Z",
|
||||
"updated_at": "2026-04-29T03:48:48Z",
|
||||
"pushed_at": "2026-04-29T03:48:43Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -2320,5 +2320,38 @@
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
{
|
||||
"id": 1224204764,
|
||||
"name": "PHP_8.1.x_Exploit",
|
||||
"full_name": "gl1tch0x1\/PHP_8.1.x_Exploit",
|
||||
"owner": {
|
||||
"login": "gl1tch0x1",
|
||||
"id": 80126458,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/80126458?v=4",
|
||||
"html_url": "https:\/\/github.com\/gl1tch0x1",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/gl1tch0x1\/PHP_8.1.x_Exploit",
|
||||
"description": "Automated detection & exploitation of critical PHP vulnerabilities (CVE-2024-4577 bypass, CVE-2025-14177, CVE-2025-14180, CVE-2025-14178)",
|
||||
"fork": false,
|
||||
"created_at": "2026-04-29T03:58:13Z",
|
||||
"updated_at": "2026-04-29T05:27:58Z",
|
||||
"pushed_at": "2026-04-29T05:27:55Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
]
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "Demonstrate an authentication bypass and remote code execution exploit targeting JetBrains TeamCity versions before 2024.12 via REST API abuse.",
|
||||
"fork": false,
|
||||
"created_at": "2025-09-17T01:48:09Z",
|
||||
"updated_at": "2026-04-29T00:34:27Z",
|
||||
"pushed_at": "2026-04-29T00:34:23Z",
|
||||
"updated_at": "2026-04-29T03:51:50Z",
|
||||
"pushed_at": "2026-04-29T03:51:47Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -0,0 +1,35 @@
|
||||
[
|
||||
{
|
||||
"id": 1224204764,
|
||||
"name": "PHP_8.1.x_Exploit",
|
||||
"full_name": "gl1tch0x1\/PHP_8.1.x_Exploit",
|
||||
"owner": {
|
||||
"login": "gl1tch0x1",
|
||||
"id": 80126458,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/80126458?v=4",
|
||||
"html_url": "https:\/\/github.com\/gl1tch0x1",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/gl1tch0x1\/PHP_8.1.x_Exploit",
|
||||
"description": "Automated detection & exploitation of critical PHP vulnerabilities (CVE-2024-4577 bypass, CVE-2025-14177, CVE-2025-14180, CVE-2025-14178)",
|
||||
"fork": false,
|
||||
"created_at": "2026-04-29T03:58:13Z",
|
||||
"updated_at": "2026-04-29T05:27:58Z",
|
||||
"pushed_at": "2026-04-29T05:27:55Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
]
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
|
||||
"fork": false,
|
||||
"created_at": "2025-07-30T15:52:00Z",
|
||||
"updated_at": "2026-04-28T23:51:15Z",
|
||||
"pushed_at": "2026-04-28T23:51:11Z",
|
||||
"updated_at": "2026-04-29T06:13:15Z",
|
||||
"pushed_at": "2026-04-29T06:13:11Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
@@ -1129,8 +1129,8 @@
|
||||
"description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
|
||||
"fork": false,
|
||||
"created_at": "2026-01-14T06:05:44Z",
|
||||
"updated_at": "2026-04-28T23:50:23Z",
|
||||
"pushed_at": "2026-04-28T23:50:19Z",
|
||||
"updated_at": "2026-04-29T06:11:56Z",
|
||||
"pushed_at": "2026-04-29T06:11:52Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -412,8 +412,8 @@
|
||||
"description": "🛠️ Exploit CVE-2025-2304 in Camaleon CMS easily with this Python script for privilege escalation, tested on version 2.9.0.",
|
||||
"fork": false,
|
||||
"created_at": "2026-02-14T20:01:20Z",
|
||||
"updated_at": "2026-04-29T00:11:58Z",
|
||||
"pushed_at": "2026-04-29T00:11:55Z",
|
||||
"updated_at": "2026-04-29T06:39:43Z",
|
||||
"pushed_at": "2026-04-29T06:39:39Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis",
|
||||
"fork": false,
|
||||
"created_at": "2026-04-04T03:42:55Z",
|
||||
"updated_at": "2026-04-29T00:42:52Z",
|
||||
"pushed_at": "2026-04-29T00:42:48Z",
|
||||
"updated_at": "2026-04-29T03:59:59Z",
|
||||
"pushed_at": "2026-04-29T03:59:55Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -287,10 +287,10 @@
|
||||
"description": "A working (at least for me :] ) exploit for CVE-2025-25257",
|
||||
"fork": false,
|
||||
"created_at": "2025-09-21T10:24:27Z",
|
||||
"updated_at": "2025-09-21T10:34:10Z",
|
||||
"updated_at": "2026-04-29T05:23:14Z",
|
||||
"pushed_at": "2025-09-21T10:34:07Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
@@ -301,7 +301,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 0,
|
||||
"watchers": 1,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "🔓 Explore CVE-2025-31258 with this PoC demonstrating partial sandbox escape using RemoteViewServices for practical 1-day security practice.",
|
||||
"fork": false,
|
||||
"created_at": "2020-06-23T15:20:11Z",
|
||||
"updated_at": "2026-04-28T22:48:53Z",
|
||||
"pushed_at": "2026-04-28T22:48:48Z",
|
||||
"updated_at": "2026-04-29T04:56:02Z",
|
||||
"pushed_at": "2026-04-29T04:55:59Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -645,8 +645,8 @@
|
||||
"description": "Demonstrate CVE-2025-32463 with this PoC for sudo's chroot feature. Explore the exploit and its impact on vulnerable sudo versions. 🐱💻🔒",
|
||||
"fork": false,
|
||||
"created_at": "2025-07-04T18:20:09Z",
|
||||
"updated_at": "2026-04-28T22:41:58Z",
|
||||
"pushed_at": "2026-04-28T22:41:54Z",
|
||||
"updated_at": "2026-04-29T04:47:39Z",
|
||||
"pushed_at": "2026-04-29T04:47:35Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
@@ -1628,8 +1628,8 @@
|
||||
"description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.",
|
||||
"fork": false,
|
||||
"created_at": "2025-09-20T00:42:07Z",
|
||||
"updated_at": "2026-04-28T22:50:00Z",
|
||||
"pushed_at": "2026-04-28T22:49:56Z",
|
||||
"updated_at": "2026-04-29T04:57:24Z",
|
||||
"pushed_at": "2026-04-29T04:57:21Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
@@ -1680,8 +1680,8 @@
|
||||
"description": null,
|
||||
"fork": false,
|
||||
"created_at": "2025-09-20T02:01:08Z",
|
||||
"updated_at": "2026-04-28T22:50:04Z",
|
||||
"pushed_at": "2026-04-28T22:50:01Z",
|
||||
"updated_at": "2026-04-29T04:57:24Z",
|
||||
"pushed_at": "2026-04-29T04:57:20Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,10 +14,10 @@
|
||||
"description": "Hijacking Bluetooth Accessories Using Google Fast Pair: WhisperPair CVE-2025-36911 Reference Implementation & Vulnerability Verification Toolkit",
|
||||
"fork": false,
|
||||
"created_at": "2026-01-17T01:18:36Z",
|
||||
"updated_at": "2026-04-24T01:04:12Z",
|
||||
"updated_at": "2026-04-29T04:22:55Z",
|
||||
"pushed_at": "2026-04-23T06:58:06Z",
|
||||
"stargazers_count": 86,
|
||||
"watchers_count": 86,
|
||||
"stargazers_count": 87,
|
||||
"watchers_count": 87,
|
||||
"has_discussions": false,
|
||||
"forks_count": 15,
|
||||
"allow_forking": true,
|
||||
@@ -34,7 +34,7 @@
|
||||
],
|
||||
"visibility": "public",
|
||||
"forks": 15,
|
||||
"watchers": 86,
|
||||
"watchers": 87,
|
||||
"score": 0,
|
||||
"subscribers_count": 4
|
||||
},
|
||||
@@ -294,8 +294,8 @@
|
||||
"description": "🔍 Scan and research CVE-2025-36911 vulnerabilities with WPair, a specialized tool for Android built in Kotlin, ensuring your applications remain secure.",
|
||||
"fork": false,
|
||||
"created_at": "2026-01-29T01:59:47Z",
|
||||
"updated_at": "2026-04-29T00:02:04Z",
|
||||
"pushed_at": "2026-04-29T00:02:00Z",
|
||||
"updated_at": "2026-04-29T06:26:54Z",
|
||||
"pushed_at": "2026-04-29T06:26:51Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,10 +14,10 @@
|
||||
"description": "This is a proof of concept for CVE-2025-38352, a vulnerability in the Linux kernel's POSIX CPU timers implementation. The September 2025 Android Bulletin mentions that this vulnerability has been used in limited, targeted exploitation in the wild.",
|
||||
"fork": false,
|
||||
"created_at": "2025-12-21T23:59:18Z",
|
||||
"updated_at": "2026-04-27T18:27:50Z",
|
||||
"updated_at": "2026-04-29T03:02:45Z",
|
||||
"pushed_at": "2026-01-05T15:41:23Z",
|
||||
"stargazers_count": 97,
|
||||
"watchers_count": 97,
|
||||
"stargazers_count": 98,
|
||||
"watchers_count": 98,
|
||||
"has_discussions": false,
|
||||
"forks_count": 10,
|
||||
"allow_forking": true,
|
||||
@@ -28,7 +28,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 10,
|
||||
"watchers": 97,
|
||||
"watchers": 98,
|
||||
"score": 0,
|
||||
"subscribers_count": 1
|
||||
},
|
||||
|
||||
@@ -85,7 +85,7 @@
|
||||
"stargazers_count": 6,
|
||||
"watchers_count": 6,
|
||||
"has_discussions": false,
|
||||
"forks_count": 1,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
@@ -93,7 +93,7 @@
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 1,
|
||||
"forks": 0,
|
||||
"watchers": 6,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
|
||||
@@ -251,8 +251,8 @@
|
||||
"description": null,
|
||||
"fork": false,
|
||||
"created_at": "2025-09-19T17:17:19Z",
|
||||
"updated_at": "2026-04-28T22:49:54Z",
|
||||
"pushed_at": "2026-04-28T22:49:50Z",
|
||||
"updated_at": "2026-04-29T04:57:21Z",
|
||||
"pushed_at": "2026-04-29T04:57:18Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.",
|
||||
"fork": false,
|
||||
"created_at": "2019-04-13T07:51:09Z",
|
||||
"updated_at": "2026-04-28T23:07:30Z",
|
||||
"pushed_at": "2026-04-28T23:07:27Z",
|
||||
"updated_at": "2026-04-29T05:18:50Z",
|
||||
"pushed_at": "2026-04-29T05:18:46Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
@@ -66,8 +66,8 @@
|
||||
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
|
||||
"fork": false,
|
||||
"created_at": "2022-04-06T09:27:39Z",
|
||||
"updated_at": "2026-04-28T23:08:15Z",
|
||||
"pushed_at": "2026-04-28T23:08:11Z",
|
||||
"updated_at": "2026-04-29T05:19:49Z",
|
||||
"pushed_at": "2026-04-29T05:19:45Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,10 +14,10 @@
|
||||
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055,).",
|
||||
"fork": false,
|
||||
"created_at": "2023-12-05T14:52:11Z",
|
||||
"updated_at": "2026-04-28T09:07:16Z",
|
||||
"updated_at": "2026-04-29T05:58:01Z",
|
||||
"pushed_at": "2026-04-12T07:04:32Z",
|
||||
"stargazers_count": 707,
|
||||
"watchers_count": 707,
|
||||
"stargazers_count": 708,
|
||||
"watchers_count": 708,
|
||||
"has_discussions": false,
|
||||
"forks_count": 106,
|
||||
"allow_forking": true,
|
||||
@@ -37,7 +37,7 @@
|
||||
],
|
||||
"visibility": "public",
|
||||
"forks": 106,
|
||||
"watchers": 707,
|
||||
"watchers": 708,
|
||||
"score": 0,
|
||||
"subscribers_count": 18
|
||||
}
|
||||
|
||||
@@ -19,7 +19,7 @@
|
||||
"stargazers_count": 131,
|
||||
"watchers_count": 131,
|
||||
"has_discussions": false,
|
||||
"forks_count": 30,
|
||||
"forks_count": 31,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
@@ -27,7 +27,7 @@
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 30,
|
||||
"forks": 31,
|
||||
"watchers": 131,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "🛡️ Analyze CVE-2025-5419 to exploit an uninitialized read vulnerability in V8 for arbitrary read\/write access within the sandbox environment.",
|
||||
"fork": false,
|
||||
"created_at": "2023-01-25T04:41:49Z",
|
||||
"updated_at": "2026-04-29T00:10:15Z",
|
||||
"pushed_at": "2026-04-29T00:10:11Z",
|
||||
"updated_at": "2026-04-29T06:37:44Z",
|
||||
"pushed_at": "2026-04-29T06:37:40Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -67,8 +67,8 @@
|
||||
"description": "🐙 CVE-2025-54253 exploit demo for Adobe AEM Forms on JEE: OGNL injection to RCE with PoC, Python 3.10 exploit code, reproducer and mitigation guidance.",
|
||||
"fork": false,
|
||||
"created_at": "2025-08-17T22:04:33Z",
|
||||
"updated_at": "2026-04-28T22:44:33Z",
|
||||
"pushed_at": "2026-04-28T22:44:30Z",
|
||||
"updated_at": "2026-04-29T04:50:55Z",
|
||||
"pushed_at": "2026-04-29T04:50:51Z",
|
||||
"stargazers_count": 2,
|
||||
"watchers_count": 2,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -53,8 +53,8 @@
|
||||
"description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐",
|
||||
"fork": false,
|
||||
"created_at": "2025-08-14T05:16:16Z",
|
||||
"updated_at": "2026-04-28T22:44:12Z",
|
||||
"pushed_at": "2026-04-28T22:44:08Z",
|
||||
"updated_at": "2026-04-29T04:50:23Z",
|
||||
"pushed_at": "2026-04-29T04:50:19Z",
|
||||
"stargazers_count": 2,
|
||||
"watchers_count": 2,
|
||||
"has_discussions": false,
|
||||
|
||||
+45
-45
@@ -14,8 +14,8 @@
|
||||
"description": "🔍 Demonstrate CVE-2025-55182, a critical vulnerability in React Server Components allowing unauthenticated arbitrary code execution.",
|
||||
"fork": false,
|
||||
"created_at": "2021-09-18T02:04:33Z",
|
||||
"updated_at": "2026-04-28T23:37:10Z",
|
||||
"pushed_at": "2026-04-28T23:37:06Z",
|
||||
"updated_at": "2026-04-29T05:54:55Z",
|
||||
"pushed_at": "2026-04-29T05:54:51Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
@@ -66,8 +66,8 @@
|
||||
"description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.",
|
||||
"fork": false,
|
||||
"created_at": "2022-06-17T10:19:10Z",
|
||||
"updated_at": "2026-04-28T23:36:41Z",
|
||||
"pushed_at": "2026-04-28T23:36:37Z",
|
||||
"updated_at": "2026-04-29T05:54:30Z",
|
||||
"pushed_at": "2026-04-29T05:54:27Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
@@ -151,8 +151,8 @@
|
||||
"description": "🔍 Detect vulnerabilities CVE-2025-55182 and CVE-2025-66478 in Next.js apps with this reliable command-line scanner.",
|
||||
"fork": false,
|
||||
"created_at": "2023-11-27T18:17:43Z",
|
||||
"updated_at": "2026-04-28T23:37:06Z",
|
||||
"pushed_at": "2026-04-28T23:37:02Z",
|
||||
"updated_at": "2026-04-29T05:54:35Z",
|
||||
"pushed_at": "2026-04-29T05:54:30Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
@@ -203,8 +203,8 @@
|
||||
"description": "🚨 Exploit CVE-2025-55182, a critical RCE vulnerability in React Server Components for Next.js apps; enables testing for prototype pollution risks.",
|
||||
"fork": false,
|
||||
"created_at": "2024-04-24T02:36:56Z",
|
||||
"updated_at": "2026-04-28T23:37:51Z",
|
||||
"pushed_at": "2026-04-28T23:37:47Z",
|
||||
"updated_at": "2026-04-29T05:55:47Z",
|
||||
"pushed_at": "2026-04-29T05:55:44Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
@@ -251,8 +251,8 @@
|
||||
"description": "🚨 Exploit and scan for CVE-2025-55182, a critical React\/Next.js vulnerability enabling remote code execution through prototype pollution techniques.",
|
||||
"fork": false,
|
||||
"created_at": "2024-05-28T16:48:51Z",
|
||||
"updated_at": "2026-04-28T23:36:18Z",
|
||||
"pushed_at": "2026-04-28T23:36:15Z",
|
||||
"updated_at": "2026-04-29T05:54:14Z",
|
||||
"pushed_at": "2026-04-29T05:54:11Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
@@ -303,8 +303,8 @@
|
||||
"description": null,
|
||||
"fork": false,
|
||||
"created_at": "2024-11-29T12:32:19Z",
|
||||
"updated_at": "2026-04-28T23:37:30Z",
|
||||
"pushed_at": "2026-04-28T23:37:26Z",
|
||||
"updated_at": "2026-04-29T05:55:15Z",
|
||||
"pushed_at": "2026-04-29T05:55:11Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
@@ -352,8 +352,8 @@
|
||||
"description": "🛠️ Exploit CVE-2025-55182 effortlessly with this GUI tool for vulnerability detection, command execution, and Shell reverse connections.",
|
||||
"fork": false,
|
||||
"created_at": "2025-04-21T22:04:31Z",
|
||||
"updated_at": "2026-04-28T23:40:28Z",
|
||||
"pushed_at": "2026-04-28T23:40:23Z",
|
||||
"updated_at": "2026-04-29T05:58:53Z",
|
||||
"pushed_at": "2026-04-29T05:58:50Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
@@ -406,8 +406,8 @@
|
||||
"description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
|
||||
"fork": false,
|
||||
"created_at": "2025-06-06T16:34:46Z",
|
||||
"updated_at": "2026-04-28T23:37:00Z",
|
||||
"pushed_at": "2026-04-28T23:36:56Z",
|
||||
"updated_at": "2026-04-29T05:54:52Z",
|
||||
"pushed_at": "2026-04-29T05:54:47Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
@@ -458,8 +458,8 @@
|
||||
"description": "⚠️ Explore a vulnerable environment to test security scanners against the CVE-2025-55182 RCE flaw in React Server Components and Next.js applications.",
|
||||
"fork": false,
|
||||
"created_at": "2025-07-15T18:33:34Z",
|
||||
"updated_at": "2026-04-28T23:37:45Z",
|
||||
"pushed_at": "2026-04-28T23:37:41Z",
|
||||
"updated_at": "2026-04-29T05:55:50Z",
|
||||
"pushed_at": "2026-04-29T05:55:47Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
@@ -576,10 +576,10 @@
|
||||
"description": "CVE-2025-55182 POC",
|
||||
"fork": false,
|
||||
"created_at": "2025-12-03T21:16:22Z",
|
||||
"updated_at": "2026-04-05T06:03:25Z",
|
||||
"updated_at": "2026-04-29T01:15:34Z",
|
||||
"pushed_at": "2025-12-08T21:21:26Z",
|
||||
"stargazers_count": 795,
|
||||
"watchers_count": 795,
|
||||
"stargazers_count": 796,
|
||||
"watchers_count": 796,
|
||||
"has_discussions": false,
|
||||
"forks_count": 204,
|
||||
"allow_forking": true,
|
||||
@@ -590,7 +590,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 204,
|
||||
"watchers": 795,
|
||||
"watchers": 796,
|
||||
"score": 0,
|
||||
"subscribers_count": 3
|
||||
},
|
||||
@@ -1478,10 +1478,10 @@
|
||||
"description": "Explanation and full RCE PoC for CVE-2025-55182",
|
||||
"fork": false,
|
||||
"created_at": "2025-12-04T11:49:55Z",
|
||||
"updated_at": "2026-04-23T10:41:16Z",
|
||||
"updated_at": "2026-04-29T01:16:25Z",
|
||||
"pushed_at": "2025-12-08T13:51:04Z",
|
||||
"stargazers_count": 1401,
|
||||
"watchers_count": 1401,
|
||||
"stargazers_count": 1402,
|
||||
"watchers_count": 1402,
|
||||
"has_discussions": false,
|
||||
"forks_count": 193,
|
||||
"allow_forking": true,
|
||||
@@ -1492,7 +1492,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 193,
|
||||
"watchers": 1401,
|
||||
"watchers": 1402,
|
||||
"score": 0,
|
||||
"subscribers_count": 10
|
||||
},
|
||||
@@ -2605,10 +2605,10 @@
|
||||
"description": "Original Proof-of-Concepts for React2Shell CVE-2025-55182",
|
||||
"fork": false,
|
||||
"created_at": "2025-12-05T08:00:07Z",
|
||||
"updated_at": "2026-04-25T17:59:21Z",
|
||||
"updated_at": "2026-04-29T01:01:23Z",
|
||||
"pushed_at": "2025-12-05T08:56:15Z",
|
||||
"stargazers_count": 1036,
|
||||
"watchers_count": 1036,
|
||||
"stargazers_count": 1037,
|
||||
"watchers_count": 1037,
|
||||
"has_discussions": false,
|
||||
"forks_count": 108,
|
||||
"allow_forking": true,
|
||||
@@ -2622,7 +2622,7 @@
|
||||
],
|
||||
"visibility": "public",
|
||||
"forks": 108,
|
||||
"watchers": 1036,
|
||||
"watchers": 1037,
|
||||
"score": 0,
|
||||
"subscribers_count": 24
|
||||
},
|
||||
@@ -12284,8 +12284,8 @@
|
||||
"description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.",
|
||||
"fork": false,
|
||||
"created_at": "2025-12-24T14:48:19Z",
|
||||
"updated_at": "2026-04-28T23:36:37Z",
|
||||
"pushed_at": "2026-04-28T23:36:33Z",
|
||||
"updated_at": "2026-04-29T05:54:23Z",
|
||||
"pushed_at": "2026-04-29T05:54:20Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
@@ -12369,8 +12369,8 @@
|
||||
"description": "🚨 Identify and address CVE-2025-55182, a critical React Server vulnerability allowing remote code execution without authentication.",
|
||||
"fork": false,
|
||||
"created_at": "2025-12-24T18:44:51Z",
|
||||
"updated_at": "2026-04-28T23:35:59Z",
|
||||
"pushed_at": "2026-04-28T23:35:56Z",
|
||||
"updated_at": "2026-04-29T05:53:36Z",
|
||||
"pushed_at": "2026-04-29T05:53:33Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
@@ -12418,8 +12418,8 @@
|
||||
"description": "🚨 Demonstrate CVE-2025-55182, a critical React vulnerability allowing remote code execution via prototype chain pollution in `[email protected]`.",
|
||||
"fork": false,
|
||||
"created_at": "2025-12-24T18:48:07Z",
|
||||
"updated_at": "2026-04-28T23:35:56Z",
|
||||
"pushed_at": "2026-04-28T23:35:52Z",
|
||||
"updated_at": "2026-04-29T05:53:40Z",
|
||||
"pushed_at": "2026-04-29T05:53:36Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
@@ -12503,8 +12503,8 @@
|
||||
"description": "🔍 Exploit CVE-2025-55182 in Next.js with this versatile tool for security research, featuring advanced payloads and WAF bypass techniques.",
|
||||
"fork": false,
|
||||
"created_at": "2025-12-25T19:28:28Z",
|
||||
"updated_at": "2026-04-28T23:37:24Z",
|
||||
"pushed_at": "2026-04-28T23:37:21Z",
|
||||
"updated_at": "2026-04-29T05:55:33Z",
|
||||
"pushed_at": "2026-04-29T05:55:29Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
@@ -12705,8 +12705,8 @@
|
||||
"description": "⚡ Discover and exploit CVE-2025-55182 with this PoC, offering reliable remote code execution tests for React Server Components in Next.js.",
|
||||
"fork": false,
|
||||
"created_at": "2025-12-26T22:26:55Z",
|
||||
"updated_at": "2026-04-28T23:37:22Z",
|
||||
"pushed_at": "2026-04-28T23:37:19Z",
|
||||
"updated_at": "2026-04-29T05:55:20Z",
|
||||
"pushed_at": "2026-04-29T05:55:17Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
@@ -12975,8 +12975,8 @@
|
||||
"description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
|
||||
"fork": false,
|
||||
"created_at": "2026-01-02T01:28:57Z",
|
||||
"updated_at": "2026-04-28T23:41:54Z",
|
||||
"pushed_at": "2026-04-28T23:41:50Z",
|
||||
"updated_at": "2026-04-29T06:01:11Z",
|
||||
"pushed_at": "2026-04-29T06:01:07Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
@@ -13496,8 +13496,8 @@
|
||||
"description": "🔍 Exploit CVE-2025-55182 vulnerabilities in Next.js and React with this efficient framework for rapid testing and assessment.",
|
||||
"fork": false,
|
||||
"created_at": "2026-01-08T16:28:04Z",
|
||||
"updated_at": "2026-04-28T23:47:07Z",
|
||||
"pushed_at": "2026-04-28T23:47:03Z",
|
||||
"updated_at": "2026-04-29T06:07:58Z",
|
||||
"pushed_at": "2026-04-29T06:07:54Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
@@ -14396,7 +14396,7 @@
|
||||
"fork": false,
|
||||
"created_at": "2026-02-18T11:22:50Z",
|
||||
"updated_at": "2026-03-31T09:42:49Z",
|
||||
"pushed_at": "2026-04-28T02:46:30Z",
|
||||
"pushed_at": "2026-04-29T02:45:55Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -289,8 +289,8 @@
|
||||
"description": "🛠️ Test and validate the CVE-2025-55184 vulnerability in React Server Components to enhance your application's security against denial-of-service attacks.",
|
||||
"fork": false,
|
||||
"created_at": "2026-01-02T05:04:03Z",
|
||||
"updated_at": "2026-04-28T23:42:23Z",
|
||||
"pushed_at": "2026-04-28T23:42:19Z",
|
||||
"updated_at": "2026-04-29T06:01:42Z",
|
||||
"pushed_at": "2026-04-29T06:01:39Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -200,8 +200,8 @@
|
||||
"description": "🔍 Analyze WSUS deserialization behavior to enhance security, generate reports, and identify configuration weaknesses in your infrastructure.",
|
||||
"fork": false,
|
||||
"created_at": "2026-01-29T02:16:04Z",
|
||||
"updated_at": "2026-04-29T00:02:04Z",
|
||||
"pushed_at": "2026-04-29T00:02:00Z",
|
||||
"updated_at": "2026-04-29T06:26:58Z",
|
||||
"pushed_at": "2026-04-29T06:26:54Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "🔍 Detect vulnerabilities CVE-2025-61882 and CVE-2025-61884 in Oracle E-Business Suite to help secure your systems from potential remote code execution threats.",
|
||||
"fork": false,
|
||||
"created_at": "2025-03-04T15:38:32Z",
|
||||
"updated_at": "2026-04-28T23:06:03Z",
|
||||
"pushed_at": "2026-04-28T23:05:59Z",
|
||||
"updated_at": "2026-04-29T05:17:06Z",
|
||||
"pushed_at": "2026-04-29T05:17:02Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -179,8 +179,8 @@
|
||||
"description": "🔍 Demonstrate and validate the `addressof` and `fakeobj` primitives in the V8 sandbox for advanced security research on CVE-2025-6554.",
|
||||
"fork": false,
|
||||
"created_at": "2025-08-10T21:07:43Z",
|
||||
"updated_at": "2026-04-28T23:31:49Z",
|
||||
"pushed_at": "2026-04-28T23:31:45Z",
|
||||
"updated_at": "2026-04-29T05:48:33Z",
|
||||
"pushed_at": "2026-04-29T05:48:29Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -64,8 +64,8 @@
|
||||
"description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.",
|
||||
"fork": false,
|
||||
"created_at": "2026-03-23T09:09:21Z",
|
||||
"updated_at": "2026-04-29T00:36:21Z",
|
||||
"pushed_at": "2026-04-29T00:36:18Z",
|
||||
"updated_at": "2026-04-29T03:53:46Z",
|
||||
"pushed_at": "2026-04-29T03:53:43Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.",
|
||||
"fork": false,
|
||||
"created_at": "2025-10-01T07:40:09Z",
|
||||
"updated_at": "2026-04-28T23:38:08Z",
|
||||
"pushed_at": "2026-04-28T23:38:04Z",
|
||||
"updated_at": "2026-04-29T05:56:18Z",
|
||||
"pushed_at": "2026-04-29T05:56:14Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -47,8 +47,8 @@
|
||||
"description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.",
|
||||
"fork": false,
|
||||
"created_at": "2026-01-24T21:00:41Z",
|
||||
"updated_at": "2026-04-28T23:58:56Z",
|
||||
"pushed_at": "2026-04-28T23:58:53Z",
|
||||
"updated_at": "2026-04-29T06:22:57Z",
|
||||
"pushed_at": "2026-04-29T06:22:53Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "Exploit CVE-2025-69985 to bypass authentication and execute remote commands on FUXA versions ≤ 1.2.8 via the \/api\/runscript endpoint.",
|
||||
"fork": false,
|
||||
"created_at": "2025-04-10T09:18:30Z",
|
||||
"updated_at": "2026-04-29T00:23:55Z",
|
||||
"pushed_at": "2026-04-29T00:23:52Z",
|
||||
"updated_at": "2026-04-29T03:41:33Z",
|
||||
"pushed_at": "2026-04-29T03:41:29Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.",
|
||||
"fork": false,
|
||||
"created_at": "2024-04-20T04:18:24Z",
|
||||
"updated_at": "2026-04-29T00:19:41Z",
|
||||
"pushed_at": "2026-04-29T00:19:37Z",
|
||||
"updated_at": "2026-04-29T03:37:21Z",
|
||||
"pushed_at": "2026-04-29T03:37:18Z",
|
||||
"stargazers_count": 2,
|
||||
"watchers_count": 2,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -838,8 +838,8 @@
|
||||
"description": "🛠 Exploit CVE-2025-8088 with this Python tool to generate malicious WinRAR archives that ensure payload persistence in Windows startup folders.",
|
||||
"fork": false,
|
||||
"created_at": "2025-12-20T13:52:21Z",
|
||||
"updated_at": "2026-04-28T23:32:55Z",
|
||||
"pushed_at": "2026-04-28T23:32:50Z",
|
||||
"updated_at": "2026-04-29T05:49:55Z",
|
||||
"pushed_at": "2026-04-29T05:49:51Z",
|
||||
"stargazers_count": 2,
|
||||
"watchers_count": 2,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -146,8 +146,8 @@
|
||||
"description": "🔍 Detect improper symbolic link handling in Gogs' PutContents API, exposing local code execution risks for versions 0.13.3 and earlier.",
|
||||
"fork": false,
|
||||
"created_at": "2025-12-31T13:25:07Z",
|
||||
"updated_at": "2026-04-28T23:41:30Z",
|
||||
"pushed_at": "2026-04-28T23:41:26Z",
|
||||
"updated_at": "2026-04-29T06:00:38Z",
|
||||
"pushed_at": "2026-04-29T06:00:34Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "🚀 Exploit CVE-2025-9074 with this Docker escape framework, simplifying API vulnerabilities and enhancing security testing for developers and researchers.",
|
||||
"fork": false,
|
||||
"created_at": "2024-06-19T23:21:41Z",
|
||||
"updated_at": "2026-04-28T23:43:01Z",
|
||||
"pushed_at": "2026-04-28T23:42:58Z",
|
||||
"updated_at": "2026-04-29T06:02:31Z",
|
||||
"pushed_at": "2026-04-29T06:02:27Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.",
|
||||
"fork": false,
|
||||
"created_at": "2024-04-20T04:18:24Z",
|
||||
"updated_at": "2026-04-29T00:19:41Z",
|
||||
"pushed_at": "2026-04-29T00:19:37Z",
|
||||
"updated_at": "2026-04-29T06:49:43Z",
|
||||
"pushed_at": "2026-04-29T06:49:40Z",
|
||||
"stargazers_count": 2,
|
||||
"watchers_count": 2,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.",
|
||||
"fork": false,
|
||||
"created_at": "2024-09-22T12:19:06Z",
|
||||
"updated_at": "2026-04-29T00:18:53Z",
|
||||
"pushed_at": "2026-04-29T00:18:50Z",
|
||||
"updated_at": "2026-04-29T06:48:36Z",
|
||||
"pushed_at": "2026-04-29T06:48:32Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
@@ -412,8 +412,8 @@
|
||||
"description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.",
|
||||
"fork": false,
|
||||
"created_at": "2026-02-26T05:21:28Z",
|
||||
"updated_at": "2026-04-29T00:18:03Z",
|
||||
"pushed_at": "2026-04-29T00:17:59Z",
|
||||
"updated_at": "2026-04-29T06:47:28Z",
|
||||
"pushed_at": "2026-04-29T06:47:24Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "🔍 Analyze and detect CVE-2026-2406 vulnerabilities in Telnet to enhance security and prevent unauthorized access with this professional research engine.",
|
||||
"fork": false,
|
||||
"created_at": "2025-04-16T07:20:12Z",
|
||||
"updated_at": "2026-04-29T00:09:42Z",
|
||||
"pushed_at": "2026-04-29T00:09:38Z",
|
||||
"updated_at": "2026-04-29T06:36:51Z",
|
||||
"pushed_at": "2026-04-29T06:36:48Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -1553,8 +1553,8 @@
|
||||
"description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.",
|
||||
"fork": false,
|
||||
"created_at": "2026-02-03T19:46:10Z",
|
||||
"updated_at": "2026-04-29T00:06:23Z",
|
||||
"pushed_at": "2026-04-29T00:06:19Z",
|
||||
"updated_at": "2026-04-29T06:32:31Z",
|
||||
"pushed_at": "2026-04-29T06:32:28Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -80,8 +80,8 @@
|
||||
"description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions",
|
||||
"fork": false,
|
||||
"created_at": "2026-03-26T04:38:27Z",
|
||||
"updated_at": "2026-04-29T00:38:32Z",
|
||||
"pushed_at": "2026-04-29T00:38:29Z",
|
||||
"updated_at": "2026-04-29T03:55:36Z",
|
||||
"pushed_at": "2026-04-29T03:55:33Z",
|
||||
"stargazers_count": 2,
|
||||
"watchers_count": 2,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -179,8 +179,8 @@
|
||||
"description": "Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.",
|
||||
"fork": false,
|
||||
"created_at": "2026-03-03T14:19:18Z",
|
||||
"updated_at": "2026-04-29T00:21:27Z",
|
||||
"pushed_at": "2026-04-29T00:21:22Z",
|
||||
"updated_at": "2026-04-29T06:51:49Z",
|
||||
"pushed_at": "2026-04-29T06:51:45Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -65,8 +65,8 @@
|
||||
"description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.",
|
||||
"fork": false,
|
||||
"created_at": "2026-03-10T14:40:04Z",
|
||||
"updated_at": "2026-04-29T00:26:37Z",
|
||||
"pushed_at": "2026-04-29T00:26:33Z",
|
||||
"updated_at": "2026-04-29T03:44:00Z",
|
||||
"pushed_at": "2026-04-29T03:43:56Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -94,8 +94,8 @@
|
||||
"description": "Exploit Frigate NVR ≤0.16.3 to execute commands remotely by abusing a configuration flaw without needing shell access or output capture.",
|
||||
"fork": false,
|
||||
"created_at": "2026-03-07T20:23:08Z",
|
||||
"updated_at": "2026-04-29T00:25:17Z",
|
||||
"pushed_at": "2026-04-29T00:25:14Z",
|
||||
"updated_at": "2026-04-29T03:42:59Z",
|
||||
"pushed_at": "2026-04-29T03:42:55Z",
|
||||
"stargazers_count": 2,
|
||||
"watchers_count": 2,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -62,8 +62,8 @@
|
||||
"description": "Explore a PoC for CVE-2026-2991, an auth bypass in KiviCare 4.1.2 and earlier via the patient social-login REST endpoint",
|
||||
"fork": false,
|
||||
"created_at": "2026-04-03T20:26:43Z",
|
||||
"updated_at": "2026-04-29T00:42:19Z",
|
||||
"pushed_at": "2026-04-29T00:42:16Z",
|
||||
"updated_at": "2026-04-29T03:59:32Z",
|
||||
"pushed_at": "2026-04-29T03:59:29Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -59,8 +59,8 @@
|
||||
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
|
||||
"fork": false,
|
||||
"created_at": "2026-03-28T20:49:46Z",
|
||||
"updated_at": "2026-04-29T00:39:28Z",
|
||||
"pushed_at": "2026-04-29T00:39:25Z",
|
||||
"updated_at": "2026-04-29T03:56:39Z",
|
||||
"pushed_at": "2026-04-29T03:56:35Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "CVE-2026-33937 Handlebars RCE exploit PoC (AST Injection)",
|
||||
"fork": false,
|
||||
"created_at": "2026-03-28T13:24:22Z",
|
||||
"updated_at": "2026-03-29T04:42:27Z",
|
||||
"pushed_at": "2026-03-29T04:42:24Z",
|
||||
"updated_at": "2026-04-29T03:06:49Z",
|
||||
"pushed_at": "2026-04-29T03:06:45Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -80,10 +80,10 @@
|
||||
"description": "A sophisticated, cross-platform exploit generator for **CVE-2026-34621** – a critical prototype pollution vulnerability in Adobe Acrobat and Reader that leads to sandbox escape and arbitrary code execution on Windows and macOS.",
|
||||
"fork": false,
|
||||
"created_at": "2026-04-15T15:30:06Z",
|
||||
"updated_at": "2026-04-27T10:55:50Z",
|
||||
"updated_at": "2026-04-29T06:53:26Z",
|
||||
"pushed_at": "2026-04-15T15:47:23Z",
|
||||
"stargazers_count": 9,
|
||||
"watchers_count": 9,
|
||||
"stargazers_count": 10,
|
||||
"watchers_count": 10,
|
||||
"has_discussions": false,
|
||||
"forks_count": 1,
|
||||
"allow_forking": true,
|
||||
@@ -94,7 +94,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 1,
|
||||
"watchers": 9,
|
||||
"watchers": 10,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
|
||||
@@ -64,5 +64,38 @@
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
{
|
||||
"id": 1224201714,
|
||||
"name": "CVE-2026-3854-PoC",
|
||||
"full_name": "lysophavin18\/CVE-2026-3854-PoC",
|
||||
"owner": {
|
||||
"login": "lysophavin18",
|
||||
"id": 116633924,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/116633924?v=4",
|
||||
"html_url": "https:\/\/github.com\/lysophavin18",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/lysophavin18\/CVE-2026-3854-PoC",
|
||||
"description": "GitHub RCE via X-Stat Push Option Injection",
|
||||
"fork": false,
|
||||
"created_at": "2026-04-29T03:52:45Z",
|
||||
"updated_at": "2026-04-29T03:57:02Z",
|
||||
"pushed_at": "2026-04-29T03:56:58Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": true,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
]
|
||||
@@ -87,10 +87,10 @@
|
||||
"description": "FortiSandbox RCE Scanner — CVE-2026-39808",
|
||||
"fork": false,
|
||||
"created_at": "2026-04-21T22:21:48Z",
|
||||
"updated_at": "2026-04-24T15:56:41Z",
|
||||
"updated_at": "2026-04-29T06:52:23Z",
|
||||
"pushed_at": "2026-04-21T22:32:02Z",
|
||||
"stargazers_count": 14,
|
||||
"watchers_count": 14,
|
||||
"stargazers_count": 17,
|
||||
"watchers_count": 17,
|
||||
"has_discussions": false,
|
||||
"forks_count": 6,
|
||||
"allow_forking": true,
|
||||
@@ -101,7 +101,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 6,
|
||||
"watchers": 14,
|
||||
"watchers": 17,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
|
||||
@@ -14,10 +14,10 @@
|
||||
"description": null,
|
||||
"fork": false,
|
||||
"created_at": "2026-04-23T08:57:29Z",
|
||||
"updated_at": "2026-04-29T00:48:18Z",
|
||||
"updated_at": "2026-04-29T03:00:55Z",
|
||||
"pushed_at": "2026-04-23T13:55:33Z",
|
||||
"stargazers_count": 62,
|
||||
"watchers_count": 62,
|
||||
"stargazers_count": 63,
|
||||
"watchers_count": 63,
|
||||
"has_discussions": false,
|
||||
"forks_count": 16,
|
||||
"allow_forking": true,
|
||||
@@ -28,7 +28,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 16,
|
||||
"watchers": 62,
|
||||
"watchers": 63,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
|
||||
@@ -31,5 +31,38 @@
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
{
|
||||
"id": 1224312813,
|
||||
"name": "proftpd-CVE-2026-42167-analysis",
|
||||
"full_name": "dinosn\/proftpd-CVE-2026-42167-analysis",
|
||||
"owner": {
|
||||
"login": "dinosn",
|
||||
"id": 3851678,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/3851678?v=4",
|
||||
"html_url": "https:\/\/github.com\/dinosn",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/dinosn\/proftpd-CVE-2026-42167-analysis",
|
||||
"description": "Independent reproduction, code-level root-cause analysis, and realistic-exposure write-up for CVE-2026-42167 (ProFTPD mod_sql is_escaped_text() bypass).",
|
||||
"fork": false,
|
||||
"created_at": "2026-04-29T06:52:34Z",
|
||||
"updated_at": "2026-04-29T06:52:43Z",
|
||||
"pushed_at": "2026-04-29T06:52:38Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
]
|
||||
@@ -0,0 +1,35 @@
|
||||
[
|
||||
{
|
||||
"id": 1224119798,
|
||||
"name": "CVE-2026-6644",
|
||||
"full_name": "uky007\/CVE-2026-6644",
|
||||
"owner": {
|
||||
"login": "uky007",
|
||||
"id": 38967345,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38967345?v=4",
|
||||
"html_url": "https:\/\/github.com\/uky007",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/uky007\/CVE-2026-6644",
|
||||
"description": null,
|
||||
"fork": false,
|
||||
"created_at": "2026-04-29T01:27:42Z",
|
||||
"updated_at": "2026-04-29T01:34:04Z",
|
||||
"pushed_at": "2026-04-29T01:34:00Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
]
|
||||
@@ -14,12 +14,12 @@
|
||||
"description": "Reverse Engineered based on CISA disclosure of new CVE",
|
||||
"fork": false,
|
||||
"created_at": "2026-04-28T19:18:44Z",
|
||||
"updated_at": "2026-04-28T19:26:32Z",
|
||||
"updated_at": "2026-04-29T03:18:12Z",
|
||||
"pushed_at": "2026-04-28T19:26:28Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"forks_count": 1,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
@@ -27,8 +27,8 @@
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 0,
|
||||
"forks": 1,
|
||||
"watchers": 1,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
|
||||
@@ -669,6 +669,7 @@
|
||||
|
||||
- [5kr1pt/CVE-2026-3854](https://github.com/5kr1pt/CVE-2026-3854)
|
||||
- [LACHHAB-Anas/Exploit_CVE-2026-3854](https://github.com/LACHHAB-Anas/Exploit_CVE-2026-3854)
|
||||
- [lysophavin18/CVE-2026-3854-PoC](https://github.com/lysophavin18/CVE-2026-3854-PoC)
|
||||
|
||||
### CVE-2026-3888 (2026-03-17)
|
||||
|
||||
@@ -960,6 +961,13 @@
|
||||
|
||||
- [mlgzackfly/CVE-2026-6643](https://github.com/mlgzackfly/CVE-2026-6643)
|
||||
|
||||
### CVE-2026-6644 (2026-04-20)
|
||||
|
||||
<code>A command injection vulnerability was found in the PPTP VPN Clients on the ADM. The vulnerability allows an administrative user to break out of the restricted web environment and execute arbitrary code on the underlying operating system. This occurs due to insufficient validation of user-supplied input before it is passed to a system shell. Successful exploitation allows an attacker to achieve Remote Code Execution (RCE) and fully compromise the system.\nAffected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RR42 as well as from ADM 5.0.0 through ADM 5.1.2.REO1.
|
||||
</code>
|
||||
|
||||
- [uky007/CVE-2026-6644](https://github.com/uky007/CVE-2026-6644)
|
||||
|
||||
### CVE-2026-6770 (2026-04-21)
|
||||
|
||||
<code>Other issue in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
|
||||
@@ -3918,6 +3926,7 @@
|
||||
</code>
|
||||
|
||||
- [ZeroPathAI/proftpd-CVE-2026-42167-poc](https://github.com/ZeroPathAI/proftpd-CVE-2026-42167-poc)
|
||||
- [dinosn/proftpd-CVE-2026-42167-analysis](https://github.com/dinosn/proftpd-CVE-2026-42167-analysis)
|
||||
|
||||
### CVE-2026-42208
|
||||
- [imjdl/CVE-2026-42208_lab](https://github.com/imjdl/CVE-2026-42208_lab)
|
||||
@@ -6661,6 +6670,13 @@
|
||||
|
||||
- [CyberVinner/TP-Link-TL-WR820N-CVE-2025-14175](https://github.com/CyberVinner/TP-Link-TL-WR820N-CVE-2025-14175)
|
||||
|
||||
### CVE-2025-14177 (2025-12-27)
|
||||
|
||||
<code>In PHP versions:8.1.* before 8.1.34, 8.2.* before 8.2.30, 8.3.* before 8.3.29, 8.4.* before 8.4.16, 8.5.* before 8.5.1, the getimagesize() function may leak uninitialized heap memory into the APPn segments (e.g., APP1) when reading images in multi-chunk mode (such as via php://filter). This occurs due to a bug in php_read_stream_all_chunks() that overwrites the buffer without advancing the pointer, leaving tail bytes uninitialized. This may lead to information disclosure of sensitive heap data and affect the confidentiality of the target server.
|
||||
</code>
|
||||
|
||||
- [gl1tch0x1/PHP_8.1.x_Exploit](https://github.com/gl1tch0x1/PHP_8.1.x_Exploit)
|
||||
|
||||
### CVE-2025-14221 (2025-12-08)
|
||||
|
||||
<code>A vulnerability was detected in SourceCodester Online Banking System 1.0. This impacts an unknown function of the file /?page=user. The manipulation of the argument First Name/Last Name results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used.
|
||||
@@ -16472,6 +16488,7 @@
|
||||
- [InfoSec-DB/PHPCGIScanner](https://github.com/InfoSec-DB/PHPCGIScanner)
|
||||
- [a1ex-var1amov/ctf-cve-2024-4577](https://github.com/a1ex-var1amov/ctf-cve-2024-4577)
|
||||
- [rayngnpc/CVE-2024-4577-rayng](https://github.com/rayngnpc/CVE-2024-4577-rayng)
|
||||
- [gl1tch0x1/PHP_8.1.x_Exploit](https://github.com/gl1tch0x1/PHP_8.1.x_Exploit)
|
||||
|
||||
### CVE-2024-4701 (2024-05-10)
|
||||
|
||||
@@ -36702,6 +36719,7 @@
|
||||
</code>
|
||||
|
||||
- [sunichi/cve-2022-4543-wrapper](https://github.com/sunichi/cve-2022-4543-wrapper)
|
||||
- [ngtuonghung/CVE-2022-4543-EntryBleed](https://github.com/ngtuonghung/CVE-2022-4543-EntryBleed)
|
||||
|
||||
### CVE-2022-4556 (2022-12-16)
|
||||
|
||||
@@ -66996,7 +67014,7 @@
|
||||
- [justlce/CVE-2016-6210-Exploit](https://github.com/justlce/CVE-2016-6210-Exploit)
|
||||
- [goomdan/CVE-2016-6210-exploit](https://github.com/goomdan/CVE-2016-6210-exploit)
|
||||
- [samh4cks/CVE-2016-6210-OpenSSH-User-Enumeration](https://github.com/samh4cks/CVE-2016-6210-OpenSSH-User-Enumeration)
|
||||
- [coolbabayaga/CVE-2016-6210](https://github.com/coolbabayaga/CVE-2016-6210)
|
||||
- [wabiyagi/CVE-2016-6210](https://github.com/wabiyagi/CVE-2016-6210)
|
||||
- [nicoleman0/CVE-2016-6210-OpenSSHd-7.2p2](https://github.com/nicoleman0/CVE-2016-6210-OpenSSHd-7.2p2)
|
||||
- [KiPhuong/cve-2016-6210](https://github.com/KiPhuong/cve-2016-6210)
|
||||
|
||||
@@ -70508,6 +70526,7 @@
|
||||
- [RinAliyeva/metasploitable2-vsftpd-exploitation](https://github.com/RinAliyeva/metasploitable2-vsftpd-exploitation)
|
||||
- [emilebarnard242/pentest-metasploitable2](https://github.com/emilebarnard242/pentest-metasploitable2)
|
||||
- [Mithileshan/soc-investigation-lab](https://github.com/Mithileshan/soc-investigation-lab)
|
||||
- [IvoAlbacete/Kali-Metasploitable](https://github.com/IvoAlbacete/Kali-Metasploitable)
|
||||
|
||||
### CVE-2011-2553
|
||||
- [carlosrpastrana/cve-2011-2553](https://github.com/carlosrpastrana/cve-2011-2553)
|
||||
|
||||
Reference in new issue
Block a user