nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/08/29 19:23:05

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-08-30 04:23:05 +09:00
1 parent 5e92756b7c
commit 0534bf34d7
50 files changed
+411 -145
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2014/CVE-2014-0160.json
+4 -4
View File
@@ -245,10 +245,10 @@
"description": "Heartbleed (CVE-2014-0160) client exploit",
"fork": false,
"created_at": "2014-04-08T16:41:51Z",
"updated_at": "2026-06-14T17:28:56Z",
"updated_at": "2026-08-29T12:29:55Z",
"pushed_at": "2016-01-22T00:42:35Z",
"stargazers_count": 330,
"watchers_count": 330,
"stargazers_count": 331,
"watchers_count": 331,
"has_discussions": false,
"forks_count": 79,
"allow_forking": true,
@@ -259,7 +259,7 @@
"topics": [],
"visibility": "public",
"forks": 79,
"watchers": 330,
"watchers": 331,
"score": 0,
"subscribers_count": 29
},
2018/CVE-2018-10933.json
+1 -1
View File
@@ -47,7 +47,7 @@
"description": "Spawn to shell without any credentials by using CVE-2018-10933 (LibSSH)",
"fork": false,
"created_at": "2018-10-17T14:14:12Z",
"updated_at": "2026-07-24T03:44:57Z",
"updated_at": "2026-08-29T18:22:20Z",
"pushed_at": "2023-12-19T20:46:55Z",
"stargazers_count": 498,
"watchers_count": 498,
2018/CVE-2018-8120.json
+1 -1
View File
@@ -47,7 +47,7 @@
"description": "CVE-2018-8120 Windows LPE exploit",
"fork": false,
"created_at": "2018-05-19T02:43:15Z",
"updated_at": "2026-07-29T10:32:11Z",
"updated_at": "2026-08-29T18:21:25Z",
"pushed_at": "2018-05-30T13:09:54Z",
"stargazers_count": 498,
"watchers_count": 498,
2019/CVE-2019-0708.json
+3 -3
View File
@@ -1286,7 +1286,7 @@
"description": "dump",
"fork": false,
"created_at": "2019-05-21T06:57:19Z",
"updated_at": "2026-03-30T06:41:29Z",
"updated_at": "2026-08-29T18:27:43Z",
"pushed_at": "2019-06-01T05:15:11Z",
"stargazers_count": 496,
"watchers_count": 496,
@@ -1951,7 +1951,7 @@
"stargazers_count": 1183,
"watchers_count": 1183,
"has_discussions": false,
"forks_count": 331,
"forks_count": 330,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1959,7 +1959,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 331,
"forks": 330,
"watchers": 1183,
"score": 0,
"subscribers_count": 66
2020/CVE-2020-28022.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1350713980,
"name": "CVE-2020-28022",
"full_name": "t1b4n3\/CVE-2020-28022",
"owner": {
"login": "t1b4n3",
"id": 168975848,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/168975848?v=4",
"html_url": "https:\/\/github.com\/t1b4n3",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/t1b4n3\/CVE-2020-28022",
"description": null,
"fork": false,
"created_at": "2026-08-29T15:53:52Z",
"updated_at": "2026-08-29T18:38:50Z",
"pushed_at": "2026-08-29T18:38:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2020/CVE-2020-8597.json
+2 -2
View File
@@ -153,8 +153,8 @@
"description": "Synthetic CWE-120 stack buffer overflow variant of CVE-2020-8597 (pppd EAP) as a CodeQL static-analysis target",
"fork": false,
"created_at": "2026-08-12T17:07:10Z",
"updated_at": "2026-08-14T16:11:09Z",
"pushed_at": "2026-08-14T16:10:10Z",
"updated_at": "2026-08-29T14:10:32Z",
"pushed_at": "2026-08-29T14:09:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2021/CVE-2021-1675.json
+1 -1
View File
@@ -47,7 +47,7 @@
"description": "C# and Impacket implementation of PrintNightmare CVE-2021-1675\/CVE-2021-34527",
"fork": false,
"created_at": "2021-06-29T17:24:14Z",
"updated_at": "2026-08-21T17:16:33Z",
"updated_at": "2026-08-29T17:51:11Z",
"pushed_at": "2021-07-20T15:28:13Z",
"stargazers_count": 1999,
"watchers_count": 1999,
2021/CVE-2021-1931.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "Unlock the Meta Quest 1 bootloader and gain root access using GhostLock + CVE-2021-1931.",
"fork": false,
"created_at": "2026-07-31T05:37:56Z",
"updated_at": "2026-08-29T07:31:03Z",
"updated_at": "2026-08-29T17:54:30Z",
"pushed_at": "2026-08-28T12:08:00Z",
"stargazers_count": 150,
"watchers_count": 150,
"stargazers_count": 151,
"watchers_count": 151,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -108,7 +108,7 @@
],
"visibility": "public",
"forks": 7,
"watchers": 150,
"watchers": 151,
"score": 0,
"subscribers_count": 3
}
2021/CVE-2021-21972.json
+1 -1
View File
@@ -97,7 +97,7 @@
"description": "CVE-2021-21972 Exploit",
"fork": false,
"created_at": "2021-02-24T11:14:58Z",
"updated_at": "2026-08-17T19:45:38Z",
"updated_at": "2026-08-29T18:22:16Z",
"pushed_at": "2023-06-08T04:01:33Z",
"stargazers_count": 498,
"watchers_count": 498,
2021/CVE-2021-4034.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "Local Privilege Escalation in polkit's pkexec",
"fork": false,
"created_at": "2022-01-25T23:11:30Z",
"updated_at": "2026-06-26T10:20:36Z",
"updated_at": "2026-08-29T14:09:26Z",
"pushed_at": "2022-01-26T01:01:15Z",
"stargazers_count": 74,
"watchers_count": 74,
2021/CVE-2021-44228.json
+1 -1
View File
@@ -2265,7 +2265,7 @@
"description": "An agent to hotpatch the log4j RCE from CVE-2021-44228.",
"fork": false,
"created_at": "2021-12-12T01:24:51Z",
"updated_at": "2026-05-30T20:55:19Z",
"updated_at": "2026-08-29T18:23:32Z",
"pushed_at": "2022-10-24T02:25:53Z",
"stargazers_count": 497,
"watchers_count": 497,
2022/CVE-2022-0995.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "CVE-2022-0995 exploit",
"fork": false,
"created_at": "2022-03-26T21:46:09Z",
"updated_at": "2026-08-21T11:19:17Z",
"updated_at": "2026-08-29T18:24:08Z",
"pushed_at": "2022-03-27T09:07:01Z",
"stargazers_count": 497,
"watchers_count": 497,
2022/CVE-2022-24713.json
+4 -4
View File
@@ -2,15 +2,15 @@
{
"id": 500224436,
"name": "CVE-2022-24713-POC",
"full_name": "JPeisach\/CVE-2022-24713-POC",
"full_name": "jpeisach\/CVE-2022-24713-POC",
"owner": {
"login": "JPeisach",
"login": "jpeisach",
"id": 24401303,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/24401303?v=4",
"html_url": "https:\/\/github.com\/JPeisach",
"html_url": "https:\/\/github.com\/jpeisach",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/JPeisach\/CVE-2022-24713-POC",
"html_url": "https:\/\/github.com\/jpeisach\/CVE-2022-24713-POC",
"description": "Proof of Concept\/Test for CVE-2022-24713 on Ubuntu",
"fork": false,
"created_at": "2022-06-05T22:17:00Z",
2022/CVE-2022-2588.json
+1 -1
View File
@@ -278,7 +278,7 @@
"description": "SLUBStick exploitation of CVE-2022-2588. Converting a DF into a cross-cache arbitrary memory R\/W primitive through PTE manipulation.",
"fork": false,
"created_at": "2026-02-23T17:33:28Z",
"updated_at": "2026-08-29T11:31:38Z",
"updated_at": "2026-08-29T17:03:49Z",
"pushed_at": "2026-08-29T11:28:03Z",
"stargazers_count": 2,
"watchers_count": 2,
2023/CVE-2023-0179.json
+1 -1
View File
@@ -49,7 +49,7 @@
"description": "针对（CVE-2023-0179）漏洞利用 该漏洞被分配为CVE-2023-0179，影响了从5.5到6.2-rc3的所有Linux版本，该漏洞在6.1.6上被测试。 漏洞的细节和文章可以在os-security上找到。",
"fork": false,
"created_at": "2023-03-16T02:20:52Z",
"updated_at": "2026-07-27T11:59:48Z",
"updated_at": "2026-08-29T18:40:53Z",
"pushed_at": "2023-03-16T02:22:28Z",
"stargazers_count": 200,
"watchers_count": 200,
2023/CVE-2023-26258.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 24,
"watchers_count": 24,
"has_discussions": false,
"forks_count": 11,
"forks_count": 12,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 11,
"forks": 12,
"watchers": 24,
"score": 0,
"subscribers_count": 3
2024/CVE-2024-12381.json
+33
View File
@@ -31,5 +31,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1246950111,
"name": "CVE-2024-12381",
"full_name": "VictorNS69\/CVE-2024-12381",
"owner": {
"login": "VictorNS69",
"id": 10101065,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/10101065?v=4",
"html_url": "https:\/\/github.com\/VictorNS69",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/VictorNS69\/CVE-2024-12381",
"description": "CVE-2024-12381 is a WebAssembly type canonicalization vulnerability in Chrome's V8 engine where `CanonicalEquality::EqualValueType()` fails to account for nullability in indexed reference types. Combined with a JSPI-based V8 sandbox bypass (CVE-2024-12692), this allows remote code execution.",
"fork": false,
"created_at": "2026-05-22T18:28:18Z",
"updated_at": "2026-08-29T17:46:15Z",
"pushed_at": "2026-05-22T19:08:29Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2024/CVE-2024-28000.json
+4 -4
View File
@@ -155,10 +155,10 @@
"description": "CVE-2024-28000 Exploit for litespeed-cache =<6.3 allows Privilege Escalation with creation of administrator account",
"fork": false,
"created_at": "2024-09-10T08:16:16Z",
"updated_at": "2026-08-15T23:13:23Z",
"updated_at": "2026-08-29T17:12:14Z",
"pushed_at": "2025-03-18T22:06:30Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -169,7 +169,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 1
},
2024/CVE-2024-6387.json
+3 -3
View File
@@ -47,7 +47,7 @@
"description": "a signal handler race condition in OpenSSH's server (sshd)",
"fork": false,
"created_at": "2024-07-01T10:55:29Z",
"updated_at": "2026-08-25T03:22:58Z",
"updated_at": "2026-08-29T18:27:31Z",
"pushed_at": "2024-07-01T10:54:02Z",
"stargazers_count": 496,
"watchers_count": 496,
@@ -2588,7 +2588,7 @@
"stargazers_count": 12,
"watchers_count": 12,
"has_discussions": true,
"forks_count": 5,
"forks_count": 6,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2596,7 +2596,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 5,
"forks": 6,
"watchers": 12,
"score": 0,
"subscribers_count": 2
2025/CVE-2025-23211.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": null,
"fork": false,
"created_at": "2026-08-12T04:44:36Z",
"updated_at": "2026-08-19T05:49:49Z",
"pushed_at": "2026-08-19T05:49:42Z",
"updated_at": "2026-08-29T14:33:20Z",
"pushed_at": "2026-08-29T14:33:04Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-31207.json
+2 -2
View File
@@ -55,8 +55,8 @@
"description": "CVE-2025-31207 mitigation and sandboxed tester for rootless and rootHide jailbreaks on iOS 15–18.4.1",
"fork": false,
"created_at": "2026-08-02T00:32:02Z",
"updated_at": "2026-08-25T17:13:13Z",
"pushed_at": "2026-08-25T17:04:50Z",
"updated_at": "2026-08-29T15:49:24Z",
"pushed_at": "2026-08-29T15:49:01Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
2025/CVE-2025-52915.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-08-28T06:11:52Z",
"updated_at": "2026-08-29T16:14:48Z",
"pushed_at": "2026-08-18T12:25:25Z",
"stargazers_count": 925,
"watchers_count": 925,
"stargazers_count": 926,
"watchers_count": 926,
"has_discussions": false,
"forks_count": 136,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 136,
"watchers": 925,
"watchers": 926,
"score": 0,
"subscribers_count": 20
}
2025/CVE-2025-54424.json
+2 -2
View File
@@ -53,8 +53,8 @@
"description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐",
"fork": false,
"created_at": "2025-08-14T05:16:16Z",
"updated_at": "2026-08-26T23:54:29Z",
"pushed_at": "2026-08-26T23:54:25Z",
"updated_at": "2026-08-29T13:30:42Z",
"pushed_at": "2026-08-29T13:29:46Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2025/CVE-2025-55182.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.",
"fork": false,
"created_at": "2022-06-17T10:19:10Z",
"updated_at": "2026-08-27T00:20:02Z",
"pushed_at": "2026-08-27T00:09:21Z",
"updated_at": "2026-08-29T13:43:56Z",
"pushed_at": "2026-08-29T13:43:52Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -11623,8 +11623,8 @@
"description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.",
"fork": false,
"created_at": "2025-12-24T14:48:19Z",
"updated_at": "2026-08-27T00:24:14Z",
"pushed_at": "2026-08-27T00:09:24Z",
"updated_at": "2026-08-29T13:44:06Z",
"pushed_at": "2026-08-29T13:43:52Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-58726.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "AD AutoPwn v4.10.0 — automated AD attack chain, zero-auth to Domain Admin. Discover\/Kerberoast\/AS-REP\/AD CS ESC1-16\/Shadow Creds\/RBCD+KCD\/Ghost-SPN\/TGS-rewrite\/Dollar-Ticket\/WPAD\/WSUS\/PXE\/SCCM\/BloodHound auto-action\/Loot\/DCSync\/DPAPI + Synacktiv 2026 reflection (CVE-2025-58726\/2026-24294\/2026-26128). Authorized pentesting only.",
"fork": false,
"created_at": "2026-03-30T19:34:35Z",
"updated_at": "2026-08-28T19:33:26Z",
"updated_at": "2026-08-29T14:32:18Z",
"pushed_at": "2026-08-08T15:41:31Z",
"stargazers_count": 40,
"watchers_count": 40,
"stargazers_count": 41,
"watchers_count": 41,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -38,7 +38,7 @@
],
"visibility": "public",
"forks": 6,
"watchers": 40,
"watchers": 41,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-66398.json
+2 -2
View File
@@ -64,8 +64,8 @@
"description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.",
"fork": false,
"created_at": "2026-03-23T09:09:21Z",
"updated_at": "2026-08-27T00:30:56Z",
"pushed_at": "2026-08-27T00:27:18Z",
"updated_at": "2026-08-29T14:01:36Z",
"pushed_at": "2026-08-29T14:00:30Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-12243.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1350729830,
"name": "CVE-2026-12243-NLTK-PoC",
"full_name": "morzelowski\/CVE-2026-12243-NLTK-PoC",
"owner": {
"login": "morzelowski",
"id": 63771477,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/63771477?v=4",
"html_url": "https:\/\/github.com\/morzelowski",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/morzelowski\/CVE-2026-12243-NLTK-PoC",
"description": null,
"fork": false,
"created_at": "2026-08-29T16:15:44Z",
"updated_at": "2026-08-29T16:38:16Z",
"pushed_at": "2026-08-29T16:37:16Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-18963.json
+8 -8
View File
@@ -53,10 +53,10 @@
"description": "Exploit for KeyCloak CVE-2026-18963",
"fork": false,
"created_at": "2026-08-20T22:01:11Z",
"updated_at": "2026-08-28T14:19:45Z",
"updated_at": "2026-08-29T14:32:20Z",
"pushed_at": "2026-08-20T22:38:38Z",
"stargazers_count": 34,
"watchers_count": 34,
"stargazers_count": 35,
"watchers_count": 35,
"has_discussions": false,
"forks_count": 10,
"allow_forking": true,
@@ -78,7 +78,7 @@
],
"visibility": "public",
"forks": 10,
"watchers": 34,
"watchers": 35,
"score": 0,
"subscribers_count": 1
},
@@ -163,10 +163,10 @@
"description": "CVE-2026-18963",
"fork": false,
"created_at": "2026-08-24T23:40:17Z",
"updated_at": "2026-08-28T17:01:57Z",
"updated_at": "2026-08-29T18:29:55Z",
"pushed_at": "2026-08-25T18:22:45Z",
"stargazers_count": 18,
"watchers_count": 18,
"stargazers_count": 19,
"watchers_count": 19,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -177,7 +177,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 18,
"watchers": 19,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-19286.json
+4 -4
View File
@@ -1,6 +1,6 @@
[
{
"id": 1348676383,
"id": 1350763453,
"name": "POC-CVE-2026-19286",
"full_name": "rmhowe425\/POC-CVE-2026-19286",
"owner": {
@@ -13,9 +13,9 @@
"html_url": "https:\/\/github.com\/rmhowe425\/POC-CVE-2026-19286",
"description": null,
"fork": false,
"created_at": "2026-08-27T15:55:47Z",
"updated_at": "2026-08-28T21:25:05Z",
"pushed_at": "2026-08-28T21:24:27Z",
"created_at": "2026-08-29T17:02:13Z",
"updated_at": "2026-08-29T17:04:41Z",
"pushed_at": "2026-08-29T17:04:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-19295.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": null,
"fork": false,
"created_at": "2026-08-28T20:59:16Z",
"updated_at": "2026-08-28T21:10:56Z",
"pushed_at": "2026-08-28T21:09:58Z",
"updated_at": "2026-08-29T14:50:20Z",
"pushed_at": "2026-08-29T14:50:03Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-19745.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1350733740,
"name": "CVE-2026-19745",
"full_name": "drbloop2000\/CVE-2026-19745",
"owner": {
"login": "drbloop2000",
"id": 322517856,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/322517856?v=4",
"html_url": "https:\/\/github.com\/drbloop2000",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/drbloop2000\/CVE-2026-19745",
"description": "Learn how I found my first two CVEs by pure accident.",
"fork": false,
"created_at": "2026-08-29T16:21:05Z",
"updated_at": "2026-08-29T16:59:04Z",
"pushed_at": "2026-08-29T16:36:35Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-2035703.json
+2 -2
View File
@@ -11,10 +11,10 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/danish1162\/CVE-2026-2035703-x300",
"description": "ZTE\/ZLT X300 TR-069 TargetFileName Improper Input Validation (CWE-20) - Coordinated Disclosure",
"description": "Tozed ZLT X300 5G CPE — Remote Root Code Execution via SDR Rogue Base Station (CVE-2026-2035703, CWE-78, CVSS 9.8) — Coordinated Disclosure",
"fork": false,
"created_at": "2026-08-14T03:03:26Z",
"updated_at": "2026-08-29T12:26:09Z",
"updated_at": "2026-08-29T13:30:29Z",
"pushed_at": "2026-08-29T12:25:30Z",
"stargazers_count": 0,
"watchers_count": 0,
2026/CVE-2026-20841.json
+2 -2
View File
@@ -412,8 +412,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.",
"fork": false,
"created_at": "2026-02-26T05:21:28Z",
"updated_at": "2026-08-27T00:21:14Z",
"pushed_at": "2026-08-27T00:21:09Z",
"updated_at": "2026-08-29T13:55:16Z",
"pushed_at": "2026-08-29T13:54:58Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-23989.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1350617453,
"name": "cve-2026-23989-opencloud-lab",
"full_name": "dinosn\/cve-2026-23989-opencloud-lab",
"owner": {
"login": "dinosn",
"id": 3851678,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/3851678?v=4",
"html_url": "https:\/\/github.com\/dinosn",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/dinosn\/cve-2026-23989-opencloud-lab",
"description": "Reproduction lab (A\/B Docker) for CVE-2026-23989 — OpenCloud \/ ownCloud Infinite Scale public-link scope-validation bypass in Reva",
"fork": false,
"created_at": "2026-08-29T13:43:34Z",
"updated_at": "2026-08-29T14:39:54Z",
"pushed_at": "2026-08-29T13:43:37Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-24061.json
+6 -6
View File
@@ -118,10 +118,10 @@
"description": "基于cve-2026-24061 telnet远程认证绕过漏洞的批量检测利用工具",
"fork": false,
"created_at": "2026-01-22T13:44:54Z",
"updated_at": "2026-06-22T11:04:55Z",
"updated_at": "2026-08-29T13:46:45Z",
"pushed_at": "2026-01-23T08:08:59Z",
"stargazers_count": 20,
"watchers_count": 20,
"stargazers_count": 21,
"watchers_count": 21,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -132,7 +132,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 20,
"watchers": 21,
"score": 0,
"subscribers_count": 0
},
@@ -1541,8 +1541,8 @@
"description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.",
"fork": false,
"created_at": "2026-02-03T19:46:10Z",
"updated_at": "2026-08-27T00:17:42Z",
"pushed_at": "2026-08-27T00:17:38Z",
"updated_at": "2026-08-29T13:52:02Z",
"pushed_at": "2026-08-29T13:51:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-31431.json
+2 -2
View File
@@ -7494,8 +7494,8 @@
"description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.",
"fork": false,
"created_at": "2026-05-05T04:58:21Z",
"updated_at": "2026-08-27T00:35:16Z",
"pushed_at": "2026-08-27T00:35:12Z",
"updated_at": "2026-08-29T14:13:04Z",
"pushed_at": "2026-08-29T14:07:48Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-3609.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-08-28T06:11:52Z",
"updated_at": "2026-08-29T16:14:48Z",
"pushed_at": "2026-08-18T12:25:25Z",
"stargazers_count": 925,
"watchers_count": 925,
"stargazers_count": 926,
"watchers_count": 926,
"has_discussions": false,
"forks_count": 136,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 136,
"watchers": 925,
"watchers": 926,
"score": 0,
"subscribers_count": 20
},
2026/CVE-2026-41089.json
+2 -2
View File
@@ -289,8 +289,8 @@
"description": "Scan Windows Domain Controllers for CVE-2026-41089 to detect unauthenticated remote code execution vulnerabilities in the Netlogon service.",
"fork": false,
"created_at": "2026-07-22T15:40:18Z",
"updated_at": "2026-08-27T00:47:26Z",
"pushed_at": "2026-08-27T00:42:07Z",
"updated_at": "2026-08-29T14:15:23Z",
"pushed_at": "2026-08-29T14:14:40Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-42533.json
+33
View File
@@ -349,5 +349,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1350645553,
"name": "cve-2026-42533",
"full_name": "FranklinF25\/cve-2026-42533",
"owner": {
"login": "FranklinF25",
"id": 96183613,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/96183613?v=4",
"html_url": "https:\/\/github.com\/FranklinF25",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/FranklinF25\/cve-2026-42533",
"description": null,
"fork": false,
"created_at": "2026-08-29T14:21:49Z",
"updated_at": "2026-08-29T19:18:51Z",
"pushed_at": "2026-08-29T19:18:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-42945.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": "exploit for CVE-2026-42945",
"fork": false,
"created_at": "2026-05-14T11:38:08Z",
"updated_at": "2026-08-28T13:37:56Z",
"updated_at": "2026-08-29T18:40:06Z",
"pushed_at": "2026-05-14T11:38:47Z",
"stargazers_count": 59,
"watchers_count": 59,
"stargazers_count": 60,
"watchers_count": 60,
"has_discussions": false,
"forks_count": 13,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 13,
"watchers": 59,
"watchers": 60,
"score": 0,
"subscribers_count": 1
},
2026/CVE-2026-43499.json
+20 -20
View File
@@ -348,12 +348,12 @@
"description": "GhostLock (CVE-2026-43499) kernel exploit for OnePlus devices with locked bootloader",
"fork": false,
"created_at": "2026-07-12T16:05:24Z",
"updated_at": "2026-08-29T10:49:08Z",
"pushed_at": "2026-08-21T19:19:03Z",
"updated_at": "2026-08-29T13:47:45Z",
"pushed_at": "2026-08-29T13:47:29Z",
"stargazers_count": 291,
"watchers_count": 291,
"has_discussions": false,
"forks_count": 63,
"forks_count": 62,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -368,7 +368,7 @@
"root"
],
"visibility": "public",
"forks": 63,
"forks": 62,
"watchers": 291,
"score": 0,
"subscribers_count": 10
@@ -1081,10 +1081,10 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
"updated_at": "2026-08-29T11:34:50Z",
"updated_at": "2026-08-29T18:24:56Z",
"pushed_at": "2026-08-24T07:49:18Z",
"stargazers_count": 947,
"watchers_count": 947,
"stargazers_count": 949,
"watchers_count": 949,
"has_discussions": false,
"forks_count": 190,
"allow_forking": true,
@@ -1095,7 +1095,7 @@
"topics": [],
"visibility": "public",
"forks": 190,
"watchers": 947,
"watchers": 949,
"score": 0,
"subscribers_count": 28
},
@@ -1727,12 +1727,12 @@
"description": "GhostLock One-Tap Execution App (CVE-2026-43499)",
"fork": false,
"created_at": "2026-07-29T05:04:25Z",
"updated_at": "2026-08-29T12:48:00Z",
"updated_at": "2026-08-29T19:01:43Z",
"pushed_at": "2026-08-29T09:19:38Z",
"stargazers_count": 548,
"watchers_count": 548,
"stargazers_count": 566,
"watchers_count": 566,
"has_discussions": true,
"forks_count": 168,
"forks_count": 175,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1740,8 +1740,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 168,
"watchers": 548,
"forks": 175,
"watchers": 566,
"score": 0,
"subscribers_count": 6
},
@@ -2070,8 +2070,8 @@
"description": "Jailbreak supported Google Pixel phones with CVE-2026-43499",
"fork": false,
"created_at": "2026-08-02T17:34:45Z",
"updated_at": "2026-08-29T13:06:35Z",
"pushed_at": "2026-08-29T13:05:57Z",
"updated_at": "2026-08-29T18:21:34Z",
"pushed_at": "2026-08-29T18:20:34Z",
"stargazers_count": 233,
"watchers_count": 233,
"has_discussions": false,
@@ -2280,7 +2280,7 @@
"stargazers_count": 59,
"watchers_count": 59,
"has_discussions": true,
"forks_count": 14,
"forks_count": 15,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2288,7 +2288,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 14,
"forks": 15,
"watchers": 59,
"score": 0,
"subscribers_count": 2
@@ -3408,8 +3408,8 @@
"description": "One-click root for vivo\/iQOO devices on locked bootloader | CVE-2026-43499 + KernelSU",
"fork": false,
"created_at": "2026-08-25T07:52:11Z",
"updated_at": "2026-08-29T12:05:48Z",
"pushed_at": "2026-08-29T12:04:31Z",
"updated_at": "2026-08-29T15:51:36Z",
"pushed_at": "2026-08-29T15:51:25Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-45585.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Backup BitLocker recovery keys and audit CVE-2026-45585 on Windows with a portable CLI and GUI tool.",
"fork": false,
"created_at": "2020-02-25T09:04:32Z",
"updated_at": "2026-08-29T09:17:18Z",
"pushed_at": "2026-08-29T09:13:39Z",
"updated_at": "2026-08-29T14:18:41Z",
"pushed_at": "2026-08-29T14:18:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-48907.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "PoC for CVE-2026-48907 - Joomla! JCE extension < 2.9.99.5 unauthenticated RCE",
"fork": false,
"created_at": "2026-06-11T13:14:16Z",
"updated_at": "2026-07-05T14:47:25Z",
"updated_at": "2026-08-29T16:01:16Z",
"pushed_at": "2026-06-11T14:38:26Z",
"stargazers_count": 15,
"watchers_count": 15,
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 15,
"watchers": 16,
"score": 0,
"subscribers_count": 2
},
2026/CVE-2026-62737.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "CVE-2026-62737 ExecutionContext.sys arbitrary kernel-call PoC",
"fork": false,
"created_at": "2026-08-18T20:16:03Z",
"updated_at": "2026-08-18T20:32:19Z",
"updated_at": "2026-08-29T14:20:04Z",
"pushed_at": "2026-08-18T20:27:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-62911.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "POC pre-auth RCE on Exchange",
"fork": false,
"created_at": "2026-08-22T04:49:33Z",
"updated_at": "2026-08-29T10:45:21Z",
"updated_at": "2026-08-29T18:08:17Z",
"pushed_at": "2026-08-22T04:49:54Z",
"stargazers_count": 138,
"watchers_count": 138,
"stargazers_count": 140,
"watchers_count": 140,
"has_discussions": false,
"forks_count": 22,
"allow_forking": true,
@@ -30,7 +30,7 @@
],
"visibility": "public",
"forks": 22,
"watchers": 138,
"watchers": 140,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-64560.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-08-03T12:36:27Z",
"updated_at": "2026-08-29T12:13:07Z",
"updated_at": "2026-08-29T14:23:12Z",
"pushed_at": "2026-08-03T12:39:41Z",
"stargazers_count": 42,
"watchers_count": 42,
"stargazers_count": 44,
"watchers_count": 44,
"has_discussions": false,
"forks_count": 13,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 13,
"watchers": 42,
"watchers": 44,
"score": 0,
"subscribers_count": 1
}
2026/CVE-2026-72898.json
+8 -8
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-72898",
"fork": false,
"created_at": "2026-08-12T13:54:46Z",
"updated_at": "2026-08-19T09:06:38Z",
"updated_at": "2026-08-29T14:01:37Z",
"pushed_at": "2026-08-13T08:25:52Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
@@ -263,10 +263,10 @@
"description": "Metabase SQLi",
"fork": false,
"created_at": "2026-08-27T06:51:58Z",
"updated_at": "2026-08-29T02:15:00Z",
"updated_at": "2026-08-29T15:11:51Z",
"pushed_at": "2026-08-27T08:46:32Z",
"stargazers_count": 16,
"watchers_count": 16,
"stargazers_count": 17,
"watchers_count": 17,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -277,7 +277,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 16,
"watchers": 17,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-75604.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "CVE-2026-75604 Next.js Windows RCE poc",
"fork": false,
"created_at": "2026-08-25T19:06:37Z",
"updated_at": "2026-08-29T11:10:54Z",
"updated_at": "2026-08-29T17:25:24Z",
"pushed_at": "2026-08-28T02:53:24Z",
"stargazers_count": 73,
"watchers_count": 73,
"stargazers_count": 75,
"watchers_count": 75,
"has_discussions": false,
"forks_count": 33,
"forks_count": 34,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 33,
"watchers": 73,
"forks": 34,
"watchers": 75,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-81578.json
+34 -1
View File
@@ -14,8 +14,41 @@
"description": "Security research tool for PaperCut CVE-2026-81578 & CVE-2026-82078",
"fork": false,
"created_at": "2026-08-29T13:12:33Z",
"updated_at": "2026-08-29T13:18:25Z",
"updated_at": "2026-08-29T14:44:35Z",
"pushed_at": "2026-08-29T13:17:23Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1350680202,
"name": "papercut-toolkit",
"full_name": "virologi-info\/papercut-toolkit",
"owner": {
"login": "virologi-info",
"id": 321040523,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/321040523?v=4",
"html_url": "https:\/\/github.com\/virologi-info",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/virologi-info\/papercut-toolkit",
"description": "#PaperCut CVE-2026-81578 + CVE-2026-82078 Defense Toolkit 2 3 A **defensive** toolkit to check and understand exposure to the chained",
"fork": false,
"created_at": "2026-08-29T15:08:43Z",
"updated_at": "2026-08-29T16:11:48Z",
"pushed_at": "2026-08-29T16:09:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
README.md
+28 -1
View File
@@ -3129,6 +3129,9 @@
- [hakaioffsec/CVE-2026-12191](https://github.com/hakaioffsec/CVE-2026-12191)
### CVE-2026-12243
- [morzelowski/CVE-2026-12243-NLTK-PoC](https://github.com/morzelowski/CVE-2026-12243-NLTK-PoC)
### CVE-2026-12277 (2026-07-07)
<code>The Frontend File Manager Plugin WordPress plugin through 23.6 does not validate a file path derived from user input before deleting the referenced file, allowing unauthenticated users to delete arbitrary files on the server (such as wp-config.php) when guest upload mode is enabled. Deleting wp-config.php forces the site into its setup routine, which can be leveraged toward a full site takeover.
@@ -3875,6 +3878,13 @@
- [h00die/POC-CVE-2026-19681](https://github.com/h00die/POC-CVE-2026-19681)
### CVE-2026-19745 (2026-08-13)
<code>A flaw has been found in Calix GigaSpire 26.1.0. Impacted is an unknown function of the file utilities_configurationsave.cgi of the component Web Management Interface. Executing a manipulation of the argument sessionKey can lead to denial of service. The attack can be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
</code>
- [drbloop2000/CVE-2026-19745](https://github.com/drbloop2000/CVE-2026-19745)
### CVE-2026-19843
- [gduma-phData/patch-CVE-2026-19843](https://github.com/gduma-phData/patch-CVE-2026-19843)
@@ -5341,6 +5351,13 @@
- [oscar-mine/CVE-2026-23980-Exploit](https://github.com/oscar-mine/CVE-2026-23980-Exploit)
### CVE-2026-23989 (2026-02-06)
<code>REVA is an interoperability platform. Prior to 2.42.3 and 2.40.3, a bug in the GRPC authorization middleware of the &quot;Reva&quot; component of OpenCloud allows a malicious user to bypass the scope verification of a public link. By exploiting this via the the &quot;archiver&quot; service this can be leveraged to create an archive (zip or tar-file) containing all resources that this creator of the public link has access to. This vulnerability is fixed in 2.42.3 and 2.40.3.
</code>
- [dinosn/cve-2026-23989-opencloud-lab](https://github.com/dinosn/cve-2026-23989-opencloud-lab)
### CVE-2026-24009 (2026-01-22)
<code>Docling Core (or docling-core) is a library that defines core data types and transformations in the document processing application Docling. A PyYAML-related Remote Code Execution (RCE) vulnerability, namely CVE-2020-14343, is exposed in docling-core starting in version 2.21.0 and prior to version 2.48.4, specifically only if the application uses pyyaml prior to version 5.4 and invokes `docling_core.types.doc.DoclingDocument.load_from_yaml()` passing it untrusted YAML data. The vulnerability has been patched in docling-core version 2.48.4. The fix mitigates the issue by switching `PyYAML` deserialization from `yaml.FullLoader` to `yaml.SafeLoader`, ensuring that untrusted data cannot trigger code execution. Users who cannot immediately upgrade docling-core can alternatively ensure that the installed version of PyYAML is 5.4 or greater.
@@ -10093,6 +10110,7 @@
- [imbas007/CVE-2026-42533](https://github.com/imbas007/CVE-2026-42533)
- [0xCyberstan/CVE-2026-42533-POC](https://github.com/0xCyberstan/CVE-2026-42533-POC)
- [Leeyoonjoo/CVE-2026-42533](https://github.com/Leeyoonjoo/CVE-2026-42533)
- [FranklinF25/cve-2026-42533](https://github.com/FranklinF25/cve-2026-42533)
### CVE-2026-42568 (2026-06-10)
@@ -14336,6 +14354,7 @@
</code>
- [yora1928/PaperCut-CVE-2026-81578-82078](https://github.com/yora1928/PaperCut-CVE-2026-81578-82078)
- [virologi-info/papercut-toolkit](https://github.com/virologi-info/papercut-toolkit)
### CVE-2026-82286 (2026-08-28)
@@ -30757,6 +30776,7 @@
</code>
- [FatfishIO/CVE-2024-12381-PoC](https://github.com/FatfishIO/CVE-2024-12381-PoC)
- [VictorNS69/CVE-2024-12381](https://github.com/VictorNS69/CVE-2024-12381)
### CVE-2024-12404 (2025-01-11)
@@ -51293,7 +51313,7 @@
<code>regex is an implementation of regular expressions for the Rust language. The regex crate features built-in mitigations to prevent denial of service attacks caused by untrusted regexes, or untrusted input matched by trusted regexes. Those (tunable) mitigations already provide sane defaults to prevent attacks. This guarantee is documented and it's considered part of the crate's API. Unfortunately a bug was discovered in the mitigations designed to prevent untrusted regexes to take an arbitrary amount of time during parsing, and it's possible to craft regexes that bypass such mitigations. This makes it possible to perform denial of service attacks by sending specially crafted regexes to services accepting user-controlled, untrusted regexes. All versions of the regex crate before or equal to 1.5.4 are affected by this issue. The fix is include starting from regex 1.5.5. All users accepting user-controlled regexes are recommended to upgrade immediately to the latest version of the regex crate. Unfortunately there is no fixed set of problematic regexes, as there are practically infinite regexes that could be crafted to exploit this vulnerability. Because of this, it us not recommend to deny known problematic regexes.
</code>
- [JPeisach/CVE-2022-24713-POC](https://github.com/JPeisach/CVE-2022-24713-POC)
- [jpeisach/CVE-2022-24713-POC](https://github.com/jpeisach/CVE-2022-24713-POC)
### CVE-2022-24715 (2022-03-08)
@@ -68790,6 +68810,13 @@
- [dorkerdevil/CVE-2020-28018](https://github.com/dorkerdevil/CVE-2020-28018)
- [zr0tt/CVE-2020-28018](https://github.com/zr0tt/CVE-2020-28018)
### CVE-2020-28022 (2021-05-06)
<code>Exim 4 before 4.94.2 has Improper Restriction of Write Operations within the Bounds of a Memory Buffer. This occurs when processing name=value pairs within MAIL FROM and RCPT TO commands.
</code>
- [t1b4n3/CVE-2020-28022](https://github.com/t1b4n3/CVE-2020-28022)
### CVE-2020-28032 (2020-10-31)
<code>WordPress before 5.5.2 mishandles deserialization requests in wp-includes/Requests/Utility/FilteredIterator.php.