From 06a1b27636b054097594e9ff18f0c9acc906b150 Mon Sep 17 00:00:00 2001 From: motikan2010-bot Date: Wed, 4 Nov 2026 10:50:27 +0900 Subject: [PATCH] Auto Update 2026/11/04 01:50:27 --- 2007/CVE-2007-2447.json | 33 ------ 2009/CVE-2009-4496.json | 12 +-- 2017/CVE-2017-5638.json | 8 +- 2018/CVE-2018-14847.json | 8 +- 2019/CVE-2019-11478.json | 35 ++++++ 2019/CVE-2019-17558.json | 8 +- 2020/CVE-2020-0796.json | 8 +- 2020/CVE-2020-14882.json | 16 +-- 2020/CVE-2020-14883.json | 8 +- 2021/CVE-2021-25646.json | 8 +- 2021/CVE-2021-4034.json | 33 ++++++ 2021/CVE-2021-42278.json | 8 +- 2022/CVE-2022-27254.json | 8 +- 2024/CVE-2024-10924.json | 4 +- 2024/CVE-2024-36104.json | 8 +- 2024/CVE-2024-41713.json | 4 +- 2025/CVE-2025-1974.json | 4 +- 2025/CVE-2025-24203.json | 8 +- 2025/CVE-2025-24813.json | 4 +- 2025/CVE-2025-41450.json | 12 +-- 2025/CVE-2025-55182.json | 37 ++++++- 2025/CVE-2025-60710.json | 8 +- 2025/CVE-2025-63888.json | 12 +-- 2025/CVE-2025-8088.json | 2 +- 2026/CVE-2026-109618.json | 218 +++++++++++++++++++++++++------------- 2026/CVE-2026-109619.json | 8 +- 2026/CVE-2026-111497.json | 41 ++++++- 2026/CVE-2026-112689.json | 35 ++++++ 2026/CVE-2026-19586.json | 8 +- 2026/CVE-2026-23870.json | 4 +- 2026/CVE-2026-31431.json | 22 ++-- 2026/CVE-2026-39987.json | 33 ++++++ 2026/CVE-2026-43284.json | 16 +-- 2026/CVE-2026-43499.json | 54 +++++----- 2026/CVE-2026-44578.json | 4 +- 2026/CVE-2026-49881.json | 8 +- 2026/CVE-2026-54121.json | 8 +- 2026/CVE-2026-63030.json | 8 +- 2026/CVE-2026-64560.json | 33 ------ 2026/CVE-2026-80587.json | 35 ++++++ 2026/CVE-2026-84473.json | 35 ++++++ 2026/CVE-2026-86060.json | 12 +-- 2026/CVE-2026-92183.json | 40 +++++++ 2026/CVE-2026-97229.json | 8 +- 2026/CVE-2026-97798.json | 8 +- 2026/CVE-2026-98260.json | 65 +++++++++--- 2026/CVE-2026-98432.json | 120 ++++++++++++++++----- 47 files changed, 770 insertions(+), 349 deletions(-) create mode 100644 2019/CVE-2019-11478.json create mode 100644 2026/CVE-2026-112689.json create mode 100644 2026/CVE-2026-80587.json create mode 100644 2026/CVE-2026-84473.json create mode 100644 2026/CVE-2026-92183.json diff --git a/2007/CVE-2007-2447.json b/2007/CVE-2007-2447.json index c11bb732c0..fbaa5815f2 100644 --- a/2007/CVE-2007-2447.json +++ b/2007/CVE-2007-2447.json @@ -1268,39 +1268,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1252956674, - "name": "S22_The_Verification_Protocol", - "full_name": "DesmondHinds94\/S22_The_Verification_Protocol", - "owner": { - "login": "DesmondHinds94", - "id": 264073450, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/264073450?v=4", - "html_url": "https:\/\/github.com\/DesmondHinds94", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/DesmondHinds94\/S22_The_Verification_Protocol", - "description": "P1 W8 S22 - Metasploit Samba CVE-2007-2447 Exploitation", - "fork": false, - "created_at": "2026-05-29T03:14:03Z", - "updated_at": "2026-05-29T03:14:09Z", - "pushed_at": "2026-05-29T03:14:05Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1281073362, "name": "metasploitable2-exploitation-metasploit", diff --git a/2009/CVE-2009-4496.json b/2009/CVE-2009-4496.json index e04a739495..f6c3a8c206 100644 --- a/2009/CVE-2009-4496.json +++ b/2009/CVE-2009-4496.json @@ -1,8 +1,8 @@ [ { "id": 1332482679, - "name": "boa-cve-2009-4496-analysis", - "full_name": "enriquenegri-cyberlaw\/boa-cve-2009-4496-analysis", + "name": "boa-webserver-log-escape-injection-cve-2009-4496", + "full_name": "enriquenegri-cyberlaw\/boa-webserver-log-escape-injection-cve-2009-4496", "owner": { "login": "enriquenegri-cyberlaw", "id": 271627989, @@ -10,12 +10,12 @@ "html_url": "https:\/\/github.com\/enriquenegri-cyberlaw", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/enriquenegri-cyberlaw\/boa-cve-2009-4496-analysis", - "description": "Defensive analysis of CVE-2009-4496 in Boa 0.94.14rc21, including source-code review, patch analysis, severity assessment, and ethical scope.", + "html_url": "https:\/\/github.com\/enriquenegri-cyberlaw\/boa-webserver-log-escape-injection-cve-2009-4496", + "description": "Defensive analysis of CVE-2009-4496: terminal escape-sequence injection into Boa web server logs — source review, patch analysis and reproducible checks.", "fork": false, "created_at": "2026-08-12T22:11:12Z", - "updated_at": "2026-08-14T23:00:26Z", - "pushed_at": "2026-08-14T23:00:11Z", + "updated_at": "2026-11-03T20:14:19Z", + "pushed_at": "2026-11-03T20:14:15Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2017/CVE-2017-5638.json b/2017/CVE-2017-5638.json index 357d391e55..b817b57697 100644 --- a/2017/CVE-2017-5638.json +++ b/2017/CVE-2017-5638.json @@ -455,10 +455,10 @@ "description": "An exploit for Apache Struts CVE-2017-5638", "fork": false, "created_at": "2017-03-12T02:02:25Z", - "updated_at": "2026-10-22T12:17:26Z", + "updated_at": "2026-11-03T22:13:06Z", "pushed_at": "2018-05-21T18:33:26Z", - "stargazers_count": 443, - "watchers_count": 443, + "stargazers_count": 444, + "watchers_count": 444, "has_discussions": false, "forks_count": 133, "allow_forking": true, @@ -475,7 +475,7 @@ ], "visibility": "public", "forks": 133, - "watchers": 443, + "watchers": 444, "score": 0, "subscribers_count": 21 }, diff --git a/2018/CVE-2018-14847.json b/2018/CVE-2018-14847.json index 4abd91268d..389a07a98c 100644 --- a/2018/CVE-2018-14847.json +++ b/2018/CVE-2018-14847.json @@ -389,10 +389,10 @@ "description": "Analysis and PoC for CVE-2018-14847, MikroTik RouterOS Winbox information disclosure vulnerability allowing unauthenticated read access to the credential database.", "fork": false, "created_at": "2026-04-27T13:36:25Z", - "updated_at": "2026-04-29T15:48:16Z", + "updated_at": "2026-11-03T21:49:37Z", "pushed_at": "2026-04-29T15:42:37Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -406,7 +406,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, diff --git a/2019/CVE-2019-11478.json b/2019/CVE-2019-11478.json new file mode 100644 index 0000000000..2f0bd0b3c2 --- /dev/null +++ b/2019/CVE-2019-11478.json @@ -0,0 +1,35 @@ +[ + { + "id": 1444719477, + "name": "CVE-2019-11478", + "full_name": "jinjucat\/CVE-2019-11478", + "owner": { + "login": "jinjucat", + "id": 119899393, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/119899393?v=4", + "html_url": "https:\/\/github.com\/jinjucat", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/jinjucat\/CVE-2019-11478", + "description": "scripts for vuln versions", + "fork": false, + "created_at": "2026-11-03T19:06:36Z", + "updated_at": "2026-11-03T19:07:16Z", + "pushed_at": "2026-11-03T19:07:11Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2019/CVE-2019-17558.json b/2019/CVE-2019-17558.json index eecc75d49d..03e85abfeb 100644 --- a/2019/CVE-2019-17558.json +++ b/2019/CVE-2019-17558.json @@ -47,10 +47,10 @@ "description": "Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340", "fork": false, "created_at": "2020-04-01T09:33:35Z", - "updated_at": "2026-11-03T11:27:20Z", + "updated_at": "2026-11-03T20:42:46Z", "pushed_at": "2021-04-04T09:13:57Z", - "stargazers_count": 4293, - "watchers_count": 4293, + "stargazers_count": 4294, + "watchers_count": 4294, "has_discussions": false, "forks_count": 1077, "allow_forking": true, @@ -81,7 +81,7 @@ ], "visibility": "public", "forks": 1077, - "watchers": 4293, + "watchers": 4294, "score": 0, "subscribers_count": 148 }, diff --git a/2020/CVE-2020-0796.json b/2020/CVE-2020-0796.json index a0b5ea5eed..3d5eb304b8 100644 --- a/2020/CVE-2020-0796.json +++ b/2020/CVE-2020-0796.json @@ -146,10 +146,10 @@ "description": "Scanner for CVE-2020-0796 - SMBv3 RCE", "fork": false, "created_at": "2020-03-11T15:21:27Z", - "updated_at": "2026-10-30T12:15:22Z", + "updated_at": "2026-11-03T20:42:46Z", "pushed_at": "2020-10-01T08:36:29Z", - "stargazers_count": 722, - "watchers_count": 722, + "stargazers_count": 723, + "watchers_count": 723, "has_discussions": false, "forks_count": 186, "allow_forking": true, @@ -162,7 +162,7 @@ ], "visibility": "public", "forks": 186, - "watchers": 722, + "watchers": 723, "score": 0, "subscribers_count": 1 }, diff --git a/2020/CVE-2020-14882.json b/2020/CVE-2020-14882.json index 86239edf52..482af8581d 100644 --- a/2020/CVE-2020-14882.json +++ b/2020/CVE-2020-14882.json @@ -14,10 +14,10 @@ "description": "Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340", "fork": false, "created_at": "2020-04-01T09:33:35Z", - "updated_at": "2026-11-03T11:27:20Z", + "updated_at": "2026-11-03T20:42:46Z", "pushed_at": "2021-04-04T09:13:57Z", - "stargazers_count": 4293, - "watchers_count": 4293, + "stargazers_count": 4294, + "watchers_count": 4294, "has_discussions": false, "forks_count": 1077, "allow_forking": true, @@ -48,7 +48,7 @@ ], "visibility": "public", "forks": 1077, - "watchers": 4293, + "watchers": 4294, "score": 0, "subscribers_count": 148 }, @@ -67,10 +67,10 @@ "description": "CVE-2020–14882、CVE-2020–14883", "fork": false, "created_at": "2020-10-28T11:43:37Z", - "updated_at": "2026-10-31T16:57:26Z", + "updated_at": "2026-11-03T20:42:49Z", "pushed_at": "2020-11-16T04:23:09Z", - "stargazers_count": 286, - "watchers_count": 286, + "stargazers_count": 287, + "watchers_count": 287, "has_discussions": false, "forks_count": 60, "allow_forking": true, @@ -81,7 +81,7 @@ "topics": [], "visibility": "public", "forks": 60, - "watchers": 286, + "watchers": 287, "score": 0, "subscribers_count": 4 }, diff --git a/2020/CVE-2020-14883.json b/2020/CVE-2020-14883.json index 3f77899677..4dc5d75dbf 100644 --- a/2020/CVE-2020-14883.json +++ b/2020/CVE-2020-14883.json @@ -148,10 +148,10 @@ "description": "Alibaba-Nacos-Unauthorized\/ApacheDruid-RCE_CVE-2021-25646\/MS-Exchange-SSRF-CVE-2021-26885\/Oracle-WebLogic-CVE-2021-2109_RCE\/RG-CNVD-2021-14536\/RJ-SSL-VPN-UltraVires\/Redis-Unauthorized-RCE\/TDOA-V11.7-GetOnlineCookie\/VMware-vCenter-GetAnyFile\/yongyou-GRP-U8-XXE\/Oracle-WebLogic-CVE-2020-14883\/Oracle-WebLogic-CVE-2020-14882\/Apache-Solr-GetAnyFile\/F5-BIG-IP-CVE-2021-22986\/Sonicwall-SSL-VPN-RCE\/GitLab-Graphql-CNVD-2021-14193\/D-Link-DCS-CVE-2020-25078\/WLAN-AP-WEA453e-RCE\/360TianQing-Unauthorized\/360TianQing-SQLinjection\/FanWeiOA-V8-SQLinjection\/QiZhiBaoLeiJi-AnyUserLogin\/QiAnXin-WangKangFirewall-RCE\/金山-V8-终端安全系统\/NCCloud-SQLinjection\/ShowDoc-RCE", "fork": false, "created_at": "2021-03-11T22:49:17Z", - "updated_at": "2026-10-31T16:55:31Z", + "updated_at": "2026-11-03T20:42:51Z", "pushed_at": "2023-05-11T14:36:58Z", - "stargazers_count": 1070, - "watchers_count": 1070, + "stargazers_count": 1071, + "watchers_count": 1071, "has_discussions": false, "forks_count": 311, "allow_forking": true, @@ -166,7 +166,7 @@ ], "visibility": "public", "forks": 311, - "watchers": 1070, + "watchers": 1071, "score": 0, "subscribers_count": 34 }, diff --git a/2021/CVE-2021-25646.json b/2021/CVE-2021-25646.json index cc17cf8ff7..560f9f2b5a 100644 --- a/2021/CVE-2021-25646.json +++ b/2021/CVE-2021-25646.json @@ -146,10 +146,10 @@ "description": "Alibaba-Nacos-Unauthorized\/ApacheDruid-RCE_CVE-2021-25646\/MS-Exchange-SSRF-CVE-2021-26885\/Oracle-WebLogic-CVE-2021-2109_RCE\/RG-CNVD-2021-14536\/RJ-SSL-VPN-UltraVires\/Redis-Unauthorized-RCE\/TDOA-V11.7-GetOnlineCookie\/VMware-vCenter-GetAnyFile\/yongyou-GRP-U8-XXE\/Oracle-WebLogic-CVE-2020-14883\/Oracle-WebLogic-CVE-2020-14882\/Apache-Solr-GetAnyFile\/F5-BIG-IP-CVE-2021-22986\/Sonicwall-SSL-VPN-RCE\/GitLab-Graphql-CNVD-2021-14193\/D-Link-DCS-CVE-2020-25078\/WLAN-AP-WEA453e-RCE\/360TianQing-Unauthorized\/360TianQing-SQLinjection\/FanWeiOA-V8-SQLinjection\/QiZhiBaoLeiJi-AnyUserLogin\/QiAnXin-WangKangFirewall-RCE\/金山-V8-终端安全系统\/NCCloud-SQLinjection\/ShowDoc-RCE", "fork": false, "created_at": "2021-03-11T22:49:17Z", - "updated_at": "2026-10-31T16:55:31Z", + "updated_at": "2026-11-03T20:42:51Z", "pushed_at": "2023-05-11T14:36:58Z", - "stargazers_count": 1070, - "watchers_count": 1070, + "stargazers_count": 1071, + "watchers_count": 1071, "has_discussions": false, "forks_count": 311, "allow_forking": true, @@ -164,7 +164,7 @@ ], "visibility": "public", "forks": 311, - "watchers": 1070, + "watchers": 1071, "score": 0, "subscribers_count": 34 }, diff --git a/2021/CVE-2021-4034.json b/2021/CVE-2021-4034.json index af0624d452..e6a82f55f8 100644 --- a/2021/CVE-2021-4034.json +++ b/2021/CVE-2021-4034.json @@ -6227,5 +6227,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1444845222, + "name": "CVE-2021-4034", + "full_name": "eshkoreee\/CVE-2021-4034", + "owner": { + "login": "eshkoreee", + "id": 262967849, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/262967849?v=4", + "html_url": "https:\/\/github.com\/eshkoreee", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/eshkoreee\/CVE-2021-4034", + "description": "я разобрал уязвимость называемую в простонародии Pwnkit в учебных целях и написал к нему PoC. использовать строго в учебных целях", + "fork": false, + "created_at": "2026-11-03T21:21:35Z", + "updated_at": "2026-11-03T22:25:36Z", + "pushed_at": "2026-11-03T22:25:32Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2021/CVE-2021-42278.json b/2021/CVE-2021-42278.json index 3f25ab559a..e6c119ab2a 100644 --- a/2021/CVE-2021-42278.json +++ b/2021/CVE-2021-42278.json @@ -52,10 +52,10 @@ "description": "Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user ", "fork": false, "created_at": "2021-12-13T10:28:12Z", - "updated_at": "2026-10-26T16:55:49Z", + "updated_at": "2026-11-03T20:25:39Z", "pushed_at": "2023-01-29T03:31:27Z", - "stargazers_count": 1027, - "watchers_count": 1027, + "stargazers_count": 1028, + "watchers_count": 1028, "has_discussions": false, "forks_count": 137, "allow_forking": true, @@ -66,7 +66,7 @@ "topics": [], "visibility": "public", "forks": 137, - "watchers": 1027, + "watchers": 1028, "score": 0, "subscribers_count": 13 }, diff --git a/2022/CVE-2022-27254.json b/2022/CVE-2022-27254.json index 65aa2258a1..8f08cf70e7 100644 --- a/2022/CVE-2022-27254.json +++ b/2022/CVE-2022-27254.json @@ -14,10 +14,10 @@ "description": "PoC for vulnerability in Honda's Remote Keyless System(CVE-2022-27254)", "fork": false, "created_at": "2022-03-23T15:03:09Z", - "updated_at": "2026-11-03T03:46:48Z", + "updated_at": "2026-11-03T20:58:40Z", "pushed_at": "2022-03-26T05:52:15Z", - "stargazers_count": 460, - "watchers_count": 460, + "stargazers_count": 461, + "watchers_count": 461, "has_discussions": false, "forks_count": 53, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 53, - "watchers": 460, + "watchers": 461, "score": 0, "subscribers_count": 17 } diff --git a/2024/CVE-2024-10924.json b/2024/CVE-2024-10924.json index 6f4cf50a0a..ada4864790 100644 --- a/2024/CVE-2024-10924.json +++ b/2024/CVE-2024-10924.json @@ -681,8 +681,8 @@ "description": "Ferramentas de auditoria em segurança da informação, reconhecimento de superfície com RDAP\/DNS e análise defensiva web (CVE-2024-10924).", "fork": false, "created_at": "2026-10-16T21:08:09Z", - "updated_at": "2026-10-18T12:04:42Z", - "pushed_at": "2026-10-18T12:04:38Z", + "updated_at": "2026-11-03T23:41:52Z", + "pushed_at": "2026-11-03T23:41:48Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2024/CVE-2024-36104.json b/2024/CVE-2024-36104.json index e2f4af2e43..c42f120a8a 100644 --- a/2024/CVE-2024-36104.json +++ b/2024/CVE-2024-36104.json @@ -47,10 +47,10 @@ "description": "PoC for CVE-2024-36104 — unauthenticated Groovy RCE in Apache OFBiz (<18.12.14) via \/%2e\/%2e\/ view path traversal to ProgramExport", "fork": false, "created_at": "2026-07-29T19:59:36Z", - "updated_at": "2026-07-29T21:39:57Z", + "updated_at": "2026-11-03T21:59:37Z", "pushed_at": "2026-07-29T21:15:58Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -68,7 +68,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 3, + "watchers": 4, "score": 0, "subscribers_count": 0 } diff --git a/2024/CVE-2024-41713.json b/2024/CVE-2024-41713.json index 4ae743e56c..e4fee06689 100644 --- a/2024/CVE-2024-41713.json +++ b/2024/CVE-2024-41713.json @@ -146,8 +146,8 @@ "description": "Mitel MiCollab Authentication Bypass to Arbitrary File Read", "fork": false, "created_at": "2025-05-18T08:12:40Z", - "updated_at": "2025-05-18T08:16:21Z", - "pushed_at": "2025-05-18T08:16:18Z", + "updated_at": "2026-11-03T23:21:19Z", + "pushed_at": "2026-11-03T23:21:14Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-1974.json b/2025/CVE-2025-1974.json index b972de7520..abc02b1840 100644 --- a/2025/CVE-2025-1974.json +++ b/2025/CVE-2025-1974.json @@ -685,8 +685,8 @@ "description": "Kubernetes Ingress-nginx RCE (IngressNightmare)", "fork": false, "created_at": "2025-12-10T09:26:46Z", - "updated_at": "2025-12-10T09:28:36Z", - "pushed_at": "2025-12-10T09:28:32Z", + "updated_at": "2026-11-03T23:21:11Z", + "pushed_at": "2026-11-03T23:21:08Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-24203.json b/2025/CVE-2025-24203.json index 8a0e9be02b..4c632bf2da 100644 --- a/2025/CVE-2025-24203.json +++ b/2025/CVE-2025-24203.json @@ -14,10 +14,10 @@ "description": "Simple customization toolbox, utilizing CVE-2025-24203. Supports iOS 16.0 - iOS 18.3.2.", "fork": false, "created_at": "2025-05-09T07:18:55Z", - "updated_at": "2026-10-25T14:30:24Z", + "updated_at": "2026-11-03T20:42:37Z", "pushed_at": "2026-09-07T04:53:41Z", - "stargazers_count": 427, - "watchers_count": 427, + "stargazers_count": 428, + "watchers_count": 428, "has_discussions": false, "forks_count": 40, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 40, - "watchers": 427, + "watchers": 428, "score": 0, "subscribers_count": 11 }, diff --git a/2025/CVE-2025-24813.json b/2025/CVE-2025-24813.json index ca578e510e..1c79508d47 100644 --- a/2025/CVE-2025-24813.json +++ b/2025/CVE-2025-24813.json @@ -1499,8 +1499,8 @@ "description": "Apache Tomcat Deserialization RCE", "fork": false, "created_at": "2025-12-10T09:53:44Z", - "updated_at": "2025-12-10T09:55:00Z", - "pushed_at": "2025-12-10T09:54:56Z", + "updated_at": "2026-11-03T23:21:14Z", + "pushed_at": "2026-11-03T23:21:10Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-41450.json b/2025/CVE-2025-41450.json index 6a7744feb6..ace0302b3f 100644 --- a/2025/CVE-2025-41450.json +++ b/2025/CVE-2025-41450.json @@ -19,7 +19,7 @@ "stargazers_count": 9, "watchers_count": 9, "has_discussions": false, - "forks_count": 1, + "forks_count": 2, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 1, + "forks": 2, "watchers": 9, "score": 0, "subscribers_count": 0 @@ -47,10 +47,10 @@ "description": "CVE-2025-41450", "fork": false, "created_at": "2026-10-13T15:16:35Z", - "updated_at": "2026-10-20T05:30:38Z", + "updated_at": "2026-11-04T01:35:15Z", "pushed_at": "2026-10-14T07:50:38Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, diff --git a/2025/CVE-2025-55182.json b/2025/CVE-2025-55182.json index de49462a06..ce313a1bb1 100644 --- a/2025/CVE-2025-55182.json +++ b/2025/CVE-2025-55182.json @@ -8237,8 +8237,8 @@ "description": "Next.js RCE via React Server Functions", "fork": false, "created_at": "2025-12-10T08:39:54Z", - "updated_at": "2025-12-10T08:43:33Z", - "pushed_at": "2025-12-10T08:43:30Z", + "updated_at": "2026-11-03T23:21:17Z", + "pushed_at": "2026-11-03T23:21:12Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -15953,5 +15953,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1444875125, + "name": "CVE-2025-55182-React-Server-Components-Flight-React2Shell-", + "full_name": "Certbn\/CVE-2025-55182-React-Server-Components-Flight-React2Shell-", + "owner": { + "login": "Certbn", + "id": 257466493, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/257466493?v=4", + "html_url": "https:\/\/github.com\/Certbn", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Certbn\/CVE-2025-55182-React-Server-Components-Flight-React2Shell-", + "description": null, + "fork": false, + "created_at": "2026-11-03T21:57:14Z", + "updated_at": "2026-11-03T21:57:54Z", + "pushed_at": "2026-11-03T21:57:50Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2025/CVE-2025-60710.json b/2025/CVE-2025-60710.json index 739d373379..83bdb57bfd 100644 --- a/2025/CVE-2025-60710.json +++ b/2025/CVE-2025-60710.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2025-11-11T18:08:48Z", - "updated_at": "2026-08-20T09:49:38Z", + "updated_at": "2026-11-04T00:12:50Z", "pushed_at": "2025-11-11T18:23:46Z", - "stargazers_count": 6, - "watchers_count": 6, + "stargazers_count": 7, + "watchers_count": 7, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 6, + "watchers": 7, "score": 0, "subscribers_count": 0 }, diff --git a/2025/CVE-2025-63888.json b/2025/CVE-2025-63888.json index 9415f8622e..c92e822ee7 100644 --- a/2025/CVE-2025-63888.json +++ b/2025/CVE-2025-63888.json @@ -14,12 +14,12 @@ "description": "Security research tool for detecting and testing CVE-2025-63888 (ThinkPHP 5.0.24 File Inclusion RCE vulnerability)", "fork": false, "created_at": "2025-11-21T00:25:31Z", - "updated_at": "2026-05-09T00:59:32Z", + "updated_at": "2026-11-04T01:07:52Z", "pushed_at": "2025-11-21T00:25:40Z", - "stargazers_count": 10, - "watchers_count": 10, + "stargazers_count": 11, + "watchers_count": 11, "has_discussions": false, - "forks_count": 4, + "forks_count": 5, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,8 +27,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 4, - "watchers": 10, + "forks": 5, + "watchers": 11, "score": 0, "subscribers_count": 0 } diff --git a/2025/CVE-2025-8088.json b/2025/CVE-2025-8088.json index 4a619f8214..00b0b8d709 100644 --- a/2025/CVE-2025-8088.json +++ b/2025/CVE-2025-8088.json @@ -48,7 +48,7 @@ "fork": false, "created_at": "2025-08-11T20:43:36Z", "updated_at": "2026-08-14T16:23:13Z", - "pushed_at": "2025-08-11T20:48:33Z", + "pushed_at": "2026-11-03T23:02:36Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2026/CVE-2026-109618.json b/2026/CVE-2026-109618.json index 2c0fe53b70..56a1b2b898 100644 --- a/2026/CVE-2026-109618.json +++ b/2026/CVE-2026-109618.json @@ -672,12 +672,12 @@ "description": "CVE-2026-109618\/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.", "fork": false, "created_at": "2026-10-21T07:55:16Z", - "updated_at": "2026-11-03T14:08:02Z", + "updated_at": "2026-11-04T01:36:06Z", "pushed_at": "2026-10-28T23:21:57Z", - "stargazers_count": 1928, - "watchers_count": 1928, + "stargazers_count": 1929, + "watchers_count": 1929, "has_discussions": false, - "forks_count": 650, + "forks_count": 648, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -700,8 +700,8 @@ "wordpress-security" ], "visibility": "public", - "forks": 650, - "watchers": 1928, + "forks": 648, + "watchers": 1929, "score": 0, "subscribers_count": 8 }, @@ -973,10 +973,10 @@ "description": "Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 \/ CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.", "fork": false, "created_at": "2026-10-21T08:31:43Z", - "updated_at": "2026-11-03T18:10:58Z", + "updated_at": "2026-11-03T22:01:26Z", "pushed_at": "2026-10-22T07:19:20Z", - "stargazers_count": 1059, - "watchers_count": 1059, + "stargazers_count": 1060, + "watchers_count": 1060, "has_discussions": false, "forks_count": 268, "allow_forking": true, @@ -987,7 +987,7 @@ "topics": [], "visibility": "public", "forks": 268, - "watchers": 1059, + "watchers": 1060, "score": 0, "subscribers_count": 41 }, @@ -2831,43 +2831,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1428479882, - "name": "php2shell-CVE-2026-109618-CVE-2026-109619-Dorks", - "full_name": "zerbaliy3v\/php2shell-CVE-2026-109618-CVE-2026-109619-Dorks", - "owner": { - "login": "zerbaliy3v", - "id": 128548437, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/128548437?v=4", - "html_url": "https:\/\/github.com\/zerbaliy3v", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/zerbaliy3v\/php2shell-CVE-2026-109618-CVE-2026-109619-Dorks", - "description": "PHP2Shell PHP CVE-2026-109618 and CVE-2026-109619 dorks", - "fork": false, - "created_at": "2026-10-21T14:12:22Z", - "updated_at": "2026-10-21T14:54:41Z", - "pushed_at": "2026-10-21T14:43:43Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2026-109618", - "cve-2026-109619", - "php2shell" - ], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, { "id": 1428480734, "name": "php2shell-poc-1", @@ -3226,6 +3189,39 @@ "score": 0, "subscribers_count": 0 }, + { + "id": 1428521478, + "name": "php2shell-CVE-2026-109618-CVE-2026-109619-Dorks", + "full_name": "mxxnknght\/php2shell-CVE-2026-109618-CVE-2026-109619-Dorks", + "owner": { + "login": "mxxnknght", + "id": 213190319, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/213190319?v=4", + "html_url": "https:\/\/github.com\/mxxnknght", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/mxxnknght\/php2shell-CVE-2026-109618-CVE-2026-109619-Dorks", + "description": "PHP2Shell PHP CVE-2026-109618 and CVE-2026-109619 dorks", + "fork": false, + "created_at": "2026-10-21T14:45:17Z", + "updated_at": "2026-10-21T14:45:17Z", + "pushed_at": "2026-10-21T14:43:43Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, { "id": 1428525040, "name": "php2shell-patches", @@ -3241,10 +3237,10 @@ "description": "php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.", "fork": false, "created_at": "2026-10-21T14:48:05Z", - "updated_at": "2026-11-03T09:30:00Z", + "updated_at": "2026-11-04T00:46:09Z", "pushed_at": "2026-10-30T22:06:41Z", - "stargazers_count": 128, - "watchers_count": 128, + "stargazers_count": 129, + "watchers_count": 129, "has_discussions": false, "forks_count": 22, "allow_forking": true, @@ -3272,7 +3268,7 @@ ], "visibility": "public", "forks": 22, - "watchers": 128, + "watchers": 129, "score": 0, "subscribers_count": 3 }, @@ -3521,7 +3517,7 @@ "stargazers_count": 152, "watchers_count": 152, "has_discussions": false, - "forks_count": 91, + "forks_count": 90, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -3529,7 +3525,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 91, + "forks": 90, "watchers": 152, "score": 0, "subscribers_count": 0 @@ -7710,10 +7706,10 @@ "description": "CVE-2026-109618 \/ CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.", "fork": false, "created_at": "2026-10-21T22:53:01Z", - "updated_at": "2026-11-03T04:34:02Z", + "updated_at": "2026-11-04T00:48:49Z", "pushed_at": "2026-10-30T16:04:28Z", - "stargazers_count": 277, - "watchers_count": 277, + "stargazers_count": 279, + "watchers_count": 279, "has_discussions": false, "forks_count": 77, "allow_forking": true, @@ -7745,7 +7741,7 @@ ], "visibility": "public", "forks": 77, - "watchers": 277, + "watchers": 279, "score": 0, "subscribers_count": 2 }, @@ -8037,8 +8033,8 @@ "description": "Rebuilds of patched ondrej\/php PHP 8.1, 8.0, 7.4, 7.3 and 5.6 packages for Ubuntu 20.04 (CVE-2026-109618, CVE-2026-109619)", "fork": false, "created_at": "2026-10-22T00:05:52Z", - "updated_at": "2026-10-23T07:45:41Z", - "pushed_at": "2026-10-22T01:28:01Z", + "updated_at": "2026-11-04T01:09:26Z", + "pushed_at": "2026-11-04T01:09:22Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -14059,8 +14055,8 @@ "description": null, "fork": false, "created_at": "2026-10-22T14:33:02Z", - "updated_at": "2026-10-22T14:43:49Z", - "pushed_at": "2026-10-22T14:33:29Z", + "updated_at": "2026-11-03T22:05:03Z", + "pushed_at": "2026-11-03T22:04:58Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -16247,10 +16243,10 @@ "description": "A plain-language security check for AllStarLink 3 (ASL3) nodes. Checks for the PHP2Shell flaws (CVE-2026-109618, CVE-2026-109619), pending updates, exposure, and SSH settings.", "fork": false, "created_at": "2026-10-22T19:49:26Z", - "updated_at": "2026-11-01T17:12:53Z", - "pushed_at": "2026-11-01T17:16:07Z", - "stargazers_count": 0, - "watchers_count": 0, + "updated_at": "2026-11-03T22:35:20Z", + "pushed_at": "2026-11-03T22:36:24Z", + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -16261,7 +16257,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -17862,10 +17858,10 @@ "description": "PHP2Shell: version-aware research toolkit for CVE-2026-109618 \/ CVE-2026-109619 — pre-auth RCE in PHP session.upload_progress (mod_php). Build profiles, labs, heap calibration and detection guidance for authorized security testing.", "fork": false, "created_at": "2026-10-23T03:46:10Z", - "updated_at": "2026-11-02T18:32:49Z", + "updated_at": "2026-11-03T21:25:31Z", "pushed_at": "2026-10-23T04:15:21Z", - "stargazers_count": 15, - "watchers_count": 15, + "stargazers_count": 14, + "watchers_count": 14, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -17876,7 +17872,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 15, + "watchers": 14, "score": 0, "subscribers_count": 2 }, @@ -21873,8 +21869,8 @@ "description": "Detection and response package for php2shell (CVE-2026-109618 \/ CVE-2026-109619): Suricata, Zeek, YARA, Sigma, ModSecurity rules, hunting queries, SOC triage, patch matrix. No exploit code.", "fork": false, "created_at": "2026-10-24T13:28:54Z", - "updated_at": "2026-11-02T19:57:18Z", - "pushed_at": "2026-11-02T19:57:13Z", + "updated_at": "2026-11-03T22:56:06Z", + "pushed_at": "2026-11-03T22:56:02Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -27208,8 +27204,49 @@ "description": "Non-destructive, probabilistic finder for hosts exposed to php2shell (CVE-2026-109618\/109619). Blue-team triage; sends no exploit traffic. Authorised use only.", "fork": false, "created_at": "2026-11-03T08:43:05Z", - "updated_at": "2026-11-03T08:43:14Z", - "pushed_at": "2026-11-03T08:43:09Z", + "updated_at": "2026-11-04T00:06:33Z", + "pushed_at": "2026-11-04T00:06:45Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "blue-team", + "cve-2026-109618", + "cve-2026-109619", + "incident-response", + "php", + "security", + "vulnerability-scanner" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1444932716, + "name": "the-php2shell-recipe", + "full_name": "Danyw24\/the-php2shell-recipe", + "owner": { + "login": "Danyw24", + "id": 81335686, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/81335686?v=4", + "html_url": "https:\/\/github.com\/Danyw24", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Danyw24\/the-php2shell-recipe", + "description": "One recipe, any unpatched build → RCE in ~30 minutes | CVE-2026-109618 research lab: 4-stage chain gdb-verified, 3 RCE builds (8.3.35\/8.4.26\/8.5.11), adaptation pipeline + profile DB", + "fork": false, + "created_at": "2026-11-03T23:14:10Z", + "updated_at": "2026-11-03T23:14:23Z", + "pushed_at": "2026-11-03T23:14:16Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -27225,5 +27262,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1444996659, + "name": "php2shell", + "full_name": "SquidSec\/php2shell", + "owner": { + "login": "SquidSec", + "id": 308781161, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/308781161?v=4", + "html_url": "https:\/\/github.com\/SquidSec", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/SquidSec\/php2shell", + "description": "php2shell (CVE-2026-109618 \/ CVE-2026-109619) — deliberately vulnerable PHP 8.4.26 lab with a patched 8.4.27 control and a working proof-of-concept that lands a shell as www-data.", + "fork": false, + "created_at": "2026-11-04T00:47:43Z", + "updated_at": "2026-11-04T01:37:21Z", + "pushed_at": "2026-11-04T00:52:47Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-109619.json b/2026/CVE-2026-109619.json index 928848f203..606f7bf22a 100644 --- a/2026/CVE-2026-109619.json +++ b/2026/CVE-2026-109619.json @@ -666,10 +666,10 @@ "description": "Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619\/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design", "fork": false, "created_at": "2026-10-23T13:49:52Z", - "updated_at": "2026-11-02T10:48:33Z", + "updated_at": "2026-11-03T20:06:42Z", "pushed_at": "2026-10-29T14:37:38Z", - "stargazers_count": 122, - "watchers_count": 122, + "stargazers_count": 123, + "watchers_count": 123, "has_discussions": false, "forks_count": 61, "allow_forking": true, @@ -696,7 +696,7 @@ ], "visibility": "public", "forks": 61, - "watchers": 122, + "watchers": 123, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-111497.json b/2026/CVE-2026-111497.json index 717e0cce97..877a8c2b1d 100644 --- a/2026/CVE-2026-111497.json +++ b/2026/CVE-2026-111497.json @@ -2432,10 +2432,10 @@ "description": "CVE-2026-111497 RCE PoC for one pinned Docker Official Image for WordPress", "fork": false, "created_at": "2026-10-28T22:42:33Z", - "updated_at": "2026-10-30T21:23:41Z", + "updated_at": "2026-11-03T19:57:56Z", "pushed_at": "2026-10-28T23:29:34Z", - "stargazers_count": 28, - "watchers_count": 28, + "stargazers_count": 29, + "watchers_count": 29, "has_discussions": false, "forks_count": 12, "allow_forking": true, @@ -2446,7 +2446,7 @@ "topics": [], "visibility": "public", "forks": 12, - "watchers": 28, + "watchers": 29, "score": 0, "subscribers_count": 0 }, @@ -3024,5 +3024,38 @@ "watchers": 1, "score": 0, "subscribers_count": 0 + }, + { + "id": 1444776997, + "name": "Brotli-Node.js-CVE-2026-111497-Broccoli2Shell-Node2Shell-HTTP2Shell-", + "full_name": "Certbn\/Brotli-Node.js-CVE-2026-111497-Broccoli2Shell-Node2Shell-HTTP2Shell-", + "owner": { + "login": "Certbn", + "id": 257466493, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/257466493?v=4", + "html_url": "https:\/\/github.com\/Certbn", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Certbn\/Brotli-Node.js-CVE-2026-111497-Broccoli2Shell-Node2Shell-HTTP2Shell-", + "description": null, + "fork": false, + "created_at": "2026-11-03T20:04:43Z", + "updated_at": "2026-11-03T20:05:28Z", + "pushed_at": "2026-11-03T20:05:24Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-112689.json b/2026/CVE-2026-112689.json new file mode 100644 index 0000000000..419c99c015 --- /dev/null +++ b/2026/CVE-2026-112689.json @@ -0,0 +1,35 @@ +[ + { + "id": 1444838548, + "name": "CVE-2026-112689-poc", + "full_name": "Lak453\/CVE-2026-112689-poc", + "owner": { + "login": "Lak453", + "id": 92697650, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/92697650?v=4", + "html_url": "https:\/\/github.com\/Lak453", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Lak453\/CVE-2026-112689-poc", + "description": "Crash-only reproducer for CVE-2026-112689 in Apple's H.264 hardware decoder", + "fork": false, + "created_at": "2026-11-03T21:13:28Z", + "updated_at": "2026-11-03T21:16:46Z", + "pushed_at": "2026-11-03T21:13:40Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-19586.json b/2026/CVE-2026-19586.json index 511da11f89..83714f1c2e 100644 --- a/2026/CVE-2026-19586.json +++ b/2026/CVE-2026-19586.json @@ -14,10 +14,10 @@ "description": "Proof of Concept (PoC) for the TP-Link Omada SSL VPN Unauthenticated RCE (CVE-2026-19586)", "fork": false, "created_at": "2026-08-21T01:26:20Z", - "updated_at": "2026-09-21T18:22:47Z", + "updated_at": "2026-11-03T21:45:17Z", "pushed_at": "2026-08-21T01:54:23Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 1 } diff --git a/2026/CVE-2026-23870.json b/2026/CVE-2026-23870.json index 1ff3cbcada..c35b4ba333 100644 --- a/2026/CVE-2026-23870.json +++ b/2026/CVE-2026-23870.json @@ -19,7 +19,7 @@ "stargazers_count": 184, "watchers_count": 184, "has_discussions": true, - "forks_count": 42, + "forks_count": 41, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 42, + "forks": 41, "watchers": 184, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-31431.json b/2026/CVE-2026-31431.json index a519a93883..922a82362e 100644 --- a/2026/CVE-2026-31431.json +++ b/2026/CVE-2026-31431.json @@ -47,12 +47,12 @@ "description": "Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code", "fork": false, "created_at": "2026-04-29T12:15:28Z", - "updated_at": "2026-11-03T08:55:33Z", + "updated_at": "2026-11-03T19:50:49Z", "pushed_at": "2026-04-29T21:21:46Z", - "stargazers_count": 4082, - "watchers_count": 4082, + "stargazers_count": 4083, + "watchers_count": 4083, "has_discussions": false, - "forks_count": 906, + "forks_count": 905, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -71,8 +71,8 @@ "xint-code" ], "visibility": "public", - "forks": 906, - "watchers": 4082, + "forks": 905, + "watchers": 4083, "score": 0, "subscribers_count": 33 }, @@ -11225,7 +11225,7 @@ "subscribers_count": 0 }, { - "id": 1444763437, + "id": 1444786995, "name": "CVE-2026-31431", "full_name": "abiyeenzo\/CVE-2026-31431", "owner": { @@ -11236,11 +11236,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/abiyeenzo\/CVE-2026-31431", - "description": "Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code", + "description": "Research PoC for Linux Kernel LPE (CVE-2026-31431 - Copy Fail). Educational and security research purposes only.", "fork": false, - "created_at": "2026-11-03T19:51:07Z", - "updated_at": "2026-11-03T19:56:11Z", - "pushed_at": "2026-04-29T21:21:46Z", + "created_at": "2026-11-03T20:15:37Z", + "updated_at": "2026-11-03T23:27:41Z", + "pushed_at": "2026-11-03T23:27:37Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-39987.json b/2026/CVE-2026-39987.json index a8d84263c9..857ab7852d 100644 --- a/2026/CVE-2026-39987.json +++ b/2026/CVE-2026-39987.json @@ -985,5 +985,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1444994772, + "name": "HTB-Cohort", + "full_name": "1nt1m4cy\/HTB-Cohort", + "owner": { + "login": "1nt1m4cy", + "id": 210791352, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/210791352?v=4", + "html_url": "https:\/\/github.com\/1nt1m4cy", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/1nt1m4cy\/HTB-Cohort", + "description": "HTB Cohort writeup -- SSRF, Marimo CVE-2026-39987, PackageKit CVE-2026-41651", + "fork": false, + "created_at": "2026-11-04T00:45:03Z", + "updated_at": "2026-11-04T01:14:51Z", + "pushed_at": "2026-11-04T01:14:47Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-43284.json b/2026/CVE-2026-43284.json index 0bee6f4c87..b178b06b23 100644 --- a/2026/CVE-2026-43284.json +++ b/2026/CVE-2026-43284.json @@ -1383,10 +1383,10 @@ "description": "DirtyFrag Android Root is an Android app and helper module chain based on DirtyFrag (CVE-2026-43284). Tested on iQOO Z9 5G.", "fork": false, "created_at": "2026-10-02T18:29:26Z", - "updated_at": "2026-11-01T13:50:12Z", + "updated_at": "2026-11-03T21:53:41Z", "pushed_at": "2026-10-05T15:01:25Z", - "stargazers_count": 62, - "watchers_count": 62, + "stargazers_count": 63, + "watchers_count": 63, "has_discussions": false, "forks_count": 25, "allow_forking": true, @@ -1397,7 +1397,7 @@ "topics": [], "visibility": "public", "forks": 25, - "watchers": 62, + "watchers": 63, "score": 0, "subscribers_count": 3 }, @@ -1449,10 +1449,10 @@ "description": "Ephemeral root for Samsung Galaxy devices via CVE-2026-43284 — stability fork of DirtyFrag. Reboot to undo.", "fork": false, "created_at": "2026-10-19T09:24:01Z", - "updated_at": "2026-10-25T15:55:32Z", + "updated_at": "2026-11-04T01:05:39Z", "pushed_at": "2026-10-19T09:48:30Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -1472,7 +1472,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 3, + "watchers": 4, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-43499.json b/2026/CVE-2026-43499.json index 32409a676f..aeff69fa15 100644 --- a/2026/CVE-2026-43499.json +++ b/2026/CVE-2026-43499.json @@ -995,12 +995,12 @@ "description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499", "fork": false, "created_at": "2026-07-17T14:24:08Z", - "updated_at": "2026-11-03T17:53:04Z", + "updated_at": "2026-11-03T23:38:02Z", "pushed_at": "2026-09-03T03:21:42Z", - "stargazers_count": 1525, - "watchers_count": 1525, + "stargazers_count": 1528, + "watchers_count": 1528, "has_discussions": false, - "forks_count": 306, + "forks_count": 308, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1008,8 +1008,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 306, - "watchers": 1525, + "forks": 308, + "watchers": 1528, "score": 0, "subscribers_count": 47 }, @@ -1676,12 +1676,12 @@ "description": "GhostLock One-Tap Execution App (CVE-2026-43499)", "fork": false, "created_at": "2026-07-29T05:04:25Z", - "updated_at": "2026-11-03T18:41:45Z", + "updated_at": "2026-11-04T00:14:05Z", "pushed_at": "2026-11-02T22:07:56Z", - "stargazers_count": 2542, - "watchers_count": 2542, + "stargazers_count": 2548, + "watchers_count": 2548, "has_discussions": true, - "forks_count": 617, + "forks_count": 618, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1689,8 +1689,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 617, - "watchers": 2542, + "forks": 618, + "watchers": 2548, "score": 0, "subscribers_count": 44 }, @@ -2315,10 +2315,10 @@ "description": "CVE-2026-43499 full exploit chain for Samsung Galaxy S22 Ultra (Android 5.10 kernel)", "fork": false, "created_at": "2026-08-08T23:35:25Z", - "updated_at": "2026-11-03T03:45:25Z", + "updated_at": "2026-11-03T21:12:16Z", "pushed_at": "2026-10-27T18:45:28Z", - "stargazers_count": 101, - "watchers_count": 101, + "stargazers_count": 102, + "watchers_count": 102, "has_discussions": true, "forks_count": 47, "allow_forking": true, @@ -2329,7 +2329,7 @@ "topics": [], "visibility": "public", "forks": 47, - "watchers": 101, + "watchers": 102, "score": 0, "subscribers_count": 5 }, @@ -2612,12 +2612,12 @@ "description": "vivo\/iQOO 临时 root 工具箱 (免解锁临时root, CVE-2026-43499) - 源码与脚本", "fork": false, "created_at": "2026-08-12T10:05:38Z", - "updated_at": "2026-11-03T16:56:15Z", + "updated_at": "2026-11-03T22:23:47Z", "pushed_at": "2026-08-12T10:05:44Z", "stargazers_count": 61, "watchers_count": 61, "has_discussions": false, - "forks_count": 12, + "forks_count": 13, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -2625,7 +2625,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 12, + "forks": 13, "watchers": 61, "score": 0, "subscribers_count": 0 @@ -2788,10 +2788,10 @@ "description": "KSuRoot 4.0.0 — 基于 CVE-2026-43499(GhostLock) 的一键 KernelSU 提权工具。多内核支持：6.1 \/ 6.6 \/ 6.12 三族各有专属基线，另有 50 档上游内核适配；多机型动态库内置：122 条厂商载荷（vivo\/iQOO、小米、三星、Pixel 等）离线可用、按机型+内核+commit 三级匹配；新增「载荷构建」用本机 boot.img 解析偏移打出适配本机的载荷（通用 \/ vivo 专用）；免 ADB。Mod by hmascs", "fork": false, "created_at": "2026-08-14T10:51:50Z", - "updated_at": "2026-11-03T11:44:36Z", + "updated_at": "2026-11-03T21:46:19Z", "pushed_at": "2026-10-02T08:20:25Z", - "stargazers_count": 279, - "watchers_count": 279, + "stargazers_count": 280, + "watchers_count": 280, "has_discussions": false, "forks_count": 33, "allow_forking": true, @@ -2802,7 +2802,7 @@ "topics": [], "visibility": "public", "forks": 33, - "watchers": 279, + "watchers": 280, "score": 0, "subscribers_count": 1 }, @@ -3402,7 +3402,7 @@ "stargazers_count": 89, "watchers_count": 89, "has_discussions": false, - "forks_count": 9, + "forks_count": 10, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -3410,7 +3410,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 9, + "forks": 10, "watchers": 89, "score": 0, "subscribers_count": 0 @@ -4708,7 +4708,7 @@ "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -4716,7 +4716,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 2, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-44578.json b/2026/CVE-2026-44578.json index 43af711c2e..c252f376b0 100644 --- a/2026/CVE-2026-44578.json +++ b/2026/CVE-2026-44578.json @@ -52,7 +52,7 @@ "stargazers_count": 77, "watchers_count": 77, "has_discussions": false, - "forks_count": 22, + "forks_count": 21, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,7 +60,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 22, + "forks": 21, "watchers": 77, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-49881.json b/2026/CVE-2026-49881.json index b3c09b2771..f5aef14c7d 100644 --- a/2026/CVE-2026-49881.json +++ b/2026/CVE-2026-49881.json @@ -14,10 +14,10 @@ "description": "Android complete exploit chain that enables privilege escalation from a local untrusted app to root\/kernel, combination of CVE-2026-49881 and CVE-2026-43284", "fork": false, "created_at": "2026-07-23T07:01:34Z", - "updated_at": "2026-11-03T06:20:45Z", + "updated_at": "2026-11-04T01:06:44Z", "pushed_at": "2026-09-09T00:47:49Z", - "stargazers_count": 488, - "watchers_count": 488, + "stargazers_count": 490, + "watchers_count": 490, "has_discussions": false, "forks_count": 112, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 112, - "watchers": 488, + "watchers": 490, "score": 0, "subscribers_count": 7 }, diff --git a/2026/CVE-2026-54121.json b/2026/CVE-2026-54121.json index 9976358f69..1165e6938e 100644 --- a/2026/CVE-2026-54121.json +++ b/2026/CVE-2026-54121.json @@ -14,10 +14,10 @@ "description": "Certighost POC", "fork": false, "created_at": "2026-07-23T18:54:34Z", - "updated_at": "2026-11-02T21:55:52Z", + "updated_at": "2026-11-04T01:39:36Z", "pushed_at": "2026-07-28T15:44:50Z", - "stargazers_count": 341, - "watchers_count": 341, + "stargazers_count": 342, + "watchers_count": 342, "has_discussions": false, "forks_count": 85, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 85, - "watchers": 341, + "watchers": 342, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-63030.json b/2026/CVE-2026-63030.json index 6ed1f5e0ba..a97b76bca7 100644 --- a/2026/CVE-2026-63030.json +++ b/2026/CVE-2026-63030.json @@ -14,10 +14,10 @@ "description": "wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain", "fork": false, "created_at": "2026-07-17T20:18:33Z", - "updated_at": "2026-11-03T18:11:01Z", + "updated_at": "2026-11-03T21:43:37Z", "pushed_at": "2026-08-11T13:41:27Z", - "stargazers_count": 812, - "watchers_count": 812, + "stargazers_count": 811, + "watchers_count": 811, "has_discussions": false, "forks_count": 188, "allow_forking": true, @@ -32,7 +32,7 @@ ], "visibility": "public", "forks": 188, - "watchers": 812, + "watchers": 811, "score": 0, "subscribers_count": 3 }, diff --git a/2026/CVE-2026-64560.json b/2026/CVE-2026-64560.json index 6d47759067..54053f5916 100644 --- a/2026/CVE-2026-64560.json +++ b/2026/CVE-2026-64560.json @@ -549,39 +549,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1426815035, - "name": "OnePlus16-Jailbreak", - "full_name": "Yunnijian\/OnePlus16-Jailbreak", - "owner": { - "login": "Yunnijian", - "id": 162805361, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/162805361?v=4", - "html_url": "https:\/\/github.com\/Yunnijian", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Yunnijian\/OnePlus16-Jailbreak", - "description": "OnePlus 16 (PYB110) jailbreak: CVE-2026-64560 + CVE-2026-98260 + KernelSU \/ KernelSU Next \/ BakaSU \/ SukiSU Ultra LKM", - "fork": false, - "created_at": "2026-10-20T09:43:06Z", - "updated_at": "2026-11-03T10:01:41Z", - "pushed_at": "2026-11-01T14:01:57Z", - "stargazers_count": 32, - "watchers_count": 32, - "has_discussions": false, - "forks_count": 8, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 8, - "watchers": 32, - "score": 0, - "subscribers_count": 0 - }, { "id": 1432470756, "name": "rootkit", diff --git a/2026/CVE-2026-80587.json b/2026/CVE-2026-80587.json new file mode 100644 index 0000000000..0c956e1f28 --- /dev/null +++ b/2026/CVE-2026-80587.json @@ -0,0 +1,35 @@ +[ + { + "id": 1444876675, + "name": "cve-2026-80587-check", + "full_name": "9technologygroup\/cve-2026-80587-check", + "owner": { + "login": "9technologygroup", + "id": 170360133, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/170360133?v=4", + "html_url": "https:\/\/github.com\/9technologygroup", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/9technologygroup\/cve-2026-80587-check", + "description": "Temporary: check a Linux host for CVE-2026-80587 (MPTCP)", + "fork": false, + "created_at": "2026-11-03T21:59:19Z", + "updated_at": "2026-11-03T22:28:29Z", + "pushed_at": "2026-11-03T22:28:25Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-84473.json b/2026/CVE-2026-84473.json new file mode 100644 index 0000000000..102e7c4287 --- /dev/null +++ b/2026/CVE-2026-84473.json @@ -0,0 +1,35 @@ +[ + { + "id": 1353334193, + "name": "CVE-2026-84473", + "full_name": "KOBUKOVUI\/CVE-2026-84473", + "owner": { + "login": "KOBUKOVUI", + "id": 149545640, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/149545640?v=4", + "html_url": "https:\/\/github.com\/KOBUKOVUI", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/KOBUKOVUI\/CVE-2026-84473", + "description": "Security research and vulnerability disclosure for the ownCloud ONLYOFFICE Integration app, including technical analysis, PoCs, impact, and remediation.", + "fork": false, + "created_at": "2026-09-01T08:42:09Z", + "updated_at": "2026-11-04T01:00:31Z", + "pushed_at": "2026-09-02T04:23:33Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-86060.json b/2026/CVE-2026-86060.json index 105aaacfa2..64ec221fff 100644 --- a/2026/CVE-2026-86060.json +++ b/2026/CVE-2026-86060.json @@ -80,12 +80,12 @@ "description": "MikroTik RouterOS PoC Collection - CVE-2026-86060 - CVE-2026-67279 - CVE-2026-67276 RouterOS SSH", "fork": false, "created_at": "2026-09-25T15:59:34Z", - "updated_at": "2026-10-30T08:52:08Z", + "updated_at": "2026-11-03T23:38:15Z", "pushed_at": "2026-10-08T14:08:24Z", - "stargazers_count": 7, - "watchers_count": 7, + "stargazers_count": 6, + "watchers_count": 6, "has_discussions": false, - "forks_count": 3, + "forks_count": 2, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -108,8 +108,8 @@ "python3" ], "visibility": "public", - "forks": 3, - "watchers": 7, + "forks": 2, + "watchers": 6, "score": 0, "subscribers_count": 1 } diff --git a/2026/CVE-2026-92183.json b/2026/CVE-2026-92183.json new file mode 100644 index 0000000000..ebb42209c8 --- /dev/null +++ b/2026/CVE-2026-92183.json @@ -0,0 +1,40 @@ +[ + { + "id": 1444990871, + "name": "CVE-2026-92183_GIMP_RCE_Proof-of-Concept", + "full_name": "CXu0630\/CVE-2026-92183_GIMP_RCE_Proof-of-Concept", + "owner": { + "login": "CXu0630", + "id": 55417870, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/55417870?v=4", + "html_url": "https:\/\/github.com\/CXu0630", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/CXu0630\/CVE-2026-92183_GIMP_RCE_Proof-of-Concept", + "description": "GIMP 3.2.2 contains a stack-based buffer overflow in its APNG loader (load_apng_image) when processing the tRNS (transparency) chunk. This writeup demonstrates a proof of concept for remote code execution leveraging this vulnerability.", + "fork": false, + "created_at": "2026-11-04T00:39:19Z", + "updated_at": "2026-11-04T01:37:34Z", + "pushed_at": "2026-11-04T01:35:54Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "buffer-overflow-attack", + "gimp", + "remote-code-execution", + "security" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-97229.json b/2026/CVE-2026-97229.json index 907ba50287..99a230e335 100644 --- a/2026/CVE-2026-97229.json +++ b/2026/CVE-2026-97229.json @@ -146,10 +146,10 @@ "description": "CVE-2026-97229 + CVE-2026-110264 — GitLab Onigmo RCE Exploit Toolkit (CVSS 10.0)", "fork": false, "created_at": "2026-10-29T10:39:57Z", - "updated_at": "2026-11-03T12:18:25Z", + "updated_at": "2026-11-03T22:10:46Z", "pushed_at": "2026-10-29T10:40:18Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -160,7 +160,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 3, + "watchers": 4, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-97798.json b/2026/CVE-2026-97798.json index ab0c4b2648..7a12dad92d 100644 --- a/2026/CVE-2026-97798.json +++ b/2026/CVE-2026-97798.json @@ -14,10 +14,10 @@ "description": "CVE-2026-97798 Windows Error Reporting - Command Injection TO SYSTEM", "fork": false, "created_at": "2026-10-27T17:45:26Z", - "updated_at": "2026-11-03T10:09:58Z", + "updated_at": "2026-11-04T00:49:37Z", "pushed_at": "2026-10-30T02:35:54Z", - "stargazers_count": 37, - "watchers_count": 37, + "stargazers_count": 41, + "watchers_count": 41, "has_discussions": false, "forks_count": 4, "allow_forking": true, @@ -36,7 +36,7 @@ ], "visibility": "public", "forks": 4, - "watchers": 37, + "watchers": 41, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-98260.json b/2026/CVE-2026-98260.json index 7be55b14f7..e3c280770f 100644 --- a/2026/CVE-2026-98260.json +++ b/2026/CVE-2026-98260.json @@ -65,6 +65,39 @@ "score": 0, "subscribers_count": 0 }, + { + "id": 1426815035, + "name": "OnePlus16-Jailbreak", + "full_name": "Yunnijian\/OnePlus16-Jailbreak", + "owner": { + "login": "Yunnijian", + "id": 162805361, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/162805361?v=4", + "html_url": "https:\/\/github.com\/Yunnijian", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Yunnijian\/OnePlus16-Jailbreak", + "description": "OnePlus 16 (PYB110) jailbreak: CVE-2026-98260 + KernelSU \/ KernelSU Next \/ BakaSU \/ SukiSU Ultra LKM", + "fork": false, + "created_at": "2026-10-20T09:43:06Z", + "updated_at": "2026-11-04T01:01:52Z", + "pushed_at": "2026-11-01T14:01:57Z", + "stargazers_count": 33, + "watchers_count": 33, + "has_discussions": false, + "forks_count": 8, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 8, + "watchers": 33, + "score": 0, + "subscribers_count": 0 + }, { "id": 1430807236, "name": "CVE-2026-98260-popsicle-android", @@ -534,7 +567,7 @@ "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -542,7 +575,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 3, "score": 0, "subscribers_count": 0 @@ -562,10 +595,10 @@ "description": "6.12.69-android16-6-g242e1a07f878", "fork": false, "created_at": "2026-10-27T12:53:47Z", - "updated_at": "2026-11-03T13:57:53Z", + "updated_at": "2026-11-04T01:04:14Z", "pushed_at": "2026-10-27T14:13:02Z", - "stargazers_count": 44, - "watchers_count": 44, + "stargazers_count": 45, + "watchers_count": 45, "has_discussions": false, "forks_count": 11, "allow_forking": true, @@ -576,7 +609,7 @@ "topics": [], "visibility": "public", "forks": 11, - "watchers": 44, + "watchers": 45, "score": 0, "subscribers_count": 0 }, @@ -740,8 +773,8 @@ "description": "CVE-2026-98260 (posix-cpu-timers exec UAF) exploit research: S9280 Android 14 GKI 6.1 — UAF trigger + zero-write primitive + SELinux Permissive. Handoff doc in HANDOFF.md", "fork": false, "created_at": "2026-10-28T16:54:41Z", - "updated_at": "2026-11-03T18:35:32Z", - "pushed_at": "2026-11-03T18:35:26Z", + "updated_at": "2026-11-03T22:48:45Z", + "pushed_at": "2026-11-03T22:48:41Z", "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, @@ -806,10 +839,10 @@ "description": "GhostKey - CVE-2026-98260 一键提权工具（Shizuku + NDK Native）", "fork": false, "created_at": "2026-10-29T05:12:04Z", - "updated_at": "2026-11-03T17:22:32Z", + "updated_at": "2026-11-04T00:27:33Z", "pushed_at": "2026-10-29T05:13:36Z", - "stargazers_count": 59, - "watchers_count": 59, + "stargazers_count": 60, + "watchers_count": 60, "has_discussions": false, "forks_count": 28, "allow_forking": true, @@ -820,7 +853,7 @@ "topics": [], "visibility": "public", "forks": 28, - "watchers": 59, + "watchers": 60, "score": 0, "subscribers_count": 0 }, @@ -1124,10 +1157,10 @@ "description": "Android app that checks a supported Vivo X200 Ultra, then uses Shizuku to attempt temporary root with CVE-2026-98260 and load KernelSU. Optional boot auto-root; one attempt per boot.", "fork": false, "created_at": "2026-11-02T16:46:35Z", - "updated_at": "2026-11-03T16:11:05Z", + "updated_at": "2026-11-03T21:26:48Z", "pushed_at": "2026-11-03T16:11:01Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -1138,7 +1171,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-98432.json b/2026/CVE-2026-98432.json index 75a8173423..913d253ffe 100644 --- a/2026/CVE-2026-98432.json +++ b/2026/CVE-2026-98432.json @@ -96,8 +96,8 @@ "description": null, "fork": false, "created_at": "2026-10-29T14:58:31Z", - "updated_at": "2026-11-03T05:32:14Z", - "pushed_at": "2026-11-03T05:32:09Z", + "updated_at": "2026-11-03T22:30:56Z", + "pushed_at": "2026-11-03T22:30:51Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -162,10 +162,10 @@ "description": "Temporary mitigation for CVE-2026-98432 (Linux IPv4 TCP ireq_opt use-after-free): drop IPv4 TCP with IP options, disable MPTCP. Tested scripts + verification. EN\/KO.", "fork": false, "created_at": "2026-10-29T17:22:03Z", - "updated_at": "2026-11-03T12:13:41Z", + "updated_at": "2026-11-03T20:18:30Z", "pushed_at": "2026-10-29T17:22:10Z", - "stargazers_count": 9, - "watchers_count": 9, + "stargazers_count": 10, + "watchers_count": 10, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -182,7 +182,7 @@ ], "visibility": "public", "forks": 1, - "watchers": 9, + "watchers": 10, "score": 0, "subscribers_count": 0 }, @@ -574,10 +574,10 @@ "description": "CVE-2026-98432 (CVSS 9.8) Linux IPv4 TCP use-after-free full toolkit. Detect kernel exposure, trigger the race, analyze captures, recover KASLR slides, and lock down hosts. Single command, zero setup, standard library only. Built for real-world authorized security testing.", "fork": false, "created_at": "2026-10-30T13:11:26Z", - "updated_at": "2026-11-03T19:05:23Z", + "updated_at": "2026-11-04T00:48:39Z", "pushed_at": "2026-11-01T22:21:27Z", - "stargazers_count": 21, - "watchers_count": 21, + "stargazers_count": 22, + "watchers_count": 22, "has_discussions": false, "forks_count": 7, "allow_forking": true, @@ -603,7 +603,7 @@ ], "visibility": "public", "forks": 7, - "watchers": 21, + "watchers": 22, "score": 0, "subscribers_count": 0 }, @@ -655,10 +655,10 @@ "description": "You should patch, but not worry about CVE-2026-98432", "fork": false, "created_at": "2026-10-30T15:38:53Z", - "updated_at": "2026-11-03T06:35:36Z", + "updated_at": "2026-11-03T21:49:30Z", "pushed_at": "2026-10-30T16:10:03Z", - "stargazers_count": 12, - "watchers_count": 12, + "stargazers_count": 13, + "watchers_count": 13, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -669,7 +669,7 @@ "topics": [], "visibility": "public", "forks": 3, - "watchers": 12, + "watchers": 13, "score": 0, "subscribers_count": 0 }, @@ -726,7 +726,7 @@ "stargazers_count": 17, "watchers_count": 17, "has_discussions": false, - "forks_count": 3, + "forks_count": 4, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -740,7 +740,7 @@ "use-after-free" ], "visibility": "public", - "forks": 3, + "forks": 4, "watchers": 17, "score": 0, "subscribers_count": 0 @@ -1531,8 +1531,8 @@ "description": "CVE-2026-98432 (Linux IPv4 TCP inet_opt UAF): read-only diagnostic script, no-reboot nftables\/sysctl mitigations, Ansible rollout and response guide (EN\/KO)", "fork": false, "created_at": "2026-11-02T03:27:52Z", - "updated_at": "2026-11-03T04:05:23Z", - "pushed_at": "2026-11-03T04:05:19Z", + "updated_at": "2026-11-04T01:07:36Z", + "pushed_at": "2026-11-04T01:08:27Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -2110,10 +2110,10 @@ "description": null, "fork": false, "created_at": "2026-11-03T07:41:14Z", - "updated_at": "2026-11-03T07:47:40Z", + "updated_at": "2026-11-03T22:16:30Z", "pushed_at": "2026-11-03T07:47:37Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -2124,7 +2124,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -2209,8 +2209,80 @@ "description": "Ansible role to audit Linux hosts for CVE-2026-98432 (critical IPv4 TCP use-after-free). Checks running kernel against known fixed versions, MPTCP status, and active MPTCP listeners across RHEL, Fedora, Debian, and Ubuntu. Produces clear per-host risk reports (high\/medium\/fixed). Read-only by default; ideal for fleet-wide inventory before patching.", "fork": false, "created_at": "2026-11-03T16:36:00Z", - "updated_at": "2026-11-03T19:29:33Z", - "pushed_at": "2026-11-03T19:30:44Z", + "updated_at": "2026-11-03T21:37:58Z", + "pushed_at": "2026-11-03T21:38:51Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1444797882, + "name": "cve_2026_98432_guard", + "full_name": "hdp1972be-svg\/cve_2026_98432_guard", + "owner": { + "login": "hdp1972be-svg", + "id": 266105934, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/266105934?v=4", + "html_url": "https:\/\/github.com\/hdp1972be-svg", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/hdp1972be-svg\/cve_2026_98432_guard", + "description": "Temporary eBPF\/XDP mitigation for CVE-2026-98432 Linux TCP IPv4 header-options vulnerability. Helps protect unpatched systems and custom kernels until an official kernel fix can be deployed.", + "fork": false, + "created_at": "2026-11-03T20:27:15Z", + "updated_at": "2026-11-03T21:13:08Z", + "pushed_at": "2026-11-03T21:13:04Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "bpf", + "cve-2026-98432", + "cybersecurity", + "ebpf", + "xdp" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1444880818, + "name": "cve-2026-98432-mitigation", + "full_name": "zenjabba\/cve-2026-98432-mitigation", + "owner": { + "login": "zenjabba", + "id": 679864, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/679864?v=4", + "html_url": "https:\/\/github.com\/zenjabba", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/zenjabba\/cve-2026-98432-mitigation", + "description": "Temporary nftables mitigation for CVE-2026-98432 (Linux IPv4 TCP IP-options use-after-free)", + "fork": false, + "created_at": "2026-11-03T22:04:33Z", + "updated_at": "2026-11-03T22:05:54Z", + "pushed_at": "2026-11-03T22:05:50Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false,