From 08574ffccda64b57ec7cb9c04239c65aaacd3879 Mon Sep 17 00:00:00 2001 From: motikan2010-bot Date: Mon, 26 Oct 2026 04:47:42 +0900 Subject: [PATCH] Auto Update 2026/10/25 19:47:42 --- 2014/CVE-2014-3153.json | 8 +- 2015/CVE-2015-1805.json | 33 ++ 2017/CVE-2017-11882.json | 6 +- 2018/CVE-2018-25031.json | 4 +- 2019/CVE-2019-18634.json | 4 +- 2019/CVE-2019-7609.json | 8 +- 2020/CVE-2020-25686.json | 4 +- 2020/CVE-2020-9484.json | 4 +- 2021/CVE-2021-1675.json | 8 +- 2021/CVE-2021-21972.json | 4 +- 2021/CVE-2021-3156.json | 8 +- 2021/CVE-2021-4034.json | 12 +- 2021/CVE-2021-40444.json | 4 +- 2021/CVE-2021-44228.json | 20 +- 2022/CVE-2022-0847.json | 12 +- 2022/CVE-2022-22965.json | 8 +- 2022/CVE-2022-28601.json | 35 --- 2022/CVE-2022-28986.json | 35 --- 2022/CVE-2022-31101.json | 4 +- 2023/CVE-2023-27372.json | 8 +- 2023/CVE-2023-48795.json | 33 ++ 2024/CVE-2024-4577.json | 33 ++ 2024/CVE-2024-6387.json | 33 ++ 2025/CVE-2025-0651.json | 35 +++ 2025/CVE-2025-14847.json | 8 +- 2025/CVE-2025-21479.json | 8 +- 2025/CVE-2025-24203.json | 8 +- 2025/CVE-2025-26326.json | 35 +++ 2025/CVE-2025-36911.json | 12 +- 2025/CVE-2025-55182.json | 8 +- 2025/CVE-2025-5548.json | 33 ++ 2025/CVE-2025-7771.json | 16 +- 2025/CVE-2025-8061.json | 8 +- 2025/CVE-2025-9974.json | 4 +- 2026/CVE-2026-0006.json | 2 +- 2026/CVE-2026-0073.json | 33 ++ 2026/CVE-2026-106173.json | 4 +- 2026/CVE-2026-106781.json | 35 +++ 2026/CVE-2026-107181.json | 8 +- 2026/CVE-2026-10961.json | 4 +- 2026/CVE-2026-109618.json | 641 +++++++++++++++++++++++++++----------- 2026/CVE-2026-109619.json | 12 +- 2026/CVE-2026-110922.json | 4 +- 2026/CVE-2026-111497.json | 227 ++++++++++++-- 2026/CVE-2026-112866.json | 35 +++ 2026/CVE-2026-112900.json | 33 ++ 2026/CVE-2026-114820.json | 8 +- 2026/CVE-2026-115560.json | 33 ++ 2026/CVE-2026-14440.json | 35 +++ 2026/CVE-2026-23870.json | 8 +- 2026/CVE-2026-24061.json | 8 +- 2026/CVE-2026-24090.json | 8 +- 2026/CVE-2026-25262.json | 12 +- 2026/CVE-2026-31431.json | 16 +- 2026/CVE-2026-39808.json | 33 ++ 2026/CVE-2026-41651.json | 4 +- 2026/CVE-2026-41940.json | 8 +- 2026/CVE-2026-43284.json | 16 +- 2026/CVE-2026-43499.json | 109 ++++--- 2026/CVE-2026-54121.json | 8 +- 2026/CVE-2026-56190.json | 4 +- 2026/CVE-2026-59248.json | 35 +++ 2026/CVE-2026-59310.json | 8 +- 2026/CVE-2026-63030.json | 16 +- 2026/CVE-2026-64560.json | 50 ++- 2026/CVE-2026-73570.json | 8 +- 2026/CVE-2026-7482.json | 8 +- 2026/CVE-2026-86950.json | 33 ++ 2026/CVE-2026-96652.json | 8 +- 2026/CVE-2026-98260.json | 30 +- 2026/CVE-2026-99999.json | 4 +- 71 files changed, 1529 insertions(+), 522 deletions(-) delete mode 100644 2022/CVE-2022-28601.json delete mode 100644 2022/CVE-2022-28986.json create mode 100644 2025/CVE-2025-0651.json create mode 100644 2025/CVE-2025-26326.json create mode 100644 2026/CVE-2026-106781.json create mode 100644 2026/CVE-2026-112866.json create mode 100644 2026/CVE-2026-14440.json create mode 100644 2026/CVE-2026-59248.json diff --git a/2014/CVE-2014-3153.json b/2014/CVE-2014-3153.json index 68023abccf..df8ed5a9af 100644 --- a/2014/CVE-2014-3153.json +++ b/2014/CVE-2014-3153.json @@ -212,10 +212,10 @@ "description": "Gain root privilege by exploiting CVE-2014-3153 vulnerability", "fork": false, "created_at": "2018-09-27T03:16:15Z", - "updated_at": "2026-10-22T08:16:33Z", + "updated_at": "2026-10-25T13:00:46Z", "pushed_at": "2018-09-27T03:31:02Z", - "stargazers_count": 22, - "watchers_count": 22, + "stargazers_count": 21, + "watchers_count": 21, "has_discussions": false, "forks_count": 5, "allow_forking": true, @@ -229,7 +229,7 @@ ], "visibility": "public", "forks": 5, - "watchers": 22, + "watchers": 21, "score": 0, "subscribers_count": 2 }, diff --git a/2015/CVE-2015-1805.json b/2015/CVE-2015-1805.json index 5b78dfe04b..0f7729a93b 100644 --- a/2015/CVE-2015-1805.json +++ b/2015/CVE-2015-1805.json @@ -217,5 +217,38 @@ "watchers": 1, "score": 0, "subscribers_count": 0 + }, + { + "id": 1433364890, + "name": "Root-My-Galaxy-S4", + "full_name": "cjn304\/Root-My-Galaxy-S4", + "owner": { + "login": "cjn304", + "id": 31428240, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/31428240?v=4", + "html_url": "https:\/\/github.com\/cjn304", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/cjn304\/Root-My-Galaxy-S4", + "description": "Root the Samsung Galaxy S4 on official firmware via CVE-2015-1805 & KNOX e-fuse stays intact", + "fork": false, + "created_at": "2026-10-25T15:51:32Z", + "updated_at": "2026-10-25T18:24:00Z", + "pushed_at": "2026-10-25T18:23:56Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2017/CVE-2017-11882.json b/2017/CVE-2017-11882.json index 2ad5f8ec0e..6d7789a63b 100644 --- a/2017/CVE-2017-11882.json +++ b/2017/CVE-2017-11882.json @@ -1087,11 +1087,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/Mo200909\/Office-Malware-Forensics-Lab-REMnux-Static-Analysis", - "description": "Static analysis of 2 malicious Office documents on REMnux using oletools; identified CVE-2017-11882 and obfuscated macros.", + "description": "Static analysis of 2 suspicious Office documents on REMnux using oletools; one matched CVE-2017-11882, the other was inconclusive.", "fork": false, "created_at": "2026-06-22T22:07:00Z", - "updated_at": "2026-09-15T05:13:52Z", - "pushed_at": "2026-09-15T05:13:49Z", + "updated_at": "2026-10-25T15:51:19Z", + "pushed_at": "2026-10-25T15:51:15Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2018/CVE-2018-25031.json b/2018/CVE-2018-25031.json index b9a8b4eac0..bbe0ce568c 100644 --- a/2018/CVE-2018-25031.json +++ b/2018/CVE-2018-25031.json @@ -443,8 +443,8 @@ "description": "Swagger UI (CVE-2018-25031) POC, [HTMLi, XSS].", "fork": false, "created_at": "2025-09-20T20:17:10Z", - "updated_at": "2026-06-03T14:00:05Z", - "pushed_at": "2025-10-27T16:28:43Z", + "updated_at": "2026-10-25T14:27:34Z", + "pushed_at": "2026-10-25T14:27:30Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2019/CVE-2019-18634.json b/2019/CVE-2019-18634.json index 0f88b792df..cef3d8451f 100644 --- a/2019/CVE-2019-18634.json +++ b/2019/CVE-2019-18634.json @@ -52,7 +52,7 @@ "stargazers_count": 239, "watchers_count": 239, "has_discussions": false, - "forks_count": 49, + "forks_count": 50, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,7 +60,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 49, + "forks": 50, "watchers": 239, "score": 0, "subscribers_count": 2 diff --git a/2019/CVE-2019-7609.json b/2019/CVE-2019-7609.json index f7bdf0e5e5..2abbc7e3aa 100644 --- a/2019/CVE-2019-7609.json +++ b/2019/CVE-2019-7609.json @@ -47,10 +47,10 @@ "description": "RCE on Kibana versions before 5.6.15 and 6.6.0 in the Timelion visualizer", "fork": false, "created_at": "2019-10-21T07:32:31Z", - "updated_at": "2026-10-15T21:39:44Z", + "updated_at": "2026-10-25T16:13:02Z", "pushed_at": "2019-12-20T14:28:44Z", - "stargazers_count": 57, - "watchers_count": 57, + "stargazers_count": 58, + "watchers_count": 58, "has_discussions": false, "forks_count": 12, "allow_forking": true, @@ -64,7 +64,7 @@ ], "visibility": "public", "forks": 12, - "watchers": 57, + "watchers": 58, "score": 0, "subscribers_count": 2 }, diff --git a/2020/CVE-2020-25686.json b/2020/CVE-2020-25686.json index 90f4ede758..2cf97b9bf2 100644 --- a/2020/CVE-2020-25686.json +++ b/2020/CVE-2020-25686.json @@ -19,7 +19,7 @@ "stargazers_count": 101, "watchers_count": 101, "has_discussions": false, - "forks_count": 36, + "forks_count": 35, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 36, + "forks": 35, "watchers": 101, "score": 0, "subscribers_count": 5 diff --git a/2020/CVE-2020-9484.json b/2020/CVE-2020-9484.json index 642f97529c..f321181deb 100644 --- a/2020/CVE-2020-9484.json +++ b/2020/CVE-2020-9484.json @@ -316,7 +316,7 @@ "stargazers_count": 13, "watchers_count": 13, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -329,7 +329,7 @@ "tomcat" ], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 13, "score": 0, "subscribers_count": 1 diff --git a/2021/CVE-2021-1675.json b/2021/CVE-2021-1675.json index 25ebf59ab5..7d5ace3694 100644 --- a/2021/CVE-2021-1675.json +++ b/2021/CVE-2021-1675.json @@ -47,10 +47,10 @@ "description": "C# and Impacket implementation of PrintNightmare CVE-2021-1675\/CVE-2021-34527", "fork": false, "created_at": "2021-06-29T17:24:14Z", - "updated_at": "2026-10-25T05:01:10Z", + "updated_at": "2026-10-25T17:56:20Z", "pushed_at": "2021-07-20T15:28:13Z", - "stargazers_count": 2005, - "watchers_count": 2005, + "stargazers_count": 2006, + "watchers_count": 2006, "has_discussions": false, "forks_count": 572, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 572, - "watchers": 2005, + "watchers": 2006, "score": 0, "subscribers_count": 44 }, diff --git a/2021/CVE-2021-21972.json b/2021/CVE-2021-21972.json index 67364933ee..04784acb5c 100644 --- a/2021/CVE-2021-21972.json +++ b/2021/CVE-2021-21972.json @@ -102,7 +102,7 @@ "stargazers_count": 498, "watchers_count": 498, "has_discussions": false, - "forks_count": 138, + "forks_count": 137, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -112,7 +112,7 @@ "cve-2021-21972" ], "visibility": "public", - "forks": 138, + "forks": 137, "watchers": 498, "score": 0, "subscribers_count": 10 diff --git a/2021/CVE-2021-3156.json b/2021/CVE-2021-3156.json index 189e6061c9..b29b04babf 100644 --- a/2021/CVE-2021-3156.json +++ b/2021/CVE-2021-3156.json @@ -455,7 +455,7 @@ "stargazers_count": 430, "watchers_count": 430, "has_discussions": false, - "forks_count": 106, + "forks_count": 105, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -463,7 +463,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 106, + "forks": 105, "watchers": 430, "score": 0, "subscribers_count": 7 @@ -521,7 +521,7 @@ "stargazers_count": 1030, "watchers_count": 1030, "has_discussions": false, - "forks_count": 232, + "forks_count": 233, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -529,7 +529,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 232, + "forks": 233, "watchers": 1030, "score": 0, "subscribers_count": 25 diff --git a/2021/CVE-2021-4034.json b/2021/CVE-2021-4034.json index 49139600ec..19cd0994aa 100644 --- a/2021/CVE-2021-4034.json +++ b/2021/CVE-2021-4034.json @@ -150,12 +150,12 @@ "description": "PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec (CVE-2021-4034)", "fork": false, "created_at": "2022-01-26T00:56:36Z", - "updated_at": "2026-10-24T21:42:29Z", + "updated_at": "2026-10-25T13:06:31Z", "pushed_at": "2023-05-04T19:24:39Z", - "stargazers_count": 1170, - "watchers_count": 1170, + "stargazers_count": 1171, + "watchers_count": 1171, "has_discussions": false, - "forks_count": 313, + "forks_count": 314, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -167,8 +167,8 @@ "poc" ], "visibility": "public", - "forks": 313, - "watchers": 1170, + "forks": 314, + "watchers": 1171, "score": 0, "subscribers_count": 13 }, diff --git a/2021/CVE-2021-40444.json b/2021/CVE-2021-40444.json index c1774a267f..ee83f8b0e2 100644 --- a/2021/CVE-2021-40444.json +++ b/2021/CVE-2021-40444.json @@ -250,7 +250,7 @@ "stargazers_count": 1847, "watchers_count": 1847, "has_discussions": false, - "forks_count": 473, + "forks_count": 472, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -258,7 +258,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 473, + "forks": 472, "watchers": 1847, "score": 0, "subscribers_count": 28 diff --git a/2021/CVE-2021-44228.json b/2021/CVE-2021-44228.json index a028e553ea..3517c56fb0 100644 --- a/2021/CVE-2021-44228.json +++ b/2021/CVE-2021-44228.json @@ -1382,10 +1382,10 @@ "description": "CVE-2021-44228 Log4j2 BurpSuite Scanner,Customize ceye.io api or other apis,including internal networks", "fork": false, "created_at": "2021-12-11T07:19:11Z", - "updated_at": "2026-10-23T05:32:14Z", + "updated_at": "2026-10-25T16:42:01Z", "pushed_at": "2023-06-13T09:17:54Z", - "stargazers_count": 841, - "watchers_count": 841, + "stargazers_count": 840, + "watchers_count": 840, "has_discussions": false, "forks_count": 106, "allow_forking": true, @@ -1401,7 +1401,7 @@ ], "visibility": "public", "forks": 106, - "watchers": 841, + "watchers": 840, "score": 0, "subscribers_count": 11 }, @@ -3840,10 +3840,10 @@ "description": "A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228 ", "fork": false, "created_at": "2021-12-13T03:57:50Z", - "updated_at": "2026-10-22T13:37:36Z", + "updated_at": "2026-10-25T16:42:01Z", "pushed_at": "2022-11-23T18:23:24Z", - "stargazers_count": 3425, - "watchers_count": 3425, + "stargazers_count": 3424, + "watchers_count": 3424, "has_discussions": true, "forks_count": 724, "allow_forking": true, @@ -3854,7 +3854,7 @@ "topics": [], "visibility": "public", "forks": 724, - "watchers": 3425, + "watchers": 3424, "score": 0, "subscribers_count": 54 }, @@ -7893,8 +7893,8 @@ "description": "log4j mitigation work", "fork": false, "created_at": "2021-12-16T16:42:44Z", - "updated_at": "2025-07-02T23:19:48Z", - "pushed_at": "2025-07-02T23:19:45Z", + "updated_at": "2026-10-25T14:07:48Z", + "pushed_at": "2026-10-25T14:07:45Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2022/CVE-2022-0847.json b/2022/CVE-2022-0847.json index cffa0fc860..c9a36aad4a 100644 --- a/2022/CVE-2022-0847.json +++ b/2022/CVE-2022-0847.json @@ -1237,12 +1237,12 @@ "description": "A collection of exploits and documentation that can be used to exploit the Linux Dirty Pipe vulnerability.", "fork": false, "created_at": "2022-03-12T20:57:24Z", - "updated_at": "2026-10-24T05:06:56Z", + "updated_at": "2026-10-25T13:15:23Z", "pushed_at": "2023-05-20T05:55:45Z", - "stargazers_count": 738, - "watchers_count": 738, + "stargazers_count": 739, + "watchers_count": 739, "has_discussions": false, - "forks_count": 161, + "forks_count": 162, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1250,8 +1250,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 161, - "watchers": 738, + "forks": 162, + "watchers": 739, "score": 0, "subscribers_count": 13 }, diff --git a/2022/CVE-2022-22965.json b/2022/CVE-2022-22965.json index 5883aa5687..ec14d48e2f 100644 --- a/2022/CVE-2022-22965.json +++ b/2022/CVE-2022-22965.json @@ -14,10 +14,10 @@ "description": "Spring4Shell Proof Of Concept\/And vulnerable application CVE-2022-22965", "fork": false, "created_at": "2022-03-30T07:54:45Z", - "updated_at": "2026-10-18T11:14:24Z", + "updated_at": "2026-10-25T16:46:05Z", "pushed_at": "2022-11-09T15:46:06Z", - "stargazers_count": 378, - "watchers_count": 378, + "stargazers_count": 379, + "watchers_count": 379, "has_discussions": false, "forks_count": 111, "allow_forking": true, @@ -37,7 +37,7 @@ ], "visibility": "public", "forks": 111, - "watchers": 378, + "watchers": 379, "score": 0, "subscribers_count": 18 }, diff --git a/2022/CVE-2022-28601.json b/2022/CVE-2022-28601.json deleted file mode 100644 index 647cffde72..0000000000 --- a/2022/CVE-2022-28601.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 490371011, - "name": "CVE-2022-28601", - "full_name": "FlaviuPopescu\/CVE-2022-28601", - "owner": { - "login": "FlaviuPopescu", - "id": 62330554, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62330554?v=4", - "html_url": "https:\/\/github.com\/FlaviuPopescu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/FlaviuPopescu\/CVE-2022-28601", - "description": "A Two-Factor Authentication (2FA) bypass vulnerability in \"Simple 2FA Plugin for Moodle\" by LMS Doctor", - "fork": false, - "created_at": "2022-05-09T16:57:14Z", - "updated_at": "2025-11-04T18:54:06Z", - "pushed_at": "2022-05-09T17:05:38Z", - "stargazers_count": 8, - "watchers_count": 8, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 8, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-28986.json b/2022/CVE-2022-28986.json deleted file mode 100644 index 932609ba23..0000000000 --- a/2022/CVE-2022-28986.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 504081605, - "name": "CVE-2022-28986", - "full_name": "FlaviuPopescu\/CVE-2022-28986", - "owner": { - "login": "FlaviuPopescu", - "id": 62330554, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62330554?v=4", - "html_url": "https:\/\/github.com\/FlaviuPopescu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/FlaviuPopescu\/CVE-2022-28986", - "description": "A Insecure direct object references (IDOR) vulnerability in \"Simple 2FA Plugin for Moodle\" by LMS Doctor", - "fork": false, - "created_at": "2022-06-16T08:52:28Z", - "updated_at": "2025-04-05T08:51:57Z", - "pushed_at": "2022-06-16T08:53:18Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-31101.json b/2022/CVE-2022-31101.json index e2504da4c6..eda8e89f6f 100644 --- a/2022/CVE-2022-31101.json +++ b/2022/CVE-2022-31101.json @@ -19,7 +19,7 @@ "stargazers_count": 42, "watchers_count": 42, "has_discussions": false, - "forks_count": 5, + "forks_count": 4, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -33,7 +33,7 @@ "prestashop" ], "visibility": "public", - "forks": 5, + "forks": 4, "watchers": 42, "score": 0, "subscribers_count": 9 diff --git a/2023/CVE-2023-27372.json b/2023/CVE-2023-27372.json index 613de3e261..1359eec609 100644 --- a/2023/CVE-2023-27372.json +++ b/2023/CVE-2023-27372.json @@ -14,10 +14,10 @@ "description": "SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions are 3.2.18, 4.0.10, 4.1.8, and 4.2.1.", "fork": false, "created_at": "2023-06-19T14:36:47Z", - "updated_at": "2026-10-08T15:56:41Z", + "updated_at": "2026-10-25T16:50:59Z", "pushed_at": "2024-10-13T21:08:54Z", - "stargazers_count": 68, - "watchers_count": 68, + "stargazers_count": 69, + "watchers_count": 69, "has_discussions": false, "forks_count": 7, "allow_forking": true, @@ -43,7 +43,7 @@ ], "visibility": "public", "forks": 7, - "watchers": 68, + "watchers": 69, "score": 0, "subscribers_count": 1 }, diff --git a/2023/CVE-2023-48795.json b/2023/CVE-2023-48795.json index f89e4984fe..8a6c3dacd7 100644 --- a/2023/CVE-2023-48795.json +++ b/2023/CVE-2023-48795.json @@ -130,5 +130,38 @@ "watchers": 1, "score": 0, "subscribers_count": 0 + }, + { + "id": 1433400028, + "name": "CVE-2023-48795", + "full_name": "breaksek\/CVE-2023-48795", + "owner": { + "login": "breaksek", + "id": 98497506, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/98497506?v=4", + "html_url": "https:\/\/github.com\/breaksek", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/breaksek\/CVE-2023-48795", + "description": null, + "fork": false, + "created_at": "2026-10-25T16:28:16Z", + "updated_at": "2026-10-25T16:36:27Z", + "pushed_at": "2026-10-25T16:36:24Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2024/CVE-2024-4577.json b/2024/CVE-2024-4577.json index ec1fecd93c..4bd8c47657 100644 --- a/2024/CVE-2024-4577.json +++ b/2024/CVE-2024-4577.json @@ -2425,5 +2425,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1433380366, + "name": "AI-Threat-Detection-PHP-CGI-Vulnerabilities", + "full_name": "CyberDefenderAI\/AI-Threat-Detection-PHP-CGI-Vulnerabilities", + "owner": { + "login": "CyberDefenderAI", + "id": 342381269, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/342381269?v=4", + "html_url": "https:\/\/github.com\/CyberDefenderAI", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/CyberDefenderAI\/AI-Threat-Detection-PHP-CGI-Vulnerabilities", + "description": "A curated, deep-dive guide to leveraging Artificial Intelligence, Machine Learning, and Large Language Models (LLMs) to detect, analyze, and neutralize advanced web application threats—with a specific focus on recent, critical PHP CGI Argument Injection vulnerabilities (such as CVE-2024-4577) and similar Remote Code Execution (RCE) breaches.", + "fork": false, + "created_at": "2026-10-25T16:07:29Z", + "updated_at": "2026-10-25T16:09:51Z", + "pushed_at": "2026-10-25T16:08:43Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2024/CVE-2024-6387.json b/2024/CVE-2024-6387.json index 4e4f3a8f87..f2ef7cbe98 100644 --- a/2024/CVE-2024-6387.json +++ b/2024/CVE-2024-6387.json @@ -3260,5 +3260,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1433546458, + "name": "CVE-2024-6387-how-to-fix", + "full_name": "ohackercego\/CVE-2024-6387-how-to-fix", + "owner": { + "login": "ohackercego", + "id": 342562901, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/342562901?v=4", + "html_url": "https:\/\/github.com\/ohackercego", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/ohackercego\/CVE-2024-6387-how-to-fix", + "description": "Guia de correcao e mitigacao da CVE-2024-6387 (regreSSHion \/ OpenSSH) (recuperado)", + "fork": false, + "created_at": "2026-10-25T19:16:27Z", + "updated_at": "2026-10-25T19:16:36Z", + "pushed_at": "2026-10-25T19:16:32Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2025/CVE-2025-0651.json b/2025/CVE-2025-0651.json new file mode 100644 index 0000000000..e6df5188f5 --- /dev/null +++ b/2025/CVE-2025-0651.json @@ -0,0 +1,35 @@ +[ + { + "id": 1433535568, + "name": "Cloudflare-Exploits-CVE-2026-14440-CVE-2026-3125-CVE-2025-0651", + "full_name": "Ghost-Bx1\/Cloudflare-Exploits-CVE-2026-14440-CVE-2026-3125-CVE-2025-0651", + "owner": { + "login": "Ghost-Bx1", + "id": 103540917, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103540917?v=4", + "html_url": "https:\/\/github.com\/Ghost-Bx1", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Ghost-Bx1\/Cloudflare-Exploits-CVE-2026-14440-CVE-2026-3125-CVE-2025-0651", + "description": "PoC e exploits para CVE-2026-14440 (Universal SSL CAA Bypass), CVE-2026-3125 (OpenNext SSRF), CVE-2025-0651 (WARP Windows Privesc) | By Gh0st-Bx1", + "fork": false, + "created_at": "2026-10-25T19:02:32Z", + "updated_at": "2026-10-25T19:03:31Z", + "pushed_at": "2026-10-25T19:03:27Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2025/CVE-2025-14847.json b/2025/CVE-2025-14847.json index c4985642a4..f3c9e39903 100644 --- a/2025/CVE-2025-14847.json +++ b/2025/CVE-2025-14847.json @@ -101,10 +101,10 @@ "description": "poc for CVE-2025-14847", "fork": false, "created_at": "2025-12-26T07:38:32Z", - "updated_at": "2026-09-29T18:13:25Z", + "updated_at": "2026-10-25T17:50:02Z", "pushed_at": "2025-12-26T09:27:00Z", - "stargazers_count": 26, - "watchers_count": 26, + "stargazers_count": 27, + "watchers_count": 27, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -115,7 +115,7 @@ "topics": [], "visibility": "public", "forks": 6, - "watchers": 26, + "watchers": 27, "score": 0, "subscribers_count": 0 }, diff --git a/2025/CVE-2025-21479.json b/2025/CVE-2025-21479.json index bbd43b7509..cea661fbfe 100644 --- a/2025/CVE-2025-21479.json +++ b/2025/CVE-2025-21479.json @@ -47,10 +47,10 @@ "description": "A proof-of-concept for CVE-2025-21479, chained with a Dirty Pagetable technique.", "fork": false, "created_at": "2025-11-16T09:08:06Z", - "updated_at": "2026-09-30T01:23:34Z", + "updated_at": "2026-10-25T13:30:21Z", "pushed_at": "2025-12-31T03:52:58Z", - "stargazers_count": 35, - "watchers_count": 35, + "stargazers_count": 34, + "watchers_count": 34, "has_discussions": false, "forks_count": 13, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 13, - "watchers": 35, + "watchers": 34, "score": 0, "subscribers_count": 3 }, diff --git a/2025/CVE-2025-24203.json b/2025/CVE-2025-24203.json index 447d0d9a37..4af0800005 100644 --- a/2025/CVE-2025-24203.json +++ b/2025/CVE-2025-24203.json @@ -14,10 +14,10 @@ "description": "Simple customization toolbox, utilizing CVE-2025-24203. Supports iOS 16.0 - iOS 18.3.2.", "fork": false, "created_at": "2025-05-09T07:18:55Z", - "updated_at": "2026-10-23T03:15:42Z", + "updated_at": "2026-10-25T14:30:24Z", "pushed_at": "2026-09-07T04:53:41Z", - "stargazers_count": 428, - "watchers_count": 428, + "stargazers_count": 427, + "watchers_count": 427, "has_discussions": false, "forks_count": 41, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 41, - "watchers": 428, + "watchers": 427, "score": 0, "subscribers_count": 11 }, diff --git a/2025/CVE-2025-26326.json b/2025/CVE-2025-26326.json new file mode 100644 index 0000000000..83f696014e --- /dev/null +++ b/2025/CVE-2025-26326.json @@ -0,0 +1,35 @@ +[ + { + "id": 1433546548, + "name": "CVE-2025-26326", + "full_name": "ohackercego\/CVE-2025-26326", + "owner": { + "login": "ohackercego", + "id": 342562901, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/342562901?v=4", + "html_url": "https:\/\/github.com\/ohackercego", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/ohackercego\/CVE-2025-26326", + "description": "CVE-2025-26326 - vulnerabilidade critica em add-ons de conexao remota do NVDA (recuperado)", + "fork": false, + "created_at": "2026-10-25T19:16:34Z", + "updated_at": "2026-10-25T19:16:42Z", + "pushed_at": "2026-10-25T19:16:38Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2025/CVE-2025-36911.json b/2025/CVE-2025-36911.json index 7785e5ebc6..7c03b817d4 100644 --- a/2025/CVE-2025-36911.json +++ b/2025/CVE-2025-36911.json @@ -333,12 +333,12 @@ "description": "The official reference implementation & vulnerability verification of our attack WhisperPair (CVE-2025-36911) which affects Google's Fast Pair protocol.", "fork": false, "created_at": "2026-03-30T15:29:04Z", - "updated_at": "2026-10-25T10:57:53Z", + "updated_at": "2026-10-25T16:44:05Z", "pushed_at": "2026-09-21T23:20:55Z", - "stargazers_count": 110, - "watchers_count": 110, + "stargazers_count": 111, + "watchers_count": 111, "has_discussions": true, - "forks_count": 12, + "forks_count": 13, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -352,8 +352,8 @@ "wireless-security" ], "visibility": "public", - "forks": 12, - "watchers": 110, + "forks": 13, + "watchers": 111, "score": 0, "subscribers_count": 2 }, diff --git a/2025/CVE-2025-55182.json b/2025/CVE-2025-55182.json index 288201ca9b..b2dd3da4e2 100644 --- a/2025/CVE-2025-55182.json +++ b/2025/CVE-2025-55182.json @@ -871,10 +871,10 @@ "description": "High Fidelity Detection Mechanism for RSC\/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)", "fork": false, "created_at": "2025-12-04T06:55:04Z", - "updated_at": "2026-10-25T05:05:37Z", + "updated_at": "2026-10-25T14:42:11Z", "pushed_at": "2025-12-07T04:16:46Z", - "stargazers_count": 2454, - "watchers_count": 2454, + "stargazers_count": 2455, + "watchers_count": 2455, "has_discussions": false, "forks_count": 270, "allow_forking": true, @@ -885,7 +885,7 @@ "topics": [], "visibility": "public", "forks": 270, - "watchers": 2454, + "watchers": 2455, "score": 0, "subscribers_count": 11 }, diff --git a/2025/CVE-2025-5548.json b/2025/CVE-2025-5548.json index b8a02b936a..7036f54386 100644 --- a/2025/CVE-2025-5548.json +++ b/2025/CVE-2025-5548.json @@ -1043,5 +1043,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1432356841, + "name": "CVE-2025-5548", + "full_name": "pedrose-99\/CVE-2025-5548", + "owner": { + "login": "pedrose-99", + "id": 57070713, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57070713?v=4", + "html_url": "https:\/\/github.com\/pedrose-99", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/pedrose-99\/CVE-2025-5548", + "description": "Proyecto de explotación.", + "fork": false, + "created_at": "2026-10-24T16:08:45Z", + "updated_at": "2026-10-25T19:27:30Z", + "pushed_at": "2026-10-25T19:27:27Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2025/CVE-2025-7771.json b/2025/CVE-2025-7771.json index 1a0440d6d0..235ab89a19 100644 --- a/2025/CVE-2025-7771.json +++ b/2025/CVE-2025-7771.json @@ -437,10 +437,10 @@ "description": "PoC for CVE-2025-7771: abuses ThrottleStop.sys for arbitrary physical r\/w, turns DSE off, then spoofs the integrity query so it still reports as enabled.", "fork": false, "created_at": "2026-10-21T11:35:01Z", - "updated_at": "2026-10-22T12:15:37Z", + "updated_at": "2026-10-25T16:50:11Z", "pushed_at": "2026-10-21T11:35:33Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -460,7 +460,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -479,10 +479,10 @@ "description": "manual driver mapper that abuses ThrottleStop.sys (CVE-2025-7771) for physical r\/w. pdb symbols, pfn va->pa map, NtAddAtom trampoline, calls DriverEntry.", "fork": false, "created_at": "2026-10-23T08:48:14Z", - "updated_at": "2026-10-23T08:50:05Z", + "updated_at": "2026-10-25T16:50:15Z", "pushed_at": "2026-10-23T08:48:39Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -500,7 +500,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2025/CVE-2025-8061.json b/2025/CVE-2025-8061.json index f2a58d9d3d..5537e5e19e 100644 --- a/2025/CVE-2025-8061.json +++ b/2025/CVE-2025-8061.json @@ -146,10 +146,10 @@ "description": "MSRMapper is a manual kernel driver mapper for Windows x64 that abuses CVE-2025-8061 in the vulnerable Lenovo driver LnvMSRIO.sys to perform a BYOVD (Bring Your Own Vulnerable Driver) attack.", "fork": false, "created_at": "2026-09-17T02:28:07Z", - "updated_at": "2026-10-14T17:29:52Z", + "updated_at": "2026-10-25T16:49:38Z", "pushed_at": "2026-09-17T02:45:22Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -160,7 +160,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 3, + "watchers": 4, "score": 0, "subscribers_count": 0 } diff --git a/2025/CVE-2025-9974.json b/2025/CVE-2025-9974.json index b87fbb71bb..23f3f5a6d4 100644 --- a/2025/CVE-2025-9974.json +++ b/2025/CVE-2025-9974.json @@ -52,7 +52,7 @@ "stargazers_count": 13, "watchers_count": 13, "has_discussions": false, - "forks_count": 3, + "forks_count": 4, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,7 +60,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 3, + "forks": 4, "watchers": 13, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-0006.json b/2026/CVE-2026-0006.json index 34244a18a7..156800c709 100644 --- a/2026/CVE-2026-0006.json +++ b/2026/CVE-2026-0006.json @@ -48,7 +48,7 @@ "fork": false, "created_at": "2026-10-19T22:15:15Z", "updated_at": "2026-10-19T22:19:00Z", - "pushed_at": "2026-10-19T22:18:56Z", + "pushed_at": "2026-10-25T13:53:25Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-0073.json b/2026/CVE-2026-0073.json index 3d25664736..477bb3d66a 100644 --- a/2026/CVE-2026-0073.json +++ b/2026/CVE-2026-0073.json @@ -522,5 +522,38 @@ "watchers": 5, "score": 0, "subscribers_count": 0 + }, + { + "id": 1433569401, + "name": "CVE-2026-0073", + "full_name": "umarrehmansiddiqui\/CVE-2026-0073", + "owner": { + "login": "umarrehmansiddiqui", + "id": 300436023, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/300436023?v=4", + "html_url": "https:\/\/github.com\/umarrehmansiddiqui", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/umarrehmansiddiqui\/CVE-2026-0073", + "description": "CVE-2026-0073: Android adbd TLS auth bypass PoC. Exploits a logic bug where OpenSSL's EVP_PKEY_cmp() returns -1 on key type mismatch (EC vs RSA), incorrectly evaluating to true and granting access. Includes functional Python and standalone C exploits to gain unauthenticated remote shell on Android devices with Wireless Debugging enabled.", + "fork": false, + "created_at": "2026-10-25T19:46:46Z", + "updated_at": "2026-10-25T19:49:43Z", + "pushed_at": "2026-10-25T19:49:40Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-106173.json b/2026/CVE-2026-106173.json index 6246a23510..ddf9f90776 100644 --- a/2026/CVE-2026-106173.json +++ b/2026/CVE-2026-106173.json @@ -19,7 +19,7 @@ "stargazers_count": 24, "watchers_count": 24, "has_discussions": false, - "forks_count": 7, + "forks_count": 9, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 7, + "forks": 9, "watchers": 24, "score": 0, "subscribers_count": 1 diff --git a/2026/CVE-2026-106781.json b/2026/CVE-2026-106781.json new file mode 100644 index 0000000000..3a6ecbf58f --- /dev/null +++ b/2026/CVE-2026-106781.json @@ -0,0 +1,35 @@ +[ + { + "id": 1433445746, + "name": "CVE-2026-106781", + "full_name": "tanuj8124\/CVE-2026-106781", + "owner": { + "login": "tanuj8124", + "id": 93467410, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/93467410?v=4", + "html_url": "https:\/\/github.com\/tanuj8124", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/tanuj8124\/CVE-2026-106781", + "description": "CVE-2026-106781 CH341SER Driver Installer Privilege Escalation", + "fork": false, + "created_at": "2026-10-25T17:18:01Z", + "updated_at": "2026-10-25T17:38:22Z", + "pushed_at": "2026-10-25T17:38:19Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-107181.json b/2026/CVE-2026-107181.json index 463f04c76d..00dec314f0 100644 --- a/2026/CVE-2026-107181.json +++ b/2026/CVE-2026-107181.json @@ -14,10 +14,10 @@ "description": "Telegram CVE-2026-107181", "fork": false, "created_at": "2026-10-10T01:12:57Z", - "updated_at": "2026-10-20T21:57:09Z", + "updated_at": "2026-10-25T14:03:40Z", "pushed_at": "2026-10-10T01:28:11Z", - "stargazers_count": 20, - "watchers_count": 20, + "stargazers_count": 21, + "watchers_count": 21, "has_discussions": false, "forks_count": 9, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 9, - "watchers": 20, + "watchers": 21, "score": 0, "subscribers_count": 1 }, diff --git a/2026/CVE-2026-10961.json b/2026/CVE-2026-10961.json index c85c15d829..a1a6cd33d0 100644 --- a/2026/CVE-2026-10961.json +++ b/2026/CVE-2026-10961.json @@ -19,7 +19,7 @@ "stargazers_count": 110, "watchers_count": 110, "has_discussions": false, - "forks_count": 24, + "forks_count": 25, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -38,7 +38,7 @@ "session-upload-progress" ], "visibility": "public", - "forks": 24, + "forks": 25, "watchers": 110, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-109618.json b/2026/CVE-2026-109618.json index 496defffb2..670e5272a6 100644 --- a/2026/CVE-2026-109618.json +++ b/2026/CVE-2026-109618.json @@ -212,10 +212,10 @@ "description": "Defensive mitigation and testing toolkit for PHP security vulnerabilities (CVE-2026-109618, CVE-2026-109619, CVE-2026-115560), including Apache protections and PHP hardening guidance", "fork": false, "created_at": "2026-10-21T04:01:24Z", - "updated_at": "2026-10-25T06:38:06Z", + "updated_at": "2026-10-25T13:53:50Z", "pushed_at": "2026-10-24T23:12:59Z", - "stargazers_count": 113, - "watchers_count": 113, + "stargazers_count": 114, + "watchers_count": 114, "has_discussions": false, "forks_count": 11, "allow_forking": true, @@ -236,7 +236,7 @@ ], "visibility": "public", "forks": 11, - "watchers": 113, + "watchers": 114, "score": 0, "subscribers_count": 2 }, @@ -288,10 +288,10 @@ "description": "CVE-2026-109618\/109619 — PHP session.upload_progress pre-auth RCE. Exploit research: remote ASLR chain, PoC & patch analysis.", "fork": false, "created_at": "2026-10-21T04:38:46Z", - "updated_at": "2026-10-24T18:56:04Z", + "updated_at": "2026-10-25T14:02:08Z", "pushed_at": "2026-10-23T03:10:28Z", - "stargazers_count": 46, - "watchers_count": 46, + "stargazers_count": 47, + "watchers_count": 47, "has_discussions": false, "forks_count": 23, "allow_forking": true, @@ -316,7 +316,7 @@ ], "visibility": "public", "forks": 23, - "watchers": 46, + "watchers": 47, "score": 0, "subscribers_count": 0 }, @@ -705,12 +705,12 @@ "description": "CVE-2026-109618\/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.", "fork": false, "created_at": "2026-10-21T07:55:16Z", - "updated_at": "2026-10-25T13:44:36Z", + "updated_at": "2026-10-25T19:14:57Z", "pushed_at": "2026-10-22T22:41:36Z", - "stargazers_count": 1783, - "watchers_count": 1783, + "stargazers_count": 1785, + "watchers_count": 1785, "has_discussions": false, - "forks_count": 615, + "forks_count": 619, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -733,8 +733,8 @@ "wordpress-security" ], "visibility": "public", - "forks": 615, - "watchers": 1783, + "forks": 619, + "watchers": 1785, "score": 0, "subscribers_count": 5 }, @@ -753,10 +753,10 @@ "description": "Check, block and hunt for php2shell (CVE-2026-109618 \/ CVE-2026-109619): PHP version scan with distro backport check, tested Apache\/Nginx\/Caddy\/HAProxy\/ModSecurity rules, compromise triage.", "fork": false, "created_at": "2026-10-21T07:57:41Z", - "updated_at": "2026-10-23T12:39:06Z", + "updated_at": "2026-10-25T19:12:47Z", "pushed_at": "2026-10-23T12:39:03Z", - "stargazers_count": 8, - "watchers_count": 8, + "stargazers_count": 9, + "watchers_count": 9, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -779,7 +779,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 8, + "watchers": 9, "score": 0, "subscribers_count": 0 }, @@ -1006,10 +1006,10 @@ "description": "Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 \/ CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.", "fork": false, "created_at": "2026-10-21T08:31:43Z", - "updated_at": "2026-10-25T13:44:08Z", + "updated_at": "2026-10-25T19:30:15Z", "pushed_at": "2026-10-22T07:19:20Z", - "stargazers_count": 997, - "watchers_count": 997, + "stargazers_count": 1002, + "watchers_count": 1002, "has_discussions": false, "forks_count": 255, "allow_forking": true, @@ -1020,7 +1020,7 @@ "topics": [], "visibility": "public", "forks": 255, - "watchers": 997, + "watchers": 1002, "score": 0, "subscribers_count": 36 }, @@ -1039,10 +1039,10 @@ "description": "Protects an unpatched PHP against php2shell (CVE-2026-109618 \/ CVE-2026-109619): a small extension that mirrors the official fix component by component and steps aside once the engine carries it. PHP 5.6-8.5; Sury, cPanel EA4, DirectAdmin, Docker, Windows.", "fork": false, "created_at": "2026-10-21T09:00:12Z", - "updated_at": "2026-10-25T10:40:42Z", + "updated_at": "2026-10-25T18:16:49Z", "pushed_at": "2026-10-24T17:43:31Z", - "stargazers_count": 149, - "watchers_count": 149, + "stargazers_count": 151, + "watchers_count": 151, "has_discussions": false, "forks_count": 9, "allow_forking": true, @@ -1061,7 +1061,7 @@ ], "visibility": "public", "forks": 9, - "watchers": 149, + "watchers": 151, "score": 0, "subscribers_count": 3 }, @@ -1495,10 +1495,10 @@ "description": "CVE-2026-109618\/109619 PHP2Shell — Heap UAF PoC (crash + RCE framework)", "fork": false, "created_at": "2026-10-21T10:44:37Z", - "updated_at": "2026-10-25T09:38:54Z", + "updated_at": "2026-10-25T14:57:27Z", "pushed_at": "2026-10-22T08:15:35Z", - "stargazers_count": 55, - "watchers_count": 55, + "stargazers_count": 56, + "watchers_count": 56, "has_discussions": false, "forks_count": 27, "allow_forking": true, @@ -1509,7 +1509,7 @@ "topics": [], "visibility": "public", "forks": 27, - "watchers": 55, + "watchers": 56, "score": 0, "subscribers_count": 0 }, @@ -1792,10 +1792,10 @@ "description": null, "fork": false, "created_at": "2026-10-21T11:52:39Z", - "updated_at": "2026-10-25T03:33:10Z", + "updated_at": "2026-10-25T15:12:32Z", "pushed_at": "2026-10-21T11:52:57Z", - "stargazers_count": 140, - "watchers_count": 140, + "stargazers_count": 139, + "watchers_count": 139, "has_discussions": false, "forks_count": 82, "allow_forking": true, @@ -1806,7 +1806,54 @@ "topics": [], "visibility": "public", "forks": 82, - "watchers": 140, + "watchers": 139, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1428324886, + "name": "php2shell", + "full_name": "Opathedane\/php2shell", + "owner": { + "login": "Opathedane", + "id": 88542122, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88542122?v=4", + "html_url": "https:\/\/github.com\/Opathedane", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Opathedane\/php2shell", + "description": "Read-only PHP discovery and patch-review scanner for Windows, Linux, and macOS. Produces HTML+CSV reports for CVE-2026-109618\/109619 assessment — never claims a host is clean or that the active HTTP runtime is verified.", + "fork": false, + "created_at": "2026-10-21T12:03:24Z", + "updated_at": "2026-10-25T19:07:37Z", + "pushed_at": "2026-10-25T19:13:33Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": true, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "apache-2-0", + "csv", + "dfir", + "golang", + "html-report", + "incident-response", + "linux", + "php", + "php2shell", + "php2shell-scanner", + "security-assessment", + "vulnerability-scanner", + "windows" + ], + "visibility": "public", + "forks": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -2014,10 +2061,10 @@ "description": "php2shell: Advanced hybrid exploit framework for CVE-2026-109618, CVE-2026-109619 & CVE-2026-115560. Features Auto-LFI parameter discovery, SAPI profiling, OOM fuzzing calibration, and FPM worker pinning. Stdlib only.", "fork": false, "created_at": "2026-10-21T12:37:59Z", - "updated_at": "2026-10-25T11:06:00Z", + "updated_at": "2026-10-25T17:15:17Z", "pushed_at": "2026-10-23T15:07:53Z", - "stargazers_count": 73, - "watchers_count": 73, + "stargazers_count": 75, + "watchers_count": 75, "has_discussions": false, "forks_count": 26, "allow_forking": true, @@ -2028,7 +2075,7 @@ "topics": [], "visibility": "public", "forks": 26, - "watchers": 73, + "watchers": 75, "score": 0, "subscribers_count": 0 }, @@ -3001,12 +3048,12 @@ "description": "Minimal source backports of the PHP core RCE fixes (CVE-2026-109618 \/ CVE-2026-109619) for EOL PHP 5.4 and 7.3", "fork": false, "created_at": "2026-10-21T14:20:57Z", - "updated_at": "2026-10-24T13:24:43Z", + "updated_at": "2026-10-25T19:30:11Z", "pushed_at": "2026-10-22T18:37:16Z", - "stargazers_count": 49, - "watchers_count": 49, + "stargazers_count": 50, + "watchers_count": 50, "has_discussions": false, - "forks_count": 9, + "forks_count": 10, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -3014,8 +3061,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 9, - "watchers": 49, + "forks": 10, + "watchers": 50, "score": 0, "subscribers_count": 0 }, @@ -3535,12 +3582,12 @@ "description": "CVE-2026-109618\/109619 PoC — PHP session.upload_progress heap use-after-free (CVSS 9.2)", "fork": false, "created_at": "2026-10-21T15:06:33Z", - "updated_at": "2026-10-25T07:55:49Z", + "updated_at": "2026-10-25T14:32:38Z", "pushed_at": "2026-10-24T11:24:48Z", - "stargazers_count": 140, - "watchers_count": 140, + "stargazers_count": 141, + "watchers_count": 141, "has_discussions": false, - "forks_count": 85, + "forks_count": 86, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -3548,8 +3595,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 85, - "watchers": 140, + "forks": 86, + "watchers": 141, "score": 0, "subscribers_count": 0 }, @@ -5090,10 +5137,10 @@ "description": "Python scanner for CVE-2026-109618, CVE-2026-109619 and the php2shell session chains (handler mismatch + LFI). No external dependencies.", "fork": false, "created_at": "2026-10-21T17:06:30Z", - "updated_at": "2026-10-25T02:20:45Z", + "updated_at": "2026-10-25T16:27:15Z", "pushed_at": "2026-10-22T06:50:25Z", - "stargazers_count": 71, - "watchers_count": 71, + "stargazers_count": 72, + "watchers_count": 72, "has_discussions": false, "forks_count": 16, "allow_forking": true, @@ -5113,7 +5160,7 @@ ], "visibility": "public", "forks": 16, - "watchers": 71, + "watchers": 72, "score": 0, "subscribers_count": 1 }, @@ -6348,12 +6395,12 @@ "description": null, "fork": false, "created_at": "2026-10-21T19:25:12Z", - "updated_at": "2026-10-21T19:31:25Z", + "updated_at": "2026-10-25T15:58:20Z", "pushed_at": "2026-10-21T19:25:18Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, - "forks_count": 2, + "forks_count": 3, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -6361,8 +6408,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 2, - "watchers": 0, + "forks": 3, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -6553,10 +6600,10 @@ "description": "Proof of concept for CVE-2026-109618\/CVE-2026-109619: PHP2Shell", "fork": false, "created_at": "2026-10-21T19:51:22Z", - "updated_at": "2026-10-24T11:33:29Z", + "updated_at": "2026-10-25T19:35:13Z", "pushed_at": "2026-10-22T17:44:04Z", - "stargazers_count": 34, - "watchers_count": 34, + "stargazers_count": 35, + "watchers_count": 35, "has_discussions": false, "forks_count": 16, "allow_forking": true, @@ -6567,7 +6614,7 @@ "topics": [], "visibility": "public", "forks": 16, - "watchers": 34, + "watchers": 35, "score": 0, "subscribers_count": 0 }, @@ -6624,7 +6671,7 @@ "stargazers_count": 11, "watchers_count": 11, "has_discussions": false, - "forks_count": 3, + "forks_count": 4, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -6632,7 +6679,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 3, + "forks": 4, "watchers": 11, "score": 0, "subscribers_count": 0 @@ -7198,10 +7245,10 @@ "description": "Unofficial PHP 7.4.33 RPMs for CentOS 7\/EL7 with the PHP2Shell (CVE-2026-109618\/109619) mitigation", "fork": false, "created_at": "2026-10-21T21:18:29Z", - "updated_at": "2026-10-23T07:24:51Z", + "updated_at": "2026-10-25T17:38:39Z", "pushed_at": "2026-10-21T22:18:26Z", - "stargazers_count": 12, - "watchers_count": 12, + "stargazers_count": 13, + "watchers_count": 13, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -7221,7 +7268,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 12, + "watchers": 13, "score": 0, "subscribers_count": 0 }, @@ -7828,10 +7875,10 @@ "description": "PHP2Shell: version-aware research toolkit for CVE-2026-109618 \/ CVE-2026-109619 — pre-auth RCE in PHP session.upload_progress (mod_php). Build profiles, labs, heap calibration and detection guidance for authorized security testing.", "fork": false, "created_at": "2026-10-21T22:53:01Z", - "updated_at": "2026-10-25T11:55:52Z", + "updated_at": "2026-10-25T19:48:48Z", "pushed_at": "2026-10-22T11:43:17Z", - "stargazers_count": 158, - "watchers_count": 158, + "stargazers_count": 159, + "watchers_count": 159, "has_discussions": false, "forks_count": 53, "allow_forking": true, @@ -7857,7 +7904,7 @@ ], "visibility": "public", "forks": 53, - "watchers": 158, + "watchers": 159, "score": 0, "subscribers_count": 0 }, @@ -8533,10 +8580,10 @@ "description": "Unofficial rebuild of PHP 7.4 for EL7 (CentOS\/RHEL 7) with the php2shell fix (CVE-2026-109618\/109619). A stopgap for EOL stacks — upgrading is the real fix.", "fork": false, "created_at": "2026-10-22T01:08:06Z", - "updated_at": "2026-10-23T14:59:49Z", + "updated_at": "2026-10-25T18:01:40Z", "pushed_at": "2026-10-22T01:18:18Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -8547,7 +8594,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 3, + "watchers": 4, "score": 0, "subscribers_count": 0 }, @@ -9747,12 +9794,12 @@ "description": "High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)", "fork": false, "created_at": "2026-10-22T03:53:20Z", - "updated_at": "2026-10-25T12:32:09Z", + "updated_at": "2026-10-25T19:13:39Z", "pushed_at": "2026-10-24T03:40:18Z", - "stargazers_count": 890, - "watchers_count": 890, + "stargazers_count": 897, + "watchers_count": 897, "has_discussions": false, - "forks_count": 130, + "forks_count": 131, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -9760,8 +9807,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 130, - "watchers": 890, + "forks": 131, + "watchers": 897, "score": 0, "subscribers_count": 2 }, @@ -10445,8 +10492,8 @@ "description": "Free open-source scanner: is your PHP version vulnerable to php2shell (CVE-2026-109618 \/ CVE-2026-109619)? Disclosure-only — no exploit probes.", "fork": false, "created_at": "2026-10-22T06:18:21Z", - "updated_at": "2026-10-23T21:29:58Z", - "pushed_at": "2026-10-23T18:45:35Z", + "updated_at": "2026-10-25T16:53:47Z", + "pushed_at": "2026-10-25T16:53:44Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, @@ -12400,10 +12447,10 @@ "description": "Scanner for PHP2Shell (CVE-2026-109618\/109619): URL blackbox, local device and SSH.", "fork": false, "created_at": "2026-10-22T09:45:34Z", - "updated_at": "2026-10-25T12:02:53Z", + "updated_at": "2026-10-25T17:44:13Z", "pushed_at": "2026-10-23T14:55:12Z", - "stargazers_count": 86, - "watchers_count": 86, + "stargazers_count": 88, + "watchers_count": 88, "has_discussions": false, "forks_count": 13, "allow_forking": true, @@ -12419,7 +12466,7 @@ ], "visibility": "public", "forks": 13, - "watchers": 86, + "watchers": 88, "score": 0, "subscribers_count": 0 }, @@ -12834,10 +12881,10 @@ "description": "php2shell Scanner ", "fork": false, "created_at": "2026-10-22T10:39:58Z", - "updated_at": "2026-10-25T08:25:12Z", + "updated_at": "2026-10-25T15:52:29Z", "pushed_at": "2026-10-24T16:54:48Z", - "stargazers_count": 12, - "watchers_count": 12, + "stargazers_count": 15, + "watchers_count": 15, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -12848,7 +12895,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 12, + "watchers": 15, "score": 0, "subscribers_count": 0 }, @@ -13623,10 +13670,10 @@ "description": "PHP2Shell exploit framework — CVE-2026-109618\/619 PHP session.upload_progress UAF to RCE", "fork": false, "created_at": "2026-10-22T12:53:40Z", - "updated_at": "2026-10-25T11:53:48Z", + "updated_at": "2026-10-25T16:27:10Z", "pushed_at": "2026-10-24T14:30:09Z", - "stargazers_count": 171, - "watchers_count": 171, + "stargazers_count": 172, + "watchers_count": 172, "has_discussions": false, "forks_count": 50, "allow_forking": true, @@ -13637,7 +13684,7 @@ "topics": [], "visibility": "public", "forks": 50, - "watchers": 171, + "watchers": 172, "score": 0, "subscribers_count": 0 }, @@ -14261,10 +14308,10 @@ "description": "Read-only triage script for WordPress sites after PHP2Shell (CVE-2026-109618, CVE-2026-109619). Checks for signs of compromise and writes a report per site.", "fork": false, "created_at": "2026-10-22T14:26:42Z", - "updated_at": "2026-10-24T21:05:14Z", + "updated_at": "2026-10-25T18:22:42Z", "pushed_at": "2026-10-24T21:05:11Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -14275,7 +14322,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 3, + "watchers": 4, "score": 0, "subscribers_count": 0 }, @@ -14475,7 +14522,7 @@ "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -14483,7 +14530,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 0, "score": 0, "subscribers_count": 0 @@ -14721,8 +14768,8 @@ "description": "A passive exposure analyzer for the PHP2Shell bug class (CVE-2026-109618 and CVE-2026-109619). Point it at a URL and it tells you, in one screen: which PHP interpreter is running behind that endpoint, whether that interpreter is past the fix level for its branch, how the deployment (SAPI, CDN, WAF) changes what an attacker could realistically do wi", "fork": false, "created_at": "2026-10-22T15:32:21Z", - "updated_at": "2026-10-25T07:07:51Z", - "pushed_at": "2026-10-25T07:10:58Z", + "updated_at": "2026-10-25T17:12:06Z", + "pushed_at": "2026-10-25T17:12:02Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -14986,10 +15033,10 @@ "description": "CVE-2026-109618 - multipart OOM bailout corruption trigger (PHP < 8.2.35\/8.3.36\/8.4.27\/8.5.12)", "fork": false, "created_at": "2026-10-22T16:03:35Z", - "updated_at": "2026-10-23T02:08:10Z", + "updated_at": "2026-10-25T17:17:06Z", "pushed_at": "2026-10-22T16:06:12Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -15000,7 +15047,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, @@ -15432,8 +15479,8 @@ "description": "In-depth technical verification, ASLR boundary analysis, and memory defaults impact for CVE-2026-109618 & CVE-2026-109619 (PHP2Shell)", "fork": false, "created_at": "2026-10-22T16:51:35Z", - "updated_at": "2026-10-25T00:12:53Z", - "pushed_at": "2026-10-25T00:12:50Z", + "updated_at": "2026-10-25T19:34:42Z", + "pushed_at": "2026-10-25T19:34:39Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -15819,10 +15866,10 @@ "description": "Unofficial patched PHP 7.4.33 for Synology DSM 6.2 x86_64 (replaces PHP7.4 7.4.30-0009). Fixes PHP2Shell (CVE-2026-109618\/109619) plus 90 security backports. Drop-in install with backup and rollback, test page, build scripts. Tested on DS1815+.", "fork": false, "created_at": "2026-10-22T17:59:32Z", - "updated_at": "2026-10-23T14:01:33Z", + "updated_at": "2026-10-25T17:45:35Z", "pushed_at": "2026-10-22T19:22:24Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -15841,7 +15888,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, @@ -17742,7 +17789,7 @@ "description": "Script que detecta si tu versión de PHP es vulnerable a PHP2Shell (CVE-2026-109618 \/ 109619)", "fork": false, "created_at": "2026-10-23T01:29:31Z", - "updated_at": "2026-10-25T01:10:04Z", + "updated_at": "2026-10-25T16:38:30Z", "pushed_at": "2026-10-25T01:10:01Z", "stargazers_count": 2, "watchers_count": 2, @@ -18228,10 +18275,10 @@ "description": "PHP2Shell: version-aware research toolkit for CVE-2026-109618 \/ CVE-2026-109619 — pre-auth RCE in PHP session.upload_progress (mod_php). Build profiles, labs, heap calibration and detection guidance for authorized security testing.", "fork": false, "created_at": "2026-10-23T03:46:10Z", - "updated_at": "2026-10-25T03:18:13Z", + "updated_at": "2026-10-25T16:52:57Z", "pushed_at": "2026-10-23T04:15:21Z", - "stargazers_count": 10, - "watchers_count": 10, + "stargazers_count": 11, + "watchers_count": 11, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -18242,7 +18289,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 10, + "watchers": 11, "score": 0, "subscribers_count": 1 }, @@ -20043,7 +20090,7 @@ "fork": false, "created_at": "2026-10-23T12:41:30Z", "updated_at": "2026-10-24T01:25:56Z", - "pushed_at": "2026-10-23T15:15:05Z", + "pushed_at": "2026-10-25T15:48:56Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -21401,8 +21448,8 @@ "description": "Backport-aware PHP2Shell (CVE-2026-109618\/109619) checker for installed PHP packages; knows distro and vendor fixed builds, incl. patched PHP 5.6-8.4 for CentOS 7", "fork": false, "created_at": "2026-10-23T20:47:08Z", - "updated_at": "2026-10-25T05:19:18Z", - "pushed_at": "2026-10-25T05:19:15Z", + "updated_at": "2026-10-25T13:53:12Z", + "pushed_at": "2026-10-25T13:53:09Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -22179,8 +22226,8 @@ "description": "Detection and response package for php2shell (CVE-2026-109618 \/ CVE-2026-109619): Suricata, Zeek, YARA, Sigma, ModSecurity rules, hunting queries, SOC triage, patch matrix. No exploit code.", "fork": false, "created_at": "2026-10-24T13:28:54Z", - "updated_at": "2026-10-25T05:57:29Z", - "pushed_at": "2026-10-25T05:58:00Z", + "updated_at": "2026-10-25T18:51:01Z", + "pushed_at": "2026-10-25T18:50:57Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -22724,48 +22771,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1432671183, - "name": "php2shell", - "full_name": "egctl\/php2shell", - "owner": { - "login": "egctl", - "id": 308909777, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/308909777?v=4", - "html_url": "https:\/\/github.com\/egctl", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/egctl\/php2shell", - "description": "CVE-2026-109618 PoC tool — OOM ghost bucket trigger in PHP POST parsing (CVSS 9.2)", - "fork": false, - "created_at": "2026-10-24T23:15:15Z", - "updated_at": "2026-10-25T11:48:00Z", - "pushed_at": "2026-10-25T11:47:56Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2026-109618", - "cve-2026-109619", - "ghost-bucket", - "oom", - "pentesting", - "php", - "poc", - "security" - ], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 0 - }, { "id": 1432685493, "name": "CVE-2026-109618-CVE-2026-109619-php2shell-", @@ -22847,10 +22852,10 @@ "description": "Agent Skills skill to detect, patch and verify PHP apps affected by PHP2Shell (CVE-2026-109618, CVE-2026-109619) or outdated PHP. Works with Claude Code, Codex, Copilot, Cursor, Gemini CLI, OpenCode.", "fork": false, "created_at": "2026-10-25T01:05:30Z", - "updated_at": "2026-10-25T13:53:17Z", + "updated_at": "2026-10-25T17:34:20Z", "pushed_at": "2026-10-25T01:13:15Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -22861,7 +22866,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 3, + "watchers": 4, "score": 0, "subscribers_count": 0 }, @@ -23006,6 +23011,39 @@ "score": 0, "subscribers_count": 0 }, + { + "id": 1432833142, + "name": "php2shell-toolkit", + "full_name": "smile178998\/php2shell-toolkit", + "owner": { + "login": "smile178998", + "id": 174305345, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/174305345?v=4", + "html_url": "https:\/\/github.com\/smile178998", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/smile178998\/php2shell-toolkit", + "description": "CVE-2026-109618 PHP session.upload_progress detection & authorized testing toolkit", + "fork": false, + "created_at": "2026-10-25T04:39:05Z", + "updated_at": "2026-10-25T18:02:46Z", + "pushed_at": "2026-10-25T18:02:42Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 + }, { "id": 1432936647, "name": "php2shell-demo", @@ -23194,7 +23232,7 @@ "description": "A deliberately limited, read-only security scanner for assessing exposure to CVE-2026-109618 (RFC 1867 multipart OOM memory corruption) and CVE-2026-109619 (stale global state use-after-free) in PHP deployments.", "fork": false, "created_at": "2026-10-25T09:35:34Z", - "updated_at": "2026-10-25T12:18:28Z", + "updated_at": "2026-10-25T14:41:51Z", "pushed_at": "2026-10-25T10:35:36Z", "stargazers_count": 2, "watchers_count": 2, @@ -23335,10 +23373,10 @@ "description": "The safe checker for the php2shell PHP RCEs (CVE-2026-109618\/109619). Local, offline, vendor-backport aware.", "fork": false, "created_at": "2026-10-25T11:46:22Z", - "updated_at": "2026-10-25T13:50:29Z", - "pushed_at": "2026-10-25T13:50:31Z", - "stargazers_count": 1, - "watchers_count": 1, + "updated_at": "2026-10-25T18:25:24Z", + "pushed_at": "2026-10-25T14:28:25Z", + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -23358,7 +23396,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 3, "score": 0, "subscribers_count": 0 }, @@ -23428,6 +23466,39 @@ "score": 0, "subscribers_count": 0 }, + { + "id": 1433189666, + "name": "homebrew-php2shell-doctor", + "full_name": "andreysheva\/homebrew-php2shell-doctor", + "owner": { + "login": "andreysheva", + "id": 21044196, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/21044196?v=4", + "html_url": "https:\/\/github.com\/andreysheva", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/andreysheva\/homebrew-php2shell-doctor", + "description": "Homebrew tap for php2shell-doctor - the safe checker for the php2shell PHP RCEs (CVE-2026-109618\/109619)", + "fork": false, + "created_at": "2026-10-25T12:46:27Z", + "updated_at": "2026-10-25T14:02:27Z", + "pushed_at": "2026-10-25T14:02:24Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, { "id": 1433211708, "name": "php2shellX", @@ -23443,10 +23514,10 @@ "description": "Next-generation exploit orchestrator for CVE-2026-109618\/619 — adds Cloudflare WAF bypass, flexible target specification (URL\/host\/port\/path\/batch), multi-format output (JSON\/CSV\/table), resume capability, and lab automation (Docker restart). Authored by TESTERXMA.", "fork": false, "created_at": "2026-10-25T13:10:48Z", - "updated_at": "2026-10-25T13:24:14Z", - "pushed_at": "2026-10-25T13:24:11Z", - "stargazers_count": 0, - "watchers_count": 0, + "updated_at": "2026-10-25T18:01:11Z", + "pushed_at": "2026-10-25T18:01:07Z", + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -23468,6 +23539,212 @@ ], "visibility": "public", "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1433279537, + "name": "php2shell", + "full_name": "ha1c9on\/php2shell", + "owner": { + "login": "ha1c9on", + "id": 53161861, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/53161861?v=4", + "html_url": "https:\/\/github.com\/ha1c9on", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/ha1c9on\/php2shell", + "description": "php2shell(CVE-2026-109618 \/ CVE-2026-109619) EXP", + "fork": false, + "created_at": "2026-10-25T14:23:10Z", + "updated_at": "2026-10-25T15:01:22Z", + "pushed_at": "2026-10-25T15:01:18Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1433452403, + "name": "CVE-2026-109618-109619-checker", + "full_name": "nokitakaze\/CVE-2026-109618-109619-checker", + "owner": { + "login": "nokitakaze", + "id": 9131758, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/9131758?v=4", + "html_url": "https:\/\/github.com\/nokitakaze", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/nokitakaze\/CVE-2026-109618-109619-checker", + "description": "CVE-2026-109618 \/ 109619 checker", + "fork": false, + "created_at": "2026-10-25T17:25:19Z", + "updated_at": "2026-10-25T19:38:42Z", + "pushed_at": "2026-10-25T19:38:37Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1433481794, + "name": "CVE-2026-109618-PoC", + "full_name": "0x1c1101\/CVE-2026-109618-PoC", + "owner": { + "login": "0x1c1101", + "id": 94699973, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/94699973?v=4", + "html_url": "https:\/\/github.com\/0x1c1101", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/0x1c1101\/CVE-2026-109618-PoC", + "description": null, + "fork": false, + "created_at": "2026-10-25T17:58:28Z", + "updated_at": "2026-10-25T19:26:28Z", + "pushed_at": "2026-10-25T18:26:54Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1433482973, + "name": "php2shell-checker", + "full_name": "fbuff-tools\/php2shell-checker", + "owner": { + "login": "fbuff-tools", + "id": 347898110, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/347898110?v=4", + "html_url": "https:\/\/github.com\/fbuff-tools", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/fbuff-tools\/php2shell-checker", + "description": "Check PHP for PHP2Shell (CVE-2026-109618, CVE-2026-109619): fixed PHP and Ubuntu\/Debian\/AlmaLinux packages, plus a read-only version check script.", + "fork": false, + "created_at": "2026-10-25T17:59:45Z", + "updated_at": "2026-10-25T18:01:00Z", + "pushed_at": "2026-10-25T18:00:39Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve-2026-109618", + "cve-2026-109619", + "php", + "php-fpm", + "php2shell", + "security", + "vulnerability-check" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1433526741, + "name": "PHP2Shell", + "full_name": "kipmyk\/PHP2Shell", + "owner": { + "login": "kipmyk", + "id": 22755761, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/22755761?v=4", + "html_url": "https:\/\/github.com\/kipmyk", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/kipmyk\/PHP2Shell", + "description": "A local Docker-based research lab for investigating PHP2Shell (CVE-2026-109618 and CVE-2026-109619), comparing PHP 8.4.26 and 8.4.27, and validating upstream security fixes and regression tests.", + "fork": false, + "created_at": "2026-10-25T18:51:41Z", + "updated_at": "2026-10-25T19:32:36Z", + "pushed_at": "2026-10-25T19:32:33Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1433533528, + "name": "Bigfix-PHP-Vulnerability-Scanner-Content-CVE-2026-109618-CVE-2026-109619", + "full_name": "jeffschafer\/Bigfix-PHP-Vulnerability-Scanner-Content-CVE-2026-109618-CVE-2026-109619", + "owner": { + "login": "jeffschafer", + "id": 120217242, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/120217242?v=4", + "html_url": "https:\/\/github.com\/jeffschafer", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/jeffschafer\/Bigfix-PHP-Vulnerability-Scanner-Content-CVE-2026-109618-CVE-2026-109619", + "description": "Bigfix PHP Vulnerability Scanner Content (CVE-2026-109618, CVE-2026-109619) for Windows, Linux and Mac.", + "fork": false, + "created_at": "2026-10-25T19:00:03Z", + "updated_at": "2026-10-25T19:04:54Z", + "pushed_at": "2026-10-25T19:04:50Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, "watchers": 0, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-109619.json b/2026/CVE-2026-109619.json index 7fef179848..39545dd01b 100644 --- a/2026/CVE-2026-109619.json +++ b/2026/CVE-2026-109619.json @@ -659,12 +659,12 @@ "description": "Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619\/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design", "fork": false, "created_at": "2026-10-23T13:49:52Z", - "updated_at": "2026-10-25T11:40:58Z", + "updated_at": "2026-10-25T18:55:16Z", "pushed_at": "2026-10-24T13:28:02Z", - "stargazers_count": 71, - "watchers_count": 71, + "stargazers_count": 73, + "watchers_count": 73, "has_discussions": false, - "forks_count": 43, + "forks_count": 48, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -688,8 +688,8 @@ "vulnerability-research" ], "visibility": "public", - "forks": 43, - "watchers": 71, + "forks": 48, + "watchers": 73, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-110922.json b/2026/CVE-2026-110922.json index a194f288e0..ea85a3a22e 100644 --- a/2026/CVE-2026-110922.json +++ b/2026/CVE-2026-110922.json @@ -14,8 +14,8 @@ "description": "Chrome Vulnerability Laboratory . CVE-2026-110922 ", "fork": false, "created_at": "2026-10-24T09:26:07Z", - "updated_at": "2026-10-25T13:18:49Z", - "pushed_at": "2026-10-25T13:18:46Z", + "updated_at": "2026-10-25T19:05:41Z", + "pushed_at": "2026-10-25T19:05:37Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-111497.json b/2026/CVE-2026-111497.json index 58e944b522..3c766af0c4 100644 --- a/2026/CVE-2026-111497.json +++ b/2026/CVE-2026-111497.json @@ -47,10 +47,10 @@ "description": "Reproducible local Brotli decoder proof for CVE-2026-111497 with a self-checking tuned RCE harness", "fork": false, "created_at": "2026-10-22T04:08:28Z", - "updated_at": "2026-10-25T08:30:13Z", + "updated_at": "2026-10-25T18:50:12Z", "pushed_at": "2026-10-25T01:09:02Z", - "stargazers_count": 41, - "watchers_count": 41, + "stargazers_count": 43, + "watchers_count": 43, "has_discussions": false, "forks_count": 14, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 14, - "watchers": 41, + "watchers": 43, "score": 0, "subscribers_count": 0 }, @@ -664,12 +664,12 @@ "description": "Claude Code and Codex skill for finding potentially vulnerable Brotli copies and guiding updates for CVE-2026-111497.", "fork": false, "created_at": "2026-10-23T16:32:12Z", - "updated_at": "2026-10-25T11:08:16Z", + "updated_at": "2026-10-25T18:33:12Z", "pushed_at": "2026-10-24T04:03:44Z", - "stargazers_count": 37, - "watchers_count": 37, + "stargazers_count": 42, + "watchers_count": 42, "has_discussions": false, - "forks_count": 2, + "forks_count": 3, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -677,8 +677,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 2, - "watchers": 37, + "forks": 3, + "watchers": 42, "score": 0, "subscribers_count": 0 }, @@ -1094,7 +1094,7 @@ "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1110,7 +1110,7 @@ "shell" ], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 0, "score": 0, "subscribers_count": 0 @@ -1246,8 +1246,8 @@ "description": "CVE-2026-111497 Node2Shell — Node.js Brotli OOB Write RCE PoC (CVSS 9.2)", "fork": false, "created_at": "2026-10-24T23:03:18Z", - "updated_at": "2026-10-25T04:54:09Z", - "pushed_at": "2026-10-25T02:49:17Z", + "updated_at": "2026-10-25T19:14:06Z", + "pushed_at": "2026-10-25T19:14:02Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -1329,7 +1329,7 @@ "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1337,7 +1337,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 1, "score": 0, "subscribers_count": 0 @@ -1357,10 +1357,10 @@ "description": "High fidelity detection mechanism for node2shell (CVE-2026-111497)", "fork": false, "created_at": "2026-10-25T04:23:54Z", - "updated_at": "2026-10-25T13:17:01Z", + "updated_at": "2026-10-25T19:30:31Z", "pushed_at": "2026-10-25T04:24:27Z", - "stargazers_count": 31, - "watchers_count": 31, + "stargazers_count": 43, + "watchers_count": 43, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -1371,7 +1371,7 @@ "topics": [], "visibility": "public", "forks": 6, - "watchers": 31, + "watchers": 43, "score": 0, "subscribers_count": 0 }, @@ -1390,7 +1390,7 @@ "description": "Node2Shell (CVE-2026-111497, Node.js Brotli decoder OOB write) black-box pentest lab — crash-gated double flag, agent-calibrated. Part of the *2Shell lab series. EN\/中文\/日本語.", "fork": false, "created_at": "2026-10-25T09:36:56Z", - "updated_at": "2026-10-25T11:46:47Z", + "updated_at": "2026-10-25T14:22:07Z", "pushed_at": "2026-10-25T11:41:54Z", "stargazers_count": 1, "watchers_count": 1, @@ -1481,5 +1481,190 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1433346245, + "name": "cve-2026-111497", + "full_name": "SYM01\/cve-2026-111497", + "owner": { + "login": "SYM01", + "id": 33443792, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/33443792?v=4", + "html_url": "https:\/\/github.com\/SYM01", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/SYM01\/cve-2026-111497", + "description": null, + "fork": false, + "created_at": "2026-10-25T15:32:16Z", + "updated_at": "2026-10-25T16:38:15Z", + "pushed_at": "2026-10-25T16:38:12Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1433453830, + "name": "CVE-2026-111497", + "full_name": "tikarammardi\/CVE-2026-111497", + "owner": { + "login": "tikarammardi", + "id": 19359591, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/19359591?v=4", + "html_url": "https:\/\/github.com\/tikarammardi", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/tikarammardi\/CVE-2026-111497", + "description": null, + "fork": false, + "created_at": "2026-10-25T17:26:55Z", + "updated_at": "2026-10-25T17:27:38Z", + "pushed_at": "2026-10-25T17:27:33Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1433480794, + "name": "http2shell-checker", + "full_name": "fbuff-tools\/http2shell-checker", + "owner": { + "login": "fbuff-tools", + "id": 347898110, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/347898110?v=4", + "html_url": "https:\/\/github.com\/fbuff-tools", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/fbuff-tools\/http2shell-checker", + "description": "Check Node.js, Bun, Python Brotli and libbrotli for HTTP2Shell \/ Node2Shell (CVE-2026-111497): fixed versions and a read-only version check script.", + "fork": false, + "created_at": "2026-10-25T17:57:20Z", + "updated_at": "2026-10-25T17:59:22Z", + "pushed_at": "2026-10-25T17:58:51Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "brotli", + "cve-2026-111497", + "http2shell", + "node2shell", + "nodejs", + "python", + "security", + "vulnerability-check" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1433487500, + "name": "http2shell-CVE-2026-111497", + "full_name": "Hika-sec\/http2shell-CVE-2026-111497", + "owner": { + "login": "Hika-sec", + "id": 266563669, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/266563669?v=4", + "html_url": "https:\/\/github.com\/Hika-sec", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Hika-sec\/http2shell-CVE-2026-111497", + "description": "PoC for CVE-2026-111497, a buffer overflow in Google Brotli 1.0.3–1.2.0 that may cause memory corruption, data disclosure, DoS, or RCE when processing crafted compressed data.", + "fork": false, + "created_at": "2026-10-25T18:05:02Z", + "updated_at": "2026-10-25T19:28:56Z", + "pushed_at": "2026-10-25T19:28:52Z", + "stargazers_count": 3, + "watchers_count": 3, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 3, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1433519241, + "name": "CVE-2026-111497", + "full_name": "emirwtz\/CVE-2026-111497", + "owner": { + "login": "emirwtz", + "id": 206140722, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206140722?v=4", + "html_url": "https:\/\/github.com\/emirwtz", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/emirwtz\/CVE-2026-111497", + "description": "Non-invasive Python detector for CVE-2026-111497 with Brotli\/Node.js version checks, JSON inventories, and CI-ready reports.", + "fork": false, + "created_at": "2026-10-25T18:42:23Z", + "updated_at": "2026-10-25T18:43:51Z", + "pushed_at": "2026-10-25T18:44:00Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "brotli", + "cli", + "cve-2026-111497", + "dependency-security", + "devsecops", + "nodejs", + "python", + "security-scanner", + "vulnerability-detection", + "vulnerability-management" + ], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-112866.json b/2026/CVE-2026-112866.json new file mode 100644 index 0000000000..673b3060bc --- /dev/null +++ b/2026/CVE-2026-112866.json @@ -0,0 +1,35 @@ +[ + { + "id": 1433370369, + "name": "CVE-2026-112866-woo-product-filter-sqli-poc", + "full_name": "Hassham1\/CVE-2026-112866-woo-product-filter-sqli-poc", + "owner": { + "login": "Hassham1", + "id": 31179291, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/31179291?v=4", + "html_url": "https:\/\/github.com\/Hassham1", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Hassham1\/CVE-2026-112866-woo-product-filter-sqli-poc", + "description": null, + "fork": false, + "created_at": "2026-10-25T15:56:58Z", + "updated_at": "2026-10-25T15:58:45Z", + "pushed_at": "2026-10-25T15:58:42Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-112900.json b/2026/CVE-2026-112900.json index c7b104512c..1a743de273 100644 --- a/2026/CVE-2026-112900.json +++ b/2026/CVE-2026-112900.json @@ -64,5 +64,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1433371373, + "name": "CVE-2026-112900-PoC", + "full_name": "kavin-jindal\/CVE-2026-112900-PoC", + "owner": { + "login": "kavin-jindal", + "id": 68228966, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/68228966?v=4", + "html_url": "https:\/\/github.com\/kavin-jindal", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/kavin-jindal\/CVE-2026-112900-PoC", + "description": "Proof of Concept (PoC) demonstrating Argument Injection in Pillow's Ghostscript call (Pillow < 13.0.0) potentially leading to arbitrary command execution (RCE).", + "fork": false, + "created_at": "2026-10-25T15:58:02Z", + "updated_at": "2026-10-25T16:23:48Z", + "pushed_at": "2026-10-25T15:59:36Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-114820.json b/2026/CVE-2026-114820.json index 428f4e1617..9a0f24059b 100644 --- a/2026/CVE-2026-114820.json +++ b/2026/CVE-2026-114820.json @@ -14,10 +14,10 @@ "description": "Read-only Ansible playbook that finds Java truststores still anchoring the eMudhra and AAA roots removed for CVE-2026-114820.", "fork": false, "created_at": "2026-10-24T19:33:38Z", - "updated_at": "2026-10-24T19:37:10Z", + "updated_at": "2026-10-25T16:26:04Z", "pushed_at": "2026-10-24T19:37:07Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 2, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-115560.json b/2026/CVE-2026-115560.json index 1fb80db4f9..8ce8a3a36e 100644 --- a/2026/CVE-2026-115560.json +++ b/2026/CVE-2026-115560.json @@ -263,5 +263,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1433322434, + "name": "CVE-2026-115560", + "full_name": "renzi25031469\/CVE-2026-115560", + "owner": { + "login": "renzi25031469", + "id": 63527374, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/63527374?v=4", + "html_url": "https:\/\/github.com\/renzi25031469", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/renzi25031469\/CVE-2026-115560", + "description": "PHP session.upload_progress Enabled - CVE-2026-115560 Precondition", + "fork": false, + "created_at": "2026-10-25T15:07:43Z", + "updated_at": "2026-10-25T15:12:50Z", + "pushed_at": "2026-10-25T15:12:47Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-14440.json b/2026/CVE-2026-14440.json new file mode 100644 index 0000000000..e6df5188f5 --- /dev/null +++ b/2026/CVE-2026-14440.json @@ -0,0 +1,35 @@ +[ + { + "id": 1433535568, + "name": "Cloudflare-Exploits-CVE-2026-14440-CVE-2026-3125-CVE-2025-0651", + "full_name": "Ghost-Bx1\/Cloudflare-Exploits-CVE-2026-14440-CVE-2026-3125-CVE-2025-0651", + "owner": { + "login": "Ghost-Bx1", + "id": 103540917, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103540917?v=4", + "html_url": "https:\/\/github.com\/Ghost-Bx1", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Ghost-Bx1\/Cloudflare-Exploits-CVE-2026-14440-CVE-2026-3125-CVE-2025-0651", + "description": "PoC e exploits para CVE-2026-14440 (Universal SSL CAA Bypass), CVE-2026-3125 (OpenNext SSRF), CVE-2025-0651 (WARP Windows Privesc) | By Gh0st-Bx1", + "fork": false, + "created_at": "2026-10-25T19:02:32Z", + "updated_at": "2026-10-25T19:03:31Z", + "pushed_at": "2026-10-25T19:03:27Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-23870.json b/2026/CVE-2026-23870.json index 960eaf09c4..6c71709c1c 100644 --- a/2026/CVE-2026-23870.json +++ b/2026/CVE-2026-23870.json @@ -14,10 +14,10 @@ "description": "Next.js v16.2.4 Security PoC Collection (CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, CVE-2026-44581, CVE-2026-44580, CVE-2026-44577, CVE-2026-44576, CVE-2026-44582, CVE-2026-44572)", "fork": false, "created_at": "2026-05-07T23:00:40Z", - "updated_at": "2026-10-24T11:22:35Z", + "updated_at": "2026-10-25T16:45:01Z", "pushed_at": "2026-05-12T04:28:18Z", - "stargazers_count": 182, - "watchers_count": 182, + "stargazers_count": 183, + "watchers_count": 183, "has_discussions": true, "forks_count": 42, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 42, - "watchers": 182, + "watchers": 183, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-24061.json b/2026/CVE-2026-24061.json index 2b6e96fefb..a17159cd65 100644 --- a/2026/CVE-2026-24061.json +++ b/2026/CVE-2026-24061.json @@ -625,10 +625,10 @@ "description": "CVE-2026-24061's poc : a critical authentication bypass in telnetd leading to RCE as root Affects systems with telnetd versions containing the vulnerability from 2015 onwards.", "fork": false, "created_at": "2026-01-24T17:54:40Z", - "updated_at": "2026-10-13T15:53:00Z", + "updated_at": "2026-10-25T16:15:49Z", "pushed_at": "2026-08-11T18:48:52Z", - "stargazers_count": 9, - "watchers_count": 9, + "stargazers_count": 10, + "watchers_count": 10, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -648,7 +648,7 @@ ], "visibility": "public", "forks": 3, - "watchers": 9, + "watchers": 10, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-24090.json b/2026/CVE-2026-24090.json index e8b4875b18..1fb443e9a1 100644 --- a/2026/CVE-2026-24090.json +++ b/2026/CVE-2026-24090.json @@ -14,10 +14,10 @@ "description": "Educational proof-of-concept (PoC) research tool demonstrating CVE-2026-24090 ABL verification bypass to inspect and test Qualcomm Keymaster RPMB state on Lenovo devices.", "fork": false, "created_at": "2026-10-15T11:03:10Z", - "updated_at": "2026-10-23T11:43:59Z", + "updated_at": "2026-10-25T17:57:21Z", "pushed_at": "2026-10-16T16:43:15Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-25262.json b/2026/CVE-2026-25262.json index 27695c4c5e..462d00d4b7 100644 --- a/2026/CVE-2026-25262.json +++ b/2026/CVE-2026-25262.json @@ -14,12 +14,12 @@ "description": "CVE-2026-25262 applicability to Snapdragon 8 Gen 1 — experimental results", "fork": false, "created_at": "2026-07-08T09:51:38Z", - "updated_at": "2026-10-24T06:37:30Z", + "updated_at": "2026-10-25T15:47:52Z", "pushed_at": "2026-07-12T05:26:33Z", - "stargazers_count": 32, - "watchers_count": 32, + "stargazers_count": 33, + "watchers_count": 33, "has_discussions": false, - "forks_count": 4, + "forks_count": 5, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -34,8 +34,8 @@ "security-research" ], "visibility": "public", - "forks": 4, - "watchers": 32, + "forks": 5, + "watchers": 33, "score": 0, "subscribers_count": 1 }, diff --git a/2026/CVE-2026-31431.json b/2026/CVE-2026-31431.json index e43e45e5b1..1ec3e37ff2 100644 --- a/2026/CVE-2026-31431.json +++ b/2026/CVE-2026-31431.json @@ -47,10 +47,10 @@ "description": "Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code", "fork": false, "created_at": "2026-04-29T12:15:28Z", - "updated_at": "2026-10-25T10:57:57Z", + "updated_at": "2026-10-25T17:09:11Z", "pushed_at": "2026-04-29T21:21:46Z", - "stargazers_count": 4081, - "watchers_count": 4081, + "stargazers_count": 4084, + "watchers_count": 4084, "has_discussions": false, "forks_count": 909, "allow_forking": true, @@ -72,7 +72,7 @@ ], "visibility": "public", "forks": 909, - "watchers": 4081, + "watchers": 4084, "score": 0, "subscribers_count": 34 }, @@ -190,10 +190,10 @@ "description": "Cross-platform C port of the Copy Fail Linux LPE (CVE-2026-31431). Disclosed 2026-04-29 by Theori \/ Xint.", "fork": false, "created_at": "2026-04-29T23:29:14Z", - "updated_at": "2026-10-25T05:06:07Z", + "updated_at": "2026-10-25T15:41:36Z", "pushed_at": "2026-07-17T13:24:28Z", - "stargazers_count": 447, - "watchers_count": 447, + "stargazers_count": 446, + "watchers_count": 446, "has_discussions": true, "forks_count": 120, "allow_forking": true, @@ -217,7 +217,7 @@ ], "visibility": "public", "forks": 120, - "watchers": 447, + "watchers": 446, "score": 0, "subscribers_count": 2 }, diff --git a/2026/CVE-2026-39808.json b/2026/CVE-2026-39808.json index da546f203a..f0b2572f72 100644 --- a/2026/CVE-2026-39808.json +++ b/2026/CVE-2026-39808.json @@ -203,5 +203,38 @@ "watchers": 2, "score": 0, "subscribers_count": 0 + }, + { + "id": 1433512775, + "name": "Fortinet-Exploits-CVE-2026-39808-106173-107656", + "full_name": "Ghost-Bx1\/Fortinet-Exploits-CVE-2026-39808-106173-107656", + "owner": { + "login": "Ghost-Bx1", + "id": 103540917, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103540917?v=4", + "html_url": "https:\/\/github.com\/Ghost-Bx1", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Ghost-Bx1\/Fortinet-Exploits-CVE-2026-39808-106173-107656", + "description": "PoC e Exploits completos para CVE-2026-39808 (FortiSandbox RCE), CVE-2026-106173 (FortiSIEM gRPC Path Traversal RCE) e CVE-2026-107656 (FortiSandbox Auth Bypass) - CVSS 9.6-9.8", + "fork": false, + "created_at": "2026-10-25T18:34:17Z", + "updated_at": "2026-10-25T18:34:46Z", + "pushed_at": "2026-10-25T18:34:42Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-41651.json b/2026/CVE-2026-41651.json index 388f203efc..bb36c62ab6 100644 --- a/2026/CVE-2026-41651.json +++ b/2026/CVE-2026-41651.json @@ -184,7 +184,7 @@ "stargazers_count": 11, "watchers_count": 11, "has_discussions": false, - "forks_count": 4, + "forks_count": 5, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -192,7 +192,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 4, + "forks": 5, "watchers": 11, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-41940.json b/2026/CVE-2026-41940.json index 82c042de54..78e3762af6 100644 --- a/2026/CVE-2026-41940.json +++ b/2026/CVE-2026-41940.json @@ -2490,10 +2490,10 @@ "description": "cPanel & WHM Authentication Bypass via CVE-2026-41940 explotation", "fork": false, "created_at": "2026-10-11T07:54:18Z", - "updated_at": "2026-10-22T15:52:50Z", + "updated_at": "2026-10-25T16:45:04Z", "pushed_at": "2026-10-20T17:26:07Z", - "stargazers_count": 533, - "watchers_count": 533, + "stargazers_count": 534, + "watchers_count": 534, "has_discussions": false, "forks_count": 142, "allow_forking": true, @@ -2509,7 +2509,7 @@ ], "visibility": "public", "forks": 142, - "watchers": 533, + "watchers": 534, "score": 0, "subscribers_count": 9 } diff --git a/2026/CVE-2026-43284.json b/2026/CVE-2026-43284.json index ec1dde0769..b67d1054f6 100644 --- a/2026/CVE-2026-43284.json +++ b/2026/CVE-2026-43284.json @@ -1383,10 +1383,10 @@ "description": "DirtyFrag Android Root is an Android app and helper module chain based on DirtyFrag (CVE-2026-43284). Tested on iQOO Z9 5G.", "fork": false, "created_at": "2026-10-02T18:29:26Z", - "updated_at": "2026-10-25T07:27:55Z", + "updated_at": "2026-10-25T18:27:10Z", "pushed_at": "2026-10-05T15:01:25Z", - "stargazers_count": 51, - "watchers_count": 51, + "stargazers_count": 53, + "watchers_count": 53, "has_discussions": false, "forks_count": 23, "allow_forking": true, @@ -1397,7 +1397,7 @@ "topics": [], "visibility": "public", "forks": 23, - "watchers": 51, + "watchers": 53, "score": 0, "subscribers_count": 1 }, @@ -1449,10 +1449,10 @@ "description": "Ephemeral root for Samsung Galaxy devices via CVE-2026-43284 — stability fork of DirtyFrag. Reboot to undo.", "fork": false, "created_at": "2026-10-19T09:24:01Z", - "updated_at": "2026-10-24T11:09:02Z", + "updated_at": "2026-10-25T15:55:32Z", "pushed_at": "2026-10-19T09:48:30Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -1472,7 +1472,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-43499.json b/2026/CVE-2026-43499.json index 72a4c8d9dc..fab3c660e9 100644 --- a/2026/CVE-2026-43499.json +++ b/2026/CVE-2026-43499.json @@ -361,10 +361,10 @@ "description": "GhostLock (CVE-2026-43499) kernel exploit for Android devices with locked bootloader", "fork": false, "created_at": "2026-07-12T16:05:24Z", - "updated_at": "2026-10-24T21:02:43Z", + "updated_at": "2026-10-25T15:36:27Z", "pushed_at": "2026-09-17T05:30:59Z", - "stargazers_count": 430, - "watchers_count": 430, + "stargazers_count": 431, + "watchers_count": 431, "has_discussions": false, "forks_count": 93, "allow_forking": true, @@ -382,7 +382,7 @@ ], "visibility": "public", "forks": 93, - "watchers": 430, + "watchers": 431, "score": 0, "subscribers_count": 13 }, @@ -1028,12 +1028,12 @@ "description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499", "fork": false, "created_at": "2026-07-17T14:24:08Z", - "updated_at": "2026-10-25T12:24:28Z", + "updated_at": "2026-10-25T17:20:15Z", "pushed_at": "2026-09-03T03:21:42Z", - "stargazers_count": 1481, - "watchers_count": 1481, + "stargazers_count": 1483, + "watchers_count": 1483, "has_discussions": false, - "forks_count": 295, + "forks_count": 296, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1041,8 +1041,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 295, - "watchers": 1481, + "forks": 296, + "watchers": 1483, "score": 0, "subscribers_count": 44 }, @@ -1709,12 +1709,12 @@ "description": "GhostLock One-Tap Execution App (CVE-2026-43499)", "fork": false, "created_at": "2026-07-29T05:04:25Z", - "updated_at": "2026-10-25T13:15:56Z", - "pushed_at": "2026-10-23T22:48:39Z", - "stargazers_count": 2268, - "watchers_count": 2268, + "updated_at": "2026-10-25T18:20:22Z", + "pushed_at": "2026-10-25T18:09:37Z", + "stargazers_count": 2284, + "watchers_count": 2284, "has_discussions": true, - "forks_count": 556, + "forks_count": 557, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1722,8 +1722,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 556, - "watchers": 2268, + "forks": 557, + "watchers": 2284, "score": 0, "subscribers_count": 37 }, @@ -2953,10 +2953,10 @@ "description": "Using CVE-2026-43499 to root your Galaxy S24 Series(SM-S92X0 ,(China \/ Hong Kong SAR \/ Taiwan))", "fork": false, "created_at": "2026-08-16T14:37:06Z", - "updated_at": "2026-10-25T13:43:54Z", + "updated_at": "2026-10-25T18:04:10Z", "pushed_at": "2026-10-25T13:46:02Z", - "stargazers_count": 87, - "watchers_count": 87, + "stargazers_count": 88, + "watchers_count": 88, "has_discussions": false, "forks_count": 11, "allow_forking": true, @@ -2982,7 +2982,7 @@ ], "visibility": "public", "forks": 11, - "watchers": 87, + "watchers": 88, "score": 0, "subscribers_count": 1 }, @@ -3001,10 +3001,10 @@ "description": "Kernel root exploit (CVE-2026-43499) for some Amazon devices", "fork": false, "created_at": "2026-08-17T16:57:57Z", - "updated_at": "2026-10-24T13:35:04Z", + "updated_at": "2026-10-25T18:46:24Z", "pushed_at": "2026-10-24T13:35:00Z", - "stargazers_count": 45, - "watchers_count": 45, + "stargazers_count": 46, + "watchers_count": 46, "has_discussions": false, "forks_count": 12, "allow_forking": true, @@ -3015,7 +3015,7 @@ "topics": [], "visibility": "public", "forks": 12, - "watchers": 45, + "watchers": 46, "score": 0, "subscribers_count": 2 }, @@ -3937,7 +3937,7 @@ "stargazers_count": 6, "watchers_count": 6, "has_discussions": false, - "forks_count": 4, + "forks_count": 5, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -3945,7 +3945,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 4, + "forks": 5, "watchers": 6, "score": 0, "subscribers_count": 1 @@ -4326,12 +4326,12 @@ "description": "CVE-2026-43499 GhostLock root exploit for Chromecast with Google TV (sabrina)", "fork": false, "created_at": "2026-09-14T19:58:49Z", - "updated_at": "2026-10-23T23:48:44Z", + "updated_at": "2026-10-25T14:53:45Z", "pushed_at": "2026-09-17T18:16:42Z", - "stargazers_count": 9, - "watchers_count": 9, + "stargazers_count": 10, + "watchers_count": 10, "has_discussions": false, - "forks_count": 2, + "forks_count": 3, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -4346,8 +4346,8 @@ "ghostlock" ], "visibility": "public", - "forks": 2, - "watchers": 9, + "forks": 3, + "watchers": 10, "score": 0, "subscribers_count": 0 }, @@ -5500,8 +5500,8 @@ "description": "Honor 70 (FNE-AN00) privilege escalation PoC: GhostLock (CVE-2026-43499) + custom KernelSU module loading", "fork": false, "created_at": "2026-10-16T11:28:27Z", - "updated_at": "2026-10-25T10:56:18Z", - "pushed_at": "2026-10-25T10:32:29Z", + "updated_at": "2026-10-25T16:54:25Z", + "pushed_at": "2026-10-25T16:54:21Z", "stargazers_count": 8, "watchers_count": 8, "has_discussions": false, @@ -5665,7 +5665,7 @@ "description": "GhostLock 官网：CVE-2026-43499 Android 临时 root + APK 下载", "fork": false, "created_at": "2026-10-22T15:30:41Z", - "updated_at": "2026-10-22T15:37:26Z", + "updated_at": "2026-10-25T13:53:33Z", "pushed_at": "2026-10-22T15:37:22Z", "stargazers_count": 0, "watchers_count": 0, @@ -5731,8 +5731,8 @@ "description": "在 AI 帮助下利用 ghostlock 提权 oppo a5 pbbt30 至 root", "fork": false, "created_at": "2026-10-23T06:09:52Z", - "updated_at": "2026-10-24T14:05:13Z", - "pushed_at": "2026-10-24T14:05:10Z", + "updated_at": "2026-10-25T16:12:58Z", + "pushed_at": "2026-10-25T16:12:54Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -5854,5 +5854,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1433513238, + "name": "Galaxy-Tab-S10FE-Root", + "full_name": "quillfinch\/Galaxy-Tab-S10FE-Root", + "owner": { + "login": "quillfinch", + "id": 333048602, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/333048602?v=4", + "html_url": "https:\/\/github.com\/quillfinch", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/quillfinch\/Galaxy-Tab-S10FE-Root", + "description": "One-command ADB root for Samsung Galaxy Tab S10 FE (SM-X520, X520XXSACZH6): CVE-2026-43499 GhostLock exploit + KernelSU late-load. No bootloader unlock.", + "fork": false, + "created_at": "2026-10-25T18:34:52Z", + "updated_at": "2026-10-25T18:42:27Z", + "pushed_at": "2026-10-25T18:42:23Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-54121.json b/2026/CVE-2026-54121.json index 4b72047418..da499f410a 100644 --- a/2026/CVE-2026-54121.json +++ b/2026/CVE-2026-54121.json @@ -424,10 +424,10 @@ "description": "🛡 Official AI Security Tool module for CVE-2026-54121 (Certighost): AD CS certificate abuse deep-dive, defensive audit workflows, and safe in-app console execution for authorized Active Directory security testing.", "fork": false, "created_at": "2026-09-11T23:08:16Z", - "updated_at": "2026-10-25T13:01:04Z", + "updated_at": "2026-10-25T19:30:21Z", "pushed_at": "2026-10-19T11:05:57Z", - "stargazers_count": 228, - "watchers_count": 228, + "stargazers_count": 236, + "watchers_count": 236, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -444,7 +444,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 228, + "watchers": 236, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-56190.json b/2026/CVE-2026-56190.json index f836c88a47..5f7076bd93 100644 --- a/2026/CVE-2026-56190.json +++ b/2026/CVE-2026-56190.json @@ -14,8 +14,8 @@ "description": "Unauthenticated RDP vulnerability in termsrv.dll (Windows Server 2022). Proof of Concept for heap spray, XFG bypass, Instruction Pointer control, and reliable Denial of Service (Event ID 7031).", "fork": false, "created_at": "2026-10-24T22:46:37Z", - "updated_at": "2026-10-24T23:59:31Z", - "pushed_at": "2026-10-24T23:59:27Z", + "updated_at": "2026-10-25T14:26:23Z", + "pushed_at": "2026-10-25T14:26:19Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-59248.json b/2026/CVE-2026-59248.json new file mode 100644 index 0000000000..47e20810e4 --- /dev/null +++ b/2026/CVE-2026-59248.json @@ -0,0 +1,35 @@ +[ + { + "id": 1433511701, + "name": "bug-free-broccoli", + "full_name": "DarynOngera\/bug-free-broccoli", + "owner": { + "login": "DarynOngera", + "id": 132561478, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/132561478?v=4", + "html_url": "https:\/\/github.com\/DarynOngera", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/DarynOngera\/bug-free-broccoli", + "description": "CVE-2026-59248", + "fork": false, + "created_at": "2026-10-25T18:32:57Z", + "updated_at": "2026-10-25T18:34:23Z", + "pushed_at": "2026-10-25T18:34:20Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-59310.json b/2026/CVE-2026-59310.json index aa0f7cfd00..12bc16e189 100644 --- a/2026/CVE-2026-59310.json +++ b/2026/CVE-2026-59310.json @@ -84,10 +84,10 @@ "description": "CVE-2026-59310-POC 仅用于自测，请勿用于攻击", "fork": false, "created_at": "2026-09-25T16:05:26Z", - "updated_at": "2026-10-15T01:52:10Z", + "updated_at": "2026-10-25T14:12:08Z", "pushed_at": "2026-09-25T16:12:44Z", - "stargazers_count": 7, - "watchers_count": 7, + "stargazers_count": 8, + "watchers_count": 8, "has_discussions": false, "forks_count": 5, "allow_forking": true, @@ -98,7 +98,7 @@ "topics": [], "visibility": "public", "forks": 5, - "watchers": 7, + "watchers": 8, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-63030.json b/2026/CVE-2026-63030.json index e9d29c591f..c6d7079abc 100644 --- a/2026/CVE-2026-63030.json +++ b/2026/CVE-2026-63030.json @@ -14,10 +14,10 @@ "description": "wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain", "fork": false, "created_at": "2026-07-17T20:18:33Z", - "updated_at": "2026-10-24T16:59:18Z", + "updated_at": "2026-10-25T16:44:49Z", "pushed_at": "2026-08-11T13:41:27Z", - "stargazers_count": 806, - "watchers_count": 806, + "stargazers_count": 807, + "watchers_count": 807, "has_discussions": false, "forks_count": 186, "allow_forking": true, @@ -32,7 +32,7 @@ ], "visibility": "public", "forks": 186, - "watchers": 806, + "watchers": 807, "score": 0, "subscribers_count": 3 }, @@ -467,10 +467,10 @@ "description": "CVE-2026-63030 + CVE-2026-60137 - “wp2shell”: unauthenticated RCE in WordPress core", "fork": false, "created_at": "2026-07-18T14:27:41Z", - "updated_at": "2026-10-22T13:11:29Z", + "updated_at": "2026-10-25T14:00:21Z", "pushed_at": "2026-07-18T19:05:43Z", - "stargazers_count": 117, - "watchers_count": 117, + "stargazers_count": 118, + "watchers_count": 118, "has_discussions": false, "forks_count": 36, "allow_forking": true, @@ -481,7 +481,7 @@ "topics": [], "visibility": "public", "forks": 36, - "watchers": 117, + "watchers": 118, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-64560.json b/2026/CVE-2026-64560.json index 8b91a5855f..6546af65af 100644 --- a/2026/CVE-2026-64560.json +++ b/2026/CVE-2026-64560.json @@ -357,10 +357,10 @@ "description": "一加 15T（PLZ110）临时 root + KernelSU per-boot 接管：CVE-2026-64560 移植，不写分区、重启即失效。内核 6.12.69-android16-6-g242e1a07f878。", "fork": false, "created_at": "2026-10-15T14:19:23Z", - "updated_at": "2026-10-24T22:05:49Z", + "updated_at": "2026-10-25T17:06:53Z", "pushed_at": "2026-10-15T14:25:19Z", - "stargazers_count": 32, - "watchers_count": 32, + "stargazers_count": 31, + "watchers_count": 31, "has_discussions": false, "forks_count": 11, "allow_forking": true, @@ -380,7 +380,7 @@ ], "visibility": "public", "forks": 11, - "watchers": 32, + "watchers": 31, "score": 0, "subscribers_count": 0 }, @@ -614,5 +614,47 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1433346559, + "name": "ksu-root", + "full_name": "wanwuzhishi\/ksu-root", + "owner": { + "login": "wanwuzhishi", + "id": 119481322, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/119481322?v=4", + "html_url": "https:\/\/github.com\/wanwuzhishi", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/wanwuzhishi\/ksu-root", + "description": "在 REDMI K90 Max（代号 prague \/ OS4.0.0.14）上，从手机端一键开一个临时 root。利用 CVE-2026-64560（posix-cpu-timers UAF）加载 KernelSU LKM，重启即失效。不需要电脑、不刷机、不解锁 Bootloader。", + "fork": false, + "created_at": "2026-10-25T15:32:39Z", + "updated_at": "2026-10-25T17:42:42Z", + "pushed_at": "2026-10-25T17:42:39Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "android", + "cve-2026-64560", + "kernel-exploit", + "kernelsu", + "prague", + "redmi-k90-max", + "root", + "shizuku" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-73570.json b/2026/CVE-2026-73570.json index 63a4723407..0bda1cf3f0 100644 --- a/2026/CVE-2026-73570.json +++ b/2026/CVE-2026-73570.json @@ -80,10 +80,10 @@ "description": "PoC for CVE-2026-73570 (Zimbra SMTP Command Injection)", "fork": false, "created_at": "2026-08-25T10:25:53Z", - "updated_at": "2026-09-03T12:44:44Z", + "updated_at": "2026-10-25T14:30:00Z", "pushed_at": "2026-08-25T10:36:17Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -99,7 +99,7 @@ ], "visibility": "public", "forks": 2, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-7482.json b/2026/CVE-2026-7482.json index f94223a6f1..55c91aa0c6 100644 --- a/2026/CVE-2026-7482.json +++ b/2026/CVE-2026-7482.json @@ -14,10 +14,10 @@ "description": "1day vuln research I guess", "fork": false, "created_at": "2026-05-05T19:55:32Z", - "updated_at": "2026-08-13T12:42:20Z", + "updated_at": "2026-10-25T13:53:53Z", "pushed_at": "2026-05-05T20:08:35Z", - "stargazers_count": 6, - "watchers_count": 6, + "stargazers_count": 7, + "watchers_count": 7, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 3, - "watchers": 6, + "watchers": 7, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-86950.json b/2026/CVE-2026-86950.json index dd22b81c7a..dfeae4f063 100644 --- a/2026/CVE-2026-86950.json +++ b/2026/CVE-2026-86950.json @@ -1,4 +1,37 @@ [ + { + "id": 1394753318, + "name": "CVE-2026-86950-POC", + "full_name": "DeAurity\/CVE-2026-86950-POC", + "owner": { + "login": "DeAurity", + "id": 324594907, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/324594907?v=4", + "html_url": "https:\/\/github.com\/DeAurity", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/DeAurity\/CVE-2026-86950-POC", + "description": "Out-of-bounds Write (CWE-787)", + "fork": false, + "created_at": "2026-09-29T08:46:38Z", + "updated_at": "2026-10-25T16:51:48Z", + "pushed_at": "2026-09-29T09:00:19Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, { "id": 1399999203, "name": "CVE-2026-86950", diff --git a/2026/CVE-2026-96652.json b/2026/CVE-2026-96652.json index 559b05e6dc..9845ec35c5 100644 --- a/2026/CVE-2026-96652.json +++ b/2026/CVE-2026-96652.json @@ -47,10 +47,10 @@ "description": "CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 CVE-2026-96656", "fork": false, "created_at": "2026-10-18T05:00:14Z", - "updated_at": "2026-10-24T04:39:56Z", + "updated_at": "2026-10-25T18:04:24Z", "pushed_at": "2026-10-21T18:47:48Z", - "stargazers_count": 99, - "watchers_count": 99, + "stargazers_count": 100, + "watchers_count": 100, "has_discussions": false, "forks_count": 16, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 16, - "watchers": 99, + "watchers": 100, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-98260.json b/2026/CVE-2026-98260.json index ec3e30a9ba..ea8de1a851 100644 --- a/2026/CVE-2026-98260.json +++ b/2026/CVE-2026-98260.json @@ -80,10 +80,10 @@ "description": "Target-specific Android CVE-2026-98260 research port for Xiaomi popsicle", "fork": false, "created_at": "2026-10-23T08:56:37Z", - "updated_at": "2026-10-25T13:29:10Z", + "updated_at": "2026-10-25T17:19:13Z", "pushed_at": "2026-10-23T09:29:52Z", - "stargazers_count": 7, - "watchers_count": 7, + "stargazers_count": 8, + "watchers_count": 8, "has_discussions": false, "forks_count": 8, "allow_forking": true, @@ -94,7 +94,7 @@ "topics": [], "visibility": "public", "forks": 8, - "watchers": 7, + "watchers": 8, "score": 0, "subscribers_count": 0 }, @@ -113,10 +113,10 @@ "description": "Target-specific Android CVE-2026-98260 research port for Xiaomi nezha", "fork": false, "created_at": "2026-10-23T12:12:15Z", - "updated_at": "2026-10-25T13:15:44Z", + "updated_at": "2026-10-25T15:23:45Z", "pushed_at": "2026-10-23T12:12:28Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -127,7 +127,7 @@ "topics": [], "visibility": "public", "forks": 6, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 }, @@ -179,10 +179,10 @@ "description": "Shizuku-driven CVE-2026-98260 root + KernelSU runtime LKM loader for Xiaomi yingtian \/ lhasa (kernel 6.18.21)", "fork": false, "created_at": "2026-10-25T12:51:04Z", - "updated_at": "2026-10-25T12:59:38Z", - "pushed_at": "2026-10-25T12:59:34Z", - "stargazers_count": 0, - "watchers_count": 0, + "updated_at": "2026-10-25T19:10:11Z", + "pushed_at": "2026-10-25T19:06:56Z", + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -202,7 +202,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -221,8 +221,8 @@ "description": "Research notes: porting CVE-2026-98260 to vivo\/iQOO GKI 6.6.127 (no exploit code; coordinated disclosure planned)", "fork": false, "created_at": "2026-10-25T13:37:37Z", - "updated_at": "2026-10-25T13:53:11Z", - "pushed_at": "2026-10-25T13:53:07Z", + "updated_at": "2026-10-25T14:30:24Z", + "pushed_at": "2026-10-25T14:30:20Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-99999.json b/2026/CVE-2026-99999.json index 2b018afce1..d67c3f9fab 100644 --- a/2026/CVE-2026-99999.json +++ b/2026/CVE-2026-99999.json @@ -434,7 +434,7 @@ "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, - "forks_count": 2, + "forks_count": 3, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -455,7 +455,7 @@ "vulnerability-analysis" ], "visibility": "public", - "forks": 2, + "forks": 3, "watchers": 0, "score": 0, "subscribers_count": 0