nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/10/28 07:49:16

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-10-28 16:49:16 +09:00
1 parent 064bd8ca02
commit 10caab0ffa
73 files changed
+1211 -548
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2014/CVE-2014-3153.json
+2 -2
View File
@@ -321,8 +321,8 @@
"description": "Persistent root for LG webOS 2.x TVs (CVE-2014-3153)",
"fork": false,
"created_at": "2026-10-27T18:32:14Z",
"updated_at": "2026-10-27T18:33:48Z",
"pushed_at": "2026-10-27T18:32:20Z",
"updated_at": "2026-10-28T00:34:49Z",
"pushed_at": "2026-10-28T00:34:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2014/CVE-2014-6271.json
+33
View File
@@ -3220,5 +3220,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1436409136,
"name": "shellshock-linux-host-hardening-lab",
"full_name": "ItzSteve04\/shellshock-linux-host-hardening-lab",
"owner": {
"login": "ItzSteve04",
"id": 118482376,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/118482376?v=4",
"html_url": "https:\/\/github.com\/ItzSteve04",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ItzSteve04\/shellshock-linux-host-hardening-lab",
"description": "Controlled penetration testing and Linux host-hardening lab demonstrating Shellshock (CVE-2014-6271), privilege escalation, vulnerability assessment and defensive security controls.",
"fork": false,
"created_at": "2026-10-28T00:01:31Z",
"updated_at": "2026-10-28T00:44:55Z",
"pushed_at": "2026-10-28T00:38:48Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2015/CVE-2015-9235.json
+4 -4
View File
@@ -92,10 +92,10 @@
"description": "针对JWT渗透开发的漏洞验证\/密钥爆破工具，针对CVE-2015-9235\/空白密钥\/未验证签名攻击\/CVE-2016-10555\/CVE-2018-0114\/CVE-2020-28042的结果生成用于FUZZ，也可使用字典\/字符枚举(包括JJWT)的方式进行爆破(JWT Crack)",
"fork": false,
"created_at": "2025-01-27T14:23:31Z",
"updated_at": "2026-10-14T08:55:20Z",
"updated_at": "2026-10-28T02:28:57Z",
"pushed_at": "2025-08-12T14:08:12Z",
"stargazers_count": 288,
"watchers_count": 288,
"stargazers_count": 287,
"watchers_count": 287,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -106,7 +106,7 @@
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 288,
"watchers": 287,
"score": 0,
"subscribers_count": 4
},
2016/CVE-2016-10555.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "针对JWT渗透开发的漏洞验证\/密钥爆破工具，针对CVE-2015-9235\/空白密钥\/未验证签名攻击\/CVE-2016-10555\/CVE-2018-0114\/CVE-2020-28042的结果生成用于FUZZ，也可使用字典\/字符枚举(包括JJWT)的方式进行爆破(JWT Crack)",
"fork": false,
"created_at": "2025-01-27T14:23:31Z",
"updated_at": "2026-10-14T08:55:20Z",
"updated_at": "2026-10-28T02:28:57Z",
"pushed_at": "2025-08-12T14:08:12Z",
"stargazers_count": 288,
"watchers_count": 288,
"stargazers_count": 287,
"watchers_count": 287,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 288,
"watchers": 287,
"score": 0,
"subscribers_count": 4
}
2017/CVE-2017-12615.json
+4 -4
View File
@@ -410,10 +410,10 @@
"description": "tomcat自动化漏洞扫描利用工具，支持批量弱口令检测、后台部署war包getshell、CVE-2017-12615 文件上传、CVE-2020-1938\/CNVD-2020-10487 文件包含",
"fork": false,
"created_at": "2024-08-29T06:38:16Z",
"updated_at": "2026-10-20T03:48:16Z",
"updated_at": "2026-10-28T02:28:47Z",
"pushed_at": "2026-06-16T13:16:53Z",
"stargazers_count": 297,
"watchers_count": 297,
"stargazers_count": 296,
"watchers_count": 296,
"has_discussions": false,
"forks_count": 24,
"allow_forking": true,
@@ -432,7 +432,7 @@
],
"visibility": "public",
"forks": 24,
"watchers": 297,
"watchers": 296,
"score": 0,
"subscribers_count": 2
},
2017/CVE-2017-20165.json
+1 -1
View File
@@ -15,7 +15,7 @@
"fork": false,
"created_at": "2023-01-11T10:20:27Z",
"updated_at": "2026-10-20T13:42:20Z",
"pushed_at": "2026-10-20T13:42:29Z",
"pushed_at": "2026-10-28T05:22:04Z",
"stargazers_count": 15,
"watchers_count": 15,
"has_discussions": false,
2017/CVE-2017-8291.json
-66
View File
@@ -1,70 +1,4 @@
[
{
"id": 973564702,
"name": "CVE-2017-8291",
"full_name": "shun1403\/CVE-2017-8291",
"owner": {
"login": "shun1403",
"id": 83597148,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/83597148?v=4",
"html_url": "https:\/\/github.com\/shun1403",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/shun1403\/CVE-2017-8291",
"description": null,
"fork": false,
"created_at": "2025-04-27T09:04:54Z",
"updated_at": "2025-04-27T11:07:18Z",
"pushed_at": "2025-04-27T11:07:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 973610559,
"name": "PIL-CVE-2017-8291-study",
"full_name": "shun1403\/PIL-CVE-2017-8291-study",
"owner": {
"login": "shun1403",
"id": 83597148,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/83597148?v=4",
"html_url": "https:\/\/github.com\/shun1403",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/shun1403\/PIL-CVE-2017-8291-study",
"description": null,
"fork": false,
"created_at": "2025-04-27T11:11:22Z",
"updated_at": "2025-04-27T11:30:37Z",
"pushed_at": "2025-04-27T11:15:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 1001377739,
"name": "PIL-CVE-2017-8291",
2018/CVE-2018-0114.json
+4 -4
View File
@@ -344,10 +344,10 @@
"description": "针对JWT渗透开发的漏洞验证\/密钥爆破工具，针对CVE-2015-9235\/空白密钥\/未验证签名攻击\/CVE-2016-10555\/CVE-2018-0114\/CVE-2020-28042的结果生成用于FUZZ，也可使用字典\/字符枚举(包括JJWT)的方式进行爆破(JWT Crack)",
"fork": false,
"created_at": "2025-01-27T14:23:31Z",
"updated_at": "2026-10-14T08:55:20Z",
"updated_at": "2026-10-28T02:28:57Z",
"pushed_at": "2025-08-12T14:08:12Z",
"stargazers_count": 288,
"watchers_count": 288,
"stargazers_count": 287,
"watchers_count": 287,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -358,7 +358,7 @@
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 288,
"watchers": 287,
"score": 0,
"subscribers_count": 4
},
2018/CVE-2018-17246.json
+33
View File
@@ -64,5 +64,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 1436563374,
"name": "work1-secure-api",
"full_name": "ght657\/work1-secure-api",
"owner": {
"login": "ght657",
"id": 210518239,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/210518239?v=4",
"html_url": "https:\/\/github.com\/ght657",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ght657\/work1-secure-api",
"description": "HDU IS Work 1 - Secure REST API (Flask) with CI\/CD (pytest + bandit + pip-audit) and CVE-2018-17246 analysis",
"fork": false,
"created_at": "2026-10-28T03:41:15Z",
"updated_at": "2026-10-28T03:42:14Z",
"pushed_at": "2026-10-28T03:42:10Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2019/CVE-2019-13272.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Linux 4.10 < 5.1.17 PTRACE_TRACEME local root",
"fork": false,
"created_at": "2019-07-31T04:51:43Z",
"updated_at": "2026-10-07T06:39:21Z",
"updated_at": "2026-10-28T06:23:04Z",
"pushed_at": "2019-08-01T16:02:59Z",
"stargazers_count": 334,
"watchers_count": 334,
"stargazers_count": 333,
"watchers_count": 333,
"has_discussions": false,
"forks_count": 104,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 104,
"watchers": 334,
"watchers": 333,
"score": 0,
"subscribers_count": 8
},
2019/CVE-2019-14462.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Defensive security demo: seL4 microkernel gateway protecting vulnerable ICS from CVE-2019-14462",
"fork": false,
"created_at": "2026-01-01T23:09:59Z",
"updated_at": "2026-02-12T01:34:51Z",
"pushed_at": "2026-02-12T01:34:47Z",
"updated_at": "2026-10-28T03:43:26Z",
"pushed_at": "2026-10-28T03:43:21Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2019/CVE-2019-16759.json
+33 -33
View File
@@ -350,39 +350,6 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 289977484,
"name": "CVE-2019-16759",
"full_name": "sunian19\/CVE-2019-16759",
"owner": {
"login": "sunian19",
"id": 53205380,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/53205380?v=4",
"html_url": "https:\/\/github.com\/sunian19",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/sunian19\/CVE-2019-16759",
"description": null,
"fork": false,
"created_at": "2020-08-24T16:15:10Z",
"updated_at": "2020-08-26T06:48:16Z",
"pushed_at": "2020-08-24T16:25:04Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 1
},
{
"id": 291726680,
"name": "vBulletin_Routestring-RCE",
@@ -448,5 +415,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 460460959,
"name": "CVE-2019-16759",
"full_name": "shavchen\/CVE-2019-16759",
"owner": {
"login": "shavchen",
"id": 34539839,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/34539839?v=4",
"html_url": "https:\/\/github.com\/shavchen",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/shavchen\/CVE-2019-16759",
"description": null,
"fork": false,
"created_at": "2022-02-17T14:05:15Z",
"updated_at": "2020-08-26T06:48:16Z",
"pushed_at": "2020-08-24T16:25:04Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2019/CVE-2019-17558.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340",
"fork": false,
"created_at": "2020-04-01T09:33:35Z",
"updated_at": "2026-10-27T19:09:00Z",
"updated_at": "2026-10-28T05:48:33Z",
"pushed_at": "2021-04-04T09:13:57Z",
"stargazers_count": 4293,
"watchers_count": 4293,
"stargazers_count": 4294,
"watchers_count": 4294,
"has_discussions": false,
"forks_count": 1078,
"allow_forking": true,
@@ -81,7 +81,7 @@
],
"visibility": "public",
"forks": 1078,
"watchers": 4293,
"watchers": 4294,
"score": 0,
"subscribers_count": 148
},
2019/CVE-2019-9193.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "CVE-2019–9193 - PostgreSQL 9.3-12.3 Authenticated Remote Code Execution",
"fork": false,
"created_at": "2022-03-29T21:02:02Z",
"updated_at": "2026-06-09T14:33:40Z",
"updated_at": "2026-10-28T01:23:07Z",
"pushed_at": "2022-05-26T23:00:33Z",
"stargazers_count": 21,
"watchers_count": 21,
"stargazers_count": 22,
"watchers_count": 22,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -69,7 +69,7 @@
],
"visibility": "public",
"forks": 6,
"watchers": 21,
"watchers": 22,
"score": 0,
"subscribers_count": 1
},
2020/CVE-2020-14882.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340",
"fork": false,
"created_at": "2020-04-01T09:33:35Z",
"updated_at": "2026-10-27T19:09:00Z",
"updated_at": "2026-10-28T05:48:33Z",
"pushed_at": "2021-04-04T09:13:57Z",
"stargazers_count": 4293,
"watchers_count": 4293,
"stargazers_count": 4294,
"watchers_count": 4294,
"has_discussions": false,
"forks_count": 1078,
"allow_forking": true,
@@ -48,7 +48,7 @@
],
"visibility": "public",
"forks": 1078,
"watchers": 4293,
"watchers": 4294,
"score": 0,
"subscribers_count": 148
},
2020/CVE-2020-1938.json
+4 -4
View File
@@ -977,10 +977,10 @@
"description": "tomcat自动化漏洞扫描利用工具，支持批量弱口令检测、后台部署war包getshell、CVE-2017-12615 文件上传、CVE-2020-1938\/CNVD-2020-10487 文件包含",
"fork": false,
"created_at": "2024-08-29T06:38:16Z",
"updated_at": "2026-10-20T03:48:16Z",
"updated_at": "2026-10-28T02:28:47Z",
"pushed_at": "2026-06-16T13:16:53Z",
"stargazers_count": 297,
"watchers_count": 297,
"stargazers_count": 296,
"watchers_count": 296,
"has_discussions": false,
"forks_count": 24,
"allow_forking": true,
@@ -999,7 +999,7 @@
],
"visibility": "public",
"forks": 24,
"watchers": 297,
"watchers": 296,
"score": 0,
"subscribers_count": 2
},
2020/CVE-2020-28042.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "针对JWT渗透开发的漏洞验证\/密钥爆破工具，针对CVE-2015-9235\/空白密钥\/未验证签名攻击\/CVE-2016-10555\/CVE-2018-0114\/CVE-2020-28042的结果生成用于FUZZ，也可使用字典\/字符枚举(包括JJWT)的方式进行爆破(JWT Crack)",
"fork": false,
"created_at": "2025-01-27T14:23:31Z",
"updated_at": "2026-10-14T08:55:20Z",
"updated_at": "2026-10-28T02:28:57Z",
"pushed_at": "2025-08-12T14:08:12Z",
"stargazers_count": 288,
"watchers_count": 288,
"stargazers_count": 287,
"watchers_count": 287,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 288,
"watchers": 287,
"score": 0,
"subscribers_count": 4
}
2021/CVE-2021-1675.json
+2 -2
View File
@@ -334,7 +334,7 @@
"stargazers_count": 1113,
"watchers_count": 1113,
"has_discussions": false,
"forks_count": 222,
"forks_count": 221,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -342,7 +342,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 222,
"forks": 221,
"watchers": 1113,
"score": 0,
"subscribers_count": 23
2021/CVE-2021-21974.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 188,
"watchers_count": 188,
"has_discussions": false,
"forks_count": 42,
"forks_count": 41,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 42,
"forks": 41,
"watchers": 188,
"score": 0,
"subscribers_count": 2
2021/CVE-2021-21985.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 214,
"watchers_count": 214,
"has_discussions": false,
"forks_count": 50,
"forks_count": 49,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 50,
"forks": 49,
"watchers": 214,
"score": 0,
"subscribers_count": 4
2021/CVE-2021-24098.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "POC for CVE-2021-24098",
"fork": false,
"created_at": "2021-04-01T07:29:44Z",
"updated_at": "2024-12-27T09:18:47Z",
"updated_at": "2026-10-28T02:27:55Z",
"pushed_at": "2021-04-01T07:34:23Z",
"stargazers_count": 13,
"watchers_count": 13,
"stargazers_count": 12,
"watchers_count": 12,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 13,
"watchers": 12,
"score": 0,
"subscribers_count": 3
}
2021/CVE-2021-26855.json
+2 -2
View File
@@ -299,7 +299,7 @@
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 69,
"forks_count": 68,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -307,7 +307,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 69,
"forks": 68,
"watchers": 5,
"score": 0,
"subscribers_count": 0
2021/CVE-2021-4034.json
+37 -4
View File
@@ -961,10 +961,10 @@
"description": "Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation",
"fork": false,
"created_at": "2022-01-26T14:26:10Z",
"updated_at": "2026-10-28T00:27:05Z",
"updated_at": "2026-10-28T04:50:44Z",
"pushed_at": "2022-06-21T14:52:05Z",
"stargazers_count": 1337,
"watchers_count": 1337,
"stargazers_count": 1338,
"watchers_count": 1338,
"has_discussions": false,
"forks_count": 208,
"allow_forking": true,
@@ -977,7 +977,7 @@
],
"visibility": "public",
"forks": 208,
"watchers": 1337,
"watchers": 1338,
"score": 0,
"subscribers_count": 13
},
@@ -6194,5 +6194,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1434591114,
"name": "CVE-2021-4034",
"full_name": "axisops\/CVE-2021-4034",
"owner": {
"login": "axisops",
"id": 5512152,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5512152?v=4",
"html_url": "https:\/\/github.com\/axisops",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/axisops\/CVE-2021-4034",
"description": "PwnKit CVE-2021-4034 Mitigation work (Ansible Role)",
"fork": false,
"created_at": "2026-10-26T15:45:24Z",
"updated_at": "2026-10-28T01:30:05Z",
"pushed_at": "2026-10-28T01:21:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2021/CVE-2021-42574.json
+33
View File
@@ -365,5 +365,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1436640853,
"name": "trojan-source-check",
"full_name": "mehul82099\/trojan-source-check",
"owner": {
"login": "mehul82099",
"id": 219339326,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/219339326?v=4",
"html_url": "https:\/\/github.com\/mehul82099",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mehul82099\/trojan-source-check",
"description": "CI scanner for Trojan Source attacks: bidi control characters (CVE-2021-42574), mixed-script identifiers (CVE-2021-42694), invisible zero-width chars. Stdlib only.",
"fork": false,
"created_at": "2026-10-28T05:26:54Z",
"updated_at": "2026-10-28T05:31:23Z",
"pushed_at": "2026-10-28T05:31:19Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2021/CVE-2021-43936.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 7,
"forks_count": 6,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 7,
"forks": 6,
"watchers": 9,
"score": 0,
"subscribers_count": 2
2021/CVE-2021-44228.json
+37 -4
View File
@@ -993,7 +993,7 @@
"stargazers_count": 1846,
"watchers_count": 1846,
"has_discussions": false,
"forks_count": 539,
"forks_count": 538,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1006,7 +1006,7 @@
"security"
],
"visibility": "public",
"forks": 539,
"forks": 538,
"watchers": 1846,
"score": 0,
"subscribers_count": 0
@@ -3845,7 +3845,7 @@
"stargazers_count": 3424,
"watchers_count": 3424,
"has_discussions": true,
"forks_count": 723,
"forks_count": 722,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -3853,7 +3853,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 723,
"forks": 722,
"watchers": 3424,
"score": 0,
"subscribers_count": 54
@@ -7878,6 +7878,39 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 439060792,
"name": "CVE-2021-44228",
"full_name": "axisops\/CVE-2021-44228",
"owner": {
"login": "axisops",
"id": 5512152,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5512152?v=4",
"html_url": "https:\/\/github.com\/axisops",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/axisops\/CVE-2021-44228",
"description": "Log4Shell CVE-2021-44228 Mitigation work (Ansible Role)",
"fork": false,
"created_at": "2021-12-16T16:42:44Z",
"updated_at": "2026-10-28T01:29:29Z",
"pushed_at": "2026-10-28T01:21:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 439071699,
"name": "MyLog4Shell",
2022/CVE-2022-38694.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "This is a one-time signature verification bypass. For persistent signature verification bypass, check https:\/\/github.com\/TomKing062\/CVE-2022-38691_38692",
"fork": false,
"created_at": "2023-06-10T08:31:26Z",
"updated_at": "2026-10-27T12:25:48Z",
"updated_at": "2026-10-28T03:22:44Z",
"pushed_at": "2025-06-14T16:55:26Z",
"stargazers_count": 641,
"watchers_count": 641,
"stargazers_count": 642,
"watchers_count": 642,
"has_discussions": true,
"forks_count": 89,
"allow_forking": true,
@@ -31,7 +31,7 @@
],
"visibility": "public",
"forks": 89,
"watchers": 641,
"watchers": 642,
"score": 0,
"subscribers_count": 15
},
2022/CVE-2022-42889.json
+4 -4
View File
@@ -1574,10 +1574,10 @@
"description": "Proof of Concept (PoC) for CVE-2022-42889 (Text4Shell) targeting Apache Commons Text versions prior to 1.10.0. This script automates Remote Code Execution (RCE) via script interpolation to establish a reverse shell. This version is a structured optimization based on the original exploit found at Exploit-DB (ID: 52261).",
"fork": false,
"created_at": "2026-01-02T05:55:49Z",
"updated_at": "2026-10-20T07:09:27Z",
"updated_at": "2026-10-28T03:24:48Z",
"pushed_at": "2026-07-05T09:14:22Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -1588,7 +1588,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
2022/CVE-2022-44721.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2022-12-03T11:04:17Z",
"updated_at": "2026-10-02T11:41:52Z",
"updated_at": "2026-10-28T04:07:55Z",
"pushed_at": "2022-12-02T14:38:27Z",
"stargazers_count": 24,
"watchers_count": 24,
"stargazers_count": 25,
"watchers_count": 25,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 24,
"watchers": 25,
"score": 0,
"subscribers_count": 0
}
2023/CVE-2023-23397.json
+1 -1
View File
@@ -957,7 +957,7 @@
"fork": false,
"created_at": "2026-08-28T09:00:27Z",
"updated_at": "2026-09-11T07:16:27Z",
"pushed_at": "2026-10-17T14:28:21Z",
"pushed_at": "2026-10-28T06:08:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-3269.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2023-3269: Linux kernel privilege escalation vulnerability",
"fork": false,
"created_at": "2023-06-28T13:22:26Z",
"updated_at": "2026-08-18T05:50:37Z",
"updated_at": "2026-10-28T06:24:50Z",
"pushed_at": "2026-02-23T14:35:10Z",
"stargazers_count": 501,
"watchers_count": 501,
"stargazers_count": 499,
"watchers_count": 499,
"has_discussions": false,
"forks_count": 36,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 36,
"watchers": 501,
"watchers": 499,
"score": 0,
"subscribers_count": 10
}
2023/CVE-2023-40028.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2024-03-23T15:25:49Z",
"updated_at": "2025-07-11T11:36:04Z",
"updated_at": "2026-10-28T06:13:17Z",
"pushed_at": "2024-03-23T18:59:30Z",
"stargazers_count": 13,
"watchers_count": 13,
"stargazers_count": 14,
"watchers_count": 14,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 13,
"watchers": 14,
"score": 0,
"subscribers_count": 1
},
2023/CVE-2023-45866.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "🚨 CVE-2023-45866 - BlueDucky Implementation (Using DuckyScript) 🔓 Unauthenticated Peering Leading to Code Execution (Using HID Keyboard)",
"fork": false,
"created_at": "2024-01-16T06:52:02Z",
"updated_at": "2026-10-27T17:56:05Z",
"updated_at": "2026-10-28T01:23:45Z",
"pushed_at": "2026-02-11T00:03:00Z",
"stargazers_count": 1901,
"watchers_count": 1901,
"stargazers_count": 1902,
"watchers_count": 1902,
"has_discussions": false,
"forks_count": 319,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 319,
"watchers": 1901,
"watchers": 1902,
"score": 0,
"subscribers_count": 30
},
2024/CVE-2024-1561.json
+2 -2
View File
@@ -80,8 +80,8 @@
"description": "HDU IS Work 1 - secure REST API, CI\/CD security pipeline, CVE-2024-1561 remediation",
"fork": false,
"created_at": "2026-10-27T02:20:31Z",
"updated_at": "2026-10-27T02:35:23Z",
"pushed_at": "2026-10-27T02:35:20Z",
"updated_at": "2026-10-28T02:44:49Z",
"pushed_at": "2026-10-28T02:44:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-21733.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "一个验证对CVE-2024-21733",
"fork": false,
"created_at": "2024-08-15T09:47:32Z",
"updated_at": "2026-06-07T17:14:44Z",
"updated_at": "2026-10-28T02:28:46Z",
"pushed_at": "2024-08-16T05:52:08Z",
"stargazers_count": 27,
"watchers_count": 27,
"stargazers_count": 25,
"watchers_count": 25,
"has_discussions": false,
"forks_count": 12,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 12,
"watchers": 27,
"watchers": 25,
"score": 0,
"subscribers_count": 1
}
2024/CVE-2024-3094.json
+37 -4
View File
@@ -1010,10 +1010,10 @@
"description": "notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)",
"fork": false,
"created_at": "2024-04-01T14:28:09Z",
"updated_at": "2026-10-22T16:58:35Z",
"updated_at": "2026-10-28T02:28:37Z",
"pushed_at": "2024-04-03T04:58:50Z",
"stargazers_count": 3553,
"watchers_count": 3553,
"stargazers_count": 3552,
"watchers_count": 3552,
"has_discussions": false,
"forks_count": 234,
"allow_forking": true,
@@ -1024,7 +1024,7 @@
"topics": [],
"visibility": "public",
"forks": 234,
"watchers": 3553,
"watchers": 3552,
"score": 0,
"subscribers_count": 34
},
@@ -2898,5 +2898,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1434591779,
"name": "CVE-2024-3094",
"full_name": "axisops\/CVE-2024-3094",
"owner": {
"login": "axisops",
"id": 5512152,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5512152?v=4",
"html_url": "https:\/\/github.com\/axisops",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/axisops\/CVE-2024-3094",
"description": "xz Backdoor CVE-2024-3094 Detection and Mitigation work (Ansible Role)",
"fork": false,
"created_at": "2026-10-26T15:45:56Z",
"updated_at": "2026-10-28T01:29:17Z",
"pushed_at": "2026-10-28T01:21:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2024/CVE-2024-49138.json
+2 -2
View File
@@ -428,8 +428,8 @@
"description": "Triagem de Alerta SOC 335, que destaca a exploração da vulnerabilidade CVE-2024-49138 , uma vulnerabilidade de escalonamento de privilégios do Windows.",
"fork": false,
"created_at": "2026-10-28T01:22:02Z",
"updated_at": "2026-10-28T01:22:07Z",
"pushed_at": "2026-10-28T01:22:03Z",
"updated_at": "2026-10-28T03:13:54Z",
"pushed_at": "2026-10-28T03:13:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-6387.json
+35 -2
View File
@@ -290,7 +290,7 @@
"stargazers_count": 528,
"watchers_count": 528,
"has_discussions": false,
"forks_count": 100,
"forks_count": 99,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -304,7 +304,7 @@
"redteam"
],
"visibility": "public",
"forks": 100,
"forks": 99,
"watchers": 528,
"score": 0,
"subscribers_count": 6
@@ -3293,5 +3293,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1434592636,
"name": "CVE-2024-6387",
"full_name": "axisops\/CVE-2024-6387",
"owner": {
"login": "axisops",
"id": 5512152,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5512152?v=4",
"html_url": "https:\/\/github.com\/axisops",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/axisops\/CVE-2024-6387",
"description": "regreSSHion CVE-2024-6387 Mitigation work (Ansible Role)",
"fork": false,
"created_at": "2026-10-26T15:46:36Z",
"updated_at": "2026-10-28T01:29:01Z",
"pushed_at": "2026-10-28T01:21:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-0411.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "This repository contains POC scenarios as part of CVE-2025-0411 MotW bypass.",
"fork": false,
"created_at": "2025-01-22T14:40:34Z",
"updated_at": "2026-10-13T19:07:17Z",
"updated_at": "2026-10-28T02:28:56Z",
"pushed_at": "2025-03-06T11:31:36Z",
"stargazers_count": 154,
"watchers_count": 154,
"stargazers_count": 153,
"watchers_count": 153,
"has_discussions": false,
"forks_count": 38,
"allow_forking": true,
@@ -35,7 +35,7 @@
],
"visibility": "public",
"forks": 38,
"watchers": 154,
"watchers": 153,
"score": 0,
"subscribers_count": 2
},
2025/CVE-2025-1094.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "WebSocket and SQL Injection Exploit Script",
"fork": false,
"created_at": "2025-02-27T11:08:10Z",
"updated_at": "2026-03-25T12:28:05Z",
"updated_at": "2026-10-28T02:29:00Z",
"pushed_at": "2025-02-27T11:12:44Z",
"stargazers_count": 41,
"watchers_count": 41,
"stargazers_count": 38,
"watchers_count": 38,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 41,
"watchers": 38,
"score": 0,
"subscribers_count": 2
},
2025/CVE-2025-24071.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2025-24071: NTLM Hash Leak via RAR\/ZIP Extraction and .library-ms File",
"fork": false,
"created_at": "2025-03-16T20:10:19Z",
"updated_at": "2026-10-27T17:16:52Z",
"updated_at": "2026-10-28T02:29:02Z",
"pushed_at": "2025-03-20T21:22:23Z",
"stargazers_count": 414,
"watchers_count": 414,
"stargazers_count": 413,
"watchers_count": 413,
"has_discussions": false,
"forks_count": 70,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 70,
"watchers": 414,
"watchers": 413,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-27740.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "CVE-2025-27740 — AD CS Subject Key Identifier Injection",
"fork": false,
"created_at": "2026-10-27T02:14:29Z",
"updated_at": "2026-10-27T03:23:02Z",
"pushed_at": "2026-10-27T02:28:46Z",
"updated_at": "2026-10-28T02:09:50Z",
"pushed_at": "2026-10-28T02:09:47Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-32023.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "PoC & Exploit for CVE-2025-32023 \/ PlaidCTF 2025 \"Zerodeo\"",
"fork": false,
"created_at": "2025-07-06T18:09:11Z",
"updated_at": "2026-10-13T19:08:12Z",
"updated_at": "2026-10-28T02:29:08Z",
"pushed_at": "2025-07-06T18:58:01Z",
"stargazers_count": 215,
"watchers_count": 215,
"stargazers_count": 214,
"watchers_count": 214,
"has_discussions": false,
"forks_count": 39,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 39,
"watchers": 215,
"watchers": 214,
"score": 0,
"subscribers_count": 4
},
2025/CVE-2025-32756.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Proof of Concept for CVE-2025-32756 - A critical stack-based buffer overflow vulnerability affecting multiple Fortinet products.",
"fork": false,
"created_at": "2025-06-05T14:16:31Z",
"updated_at": "2026-10-27T08:39:35Z",
"updated_at": "2026-10-28T04:32:37Z",
"pushed_at": "2025-06-13T07:55:34Z",
"stargazers_count": 190,
"watchers_count": 190,
"stargazers_count": 191,
"watchers_count": 191,
"has_discussions": false,
"forks_count": 29,
"allow_forking": true,
@@ -66,7 +66,7 @@
],
"visibility": "public",
"forks": 29,
"watchers": 190,
"watchers": 191,
"score": 0,
"subscribers_count": 6
},
2025/CVE-2025-48804.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Downgrade attack for CVE-2025-48804",
"fork": false,
"created_at": "2026-04-30T13:05:30Z",
"updated_at": "2026-10-20T04:26:57Z",
"updated_at": "2026-10-28T03:53:21Z",
"pushed_at": "2026-09-12T18:03:56Z",
"stargazers_count": 245,
"watchers_count": 245,
"stargazers_count": 246,
"watchers_count": 246,
"has_discussions": false,
"forks_count": 44,
"allow_forking": true,
@@ -32,7 +32,7 @@
],
"visibility": "public",
"forks": 44,
"watchers": 245,
"watchers": 246,
"score": 0,
"subscribers_count": 4
}
2025/CVE-2025-53770.json
+4 -4
View File
@@ -216,10 +216,10 @@
"description": "SharePoint WebPart Injection Exploit Tool",
"fork": false,
"created_at": "2025-07-21T13:48:37Z",
"updated_at": "2026-10-14T12:38:13Z",
"updated_at": "2026-10-28T02:29:10Z",
"pushed_at": "2025-11-28T20:11:11Z",
"stargazers_count": 316,
"watchers_count": 316,
"stargazers_count": 315,
"watchers_count": 315,
"has_discussions": false,
"forks_count": 77,
"allow_forking": true,
@@ -230,7 +230,7 @@
"topics": [],
"visibility": "public",
"forks": 77,
"watchers": 316,
"watchers": 315,
"score": 0,
"subscribers_count": 5
},
2025/CVE-2025-55182.json
+4 -4
View File
@@ -871,10 +871,10 @@
"description": "High Fidelity Detection Mechanism for RSC\/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)",
"fork": false,
"created_at": "2025-12-04T06:55:04Z",
"updated_at": "2026-10-27T18:26:24Z",
"updated_at": "2026-10-28T03:08:58Z",
"pushed_at": "2025-12-07T04:16:46Z",
"stargazers_count": 2457,
"watchers_count": 2457,
"stargazers_count": 2455,
"watchers_count": 2455,
"has_discussions": false,
"forks_count": 272,
"allow_forking": true,
@@ -885,7 +885,7 @@
"topics": [],
"visibility": "public",
"forks": 272,
"watchers": 2457,
"watchers": 2455,
"score": 0,
"subscribers_count": 11
},
2025/CVE-2025-8061.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "PoC for popping a system shell against the LnvMSRIO.sys driver",
"fork": false,
"created_at": "2025-10-06T09:33:59Z",
"updated_at": "2026-10-22T13:06:03Z",
"updated_at": "2026-10-28T02:29:17Z",
"pushed_at": "2025-10-06T10:54:28Z",
"stargazers_count": 127,
"watchers_count": 127,
"stargazers_count": 126,
"watchers_count": 126,
"has_discussions": false,
"forks_count": 15,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 15,
"watchers": 127,
"watchers": 126,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-10961.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "PHP CVE-2026-109618\/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12",
"fork": false,
"created_at": "2026-10-20T19:16:47Z",
"updated_at": "2026-10-27T11:29:15Z",
"pushed_at": "2026-10-27T11:23:14Z",
"updated_at": "2026-10-28T06:57:18Z",
"pushed_at": "2026-10-28T06:57:14Z",
"stargazers_count": 114,
"watchers_count": 114,
"has_discussions": false,
2026/CVE-2026-109618.json
+169 -152
View File
@@ -14,8 +14,8 @@
"description": "Zeek and Suricata Detections for \"php2shell\" CVE-2026-109618 and CVE-2026-109619",
"fork": false,
"created_at": "2026-10-18T06:43:48Z",
"updated_at": "2026-10-27T15:27:47Z",
"pushed_at": "2026-10-21T14:35:20Z",
"updated_at": "2026-10-28T02:08:18Z",
"pushed_at": "2026-10-28T02:08:14Z",
"stargazers_count": 13,
"watchers_count": 13,
"has_discussions": false,
@@ -672,12 +672,12 @@
"description": "CVE-2026-109618\/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.",
"fork": false,
"created_at": "2026-10-21T07:55:16Z",
"updated_at": "2026-10-28T01:24:52Z",
"updated_at": "2026-10-28T07:31:34Z",
"pushed_at": "2026-10-22T22:41:36Z",
"stargazers_count": 1869,
"watchers_count": 1869,
"stargazers_count": 1874,
"watchers_count": 1874,
"has_discussions": false,
"forks_count": 637,
"forks_count": 638,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -700,8 +700,8 @@
"wordpress-security"
],
"visibility": "public",
"forks": 637,
"watchers": 1869,
"forks": 638,
"watchers": 1874,
"score": 0,
"subscribers_count": 5
},
@@ -973,12 +973,12 @@
"description": "Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 \/ CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.",
"fork": false,
"created_at": "2026-10-21T08:31:43Z",
"updated_at": "2026-10-28T01:34:27Z",
"updated_at": "2026-10-28T07:09:22Z",
"pushed_at": "2026-10-22T07:19:20Z",
"stargazers_count": 1032,
"watchers_count": 1032,
"stargazers_count": 1034,
"watchers_count": 1034,
"has_discussions": false,
"forks_count": 258,
"forks_count": 259,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -986,8 +986,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 258,
"watchers": 1032,
"forks": 259,
"watchers": 1034,
"score": 0,
"subscribers_count": 36
},
@@ -1006,10 +1006,10 @@
"description": "Protects an unpatched PHP against php2shell (CVE-2026-109618 \/ CVE-2026-109619): a small extension that mirrors the official fix component by component and steps aside once the engine carries it. PHP 5.6-8.5; Sury, cPanel EA4, DirectAdmin, Docker, Windows.",
"fork": false,
"created_at": "2026-10-21T09:00:12Z",
"updated_at": "2026-10-27T20:17:02Z",
"updated_at": "2026-10-28T07:38:33Z",
"pushed_at": "2026-10-26T12:14:54Z",
"stargazers_count": 168,
"watchers_count": 168,
"stargazers_count": 169,
"watchers_count": 169,
"has_discussions": false,
"forks_count": 11,
"allow_forking": true,
@@ -1028,7 +1028,7 @@
],
"visibility": "public",
"forks": 11,
"watchers": 168,
"watchers": 169,
"score": 0,
"subscribers_count": 3
},
@@ -1462,10 +1462,10 @@
"description": "CVE-2026-109618\/109619 PHP2Shell — Heap UAF PoC (crash + RCE framework)",
"fork": false,
"created_at": "2026-10-21T10:44:37Z",
"updated_at": "2026-10-27T03:19:30Z",
"updated_at": "2026-10-28T02:45:56Z",
"pushed_at": "2026-10-22T08:15:35Z",
"stargazers_count": 59,
"watchers_count": 59,
"stargazers_count": 60,
"watchers_count": 60,
"has_discussions": false,
"forks_count": 29,
"allow_forking": true,
@@ -1476,7 +1476,7 @@
"topics": [],
"visibility": "public",
"forks": 29,
"watchers": 59,
"watchers": 60,
"score": 0,
"subscribers_count": 0
},
@@ -1950,10 +1950,10 @@
"description": "🐘 php2shell（CVE-2026-109618 \/ CVE-2026-109619）复现靶场 — session.upload_progress 文件名注入 + LFI → RCE，Docker 一键启动，附中文原理分析与 PoC",
"fork": false,
"created_at": "2026-10-21T12:36:55Z",
"updated_at": "2026-10-27T06:48:32Z",
"updated_at": "2026-10-28T06:04:05Z",
"pushed_at": "2026-10-21T14:38:46Z",
"stargazers_count": 29,
"watchers_count": 29,
"stargazers_count": 31,
"watchers_count": 31,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -1976,7 +1976,7 @@
],
"visibility": "public",
"forks": 6,
"watchers": 29,
"watchers": 31,
"score": 0,
"subscribers_count": 0
},
@@ -2000,7 +2000,7 @@
"stargazers_count": 89,
"watchers_count": 89,
"has_discussions": false,
"forks_count": 29,
"forks_count": 32,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2008,7 +2008,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 29,
"forks": 32,
"watchers": 89,
"score": 0,
"subscribers_count": 0
@@ -2309,7 +2309,7 @@
"fork": false,
"created_at": "2026-10-21T13:09:42Z",
"updated_at": "2026-10-21T15:27:25Z",
"pushed_at": "2026-10-21T15:24:04Z",
"pushed_at": "2026-10-28T06:55:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -2987,7 +2987,7 @@
"stargazers_count": 56,
"watchers_count": 56,
"has_discussions": false,
"forks_count": 11,
"forks_count": 12,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2995,7 +2995,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 11,
"forks": 12,
"watchers": 56,
"score": 0,
"subscribers_count": 0
@@ -3241,10 +3241,10 @@
"description": "php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.",
"fork": false,
"created_at": "2026-10-21T14:48:05Z",
"updated_at": "2026-10-27T11:32:50Z",
"updated_at": "2026-10-28T03:10:37Z",
"pushed_at": "2026-10-26T20:49:12Z",
"stargazers_count": 118,
"watchers_count": 118,
"stargazers_count": 119,
"watchers_count": 119,
"has_discussions": false,
"forks_count": 21,
"allow_forking": true,
@@ -3272,7 +3272,7 @@
],
"visibility": "public",
"forks": 21,
"watchers": 118,
"watchers": 119,
"score": 0,
"subscribers_count": 1
},
@@ -3516,12 +3516,12 @@
"description": "CVE-2026-109618\/109619 PoC — PHP session.upload_progress heap use-after-free (CVSS 9.2)",
"fork": false,
"created_at": "2026-10-21T15:06:33Z",
"updated_at": "2026-10-27T23:50:38Z",
"updated_at": "2026-10-28T03:09:26Z",
"pushed_at": "2026-10-24T11:24:48Z",
"stargazers_count": 146,
"watchers_count": 146,
"stargazers_count": 147,
"watchers_count": 147,
"has_discussions": false,
"forks_count": 89,
"forks_count": 88,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -3529,8 +3529,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 89,
"watchers": 146,
"forks": 88,
"watchers": 147,
"score": 0,
"subscribers_count": 0
},
@@ -4981,7 +4981,7 @@
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -5008,7 +5008,7 @@
"vulnerability"
],
"visibility": "public",
"forks": 1,
"forks": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
@@ -5028,10 +5028,10 @@
"description": "Python scanner for CVE-2026-109618, CVE-2026-109619 and the php2shell session chains (handler mismatch + LFI). No external dependencies.",
"fork": false,
"created_at": "2026-10-21T17:06:30Z",
"updated_at": "2026-10-27T15:05:48Z",
"updated_at": "2026-10-28T07:13:07Z",
"pushed_at": "2026-10-22T06:50:25Z",
"stargazers_count": 74,
"watchers_count": 74,
"stargazers_count": 75,
"watchers_count": 75,
"has_discussions": false,
"forks_count": 16,
"allow_forking": true,
@@ -5051,7 +5051,7 @@
],
"visibility": "public",
"forks": 16,
"watchers": 74,
"watchers": 75,
"score": 0,
"subscribers_count": 1
},
@@ -7612,10 +7612,10 @@
"description": "CVE-2026-109618 \/ CVE-2026-109619 — unauthenticated RCE in PHP's session.upload_progress handler (CVSS 9.2). Reproducible Docker lab against stock WordPress and Laravel on PHP 8.4.26, plus a read-only on-host audit script.",
"fork": false,
"created_at": "2026-10-21T22:21:46Z",
"updated_at": "2026-10-22T18:56:10Z",
"updated_at": "2026-10-28T07:06:15Z",
"pushed_at": "2026-10-21T22:27:54Z",
"stargazers_count": 12,
"watchers_count": 12,
"stargazers_count": 13,
"watchers_count": 13,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -7642,7 +7642,7 @@
],
"visibility": "public",
"forks": 2,
"watchers": 12,
"watchers": 13,
"score": 0,
"subscribers_count": 0
},
@@ -8064,8 +8064,8 @@
"description": "Detection and inventory tool for PHP core CVE-2026-109618 and CVE-2026-109619: finds PHP installs, checks versions and mitigating settings, never triggers the bugs. Python 3 standard library only.",
"fork": false,
"created_at": "2026-10-21T23:58:21Z",
"updated_at": "2026-10-21T23:58:29Z",
"pushed_at": "2026-10-21T23:58:26Z",
"updated_at": "2026-10-28T04:32:10Z",
"pushed_at": "2026-10-28T04:32:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -9611,12 +9611,12 @@
"description": "High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)",
"fork": false,
"created_at": "2026-10-22T03:53:20Z",
"updated_at": "2026-10-27T23:24:05Z",
"updated_at": "2026-10-28T03:23:17Z",
"pushed_at": "2026-10-24T03:40:18Z",
"stargazers_count": 947,
"watchers_count": 947,
"stargazers_count": 950,
"watchers_count": 950,
"has_discussions": false,
"forks_count": 138,
"forks_count": 139,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -9624,8 +9624,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 138,
"watchers": 947,
"forks": 139,
"watchers": 950,
"score": 0,
"subscribers_count": 2
},
@@ -10526,8 +10526,8 @@
"description": "php2shell (CVE-2026-109618\/109619) F5 BIG-IP Advanced WAF check and verification tools",
"fork": false,
"created_at": "2026-10-22T06:47:46Z",
"updated_at": "2026-10-27T04:25:56Z",
"pushed_at": "2026-10-27T04:25:53Z",
"updated_at": "2026-10-28T02:40:36Z",
"pushed_at": "2026-10-28T02:40:32Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12264,10 +12264,10 @@
"description": "Scanner for PHP2Shell (CVE-2026-109618\/109619): URL blackbox, local device and SSH.",
"fork": false,
"created_at": "2026-10-22T09:45:34Z",
"updated_at": "2026-10-27T09:52:13Z",
"updated_at": "2026-10-28T03:33:49Z",
"pushed_at": "2026-10-23T14:55:12Z",
"stargazers_count": 98,
"watchers_count": 98,
"stargazers_count": 99,
"watchers_count": 99,
"has_discussions": false,
"forks_count": 14,
"allow_forking": true,
@@ -12283,7 +12283,7 @@
],
"visibility": "public",
"forks": 14,
"watchers": 98,
"watchers": 99,
"score": 0,
"subscribers_count": 0
},
@@ -13487,10 +13487,10 @@
"description": "PHP2Shell exploit framework — CVE-2026-109618\/619 PHP session.upload_progress UAF to RCE",
"fork": false,
"created_at": "2026-10-22T12:53:40Z",
"updated_at": "2026-10-27T07:56:57Z",
"updated_at": "2026-10-28T05:35:20Z",
"pushed_at": "2026-10-26T12:50:30Z",
"stargazers_count": 182,
"watchers_count": 182,
"stargazers_count": 183,
"watchers_count": 183,
"has_discussions": false,
"forks_count": 53,
"allow_forking": true,
@@ -13501,7 +13501,7 @@
"topics": [],
"visibility": "public",
"forks": 53,
"watchers": 182,
"watchers": 183,
"score": 0,
"subscribers_count": 0
},
@@ -15296,8 +15296,8 @@
"description": "In-depth technical verification, ASLR boundary analysis, and memory defaults impact for CVE-2026-109618 & CVE-2026-109619 (PHP2Shell) CVE-2026-115560",
"fork": false,
"created_at": "2026-10-22T16:51:35Z",
"updated_at": "2026-10-26T04:34:57Z",
"pushed_at": "2026-10-26T04:34:53Z",
"updated_at": "2026-10-28T03:13:44Z",
"pushed_at": "2026-10-28T03:13:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -17526,39 +17526,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1430450541,
"name": "PHP2ShellX-CVE-2026-109618-109619",
"full_name": "Pr0fEs0r-X\/PHP2ShellX-CVE-2026-109618-109619",
"owner": {
"login": "Pr0fEs0r-X",
"id": 57534280,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57534280?v=4",
"html_url": "https:\/\/github.com\/Pr0fEs0r-X",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Pr0fEs0r-X\/PHP2ShellX-CVE-2026-109618-109619",
"description": "Script que detecta si tu versión de PHP es vulnerable a PHP2Shell (CVE-2026-109618 \/ 109619)",
"fork": false,
"created_at": "2026-10-23T01:29:31Z",
"updated_at": "2026-10-26T14:30:20Z",
"pushed_at": "2026-10-25T01:10:01Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1430459056,
"name": "php2shell",
@@ -20879,10 +20846,10 @@
"description": "Hybrid PHP2Shell Security Toolkit (CVE-2026-109618 & 109619). Features an automated vulnerability scanner, session-state analyzer, and application upload handler validator. For authorized security testing only.",
"fork": false,
"created_at": "2026-10-23T18:47:32Z",
"updated_at": "2026-10-24T15:32:30Z",
"updated_at": "2026-10-28T05:05:52Z",
"pushed_at": "2026-10-24T00:21:58Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -20907,7 +20874,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
@@ -22086,8 +22053,8 @@
"description": "Detection and response package for php2shell (CVE-2026-109618 \/ CVE-2026-109619): Suricata, Zeek, YARA, Sigma, ModSecurity rules, hunting queries, SOC triage, patch matrix. No exploit code.",
"fork": false,
"created_at": "2026-10-24T13:28:54Z",
"updated_at": "2026-10-27T22:58:03Z",
"pushed_at": "2026-10-27T22:57:59Z",
"updated_at": "2026-10-28T05:57:36Z",
"pushed_at": "2026-10-28T05:57:32Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -25375,44 +25342,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1435880595,
"name": "php2shell-cve-2026-109618",
"full_name": "lflare\/php2shell-cve-2026-109618",
"owner": {
"login": "lflare",
"id": 22326991,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/22326991?v=4",
"html_url": "https:\/\/github.com\/lflare",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/lflare\/php2shell-cve-2026-109618",
"description": "just an experiment",
"fork": false,
"created_at": "2026-10-27T14:58:04Z",
"updated_at": "2026-10-27T15:02:48Z",
"pushed_at": "2026-10-27T15:01:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-109618",
"cve-2026-109619",
"poc",
"rce"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1436020029,
"name": "CVE-2026-109618-CVE-2026-109619",
@@ -25494,10 +25423,10 @@
"description": "PHP2Shell — CVE-2026-109618\/109619 exploit toolkit: 5 chains + JA3 stealth + mass scan + safe webshell. Authorized testing only.",
"fork": false,
"created_at": "2026-10-27T21:00:40Z",
"updated_at": "2026-10-27T21:01:02Z",
"updated_at": "2026-10-28T02:48:04Z",
"pushed_at": "2026-10-27T21:00:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -25529,7 +25458,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
@@ -25565,5 +25494,93 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1436490035,
"name": "php80-scl-el7-rebuild",
"full_name": "swguan325\/php80-scl-el7-rebuild",
"owner": {
"login": "swguan325",
"id": 41408276,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41408276?v=4",
"html_url": "https:\/\/github.com\/swguan325",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/swguan325\/php80-scl-el7-rebuild",
"description": "Unofficial rebuild of Remi's php80-php 8.0.30-21 SCL packages for CentOS\/RHEL 7 (EOL). Includes all 44 CVE fixes between Remi -6 and -21, among them CVE-2026-109618 \/ CVE-2026-109619 (PHP2Shell).",
"fork": false,
"created_at": "2026-10-28T02:00:02Z",
"updated_at": "2026-10-28T03:58:52Z",
"pushed_at": "2026-10-28T03:57:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"centos7",
"cve-2026-109618",
"cve-2026-109619",
"el7",
"eol",
"php",
"php-8-0",
"php2shell",
"php80",
"remi",
"rhel7",
"rpm",
"rpmbuild",
"scl",
"security-patch"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1436615557,
"name": "php2shell-cve-2026-109618-109619",
"full_name": "lflare\/php2shell-cve-2026-109618-109619",
"owner": {
"login": "lflare",
"id": 22326991,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/22326991?v=4",
"html_url": "https:\/\/github.com\/lflare",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/lflare\/php2shell-cve-2026-109618-109619",
"description": "calibrated php2shell payloads for common docker images",
"fork": false,
"created_at": "2026-10-28T04:53:38Z",
"updated_at": "2026-10-28T04:54:19Z",
"pushed_at": "2026-10-28T04:53:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-109618",
"cve-2026-109619",
"php2shell",
"poc",
"rce"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-109619.json
+2 -2
View File
@@ -664,8 +664,8 @@
"description": "Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619\/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design",
"fork": false,
"created_at": "2026-10-23T13:49:52Z",
"updated_at": "2026-10-28T01:13:31Z",
"pushed_at": "2026-10-27T07:24:41Z",
"updated_at": "2026-10-28T07:40:32Z",
"pushed_at": "2026-10-28T07:40:28Z",
"stargazers_count": 100,
"watchers_count": 100,
"has_discussions": false,
2026/CVE-2026-111497.json
+96 -30
View File
@@ -664,10 +664,10 @@
"description": "Claude Code and Codex skill for finding potentially vulnerable Brotli copies and guiding updates for CVE-2026-111497.",
"fork": false,
"created_at": "2026-10-23T16:32:12Z",
"updated_at": "2026-10-28T00:21:25Z",
"updated_at": "2026-10-28T04:28:38Z",
"pushed_at": "2026-10-27T20:20:26Z",
"stargazers_count": 57,
"watchers_count": 57,
"stargazers_count": 58,
"watchers_count": 58,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -678,7 +678,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 57,
"watchers": 58,
"score": 0,
"subscribers_count": 0
},
@@ -1246,10 +1246,10 @@
"description": "CVE-2026-111497 Node2Shell — Node.js Brotli OOB Write RCE PoC (CVSS 9.2)",
"fork": false,
"created_at": "2026-10-24T23:03:18Z",
"updated_at": "2026-10-27T17:35:35Z",
"updated_at": "2026-10-28T06:07:00Z",
"pushed_at": "2026-10-25T20:32:46Z",
"stargazers_count": 43,
"watchers_count": 43,
"stargazers_count": 44,
"watchers_count": 44,
"has_discussions": false,
"forks_count": 11,
"allow_forking": true,
@@ -1260,7 +1260,7 @@
"topics": [],
"visibility": "public",
"forks": 11,
"watchers": 43,
"watchers": 44,
"score": 0,
"subscribers_count": 0
},
@@ -1324,10 +1324,10 @@
"description": "PoC for CVE-2026-111497 (HTTP2Shell)",
"fork": false,
"created_at": "2026-10-25T04:22:02Z",
"updated_at": "2026-10-27T08:15:52Z",
"updated_at": "2026-10-28T07:46:21Z",
"pushed_at": "2026-10-25T04:29:01Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -1338,7 +1338,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
@@ -1357,10 +1357,10 @@
"description": "High fidelity detection mechanism for node2shell (CVE-2026-111497)",
"fork": false,
"created_at": "2026-10-25T04:23:54Z",
"updated_at": "2026-10-27T15:08:01Z",
"updated_at": "2026-10-28T02:46:50Z",
"pushed_at": "2026-10-25T04:24:27Z",
"stargazers_count": 74,
"watchers_count": 74,
"stargazers_count": 75,
"watchers_count": 75,
"has_discussions": false,
"forks_count": 10,
"allow_forking": true,
@@ -1371,7 +1371,7 @@
"topics": [],
"visibility": "public",
"forks": 10,
"watchers": 74,
"watchers": 75,
"score": 0,
"subscribers_count": 1
},
@@ -1530,10 +1530,10 @@
"description": "Security research on CVE-2026-111497 (HTTP2Shell): Docker-only differential lab probing the Brotli decoder OOB write across vulnerable\/fixed Node builds",
"fork": false,
"created_at": "2026-10-25T17:23:52Z",
"updated_at": "2026-10-27T01:00:21Z",
"updated_at": "2026-10-28T07:46:25Z",
"pushed_at": "2026-10-27T01:00:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -1544,7 +1544,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
@@ -1596,10 +1596,10 @@
"description": "Check Node.js, Bun, Python Brotli and libbrotli for HTTP2Shell \/ Node2Shell (CVE-2026-111497): fixed versions and a read-only version check script.",
"fork": false,
"created_at": "2026-10-25T17:57:20Z",
"updated_at": "2026-10-25T17:59:22Z",
"updated_at": "2026-10-28T07:46:50Z",
"pushed_at": "2026-10-25T17:58:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -1619,7 +1619,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
@@ -1748,10 +1748,10 @@
"description": "Offline Brotli \/ HTTP2Shell (CVE-2026-111497) exposure and inventory checker across verified ecosystems. Python 3.10+, no dependencies or exploit payloads.",
"fork": false,
"created_at": "2026-10-26T01:29:29Z",
"updated_at": "2026-10-27T06:20:17Z",
"updated_at": "2026-10-28T07:46:40Z",
"pushed_at": "2026-10-26T05:18:09Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -1772,7 +1772,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
@@ -1915,6 +1915,39 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1434592376,
"name": "Node2Shell",
"full_name": "amier-ge\/Node2Shell",
"owner": {
"login": "amier-ge",
"id": 168223186,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/168223186?v=4",
"html_url": "https:\/\/github.com\/amier-ge",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/amier-ge\/Node2Shell",
"description": "A local Docker environment and proof of concept for Node2Shell (CVE-2026-111497)",
"fork": false,
"created_at": "2026-10-26T15:46:23Z",
"updated_at": "2026-10-28T06:44:59Z",
"pushed_at": "2026-10-26T15:46:29Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1434664686,
"name": "CVE-2026-111497",
@@ -2185,8 +2218,8 @@
"description": "Find vulnerable Brotli (CVE-2026-111497, Broccoli2Shell \/ Node2Shell \/ HTTP2Shell) in Kubernetes clusters, container images and Linux hosts. Checks the binaries themselves, not just version numbers, so it catches bundled copies in Node.js, Python, .NET, Bun and Envoy. Read-only, bash only.",
"fork": false,
"created_at": "2026-10-27T18:11:04Z",
"updated_at": "2026-10-27T21:27:50Z",
"pushed_at": "2026-10-27T23:23:47Z",
"updated_at": "2026-10-28T06:14:30Z",
"pushed_at": "2026-10-28T06:20:19Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -2287,5 +2320,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1436707333,
"name": "CVE-2026-111497",
"full_name": "suominen\/CVE-2026-111497",
"owner": {
"login": "suominen",
"id": 1939855,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1939855?v=4",
"html_url": "https:\/\/github.com\/suominen",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/suominen\/CVE-2026-111497",
"description": null,
"fork": false,
"created_at": "2026-10-28T06:45:04Z",
"updated_at": "2026-10-28T07:03:58Z",
"pushed_at": "2026-10-28T07:03:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-112611.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-112611\/112610: CoreGraphics PDF out-of-bounds writes (fixed in iOS 27.2) — fix-diff analysis, on-device proof, methodology, and PoC generator scripts. No prebuilt PoCs, no crash reports.",
"fork": false,
"created_at": "2026-10-27T09:46:42Z",
"updated_at": "2026-10-28T00:17:07Z",
"updated_at": "2026-10-28T06:07:09Z",
"pushed_at": "2026-10-27T09:46:48Z",
"stargazers_count": 9,
"watchers_count": 9,
"stargazers_count": 12,
"watchers_count": 12,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 9,
"watchers": 12,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-115560.json
+68 -2
View File
@@ -1,4 +1,37 @@
[
{
"id": 1430450541,
"name": "PHP2SHELL-Checker-v-1.0-CVE-2026-115560-",
"full_name": "Pr0fEs0r-X\/PHP2SHELL-Checker-v-1.0-CVE-2026-115560-",
"owner": {
"login": "Pr0fEs0r-X",
"id": 57534280,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57534280?v=4",
"html_url": "https:\/\/github.com\/Pr0fEs0r-X",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Pr0fEs0r-X\/PHP2SHELL-Checker-v-1.0-CVE-2026-115560-",
"description": "Script que detecta si tu versión de PHP es vulnerable a PHP2Shell (CVE-2026-109618 \/ 109619)",
"fork": false,
"created_at": "2026-10-23T01:29:31Z",
"updated_at": "2026-10-28T03:14:19Z",
"pushed_at": "2026-10-28T02:59:26Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1431297082,
"name": "php-cve-2026-115560-demo",
@@ -235,7 +268,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -259,7 +292,7 @@
"vulnerability"
],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
@@ -329,5 +362,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1436538516,
"name": "PHP2SHELL-Checker-v-2.0-CVE-2026-115560-",
"full_name": "Pr0fEs0r-X\/PHP2SHELL-Checker-v-2.0-CVE-2026-115560-",
"owner": {
"login": "Pr0fEs0r-X",
"id": 57534280,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57534280?v=4",
"html_url": "https:\/\/github.com\/Pr0fEs0r-X",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Pr0fEs0r-X\/PHP2SHELL-Checker-v-2.0-CVE-2026-115560-",
"description": "Versión 2.0 — añade barrido de hosts remotos vía HTTP a la v1.0. Cuando se ejecuta sin argumentos muestra un menú interactivo.",
"fork": false,
"created_at": "2026-10-28T03:06:25Z",
"updated_at": "2026-10-28T03:18:24Z",
"pushed_at": "2026-10-28T03:18:20Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-116692.json
+42
View File
@@ -0,0 +1,42 @@
[
{
"id": 1436587680,
"name": "mlflow-scorer-scanner",
"full_name": "foxcornlab\/mlflow-scorer-scanner",
"owner": {
"login": "foxcornlab",
"id": 43523802,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43523802?v=4",
"html_url": "https:\/\/github.com\/foxcornlab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/foxcornlab\/mlflow-scorer-scanner",
"description": "Detection-only triage scanner for MLflow scorer RCE CVE-2026-116692: version check via the \/version endpoint. No payloads, no scorer invocation.",
"fork": false,
"created_at": "2026-10-28T04:15:21Z",
"updated_at": "2026-10-28T04:15:42Z",
"pushed_at": "2026-10-28T04:15:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-116692",
"detection-only",
"mlflow",
"security",
"triage",
"vulnerability-scanner"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-27912.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "CVE-2026-27912 (ResetNightmare) — Linux\/impacket port of Semperis Community's Invoke-ResetNightmare PoC",
"fork": false,
"created_at": "2026-08-08T16:36:35Z",
"updated_at": "2026-10-27T12:55:49Z",
"updated_at": "2026-10-28T07:33:48Z",
"pushed_at": "2026-08-11T18:15:39Z",
"stargazers_count": 17,
"watchers_count": 17,
"stargazers_count": 18,
"watchers_count": 18,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -76,7 +76,7 @@
],
"visibility": "public",
"forks": 5,
"watchers": 17,
"watchers": 18,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-31431.json
+6 -6
View File
@@ -47,10 +47,10 @@
"description": "Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code",
"fork": false,
"created_at": "2026-04-29T12:15:28Z",
"updated_at": "2026-10-28T00:21:19Z",
"updated_at": "2026-10-28T02:25:31Z",
"pushed_at": "2026-04-29T21:21:46Z",
"stargazers_count": 4079,
"watchers_count": 4079,
"stargazers_count": 4080,
"watchers_count": 4080,
"has_discussions": false,
"forks_count": 910,
"allow_forking": true,
@@ -72,7 +72,7 @@
],
"visibility": "public",
"forks": 910,
"watchers": 4079,
"watchers": 4080,
"score": 0,
"subscribers_count": 34
},
@@ -6257,7 +6257,7 @@
"stargazers_count": 39,
"watchers_count": 39,
"has_discussions": false,
"forks_count": 8,
"forks_count": 9,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -6265,7 +6265,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 8,
"forks": 9,
"watchers": 39,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-38056.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1436525259,
"name": "CVE-2026-38056-PoC",
"full_name": "sudo5Q\/CVE-2026-38056-PoC",
"owner": {
"login": "sudo5Q",
"id": 139773528,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/139773528?v=4",
"html_url": "https:\/\/github.com\/sudo5Q",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/sudo5Q\/CVE-2026-38056-PoC",
"description": null,
"fork": false,
"created_at": "2026-10-28T02:48:09Z",
"updated_at": "2026-10-28T02:52:35Z",
"pushed_at": "2026-10-28T02:52:32Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-42530.json
+33
View File
@@ -97,5 +97,38 @@
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1436463050,
"name": "CVE-2026-42530",
"full_name": "Udyz\/CVE-2026-42530",
"owner": {
"login": "Udyz",
"id": 39673284,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/39673284?v=4",
"html_url": "https:\/\/github.com\/Udyz",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Udyz\/CVE-2026-42530",
"description": "CVE-2026-42530 - NGINX HTTP\/3 (QPACK) UAF",
"fork": false,
"created_at": "2026-10-28T01:21:54Z",
"updated_at": "2026-10-28T03:34:46Z",
"pushed_at": "2026-10-28T03:34:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-43284.json
+6 -6
View File
@@ -1383,12 +1383,12 @@
"description": "DirtyFrag Android Root is an Android app and helper module chain based on DirtyFrag (CVE-2026-43284). Tested on iQOO Z9 5G.",
"fork": false,
"created_at": "2026-10-02T18:29:26Z",
"updated_at": "2026-10-27T16:34:36Z",
"updated_at": "2026-10-28T03:10:30Z",
"pushed_at": "2026-10-05T15:01:25Z",
"stargazers_count": 54,
"watchers_count": 54,
"stargazers_count": 55,
"watchers_count": 55,
"has_discussions": false,
"forks_count": 24,
"forks_count": 25,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1396,8 +1396,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 24,
"watchers": 54,
"forks": 25,
"watchers": 55,
"score": 0,
"subscribers_count": 3
},
2026/CVE-2026-43499.json
+133 -34
View File
@@ -1028,7 +1028,7 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
"updated_at": "2026-10-28T01:38:30Z",
"updated_at": "2026-10-28T07:14:38Z",
"pushed_at": "2026-09-03T03:21:42Z",
"stargazers_count": 1497,
"watchers_count": 1497,
@@ -1709,12 +1709,12 @@
"description": "GhostLock One-Tap Execution App (CVE-2026-43499)",
"fork": false,
"created_at": "2026-07-29T05:04:25Z",
"updated_at": "2026-10-28T00:21:15Z",
"updated_at": "2026-10-28T06:50:58Z",
"pushed_at": "2026-10-27T12:02:30Z",
"stargazers_count": 2338,
"watchers_count": 2338,
"stargazers_count": 2349,
"watchers_count": 2349,
"has_discussions": true,
"forks_count": 574,
"forks_count": 576,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1722,10 +1722,10 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 574,
"watchers": 2338,
"forks": 576,
"watchers": 2349,
"score": 0,
"subscribers_count": 37
"subscribers_count": 44
},
{
"id": 1315873501,
@@ -2077,10 +2077,10 @@
"description": "Jailbreak supported Google Pixel phones with CVE-2026-43499",
"fork": false,
"created_at": "2026-08-02T17:34:45Z",
"updated_at": "2026-10-26T23:02:41Z",
"updated_at": "2026-10-28T06:33:11Z",
"pushed_at": "2026-09-13T16:31:27Z",
"stargazers_count": 469,
"watchers_count": 469,
"stargazers_count": 472,
"watchers_count": 472,
"has_discussions": false,
"forks_count": 72,
"allow_forking": true,
@@ -2098,7 +2098,7 @@
],
"visibility": "public",
"forks": 72,
"watchers": 469,
"watchers": 472,
"score": 0,
"subscribers_count": 8
},
@@ -2821,12 +2821,12 @@
"description": "KSuRoot 4.0.0 — 基于 CVE-2026-43499(GhostLock) 的一键 KernelSU 提权工具。多内核支持：6.1 \/ 6.6 \/ 6.12 三族各有专属基线，另有 50 档上游内核适配；多机型动态库内置：122 条厂商载荷（vivo\/iQOO、小米、三星、Pixel 等）离线可用、按机型+内核+commit 三级匹配；新增「载荷构建」用本机 boot.img 解析偏移打出适配本机的载荷（通用 \/ vivo 专用）；免 ADB。Mod by hmascs",
"fork": false,
"created_at": "2026-08-14T10:51:50Z",
"updated_at": "2026-10-26T17:08:54Z",
"updated_at": "2026-10-28T04:12:11Z",
"pushed_at": "2026-10-02T08:20:25Z",
"stargazers_count": 263,
"watchers_count": 263,
"stargazers_count": 264,
"watchers_count": 264,
"has_discussions": false,
"forks_count": 28,
"forks_count": 27,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2834,8 +2834,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 28,
"watchers": 263,
"forks": 27,
"watchers": 264,
"score": 0,
"subscribers_count": 1
},
@@ -2953,10 +2953,10 @@
"description": "Using CVE-2026-43499 to root your Galaxy S24 Series(SM-S92X0 ,(China \/ Hong Kong SAR \/ Taiwan))",
"fork": false,
"created_at": "2026-08-16T14:37:06Z",
"updated_at": "2026-10-27T15:25:19Z",
"updated_at": "2026-10-28T05:50:26Z",
"pushed_at": "2026-10-27T15:25:14Z",
"stargazers_count": 89,
"watchers_count": 89,
"stargazers_count": 91,
"watchers_count": 91,
"has_discussions": false,
"forks_count": 11,
"allow_forking": true,
@@ -2982,7 +2982,7 @@
],
"visibility": "public",
"forks": 11,
"watchers": 89,
"watchers": 91,
"score": 0,
"subscribers_count": 1
},
@@ -3039,7 +3039,7 @@
"stargazers_count": 18,
"watchers_count": 18,
"has_discussions": false,
"forks_count": 6,
"forks_count": 7,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -3047,7 +3047,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 6,
"forks": 7,
"watchers": 18,
"score": 0,
"subscribers_count": 0
@@ -3430,10 +3430,10 @@
"description": "One-click root for vivo\/iQOO devices on locked bootloader | CVE-2026-43499 + KernelSU",
"fork": false,
"created_at": "2026-08-25T07:52:11Z",
"updated_at": "2026-10-27T15:11:06Z",
"updated_at": "2026-10-28T04:10:34Z",
"pushed_at": "2026-10-23T06:52:34Z",
"stargazers_count": 82,
"watchers_count": 82,
"stargazers_count": 83,
"watchers_count": 83,
"has_discussions": false,
"forks_count": 11,
"allow_forking": true,
@@ -3444,7 +3444,7 @@
"topics": [],
"visibility": "public",
"forks": 11,
"watchers": 82,
"watchers": 83,
"score": 0,
"subscribers_count": 0
},
@@ -4031,10 +4031,10 @@
"description": "GhostLock (CVE-2026-43499) app for the Galaxy S26 series",
"fork": false,
"created_at": "2026-09-12T04:24:35Z",
"updated_at": "2026-10-26T18:53:30Z",
"updated_at": "2026-10-28T03:38:18Z",
"pushed_at": "2026-09-25T17:42:35Z",
"stargazers_count": 16,
"watchers_count": 16,
"stargazers_count": 17,
"watchers_count": 17,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -4062,7 +4062,7 @@
],
"visibility": "public",
"forks": 5,
"watchers": 16,
"watchers": 17,
"score": 0,
"subscribers_count": 0
},
@@ -4331,7 +4331,7 @@
"stargazers_count": 14,
"watchers_count": 14,
"has_discussions": false,
"forks_count": 3,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -4346,7 +4346,7 @@
"ghostlock"
],
"visibility": "public",
"forks": 3,
"forks": 2,
"watchers": 14,
"score": 0,
"subscribers_count": 0
@@ -5617,6 +5617,39 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1425442783,
"name": "BakaSU-PostLock",
"full_name": "poisongod\/BakaSU-PostLock",
"owner": {
"login": "poisongod",
"id": 90960225,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90960225?v=4",
"html_url": "https:\/\/github.com\/poisongod",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/poisongod\/BakaSU-PostLock",
"description": "OPPO A96 (PFUM10) post-relock toolkit: CVE-2026-43499 chain -> real BakaSU driver, ocsk kernel defense probes vs OPPO OPLUS_ROOT_CHECK, boot restore scripts",
"fork": false,
"created_at": "2026-10-19T10:20:17Z",
"updated_at": "2026-10-28T02:00:59Z",
"pushed_at": "2026-10-19T22:18:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": true,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1425584467,
"name": "CVE-2026-43499-ghostlock-vivo-x100-ultra-root",
@@ -5953,5 +5986,71 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1436377778,
"name": "ghostlock-tv",
"full_name": "tokenbleed\/ghostlock-tv",
"owner": {
"login": "tokenbleed",
"id": 315635660,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/315635660?v=4",
"html_url": "https:\/\/github.com\/tokenbleed",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/tokenbleed\/ghostlock-tv",
"description": "adb-to-root kernel LPE (GhostLock CVE-2026-43499) for the onn 4K Pro Google TV: futex PI UAF to write primitive to credential swap to uid 0, on locked verified-boot hardware",
"fork": false,
"created_at": "2026-10-27T23:13:46Z",
"updated_at": "2026-10-28T04:27:35Z",
"pushed_at": "2026-10-28T04:39:07Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1436641579,
"name": "cve-2026-43499-mt6896-pd2238",
"full_name": "Syerain\/cve-2026-43499-mt6896-pd2238",
"owner": {
"login": "Syerain",
"id": 121473473,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/121473473?v=4",
"html_url": "https:\/\/github.com\/Syerain",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Syerain\/cve-2026-43499-mt6896-pd2238",
"description": "cve-2026-43499 exploit on vivo's MT6896 device PD2238.",
"fork": false,
"created_at": "2026-10-28T05:27:50Z",
"updated_at": "2026-10-28T05:49:45Z",
"pushed_at": "2026-10-28T05:48:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-49176.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "CVE-2026-49176 WalletService LPE — standalone PoC + Cobalt Strike BOF (SYSTEM command on interactive session)",
"fork": false,
"created_at": "2026-07-29T06:57:56Z",
"updated_at": "2026-10-27T19:03:15Z",
"updated_at": "2026-10-28T02:27:02Z",
"pushed_at": "2026-07-29T06:59:27Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-52856.json
+1 -1
View File
@@ -30,6 +30,6 @@
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
"subscribers_count": 1
}
]
2026/CVE-2026-63030.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain",
"fork": false,
"created_at": "2026-07-17T20:18:33Z",
"updated_at": "2026-10-27T17:20:43Z",
"updated_at": "2026-10-28T02:08:56Z",
"pushed_at": "2026-08-11T13:41:27Z",
"stargazers_count": 807,
"watchers_count": 807,
"stargazers_count": 808,
"watchers_count": 808,
"has_discussions": false,
"forks_count": 187,
"allow_forking": true,
@@ -32,7 +32,7 @@
],
"visibility": "public",
"forks": 187,
"watchers": 807,
"watchers": 808,
"score": 0,
"subscribers_count": 3
},
2026/CVE-2026-64560.json
+2 -2
View File
@@ -564,8 +564,8 @@
"description": "OnePlus 16 (PYB110) jailbreak: CVE-2026-64560 + KernelSU \/ KernelSU Next \/ BakaSU \/ SukiSU Ultra LKM",
"fork": false,
"created_at": "2026-10-20T09:43:06Z",
"updated_at": "2026-10-27T22:41:43Z",
"pushed_at": "2026-10-27T22:41:38Z",
"updated_at": "2026-10-28T03:36:27Z",
"pushed_at": "2026-10-28T03:36:23Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
2026/CVE-2026-70748.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "weblogic CVE-2026-70748,CVE-2026-60672,CVE-2026-35301;PHP CVE-2026-109618 CVE-2026-109619,Node.js CVE-2026-111497,NGINX CVE-2026-42945 CVE-2026-42533 CVE-2026-15176 CVE-2026-93479,Apache HTTPD 2.4.66 CVE-2026-23918,IIS CVE-2026-70024,HTTP.sys CVE-2026-47291... RCE CVE scanner",
"fork": false,
"created_at": "2026-10-27T06:49:12Z",
"updated_at": "2026-10-28T01:18:36Z",
"pushed_at": "2026-10-28T01:18:32Z",
"updated_at": "2026-10-28T07:32:09Z",
"pushed_at": "2026-10-28T07:32:05Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-77812.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "DJI Drone Cleartext Bluetooth Transmission of Wi-Fi PSK and Session UUID — Proof of Concept for CVE-2026-77812.",
"fork": false,
"created_at": "2026-09-20T20:33:14Z",
"updated_at": "2026-10-27T21:41:42Z",
"updated_at": "2026-10-28T02:21:13Z",
"pushed_at": "2026-09-23T20:59:48Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-84636.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "Proof of concept of CVE-2026-84636, WiFi SSID Info Disclosure",
"fork": false,
"created_at": "2026-10-27T11:20:13Z",
"updated_at": "2026-10-28T00:51:24Z",
"updated_at": "2026-10-28T05:56:06Z",
"pushed_at": "2026-10-27T11:20:53Z",
"stargazers_count": 10,
"watchers_count": 10,
2026/CVE-2026-86060.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "MikroTik RouterOS PoC Collection - CVE-2026-86060 - CVE-2026-67279 - CVE-2026-67276 RouterOS SSH",
"fork": false,
"created_at": "2026-09-25T15:59:34Z",
"updated_at": "2026-10-26T15:07:17Z",
"updated_at": "2026-10-28T01:58:11Z",
"pushed_at": "2026-10-08T14:08:24Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -109,7 +109,7 @@
],
"visibility": "public",
"forks": 3,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 1
}
2026/CVE-2026-86426.json
+33
View File
@@ -31,5 +31,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1436754270,
"name": "CVE-2026-86426",
"full_name": "piecar21\/CVE-2026-86426",
"owner": {
"login": "piecar21",
"id": 102585548,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102585548?v=4",
"html_url": "https:\/\/github.com\/piecar21",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/piecar21\/CVE-2026-86426",
"description": "PoC \/ exploit archive for CVE-2026-86426",
"fork": false,
"created_at": "2026-10-28T07:36:51Z",
"updated_at": "2026-10-28T07:37:01Z",
"pushed_at": "2026-10-28T07:36:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-96778.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1436527029,
"name": "CVE-2026-96778-pillow",
"full_name": "paktiko1986\/CVE-2026-96778-pillow",
"owner": {
"login": "paktiko1986",
"id": 174155662,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/174155662?v=4",
"html_url": "https:\/\/github.com\/paktiko1986",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/paktiko1986\/CVE-2026-96778-pillow",
"description": null,
"fork": false,
"created_at": "2026-10-28T02:50:39Z",
"updated_at": "2026-10-28T03:11:02Z",
"pushed_at": "2026-10-28T03:10:58Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-97798.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-97798 Windows Error Reporting - Command Injection TO SYSTEM",
"fork": false,
"created_at": "2026-10-27T17:45:26Z",
"updated_at": "2026-10-27T21:06:13Z",
"updated_at": "2026-10-28T06:44:53Z",
"pushed_at": "2026-10-27T18:32:10Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -36,7 +36,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 5,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-98260.json
+109 -37
View File
@@ -47,10 +47,10 @@
"description": "CVE-2026-98260 (Timer) Android\/ARM64 port",
"fork": false,
"created_at": "2026-10-18T23:26:39Z",
"updated_at": "2026-10-28T01:37:09Z",
"updated_at": "2026-10-28T03:09:53Z",
"pushed_at": "2026-10-25T05:35:18Z",
"stargazers_count": 22,
"watchers_count": 22,
"stargazers_count": 23,
"watchers_count": 23,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 22,
"watchers": 23,
"score": 0,
"subscribers_count": 0
},
@@ -80,10 +80,10 @@
"description": "Target-specific Android CVE-2026-98260 research port for Xiaomi popsicle",
"fork": false,
"created_at": "2026-10-23T08:56:37Z",
"updated_at": "2026-10-27T16:01:31Z",
"updated_at": "2026-10-28T02:47:59Z",
"pushed_at": "2026-10-23T09:29:52Z",
"stargazers_count": 17,
"watchers_count": 17,
"stargazers_count": 18,
"watchers_count": 18,
"has_discussions": false,
"forks_count": 11,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 11,
"watchers": 17,
"watchers": 18,
"score": 0,
"subscribers_count": 0
},
@@ -179,10 +179,10 @@
"description": "Shizuku-driven CVE-2026-98260 root + KernelSU runtime LKM loader for Xiaomi yingtian \/ lhasa (kernel 6.18.21)",
"fork": false,
"created_at": "2026-10-25T12:51:04Z",
"updated_at": "2026-10-27T23:35:30Z",
"updated_at": "2026-10-28T02:14:29Z",
"pushed_at": "2026-10-25T19:06:56Z",
"stargazers_count": 21,
"watchers_count": 21,
"stargazers_count": 23,
"watchers_count": 23,
"has_discussions": false,
"forks_count": 11,
"allow_forking": true,
@@ -202,7 +202,7 @@
],
"visibility": "public",
"forks": 11,
"watchers": 21,
"watchers": 23,
"score": 0,
"subscribers_count": 0
},
@@ -221,10 +221,10 @@
"description": "Research notes: porting CVE-2026-98260 to vivo\/iQOO GKI 6.6.127 (no exploit code; coordinated disclosure planned)",
"fork": false,
"created_at": "2026-10-25T13:37:37Z",
"updated_at": "2026-10-27T15:51:11Z",
"updated_at": "2026-10-28T07:27:26Z",
"pushed_at": "2026-10-27T15:50:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -241,7 +241,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
@@ -337,10 +337,10 @@
"description": "CVE-2026-98260（fs\/exec.c POSIX CPU timer UAF）XRING O1 \/ Android 17 \/ 6.18.21 研究记录与 PC 一键流程（授权设备安全研究）",
"fork": false,
"created_at": "2026-10-26T09:12:27Z",
"updated_at": "2026-10-28T00:26:18Z",
"pushed_at": "2026-10-28T00:26:30Z",
"stargazers_count": 13,
"watchers_count": 13,
"updated_at": "2026-10-28T05:54:31Z",
"pushed_at": "2026-10-28T03:48:25Z",
"stargazers_count": 14,
"watchers_count": 14,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -357,7 +357,7 @@
],
"visibility": "public",
"forks": 8,
"watchers": 13,
"watchers": 14,
"score": 0,
"subscribers_count": 0
},
@@ -381,7 +381,7 @@
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 3,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -389,7 +389,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"forks": 4,
"watchers": 1,
"score": 0,
"subscribers_count": 0
@@ -409,12 +409,12 @@
"description": "Xiaomi Pad7S Pro12.5在OS4.0.0.14.XOTCNXM利用CVE-2026-98260获取ROOT权限并加载KernelSU。",
"fork": false,
"created_at": "2026-10-26T14:44:21Z",
"updated_at": "2026-10-27T23:20:32Z",
"pushed_at": "2026-10-27T09:59:37Z",
"updated_at": "2026-10-28T05:42:32Z",
"pushed_at": "2026-10-28T05:42:27Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 3,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -422,7 +422,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"forks": 4,
"watchers": 4,
"score": 0,
"subscribers_count": 0
@@ -475,10 +475,10 @@
"description": "小米17 Pro 4.0.5.0 本地提权",
"fork": false,
"created_at": "2026-10-27T07:17:41Z",
"updated_at": "2026-10-27T09:23:19Z",
"updated_at": "2026-10-28T06:07:26Z",
"pushed_at": "2026-10-27T09:23:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -489,7 +489,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
@@ -508,12 +508,12 @@
"description": "6.12.69-android16-6-g242e1a07f878",
"fork": false,
"created_at": "2026-10-27T12:53:47Z",
"updated_at": "2026-10-28T01:42:41Z",
"updated_at": "2026-10-28T06:47:22Z",
"pushed_at": "2026-10-27T14:13:02Z",
"stargazers_count": 14,
"watchers_count": 14,
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
"forks_count": 6,
"forks_count": 5,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -521,8 +521,80 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 14,
"forks": 5,
"watchers": 16,
"score": 0,
"subscribers_count": 0
},
{
"id": 1435979557,
"name": "CVE-2026-98260",
"full_name": "zjns\/CVE-2026-98260",
"owner": {
"login": "zjns",
"id": 10793522,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/10793522?v=4",
"html_url": "https:\/\/github.com\/zjns",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/zjns\/CVE-2026-98260",
"description": "6.6.118-android15-8-g9bc34d5b0c79",
"fork": false,
"created_at": "2026-10-27T16:18:05Z",
"updated_at": "2026-10-28T06:51:19Z",
"pushed_at": "2026-10-28T06:37:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1436583910,
"name": "cve-2026-98260-nezha",
"full_name": "4627488\/cve-2026-98260-nezha",
"owner": {
"login": "4627488",
"id": 44314811,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/44314811?v=4",
"html_url": "https:\/\/github.com\/4627488",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/4627488\/cve-2026-98260-nezha",
"description": "CVE-2026-98260: Xiaomi 17 Ultra (nezha) temporary root + KernelSU PoC - scripts, docs and logs only; exploit built from upstream source",
"fork": false,
"created_at": "2026-10-28T04:10:05Z",
"updated_at": "2026-10-28T04:10:20Z",
"pushed_at": "2026-10-28T04:10:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"android",
"cve-2026-98260",
"hyperos",
"kernelsu",
"root"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}