diff --git a/2014/CVE-2014-3153.json b/2014/CVE-2014-3153.json index 6670c4dadf..d9f9203601 100644 --- a/2014/CVE-2014-3153.json +++ b/2014/CVE-2014-3153.json @@ -321,8 +321,8 @@ "description": "Persistent root for LG webOS 2.x TVs (CVE-2014-3153)", "fork": false, "created_at": "2026-10-27T18:32:14Z", - "updated_at": "2026-10-27T18:33:48Z", - "pushed_at": "2026-10-27T18:32:20Z", + "updated_at": "2026-10-28T00:34:49Z", + "pushed_at": "2026-10-28T00:34:45Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2014/CVE-2014-6271.json b/2014/CVE-2014-6271.json index 2595a534a2..a12c99b0ea 100644 --- a/2014/CVE-2014-6271.json +++ b/2014/CVE-2014-6271.json @@ -3220,5 +3220,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1436409136, + "name": "shellshock-linux-host-hardening-lab", + "full_name": "ItzSteve04\/shellshock-linux-host-hardening-lab", + "owner": { + "login": "ItzSteve04", + "id": 118482376, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/118482376?v=4", + "html_url": "https:\/\/github.com\/ItzSteve04", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/ItzSteve04\/shellshock-linux-host-hardening-lab", + "description": "Controlled penetration testing and Linux host-hardening lab demonstrating Shellshock (CVE-2014-6271), privilege escalation, vulnerability assessment and defensive security controls.", + "fork": false, + "created_at": "2026-10-28T00:01:31Z", + "updated_at": "2026-10-28T00:44:55Z", + "pushed_at": "2026-10-28T00:38:48Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2015/CVE-2015-9235.json b/2015/CVE-2015-9235.json index b2c53f3b1b..34e981bae8 100644 --- a/2015/CVE-2015-9235.json +++ b/2015/CVE-2015-9235.json @@ -92,10 +92,10 @@ "description": "针对JWT渗透开发的漏洞验证\/密钥爆破工具，针对CVE-2015-9235\/空白密钥\/未验证签名攻击\/CVE-2016-10555\/CVE-2018-0114\/CVE-2020-28042的结果生成用于FUZZ，也可使用字典\/字符枚举(包括JJWT)的方式进行爆破(JWT Crack)", "fork": false, "created_at": "2025-01-27T14:23:31Z", - "updated_at": "2026-10-14T08:55:20Z", + "updated_at": "2026-10-28T02:28:57Z", "pushed_at": "2025-08-12T14:08:12Z", - "stargazers_count": 288, - "watchers_count": 288, + "stargazers_count": 287, + "watchers_count": 287, "has_discussions": false, "forks_count": 9, "allow_forking": true, @@ -106,7 +106,7 @@ "topics": [], "visibility": "public", "forks": 9, - "watchers": 288, + "watchers": 287, "score": 0, "subscribers_count": 4 }, diff --git a/2016/CVE-2016-10555.json b/2016/CVE-2016-10555.json index 0e85770cc4..d758f0c8fc 100644 --- a/2016/CVE-2016-10555.json +++ b/2016/CVE-2016-10555.json @@ -80,10 +80,10 @@ "description": "针对JWT渗透开发的漏洞验证\/密钥爆破工具，针对CVE-2015-9235\/空白密钥\/未验证签名攻击\/CVE-2016-10555\/CVE-2018-0114\/CVE-2020-28042的结果生成用于FUZZ，也可使用字典\/字符枚举(包括JJWT)的方式进行爆破(JWT Crack)", "fork": false, "created_at": "2025-01-27T14:23:31Z", - "updated_at": "2026-10-14T08:55:20Z", + "updated_at": "2026-10-28T02:28:57Z", "pushed_at": "2025-08-12T14:08:12Z", - "stargazers_count": 288, - "watchers_count": 288, + "stargazers_count": 287, + "watchers_count": 287, "has_discussions": false, "forks_count": 9, "allow_forking": true, @@ -94,7 +94,7 @@ "topics": [], "visibility": "public", "forks": 9, - "watchers": 288, + "watchers": 287, "score": 0, "subscribers_count": 4 } diff --git a/2017/CVE-2017-12615.json b/2017/CVE-2017-12615.json index 3cdb878961..ea301ff513 100644 --- a/2017/CVE-2017-12615.json +++ b/2017/CVE-2017-12615.json @@ -410,10 +410,10 @@ "description": "tomcat自动化漏洞扫描利用工具，支持批量弱口令检测、后台部署war包getshell、CVE-2017-12615 文件上传、CVE-2020-1938\/CNVD-2020-10487 文件包含", "fork": false, "created_at": "2024-08-29T06:38:16Z", - "updated_at": "2026-10-20T03:48:16Z", + "updated_at": "2026-10-28T02:28:47Z", "pushed_at": "2026-06-16T13:16:53Z", - "stargazers_count": 297, - "watchers_count": 297, + "stargazers_count": 296, + "watchers_count": 296, "has_discussions": false, "forks_count": 24, "allow_forking": true, @@ -432,7 +432,7 @@ ], "visibility": "public", "forks": 24, - "watchers": 297, + "watchers": 296, "score": 0, "subscribers_count": 2 }, diff --git a/2017/CVE-2017-20165.json b/2017/CVE-2017-20165.json index d512bb35da..79992afcc8 100644 --- a/2017/CVE-2017-20165.json +++ b/2017/CVE-2017-20165.json @@ -15,7 +15,7 @@ "fork": false, "created_at": "2023-01-11T10:20:27Z", "updated_at": "2026-10-20T13:42:20Z", - "pushed_at": "2026-10-20T13:42:29Z", + "pushed_at": "2026-10-28T05:22:04Z", "stargazers_count": 15, "watchers_count": 15, "has_discussions": false, diff --git a/2017/CVE-2017-8291.json b/2017/CVE-2017-8291.json index a4be39b663..7fe50f8530 100644 --- a/2017/CVE-2017-8291.json +++ b/2017/CVE-2017-8291.json @@ -1,70 +1,4 @@ [ - { - "id": 973564702, - "name": "CVE-2017-8291", - "full_name": "shun1403\/CVE-2017-8291", - "owner": { - "login": "shun1403", - "id": 83597148, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/83597148?v=4", - "html_url": "https:\/\/github.com\/shun1403", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/shun1403\/CVE-2017-8291", - "description": null, - "fork": false, - "created_at": "2025-04-27T09:04:54Z", - "updated_at": "2025-04-27T11:07:18Z", - "pushed_at": "2025-04-27T11:07:15Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 973610559, - "name": "PIL-CVE-2017-8291-study", - "full_name": "shun1403\/PIL-CVE-2017-8291-study", - "owner": { - "login": "shun1403", - "id": 83597148, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/83597148?v=4", - "html_url": "https:\/\/github.com\/shun1403", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/shun1403\/PIL-CVE-2017-8291-study", - "description": null, - "fork": false, - "created_at": "2025-04-27T11:11:22Z", - "updated_at": "2025-04-27T11:30:37Z", - "pushed_at": "2025-04-27T11:15:51Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1001377739, "name": "PIL-CVE-2017-8291", diff --git a/2018/CVE-2018-0114.json b/2018/CVE-2018-0114.json index 09a1dff06a..131dbbc2b4 100644 --- a/2018/CVE-2018-0114.json +++ b/2018/CVE-2018-0114.json @@ -344,10 +344,10 @@ "description": "针对JWT渗透开发的漏洞验证\/密钥爆破工具，针对CVE-2015-9235\/空白密钥\/未验证签名攻击\/CVE-2016-10555\/CVE-2018-0114\/CVE-2020-28042的结果生成用于FUZZ，也可使用字典\/字符枚举(包括JJWT)的方式进行爆破(JWT Crack)", "fork": false, "created_at": "2025-01-27T14:23:31Z", - "updated_at": "2026-10-14T08:55:20Z", + "updated_at": "2026-10-28T02:28:57Z", "pushed_at": "2025-08-12T14:08:12Z", - "stargazers_count": 288, - "watchers_count": 288, + "stargazers_count": 287, + "watchers_count": 287, "has_discussions": false, "forks_count": 9, "allow_forking": true, @@ -358,7 +358,7 @@ "topics": [], "visibility": "public", "forks": 9, - "watchers": 288, + "watchers": 287, "score": 0, "subscribers_count": 4 }, diff --git a/2018/CVE-2018-17246.json b/2018/CVE-2018-17246.json index 53ea0d7603..e56442c0f0 100644 --- a/2018/CVE-2018-17246.json +++ b/2018/CVE-2018-17246.json @@ -64,5 +64,38 @@ "watchers": 0, "score": 0, "subscribers_count": 1 + }, + { + "id": 1436563374, + "name": "work1-secure-api", + "full_name": "ght657\/work1-secure-api", + "owner": { + "login": "ght657", + "id": 210518239, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/210518239?v=4", + "html_url": "https:\/\/github.com\/ght657", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/ght657\/work1-secure-api", + "description": "HDU IS Work 1 - Secure REST API (Flask) with CI\/CD (pytest + bandit + pip-audit) and CVE-2018-17246 analysis", + "fork": false, + "created_at": "2026-10-28T03:41:15Z", + "updated_at": "2026-10-28T03:42:14Z", + "pushed_at": "2026-10-28T03:42:10Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2019/CVE-2019-13272.json b/2019/CVE-2019-13272.json index acf51b6911..04a53f2955 100644 --- a/2019/CVE-2019-13272.json +++ b/2019/CVE-2019-13272.json @@ -14,10 +14,10 @@ "description": "Linux 4.10 < 5.1.17 PTRACE_TRACEME local root", "fork": false, "created_at": "2019-07-31T04:51:43Z", - "updated_at": "2026-10-07T06:39:21Z", + "updated_at": "2026-10-28T06:23:04Z", "pushed_at": "2019-08-01T16:02:59Z", - "stargazers_count": 334, - "watchers_count": 334, + "stargazers_count": 333, + "watchers_count": 333, "has_discussions": false, "forks_count": 104, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 104, - "watchers": 334, + "watchers": 333, "score": 0, "subscribers_count": 8 }, diff --git a/2019/CVE-2019-14462.json b/2019/CVE-2019-14462.json index e8ddd250e5..2ff5d020cb 100644 --- a/2019/CVE-2019-14462.json +++ b/2019/CVE-2019-14462.json @@ -14,8 +14,8 @@ "description": "Defensive security demo: seL4 microkernel gateway protecting vulnerable ICS from CVE-2019-14462", "fork": false, "created_at": "2026-01-01T23:09:59Z", - "updated_at": "2026-02-12T01:34:51Z", - "pushed_at": "2026-02-12T01:34:47Z", + "updated_at": "2026-10-28T03:43:26Z", + "pushed_at": "2026-10-28T03:43:21Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2019/CVE-2019-16759.json b/2019/CVE-2019-16759.json index c969417fe7..66d73a4948 100644 --- a/2019/CVE-2019-16759.json +++ b/2019/CVE-2019-16759.json @@ -350,39 +350,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 289977484, - "name": "CVE-2019-16759", - "full_name": "sunian19\/CVE-2019-16759", - "owner": { - "login": "sunian19", - "id": 53205380, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/53205380?v=4", - "html_url": "https:\/\/github.com\/sunian19", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sunian19\/CVE-2019-16759", - "description": null, - "fork": false, - "created_at": "2020-08-24T16:15:10Z", - "updated_at": "2020-08-26T06:48:16Z", - "pushed_at": "2020-08-24T16:25:04Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, { "id": 291726680, "name": "vBulletin_Routestring-RCE", @@ -448,5 +415,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 460460959, + "name": "CVE-2019-16759", + "full_name": "shavchen\/CVE-2019-16759", + "owner": { + "login": "shavchen", + "id": 34539839, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/34539839?v=4", + "html_url": "https:\/\/github.com\/shavchen", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/shavchen\/CVE-2019-16759", + "description": null, + "fork": false, + "created_at": "2022-02-17T14:05:15Z", + "updated_at": "2020-08-26T06:48:16Z", + "pushed_at": "2020-08-24T16:25:04Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2019/CVE-2019-17558.json b/2019/CVE-2019-17558.json index 568683528c..6c969a0242 100644 --- a/2019/CVE-2019-17558.json +++ b/2019/CVE-2019-17558.json @@ -47,10 +47,10 @@ "description": "Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340", "fork": false, "created_at": "2020-04-01T09:33:35Z", - "updated_at": "2026-10-27T19:09:00Z", + "updated_at": "2026-10-28T05:48:33Z", "pushed_at": "2021-04-04T09:13:57Z", - "stargazers_count": 4293, - "watchers_count": 4293, + "stargazers_count": 4294, + "watchers_count": 4294, "has_discussions": false, "forks_count": 1078, "allow_forking": true, @@ -81,7 +81,7 @@ ], "visibility": "public", "forks": 1078, - "watchers": 4293, + "watchers": 4294, "score": 0, "subscribers_count": 148 }, diff --git a/2019/CVE-2019-9193.json b/2019/CVE-2019-9193.json index 0413ee01dc..3fb10d1a09 100644 --- a/2019/CVE-2019-9193.json +++ b/2019/CVE-2019-9193.json @@ -47,10 +47,10 @@ "description": "CVE-2019–9193 - PostgreSQL 9.3-12.3 Authenticated Remote Code Execution", "fork": false, "created_at": "2022-03-29T21:02:02Z", - "updated_at": "2026-06-09T14:33:40Z", + "updated_at": "2026-10-28T01:23:07Z", "pushed_at": "2022-05-26T23:00:33Z", - "stargazers_count": 21, - "watchers_count": 21, + "stargazers_count": 22, + "watchers_count": 22, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -69,7 +69,7 @@ ], "visibility": "public", "forks": 6, - "watchers": 21, + "watchers": 22, "score": 0, "subscribers_count": 1 }, diff --git a/2020/CVE-2020-14882.json b/2020/CVE-2020-14882.json index f6d1a3c466..bb9938b0b8 100644 --- a/2020/CVE-2020-14882.json +++ b/2020/CVE-2020-14882.json @@ -14,10 +14,10 @@ "description": "Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340", "fork": false, "created_at": "2020-04-01T09:33:35Z", - "updated_at": "2026-10-27T19:09:00Z", + "updated_at": "2026-10-28T05:48:33Z", "pushed_at": "2021-04-04T09:13:57Z", - "stargazers_count": 4293, - "watchers_count": 4293, + "stargazers_count": 4294, + "watchers_count": 4294, "has_discussions": false, "forks_count": 1078, "allow_forking": true, @@ -48,7 +48,7 @@ ], "visibility": "public", "forks": 1078, - "watchers": 4293, + "watchers": 4294, "score": 0, "subscribers_count": 148 }, diff --git a/2020/CVE-2020-1938.json b/2020/CVE-2020-1938.json index e5bee1de94..19c1fbcb2d 100644 --- a/2020/CVE-2020-1938.json +++ b/2020/CVE-2020-1938.json @@ -977,10 +977,10 @@ "description": "tomcat自动化漏洞扫描利用工具，支持批量弱口令检测、后台部署war包getshell、CVE-2017-12615 文件上传、CVE-2020-1938\/CNVD-2020-10487 文件包含", "fork": false, "created_at": "2024-08-29T06:38:16Z", - "updated_at": "2026-10-20T03:48:16Z", + "updated_at": "2026-10-28T02:28:47Z", "pushed_at": "2026-06-16T13:16:53Z", - "stargazers_count": 297, - "watchers_count": 297, + "stargazers_count": 296, + "watchers_count": 296, "has_discussions": false, "forks_count": 24, "allow_forking": true, @@ -999,7 +999,7 @@ ], "visibility": "public", "forks": 24, - "watchers": 297, + "watchers": 296, "score": 0, "subscribers_count": 2 }, diff --git a/2020/CVE-2020-28042.json b/2020/CVE-2020-28042.json index 0a09073435..93da308fd1 100644 --- a/2020/CVE-2020-28042.json +++ b/2020/CVE-2020-28042.json @@ -14,10 +14,10 @@ "description": "针对JWT渗透开发的漏洞验证\/密钥爆破工具，针对CVE-2015-9235\/空白密钥\/未验证签名攻击\/CVE-2016-10555\/CVE-2018-0114\/CVE-2020-28042的结果生成用于FUZZ，也可使用字典\/字符枚举(包括JJWT)的方式进行爆破(JWT Crack)", "fork": false, "created_at": "2025-01-27T14:23:31Z", - "updated_at": "2026-10-14T08:55:20Z", + "updated_at": "2026-10-28T02:28:57Z", "pushed_at": "2025-08-12T14:08:12Z", - "stargazers_count": 288, - "watchers_count": 288, + "stargazers_count": 287, + "watchers_count": 287, "has_discussions": false, "forks_count": 9, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 9, - "watchers": 288, + "watchers": 287, "score": 0, "subscribers_count": 4 } diff --git a/2021/CVE-2021-1675.json b/2021/CVE-2021-1675.json index b7cab3d06c..52507d6073 100644 --- a/2021/CVE-2021-1675.json +++ b/2021/CVE-2021-1675.json @@ -334,7 +334,7 @@ "stargazers_count": 1113, "watchers_count": 1113, "has_discussions": false, - "forks_count": 222, + "forks_count": 221, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -342,7 +342,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 222, + "forks": 221, "watchers": 1113, "score": 0, "subscribers_count": 23 diff --git a/2021/CVE-2021-21974.json b/2021/CVE-2021-21974.json index 83e34b7653..6b41abe88a 100644 --- a/2021/CVE-2021-21974.json +++ b/2021/CVE-2021-21974.json @@ -19,7 +19,7 @@ "stargazers_count": 188, "watchers_count": 188, "has_discussions": false, - "forks_count": 42, + "forks_count": 41, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 42, + "forks": 41, "watchers": 188, "score": 0, "subscribers_count": 2 diff --git a/2021/CVE-2021-21985.json b/2021/CVE-2021-21985.json index 0be0f8a832..10b7872676 100644 --- a/2021/CVE-2021-21985.json +++ b/2021/CVE-2021-21985.json @@ -52,7 +52,7 @@ "stargazers_count": 214, "watchers_count": 214, "has_discussions": false, - "forks_count": 50, + "forks_count": 49, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,7 +60,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 50, + "forks": 49, "watchers": 214, "score": 0, "subscribers_count": 4 diff --git a/2021/CVE-2021-24098.json b/2021/CVE-2021-24098.json index 4e849763d1..64ef4bab77 100644 --- a/2021/CVE-2021-24098.json +++ b/2021/CVE-2021-24098.json @@ -14,10 +14,10 @@ "description": "POC for CVE-2021-24098", "fork": false, "created_at": "2021-04-01T07:29:44Z", - "updated_at": "2024-12-27T09:18:47Z", + "updated_at": "2026-10-28T02:27:55Z", "pushed_at": "2021-04-01T07:34:23Z", - "stargazers_count": 13, - "watchers_count": 13, + "stargazers_count": 12, + "watchers_count": 12, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 6, - "watchers": 13, + "watchers": 12, "score": 0, "subscribers_count": 3 } diff --git a/2021/CVE-2021-26855.json b/2021/CVE-2021-26855.json index 944b5c1cb5..08adebe08c 100644 --- a/2021/CVE-2021-26855.json +++ b/2021/CVE-2021-26855.json @@ -299,7 +299,7 @@ "stargazers_count": 5, "watchers_count": 5, "has_discussions": false, - "forks_count": 69, + "forks_count": 68, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -307,7 +307,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 69, + "forks": 68, "watchers": 5, "score": 0, "subscribers_count": 0 diff --git a/2021/CVE-2021-4034.json b/2021/CVE-2021-4034.json index d7832e1949..e390bbc236 100644 --- a/2021/CVE-2021-4034.json +++ b/2021/CVE-2021-4034.json @@ -961,10 +961,10 @@ "description": "Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation", "fork": false, "created_at": "2022-01-26T14:26:10Z", - "updated_at": "2026-10-28T00:27:05Z", + "updated_at": "2026-10-28T04:50:44Z", "pushed_at": "2022-06-21T14:52:05Z", - "stargazers_count": 1337, - "watchers_count": 1337, + "stargazers_count": 1338, + "watchers_count": 1338, "has_discussions": false, "forks_count": 208, "allow_forking": true, @@ -977,7 +977,7 @@ ], "visibility": "public", "forks": 208, - "watchers": 1337, + "watchers": 1338, "score": 0, "subscribers_count": 13 }, @@ -6194,5 +6194,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1434591114, + "name": "CVE-2021-4034", + "full_name": "axisops\/CVE-2021-4034", + "owner": { + "login": "axisops", + "id": 5512152, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5512152?v=4", + "html_url": "https:\/\/github.com\/axisops", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/axisops\/CVE-2021-4034", + "description": "PwnKit CVE-2021-4034 Mitigation work (Ansible Role)", + "fork": false, + "created_at": "2026-10-26T15:45:24Z", + "updated_at": "2026-10-28T01:30:05Z", + "pushed_at": "2026-10-28T01:21:20Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2021/CVE-2021-42574.json b/2021/CVE-2021-42574.json index 3b75e3aa39..aae41b3662 100644 --- a/2021/CVE-2021-42574.json +++ b/2021/CVE-2021-42574.json @@ -365,5 +365,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1436640853, + "name": "trojan-source-check", + "full_name": "mehul82099\/trojan-source-check", + "owner": { + "login": "mehul82099", + "id": 219339326, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/219339326?v=4", + "html_url": "https:\/\/github.com\/mehul82099", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/mehul82099\/trojan-source-check", + "description": "CI scanner for Trojan Source attacks: bidi control characters (CVE-2021-42574), mixed-script identifiers (CVE-2021-42694), invisible zero-width chars. Stdlib only.", + "fork": false, + "created_at": "2026-10-28T05:26:54Z", + "updated_at": "2026-10-28T05:31:23Z", + "pushed_at": "2026-10-28T05:31:19Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2021/CVE-2021-43936.json b/2021/CVE-2021-43936.json index 3eaa90f973..157fdadb66 100644 --- a/2021/CVE-2021-43936.json +++ b/2021/CVE-2021-43936.json @@ -19,7 +19,7 @@ "stargazers_count": 9, "watchers_count": 9, "has_discussions": false, - "forks_count": 7, + "forks_count": 6, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 7, + "forks": 6, "watchers": 9, "score": 0, "subscribers_count": 2 diff --git a/2021/CVE-2021-44228.json b/2021/CVE-2021-44228.json index 55a0bebfdf..c9e885af83 100644 --- a/2021/CVE-2021-44228.json +++ b/2021/CVE-2021-44228.json @@ -993,7 +993,7 @@ "stargazers_count": 1846, "watchers_count": 1846, "has_discussions": false, - "forks_count": 539, + "forks_count": 538, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1006,7 +1006,7 @@ "security" ], "visibility": "public", - "forks": 539, + "forks": 538, "watchers": 1846, "score": 0, "subscribers_count": 0 @@ -3845,7 +3845,7 @@ "stargazers_count": 3424, "watchers_count": 3424, "has_discussions": true, - "forks_count": 723, + "forks_count": 722, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -3853,7 +3853,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 723, + "forks": 722, "watchers": 3424, "score": 0, "subscribers_count": 54 @@ -7878,6 +7878,39 @@ "score": 0, "subscribers_count": 1 }, + { + "id": 439060792, + "name": "CVE-2021-44228", + "full_name": "axisops\/CVE-2021-44228", + "owner": { + "login": "axisops", + "id": 5512152, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5512152?v=4", + "html_url": "https:\/\/github.com\/axisops", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/axisops\/CVE-2021-44228", + "description": "Log4Shell CVE-2021-44228 Mitigation work (Ansible Role)", + "fork": false, + "created_at": "2021-12-16T16:42:44Z", + "updated_at": "2026-10-28T01:29:29Z", + "pushed_at": "2026-10-28T01:21:23Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 1 + }, { "id": 439071699, "name": "MyLog4Shell", diff --git a/2022/CVE-2022-38694.json b/2022/CVE-2022-38694.json index a7f8c4efe0..05d0b1c4e9 100644 --- a/2022/CVE-2022-38694.json +++ b/2022/CVE-2022-38694.json @@ -14,10 +14,10 @@ "description": "This is a one-time signature verification bypass. For persistent signature verification bypass, check https:\/\/github.com\/TomKing062\/CVE-2022-38691_38692", "fork": false, "created_at": "2023-06-10T08:31:26Z", - "updated_at": "2026-10-27T12:25:48Z", + "updated_at": "2026-10-28T03:22:44Z", "pushed_at": "2025-06-14T16:55:26Z", - "stargazers_count": 641, - "watchers_count": 641, + "stargazers_count": 642, + "watchers_count": 642, "has_discussions": true, "forks_count": 89, "allow_forking": true, @@ -31,7 +31,7 @@ ], "visibility": "public", "forks": 89, - "watchers": 641, + "watchers": 642, "score": 0, "subscribers_count": 15 }, diff --git a/2022/CVE-2022-42889.json b/2022/CVE-2022-42889.json index 29511dff42..cf07a8f7f9 100644 --- a/2022/CVE-2022-42889.json +++ b/2022/CVE-2022-42889.json @@ -1574,10 +1574,10 @@ "description": "Proof of Concept (PoC) for CVE-2022-42889 (Text4Shell) targeting Apache Commons Text versions prior to 1.10.0. This script automates Remote Code Execution (RCE) via script interpolation to establish a reverse shell. This version is a structured optimization based on the original exploit found at Exploit-DB (ID: 52261).", "fork": false, "created_at": "2026-01-02T05:55:49Z", - "updated_at": "2026-10-20T07:09:27Z", + "updated_at": "2026-10-28T03:24:48Z", "pushed_at": "2026-07-05T09:14:22Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -1588,7 +1588,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 }, diff --git a/2022/CVE-2022-44721.json b/2022/CVE-2022-44721.json index 3b6c5ea261..c422b73ae9 100644 --- a/2022/CVE-2022-44721.json +++ b/2022/CVE-2022-44721.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2022-12-03T11:04:17Z", - "updated_at": "2026-10-02T11:41:52Z", + "updated_at": "2026-10-28T04:07:55Z", "pushed_at": "2022-12-02T14:38:27Z", - "stargazers_count": 24, - "watchers_count": 24, + "stargazers_count": 25, + "watchers_count": 25, "has_discussions": false, "forks_count": 8, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 8, - "watchers": 24, + "watchers": 25, "score": 0, "subscribers_count": 0 } diff --git a/2023/CVE-2023-23397.json b/2023/CVE-2023-23397.json index f9690de11f..4e9b74641e 100644 --- a/2023/CVE-2023-23397.json +++ b/2023/CVE-2023-23397.json @@ -957,7 +957,7 @@ "fork": false, "created_at": "2026-08-28T09:00:27Z", "updated_at": "2026-09-11T07:16:27Z", - "pushed_at": "2026-10-17T14:28:21Z", + "pushed_at": "2026-10-28T06:08:07Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2023/CVE-2023-3269.json b/2023/CVE-2023-3269.json index 74dc17b076..68043786b6 100644 --- a/2023/CVE-2023-3269.json +++ b/2023/CVE-2023-3269.json @@ -14,10 +14,10 @@ "description": "CVE-2023-3269: Linux kernel privilege escalation vulnerability", "fork": false, "created_at": "2023-06-28T13:22:26Z", - "updated_at": "2026-08-18T05:50:37Z", + "updated_at": "2026-10-28T06:24:50Z", "pushed_at": "2026-02-23T14:35:10Z", - "stargazers_count": 501, - "watchers_count": 501, + "stargazers_count": 499, + "watchers_count": 499, "has_discussions": false, "forks_count": 36, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 36, - "watchers": 501, + "watchers": 499, "score": 0, "subscribers_count": 10 } diff --git a/2023/CVE-2023-40028.json b/2023/CVE-2023-40028.json index 08710e8834..01837251c3 100644 --- a/2023/CVE-2023-40028.json +++ b/2023/CVE-2023-40028.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2024-03-23T15:25:49Z", - "updated_at": "2025-07-11T11:36:04Z", + "updated_at": "2026-10-28T06:13:17Z", "pushed_at": "2024-03-23T18:59:30Z", - "stargazers_count": 13, - "watchers_count": 13, + "stargazers_count": 14, + "watchers_count": 14, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 6, - "watchers": 13, + "watchers": 14, "score": 0, "subscribers_count": 1 }, diff --git a/2023/CVE-2023-45866.json b/2023/CVE-2023-45866.json index b8b8e2dfcc..e82161ca31 100644 --- a/2023/CVE-2023-45866.json +++ b/2023/CVE-2023-45866.json @@ -14,10 +14,10 @@ "description": "🚨 CVE-2023-45866 - BlueDucky Implementation (Using DuckyScript) 🔓 Unauthenticated Peering Leading to Code Execution (Using HID Keyboard)", "fork": false, "created_at": "2024-01-16T06:52:02Z", - "updated_at": "2026-10-27T17:56:05Z", + "updated_at": "2026-10-28T01:23:45Z", "pushed_at": "2026-02-11T00:03:00Z", - "stargazers_count": 1901, - "watchers_count": 1901, + "stargazers_count": 1902, + "watchers_count": 1902, "has_discussions": false, "forks_count": 319, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 319, - "watchers": 1901, + "watchers": 1902, "score": 0, "subscribers_count": 30 }, diff --git a/2024/CVE-2024-1561.json b/2024/CVE-2024-1561.json index b0300e0435..8317963f5b 100644 --- a/2024/CVE-2024-1561.json +++ b/2024/CVE-2024-1561.json @@ -80,8 +80,8 @@ "description": "HDU IS Work 1 - secure REST API, CI\/CD security pipeline, CVE-2024-1561 remediation", "fork": false, "created_at": "2026-10-27T02:20:31Z", - "updated_at": "2026-10-27T02:35:23Z", - "pushed_at": "2026-10-27T02:35:20Z", + "updated_at": "2026-10-28T02:44:49Z", + "pushed_at": "2026-10-28T02:44:45Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-21733.json b/2024/CVE-2024-21733.json index ede4d05c8a..08cfcf3f84 100644 --- a/2024/CVE-2024-21733.json +++ b/2024/CVE-2024-21733.json @@ -14,10 +14,10 @@ "description": "一个验证对CVE-2024-21733", "fork": false, "created_at": "2024-08-15T09:47:32Z", - "updated_at": "2026-06-07T17:14:44Z", + "updated_at": "2026-10-28T02:28:46Z", "pushed_at": "2024-08-16T05:52:08Z", - "stargazers_count": 27, - "watchers_count": 27, + "stargazers_count": 25, + "watchers_count": 25, "has_discussions": false, "forks_count": 12, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 12, - "watchers": 27, + "watchers": 25, "score": 0, "subscribers_count": 1 } diff --git a/2024/CVE-2024-3094.json b/2024/CVE-2024-3094.json index d64f68da07..f016d970cd 100644 --- a/2024/CVE-2024-3094.json +++ b/2024/CVE-2024-3094.json @@ -1010,10 +1010,10 @@ "description": "notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)", "fork": false, "created_at": "2024-04-01T14:28:09Z", - "updated_at": "2026-10-22T16:58:35Z", + "updated_at": "2026-10-28T02:28:37Z", "pushed_at": "2024-04-03T04:58:50Z", - "stargazers_count": 3553, - "watchers_count": 3553, + "stargazers_count": 3552, + "watchers_count": 3552, "has_discussions": false, "forks_count": 234, "allow_forking": true, @@ -1024,7 +1024,7 @@ "topics": [], "visibility": "public", "forks": 234, - "watchers": 3553, + "watchers": 3552, "score": 0, "subscribers_count": 34 }, @@ -2898,5 +2898,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1434591779, + "name": "CVE-2024-3094", + "full_name": "axisops\/CVE-2024-3094", + "owner": { + "login": "axisops", + "id": 5512152, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5512152?v=4", + "html_url": "https:\/\/github.com\/axisops", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/axisops\/CVE-2024-3094", + "description": "xz Backdoor CVE-2024-3094 Detection and Mitigation work (Ansible Role)", + "fork": false, + "created_at": "2026-10-26T15:45:56Z", + "updated_at": "2026-10-28T01:29:17Z", + "pushed_at": "2026-10-28T01:21:25Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2024/CVE-2024-49138.json b/2024/CVE-2024-49138.json index b30ae3a6a3..a2d960a364 100644 --- a/2024/CVE-2024-49138.json +++ b/2024/CVE-2024-49138.json @@ -428,8 +428,8 @@ "description": "Triagem de Alerta SOC 335, que destaca a exploração da vulnerabilidade CVE-2024-49138 , uma vulnerabilidade de escalonamento de privilégios do Windows.", "fork": false, "created_at": "2026-10-28T01:22:02Z", - "updated_at": "2026-10-28T01:22:07Z", - "pushed_at": "2026-10-28T01:22:03Z", + "updated_at": "2026-10-28T03:13:54Z", + "pushed_at": "2026-10-28T03:13:50Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-6387.json b/2024/CVE-2024-6387.json index f8c9356d36..cc76c84551 100644 --- a/2024/CVE-2024-6387.json +++ b/2024/CVE-2024-6387.json @@ -290,7 +290,7 @@ "stargazers_count": 528, "watchers_count": 528, "has_discussions": false, - "forks_count": 100, + "forks_count": 99, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -304,7 +304,7 @@ "redteam" ], "visibility": "public", - "forks": 100, + "forks": 99, "watchers": 528, "score": 0, "subscribers_count": 6 @@ -3293,5 +3293,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1434592636, + "name": "CVE-2024-6387", + "full_name": "axisops\/CVE-2024-6387", + "owner": { + "login": "axisops", + "id": 5512152, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5512152?v=4", + "html_url": "https:\/\/github.com\/axisops", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/axisops\/CVE-2024-6387", + "description": "regreSSHion CVE-2024-6387 Mitigation work (Ansible Role)", + "fork": false, + "created_at": "2026-10-26T15:46:36Z", + "updated_at": "2026-10-28T01:29:01Z", + "pushed_at": "2026-10-28T01:21:27Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2025/CVE-2025-0411.json b/2025/CVE-2025-0411.json index 4489e18e40..e2088690a5 100644 --- a/2025/CVE-2025-0411.json +++ b/2025/CVE-2025-0411.json @@ -14,10 +14,10 @@ "description": "This repository contains POC scenarios as part of CVE-2025-0411 MotW bypass.", "fork": false, "created_at": "2025-01-22T14:40:34Z", - "updated_at": "2026-10-13T19:07:17Z", + "updated_at": "2026-10-28T02:28:56Z", "pushed_at": "2025-03-06T11:31:36Z", - "stargazers_count": 154, - "watchers_count": 154, + "stargazers_count": 153, + "watchers_count": 153, "has_discussions": false, "forks_count": 38, "allow_forking": true, @@ -35,7 +35,7 @@ ], "visibility": "public", "forks": 38, - "watchers": 154, + "watchers": 153, "score": 0, "subscribers_count": 2 }, diff --git a/2025/CVE-2025-1094.json b/2025/CVE-2025-1094.json index 34abd3d5b5..6174cba93f 100644 --- a/2025/CVE-2025-1094.json +++ b/2025/CVE-2025-1094.json @@ -14,10 +14,10 @@ "description": "WebSocket and SQL Injection Exploit Script", "fork": false, "created_at": "2025-02-27T11:08:10Z", - "updated_at": "2026-03-25T12:28:05Z", + "updated_at": "2026-10-28T02:29:00Z", "pushed_at": "2025-02-27T11:12:44Z", - "stargazers_count": 41, - "watchers_count": 41, + "stargazers_count": 38, + "watchers_count": 38, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 6, - "watchers": 41, + "watchers": 38, "score": 0, "subscribers_count": 2 }, diff --git a/2025/CVE-2025-24071.json b/2025/CVE-2025-24071.json index 9e28cfbf92..6931ffd573 100644 --- a/2025/CVE-2025-24071.json +++ b/2025/CVE-2025-24071.json @@ -14,10 +14,10 @@ "description": "CVE-2025-24071: NTLM Hash Leak via RAR\/ZIP Extraction and .library-ms File", "fork": false, "created_at": "2025-03-16T20:10:19Z", - "updated_at": "2026-10-27T17:16:52Z", + "updated_at": "2026-10-28T02:29:02Z", "pushed_at": "2025-03-20T21:22:23Z", - "stargazers_count": 414, - "watchers_count": 414, + "stargazers_count": 413, + "watchers_count": 413, "has_discussions": false, "forks_count": 70, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 70, - "watchers": 414, + "watchers": 413, "score": 0, "subscribers_count": 1 }, diff --git a/2025/CVE-2025-27740.json b/2025/CVE-2025-27740.json index 88c3958fdf..c8525da08b 100644 --- a/2025/CVE-2025-27740.json +++ b/2025/CVE-2025-27740.json @@ -14,8 +14,8 @@ "description": "CVE-2025-27740 — AD CS Subject Key Identifier Injection", "fork": false, "created_at": "2026-10-27T02:14:29Z", - "updated_at": "2026-10-27T03:23:02Z", - "pushed_at": "2026-10-27T02:28:46Z", + "updated_at": "2026-10-28T02:09:50Z", + "pushed_at": "2026-10-28T02:09:47Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-32023.json b/2025/CVE-2025-32023.json index 7c48a61c74..7ea13dceb6 100644 --- a/2025/CVE-2025-32023.json +++ b/2025/CVE-2025-32023.json @@ -14,10 +14,10 @@ "description": "PoC & Exploit for CVE-2025-32023 \/ PlaidCTF 2025 \"Zerodeo\"", "fork": false, "created_at": "2025-07-06T18:09:11Z", - "updated_at": "2026-10-13T19:08:12Z", + "updated_at": "2026-10-28T02:29:08Z", "pushed_at": "2025-07-06T18:58:01Z", - "stargazers_count": 215, - "watchers_count": 215, + "stargazers_count": 214, + "watchers_count": 214, "has_discussions": false, "forks_count": 39, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 39, - "watchers": 215, + "watchers": 214, "score": 0, "subscribers_count": 4 }, diff --git a/2025/CVE-2025-32756.json b/2025/CVE-2025-32756.json index 7fd9b76da0..419bc32e17 100644 --- a/2025/CVE-2025-32756.json +++ b/2025/CVE-2025-32756.json @@ -47,10 +47,10 @@ "description": "Proof of Concept for CVE-2025-32756 - A critical stack-based buffer overflow vulnerability affecting multiple Fortinet products.", "fork": false, "created_at": "2025-06-05T14:16:31Z", - "updated_at": "2026-10-27T08:39:35Z", + "updated_at": "2026-10-28T04:32:37Z", "pushed_at": "2025-06-13T07:55:34Z", - "stargazers_count": 190, - "watchers_count": 190, + "stargazers_count": 191, + "watchers_count": 191, "has_discussions": false, "forks_count": 29, "allow_forking": true, @@ -66,7 +66,7 @@ ], "visibility": "public", "forks": 29, - "watchers": 190, + "watchers": 191, "score": 0, "subscribers_count": 6 }, diff --git a/2025/CVE-2025-48804.json b/2025/CVE-2025-48804.json index 41ea3ff4aa..186c144bf2 100644 --- a/2025/CVE-2025-48804.json +++ b/2025/CVE-2025-48804.json @@ -14,10 +14,10 @@ "description": "Downgrade attack for CVE-2025-48804", "fork": false, "created_at": "2026-04-30T13:05:30Z", - "updated_at": "2026-10-20T04:26:57Z", + "updated_at": "2026-10-28T03:53:21Z", "pushed_at": "2026-09-12T18:03:56Z", - "stargazers_count": 245, - "watchers_count": 245, + "stargazers_count": 246, + "watchers_count": 246, "has_discussions": false, "forks_count": 44, "allow_forking": true, @@ -32,7 +32,7 @@ ], "visibility": "public", "forks": 44, - "watchers": 245, + "watchers": 246, "score": 0, "subscribers_count": 4 } diff --git a/2025/CVE-2025-53770.json b/2025/CVE-2025-53770.json index 77d27d48c7..827dc49ced 100644 --- a/2025/CVE-2025-53770.json +++ b/2025/CVE-2025-53770.json @@ -216,10 +216,10 @@ "description": "SharePoint WebPart Injection Exploit Tool", "fork": false, "created_at": "2025-07-21T13:48:37Z", - "updated_at": "2026-10-14T12:38:13Z", + "updated_at": "2026-10-28T02:29:10Z", "pushed_at": "2025-11-28T20:11:11Z", - "stargazers_count": 316, - "watchers_count": 316, + "stargazers_count": 315, + "watchers_count": 315, "has_discussions": false, "forks_count": 77, "allow_forking": true, @@ -230,7 +230,7 @@ "topics": [], "visibility": "public", "forks": 77, - "watchers": 316, + "watchers": 315, "score": 0, "subscribers_count": 5 }, diff --git a/2025/CVE-2025-55182.json b/2025/CVE-2025-55182.json index ceac37f9cd..122f0d07a1 100644 --- a/2025/CVE-2025-55182.json +++ b/2025/CVE-2025-55182.json @@ -871,10 +871,10 @@ "description": "High Fidelity Detection Mechanism for RSC\/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)", "fork": false, "created_at": "2025-12-04T06:55:04Z", - "updated_at": "2026-10-27T18:26:24Z", + "updated_at": "2026-10-28T03:08:58Z", "pushed_at": "2025-12-07T04:16:46Z", - "stargazers_count": 2457, - "watchers_count": 2457, + "stargazers_count": 2455, + "watchers_count": 2455, "has_discussions": false, "forks_count": 272, "allow_forking": true, @@ -885,7 +885,7 @@ "topics": [], "visibility": "public", "forks": 272, - "watchers": 2457, + "watchers": 2455, "score": 0, "subscribers_count": 11 }, diff --git a/2025/CVE-2025-8061.json b/2025/CVE-2025-8061.json index 5537e5e19e..aff8d1e21a 100644 --- a/2025/CVE-2025-8061.json +++ b/2025/CVE-2025-8061.json @@ -14,10 +14,10 @@ "description": "PoC for popping a system shell against the LnvMSRIO.sys driver", "fork": false, "created_at": "2025-10-06T09:33:59Z", - "updated_at": "2026-10-22T13:06:03Z", + "updated_at": "2026-10-28T02:29:17Z", "pushed_at": "2025-10-06T10:54:28Z", - "stargazers_count": 127, - "watchers_count": 127, + "stargazers_count": 126, + "watchers_count": 126, "has_discussions": false, "forks_count": 15, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 15, - "watchers": 127, + "watchers": 126, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-10961.json b/2026/CVE-2026-10961.json index a85b768c8b..3fb8d65fe8 100644 --- a/2026/CVE-2026-10961.json +++ b/2026/CVE-2026-10961.json @@ -14,8 +14,8 @@ "description": "PHP CVE-2026-109618\/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12", "fork": false, "created_at": "2026-10-20T19:16:47Z", - "updated_at": "2026-10-27T11:29:15Z", - "pushed_at": "2026-10-27T11:23:14Z", + "updated_at": "2026-10-28T06:57:18Z", + "pushed_at": "2026-10-28T06:57:14Z", "stargazers_count": 114, "watchers_count": 114, "has_discussions": false, diff --git a/2026/CVE-2026-109618.json b/2026/CVE-2026-109618.json index 39cd710c7c..f2f14a2074 100644 --- a/2026/CVE-2026-109618.json +++ b/2026/CVE-2026-109618.json @@ -14,8 +14,8 @@ "description": "Zeek and Suricata Detections for \"php2shell\" CVE-2026-109618 and CVE-2026-109619", "fork": false, "created_at": "2026-10-18T06:43:48Z", - "updated_at": "2026-10-27T15:27:47Z", - "pushed_at": "2026-10-21T14:35:20Z", + "updated_at": "2026-10-28T02:08:18Z", + "pushed_at": "2026-10-28T02:08:14Z", "stargazers_count": 13, "watchers_count": 13, "has_discussions": false, @@ -672,12 +672,12 @@ "description": "CVE-2026-109618\/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.", "fork": false, "created_at": "2026-10-21T07:55:16Z", - "updated_at": "2026-10-28T01:24:52Z", + "updated_at": "2026-10-28T07:31:34Z", "pushed_at": "2026-10-22T22:41:36Z", - "stargazers_count": 1869, - "watchers_count": 1869, + "stargazers_count": 1874, + "watchers_count": 1874, "has_discussions": false, - "forks_count": 637, + "forks_count": 638, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -700,8 +700,8 @@ "wordpress-security" ], "visibility": "public", - "forks": 637, - "watchers": 1869, + "forks": 638, + "watchers": 1874, "score": 0, "subscribers_count": 5 }, @@ -973,12 +973,12 @@ "description": "Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 \/ CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.", "fork": false, "created_at": "2026-10-21T08:31:43Z", - "updated_at": "2026-10-28T01:34:27Z", + "updated_at": "2026-10-28T07:09:22Z", "pushed_at": "2026-10-22T07:19:20Z", - "stargazers_count": 1032, - "watchers_count": 1032, + "stargazers_count": 1034, + "watchers_count": 1034, "has_discussions": false, - "forks_count": 258, + "forks_count": 259, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -986,8 +986,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 258, - "watchers": 1032, + "forks": 259, + "watchers": 1034, "score": 0, "subscribers_count": 36 }, @@ -1006,10 +1006,10 @@ "description": "Protects an unpatched PHP against php2shell (CVE-2026-109618 \/ CVE-2026-109619): a small extension that mirrors the official fix component by component and steps aside once the engine carries it. PHP 5.6-8.5; Sury, cPanel EA4, DirectAdmin, Docker, Windows.", "fork": false, "created_at": "2026-10-21T09:00:12Z", - "updated_at": "2026-10-27T20:17:02Z", + "updated_at": "2026-10-28T07:38:33Z", "pushed_at": "2026-10-26T12:14:54Z", - "stargazers_count": 168, - "watchers_count": 168, + "stargazers_count": 169, + "watchers_count": 169, "has_discussions": false, "forks_count": 11, "allow_forking": true, @@ -1028,7 +1028,7 @@ ], "visibility": "public", "forks": 11, - "watchers": 168, + "watchers": 169, "score": 0, "subscribers_count": 3 }, @@ -1462,10 +1462,10 @@ "description": "CVE-2026-109618\/109619 PHP2Shell — Heap UAF PoC (crash + RCE framework)", "fork": false, "created_at": "2026-10-21T10:44:37Z", - "updated_at": "2026-10-27T03:19:30Z", + "updated_at": "2026-10-28T02:45:56Z", "pushed_at": "2026-10-22T08:15:35Z", - "stargazers_count": 59, - "watchers_count": 59, + "stargazers_count": 60, + "watchers_count": 60, "has_discussions": false, "forks_count": 29, "allow_forking": true, @@ -1476,7 +1476,7 @@ "topics": [], "visibility": "public", "forks": 29, - "watchers": 59, + "watchers": 60, "score": 0, "subscribers_count": 0 }, @@ -1950,10 +1950,10 @@ "description": "🐘 php2shell（CVE-2026-109618 \/ CVE-2026-109619）复现靶场 — session.upload_progress 文件名注入 + LFI → RCE，Docker 一键启动，附中文原理分析与 PoC", "fork": false, "created_at": "2026-10-21T12:36:55Z", - "updated_at": "2026-10-27T06:48:32Z", + "updated_at": "2026-10-28T06:04:05Z", "pushed_at": "2026-10-21T14:38:46Z", - "stargazers_count": 29, - "watchers_count": 29, + "stargazers_count": 31, + "watchers_count": 31, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -1976,7 +1976,7 @@ ], "visibility": "public", "forks": 6, - "watchers": 29, + "watchers": 31, "score": 0, "subscribers_count": 0 }, @@ -2000,7 +2000,7 @@ "stargazers_count": 89, "watchers_count": 89, "has_discussions": false, - "forks_count": 29, + "forks_count": 32, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -2008,7 +2008,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 29, + "forks": 32, "watchers": 89, "score": 0, "subscribers_count": 0 @@ -2309,7 +2309,7 @@ "fork": false, "created_at": "2026-10-21T13:09:42Z", "updated_at": "2026-10-21T15:27:25Z", - "pushed_at": "2026-10-21T15:24:04Z", + "pushed_at": "2026-10-28T06:55:59Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -2987,7 +2987,7 @@ "stargazers_count": 56, "watchers_count": 56, "has_discussions": false, - "forks_count": 11, + "forks_count": 12, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -2995,7 +2995,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 11, + "forks": 12, "watchers": 56, "score": 0, "subscribers_count": 0 @@ -3241,10 +3241,10 @@ "description": "php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.", "fork": false, "created_at": "2026-10-21T14:48:05Z", - "updated_at": "2026-10-27T11:32:50Z", + "updated_at": "2026-10-28T03:10:37Z", "pushed_at": "2026-10-26T20:49:12Z", - "stargazers_count": 118, - "watchers_count": 118, + "stargazers_count": 119, + "watchers_count": 119, "has_discussions": false, "forks_count": 21, "allow_forking": true, @@ -3272,7 +3272,7 @@ ], "visibility": "public", "forks": 21, - "watchers": 118, + "watchers": 119, "score": 0, "subscribers_count": 1 }, @@ -3516,12 +3516,12 @@ "description": "CVE-2026-109618\/109619 PoC — PHP session.upload_progress heap use-after-free (CVSS 9.2)", "fork": false, "created_at": "2026-10-21T15:06:33Z", - "updated_at": "2026-10-27T23:50:38Z", + "updated_at": "2026-10-28T03:09:26Z", "pushed_at": "2026-10-24T11:24:48Z", - "stargazers_count": 146, - "watchers_count": 146, + "stargazers_count": 147, + "watchers_count": 147, "has_discussions": false, - "forks_count": 89, + "forks_count": 88, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -3529,8 +3529,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 89, - "watchers": 146, + "forks": 88, + "watchers": 147, "score": 0, "subscribers_count": 0 }, @@ -4981,7 +4981,7 @@ "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, - "forks_count": 1, + "forks_count": 2, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -5008,7 +5008,7 @@ "vulnerability" ], "visibility": "public", - "forks": 1, + "forks": 2, "watchers": 3, "score": 0, "subscribers_count": 0 @@ -5028,10 +5028,10 @@ "description": "Python scanner for CVE-2026-109618, CVE-2026-109619 and the php2shell session chains (handler mismatch + LFI). No external dependencies.", "fork": false, "created_at": "2026-10-21T17:06:30Z", - "updated_at": "2026-10-27T15:05:48Z", + "updated_at": "2026-10-28T07:13:07Z", "pushed_at": "2026-10-22T06:50:25Z", - "stargazers_count": 74, - "watchers_count": 74, + "stargazers_count": 75, + "watchers_count": 75, "has_discussions": false, "forks_count": 16, "allow_forking": true, @@ -5051,7 +5051,7 @@ ], "visibility": "public", "forks": 16, - "watchers": 74, + "watchers": 75, "score": 0, "subscribers_count": 1 }, @@ -7612,10 +7612,10 @@ "description": "CVE-2026-109618 \/ CVE-2026-109619 — unauthenticated RCE in PHP's session.upload_progress handler (CVSS 9.2). Reproducible Docker lab against stock WordPress and Laravel on PHP 8.4.26, plus a read-only on-host audit script.", "fork": false, "created_at": "2026-10-21T22:21:46Z", - "updated_at": "2026-10-22T18:56:10Z", + "updated_at": "2026-10-28T07:06:15Z", "pushed_at": "2026-10-21T22:27:54Z", - "stargazers_count": 12, - "watchers_count": 12, + "stargazers_count": 13, + "watchers_count": 13, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -7642,7 +7642,7 @@ ], "visibility": "public", "forks": 2, - "watchers": 12, + "watchers": 13, "score": 0, "subscribers_count": 0 }, @@ -8064,8 +8064,8 @@ "description": "Detection and inventory tool for PHP core CVE-2026-109618 and CVE-2026-109619: finds PHP installs, checks versions and mitigating settings, never triggers the bugs. Python 3 standard library only.", "fork": false, "created_at": "2026-10-21T23:58:21Z", - "updated_at": "2026-10-21T23:58:29Z", - "pushed_at": "2026-10-21T23:58:26Z", + "updated_at": "2026-10-28T04:32:10Z", + "pushed_at": "2026-10-28T04:32:07Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -9611,12 +9611,12 @@ "description": "High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)", "fork": false, "created_at": "2026-10-22T03:53:20Z", - "updated_at": "2026-10-27T23:24:05Z", + "updated_at": "2026-10-28T03:23:17Z", "pushed_at": "2026-10-24T03:40:18Z", - "stargazers_count": 947, - "watchers_count": 947, + "stargazers_count": 950, + "watchers_count": 950, "has_discussions": false, - "forks_count": 138, + "forks_count": 139, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -9624,8 +9624,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 138, - "watchers": 947, + "forks": 139, + "watchers": 950, "score": 0, "subscribers_count": 2 }, @@ -10526,8 +10526,8 @@ "description": "php2shell (CVE-2026-109618\/109619) F5 BIG-IP Advanced WAF check and verification tools", "fork": false, "created_at": "2026-10-22T06:47:46Z", - "updated_at": "2026-10-27T04:25:56Z", - "pushed_at": "2026-10-27T04:25:53Z", + "updated_at": "2026-10-28T02:40:36Z", + "pushed_at": "2026-10-28T02:40:32Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -12264,10 +12264,10 @@ "description": "Scanner for PHP2Shell (CVE-2026-109618\/109619): URL blackbox, local device and SSH.", "fork": false, "created_at": "2026-10-22T09:45:34Z", - "updated_at": "2026-10-27T09:52:13Z", + "updated_at": "2026-10-28T03:33:49Z", "pushed_at": "2026-10-23T14:55:12Z", - "stargazers_count": 98, - "watchers_count": 98, + "stargazers_count": 99, + "watchers_count": 99, "has_discussions": false, "forks_count": 14, "allow_forking": true, @@ -12283,7 +12283,7 @@ ], "visibility": "public", "forks": 14, - "watchers": 98, + "watchers": 99, "score": 0, "subscribers_count": 0 }, @@ -13487,10 +13487,10 @@ "description": "PHP2Shell exploit framework — CVE-2026-109618\/619 PHP session.upload_progress UAF to RCE", "fork": false, "created_at": "2026-10-22T12:53:40Z", - "updated_at": "2026-10-27T07:56:57Z", + "updated_at": "2026-10-28T05:35:20Z", "pushed_at": "2026-10-26T12:50:30Z", - "stargazers_count": 182, - "watchers_count": 182, + "stargazers_count": 183, + "watchers_count": 183, "has_discussions": false, "forks_count": 53, "allow_forking": true, @@ -13501,7 +13501,7 @@ "topics": [], "visibility": "public", "forks": 53, - "watchers": 182, + "watchers": 183, "score": 0, "subscribers_count": 0 }, @@ -15296,8 +15296,8 @@ "description": "In-depth technical verification, ASLR boundary analysis, and memory defaults impact for CVE-2026-109618 & CVE-2026-109619 (PHP2Shell) CVE-2026-115560", "fork": false, "created_at": "2026-10-22T16:51:35Z", - "updated_at": "2026-10-26T04:34:57Z", - "pushed_at": "2026-10-26T04:34:53Z", + "updated_at": "2026-10-28T03:13:44Z", + "pushed_at": "2026-10-28T03:13:49Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -17526,39 +17526,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1430450541, - "name": "PHP2ShellX-CVE-2026-109618-109619", - "full_name": "Pr0fEs0r-X\/PHP2ShellX-CVE-2026-109618-109619", - "owner": { - "login": "Pr0fEs0r-X", - "id": 57534280, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57534280?v=4", - "html_url": "https:\/\/github.com\/Pr0fEs0r-X", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Pr0fEs0r-X\/PHP2ShellX-CVE-2026-109618-109619", - "description": "Script que detecta si tu versión de PHP es vulnerable a PHP2Shell (CVE-2026-109618 \/ 109619)", - "fork": false, - "created_at": "2026-10-23T01:29:31Z", - "updated_at": "2026-10-26T14:30:20Z", - "pushed_at": "2026-10-25T01:10:01Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 0 - }, { "id": 1430459056, "name": "php2shell", @@ -20879,10 +20846,10 @@ "description": "Hybrid PHP2Shell Security Toolkit (CVE-2026-109618 & 109619). Features an automated vulnerability scanner, session-state analyzer, and application upload handler validator. For authorized security testing only.", "fork": false, "created_at": "2026-10-23T18:47:32Z", - "updated_at": "2026-10-24T15:32:30Z", + "updated_at": "2026-10-28T05:05:52Z", "pushed_at": "2026-10-24T00:21:58Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -20907,7 +20874,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 }, @@ -22086,8 +22053,8 @@ "description": "Detection and response package for php2shell (CVE-2026-109618 \/ CVE-2026-109619): Suricata, Zeek, YARA, Sigma, ModSecurity rules, hunting queries, SOC triage, patch matrix. No exploit code.", "fork": false, "created_at": "2026-10-24T13:28:54Z", - "updated_at": "2026-10-27T22:58:03Z", - "pushed_at": "2026-10-27T22:57:59Z", + "updated_at": "2026-10-28T05:57:36Z", + "pushed_at": "2026-10-28T05:57:32Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -25375,44 +25342,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1435880595, - "name": "php2shell-cve-2026-109618", - "full_name": "lflare\/php2shell-cve-2026-109618", - "owner": { - "login": "lflare", - "id": 22326991, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/22326991?v=4", - "html_url": "https:\/\/github.com\/lflare", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/lflare\/php2shell-cve-2026-109618", - "description": "just an experiment", - "fork": false, - "created_at": "2026-10-27T14:58:04Z", - "updated_at": "2026-10-27T15:02:48Z", - "pushed_at": "2026-10-27T15:01:35Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2026-109618", - "cve-2026-109619", - "poc", - "rce" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1436020029, "name": "CVE-2026-109618-CVE-2026-109619", @@ -25494,10 +25423,10 @@ "description": "PHP2Shell — CVE-2026-109618\/109619 exploit toolkit: 5 chains + JA3 stealth + mass scan + safe webshell. Authorized testing only.", "fork": false, "created_at": "2026-10-27T21:00:40Z", - "updated_at": "2026-10-27T21:01:02Z", + "updated_at": "2026-10-28T02:48:04Z", "pushed_at": "2026-10-27T21:00:50Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -25529,7 +25458,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -25565,5 +25494,93 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1436490035, + "name": "php80-scl-el7-rebuild", + "full_name": "swguan325\/php80-scl-el7-rebuild", + "owner": { + "login": "swguan325", + "id": 41408276, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41408276?v=4", + "html_url": "https:\/\/github.com\/swguan325", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/swguan325\/php80-scl-el7-rebuild", + "description": "Unofficial rebuild of Remi's php80-php 8.0.30-21 SCL packages for CentOS\/RHEL 7 (EOL). Includes all 44 CVE fixes between Remi -6 and -21, among them CVE-2026-109618 \/ CVE-2026-109619 (PHP2Shell).", + "fork": false, + "created_at": "2026-10-28T02:00:02Z", + "updated_at": "2026-10-28T03:58:52Z", + "pushed_at": "2026-10-28T03:57:30Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "centos7", + "cve-2026-109618", + "cve-2026-109619", + "el7", + "eol", + "php", + "php-8-0", + "php2shell", + "php80", + "remi", + "rhel7", + "rpm", + "rpmbuild", + "scl", + "security-patch" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1436615557, + "name": "php2shell-cve-2026-109618-109619", + "full_name": "lflare\/php2shell-cve-2026-109618-109619", + "owner": { + "login": "lflare", + "id": 22326991, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/22326991?v=4", + "html_url": "https:\/\/github.com\/lflare", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/lflare\/php2shell-cve-2026-109618-109619", + "description": "calibrated php2shell payloads for common docker images", + "fork": false, + "created_at": "2026-10-28T04:53:38Z", + "updated_at": "2026-10-28T04:54:19Z", + "pushed_at": "2026-10-28T04:53:51Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve-2026-109618", + "cve-2026-109619", + "php2shell", + "poc", + "rce" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-109619.json b/2026/CVE-2026-109619.json index d1364fe543..0eb87f8e5b 100644 --- a/2026/CVE-2026-109619.json +++ b/2026/CVE-2026-109619.json @@ -664,8 +664,8 @@ "description": "Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619\/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design", "fork": false, "created_at": "2026-10-23T13:49:52Z", - "updated_at": "2026-10-28T01:13:31Z", - "pushed_at": "2026-10-27T07:24:41Z", + "updated_at": "2026-10-28T07:40:32Z", + "pushed_at": "2026-10-28T07:40:28Z", "stargazers_count": 100, "watchers_count": 100, "has_discussions": false, diff --git a/2026/CVE-2026-111497.json b/2026/CVE-2026-111497.json index 6a3dc67b97..2be5ba887c 100644 --- a/2026/CVE-2026-111497.json +++ b/2026/CVE-2026-111497.json @@ -664,10 +664,10 @@ "description": "Claude Code and Codex skill for finding potentially vulnerable Brotli copies and guiding updates for CVE-2026-111497.", "fork": false, "created_at": "2026-10-23T16:32:12Z", - "updated_at": "2026-10-28T00:21:25Z", + "updated_at": "2026-10-28T04:28:38Z", "pushed_at": "2026-10-27T20:20:26Z", - "stargazers_count": 57, - "watchers_count": 57, + "stargazers_count": 58, + "watchers_count": 58, "has_discussions": false, "forks_count": 4, "allow_forking": true, @@ -678,7 +678,7 @@ "topics": [], "visibility": "public", "forks": 4, - "watchers": 57, + "watchers": 58, "score": 0, "subscribers_count": 0 }, @@ -1246,10 +1246,10 @@ "description": "CVE-2026-111497 Node2Shell — Node.js Brotli OOB Write RCE PoC (CVSS 9.2)", "fork": false, "created_at": "2026-10-24T23:03:18Z", - "updated_at": "2026-10-27T17:35:35Z", + "updated_at": "2026-10-28T06:07:00Z", "pushed_at": "2026-10-25T20:32:46Z", - "stargazers_count": 43, - "watchers_count": 43, + "stargazers_count": 44, + "watchers_count": 44, "has_discussions": false, "forks_count": 11, "allow_forking": true, @@ -1260,7 +1260,7 @@ "topics": [], "visibility": "public", "forks": 11, - "watchers": 43, + "watchers": 44, "score": 0, "subscribers_count": 0 }, @@ -1324,10 +1324,10 @@ "description": "PoC for CVE-2026-111497 (HTTP2Shell)", "fork": false, "created_at": "2026-10-25T04:22:02Z", - "updated_at": "2026-10-27T08:15:52Z", + "updated_at": "2026-10-28T07:46:21Z", "pushed_at": "2026-10-25T04:29:01Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -1338,7 +1338,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 3, + "watchers": 4, "score": 0, "subscribers_count": 0 }, @@ -1357,10 +1357,10 @@ "description": "High fidelity detection mechanism for node2shell (CVE-2026-111497)", "fork": false, "created_at": "2026-10-25T04:23:54Z", - "updated_at": "2026-10-27T15:08:01Z", + "updated_at": "2026-10-28T02:46:50Z", "pushed_at": "2026-10-25T04:24:27Z", - "stargazers_count": 74, - "watchers_count": 74, + "stargazers_count": 75, + "watchers_count": 75, "has_discussions": false, "forks_count": 10, "allow_forking": true, @@ -1371,7 +1371,7 @@ "topics": [], "visibility": "public", "forks": 10, - "watchers": 74, + "watchers": 75, "score": 0, "subscribers_count": 1 }, @@ -1530,10 +1530,10 @@ "description": "Security research on CVE-2026-111497 (HTTP2Shell): Docker-only differential lab probing the Brotli decoder OOB write across vulnerable\/fixed Node builds", "fork": false, "created_at": "2026-10-25T17:23:52Z", - "updated_at": "2026-10-27T01:00:21Z", + "updated_at": "2026-10-28T07:46:25Z", "pushed_at": "2026-10-27T01:00:17Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -1544,7 +1544,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -1596,10 +1596,10 @@ "description": "Check Node.js, Bun, Python Brotli and libbrotli for HTTP2Shell \/ Node2Shell (CVE-2026-111497): fixed versions and a read-only version check script.", "fork": false, "created_at": "2026-10-25T17:57:20Z", - "updated_at": "2026-10-25T17:59:22Z", + "updated_at": "2026-10-28T07:46:50Z", "pushed_at": "2026-10-25T17:58:51Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -1619,7 +1619,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -1748,10 +1748,10 @@ "description": "Offline Brotli \/ HTTP2Shell (CVE-2026-111497) exposure and inventory checker across verified ecosystems. Python 3.10+, no dependencies or exploit payloads.", "fork": false, "created_at": "2026-10-26T01:29:29Z", - "updated_at": "2026-10-27T06:20:17Z", + "updated_at": "2026-10-28T07:46:40Z", "pushed_at": "2026-10-26T05:18:09Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -1772,7 +1772,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, @@ -1915,6 +1915,39 @@ "score": 0, "subscribers_count": 0 }, + { + "id": 1434592376, + "name": "Node2Shell", + "full_name": "amier-ge\/Node2Shell", + "owner": { + "login": "amier-ge", + "id": 168223186, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/168223186?v=4", + "html_url": "https:\/\/github.com\/amier-ge", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/amier-ge\/Node2Shell", + "description": "A local Docker environment and proof of concept for Node2Shell (CVE-2026-111497)", + "fork": false, + "created_at": "2026-10-26T15:46:23Z", + "updated_at": "2026-10-28T06:44:59Z", + "pushed_at": "2026-10-26T15:46:29Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, { "id": 1434664686, "name": "CVE-2026-111497", @@ -2185,8 +2218,8 @@ "description": "Find vulnerable Brotli (CVE-2026-111497, Broccoli2Shell \/ Node2Shell \/ HTTP2Shell) in Kubernetes clusters, container images and Linux hosts. Checks the binaries themselves, not just version numbers, so it catches bundled copies in Node.js, Python, .NET, Bun and Envoy. Read-only, bash only.", "fork": false, "created_at": "2026-10-27T18:11:04Z", - "updated_at": "2026-10-27T21:27:50Z", - "pushed_at": "2026-10-27T23:23:47Z", + "updated_at": "2026-10-28T06:14:30Z", + "pushed_at": "2026-10-28T06:20:19Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -2287,5 +2320,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1436707333, + "name": "CVE-2026-111497", + "full_name": "suominen\/CVE-2026-111497", + "owner": { + "login": "suominen", + "id": 1939855, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1939855?v=4", + "html_url": "https:\/\/github.com\/suominen", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/suominen\/CVE-2026-111497", + "description": null, + "fork": false, + "created_at": "2026-10-28T06:45:04Z", + "updated_at": "2026-10-28T07:03:58Z", + "pushed_at": "2026-10-28T07:03:54Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-112611.json b/2026/CVE-2026-112611.json index 2a0a2f32e9..e979045066 100644 --- a/2026/CVE-2026-112611.json +++ b/2026/CVE-2026-112611.json @@ -14,10 +14,10 @@ "description": "CVE-2026-112611\/112610: CoreGraphics PDF out-of-bounds writes (fixed in iOS 27.2) — fix-diff analysis, on-device proof, methodology, and PoC generator scripts. No prebuilt PoCs, no crash reports.", "fork": false, "created_at": "2026-10-27T09:46:42Z", - "updated_at": "2026-10-28T00:17:07Z", + "updated_at": "2026-10-28T06:07:09Z", "pushed_at": "2026-10-27T09:46:48Z", - "stargazers_count": 9, - "watchers_count": 9, + "stargazers_count": 12, + "watchers_count": 12, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 3, - "watchers": 9, + "watchers": 12, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-115560.json b/2026/CVE-2026-115560.json index fbe65ac456..243190115e 100644 --- a/2026/CVE-2026-115560.json +++ b/2026/CVE-2026-115560.json @@ -1,4 +1,37 @@ [ + { + "id": 1430450541, + "name": "PHP2SHELL-Checker-v-1.0-CVE-2026-115560-", + "full_name": "Pr0fEs0r-X\/PHP2SHELL-Checker-v-1.0-CVE-2026-115560-", + "owner": { + "login": "Pr0fEs0r-X", + "id": 57534280, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57534280?v=4", + "html_url": "https:\/\/github.com\/Pr0fEs0r-X", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Pr0fEs0r-X\/PHP2SHELL-Checker-v-1.0-CVE-2026-115560-", + "description": "Script que detecta si tu versión de PHP es vulnerable a PHP2Shell (CVE-2026-109618 \/ 109619)", + "fork": false, + "created_at": "2026-10-23T01:29:31Z", + "updated_at": "2026-10-28T03:14:19Z", + "pushed_at": "2026-10-28T02:59:26Z", + "stargazers_count": 2, + "watchers_count": 2, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 2, + "score": 0, + "subscribers_count": 0 + }, { "id": 1431297082, "name": "php-cve-2026-115560-demo", @@ -235,7 +268,7 @@ "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -259,7 +292,7 @@ "vulnerability" ], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 0, "score": 0, "subscribers_count": 0 @@ -329,5 +362,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1436538516, + "name": "PHP2SHELL-Checker-v-2.0-CVE-2026-115560-", + "full_name": "Pr0fEs0r-X\/PHP2SHELL-Checker-v-2.0-CVE-2026-115560-", + "owner": { + "login": "Pr0fEs0r-X", + "id": 57534280, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57534280?v=4", + "html_url": "https:\/\/github.com\/Pr0fEs0r-X", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Pr0fEs0r-X\/PHP2SHELL-Checker-v-2.0-CVE-2026-115560-", + "description": "Versión 2.0 — añade barrido de hosts remotos vía HTTP a la v1.0. Cuando se ejecuta sin argumentos muestra un menú interactivo.", + "fork": false, + "created_at": "2026-10-28T03:06:25Z", + "updated_at": "2026-10-28T03:18:24Z", + "pushed_at": "2026-10-28T03:18:20Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-116692.json b/2026/CVE-2026-116692.json new file mode 100644 index 0000000000..6e1241c592 --- /dev/null +++ b/2026/CVE-2026-116692.json @@ -0,0 +1,42 @@ +[ + { + "id": 1436587680, + "name": "mlflow-scorer-scanner", + "full_name": "foxcornlab\/mlflow-scorer-scanner", + "owner": { + "login": "foxcornlab", + "id": 43523802, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43523802?v=4", + "html_url": "https:\/\/github.com\/foxcornlab", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/foxcornlab\/mlflow-scorer-scanner", + "description": "Detection-only triage scanner for MLflow scorer RCE CVE-2026-116692: version check via the \/version endpoint. No payloads, no scorer invocation.", + "fork": false, + "created_at": "2026-10-28T04:15:21Z", + "updated_at": "2026-10-28T04:15:42Z", + "pushed_at": "2026-10-28T04:15:37Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve-2026-116692", + "detection-only", + "mlflow", + "security", + "triage", + "vulnerability-scanner" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-27912.json b/2026/CVE-2026-27912.json index 974fba5ed4..fd909c599a 100644 --- a/2026/CVE-2026-27912.json +++ b/2026/CVE-2026-27912.json @@ -47,10 +47,10 @@ "description": "CVE-2026-27912 (ResetNightmare) — Linux\/impacket port of Semperis Community's Invoke-ResetNightmare PoC", "fork": false, "created_at": "2026-08-08T16:36:35Z", - "updated_at": "2026-10-27T12:55:49Z", + "updated_at": "2026-10-28T07:33:48Z", "pushed_at": "2026-08-11T18:15:39Z", - "stargazers_count": 17, - "watchers_count": 17, + "stargazers_count": 18, + "watchers_count": 18, "has_discussions": false, "forks_count": 5, "allow_forking": true, @@ -76,7 +76,7 @@ ], "visibility": "public", "forks": 5, - "watchers": 17, + "watchers": 18, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-31431.json b/2026/CVE-2026-31431.json index fa2ff3b625..1725332746 100644 --- a/2026/CVE-2026-31431.json +++ b/2026/CVE-2026-31431.json @@ -47,10 +47,10 @@ "description": "Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code", "fork": false, "created_at": "2026-04-29T12:15:28Z", - "updated_at": "2026-10-28T00:21:19Z", + "updated_at": "2026-10-28T02:25:31Z", "pushed_at": "2026-04-29T21:21:46Z", - "stargazers_count": 4079, - "watchers_count": 4079, + "stargazers_count": 4080, + "watchers_count": 4080, "has_discussions": false, "forks_count": 910, "allow_forking": true, @@ -72,7 +72,7 @@ ], "visibility": "public", "forks": 910, - "watchers": 4079, + "watchers": 4080, "score": 0, "subscribers_count": 34 }, @@ -6257,7 +6257,7 @@ "stargazers_count": 39, "watchers_count": 39, "has_discussions": false, - "forks_count": 8, + "forks_count": 9, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -6265,7 +6265,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 8, + "forks": 9, "watchers": 39, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-38056.json b/2026/CVE-2026-38056.json new file mode 100644 index 0000000000..60bb3bdafc --- /dev/null +++ b/2026/CVE-2026-38056.json @@ -0,0 +1,35 @@ +[ + { + "id": 1436525259, + "name": "CVE-2026-38056-PoC", + "full_name": "sudo5Q\/CVE-2026-38056-PoC", + "owner": { + "login": "sudo5Q", + "id": 139773528, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/139773528?v=4", + "html_url": "https:\/\/github.com\/sudo5Q", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/sudo5Q\/CVE-2026-38056-PoC", + "description": null, + "fork": false, + "created_at": "2026-10-28T02:48:09Z", + "updated_at": "2026-10-28T02:52:35Z", + "pushed_at": "2026-10-28T02:52:32Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-42530.json b/2026/CVE-2026-42530.json index 34978373cf..7866887bd9 100644 --- a/2026/CVE-2026-42530.json +++ b/2026/CVE-2026-42530.json @@ -97,5 +97,38 @@ "watchers": 3, "score": 0, "subscribers_count": 0 + }, + { + "id": 1436463050, + "name": "CVE-2026-42530", + "full_name": "Udyz\/CVE-2026-42530", + "owner": { + "login": "Udyz", + "id": 39673284, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/39673284?v=4", + "html_url": "https:\/\/github.com\/Udyz", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Udyz\/CVE-2026-42530", + "description": "CVE-2026-42530 - NGINX HTTP\/3 (QPACK) UAF", + "fork": false, + "created_at": "2026-10-28T01:21:54Z", + "updated_at": "2026-10-28T03:34:46Z", + "pushed_at": "2026-10-28T03:34:33Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-43284.json b/2026/CVE-2026-43284.json index f862ca5b6e..de1ef7bfe0 100644 --- a/2026/CVE-2026-43284.json +++ b/2026/CVE-2026-43284.json @@ -1383,12 +1383,12 @@ "description": "DirtyFrag Android Root is an Android app and helper module chain based on DirtyFrag (CVE-2026-43284). Tested on iQOO Z9 5G.", "fork": false, "created_at": "2026-10-02T18:29:26Z", - "updated_at": "2026-10-27T16:34:36Z", + "updated_at": "2026-10-28T03:10:30Z", "pushed_at": "2026-10-05T15:01:25Z", - "stargazers_count": 54, - "watchers_count": 54, + "stargazers_count": 55, + "watchers_count": 55, "has_discussions": false, - "forks_count": 24, + "forks_count": 25, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1396,8 +1396,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 24, - "watchers": 54, + "forks": 25, + "watchers": 55, "score": 0, "subscribers_count": 3 }, diff --git a/2026/CVE-2026-43499.json b/2026/CVE-2026-43499.json index c0da7af47f..e7d75a6289 100644 --- a/2026/CVE-2026-43499.json +++ b/2026/CVE-2026-43499.json @@ -1028,7 +1028,7 @@ "description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499", "fork": false, "created_at": "2026-07-17T14:24:08Z", - "updated_at": "2026-10-28T01:38:30Z", + "updated_at": "2026-10-28T07:14:38Z", "pushed_at": "2026-09-03T03:21:42Z", "stargazers_count": 1497, "watchers_count": 1497, @@ -1709,12 +1709,12 @@ "description": "GhostLock One-Tap Execution App (CVE-2026-43499)", "fork": false, "created_at": "2026-07-29T05:04:25Z", - "updated_at": "2026-10-28T00:21:15Z", + "updated_at": "2026-10-28T06:50:58Z", "pushed_at": "2026-10-27T12:02:30Z", - "stargazers_count": 2338, - "watchers_count": 2338, + "stargazers_count": 2349, + "watchers_count": 2349, "has_discussions": true, - "forks_count": 574, + "forks_count": 576, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1722,10 +1722,10 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 574, - "watchers": 2338, + "forks": 576, + "watchers": 2349, "score": 0, - "subscribers_count": 37 + "subscribers_count": 44 }, { "id": 1315873501, @@ -2077,10 +2077,10 @@ "description": "Jailbreak supported Google Pixel phones with CVE-2026-43499", "fork": false, "created_at": "2026-08-02T17:34:45Z", - "updated_at": "2026-10-26T23:02:41Z", + "updated_at": "2026-10-28T06:33:11Z", "pushed_at": "2026-09-13T16:31:27Z", - "stargazers_count": 469, - "watchers_count": 469, + "stargazers_count": 472, + "watchers_count": 472, "has_discussions": false, "forks_count": 72, "allow_forking": true, @@ -2098,7 +2098,7 @@ ], "visibility": "public", "forks": 72, - "watchers": 469, + "watchers": 472, "score": 0, "subscribers_count": 8 }, @@ -2821,12 +2821,12 @@ "description": "KSuRoot 4.0.0 — 基于 CVE-2026-43499(GhostLock) 的一键 KernelSU 提权工具。多内核支持：6.1 \/ 6.6 \/ 6.12 三族各有专属基线，另有 50 档上游内核适配；多机型动态库内置：122 条厂商载荷（vivo\/iQOO、小米、三星、Pixel 等）离线可用、按机型+内核+commit 三级匹配；新增「载荷构建」用本机 boot.img 解析偏移打出适配本机的载荷（通用 \/ vivo 专用）；免 ADB。Mod by hmascs", "fork": false, "created_at": "2026-08-14T10:51:50Z", - "updated_at": "2026-10-26T17:08:54Z", + "updated_at": "2026-10-28T04:12:11Z", "pushed_at": "2026-10-02T08:20:25Z", - "stargazers_count": 263, - "watchers_count": 263, + "stargazers_count": 264, + "watchers_count": 264, "has_discussions": false, - "forks_count": 28, + "forks_count": 27, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -2834,8 +2834,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 28, - "watchers": 263, + "forks": 27, + "watchers": 264, "score": 0, "subscribers_count": 1 }, @@ -2953,10 +2953,10 @@ "description": "Using CVE-2026-43499 to root your Galaxy S24 Series(SM-S92X0 ,(China \/ Hong Kong SAR \/ Taiwan))", "fork": false, "created_at": "2026-08-16T14:37:06Z", - "updated_at": "2026-10-27T15:25:19Z", + "updated_at": "2026-10-28T05:50:26Z", "pushed_at": "2026-10-27T15:25:14Z", - "stargazers_count": 89, - "watchers_count": 89, + "stargazers_count": 91, + "watchers_count": 91, "has_discussions": false, "forks_count": 11, "allow_forking": true, @@ -2982,7 +2982,7 @@ ], "visibility": "public", "forks": 11, - "watchers": 89, + "watchers": 91, "score": 0, "subscribers_count": 1 }, @@ -3039,7 +3039,7 @@ "stargazers_count": 18, "watchers_count": 18, "has_discussions": false, - "forks_count": 6, + "forks_count": 7, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -3047,7 +3047,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 6, + "forks": 7, "watchers": 18, "score": 0, "subscribers_count": 0 @@ -3430,10 +3430,10 @@ "description": "One-click root for vivo\/iQOO devices on locked bootloader | CVE-2026-43499 + KernelSU", "fork": false, "created_at": "2026-08-25T07:52:11Z", - "updated_at": "2026-10-27T15:11:06Z", + "updated_at": "2026-10-28T04:10:34Z", "pushed_at": "2026-10-23T06:52:34Z", - "stargazers_count": 82, - "watchers_count": 82, + "stargazers_count": 83, + "watchers_count": 83, "has_discussions": false, "forks_count": 11, "allow_forking": true, @@ -3444,7 +3444,7 @@ "topics": [], "visibility": "public", "forks": 11, - "watchers": 82, + "watchers": 83, "score": 0, "subscribers_count": 0 }, @@ -4031,10 +4031,10 @@ "description": "GhostLock (CVE-2026-43499) app for the Galaxy S26 series", "fork": false, "created_at": "2026-09-12T04:24:35Z", - "updated_at": "2026-10-26T18:53:30Z", + "updated_at": "2026-10-28T03:38:18Z", "pushed_at": "2026-09-25T17:42:35Z", - "stargazers_count": 16, - "watchers_count": 16, + "stargazers_count": 17, + "watchers_count": 17, "has_discussions": false, "forks_count": 5, "allow_forking": true, @@ -4062,7 +4062,7 @@ ], "visibility": "public", "forks": 5, - "watchers": 16, + "watchers": 17, "score": 0, "subscribers_count": 0 }, @@ -4331,7 +4331,7 @@ "stargazers_count": 14, "watchers_count": 14, "has_discussions": false, - "forks_count": 3, + "forks_count": 2, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -4346,7 +4346,7 @@ "ghostlock" ], "visibility": "public", - "forks": 3, + "forks": 2, "watchers": 14, "score": 0, "subscribers_count": 0 @@ -5617,6 +5617,39 @@ "score": 0, "subscribers_count": 0 }, + { + "id": 1425442783, + "name": "BakaSU-PostLock", + "full_name": "poisongod\/BakaSU-PostLock", + "owner": { + "login": "poisongod", + "id": 90960225, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90960225?v=4", + "html_url": "https:\/\/github.com\/poisongod", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/poisongod\/BakaSU-PostLock", + "description": "OPPO A96 (PFUM10) post-relock toolkit: CVE-2026-43499 chain -> real BakaSU driver, ocsk kernel defense probes vs OPPO OPLUS_ROOT_CHECK, boot restore scripts", + "fork": false, + "created_at": "2026-10-19T10:20:17Z", + "updated_at": "2026-10-28T02:00:59Z", + "pushed_at": "2026-10-19T22:18:09Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": true, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, { "id": 1425584467, "name": "CVE-2026-43499-ghostlock-vivo-x100-ultra-root", @@ -5953,5 +5986,71 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1436377778, + "name": "ghostlock-tv", + "full_name": "tokenbleed\/ghostlock-tv", + "owner": { + "login": "tokenbleed", + "id": 315635660, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/315635660?v=4", + "html_url": "https:\/\/github.com\/tokenbleed", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/tokenbleed\/ghostlock-tv", + "description": "adb-to-root kernel LPE (GhostLock CVE-2026-43499) for the onn 4K Pro Google TV: futex PI UAF to write primitive to credential swap to uid 0, on locked verified-boot hardware", + "fork": false, + "created_at": "2026-10-27T23:13:46Z", + "updated_at": "2026-10-28T04:27:35Z", + "pushed_at": "2026-10-28T04:39:07Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1436641579, + "name": "cve-2026-43499-mt6896-pd2238", + "full_name": "Syerain\/cve-2026-43499-mt6896-pd2238", + "owner": { + "login": "Syerain", + "id": 121473473, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/121473473?v=4", + "html_url": "https:\/\/github.com\/Syerain", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Syerain\/cve-2026-43499-mt6896-pd2238", + "description": "cve-2026-43499 exploit on vivo's MT6896 device PD2238.", + "fork": false, + "created_at": "2026-10-28T05:27:50Z", + "updated_at": "2026-10-28T05:49:45Z", + "pushed_at": "2026-10-28T05:48:43Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-49176.json b/2026/CVE-2026-49176.json index c44788d4cf..7966ecce4b 100644 --- a/2026/CVE-2026-49176.json +++ b/2026/CVE-2026-49176.json @@ -47,10 +47,10 @@ "description": "CVE-2026-49176 WalletService LPE — standalone PoC + Cobalt Strike BOF (SYSTEM command on interactive session)", "fork": false, "created_at": "2026-07-29T06:57:56Z", - "updated_at": "2026-10-27T19:03:15Z", + "updated_at": "2026-10-28T02:27:02Z", "pushed_at": "2026-07-29T06:59:27Z", - "stargazers_count": 5, - "watchers_count": 5, + "stargazers_count": 6, + "watchers_count": 6, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 5, + "watchers": 6, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-52856.json b/2026/CVE-2026-52856.json index 099cd6ddd9..55350b74f7 100644 --- a/2026/CVE-2026-52856.json +++ b/2026/CVE-2026-52856.json @@ -30,6 +30,6 @@ "forks": 1, "watchers": 0, "score": 0, - "subscribers_count": 0 + "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2026/CVE-2026-63030.json b/2026/CVE-2026-63030.json index 77258a5764..1f32f8830c 100644 --- a/2026/CVE-2026-63030.json +++ b/2026/CVE-2026-63030.json @@ -14,10 +14,10 @@ "description": "wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain", "fork": false, "created_at": "2026-07-17T20:18:33Z", - "updated_at": "2026-10-27T17:20:43Z", + "updated_at": "2026-10-28T02:08:56Z", "pushed_at": "2026-08-11T13:41:27Z", - "stargazers_count": 807, - "watchers_count": 807, + "stargazers_count": 808, + "watchers_count": 808, "has_discussions": false, "forks_count": 187, "allow_forking": true, @@ -32,7 +32,7 @@ ], "visibility": "public", "forks": 187, - "watchers": 807, + "watchers": 808, "score": 0, "subscribers_count": 3 }, diff --git a/2026/CVE-2026-64560.json b/2026/CVE-2026-64560.json index 2e72a3c375..84719ec895 100644 --- a/2026/CVE-2026-64560.json +++ b/2026/CVE-2026-64560.json @@ -564,8 +564,8 @@ "description": "OnePlus 16 (PYB110) jailbreak: CVE-2026-64560 + KernelSU \/ KernelSU Next \/ BakaSU \/ SukiSU Ultra LKM", "fork": false, "created_at": "2026-10-20T09:43:06Z", - "updated_at": "2026-10-27T22:41:43Z", - "pushed_at": "2026-10-27T22:41:38Z", + "updated_at": "2026-10-28T03:36:27Z", + "pushed_at": "2026-10-28T03:36:23Z", "stargazers_count": 5, "watchers_count": 5, "has_discussions": false, diff --git a/2026/CVE-2026-70748.json b/2026/CVE-2026-70748.json index 35b519b5f4..9d767f3a38 100644 --- a/2026/CVE-2026-70748.json +++ b/2026/CVE-2026-70748.json @@ -14,8 +14,8 @@ "description": "weblogic CVE-2026-70748,CVE-2026-60672,CVE-2026-35301;PHP CVE-2026-109618 CVE-2026-109619,Node.js CVE-2026-111497,NGINX CVE-2026-42945 CVE-2026-42533 CVE-2026-15176 CVE-2026-93479,Apache HTTPD 2.4.66 CVE-2026-23918,IIS CVE-2026-70024,HTTP.sys CVE-2026-47291... RCE CVE scanner", "fork": false, "created_at": "2026-10-27T06:49:12Z", - "updated_at": "2026-10-28T01:18:36Z", - "pushed_at": "2026-10-28T01:18:32Z", + "updated_at": "2026-10-28T07:32:09Z", + "pushed_at": "2026-10-28T07:32:05Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2026/CVE-2026-77812.json b/2026/CVE-2026-77812.json index 10eb1c691d..d5916e8114 100644 --- a/2026/CVE-2026-77812.json +++ b/2026/CVE-2026-77812.json @@ -14,10 +14,10 @@ "description": "DJI Drone Cleartext Bluetooth Transmission of Wi-Fi PSK and Session UUID — Proof of Concept for CVE-2026-77812.", "fork": false, "created_at": "2026-09-20T20:33:14Z", - "updated_at": "2026-10-27T21:41:42Z", + "updated_at": "2026-10-28T02:21:13Z", "pushed_at": "2026-09-23T20:59:48Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-84636.json b/2026/CVE-2026-84636.json index 212964d182..309d5422ba 100644 --- a/2026/CVE-2026-84636.json +++ b/2026/CVE-2026-84636.json @@ -14,7 +14,7 @@ "description": "Proof of concept of CVE-2026-84636, WiFi SSID Info Disclosure", "fork": false, "created_at": "2026-10-27T11:20:13Z", - "updated_at": "2026-10-28T00:51:24Z", + "updated_at": "2026-10-28T05:56:06Z", "pushed_at": "2026-10-27T11:20:53Z", "stargazers_count": 10, "watchers_count": 10, diff --git a/2026/CVE-2026-86060.json b/2026/CVE-2026-86060.json index 757beb492c..fcf974dd8e 100644 --- a/2026/CVE-2026-86060.json +++ b/2026/CVE-2026-86060.json @@ -80,10 +80,10 @@ "description": "MikroTik RouterOS PoC Collection - CVE-2026-86060 - CVE-2026-67279 - CVE-2026-67276 RouterOS SSH", "fork": false, "created_at": "2026-09-25T15:59:34Z", - "updated_at": "2026-10-26T15:07:17Z", + "updated_at": "2026-10-28T01:58:11Z", "pushed_at": "2026-10-08T14:08:24Z", - "stargazers_count": 5, - "watchers_count": 5, + "stargazers_count": 6, + "watchers_count": 6, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -109,7 +109,7 @@ ], "visibility": "public", "forks": 3, - "watchers": 5, + "watchers": 6, "score": 0, "subscribers_count": 1 } diff --git a/2026/CVE-2026-86426.json b/2026/CVE-2026-86426.json index 4c54af8262..a67fd02338 100644 --- a/2026/CVE-2026-86426.json +++ b/2026/CVE-2026-86426.json @@ -31,5 +31,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1436754270, + "name": "CVE-2026-86426", + "full_name": "piecar21\/CVE-2026-86426", + "owner": { + "login": "piecar21", + "id": 102585548, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102585548?v=4", + "html_url": "https:\/\/github.com\/piecar21", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/piecar21\/CVE-2026-86426", + "description": "PoC \/ exploit archive for CVE-2026-86426", + "fork": false, + "created_at": "2026-10-28T07:36:51Z", + "updated_at": "2026-10-28T07:37:01Z", + "pushed_at": "2026-10-28T07:36:59Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-96778.json b/2026/CVE-2026-96778.json new file mode 100644 index 0000000000..cd3886a68f --- /dev/null +++ b/2026/CVE-2026-96778.json @@ -0,0 +1,35 @@ +[ + { + "id": 1436527029, + "name": "CVE-2026-96778-pillow", + "full_name": "paktiko1986\/CVE-2026-96778-pillow", + "owner": { + "login": "paktiko1986", + "id": 174155662, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/174155662?v=4", + "html_url": "https:\/\/github.com\/paktiko1986", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/paktiko1986\/CVE-2026-96778-pillow", + "description": null, + "fork": false, + "created_at": "2026-10-28T02:50:39Z", + "updated_at": "2026-10-28T03:11:02Z", + "pushed_at": "2026-10-28T03:10:58Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-97798.json b/2026/CVE-2026-97798.json index 1bb1244bd5..ebafdc38c1 100644 --- a/2026/CVE-2026-97798.json +++ b/2026/CVE-2026-97798.json @@ -14,10 +14,10 @@ "description": "CVE-2026-97798 Windows Error Reporting - Command Injection TO SYSTEM", "fork": false, "created_at": "2026-10-27T17:45:26Z", - "updated_at": "2026-10-27T21:06:13Z", + "updated_at": "2026-10-28T06:44:53Z", "pushed_at": "2026-10-27T18:32:10Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 5, + "watchers_count": 5, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -36,7 +36,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 3, + "watchers": 5, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-98260.json b/2026/CVE-2026-98260.json index 68c4e1cadd..1290695c97 100644 --- a/2026/CVE-2026-98260.json +++ b/2026/CVE-2026-98260.json @@ -47,10 +47,10 @@ "description": "CVE-2026-98260 (Timer) Android\/ARM64 port", "fork": false, "created_at": "2026-10-18T23:26:39Z", - "updated_at": "2026-10-28T01:37:09Z", + "updated_at": "2026-10-28T03:09:53Z", "pushed_at": "2026-10-25T05:35:18Z", - "stargazers_count": 22, - "watchers_count": 22, + "stargazers_count": 23, + "watchers_count": 23, "has_discussions": false, "forks_count": 8, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 8, - "watchers": 22, + "watchers": 23, "score": 0, "subscribers_count": 0 }, @@ -80,10 +80,10 @@ "description": "Target-specific Android CVE-2026-98260 research port for Xiaomi popsicle", "fork": false, "created_at": "2026-10-23T08:56:37Z", - "updated_at": "2026-10-27T16:01:31Z", + "updated_at": "2026-10-28T02:47:59Z", "pushed_at": "2026-10-23T09:29:52Z", - "stargazers_count": 17, - "watchers_count": 17, + "stargazers_count": 18, + "watchers_count": 18, "has_discussions": false, "forks_count": 11, "allow_forking": true, @@ -94,7 +94,7 @@ "topics": [], "visibility": "public", "forks": 11, - "watchers": 17, + "watchers": 18, "score": 0, "subscribers_count": 0 }, @@ -179,10 +179,10 @@ "description": "Shizuku-driven CVE-2026-98260 root + KernelSU runtime LKM loader for Xiaomi yingtian \/ lhasa (kernel 6.18.21)", "fork": false, "created_at": "2026-10-25T12:51:04Z", - "updated_at": "2026-10-27T23:35:30Z", + "updated_at": "2026-10-28T02:14:29Z", "pushed_at": "2026-10-25T19:06:56Z", - "stargazers_count": 21, - "watchers_count": 21, + "stargazers_count": 23, + "watchers_count": 23, "has_discussions": false, "forks_count": 11, "allow_forking": true, @@ -202,7 +202,7 @@ ], "visibility": "public", "forks": 11, - "watchers": 21, + "watchers": 23, "score": 0, "subscribers_count": 0 }, @@ -221,10 +221,10 @@ "description": "Research notes: porting CVE-2026-98260 to vivo\/iQOO GKI 6.6.127 (no exploit code; coordinated disclosure planned)", "fork": false, "created_at": "2026-10-25T13:37:37Z", - "updated_at": "2026-10-27T15:51:11Z", + "updated_at": "2026-10-28T07:27:26Z", "pushed_at": "2026-10-27T15:50:18Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -241,7 +241,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -337,10 +337,10 @@ "description": "CVE-2026-98260（fs\/exec.c POSIX CPU timer UAF）XRING O1 \/ Android 17 \/ 6.18.21 研究记录与 PC 一键流程（授权设备安全研究）", "fork": false, "created_at": "2026-10-26T09:12:27Z", - "updated_at": "2026-10-28T00:26:18Z", - "pushed_at": "2026-10-28T00:26:30Z", - "stargazers_count": 13, - "watchers_count": 13, + "updated_at": "2026-10-28T05:54:31Z", + "pushed_at": "2026-10-28T03:48:25Z", + "stargazers_count": 14, + "watchers_count": 14, "has_discussions": false, "forks_count": 8, "allow_forking": true, @@ -357,7 +357,7 @@ ], "visibility": "public", "forks": 8, - "watchers": 13, + "watchers": 14, "score": 0, "subscribers_count": 0 }, @@ -381,7 +381,7 @@ "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, - "forks_count": 3, + "forks_count": 4, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -389,7 +389,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 3, + "forks": 4, "watchers": 1, "score": 0, "subscribers_count": 0 @@ -409,12 +409,12 @@ "description": "Xiaomi Pad7S Pro12.5在OS4.0.0.14.XOTCNXM利用CVE-2026-98260获取ROOT权限并加载KernelSU。", "fork": false, "created_at": "2026-10-26T14:44:21Z", - "updated_at": "2026-10-27T23:20:32Z", - "pushed_at": "2026-10-27T09:59:37Z", + "updated_at": "2026-10-28T05:42:32Z", + "pushed_at": "2026-10-28T05:42:27Z", "stargazers_count": 4, "watchers_count": 4, "has_discussions": false, - "forks_count": 3, + "forks_count": 4, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -422,7 +422,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 3, + "forks": 4, "watchers": 4, "score": 0, "subscribers_count": 0 @@ -475,10 +475,10 @@ "description": "小米17 Pro 4.0.5.0 本地提权", "fork": false, "created_at": "2026-10-27T07:17:41Z", - "updated_at": "2026-10-27T09:23:19Z", + "updated_at": "2026-10-28T06:07:26Z", "pushed_at": "2026-10-27T09:23:15Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -489,7 +489,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -508,12 +508,12 @@ "description": "6.12.69-android16-6-g242e1a07f878", "fork": false, "created_at": "2026-10-27T12:53:47Z", - "updated_at": "2026-10-28T01:42:41Z", + "updated_at": "2026-10-28T06:47:22Z", "pushed_at": "2026-10-27T14:13:02Z", - "stargazers_count": 14, - "watchers_count": 14, + "stargazers_count": 16, + "watchers_count": 16, "has_discussions": false, - "forks_count": 6, + "forks_count": 5, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -521,8 +521,80 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 6, - "watchers": 14, + "forks": 5, + "watchers": 16, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1435979557, + "name": "CVE-2026-98260", + "full_name": "zjns\/CVE-2026-98260", + "owner": { + "login": "zjns", + "id": 10793522, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/10793522?v=4", + "html_url": "https:\/\/github.com\/zjns", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/zjns\/CVE-2026-98260", + "description": "6.6.118-android15-8-g9bc34d5b0c79", + "fork": false, + "created_at": "2026-10-27T16:18:05Z", + "updated_at": "2026-10-28T06:51:19Z", + "pushed_at": "2026-10-28T06:37:49Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1436583910, + "name": "cve-2026-98260-nezha", + "full_name": "4627488\/cve-2026-98260-nezha", + "owner": { + "login": "4627488", + "id": 44314811, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/44314811?v=4", + "html_url": "https:\/\/github.com\/4627488", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/4627488\/cve-2026-98260-nezha", + "description": "CVE-2026-98260: Xiaomi 17 Ultra (nezha) temporary root + KernelSU PoC - scripts, docs and logs only; exploit built from upstream source", + "fork": false, + "created_at": "2026-10-28T04:10:05Z", + "updated_at": "2026-10-28T04:10:20Z", + "pushed_at": "2026-10-28T04:10:12Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "android", + "cve-2026-98260", + "hyperos", + "kernelsu", + "root" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, "score": 0, "subscribers_count": 0 }