nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/11/01 07:47:43

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-11-01 16:47:43 +09:00
1 parent 621aaef5a2
commit 10ccc7a5dd
50 files changed
+658 -269
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2015/CVE-2015-5600.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Professional cybersecurity assessment demonstrating vulnerability identification, CVSS severity scoring, MITRE ATT&CK framework application, and detailed remediation planning for OpenSSH 6.6.1p1 critical vulnerabilities (CVE-2016-0777, CVE-2015-5600)",
"fork": false,
"created_at": "2025-11-11T10:00:43Z",
"updated_at": "2026-05-01T01:01:53Z",
"pushed_at": "2025-11-11T10:54:12Z",
"updated_at": "2026-11-01T02:46:51Z",
"pushed_at": "2026-11-01T02:46:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2016/CVE-2016-0777.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Professional cybersecurity assessment demonstrating vulnerability identification, CVSS severity scoring, MITRE ATT&CK framework application, and detailed remediation planning for OpenSSH 6.6.1p1 critical vulnerabilities (CVE-2016-0777, CVE-2015-5600)",
"fork": false,
"created_at": "2025-11-11T10:00:43Z",
"updated_at": "2026-05-01T01:01:53Z",
"pushed_at": "2025-11-11T10:54:12Z",
"updated_at": "2026-11-01T02:46:51Z",
"pushed_at": "2026-11-01T02:46:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2019/CVE-2019-11043.json
+34 -1
View File
@@ -938,7 +938,7 @@
"fork": false,
"created_at": "2026-10-31T09:56:32Z",
"updated_at": "2026-10-31T11:43:21Z",
"pushed_at": "2026-10-31T11:13:40Z",
"pushed_at": "2026-11-01T05:19:35Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -954,5 +954,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1441521446,
"name": "PROTECTION2Shell",
"full_name": "esskslifetech\/PROTECTION2Shell",
"owner": {
"login": "esskslifetech",
"id": 226517993,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/226517993?v=4",
"html_url": "https:\/\/github.com\/esskslifetech",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/esskslifetech\/PROTECTION2Shell",
"description": "Dependency-free toolkit that contains, patches and verifies the *2Shell families: PHP2Shell (CVE-2026-109618\/109619), HTTP2Shell\/Brotli (CVE-2026-111497), CVE-2024-4577, CVE-2019-11043. Cuts exploitation channels at the edge in minutes, applies verified upstream source patches, recycles workers, then re-checks every fix. Unattended: setup.sh --auto",
"fork": false,
"created_at": "2026-11-01T05:41:48Z",
"updated_at": "2026-11-01T05:44:55Z",
"pushed_at": "2026-11-01T05:44:52Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2020/CVE-2020-6287.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": null,
"fork": false,
"created_at": "2020-07-21T01:22:45Z",
"updated_at": "2024-09-11T08:00:52Z",
"updated_at": "2026-11-01T01:01:52Z",
"pushed_at": "2022-02-17T19:52:32Z",
"stargazers_count": 28,
"watchers_count": 28,
"stargazers_count": 27,
"watchers_count": 27,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 28,
"watchers": 27,
"score": 0,
"subscribers_count": 4
},
2021/CVE-2021-4034.json
+4 -4
View File
@@ -961,10 +961,10 @@
"description": "Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation",
"fork": false,
"created_at": "2022-01-26T14:26:10Z",
"updated_at": "2026-10-30T04:32:28Z",
"updated_at": "2026-11-01T01:00:23Z",
"pushed_at": "2022-06-21T14:52:05Z",
"stargazers_count": 1338,
"watchers_count": 1338,
"stargazers_count": 1337,
"watchers_count": 1337,
"has_discussions": false,
"forks_count": 208,
"allow_forking": true,
@@ -977,7 +977,7 @@
],
"visibility": "public",
"forks": 208,
"watchers": 1338,
"watchers": 1337,
"score": 0,
"subscribers_count": 13
},
2021/CVE-2021-44228.json
+2 -2
View File
@@ -16002,8 +16002,8 @@
"description": "Research brief on Log4Shell (CVE-2021-44228) for an internal security awareness session. Every claim is backed by linked primary sources.",
"fork": false,
"created_at": "2026-10-22T10:25:08Z",
"updated_at": "2026-10-29T22:51:47Z",
"pushed_at": "2026-10-29T22:51:44Z",
"updated_at": "2026-11-01T06:16:24Z",
"pushed_at": "2026-11-01T06:16:21Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2022/CVE-2022-29361.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2023-04-09T09:07:26Z",
"updated_at": "2026-09-30T03:02:34Z",
"updated_at": "2026-11-01T05:52:42Z",
"pushed_at": "2023-04-09T16:02:55Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 1
},
2022/CVE-2022-46689.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": "Proof-of-concept app to overwrite fonts on iOS using CVE-2022-46689.",
"fork": false,
"created_at": "2022-12-26T06:56:35Z",
"updated_at": "2026-10-28T09:10:49Z",
"updated_at": "2026-11-01T01:52:15Z",
"pushed_at": "2023-08-02T09:35:14Z",
"stargazers_count": 883,
"watchers_count": 883,
"stargazers_count": 884,
"watchers_count": 884,
"has_discussions": false,
"forks_count": 78,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 78,
"watchers": 883,
"watchers": 884,
"score": 0,
"subscribers_count": 23
},
2023/CVE-2023-45866.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "🚨 CVE-2023-45866 - BlueDucky Implementation (Using DuckyScript) 🔓 Unauthenticated Peering Leading to Code Execution (Using HID Keyboard)",
"fork": false,
"created_at": "2024-01-16T06:52:02Z",
"updated_at": "2026-10-30T16:18:48Z",
"updated_at": "2026-11-01T05:20:10Z",
"pushed_at": "2026-02-11T00:03:00Z",
"stargazers_count": 1903,
"watchers_count": 1903,
"stargazers_count": 1904,
"watchers_count": 1904,
"has_discussions": false,
"forks_count": 321,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 321,
"watchers": 1903,
"watchers": 1904,
"score": 0,
"subscribers_count": 30
},
2024/CVE-2024-3094.json
+4 -4
View File
@@ -1010,10 +1010,10 @@
"description": "notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)",
"fork": false,
"created_at": "2024-04-01T14:28:09Z",
"updated_at": "2026-10-30T18:40:29Z",
"updated_at": "2026-11-01T02:44:53Z",
"pushed_at": "2024-04-03T04:58:50Z",
"stargazers_count": 3554,
"watchers_count": 3554,
"stargazers_count": 3553,
"watchers_count": 3553,
"has_discussions": false,
"forks_count": 233,
"allow_forking": true,
@@ -1024,7 +1024,7 @@
"topics": [],
"visibility": "public",
"forks": 233,
"watchers": 3554,
"watchers": 3553,
"score": 0,
"subscribers_count": 34
},
2024/CVE-2024-31317.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 63,
"watchers_count": 63,
"has_discussions": false,
"forks_count": 21,
"forks_count": 22,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 21,
"forks": 22,
"watchers": 63,
"score": 0,
"subscribers_count": 4
2024/CVE-2024-4577.json
+36 -3
View File
@@ -2309,8 +2309,8 @@
"description": "Full exploits and PoCs for php2shell (CVE-2026-109618, CVE-2026-109619) and CVE-2024-4577 - PHP critical RCE (CVSS 9.2-9.8)",
"fork": false,
"created_at": "2026-10-23T15:14:01Z",
"updated_at": "2026-10-24T16:52:24Z",
"pushed_at": "2026-10-24T16:52:20Z",
"updated_at": "2026-11-01T04:27:12Z",
"pushed_at": "2026-11-01T04:27:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -2409,7 +2409,40 @@
"fork": false,
"created_at": "2026-10-31T09:56:32Z",
"updated_at": "2026-10-31T11:43:21Z",
"pushed_at": "2026-10-31T11:13:40Z",
"pushed_at": "2026-11-01T05:19:35Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1441521446,
"name": "PROTECTION2Shell",
"full_name": "esskslifetech\/PROTECTION2Shell",
"owner": {
"login": "esskslifetech",
"id": 226517993,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/226517993?v=4",
"html_url": "https:\/\/github.com\/esskslifetech",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/esskslifetech\/PROTECTION2Shell",
"description": "Dependency-free toolkit that contains, patches and verifies the *2Shell families: PHP2Shell (CVE-2026-109618\/109619), HTTP2Shell\/Brotli (CVE-2026-111497), CVE-2024-4577, CVE-2019-11043. Cuts exploitation channels at the edge in minutes, applies verified upstream source patches, recycles workers, then re-checks every fix. Unattended: setup.sh --auto",
"fork": false,
"created_at": "2026-11-01T05:41:48Z",
"updated_at": "2026-11-01T07:22:20Z",
"pushed_at": "2026-11-01T07:22:17Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2024/CVE-2024-50379.json
+2 -2
View File
@@ -480,8 +480,8 @@
"description": "PoC and exploit for CVE-2024-50379 - Apache Tomcat Race Condition RCE (CVSS 9.8)",
"fork": false,
"created_at": "2026-10-27T16:22:20Z",
"updated_at": "2026-10-27T16:22:45Z",
"pushed_at": "2026-10-27T16:22:41Z",
"updated_at": "2026-11-01T04:20:37Z",
"pushed_at": "2026-11-01T04:20:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-0651.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "PoC e exploits para CVE-2026-14440 (Universal SSL CAA Bypass), CVE-2026-3125 (OpenNext SSRF), CVE-2025-0651 (WARP Windows Privesc) | By Gh0st-Bx1",
"fork": false,
"created_at": "2026-10-25T19:02:32Z",
"updated_at": "2026-10-27T17:26:20Z",
"pushed_at": "2026-10-27T17:26:16Z",
"updated_at": "2026-11-01T04:27:15Z",
"pushed_at": "2026-11-01T04:27:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-1974.json
+33
View File
@@ -801,5 +801,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1441518526,
"name": "cve-2025-1974-ingress-nginx-rce",
"full_name": "Ghost-Bx1\/cve-2025-1974-ingress-nginx-rce",
"owner": {
"login": "Ghost-Bx1",
"id": 103540917,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103540917?v=4",
"html_url": "https:\/\/github.com\/Ghost-Bx1",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Ghost-Bx1\/cve-2025-1974-ingress-nginx-rce",
"description": null,
"fork": false,
"created_at": "2026-11-01T05:36:38Z",
"updated_at": "2026-11-01T05:37:40Z",
"pushed_at": "2026-11-01T05:37:36Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-21479.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": "This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the adreno kgsl on many devices including Samsung snapdragon devices",
"fork": false,
"created_at": "2026-07-28T06:41:38Z",
"updated_at": "2026-10-17T08:13:30Z",
"updated_at": "2026-11-01T06:02:41Z",
"pushed_at": "2026-08-14T20:18:24Z",
"stargazers_count": 9,
"watchers_count": 9,
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 9,
"watchers": 10,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-24813.json
+2 -2
View File
@@ -1994,8 +1994,8 @@
"description": "PoC and exploit for CVE-2025-24813 - Apache Tomcat Partial PUT RCE (CVSS 9.8)",
"fork": false,
"created_at": "2026-10-27T16:22:06Z",
"updated_at": "2026-10-27T16:22:37Z",
"pushed_at": "2026-10-27T16:22:33Z",
"updated_at": "2026-11-01T04:20:34Z",
"pushed_at": "2026-11-01T04:20:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-29927.json
+39 -6
View File
@@ -182,10 +182,10 @@
"description": "CVE-2025-29927 Proof of Concept",
"fork": false,
"created_at": "2025-03-23T12:13:35Z",
"updated_at": "2026-10-02T19:57:23Z",
"updated_at": "2026-11-01T04:02:01Z",
"pushed_at": "2025-03-23T19:46:53Z",
"stargazers_count": 101,
"watchers_count": 101,
"stargazers_count": 102,
"watchers_count": 102,
"has_discussions": false,
"forks_count": 28,
"allow_forking": true,
@@ -196,7 +196,7 @@
"topics": [],
"visibility": "public",
"forks": 28,
"watchers": 101,
"watchers": 102,
"score": 0,
"subscribers_count": 1
},
@@ -4310,8 +4310,8 @@
"description": "NTU SE6013 Software Security: Next.js CVE-2025-29927 group project. Maintainer-reviewed fork-and-PR contributions.",
"fork": false,
"created_at": "2026-10-30T20:14:59Z",
"updated_at": "2026-10-30T20:37:13Z",
"pushed_at": "2026-10-30T20:37:09Z",
"updated_at": "2026-11-01T05:08:13Z",
"pushed_at": "2026-11-01T05:08:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -4327,5 +4327,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1441518106,
"name": "cve-2025-29927-nextjs-middleware-bypass",
"full_name": "Ghost-Bx1\/cve-2025-29927-nextjs-middleware-bypass",
"owner": {
"login": "Ghost-Bx1",
"id": 103540917,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103540917?v=4",
"html_url": "https:\/\/github.com\/Ghost-Bx1",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Ghost-Bx1\/cve-2025-29927-nextjs-middleware-bypass",
"description": null,
"fork": false,
"created_at": "2026-11-01T05:35:55Z",
"updated_at": "2026-11-01T05:39:17Z",
"pushed_at": "2026-11-01T05:37:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-41656.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -31,7 +31,7 @@
"security"
],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
2025/CVE-2025-52915.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-10-31T22:48:17Z",
"updated_at": "2026-11-01T06:08:45Z",
"pushed_at": "2026-08-18T12:25:25Z",
"stargazers_count": 996,
"watchers_count": 996,
"stargazers_count": 998,
"watchers_count": 998,
"has_discussions": false,
"forks_count": 147,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 147,
"watchers": 996,
"watchers": 998,
"score": 0,
"subscribers_count": 22
}
2026/CVE-2026-0073.json
+4 -4
View File
@@ -118,10 +118,10 @@
"description": "CVE-2026-0073 — Android ADB daemon (adbd) TLS authentication bypass via EVP_PKEY_cmp type confusion. Gain unauthorized shell access over WiFi using EC\/Ed25519 key mismatch. PoC exploit for Android 14+.",
"fork": false,
"created_at": "2026-05-06T23:11:23Z",
"updated_at": "2026-08-11T22:44:33Z",
"updated_at": "2026-11-01T04:32:59Z",
"pushed_at": "2026-05-07T11:15:25Z",
"stargazers_count": 22,
"watchers_count": 22,
"stargazers_count": 23,
"watchers_count": 23,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -142,7 +142,7 @@
],
"visibility": "public",
"forks": 6,
"watchers": 22,
"watchers": 23,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-109618.json
+101 -35
View File
@@ -672,10 +672,10 @@
"description": "CVE-2026-109618\/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.",
"fork": false,
"created_at": "2026-10-21T07:55:16Z",
"updated_at": "2026-10-31T17:14:41Z",
"updated_at": "2026-11-01T02:51:30Z",
"pushed_at": "2026-10-28T23:21:57Z",
"stargazers_count": 1918,
"watchers_count": 1918,
"stargazers_count": 1919,
"watchers_count": 1919,
"has_discussions": false,
"forks_count": 650,
"allow_forking": true,
@@ -701,7 +701,7 @@
],
"visibility": "public",
"forks": 650,
"watchers": 1918,
"watchers": 1919,
"score": 0,
"subscribers_count": 8
},
@@ -973,10 +973,10 @@
"description": "Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 \/ CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.",
"fork": false,
"created_at": "2026-10-21T08:31:43Z",
"updated_at": "2026-10-31T22:16:18Z",
"updated_at": "2026-11-01T07:23:25Z",
"pushed_at": "2026-10-22T07:19:20Z",
"stargazers_count": 1052,
"watchers_count": 1052,
"stargazers_count": 1051,
"watchers_count": 1051,
"has_discussions": false,
"forks_count": 265,
"allow_forking": true,
@@ -987,7 +987,7 @@
"topics": [],
"visibility": "public",
"forks": 265,
"watchers": 1052,
"watchers": 1051,
"score": 0,
"subscribers_count": 41
},
@@ -3241,7 +3241,7 @@
"description": "php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.",
"fork": false,
"created_at": "2026-10-21T14:48:05Z",
"updated_at": "2026-10-31T18:34:42Z",
"updated_at": "2026-11-01T02:05:05Z",
"pushed_at": "2026-10-30T22:06:41Z",
"stargazers_count": 125,
"watchers_count": 125,
@@ -7708,12 +7708,12 @@
"description": "CVE-2026-109618 \/ CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.",
"fork": false,
"created_at": "2026-10-21T22:53:01Z",
"updated_at": "2026-11-01T01:43:16Z",
"updated_at": "2026-11-01T07:23:18Z",
"pushed_at": "2026-10-30T16:04:28Z",
"stargazers_count": 244,
"watchers_count": 244,
"stargazers_count": 253,
"watchers_count": 253,
"has_discussions": false,
"forks_count": 66,
"forks_count": 68,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -7742,8 +7742,8 @@
"vulnerability-research"
],
"visibility": "public",
"forks": 66,
"watchers": 244,
"forks": 68,
"watchers": 253,
"score": 0,
"subscribers_count": 2
},
@@ -9516,10 +9516,10 @@
"description": "High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)",
"fork": false,
"created_at": "2026-10-22T03:53:20Z",
"updated_at": "2026-10-31T15:51:23Z",
"updated_at": "2026-11-01T06:40:01Z",
"pushed_at": "2026-10-24T03:40:18Z",
"stargazers_count": 969,
"watchers_count": 969,
"stargazers_count": 972,
"watchers_count": 972,
"has_discussions": false,
"forks_count": 143,
"allow_forking": true,
@@ -9530,7 +9530,7 @@
"topics": [],
"visibility": "public",
"forks": 143,
"watchers": 969,
"watchers": 972,
"score": 0,
"subscribers_count": 11
},
@@ -16813,7 +16813,7 @@
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -16821,7 +16821,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
@@ -17920,7 +17920,7 @@
"forks": 2,
"watchers": 14,
"score": 0,
"subscribers_count": 1
"subscribers_count": 2
},
{
"id": 1430546286,
@@ -20257,8 +20257,8 @@
"description": "Full exploits and PoCs for php2shell (CVE-2026-109618, CVE-2026-109619) and CVE-2024-4577 - PHP critical RCE (CVSS 9.2-9.8)",
"fork": false,
"created_at": "2026-10-23T15:14:01Z",
"updated_at": "2026-10-24T16:52:24Z",
"pushed_at": "2026-10-24T16:52:20Z",
"updated_at": "2026-11-01T04:27:12Z",
"pushed_at": "2026-11-01T04:27:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -20336,10 +20336,10 @@
"description": "PoC exploit harness and research framework for CVE-2026-109618 and CVE-2026-109619 (PHP session.upload_progress UAF).",
"fork": false,
"created_at": "2026-10-23T15:23:13Z",
"updated_at": "2026-10-24T15:29:22Z",
"updated_at": "2026-11-01T05:08:45Z",
"pushed_at": "2026-10-24T14:59:17Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -20350,7 +20350,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
@@ -23502,10 +23502,10 @@
"description": "A local Docker-based research lab for investigating PHP2Shell (CVE-2026-109618 and CVE-2026-109619), comparing PHP 8.4.26 and 8.4.27, and validating upstream security fixes and regression tests.",
"fork": false,
"created_at": "2026-10-25T18:51:41Z",
"updated_at": "2026-10-26T10:04:56Z",
"updated_at": "2026-11-01T06:23:47Z",
"pushed_at": "2026-10-26T05:24:14Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -23516,7 +23516,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
@@ -26510,8 +26510,8 @@
"description": "Is the PHP in your container image really fixed for PHP2Shell (CVE-2026-109618, CVE-2026-109619)? Finds every PHP build without running the image, with backport-aware verdicts and evidence.",
"fork": false,
"created_at": "2026-10-30T21:46:32Z",
"updated_at": "2026-10-31T15:09:07Z",
"pushed_at": "2026-10-31T15:17:49Z",
"updated_at": "2026-11-01T07:19:21Z",
"pushed_at": "2026-11-01T07:19:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -26681,7 +26681,7 @@
"fork": false,
"created_at": "2026-10-31T09:56:32Z",
"updated_at": "2026-10-31T11:43:21Z",
"pushed_at": "2026-10-31T11:13:40Z",
"pushed_at": "2026-11-01T05:19:35Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -26855,5 +26855,71 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1441417474,
"name": "php2shell-2026-incident-analysis",
"full_name": "riyadh920\/php2shell-2026-incident-analysis",
"owner": {
"login": "riyadh920",
"id": 56037185,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/56037185?v=4",
"html_url": "https:\/\/github.com\/riyadh920",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/riyadh920\/php2shell-2026-incident-analysis",
"description": "Independent technical analysis of PHP2Shell (CVE-2026-109618 and CVE-2026-109619), covering root cause, disclosure, honeypot evidence, business risk, open-source security governance, and PHP ecosystem resilience.",
"fork": false,
"created_at": "2026-11-01T02:20:31Z",
"updated_at": "2026-11-01T02:44:12Z",
"pushed_at": "2026-11-01T02:44:10Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1441521446,
"name": "PROTECTION2Shell",
"full_name": "esskslifetech\/PROTECTION2Shell",
"owner": {
"login": "esskslifetech",
"id": 226517993,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/226517993?v=4",
"html_url": "https:\/\/github.com\/esskslifetech",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/esskslifetech\/PROTECTION2Shell",
"description": "Dependency-free toolkit that contains, patches and verifies the *2Shell families: PHP2Shell (CVE-2026-109618\/109619), HTTP2Shell\/Brotli (CVE-2026-111497), CVE-2024-4577, CVE-2019-11043. Cuts exploitation channels at the edge in minutes, applies verified upstream source patches, recycles workers, then re-checks every fix. Unattended: setup.sh --auto",
"fork": false,
"created_at": "2026-11-01T05:41:48Z",
"updated_at": "2026-11-01T07:28:26Z",
"pushed_at": "2026-11-01T07:28:23Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-109619.json
+2 -2
View File
@@ -669,7 +669,7 @@
"stargazers_count": 120,
"watchers_count": 120,
"has_discussions": false,
"forks_count": 59,
"forks_count": 60,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -693,7 +693,7 @@
"vulnerability-research"
],
"visibility": "public",
"forks": 59,
"forks": 60,
"watchers": 120,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-110720.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "CVE-2026-110720 - HashiCorp consul-k8s Cross-Namespace ACL Bypass PoC & Exploit",
"fork": false,
"created_at": "2026-10-27T14:28:41Z",
"updated_at": "2026-10-27T14:57:38Z",
"pushed_at": "2026-10-27T14:57:34Z",
"updated_at": "2026-11-01T04:20:25Z",
"pushed_at": "2026-11-01T04:20:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-111497.json
+5 -5
View File
@@ -739,8 +739,8 @@
"description": "CVE-2026-111497 - Node.js Brotli OOB Write Pre-Auth RCE (Node2Shell) | CVSS 4.0: 9.2 | PoC + Full Exploit | By Gh0st-Bx1",
"fork": false,
"created_at": "2026-10-23T20:55:34Z",
"updated_at": "2026-10-27T14:41:08Z",
"pushed_at": "2026-10-27T17:26:21Z",
"updated_at": "2026-11-01T04:20:31Z",
"pushed_at": "2026-11-01T04:27:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -1262,7 +1262,7 @@
"forks": 12,
"watchers": 51,
"score": 0,
"subscribers_count": 0
"subscribers_count": 1
},
{
"id": 1432694609,
@@ -2267,8 +2267,8 @@
"description": "CVE-2026-111497 - .NET Brotli OOB Write PoC and Exploit (HTTP2Shell) | By Gh0st-Bx1",
"fork": false,
"created_at": "2026-10-27T18:42:43Z",
"updated_at": "2026-10-27T18:50:01Z",
"pushed_at": "2026-10-27T18:49:57Z",
"updated_at": "2026-11-01T04:27:17Z",
"pushed_at": "2026-11-01T04:27:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-112487.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "macOS revisiond local privilege escalation to root (CVE-2026-112487)",
"fork": false,
"created_at": "2026-10-31T18:04:33Z",
"updated_at": "2026-11-01T01:26:23Z",
"updated_at": "2026-11-01T06:07:51Z",
"pushed_at": "2026-10-31T18:11:35Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 4,
"forks": 2,
"watchers": 7,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-112816.json
-33
View File
@@ -31,38 +31,5 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1441041643,
"name": "cve-2026-112816",
"full_name": "Sotrano-dev\/cve-2026-112816",
"owner": {
"login": "Sotrano-dev",
"id": 178072659,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/178072659?v=4",
"html_url": "https:\/\/github.com\/Sotrano-dev",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Sotrano-dev\/cve-2026-112816",
"description": null,
"fork": false,
"created_at": "2026-10-31T16:26:55Z",
"updated_at": "2026-10-31T16:27:04Z",
"pushed_at": "2026-10-31T16:27:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-114148.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "CVE-2026-114148 - .NET Linux Tarball Local Privilege Escalation PoC & Exploit",
"fork": false,
"created_at": "2026-10-27T14:27:57Z",
"updated_at": "2026-10-27T14:57:23Z",
"pushed_at": "2026-10-27T14:57:18Z",
"updated_at": "2026-11-01T04:20:28Z",
"pushed_at": "2026-11-01T04:20:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-115965.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1441528682,
"name": "CVE-2026-115965",
"full_name": "4m3rr0r\/CVE-2026-115965",
"owner": {
"login": "4m3rr0r",
"id": 90191914,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90191914?v=4",
"html_url": "https:\/\/github.com\/4m3rr0r",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/4m3rr0r\/CVE-2026-115965",
"description": "CVE-2026-115965",
"fork": false,
"created_at": "2026-11-01T05:55:05Z",
"updated_at": "2026-11-01T06:05:32Z",
"pushed_at": "2026-11-01T06:05:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-116521.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1441443586,
"name": "CVE-2026-116521-poc",
"full_name": "4m3rr0r\/CVE-2026-116521-poc",
"owner": {
"login": "4m3rr0r",
"id": 90191914,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90191914?v=4",
"html_url": "https:\/\/github.com\/4m3rr0r",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/4m3rr0r\/CVE-2026-116521-poc",
"description": "CVE-2026-116521-poc",
"fork": false,
"created_at": "2026-11-01T03:12:33Z",
"updated_at": "2026-11-01T06:09:14Z",
"pushed_at": "2026-11-01T06:09:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-14440.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "PoC e exploits para CVE-2026-14440 (Universal SSL CAA Bypass), CVE-2026-3125 (OpenNext SSRF), CVE-2025-0651 (WARP Windows Privesc) | By Gh0st-Bx1",
"fork": false,
"created_at": "2026-10-25T19:02:32Z",
"updated_at": "2026-10-27T17:26:20Z",
"pushed_at": "2026-10-27T17:26:16Z",
"updated_at": "2026-11-01T04:27:15Z",
"pushed_at": "2026-11-01T04:27:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-2035703.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Tozed ZLT X300 5G CPE — Remote Root Code Execution via SDR Rogue Base Station (CVE-2026-2035703, CWE-78, CVSS 9.8) — Coordinated Disclosure",
"fork": false,
"created_at": "2026-08-14T03:03:26Z",
"updated_at": "2026-10-11T20:07:51Z",
"updated_at": "2026-11-01T04:15:09Z",
"pushed_at": "2026-10-11T17:08:10Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-25253.json
+1 -1
View File
@@ -48,7 +48,7 @@
"fork": false,
"created_at": "2026-02-05T07:31:07Z",
"updated_at": "2026-10-13T19:09:41Z",
"pushed_at": "2026-10-25T04:00:46Z",
"pushed_at": "2026-11-01T04:01:10Z",
"stargazers_count": 49,
"watchers_count": 49,
"has_discussions": false,
2026/CVE-2026-31431.json
+1 -1
View File
@@ -74,7 +74,7 @@
"forks": 907,
"watchers": 4083,
"score": 0,
"subscribers_count": 34
"subscribers_count": 33
},
{
"id": 1224986082,
2026/CVE-2026-3609.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-11-01T01:23:54Z",
"updated_at": "2026-11-01T06:08:45Z",
"pushed_at": "2026-08-18T12:25:25Z",
"stargazers_count": 997,
"watchers_count": 997,
"stargazers_count": 998,
"watchers_count": 998,
"has_discussions": false,
"forks_count": 147,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 147,
"watchers": 997,
"watchers": 998,
"score": 0,
"subscribers_count": 22
},
2026/CVE-2026-36425.json
+4 -4
View File
@@ -86,10 +86,10 @@
"description": "WhatsApp-delivered Winos 4.0 \/ ValleyRAT stager: DLL sideloading, BYOVD Defender kill (CVE-2026-36425), custom C2 protocol on TCP 443, and previously unreported C2 infrastructure.",
"fork": false,
"created_at": "2026-10-31T14:50:14Z",
"updated_at": "2026-10-31T15:20:22Z",
"updated_at": "2026-11-01T05:02:30Z",
"pushed_at": "2026-10-31T15:20:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -106,7 +106,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-39808.json
+2 -2
View File
@@ -219,8 +219,8 @@
"description": "PoC e Exploits completos para CVE-2026-39808 (FortiSandbox RCE), CVE-2026-106173 (FortiSIEM gRPC Path Traversal RCE) e CVE-2026-107656 (FortiSandbox Auth Bypass) - CVSS 9.6-9.8",
"fork": false,
"created_at": "2026-10-25T18:34:17Z",
"updated_at": "2026-10-27T17:26:23Z",
"pushed_at": "2026-10-27T17:26:18Z",
"updated_at": "2026-11-01T04:27:19Z",
"pushed_at": "2026-11-01T04:27:16Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-41940.json
+2 -2
View File
@@ -708,7 +708,7 @@
"stargazers_count": 508,
"watchers_count": 508,
"has_discussions": false,
"forks_count": 141,
"forks_count": 142,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -716,7 +716,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 141,
"forks": 142,
"watchers": 508,
"score": 0,
"subscribers_count": 7
2026/CVE-2026-43499.json
+34 -34
View File
@@ -188,7 +188,7 @@
"stargazers_count": 68,
"watchers_count": 68,
"has_discussions": false,
"forks_count": 27,
"forks_count": 28,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -209,7 +209,7 @@
"use-after-free"
],
"visibility": "public",
"forks": 27,
"forks": 28,
"watchers": 68,
"score": 0,
"subscribers_count": 1
@@ -361,10 +361,10 @@
"description": "GhostLock (CVE-2026-43499) kernel exploit for Android devices with locked bootloader",
"fork": false,
"created_at": "2026-07-12T16:05:24Z",
"updated_at": "2026-10-31T10:46:30Z",
"updated_at": "2026-11-01T03:18:05Z",
"pushed_at": "2026-09-17T05:30:59Z",
"stargazers_count": 439,
"watchers_count": 439,
"stargazers_count": 440,
"watchers_count": 440,
"has_discussions": false,
"forks_count": 93,
"allow_forking": true,
@@ -382,7 +382,7 @@
],
"visibility": "public",
"forks": 93,
"watchers": 439,
"watchers": 440,
"score": 0,
"subscribers_count": 14
},
@@ -995,10 +995,10 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
"updated_at": "2026-11-01T00:27:38Z",
"updated_at": "2026-11-01T02:49:11Z",
"pushed_at": "2026-09-03T03:21:42Z",
"stargazers_count": 1514,
"watchers_count": 1514,
"stargazers_count": 1515,
"watchers_count": 1515,
"has_discussions": false,
"forks_count": 302,
"allow_forking": true,
@@ -1009,7 +1009,7 @@
"topics": [],
"visibility": "public",
"forks": 302,
"watchers": 1514,
"watchers": 1515,
"score": 0,
"subscribers_count": 46
},
@@ -1208,7 +1208,7 @@
"stargazers_count": 19,
"watchers_count": 19,
"has_discussions": false,
"forks_count": 5,
"forks_count": 6,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1227,7 +1227,7 @@
"scanner"
],
"visibility": "public",
"forks": 5,
"forks": 6,
"watchers": 19,
"score": 0,
"subscribers_count": 1
@@ -1676,12 +1676,12 @@
"description": "GhostLock One-Tap Execution App (CVE-2026-43499)",
"fork": false,
"created_at": "2026-07-29T05:04:25Z",
"updated_at": "2026-10-31T22:39:38Z",
"updated_at": "2026-11-01T07:39:15Z",
"pushed_at": "2026-10-27T12:02:30Z",
"stargazers_count": 2459,
"watchers_count": 2459,
"stargazers_count": 2465,
"watchers_count": 2465,
"has_discussions": true,
"forks_count": 600,
"forks_count": 601,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1689,8 +1689,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 600,
"watchers": 2459,
"forks": 601,
"watchers": 2465,
"score": 0,
"subscribers_count": 44
},
@@ -2049,7 +2049,7 @@
"stargazers_count": 483,
"watchers_count": 483,
"has_discussions": false,
"forks_count": 72,
"forks_count": 73,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2064,7 +2064,7 @@
"root"
],
"visibility": "public",
"forks": 72,
"forks": 73,
"watchers": 483,
"score": 0,
"subscribers_count": 8
@@ -2315,10 +2315,10 @@
"description": "CVE-2026-43499 full exploit chain for Samsung Galaxy S22 Ultra (Android 5.10 kernel)",
"fork": false,
"created_at": "2026-08-08T23:35:25Z",
"updated_at": "2026-10-27T21:39:42Z",
"updated_at": "2026-11-01T06:02:47Z",
"pushed_at": "2026-10-27T18:45:28Z",
"stargazers_count": 99,
"watchers_count": 99,
"stargazers_count": 100,
"watchers_count": 100,
"has_discussions": true,
"forks_count": 47,
"allow_forking": true,
@@ -2329,7 +2329,7 @@
"topics": [],
"visibility": "public",
"forks": 47,
"watchers": 99,
"watchers": 100,
"score": 0,
"subscribers_count": 5
},
@@ -2518,7 +2518,7 @@
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
"forks_count": 4,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2526,7 +2526,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 4,
"forks": 3,
"watchers": 16,
"score": 0,
"subscribers_count": 1
@@ -2968,10 +2968,10 @@
"description": "Kernel root exploit (CVE-2026-43499) for some Amazon devices",
"fork": false,
"created_at": "2026-08-17T16:57:57Z",
"updated_at": "2026-10-31T15:33:22Z",
"updated_at": "2026-11-01T03:04:43Z",
"pushed_at": "2026-10-24T13:35:00Z",
"stargazers_count": 53,
"watchers_count": 53,
"stargazers_count": 54,
"watchers_count": 54,
"has_discussions": false,
"forks_count": 13,
"allow_forking": true,
@@ -2982,7 +2982,7 @@
"topics": [],
"visibility": "public",
"forks": 13,
"watchers": 53,
"watchers": 54,
"score": 0,
"subscribers_count": 2
},
@@ -5632,8 +5632,8 @@
"description": "GhostLock: Android kernel root exploit for Vivo X100 Ultra (PD2366) via CVE-2026-43499 PI-futex race. KernelSU integration with vr.ko anti-root bypass.",
"fork": false,
"created_at": "2026-10-19T12:30:07Z",
"updated_at": "2026-10-31T21:55:26Z",
"pushed_at": "2026-10-31T21:55:23Z",
"updated_at": "2026-11-01T04:47:24Z",
"pushed_at": "2026-11-01T04:47:21Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
@@ -6101,8 +6101,8 @@
"description": "Root exploit for Motorola Moto G Stylus 5G 2023 (genevn) via GhostLock (CVE-2026-43499) — locked bootloader, no flashing",
"fork": false,
"created_at": "2026-10-31T11:02:17Z",
"updated_at": "2026-10-31T11:02:40Z",
"pushed_at": "2026-10-31T11:02:36Z",
"updated_at": "2026-11-01T06:16:21Z",
"pushed_at": "2026-11-01T06:16:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-63030.json
+4 -4
View File
@@ -814,10 +814,10 @@
"description": "Blackbox, non-intrusive detector for wp2shell (WordPress core pre-auth RCE, CVE-2026-63030 \/ CVE-2026-60137). Detection only.",
"fork": false,
"created_at": "2026-07-18T21:06:14Z",
"updated_at": "2026-09-22T17:13:44Z",
"updated_at": "2026-11-01T03:35:44Z",
"pushed_at": "2026-07-19T17:16:17Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -834,7 +834,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-64560.json
+4 -4
View File
@@ -564,10 +564,10 @@
"description": "OnePlus 16 (PYB110) jailbreak: CVE-2026-64560 + CVE-2026-98260 + KernelSU \/ KernelSU Next \/ BakaSU \/ SukiSU Ultra LKM",
"fork": false,
"created_at": "2026-10-20T09:43:06Z",
"updated_at": "2026-10-31T23:09:30Z",
"updated_at": "2026-11-01T06:29:57Z",
"pushed_at": "2026-10-31T23:09:26Z",
"stargazers_count": 20,
"watchers_count": 20,
"stargazers_count": 21,
"watchers_count": 21,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -578,7 +578,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 20,
"watchers": 21,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-75604.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-75604 Next.js Windows RCE poc",
"fork": false,
"created_at": "2026-08-25T19:06:37Z",
"updated_at": "2026-10-23T15:03:37Z",
"updated_at": "2026-11-01T05:19:32Z",
"pushed_at": "2026-08-28T02:53:24Z",
"stargazers_count": 106,
"watchers_count": 106,
"stargazers_count": 107,
"watchers_count": 107,
"has_discussions": false,
"forks_count": 39,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 39,
"watchers": 106,
"watchers": 107,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-80097.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "CVE-2026-80097 - Microsoft Authenticator Android Token Theft PoC & Exploit",
"fork": false,
"created_at": "2026-10-27T14:28:35Z",
"updated_at": "2026-10-27T14:57:27Z",
"pushed_at": "2026-10-27T14:57:22Z",
"updated_at": "2026-11-01T04:20:22Z",
"pushed_at": "2026-11-01T04:20:19Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-84295.json
+45
View File
@@ -0,0 +1,45 @@
[
{
"id": 1441478729,
"name": "wsftp-server-scanner",
"full_name": "foxcornlab\/wsftp-server-scanner",
"owner": {
"login": "foxcornlab",
"id": 43523802,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43523802?v=4",
"html_url": "https:\/\/github.com\/foxcornlab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/foxcornlab\/wsftp-server-scanner",
"description": "Detection-only local triage scanner for Progress WS_FTP Server October 2026 patch batch: CVE-2026-84295 (CVSS 10.0) and 14 more, graded per group against the split 2024.0.6\/2025.0.3 vs 2024.0.7\/2025.0.4 fix table. No payloads, no remote probing.",
"fork": false,
"created_at": "2026-11-01T04:20:14Z",
"updated_at": "2026-11-01T04:21:20Z",
"pushed_at": "2026-11-01T04:21:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-84295",
"detection-only",
"file-transfer",
"progress-software",
"triage",
"vulnerability-scanner",
"windows",
"ws-ftp",
"ws-ftp-server"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-88773.json
+33
View File
@@ -75,5 +75,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1441406282,
"name": "CVE-2026-88773",
"full_name": "Fyyre\/CVE-2026-88773",
"owner": {
"login": "Fyyre",
"id": 311885,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/311885?v=4",
"html_url": "https:\/\/github.com\/Fyyre",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Fyyre\/CVE-2026-88773",
"description": "CVE-2026-88773 - NetScaler nsppe 32-bit chunk-size accumulator wrap (HTTP Request Smuggling)",
"fork": false,
"created_at": "2026-11-01T01:58:23Z",
"updated_at": "2026-11-01T01:58:31Z",
"pushed_at": "2026-11-01T01:58:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-94293.json
+1 -1
View File
@@ -38,6 +38,6 @@
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
"subscribers_count": 0
}
]
2026/CVE-2026-97229.json
+2 -2
View File
@@ -151,7 +151,7 @@
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -159,7 +159,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-98260.json
+72 -29
View File
@@ -47,10 +47,10 @@
"description": "CVE-2026-98260 (Timer) Android\/ARM64 port",
"fork": false,
"created_at": "2026-10-18T23:26:39Z",
"updated_at": "2026-11-01T01:44:10Z",
"updated_at": "2026-11-01T02:14:43Z",
"pushed_at": "2026-10-25T05:35:18Z",
"stargazers_count": 41,
"watchers_count": 41,
"stargazers_count": 42,
"watchers_count": 42,
"has_discussions": false,
"forks_count": 18,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 18,
"watchers": 41,
"watchers": 42,
"score": 0,
"subscribers_count": 0
},
@@ -376,8 +376,8 @@
"description": "REDMI K90 Max在OS4.0.5.0.XAACNXM利用CVE-2026-98260获取ROOT权限并加载KSU模块。",
"fork": false,
"created_at": "2026-10-26T09:25:45Z",
"updated_at": "2026-10-31T18:32:06Z",
"pushed_at": "2026-10-31T05:08:59Z",
"updated_at": "2026-11-01T03:10:44Z",
"pushed_at": "2026-11-01T03:10:26Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
@@ -387,7 +387,17 @@
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"topics": [
"android",
"android-root",
"cve-2026-98260",
"kernel-exploit",
"kernel-module",
"kernelsu",
"lkm",
"mtk",
"poc"
],
"visibility": "public",
"forks": 1,
"watchers": 3,
@@ -414,7 +424,7 @@
"stargazers_count": 41,
"watchers_count": 41,
"has_discussions": false,
"forks_count": 13,
"forks_count": 14,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -422,7 +432,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 13,
"forks": 14,
"watchers": 41,
"score": 0,
"subscribers_count": 0
@@ -585,10 +595,10 @@
"description": "6.6.118-android15-8-g9bc34d5b0c79",
"fork": false,
"created_at": "2026-10-27T16:18:05Z",
"updated_at": "2026-10-31T05:45:56Z",
"updated_at": "2026-11-01T02:20:12Z",
"pushed_at": "2026-10-28T09:14:49Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -599,7 +609,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
@@ -690,12 +700,12 @@
"description": "Android front end for CVE-2026-98260: root shell + KernelSU late-load through Shizuku",
"fork": false,
"created_at": "2026-10-28T15:15:02Z",
"updated_at": "2026-11-01T01:38:37Z",
"updated_at": "2026-11-01T07:49:14Z",
"pushed_at": "2026-10-28T15:26:42Z",
"stargazers_count": 19,
"watchers_count": 19,
"stargazers_count": 24,
"watchers_count": 24,
"has_discussions": false,
"forks_count": 7,
"forks_count": 9,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -710,8 +720,8 @@
"shizuku"
],
"visibility": "public",
"forks": 7,
"watchers": 19,
"forks": 9,
"watchers": 24,
"score": 0,
"subscribers_count": 0
},
@@ -730,8 +740,8 @@
"description": "CVE-2026-98260 (posix-cpu-timers exec UAF) exploit research: S9280 Android 14 GKI 6.1 — UAF trigger + zero-write primitive + SELinux Permissive. Handoff doc in HANDOFF.md",
"fork": false,
"created_at": "2026-10-28T16:54:41Z",
"updated_at": "2026-10-31T16:00:19Z",
"pushed_at": "2026-10-31T16:00:14Z",
"updated_at": "2026-11-01T03:44:57Z",
"pushed_at": "2026-11-01T03:44:54Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
@@ -796,10 +806,10 @@
"description": "GhostKey - CVE-2026-98260 一键提权工具（Shizuku + NDK Native）",
"fork": false,
"created_at": "2026-10-29T05:12:04Z",
"updated_at": "2026-11-01T00:19:47Z",
"updated_at": "2026-11-01T07:03:27Z",
"pushed_at": "2026-10-29T05:13:36Z",
"stargazers_count": 40,
"watchers_count": 40,
"stargazers_count": 42,
"watchers_count": 42,
"has_discussions": false,
"forks_count": 22,
"allow_forking": true,
@@ -810,7 +820,7 @@
"topics": [],
"visibility": "public",
"forks": 22,
"watchers": 40,
"watchers": 42,
"score": 0,
"subscribers_count": 0
},
@@ -829,8 +839,8 @@
"description": "CVE 2026 98260 vivo x fold6 poc",
"fork": false,
"created_at": "2026-10-29T09:36:16Z",
"updated_at": "2026-10-31T16:38:51Z",
"pushed_at": "2026-10-29T09:47:49Z",
"updated_at": "2026-11-01T06:14:03Z",
"pushed_at": "2026-11-01T06:14:00Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
@@ -943,8 +953,8 @@
"description": "CVE 2026 98260 vivo s60 poc",
"fork": false,
"created_at": "2026-10-30T07:52:25Z",
"updated_at": "2026-10-31T11:42:44Z",
"pushed_at": "2026-10-31T11:42:40Z",
"updated_at": "2026-11-01T06:45:14Z",
"pushed_at": "2026-11-01T06:45:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -966,5 +976,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1441419486,
"name": "GhostLock-CVE-2026-98260",
"full_name": "sabuweis\/GhostLock-CVE-2026-98260",
"owner": {
"login": "sabuweis",
"id": 328963353,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/328963353?v=4",
"html_url": "https:\/\/github.com\/sabuweis",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/sabuweis\/GhostLock-CVE-2026-98260",
"description": "基于ghostlock-app与CVE-2026-98260漏洞开发的提权项目",
"fork": false,
"created_at": "2026-11-01T02:24:20Z",
"updated_at": "2026-11-01T06:17:47Z",
"pushed_at": "2026-11-01T06:17:44Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-98432.json
+51 -18
View File
@@ -218,10 +218,10 @@
"description": "Race trigger, heap-reuse oracle, pcap analysis, detection and mitigation tooling for CVE-2026-98432 (Linux IPv4\/TCP ireq_opt use-after-free).",
"fork": false,
"created_at": "2026-10-30T00:22:53Z",
"updated_at": "2026-10-31T16:18:04Z",
"updated_at": "2026-11-01T05:47:03Z",
"pushed_at": "2026-10-31T06:38:04Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -239,7 +239,7 @@
],
"visibility": "public",
"forks": 2,
"watchers": 7,
"watchers": 8,
"score": 0,
"subscribers_count": 0
},
@@ -611,7 +611,7 @@
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -619,7 +619,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"forks": 2,
"watchers": 4,
"score": 0,
"subscribers_count": 0
@@ -672,12 +672,12 @@
"description": "Proof-only PoC for CVE-2026-98432 (Linux IPv4\/TCP ireq_opt use-after-free): race trigger, heap-reuse oracle, no code execution",
"fork": false,
"created_at": "2026-10-30T16:36:43Z",
"updated_at": "2026-10-31T21:25:47Z",
"updated_at": "2026-11-01T05:48:13Z",
"pushed_at": "2026-10-30T16:40:41Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -691,8 +691,8 @@
"use-after-free"
],
"visibility": "public",
"forks": 0,
"watchers": 4,
"forks": 1,
"watchers": 7,
"score": 0,
"subscribers_count": 0
},
@@ -1141,8 +1141,8 @@
},
{
"id": 1441002171,
"name": "debian-cve-2026-98432-fix",
"full_name": "AronWang001\/debian-cve-2026-98432-fix",
"name": "linux-cve-2026-98432-fix",
"full_name": "AronWang001\/linux-cve-2026-98432-fix",
"owner": {
"login": "AronWang001",
"id": 260259579,
@@ -1150,12 +1150,12 @@
"html_url": "https:\/\/github.com\/AronWang001",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/AronWang001\/debian-cve-2026-98432-fix",
"description": "One-click kernel security update for CVE-2026-98432 on Debian 12\/13.",
"html_url": "https:\/\/github.com\/AronWang001\/linux-cve-2026-98432-fix",
"description": "Detect CVE-2026-98432 on the running Linux kernel and apply the official fixed kernel only on verified distributions (Debian 12\/13, Amazon Linux 2\/2023). Ubuntu\/RHEL detect-only; Rocky\/Alma\/Oracle\/Fedora\/SUSE\/Arch\/Alpine identified but not auto-fixed.",
"fork": false,
"created_at": "2026-10-31T15:41:12Z",
"updated_at": "2026-10-31T19:22:36Z",
"pushed_at": "2026-10-31T19:28:36Z",
"updated_at": "2026-11-01T03:28:28Z",
"pushed_at": "2026-11-01T03:28:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -1204,5 +1204,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1441518765,
"name": "cve-2026-98432-linux-tcp-uaf",
"full_name": "Ghost-Bx1\/cve-2026-98432-linux-tcp-uaf",
"owner": {
"login": "Ghost-Bx1",
"id": 103540917,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103540917?v=4",
"html_url": "https:\/\/github.com\/Ghost-Bx1",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Ghost-Bx1\/cve-2026-98432-linux-tcp-uaf",
"description": null,
"fork": false,
"created_at": "2026-11-01T05:37:06Z",
"updated_at": "2026-11-01T05:37:43Z",
"pushed_at": "2026-11-01T05:37:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-98937.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-10-31T20:13:04Z",
"updated_at": "2026-10-31T20:23:26Z",
"updated_at": "2026-11-01T05:06:18Z",
"pushed_at": "2026-10-31T20:23:21Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}