From 10ccc7a5dd56e07d99ee014b753265f8a517a0e2 Mon Sep 17 00:00:00 2001 From: motikan2010-bot Date: Sun, 1 Nov 2026 16:47:43 +0900 Subject: [PATCH] Auto Update 2026/11/01 07:47:43 --- 2015/CVE-2015-5600.json | 4 +- 2016/CVE-2016-0777.json | 4 +- 2019/CVE-2019-11043.json | 35 +++++++++- 2020/CVE-2020-6287.json | 8 +-- 2021/CVE-2021-4034.json | 8 +-- 2021/CVE-2021-44228.json | 4 +- 2022/CVE-2022-29361.json | 8 +-- 2022/CVE-2022-46689.json | 8 +-- 2023/CVE-2023-45866.json | 8 +-- 2024/CVE-2024-3094.json | 8 +-- 2024/CVE-2024-31317.json | 4 +- 2024/CVE-2024-4577.json | 39 ++++++++++- 2024/CVE-2024-50379.json | 4 +- 2025/CVE-2025-0651.json | 4 +- 2025/CVE-2025-1974.json | 33 +++++++++ 2025/CVE-2025-21479.json | 8 +-- 2025/CVE-2025-24813.json | 4 +- 2025/CVE-2025-29927.json | 45 ++++++++++-- 2025/CVE-2025-41656.json | 4 +- 2025/CVE-2025-52915.json | 8 +-- 2026/CVE-2026-0073.json | 8 +-- 2026/CVE-2026-109618.json | 136 +++++++++++++++++++++++++++---------- 2026/CVE-2026-109619.json | 4 +- 2026/CVE-2026-110720.json | 4 +- 2026/CVE-2026-111497.json | 10 +-- 2026/CVE-2026-112487.json | 12 ++-- 2026/CVE-2026-112816.json | 33 --------- 2026/CVE-2026-114148.json | 4 +- 2026/CVE-2026-115965.json | 35 ++++++++++ 2026/CVE-2026-116521.json | 35 ++++++++++ 2026/CVE-2026-14440.json | 4 +- 2026/CVE-2026-2035703.json | 8 +-- 2026/CVE-2026-25253.json | 2 +- 2026/CVE-2026-31431.json | 2 +- 2026/CVE-2026-3609.json | 8 +-- 2026/CVE-2026-36425.json | 8 +-- 2026/CVE-2026-39808.json | 4 +- 2026/CVE-2026-41940.json | 4 +- 2026/CVE-2026-43499.json | 68 +++++++++---------- 2026/CVE-2026-63030.json | 8 +-- 2026/CVE-2026-64560.json | 8 +-- 2026/CVE-2026-75604.json | 8 +-- 2026/CVE-2026-80097.json | 4 +- 2026/CVE-2026-84295.json | 45 ++++++++++++ 2026/CVE-2026-88773.json | 33 +++++++++ 2026/CVE-2026-94293.json | 2 +- 2026/CVE-2026-97229.json | 4 +- 2026/CVE-2026-98260.json | 101 +++++++++++++++++++-------- 2026/CVE-2026-98432.json | 69 ++++++++++++++----- 2026/CVE-2026-98937.json | 8 +-- 50 files changed, 658 insertions(+), 269 deletions(-) create mode 100644 2026/CVE-2026-115965.json create mode 100644 2026/CVE-2026-116521.json create mode 100644 2026/CVE-2026-84295.json diff --git a/2015/CVE-2015-5600.json b/2015/CVE-2015-5600.json index d28cf9e789..88ce7f9404 100644 --- a/2015/CVE-2015-5600.json +++ b/2015/CVE-2015-5600.json @@ -14,8 +14,8 @@ "description": "Professional cybersecurity assessment demonstrating vulnerability identification, CVSS severity scoring, MITRE ATT&CK framework application, and detailed remediation planning for OpenSSH 6.6.1p1 critical vulnerabilities (CVE-2016-0777, CVE-2015-5600)", "fork": false, "created_at": "2025-11-11T10:00:43Z", - "updated_at": "2026-05-01T01:01:53Z", - "pushed_at": "2025-11-11T10:54:12Z", + "updated_at": "2026-11-01T02:46:51Z", + "pushed_at": "2026-11-01T02:46:47Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2016/CVE-2016-0777.json b/2016/CVE-2016-0777.json index d28cf9e789..88ce7f9404 100644 --- a/2016/CVE-2016-0777.json +++ b/2016/CVE-2016-0777.json @@ -14,8 +14,8 @@ "description": "Professional cybersecurity assessment demonstrating vulnerability identification, CVSS severity scoring, MITRE ATT&CK framework application, and detailed remediation planning for OpenSSH 6.6.1p1 critical vulnerabilities (CVE-2016-0777, CVE-2015-5600)", "fork": false, "created_at": "2025-11-11T10:00:43Z", - "updated_at": "2026-05-01T01:01:53Z", - "pushed_at": "2025-11-11T10:54:12Z", + "updated_at": "2026-11-01T02:46:51Z", + "pushed_at": "2026-11-01T02:46:47Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2019/CVE-2019-11043.json b/2019/CVE-2019-11043.json index 499552d409..4efd5c08d1 100644 --- a/2019/CVE-2019-11043.json +++ b/2019/CVE-2019-11043.json @@ -938,7 +938,7 @@ "fork": false, "created_at": "2026-10-31T09:56:32Z", "updated_at": "2026-10-31T11:43:21Z", - "pushed_at": "2026-10-31T11:13:40Z", + "pushed_at": "2026-11-01T05:19:35Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -954,5 +954,38 @@ "watchers": 1, "score": 0, "subscribers_count": 0 + }, + { + "id": 1441521446, + "name": "PROTECTION2Shell", + "full_name": "esskslifetech\/PROTECTION2Shell", + "owner": { + "login": "esskslifetech", + "id": 226517993, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/226517993?v=4", + "html_url": "https:\/\/github.com\/esskslifetech", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/esskslifetech\/PROTECTION2Shell", + "description": "Dependency-free toolkit that contains, patches and verifies the *2Shell families: PHP2Shell (CVE-2026-109618\/109619), HTTP2Shell\/Brotli (CVE-2026-111497), CVE-2024-4577, CVE-2019-11043. Cuts exploitation channels at the edge in minutes, applies verified upstream source patches, recycles workers, then re-checks every fix. Unattended: setup.sh --auto", + "fork": false, + "created_at": "2026-11-01T05:41:48Z", + "updated_at": "2026-11-01T05:44:55Z", + "pushed_at": "2026-11-01T05:44:52Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2020/CVE-2020-6287.json b/2020/CVE-2020-6287.json index 831be01a8b..21bd0a2b6f 100644 --- a/2020/CVE-2020-6287.json +++ b/2020/CVE-2020-6287.json @@ -80,10 +80,10 @@ "description": null, "fork": false, "created_at": "2020-07-21T01:22:45Z", - "updated_at": "2024-09-11T08:00:52Z", + "updated_at": "2026-11-01T01:01:52Z", "pushed_at": "2022-02-17T19:52:32Z", - "stargazers_count": 28, - "watchers_count": 28, + "stargazers_count": 27, + "watchers_count": 27, "has_discussions": false, "forks_count": 5, "allow_forking": true, @@ -94,7 +94,7 @@ "topics": [], "visibility": "public", "forks": 5, - "watchers": 28, + "watchers": 27, "score": 0, "subscribers_count": 4 }, diff --git a/2021/CVE-2021-4034.json b/2021/CVE-2021-4034.json index f490c44ebb..823181b401 100644 --- a/2021/CVE-2021-4034.json +++ b/2021/CVE-2021-4034.json @@ -961,10 +961,10 @@ "description": "Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation", "fork": false, "created_at": "2022-01-26T14:26:10Z", - "updated_at": "2026-10-30T04:32:28Z", + "updated_at": "2026-11-01T01:00:23Z", "pushed_at": "2022-06-21T14:52:05Z", - "stargazers_count": 1338, - "watchers_count": 1338, + "stargazers_count": 1337, + "watchers_count": 1337, "has_discussions": false, "forks_count": 208, "allow_forking": true, @@ -977,7 +977,7 @@ ], "visibility": "public", "forks": 208, - "watchers": 1338, + "watchers": 1337, "score": 0, "subscribers_count": 13 }, diff --git a/2021/CVE-2021-44228.json b/2021/CVE-2021-44228.json index e514ac6181..558747dab6 100644 --- a/2021/CVE-2021-44228.json +++ b/2021/CVE-2021-44228.json @@ -16002,8 +16002,8 @@ "description": "Research brief on Log4Shell (CVE-2021-44228) for an internal security awareness session. Every claim is backed by linked primary sources.", "fork": false, "created_at": "2026-10-22T10:25:08Z", - "updated_at": "2026-10-29T22:51:47Z", - "pushed_at": "2026-10-29T22:51:44Z", + "updated_at": "2026-11-01T06:16:24Z", + "pushed_at": "2026-11-01T06:16:21Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2022/CVE-2022-29361.json b/2022/CVE-2022-29361.json index d78d429b20..7e00a139eb 100644 --- a/2022/CVE-2022-29361.json +++ b/2022/CVE-2022-29361.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2023-04-09T09:07:26Z", - "updated_at": "2026-09-30T03:02:34Z", + "updated_at": "2026-11-01T05:52:42Z", "pushed_at": "2023-04-09T16:02:55Z", - "stargazers_count": 4, - "watchers_count": 4, + "stargazers_count": 5, + "watchers_count": 5, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 4, + "watchers": 5, "score": 0, "subscribers_count": 1 }, diff --git a/2022/CVE-2022-46689.json b/2022/CVE-2022-46689.json index 907f41305d..40e73c7fc5 100644 --- a/2022/CVE-2022-46689.json +++ b/2022/CVE-2022-46689.json @@ -113,10 +113,10 @@ "description": "Proof-of-concept app to overwrite fonts on iOS using CVE-2022-46689.", "fork": false, "created_at": "2022-12-26T06:56:35Z", - "updated_at": "2026-10-28T09:10:49Z", + "updated_at": "2026-11-01T01:52:15Z", "pushed_at": "2023-08-02T09:35:14Z", - "stargazers_count": 883, - "watchers_count": 883, + "stargazers_count": 884, + "watchers_count": 884, "has_discussions": false, "forks_count": 78, "allow_forking": true, @@ -127,7 +127,7 @@ "topics": [], "visibility": "public", "forks": 78, - "watchers": 883, + "watchers": 884, "score": 0, "subscribers_count": 23 }, diff --git a/2023/CVE-2023-45866.json b/2023/CVE-2023-45866.json index 8083c6bc72..a4b976766a 100644 --- a/2023/CVE-2023-45866.json +++ b/2023/CVE-2023-45866.json @@ -14,10 +14,10 @@ "description": "🚨 CVE-2023-45866 - BlueDucky Implementation (Using DuckyScript) 🔓 Unauthenticated Peering Leading to Code Execution (Using HID Keyboard)", "fork": false, "created_at": "2024-01-16T06:52:02Z", - "updated_at": "2026-10-30T16:18:48Z", + "updated_at": "2026-11-01T05:20:10Z", "pushed_at": "2026-02-11T00:03:00Z", - "stargazers_count": 1903, - "watchers_count": 1903, + "stargazers_count": 1904, + "watchers_count": 1904, "has_discussions": false, "forks_count": 321, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 321, - "watchers": 1903, + "watchers": 1904, "score": 0, "subscribers_count": 30 }, diff --git a/2024/CVE-2024-3094.json b/2024/CVE-2024-3094.json index 7e86249792..fcb009022e 100644 --- a/2024/CVE-2024-3094.json +++ b/2024/CVE-2024-3094.json @@ -1010,10 +1010,10 @@ "description": "notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)", "fork": false, "created_at": "2024-04-01T14:28:09Z", - "updated_at": "2026-10-30T18:40:29Z", + "updated_at": "2026-11-01T02:44:53Z", "pushed_at": "2024-04-03T04:58:50Z", - "stargazers_count": 3554, - "watchers_count": 3554, + "stargazers_count": 3553, + "watchers_count": 3553, "has_discussions": false, "forks_count": 233, "allow_forking": true, @@ -1024,7 +1024,7 @@ "topics": [], "visibility": "public", "forks": 233, - "watchers": 3554, + "watchers": 3553, "score": 0, "subscribers_count": 34 }, diff --git a/2024/CVE-2024-31317.json b/2024/CVE-2024-31317.json index 042aee740c..3f9a43bcbb 100644 --- a/2024/CVE-2024-31317.json +++ b/2024/CVE-2024-31317.json @@ -52,7 +52,7 @@ "stargazers_count": 63, "watchers_count": 63, "has_discussions": false, - "forks_count": 21, + "forks_count": 22, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,7 +60,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 21, + "forks": 22, "watchers": 63, "score": 0, "subscribers_count": 4 diff --git a/2024/CVE-2024-4577.json b/2024/CVE-2024-4577.json index 061f8a298d..7f7a89e9e0 100644 --- a/2024/CVE-2024-4577.json +++ b/2024/CVE-2024-4577.json @@ -2309,8 +2309,8 @@ "description": "Full exploits and PoCs for php2shell (CVE-2026-109618, CVE-2026-109619) and CVE-2024-4577 - PHP critical RCE (CVSS 9.2-9.8)", "fork": false, "created_at": "2026-10-23T15:14:01Z", - "updated_at": "2026-10-24T16:52:24Z", - "pushed_at": "2026-10-24T16:52:20Z", + "updated_at": "2026-11-01T04:27:12Z", + "pushed_at": "2026-11-01T04:27:09Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -2409,7 +2409,40 @@ "fork": false, "created_at": "2026-10-31T09:56:32Z", "updated_at": "2026-10-31T11:43:21Z", - "pushed_at": "2026-10-31T11:13:40Z", + "pushed_at": "2026-11-01T05:19:35Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1441521446, + "name": "PROTECTION2Shell", + "full_name": "esskslifetech\/PROTECTION2Shell", + "owner": { + "login": "esskslifetech", + "id": 226517993, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/226517993?v=4", + "html_url": "https:\/\/github.com\/esskslifetech", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/esskslifetech\/PROTECTION2Shell", + "description": "Dependency-free toolkit that contains, patches and verifies the *2Shell families: PHP2Shell (CVE-2026-109618\/109619), HTTP2Shell\/Brotli (CVE-2026-111497), CVE-2024-4577, CVE-2019-11043. Cuts exploitation channels at the edge in minutes, applies verified upstream source patches, recycles workers, then re-checks every fix. Unattended: setup.sh --auto", + "fork": false, + "created_at": "2026-11-01T05:41:48Z", + "updated_at": "2026-11-01T07:22:20Z", + "pushed_at": "2026-11-01T07:22:17Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2024/CVE-2024-50379.json b/2024/CVE-2024-50379.json index f95ddc37df..bf626e0175 100644 --- a/2024/CVE-2024-50379.json +++ b/2024/CVE-2024-50379.json @@ -480,8 +480,8 @@ "description": "PoC and exploit for CVE-2024-50379 - Apache Tomcat Race Condition RCE (CVSS 9.8)", "fork": false, "created_at": "2026-10-27T16:22:20Z", - "updated_at": "2026-10-27T16:22:45Z", - "pushed_at": "2026-10-27T16:22:41Z", + "updated_at": "2026-11-01T04:20:37Z", + "pushed_at": "2026-11-01T04:20:33Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-0651.json b/2025/CVE-2025-0651.json index 95e647a4c7..27ab0c9a7d 100644 --- a/2025/CVE-2025-0651.json +++ b/2025/CVE-2025-0651.json @@ -14,8 +14,8 @@ "description": "PoC e exploits para CVE-2026-14440 (Universal SSL CAA Bypass), CVE-2026-3125 (OpenNext SSRF), CVE-2025-0651 (WARP Windows Privesc) | By Gh0st-Bx1", "fork": false, "created_at": "2026-10-25T19:02:32Z", - "updated_at": "2026-10-27T17:26:20Z", - "pushed_at": "2026-10-27T17:26:16Z", + "updated_at": "2026-11-01T04:27:15Z", + "pushed_at": "2026-11-01T04:27:11Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-1974.json b/2025/CVE-2025-1974.json index 4cfefc53fe..b972de7520 100644 --- a/2025/CVE-2025-1974.json +++ b/2025/CVE-2025-1974.json @@ -801,5 +801,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1441518526, + "name": "cve-2025-1974-ingress-nginx-rce", + "full_name": "Ghost-Bx1\/cve-2025-1974-ingress-nginx-rce", + "owner": { + "login": "Ghost-Bx1", + "id": 103540917, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103540917?v=4", + "html_url": "https:\/\/github.com\/Ghost-Bx1", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Ghost-Bx1\/cve-2025-1974-ingress-nginx-rce", + "description": null, + "fork": false, + "created_at": "2026-11-01T05:36:38Z", + "updated_at": "2026-11-01T05:37:40Z", + "pushed_at": "2026-11-01T05:37:36Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2025/CVE-2025-21479.json b/2025/CVE-2025-21479.json index 6b2cc5411f..a4efb097b0 100644 --- a/2025/CVE-2025-21479.json +++ b/2025/CVE-2025-21479.json @@ -113,10 +113,10 @@ "description": "This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the adreno kgsl on many devices including Samsung snapdragon devices", "fork": false, "created_at": "2026-07-28T06:41:38Z", - "updated_at": "2026-10-17T08:13:30Z", + "updated_at": "2026-11-01T06:02:41Z", "pushed_at": "2026-08-14T20:18:24Z", - "stargazers_count": 9, - "watchers_count": 9, + "stargazers_count": 10, + "watchers_count": 10, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -127,7 +127,7 @@ "topics": [], "visibility": "public", "forks": 3, - "watchers": 9, + "watchers": 10, "score": 0, "subscribers_count": 1 }, diff --git a/2025/CVE-2025-24813.json b/2025/CVE-2025-24813.json index 67d7f91319..ca578e510e 100644 --- a/2025/CVE-2025-24813.json +++ b/2025/CVE-2025-24813.json @@ -1994,8 +1994,8 @@ "description": "PoC and exploit for CVE-2025-24813 - Apache Tomcat Partial PUT RCE (CVSS 9.8)", "fork": false, "created_at": "2026-10-27T16:22:06Z", - "updated_at": "2026-10-27T16:22:37Z", - "pushed_at": "2026-10-27T16:22:33Z", + "updated_at": "2026-11-01T04:20:34Z", + "pushed_at": "2026-11-01T04:20:30Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-29927.json b/2025/CVE-2025-29927.json index 37897b6231..2892ccf254 100644 --- a/2025/CVE-2025-29927.json +++ b/2025/CVE-2025-29927.json @@ -182,10 +182,10 @@ "description": "CVE-2025-29927 Proof of Concept", "fork": false, "created_at": "2025-03-23T12:13:35Z", - "updated_at": "2026-10-02T19:57:23Z", + "updated_at": "2026-11-01T04:02:01Z", "pushed_at": "2025-03-23T19:46:53Z", - "stargazers_count": 101, - "watchers_count": 101, + "stargazers_count": 102, + "watchers_count": 102, "has_discussions": false, "forks_count": 28, "allow_forking": true, @@ -196,7 +196,7 @@ "topics": [], "visibility": "public", "forks": 28, - "watchers": 101, + "watchers": 102, "score": 0, "subscribers_count": 1 }, @@ -4310,8 +4310,8 @@ "description": "NTU SE6013 Software Security: Next.js CVE-2025-29927 group project. Maintainer-reviewed fork-and-PR contributions.", "fork": false, "created_at": "2026-10-30T20:14:59Z", - "updated_at": "2026-10-30T20:37:13Z", - "pushed_at": "2026-10-30T20:37:09Z", + "updated_at": "2026-11-01T05:08:13Z", + "pushed_at": "2026-11-01T05:08:08Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -4327,5 +4327,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1441518106, + "name": "cve-2025-29927-nextjs-middleware-bypass", + "full_name": "Ghost-Bx1\/cve-2025-29927-nextjs-middleware-bypass", + "owner": { + "login": "Ghost-Bx1", + "id": 103540917, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103540917?v=4", + "html_url": "https:\/\/github.com\/Ghost-Bx1", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Ghost-Bx1\/cve-2025-29927-nextjs-middleware-bypass", + "description": null, + "fork": false, + "created_at": "2026-11-01T05:35:55Z", + "updated_at": "2026-11-01T05:39:17Z", + "pushed_at": "2026-11-01T05:37:33Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2025/CVE-2025-41656.json b/2025/CVE-2025-41656.json index 239934c32a..ed65da6b91 100644 --- a/2025/CVE-2025-41656.json +++ b/2025/CVE-2025-41656.json @@ -19,7 +19,7 @@ "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -31,7 +31,7 @@ "security" ], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 2, "score": 0, "subscribers_count": 0 diff --git a/2025/CVE-2025-52915.json b/2025/CVE-2025-52915.json index a4a5e160e7..e795c72fd6 100644 --- a/2025/CVE-2025-52915.json +++ b/2025/CVE-2025-52915.json @@ -14,10 +14,10 @@ "description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).", "fork": false, "created_at": "2023-12-05T14:52:11Z", - "updated_at": "2026-10-31T22:48:17Z", + "updated_at": "2026-11-01T06:08:45Z", "pushed_at": "2026-08-18T12:25:25Z", - "stargazers_count": 996, - "watchers_count": 996, + "stargazers_count": 998, + "watchers_count": 998, "has_discussions": false, "forks_count": 147, "allow_forking": true, @@ -39,7 +39,7 @@ ], "visibility": "public", "forks": 147, - "watchers": 996, + "watchers": 998, "score": 0, "subscribers_count": 22 } diff --git a/2026/CVE-2026-0073.json b/2026/CVE-2026-0073.json index 60c4b3da3e..af59ac9573 100644 --- a/2026/CVE-2026-0073.json +++ b/2026/CVE-2026-0073.json @@ -118,10 +118,10 @@ "description": "CVE-2026-0073 — Android ADB daemon (adbd) TLS authentication bypass via EVP_PKEY_cmp type confusion. Gain unauthorized shell access over WiFi using EC\/Ed25519 key mismatch. PoC exploit for Android 14+.", "fork": false, "created_at": "2026-05-06T23:11:23Z", - "updated_at": "2026-08-11T22:44:33Z", + "updated_at": "2026-11-01T04:32:59Z", "pushed_at": "2026-05-07T11:15:25Z", - "stargazers_count": 22, - "watchers_count": 22, + "stargazers_count": 23, + "watchers_count": 23, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -142,7 +142,7 @@ ], "visibility": "public", "forks": 6, - "watchers": 22, + "watchers": 23, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-109618.json b/2026/CVE-2026-109618.json index 2588df940c..a950412b6b 100644 --- a/2026/CVE-2026-109618.json +++ b/2026/CVE-2026-109618.json @@ -672,10 +672,10 @@ "description": "CVE-2026-109618\/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.", "fork": false, "created_at": "2026-10-21T07:55:16Z", - "updated_at": "2026-10-31T17:14:41Z", + "updated_at": "2026-11-01T02:51:30Z", "pushed_at": "2026-10-28T23:21:57Z", - "stargazers_count": 1918, - "watchers_count": 1918, + "stargazers_count": 1919, + "watchers_count": 1919, "has_discussions": false, "forks_count": 650, "allow_forking": true, @@ -701,7 +701,7 @@ ], "visibility": "public", "forks": 650, - "watchers": 1918, + "watchers": 1919, "score": 0, "subscribers_count": 8 }, @@ -973,10 +973,10 @@ "description": "Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 \/ CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.", "fork": false, "created_at": "2026-10-21T08:31:43Z", - "updated_at": "2026-10-31T22:16:18Z", + "updated_at": "2026-11-01T07:23:25Z", "pushed_at": "2026-10-22T07:19:20Z", - "stargazers_count": 1052, - "watchers_count": 1052, + "stargazers_count": 1051, + "watchers_count": 1051, "has_discussions": false, "forks_count": 265, "allow_forking": true, @@ -987,7 +987,7 @@ "topics": [], "visibility": "public", "forks": 265, - "watchers": 1052, + "watchers": 1051, "score": 0, "subscribers_count": 41 }, @@ -3241,7 +3241,7 @@ "description": "php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.", "fork": false, "created_at": "2026-10-21T14:48:05Z", - "updated_at": "2026-10-31T18:34:42Z", + "updated_at": "2026-11-01T02:05:05Z", "pushed_at": "2026-10-30T22:06:41Z", "stargazers_count": 125, "watchers_count": 125, @@ -7708,12 +7708,12 @@ "description": "CVE-2026-109618 \/ CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.", "fork": false, "created_at": "2026-10-21T22:53:01Z", - "updated_at": "2026-11-01T01:43:16Z", + "updated_at": "2026-11-01T07:23:18Z", "pushed_at": "2026-10-30T16:04:28Z", - "stargazers_count": 244, - "watchers_count": 244, + "stargazers_count": 253, + "watchers_count": 253, "has_discussions": false, - "forks_count": 66, + "forks_count": 68, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -7742,8 +7742,8 @@ "vulnerability-research" ], "visibility": "public", - "forks": 66, - "watchers": 244, + "forks": 68, + "watchers": 253, "score": 0, "subscribers_count": 2 }, @@ -9516,10 +9516,10 @@ "description": "High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)", "fork": false, "created_at": "2026-10-22T03:53:20Z", - "updated_at": "2026-10-31T15:51:23Z", + "updated_at": "2026-11-01T06:40:01Z", "pushed_at": "2026-10-24T03:40:18Z", - "stargazers_count": 969, - "watchers_count": 969, + "stargazers_count": 972, + "watchers_count": 972, "has_discussions": false, "forks_count": 143, "allow_forking": true, @@ -9530,7 +9530,7 @@ "topics": [], "visibility": "public", "forks": 143, - "watchers": 969, + "watchers": 972, "score": 0, "subscribers_count": 11 }, @@ -16813,7 +16813,7 @@ "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -16821,7 +16821,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 2, "score": 0, "subscribers_count": 0 @@ -17920,7 +17920,7 @@ "forks": 2, "watchers": 14, "score": 0, - "subscribers_count": 1 + "subscribers_count": 2 }, { "id": 1430546286, @@ -20257,8 +20257,8 @@ "description": "Full exploits and PoCs for php2shell (CVE-2026-109618, CVE-2026-109619) and CVE-2024-4577 - PHP critical RCE (CVSS 9.2-9.8)", "fork": false, "created_at": "2026-10-23T15:14:01Z", - "updated_at": "2026-10-24T16:52:24Z", - "pushed_at": "2026-10-24T16:52:20Z", + "updated_at": "2026-11-01T04:27:12Z", + "pushed_at": "2026-11-01T04:27:09Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -20336,10 +20336,10 @@ "description": "PoC exploit harness and research framework for CVE-2026-109618 and CVE-2026-109619 (PHP session.upload_progress UAF).", "fork": false, "created_at": "2026-10-23T15:23:13Z", - "updated_at": "2026-10-24T15:29:22Z", + "updated_at": "2026-11-01T05:08:45Z", "pushed_at": "2026-10-24T14:59:17Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -20350,7 +20350,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 3, + "watchers": 4, "score": 0, "subscribers_count": 0 }, @@ -23502,10 +23502,10 @@ "description": "A local Docker-based research lab for investigating PHP2Shell (CVE-2026-109618 and CVE-2026-109619), comparing PHP 8.4.26 and 8.4.27, and validating upstream security fixes and regression tests.", "fork": false, "created_at": "2026-10-25T18:51:41Z", - "updated_at": "2026-10-26T10:04:56Z", + "updated_at": "2026-11-01T06:23:47Z", "pushed_at": "2026-10-26T05:24:14Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -23516,7 +23516,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, @@ -26510,8 +26510,8 @@ "description": "Is the PHP in your container image really fixed for PHP2Shell (CVE-2026-109618, CVE-2026-109619)? Finds every PHP build without running the image, with backport-aware verdicts and evidence.", "fork": false, "created_at": "2026-10-30T21:46:32Z", - "updated_at": "2026-10-31T15:09:07Z", - "pushed_at": "2026-10-31T15:17:49Z", + "updated_at": "2026-11-01T07:19:21Z", + "pushed_at": "2026-11-01T07:19:18Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -26681,7 +26681,7 @@ "fork": false, "created_at": "2026-10-31T09:56:32Z", "updated_at": "2026-10-31T11:43:21Z", - "pushed_at": "2026-10-31T11:13:40Z", + "pushed_at": "2026-11-01T05:19:35Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -26855,5 +26855,71 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1441417474, + "name": "php2shell-2026-incident-analysis", + "full_name": "riyadh920\/php2shell-2026-incident-analysis", + "owner": { + "login": "riyadh920", + "id": 56037185, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/56037185?v=4", + "html_url": "https:\/\/github.com\/riyadh920", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/riyadh920\/php2shell-2026-incident-analysis", + "description": "Independent technical analysis of PHP2Shell (CVE-2026-109618 and CVE-2026-109619), covering root cause, disclosure, honeypot evidence, business risk, open-source security governance, and PHP ecosystem resilience.", + "fork": false, + "created_at": "2026-11-01T02:20:31Z", + "updated_at": "2026-11-01T02:44:12Z", + "pushed_at": "2026-11-01T02:44:10Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1441521446, + "name": "PROTECTION2Shell", + "full_name": "esskslifetech\/PROTECTION2Shell", + "owner": { + "login": "esskslifetech", + "id": 226517993, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/226517993?v=4", + "html_url": "https:\/\/github.com\/esskslifetech", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/esskslifetech\/PROTECTION2Shell", + "description": "Dependency-free toolkit that contains, patches and verifies the *2Shell families: PHP2Shell (CVE-2026-109618\/109619), HTTP2Shell\/Brotli (CVE-2026-111497), CVE-2024-4577, CVE-2019-11043. Cuts exploitation channels at the edge in minutes, applies verified upstream source patches, recycles workers, then re-checks every fix. Unattended: setup.sh --auto", + "fork": false, + "created_at": "2026-11-01T05:41:48Z", + "updated_at": "2026-11-01T07:28:26Z", + "pushed_at": "2026-11-01T07:28:23Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-109619.json b/2026/CVE-2026-109619.json index 5582120de4..bc015267bb 100644 --- a/2026/CVE-2026-109619.json +++ b/2026/CVE-2026-109619.json @@ -669,7 +669,7 @@ "stargazers_count": 120, "watchers_count": 120, "has_discussions": false, - "forks_count": 59, + "forks_count": 60, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -693,7 +693,7 @@ "vulnerability-research" ], "visibility": "public", - "forks": 59, + "forks": 60, "watchers": 120, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-110720.json b/2026/CVE-2026-110720.json index 50e5a475da..8c6bf37f60 100644 --- a/2026/CVE-2026-110720.json +++ b/2026/CVE-2026-110720.json @@ -14,8 +14,8 @@ "description": "CVE-2026-110720 - HashiCorp consul-k8s Cross-Namespace ACL Bypass PoC & Exploit", "fork": false, "created_at": "2026-10-27T14:28:41Z", - "updated_at": "2026-10-27T14:57:38Z", - "pushed_at": "2026-10-27T14:57:34Z", + "updated_at": "2026-11-01T04:20:25Z", + "pushed_at": "2026-11-01T04:20:22Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-111497.json b/2026/CVE-2026-111497.json index 21033863ef..20d970c824 100644 --- a/2026/CVE-2026-111497.json +++ b/2026/CVE-2026-111497.json @@ -739,8 +739,8 @@ "description": "CVE-2026-111497 - Node.js Brotli OOB Write Pre-Auth RCE (Node2Shell) | CVSS 4.0: 9.2 | PoC + Full Exploit | By Gh0st-Bx1", "fork": false, "created_at": "2026-10-23T20:55:34Z", - "updated_at": "2026-10-27T14:41:08Z", - "pushed_at": "2026-10-27T17:26:21Z", + "updated_at": "2026-11-01T04:20:31Z", + "pushed_at": "2026-11-01T04:27:20Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -1262,7 +1262,7 @@ "forks": 12, "watchers": 51, "score": 0, - "subscribers_count": 0 + "subscribers_count": 1 }, { "id": 1432694609, @@ -2267,8 +2267,8 @@ "description": "CVE-2026-111497 - .NET Brotli OOB Write PoC and Exploit (HTTP2Shell) | By Gh0st-Bx1", "fork": false, "created_at": "2026-10-27T18:42:43Z", - "updated_at": "2026-10-27T18:50:01Z", - "pushed_at": "2026-10-27T18:49:57Z", + "updated_at": "2026-11-01T04:27:17Z", + "pushed_at": "2026-11-01T04:27:14Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-112487.json b/2026/CVE-2026-112487.json index c59d71b9f4..345f4de3da 100644 --- a/2026/CVE-2026-112487.json +++ b/2026/CVE-2026-112487.json @@ -14,12 +14,12 @@ "description": "macOS revisiond local privilege escalation to root (CVE-2026-112487)", "fork": false, "created_at": "2026-10-31T18:04:33Z", - "updated_at": "2026-11-01T01:26:23Z", + "updated_at": "2026-11-01T06:07:51Z", "pushed_at": "2026-10-31T18:11:35Z", - "stargazers_count": 4, - "watchers_count": 4, + "stargazers_count": 7, + "watchers_count": 7, "has_discussions": false, - "forks_count": 1, + "forks_count": 2, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,8 +27,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 1, - "watchers": 4, + "forks": 2, + "watchers": 7, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-112816.json b/2026/CVE-2026-112816.json index 67569e3313..0b1d769c3e 100644 --- a/2026/CVE-2026-112816.json +++ b/2026/CVE-2026-112816.json @@ -31,38 +31,5 @@ "watchers": 0, "score": 0, "subscribers_count": 0 - }, - { - "id": 1441041643, - "name": "cve-2026-112816", - "full_name": "Sotrano-dev\/cve-2026-112816", - "owner": { - "login": "Sotrano-dev", - "id": 178072659, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/178072659?v=4", - "html_url": "https:\/\/github.com\/Sotrano-dev", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Sotrano-dev\/cve-2026-112816", - "description": null, - "fork": false, - "created_at": "2026-10-31T16:26:55Z", - "updated_at": "2026-10-31T16:27:04Z", - "pushed_at": "2026-10-31T16:27:00Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-114148.json b/2026/CVE-2026-114148.json index c00f986ebb..aa38d822eb 100644 --- a/2026/CVE-2026-114148.json +++ b/2026/CVE-2026-114148.json @@ -14,8 +14,8 @@ "description": "CVE-2026-114148 - .NET Linux Tarball Local Privilege Escalation PoC & Exploit", "fork": false, "created_at": "2026-10-27T14:27:57Z", - "updated_at": "2026-10-27T14:57:23Z", - "pushed_at": "2026-10-27T14:57:18Z", + "updated_at": "2026-11-01T04:20:28Z", + "pushed_at": "2026-11-01T04:20:25Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-115965.json b/2026/CVE-2026-115965.json new file mode 100644 index 0000000000..72aa63ca62 --- /dev/null +++ b/2026/CVE-2026-115965.json @@ -0,0 +1,35 @@ +[ + { + "id": 1441528682, + "name": "CVE-2026-115965", + "full_name": "4m3rr0r\/CVE-2026-115965", + "owner": { + "login": "4m3rr0r", + "id": 90191914, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90191914?v=4", + "html_url": "https:\/\/github.com\/4m3rr0r", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/4m3rr0r\/CVE-2026-115965", + "description": "CVE-2026-115965", + "fork": false, + "created_at": "2026-11-01T05:55:05Z", + "updated_at": "2026-11-01T06:05:32Z", + "pushed_at": "2026-11-01T06:05:28Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-116521.json b/2026/CVE-2026-116521.json new file mode 100644 index 0000000000..7111996bae --- /dev/null +++ b/2026/CVE-2026-116521.json @@ -0,0 +1,35 @@ +[ + { + "id": 1441443586, + "name": "CVE-2026-116521-poc", + "full_name": "4m3rr0r\/CVE-2026-116521-poc", + "owner": { + "login": "4m3rr0r", + "id": 90191914, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90191914?v=4", + "html_url": "https:\/\/github.com\/4m3rr0r", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/4m3rr0r\/CVE-2026-116521-poc", + "description": "CVE-2026-116521-poc", + "fork": false, + "created_at": "2026-11-01T03:12:33Z", + "updated_at": "2026-11-01T06:09:14Z", + "pushed_at": "2026-11-01T06:09:11Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-14440.json b/2026/CVE-2026-14440.json index 95e647a4c7..27ab0c9a7d 100644 --- a/2026/CVE-2026-14440.json +++ b/2026/CVE-2026-14440.json @@ -14,8 +14,8 @@ "description": "PoC e exploits para CVE-2026-14440 (Universal SSL CAA Bypass), CVE-2026-3125 (OpenNext SSRF), CVE-2025-0651 (WARP Windows Privesc) | By Gh0st-Bx1", "fork": false, "created_at": "2026-10-25T19:02:32Z", - "updated_at": "2026-10-27T17:26:20Z", - "pushed_at": "2026-10-27T17:26:16Z", + "updated_at": "2026-11-01T04:27:15Z", + "pushed_at": "2026-11-01T04:27:11Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-2035703.json b/2026/CVE-2026-2035703.json index c4cee0153c..da8955884b 100644 --- a/2026/CVE-2026-2035703.json +++ b/2026/CVE-2026-2035703.json @@ -14,10 +14,10 @@ "description": "Tozed ZLT X300 5G CPE — Remote Root Code Execution via SDR Rogue Base Station (CVE-2026-2035703, CWE-78, CVSS 9.8) — Coordinated Disclosure", "fork": false, "created_at": "2026-08-14T03:03:26Z", - "updated_at": "2026-10-11T20:07:51Z", + "updated_at": "2026-11-01T04:15:09Z", "pushed_at": "2026-10-11T17:08:10Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-25253.json b/2026/CVE-2026-25253.json index 79bf1da995..825e3ec8eb 100644 --- a/2026/CVE-2026-25253.json +++ b/2026/CVE-2026-25253.json @@ -48,7 +48,7 @@ "fork": false, "created_at": "2026-02-05T07:31:07Z", "updated_at": "2026-10-13T19:09:41Z", - "pushed_at": "2026-10-25T04:00:46Z", + "pushed_at": "2026-11-01T04:01:10Z", "stargazers_count": 49, "watchers_count": 49, "has_discussions": false, diff --git a/2026/CVE-2026-31431.json b/2026/CVE-2026-31431.json index 47e70cc275..a43f81405a 100644 --- a/2026/CVE-2026-31431.json +++ b/2026/CVE-2026-31431.json @@ -74,7 +74,7 @@ "forks": 907, "watchers": 4083, "score": 0, - "subscribers_count": 34 + "subscribers_count": 33 }, { "id": 1224986082, diff --git a/2026/CVE-2026-3609.json b/2026/CVE-2026-3609.json index ddec319880..ed657da209 100644 --- a/2026/CVE-2026-3609.json +++ b/2026/CVE-2026-3609.json @@ -14,10 +14,10 @@ "description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).", "fork": false, "created_at": "2023-12-05T14:52:11Z", - "updated_at": "2026-11-01T01:23:54Z", + "updated_at": "2026-11-01T06:08:45Z", "pushed_at": "2026-08-18T12:25:25Z", - "stargazers_count": 997, - "watchers_count": 997, + "stargazers_count": 998, + "watchers_count": 998, "has_discussions": false, "forks_count": 147, "allow_forking": true, @@ -39,7 +39,7 @@ ], "visibility": "public", "forks": 147, - "watchers": 997, + "watchers": 998, "score": 0, "subscribers_count": 22 }, diff --git a/2026/CVE-2026-36425.json b/2026/CVE-2026-36425.json index 6ca928d40c..78024ba72d 100644 --- a/2026/CVE-2026-36425.json +++ b/2026/CVE-2026-36425.json @@ -86,10 +86,10 @@ "description": "WhatsApp-delivered Winos 4.0 \/ ValleyRAT stager: DLL sideloading, BYOVD Defender kill (CVE-2026-36425), custom C2 protocol on TCP 443, and previously unreported C2 infrastructure.", "fork": false, "created_at": "2026-10-31T14:50:14Z", - "updated_at": "2026-10-31T15:20:22Z", + "updated_at": "2026-11-01T05:02:30Z", "pushed_at": "2026-10-31T15:20:18Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -106,7 +106,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-39808.json b/2026/CVE-2026-39808.json index 290b5ef25c..4c90447c4a 100644 --- a/2026/CVE-2026-39808.json +++ b/2026/CVE-2026-39808.json @@ -219,8 +219,8 @@ "description": "PoC e Exploits completos para CVE-2026-39808 (FortiSandbox RCE), CVE-2026-106173 (FortiSIEM gRPC Path Traversal RCE) e CVE-2026-107656 (FortiSandbox Auth Bypass) - CVSS 9.6-9.8", "fork": false, "created_at": "2026-10-25T18:34:17Z", - "updated_at": "2026-10-27T17:26:23Z", - "pushed_at": "2026-10-27T17:26:18Z", + "updated_at": "2026-11-01T04:27:19Z", + "pushed_at": "2026-11-01T04:27:16Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-41940.json b/2026/CVE-2026-41940.json index 5b442a3fa7..4ed063b097 100644 --- a/2026/CVE-2026-41940.json +++ b/2026/CVE-2026-41940.json @@ -708,7 +708,7 @@ "stargazers_count": 508, "watchers_count": 508, "has_discussions": false, - "forks_count": 141, + "forks_count": 142, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -716,7 +716,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 141, + "forks": 142, "watchers": 508, "score": 0, "subscribers_count": 7 diff --git a/2026/CVE-2026-43499.json b/2026/CVE-2026-43499.json index 506d88d539..742f764f27 100644 --- a/2026/CVE-2026-43499.json +++ b/2026/CVE-2026-43499.json @@ -188,7 +188,7 @@ "stargazers_count": 68, "watchers_count": 68, "has_discussions": false, - "forks_count": 27, + "forks_count": 28, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -209,7 +209,7 @@ "use-after-free" ], "visibility": "public", - "forks": 27, + "forks": 28, "watchers": 68, "score": 0, "subscribers_count": 1 @@ -361,10 +361,10 @@ "description": "GhostLock (CVE-2026-43499) kernel exploit for Android devices with locked bootloader", "fork": false, "created_at": "2026-07-12T16:05:24Z", - "updated_at": "2026-10-31T10:46:30Z", + "updated_at": "2026-11-01T03:18:05Z", "pushed_at": "2026-09-17T05:30:59Z", - "stargazers_count": 439, - "watchers_count": 439, + "stargazers_count": 440, + "watchers_count": 440, "has_discussions": false, "forks_count": 93, "allow_forking": true, @@ -382,7 +382,7 @@ ], "visibility": "public", "forks": 93, - "watchers": 439, + "watchers": 440, "score": 0, "subscribers_count": 14 }, @@ -995,10 +995,10 @@ "description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499", "fork": false, "created_at": "2026-07-17T14:24:08Z", - "updated_at": "2026-11-01T00:27:38Z", + "updated_at": "2026-11-01T02:49:11Z", "pushed_at": "2026-09-03T03:21:42Z", - "stargazers_count": 1514, - "watchers_count": 1514, + "stargazers_count": 1515, + "watchers_count": 1515, "has_discussions": false, "forks_count": 302, "allow_forking": true, @@ -1009,7 +1009,7 @@ "topics": [], "visibility": "public", "forks": 302, - "watchers": 1514, + "watchers": 1515, "score": 0, "subscribers_count": 46 }, @@ -1208,7 +1208,7 @@ "stargazers_count": 19, "watchers_count": 19, "has_discussions": false, - "forks_count": 5, + "forks_count": 6, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1227,7 +1227,7 @@ "scanner" ], "visibility": "public", - "forks": 5, + "forks": 6, "watchers": 19, "score": 0, "subscribers_count": 1 @@ -1676,12 +1676,12 @@ "description": "GhostLock One-Tap Execution App (CVE-2026-43499)", "fork": false, "created_at": "2026-07-29T05:04:25Z", - "updated_at": "2026-10-31T22:39:38Z", + "updated_at": "2026-11-01T07:39:15Z", "pushed_at": "2026-10-27T12:02:30Z", - "stargazers_count": 2459, - "watchers_count": 2459, + "stargazers_count": 2465, + "watchers_count": 2465, "has_discussions": true, - "forks_count": 600, + "forks_count": 601, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1689,8 +1689,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 600, - "watchers": 2459, + "forks": 601, + "watchers": 2465, "score": 0, "subscribers_count": 44 }, @@ -2049,7 +2049,7 @@ "stargazers_count": 483, "watchers_count": 483, "has_discussions": false, - "forks_count": 72, + "forks_count": 73, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -2064,7 +2064,7 @@ "root" ], "visibility": "public", - "forks": 72, + "forks": 73, "watchers": 483, "score": 0, "subscribers_count": 8 @@ -2315,10 +2315,10 @@ "description": "CVE-2026-43499 full exploit chain for Samsung Galaxy S22 Ultra (Android 5.10 kernel)", "fork": false, "created_at": "2026-08-08T23:35:25Z", - "updated_at": "2026-10-27T21:39:42Z", + "updated_at": "2026-11-01T06:02:47Z", "pushed_at": "2026-10-27T18:45:28Z", - "stargazers_count": 99, - "watchers_count": 99, + "stargazers_count": 100, + "watchers_count": 100, "has_discussions": true, "forks_count": 47, "allow_forking": true, @@ -2329,7 +2329,7 @@ "topics": [], "visibility": "public", "forks": 47, - "watchers": 99, + "watchers": 100, "score": 0, "subscribers_count": 5 }, @@ -2518,7 +2518,7 @@ "stargazers_count": 16, "watchers_count": 16, "has_discussions": false, - "forks_count": 4, + "forks_count": 3, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -2526,7 +2526,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 4, + "forks": 3, "watchers": 16, "score": 0, "subscribers_count": 1 @@ -2968,10 +2968,10 @@ "description": "Kernel root exploit (CVE-2026-43499) for some Amazon devices", "fork": false, "created_at": "2026-08-17T16:57:57Z", - "updated_at": "2026-10-31T15:33:22Z", + "updated_at": "2026-11-01T03:04:43Z", "pushed_at": "2026-10-24T13:35:00Z", - "stargazers_count": 53, - "watchers_count": 53, + "stargazers_count": 54, + "watchers_count": 54, "has_discussions": false, "forks_count": 13, "allow_forking": true, @@ -2982,7 +2982,7 @@ "topics": [], "visibility": "public", "forks": 13, - "watchers": 53, + "watchers": 54, "score": 0, "subscribers_count": 2 }, @@ -5632,8 +5632,8 @@ "description": "GhostLock: Android kernel root exploit for Vivo X100 Ultra (PD2366) via CVE-2026-43499 PI-futex race. KernelSU integration with vr.ko anti-root bypass.", "fork": false, "created_at": "2026-10-19T12:30:07Z", - "updated_at": "2026-10-31T21:55:26Z", - "pushed_at": "2026-10-31T21:55:23Z", + "updated_at": "2026-11-01T04:47:24Z", + "pushed_at": "2026-11-01T04:47:21Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, @@ -6101,8 +6101,8 @@ "description": "Root exploit for Motorola Moto G Stylus 5G 2023 (genevn) via GhostLock (CVE-2026-43499) — locked bootloader, no flashing", "fork": false, "created_at": "2026-10-31T11:02:17Z", - "updated_at": "2026-10-31T11:02:40Z", - "pushed_at": "2026-10-31T11:02:36Z", + "updated_at": "2026-11-01T06:16:21Z", + "pushed_at": "2026-11-01T06:16:17Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-63030.json b/2026/CVE-2026-63030.json index 4a021f454a..af55ca2410 100644 --- a/2026/CVE-2026-63030.json +++ b/2026/CVE-2026-63030.json @@ -814,10 +814,10 @@ "description": "Blackbox, non-intrusive detector for wp2shell (WordPress core pre-auth RCE, CVE-2026-63030 \/ CVE-2026-60137). Detection only.", "fork": false, "created_at": "2026-07-18T21:06:14Z", - "updated_at": "2026-09-22T17:13:44Z", + "updated_at": "2026-11-01T03:35:44Z", "pushed_at": "2026-07-19T17:16:17Z", - "stargazers_count": 4, - "watchers_count": 4, + "stargazers_count": 5, + "watchers_count": 5, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -834,7 +834,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 4, + "watchers": 5, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-64560.json b/2026/CVE-2026-64560.json index 373c653cf4..081d9f8eb6 100644 --- a/2026/CVE-2026-64560.json +++ b/2026/CVE-2026-64560.json @@ -564,10 +564,10 @@ "description": "OnePlus 16 (PYB110) jailbreak: CVE-2026-64560 + CVE-2026-98260 + KernelSU \/ KernelSU Next \/ BakaSU \/ SukiSU Ultra LKM", "fork": false, "created_at": "2026-10-20T09:43:06Z", - "updated_at": "2026-10-31T23:09:30Z", + "updated_at": "2026-11-01T06:29:57Z", "pushed_at": "2026-10-31T23:09:26Z", - "stargazers_count": 20, - "watchers_count": 20, + "stargazers_count": 21, + "watchers_count": 21, "has_discussions": false, "forks_count": 8, "allow_forking": true, @@ -578,7 +578,7 @@ "topics": [], "visibility": "public", "forks": 8, - "watchers": 20, + "watchers": 21, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-75604.json b/2026/CVE-2026-75604.json index 09c71a7fdb..bef05a0bb6 100644 --- a/2026/CVE-2026-75604.json +++ b/2026/CVE-2026-75604.json @@ -14,10 +14,10 @@ "description": "CVE-2026-75604 Next.js Windows RCE poc", "fork": false, "created_at": "2026-08-25T19:06:37Z", - "updated_at": "2026-10-23T15:03:37Z", + "updated_at": "2026-11-01T05:19:32Z", "pushed_at": "2026-08-28T02:53:24Z", - "stargazers_count": 106, - "watchers_count": 106, + "stargazers_count": 107, + "watchers_count": 107, "has_discussions": false, "forks_count": 39, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 39, - "watchers": 106, + "watchers": 107, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-80097.json b/2026/CVE-2026-80097.json index 0746abb633..6462c9ad12 100644 --- a/2026/CVE-2026-80097.json +++ b/2026/CVE-2026-80097.json @@ -14,8 +14,8 @@ "description": "CVE-2026-80097 - Microsoft Authenticator Android Token Theft PoC & Exploit", "fork": false, "created_at": "2026-10-27T14:28:35Z", - "updated_at": "2026-10-27T14:57:27Z", - "pushed_at": "2026-10-27T14:57:22Z", + "updated_at": "2026-11-01T04:20:22Z", + "pushed_at": "2026-11-01T04:20:19Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-84295.json b/2026/CVE-2026-84295.json new file mode 100644 index 0000000000..90c8807ae9 --- /dev/null +++ b/2026/CVE-2026-84295.json @@ -0,0 +1,45 @@ +[ + { + "id": 1441478729, + "name": "wsftp-server-scanner", + "full_name": "foxcornlab\/wsftp-server-scanner", + "owner": { + "login": "foxcornlab", + "id": 43523802, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43523802?v=4", + "html_url": "https:\/\/github.com\/foxcornlab", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/foxcornlab\/wsftp-server-scanner", + "description": "Detection-only local triage scanner for Progress WS_FTP Server October 2026 patch batch: CVE-2026-84295 (CVSS 10.0) and 14 more, graded per group against the split 2024.0.6\/2025.0.3 vs 2024.0.7\/2025.0.4 fix table. No payloads, no remote probing.", + "fork": false, + "created_at": "2026-11-01T04:20:14Z", + "updated_at": "2026-11-01T04:21:20Z", + "pushed_at": "2026-11-01T04:21:11Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve-2026-84295", + "detection-only", + "file-transfer", + "progress-software", + "triage", + "vulnerability-scanner", + "windows", + "ws-ftp", + "ws-ftp-server" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-88773.json b/2026/CVE-2026-88773.json index 5e6be964c8..9cfa8f3b2a 100644 --- a/2026/CVE-2026-88773.json +++ b/2026/CVE-2026-88773.json @@ -75,5 +75,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1441406282, + "name": "CVE-2026-88773", + "full_name": "Fyyre\/CVE-2026-88773", + "owner": { + "login": "Fyyre", + "id": 311885, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/311885?v=4", + "html_url": "https:\/\/github.com\/Fyyre", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Fyyre\/CVE-2026-88773", + "description": "CVE-2026-88773 - NetScaler nsppe 32-bit chunk-size accumulator wrap (HTTP Request Smuggling)", + "fork": false, + "created_at": "2026-11-01T01:58:23Z", + "updated_at": "2026-11-01T01:58:31Z", + "pushed_at": "2026-11-01T01:58:27Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-94293.json b/2026/CVE-2026-94293.json index 11d2323ddb..bed31a38a2 100644 --- a/2026/CVE-2026-94293.json +++ b/2026/CVE-2026-94293.json @@ -38,6 +38,6 @@ "forks": 0, "watchers": 0, "score": 0, - "subscribers_count": 1 + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-97229.json b/2026/CVE-2026-97229.json index fb73c35e0e..2ebd300bfe 100644 --- a/2026/CVE-2026-97229.json +++ b/2026/CVE-2026-97229.json @@ -151,7 +151,7 @@ "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -159,7 +159,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 1, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-98260.json b/2026/CVE-2026-98260.json index 31b55ec51e..e44e55d5f3 100644 --- a/2026/CVE-2026-98260.json +++ b/2026/CVE-2026-98260.json @@ -47,10 +47,10 @@ "description": "CVE-2026-98260 (Timer) Android\/ARM64 port", "fork": false, "created_at": "2026-10-18T23:26:39Z", - "updated_at": "2026-11-01T01:44:10Z", + "updated_at": "2026-11-01T02:14:43Z", "pushed_at": "2026-10-25T05:35:18Z", - "stargazers_count": 41, - "watchers_count": 41, + "stargazers_count": 42, + "watchers_count": 42, "has_discussions": false, "forks_count": 18, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 18, - "watchers": 41, + "watchers": 42, "score": 0, "subscribers_count": 0 }, @@ -376,8 +376,8 @@ "description": "REDMI K90 Max在OS4.0.5.0.XAACNXM利用CVE-2026-98260获取ROOT权限并加载KSU模块。", "fork": false, "created_at": "2026-10-26T09:25:45Z", - "updated_at": "2026-10-31T18:32:06Z", - "pushed_at": "2026-10-31T05:08:59Z", + "updated_at": "2026-11-01T03:10:44Z", + "pushed_at": "2026-11-01T03:10:26Z", "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, @@ -387,7 +387,17 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "android", + "android-root", + "cve-2026-98260", + "kernel-exploit", + "kernel-module", + "kernelsu", + "lkm", + "mtk", + "poc" + ], "visibility": "public", "forks": 1, "watchers": 3, @@ -414,7 +424,7 @@ "stargazers_count": 41, "watchers_count": 41, "has_discussions": false, - "forks_count": 13, + "forks_count": 14, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -422,7 +432,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 13, + "forks": 14, "watchers": 41, "score": 0, "subscribers_count": 0 @@ -585,10 +595,10 @@ "description": "6.6.118-android15-8-g9bc34d5b0c79", "fork": false, "created_at": "2026-10-27T16:18:05Z", - "updated_at": "2026-10-31T05:45:56Z", + "updated_at": "2026-11-01T02:20:12Z", "pushed_at": "2026-10-28T09:14:49Z", - "stargazers_count": 4, - "watchers_count": 4, + "stargazers_count": 5, + "watchers_count": 5, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -599,7 +609,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 4, + "watchers": 5, "score": 0, "subscribers_count": 0 }, @@ -690,12 +700,12 @@ "description": "Android front end for CVE-2026-98260: root shell + KernelSU late-load through Shizuku", "fork": false, "created_at": "2026-10-28T15:15:02Z", - "updated_at": "2026-11-01T01:38:37Z", + "updated_at": "2026-11-01T07:49:14Z", "pushed_at": "2026-10-28T15:26:42Z", - "stargazers_count": 19, - "watchers_count": 19, + "stargazers_count": 24, + "watchers_count": 24, "has_discussions": false, - "forks_count": 7, + "forks_count": 9, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -710,8 +720,8 @@ "shizuku" ], "visibility": "public", - "forks": 7, - "watchers": 19, + "forks": 9, + "watchers": 24, "score": 0, "subscribers_count": 0 }, @@ -730,8 +740,8 @@ "description": "CVE-2026-98260 (posix-cpu-timers exec UAF) exploit research: S9280 Android 14 GKI 6.1 — UAF trigger + zero-write primitive + SELinux Permissive. Handoff doc in HANDOFF.md", "fork": false, "created_at": "2026-10-28T16:54:41Z", - "updated_at": "2026-10-31T16:00:19Z", - "pushed_at": "2026-10-31T16:00:14Z", + "updated_at": "2026-11-01T03:44:57Z", + "pushed_at": "2026-11-01T03:44:54Z", "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, @@ -796,10 +806,10 @@ "description": "GhostKey - CVE-2026-98260 一键提权工具（Shizuku + NDK Native）", "fork": false, "created_at": "2026-10-29T05:12:04Z", - "updated_at": "2026-11-01T00:19:47Z", + "updated_at": "2026-11-01T07:03:27Z", "pushed_at": "2026-10-29T05:13:36Z", - "stargazers_count": 40, - "watchers_count": 40, + "stargazers_count": 42, + "watchers_count": 42, "has_discussions": false, "forks_count": 22, "allow_forking": true, @@ -810,7 +820,7 @@ "topics": [], "visibility": "public", "forks": 22, - "watchers": 40, + "watchers": 42, "score": 0, "subscribers_count": 0 }, @@ -829,8 +839,8 @@ "description": "CVE 2026 98260 vivo x fold6 poc", "fork": false, "created_at": "2026-10-29T09:36:16Z", - "updated_at": "2026-10-31T16:38:51Z", - "pushed_at": "2026-10-29T09:47:49Z", + "updated_at": "2026-11-01T06:14:03Z", + "pushed_at": "2026-11-01T06:14:00Z", "stargazers_count": 5, "watchers_count": 5, "has_discussions": false, @@ -943,8 +953,8 @@ "description": "CVE 2026 98260 vivo s60 poc", "fork": false, "created_at": "2026-10-30T07:52:25Z", - "updated_at": "2026-10-31T11:42:44Z", - "pushed_at": "2026-10-31T11:42:40Z", + "updated_at": "2026-11-01T06:45:14Z", + "pushed_at": "2026-11-01T06:45:11Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -966,5 +976,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1441419486, + "name": "GhostLock-CVE-2026-98260", + "full_name": "sabuweis\/GhostLock-CVE-2026-98260", + "owner": { + "login": "sabuweis", + "id": 328963353, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/328963353?v=4", + "html_url": "https:\/\/github.com\/sabuweis", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/sabuweis\/GhostLock-CVE-2026-98260", + "description": "基于ghostlock-app与CVE-2026-98260漏洞开发的提权项目", + "fork": false, + "created_at": "2026-11-01T02:24:20Z", + "updated_at": "2026-11-01T06:17:47Z", + "pushed_at": "2026-11-01T06:17:44Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-98432.json b/2026/CVE-2026-98432.json index cdcfd4cd22..c099c59c45 100644 --- a/2026/CVE-2026-98432.json +++ b/2026/CVE-2026-98432.json @@ -218,10 +218,10 @@ "description": "Race trigger, heap-reuse oracle, pcap analysis, detection and mitigation tooling for CVE-2026-98432 (Linux IPv4\/TCP ireq_opt use-after-free).", "fork": false, "created_at": "2026-10-30T00:22:53Z", - "updated_at": "2026-10-31T16:18:04Z", + "updated_at": "2026-11-01T05:47:03Z", "pushed_at": "2026-10-31T06:38:04Z", - "stargazers_count": 7, - "watchers_count": 7, + "stargazers_count": 8, + "watchers_count": 8, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -239,7 +239,7 @@ ], "visibility": "public", "forks": 2, - "watchers": 7, + "watchers": 8, "score": 0, "subscribers_count": 0 }, @@ -611,7 +611,7 @@ "stargazers_count": 4, "watchers_count": 4, "has_discussions": false, - "forks_count": 1, + "forks_count": 2, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -619,7 +619,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 1, + "forks": 2, "watchers": 4, "score": 0, "subscribers_count": 0 @@ -672,12 +672,12 @@ "description": "Proof-only PoC for CVE-2026-98432 (Linux IPv4\/TCP ireq_opt use-after-free): race trigger, heap-reuse oracle, no code execution", "fork": false, "created_at": "2026-10-30T16:36:43Z", - "updated_at": "2026-10-31T21:25:47Z", + "updated_at": "2026-11-01T05:48:13Z", "pushed_at": "2026-10-30T16:40:41Z", - "stargazers_count": 4, - "watchers_count": 4, + "stargazers_count": 7, + "watchers_count": 7, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -691,8 +691,8 @@ "use-after-free" ], "visibility": "public", - "forks": 0, - "watchers": 4, + "forks": 1, + "watchers": 7, "score": 0, "subscribers_count": 0 }, @@ -1141,8 +1141,8 @@ }, { "id": 1441002171, - "name": "debian-cve-2026-98432-fix", - "full_name": "AronWang001\/debian-cve-2026-98432-fix", + "name": "linux-cve-2026-98432-fix", + "full_name": "AronWang001\/linux-cve-2026-98432-fix", "owner": { "login": "AronWang001", "id": 260259579, @@ -1150,12 +1150,12 @@ "html_url": "https:\/\/github.com\/AronWang001", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/AronWang001\/debian-cve-2026-98432-fix", - "description": "One-click kernel security update for CVE-2026-98432 on Debian 12\/13.", + "html_url": "https:\/\/github.com\/AronWang001\/linux-cve-2026-98432-fix", + "description": "Detect CVE-2026-98432 on the running Linux kernel and apply the official fixed kernel only on verified distributions (Debian 12\/13, Amazon Linux 2\/2023). Ubuntu\/RHEL detect-only; Rocky\/Alma\/Oracle\/Fedora\/SUSE\/Arch\/Alpine identified but not auto-fixed.", "fork": false, "created_at": "2026-10-31T15:41:12Z", - "updated_at": "2026-10-31T19:22:36Z", - "pushed_at": "2026-10-31T19:28:36Z", + "updated_at": "2026-11-01T03:28:28Z", + "pushed_at": "2026-11-01T03:28:45Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -1204,5 +1204,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1441518765, + "name": "cve-2026-98432-linux-tcp-uaf", + "full_name": "Ghost-Bx1\/cve-2026-98432-linux-tcp-uaf", + "owner": { + "login": "Ghost-Bx1", + "id": 103540917, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103540917?v=4", + "html_url": "https:\/\/github.com\/Ghost-Bx1", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Ghost-Bx1\/cve-2026-98432-linux-tcp-uaf", + "description": null, + "fork": false, + "created_at": "2026-11-01T05:37:06Z", + "updated_at": "2026-11-01T05:37:43Z", + "pushed_at": "2026-11-01T05:37:39Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-98937.json b/2026/CVE-2026-98937.json index 5d99cad6d1..9a0845226c 100644 --- a/2026/CVE-2026-98937.json +++ b/2026/CVE-2026-98937.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2026-10-31T20:13:04Z", - "updated_at": "2026-10-31T20:23:26Z", + "updated_at": "2026-11-01T05:06:18Z", "pushed_at": "2026-10-31T20:23:21Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }