nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/07/07 18:52:10

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-07-08 03:52:10 +09:00
1 parent e70d7d957f
commit 12968eaf06
99 files changed
+937 -612
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2013/CVE-2013-0156.json
+1 -1
View File
@@ -96,7 +96,7 @@
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
"subscribers_count": 0
},
{
"id": 7575666,
2016/CVE-2016-9079.json
+1 -1
View File
@@ -101,7 +101,7 @@
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
"subscribers_count": 1
},
{
"id": 415134444,
2019/CVE-2019-1040.json
+4 -4
View File
@@ -118,7 +118,7 @@
"stargazers_count": 300,
"watchers_count": 300,
"has_discussions": false,
"forks_count": 57,
"forks_count": 58,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -126,7 +126,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 57,
"forks": 58,
"watchers": 300,
"score": 0,
"subscribers_count": 6
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-07-07T11:27:50Z",
"pushed_at": "2026-07-07T11:27:22Z",
"updated_at": "2026-07-07T16:09:10Z",
"pushed_at": "2026-07-07T16:08:58Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2019/CVE-2019-2215.json
+4 -4
View File
@@ -214,10 +214,10 @@
"description": "android-kernel-exploitation-ashfaq-CVE-2019-2215 docker setup for mac users ",
"fork": false,
"created_at": "2020-04-25T07:31:35Z",
"updated_at": "2026-06-23T18:11:11Z",
"updated_at": "2026-07-07T18:16:07Z",
"pushed_at": "2020-04-25T07:34:43Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -228,7 +228,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 7,
"watchers": 6,
"score": 0,
"subscribers_count": 1
},
2019/CVE-2019-9053.json
-33
View File
@@ -1103,39 +1103,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1099853082,
"name": "Simple-CTF-THM-Writeup",
"full_name": "Praditha29\/Simple-CTF-THM-Writeup",
"owner": {
"login": "Praditha29",
"id": 198954043,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/198954043?v=4",
"html_url": "https:\/\/github.com\/Praditha29",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Praditha29\/Simple-CTF-THM-Writeup",
"description": "This repository is a complete walkthrough of the Simple CTF challenge on TryHackMe, featuring Nmap scanning, directory enumeration with Gobuster, exploitation of CVE-2019-9053, SSH access, and privilege escalation via sudo permissions.",
"fork": false,
"created_at": "2025-11-19T14:23:38Z",
"updated_at": "2025-11-19T14:32:37Z",
"pushed_at": "2025-11-19T14:32:34Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1136284145,
"name": "cmsms-sqli",
2020/CVE-2020-0796.json
+4 -4
View File
@@ -1754,10 +1754,10 @@
"description": "SMBGhost (CVE-2020-0796) Automate Exploitation and Detection",
"fork": false,
"created_at": "2020-06-10T16:44:39Z",
"updated_at": "2026-07-03T04:07:43Z",
"updated_at": "2026-07-07T14:37:51Z",
"pushed_at": "2022-03-30T14:02:04Z",
"stargazers_count": 351,
"watchers_count": 351,
"stargazers_count": 352,
"watchers_count": 352,
"has_discussions": false,
"forks_count": 49,
"allow_forking": true,
@@ -1768,7 +1768,7 @@
"topics": [],
"visibility": "public",
"forks": 49,
"watchers": 351,
"watchers": 352,
"score": 0,
"subscribers_count": 6
},
2020/CVE-2020-1472.json
+2 -2
View File
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-07-07T11:31:57Z",
"pushed_at": "2026-07-07T11:31:52Z",
"updated_at": "2026-07-07T18:10:40Z",
"pushed_at": "2026-07-07T18:10:17Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2020/CVE-2020-24586.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "FragAttacks WiFi penetration framework — CVE-2020-24586\/87\/88",
"fork": false,
"created_at": "2026-04-12T16:30:45Z",
"updated_at": "2026-04-12T17:12:27Z",
"updated_at": "2026-07-07T12:34:58Z",
"pushed_at": "2026-04-12T17:12:19Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2021/CVE-2021-1732.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2021-1732 Exploit",
"fork": false,
"created_at": "2021-03-05T02:11:10Z",
"updated_at": "2026-06-22T11:03:48Z",
"updated_at": "2026-07-07T14:14:12Z",
"pushed_at": "2021-03-05T03:10:26Z",
"stargazers_count": 424,
"watchers_count": 424,
"stargazers_count": 425,
"watchers_count": 425,
"has_discussions": false,
"forks_count": 124,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 124,
"watchers": 424,
"watchers": 425,
"score": 0,
"subscribers_count": 5
},
2021/CVE-2021-21972.json
+4 -4
View File
@@ -798,10 +798,10 @@
"description": "CVE-2021-21972 – ᴠᴍᴡᴀʀᴇ ᴄʟɪᴇɴᴛ ᴜɴᴀᴜᴛʜᴏʀɪᴢᴇᴅ ᴄᴏᴅᴇ ɪɴᴊᴇᴄᴛɪᴏɴ (ʀᴄᴇ)",
"fork": false,
"created_at": "2021-10-03T23:03:11Z",
"updated_at": "2026-06-23T18:11:53Z",
"updated_at": "2026-07-07T18:17:14Z",
"pushed_at": "2022-03-07T14:12:38Z",
"stargazers_count": 11,
"watchers_count": 11,
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -817,7 +817,7 @@
],
"visibility": "public",
"forks": 4,
"watchers": 11,
"watchers": 10,
"score": 0,
"subscribers_count": 1
},
2021/CVE-2021-26857.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "proxylogon exploit - CVE-2021-26857",
"fork": false,
"created_at": "2021-03-11T17:32:32Z",
"updated_at": "2026-06-23T18:11:35Z",
"updated_at": "2026-07-07T18:16:44Z",
"pushed_at": "2021-03-11T17:34:15Z",
"stargazers_count": 111,
"watchers_count": 111,
"stargazers_count": 110,
"watchers_count": 110,
"has_discussions": false,
"forks_count": 34,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 34,
"watchers": 111,
"watchers": 110,
"score": 0,
"subscribers_count": 6
}
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-07-07T11:38:22Z",
"pushed_at": "2026-07-07T11:38:14Z",
"updated_at": "2026-07-07T16:22:23Z",
"pushed_at": "2026-07-07T16:22:19Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-34527.json
+4 -4
View File
@@ -86,10 +86,10 @@
"description": null,
"fork": false,
"created_at": "2021-07-02T12:10:49Z",
"updated_at": "2026-06-30T12:01:17Z",
"updated_at": "2026-07-07T18:14:11Z",
"pushed_at": "2021-07-02T12:17:50Z",
"stargazers_count": 318,
"watchers_count": 318,
"stargazers_count": 317,
"watchers_count": 317,
"has_discussions": false,
"forks_count": 75,
"allow_forking": true,
@@ -100,7 +100,7 @@
"topics": [],
"visibility": "public",
"forks": 75,
"watchers": 318,
"watchers": 317,
"score": 0,
"subscribers_count": 10
},
2021/CVE-2021-41773.json
+2 -2
View File
@@ -4852,8 +4852,8 @@
"description": "whs-homework",
"fork": false,
"created_at": "2026-07-07T08:49:43Z",
"updated_at": "2026-07-07T08:51:17Z",
"pushed_at": "2026-07-07T08:51:13Z",
"updated_at": "2026-07-07T15:42:48Z",
"pushed_at": "2026-07-07T15:42:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2021/CVE-2021-44228.json
+2 -2
View File
@@ -3878,7 +3878,7 @@
"stargazers_count": 3425,
"watchers_count": 3425,
"has_discussions": true,
"forks_count": 725,
"forks_count": 726,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -3886,7 +3886,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 725,
"forks": 726,
"watchers": 3425,
"score": 0,
"subscribers_count": 54
2022/CVE-2022-0847.json
+4 -4
View File
@@ -377,10 +377,10 @@
"description": "CVE-2022-0847: Linux Kernel Privilege Escalation Vulnerability",
"fork": false,
"created_at": "2022-03-08T12:43:43Z",
"updated_at": "2026-06-23T18:12:07Z",
"updated_at": "2026-07-07T18:17:33Z",
"pushed_at": "2022-03-08T13:15:35Z",
"stargazers_count": 21,
"watchers_count": 21,
"stargazers_count": 20,
"watchers_count": 20,
"has_discussions": false,
"forks_count": 15,
"allow_forking": true,
@@ -391,7 +391,7 @@
"topics": [],
"visibility": "public",
"forks": 15,
"watchers": 21,
"watchers": 20,
"score": 0,
"subscribers_count": 1
},
2022/CVE-2022-22947.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "Spring cloud gateway code injection : CVE-2022-22947",
"fork": false,
"created_at": "2022-03-03T11:14:37Z",
"updated_at": "2026-06-23T18:12:07Z",
"updated_at": "2026-07-07T18:17:32Z",
"pushed_at": "2022-03-03T11:27:18Z",
"stargazers_count": 10,
"watchers_count": 10,
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 10,
"watchers": 9,
"score": 0,
"subscribers_count": 1
},
2022/CVE-2022-29464.json
+4 -4
View File
@@ -457,10 +457,10 @@
"description": "A bots loader for CVE-2022-29464 with multithreading",
"fork": false,
"created_at": "2022-05-15T08:51:16Z",
"updated_at": "2026-07-06T08:38:46Z",
"updated_at": "2026-07-07T18:17:42Z",
"pushed_at": "2026-07-06T08:38:43Z",
"stargazers_count": 11,
"watchers_count": 11,
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -479,7 +479,7 @@
],
"visibility": "public",
"forks": 4,
"watchers": 11,
"watchers": 10,
"score": 0,
"subscribers_count": 1
},
2022/CVE-2022-29799.json
+2 -2
View File
@@ -59,8 +59,8 @@
"description": "Demonstrate local privilege escalation in networkd-dispatcher via CVE-2022-29799 and CVE-2022-29800 using this C proof of concept.",
"fork": false,
"created_at": "2026-06-23T14:05:18Z",
"updated_at": "2026-07-07T09:23:55Z",
"pushed_at": "2026-07-07T09:23:51Z",
"updated_at": "2026-07-07T15:12:31Z",
"pushed_at": "2026-07-07T15:10:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2022/CVE-2022-31138.json
+5 -3
View File
@@ -11,10 +11,10 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ly1g3\/Mailcow-CVE-2022-31138",
"description": "Mailcow CVE-2022-31138",
"description": "Mailcow CVE-2022-31138 RCE",
"fork": false,
"created_at": "2022-07-11T06:53:24Z",
"updated_at": "2022-07-14T06:42:11Z",
"updated_at": "2026-07-07T14:10:30Z",
"pushed_at": "2022-07-25T06:32:31Z",
"stargazers_count": 2,
"watchers_count": 2,
@@ -25,7 +25,9 @@
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"topics": [
"cve-2022-31138"
],
"visibility": "public",
"forks": 0,
"watchers": 2,
2022/CVE-2022-31245.json
+4 -2
View File
@@ -14,7 +14,7 @@
"description": "CVE-2022-31245: RCE and domain admin privilege escalation for Mailcow",
"fork": false,
"created_at": "2022-05-20T10:05:55Z",
"updated_at": "2025-02-14T17:11:09Z",
"updated_at": "2026-07-07T14:10:56Z",
"pushed_at": "2022-07-25T06:33:54Z",
"stargazers_count": 12,
"watchers_count": 12,
@@ -25,7 +25,9 @@
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"topics": [
"cve-2022-31245"
],
"visibility": "public",
"forks": 7,
"watchers": 12,
2022/CVE-2022-35131.json
+4 -2
View File
@@ -14,7 +14,7 @@
"description": "Joplin CVE-2022-35131, RCE",
"fork": false,
"created_at": "2022-07-25T06:25:52Z",
"updated_at": "2022-07-26T14:20:45Z",
"updated_at": "2026-07-07T14:09:57Z",
"pushed_at": "2022-07-25T06:31:59Z",
"stargazers_count": 3,
"watchers_count": 3,
@@ -25,7 +25,9 @@
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"topics": [
"cve-2022-35131"
],
"visibility": "public",
"forks": 2,
"watchers": 3,
2022/CVE-2022-46364.json
+33
View File
@@ -163,5 +163,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1292547903,
"name": "CVE-2022-46364",
"full_name": "c0gnit00\/CVE-2022-46364",
"owner": {
"login": "c0gnit00",
"id": 172115438,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/172115438?v=4",
"html_url": "https:\/\/github.com\/c0gnit00",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/c0gnit00\/CVE-2022-46364",
"description": "Python POC, Exploit for CVE-2022-46364",
"fork": false,
"created_at": "2026-07-07T16:04:14Z",
"updated_at": "2026-07-07T16:07:34Z",
"pushed_at": "2026-07-07T16:05:10Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2023/CVE-2023-0089.json
+37
View File
@@ -0,0 +1,37 @@
[
{
"id": 1292340927,
"name": "proofpoint-CVE-2023-0089",
"full_name": "ly1g3\/proofpoint-CVE-2023-0089",
"owner": {
"login": "ly1g3",
"id": 105918602,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105918602?v=4",
"html_url": "https:\/\/github.com\/ly1g3",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ly1g3\/proofpoint-CVE-2023-0089",
"description": "Proofpoint Email Gateway: Low level authenticated user to admin RCE",
"fork": false,
"created_at": "2026-07-07T13:02:57Z",
"updated_at": "2026-07-07T14:14:59Z",
"pushed_at": "2026-07-07T13:04:10Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2023-0089"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2023/CVE-2023-0090.json
+37
View File
@@ -0,0 +1,37 @@
[
{
"id": 1292343550,
"name": "proofpoint-CVE-2023-0090",
"full_name": "ly1g3\/proofpoint-CVE-2023-0090",
"owner": {
"login": "ly1g3",
"id": 105918602,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105918602?v=4",
"html_url": "https:\/\/github.com\/ly1g3",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ly1g3\/proofpoint-CVE-2023-0090",
"description": "Proofpoint Email Gateway: Unauthenticated RCE ",
"fork": false,
"created_at": "2026-07-07T13:05:21Z",
"updated_at": "2026-07-07T14:14:58Z",
"pushed_at": "2026-07-07T13:06:04Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2023-0090"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2023/CVE-2023-20009.json
+37
View File
@@ -0,0 +1,37 @@
[
{
"id": 1292349564,
"name": "cisco-CVE-2023-20009",
"full_name": "ly1g3\/cisco-CVE-2023-20009",
"owner": {
"login": "ly1g3",
"id": 105918602,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105918602?v=4",
"html_url": "https:\/\/github.com\/ly1g3",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ly1g3\/cisco-CVE-2023-20009",
"description": "Cisco Email Security Appliance: Remote Code Execution - RCE from config file",
"fork": false,
"created_at": "2026-07-07T13:11:14Z",
"updated_at": "2026-07-07T14:14:58Z",
"pushed_at": "2026-07-07T13:12:01Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2023-20009"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2023/CVE-2023-20075.json
+37
View File
@@ -0,0 +1,37 @@
[
{
"id": 1292351369,
"name": "cisco-CVE-2023-20075",
"full_name": "ly1g3\/cisco-CVE-2023-20075",
"owner": {
"login": "ly1g3",
"id": 105918602,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105918602?v=4",
"html_url": "https:\/\/github.com\/ly1g3",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ly1g3\/cisco-CVE-2023-20075",
"description": "Cisco Email Security Appliance: Local Privilege Escalation and Shell Escape",
"fork": false,
"created_at": "2026-07-07T13:12:39Z",
"updated_at": "2026-07-07T14:14:57Z",
"pushed_at": "2026-07-07T13:13:10Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2023-20075"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2023/CVE-2023-20696.json
+15 -15
View File
@@ -1,25 +1,25 @@
[
{
"id": 1276460465,
"id": 1283420755,
"name": "pwnage24mtk",
"full_name": "kasnria001\/pwnage24mtk",
"full_name": "wzy114514sb\/pwnage24mtk",
"owner": {
"login": "kasnria001",
"id": 105335451,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105335451?v=4",
"html_url": "https:\/\/github.com\/kasnria001",
"login": "wzy114514sb",
"id": 108566609,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/108566609?v=4",
"html_url": "https:\/\/github.com\/wzy114514sb",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/kasnria001\/pwnage24mtk",
"html_url": "https:\/\/github.com\/wzy114514sb\/pwnage24mtk",
"description": "Cert exploit for MTK devices.There is a logic flaw in MTK cert verification process.Similar to CVE-2023-20696.",
"fork": false,
"created_at": "2026-06-22T02:09:35Z",
"updated_at": "2026-07-06T06:22:48Z",
"pushed_at": "2026-07-01T00:45:22Z",
"stargazers_count": 89,
"watchers_count": 89,
"created_at": "2026-06-28T23:00:44Z",
"updated_at": "2026-07-07T17:30:37Z",
"pushed_at": "2026-06-29T10:38:10Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 49,
"forks_count": 48,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 49,
"watchers": 89,
"forks": 48,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2023/CVE-2023-22527.json
-66
View File
@@ -32,39 +32,6 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 746624870,
"name": "CVE-2023-22527",
"full_name": "Drun1baby\/CVE-2023-22527",
"owner": {
"login": "Drun1baby",
"id": 75228348,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/75228348?v=4",
"html_url": "https:\/\/github.com\/Drun1baby",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Drun1baby\/CVE-2023-22527",
"description": null,
"fork": false,
"created_at": "2024-01-22T11:38:55Z",
"updated_at": "2025-12-12T06:29:59Z",
"pushed_at": "2024-01-22T12:07:37Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 1
},
{
"id": 746832699,
"name": "CVE-2023-22527",
@@ -131,39 +98,6 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 747056079,
"name": "CVE-2023-22527-confluence",
"full_name": "VNCERT-CC\/CVE-2023-22527-confluence",
"owner": {
"login": "VNCERT-CC",
"id": 94035613,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/94035613?v=4",
"html_url": "https:\/\/github.com\/VNCERT-CC",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/VNCERT-CC\/CVE-2023-22527-confluence",
"description": "[Confluence] CVE-2023-22527 realworld poc",
"fork": false,
"created_at": "2024-01-23T07:10:55Z",
"updated_at": "2025-02-22T18:01:05Z",
"pushed_at": "2024-01-23T07:16:40Z",
"stargazers_count": 19,
"watchers_count": 19,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 19,
"score": 0,
"subscribers_count": 1
},
{
"id": 747075547,
"name": "CVE-2023-22527",
2023/CVE-2023-28588.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 746664124,
"name": "CVE-2023-28588_G2.5_singlefile",
"full_name": "uthrasri\/CVE-2023-28588_G2.5_singlefile",
"owner": {
"login": "uthrasri",
"id": 145666390,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/145666390?v=4",
"html_url": "https:\/\/github.com\/uthrasri",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/uthrasri\/CVE-2023-28588_G2.5_singlefile",
"description": null,
"fork": false,
"created_at": "2024-01-22T13:17:35Z",
"updated_at": "2024-01-22T13:18:30Z",
"pushed_at": "2024-01-22T13:19:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 1
}
]
2023/CVE-2023-29489.json
-33
View File
@@ -395,39 +395,6 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 746343792,
"name": "tool-29489",
"full_name": "prasad-1808\/tool-29489",
"owner": {
"login": "prasad-1808",
"id": 86564180,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/86564180?v=4",
"html_url": "https:\/\/github.com\/prasad-1808",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/prasad-1808\/tool-29489",
"description": "This Tool is used to check for CVE-2023-29489 Vulnerability in the provided URL with the set of payloads available",
"fork": false,
"created_at": "2024-01-21T19:23:47Z",
"updated_at": "2024-01-21T19:38:23Z",
"pushed_at": "2024-01-21T20:10:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 747385819,
"name": "cpanel_xss_2023",
2023/CVE-2023-31488.json
+37
View File
@@ -0,0 +1,37 @@
[
{
"id": 1292357303,
"name": "cisco-CVE-2023-31488",
"full_name": "ly1g3\/cisco-CVE-2023-31488",
"owner": {
"login": "ly1g3",
"id": 105918602,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105918602?v=4",
"html_url": "https:\/\/github.com\/ly1g3",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ly1g3\/cisco-CVE-2023-31488",
"description": "Cisco Email Security Appliance: Email to zero-click RCE as root - Remote Code Execution\/Memory Corruption\/ROP-chain ",
"fork": false,
"created_at": "2026-07-07T13:17:13Z",
"updated_at": "2026-07-07T14:14:56Z",
"pushed_at": "2026-07-07T13:48:44Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2023-31488"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2023/CVE-2023-32434.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙",
"fork": false,
"created_at": "2025-08-13T09:19:29Z",
"updated_at": "2026-07-07T10:36:29Z",
"pushed_at": "2026-07-07T10:36:20Z",
"updated_at": "2026-07-07T16:28:01Z",
"pushed_at": "2026-07-07T16:27:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-38831.json
+4 -4
View File
@@ -150,10 +150,10 @@
"description": "An easy to install and easy to run tool for generating exploit payloads for CVE-2023-38831, WinRAR RCE before versions 6.23",
"fork": false,
"created_at": "2023-08-27T21:49:37Z",
"updated_at": "2026-04-19T06:47:40Z",
"updated_at": "2026-07-07T18:14:22Z",
"pushed_at": "2023-08-27T22:17:56Z",
"stargazers_count": 114,
"watchers_count": 114,
"stargazers_count": 113,
"watchers_count": 113,
"has_discussions": false,
"forks_count": 18,
"allow_forking": true,
@@ -171,7 +171,7 @@
],
"visibility": "public",
"forks": 18,
"watchers": 114,
"watchers": 113,
"score": 0,
"subscribers_count": 1
},
2023/CVE-2023-45777.json
-33
View File
@@ -1,37 +1,4 @@
[
{
"id": 745800831,
"name": "TheLastBundleMismatch",
"full_name": "michalbednarski\/TheLastBundleMismatch",
"owner": {
"login": "michalbednarski",
"id": 1826899,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1826899?v=4",
"html_url": "https:\/\/github.com\/michalbednarski",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/michalbednarski\/TheLastBundleMismatch",
"description": "Writeup and exploit for CVE-2023-45777, bypass for Intent validation inside AccountManagerService on Android 13 despite \"Lazy Bundle\" mitigation",
"fork": false,
"created_at": "2024-01-20T07:14:06Z",
"updated_at": "2026-04-17T05:58:07Z",
"pushed_at": "2024-01-21T05:04:01Z",
"stargazers_count": 100,
"watchers_count": 100,
"has_discussions": false,
"forks_count": 14,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 14,
"watchers": 100,
"score": 0,
"subscribers_count": 3
},
{
"id": 1072817579,
"name": "silver-succotash",
2023/CVE-2023-4861.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1292215217,
"name": "CVE-2023-4861-PoC",
"full_name": "nomaisthere\/CVE-2023-4861-PoC",
"owner": {
"login": "nomaisthere",
"id": 182764138,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/182764138?v=4",
"html_url": "https:\/\/github.com\/nomaisthere",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/nomaisthere\/CVE-2023-4861-PoC",
"description": "Proof of Concept for CVE-2023-4861 in Filester",
"fork": false,
"created_at": "2026-07-07T11:15:43Z",
"updated_at": "2026-07-07T13:07:43Z",
"pushed_at": "2026-07-07T13:01:14Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
]
2023/CVE-2023-4863.json
+7 -2
View File
@@ -377,7 +377,7 @@
"description": "AegisGraph: graph-based application-layer assessment evidence platform for Secure Messaging Applications (SMAs). DARPA ASEMA HR0011SB20254-12 Tier 3 research. ReproChain CVE-2023-4863 reachability + PolyDiff differential parser fuzzing + claim-state governance + reproducible benchmark surface.",
"fork": false,
"created_at": "2026-05-08T13:04:43Z",
"updated_at": "2026-05-13T15:38:49Z",
"updated_at": "2026-07-07T17:36:02Z",
"pushed_at": "2026-05-13T15:29:28Z",
"stargazers_count": 0,
"watchers_count": 0,
@@ -388,7 +388,12 @@
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"topics": [
"577-industries",
"577i-program-aegis",
"graph-analysis",
"secure-messaging"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
2023/CVE-2023-6895.json
-33
View File
@@ -1,37 +1,4 @@
[
{
"id": 744508630,
"name": "CVE-2023-6895",
"full_name": "FuBoLuSec\/CVE-2023-6895",
"owner": {
"login": "FuBoLuSec",
"id": 156916644,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/156916644?v=4",
"html_url": "https:\/\/github.com\/FuBoLuSec",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/FuBoLuSec\/CVE-2023-6895",
"description": null,
"fork": false,
"created_at": "2024-01-17T12:53:47Z",
"updated_at": "2026-05-15T23:04:40Z",
"pushed_at": "2024-01-21T07:39:36Z",
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 6,
"score": 0,
"subscribers_count": 1
},
{
"id": 754039197,
"name": "CVE-2023-6895",
2024/CVE-2024-0044.json
+4 -4
View File
@@ -315,10 +315,10 @@
"description": "RunAsAnyone: PoC and writeup for bypassing the initial patch of CVE-2024-0044, Android run-as any app vulnerability allowing privilege escalation from adb to installed app",
"fork": false,
"created_at": "2024-09-27T09:02:08Z",
"updated_at": "2026-07-07T09:43:07Z",
"updated_at": "2026-07-07T18:18:18Z",
"pushed_at": "2024-09-30T12:48:08Z",
"stargazers_count": 178,
"watchers_count": 178,
"stargazers_count": 177,
"watchers_count": 177,
"has_discussions": false,
"forks_count": 28,
"allow_forking": true,
@@ -329,7 +329,7 @@
"topics": [],
"visibility": "public",
"forks": 28,
"watchers": 178,
"watchers": 177,
"score": 0,
"subscribers_count": 3
},
2024/CVE-2024-0670.json
+2 -2
View File
@@ -118,8 +118,8 @@
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
"fork": false,
"created_at": "2026-01-08T01:32:09Z",
"updated_at": "2026-07-07T11:23:04Z",
"pushed_at": "2026-07-07T11:22:58Z",
"updated_at": "2026-07-07T17:20:32Z",
"pushed_at": "2026-07-07T17:19:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-21338.json
+4 -4
View File
@@ -179,10 +179,10 @@
"description": "Windows AppLocker Driver (appid.sys) LPE",
"fork": false,
"created_at": "2024-07-29T13:18:06Z",
"updated_at": "2026-07-04T15:21:46Z",
"updated_at": "2026-07-07T18:02:43Z",
"pushed_at": "2024-07-29T13:29:59Z",
"stargazers_count": 79,
"watchers_count": 79,
"stargazers_count": 80,
"watchers_count": 80,
"has_discussions": false,
"forks_count": 18,
"allow_forking": true,
@@ -198,7 +198,7 @@
],
"visibility": "public",
"forks": 18,
"watchers": 79,
"watchers": 80,
"score": 0,
"subscribers_count": 1
},
2024/CVE-2024-21413.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Microsoft-Outlook-Remote-Code-Execution-Vulnerability",
"fork": false,
"created_at": "2024-02-16T15:17:59Z",
"updated_at": "2026-07-02T18:02:09Z",
"updated_at": "2026-07-07T18:14:25Z",
"pushed_at": "2024-02-19T20:00:35Z",
"stargazers_count": 767,
"watchers_count": 767,
"stargazers_count": 766,
"watchers_count": 766,
"has_discussions": false,
"forks_count": 166,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 166,
"watchers": 767,
"watchers": 766,
"score": 0,
"subscribers_count": 10
},
2024/CVE-2024-28000.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "LiteSpeed Cache Privilege Escalation PoC - CVE-2024-28000",
"fork": false,
"created_at": "2024-08-25T16:57:24Z",
"updated_at": "2025-12-09T18:09:02Z",
"updated_at": "2026-07-07T18:05:46Z",
"pushed_at": "2025-11-06T06:41:04Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": true,
"forks_count": 1,
"allow_forking": true,
@@ -70,7 +70,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 5,
"watchers": 4,
"score": 0,
"subscribers_count": 1
},
2024/CVE-2024-34740.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Writeup and exploit for CVE-2024-34740, integer overflow in Android's BinaryXmlSerializer to system_server file write and then to system_server code execution from normal installed app",
"fork": false,
"created_at": "2025-10-08T12:54:02Z",
"updated_at": "2026-06-23T18:12:39Z",
"updated_at": "2026-07-07T18:18:23Z",
"pushed_at": "2025-10-08T12:54:46Z",
"stargazers_count": 67,
"watchers_count": 67,
"stargazers_count": 66,
"watchers_count": 66,
"has_discussions": false,
"forks_count": 21,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 21,
"watchers": 67,
"watchers": 66,
"score": 0,
"subscribers_count": 2
}
2024/CVE-2024-39024.json
+5 -3
View File
@@ -14,8 +14,8 @@
"description": "In Packetfence 13.2.0, the WebGui interface setting allows authenticated remote code execution",
"fork": false,
"created_at": "2026-07-06T17:48:16Z",
"updated_at": "2026-07-06T18:02:05Z",
"pushed_at": "2026-07-06T17:58:14Z",
"updated_at": "2026-07-07T14:10:12Z",
"pushed_at": "2026-07-07T14:06:51Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -25,7 +25,9 @@
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"topics": [
"cve-2024-3924"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
2024/CVE-2024-4309.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "BGT-Pentest-LAB Final Project: Xiaomi HyperOS System Updater OTA Signature Verification Bypass (CVE-2024-4309) Deep Analysis.",
"fork": false,
"created_at": "2026-05-28T01:07:26Z",
"updated_at": "2026-06-14T07:48:35Z",
"pushed_at": "2026-06-14T07:48:31Z",
"updated_at": "2026-07-07T16:27:55Z",
"pushed_at": "2026-07-07T16:26:42Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2024/CVE-2024-47575.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Fortinet Fortimanager Unauthenticated Remote Code Execution AKA FortiJump CVE-2024-47575",
"fork": false,
"created_at": "2024-11-07T21:03:30Z",
"updated_at": "2026-04-15T09:38:01Z",
"updated_at": "2026-07-07T18:14:31Z",
"pushed_at": "2024-11-14T16:25:52Z",
"stargazers_count": 98,
"watchers_count": 98,
"stargazers_count": 97,
"watchers_count": 97,
"has_discussions": false,
"forks_count": 30,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 30,
"watchers": 98,
"watchers": 97,
"score": 0,
"subscribers_count": 0
},
2024/CVE-2024-4947.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "A in-the-wild V8 type confusion bug.",
"fork": false,
"created_at": "2025-07-21T13:02:16Z",
"updated_at": "2026-07-05T20:06:40Z",
"updated_at": "2026-07-07T18:14:38Z",
"pushed_at": "2025-08-08T04:59:44Z",
"stargazers_count": 31,
"watchers_count": 31,
"stargazers_count": 30,
"watchers_count": 30,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 31,
"watchers": 30,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-11001.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Exploit for CVE-2025-11001 or CVE-2025-11002",
"fork": false,
"created_at": "2025-10-15T12:14:31Z",
"updated_at": "2026-07-07T09:45:50Z",
"updated_at": "2026-07-07T18:14:41Z",
"pushed_at": "2025-11-06T17:47:05Z",
"stargazers_count": 150,
"watchers_count": 150,
"stargazers_count": 149,
"watchers_count": 149,
"has_discussions": false,
"forks_count": 20,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 20,
"watchers": 150,
"watchers": 149,
"score": 0,
"subscribers_count": 2
},
2025/CVE-2025-14847.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
"fork": false,
"created_at": "2025-07-30T15:52:00Z",
"updated_at": "2026-07-07T11:26:42Z",
"pushed_at": "2026-07-07T11:26:38Z",
"updated_at": "2026-07-07T17:24:38Z",
"pushed_at": "2026-07-07T17:24:19Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1129,8 +1129,8 @@
"description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
"fork": false,
"created_at": "2026-01-14T06:05:44Z",
"updated_at": "2026-07-07T11:25:53Z",
"pushed_at": "2026-07-07T11:25:48Z",
"updated_at": "2026-07-07T17:23:35Z",
"pushed_at": "2026-07-07T17:23:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-20362.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Safe Python scanner for CVE-2025-20362 (Cisco ASA\/FTD WebVPN Authentication Bypass)",
"fork": false,
"created_at": "2026-05-16T22:31:00Z",
"updated_at": "2026-05-16T22:35:18Z",
"updated_at": "2026-07-07T15:45:48Z",
"pushed_at": "2026-05-16T22:35:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-24071.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2025-24071: NTLM Hash Leak via RAR\/ZIP Extraction and .library-ms File",
"fork": false,
"created_at": "2025-03-16T20:10:19Z",
"updated_at": "2026-06-23T18:12:37Z",
"updated_at": "2026-07-07T18:14:34Z",
"pushed_at": "2025-03-20T21:22:23Z",
"stargazers_count": 403,
"watchers_count": 403,
"stargazers_count": 401,
"watchers_count": 401,
"has_discussions": false,
"forks_count": 68,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 68,
"watchers": 403,
"watchers": 401,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-24201.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 6,
"score": 0,
"subscribers_count": 0
2025/CVE-2025-24257.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis",
"fork": false,
"created_at": "2026-04-04T03:42:55Z",
"updated_at": "2026-07-07T12:10:16Z",
"pushed_at": "2026-07-07T12:10:05Z",
"updated_at": "2026-07-07T18:11:25Z",
"pushed_at": "2026-07-07T18:11:19Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-2783.json
+14 -14
View File
@@ -66,26 +66,26 @@
"subscribers_count": 0
},
{
"id": 1198290215,
"id": 1232773794,
"name": "CVE-2025-2783",
"full_name": "aronfour\/CVE-2025-2783",
"full_name": "bjrjk\/CVE-2025-2783",
"owner": {
"login": "aronfour",
"id": 272769105,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/272769105?v=4",
"html_url": "https:\/\/github.com\/aronfour",
"login": "bjrjk",
"id": 6657270,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/6657270?v=4",
"html_url": "https:\/\/github.com\/bjrjk",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/aronfour\/CVE-2025-2783",
"html_url": "https:\/\/github.com\/bjrjk\/CVE-2025-2783",
"description": " Full-chain exploit for CVE-2025-2783 (Ipcz Sandbox Escape & RCE).",
"fork": false,
"created_at": "2026-04-01T09:33:08Z",
"updated_at": "2026-07-07T12:14:26Z",
"created_at": "2026-05-08T08:57:15Z",
"updated_at": "2026-05-08T08:57:15Z",
"pushed_at": "2026-04-01T10:17:18Z",
"stargazers_count": 20,
"watchers_count": 20,
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 9,
"forks_count": 8,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -93,8 +93,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 20,
"forks": 8,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-29927.json
+33
View File
@@ -4030,5 +4030,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1292519566,
"name": "CVE-2025-29927",
"full_name": "surajpandeyp\/CVE-2025-29927",
"owner": {
"login": "surajpandeyp",
"id": 213995986,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/213995986?v=4",
"html_url": "https:\/\/github.com\/surajpandeyp",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/surajpandeyp\/CVE-2025-29927",
"description": null,
"fork": false,
"created_at": "2026-07-07T15:37:49Z",
"updated_at": "2026-07-07T15:43:02Z",
"pushed_at": "2026-07-07T15:40:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-31258.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔓 Explore CVE-2025-31258 with this PoC demonstrating partial sandbox escape using RemoteViewServices for practical 1-day security practice.",
"fork": false,
"created_at": "2020-06-23T15:20:11Z",
"updated_at": "2026-07-07T10:41:11Z",
"pushed_at": "2026-07-07T10:41:04Z",
"updated_at": "2026-07-07T16:33:42Z",
"pushed_at": "2026-07-07T16:33:19Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-32463.json
+6 -6
View File
@@ -14,10 +14,10 @@
"description": "Escalation of Privilege to the root through sudo binary with chroot option. CVE-2025-32463",
"fork": false,
"created_at": "2025-07-01T11:26:15Z",
"updated_at": "2026-07-07T09:44:43Z",
"updated_at": "2026-07-07T16:56:05Z",
"pushed_at": "2025-11-19T13:30:29Z",
"stargazers_count": 526,
"watchers_count": 526,
"stargazers_count": 527,
"watchers_count": 527,
"has_discussions": false,
"forks_count": 96,
"allow_forking": true,
@@ -46,7 +46,7 @@
],
"visibility": "public",
"forks": 96,
"watchers": 526,
"watchers": 527,
"score": 0,
"subscribers_count": 2
},
@@ -1562,8 +1562,8 @@
"description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.",
"fork": false,
"created_at": "2025-09-20T00:42:07Z",
"updated_at": "2026-07-07T10:42:15Z",
"pushed_at": "2026-07-07T10:42:07Z",
"updated_at": "2026-07-07T16:34:35Z",
"pushed_at": "2026-07-07T16:34:19Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-33073.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "PoC Exploit for the NTLM reflection SMB flaw.",
"fork": false,
"created_at": "2025-06-13T12:15:14Z",
"updated_at": "2026-07-07T09:44:34Z",
"updated_at": "2026-07-07T18:14:37Z",
"pushed_at": "2026-02-18T09:15:40Z",
"stargazers_count": 707,
"watchers_count": 707,
"stargazers_count": 706,
"watchers_count": 706,
"has_discussions": false,
"forks_count": 135,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 135,
"watchers": 707,
"watchers": 706,
"score": 0,
"subscribers_count": 5
},
2025/CVE-2025-36911.json
+41 -8
View File
@@ -152,10 +152,10 @@
"description": "WhisperPair (CVE-2025-36911) POC for ESP32 device ",
"fork": false,
"created_at": "2026-01-20T05:50:37Z",
"updated_at": "2026-05-27T13:45:26Z",
"updated_at": "2026-07-07T16:52:05Z",
"pushed_at": "2026-01-31T03:16:06Z",
"stargazers_count": 9,
"watchers_count": 9,
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -173,7 +173,7 @@
],
"visibility": "public",
"forks": 2,
"watchers": 9,
"watchers": 10,
"score": 0,
"subscribers_count": 0
},
@@ -327,10 +327,10 @@
"description": "The official reference implementation & vulnerability verification of our attack WhisperPair (CVE-2025-36911) which affects Google's Fast Pair protocol.",
"fork": false,
"created_at": "2026-03-30T15:29:04Z",
"updated_at": "2026-07-03T06:17:36Z",
"updated_at": "2026-07-07T18:34:19Z",
"pushed_at": "2026-05-28T14:44:51Z",
"stargazers_count": 66,
"watchers_count": 66,
"stargazers_count": 68,
"watchers_count": 68,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -346,8 +346,41 @@
],
"visibility": "public",
"forks": 9,
"watchers": 66,
"watchers": 68,
"score": 0,
"subscribers_count": 2
},
{
"id": 1292552968,
"name": "Whisper_Bully",
"full_name": "Ymsniper\/Whisper_Bully",
"owner": {
"login": "Ymsniper",
"id": 190832399,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/190832399?v=4",
"html_url": "https:\/\/github.com\/Ymsniper",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Ymsniper\/Whisper_Bully",
"description": "Two-stage Bluetooth DoS attack on Fast Pair devices via CVE-2025-36911",
"fork": false,
"created_at": "2026-07-07T16:09:58Z",
"updated_at": "2026-07-07T18:49:16Z",
"pushed_at": "2026-07-07T18:49:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-38352.json
+8 -8
View File
@@ -14,10 +14,10 @@
"description": "This is a proof of concept for CVE-2025-38352, a vulnerability in the Linux kernel's POSIX CPU timers implementation. The September 2025 Android Bulletin mentions that this vulnerability has been used in limited, targeted exploitation in the wild.",
"fork": false,
"created_at": "2025-12-21T23:59:18Z",
"updated_at": "2026-07-07T09:46:59Z",
"updated_at": "2026-07-07T18:18:24Z",
"pushed_at": "2026-01-05T15:41:23Z",
"stargazers_count": 114,
"watchers_count": 114,
"stargazers_count": 113,
"watchers_count": 113,
"has_discussions": false,
"forks_count": 11,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 11,
"watchers": 114,
"watchers": 113,
"score": 0,
"subscribers_count": 1
},
@@ -47,10 +47,10 @@
"description": "Android kernel exploit for CVE-2025-38352, previously exploited in-the-wild. Targets vulnerable x86_64 Linux kernels v5.10.x.",
"fork": false,
"created_at": "2026-01-03T16:52:18Z",
"updated_at": "2026-07-07T03:14:12Z",
"updated_at": "2026-07-07T18:18:25Z",
"pushed_at": "2026-01-05T03:45:37Z",
"stargazers_count": 308,
"watchers_count": 308,
"stargazers_count": 307,
"watchers_count": 307,
"has_discussions": false,
"forks_count": 48,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 48,
"watchers": 308,
"watchers": 307,
"score": 0,
"subscribers_count": 2
},
2025/CVE-2025-49844.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.",
"fork": false,
"created_at": "2019-04-13T07:51:09Z",
"updated_at": "2026-07-07T10:55:00Z",
"pushed_at": "2026-07-07T10:54:52Z",
"updated_at": "2026-07-07T16:48:39Z",
"pushed_at": "2026-07-07T16:48:34Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
"fork": false,
"created_at": "2022-04-06T09:27:39Z",
"updated_at": "2026-07-07T10:55:28Z",
"pushed_at": "2026-07-07T10:55:22Z",
"updated_at": "2026-07-07T16:49:30Z",
"pushed_at": "2026-07-07T16:49:26Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-54068.json
+33
View File
@@ -173,5 +173,38 @@
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
{
"id": 1291438622,
"name": "recon-test-livewire",
"full_name": "luisdalmolin\/recon-test-livewire",
"owner": {
"login": "luisdalmolin",
"id": 403446,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/403446?v=4",
"html_url": "https:\/\/github.com\/luisdalmolin",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/luisdalmolin\/recon-test-livewire",
"description": "Test target: fresh Laravel 12 app with Livewire pinned to vulnerable 3.6.3 (CVE-2025-54068) for recon scanning",
"fork": false,
"created_at": "2026-07-06T19:59:02Z",
"updated_at": "2026-07-07T16:45:48Z",
"pushed_at": "2026-07-07T16:50:36Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-5419.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": "An uninitialized read vulnerability by incorrect Turboshaft Store-Store Elimination in V8.",
"fork": false,
"created_at": "2026-01-29T06:48:14Z",
"updated_at": "2026-07-06T13:48:25Z",
"updated_at": "2026-07-07T18:14:42Z",
"pushed_at": "2026-01-29T07:53:14Z",
"stargazers_count": 31,
"watchers_count": 31,
"stargazers_count": 30,
"watchers_count": 30,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 31,
"watchers": 30,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-54424.json
+2 -2
View File
@@ -53,8 +53,8 @@
"description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐",
"fork": false,
"created_at": "2025-08-14T05:16:16Z",
"updated_at": "2026-07-07T10:37:07Z",
"pushed_at": "2026-07-07T10:37:02Z",
"updated_at": "2026-07-07T16:29:33Z",
"pushed_at": "2026-07-07T16:28:43Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2025/CVE-2025-55182.json
+18 -18
View File
@@ -14,8 +14,8 @@
"description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.",
"fork": false,
"created_at": "2022-06-17T10:19:10Z",
"updated_at": "2026-07-07T11:15:53Z",
"pushed_at": "2026-07-07T11:15:46Z",
"updated_at": "2026-07-07T17:13:02Z",
"pushed_at": "2026-07-07T17:11:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -99,8 +99,8 @@
"description": null,
"fork": false,
"created_at": "2024-11-29T12:32:19Z",
"updated_at": "2026-07-07T11:16:34Z",
"pushed_at": "2026-07-07T11:16:17Z",
"updated_at": "2026-07-07T17:12:55Z",
"pushed_at": "2026-07-07T17:12:31Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -148,8 +148,8 @@
"description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
"fork": false,
"created_at": "2025-06-06T16:34:46Z",
"updated_at": "2026-07-07T11:16:14Z",
"pushed_at": "2026-07-07T11:16:07Z",
"updated_at": "2026-07-07T17:13:02Z",
"pushed_at": "2026-07-07T17:12:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -871,10 +871,10 @@
"description": "High Fidelity Detection Mechanism for RSC\/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)",
"fork": false,
"created_at": "2025-12-04T06:55:04Z",
"updated_at": "2026-07-07T09:46:39Z",
"updated_at": "2026-07-07T13:04:15Z",
"pushed_at": "2025-12-07T04:16:46Z",
"stargazers_count": 2450,
"watchers_count": 2450,
"stargazers_count": 2451,
"watchers_count": 2451,
"has_discussions": false,
"forks_count": 269,
"allow_forking": true,
@@ -885,7 +885,7 @@
"topics": [],
"visibility": "public",
"forks": 269,
"watchers": 2450,
"watchers": 2451,
"score": 0,
"subscribers_count": 11
},
@@ -9629,10 +9629,10 @@
"description": "Advanced Exploitation Toolkit for Next.js Server Actions (CVE-2025-55182)",
"fork": false,
"created_at": "2025-12-12T11:31:45Z",
"updated_at": "2026-06-28T19:53:26Z",
"updated_at": "2026-07-07T13:43:30Z",
"pushed_at": "2025-12-12T11:52:59Z",
"stargazers_count": 46,
"watchers_count": 46,
"stargazers_count": 47,
"watchers_count": 47,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -9651,7 +9651,7 @@
],
"visibility": "public",
"forks": 5,
"watchers": 46,
"watchers": 47,
"score": 0,
"subscribers_count": 0
},
@@ -11705,8 +11705,8 @@
"description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.",
"fork": false,
"created_at": "2025-12-24T14:48:19Z",
"updated_at": "2026-07-07T11:15:46Z",
"pushed_at": "2026-07-07T11:15:39Z",
"updated_at": "2026-07-07T17:12:23Z",
"pushed_at": "2026-07-07T17:11:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12223,8 +12223,8 @@
"description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
"fork": false,
"created_at": "2026-01-02T01:28:57Z",
"updated_at": "2026-07-07T11:19:54Z",
"pushed_at": "2026-07-07T11:19:46Z",
"updated_at": "2026-07-07T17:16:50Z",
"pushed_at": "2026-07-07T17:16:17Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-57819.json
+4 -4
View File
@@ -191,10 +191,10 @@
"description": null,
"fork": false,
"created_at": "2025-09-08T15:28:14Z",
"updated_at": "2026-07-07T09:45:27Z",
"updated_at": "2026-07-07T13:25:06Z",
"pushed_at": "2025-09-08T15:31:22Z",
"stargazers_count": 25,
"watchers_count": 25,
"stargazers_count": 26,
"watchers_count": 26,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -205,7 +205,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 25,
"watchers": 26,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-63353.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "A vulnerability in fiberhome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password (WPA\/WPA2 pre-shared key) to be predicted from the SSID",
"fork": false,
"created_at": "2025-11-04T18:54:13Z",
"updated_at": "2026-05-31T08:57:34Z",
"updated_at": "2026-07-07T14:20:09Z",
"pushed_at": "2025-11-06T10:50:49Z",
"stargazers_count": 8,
"watchers_count": 8,
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 8,
"watchers": 9,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-64459.json
+33
View File
@@ -269,5 +269,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1292469075,
"name": "RedTeamBrasil-CVE-2025-64459",
"full_name": "rafaelchriss\/RedTeamBrasil-CVE-2025-64459",
"owner": {
"login": "rafaelchriss",
"id": 86614504,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/86614504?v=4",
"html_url": "https:\/\/github.com\/rafaelchriss",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/rafaelchriss\/RedTeamBrasil-CVE-2025-64459",
"description": "NEO-SQLi — exploit Django _connector SQL Injection (CVE-2025-64459) | canal RedTeam Brasil",
"fork": false,
"created_at": "2026-07-07T14:50:14Z",
"updated_at": "2026-07-07T15:12:28Z",
"pushed_at": "2026-07-07T15:08:46Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-66398.json
+2 -2
View File
@@ -64,8 +64,8 @@
"description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.",
"fork": false,
"created_at": "2026-03-23T09:09:21Z",
"updated_at": "2026-07-07T12:04:12Z",
"pushed_at": "2026-07-07T12:04:02Z",
"updated_at": "2026-07-07T18:05:04Z",
"pushed_at": "2026-07-07T18:04:58Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-66478.json
+6 -6
View File
@@ -14,8 +14,8 @@
"description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.",
"fork": false,
"created_at": "2025-10-01T07:40:09Z",
"updated_at": "2026-07-07T11:17:37Z",
"pushed_at": "2026-07-07T11:16:56Z",
"updated_at": "2026-07-07T17:14:11Z",
"pushed_at": "2026-07-07T17:13:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -129,10 +129,10 @@
"description": "A command-line scanner for batch detection of Next.js application versions and determining if they are affected by CVE-2025-66478 vulnerability.",
"fork": false,
"created_at": "2025-12-04T13:13:33Z",
"updated_at": "2026-07-07T09:46:39Z",
"updated_at": "2026-07-07T17:57:31Z",
"pushed_at": "2025-12-16T03:18:16Z",
"stargazers_count": 429,
"watchers_count": 429,
"stargazers_count": 428,
"watchers_count": 428,
"has_discussions": false,
"forks_count": 84,
"allow_forking": true,
@@ -148,7 +148,7 @@
],
"visibility": "public",
"forks": 84,
"watchers": 429,
"watchers": 428,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-68921.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.",
"fork": false,
"created_at": "2026-01-24T21:00:41Z",
"updated_at": "2026-07-07T11:32:08Z",
"pushed_at": "2026-07-07T11:32:04Z",
"updated_at": "2026-07-07T17:30:07Z",
"pushed_at": "2026-07-07T17:30:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-8088.json
+4 -37
View File
@@ -187,10 +187,10 @@
"description": "Advanced WinRAR Path Traversal Exploit Tool for CVE-2025-8088",
"fork": false,
"created_at": "2025-08-14T00:36:24Z",
"updated_at": "2026-05-10T07:18:05Z",
"updated_at": "2026-07-07T18:14:39Z",
"pushed_at": "2025-08-18T21:16:45Z",
"stargazers_count": 56,
"watchers_count": 56,
"stargazers_count": 55,
"watchers_count": 55,
"has_discussions": false,
"forks_count": 17,
"allow_forking": true,
@@ -211,7 +211,7 @@
],
"visibility": "public",
"forks": 17,
"watchers": 56,
"watchers": 55,
"score": 0,
"subscribers_count": 0
},
@@ -413,39 +413,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1044633767,
"name": "CVE-2025-8088-WinRAR-Startup-PoC",
"full_name": "DeepBlue-dot\/CVE-2025-8088-WinRAR-Startup-PoC",
"owner": {
"login": "DeepBlue-dot",
"id": 126600616,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/126600616?v=4",
"html_url": "https:\/\/github.com\/DeepBlue-dot",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/DeepBlue-dot\/CVE-2025-8088-WinRAR-Startup-PoC",
"description": null,
"fork": false,
"created_at": "2025-08-26T01:43:33Z",
"updated_at": "2025-11-02T20:42:27Z",
"pushed_at": "2025-08-26T01:56:25Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1045090650,
"name": "-CVE-2025-8088",
2026/CVE-2026-14762.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "CVE-2026-14762 exploit for Hotel & Tourism Reservation 1.0. Time-based blind SQL injection via \/admin\/rooms.php?delete. Dumps DB, tables, columns, reads files, writes webshells. Multi-threaded, proxy support, interactive shell. CVSS 7.3. Authorized testing only. By| @tc4dy",
"fork": false,
"created_at": "2026-07-07T12:20:08Z",
"updated_at": "2026-07-07T12:51:22Z",
"pushed_at": "2026-07-07T12:51:06Z",
"updated_at": "2026-07-07T12:58:01Z",
"pushed_at": "2026-07-07T12:57:55Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-20841.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.",
"fork": false,
"created_at": "2024-09-22T12:19:06Z",
"updated_at": "2026-07-07T11:48:29Z",
"pushed_at": "2026-07-07T11:48:11Z",
"updated_at": "2026-07-07T17:47:53Z",
"pushed_at": "2026-07-07T17:47:42Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.",
"fork": false,
"created_at": "2026-02-26T05:21:28Z",
"updated_at": "2026-07-07T11:47:26Z",
"pushed_at": "2026-07-07T11:47:17Z",
"updated_at": "2026-07-07T17:46:58Z",
"pushed_at": "2026-07-07T17:46:46Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-20896.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Public PoC and detector for CVE-2026-20896 (\"Gitea Docker: One Header, Any User\")",
"fork": false,
"created_at": "2026-07-05T17:35:09Z",
"updated_at": "2026-07-07T00:18:33Z",
"updated_at": "2026-07-07T17:17:36Z",
"pushed_at": "2026-07-05T17:35:12Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-20980.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Poc for CVE-2026-20980, CVE-2026-20981, CVE-2026-20982",
"fork": false,
"created_at": "2026-06-01T13:14:47Z",
"updated_at": "2026-07-05T22:54:14Z",
"updated_at": "2026-07-07T17:14:39Z",
"pushed_at": "2026-06-01T17:42:26Z",
"stargazers_count": 32,
"watchers_count": 32,
"stargazers_count": 33,
"watchers_count": 33,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 7,
"watchers": 32,
"watchers": 33,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-23697.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1292567350,
"name": "VTIGER-CRM-RCE-CVE-2026-23697",
"full_name": "JivaSecurity\/VTIGER-CRM-RCE-CVE-2026-23697",
"owner": {
"login": "JivaSecurity",
"id": 266059132,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/266059132?v=4",
"html_url": "https:\/\/github.com\/JivaSecurity",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/JivaSecurity\/VTIGER-CRM-RCE-CVE-2026-23697",
"description": "Vtiger CRM 8.3.0 Authenticated RCE via .phar Upload",
"fork": false,
"created_at": "2026-07-07T16:26:04Z",
"updated_at": "2026-07-07T16:26:33Z",
"pushed_at": "2026-07-07T16:26:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-23698.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1292569065,
"name": "VTIGER-CRM-RCE-CVE-2026-23698",
"full_name": "JivaSecurity\/VTIGER-CRM-RCE-CVE-2026-23698",
"owner": {
"login": "JivaSecurity",
"id": 266059132,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/266059132?v=4",
"html_url": "https:\/\/github.com\/JivaSecurity",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/JivaSecurity\/VTIGER-CRM-RCE-CVE-2026-23698",
"description": "Vtiger CRM 8.3.0, 8.4.0 Module Import Authenticated RCE PoC",
"fork": false,
"created_at": "2026-07-07T16:27:55Z",
"updated_at": "2026-07-07T16:29:12Z",
"pushed_at": "2026-07-07T16:28:04Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-24061.json
+2 -2
View File
@@ -59,8 +59,8 @@
"description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.",
"fork": false,
"created_at": "2026-02-03T19:46:10Z",
"updated_at": "2026-07-07T11:37:51Z",
"pushed_at": "2026-07-07T11:37:48Z",
"updated_at": "2026-07-07T17:36:28Z",
"pushed_at": "2026-07-07T17:36:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24291.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions",
"fork": false,
"created_at": "2026-03-26T04:38:27Z",
"updated_at": "2026-07-07T12:06:01Z",
"pushed_at": "2026-07-07T12:05:49Z",
"updated_at": "2026-07-07T18:07:16Z",
"pushed_at": "2026-07-07T18:07:09Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-2441.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.",
"fork": false,
"created_at": "2026-03-03T14:19:18Z",
"updated_at": "2026-07-07T11:50:35Z",
"pushed_at": "2026-07-07T11:50:30Z",
"updated_at": "2026-07-07T17:50:26Z",
"pushed_at": "2026-07-07T17:50:14Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-2472.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.",
"fork": false,
"created_at": "2026-03-10T14:40:04Z",
"updated_at": "2026-07-07T11:55:51Z",
"pushed_at": "2026-07-07T11:55:46Z",
"updated_at": "2026-07-07T17:55:30Z",
"pushed_at": "2026-07-07T17:55:24Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-25262.json
+3 -3
View File
@@ -11,11 +11,11 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/shurikgo\/cve-2026-25262-sm8450-research",
"description": "Experimental verification of CVE-2026-25262 (Write-What-Where in Sahara protocol) on SM8450 platform, enabling Firehose authentication bypass without server-side token.",
"description": ".",
"fork": false,
"created_at": "2026-07-07T04:29:43Z",
"updated_at": "2026-07-07T05:41:57Z",
"pushed_at": "2026-07-07T05:31:43Z",
"updated_at": "2026-07-07T15:26:22Z",
"pushed_at": "2026-07-07T15:23:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-27771.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "CVE-2026-27771 - Gitea\/Forgejo Container Registry Auth Bypass Exploit PoC - Pull private container images without authentication",
"fork": false,
"created_at": "2026-05-27T15:54:41Z",
"updated_at": "2026-07-07T09:50:35Z",
"updated_at": "2026-07-07T15:59:34Z",
"pushed_at": "2026-05-27T15:56:01Z",
"stargazers_count": 15,
"watchers_count": 15,
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -70,7 +70,7 @@
],
"visibility": "public",
"forks": 6,
"watchers": 15,
"watchers": 16,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-31431.json
+4 -37
View File
@@ -651,8 +651,8 @@
"description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.",
"fork": false,
"created_at": "2026-05-05T04:58:21Z",
"updated_at": "2026-07-07T12:26:26Z",
"pushed_at": "2026-07-07T12:26:07Z",
"updated_at": "2026-07-07T18:28:12Z",
"pushed_at": "2026-07-07T18:28:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -700,8 +700,8 @@
"description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.",
"fork": false,
"created_at": "2026-05-06T09:49:14Z",
"updated_at": "2026-07-07T12:27:02Z",
"pushed_at": "2026-07-07T12:26:46Z",
"updated_at": "2026-07-07T18:28:59Z",
"pushed_at": "2026-07-07T18:28:51Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
@@ -922,39 +922,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1233944093,
"name": "CVE-2026-31431-check",
"full_name": "haydenjames\/CVE-2026-31431-check",
"owner": {
"login": "haydenjames",
"id": 6467408,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/6467408?v=4",
"html_url": "https:\/\/github.com\/haydenjames",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/haydenjames\/CVE-2026-31431-check",
"description": "Read-only checker for CVE-2026-31431 (algif_aead local root). Reports kernel\/module state and suggests mitigations.",
"fork": false,
"created_at": "2026-05-09T14:47:57Z",
"updated_at": "2026-06-05T15:57:11Z",
"pushed_at": "2026-05-12T15:20:29Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"score": 0,
"subscribers_count": 1
},
{
"id": 1234358906,
"name": "copyfail2_electric_boogaloo_fix",
2026/CVE-2026-31802.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"fork": false,
"created_at": "2026-03-28T20:49:46Z",
"updated_at": "2026-07-07T12:07:17Z",
"pushed_at": "2026-07-07T12:07:03Z",
"updated_at": "2026-07-07T18:08:25Z",
"pushed_at": "2026-07-07T18:08:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-33320.json
+33
View File
@@ -97,5 +97,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1292464475,
"name": "dasel-cve-exercise",
"full_name": "Omer-Asher\/dasel-cve-exercise",
"owner": {
"login": "Omer-Asher",
"id": 74260959,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74260959?v=4",
"html_url": "https:\/\/github.com\/Omer-Asher",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Omer-Asher\/dasel-cve-exercise",
"description": "Melange packaging and apko image for Dasel v3.3.1 with a backported fix for CVE-2026-33320.",
"fork": false,
"created_at": "2026-07-07T14:46:16Z",
"updated_at": "2026-07-07T14:50:21Z",
"pushed_at": "2026-07-07T14:48:03Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-33454.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "Reproducer for CVE-2026-33454: Apache Camel camel-mail header injection to RCE via camel-exec",
"fork": false,
"created_at": "2026-07-06T12:56:08Z",
"updated_at": "2026-07-06T12:56:26Z",
"updated_at": "2026-07-07T12:56:21Z",
"pushed_at": "2026-07-06T12:56:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-40369.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browsers render process sandbox",
"fork": false,
"created_at": "2026-05-13T20:56:15Z",
"updated_at": "2026-07-07T09:50:22Z",
"updated_at": "2026-07-07T16:34:46Z",
"pushed_at": "2026-05-18T21:29:59Z",
"stargazers_count": 253,
"watchers_count": 253,
"stargazers_count": 254,
"watchers_count": 254,
"has_discussions": false,
"forks_count": 55,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 55,
"watchers": 253,
"watchers": 254,
"score": 0,
"subscribers_count": 5
},
2026/CVE-2026-40519.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🐳 docker-compose 를 활용한 취약한 환경 구성 및 검증 (vulhub 한글판)",
"fork": false,
"created_at": "2026-07-07T05:29:00Z",
"updated_at": "2026-07-07T05:46:35Z",
"pushed_at": "2026-07-07T05:46:32Z",
"updated_at": "2026-07-07T13:37:08Z",
"pushed_at": "2026-07-07T13:36:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-41940.json
+2 -2
View File
@@ -258,8 +258,8 @@
"description": "Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.",
"fork": false,
"created_at": "2026-05-06T18:08:48Z",
"updated_at": "2026-07-07T12:27:14Z",
"pushed_at": "2026-07-07T12:27:03Z",
"updated_at": "2026-07-07T18:29:18Z",
"pushed_at": "2026-07-07T18:29:13Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-42945.json
+6 -6
View File
@@ -14,10 +14,10 @@
"description": "exploit for CVE-2026-42945",
"fork": false,
"created_at": "2026-05-12T23:05:32Z",
"updated_at": "2026-07-07T09:50:21Z",
"updated_at": "2026-07-07T18:14:46Z",
"pushed_at": "2026-05-13T18:40:57Z",
"stargazers_count": 871,
"watchers_count": 871,
"stargazers_count": 870,
"watchers_count": 870,
"has_discussions": false,
"forks_count": 162,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 162,
"watchers": 871,
"watchers": 870,
"score": 0,
"subscribers_count": 6
},
@@ -283,7 +283,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -291,7 +291,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"forks": 2,
"watchers": 0,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-43499.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-43499 PoC",
"fork": false,
"created_at": "2026-06-27T04:09:11Z",
"updated_at": "2026-07-06T12:04:54Z",
"updated_at": "2026-07-07T18:14:47Z",
"pushed_at": "2026-06-27T05:04:04Z",
"stargazers_count": 8,
"watchers_count": 8,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 8,
"watchers": 7,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-45585.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Manage and recover BitLocker encrypted drives with this tool for Windows 11 recovery key management and educational study of CVE-2026-45585.",
"fork": false,
"created_at": "2026-06-16T07:21:36Z",
"updated_at": "2026-07-07T12:33:58Z",
"pushed_at": "2026-07-07T12:33:53Z",
"updated_at": "2026-07-07T18:36:24Z",
"pushed_at": "2026-07-07T18:36:08Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-48282.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": null,
"fork": false,
"created_at": "2026-07-06T12:57:37Z",
"updated_at": "2026-07-06T23:14:38Z",
"pushed_at": "2026-07-06T14:21:11Z",
"updated_at": "2026-07-07T14:29:39Z",
"pushed_at": "2026-07-07T14:28:17Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-48611.json
+33
View File
@@ -64,5 +64,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1292463164,
"name": "CVE-2026-48611-phpBB",
"full_name": "wanmywan\/CVE-2026-48611-phpBB",
"owner": {
"login": "wanmywan",
"id": 123906629,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123906629?v=4",
"html_url": "https:\/\/github.com\/wanmywan",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/wanmywan\/CVE-2026-48611-phpBB",
"description": "Bypass Authentication",
"fork": false,
"created_at": "2026-07-07T14:45:09Z",
"updated_at": "2026-07-07T14:52:09Z",
"pushed_at": "2026-07-07T14:52:04Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-57851.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1279696470,
"name": "MSI_FeatureManager_CVE",
"full_name": "readmsr\/MSI_FeatureManager_CVE",
"owner": {
"login": "readmsr",
"id": 71979222,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71979222?v=4",
"html_url": "https:\/\/github.com\/readmsr",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/readmsr\/MSI_FeatureManager_CVE",
"description": "CVE-2026-57851",
"fork": false,
"created_at": "2026-06-24T23:57:57Z",
"updated_at": "2026-07-07T17:20:04Z",
"pushed_at": "2026-06-25T09:38:19Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
README.md
+72 -17
View File
@@ -1493,6 +1493,20 @@
- [yoyosh/DarkReplica](https://github.com/yoyosh/DarkReplica)
- [HORKimhab/CVE-2026-23631](https://github.com/HORKimhab/CVE-2026-23631)
### CVE-2026-23697 (2026-07-07)
<code>Vtiger CRM before 8.4.0 contains an authenticated file upload vulnerability that allows low-privileged users to achieve remote code execution by uploading a .phar file containing arbitrary PHP code through the Documents module, bypassing the extension denylist in config.inc.php which omits the .phar extension. The uploaded file is stored with its original .phar extension under the web-accessible storage directory, and a misconfigured .htaccess using Apache 2.2 syntax is silently ignored on Apache 2.4 deployments, allowing unauthenticated HTTP requests to directly execute the uploaded PHP payload.
</code>
- [JivaSecurity/VTIGER-CRM-RCE-CVE-2026-23697](https://github.com/JivaSecurity/VTIGER-CRM-RCE-CVE-2026-23697)
### CVE-2026-23698 (2026-07-07)
<code>Vtiger CRM through 8.4.0 contains an authenticated remote code execution vulnerability in the admin module import feature that allows administrator-level attackers to upload arbitrary PHP files by submitting a crafted zip archive through the ModuleManager import function, which extracts contents directly into the modules/ directory under the web root without validating file types beyond the manifest.xml descriptor. Attackers can place executable PHP files in the modules/ directory that become directly accessible via HTTP, bypassing Vtiger's authentication and authorization layer entirely since Apache resolves the path and invokes the PHP interpreter before the application routing layer is involved, resulting in a persistent web shell independent of the originating session.
</code>
- [JivaSecurity/VTIGER-CRM-RCE-CVE-2026-23698](https://github.com/JivaSecurity/VTIGER-CRM-RCE-CVE-2026-23698)
### CVE-2026-23744 (2026-01-16)
<code>MCPJam inspector is the local-first development platform for MCP servers. Versions 1.4.2 and earlier are vulnerable to remote code execution (RCE) vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. Since MCPJam inspector by default listens on 0.0.0.0 instead of 127.0.0.1, an attacker can trigger the RCE remotely via a simple HTTP request. Version 1.4.3 contains a patch.
@@ -2024,7 +2038,6 @@
- [krisiasty/vcheck](https://github.com/krisiasty/vcheck)
- [Hunt-Benito/copy-fail-cve-2026-31431-linux-kernel-page-cache-lpe](https://github.com/Hunt-Benito/copy-fail-cve-2026-31431-linux-kernel-page-cache-lpe)
- [Helios973/CVE-2026-31431_exp.c](https://github.com/Helios973/CVE-2026-31431_exp.c)
- [haydenjames/CVE-2026-31431-check](https://github.com/haydenjames/CVE-2026-31431-check)
- [vorkampfer/copyfail2_electric_boogaloo_fix](https://github.com/vorkampfer/copyfail2_electric_boogaloo_fix)
- [Lutfifakee-Project/CVE-2026-31431](https://github.com/Lutfifakee-Project/CVE-2026-31431)
- [mauricioportela/CVE-2026-31431-Analysis](https://github.com/mauricioportela/CVE-2026-31431-Analysis)
@@ -2173,6 +2186,7 @@
- [nedlir/dasel-hardened-container](https://github.com/nedlir/dasel-hardened-container)
- [rotavori/dasel-melange-apko](https://github.com/rotavori/dasel-melange-apko)
- [GonSarrabia/Minimus-Junior-Backend-Exercise](https://github.com/GonSarrabia/Minimus-Junior-Backend-Exercise)
- [Omer-Asher/dasel-cve-exercise](https://github.com/Omer-Asher/dasel-cve-exercise)
### CVE-2026-33453 (2026-04-27)
@@ -3766,6 +3780,7 @@
- [citruscitruscitruscitruscitrusci/CVE-2026-48611-poc](https://github.com/citruscitruscitruscitruscitrusci/CVE-2026-48611-poc)
- [Diznev/CVE-2026-48611-EXPLOIT](https://github.com/Diznev/CVE-2026-48611-EXPLOIT)
- [wanmywan/CVE-2026-48611-phpBB](https://github.com/wanmywan/CVE-2026-48611-phpBB)
### CVE-2026-48710 (2026-05-26)
@@ -4376,6 +4391,13 @@
- [shinthink/CVE-2026-57517](https://github.com/shinthink/CVE-2026-57517)
### CVE-2026-57851 (2026-07-07)
<code>MSI Feature Manager contains a local privilege escalation vulnerability in the KernCoreLib64.sys kernel driver that allows any locally logged-on user to perform arbitrary physical memory read/write and unrestricted I/O port operations by accessing exposed IOCTL handlers without administrator privileges. Attackers can exploit the accessible device object through IOCTL handlers to manipulate kernel objects, tamper with kernel-mode callbacks, bypass Protected Process Light protections, and disable security software.
</code>
- [readmsr/MSI_FeatureManager_CVE](https://github.com/readmsr/MSI_FeatureManager_CVE)
### CVE-2026-58116 (2026-06-30)
<code>LLaMA-Factory through 0.9.5 contains a remote code execution vulnerability that allows attackers with WebUI access to execute arbitrary Python code by supplying a malicious model path in the Chat or Training interfaces. The application passes user-supplied model path input unvalidated into AutoTokenizer.from_pretrained() and AutoModel.from_pretrained() with a hardcoded trust_remote_code=True parameter, causing the Hugging Face transformers library to fetch and execute arbitrary code from a remote or local model repository with the privileges of the server process.
@@ -4963,7 +4985,7 @@
- [Alchemist3dot14/CVE-2025-2783](https://github.com/Alchemist3dot14/CVE-2025-2783)
- [byteReaper77/CVE-2025-2783](https://github.com/byteReaper77/CVE-2025-2783)
- [aronfour/CVE-2025-2783](https://github.com/aronfour/CVE-2025-2783)
- [bjrjk/CVE-2025-2783](https://github.com/bjrjk/CVE-2025-2783)
- [ElianGonzi00/CVE-2025-2783](https://github.com/ElianGonzi00/CVE-2025-2783)
### CVE-2025-2807 (2025-04-08)
@@ -6232,7 +6254,6 @@
- [nhattanhh/CVE-2025-8088](https://github.com/nhattanhh/CVE-2025-8088)
- [Syrins/CVE-2025-8088-Winrar-Tool-Gui](https://github.com/Syrins/CVE-2025-8088-Winrar-Tool-Gui)
- [ghostn4444/CVE-2025-8088](https://github.com/ghostn4444/CVE-2025-8088)
- [DeepBlue-dot/CVE-2025-8088-WinRAR-Startup-PoC](https://github.com/DeepBlue-dot/CVE-2025-8088-WinRAR-Startup-PoC)
- [pescada-dev/-CVE-2025-8088](https://github.com/pescada-dev/-CVE-2025-8088)
- [AdityaBhatt3010/CVE-2025-8088-WinRAR-Zero-Day-Path-Traversal](https://github.com/AdityaBhatt3010/CVE-2025-8088-WinRAR-Zero-Day-Path-Traversal)
- [pentestfunctions/best-CVE-2025-8088](https://github.com/pentestfunctions/best-CVE-2025-8088)
@@ -9408,6 +9429,7 @@
- [gitgudKrish/cve-2025-29927-nextjs](https://github.com/gitgudKrish/cve-2025-29927-nextjs)
- [SwapnilDeshpande/cve-2025-29927-lab](https://github.com/SwapnilDeshpande/cve-2025-29927-lab)
- [Fomovet/cve-2025-29927](https://github.com/Fomovet/cve-2025-29927)
- [surajpandeyp/CVE-2025-29927](https://github.com/surajpandeyp/CVE-2025-29927)
### CVE-2025-29943 (2026-01-16)
@@ -10339,6 +10361,7 @@
- [PentHertz/CVE-2025-36911-exploit](https://github.com/PentHertz/CVE-2025-36911-exploit)
- [Athexblackhat/BLUE-SPY](https://github.com/Athexblackhat/BLUE-SPY)
- [KULeuven-COSIC/WhisperPair](https://github.com/KULeuven-COSIC/WhisperPair)
- [Ymsniper/Whisper_Bully](https://github.com/Ymsniper/Whisper_Bully)
### CVE-2025-37164 (2025-12-16)
@@ -12490,6 +12513,7 @@
- [flame-11/CVE-2025-54068-livewire](https://github.com/flame-11/CVE-2025-54068-livewire)
- [haxorstars/CVE-2025-54068](https://github.com/haxorstars/CVE-2025-54068)
- [HelgeSverre/livewire-honeypot](https://github.com/HelgeSverre/livewire-honeypot)
- [luisdalmolin/recon-test-livewire](https://github.com/luisdalmolin/recon-test-livewire)
### CVE-2025-54100 (2025-12-09)
@@ -14715,6 +14739,7 @@
- [alxsourin/Helpdesk-Telecom-CVE-2025-64459](https://github.com/alxsourin/Helpdesk-Telecom-CVE-2025-64459)
- [purehate/CVE-2025-64459-hunter](https://github.com/purehate/CVE-2025-64459-hunter)
- [joshualent/django-cve-2025-64459](https://github.com/joshualent/django-cve-2025-64459)
- [rafaelchriss/RedTeamBrasil-CVE-2025-64459](https://github.com/rafaelchriss/RedTeamBrasil-CVE-2025-64459)
### CVE-2025-64495 (2025-11-08)
@@ -27195,6 +27220,20 @@
- [ASkyeye/CVE-2023-0045](https://github.com/ASkyeye/CVE-2023-0045)
- [es0j/CVE-2023-0045](https://github.com/es0j/CVE-2023-0045)
### CVE-2023-0089 (2023-03-08)
<code>\nThe webutils in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows an authenticated user to execute remote code through 'eval injection'.\n\nThis affects all versions 8.20.0 and below. \n\n\n\n\n\n
</code>
- [ly1g3/proofpoint-CVE-2023-0089](https://github.com/ly1g3/proofpoint-CVE-2023-0089)
### CVE-2023-0090 (2023-03-08)
<code>The webservices in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows for an anonymous user to execute remote code through 'eval injection'. Exploitation requires network access to the webservices API, but such access is a non-standard configuration. This affects all versions 8.20.0 and below.\n\n
</code>
- [ly1g3/proofpoint-CVE-2023-0090](https://github.com/ly1g3/proofpoint-CVE-2023-0090)
### CVE-2023-0099 (2023-02-13)
<code>The Simple URLs WordPress plugin before 115 does not sanitise and escape some parameters before outputting them back in some pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
@@ -28338,6 +28377,13 @@
- [B4ntGrim/Vuln_Exploitation_MegaQuagga_Pentest](https://github.com/B4ntGrim/Vuln_Exploitation_MegaQuagga_Pentest)
### CVE-2023-4861 (2023-10-16)
<code>The File Manager Pro WordPress plugin before 1.8.1 allows admin users to upload arbitrary files, even in environments where such a user should not be able to gain full control of the server, such as a multisite installation. This leads to remote code execution.
</code>
- [nomaisthere/CVE-2023-4861-PoC](https://github.com/nomaisthere/CVE-2023-4861-PoC)
### CVE-2023-4863 (2023-09-12)
<code>Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)
@@ -28811,7 +28857,6 @@
<code>In Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK) wurde eine Schwachstelle ausgemacht. Sie wurde als kritisch eingestuft. Hierbei betrifft es unbekannten Programmcode der Datei /php/ping.php. Mittels Manipulieren des Arguments jsondata[ip] mit der Eingabe netstat -ano mit unbekannten Daten kann eine os command injection-Schwachstelle ausgenutzt werden. Der Exploit steht zur öffentlichen Verfügung. Ein Aktualisieren auf die Version 4.1.0 vermag dieses Problem zu lösen. Als bestmögliche Massnahme wird das Einspielen eines Upgrades empfohlen.
</code>
- [FuBoLuSec/CVE-2023-6895](https://github.com/FuBoLuSec/CVE-2023-6895)
- [nles-crt/CVE-2023-6895](https://github.com/nles-crt/CVE-2023-6895)
### CVE-2023-6931 (2023-12-19)
@@ -28890,6 +28935,13 @@
- [zerozenxlabs/CVE-2023-7261](https://github.com/zerozenxlabs/CVE-2023-7261)
### CVE-2023-20009 (2023-02-16)
<code>A vulnerability in the Web UI and administrative CLI of the Cisco Secure Email Gateway (ESA) and Cisco Secure Email and Web Manager (SMA) could allow an authenticated remote attacker and or authenticated local attacker to escalate their privilege level and gain root access. The attacker has to have a valid user credential with at least a [[privilege of operator - validate actual name]].\r\n\r The vulnerability is due to the processing of a specially crafted SNMP configuration file. An attacker could exploit this vulnerability by authenticating to the targeted device and uploading a specially crafted SNMP configuration file that when uploaded could allow for the execution of commands as root. An exploit could allow the attacker to gain root access on the device.
</code>
- [ly1g3/cisco-CVE-2023-20009](https://github.com/ly1g3/cisco-CVE-2023-20009)
### CVE-2023-20025 (2023-01-19)
<code>A vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, and RV082 Routers could allow an unauthenticated, remote attacker to bypass authentication on an affected device.\r\n\r This vulnerability is due to improper validation of user input within incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to bypass authentication and gain root access on the underlying operating system.
@@ -28922,6 +28974,13 @@
- [RegularITCat/CVE-2023-20073](https://github.com/RegularITCat/CVE-2023-20073)
### CVE-2023-20075 (2023-02-16)
<code>Vulnerability in the CLI of Cisco Secure Email Gateway could allow an authenticated, remote attacker to execute arbitrary commands.\r\n\r These vulnerability is due to improper input validation in the CLI. An attacker could exploit this vulnerability by injecting operating system commands into a legitimate command. A successful exploit could allow the attacker to escape the restricted command prompt and execute arbitrary commands on the underlying operating system. To successfully exploit this vulnerability, an attacker would need valid Administrator credentials.\r\n
</code>
- [ly1g3/cisco-CVE-2023-20075](https://github.com/ly1g3/cisco-CVE-2023-20075)
### CVE-2023-20110 (2023-05-18)
<code>A vulnerability in the web-based management interface of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability exists because the web-based management interface inadequately validates user input. An attacker could exploit this vulnerability by authenticating to the application as a low-privileged user and sending crafted SQL queries to an affected system. A successful exploit could allow the attacker to read sensitive data on the underlying database.
@@ -29041,7 +29100,7 @@
<code>In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07856356 / ALPS07874388 (For MT6880 and MT6890 only); Issue ID: ALPS07856356 / ALPS07874388 (For MT6880 and MT6890 only).
</code>
- [kasnria001/pwnage24mtk](https://github.com/kasnria001/pwnage24mtk)
- [wzy114514sb/pwnage24mtk](https://github.com/wzy114514sb/pwnage24mtk)
### CVE-2023-20860 (2023-03-27)
@@ -29606,10 +29665,8 @@
</code>
- [Avento/CVE-2023-22527_Confluence_RCE](https://github.com/Avento/CVE-2023-22527_Confluence_RCE)
- [Drun1baby/CVE-2023-22527](https://github.com/Drun1baby/CVE-2023-22527)
- [thanhlam-attt/CVE-2023-22527](https://github.com/thanhlam-attt/CVE-2023-22527)
- [Manh130902/CVE-2023-22527-POC](https://github.com/Manh130902/CVE-2023-22527-POC)
- [VNCERT-CC/CVE-2023-22527-confluence](https://github.com/VNCERT-CC/CVE-2023-22527-confluence)
- [Vozec/CVE-2023-22527](https://github.com/Vozec/CVE-2023-22527)
- [C1ph3rX13/CVE-2023-22527](https://github.com/C1ph3rX13/CVE-2023-22527)
- [Niuwoo/CVE-2023-22527](https://github.com/Niuwoo/CVE-2023-22527)
@@ -30855,13 +30912,6 @@
- [ahmetaltuntas/CVE-2023-28467](https://github.com/ahmetaltuntas/CVE-2023-28467)
### CVE-2023-28588 (2023-12-05)
<code>Transient DOS in Bluetooth Host while rfc slot allocation.
</code>
- [uthrasri/CVE-2023-28588_G2.5_singlefile](https://github.com/uthrasri/CVE-2023-28588_G2.5_singlefile)
### CVE-2023-28753 (2023-05-18)
<code>netconsd prior to v0.2 was vulnerable to an integer overflow in its parse_packet function. A malicious individual could leverage this overflow to create heap memory corruption with attacker controlled data.
@@ -31031,7 +31081,6 @@
- [S4muraiMelayu1337/CVE-2023-29489](https://github.com/S4muraiMelayu1337/CVE-2023-29489)
- [SynixCyberCrimeMy/CVE-2023-29489](https://github.com/SynixCyberCrimeMy/CVE-2023-29489)
- [Makurorororororororo/Validate-CVE-2023-29489-scanner-](https://github.com/Makurorororororororo/Validate-CVE-2023-29489-scanner-)
- [prasad-1808/tool-29489](https://github.com/prasad-1808/tool-29489)
- [mdaseem03/cpanel_xss_2023](https://github.com/mdaseem03/cpanel_xss_2023)
- [some-man1/CVE-2023-29489](https://github.com/some-man1/CVE-2023-29489)
- [Cappricio-Securities/CVE-2023-29489](https://github.com/Cappricio-Securities/CVE-2023-29489)
@@ -31441,6 +31490,13 @@
- [Dodge-MPTC/CVE-2023-31445-Unprivileged-Information-Disclosure](https://github.com/Dodge-MPTC/CVE-2023-31445-Unprivileged-Information-Disclosure)
### CVE-2023-31488 (2024-01-10)
<code>Hyland Perceptive Filters releases before 2023-12-08 (e.g., 11.4.0.2647), as used in Cisco IronPort Email Security Appliance Software, Cisco Secure Email Gateway, and various non-Cisco products, allow attackers to trigger a segmentation fault and execute arbitrary code via a crafted document.
</code>
- [ly1g3/cisco-CVE-2023-31488](https://github.com/ly1g3/cisco-CVE-2023-31488)
### CVE-2023-31497 (2023-05-11)
<code>Incorrect access control in Quick Heal Technologies Limited Seqrite Endpoint Security (EPS) all versions prior to v8.0 allows attackers to escalate privileges to root via supplying a crafted binary to the target system.
@@ -34905,7 +34961,6 @@
<code>In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to launch arbitrary activities using system privileges due to Parcel Mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
</code>
- [michalbednarski/TheLastBundleMismatch](https://github.com/michalbednarski/TheLastBundleMismatch)
- [B-D-APL/silver-succotash](https://github.com/B-D-APL/silver-succotash)
### CVE-2023-45779 (2023-12-04)
@@ -43546,6 +43601,7 @@
- [Shashivanth009/CVE-2022-46364---Apache-CXF-XOP-Include-LFI-PoC](https://github.com/Shashivanth009/CVE-2022-46364---Apache-CXF-XOP-Include-LFI-PoC)
- [0xmid00/CVE-2022-46364-poc](https://github.com/0xmid00/CVE-2022-46364-poc)
- [jwsly12/CVE-2022-46364-htb-ctf](https://github.com/jwsly12/CVE-2022-46364-htb-ctf)
- [c0gnit00/CVE-2022-46364](https://github.com/c0gnit00/CVE-2022-46364)
### CVE-2022-46381 (2022-12-13)
@@ -57834,7 +57890,6 @@
- [CaelumIsMe/CVE-2019-9053-POC](https://github.com/CaelumIsMe/CVE-2019-9053-POC)
- [JagdeepSinghCeh/cms-made-simple-python3](https://github.com/JagdeepSinghCeh/cms-made-simple-python3)
- [Perseus99999/CVE-2019-9053-working-](https://github.com/Perseus99999/CVE-2019-9053-working-)
- [Praditha29/Simple-CTF-THM-Writeup](https://github.com/Praditha29/Simple-CTF-THM-Writeup)
- [tim-karov/cmsms-sqli](https://github.com/tim-karov/cmsms-sqli)
- [pasan2002/CVE-2019-9053---CMS-Made-Simple-SQL-Injection-Exploit-Modified-](https://github.com/pasan2002/CVE-2019-9053---CMS-Made-Simple-SQL-Injection-Exploit-Modified-)
- [vadaysakiv/cve-2019-9053](https://github.com/vadaysakiv/cve-2019-9053)