diff --git a/2015/CVE-2015-0057.json b/2015/CVE-2015-0057.json
index a3db1c8eea..bfb6caff2c 100644
--- a/2015/CVE-2015-0057.json
+++ b/2015/CVE-2015-0057.json
@@ -19,7 +19,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
- "forks_count": 7,
+ "forks_count": 8,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 7,
+ "forks": 8,
"watchers": 0,
"score": 0,
"subscribers_count": 0
diff --git a/2015/CVE-2015-1701.json b/2015/CVE-2015-1701.json
index 9ab83cb684..26e01428bb 100644
--- a/2015/CVE-2015-1701.json
+++ b/2015/CVE-2015-1701.json
@@ -19,7 +19,7 @@
"stargazers_count": 293,
"watchers_count": 293,
"has_discussions": false,
- "forks_count": 175,
+ "forks_count": 176,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -30,7 +30,7 @@
"cve-2015-1701"
],
"visibility": "public",
- "forks": 175,
+ "forks": 176,
"watchers": 293,
"score": 0,
"subscribers_count": 0
diff --git a/2015/CVE-2015-5254.json b/2015/CVE-2015-5254.json
index 61af6128c9..54a809aa36 100644
--- a/2015/CVE-2015-5254.json
+++ b/2015/CVE-2015-5254.json
@@ -113,10 +113,10 @@
"description": "Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-42588)",
"fork": false,
"created_at": "2026-04-20T02:38:50Z",
- "updated_at": "2026-07-11T07:48:41Z",
+ "updated_at": "2026-07-13T12:12:28Z",
"pushed_at": "2026-06-27T07:20:35Z",
- "stargazers_count": 79,
- "watchers_count": 79,
+ "stargazers_count": 80,
+ "watchers_count": 80,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
- "watchers": 79,
+ "watchers": 80,
"score": 0,
"subscribers_count": 2
}
diff --git a/2015/CVE-2015-6086.json b/2015/CVE-2015-6086.json
index 2b4f19b2c1..1c2f617ed0 100644
--- a/2015/CVE-2015-6086.json
+++ b/2015/CVE-2015-6086.json
@@ -19,7 +19,7 @@
"stargazers_count": 67,
"watchers_count": 67,
"has_discussions": false,
- "forks_count": 31,
+ "forks_count": 32,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 31,
+ "forks": 32,
"watchers": 67,
"score": 0,
"subscribers_count": 7
diff --git a/2016/CVE-2016-0051.json b/2016/CVE-2016-0051.json
index 4212e6f6d2..b297cd7321 100644
--- a/2016/CVE-2016-0051.json
+++ b/2016/CVE-2016-0051.json
@@ -19,7 +19,7 @@
"stargazers_count": 323,
"watchers_count": 323,
"has_discussions": false,
- "forks_count": 129,
+ "forks_count": 130,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 129,
+ "forks": 130,
"watchers": 323,
"score": 0,
"subscribers_count": 22
@@ -52,7 +52,7 @@
"stargazers_count": 42,
"watchers_count": 42,
"has_discussions": false,
- "forks_count": 12,
+ "forks_count": 13,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 12,
+ "forks": 13,
"watchers": 42,
"score": 0,
"subscribers_count": 4
diff --git a/2016/CVE-2016-0189.json b/2016/CVE-2016-0189.json
index f3a65d7a35..4fb69eeed3 100644
--- a/2016/CVE-2016-0189.json
+++ b/2016/CVE-2016-0189.json
@@ -52,7 +52,7 @@
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
- "forks_count": 8,
+ "forks_count": 9,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 8,
+ "forks": 9,
"watchers": 3,
"score": 0,
"subscribers_count": 0
diff --git a/2016/CVE-2016-1287.json b/2016/CVE-2016-1287.json
index 812ac1a7cb..c458497306 100644
--- a/2016/CVE-2016-1287.json
+++ b/2016/CVE-2016-1287.json
@@ -19,7 +19,7 @@
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
- "forks_count": 6,
+ "forks_count": 7,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 6,
+ "forks": 7,
"watchers": 16,
"score": 0,
"subscribers_count": 1
diff --git a/2016/CVE-2016-1494.json b/2016/CVE-2016-1494.json
index 7895465dd7..abc2f1c23b 100644
--- a/2016/CVE-2016-1494.json
+++ b/2016/CVE-2016-1494.json
@@ -19,7 +19,7 @@
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
- "forks_count": 0,
+ "forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 0,
+ "forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 2
diff --git a/2016/CVE-2016-1757.json b/2016/CVE-2016-1757.json
index cd5ba1301c..02c9b917ee 100644
--- a/2016/CVE-2016-1757.json
+++ b/2016/CVE-2016-1757.json
@@ -19,7 +19,7 @@
"stargazers_count": 85,
"watchers_count": 85,
"has_discussions": false,
- "forks_count": 18,
+ "forks_count": 19,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 18,
+ "forks": 19,
"watchers": 85,
"score": 0,
"subscribers_count": 0
diff --git a/2016/CVE-2016-1828.json b/2016/CVE-2016-1828.json
index ab6d5fd3f5..f4847e3889 100644
--- a/2016/CVE-2016-1828.json
+++ b/2016/CVE-2016-1828.json
@@ -19,7 +19,7 @@
"stargazers_count": 86,
"watchers_count": 86,
"has_discussions": false,
- "forks_count": 23,
+ "forks_count": 24,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 23,
+ "forks": 24,
"watchers": 86,
"score": 0,
"subscribers_count": 8
diff --git a/2016/CVE-2016-3088.json b/2016/CVE-2016-3088.json
index bc25e011cb..9d9993493c 100644
--- a/2016/CVE-2016-3088.json
+++ b/2016/CVE-2016-3088.json
@@ -249,10 +249,10 @@
"description": "Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-42588)",
"fork": false,
"created_at": "2026-04-20T02:38:50Z",
- "updated_at": "2026-07-11T07:48:41Z",
+ "updated_at": "2026-07-13T12:12:28Z",
"pushed_at": "2026-06-27T07:20:35Z",
- "stargazers_count": 79,
- "watchers_count": 79,
+ "stargazers_count": 80,
+ "watchers_count": 80,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -263,7 +263,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
- "watchers": 79,
+ "watchers": 80,
"score": 0,
"subscribers_count": 2
}
diff --git a/2016/CVE-2016-3141.json b/2016/CVE-2016-3141.json
index ce932abfa4..1df93a25bc 100644
--- a/2016/CVE-2016-3141.json
+++ b/2016/CVE-2016-3141.json
@@ -19,7 +19,7 @@
"stargazers_count": 15,
"watchers_count": 15,
"has_discussions": false,
- "forks_count": 3,
+ "forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 3,
+ "forks": 4,
"watchers": 15,
"score": 0,
"subscribers_count": 2
diff --git a/2016/CVE-2016-3308.json b/2016/CVE-2016-3308.json
index 9b20ab880a..9f119fadd5 100644
--- a/2016/CVE-2016-3308.json
+++ b/2016/CVE-2016-3308.json
@@ -19,7 +19,7 @@
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
- "forks_count": 20,
+ "forks_count": 21,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 20,
+ "forks": 21,
"watchers": 1,
"score": 0,
"subscribers_count": 0
diff --git a/2016/CVE-2016-4010.json b/2016/CVE-2016-4010.json
index df1c766230..0c90d415a5 100644
--- a/2016/CVE-2016-4010.json
+++ b/2016/CVE-2016-4010.json
@@ -19,7 +19,7 @@
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
- "forks_count": 2,
+ "forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 2,
+ "forks": 3,
"watchers": 6,
"score": 0,
"subscribers_count": 1
diff --git a/2016/CVE-2016-4622.json b/2016/CVE-2016-4622.json
index b0ef8e9cb7..d1c57242b5 100644
--- a/2016/CVE-2016-4622.json
+++ b/2016/CVE-2016-4622.json
@@ -19,7 +19,7 @@
"stargazers_count": 108,
"watchers_count": 108,
"has_discussions": false,
- "forks_count": 32,
+ "forks_count": 33,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -30,7 +30,7 @@
"vulnerability"
],
"visibility": "public",
- "forks": 32,
+ "forks": 33,
"watchers": 108,
"score": 0,
"subscribers_count": 6
diff --git a/2016/CVE-2016-5195.json b/2016/CVE-2016-5195.json
index 6d15242e9b..69d44e6b71 100644
--- a/2016/CVE-2016-5195.json
+++ b/2016/CVE-2016-5195.json
@@ -260,7 +260,7 @@
"stargazers_count": 511,
"watchers_count": 511,
"has_discussions": false,
- "forks_count": 145,
+ "forks_count": 146,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -268,7 +268,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 145,
+ "forks": 146,
"watchers": 511,
"score": 0,
"subscribers_count": 19
diff --git a/2016/CVE-2016-5696.json b/2016/CVE-2016-5696.json
index b2d190cad6..b4576bea51 100644
--- a/2016/CVE-2016-5696.json
+++ b/2016/CVE-2016-5696.json
@@ -52,7 +52,7 @@
"stargazers_count": 102,
"watchers_count": 102,
"has_discussions": false,
- "forks_count": 28,
+ "forks_count": 29,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 28,
+ "forks": 29,
"watchers": 102,
"score": 0,
"subscribers_count": 6
@@ -85,7 +85,7 @@
"stargazers_count": 76,
"watchers_count": 76,
"has_discussions": false,
- "forks_count": 24,
+ "forks_count": 25,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -93,7 +93,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 24,
+ "forks": 25,
"watchers": 76,
"score": 0,
"subscribers_count": 6
diff --git a/2016/CVE-2016-6754.json b/2016/CVE-2016-6754.json
index 4f0088b17a..4bfd4fe6a4 100644
--- a/2016/CVE-2016-6754.json
+++ b/2016/CVE-2016-6754.json
@@ -19,7 +19,7 @@
"stargazers_count": 151,
"watchers_count": 151,
"has_discussions": false,
- "forks_count": 66,
+ "forks_count": 67,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 66,
+ "forks": 67,
"watchers": 151,
"score": 0,
"subscribers_count": 11
diff --git a/2016/CVE-2016-7255.json b/2016/CVE-2016-7255.json
index 172e481f25..aa9b6fe9b4 100644
--- a/2016/CVE-2016-7255.json
+++ b/2016/CVE-2016-7255.json
@@ -52,7 +52,7 @@
"stargazers_count": 81,
"watchers_count": 81,
"has_discussions": false,
- "forks_count": 47,
+ "forks_count": 48,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -64,7 +64,7 @@
"windows"
],
"visibility": "public",
- "forks": 47,
+ "forks": 48,
"watchers": 81,
"score": 0,
"subscribers_count": 6
diff --git a/2016/CVE-2016-7855.json b/2016/CVE-2016-7855.json
index 7e0a2e1261..84e8e91969 100644
--- a/2016/CVE-2016-7855.json
+++ b/2016/CVE-2016-7855.json
@@ -19,7 +19,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
- "forks_count": 1,
+ "forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 1,
+ "forks": 2,
"watchers": 0,
"score": 0,
"subscribers_count": 1
diff --git a/2017/CVE-2017-0065.json b/2017/CVE-2017-0065.json
index 23d97b2d60..e56612924b 100644
--- a/2017/CVE-2017-0065.json
+++ b/2017/CVE-2017-0065.json
@@ -19,7 +19,7 @@
"stargazers_count": 15,
"watchers_count": 15,
"has_discussions": false,
- "forks_count": 8,
+ "forks_count": 9,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -33,7 +33,7 @@
"vulnerability"
],
"visibility": "public",
- "forks": 8,
+ "forks": 9,
"watchers": 15,
"score": 0,
"subscribers_count": 3
diff --git a/2017/CVE-2017-1000367.json b/2017/CVE-2017-1000367.json
index 045042f4a2..a9b4bcc9b7 100644
--- a/2017/CVE-2017-1000367.json
+++ b/2017/CVE-2017-1000367.json
@@ -19,7 +19,7 @@
"stargazers_count": 113,
"watchers_count": 113,
"has_discussions": false,
- "forks_count": 36,
+ "forks_count": 37,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 36,
+ "forks": 37,
"watchers": 113,
"score": 0,
"subscribers_count": 10
diff --git a/2017/CVE-2017-7494.json b/2017/CVE-2017-7494.json
index 978b9ee5d8..abaac1d3de 100644
--- a/2017/CVE-2017-7494.json
+++ b/2017/CVE-2017-7494.json
@@ -190,7 +190,7 @@
"stargazers_count": 260,
"watchers_count": 260,
"has_discussions": false,
- "forks_count": 73,
+ "forks_count": 74,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -198,7 +198,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 73,
+ "forks": 74,
"watchers": 260,
"score": 0,
"subscribers_count": 1
diff --git a/2017/CVE-2017-7921.json b/2017/CVE-2017-7921.json
index 5c00c52a52..b63c40d255 100644
--- a/2017/CVE-2017-7921.json
+++ b/2017/CVE-2017-7921.json
@@ -524,7 +524,7 @@
"stargazers_count": 19,
"watchers_count": 19,
"has_discussions": false,
- "forks_count": 1,
+ "forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -532,7 +532,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 1,
+ "forks": 2,
"watchers": 19,
"score": 0,
"subscribers_count": 0
diff --git a/2017/CVE-2017-9248.json b/2017/CVE-2017-9248.json
index 9e33fbc650..90d8ef315f 100644
--- a/2017/CVE-2017-9248.json
+++ b/2017/CVE-2017-9248.json
@@ -14,7 +14,7 @@
"description": "Base64-based encryption oracle exploit for CVE-2017-9248 (Telerik UI for ASP.NET AJAX dialog handler)",
"fork": false,
"created_at": "2018-01-16T00:23:34Z",
- "updated_at": "2026-06-24T10:52:43Z",
+ "updated_at": "2026-07-13T17:09:06Z",
"pushed_at": "2020-12-22T03:10:47Z",
"stargazers_count": 178,
"watchers_count": 178,
@@ -52,7 +52,7 @@
"stargazers_count": 97,
"watchers_count": 97,
"has_discussions": false,
- "forks_count": 25,
+ "forks_count": 26,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 25,
+ "forks": 26,
"watchers": 97,
"score": 0,
"subscribers_count": 6
diff --git a/2018/CVE-2018-14847.json b/2018/CVE-2018-14847.json
index eeb0db2280..3f06c357d9 100644
--- a/2018/CVE-2018-14847.json
+++ b/2018/CVE-2018-14847.json
@@ -14,10 +14,10 @@
"description": "Proof of Concept of Winbox Critical Vulnerability (CVE-2018-14847)",
"fork": false,
"created_at": "2018-06-24T05:34:05Z",
- "updated_at": "2026-07-09T10:10:47Z",
+ "updated_at": "2026-07-13T12:11:51Z",
"pushed_at": "2020-10-16T12:09:45Z",
- "stargazers_count": 518,
- "watchers_count": 518,
+ "stargazers_count": 519,
+ "watchers_count": 519,
"has_discussions": false,
"forks_count": 460,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 460,
- "watchers": 518,
+ "watchers": 519,
"score": 0,
"subscribers_count": 0
},
diff --git a/2018/CVE-2018-16385.json b/2018/CVE-2018-16385.json
new file mode 100644
index 0000000000..ddc5153a3e
--- /dev/null
+++ b/2018/CVE-2018-16385.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1299433546,
+ "name": "SQL-ThinkPHP-5.0.24-RCE-",
+ "full_name": "buzhimingdeaikun\/SQL-ThinkPHP-5.0.24-RCE-",
+ "owner": {
+ "login": "buzhimingdeaikun",
+ "id": 152008735,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/152008735?v=4",
+ "html_url": "https:\/\/github.com\/buzhimingdeaikun",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/buzhimingdeaikun\/SQL-ThinkPHP-5.0.24-RCE-",
+ "description": "SQL注入漏洞复现报告——OWASP靶场实战，通过UNION注入提取数据库29条用户凭证 ThinkPHP 5.0.24 RCE漏洞复现报告——CVE-2018-16385，验证代码执行能力",
+ "fork": false,
+ "created_at": "2026-07-13T15:17:21Z",
+ "updated_at": "2026-07-13T15:25:09Z",
+ "pushed_at": "2026-07-13T15:22:37Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2018/CVE-2018-6242.json b/2018/CVE-2018-6242.json
index fe0f071fe8..a611d4e031 100644
--- a/2018/CVE-2018-6242.json
+++ b/2018/CVE-2018-6242.json
@@ -19,7 +19,7 @@
"stargazers_count": 560,
"watchers_count": 560,
"has_discussions": false,
- "forks_count": 54,
+ "forks_count": 55,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -34,7 +34,7 @@
"usb"
],
"visibility": "public",
- "forks": 54,
+ "forks": 55,
"watchers": 560,
"score": 0,
"subscribers_count": 52
diff --git a/2018/CVE-2018-9276.json b/2018/CVE-2018-9276.json
index 88276dc7fc..ca6eb851a0 100644
--- a/2018/CVE-2018-9276.json
+++ b/2018/CVE-2018-9276.json
@@ -14,10 +14,10 @@
"description": "CVE-2018-9276 PRTG < 18.2.39 Authenticated Command Injection (Reverse Shell)",
"fork": false,
"created_at": "2019-03-31T08:51:07Z",
- "updated_at": "2026-03-26T05:26:29Z",
+ "updated_at": "2026-07-13T15:35:25Z",
"pushed_at": "2020-12-03T11:22:15Z",
- "stargazers_count": 37,
- "watchers_count": 37,
+ "stargazers_count": 36,
+ "watchers_count": 36,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 7,
- "watchers": 37,
+ "watchers": 36,
"score": 0,
"subscribers_count": 1
},
diff --git a/2019/CVE-2019-1040.json b/2019/CVE-2019-1040.json
index 63cbc8c93b..47bdd8f87a 100644
--- a/2019/CVE-2019-1040.json
+++ b/2019/CVE-2019-1040.json
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
- "updated_at": "2026-07-13T10:40:12Z",
- "pushed_at": "2026-07-13T10:40:07Z",
+ "updated_at": "2026-07-13T17:45:48Z",
+ "pushed_at": "2026-07-13T17:45:36Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
diff --git a/2019/CVE-2019-11358.json b/2019/CVE-2019-11358.json
index 34138c5340..d66a2d927a 100644
--- a/2019/CVE-2019-11358.json
+++ b/2019/CVE-2019-11358.json
@@ -138,7 +138,7 @@
"stargazers_count": 292,
"watchers_count": 292,
"has_discussions": false,
- "forks_count": 87,
+ "forks_count": 88,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -146,7 +146,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 87,
+ "forks": 88,
"watchers": 292,
"score": 0,
"subscribers_count": 13
diff --git a/2019/CVE-2019-13272.json b/2019/CVE-2019-13272.json
index 3a77813266..c2bd67aa70 100644
--- a/2019/CVE-2019-13272.json
+++ b/2019/CVE-2019-13272.json
@@ -19,7 +19,7 @@
"stargazers_count": 332,
"watchers_count": 332,
"has_discussions": false,
- "forks_count": 103,
+ "forks_count": 104,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 103,
+ "forks": 104,
"watchers": 332,
"score": 0,
"subscribers_count": 8
diff --git a/2019/CVE-2019-2215.json b/2019/CVE-2019-2215.json
index 1b31b0e6e6..0a3e969029 100644
--- a/2019/CVE-2019-2215.json
+++ b/2019/CVE-2019-2215.json
@@ -926,8 +926,8 @@
"description": "app that ports CVE-2019-2215 to arm32 and mounts a su binary to \/sbin with denylist + root app installer. firehose\/Magisk guide included",
"fork": false,
"created_at": "2026-06-30T10:04:00Z",
- "updated_at": "2026-07-08T06:58:22Z",
- "pushed_at": "2026-07-08T06:58:19Z",
+ "updated_at": "2026-07-13T17:12:34Z",
+ "pushed_at": "2026-07-13T17:27:55Z",
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
diff --git a/2020/CVE-2020-12695.json b/2020/CVE-2020-12695.json
index 38ec94d3d1..358c1fc562 100644
--- a/2020/CVE-2020-12695.json
+++ b/2020/CVE-2020-12695.json
@@ -14,10 +14,10 @@
"description": "Vulnerability checker for Callstranger (CVE-2020-12695)",
"fork": false,
"created_at": "2020-06-08T07:37:49Z",
- "updated_at": "2026-07-04T23:39:30Z",
+ "updated_at": "2026-07-13T16:52:02Z",
"pushed_at": "2021-08-07T16:48:55Z",
- "stargazers_count": 404,
- "watchers_count": 404,
+ "stargazers_count": 403,
+ "watchers_count": 403,
"has_discussions": false,
"forks_count": 62,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 62,
- "watchers": 404,
+ "watchers": 403,
"score": 0,
"subscribers_count": 10
},
diff --git a/2020/CVE-2020-14343.json b/2020/CVE-2020-14343.json
index 1f7cabbfbf..2b2842f93a 100644
--- a/2020/CVE-2020-14343.json
+++ b/2020/CVE-2020-14343.json
@@ -97,5 +97,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1299527319,
+ "name": "Python-Example",
+ "full_name": "seal-sec-demo-2\/Python-Example",
+ "owner": {
+ "login": "seal-sec-demo-2",
+ "id": 168992869,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/168992869?v=4",
+ "html_url": "https:\/\/github.com\/seal-sec-demo-2",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/seal-sec-demo-2\/Python-Example",
+ "description": "Seal Security example — vulnerable pip app (PyYAML CVE-2020-14343) remediated to sealed versions; GitHub Actions + Jenkins integration",
+ "fork": false,
+ "created_at": "2026-07-13T16:53:35Z",
+ "updated_at": "2026-07-13T18:05:23Z",
+ "pushed_at": "2026-07-13T18:04:45Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2020/CVE-2020-1472.json b/2020/CVE-2020-1472.json
index 61ed4fad55..2a40767ff0 100644
--- a/2020/CVE-2020-1472.json
+++ b/2020/CVE-2020-1472.json
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
- "updated_at": "2026-07-13T10:46:53Z",
- "pushed_at": "2026-07-13T10:46:43Z",
+ "updated_at": "2026-07-13T17:43:13Z",
+ "pushed_at": "2026-07-13T17:43:06Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
diff --git a/2021/CVE-2021-3156.json b/2021/CVE-2021-3156.json
index e47a3357ba..bb2fc9f857 100644
--- a/2021/CVE-2021-3156.json
+++ b/2021/CVE-2021-3156.json
@@ -1119,7 +1119,7 @@
"stargazers_count": 801,
"watchers_count": 801,
"has_discussions": false,
- "forks_count": 175,
+ "forks_count": 176,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1127,7 +1127,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 175,
+ "forks": 176,
"watchers": 801,
"score": 0,
"subscribers_count": 10
diff --git a/2021/CVE-2021-33044.json b/2021/CVE-2021-33044.json
index 6403886605..2677587ace 100644
--- a/2021/CVE-2021-33044.json
+++ b/2021/CVE-2021-33044.json
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
- "updated_at": "2026-07-13T11:16:09Z",
- "pushed_at": "2026-07-13T11:15:33Z",
+ "updated_at": "2026-07-13T18:05:19Z",
+ "pushed_at": "2026-07-13T18:04:45Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
diff --git a/2021/CVE-2021-3493.json b/2021/CVE-2021-3493.json
index e4f340ba43..62a2437ccf 100644
--- a/2021/CVE-2021-3493.json
+++ b/2021/CVE-2021-3493.json
@@ -553,10 +553,10 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Ayham-Megdadi\/Zero-Day-Legacy",
- "description": "A vulnerable Boot-to-Root CTF lab machine simulating a hospital environment. Features a realistic 17-step attack chain including SQL Injection, XSS, Session Hijacking, SSH access, password cracking, privilege escalation via CVE-2021-3493, and full root compromise. Developed as a graduation project at Al-Najah National University (ANU), awarded 97%.",
+ "description": "A vulnerable Boot-to-Root CTF lab machine simulating a hospital environment. Features a realistic 17-step attack chain including SQL Injection, XSS, Session Hijacking, SSH access, password cracking, privilege escalation via CVE-2021-3493, and full root compromise. Developed as a graduation project at Ajloun National University (ANU), awarded 97%.",
"fork": false,
"created_at": "2026-07-05T21:11:57Z",
- "updated_at": "2026-07-05T22:47:17Z",
+ "updated_at": "2026-07-13T13:15:11Z",
"pushed_at": "2026-07-05T22:44:42Z",
"stargazers_count": 1,
"watchers_count": 1,
diff --git a/2021/CVE-2021-4034.json b/2021/CVE-2021-4034.json
index ff1aa854be..7f7707313d 100644
--- a/2021/CVE-2021-4034.json
+++ b/2021/CVE-2021-4034.json
@@ -19,7 +19,7 @@
"stargazers_count": 2041,
"watchers_count": 2041,
"has_discussions": false,
- "forks_count": 507,
+ "forks_count": 506,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 507,
+ "forks": 506,
"watchers": 2041,
"score": 0,
"subscribers_count": 18
diff --git a/2021/CVE-2021-40444.json b/2021/CVE-2021-40444.json
index db829644ea..4c289429b4 100644
--- a/2021/CVE-2021-40444.json
+++ b/2021/CVE-2021-40444.json
@@ -245,10 +245,10 @@
"description": "CVE-2021-40444 PoC",
"fork": false,
"created_at": "2021-09-10T16:55:53Z",
- "updated_at": "2026-07-13T02:16:24Z",
+ "updated_at": "2026-07-13T14:29:16Z",
"pushed_at": "2021-12-25T18:31:02Z",
- "stargazers_count": 1760,
- "watchers_count": 1760,
+ "stargazers_count": 1759,
+ "watchers_count": 1759,
"has_discussions": false,
"forks_count": 476,
"allow_forking": true,
@@ -259,7 +259,7 @@
"topics": [],
"visibility": "public",
"forks": 476,
- "watchers": 1760,
+ "watchers": 1759,
"score": 0,
"subscribers_count": 27
},
diff --git a/2021/CVE-2021-40449.json b/2021/CVE-2021-40449.json
index 70d285d056..2f87c54333 100644
--- a/2021/CVE-2021-40449.json
+++ b/2021/CVE-2021-40449.json
@@ -19,7 +19,7 @@
"stargazers_count": 480,
"watchers_count": 480,
"has_discussions": false,
- "forks_count": 94,
+ "forks_count": 95,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -29,7 +29,7 @@
"cve-2021-40449"
],
"visibility": "public",
- "forks": 94,
+ "forks": 95,
"watchers": 480,
"score": 0,
"subscribers_count": 11
diff --git a/2021/CVE-2021-42278.json b/2021/CVE-2021-42278.json
index f605f5e5e7..82a205ba5d 100644
--- a/2021/CVE-2021-42278.json
+++ b/2021/CVE-2021-42278.json
@@ -123,7 +123,7 @@
"stargazers_count": 276,
"watchers_count": 276,
"has_discussions": false,
- "forks_count": 35,
+ "forks_count": 36,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -133,7 +133,7 @@
"cve-2021-42278"
],
"visibility": "public",
- "forks": 35,
+ "forks": 36,
"watchers": 276,
"score": 0,
"subscribers_count": 5
diff --git a/2022/CVE-2022-1026.json b/2022/CVE-2022-1026.json
index 256ecddd6f..964b348f91 100644
--- a/2022/CVE-2022-1026.json
+++ b/2022/CVE-2022-1026.json
@@ -14,10 +14,10 @@
"description": "An unauthenticated data extraction vulnerability in Kyocera printers, which allows for recovery of cleartext address book and domain joined passwords",
"fork": false,
"created_at": "2023-03-15T14:23:41Z",
- "updated_at": "2026-06-16T06:06:57Z",
+ "updated_at": "2026-07-13T13:08:04Z",
"pushed_at": "2023-03-15T14:33:48Z",
- "stargazers_count": 23,
- "watchers_count": 23,
+ "stargazers_count": 24,
+ "watchers_count": 24,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
- "watchers": 23,
+ "watchers": 24,
"score": 0,
"subscribers_count": 2
},
diff --git a/2022/CVE-2022-1471.json b/2022/CVE-2022-1471.json
index 70e32b783d..928cd4864b 100644
--- a/2022/CVE-2022-1471.json
+++ b/2022/CVE-2022-1471.json
@@ -163,5 +163,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1299527221,
+ "name": "Java-Example",
+ "full_name": "seal-sec-demo-2\/Java-Example",
+ "owner": {
+ "login": "seal-sec-demo-2",
+ "id": 168992869,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/168992869?v=4",
+ "html_url": "https:\/\/github.com\/seal-sec-demo-2",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/seal-sec-demo-2\/Java-Example",
+ "description": "Seal Security example — vulnerable Maven app (SnakeYAML CVE-2022-1471) remediated to sealed versions; GitHub Actions + Jenkins integration",
+ "fork": false,
+ "created_at": "2026-07-13T16:53:31Z",
+ "updated_at": "2026-07-13T18:05:25Z",
+ "pushed_at": "2026-07-13T18:04:44Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2022/CVE-2022-22077.json b/2022/CVE-2022-22077.json
index 90db0441f0..9b03043a60 100644
--- a/2022/CVE-2022-22077.json
+++ b/2022/CVE-2022-22077.json
@@ -15,7 +15,7 @@
"fork": false,
"created_at": "2025-09-08T21:12:19Z",
"updated_at": "2026-06-19T21:56:25Z",
- "pushed_at": "2026-07-12T08:16:16Z",
+ "pushed_at": "2026-07-13T13:33:53Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
diff --git a/2022/CVE-2022-29078.json b/2022/CVE-2022-29078.json
index 7ded2e7d73..daeab31c2f 100644
--- a/2022/CVE-2022-29078.json
+++ b/2022/CVE-2022-29078.json
@@ -301,5 +301,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1299526189,
+ "name": "JavaScript-Example",
+ "full_name": "seal-sec-demo-2\/JavaScript-Example",
+ "owner": {
+ "login": "seal-sec-demo-2",
+ "id": 168992869,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/168992869?v=4",
+ "html_url": "https:\/\/github.com\/seal-sec-demo-2",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/seal-sec-demo-2\/JavaScript-Example",
+ "description": "Seal Security example — vulnerable npm app (EJS CVE-2022-29078) remediated to sealed versions; GitHub Actions + Jenkins integration",
+ "fork": false,
+ "created_at": "2026-07-13T16:52:21Z",
+ "updated_at": "2026-07-13T18:05:11Z",
+ "pushed_at": "2026-07-13T18:04:42Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2022/CVE-2022-29799.json b/2022/CVE-2022-29799.json
index 01d3c9ae4e..8a40addcfd 100644
--- a/2022/CVE-2022-29799.json
+++ b/2022/CVE-2022-29799.json
@@ -59,8 +59,8 @@
"description": "Demonstrate local privilege escalation in networkd-dispatcher via CVE-2022-29799 and CVE-2022-29800 using this C proof of concept.",
"fork": false,
"created_at": "2026-06-23T14:05:18Z",
- "updated_at": "2026-07-13T11:38:21Z",
- "pushed_at": "2026-07-13T11:37:43Z",
+ "updated_at": "2026-07-13T17:28:45Z",
+ "pushed_at": "2026-07-13T17:28:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2023/CVE-2023-22527.json b/2023/CVE-2023-22527.json
index 8e39c4a73f..78608fb359 100644
--- a/2023/CVE-2023-22527.json
+++ b/2023/CVE-2023-22527.json
@@ -65,39 +65,6 @@
"score": 0,
"subscribers_count": 1
},
- {
- "id": 747304649,
- "name": "CVE-2023-22527",
- "full_name": "RevoltSecurities\/CVE-2023-22527",
- "owner": {
- "login": "RevoltSecurities",
- "id": 119435129,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/119435129?v=4",
- "html_url": "https:\/\/github.com\/RevoltSecurities",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/RevoltSecurities\/CVE-2023-22527",
- "description": "An Exploitation tool to exploit the confluence server that are vulnerable to CVE-2023-22527 leads to RCE",
- "fork": false,
- "created_at": "2024-01-23T17:07:15Z",
- "updated_at": "2026-04-29T23:16:35Z",
- "pushed_at": "2024-01-23T17:18:36Z",
- "stargazers_count": 10,
- "watchers_count": 10,
- "has_discussions": false,
- "forks_count": 4,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 4,
- "watchers": 10,
- "score": 0,
- "subscribers_count": 0
- },
{
"id": 747516154,
"name": "CVE-2023-22527",
diff --git a/2023/CVE-2023-25157.json b/2023/CVE-2023-25157.json
index 8315eb8665..0f26ab8074 100644
--- a/2023/CVE-2023-25157.json
+++ b/2023/CVE-2023-25157.json
@@ -282,5 +282,38 @@
"watchers": 3,
"score": 0,
"subscribers_count": 1
+ },
+ {
+ "id": 1299485558,
+ "name": "CVE-2023-25157-GeoServer-SQLi-Lab",
+ "full_name": "Giangdurian\/CVE-2023-25157-GeoServer-SQLi-Lab",
+ "owner": {
+ "login": "Giangdurian",
+ "id": 93591423,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/93591423?v=4",
+ "html_url": "https:\/\/github.com\/Giangdurian",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Giangdurian\/CVE-2023-25157-GeoServer-SQLi-Lab",
+ "description": null,
+ "fork": false,
+ "created_at": "2026-07-13T16:09:43Z",
+ "updated_at": "2026-07-13T16:15:07Z",
+ "pushed_at": "2026-07-13T16:14:04Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2023/CVE-2023-32434.json b/2023/CVE-2023-32434.json
index 47d6dc18cb..a133d69c94 100644
--- a/2023/CVE-2023-32434.json
+++ b/2023/CVE-2023-32434.json
@@ -47,8 +47,8 @@
"description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙",
"fork": false,
"created_at": "2025-08-13T09:19:29Z",
- "updated_at": "2026-07-13T09:36:31Z",
- "pushed_at": "2026-07-13T09:35:52Z",
+ "updated_at": "2026-07-13T15:31:05Z",
+ "pushed_at": "2026-07-13T15:28:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2023/CVE-2023-38709.json b/2023/CVE-2023-38709.json
index 1abf25c1e0..7b8b3c3d2a 100644
--- a/2023/CVE-2023-38709.json
+++ b/2023/CVE-2023-38709.json
@@ -14,10 +14,10 @@
"description": "Apache HTTP Server Vulnerability Testing Tool | PoC for CVE-2024-38472 , CVE-2024-39573 , CVE-2024-38477 , CVE-2024-38476 , CVE-2024-38475 , CVE-2024-38474 , CVE-2024-38473 , CVE-2023-38709",
"fork": false,
"created_at": "2024-10-05T20:32:45Z",
- "updated_at": "2026-07-08T11:28:12Z",
+ "updated_at": "2026-07-13T16:42:22Z",
"pushed_at": "2024-10-05T20:37:02Z",
- "stargazers_count": 132,
- "watchers_count": 132,
+ "stargazers_count": 131,
+ "watchers_count": 131,
"has_discussions": false,
"forks_count": 22,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 22,
- "watchers": 132,
+ "watchers": 131,
"score": 0,
"subscribers_count": 1
}
diff --git a/2024/CVE-2024-0670.json b/2024/CVE-2024-0670.json
index b4ef086fe3..cd49a9a414 100644
--- a/2024/CVE-2024-0670.json
+++ b/2024/CVE-2024-0670.json
@@ -118,8 +118,8 @@
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
"fork": false,
"created_at": "2026-01-08T01:32:09Z",
- "updated_at": "2026-07-13T10:23:20Z",
- "pushed_at": "2026-07-13T10:23:14Z",
+ "updated_at": "2026-07-13T16:16:43Z",
+ "pushed_at": "2026-07-13T16:16:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2024/CVE-2024-10924.json b/2024/CVE-2024-10924.json
index ff10414273..7209f2b790 100644
--- a/2024/CVE-2024-10924.json
+++ b/2024/CVE-2024-10924.json
@@ -237,7 +237,7 @@
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
- "forks_count": 3,
+ "forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -245,7 +245,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 3,
+ "forks": 4,
"watchers": 6,
"score": 0,
"subscribers_count": 1
diff --git a/2024/CVE-2024-12558.json b/2024/CVE-2024-12558.json
deleted file mode 100644
index 079fcde702..0000000000
--- a/2024/CVE-2024-12558.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 915119296,
- "name": "CVE-2024-12558-exploit",
- "full_name": "Nxploited\/CVE-2024-12558-exploit",
- "owner": {
- "login": "Nxploited",
- "id": 188819918,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4",
- "html_url": "https:\/\/github.com\/Nxploited",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-12558-exploit",
- "description": null,
- "fork": false,
- "created_at": "2025-01-11T02:50:14Z",
- "updated_at": "2025-01-11T05:05:09Z",
- "pushed_at": "2025-01-11T05:05:06Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-21338.json b/2024/CVE-2024-21338.json
index bf049ec7fb..84bf3d1373 100644
--- a/2024/CVE-2024-21338.json
+++ b/2024/CVE-2024-21338.json
@@ -14,10 +14,10 @@
"description": "Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled.",
"fork": false,
"created_at": "2024-04-13T05:53:02Z",
- "updated_at": "2026-07-13T11:39:59Z",
+ "updated_at": "2026-07-13T12:51:20Z",
"pushed_at": "2024-04-16T21:00:14Z",
- "stargazers_count": 327,
- "watchers_count": 327,
+ "stargazers_count": 329,
+ "watchers_count": 329,
"has_discussions": false,
"forks_count": 70,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 70,
- "watchers": 327,
+ "watchers": 329,
"score": 0,
"subscribers_count": 3
},
diff --git a/2024/CVE-2024-21413.json b/2024/CVE-2024-21413.json
index 46fd05f8e7..1f56178d03 100644
--- a/2024/CVE-2024-21413.json
+++ b/2024/CVE-2024-21413.json
@@ -1220,8 +1220,8 @@
"description": null,
"fork": false,
"created_at": "2026-07-04T01:16:21Z",
- "updated_at": "2026-07-05T18:17:08Z",
- "pushed_at": "2026-07-05T18:17:04Z",
+ "updated_at": "2026-07-13T15:58:45Z",
+ "pushed_at": "2026-07-13T15:58:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2024/CVE-2024-31317.json b/2024/CVE-2024-31317.json
index 0467f8dcc6..70f31a46e3 100644
--- a/2024/CVE-2024-31317.json
+++ b/2024/CVE-2024-31317.json
@@ -113,10 +113,10 @@
"description": null,
"fork": false,
"created_at": "2025-05-01T11:41:51Z",
- "updated_at": "2026-07-10T04:32:58Z",
+ "updated_at": "2026-07-13T13:08:56Z",
"pushed_at": "2025-07-01T05:41:24Z",
- "stargazers_count": 50,
- "watchers_count": 50,
+ "stargazers_count": 51,
+ "watchers_count": 51,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
- "watchers": 50,
+ "watchers": 51,
"score": 0,
"subscribers_count": 1
},
diff --git a/2024/CVE-2024-38063.json b/2024/CVE-2024-38063.json
index a60dbe68ff..678a48f126 100644
--- a/2024/CVE-2024-38063.json
+++ b/2024/CVE-2024-38063.json
@@ -52,7 +52,7 @@
"stargazers_count": 87,
"watchers_count": 87,
"has_discussions": false,
- "forks_count": 27,
+ "forks_count": 28,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 27,
+ "forks": 28,
"watchers": 87,
"score": 0,
"subscribers_count": 3
diff --git a/2024/CVE-2024-38472.json b/2024/CVE-2024-38472.json
index 8804b7201c..945ec6b671 100644
--- a/2024/CVE-2024-38472.json
+++ b/2024/CVE-2024-38472.json
@@ -47,10 +47,10 @@
"description": "Apache HTTP Server Vulnerability Testing Tool | PoC for CVE-2024-38472 , CVE-2024-39573 , CVE-2024-38477 , CVE-2024-38476 , CVE-2024-38475 , CVE-2024-38474 , CVE-2024-38473 , CVE-2023-38709",
"fork": false,
"created_at": "2024-10-05T20:32:45Z",
- "updated_at": "2026-07-08T11:28:12Z",
+ "updated_at": "2026-07-13T16:42:22Z",
"pushed_at": "2024-10-05T20:37:02Z",
- "stargazers_count": 132,
- "watchers_count": 132,
+ "stargazers_count": 131,
+ "watchers_count": 131,
"has_discussions": false,
"forks_count": 22,
"allow_forking": true,
@@ -72,7 +72,7 @@
],
"visibility": "public",
"forks": 22,
- "watchers": 132,
+ "watchers": 131,
"score": 0,
"subscribers_count": 1
}
diff --git a/2024/CVE-2024-38998.json b/2024/CVE-2024-38998.json
deleted file mode 100644
index 762e171ee1..0000000000
--- a/2024/CVE-2024-38998.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 902615056,
- "name": "PP_CVE-2024-38998",
- "full_name": "z3ldr1\/PP_CVE-2024-38998",
- "owner": {
- "login": "z3ldr1",
- "id": 128452420,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/128452420?v=4",
- "html_url": "https:\/\/github.com\/z3ldr1",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/z3ldr1\/PP_CVE-2024-38998",
- "description": "Uma vulnerabilidade (CVE-2024-38998) foi identificada na versão 2.3.6 do módulo JavaScript requirejs. Ela explora prototype pollution na função config, permitindo que invasores modifiquem Object.prototype com entradas maliciosas. Isso pode causar DoS, execução remota de código (RCE) ou XSS. A gravidade é crítica (CVSS 9.8). ",
- "fork": false,
- "created_at": "2024-12-12T23:19:44Z",
- "updated_at": "2024-12-20T00:37:10Z",
- "pushed_at": "2024-12-12T23:20:56Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- }
-]
\ No newline at end of file
diff --git a/2024/CVE-2024-40453.json b/2024/CVE-2024-40453.json
index dfb69d5e4d..4c675b7374 100644
--- a/2024/CVE-2024-40453.json
+++ b/2024/CVE-2024-40453.json
@@ -34,5 +34,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1299316657,
+ "name": "CVE-2024-40453",
+ "full_name": "surajpandeyp\/CVE-2024-40453",
+ "owner": {
+ "login": "surajpandeyp",
+ "id": 213995986,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/213995986?v=4",
+ "html_url": "https:\/\/github.com\/surajpandeyp",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/surajpandeyp\/CVE-2024-40453",
+ "description": null,
+ "fork": false,
+ "created_at": "2026-07-13T13:21:15Z",
+ "updated_at": "2026-07-13T13:25:43Z",
+ "pushed_at": "2026-07-13T13:24:37Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2024/CVE-2024-40711.json b/2024/CVE-2024-40711.json
index 25fa308968..adda0645fc 100644
--- a/2024/CVE-2024-40711.json
+++ b/2024/CVE-2024-40711.json
@@ -47,10 +47,10 @@
"description": "CVE-2024-40711-exp",
"fork": false,
"created_at": "2024-10-16T05:02:27Z",
- "updated_at": "2026-06-11T19:54:23Z",
+ "updated_at": "2026-07-13T16:42:30Z",
"pushed_at": "2024-10-17T01:06:42Z",
- "stargazers_count": 43,
- "watchers_count": 43,
+ "stargazers_count": 42,
+ "watchers_count": 42,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
- "watchers": 43,
+ "watchers": 42,
"score": 0,
"subscribers_count": 1
}
diff --git a/2024/CVE-2024-52046.json b/2024/CVE-2024-52046.json
new file mode 100644
index 0000000000..d0e4feab2e
--- /dev/null
+++ b/2024/CVE-2024-52046.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1299319906,
+ "name": "CVE-2024-52046-Apache-MINA-RCE",
+ "full_name": "amnsecurity\/CVE-2024-52046-Apache-MINA-RCE",
+ "owner": {
+ "login": "amnsecurity",
+ "id": 249479084,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/249479084?v=4",
+ "html_url": "https:\/\/github.com\/amnsecurity",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/amnsecurity\/CVE-2024-52046-Apache-MINA-RCE",
+ "description": "CVE-2024-52046 - Apache MINA Deserialization RCE - PoC & Analysis | CVSS 9.8 CRITICAL | AMN SECURITY",
+ "fork": false,
+ "created_at": "2026-07-13T13:24:42Z",
+ "updated_at": "2026-07-13T13:37:58Z",
+ "pushed_at": "2026-07-13T13:24:46Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2024/CVE-2024-53677.json b/2024/CVE-2024-53677.json
index 54c1c2332f..5710cf0d5b 100644
--- a/2024/CVE-2024-53677.json
+++ b/2024/CVE-2024-53677.json
@@ -197,39 +197,6 @@
"score": 0,
"subscribers_count": 1
},
- {
- "id": 914016617,
- "name": "Apache-struts-cve-2024-53677",
- "full_name": "punitdarji\/Apache-struts-cve-2024-53677",
- "owner": {
- "login": "punitdarji",
- "id": 38101321,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38101321?v=4",
- "html_url": "https:\/\/github.com\/punitdarji",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/punitdarji\/Apache-struts-cve-2024-53677",
- "description": null,
- "fork": false,
- "created_at": "2025-01-08T19:36:09Z",
- "updated_at": "2025-01-30T09:08:02Z",
- "pushed_at": "2025-01-11T11:11:06Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 1
- },
{
"id": 914978081,
"name": "CVE-2024-53677",
diff --git a/2024/CVE-2024-6387.json b/2024/CVE-2024-6387.json
index bc2cbe90a1..9d7157d03f 100644
--- a/2024/CVE-2024-6387.json
+++ b/2024/CVE-2024-6387.json
@@ -113,7 +113,7 @@
"description": "MIRROR of the original 32-bit PoC for CVE-2024-6387 \"regreSSHion\" by 7etsuo\/cve-2024-6387-poc",
"fork": false,
"created_at": "2024-07-01T12:26:40Z",
- "updated_at": "2026-07-11T15:42:03Z",
+ "updated_at": "2026-07-13T16:51:00Z",
"pushed_at": "2024-07-25T04:23:11Z",
"stargazers_count": 129,
"watchers_count": 129,
diff --git a/2025/CVE-2025-14847.json b/2025/CVE-2025-14847.json
index 751fbc2e63..26f95bfdd3 100644
--- a/2025/CVE-2025-14847.json
+++ b/2025/CVE-2025-14847.json
@@ -14,8 +14,8 @@
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
"fork": false,
"created_at": "2025-07-30T15:52:00Z",
- "updated_at": "2026-07-13T10:27:10Z",
- "pushed_at": "2026-07-13T10:26:53Z",
+ "updated_at": "2026-07-13T16:20:30Z",
+ "pushed_at": "2026-07-13T16:19:59Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1129,8 +1129,8 @@
"description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
"fork": false,
"created_at": "2026-01-14T06:05:44Z",
- "updated_at": "2026-07-13T10:26:16Z",
- "pushed_at": "2026-07-13T10:26:11Z",
+ "updated_at": "2026-07-13T16:19:43Z",
+ "pushed_at": "2026-07-13T16:19:13Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-24132.json b/2025/CVE-2025-24132.json
index 2467a39c2e..b6b04dd827 100644
--- a/2025/CVE-2025-24132.json
+++ b/2025/CVE-2025-24132.json
@@ -47,10 +47,10 @@
"description": "POC for CVE-2025-24132 (AirBourne). Currently just triggers the overflow and causes a crash",
"fork": false,
"created_at": "2026-02-03T03:25:44Z",
- "updated_at": "2026-05-11T19:17:51Z",
+ "updated_at": "2026-07-13T15:52:20Z",
"pushed_at": "2026-03-03T00:58:12Z",
- "stargazers_count": 7,
- "watchers_count": 7,
+ "stargazers_count": 8,
+ "watchers_count": 8,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
- "watchers": 7,
+ "watchers": 8,
"score": 0,
"subscribers_count": 2
}
diff --git a/2025/CVE-2025-24203.json b/2025/CVE-2025-24203.json
index 50009b4378..175a126705 100644
--- a/2025/CVE-2025-24203.json
+++ b/2025/CVE-2025-24203.json
@@ -14,10 +14,10 @@
"description": "A simple customization toolbox that utilizes CVE-2025-24203. Supports iOS 16.0 - iOS 18.3.2.",
"fork": false,
"created_at": "2025-05-09T07:18:55Z",
- "updated_at": "2026-07-13T12:06:29Z",
+ "updated_at": "2026-07-13T14:07:48Z",
"pushed_at": "2026-06-30T02:22:50Z",
- "stargazers_count": 411,
- "watchers_count": 411,
+ "stargazers_count": 412,
+ "watchers_count": 412,
"has_discussions": false,
"forks_count": 42,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 42,
- "watchers": 411,
+ "watchers": 412,
"score": 0,
"subscribers_count": 12
},
diff --git a/2025/CVE-2025-24257.json b/2025/CVE-2025-24257.json
index c802d41fe7..2965ebd408 100644
--- a/2025/CVE-2025-24257.json
+++ b/2025/CVE-2025-24257.json
@@ -14,8 +14,8 @@
"description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis",
"fork": false,
"created_at": "2026-04-04T03:42:55Z",
- "updated_at": "2026-07-13T11:10:48Z",
- "pushed_at": "2026-07-13T11:10:28Z",
+ "updated_at": "2026-07-13T17:03:53Z",
+ "pushed_at": "2026-07-13T17:03:34Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-29969.json b/2025/CVE-2025-29969.json
index 1c88fbeda9..83938f9282 100644
--- a/2025/CVE-2025-29969.json
+++ b/2025/CVE-2025-29969.json
@@ -14,10 +14,10 @@
"description": "Exploitation of CVE-2025-29969",
"fork": false,
"created_at": "2026-02-18T18:23:33Z",
- "updated_at": "2026-07-13T12:10:37Z",
+ "updated_at": "2026-07-13T16:43:21Z",
"pushed_at": "2026-02-20T18:25:25Z",
- "stargazers_count": 66,
- "watchers_count": 66,
+ "stargazers_count": 65,
+ "watchers_count": 65,
"has_discussions": false,
"forks_count": 15,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 15,
- "watchers": 66,
+ "watchers": 65,
"score": 0,
"subscribers_count": 0
}
diff --git a/2025/CVE-2025-31258.json b/2025/CVE-2025-31258.json
index 2966738520..6999c6505d 100644
--- a/2025/CVE-2025-31258.json
+++ b/2025/CVE-2025-31258.json
@@ -14,8 +14,8 @@
"description": "🔓 Explore CVE-2025-31258 with this PoC demonstrating partial sandbox escape using RemoteViewServices for practical 1-day security practice.",
"fork": false,
"created_at": "2020-06-23T15:20:11Z",
- "updated_at": "2026-07-13T09:40:56Z",
- "pushed_at": "2026-07-13T09:40:39Z",
+ "updated_at": "2026-07-13T15:33:40Z",
+ "pushed_at": "2026-07-13T15:33:36Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-32463.json b/2025/CVE-2025-32463.json
index 0f925c3794..2136ed82ce 100644
--- a/2025/CVE-2025-32463.json
+++ b/2025/CVE-2025-32463.json
@@ -1529,8 +1529,8 @@
"description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.",
"fork": false,
"created_at": "2025-09-20T00:42:07Z",
- "updated_at": "2026-07-13T09:41:43Z",
- "pushed_at": "2026-07-13T09:41:39Z",
+ "updated_at": "2026-07-13T15:34:38Z",
+ "pushed_at": "2026-07-13T15:34:34Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2025/CVE-2025-36911.json b/2025/CVE-2025-36911.json
index 703a229a6d..d2a44612d9 100644
--- a/2025/CVE-2025-36911.json
+++ b/2025/CVE-2025-36911.json
@@ -91,7 +91,7 @@
"stargazers_count": 807,
"watchers_count": 807,
"has_discussions": false,
- "forks_count": 90,
+ "forks_count": 91,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -99,7 +99,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 90,
+ "forks": 91,
"watchers": 807,
"score": 0,
"subscribers_count": 23
diff --git a/2025/CVE-2025-38352.json b/2025/CVE-2025-38352.json
index 3414fc43fd..23f3180095 100644
--- a/2025/CVE-2025-38352.json
+++ b/2025/CVE-2025-38352.json
@@ -164,10 +164,10 @@
"description": "CVE-2025-38352 kernel exploit for LG webOS Smart TVs (ARM64). Achieves persistent root on real consumer hardware with novel exploitation techniques. Responsibly disclosed to LG.",
"fork": false,
"created_at": "2026-05-30T02:37:10Z",
- "updated_at": "2026-07-10T07:08:16Z",
+ "updated_at": "2026-07-13T13:55:04Z",
"pushed_at": "2026-06-01T21:47:09Z",
- "stargazers_count": 9,
- "watchers_count": 9,
+ "stargazers_count": 10,
+ "watchers_count": 10,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -189,7 +189,7 @@
],
"visibility": "public",
"forks": 0,
- "watchers": 9,
+ "watchers": 10,
"score": 0,
"subscribers_count": 0
}
diff --git a/2025/CVE-2025-49113.json b/2025/CVE-2025-49113.json
index d51320a8a4..ea3de83fa3 100644
--- a/2025/CVE-2025-49113.json
+++ b/2025/CVE-2025-49113.json
@@ -83,10 +83,10 @@
"description": null,
"fork": false,
"created_at": "2025-06-04T15:49:43Z",
- "updated_at": "2026-07-13T12:29:02Z",
+ "updated_at": "2026-07-13T17:39:09Z",
"pushed_at": "2025-06-06T04:05:55Z",
- "stargazers_count": 106,
- "watchers_count": 106,
+ "stargazers_count": 107,
+ "watchers_count": 107,
"has_discussions": false,
"forks_count": 21,
"allow_forking": true,
@@ -97,7 +97,7 @@
"topics": [],
"visibility": "public",
"forks": 21,
- "watchers": 106,
+ "watchers": 107,
"score": 0,
"subscribers_count": 2
},
diff --git a/2025/CVE-2025-49844.json b/2025/CVE-2025-49844.json
index 406f9b393e..e84102c916 100644
--- a/2025/CVE-2025-49844.json
+++ b/2025/CVE-2025-49844.json
@@ -14,8 +14,8 @@
"description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.",
"fork": false,
"created_at": "2019-04-13T07:51:09Z",
- "updated_at": "2026-07-13T09:54:49Z",
- "pushed_at": "2026-07-13T09:54:36Z",
+ "updated_at": "2026-07-13T15:47:47Z",
+ "pushed_at": "2026-07-13T15:47:37Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
"fork": false,
"created_at": "2022-04-06T09:27:39Z",
- "updated_at": "2026-07-13T09:55:23Z",
- "pushed_at": "2026-07-13T09:55:11Z",
+ "updated_at": "2026-07-13T15:49:35Z",
+ "pushed_at": "2026-07-13T15:48:13Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
diff --git a/2025/CVE-2025-51643.json b/2025/CVE-2025-51643.json
index 09584703ef..54e1ceb1e2 100644
--- a/2025/CVE-2025-51643.json
+++ b/2025/CVE-2025-51643.json
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2025-08-11T19:22:19Z",
- "updated_at": "2025-08-28T18:43:41Z",
+ "updated_at": "2026-07-13T13:13:02Z",
"pushed_at": "2025-08-28T18:43:38Z",
- "stargazers_count": 0,
- "watchers_count": 0,
+ "stargazers_count": 1,
+ "watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
- "watchers": 0,
+ "watchers": 1,
"score": 0,
"subscribers_count": 0
}
diff --git a/2025/CVE-2025-52915.json b/2025/CVE-2025-52915.json
index faff8caf1d..32e1ceb74b 100644
--- a/2025/CVE-2025-52915.json
+++ b/2025/CVE-2025-52915.json
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
- "updated_at": "2026-07-13T12:04:05Z",
+ "updated_at": "2026-07-13T13:25:12Z",
"pushed_at": "2026-07-12T09:40:22Z",
- "stargazers_count": 850,
- "watchers_count": 850,
+ "stargazers_count": 851,
+ "watchers_count": 851,
"has_discussions": false,
"forks_count": 125,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 125,
- "watchers": 850,
+ "watchers": 851,
"score": 0,
"subscribers_count": 20
}
diff --git a/2025/CVE-2025-54068.json b/2025/CVE-2025-54068.json
index 043c91cd81..19135b017e 100644
--- a/2025/CVE-2025-54068.json
+++ b/2025/CVE-2025-54068.json
@@ -19,7 +19,7 @@
"stargazers_count": 147,
"watchers_count": 147,
"has_discussions": false,
- "forks_count": 34,
+ "forks_count": 35,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 34,
+ "forks": 35,
"watchers": 147,
"score": 0,
"subscribers_count": 0
diff --git a/2025/CVE-2025-54100.json b/2025/CVE-2025-54100.json
index 8e30ea8593..0c929c4af4 100644
--- a/2025/CVE-2025-54100.json
+++ b/2025/CVE-2025-54100.json
@@ -47,10 +47,10 @@
"description": "CVE-2025-54100 (CVSS 7.8 High) is a command injection vulnerability in the Invoke-WebRequest cmdlet of Windows PowerShell 5.1. It arises from improper neutralization of special elements during the automatic parsing of Web responses.",
"fork": false,
"created_at": "2025-12-13T06:40:19Z",
- "updated_at": "2026-07-11T17:34:53Z",
+ "updated_at": "2026-07-13T13:36:43Z",
"pushed_at": "2025-12-13T08:43:07Z",
- "stargazers_count": 29,
- "watchers_count": 29,
+ "stargazers_count": 30,
+ "watchers_count": 30,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -66,7 +66,7 @@
],
"visibility": "public",
"forks": 7,
- "watchers": 29,
+ "watchers": 30,
"score": 0,
"subscribers_count": 0
},
diff --git a/2025/CVE-2025-54424.json b/2025/CVE-2025-54424.json
index 0a3980e851..d948200afa 100644
--- a/2025/CVE-2025-54424.json
+++ b/2025/CVE-2025-54424.json
@@ -53,8 +53,8 @@
"description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐",
"fork": false,
"created_at": "2025-08-14T05:16:16Z",
- "updated_at": "2026-07-13T09:37:18Z",
- "pushed_at": "2026-07-13T09:36:40Z",
+ "updated_at": "2026-07-13T18:44:16Z",
+ "pushed_at": "2026-07-13T18:43:45Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
diff --git a/2025/CVE-2025-55182.json b/2025/CVE-2025-55182.json
index ec812b2162..6bd3f0baf9 100644
--- a/2025/CVE-2025-55182.json
+++ b/2025/CVE-2025-55182.json
@@ -14,8 +14,8 @@
"description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.",
"fork": false,
"created_at": "2022-06-17T10:19:10Z",
- "updated_at": "2026-07-13T10:16:06Z",
- "pushed_at": "2026-07-13T10:15:59Z",
+ "updated_at": "2026-07-13T16:10:32Z",
+ "pushed_at": "2026-07-13T16:09:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -99,8 +99,8 @@
"description": null,
"fork": false,
"created_at": "2024-11-29T12:32:19Z",
- "updated_at": "2026-07-13T10:17:01Z",
- "pushed_at": "2026-07-13T10:16:38Z",
+ "updated_at": "2026-07-13T16:10:24Z",
+ "pushed_at": "2026-07-13T16:09:34Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -148,8 +148,8 @@
"description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
"fork": false,
"created_at": "2025-06-06T16:34:46Z",
- "updated_at": "2026-07-13T10:16:52Z",
- "pushed_at": "2026-07-13T10:16:16Z",
+ "updated_at": "2026-07-13T16:09:39Z",
+ "pushed_at": "2026-07-13T16:09:06Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -2295,10 +2295,10 @@
"description": "Original Proof-of-Concepts for React2Shell CVE-2025-55182",
"fork": false,
"created_at": "2025-12-05T08:00:07Z",
- "updated_at": "2026-07-08T14:09:14Z",
+ "updated_at": "2026-07-13T13:46:37Z",
"pushed_at": "2025-12-05T08:56:15Z",
- "stargazers_count": 1052,
- "watchers_count": 1052,
+ "stargazers_count": 1051,
+ "watchers_count": 1051,
"has_discussions": false,
"forks_count": 108,
"allow_forking": true,
@@ -2312,7 +2312,7 @@
],
"visibility": "public",
"forks": 108,
- "watchers": 1052,
+ "watchers": 1051,
"score": 0,
"subscribers_count": 25
},
@@ -11741,8 +11741,8 @@
"description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.",
"fork": false,
"created_at": "2025-12-24T14:48:19Z",
- "updated_at": "2026-07-13T10:16:09Z",
- "pushed_at": "2026-07-13T10:15:58Z",
+ "updated_at": "2026-07-13T16:10:16Z",
+ "pushed_at": "2026-07-13T16:08:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12259,8 +12259,8 @@
"description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
"fork": false,
"created_at": "2026-01-02T01:28:57Z",
- "updated_at": "2026-07-13T10:20:04Z",
- "pushed_at": "2026-07-13T10:20:00Z",
+ "updated_at": "2026-07-13T16:13:15Z",
+ "pushed_at": "2026-07-13T16:12:56Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -13713,10 +13713,10 @@
"description": "Async RCE scanner for CVE-2025-55182 \/ CVE-2025-66478 — prototype-pollution → code execution via React Server Actions.",
"fork": false,
"created_at": "2026-02-28T20:09:06Z",
- "updated_at": "2026-06-21T10:41:37Z",
+ "updated_at": "2026-07-13T16:25:44Z",
"pushed_at": "2026-03-18T08:55:10Z",
- "stargazers_count": 2,
- "watchers_count": 2,
+ "stargazers_count": 3,
+ "watchers_count": 3,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -13734,7 +13734,7 @@
],
"visibility": "public",
"forks": 1,
- "watchers": 2,
+ "watchers": 3,
"score": 0,
"subscribers_count": 0
},
diff --git a/2025/CVE-2025-57819.json b/2025/CVE-2025-57819.json
index 860431a79a..3866d85a6e 100644
--- a/2025/CVE-2025-57819.json
+++ b/2025/CVE-2025-57819.json
@@ -472,10 +472,10 @@
"description": "Unauthenticated SQL Injection to Remote Code Execution in FreePBX — CVE-2025-57819",
"fork": false,
"created_at": "2026-06-08T10:22:14Z",
- "updated_at": "2026-06-08T10:30:35Z",
+ "updated_at": "2026-07-13T14:03:56Z",
"pushed_at": "2026-06-08T10:30:32Z",
- "stargazers_count": 0,
- "watchers_count": 0,
+ "stargazers_count": 1,
+ "watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -486,7 +486,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
- "watchers": 0,
+ "watchers": 1,
"score": 0,
"subscribers_count": 0
},
diff --git a/2025/CVE-2025-6514.json b/2025/CVE-2025-6514.json
index c3e23349ca..a8f4ea8e87 100644
--- a/2025/CVE-2025-6514.json
+++ b/2025/CVE-2025-6514.json
@@ -1,37 +1,4 @@
[
- {
- "id": 1018096874,
- "name": "CVE-2025-6514",
- "full_name": "ChaseHCS\/CVE-2025-6514",
- "owner": {
- "login": "ChaseHCS",
- "id": 150468279,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/150468279?v=4",
- "html_url": "https:\/\/github.com\/ChaseHCS",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/ChaseHCS\/CVE-2025-6514",
- "description": "Documentation for CVE-2025-6514. MCP-Remote RCE.",
- "fork": false,
- "created_at": "2025-07-11T15:46:24Z",
- "updated_at": "2025-07-11T16:16:44Z",
- "pushed_at": "2025-07-11T16:16:40Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 0
- },
{
"id": 1083550744,
"name": "CVE-2025-6514",
diff --git a/2025/CVE-2025-66398.json b/2025/CVE-2025-66398.json
index 05ed065a83..88c3175bb6 100644
--- a/2025/CVE-2025-66398.json
+++ b/2025/CVE-2025-66398.json
@@ -64,8 +64,8 @@
"description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.",
"fork": false,
"created_at": "2026-03-23T09:09:21Z",
- "updated_at": "2026-07-13T11:04:41Z",
- "pushed_at": "2026-07-13T11:04:36Z",
+ "updated_at": "2026-07-13T16:57:40Z",
+ "pushed_at": "2026-07-13T16:57:32Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2025/CVE-2025-66478.json b/2025/CVE-2025-66478.json
index 3b17a1c365..58886c43a9 100644
--- a/2025/CVE-2025-66478.json
+++ b/2025/CVE-2025-66478.json
@@ -14,8 +14,8 @@
"description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.",
"fork": false,
"created_at": "2025-10-01T07:40:09Z",
- "updated_at": "2026-07-13T10:17:17Z",
- "pushed_at": "2026-07-13T10:17:05Z",
+ "updated_at": "2026-07-13T16:10:50Z",
+ "pushed_at": "2026-07-13T16:10:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-68921.json b/2025/CVE-2025-68921.json
index 3048644669..75bbc4da31 100644
--- a/2025/CVE-2025-68921.json
+++ b/2025/CVE-2025-68921.json
@@ -47,8 +47,8 @@
"description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.",
"fork": false,
"created_at": "2026-01-24T21:00:41Z",
- "updated_at": "2026-07-13T10:32:35Z",
- "pushed_at": "2026-07-13T10:32:26Z",
+ "updated_at": "2026-07-13T16:25:38Z",
+ "pushed_at": "2026-07-13T16:25:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2026/CVE-2026-20841.json b/2026/CVE-2026-20841.json
index fd25a0b372..e107d297a1 100644
--- a/2026/CVE-2026-20841.json
+++ b/2026/CVE-2026-20841.json
@@ -14,8 +14,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.",
"fork": false,
"created_at": "2024-09-22T12:19:06Z",
- "updated_at": "2026-07-13T10:48:37Z",
- "pushed_at": "2026-07-13T10:48:23Z",
+ "updated_at": "2026-07-13T16:42:39Z",
+ "pushed_at": "2026-07-13T16:41:48Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.",
"fork": false,
"created_at": "2026-02-26T05:21:28Z",
- "updated_at": "2026-07-13T10:47:48Z",
- "pushed_at": "2026-07-13T10:47:36Z",
+ "updated_at": "2026-07-13T16:41:36Z",
+ "pushed_at": "2026-07-13T16:41:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2026/CVE-2026-20896.json b/2026/CVE-2026-20896.json
index fefaed3033..fc5099d86c 100644
--- a/2026/CVE-2026-20896.json
+++ b/2026/CVE-2026-20896.json
@@ -47,10 +47,10 @@
"description": "Public PoC and detector for CVE-2026-20896 (\"Gitea Docker: One Header, Any User\")",
"fork": false,
"created_at": "2026-07-05T17:35:09Z",
- "updated_at": "2026-07-12T01:06:19Z",
+ "updated_at": "2026-07-13T15:25:58Z",
"pushed_at": "2026-07-05T17:35:12Z",
- "stargazers_count": 5,
- "watchers_count": 5,
+ "stargazers_count": 6,
+ "watchers_count": 6,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
- "watchers": 5,
+ "watchers": 6,
"score": 0,
"subscribers_count": 0
},
diff --git a/2026/CVE-2026-24061.json b/2026/CVE-2026-24061.json
index 1cea11c117..220c02b038 100644
--- a/2026/CVE-2026-24061.json
+++ b/2026/CVE-2026-24061.json
@@ -59,8 +59,8 @@
"description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.",
"fork": false,
"created_at": "2026-02-03T19:46:10Z",
- "updated_at": "2026-07-13T10:38:17Z",
- "pushed_at": "2026-07-13T10:38:13Z",
+ "updated_at": "2026-07-13T16:32:07Z",
+ "pushed_at": "2026-07-13T16:31:32Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2026/CVE-2026-24291.json b/2026/CVE-2026-24291.json
index 7ef1133667..d4ae625838 100644
--- a/2026/CVE-2026-24291.json
+++ b/2026/CVE-2026-24291.json
@@ -14,8 +14,8 @@
"description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions",
"fork": false,
"created_at": "2026-03-26T04:38:27Z",
- "updated_at": "2026-07-13T11:06:23Z",
- "pushed_at": "2026-07-13T11:06:16Z",
+ "updated_at": "2026-07-13T16:59:27Z",
+ "pushed_at": "2026-07-13T16:59:22Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
diff --git a/2026/CVE-2026-2441.json b/2026/CVE-2026-2441.json
index eb5e49db00..25c70c9bc1 100644
--- a/2026/CVE-2026-2441.json
+++ b/2026/CVE-2026-2441.json
@@ -14,8 +14,8 @@
"description": "Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.",
"fork": false,
"created_at": "2026-03-03T14:19:18Z",
- "updated_at": "2026-07-13T10:50:56Z",
- "pushed_at": "2026-07-13T10:50:47Z",
+ "updated_at": "2026-07-13T16:44:57Z",
+ "pushed_at": "2026-07-13T16:44:10Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2026/CVE-2026-2472.json b/2026/CVE-2026-2472.json
index ebdc9971bd..6cdaac72d3 100644
--- a/2026/CVE-2026-2472.json
+++ b/2026/CVE-2026-2472.json
@@ -14,8 +14,8 @@
"description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.",
"fork": false,
"created_at": "2026-03-10T14:40:04Z",
- "updated_at": "2026-07-13T10:55:56Z",
- "pushed_at": "2026-07-13T10:55:26Z",
+ "updated_at": "2026-07-13T16:48:52Z",
+ "pushed_at": "2026-07-13T16:48:49Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
diff --git a/2026/CVE-2026-31431.json b/2026/CVE-2026-31431.json
index 99ada7a37f..d9e7ced5f5 100644
--- a/2026/CVE-2026-31431.json
+++ b/2026/CVE-2026-31431.json
@@ -723,8 +723,8 @@
"description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.",
"fork": false,
"created_at": "2026-05-05T04:58:21Z",
- "updated_at": "2026-07-13T11:26:50Z",
- "pushed_at": "2026-07-13T11:26:39Z",
+ "updated_at": "2026-07-13T17:19:13Z",
+ "pushed_at": "2026-07-13T17:19:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -772,8 +772,8 @@
"description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.",
"fork": false,
"created_at": "2026-05-06T09:49:14Z",
- "updated_at": "2026-07-13T11:27:36Z",
- "pushed_at": "2026-07-13T11:27:23Z",
+ "updated_at": "2026-07-13T17:19:59Z",
+ "pushed_at": "2026-07-13T17:19:46Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
@@ -806,39 +806,6 @@
"score": 0,
"subscribers_count": 0
},
- {
- "id": 1231023679,
- "name": "cve-2026-31431-ftrace",
- "full_name": "philfry\/cve-2026-31431-ftrace",
- "owner": {
- "login": "philfry",
- "id": 1649785,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1649785?v=4",
- "html_url": "https:\/\/github.com\/philfry",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/philfry\/cve-2026-31431-ftrace",
- "description": "mitigation of cve-2026-31431 using ftrace",
- "fork": false,
- "created_at": "2026-05-06T14:50:12Z",
- "updated_at": "2026-07-13T12:12:45Z",
- "pushed_at": "2026-05-12T07:19:26Z",
- "stargazers_count": 12,
- "watchers_count": 12,
- "has_discussions": false,
- "forks_count": 3,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 3,
- "watchers": 12,
- "score": 0,
- "subscribers_count": 0
- },
{
"id": 1232772151,
"name": "Copy-Fail",
diff --git a/2026/CVE-2026-31694.json b/2026/CVE-2026-31694.json
index a3aeb7c2d4..2ba06ab487 100644
--- a/2026/CVE-2026-31694.json
+++ b/2026/CVE-2026-31694.json
@@ -14,10 +14,10 @@
"description": "Linux kernel FUSE readdir cache out-of-bounds write (CVE-2026-31694): a malicious FUSE server overflows a page-cache page by 24 bytes. PoC plus an unprivileged local-root exploit via \/etc\/passwd page-cache corruption. Run only inside a VM.",
"fork": false,
"created_at": "2026-06-30T11:49:36Z",
- "updated_at": "2026-07-11T01:09:21Z",
+ "updated_at": "2026-07-13T14:11:14Z",
"pushed_at": "2026-06-30T12:39:22Z",
- "stargazers_count": 13,
- "watchers_count": 13,
+ "stargazers_count": 14,
+ "watchers_count": 14,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
- "watchers": 13,
+ "watchers": 14,
"score": 0,
"subscribers_count": 1
}
diff --git a/2026/CVE-2026-31802.json b/2026/CVE-2026-31802.json
index f236bc7dd1..956e8131c3 100644
--- a/2026/CVE-2026-31802.json
+++ b/2026/CVE-2026-31802.json
@@ -14,8 +14,8 @@
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"fork": false,
"created_at": "2026-03-28T20:49:46Z",
- "updated_at": "2026-07-13T11:07:44Z",
- "pushed_at": "2026-07-13T11:07:34Z",
+ "updated_at": "2026-07-13T17:01:13Z",
+ "pushed_at": "2026-07-13T17:00:40Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2026/CVE-2026-35204.json b/2026/CVE-2026-35204.json
index 3707c49235..a7bb621c27 100644
--- a/2026/CVE-2026-35204.json
+++ b/2026/CVE-2026-35204.json
@@ -14,8 +14,8 @@
"description": "CVE-2026-35204 PoC",
"fork": false,
"created_at": "2026-07-08T14:26:55Z",
- "updated_at": "2026-07-09T10:04:58Z",
- "pushed_at": "2026-07-09T10:04:28Z",
+ "updated_at": "2026-07-13T18:43:17Z",
+ "pushed_at": "2026-07-13T18:42:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -31,5 +31,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1299328313,
+ "name": "CVE-2026-35204-Helm-Plugin-Traversal",
+ "full_name": "amnsecurity\/CVE-2026-35204-Helm-Plugin-Traversal",
+ "owner": {
+ "login": "amnsecurity",
+ "id": 249479084,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/249479084?v=4",
+ "html_url": "https:\/\/github.com\/amnsecurity",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/amnsecurity\/CVE-2026-35204-Helm-Plugin-Traversal",
+ "description": "CVE-2026-35204 - Helm Plugin Path Traversal Arbitrary File Write - PoC & Analysis | CVSS 8.6 HIGH | AMN SECURITY",
+ "fork": false,
+ "created_at": "2026-07-13T13:32:56Z",
+ "updated_at": "2026-07-13T13:38:04Z",
+ "pushed_at": "2026-07-13T13:33:01Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2026/CVE-2026-3609.json b/2026/CVE-2026-3609.json
index d199283959..4edbb88ee0 100644
--- a/2026/CVE-2026-3609.json
+++ b/2026/CVE-2026-3609.json
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
- "updated_at": "2026-07-13T12:04:05Z",
+ "updated_at": "2026-07-13T13:25:12Z",
"pushed_at": "2026-07-12T09:40:22Z",
- "stargazers_count": 850,
- "watchers_count": 850,
+ "stargazers_count": 851,
+ "watchers_count": 851,
"has_discussions": false,
"forks_count": 125,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 125,
- "watchers": 850,
+ "watchers": 851,
"score": 0,
"subscribers_count": 20
},
diff --git a/2026/CVE-2026-36214.json b/2026/CVE-2026-36214.json
index 27d4cdf5c8..ccd2209319 100644
--- a/2026/CVE-2026-36214.json
+++ b/2026/CVE-2026-36214.json
@@ -31,5 +31,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1299326736,
+ "name": "CVE-2026-36214-osTicket-XSS",
+ "full_name": "amnsecurity\/CVE-2026-36214-osTicket-XSS",
+ "owner": {
+ "login": "amnsecurity",
+ "id": 249479084,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/249479084?v=4",
+ "html_url": "https:\/\/github.com\/amnsecurity",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/amnsecurity\/CVE-2026-36214-osTicket-XSS",
+ "description": "CVE-2026-36214 - osTicket Stored XSS via Bootstrap Tooltip - PoC & Analysis | CVSS 8.7 HIGH | AMN SECURITY",
+ "fork": false,
+ "created_at": "2026-07-13T13:31:19Z",
+ "updated_at": "2026-07-13T13:38:02Z",
+ "pushed_at": "2026-07-13T13:31:26Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2026/CVE-2026-40047.json b/2026/CVE-2026-40047.json
index 197100bc56..09f7391b17 100644
--- a/2026/CVE-2026-40047.json
+++ b/2026/CVE-2026-40047.json
@@ -31,5 +31,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1299325335,
+ "name": "CVE-2026-40047-Apache-Camel-Docling-Injection",
+ "full_name": "amnsecurity\/CVE-2026-40047-Apache-Camel-Docling-Injection",
+ "owner": {
+ "login": "amnsecurity",
+ "id": 249479084,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/249479084?v=4",
+ "html_url": "https:\/\/github.com\/amnsecurity",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/amnsecurity\/CVE-2026-40047-Apache-Camel-Docling-Injection",
+ "description": "CVE-2026-40047 - Apache Camel Docling CLI Argument Injection - PoC & Analysis | CVSS 9.1 CRITICAL | AMN SECURITY",
+ "fork": false,
+ "created_at": "2026-07-13T13:29:58Z",
+ "updated_at": "2026-07-13T13:38:01Z",
+ "pushed_at": "2026-07-13T13:30:04Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2026/CVE-2026-41091.json b/2026/CVE-2026-41091.json
index 5a64e33d38..e16fae81c8 100644
--- a/2026/CVE-2026-41091.json
+++ b/2026/CVE-2026-41091.json
@@ -80,8 +80,8 @@
"description": "🔥 CVE-2026-41091 SolarFlare | Microsoft Defender LPE exploit. Low-privileged users gain NT AUTHORITY\\SYSTEM via Cloud Files API + NTFS junction trickery. Forces Defender to write malicious payloads to System32 with SYSTEM rights. ⚠️ Actively exploited in wild. CVSS 7.8. Patch: Defender Engine 1.1.26040.8. 🛡️ Educational PoC only. ",
"fork": false,
"created_at": "2026-06-20T10:25:34Z",
- "updated_at": "2026-06-29T20:42:59Z",
- "pushed_at": "2026-06-20T12:08:29Z",
+ "updated_at": "2026-07-13T14:19:16Z",
+ "pushed_at": "2026-07-13T14:17:00Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
diff --git a/2026/CVE-2026-41940.json b/2026/CVE-2026-41940.json
index 076c7447ed..2c89ff44a7 100644
--- a/2026/CVE-2026-41940.json
+++ b/2026/CVE-2026-41940.json
@@ -258,8 +258,8 @@
"description": "Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.",
"fork": false,
"created_at": "2026-05-06T18:08:48Z",
- "updated_at": "2026-07-13T11:28:07Z",
- "pushed_at": "2026-07-13T11:27:56Z",
+ "updated_at": "2026-07-13T17:20:14Z",
+ "pushed_at": "2026-07-13T17:20:08Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2026/CVE-2026-43284.json b/2026/CVE-2026-43284.json
index 909be4c644..efb9ddb3ea 100644
--- a/2026/CVE-2026-43284.json
+++ b/2026/CVE-2026-43284.json
@@ -584,7 +584,7 @@
"description": "IOCs and a read-only triage checklist from a real Linux root compromise: RedTail miner, XorDDoS persistence, MoneroOcean miner, DirtyFrag LPE (CVE-2026-43284\/43500). CC0.",
"fork": false,
"created_at": "2026-07-07T21:18:14Z",
- "updated_at": "2026-07-08T00:45:03Z",
+ "updated_at": "2026-07-13T18:50:26Z",
"pushed_at": "2026-07-08T00:45:00Z",
"stargazers_count": 2,
"watchers_count": 2,
diff --git a/2026/CVE-2026-43499.json b/2026/CVE-2026-43499.json
index 99f502cb95..8bb9e60cdf 100644
--- a/2026/CVE-2026-43499.json
+++ b/2026/CVE-2026-43499.json
@@ -14,10 +14,10 @@
"description": "CVE-2026-43499 PoC",
"fork": false,
"created_at": "2026-06-27T04:09:11Z",
- "updated_at": "2026-07-13T09:58:18Z",
+ "updated_at": "2026-07-13T17:45:51Z",
"pushed_at": "2026-06-27T05:04:04Z",
- "stargazers_count": 97,
- "watchers_count": 97,
+ "stargazers_count": 99,
+ "watchers_count": 99,
"has_discussions": false,
"forks_count": 26,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 26,
- "watchers": 97,
+ "watchers": 99,
"score": 0,
"subscribers_count": 1
},
@@ -113,8 +113,8 @@
"description": null,
"fork": false,
"created_at": "2026-07-09T00:41:15Z",
- "updated_at": "2026-07-13T11:41:45Z",
- "pushed_at": "2026-07-13T11:41:38Z",
+ "updated_at": "2026-07-13T16:20:52Z",
+ "pushed_at": "2026-07-13T16:20:06Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -146,12 +146,12 @@
"description": "OPPO Find N2 GhostLock (CVE-2026-43499) exploit adaptation",
"fork": false,
"created_at": "2026-07-09T22:46:15Z",
- "updated_at": "2026-07-13T09:30:05Z",
- "pushed_at": "2026-07-12T19:01:40Z",
- "stargazers_count": 37,
- "watchers_count": 37,
+ "updated_at": "2026-07-13T18:37:51Z",
+ "pushed_at": "2026-07-13T18:51:38Z",
+ "stargazers_count": 38,
+ "watchers_count": 38,
"has_discussions": false,
- "forks_count": 18,
+ "forks_count": 19,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -159,8 +159,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 18,
- "watchers": 37,
+ "forks": 19,
+ "watchers": 38,
"score": 0,
"subscribers_count": 0
},
@@ -245,12 +245,12 @@
"description": "CVE-2026-43499 Implementation for 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k",
"fork": false,
"created_at": "2026-07-12T10:15:03Z",
- "updated_at": "2026-07-13T12:17:03Z",
+ "updated_at": "2026-07-13T18:28:52Z",
"pushed_at": "2026-07-12T14:08:59Z",
- "stargazers_count": 94,
- "watchers_count": 94,
+ "stargazers_count": 105,
+ "watchers_count": 105,
"has_discussions": false,
- "forks_count": 35,
+ "forks_count": 38,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -258,8 +258,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 35,
- "watchers": 94,
+ "forks": 38,
+ "watchers": 105,
"score": 0,
"subscribers_count": 0
},
@@ -311,12 +311,12 @@
"description": "基于 CVE-2026-43499 的 8E5 机型自动化解锁辅助工具，仅限授权安全研究与自有设备使用。",
"fork": false,
"created_at": "2026-07-12T22:59:55Z",
- "updated_at": "2026-07-13T12:48:09Z",
- "pushed_at": "2026-07-13T02:07:37Z",
- "stargazers_count": 31,
- "watchers_count": 31,
+ "updated_at": "2026-07-13T17:55:27Z",
+ "pushed_at": "2026-07-13T17:38:41Z",
+ "stargazers_count": 40,
+ "watchers_count": 40,
"has_discussions": false,
- "forks_count": 10,
+ "forks_count": 12,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -324,8 +324,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 10,
- "watchers": 31,
+ "forks": 12,
+ "watchers": 40,
"score": 0,
"subscribers_count": 0
},
@@ -377,8 +377,8 @@
"description": "(Hopefully) A tool to root for (most) Android devices through CVE-2026-43499",
"fork": false,
"created_at": "2026-07-13T05:45:27Z",
- "updated_at": "2026-07-13T12:36:57Z",
- "pushed_at": "2026-07-13T12:45:13Z",
+ "updated_at": "2026-07-13T14:30:52Z",
+ "pushed_at": "2026-07-13T14:29:54Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -427,5 +427,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1299327305,
+ "name": "Android-CVE-2026-43499",
+ "full_name": "CakesTwix\/Android-CVE-2026-43499",
+ "owner": {
+ "login": "CakesTwix",
+ "id": 57946485,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57946485?v=4",
+ "html_url": "https:\/\/github.com\/CakesTwix",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/CakesTwix\/Android-CVE-2026-43499",
+ "description": "Android version CVE-2026-43499 tester",
+ "fork": false,
+ "created_at": "2026-07-13T13:31:55Z",
+ "updated_at": "2026-07-13T13:33:30Z",
+ "pushed_at": "2026-07-13T13:51:04Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2026/CVE-2026-4480.json b/2026/CVE-2026-4480.json
index 953090d86e..ae7959c36b 100644
--- a/2026/CVE-2026-4480.json
+++ b/2026/CVE-2026-4480.json
@@ -14,12 +14,12 @@
"description": null,
"fork": false,
"created_at": "2026-06-05T11:05:55Z",
- "updated_at": "2026-07-12T23:05:06Z",
+ "updated_at": "2026-07-13T16:28:10Z",
"pushed_at": "2026-06-05T11:31:22Z",
- "stargazers_count": 16,
- "watchers_count": 16,
+ "stargazers_count": 17,
+ "watchers_count": 17,
"has_discussions": false,
- "forks_count": 3,
+ "forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 3,
- "watchers": 16,
+ "forks": 4,
+ "watchers": 17,
"score": 0,
"subscribers_count": 1
},
diff --git a/2026/CVE-2026-45585.json b/2026/CVE-2026-45585.json
index fa1cb9c96a..1e9d478aef 100644
--- a/2026/CVE-2026-45585.json
+++ b/2026/CVE-2026-45585.json
@@ -212,8 +212,8 @@
"description": "Manage and recover BitLocker encrypted drives with this tool for Windows 11 recovery key management and educational study of CVE-2026-45585.",
"fork": false,
"created_at": "2026-06-16T07:21:36Z",
- "updated_at": "2026-07-13T11:36:33Z",
- "pushed_at": "2026-07-13T11:36:04Z",
+ "updated_at": "2026-07-13T17:26:54Z",
+ "pushed_at": "2026-07-13T17:26:49Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
diff --git a/2026/CVE-2026-46215.json b/2026/CVE-2026-46215.json
index 28d339ab62..ade52a13b3 100644
--- a/2026/CVE-2026-46215.json
+++ b/2026/CVE-2026-46215.json
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-06-18T14:39:11Z",
- "updated_at": "2026-07-11T23:15:37Z",
+ "updated_at": "2026-07-13T14:32:35Z",
"pushed_at": "2026-06-18T15:58:56Z",
- "stargazers_count": 8,
- "watchers_count": 8,
+ "stargazers_count": 9,
+ "watchers_count": 9,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
- "watchers": 8,
+ "watchers": 9,
"score": 0,
"subscribers_count": 0
},
diff --git a/2026/CVE-2026-46300.json b/2026/CVE-2026-46300.json
index 1d4e20a291..42a36644e4 100644
--- a/2026/CVE-2026-46300.json
+++ b/2026/CVE-2026-46300.json
@@ -131,6 +131,45 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1242816604,
+ "name": "cve_2026_frag_family_fix",
+ "full_name": "First-John\/cve_2026_frag_family_fix",
+ "owner": {
+ "login": "First-John",
+ "id": 283894813,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/283894813?v=4",
+ "html_url": "https:\/\/github.com\/First-John",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/First-John\/cve_2026_frag_family_fix",
+ "description": "CVE-2026-46300 \/ CVE-2026-43500 \/ CVE-2026-31431 \/ CVE-2026-43284 golang hotfix",
+ "fork": false,
+ "created_at": "2026-05-18T19:32:29Z",
+ "updated_at": "2026-07-13T04:24:37Z",
+ "pushed_at": "2026-07-13T04:25:23Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 1,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2026-31431",
+ "cve-2026-43284",
+ "cve-2026-43500",
+ "cve-2026-46300",
+ "hotfix"
+ ],
+ "visibility": "public",
+ "forks": 1,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1244551945,
"name": "Fragnesia-go",
diff --git a/2026/CVE-2026-46331.json b/2026/CVE-2026-46331.json
index b949d7cd5c..b4ebcbb0fb 100644
--- a/2026/CVE-2026-46331.json
+++ b/2026/CVE-2026-46331.json
@@ -14,10 +14,10 @@
"description": "PACKET_EDIT_MEME.c (aka CVE-2026-46331): yet another page cache poisoning nightmare",
"fork": false,
"created_at": "2026-06-17T04:09:56Z",
- "updated_at": "2026-07-08T07:15:38Z",
+ "updated_at": "2026-07-13T16:39:05Z",
"pushed_at": "2026-06-17T04:55:06Z",
- "stargazers_count": 133,
- "watchers_count": 133,
+ "stargazers_count": 132,
+ "watchers_count": 132,
"has_discussions": false,
"forks_count": 44,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 44,
- "watchers": 133,
+ "watchers": 132,
"score": 0,
"subscribers_count": 4
},
diff --git a/2026/CVE-2026-46454.json b/2026/CVE-2026-46454.json
new file mode 100644
index 0000000000..cd76e6cc04
--- /dev/null
+++ b/2026/CVE-2026-46454.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1299295075,
+ "name": "CVE-2026-46454",
+ "full_name": "oscerd\/CVE-2026-46454",
+ "owner": {
+ "login": "oscerd",
+ "id": 5106647,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5106647?v=4",
+ "html_url": "https:\/\/github.com\/oscerd",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/oscerd\/CVE-2026-46454",
+ "description": "Reproducer for CVE-2026-46454 — Apache Camel camel-cometd inbound Bayeux header injection (unauthenticated Camel control-header injection → downstream producer steering \/ RCE)",
+ "fork": false,
+ "created_at": "2026-07-13T12:58:04Z",
+ "updated_at": "2026-07-13T12:58:46Z",
+ "pushed_at": "2026-07-13T12:58:07Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2026/CVE-2026-46455.json b/2026/CVE-2026-46455.json
new file mode 100644
index 0000000000..a6b87bcd04
--- /dev/null
+++ b/2026/CVE-2026-46455.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1299463964,
+ "name": "CVE-2026-46455",
+ "full_name": "oscerd\/CVE-2026-46455",
+ "owner": {
+ "login": "oscerd",
+ "id": 5106647,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5106647?v=4",
+ "html_url": "https:\/\/github.com\/oscerd",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/oscerd\/CVE-2026-46455",
+ "description": "Reproducer for CVE-2026-46455 — Apache Camel camel-keycloak missing TokenVerifier.IS_ACTIVE check (expired access tokens accepted)",
+ "fork": false,
+ "created_at": "2026-07-13T15:47:38Z",
+ "updated_at": "2026-07-13T15:49:07Z",
+ "pushed_at": "2026-07-13T15:48:15Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2026/CVE-2026-46529.json b/2026/CVE-2026-46529.json
index 25df0b4a58..7fb560a244 100644
--- a/2026/CVE-2026-46529.json
+++ b/2026/CVE-2026-46529.json
@@ -31,5 +31,38 @@
"watchers": 13,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1299321424,
+ "name": "CVE-2026-46529-Atril-PDF-RCE",
+ "full_name": "amnsecurity\/CVE-2026-46529-Atril-PDF-RCE",
+ "owner": {
+ "login": "amnsecurity",
+ "id": 249479084,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/249479084?v=4",
+ "html_url": "https:\/\/github.com\/amnsecurity",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/amnsecurity\/CVE-2026-46529-Atril-PDF-RCE",
+ "description": "CVE-2026-46529 - Atril Evince XReader PDF Clickable Link RCE - PoC & Analysis | CVSS 7.8 HIGH | AMN SECURITY",
+ "fork": false,
+ "created_at": "2026-07-13T13:26:18Z",
+ "updated_at": "2026-07-13T13:37:59Z",
+ "pushed_at": "2026-07-13T13:26:22Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2026/CVE-2026-48907.json b/2026/CVE-2026-48907.json
index faad7bd046..d857b10072 100644
--- a/2026/CVE-2026-48907.json
+++ b/2026/CVE-2026-48907.json
@@ -574,5 +574,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1299318685,
+ "name": "CVE-2026-48907-Joomla-JCE-RCE",
+ "full_name": "amnsecurity\/CVE-2026-48907-Joomla-JCE-RCE",
+ "owner": {
+ "login": "amnsecurity",
+ "id": 249479084,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/249479084?v=4",
+ "html_url": "https:\/\/github.com\/amnsecurity",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/amnsecurity\/CVE-2026-48907-Joomla-JCE-RCE",
+ "description": "CVE-2026-48907 - Joomla JCE Editor Unauthenticated RCE - PoC & Analysis | CVSS 9.8 CRITICAL | AMN SECURITY",
+ "fork": false,
+ "created_at": "2026-07-13T13:23:19Z",
+ "updated_at": "2026-07-13T13:37:57Z",
+ "pushed_at": "2026-07-13T13:23:23Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2026/CVE-2026-56291.json b/2026/CVE-2026-56291.json
index 7af2470156..076e967945 100644
--- a/2026/CVE-2026-56291.json
+++ b/2026/CVE-2026-56291.json
@@ -38,5 +38,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1299406701,
+ "name": "CVE-2026-56291.yaml",
+ "full_name": "rimbadirgantara\/CVE-2026-56291.yaml",
+ "owner": {
+ "login": "rimbadirgantara",
+ "id": 97583410,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97583410?v=4",
+ "html_url": "https:\/\/github.com\/rimbadirgantara",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/rimbadirgantara\/CVE-2026-56291.yaml",
+ "description": "nuclei template for CVE-2026-56291",
+ "fork": false,
+ "created_at": "2026-07-13T14:50:00Z",
+ "updated_at": "2026-07-13T14:53:56Z",
+ "pushed_at": "2026-07-13T14:53:52Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2026/CVE-2026-57829.json b/2026/CVE-2026-57829.json
index 63dd3efe73..07011e5e95 100644
--- a/2026/CVE-2026-57829.json
+++ b/2026/CVE-2026-57829.json
@@ -14,10 +14,10 @@
"description": "Unauthenticated Stored XSS in Joomla Helix Ultimate (JoomShaper) <= 2.2.6",
"fork": false,
"created_at": "2026-07-13T08:08:24Z",
- "updated_at": "2026-07-13T11:30:09Z",
+ "updated_at": "2026-07-13T17:49:08Z",
"pushed_at": "2026-07-13T08:20:53Z",
- "stargazers_count": 1,
- "watchers_count": 1,
+ "stargazers_count": 3,
+ "watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -36,7 +36,7 @@
],
"visibility": "public",
"forks": 0,
- "watchers": 1,
+ "watchers": 3,
"score": 0,
"subscribers_count": 0
}
diff --git a/2026/CVE-2026-57830.json b/2026/CVE-2026-57830.json
index f29c1594b2..23bd7113b2 100644
--- a/2026/CVE-2026-57830.json
+++ b/2026/CVE-2026-57830.json
@@ -14,10 +14,10 @@
"description": "Unauthenticated Arbitrary File\/Folder Deletion in Joomla Helix Ultimate (JoomShaper) <= 2.2.6 — CVE-2026-57830",
"fork": false,
"created_at": "2026-07-13T08:12:57Z",
- "updated_at": "2026-07-13T11:37:31Z",
+ "updated_at": "2026-07-13T13:14:41Z",
"pushed_at": "2026-07-13T11:37:07Z",
- "stargazers_count": 1,
- "watchers_count": 1,
+ "stargazers_count": 2,
+ "watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -35,7 +35,7 @@
],
"visibility": "public",
"forks": 0,
- "watchers": 1,
+ "watchers": 2,
"score": 0,
"subscribers_count": 0
}
diff --git a/2026/CVE-2026-6307.json b/2026/CVE-2026-6307.json
index 3e4a952fe5..f3e7f1f52b 100644
--- a/2026/CVE-2026-6307.json
+++ b/2026/CVE-2026-6307.json
@@ -64,5 +64,38 @@
"watchers": 8,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1299317379,
+ "name": "CVE-2026-6307-Chrome-V8-Sandbox-Escape",
+ "full_name": "amnsecurity\/CVE-2026-6307-Chrome-V8-Sandbox-Escape",
+ "owner": {
+ "login": "amnsecurity",
+ "id": 249479084,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/249479084?v=4",
+ "html_url": "https:\/\/github.com\/amnsecurity",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/amnsecurity\/CVE-2026-6307-Chrome-V8-Sandbox-Escape",
+ "description": "CVE-2026-6307 - Google Chrome V8 Turbofan Type Confusion Sandbox Escape - PoC & Analysis | CVSS 8.8 HIGH | AMN SECURITY",
+ "fork": false,
+ "created_at": "2026-07-13T13:22:00Z",
+ "updated_at": "2026-07-13T13:37:56Z",
+ "pushed_at": "2026-07-13T13:22:06Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/README.md b/README.md
index 26fbddab03..f975cd6515 100644
--- a/README.md
+++ b/README.md
@@ -624,6 +624,7 @@
- [0xsha/CVE-2026-6307](https://github.com/0xsha/CVE-2026-6307)
- [J4ck3LSyN-Gen2/CVE-2026-6307-Longinus](https://github.com/J4ck3LSyN-Gen2/CVE-2026-6307-Longinus)
+- [amnsecurity/CVE-2026-6307-Chrome-V8-Sandbox-Escape](https://github.com/amnsecurity/CVE-2026-6307-Chrome-V8-Sandbox-Escape)
### CVE-2026-6421 (2026-04-17)
@@ -2164,7 +2165,6 @@
- [ochebotar/copy-fail-CVE-2026-31431-detection-probe](https://github.com/ochebotar/copy-fail-CVE-2026-31431-detection-probe)
- [Liverwortenuresis371/copyfail-rs](https://github.com/Liverwortenuresis371/copyfail-rs)
- [Dullpurple-sloop726/CVE-2026-31431-Linux-Copy-Fail](https://github.com/Dullpurple-sloop726/CVE-2026-31431-Linux-Copy-Fail)
-- [philfry/cve-2026-31431-ftrace](https://github.com/philfry/cve-2026-31431-ftrace)
- [p401a-ops/Copy-Fail](https://github.com/p401a-ops/Copy-Fail)
- [infiniroot/ansible-mitigate-copyfail-dirtyfrag](https://github.com/infiniroot/ansible-mitigate-copyfail-dirtyfrag)
- [KaraZajac/DIRTYFAIL](https://github.com/KaraZajac/DIRTYFAIL)
@@ -2531,6 +2531,7 @@
- [h3ck13r/CVE-2026-35204](https://github.com/h3ck13r/CVE-2026-35204)
+- [amnsecurity/CVE-2026-35204-Helm-Plugin-Traversal](https://github.com/amnsecurity/CVE-2026-35204-Helm-Plugin-Traversal)
### CVE-2026-35273 (2026-06-11)
@@ -2598,6 +2599,7 @@
### CVE-2026-36214
- [WesWrench/CVE-2026-36214](https://github.com/WesWrench/CVE-2026-36214)
+- [amnsecurity/CVE-2026-36214-osTicket-XSS](https://github.com/amnsecurity/CVE-2026-36214-osTicket-XSS)
### CVE-2026-36226 (2026-05-22)
@@ -2924,6 +2926,7 @@
- [oscerd/CVE-2026-40047](https://github.com/oscerd/CVE-2026-40047)
+- [amnsecurity/CVE-2026-40047-Apache-Camel-Docling-Injection](https://github.com/amnsecurity/CVE-2026-40047-Apache-Camel-Docling-Injection)
### CVE-2026-40048 (2026-04-27)
@@ -3403,6 +3406,7 @@
- [joehquak/Mi8E5-Unlocker-by-CVE-2026-43499](https://github.com/joehquak/Mi8E5-Unlocker-by-CVE-2026-43499)
- [Yakayna/SpringPeace](https://github.com/Yakayna/SpringPeace)
- [Thiasap/oppo-pgem10-ghostlock](https://github.com/Thiasap/oppo-pgem10-ghostlock)
+- [CakesTwix/Android-CVE-2026-43499](https://github.com/CakesTwix/Android-CVE-2026-43499)
### CVE-2026-43500 (2026-05-11)
@@ -3773,6 +3777,7 @@
- [Sentebale/CVE-2026-46300](https://github.com/Sentebale/CVE-2026-46300)
- [0xBlackash/CVE-2026-46300](https://github.com/0xBlackash/CVE-2026-46300)
- [ExploitEoom/CVE-2026-46300](https://github.com/ExploitEoom/CVE-2026-46300)
+- [First-John/cve_2026_frag_family_fix](https://github.com/First-John/cve_2026_frag_family_fix)
- [Koshmare-Blossom/Fragnesia-go](https://github.com/Koshmare-Blossom/Fragnesia-go)
- [Maxime288/Fragnesia-CVE-2026-46300](https://github.com/Maxime288/Fragnesia-CVE-2026-46300)
- [AzDevops143/FRAGNESIA-Charan-cve-2026-46300](https://github.com/AzDevops143/FRAGNESIA-Charan-cve-2026-46300)
@@ -3851,6 +3856,20 @@
- [oscerd/CVE-2026-46453](https://github.com/oscerd/CVE-2026-46453)
+### CVE-2026-46454 (2026-07-06)
+
+Improper Input Validation vulnerability in Apache Camel Cometd Component.\n\nThe camel-cometd component maps inbound Bayeux (CometD) message headers into the Camel Exchange without applying a HeaderFilterStrategy. CometdBinding.populateExchangeFromMessage copies the entire ext.CamelHeaders map supplied by the CometD client directly onto the Camel message (message.setHeaders), so any header name - including Camel-internal control headers such as CamelHttpUri, CamelFileName or CamelJmsDestinationName - is accepted unmodified. Because a CometdComponent installs no Bayeux SecurityPolicy by default, any client that can complete the Bayeux handshake against the CometD endpoint can publish such a message without authentication. An attacker can therefore inject arbitrary Camel control headers that influence the behaviour of downstream producers in the route (for example redirecting an HTTP producer, changing a file name, or overriding a JMS destination); the injected headers also persist across internal direct, seda and vm hops. The concrete downstream impact depends on which producers the route uses.\nThis issue affects Apache Camel: from 4.0.0 before 4.14.8, from 4.15.0 before 4.18.3, from 4.19.0 before 4.21.0.\n\nUsers are recommended to upgrade to version 4.21.0, which fixes the issue. If users are on the 4.14.x LTS releases stream, then they are suggested to upgrade to 4.14.8. If users are on the 4.18.x releases stream, then they are suggested to upgrade to 4.18.3. The fix implements a HeaderFilterStrategy in the camel-cometd binding (a long-standing TODO in the code) that filters the Camel header namespace case-insensitively on inbound mapping, so client-supplied Camel* / camel* headers are no longer copied into the Exchange. For deployments that cannot upgrade immediately, strip the Camel control headers from inbound CometD messages before they reach any downstream producer (for example removeHeaders('Camel*') and removeHeaders('camel*') at the start of the route), and install an explicit Bayeux SecurityPolicy on the CometdComponent so that only authenticated clients can publish.
+
+
+- [oscerd/CVE-2026-46454](https://github.com/oscerd/CVE-2026-46454)
+
+### CVE-2026-46455 (2026-07-06)
+
+Insufficient Session Expiration vulnerability in Apache Camel Keycloak Component.\n\nThe camel-keycloak security helper KeycloakSecurityHelper.parseAndVerifyAccessToken builds a Keycloak TokenVerifier using withChecks(...) with only the subject-exists check and the realm-URL (issuer) check. Keycloak's TokenVerifier.withChecks(...) appends to an initially empty check list - the upstream default checks are installed only when withDefaultChecks() is called - so the built-in IS_ACTIVE predicate, which validates the token's exp (expiration) and nbf (not-before) claims, is never applied. As a result the helper verifies the token signature, subject and issuer but does not enforce the token's validity window: an access token that is expired, or not yet valid, is accepted as valid. Routes that rely on this helper to authenticate inbound requests therefore accept access tokens that are outside their intended lifetime.\nThis issue affects Apache Camel: from 4.18.0 before 4.18.3, from 4.19.0 before 4.21.0.\n\nUsers are recommended to upgrade to version 4.21.0, which fixes the issue. If users are on the 4.18.x releases stream, then they are suggested to upgrade to 4.18.3. The fix makes KeycloakSecurityHelper.parseAndVerifyAccessToken include the TokenVerifier.IS_ACTIVE check so that expired or not-yet-valid access tokens are rejected, aligning the helper with Keycloak's default check set. For deployments that cannot upgrade immediately, enforce token expiration outside the helper - for example validate the access token's exp/nbf claims in the route before trusting it, keep Keycloak access-token lifetimes short, and ensure any upstream gateway or resource server also validates the token validity window.
+
+
+- [oscerd/CVE-2026-46455](https://github.com/oscerd/CVE-2026-46455)
+
### CVE-2026-46490 (2026-06-08)
samlify is a Node.js library for SAML single sign-on. Prior to version 2.13.0, samlify’s template substitution only escapes attribute contexts. Values inserted into element text (e.g., <saml:AttributeValue>) are not escaped. A normal user can inject XML markup into an attribute value (e.g., email, name) and add new <saml:Attribute> elements inside the signed assertion. The IdP then signs the tampered assertion and the SP accepts the injected attributes as trusted. This allows privilege escalation when attributes are used for authorization (roles/groups). This issue has been patched in version 2.13.0.
@@ -3864,6 +3883,7 @@
- [N1et/CVE-2026-46529](https://github.com/N1et/CVE-2026-46529)
+- [amnsecurity/CVE-2026-46529-Atril-PDF-RCE](https://github.com/amnsecurity/CVE-2026-46529-Atril-PDF-RCE)
### CVE-2026-46552 (2026-06-23)
@@ -4117,6 +4137,7 @@
- [pssec-io/CVE-2026-48907](https://github.com/pssec-io/CVE-2026-48907)
- [NoXiVaR/CVE-2026-48907](https://github.com/NoXiVaR/CVE-2026-48907)
- [bayu06802/CVE-2026-48907](https://github.com/bayu06802/CVE-2026-48907)
+- [amnsecurity/CVE-2026-48907-Joomla-JCE-RCE](https://github.com/amnsecurity/CVE-2026-48907-Joomla-JCE-RCE)
### CVE-2026-48908 (2026-06-20)
@@ -4749,6 +4770,7 @@
- [shinthink/CVE-2026-56291](https://github.com/shinthink/CVE-2026-56291)
+- [rimbadirgantara/CVE-2026-56291.yaml](https://github.com/rimbadirgantara/CVE-2026-56291.yaml)
### CVE-2026-56423 (2026-06-22)
@@ -6354,7 +6376,6 @@
mcp-remote is exposed to OS command injection when connecting to untrusted MCP servers due to crafted input from the authorization_endpoint response URL
-- [ChaseHCS/CVE-2025-6514](https://github.com/ChaseHCS/CVE-2025-6514)
- [Cyberency/CVE-2025-6514](https://github.com/Cyberency/CVE-2025-6514)
### CVE-2025-6543 (2025-06-25)
@@ -19857,13 +19878,6 @@
- [Nxploited/CVE-2024-12542-PoC](https://github.com/Nxploited/CVE-2024-12542-PoC)
-### CVE-2024-12558 (2024-12-21)
-
-The WP BASE Booking of Appointments, Services and Events plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the export_db function in all versions up to, and including, 4.9.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to expose sensitive information from the database, such as the hashed administrator password.
-
-
-- [Nxploited/CVE-2024-12558-exploit](https://github.com/Nxploited/CVE-2024-12558-exploit)
-
### CVE-2024-12583 (2025-01-04)
The Dynamics 365 Integration plugin for WordPress is vulnerable to Remote Code Execution and Arbitrary File Read in all versions up to, and including, 1.3.23 via Twig Server-Side Template Injection. This is due to missing input validation and sanitization on the render function. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server.
@@ -24228,9 +24242,6 @@
- [AlissonFaoli/Apache-OFBiz-Exploit](https://github.com/AlissonFaoli/Apache-OFBiz-Exploit)
- [Hex00-0x4/CVE-2024-38856-Apache-OFBiz](https://github.com/Hex00-0x4/CVE-2024-38856-Apache-OFBiz)
-### CVE-2024-38998
-- [z3ldr1/PP_CVE-2024-38998](https://github.com/z3ldr1/PP_CVE-2024-38998)
-
### CVE-2024-39024
- [ly1g3/packetfence-CVE-2024-39024](https://github.com/ly1g3/packetfence-CVE-2024-39024)
@@ -24503,6 +24514,7 @@
- [BwithE/CVE-2024-40453](https://github.com/BwithE/CVE-2024-40453)
+- [surajpandeyp/CVE-2024-40453](https://github.com/surajpandeyp/CVE-2024-40453)
### CVE-2024-40457 (2024-09-12)
@@ -26699,6 +26711,12 @@
- [HORKimhab/CVE-2024-52011](https://github.com/HORKimhab/CVE-2024-52011)
+### CVE-2024-52046 (2024-12-25)
+
+The ObjectSerializationDecoder in Apache MINA uses Java’s native deserialization protocol to process\nincoming serialized data but lacks the necessary security checks and defenses. This vulnerability allows\nattackers to exploit the deserialization process by sending specially crafted malicious serialized data,\npotentially leading to remote code execution (RCE) attacks.\n\n\n\n
+
+- [amnsecurity/CVE-2024-52046-Apache-MINA-RCE](https://github.com/amnsecurity/CVE-2024-52046-Apache-MINA-RCE)
+
### CVE-2024-52301 (2024-11-12)
Laravel is a web application framework. When the register_argc_argv php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request. The vulnerability fixed in 6.20.45, 7.30.7, 8.83.28, 9.52.17, 10.48.23, and 11.31.0. The framework now ignores argv values for environment detection on non-cli SAPIs.
@@ -26927,7 +26945,6 @@
- [c4oocO/CVE-2024-53677-Docker](https://github.com/c4oocO/CVE-2024-53677-Docker)
- [dustblessnotdust/CVE-2024-53677-S2-067-thread](https://github.com/dustblessnotdust/CVE-2024-53677-S2-067-thread)
- [hiteshpatra/CVE-2024-53677](https://github.com/hiteshpatra/CVE-2024-53677)
-- [punitdarji/Apache-struts-cve-2024-53677](https://github.com/punitdarji/Apache-struts-cve-2024-53677)
- [SeanRickerd/CVE-2024-53677](https://github.com/SeanRickerd/CVE-2024-53677)
- [hopsypopsy8/CVE-2024-53677-Exploitation](https://github.com/hopsypopsy8/CVE-2024-53677-Exploitation)
- [shishirghimir/CVE-2024-53677-Exploit](https://github.com/shishirghimir/CVE-2024-53677-Exploit)
@@ -30129,7 +30146,6 @@
- [thanhlam-attt/CVE-2023-22527](https://github.com/thanhlam-attt/CVE-2023-22527)
- [Niuwoo/CVE-2023-22527](https://github.com/Niuwoo/CVE-2023-22527)
-- [RevoltSecurities/CVE-2023-22527](https://github.com/RevoltSecurities/CVE-2023-22527)
- [yoryio/CVE-2023-22527](https://github.com/yoryio/CVE-2023-22527)
- [Privia-Security/CVE-2023-22527](https://github.com/Privia-Security/CVE-2023-22527)
- [MaanVader/CVE-2023-22527-POC](https://github.com/MaanVader/CVE-2023-22527-POC)
@@ -30646,6 +30662,7 @@
- [dr-cable-tv/Geoserver-CVE-2023-25157](https://github.com/dr-cable-tv/Geoserver-CVE-2023-25157)
- [custiya/geoserver-CVE-2023-25157](https://github.com/custiya/geoserver-CVE-2023-25157)
- [charis3306/CVE-2023-25157](https://github.com/charis3306/CVE-2023-25157)
+- [Giangdurian/CVE-2023-25157-GeoServer-SQLi-Lab](https://github.com/Giangdurian/CVE-2023-25157-GeoServer-SQLi-Lab)
### CVE-2023-25194 (2023-02-07)
@@ -37556,6 +37573,7 @@
- [seal-sec-demo-2/yaml-payload](https://github.com/seal-sec-demo-2/yaml-payload)
- [jelee2555/CVE-2022-1471-attacker](https://github.com/jelee2555/CVE-2022-1471-attacker)
- [anupamojha-eng/sentinel-transitive-cve-demo](https://github.com/anupamojha-eng/sentinel-transitive-cve-demo)
+- [seal-sec-demo-2/Java-Example](https://github.com/seal-sec-demo-2/Java-Example)
### CVE-2022-1565 (2022-07-18)
@@ -40823,6 +40841,7 @@
- [test-avm-714877d2df585126/vuln-ejs-critical](https://github.com/test-avm-714877d2df585126/vuln-ejs-critical)
- [test-avm-714877d2df585126/C-test-2](https://github.com/test-avm-714877d2df585126/C-test-2)
- [taka3636/CVE-2022-29078](https://github.com/taka3636/CVE-2022-29078)
+- [seal-sec-demo-2/JavaScript-Example](https://github.com/seal-sec-demo-2/JavaScript-Example)
### CVE-2022-29154 (2022-08-02)
@@ -54459,6 +54478,7 @@
- [j4k0m/loader-CVE-2020-14343](https://github.com/j4k0m/loader-CVE-2020-14343)
- [Kairo-one/CVE-2020-14343-PyYAML](https://github.com/Kairo-one/CVE-2020-14343-PyYAML)
- [sijie52/yasa-cve-2020-14343](https://github.com/sijie52/yasa-cve-2020-14343)
+- [seal-sec-demo-2/Python-Example](https://github.com/seal-sec-demo-2/Python-Example)
### CVE-2020-14356 (2020-08-19)
@@ -64019,6 +64039,13 @@
- [snappyJack/CVE-2018-16373](https://github.com/snappyJack/CVE-2018-16373)
+### CVE-2018-16385 (2018-09-03)
+
+ThinkPHP before 5.1.23 allows SQL Injection via the public/index/index/test/index query string.
+
+
+- [buzhimingdeaikun/SQL-ThinkPHP-5.0.24-RCE-](https://github.com/buzhimingdeaikun/SQL-ThinkPHP-5.0.24-RCE-)
+
### CVE-2018-16431 (2018-09-04)
admin/admin/adminsave.html in YFCMF v3.0 allows CSRF to add an administrator account.