Auto Update 2026/08/11 12:51:25

This commit is contained in:
motikan2010-bot committed 2026-08-11 21:51:25 +09:00
1 parent a3700a7f9b
commit 17384c505a
51 files changed
+443 -444

No files matched your search

+2 -2
View File
@@ -1889,8 +1889,8 @@
"description": "Authorized Kali–Metasploitable2 lab using Python and Nmap NSE to validate CVE-2011-2523 in vsFTPd 2.3.4.",
"fork": false,
"created_at": "2026-08-10T11:09:47Z",
"updated_at": "2026-08-10T13:11:07Z",
"pushed_at": "2026-08-10T13:03:59Z",
"updated_at": "2026-08-11T06:40:38Z",
"pushed_at": "2026-08-11T06:40:32Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
+4 -4
View File
@@ -184,10 +184,10 @@
"description": "fixed msf module for cve-2017-7269",
"fork": false,
"created_at": "2017-03-30T22:20:36Z",
"updated_at": "2026-06-05T08:31:15Z",
"updated_at": "2026-08-11T07:08:59Z",
"pushed_at": "2017-03-30T22:20:51Z",
"stargazers_count": 134,
"watchers_count": 134,
"stargazers_count": 135,
"watchers_count": 135,
"has_discussions": false,
"forks_count": 59,
"allow_forking": true,
@@ -198,7 +198,7 @@
"topics": [],
"visibility": "public",
"forks": 59,
"watchers": 134,
"watchers": 135,
"score": 0,
"subscribers_count": 4
},
+2 -2
View File
@@ -450,8 +450,8 @@
"description": "VampSecure Labs: FortiOS CVE scanner (CVE-2018-13379, CVE-2022-40684, CVE-2023-27997, CVE-2024-21762)",
"fork": false,
"created_at": "2026-07-31T10:13:19Z",
"updated_at": "2026-08-07T08:50:03Z",
"pushed_at": "2026-08-07T08:49:10Z",
"updated_at": "2026-08-11T11:23:02Z",
"pushed_at": "2026-08-11T11:22:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "exp for https:\/\/research.checkpoint.com\/extracting-code-execution-from-winrar",
"fork": false,
"created_at": "2019-02-22T04:52:08Z",
"updated_at": "2026-07-10T03:23:31Z",
"updated_at": "2026-08-11T09:12:24Z",
"pushed_at": "2019-08-05T10:45:34Z",
"stargazers_count": 492,
"watchers_count": 492,
"stargazers_count": 493,
"watchers_count": 493,
"has_discussions": false,
"forks_count": 170,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 170,
"watchers": 492,
"watchers": 493,
"score": 0,
"subscribers_count": 10
},
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-08-11T06:10:16Z",
"pushed_at": "2026-08-11T06:09:53Z",
"updated_at": "2026-08-11T12:07:41Z",
"pushed_at": "2026-08-11T12:06:43Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
+4 -4
View File
@@ -133,10 +133,10 @@
"description": "NOTICE This repository contains the public FTC SDK for the SKYSTONE (2019-2020) competition season. If you are looking for the current season's FTC SDK software, please visit the new and permanent home of the public FTC SDK: FtcRobotController repository Welcome! This GitHub repository contains the source code that is used to build an Android app to control a FIRST Tech Challenge competition robot. To use this SDK, download\/clone the entire project to your local computer. Getting Started If you are new to robotics or new to the FIRST Tech Challenge, then you should consider reviewing the FTC Blocks Tutorial to get familiar with how to use the control system: FTC Blocks Online Tutorial Even if you are an advanced Java programmer, it is helpful to start with the FTC Blocks tutorial, and then migrate to the OnBot Java Tool or to Android Studio afterwards. Downloading the Project If you are an Android Studio programmer, there are several ways to download this repo. Note that if you use the Blocks or OnBot Java Tool to program your robot, then you do not need to download this repository. If you are a git user, you can clone the most current version of the repository: git clone https:\/\/github.com\/FIRST-Tech-Challenge\/SKYSTONE.git Or, if you prefer, you can use the \"Download Zip\" button available through the main repository page. Downloading the project as a .ZIP file will keep the size of the download manageable. You can also download the project folder (as a .zip or .tar.gz archive file) from the Downloads subsection of the Releases page for this repository. Once you have downloaded and uncompressed (if needed) your folder, you can use Android Studio to import the folder (\"Import project (Eclipse ADT, Gradle, etc.)\"). Getting Help User Documentation and Tutorials FIRST maintains online documentation with information and tutorials on how to use the FIRST Tech Challenge software and robot control system. You can access this documentation using the following link: SKYSTONE Online Documentation Note that the online documentation is an \"evergreen\" document that is constantly being updated and edited. It contains the most current information about the FIRST Tech Challenge software and control system. Javadoc Reference Material The Javadoc reference documentation for the FTC SDK is now available online. Click on the following link to view the FTC SDK Javadoc documentation as a live website: FTC Javadoc Documentation Documentation for the FTC SDK is also included with this repository. There is a subfolder called \"doc\" which contains several subfolders: The folder \"apk\" contains the .apk files for the FTC Driver Station and FTC Robot Controller apps. The folder \"javadoc\" contains the JavaDoc user documentation for the FTC SDK. Online User Forum For technical questions regarding the Control System or the FTC SDK, please visit the FTC Technology forum: FTC Technology Forum Release Information Version 5.5 (20200824-090813) Version 5.5 requires Android Studio 4.0 or later. New features Adds support for calling custom Java classes from Blocks OpModes (fixes SkyStone issue #161). Classes must be in the org.firstinspires.ftc.teamcode package. Methods must be public static and have no more than 21 parameters. Parameters declared as OpMode, LinearOpMode, Telemetry, and HardwareMap are supported and the argument is provided automatically, regardless of the order of the parameters. On the block, the sockets for those parameters are automatically filled in. Parameters declared as char or java.lang.Character will accept any block that returns text and will only use the first character in the text. Parameters declared as boolean or java.lang.Boolean will accept any block that returns boolean. Parameters declared as byte, java.lang.Byte, short, java.lang.Short, int, java.lang.Integer, long, or java.lang.Long, will accept any block that returns a number and will round that value to the nearest whole number. Parameters declared as float, java.lang.Float, double, java.lang.Double will accept any block that returns a number. Adds telemetry API method for setting display format Classic Monospace HTML (certain tags only) Adds blocks support for switching cameras. Adds Blocks support for TensorFlow Object Detection with a custom model. Adds support for uploading a custom TensorFlow Object Detection model in the Manage page, which is especially useful for Blocks and OnBotJava users. Shows new Control Hub blink codes when the WiFi band is switched using the Control Hub's button (only possible on Control Hub OS 1.1.2) Adds new warnings which can be disabled in the Advanced RC Settings Mismatched app versions warning Unnecessary 2.4 GHz WiFi usage warning REV Hub is running outdated firmware (older than version 1.8.2) Adds support for Sony PS4 gamepad, and reworks how gamepads work on the Driver Station Removes preference which sets gamepad type baseLine truncated
"fork": false,
"created_at": "2021-03-08T11:34:11Z",
"updated_at": "2026-08-10T22:43:31Z",
"updated_at": "2026-08-11T06:46:49Z",
"pushed_at": "2024-04-12T05:48:35Z",
"stargazers_count": 299,
"watchers_count": 299,
"stargazers_count": 300,
"watchers_count": 300,
"has_discussions": false,
"forks_count": 91,
"allow_forking": true,
@@ -147,7 +147,7 @@
"topics": [],
"visibility": "public",
"forks": 91,
"watchers": 299,
"watchers": 300,
"score": 0,
"subscribers_count": 15
},
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "This repository contains the sources and documentation for the LVI-LFB Control Flow Hijacking attack PoC (CVE-2020-0551)",
"fork": false,
"created_at": "2020-03-10T17:00:01Z",
"updated_at": "2026-04-28T04:50:29Z",
"updated_at": "2026-08-11T12:15:31Z",
"pushed_at": "2020-03-10T17:10:12Z",
"stargazers_count": 26,
"watchers_count": 26,
"stargazers_count": 27,
"watchers_count": 27,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 26,
"watchers": 27,
"score": 0,
"subscribers_count": 2
}
+2 -2
View File
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-08-11T06:05:23Z",
"pushed_at": "2026-08-11T06:05:11Z",
"updated_at": "2026-08-11T11:49:57Z",
"pushed_at": "2026-08-11T11:49:31Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
+4 -4
View File
@@ -329,10 +329,10 @@
"description": "Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)",
"fork": false,
"created_at": "2021-07-01T23:45:58Z",
"updated_at": "2026-07-30T23:33:47Z",
"updated_at": "2026-08-11T11:56:45Z",
"pushed_at": "2021-07-05T08:54:06Z",
"stargazers_count": 1103,
"watchers_count": 1103,
"stargazers_count": 1104,
"watchers_count": 1104,
"has_discussions": false,
"forks_count": 225,
"allow_forking": true,
@@ -343,7 +343,7 @@
"topics": [],
"visibility": "public",
"forks": 225,
"watchers": 1103,
"watchers": 1104,
"score": 0,
"subscribers_count": 23
},
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2021-1732 Exploit",
"fork": false,
"created_at": "2021-03-05T02:11:10Z",
"updated_at": "2026-07-07T14:14:12Z",
"updated_at": "2026-08-11T08:36:35Z",
"pushed_at": "2021-03-05T03:10:26Z",
"stargazers_count": 425,
"watchers_count": 425,
"stargazers_count": 426,
"watchers_count": 426,
"has_discussions": false,
"forks_count": 123,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 123,
"watchers": 425,
"watchers": 426,
"score": 0,
"subscribers_count": 5
},
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-08-11T05:43:10Z",
"pushed_at": "2026-08-11T05:42:57Z",
"updated_at": "2026-08-11T11:42:42Z",
"pushed_at": "2026-08-11T11:42:33Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
+2 -2
View File
@@ -778,7 +778,7 @@
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 4,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -786,7 +786,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 4,
"forks": 3,
"watchers": 5,
"score": 0,
"subscribers_count": 1
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "Let's control Secure Boot Chain ourselves.",
"fork": false,
"created_at": "2023-12-01T07:32:18Z",
"updated_at": "2026-08-07T21:00:55Z",
"updated_at": "2026-08-11T11:13:56Z",
"pushed_at": "2025-08-22T15:37:10Z",
"stargazers_count": 109,
"watchers_count": 109,
+2 -2
View File
@@ -981,8 +981,8 @@
"description": "VampSecure Labs: FortiOS CVE scanner (CVE-2018-13379, CVE-2022-40684, CVE-2023-27997, CVE-2024-21762)",
"fork": false,
"created_at": "2026-07-31T10:13:19Z",
"updated_at": "2026-08-07T08:50:03Z",
"pushed_at": "2026-08-07T08:49:10Z",
"updated_at": "2026-08-11T11:23:02Z",
"pushed_at": "2026-08-11T11:22:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
+2 -2
View File
@@ -344,8 +344,8 @@
"description": "VampSecure Labs: FortiOS CVE scanner (CVE-2018-13379, CVE-2022-40684, CVE-2023-27997, CVE-2024-21762)",
"fork": false,
"created_at": "2026-07-31T10:13:19Z",
"updated_at": "2026-08-07T08:50:03Z",
"pushed_at": "2026-08-07T08:49:10Z",
"updated_at": "2026-08-11T11:23:02Z",
"pushed_at": "2026-08-11T11:22:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
+2 -2
View File
@@ -143,10 +143,10 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/rahul0xkr\/Reproducing-CVE-2023-36802",
"description": "Analyzing CVE-2023-36802 (mskssrv.sys) - object type confusion bug",
"description": "Reverse engineering and vulnerability research on CVE-2023-36802, focusing on object type confusion in mksssrv.sys.",
"fork": false,
"created_at": "2025-09-26T15:51:33Z",
"updated_at": "2026-04-06T15:41:50Z",
"updated_at": "2026-08-11T08:51:14Z",
"pushed_at": "2025-11-12T16:51:01Z",
"stargazers_count": 0,
"watchers_count": 0,
+33
View File
@@ -64,5 +64,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 1330632377,
"name": "CVE-2023-48084-Revised",
"full_name": "MettHK\/CVE-2023-48084-Revised",
"owner": {
"login": "MettHK",
"id": 68657238,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/68657238?v=4",
"html_url": "https:\/\/github.com\/MettHK",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/MettHK\/CVE-2023-48084-Revised",
"description": null,
"fork": false,
"created_at": "2026-08-11T07:37:18Z",
"updated_at": "2026-08-11T07:45:01Z",
"pushed_at": "2026-08-11T07:44:52Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Find the vulnerability your tests were never written to catch. A ReGrade demo modeling CVE-2023-5968: catch a password-hash leak by comparing an app to itself.",
"fork": false,
"created_at": "2026-07-04T00:48:09Z",
"updated_at": "2026-07-04T00:48:15Z",
"pushed_at": "2026-07-04T00:48:11Z",
"updated_at": "2026-08-11T10:26:57Z",
"pushed_at": "2026-08-11T10:55:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
-39
View File
@@ -1,39 +0,0 @@
[
{
"id": 749919472,
"name": "CVE-2023-6985",
"full_name": "RandomRobbieBF\/CVE-2023-6985",
"owner": {
"login": "RandomRobbieBF",
"id": 51722811,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
"html_url": "https:\/\/github.com\/RandomRobbieBF",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2023-6985",
"description": "10Web AI Assistant – AI content writing assistant <= 1.0.18 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation\/Activation Description",
"fork": false,
"created_at": "2024-01-29T16:51:53Z",
"updated_at": "2024-07-11T16:39:17Z",
"pushed_at": "2024-01-29T16:54:24Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"ai-assistant-by-10web",
"cve-2023-6985",
"wordpress"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 1
}
]
+2 -2
View File
@@ -344,8 +344,8 @@
"description": "VampSecure Labs: FortiOS CVE scanner (CVE-2018-13379, CVE-2022-40684, CVE-2023-27997, CVE-2024-21762)",
"fork": false,
"created_at": "2026-07-31T10:13:19Z",
"updated_at": "2026-08-07T08:50:03Z",
"pushed_at": "2026-08-07T08:49:10Z",
"updated_at": "2026-08-11T11:23:02Z",
"pushed_at": "2026-08-11T11:22:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
+4 -4
View File
@@ -113,10 +113,10 @@
"description": "IngressNightmare POC. world first non-blind remote execution exploitation with multi-advanced exploitation methods. allow on disk exploitation. CVE-2025-24514 - auth-url injection, CVE-2025-1097 - auth-tls-match-cn injection, CVE-2025-1098 – mirror UID injection -- all available. ",
"fork": false,
"created_at": "2025-03-26T06:43:36Z",
"updated_at": "2026-06-18T07:24:15Z",
"updated_at": "2026-08-11T08:35:07Z",
"pushed_at": "2025-05-06T03:35:22Z",
"stargazers_count": 97,
"watchers_count": 97,
"stargazers_count": 98,
"watchers_count": 98,
"has_discussions": false,
"forks_count": 14,
"allow_forking": true,
@@ -136,7 +136,7 @@
],
"visibility": "public",
"forks": 14,
"watchers": 97,
"watchers": 98,
"score": 0,
"subscribers_count": 2
},
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "CVE-2025-21479 proof-of-concept, I think",
"fork": false,
"created_at": "2025-06-19T19:47:52Z",
"updated_at": "2026-08-10T17:15:10Z",
"updated_at": "2026-08-11T10:06:45Z",
"pushed_at": "2025-08-16T06:52:13Z",
"stargazers_count": 268,
"watchers_count": 268,
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "CVE-2025-31200 is a zero-day, zero-click RCE in iOS CoreAudio’s AudioConverterService, triggered by a malicious audio file via iMessage\/SMS. Exploitation bypassed Blastdoor, enabled kernel escalation (CVE-2025-31201), and allowed token theft until patched in iOS 18.4.1 (Apr 16, 2025).",
"fork": false,
"created_at": "2025-05-17T23:03:56Z",
"updated_at": "2026-08-11T02:58:19Z",
"updated_at": "2026-08-11T12:00:13Z",
"pushed_at": "2026-05-05T15:35:54Z",
"stargazers_count": 200,
"watchers_count": 200,
"stargazers_count": 201,
"watchers_count": 201,
"has_discussions": false,
"forks_count": 32,
"allow_forking": true,
@@ -70,7 +70,7 @@
],
"visibility": "public",
"forks": 32,
"watchers": 200,
"watchers": 201,
"score": 0,
"subscribers_count": 2
},
+4 -4
View File
@@ -327,10 +327,10 @@
"description": "The official reference implementation & vulnerability verification of our attack WhisperPair (CVE-2025-36911) which affects Google's Fast Pair protocol.",
"fork": false,
"created_at": "2026-03-30T15:29:04Z",
"updated_at": "2026-08-10T12:10:12Z",
"updated_at": "2026-08-11T07:48:37Z",
"pushed_at": "2026-05-28T14:44:51Z",
"stargazers_count": 79,
"watchers_count": 79,
"stargazers_count": 80,
"watchers_count": 80,
"has_discussions": false,
"forks_count": 10,
"allow_forking": true,
@@ -346,7 +346,7 @@
],
"visibility": "public",
"forks": 10,
"watchers": 79,
"watchers": 80,
"score": 0,
"subscribers_count": 2
},
+4 -4
View File
@@ -371,10 +371,10 @@
"description": "ThrottleStop.sys Arbitrary Physical Memory R\/W",
"fork": false,
"created_at": "2026-08-10T23:15:36Z",
"updated_at": "2026-08-10T23:46:13Z",
"updated_at": "2026-08-11T12:32:35Z",
"pushed_at": "2026-08-10T23:15:39Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -385,7 +385,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 3,
"score": 0,
"subscribers_count": 0
}
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-0163 Exploit",
"fork": false,
"created_at": "2026-08-06T11:40:01Z",
"updated_at": "2026-08-06T20:41:48Z",
"updated_at": "2026-08-11T08:32:57Z",
"pushed_at": "2026-08-06T11:40:47Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
+34 -1
View File
@@ -14,8 +14,41 @@
"description": "PoC repository for the blog post CopyEscape: Taking Over Docker Hosts with docker cp",
"fork": false,
"created_at": "2026-08-09T21:02:40Z",
"updated_at": "2026-08-11T04:41:18Z",
"updated_at": "2026-08-11T11:53:21Z",
"pushed_at": "2026-08-09T21:04:41Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
{
"id": 1330847222,
"name": "CVE-2026-17106",
"full_name": "HackSpeak\/CVE-2026-17106",
"owner": {
"login": "HackSpeak",
"id": 312486542,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/312486542?v=4",
"html_url": "https:\/\/github.com\/HackSpeak",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/HackSpeak\/CVE-2026-17106",
"description": "CopyEscape (CVE-2026-17106) docker cp container-to-host arbitrary file write PoC mirror — Imperva Ron Masas, MIT; for authorized security testing",
"fork": false,
"created_at": "2026-08-11T11:34:39Z",
"updated_at": "2026-08-11T11:35:35Z",
"pushed_at": "2026-08-11T11:35:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Seraphinite Accelerator <= 2.29.18 - Reflected Cross-Site Scripting PoC",
"fork": false,
"created_at": "2026-08-05T05:09:56Z",
"updated_at": "2026-08-05T18:06:56Z",
"updated_at": "2026-08-11T07:00:29Z",
"pushed_at": "2026-08-05T05:29:02Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
+3 -3
View File
@@ -11,11 +11,11 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/sn0x-sharma\/CVE-2026-18718",
"description": "Arbitrary code execution in Ghidra 12.1.2 via the Swift demangler analyzer. A shared project file carries a saved tool-directory option that Ghidra silently restores and executes. Advisory GHSA-pcfh-853f-q3gh, fixed in 12.1.3.",
"description": "Found a 0-Day in Ghidra: Shared Project File Became a Code Execution Vector",
"fork": false,
"created_at": "2026-08-03T22:57:28Z",
"updated_at": "2026-08-06T08:31:03Z",
"pushed_at": "2026-08-06T08:28:25Z",
"updated_at": "2026-08-11T09:38:34Z",
"pushed_at": "2026-08-11T09:26:58Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
+19 -3
View File
@@ -14,8 +14,8 @@
"description": "AegisAgent - Runtime security gateway & privilege governance for AI agents. Cryptographic tool-call provenance (CoreBreak\/CVE-2026-18830\/18236\/64650 defense), policy engine, sandbox isolation, HITL approval, MCP security proxy, tamper-evident audit.",
"fork": false,
"created_at": "2026-08-11T06:52:24Z",
"updated_at": "2026-08-11T06:52:25Z",
"pushed_at": "2026-08-11T06:52:25Z",
"updated_at": "2026-08-11T07:17:35Z",
"pushed_at": "2026-08-11T07:16:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -25,7 +25,23 @@
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"topics": [
"agent-security",
"ai-agents",
"ai-governance",
"ai-security",
"compliance",
"guardrails",
"llm-security",
"mcp",
"policy-engine",
"prompt-injection",
"provenance",
"red-team",
"sandbox",
"tool-calling",
"zero-trust"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1330912795,
"name": "two-dots-and-a-slash-cve-2026-18907-tecno-hi-browser-download-path-traversal",
"full_name": "Hunt-Benito\/two-dots-and-a-slash-cve-2026-18907-tecno-hi-browser-download-path-traversal",
"owner": {
"login": "Hunt-Benito",
"id": 174117057,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/174117057?v=4",
"html_url": "https:\/\/github.com\/Hunt-Benito",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Hunt-Benito\/two-dots-and-a-slash-cve-2026-18907-tecno-hi-browser-download-path-traversal",
"description": null,
"fork": false,
"created_at": "2026-08-11T12:43:11Z",
"updated_at": "2026-08-11T12:45:11Z",
"pushed_at": "2026-08-11T12:44:34Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
+4 -37
View File
@@ -32,39 +32,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1286719648,
"name": "CVE-2026-25243-debugfree",
"full_name": "dinosn\/CVE-2026-25243-debugfree",
"owner": {
"login": "dinosn",
"id": 3851678,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/3851678?v=4",
"html_url": "https:\/\/github.com\/dinosn",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/dinosn\/CVE-2026-25243-debugfree",
"description": null,
"fork": false,
"created_at": "2026-07-02T03:26:53Z",
"updated_at": "2026-07-23T13:44:04Z",
"pushed_at": "2026-07-02T03:26:55Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1324830907,
"name": "CVE-2026-25243",
@@ -80,10 +47,10 @@
"description": "Stable POC for CVE-2026-25243 (Redis RESTORE double-free -> remote code execution)",
"fork": false,
"created_at": "2026-08-06T06:28:46Z",
"updated_at": "2026-08-06T07:38:34Z",
"updated_at": "2026-08-11T07:48:14Z",
"pushed_at": "2026-08-06T07:37:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -100,7 +67,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
+5 -5
View File
@@ -14,10 +14,10 @@
"description": "POC tool for ResetNightmare (CVE-2026-27912)",
"fork": false,
"created_at": "2026-08-02T12:36:16Z",
"updated_at": "2026-08-11T06:54:21Z",
"updated_at": "2026-08-11T12:33:10Z",
"pushed_at": "2026-08-02T14:30:24Z",
"stargazers_count": 158,
"watchers_count": 158,
"stargazers_count": 164,
"watchers_count": 164,
"has_discussions": false,
"forks_count": 25,
"allow_forking": true,
@@ -28,9 +28,9 @@
"topics": [],
"visibility": "public",
"forks": 25,
"watchers": 158,
"watchers": 164,
"score": 0,
"subscribers_count": 0
"subscribers_count": 1
},
{
"id": 1327954467,
+2 -2
View File
@@ -120,8 +120,8 @@
"description": "Tracking the nginx CVE-2026-42533 map\/regex capture-clobbering heap overflow",
"fork": false,
"created_at": "2026-07-21T05:27:18Z",
"updated_at": "2026-08-10T07:09:41Z",
"pushed_at": "2026-08-10T07:08:56Z",
"updated_at": "2026-08-11T07:27:14Z",
"pushed_at": "2026-08-11T07:26:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
+80 -47
View File
@@ -183,10 +183,10 @@
"description": "OPPO Find N2 GhostLock (CVE-2026-43499) exploit adaptation",
"fork": false,
"created_at": "2026-07-09T22:46:15Z",
"updated_at": "2026-08-06T15:13:58Z",
"updated_at": "2026-08-11T10:34:51Z",
"pushed_at": "2026-08-08T05:43:17Z",
"stargazers_count": 61,
"watchers_count": 61,
"stargazers_count": 60,
"watchers_count": 60,
"has_discussions": false,
"forks_count": 24,
"allow_forking": true,
@@ -197,7 +197,7 @@
"topics": [],
"visibility": "public",
"forks": 24,
"watchers": 61,
"watchers": 60,
"score": 0,
"subscribers_count": 0
},
@@ -287,7 +287,7 @@
"stargazers_count": 221,
"watchers_count": 221,
"has_discussions": false,
"forks_count": 81,
"forks_count": 82,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -295,7 +295,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 81,
"forks": 82,
"watchers": 221,
"score": 0,
"subscribers_count": 1
@@ -348,10 +348,10 @@
"description": "GhostLock (CVE-2026-43499) kernel exploit for OnePlus devices with locked bootloader",
"fork": false,
"created_at": "2026-07-12T16:05:24Z",
"updated_at": "2026-08-11T05:36:03Z",
"updated_at": "2026-08-11T09:04:17Z",
"pushed_at": "2026-08-06T09:48:14Z",
"stargazers_count": 239,
"watchers_count": 239,
"stargazers_count": 240,
"watchers_count": 240,
"has_discussions": false,
"forks_count": 49,
"allow_forking": true,
@@ -369,9 +369,9 @@
],
"visibility": "public",
"forks": 49,
"watchers": 239,
"watchers": 240,
"score": 0,
"subscribers_count": 8
"subscribers_count": 10
},
{
"id": 1298678209,
@@ -553,10 +553,10 @@
"description": null,
"fork": false,
"created_at": "2026-07-14T00:15:16Z",
"updated_at": "2026-08-09T06:30:03Z",
"updated_at": "2026-08-11T09:51:50Z",
"pushed_at": "2026-07-14T14:28:58Z",
"stargazers_count": 6,
"watchers_count": 6,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -567,7 +567,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 6,
"watchers": 7,
"score": 0,
"subscribers_count": 0
},
@@ -586,12 +586,12 @@
"description": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.",
"fork": false,
"created_at": "2026-07-14T14:21:27Z",
"updated_at": "2026-08-10T17:07:09Z",
"updated_at": "2026-08-11T07:58:51Z",
"pushed_at": "2026-07-30T11:28:07Z",
"stargazers_count": 46,
"watchers_count": 46,
"stargazers_count": 47,
"watchers_count": 47,
"has_discussions": false,
"forks_count": 15,
"forks_count": 16,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -599,8 +599,8 @@
"pull_request_creation_policy": "collaborators_only",
"topics": [],
"visibility": "public",
"forks": 15,
"watchers": 46,
"forks": 16,
"watchers": 47,
"score": 0,
"subscribers_count": 0
},
@@ -1081,12 +1081,12 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
"updated_at": "2026-08-11T05:06:59Z",
"updated_at": "2026-08-11T11:37:41Z",
"pushed_at": "2026-08-09T05:13:42Z",
"stargazers_count": 762,
"watchers_count": 762,
"stargazers_count": 766,
"watchers_count": 766,
"has_discussions": false,
"forks_count": 129,
"forks_count": 130,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1094,10 +1094,10 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 129,
"watchers": 762,
"forks": 130,
"watchers": 766,
"score": 0,
"subscribers_count": 28
"subscribers_count": 24
},
{
"id": 1304629488,
@@ -2070,8 +2070,8 @@
"description": null,
"fork": false,
"created_at": "2026-08-02T08:10:34Z",
"updated_at": "2026-08-10T12:34:22Z",
"pushed_at": "2026-08-04T08:58:57Z",
"updated_at": "2026-08-11T08:40:44Z",
"pushed_at": "2026-08-11T08:40:12Z",
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
@@ -2103,12 +2103,12 @@
"description": "Jailbreak supported Google Pixel phones with CVE-2026-43499",
"fork": false,
"created_at": "2026-08-02T17:34:45Z",
"updated_at": "2026-08-11T05:47:28Z",
"updated_at": "2026-08-11T10:44:16Z",
"pushed_at": "2026-08-10T20:53:33Z",
"stargazers_count": 125,
"watchers_count": 125,
"stargazers_count": 129,
"watchers_count": 129,
"has_discussions": false,
"forks_count": 28,
"forks_count": 29,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2122,8 +2122,8 @@
"root"
],
"visibility": "public",
"forks": 28,
"watchers": 125,
"forks": 29,
"watchers": 129,
"score": 0,
"subscribers_count": 4
},
@@ -2373,8 +2373,8 @@
"description": "CVE-2026-43499 (GhostLock) research on HUAWEI MatePad Pro 11 GOT-W29",
"fork": false,
"created_at": "2026-08-10T09:01:08Z",
"updated_at": "2026-08-11T02:26:39Z",
"pushed_at": "2026-08-11T02:26:35Z",
"updated_at": "2026-08-11T10:37:56Z",
"pushed_at": "2026-08-11T10:37:29Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -2439,8 +2439,8 @@
"description": "GhostLock-X200 v1.0 - temporary root toolchain for vivo X200 (PD2415 \/ b57 kernel) based on CVE-2026-43499. For authorized security research only.",
"fork": false,
"created_at": "2026-08-10T23:26:52Z",
"updated_at": "2026-08-11T03:13:27Z",
"pushed_at": "2026-08-11T02:08:04Z",
"updated_at": "2026-08-11T10:26:40Z",
"pushed_at": "2026-08-11T10:26:47Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -2505,10 +2505,10 @@
"description": "CVE-2026-43499 GhostLock APK 骨架 — 从零开始,仅空项目编译验证",
"fork": false,
"created_at": "2026-08-10T23:53:29Z",
"updated_at": "2026-08-11T00:10:54Z",
"pushed_at": "2026-08-11T00:10:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"updated_at": "2026-08-11T12:46:43Z",
"pushed_at": "2026-08-11T12:46:25Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -2519,7 +2519,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
@@ -2538,8 +2538,8 @@
"description": "CVE-2026-43499 GhostLock futex UAF LPE PoC for OPPO PCKM00 (SM6150) \/ Linux 4.14.180",
"fork": false,
"created_at": "2026-08-11T06:40:53Z",
"updated_at": "2026-08-11T06:41:09Z",
"pushed_at": "2026-08-11T06:41:05Z",
"updated_at": "2026-08-11T12:28:19Z",
"pushed_at": "2026-08-11T12:28:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -2555,5 +2555,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1330601329,
"name": "ghostlock-cve-2026-43499-4.19-k40",
"full_name": "yijiacloud\/ghostlock-cve-2026-43499-4.19-k40",
"owner": {
"login": "yijiacloud",
"id": 140300374,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/140300374?v=4",
"html_url": "https:\/\/github.com\/yijiacloud",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/yijiacloud\/ghostlock-cve-2026-43499-4.19-k40",
"description": "CVE-2026-43499 (GhostLock) rtmutex remove_waiter() UAF local-root PoC adapted for Qualcomm Android 4.19 kernels (Redmi K40 \/ Snapdragon 870 class), LD_PRELOAD based",
"fork": false,
"created_at": "2026-08-11T07:00:12Z",
"updated_at": "2026-08-11T12:29:32Z",
"pushed_at": "2026-08-11T12:29:25Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-43503",
"fork": false,
"created_at": "2026-06-25T21:58:41Z",
"updated_at": "2026-08-11T02:50:05Z",
"updated_at": "2026-08-11T06:53:57Z",
"pushed_at": "2026-06-25T22:42:25Z",
"stargazers_count": 30,
"watchers_count": 30,
"stargazers_count": 31,
"watchers_count": 31,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 30,
"watchers": 31,
"score": 0,
"subscribers_count": 0
},
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1330685294,
"name": "CVE-2026-44401",
"full_name": "sn0x-sharma\/CVE-2026-44401",
"owner": {
"login": "sn0x-sharma",
"id": 64743570,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/64743570?v=4",
"html_url": "https:\/\/github.com\/sn0x-sharma",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/sn0x-sharma\/CVE-2026-44401",
"description": "Persistent XSS in Typemill CMS: the Markdown parser lets javascript: URIs through unfiltered. Writeup + PoC.",
"fork": false,
"created_at": "2026-08-11T08:38:58Z",
"updated_at": "2026-08-11T09:13:58Z",
"pushed_at": "2026-08-11T08:56:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
-54
View File
@@ -383,60 +383,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1319521054,
"name": "YellowKey-Bitlocker-CVE-2026-45585",
"full_name": "yellowkeybitlocker\/YellowKey-Bitlocker-CVE-2026-45585",
"owner": {
"login": "yellowkeybitlocker",
"id": 206289458,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206289458?v=4",
"html_url": "https:\/\/github.com\/yellowkeybitlocker",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/yellowkeybitlocker\/YellowKey-Bitlocker-CVE-2026-45585",
"description": "YellowKey BitLocker CVE-2026-45585 free open-source utility to extract, backup and view BitLocker recovery keys on Windows 10\/11. BitLocker bypass vulnerability tool, remediation and mitigation. Tom's Hardware coverage. Check TPM status, protector types, encryption state. Download YellowKey free, portable, no install needed.",
"fork": false,
"created_at": "2026-08-01T18:09:20Z",
"updated_at": "2026-08-10T09:22:58Z",
"pushed_at": "2026-08-01T19:13:03Z",
"stargazers_count": 168,
"watchers_count": 168,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"bitlocker",
"bitlocker-bypass",
"bitlocker-drive-encryption",
"bitlocker-drive-lock",
"bitlocker-drive-management",
"bitlocker-lock",
"bitlocker-yellowkey",
"cve-2026-45585",
"decryption-tool",
"full-disk-encryption",
"nightmare-eclipse",
"open-source-vulnerabilities",
"vulnerabilities",
"vulnerability",
"yellow",
"yellowkey",
"yellowkey-bitlocker",
"yellowkey-cve",
"yellowkey-exploit",
"yellowkey-vulnerability"
],
"visibility": "public",
"forks": 1,
"watchers": 168,
"score": 0,
"subscribers_count": 0
},
{
"id": 1321684645,
"name": "YellowKey-Bitlocker-CVE-2026-45585",
+33
View File
@@ -155,5 +155,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1330669803,
"name": "CVE-2026-48710",
"full_name": "CuteeCat\/CVE-2026-48710",
"owner": {
"login": "CuteeCat",
"id": 285028368,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/285028368?v=4",
"html_url": "https:\/\/github.com\/CuteeCat",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/CuteeCat\/CVE-2026-48710",
"description": "CVE-2026-48710漏洞验证代码",
"fork": false,
"created_at": "2026-08-11T08:21:36Z",
"updated_at": "2026-08-11T08:42:36Z",
"pushed_at": "2026-08-11T08:42:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
-33
View File
@@ -40,38 +40,5 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1286612923,
"name": "CVE-2026-53753",
"full_name": "0xEnc0der\/CVE-2026-53753",
"owner": {
"login": "0xEnc0der",
"id": 160708981,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/160708981?v=4",
"html_url": "https:\/\/github.com\/0xEnc0der",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xEnc0der\/CVE-2026-53753",
"description": "Crawl4AI <= 0.8.6 pre-auth RCE via AST sandbox escape (gi_frame.f_back.f_builtins chain) — CVSS 10.0",
"fork": false,
"created_at": "2026-07-02T00:32:24Z",
"updated_at": "2026-07-26T10:31:47Z",
"pushed_at": "2026-07-02T00:35:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-56164 EOP Exploit",
"fork": false,
"created_at": "2026-07-15T08:53:00Z",
"updated_at": "2026-08-07T06:48:19Z",
"updated_at": "2026-08-11T08:32:57Z",
"pushed_at": "2026-07-15T09:07:33Z",
"stargazers_count": 15,
"watchers_count": 15,
"stargazers_count": 14,
"watchers_count": 14,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 15,
"watchers": 14,
"score": 0,
"subscribers_count": 0
},
+3 -3
View File
@@ -11,11 +11,11 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/sn0x-sharma\/CVE-2026-57850",
"description": "Missing validation of signed_id_pk in RustDesk's relay handshake allows relay-position attackers to downgrade sessions to plaintext, intercept LoginRequest, and inject input events (MouseEvent, KeyEvent) post-authentication no password required",
"description": "RustDesk < 1.4.9 - Missing Session-Scope Enforcement Allows Out-of-Scope Control Message Injection",
"fork": false,
"created_at": "2026-07-11T22:27:04Z",
"updated_at": "2026-08-03T23:51:58Z",
"pushed_at": "2026-07-21T10:06:56Z",
"updated_at": "2026-08-11T09:36:10Z",
"pushed_at": "2026-08-11T09:35:27Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1,21 +1,21 @@
[
{
"id": 1286765873,
"name": "CVE-2026-30784-rustdesk-poc",
"full_name": "malejdj\/CVE-2026-30784-rustdesk-poc",
"id": 1330758908,
"name": "cve-2026-62737-lab",
"full_name": "DavidCarliez\/cve-2026-62737-lab",
"owner": {
"login": "malejdj",
"id": 218195015,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/218195015?v=4",
"html_url": "https:\/\/github.com\/malejdj",
"login": "DavidCarliez",
"id": 271374756,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/271374756?v=4",
"html_url": "https:\/\/github.com\/DavidCarliez",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/malejdj\/CVE-2026-30784-rustdesk-poc",
"description": "CVE-2026-30784: RustDesk hbbs Traffic Amplification PoC & PCAP Analysis",
"html_url": "https:\/\/github.com\/DavidCarliez\/cve-2026-62737-lab",
"description": null,
"fork": false,
"created_at": "2026-07-02T04:42:55Z",
"updated_at": "2026-07-02T05:43:54Z",
"pushed_at": "2026-07-02T05:43:50Z",
"created_at": "2026-08-11T09:57:15Z",
"updated_at": "2026-08-11T09:57:26Z",
"pushed_at": "2026-08-11T09:57:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
+16 -16
View File
@@ -447,10 +447,10 @@
"description": "CVE-2026-63030 (wp2shell) POC.",
"fork": false,
"created_at": "2026-07-18T12:11:11Z",
"updated_at": "2026-08-04T14:37:01Z",
"updated_at": "2026-08-11T11:05:28Z",
"pushed_at": "2026-07-18T13:40:45Z",
"stargazers_count": 8,
"watchers_count": 8,
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -461,7 +461,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 8,
"watchers": 9,
"score": 0,
"subscribers_count": 1
},
@@ -804,10 +804,10 @@
"description": "Pre-auth RCE PoC for CVE-2026-63030 \/ CVE-2026-60137 (WordPress core)",
"fork": false,
"created_at": "2026-07-18T19:55:11Z",
"updated_at": "2026-08-07T20:37:55Z",
"updated_at": "2026-08-11T12:44:02Z",
"pushed_at": "2026-07-18T19:55:14Z",
"stargazers_count": 9,
"watchers_count": 9,
"stargazers_count": 12,
"watchers_count": 12,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -824,7 +824,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 9,
"watchers": 12,
"score": 0,
"subscribers_count": 0
},
@@ -980,10 +980,10 @@
"description": "WordPress 未授权RCE EXP | CVE-2026-63030 ",
"fork": false,
"created_at": "2026-07-18T21:13:39Z",
"updated_at": "2026-08-11T06:36:28Z",
"updated_at": "2026-08-11T11:05:23Z",
"pushed_at": "2026-07-18T21:19:32Z",
"stargazers_count": 10,
"watchers_count": 10,
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -994,7 +994,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 10,
"watchers": 11,
"score": 0,
"subscribers_count": 0
},
@@ -2484,10 +2484,10 @@
"description": "WordPress Pre-Auth RCE Exploit + Scanner + WAF Bypass | CVE-2026-63030 + CVE-2026-60137 | Go + Python + Metasploit modules + Docker lab",
"fork": false,
"created_at": "2026-08-08T17:22:08Z",
"updated_at": "2026-08-10T00:19:58Z",
"updated_at": "2026-08-11T07:25:33Z",
"pushed_at": "2026-08-08T17:39:56Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -2514,7 +2514,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Tracking OVSwrap (CVE-2026-64531), the Open vSwitch datapath netlink overflow",
"fork": false,
"created_at": "2026-07-29T05:15:24Z",
"updated_at": "2026-08-10T07:09:51Z",
"pushed_at": "2026-08-10T07:08:53Z",
"updated_at": "2026-08-11T07:24:40Z",
"pushed_at": "2026-08-11T07:24:29Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Generic kernel live patch for the KVM\/x86 shadow-MMU use-after-free (Zapscape, CVE-2026-64561)",
"fork": false,
"created_at": "2026-08-07T10:05:56Z",
"updated_at": "2026-08-09T06:33:35Z",
"updated_at": "2026-08-11T10:21:34Z",
"pushed_at": "2026-08-07T15:31:30Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
+8 -8
View File
@@ -14,12 +14,12 @@
"description": "LPE on Deb",
"fork": false,
"created_at": "2026-08-07T09:19:32Z",
"updated_at": "2026-08-11T00:50:43Z",
"updated_at": "2026-08-11T11:12:27Z",
"pushed_at": "2026-08-10T06:14:42Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 2,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 1,
"forks": 3,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
@@ -80,8 +80,8 @@
"description": "Tracking SCTPhantom (CVE-2026-64564), the Linux kernel SCTP ASCONF transport use-after-free",
"fork": false,
"created_at": "2026-08-10T05:16:43Z",
"updated_at": "2026-08-10T11:59:24Z",
"pushed_at": "2026-08-10T11:58:15Z",
"updated_at": "2026-08-11T07:20:49Z",
"pushed_at": "2026-08-11T07:20:43Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
+12 -45
View File
@@ -47,10 +47,10 @@
"description": "XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template",
"fork": false,
"created_at": "2026-08-07T17:07:17Z",
"updated_at": "2026-08-11T03:48:13Z",
"updated_at": "2026-08-11T09:48:29Z",
"pushed_at": "2026-08-09T14:03:24Z",
"stargazers_count": 25,
"watchers_count": 25,
"stargazers_count": 26,
"watchers_count": 26,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 25,
"watchers": 26,
"score": 0,
"subscribers_count": 0
},
@@ -617,10 +617,10 @@
"description": null,
"fork": false,
"created_at": "2026-08-09T14:38:28Z",
"updated_at": "2026-08-10T05:43:36Z",
"updated_at": "2026-08-11T08:48:23Z",
"pushed_at": "2026-08-10T05:43:32Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -631,7 +631,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
@@ -650,10 +650,10 @@
"description": "🔥 XSS2Shell — CVE-2026-64638 Scanner & PoC Toolkit",
"fork": false,
"created_at": "2026-08-09T14:50:57Z",
"updated_at": "2026-08-10T11:07:04Z",
"updated_at": "2026-08-11T07:45:28Z",
"pushed_at": "2026-08-09T15:20:11Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -664,40 +664,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1330587553,
"name": "CVE-2026-64638-XSS2Shell_Lab",
"full_name": "giriaryan694-a11y\/CVE-2026-64638-XSS2Shell_Lab",
"owner": {
"login": "giriaryan694-a11y",
"id": 227362547,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/227362547?v=4",
"html_url": "https:\/\/github.com\/giriaryan694-a11y",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/giriaryan694-a11y\/CVE-2026-64638-XSS2Shell_Lab",
"description": null,
"fork": false,
"created_at": "2026-08-11T06:43:41Z",
"updated_at": "2026-08-11T06:54:09Z",
"pushed_at": "2026-08-11T06:54:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 0
-33
View File
@@ -65,39 +65,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1286736611,
"name": "Netscaler-CVE-2026-8451",
"full_name": "attarwahyup\/Netscaler-CVE-2026-8451",
"owner": {
"login": "attarwahyup",
"id": 83636551,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/83636551?v=4",
"html_url": "https:\/\/github.com\/attarwahyup",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/attarwahyup\/Netscaler-CVE-2026-8451",
"description": null,
"fork": false,
"created_at": "2026-07-02T03:53:48Z",
"updated_at": "2026-07-02T03:58:54Z",
"pushed_at": "2026-07-02T03:58:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1288411585,
"name": "CVE-2026-8451",
+21 -15
View File
@@ -1197,7 +1197,6 @@
- [watchtowrlabs/watchTowr-vs-Netscaler-CVE-2026-8451](https://github.com/watchtowrlabs/watchTowr-vs-Netscaler-CVE-2026-8451)
- [derekpreston81/CVE_ADC_IOC_2026](https://github.com/derekpreston81/CVE_ADC_IOC_2026)
- [attarwahyup/Netscaler-CVE-2026-8451](https://github.com/attarwahyup/Netscaler-CVE-2026-8451)
- [0xBlackash/CVE-2026-8451](https://github.com/0xBlackash/CVE-2026-8451)
### CVE-2026-8461 (2026-06-18)
@@ -2223,6 +2222,7 @@
### CVE-2026-17106
- [masasron/CopyEscape-CVE-2026-17106](https://github.com/masasron/CopyEscape-CVE-2026-17106)
- [HackSpeak/CVE-2026-17106](https://github.com/HackSpeak/CVE-2026-17106)
### CVE-2026-17351 (2026-07-31)
@@ -2303,6 +2303,13 @@
- [huzjie/aegisagent](https://github.com/huzjie/aegisagent)
### CVE-2026-18907 (2026-08-05)
<code>Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filename.
</code>
- [Hunt-Benito/two-dots-and-a-slash-cve-2026-18907-tecno-hi-browser-download-path-traversal](https://github.com/Hunt-Benito/two-dots-and-a-slash-cve-2026-18907-tecno-hi-browser-download-path-traversal)
### CVE-2026-18953 (2026-08-05)
<code>Improper limitation of a pathname to a restricted directory in the get_resource tool in Amazon awslabs.aws-transform-mcp-server 0.1.0 through 0.1.4 might allow a context-dependent actor to write arbitrary files outside the intended working directory via the savePath parameter.\n\n\n\nTo remediate this issue, users should upgrade to version 0.1.5 or later.
@@ -3248,7 +3255,6 @@
</code>
- [dinosn/CVE-2026-25243](https://github.com/dinosn/CVE-2026-25243)
- [dinosn/CVE-2026-25243-debugfree](https://github.com/dinosn/CVE-2026-25243-debugfree)
- [captain-woof/CVE-2026-25243](https://github.com/captain-woof/CVE-2026-25243)
### CVE-2026-25250
@@ -3681,9 +3687,6 @@
- [walidriouah/CVE-2026-30691](https://github.com/walidriouah/CVE-2026-30691)
### CVE-2026-30784
- [malejdj/CVE-2026-30784-rustdesk-poc](https://github.com/malejdj/CVE-2026-30784-rustdesk-poc)
### CVE-2026-30849 (2026-03-23)
<code>Mantis Bug Tracker (MantisBT) is an open source issue tracker. Versions prior to 2.28.1 running on MySQL family databases are affected by an authentication bypass vulnerability in the SOAP API, as a result of an improper type checking on the password parameter. Other database backends are not affected, as they do not perform implicit type conversion from string to integer. Using a crafted SOAP envelope, an attacker knowing the victim's username is able to login to the SOAP API with their account without knowledge of the actual password, and execute any API function they have access to. Version 2.28.1 contains a patch. Disabling the SOAP API significantly reduces the risk, but still allows the attacker to retrieve user account information including email address and real name.
@@ -5304,6 +5307,7 @@
- [oopnv70-lab/ghostlock-skeleton](https://github.com/oopnv70-lab/ghostlock-skeleton)
- [oopnv70-lab/ghostlock-skeleton-v2](https://github.com/oopnv70-lab/ghostlock-skeleton-v2)
- [yijiacloud/GhostLock-OPPO-PCKM00](https://github.com/yijiacloud/GhostLock-OPPO-PCKM00)
- [yijiacloud/ghostlock-cve-2026-43499-4.19-k40](https://github.com/yijiacloud/ghostlock-cve-2026-43499-4.19-k40)
### CVE-2026-43500 (2026-05-11)
@@ -5443,6 +5447,13 @@
- [HORKimhab/CVE-2026-44338](https://github.com/HORKimhab/CVE-2026-44338)
- [rootdirective-sec/CVE-2026-44338-Lab](https://github.com/rootdirective-sec/CVE-2026-44338-Lab)
### CVE-2026-44401 (2026-08-10)
<code>Typemill CMS version 2.x contains a persistent cross-site scripting vulnerability in the Markdown parser extension that allows authenticated users with theme-configuration access to inject malicious JavaScript URIs by supplying unsanitized href values in Markdown links. Attackers can craft Markdown links using the javascript: scheme through ParsedownExtension.php or TwigMarkdownExtension.php, storing a persistent payload that executes in the browser of every visitor who clicks the link, enabling session cookie theft, authenticated request forgery, and credential harvesting.
</code>
- [sn0x-sharma/CVE-2026-44401](https://github.com/sn0x-sharma/CVE-2026-44401)
### CVE-2026-44403 (2026-05-12)
<code>Wing FTP Server before 8.1.3 contains an authenticated remote code execution vulnerability in the session serialization mechanism that allows authenticated administrators to inject arbitrary Lua code through the domain admin mydirectory field. Attackers can exploit unsafe serialization of session values into Lua source code without proper escaping of closing delimiters, causing the injected code to be executed when the poisoned session is loaded via loadfile().
@@ -5681,7 +5692,6 @@
- [boobalover7/YellowKey-Bitlocker-CVE-2026-45585](https://github.com/boobalover7/YellowKey-Bitlocker-CVE-2026-45585)
- [tchuin2609/YellowKey-Bitlocker](https://github.com/tchuin2609/YellowKey-Bitlocker)
- [tchuin2609/tchuin2609.github.io](https://github.com/tchuin2609/tchuin2609.github.io)
- [yellowkeybitlocker/YellowKey-Bitlocker-CVE-2026-45585](https://github.com/yellowkeybitlocker/YellowKey-Bitlocker-CVE-2026-45585)
- [Donalhighnecked528/YellowKey-Bitlocker-CVE-2026-45585](https://github.com/Donalhighnecked528/YellowKey-Bitlocker-CVE-2026-45585)
### CVE-2026-45659 (2026-05-22)
@@ -6214,6 +6224,7 @@
- [xtremebeing/starlette-host-header-lab](https://github.com/xtremebeing/starlette-host-header-lab)
- [Bhanunamikaze/BadHost-CVE-2026-48710-Exploit](https://github.com/Bhanunamikaze/BadHost-CVE-2026-48710-Exploit)
- [sb-ox/repro-OXDEV-77637-uv-workspace](https://github.com/sb-ox/repro-OXDEV-77637-uv-workspace)
- [CuteeCat/CVE-2026-48710](https://github.com/CuteeCat/CVE-2026-48710)
### CVE-2026-48732 (2026-06-24)
@@ -6974,7 +6985,6 @@
</code>
- [BiiTts/CVE-2026-53753-Crawl4AI-RCE](https://github.com/BiiTts/CVE-2026-53753-Crawl4AI-RCE)
- [0xEnc0der/CVE-2026-53753](https://github.com/0xEnc0der/CVE-2026-53753)
### CVE-2026-53787 (2026-06-12)
@@ -7602,6 +7612,9 @@
- [NicPWNs/CVE-2026-62183](https://github.com/NicPWNs/CVE-2026-62183)
### CVE-2026-62737
- [DavidCarliez/cve-2026-62737-lab](https://github.com/DavidCarliez/cve-2026-62737-lab)
### CVE-2026-62958
- [0Linear/CVE-2026-62958](https://github.com/0Linear/CVE-2026-62958)
@@ -7805,7 +7818,6 @@
- [g0d150ne/XSS2Shell](https://github.com/g0d150ne/XSS2Shell)
- [eh-amish/CVE-2026-64638-XSS-to-Shell-PoC](https://github.com/eh-amish/CVE-2026-64638-XSS-to-Shell-PoC)
- [0xlipon/xss2shell](https://github.com/0xlipon/xss2shell)
- [giriaryan694-a11y/CVE-2026-64638-XSS2Shell_Lab](https://github.com/giriaryan694-a11y/CVE-2026-64638-XSS2Shell_Lab)
### CVE-2026-64640 (2026-08-06)
@@ -32781,13 +32793,6 @@
- [0x00phantom-hat/CVE-2023-6972-Exploit-Arbitrary-File-Deletion](https://github.com/0x00phantom-hat/CVE-2023-6972-Exploit-Arbitrary-File-Deletion)
### CVE-2023-6985 (2024-02-05)
<code>The 10Web AI Assistant – AI content writing assistant plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the install_plugin AJAX action in all versions up to, and including, 1.0.18. This makes it possible for authenticated attackers, with subscriber-level access and above, to install arbitrary plugins that can be used to gain further access to a compromised site.
</code>
- [RandomRobbieBF/CVE-2023-6985](https://github.com/RandomRobbieBF/CVE-2023-6985)
### CVE-2023-7016 (2024-02-27)
<code>A flaw in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to execute code at a SYSTEM level via local access.
@@ -39516,6 +39521,7 @@
- [Hamibubu/CVE-2023-48084](https://github.com/Hamibubu/CVE-2023-48084)
- [bucketcat/CVE-2023-48084](https://github.com/bucketcat/CVE-2023-48084)
- [MettHK/CVE-2023-48084-Revised](https://github.com/MettHK/CVE-2023-48084-Revised)
### CVE-2023-48123 (2023-12-06)