nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/08/13 00:50:09

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-08-13 09:50:09 +09:00
1 parent 53d8f28941
commit 1c0876d278
48 files changed
+453 -379
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2007/CVE-2007-2447.json
-33
View File
@@ -461,39 +461,6 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 437190539,
"name": "CVE-2007-2447",
"full_name": "s4msec\/CVE-2007-2447",
"owner": {
"login": "s4msec",
"id": 75855533,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/75855533?v=4",
"html_url": "https:\/\/github.com\/s4msec",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/s4msec\/CVE-2007-2447",
"description": null,
"fork": false,
"created_at": "2021-12-11T04:50:54Z",
"updated_at": "2023-03-20T05:02:28Z",
"pushed_at": "2023-03-20T05:20:21Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 1
},
{
"id": 490631750,
"name": "Samba-Usermap-exploit",
2009/CVE-2009-4496.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1332482679,
"name": "boa-cve-2009-4496-analysis",
"full_name": "enriquenegri-cyberlaw\/boa-cve-2009-4496-analysis",
"owner": {
"login": "enriquenegri-cyberlaw",
"id": 271627989,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/271627989?v=4",
"html_url": "https:\/\/github.com\/enriquenegri-cyberlaw",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/enriquenegri-cyberlaw\/boa-cve-2009-4496-analysis",
"description": "Defensive analysis of CVE-2009-4496 in Boa 0.94.14rc21, including source-code review, patch analysis, severity assessment, and ethical scope.",
"fork": false,
"created_at": "2026-08-12T22:11:12Z",
"updated_at": "2026-08-13T00:02:53Z",
"pushed_at": "2026-08-13T00:02:48Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2017/CVE-2017-7494.json
+2 -2
View File
@@ -85,7 +85,7 @@
"stargazers_count": 381,
"watchers_count": 381,
"has_discussions": false,
"forks_count": 97,
"forks_count": 98,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -99,7 +99,7 @@
"sambacry"
],
"visibility": "public",
"forks": 97,
"forks": 98,
"watchers": 381,
"score": 0,
"subscribers_count": 9
2017/CVE-2017-7921.json
+4 -4
View File
@@ -717,10 +717,10 @@
"description": "Vulnerability research write-up on CVE-2017-7921 — a critical unauthenticated auth bypass in Hikvision IP cameras\/DVRs\/NVRs, covering root cause, exploitation path, detection, and remediation.",
"fork": false,
"created_at": "2026-07-14T02:08:52Z",
"updated_at": "2026-07-14T02:14:36Z",
"updated_at": "2026-08-12T18:58:11Z",
"pushed_at": "2026-07-14T02:14:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -731,7 +731,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
2018/CVE-2018-1002105.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "PoC for CVE-2018-1002105.",
"fork": false,
"created_at": "2018-12-06T11:28:02Z",
"updated_at": "2025-10-15T07:57:36Z",
"updated_at": "2026-08-12T22:32:35Z",
"pushed_at": "2018-12-21T14:34:04Z",
"stargazers_count": 222,
"watchers_count": 222,
"stargazers_count": 223,
"watchers_count": 223,
"has_discussions": false,
"forks_count": 37,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 37,
"watchers": 222,
"watchers": 223,
"score": 0,
"subscribers_count": 8
},
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-08-12T17:38:01Z",
"pushed_at": "2026-08-12T17:37:52Z",
"updated_at": "2026-08-12T23:42:01Z",
"pushed_at": "2026-08-12T23:41:57Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2020/CVE-2020-1472.json
+2 -2
View File
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-08-12T17:27:37Z",
"pushed_at": "2026-08-12T17:27:31Z",
"updated_at": "2026-08-12T23:52:44Z",
"pushed_at": "2026-08-12T23:52:40Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-08-12T17:40:44Z",
"pushed_at": "2026-08-12T17:40:41Z",
"updated_at": "2026-08-12T23:51:29Z",
"pushed_at": "2026-08-12T23:51:25Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-4034.json
-33
View File
@@ -411,39 +411,6 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 494691789,
"name": "cve-2021-4034",
"full_name": "wudicainiao\/cve-2021-4034",
"owner": {
"login": "wudicainiao",
"id": 20990570,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/20990570?v=4",
"html_url": "https:\/\/github.com\/wudicainiao",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/wudicainiao\/cve-2021-4034",
"description": "CVE-2021-4034 for single commcand",
"fork": false,
"created_at": "2022-05-21T05:42:01Z",
"updated_at": "2024-10-30T07:16:18Z",
"pushed_at": "2022-05-31T11:56:20Z",
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 10,
"score": 0,
"subscribers_count": 1
},
{
"id": 499588777,
"name": "CVE-2021-4034",
2021/CVE-2021-41773.json
+4 -4
View File
@@ -1810,10 +1810,10 @@
"description": "The first vulnerability with the CVE identifier CVE-2021-41773 is a path traversal flaw that exists in Apache HTTP Server 2.4.49.",
"fork": false,
"created_at": "2021-10-15T21:38:48Z",
"updated_at": "2025-10-10T00:17:20Z",
"updated_at": "2026-08-12T20:28:12Z",
"pushed_at": "2022-10-26T18:01:44Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -1824,7 +1824,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 2
},
2021/CVE-2021-42574.json
+33
View File
@@ -278,5 +278,38 @@
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
{
"id": 1332509308,
"name": "cobol-shield",
"full_name": "LuisCastellanos-dev\/cobol-shield",
"owner": {
"login": "LuisCastellanos-dev",
"id": 282130403,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/282130403?v=4",
"html_url": "https:\/\/github.com\/LuisCastellanos-dev",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/LuisCastellanos-dev\/cobol-shield",
"description": "Security hardening toolkit for COBOL legacy — detects Trojan Source (CVE-2021-42574) and Glassworm invisible Unicode in GnuCOBOL \/ Zowe pipelines",
"fork": false,
"created_at": "2026-08-12T23:01:35Z",
"updated_at": "2026-08-12T23:02:13Z",
"pushed_at": "2026-08-12T23:02:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2023/CVE-2023-5968.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Find the vulnerability your tests were never written to catch. A ReGrade demo modeling CVE-2023-5968: catch a password-hash leak by comparing an app to itself.",
"fork": false,
"created_at": "2026-07-04T00:48:09Z",
"updated_at": "2026-08-11T20:43:49Z",
"pushed_at": "2026-08-12T08:03:49Z",
"updated_at": "2026-08-12T19:36:45Z",
"pushed_at": "2026-08-12T19:36:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-0670.json
+2 -2
View File
@@ -118,8 +118,8 @@
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
"fork": false,
"created_at": "2026-01-08T01:32:09Z",
"updated_at": "2026-08-10T06:23:54Z",
"pushed_at": "2026-08-10T06:23:37Z",
"updated_at": "2026-08-12T22:03:13Z",
"pushed_at": "2026-08-12T22:03:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-14847.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
"fork": false,
"created_at": "2025-07-30T15:52:00Z",
"updated_at": "2026-08-10T06:25:10Z",
"pushed_at": "2026-08-10T06:24:44Z",
"updated_at": "2026-08-12T22:04:24Z",
"pushed_at": "2026-08-12T22:04:14Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -997,8 +997,8 @@
"description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
"fork": false,
"created_at": "2026-01-14T06:05:44Z",
"updated_at": "2026-08-10T06:24:46Z",
"pushed_at": "2026-08-10T06:24:29Z",
"updated_at": "2026-08-12T22:04:06Z",
"pushed_at": "2026-08-12T22:04:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-20281.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "This script checks for the presence of the **CVE-2025-20281** vulnerability in Cisco Identity Services Engine (ISE) and ISE-PIC, which allows **unauthenticated remote code execution (RCE)** as root due to insufficient input validation in a specific API.",
"fork": false,
"created_at": "2025-07-03T02:10:37Z",
"updated_at": "2026-06-22T14:30:50Z",
"updated_at": "2026-08-13T00:41:38Z",
"pushed_at": "2025-07-03T02:15:35Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 7,
"watchers": 8,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-23211.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": null,
"fork": false,
"created_at": "2026-08-12T04:44:36Z",
"updated_at": "2026-08-12T15:39:38Z",
"pushed_at": "2026-08-12T15:39:11Z",
"updated_at": "2026-08-12T20:18:42Z",
"pushed_at": "2026-08-12T20:17:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-32463.json
+2 -2
View File
@@ -1389,8 +1389,8 @@
"description": "This CVE addresses a vulnerability in sudo versions 1.9.14 to 1.9.17, enabling unauthorized local privilege escalation to root access.",
"fork": false,
"created_at": "2025-08-08T20:00:41Z",
"updated_at": "2026-07-17T13:36:52Z",
"pushed_at": "2026-07-02T15:30:05Z",
"updated_at": "2026-08-12T23:56:09Z",
"pushed_at": "2026-08-12T23:56:04Z",
"stargazers_count": 26,
"watchers_count": 26,
"has_discussions": false,
2025/CVE-2025-47273.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "CVE-2025-47273 is a high-severity path traversal vulnerability in the setuptools library ,specifically version 78.1.0 .",
"fork": false,
"created_at": "2026-03-15T23:03:40Z",
"updated_at": "2026-03-16T00:25:50Z",
"updated_at": "2026-08-12T19:15:34Z",
"pushed_at": "2026-03-16T00:25:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-49844.json
+2 -2
View File
@@ -66,8 +66,8 @@
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
"fork": false,
"created_at": "2022-04-06T09:27:39Z",
"updated_at": "2026-08-10T06:14:42Z",
"pushed_at": "2026-08-10T06:14:38Z",
"updated_at": "2026-08-12T21:53:45Z",
"pushed_at": "2026-08-12T21:53:41Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-52915.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-08-12T07:50:36Z",
"updated_at": "2026-08-12T20:30:27Z",
"pushed_at": "2026-07-12T09:40:22Z",
"stargazers_count": 898,
"watchers_count": 898,
"stargazers_count": 899,
"watchers_count": 899,
"has_discussions": false,
"forks_count": 132,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 132,
"watchers": 898,
"watchers": 899,
"score": 0,
"subscribers_count": 20
}
2025/CVE-2025-54136.json
+1 -1
View File
@@ -48,7 +48,7 @@
"fork": false,
"created_at": "2026-07-08T09:19:33Z",
"updated_at": "2026-07-08T15:41:00Z",
"pushed_at": "2026-08-09T11:10:04Z",
"pushed_at": "2026-08-12T21:07:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-55182.json
+51 -10
View File
@@ -99,8 +99,8 @@
"description": null,
"fork": false,
"created_at": "2024-11-29T12:32:19Z",
"updated_at": "2026-08-10T06:21:39Z",
"pushed_at": "2026-08-10T06:21:35Z",
"updated_at": "2026-08-12T22:01:17Z",
"pushed_at": "2026-08-12T22:01:04Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -148,8 +148,8 @@
"description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
"fork": false,
"created_at": "2025-06-06T16:34:46Z",
"updated_at": "2026-08-10T06:21:54Z",
"pushed_at": "2026-08-10T06:21:26Z",
"updated_at": "2026-08-12T22:01:05Z",
"pushed_at": "2026-08-12T22:00:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -1102,10 +1102,10 @@
"description": "Explanation and full RCE PoC for CVE-2025-55182",
"fork": false,
"created_at": "2025-12-04T11:49:55Z",
"updated_at": "2026-08-11T21:26:10Z",
"updated_at": "2026-08-12T20:24:31Z",
"pushed_at": "2025-12-08T13:51:04Z",
"stargazers_count": 1430,
"watchers_count": 1430,
"stargazers_count": 1431,
"watchers_count": 1431,
"has_discussions": false,
"forks_count": 198,
"allow_forking": true,
@@ -1116,7 +1116,7 @@
"topics": [],
"visibility": "public",
"forks": 198,
"watchers": 1430,
"watchers": 1431,
"score": 0,
"subscribers_count": 10
},
@@ -12211,8 +12211,8 @@
"description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
"fork": false,
"created_at": "2026-01-02T01:28:57Z",
"updated_at": "2026-08-10T06:22:35Z",
"pushed_at": "2026-08-10T06:22:31Z",
"updated_at": "2026-08-12T22:02:08Z",
"pushed_at": "2026-08-12T22:02:03Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -15478,5 +15478,46 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1332399672,
"name": "cve-2025-55182-react2shell-analysis",
"full_name": "aisha-jimoh\/cve-2025-55182-react2shell-analysis",
"owner": {
"login": "aisha-jimoh",
"id": 200348288,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/200348288?v=4",
"html_url": "https:\/\/github.com\/aisha-jimoh",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/aisha-jimoh\/cve-2025-55182-react2shell-analysis",
"description": "Technical analysis of CVE-2025-55182 (React2Shell), covering vulnerability mechanics, root cause, controlled PoC testing, impact, and mitigation strategies.",
"fork": false,
"created_at": "2026-08-12T19:57:15Z",
"updated_at": "2026-08-12T20:15:41Z",
"pushed_at": "2026-08-12T20:08:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"cybersecurity",
"react",
"react-server-components",
"remote-code-execution",
"security-research",
"vulnerability-research"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-65354.json
-33
View File
@@ -31,38 +31,5 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1129383882,
"name": "CVE-2025-65354",
"full_name": "EarthAngel666\/CVE-2025-65354",
"owner": {
"login": "EarthAngel666",
"id": 210785252,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/210785252?v=4",
"html_url": "https:\/\/github.com\/EarthAngel666",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/EarthAngel666\/CVE-2025-65354",
"description": "POC for CVE-2025-65354",
"fork": false,
"created_at": "2026-01-07T02:43:32Z",
"updated_at": "2026-01-07T02:44:38Z",
"pushed_at": "2026-01-07T02:44:34Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-7771.json
+4 -4
View File
@@ -371,10 +371,10 @@
"description": "ThrottleStop.sys Arbitrary Physical Memory R\/W",
"fork": false,
"created_at": "2026-08-10T23:15:36Z",
"updated_at": "2026-08-12T17:35:45Z",
"updated_at": "2026-08-12T20:13:32Z",
"pushed_at": "2026-08-10T23:15:39Z",
"stargazers_count": 10,
"watchers_count": 10,
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -385,7 +385,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 10,
"watchers": 11,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-14282.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1332552250,
"name": "CVE-2026-14282",
"full_name": "nullwhisper\/CVE-2026-14282",
"owner": {
"login": "nullwhisper",
"id": 316353254,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/316353254?v=4",
"html_url": "https:\/\/github.com\/nullwhisper",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/nullwhisper\/CVE-2026-14282",
"description": "GoDAM WordPress plugin <= 1.12.2 unauthenticated file upload RCE (CVE-2026-14282)",
"fork": false,
"created_at": "2026-08-13T00:27:20Z",
"updated_at": "2026-08-13T00:27:31Z",
"pushed_at": "2026-08-13T00:27:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-14840.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1332539009,
"name": "CVE-2026-14840",
"full_name": "nullwhisper\/CVE-2026-14840",
"owner": {
"login": "nullwhisper",
"id": 316353254,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/316353254?v=4",
"html_url": "https:\/\/github.com\/nullwhisper",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/nullwhisper\/CVE-2026-14840",
"description": null,
"fork": false,
"created_at": "2026-08-13T00:01:42Z",
"updated_at": "2026-08-13T00:05:24Z",
"pushed_at": "2026-08-13T00:05:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-22747.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": null,
"fork": false,
"created_at": "2026-08-09T17:08:46Z",
"updated_at": "2026-08-12T02:41:56Z",
"pushed_at": "2026-08-12T02:41:48Z",
"updated_at": "2026-08-12T21:18:50Z",
"pushed_at": "2026-08-12T21:19:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24031.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1332518112,
"name": "CVE-2026-24031",
"full_name": "aramosf\/CVE-2026-24031",
"owner": {
"login": "aramosf",
"id": 3511842,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/3511842?v=4",
"html_url": "https:\/\/github.com\/aramosf",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/aramosf\/CVE-2026-24031",
"description": "CVE-2026-24031 Dovecot 2.4.0\/3.1.0 SQL authentication bypass (auth bypass + user enumeration) PoC",
"fork": false,
"created_at": "2026-08-12T23:19:05Z",
"updated_at": "2026-08-12T23:37:39Z",
"pushed_at": "2026-08-12T23:37:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-27912.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "POC tool for ResetNightmare (CVE-2026-27912)",
"fork": false,
"created_at": "2026-08-02T12:36:16Z",
"updated_at": "2026-08-12T16:34:09Z",
"updated_at": "2026-08-12T22:04:45Z",
"pushed_at": "2026-08-02T14:30:24Z",
"stargazers_count": 183,
"watchers_count": 183,
"stargazers_count": 184,
"watchers_count": 184,
"has_discussions": false,
"forks_count": 29,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 29,
"watchers": 183,
"watchers": 184,
"score": 0,
"subscribers_count": 1
},
2026/CVE-2026-31431.json
+2 -2
View File
@@ -782,8 +782,8 @@
"description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.",
"fork": false,
"created_at": "2026-05-06T09:49:14Z",
"updated_at": "2026-08-10T06:44:38Z",
"pushed_at": "2026-08-10T06:44:21Z",
"updated_at": "2026-08-12T22:24:13Z",
"pushed_at": "2026-08-12T22:24:08Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-31802.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"fork": false,
"created_at": "2026-03-28T20:49:46Z",
"updated_at": "2026-08-10T06:38:20Z",
"pushed_at": "2026-08-10T06:38:16Z",
"updated_at": "2026-08-12T22:17:52Z",
"pushed_at": "2026-08-12T22:17:48Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-33017.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Langflow RCE",
"fork": false,
"created_at": "2026-03-31T02:10:40Z",
"updated_at": "2026-08-12T04:48:15Z",
"updated_at": "2026-08-12T19:14:35Z",
"pushed_at": "2026-07-20T02:31:44Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 7,
"watchers": 8,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-3609.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-08-12T07:50:36Z",
"updated_at": "2026-08-12T20:30:27Z",
"pushed_at": "2026-07-12T09:40:22Z",
"stargazers_count": 898,
"watchers_count": 898,
"stargazers_count": 899,
"watchers_count": 899,
"has_discussions": false,
"forks_count": 132,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 132,
"watchers": 898,
"watchers": 899,
"score": 0,
"subscribers_count": 20
}
2026/CVE-2026-38751.json
-33
View File
@@ -64,38 +64,5 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1287537119,
"name": "CVE-2026-38751-OpenSTAManager-Arbitrary-File-Upload-PoC",
"full_name": "Mkps\/CVE-2026-38751-OpenSTAManager-Arbitrary-File-Upload-PoC",
"owner": {
"login": "Mkps",
"id": 8045297,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8045297?v=4",
"html_url": "https:\/\/github.com\/Mkps",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Mkps\/CVE-2026-38751-OpenSTAManager-Arbitrary-File-Upload-PoC",
"description": "This repository contains a proof-of-concept (PoC) exploit for CVE-2026-38751, affecting OpenSTAManager ≤ 2.10. The vulnerability allows an authenticated attacker to upload a malicious module via the module update functionality, leading to arbitrary file upload and remote code execution (RCE).",
"fork": false,
"created_at": "2026-07-02T19:29:00Z",
"updated_at": "2026-07-04T12:27:02Z",
"pushed_at": "2026-07-04T12:26:58Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-39987.json
+33
View File
@@ -302,5 +302,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1332366389,
"name": "cve-2026-39987",
"full_name": "matesz44\/cve-2026-39987",
"owner": {
"login": "matesz44",
"id": 29248278,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/29248278?v=4",
"html_url": "https:\/\/github.com\/matesz44",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/matesz44\/cve-2026-39987",
"description": "CVE-2026-39987 PoC: Marimo<0.23.0 Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass",
"fork": false,
"created_at": "2026-08-12T19:12:11Z",
"updated_at": "2026-08-12T19:17:10Z",
"pushed_at": "2026-08-12T19:17:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-41940.json
+2 -2
View File
@@ -291,8 +291,8 @@
"description": "Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.",
"fork": false,
"created_at": "2026-05-06T18:08:48Z",
"updated_at": "2026-08-10T06:45:02Z",
"pushed_at": "2026-08-10T06:44:29Z",
"updated_at": "2026-08-12T22:24:21Z",
"pushed_at": "2026-08-12T22:24:17Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-43499.json
+26 -26
View File
@@ -353,7 +353,7 @@
"stargazers_count": 247,
"watchers_count": 247,
"has_discussions": false,
"forks_count": 54,
"forks_count": 53,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -368,7 +368,7 @@
"root"
],
"visibility": "public",
"forks": 54,
"forks": 53,
"watchers": 247,
"score": 0,
"subscribers_count": 10
@@ -553,12 +553,12 @@
"description": null,
"fork": false,
"created_at": "2026-07-14T00:15:16Z",
"updated_at": "2026-08-11T09:51:50Z",
"updated_at": "2026-08-12T22:16:12Z",
"pushed_at": "2026-07-14T14:28:58Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 3,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -566,8 +566,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 7,
"forks": 4,
"watchers": 8,
"score": 0,
"subscribers_count": 0
},
@@ -586,10 +586,10 @@
"description": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.",
"fork": false,
"created_at": "2026-07-14T14:21:27Z",
"updated_at": "2026-08-12T17:32:17Z",
"updated_at": "2026-08-13T00:18:07Z",
"pushed_at": "2026-07-30T11:28:07Z",
"stargazers_count": 53,
"watchers_count": 53,
"stargazers_count": 54,
"watchers_count": 54,
"has_discussions": false,
"forks_count": 16,
"allow_forking": true,
@@ -600,7 +600,7 @@
"topics": [],
"visibility": "public",
"forks": 16,
"watchers": 53,
"watchers": 54,
"score": 0,
"subscribers_count": 0
},
@@ -1081,12 +1081,12 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
"updated_at": "2026-08-12T16:57:08Z",
"updated_at": "2026-08-13T00:30:33Z",
"pushed_at": "2026-08-09T05:13:42Z",
"stargazers_count": 788,
"watchers_count": 788,
"stargazers_count": 790,
"watchers_count": 790,
"has_discussions": false,
"forks_count": 135,
"forks_count": 136,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1094,8 +1094,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 135,
"watchers": 788,
"forks": 136,
"watchers": 790,
"score": 0,
"subscribers_count": 24
},
@@ -2241,12 +2241,12 @@
"description": "Root your Galaxy using CVE-2026-43499",
"fork": false,
"created_at": "2026-08-08T11:41:33Z",
"updated_at": "2026-08-12T18:51:13Z",
"updated_at": "2026-08-12T23:55:33Z",
"pushed_at": "2026-08-10T12:39:32Z",
"stargazers_count": 16,
"watchers_count": 16,
"stargazers_count": 17,
"watchers_count": 17,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2254,8 +2254,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 16,
"forks": 2,
"watchers": 17,
"score": 0,
"subscribers_count": 0
},
@@ -2406,8 +2406,8 @@
"description": "GhostLock-X200 v1.0 - temporary root toolchain for vivo X200 (PD2415 \/ b57 kernel) based on CVE-2026-43499. For authorized security research only.",
"fork": false,
"created_at": "2026-08-10T23:26:52Z",
"updated_at": "2026-08-12T02:28:59Z",
"pushed_at": "2026-08-12T02:29:10Z",
"updated_at": "2026-08-13T00:19:00Z",
"pushed_at": "2026-08-13T00:18:54Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-45585.json
+4 -4
View File
@@ -212,8 +212,8 @@
"description": "Manage and recover BitLocker encrypted drives with this tool for Windows 11 recovery key management and educational study of CVE-2026-45585.",
"fork": false,
"created_at": "2026-06-16T07:21:36Z",
"updated_at": "2026-08-10T06:47:19Z",
"pushed_at": "2026-08-10T06:46:53Z",
"updated_at": "2026-08-12T22:26:38Z",
"pushed_at": "2026-08-12T22:26:34Z",
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
@@ -316,8 +316,8 @@
"description": "Manage BitLocker encrypted drives on Windows. Extract recovery keys, check encryption status, and apply security mitigations for CVE-2026-45585.",
"fork": false,
"created_at": "2026-07-25T02:47:26Z",
"updated_at": "2026-08-10T06:51:17Z",
"pushed_at": "2026-08-10T06:50:51Z",
"updated_at": "2026-08-12T22:30:39Z",
"pushed_at": "2026-08-12T22:30:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-46242.json
-33
View File
@@ -1,37 +1,4 @@
[
{
"id": 1289366221,
"name": "CVE-2026-46242",
"full_name": "0xBlackash\/CVE-2026-46242",
"owner": {
"login": "0xBlackash",
"id": 259905299,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/259905299?v=4",
"html_url": "https:\/\/github.com\/0xBlackash",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xBlackash\/CVE-2026-46242",
"description": "CVE-2026-46242",
"fork": false,
"created_at": "2026-07-04T16:52:30Z",
"updated_at": "2026-07-29T13:06:27Z",
"pushed_at": "2026-07-04T17:20:36Z",
"stargazers_count": 18,
"watchers_count": 18,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 18,
"score": 0,
"subscribers_count": 0
},
{
"id": 1292903094,
"name": "ScannerBadEpoll",
2026/CVE-2026-53360.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 1289180434,
"name": "CVE-2026-53360-POC",
"full_name": "0xCyberstan\/CVE-2026-53360-POC",
"owner": {
"login": "0xCyberstan",
"id": 156473872,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/156473872?v=4",
"html_url": "https:\/\/github.com\/0xCyberstan",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xCyberstan\/CVE-2026-53360-POC",
"description": "PoC for CVE-2026-53360: guest-triggered heap out-of-bounds read\/write in KVM SEV-SNP Page State Change (PSC) handling.",
"fork": false,
"created_at": "2026-07-04T12:27:13Z",
"updated_at": "2026-07-24T13:30:03Z",
"pushed_at": "2026-07-04T12:35:51Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-54984.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1332443560,
"name": "CVE-2026-54984",
"full_name": "kagancapar\/CVE-2026-54984",
"owner": {
"login": "kagancapar",
"id": 33525376,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/33525376?v=4",
"html_url": "https:\/\/github.com\/kagancapar",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/kagancapar\/CVE-2026-54984",
"description": "CVE-2026-54984 \/ ZDI-26-543: Windows ICC file parsing out-of-bounds write (CWE-122, CVSS 7.8)",
"fork": false,
"created_at": "2026-08-12T21:03:20Z",
"updated_at": "2026-08-12T21:07:44Z",
"pushed_at": "2026-08-12T21:07:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-55040.json
+8 -8
View File
@@ -19,7 +19,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
@@ -47,12 +47,12 @@
"description": "Microsoft SharePoint JWT Authentication Bypass (CVE-2026-55040)",
"fork": false,
"created_at": "2026-08-06T11:46:34Z",
"updated_at": "2026-08-12T17:02:30Z",
"updated_at": "2026-08-12T22:59:55Z",
"pushed_at": "2026-08-10T15:35:23Z",
"stargazers_count": 27,
"watchers_count": 27,
"stargazers_count": 32,
"watchers_count": 32,
"has_discussions": false,
"forks_count": 6,
"forks_count": 9,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,8 +60,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 27,
"forks": 9,
"watchers": 32,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-56290.json
-33
View File
@@ -1,37 +1,4 @@
[
{
"id": 1287736215,
"name": "PageBuilderCK-CVE-2026-56290-Exploit",
"full_name": "sagsooz\/PageBuilderCK-CVE-2026-56290-Exploit",
"owner": {
"login": "sagsooz",
"id": 38169010,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38169010?v=4",
"html_url": "https:\/\/github.com\/sagsooz",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/sagsooz\/PageBuilderCK-CVE-2026-56290-Exploit",
"description": "Page Builder CK for Joomla - Unauthenticated SSRF \/ Remote File Write leading to PHP execution Exploiter",
"fork": false,
"created_at": "2026-07-03T00:52:36Z",
"updated_at": "2026-07-16T08:36:49Z",
"pushed_at": "2026-07-04T17:39:33Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1293052504,
"name": "CVE-2026-56290",
2026/CVE-2026-57827.json
+2 -2
View File
@@ -61,8 +61,8 @@
"description": "Demonstrate the unauthenticated remote code execution vulnerability in the RSFiles! Joomla component through an arbitrary file upload.",
"fork": false,
"created_at": "2026-07-30T20:49:05Z",
"updated_at": "2026-08-10T06:51:40Z",
"pushed_at": "2026-08-10T06:51:36Z",
"updated_at": "2026-08-12T22:31:20Z",
"pushed_at": "2026-08-12T22:31:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-63030.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain",
"fork": false,
"created_at": "2026-07-17T20:18:33Z",
"updated_at": "2026-08-12T03:19:46Z",
"updated_at": "2026-08-13T00:39:45Z",
"pushed_at": "2026-08-11T13:41:27Z",
"stargazers_count": 738,
"watchers_count": 738,
"stargazers_count": 739,
"watchers_count": 739,
"has_discussions": false,
"forks_count": 167,
"allow_forking": true,
@@ -32,7 +32,7 @@
],
"visibility": "public",
"forks": 167,
"watchers": 738,
"watchers": 739,
"score": 0,
"subscribers_count": 3
},
2026/CVE-2026-64564.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "LPE on Deb",
"fork": false,
"created_at": "2026-08-07T09:19:32Z",
"updated_at": "2026-08-12T02:47:15Z",
"updated_at": "2026-08-12T20:46:15Z",
"pushed_at": "2026-08-10T06:14:42Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-68138.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-68138 Linux qdisc rate-table race local privilege escalation PoC",
"fork": false,
"created_at": "2026-08-11T22:22:22Z",
"updated_at": "2026-08-12T15:32:12Z",
"updated_at": "2026-08-12T18:51:59Z",
"pushed_at": "2026-08-12T15:31:34Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
README.md
+38 -13
View File
@@ -1998,6 +1998,13 @@
- [4minx/CVE-2026-14266](https://github.com/4minx/CVE-2026-14266)
- [liyuxuan504-byte/CVE-2026-14266](https://github.com/liyuxuan504-byte/CVE-2026-14266)
### CVE-2026-14282 (2026-07-23)
<code>The GoDAM – Organize WordPress Media Library &amp; File Manager with Unlimited Folders for Images, Videos &amp; more plugin for WordPress is vulnerable to arbitrary file uploads in versions up to, and including, 1.12.2. This is due to insufficient file type validation in the save_video_file() function hooked into WPForms' public wpforms_process_before_filter, which trusts the attacker-supplied multipart Content-Type header, preserves the original filename via wp_unique_filename(), and moves the raw upload with $wp_filesystem-&gt;move() into a web-served directory — bypassing wp_handle_upload()'s MIME/extension allowlist. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
</code>
- [nullwhisper/CVE-2026-14282](https://github.com/nullwhisper/CVE-2026-14282)
### CVE-2026-14361 (2026-07-08)
<code>The consul-template library before version 0.42.1 is vulnerable to a path redirection issue in the writeToFile template helper that may allow template output to be written outside the intended directory or to overwrite an existing file. This vulnerability (CVE-2026-14361) is fixed in consul-template 0.42.1.
@@ -2048,6 +2055,13 @@
- [IamDremig/CVE-2026-14802](https://github.com/IamDremig/CVE-2026-14802)
### CVE-2026-14840 (2026-08-01)
<code>The YOP Poll WordPress plugin before 7.0.6 does not validate the connection's origin IP address and instead trusts client-controlled forwarding headers when enforcing its per-IP vote restriction, allowing unauthenticated attackers to bypass the vote limit and cast unlimited votes on a public poll.
</code>
- [nullwhisper/CVE-2026-14840](https://github.com/nullwhisper/CVE-2026-14840)
### CVE-2026-14856 (2026-07-27)
<code>A stored Cross-Site Scripting (XSS) vulnerability in the file upload functionality of the Media Manager in TastyIgniter v4.3.0, caused by insufficient validation and sanitization of SVG files. An authenticated user with low privileges can upload a malicious SVG file containing JavaScript code. When an administrator views that file, the code executes in the context of their browser. By chaining this vulnerability with a Cross-Site Request Forgery (CSRF) attack, an attacker can extract the administrator’s CSRF token and perform unauthorized actions—such as modifying credentials—thereby gaining full control of the administrative account.
@@ -3118,6 +3132,13 @@
- [RichJJ98/analise-vulnerabilidades-zabbix-notebooklm](https://github.com/RichJJ98/analise-vulnerabilidades-zabbix-notebooklm)
### CVE-2026-24031 (2026-03-27)
<code>Dovecot SQL based authentication can be bypassed when auth_username_chars is cleared by admin. This vulnerability allows bypassing authentication for any user and user enumeration. Do not clear auth_username_chars. If this is not possible, install latest fixed version. No publicly available exploits are known.
</code>
- [aramosf/CVE-2026-24031](https://github.com/aramosf/CVE-2026-24031)
### CVE-2026-24055 (2026-01-22)
<code>Langfuse is an open source large language model engineering platform. In versions 3.146.0 and below, the /api/public/slack/install endpoint initiates Slack OAuth using a projectId provided by the client without authentication or authorization. The projectId is preserved throughout the OAuth flow, and the callback stores installations based on this untrusted metadata. This allows an attacker to bind their Slack workspace to any project and potentially receive changes to prompts stored in Langfuse Prompt Management. An attacker can replace existing Prompt Slack Automation integrations or pre-register a malicious one, though the latter requires an authenticated user to unknowingly configure it despite visible workspace and channel indicators in the UI. This issue has been fixed in version 3.147.0.
@@ -4453,7 +4474,6 @@
- [b0ySie7e/OpenSTAManager-RCE-Exploit-CVE-2026-38751](https://github.com/b0ySie7e/OpenSTAManager-RCE-Exploit-CVE-2026-38751)
- [Why-Shell/CVE-2026-38751](https://github.com/Why-Shell/CVE-2026-38751)
- [Mkps/CVE-2026-38751-OpenSTAManager-Arbitrary-File-Upload-PoC](https://github.com/Mkps/CVE-2026-38751-OpenSTAManager-Arbitrary-File-Upload-PoC)
### CVE-2026-38763 (2026-07-22)
@@ -4633,6 +4653,7 @@
- [Wind010/CVE-2026-39987_PoC](https://github.com/Wind010/CVE-2026-39987_PoC)
- [alreadyClosed/CVE-2026-39987](https://github.com/alreadyClosed/CVE-2026-39987)
- [MADA0L/CVE-2026-39987-Poc](https://github.com/MADA0L/CVE-2026-39987-Poc)
- [matesz44/cve-2026-39987](https://github.com/matesz44/cve-2026-39987)
### CVE-2026-40000 (2026-07-27)
@@ -5724,7 +5745,6 @@
<code>In the Linux kernel, the following vulnerability has been resolved:\n\neventpoll: fix ep_remove struct eventpoll / struct file UAF\n\nep_remove() (via ep_remove_file()) cleared file-&gt;f_ep under\nfile-&gt;f_lock but then kept using @file inside the critical section\n(is_file_epoll(), hlist_del_rcu() through the head, spin_unlock).\nA concurrent __fput() taking the eventpoll_release() fastpath in\nthat window observed the transient NULL, skipped\neventpoll_release_file() and ran to f_op-&gt;release / file_free().\n\nFor the epoll-watches-epoll case, f_op-&gt;release is\nep_eventpoll_release() -&gt; ep_clear_and_put() -&gt; ep_free(), which\nkfree()s the watched struct eventpoll. Its embedded -&gt;refs\nhlist_head is exactly where epi-&gt;fllink.pprev points, so the\nsubsequent hlist_del_rcu()'s &quot;*pprev = next&quot; scribbles into freed\nkmalloc-192 memory.\n\nIn addition, struct file is SLAB_TYPESAFE_BY_RCU, so the slot\nbacking @file could be recycled by alloc_empty_file() --\nreinitializing f_lock and f_ep -- while ep_remove() is still\nnominally inside that lock. The upshot is an attacker-controllable\nkmem_cache_free() against the wrong slab cache.\n\nPin @file via epi_fget() at the top of ep_remove() and gate the\ncritical section on the pin succeeding. With the pin held @file\ncannot reach refcount zero, which holds __fput() off and\ntransitively keeps the watched struct eventpoll alive across the\nhlist_del_rcu() and the f_lock use, closing both UAFs.\n\nIf the pin fails @file has already reached refcount zero and its\n__fput() is in flight. Because we bailed before clearing f_ep,\nthat path takes the eventpoll_release() slow path into\neventpoll_release_file() and blocks on ep-&gt;mtx until the waiter\nside's ep_clear_and_put() drops it. The bailed epi's share of\nep-&gt;refcount stays intact, so the trailing ep_refcount_dec_and_test()\nin ep_clear_and_put() cannot free the eventpoll out from under\neventpoll_release_file(); the orphaned epi is then cleaned up\nthere.\n\nA successful pin also proves we are not racing\neventpoll_release_file() on this epi, so drop the now-redundant\nre-check of epi-&gt;dying under f_lock. The cheap lockless\nREAD_ONCE(epi-&gt;dying) fast-path bailout stays.
</code>
- [0xBlackash/CVE-2026-46242](https://github.com/0xBlackash/CVE-2026-46242)
- [SaithFranklinB/ScannerBadEpoll](https://github.com/SaithFranklinB/ScannerBadEpoll)
- [Baba01hacker666/CVE-2026-46242](https://github.com/Baba01hacker666/CVE-2026-46242)
@@ -6872,13 +6892,6 @@
- [xj2268-TA/KVM-Januscape](https://github.com/xj2268-TA/KVM-Januscape)
- [ndouglas-cloudsmith/CVE-2026-53359](https://github.com/ndouglas-cloudsmith/CVE-2026-53359)
### CVE-2026-53360 (2026-07-04)
<code>In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use\n\nAs per the GHCB spec, when using GHCB v2+ require the software scratch area\nto reside in the GHCB's shared buffer. Note, things like Page State Change\n(PSC) requests _rely_ on this behavior, as the guest can't provide a length\nwhen making the request, i.e. the size of the guest payload is bounded by\nthe size of the shared buffer.\n\nFailure to force usage of the GHCB, and a slew of other flaws, lets a\nmalicious SNP guest corrupt host kernel heap memory, and leak host heap\nlayout information.\n\nsetup_vmgexit_scratch() allocates a buffer via kvzalloc(exit_info_2),\nwhere exit_info_2 is guest-controlled. With exit_info_2=24, this yields\na 24-byte allocation in kmalloc-cg-32 (32-byte slab objects). The buffer\nholds an 8-byte psc_hdr followed by 8-byte psc_entry structs, so only\nentries[0] and entries[1] are in-bounds.\n\nsnp_begin_psc() validates end_entry against VMGEXIT_PSC_MAX_COUNT (253)\nbut NOT against the actual buffer size:\n\n idx_end = hdr-&gt;end_entry;\n\n if (idx_end &gt;= VMGEXIT_PSC_MAX_COUNT) { // checks 253, not buffer\n snp_complete_psc(svm, ...);\n return 1;\n }\n\n for (idx = idx_start; idx &lt;= idx_end; idx++) {\n entry_start = entries[idx]; // OOB when idx &gt;= 2\n\nThe guest sets end_entry=10+, causing the host to iterate entries[2+]\nwhich are OOB into adjacent slab objects. For each OOB entry:\n\n - The host reads 8 bytes (OOB READ / info leak oracle)\n - If the data passes PSC validation, __snp_complete_one_psc() writes\n cur_page = 1 or 512 into the entry (OOB WRITE, sev.c:3806)\n - If validation fails, the error response reveals whether adjacent\n memory is zero vs non-zero (information disclosure to guest)\n\nThe guest controls allocation size (exit_info_2), entry range\n(cur_entry/end_entry), and can fire unlimited VMGEXITs to repeatedly\nhit different slab positions.\n\nBy exploiting the variety of bugs, a malicious SEV-SNP guest can:\n - OOB read adjacent kmalloc-cg-32 objects (heap layout disclosure)\n - OOB write cur_page bits into adjacent objects (heap corruption)\n - Trigger use-after-free conditions across VMGEXITs\n\nE.g. with KASAN enabled, a single insmod of the PoC guest module\nproduces 73 KASAN reports:\n\n BUG: KASAN: slab-out-of-bounds in snp_begin_psc+0x126/0x890\n Read of size 8 at addr ffff888219ffb5e0 by task qemu-system-x86/2199\n\n BUG: KASAN: slab-out-of-bounds in snp_begin_psc+0x468/0x890\n Write of size 8 at addr ffff888351566648 by task qemu-system-x86/2199\n\n The buggy address belongs to the object at ffff888XXXXXXXXX\n which belongs to the cache kmalloc-cg-32 of size 32\n The buggy address is located N bytes to the right of\n allocated 32-byte region [ffff888XXXXXXXXX, ffff888XXXXXXXXX)\n\n Breakdown:\n 62 slab-out-of-bounds (reads + writes past allocation)\n 7 slab-use-after-free\n 4 use-after-free\n\nAll credit to Stan for the wonderful description and reproducer!\n\n[sean: write changelog]
</code>
- [0xCyberstan/CVE-2026-53360-POC](https://github.com/0xCyberstan/CVE-2026-53360-POC)
### CVE-2026-53361 (2026-07-04)
<code>In the Linux kernel, the following vulnerability has been resolved:\n\naf_unix: Set gc_in_progress to true in unix_gc().\n\nIgor Ushakov reported that unix_gc() could run with gc_in_progress\nbeing false if the work is scheduled while running:\n\n Thread 1 Thread 2 Thread 3\n -------- -------- --------\n unix_schedule_gc() unix_schedule_gc()\n `- if (!gc_in_progress) `- if (!gc_in_progress)\n |- gc_in_progress = true |\n `- queue_work() |\n unix_gc() &lt;----------------/ |\n | |- gc_in_progress = true\n ... `- queue_work()\n | |\n `- gc_in_progress = false |\n |\n unix_gc() &lt;---------------------------------------------'\n |\n ... /* gc_in_progress == false */\n |\n `- gc_in_progress = false\n\nunix_peek_fpl() relies on gc_in_progress not to confuse GC\nby MSG_PEEK.\n\nLet's set gc_in_progress to true in unix_gc().
@@ -7112,6 +7125,13 @@
- [BiiTts/CVE-2026-54917-SeaweedFS-Cross-Bucket-Traversal](https://github.com/BiiTts/CVE-2026-54917-SeaweedFS-Cross-Bucket-Traversal)
### CVE-2026-54984 (2026-08-11)
<code>Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally.
</code>
- [kagancapar/CVE-2026-54984](https://github.com/kagancapar/CVE-2026-54984)
### CVE-2026-54992 (2026-07-14)
<code>Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code locally.
@@ -7234,7 +7254,6 @@
<code>Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension &lt; 3.6.0 - The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.
</code>
- [sagsooz/PageBuilderCK-CVE-2026-56290-Exploit](https://github.com/sagsooz/PageBuilderCK-CVE-2026-56290-Exploit)
- [Jenderal92/CVE-2026-56290](https://github.com/Jenderal92/CVE-2026-56290)
- [ChiefYoru/CVE-2026-56290_PoC](https://github.com/ChiefYoru/CVE-2026-56290_PoC)
@@ -17196,6 +17215,7 @@
- [Phucc29/CVE-2025-55182](https://github.com/Phucc29/CVE-2025-55182)
- [CerberusMrXi/CVE-2025-55182-Advanced-React-Server-Components-RCE-Exploit](https://github.com/CerberusMrXi/CVE-2025-55182-Advanced-React-Server-Components-RCE-Exploit)
- [dotnetguard/CVE-2025-55182-Exploit](https://github.com/dotnetguard/CVE-2025-55182-Exploit)
- [aisha-jimoh/cve-2025-55182-react2shell-analysis](https://github.com/aisha-jimoh/cve-2025-55182-react2shell-analysis)
### CVE-2025-55183 (2025-12-11)
@@ -18869,7 +18889,6 @@
</code>
- [amaansiddd787/CVE-2025-65354](https://github.com/amaansiddd787/CVE-2025-65354)
- [EarthAngel666/CVE-2025-65354](https://github.com/EarthAngel666/CVE-2025-65354)
### CVE-2025-65427 (2025-12-16)
@@ -48706,7 +48725,6 @@
- [CYB3RK1D/CVE-2021-4034-POC](https://github.com/CYB3RK1D/CVE-2021-4034-POC)
- [rvzsec/CVE-2021-4034](https://github.com/rvzsec/CVE-2021-4034)
- [antoinenguyen-09/CVE-2021-4034](https://github.com/antoinenguyen-09/CVE-2021-4034)
- [wudicainiao/cve-2021-4034](https://github.com/wudicainiao/cve-2021-4034)
- [TanmoyG1800/CVE-2021-4034](https://github.com/TanmoyG1800/CVE-2021-4034)
- [CronoX1/CVE-2021-4034](https://github.com/CronoX1/CVE-2021-4034)
- [supportingmx/cve-2021-4034](https://github.com/supportingmx/cve-2021-4034)
@@ -53019,6 +53037,7 @@
- [waseeld/CVE-2021-42574](https://github.com/waseeld/CVE-2021-42574)
- [tin-z/solidity_CVE-2021-42574-POC](https://github.com/tin-z/solidity_CVE-2021-42574-POC)
- [Moshe-ship/bidi-guard](https://github.com/Moshe-ship/bidi-guard)
- [LuisCastellanos-dev/cobol-shield](https://github.com/LuisCastellanos-dev/cobol-shield)
### CVE-2021-42662 (2021-11-05)
@@ -76040,6 +76059,13 @@
- [Alexeyan/CVE-2009-4137](https://github.com/Alexeyan/CVE-2009-4137)
### CVE-2009-4496 (2010-01-13)
<code>Boa 0.94.14rc21 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator.
</code>
- [enriquenegri-cyberlaw/boa-cve-2009-4496-analysis](https://github.com/enriquenegri-cyberlaw/boa-cve-2009-4496-analysis)
### CVE-2009-4623 (2010-01-18)
<code>Multiple PHP remote file inclusion vulnerabilities in Advanced Comment System 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the ACS_path parameter to (1) index.php and (2) admin.php in advanced_comment_system/. NOTE: this might only be a vulnerability when the administrator has not followed installation instructions in install.php. NOTE: this might be the same as CVE-2020-35598.
@@ -76297,7 +76323,6 @@
- [Alien0ne/CVE-2007-2447](https://github.com/Alien0ne/CVE-2007-2447)
- [3t4n/samba-3.0.24-CVE-2007-2447-vunerable-](https://github.com/3t4n/samba-3.0.24-CVE-2007-2447-vunerable-)
- [xbufu/CVE-2007-2447](https://github.com/xbufu/CVE-2007-2447)
- [s4msec/CVE-2007-2447](https://github.com/s4msec/CVE-2007-2447)
- [Nosferatuvjr/Samba-Usermap-exploit](https://github.com/Nosferatuvjr/Samba-Usermap-exploit)
- [testaross4/CVE-2007-2447](https://github.com/testaross4/CVE-2007-2447)
- [b33m0x00/CVE-2007-2447](https://github.com/b33m0x00/CVE-2007-2447)