nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/08/02 12:49:23

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-08-02 21:49:23 +09:00
1 parent 78706b5bae
commit 1d6e950db7
49 files changed
+547 -239
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2011/CVE-2011-1571.json
+4 -4
View File
@@ -2,15 +2,15 @@
{
"id": 191711277,
"name": "CVE-2011-1571",
"full_name": "noobpk\/CVE-2011-1571",
"full_name": "yazgx97\/CVE-2011-1571",
"owner": {
"login": "noobpk",
"login": "yazgx97",
"id": 31820707,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/31820707?v=4",
"html_url": "https:\/\/github.com\/noobpk",
"html_url": "https:\/\/github.com\/yazgx97",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/noobpk\/CVE-2011-1571",
"html_url": "https:\/\/github.com\/yazgx97\/CVE-2011-1571",
"description": "Liferay XSL - Command Execution (Metasploit)",
"fork": false,
"created_at": "2019-06-13T07:16:38Z",
2017/CVE-2017-0144.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 339,
"watchers_count": 339,
"has_discussions": false,
"forks_count": 101,
"forks_count": 100,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 101,
"forks": 100,
"watchers": 339,
"score": 0,
"subscribers_count": 19
2018/CVE-2018-16763.json
+4 -4
View File
@@ -358,10 +358,10 @@
"description": "Exploit to trigger RCE for CVE-2018-16763 on FuelCMS <= 1.4.1 and interactive shell. ",
"fork": false,
"created_at": "2022-05-31T15:31:37Z",
"updated_at": "2026-07-30T21:23:00Z",
"updated_at": "2026-08-02T08:00:39Z",
"pushed_at": "2025-01-31T09:32:53Z",
"stargazers_count": 25,
"watchers_count": 25,
"stargazers_count": 26,
"watchers_count": 26,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -377,7 +377,7 @@
],
"visibility": "public",
"forks": 3,
"watchers": 25,
"watchers": 26,
"score": 0,
"subscribers_count": 1
},
2018/CVE-2018-19320.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "Unsigned driver loader using CVE-2018-19320",
"fork": false,
"created_at": "2022-11-12T05:48:13Z",
"updated_at": "2026-07-31T23:05:27Z",
"updated_at": "2026-08-02T08:18:11Z",
"pushed_at": "2026-03-16T09:42:55Z",
"stargazers_count": 366,
"watchers_count": 366,
"stargazers_count": 367,
"watchers_count": 367,
"has_discussions": false,
"forks_count": 84,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 84,
"watchers": 366,
"watchers": 367,
"score": 0,
"subscribers_count": 9
}
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-08-02T03:49:46Z",
"pushed_at": "2026-08-02T03:49:11Z",
"updated_at": "2026-08-02T11:38:33Z",
"pushed_at": "2026-08-02T11:38:21Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2020/CVE-2020-1472.json
+2 -2
View File
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-08-02T03:46:01Z",
"pushed_at": "2026-08-02T03:45:28Z",
"updated_at": "2026-08-02T11:35:31Z",
"pushed_at": "2026-08-02T11:35:19Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-08-02T04:38:04Z",
"pushed_at": "2026-08-02T04:37:59Z",
"updated_at": "2026-08-02T12:10:25Z",
"pushed_at": "2026-08-02T12:10:16Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-36260.json
+4 -4
View File
@@ -446,10 +446,10 @@
"description": "HIKRAVEN - Advanced Hikvision Security Assessment Platform for professional penetration testing. Detects 12+ CVEs including CVE-2021-36260 (CRITICAL), tests default credentials, performs network discovery, and generates professional security reports. For authorized security testing only! 🛡️🔒",
"fork": false,
"created_at": "2026-07-17T23:29:55Z",
"updated_at": "2026-07-30T07:27:54Z",
"updated_at": "2026-08-02T09:31:44Z",
"pushed_at": "2026-07-30T07:24:06Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -481,7 +481,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
}
2021/CVE-2021-40444.json
+4 -4
View File
@@ -245,10 +245,10 @@
"description": "CVE-2021-40444 PoC",
"fork": false,
"created_at": "2021-09-10T16:55:53Z",
"updated_at": "2026-07-30T17:53:09Z",
"updated_at": "2026-08-02T09:15:45Z",
"pushed_at": "2021-12-25T18:31:02Z",
"stargazers_count": 1779,
"watchers_count": 1779,
"stargazers_count": 1780,
"watchers_count": 1780,
"has_discussions": false,
"forks_count": 475,
"allow_forking": true,
@@ -259,7 +259,7 @@
"topics": [],
"visibility": "public",
"forks": 475,
"watchers": 1779,
"watchers": 1780,
"score": 0,
"subscribers_count": 27
},
2021/CVE-2021-44228.json
+33
View File
@@ -14315,5 +14315,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1320035802,
"name": "log4shell-research",
"full_name": "vaishnavikkotian\/log4shell-research",
"owner": {
"login": "vaishnavikkotian",
"id": 269916522,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/269916522?v=4",
"html_url": "https:\/\/github.com\/vaishnavikkotian",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/vaishnavikkotian\/log4shell-research",
"description": "A research project on the Log4Shell (CVE-2021-44228) vulnerability.",
"fork": false,
"created_at": "2026-08-02T09:59:51Z",
"updated_at": "2026-08-02T10:19:58Z",
"pushed_at": "2026-08-02T10:19:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2021/CVE-2021-46422.json
-33
View File
@@ -1,37 +1,4 @@
[
{
"id": 495909507,
"name": "CVE-2021-46422",
"full_name": "nobodyatall648\/CVE-2021-46422",
"owner": {
"login": "nobodyatall648",
"id": 35725871,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/35725871?v=4",
"html_url": "https:\/\/github.com\/nobodyatall648",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/nobodyatall648\/CVE-2021-46422",
"description": "SDT-CW3B1 1.1.0 - OS Command Injection",
"fork": false,
"created_at": "2022-05-24T16:45:41Z",
"updated_at": "2022-05-25T02:23:05Z",
"pushed_at": "2022-05-24T17:27:55Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 1
},
{
"id": 513717270,
"name": "CVE-2021-46422_PoC",
2022/CVE-2022-22077.json
+1 -1
View File
@@ -15,7 +15,7 @@
"fork": false,
"created_at": "2025-09-08T21:12:19Z",
"updated_at": "2026-06-19T21:56:25Z",
"pushed_at": "2026-08-01T12:04:10Z",
"pushed_at": "2026-08-02T07:45:06Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
2022/CVE-2022-22947.json
+4 -4
View File
@@ -1543,10 +1543,10 @@
"description": "Nacos下Spring-Cloud-Gateway CVE-2022-22947利用环境",
"fork": false,
"created_at": "2022-06-25T05:02:06Z",
"updated_at": "2026-03-13T07:32:21Z",
"updated_at": "2026-08-02T10:55:30Z",
"pushed_at": "2022-06-25T13:43:53Z",
"stargazers_count": 16,
"watchers_count": 16,
"stargazers_count": 17,
"watchers_count": 17,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -1557,7 +1557,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 16,
"watchers": 17,
"score": 0,
"subscribers_count": 1
},
2022/CVE-2022-29072.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 673,
"watchers_count": 673,
"has_discussions": false,
"forks_count": 106,
"forks_count": 105,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 106,
"forks": 105,
"watchers": 673,
"score": 0,
"subscribers_count": 21
2023/CVE-2023-33107.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "full exploit code",
"fork": false,
"created_at": "2026-02-05T09:34:52Z",
"updated_at": "2026-08-02T05:46:45Z",
"updated_at": "2026-08-02T11:04:25Z",
"pushed_at": "2026-03-17T04:38:08Z",
"stargazers_count": 8,
"watchers_count": 8,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 8,
"watchers": 7,
"score": 0,
"subscribers_count": 0
},
2024/CVE-2024-27198.json
+2 -2
View File
@@ -678,8 +678,8 @@
"description": "My write-ups from CyberDefenders' Blue Team labs, solved using Wireshark. Covers TeamCity RCE (CVE-2024-27198), XSS session hijacking, and LLMNR\/NBT-NS credential poisoning — each with step-by-step packet analysis, screenshots, and a full Wireshark filter\/command reference. Personal SOC Analyst Tier 1 learning log.",
"fork": false,
"created_at": "2026-08-01T09:25:34Z",
"updated_at": "2026-08-02T04:47:32Z",
"pushed_at": "2026-08-02T04:47:27Z",
"updated_at": "2026-08-02T10:26:54Z",
"pushed_at": "2026-08-02T10:26:34Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-30088.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "该漏洞存在于 NtQueryInformationToken 函数中，特别是在处理AuthzBasepCopyoutInternalSecurityAttributes 函数时，该漏洞源于内核在操作对象时对锁定机制的不当管理，这一失误可能导致恶意实体意外提升权限。",
"fork": false,
"created_at": "2024-07-05T16:02:56Z",
"updated_at": "2026-07-17T15:00:11Z",
"updated_at": "2026-08-02T10:27:46Z",
"pushed_at": "2024-07-05T16:06:16Z",
"stargazers_count": 44,
"watchers_count": 44,
"stargazers_count": 45,
"watchers_count": 45,
"has_discussions": false,
"forks_count": 19,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 19,
"watchers": 44,
"watchers": 45,
"score": 0,
"subscribers_count": 2
},
2024/CVE-2024-6387.json
+2 -2
View File
@@ -3042,10 +3042,10 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/OHHDamnBRO\/Noregressh",
"description": "CVE-2024-6387 and more Checker and Exploiter - Reverse\/Bind-Shell Support.",
"description": "CVE-2024-6387 and more Checker and Exploiter - Reverse\/Bind-Shell Support. education only ",
"fork": false,
"created_at": "2025-09-26T08:46:42Z",
"updated_at": "2025-09-29T09:20:07Z",
"updated_at": "2026-08-02T07:14:08Z",
"pushed_at": "2025-09-24T17:57:47Z",
"stargazers_count": 2,
"watchers_count": 2,
2025/CVE-2025-21479.json
+4 -4
View File
@@ -113,12 +113,12 @@
"description": "This is an SELinux permissive version of the Cheese exploit also known as CVE-2025-21479 which affected the adreno kgsl on many devices including Samsung snapdragon devices",
"fork": false,
"created_at": "2026-07-28T06:41:38Z",
"updated_at": "2026-07-30T06:36:20Z",
"pushed_at": "2026-07-28T09:45:08Z",
"updated_at": "2026-08-02T06:48:36Z",
"pushed_at": "2026-08-02T06:48:33Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 2,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -126,7 +126,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"forks": 1,
"watchers": 5,
"score": 0,
"subscribers_count": 0
2025/CVE-2025-24204.json
+6 -6
View File
@@ -47,12 +47,12 @@
"description": "FairPlay decryptor (dump iPA) for iOS Application that running on macOS with SIP-enabled, using CVE-2025-24204. Support macOS 15.0-15.2",
"fork": false,
"created_at": "2025-09-04T17:49:51Z",
"updated_at": "2026-08-01T17:25:58Z",
"updated_at": "2026-08-02T10:29:16Z",
"pushed_at": "2025-09-04T17:59:49Z",
"stargazers_count": 147,
"watchers_count": 147,
"stargazers_count": 148,
"watchers_count": 148,
"has_discussions": false,
"forks_count": 21,
"forks_count": 22,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,8 +60,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 21,
"watchers": 147,
"forks": 22,
"watchers": 148,
"score": 0,
"subscribers_count": 2
}
2025/CVE-2025-33073.json
+8 -8
View File
@@ -14,10 +14,10 @@
"description": "PoC Exploit for the NTLM reflection SMB flaw.",
"fork": false,
"created_at": "2025-06-13T12:15:14Z",
"updated_at": "2026-07-29T08:00:32Z",
"updated_at": "2026-08-02T11:00:41Z",
"pushed_at": "2026-02-18T09:15:40Z",
"stargazers_count": 712,
"watchers_count": 712,
"stargazers_count": 713,
"watchers_count": 713,
"has_discussions": false,
"forks_count": 136,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 136,
"watchers": 712,
"watchers": 713,
"score": 0,
"subscribers_count": 5
},
@@ -133,8 +133,8 @@
},
{
"id": 1096398873,
"name": "come-to-telegram-rickluminari1--CVE-2025-33073",
"full_name": "uziii2208\/come-to-telegram-rickluminari1--CVE-2025-33073",
"name": "CVE-2025-33073",
"full_name": "uziii2208\/CVE-2025-33073",
"owner": {
"login": "uziii2208",
"id": 112312970,
@@ -142,11 +142,11 @@
"html_url": "https:\/\/github.com\/uziii2208",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/uziii2208\/come-to-telegram-rickluminari1--CVE-2025-33073",
"html_url": "https:\/\/github.com\/uziii2208\/CVE-2025-33073",
"description": "Universal exploitation tool for CVE-2025-33073 targeting Windows Domain Controllers with DNSAdmins privileges and WinRM enabled.",
"fork": false,
"created_at": "2025-11-14T11:17:00Z",
"updated_at": "2026-08-01T17:42:02Z",
"updated_at": "2026-08-02T07:29:54Z",
"pushed_at": "2025-11-14T11:50:13Z",
"stargazers_count": 67,
"watchers_count": 67,
2025/CVE-2025-52915.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-08-01T16:05:15Z",
"updated_at": "2026-08-02T10:29:37Z",
"pushed_at": "2026-07-12T09:40:22Z",
"stargazers_count": 877,
"watchers_count": 877,
"stargazers_count": 879,
"watchers_count": 879,
"has_discussions": false,
"forks_count": 130,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 130,
"watchers": 877,
"watchers": 879,
"score": 0,
"subscribers_count": 20
}
2025/CVE-2025-54136.json
+1 -1
View File
@@ -48,7 +48,7 @@
"fork": false,
"created_at": "2026-07-08T09:19:33Z",
"updated_at": "2026-07-08T15:41:00Z",
"pushed_at": "2026-07-29T09:14:21Z",
"pushed_at": "2026-08-02T08:13:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-55182.json
+4 -4
View File
@@ -1102,10 +1102,10 @@
"description": "Explanation and full RCE PoC for CVE-2025-55182",
"fork": false,
"created_at": "2025-12-04T11:49:55Z",
"updated_at": "2026-08-01T11:07:02Z",
"updated_at": "2026-08-02T07:43:33Z",
"pushed_at": "2025-12-08T13:51:04Z",
"stargazers_count": 1427,
"watchers_count": 1427,
"stargazers_count": 1428,
"watchers_count": 1428,
"has_discussions": false,
"forks_count": 198,
"allow_forking": true,
@@ -1116,7 +1116,7 @@
"topics": [],
"visibility": "public",
"forks": 198,
"watchers": 1427,
"watchers": 1428,
"score": 0,
"subscribers_count": 10
},
2025/CVE-2025-68613.json
+2 -2
View File
@@ -1145,8 +1145,8 @@
"description": null,
"fork": false,
"created_at": "2026-07-31T14:12:47Z",
"updated_at": "2026-07-31T14:36:46Z",
"pushed_at": "2026-07-31T14:36:36Z",
"updated_at": "2026-08-02T09:22:39Z",
"pushed_at": "2026-08-02T09:22:19Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-10818.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "WPForms Pro <= 1.10.1.1 - Unauthenticated Arbitrary File Write via Chunked Upload Init\/Finalize Ordering",
"fork": false,
"created_at": "2026-07-26T09:29:00Z",
"updated_at": "2026-08-01T06:36:59Z",
"updated_at": "2026-08-02T09:10:34Z",
"pushed_at": "2026-07-26T09:31:04Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-16723.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Docker labs + defensive scanner for fastjson remote-class-load RCE. fastjson 1.2.66-1.2.83: @JSONType resource probe (CVE-2026-16723). fastjson2 2.0.57: attacker @type reaches loadClass with autoType DISABLED via polymorphic types (@JSONType(seeAlso) \/ Jackson @JsonSubTypes). Marker-only payloads; safeMode + JDK17 controls.",
"fork": false,
"created_at": "2026-07-20T17:00:03Z",
"updated_at": "2026-08-01T15:35:34Z",
"updated_at": "2026-08-02T10:00:06Z",
"pushed_at": "2026-07-27T11:16:07Z",
"stargazers_count": 194,
"watchers_count": 194,
"stargazers_count": 195,
"watchers_count": 195,
"has_discussions": false,
"forks_count": 91,
"allow_forking": true,
@@ -44,7 +44,7 @@
],
"visibility": "public",
"forks": 91,
"watchers": 194,
"watchers": 195,
"score": 0,
"subscribers_count": 3
},
2026/CVE-2026-21858.json
+2 -2
View File
@@ -155,8 +155,8 @@
"description": null,
"fork": false,
"created_at": "2026-07-31T14:12:47Z",
"updated_at": "2026-07-31T14:36:46Z",
"pushed_at": "2026-07-31T14:36:36Z",
"updated_at": "2026-08-02T09:22:39Z",
"pushed_at": "2026-08-02T09:22:19Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-3609.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-08-01T16:05:15Z",
"updated_at": "2026-08-02T10:29:37Z",
"pushed_at": "2026-07-12T09:40:22Z",
"stargazers_count": 877,
"watchers_count": 877,
"stargazers_count": 879,
"watchers_count": 879,
"has_discussions": false,
"forks_count": 130,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 130,
"watchers": 877,
"watchers": 879,
"score": 0,
"subscribers_count": 20
}
2026/CVE-2026-39987.json
+33
View File
@@ -97,5 +97,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1320039561,
"name": "CVE-2026-39987",
"full_name": "gbuyssens\/CVE-2026-39987",
"owner": {
"login": "gbuyssens",
"id": 306151405,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/306151405?v=4",
"html_url": "https:\/\/github.com\/gbuyssens",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/gbuyssens\/CVE-2026-39987",
"description": "Marimo exploit prior to 0.23.0. Pre-Auth RCE vulnerability via websocket endpoint : \/terminal\/ws.",
"fork": false,
"created_at": "2026-08-02T10:05:44Z",
"updated_at": "2026-08-02T11:01:27Z",
"pushed_at": "2026-08-02T11:01:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-41651.json
+37 -4
View File
@@ -47,10 +47,10 @@
"description": "Exploit for CVE-2026-41651 - PackageKit TOCTOU Local Privilege Escalation (Pack2TheRoot)",
"fork": false,
"created_at": "2026-05-20T07:26:05Z",
"updated_at": "2026-05-20T07:48:18Z",
"updated_at": "2026-08-02T12:12:27Z",
"pushed_at": "2026-05-20T07:48:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -68,7 +68,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
@@ -104,5 +104,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1320089182,
"name": "CVE-2026-41651",
"full_name": "gbuyssens\/CVE-2026-41651",
"owner": {
"login": "gbuyssens",
"id": 306151405,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/306151405?v=4",
"html_url": "https:\/\/github.com\/gbuyssens",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/gbuyssens\/CVE-2026-41651",
"description": "Local privilege escalation via TOCTOU race condition in PackageKit's.",
"fork": false,
"created_at": "2026-08-02T10:57:10Z",
"updated_at": "2026-08-02T11:04:58Z",
"pushed_at": "2026-08-02T11:02:36Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-42533.json
+2 -2
View File
@@ -271,7 +271,7 @@
"stargazers_count": 31,
"watchers_count": 31,
"has_discussions": false,
"forks_count": 7,
"forks_count": 8,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -279,7 +279,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 7,
"forks": 8,
"watchers": 31,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-42978.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "CVE-2026-42978 — Use-After-Free race condition in Windows Push Notifications (WpnService). Patch diff, root cause analysis, TOCTOU lab, Sysmon\/ETW detection rules.",
"fork": false,
"created_at": "2026-06-23T21:05:55Z",
"updated_at": "2026-08-01T07:58:55Z",
"updated_at": "2026-08-02T07:11:06Z",
"pushed_at": "2026-06-23T21:08:36Z",
"stargazers_count": 27,
"watchers_count": 27,
2026/CVE-2026-43499.json
+98 -65
View File
@@ -14,12 +14,12 @@
"description": "CVE-2026-43499 PoC",
"fork": false,
"created_at": "2026-06-27T04:09:11Z",
"updated_at": "2026-08-01T05:38:31Z",
"updated_at": "2026-08-02T10:52:14Z",
"pushed_at": "2026-06-27T05:04:04Z",
"stargazers_count": 136,
"watchers_count": 136,
"stargazers_count": 137,
"watchers_count": 137,
"has_discussions": false,
"forks_count": 35,
"forks_count": 36,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 35,
"watchers": 136,
"forks": 36,
"watchers": 137,
"score": 0,
"subscribers_count": 1
},
@@ -146,10 +146,10 @@
"description": "Tracking GhostLock (CVE-2026-43499), the rtmutex\/futex stack use-after-free",
"fork": false,
"created_at": "2026-07-09T07:05:35Z",
"updated_at": "2026-08-02T06:13:03Z",
"updated_at": "2026-08-02T12:00:48Z",
"pushed_at": "2026-08-02T06:12:41Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -164,7 +164,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
@@ -183,10 +183,10 @@
"description": "OPPO Find N2 GhostLock (CVE-2026-43499) exploit adaptation",
"fork": false,
"created_at": "2026-07-09T22:46:15Z",
"updated_at": "2026-08-01T06:42:11Z",
"updated_at": "2026-08-02T12:00:33Z",
"pushed_at": "2026-07-23T04:58:39Z",
"stargazers_count": 57,
"watchers_count": 57,
"stargazers_count": 58,
"watchers_count": 58,
"has_discussions": false,
"forks_count": 24,
"allow_forking": true,
@@ -197,7 +197,7 @@
"topics": [],
"visibility": "public",
"forks": 24,
"watchers": 57,
"watchers": 58,
"score": 0,
"subscribers_count": 0
},
@@ -282,10 +282,10 @@
"description": "CVE-2026-43499 Implementation for 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k",
"fork": false,
"created_at": "2026-07-12T10:15:03Z",
"updated_at": "2026-08-02T02:06:43Z",
"updated_at": "2026-08-02T07:43:35Z",
"pushed_at": "2026-07-15T22:46:59Z",
"stargazers_count": 207,
"watchers_count": 207,
"stargazers_count": 209,
"watchers_count": 209,
"has_discussions": false,
"forks_count": 80,
"allow_forking": true,
@@ -296,7 +296,7 @@
"topics": [],
"visibility": "public",
"forks": 80,
"watchers": 207,
"watchers": 209,
"score": 0,
"subscribers_count": 1
},
@@ -348,12 +348,12 @@
"description": "GhostLock (CVE-2026-43499) kernel exploit for OnePlus devices with locked bootloader",
"fork": false,
"created_at": "2026-07-12T16:05:24Z",
"updated_at": "2026-08-02T05:42:21Z",
"updated_at": "2026-08-02T12:11:10Z",
"pushed_at": "2026-07-28T20:20:52Z",
"stargazers_count": 140,
"watchers_count": 140,
"stargazers_count": 147,
"watchers_count": 147,
"has_discussions": false,
"forks_count": 36,
"forks_count": 38,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -368,8 +368,8 @@
"root"
],
"visibility": "public",
"forks": 36,
"watchers": 140,
"forks": 38,
"watchers": 147,
"score": 0,
"subscribers_count": 4
},
@@ -487,10 +487,10 @@
"description": "OPPO Find X6 Pro GhostLock (CVE-2026-43499) exploit adaptation",
"fork": false,
"created_at": "2026-07-13T07:35:54Z",
"updated_at": "2026-07-24T12:20:52Z",
"updated_at": "2026-08-02T12:02:31Z",
"pushed_at": "2026-07-13T07:36:39Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -501,7 +501,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
@@ -586,12 +586,12 @@
"description": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.",
"fork": false,
"created_at": "2026-07-14T14:21:27Z",
"updated_at": "2026-08-02T02:07:31Z",
"updated_at": "2026-08-02T08:01:30Z",
"pushed_at": "2026-07-30T11:28:07Z",
"stargazers_count": 21,
"watchers_count": 21,
"stargazers_count": 23,
"watchers_count": 23,
"has_discussions": false,
"forks_count": 7,
"forks_count": 8,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -599,8 +599,8 @@
"pull_request_creation_policy": "collaborators_only",
"topics": [],
"visibility": "public",
"forks": 7,
"watchers": 21,
"forks": 8,
"watchers": 23,
"score": 0,
"subscribers_count": 0
},
@@ -718,10 +718,10 @@
"description": "Xiaomi K70e (duchamp) one-click root via CVE-2026-43499 (IonStack) + KernelSU integration",
"fork": false,
"created_at": "2026-07-15T03:59:56Z",
"updated_at": "2026-08-01T14:34:03Z",
"updated_at": "2026-08-02T12:01:37Z",
"pushed_at": "2026-07-31T03:13:27Z",
"stargazers_count": 35,
"watchers_count": 35,
"stargazers_count": 38,
"watchers_count": 38,
"has_discussions": true,
"forks_count": 12,
"allow_forking": true,
@@ -732,7 +732,7 @@
"topics": [],
"visibility": "public",
"forks": 12,
"watchers": 35,
"watchers": 38,
"score": 0,
"subscribers_count": 0
},
@@ -1081,12 +1081,12 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
"updated_at": "2026-08-02T06:11:15Z",
"pushed_at": "2026-08-01T10:54:09Z",
"stargazers_count": 407,
"watchers_count": 407,
"updated_at": "2026-08-02T12:40:23Z",
"pushed_at": "2026-08-02T12:32:24Z",
"stargazers_count": 435,
"watchers_count": 435,
"has_discussions": false,
"forks_count": 61,
"forks_count": 62,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1094,8 +1094,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 61,
"watchers": 407,
"forks": 62,
"watchers": 435,
"score": 0,
"subscribers_count": 6
},
@@ -1147,10 +1147,10 @@
"description": "（CVE-2026-43499）内核漏洞利用程序，适用于未解锁 Bootloader 的一加设备。",
"fork": false,
"created_at": "2026-07-18T06:24:34Z",
"updated_at": "2026-08-02T02:47:22Z",
"updated_at": "2026-08-02T10:17:00Z",
"pushed_at": "2026-07-19T08:28:49Z",
"stargazers_count": 33,
"watchers_count": 33,
"stargazers_count": 34,
"watchers_count": 34,
"has_discussions": false,
"forks_count": 11,
"allow_forking": true,
@@ -1161,7 +1161,7 @@
"topics": [],
"visibility": "public",
"forks": 11,
"watchers": 33,
"watchers": 34,
"score": 0,
"subscribers_count": 0
},
@@ -1496,10 +1496,10 @@
"description": "（CVE-2026-43499）内核漏洞利用程序，适用于未解锁 Bootloader 的一加15T.",
"fork": false,
"created_at": "2026-07-25T03:02:29Z",
"updated_at": "2026-08-02T01:39:34Z",
"updated_at": "2026-08-02T12:02:31Z",
"pushed_at": "2026-07-25T04:13:46Z",
"stargazers_count": 8,
"watchers_count": 8,
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -1510,7 +1510,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 8,
"watchers": 9,
"score": 0,
"subscribers_count": 0
},
@@ -1727,12 +1727,12 @@
"description": "KSU installer for supported firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-28T10:17:18Z",
"updated_at": "2026-08-01T06:15:13Z",
"pushed_at": "2026-08-01T06:18:15Z",
"updated_at": "2026-08-02T09:25:31Z",
"pushed_at": "2026-08-02T09:25:22Z",
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 4,
"forks_count": 5,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1740,7 +1740,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 4,
"forks": 5,
"watchers": 7,
"score": 0,
"subscribers_count": 0
@@ -1859,10 +1859,10 @@
"description": "GhostLock (CVE-2026-43499) kernel exploit for Poco M6 Pro (emerald) with locked bootloader",
"fork": false,
"created_at": "2026-07-31T15:33:04Z",
"updated_at": "2026-08-02T02:24:22Z",
"updated_at": "2026-08-02T11:57:55Z",
"pushed_at": "2026-07-31T15:33:55Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -1873,7 +1873,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 1,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
@@ -1996,8 +1996,8 @@
"description": "Root prototype for Galaxy S26",
"fork": false,
"created_at": "2026-08-01T22:45:30Z",
"updated_at": "2026-08-02T06:01:41Z",
"pushed_at": "2026-08-02T06:01:04Z",
"updated_at": "2026-08-02T11:59:03Z",
"pushed_at": "2026-08-02T11:58:54Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -2034,7 +2034,7 @@
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 3,
"forks_count": 5,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2042,9 +2042,42 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"forks": 5,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1319945973,
"name": "CVE-2026-43499-Neo11Plus",
"full_name": "boxiaolanya2008\/CVE-2026-43499-Neo11Plus",
"owner": {
"login": "boxiaolanya2008",
"id": 159523785,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/159523785?v=4",
"html_url": "https:\/\/github.com\/boxiaolanya2008",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/boxiaolanya2008\/CVE-2026-43499-Neo11Plus",
"description": null,
"fork": false,
"created_at": "2026-08-02T08:10:34Z",
"updated_at": "2026-08-02T11:27:47Z",
"pushed_at": "2026-08-02T08:32:07Z",
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 7,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-45504.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 61,
"watchers_count": 61,
"has_discussions": false,
"forks_count": 17,
"forks_count": 18,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 17,
"forks": 18,
"watchers": 61,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-45585.json
+2 -2
View File
@@ -449,10 +449,10 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Aqua1214\/YellowKey-Bitlocker-CVE-2026-45585",
"description": "YellowKey BitLocker CVE-2026-45585 - free open-source utility to extract, backup and view BitLocker recovery keys on Windows 10\/11. BitLocker bypass vulnerability tool, remediation and mitigation. Tom's Hardware coverage. Check TPM status, protector types, encryption state. Download YellowKey free, portable, no install needed.",
"description": "YellowKey BitLocker CVE-2026-45585 - free open-source utility to extract, backup and view BitLocker recovery keys on Windows 10\/11. BitLocker bypass vulnerability tool, remediation and mitigation. Tom's Hardware coverage. Check TPM status, protector types, encryption state. Download YellowKey free, portable, no install needed.bitlockerbitlocker-byp",
"fork": false,
"created_at": "2026-08-01T22:37:04Z",
"updated_at": "2026-08-01T22:58:39Z",
"updated_at": "2026-08-02T12:43:25Z",
"pushed_at": "2026-08-01T22:38:34Z",
"stargazers_count": 0,
"watchers_count": 0,
2026/CVE-2026-46331.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "PACKET_EDIT_MEME.c (aka CVE-2026-46331): yet another page cache poisoning nightmare",
"fork": false,
"created_at": "2026-06-17T04:09:56Z",
"updated_at": "2026-07-29T05:26:12Z",
"updated_at": "2026-08-02T12:02:08Z",
"pushed_at": "2026-06-17T04:55:06Z",
"stargazers_count": 135,
"watchers_count": 135,
"stargazers_count": 136,
"watchers_count": 136,
"has_discussions": false,
"forks_count": 44,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 44,
"watchers": 135,
"watchers": 136,
"score": 0,
"subscribers_count": 4
},
2026/CVE-2026-49176.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Local privilege-escalation proof of concept for the Windows WalletService vulnerability fixed in July 2026.",
"fork": false,
"created_at": "2026-07-16T13:36:10Z",
"updated_at": "2026-08-01T07:58:06Z",
"updated_at": "2026-08-02T07:58:35Z",
"pushed_at": "2026-07-20T09:43:27Z",
"stargazers_count": 44,
"watchers_count": 44,
"stargazers_count": 45,
"watchers_count": 45,
"has_discussions": false,
"forks_count": 15,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 15,
"watchers": 44,
"watchers": 45,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-54121.json
+10 -10
View File
@@ -19,7 +19,7 @@
"stargazers_count": 298,
"watchers_count": 298,
"has_discussions": false,
"forks_count": 73,
"forks_count": 74,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 73,
"forks": 74,
"watchers": 298,
"score": 0,
"subscribers_count": 0
@@ -212,10 +212,10 @@
"description": "Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.",
"fork": false,
"created_at": "2026-07-28T03:18:14Z",
"updated_at": "2026-07-28T03:20:20Z",
"updated_at": "2026-08-02T11:53:19Z",
"pushed_at": "2026-07-28T03:20:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -226,7 +226,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
@@ -245,10 +245,10 @@
"description": "A Metasploit auxiliary module that escalates from any low-privileged domain user to full domain compromise by abusing the AD CS enrollment \"chase\" fallback. The CA can be coerced into authenticating back to attacker-controlled infrastructure and then issuing a certificate that impersonates a Domain Controller.",
"fork": false,
"created_at": "2026-07-31T07:17:36Z",
"updated_at": "2026-07-31T07:52:02Z",
"updated_at": "2026-08-02T12:14:05Z",
"pushed_at": "2026-07-31T07:51:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -259,7 +259,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-57827.json
+37 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE. Split-controller upload bypass. CVSS 9.8 | CWE-434 | com_rsfiles < 1.17.12",
"fork": false,
"created_at": "2026-07-29T20:19:30Z",
"updated_at": "2026-07-31T22:15:21Z",
"updated_at": "2026-08-02T11:40:43Z",
"pushed_at": "2026-07-29T20:38:51Z",
"stargazers_count": 12,
"watchers_count": 12,
"stargazers_count": 13,
"watchers_count": 13,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -42,7 +42,7 @@
],
"visibility": "public",
"forks": 2,
"watchers": 12,
"watchers": 13,
"score": 0,
"subscribers_count": 0
},
@@ -91,5 +91,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1319953031,
"name": "rsfiles-CVE-2026-57827",
"full_name": "Mohammad-008\/rsfiles-CVE-2026-57827",
"owner": {
"login": "Mohammad-008",
"id": 175582609,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/175582609?v=4",
"html_url": "https:\/\/github.com\/Mohammad-008",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Mohammad-008\/rsfiles-CVE-2026-57827",
"description": "Unauthenticated File Upload → RCE PoC for CVE-2026-57827 (RSFiles! Joomla < 1.17.12). Authorized security research use only.",
"fork": false,
"created_at": "2026-08-02T08:21:50Z",
"updated_at": "2026-08-02T12:01:45Z",
"pushed_at": "2026-08-02T09:09:11Z",
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 6,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-58424.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1319990926,
"name": "CVE-2026-58424",
"full_name": "BridgerAlderson\/CVE-2026-58424",
"owner": {
"login": "BridgerAlderson",
"id": 139403792,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/139403792?v=4",
"html_url": "https:\/\/github.com\/BridgerAlderson",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/BridgerAlderson\/CVE-2026-58424",
"description": "A flaw in Gitea Open Source Git Server’s approval‑gate logic allows a pull request that originates from a permanent fork to merge without satisfying the repository’s configured approval gates. ",
"fork": false,
"created_at": "2026-08-02T09:18:27Z",
"updated_at": "2026-08-02T09:19:44Z",
"pushed_at": "2026-08-02T09:19:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-58635.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "PoC for CVE-2026-58635: Windows Narrator Braille Local Privilege Escalation",
"fork": false,
"created_at": "2026-07-15T12:53:34Z",
"updated_at": "2026-07-30T01:56:14Z",
"updated_at": "2026-08-02T07:59:41Z",
"pushed_at": "2026-07-15T12:53:37Z",
"stargazers_count": 27,
"watchers_count": 27,
"stargazers_count": 28,
"watchers_count": 28,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 7,
"watchers": 27,
"watchers": 28,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-59941.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1319975849,
"name": "CVE-2026-59941",
"full_name": "far00t01\/CVE-2026-59941",
"owner": {
"login": "far00t01",
"id": 59061779,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59061779?v=4",
"html_url": "https:\/\/github.com\/far00t01",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/far00t01\/CVE-2026-59941",
"description": "Dompdf: Denial of Service (DoS) via Resource Exhaustion using Oversized Image Bitmaps",
"fork": false,
"created_at": "2026-08-02T08:54:53Z",
"updated_at": "2026-08-02T09:46:36Z",
"pushed_at": "2026-08-02T09:46:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-60206.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "cve cve-2026-60206 weblogic saml exploit poc vulnerability oracle scanner security",
"fork": false,
"created_at": "2026-07-24T02:30:11Z",
"updated_at": "2026-08-02T01:53:59Z",
"updated_at": "2026-08-02T12:48:38Z",
"pushed_at": "2026-07-24T02:46:31Z",
"stargazers_count": 11,
"watchers_count": 11,
"stargazers_count": 13,
"watchers_count": 13,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 11,
"watchers": 13,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-63030.json
+4 -4
View File
@@ -513,10 +513,10 @@
"description": "CVE-2026-63030 + CVE-2026-60137 - “wp2shell”: unauthenticated RCE in WordPress core",
"fork": false,
"created_at": "2026-07-18T14:27:41Z",
"updated_at": "2026-08-02T03:40:04Z",
"updated_at": "2026-08-02T11:37:23Z",
"pushed_at": "2026-07-18T19:05:43Z",
"stargazers_count": 88,
"watchers_count": 88,
"stargazers_count": 89,
"watchers_count": 89,
"has_discussions": false,
"forks_count": 28,
"allow_forking": true,
@@ -527,7 +527,7 @@
"topics": [],
"visibility": "public",
"forks": 28,
"watchers": 88,
"watchers": 89,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-8451.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 13,
"watchers_count": 13,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"forks": 2,
"watchers": 13,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-9809.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1320160270,
"name": "CVE-2026-9809",
"full_name": "aj2108\/CVE-2026-9809",
"owner": {
"login": "aj2108",
"id": 152733456,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/152733456?v=4",
"html_url": "https:\/\/github.com\/aj2108",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/aj2108\/CVE-2026-9809",
"description": "CVE-2026-9809 is a Stored Cross-Site Scripting (Stored XSS) vulnerability affecting Mautic 7 (versions 7.0.0 through 7.1.1).",
"fork": false,
"created_at": "2026-08-02T12:21:38Z",
"updated_at": "2026-08-02T12:48:59Z",
"pushed_at": "2026-08-02T12:48:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-9811.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1320121472,
"name": "CVE-2026-9811",
"full_name": "aj2108\/CVE-2026-9811",
"owner": {
"login": "aj2108",
"id": 152733456,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/152733456?v=4",
"html_url": "https:\/\/github.com\/aj2108",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/aj2108\/CVE-2026-9811",
"description": "CVE-2026-9811 is a Stored Cross-Site Scripting (Stored XSS) vulnerability affecting Mautic 7 (versions 7.0.0 through 7.1.1).",
"fork": false,
"created_at": "2026-08-02T11:38:08Z",
"updated_at": "2026-08-02T12:04:14Z",
"pushed_at": "2026-08-02T12:03:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
README.md
+40 -4
View File
@@ -1151,6 +1151,20 @@
- [ugvxb/CVE-2026-9789](https://github.com/ugvxb/CVE-2026-9789)
### CVE-2026-9809 (2026-05-29)
<code>A stored Cross-Site Scripting (XSS) vulnerability exists in the Projects component of Mautic 7. When displaying project tags and popovers on administrative detail views (such as campaigns, emails, or forms), user-supplied project names are rendered without proper sanitization. An authenticated user with permissions to create or edit projects can exploit this to inject malicious script payloads. When an administrative user views an entity associated with a compromised project and hovers over its tag, the injected script executes within the context of their active browser session. This could allow an attacker to perform administrative actions on behalf of the victim, alter system configurations, or exfiltrate sensitive data.
</code>
- [aj2108/CVE-2026-9809](https://github.com/aj2108/CVE-2026-9809)
### CVE-2026-9811 (2026-05-29)
<code>A stored Cross-Site Scripting (XSS) vulnerability exists in the project selector component of Mautic 7. When rendering selection menus for associating projects with system entities, the application fails to sanitize project names returned via AJAX before injecting them into the DOM as option fields. An authenticated user with permissions to create projects can exploit this to store a malicious script payload in the project's name. When another administrative user subsequently opens an entity editor containing the project selector, the injected script executes within the context of their active browser session. This could allow an attacker to hijack the session, perform unauthorized state coordination, or access organizational data within the dashboard.
</code>
- [aj2108/CVE-2026-9811](https://github.com/aj2108/CVE-2026-9811)
### CVE-2026-9830 (2026-07-27)
<code>The bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke its REST permission callback, leaving every route in one of its API namespaces reachable without authentication and allowing unauthenticated attackers to read customer booking data and modify other users' bookings.
@@ -1676,7 +1690,11 @@
### CVE-2026-16475
- [afertar/CVE-2026-16475-PoC](https://github.com/afertar/CVE-2026-16475-PoC)
### CVE-2026-16540
### CVE-2026-16540 (2026-08-02)
<code>The Simply Schedule Appointments WordPress plugin before 1.6.12.6 does not correctly restrict a bulk appointment operation to the requester's own records, allowing unauthenticated users to retrieve the personal data of all appointments across the site and, on premium editions, to permanently delete them.
</code>
- [huseyn0vs/CVE-2026-16540-SimplyScheduleAppointments](https://github.com/huseyn0vs/CVE-2026-16540-SimplyScheduleAppointments)
### CVE-2026-16723 (2026-07-23)
@@ -3571,6 +3589,7 @@
- [0xdeadroot/CVE-2026-39987-marimo-rce](https://github.com/0xdeadroot/CVE-2026-39987-marimo-rce)
- [M3PH1569/CVE-2026-39987-POC](https://github.com/M3PH1569/CVE-2026-39987-POC)
- [HORKimhab/CVE-2026-39987](https://github.com/HORKimhab/CVE-2026-39987)
- [gbuyssens/CVE-2026-39987](https://github.com/gbuyssens/CVE-2026-39987)
### CVE-2026-40000 (2026-07-27)
@@ -3797,6 +3816,7 @@
- [mawussid/CVE-2026-41651-Python](https://github.com/mawussid/CVE-2026-41651-Python)
- [Lutfifakee-Project/CVE-2026-41651](https://github.com/Lutfifakee-Project/CVE-2026-41651)
- [0xDVRK/CVE-2026-41651](https://github.com/0xDVRK/CVE-2026-41651)
- [gbuyssens/CVE-2026-41651](https://github.com/gbuyssens/CVE-2026-41651)
### CVE-2026-41729 (2026-06-09)
@@ -4162,6 +4182,7 @@
- [fusiondrive/CVE-2026-43499-A36](https://github.com/fusiondrive/CVE-2026-43499-A36)
- [1ndevelopment/CVE-2026-43499-S26](https://github.com/1ndevelopment/CVE-2026-43499-S26)
- [veygax/HORiZonstack](https://github.com/veygax/HORiZonstack)
- [boxiaolanya2008/CVE-2026-43499-Neo11Plus](https://github.com/boxiaolanya2008/CVE-2026-43499-Neo11Plus)
### CVE-2026-43500 (2026-05-11)
@@ -6148,6 +6169,7 @@
- [shinthink/CVE-2026-57827](https://github.com/shinthink/CVE-2026-57827)
- [Candisexterior171/CVE-2026-57827](https://github.com/Candisexterior171/CVE-2026-57827)
- [Mohammad-008/rsfiles-CVE-2026-57827](https://github.com/Mohammad-008/rsfiles-CVE-2026-57827)
### CVE-2026-57829 (2026-07-13)
@@ -6216,6 +6238,13 @@
- [0xgh057r3c0n/CVE-2026-58138](https://github.com/0xgh057r3c0n/CVE-2026-58138)
- [Procjevt/CVE-2026-58138](https://github.com/Procjevt/CVE-2026-58138)
### CVE-2026-58424 (2026-07-03)
<code>Permanent Fork PR Workflow Approval Gate Bypass
</code>
- [BridgerAlderson/CVE-2026-58424](https://github.com/BridgerAlderson/CVE-2026-58424)
### CVE-2026-58457 (2026-07-01)
<code>Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) contains an unauthenticated OS command injection vulnerability that allows network-adjacent attackers to execute arbitrary shell commands by injecting unsanitized input through the smacfilter_conf handler in the commuos web backend. Attackers can append semicolon-delimited payloads to the name, enable, or mac GET parameters, which are passed without sanitization into sprintf() to build uci shell commands executed via doSystemCmdComlib(), granting full root-level control of the device.
@@ -6273,6 +6302,13 @@
- [gyubin02/cve-2026-59891-control-lab](https://github.com/gyubin02/cve-2026-59891-control-lab)
### CVE-2026-59941 (2026-07-28)
<code>Dompdf is an HTML to PDF converter for PHP. Versions 3.15 and prior accept a BMP image and generates a PDF-compatible PNG based only on its declared header dimensions and never bounds width × height before the image is converted through GD. A 58-byte BMP whose header declares e.g. 6000×6000 is accepted and later drives imagecreatetruecolor($width, $height) (and PHP's native BMP decoder) to allocate the full pixel canvas. A payload can fit in a single HTTP request: the BMP can be inlined as a data:image/bmp;base64,… URI inside attacker-controlled HTML, so no upload, no remote fetch, and no chroot-reachable file is required. I measured a 169-byte request driving a dompdf render to ~412 MB peak RSS and ~4.8 s of CPU/wall time, versus ~34 MB for an identically-sized benign request — roughly a 12× memory amplification per request, repeatable and unauthenticated. This issue has been fixed in version 3.16.
</code>
- [far00t01/CVE-2026-59941](https://github.com/far00t01/CVE-2026-59941)
### CVE-2026-60004
- [HORKimhab/CVE-2026-60004](https://github.com/HORKimhab/CVE-2026-60004)
- [EQSTLab/CVE-2026-60004](https://github.com/EQSTLab/CVE-2026-60004)
@@ -12503,7 +12539,7 @@
- [obscura-cert/CVE-2025-33073](https://github.com/obscura-cert/CVE-2025-33073)
- [matejsmycka/CVE-2025-33073-checker](https://github.com/matejsmycka/CVE-2025-33073-checker)
- [cve-2025-33073/cve-2025-33073](https://github.com/cve-2025-33073/cve-2025-33073)
- [uziii2208/come-to-telegram-rickluminari1--CVE-2025-33073](https://github.com/uziii2208/come-to-telegram-rickluminari1--CVE-2025-33073)
- [uziii2208/CVE-2025-33073](https://github.com/uziii2208/CVE-2025-33073)
- [irjfifndn-prog/Blackash-CVE-2025-33073](https://github.com/irjfifndn-prog/Blackash-CVE-2025-33073)
- [EgCupCake/cupntlm-Automated-Exploit-For-CVE-2025-33073-](https://github.com/EgCupCake/cupntlm-Automated-Exploit-For-CVE-2025-33073-)
- [IyarGross/SMB-CVE-2025-33073](https://github.com/IyarGross/SMB-CVE-2025-33073)
@@ -52185,6 +52221,7 @@
- [arpitgupta369/log4shell-scanner](https://github.com/arpitgupta369/log4shell-scanner)
- [razureink/cve-2021-44228-log4shell_rce_reproduction](https://github.com/razureink/cve-2021-44228-log4shell_rce_reproduction)
- [sfr0435122531-ui/-log4shell-lab](https://github.com/sfr0435122531-ui/-log4shell-lab)
- [vaishnavikkotian/log4shell-research](https://github.com/vaishnavikkotian/log4shell-research)
### CVE-2021-44255 (2022-01-31)
@@ -52573,7 +52610,6 @@
<code>Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute OS commands without any authentication.
</code>
- [nobodyatall648/CVE-2021-46422](https://github.com/nobodyatall648/CVE-2021-46422)
- [twoning/CVE-2021-46422_PoC](https://github.com/twoning/CVE-2021-46422_PoC)
- [Awei507/CVE-RCE](https://github.com/Awei507/CVE-RCE)
- [yigexioabai/CVE-2021-46422_RCE](https://github.com/yigexioabai/CVE-2021-46422_RCE)
@@ -73694,7 +73730,7 @@
<code>Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote attackers to execute arbitrary commands via unknown vectors.
</code>
- [noobpk/CVE-2011-1571](https://github.com/noobpk/CVE-2011-1571)
- [yazgx97/CVE-2011-1571](https://github.com/yazgx97/CVE-2011-1571)
### CVE-2011-1575 (2011-05-23)