nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/06/05 00:49:48

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-06-05 09:49:48 +09:00
1 parent 249ba1d470
commit 1dd7666a8d
90 files changed
+772 -625
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2014/CVE-2014-0038.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Linux local root exploit for CVE-2014-0038",
"fork": false,
"created_at": "2014-02-02T12:34:57Z",
"updated_at": "2026-05-13T19:46:33Z",
"updated_at": "2026-06-04T21:00:04Z",
"pushed_at": "2014-04-18T10:26:02Z",
"stargazers_count": 198,
"watchers_count": 198,
"stargazers_count": 199,
"watchers_count": 199,
"has_discussions": false,
"forks_count": 40,
"allow_forking": true,
@@ -32,7 +32,7 @@
],
"visibility": "public",
"forks": 40,
"watchers": 198,
"watchers": 199,
"score": 0,
"subscribers_count": 14
},
2016/CVE-2016-15042.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛠️ Validate and demonstrate CVE-2016-15042 with a Dockerized lab for unauthenticated file uploads in WordPress file managers.",
"fork": false,
"created_at": "2023-10-23T05:54:10Z",
"updated_at": "2026-06-04T18:04:54Z",
"pushed_at": "2026-06-04T18:04:07Z",
"updated_at": "2026-06-04T21:16:48Z",
"pushed_at": "2026-06-04T21:16:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2017/CVE-2017-9417.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Broadpwn bug (CVE-2017-9417)",
"fork": false,
"created_at": "2017-07-29T22:23:34Z",
"updated_at": "2026-04-22T00:35:17Z",
"updated_at": "2026-06-04T21:37:05Z",
"pushed_at": "2017-09-22T12:14:25Z",
"stargazers_count": 52,
"watchers_count": 52,
"stargazers_count": 53,
"watchers_count": 53,
"has_discussions": false,
"forks_count": 12,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 12,
"watchers": 52,
"watchers": 53,
"score": 0,
"subscribers_count": 6
}
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-06-04T18:02:21Z",
"pushed_at": "2026-06-04T18:01:29Z",
"updated_at": "2026-06-04T23:10:15Z",
"pushed_at": "2026-06-04T23:10:11Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2020/CVE-2020-0601.json
+4 -4
View File
@@ -184,10 +184,10 @@
"description": "PoC for CVE-2020-0601- Windows CryptoAPI (Crypt32.dll)",
"fork": false,
"created_at": "2020-01-15T23:07:41Z",
"updated_at": "2026-05-13T19:47:11Z",
"updated_at": "2026-06-04T19:19:05Z",
"pushed_at": "2020-01-20T23:33:19Z",
"stargazers_count": 887,
"watchers_count": 887,
"stargazers_count": 888,
"watchers_count": 888,
"has_discussions": false,
"forks_count": 257,
"allow_forking": true,
@@ -200,7 +200,7 @@
],
"visibility": "public",
"forks": 257,
"watchers": 887,
"watchers": 888,
"score": 0,
"subscribers_count": 29
},
2020/CVE-2020-0610.json
+2 -2
View File
@@ -58,8 +58,8 @@
"description": "🔍 Create a safe lab environment for testing CVE-2020-0610, a critical RCE vulnerability in Windows RD Gateway, with minimal disruption using DTLS techniques.",
"fork": false,
"created_at": "2025-09-04T13:21:35Z",
"updated_at": "2026-06-04T18:04:48Z",
"pushed_at": "2026-06-04T18:04:01Z",
"updated_at": "2026-06-04T21:16:11Z",
"pushed_at": "2026-06-04T21:16:06Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2020/CVE-2020-1472.json
+4 -4
View File
@@ -52,7 +52,7 @@
"stargazers_count": 1819,
"watchers_count": 1819,
"has_discussions": false,
"forks_count": 355,
"forks_count": 356,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 355,
"forks": 356,
"watchers": 1819,
"score": 0,
"subscribers_count": 84
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-06-04T17:22:05Z",
"pushed_at": "2026-06-04T17:22:01Z",
"updated_at": "2026-06-04T23:50:13Z",
"pushed_at": "2026-06-04T23:50:10Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-06-04T18:05:11Z",
"pushed_at": "2026-06-04T18:04:34Z",
"updated_at": "2026-06-04T23:17:17Z",
"pushed_at": "2026-06-04T23:17:14Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-34527.json
+4 -4
View File
@@ -119,10 +119,10 @@
"description": "PrintNightmare - Windows Print Spooler RCE\/LPE Vulnerability (CVE-2021-34527, CVE-2021-1675) proof of concept exploits",
"fork": false,
"created_at": "2021-07-03T15:15:12Z",
"updated_at": "2026-06-04T07:07:16Z",
"updated_at": "2026-06-04T23:59:11Z",
"pushed_at": "2021-09-13T12:12:17Z",
"stargazers_count": 173,
"watchers_count": 173,
"stargazers_count": 174,
"watchers_count": 174,
"has_discussions": false,
"forks_count": 41,
"allow_forking": true,
@@ -140,7 +140,7 @@
],
"visibility": "public",
"forks": 41,
"watchers": 173,
"watchers": 174,
"score": 0,
"subscribers_count": 4
},
2021/CVE-2021-36260.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.",
"fork": false,
"created_at": "2021-10-27T15:51:12Z",
"updated_at": "2026-05-23T10:52:36Z",
"updated_at": "2026-06-04T23:49:01Z",
"pushed_at": "2021-10-28T06:37:37Z",
"stargazers_count": 292,
"watchers_count": 292,
"stargazers_count": 293,
"watchers_count": 293,
"has_discussions": false,
"forks_count": 77,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 77,
"watchers": 292,
"watchers": 293,
"score": 0,
"subscribers_count": 5
},
2021/CVE-2021-4034.json
+2 -2
View File
@@ -2017,8 +2017,8 @@
"description": "🚀 Enhance your penetration testing with PwnKit Helper, a simple tool for exploiting the CVE-2021-4034 vulnerability in pkexec for local privilege escalation.",
"fork": false,
"created_at": "2025-10-01T09:53:03Z",
"updated_at": "2026-06-04T18:12:40Z",
"pushed_at": "2026-06-04T18:12:35Z",
"updated_at": "2026-06-04T21:23:28Z",
"pushed_at": "2026-06-04T21:23:24Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2022/CVE-2022-44721.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2022-12-03T11:04:17Z",
"updated_at": "2024-11-07T05:28:12Z",
"updated_at": "2026-06-04T21:35:37Z",
"pushed_at": "2022-12-02T14:38:27Z",
"stargazers_count": 23,
"watchers_count": 23,
"stargazers_count": 24,
"watchers_count": 24,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 23,
"watchers": 24,
"score": 0,
"subscribers_count": 0
}
2023/CVE-2023-28432.json
-33
View File
@@ -530,39 +530,6 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 741968176,
"name": "CVE-2023-28432",
"full_name": "xk-mt\/CVE-2023-28432",
"owner": {
"login": "xk-mt",
"id": 77874955,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/77874955?v=4",
"html_url": "https:\/\/github.com\/xk-mt",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/xk-mt\/CVE-2023-28432",
"description": "minio系统存在信息泄露漏洞，未经身份认证的远程攻击，通过发送特殊POST请求到\/minio\/bootstrap\/v1\/verify即可获取所有敏感信息，其中包括MINIO_SECRET_KEY和MINIO_ROOT_PASSWORD，可能导致管理员账号密码泄露。",
"fork": false,
"created_at": "2024-01-11T13:41:20Z",
"updated_at": "2025-07-27T06:32:03Z",
"pushed_at": "2024-01-15T08:35:51Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 1,
"score": 0,
"subscribers_count": 1
},
{
"id": 786121269,
"name": "CVE-2023-28432",
2023/CVE-2023-32434.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙",
"fork": false,
"created_at": "2025-08-13T09:19:29Z",
"updated_at": "2026-06-04T18:00:31Z",
"pushed_at": "2026-06-04T17:59:25Z",
"updated_at": "2026-06-04T21:12:07Z",
"pushed_at": "2026-06-04T21:11:57Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-39910.json
+2 -2
View File
@@ -66,8 +66,8 @@
"description": "🔒 Analyze the CVE-2023-39910 vulnerability in Libbitcoin Explorer to understand its impact on Bitcoin wallet security and protect your assets.",
"fork": false,
"created_at": "2026-01-07T14:24:08Z",
"updated_at": "2026-06-04T14:29:51Z",
"pushed_at": "2026-06-04T14:28:23Z",
"updated_at": "2026-06-04T22:22:23Z",
"pushed_at": "2026-06-04T22:22:19Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-46818.json
+4 -4
View File
@@ -212,10 +212,10 @@
"description": "An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if admin_allow_langedit is enabled.",
"fork": false,
"created_at": "2025-06-14T13:38:03Z",
"updated_at": "2026-05-27T13:03:03Z",
"updated_at": "2026-06-04T21:12:14Z",
"pushed_at": "2025-07-06T11:21:24Z",
"stargazers_count": 15,
"watchers_count": 15,
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -226,7 +226,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 15,
"watchers": 16,
"score": 0,
"subscribers_count": 1
},
2023/CVE-2023-4863.json
+33
View File
@@ -427,5 +427,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1258652617,
"name": "cve-2023-4863-analysis",
"full_name": "Shcesama\/cve-2023-4863-analysis",
"owner": {
"login": "Shcesama",
"id": 140816202,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/140816202?v=4",
"html_url": "https:\/\/github.com\/Shcesama",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Shcesama\/cve-2023-4863-analysis",
"description": null,
"fork": false,
"created_at": "2026-06-03T19:36:34Z",
"updated_at": "2026-06-04T20:32:33Z",
"pushed_at": "2026-06-04T20:15:13Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2024/CVE-2024-0670.json
+2 -2
View File
@@ -172,8 +172,8 @@
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
"fork": false,
"created_at": "2026-01-08T01:32:09Z",
"updated_at": "2026-06-04T14:29:30Z",
"pushed_at": "2026-06-04T14:28:26Z",
"updated_at": "2026-06-04T22:22:48Z",
"pushed_at": "2026-06-04T22:22:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-23222.json
+2 -2
View File
@@ -80,8 +80,8 @@
"description": "Analyze and deobfuscate the Coruna Exploit Kit (CVE-2024-23222) to enhance understanding and detection of related threats.",
"fork": false,
"created_at": "2026-03-15T16:36:07Z",
"updated_at": "2026-06-04T15:24:36Z",
"pushed_at": "2026-06-04T15:24:32Z",
"updated_at": "2026-06-04T23:23:08Z",
"pushed_at": "2026-06-04T23:23:05Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2024/CVE-2024-31317.json
+4 -4
View File
@@ -179,10 +179,10 @@
"description": "Quick tool for utilizing CVE-2024-31317 on Android",
"fork": false,
"created_at": "2025-10-20T13:47:09Z",
"updated_at": "2026-06-01T15:51:17Z",
"updated_at": "2026-06-04T23:50:08Z",
"pushed_at": "2026-02-16T10:22:42Z",
"stargazers_count": 64,
"watchers_count": 64,
"stargazers_count": 65,
"watchers_count": 65,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -193,7 +193,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 64,
"watchers": 65,
"score": 0,
"subscribers_count": 1
},
2024/CVE-2024-56426.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "A PoC of the CVE-2024-56426 vulnerability.",
"fork": false,
"created_at": "2026-04-07T12:02:52Z",
"updated_at": "2026-06-04T04:46:48Z",
"updated_at": "2026-06-04T20:49:39Z",
"pushed_at": "2026-06-04T15:58:37Z",
"stargazers_count": 9,
"watchers_count": 9,
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 9,
"watchers": 10,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-10681.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "CVE-2025-10681: Hardcoded Azure Blob Storage Account Key — Gardyn Home Kit (ICSA-26-055-03)",
"fork": false,
"created_at": "2026-04-07T04:37:31Z",
"updated_at": "2026-04-27T05:47:21Z",
"pushed_at": "2026-04-27T05:47:16Z",
"updated_at": "2026-06-04T20:35:28Z",
"pushed_at": "2026-06-04T20:34:48Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-1242.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "CVE-2025-1242: Hardcoded iothubowner Connection String — Gardyn Home Kit (ICSA-26-055-03)",
"fork": false,
"created_at": "2026-04-07T04:37:29Z",
"updated_at": "2026-04-27T05:47:07Z",
"pushed_at": "2026-04-27T05:47:05Z",
"updated_at": "2026-06-04T20:35:28Z",
"pushed_at": "2026-06-04T20:34:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-14847.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
"fork": false,
"created_at": "2025-07-30T15:52:00Z",
"updated_at": "2026-06-04T14:37:57Z",
"pushed_at": "2026-06-04T14:34:34Z",
"updated_at": "2026-06-04T22:29:37Z",
"pushed_at": "2026-06-04T22:29:33Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1129,8 +1129,8 @@
"description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
"fork": false,
"created_at": "2026-01-14T06:05:44Z",
"updated_at": "2026-06-04T14:37:19Z",
"pushed_at": "2026-06-04T14:33:16Z",
"updated_at": "2026-06-04T22:28:12Z",
"pushed_at": "2026-06-04T22:28:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-21479.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2025-21479 proof-of-concept, I think",
"fork": false,
"created_at": "2025-06-19T19:47:52Z",
"updated_at": "2026-06-02T11:32:05Z",
"updated_at": "2026-06-04T20:37:08Z",
"pushed_at": "2025-08-16T06:52:13Z",
"stargazers_count": 253,
"watchers_count": 253,
"stargazers_count": 254,
"watchers_count": 254,
"has_discussions": false,
"forks_count": 57,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 57,
"watchers": 253,
"watchers": 254,
"score": 0,
"subscribers_count": 2
},
2025/CVE-2025-2304.json
+2 -2
View File
@@ -412,8 +412,8 @@
"description": "🛠️ Exploit CVE-2025-2304 in Camaleon CMS easily with this Python script for privilege escalation, tested on version 2.9.0.",
"fork": false,
"created_at": "2026-02-14T20:01:20Z",
"updated_at": "2026-06-04T15:01:38Z",
"pushed_at": "2026-06-04T15:00:41Z",
"updated_at": "2026-06-04T22:57:42Z",
"pushed_at": "2026-06-04T22:57:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-24257.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis",
"fork": false,
"created_at": "2026-04-04T03:42:55Z",
"updated_at": "2026-06-04T15:40:07Z",
"pushed_at": "2026-06-04T15:37:33Z",
"updated_at": "2026-06-04T23:36:48Z",
"pushed_at": "2026-06-04T23:36:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-31200.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 198,
"watchers_count": 198,
"has_discussions": false,
"forks_count": 30,
"forks_count": 31,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -69,7 +69,7 @@
"zero-day"
],
"visibility": "public",
"forks": 30,
"forks": 31,
"watchers": 198,
"score": 0,
"subscribers_count": 2
2025/CVE-2025-31258.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔓 Explore CVE-2025-31258 with this PoC demonstrating partial sandbox escape using RemoteViewServices for practical 1-day security practice.",
"fork": false,
"created_at": "2020-06-23T15:20:11Z",
"updated_at": "2026-06-04T18:06:58Z",
"pushed_at": "2026-06-04T18:06:41Z",
"updated_at": "2026-06-04T21:18:02Z",
"pushed_at": "2026-06-04T21:17:57Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-32463.json
+6 -6
View File
@@ -645,8 +645,8 @@
"description": "Demonstrate CVE-2025-32463 with this PoC for sudo's chroot feature. Explore the exploit and its impact on vulnerable sudo versions. 🐱💻🔒",
"fork": false,
"created_at": "2025-07-04T18:20:09Z",
"updated_at": "2026-06-04T17:59:09Z",
"pushed_at": "2026-06-04T17:58:05Z",
"updated_at": "2026-06-04T21:10:31Z",
"pushed_at": "2026-06-04T21:10:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -1628,8 +1628,8 @@
"description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.",
"fork": false,
"created_at": "2025-09-20T00:42:07Z",
"updated_at": "2026-06-04T18:08:07Z",
"pushed_at": "2026-06-04T18:08:03Z",
"updated_at": "2026-06-04T21:19:15Z",
"pushed_at": "2026-06-04T21:19:11Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1680,8 +1680,8 @@
"description": null,
"fork": false,
"created_at": "2025-09-20T02:01:08Z",
"updated_at": "2026-06-04T18:07:58Z",
"pushed_at": "2026-06-04T18:07:53Z",
"updated_at": "2026-06-04T21:19:30Z",
"pushed_at": "2026-06-04T21:19:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-36911.json
+2 -2
View File
@@ -294,8 +294,8 @@
"description": "🔍 Scan and research CVE-2025-36911 vulnerabilities with WPair, a specialized tool for Android built in Kotlin, ensuring your applications remain secure.",
"fork": false,
"created_at": "2026-01-29T01:59:47Z",
"updated_at": "2026-06-04T14:50:54Z",
"pushed_at": "2026-06-04T14:47:59Z",
"updated_at": "2026-06-04T22:44:02Z",
"pushed_at": "2026-06-04T22:43:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-48595.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
2025/CVE-2025-49144.json
+2 -2
View File
@@ -251,8 +251,8 @@
"description": null,
"fork": false,
"created_at": "2025-09-19T17:17:19Z",
"updated_at": "2026-06-04T18:08:01Z",
"pushed_at": "2026-06-04T18:07:47Z",
"updated_at": "2026-06-04T21:19:09Z",
"pushed_at": "2026-06-04T21:19:05Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-49844.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.",
"fork": false,
"created_at": "2019-04-13T07:51:09Z",
"updated_at": "2026-06-04T18:29:25Z",
"pushed_at": "2026-06-04T18:29:13Z",
"updated_at": "2026-06-04T21:38:55Z",
"pushed_at": "2026-06-04T21:38:37Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
"fork": false,
"created_at": "2022-04-06T09:27:39Z",
"updated_at": "2026-06-04T18:30:02Z",
"pushed_at": "2026-06-04T18:29:58Z",
"updated_at": "2026-06-04T21:39:38Z",
"pushed_at": "2026-06-04T21:39:34Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-52915.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-06-04T09:16:04Z",
"updated_at": "2026-06-04T21:59:07Z",
"pushed_at": "2026-06-02T11:07:33Z",
"stargazers_count": 776,
"watchers_count": 776,
"stargazers_count": 777,
"watchers_count": 777,
"has_discussions": false,
"forks_count": 115,
"allow_forking": true,
@@ -37,7 +37,7 @@
],
"visibility": "public",
"forks": 115,
"watchers": 776,
"watchers": 777,
"score": 0,
"subscribers_count": 19
}
2025/CVE-2025-5419.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛡️ Analyze CVE-2025-5419 to exploit an uninitialized read vulnerability in V8 for arbitrary read\/write access within the sandbox environment.",
"fork": false,
"created_at": "2023-01-25T04:41:49Z",
"updated_at": "2026-06-04T14:59:44Z",
"pushed_at": "2026-06-04T14:58:38Z",
"updated_at": "2026-06-04T22:55:23Z",
"pushed_at": "2026-06-04T22:55:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-54253.json
+2 -2
View File
@@ -67,8 +67,8 @@
"description": "🐙 CVE-2025-54253 exploit demo for Adobe AEM Forms on JEE: OGNL injection to RCE with PoC, Python 3.10 exploit code, reproducer and mitigation guidance.",
"fork": false,
"created_at": "2025-08-17T22:04:33Z",
"updated_at": "2026-06-04T18:01:25Z",
"pushed_at": "2026-06-04T18:01:00Z",
"updated_at": "2026-06-04T21:13:24Z",
"pushed_at": "2026-06-04T21:13:20Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-54424.json
+2 -2
View File
@@ -53,8 +53,8 @@
"description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐",
"fork": false,
"created_at": "2025-08-14T05:16:16Z",
"updated_at": "2026-06-04T18:00:56Z",
"pushed_at": "2026-06-04T18:00:27Z",
"updated_at": "2026-06-04T21:13:15Z",
"pushed_at": "2026-06-04T21:12:52Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2025/CVE-2025-55182.json
+32 -32
View File
@@ -14,8 +14,8 @@
"description": "🔍 Demonstrate CVE-2025-55182, a critical vulnerability in React Server Components allowing unauthenticated arbitrary code execution.",
"fork": false,
"created_at": "2021-09-18T02:04:33Z",
"updated_at": "2026-06-04T14:18:33Z",
"pushed_at": "2026-06-04T14:17:17Z",
"updated_at": "2026-06-04T22:10:30Z",
"pushed_at": "2026-06-04T22:10:27Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.",
"fork": false,
"created_at": "2022-06-17T10:19:10Z",
"updated_at": "2026-06-04T14:17:55Z",
"pushed_at": "2026-06-04T14:16:55Z",
"updated_at": "2026-06-04T22:10:43Z",
"pushed_at": "2026-06-04T22:10:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -151,8 +151,8 @@
"description": "🔍 Detect vulnerabilities CVE-2025-55182 and CVE-2025-66478 in Next.js apps with this reliable command-line scanner.",
"fork": false,
"created_at": "2023-11-27T18:17:43Z",
"updated_at": "2026-06-04T14:18:42Z",
"pushed_at": "2026-06-04T14:16:59Z",
"updated_at": "2026-06-04T22:10:47Z",
"pushed_at": "2026-06-04T22:10:11Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -203,8 +203,8 @@
"description": "🚨 Exploit CVE-2025-55182, a critical RCE vulnerability in React Server Components for Next.js apps; enables testing for prototype pollution risks.",
"fork": false,
"created_at": "2024-04-24T02:36:56Z",
"updated_at": "2026-06-04T14:21:47Z",
"pushed_at": "2026-06-04T14:18:18Z",
"updated_at": "2026-06-04T22:11:20Z",
"pushed_at": "2026-06-04T22:11:16Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -251,8 +251,8 @@
"description": "🚨 Exploit and scan for CVE-2025-55182, a critical React\/Next.js vulnerability enabling remote code execution through prototype pollution techniques.",
"fork": false,
"created_at": "2024-05-28T16:48:51Z",
"updated_at": "2026-06-04T14:19:46Z",
"pushed_at": "2026-06-04T14:16:24Z",
"updated_at": "2026-06-04T22:10:00Z",
"pushed_at": "2026-06-04T22:09:38Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -303,8 +303,8 @@
"description": null,
"fork": false,
"created_at": "2024-11-29T12:32:19Z",
"updated_at": "2026-06-04T14:18:36Z",
"pushed_at": "2026-06-04T14:17:46Z",
"updated_at": "2026-06-04T22:10:55Z",
"pushed_at": "2026-06-04T22:10:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -352,8 +352,8 @@
"description": "🛠️ Exploit CVE-2025-55182 effortlessly with this GUI tool for vulnerability detection, command execution, and Shell reverse connections.",
"fork": false,
"created_at": "2025-04-21T22:04:31Z",
"updated_at": "2026-06-04T14:22:37Z",
"pushed_at": "2026-06-04T14:21:15Z",
"updated_at": "2026-06-04T22:14:49Z",
"pushed_at": "2026-06-04T22:14:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -406,8 +406,8 @@
"description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
"fork": false,
"created_at": "2025-06-06T16:34:46Z",
"updated_at": "2026-06-04T14:20:13Z",
"pushed_at": "2026-06-04T14:17:10Z",
"updated_at": "2026-06-04T22:10:52Z",
"pushed_at": "2026-06-04T22:10:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -458,8 +458,8 @@
"description": "⚠️ Explore a vulnerable environment to test security scanners against the CVE-2025-55182 RCE flaw in React Server Components and Next.js applications.",
"fork": false,
"created_at": "2025-07-15T18:33:34Z",
"updated_at": "2026-06-04T14:19:40Z",
"pushed_at": "2026-06-04T14:18:12Z",
"updated_at": "2026-06-04T22:11:16Z",
"pushed_at": "2026-06-04T22:11:13Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -12218,8 +12218,8 @@
"description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.",
"fork": false,
"created_at": "2025-12-24T14:48:19Z",
"updated_at": "2026-06-04T14:20:19Z",
"pushed_at": "2026-06-04T14:16:53Z",
"updated_at": "2026-06-04T22:10:01Z",
"pushed_at": "2026-06-04T22:09:57Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12303,8 +12303,8 @@
"description": "🚨 Identify and address CVE-2025-55182, a critical React Server vulnerability allowing remote code execution without authentication.",
"fork": false,
"created_at": "2025-12-24T18:44:51Z",
"updated_at": "2026-06-04T14:17:27Z",
"pushed_at": "2026-06-04T14:16:05Z",
"updated_at": "2026-06-04T22:09:11Z",
"pushed_at": "2026-06-04T22:09:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12352,8 +12352,8 @@
"description": "🚨 Demonstrate CVE-2025-55182, a critical React vulnerability allowing remote code execution via prototype chain pollution in `[email protected]`.",
"fork": false,
"created_at": "2025-12-24T18:48:07Z",
"updated_at": "2026-06-04T14:17:20Z",
"pushed_at": "2026-06-04T14:16:11Z",
"updated_at": "2026-06-04T22:09:18Z",
"pushed_at": "2026-06-04T22:09:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12437,8 +12437,8 @@
"description": "🔍 Exploit CVE-2025-55182 in Next.js with this versatile tool for security research, featuring advanced payloads and WAF bypass techniques.",
"fork": false,
"created_at": "2025-12-25T19:28:28Z",
"updated_at": "2026-06-04T14:21:09Z",
"pushed_at": "2026-06-04T14:17:42Z",
"updated_at": "2026-06-04T22:10:56Z",
"pushed_at": "2026-06-04T22:10:52Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12639,8 +12639,8 @@
"description": "⚡ Discover and exploit CVE-2025-55182 with this PoC, offering reliable remote code execution tests for React Server Components in Next.js.",
"fork": false,
"created_at": "2025-12-26T22:26:55Z",
"updated_at": "2026-06-04T14:20:45Z",
"pushed_at": "2026-06-04T14:17:41Z",
"updated_at": "2026-06-04T22:10:54Z",
"pushed_at": "2026-06-04T22:10:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12909,8 +12909,8 @@
"description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
"fork": false,
"created_at": "2026-01-02T01:28:57Z",
"updated_at": "2026-06-04T14:24:39Z",
"pushed_at": "2026-06-04T14:23:18Z",
"updated_at": "2026-06-04T22:17:09Z",
"pushed_at": "2026-06-04T22:17:05Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -13430,8 +13430,8 @@
"description": "🔍 Exploit CVE-2025-55182 vulnerabilities in Next.js and React with this efficient framework for rapid testing and assessment.",
"fork": false,
"created_at": "2026-01-08T16:28:04Z",
"updated_at": "2026-06-04T14:30:10Z",
"pushed_at": "2026-06-04T14:29:25Z",
"updated_at": "2026-06-04T22:23:59Z",
"pushed_at": "2026-06-04T22:23:55Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-55184.json
+2 -2
View File
@@ -289,8 +289,8 @@
"description": "🛠️ Test and validate the CVE-2025-55184 vulnerability in React Server Components to enhance your application's security against denial-of-service attacks.",
"fork": false,
"created_at": "2026-01-02T05:04:03Z",
"updated_at": "2026-06-04T14:25:49Z",
"pushed_at": "2026-06-04T14:23:54Z",
"updated_at": "2026-06-04T22:17:45Z",
"pushed_at": "2026-06-04T22:17:40Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-58807.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1259738884,
"name": "purge-varnish-csrf-advisory",
"full_name": "erikharden\/purge-varnish-csrf-advisory",
"owner": {
"login": "erikharden",
"id": 4271204,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4271204?v=4",
"html_url": "https:\/\/github.com\/erikharden",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/erikharden\/purge-varnish-csrf-advisory",
"description": "Security advisory and CSRF patch for WordPress purge-varnish plugin (CVE-2025-58807)",
"fork": false,
"created_at": "2026-06-04T20:08:42Z",
"updated_at": "2026-06-04T20:08:49Z",
"pushed_at": "2026-06-04T20:09:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-59287.json
+2 -2
View File
@@ -200,8 +200,8 @@
"description": "🔍 Analyze WSUS deserialization behavior to enhance security, generate reports, and identify configuration weaknesses in your infrastructure.",
"fork": false,
"created_at": "2026-01-29T02:16:04Z",
"updated_at": "2026-06-04T14:48:07Z",
"pushed_at": "2026-06-04T14:48:02Z",
"updated_at": "2026-06-04T22:44:03Z",
"pushed_at": "2026-06-04T22:44:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-61882.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔍 Detect vulnerabilities CVE-2025-61882 and CVE-2025-61884 in Oracle E-Business Suite to help secure your systems from potential remote code execution threats.",
"fork": false,
"created_at": "2025-03-04T15:38:32Z",
"updated_at": "2026-06-04T18:28:09Z",
"pushed_at": "2026-06-04T18:27:33Z",
"updated_at": "2026-06-04T21:37:34Z",
"pushed_at": "2026-06-04T21:37:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-62518.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2025-62518: TARmageddon",
"fork": false,
"created_at": "2025-08-21T16:03:36Z",
"updated_at": "2026-01-09T14:26:09Z",
"updated_at": "2026-06-04T22:07:54Z",
"pushed_at": "2025-10-21T02:44:16Z",
"stargazers_count": 18,
"watchers_count": 18,
"stargazers_count": 19,
"watchers_count": 19,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -34,7 +34,7 @@
],
"visibility": "public",
"forks": 4,
"watchers": 18,
"watchers": 19,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-63389.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Gov-TLD Ollama discovery via CT logs, Shodan, and DNS; detects CVE-2025-63389, cloud proxy takeovers, and RAG\/distilled models across 25 government TLD patterns.",
"fork": false,
"created_at": "2026-05-02T23:31:26Z",
"updated_at": "2026-06-04T03:12:34Z",
"updated_at": "2026-06-04T21:43:05Z",
"pushed_at": "2026-06-04T03:12:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -43,7 +43,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-6554.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "🔍 Demonstrate and validate the `addressof` and `fakeobj` primitives in the V8 sandbox for advanced security research on CVE-2025-6554.",
"fork": false,
"created_at": "2025-08-10T21:07:43Z",
"updated_at": "2026-06-04T14:12:55Z",
"pushed_at": "2026-06-04T14:11:14Z",
"updated_at": "2026-06-04T22:04:36Z",
"pushed_at": "2026-06-04T22:04:32Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-65640.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Public advisory for CVE-2025-65640: Stored XSS vulnerability in Globe Document Intelligence.",
"fork": false,
"created_at": "2026-05-28T19:34:34Z",
"updated_at": "2026-06-04T17:19:21Z",
"updated_at": "2026-06-04T19:17:01Z",
"pushed_at": "2026-06-04T16:48:25Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 5,
"watchers": 7,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-66398.json
+2 -2
View File
@@ -64,8 +64,8 @@
"description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.",
"fork": false,
"created_at": "2026-03-23T09:09:21Z",
"updated_at": "2026-06-04T15:32:55Z",
"pushed_at": "2026-06-04T15:30:30Z",
"updated_at": "2026-06-04T23:29:51Z",
"pushed_at": "2026-06-04T23:29:47Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-66478.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.",
"fork": false,
"created_at": "2025-10-01T07:40:09Z",
"updated_at": "2026-06-04T14:19:43Z",
"pushed_at": "2026-06-04T14:18:44Z",
"updated_at": "2026-06-04T22:11:47Z",
"pushed_at": "2026-06-04T22:11:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-68921.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.",
"fork": false,
"created_at": "2026-01-24T21:00:41Z",
"updated_at": "2026-06-04T14:45:33Z",
"pushed_at": "2026-06-04T14:44:14Z",
"updated_at": "2026-06-04T22:40:05Z",
"pushed_at": "2026-06-04T22:40:01Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-69985.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit CVE-2025-69985 to bypass authentication and execute remote commands on FUXA versions ≤ 1.2.8 via the \/api\/runscript endpoint.",
"fork": false,
"created_at": "2025-04-10T09:18:30Z",
"updated_at": "2026-06-04T15:15:45Z",
"pushed_at": "2026-06-04T15:15:36Z",
"updated_at": "2026-06-04T23:13:41Z",
"pushed_at": "2026-06-04T23:13:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-70795.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.",
"fork": false,
"created_at": "2024-04-20T04:18:24Z",
"updated_at": "2026-06-04T15:14:17Z",
"pushed_at": "2026-06-04T15:10:38Z",
"updated_at": "2026-06-04T23:07:47Z",
"pushed_at": "2026-06-04T23:07:43Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2025/CVE-2025-8088.json
+2 -2
View File
@@ -838,8 +838,8 @@
"description": "🛠 Exploit CVE-2025-8088 with this Python tool to generate malicious WinRAR archives that ensure payload persistence in Windows startup folders.",
"fork": false,
"created_at": "2025-12-20T13:52:21Z",
"updated_at": "2026-06-04T14:13:40Z",
"pushed_at": "2026-06-04T14:12:45Z",
"updated_at": "2026-06-04T22:05:55Z",
"pushed_at": "2026-06-04T22:05:51Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-8110.json
+2 -2
View File
@@ -146,8 +146,8 @@
"description": "🔍 Detect improper symbolic link handling in Gogs' PutContents API, exposing local code execution risks for versions 0.13.3 and earlier.",
"fork": false,
"created_at": "2025-12-31T13:25:07Z",
"updated_at": "2026-06-04T14:23:54Z",
"pushed_at": "2026-06-04T14:22:54Z",
"updated_at": "2026-06-04T22:16:27Z",
"pushed_at": "2026-06-04T22:16:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-8671.json
+2 -2
View File
@@ -150,8 +150,8 @@
"description": "A Python script that checks if a web server is vulnerable to MadeYouReset (CVE-2025-8671) — an HTTP\/2 DoS attack that bypasses Rapid Reset mitigations by tricking the server into resetting its own streams. It probes the target by sending a malformed WINDOW_UPDATE frame and inspects whether the server responds.",
"fork": false,
"created_at": "2026-06-01T18:01:16Z",
"updated_at": "2026-06-01T18:17:52Z",
"pushed_at": "2026-06-01T18:02:02Z",
"updated_at": "2026-06-04T23:30:57Z",
"pushed_at": "2026-06-04T23:30:53Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-9074.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🚀 Exploit CVE-2025-9074 with this Docker escape framework, simplifying API vulnerabilities and enhancing security testing for developers and researchers.",
"fork": false,
"created_at": "2024-06-19T23:21:41Z",
"updated_at": "2026-06-04T14:28:25Z",
"pushed_at": "2026-06-04T14:24:30Z",
"updated_at": "2026-06-04T22:18:23Z",
"pushed_at": "2026-06-04T22:18:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-0073.json
+4 -4
View File
@@ -356,10 +356,10 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/m00ddy\/CVE-2026-0073-Android-client-TLS-auth-bypass",
"description": null,
"description": "translating original python exploit to C",
"fork": false,
"created_at": "2026-05-25T18:54:04Z",
"updated_at": "2026-05-27T19:35:26Z",
"updated_at": "2026-06-04T23:33:34Z",
"pushed_at": "2026-05-27T19:35:22Z",
"stargazers_count": 0,
"watchers_count": 0,
@@ -392,8 +392,8 @@
"description": "0-Click RCE Android Adb TLS Wireless Debugging",
"fork": false,
"created_at": "2026-06-04T03:06:59Z",
"updated_at": "2026-06-04T03:15:35Z",
"pushed_at": "2026-06-04T03:15:31Z",
"updated_at": "2026-06-04T23:02:40Z",
"pushed_at": "2026-06-04T23:02:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-0828.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.",
"fork": false,
"created_at": "2024-04-20T04:18:24Z",
"updated_at": "2026-06-04T15:14:17Z",
"pushed_at": "2026-06-04T15:10:38Z",
"updated_at": "2026-06-04T23:07:47Z",
"pushed_at": "2026-06-04T23:07:43Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-20182.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "CVE-2026-20182 PoC - Cisco Catalyst SD-WAN Controller \/ Manager Authentication Bypass (CVSS 10.0)",
"fork": false,
"created_at": "2026-05-22T21:17:01Z",
"updated_at": "2026-06-03T13:23:47Z",
"updated_at": "2026-06-05T00:39:59Z",
"pushed_at": "2026-05-22T21:17:22Z",
"stargazers_count": 2,
"watchers_count": 2,
2026/CVE-2026-20841.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.",
"fork": false,
"created_at": "2024-09-22T12:19:06Z",
"updated_at": "2026-06-04T15:13:38Z",
"pushed_at": "2026-06-04T15:09:27Z",
"updated_at": "2026-06-04T23:06:43Z",
"pushed_at": "2026-06-04T23:06:39Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.",
"fork": false,
"created_at": "2026-02-26T05:21:28Z",
"updated_at": "2026-06-04T15:11:09Z",
"pushed_at": "2026-06-04T15:08:16Z",
"updated_at": "2026-06-04T23:05:28Z",
"pushed_at": "2026-06-04T23:05:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-23479.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1259739113,
"name": "redis-cve-2026-23479-check",
"full_name": "pduggusa\/redis-cve-2026-23479-check",
"owner": {
"login": "pduggusa",
"id": 223524652,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/223524652?v=4",
"html_url": "https:\/\/github.com\/pduggusa",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/pduggusa\/redis-cve-2026-23479-check",
"description": "Safe read-only version checker + Sigma rule for Redis CVE-2026-23479 (authenticated use-after-free → RCE). Find exposed instances, patch left-of-boom. By DugganUSA.",
"fork": false,
"created_at": "2026-06-04T20:09:02Z",
"updated_at": "2026-06-04T20:09:10Z",
"pushed_at": "2026-06-04T20:09:06Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-23744.json
+5 -5
View File
@@ -14,7 +14,7 @@
"description": "HTB Season 11 — DevHub Writeup Exploiting CVE-2026-23744 (MCPJam Inspector unauthenticated RCE via \/api\/mcp\/connect) to gain initial foothold, then lateral movement through Jupyter Lab token leaked in systemd service file. Stack: nginx · MCPJam Inspector 1.4.2 · Jupyter Lab · OPSMCP (root)",
"fork": false,
"created_at": "2026-05-30T22:03:43Z",
"updated_at": "2026-05-31T00:15:29Z",
"updated_at": "2026-06-04T19:46:43Z",
"pushed_at": "2026-05-31T00:15:25Z",
"stargazers_count": 0,
"watchers_count": 0,
@@ -80,10 +80,10 @@
"description": "CVE-2026-23744 RCE + Privilege Escalation",
"fork": false,
"created_at": "2026-05-31T07:39:58Z",
"updated_at": "2026-05-31T07:51:34Z",
"updated_at": "2026-06-04T19:29:43Z",
"pushed_at": "2026-05-31T07:51:31Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-2406.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔍 Analyze and detect CVE-2026-2406 vulnerabilities in Telnet to enhance security and prevent unauthorized access with this professional research engine.",
"fork": false,
"created_at": "2025-04-16T07:20:12Z",
"updated_at": "2026-06-04T14:59:23Z",
"pushed_at": "2026-06-04T14:58:03Z",
"updated_at": "2026-06-04T22:54:45Z",
"pushed_at": "2026-06-04T22:54:41Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24061.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.",
"fork": false,
"created_at": "2026-02-03T19:46:10Z",
"updated_at": "2026-06-04T14:54:16Z",
"pushed_at": "2026-06-04T14:53:50Z",
"updated_at": "2026-06-04T22:49:59Z",
"pushed_at": "2026-06-04T22:49:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24291.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions",
"fork": false,
"created_at": "2026-03-26T04:38:27Z",
"updated_at": "2026-06-04T15:32:43Z",
"pushed_at": "2026-06-04T15:32:39Z",
"updated_at": "2026-06-04T23:31:40Z",
"pushed_at": "2026-06-04T23:31:37Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-2441.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.",
"fork": false,
"created_at": "2026-03-03T14:19:18Z",
"updated_at": "2026-06-04T15:14:22Z",
"pushed_at": "2026-06-04T15:12:16Z",
"updated_at": "2026-06-04T23:10:10Z",
"pushed_at": "2026-06-04T23:10:06Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-2472.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.",
"fork": false,
"created_at": "2026-03-10T14:40:04Z",
"updated_at": "2026-06-04T15:20:52Z",
"pushed_at": "2026-06-04T15:19:14Z",
"updated_at": "2026-06-04T23:16:54Z",
"pushed_at": "2026-06-04T23:16:51Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-25197.json
+50
View File
@@ -0,0 +1,50 @@
[
{
"id": 1203481461,
"name": "CVE-2026-25197",
"full_name": "MichaelAdamGroberman\/CVE-2026-25197",
"owner": {
"login": "MichaelAdamGroberman",
"id": 81723568,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/81723568?v=4",
"html_url": "https:\/\/github.com\/MichaelAdamGroberman",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/MichaelAdamGroberman\/CVE-2026-25197",
"description": "CVE-2026-25197: Authorization Bypass via IDOR — Gardyn Home Kit (ICSA-26-055-03)",
"fork": false,
"created_at": "2026-04-07T04:37:34Z",
"updated_at": "2026-06-04T20:35:30Z",
"pushed_at": "2026-06-04T20:34:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"authorization-bypass",
"cisa",
"coordinated-disclosure",
"cve",
"cve-2026-25197",
"cwe-639",
"gardyn",
"ics-advisory",
"icsa-26-055-03",
"idor",
"iot-security",
"security-research",
"vu653116",
"vulnerability-disclosure"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-25643.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit Frigate NVR ≤0.16.3 to execute commands remotely by abusing a configuration flaw without needing shell access or output capture.",
"fork": false,
"created_at": "2026-03-07T20:23:08Z",
"updated_at": "2026-06-04T15:17:25Z",
"pushed_at": "2026-06-04T15:17:21Z",
"updated_at": "2026-06-04T23:15:28Z",
"pushed_at": "2026-06-04T23:15:24Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-26555.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1259614291,
"name": "axios-supply-chain-cve-2026-26555",
"full_name": "horrister\/axios-supply-chain-cve-2026-26555",
"owner": {
"login": "horrister",
"id": 62105785,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62105785?v=4",
"html_url": "https:\/\/github.com\/horrister",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/horrister\/axios-supply-chain-cve-2026-26555",
"description": "In-depth analysis of cve-2026-26555 ",
"fork": false,
"created_at": "2026-06-04T17:24:23Z",
"updated_at": "2026-06-04T23:22:31Z",
"pushed_at": "2026-06-04T23:22:27Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-28766.json
+50
View File
@@ -0,0 +1,50 @@
[
{
"id": 1203481484,
"name": "CVE-2026-28766",
"full_name": "MichaelAdamGroberman\/CVE-2026-28766",
"owner": {
"login": "MichaelAdamGroberman",
"id": 81723568,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/81723568?v=4",
"html_url": "https:\/\/github.com\/MichaelAdamGroberman",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/MichaelAdamGroberman\/CVE-2026-28766",
"description": "CVE-2026-28766: Missing Authentication on User Account Endpoint — Gardyn Home Kit (ICSA-26-055-03)",
"fork": false,
"created_at": "2026-04-07T04:37:37Z",
"updated_at": "2026-06-04T20:35:30Z",
"pushed_at": "2026-06-04T20:34:52Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cisa",
"coordinated-disclosure",
"cve",
"cve-2026-28766",
"cwe-306",
"gardyn",
"ics-advisory",
"icsa-26-055-03",
"iot-security",
"missing-authentication",
"pii-exposure",
"security-research",
"vu653116",
"vulnerability-disclosure"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-28767.json
+50
View File
@@ -0,0 +1,50 @@
[
{
"id": 1203481513,
"name": "CVE-2026-28767",
"full_name": "MichaelAdamGroberman\/CVE-2026-28767",
"owner": {
"login": "MichaelAdamGroberman",
"id": 81723568,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/81723568?v=4",
"html_url": "https:\/\/github.com\/MichaelAdamGroberman",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/MichaelAdamGroberman\/CVE-2026-28767",
"description": "CVE-2026-28767: Missing Authentication on Admin Notifications Endpoint — Gardyn Home Kit (ICSA-26-055-03)",
"fork": false,
"created_at": "2026-04-07T04:37:39Z",
"updated_at": "2026-06-04T20:35:32Z",
"pushed_at": "2026-06-04T20:34:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"admin-api",
"cisa",
"coordinated-disclosure",
"cve",
"cve-2026-28767",
"cwe-306",
"gardyn",
"ics-advisory",
"icsa-26-055-03",
"iot-security",
"missing-authentication",
"security-research",
"vu653116",
"vulnerability-disclosure"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-2991.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Explore a PoC for CVE-2026-2991, an auth bypass in KiviCare 4.1.2 and earlier via the patient social-login REST endpoint",
"fork": false,
"created_at": "2026-04-03T20:26:43Z",
"updated_at": "2026-06-04T15:37:33Z",
"pushed_at": "2026-06-04T15:37:20Z",
"updated_at": "2026-06-04T23:36:19Z",
"pushed_at": "2026-06-04T23:36:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-31431.json
+5 -215
View File
@@ -760,39 +760,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1225604678,
"name": "CVE-2026-31431",
"full_name": "JuanBindez\/CVE-2026-31431",
"owner": {
"login": "JuanBindez",
"id": 79322362,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79322362?v=4",
"html_url": "https:\/\/github.com\/JuanBindez",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/JuanBindez\/CVE-2026-31431",
"description": "Copy Fail - CVE-2026-31431",
"fork": false,
"created_at": "2026-04-30T12:59:11Z",
"updated_at": "2026-05-19T13:06:56Z",
"pushed_at": "2026-04-30T14:42:04Z",
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 9,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225626691,
"name": "CVE-2026-31431-patch",
@@ -826,39 +793,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1225638895,
"name": "CVE-2026-31431",
"full_name": "wesmar\/CVE-2026-31431",
"owner": {
"login": "wesmar",
"id": 61203372,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61203372?v=4",
"html_url": "https:\/\/github.com\/wesmar",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/wesmar\/CVE-2026-31431",
"description": "CVE-2026-31431 is a bug in the handling of scatter-gather I\/O operations and page cache references in the Linux kernel cryptographic subsystem — specifically in the AF_ALG socket implementation for AEAD algorithms (crypto\/af_alg.c, crypto\/aead.c).",
"fork": false,
"created_at": "2026-04-30T13:38:34Z",
"updated_at": "2026-06-04T16:55:46Z",
"pushed_at": "2026-04-30T14:46:40Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225656875,
"name": "wg.copyfail.patch",
@@ -899,42 +833,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1225659577,
"name": "copy-fail-go",
"full_name": "cs8425\/copy-fail-go",
"owner": {
"login": "cs8425",
"id": 1642768,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1642768?v=4",
"html_url": "https:\/\/github.com\/cs8425",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/cs8425\/copy-fail-go",
"description": "Copy Fail - CVE-2026-31431 in golang",
"fork": false,
"created_at": "2026-04-30T13:58:35Z",
"updated_at": "2026-04-30T16:12:31Z",
"pushed_at": "2026-04-30T14:02:45Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-31431",
"local-privilege-escalation"
],
"visibility": "public",
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225665324,
"name": "copyfail-rs",
@@ -983,114 +881,6 @@
"score": 0,
"subscribers_count": 2
},
{
"id": 1225666349,
"name": "CVE-2026-31431",
"full_name": "yxdm02\/CVE-2026-31431",
"owner": {
"login": "yxdm02",
"id": 189938092,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/189938092?v=4",
"html_url": "https:\/\/github.com\/yxdm02",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/yxdm02\/CVE-2026-31431",
"description": "CVE-2026-31431",
"fork": false,
"created_at": "2026-04-30T14:06:09Z",
"updated_at": "2026-04-30T14:18:01Z",
"pushed_at": "2026-04-30T14:16:12Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225672538,
"name": "CVE-2026-31431-old-python",
"full_name": "grishinpv\/CVE-2026-31431-old-python",
"owner": {
"login": "grishinpv",
"id": 88319804,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88319804?v=4",
"html_url": "https:\/\/github.com\/grishinpv",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/grishinpv\/CVE-2026-31431-old-python",
"description": "CVE-2026-31431 for python versions lower 3.10",
"fork": false,
"created_at": "2026-04-30T14:13:14Z",
"updated_at": "2026-04-30T14:21:18Z",
"pushed_at": "2026-04-30T14:18:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225685126,
"name": "copyfail-rs",
"full_name": "sammwyy\/copyfail-rs",
"owner": {
"login": "sammwyy",
"id": 44925968,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/44925968?v=4",
"html_url": "https:\/\/github.com\/sammwyy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/sammwyy\/copyfail-rs",
"description": "Copy Fail exploit (CVE-2026-31431) but in Rust.",
"fork": false,
"created_at": "2026-04-30T14:28:00Z",
"updated_at": "2026-05-11T16:06:57Z",
"pushed_at": "2026-04-30T14:44:20Z",
"stargazers_count": 14,
"watchers_count": 14,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"copy-fail",
"copyfail",
"cve",
"cve-2026-31431",
"local-privilege-escalation",
"lpe",
"poc",
"privilege-escalation"
],
"visibility": "public",
"forks": 2,
"watchers": 14,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225711440,
"name": "PATCH-CVE-2026-31431-Ubuntu_Debian",
@@ -6254,8 +6044,8 @@
"description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.",
"fork": false,
"created_at": "2026-05-05T04:58:21Z",
"updated_at": "2026-06-04T15:58:35Z",
"pushed_at": "2026-06-04T15:58:31Z",
"updated_at": "2026-06-04T23:57:57Z",
"pushed_at": "2026-06-04T23:57:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -7089,8 +6879,8 @@
"description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.",
"fork": false,
"created_at": "2026-05-06T09:49:14Z",
"updated_at": "2026-06-04T15:59:36Z",
"pushed_at": "2026-06-04T15:59:32Z",
"updated_at": "2026-06-04T23:58:59Z",
"pushed_at": "2026-06-04T23:58:56Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
@@ -9540,7 +9330,7 @@
"fork": false,
"created_at": "2026-06-01T18:53:44Z",
"updated_at": "2026-06-03T21:48:04Z",
"pushed_at": "2026-06-04T17:30:46Z",
"pushed_at": "2026-06-04T20:25:36Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-3180.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1259788661,
"name": "cve-2026-3180",
"full_name": "cardosource\/cve-2026-3180",
"owner": {
"login": "cardosource",
"id": 29387672,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/29387672?v=4",
"html_url": "https:\/\/github.com\/cardosource",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/cardosource\/cve-2026-3180",
"description": "Detailed Analysis of a Critical Vulnerability",
"fork": false,
"created_at": "2026-06-04T21:27:42Z",
"updated_at": "2026-06-04T21:37:01Z",
"pushed_at": "2026-06-04T21:36:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-31802.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"fork": false,
"created_at": "2026-03-28T20:49:46Z",
"updated_at": "2026-06-04T15:34:13Z",
"pushed_at": "2026-06-04T15:34:08Z",
"updated_at": "2026-06-04T23:32:54Z",
"pushed_at": "2026-06-04T23:32:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-32646.json
+50
View File
@@ -0,0 +1,50 @@
[
{
"id": 1203481534,
"name": "CVE-2026-32646",
"full_name": "MichaelAdamGroberman\/CVE-2026-32646",
"owner": {
"login": "MichaelAdamGroberman",
"id": 81723568,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/81723568?v=4",
"html_url": "https:\/\/github.com\/MichaelAdamGroberman",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/MichaelAdamGroberman\/CVE-2026-32646",
"description": "CVE-2026-32646: Missing Authentication on Admin Device Endpoint — Gardyn Home Kit (ICSA-26-055-03)",
"fork": false,
"created_at": "2026-04-07T04:37:42Z",
"updated_at": "2026-06-04T20:35:32Z",
"pushed_at": "2026-06-04T20:34:57Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"admin-api",
"cisa",
"coordinated-disclosure",
"cve",
"cve-2026-32646",
"cwe-306",
"gardyn",
"ics-advisory",
"icsa-26-055-03",
"iot-security",
"missing-authentication",
"security-research",
"vu653116",
"vulnerability-disclosure"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-32662.json
+50
View File
@@ -0,0 +1,50 @@
[
{
"id": 1203481565,
"name": "CVE-2026-32662",
"full_name": "MichaelAdamGroberman\/CVE-2026-32662",
"owner": {
"login": "MichaelAdamGroberman",
"id": 81723568,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/81723568?v=4",
"html_url": "https:\/\/github.com\/MichaelAdamGroberman",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/MichaelAdamGroberman\/CVE-2026-32662",
"description": "CVE-2026-32662: Active Debug Code in Production — Gardyn Home Kit (ICSA-26-055-03)",
"fork": false,
"created_at": "2026-04-07T04:37:45Z",
"updated_at": "2026-06-04T20:35:33Z",
"pushed_at": "2026-06-04T20:34:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cisa",
"coordinated-disclosure",
"cve",
"cve-2026-32662",
"cwe-489",
"debug-code",
"development-endpoints",
"gardyn",
"ics-advisory",
"icsa-26-055-03",
"iot-security",
"security-research",
"vu653116",
"vulnerability-disclosure"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-35904.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "CVE-2026-35904 \/ CVE-2026-35905 \/ CVE-2026-35906 — Unauth RCE, Hardcoded Root Creds & Telnet Enable in T3 Technology CPE",
"fork": false,
"created_at": "2026-06-04T15:55:22Z",
"updated_at": "2026-06-04T15:55:44Z",
"updated_at": "2026-06-04T21:47:08Z",
"pushed_at": "2026-06-04T15:55:37Z",
"stargazers_count": 0,
"watchers_count": 0,
2026/CVE-2026-3609.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-06-04T09:16:04Z",
"updated_at": "2026-06-04T21:59:07Z",
"pushed_at": "2026-06-02T11:07:33Z",
"stargazers_count": 776,
"watchers_count": 776,
"stargazers_count": 777,
"watchers_count": 777,
"has_discussions": false,
"forks_count": 115,
"allow_forking": true,
@@ -37,7 +37,7 @@
],
"visibility": "public",
"forks": 115,
"watchers": 776,
"watchers": 777,
"score": 0,
"subscribers_count": 19
},
2026/CVE-2026-41089.json
+6 -127
View File
@@ -14,12 +14,12 @@
"description": "CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)",
"fork": false,
"created_at": "2026-06-01T04:22:29Z",
"updated_at": "2026-06-04T18:52:32Z",
"updated_at": "2026-06-05T00:28:12Z",
"pushed_at": "2026-06-02T08:30:55Z",
"stargazers_count": 151,
"watchers_count": 151,
"stargazers_count": 155,
"watchers_count": 155,
"has_discussions": false,
"forks_count": 53,
"forks_count": 55,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -38,8 +38,8 @@
"windows-server"
],
"visibility": "public",
"forks": 53,
"watchers": 151,
"forks": 55,
"watchers": 155,
"score": 0,
"subscribers_count": 1
},
@@ -227,126 +227,5 @@
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
{
"id": 1259576329,
"name": "CVE-2026-41089-532",
"full_name": "Darkuoremember32\/CVE-2026-41089-532",
"owner": {
"login": "Darkuoremember32",
"id": 288928961,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/288928961?v=4",
"html_url": "https:\/\/github.com\/Darkuoremember32",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Darkuoremember32\/CVE-2026-41089-532",
"description": "CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)",
"fork": false,
"created_at": "2026-06-04T16:38:23Z",
"updated_at": "2026-06-04T18:50:12Z",
"pushed_at": "2026-06-04T16:38:58Z",
"stargazers_count": 58,
"watchers_count": 58,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"buffer-overflow",
"cldap",
"cve",
"cve-2026-41089",
"exploit",
"poc",
"vulnerability",
"vulnerability-detection",
"windows",
"windows-server"
],
"visibility": "public",
"forks": 0,
"watchers": 58,
"score": 0,
"subscribers_count": 0
},
{
"id": 1259621758,
"name": "CVE-2026-41089-470",
"full_name": "Darkuoremember32\/CVE-2026-41089-470",
"owner": {
"login": "Darkuoremember32",
"id": 288928961,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/288928961?v=4",
"html_url": "https:\/\/github.com\/Darkuoremember32",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Darkuoremember32\/CVE-2026-41089-470",
"description": "CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)",
"fork": false,
"created_at": "2026-06-04T17:33:49Z",
"updated_at": "2026-06-04T18:50:14Z",
"pushed_at": "2026-06-04T17:34:30Z",
"stargazers_count": 58,
"watchers_count": 58,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"buffer-overflow",
"cldap",
"cve",
"cve-2026-41089",
"exploit",
"poc",
"vulnerability",
"vulnerability-detection",
"windows",
"windows-server"
],
"visibility": "public",
"forks": 0,
"watchers": 58,
"score": 0,
"subscribers_count": 0
},
{
"id": 1259685238,
"name": "CVE-2026-41089-874",
"full_name": "Retrodraseparator\/CVE-2026-41089-874",
"owner": {
"login": "Retrodraseparator",
"id": 288926720,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/288926720?v=4",
"html_url": "https:\/\/github.com\/Retrodraseparator",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Retrodraseparator\/CVE-2026-41089-874",
"description": "CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)",
"fork": false,
"created_at": "2026-06-04T18:52:59Z",
"updated_at": "2026-06-04T18:53:06Z",
"pushed_at": "2026-06-04T18:53:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-41096.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": "Attack surface in the real-world environment of CVE-2026-41096",
"fork": false,
"created_at": "2026-06-04T14:11:54Z",
"updated_at": "2026-06-04T15:27:17Z",
"updated_at": "2026-06-04T20:05:01Z",
"pushed_at": "2026-06-04T14:47:36Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-41940.json
+2 -2
View File
@@ -1575,8 +1575,8 @@
"description": "Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.",
"fork": false,
"created_at": "2026-05-06T18:08:48Z",
"updated_at": "2026-06-04T16:00:07Z",
"pushed_at": "2026-06-04T15:59:49Z",
"updated_at": "2026-06-04T23:59:27Z",
"pushed_at": "2026-06-04T23:59:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-42588.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-06-04T16:28:42Z",
"updated_at": "2026-06-04T16:44:34Z",
"updated_at": "2026-06-05T00:12:36Z",
"pushed_at": "2026-06-04T16:44:30Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-42945.json
+2 -2
View File
@@ -1128,7 +1128,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1136,7 +1136,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-43284.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "A proof-of-concept demonstrating how a default, unprivileged Kubernetes Pod can achieve node-level code execution on Amazon EKS by exploiting the Dirty Frag (CVE-2026-43284) Linux kernel page-cache corruption vulnerability through shared container image layers.",
"fork": false,
"created_at": "2026-05-08T02:17:45Z",
"updated_at": "2026-05-16T03:45:38Z",
"updated_at": "2026-06-04T23:44:39Z",
"pushed_at": "2026-05-08T12:47:18Z",
"stargazers_count": 11,
"watchers_count": 11,
"stargazers_count": 12,
"watchers_count": 12,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -36,7 +36,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 11,
"watchers": 12,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-45585.json
+37 -4
View File
@@ -80,10 +80,10 @@
"description": "yellowkey bitlocker github vulnerability bypass cve-2026-45585 windows 11 security zero day exploit winre recovery mode poc nightmare eclipse chaotic eclipse exploit tool usb attack encryption hack script mitigation guide fstx winpeshl shell unpatched fix tool",
"fork": false,
"created_at": "2026-05-23T17:19:03Z",
"updated_at": "2026-06-04T18:26:31Z",
"updated_at": "2026-06-04T22:47:07Z",
"pushed_at": "2026-05-23T17:24:38Z",
"stargazers_count": 199,
"watchers_count": 199,
"stargazers_count": 200,
"watchers_count": 200,
"has_discussions": false,
"forks_count": 27,
"allow_forking": true,
@@ -109,7 +109,7 @@
],
"visibility": "public",
"forks": 27,
"watchers": 199,
"watchers": 200,
"score": 0,
"subscribers_count": 2
},
@@ -178,5 +178,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1259810824,
"name": "Yellow-Key-Check",
"full_name": "ChanderManiPandey2022\/Yellow-Key-Check",
"owner": {
"login": "ChanderManiPandey2022",
"id": 116195110,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/116195110?v=4",
"html_url": "https:\/\/github.com\/ChanderManiPandey2022",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ChanderManiPandey2022\/Yellow-Key-Check",
"description": "YellowKey | BitLocker Bypass Vulnerability (CVE-2026-45585)",
"fork": false,
"created_at": "2026-06-04T22:09:04Z",
"updated_at": "2026-06-04T22:14:57Z",
"pushed_at": "2026-06-04T22:14:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-8389.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": null,
"fork": false,
"created_at": "2026-06-04T15:25:26Z",
"updated_at": "2026-06-04T18:42:49Z",
"updated_at": "2026-06-04T23:09:09Z",
"pushed_at": "2026-06-04T15:48:58Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 12,
"watchers_count": 12,
"has_discussions": false,
"forks_count": 1,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 5,
"forks": 3,
"watchers": 12,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-9082.json
+2 -2
View File
@@ -80,8 +80,8 @@
"description": "CVE-2026-9082",
"fork": false,
"created_at": "2026-05-21T07:26:11Z",
"updated_at": "2026-05-22T10:23:35Z",
"pushed_at": "2026-05-21T07:32:39Z",
"updated_at": "2026-06-04T23:58:56Z",
"pushed_at": "2026-06-04T23:58:52Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
README.md
+66 -11
View File
@@ -237,6 +237,13 @@
- [ClimbMunchkin/fix-cve-2026-3143](https://github.com/ClimbMunchkin/fix-cve-2026-3143)
### CVE-2026-3180 (2026-03-02)
<code>The Contest Gallery – Upload &amp; Vote Photos, Media, Sell with PayPal &amp; Stripe plugin for WordPress is vulnerable to blind SQL Injection via the ‘cgLostPasswordEmail’ and the ’cgl_mail’ parameter in all versions up to, and including, 28.1.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The vulnerability's ’cgLostPasswordEmail’ parameter was patched in version 28.1.4, and the ’cgl_mail’ parameter was patched in version 28.1.5.
</code>
- [cardosource/cve-2026-3180](https://github.com/cardosource/cve-2026-3180)
### CVE-2026-3288 (2026-03-09)
<code>A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/rewrite-target` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)
@@ -916,6 +923,13 @@
- [bluedragonsecurity/CVE-2026-23416-POC](https://github.com/bluedragonsecurity/CVE-2026-23416-POC)
### CVE-2026-23479 (2026-05-05)
<code>Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow does not handle an error return from `processCommandAndResetClient` when re-executing a blocked command. If a blocked client is evicted during this flow, an authenticated attacker can trigger a use-after-free that may lead to remote code execution. This has been patched in version 8.6.3.
</code>
- [pduggusa/redis-cve-2026-23479-check](https://github.com/pduggusa/redis-cve-2026-23479-check)
### CVE-2026-23520 (2026-01-15)
<code>Arcane provides modern docker management. Prior to 1.13.0, Arcane has a command injection in the updater service. Arcane’s updater service supported lifecycle labels com.getarcaneapp.arcane.lifecycle.pre-update and com.getarcaneapp.arcane.lifecycle.post-update that allowed defining a command to run before or after a container update. The label value is passed directly to /bin/sh -c without sanitization or validation. Because any authenticated user (not limited to administrators) can create projects through the API, an attacker can create a project that specifies one of these lifecycle labels with a malicious command. When an administrator later triggers a container update (either manually or via scheduled update checks), Arcane reads the lifecycle label and executes its value as a shell command inside the container. This vulnerability is fixed in 1.13.0.
@@ -1043,6 +1057,13 @@
- [Dhananjayasj/RRAS-VULNERABILITY-CVE-2026-25172-CVE-2026-25173-CVE-2026--26111](https://github.com/Dhananjayasj/RRAS-VULNERABILITY-CVE-2026-25172-CVE-2026-25173-CVE-2026--26111)
### CVE-2026-25197 (2026-04-03)
<code>A specific endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call.
</code>
- [MichaelAdamGroberman/CVE-2026-25197](https://github.com/MichaelAdamGroberman/CVE-2026-25197)
### CVE-2026-25253 (2026-02-01)
<code>OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and automatically makes a WebSocket connection without prompting, sending a token value.
@@ -1109,6 +1130,9 @@
- [CEAarab/CVE-2026-26336-PoC](https://github.com/CEAarab/CVE-2026-26336-PoC)
### CVE-2026-26555
- [horrister/axios-supply-chain-cve-2026-26555](https://github.com/horrister/axios-supply-chain-cve-2026-26555)
### CVE-2026-26897
- [iwallplace/CVE-2026-26897-EcoOnline-DeepLink](https://github.com/iwallplace/CVE-2026-26897-EcoOnline-DeepLink)
@@ -1188,6 +1212,20 @@
- [Nayekah/Next.js-Proof-of-Concept](https://github.com/Nayekah/Next.js-Proof-of-Concept)
### CVE-2026-28766 (2026-04-03)
<code>A specific endpoint exposes all user account information for registered Gardyn users without requiring authentication.
</code>
- [MichaelAdamGroberman/CVE-2026-28766](https://github.com/MichaelAdamGroberman/CVE-2026-28766)
### CVE-2026-28767 (2026-04-03)
<code>A specific administrative endpoint notifications is accessible without proper authentication.
</code>
- [MichaelAdamGroberman/CVE-2026-28767](https://github.com/MichaelAdamGroberman/CVE-2026-28767)
### CVE-2026-28990 (2026-05-11)
<code>The issue was addressed with improved memory handling. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing a maliciously crafted image may corrupt process memory.
@@ -1305,15 +1343,9 @@
- [yandex-cloud-examples/yc-mk8s-copy-fail-mitigation](https://github.com/yandex-cloud-examples/yc-mk8s-copy-fail-mitigation)
- [mfloresdacunha/CVE-2026-31431](https://github.com/mfloresdacunha/CVE-2026-31431)
- [Boos4721/copyfail-rs](https://github.com/Boos4721/copyfail-rs)
- [JuanBindez/CVE-2026-31431](https://github.com/JuanBindez/CVE-2026-31431)
- [rshosting/CVE-2026-31431-patch](https://github.com/rshosting/CVE-2026-31431-patch)
- [wesmar/CVE-2026-31431](https://github.com/wesmar/CVE-2026-31431)
- [wgnet/wg.copyfail.patch](https://github.com/wgnet/wg.copyfail.patch)
- [cs8425/copy-fail-go](https://github.com/cs8425/copy-fail-go)
- [diemoeve/copyfail-rs](https://github.com/diemoeve/copyfail-rs)
- [yxdm02/CVE-2026-31431](https://github.com/yxdm02/CVE-2026-31431)
- [grishinpv/CVE-2026-31431-old-python](https://github.com/grishinpv/CVE-2026-31431-old-python)
- [sammwyy/copyfail-rs](https://github.com/sammwyy/copyfail-rs)
- [SunL0w/PATCH-CVE-2026-31431-Ubuntu_Debian](https://github.com/SunL0w/PATCH-CVE-2026-31431-Ubuntu_Debian)
- [scriptzteam/Paranoid-Copy-Fail-CVE-2026-31431](https://github.com/scriptzteam/Paranoid-Copy-Fail-CVE-2026-31431)
- [cozystack/copy-fail-blocker](https://github.com/cozystack/copy-fail-blocker)
@@ -1609,6 +1641,20 @@
- [virus-or-not/CVE-2026-32202](https://github.com/virus-or-not/CVE-2026-32202)
### CVE-2026-32646 (2026-04-03)
<code>A specific administrative endpoint is accessible without proper authentication, exposing device management functions.
</code>
- [MichaelAdamGroberman/CVE-2026-32646](https://github.com/MichaelAdamGroberman/CVE-2026-32646)
### CVE-2026-32662 (2026-04-03)
<code>Development and test API endpoints are present that mirror production functionality.
</code>
- [MichaelAdamGroberman/CVE-2026-32662](https://github.com/MichaelAdamGroberman/CVE-2026-32662)
### CVE-2026-32707 (2026-03-13)
<code>PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, tattu_can contains an unbounded memcpy in its multi-frame assembly loop, allowing stack memory overwrite when crafted CAN frames are processed. In deployments where tattu_can is enabled and running, a CAN-injection-capable attacker can trigger a crash (DoS) and memory corruption. This vulnerability is fixed in 1.17.0-rc2.
@@ -2193,9 +2239,6 @@
- [hnytgl/cve-2026-41089-detector](https://github.com/hnytgl/cve-2026-41089-detector)
- [hnytgl/CVE-2026-41089](https://github.com/hnytgl/CVE-2026-41089)
- [ADScanPro/CVE-2026-41089-LongLogon](https://github.com/ADScanPro/CVE-2026-41089-LongLogon)
- [Darkuoremember32/CVE-2026-41089-532](https://github.com/Darkuoremember32/CVE-2026-41089-532)
- [Darkuoremember32/CVE-2026-41089-470](https://github.com/Darkuoremember32/CVE-2026-41089-470)
- [Retrodraseparator/CVE-2026-41089-874](https://github.com/Retrodraseparator/CVE-2026-41089-874)
### CVE-2026-41091 (2026-05-20)
@@ -2713,6 +2756,7 @@
- [Mclisterjoeh2o/yellowkey-bitlocker](https://github.com/Mclisterjoeh2o/yellowkey-bitlocker)
- [andrei-majer/bitlocker-hardening](https://github.com/andrei-majer/bitlocker-hardening)
- [0xBlackash/CVE-2026-45585](https://github.com/0xBlackash/CVE-2026-45585)
- [ChanderManiPandey2022/Yellow-Key-Check](https://github.com/ChanderManiPandey2022/Yellow-Key-Check)
### CVE-2026-45659 (2026-05-22)
@@ -12279,6 +12323,13 @@
- [SexyShoelessGodofWar/CVE-2025-58780](https://github.com/SexyShoelessGodofWar/CVE-2025-58780)
### CVE-2025-58807 (2025-09-05)
<code>Cross-Site Request Forgery (CSRF) vulnerability in Dsingh Purge Varnish Cache purge-varnish allows Stored XSS.This issue affects Purge Varnish Cache: from n/a through &lt;= 2.6.
</code>
- [erikharden/purge-varnish-csrf-advisory](https://github.com/erikharden/purge-varnish-csrf-advisory)
### CVE-2025-59057 (2026-01-10)
<code>React Router is a router for React. In @remix-run/react versions 1.15.0 through 2.17.0. and react-router versions 7.0.0 through 7.8.2, a XSS vulnerability exists in in React Router's meta()/&lt;Meta&gt; APIs in Framework Mode when generating script:ld+json tags which could allow arbitrary JavaScript execution during SSR if untrusted content is used to generate the tag. There is no impact if the application is being used in Declarative Mode (&lt;BrowserRouter&gt;) or Data Mode (createBrowserRouter/&lt;RouterProvider&gt;). This issue has been patched in @remix-run/react version 2.17.1 and react-router version 7.9.0.
@@ -13286,7 +13337,11 @@
- [mjuanxd/logrus-dos-poc](https://github.com/mjuanxd/logrus-dos-poc)
### CVE-2025-65640
### CVE-2025-65640 (2026-06-04)
<code>Cross Site Scripting (XSS) vulnerability in the &quot;Task in Progress / Recent&quot; page in Arket Globe Document Intelligence 5.0.0.559 due to improper sanitization of user input in text fields when creating a new document. Specifically, when an authenticated attacker submits data containing JavaScript code within these fields, the application fails to properly sanitize or escape the content. As a result, the injected script is executed when the page is rendered, allowing the attacker to execute arbitrary JavaScript in the context of other users' browsers who view the affected page.
</code>
- [vincenzo-emanuele/CVE-2025-65640](https://github.com/vincenzo-emanuele/CVE-2025-65640)
### CVE-2025-65669 (2025-11-26)
@@ -26826,6 +26881,7 @@
- [jpselva/CVE-2023-4863](https://github.com/jpselva/CVE-2023-4863)
- [577Industries/aegisgraph](https://github.com/577Industries/aegisgraph)
- [pixelotes/lab-cve-2023-4863](https://github.com/pixelotes/lab-cve-2023-4863)
- [Shcesama/cve-2023-4863-analysis](https://github.com/Shcesama/cve-2023-4863-analysis)
### CVE-2023-4911 (2023-10-03)
@@ -29285,7 +29341,6 @@
- [yTxZx/CVE-2023-28432](https://github.com/yTxZx/CVE-2023-28432)
- [unam4/CVE-2023-28432-minio_update_rce](https://github.com/unam4/CVE-2023-28432-minio_update_rce)
- [C1ph3rX13/CVE-2023-28432](https://github.com/C1ph3rX13/CVE-2023-28432)
- [xk-mt/CVE-2023-28432](https://github.com/xk-mt/CVE-2023-28432)
- [BitWiz4rd/CVE-2023-28432](https://github.com/BitWiz4rd/CVE-2023-28432)
### CVE-2023-28434 (2023-03-22)