From 1dd7666a8d2cb676e53944b399c4a4254025ea87 Mon Sep 17 00:00:00 2001 From: motikan2010-bot Date: Fri, 5 Jun 2026 09:49:48 +0900 Subject: [PATCH] Auto Update 2026/06/05 00:49:48 --- 2014/CVE-2014-0038.json | 8 +- 2016/CVE-2016-15042.json | 4 +- 2017/CVE-2017-9417.json | 8 +- 2019/CVE-2019-1040.json | 4 +- 2020/CVE-2020-0601.json | 8 +- 2020/CVE-2020-0610.json | 4 +- 2020/CVE-2020-1472.json | 8 +- 2021/CVE-2021-33044.json | 4 +- 2021/CVE-2021-34527.json | 8 +- 2021/CVE-2021-36260.json | 8 +- 2021/CVE-2021-4034.json | 4 +- 2022/CVE-2022-44721.json | 8 +- 2023/CVE-2023-28432.json | 33 ------ 2023/CVE-2023-32434.json | 4 +- 2023/CVE-2023-39910.json | 4 +- 2023/CVE-2023-46818.json | 8 +- 2023/CVE-2023-4863.json | 33 ++++++ 2024/CVE-2024-0670.json | 4 +- 2024/CVE-2024-23222.json | 4 +- 2024/CVE-2024-31317.json | 8 +- 2024/CVE-2024-56426.json | 8 +- 2025/CVE-2025-10681.json | 4 +- 2025/CVE-2025-1242.json | 4 +- 2025/CVE-2025-14847.json | 8 +- 2025/CVE-2025-21479.json | 8 +- 2025/CVE-2025-2304.json | 4 +- 2025/CVE-2025-24257.json | 4 +- 2025/CVE-2025-31200.json | 4 +- 2025/CVE-2025-31258.json | 4 +- 2025/CVE-2025-32463.json | 12 +-- 2025/CVE-2025-36911.json | 4 +- 2025/CVE-2025-48595.json | 4 +- 2025/CVE-2025-49144.json | 4 +- 2025/CVE-2025-49844.json | 8 +- 2025/CVE-2025-52915.json | 8 +- 2025/CVE-2025-5419.json | 4 +- 2025/CVE-2025-54253.json | 4 +- 2025/CVE-2025-54424.json | 4 +- 2025/CVE-2025-55182.json | 64 ++++++------ 2025/CVE-2025-55184.json | 4 +- 2025/CVE-2025-58807.json | 35 +++++++ 2025/CVE-2025-59287.json | 4 +- 2025/CVE-2025-61882.json | 4 +- 2025/CVE-2025-62518.json | 8 +- 2025/CVE-2025-63389.json | 8 +- 2025/CVE-2025-6554.json | 4 +- 2025/CVE-2025-65640.json | 8 +- 2025/CVE-2025-66398.json | 4 +- 2025/CVE-2025-66478.json | 4 +- 2025/CVE-2025-68921.json | 4 +- 2025/CVE-2025-69985.json | 4 +- 2025/CVE-2025-70795.json | 4 +- 2025/CVE-2025-8088.json | 4 +- 2025/CVE-2025-8110.json | 4 +- 2025/CVE-2025-8671.json | 4 +- 2025/CVE-2025-9074.json | 4 +- 2026/CVE-2026-0073.json | 8 +- 2026/CVE-2026-0828.json | 4 +- 2026/CVE-2026-20182.json | 2 +- 2026/CVE-2026-20841.json | 8 +- 2026/CVE-2026-23479.json | 35 +++++++ 2026/CVE-2026-23744.json | 10 +- 2026/CVE-2026-2406.json | 4 +- 2026/CVE-2026-24061.json | 4 +- 2026/CVE-2026-24291.json | 4 +- 2026/CVE-2026-2441.json | 4 +- 2026/CVE-2026-2472.json | 4 +- 2026/CVE-2026-25197.json | 50 +++++++++ 2026/CVE-2026-25643.json | 4 +- 2026/CVE-2026-26555.json | 35 +++++++ 2026/CVE-2026-28766.json | 50 +++++++++ 2026/CVE-2026-28767.json | 50 +++++++++ 2026/CVE-2026-2991.json | 4 +- 2026/CVE-2026-31431.json | 220 +-------------------------------------- 2026/CVE-2026-3180.json | 35 +++++++ 2026/CVE-2026-31802.json | 4 +- 2026/CVE-2026-32646.json | 50 +++++++++ 2026/CVE-2026-32662.json | 50 +++++++++ 2026/CVE-2026-35904.json | 2 +- 2026/CVE-2026-3609.json | 8 +- 2026/CVE-2026-41089.json | 133 ++--------------------- 2026/CVE-2026-41096.json | 8 +- 2026/CVE-2026-41940.json | 4 +- 2026/CVE-2026-42588.json | 8 +- 2026/CVE-2026-42945.json | 4 +- 2026/CVE-2026-43284.json | 8 +- 2026/CVE-2026-45585.json | 41 +++++++- 2026/CVE-2026-8389.json | 12 +-- 2026/CVE-2026-9082.json | 4 +- README.md | 77 ++++++++++++-- 90 files changed, 772 insertions(+), 625 deletions(-) create mode 100644 2025/CVE-2025-58807.json create mode 100644 2026/CVE-2026-23479.json create mode 100644 2026/CVE-2026-25197.json create mode 100644 2026/CVE-2026-26555.json create mode 100644 2026/CVE-2026-28766.json create mode 100644 2026/CVE-2026-28767.json create mode 100644 2026/CVE-2026-3180.json create mode 100644 2026/CVE-2026-32646.json create mode 100644 2026/CVE-2026-32662.json diff --git a/2014/CVE-2014-0038.json b/2014/CVE-2014-0038.json index 19f5bcc43c..dd58bc4ba0 100644 --- a/2014/CVE-2014-0038.json +++ b/2014/CVE-2014-0038.json @@ -14,10 +14,10 @@ "description": "Linux local root exploit for CVE-2014-0038", "fork": false, "created_at": "2014-02-02T12:34:57Z", - "updated_at": "2026-05-13T19:46:33Z", + "updated_at": "2026-06-04T21:00:04Z", "pushed_at": "2014-04-18T10:26:02Z", - "stargazers_count": 198, - "watchers_count": 198, + "stargazers_count": 199, + "watchers_count": 199, "has_discussions": false, "forks_count": 40, "allow_forking": true, @@ -32,7 +32,7 @@ ], "visibility": "public", "forks": 40, - "watchers": 198, + "watchers": 199, "score": 0, "subscribers_count": 14 }, diff --git a/2016/CVE-2016-15042.json b/2016/CVE-2016-15042.json index bd3a0ddc77..776cd4074d 100644 --- a/2016/CVE-2016-15042.json +++ b/2016/CVE-2016-15042.json @@ -14,8 +14,8 @@ "description": "🛠️ Validate and demonstrate CVE-2016-15042 with a Dockerized lab for unauthenticated file uploads in WordPress file managers.", "fork": false, "created_at": "2023-10-23T05:54:10Z", - "updated_at": "2026-06-04T18:04:54Z", - "pushed_at": "2026-06-04T18:04:07Z", + "updated_at": "2026-06-04T21:16:48Z", + "pushed_at": "2026-06-04T21:16:12Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2017/CVE-2017-9417.json b/2017/CVE-2017-9417.json index d946bf8cfa..70d7c35650 100644 --- a/2017/CVE-2017-9417.json +++ b/2017/CVE-2017-9417.json @@ -14,10 +14,10 @@ "description": "Broadpwn bug (CVE-2017-9417)", "fork": false, "created_at": "2017-07-29T22:23:34Z", - "updated_at": "2026-04-22T00:35:17Z", + "updated_at": "2026-06-04T21:37:05Z", "pushed_at": "2017-09-22T12:14:25Z", - "stargazers_count": 52, - "watchers_count": 52, + "stargazers_count": 53, + "watchers_count": 53, "has_discussions": false, "forks_count": 12, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 12, - "watchers": 52, + "watchers": 53, "score": 0, "subscribers_count": 6 } diff --git a/2019/CVE-2019-1040.json b/2019/CVE-2019-1040.json index 058ecff234..67c359821c 100644 --- a/2019/CVE-2019-1040.json +++ b/2019/CVE-2019-1040.json @@ -179,8 +179,8 @@ "description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.", "fork": false, "created_at": "2025-12-06T19:56:12Z", - "updated_at": "2026-06-04T18:02:21Z", - "pushed_at": "2026-06-04T18:01:29Z", + "updated_at": "2026-06-04T23:10:15Z", + "pushed_at": "2026-06-04T23:10:11Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2020/CVE-2020-0601.json b/2020/CVE-2020-0601.json index ba135a80b0..ee7b843183 100644 --- a/2020/CVE-2020-0601.json +++ b/2020/CVE-2020-0601.json @@ -184,10 +184,10 @@ "description": "PoC for CVE-2020-0601- Windows CryptoAPI (Crypt32.dll)", "fork": false, "created_at": "2020-01-15T23:07:41Z", - "updated_at": "2026-05-13T19:47:11Z", + "updated_at": "2026-06-04T19:19:05Z", "pushed_at": "2020-01-20T23:33:19Z", - "stargazers_count": 887, - "watchers_count": 887, + "stargazers_count": 888, + "watchers_count": 888, "has_discussions": false, "forks_count": 257, "allow_forking": true, @@ -200,7 +200,7 @@ ], "visibility": "public", "forks": 257, - "watchers": 887, + "watchers": 888, "score": 0, "subscribers_count": 29 }, diff --git a/2020/CVE-2020-0610.json b/2020/CVE-2020-0610.json index b5ceed3bcf..f25dc1d585 100644 --- a/2020/CVE-2020-0610.json +++ b/2020/CVE-2020-0610.json @@ -58,8 +58,8 @@ "description": "🔍 Create a safe lab environment for testing CVE-2020-0610, a critical RCE vulnerability in Windows RD Gateway, with minimal disruption using DTLS techniques.", "fork": false, "created_at": "2025-09-04T13:21:35Z", - "updated_at": "2026-06-04T18:04:48Z", - "pushed_at": "2026-06-04T18:04:01Z", + "updated_at": "2026-06-04T21:16:11Z", + "pushed_at": "2026-06-04T21:16:06Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2020/CVE-2020-1472.json b/2020/CVE-2020-1472.json index 40288eb571..9e794dc4a1 100644 --- a/2020/CVE-2020-1472.json +++ b/2020/CVE-2020-1472.json @@ -52,7 +52,7 @@ "stargazers_count": 1819, "watchers_count": 1819, "has_discussions": false, - "forks_count": 355, + "forks_count": 356, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,7 +60,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 355, + "forks": 356, "watchers": 1819, "score": 0, "subscribers_count": 84 @@ -2383,8 +2383,8 @@ "description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.", "fork": false, "created_at": "2025-12-06T10:17:38Z", - "updated_at": "2026-06-04T17:22:05Z", - "pushed_at": "2026-06-04T17:22:01Z", + "updated_at": "2026-06-04T23:50:13Z", + "pushed_at": "2026-06-04T23:50:10Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2021/CVE-2021-33044.json b/2021/CVE-2021-33044.json index 3b2bb0ed5a..0b6455a7e5 100644 --- a/2021/CVE-2021-33044.json +++ b/2021/CVE-2021-33044.json @@ -212,8 +212,8 @@ "description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.", "fork": false, "created_at": "2026-03-28T17:42:44Z", - "updated_at": "2026-06-04T18:05:11Z", - "pushed_at": "2026-06-04T18:04:34Z", + "updated_at": "2026-06-04T23:17:17Z", + "pushed_at": "2026-06-04T23:17:14Z", "stargazers_count": 4, "watchers_count": 4, "has_discussions": false, diff --git a/2021/CVE-2021-34527.json b/2021/CVE-2021-34527.json index 1e45a6fd71..1d3bce78ec 100644 --- a/2021/CVE-2021-34527.json +++ b/2021/CVE-2021-34527.json @@ -119,10 +119,10 @@ "description": "PrintNightmare - Windows Print Spooler RCE\/LPE Vulnerability (CVE-2021-34527, CVE-2021-1675) proof of concept exploits", "fork": false, "created_at": "2021-07-03T15:15:12Z", - "updated_at": "2026-06-04T07:07:16Z", + "updated_at": "2026-06-04T23:59:11Z", "pushed_at": "2021-09-13T12:12:17Z", - "stargazers_count": 173, - "watchers_count": 173, + "stargazers_count": 174, + "watchers_count": 174, "has_discussions": false, "forks_count": 41, "allow_forking": true, @@ -140,7 +140,7 @@ ], "visibility": "public", "forks": 41, - "watchers": 173, + "watchers": 174, "score": 0, "subscribers_count": 4 }, diff --git a/2021/CVE-2021-36260.json b/2021/CVE-2021-36260.json index 94d3f1faad..cbfe471a68 100644 --- a/2021/CVE-2021-36260.json +++ b/2021/CVE-2021-36260.json @@ -47,10 +47,10 @@ "description": "command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.", "fork": false, "created_at": "2021-10-27T15:51:12Z", - "updated_at": "2026-05-23T10:52:36Z", + "updated_at": "2026-06-04T23:49:01Z", "pushed_at": "2021-10-28T06:37:37Z", - "stargazers_count": 292, - "watchers_count": 292, + "stargazers_count": 293, + "watchers_count": 293, "has_discussions": false, "forks_count": 77, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 77, - "watchers": 292, + "watchers": 293, "score": 0, "subscribers_count": 5 }, diff --git a/2021/CVE-2021-4034.json b/2021/CVE-2021-4034.json index 9026ebba21..60554e08a0 100644 --- a/2021/CVE-2021-4034.json +++ b/2021/CVE-2021-4034.json @@ -2017,8 +2017,8 @@ "description": "🚀 Enhance your penetration testing with PwnKit Helper, a simple tool for exploiting the CVE-2021-4034 vulnerability in pkexec for local privilege escalation.", "fork": false, "created_at": "2025-10-01T09:53:03Z", - "updated_at": "2026-06-04T18:12:40Z", - "pushed_at": "2026-06-04T18:12:35Z", + "updated_at": "2026-06-04T21:23:28Z", + "pushed_at": "2026-06-04T21:23:24Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2022/CVE-2022-44721.json b/2022/CVE-2022-44721.json index 00eae2df6a..01e718c4aa 100644 --- a/2022/CVE-2022-44721.json +++ b/2022/CVE-2022-44721.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2022-12-03T11:04:17Z", - "updated_at": "2024-11-07T05:28:12Z", + "updated_at": "2026-06-04T21:35:37Z", "pushed_at": "2022-12-02T14:38:27Z", - "stargazers_count": 23, - "watchers_count": 23, + "stargazers_count": 24, + "watchers_count": 24, "has_discussions": false, "forks_count": 8, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 8, - "watchers": 23, + "watchers": 24, "score": 0, "subscribers_count": 0 } diff --git a/2023/CVE-2023-28432.json b/2023/CVE-2023-28432.json index 59099dbe33..b34c9bab41 100644 --- a/2023/CVE-2023-28432.json +++ b/2023/CVE-2023-28432.json @@ -530,39 +530,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 741968176, - "name": "CVE-2023-28432", - "full_name": "xk-mt\/CVE-2023-28432", - "owner": { - "login": "xk-mt", - "id": 77874955, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/77874955?v=4", - "html_url": "https:\/\/github.com\/xk-mt", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/xk-mt\/CVE-2023-28432", - "description": "minio系统存在信息泄露漏洞，未经身份认证的远程攻击，通过发送特殊POST请求到\/minio\/bootstrap\/v1\/verify即可获取所有敏感信息，其中包括MINIO_SECRET_KEY和MINIO_ROOT_PASSWORD，可能导致管理员账号密码泄露。", - "fork": false, - "created_at": "2024-01-11T13:41:20Z", - "updated_at": "2025-07-27T06:32:03Z", - "pushed_at": "2024-01-15T08:35:51Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, { "id": 786121269, "name": "CVE-2023-28432", diff --git a/2023/CVE-2023-32434.json b/2023/CVE-2023-32434.json index f35867a60e..cb07ae26a5 100644 --- a/2023/CVE-2023-32434.json +++ b/2023/CVE-2023-32434.json @@ -47,8 +47,8 @@ "description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙", "fork": false, "created_at": "2025-08-13T09:19:29Z", - "updated_at": "2026-06-04T18:00:31Z", - "pushed_at": "2026-06-04T17:59:25Z", + "updated_at": "2026-06-04T21:12:07Z", + "pushed_at": "2026-06-04T21:11:57Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2023/CVE-2023-39910.json b/2023/CVE-2023-39910.json index dc4ad1b974..b2989e6838 100644 --- a/2023/CVE-2023-39910.json +++ b/2023/CVE-2023-39910.json @@ -66,8 +66,8 @@ "description": "🔒 Analyze the CVE-2023-39910 vulnerability in Libbitcoin Explorer to understand its impact on Bitcoin wallet security and protect your assets.", "fork": false, "created_at": "2026-01-07T14:24:08Z", - "updated_at": "2026-06-04T14:29:51Z", - "pushed_at": "2026-06-04T14:28:23Z", + "updated_at": "2026-06-04T22:22:23Z", + "pushed_at": "2026-06-04T22:22:19Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2023/CVE-2023-46818.json b/2023/CVE-2023-46818.json index b6335c5b61..948e6dea45 100644 --- a/2023/CVE-2023-46818.json +++ b/2023/CVE-2023-46818.json @@ -212,10 +212,10 @@ "description": "An issue was discovered in ISPConfig before 3.2.11p1. PHP code injection can be achieved in the language file editor by an admin if admin_allow_langedit is enabled.", "fork": false, "created_at": "2025-06-14T13:38:03Z", - "updated_at": "2026-05-27T13:03:03Z", + "updated_at": "2026-06-04T21:12:14Z", "pushed_at": "2025-07-06T11:21:24Z", - "stargazers_count": 15, - "watchers_count": 15, + "stargazers_count": 16, + "watchers_count": 16, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -226,7 +226,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 15, + "watchers": 16, "score": 0, "subscribers_count": 1 }, diff --git a/2023/CVE-2023-4863.json b/2023/CVE-2023-4863.json index 2ec129bb71..6d5d0c73b1 100644 --- a/2023/CVE-2023-4863.json +++ b/2023/CVE-2023-4863.json @@ -427,5 +427,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1258652617, + "name": "cve-2023-4863-analysis", + "full_name": "Shcesama\/cve-2023-4863-analysis", + "owner": { + "login": "Shcesama", + "id": 140816202, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/140816202?v=4", + "html_url": "https:\/\/github.com\/Shcesama", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Shcesama\/cve-2023-4863-analysis", + "description": null, + "fork": false, + "created_at": "2026-06-03T19:36:34Z", + "updated_at": "2026-06-04T20:32:33Z", + "pushed_at": "2026-06-04T20:15:13Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2024/CVE-2024-0670.json b/2024/CVE-2024-0670.json index cedfeb17bb..88fae8cdca 100644 --- a/2024/CVE-2024-0670.json +++ b/2024/CVE-2024-0670.json @@ -172,8 +172,8 @@ "description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.", "fork": false, "created_at": "2026-01-08T01:32:09Z", - "updated_at": "2026-06-04T14:29:30Z", - "pushed_at": "2026-06-04T14:28:26Z", + "updated_at": "2026-06-04T22:22:48Z", + "pushed_at": "2026-06-04T22:22:44Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-23222.json b/2024/CVE-2024-23222.json index d8bffa52bf..fe18304799 100644 --- a/2024/CVE-2024-23222.json +++ b/2024/CVE-2024-23222.json @@ -80,8 +80,8 @@ "description": "Analyze and deobfuscate the Coruna Exploit Kit (CVE-2024-23222) to enhance understanding and detection of related threats.", "fork": false, "created_at": "2026-03-15T16:36:07Z", - "updated_at": "2026-06-04T15:24:36Z", - "pushed_at": "2026-06-04T15:24:32Z", + "updated_at": "2026-06-04T23:23:08Z", + "pushed_at": "2026-06-04T23:23:05Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2024/CVE-2024-31317.json b/2024/CVE-2024-31317.json index 1d911facb2..b048f20eb1 100644 --- a/2024/CVE-2024-31317.json +++ b/2024/CVE-2024-31317.json @@ -179,10 +179,10 @@ "description": "Quick tool for utilizing CVE-2024-31317 on Android", "fork": false, "created_at": "2025-10-20T13:47:09Z", - "updated_at": "2026-06-01T15:51:17Z", + "updated_at": "2026-06-04T23:50:08Z", "pushed_at": "2026-02-16T10:22:42Z", - "stargazers_count": 64, - "watchers_count": 64, + "stargazers_count": 65, + "watchers_count": 65, "has_discussions": false, "forks_count": 8, "allow_forking": true, @@ -193,7 +193,7 @@ "topics": [], "visibility": "public", "forks": 8, - "watchers": 64, + "watchers": 65, "score": 0, "subscribers_count": 1 }, diff --git a/2024/CVE-2024-56426.json b/2024/CVE-2024-56426.json index 35e67693b3..043056cd2b 100644 --- a/2024/CVE-2024-56426.json +++ b/2024/CVE-2024-56426.json @@ -14,10 +14,10 @@ "description": "A PoC of the CVE-2024-56426 vulnerability.", "fork": false, "created_at": "2026-04-07T12:02:52Z", - "updated_at": "2026-06-04T04:46:48Z", + "updated_at": "2026-06-04T20:49:39Z", "pushed_at": "2026-06-04T15:58:37Z", - "stargazers_count": 9, - "watchers_count": 9, + "stargazers_count": 10, + "watchers_count": 10, "has_discussions": false, "forks_count": 4, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 4, - "watchers": 9, + "watchers": 10, "score": 0, "subscribers_count": 0 } diff --git a/2025/CVE-2025-10681.json b/2025/CVE-2025-10681.json index 0a09456441..3a060f0040 100644 --- a/2025/CVE-2025-10681.json +++ b/2025/CVE-2025-10681.json @@ -14,8 +14,8 @@ "description": "CVE-2025-10681: Hardcoded Azure Blob Storage Account Key — Gardyn Home Kit (ICSA-26-055-03)", "fork": false, "created_at": "2026-04-07T04:37:31Z", - "updated_at": "2026-04-27T05:47:21Z", - "pushed_at": "2026-04-27T05:47:16Z", + "updated_at": "2026-06-04T20:35:28Z", + "pushed_at": "2026-06-04T20:34:48Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-1242.json b/2025/CVE-2025-1242.json index 2707eea517..8f658d840d 100644 --- a/2025/CVE-2025-1242.json +++ b/2025/CVE-2025-1242.json @@ -14,8 +14,8 @@ "description": "CVE-2025-1242: Hardcoded iothubowner Connection String — Gardyn Home Kit (ICSA-26-055-03)", "fork": false, "created_at": "2026-04-07T04:37:29Z", - "updated_at": "2026-04-27T05:47:07Z", - "pushed_at": "2026-04-27T05:47:05Z", + "updated_at": "2026-06-04T20:35:28Z", + "pushed_at": "2026-06-04T20:34:45Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-14847.json b/2025/CVE-2025-14847.json index 7853f39947..541711dbf7 100644 --- a/2025/CVE-2025-14847.json +++ b/2025/CVE-2025-14847.json @@ -14,8 +14,8 @@ "description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.", "fork": false, "created_at": "2025-07-30T15:52:00Z", - "updated_at": "2026-06-04T14:37:57Z", - "pushed_at": "2026-06-04T14:34:34Z", + "updated_at": "2026-06-04T22:29:37Z", + "pushed_at": "2026-06-04T22:29:33Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -1129,8 +1129,8 @@ "description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.", "fork": false, "created_at": "2026-01-14T06:05:44Z", - "updated_at": "2026-06-04T14:37:19Z", - "pushed_at": "2026-06-04T14:33:16Z", + "updated_at": "2026-06-04T22:28:12Z", + "pushed_at": "2026-06-04T22:28:09Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-21479.json b/2025/CVE-2025-21479.json index 542f203a7a..8cd732983a 100644 --- a/2025/CVE-2025-21479.json +++ b/2025/CVE-2025-21479.json @@ -14,10 +14,10 @@ "description": "CVE-2025-21479 proof-of-concept, I think", "fork": false, "created_at": "2025-06-19T19:47:52Z", - "updated_at": "2026-06-02T11:32:05Z", + "updated_at": "2026-06-04T20:37:08Z", "pushed_at": "2025-08-16T06:52:13Z", - "stargazers_count": 253, - "watchers_count": 253, + "stargazers_count": 254, + "watchers_count": 254, "has_discussions": false, "forks_count": 57, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 57, - "watchers": 253, + "watchers": 254, "score": 0, "subscribers_count": 2 }, diff --git a/2025/CVE-2025-2304.json b/2025/CVE-2025-2304.json index 7577dffbcc..05f78f0d66 100644 --- a/2025/CVE-2025-2304.json +++ b/2025/CVE-2025-2304.json @@ -412,8 +412,8 @@ "description": "🛠️ Exploit CVE-2025-2304 in Camaleon CMS easily with this Python script for privilege escalation, tested on version 2.9.0.", "fork": false, "created_at": "2026-02-14T20:01:20Z", - "updated_at": "2026-06-04T15:01:38Z", - "pushed_at": "2026-06-04T15:00:41Z", + "updated_at": "2026-06-04T22:57:42Z", + "pushed_at": "2026-06-04T22:57:39Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-24257.json b/2025/CVE-2025-24257.json index 47873d88b5..39e2aa19bb 100644 --- a/2025/CVE-2025-24257.json +++ b/2025/CVE-2025-24257.json @@ -14,8 +14,8 @@ "description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis", "fork": false, "created_at": "2026-04-04T03:42:55Z", - "updated_at": "2026-06-04T15:40:07Z", - "pushed_at": "2026-06-04T15:37:33Z", + "updated_at": "2026-06-04T23:36:48Z", + "pushed_at": "2026-06-04T23:36:44Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-31200.json b/2025/CVE-2025-31200.json index 6c61d0259e..0c9a076455 100644 --- a/2025/CVE-2025-31200.json +++ b/2025/CVE-2025-31200.json @@ -52,7 +52,7 @@ "stargazers_count": 198, "watchers_count": 198, "has_discussions": false, - "forks_count": 30, + "forks_count": 31, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -69,7 +69,7 @@ "zero-day" ], "visibility": "public", - "forks": 30, + "forks": 31, "watchers": 198, "score": 0, "subscribers_count": 2 diff --git a/2025/CVE-2025-31258.json b/2025/CVE-2025-31258.json index 0860dda1ab..3b529f87d8 100644 --- a/2025/CVE-2025-31258.json +++ b/2025/CVE-2025-31258.json @@ -14,8 +14,8 @@ "description": "🔓 Explore CVE-2025-31258 with this PoC demonstrating partial sandbox escape using RemoteViewServices for practical 1-day security practice.", "fork": false, "created_at": "2020-06-23T15:20:11Z", - "updated_at": "2026-06-04T18:06:58Z", - "pushed_at": "2026-06-04T18:06:41Z", + "updated_at": "2026-06-04T21:18:02Z", + "pushed_at": "2026-06-04T21:17:57Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-32463.json b/2025/CVE-2025-32463.json index e5ad20827c..c0f9cacd71 100644 --- a/2025/CVE-2025-32463.json +++ b/2025/CVE-2025-32463.json @@ -645,8 +645,8 @@ "description": "Demonstrate CVE-2025-32463 with this PoC for sudo's chroot feature. Explore the exploit and its impact on vulnerable sudo versions. 🐱💻🔒", "fork": false, "created_at": "2025-07-04T18:20:09Z", - "updated_at": "2026-06-04T17:59:09Z", - "pushed_at": "2026-06-04T17:58:05Z", + "updated_at": "2026-06-04T21:10:31Z", + "pushed_at": "2026-06-04T21:10:05Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -1628,8 +1628,8 @@ "description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.", "fork": false, "created_at": "2025-09-20T00:42:07Z", - "updated_at": "2026-06-04T18:08:07Z", - "pushed_at": "2026-06-04T18:08:03Z", + "updated_at": "2026-06-04T21:19:15Z", + "pushed_at": "2026-06-04T21:19:11Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -1680,8 +1680,8 @@ "description": null, "fork": false, "created_at": "2025-09-20T02:01:08Z", - "updated_at": "2026-06-04T18:07:58Z", - "pushed_at": "2026-06-04T18:07:53Z", + "updated_at": "2026-06-04T21:19:30Z", + "pushed_at": "2026-06-04T21:19:17Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-36911.json b/2025/CVE-2025-36911.json index 7c2e88ab0b..871cd002f5 100644 --- a/2025/CVE-2025-36911.json +++ b/2025/CVE-2025-36911.json @@ -294,8 +294,8 @@ "description": "🔍 Scan and research CVE-2025-36911 vulnerabilities with WPair, a specialized tool for Android built in Kotlin, ensuring your applications remain secure.", "fork": false, "created_at": "2026-01-29T01:59:47Z", - "updated_at": "2026-06-04T14:50:54Z", - "pushed_at": "2026-06-04T14:47:59Z", + "updated_at": "2026-06-04T22:44:02Z", + "pushed_at": "2026-06-04T22:43:59Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-48595.json b/2025/CVE-2025-48595.json index 7b57b9d466..c3a23ff4d8 100644 --- a/2025/CVE-2025-48595.json +++ b/2025/CVE-2025-48595.json @@ -19,7 +19,7 @@ "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 0, "score": 0, "subscribers_count": 0 diff --git a/2025/CVE-2025-49144.json b/2025/CVE-2025-49144.json index 6feda2e47b..7fb102c699 100644 --- a/2025/CVE-2025-49144.json +++ b/2025/CVE-2025-49144.json @@ -251,8 +251,8 @@ "description": null, "fork": false, "created_at": "2025-09-19T17:17:19Z", - "updated_at": "2026-06-04T18:08:01Z", - "pushed_at": "2026-06-04T18:07:47Z", + "updated_at": "2026-06-04T21:19:09Z", + "pushed_at": "2026-06-04T21:19:05Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-49844.json b/2025/CVE-2025-49844.json index 7e17c24ee2..d566720b9c 100644 --- a/2025/CVE-2025-49844.json +++ b/2025/CVE-2025-49844.json @@ -14,8 +14,8 @@ "description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.", "fork": false, "created_at": "2019-04-13T07:51:09Z", - "updated_at": "2026-06-04T18:29:25Z", - "pushed_at": "2026-06-04T18:29:13Z", + "updated_at": "2026-06-04T21:38:55Z", + "pushed_at": "2026-06-04T21:38:37Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -66,8 +66,8 @@ "description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.", "fork": false, "created_at": "2022-04-06T09:27:39Z", - "updated_at": "2026-06-04T18:30:02Z", - "pushed_at": "2026-06-04T18:29:58Z", + "updated_at": "2026-06-04T21:39:38Z", + "pushed_at": "2026-06-04T21:39:34Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-52915.json b/2025/CVE-2025-52915.json index 7001e76a62..cbd3cf7044 100644 --- a/2025/CVE-2025-52915.json +++ b/2025/CVE-2025-52915.json @@ -14,10 +14,10 @@ "description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).", "fork": false, "created_at": "2023-12-05T14:52:11Z", - "updated_at": "2026-06-04T09:16:04Z", + "updated_at": "2026-06-04T21:59:07Z", "pushed_at": "2026-06-02T11:07:33Z", - "stargazers_count": 776, - "watchers_count": 776, + "stargazers_count": 777, + "watchers_count": 777, "has_discussions": false, "forks_count": 115, "allow_forking": true, @@ -37,7 +37,7 @@ ], "visibility": "public", "forks": 115, - "watchers": 776, + "watchers": 777, "score": 0, "subscribers_count": 19 } diff --git a/2025/CVE-2025-5419.json b/2025/CVE-2025-5419.json index 3afc7bcb61..d5607ac76a 100644 --- a/2025/CVE-2025-5419.json +++ b/2025/CVE-2025-5419.json @@ -14,8 +14,8 @@ "description": "🛡️ Analyze CVE-2025-5419 to exploit an uninitialized read vulnerability in V8 for arbitrary read\/write access within the sandbox environment.", "fork": false, "created_at": "2023-01-25T04:41:49Z", - "updated_at": "2026-06-04T14:59:44Z", - "pushed_at": "2026-06-04T14:58:38Z", + "updated_at": "2026-06-04T22:55:23Z", + "pushed_at": "2026-06-04T22:55:20Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-54253.json b/2025/CVE-2025-54253.json index 0a6566230d..e357eb84d4 100644 --- a/2025/CVE-2025-54253.json +++ b/2025/CVE-2025-54253.json @@ -67,8 +67,8 @@ "description": "🐙 CVE-2025-54253 exploit demo for Adobe AEM Forms on JEE: OGNL injection to RCE with PoC, Python 3.10 exploit code, reproducer and mitigation guidance.", "fork": false, "created_at": "2025-08-17T22:04:33Z", - "updated_at": "2026-06-04T18:01:25Z", - "pushed_at": "2026-06-04T18:01:00Z", + "updated_at": "2026-06-04T21:13:24Z", + "pushed_at": "2026-06-04T21:13:20Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2025/CVE-2025-54424.json b/2025/CVE-2025-54424.json index 9c2a29cf00..f7f09da0a2 100644 --- a/2025/CVE-2025-54424.json +++ b/2025/CVE-2025-54424.json @@ -53,8 +53,8 @@ "description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐", "fork": false, "created_at": "2025-08-14T05:16:16Z", - "updated_at": "2026-06-04T18:00:56Z", - "pushed_at": "2026-06-04T18:00:27Z", + "updated_at": "2026-06-04T21:13:15Z", + "pushed_at": "2026-06-04T21:12:52Z", "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, diff --git a/2025/CVE-2025-55182.json b/2025/CVE-2025-55182.json index 144e2ac5cb..8d5ff2af65 100644 --- a/2025/CVE-2025-55182.json +++ b/2025/CVE-2025-55182.json @@ -14,8 +14,8 @@ "description": "🔍 Demonstrate CVE-2025-55182, a critical vulnerability in React Server Components allowing unauthenticated arbitrary code execution.", "fork": false, "created_at": "2021-09-18T02:04:33Z", - "updated_at": "2026-06-04T14:18:33Z", - "pushed_at": "2026-06-04T14:17:17Z", + "updated_at": "2026-06-04T22:10:30Z", + "pushed_at": "2026-06-04T22:10:27Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -66,8 +66,8 @@ "description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.", "fork": false, "created_at": "2022-06-17T10:19:10Z", - "updated_at": "2026-06-04T14:17:55Z", - "pushed_at": "2026-06-04T14:16:55Z", + "updated_at": "2026-06-04T22:10:43Z", + "pushed_at": "2026-06-04T22:10:08Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -151,8 +151,8 @@ "description": "🔍 Detect vulnerabilities CVE-2025-55182 and CVE-2025-66478 in Next.js apps with this reliable command-line scanner.", "fork": false, "created_at": "2023-11-27T18:17:43Z", - "updated_at": "2026-06-04T14:18:42Z", - "pushed_at": "2026-06-04T14:16:59Z", + "updated_at": "2026-06-04T22:10:47Z", + "pushed_at": "2026-06-04T22:10:11Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -203,8 +203,8 @@ "description": "🚨 Exploit CVE-2025-55182, a critical RCE vulnerability in React Server Components for Next.js apps; enables testing for prototype pollution risks.", "fork": false, "created_at": "2024-04-24T02:36:56Z", - "updated_at": "2026-06-04T14:21:47Z", - "pushed_at": "2026-06-04T14:18:18Z", + "updated_at": "2026-06-04T22:11:20Z", + "pushed_at": "2026-06-04T22:11:16Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -251,8 +251,8 @@ "description": "🚨 Exploit and scan for CVE-2025-55182, a critical React\/Next.js vulnerability enabling remote code execution through prototype pollution techniques.", "fork": false, "created_at": "2024-05-28T16:48:51Z", - "updated_at": "2026-06-04T14:19:46Z", - "pushed_at": "2026-06-04T14:16:24Z", + "updated_at": "2026-06-04T22:10:00Z", + "pushed_at": "2026-06-04T22:09:38Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -303,8 +303,8 @@ "description": null, "fork": false, "created_at": "2024-11-29T12:32:19Z", - "updated_at": "2026-06-04T14:18:36Z", - "pushed_at": "2026-06-04T14:17:46Z", + "updated_at": "2026-06-04T22:10:55Z", + "pushed_at": "2026-06-04T22:10:51Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -352,8 +352,8 @@ "description": "🛠️ Exploit CVE-2025-55182 effortlessly with this GUI tool for vulnerability detection, command execution, and Shell reverse connections.", "fork": false, "created_at": "2025-04-21T22:04:31Z", - "updated_at": "2026-06-04T14:22:37Z", - "pushed_at": "2026-06-04T14:21:15Z", + "updated_at": "2026-06-04T22:14:49Z", + "pushed_at": "2026-06-04T22:14:44Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -406,8 +406,8 @@ "description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.", "fork": false, "created_at": "2025-06-06T16:34:46Z", - "updated_at": "2026-06-04T14:20:13Z", - "pushed_at": "2026-06-04T14:17:10Z", + "updated_at": "2026-06-04T22:10:52Z", + "pushed_at": "2026-06-04T22:10:20Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -458,8 +458,8 @@ "description": "⚠️ Explore a vulnerable environment to test security scanners against the CVE-2025-55182 RCE flaw in React Server Components and Next.js applications.", "fork": false, "created_at": "2025-07-15T18:33:34Z", - "updated_at": "2026-06-04T14:19:40Z", - "pushed_at": "2026-06-04T14:18:12Z", + "updated_at": "2026-06-04T22:11:16Z", + "pushed_at": "2026-06-04T22:11:13Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -12218,8 +12218,8 @@ "description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.", "fork": false, "created_at": "2025-12-24T14:48:19Z", - "updated_at": "2026-06-04T14:20:19Z", - "pushed_at": "2026-06-04T14:16:53Z", + "updated_at": "2026-06-04T22:10:01Z", + "pushed_at": "2026-06-04T22:09:57Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -12303,8 +12303,8 @@ "description": "🚨 Identify and address CVE-2025-55182, a critical React Server vulnerability allowing remote code execution without authentication.", "fork": false, "created_at": "2025-12-24T18:44:51Z", - "updated_at": "2026-06-04T14:17:27Z", - "pushed_at": "2026-06-04T14:16:05Z", + "updated_at": "2026-06-04T22:09:11Z", + "pushed_at": "2026-06-04T22:09:08Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -12352,8 +12352,8 @@ "description": "🚨 Demonstrate CVE-2025-55182, a critical React vulnerability allowing remote code execution via prototype chain pollution in `react-server-dom-webpack@19.0.0`.", "fork": false, "created_at": "2025-12-24T18:48:07Z", - "updated_at": "2026-06-04T14:17:20Z", - "pushed_at": "2026-06-04T14:16:11Z", + "updated_at": "2026-06-04T22:09:18Z", + "pushed_at": "2026-06-04T22:09:14Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -12437,8 +12437,8 @@ "description": "🔍 Exploit CVE-2025-55182 in Next.js with this versatile tool for security research, featuring advanced payloads and WAF bypass techniques.", "fork": false, "created_at": "2025-12-25T19:28:28Z", - "updated_at": "2026-06-04T14:21:09Z", - "pushed_at": "2026-06-04T14:17:42Z", + "updated_at": "2026-06-04T22:10:56Z", + "pushed_at": "2026-06-04T22:10:52Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -12639,8 +12639,8 @@ "description": "⚡ Discover and exploit CVE-2025-55182 with this PoC, offering reliable remote code execution tests for React Server Components in Next.js.", "fork": false, "created_at": "2025-12-26T22:26:55Z", - "updated_at": "2026-06-04T14:20:45Z", - "pushed_at": "2026-06-04T14:17:41Z", + "updated_at": "2026-06-04T22:10:54Z", + "pushed_at": "2026-06-04T22:10:50Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -12909,8 +12909,8 @@ "description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.", "fork": false, "created_at": "2026-01-02T01:28:57Z", - "updated_at": "2026-06-04T14:24:39Z", - "pushed_at": "2026-06-04T14:23:18Z", + "updated_at": "2026-06-04T22:17:09Z", + "pushed_at": "2026-06-04T22:17:05Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -13430,8 +13430,8 @@ "description": "🔍 Exploit CVE-2025-55182 vulnerabilities in Next.js and React with this efficient framework for rapid testing and assessment.", "fork": false, "created_at": "2026-01-08T16:28:04Z", - "updated_at": "2026-06-04T14:30:10Z", - "pushed_at": "2026-06-04T14:29:25Z", + "updated_at": "2026-06-04T22:23:59Z", + "pushed_at": "2026-06-04T22:23:55Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-55184.json b/2025/CVE-2025-55184.json index 089e6deead..e2702b2026 100644 --- a/2025/CVE-2025-55184.json +++ b/2025/CVE-2025-55184.json @@ -289,8 +289,8 @@ "description": "🛠️ Test and validate the CVE-2025-55184 vulnerability in React Server Components to enhance your application's security against denial-of-service attacks.", "fork": false, "created_at": "2026-01-02T05:04:03Z", - "updated_at": "2026-06-04T14:25:49Z", - "pushed_at": "2026-06-04T14:23:54Z", + "updated_at": "2026-06-04T22:17:45Z", + "pushed_at": "2026-06-04T22:17:40Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-58807.json b/2025/CVE-2025-58807.json new file mode 100644 index 0000000000..9ebd239fde --- /dev/null +++ b/2025/CVE-2025-58807.json @@ -0,0 +1,35 @@ +[ + { + "id": 1259738884, + "name": "purge-varnish-csrf-advisory", + "full_name": "erikharden\/purge-varnish-csrf-advisory", + "owner": { + "login": "erikharden", + "id": 4271204, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4271204?v=4", + "html_url": "https:\/\/github.com\/erikharden", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/erikharden\/purge-varnish-csrf-advisory", + "description": "Security advisory and CSRF patch for WordPress purge-varnish plugin (CVE-2025-58807)", + "fork": false, + "created_at": "2026-06-04T20:08:42Z", + "updated_at": "2026-06-04T20:08:49Z", + "pushed_at": "2026-06-04T20:09:05Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2025/CVE-2025-59287.json b/2025/CVE-2025-59287.json index fe772a38fe..03f2cc6479 100644 --- a/2025/CVE-2025-59287.json +++ b/2025/CVE-2025-59287.json @@ -200,8 +200,8 @@ "description": "🔍 Analyze WSUS deserialization behavior to enhance security, generate reports, and identify configuration weaknesses in your infrastructure.", "fork": false, "created_at": "2026-01-29T02:16:04Z", - "updated_at": "2026-06-04T14:48:07Z", - "pushed_at": "2026-06-04T14:48:02Z", + "updated_at": "2026-06-04T22:44:03Z", + "pushed_at": "2026-06-04T22:44:00Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-61882.json b/2025/CVE-2025-61882.json index 288603393d..6755e76492 100644 --- a/2025/CVE-2025-61882.json +++ b/2025/CVE-2025-61882.json @@ -14,8 +14,8 @@ "description": "🔍 Detect vulnerabilities CVE-2025-61882 and CVE-2025-61884 in Oracle E-Business Suite to help secure your systems from potential remote code execution threats.", "fork": false, "created_at": "2025-03-04T15:38:32Z", - "updated_at": "2026-06-04T18:28:09Z", - "pushed_at": "2026-06-04T18:27:33Z", + "updated_at": "2026-06-04T21:37:34Z", + "pushed_at": "2026-06-04T21:37:11Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-62518.json b/2025/CVE-2025-62518.json index 12060a07f1..1466b63d09 100644 --- a/2025/CVE-2025-62518.json +++ b/2025/CVE-2025-62518.json @@ -14,10 +14,10 @@ "description": "CVE-2025-62518: TARmageddon", "fork": false, "created_at": "2025-08-21T16:03:36Z", - "updated_at": "2026-01-09T14:26:09Z", + "updated_at": "2026-06-04T22:07:54Z", "pushed_at": "2025-10-21T02:44:16Z", - "stargazers_count": 18, - "watchers_count": 18, + "stargazers_count": 19, + "watchers_count": 19, "has_discussions": false, "forks_count": 4, "allow_forking": true, @@ -34,7 +34,7 @@ ], "visibility": "public", "forks": 4, - "watchers": 18, + "watchers": 19, "score": 0, "subscribers_count": 1 }, diff --git a/2025/CVE-2025-63389.json b/2025/CVE-2025-63389.json index 6690a9e482..e2601fa1e1 100644 --- a/2025/CVE-2025-63389.json +++ b/2025/CVE-2025-63389.json @@ -14,10 +14,10 @@ "description": "Gov-TLD Ollama discovery via CT logs, Shodan, and DNS; detects CVE-2025-63389, cloud proxy takeovers, and RAG\/distilled models across 25 government TLD patterns.", "fork": false, "created_at": "2026-05-02T23:31:26Z", - "updated_at": "2026-06-04T03:12:34Z", + "updated_at": "2026-06-04T21:43:05Z", "pushed_at": "2026-06-04T03:12:30Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -43,7 +43,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2025/CVE-2025-6554.json b/2025/CVE-2025-6554.json index 17f8382779..7f6b5619ab 100644 --- a/2025/CVE-2025-6554.json +++ b/2025/CVE-2025-6554.json @@ -179,8 +179,8 @@ "description": "🔍 Demonstrate and validate the `addressof` and `fakeobj` primitives in the V8 sandbox for advanced security research on CVE-2025-6554.", "fork": false, "created_at": "2025-08-10T21:07:43Z", - "updated_at": "2026-06-04T14:12:55Z", - "pushed_at": "2026-06-04T14:11:14Z", + "updated_at": "2026-06-04T22:04:36Z", + "pushed_at": "2026-06-04T22:04:32Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-65640.json b/2025/CVE-2025-65640.json index 7c878bef06..17acbeb78d 100644 --- a/2025/CVE-2025-65640.json +++ b/2025/CVE-2025-65640.json @@ -14,10 +14,10 @@ "description": "Public advisory for CVE-2025-65640: Stored XSS vulnerability in Globe Document Intelligence.", "fork": false, "created_at": "2026-05-28T19:34:34Z", - "updated_at": "2026-06-04T17:19:21Z", + "updated_at": "2026-06-04T19:17:01Z", "pushed_at": "2026-06-04T16:48:25Z", - "stargazers_count": 5, - "watchers_count": 5, + "stargazers_count": 7, + "watchers_count": 7, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 5, + "watchers": 7, "score": 0, "subscribers_count": 0 } diff --git a/2025/CVE-2025-66398.json b/2025/CVE-2025-66398.json index a7828cdba5..f6f0629574 100644 --- a/2025/CVE-2025-66398.json +++ b/2025/CVE-2025-66398.json @@ -64,8 +64,8 @@ "description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.", "fork": false, "created_at": "2026-03-23T09:09:21Z", - "updated_at": "2026-06-04T15:32:55Z", - "pushed_at": "2026-06-04T15:30:30Z", + "updated_at": "2026-06-04T23:29:51Z", + "pushed_at": "2026-06-04T23:29:47Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-66478.json b/2025/CVE-2025-66478.json index 5b1727e3d9..efccd16941 100644 --- a/2025/CVE-2025-66478.json +++ b/2025/CVE-2025-66478.json @@ -14,8 +14,8 @@ "description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.", "fork": false, "created_at": "2025-10-01T07:40:09Z", - "updated_at": "2026-06-04T14:19:43Z", - "pushed_at": "2026-06-04T14:18:44Z", + "updated_at": "2026-06-04T22:11:47Z", + "pushed_at": "2026-06-04T22:11:43Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-68921.json b/2025/CVE-2025-68921.json index e721eb836b..68336f24a6 100644 --- a/2025/CVE-2025-68921.json +++ b/2025/CVE-2025-68921.json @@ -47,8 +47,8 @@ "description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.", "fork": false, "created_at": "2026-01-24T21:00:41Z", - "updated_at": "2026-06-04T14:45:33Z", - "pushed_at": "2026-06-04T14:44:14Z", + "updated_at": "2026-06-04T22:40:05Z", + "pushed_at": "2026-06-04T22:40:01Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-69985.json b/2025/CVE-2025-69985.json index d0ecc60760..3a2ab8f7e1 100644 --- a/2025/CVE-2025-69985.json +++ b/2025/CVE-2025-69985.json @@ -14,8 +14,8 @@ "description": "Exploit CVE-2025-69985 to bypass authentication and execute remote commands on FUXA versions ≤ 1.2.8 via the \/api\/runscript endpoint.", "fork": false, "created_at": "2025-04-10T09:18:30Z", - "updated_at": "2026-06-04T15:15:45Z", - "pushed_at": "2026-06-04T15:15:36Z", + "updated_at": "2026-06-04T23:13:41Z", + "pushed_at": "2026-06-04T23:13:38Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-70795.json b/2025/CVE-2025-70795.json index 5a59a095f0..6fcfd23d3c 100644 --- a/2025/CVE-2025-70795.json +++ b/2025/CVE-2025-70795.json @@ -14,8 +14,8 @@ "description": "🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.", "fork": false, "created_at": "2024-04-20T04:18:24Z", - "updated_at": "2026-06-04T15:14:17Z", - "pushed_at": "2026-06-04T15:10:38Z", + "updated_at": "2026-06-04T23:07:47Z", + "pushed_at": "2026-06-04T23:07:43Z", "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, diff --git a/2025/CVE-2025-8088.json b/2025/CVE-2025-8088.json index 057623dc15..7cf4c500c2 100644 --- a/2025/CVE-2025-8088.json +++ b/2025/CVE-2025-8088.json @@ -838,8 +838,8 @@ "description": "🛠 Exploit CVE-2025-8088 with this Python tool to generate malicious WinRAR archives that ensure payload persistence in Windows startup folders.", "fork": false, "created_at": "2025-12-20T13:52:21Z", - "updated_at": "2026-06-04T14:13:40Z", - "pushed_at": "2026-06-04T14:12:45Z", + "updated_at": "2026-06-04T22:05:55Z", + "pushed_at": "2026-06-04T22:05:51Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2025/CVE-2025-8110.json b/2025/CVE-2025-8110.json index 05e4f6d1d8..a6e55a5304 100644 --- a/2025/CVE-2025-8110.json +++ b/2025/CVE-2025-8110.json @@ -146,8 +146,8 @@ "description": "🔍 Detect improper symbolic link handling in Gogs' PutContents API, exposing local code execution risks for versions 0.13.3 and earlier.", "fork": false, "created_at": "2025-12-31T13:25:07Z", - "updated_at": "2026-06-04T14:23:54Z", - "pushed_at": "2026-06-04T14:22:54Z", + "updated_at": "2026-06-04T22:16:27Z", + "pushed_at": "2026-06-04T22:16:23Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-8671.json b/2025/CVE-2025-8671.json index 5db8e8adc5..5d938f2017 100644 --- a/2025/CVE-2025-8671.json +++ b/2025/CVE-2025-8671.json @@ -150,8 +150,8 @@ "description": "A Python script that checks if a web server is vulnerable to MadeYouReset (CVE-2025-8671) — an HTTP\/2 DoS attack that bypasses Rapid Reset mitigations by tricking the server into resetting its own streams. It probes the target by sending a malformed WINDOW_UPDATE frame and inspects whether the server responds.", "fork": false, "created_at": "2026-06-01T18:01:16Z", - "updated_at": "2026-06-01T18:17:52Z", - "pushed_at": "2026-06-01T18:02:02Z", + "updated_at": "2026-06-04T23:30:57Z", + "pushed_at": "2026-06-04T23:30:53Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2025/CVE-2025-9074.json b/2025/CVE-2025-9074.json index 86cf58fb52..189ea995bd 100644 --- a/2025/CVE-2025-9074.json +++ b/2025/CVE-2025-9074.json @@ -14,8 +14,8 @@ "description": "🚀 Exploit CVE-2025-9074 with this Docker escape framework, simplifying API vulnerabilities and enhancing security testing for developers and researchers.", "fork": false, "created_at": "2024-06-19T23:21:41Z", - "updated_at": "2026-06-04T14:28:25Z", - "pushed_at": "2026-06-04T14:24:30Z", + "updated_at": "2026-06-04T22:18:23Z", + "pushed_at": "2026-06-04T22:18:20Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-0073.json b/2026/CVE-2026-0073.json index fb855c20d9..9b9dd1445c 100644 --- a/2026/CVE-2026-0073.json +++ b/2026/CVE-2026-0073.json @@ -356,10 +356,10 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/m00ddy\/CVE-2026-0073-Android-client-TLS-auth-bypass", - "description": null, + "description": "translating original python exploit to C", "fork": false, "created_at": "2026-05-25T18:54:04Z", - "updated_at": "2026-05-27T19:35:26Z", + "updated_at": "2026-06-04T23:33:34Z", "pushed_at": "2026-05-27T19:35:22Z", "stargazers_count": 0, "watchers_count": 0, @@ -392,8 +392,8 @@ "description": "0-Click RCE Android Adb TLS Wireless Debugging", "fork": false, "created_at": "2026-06-04T03:06:59Z", - "updated_at": "2026-06-04T03:15:35Z", - "pushed_at": "2026-06-04T03:15:31Z", + "updated_at": "2026-06-04T23:02:40Z", + "pushed_at": "2026-06-04T23:02:35Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-0828.json b/2026/CVE-2026-0828.json index 688bbb6f8c..93e11095f1 100644 --- a/2026/CVE-2026-0828.json +++ b/2026/CVE-2026-0828.json @@ -14,8 +14,8 @@ "description": "🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.", "fork": false, "created_at": "2024-04-20T04:18:24Z", - "updated_at": "2026-06-04T15:14:17Z", - "pushed_at": "2026-06-04T15:10:38Z", + "updated_at": "2026-06-04T23:07:47Z", + "pushed_at": "2026-06-04T23:07:43Z", "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, diff --git a/2026/CVE-2026-20182.json b/2026/CVE-2026-20182.json index 28ba19c74e..839c6ef56e 100644 --- a/2026/CVE-2026-20182.json +++ b/2026/CVE-2026-20182.json @@ -14,7 +14,7 @@ "description": "CVE-2026-20182 PoC - Cisco Catalyst SD-WAN Controller \/ Manager Authentication Bypass (CVSS 10.0)", "fork": false, "created_at": "2026-05-22T21:17:01Z", - "updated_at": "2026-06-03T13:23:47Z", + "updated_at": "2026-06-05T00:39:59Z", "pushed_at": "2026-05-22T21:17:22Z", "stargazers_count": 2, "watchers_count": 2, diff --git a/2026/CVE-2026-20841.json b/2026/CVE-2026-20841.json index 97c387eba2..a876e28e38 100644 --- a/2026/CVE-2026-20841.json +++ b/2026/CVE-2026-20841.json @@ -14,8 +14,8 @@ "description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.", "fork": false, "created_at": "2024-09-22T12:19:06Z", - "updated_at": "2026-06-04T15:13:38Z", - "pushed_at": "2026-06-04T15:09:27Z", + "updated_at": "2026-06-04T23:06:43Z", + "pushed_at": "2026-06-04T23:06:39Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -66,8 +66,8 @@ "description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.", "fork": false, "created_at": "2026-02-26T05:21:28Z", - "updated_at": "2026-06-04T15:11:09Z", - "pushed_at": "2026-06-04T15:08:16Z", + "updated_at": "2026-06-04T23:05:28Z", + "pushed_at": "2026-06-04T23:05:23Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-23479.json b/2026/CVE-2026-23479.json new file mode 100644 index 0000000000..ce4b867a46 --- /dev/null +++ b/2026/CVE-2026-23479.json @@ -0,0 +1,35 @@ +[ + { + "id": 1259739113, + "name": "redis-cve-2026-23479-check", + "full_name": "pduggusa\/redis-cve-2026-23479-check", + "owner": { + "login": "pduggusa", + "id": 223524652, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/223524652?v=4", + "html_url": "https:\/\/github.com\/pduggusa", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/pduggusa\/redis-cve-2026-23479-check", + "description": "Safe read-only version checker + Sigma rule for Redis CVE-2026-23479 (authenticated use-after-free → RCE). Find exposed instances, patch left-of-boom. By DugganUSA.", + "fork": false, + "created_at": "2026-06-04T20:09:02Z", + "updated_at": "2026-06-04T20:09:10Z", + "pushed_at": "2026-06-04T20:09:06Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-23744.json b/2026/CVE-2026-23744.json index 37e4a1d435..734c01a1ae 100644 --- a/2026/CVE-2026-23744.json +++ b/2026/CVE-2026-23744.json @@ -14,7 +14,7 @@ "description": "HTB Season 11 — DevHub Writeup Exploiting CVE-2026-23744 (MCPJam Inspector unauthenticated RCE via \/api\/mcp\/connect) to gain initial foothold, then lateral movement through Jupyter Lab token leaked in systemd service file. Stack: nginx · MCPJam Inspector 1.4.2 · Jupyter Lab · OPSMCP (root)", "fork": false, "created_at": "2026-05-30T22:03:43Z", - "updated_at": "2026-05-31T00:15:29Z", + "updated_at": "2026-06-04T19:46:43Z", "pushed_at": "2026-05-31T00:15:25Z", "stargazers_count": 0, "watchers_count": 0, @@ -80,10 +80,10 @@ "description": "CVE-2026-23744 RCE + Privilege Escalation", "fork": false, "created_at": "2026-05-31T07:39:58Z", - "updated_at": "2026-05-31T07:51:34Z", + "updated_at": "2026-06-04T19:29:43Z", "pushed_at": "2026-05-31T07:51:31Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -94,7 +94,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-2406.json b/2026/CVE-2026-2406.json index 4fe8645dc5..53c46c09a7 100644 --- a/2026/CVE-2026-2406.json +++ b/2026/CVE-2026-2406.json @@ -14,8 +14,8 @@ "description": "🔍 Analyze and detect CVE-2026-2406 vulnerabilities in Telnet to enhance security and prevent unauthorized access with this professional research engine.", "fork": false, "created_at": "2025-04-16T07:20:12Z", - "updated_at": "2026-06-04T14:59:23Z", - "pushed_at": "2026-06-04T14:58:03Z", + "updated_at": "2026-06-04T22:54:45Z", + "pushed_at": "2026-06-04T22:54:41Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-24061.json b/2026/CVE-2026-24061.json index 2f9675ec7b..ea6bc196b1 100644 --- a/2026/CVE-2026-24061.json +++ b/2026/CVE-2026-24061.json @@ -14,8 +14,8 @@ "description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.", "fork": false, "created_at": "2026-02-03T19:46:10Z", - "updated_at": "2026-06-04T14:54:16Z", - "pushed_at": "2026-06-04T14:53:50Z", + "updated_at": "2026-06-04T22:49:59Z", + "pushed_at": "2026-06-04T22:49:49Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-24291.json b/2026/CVE-2026-24291.json index 7d446ccc14..b2d36c1be5 100644 --- a/2026/CVE-2026-24291.json +++ b/2026/CVE-2026-24291.json @@ -14,8 +14,8 @@ "description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions", "fork": false, "created_at": "2026-03-26T04:38:27Z", - "updated_at": "2026-06-04T15:32:43Z", - "pushed_at": "2026-06-04T15:32:39Z", + "updated_at": "2026-06-04T23:31:40Z", + "pushed_at": "2026-06-04T23:31:37Z", "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, diff --git a/2026/CVE-2026-2441.json b/2026/CVE-2026-2441.json index 8b9908dc75..fd2ac48c80 100644 --- a/2026/CVE-2026-2441.json +++ b/2026/CVE-2026-2441.json @@ -14,8 +14,8 @@ "description": "Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.", "fork": false, "created_at": "2026-03-03T14:19:18Z", - "updated_at": "2026-06-04T15:14:22Z", - "pushed_at": "2026-06-04T15:12:16Z", + "updated_at": "2026-06-04T23:10:10Z", + "pushed_at": "2026-06-04T23:10:06Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2026/CVE-2026-2472.json b/2026/CVE-2026-2472.json index 82ad4cc47e..0c5592fb6e 100644 --- a/2026/CVE-2026-2472.json +++ b/2026/CVE-2026-2472.json @@ -14,8 +14,8 @@ "description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.", "fork": false, "created_at": "2026-03-10T14:40:04Z", - "updated_at": "2026-06-04T15:20:52Z", - "pushed_at": "2026-06-04T15:19:14Z", + "updated_at": "2026-06-04T23:16:54Z", + "pushed_at": "2026-06-04T23:16:51Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2026/CVE-2026-25197.json b/2026/CVE-2026-25197.json new file mode 100644 index 0000000000..9679983650 --- /dev/null +++ b/2026/CVE-2026-25197.json @@ -0,0 +1,50 @@ +[ + { + "id": 1203481461, + "name": "CVE-2026-25197", + "full_name": "MichaelAdamGroberman\/CVE-2026-25197", + "owner": { + "login": "MichaelAdamGroberman", + "id": 81723568, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/81723568?v=4", + "html_url": "https:\/\/github.com\/MichaelAdamGroberman", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/MichaelAdamGroberman\/CVE-2026-25197", + "description": "CVE-2026-25197: Authorization Bypass via IDOR — Gardyn Home Kit (ICSA-26-055-03)", + "fork": false, + "created_at": "2026-04-07T04:37:34Z", + "updated_at": "2026-06-04T20:35:30Z", + "pushed_at": "2026-06-04T20:34:50Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "authorization-bypass", + "cisa", + "coordinated-disclosure", + "cve", + "cve-2026-25197", + "cwe-639", + "gardyn", + "ics-advisory", + "icsa-26-055-03", + "idor", + "iot-security", + "security-research", + "vu653116", + "vulnerability-disclosure" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-25643.json b/2026/CVE-2026-25643.json index d883af410a..66df8fcca8 100644 --- a/2026/CVE-2026-25643.json +++ b/2026/CVE-2026-25643.json @@ -14,8 +14,8 @@ "description": "Exploit Frigate NVR ≤0.16.3 to execute commands remotely by abusing a configuration flaw without needing shell access or output capture.", "fork": false, "created_at": "2026-03-07T20:23:08Z", - "updated_at": "2026-06-04T15:17:25Z", - "pushed_at": "2026-06-04T15:17:21Z", + "updated_at": "2026-06-04T23:15:28Z", + "pushed_at": "2026-06-04T23:15:24Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2026/CVE-2026-26555.json b/2026/CVE-2026-26555.json new file mode 100644 index 0000000000..74c9567441 --- /dev/null +++ b/2026/CVE-2026-26555.json @@ -0,0 +1,35 @@ +[ + { + "id": 1259614291, + "name": "axios-supply-chain-cve-2026-26555", + "full_name": "horrister\/axios-supply-chain-cve-2026-26555", + "owner": { + "login": "horrister", + "id": 62105785, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62105785?v=4", + "html_url": "https:\/\/github.com\/horrister", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/horrister\/axios-supply-chain-cve-2026-26555", + "description": "In-depth analysis of cve-2026-26555 ", + "fork": false, + "created_at": "2026-06-04T17:24:23Z", + "updated_at": "2026-06-04T23:22:31Z", + "pushed_at": "2026-06-04T23:22:27Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-28766.json b/2026/CVE-2026-28766.json new file mode 100644 index 0000000000..c1252b7503 --- /dev/null +++ b/2026/CVE-2026-28766.json @@ -0,0 +1,50 @@ +[ + { + "id": 1203481484, + "name": "CVE-2026-28766", + "full_name": "MichaelAdamGroberman\/CVE-2026-28766", + "owner": { + "login": "MichaelAdamGroberman", + "id": 81723568, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/81723568?v=4", + "html_url": "https:\/\/github.com\/MichaelAdamGroberman", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/MichaelAdamGroberman\/CVE-2026-28766", + "description": "CVE-2026-28766: Missing Authentication on User Account Endpoint — Gardyn Home Kit (ICSA-26-055-03)", + "fork": false, + "created_at": "2026-04-07T04:37:37Z", + "updated_at": "2026-06-04T20:35:30Z", + "pushed_at": "2026-06-04T20:34:52Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cisa", + "coordinated-disclosure", + "cve", + "cve-2026-28766", + "cwe-306", + "gardyn", + "ics-advisory", + "icsa-26-055-03", + "iot-security", + "missing-authentication", + "pii-exposure", + "security-research", + "vu653116", + "vulnerability-disclosure" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-28767.json b/2026/CVE-2026-28767.json new file mode 100644 index 0000000000..ccd2069144 --- /dev/null +++ b/2026/CVE-2026-28767.json @@ -0,0 +1,50 @@ +[ + { + "id": 1203481513, + "name": "CVE-2026-28767", + "full_name": "MichaelAdamGroberman\/CVE-2026-28767", + "owner": { + "login": "MichaelAdamGroberman", + "id": 81723568, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/81723568?v=4", + "html_url": "https:\/\/github.com\/MichaelAdamGroberman", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/MichaelAdamGroberman\/CVE-2026-28767", + "description": "CVE-2026-28767: Missing Authentication on Admin Notifications Endpoint — Gardyn Home Kit (ICSA-26-055-03)", + "fork": false, + "created_at": "2026-04-07T04:37:39Z", + "updated_at": "2026-06-04T20:35:32Z", + "pushed_at": "2026-06-04T20:34:54Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "admin-api", + "cisa", + "coordinated-disclosure", + "cve", + "cve-2026-28767", + "cwe-306", + "gardyn", + "ics-advisory", + "icsa-26-055-03", + "iot-security", + "missing-authentication", + "security-research", + "vu653116", + "vulnerability-disclosure" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-2991.json b/2026/CVE-2026-2991.json index 16ef5d29c2..bf27e35c5f 100644 --- a/2026/CVE-2026-2991.json +++ b/2026/CVE-2026-2991.json @@ -14,8 +14,8 @@ "description": "Explore a PoC for CVE-2026-2991, an auth bypass in KiviCare 4.1.2 and earlier via the patient social-login REST endpoint", "fork": false, "created_at": "2026-04-03T20:26:43Z", - "updated_at": "2026-06-04T15:37:33Z", - "pushed_at": "2026-06-04T15:37:20Z", + "updated_at": "2026-06-04T23:36:19Z", + "pushed_at": "2026-06-04T23:36:15Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-31431.json b/2026/CVE-2026-31431.json index 9310e17f4e..1353f5b64d 100644 --- a/2026/CVE-2026-31431.json +++ b/2026/CVE-2026-31431.json @@ -760,39 +760,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1225604678, - "name": "CVE-2026-31431", - "full_name": "JuanBindez\/CVE-2026-31431", - "owner": { - "login": "JuanBindez", - "id": 79322362, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79322362?v=4", - "html_url": "https:\/\/github.com\/JuanBindez", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/JuanBindez\/CVE-2026-31431", - "description": "Copy Fail - CVE-2026-31431", - "fork": false, - "created_at": "2026-04-30T12:59:11Z", - "updated_at": "2026-05-19T13:06:56Z", - "pushed_at": "2026-04-30T14:42:04Z", - "stargazers_count": 9, - "watchers_count": 9, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 4, - "watchers": 9, - "score": 0, - "subscribers_count": 0 - }, { "id": 1225626691, "name": "CVE-2026-31431-patch", @@ -826,39 +793,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1225638895, - "name": "CVE-2026-31431", - "full_name": "wesmar\/CVE-2026-31431", - "owner": { - "login": "wesmar", - "id": 61203372, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61203372?v=4", - "html_url": "https:\/\/github.com\/wesmar", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/wesmar\/CVE-2026-31431", - "description": "CVE-2026-31431 is a bug in the handling of scatter-gather I\/O operations and page cache references in the Linux kernel cryptographic subsystem — specifically in the AF_ALG socket implementation for AEAD algorithms (crypto\/af_alg.c, crypto\/aead.c).", - "fork": false, - "created_at": "2026-04-30T13:38:34Z", - "updated_at": "2026-06-04T16:55:46Z", - "pushed_at": "2026-04-30T14:46:40Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 5, - "score": 0, - "subscribers_count": 0 - }, { "id": 1225656875, "name": "wg.copyfail.patch", @@ -899,42 +833,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1225659577, - "name": "copy-fail-go", - "full_name": "cs8425\/copy-fail-go", - "owner": { - "login": "cs8425", - "id": 1642768, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1642768?v=4", - "html_url": "https:\/\/github.com\/cs8425", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/cs8425\/copy-fail-go", - "description": "Copy Fail - CVE-2026-31431 in golang", - "fork": false, - "created_at": "2026-04-30T13:58:35Z", - "updated_at": "2026-04-30T16:12:31Z", - "pushed_at": "2026-04-30T14:02:45Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2026-31431", - "local-privilege-escalation" - ], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, { "id": 1225665324, "name": "copyfail-rs", @@ -983,114 +881,6 @@ "score": 0, "subscribers_count": 2 }, - { - "id": 1225666349, - "name": "CVE-2026-31431", - "full_name": "yxdm02\/CVE-2026-31431", - "owner": { - "login": "yxdm02", - "id": 189938092, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/189938092?v=4", - "html_url": "https:\/\/github.com\/yxdm02", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/yxdm02\/CVE-2026-31431", - "description": "CVE-2026-31431", - "fork": false, - "created_at": "2026-04-30T14:06:09Z", - "updated_at": "2026-04-30T14:18:01Z", - "pushed_at": "2026-04-30T14:16:12Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1225672538, - "name": "CVE-2026-31431-old-python", - "full_name": "grishinpv\/CVE-2026-31431-old-python", - "owner": { - "login": "grishinpv", - "id": 88319804, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88319804?v=4", - "html_url": "https:\/\/github.com\/grishinpv", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/grishinpv\/CVE-2026-31431-old-python", - "description": "CVE-2026-31431 for python versions lower 3.10", - "fork": false, - "created_at": "2026-04-30T14:13:14Z", - "updated_at": "2026-04-30T14:21:18Z", - "pushed_at": "2026-04-30T14:18:14Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1225685126, - "name": "copyfail-rs", - "full_name": "sammwyy\/copyfail-rs", - "owner": { - "login": "sammwyy", - "id": 44925968, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/44925968?v=4", - "html_url": "https:\/\/github.com\/sammwyy", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sammwyy\/copyfail-rs", - "description": "Copy Fail exploit (CVE-2026-31431) but in Rust.", - "fork": false, - "created_at": "2026-04-30T14:28:00Z", - "updated_at": "2026-05-11T16:06:57Z", - "pushed_at": "2026-04-30T14:44:20Z", - "stargazers_count": 14, - "watchers_count": 14, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "copy-fail", - "copyfail", - "cve", - "cve-2026-31431", - "local-privilege-escalation", - "lpe", - "poc", - "privilege-escalation" - ], - "visibility": "public", - "forks": 2, - "watchers": 14, - "score": 0, - "subscribers_count": 0 - }, { "id": 1225711440, "name": "PATCH-CVE-2026-31431-Ubuntu_Debian", @@ -6254,8 +6044,8 @@ "description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.", "fork": false, "created_at": "2026-05-05T04:58:21Z", - "updated_at": "2026-06-04T15:58:35Z", - "pushed_at": "2026-06-04T15:58:31Z", + "updated_at": "2026-06-04T23:57:57Z", + "pushed_at": "2026-06-04T23:57:53Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -7089,8 +6879,8 @@ "description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.", "fork": false, "created_at": "2026-05-06T09:49:14Z", - "updated_at": "2026-06-04T15:59:36Z", - "pushed_at": "2026-06-04T15:59:32Z", + "updated_at": "2026-06-04T23:58:59Z", + "pushed_at": "2026-06-04T23:58:56Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, @@ -9540,7 +9330,7 @@ "fork": false, "created_at": "2026-06-01T18:53:44Z", "updated_at": "2026-06-03T21:48:04Z", - "pushed_at": "2026-06-04T17:30:46Z", + "pushed_at": "2026-06-04T20:25:36Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-3180.json b/2026/CVE-2026-3180.json new file mode 100644 index 0000000000..86f4f0d484 --- /dev/null +++ b/2026/CVE-2026-3180.json @@ -0,0 +1,35 @@ +[ + { + "id": 1259788661, + "name": "cve-2026-3180", + "full_name": "cardosource\/cve-2026-3180", + "owner": { + "login": "cardosource", + "id": 29387672, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/29387672?v=4", + "html_url": "https:\/\/github.com\/cardosource", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/cardosource\/cve-2026-3180", + "description": "Detailed Analysis of a Critical Vulnerability", + "fork": false, + "created_at": "2026-06-04T21:27:42Z", + "updated_at": "2026-06-04T21:37:01Z", + "pushed_at": "2026-06-04T21:36:56Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-31802.json b/2026/CVE-2026-31802.json index 036030541c..66ba9ce242 100644 --- a/2026/CVE-2026-31802.json +++ b/2026/CVE-2026-31802.json @@ -14,8 +14,8 @@ "description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.", "fork": false, "created_at": "2026-03-28T20:49:46Z", - "updated_at": "2026-06-04T15:34:13Z", - "pushed_at": "2026-06-04T15:34:08Z", + "updated_at": "2026-06-04T23:32:54Z", + "pushed_at": "2026-06-04T23:32:51Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-32646.json b/2026/CVE-2026-32646.json new file mode 100644 index 0000000000..4ac97ac147 --- /dev/null +++ b/2026/CVE-2026-32646.json @@ -0,0 +1,50 @@ +[ + { + "id": 1203481534, + "name": "CVE-2026-32646", + "full_name": "MichaelAdamGroberman\/CVE-2026-32646", + "owner": { + "login": "MichaelAdamGroberman", + "id": 81723568, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/81723568?v=4", + "html_url": "https:\/\/github.com\/MichaelAdamGroberman", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/MichaelAdamGroberman\/CVE-2026-32646", + "description": "CVE-2026-32646: Missing Authentication on Admin Device Endpoint — Gardyn Home Kit (ICSA-26-055-03)", + "fork": false, + "created_at": "2026-04-07T04:37:42Z", + "updated_at": "2026-06-04T20:35:32Z", + "pushed_at": "2026-06-04T20:34:57Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "admin-api", + "cisa", + "coordinated-disclosure", + "cve", + "cve-2026-32646", + "cwe-306", + "gardyn", + "ics-advisory", + "icsa-26-055-03", + "iot-security", + "missing-authentication", + "security-research", + "vu653116", + "vulnerability-disclosure" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-32662.json b/2026/CVE-2026-32662.json new file mode 100644 index 0000000000..64104dc4e2 --- /dev/null +++ b/2026/CVE-2026-32662.json @@ -0,0 +1,50 @@ +[ + { + "id": 1203481565, + "name": "CVE-2026-32662", + "full_name": "MichaelAdamGroberman\/CVE-2026-32662", + "owner": { + "login": "MichaelAdamGroberman", + "id": 81723568, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/81723568?v=4", + "html_url": "https:\/\/github.com\/MichaelAdamGroberman", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/MichaelAdamGroberman\/CVE-2026-32662", + "description": "CVE-2026-32662: Active Debug Code in Production — Gardyn Home Kit (ICSA-26-055-03)", + "fork": false, + "created_at": "2026-04-07T04:37:45Z", + "updated_at": "2026-06-04T20:35:33Z", + "pushed_at": "2026-06-04T20:34:59Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cisa", + "coordinated-disclosure", + "cve", + "cve-2026-32662", + "cwe-489", + "debug-code", + "development-endpoints", + "gardyn", + "ics-advisory", + "icsa-26-055-03", + "iot-security", + "security-research", + "vu653116", + "vulnerability-disclosure" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-35904.json b/2026/CVE-2026-35904.json index 647bd5c079..802eca7ff5 100644 --- a/2026/CVE-2026-35904.json +++ b/2026/CVE-2026-35904.json @@ -14,7 +14,7 @@ "description": "CVE-2026-35904 \/ CVE-2026-35905 \/ CVE-2026-35906 — Unauth RCE, Hardcoded Root Creds & Telnet Enable in T3 Technology CPE", "fork": false, "created_at": "2026-06-04T15:55:22Z", - "updated_at": "2026-06-04T15:55:44Z", + "updated_at": "2026-06-04T21:47:08Z", "pushed_at": "2026-06-04T15:55:37Z", "stargazers_count": 0, "watchers_count": 0, diff --git a/2026/CVE-2026-3609.json b/2026/CVE-2026-3609.json index 953947b50d..368b2692b0 100644 --- a/2026/CVE-2026-3609.json +++ b/2026/CVE-2026-3609.json @@ -14,10 +14,10 @@ "description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).", "fork": false, "created_at": "2023-12-05T14:52:11Z", - "updated_at": "2026-06-04T09:16:04Z", + "updated_at": "2026-06-04T21:59:07Z", "pushed_at": "2026-06-02T11:07:33Z", - "stargazers_count": 776, - "watchers_count": 776, + "stargazers_count": 777, + "watchers_count": 777, "has_discussions": false, "forks_count": 115, "allow_forking": true, @@ -37,7 +37,7 @@ ], "visibility": "public", "forks": 115, - "watchers": 776, + "watchers": 777, "score": 0, "subscribers_count": 19 }, diff --git a/2026/CVE-2026-41089.json b/2026/CVE-2026-41089.json index 36d0ec930e..2e39c48a9d 100644 --- a/2026/CVE-2026-41089.json +++ b/2026/CVE-2026-41089.json @@ -14,12 +14,12 @@ "description": "CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)", "fork": false, "created_at": "2026-06-01T04:22:29Z", - "updated_at": "2026-06-04T18:52:32Z", + "updated_at": "2026-06-05T00:28:12Z", "pushed_at": "2026-06-02T08:30:55Z", - "stargazers_count": 151, - "watchers_count": 151, + "stargazers_count": 155, + "watchers_count": 155, "has_discussions": false, - "forks_count": 53, + "forks_count": 55, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -38,8 +38,8 @@ "windows-server" ], "visibility": "public", - "forks": 53, - "watchers": 151, + "forks": 55, + "watchers": 155, "score": 0, "subscribers_count": 1 }, @@ -227,126 +227,5 @@ "watchers": 6, "score": 0, "subscribers_count": 0 - }, - { - "id": 1259576329, - "name": "CVE-2026-41089-532", - "full_name": "Darkuoremember32\/CVE-2026-41089-532", - "owner": { - "login": "Darkuoremember32", - "id": 288928961, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/288928961?v=4", - "html_url": "https:\/\/github.com\/Darkuoremember32", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Darkuoremember32\/CVE-2026-41089-532", - "description": "CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)", - "fork": false, - "created_at": "2026-06-04T16:38:23Z", - "updated_at": "2026-06-04T18:50:12Z", - "pushed_at": "2026-06-04T16:38:58Z", - "stargazers_count": 58, - "watchers_count": 58, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "buffer-overflow", - "cldap", - "cve", - "cve-2026-41089", - "exploit", - "poc", - "vulnerability", - "vulnerability-detection", - "windows", - "windows-server" - ], - "visibility": "public", - "forks": 0, - "watchers": 58, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1259621758, - "name": "CVE-2026-41089-470", - "full_name": "Darkuoremember32\/CVE-2026-41089-470", - "owner": { - "login": "Darkuoremember32", - "id": 288928961, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/288928961?v=4", - "html_url": "https:\/\/github.com\/Darkuoremember32", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Darkuoremember32\/CVE-2026-41089-470", - "description": "CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)", - "fork": false, - "created_at": "2026-06-04T17:33:49Z", - "updated_at": "2026-06-04T18:50:14Z", - "pushed_at": "2026-06-04T17:34:30Z", - "stargazers_count": 58, - "watchers_count": 58, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "buffer-overflow", - "cldap", - "cve", - "cve-2026-41089", - "exploit", - "poc", - "vulnerability", - "vulnerability-detection", - "windows", - "windows-server" - ], - "visibility": "public", - "forks": 0, - "watchers": 58, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1259685238, - "name": "CVE-2026-41089-874", - "full_name": "Retrodraseparator\/CVE-2026-41089-874", - "owner": { - "login": "Retrodraseparator", - "id": 288926720, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/288926720?v=4", - "html_url": "https:\/\/github.com\/Retrodraseparator", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Retrodraseparator\/CVE-2026-41089-874", - "description": "CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)", - "fork": false, - "created_at": "2026-06-04T18:52:59Z", - "updated_at": "2026-06-04T18:53:06Z", - "pushed_at": "2026-06-04T18:53:05Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-41096.json b/2026/CVE-2026-41096.json index ecadd3d8d8..4c7120289a 100644 --- a/2026/CVE-2026-41096.json +++ b/2026/CVE-2026-41096.json @@ -113,10 +113,10 @@ "description": "Attack surface in the real-world environment of CVE-2026-41096", "fork": false, "created_at": "2026-06-04T14:11:54Z", - "updated_at": "2026-06-04T15:27:17Z", + "updated_at": "2026-06-04T20:05:01Z", "pushed_at": "2026-06-04T14:47:36Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -127,7 +127,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-41940.json b/2026/CVE-2026-41940.json index a8cd52c94e..a80a259340 100644 --- a/2026/CVE-2026-41940.json +++ b/2026/CVE-2026-41940.json @@ -1575,8 +1575,8 @@ "description": "Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.", "fork": false, "created_at": "2026-05-06T18:08:48Z", - "updated_at": "2026-06-04T16:00:07Z", - "pushed_at": "2026-06-04T15:59:49Z", + "updated_at": "2026-06-04T23:59:27Z", + "pushed_at": "2026-06-04T23:59:23Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-42588.json b/2026/CVE-2026-42588.json index d4725dfc9e..c1a242a17f 100644 --- a/2026/CVE-2026-42588.json +++ b/2026/CVE-2026-42588.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2026-06-04T16:28:42Z", - "updated_at": "2026-06-04T16:44:34Z", + "updated_at": "2026-06-05T00:12:36Z", "pushed_at": "2026-06-04T16:44:30Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-42945.json b/2026/CVE-2026-42945.json index accdc964b1..c2f6b92cef 100644 --- a/2026/CVE-2026-42945.json +++ b/2026/CVE-2026-42945.json @@ -1128,7 +1128,7 @@ "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1136,7 +1136,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 0, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-43284.json b/2026/CVE-2026-43284.json index 06bd5400e2..481e1cdc7b 100644 --- a/2026/CVE-2026-43284.json +++ b/2026/CVE-2026-43284.json @@ -14,10 +14,10 @@ "description": "A proof-of-concept demonstrating how a default, unprivileged Kubernetes Pod can achieve node-level code execution on Amazon EKS by exploiting the Dirty Frag (CVE-2026-43284) Linux kernel page-cache corruption vulnerability through shared container image layers.", "fork": false, "created_at": "2026-05-08T02:17:45Z", - "updated_at": "2026-05-16T03:45:38Z", + "updated_at": "2026-06-04T23:44:39Z", "pushed_at": "2026-05-08T12:47:18Z", - "stargazers_count": 11, - "watchers_count": 11, + "stargazers_count": 12, + "watchers_count": 12, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -36,7 +36,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 11, + "watchers": 12, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-45585.json b/2026/CVE-2026-45585.json index b7e4dcd032..b076d6b25a 100644 --- a/2026/CVE-2026-45585.json +++ b/2026/CVE-2026-45585.json @@ -80,10 +80,10 @@ "description": "yellowkey bitlocker github vulnerability bypass cve-2026-45585 windows 11 security zero day exploit winre recovery mode poc nightmare eclipse chaotic eclipse exploit tool usb attack encryption hack script mitigation guide fstx winpeshl shell unpatched fix tool", "fork": false, "created_at": "2026-05-23T17:19:03Z", - "updated_at": "2026-06-04T18:26:31Z", + "updated_at": "2026-06-04T22:47:07Z", "pushed_at": "2026-05-23T17:24:38Z", - "stargazers_count": 199, - "watchers_count": 199, + "stargazers_count": 200, + "watchers_count": 200, "has_discussions": false, "forks_count": 27, "allow_forking": true, @@ -109,7 +109,7 @@ ], "visibility": "public", "forks": 27, - "watchers": 199, + "watchers": 200, "score": 0, "subscribers_count": 2 }, @@ -178,5 +178,38 @@ "watchers": 1, "score": 0, "subscribers_count": 0 + }, + { + "id": 1259810824, + "name": "Yellow-Key-Check", + "full_name": "ChanderManiPandey2022\/Yellow-Key-Check", + "owner": { + "login": "ChanderManiPandey2022", + "id": 116195110, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/116195110?v=4", + "html_url": "https:\/\/github.com\/ChanderManiPandey2022", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/ChanderManiPandey2022\/Yellow-Key-Check", + "description": "YellowKey | BitLocker Bypass Vulnerability (CVE-2026-45585)", + "fork": false, + "created_at": "2026-06-04T22:09:04Z", + "updated_at": "2026-06-04T22:14:57Z", + "pushed_at": "2026-06-04T22:14:53Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-8389.json b/2026/CVE-2026-8389.json index d9d7de6ecd..b54b819933 100644 --- a/2026/CVE-2026-8389.json +++ b/2026/CVE-2026-8389.json @@ -14,12 +14,12 @@ "description": null, "fork": false, "created_at": "2026-06-04T15:25:26Z", - "updated_at": "2026-06-04T18:42:49Z", + "updated_at": "2026-06-04T23:09:09Z", "pushed_at": "2026-06-04T15:48:58Z", - "stargazers_count": 5, - "watchers_count": 5, + "stargazers_count": 12, + "watchers_count": 12, "has_discussions": false, - "forks_count": 1, + "forks_count": 3, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,8 +27,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 1, - "watchers": 5, + "forks": 3, + "watchers": 12, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-9082.json b/2026/CVE-2026-9082.json index 62048ff717..d353ad8be7 100644 --- a/2026/CVE-2026-9082.json +++ b/2026/CVE-2026-9082.json @@ -80,8 +80,8 @@ "description": "CVE-2026-9082", "fork": false, "created_at": "2026-05-21T07:26:11Z", - "updated_at": "2026-05-22T10:23:35Z", - "pushed_at": "2026-05-21T07:32:39Z", + "updated_at": "2026-06-04T23:58:56Z", + "pushed_at": "2026-06-04T23:58:52Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/README.md b/README.md index 4c45fcd988..a68fc49924 100644 --- a/README.md +++ b/README.md @@ -237,6 +237,13 @@ - [ClimbMunchkin/fix-cve-2026-3143](https://github.com/ClimbMunchkin/fix-cve-2026-3143) +### CVE-2026-3180 (2026-03-02) + +The Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe plugin for WordPress is vulnerable to blind SQL Injection via the ‘cgLostPasswordEmail’ and the ’cgl_mail’ parameter in all versions up to, and including, 28.1.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. The vulnerability's ’cgLostPasswordEmail’ parameter was patched in version 28.1.4, and the ’cgl_mail’ parameter was patched in version 28.1.5. + + +- [cardosource/cve-2026-3180](https://github.com/cardosource/cve-2026-3180) + ### CVE-2026-3288 (2026-03-09) A security issue was discovered in ingress-nginx where the `nginx.ingress.kubernetes.io/rewrite-target` Ingress annotation can be used to inject configuration into nginx. This can lead to arbitrary code execution in the context of the ingress-nginx controller, and disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.) @@ -916,6 +923,13 @@ - [bluedragonsecurity/CVE-2026-23416-POC](https://github.com/bluedragonsecurity/CVE-2026-23416-POC) +### CVE-2026-23479 (2026-05-05) + +Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow does not handle an error return from `processCommandAndResetClient` when re-executing a blocked command. If a blocked client is evicted during this flow, an authenticated attacker can trigger a use-after-free that may lead to remote code execution. This has been patched in version 8.6.3. + + +- [pduggusa/redis-cve-2026-23479-check](https://github.com/pduggusa/redis-cve-2026-23479-check) + ### CVE-2026-23520 (2026-01-15) Arcane provides modern docker management. Prior to 1.13.0, Arcane has a command injection in the updater service. Arcane’s updater service supported lifecycle labels com.getarcaneapp.arcane.lifecycle.pre-update and com.getarcaneapp.arcane.lifecycle.post-update that allowed defining a command to run before or after a container update. The label value is passed directly to /bin/sh -c without sanitization or validation. Because any authenticated user (not limited to administrators) can create projects through the API, an attacker can create a project that specifies one of these lifecycle labels with a malicious command. When an administrator later triggers a container update (either manually or via scheduled update checks), Arcane reads the lifecycle label and executes its value as a shell command inside the container. This vulnerability is fixed in 1.13.0. @@ -1043,6 +1057,13 @@ - [Dhananjayasj/RRAS-VULNERABILITY-CVE-2026-25172-CVE-2026-25173-CVE-2026--26111](https://github.com/Dhananjayasj/RRAS-VULNERABILITY-CVE-2026-25172-CVE-2026-25173-CVE-2026--26111) +### CVE-2026-25197 (2026-04-03) + +A specific endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call. + + +- [MichaelAdamGroberman/CVE-2026-25197](https://github.com/MichaelAdamGroberman/CVE-2026-25197) + ### CVE-2026-25253 (2026-02-01) OpenClaw (aka clawdbot or Moltbot) before 2026.1.29 obtains a gatewayUrl value from a query string and automatically makes a WebSocket connection without prompting, sending a token value. @@ -1109,6 +1130,9 @@ - [CEAarab/CVE-2026-26336-PoC](https://github.com/CEAarab/CVE-2026-26336-PoC) +### CVE-2026-26555 +- [horrister/axios-supply-chain-cve-2026-26555](https://github.com/horrister/axios-supply-chain-cve-2026-26555) + ### CVE-2026-26897 - [iwallplace/CVE-2026-26897-EcoOnline-DeepLink](https://github.com/iwallplace/CVE-2026-26897-EcoOnline-DeepLink) @@ -1188,6 +1212,20 @@ - [Nayekah/Next.js-Proof-of-Concept](https://github.com/Nayekah/Next.js-Proof-of-Concept) +### CVE-2026-28766 (2026-04-03) + +A specific endpoint exposes all user account information for registered Gardyn users without requiring authentication. + + +- [MichaelAdamGroberman/CVE-2026-28766](https://github.com/MichaelAdamGroberman/CVE-2026-28766) + +### CVE-2026-28767 (2026-04-03) + +A specific administrative endpoint notifications is accessible without proper authentication. + + +- [MichaelAdamGroberman/CVE-2026-28767](https://github.com/MichaelAdamGroberman/CVE-2026-28767) + ### CVE-2026-28990 (2026-05-11) The issue was addressed with improved memory handling. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing a maliciously crafted image may corrupt process memory. @@ -1305,15 +1343,9 @@ - [yandex-cloud-examples/yc-mk8s-copy-fail-mitigation](https://github.com/yandex-cloud-examples/yc-mk8s-copy-fail-mitigation) - [mfloresdacunha/CVE-2026-31431](https://github.com/mfloresdacunha/CVE-2026-31431) - [Boos4721/copyfail-rs](https://github.com/Boos4721/copyfail-rs) -- [JuanBindez/CVE-2026-31431](https://github.com/JuanBindez/CVE-2026-31431) - [rshosting/CVE-2026-31431-patch](https://github.com/rshosting/CVE-2026-31431-patch) -- [wesmar/CVE-2026-31431](https://github.com/wesmar/CVE-2026-31431) - [wgnet/wg.copyfail.patch](https://github.com/wgnet/wg.copyfail.patch) -- [cs8425/copy-fail-go](https://github.com/cs8425/copy-fail-go) - [diemoeve/copyfail-rs](https://github.com/diemoeve/copyfail-rs) -- [yxdm02/CVE-2026-31431](https://github.com/yxdm02/CVE-2026-31431) -- [grishinpv/CVE-2026-31431-old-python](https://github.com/grishinpv/CVE-2026-31431-old-python) -- [sammwyy/copyfail-rs](https://github.com/sammwyy/copyfail-rs) - [SunL0w/PATCH-CVE-2026-31431-Ubuntu_Debian](https://github.com/SunL0w/PATCH-CVE-2026-31431-Ubuntu_Debian) - [scriptzteam/Paranoid-Copy-Fail-CVE-2026-31431](https://github.com/scriptzteam/Paranoid-Copy-Fail-CVE-2026-31431) - [cozystack/copy-fail-blocker](https://github.com/cozystack/copy-fail-blocker) @@ -1609,6 +1641,20 @@ - [virus-or-not/CVE-2026-32202](https://github.com/virus-or-not/CVE-2026-32202) +### CVE-2026-32646 (2026-04-03) + +A specific administrative endpoint is accessible without proper authentication, exposing device management functions. + + +- [MichaelAdamGroberman/CVE-2026-32646](https://github.com/MichaelAdamGroberman/CVE-2026-32646) + +### CVE-2026-32662 (2026-04-03) + +Development and test API endpoints are present that mirror production functionality. + + +- [MichaelAdamGroberman/CVE-2026-32662](https://github.com/MichaelAdamGroberman/CVE-2026-32662) + ### CVE-2026-32707 (2026-03-13) PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, tattu_can contains an unbounded memcpy in its multi-frame assembly loop, allowing stack memory overwrite when crafted CAN frames are processed. In deployments where tattu_can is enabled and running, a CAN-injection-capable attacker can trigger a crash (DoS) and memory corruption. This vulnerability is fixed in 1.17.0-rc2. @@ -2193,9 +2239,6 @@ - [hnytgl/cve-2026-41089-detector](https://github.com/hnytgl/cve-2026-41089-detector) - [hnytgl/CVE-2026-41089](https://github.com/hnytgl/CVE-2026-41089) - [ADScanPro/CVE-2026-41089-LongLogon](https://github.com/ADScanPro/CVE-2026-41089-LongLogon) -- [Darkuoremember32/CVE-2026-41089-532](https://github.com/Darkuoremember32/CVE-2026-41089-532) -- [Darkuoremember32/CVE-2026-41089-470](https://github.com/Darkuoremember32/CVE-2026-41089-470) -- [Retrodraseparator/CVE-2026-41089-874](https://github.com/Retrodraseparator/CVE-2026-41089-874) ### CVE-2026-41091 (2026-05-20) @@ -2713,6 +2756,7 @@ - [Mclisterjoeh2o/yellowkey-bitlocker](https://github.com/Mclisterjoeh2o/yellowkey-bitlocker) - [andrei-majer/bitlocker-hardening](https://github.com/andrei-majer/bitlocker-hardening) - [0xBlackash/CVE-2026-45585](https://github.com/0xBlackash/CVE-2026-45585) +- [ChanderManiPandey2022/Yellow-Key-Check](https://github.com/ChanderManiPandey2022/Yellow-Key-Check) ### CVE-2026-45659 (2026-05-22) @@ -12279,6 +12323,13 @@ - [SexyShoelessGodofWar/CVE-2025-58780](https://github.com/SexyShoelessGodofWar/CVE-2025-58780) +### CVE-2025-58807 (2025-09-05) + +Cross-Site Request Forgery (CSRF) vulnerability in Dsingh Purge Varnish Cache purge-varnish allows Stored XSS.This issue affects Purge Varnish Cache: from n/a through <= 2.6. + + +- [erikharden/purge-varnish-csrf-advisory](https://github.com/erikharden/purge-varnish-csrf-advisory) + ### CVE-2025-59057 (2026-01-10) React Router is a router for React. In @remix-run/react versions 1.15.0 through 2.17.0. and react-router versions 7.0.0 through 7.8.2, a XSS vulnerability exists in in React Router's meta()/<Meta> APIs in Framework Mode when generating script:ld+json tags which could allow arbitrary JavaScript execution during SSR if untrusted content is used to generate the tag. There is no impact if the application is being used in Declarative Mode (<BrowserRouter>) or Data Mode (createBrowserRouter/<RouterProvider>). This issue has been patched in @remix-run/react version 2.17.1 and react-router version 7.9.0. @@ -13286,7 +13337,11 @@ - [mjuanxd/logrus-dos-poc](https://github.com/mjuanxd/logrus-dos-poc) -### CVE-2025-65640 +### CVE-2025-65640 (2026-06-04) + +Cross Site Scripting (XSS) vulnerability in the "Task in Progress / Recent" page in Arket Globe Document Intelligence 5.0.0.559 due to improper sanitization of user input in text fields when creating a new document. Specifically, when an authenticated attacker submits data containing JavaScript code within these fields, the application fails to properly sanitize or escape the content. As a result, the injected script is executed when the page is rendered, allowing the attacker to execute arbitrary JavaScript in the context of other users' browsers who view the affected page. + + - [vincenzo-emanuele/CVE-2025-65640](https://github.com/vincenzo-emanuele/CVE-2025-65640) ### CVE-2025-65669 (2025-11-26) @@ -26826,6 +26881,7 @@ - [jpselva/CVE-2023-4863](https://github.com/jpselva/CVE-2023-4863) - [577Industries/aegisgraph](https://github.com/577Industries/aegisgraph) - [pixelotes/lab-cve-2023-4863](https://github.com/pixelotes/lab-cve-2023-4863) +- [Shcesama/cve-2023-4863-analysis](https://github.com/Shcesama/cve-2023-4863-analysis) ### CVE-2023-4911 (2023-10-03) @@ -29285,7 +29341,6 @@ - [yTxZx/CVE-2023-28432](https://github.com/yTxZx/CVE-2023-28432) - [unam4/CVE-2023-28432-minio_update_rce](https://github.com/unam4/CVE-2023-28432-minio_update_rce) - [C1ph3rX13/CVE-2023-28432](https://github.com/C1ph3rX13/CVE-2023-28432) -- [xk-mt/CVE-2023-28432](https://github.com/xk-mt/CVE-2023-28432) - [BitWiz4rd/CVE-2023-28432](https://github.com/BitWiz4rd/CVE-2023-28432) ### CVE-2023-28434 (2023-03-22)