From 1e6d6ede627147f3b259405f6cb3681505347a9b Mon Sep 17 00:00:00 2001 From: motikan2010-bot Date: Sun, 11 Oct 2026 04:43:04 +0900 Subject: [PATCH] Auto Update 2026/10/10 19:43:04 --- 2012/CVE-2012-1823.json | 8 +- 2017/CVE-2017-5638.json | 2 +- 2018/CVE-2018-6242.json | 8 +- 2019/CVE-2019-0708.json | 8 +- 2019/CVE-2019-11510.json | 8 +- 2019/CVE-2019-16253.json | 8 +- 2020/CVE-2020-13945.json | 4 +- 2021/CVE-2021-1931.json | 8 +- 2021/CVE-2021-40444.json | 8 +- 2021/CVE-2021-44228.json | 33 +++++ 2023/CVE-2023-20696.json | 8 +- 2023/CVE-2023-27524.json | 4 +- 2023/CVE-2023-38646.json | 33 ----- 2024/CVE-2024-35250.json | 8 +- 2024/CVE-2024-4367.json | 2 +- 2025/CVE-2025-14847.json | 8 +- 2025/CVE-2025-21479.json | 4 +- 2025/CVE-2025-2304.json | 8 +- 2025/CVE-2025-52915.json | 8 +- 2025/CVE-2025-54424.json | 4 +- 2025/CVE-2025-55182.json | 20 +-- 2025/CVE-2025-66398.json | 4 +- 2025/CVE-2025-66478.json | 4 +- 2025/CVE-2025-9548.json | 35 +++++ 2026/CVE-2026-107181.json | 12 +- 2026/CVE-2026-20841.json | 4 +- 2026/CVE-2026-21589.json | 4 +- 2026/CVE-2026-24061.json | 8 +- 2026/CVE-2026-31431.json | 24 ++-- 2026/CVE-2026-3609.json | 8 +- 2026/CVE-2026-39808.json | 8 +- 2026/CVE-2026-41089.json | 20 +-- 2026/CVE-2026-42978.json | 12 +- 2026/CVE-2026-43284.json | 4 +- 2026/CVE-2026-43499.json | 122 ++++++++++++------ 2026/CVE-2026-43682.json | 8 +- 2026/CVE-2026-49881.json | 8 +- 2026/CVE-2026-50343.json | 4 +- 2026/CVE-2026-52656.json | 8 +- 2026/CVE-2026-59346.json | 8 +- 2026/CVE-2026-61511.json | 19 ++- 2026/CVE-2026-64560.json | 16 +-- 2026/CVE-2026-66804.json | 4 +- 2026/CVE-2026-6875.json | 21 ++- 2026/CVE-2026-69414.json | 33 +++++ ...VE-2026-28775.json => CVE-2026-84411.json} | 24 ++-- 2026/CVE-2026-84568.json | 52 ++++++++ 2026/CVE-2026-88772.json | 8 +- 2026/CVE-2026-92701.json | 4 +- 2026/CVE-2026-9830.json | 8 +- 50 files changed, 443 insertions(+), 253 deletions(-) create mode 100644 2025/CVE-2025-9548.json rename 2026/{CVE-2026-28775.json => CVE-2026-84411.json} (52%) diff --git a/2012/CVE-2012-1823.json b/2012/CVE-2012-1823.json index 64216ccd79..160c17b04b 100644 --- a/2012/CVE-2012-1823.json +++ b/2012/CVE-2012-1823.json @@ -450,10 +450,10 @@ "description": "Exploited a known RCE vulnerability (PHP-CGI Argument Injection, CVE-2012-1823) on Metasploitable2 using Metasploit Framework, gained a shell, and documented post-exploitation", "fork": false, "created_at": "2026-10-02T13:29:59Z", - "updated_at": "2026-10-04T17:56:17Z", + "updated_at": "2026-10-10T13:47:06Z", "pushed_at": "2026-10-02T13:32:34Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -464,7 +464,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, diff --git a/2017/CVE-2017-5638.json b/2017/CVE-2017-5638.json index 688395dc62..5e1b740b7b 100644 --- a/2017/CVE-2017-5638.json +++ b/2017/CVE-2017-5638.json @@ -2368,7 +2368,7 @@ "forks": 0, "watchers": 0, "score": 0, - "subscribers_count": 0 + "subscribers_count": 1 }, { "id": 976802845, diff --git a/2018/CVE-2018-6242.json b/2018/CVE-2018-6242.json index 1a4c383037..e3355f4616 100644 --- a/2018/CVE-2018-6242.json +++ b/2018/CVE-2018-6242.json @@ -14,10 +14,10 @@ "description": "My first Android app: Launch Fusée Gelée payloads from stock Android (CVE-2018-6242)", "fork": false, "created_at": "2018-04-28T11:50:00Z", - "updated_at": "2026-10-05T11:09:02Z", + "updated_at": "2026-10-10T14:55:06Z", "pushed_at": "2022-12-11T10:44:39Z", - "stargazers_count": 559, - "watchers_count": 559, + "stargazers_count": 560, + "watchers_count": 560, "has_discussions": false, "forks_count": 54, "allow_forking": true, @@ -35,7 +35,7 @@ ], "visibility": "public", "forks": 54, - "watchers": 559, + "watchers": 560, "score": 0, "subscribers_count": 51 }, diff --git a/2019/CVE-2019-0708.json b/2019/CVE-2019-0708.json index 4bf7899f28..cd3f3f2329 100644 --- a/2019/CVE-2019-0708.json +++ b/2019/CVE-2019-0708.json @@ -3006,10 +3006,10 @@ "description": "ispy V1.0 - Eternalblue(ms17-010)\/Bluekeep(CVE-2019-0708) Scanner and exploit ( Metasploit automation )", "fork": false, "created_at": "2019-09-30T19:46:21Z", - "updated_at": "2026-08-21T11:17:38Z", + "updated_at": "2026-10-10T14:48:17Z", "pushed_at": "2021-02-06T00:24:21Z", - "stargazers_count": 245, - "watchers_count": 245, + "stargazers_count": 244, + "watchers_count": 244, "has_discussions": false, "forks_count": 68, "allow_forking": true, @@ -3020,7 +3020,7 @@ "topics": [], "visibility": "public", "forks": 68, - "watchers": 245, + "watchers": 244, "score": 0, "subscribers_count": 22 }, diff --git a/2019/CVE-2019-11510.json b/2019/CVE-2019-11510.json index 3d3a1c98c5..4abae63651 100644 --- a/2019/CVE-2019-11510.json +++ b/2019/CVE-2019-11510.json @@ -14,10 +14,10 @@ "description": "Exploit for Arbitrary File Read on Pulse Secure SSL VPN (CVE-2019-11510)", "fork": false, "created_at": "2019-08-21T08:40:26Z", - "updated_at": "2026-07-29T10:33:28Z", + "updated_at": "2026-10-10T12:40:02Z", "pushed_at": "2020-01-11T13:55:33Z", - "stargazers_count": 360, - "watchers_count": 360, + "stargazers_count": 359, + "watchers_count": 359, "has_discussions": false, "forks_count": 132, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 132, - "watchers": 360, + "watchers": 359, "score": 0, "subscribers_count": 13 }, diff --git a/2019/CVE-2019-16253.json b/2019/CVE-2019-16253.json index 2531f8be77..2404884fc1 100644 --- a/2019/CVE-2019-16253.json +++ b/2019/CVE-2019-16253.json @@ -14,10 +14,10 @@ "description": "Exploit I discovered in October of 2022 with androids Package manager binary (pm) and the way it handled debugging flags, patched out by march 2023. Uses CVE-2019-16253 as a payload to obtain a system shell. ", "fork": false, "created_at": "2023-01-19T19:47:13Z", - "updated_at": "2026-08-24T14:52:10Z", + "updated_at": "2026-10-10T15:42:08Z", "pushed_at": "2024-03-20T19:12:39Z", - "stargazers_count": 88, - "watchers_count": 88, + "stargazers_count": 89, + "watchers_count": 89, "has_discussions": false, "forks_count": 19, "allow_forking": true, @@ -35,7 +35,7 @@ ], "visibility": "public", "forks": 19, - "watchers": 88, + "watchers": 89, "score": 0, "subscribers_count": 2 } diff --git a/2020/CVE-2020-13945.json b/2020/CVE-2020-13945.json index ac5632c8ed..8d1fe74a9e 100644 --- a/2020/CVE-2020-13945.json +++ b/2020/CVE-2020-13945.json @@ -47,8 +47,8 @@ "description": "Vulhub apisix\/CVE-2020-13945: Apache APISIX Default Admin Token RCE (CVE-2020-13945), run with Isoloom", "fork": false, "created_at": "2026-10-08T22:14:47Z", - "updated_at": "2026-10-09T19:06:25Z", - "pushed_at": "2026-10-09T19:06:21Z", + "updated_at": "2026-10-10T18:37:19Z", + "pushed_at": "2026-10-10T18:37:16Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2021/CVE-2021-1931.json b/2021/CVE-2021-1931.json index 6d95250e25..332b6672df 100644 --- a/2021/CVE-2021-1931.json +++ b/2021/CVE-2021-1931.json @@ -80,10 +80,10 @@ "description": "Unlock the Meta Quest 1 bootloader and gain root access using GhostLock + CVE-2021-1931.", "fork": false, "created_at": "2026-07-31T05:37:56Z", - "updated_at": "2026-10-09T15:12:00Z", + "updated_at": "2026-10-10T15:42:25Z", "pushed_at": "2026-08-28T12:08:00Z", - "stargazers_count": 212, - "watchers_count": 212, + "stargazers_count": 213, + "watchers_count": 213, "has_discussions": false, "forks_count": 9, "allow_forking": true, @@ -108,7 +108,7 @@ ], "visibility": "public", "forks": 9, - "watchers": 212, + "watchers": 213, "score": 0, "subscribers_count": 5 }, diff --git a/2021/CVE-2021-40444.json b/2021/CVE-2021-40444.json index a8e68ee14e..8bb4e339c5 100644 --- a/2021/CVE-2021-40444.json +++ b/2021/CVE-2021-40444.json @@ -245,10 +245,10 @@ "description": "CVE-2021-40444 PoC", "fork": false, "created_at": "2021-09-10T16:55:53Z", - "updated_at": "2026-10-09T18:48:20Z", + "updated_at": "2026-10-10T16:13:31Z", "pushed_at": "2021-12-25T18:31:02Z", - "stargazers_count": 1835, - "watchers_count": 1835, + "stargazers_count": 1836, + "watchers_count": 1836, "has_discussions": false, "forks_count": 473, "allow_forking": true, @@ -259,7 +259,7 @@ "topics": [], "visibility": "public", "forks": 473, - "watchers": 1835, + "watchers": 1836, "score": 0, "subscribers_count": 28 }, diff --git a/2021/CVE-2021-44228.json b/2021/CVE-2021-44228.json index eb56d7d88c..8fef1c3db4 100644 --- a/2021/CVE-2021-44228.json +++ b/2021/CVE-2021-44228.json @@ -15722,5 +15722,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1413407498, + "name": "cs50-cybersecurity-final-project", + "full_name": "Developer-Dynamo\/cs50-cybersecurity-final-project", + "owner": { + "login": "Developer-Dynamo", + "id": 224176705, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/224176705?v=4", + "html_url": "https:\/\/github.com\/Developer-Dynamo", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Developer-Dynamo\/cs50-cybersecurity-final-project", + "description": "Technical analysis of Log4Shell (CVE-2021-44228) for CS50 Cybersecurity.", + "fork": false, + "created_at": "2026-10-10T16:21:46Z", + "updated_at": "2026-10-10T16:28:45Z", + "pushed_at": "2026-10-10T16:28:42Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2023/CVE-2023-20696.json b/2023/CVE-2023-20696.json index f112309326..f9cd2cc6b8 100644 --- a/2023/CVE-2023-20696.json +++ b/2023/CVE-2023-20696.json @@ -14,10 +14,10 @@ "description": "Cert exploit for MTK devices.There is a logic flaw in MTK cert verification process.Similar to CVE-2023-20696.", "fork": false, "created_at": "2026-06-22T02:09:35Z", - "updated_at": "2026-10-09T02:16:12Z", + "updated_at": "2026-10-10T14:13:25Z", "pushed_at": "2026-07-23T12:23:11Z", - "stargazers_count": 36, - "watchers_count": 36, + "stargazers_count": 37, + "watchers_count": 37, "has_discussions": false, "forks_count": 15, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 15, - "watchers": 36, + "watchers": 37, "score": 0, "subscribers_count": 1 }, diff --git a/2023/CVE-2023-27524.json b/2023/CVE-2023-27524.json index c19f1678e8..81d3091e19 100644 --- a/2023/CVE-2023-27524.json +++ b/2023/CVE-2023-27524.json @@ -489,8 +489,8 @@ "description": "Vulhub superset\/CVE-2023-27524: Apache Superset Default SECRET_KEY Session Forgery (CVE-2023-27524), run with Isoloom", "fork": false, "created_at": "2026-10-08T19:38:15Z", - "updated_at": "2026-10-09T19:13:05Z", - "pushed_at": "2026-10-09T19:13:01Z", + "updated_at": "2026-10-10T18:17:18Z", + "pushed_at": "2026-10-10T18:17:15Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2023/CVE-2023-38646.json b/2023/CVE-2023-38646.json index bdcea88110..232d89c051 100644 --- a/2023/CVE-2023-38646.json +++ b/2023/CVE-2023-38646.json @@ -903,39 +903,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 715398190, - "name": "CVE-2023-38646", - "full_name": "Mrunalkaran\/CVE-2023-38646", - "owner": { - "login": "Mrunalkaran", - "id": 12004564, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/12004564?v=4", - "html_url": "https:\/\/github.com\/Mrunalkaran", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Mrunalkaran\/CVE-2023-38646", - "description": "Metabase Pre-Auth RCE POC", - "fork": false, - "created_at": "2023-11-07T03:57:15Z", - "updated_at": "2023-11-07T04:17:08Z", - "pushed_at": "2023-11-07T05:10:02Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 716592824, "name": "CVE-2023-38646", diff --git a/2024/CVE-2024-35250.json b/2024/CVE-2024-35250.json index 81c551fc01..3f2b76e822 100644 --- a/2024/CVE-2024-35250.json +++ b/2024/CVE-2024-35250.json @@ -80,10 +80,10 @@ "description": "CVE-2024-35250 的 Beacon Object File (BOF) 实现。", "fork": false, "created_at": "2024-11-23T12:12:00Z", - "updated_at": "2026-09-17T02:58:54Z", + "updated_at": "2026-10-10T14:31:06Z", "pushed_at": "2024-11-28T09:23:35Z", - "stargazers_count": 23, - "watchers_count": 23, + "stargazers_count": 24, + "watchers_count": 24, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -98,7 +98,7 @@ ], "visibility": "public", "forks": 2, - "watchers": 23, + "watchers": 24, "score": 0, "subscribers_count": 1 }, diff --git a/2024/CVE-2024-4367.json b/2024/CVE-2024-4367.json index e3042bc048..a00175d85c 100644 --- a/2024/CVE-2024-4367.json +++ b/2024/CVE-2024-4367.json @@ -160,7 +160,7 @@ "description": "CVE-2024-4367 mitigation for Odoo 14.0", "fork": false, "created_at": "2024-05-23T07:34:15Z", - "updated_at": "2025-09-23T04:02:32Z", + "updated_at": "2026-10-10T16:39:16Z", "pushed_at": "2024-05-27T07:23:33Z", "stargazers_count": 1, "watchers_count": 1, diff --git a/2025/CVE-2025-14847.json b/2025/CVE-2025-14847.json index 996a48b236..7422f06618 100644 --- a/2025/CVE-2025-14847.json +++ b/2025/CVE-2025-14847.json @@ -134,10 +134,10 @@ "description": "a critical memory disclosure vulnerability in MongoDB's zlib compression handling. This tool allows security researchers to extract sensitive data from vulnerable MongoDB instances.", "fork": false, "created_at": "2025-12-27T15:01:50Z", - "updated_at": "2026-08-20T00:28:19Z", + "updated_at": "2026-10-10T16:18:08Z", "pushed_at": "2025-12-27T17:50:59Z", - "stargazers_count": 34, - "watchers_count": 34, + "stargazers_count": 35, + "watchers_count": 35, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -148,7 +148,7 @@ "topics": [], "visibility": "public", "forks": 3, - "watchers": 34, + "watchers": 35, "score": 0, "subscribers_count": 0 }, diff --git a/2025/CVE-2025-21479.json b/2025/CVE-2025-21479.json index 1082f1e4b4..adfc90c7ff 100644 --- a/2025/CVE-2025-21479.json +++ b/2025/CVE-2025-21479.json @@ -429,8 +429,8 @@ "description": "Support OriginOS 4~ OriginOS 6(Some firmware requires manual, individual adaptation), using CVE-2025-21479，CVE-2026-43499", "fork": false, "created_at": "2026-10-06T09:08:12Z", - "updated_at": "2026-10-08T13:49:11Z", - "pushed_at": "2026-10-08T13:49:06Z", + "updated_at": "2026-10-10T14:26:42Z", + "pushed_at": "2026-10-10T14:26:39Z", "stargazers_count": 5, "watchers_count": 5, "has_discussions": false, diff --git a/2025/CVE-2025-2304.json b/2025/CVE-2025-2304.json index c1ee7fa61d..6eb1f7c42b 100644 --- a/2025/CVE-2025-2304.json +++ b/2025/CVE-2025-2304.json @@ -49,10 +49,10 @@ "description": "Proof-of-concept for CVE-2025-2304 — critical (CVSS 9.4) mass-assignment privilege escalation in Camaleon CMS.", "fork": false, "created_at": "2026-01-31T21:33:13Z", - "updated_at": "2026-07-10T15:31:54Z", + "updated_at": "2026-10-10T14:57:17Z", "pushed_at": "2026-05-01T18:49:56Z", - "stargazers_count": 10, - "watchers_count": 10, + "stargazers_count": 9, + "watchers_count": 9, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -63,7 +63,7 @@ "topics": [], "visibility": "public", "forks": 3, - "watchers": 10, + "watchers": 9, "score": 0, "subscribers_count": 0 }, diff --git a/2025/CVE-2025-52915.json b/2025/CVE-2025-52915.json index 91442e41d0..b18d53417e 100644 --- a/2025/CVE-2025-52915.json +++ b/2025/CVE-2025-52915.json @@ -14,10 +14,10 @@ "description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).", "fork": false, "created_at": "2023-12-05T14:52:11Z", - "updated_at": "2026-10-09T15:38:47Z", + "updated_at": "2026-10-10T18:13:11Z", "pushed_at": "2026-08-18T12:25:25Z", - "stargazers_count": 969, - "watchers_count": 969, + "stargazers_count": 970, + "watchers_count": 970, "has_discussions": false, "forks_count": 142, "allow_forking": true, @@ -39,7 +39,7 @@ ], "visibility": "public", "forks": 142, - "watchers": 969, + "watchers": 970, "score": 0, "subscribers_count": 22 } diff --git a/2025/CVE-2025-54424.json b/2025/CVE-2025-54424.json index 2f5e7d9b8d..18cb2efbc3 100644 --- a/2025/CVE-2025-54424.json +++ b/2025/CVE-2025-54424.json @@ -53,8 +53,8 @@ "description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐", "fork": false, "created_at": "2025-08-14T05:16:16Z", - "updated_at": "2026-10-10T12:27:01Z", - "pushed_at": "2026-10-10T12:26:57Z", + "updated_at": "2026-10-10T18:26:41Z", + "pushed_at": "2026-10-10T18:26:37Z", "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, diff --git a/2025/CVE-2025-55182.json b/2025/CVE-2025-55182.json index f97aa229dc..856d3fa25e 100644 --- a/2025/CVE-2025-55182.json +++ b/2025/CVE-2025-55182.json @@ -14,8 +14,8 @@ "description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.", "fork": false, "created_at": "2022-06-17T10:19:10Z", - "updated_at": "2026-10-10T12:45:35Z", - "pushed_at": "2026-10-10T12:45:31Z", + "updated_at": "2026-10-10T18:42:54Z", + "pushed_at": "2026-10-10T18:42:50Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -1102,10 +1102,10 @@ "description": "Explanation and full RCE PoC for CVE-2025-55182", "fork": false, "created_at": "2025-12-04T11:49:55Z", - "updated_at": "2026-10-08T19:53:54Z", + "updated_at": "2026-10-10T14:57:17Z", "pushed_at": "2025-12-08T13:51:04Z", - "stargazers_count": 1431, - "watchers_count": 1431, + "stargazers_count": 1430, + "watchers_count": 1430, "has_discussions": false, "forks_count": 196, "allow_forking": true, @@ -1116,7 +1116,7 @@ "topics": [], "visibility": "public", "forks": 196, - "watchers": 1431, + "watchers": 1430, "score": 0, "subscribers_count": 10 }, @@ -4831,7 +4831,7 @@ "stargazers_count": 266, "watchers_count": 266, "has_discussions": false, - "forks_count": 61, + "forks_count": 62, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -4839,7 +4839,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 61, + "forks": 62, "watchers": 266, "score": 0, "subscribers_count": 3 @@ -11458,8 +11458,8 @@ "description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.", "fork": false, "created_at": "2025-12-24T14:48:19Z", - "updated_at": "2026-10-10T12:45:31Z", - "pushed_at": "2026-10-10T12:45:28Z", + "updated_at": "2026-10-10T18:42:57Z", + "pushed_at": "2026-10-10T18:42:53Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-66398.json b/2025/CVE-2025-66398.json index 18a48d0814..2efb3e5d48 100644 --- a/2025/CVE-2025-66398.json +++ b/2025/CVE-2025-66398.json @@ -64,8 +64,8 @@ "description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.", "fork": false, "created_at": "2026-03-23T09:09:21Z", - "updated_at": "2026-10-10T13:10:41Z", - "pushed_at": "2026-10-10T13:10:37Z", + "updated_at": "2026-10-10T18:58:53Z", + "pushed_at": "2026-10-10T18:58:49Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-66478.json b/2025/CVE-2025-66478.json index 9fa5608d72..4fe07f3483 100644 --- a/2025/CVE-2025-66478.json +++ b/2025/CVE-2025-66478.json @@ -172,7 +172,7 @@ "stargazers_count": 157, "watchers_count": 157, "has_discussions": false, - "forks_count": 30, + "forks_count": 31, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -191,7 +191,7 @@ "vulnerability-scanner" ], "visibility": "public", - "forks": 30, + "forks": 31, "watchers": 157, "score": 0, "subscribers_count": 2 diff --git a/2025/CVE-2025-9548.json b/2025/CVE-2025-9548.json new file mode 100644 index 0000000000..49004c06cd --- /dev/null +++ b/2025/CVE-2025-9548.json @@ -0,0 +1,35 @@ +[ + { + "id": 1413380062, + "name": "CVE-2025-9548", + "full_name": "CyberFrenchie\/CVE-2025-9548", + "owner": { + "login": "CyberFrenchie", + "id": 115875317, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/115875317?v=4", + "html_url": "https:\/\/github.com\/CyberFrenchie", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/CyberFrenchie\/CVE-2025-9548", + "description": "CVE-2025-9548: Lenovo Power Management Driver null-pointer dereference research and gated PoC", + "fork": false, + "created_at": "2026-10-10T15:55:33Z", + "updated_at": "2026-10-10T16:02:12Z", + "pushed_at": "2026-10-10T16:01:15Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-107181.json b/2026/CVE-2026-107181.json index 95f8645748..0803acdcdd 100644 --- a/2026/CVE-2026-107181.json +++ b/2026/CVE-2026-107181.json @@ -14,12 +14,12 @@ "description": "Telegram CVE-2026-107181", "fork": false, "created_at": "2026-10-10T01:12:57Z", - "updated_at": "2026-10-10T01:28:16Z", + "updated_at": "2026-10-10T18:40:16Z", "pushed_at": "2026-10-10T01:28:11Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, - "forks_count": 2, + "forks_count": 3, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,8 +27,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 2, - "watchers": 0, + "forks": 3, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-20841.json b/2026/CVE-2026-20841.json index 7f69ee9a53..b39fca607e 100644 --- a/2026/CVE-2026-20841.json +++ b/2026/CVE-2026-20841.json @@ -412,8 +412,8 @@ "description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.", "fork": false, "created_at": "2026-02-26T05:21:28Z", - "updated_at": "2026-10-10T13:01:47Z", - "pushed_at": "2026-10-10T13:01:44Z", + "updated_at": "2026-10-10T18:53:34Z", + "pushed_at": "2026-10-10T18:53:31Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-21589.json b/2026/CVE-2026-21589.json index 1a0fd16327..9f1651ea97 100644 --- a/2026/CVE-2026-21589.json +++ b/2026/CVE-2026-21589.json @@ -303,7 +303,7 @@ "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -311,7 +311,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 1, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-24061.json b/2026/CVE-2026-24061.json index ecb73488c8..8a9b4a6e97 100644 --- a/2026/CVE-2026-24061.json +++ b/2026/CVE-2026-24061.json @@ -1508,8 +1508,8 @@ "description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.", "fork": false, "created_at": "2026-02-03T19:46:10Z", - "updated_at": "2026-10-10T12:57:04Z", - "pushed_at": "2026-10-10T12:57:00Z", + "updated_at": "2026-10-10T18:50:27Z", + "pushed_at": "2026-10-10T18:50:24Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -2322,7 +2322,7 @@ "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -2330,7 +2330,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 0, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-31431.json b/2026/CVE-2026-31431.json index a15f4c967d..d8ecc45b5b 100644 --- a/2026/CVE-2026-31431.json +++ b/2026/CVE-2026-31431.json @@ -241,7 +241,7 @@ "stargazers_count": 30, "watchers_count": 30, "has_discussions": false, - "forks_count": 11, + "forks_count": 12, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -249,7 +249,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 11, + "forks": 12, "watchers": 30, "score": 0, "subscribers_count": 0 @@ -450,10 +450,10 @@ "description": "CVE-2026-31431 纯文件利用", "fork": false, "created_at": "2026-04-30T02:55:03Z", - "updated_at": "2026-08-30T13:42:25Z", + "updated_at": "2026-10-10T16:27:53Z", "pushed_at": "2026-04-30T16:24:17Z", - "stargazers_count": 111, - "watchers_count": 111, + "stargazers_count": 112, + "watchers_count": 112, "has_discussions": false, "forks_count": 29, "allow_forking": true, @@ -464,7 +464,7 @@ "topics": [], "visibility": "public", "forks": 29, - "watchers": 111, + "watchers": 112, "score": 0, "subscribers_count": 0 }, @@ -3280,10 +3280,10 @@ "description": "Detection Only.. working on an exploit PoC", "fork": false, "created_at": "2026-04-30T20:54:56Z", - "updated_at": "2026-06-04T17:18:54Z", + "updated_at": "2026-10-10T16:27:18Z", "pushed_at": "2026-05-06T14:09:40Z", - "stargazers_count": 25, - "watchers_count": 25, + "stargazers_count": 26, + "watchers_count": 26, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -3299,7 +3299,7 @@ ], "visibility": "public", "forks": 2, - "watchers": 25, + "watchers": 26, "score": 0, "subscribers_count": 0 }, @@ -7456,8 +7456,8 @@ "description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.", "fork": false, "created_at": "2026-05-05T04:58:21Z", - "updated_at": "2026-10-10T13:22:14Z", - "pushed_at": "2026-10-10T13:22:11Z", + "updated_at": "2026-10-10T19:06:57Z", + "pushed_at": "2026-10-10T19:06:54Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-3609.json b/2026/CVE-2026-3609.json index 0a1de97f6d..b6590908e7 100644 --- a/2026/CVE-2026-3609.json +++ b/2026/CVE-2026-3609.json @@ -14,10 +14,10 @@ "description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).", "fork": false, "created_at": "2023-12-05T14:52:11Z", - "updated_at": "2026-10-09T15:38:47Z", + "updated_at": "2026-10-10T18:13:11Z", "pushed_at": "2026-08-18T12:25:25Z", - "stargazers_count": 969, - "watchers_count": 969, + "stargazers_count": 970, + "watchers_count": 970, "has_discussions": false, "forks_count": 142, "allow_forking": true, @@ -39,7 +39,7 @@ ], "visibility": "public", "forks": 142, - "watchers": 969, + "watchers": 970, "score": 0, "subscribers_count": 22 }, diff --git a/2026/CVE-2026-39808.json b/2026/CVE-2026-39808.json index 0663bd4e1d..2dd9f9798f 100644 --- a/2026/CVE-2026-39808.json +++ b/2026/CVE-2026-39808.json @@ -87,10 +87,10 @@ "description": "FortiSandbox RCE Scanner — CVE-2026-39808", "fork": false, "created_at": "2026-04-21T22:21:48Z", - "updated_at": "2026-07-13T12:12:30Z", + "updated_at": "2026-10-10T19:14:43Z", "pushed_at": "2026-04-21T22:32:02Z", - "stargazers_count": 26, - "watchers_count": 26, + "stargazers_count": 27, + "watchers_count": 27, "has_discussions": false, "forks_count": 9, "allow_forking": true, @@ -101,7 +101,7 @@ "topics": [], "visibility": "public", "forks": 9, - "watchers": 26, + "watchers": 27, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-41089.json b/2026/CVE-2026-41089.json index 1147d00644..7876341bba 100644 --- a/2026/CVE-2026-41089.json +++ b/2026/CVE-2026-41089.json @@ -185,10 +185,10 @@ "description": "CVE-2026-41089 checker: unauthenticated, non-destructive detection for the Netlogon CLDAP stack buffer overflow (CVSS 9.8). Reports whether a domain controller's domain is long enough to crash, without sending the overflow. The binary-verified analysis the public PoCs got wrong.", "fork": false, "created_at": "2026-06-03T16:30:35Z", - "updated_at": "2026-08-24T10:19:22Z", + "updated_at": "2026-10-10T15:12:11Z", "pushed_at": "2026-06-04T08:11:31Z", - "stargazers_count": 14, - "watchers_count": 14, + "stargazers_count": 15, + "watchers_count": 15, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -219,7 +219,7 @@ ], "visibility": "public", "forks": 2, - "watchers": 14, + "watchers": 15, "score": 0, "subscribers_count": 0 }, @@ -284,8 +284,8 @@ "description": "Scan Windows Domain Controllers for CVE-2026-41089 to detect unauthenticated remote code execution vulnerabilities in the Netlogon service.", "fork": false, "created_at": "2026-07-22T15:40:18Z", - "updated_at": "2026-10-10T13:31:53Z", - "pushed_at": "2026-10-10T13:31:50Z", + "updated_at": "2026-10-10T19:13:14Z", + "pushed_at": "2026-10-10T19:13:11Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -376,10 +376,10 @@ "description": "CVE-2026-41089 Netlogon RCE PoC — security research, vulnerability validation & defensive testing.", "fork": false, "created_at": "2026-09-11T10:34:35Z", - "updated_at": "2026-10-01T10:22:21Z", + "updated_at": "2026-10-10T16:05:39Z", "pushed_at": "2026-09-11T18:14:44Z", - "stargazers_count": 67, - "watchers_count": 67, + "stargazers_count": 65, + "watchers_count": 65, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -411,7 +411,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 67, + "watchers": 65, "score": 0, "subscribers_count": 2 }, diff --git a/2026/CVE-2026-42978.json b/2026/CVE-2026-42978.json index 500e1567c3..4d2b4e008e 100644 --- a/2026/CVE-2026-42978.json +++ b/2026/CVE-2026-42978.json @@ -80,10 +80,10 @@ "description": "CVE-2026-42978 Windows Push Notifications (WpnService) Use-After-Free & Race Condition PoC research, diagnostic scanner, and security audit module for AI Security Tool.", "fork": false, "created_at": "2026-09-11T19:58:55Z", - "updated_at": "2026-10-01T10:22:21Z", + "updated_at": "2026-10-10T16:05:39Z", "pushed_at": "2026-09-11T20:53:46Z", - "stargazers_count": 68, - "watchers_count": 68, + "stargazers_count": 67, + "watchers_count": 67, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -110,7 +110,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 68, + "watchers": 67, "score": 0, "subscribers_count": 2 }, @@ -129,8 +129,8 @@ "description": "Exploit and analyze CVE-2026-42978 with a Windows Push Notifications module for AI security, multi-protocol terminal, and autonomous agent suite.", "fork": false, "created_at": "2026-09-21T23:14:36Z", - "updated_at": "2026-10-10T11:09:36Z", - "pushed_at": "2026-10-10T11:09:33Z", + "updated_at": "2026-10-10T19:18:24Z", + "pushed_at": "2026-10-10T19:18:20Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-43284.json b/2026/CVE-2026-43284.json index 0e08c0e5d4..a7a5c98e42 100644 --- a/2026/CVE-2026-43284.json +++ b/2026/CVE-2026-43284.json @@ -1355,7 +1355,7 @@ "stargazers_count": 27, "watchers_count": 27, "has_discussions": false, - "forks_count": 13, + "forks_count": 15, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1363,7 +1363,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 13, + "forks": 15, "watchers": 27, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-43499.json b/2026/CVE-2026-43499.json index 92223e3068..6a1cc741b4 100644 --- a/2026/CVE-2026-43499.json +++ b/2026/CVE-2026-43499.json @@ -170,8 +170,8 @@ }, { "id": 1295839291, - "name": "oppo-ghostlock", - "full_name": "pubglite55\/oppo-ghostlock", + "name": "oppofindN2-ghostlock", + "full_name": "pubglite55\/oppofindN2-ghostlock", "owner": { "login": "pubglite55", "id": 101575060, @@ -179,12 +179,12 @@ "html_url": "https:\/\/github.com\/pubglite55", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/pubglite55\/oppo-ghostlock", + "html_url": "https:\/\/github.com\/pubglite55\/oppofindN2-ghostlock", "description": "OPPO Find N2 GhostLock (CVE-2026-43499) exploit adaptation", "fork": false, "created_at": "2026-07-09T22:46:15Z", - "updated_at": "2026-10-08T06:39:25Z", - "pushed_at": "2026-10-06T12:19:33Z", + "updated_at": "2026-10-10T15:45:31Z", + "pushed_at": "2026-10-10T15:45:27Z", "stargazers_count": 66, "watchers_count": 66, "has_discussions": false, @@ -194,7 +194,20 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "android-security", + "arm64", + "cve-2026-43499", + "exploit", + "futex", + "heap-spray", + "kaslr", + "kernel-exploit", + "linux-kernel", + "oppo-find-n2", + "privilege-escalation", + "use-after-free" + ], "visibility": "public", "forks": 27, "watchers": 66, @@ -282,10 +295,10 @@ "description": "CVE-2026-43499 Implementation for 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k", "fork": false, "created_at": "2026-07-12T10:15:03Z", - "updated_at": "2026-10-08T07:03:13Z", + "updated_at": "2026-10-10T13:51:04Z", "pushed_at": "2026-07-15T22:46:59Z", - "stargazers_count": 251, - "watchers_count": 251, + "stargazers_count": 252, + "watchers_count": 252, "has_discussions": false, "forks_count": 99, "allow_forking": true, @@ -296,7 +309,7 @@ "topics": [], "visibility": "public", "forks": 99, - "watchers": 251, + "watchers": 252, "score": 0, "subscribers_count": 3 }, @@ -487,10 +500,10 @@ "description": "Android version CVE-2026-43499 tester", "fork": false, "created_at": "2026-07-13T13:31:55Z", - "updated_at": "2026-10-03T23:55:22Z", + "updated_at": "2026-10-10T13:53:34Z", "pushed_at": "2026-07-20T07:22:42Z", - "stargazers_count": 85, - "watchers_count": 85, + "stargazers_count": 86, + "watchers_count": 86, "has_discussions": false, "forks_count": 18, "allow_forking": true, @@ -501,7 +514,7 @@ "topics": [], "visibility": "public", "forks": 18, - "watchers": 85, + "watchers": 86, "score": 0, "subscribers_count": 0 }, @@ -1048,12 +1061,12 @@ "description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499", "fork": false, "created_at": "2026-07-17T14:24:08Z", - "updated_at": "2026-10-10T12:16:13Z", + "updated_at": "2026-10-10T18:46:51Z", "pushed_at": "2026-09-03T03:21:42Z", - "stargazers_count": 1385, - "watchers_count": 1385, + "stargazers_count": 1387, + "watchers_count": 1387, "has_discussions": false, - "forks_count": 283, + "forks_count": 284, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1061,8 +1074,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 283, - "watchers": 1385, + "forks": 284, + "watchers": 1387, "score": 0, "subscribers_count": 42 }, @@ -1147,10 +1160,10 @@ "description": "UNFINISHED\/WIP - CVE-2026-43499 (IonStack\/GhostLock) research POC for Samsung SM-T878U \/ gts7l. Trigger + geometry verified, NO working root yet.", "fork": false, "created_at": "2026-07-18T08:18:28Z", - "updated_at": "2026-10-07T13:53:29Z", + "updated_at": "2026-10-10T13:49:15Z", "pushed_at": "2026-10-06T16:50:56Z", - "stargazers_count": 16, - "watchers_count": 16, + "stargazers_count": 17, + "watchers_count": 17, "has_discussions": false, "forks_count": 8, "allow_forking": true, @@ -1171,7 +1184,7 @@ ], "visibility": "public", "forks": 8, - "watchers": 16, + "watchers": 17, "score": 0, "subscribers_count": 1 }, @@ -1483,6 +1496,39 @@ "score": 0, "subscribers_count": 0 }, + { + "id": 1312428385, + "name": "CVE-2026-43499-OPPO-6.12.58", + "full_name": "vn-ncvinh\/CVE-2026-43499-OPPO-6.12.58", + "owner": { + "login": "vn-ncvinh", + "id": 80946737, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/80946737?v=4", + "html_url": "https:\/\/github.com\/vn-ncvinh", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/vn-ncvinh\/CVE-2026-43499-OPPO-6.12.58", + "description": null, + "fork": false, + "created_at": "2026-07-26T01:58:51Z", + "updated_at": "2026-10-10T15:01:25Z", + "pushed_at": "2026-08-08T00:42:40Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, { "id": 1312654320, "name": "CVE-2026-43499-warhol-root", @@ -1663,12 +1709,12 @@ "description": "GhostLock One-Tap Execution App (CVE-2026-43499)", "fork": false, "created_at": "2026-07-29T05:04:25Z", - "updated_at": "2026-10-10T13:33:10Z", + "updated_at": "2026-10-10T17:32:16Z", "pushed_at": "2026-10-09T15:56:32Z", - "stargazers_count": 1746, - "watchers_count": 1746, + "stargazers_count": 1761, + "watchers_count": 1761, "has_discussions": true, - "forks_count": 453, + "forks_count": 456, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1676,8 +1722,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 453, - "watchers": 1746, + "forks": 456, + "watchers": 1761, "score": 0, "subscribers_count": 21 }, @@ -2036,7 +2082,7 @@ "stargazers_count": 433, "watchers_count": 433, "has_discussions": false, - "forks_count": 64, + "forks_count": 63, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -2051,7 +2097,7 @@ "root" ], "visibility": "public", - "forks": 64, + "forks": 63, "watchers": 433, "score": 0, "subscribers_count": 7 @@ -2236,8 +2282,8 @@ "description": "Root your Galaxy using CVE-2026-43499", "fork": false, "created_at": "2026-08-08T11:41:33Z", - "updated_at": "2026-10-09T23:00:25Z", - "pushed_at": "2026-10-05T14:19:26Z", + "updated_at": "2026-10-10T14:36:37Z", + "pushed_at": "2026-10-10T14:36:33Z", "stargazers_count": 32, "watchers_count": 32, "has_discussions": false, @@ -4008,7 +4054,7 @@ "stargazers_count": 11, "watchers_count": 11, "has_discussions": false, - "forks_count": 3, + "forks_count": 4, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -4033,7 +4079,7 @@ "wrapper" ], "visibility": "public", - "forks": 3, + "forks": 4, "watchers": 11, "score": 0, "subscribers_count": 0 @@ -5195,8 +5241,8 @@ "description": "Support OriginOS 4~ OriginOS 6(Some firmware requires manual, individual adaptation), using CVE-2025-21479，CVE-2026-43499", "fork": false, "created_at": "2026-10-06T09:08:12Z", - "updated_at": "2026-10-08T13:49:11Z", - "pushed_at": "2026-10-08T13:49:06Z", + "updated_at": "2026-10-10T14:26:42Z", + "pushed_at": "2026-10-10T14:26:39Z", "stargazers_count": 5, "watchers_count": 5, "has_discussions": false, diff --git a/2026/CVE-2026-43682.json b/2026/CVE-2026-43682.json index b519d4efb9..05f4d00ce4 100644 --- a/2026/CVE-2026-43682.json +++ b/2026/CVE-2026-43682.json @@ -14,10 +14,10 @@ "description": "CVE-2026-43682: HFS+ B-tree kernel heap overflow in macOS", "fork": false, "created_at": "2026-09-26T05:47:11Z", - "updated_at": "2026-10-07T07:05:25Z", + "updated_at": "2026-10-10T14:24:26Z", "pushed_at": "2026-09-26T05:47:14Z", - "stargazers_count": 12, - "watchers_count": 12, + "stargazers_count": 13, + "watchers_count": 13, "has_discussions": false, "forks_count": 5, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 5, - "watchers": 12, + "watchers": 13, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-49881.json b/2026/CVE-2026-49881.json index 99dbf39d4b..f649970e71 100644 --- a/2026/CVE-2026-49881.json +++ b/2026/CVE-2026-49881.json @@ -14,10 +14,10 @@ "description": "Android complete exploit chain that enables privilege escalation from a local untrusted app to root\/kernel, combination of CVE-2026-49881 and CVE-2026-43284", "fork": false, "created_at": "2026-07-23T07:01:34Z", - "updated_at": "2026-10-10T09:10:28Z", + "updated_at": "2026-10-10T14:46:11Z", "pushed_at": "2026-09-09T00:47:49Z", - "stargazers_count": 454, - "watchers_count": 454, + "stargazers_count": 455, + "watchers_count": 455, "has_discussions": false, "forks_count": 106, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 106, - "watchers": 454, + "watchers": 455, "score": 0, "subscribers_count": 6 }, diff --git a/2026/CVE-2026-50343.json b/2026/CVE-2026-50343.json index c0427bf25d..05749a31cf 100644 --- a/2026/CVE-2026-50343.json +++ b/2026/CVE-2026-50343.json @@ -19,7 +19,7 @@ "stargazers_count": 48, "watchers_count": 48, "has_discussions": false, - "forks_count": 12, + "forks_count": 13, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 12, + "forks": 13, "watchers": 48, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-52656.json b/2026/CVE-2026-52656.json index 4af7ea844d..545d8aecbb 100644 --- a/2026/CVE-2026-52656.json +++ b/2026/CVE-2026-52656.json @@ -14,10 +14,10 @@ "description": "Reverse engineering research and custom firmware for the Allwinner V3-based SJCAM SJ4000 Air, including firmware parsers, an AVIOCTRL client, security research, and the CVE-2026-52656 proof of concept.", "fork": false, "created_at": "2025-12-01T23:00:42Z", - "updated_at": "2026-07-21T04:45:55Z", + "updated_at": "2026-10-10T18:09:30Z", "pushed_at": "2026-07-19T00:30:37Z", - "stargazers_count": 8, - "watchers_count": 8, + "stargazers_count": 9, + "watchers_count": 9, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -43,7 +43,7 @@ ], "visibility": "public", "forks": 1, - "watchers": 8, + "watchers": 9, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-59346.json b/2026/CVE-2026-59346.json index 0d81807857..5eb3121b66 100644 --- a/2026/CVE-2026-59346.json +++ b/2026/CVE-2026-59346.json @@ -14,10 +14,10 @@ "description": "PoC for CVE-2026-59346 - 32-bit integer overflow in VMware's VMXNET3 TSO segmentation path, guest-to-host crash.", "fork": false, "created_at": "2026-09-15T11:11:39Z", - "updated_at": "2026-10-09T20:41:27Z", + "updated_at": "2026-10-10T18:14:56Z", "pushed_at": "2026-09-15T11:13:08Z", - "stargazers_count": 10, - "watchers_count": 10, + "stargazers_count": 11, + "watchers_count": 11, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 3, - "watchers": 10, + "watchers": 11, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-61511.json b/2026/CVE-2026-61511.json index 6fc80ab9fc..6d2893fed6 100644 --- a/2026/CVE-2026-61511.json +++ b/2026/CVE-2026-61511.json @@ -118,11 +118,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/tc4dy\/CVE-2026-61511-PoC-Exploit", - "description": "CVE-2026-61511 – vBulletin Pre-Auth RCE (CVSS 9.8). Vuln 5.x\/6.x (unpatched). Multi-exploit via Endpoint Pool, AJAX, PHPFuck WAF bypass. Full toolkit: reverse shell, proxy, persistence, webshell, database operations, firewall control, log management, mass scanning. 2 versions: multi-exploit & safe-check. Python 3.8+ Use Ethically, Stay Legal. 🔒", + "description": "CVE-2026-61511 – vBulletin Pre-Auth RCE (CVSS 9.8). Vuln 5.x\/6.x (unpatched). Multi-exploit via Endpoint Pool, AJAX, PHPFuck WAF bypass. Full toolkit: reverse shell, proxy, persistence, webshell, database operations, firewall control, log management, mass scanning. 2 versions: multi-exploit & safe-check. Python 3.8+ Use Ethically, Stay Legal. ", "fork": false, "created_at": "2026-07-29T08:18:31Z", - "updated_at": "2026-08-17T11:58:24Z", - "pushed_at": "2026-08-06T09:29:54Z", + "updated_at": "2026-10-10T14:24:59Z", + "pushed_at": "2026-10-10T14:24:56Z", "stargazers_count": 5, "watchers_count": 5, "has_discussions": false, @@ -132,7 +132,18 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cve-2026-61511", + "exploit", + "proof-of-concept", + "rce", + "rce-exploit", + "vbulletin", + "vbulletin-vuln", + "vbulletin3", + "vbulletin4", + "vbulletin5" + ], "visibility": "public", "forks": 0, "watchers": 5, diff --git a/2026/CVE-2026-64560.json b/2026/CVE-2026-64560.json index c82fd96af1..728b2f3b63 100644 --- a/2026/CVE-2026-64560.json +++ b/2026/CVE-2026-64560.json @@ -179,10 +179,10 @@ "description": "CVE-2026-64560 toolkit: Go single-binary toolchain + realme RMX5010 (A16, SM8750) target port", "fork": false, "created_at": "2026-09-25T13:23:40Z", - "updated_at": "2026-10-04T20:43:57Z", + "updated_at": "2026-10-10T19:21:00Z", "pushed_at": "2026-09-26T02:59:59Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -193,7 +193,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, @@ -245,10 +245,10 @@ "description": "OnePlus Ace 6 temporary root tool (CVE-2026-64560) - device-verified port with corrected bootidParent address", "fork": false, "created_at": "2026-09-26T12:31:39Z", - "updated_at": "2026-10-04T20:41:26Z", + "updated_at": "2026-10-10T16:09:49Z", "pushed_at": "2026-09-29T02:59:57Z", - "stargazers_count": 7, - "watchers_count": 7, + "stargazers_count": 8, + "watchers_count": 8, "has_discussions": false, "forks_count": 4, "allow_forking": true, @@ -259,7 +259,7 @@ "topics": [], "visibility": "public", "forks": 4, - "watchers": 7, + "watchers": 8, "score": 0, "subscribers_count": 1 }, diff --git a/2026/CVE-2026-66804.json b/2026/CVE-2026-66804.json index 5352c37ea1..c2073e7b77 100644 --- a/2026/CVE-2026-66804.json +++ b/2026/CVE-2026-66804.json @@ -118,7 +118,7 @@ "stargazers_count": 24, "watchers_count": 24, "has_discussions": false, - "forks_count": 7, + "forks_count": 6, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -126,7 +126,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 7, + "forks": 6, "watchers": 24, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-6875.json b/2026/CVE-2026-6875.json index 2f6e675890..f469947696 100644 --- a/2026/CVE-2026-6875.json +++ b/2026/CVE-2026-6875.json @@ -44,11 +44,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/tc4dy\/CVE-2026-6875-PoC-Exploit", - "description": "CVE-2026-6875 ServiceNow Pre-Auth RCE Framework 🔥 JS Injection → Sandbox Escape → RCE → Root. Features: --detect, --exec, reverse\/interactive shell, batch threading, WAF bypass, persistence, lateral movement, credential dump, fileless exec, clean tracks. 🛡️ CVSS 9.5 actively exploited. Authorized & Legal use only. Stay Legal. 🔒", + "description": "CVE-2026-6875 ServiceNow Pre-Auth RCE Framework | JS Injection → Sandbox Escape → RCE → Root. Features: --detect, --exec, reverse\/interactive shell, batch threading, WAF bypass, persistence, lateral movement, credential dump, fileless exec, clean tracks. CVSS 9.5 actively exploited. Authorized & Legal use only. Stay Legal.", "fork": false, "created_at": "2026-07-21T18:07:36Z", - "updated_at": "2026-07-24T22:26:25Z", - "pushed_at": "2026-07-21T18:45:13Z", + "updated_at": "2026-10-10T18:49:44Z", + "pushed_at": "2026-10-10T18:49:41Z", "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, @@ -58,7 +58,20 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cve", + "cve-2026-6875", + "cve-scanning", + "cve-search", + "exploit", + "exploit-code", + "exploit-db", + "rce", + "rce-exploit", + "servicenow", + "servicenow-application", + "servicenow-devops" + ], "visibility": "public", "forks": 0, "watchers": 3, diff --git a/2026/CVE-2026-69414.json b/2026/CVE-2026-69414.json index 27a08ebbd5..25530448ee 100644 --- a/2026/CVE-2026-69414.json +++ b/2026/CVE-2026-69414.json @@ -31,5 +31,38 @@ "watchers": 1, "score": 0, "subscribers_count": 0 + }, + { + "id": 1413377841, + "name": "CVE-2026-69414", + "full_name": "maxprog-svg\/CVE-2026-69414", + "owner": { + "login": "maxprog-svg", + "id": 180038121, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/180038121?v=4", + "html_url": "https:\/\/github.com\/maxprog-svg", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/maxprog-svg\/CVE-2026-69414", + "description": " **CVE-2026-69414** is an elevation of privilege vulnerability in the **Microsoft Malware Protection Engine** (part of Windows Defender \/ Microsoft Defender Antivirus), publicly referred to as **\"RoguePlanet\"**. It represents a **patch bypass** of the original vulnerability **CVE-2026-50656**.", + "fork": false, + "created_at": "2026-10-10T15:53:26Z", + "updated_at": "2026-10-10T15:55:41Z", + "pushed_at": "2026-10-10T15:54:11Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-28775.json b/2026/CVE-2026-84411.json similarity index 52% rename from 2026/CVE-2026-28775.json rename to 2026/CVE-2026-84411.json index 23b4cc623d..798cfa11ef 100644 --- a/2026/CVE-2026-28775.json +++ b/2026/CVE-2026-84411.json @@ -1,21 +1,21 @@ [ { - "id": 1411733518, - "name": "CVE-2026-28775", - "full_name": "Udyz\/CVE-2026-28775", + "id": 1413383787, + "name": "CVE-2026-84411", + "full_name": "maxprog-svg\/CVE-2026-84411", "owner": { - "login": "Udyz", - "id": 39673284, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/39673284?v=4", - "html_url": "https:\/\/github.com\/Udyz", + "login": "maxprog-svg", + "id": 180038121, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/180038121?v=4", + "html_url": "https:\/\/github.com\/maxprog-svg", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/Udyz\/CVE-2026-28775", - "description": "CVE-2026-28775 SNMP RCE", + "html_url": "https:\/\/github.com\/maxprog-svg\/CVE-2026-84411", + "description": " CVE-2026-84411 — MikroTik RouterOS WebFig Integer Underflow Exploit", "fork": false, - "created_at": "2026-10-09T11:26:53Z", - "updated_at": "2026-10-09T11:29:26Z", - "pushed_at": "2026-10-09T11:29:23Z", + "created_at": "2026-10-10T15:59:09Z", + "updated_at": "2026-10-10T16:00:07Z", + "pushed_at": "2026-10-10T16:00:03Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-84568.json b/2026/CVE-2026-84568.json index b9cf2ad2f9..e38ca11d39 100644 --- a/2026/CVE-2026-84568.json +++ b/2026/CVE-2026-84568.json @@ -31,5 +31,57 @@ "watchers": 1, "score": 0, "subscribers_count": 0 + }, + { + "id": 1413484076, + "name": "CVE-2026-84568", + "full_name": "redinpulse\/CVE-2026-84568", + "owner": { + "login": "redinpulse", + "id": 318072655, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/318072655?v=4", + "html_url": "https:\/\/github.com\/redinpulse", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/redinpulse\/CVE-2026-84568", + "description": "Reproducible macOS automountd research and lab PoCs for CVE-2026-84568 and CVE-2026-84570: fstype path traversal, NFS payload delivery, Gatekeeper behavior, and root code execution.", + "fork": false, + "created_at": "2026-10-10T17:37:53Z", + "updated_at": "2026-10-10T17:38:01Z", + "pushed_at": "2026-10-10T17:37:57Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "apple-security", + "arbitrary-code-execution", + "automountd", + "cve-2026-84568", + "cve-2026-84570", + "gatekeeper-bypass", + "ldap", + "macos", + "macos-security", + "nfs", + "offensive-security", + "open-directory", + "path-traversal", + "privilege-escalation", + "proof-of-concept", + "red-team", + "security-research", + "vulnerability-research" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-88772.json b/2026/CVE-2026-88772.json index 7865b499ff..0ac96a0ad1 100644 --- a/2026/CVE-2026-88772.json +++ b/2026/CVE-2026-88772.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2026-09-27T18:15:55Z", - "updated_at": "2026-10-08T02:34:10Z", + "updated_at": "2026-10-10T13:45:34Z", "pushed_at": "2026-09-29T13:43:58Z", - "stargazers_count": 11, - "watchers_count": 11, + "stargazers_count": 12, + "watchers_count": 12, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 11, + "watchers": 12, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-92701.json b/2026/CVE-2026-92701.json index da085a9b10..6f43349865 100644 --- a/2026/CVE-2026-92701.json +++ b/2026/CVE-2026-92701.json @@ -14,8 +14,8 @@ "description": "Early Attestation Considered Very Harmful (CVE-2026-92701, CVE-2026-92702, CVE-2026-33697, and more to come)", "fork": false, "created_at": "2026-07-06T22:13:03Z", - "updated_at": "2026-10-04T20:52:46Z", - "pushed_at": "2026-10-06T03:51:07Z", + "updated_at": "2026-10-10T14:01:46Z", + "pushed_at": "2026-10-10T14:02:15Z", "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, diff --git a/2026/CVE-2026-9830.json b/2026/CVE-2026-9830.json index 37779c9129..1ac21a91bb 100644 --- a/2026/CVE-2026-9830.json +++ b/2026/CVE-2026-9830.json @@ -47,10 +47,10 @@ "description": "CVE-2026-9830 Proof of Concept", "fork": false, "created_at": "2026-08-15T20:57:13Z", - "updated_at": "2026-10-06T07:57:12Z", + "updated_at": "2026-10-10T16:06:13Z", "pushed_at": "2026-08-20T21:56:15Z", - "stargazers_count": 498, - "watchers_count": 498, + "stargazers_count": 477, + "watchers_count": 477, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -72,7 +72,7 @@ ], "visibility": "public", "forks": 3, - "watchers": 498, + "watchers": 477, "score": 0, "subscribers_count": 0 }