nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/07/19 12:48:36

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-07-19 21:48:37 +09:00
1 parent 06a47b4035
commit 1eae4f2d2a
58 files changed
+519 -333
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2014/CVE-2014-6271.json
+4 -4
View File
@@ -1273,10 +1273,10 @@
"description": "Shellshock exploit + vulnerable environment",
"fork": false,
"created_at": "2016-12-07T23:38:50Z",
"updated_at": "2026-04-23T22:26:31Z",
"updated_at": "2026-07-19T07:30:15Z",
"pushed_at": "2023-05-11T02:12:25Z",
"stargazers_count": 232,
"watchers_count": 232,
"stargazers_count": 231,
"watchers_count": 231,
"has_discussions": false,
"forks_count": 60,
"allow_forking": true,
@@ -1294,7 +1294,7 @@
],
"visibility": "public",
"forks": 60,
"watchers": 232,
"watchers": 231,
"score": 0,
"subscribers_count": 4
},
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-07-19T03:50:30Z",
"pushed_at": "2026-07-19T03:50:26Z",
"updated_at": "2026-07-19T11:32:24Z",
"pushed_at": "2026-07-19T11:32:20Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2019/CVE-2019-1069.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 37,
"watchers_count": 37,
"has_discussions": false,
"forks_count": 10,
"forks_count": 11,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -31,7 +31,7 @@
"privilege-escalation-exploits"
],
"visibility": "public",
"forks": 10,
"forks": 11,
"watchers": 37,
"score": 0,
"subscribers_count": 0
2019/CVE-2019-11358.json
+1 -1
View File
@@ -133,7 +133,7 @@
"description": "NOTICE This repository contains the public FTC SDK for the SKYSTONE (2019-2020) competition season. If you are looking for the current season's FTC SDK software, please visit the new and permanent home of the public FTC SDK: FtcRobotController repository Welcome! This GitHub repository contains the source code that is used to build an Android app to control a FIRST Tech Challenge competition robot. To use this SDK, download\/clone the entire project to your local computer. Getting Started If you are new to robotics or new to the FIRST Tech Challenge, then you should consider reviewing the FTC Blocks Tutorial to get familiar with how to use the control system: FTC Blocks Online Tutorial Even if you are an advanced Java programmer, it is helpful to start with the FTC Blocks tutorial, and then migrate to the OnBot Java Tool or to Android Studio afterwards. Downloading the Project If you are an Android Studio programmer, there are several ways to download this repo. Note that if you use the Blocks or OnBot Java Tool to program your robot, then you do not need to download this repository. If you are a git user, you can clone the most current version of the repository: git clone https:\/\/github.com\/FIRST-Tech-Challenge\/SKYSTONE.git Or, if you prefer, you can use the \"Download Zip\" button available through the main repository page. Downloading the project as a .ZIP file will keep the size of the download manageable. You can also download the project folder (as a .zip or .tar.gz archive file) from the Downloads subsection of the Releases page for this repository. Once you have downloaded and uncompressed (if needed) your folder, you can use Android Studio to import the folder (\"Import project (Eclipse ADT, Gradle, etc.)\"). Getting Help User Documentation and Tutorials FIRST maintains online documentation with information and tutorials on how to use the FIRST Tech Challenge software and robot control system. You can access this documentation using the following link: SKYSTONE Online Documentation Note that the online documentation is an \"evergreen\" document that is constantly being updated and edited. It contains the most current information about the FIRST Tech Challenge software and control system. Javadoc Reference Material The Javadoc reference documentation for the FTC SDK is now available online. Click on the following link to view the FTC SDK Javadoc documentation as a live website: FTC Javadoc Documentation Documentation for the FTC SDK is also included with this repository. There is a subfolder called \"doc\" which contains several subfolders: The folder \"apk\" contains the .apk files for the FTC Driver Station and FTC Robot Controller apps. The folder \"javadoc\" contains the JavaDoc user documentation for the FTC SDK. Online User Forum For technical questions regarding the Control System or the FTC SDK, please visit the FTC Technology forum: FTC Technology Forum Release Information Version 5.5 (20200824-090813) Version 5.5 requires Android Studio 4.0 or later. New features Adds support for calling custom Java classes from Blocks OpModes (fixes SkyStone issue #161). Classes must be in the org.firstinspires.ftc.teamcode package. Methods must be public static and have no more than 21 parameters. Parameters declared as OpMode, LinearOpMode, Telemetry, and HardwareMap are supported and the argument is provided automatically, regardless of the order of the parameters. On the block, the sockets for those parameters are automatically filled in. Parameters declared as char or java.lang.Character will accept any block that returns text and will only use the first character in the text. Parameters declared as boolean or java.lang.Boolean will accept any block that returns boolean. Parameters declared as byte, java.lang.Byte, short, java.lang.Short, int, java.lang.Integer, long, or java.lang.Long, will accept any block that returns a number and will round that value to the nearest whole number. Parameters declared as float, java.lang.Float, double, java.lang.Double will accept any block that returns a number. Adds telemetry API method for setting display format Classic Monospace HTML (certain tags only) Adds blocks support for switching cameras. Adds Blocks support for TensorFlow Object Detection with a custom model. Adds support for uploading a custom TensorFlow Object Detection model in the Manage page, which is especially useful for Blocks and OnBotJava users. Shows new Control Hub blink codes when the WiFi band is switched using the Control Hub's button (only possible on Control Hub OS 1.1.2) Adds new warnings which can be disabled in the Advanced RC Settings Mismatched app versions warning Unnecessary 2.4 GHz WiFi usage warning REV Hub is running outdated firmware (older than version 1.8.2) Adds support for Sony PS4 gamepad, and reworks how gamepads work on the Driver Station Removes preference which sets gamepad type baseLine truncated
"fork": false,
"created_at": "2021-03-08T11:34:11Z",
"updated_at": "2026-07-18T21:46:57Z",
"updated_at": "2026-07-19T09:37:27Z",
"pushed_at": "2024-04-12T05:48:35Z",
"stargazers_count": 296,
"watchers_count": 296,
2019/CVE-2019-2215.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Temproot for Pixel 2 and Pixel 2 XL via CVE-2019-2215",
"fork": false,
"created_at": "2019-10-14T17:27:37Z",
"updated_at": "2026-07-18T10:50:14Z",
"updated_at": "2026-07-19T09:23:14Z",
"pushed_at": "2019-10-15T01:04:08Z",
"stargazers_count": 135,
"watchers_count": 135,
"stargazers_count": 134,
"watchers_count": 134,
"has_discussions": false,
"forks_count": 54,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 54,
"watchers": 135,
"watchers": 134,
"score": 0,
"subscribers_count": 7
},
2020/CVE-2020-1472.json
+2 -2
View File
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-07-19T04:31:41Z",
"pushed_at": "2026-07-19T04:31:37Z",
"updated_at": "2026-07-19T11:41:12Z",
"pushed_at": "2026-07-19T11:41:08Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-07-19T03:55:49Z",
"pushed_at": "2026-07-19T03:55:45Z",
"updated_at": "2026-07-19T11:41:06Z",
"pushed_at": "2026-07-19T11:40:57Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-40444.json
+4 -4
View File
@@ -245,10 +245,10 @@
"description": "CVE-2021-40444 PoC",
"fork": false,
"created_at": "2021-09-10T16:55:53Z",
"updated_at": "2026-07-18T15:41:38Z",
"updated_at": "2026-07-19T07:21:51Z",
"pushed_at": "2021-12-25T18:31:02Z",
"stargazers_count": 1771,
"watchers_count": 1771,
"stargazers_count": 1772,
"watchers_count": 1772,
"has_discussions": false,
"forks_count": 476,
"allow_forking": true,
@@ -259,7 +259,7 @@
"topics": [],
"visibility": "public",
"forks": 476,
"watchers": 1771,
"watchers": 1772,
"score": 0,
"subscribers_count": 27
},
2022/CVE-2022-22077.json
+1 -1
View File
@@ -15,7 +15,7 @@
"fork": false,
"created_at": "2025-09-08T21:12:19Z",
"updated_at": "2026-06-19T21:56:25Z",
"pushed_at": "2026-07-18T15:57:02Z",
"pushed_at": "2026-07-19T07:35:42Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
2022/CVE-2022-29799.json
+2 -2
View File
@@ -59,8 +59,8 @@
"description": "Demonstrate local privilege escalation in networkd-dispatcher via CVE-2022-29799 and CVE-2022-29800 using this C proof of concept.",
"fork": false,
"created_at": "2026-06-23T14:05:18Z",
"updated_at": "2026-07-19T04:40:34Z",
"pushed_at": "2026-07-19T04:40:31Z",
"updated_at": "2026-07-19T07:06:48Z",
"pushed_at": "2026-07-19T07:06:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-32434.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙",
"fork": false,
"created_at": "2025-08-13T09:19:29Z",
"updated_at": "2026-07-19T05:12:33Z",
"pushed_at": "2026-07-19T05:12:29Z",
"updated_at": "2026-07-19T08:22:40Z",
"pushed_at": "2026-07-19T08:22:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-33107.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "A kernel exploit for Pico 4 devices based on cve-2023-33107",
"fork": false,
"created_at": "2026-07-18T08:06:18Z",
"updated_at": "2026-07-18T08:06:37Z",
"pushed_at": "2026-07-18T08:06:19Z",
"updated_at": "2026-07-19T11:47:20Z",
"pushed_at": "2026-07-19T11:47:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-38709.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "Apache HTTP Server Vulnerability Testing Tool | PoC for CVE-2024-38472 , CVE-2024-39573 , CVE-2024-38477 , CVE-2024-38476 , CVE-2024-38475 , CVE-2024-38474 , CVE-2024-38473 , CVE-2023-38709",
"fork": false,
"created_at": "2024-10-05T20:32:45Z",
"updated_at": "2026-07-13T16:42:22Z",
"updated_at": "2026-07-19T11:56:05Z",
"pushed_at": "2024-10-05T20:37:02Z",
"stargazers_count": 131,
"watchers_count": 131,
"stargazers_count": 133,
"watchers_count": 133,
"has_discussions": false,
"forks_count": 22,
"forks_count": 23,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -38,8 +38,8 @@
"cve-2024-39573"
],
"visibility": "public",
"forks": 22,
"watchers": 131,
"forks": 23,
"watchers": 133,
"score": 0,
"subscribers_count": 1
}
2023/CVE-2023-49092.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Agentic-AI (Apex\/Horizon) eval: autonomously remediate CVE-2023-49092 on a Kubernetes fanout microservice against active drift — pod\/ConfigMap drift, GitOps OutOfSync, cert rotation, and live fan-out delivery, all graded on real cluster state.",
"fork": false,
"created_at": "2026-07-18T15:16:25Z",
"updated_at": "2026-07-18T15:16:58Z",
"pushed_at": "2026-07-18T15:16:29Z",
"updated_at": "2026-07-19T10:50:28Z",
"pushed_at": "2026-07-19T10:50:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-1086.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.",
"fork": false,
"created_at": "2024-03-20T21:16:41Z",
"updated_at": "2026-07-18T06:24:43Z",
"updated_at": "2026-07-19T11:25:05Z",
"pushed_at": "2024-04-17T16:09:54Z",
"stargazers_count": 2456,
"watchers_count": 2456,
"stargazers_count": 2454,
"watchers_count": 2454,
"has_discussions": false,
"forks_count": 329,
"allow_forking": true,
@@ -34,7 +34,7 @@
],
"visibility": "public",
"forks": 329,
"watchers": 2456,
"watchers": 2454,
"score": 0,
"subscribers_count": 25
},
2024/CVE-2024-20356.json
+1 -1
View File
@@ -34,7 +34,7 @@
"forks": 11,
"watchers": 55,
"score": 0,
"subscribers_count": 8
"subscribers_count": 7
},
{
"id": 803051557,
2024/CVE-2024-25153.json
+1 -1
View File
@@ -30,7 +30,7 @@
"forks": 11,
"watchers": 42,
"score": 0,
"subscribers_count": 5
"subscribers_count": 4
},
{
"id": 773709929,
2024/CVE-2024-31317.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": null,
"fork": false,
"created_at": "2025-05-01T11:41:51Z",
"updated_at": "2026-07-18T10:39:14Z",
"updated_at": "2026-07-19T09:24:14Z",
"pushed_at": "2025-07-01T05:41:24Z",
"stargazers_count": 51,
"watchers_count": 51,
"stargazers_count": 53,
"watchers_count": 53,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 51,
"watchers": 53,
"score": 0,
"subscribers_count": 1
},
2024/CVE-2024-32022.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Take first steps in CodeQL for Python by writing a query to find CVE-2024-32022",
"fork": false,
"created_at": "2025-09-22T16:44:32Z",
"updated_at": "2026-07-14T15:59:30Z",
"pushed_at": "2026-07-14T15:59:25Z",
"updated_at": "2026-07-19T08:53:32Z",
"pushed_at": "2026-07-19T08:53:28Z",
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
2024/CVE-2024-34351.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2024-05-12T10:49:41Z",
"updated_at": "2025-12-27T16:46:06Z",
"updated_at": "2026-07-19T08:10:42Z",
"pushed_at": "2024-05-12T13:05:22Z",
"stargazers_count": 11,
"watchers_count": 11,
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 11,
"watchers": 10,
"score": 0,
"subscribers_count": 1
},
2024/CVE-2024-38472.json
+6 -6
View File
@@ -47,12 +47,12 @@
"description": "Apache HTTP Server Vulnerability Testing Tool | PoC for CVE-2024-38472 , CVE-2024-39573 , CVE-2024-38477 , CVE-2024-38476 , CVE-2024-38475 , CVE-2024-38474 , CVE-2024-38473 , CVE-2023-38709",
"fork": false,
"created_at": "2024-10-05T20:32:45Z",
"updated_at": "2026-07-13T16:42:22Z",
"updated_at": "2026-07-19T11:56:05Z",
"pushed_at": "2024-10-05T20:37:02Z",
"stargazers_count": 131,
"watchers_count": 131,
"stargazers_count": 133,
"watchers_count": 133,
"has_discussions": false,
"forks_count": 22,
"forks_count": 23,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -71,8 +71,8 @@
"cve-2024-39573"
],
"visibility": "public",
"forks": 22,
"watchers": 131,
"forks": 23,
"watchers": 133,
"score": 0,
"subscribers_count": 1
}
2024/CVE-2024-6782.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Calibre 远程代码执行（CVE-2024-6782）Improper access control in Calibre 6.9.0 ~ 7.14.0 allow unauthenticated attackers to achieve remote code execution.",
"fork": false,
"created_at": "2024-08-06T15:31:48Z",
"updated_at": "2025-09-28T07:30:55Z",
"updated_at": "2026-07-19T07:09:18Z",
"pushed_at": "2024-08-06T15:35:37Z",
"stargazers_count": 6,
"watchers_count": 6,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 6,
"watchers": 7,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-11953.json
+4 -4
View File
@@ -101,15 +101,15 @@
{
"id": 1134852255,
"name": "CVE-2025-11953-PoC",
"full_name": "ibreakthingsforaliving\/CVE-2025-11953-PoC",
"full_name": "boroeurnprach\/CVE-2025-11953-PoC",
"owner": {
"login": "ibreakthingsforaliving",
"login": "boroeurnprach",
"id": 144204725,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/144204725?v=4",
"html_url": "https:\/\/github.com\/ibreakthingsforaliving",
"html_url": "https:\/\/github.com\/boroeurnprach",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ibreakthingsforaliving\/CVE-2025-11953-PoC",
"html_url": "https:\/\/github.com\/boroeurnprach\/CVE-2025-11953-PoC",
"description": "CVE-2025-11953 - The React Native Metro server's default external binding exposes a vulnerable endpoint, allowing unauthenticated attackers to execute arbitrary OS commands via a malicious POST request.",
"fork": false,
"created_at": "2026-01-15T09:46:06Z",
2025/CVE-2025-21293.json
-33
View File
@@ -31,38 +31,5 @@
"watchers": 2,
"score": 0,
"subscribers_count": 1
},
{
"id": 1300006534,
"name": "threat-simlab",
"full_name": "Dashlane04\/threat-simlab",
"owner": {
"login": "Dashlane04",
"id": 78219847,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78219847?v=4",
"html_url": "https:\/\/github.com\/Dashlane04",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Dashlane04\/threat-simlab",
"description": "Threat simulation lab for a privilege escalation vulnerability in AD Domain Services using CVE-2025-21293",
"fork": false,
"created_at": "2026-07-14T04:29:02Z",
"updated_at": "2026-07-14T04:29:07Z",
"pushed_at": "2026-07-14T04:29:03Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-27363.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2025-03-23T23:30:37Z",
"updated_at": "2026-07-10T10:03:51Z",
"updated_at": "2026-07-19T07:29:35Z",
"pushed_at": "2025-03-23T23:31:00Z",
"stargazers_count": 39,
"watchers_count": 39,
"stargazers_count": 40,
"watchers_count": 40,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 39,
"watchers": 40,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-32433.json
-33
View File
@@ -1211,39 +1211,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1257892438,
"name": "hk_CVE-2025-32433",
"full_name": "leehunkoo\/hk_CVE-2025-32433",
"owner": {
"login": "leehunkoo",
"id": 186289567,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/186289567?v=4",
"html_url": "https:\/\/github.com\/leehunkoo",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/leehunkoo\/hk_CVE-2025-32433",
"description": null,
"fork": false,
"created_at": "2026-06-03T05:14:18Z",
"updated_at": "2026-07-12T11:19:56Z",
"pushed_at": "2026-07-12T11:19:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1262732203,
"name": "CVE-2025-32433-Exploit-edited",
2025/CVE-2025-32463.json
+4 -4
View File
@@ -242,7 +242,7 @@
"stargazers_count": 469,
"watchers_count": 469,
"has_discussions": false,
"forks_count": 62,
"forks_count": 61,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -262,7 +262,7 @@
"vulnerability"
],
"visibility": "public",
"forks": 62,
"forks": 61,
"watchers": 469,
"score": 0,
"subscribers_count": 3
@@ -1496,8 +1496,8 @@
"description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.",
"fork": false,
"created_at": "2025-09-20T00:42:07Z",
"updated_at": "2026-07-19T05:17:57Z",
"pushed_at": "2026-07-19T05:17:53Z",
"updated_at": "2026-07-19T08:28:09Z",
"pushed_at": "2026-07-19T08:28:05Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-36911.json
+4 -4
View File
@@ -86,10 +86,10 @@
"description": "WPair is a defensive security research tool that demonstrates the CVE-2025-36911 (eg WhisperPair) vulnerability in Google's Fast Pair protocol. This vulnerability affects millions of Bluetooth audio devices worldwide, allowing unauthorized pairing and potential microphone access without user consent.",
"fork": false,
"created_at": "2026-01-17T05:28:08Z",
"updated_at": "2026-07-17T18:56:39Z",
"updated_at": "2026-07-19T09:48:53Z",
"pushed_at": "2026-01-18T00:15:59Z",
"stargazers_count": 809,
"watchers_count": 809,
"stargazers_count": 810,
"watchers_count": 810,
"has_discussions": false,
"forks_count": 90,
"allow_forking": true,
@@ -100,7 +100,7 @@
"topics": [],
"visibility": "public",
"forks": 90,
"watchers": 809,
"watchers": 810,
"score": 0,
"subscribers_count": 23
},
2025/CVE-2025-54424.json
+2 -2
View File
@@ -53,8 +53,8 @@
"description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐",
"fork": false,
"created_at": "2025-08-14T05:16:16Z",
"updated_at": "2026-07-19T05:13:12Z",
"pushed_at": "2026-07-19T05:13:07Z",
"updated_at": "2026-07-19T08:23:22Z",
"pushed_at": "2026-07-19T08:23:15Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2025/CVE-2025-55182.json
+8 -8
View File
@@ -2121,10 +2121,10 @@
"description": "Exploit for CVE-2025-55182 & CVE-2025-66478",
"fork": false,
"created_at": "2025-12-05T05:09:56Z",
"updated_at": "2026-06-30T03:58:32Z",
"updated_at": "2026-07-19T10:53:55Z",
"pushed_at": "2025-12-10T11:48:44Z",
"stargazers_count": 140,
"watchers_count": 140,
"stargazers_count": 141,
"watchers_count": 141,
"has_discussions": false,
"forks_count": 36,
"allow_forking": true,
@@ -2135,7 +2135,7 @@
"topics": [],
"visibility": "public",
"forks": 36,
"watchers": 140,
"watchers": 141,
"score": 0,
"subscribers_count": 2
},
@@ -9665,10 +9665,10 @@
"description": "Advanced Exploitation Toolkit for Next.js Server Actions (CVE-2025-55182)",
"fork": false,
"created_at": "2025-12-12T11:31:45Z",
"updated_at": "2026-07-18T20:50:35Z",
"updated_at": "2026-07-19T08:06:41Z",
"pushed_at": "2025-12-12T11:52:59Z",
"stargazers_count": 47,
"watchers_count": 47,
"stargazers_count": 48,
"watchers_count": 48,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -9687,7 +9687,7 @@
],
"visibility": "public",
"forks": 6,
"watchers": 47,
"watchers": 48,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-57819.json
+4 -4
View File
@@ -373,10 +373,10 @@
"description": null,
"fork": false,
"created_at": "2026-06-06T20:49:03Z",
"updated_at": "2026-07-04T10:03:06Z",
"updated_at": "2026-07-19T09:32:27Z",
"pushed_at": "2026-06-06T21:39:52Z",
"stargazers_count": 12,
"watchers_count": 12,
"stargazers_count": 13,
"watchers_count": 13,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -387,7 +387,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 12,
"watchers": 13,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-59057.json
+4 -4
View File
@@ -2,15 +2,15 @@
{
"id": 1133292325,
"name": "CVE-2025-59057-PoC",
"full_name": "ibreakthingsforaliving\/CVE-2025-59057-PoC",
"full_name": "boroeurnprach\/CVE-2025-59057-PoC",
"owner": {
"login": "ibreakthingsforaliving",
"login": "boroeurnprach",
"id": 144204725,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/144204725?v=4",
"html_url": "https:\/\/github.com\/ibreakthingsforaliving",
"html_url": "https:\/\/github.com\/boroeurnprach",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ibreakthingsforaliving\/CVE-2025-59057-PoC",
"html_url": "https:\/\/github.com\/boroeurnprach\/CVE-2025-59057-PoC",
"description": "A XSS vulnerability exists in in React Router's meta()\/<Meta> APIs in Framework Mode when generating script:ld+json tags which could allow arbitrary JavaScript execution during SSR if untrusted content is used to generate the tag.",
"fork": false,
"created_at": "2026-01-13T06:31:41Z",
2025/CVE-2025-61686.json
+4 -4
View File
@@ -68,15 +68,15 @@
{
"id": 1138891017,
"name": "CVE-2025-61686-PoC",
"full_name": "ibreakthingsforaliving\/CVE-2025-61686-PoC",
"full_name": "boroeurnprach\/CVE-2025-61686-PoC",
"owner": {
"login": "ibreakthingsforaliving",
"login": "boroeurnprach",
"id": 144204725,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/144204725?v=4",
"html_url": "https:\/\/github.com\/ibreakthingsforaliving",
"html_url": "https:\/\/github.com\/boroeurnprach",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ibreakthingsforaliving\/CVE-2025-61686-PoC",
"html_url": "https:\/\/github.com\/boroeurnprach\/CVE-2025-61686-PoC",
"description": "React Router's createFileSessionStorage() in certain versions allows unsigned cookies to be manipulated, enabling file system access outside the session directory.",
"fork": false,
"created_at": "2026-01-21T08:48:47Z",
2025/CVE-2025-64512.json
+33
View File
@@ -31,5 +31,38 @@
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1305628775,
"name": "CVE-2025-64512",
"full_name": "matesz44\/CVE-2025-64512",
"owner": {
"login": "matesz44",
"id": 29248278,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/29248278?v=4",
"html_url": "https:\/\/github.com\/matesz44",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/matesz44\/CVE-2025-64512",
"description": "CVE-2025-64512: pdfminer.six pickle deserialization rce; pickle.gz + pdf generator w\/ custom payloads",
"fork": false,
"created_at": "2026-07-19T10:49:05Z",
"updated_at": "2026-07-19T11:02:25Z",
"pushed_at": "2026-07-19T11:00:19Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-69212.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "Automated PoC for CVE-2025-69212 - OpenSTAManager <=2.9.8 authenticated RCE",
"fork": false,
"created_at": "2026-06-27T20:03:55Z",
"updated_at": "2026-06-29T22:07:44Z",
"pushed_at": "2026-06-29T08:25:02Z",
"updated_at": "2026-07-19T10:16:33Z",
"pushed_at": "2026-07-19T10:16:29Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-0776.json
+6 -6
View File
@@ -2,20 +2,20 @@
{
"id": 1265152930,
"name": "CVE-2026-0776",
"full_name": "AnhedonicX\/CVE-2026-0776",
"full_name": "whoanx\/CVE-2026-0776",
"owner": {
"login": "AnhedonicX",
"login": "whoanx",
"id": 212613690,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/212613690?v=4",
"html_url": "https:\/\/github.com\/AnhedonicX",
"html_url": "https:\/\/github.com\/whoanx",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/AnhedonicX\/CVE-2026-0776",
"html_url": "https:\/\/github.com\/whoanx\/CVE-2026-0776",
"description": "Security research and proof-of-concept for CVE-2026-0776 affecting Discord Desktop Client.",
"fork": false,
"created_at": "2026-06-10T14:08:40Z",
"updated_at": "2026-07-12T16:09:48Z",
"pushed_at": "2026-07-09T10:02:35Z",
"updated_at": "2026-07-19T08:15:55Z",
"pushed_at": "2026-07-19T08:15:51Z",
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
2026/CVE-2026-13001.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-07-15T09:58:35Z",
"updated_at": "2026-07-15T17:47:13Z",
"updated_at": "2026-07-19T09:38:15Z",
"pushed_at": "2026-07-15T09:59:05Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-23744.json
+4 -4
View File
@@ -2,15 +2,15 @@
{
"id": 1138037990,
"name": "CVE-2026-23744-PoC",
"full_name": "ibreakthingsforaliving\/CVE-2026-23744-PoC",
"full_name": "boroeurnprach\/CVE-2026-23744-PoC",
"owner": {
"login": "ibreakthingsforaliving",
"login": "boroeurnprach",
"id": 144204725,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/144204725?v=4",
"html_url": "https:\/\/github.com\/ibreakthingsforaliving",
"html_url": "https:\/\/github.com\/boroeurnprach",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ibreakthingsforaliving\/CVE-2026-23744-PoC",
"html_url": "https:\/\/github.com\/boroeurnprach\/CVE-2026-23744-PoC",
"description": "CVE-2026-23744 - Versions 1.4.2 and earlier of MCPJam inspector are vulnerable to remote code execution (RCE). Because the tool listens on 0.0.0.0 by default, an attacker can trigger the installation and execution of a malicious MCP server by sending a crafted HTTP request. Version 1.4.3 contains a patch for this issue.",
"fork": false,
"created_at": "2026-01-20T06:55:53Z",
2026/CVE-2026-25262.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-25262 applicability to Snapdragon 8 Gen 1 — experimental results",
"fork": false,
"created_at": "2026-07-08T09:51:38Z",
"updated_at": "2026-07-17T08:14:54Z",
"updated_at": "2026-07-19T09:46:41Z",
"pushed_at": "2026-07-12T05:26:33Z",
"stargazers_count": 8,
"watchers_count": 8,
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -35,7 +35,7 @@
],
"visibility": "public",
"forks": 2,
"watchers": 8,
"watchers": 9,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-31431.json
+4 -4
View File
@@ -693,8 +693,8 @@
"description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.",
"fork": false,
"created_at": "2026-05-05T04:58:21Z",
"updated_at": "2026-07-19T04:31:52Z",
"pushed_at": "2026-07-19T04:31:48Z",
"updated_at": "2026-07-19T06:57:53Z",
"pushed_at": "2026-07-19T06:57:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -742,8 +742,8 @@
"description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.",
"fork": false,
"created_at": "2026-05-06T09:49:14Z",
"updated_at": "2026-07-19T04:32:29Z",
"pushed_at": "2026-07-19T04:32:26Z",
"updated_at": "2026-07-19T06:58:22Z",
"pushed_at": "2026-07-19T06:58:16Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-31694.json
+1 -1
View File
@@ -30,6 +30,6 @@
"forks": 2,
"watchers": 15,
"score": 0,
"subscribers_count": 1
"subscribers_count": 2
}
]
2026/CVE-2026-33017.json
+33
View File
@@ -198,5 +198,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1305625846,
"name": "Langflow-cve-2026-33017-exploit",
"full_name": "CerberusMrXi\/Langflow-cve-2026-33017-exploit",
"owner": {
"login": "CerberusMrXi",
"id": 90186307,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90186307?v=4",
"html_url": "https:\/\/github.com\/CerberusMrXi",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/CerberusMrXi\/Langflow-cve-2026-33017-exploit",
"description": "CVE-2026-33017 exploitation tool for Langflow <1.9.0. Features reverse shells, command execution, file operations, persistence, and automated testing. Validates critical RCE vulnerability impact. For authorized security assessments only.",
"fork": false,
"created_at": "2026-07-19T10:44:19Z",
"updated_at": "2026-07-19T11:01:53Z",
"pushed_at": "2026-07-19T11:02:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-3891.json
+8 -8
View File
@@ -47,10 +47,10 @@
"description": "PoC for CVE-2026-3891 — Unauthenticated Arbitrary File Upload leading to Remote Code Execution in Pix for WooCommerce <= 1.5.0",
"fork": false,
"created_at": "2026-07-15T19:06:14Z",
"updated_at": "2026-07-19T01:33:29Z",
"updated_at": "2026-07-19T10:19:30Z",
"pushed_at": "2026-07-15T19:25:19Z",
"stargazers_count": 8,
"watchers_count": 8,
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 8,
"watchers": 10,
"score": 0,
"subscribers_count": 0
},
@@ -80,10 +80,10 @@
"description": "Pix for WooCommerce Unauthenticated File Upload via certificate_crt_path Parameter | CVSS 9.8",
"fork": false,
"created_at": "2026-07-15T19:24:19Z",
"updated_at": "2026-07-17T01:29:40Z",
"updated_at": "2026-07-19T08:44:21Z",
"pushed_at": "2026-07-15T19:36:43Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -104,7 +104,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 2,
"watchers": 4,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-39987.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "CVE-2026-39987 Exploitation Tool - Marimo < 0.23.0 Pre-Auth RCE (WebSocket)",
"fork": false,
"created_at": "2026-05-24T18:00:33Z",
"updated_at": "2026-05-27T00:26:29Z",
"pushed_at": "2026-05-24T19:30:10Z",
"updated_at": "2026-07-19T11:04:30Z",
"pushed_at": "2026-07-19T11:04:27Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-41940.json
+2 -2
View File
@@ -258,8 +258,8 @@
"description": "Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.",
"fork": false,
"created_at": "2026-05-06T18:08:48Z",
"updated_at": "2026-07-19T04:32:48Z",
"pushed_at": "2026-07-19T04:32:44Z",
"updated_at": "2026-07-19T06:58:37Z",
"pushed_at": "2026-07-19T06:58:33Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-42980.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "CVE-2026-42980 PUBLIC EXPLOIT + RESEARCH",
"fork": false,
"created_at": "2026-07-07T03:52:26Z",
"updated_at": "2026-07-17T15:53:23Z",
"updated_at": "2026-07-19T09:29:19Z",
"pushed_at": "2026-07-07T03:53:22Z",
"stargazers_count": 8,
"watchers_count": 8,
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 4,
"forks_count": 7,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 8,
"forks": 7,
"watchers": 11,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-43499.json
+47 -47
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-43499 PoC",
"fork": false,
"created_at": "2026-06-27T04:09:11Z",
"updated_at": "2026-07-19T05:15:54Z",
"updated_at": "2026-07-19T10:23:20Z",
"pushed_at": "2026-06-27T05:04:04Z",
"stargazers_count": 119,
"watchers_count": 119,
"stargazers_count": 121,
"watchers_count": 121,
"has_discussions": false,
"forks_count": 30,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 30,
"watchers": 119,
"watchers": 121,
"score": 0,
"subscribers_count": 1
},
@@ -245,12 +245,12 @@
"description": "CVE-2026-43499 Implementation for 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k",
"fork": false,
"created_at": "2026-07-12T10:15:03Z",
"updated_at": "2026-07-18T18:26:53Z",
"updated_at": "2026-07-19T12:21:33Z",
"pushed_at": "2026-07-15T22:46:59Z",
"stargazers_count": 172,
"watchers_count": 172,
"stargazers_count": 174,
"watchers_count": 174,
"has_discussions": false,
"forks_count": 57,
"forks_count": 60,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -258,8 +258,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 57,
"watchers": 172,
"forks": 60,
"watchers": 174,
"score": 0,
"subscribers_count": 1
},
@@ -311,10 +311,10 @@
"description": "GhostLock (CVE-2026-43499) kernel exploit for OnePlus devices with locked bootloader",
"fork": false,
"created_at": "2026-07-12T16:05:24Z",
"updated_at": "2026-07-19T04:56:03Z",
"pushed_at": "2026-07-18T17:53:46Z",
"stargazers_count": 38,
"watchers_count": 38,
"updated_at": "2026-07-19T12:34:55Z",
"pushed_at": "2026-07-19T07:04:00Z",
"stargazers_count": 40,
"watchers_count": 40,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -332,7 +332,7 @@
],
"visibility": "public",
"forks": 7,
"watchers": 38,
"watchers": 40,
"score": 0,
"subscribers_count": 1
},
@@ -351,10 +351,10 @@
"description": "基于 CVE-2026-43499 的 8E5 机型自动化解锁辅助工具，仅限授权安全研究与自有设备使用。",
"fork": false,
"created_at": "2026-07-12T22:59:55Z",
"updated_at": "2026-07-19T03:18:16Z",
"updated_at": "2026-07-19T07:48:22Z",
"pushed_at": "2026-07-16T13:25:55Z",
"stargazers_count": 77,
"watchers_count": 77,
"stargazers_count": 78,
"watchers_count": 78,
"has_discussions": false,
"forks_count": 20,
"allow_forking": true,
@@ -365,7 +365,7 @@
"topics": [],
"visibility": "public",
"forks": 20,
"watchers": 77,
"watchers": 78,
"score": 0,
"subscribers_count": 1
},
@@ -549,12 +549,12 @@
"description": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.",
"fork": false,
"created_at": "2026-07-14T14:21:27Z",
"updated_at": "2026-07-19T06:45:40Z",
"updated_at": "2026-07-19T09:47:53Z",
"pushed_at": "2026-07-18T22:56:05Z",
"stargazers_count": 39,
"watchers_count": 39,
"stargazers_count": 42,
"watchers_count": 42,
"has_discussions": false,
"forks_count": 21,
"forks_count": 22,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -562,8 +562,8 @@
"pull_request_creation_policy": "collaborators_only",
"topics": [],
"visibility": "public",
"forks": 21,
"watchers": 39,
"forks": 22,
"watchers": 42,
"score": 0,
"subscribers_count": 0
},
@@ -648,12 +648,12 @@
"description": "Xiaomi K70e (duchamp) one-click root via CVE-2026-43499 (IonStack) + KernelSU integration",
"fork": false,
"created_at": "2026-07-15T03:59:56Z",
"updated_at": "2026-07-19T05:16:01Z",
"updated_at": "2026-07-19T08:51:05Z",
"pushed_at": "2026-07-19T04:22:35Z",
"stargazers_count": 20,
"watchers_count": 20,
"has_discussions": false,
"forks_count": 6,
"stargazers_count": 23,
"watchers_count": 23,
"has_discussions": true,
"forks_count": 7,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -661,8 +661,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 20,
"forks": 7,
"watchers": 23,
"score": 0,
"subscribers_count": 0
},
@@ -681,8 +681,8 @@
"description": null,
"fork": false,
"created_at": "2026-07-15T08:53:35Z",
"updated_at": "2026-07-19T01:52:41Z",
"pushed_at": "2026-07-19T01:52:38Z",
"updated_at": "2026-07-19T09:43:49Z",
"pushed_at": "2026-07-19T09:43:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -763,7 +763,7 @@
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 1
"subscribers_count": 2
},
{
"id": 1301441997,
@@ -813,10 +813,10 @@
"description": "CVE-2026-43499 GhostLock exploit for Redmi K70 Ultra (rothko) - data-only physmap overwrite",
"fork": false,
"created_at": "2026-07-16T01:48:30Z",
"updated_at": "2026-07-19T04:19:08Z",
"updated_at": "2026-07-19T12:25:44Z",
"pushed_at": "2026-07-16T02:51:29Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -827,7 +827,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
@@ -880,7 +880,7 @@
"fork": false,
"created_at": "2026-07-16T14:06:00Z",
"updated_at": "2026-07-17T09:26:20Z",
"pushed_at": "2026-07-19T06:02:49Z",
"pushed_at": "2026-07-19T12:24:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -1044,10 +1044,10 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
"updated_at": "2026-07-19T05:49:47Z",
"pushed_at": "2026-07-19T02:06:08Z",
"stargazers_count": 11,
"watchers_count": 11,
"updated_at": "2026-07-19T12:39:53Z",
"pushed_at": "2026-07-19T09:11:56Z",
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -1058,9 +1058,9 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 11,
"watchers": 16,
"score": 0,
"subscribers_count": 0
"subscribers_count": 2
},
{
"id": 1304629488,
@@ -1111,7 +1111,7 @@
"fork": false,
"created_at": "2026-07-18T06:24:34Z",
"updated_at": "2026-07-18T12:21:05Z",
"pushed_at": "2026-07-19T04:42:36Z",
"pushed_at": "2026-07-19T08:28:49Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-45585.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Manage and recover BitLocker encrypted drives with this tool for Windows 11 recovery key management and educational study of CVE-2026-45585.",
"fork": false,
"created_at": "2026-06-16T07:21:36Z",
"updated_at": "2026-07-19T04:39:04Z",
"pushed_at": "2026-07-19T04:39:00Z",
"updated_at": "2026-07-19T07:05:25Z",
"pushed_at": "2026-07-19T07:05:12Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
2026/CVE-2026-46215.json
+3 -3
View File
@@ -30,7 +30,7 @@
"forks": 2,
"watchers": 10,
"score": 0,
"subscribers_count": 0
"subscribers_count": 1
},
{
"id": 1297596219,
@@ -80,8 +80,8 @@
"description": "CVE-2026-46215 DRM GEM UAF Exploit for Linux 7.0 - by Antonius (sw0rdm4n, w1sdom, ev1lut10n)",
"fork": false,
"created_at": "2026-07-19T05:37:45Z",
"updated_at": "2026-07-19T06:14:49Z",
"pushed_at": "2026-07-19T06:14:45Z",
"updated_at": "2026-07-19T11:50:01Z",
"pushed_at": "2026-07-19T11:49:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-48907.json
+33
View File
@@ -574,5 +574,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1305540366,
"name": "CVE-2026-48907_PoC",
"full_name": "ChiefYoru\/CVE-2026-48907_PoC",
"owner": {
"login": "ChiefYoru",
"id": 225136448,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/225136448?v=4",
"html_url": "https:\/\/github.com\/ChiefYoru",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ChiefYoru\/CVE-2026-48907_PoC",
"description": "Unauthenticated Remote Code Execution (RCE) vulnerability in the JCE (Joomla Content Editor) extension for Joomla",
"fork": false,
"created_at": "2026-07-19T08:21:14Z",
"updated_at": "2026-07-19T09:02:15Z",
"pushed_at": "2026-07-19T08:21:30Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-49176.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1302824377,
"name": "CVE-2026-49176_LPE_POC",
"full_name": "DavidCarliez\/CVE-2026-49176_LPE_POC",
"owner": {
"login": "DavidCarliez",
"id": 271374756,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/271374756?v=4",
"html_url": "https:\/\/github.com\/DavidCarliez",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/DavidCarliez\/CVE-2026-49176_LPE_POC",
"description": "Local privilege-escalation proof of concept for the Windows WalletService vulnerability fixed in July 2026.",
"fork": false,
"created_at": "2026-07-16T13:36:10Z",
"updated_at": "2026-07-19T12:16:29Z",
"pushed_at": "2026-07-19T12:16:25Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-50343.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 38,
"watchers_count": 38,
"has_discussions": false,
"forks_count": 11,
"forks_count": 12,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 11,
"forks": 12,
"watchers": 38,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-50402.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1305552534,
"name": "CVE-Writeups",
"full_name": "SY115\/CVE-Writeups",
"owner": {
"login": "SY115",
"id": 179578592,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/179578592?v=4",
"html_url": "https:\/\/github.com\/SY115",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/SY115\/CVE-Writeups",
"description": "Security vulnerability research writeups. CVE-2026-50402: Windows NTFS Elevation of Privilege (CVSS 7.8)",
"fork": false,
"created_at": "2026-07-19T08:42:18Z",
"updated_at": "2026-07-19T08:44:44Z",
"pushed_at": "2026-07-19T08:44:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-50416.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "CVE-2026-50416: Windows 11 KASLR bypass",
"fork": false,
"created_at": "2026-07-17T12:12:33Z",
"updated_at": "2026-07-19T05:24:26Z",
"updated_at": "2026-07-19T10:27:34Z",
"pushed_at": "2026-07-18T13:45:51Z",
"stargazers_count": 16,
"watchers_count": 16,
"stargazers_count": 18,
"watchers_count": 18,
"has_discussions": false,
"forks_count": 3,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -44,8 +44,8 @@
"writeups"
],
"visibility": "public",
"forks": 3,
"watchers": 16,
"forks": 4,
"watchers": 18,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-56290.json
+33
View File
@@ -120,5 +120,38 @@
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1305532271,
"name": "CVE-2026-56290_PoC",
"full_name": "ChiefYoru\/CVE-2026-56290_PoC",
"owner": {
"login": "ChiefYoru",
"id": 225136448,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/225136448?v=4",
"html_url": "https:\/\/github.com\/ChiefYoru",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ChiefYoru\/CVE-2026-56290_PoC",
"description": "The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.",
"fork": false,
"created_at": "2026-07-19T08:07:26Z",
"updated_at": "2026-07-19T08:07:57Z",
"pushed_at": "2026-07-19T08:07:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-58635.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "PoC for CVE-2026-58635: Windows Narrator Braille Local Privilege Escalation",
"fork": false,
"created_at": "2026-07-15T12:53:34Z",
"updated_at": "2026-07-19T05:12:36Z",
"updated_at": "2026-07-19T08:16:44Z",
"pushed_at": "2026-07-15T12:53:37Z",
"stargazers_count": 19,
"watchers_count": 19,
"stargazers_count": 20,
"watchers_count": 20,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 19,
"watchers": 20,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-63030.json
+86 -53
View File
@@ -14,12 +14,12 @@
"description": "wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain",
"fork": false,
"created_at": "2026-07-17T20:18:33Z",
"updated_at": "2026-07-19T06:34:29Z",
"updated_at": "2026-07-19T12:47:00Z",
"pushed_at": "2026-07-19T00:04:39Z",
"stargazers_count": 259,
"watchers_count": 259,
"stargazers_count": 297,
"watchers_count": 297,
"has_discussions": false,
"forks_count": 59,
"forks_count": 64,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -31,8 +31,8 @@
"wp2shell-poc"
],
"visibility": "public",
"forks": 59,
"watchers": 259,
"forks": 64,
"watchers": 297,
"score": 0,
"subscribers_count": 0
},
@@ -84,10 +84,10 @@
"description": "CVE-2026-63030, CVE-2026-60137, wp2shell scanner",
"fork": false,
"created_at": "2026-07-17T23:15:57Z",
"updated_at": "2026-07-19T04:46:28Z",
"updated_at": "2026-07-19T10:38:02Z",
"pushed_at": "2026-07-18T22:07:34Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -98,7 +98,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 7,
"watchers": 9,
"score": 0,
"subscribers_count": 0
},
@@ -183,10 +183,10 @@
"description": "Non-destructive detector + Docker lab for wp2shell (CVE-2026-63030 REST \/batch\/v1 route confusion + CVE-2026-60137 author__not_in SQLi) in WordPress core 6.9.0-6.9.4 \/ 7.0.0-7.0.1",
"fork": false,
"created_at": "2026-07-18T03:04:50Z",
"updated_at": "2026-07-19T05:44:39Z",
"updated_at": "2026-07-19T09:15:53Z",
"pushed_at": "2026-07-18T17:24:57Z",
"stargazers_count": 18,
"watchers_count": 18,
"stargazers_count": 22,
"watchers_count": 22,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -205,9 +205,9 @@
],
"visibility": "public",
"forks": 7,
"watchers": 18,
"watchers": 22,
"score": 0,
"subscribers_count": 0
"subscribers_count": 1
},
{
"id": 1304559478,
@@ -341,7 +341,7 @@
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -356,7 +356,7 @@
"wordpress-security"
],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 6,
"score": 0,
"subscribers_count": 0
@@ -419,7 +419,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -427,7 +427,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
@@ -447,12 +447,12 @@
"description": "CVE-2026-63030 (wp2shell) POC.",
"fork": false,
"created_at": "2026-07-18T12:11:11Z",
"updated_at": "2026-07-19T06:38:46Z",
"updated_at": "2026-07-19T11:57:21Z",
"pushed_at": "2026-07-18T13:40:45Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -460,10 +460,10 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 3,
"forks": 2,
"watchers": 6,
"score": 0,
"subscribers_count": 0
"subscribers_count": 1
},
{
"id": 1304954609,
@@ -513,12 +513,12 @@
"description": "CVE-2026-63030 + CVE-2026-60137 - “wp2shell”: unauthenticated RCE in WordPress core",
"fork": false,
"created_at": "2026-07-18T14:27:41Z",
"updated_at": "2026-07-19T06:36:17Z",
"updated_at": "2026-07-19T12:11:23Z",
"pushed_at": "2026-07-18T19:05:43Z",
"stargazers_count": 19,
"watchers_count": 19,
"stargazers_count": 24,
"watchers_count": 24,
"has_discussions": false,
"forks_count": 6,
"forks_count": 8,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -526,8 +526,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 19,
"forks": 8,
"watchers": 24,
"score": 0,
"subscribers_count": 0
},
@@ -717,8 +717,8 @@
"description": "Non-intrusive detection scanner for the WordPress wp2shell pre-auth RCE chain (CVE-2026-63030 + CVE-2026-60137). Detection-only, no exploitation.",
"fork": false,
"created_at": "2026-07-18T17:56:43Z",
"updated_at": "2026-07-19T06:41:22Z",
"pushed_at": "2026-07-19T06:41:09Z",
"updated_at": "2026-07-19T06:57:13Z",
"pushed_at": "2026-07-19T06:57:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -750,10 +750,10 @@
"description": "Abdal CVE-2026-63030 is a professional WordPress vulnerability scanner designed to detect exposure to CVE-2026-63030 through version analysis and REST API security checks. Developed by Ebrahim Shafiei (EbraSha) for cybersecurity research, penetration testing, and WordPress security assessment.",
"fork": false,
"created_at": "2026-07-18T19:24:30Z",
"updated_at": "2026-07-18T20:02:51Z",
"updated_at": "2026-07-19T12:25:22Z",
"pushed_at": "2026-07-18T19:47:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -785,7 +785,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
@@ -843,12 +843,12 @@
"description": "A scanner and proof-of-concept toolkit for CVE-2026-63030 (wp2shell) - pre-authenticated remote code execution in WordPress core",
"fork": false,
"created_at": "2026-07-18T20:12:07Z",
"updated_at": "2026-07-19T02:48:50Z",
"updated_at": "2026-07-19T10:48:16Z",
"pushed_at": "2026-07-18T21:41:54Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -861,8 +861,8 @@
"wp2shell-poc"
],
"visibility": "public",
"forks": 1,
"watchers": 1,
"forks": 2,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
@@ -980,12 +980,12 @@
"description": "WordPress 未授权RCE EXP | CVE-2026-63030 ",
"fork": false,
"created_at": "2026-07-18T21:13:39Z",
"updated_at": "2026-07-19T02:11:41Z",
"updated_at": "2026-07-19T12:38:59Z",
"pushed_at": "2026-07-18T21:19:32Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 1,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -993,8 +993,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 1,
"forks": 4,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
@@ -1018,7 +1018,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1026,7 +1026,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
@@ -1046,8 +1046,41 @@
"description": "wp2shell — WordPress Core Pre-Auth RCE (CVE-2026-63030 + CVE-2026-60137). Exploit toolkit + remediation.",
"fork": false,
"created_at": "2026-07-19T06:23:48Z",
"updated_at": "2026-07-19T06:23:55Z",
"updated_at": "2026-07-19T11:08:27Z",
"pushed_at": "2026-07-19T06:23:51Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1305558264,
"name": "wp2shell-scanner",
"full_name": "bahartanir\/wp2shell-scanner",
"owner": {
"login": "bahartanir",
"id": 193408204,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/193408204?v=4",
"html_url": "https:\/\/github.com\/bahartanir",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/bahartanir\/wp2shell-scanner",
"description": "CVE-2026-63030 \/ CVE-2026-60137 - WordPress pre-auth RCE scanner",
"fork": false,
"created_at": "2026-07-19T08:52:12Z",
"updated_at": "2026-07-19T11:12:16Z",
"pushed_at": "2026-07-19T11:12:10Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
README.md
+24 -7
View File
@@ -122,7 +122,7 @@
<code>Discord Client Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Discord Client. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\nThe specific flaw exists within the discord_rpc module. The product loads a file from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of a target user. Was ZDI-CAN-27057.
</code>
- [AnhedonicX/CVE-2026-0776](https://github.com/AnhedonicX/CVE-2026-0776)
- [whoanx/CVE-2026-0776](https://github.com/whoanx/CVE-2026-0776)
- [OverlayCS/Helix](https://github.com/OverlayCS/Helix)
### CVE-2026-0828 (2026-06-26)
@@ -1736,7 +1736,7 @@
<code>MCPJam inspector is the local-first development platform for MCP servers. Versions 1.4.2 and earlier are vulnerable to remote code execution (RCE) vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. Since MCPJam inspector by default listens on 0.0.0.0 instead of 127.0.0.1, an attacker can trigger the RCE remotely via a simple HTTP request. Version 1.4.3 contains a patch.
</code>
- [ibreakthingsforaliving/CVE-2026-23744-PoC](https://github.com/ibreakthingsforaliving/CVE-2026-23744-PoC)
- [boroeurnprach/CVE-2026-23744-PoC](https://github.com/boroeurnprach/CVE-2026-23744-PoC)
- [p1ctur3p3rf3ct/CVE-2026-23744](https://github.com/p1ctur3p3rf3ct/CVE-2026-23744)
- [thisisish/HTB-DevHub](https://github.com/thisisish/HTB-DevHub)
- [SrGinebras/CVE-2026-23744-RCE-for-MCPjam-inspector-v1.4.2](https://github.com/SrGinebras/CVE-2026-23744-RCE-for-MCPjam-inspector-v1.4.2)
@@ -2452,6 +2452,7 @@
- [diamorphine666/CVE-2026-33017-Exploit](https://github.com/diamorphine666/CVE-2026-33017-Exploit)
- [Usman0220/CVE-2026-33017-Langflow-RCE](https://github.com/Usman0220/CVE-2026-33017-Langflow-RCE)
- [Industri4l-H3ll-Xpl0it3rs/CVE-2026-33017-Langflow-RCE](https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2026-33017-Langflow-RCE)
- [CerberusMrXi/Langflow-cve-2026-33017-exploit](https://github.com/CerberusMrXi/Langflow-cve-2026-33017-exploit)
### CVE-2026-33067 (2026-03-20)
@@ -4528,6 +4529,7 @@
- [pssec-io/CVE-2026-48907](https://github.com/pssec-io/CVE-2026-48907)
- [NoXiVaR/CVE-2026-48907](https://github.com/NoXiVaR/CVE-2026-48907)
- [bayu06802/CVE-2026-48907](https://github.com/bayu06802/CVE-2026-48907)
- [ChiefYoru/CVE-2026-48907_PoC](https://github.com/ChiefYoru/CVE-2026-48907_PoC)
### CVE-2026-48908 (2026-06-20)
@@ -4643,6 +4645,13 @@
- [dhmosfunk/CVE-2026-49160-CVE-2026-47291-HTTP.sys](https://github.com/dhmosfunk/CVE-2026-49160-CVE-2026-47291-HTTP.sys)
### CVE-2026-49176 (2026-07-14)
<code>Improper privilege management in Windows WalletService allows an authorized attacker to elevate privileges locally.
</code>
- [DavidCarliez/CVE-2026-49176_LPE_POC](https://github.com/DavidCarliez/CVE-2026-49176_LPE_POC)
### CVE-2026-49230 (2026-06-19)
<code>Improper Validation of Integrity Check Value vulnerability in Apache APISIX.\n\nThe jwe-decrypt plugin under default configuration is vulnerable to authentication bypass. \nThis issue affects Apache APISIX: from 3.8.0 through 3.16.0.\n\nUsers are recommended to upgrade to version 3.17.0, which fixes the issue.
@@ -4814,6 +4823,13 @@
- [syxlox/CVE-2026-50369](https://github.com/syxlox/CVE-2026-50369)
### CVE-2026-50402 (2026-07-14)
<code>Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate privileges locally.
</code>
- [SY115/CVE-Writeups](https://github.com/SY115/CVE-Writeups)
### CVE-2026-50416 (2026-07-14)
<code>Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally.
@@ -5230,6 +5246,7 @@
- [sagsooz/PageBuilderCK-CVE-2026-56290-Exploit](https://github.com/sagsooz/PageBuilderCK-CVE-2026-56290-Exploit)
- [shinthink/pbck-exploit](https://github.com/shinthink/pbck-exploit)
- [Jenderal92/CVE-2026-56290](https://github.com/Jenderal92/CVE-2026-56290)
- [ChiefYoru/CVE-2026-56290_PoC](https://github.com/ChiefYoru/CVE-2026-56290_PoC)
### CVE-2026-56291 (2026-07-09)
@@ -5414,6 +5431,7 @@
- [mhtsec/CVE-2026-63030](https://github.com/mhtsec/CVE-2026-63030)
- [c0gnit00/Wp2Shell](https://github.com/c0gnit00/Wp2Shell)
- [ikow/wp2shell](https://github.com/ikow/wp2shell)
- [bahartanir/wp2shell-scanner](https://github.com/bahartanir/wp2shell-scanner)
### CVE-2026-69212
- [c0gnit00/CVE-2026-69212](https://github.com/c0gnit00/CVE-2026-69212)
@@ -7922,7 +7940,7 @@
- [SaidBenaissa/cve-2025-11953-vulnerability-demo](https://github.com/SaidBenaissa/cve-2025-11953-vulnerability-demo)
- [GhoStZA-debug/PoC-CVE-collection](https://github.com/GhoStZA-debug/PoC-CVE-collection)
- [Mr-In4inci3le/CVE-2025-11953-POC-](https://github.com/Mr-In4inci3le/CVE-2025-11953-POC-)
- [ibreakthingsforaliving/CVE-2025-11953-PoC](https://github.com/ibreakthingsforaliving/CVE-2025-11953-PoC)
- [boroeurnprach/CVE-2025-11953-PoC](https://github.com/boroeurnprach/CVE-2025-11953-PoC)
### CVE-2025-11973 (2025-11-21)
@@ -8710,7 +8728,6 @@
</code>
- [ahmedumarehman/CVE-2025-21293](https://github.com/ahmedumarehman/CVE-2025-21293)
- [Dashlane04/threat-simlab](https://github.com/Dashlane04/threat-simlab)
### CVE-2025-21298 (2025-01-14)
@@ -10981,7 +10998,6 @@
- [yonathanpy/CVE-2025-32433.py](https://github.com/yonathanpy/CVE-2025-32433.py)
- [joshuavanderpoll/cve-2025-32433](https://github.com/joshuavanderpoll/cve-2025-32433)
- [0xBlackash/CVE-2025-32433](https://github.com/0xBlackash/CVE-2025-32433)
- [leehunkoo/hk_CVE-2025-32433](https://github.com/leehunkoo/hk_CVE-2025-32433)
- [chuzouX/CVE-2025-32433-Exploit-edited](https://github.com/chuzouX/CVE-2025-32433-Exploit-edited)
- [dampedcoast/Exploiting-a-vulnerability-using-reverse-shell](https://github.com/dampedcoast/Exploiting-a-vulnerability-using-reverse-shell)
@@ -14929,7 +14945,7 @@
<code>React Router is a router for React. In @remix-run/react versions 1.15.0 through 2.17.0. and react-router versions 7.0.0 through 7.8.2, a XSS vulnerability exists in in React Router's meta()/&lt;Meta&gt; APIs in Framework Mode when generating script:ld+json tags which could allow arbitrary JavaScript execution during SSR if untrusted content is used to generate the tag. There is no impact if the application is being used in Declarative Mode (&lt;BrowserRouter&gt;) or Data Mode (createBrowserRouter/&lt;RouterProvider&gt;). This issue has been patched in @remix-run/react version 2.17.1 and react-router version 7.9.0.
</code>
- [ibreakthingsforaliving/CVE-2025-59057-PoC](https://github.com/ibreakthingsforaliving/CVE-2025-59057-PoC)
- [boroeurnprach/CVE-2025-59057-PoC](https://github.com/boroeurnprach/CVE-2025-59057-PoC)
### CVE-2025-59059 (2026-03-03)
@@ -15336,7 +15352,7 @@
- [FlowerWitch/CVE-2025-61686_docker](https://github.com/FlowerWitch/CVE-2025-61686_docker)
- [Kai-One001/React-Router-CVE-2025-61686-](https://github.com/Kai-One001/React-Router-CVE-2025-61686-)
- [ibreakthingsforaliving/CVE-2025-61686-PoC](https://github.com/ibreakthingsforaliving/CVE-2025-61686-PoC)
- [boroeurnprach/CVE-2025-61686-PoC](https://github.com/boroeurnprach/CVE-2025-61686-PoC)
### CVE-2025-61757 (2025-10-21)
@@ -15809,6 +15825,7 @@
</code>
- [luigigubello/CVE-2025-64512-Polyglot-PoC](https://github.com/luigigubello/CVE-2025-64512-Polyglot-PoC)
- [matesz44/CVE-2025-64512](https://github.com/matesz44/CVE-2025-64512)
### CVE-2025-64513 (2025-11-10)