nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/06/20 12:51:43

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-06-20 21:51:43 +09:00
1 parent 0af0038560
commit 2118a24761
28 files changed
+286 -231
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2017/CVE-2017-20251.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Insert PHP Plugin PHP Code Injection",
"fork": false,
"created_at": "2026-06-09T16:24:43Z",
"updated_at": "2026-06-09T16:35:50Z",
"updated_at": "2026-06-20T10:33:19Z",
"pushed_at": "2026-06-09T16:30:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2019/CVE-2019-0708.json
+6 -6
View File
@@ -118,12 +118,12 @@
"description": "CVE-2019-0708-exploit",
"fork": false,
"created_at": "2019-05-15T02:24:21Z",
"updated_at": "2025-08-10T17:40:08Z",
"updated_at": "2026-06-20T12:13:00Z",
"pushed_at": "2019-05-15T02:26:46Z",
"stargazers_count": 120,
"watchers_count": 120,
"stargazers_count": 121,
"watchers_count": 121,
"has_discussions": false,
"forks_count": 23,
"forks_count": 24,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -131,8 +131,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 23,
"watchers": 120,
"forks": 24,
"watchers": 121,
"score": 0,
"subscribers_count": 7
},
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-06-20T02:11:51Z",
"pushed_at": "2026-06-20T02:11:48Z",
"updated_at": "2026-06-20T11:52:10Z",
"pushed_at": "2026-06-20T11:52:06Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2019/CVE-2019-11043.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Exploit for CVE-2019-11043",
"fork": false,
"created_at": "2019-09-23T21:37:27Z",
"updated_at": "2026-06-09T17:18:54Z",
"updated_at": "2026-06-20T10:22:20Z",
"pushed_at": "2019-11-12T18:53:14Z",
"stargazers_count": 1835,
"watchers_count": 1835,
"stargazers_count": 1836,
"watchers_count": 1836,
"has_discussions": false,
"forks_count": 250,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 250,
"watchers": 1835,
"watchers": 1836,
"score": 0,
"subscribers_count": 33
},
2020/CVE-2020-0796.json
+4 -4
View File
@@ -1754,10 +1754,10 @@
"description": "SMBGhost (CVE-2020-0796) Automate Exploitation and Detection",
"fork": false,
"created_at": "2020-06-10T16:44:39Z",
"updated_at": "2026-06-14T07:27:10Z",
"updated_at": "2026-06-20T08:13:32Z",
"pushed_at": "2022-03-30T14:02:04Z",
"stargazers_count": 346,
"watchers_count": 346,
"stargazers_count": 347,
"watchers_count": 347,
"has_discussions": false,
"forks_count": 49,
"allow_forking": true,
@@ -1768,7 +1768,7 @@
"topics": [],
"visibility": "public",
"forks": 49,
"watchers": 346,
"watchers": 347,
"score": 0,
"subscribers_count": 6
},
2020/CVE-2020-1472.json
+2 -2
View File
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-06-20T04:43:34Z",
"pushed_at": "2026-06-20T04:43:30Z",
"updated_at": "2026-06-20T12:16:29Z",
"pushed_at": "2026-06-20T12:16:25Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-06-20T04:44:01Z",
"pushed_at": "2026-06-20T04:43:58Z",
"updated_at": "2026-06-20T12:19:15Z",
"pushed_at": "2026-06-20T12:19:11Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-4034.json
+4 -4
View File
@@ -150,10 +150,10 @@
"description": "Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation",
"fork": false,
"created_at": "2022-01-26T14:26:10Z",
"updated_at": "2026-06-16T16:10:58Z",
"updated_at": "2026-06-20T08:27:20Z",
"pushed_at": "2022-06-21T14:52:05Z",
"stargazers_count": 1312,
"watchers_count": 1312,
"stargazers_count": 1313,
"watchers_count": 1313,
"has_discussions": false,
"forks_count": 207,
"allow_forking": true,
@@ -166,7 +166,7 @@
],
"visibility": "public",
"forks": 207,
"watchers": 1312,
"watchers": 1313,
"score": 0,
"subscribers_count": 12
},
2022/CVE-2022-45782.json
+11 -4
View File
@@ -11,11 +11,11 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ninajafli\/DotCMS-CVE-2022-45782",
"description": null,
"description": "Proof-of-concept for CVE-2022-45782: predictable dotCMS password-reset tokens, with a token cracker and full exploit chain.",
"fork": false,
"created_at": "2025-11-30T08:04:56Z",
"updated_at": "2025-12-01T17:55:21Z",
"pushed_at": "2025-12-01T17:55:16Z",
"updated_at": "2026-06-20T09:55:44Z",
"pushed_at": "2026-06-20T09:55:40Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -25,7 +25,14 @@
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"topics": [
"cve",
"cve-2022-45782",
"dotcms",
"exploit",
"proof-of-concept",
"web-security"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
2022/CVE-2022-46463.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "CVE-2022-46463 harbor公开镜像全自动下载脚本",
"fork": false,
"created_at": "2024-12-23T08:35:30Z",
"updated_at": "2026-05-13T02:30:51Z",
"updated_at": "2026-06-20T09:56:55Z",
"pushed_at": "2024-12-23T08:40:16Z",
"stargazers_count": 14,
"watchers_count": 14,
"stargazers_count": 15,
"watchers_count": 15,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 14,
"watchers": 15,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-0411.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "This repository contains POC scenarios as part of CVE-2025-0411 MotW bypass.",
"fork": false,
"created_at": "2025-01-22T14:40:34Z",
"updated_at": "2026-02-12T00:45:07Z",
"updated_at": "2026-06-20T06:53:13Z",
"pushed_at": "2025-03-06T11:31:36Z",
"stargazers_count": 154,
"watchers_count": 154,
"stargazers_count": 155,
"watchers_count": 155,
"has_discussions": false,
"forks_count": 39,
"allow_forking": true,
@@ -35,7 +35,7 @@
],
"visibility": "public",
"forks": 39,
"watchers": 154,
"watchers": 155,
"score": 0,
"subscribers_count": 2
},
2025/CVE-2025-43529.json
+5 -5
View File
@@ -245,10 +245,10 @@
"description": "A demonstration of read write using cve-2025-43529 on iOS 26.1",
"fork": false,
"created_at": "2026-06-11T04:48:56Z",
"updated_at": "2026-06-19T22:57:21Z",
"pushed_at": "2026-06-18T15:45:39Z",
"stargazers_count": 32,
"watchers_count": 32,
"updated_at": "2026-06-20T10:26:18Z",
"pushed_at": "2026-06-20T09:42:48Z",
"stargazers_count": 33,
"watchers_count": 33,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -259,7 +259,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 32,
"watchers": 33,
"score": 0,
"subscribers_count": 1
}
2025/CVE-2025-48804.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Downgrade attack for CVE-2025-48804",
"fork": false,
"created_at": "2026-04-30T13:05:30Z",
"updated_at": "2026-06-19T03:36:48Z",
"updated_at": "2026-06-20T10:31:01Z",
"pushed_at": "2026-05-20T14:39:54Z",
"stargazers_count": 209,
"watchers_count": 209,
"stargazers_count": 210,
"watchers_count": 210,
"has_discussions": false,
"forks_count": 39,
"allow_forking": true,
@@ -32,7 +32,7 @@
],
"visibility": "public",
"forks": 39,
"watchers": 209,
"watchers": 210,
"score": 0,
"subscribers_count": 3
}
2025/CVE-2025-55182.json
+4 -4
View File
@@ -2163,10 +2163,10 @@
"description": "Supports RSC fingerprinting and exploitation of the React component vulnerability CVE-2025-55182.",
"fork": false,
"created_at": "2025-12-05T05:53:25Z",
"updated_at": "2026-06-11T14:45:45Z",
"updated_at": "2026-06-20T06:52:33Z",
"pushed_at": "2025-12-05T08:11:16Z",
"stargazers_count": 575,
"watchers_count": 575,
"stargazers_count": 576,
"watchers_count": 576,
"has_discussions": false,
"forks_count": 89,
"allow_forking": true,
@@ -2177,7 +2177,7 @@
"topics": [],
"visibility": "public",
"forks": 89,
"watchers": 575,
"watchers": 576,
"score": 0,
"subscribers_count": 3
},
2025/CVE-2025-63389.json
+56
View File
@@ -0,0 +1,56 @@
[
{
"id": 1227613427,
"name": "VisorGoose",
"full_name": "nuclide-research\/VisorGoose",
"owner": {
"login": "nuclide-research",
"id": 288779681,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/288779681?v=4",
"html_url": "https:\/\/github.com\/nuclide-research",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/nuclide-research\/VisorGoose",
"description": "Gov-TLD Ollama discovery via CT logs, Shodan, and DNS; detects CVE-2025-63389, cloud proxy takeovers, RAG\/distilled models across 25 government TLD patterns.",
"fork": false,
"created_at": "2026-05-02T23:31:26Z",
"updated_at": "2026-06-20T11:50:56Z",
"pushed_at": "2026-06-08T23:21:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"ai-infrastructure",
"ai-security",
"bug-bounty",
"certificate-transparency",
"cli",
"cloud-takeover",
"ct-logs",
"cve-2025-63389",
"golang",
"government",
"llm",
"llm-security",
"mullvad",
"nuclide",
"ollama",
"osint",
"reconnaissance",
"security",
"shodan",
"visor"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-63821.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Proof-of-concept of vulnerability found in Totolink A720R router",
"fork": false,
"created_at": "2025-10-19T12:34:55Z",
"updated_at": "2025-11-17T14:37:42Z",
"pushed_at": "2025-11-14T15:26:21Z",
"updated_at": "2026-06-20T11:10:51Z",
"pushed_at": "2026-06-20T11:10:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-0300.json
-33
View File
@@ -1,37 +1,4 @@
[
{
"id": 1230819812,
"name": "cve-2026-0300-audit",
"full_name": "TailwindRG\/cve-2026-0300-audit",
"owner": {
"login": "TailwindRG",
"id": 262565926,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/262565926?v=4",
"html_url": "https:\/\/github.com\/TailwindRG",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/TailwindRG\/cve-2026-0300-audit",
"description": "Read-only audit tooling for CVE-2026-0300 (PAN-OS User-ID Authentication Portal exposure)",
"fork": false,
"created_at": "2026-05-06T10:57:29Z",
"updated_at": "2026-05-06T13:52:53Z",
"pushed_at": "2026-05-06T13:51:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1230990323,
"name": "CVE-2026-0300-PANOS",
2026/CVE-2026-11551.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Unauthenticated Privilege Escalation via Account Takeover",
"fork": false,
"created_at": "2026-06-19T17:29:57Z",
"updated_at": "2026-06-19T17:33:55Z",
"updated_at": "2026-06-20T10:33:16Z",
"pushed_at": "2026-06-19T17:33:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-11912.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1275119300,
"name": "By-Poloss..-..CVE-2026-11912",
"full_name": "Polosss\/By-Poloss..-..CVE-2026-11912",
"owner": {
"login": "Polosss",
"id": 178707366,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/178707366?v=4",
"html_url": "https:\/\/github.com\/Polosss",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Polosss\/By-Poloss..-..CVE-2026-11912",
"description": "Missing Authorization to Unauthenticated File Modification",
"fork": false,
"created_at": "2026-06-20T09:20:46Z",
"updated_at": "2026-06-20T10:33:15Z",
"pushed_at": "2026-06-20T09:58:28Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-23918.json
-45
View File
@@ -32,51 +32,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1230922026,
"name": "CVE-2026-23918-Apache-H2-PoC",
"full_name": "xeloxa\/CVE-2026-23918-Apache-H2-PoC",
"owner": {
"login": "xeloxa",
"id": 173461547,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/173461547?v=4",
"html_url": "https:\/\/github.com\/xeloxa",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/xeloxa\/CVE-2026-23918-Apache-H2-PoC",
"description": "Proof-of-Concept exploit for CVE-2026-23918 (Apache mod_http2 double-free). Features multi-mode DoS (Rapid-RST, Slow-Drip) and passive RCE\/vulnerability detection for Apache 2.4.66.",
"fork": false,
"created_at": "2026-05-06T13:00:15Z",
"updated_at": "2026-06-18T12:23:28Z",
"pushed_at": "2026-05-06T13:09:45Z",
"stargazers_count": 20,
"watchers_count": 20,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"apache",
"cve-2026-23918",
"cybersecurity",
"denial-of-service",
"dos",
"double-free",
"exploit",
"http2",
"infosec",
"python",
"race-condition"
],
"visibility": "public",
"forks": 6,
"watchers": 20,
"score": 0,
"subscribers_count": 0
},
{
"id": 1231037250,
"name": "CVE-2026-23918",
2026/CVE-2026-31431.json
-81
View File
@@ -439,54 +439,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1225665324,
"name": "copyfail-rs",
"full_name": "diemoeve\/copyfail-rs",
"owner": {
"login": "diemoeve",
"id": 105520646,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105520646?v=4",
"html_url": "https:\/\/github.com\/diemoeve",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/diemoeve\/copyfail-rs",
"description": "CopyFail (CVE-2026-31431): Linux kernel page-cache PrivEsc PoC + the only public detection tool. Novel PAM auth-bypass vector + Sigma\/auditd\/eBPF rules.",
"fork": false,
"created_at": "2026-04-30T14:04:58Z",
"updated_at": "2026-05-23T05:05:42Z",
"pushed_at": "2026-05-06T12:42:59Z",
"stargazers_count": 19,
"watchers_count": 19,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"af-alg",
"auditd",
"copyfail",
"cve-2026-31431",
"detection-engineering",
"ebpf",
"linux-kernel",
"no-std",
"page-cache",
"privilege-escalation",
"purple-team",
"rust",
"security",
"sigma-rules"
],
"visibility": "public",
"forks": 3,
"watchers": 19,
"score": 0,
"subscribers_count": 2
},
{
"id": 1225714491,
"name": "copy-fail-blocker",
@@ -1484,39 +1436,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1230883253,
"name": "XCP_ng_CVE-2026-31431_tester",
"full_name": "grabesec\/XCP_ng_CVE-2026-31431_tester",
"owner": {
"login": "grabesec",
"id": 282242801,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/282242801?v=4",
"html_url": "https:\/\/github.com\/grabesec",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/grabesec\/XCP_ng_CVE-2026-31431_tester",
"description": "Test XCP_ng 8.3 for CVE-2026-31431Vulnerability",
"fork": false,
"created_at": "2026-05-06T12:15:18Z",
"updated_at": "2026-05-06T12:36:46Z",
"pushed_at": "2026-05-06T12:36:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1231023679,
"name": "cve-2026-31431-ftrace",
2026/CVE-2026-37149.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1275248002,
"name": "CVE-2026-37149",
"full_name": "pateldhyeyit\/CVE-2026-37149",
"owner": {
"login": "pateldhyeyit",
"id": 127226724,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/127226724?v=4",
"html_url": "https:\/\/github.com\/pateldhyeyit",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/pateldhyeyit\/CVE-2026-37149",
"description": "CVE-2026-37149 - SQL Injection vulnerability in the scost parameter of search_products.php in GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN v1.0.",
"fork": false,
"created_at": "2026-06-20T12:51:07Z",
"updated_at": "2026-06-20T12:51:08Z",
"pushed_at": "2026-06-20T12:51:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-41091.json
+33
View File
@@ -64,5 +64,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1275158145,
"name": "CVE-2026-41091-PoC-Exploit",
"full_name": "tc4dy\/CVE-2026-41091-PoC-Exploit",
"owner": {
"login": "tc4dy",
"id": 140116264,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/140116264?v=4",
"html_url": "https:\/\/github.com\/tc4dy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/tc4dy\/CVE-2026-41091-PoC-Exploit",
"description": "🔥 CVE-2026-41091 SolarFlare | Microsoft Defender LPE exploit. Low-privileged users gain NT AUTHORITY\\SYSTEM via Cloud Files API + NTFS junction trickery. Forces Defender to write malicious payloads to System32 with SYSTEM rights. ⚠️ Actively exploited in wild. CVSS 7.8. Patch: Defender Engine 1.1.26040.8. 🛡️ Educational PoC only. ",
"fork": false,
"created_at": "2026-06-20T10:25:34Z",
"updated_at": "2026-06-20T12:08:33Z",
"pushed_at": "2026-06-20T12:08:29Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-42055.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "CVE-2026-42055 - Draft",
"fork": false,
"created_at": "2026-06-19T01:05:02Z",
"updated_at": "2026-06-19T01:05:09Z",
"updated_at": "2026-06-20T11:50:48Z",
"pushed_at": "2026-06-19T01:05:06Z",
"stargazers_count": 0,
"watchers_count": 0,
2026/CVE-2026-44578.json
+33
View File
@@ -229,5 +229,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1275163103,
"name": "CVE-2026-44578",
"full_name": "GadaLuBau1337\/CVE-2026-44578",
"owner": {
"login": "GadaLuBau1337",
"id": 146705886,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/146705886?v=4",
"html_url": "https:\/\/github.com\/GadaLuBau1337",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/GadaLuBau1337\/CVE-2026-44578",
"description": null,
"fork": false,
"created_at": "2026-06-20T10:33:50Z",
"updated_at": "2026-06-20T10:37:14Z",
"pushed_at": "2026-06-20T10:37:10Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-49975.json
+4 -4
View File
@@ -146,10 +146,10 @@
"description": "HTTP2-Bomb",
"fork": false,
"created_at": "2026-06-10T05:06:42Z",
"updated_at": "2026-06-20T01:37:22Z",
"updated_at": "2026-06-20T09:34:31Z",
"pushed_at": "2026-06-18T06:00:02Z",
"stargazers_count": 8,
"watchers_count": 8,
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -160,7 +160,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 8,
"watchers": 9,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-9067.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Schema & Structured Data for WP & AMP < 1.60 - Unauthenticated Arbitrary Media Upload [POC & Xploit]",
"fork": false,
"created_at": "2026-06-10T18:30:39Z",
"updated_at": "2026-06-15T16:50:42Z",
"updated_at": "2026-06-20T10:33:18Z",
"pushed_at": "2026-06-10T18:34:42Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
}
README.md
+19 -4
View File
@@ -67,7 +67,6 @@
<code>A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets. \n\nThe risk of this issue is greatly reduced if you secure access to the User-ID™ Authentication Portal per the best practice guidelines https://knowledgebase.paloaltonetworks.com/KCSArticleDetail by restricting access to only trusted internal IP addresses.\n\nPrisma Access, Cloud NGFW and Panorama appliances are not impacted by this vulnerability.
</code>
- [TailwindRG/cve-2026-0300-audit](https://github.com/TailwindRG/cve-2026-0300-audit)
- [bannned-bit/CVE-2026-0300-PANOS](https://github.com/bannned-bit/CVE-2026-0300-PANOS)
- [shizuku198411/CVE-2026-0300](https://github.com/shizuku198411/CVE-2026-0300)
- [p3Nt3st3r-sTAr/CVE-2026-0300-POC](https://github.com/p3Nt3st3r-sTAr/CVE-2026-0300-POC)
@@ -1042,6 +1041,13 @@
- [AlexMihailEngineer/CVE-2026-11784-Optimole-CSRF](https://github.com/AlexMihailEngineer/CVE-2026-11784-Optimole-CSRF)
### CVE-2026-11912 (2026-06-20)
<code>The Simple File List plugin for WordPress is vulnerable to arbitrary file modification due to insufficient authorization checks in all versions up to, and including, 6.3.7. This makes it possible for unauthenticated attackers to delete and modify files on the serve. This vulnerability is exploitable even when the administrator has not enabled the AllowFrontManage setting, because the is_admin() check unconditionally short-circuits the guard before that setting is evaluated.
</code>
- [Polosss/By-Poloss..-..CVE-2026-11912](https://github.com/Polosss/By-Poloss..-..CVE-2026-11912)
### CVE-2026-20127 (2026-02-25)
<code>A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system.\r\n\r\nThis vulnerability exists because the peering authentication mechanism in an affected system is not working properly. An attacker could exploit this vulnerability by sending crafted requests to an affected system. A successful exploit could allow the attacker to log in to an affected Cisco Catalyst SD-WAN Controller as an internal, high-privileged, non-root&amp;nbsp;user account. Using this account, the attacker could access NETCONF, which would then allow the attacker to manipulate network configuration for the SD-WAN fabric.&amp;nbsp;
@@ -1294,7 +1300,6 @@
</code>
- [aa022/CVE-2026-23918-Passive-Audit](https://github.com/aa022/CVE-2026-23918-Passive-Audit)
- [xeloxa/CVE-2026-23918-Apache-H2-PoC](https://github.com/xeloxa/CVE-2026-23918-Apache-H2-PoC)
- [hackervlogofficial/CVE-2026-23918](https://github.com/hackervlogofficial/CVE-2026-23918)
- [CYFARE/CVE-2026-23918-Apache-HTTP-Server-DoubleFree-PoC](https://github.com/CYFARE/CVE-2026-23918-Apache-HTTP-Server-DoubleFree-PoC)
- [alt3kx/CVE-2026-23918](https://github.com/alt3kx/CVE-2026-23918)
@@ -1676,7 +1681,6 @@
- [Percivalll/Copy-Fail-CVE-2026-31431-Kubernetes-PoC](https://github.com/Percivalll/Copy-Fail-CVE-2026-31431-Kubernetes-PoC)
- [yandex-cloud-examples/yc-mk8s-copy-fail-mitigation](https://github.com/yandex-cloud-examples/yc-mk8s-copy-fail-mitigation)
- [JuanBindez/CVE-2026-31431](https://github.com/JuanBindez/CVE-2026-31431)
- [diemoeve/copyfail-rs](https://github.com/diemoeve/copyfail-rs)
- [cozystack/copy-fail-blocker](https://github.com/cozystack/copy-fail-blocker)
- [selectel/mks-copy-fail-mitigation](https://github.com/selectel/mks-copy-fail-mitigation)
- [Juguitos/copy-fail](https://github.com/Juguitos/copy-fail)
@@ -1705,7 +1709,6 @@
- [sgkdev/page_inject](https://github.com/sgkdev/page_inject)
- [luoqianlin/copyfail-c](https://github.com/luoqianlin/copyfail-c)
- [Dullpurple-sloop726/CVE-2026-31431-Linux-Copy-Fail](https://github.com/Dullpurple-sloop726/CVE-2026-31431-Linux-Copy-Fail)
- [grabesec/XCP_ng_CVE-2026-31431_tester](https://github.com/grabesec/XCP_ng_CVE-2026-31431_tester)
- [philfry/cve-2026-31431-ftrace](https://github.com/philfry/cve-2026-31431-ftrace)
- [hans362/CVE-2026-31431-Copy-Fail-Container-Escape](https://github.com/hans362/CVE-2026-31431-Copy-Fail-Container-Escape)
- [StarxSky/CVE-2026-31431](https://github.com/StarxSky/CVE-2026-31431)
@@ -2233,6 +2236,9 @@
### CVE-2026-37073
- [jfs-jfs/CVE-2026-37073](https://github.com/jfs-jfs/CVE-2026-37073)
### CVE-2026-37149
- [pateldhyeyit/CVE-2026-37149](https://github.com/pateldhyeyit/CVE-2026-37149)
### CVE-2026-37196
- [Pavanvootla-sec/CVE-2026-37196](https://github.com/Pavanvootla-sec/CVE-2026-37196)
@@ -2497,6 +2503,7 @@
- [0xBlackash/CVE-2026-41091](https://github.com/0xBlackash/CVE-2026-41091)
- [ridhinva/defender-privilege-escalation-scanner](https://github.com/ridhinva/defender-privilege-escalation-scanner)
- [tc4dy/CVE-2026-41091-PoC-Exploit](https://github.com/tc4dy/CVE-2026-41091-PoC-Exploit)
### CVE-2026-41096 (2026-05-12)
@@ -2896,6 +2903,7 @@
- [dinosn/CVE-2026-44578](https://github.com/dinosn/CVE-2026-44578)
- [0xBlackash/CVE-2026-44578](https://github.com/0xBlackash/CVE-2026-44578)
- [BS2010-AirborneTroops/NEXT-SSRF](https://github.com/BS2010-AirborneTroops/NEXT-SSRF)
- [GadaLuBau1337/CVE-2026-44578](https://github.com/GadaLuBau1337/CVE-2026-44578)
### CVE-2026-44590 (2026-05-27)
@@ -13590,6 +13598,13 @@
- [r0otk3r/CVE-2025-63353](https://github.com/r0otk3r/CVE-2025-63353)
- [Zvckster/CVE-2025-63353](https://github.com/Zvckster/CVE-2025-63353)
### CVE-2025-63389 (2025-12-18)
<code>A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The platform exposes multiple API endpoints without requiring authentication, enabling remote attackers to perform unauthorized model management operations.
</code>
- [nuclide-research/VisorGoose](https://github.com/nuclide-research/VisorGoose)
### CVE-2025-63406 (2025-11-13)
<code>An issue in Intermesh BV GroupOffice vulnerable before v.25.0.47 and 6.8.136 allows a remote attacker to execute arbitrary code via the dbToApi() and eval() in the FunctionField.php