From 2118a24761e93fb0a199037e608edf17be249123 Mon Sep 17 00:00:00 2001 From: motikan2010-bot Date: Sat, 20 Jun 2026 21:51:43 +0900 Subject: [PATCH] Auto Update 2026/06/20 12:51:43 --- 2017/CVE-2017-20251.json | 8 ++-- 2019/CVE-2019-0708.json | 12 +++--- 2019/CVE-2019-1040.json | 4 +- 2019/CVE-2019-11043.json | 8 ++-- 2020/CVE-2020-0796.json | 8 ++-- 2020/CVE-2020-1472.json | 4 +- 2021/CVE-2021-33044.json | 4 +- 2021/CVE-2021-4034.json | 8 ++-- 2022/CVE-2022-45782.json | 15 ++++++-- 2022/CVE-2022-46463.json | 8 ++-- 2025/CVE-2025-0411.json | 8 ++-- 2025/CVE-2025-43529.json | 10 ++--- 2025/CVE-2025-48804.json | 8 ++-- 2025/CVE-2025-55182.json | 8 ++-- 2025/CVE-2025-63389.json | 56 +++++++++++++++++++++++++++ 2025/CVE-2025-63821.json | 4 +- 2026/CVE-2026-0300.json | 33 ---------------- 2026/CVE-2026-11551.json | 8 ++-- 2026/CVE-2026-11912.json | 35 +++++++++++++++++ 2026/CVE-2026-23918.json | 45 ---------------------- 2026/CVE-2026-31431.json | 81 ---------------------------------------- 2026/CVE-2026-37149.json | 35 +++++++++++++++++ 2026/CVE-2026-41091.json | 33 ++++++++++++++++ 2026/CVE-2026-42055.json | 2 +- 2026/CVE-2026-44578.json | 33 ++++++++++++++++ 2026/CVE-2026-49975.json | 8 ++-- 2026/CVE-2026-9067.json | 8 ++-- README.md | 23 ++++++++++-- 28 files changed, 286 insertions(+), 231 deletions(-) create mode 100644 2025/CVE-2025-63389.json create mode 100644 2026/CVE-2026-11912.json create mode 100644 2026/CVE-2026-37149.json diff --git a/2017/CVE-2017-20251.json b/2017/CVE-2017-20251.json index ad740c7ab0..2a72574486 100644 --- a/2017/CVE-2017-20251.json +++ b/2017/CVE-2017-20251.json @@ -14,10 +14,10 @@ "description": "Insert PHP Plugin PHP Code Injection", "fork": false, "created_at": "2026-06-09T16:24:43Z", - "updated_at": "2026-06-09T16:35:50Z", + "updated_at": "2026-06-20T10:33:19Z", "pushed_at": "2026-06-09T16:30:38Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2019/CVE-2019-0708.json b/2019/CVE-2019-0708.json index e4192ee61b..341a3daa0a 100644 --- a/2019/CVE-2019-0708.json +++ b/2019/CVE-2019-0708.json @@ -118,12 +118,12 @@ "description": "CVE-2019-0708-exploit", "fork": false, "created_at": "2019-05-15T02:24:21Z", - "updated_at": "2025-08-10T17:40:08Z", + "updated_at": "2026-06-20T12:13:00Z", "pushed_at": "2019-05-15T02:26:46Z", - "stargazers_count": 120, - "watchers_count": 120, + "stargazers_count": 121, + "watchers_count": 121, "has_discussions": false, - "forks_count": 23, + "forks_count": 24, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -131,8 +131,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 23, - "watchers": 120, + "forks": 24, + "watchers": 121, "score": 0, "subscribers_count": 7 }, diff --git a/2019/CVE-2019-1040.json b/2019/CVE-2019-1040.json index 76d19ed140..e36fdcc7e9 100644 --- a/2019/CVE-2019-1040.json +++ b/2019/CVE-2019-1040.json @@ -179,8 +179,8 @@ "description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.", "fork": false, "created_at": "2025-12-06T19:56:12Z", - "updated_at": "2026-06-20T02:11:51Z", - "pushed_at": "2026-06-20T02:11:48Z", + "updated_at": "2026-06-20T11:52:10Z", + "pushed_at": "2026-06-20T11:52:06Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2019/CVE-2019-11043.json b/2019/CVE-2019-11043.json index a07cb986e6..8c83ce10c7 100644 --- a/2019/CVE-2019-11043.json +++ b/2019/CVE-2019-11043.json @@ -14,10 +14,10 @@ "description": "Exploit for CVE-2019-11043", "fork": false, "created_at": "2019-09-23T21:37:27Z", - "updated_at": "2026-06-09T17:18:54Z", + "updated_at": "2026-06-20T10:22:20Z", "pushed_at": "2019-11-12T18:53:14Z", - "stargazers_count": 1835, - "watchers_count": 1835, + "stargazers_count": 1836, + "watchers_count": 1836, "has_discussions": false, "forks_count": 250, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 250, - "watchers": 1835, + "watchers": 1836, "score": 0, "subscribers_count": 33 }, diff --git a/2020/CVE-2020-0796.json b/2020/CVE-2020-0796.json index 483d8e1bbe..92f83797e5 100644 --- a/2020/CVE-2020-0796.json +++ b/2020/CVE-2020-0796.json @@ -1754,10 +1754,10 @@ "description": "SMBGhost (CVE-2020-0796) Automate Exploitation and Detection", "fork": false, "created_at": "2020-06-10T16:44:39Z", - "updated_at": "2026-06-14T07:27:10Z", + "updated_at": "2026-06-20T08:13:32Z", "pushed_at": "2022-03-30T14:02:04Z", - "stargazers_count": 346, - "watchers_count": 346, + "stargazers_count": 347, + "watchers_count": 347, "has_discussions": false, "forks_count": 49, "allow_forking": true, @@ -1768,7 +1768,7 @@ "topics": [], "visibility": "public", "forks": 49, - "watchers": 346, + "watchers": 347, "score": 0, "subscribers_count": 6 }, diff --git a/2020/CVE-2020-1472.json b/2020/CVE-2020-1472.json index 9c257901da..0d72952374 100644 --- a/2020/CVE-2020-1472.json +++ b/2020/CVE-2020-1472.json @@ -2383,8 +2383,8 @@ "description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.", "fork": false, "created_at": "2025-12-06T10:17:38Z", - "updated_at": "2026-06-20T04:43:34Z", - "pushed_at": "2026-06-20T04:43:30Z", + "updated_at": "2026-06-20T12:16:29Z", + "pushed_at": "2026-06-20T12:16:25Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2021/CVE-2021-33044.json b/2021/CVE-2021-33044.json index a76190e2b7..a2371400df 100644 --- a/2021/CVE-2021-33044.json +++ b/2021/CVE-2021-33044.json @@ -212,8 +212,8 @@ "description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.", "fork": false, "created_at": "2026-03-28T17:42:44Z", - "updated_at": "2026-06-20T04:44:01Z", - "pushed_at": "2026-06-20T04:43:58Z", + "updated_at": "2026-06-20T12:19:15Z", + "pushed_at": "2026-06-20T12:19:11Z", "stargazers_count": 4, "watchers_count": 4, "has_discussions": false, diff --git a/2021/CVE-2021-4034.json b/2021/CVE-2021-4034.json index 4867808aeb..5653e9b4bd 100644 --- a/2021/CVE-2021-4034.json +++ b/2021/CVE-2021-4034.json @@ -150,10 +150,10 @@ "description": "Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation", "fork": false, "created_at": "2022-01-26T14:26:10Z", - "updated_at": "2026-06-16T16:10:58Z", + "updated_at": "2026-06-20T08:27:20Z", "pushed_at": "2022-06-21T14:52:05Z", - "stargazers_count": 1312, - "watchers_count": 1312, + "stargazers_count": 1313, + "watchers_count": 1313, "has_discussions": false, "forks_count": 207, "allow_forking": true, @@ -166,7 +166,7 @@ ], "visibility": "public", "forks": 207, - "watchers": 1312, + "watchers": 1313, "score": 0, "subscribers_count": 12 }, diff --git a/2022/CVE-2022-45782.json b/2022/CVE-2022-45782.json index 3e07d57f29..b55075237d 100644 --- a/2022/CVE-2022-45782.json +++ b/2022/CVE-2022-45782.json @@ -11,11 +11,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/ninajafli\/DotCMS-CVE-2022-45782", - "description": null, + "description": "Proof-of-concept for CVE-2022-45782: predictable dotCMS password-reset tokens, with a token cracker and full exploit chain.", "fork": false, "created_at": "2025-11-30T08:04:56Z", - "updated_at": "2025-12-01T17:55:21Z", - "pushed_at": "2025-12-01T17:55:16Z", + "updated_at": "2026-06-20T09:55:44Z", + "pushed_at": "2026-06-20T09:55:40Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -25,7 +25,14 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cve", + "cve-2022-45782", + "dotcms", + "exploit", + "proof-of-concept", + "web-security" + ], "visibility": "public", "forks": 0, "watchers": 1, diff --git a/2022/CVE-2022-46463.json b/2022/CVE-2022-46463.json index 8329505af1..eecc8d7f21 100644 --- a/2022/CVE-2022-46463.json +++ b/2022/CVE-2022-46463.json @@ -80,10 +80,10 @@ "description": "CVE-2022-46463 harbor公开镜像全自动下载脚本", "fork": false, "created_at": "2024-12-23T08:35:30Z", - "updated_at": "2026-05-13T02:30:51Z", + "updated_at": "2026-06-20T09:56:55Z", "pushed_at": "2024-12-23T08:40:16Z", - "stargazers_count": 14, - "watchers_count": 14, + "stargazers_count": 15, + "watchers_count": 15, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -94,7 +94,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 14, + "watchers": 15, "score": 0, "subscribers_count": 0 } diff --git a/2025/CVE-2025-0411.json b/2025/CVE-2025-0411.json index e09609dd02..3bda06facc 100644 --- a/2025/CVE-2025-0411.json +++ b/2025/CVE-2025-0411.json @@ -14,10 +14,10 @@ "description": "This repository contains POC scenarios as part of CVE-2025-0411 MotW bypass.", "fork": false, "created_at": "2025-01-22T14:40:34Z", - "updated_at": "2026-02-12T00:45:07Z", + "updated_at": "2026-06-20T06:53:13Z", "pushed_at": "2025-03-06T11:31:36Z", - "stargazers_count": 154, - "watchers_count": 154, + "stargazers_count": 155, + "watchers_count": 155, "has_discussions": false, "forks_count": 39, "allow_forking": true, @@ -35,7 +35,7 @@ ], "visibility": "public", "forks": 39, - "watchers": 154, + "watchers": 155, "score": 0, "subscribers_count": 2 }, diff --git a/2025/CVE-2025-43529.json b/2025/CVE-2025-43529.json index 2ba8ec2d9b..cd19160544 100644 --- a/2025/CVE-2025-43529.json +++ b/2025/CVE-2025-43529.json @@ -245,10 +245,10 @@ "description": "A demonstration of read write using cve-2025-43529 on iOS 26.1", "fork": false, "created_at": "2026-06-11T04:48:56Z", - "updated_at": "2026-06-19T22:57:21Z", - "pushed_at": "2026-06-18T15:45:39Z", - "stargazers_count": 32, - "watchers_count": 32, + "updated_at": "2026-06-20T10:26:18Z", + "pushed_at": "2026-06-20T09:42:48Z", + "stargazers_count": 33, + "watchers_count": 33, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -259,7 +259,7 @@ "topics": [], "visibility": "public", "forks": 6, - "watchers": 32, + "watchers": 33, "score": 0, "subscribers_count": 1 } diff --git a/2025/CVE-2025-48804.json b/2025/CVE-2025-48804.json index 60efa13c37..b1589905b2 100644 --- a/2025/CVE-2025-48804.json +++ b/2025/CVE-2025-48804.json @@ -14,10 +14,10 @@ "description": "Downgrade attack for CVE-2025-48804", "fork": false, "created_at": "2026-04-30T13:05:30Z", - "updated_at": "2026-06-19T03:36:48Z", + "updated_at": "2026-06-20T10:31:01Z", "pushed_at": "2026-05-20T14:39:54Z", - "stargazers_count": 209, - "watchers_count": 209, + "stargazers_count": 210, + "watchers_count": 210, "has_discussions": false, "forks_count": 39, "allow_forking": true, @@ -32,7 +32,7 @@ ], "visibility": "public", "forks": 39, - "watchers": 209, + "watchers": 210, "score": 0, "subscribers_count": 3 } diff --git a/2025/CVE-2025-55182.json b/2025/CVE-2025-55182.json index ebfa9ef23c..c3a6d6f88a 100644 --- a/2025/CVE-2025-55182.json +++ b/2025/CVE-2025-55182.json @@ -2163,10 +2163,10 @@ "description": "Supports RSC fingerprinting and exploitation of the React component vulnerability CVE-2025-55182.", "fork": false, "created_at": "2025-12-05T05:53:25Z", - "updated_at": "2026-06-11T14:45:45Z", + "updated_at": "2026-06-20T06:52:33Z", "pushed_at": "2025-12-05T08:11:16Z", - "stargazers_count": 575, - "watchers_count": 575, + "stargazers_count": 576, + "watchers_count": 576, "has_discussions": false, "forks_count": 89, "allow_forking": true, @@ -2177,7 +2177,7 @@ "topics": [], "visibility": "public", "forks": 89, - "watchers": 575, + "watchers": 576, "score": 0, "subscribers_count": 3 }, diff --git a/2025/CVE-2025-63389.json b/2025/CVE-2025-63389.json new file mode 100644 index 0000000000..d5887bc02a --- /dev/null +++ b/2025/CVE-2025-63389.json @@ -0,0 +1,56 @@ +[ + { + "id": 1227613427, + "name": "VisorGoose", + "full_name": "nuclide-research\/VisorGoose", + "owner": { + "login": "nuclide-research", + "id": 288779681, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/288779681?v=4", + "html_url": "https:\/\/github.com\/nuclide-research", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/nuclide-research\/VisorGoose", + "description": "Gov-TLD Ollama discovery via CT logs, Shodan, and DNS; detects CVE-2025-63389, cloud proxy takeovers, RAG\/distilled models across 25 government TLD patterns.", + "fork": false, + "created_at": "2026-05-02T23:31:26Z", + "updated_at": "2026-06-20T11:50:56Z", + "pushed_at": "2026-06-08T23:21:54Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "ai-infrastructure", + "ai-security", + "bug-bounty", + "certificate-transparency", + "cli", + "cloud-takeover", + "ct-logs", + "cve-2025-63389", + "golang", + "government", + "llm", + "llm-security", + "mullvad", + "nuclide", + "ollama", + "osint", + "reconnaissance", + "security", + "shodan", + "visor" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2025/CVE-2025-63821.json b/2025/CVE-2025-63821.json index 027672247c..9f1840c2a6 100644 --- a/2025/CVE-2025-63821.json +++ b/2025/CVE-2025-63821.json @@ -14,8 +14,8 @@ "description": "Proof-of-concept of vulnerability found in Totolink A720R router", "fork": false, "created_at": "2025-10-19T12:34:55Z", - "updated_at": "2025-11-17T14:37:42Z", - "pushed_at": "2025-11-14T15:26:21Z", + "updated_at": "2026-06-20T11:10:51Z", + "pushed_at": "2026-06-20T11:10:47Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-0300.json b/2026/CVE-2026-0300.json index ba9ed51952..131433ac13 100644 --- a/2026/CVE-2026-0300.json +++ b/2026/CVE-2026-0300.json @@ -1,37 +1,4 @@ [ - { - "id": 1230819812, - "name": "cve-2026-0300-audit", - "full_name": "TailwindRG\/cve-2026-0300-audit", - "owner": { - "login": "TailwindRG", - "id": 262565926, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/262565926?v=4", - "html_url": "https:\/\/github.com\/TailwindRG", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/TailwindRG\/cve-2026-0300-audit", - "description": "Read-only audit tooling for CVE-2026-0300 (PAN-OS User-ID Authentication Portal exposure)", - "fork": false, - "created_at": "2026-05-06T10:57:29Z", - "updated_at": "2026-05-06T13:52:53Z", - "pushed_at": "2026-05-06T13:51:11Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1230990323, "name": "CVE-2026-0300-PANOS", diff --git a/2026/CVE-2026-11551.json b/2026/CVE-2026-11551.json index 4bd5039720..8be37b83f0 100644 --- a/2026/CVE-2026-11551.json +++ b/2026/CVE-2026-11551.json @@ -14,10 +14,10 @@ "description": "Unauthenticated Privilege Escalation via Account Takeover", "fork": false, "created_at": "2026-06-19T17:29:57Z", - "updated_at": "2026-06-19T17:33:55Z", + "updated_at": "2026-06-20T10:33:16Z", "pushed_at": "2026-06-19T17:33:50Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-11912.json b/2026/CVE-2026-11912.json new file mode 100644 index 0000000000..e6a0d37633 --- /dev/null +++ b/2026/CVE-2026-11912.json @@ -0,0 +1,35 @@ +[ + { + "id": 1275119300, + "name": "By-Poloss..-..CVE-2026-11912", + "full_name": "Polosss\/By-Poloss..-..CVE-2026-11912", + "owner": { + "login": "Polosss", + "id": 178707366, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/178707366?v=4", + "html_url": "https:\/\/github.com\/Polosss", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Polosss\/By-Poloss..-..CVE-2026-11912", + "description": "Missing Authorization to Unauthenticated File Modification", + "fork": false, + "created_at": "2026-06-20T09:20:46Z", + "updated_at": "2026-06-20T10:33:15Z", + "pushed_at": "2026-06-20T09:58:28Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-23918.json b/2026/CVE-2026-23918.json index 66611ef820..23e5640231 100644 --- a/2026/CVE-2026-23918.json +++ b/2026/CVE-2026-23918.json @@ -32,51 +32,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1230922026, - "name": "CVE-2026-23918-Apache-H2-PoC", - "full_name": "xeloxa\/CVE-2026-23918-Apache-H2-PoC", - "owner": { - "login": "xeloxa", - "id": 173461547, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/173461547?v=4", - "html_url": "https:\/\/github.com\/xeloxa", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/xeloxa\/CVE-2026-23918-Apache-H2-PoC", - "description": "Proof-of-Concept exploit for CVE-2026-23918 (Apache mod_http2 double-free). Features multi-mode DoS (Rapid-RST, Slow-Drip) and passive RCE\/vulnerability detection for Apache 2.4.66.", - "fork": false, - "created_at": "2026-05-06T13:00:15Z", - "updated_at": "2026-06-18T12:23:28Z", - "pushed_at": "2026-05-06T13:09:45Z", - "stargazers_count": 20, - "watchers_count": 20, - "has_discussions": false, - "forks_count": 6, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "apache", - "cve-2026-23918", - "cybersecurity", - "denial-of-service", - "dos", - "double-free", - "exploit", - "http2", - "infosec", - "python", - "race-condition" - ], - "visibility": "public", - "forks": 6, - "watchers": 20, - "score": 0, - "subscribers_count": 0 - }, { "id": 1231037250, "name": "CVE-2026-23918", diff --git a/2026/CVE-2026-31431.json b/2026/CVE-2026-31431.json index 0efd906346..30b01d8a8a 100644 --- a/2026/CVE-2026-31431.json +++ b/2026/CVE-2026-31431.json @@ -439,54 +439,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1225665324, - "name": "copyfail-rs", - "full_name": "diemoeve\/copyfail-rs", - "owner": { - "login": "diemoeve", - "id": 105520646, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105520646?v=4", - "html_url": "https:\/\/github.com\/diemoeve", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/diemoeve\/copyfail-rs", - "description": "CopyFail (CVE-2026-31431): Linux kernel page-cache PrivEsc PoC + the only public detection tool. Novel PAM auth-bypass vector + Sigma\/auditd\/eBPF rules.", - "fork": false, - "created_at": "2026-04-30T14:04:58Z", - "updated_at": "2026-05-23T05:05:42Z", - "pushed_at": "2026-05-06T12:42:59Z", - "stargazers_count": 19, - "watchers_count": 19, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "af-alg", - "auditd", - "copyfail", - "cve-2026-31431", - "detection-engineering", - "ebpf", - "linux-kernel", - "no-std", - "page-cache", - "privilege-escalation", - "purple-team", - "rust", - "security", - "sigma-rules" - ], - "visibility": "public", - "forks": 3, - "watchers": 19, - "score": 0, - "subscribers_count": 2 - }, { "id": 1225714491, "name": "copy-fail-blocker", @@ -1484,39 +1436,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1230883253, - "name": "XCP_ng_CVE-2026-31431_tester", - "full_name": "grabesec\/XCP_ng_CVE-2026-31431_tester", - "owner": { - "login": "grabesec", - "id": 282242801, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/282242801?v=4", - "html_url": "https:\/\/github.com\/grabesec", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/grabesec\/XCP_ng_CVE-2026-31431_tester", - "description": "Test XCP_ng 8.3 for CVE-2026-31431Vulnerability", - "fork": false, - "created_at": "2026-05-06T12:15:18Z", - "updated_at": "2026-05-06T12:36:46Z", - "pushed_at": "2026-05-06T12:36:42Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1231023679, "name": "cve-2026-31431-ftrace", diff --git a/2026/CVE-2026-37149.json b/2026/CVE-2026-37149.json new file mode 100644 index 0000000000..522a98cd1b --- /dev/null +++ b/2026/CVE-2026-37149.json @@ -0,0 +1,35 @@ +[ + { + "id": 1275248002, + "name": "CVE-2026-37149", + "full_name": "pateldhyeyit\/CVE-2026-37149", + "owner": { + "login": "pateldhyeyit", + "id": 127226724, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/127226724?v=4", + "html_url": "https:\/\/github.com\/pateldhyeyit", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/pateldhyeyit\/CVE-2026-37149", + "description": "CVE-2026-37149 - SQL Injection vulnerability in the scost parameter of search_products.php in GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN v1.0.", + "fork": false, + "created_at": "2026-06-20T12:51:07Z", + "updated_at": "2026-06-20T12:51:08Z", + "pushed_at": "2026-06-20T12:51:08Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-41091.json b/2026/CVE-2026-41091.json index 096ac2945d..3c1dd51467 100644 --- a/2026/CVE-2026-41091.json +++ b/2026/CVE-2026-41091.json @@ -64,5 +64,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1275158145, + "name": "CVE-2026-41091-PoC-Exploit", + "full_name": "tc4dy\/CVE-2026-41091-PoC-Exploit", + "owner": { + "login": "tc4dy", + "id": 140116264, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/140116264?v=4", + "html_url": "https:\/\/github.com\/tc4dy", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/tc4dy\/CVE-2026-41091-PoC-Exploit", + "description": "🔥 CVE-2026-41091 SolarFlare | Microsoft Defender LPE exploit. Low-privileged users gain NT AUTHORITY\\SYSTEM via Cloud Files API + NTFS junction trickery. Forces Defender to write malicious payloads to System32 with SYSTEM rights. ⚠️ Actively exploited in wild. CVSS 7.8. Patch: Defender Engine 1.1.26040.8. 🛡️ Educational PoC only. ", + "fork": false, + "created_at": "2026-06-20T10:25:34Z", + "updated_at": "2026-06-20T12:08:33Z", + "pushed_at": "2026-06-20T12:08:29Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-42055.json b/2026/CVE-2026-42055.json index 513a6a3e3c..ab6cfec849 100644 --- a/2026/CVE-2026-42055.json +++ b/2026/CVE-2026-42055.json @@ -14,7 +14,7 @@ "description": "CVE-2026-42055 - Draft", "fork": false, "created_at": "2026-06-19T01:05:02Z", - "updated_at": "2026-06-19T01:05:09Z", + "updated_at": "2026-06-20T11:50:48Z", "pushed_at": "2026-06-19T01:05:06Z", "stargazers_count": 0, "watchers_count": 0, diff --git a/2026/CVE-2026-44578.json b/2026/CVE-2026-44578.json index 38ac3821d7..fd8ce959f8 100644 --- a/2026/CVE-2026-44578.json +++ b/2026/CVE-2026-44578.json @@ -229,5 +229,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1275163103, + "name": "CVE-2026-44578", + "full_name": "GadaLuBau1337\/CVE-2026-44578", + "owner": { + "login": "GadaLuBau1337", + "id": 146705886, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/146705886?v=4", + "html_url": "https:\/\/github.com\/GadaLuBau1337", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/GadaLuBau1337\/CVE-2026-44578", + "description": null, + "fork": false, + "created_at": "2026-06-20T10:33:50Z", + "updated_at": "2026-06-20T10:37:14Z", + "pushed_at": "2026-06-20T10:37:10Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-49975.json b/2026/CVE-2026-49975.json index 76f067ad7c..cc750ac64a 100644 --- a/2026/CVE-2026-49975.json +++ b/2026/CVE-2026-49975.json @@ -146,10 +146,10 @@ "description": "HTTP2-Bomb", "fork": false, "created_at": "2026-06-10T05:06:42Z", - "updated_at": "2026-06-20T01:37:22Z", + "updated_at": "2026-06-20T09:34:31Z", "pushed_at": "2026-06-18T06:00:02Z", - "stargazers_count": 8, - "watchers_count": 8, + "stargazers_count": 9, + "watchers_count": 9, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -160,7 +160,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 8, + "watchers": 9, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-9067.json b/2026/CVE-2026-9067.json index f1be95211f..3778d470e8 100644 --- a/2026/CVE-2026-9067.json +++ b/2026/CVE-2026-9067.json @@ -14,10 +14,10 @@ "description": "Schema & Structured Data for WP & AMP < 1.60 - Unauthenticated Arbitrary Media Upload [POC & Xploit]", "fork": false, "created_at": "2026-06-10T18:30:39Z", - "updated_at": "2026-06-15T16:50:42Z", + "updated_at": "2026-06-20T10:33:18Z", "pushed_at": "2026-06-10T18:34:42Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 } diff --git a/README.md b/README.md index b5d869a1d2..e24a5286e2 100644 --- a/README.md +++ b/README.md @@ -67,7 +67,6 @@ A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets. \n\nThe risk of this issue is greatly reduced if you secure access to the User-ID™ Authentication Portal per the best practice guidelines https://knowledgebase.paloaltonetworks.com/KCSArticleDetail by restricting access to only trusted internal IP addresses.\n\nPrisma Access, Cloud NGFW and Panorama appliances are not impacted by this vulnerability. -- [TailwindRG/cve-2026-0300-audit](https://github.com/TailwindRG/cve-2026-0300-audit) - [bannned-bit/CVE-2026-0300-PANOS](https://github.com/bannned-bit/CVE-2026-0300-PANOS) - [shizuku198411/CVE-2026-0300](https://github.com/shizuku198411/CVE-2026-0300) - [p3Nt3st3r-sTAr/CVE-2026-0300-POC](https://github.com/p3Nt3st3r-sTAr/CVE-2026-0300-POC) @@ -1042,6 +1041,13 @@ - [AlexMihailEngineer/CVE-2026-11784-Optimole-CSRF](https://github.com/AlexMihailEngineer/CVE-2026-11784-Optimole-CSRF) +### CVE-2026-11912 (2026-06-20) + +The Simple File List plugin for WordPress is vulnerable to arbitrary file modification due to insufficient authorization checks in all versions up to, and including, 6.3.7. This makes it possible for unauthenticated attackers to delete and modify files on the serve. This vulnerability is exploitable even when the administrator has not enabled the AllowFrontManage setting, because the is_admin() check unconditionally short-circuits the guard before that setting is evaluated. + + +- [Polosss/By-Poloss..-..CVE-2026-11912](https://github.com/Polosss/By-Poloss..-..CVE-2026-11912) + ### CVE-2026-20127 (2026-02-25) A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system.\r\n\r\nThis vulnerability exists because the peering authentication mechanism in an affected system is not working properly. An attacker could exploit this vulnerability by sending crafted requests to an affected system. A successful exploit could allow the attacker to log in to an affected Cisco Catalyst SD-WAN Controller as an internal, high-privileged, non-root&nbsp;user account. Using this account, the attacker could access NETCONF, which would then allow the attacker to manipulate network configuration for the SD-WAN fabric.&nbsp; @@ -1294,7 +1300,6 @@ - [aa022/CVE-2026-23918-Passive-Audit](https://github.com/aa022/CVE-2026-23918-Passive-Audit) -- [xeloxa/CVE-2026-23918-Apache-H2-PoC](https://github.com/xeloxa/CVE-2026-23918-Apache-H2-PoC) - [hackervlogofficial/CVE-2026-23918](https://github.com/hackervlogofficial/CVE-2026-23918) - [CYFARE/CVE-2026-23918-Apache-HTTP-Server-DoubleFree-PoC](https://github.com/CYFARE/CVE-2026-23918-Apache-HTTP-Server-DoubleFree-PoC) - [alt3kx/CVE-2026-23918](https://github.com/alt3kx/CVE-2026-23918) @@ -1676,7 +1681,6 @@ - [Percivalll/Copy-Fail-CVE-2026-31431-Kubernetes-PoC](https://github.com/Percivalll/Copy-Fail-CVE-2026-31431-Kubernetes-PoC) - [yandex-cloud-examples/yc-mk8s-copy-fail-mitigation](https://github.com/yandex-cloud-examples/yc-mk8s-copy-fail-mitigation) - [JuanBindez/CVE-2026-31431](https://github.com/JuanBindez/CVE-2026-31431) -- [diemoeve/copyfail-rs](https://github.com/diemoeve/copyfail-rs) - [cozystack/copy-fail-blocker](https://github.com/cozystack/copy-fail-blocker) - [selectel/mks-copy-fail-mitigation](https://github.com/selectel/mks-copy-fail-mitigation) - [Juguitos/copy-fail](https://github.com/Juguitos/copy-fail) @@ -1705,7 +1709,6 @@ - [sgkdev/page_inject](https://github.com/sgkdev/page_inject) - [luoqianlin/copyfail-c](https://github.com/luoqianlin/copyfail-c) - [Dullpurple-sloop726/CVE-2026-31431-Linux-Copy-Fail](https://github.com/Dullpurple-sloop726/CVE-2026-31431-Linux-Copy-Fail) -- [grabesec/XCP_ng_CVE-2026-31431_tester](https://github.com/grabesec/XCP_ng_CVE-2026-31431_tester) - [philfry/cve-2026-31431-ftrace](https://github.com/philfry/cve-2026-31431-ftrace) - [hans362/CVE-2026-31431-Copy-Fail-Container-Escape](https://github.com/hans362/CVE-2026-31431-Copy-Fail-Container-Escape) - [StarxSky/CVE-2026-31431](https://github.com/StarxSky/CVE-2026-31431) @@ -2233,6 +2236,9 @@ ### CVE-2026-37073 - [jfs-jfs/CVE-2026-37073](https://github.com/jfs-jfs/CVE-2026-37073) +### CVE-2026-37149 +- [pateldhyeyit/CVE-2026-37149](https://github.com/pateldhyeyit/CVE-2026-37149) + ### CVE-2026-37196 - [Pavanvootla-sec/CVE-2026-37196](https://github.com/Pavanvootla-sec/CVE-2026-37196) @@ -2497,6 +2503,7 @@ - [0xBlackash/CVE-2026-41091](https://github.com/0xBlackash/CVE-2026-41091) - [ridhinva/defender-privilege-escalation-scanner](https://github.com/ridhinva/defender-privilege-escalation-scanner) +- [tc4dy/CVE-2026-41091-PoC-Exploit](https://github.com/tc4dy/CVE-2026-41091-PoC-Exploit) ### CVE-2026-41096 (2026-05-12) @@ -2896,6 +2903,7 @@ - [dinosn/CVE-2026-44578](https://github.com/dinosn/CVE-2026-44578) - [0xBlackash/CVE-2026-44578](https://github.com/0xBlackash/CVE-2026-44578) - [BS2010-AirborneTroops/NEXT-SSRF](https://github.com/BS2010-AirborneTroops/NEXT-SSRF) +- [GadaLuBau1337/CVE-2026-44578](https://github.com/GadaLuBau1337/CVE-2026-44578) ### CVE-2026-44590 (2026-05-27) @@ -13590,6 +13598,13 @@ - [r0otk3r/CVE-2025-63353](https://github.com/r0otk3r/CVE-2025-63353) - [Zvckster/CVE-2025-63353](https://github.com/Zvckster/CVE-2025-63353) +### CVE-2025-63389 (2025-12-18) + +A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The platform exposes multiple API endpoints without requiring authentication, enabling remote attackers to perform unauthorized model management operations. + + +- [nuclide-research/VisorGoose](https://github.com/nuclide-research/VisorGoose) + ### CVE-2025-63406 (2025-11-13) An issue in Intermesh BV GroupOffice vulnerable before v.25.0.47 and 6.8.136 allows a remote attacker to execute arbitrary code via the dbToApi() and eval() in the FunctionField.php