Auto Update 2026/04/29 00:51:54

2026-11-07 08:30:25 -10:00 · 2026-04-29 09:51:54 +09:00
1 parent 49abaf42df
commit 2a14270325
@@ -14,10 +14,10 @@
        "description": "CVE-2020-8012, CVE-2016-10709, CVE-2017-17099, CVE-2017-18047, CVE-2019-1003000, CVE-2018-1999002",
        "fork": false,
        "created_at": "2017-04-26T02:03:43Z",
-        "updated_at": "2026-04-12T07:14:02Z",
+        "updated_at": "2026-04-28T19:29:21Z",
        "pushed_at": "2026-03-13T00:00:20Z",
-        "stargazers_count": 79,
-        "watchers_count": 79,
+        "stargazers_count": 80,
+        "watchers_count": 80,
        "has_discussions": false,
        "forks_count": 32,
        "allow_forking": true,
@@ -28,7 +28,7 @@
        "topics": [],
        "visibility": "public",
        "forks": 32,
-        "watchers": 79,
+        "watchers": 80,
        "score": 0,
        "subscribers_count": 5
    }
@@ -14,8 +14,8 @@
        "description": "🛠️ Validate and demonstrate CVE-2016-15042 with a Dockerized lab for unauthenticated file uploads in WordPress file managers.",
        "fork": false,
        "created_at": "2023-10-23T05:54:10Z",
-        "updated_at": "2026-04-28T16:06:13Z",
-        "pushed_at": "2026-04-28T16:06:05Z",
+        "updated_at": "2026-04-28T22:47:13Z",
+        "pushed_at": "2026-04-28T22:47:10Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -14,10 +14,10 @@
        "description": "CVE-2020-8012, CVE-2016-10709, CVE-2017-17099, CVE-2017-18047, CVE-2019-1003000, CVE-2018-1999002",
        "fork": false,
        "created_at": "2017-04-26T02:03:43Z",
-        "updated_at": "2026-04-12T07:14:02Z",
+        "updated_at": "2026-04-28T19:29:21Z",
        "pushed_at": "2026-03-13T00:00:20Z",
-        "stargazers_count": 79,
-        "watchers_count": 79,
+        "stargazers_count": 80,
+        "watchers_count": 80,
        "has_discussions": false,
        "forks_count": 32,
        "allow_forking": true,
@@ -28,7 +28,7 @@
        "topics": [],
        "visibility": "public",
        "forks": 32,
-        "watchers": 79,
+        "watchers": 80,
        "score": 0,
        "subscribers_count": 5
    }
@@ -14,10 +14,10 @@
        "description": "CVE-2020-8012, CVE-2016-10709, CVE-2017-17099, CVE-2017-18047, CVE-2019-1003000, CVE-2018-1999002",
        "fork": false,
        "created_at": "2017-04-26T02:03:43Z",
-        "updated_at": "2026-04-12T07:14:02Z",
+        "updated_at": "2026-04-28T19:29:21Z",
        "pushed_at": "2026-03-13T00:00:20Z",
-        "stargazers_count": 79,
-        "watchers_count": 79,
+        "stargazers_count": 80,
+        "watchers_count": 80,
        "has_discussions": false,
        "forks_count": 32,
        "allow_forking": true,
@@ -28,7 +28,7 @@
        "topics": [],
        "visibility": "public",
        "forks": 32,
-        "watchers": 79,
+        "watchers": 80,
        "score": 0,
        "subscribers_count": 5
    },
@@ -19,7 +19,7 @@
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
-        "forks_count": 0,
+        "forks_count": 1,
        "allow_forking": true,
        "is_template": false,
        "web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
        "pull_request_creation_policy": "all",
        "topics": [],
        "visibility": "public",
-        "forks": 0,
+        "forks": 1,
        "watchers": 0,
        "score": 0,
        "subscribers_count": 1
@@ -19,7 +19,7 @@
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
-        "forks_count": 0,
+        "forks_count": 1,
        "allow_forking": true,
        "is_template": false,
        "web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
        "pull_request_creation_policy": "all",
        "topics": [],
        "visibility": "public",
-        "forks": 0,
+        "forks": 1,
        "watchers": 0,
        "score": 0,
        "subscribers_count": 1
@@ -19,7 +19,7 @@
        "stargazers_count": 1,
        "watchers_count": 1,
        "has_discussions": false,
-        "forks_count": 0,
+        "forks_count": 1,
        "allow_forking": true,
        "is_template": false,
        "web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
        "pull_request_creation_policy": "all",
        "topics": [],
        "visibility": "public",
-        "forks": 0,
+        "forks": 1,
        "watchers": 1,
        "score": 0,
        "subscribers_count": 1
@@ -14,10 +14,10 @@
        "description": "CVE-2020-8012, CVE-2016-10709, CVE-2017-17099, CVE-2017-18047, CVE-2019-1003000, CVE-2018-1999002",
        "fork": false,
        "created_at": "2017-04-26T02:03:43Z",
-        "updated_at": "2026-04-12T07:14:02Z",
+        "updated_at": "2026-04-28T19:29:21Z",
        "pushed_at": "2026-03-13T00:00:20Z",
-        "stargazers_count": 79,
-        "watchers_count": 79,
+        "stargazers_count": 80,
+        "watchers_count": 80,
        "has_discussions": false,
        "forks_count": 32,
        "allow_forking": true,
@@ -28,7 +28,7 @@
        "topics": [],
        "visibility": "public",
        "forks": 32,
-        "watchers": 79,
+        "watchers": 80,
        "score": 0,
        "subscribers_count": 5
    },
@@ -179,12 +179,12 @@
        "description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
        "fork": false,
        "created_at": "2025-12-06T19:56:12Z",
-        "updated_at": "2026-04-28T17:19:56Z",
-        "pushed_at": "2026-04-28T17:19:50Z",
+        "updated_at": "2026-04-28T23:33:20Z",
+        "pushed_at": "2026-04-28T23:33:16Z",
        "stargazers_count": 1,
        "watchers_count": 1,
        "has_discussions": false,
-        "forks_count": 2,
+        "forks_count": 3,
        "allow_forking": true,
        "is_template": false,
        "web_commit_signoff_required": false,
@@ -209,7 +209,7 @@
            "windows-security"
        ],
        "visibility": "public",
-        "forks": 2,
+        "forks": 3,
        "watchers": 1,
        "score": 0,
        "subscribers_count": 0
@@ -58,8 +58,8 @@
        "description": "🔍 Create a safe lab environment for testing CVE-2020-0610, a critical RCE vulnerability in Windows RD Gateway, with minimal disruption using DTLS techniques.",
        "fork": false,
        "created_at": "2025-09-04T13:21:35Z",
-        "updated_at": "2026-04-28T16:06:09Z",
-        "pushed_at": "2026-04-28T16:06:04Z",
+        "updated_at": "2026-04-28T22:47:02Z",
+        "pushed_at": "2026-04-28T22:46:58Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -2383,8 +2383,8 @@
        "description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
        "fork": false,
        "created_at": "2025-12-06T10:17:38Z",
-        "updated_at": "2026-04-28T17:19:52Z",
-        "pushed_at": "2026-04-28T17:19:48Z",
+        "updated_at": "2026-04-29T00:03:42Z",
+        "pushed_at": "2026-04-29T00:03:37Z",
        "stargazers_count": 2,
        "watchers_count": 2,
        "has_discussions": false,
@@ -14,10 +14,10 @@
        "description": "CVE-2020-8012, CVE-2016-10709, CVE-2017-17099, CVE-2017-18047, CVE-2019-1003000, CVE-2018-1999002",
        "fork": false,
        "created_at": "2017-04-26T02:03:43Z",
-        "updated_at": "2026-04-12T07:14:02Z",
+        "updated_at": "2026-04-28T19:29:21Z",
        "pushed_at": "2026-03-13T00:00:20Z",
-        "stargazers_count": 79,
-        "watchers_count": 79,
+        "stargazers_count": 80,
+        "watchers_count": 80,
        "has_discussions": false,
        "forks_count": 32,
        "allow_forking": true,
@@ -28,7 +28,7 @@
        "topics": [],
        "visibility": "public",
        "forks": 32,
-        "watchers": 79,
+        "watchers": 80,
        "score": 0,
        "subscribers_count": 5
    }
@@ -212,8 +212,8 @@
        "description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
        "fork": false,
        "created_at": "2026-03-28T17:42:44Z",
-        "updated_at": "2026-04-28T17:18:17Z",
-        "pushed_at": "2026-04-28T17:18:10Z",
+        "updated_at": "2026-04-28T23:35:21Z",
+        "pushed_at": "2026-04-28T23:35:17Z",
        "stargazers_count": 3,
        "watchers_count": 3,
        "has_discussions": false,
@@ -2050,8 +2050,8 @@
        "description": "🚀 Enhance your penetration testing with PwnKit Helper, a simple tool for exploiting the CVE-2021-4034 vulnerability in pkexec for local privilege escalation.",
        "fork": false,
        "created_at": "2025-10-01T09:53:03Z",
-        "updated_at": "2026-04-28T16:17:35Z",
-        "pushed_at": "2026-04-28T16:14:34Z",
+        "updated_at": "2026-04-28T22:53:42Z",
+        "pushed_at": "2026-04-28T22:53:38Z",
        "stargazers_count": 2,
        "watchers_count": 2,
        "has_discussions": false,
@@ -4780,8 +4780,8 @@
        "description": "We hope to reproduce CVE-2021-41773 to deepen our understanding of real-world cybersecurity vulnerabilities so that we can be knowledgeable about exploits in industry and academic work.",
        "fork": false,
        "created_at": "2026-04-20T03:39:39Z",
-        "updated_at": "2026-04-28T05:49:09Z",
-        "pushed_at": "2026-04-28T05:49:06Z",
+        "updated_at": "2026-04-28T23:42:57Z",
+        "pushed_at": "2026-04-28T23:42:53Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -19,7 +19,7 @@
        "stargazers_count": 177,
        "watchers_count": 177,
        "has_discussions": false,
-        "forks_count": 45,
+        "forks_count": 44,
        "allow_forking": true,
        "is_template": false,
        "web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
        "pull_request_creation_policy": "all",
        "topics": [],
        "visibility": "public",
-        "forks": 45,
+        "forks": 44,
        "watchers": 177,
        "score": 0,
        "subscribers_count": 3
@@ -89,8 +89,8 @@
        "description": null,
        "fork": false,
        "created_at": "2026-04-27T23:32:48Z",
-        "updated_at": "2026-04-27T23:48:58Z",
-        "pushed_at": "2026-04-27T23:48:54Z",
+        "updated_at": "2026-04-28T21:32:07Z",
+        "pushed_at": "2026-04-28T21:32:02Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -14,10 +14,10 @@
        "description": "CVE-2023-20963 PoC (Android WorkSource parcel\/unparcel logic mismatch)",
        "fork": false,
        "created_at": "2023-06-12T10:44:59Z",
-        "updated_at": "2026-04-17T05:55:07Z",
+        "updated_at": "2026-04-28T20:35:40Z",
        "pushed_at": "2024-04-27T20:15:24Z",
-        "stargazers_count": 76,
-        "watchers_count": 76,
+        "stargazers_count": 75,
+        "watchers_count": 75,
        "has_discussions": false,
        "forks_count": 12,
        "allow_forking": true,
@@ -28,7 +28,7 @@
        "topics": [],
        "visibility": "public",
        "forks": 12,
-        "watchers": 76,
+        "watchers": 75,
        "score": 0,
        "subscribers_count": 1
    },
@@ -47,8 +47,8 @@
        "description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙",
        "fork": false,
        "created_at": "2025-08-13T09:19:29Z",
-        "updated_at": "2026-04-28T16:01:16Z",
-        "pushed_at": "2026-04-28T16:01:12Z",
+        "updated_at": "2026-04-28T22:43:27Z",
+        "pushed_at": "2026-04-28T22:43:22Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -14,12 +14,12 @@
        "description": "Apache HTTP Server Vulnerability Testing Tool | PoC for CVE-2024-38472 , CVE-2024-39573 , CVE-2024-38477 , CVE-2024-38476 , CVE-2024-38475 , CVE-2024-38474 ,  CVE-2024-38473 , CVE-2023-38709",
        "fork": false,
        "created_at": "2024-10-05T20:32:45Z",
-        "updated_at": "2026-04-27T20:36:41Z",
+        "updated_at": "2026-04-28T22:58:40Z",
        "pushed_at": "2024-10-05T20:37:02Z",
-        "stargazers_count": 128,
-        "watchers_count": 128,
+        "stargazers_count": 129,
+        "watchers_count": 129,
        "has_discussions": false,
-        "forks_count": 17,
+        "forks_count": 18,
        "allow_forking": true,
        "is_template": false,
        "web_commit_signoff_required": false,
@@ -38,8 +38,8 @@
            "cve-2024-39573"
        ],
        "visibility": "public",
-        "forks": 17,
-        "watchers": 128,
+        "forks": 18,
+        "watchers": 129,
        "score": 0,
        "subscribers_count": 1
    }
@@ -66,8 +66,8 @@
        "description": "🔒 Analyze the CVE-2023-39910 vulnerability in Libbitcoin Explorer to understand its impact on Bitcoin wallet security and protect your assets.",
        "fork": false,
        "created_at": "2026-01-07T14:24:08Z",
-        "updated_at": "2026-04-28T17:22:20Z",
-        "pushed_at": "2026-04-28T17:22:15Z",
+        "updated_at": "2026-04-28T23:45:57Z",
+        "pushed_at": "2026-04-28T23:45:54Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -14,10 +14,10 @@
        "description": "Exfiltrate sensitive user data from apps on Android 12 and 13 using CVE-2024-0044 vulnerability remotely",
        "fork": false,
        "created_at": "2024-06-18T09:22:59Z",
-        "updated_at": "2026-03-01T05:40:13Z",
+        "updated_at": "2026-04-28T20:35:43Z",
        "pushed_at": "2024-07-31T01:29:36Z",
-        "stargazers_count": 77,
-        "watchers_count": 77,
+        "stargazers_count": 76,
+        "watchers_count": 76,
        "has_discussions": false,
        "forks_count": 14,
        "allow_forking": true,
@@ -28,7 +28,7 @@
        "topics": [],
        "visibility": "public",
        "forks": 14,
-        "watchers": 77,
+        "watchers": 76,
        "score": 0,
        "subscribers_count": 3
    },
@@ -47,10 +47,10 @@
        "description": "CVE-2024-0044:  a \"run-as any app\" high-severity vulnerability affecting Android versions 12 and 13",
        "fork": false,
        "created_at": "2024-06-18T12:30:53Z",
-        "updated_at": "2026-04-17T05:27:42Z",
+        "updated_at": "2026-04-28T20:35:43Z",
        "pushed_at": "2024-12-02T06:29:52Z",
-        "stargazers_count": 332,
-        "watchers_count": 332,
+        "stargazers_count": 331,
+        "watchers_count": 331,
        "has_discussions": false,
        "forks_count": 68,
        "allow_forking": true,
@@ -61,7 +61,7 @@
        "topics": [],
        "visibility": "public",
        "forks": 68,
-        "watchers": 332,
+        "watchers": 331,
        "score": 0,
        "subscribers_count": 7
    },
@@ -172,8 +172,8 @@
        "description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
        "fork": false,
        "created_at": "2026-01-08T01:32:09Z",
-        "updated_at": "2026-04-28T17:22:57Z",
-        "pushed_at": "2026-04-28T17:22:53Z",
+        "updated_at": "2026-04-28T23:46:18Z",
+        "pushed_at": "2026-04-28T23:46:14Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -80,8 +80,8 @@
        "description": "Analyze and deobfuscate the Coruna Exploit Kit (CVE-2024-23222) to enhance understanding and detection of related threats.",
        "fork": false,
        "created_at": "2026-03-15T16:36:07Z",
-        "updated_at": "2026-04-28T18:32:39Z",
-        "pushed_at": "2026-04-28T18:32:36Z",
+        "updated_at": "2026-04-29T00:31:20Z",
+        "pushed_at": "2026-04-29T00:31:17Z",
        "stargazers_count": 1,
        "watchers_count": 1,
        "has_discussions": false,
@@ -245,8 +245,8 @@
        "description": "Go offensive-security research library — 15+ injection methods, AMSI\/ETW\/ntdll-unhook evasion, sleep mask (Ekko × XOR\/RC4\/AES), call-stack spoof, BYOVD (RTCore64) + kernel callback removal, LSASS dump + pure-Go MSV1_0 parser w\/ PPL bypass, recon (sandbox\/VM\/debugger\/dllhijack), PE ops (sRDI\/BOF\/CLR), Meterpreter C2, UAC bypass, CVE-2024-30088 LPE.",
        "fork": false,
        "created_at": "2026-04-01T08:15:08Z",
-        "updated_at": "2026-04-28T14:39:55Z",
-        "pushed_at": "2026-04-28T14:29:26Z",
+        "updated_at": "2026-04-28T22:33:24Z",
+        "pushed_at": "2026-04-28T22:33:21Z",
        "stargazers_count": 4,
        "watchers_count": 4,
        "has_discussions": true,
@@ -14,10 +14,10 @@
        "description": "CVE-2024-31317",
        "fork": false,
        "created_at": "2024-12-05T01:36:59Z",
-        "updated_at": "2026-02-09T07:43:24Z",
+        "updated_at": "2026-04-28T20:35:44Z",
        "pushed_at": "2024-12-05T01:52:45Z",
-        "stargazers_count": 64,
-        "watchers_count": 64,
+        "stargazers_count": 63,
+        "watchers_count": 63,
        "has_discussions": false,
        "forks_count": 20,
        "allow_forking": true,
@@ -28,7 +28,7 @@
        "topics": [],
        "visibility": "public",
        "forks": 20,
-        "watchers": 64,
+        "watchers": 63,
        "score": 0,
        "subscribers_count": 2
    },
@@ -80,10 +80,10 @@
        "description": "A command-line utility to exploit Android Zygote injection (CVE-2024-31317)",
        "fork": false,
        "created_at": "2025-04-17T16:20:00Z",
-        "updated_at": "2026-04-23T17:27:38Z",
+        "updated_at": "2026-04-28T20:35:45Z",
        "pushed_at": "2025-12-17T19:16:05Z",
-        "stargazers_count": 56,
-        "watchers_count": 56,
+        "stargazers_count": 55,
+        "watchers_count": 55,
        "has_discussions": false,
        "forks_count": 18,
        "allow_forking": true,
@@ -94,7 +94,7 @@
        "topics": [],
        "visibility": "public",
        "forks": 18,
-        "watchers": 56,
+        "watchers": 55,
        "score": 0,
        "subscribers_count": 3
    },
@@ -47,12 +47,12 @@
        "description": "Apache HTTP Server Vulnerability Testing Tool | PoC for CVE-2024-38472 , CVE-2024-39573 , CVE-2024-38477 , CVE-2024-38476 , CVE-2024-38475 , CVE-2024-38474 ,  CVE-2024-38473 , CVE-2023-38709",
        "fork": false,
        "created_at": "2024-10-05T20:32:45Z",
-        "updated_at": "2026-04-27T20:36:41Z",
+        "updated_at": "2026-04-28T22:58:40Z",
        "pushed_at": "2024-10-05T20:37:02Z",
-        "stargazers_count": 128,
-        "watchers_count": 128,
+        "stargazers_count": 129,
+        "watchers_count": 129,
        "has_discussions": false,
-        "forks_count": 17,
+        "forks_count": 18,
        "allow_forking": true,
        "is_template": false,
        "web_commit_signoff_required": false,
@@ -71,8 +71,8 @@
            "cve-2024-39573"
        ],
        "visibility": "public",
-        "forks": 17,
-        "watchers": 128,
+        "forks": 18,
+        "watchers": 129,
        "score": 0,
        "subscribers_count": 1
    }
@@ -648,10 +648,10 @@
        "description": "PHP CGI Argument Injection vulnerability",
        "fork": false,
        "created_at": "2024-06-09T14:18:21Z",
-        "updated_at": "2026-04-20T07:24:50Z",
+        "updated_at": "2026-04-28T21:46:08Z",
        "pushed_at": "2026-01-24T07:26:01Z",
-        "stargazers_count": 32,
-        "watchers_count": 32,
+        "stargazers_count": 33,
+        "watchers_count": 33,
        "has_discussions": false,
        "forks_count": 11,
        "allow_forking": true,
@@ -662,7 +662,7 @@
        "topics": [],
        "visibility": "public",
        "forks": 11,
-        "watchers": 32,
+        "watchers": 33,
        "score": 0,
        "subscribers_count": 1
    },
@@ -14,8 +14,8 @@
        "description": "Demonstrate an authentication bypass and remote code execution exploit targeting JetBrains TeamCity versions before 2024.12 via REST API abuse.",
        "fork": false,
        "created_at": "2025-09-17T01:48:09Z",
-        "updated_at": "2026-04-28T18:37:05Z",
-        "pushed_at": "2026-04-28T18:37:00Z",
+        "updated_at": "2026-04-29T00:34:27Z",
+        "pushed_at": "2026-04-29T00:34:23Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -14,8 +14,8 @@
        "description": "A PoC of the CVE-2024-56426 vulnerability.",
        "fork": false,
        "created_at": "2026-04-07T12:02:52Z",
-        "updated_at": "2026-04-23T17:25:11Z",
-        "pushed_at": "2026-04-28T15:57:43Z",
+        "updated_at": "2026-04-28T20:20:20Z",
+        "pushed_at": "2026-04-28T20:36:22Z",
        "stargazers_count": 6,
        "watchers_count": 6,
        "has_discussions": false,
@@ -14,8 +14,8 @@
        "description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
        "fork": false,
        "created_at": "2025-07-30T15:52:00Z",
-        "updated_at": "2026-04-28T17:31:00Z",
-        "pushed_at": "2026-04-28T17:30:55Z",
+        "updated_at": "2026-04-28T23:51:15Z",
+        "pushed_at": "2026-04-28T23:51:11Z",
        "stargazers_count": 1,
        "watchers_count": 1,
        "has_discussions": false,
@@ -1129,8 +1129,8 @@
        "description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
        "fork": false,
        "created_at": "2026-01-14T06:05:44Z",
-        "updated_at": "2026-04-28T17:29:13Z",
-        "pushed_at": "2026-04-28T17:29:08Z",
+        "updated_at": "2026-04-28T23:50:23Z",
+        "pushed_at": "2026-04-28T23:50:19Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -19,7 +19,7 @@
        "stargazers_count": 237,
        "watchers_count": 237,
        "has_discussions": false,
-        "forks_count": 53,
+        "forks_count": 52,
        "allow_forking": true,
        "is_template": false,
        "web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
        "pull_request_creation_policy": "all",
        "topics": [],
        "visibility": "public",
-        "forks": 53,
+        "forks": 52,
        "watchers": 237,
        "score": 0,
        "subscribers_count": 2
@@ -412,8 +412,8 @@
        "description": "🛠️ Exploit CVE-2025-2304 in Camaleon CMS easily with this Python script for privilege escalation, tested on version 2.9.0.",
        "fork": false,
        "created_at": "2026-02-14T20:01:20Z",
-        "updated_at": "2026-04-28T18:03:29Z",
-        "pushed_at": "2026-04-28T18:03:25Z",
+        "updated_at": "2026-04-29T00:11:58Z",
+        "pushed_at": "2026-04-29T00:11:55Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -14,8 +14,8 @@
        "description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis",
        "fork": false,
        "created_at": "2026-04-04T03:42:55Z",
-        "updated_at": "2026-04-28T18:48:09Z",
-        "pushed_at": "2026-04-28T18:48:05Z",
+        "updated_at": "2026-04-29T00:42:52Z",
+        "pushed_at": "2026-04-29T00:42:48Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -14,8 +14,8 @@
        "description": "🔓 Explore CVE-2025-31258 with this PoC demonstrating partial sandbox escape using RemoteViewServices for practical 1-day security practice.",
        "fork": false,
        "created_at": "2020-06-23T15:20:11Z",
-        "updated_at": "2026-04-28T16:08:27Z",
-        "pushed_at": "2026-04-28T16:08:22Z",
+        "updated_at": "2026-04-28T22:48:53Z",
+        "pushed_at": "2026-04-28T22:48:48Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -645,8 +645,8 @@
        "description": "Demonstrate CVE-2025-32463 with this PoC for sudo's chroot feature. Explore the exploit and its impact on vulnerable sudo versions. 🐱💻🔒",
        "fork": false,
        "created_at": "2025-07-04T18:20:09Z",
-        "updated_at": "2026-04-28T15:59:08Z",
-        "pushed_at": "2026-04-28T15:59:04Z",
+        "updated_at": "2026-04-28T22:41:58Z",
+        "pushed_at": "2026-04-28T22:41:54Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -1628,8 +1628,8 @@
        "description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.",
        "fork": false,
        "created_at": "2025-09-20T00:42:07Z",
-        "updated_at": "2026-04-28T16:09:53Z",
-        "pushed_at": "2026-04-28T16:09:49Z",
+        "updated_at": "2026-04-28T22:50:00Z",
+        "pushed_at": "2026-04-28T22:49:56Z",
        "stargazers_count": 1,
        "watchers_count": 1,
        "has_discussions": false,
@@ -1680,8 +1680,8 @@
        "description": null,
        "fork": false,
        "created_at": "2025-09-20T02:01:08Z",
-        "updated_at": "2026-04-28T16:09:59Z",
-        "pushed_at": "2026-04-28T16:09:54Z",
+        "updated_at": "2026-04-28T22:50:04Z",
+        "pushed_at": "2026-04-28T22:50:01Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -86,10 +86,10 @@
        "description": "WPair is a defensive security research tool that demonstrates the CVE-2025-36911 (eg WhisperPair) vulnerability in Google's Fast Pair protocol. This vulnerability affects millions of Bluetooth audio devices worldwide, allowing unauthorized pairing and potential microphone access without user consent.",
        "fork": false,
        "created_at": "2026-01-17T05:28:08Z",
-        "updated_at": "2026-04-28T12:46:51Z",
+        "updated_at": "2026-04-28T21:07:35Z",
        "pushed_at": "2026-01-18T00:15:59Z",
-        "stargazers_count": 769,
-        "watchers_count": 769,
+        "stargazers_count": 770,
+        "watchers_count": 770,
        "has_discussions": false,
        "forks_count": 87,
        "allow_forking": true,
@@ -100,7 +100,7 @@
        "topics": [],
        "visibility": "public",
        "forks": 87,
-        "watchers": 769,
+        "watchers": 770,
        "score": 0,
        "subscribers_count": 22
    },
@@ -294,8 +294,8 @@
        "description": "🔍 Scan and research CVE-2025-36911 vulnerabilities with WPair, a specialized tool for Android built in Kotlin, ensuring your applications remain secure.",
        "fork": false,
        "created_at": "2026-01-29T01:59:47Z",
-        "updated_at": "2026-04-28T17:47:35Z",
-        "pushed_at": "2026-04-28T17:47:30Z",
+        "updated_at": "2026-04-29T00:02:04Z",
+        "pushed_at": "2026-04-29T00:02:00Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -251,8 +251,8 @@
        "description": null,
        "fork": false,
        "created_at": "2025-09-19T17:17:19Z",
-        "updated_at": "2026-04-28T16:09:41Z",
-        "pushed_at": "2026-04-28T16:09:37Z",
+        "updated_at": "2026-04-28T22:49:54Z",
+        "pushed_at": "2026-04-28T22:49:50Z",
        "stargazers_count": 1,
        "watchers_count": 1,
        "has_discussions": false,
@@ -14,8 +14,8 @@
        "description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.",
        "fork": false,
        "created_at": "2019-04-13T07:51:09Z",
-        "updated_at": "2026-04-28T16:32:15Z",
-        "pushed_at": "2026-04-28T16:32:00Z",
+        "updated_at": "2026-04-28T23:07:30Z",
+        "pushed_at": "2026-04-28T23:07:27Z",
        "stargazers_count": 1,
        "watchers_count": 1,
        "has_discussions": false,
@@ -66,8 +66,8 @@
        "description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
        "fork": false,
        "created_at": "2022-04-06T09:27:39Z",
-        "updated_at": "2026-04-28T16:33:22Z",
-        "pushed_at": "2026-04-28T16:32:58Z",
+        "updated_at": "2026-04-28T23:08:15Z",
+        "pushed_at": "2026-04-28T23:08:11Z",
        "stargazers_count": 1,
        "watchers_count": 1,
        "has_discussions": false,
@@ -14,8 +14,8 @@
        "description": "🛡️ Analyze CVE-2025-5419 to exploit an uninitialized read vulnerability in V8 for arbitrary read\/write access within the sandbox environment.",
        "fork": false,
        "created_at": "2023-01-25T04:41:49Z",
-        "updated_at": "2026-04-28T18:00:53Z",
-        "pushed_at": "2026-04-28T18:00:39Z",
+        "updated_at": "2026-04-29T00:10:15Z",
+        "pushed_at": "2026-04-29T00:10:11Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -67,8 +67,8 @@
        "description": "🐙 CVE-2025-54253 exploit demo for Adobe AEM Forms on JEE: OGNL injection to RCE with PoC, Python 3.10 exploit code, reproducer and mitigation guidance.",
        "fork": false,
        "created_at": "2025-08-17T22:04:33Z",
-        "updated_at": "2026-04-28T16:02:54Z",
-        "pushed_at": "2026-04-28T16:02:49Z",
+        "updated_at": "2026-04-28T22:44:33Z",
+        "pushed_at": "2026-04-28T22:44:30Z",
        "stargazers_count": 2,
        "watchers_count": 2,
        "has_discussions": false,
@@ -53,8 +53,8 @@
        "description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐",
        "fork": false,
        "created_at": "2025-08-14T05:16:16Z",
-        "updated_at": "2026-04-28T16:02:23Z",
-        "pushed_at": "2026-04-28T16:02:18Z",
+        "updated_at": "2026-04-28T22:44:12Z",
+        "pushed_at": "2026-04-28T22:44:08Z",
        "stargazers_count": 2,
        "watchers_count": 2,
        "has_discussions": false,
@@ -14,10 +14,10 @@
        "description": "POC for CVE-2025-55130",
        "fork": false,
        "created_at": "2026-02-01T17:25:42Z",
-        "updated_at": "2026-02-01T17:26:35Z",
+        "updated_at": "2026-04-28T22:51:51Z",
        "pushed_at": "2026-02-01T17:26:32Z",
-        "stargazers_count": 0,
-        "watchers_count": 0,
+        "stargazers_count": 1,
+        "watchers_count": 1,
        "has_discussions": false,
        "forks_count": 0,
        "allow_forking": true,
@@ -28,7 +28,7 @@
        "topics": [],
        "visibility": "public",
        "forks": 0,
-        "watchers": 0,
+        "watchers": 1,
        "score": 0,
        "subscribers_count": 0
    }
@@ -14,8 +14,8 @@
        "description": "🔍 Demonstrate CVE-2025-55182, a critical vulnerability in React Server Components allowing unauthenticated arbitrary code execution.",
        "fork": false,
        "created_at": "2021-09-18T02:04:33Z",
-        "updated_at": "2026-04-28T17:09:18Z",
-        "pushed_at": "2026-04-28T17:09:12Z",
+        "updated_at": "2026-04-28T23:37:10Z",
+        "pushed_at": "2026-04-28T23:37:06Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -66,8 +66,8 @@
        "description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.",
        "fork": false,
        "created_at": "2022-06-17T10:19:10Z",
-        "updated_at": "2026-04-28T17:08:37Z",
-        "pushed_at": "2026-04-28T17:08:33Z",
+        "updated_at": "2026-04-28T23:36:41Z",
+        "pushed_at": "2026-04-28T23:36:37Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -151,8 +151,8 @@
        "description": "🔍 Detect vulnerabilities CVE-2025-55182 and CVE-2025-66478 in Next.js apps with this reliable command-line scanner.",
        "fork": false,
        "created_at": "2023-11-27T18:17:43Z",
-        "updated_at": "2026-04-28T17:08:57Z",
-        "pushed_at": "2026-04-28T17:08:41Z",
+        "updated_at": "2026-04-28T23:37:06Z",
+        "pushed_at": "2026-04-28T23:37:02Z",
        "stargazers_count": 1,
        "watchers_count": 1,
        "has_discussions": false,
@@ -203,8 +203,8 @@
        "description": "🚨 Exploit CVE-2025-55182, a critical RCE vulnerability in React Server Components for Next.js apps; enables testing for prototype pollution risks.",
        "fork": false,
        "created_at": "2024-04-24T02:36:56Z",
-        "updated_at": "2026-04-28T17:10:05Z",
-        "pushed_at": "2026-04-28T17:09:54Z",
+        "updated_at": "2026-04-28T23:37:51Z",
+        "pushed_at": "2026-04-28T23:37:47Z",
        "stargazers_count": 1,
        "watchers_count": 1,
        "has_discussions": false,
@@ -251,8 +251,8 @@
        "description": "🚨 Exploit and scan for CVE-2025-55182, a critical React\/Next.js vulnerability enabling remote code execution through prototype pollution techniques.",
        "fork": false,
        "created_at": "2024-05-28T16:48:51Z",
-        "updated_at": "2026-04-28T17:08:09Z",
-        "pushed_at": "2026-04-28T17:08:05Z",
+        "updated_at": "2026-04-28T23:36:18Z",
+        "pushed_at": "2026-04-28T23:36:15Z",
        "stargazers_count": 1,
        "watchers_count": 1,
        "has_discussions": false,
@@ -303,8 +303,8 @@
        "description": null,
        "fork": false,
        "created_at": "2024-11-29T12:32:19Z",
-        "updated_at": "2026-04-28T17:09:27Z",
-        "pushed_at": "2026-04-28T17:09:23Z",
+        "updated_at": "2026-04-28T23:37:30Z",
+        "pushed_at": "2026-04-28T23:37:26Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -352,8 +352,8 @@
        "description": "🛠️ Exploit CVE-2025-55182 effortlessly with this GUI tool for vulnerability detection, command execution, and Shell reverse connections.",
        "fork": false,
        "created_at": "2025-04-21T22:04:31Z",
-        "updated_at": "2026-04-28T17:13:31Z",
-        "pushed_at": "2026-04-28T17:13:26Z",
+        "updated_at": "2026-04-28T23:40:28Z",
+        "pushed_at": "2026-04-28T23:40:23Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -406,8 +406,8 @@
        "description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
        "fork": false,
        "created_at": "2025-06-06T16:34:46Z",
-        "updated_at": "2026-04-28T17:08:49Z",
-        "pushed_at": "2026-04-28T17:08:45Z",
+        "updated_at": "2026-04-28T23:37:00Z",
+        "pushed_at": "2026-04-28T23:36:56Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -458,8 +458,8 @@
        "description": "⚠️ Explore a vulnerable environment to test security scanners against the CVE-2025-55182 RCE flaw in React Server Components and Next.js applications.",
        "fork": false,
        "created_at": "2025-07-15T18:33:34Z",
-        "updated_at": "2026-04-28T17:10:03Z",
-        "pushed_at": "2026-04-28T17:10:00Z",
+        "updated_at": "2026-04-28T23:37:45Z",
+        "pushed_at": "2026-04-28T23:37:41Z",
        "stargazers_count": 1,
        "watchers_count": 1,
        "has_discussions": false,
@@ -12284,8 +12284,8 @@
        "description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.",
        "fork": false,
        "created_at": "2025-12-24T14:48:19Z",
-        "updated_at": "2026-04-28T17:08:24Z",
-        "pushed_at": "2026-04-28T17:08:20Z",
+        "updated_at": "2026-04-28T23:36:37Z",
+        "pushed_at": "2026-04-28T23:36:33Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -12369,8 +12369,8 @@
        "description": "🚨 Identify and address CVE-2025-55182, a critical React Server vulnerability allowing remote code execution without authentication.",
        "fork": false,
        "created_at": "2025-12-24T18:44:51Z",
-        "updated_at": "2026-04-28T17:07:37Z",
-        "pushed_at": "2026-04-28T17:07:33Z",
+        "updated_at": "2026-04-28T23:35:59Z",
+        "pushed_at": "2026-04-28T23:35:56Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -12418,8 +12418,8 @@
        "description": "🚨 Demonstrate CVE-2025-55182, a critical React vulnerability allowing remote code execution via prototype chain pollution in `[email protected]`.",
        "fork": false,
        "created_at": "2025-12-24T18:48:07Z",
-        "updated_at": "2026-04-28T17:07:44Z",
-        "pushed_at": "2026-04-28T17:07:40Z",
+        "updated_at": "2026-04-28T23:35:56Z",
+        "pushed_at": "2026-04-28T23:35:52Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -12503,8 +12503,8 @@
        "description": "🔍 Exploit CVE-2025-55182 in Next.js with this versatile tool for security research, featuring advanced payloads and WAF bypass techniques.",
        "fork": false,
        "created_at": "2025-12-25T19:28:28Z",
-        "updated_at": "2026-04-28T17:09:38Z",
-        "pushed_at": "2026-04-28T17:09:22Z",
+        "updated_at": "2026-04-28T23:37:24Z",
+        "pushed_at": "2026-04-28T23:37:21Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -12705,8 +12705,8 @@
        "description": "⚡ Discover and exploit CVE-2025-55182 with this PoC, offering reliable remote code execution tests for React Server Components in Next.js.",
        "fork": false,
        "created_at": "2025-12-26T22:26:55Z",
-        "updated_at": "2026-04-28T17:09:32Z",
-        "pushed_at": "2026-04-28T17:09:28Z",
+        "updated_at": "2026-04-28T23:37:22Z",
+        "pushed_at": "2026-04-28T23:37:19Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -12975,8 +12975,8 @@
        "description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
        "fork": false,
        "created_at": "2026-01-02T01:28:57Z",
-        "updated_at": "2026-04-28T17:16:12Z",
-        "pushed_at": "2026-04-28T17:16:07Z",
+        "updated_at": "2026-04-28T23:41:54Z",
+        "pushed_at": "2026-04-28T23:41:50Z",
        "stargazers_count": 1,
        "watchers_count": 1,
        "has_discussions": false,
@@ -13496,8 +13496,8 @@
        "description": "🔍 Exploit CVE-2025-55182 vulnerabilities in Next.js and React with this efficient framework for rapid testing and assessment.",
        "fork": false,
        "created_at": "2026-01-08T16:28:04Z",
-        "updated_at": "2026-04-28T17:24:08Z",
-        "pushed_at": "2026-04-28T17:24:03Z",
+        "updated_at": "2026-04-28T23:47:07Z",
+        "pushed_at": "2026-04-28T23:47:03Z",
        "stargazers_count": 1,
        "watchers_count": 1,
        "has_discussions": false,
@@ -289,8 +289,8 @@
        "description": "🛠️ Test and validate the CVE-2025-55184 vulnerability in React Server Components to enhance your application's security against denial-of-service attacks.",
        "fork": false,
        "created_at": "2026-01-02T05:04:03Z",
-        "updated_at": "2026-04-28T17:16:48Z",
-        "pushed_at": "2026-04-28T17:16:43Z",
+        "updated_at": "2026-04-28T23:42:23Z",
+        "pushed_at": "2026-04-28T23:42:19Z",
        "stargazers_count": 1,
        "watchers_count": 1,
        "has_discussions": false,
@@ -391,10 +391,10 @@
        "description": "Hack The Box - Silentium machine writeup | CVE-2025-58434, CVE-2025-59528, CVE-2025-8110",
        "fork": false,
        "created_at": "2026-04-22T10:41:27Z",
-        "updated_at": "2026-04-23T11:45:28Z",
+        "updated_at": "2026-04-28T19:22:09Z",
        "pushed_at": "2026-04-22T10:46:56Z",
-        "stargazers_count": 1,
-        "watchers_count": 1,
+        "stargazers_count": 2,
+        "watchers_count": 2,
        "has_discussions": false,
        "forks_count": 0,
        "allow_forking": true,
@@ -405,7 +405,7 @@
        "topics": [],
        "visibility": "public",
        "forks": 0,
-        "watchers": 1,
+        "watchers": 2,
        "score": 0,
        "subscribers_count": 0
    }
@@ -200,8 +200,8 @@
        "description": "🔍 Analyze WSUS deserialization behavior to enhance security, generate reports, and identify configuration weaknesses in your infrastructure.",
        "fork": false,
        "created_at": "2026-01-29T02:16:04Z",
-        "updated_at": "2026-04-28T17:47:35Z",
-        "pushed_at": "2026-04-28T17:47:31Z",
+        "updated_at": "2026-04-29T00:02:04Z",
+        "pushed_at": "2026-04-29T00:02:00Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -14,8 +14,8 @@
        "description": "🔍 Detect vulnerabilities CVE-2025-61882 and CVE-2025-61884 in Oracle E-Business Suite to help secure your systems from potential remote code execution threats.",
        "fork": false,
        "created_at": "2025-03-04T15:38:32Z",
-        "updated_at": "2026-04-28T16:30:13Z",
-        "pushed_at": "2026-04-28T16:30:06Z",
+        "updated_at": "2026-04-28T23:06:03Z",
+        "pushed_at": "2026-04-28T23:05:59Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -179,8 +179,8 @@
        "description": "🔍 Demonstrate and validate the `addressof` and `fakeobj` primitives in the V8 sandbox for advanced security research on CVE-2025-6554.",
        "fork": false,
        "created_at": "2025-08-10T21:07:43Z",
-        "updated_at": "2026-04-28T17:02:19Z",
-        "pushed_at": "2026-04-28T17:02:15Z",
+        "updated_at": "2026-04-28T23:31:49Z",
+        "pushed_at": "2026-04-28T23:31:45Z",
        "stargazers_count": 1,
        "watchers_count": 1,
        "has_discussions": false,
@@ -64,8 +64,8 @@
        "description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.",
        "fork": false,
        "created_at": "2026-03-23T09:09:21Z",
-        "updated_at": "2026-04-28T18:39:37Z",
-        "pushed_at": "2026-04-28T18:39:33Z",
+        "updated_at": "2026-04-29T00:36:21Z",
+        "pushed_at": "2026-04-29T00:36:18Z",
        "stargazers_count": 1,
        "watchers_count": 1,
        "has_discussions": false,
@@ -14,8 +14,8 @@
        "description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.",
        "fork": false,
        "created_at": "2025-10-01T07:40:09Z",
-        "updated_at": "2026-04-28T17:10:33Z",
-        "pushed_at": "2026-04-28T17:10:28Z",
+        "updated_at": "2026-04-28T23:38:08Z",
+        "pushed_at": "2026-04-28T23:38:04Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -47,8 +47,8 @@
        "description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.",
        "fork": false,
        "created_at": "2026-01-24T21:00:41Z",
-        "updated_at": "2026-04-28T17:42:48Z",
-        "pushed_at": "2026-04-28T17:42:43Z",
+        "updated_at": "2026-04-28T23:58:56Z",
+        "pushed_at": "2026-04-28T23:58:53Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -47,11 +47,11 @@
        "description": "Layer-2 supply-chain hardening for MCP servers — Ed25519-signed tool manifests, runtime spawn-attestation, default-deny argument sanitizer. Defends against marketplace-poisoning + CVE-2025-69256 + CVE-2025-61591.",
        "fork": false,
        "created_at": "2026-04-27T20:12:08Z",
-        "updated_at": "2026-04-27T22:03:38Z",
-        "pushed_at": "2026-04-27T22:03:35Z",
+        "updated_at": "2026-04-28T23:15:44Z",
+        "pushed_at": "2026-04-28T23:15:41Z",
        "stargazers_count": 0,
        "watchers_count": 0,
-        "has_discussions": false,
+        "has_discussions": true,
        "forks_count": 0,
        "allow_forking": true,
        "is_template": false,
@@ -59,7 +59,9 @@
        "has_pull_requests": true,
        "pull_request_creation_policy": "all",
        "topics": [
+            "anthropic",
            "attestation",
+            "built-in-mallorca",
            "cli",
            "cve-2025-61591",
            "cve-2025-69256",
@@ -14,8 +14,8 @@
        "description": null,
        "fork": false,
        "created_at": "2026-02-11T12:02:53Z",
-        "updated_at": "2026-04-28T18:35:48Z",
-        "pushed_at": "2026-04-28T18:35:44Z",
+        "updated_at": "2026-04-28T19:47:08Z",
+        "pushed_at": "2026-04-28T19:47:02Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -14,8 +14,8 @@
        "description": "Exploit CVE-2025-69985 to bypass authentication and execute remote commands on FUXA versions ≤ 1.2.8 via the \/api\/runscript endpoint.",
        "fork": false,
        "created_at": "2025-04-10T09:18:30Z",
-        "updated_at": "2026-04-28T18:21:57Z",
-        "pushed_at": "2026-04-28T18:21:53Z",
+        "updated_at": "2026-04-29T00:23:55Z",
+        "pushed_at": "2026-04-29T00:23:52Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -14,8 +14,8 @@
        "description": "🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.",
        "fork": false,
        "created_at": "2024-04-20T04:18:24Z",
-        "updated_at": "2026-04-28T18:15:10Z",
-        "pushed_at": "2026-04-28T18:15:05Z",
+        "updated_at": "2026-04-29T00:19:41Z",
+        "pushed_at": "2026-04-29T00:19:37Z",
        "stargazers_count": 2,
        "watchers_count": 2,
        "has_discussions": false,
@@ -838,8 +838,8 @@
        "description": "🛠 Exploit CVE-2025-8088 with this Python tool to generate malicious WinRAR archives that ensure payload persistence in Windows startup folders.",
        "fork": false,
        "created_at": "2025-12-20T13:52:21Z",
-        "updated_at": "2026-04-28T17:03:54Z",
-        "pushed_at": "2026-04-28T17:03:51Z",
+        "updated_at": "2026-04-28T23:32:55Z",
+        "pushed_at": "2026-04-28T23:32:50Z",
        "stargazers_count": 2,
        "watchers_count": 2,
        "has_discussions": false,
@@ -146,8 +146,8 @@
        "description": "🔍 Detect improper symbolic link handling in Gogs' PutContents API, exposing local code execution risks for versions 0.13.3 and earlier.",
        "fork": false,
        "created_at": "2025-12-31T13:25:07Z",
-        "updated_at": "2026-04-28T17:15:28Z",
-        "pushed_at": "2026-04-28T17:15:23Z",
+        "updated_at": "2026-04-28T23:41:30Z",
+        "pushed_at": "2026-04-28T23:41:26Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -14,8 +14,8 @@
        "description": "🚀 Exploit CVE-2025-9074 with this Docker escape framework, simplifying API vulnerabilities and enhancing security testing for developers and researchers.",
        "fork": false,
        "created_at": "2024-06-19T23:21:41Z",
-        "updated_at": "2026-04-28T17:17:44Z",
-        "pushed_at": "2026-04-28T17:17:37Z",
+        "updated_at": "2026-04-28T23:43:01Z",
+        "pushed_at": "2026-04-28T23:42:58Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -14,10 +14,10 @@
        "description": "CVE-2026-0006: Heap buffer overflow PoC for libopenapv (Android APV codec) - CVSS 9.8",
        "fork": false,
        "created_at": "2026-04-18T20:05:22Z",
-        "updated_at": "2026-04-25T13:35:07Z",
+        "updated_at": "2026-04-28T22:29:31Z",
        "pushed_at": "2026-04-22T10:09:20Z",
-        "stargazers_count": 3,
-        "watchers_count": 3,
+        "stargazers_count": 4,
+        "watchers_count": 4,
        "has_discussions": false,
        "forks_count": 2,
        "allow_forking": true,
@@ -28,7 +28,7 @@
        "topics": [],
        "visibility": "public",
        "forks": 2,
-        "watchers": 3,
+        "watchers": 4,
        "score": 0,
        "subscribers_count": 0
    }
@@ -14,8 +14,8 @@
        "description": "🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.",
        "fork": false,
        "created_at": "2024-04-20T04:18:24Z",
-        "updated_at": "2026-04-28T18:15:10Z",
-        "pushed_at": "2026-04-28T18:15:05Z",
+        "updated_at": "2026-04-29T00:19:41Z",
+        "pushed_at": "2026-04-29T00:19:37Z",
        "stargazers_count": 2,
        "watchers_count": 2,
        "has_discussions": false,
@@ -14,10 +14,10 @@
        "description": "Windows Error Reporting ALPC Elevation of Privilege (CVE-2026-20817) - Proof-of-Concept exploit demonstrating local privilege escalation via WER service. ",
        "fork": false,
        "created_at": "2026-02-18T13:56:17Z",
-        "updated_at": "2026-04-28T03:33:54Z",
+        "updated_at": "2026-04-28T19:56:03Z",
        "pushed_at": "2026-02-19T13:37:06Z",
-        "stargazers_count": 117,
-        "watchers_count": 117,
+        "stargazers_count": 118,
+        "watchers_count": 118,
        "has_discussions": false,
        "forks_count": 19,
        "allow_forking": true,
@@ -28,7 +28,7 @@
        "topics": [],
        "visibility": "public",
        "forks": 19,
-        "watchers": 117,
+        "watchers": 118,
        "score": 0,
        "subscribers_count": 0
    }
@@ -14,8 +14,8 @@
        "description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.",
        "fork": false,
        "created_at": "2024-09-22T12:19:06Z",
-        "updated_at": "2026-04-28T18:13:56Z",
-        "pushed_at": "2026-04-28T18:13:52Z",
+        "updated_at": "2026-04-29T00:18:53Z",
+        "pushed_at": "2026-04-29T00:18:50Z",
        "stargazers_count": 1,
        "watchers_count": 1,
        "has_discussions": false,
@@ -412,8 +412,8 @@
        "description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.",
        "fork": false,
        "created_at": "2026-02-26T05:21:28Z",
-        "updated_at": "2026-04-28T18:12:31Z",
-        "pushed_at": "2026-04-28T18:12:27Z",
+        "updated_at": "2026-04-29T00:18:03Z",
+        "pushed_at": "2026-04-29T00:17:59Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -14,8 +14,8 @@
        "description": "🔍 Analyze and detect CVE-2026-2406 vulnerabilities in Telnet to enhance security and prevent unauthorized access with this professional research engine.",
        "fork": false,
        "created_at": "2025-04-16T07:20:12Z",
-        "updated_at": "2026-04-28T17:59:57Z",
-        "pushed_at": "2026-04-28T17:59:53Z",
+        "updated_at": "2026-04-29T00:09:42Z",
+        "pushed_at": "2026-04-29T00:09:38Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -1553,8 +1553,8 @@
        "description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.",
        "fork": false,
        "created_at": "2026-02-03T19:46:10Z",
-        "updated_at": "2026-04-28T17:54:44Z",
-        "pushed_at": "2026-04-28T17:54:40Z",
+        "updated_at": "2026-04-29T00:06:23Z",
+        "pushed_at": "2026-04-29T00:06:19Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -80,8 +80,8 @@
        "description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions",
        "fork": false,
        "created_at": "2026-03-26T04:38:27Z",
-        "updated_at": "2026-04-28T18:42:18Z",
-        "pushed_at": "2026-04-28T18:42:15Z",
+        "updated_at": "2026-04-29T00:38:32Z",
+        "pushed_at": "2026-04-29T00:38:29Z",
        "stargazers_count": 2,
        "watchers_count": 2,
        "has_discussions": false,
@@ -179,8 +179,8 @@
        "description": "Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.",
        "fork": false,
        "created_at": "2026-03-03T14:19:18Z",
-        "updated_at": "2026-04-28T18:17:56Z",
-        "pushed_at": "2026-04-28T18:17:51Z",
+        "updated_at": "2026-04-29T00:21:27Z",
+        "pushed_at": "2026-04-29T00:21:22Z",
        "stargazers_count": 1,
        "watchers_count": 1,
        "has_discussions": false,
@@ -65,8 +65,8 @@
        "description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.",
        "fork": false,
        "created_at": "2026-03-10T14:40:04Z",
-        "updated_at": "2026-04-28T18:25:46Z",
-        "pushed_at": "2026-04-28T18:25:41Z",
+        "updated_at": "2026-04-29T00:26:37Z",
+        "pushed_at": "2026-04-29T00:26:33Z",
        "stargazers_count": 1,
        "watchers_count": 1,
        "has_discussions": false,
@@ -94,8 +94,8 @@
        "description": "Exploit Frigate NVR ≤0.16.3 to execute commands remotely by abusing a configuration flaw without needing shell access or output capture.",
        "fork": false,
        "created_at": "2026-03-07T20:23:08Z",
-        "updated_at": "2026-04-28T18:24:13Z",
-        "pushed_at": "2026-04-28T18:24:10Z",
+        "updated_at": "2026-04-29T00:25:17Z",
+        "pushed_at": "2026-04-29T00:25:14Z",
        "stargazers_count": 2,
        "watchers_count": 2,
        "has_discussions": false,
@@ -62,8 +62,8 @@
        "description": "Explore a PoC for CVE-2026-2991, an auth bypass in KiviCare 4.1.2 and earlier via the patient social-login REST endpoint",
        "fork": false,
        "created_at": "2026-04-03T20:26:43Z",
-        "updated_at": "2026-04-28T18:47:45Z",
-        "pushed_at": "2026-04-28T18:47:41Z",
+        "updated_at": "2026-04-29T00:42:19Z",
+        "pushed_at": "2026-04-29T00:42:16Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -47,10 +47,10 @@
        "description": "A newly discovered vulnerable driver, pstrip64.sys (CVE-2026-29923) allows an unprivileged user to escalate privileges to SYSTEM via a crafted IOCTL request ",
        "fork": false,
        "created_at": "2026-04-10T12:48:55Z",
-        "updated_at": "2026-04-28T14:54:06Z",
+        "updated_at": "2026-04-28T19:55:21Z",
        "pushed_at": "2026-04-11T13:56:20Z",
-        "stargazers_count": 20,
-        "watchers_count": 20,
+        "stargazers_count": 21,
+        "watchers_count": 21,
        "has_discussions": false,
        "forks_count": 2,
        "allow_forking": true,
@@ -61,7 +61,7 @@
        "topics": [],
        "visibility": "public",
        "forks": 2,
-        "watchers": 20,
+        "watchers": 21,
        "score": 0,
        "subscribers_count": 0
    }
@@ -14,10 +14,10 @@
        "description": "CVE-2026-30368 proof of concept",
        "fork": false,
        "created_at": "2026-04-22T03:40:06Z",
-        "updated_at": "2026-04-26T22:34:09Z",
+        "updated_at": "2026-04-28T20:46:28Z",
        "pushed_at": "2026-04-26T22:34:05Z",
-        "stargazers_count": 13,
-        "watchers_count": 13,
+        "stargazers_count": 14,
+        "watchers_count": 14,
        "has_discussions": false,
        "forks_count": 2,
        "allow_forking": true,
@@ -28,7 +28,7 @@
        "topics": [],
        "visibility": "public",
        "forks": 2,
-        "watchers": 13,
+        "watchers": 14,
        "score": 0,
        "subscribers_count": 2
    }
@@ -59,8 +59,8 @@
        "description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
        "fork": false,
        "created_at": "2026-03-28T20:49:46Z",
-        "updated_at": "2026-04-28T18:44:09Z",
-        "pushed_at": "2026-04-28T18:44:05Z",
+        "updated_at": "2026-04-29T00:39:28Z",
+        "pushed_at": "2026-04-29T00:39:25Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -0,0 +1,68 @@
+[
+    {
+        "id": 1223926494,
+        "name": "CVE-2026-3854",
+        "full_name": "5kr1pt\/CVE-2026-3854",
+        "owner": {
+            "login": "5kr1pt",
+            "id": 78171565,
+            "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78171565?v=4",
+            "html_url": "https:\/\/github.com\/5kr1pt",
+            "user_view_type": "public"
+        },
+        "html_url": "https:\/\/github.com\/5kr1pt\/CVE-2026-3854",
+        "description": null,
+        "fork": false,
+        "created_at": "2026-04-28T19:42:55Z",
+        "updated_at": "2026-04-28T20:17:47Z",
+        "pushed_at": "2026-04-28T20:17:42Z",
+        "stargazers_count": 0,
+        "watchers_count": 0,
+        "has_discussions": false,
+        "forks_count": 0,
+        "allow_forking": true,
+        "is_template": false,
+        "web_commit_signoff_required": false,
+        "has_pull_requests": true,
+        "pull_request_creation_policy": "all",
+        "topics": [],
+        "visibility": "public",
+        "forks": 0,
+        "watchers": 0,
+        "score": 0,
+        "subscribers_count": 0
+    },
+    {
+        "id": 1224015776,
+        "name": "Exploit_CVE-2026-3854",
+        "full_name": "LACHHAB-Anas\/Exploit_CVE-2026-3854",
+        "owner": {
+            "login": "LACHHAB-Anas",
+            "id": 185726623,
+            "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/185726623?v=4",
+            "html_url": "https:\/\/github.com\/LACHHAB-Anas",
+            "user_view_type": "public"
+        },
+        "html_url": "https:\/\/github.com\/LACHHAB-Anas\/Exploit_CVE-2026-3854",
+        "description": "Details about CVE-2026-3854",
+        "fork": false,
+        "created_at": "2026-04-28T22:02:08Z",
+        "updated_at": "2026-04-28T22:12:22Z",
+        "pushed_at": "2026-04-28T22:12:19Z",
+        "stargazers_count": 0,
+        "watchers_count": 0,
+        "has_discussions": false,
+        "forks_count": 0,
+        "allow_forking": true,
+        "is_template": false,
+        "web_commit_signoff_required": false,
+        "has_pull_requests": true,
+        "pull_request_creation_policy": "all",
+        "topics": [],
+        "visibility": "public",
+        "forks": 0,
+        "watchers": 0,
+        "score": 0,
+        "subscribers_count": 0
+    }
+]
@@ -0,0 +1,35 @@
+[
+    {
+        "id": 1224028810,
+        "name": "nifi-CVE-2026-39816-poc",
+        "full_name": "ZeroPathAI\/nifi-CVE-2026-39816-poc",
+        "owner": {
+            "login": "ZeroPathAI",
+            "id": 170791525,
+            "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/170791525?v=4",
+            "html_url": "https:\/\/github.com\/ZeroPathAI",
+            "user_view_type": "public"
+        },
+        "html_url": "https:\/\/github.com\/ZeroPathAI\/nifi-CVE-2026-39816-poc",
+        "description": "POC for CVE-2026-39816 which allows NiFi users without execute code permissions to run arbitrary scripts",
+        "fork": false,
+        "created_at": "2026-04-28T22:25:29Z",
+        "updated_at": "2026-04-28T22:41:25Z",
+        "pushed_at": "2026-04-28T22:41:21Z",
+        "stargazers_count": 0,
+        "watchers_count": 0,
+        "has_discussions": false,
+        "forks_count": 0,
+        "allow_forking": true,
+        "is_template": false,
+        "web_commit_signoff_required": false,
+        "has_pull_requests": true,
+        "pull_request_creation_policy": "all",
+        "topics": [],
+        "visibility": "public",
+        "forks": 0,
+        "watchers": 0,
+        "score": 0,
+        "subscribers_count": 0
+    }
+]
@@ -1,21 +1,21 @@
 [
    {
-        "id": 1223584035,
-        "name": "cve-2026-22747-lab",
-        "full_name": "F1n1Sh3r\/cve-2026-22747-lab",
+        "id": 1223993963,
+        "name": "CVE-2026-41462",
+        "full_name": "0xBlackash\/CVE-2026-41462",
        "owner": {
-            "login": "F1n1Sh3r",
-            "id": 8713057,
-            "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8713057?v=4",
-            "html_url": "https:\/\/github.com\/F1n1Sh3r",
+            "login": "0xBlackash",
+            "id": 259905299,
+            "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/259905299?v=4",
+            "html_url": "https:\/\/github.com\/0xBlackash",
            "user_view_type": "public"
        },
-        "html_url": "https:\/\/github.com\/F1n1Sh3r\/cve-2026-22747-lab",
-        "description": null,
+        "html_url": "https:\/\/github.com\/0xBlackash\/CVE-2026-41462",
+        "description": "CVE-2026-41462",
        "fork": false,
-        "created_at": "2026-04-28T13:11:38Z",
-        "updated_at": "2026-04-28T13:17:45Z",
-        "pushed_at": "2026-04-28T13:17:26Z",
+        "created_at": "2026-04-28T21:23:32Z",
+        "updated_at": "2026-04-28T21:38:32Z",
+        "pushed_at": "2026-04-28T21:38:28Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -14,10 +14,10 @@
        "description": null,
        "fork": false,
        "created_at": "2026-04-23T08:57:29Z",
-        "updated_at": "2026-04-28T08:43:29Z",
+        "updated_at": "2026-04-29T00:48:18Z",
        "pushed_at": "2026-04-23T13:55:33Z",
-        "stargazers_count": 61,
-        "watchers_count": 61,
+        "stargazers_count": 62,
+        "watchers_count": 62,
        "has_discussions": false,
        "forks_count": 16,
        "allow_forking": true,
@@ -28,7 +28,7 @@
        "topics": [],
        "visibility": "public",
        "forks": 16,
-        "watchers": 61,
+        "watchers": 62,
        "score": 0,
        "subscribers_count": 0
    },
@@ -14,8 +14,8 @@
        "description": "POCs to demonstrate CVE-2026-42167 in ProFTPD",
        "fork": false,
        "created_at": "2026-04-28T14:35:46Z",
-        "updated_at": "2026-04-28T14:45:35Z",
-        "pushed_at": "2026-04-28T14:36:27Z",
+        "updated_at": "2026-04-28T22:20:15Z",
+        "pushed_at": "2026-04-28T22:20:12Z",
        "stargazers_count": 0,
        "watchers_count": 0,
        "has_discussions": false,
@@ -47,10 +47,10 @@
        "description": null,
        "fork": false,
        "created_at": "2026-04-10T02:45:41Z",
-        "updated_at": "2026-04-10T02:46:47Z",
+        "updated_at": "2026-04-28T23:04:39Z",
        "pushed_at": "2026-04-10T02:46:44Z",
-        "stargazers_count": 0,
-        "watchers_count": 0,
+        "stargazers_count": 1,
+        "watchers_count": 1,
        "has_discussions": false,
        "forks_count": 0,
        "allow_forking": true,
@@ -61,7 +61,7 @@
        "topics": [],
        "visibility": "public",
        "forks": 0,
-        "watchers": 0,
+        "watchers": 1,
        "score": 0,
        "subscribers_count": 0
    }
@@ -0,0 +1,35 @@
+[
+    {
+        "id": 1224021535,
+        "name": "CVE-2026-6770",
+        "full_name": "nightcorefan94\/CVE-2026-6770",
+        "owner": {
+            "login": "nightcorefan94",
+            "id": 274578546,
+            "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/274578546?v=4",
+            "html_url": "https:\/\/github.com\/nightcorefan94",
+            "user_view_type": "public"
+        },
+        "html_url": "https:\/\/github.com\/nightcorefan94\/CVE-2026-6770",
+        "description": "CVE-2026-6770 PoC for Firefox\/Tor",
+        "fork": false,
+        "created_at": "2026-04-28T22:12:30Z",
+        "updated_at": "2026-04-28T22:14:26Z",
+        "pushed_at": "2026-04-28T22:14:22Z",
+        "stargazers_count": 0,
+        "watchers_count": 0,
+        "has_discussions": false,
+        "forks_count": 0,
+        "allow_forking": true,
+        "is_template": false,
+        "web_commit_signoff_required": false,
+        "has_pull_requests": true,
+        "pull_request_creation_policy": "all",
+        "topics": [],
+        "visibility": "public",
+        "forks": 0,
+        "watchers": 0,
+        "score": 0,
+        "subscribers_count": 0
+    }
+]
@@ -0,0 +1,35 @@
+[
+    {
+        "id": 1223909022,
+        "name": "Grassmarlin-CVE-2026-6807-XXE-POC",
+        "full_name": "SecTestAnnaQuinn\/Grassmarlin-CVE-2026-6807-XXE-POC",
+        "owner": {
+            "login": "SecTestAnnaQuinn",
+            "id": 88168208,
+            "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88168208?v=4",
+            "html_url": "https:\/\/github.com\/SecTestAnnaQuinn",
+            "user_view_type": "public"
+        },
+        "html_url": "https:\/\/github.com\/SecTestAnnaQuinn\/Grassmarlin-CVE-2026-6807-XXE-POC",
+        "description": "Reverse Engineered based on CISA disclosure of new CVE",
+        "fork": false,
+        "created_at": "2026-04-28T19:18:44Z",
+        "updated_at": "2026-04-28T19:26:32Z",
+        "pushed_at": "2026-04-28T19:26:28Z",
+        "stargazers_count": 0,
+        "watchers_count": 0,
+        "has_discussions": false,
+        "forks_count": 0,
+        "allow_forking": true,
+        "is_template": false,
+        "web_commit_signoff_required": false,
+        "has_pull_requests": true,
+        "pull_request_creation_policy": "all",
+        "topics": [],
+        "visibility": "public",
+        "forks": 0,
+        "watchers": 0,
+        "score": 0,
+        "subscribers_count": 0
+    }
+]
@@ -101,7 +101,7 @@

 ### CVE-2026-0834 (2026-01-21)

-<code>Logic vulnerability in TP-Link Archer C20 v5, 6.0, Archer AX53 v1.0 and TL-WR841N v13 (TDDP module) allows unauthenticated adjacent attackers to execute administrative commands including factory reset and device reboot without credentials. Attackers on the adjacent network can remotely trigger factory resets and reboots without credentials, causing configuration loss and interruption of device availability.This issue affects Archer C20 v6.0 &lt; V6_251031, Archer C20 v5 &lt;EU_V5_260317 or &lt; US_V5_260419\n\n\nArcher AX53 v1.0 &lt; \n\nV1_251215\n\nTL-WR841N v13 &lt; 0.9.1 Build 20231120 Rel.62366
+<code>Logic vulnerability in TP-Link Archer C20 v5, 6.0, Archer AX53 v1.0 and TL-WR841N v13 (TDDP module) allows unauthenticated adjacent attackers to execute administrative commands including factory reset and device reboot without credentials. Attackers on the adjacent network can remotely trigger factory resets and reboots without credentials, causing configuration loss and interruption of device availability.\n\nThis issue affects Archer C20 v6.0 &lt; V6_251031, Archer C20 v5 &lt;EU_V5_260317 or &lt; US_V5_260419\n\n\nArcher AX53 v1.0 &lt; \n\nV1_251215\n\n\n\nTL-WR841N v13 &lt; 0.9.1 Build 20231120 Rel.62366
 </code>

 - [mattgsys/CVE-2026-0834](https://github.com/mattgsys/CVE-2026-0834)
@@ -662,6 +662,14 @@
 - [tausifzaman/CVE-2026-3844](https://github.com/tausifzaman/CVE-2026-3844)
 - [dinosn/CVE-2026-3844](https://github.com/dinosn/CVE-2026-3844)

+### CVE-2026-3854 (2026-03-10)
+
+<code>An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed an attacker with push access to a repository to achieve remote code execution on the instance. During a git push operation, user-supplied push option values were not properly sanitized before being included in internal service headers. Because the internal header format used a delimiter character that could also appear in user input, an attacker could inject additional metadata fields through crafted push option values. This vulnerability was reported via the GitHub Bug Bounty program and has been fixed in GitHub Enterprise Server versions 3.14.25, 3.15.20, 3.16.16, 3.17.13, 3.18.7 and 3.19.4.
+</code>
+
+- [5kr1pt/CVE-2026-3854](https://github.com/5kr1pt/CVE-2026-3854)
+- [LACHHAB-Anas/Exploit_CVE-2026-3854](https://github.com/LACHHAB-Anas/Exploit_CVE-2026-3854)
+
 ### CVE-2026-3888 (2026-03-17)

 <code>Local privilege escalation in snapd on Linux allows local attackers to get root privilege by re-creating snap's private /tmp directory when systemd-tmpfiles is configured to automatically clean up this directory. This issue affects Ubuntu 16.04 LTS, 18.04 LTS, 20.04 LTS, 22.04 LTS, and 24.04 LTS.
@@ -952,6 +960,20 @@

 - [mlgzackfly/CVE-2026-6643](https://github.com/mlgzackfly/CVE-2026-6643)

+### CVE-2026-6770 (2026-04-21)
+
+<code>Other issue in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.
+</code>
+
+- [nightcorefan94/CVE-2026-6770](https://github.com/nightcorefan94/CVE-2026-6770)
+
+### CVE-2026-6807 (2026-04-28)
+
+<code>A vulnerability in GRASSMARLIN v3.2.1 allows crafted session data to \ntrigger improper handling of XML input, which may result in unintended \nexposure of sensitive information. The flaw stems from insufficient \nhardening of the XML parsing process.
+</code>
+
+- [SecTestAnnaQuinn/Grassmarlin-CVE-2026-6807-XXE-POC](https://github.com/SecTestAnnaQuinn/Grassmarlin-CVE-2026-6807-XXE-POC)
+
 ### CVE-2026-6849
 - [osmancanvural/CVE-2026-6849](https://github.com/osmancanvural/CVE-2026-6849)

@@ -1484,13 +1506,6 @@
 - [n0n4m3x41/CVE-2026-22738-POC](https://github.com/n0n4m3x41/CVE-2026-22738-POC)
 - [rockmelodies/CVE-2026-22738](https://github.com/rockmelodies/CVE-2026-22738)

-### CVE-2026-22747 (2026-04-22)
-
-<code>Vulnerability in Spring Spring Security. SubjectX500PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN values, which can lead to reading the wrong value for the username. In a carefully crafted certificate, this can lead to an attacker impersonating another user.\nThis issue affects Spring Security: from 7.0.0 through 7.0.4.
-</code>
-
- [F1n1Sh3r/cve-2026-22747-lab](https://github.com/F1n1Sh3r/cve-2026-22747-lab)
-
 ### CVE-2026-22777 (2026-01-10)

 <code>ComfyUI-Manager is an extension designed to enhance the usability of ComfyUI. Prior to versions 3.39.2 and 4.0.5, an attacker can inject special characters into HTTP query parameters to add arbitrary configuration values to the config.ini file. This can lead to security setting tampering or modification of application behavior. This issue has been patched in versions 3.39.2 and 4.0.5.
@@ -3705,7 +3720,11 @@

 - [menevarad007/CVE-2026-37749](https://github.com/menevarad007/CVE-2026-37749)

-### CVE-2026-37750
+### CVE-2026-37750 (2026-04-28)
+
+<code>A reflected Cross-Site Scripting (XSS) vulnerability in School Management System by mahmoudai1 allows unauthenticated remote attackers to execute arbitrary JavaScript in victim's browsers via the unsanitized type parameter in register.php.
+</code>
+
 - [menevarad007/CVE-2026-37750](https://github.com/menevarad007/CVE-2026-37750)

 ### CVE-2026-38751
@@ -3762,6 +3781,9 @@

 - [0xBlackash/CVE-2026-39813](https://github.com/0xBlackash/CVE-2026-39813)

+### CVE-2026-39816
+- [ZeroPathAI/nifi-CVE-2026-39816-poc](https://github.com/ZeroPathAI/nifi-CVE-2026-39816-poc)
+
 ### CVE-2026-39842 (2026-04-14)

 <code>OpenRemote is an open-source IoT platform. Versions 1.21.0 and below contain two interrelated expression injection vulnerabilities in the rules engine that allow arbitrary code execution on the server. The JavaScript rules engine executes user-supplied scripts via Nashorn's ScriptEngine.eval() without sandboxing, class filtering, or access restrictions, and the authorization check in RulesResourceImpl only restricts Groovy rules to superusers while leaving JavaScript rules unrestricted for any user with the write:rules role. Additionally, the Groovy rules engine has a GroovyDenyAllFilter security filter that is defined but never registered, as the registration code is commented out, rendering the SandboxTransformer ineffective for superuser-created Groovy rules. A non-superuser attacker with the write:rules role can create JavaScript rulesets that execute with full JVM access, enabling remote code execution as root, arbitrary file read, environment variable theft including database credentials, and complete multi-tenant isolation bypass to access data across all realms. This issue has been fixed in version 1.22.0.
@@ -3859,6 +3881,13 @@

 - [kaleth4/CVE-2026-41303](https://github.com/kaleth4/CVE-2026-41303)

+### CVE-2026-41462 (2026-04-27)
+
+<code>ProjeQtor versions 7.0 through 12.4.3 contain an unauthenticated SQL injection vulnerability in the login functionality where the login variable is directly concatenated into a SQL query without parameterization or sanitization. Attackers can inject arbitrary SQL expressions through the username field at the authentication endpoint to create privileged accounts, read sensitive data, and execute operating system commands if the database user has elevated permissions.
+</code>
+
+- [0xBlackash/CVE-2026-41462](https://github.com/0xBlackash/CVE-2026-41462)
+
 ### CVE-2026-41575
 - [krraze/CVE-2026-41575](https://github.com/krraze/CVE-2026-41575)

@@ -3883,7 +3912,11 @@

 - [bartfroklage/cve-2026-41679](https://github.com/bartfroklage/cve-2026-41679)

-### CVE-2026-42167
+### CVE-2026-42167 (2026-04-28)
+
+<code>mod_sql in ProFTPD before 1.3.10rc1 allows remote attackers to execute arbitrary code via a username, in scenarios where there is logging of USER requests with an expansion such as %U, and the SQL backend allows commands (e.g., COPY TO PROGRAM).
+</code>
+
 - [ZeroPathAI/proftpd-CVE-2026-42167-poc](https://github.com/ZeroPathAI/proftpd-CVE-2026-42167-poc)

 ### CVE-2026-42208
@@ -8149,7 +8182,7 @@

 ### CVE-2025-26892 (2025-05-19)

-<code>Unrestricted Upload of File with Dangerous Type vulnerability in dkszone Celestial Aura celestial-aura allows Using Malicious Files.This issue affects Celestial Aura: from n/a through &lt;= 2.2.
+<code>Unrestricted Upload of File with Dangerous Type vulnerability in dkszone Celestial Aura allows Using Malicious Files.This issue affects Celestial Aura: from n/a through 2.2.
 </code>

 - [Nxploited/CVE-2025-26892](https://github.com/Nxploited/CVE-2025-26892)
@@ -8861,7 +8894,7 @@

 ### CVE-2025-30967 (2025-04-15)

-<code>Cross-Site Request Forgery (CSRF) vulnerability in NotFound WPJobBoard wpjobboard allows Upload a Web Shell to a Web Server.This issue affects WPJobBoard: from n/a through &lt; 5.11.1.
+<code>Cross-Site Request Forgery (CSRF) vulnerability in NotFound WPJobBoard allows Upload a Web Shell to a Web Server. This issue affects WPJobBoard: from n/a through n/a.
 </code>

 - [Anton-ai111/CVE-2025-30967](https://github.com/Anton-ai111/CVE-2025-30967)
@@ -10458,7 +10491,7 @@

 ### CVE-2025-47646 (2025-05-23)

-<code>Weak Password Recovery Mechanism for Forgotten Password vulnerability in Gilblas Ngunte Possi PSW Front-end Login &amp;amp; Registration psw-login-and-registration allows Password Recovery Exploitation.This issue affects PSW Front-end Login &amp;amp; Registration: from n/a through &lt;= 1.13.
+<code>Weak Password Recovery Mechanism for Forgotten Password vulnerability in Gilblas Ngunte Possi PSW Front-end Login &amp; Registration psw-login-and-registration allows Password Recovery Exploitation.This issue affects PSW Front-end Login &amp; Registration: from n/a through &lt;= 1.13.
 </code>

 - [Nxploited/CVE-2025-47646](https://github.com/Nxploited/CVE-2025-47646)
@@ -19902,7 +19935,7 @@

 ### CVE-2024-24926 (2024-02-12)

-<code>Deserialization of Untrusted Data vulnerability in UnitedThemes Brooklyn | Creative Multi-Purpose Responsive WordPress Theme.This issue affects Brooklyn | Creative Multi-Purpose Responsive WordPress Theme: from n/a through 4.9.7.6.\n\n
+<code>Deserialization of Untrusted Data vulnerability in UnitedThemes Brooklyn | Creative Multi-Purpose Responsive WordPress Theme.This issue affects Brooklyn | Creative Multi-Purpose Responsive WordPress Theme: from n/a through 4.9.7.6.
 </code>

 - [moften/CVE-2024-24926](https://github.com/moften/CVE-2024-24926)
@@ -19932,7 +19965,7 @@

 ### CVE-2024-25096 (2024-04-03)

-<code>Improper Control of Generation of Code ('Code Injection') vulnerability in Canto Inc. Canto allows Code Injection.This issue affects Canto: from n/a through 3.0.7.\n\n
+<code>Improper Control of Generation of Code ('Code Injection') vulnerability in Canto Inc. Canto allows Code Injection.This issue affects Canto: from n/a through 3.0.7.
 </code>

 - [puppetma4ster/Metasploit-Wordpress-Canto-Exploit-RCE](https://github.com/puppetma4ster/Metasploit-Wordpress-Canto-Exploit-RCE)
@@ -20512,7 +20545,7 @@

 ### CVE-2024-27956 (2024-03-21)

-<code>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ValvePress Automatic allows SQL Injection.This issue affects Automatic: from n/a through 3.92.0.\n\n
+<code>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ValvePress Automatic allows SQL Injection.This issue affects Automatic: from n/a through 3.92.0.
 </code>

 - [truonghuuphuc/CVE-2024-27956](https://github.com/truonghuuphuc/CVE-2024-27956)
@@ -21047,7 +21080,7 @@

 ### CVE-2024-31114 (2024-03-31)

-<code>Unrestricted Upload of File with Dangerous Type vulnerability in biplob018 Shortcode Addons.This issue affects Shortcode Addons: from n/a through 3.2.5.\n\n
+<code>Unrestricted Upload of File with Dangerous Type vulnerability in biplob018 Shortcode Addons.This issue affects Shortcode Addons: from n/a through 3.2.5.
 </code>

 - [Nxploited/CVE-2024-31114](https://github.com/Nxploited/CVE-2024-31114)
@@ -21321,7 +21354,7 @@

 ### CVE-2024-32104 (2024-04-15)

-<code>Cross-Site Request Forgery (CSRF) vulnerability in XLPlugins NextMove Lite.This issue affects NextMove Lite: from n/a through 2.18.1.\n\n
+<code>Cross-Site Request Forgery (CSRF) vulnerability in XLPlugins NextMove Lite.This issue affects NextMove Lite: from n/a through 2.18.1.
 </code>

 - [Cerberus-HiproPlus/CVE-2024-32104](https://github.com/Cerberus-HiproPlus/CVE-2024-32104)
@@ -21346,7 +21379,7 @@

 ### CVE-2024-32136 (2024-04-15)

-<code>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Xenioushk BWL Advanced FAQ Manager.This issue affects BWL Advanced FAQ Manager: from n/a through 2.0.3.\n\n
+<code>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Xenioushk BWL Advanced FAQ Manager.This issue affects BWL Advanced FAQ Manager: from n/a through 2.0.3.
 </code>

 - [xbz0n/CVE-2024-32136](https://github.com/xbz0n/CVE-2024-32136)
@@ -21533,7 +21566,7 @@

 ### CVE-2024-33559 (2024-04-29)

-<code>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 8theme XStore allows SQL Injection.This issue affects XStore: from n/a through 9.3.5.\n\n
+<code>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 8theme XStore allows SQL Injection.This issue affects XStore: from n/a through 9.3.5.
 </code>

 - [absholi7ly/WordPress-XStore-theme-SQL-Injection](https://github.com/absholi7ly/WordPress-XStore-theme-SQL-Injection)
@@ -21581,7 +21614,7 @@

 ### CVE-2024-33911 (2024-05-02)

-<code>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Weblizar School Management Pro.This issue affects School Management Pro: from n/a through 10.3.4.\n\n
+<code>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Weblizar School Management Pro.This issue affects School Management Pro: from n/a through 10.3.4.
 </code>

 - [xbz0n/CVE-2024-33911](https://github.com/xbz0n/CVE-2024-33911)
@@ -21760,7 +21793,7 @@

 ### CVE-2024-34444 (2024-06-19)

-<code>Missing Authorization vulnerability in ThemePunch OHG Slider Revolution revslider.This issue affects Slider Revolution: from n/a through &lt; 6.7.0.
+<code>Missing Authorization vulnerability in ThemePunch OHG Slider Revolution.This issue affects Slider Revolution: from n/a before 6.7.0.
 </code>

 - [dzmind2312/CVE-2024-34444-Exploit-Poc](https://github.com/dzmind2312/CVE-2024-34444-Exploit-Poc)
@@ -24627,7 +24660,7 @@

 ### CVE-2024-50478 (2024-10-28)

-<code>Authentication Bypass by Primary Weakness vulnerability in swoopbrandon 1-Click Login: Passwordless Authentication swoop-password-free-authentication allows Authentication Bypass.This issue affects 1-Click Login: Passwordless Authentication: from n/a through 1.4.5.
+<code>Authentication Bypass by Primary Weakness vulnerability in Swoop 1-Click Login: Passwordless Authentication allows Authentication Bypass.This issue affects 1-Click Login: Passwordless Authentication: 1.4.5.
 </code>

 - [RandomRobbieBF/CVE-2024-50478](https://github.com/RandomRobbieBF/CVE-2024-50478)
@@ -30005,14 +30038,14 @@

 ### CVE-2023-29384 (2023-12-20)

-<code>Unrestricted Upload of File with Dangerous Type vulnerability in HM Plugin WordPress Job Board and Recruitment Plugin – JobWP.This issue affects WordPress Job Board and Recruitment Plugin – JobWP: from n/a through 2.0.\n\n
+<code>Unrestricted Upload of File with Dangerous Type vulnerability in HM Plugin WordPress Job Board and Recruitment Plugin – JobWP.This issue affects WordPress Job Board and Recruitment Plugin – JobWP: from n/a through 2.0.
 </code>

 - [nastar-id/CVE-2023-29384](https://github.com/nastar-id/CVE-2023-29384)

 ### CVE-2023-29386 (2024-03-26)

-<code>Unrestricted Upload of File with Dangerous Type vulnerability in Julien Crego Manager for Icomoon.This issue affects Manager for Icomoon: from n/a through 2.0.\n\n
+<code>Unrestricted Upload of File with Dangerous Type vulnerability in Julien Crego Manager for Icomoon.This issue affects Manager for Icomoon: from n/a through 2.0.
 </code>

 - [vigilante-1337/CVE-2023-29386](https://github.com/vigilante-1337/CVE-2023-29386)
@@ -30287,7 +30320,7 @@

 ### CVE-2023-30486 (2024-12-09)

-<code>Missing Authorization vulnerability in hashthemes Square square allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Square: from n/a through &lt;= 2.0.0.
+<code>Missing Authorization vulnerability in HashThemes Square allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Square: from n/a through 2.0.0.
 </code>

 - [RandomRobbieBF/CVE-2023-30486](https://github.com/RandomRobbieBF/CVE-2023-30486)
@@ -30685,7 +30718,7 @@

 ### CVE-2023-32117 (2024-12-09)

-<code>Missing Authorization vulnerability in princeahmed Integrate Google Drive integrate-google-drive allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Integrate Google Drive: from n/a through &lt;= 1.1.99.
+<code>Missing Authorization vulnerability in SoftLab Integrate Google Drive allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Integrate Google Drive: from n/a through 1.1.99.
 </code>

 - [RandomRobbieBF/CVE-2023-32117](https://github.com/RandomRobbieBF/CVE-2023-32117)
@@ -30840,7 +30873,7 @@

 ### CVE-2023-32590 (2023-12-20)

-<code>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Daniel Söderström / Sidney van de Stouwe Subscribe to Category.This issue affects Subscribe to Category: from n/a through 2.7.4.\n\n
+<code>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Daniel Söderström / Sidney van de Stouwe Subscribe to Category.This issue affects Subscribe to Category: from n/a through 2.7.4.
 </code>

 - [RandomRobbieBF/CVE-2023-32590](https://github.com/RandomRobbieBF/CVE-2023-32590)
@@ -31830,7 +31863,7 @@

 ### CVE-2023-36531 (2024-12-13)

-<code>Missing Authorization vulnerability in liquidpoll LiquidPoll wp-poll allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LiquidPoll: from n/a through &lt;= 3.3.68.
+<code>Missing Authorization vulnerability in LiquidPoll LiquidPoll – Advanced Polls for Creators and Brands allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LiquidPoll – Advanced Polls for Creators and Brands: from n/a through 3.3.68.
 </code>

 - [RandomRobbieBF/CVE-2023-36531](https://github.com/RandomRobbieBF/CVE-2023-36531)
@@ -32666,7 +32699,7 @@

 ### CVE-2023-40000 (2024-04-16)

-<code>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through 5.7.\n\n
+<code>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through 5.7.
 </code>

 - [rxerium/CVE-2023-40000](https://github.com/rxerium/CVE-2023-40000)
@@ -32851,7 +32884,7 @@

 ### CVE-2023-40600 (2023-11-30)

-<code>Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Exactly WWW EWWW Image Optimizer. It works only when debug.log is turned on.This issue affects EWWW Image Optimizer: from n/a through 7.2.0.\n\n
+<code>Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Exactly WWW EWWW Image Optimizer. It works only when debug.log is turned on.This issue affects EWWW Image Optimizer: from n/a through 7.2.0.
 </code>

 - [RandomRobbieBF/CVE-2023-40600](https://github.com/RandomRobbieBF/CVE-2023-40600)
@@ -33039,7 +33072,7 @@

 ### CVE-2023-41652 (2023-11-03)

-<code>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David F. Carr RSVPMaker rsvpmaker allows SQL Injection.This issue affects RSVPMaker: from n/a through 10.6.6.\n\n
+<code>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David F. Carr RSVPMaker rsvpmaker allows SQL Injection.This issue affects RSVPMaker: from n/a through 10.6.6.
 </code>

 - [RandomRobbieBF/CVE-2023-41652](https://github.com/RandomRobbieBF/CVE-2023-41652)
@@ -33960,7 +33993,7 @@

 ### CVE-2023-45657 (2023-11-06)

-<code>A vulnerability in posimyththemes Nexter nexter.This issue affects Nexter: from n/a through &lt;= 2.0.3.
+<code>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in POSIMYTH Nexter allows SQL Injection.This issue affects Nexter: from n/a through 2.0.3.
 </code>

 - [RandomRobbieBF/CVE-2023-45657](https://github.com/RandomRobbieBF/CVE-2023-45657)
@@ -34291,7 +34324,7 @@

 ### CVE-2023-46615 (2024-02-12)

-<code>Deserialization of Untrusted Data vulnerability in Kalli Dan. KD Coming Soon.This issue affects KD Coming Soon: from n/a through 1.7.\n\n
+<code>Deserialization of Untrusted Data vulnerability in Kalli Dan. KD Coming Soon.This issue affects KD Coming Soon: from n/a through 1.7.
 </code>

 - [RandomRobbieBF/CVE-2023-46615](https://github.com/RandomRobbieBF/CVE-2023-46615)
@@ -34542,14 +34575,14 @@

 ### CVE-2023-47504 (2024-04-24)

-<code>Improper Authentication vulnerability in Elementor Elementor Website Builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Elementor Website Builder: from n/a through 3.16.4.\n\n
+<code>Improper Authentication vulnerability in Elementor Elementor Website Builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Elementor Website Builder: from n/a through 3.16.4.
 </code>

 - [davidxbors/CVE-2023-47504-POC](https://github.com/davidxbors/CVE-2023-47504-POC)

 ### CVE-2023-47529 (2023-11-23)

-<code>Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ThemeIsle Cloud Templates &amp; Patterns collection.This issue affects Cloud Templates &amp; Patterns collection: from n/a through 1.2.2.\n\n
+<code>Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ThemeIsle Cloud Templates &amp; Patterns collection.This issue affects Cloud Templates &amp; Patterns collection: from n/a through 1.2.2.
 </code>

 - [RandomRobbieBF/CVE-2023-47529](https://github.com/RandomRobbieBF/CVE-2023-47529)
@@ -34571,7 +34604,7 @@

 ### CVE-2023-47840 (2023-12-29)

-<code>Improper Control of Generation of Code ('Code Injection') vulnerability in Qode Interactive Qode Essential Addons.This issue affects Qode Essential Addons: from n/a through 1.5.2.\n\n
+<code>Improper Control of Generation of Code ('Code Injection') vulnerability in Qode Interactive Qode Essential Addons.This issue affects Qode Essential Addons: from n/a through 1.5.2.
 </code>

 - [RandomRobbieBF/CVE-2023-47840](https://github.com/RandomRobbieBF/CVE-2023-47840)
@@ -34650,7 +34683,7 @@

 ### CVE-2023-48777 (2024-03-26)

-<code>Unrestricted Upload of File with Dangerous Type vulnerability in Elementor.Com Elementor Website Builder.This issue affects Elementor Website Builder: from 3.3.0 through 3.18.1.\n\n
+<code>Unrestricted Upload of File with Dangerous Type vulnerability in Elementor.Com Elementor Website Builder.This issue affects Elementor Website Builder: from 3.3.0 through 3.18.1.
 </code>

 - [AkuCyberSec/Elementor-3.18.0-Upload-Path-Traversal-RCE-CVE-2023-48777](https://github.com/AkuCyberSec/Elementor-3.18.0-Upload-Path-Traversal-RCE-CVE-2023-48777)
@@ -35214,7 +35247,7 @@

 ### CVE-2023-50839 (2023-12-28)

-<code>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JS Help Desk JS Help Desk – Best Help Desk &amp; Support Plugin.This issue affects JS Help Desk – Best Help Desk &amp; Support Plugin: from n/a through 2.8.1.\n\n
+<code>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JS Help Desk JS Help Desk – Best Help Desk &amp; Support Plugin.This issue affects JS Help Desk – Best Help Desk &amp; Support Plugin: from n/a through 2.8.1.
 </code>

 - [Francesco-CyberIntelligence/bug-bounty-findings-o-research-disclosures.](https://github.com/Francesco-CyberIntelligence/bug-bounty-findings-o-research-disclosures.)
@@ -35290,7 +35323,7 @@

 ### CVE-2023-51409 (2024-04-12)

-<code>Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 1.9.98.\n\n
+<code>Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 1.9.98.
 </code>

 - [RandomRobbieBF/CVE-2023-51409](https://github.com/RandomRobbieBF/CVE-2023-51409)
@@ -35328,7 +35361,7 @@

 ### CVE-2023-51504 (2024-02-05)

-<code>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dan Dulaney Dan's Embedder for Google Calendar allows Stored XSS.This issue affects Dan's Embedder for Google Calendar: from n/a through 1.2.\n\n
+<code>Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dan Dulaney Dan's Embedder for Google Calendar allows Stored XSS.This issue affects Dan's Embedder for Google Calendar: from n/a through 1.2.
 </code>

 - [Sybelle03/CVE-2023-51504](https://github.com/Sybelle03/CVE-2023-51504)
@@ -40574,7 +40607,7 @@

 ### CVE-2022-34155 (2023-07-18)

-<code>Improper Authentication vulnerability in miniOrange OAuth Single Sign On – SSO (OAuth Client) plugin allows Authentication Bypass.This issue affects OAuth Single Sign On – SSO (OAuth Client): from n/a through 6.23.3.\n\n
+<code>Improper Authentication vulnerability in miniOrange OAuth Single Sign On – SSO (OAuth Client) plugin allows Authentication Bypass.This issue affects OAuth Single Sign On – SSO (OAuth Client): from n/a through 6.23.3.
 </code>

 - [vanh-88/CVE-2022-34155](https://github.com/vanh-88/CVE-2022-34155)
@@ -42355,7 +42388,7 @@

 ### CVE-2022-45354 (2024-01-08)

-<code>Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.7.60.\n\n
+<code>Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.7.60.
 </code>

 - [RandomRobbieBF/CVE-2022-45354](https://github.com/RandomRobbieBF/CVE-2022-45354)