From 2a14270325e720d58cefd2c434c509ca94f0e25c Mon Sep 17 00:00:00 2001 From: motikan2010-bot Date: Wed, 29 Apr 2026 09:51:54 +0900 Subject: [PATCH] Auto Update 2026/04/29 00:51:54 --- 2016/CVE-2016-10709.json | 8 +- 2016/CVE-2016-15042.json | 4 +- 2017/CVE-2017-17099.json | 8 +- 2018/CVE-2018-1999002.json | 8 +- 2018/CVE-2018-7843.json | 4 +- 2018/CVE-2018-7844.json | 4 +- 2018/CVE-2018-7845.json | 4 +- 2019/CVE-2019-1003000.json | 8 +- 2019/CVE-2019-1040.json | 8 +- 2020/CVE-2020-0610.json | 4 +- 2020/CVE-2020-1472.json | 4 +- 2020/CVE-2020-8012.json | 8 +- 2021/CVE-2021-33044.json | 4 +- 2021/CVE-2021-4034.json | 4 +- 2021/CVE-2021-41773.json | 4 +- 2022/CVE-2022-32250.json | 4 +- 2022/CVE-2022-39227.json | 4 +- 2023/CVE-2023-20963.json | 8 +- 2023/CVE-2023-32434.json | 4 +- 2023/CVE-2023-38709.json | 12 +- 2023/CVE-2023-39910.json | 4 +- 2024/CVE-2024-0044.json | 16 +-- 2024/CVE-2024-0670.json | 4 +- 2024/CVE-2024-23222.json | 4 +- 2024/CVE-2024-30088.json | 4 +- 2024/CVE-2024-31317.json | 16 +-- 2024/CVE-2024-38472.json | 12 +- 2024/CVE-2024-4577.json | 8 +- 2024/CVE-2024-56348.json | 4 +- 2024/CVE-2024-56426.json | 4 +- 2025/CVE-2025-14847.json | 8 +- 2025/CVE-2025-21479.json | 4 +- 2025/CVE-2025-2304.json | 4 +- 2025/CVE-2025-24257.json | 4 +- 2025/CVE-2025-31258.json | 4 +- 2025/CVE-2025-32463.json | 12 +- 2025/CVE-2025-36911.json | 12 +- 2025/CVE-2025-49144.json | 4 +- 2025/CVE-2025-49844.json | 8 +- 2025/CVE-2025-5419.json | 4 +- 2025/CVE-2025-54253.json | 4 +- 2025/CVE-2025-54424.json | 4 +- 2025/CVE-2025-55130.json | 8 +- 2025/CVE-2025-55182.json | 64 +++++----- 2025/CVE-2025-55184.json | 4 +- 2025/CVE-2025-58434.json | 8 +- 2025/CVE-2025-59287.json | 4 +- 2025/CVE-2025-61882.json | 4 +- 2025/CVE-2025-6554.json | 4 +- 2025/CVE-2025-66398.json | 4 +- 2025/CVE-2025-66478.json | 4 +- 2025/CVE-2025-68921.json | 4 +- 2025/CVE-2025-69256.json | 8 +- 2025/CVE-2025-69600.json | 4 +- 2025/CVE-2025-69985.json | 4 +- 2025/CVE-2025-70795.json | 4 +- 2025/CVE-2025-8088.json | 4 +- 2025/CVE-2025-8110.json | 4 +- 2025/CVE-2025-9074.json | 4 +- 2026/CVE-2026-0006.json | 8 +- 2026/CVE-2026-0828.json | 4 +- 2026/CVE-2026-20817.json | 8 +- 2026/CVE-2026-20841.json | 8 +- 2026/CVE-2026-2406.json | 4 +- 2026/CVE-2026-24061.json | 4 +- 2026/CVE-2026-24291.json | 4 +- 2026/CVE-2026-2441.json | 4 +- 2026/CVE-2026-2472.json | 4 +- 2026/CVE-2026-25643.json | 4 +- 2026/CVE-2026-2991.json | 4 +- 2026/CVE-2026-29923.json | 8 +- 2026/CVE-2026-30368.json | 8 +- 2026/CVE-2026-31802.json | 4 +- 2026/CVE-2026-3854.json | 68 ++++++++++ 2026/CVE-2026-39816.json | 35 ++++++ ...VE-2026-22747.json => CVE-2026-41462.json} | 24 ++-- 2026/CVE-2026-41651.json | 8 +- 2026/CVE-2026-42167.json | 4 +- 2026/CVE-2026-4747.json | 8 +- 2026/CVE-2026-6770.json | 35 ++++++ 2026/CVE-2026-6807.json | 35 ++++++ README.md | 119 +++++++++++------- 82 files changed, 512 insertions(+), 304 deletions(-) create mode 100644 2026/CVE-2026-3854.json create mode 100644 2026/CVE-2026-39816.json rename 2026/{CVE-2026-22747.json => CVE-2026-41462.json} (55%) create mode 100644 2026/CVE-2026-6770.json create mode 100644 2026/CVE-2026-6807.json diff --git a/2016/CVE-2016-10709.json b/2016/CVE-2016-10709.json index 3a0d4c17e6..96d298a2da 100644 --- a/2016/CVE-2016-10709.json +++ b/2016/CVE-2016-10709.json @@ -14,10 +14,10 @@ "description": "CVE-2020-8012, CVE-2016-10709, CVE-2017-17099, CVE-2017-18047, CVE-2019-1003000, CVE-2018-1999002", "fork": false, "created_at": "2017-04-26T02:03:43Z", - "updated_at": "2026-04-12T07:14:02Z", + "updated_at": "2026-04-28T19:29:21Z", "pushed_at": "2026-03-13T00:00:20Z", - "stargazers_count": 79, - "watchers_count": 79, + "stargazers_count": 80, + "watchers_count": 80, "has_discussions": false, "forks_count": 32, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 32, - "watchers": 79, + "watchers": 80, "score": 0, "subscribers_count": 5 } diff --git a/2016/CVE-2016-15042.json b/2016/CVE-2016-15042.json index f17368c493..2f95e2bce7 100644 --- a/2016/CVE-2016-15042.json +++ b/2016/CVE-2016-15042.json @@ -14,8 +14,8 @@ "description": "๐Ÿ› ๏ธ Validate and demonstrate CVE-2016-15042 with a Dockerized lab for unauthenticated file uploads in WordPress file managers.", "fork": false, "created_at": "2023-10-23T05:54:10Z", - "updated_at": "2026-04-28T16:06:13Z", - "pushed_at": "2026-04-28T16:06:05Z", + "updated_at": "2026-04-28T22:47:13Z", + "pushed_at": "2026-04-28T22:47:10Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2017/CVE-2017-17099.json b/2017/CVE-2017-17099.json index 3a0d4c17e6..96d298a2da 100644 --- a/2017/CVE-2017-17099.json +++ b/2017/CVE-2017-17099.json @@ -14,10 +14,10 @@ "description": "CVE-2020-8012, CVE-2016-10709, CVE-2017-17099, CVE-2017-18047, CVE-2019-1003000, CVE-2018-1999002", "fork": false, "created_at": "2017-04-26T02:03:43Z", - "updated_at": "2026-04-12T07:14:02Z", + "updated_at": "2026-04-28T19:29:21Z", "pushed_at": "2026-03-13T00:00:20Z", - "stargazers_count": 79, - "watchers_count": 79, + "stargazers_count": 80, + "watchers_count": 80, "has_discussions": false, "forks_count": 32, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 32, - "watchers": 79, + "watchers": 80, "score": 0, "subscribers_count": 5 } diff --git a/2018/CVE-2018-1999002.json b/2018/CVE-2018-1999002.json index db74c21e7f..21dc8db569 100644 --- a/2018/CVE-2018-1999002.json +++ b/2018/CVE-2018-1999002.json @@ -14,10 +14,10 @@ "description": "CVE-2020-8012, CVE-2016-10709, CVE-2017-17099, CVE-2017-18047, CVE-2019-1003000, CVE-2018-1999002", "fork": false, "created_at": "2017-04-26T02:03:43Z", - "updated_at": "2026-04-12T07:14:02Z", + "updated_at": "2026-04-28T19:29:21Z", "pushed_at": "2026-03-13T00:00:20Z", - "stargazers_count": 79, - "watchers_count": 79, + "stargazers_count": 80, + "watchers_count": 80, "has_discussions": false, "forks_count": 32, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 32, - "watchers": 79, + "watchers": 80, "score": 0, "subscribers_count": 5 }, diff --git a/2018/CVE-2018-7843.json b/2018/CVE-2018-7843.json index fc421f18c4..87801baace 100644 --- a/2018/CVE-2018-7843.json +++ b/2018/CVE-2018-7843.json @@ -19,7 +19,7 @@ "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 0, "score": 0, "subscribers_count": 1 diff --git a/2018/CVE-2018-7844.json b/2018/CVE-2018-7844.json index 1e14aef7e6..ca398624b5 100644 --- a/2018/CVE-2018-7844.json +++ b/2018/CVE-2018-7844.json @@ -19,7 +19,7 @@ "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 0, "score": 0, "subscribers_count": 1 diff --git a/2018/CVE-2018-7845.json b/2018/CVE-2018-7845.json index b7b5cd7932..fcd174c9e8 100644 --- a/2018/CVE-2018-7845.json +++ b/2018/CVE-2018-7845.json @@ -19,7 +19,7 @@ "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 1, "score": 0, "subscribers_count": 1 diff --git a/2019/CVE-2019-1003000.json b/2019/CVE-2019-1003000.json index 53f211c15d..96601d46bd 100644 --- a/2019/CVE-2019-1003000.json +++ b/2019/CVE-2019-1003000.json @@ -14,10 +14,10 @@ "description": "CVE-2020-8012, CVE-2016-10709, CVE-2017-17099, CVE-2017-18047, CVE-2019-1003000, CVE-2018-1999002", "fork": false, "created_at": "2017-04-26T02:03:43Z", - "updated_at": "2026-04-12T07:14:02Z", + "updated_at": "2026-04-28T19:29:21Z", "pushed_at": "2026-03-13T00:00:20Z", - "stargazers_count": 79, - "watchers_count": 79, + "stargazers_count": 80, + "watchers_count": 80, "has_discussions": false, "forks_count": 32, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 32, - "watchers": 79, + "watchers": 80, "score": 0, "subscribers_count": 5 }, diff --git a/2019/CVE-2019-1040.json b/2019/CVE-2019-1040.json index 5d099125bc..b16371ecea 100644 --- a/2019/CVE-2019-1040.json +++ b/2019/CVE-2019-1040.json @@ -179,12 +179,12 @@ "description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.", "fork": false, "created_at": "2025-12-06T19:56:12Z", - "updated_at": "2026-04-28T17:19:56Z", - "pushed_at": "2026-04-28T17:19:50Z", + "updated_at": "2026-04-28T23:33:20Z", + "pushed_at": "2026-04-28T23:33:16Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, - "forks_count": 2, + "forks_count": 3, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -209,7 +209,7 @@ "windows-security" ], "visibility": "public", - "forks": 2, + "forks": 3, "watchers": 1, "score": 0, "subscribers_count": 0 diff --git a/2020/CVE-2020-0610.json b/2020/CVE-2020-0610.json index 4f0be34f74..43e10b3a28 100644 --- a/2020/CVE-2020-0610.json +++ b/2020/CVE-2020-0610.json @@ -58,8 +58,8 @@ "description": "๐Ÿ” Create a safe lab environment for testing CVE-2020-0610, a critical RCE vulnerability in Windows RD Gateway, with minimal disruption using DTLS techniques.", "fork": false, "created_at": "2025-09-04T13:21:35Z", - "updated_at": "2026-04-28T16:06:09Z", - "pushed_at": "2026-04-28T16:06:04Z", + "updated_at": "2026-04-28T22:47:02Z", + "pushed_at": "2026-04-28T22:46:58Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2020/CVE-2020-1472.json b/2020/CVE-2020-1472.json index 609db249bd..b5aa3fed5e 100644 --- a/2020/CVE-2020-1472.json +++ b/2020/CVE-2020-1472.json @@ -2383,8 +2383,8 @@ "description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.", "fork": false, "created_at": "2025-12-06T10:17:38Z", - "updated_at": "2026-04-28T17:19:52Z", - "pushed_at": "2026-04-28T17:19:48Z", + "updated_at": "2026-04-29T00:03:42Z", + "pushed_at": "2026-04-29T00:03:37Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2020/CVE-2020-8012.json b/2020/CVE-2020-8012.json index 3a0d4c17e6..96d298a2da 100644 --- a/2020/CVE-2020-8012.json +++ b/2020/CVE-2020-8012.json @@ -14,10 +14,10 @@ "description": "CVE-2020-8012, CVE-2016-10709, CVE-2017-17099, CVE-2017-18047, CVE-2019-1003000, CVE-2018-1999002", "fork": false, "created_at": "2017-04-26T02:03:43Z", - "updated_at": "2026-04-12T07:14:02Z", + "updated_at": "2026-04-28T19:29:21Z", "pushed_at": "2026-03-13T00:00:20Z", - "stargazers_count": 79, - "watchers_count": 79, + "stargazers_count": 80, + "watchers_count": 80, "has_discussions": false, "forks_count": 32, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 32, - "watchers": 79, + "watchers": 80, "score": 0, "subscribers_count": 5 } diff --git a/2021/CVE-2021-33044.json b/2021/CVE-2021-33044.json index a7e286945d..8ac680116a 100644 --- a/2021/CVE-2021-33044.json +++ b/2021/CVE-2021-33044.json @@ -212,8 +212,8 @@ "description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.", "fork": false, "created_at": "2026-03-28T17:42:44Z", - "updated_at": "2026-04-28T17:18:17Z", - "pushed_at": "2026-04-28T17:18:10Z", + "updated_at": "2026-04-28T23:35:21Z", + "pushed_at": "2026-04-28T23:35:17Z", "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, diff --git a/2021/CVE-2021-4034.json b/2021/CVE-2021-4034.json index ef63b19dc4..e8f8d3d8dd 100644 --- a/2021/CVE-2021-4034.json +++ b/2021/CVE-2021-4034.json @@ -2050,8 +2050,8 @@ "description": "๐Ÿš€ Enhance your penetration testing with PwnKit Helper, a simple tool for exploiting the CVE-2021-4034 vulnerability in pkexec for local privilege escalation.", "fork": false, "created_at": "2025-10-01T09:53:03Z", - "updated_at": "2026-04-28T16:17:35Z", - "pushed_at": "2026-04-28T16:14:34Z", + "updated_at": "2026-04-28T22:53:42Z", + "pushed_at": "2026-04-28T22:53:38Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2021/CVE-2021-41773.json b/2021/CVE-2021-41773.json index e935fceeb4..e5a54227b2 100644 --- a/2021/CVE-2021-41773.json +++ b/2021/CVE-2021-41773.json @@ -4780,8 +4780,8 @@ "description": "We hope to reproduce CVE-2021-41773 to deepen our understanding of real-world cybersecurity vulnerabilities so that we can be knowledgeable about exploits in industry and academic work.", "fork": false, "created_at": "2026-04-20T03:39:39Z", - "updated_at": "2026-04-28T05:49:09Z", - "pushed_at": "2026-04-28T05:49:06Z", + "updated_at": "2026-04-28T23:42:57Z", + "pushed_at": "2026-04-28T23:42:53Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2022/CVE-2022-32250.json b/2022/CVE-2022-32250.json index b3a2f7e274..356fef0094 100644 --- a/2022/CVE-2022-32250.json +++ b/2022/CVE-2022-32250.json @@ -19,7 +19,7 @@ "stargazers_count": 177, "watchers_count": 177, "has_discussions": false, - "forks_count": 45, + "forks_count": 44, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 45, + "forks": 44, "watchers": 177, "score": 0, "subscribers_count": 3 diff --git a/2022/CVE-2022-39227.json b/2022/CVE-2022-39227.json index 124bfd38a3..7ba0a297aa 100644 --- a/2022/CVE-2022-39227.json +++ b/2022/CVE-2022-39227.json @@ -89,8 +89,8 @@ "description": null, "fork": false, "created_at": "2026-04-27T23:32:48Z", - "updated_at": "2026-04-27T23:48:58Z", - "pushed_at": "2026-04-27T23:48:54Z", + "updated_at": "2026-04-28T21:32:07Z", + "pushed_at": "2026-04-28T21:32:02Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2023/CVE-2023-20963.json b/2023/CVE-2023-20963.json index 2ede25c774..e1b8e70a32 100644 --- a/2023/CVE-2023-20963.json +++ b/2023/CVE-2023-20963.json @@ -14,10 +14,10 @@ "description": "CVE-2023-20963 PoC (Android WorkSource parcel\/unparcel logic mismatch)", "fork": false, "created_at": "2023-06-12T10:44:59Z", - "updated_at": "2026-04-17T05:55:07Z", + "updated_at": "2026-04-28T20:35:40Z", "pushed_at": "2024-04-27T20:15:24Z", - "stargazers_count": 76, - "watchers_count": 76, + "stargazers_count": 75, + "watchers_count": 75, "has_discussions": false, "forks_count": 12, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 12, - "watchers": 76, + "watchers": 75, "score": 0, "subscribers_count": 1 }, diff --git a/2023/CVE-2023-32434.json b/2023/CVE-2023-32434.json index ad0766bbe8..c9161c018e 100644 --- a/2023/CVE-2023-32434.json +++ b/2023/CVE-2023-32434.json @@ -47,8 +47,8 @@ "description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0โ€“10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. ๐Ÿ™", "fork": false, "created_at": "2025-08-13T09:19:29Z", - "updated_at": "2026-04-28T16:01:16Z", - "pushed_at": "2026-04-28T16:01:12Z", + "updated_at": "2026-04-28T22:43:27Z", + "pushed_at": "2026-04-28T22:43:22Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2023/CVE-2023-38709.json b/2023/CVE-2023-38709.json index dd5a390e40..16a3152671 100644 --- a/2023/CVE-2023-38709.json +++ b/2023/CVE-2023-38709.json @@ -14,12 +14,12 @@ "description": "Apache HTTP Server Vulnerability Testing Tool | PoC for CVE-2024-38472 , CVE-2024-39573 , CVE-2024-38477 , CVE-2024-38476 , CVE-2024-38475 , CVE-2024-38474 , CVE-2024-38473 , CVE-2023-38709", "fork": false, "created_at": "2024-10-05T20:32:45Z", - "updated_at": "2026-04-27T20:36:41Z", + "updated_at": "2026-04-28T22:58:40Z", "pushed_at": "2024-10-05T20:37:02Z", - "stargazers_count": 128, - "watchers_count": 128, + "stargazers_count": 129, + "watchers_count": 129, "has_discussions": false, - "forks_count": 17, + "forks_count": 18, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -38,8 +38,8 @@ "cve-2024-39573" ], "visibility": "public", - "forks": 17, - "watchers": 128, + "forks": 18, + "watchers": 129, "score": 0, "subscribers_count": 1 } diff --git a/2023/CVE-2023-39910.json b/2023/CVE-2023-39910.json index f5f3d772cc..1d034b4433 100644 --- a/2023/CVE-2023-39910.json +++ b/2023/CVE-2023-39910.json @@ -66,8 +66,8 @@ "description": "๐Ÿ”’ Analyze the CVE-2023-39910 vulnerability in Libbitcoin Explorer to understand its impact on Bitcoin wallet security and protect your assets.", "fork": false, "created_at": "2026-01-07T14:24:08Z", - "updated_at": "2026-04-28T17:22:20Z", - "pushed_at": "2026-04-28T17:22:15Z", + "updated_at": "2026-04-28T23:45:57Z", + "pushed_at": "2026-04-28T23:45:54Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-0044.json b/2024/CVE-2024-0044.json index 989839d970..880a1df234 100644 --- a/2024/CVE-2024-0044.json +++ b/2024/CVE-2024-0044.json @@ -14,10 +14,10 @@ "description": "Exfiltrate sensitive user data from apps on Android 12 and 13 using CVE-2024-0044 vulnerability remotely", "fork": false, "created_at": "2024-06-18T09:22:59Z", - "updated_at": "2026-03-01T05:40:13Z", + "updated_at": "2026-04-28T20:35:43Z", "pushed_at": "2024-07-31T01:29:36Z", - "stargazers_count": 77, - "watchers_count": 77, + "stargazers_count": 76, + "watchers_count": 76, "has_discussions": false, "forks_count": 14, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 14, - "watchers": 77, + "watchers": 76, "score": 0, "subscribers_count": 3 }, @@ -47,10 +47,10 @@ "description": "CVE-2024-0044: a \"run-as any app\" high-severity vulnerability affecting Android versions 12 and 13", "fork": false, "created_at": "2024-06-18T12:30:53Z", - "updated_at": "2026-04-17T05:27:42Z", + "updated_at": "2026-04-28T20:35:43Z", "pushed_at": "2024-12-02T06:29:52Z", - "stargazers_count": 332, - "watchers_count": 332, + "stargazers_count": 331, + "watchers_count": 331, "has_discussions": false, "forks_count": 68, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 68, - "watchers": 332, + "watchers": 331, "score": 0, "subscribers_count": 7 }, diff --git a/2024/CVE-2024-0670.json b/2024/CVE-2024-0670.json index e39b5d01eb..28c6ae7aa5 100644 --- a/2024/CVE-2024-0670.json +++ b/2024/CVE-2024-0670.json @@ -172,8 +172,8 @@ "description": "๐Ÿ” Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.", "fork": false, "created_at": "2026-01-08T01:32:09Z", - "updated_at": "2026-04-28T17:22:57Z", - "pushed_at": "2026-04-28T17:22:53Z", + "updated_at": "2026-04-28T23:46:18Z", + "pushed_at": "2026-04-28T23:46:14Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-23222.json b/2024/CVE-2024-23222.json index 6737fc60db..ba6cd3be5e 100644 --- a/2024/CVE-2024-23222.json +++ b/2024/CVE-2024-23222.json @@ -80,8 +80,8 @@ "description": "Analyze and deobfuscate the Coruna Exploit Kit (CVE-2024-23222) to enhance understanding and detection of related threats.", "fork": false, "created_at": "2026-03-15T16:36:07Z", - "updated_at": "2026-04-28T18:32:39Z", - "pushed_at": "2026-04-28T18:32:36Z", + "updated_at": "2026-04-29T00:31:20Z", + "pushed_at": "2026-04-29T00:31:17Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2024/CVE-2024-30088.json b/2024/CVE-2024-30088.json index 46a3b3cd8a..2e86d285d3 100644 --- a/2024/CVE-2024-30088.json +++ b/2024/CVE-2024-30088.json @@ -245,8 +245,8 @@ "description": "Go offensive-security research library โ€” 15+ injection methods, AMSI\/ETW\/ntdll-unhook evasion, sleep mask (Ekko ร— XOR\/RC4\/AES), call-stack spoof, BYOVD (RTCore64) + kernel callback removal, LSASS dump + pure-Go MSV1_0 parser w\/ PPL bypass, recon (sandbox\/VM\/debugger\/dllhijack), PE ops (sRDI\/BOF\/CLR), Meterpreter C2, UAC bypass, CVE-2024-30088 LPE.", "fork": false, "created_at": "2026-04-01T08:15:08Z", - "updated_at": "2026-04-28T14:39:55Z", - "pushed_at": "2026-04-28T14:29:26Z", + "updated_at": "2026-04-28T22:33:24Z", + "pushed_at": "2026-04-28T22:33:21Z", "stargazers_count": 4, "watchers_count": 4, "has_discussions": true, diff --git a/2024/CVE-2024-31317.json b/2024/CVE-2024-31317.json index ec604fdce8..84b73ce662 100644 --- a/2024/CVE-2024-31317.json +++ b/2024/CVE-2024-31317.json @@ -14,10 +14,10 @@ "description": "CVE-2024-31317", "fork": false, "created_at": "2024-12-05T01:36:59Z", - "updated_at": "2026-02-09T07:43:24Z", + "updated_at": "2026-04-28T20:35:44Z", "pushed_at": "2024-12-05T01:52:45Z", - "stargazers_count": 64, - "watchers_count": 64, + "stargazers_count": 63, + "watchers_count": 63, "has_discussions": false, "forks_count": 20, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 20, - "watchers": 64, + "watchers": 63, "score": 0, "subscribers_count": 2 }, @@ -80,10 +80,10 @@ "description": "A command-line utility to exploit Android Zygote injection (CVE-2024-31317)", "fork": false, "created_at": "2025-04-17T16:20:00Z", - "updated_at": "2026-04-23T17:27:38Z", + "updated_at": "2026-04-28T20:35:45Z", "pushed_at": "2025-12-17T19:16:05Z", - "stargazers_count": 56, - "watchers_count": 56, + "stargazers_count": 55, + "watchers_count": 55, "has_discussions": false, "forks_count": 18, "allow_forking": true, @@ -94,7 +94,7 @@ "topics": [], "visibility": "public", "forks": 18, - "watchers": 56, + "watchers": 55, "score": 0, "subscribers_count": 3 }, diff --git a/2024/CVE-2024-38472.json b/2024/CVE-2024-38472.json index 9ddea7bd2b..0378da9ce0 100644 --- a/2024/CVE-2024-38472.json +++ b/2024/CVE-2024-38472.json @@ -47,12 +47,12 @@ "description": "Apache HTTP Server Vulnerability Testing Tool | PoC for CVE-2024-38472 , CVE-2024-39573 , CVE-2024-38477 , CVE-2024-38476 , CVE-2024-38475 , CVE-2024-38474 , CVE-2024-38473 , CVE-2023-38709", "fork": false, "created_at": "2024-10-05T20:32:45Z", - "updated_at": "2026-04-27T20:36:41Z", + "updated_at": "2026-04-28T22:58:40Z", "pushed_at": "2024-10-05T20:37:02Z", - "stargazers_count": 128, - "watchers_count": 128, + "stargazers_count": 129, + "watchers_count": 129, "has_discussions": false, - "forks_count": 17, + "forks_count": 18, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -71,8 +71,8 @@ "cve-2024-39573" ], "visibility": "public", - "forks": 17, - "watchers": 128, + "forks": 18, + "watchers": 129, "score": 0, "subscribers_count": 1 } diff --git a/2024/CVE-2024-4577.json b/2024/CVE-2024-4577.json index 9a35e1f21e..4f1858fba9 100644 --- a/2024/CVE-2024-4577.json +++ b/2024/CVE-2024-4577.json @@ -648,10 +648,10 @@ "description": "PHP CGI Argument Injection vulnerability", "fork": false, "created_at": "2024-06-09T14:18:21Z", - "updated_at": "2026-04-20T07:24:50Z", + "updated_at": "2026-04-28T21:46:08Z", "pushed_at": "2026-01-24T07:26:01Z", - "stargazers_count": 32, - "watchers_count": 32, + "stargazers_count": 33, + "watchers_count": 33, "has_discussions": false, "forks_count": 11, "allow_forking": true, @@ -662,7 +662,7 @@ "topics": [], "visibility": "public", "forks": 11, - "watchers": 32, + "watchers": 33, "score": 0, "subscribers_count": 1 }, diff --git a/2024/CVE-2024-56348.json b/2024/CVE-2024-56348.json index 4d503aedde..53b0b4c464 100644 --- a/2024/CVE-2024-56348.json +++ b/2024/CVE-2024-56348.json @@ -14,8 +14,8 @@ "description": "Demonstrate an authentication bypass and remote code execution exploit targeting JetBrains TeamCity versions before 2024.12 via REST API abuse.", "fork": false, "created_at": "2025-09-17T01:48:09Z", - "updated_at": "2026-04-28T18:37:05Z", - "pushed_at": "2026-04-28T18:37:00Z", + "updated_at": "2026-04-29T00:34:27Z", + "pushed_at": "2026-04-29T00:34:23Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-56426.json b/2024/CVE-2024-56426.json index bfde180eb1..d9b94bc744 100644 --- a/2024/CVE-2024-56426.json +++ b/2024/CVE-2024-56426.json @@ -14,8 +14,8 @@ "description": "A PoC of the CVE-2024-56426 vulnerability.", "fork": false, "created_at": "2026-04-07T12:02:52Z", - "updated_at": "2026-04-23T17:25:11Z", - "pushed_at": "2026-04-28T15:57:43Z", + "updated_at": "2026-04-28T20:20:20Z", + "pushed_at": "2026-04-28T20:36:22Z", "stargazers_count": 6, "watchers_count": 6, "has_discussions": false, diff --git a/2025/CVE-2025-14847.json b/2025/CVE-2025-14847.json index df0d2a66bf..ca941fb866 100644 --- a/2025/CVE-2025-14847.json +++ b/2025/CVE-2025-14847.json @@ -14,8 +14,8 @@ "description": "๐Ÿ›  Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.", "fork": false, "created_at": "2025-07-30T15:52:00Z", - "updated_at": "2026-04-28T17:31:00Z", - "pushed_at": "2026-04-28T17:30:55Z", + "updated_at": "2026-04-28T23:51:15Z", + "pushed_at": "2026-04-28T23:51:11Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -1129,8 +1129,8 @@ "description": "๐Ÿ” Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.", "fork": false, "created_at": "2026-01-14T06:05:44Z", - "updated_at": "2026-04-28T17:29:13Z", - "pushed_at": "2026-04-28T17:29:08Z", + "updated_at": "2026-04-28T23:50:23Z", + "pushed_at": "2026-04-28T23:50:19Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-21479.json b/2025/CVE-2025-21479.json index 4cf8c32676..acb627c514 100644 --- a/2025/CVE-2025-21479.json +++ b/2025/CVE-2025-21479.json @@ -19,7 +19,7 @@ "stargazers_count": 237, "watchers_count": 237, "has_discussions": false, - "forks_count": 53, + "forks_count": 52, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 53, + "forks": 52, "watchers": 237, "score": 0, "subscribers_count": 2 diff --git a/2025/CVE-2025-2304.json b/2025/CVE-2025-2304.json index 4d0ff5f7ee..bfc2a3cf7f 100644 --- a/2025/CVE-2025-2304.json +++ b/2025/CVE-2025-2304.json @@ -412,8 +412,8 @@ "description": "๐Ÿ› ๏ธ Exploit CVE-2025-2304 in Camaleon CMS easily with this Python script for privilege escalation, tested on version 2.9.0.", "fork": false, "created_at": "2026-02-14T20:01:20Z", - "updated_at": "2026-04-28T18:03:29Z", - "pushed_at": "2026-04-28T18:03:25Z", + "updated_at": "2026-04-29T00:11:58Z", + "pushed_at": "2026-04-29T00:11:55Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-24257.json b/2025/CVE-2025-24257.json index 5084f7edce..5443d29e63 100644 --- a/2025/CVE-2025-24257.json +++ b/2025/CVE-2025-24257.json @@ -14,8 +14,8 @@ "description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis", "fork": false, "created_at": "2026-04-04T03:42:55Z", - "updated_at": "2026-04-28T18:48:09Z", - "pushed_at": "2026-04-28T18:48:05Z", + "updated_at": "2026-04-29T00:42:52Z", + "pushed_at": "2026-04-29T00:42:48Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-31258.json b/2025/CVE-2025-31258.json index e21d9e9706..127eb8805c 100644 --- a/2025/CVE-2025-31258.json +++ b/2025/CVE-2025-31258.json @@ -14,8 +14,8 @@ "description": "๐Ÿ”“ Explore CVE-2025-31258 with this PoC demonstrating partial sandbox escape using RemoteViewServices for practical 1-day security practice.", "fork": false, "created_at": "2020-06-23T15:20:11Z", - "updated_at": "2026-04-28T16:08:27Z", - "pushed_at": "2026-04-28T16:08:22Z", + "updated_at": "2026-04-28T22:48:53Z", + "pushed_at": "2026-04-28T22:48:48Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-32463.json b/2025/CVE-2025-32463.json index c0b28e6971..53955e934f 100644 --- a/2025/CVE-2025-32463.json +++ b/2025/CVE-2025-32463.json @@ -645,8 +645,8 @@ "description": "Demonstrate CVE-2025-32463 with this PoC for sudo's chroot feature. Explore the exploit and its impact on vulnerable sudo versions. ๐Ÿฑ๐Ÿ’ป๐Ÿ”’", "fork": false, "created_at": "2025-07-04T18:20:09Z", - "updated_at": "2026-04-28T15:59:08Z", - "pushed_at": "2026-04-28T15:59:04Z", + "updated_at": "2026-04-28T22:41:58Z", + "pushed_at": "2026-04-28T22:41:54Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -1628,8 +1628,8 @@ "description": "๐Ÿ” Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.", "fork": false, "created_at": "2025-09-20T00:42:07Z", - "updated_at": "2026-04-28T16:09:53Z", - "pushed_at": "2026-04-28T16:09:49Z", + "updated_at": "2026-04-28T22:50:00Z", + "pushed_at": "2026-04-28T22:49:56Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -1680,8 +1680,8 @@ "description": null, "fork": false, "created_at": "2025-09-20T02:01:08Z", - "updated_at": "2026-04-28T16:09:59Z", - "pushed_at": "2026-04-28T16:09:54Z", + "updated_at": "2026-04-28T22:50:04Z", + "pushed_at": "2026-04-28T22:50:01Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-36911.json b/2025/CVE-2025-36911.json index bea42f3b91..1155f41e87 100644 --- a/2025/CVE-2025-36911.json +++ b/2025/CVE-2025-36911.json @@ -86,10 +86,10 @@ "description": "WPair is a defensive security research tool that demonstrates the CVE-2025-36911 (eg WhisperPair) vulnerability in Google's Fast Pair protocol. This vulnerability affects millions of Bluetooth audio devices worldwide, allowing unauthorized pairing and potential microphone access without user consent.", "fork": false, "created_at": "2026-01-17T05:28:08Z", - "updated_at": "2026-04-28T12:46:51Z", + "updated_at": "2026-04-28T21:07:35Z", "pushed_at": "2026-01-18T00:15:59Z", - "stargazers_count": 769, - "watchers_count": 769, + "stargazers_count": 770, + "watchers_count": 770, "has_discussions": false, "forks_count": 87, "allow_forking": true, @@ -100,7 +100,7 @@ "topics": [], "visibility": "public", "forks": 87, - "watchers": 769, + "watchers": 770, "score": 0, "subscribers_count": 22 }, @@ -294,8 +294,8 @@ "description": "๐Ÿ” Scan and research CVE-2025-36911 vulnerabilities with WPair, a specialized tool for Android built in Kotlin, ensuring your applications remain secure.", "fork": false, "created_at": "2026-01-29T01:59:47Z", - "updated_at": "2026-04-28T17:47:35Z", - "pushed_at": "2026-04-28T17:47:30Z", + "updated_at": "2026-04-29T00:02:04Z", + "pushed_at": "2026-04-29T00:02:00Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-49144.json b/2025/CVE-2025-49144.json index 54ecbd99e3..6568e37de8 100644 --- a/2025/CVE-2025-49144.json +++ b/2025/CVE-2025-49144.json @@ -251,8 +251,8 @@ "description": null, "fork": false, "created_at": "2025-09-19T17:17:19Z", - "updated_at": "2026-04-28T16:09:41Z", - "pushed_at": "2026-04-28T16:09:37Z", + "updated_at": "2026-04-28T22:49:54Z", + "pushed_at": "2026-04-28T22:49:50Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-49844.json b/2025/CVE-2025-49844.json index 7a973b61ec..cb087f8a01 100644 --- a/2025/CVE-2025-49844.json +++ b/2025/CVE-2025-49844.json @@ -14,8 +14,8 @@ "description": "๐Ÿ” Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.", "fork": false, "created_at": "2019-04-13T07:51:09Z", - "updated_at": "2026-04-28T16:32:15Z", - "pushed_at": "2026-04-28T16:32:00Z", + "updated_at": "2026-04-28T23:07:30Z", + "pushed_at": "2026-04-28T23:07:27Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -66,8 +66,8 @@ "description": "๐Ÿšจ Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.", "fork": false, "created_at": "2022-04-06T09:27:39Z", - "updated_at": "2026-04-28T16:33:22Z", - "pushed_at": "2026-04-28T16:32:58Z", + "updated_at": "2026-04-28T23:08:15Z", + "pushed_at": "2026-04-28T23:08:11Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-5419.json b/2025/CVE-2025-5419.json index be8de7575d..34cf4fef2e 100644 --- a/2025/CVE-2025-5419.json +++ b/2025/CVE-2025-5419.json @@ -14,8 +14,8 @@ "description": "๐Ÿ›ก๏ธ Analyze CVE-2025-5419 to exploit an uninitialized read vulnerability in V8 for arbitrary read\/write access within the sandbox environment.", "fork": false, "created_at": "2023-01-25T04:41:49Z", - "updated_at": "2026-04-28T18:00:53Z", - "pushed_at": "2026-04-28T18:00:39Z", + "updated_at": "2026-04-29T00:10:15Z", + "pushed_at": "2026-04-29T00:10:11Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-54253.json b/2025/CVE-2025-54253.json index ad0f4fea11..afec5dbc98 100644 --- a/2025/CVE-2025-54253.json +++ b/2025/CVE-2025-54253.json @@ -67,8 +67,8 @@ "description": "๐Ÿ™ CVE-2025-54253 exploit demo for Adobe AEM Forms on JEE: OGNL injection to RCE with PoC, Python 3.10 exploit code, reproducer and mitigation guidance.", "fork": false, "created_at": "2025-08-17T22:04:33Z", - "updated_at": "2026-04-28T16:02:54Z", - "pushed_at": "2026-04-28T16:02:49Z", + "updated_at": "2026-04-28T22:44:33Z", + "pushed_at": "2026-04-28T22:44:30Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2025/CVE-2025-54424.json b/2025/CVE-2025-54424.json index 36ad6d2889..f4cad4984d 100644 --- a/2025/CVE-2025-54424.json +++ b/2025/CVE-2025-54424.json @@ -53,8 +53,8 @@ "description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. ๐Ÿ”", "fork": false, "created_at": "2025-08-14T05:16:16Z", - "updated_at": "2026-04-28T16:02:23Z", - "pushed_at": "2026-04-28T16:02:18Z", + "updated_at": "2026-04-28T22:44:12Z", + "pushed_at": "2026-04-28T22:44:08Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2025/CVE-2025-55130.json b/2025/CVE-2025-55130.json index 3d4069e9b8..6aa777d7db 100644 --- a/2025/CVE-2025-55130.json +++ b/2025/CVE-2025-55130.json @@ -14,10 +14,10 @@ "description": "POC for CVE-2025-55130", "fork": false, "created_at": "2026-02-01T17:25:42Z", - "updated_at": "2026-02-01T17:26:35Z", + "updated_at": "2026-04-28T22:51:51Z", "pushed_at": "2026-02-01T17:26:32Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2025/CVE-2025-55182.json b/2025/CVE-2025-55182.json index 373be7b1df..c5ea9cc32f 100644 --- a/2025/CVE-2025-55182.json +++ b/2025/CVE-2025-55182.json @@ -14,8 +14,8 @@ "description": "๐Ÿ” Demonstrate CVE-2025-55182, a critical vulnerability in React Server Components allowing unauthenticated arbitrary code execution.", "fork": false, "created_at": "2021-09-18T02:04:33Z", - "updated_at": "2026-04-28T17:09:18Z", - "pushed_at": "2026-04-28T17:09:12Z", + "updated_at": "2026-04-28T23:37:10Z", + "pushed_at": "2026-04-28T23:37:06Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -66,8 +66,8 @@ "description": "๐Ÿ” Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.", "fork": false, "created_at": "2022-06-17T10:19:10Z", - "updated_at": "2026-04-28T17:08:37Z", - "pushed_at": "2026-04-28T17:08:33Z", + "updated_at": "2026-04-28T23:36:41Z", + "pushed_at": "2026-04-28T23:36:37Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -151,8 +151,8 @@ "description": "๐Ÿ” Detect vulnerabilities CVE-2025-55182 and CVE-2025-66478 in Next.js apps with this reliable command-line scanner.", "fork": false, "created_at": "2023-11-27T18:17:43Z", - "updated_at": "2026-04-28T17:08:57Z", - "pushed_at": "2026-04-28T17:08:41Z", + "updated_at": "2026-04-28T23:37:06Z", + "pushed_at": "2026-04-28T23:37:02Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -203,8 +203,8 @@ "description": "๐Ÿšจ Exploit CVE-2025-55182, a critical RCE vulnerability in React Server Components for Next.js apps; enables testing for prototype pollution risks.", "fork": false, "created_at": "2024-04-24T02:36:56Z", - "updated_at": "2026-04-28T17:10:05Z", - "pushed_at": "2026-04-28T17:09:54Z", + "updated_at": "2026-04-28T23:37:51Z", + "pushed_at": "2026-04-28T23:37:47Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -251,8 +251,8 @@ "description": "๐Ÿšจ Exploit and scan for CVE-2025-55182, a critical React\/Next.js vulnerability enabling remote code execution through prototype pollution techniques.", "fork": false, "created_at": "2024-05-28T16:48:51Z", - "updated_at": "2026-04-28T17:08:09Z", - "pushed_at": "2026-04-28T17:08:05Z", + "updated_at": "2026-04-28T23:36:18Z", + "pushed_at": "2026-04-28T23:36:15Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -303,8 +303,8 @@ "description": null, "fork": false, "created_at": "2024-11-29T12:32:19Z", - "updated_at": "2026-04-28T17:09:27Z", - "pushed_at": "2026-04-28T17:09:23Z", + "updated_at": "2026-04-28T23:37:30Z", + "pushed_at": "2026-04-28T23:37:26Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -352,8 +352,8 @@ "description": "๐Ÿ› ๏ธ Exploit CVE-2025-55182 effortlessly with this GUI tool for vulnerability detection, command execution, and Shell reverse connections.", "fork": false, "created_at": "2025-04-21T22:04:31Z", - "updated_at": "2026-04-28T17:13:31Z", - "pushed_at": "2026-04-28T17:13:26Z", + "updated_at": "2026-04-28T23:40:28Z", + "pushed_at": "2026-04-28T23:40:23Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -406,8 +406,8 @@ "description": "๐Ÿšจ Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.", "fork": false, "created_at": "2025-06-06T16:34:46Z", - "updated_at": "2026-04-28T17:08:49Z", - "pushed_at": "2026-04-28T17:08:45Z", + "updated_at": "2026-04-28T23:37:00Z", + "pushed_at": "2026-04-28T23:36:56Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -458,8 +458,8 @@ "description": "โš ๏ธ Explore a vulnerable environment to test security scanners against the CVE-2025-55182 RCE flaw in React Server Components and Next.js applications.", "fork": false, "created_at": "2025-07-15T18:33:34Z", - "updated_at": "2026-04-28T17:10:03Z", - "pushed_at": "2026-04-28T17:10:00Z", + "updated_at": "2026-04-28T23:37:45Z", + "pushed_at": "2026-04-28T23:37:41Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -12284,8 +12284,8 @@ "description": "๐Ÿ›ก๏ธ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.", "fork": false, "created_at": "2025-12-24T14:48:19Z", - "updated_at": "2026-04-28T17:08:24Z", - "pushed_at": "2026-04-28T17:08:20Z", + "updated_at": "2026-04-28T23:36:37Z", + "pushed_at": "2026-04-28T23:36:33Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -12369,8 +12369,8 @@ "description": "๐Ÿšจ Identify and address CVE-2025-55182, a critical React Server vulnerability allowing remote code execution without authentication.", "fork": false, "created_at": "2025-12-24T18:44:51Z", - "updated_at": "2026-04-28T17:07:37Z", - "pushed_at": "2026-04-28T17:07:33Z", + "updated_at": "2026-04-28T23:35:59Z", + "pushed_at": "2026-04-28T23:35:56Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -12418,8 +12418,8 @@ "description": "๐Ÿšจ Demonstrate CVE-2025-55182, a critical React vulnerability allowing remote code execution via prototype chain pollution in `react-server-dom-webpack@19.0.0`.", "fork": false, "created_at": "2025-12-24T18:48:07Z", - "updated_at": "2026-04-28T17:07:44Z", - "pushed_at": "2026-04-28T17:07:40Z", + "updated_at": "2026-04-28T23:35:56Z", + "pushed_at": "2026-04-28T23:35:52Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -12503,8 +12503,8 @@ "description": "๐Ÿ” Exploit CVE-2025-55182 in Next.js with this versatile tool for security research, featuring advanced payloads and WAF bypass techniques.", "fork": false, "created_at": "2025-12-25T19:28:28Z", - "updated_at": "2026-04-28T17:09:38Z", - "pushed_at": "2026-04-28T17:09:22Z", + "updated_at": "2026-04-28T23:37:24Z", + "pushed_at": "2026-04-28T23:37:21Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -12705,8 +12705,8 @@ "description": "โšก Discover and exploit CVE-2025-55182 with this PoC, offering reliable remote code execution tests for React Server Components in Next.js.", "fork": false, "created_at": "2025-12-26T22:26:55Z", - "updated_at": "2026-04-28T17:09:32Z", - "pushed_at": "2026-04-28T17:09:28Z", + "updated_at": "2026-04-28T23:37:22Z", + "pushed_at": "2026-04-28T23:37:19Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -12975,8 +12975,8 @@ "description": "๐Ÿ›ก๏ธ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.", "fork": false, "created_at": "2026-01-02T01:28:57Z", - "updated_at": "2026-04-28T17:16:12Z", - "pushed_at": "2026-04-28T17:16:07Z", + "updated_at": "2026-04-28T23:41:54Z", + "pushed_at": "2026-04-28T23:41:50Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -13496,8 +13496,8 @@ "description": "๐Ÿ” Exploit CVE-2025-55182 vulnerabilities in Next.js and React with this efficient framework for rapid testing and assessment.", "fork": false, "created_at": "2026-01-08T16:28:04Z", - "updated_at": "2026-04-28T17:24:08Z", - "pushed_at": "2026-04-28T17:24:03Z", + "updated_at": "2026-04-28T23:47:07Z", + "pushed_at": "2026-04-28T23:47:03Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-55184.json b/2025/CVE-2025-55184.json index 8e3af33a96..e9bd647d77 100644 --- a/2025/CVE-2025-55184.json +++ b/2025/CVE-2025-55184.json @@ -289,8 +289,8 @@ "description": "๐Ÿ› ๏ธ Test and validate the CVE-2025-55184 vulnerability in React Server Components to enhance your application's security against denial-of-service attacks.", "fork": false, "created_at": "2026-01-02T05:04:03Z", - "updated_at": "2026-04-28T17:16:48Z", - "pushed_at": "2026-04-28T17:16:43Z", + "updated_at": "2026-04-28T23:42:23Z", + "pushed_at": "2026-04-28T23:42:19Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-58434.json b/2025/CVE-2025-58434.json index 0d564ca55b..4dd1f3206a 100644 --- a/2025/CVE-2025-58434.json +++ b/2025/CVE-2025-58434.json @@ -391,10 +391,10 @@ "description": "Hack The Box - Silentium machine writeup | CVE-2025-58434, CVE-2025-59528, CVE-2025-8110", "fork": false, "created_at": "2026-04-22T10:41:27Z", - "updated_at": "2026-04-23T11:45:28Z", + "updated_at": "2026-04-28T19:22:09Z", "pushed_at": "2026-04-22T10:46:56Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -405,7 +405,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 } diff --git a/2025/CVE-2025-59287.json b/2025/CVE-2025-59287.json index eb7a59f3b2..e70b8ee651 100644 --- a/2025/CVE-2025-59287.json +++ b/2025/CVE-2025-59287.json @@ -200,8 +200,8 @@ "description": "๐Ÿ” Analyze WSUS deserialization behavior to enhance security, generate reports, and identify configuration weaknesses in your infrastructure.", "fork": false, "created_at": "2026-01-29T02:16:04Z", - "updated_at": "2026-04-28T17:47:35Z", - "pushed_at": "2026-04-28T17:47:31Z", + "updated_at": "2026-04-29T00:02:04Z", + "pushed_at": "2026-04-29T00:02:00Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-61882.json b/2025/CVE-2025-61882.json index e1e89999c5..96eac3b198 100644 --- a/2025/CVE-2025-61882.json +++ b/2025/CVE-2025-61882.json @@ -14,8 +14,8 @@ "description": "๐Ÿ” Detect vulnerabilities CVE-2025-61882 and CVE-2025-61884 in Oracle E-Business Suite to help secure your systems from potential remote code execution threats.", "fork": false, "created_at": "2025-03-04T15:38:32Z", - "updated_at": "2026-04-28T16:30:13Z", - "pushed_at": "2026-04-28T16:30:06Z", + "updated_at": "2026-04-28T23:06:03Z", + "pushed_at": "2026-04-28T23:05:59Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-6554.json b/2025/CVE-2025-6554.json index ea46aa9997..2753807020 100644 --- a/2025/CVE-2025-6554.json +++ b/2025/CVE-2025-6554.json @@ -179,8 +179,8 @@ "description": "๐Ÿ” Demonstrate and validate the `addressof` and `fakeobj` primitives in the V8 sandbox for advanced security research on CVE-2025-6554.", "fork": false, "created_at": "2025-08-10T21:07:43Z", - "updated_at": "2026-04-28T17:02:19Z", - "pushed_at": "2026-04-28T17:02:15Z", + "updated_at": "2026-04-28T23:31:49Z", + "pushed_at": "2026-04-28T23:31:45Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-66398.json b/2025/CVE-2025-66398.json index 305de4ecf5..a6234ce57f 100644 --- a/2025/CVE-2025-66398.json +++ b/2025/CVE-2025-66398.json @@ -64,8 +64,8 @@ "description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.", "fork": false, "created_at": "2026-03-23T09:09:21Z", - "updated_at": "2026-04-28T18:39:37Z", - "pushed_at": "2026-04-28T18:39:33Z", + "updated_at": "2026-04-29T00:36:21Z", + "pushed_at": "2026-04-29T00:36:18Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-66478.json b/2025/CVE-2025-66478.json index bc9461594c..fe99f0e01e 100644 --- a/2025/CVE-2025-66478.json +++ b/2025/CVE-2025-66478.json @@ -14,8 +14,8 @@ "description": "๐Ÿ”ง Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.", "fork": false, "created_at": "2025-10-01T07:40:09Z", - "updated_at": "2026-04-28T17:10:33Z", - "pushed_at": "2026-04-28T17:10:28Z", + "updated_at": "2026-04-28T23:38:08Z", + "pushed_at": "2026-04-28T23:38:04Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-68921.json b/2025/CVE-2025-68921.json index d0302f9b81..8c2e12bfcc 100644 --- a/2025/CVE-2025-68921.json +++ b/2025/CVE-2025-68921.json @@ -47,8 +47,8 @@ "description": "๐Ÿ” Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.", "fork": false, "created_at": "2026-01-24T21:00:41Z", - "updated_at": "2026-04-28T17:42:48Z", - "pushed_at": "2026-04-28T17:42:43Z", + "updated_at": "2026-04-28T23:58:56Z", + "pushed_at": "2026-04-28T23:58:53Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-69256.json b/2025/CVE-2025-69256.json index 0b07e55696..ef090a8f1d 100644 --- a/2025/CVE-2025-69256.json +++ b/2025/CVE-2025-69256.json @@ -47,11 +47,11 @@ "description": "Layer-2 supply-chain hardening for MCP servers โ€” Ed25519-signed tool manifests, runtime spawn-attestation, default-deny argument sanitizer. Defends against marketplace-poisoning + CVE-2025-69256 + CVE-2025-61591.", "fork": false, "created_at": "2026-04-27T20:12:08Z", - "updated_at": "2026-04-27T22:03:38Z", - "pushed_at": "2026-04-27T22:03:35Z", + "updated_at": "2026-04-28T23:15:44Z", + "pushed_at": "2026-04-28T23:15:41Z", "stargazers_count": 0, "watchers_count": 0, - "has_discussions": false, + "has_discussions": true, "forks_count": 0, "allow_forking": true, "is_template": false, @@ -59,7 +59,9 @@ "has_pull_requests": true, "pull_request_creation_policy": "all", "topics": [ + "anthropic", "attestation", + "built-in-mallorca", "cli", "cve-2025-61591", "cve-2025-69256", diff --git a/2025/CVE-2025-69600.json b/2025/CVE-2025-69600.json index bc7143f73a..1f71d82323 100644 --- a/2025/CVE-2025-69600.json +++ b/2025/CVE-2025-69600.json @@ -14,8 +14,8 @@ "description": null, "fork": false, "created_at": "2026-02-11T12:02:53Z", - "updated_at": "2026-04-28T18:35:48Z", - "pushed_at": "2026-04-28T18:35:44Z", + "updated_at": "2026-04-28T19:47:08Z", + "pushed_at": "2026-04-28T19:47:02Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-69985.json b/2025/CVE-2025-69985.json index e25ac03528..e798426220 100644 --- a/2025/CVE-2025-69985.json +++ b/2025/CVE-2025-69985.json @@ -14,8 +14,8 @@ "description": "Exploit CVE-2025-69985 to bypass authentication and execute remote commands on FUXA versions โ‰ค 1.2.8 via the \/api\/runscript endpoint.", "fork": false, "created_at": "2025-04-10T09:18:30Z", - "updated_at": "2026-04-28T18:21:57Z", - "pushed_at": "2026-04-28T18:21:53Z", + "updated_at": "2026-04-29T00:23:55Z", + "pushed_at": "2026-04-29T00:23:52Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-70795.json b/2025/CVE-2025-70795.json index cd8b616923..4a4aa0e628 100644 --- a/2025/CVE-2025-70795.json +++ b/2025/CVE-2025-70795.json @@ -14,8 +14,8 @@ "description": "๐Ÿ›  Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.", "fork": false, "created_at": "2024-04-20T04:18:24Z", - "updated_at": "2026-04-28T18:15:10Z", - "pushed_at": "2026-04-28T18:15:05Z", + "updated_at": "2026-04-29T00:19:41Z", + "pushed_at": "2026-04-29T00:19:37Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2025/CVE-2025-8088.json b/2025/CVE-2025-8088.json index 159f7df1db..4116437877 100644 --- a/2025/CVE-2025-8088.json +++ b/2025/CVE-2025-8088.json @@ -838,8 +838,8 @@ "description": "๐Ÿ›  Exploit CVE-2025-8088 with this Python tool to generate malicious WinRAR archives that ensure payload persistence in Windows startup folders.", "fork": false, "created_at": "2025-12-20T13:52:21Z", - "updated_at": "2026-04-28T17:03:54Z", - "pushed_at": "2026-04-28T17:03:51Z", + "updated_at": "2026-04-28T23:32:55Z", + "pushed_at": "2026-04-28T23:32:50Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2025/CVE-2025-8110.json b/2025/CVE-2025-8110.json index 5893c33554..0be0047d62 100644 --- a/2025/CVE-2025-8110.json +++ b/2025/CVE-2025-8110.json @@ -146,8 +146,8 @@ "description": "๐Ÿ” Detect improper symbolic link handling in Gogs' PutContents API, exposing local code execution risks for versions 0.13.3 and earlier.", "fork": false, "created_at": "2025-12-31T13:25:07Z", - "updated_at": "2026-04-28T17:15:28Z", - "pushed_at": "2026-04-28T17:15:23Z", + "updated_at": "2026-04-28T23:41:30Z", + "pushed_at": "2026-04-28T23:41:26Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-9074.json b/2025/CVE-2025-9074.json index 3f06e54f8e..c4f40fc4f0 100644 --- a/2025/CVE-2025-9074.json +++ b/2025/CVE-2025-9074.json @@ -14,8 +14,8 @@ "description": "๐Ÿš€ Exploit CVE-2025-9074 with this Docker escape framework, simplifying API vulnerabilities and enhancing security testing for developers and researchers.", "fork": false, "created_at": "2024-06-19T23:21:41Z", - "updated_at": "2026-04-28T17:17:44Z", - "pushed_at": "2026-04-28T17:17:37Z", + "updated_at": "2026-04-28T23:43:01Z", + "pushed_at": "2026-04-28T23:42:58Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-0006.json b/2026/CVE-2026-0006.json index a9c1bc912d..4dc6691895 100644 --- a/2026/CVE-2026-0006.json +++ b/2026/CVE-2026-0006.json @@ -14,10 +14,10 @@ "description": "CVE-2026-0006: Heap buffer overflow PoC for libopenapv (Android APV codec) - CVSS 9.8", "fork": false, "created_at": "2026-04-18T20:05:22Z", - "updated_at": "2026-04-25T13:35:07Z", + "updated_at": "2026-04-28T22:29:31Z", "pushed_at": "2026-04-22T10:09:20Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 3, + "watchers": 4, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-0828.json b/2026/CVE-2026-0828.json index 6fda8af1df..4605ba8164 100644 --- a/2026/CVE-2026-0828.json +++ b/2026/CVE-2026-0828.json @@ -14,8 +14,8 @@ "description": "๐Ÿ›  Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.", "fork": false, "created_at": "2024-04-20T04:18:24Z", - "updated_at": "2026-04-28T18:15:10Z", - "pushed_at": "2026-04-28T18:15:05Z", + "updated_at": "2026-04-29T00:19:41Z", + "pushed_at": "2026-04-29T00:19:37Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2026/CVE-2026-20817.json b/2026/CVE-2026-20817.json index e9252429cd..c2936b6711 100644 --- a/2026/CVE-2026-20817.json +++ b/2026/CVE-2026-20817.json @@ -14,10 +14,10 @@ "description": "Windows Error Reporting ALPC Elevation of Privilege (CVE-2026-20817) - Proof-of-Concept exploit demonstrating local privilege escalation via WER service. ", "fork": false, "created_at": "2026-02-18T13:56:17Z", - "updated_at": "2026-04-28T03:33:54Z", + "updated_at": "2026-04-28T19:56:03Z", "pushed_at": "2026-02-19T13:37:06Z", - "stargazers_count": 117, - "watchers_count": 117, + "stargazers_count": 118, + "watchers_count": 118, "has_discussions": false, "forks_count": 19, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 19, - "watchers": 117, + "watchers": 118, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-20841.json b/2026/CVE-2026-20841.json index 08f70e2961..d60a483893 100644 --- a/2026/CVE-2026-20841.json +++ b/2026/CVE-2026-20841.json @@ -14,8 +14,8 @@ "description": "๐Ÿ›  Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.", "fork": false, "created_at": "2024-09-22T12:19:06Z", - "updated_at": "2026-04-28T18:13:56Z", - "pushed_at": "2026-04-28T18:13:52Z", + "updated_at": "2026-04-29T00:18:53Z", + "pushed_at": "2026-04-29T00:18:50Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -412,8 +412,8 @@ "description": "๐Ÿ›  Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.", "fork": false, "created_at": "2026-02-26T05:21:28Z", - "updated_at": "2026-04-28T18:12:31Z", - "pushed_at": "2026-04-28T18:12:27Z", + "updated_at": "2026-04-29T00:18:03Z", + "pushed_at": "2026-04-29T00:17:59Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-2406.json b/2026/CVE-2026-2406.json index ad22f9faaa..dd3ac783b1 100644 --- a/2026/CVE-2026-2406.json +++ b/2026/CVE-2026-2406.json @@ -14,8 +14,8 @@ "description": "๐Ÿ” Analyze and detect CVE-2026-2406 vulnerabilities in Telnet to enhance security and prevent unauthorized access with this professional research engine.", "fork": false, "created_at": "2025-04-16T07:20:12Z", - "updated_at": "2026-04-28T17:59:57Z", - "pushed_at": "2026-04-28T17:59:53Z", + "updated_at": "2026-04-29T00:09:42Z", + "pushed_at": "2026-04-29T00:09:38Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-24061.json b/2026/CVE-2026-24061.json index a289b04816..213520c7f8 100644 --- a/2026/CVE-2026-24061.json +++ b/2026/CVE-2026-24061.json @@ -1553,8 +1553,8 @@ "description": "๐Ÿšจ Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.", "fork": false, "created_at": "2026-02-03T19:46:10Z", - "updated_at": "2026-04-28T17:54:44Z", - "pushed_at": "2026-04-28T17:54:40Z", + "updated_at": "2026-04-29T00:06:23Z", + "pushed_at": "2026-04-29T00:06:19Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-24291.json b/2026/CVE-2026-24291.json index 732d6daf55..86945f2711 100644 --- a/2026/CVE-2026-24291.json +++ b/2026/CVE-2026-24291.json @@ -80,8 +80,8 @@ "description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions", "fork": false, "created_at": "2026-03-26T04:38:27Z", - "updated_at": "2026-04-28T18:42:18Z", - "pushed_at": "2026-04-28T18:42:15Z", + "updated_at": "2026-04-29T00:38:32Z", + "pushed_at": "2026-04-29T00:38:29Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2026/CVE-2026-2441.json b/2026/CVE-2026-2441.json index e158a32cfb..c5c2e23217 100644 --- a/2026/CVE-2026-2441.json +++ b/2026/CVE-2026-2441.json @@ -179,8 +179,8 @@ "description": "Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.", "fork": false, "created_at": "2026-03-03T14:19:18Z", - "updated_at": "2026-04-28T18:17:56Z", - "pushed_at": "2026-04-28T18:17:51Z", + "updated_at": "2026-04-29T00:21:27Z", + "pushed_at": "2026-04-29T00:21:22Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2026/CVE-2026-2472.json b/2026/CVE-2026-2472.json index 4c2173b70d..e022b0e434 100644 --- a/2026/CVE-2026-2472.json +++ b/2026/CVE-2026-2472.json @@ -65,8 +65,8 @@ "description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.", "fork": false, "created_at": "2026-03-10T14:40:04Z", - "updated_at": "2026-04-28T18:25:46Z", - "pushed_at": "2026-04-28T18:25:41Z", + "updated_at": "2026-04-29T00:26:37Z", + "pushed_at": "2026-04-29T00:26:33Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2026/CVE-2026-25643.json b/2026/CVE-2026-25643.json index dffa5a0456..d8a4c73988 100644 --- a/2026/CVE-2026-25643.json +++ b/2026/CVE-2026-25643.json @@ -94,8 +94,8 @@ "description": "Exploit Frigate NVR โ‰ค0.16.3 to execute commands remotely by abusing a configuration flaw without needing shell access or output capture.", "fork": false, "created_at": "2026-03-07T20:23:08Z", - "updated_at": "2026-04-28T18:24:13Z", - "pushed_at": "2026-04-28T18:24:10Z", + "updated_at": "2026-04-29T00:25:17Z", + "pushed_at": "2026-04-29T00:25:14Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2026/CVE-2026-2991.json b/2026/CVE-2026-2991.json index 0164a802a1..27e7b3f7df 100644 --- a/2026/CVE-2026-2991.json +++ b/2026/CVE-2026-2991.json @@ -62,8 +62,8 @@ "description": "Explore a PoC for CVE-2026-2991, an auth bypass in KiviCare 4.1.2 and earlier via the patient social-login REST endpoint", "fork": false, "created_at": "2026-04-03T20:26:43Z", - "updated_at": "2026-04-28T18:47:45Z", - "pushed_at": "2026-04-28T18:47:41Z", + "updated_at": "2026-04-29T00:42:19Z", + "pushed_at": "2026-04-29T00:42:16Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-29923.json b/2026/CVE-2026-29923.json index 672cbef219..150acafaef 100644 --- a/2026/CVE-2026-29923.json +++ b/2026/CVE-2026-29923.json @@ -47,10 +47,10 @@ "description": "A newly discovered vulnerable driver, pstrip64.sys (CVE-2026-29923) allows an unprivileged user to escalate privileges to SYSTEM via a crafted IOCTL request ", "fork": false, "created_at": "2026-04-10T12:48:55Z", - "updated_at": "2026-04-28T14:54:06Z", + "updated_at": "2026-04-28T19:55:21Z", "pushed_at": "2026-04-11T13:56:20Z", - "stargazers_count": 20, - "watchers_count": 20, + "stargazers_count": 21, + "watchers_count": 21, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 20, + "watchers": 21, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-30368.json b/2026/CVE-2026-30368.json index b020aaecda..79d7ea7dc5 100644 --- a/2026/CVE-2026-30368.json +++ b/2026/CVE-2026-30368.json @@ -14,10 +14,10 @@ "description": "CVE-2026-30368 proof of concept", "fork": false, "created_at": "2026-04-22T03:40:06Z", - "updated_at": "2026-04-26T22:34:09Z", + "updated_at": "2026-04-28T20:46:28Z", "pushed_at": "2026-04-26T22:34:05Z", - "stargazers_count": 13, - "watchers_count": 13, + "stargazers_count": 14, + "watchers_count": 14, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 13, + "watchers": 14, "score": 0, "subscribers_count": 2 } diff --git a/2026/CVE-2026-31802.json b/2026/CVE-2026-31802.json index c73312ef80..9709eca184 100644 --- a/2026/CVE-2026-31802.json +++ b/2026/CVE-2026-31802.json @@ -59,8 +59,8 @@ "description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.", "fork": false, "created_at": "2026-03-28T20:49:46Z", - "updated_at": "2026-04-28T18:44:09Z", - "pushed_at": "2026-04-28T18:44:05Z", + "updated_at": "2026-04-29T00:39:28Z", + "pushed_at": "2026-04-29T00:39:25Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-3854.json b/2026/CVE-2026-3854.json new file mode 100644 index 0000000000..416399bd07 --- /dev/null +++ b/2026/CVE-2026-3854.json @@ -0,0 +1,68 @@ +[ + { + "id": 1223926494, + "name": "CVE-2026-3854", + "full_name": "5kr1pt\/CVE-2026-3854", + "owner": { + "login": "5kr1pt", + "id": 78171565, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78171565?v=4", + "html_url": "https:\/\/github.com\/5kr1pt", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/5kr1pt\/CVE-2026-3854", + "description": null, + "fork": false, + "created_at": "2026-04-28T19:42:55Z", + "updated_at": "2026-04-28T20:17:47Z", + "pushed_at": "2026-04-28T20:17:42Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1224015776, + "name": "Exploit_CVE-2026-3854", + "full_name": "LACHHAB-Anas\/Exploit_CVE-2026-3854", + "owner": { + "login": "LACHHAB-Anas", + "id": 185726623, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/185726623?v=4", + "html_url": "https:\/\/github.com\/LACHHAB-Anas", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/LACHHAB-Anas\/Exploit_CVE-2026-3854", + "description": "Details about CVE-2026-3854", + "fork": false, + "created_at": "2026-04-28T22:02:08Z", + "updated_at": "2026-04-28T22:12:22Z", + "pushed_at": "2026-04-28T22:12:19Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-39816.json b/2026/CVE-2026-39816.json new file mode 100644 index 0000000000..939ab2b103 --- /dev/null +++ b/2026/CVE-2026-39816.json @@ -0,0 +1,35 @@ +[ + { + "id": 1224028810, + "name": "nifi-CVE-2026-39816-poc", + "full_name": "ZeroPathAI\/nifi-CVE-2026-39816-poc", + "owner": { + "login": "ZeroPathAI", + "id": 170791525, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/170791525?v=4", + "html_url": "https:\/\/github.com\/ZeroPathAI", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/ZeroPathAI\/nifi-CVE-2026-39816-poc", + "description": "POC for CVE-2026-39816 which allows NiFi users without execute code permissions to run arbitrary scripts", + "fork": false, + "created_at": "2026-04-28T22:25:29Z", + "updated_at": "2026-04-28T22:41:25Z", + "pushed_at": "2026-04-28T22:41:21Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-22747.json b/2026/CVE-2026-41462.json similarity index 55% rename from 2026/CVE-2026-22747.json rename to 2026/CVE-2026-41462.json index 74754557ce..2394a19531 100644 --- a/2026/CVE-2026-22747.json +++ b/2026/CVE-2026-41462.json @@ -1,21 +1,21 @@ [ { - "id": 1223584035, - "name": "cve-2026-22747-lab", - "full_name": "F1n1Sh3r\/cve-2026-22747-lab", + "id": 1223993963, + "name": "CVE-2026-41462", + "full_name": "0xBlackash\/CVE-2026-41462", "owner": { - "login": "F1n1Sh3r", - "id": 8713057, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8713057?v=4", - "html_url": "https:\/\/github.com\/F1n1Sh3r", + "login": "0xBlackash", + "id": 259905299, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/259905299?v=4", + "html_url": "https:\/\/github.com\/0xBlackash", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/F1n1Sh3r\/cve-2026-22747-lab", - "description": null, + "html_url": "https:\/\/github.com\/0xBlackash\/CVE-2026-41462", + "description": "CVE-2026-41462", "fork": false, - "created_at": "2026-04-28T13:11:38Z", - "updated_at": "2026-04-28T13:17:45Z", - "pushed_at": "2026-04-28T13:17:26Z", + "created_at": "2026-04-28T21:23:32Z", + "updated_at": "2026-04-28T21:38:32Z", + "pushed_at": "2026-04-28T21:38:28Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-41651.json b/2026/CVE-2026-41651.json index 4fa3a94a9a..91733f9b4d 100644 --- a/2026/CVE-2026-41651.json +++ b/2026/CVE-2026-41651.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2026-04-23T08:57:29Z", - "updated_at": "2026-04-28T08:43:29Z", + "updated_at": "2026-04-29T00:48:18Z", "pushed_at": "2026-04-23T13:55:33Z", - "stargazers_count": 61, - "watchers_count": 61, + "stargazers_count": 62, + "watchers_count": 62, "has_discussions": false, "forks_count": 16, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 16, - "watchers": 61, + "watchers": 62, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-42167.json b/2026/CVE-2026-42167.json index 94740439b1..313ed555a0 100644 --- a/2026/CVE-2026-42167.json +++ b/2026/CVE-2026-42167.json @@ -14,8 +14,8 @@ "description": "POCs to demonstrate CVE-2026-42167 in ProFTPD", "fork": false, "created_at": "2026-04-28T14:35:46Z", - "updated_at": "2026-04-28T14:45:35Z", - "pushed_at": "2026-04-28T14:36:27Z", + "updated_at": "2026-04-28T22:20:15Z", + "pushed_at": "2026-04-28T22:20:12Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-4747.json b/2026/CVE-2026-4747.json index 1a63492bc0..cdefde8936 100644 --- a/2026/CVE-2026-4747.json +++ b/2026/CVE-2026-4747.json @@ -47,10 +47,10 @@ "description": null, "fork": false, "created_at": "2026-04-10T02:45:41Z", - "updated_at": "2026-04-10T02:46:47Z", + "updated_at": "2026-04-28T23:04:39Z", "pushed_at": "2026-04-10T02:46:44Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-6770.json b/2026/CVE-2026-6770.json new file mode 100644 index 0000000000..2dc80a3693 --- /dev/null +++ b/2026/CVE-2026-6770.json @@ -0,0 +1,35 @@ +[ + { + "id": 1224021535, + "name": "CVE-2026-6770", + "full_name": "nightcorefan94\/CVE-2026-6770", + "owner": { + "login": "nightcorefan94", + "id": 274578546, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/274578546?v=4", + "html_url": "https:\/\/github.com\/nightcorefan94", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/nightcorefan94\/CVE-2026-6770", + "description": "CVE-2026-6770 PoC for Firefox\/Tor", + "fork": false, + "created_at": "2026-04-28T22:12:30Z", + "updated_at": "2026-04-28T22:14:26Z", + "pushed_at": "2026-04-28T22:14:22Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-6807.json b/2026/CVE-2026-6807.json new file mode 100644 index 0000000000..e26c9dc040 --- /dev/null +++ b/2026/CVE-2026-6807.json @@ -0,0 +1,35 @@ +[ + { + "id": 1223909022, + "name": "Grassmarlin-CVE-2026-6807-XXE-POC", + "full_name": "SecTestAnnaQuinn\/Grassmarlin-CVE-2026-6807-XXE-POC", + "owner": { + "login": "SecTestAnnaQuinn", + "id": 88168208, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88168208?v=4", + "html_url": "https:\/\/github.com\/SecTestAnnaQuinn", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/SecTestAnnaQuinn\/Grassmarlin-CVE-2026-6807-XXE-POC", + "description": "Reverse Engineered based on CISA disclosure of new CVE", + "fork": false, + "created_at": "2026-04-28T19:18:44Z", + "updated_at": "2026-04-28T19:26:32Z", + "pushed_at": "2026-04-28T19:26:28Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/README.md b/README.md index 8749a14b85..ff46724347 100644 --- a/README.md +++ b/README.md @@ -101,7 +101,7 @@ ### CVE-2026-0834 (2026-01-21) -Logic vulnerability in TP-Link Archer C20 v5, 6.0, Archer AX53 v1.0 and TL-WR841N v13 (TDDP module) allows unauthenticated adjacent attackers to execute administrative commands including factory reset and device reboot without credentials.ย Attackers on the adjacent network can remotely trigger factory resets and reboots without credentials, causing configuration loss and interruption of device availability.This issue affects Archer C20 v6.0 < V6_251031, Archer C20 v5 <EU_V5_260317 or <ย US_V5_260419\n\n\nArcher AX53 v1.0 < \n\nV1_251215\n\nTL-WR841N v13 <ย 0.9.1 Build 20231120 Rel.62366 +Logic vulnerability in TP-Link Archer C20 v5, 6.0, Archer AX53 v1.0 and TL-WR841N v13 (TDDP module) allows unauthenticated adjacent attackers to execute administrative commands including factory reset and device reboot without credentials.ย Attackers on the adjacent network can remotely trigger factory resets and reboots without credentials, causing configuration loss and interruption of device availability.\n\nThis issue affects Archer C20 v6.0 < V6_251031, Archer C20 v5 <EU_V5_260317 or <ย US_V5_260419\n\n\nArcher AX53 v1.0 < \n\nV1_251215\n\n\n\nTL-WR841N v13 <ย 0.9.1 Build 20231120 Rel.62366 - [mattgsys/CVE-2026-0834](https://github.com/mattgsys/CVE-2026-0834) @@ -662,6 +662,14 @@ - [tausifzaman/CVE-2026-3844](https://github.com/tausifzaman/CVE-2026-3844) - [dinosn/CVE-2026-3844](https://github.com/dinosn/CVE-2026-3844) +### CVE-2026-3854 (2026-03-10) + +An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed an attacker with push access to a repository to achieve remote code execution on the instance. During a git push operation, user-supplied push option values were not properly sanitized before being included in internal service headers. Because the internal header format used a delimiter character that could also appear in user input, an attacker could inject additional metadata fields through crafted push option values. This vulnerability was reported via the GitHub Bug Bounty program and has been fixed in GitHub Enterprise Server versions 3.14.25, 3.15.20, 3.16.16, 3.17.13, 3.18.7 and 3.19.4. + + +- [5kr1pt/CVE-2026-3854](https://github.com/5kr1pt/CVE-2026-3854) +- [LACHHAB-Anas/Exploit_CVE-2026-3854](https://github.com/LACHHAB-Anas/Exploit_CVE-2026-3854) + ### CVE-2026-3888 (2026-03-17) Local privilege escalation in snapd on Linux allows local attackers to get root privilege by re-creating snap's private /tmp directory when systemd-tmpfiles is configured to automatically clean up this directory. This issue affects Ubuntu 16.04 LTS, 18.04 LTS, 20.04 LTS, 22.04 LTS, and 24.04 LTS. @@ -952,6 +960,20 @@ - [mlgzackfly/CVE-2026-6643](https://github.com/mlgzackfly/CVE-2026-6643) +### CVE-2026-6770 (2026-04-21) + +Other issue in the Storage: IndexedDB component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10. + + +- [nightcorefan94/CVE-2026-6770](https://github.com/nightcorefan94/CVE-2026-6770) + +### CVE-2026-6807 (2026-04-28) + +A vulnerability in GRASSMARLIN v3.2.1 allows crafted session data to \ntrigger improper handling of XML input, which may result in unintended \nexposure of sensitive information. The flaw stems from insufficient \nhardening of the XML parsing process. + + +- [SecTestAnnaQuinn/Grassmarlin-CVE-2026-6807-XXE-POC](https://github.com/SecTestAnnaQuinn/Grassmarlin-CVE-2026-6807-XXE-POC) + ### CVE-2026-6849 - [osmancanvural/CVE-2026-6849](https://github.com/osmancanvural/CVE-2026-6849) @@ -1484,13 +1506,6 @@ - [n0n4m3x41/CVE-2026-22738-POC](https://github.com/n0n4m3x41/CVE-2026-22738-POC) - [rockmelodies/CVE-2026-22738](https://github.com/rockmelodies/CVE-2026-22738) -### CVE-2026-22747 (2026-04-22) - -Vulnerability in Spring Spring Security.ย SubjectX500PrincipalExtractorย does not correctly handle certain malformed X.509 certificateย CNย values, which can lead to reading the wrong value for the username. In a carefully crafted certificate, this can lead to an attacker impersonating another user.\nThis issue affects Spring Security: from 7.0.0 through 7.0.4. - - -- [F1n1Sh3r/cve-2026-22747-lab](https://github.com/F1n1Sh3r/cve-2026-22747-lab) - ### CVE-2026-22777 (2026-01-10) ComfyUI-Manager is an extension designed to enhance the usability of ComfyUI. Prior to versions 3.39.2 and 4.0.5, an attacker can inject special characters into HTTP query parameters to add arbitrary configuration values to the config.ini file. This can lead to security setting tampering or modification of application behavior. This issue has been patched in versions 3.39.2 and 4.0.5. @@ -3705,7 +3720,11 @@ - [menevarad007/CVE-2026-37749](https://github.com/menevarad007/CVE-2026-37749) -### CVE-2026-37750 +### CVE-2026-37750 (2026-04-28) + +A reflected Cross-Site Scripting (XSS) vulnerability in School Management System by mahmoudai1 allows unauthenticated remote attackers to execute arbitrary JavaScript in victim's browsers via the unsanitized type parameter in register.php. + + - [menevarad007/CVE-2026-37750](https://github.com/menevarad007/CVE-2026-37750) ### CVE-2026-38751 @@ -3762,6 +3781,9 @@ - [0xBlackash/CVE-2026-39813](https://github.com/0xBlackash/CVE-2026-39813) +### CVE-2026-39816 +- [ZeroPathAI/nifi-CVE-2026-39816-poc](https://github.com/ZeroPathAI/nifi-CVE-2026-39816-poc) + ### CVE-2026-39842 (2026-04-14) OpenRemote is an open-source IoT platform. Versions 1.21.0 and below contain two interrelated expression injection vulnerabilities in the rules engine that allow arbitrary code execution on the server. The JavaScript rules engine executes user-supplied scripts via Nashorn's ScriptEngine.eval() without sandboxing, class filtering, or access restrictions, and the authorization check in RulesResourceImpl only restricts Groovy rules to superusers while leaving JavaScript rules unrestricted for any user with the write:rules role. Additionally, the Groovy rules engine has a GroovyDenyAllFilter security filter that is defined but never registered, as the registration code is commented out, rendering the SandboxTransformer ineffective for superuser-created Groovy rules. A non-superuser attacker with the write:rules role can create JavaScript rulesets that execute with full JVM access, enabling remote code execution as root, arbitrary file read, environment variable theft including database credentials, and complete multi-tenant isolation bypass to access data across all realms. This issue has been fixed in version 1.22.0. @@ -3859,6 +3881,13 @@ - [kaleth4/CVE-2026-41303](https://github.com/kaleth4/CVE-2026-41303) +### CVE-2026-41462 (2026-04-27) + +ProjeQtor versions 7.0 through 12.4.3 contain an unauthenticated SQL injection vulnerability in the login functionality where the login variable is directly concatenated into a SQL query without parameterization or sanitization. Attackers can inject arbitrary SQL expressions through the username field at the authentication endpoint to create privileged accounts, read sensitive data, and execute operating system commands if the database user has elevated permissions. + + +- [0xBlackash/CVE-2026-41462](https://github.com/0xBlackash/CVE-2026-41462) + ### CVE-2026-41575 - [krraze/CVE-2026-41575](https://github.com/krraze/CVE-2026-41575) @@ -3883,7 +3912,11 @@ - [bartfroklage/cve-2026-41679](https://github.com/bartfroklage/cve-2026-41679) -### CVE-2026-42167 +### CVE-2026-42167 (2026-04-28) + +mod_sql in ProFTPD before 1.3.10rc1 allows remote attackers to execute arbitrary code via a username, in scenarios where there is logging of USER requests with an expansion such as %U, and the SQL backend allows commands (e.g., COPY TO PROGRAM). + + - [ZeroPathAI/proftpd-CVE-2026-42167-poc](https://github.com/ZeroPathAI/proftpd-CVE-2026-42167-poc) ### CVE-2026-42208 @@ -8149,7 +8182,7 @@ ### CVE-2025-26892 (2025-05-19) -Unrestricted Upload of File with Dangerous Type vulnerability in dkszone Celestial Aura celestial-aura allows Using Malicious Files.This issue affects Celestial Aura: from n/a through <= 2.2. +Unrestricted Upload of File with Dangerous Type vulnerability in dkszone Celestial Aura allows Using Malicious Files.This issue affects Celestial Aura: from n/a through 2.2. - [Nxploited/CVE-2025-26892](https://github.com/Nxploited/CVE-2025-26892) @@ -8861,7 +8894,7 @@ ### CVE-2025-30967 (2025-04-15) -Cross-Site Request Forgery (CSRF) vulnerability in NotFound WPJobBoard wpjobboard allows Upload a Web Shell to a Web Server.This issue affects WPJobBoard: from n/a through < 5.11.1. +Cross-Site Request Forgery (CSRF) vulnerability in NotFound WPJobBoard allows Upload a Web Shell to a Web Server. This issue affects WPJobBoard: from n/a through n/a. - [Anton-ai111/CVE-2025-30967](https://github.com/Anton-ai111/CVE-2025-30967) @@ -10458,7 +10491,7 @@ ### CVE-2025-47646 (2025-05-23) -Weak Password Recovery Mechanism for Forgotten Password vulnerability in Gilblas Ngunte Possi PSW Front-end Login &amp; Registration psw-login-and-registration allows Password Recovery Exploitation.This issue affects PSW Front-end Login &amp; Registration: from n/a through <= 1.13. +Weak Password Recovery Mechanism for Forgotten Password vulnerability in Gilblas Ngunte Possi PSW Front-end Login & Registration psw-login-and-registration allows Password Recovery Exploitation.This issue affects PSW Front-end Login & Registration: from n/a through <= 1.13. - [Nxploited/CVE-2025-47646](https://github.com/Nxploited/CVE-2025-47646) @@ -19902,7 +19935,7 @@ ### CVE-2024-24926 (2024-02-12) -Deserialization of Untrusted Data vulnerability in UnitedThemes Brooklyn | Creative Multi-Purpose Responsive WordPress Theme.This issue affects Brooklyn | Creative Multi-Purpose Responsive WordPress Theme: from n/a through 4.9.7.6.\n\n +Deserialization of Untrusted Data vulnerability in UnitedThemes Brooklyn | Creative Multi-Purpose Responsive WordPress Theme.This issue affects Brooklyn | Creative Multi-Purpose Responsive WordPress Theme: from n/a through 4.9.7.6. - [moften/CVE-2024-24926](https://github.com/moften/CVE-2024-24926) @@ -19932,7 +19965,7 @@ ### CVE-2024-25096 (2024-04-03) -Improper Control of Generation of Code ('Code Injection') vulnerability in Canto Inc. Canto allows Code Injection.This issue affects Canto: from n/a through 3.0.7.\n\n +Improper Control of Generation of Code ('Code Injection') vulnerability in Canto Inc. Canto allows Code Injection.This issue affects Canto: from n/a through 3.0.7. - [puppetma4ster/Metasploit-Wordpress-Canto-Exploit-RCE](https://github.com/puppetma4ster/Metasploit-Wordpress-Canto-Exploit-RCE) @@ -20512,7 +20545,7 @@ ### CVE-2024-27956 (2024-03-21) -Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ValvePress Automatic allows SQL Injection.This issue affects Automatic: from n/a through 3.92.0.\n\n +Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ValvePress Automatic allows SQL Injection.This issue affects Automatic: from n/a through 3.92.0. - [truonghuuphuc/CVE-2024-27956](https://github.com/truonghuuphuc/CVE-2024-27956) @@ -21047,7 +21080,7 @@ ### CVE-2024-31114 (2024-03-31) -Unrestricted Upload of File with Dangerous Type vulnerability in biplob018 Shortcode Addons.This issue affects Shortcode Addons: from n/a through 3.2.5.\n\n +Unrestricted Upload of File with Dangerous Type vulnerability in biplob018 Shortcode Addons.This issue affects Shortcode Addons: from n/a through 3.2.5. - [Nxploited/CVE-2024-31114](https://github.com/Nxploited/CVE-2024-31114) @@ -21321,7 +21354,7 @@ ### CVE-2024-32104 (2024-04-15) -Cross-Site Request Forgery (CSRF) vulnerability in XLPlugins NextMove Lite.This issue affects NextMove Lite: from n/a through 2.18.1.\n\n +Cross-Site Request Forgery (CSRF) vulnerability in XLPlugins NextMove Lite.This issue affects NextMove Lite: from n/a through 2.18.1. - [Cerberus-HiproPlus/CVE-2024-32104](https://github.com/Cerberus-HiproPlus/CVE-2024-32104) @@ -21346,7 +21379,7 @@ ### CVE-2024-32136 (2024-04-15) -Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Xenioushk BWL Advanced FAQ Manager.This issue affects BWL Advanced FAQ Manager: from n/a through 2.0.3.\n\n +Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Xenioushk BWL Advanced FAQ Manager.This issue affects BWL Advanced FAQ Manager: from n/a through 2.0.3. - [xbz0n/CVE-2024-32136](https://github.com/xbz0n/CVE-2024-32136) @@ -21533,7 +21566,7 @@ ### CVE-2024-33559 (2024-04-29) -Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 8theme XStore allows SQL Injection.This issue affects XStore: from n/a through 9.3.5.\n\n +Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 8theme XStore allows SQL Injection.This issue affects XStore: from n/a through 9.3.5. - [absholi7ly/WordPress-XStore-theme-SQL-Injection](https://github.com/absholi7ly/WordPress-XStore-theme-SQL-Injection) @@ -21581,7 +21614,7 @@ ### CVE-2024-33911 (2024-05-02) -Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Weblizar School Management Pro.This issue affects School Management Pro: from n/a through 10.3.4.\n\n +Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Weblizar School Management Pro.This issue affects School Management Pro: from n/a through 10.3.4. - [xbz0n/CVE-2024-33911](https://github.com/xbz0n/CVE-2024-33911) @@ -21760,7 +21793,7 @@ ### CVE-2024-34444 (2024-06-19) -Missing Authorization vulnerability in ThemePunch OHG Slider Revolution revslider.This issue affects Slider Revolution: from n/a through < 6.7.0. +Missing Authorization vulnerability in ThemePunch OHG Slider Revolution.This issue affects Slider Revolution: from n/a before 6.7.0. - [dzmind2312/CVE-2024-34444-Exploit-Poc](https://github.com/dzmind2312/CVE-2024-34444-Exploit-Poc) @@ -24627,7 +24660,7 @@ ### CVE-2024-50478 (2024-10-28) -Authentication Bypass by Primary Weakness vulnerability in swoopbrandon 1-Click Login: Passwordless Authentication swoop-password-free-authentication allows Authentication Bypass.This issue affects 1-Click Login: Passwordless Authentication: from n/a through 1.4.5. +Authentication Bypass by Primary Weakness vulnerability in Swoop 1-Click Login: Passwordless Authentication allows Authentication Bypass.This issue affects 1-Click Login: Passwordless Authentication: 1.4.5. - [RandomRobbieBF/CVE-2024-50478](https://github.com/RandomRobbieBF/CVE-2024-50478) @@ -30005,14 +30038,14 @@ ### CVE-2023-29384 (2023-12-20) -Unrestricted Upload of File with Dangerous Type vulnerability in HM Plugin WordPress Job Board and Recruitment Plugin โ€“ JobWP.This issue affects WordPress Job Board and Recruitment Plugin โ€“ JobWP: from n/a through 2.0.\n\n +Unrestricted Upload of File with Dangerous Type vulnerability in HM Plugin WordPress Job Board and Recruitment Plugin โ€“ JobWP.This issue affects WordPress Job Board and Recruitment Plugin โ€“ JobWP: from n/a through 2.0. - [nastar-id/CVE-2023-29384](https://github.com/nastar-id/CVE-2023-29384) ### CVE-2023-29386 (2024-03-26) -Unrestricted Upload of File with Dangerous Type vulnerability in Julien Crego Manager for Icomoon.This issue affects Manager for Icomoon: from n/a through 2.0.\n\n +Unrestricted Upload of File with Dangerous Type vulnerability in Julien Crego Manager for Icomoon.This issue affects Manager for Icomoon: from n/a through 2.0. - [vigilante-1337/CVE-2023-29386](https://github.com/vigilante-1337/CVE-2023-29386) @@ -30287,7 +30320,7 @@ ### CVE-2023-30486 (2024-12-09) -Missing Authorization vulnerability in hashthemes Square square allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Square: from n/a through <= 2.0.0. +Missing Authorization vulnerability in HashThemes Square allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Square: from n/a through 2.0.0. - [RandomRobbieBF/CVE-2023-30486](https://github.com/RandomRobbieBF/CVE-2023-30486) @@ -30685,7 +30718,7 @@ ### CVE-2023-32117 (2024-12-09) -Missing Authorization vulnerability in princeahmed Integrate Google Drive integrate-google-drive allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Integrate Google Drive: from n/a through <= 1.1.99. +Missing Authorization vulnerability in SoftLab Integrate Google Drive allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Integrate Google Drive: from n/a through 1.1.99. - [RandomRobbieBF/CVE-2023-32117](https://github.com/RandomRobbieBF/CVE-2023-32117) @@ -30840,7 +30873,7 @@ ### CVE-2023-32590 (2023-12-20) -Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Daniel Sรถderstrรถm / Sidney van de Stouwe Subscribe to Category.This issue affects Subscribe to Category: from n/a through 2.7.4.\n\n +Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Daniel Sรถderstrรถm / Sidney van de Stouwe Subscribe to Category.This issue affects Subscribe to Category: from n/a through 2.7.4. - [RandomRobbieBF/CVE-2023-32590](https://github.com/RandomRobbieBF/CVE-2023-32590) @@ -31830,7 +31863,7 @@ ### CVE-2023-36531 (2024-12-13) -Missing Authorization vulnerability in liquidpoll LiquidPoll wp-poll allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LiquidPoll: from n/a through <= 3.3.68. +Missing Authorization vulnerability in LiquidPoll LiquidPoll โ€“ Advanced Polls for Creators and Brands allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LiquidPoll โ€“ Advanced Polls for Creators and Brands: from n/a through 3.3.68. - [RandomRobbieBF/CVE-2023-36531](https://github.com/RandomRobbieBF/CVE-2023-36531) @@ -32666,7 +32699,7 @@ ### CVE-2023-40000 (2024-04-16) -Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through 5.7.\n\n +Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through 5.7. - [rxerium/CVE-2023-40000](https://github.com/rxerium/CVE-2023-40000) @@ -32851,7 +32884,7 @@ ### CVE-2023-40600 (2023-11-30) -Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Exactly WWW EWWW Image Optimizer.ย It works only when debug.log is turned on.This issue affects EWWW Image Optimizer: from n/a through 7.2.0.\n\n +Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Exactly WWW EWWW Image Optimizer.ย It works only when debug.log is turned on.This issue affects EWWW Image Optimizer: from n/a through 7.2.0. - [RandomRobbieBF/CVE-2023-40600](https://github.com/RandomRobbieBF/CVE-2023-40600) @@ -33039,7 +33072,7 @@ ### CVE-2023-41652 (2023-11-03) -Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David F. Carr RSVPMaker rsvpmaker allows SQL Injection.This issue affects RSVPMaker: from n/a through 10.6.6.\n\n +Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in David F. Carr RSVPMaker rsvpmaker allows SQL Injection.This issue affects RSVPMaker: from n/a through 10.6.6. - [RandomRobbieBF/CVE-2023-41652](https://github.com/RandomRobbieBF/CVE-2023-41652) @@ -33960,7 +33993,7 @@ ### CVE-2023-45657 (2023-11-06) -A vulnerability in posimyththemes Nexter nexter.This issue affects Nexter: from n/a through <= 2.0.3. +Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in POSIMYTH Nexter allows SQL Injection.This issue affects Nexter: from n/a through 2.0.3. - [RandomRobbieBF/CVE-2023-45657](https://github.com/RandomRobbieBF/CVE-2023-45657) @@ -34291,7 +34324,7 @@ ### CVE-2023-46615 (2024-02-12) -Deserialization of Untrusted Data vulnerability in Kalli Dan. KD Coming Soon.This issue affects KD Coming Soon: from n/a through 1.7.\n\n +Deserialization of Untrusted Data vulnerability in Kalli Dan. KD Coming Soon.This issue affects KD Coming Soon: from n/a through 1.7. - [RandomRobbieBF/CVE-2023-46615](https://github.com/RandomRobbieBF/CVE-2023-46615) @@ -34542,14 +34575,14 @@ ### CVE-2023-47504 (2024-04-24) -Improper Authentication vulnerability in Elementor Elementor Website Builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Elementor Website Builder: from n/a through 3.16.4.\n\n +Improper Authentication vulnerability in Elementor Elementor Website Builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Elementor Website Builder: from n/a through 3.16.4. - [davidxbors/CVE-2023-47504-POC](https://github.com/davidxbors/CVE-2023-47504-POC) ### CVE-2023-47529 (2023-11-23) -Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ThemeIsle Cloud Templates & Patterns collection.This issue affects Cloud Templates & Patterns collection: from n/a through 1.2.2.\n\n +Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ThemeIsle Cloud Templates & Patterns collection.This issue affects Cloud Templates & Patterns collection: from n/a through 1.2.2. - [RandomRobbieBF/CVE-2023-47529](https://github.com/RandomRobbieBF/CVE-2023-47529) @@ -34571,7 +34604,7 @@ ### CVE-2023-47840 (2023-12-29) -Improper Control of Generation of Code ('Code Injection') vulnerability in Qode Interactive Qode Essential Addons.This issue affects Qode Essential Addons: from n/a through 1.5.2.\n\n +Improper Control of Generation of Code ('Code Injection') vulnerability in Qode Interactive Qode Essential Addons.This issue affects Qode Essential Addons: from n/a through 1.5.2. - [RandomRobbieBF/CVE-2023-47840](https://github.com/RandomRobbieBF/CVE-2023-47840) @@ -34650,7 +34683,7 @@ ### CVE-2023-48777 (2024-03-26) -Unrestricted Upload of File with Dangerous Type vulnerability in Elementor.Com Elementor Website Builder.This issue affects Elementor Website Builder: from 3.3.0 through 3.18.1.\n\n +Unrestricted Upload of File with Dangerous Type vulnerability in Elementor.Com Elementor Website Builder.This issue affects Elementor Website Builder: from 3.3.0 through 3.18.1. - [AkuCyberSec/Elementor-3.18.0-Upload-Path-Traversal-RCE-CVE-2023-48777](https://github.com/AkuCyberSec/Elementor-3.18.0-Upload-Path-Traversal-RCE-CVE-2023-48777) @@ -35214,7 +35247,7 @@ ### CVE-2023-50839 (2023-12-28) -Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JS Help Desk JS Help Desk โ€“ Best Help Desk & Support Plugin.This issue affects JS Help Desk โ€“ Best Help Desk & Support Plugin: from n/a through 2.8.1.\n\n +Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JS Help Desk JS Help Desk โ€“ Best Help Desk & Support Plugin.This issue affects JS Help Desk โ€“ Best Help Desk & Support Plugin: from n/a through 2.8.1. - [Francesco-CyberIntelligence/bug-bounty-findings-o-research-disclosures.](https://github.com/Francesco-CyberIntelligence/bug-bounty-findings-o-research-disclosures.) @@ -35290,7 +35323,7 @@ ### CVE-2023-51409 (2024-04-12) -Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 1.9.98.\n\n +Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 1.9.98. - [RandomRobbieBF/CVE-2023-51409](https://github.com/RandomRobbieBF/CVE-2023-51409) @@ -35328,7 +35361,7 @@ ### CVE-2023-51504 (2024-02-05) -Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dan Dulaney Dan's Embedder for Google Calendar allows Stored XSS.This issue affects Dan's Embedder for Google Calendar: from n/a through 1.2.\n\n +Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dan Dulaney Dan's Embedder for Google Calendar allows Stored XSS.This issue affects Dan's Embedder for Google Calendar: from n/a through 1.2. - [Sybelle03/CVE-2023-51504](https://github.com/Sybelle03/CVE-2023-51504) @@ -40574,7 +40607,7 @@ ### CVE-2022-34155 (2023-07-18) -Improper Authentication vulnerability in miniOrange OAuth Single Sign On โ€“ SSO (OAuth Client) plugin allows Authentication Bypass.This issue affects OAuth Single Sign On โ€“ SSO (OAuth Client): from n/a through 6.23.3.\n\n +Improper Authentication vulnerability in miniOrange OAuth Single Sign On โ€“ SSO (OAuth Client) plugin allows Authentication Bypass.This issue affects OAuth Single Sign On โ€“ SSO (OAuth Client): from n/a through 6.23.3. - [vanh-88/CVE-2022-34155](https://github.com/vanh-88/CVE-2022-34155) @@ -42355,7 +42388,7 @@ ### CVE-2022-45354 (2024-01-08) -Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.7.60.\n\n +Exposure of Sensitive Information to an Unauthorized Actor vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.7.60. - [RandomRobbieBF/CVE-2022-45354](https://github.com/RandomRobbieBF/CVE-2022-45354)