nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/06/23 06:51:28

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-06-23 15:51:28 +09:00
1 parent 91b489ce63
commit 2f3b6ee671
70 files changed
+458 -451
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2015/CVE-2015-7547.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 544,
"watchers_count": 544,
"has_discussions": false,
"forks_count": 164,
"forks_count": 165,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 164,
"forks": 165,
"watchers": 544,
"score": 0,
"subscribers_count": 59
2018/CVE-2018-0296.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Script to test for Cisco ASA path traversal vulnerability (CVE-2018-0296) and extract system information.",
"fork": false,
"created_at": "2018-06-21T15:44:29Z",
"updated_at": "2026-04-03T13:36:56Z",
"updated_at": "2026-06-23T03:22:31Z",
"pushed_at": "2024-02-15T22:16:16Z",
"stargazers_count": 205,
"watchers_count": 205,
"stargazers_count": 206,
"watchers_count": 206,
"has_discussions": false,
"forks_count": 64,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 64,
"watchers": 205,
"watchers": 206,
"score": 0,
"subscribers_count": 7
},
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-06-22T23:06:54Z",
"pushed_at": "2026-06-22T23:06:49Z",
"updated_at": "2026-06-23T04:34:50Z",
"pushed_at": "2026-06-23T04:34:46Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2019/CVE-2019-17558.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340",
"fork": false,
"created_at": "2020-04-01T09:33:35Z",
"updated_at": "2026-06-22T11:03:41Z",
"updated_at": "2026-06-23T02:48:03Z",
"pushed_at": "2021-04-04T09:13:57Z",
"stargazers_count": 4279,
"watchers_count": 4279,
"stargazers_count": 4281,
"watchers_count": 4281,
"has_discussions": false,
"forks_count": 1082,
"allow_forking": true,
@@ -81,7 +81,7 @@
],
"visibility": "public",
"forks": 1082,
"watchers": 4279,
"watchers": 4281,
"score": 0,
"subscribers_count": 148
},
2020/CVE-2020-0787.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Support ALL Windows Version",
"fork": false,
"created_at": "2020-06-16T08:57:51Z",
"updated_at": "2026-05-23T10:50:56Z",
"updated_at": "2026-06-23T05:39:40Z",
"pushed_at": "2020-09-11T07:38:22Z",
"stargazers_count": 720,
"watchers_count": 720,
"stargazers_count": 721,
"watchers_count": 721,
"has_discussions": false,
"forks_count": 168,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 168,
"watchers": 720,
"watchers": 721,
"score": 0,
"subscribers_count": 16
},
2020/CVE-2020-11651.json
+33
View File
@@ -440,5 +440,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 1
},
{
"id": 1277627922,
"name": "CVE-2020-11651-Poc",
"full_name": "s1lentf00thold\/CVE-2020-11651-Poc",
"owner": {
"login": "s1lentf00thold",
"id": 112778628,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/112778628?v=4",
"html_url": "https:\/\/github.com\/s1lentf00thold",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/s1lentf00thold\/CVE-2020-11651-Poc",
"description": null,
"fork": false,
"created_at": "2026-06-23T03:58:44Z",
"updated_at": "2026-06-23T04:01:33Z",
"pushed_at": "2026-06-23T04:01:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2020/CVE-2020-1472.json
+2 -2
View File
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-06-22T23:43:54Z",
"pushed_at": "2026-06-22T23:43:50Z",
"updated_at": "2026-06-23T05:47:43Z",
"pushed_at": "2026-06-23T05:47:39Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2020/CVE-2020-14882.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340",
"fork": false,
"created_at": "2020-04-01T09:33:35Z",
"updated_at": "2026-06-22T11:03:41Z",
"updated_at": "2026-06-23T02:48:03Z",
"pushed_at": "2021-04-04T09:13:57Z",
"stargazers_count": 4279,
"watchers_count": 4279,
"stargazers_count": 4281,
"watchers_count": 4281,
"has_discussions": false,
"forks_count": 1082,
"allow_forking": true,
@@ -48,7 +48,7 @@
],
"visibility": "public",
"forks": 1082,
"watchers": 4279,
"watchers": 4281,
"score": 0,
"subscribers_count": 148
},
2020/CVE-2020-1938.json
+4 -4
View File
@@ -377,10 +377,10 @@
"description": "Ghostcat read file\/code execute,CNVD-2020-10487(CVE-2020-1938) ",
"fork": false,
"created_at": "2020-02-22T16:16:20Z",
"updated_at": "2026-05-24T17:08:20Z",
"updated_at": "2026-06-23T00:38:51Z",
"pushed_at": "2020-03-09T14:51:43Z",
"stargazers_count": 415,
"watchers_count": 415,
"stargazers_count": 416,
"watchers_count": 416,
"has_discussions": false,
"forks_count": 112,
"allow_forking": true,
@@ -397,7 +397,7 @@
],
"visibility": "public",
"forks": 112,
"watchers": 415,
"watchers": 416,
"score": 0,
"subscribers_count": 3
},
2021/CVE-2021-0337.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 484647956,
"name": "frameworks_base_AOSP10_r33_CVE-2021-0337",
"full_name": "ShaikUsaf\/frameworks_base_AOSP10_r33_CVE-2021-0337",
"owner": {
"login": "ShaikUsaf",
"id": 100413972,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/100413972?v=4",
"html_url": "https:\/\/github.com\/ShaikUsaf",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ShaikUsaf\/frameworks_base_AOSP10_r33_CVE-2021-0337",
"description": null,
"fork": false,
"created_at": "2022-04-23T04:41:42Z",
"updated_at": "2022-04-23T05:03:49Z",
"pushed_at": "2022-04-23T05:03:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
}
]
2021/CVE-2021-0513.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 484659915,
"name": "framework_base_AOSP10_r33_CVE-2021-0513",
"full_name": "nanopathi\/framework_base_AOSP10_r33_CVE-2021-0513",
"owner": {
"login": "nanopathi",
"id": 26024136,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26024136?v=4",
"html_url": "https:\/\/github.com\/nanopathi",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/nanopathi\/framework_base_AOSP10_r33_CVE-2021-0513",
"description": null,
"fork": false,
"created_at": "2022-04-23T05:50:23Z",
"updated_at": "2022-04-23T06:23:48Z",
"pushed_at": "2022-04-23T06:23:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
}
]
2021/CVE-2021-0705.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 484649034,
"name": "frameworks_base_AOSP10_r33_CVE-2021-0705",
"full_name": "Trinadh465\/frameworks_base_AOSP10_r33_CVE-2021-0705",
"owner": {
"login": "Trinadh465",
"id": 102574296,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102574296?v=4",
"html_url": "https:\/\/github.com\/Trinadh465",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Trinadh465\/frameworks_base_AOSP10_r33_CVE-2021-0705",
"description": null,
"fork": false,
"created_at": "2022-04-23T04:47:32Z",
"updated_at": "2023-03-27T01:33:47Z",
"pushed_at": "2022-04-23T05:02:52Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
}
]
2021/CVE-2021-21735.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2021-21735 write-up: ZTE ZXHN H168N V3.5 wizard-page information leak, firmware routing flaw, and the path from exposed PPPoE\/WLAN data to full admin compromise.",
"fork": false,
"created_at": "2026-05-19T11:26:32Z",
"updated_at": "2026-05-26T09:53:59Z",
"updated_at": "2026-06-23T00:57:16Z",
"pushed_at": "2026-05-25T14:07:56Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -38,7 +38,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
}
2021/CVE-2021-21974.json
+1 -1
View File
@@ -162,7 +162,7 @@
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
"subscribers_count": 1
},
{
"id": 1050618532,
2021/CVE-2021-30860.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Scan for evidence of CVE-2021-30860 (FORCEDENTRY) exploit",
"fork": false,
"created_at": "2021-09-18T22:14:17Z",
"updated_at": "2026-05-23T10:52:26Z",
"updated_at": "2026-06-23T03:12:37Z",
"pushed_at": "2021-09-21T04:31:01Z",
"stargazers_count": 10,
"watchers_count": 10,
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 10,
"watchers": 11,
"score": 0,
"subscribers_count": 1
},
2021/CVE-2021-3129.json
+2 -2
View File
@@ -221,7 +221,7 @@
"stargazers_count": 163,
"watchers_count": 163,
"has_discussions": false,
"forks_count": 56,
"forks_count": 55,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -229,7 +229,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 56,
"forks": 55,
"watchers": 163,
"score": 0,
"subscribers_count": 1
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-06-23T00:20:44Z",
"pushed_at": "2026-06-23T00:20:40Z",
"updated_at": "2026-06-23T04:36:47Z",
"pushed_at": "2026-06-23T04:36:43Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-3450.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1277629000,
"name": "MUT-BC-SS-01",
"full_name": "dedellix\/MUT-BC-SS-01",
"owner": {
"login": "dedellix",
"id": 243733926,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/243733926?v=4",
"html_url": "https:\/\/github.com\/dedellix",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/dedellix\/MUT-BC-SS-01",
"description": "Mutation testing on X.509 Certificate Validation IN OpenSSL v.1.1.1h, based on CVE-2021-3450.",
"fork": false,
"created_at": "2026-06-23T04:00:29Z",
"updated_at": "2026-06-23T05:41:12Z",
"pushed_at": "2026-06-23T05:41:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2021/CVE-2021-35064.json
+1 -1
View File
@@ -30,6 +30,6 @@
"forks": 1,
"watchers": 3,
"score": 0,
"subscribers_count": 1
"subscribers_count": 2
}
]
2021/CVE-2021-37840.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1277605179,
"name": "aapanel-ws-bypass",
"full_name": "EonSecurity\/aapanel-ws-bypass",
"owner": {
"login": "EonSecurity",
"id": 296035383,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/296035383?v=4",
"html_url": "https:\/\/github.com\/EonSecurity",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/EonSecurity\/aapanel-ws-bypass",
"description": "aaPanel WebSocket CSRF Bypass leading to RCE (Incomplete fix for CVE-2021-37840)",
"fork": false,
"created_at": "2026-06-23T03:21:10Z",
"updated_at": "2026-06-23T03:33:54Z",
"pushed_at": "2026-06-23T03:33:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2021/CVE-2021-41773.json
+33
View File
@@ -4836,5 +4836,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1277633344,
"name": "CVE-2021-41773",
"full_name": "Joapath\/CVE-2021-41773",
"owner": {
"login": "Joapath",
"id": 265891812,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/265891812?v=4",
"html_url": "https:\/\/github.com\/Joapath",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Joapath\/CVE-2021-41773",
"description": "Prueba de concepto de CVE-2021-41773",
"fork": false,
"created_at": "2026-06-23T04:07:49Z",
"updated_at": "2026-06-23T04:19:52Z",
"pushed_at": "2026-06-23T04:19:48Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2021/CVE-2021-44228.json
+4 -4
View File
@@ -1349,10 +1349,10 @@
"description": "CVE-2021-44228 Log4j2 BurpSuite Scanner,Customize ceye.io api or other apis,including internal networks",
"fork": false,
"created_at": "2021-12-11T07:19:11Z",
"updated_at": "2026-06-16T02:16:38Z",
"updated_at": "2026-06-23T03:13:12Z",
"pushed_at": "2023-06-13T09:17:54Z",
"stargazers_count": 843,
"watchers_count": 843,
"stargazers_count": 844,
"watchers_count": 844,
"has_discussions": false,
"forks_count": 107,
"allow_forking": true,
@@ -1368,7 +1368,7 @@
],
"visibility": "public",
"forks": 107,
"watchers": 843,
"watchers": 844,
"score": 0,
"subscribers_count": 11
},
2022/CVE-2022-25262.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "PoC + vulnerability details for CVE-2022-25262 \/ JetBrains Hub single-click SAML response takeover",
"fork": false,
"created_at": "2022-05-03T21:38:58Z",
"updated_at": "2024-08-12T20:22:57Z",
"updated_at": "2026-06-23T02:12:45Z",
"pushed_at": "2022-07-05T17:32:01Z",
"stargazers_count": 16,
"watchers_count": 16,
"stargazers_count": 17,
"watchers_count": 17,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -35,7 +35,7 @@
],
"visibility": "public",
"forks": 5,
"watchers": 16,
"watchers": 17,
"score": 0,
"subscribers_count": 2
}
2022/CVE-2022-37932.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2025-04-10T03:27:07Z",
"updated_at": "2026-06-01T13:29:40Z",
"updated_at": "2026-06-23T02:58:52Z",
"pushed_at": "2025-04-10T03:27:32Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 1
}
2022/CVE-2022-40769.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": null,
"fork": false,
"created_at": "2026-06-22T17:27:35Z",
"updated_at": "2026-06-22T17:28:32Z",
"updated_at": "2026-06-23T03:10:13Z",
"pushed_at": "2026-06-22T17:28:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2023/CVE-2023-32434.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙",
"fork": false,
"created_at": "2025-08-13T09:19:29Z",
"updated_at": "2026-06-22T22:34:27Z",
"pushed_at": "2026-06-22T22:34:22Z",
"updated_at": "2026-06-23T06:09:30Z",
"pushed_at": "2026-06-23T06:09:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-45612.json
+4 -4
View File
@@ -184,10 +184,10 @@
"description": "Ktor XXE Injection Proof-of-Concept (CVE-2023-45612)",
"fork": false,
"created_at": "2025-11-07T15:47:22Z",
"updated_at": "2025-11-08T17:57:49Z",
"updated_at": "2026-06-23T04:44:11Z",
"pushed_at": "2025-11-08T17:55:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -204,7 +204,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
2023/CVE-2023-6019.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": "PoC exploit for CVE-2023-6019 - Remote Code Execution via unauthenticated Ray Dashboard Jobs API.",
"fork": false,
"created_at": "2026-06-19T19:08:58Z",
"updated_at": "2026-06-19T21:12:56Z",
"updated_at": "2026-06-23T02:15:12Z",
"pushed_at": "2026-06-19T19:11:03Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 0
}
2024/CVE-2024-0670.json
+2 -2
View File
@@ -172,8 +172,8 @@
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
"fork": false,
"created_at": "2026-01-08T01:32:09Z",
"updated_at": "2026-06-22T23:17:20Z",
"pushed_at": "2026-06-22T23:17:16Z",
"updated_at": "2026-06-23T04:09:05Z",
"pushed_at": "2026-06-23T04:09:01Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-12542.json
+33
View File
@@ -1,4 +1,37 @@
[
{
"id": 914772395,
"name": "CVE-2024-12542",
"full_name": "RandomRobbieBF\/CVE-2024-12542",
"owner": {
"login": "RandomRobbieBF",
"id": 51722811,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
"html_url": "https:\/\/github.com\/RandomRobbieBF",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-12542",
"description": "linkID <= 0.1.2 - Missing Authorization to Unauthenticated Sensitive Information Exposure",
"fork": false,
"created_at": "2025-01-10T09:23:18Z",
"updated_at": "2026-02-24T12:59:31Z",
"pushed_at": "2025-01-10T09:24:14Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 1
},
{
"id": 926855680,
"name": "CVE-2024-12542-PoC",
2024/CVE-2024-3721.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 1169363082,
"name": "homeip",
"full_name": "bytecategory\/homeip",
"owner": {
"login": "bytecategory",
"id": 174661940,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/174661940?v=4",
"html_url": "https:\/\/github.com\/bytecategory",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/bytecategory\/homeip",
"description": "I will teach you how to \"buy\" a home IP for free,analyze CVE-2024-3721,launch a udp flood attack. please refer to the html file, not the README.md file.",
"fork": false,
"created_at": "2026-02-28T15:20:04Z",
"updated_at": "2026-04-01T13:28:58Z",
"pushed_at": "2026-03-01T05:47:01Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2024/CVE-2024-43044.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "The script checks Jenkins endpoints for CVE-2024-43044 by retrieving the Jenkins version from the innstance and comparing it against known vulnerable version ranges.",
"fork": false,
"created_at": "2024-08-08T08:28:26Z",
"updated_at": "2026-05-19T14:07:51Z",
"updated_at": "2026-06-23T02:57:58Z",
"pushed_at": "2024-08-08T09:32:00Z",
"stargazers_count": 20,
"watchers_count": 20,
"stargazers_count": 21,
"watchers_count": 21,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -32,7 +32,7 @@
],
"visibility": "public",
"forks": 6,
"watchers": 20,
"watchers": 21,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-14847.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
"fork": false,
"created_at": "2025-07-30T15:52:00Z",
"updated_at": "2026-06-22T23:20:31Z",
"pushed_at": "2026-06-22T23:20:27Z",
"updated_at": "2026-06-23T04:12:24Z",
"pushed_at": "2026-06-23T04:12:20Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1129,8 +1129,8 @@
"description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
"fork": false,
"created_at": "2026-01-14T06:05:44Z",
"updated_at": "2026-06-22T23:19:48Z",
"pushed_at": "2026-06-22T23:19:44Z",
"updated_at": "2026-06-23T04:11:45Z",
"pushed_at": "2026-06-23T04:11:41Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-21479.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 29,
"watchers_count": 29,
"has_discussions": false,
"forks_count": 8,
"forks_count": 9,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 8,
"forks": 9,
"watchers": 29,
"score": 0,
"subscribers_count": 2
2025/CVE-2025-21756.json
+8 -8
View File
@@ -14,10 +14,10 @@
"description": "Exploit for CVE-2025-21756 for Linux kernel 6.6.75. My first linux kernel exploit!",
"fork": false,
"created_at": "2025-04-18T14:22:15Z",
"updated_at": "2026-05-20T06:26:55Z",
"updated_at": "2026-06-23T04:23:44Z",
"pushed_at": "2025-06-05T21:32:05Z",
"stargazers_count": 159,
"watchers_count": 159,
"stargazers_count": 160,
"watchers_count": 160,
"has_discussions": false,
"forks_count": 26,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 26,
"watchers": 159,
"watchers": 160,
"score": 0,
"subscribers_count": 3
},
@@ -80,10 +80,10 @@
"description": null,
"fork": false,
"created_at": "2025-06-26T02:47:49Z",
"updated_at": "2026-01-10T02:27:28Z",
"updated_at": "2026-06-23T04:24:25Z",
"pushed_at": "2025-09-23T11:06:51Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 7,
"watchers": 8,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-24054.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "PoC - CVE-2025-24071 \/ CVE-2025-24054, NTMLv2 hash'leri alınabilen bir vulnerability",
"fork": false,
"created_at": "2025-04-18T11:17:48Z",
"updated_at": "2025-07-26T05:49:07Z",
"updated_at": "2026-06-23T02:21:53Z",
"pushed_at": "2025-04-18T11:24:43Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-24257.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis",
"fork": false,
"created_at": "2026-04-04T03:42:55Z",
"updated_at": "2026-06-22T23:59:25Z",
"pushed_at": "2026-06-22T23:59:20Z",
"updated_at": "2026-06-23T04:51:42Z",
"pushed_at": "2026-06-23T04:51:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-31258.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔓 Explore CVE-2025-31258 with this PoC demonstrating partial sandbox escape using RemoteViewServices for practical 1-day security practice.",
"fork": false,
"created_at": "2020-06-23T15:20:11Z",
"updated_at": "2026-06-22T22:38:57Z",
"pushed_at": "2026-06-22T22:38:53Z",
"updated_at": "2026-06-23T06:14:01Z",
"pushed_at": "2026-06-23T06:13:57Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-31336.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "Research into systemic PDF417 validation vulnerabilities in AAMVA-compliant ID systems (CVE-2025-31336, CVE-2025-31337, scr1841160)",
"fork": false,
"created_at": "2025-03-28T22:16:54Z",
"updated_at": "2025-07-16T03:49:59Z",
"updated_at": "2026-06-23T05:12:53Z",
"pushed_at": "2025-07-16T03:49:55Z",
"stargazers_count": 0,
"watchers_count": 0,
2025/CVE-2025-32463.json
+2 -2
View File
@@ -1595,8 +1595,8 @@
"description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.",
"fork": false,
"created_at": "2025-09-20T00:42:07Z",
"updated_at": "2026-06-22T22:39:47Z",
"pushed_at": "2026-06-22T22:39:43Z",
"updated_at": "2026-06-23T06:14:51Z",
"pushed_at": "2026-06-23T06:14:48Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-48507.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Proof of Concept of CVE-2025-48507. The security flaw can be leveraged by Non-Secure software (e.g., Linux) to break Trust Zone and gain access to Secure world",
"fork": false,
"created_at": "2025-07-01T12:24:02Z",
"updated_at": "2025-11-16T20:31:30Z",
"updated_at": "2026-06-23T02:21:31Z",
"pushed_at": "2025-11-13T17:30:33Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-49844.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.",
"fork": false,
"created_at": "2019-04-13T07:51:09Z",
"updated_at": "2026-06-22T22:51:29Z",
"pushed_at": "2026-06-22T22:51:25Z",
"updated_at": "2026-06-23T06:26:39Z",
"pushed_at": "2026-06-23T06:26:36Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
"fork": false,
"created_at": "2022-04-06T09:27:39Z",
"updated_at": "2026-06-22T22:52:00Z",
"pushed_at": "2026-06-22T22:51:56Z",
"updated_at": "2026-06-23T06:27:21Z",
"pushed_at": "2026-06-23T06:27:18Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-52915.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-06-22T19:39:35Z",
"updated_at": "2026-06-23T02:06:59Z",
"pushed_at": "2026-06-20T15:36:23Z",
"stargazers_count": 812,
"watchers_count": 812,
"stargazers_count": 813,
"watchers_count": 813,
"has_discussions": false,
"forks_count": 120,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 120,
"watchers": 812,
"watchers": 813,
"score": 0,
"subscribers_count": 19
}
2025/CVE-2025-54424.json
+2 -2
View File
@@ -53,8 +53,8 @@
"description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐",
"fork": false,
"created_at": "2025-08-14T05:16:16Z",
"updated_at": "2026-06-22T22:35:08Z",
"pushed_at": "2026-06-22T22:35:04Z",
"updated_at": "2026-06-23T06:10:18Z",
"pushed_at": "2026-06-23T06:10:14Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2025/CVE-2025-55182.json
+18 -18
View File
@@ -14,8 +14,8 @@
"description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.",
"fork": false,
"created_at": "2022-06-17T10:19:10Z",
"updated_at": "2026-06-22T23:11:12Z",
"pushed_at": "2026-06-22T23:10:48Z",
"updated_at": "2026-06-23T04:02:27Z",
"pushed_at": "2026-06-23T04:02:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -99,8 +99,8 @@
"description": null,
"fork": false,
"created_at": "2024-11-29T12:32:19Z",
"updated_at": "2026-06-22T23:11:26Z",
"pushed_at": "2026-06-22T23:11:11Z",
"updated_at": "2026-06-23T04:03:03Z",
"pushed_at": "2026-06-23T04:02:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -148,8 +148,8 @@
"description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
"fork": false,
"created_at": "2025-06-06T16:34:46Z",
"updated_at": "2026-06-22T23:10:57Z",
"pushed_at": "2026-06-22T23:10:53Z",
"updated_at": "2026-06-23T04:02:47Z",
"pushed_at": "2026-06-23T04:02:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -838,10 +838,10 @@
"description": "Next.js-Exploit-Tool 图形化综合利用工具，基于 Go 开发，一款针对 CVE-2025-55182 的独立安全评估工具。",
"fork": false,
"created_at": "2025-12-04T06:50:31Z",
"updated_at": "2026-06-22T11:04:50Z",
"updated_at": "2026-06-23T05:05:23Z",
"pushed_at": "2025-12-11T07:59:45Z",
"stargazers_count": 116,
"watchers_count": 116,
"stargazers_count": 117,
"watchers_count": 117,
"has_discussions": false,
"forks_count": 12,
"allow_forking": true,
@@ -852,7 +852,7 @@
"topics": [],
"visibility": "public",
"forks": 12,
"watchers": 116,
"watchers": 117,
"score": 0,
"subscribers_count": 0
},
@@ -2765,10 +2765,10 @@
"description": "React Server Components 远程代码执行漏洞(CVE-2025-55182)",
"fork": false,
"created_at": "2025-12-05T12:27:50Z",
"updated_at": "2026-04-09T12:29:23Z",
"updated_at": "2026-06-23T05:10:30Z",
"pushed_at": "2025-12-05T12:33:25Z",
"stargazers_count": 9,
"watchers_count": 9,
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -2779,7 +2779,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 9,
"watchers": 10,
"score": 0,
"subscribers_count": 0
},
@@ -11804,8 +11804,8 @@
"description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.",
"fork": false,
"created_at": "2025-12-24T14:48:19Z",
"updated_at": "2026-06-22T23:11:14Z",
"pushed_at": "2026-06-22T23:10:45Z",
"updated_at": "2026-06-23T06:46:11Z",
"pushed_at": "2026-06-23T06:46:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12322,8 +12322,8 @@
"description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
"fork": false,
"created_at": "2026-01-02T01:28:57Z",
"updated_at": "2026-06-22T23:14:25Z",
"pushed_at": "2026-06-22T23:14:21Z",
"updated_at": "2026-06-23T04:06:04Z",
"pushed_at": "2026-06-23T04:06:00Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-66398.json
+2 -2
View File
@@ -64,8 +64,8 @@
"description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.",
"fork": false,
"created_at": "2026-03-23T09:09:21Z",
"updated_at": "2026-06-22T23:54:02Z",
"pushed_at": "2026-06-22T23:53:57Z",
"updated_at": "2026-06-23T04:46:14Z",
"pushed_at": "2026-06-23T04:46:11Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-66478.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.",
"fork": false,
"created_at": "2025-10-01T07:40:09Z",
"updated_at": "2026-06-22T23:11:49Z",
"pushed_at": "2026-06-22T23:11:44Z",
"updated_at": "2026-06-23T04:03:50Z",
"pushed_at": "2026-06-23T04:03:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-68921.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.",
"fork": false,
"created_at": "2026-01-24T21:00:41Z",
"updated_at": "2026-06-22T23:25:30Z",
"pushed_at": "2026-06-22T23:25:25Z",
"updated_at": "2026-06-23T04:17:42Z",
"pushed_at": "2026-06-23T04:17:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-69985.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit CVE-2025-69985 to bypass authentication and execute remote commands on FUXA versions ≤ 1.2.8 via the \/api\/runscript endpoint.",
"fork": false,
"created_at": "2025-04-10T09:18:30Z",
"updated_at": "2026-06-22T23:44:12Z",
"pushed_at": "2026-06-22T23:44:09Z",
"updated_at": "2026-06-23T04:36:18Z",
"pushed_at": "2026-06-23T04:36:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-0073.json
+6 -49
View File
@@ -1,47 +1,4 @@
[
{
"id": 1231388578,
"name": "CVE-2026-0073-Android-ADBD-bypass-POC",
"full_name": "MartinPSDev\/CVE-2026-0073-Android-ADBD-bypass-POC",
"owner": {
"login": "MartinPSDev",
"id": 85715612,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/85715612?v=4",
"html_url": "https:\/\/github.com\/MartinPSDev",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/MartinPSDev\/CVE-2026-0073-Android-ADBD-bypass-POC",
"description": "CVE-2026-0073 — Android ADB daemon (adbd) TLS authentication bypass via EVP_PKEY_cmp type confusion. Gain unauthorized shell access over WiFi using EC\/Ed25519 key mismatch. PoC exploit for Android 14+.",
"fork": false,
"created_at": "2026-05-06T23:11:23Z",
"updated_at": "2026-06-12T00:46:56Z",
"pushed_at": "2026-05-07T11:15:25Z",
"stargazers_count": 15,
"watchers_count": 15,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"adbd",
"android",
"cve-2026-0073",
"evp-pkey-cmp",
"exploit",
"poc",
"security-research",
"tls-bypass",
"vulnerability"
],
"visibility": "public",
"forks": 5,
"watchers": 15,
"score": 0,
"subscribers_count": 0
},
{
"id": 1231997018,
"name": "CVE-2026-0073",
@@ -156,12 +113,12 @@
"description": "An automated exploit for CVE-2026-0073 (Android ADB TLS Auth Bypass). Features a built-in mDNS\/Zeroconf scanner to instantly discover randomized Wireless Debugging ports on Android 13+ and establishes a fully interactive raw PTY shell.",
"fork": false,
"created_at": "2026-05-20T08:02:35Z",
"updated_at": "2026-06-22T23:51:30Z",
"updated_at": "2026-06-23T03:11:17Z",
"pushed_at": "2026-05-20T10:53:30Z",
"stargazers_count": 21,
"watchers_count": 21,
"stargazers_count": 22,
"watchers_count": 22,
"has_discussions": false,
"forks_count": 4,
"forks_count": 5,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -169,8 +126,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 21,
"forks": 5,
"watchers": 22,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-20452.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": null,
"fork": false,
"created_at": "2026-06-06T07:25:49Z",
"updated_at": "2026-06-21T07:20:13Z",
"updated_at": "2026-06-23T05:33:56Z",
"pushed_at": "2026-06-21T07:20:10Z",
"stargazers_count": 0,
"watchers_count": 0,
2026/CVE-2026-20841.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.",
"fork": false,
"created_at": "2024-09-22T12:19:06Z",
"updated_at": "2026-06-22T23:39:57Z",
"pushed_at": "2026-06-22T23:39:53Z",
"updated_at": "2026-06-23T04:31:56Z",
"pushed_at": "2026-06-23T04:31:52Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.",
"fork": false,
"created_at": "2026-02-26T05:21:28Z",
"updated_at": "2026-06-22T23:39:10Z",
"pushed_at": "2026-06-22T23:39:07Z",
"updated_at": "2026-06-23T04:31:28Z",
"pushed_at": "2026-06-23T04:31:24Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-21018.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1277512642,
"name": "CVE-2026-21018",
"full_name": "Filipemendonca1978\/CVE-2026-21018",
"owner": {
"login": "Filipemendonca1978",
"id": 82539588,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/82539588?v=4",
"html_url": "https:\/\/github.com\/Filipemendonca1978",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Filipemendonca1978\/CVE-2026-21018",
"description": "A minimal PoC for CVE-2026-21018, demonstrating how it works",
"fork": false,
"created_at": "2026-06-23T00:53:19Z",
"updated_at": "2026-06-23T01:01:29Z",
"pushed_at": "2026-06-23T01:01:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-24061.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.",
"fork": false,
"created_at": "2026-02-03T19:46:10Z",
"updated_at": "2026-06-22T23:30:46Z",
"pushed_at": "2026-06-22T23:30:42Z",
"updated_at": "2026-06-23T04:22:46Z",
"pushed_at": "2026-06-23T04:22:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24291.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions",
"fork": false,
"created_at": "2026-03-26T04:38:27Z",
"updated_at": "2026-06-22T23:55:39Z",
"pushed_at": "2026-06-22T23:55:35Z",
"updated_at": "2026-06-23T04:47:48Z",
"pushed_at": "2026-06-23T04:47:45Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-2441.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.",
"fork": false,
"created_at": "2026-03-03T14:19:18Z",
"updated_at": "2026-06-22T23:42:07Z",
"pushed_at": "2026-06-22T23:42:02Z",
"updated_at": "2026-06-23T04:34:01Z",
"pushed_at": "2026-06-23T04:33:57Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-2472.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.",
"fork": false,
"created_at": "2026-03-10T14:40:04Z",
"updated_at": "2026-06-22T23:46:18Z",
"pushed_at": "2026-06-22T23:46:14Z",
"updated_at": "2026-06-23T04:38:17Z",
"pushed_at": "2026-06-23T04:38:14Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-27654.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "NGINX `ngx_http_dav_module` Heap Buffer Overflow via `size_t` Underflow (Remote DoS \/ Potential RCE)",
"fork": false,
"created_at": "2026-04-06T17:27:29Z",
"updated_at": "2026-06-01T07:33:46Z",
"updated_at": "2026-06-23T01:57:03Z",
"pushed_at": "2026-06-01T07:33:45Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -33,7 +33,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-31431.json
+4 -46
View File
@@ -1032,8 +1032,8 @@
"description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.",
"fork": false,
"created_at": "2026-05-05T04:58:21Z",
"updated_at": "2026-06-23T00:14:11Z",
"pushed_at": "2026-06-23T00:14:07Z",
"updated_at": "2026-06-23T05:06:03Z",
"pushed_at": "2026-06-23T05:05:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -1147,8 +1147,8 @@
"description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.",
"fork": false,
"created_at": "2026-05-06T09:49:14Z",
"updated_at": "2026-06-23T00:14:47Z",
"pushed_at": "2026-06-23T00:14:43Z",
"updated_at": "2026-06-23T05:06:40Z",
"pushed_at": "2026-06-23T05:06:36Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
@@ -1396,48 +1396,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1231911578,
"name": "copyfail",
"full_name": "kwilck\/copyfail",
"owner": {
"login": "kwilck",
"id": 90837346,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90837346?v=4",
"html_url": "https:\/\/github.com\/kwilck",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/kwilck\/copyfail",
"description": "Copy Fail (CVE-2026-31431) is a logic flaw in the Linux kernel's algif_aead module — part of the AF_ALG userspace crypto API. It was disclosed on April 29, 2026 by Theori \/ Xint Code.",
"fork": false,
"created_at": "2026-05-07T12:05:20Z",
"updated_at": "2026-06-15T06:06:02Z",
"pushed_at": "2026-05-07T12:10:33Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"cve-2026-31431",
"cve-scanning",
"cybersecurity",
"cybersecurity-tools",
"linux",
"linux-kernel",
"privilege-escalation"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1231938544,
"name": "cve-2026-31431",
2026/CVE-2026-31802.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"fork": false,
"created_at": "2026-03-28T20:49:46Z",
"updated_at": "2026-06-22T23:56:45Z",
"pushed_at": "2026-06-22T23:56:41Z",
"updated_at": "2026-06-23T04:48:55Z",
"pushed_at": "2026-06-23T04:48:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-3609.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-06-22T19:39:35Z",
"updated_at": "2026-06-23T02:06:59Z",
"pushed_at": "2026-06-20T15:36:23Z",
"stargazers_count": 812,
"watchers_count": 812,
"stargazers_count": 813,
"watchers_count": 813,
"has_discussions": false,
"forks_count": 120,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 120,
"watchers": 812,
"watchers": 813,
"score": 0,
"subscribers_count": 19
},
2026/CVE-2026-40369.json
+37 -4
View File
@@ -14,10 +14,10 @@
"description": "Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browsers render process sandbox",
"fork": false,
"created_at": "2026-05-13T20:56:15Z",
"updated_at": "2026-06-22T11:05:03Z",
"updated_at": "2026-06-23T03:17:12Z",
"pushed_at": "2026-05-18T21:29:59Z",
"stargazers_count": 248,
"watchers_count": 248,
"stargazers_count": 249,
"watchers_count": 249,
"has_discussions": false,
"forks_count": 54,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 54,
"watchers": 248,
"watchers": 249,
"score": 0,
"subscribers_count": 5
},
@@ -130,5 +130,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1277579498,
"name": "CVE-2026-40369",
"full_name": "CCELEND\/CVE-2026-40369",
"owner": {
"login": "CCELEND",
"id": 76477447,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/76477447?v=4",
"html_url": "https:\/\/github.com\/CCELEND",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/CCELEND\/CVE-2026-40369",
"description": "CVE-2026-40369本地权限提升漏洞exp",
"fork": false,
"created_at": "2026-06-23T02:37:58Z",
"updated_at": "2026-06-23T02:44:33Z",
"pushed_at": "2026-06-23T02:44:29Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-41940.json
+2 -2
View File
@@ -357,8 +357,8 @@
"description": "Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.",
"fork": false,
"created_at": "2026-05-06T18:08:48Z",
"updated_at": "2026-06-23T00:15:03Z",
"pushed_at": "2026-06-23T00:15:00Z",
"updated_at": "2026-06-23T05:06:58Z",
"pushed_at": "2026-06-23T05:06:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-45585.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Manage and recover BitLocker encrypted drives with this tool for Windows 11 recovery key management and educational study of CVE-2026-45585.",
"fork": false,
"created_at": "2026-06-16T07:21:36Z",
"updated_at": "2026-06-23T00:21:22Z",
"pushed_at": "2026-06-23T00:21:17Z",
"updated_at": "2026-06-23T05:13:21Z",
"pushed_at": "2026-06-23T05:13:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-46333.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "CVE-2026-46333",
"fork": false,
"created_at": "2026-05-17T10:14:44Z",
"updated_at": "2026-06-22T11:05:03Z",
"updated_at": "2026-06-23T06:16:25Z",
"pushed_at": "2026-05-17T10:38:48Z",
"stargazers_count": 30,
"watchers_count": 30,
"stargazers_count": 31,
"watchers_count": 31,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 30,
"watchers": 31,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-48908.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Unauthenticated RCE PoC for CVE-2026-48908 — SP Page Builder for Joomla (≤ 6.6.1): arbitrary file upload via asset.uploadCustomIcon. Self-cleaning, token-guarded. Authorized testing only.",
"fork": false,
"created_at": "2026-06-22T09:31:27Z",
"updated_at": "2026-06-23T00:36:11Z",
"updated_at": "2026-06-23T05:36:55Z",
"pushed_at": "2026-06-22T16:44:22Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -76,7 +76,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 4,
"watchers": 7,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-48909.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-48909 PoC",
"fork": false,
"created_at": "2026-06-21T21:30:39Z",
"updated_at": "2026-06-22T23:54:22Z",
"updated_at": "2026-06-23T06:25:03Z",
"pushed_at": "2026-06-21T21:31:12Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -37,7 +37,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 4,
"watchers": 7,
"score": 0,
"subscribers_count": 1
}
2026/CVE-2026-49975.json
+4 -4
View File
@@ -19,7 +19,7 @@
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"forks": 2,
"watchers": 5,
"score": 0,
"subscribers_count": 0
@@ -52,7 +52,7 @@
"stargazers_count": 23,
"watchers_count": 23,
"has_discussions": false,
"forks_count": 8,
"forks_count": 9,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 8,
"forks": 9,
"watchers": 23,
"score": 0,
"subscribers_count": 3
2026/CVE-2026-54806.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -41,7 +41,7 @@
"wp-activity-log"
],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 0
README.md
+25 -30
View File
@@ -20,7 +20,6 @@
<code>In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic error in the code. This could lead to remote (proximal/adjacent) code execution as the shell user with no additional execution privileges needed. User interaction is not needed for exploitation.
</code>
- [MartinPSDev/CVE-2026-0073-Android-ADBD-bypass-POC](https://github.com/MartinPSDev/CVE-2026-0073-Android-ADBD-bypass-POC)
- [0xBlackash/CVE-2026-0073](https://github.com/0xBlackash/CVE-2026-0073)
- [xqi1337/poc-CVE-2026-0073](https://github.com/xqi1337/poc-CVE-2026-0073)
- [tc4dy/CVE-2026-0073-PoC-Exploit](https://github.com/tc4dy/CVE-2026-0073-PoC-Exploit)
@@ -1175,6 +1174,13 @@
- [Vikramaditya015/samsung-android-lpe](https://github.com/Vikramaditya015/samsung-android-lpe)
### CVE-2026-21018 (2026-05-13)
<code>Out-of-bounds write in SveService prior to SMR May-2026 Release 1 allows local privileged attackers to execute arbitrary code.
</code>
- [Filipemendonca1978/CVE-2026-21018](https://github.com/Filipemendonca1978/CVE-2026-21018)
### CVE-2026-21510 (2026-02-10)
<code>Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
@@ -1740,7 +1746,6 @@
- [Mr-bv/Copy-fail-CVE-2026-31431-Exploit-in-C](https://github.com/Mr-bv/Copy-fail-CVE-2026-31431-Exploit-in-C)
- [adilkurtulmus/linux-copy-fail-CVE-2026-31431](https://github.com/adilkurtulmus/linux-copy-fail-CVE-2026-31431)
- [Vatson112/deny-af-alg-bpf](https://github.com/Vatson112/deny-af-alg-bpf)
- [kwilck/copyfail](https://github.com/kwilck/copyfail)
- [pvpaulo01/cve-2026-31431](https://github.com/pvpaulo01/cve-2026-31431)
- [tang-yikai/copy-fail-mitigation-with-bpftrace](https://github.com/tang-yikai/copy-fail-mitigation-with-bpftrace)
- [abdelkabirouadoukou/CVE-2026-31431-Analysis-and-Fix](https://github.com/abdelkabirouadoukou/CVE-2026-31431-Analysis-and-Fix)
@@ -2473,6 +2478,7 @@
- [ercihan/CVE-2026-40369](https://github.com/ercihan/CVE-2026-40369)
- [piffd0s/ntoskrnl-metadata](https://github.com/piffd0s/ntoskrnl-metadata)
- [0xBlackash/CVE-2026-40369](https://github.com/0xBlackash/CVE-2026-40369)
- [CCELEND/CVE-2026-40369](https://github.com/CCELEND/CVE-2026-40369)
### CVE-2026-40564 (2026-05-26)
@@ -16481,13 +16487,6 @@
- [taeseongk/CVE-2024-3690](https://github.com/taeseongk/CVE-2024-3690)
### CVE-2024-3721 (2024-04-13)
<code>Eine kritische Schwachstelle wurde in TBK DVR-4104 and DVR-4216 bis 20240412 gefunden. Betroffen davon ist ein unbekannter Prozess der Datei /device.rsp?opt=sys&amp;cmd=___S_O_S_T_R_E_A_MAX___. Mittels dem Manipulieren des Arguments mdb/mdc mit unbekannten Daten kann eine os command injection-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung.
</code>
- [bytecategory/homeip](https://github.com/bytecategory/homeip)
### CVE-2024-3806 (2024-05-09)
<code>The Porto theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 7.1.0 via the 'porto_ajax_posts' function. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where php file type can be uploaded and included.
@@ -18623,6 +18622,7 @@
<code>The linkID plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when including the 'phpinfo' function in all versions up to, and including, 0.1.2. This makes it possible for unauthenticated attackers to read configuration settings and predefined variables on the site's server. The plugin does not need to be activated for the vulnerability to be exploited.
</code>
- [RandomRobbieBF/CVE-2024-12542](https://github.com/RandomRobbieBF/CVE-2024-12542)
- [Nxploited/CVE-2024-12542-PoC](https://github.com/Nxploited/CVE-2024-12542-PoC)
### CVE-2024-12558 (2024-12-21)
@@ -43178,13 +43178,6 @@
- [ShaikUsaf/packages_apps_Bluetooth_AOSP10_r33_CVE-2021-0329](https://github.com/ShaikUsaf/packages_apps_Bluetooth_AOSP10_r33_CVE-2021-0329)
### CVE-2021-0337 (2021-02-10)
<code>In moveInMediaStore of FileSystemProvider.java, there is a possible file exposure due to stale metadata. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-157474195
</code>
- [ShaikUsaf/frameworks_base_AOSP10_r33_CVE-2021-0337](https://github.com/ShaikUsaf/frameworks_base_AOSP10_r33_CVE-2021-0337)
### CVE-2021-0339 (2021-02-10)
<code>In loadAnimation of WindowContainer.java, there is a possible way to keep displaying a malicious app while a target app is brought to the foreground. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-8.1 Android-9Android ID: A-145728687
@@ -43249,13 +43242,6 @@
- [Trinadh465/platform_art_AOSP10_r33_CVE-2021-0511](https://github.com/Trinadh465/platform_art_AOSP10_r33_CVE-2021-0511)
### CVE-2021-0513 (2021-06-21)
<code>In deleteNotificationChannel and related functions of NotificationManagerService.java, there is a possible permission bypass due to improper state validation. This could lead to local escalation of privilege via hidden services with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-156090809
</code>
- [nanopathi/framework_base_AOSP10_r33_CVE-2021-0513](https://github.com/nanopathi/framework_base_AOSP10_r33_CVE-2021-0513)
### CVE-2021-0516 (2021-06-21)
<code>In p2p_process_prov_disc_req of p2p_pd.c, there is a possible out of bounds read and write due to a use after free. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-181660448
@@ -43285,13 +43271,6 @@
- [Trinadh465/System_bt_AOSP10_r33_CVE-2021-0589](https://github.com/Trinadh465/System_bt_AOSP10_r33_CVE-2021-0589)
- [Satheesh575555/system_bt_AOSP10_r33_CVE-2021-0589](https://github.com/Satheesh575555/system_bt_AOSP10_r33_CVE-2021-0589)
### CVE-2021-0705 (2021-10-22)
<code>In sanitizeSbn of NotificationManagerService.java, there is a possible way to keep service running in foreground and keep granted permissions due to Bypass of Background Service Restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-185388103
</code>
- [Trinadh465/frameworks_base_AOSP10_r33_CVE-2021-0705](https://github.com/Trinadh465/frameworks_base_AOSP10_r33_CVE-2021-0705)
### CVE-2021-0954 (2021-12-15)
<code>In ResolverActivity, there is a possible user interaction bypass due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-143559931
@@ -43856,6 +43835,13 @@
- [riptl/cve-2021-3449](https://github.com/riptl/cve-2021-3449)
### CVE-2021-3450 (2021-03-25)
<code>The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a &quot;purpose&quot; has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named &quot;purpose&quot; values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j).
</code>
- [dedellix/MUT-BC-SS-01](https://github.com/dedellix/MUT-BC-SS-01)
### CVE-2021-3456 (2022-03-30)
<code>An improper authorization handling flaw was found in Foreman. The Salt plugin for the smart-proxy allows foreman clients to execute actions that should be limited to the Foreman Server. This flaw allows an authenticated local attacker to access and delete limited resources and also causes a denial of service on the Foreman server. The highest threat from this vulnerability is to integrity and system availability.
@@ -47071,6 +47057,13 @@
- [dievus/CVE-2021-37833](https://github.com/dievus/CVE-2021-37833)
### CVE-2021-37840 (2021-08-02)
<code>aaPanel through 6.8.12 allows Cross-Site WebSocket Hijacking (CSWH) involving OS commands within WebSocket messages at a ws:// URL for /webssh (the victim must have configured Terminal with at least one host). Successful exploitation depends on the browser used by a potential victim (e.g., exploitation can occur with Firefox but not Chrome).
</code>
- [EonSecurity/aapanel-ws-bypass](https://github.com/EonSecurity/aapanel-ws-bypass)
### CVE-2021-37910 (2021-11-12)
<code>ASUS routers Wi-Fi protected access protocol (WPA2 and WPA3-SAE) has improper control of Interaction frequency vulnerability, an unauthenticated attacker can remotely disconnect other users' connections by sending specially crafted SAE authentication frames.
@@ -48067,6 +48060,7 @@
- [im2sinister/CVE-2021-41773](https://github.com/im2sinister/CVE-2021-41773)
- [a24ac1/CVE-2021-41773-PoC](https://github.com/a24ac1/CVE-2021-41773-PoC)
- [fxdyx-a/CVE-2021-41773-POC](https://github.com/fxdyx-a/CVE-2021-41773-POC)
- [Joapath/CVE-2021-41773](https://github.com/Joapath/CVE-2021-41773)
### CVE-2021-41784 (2022-08-29)
@@ -52532,6 +52526,7 @@
- [appcheck-ng/salt-rce-scanner-CVE-2020-11651-CVE-2020-11652](https://github.com/appcheck-ng/salt-rce-scanner-CVE-2020-11651-CVE-2020-11652)
- [hardsoftsecurity/CVE-2020-11651-PoC](https://github.com/hardsoftsecurity/CVE-2020-11651-PoC)
- [Drew-Alleman/CVE-2020-11651](https://github.com/Drew-Alleman/CVE-2020-11651)
- [s1lentf00thold/CVE-2020-11651-Poc](https://github.com/s1lentf00thold/CVE-2020-11651-Poc)
### CVE-2020-11652 (2020-04-30)