nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/07/04 12:48:51

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-07-04 21:48:51 +09:00
1 parent 77270c5c1e
commit 2fabd4e093
61 files changed
+516 -177
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2016/CVE-2016-5195.json
+4 -4
View File
@@ -255,10 +255,10 @@
"description": "PoC for Dirty COW (CVE-2016-5195)",
"fork": false,
"created_at": "2016-10-22T15:25:34Z",
"updated_at": "2026-06-25T09:59:22Z",
"updated_at": "2026-07-04T11:49:42Z",
"pushed_at": "2022-03-16T12:08:54Z",
"stargazers_count": 510,
"watchers_count": 510,
"stargazers_count": 511,
"watchers_count": 511,
"has_discussions": false,
"forks_count": 146,
"allow_forking": true,
@@ -269,7 +269,7 @@
"topics": [],
"visibility": "public",
"forks": 146,
"watchers": 510,
"watchers": 511,
"score": 0,
"subscribers_count": 19
},
2016/CVE-2016-5636.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2016-5636",
"fork": false,
"created_at": "2016-03-28T18:47:03Z",
"updated_at": "2026-06-25T09:59:20Z",
"updated_at": "2026-07-04T11:49:40Z",
"pushed_at": "2020-08-10T07:27:53Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 2
}
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-07-04T05:00:42Z",
"pushed_at": "2026-07-04T05:00:38Z",
"updated_at": "2026-07-04T11:44:06Z",
"pushed_at": "2026-07-04T11:44:02Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2020/CVE-2020-1472.json
+2 -2
View File
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-07-04T04:45:09Z",
"pushed_at": "2026-07-04T04:45:06Z",
"updated_at": "2026-07-04T12:13:34Z",
"pushed_at": "2026-07-04T12:13:30Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-07-04T03:58:16Z",
"pushed_at": "2026-07-04T03:58:12Z",
"updated_at": "2026-07-04T12:15:10Z",
"pushed_at": "2026-07-04T12:15:07Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-40444.json
+4 -4
View File
@@ -245,10 +245,10 @@
"description": "CVE-2021-40444 PoC",
"fork": false,
"created_at": "2021-09-10T16:55:53Z",
"updated_at": "2026-07-04T02:11:32Z",
"updated_at": "2026-07-04T08:49:04Z",
"pushed_at": "2021-12-25T18:31:02Z",
"stargazers_count": 1751,
"watchers_count": 1751,
"stargazers_count": 1752,
"watchers_count": 1752,
"has_discussions": false,
"forks_count": 476,
"allow_forking": true,
@@ -259,7 +259,7 @@
"topics": [],
"visibility": "public",
"forks": 476,
"watchers": 1751,
"watchers": 1752,
"score": 0,
"subscribers_count": 27
},
2021/CVE-2021-44228.json
+4 -4
View File
@@ -1382,10 +1382,10 @@
"description": "CVE-2021-44228 Log4j2 BurpSuite Scanner,Customize ceye.io api or other apis,including internal networks",
"fork": false,
"created_at": "2021-12-11T07:19:11Z",
"updated_at": "2026-06-23T03:13:12Z",
"updated_at": "2026-07-04T06:57:23Z",
"pushed_at": "2023-06-13T09:17:54Z",
"stargazers_count": 844,
"watchers_count": 844,
"stargazers_count": 843,
"watchers_count": 843,
"has_discussions": false,
"forks_count": 107,
"allow_forking": true,
@@ -1401,7 +1401,7 @@
],
"visibility": "public",
"forks": 107,
"watchers": 844,
"watchers": 843,
"score": 0,
"subscribers_count": 11
},
2022/CVE-2022-22077.json
+1 -1
View File
@@ -15,7 +15,7 @@
"fork": false,
"created_at": "2025-09-08T21:12:19Z",
"updated_at": "2026-06-19T21:56:25Z",
"pushed_at": "2026-07-03T14:30:48Z",
"pushed_at": "2026-07-04T09:07:24Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
2022/CVE-2022-29799.json
+2 -2
View File
@@ -59,8 +59,8 @@
"description": "Demonstrate local privilege escalation in networkd-dispatcher via CVE-2022-29799 and CVE-2022-29800 using this C proof of concept.",
"fork": false,
"created_at": "2026-06-23T14:05:18Z",
"updated_at": "2026-07-04T05:38:11Z",
"pushed_at": "2026-07-04T05:38:07Z",
"updated_at": "2026-07-04T11:10:29Z",
"pushed_at": "2026-07-04T11:10:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-20696.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 86,
"watchers_count": 86,
"has_discussions": false,
"forks_count": 48,
"forks_count": 49,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 48,
"forks": 49,
"watchers": 86,
"score": 0,
"subscribers_count": 0
2023/CVE-2023-21537.json
+2 -2
View File
@@ -11,10 +11,10 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/stevenjoezhang\/CVE-2023-21537",
"description": null,
"description": "PoC of CVE-2023-21537",
"fork": false,
"created_at": "2025-01-01T08:17:26Z",
"updated_at": "2025-01-12T08:34:52Z",
"updated_at": "2026-07-04T08:49:52Z",
"pushed_at": "2025-01-01T08:17:29Z",
"stargazers_count": 1,
"watchers_count": 1,
2023/CVE-2023-23397.json
+8 -8
View File
@@ -146,10 +146,10 @@
"description": "Simple PoC in PowerShell for CVE-2023-23397",
"fork": false,
"created_at": "2023-03-16T19:10:37Z",
"updated_at": "2025-10-04T14:01:04Z",
"updated_at": "2026-07-04T12:10:40Z",
"pushed_at": "2023-03-16T19:29:49Z",
"stargazers_count": 39,
"watchers_count": 39,
"stargazers_count": 40,
"watchers_count": 40,
"has_discussions": false,
"forks_count": 12,
"allow_forking": true,
@@ -170,7 +170,7 @@
],
"visibility": "public",
"forks": 12,
"watchers": 39,
"watchers": 40,
"score": 0,
"subscribers_count": 2
},
@@ -686,10 +686,10 @@
"description": "CVE-2023-23397 PoC",
"fork": false,
"created_at": "2023-05-07T18:21:35Z",
"updated_at": "2025-11-02T22:42:50Z",
"updated_at": "2026-07-04T12:10:27Z",
"pushed_at": "2023-05-07T18:47:36Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -700,7 +700,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 7,
"watchers": 8,
"score": 0,
"subscribers_count": 1
},
2023/CVE-2023-32434.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙",
"fork": false,
"created_at": "2025-08-13T09:19:29Z",
"updated_at": "2026-07-04T06:05:23Z",
"pushed_at": "2026-07-04T06:05:19Z",
"updated_at": "2026-07-04T11:38:32Z",
"pushed_at": "2026-07-04T11:38:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-0670.json
+2 -2
View File
@@ -172,8 +172,8 @@
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
"fork": false,
"created_at": "2026-01-08T01:32:09Z",
"updated_at": "2026-07-04T04:28:42Z",
"pushed_at": "2026-07-04T04:28:39Z",
"updated_at": "2026-07-04T12:25:11Z",
"pushed_at": "2026-07-04T12:25:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-1709.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 110,
"watchers_count": 110,
"has_discussions": false,
"forks_count": 32,
"forks_count": 33,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -36,7 +36,7 @@
"screenconnect"
],
"visibility": "public",
"forks": 32,
"forks": 33,
"watchers": 110,
"score": 0,
"subscribers_count": 3
2024/CVE-2024-56426.json
+1 -1
View File
@@ -15,7 +15,7 @@
"fork": false,
"created_at": "2026-04-07T12:02:52Z",
"updated_at": "2026-07-03T14:50:54Z",
"pushed_at": "2026-07-03T14:50:49Z",
"pushed_at": "2026-07-04T10:57:47Z",
"stargazers_count": 14,
"watchers_count": 14,
"has_discussions": false,
2025/CVE-2025-11001.json
+4 -4
View File
@@ -146,10 +146,10 @@
"description": "Exploit for CVE-2025-11001",
"fork": false,
"created_at": "2025-12-12T16:49:26Z",
"updated_at": "2026-01-22T11:40:09Z",
"updated_at": "2026-07-04T08:03:53Z",
"pushed_at": "2025-12-12T20:01:36Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -162,7 +162,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-14847.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
"fork": false,
"created_at": "2025-07-30T15:52:00Z",
"updated_at": "2026-07-04T04:32:09Z",
"pushed_at": "2026-07-04T04:32:05Z",
"updated_at": "2026-07-04T12:28:33Z",
"pushed_at": "2026-07-04T12:28:29Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1129,8 +1129,8 @@
"description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
"fork": false,
"created_at": "2026-01-14T06:05:44Z",
"updated_at": "2026-07-04T04:31:26Z",
"pushed_at": "2026-07-04T04:31:23Z",
"updated_at": "2026-07-04T12:28:02Z",
"pushed_at": "2026-07-04T12:27:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-24203.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "A simple customization toolbox that utilizes CVE-2025-24203. Supports iOS 16.0 - iOS 18.3.2.",
"fork": false,
"created_at": "2025-05-09T07:18:55Z",
"updated_at": "2026-07-04T05:20:12Z",
"updated_at": "2026-07-04T07:31:35Z",
"pushed_at": "2026-06-30T02:22:50Z",
"stargazers_count": 408,
"watchers_count": 408,
"stargazers_count": 409,
"watchers_count": 409,
"has_discussions": false,
"forks_count": 43,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 43,
"watchers": 408,
"watchers": 409,
"score": 0,
"subscribers_count": 12
},
2025/CVE-2025-24204.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "FairPlay decryptor (dump iPA) for iOS Application that running on macOS with SIP-enabled, using CVE-2025-24204. Support macOS 15.0-15.2",
"fork": false,
"created_at": "2025-09-04T17:49:51Z",
"updated_at": "2026-07-03T20:22:33Z",
"updated_at": "2026-07-04T12:01:11Z",
"pushed_at": "2025-09-04T17:59:49Z",
"stargazers_count": 136,
"watchers_count": 136,
"stargazers_count": 138,
"watchers_count": 138,
"has_discussions": false,
"forks_count": 20,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 20,
"watchers": 136,
"watchers": 138,
"score": 0,
"subscribers_count": 2
}
2025/CVE-2025-24252.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "poc for CVE-2025-24252 & CVE-2025-24132",
"fork": false,
"created_at": "2025-04-29T22:12:52Z",
"updated_at": "2026-06-18T16:49:47Z",
"updated_at": "2026-07-04T08:32:35Z",
"pushed_at": "2026-01-08T13:22:11Z",
"stargazers_count": 162,
"watchers_count": 162,
"stargazers_count": 163,
"watchers_count": 163,
"has_discussions": false,
"forks_count": 28,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 28,
"watchers": 162,
"watchers": 163,
"score": 0,
"subscribers_count": 5
},
2025/CVE-2025-24257.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis",
"fork": false,
"created_at": "2026-04-04T03:42:55Z",
"updated_at": "2026-07-04T05:13:40Z",
"pushed_at": "2026-07-04T05:13:37Z",
"updated_at": "2026-07-04T10:45:49Z",
"pushed_at": "2026-07-04T10:45:46Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-31258.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔓 Explore CVE-2025-31258 with this PoC demonstrating partial sandbox escape using RemoteViewServices for practical 1-day security practice.",
"fork": false,
"created_at": "2020-06-23T15:20:11Z",
"updated_at": "2026-07-04T06:10:07Z",
"pushed_at": "2026-07-04T06:10:04Z",
"updated_at": "2026-07-04T11:43:18Z",
"pushed_at": "2026-07-04T11:43:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-32463.json
+2 -2
View File
@@ -1595,8 +1595,8 @@
"description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.",
"fork": false,
"created_at": "2025-09-20T00:42:07Z",
"updated_at": "2026-07-04T06:11:03Z",
"pushed_at": "2026-07-04T06:10:59Z",
"updated_at": "2026-07-04T11:44:18Z",
"pushed_at": "2026-07-04T11:44:14Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-48804.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Downgrade attack for CVE-2025-48804",
"fork": false,
"created_at": "2026-04-30T13:05:30Z",
"updated_at": "2026-07-02T19:30:57Z",
"updated_at": "2026-07-04T12:03:05Z",
"pushed_at": "2026-05-20T14:39:54Z",
"stargazers_count": 215,
"watchers_count": 215,
"stargazers_count": 216,
"watchers_count": 216,
"has_discussions": false,
"forks_count": 41,
"allow_forking": true,
@@ -32,7 +32,7 @@
],
"visibility": "public",
"forks": 41,
"watchers": 215,
"watchers": 216,
"score": 0,
"subscribers_count": 3
}
2025/CVE-2025-49844.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.",
"fork": false,
"created_at": "2019-04-13T07:51:09Z",
"updated_at": "2026-07-04T06:23:35Z",
"pushed_at": "2026-07-04T06:23:32Z",
"updated_at": "2026-07-04T11:56:50Z",
"pushed_at": "2026-07-04T11:56:47Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
"fork": false,
"created_at": "2022-04-06T09:27:39Z",
"updated_at": "2026-07-04T06:24:11Z",
"pushed_at": "2026-07-04T06:24:07Z",
"updated_at": "2026-07-04T11:57:23Z",
"pushed_at": "2026-07-04T11:57:20Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-54424.json
+2 -2
View File
@@ -53,8 +53,8 @@
"description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐",
"fork": false,
"created_at": "2025-08-14T05:16:16Z",
"updated_at": "2026-07-04T06:06:04Z",
"pushed_at": "2026-07-04T06:06:01Z",
"updated_at": "2026-07-04T11:39:15Z",
"pushed_at": "2026-07-04T11:39:11Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2025/CVE-2025-55182.json
+10 -10
View File
@@ -14,8 +14,8 @@
"description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.",
"fork": false,
"created_at": "2022-06-17T10:19:10Z",
"updated_at": "2026-07-04T04:21:58Z",
"pushed_at": "2026-07-04T04:21:55Z",
"updated_at": "2026-07-04T12:17:43Z",
"pushed_at": "2026-07-04T12:17:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -99,8 +99,8 @@
"description": null,
"fork": false,
"created_at": "2024-11-29T12:32:19Z",
"updated_at": "2026-07-04T04:22:18Z",
"pushed_at": "2026-07-04T04:22:14Z",
"updated_at": "2026-07-04T12:18:14Z",
"pushed_at": "2026-07-04T12:18:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -148,8 +148,8 @@
"description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
"fork": false,
"created_at": "2025-06-06T16:34:46Z",
"updated_at": "2026-07-04T04:22:04Z",
"pushed_at": "2026-07-04T04:22:01Z",
"updated_at": "2026-07-04T12:17:59Z",
"pushed_at": "2026-07-04T12:17:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -11705,8 +11705,8 @@
"description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.",
"fork": false,
"created_at": "2025-12-24T14:48:19Z",
"updated_at": "2026-07-04T06:44:28Z",
"pushed_at": "2026-07-04T06:44:24Z",
"updated_at": "2026-07-04T12:17:39Z",
"pushed_at": "2026-07-04T12:17:36Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12223,8 +12223,8 @@
"description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
"fork": false,
"created_at": "2026-01-02T01:28:57Z",
"updated_at": "2026-07-04T04:25:40Z",
"pushed_at": "2026-07-04T04:25:37Z",
"updated_at": "2026-07-04T12:21:43Z",
"pushed_at": "2026-07-04T12:21:39Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-57819.json
+4 -4
View File
@@ -373,10 +373,10 @@
"description": null,
"fork": false,
"created_at": "2026-06-06T20:49:03Z",
"updated_at": "2026-07-02T20:35:36Z",
"updated_at": "2026-07-04T10:03:06Z",
"pushed_at": "2026-06-06T21:39:52Z",
"stargazers_count": 11,
"watchers_count": 11,
"stargazers_count": 12,
"watchers_count": 12,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -387,7 +387,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 11,
"watchers": 12,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-66398.json
+2 -2
View File
@@ -64,8 +64,8 @@
"description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.",
"fork": false,
"created_at": "2026-03-23T09:09:21Z",
"updated_at": "2026-07-04T05:07:55Z",
"pushed_at": "2026-07-04T05:07:51Z",
"updated_at": "2026-07-04T10:39:58Z",
"pushed_at": "2026-07-04T10:39:55Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-66478.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.",
"fork": false,
"created_at": "2025-10-01T07:40:09Z",
"updated_at": "2026-07-04T04:22:52Z",
"pushed_at": "2026-07-04T04:22:49Z",
"updated_at": "2026-07-04T12:18:50Z",
"pushed_at": "2026-07-04T12:18:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-68143.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1288990150,
"name": "mcp-guard",
"full_name": "mcp-guard76\/mcp-guard",
"owner": {
"login": "mcp-guard76",
"id": 282044023,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/282044023?v=4",
"html_url": "https:\/\/github.com\/mcp-guard76",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mcp-guard76\/mcp-guard",
"description": "Security scanner for MCP configurations. Detects CVE-2025-68143, CVE-2025-68144, auth gaps, command injection, and credential leakage.",
"fork": false,
"created_at": "2026-07-04T07:48:22Z",
"updated_at": "2026-07-04T08:09:32Z",
"pushed_at": "2026-07-04T08:09:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-68921.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.",
"fork": false,
"created_at": "2026-01-24T21:00:41Z",
"updated_at": "2026-07-04T04:37:30Z",
"pushed_at": "2026-07-04T04:37:26Z",
"updated_at": "2026-07-04T12:33:56Z",
"pushed_at": "2026-07-04T12:33:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-20841.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.",
"fork": false,
"created_at": "2024-09-22T12:19:06Z",
"updated_at": "2026-07-04T04:53:01Z",
"pushed_at": "2026-07-04T04:52:57Z",
"updated_at": "2026-07-04T10:24:32Z",
"pushed_at": "2026-07-04T10:24:28Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.",
"fork": false,
"created_at": "2026-02-26T05:21:28Z",
"updated_at": "2026-07-04T04:52:06Z",
"pushed_at": "2026-07-04T04:52:03Z",
"updated_at": "2026-07-04T10:23:36Z",
"pushed_at": "2026-07-04T10:23:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-23869.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1288972192,
"name": "mitigate-cve-2026-23869-react-server-component-loops",
"full_name": "shaheryar773\/mitigate-cve-2026-23869-react-server-component-loops",
"owner": {
"login": "shaheryar773",
"id": 219460677,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/219460677?v=4",
"html_url": "https:\/\/github.com\/shaheryar773",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/shaheryar773\/mitigate-cve-2026-23869-react-server-component-loops",
"description": "Technical troubleshooting repository for fixing infinite rendering vulnerability loops and resource exhaustion threats under CVE-2026-23869 cleanly.",
"fork": false,
"created_at": "2026-07-04T07:17:38Z",
"updated_at": "2026-07-04T07:19:20Z",
"pushed_at": "2026-07-04T07:19:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-24061.json
+2 -2
View File
@@ -59,8 +59,8 @@
"description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.",
"fork": false,
"created_at": "2026-02-03T19:46:10Z",
"updated_at": "2026-07-04T04:42:59Z",
"pushed_at": "2026-07-04T04:42:56Z",
"updated_at": "2026-07-04T12:39:37Z",
"pushed_at": "2026-07-04T12:39:34Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24291.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions",
"fork": false,
"created_at": "2026-03-26T04:38:27Z",
"updated_at": "2026-07-04T05:09:40Z",
"pushed_at": "2026-07-04T05:09:36Z",
"updated_at": "2026-07-04T10:41:54Z",
"pushed_at": "2026-07-04T10:41:50Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-2441.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.",
"fork": false,
"created_at": "2026-03-03T14:19:18Z",
"updated_at": "2026-07-04T04:55:07Z",
"pushed_at": "2026-07-04T04:55:03Z",
"updated_at": "2026-07-04T10:26:47Z",
"pushed_at": "2026-07-04T10:26:43Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-2472.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.",
"fork": false,
"created_at": "2026-03-10T14:40:04Z",
"updated_at": "2026-07-04T04:59:28Z",
"pushed_at": "2026-07-04T04:59:24Z",
"updated_at": "2026-07-04T10:31:31Z",
"pushed_at": "2026-07-04T10:31:27Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-26114.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-07-03T14:46:50Z",
"updated_at": "2026-07-04T06:26:37Z",
"updated_at": "2026-07-04T08:42:55Z",
"pushed_at": "2026-07-03T14:51:05Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 4,
"watchers": 6,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-31431.json
+74 -8
View File
@@ -147,15 +147,15 @@
{
"id": 1225342137,
"name": "RootRemover",
"full_name": "Aurillium\/RootRemover",
"full_name": "st4rburn\/RootRemover",
"owner": {
"login": "Aurillium",
"login": "st4rburn",
"id": 57483028,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57483028?v=4",
"html_url": "https:\/\/github.com\/Aurillium",
"html_url": "https:\/\/github.com\/st4rburn",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Aurillium\/RootRemover",
"html_url": "https:\/\/github.com\/st4rburn\/RootRemover",
"description": "Temporarily removes the root password using CVE-2026-31431",
"fork": false,
"created_at": "2026-04-30T07:20:26Z",
@@ -419,6 +419,39 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1226752376,
"name": "copyfail",
"full_name": "Smarttfoxx\/copyfail",
"owner": {
"login": "Smarttfoxx",
"id": 140526026,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/140526026?v=4",
"html_url": "https:\/\/github.com\/Smarttfoxx",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Smarttfoxx\/copyfail",
"description": "CVE-2026-31431 (Copy Fail) PoC - Linux kernel page cache corruption via authencesn AF_ALG + splice()",
"fork": false,
"created_at": "2026-05-01T19:44:57Z",
"updated_at": "2026-06-03T12:30:42Z",
"pushed_at": "2026-05-12T13:44:11Z",
"stargazers_count": 18,
"watchers_count": 18,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 7,
"watchers": 18,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226857673,
"name": "copyfailscan",
@@ -651,8 +684,8 @@
"description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.",
"fork": false,
"created_at": "2026-05-05T04:58:21Z",
"updated_at": "2026-07-04T05:28:42Z",
"pushed_at": "2026-07-04T05:28:39Z",
"updated_at": "2026-07-04T11:01:25Z",
"pushed_at": "2026-07-04T11:01:21Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -700,8 +733,8 @@
"description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.",
"fork": false,
"created_at": "2026-05-06T09:49:14Z",
"updated_at": "2026-07-04T05:29:23Z",
"pushed_at": "2026-07-04T05:29:20Z",
"updated_at": "2026-07-04T11:02:03Z",
"pushed_at": "2026-07-04T11:02:00Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
@@ -1097,6 +1130,39 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1236382288,
"name": "CVE-2026-31431",
"full_name": "studiogangster\/CVE-2026-31431",
"owner": {
"login": "studiogangster",
"id": 12793420,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/12793420?v=4",
"html_url": "https:\/\/github.com\/studiogangster",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/studiogangster\/CVE-2026-31431",
"description": "oen liner CVE-2026-31431 test. Created 'sandbox' on sudo user and tests if ir can escape to root",
"fork": false,
"created_at": "2026-05-12T07:40:49Z",
"updated_at": "2026-05-17T20:15:57Z",
"pushed_at": "2026-05-12T10:40:13Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1236764293,
"name": "copyfail-fix",
2026/CVE-2026-31694.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Linux kernel FUSE readdir cache out-of-bounds write (CVE-2026-31694): a malicious FUSE server overflows a page-cache page by 24 bytes. PoC plus an unprivileged local-root exploit via \/etc\/passwd page-cache corruption. Run only inside a VM.",
"fork": false,
"created_at": "2026-06-30T11:49:36Z",
"updated_at": "2026-07-04T04:48:07Z",
"updated_at": "2026-07-04T12:05:35Z",
"pushed_at": "2026-06-30T12:39:22Z",
"stargazers_count": 6,
"watchers_count": 6,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 6,
"watchers": 7,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-31802.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"fork": false,
"created_at": "2026-03-28T20:49:46Z",
"updated_at": "2026-07-04T05:10:57Z",
"pushed_at": "2026-07-04T05:10:53Z",
"updated_at": "2026-07-04T10:42:58Z",
"pushed_at": "2026-07-04T10:42:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-33017.json
+33
View File
@@ -64,5 +64,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1289137451,
"name": "CVE-2026-33017",
"full_name": "yayip\/CVE-2026-33017",
"owner": {
"login": "yayip",
"id": 39186995,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/39186995?v=4",
"html_url": "https:\/\/github.com\/yayip",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/yayip\/CVE-2026-33017",
"description": "PoC of Langflow CVE-2026-33017",
"fork": false,
"created_at": "2026-07-04T11:27:58Z",
"updated_at": "2026-07-04T11:29:44Z",
"pushed_at": "2026-07-04T11:29:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-34197.json
+6 -6
View File
@@ -143,13 +143,13 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/dinosn\/apache-activemq-rce-research",
"description": "Apache ActiveMQ Classic RCE research: CVE-2026-34197 \/ CVE-2026-42588 bypass chain + hardened-6.2.6 audit findings + Crowdfense comparison (authorized lab research)",
"description": "Apache ActiveMQ Classic RCE research: CVE-2026-34197 \/ CVE-2026-42588 bypass chain + hardened-6.2.6 audit findings + Crowdfense comparison ",
"fork": false,
"created_at": "2026-07-04T06:45:18Z",
"updated_at": "2026-07-04T06:48:00Z",
"pushed_at": "2026-07-04T06:45:21Z",
"stargazers_count": 0,
"watchers_count": 0,
"updated_at": "2026-07-04T10:47:34Z",
"pushed_at": "2026-07-04T07:07:26Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -160,7 +160,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-38751.json
+2 -2
View File
@@ -113,8 +113,8 @@
"description": "This repository contains a proof-of-concept (PoC) exploit for CVE-2026-38751, affecting OpenSTAManager ≤ 2.10. The vulnerability allows an authenticated attacker to upload a malicious module via the module update functionality, leading to arbitrary file upload and remote code execution (RCE).",
"fork": false,
"created_at": "2026-07-02T19:29:00Z",
"updated_at": "2026-07-02T20:08:51Z",
"pushed_at": "2026-07-02T20:08:47Z",
"updated_at": "2026-07-04T12:27:02Z",
"pushed_at": "2026-07-04T12:26:58Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-41089.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 204,
"watchers_count": 204,
"has_discussions": false,
"forks_count": 65,
"forks_count": 66,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -38,7 +38,7 @@
"windows-server"
],
"visibility": "public",
"forks": 65,
"forks": 66,
"watchers": 204,
"score": 0,
"subscribers_count": 1
2026/CVE-2026-41940.json
+6 -6
View File
@@ -258,8 +258,8 @@
"description": "Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.",
"fork": false,
"created_at": "2026-05-06T18:08:48Z",
"updated_at": "2026-07-04T05:29:41Z",
"pushed_at": "2026-07-04T05:29:37Z",
"updated_at": "2026-07-04T11:02:23Z",
"pushed_at": "2026-07-04T11:02:19Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -576,10 +576,10 @@
"description": "CVE-2026-41940 authentication bypass vulnerability proof-of-concept",
"fork": false,
"created_at": "2026-06-28T07:13:52Z",
"updated_at": "2026-07-03T19:24:47Z",
"updated_at": "2026-07-04T10:21:21Z",
"pushed_at": "2026-06-28T07:42:43Z",
"stargazers_count": 6,
"watchers_count": 6,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -595,7 +595,7 @@
],
"visibility": "public",
"forks": 2,
"watchers": 6,
"watchers": 7,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-42945.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "exploit for CVE-2026-42945",
"fork": false,
"created_at": "2026-05-12T23:05:32Z",
"updated_at": "2026-07-03T15:10:08Z",
"updated_at": "2026-07-04T08:01:36Z",
"pushed_at": "2026-05-13T18:40:57Z",
"stargazers_count": 868,
"watchers_count": 868,
"stargazers_count": 869,
"watchers_count": 869,
"has_discussions": false,
"forks_count": 162,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 162,
"watchers": 868,
"watchers": 869,
"score": 0,
"subscribers_count": 6
},
2026/CVE-2026-43284.json
+38
View File
@@ -83,6 +83,44 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1233896485,
"name": "dirty-frag-check",
"full_name": "haydenjames\/dirty-frag-check",
"owner": {
"login": "haydenjames",
"id": 6467408,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/6467408?v=4",
"html_url": "https:\/\/github.com\/haydenjames",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/haydenjames\/dirty-frag-check",
"description": "Read-only checker for CVE-2026-43284 \/ CVE-2026-43500 (Dirty Frag) Linux kernel local-root vulns",
"fork": false,
"created_at": "2026-05-09T13:46:16Z",
"updated_at": "2026-06-05T15:57:12Z",
"pushed_at": "2026-05-12T15:14:45Z",
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-43284",
"cve-2026-43500",
"cve-scanning",
"dirty-frag"
],
"visibility": "public",
"forks": 0,
"watchers": 7,
"score": 0,
"subscribers_count": 0
},
{
"id": 1234352356,
"name": "dirtyfrag-arm64",
2026/CVE-2026-45585.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Manage and recover BitLocker encrypted drives with this tool for Windows 11 recovery key management and educational study of CVE-2026-45585.",
"fork": false,
"created_at": "2026-06-16T07:21:36Z",
"updated_at": "2026-07-04T05:36:17Z",
"pushed_at": "2026-07-04T05:36:13Z",
"updated_at": "2026-07-04T11:08:52Z",
"pushed_at": "2026-07-04T11:08:49Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-46331.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "PACKET_EDIT_MEME.c (aka CVE-2026-46331): yet another page cache poisoning nightmare",
"fork": false,
"created_at": "2026-06-17T04:09:56Z",
"updated_at": "2026-07-03T20:43:10Z",
"updated_at": "2026-07-04T07:44:00Z",
"pushed_at": "2026-06-17T04:55:06Z",
"stargazers_count": 128,
"watchers_count": 128,
"stargazers_count": 129,
"watchers_count": 129,
"has_discussions": false,
"forks_count": 42,
"forks_count": 43,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 42,
"watchers": 128,
"forks": 43,
"watchers": 129,
"score": 0,
"subscribers_count": 2
},
2026/CVE-2026-46333.json
+4 -4
View File
@@ -35,15 +35,15 @@
{
"id": 1241259405,
"name": "public-passwd",
"full_name": "Aurillium\/public-passwd",
"full_name": "st4rburn\/public-passwd",
"owner": {
"login": "Aurillium",
"login": "st4rburn",
"id": 57483028,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57483028?v=4",
"html_url": "https:\/\/github.com\/Aurillium",
"html_url": "https:\/\/github.com\/st4rburn",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Aurillium\/public-passwd",
"html_url": "https:\/\/github.com\/st4rburn\/public-passwd",
"description": "Use CVE-2026-46333 and CVE-2026-31431 to change any user's password.",
"fork": false,
"created_at": "2026-05-17T06:44:40Z",
2026/CVE-2026-48558.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "SimpleHelp OIDC Authentication Bypass PoC",
"fork": false,
"created_at": "2026-07-02T16:11:50Z",
"updated_at": "2026-07-03T22:16:28Z",
"updated_at": "2026-07-04T09:16:53Z",
"pushed_at": "2026-07-02T16:47:50Z",
"stargazers_count": 2,
"watchers_count": 2,
2026/CVE-2026-53360.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1289180434,
"name": "CVE-2026-53360-POC",
"full_name": "0xCyberstan\/CVE-2026-53360-POC",
"owner": {
"login": "0xCyberstan",
"id": 156473872,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/156473872?v=4",
"html_url": "https:\/\/github.com\/0xCyberstan",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xCyberstan\/CVE-2026-53360-POC",
"description": "PoC for CVE-2026-53360: guest-triggered heap out-of-bounds read\/write in KVM SEV-SNP Page State Change (PSC) handling.",
"fork": false,
"created_at": "2026-07-04T12:27:13Z",
"updated_at": "2026-07-04T12:35:55Z",
"pushed_at": "2026-07-04T12:35:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-54415.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1289122014,
"name": "CVE-2026-54415-PoC",
"full_name": "abdugafforov-bobur\/CVE-2026-54415-PoC",
"owner": {
"login": "abdugafforov-bobur",
"id": 152521876,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/152521876?v=4",
"html_url": "https:\/\/github.com\/abdugafforov-bobur",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/abdugafforov-bobur\/CVE-2026-54415-PoC",
"description": "PoC for CVE-2026-54415 — Azuriom CMS (<1.2.11) Broken Access Control → account takeover",
"fork": false,
"created_at": "2026-07-04T11:11:16Z",
"updated_at": "2026-07-04T11:15:28Z",
"pushed_at": "2026-07-04T11:15:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-5524.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-07-04T00:12:54Z",
"updated_at": "2026-07-04T01:44:33Z",
"updated_at": "2026-07-04T09:24:27Z",
"pushed_at": "2026-07-04T01:44:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-56290.json
+33
View File
@@ -1,4 +1,37 @@
[
{
"id": 1287736215,
"name": "PageBuilderCK-CVE-2026-56290-Exploit",
"full_name": "sagsooz\/PageBuilderCK-CVE-2026-56290-Exploit",
"owner": {
"login": "sagsooz",
"id": 38169010,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38169010?v=4",
"html_url": "https:\/\/github.com\/sagsooz",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/sagsooz\/PageBuilderCK-CVE-2026-56290-Exploit",
"description": "Page Builder CK for Joomla - Unauthenticated SSRF \/ Remote File Write leading to PHP execution Exploiter",
"fork": false,
"created_at": "2026-07-03T00:52:36Z",
"updated_at": "2026-07-04T10:21:21Z",
"pushed_at": "2026-07-04T10:00:58Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1288758716,
"name": "pbck-exploit",
2026/CVE-2026-6307.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Google Chrome CVE-2026-6307 PoC",
"fork": false,
"created_at": "2026-07-01T13:23:25Z",
"updated_at": "2026-07-04T04:13:31Z",
"updated_at": "2026-07-04T11:51:09Z",
"pushed_at": "2026-07-01T13:32:36Z",
"stargazers_count": 38,
"watchers_count": 38,
"stargazers_count": 40,
"watchers_count": 40,
"has_discussions": false,
"forks_count": 11,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 11,
"watchers": 38,
"watchers": 40,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-6433.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "PoC for CVE-2026-6433: WordPress FlipperCode Custom CSS, JS & PHP (≤2.0.7) — unauthenticated SQLi to RCE. Python 3 stdlib; single target or bulk multi-threaded scanning. Authorized testing & research only.",
"fork": false,
"created_at": "2026-05-16T09:29:58Z",
"updated_at": "2026-07-02T09:46:41Z",
"updated_at": "2026-07-04T10:06:38Z",
"pushed_at": "2026-07-02T09:46:38Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
README.md
+31 -2
View File
@@ -1438,6 +1438,13 @@
- [offseckit/CVE-2026-23813](https://github.com/offseckit/CVE-2026-23813)
### CVE-2026-23869 (2026-04-08)
<code>A denial of service vulnerability exists in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack and react-server-dom-webpack (versions 19.0.0 through 19.0.4, 19.1.0 through 19.1.5, and 19.2.0 through 19.2.4). The vulnerability is triggered by sending specially crafted HTTP requests to Server Function endpoints.The payload of the HTTP request causes excessive CPU usage for up to a minute ending in a thrown error that is catchable.
</code>
- [shaheryar773/mitigate-cve-2026-23869-react-server-component-loops](https://github.com/shaheryar773/mitigate-cve-2026-23869-react-server-component-loops)
### CVE-2026-23870 (2026-05-06)
<code>A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to server crashes, out-of-memory exceptions or excessive CPU usage; affecting the following packages: react-server-dom-webpack, react-server-dom-parcel, react-server-dom-turbopack (versions 19.0.0 through 19.0.5, 19.1.0 through 19.1.6, and 19.2.0 through 19.2.5).
@@ -1859,7 +1866,7 @@
- [tgies/copy-fail-c](https://github.com/tgies/copy-fail-c)
- [insomnisec/Detections-CVE-2026-31431](https://github.com/insomnisec/Detections-CVE-2026-31431)
- [ryan2929/CVE-2026-31431](https://github.com/ryan2929/CVE-2026-31431)
- [Aurillium/RootRemover](https://github.com/Aurillium/RootRemover)
- [st4rburn/RootRemover](https://github.com/st4rburn/RootRemover)
- [adampielak/CVE-2026-31431_SCA_WAZUH](https://github.com/adampielak/CVE-2026-31431_SCA_WAZUH)
- [JuanBindez/CVE-2026-31431](https://github.com/JuanBindez/CVE-2026-31431)
- [selectel/mks-copy-fail-mitigation](https://github.com/selectel/mks-copy-fail-mitigation)
@@ -1867,6 +1874,7 @@
- [HulnotHutu/CVE-2026-31431](https://github.com/HulnotHutu/CVE-2026-31431)
- [K3ysTr0K3R/CVE-2026-31431-EXPLOIT](https://github.com/K3ysTr0K3R/CVE-2026-31431-EXPLOIT)
- [bootsareme/copyfail-deconstructed](https://github.com/bootsareme/copyfail-deconstructed)
- [Smarttfoxx/copyfail](https://github.com/Smarttfoxx/copyfail)
- [monobrau/copyfailscan](https://github.com/monobrau/copyfailscan)
- [suominen/CVE-2026-31431](https://github.com/suominen/CVE-2026-31431)
- [aexdyhaxor/CVE-2026-31431-copy-fail](https://github.com/aexdyhaxor/CVE-2026-31431-copy-fail)
@@ -1885,6 +1893,7 @@
- [Lutfifakee-Project/CVE-2026-31431](https://github.com/Lutfifakee-Project/CVE-2026-31431)
- [mauricioportela/CVE-2026-31431-Analysis](https://github.com/mauricioportela/CVE-2026-31431-Analysis)
- [gbonacini/CVE-2026-31431](https://github.com/gbonacini/CVE-2026-31431)
- [studiogangster/CVE-2026-31431](https://github.com/studiogangster/CVE-2026-31431)
- [hyz-is/copyfail-fix](https://github.com/hyz-is/copyfail-fix)
- [SystemVll/CVE-2026-31431-copyfail-aarch64](https://github.com/SystemVll/CVE-2026-31431-copyfail-aarch64)
- [DroPZsec/SplicePrivillegeEscalationFIX](https://github.com/DroPZsec/SplicePrivillegeEscalationFIX)
@@ -1989,6 +1998,7 @@
- [r3nsi15/CVE-2026-33017-langflow-rce](https://github.com/r3nsi15/CVE-2026-33017-langflow-rce)
- [c0gnit00/CVE-2026-33017](https://github.com/c0gnit00/CVE-2026-33017)
- [yayip/CVE-2026-33017](https://github.com/yayip/CVE-2026-33017)
### CVE-2026-33067 (2026-03-20)
@@ -2929,6 +2939,7 @@
- [mym0us3r/DIRTY-FRAG-Detection-with-Wazuh-4.14.4](https://github.com/mym0us3r/DIRTY-FRAG-Detection-with-Wazuh-4.14.4)
- [suominen/CVE-2026-43284](https://github.com/suominen/CVE-2026-43284)
- [haydenjames/dirty-frag-check](https://github.com/haydenjames/dirty-frag-check)
- [linnemanlabs/dirtyfrag-arm64](https://github.com/linnemanlabs/dirtyfrag-arm64)
- [FrosterDL/CVE-2026-43284](https://github.com/FrosterDL/CVE-2026-43284)
- [ChernStepanov/DirtyFrag-for-dummies](https://github.com/ChernStepanov/DirtyFrag-for-dummies)
@@ -3325,7 +3336,7 @@
</code>
- [KaraZajac/CHARON](https://github.com/KaraZajac/CHARON)
- [Aurillium/public-passwd](https://github.com/Aurillium/public-passwd)
- [st4rburn/public-passwd](https://github.com/st4rburn/public-passwd)
- [0xBlackash/CVE-2026-46333](https://github.com/0xBlackash/CVE-2026-46333)
- [studiogangster/CVE-2026-46333](https://github.com/studiogangster/CVE-2026-46333)
@@ -3897,6 +3908,9 @@
- [lottiedeyan/CVE-2026-53075poc](https://github.com/lottiedeyan/CVE-2026-53075poc)
### CVE-2026-53360
- [0xCyberstan/CVE-2026-53360-POC](https://github.com/0xCyberstan/CVE-2026-53360-POC)
### CVE-2026-53435 (2026-06-10)
<code>In Jenkins 2.567 and earlier, LTS 2.555.2 and earlier, it is possible for attackers to have Jenkins deserialize arbitrary types defined in Jenkins core or plugins from an attacker-controlled `config.xml` submission in a way that allows them to handle HTTP requests afterwards.\nThis can be used to impersonate any user and send HTTP requests on their behalf, up to and including use of the Script Console to run arbitrary code, or to read arbitrary files from the Jenkins controller.
@@ -3959,6 +3973,13 @@
### CVE-2026-54337
- [4qu4r1um/CVE-2026-54337-PoC](https://github.com/4qu4r1um/CVE-2026-54337-PoC)
### CVE-2026-54415 (2026-06-17)
<code>Missing Authorization in the server management routes (routes/admin.php) in Azuriom Azuriom CMS before 1.2.11 on all platforms allows an authenticated attacker with the admin.access permission to create AzLink server tokens and take over non-admin user accounts by changing their passwords and email addresses via crafted HTTP requests to /admin/servers/create and the AzLink API endpoints (/api/azlink/password, /api/azlink/email, /api/azlink/user/{id}).
</code>
- [abdugafforov-bobur/CVE-2026-54415-PoC](https://github.com/abdugafforov-bobur/CVE-2026-54415-PoC)
### CVE-2026-54420 (2026-06-14)
<code>LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS, as exploited in the wild in May 2026.
@@ -4079,6 +4100,7 @@
<code>The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.
</code>
- [sagsooz/PageBuilderCK-CVE-2026-56290-Exploit](https://github.com/sagsooz/PageBuilderCK-CVE-2026-56290-Exploit)
- [shinthink/pbck-exploit](https://github.com/shinthink/pbck-exploit)
### CVE-2026-56782 (2026-06-29)
@@ -15255,6 +15277,13 @@
- [x0root/CVE-2025-68116](https://github.com/x0root/CVE-2025-68116)
### CVE-2025-68143 (2025-12-17)
<code>Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP). In mcp-server-git versions prior to 2025.9.25, the git_init tool accepted arbitrary filesystem paths and created Git repositories without validating the target location. Unlike other tools which required an existing repository, git_init could operate on any directory accessible to the server process, making those directories eligible for subsequent git operations. The tool was removed entirely, as the server is intended to operate on existing repositories only. Users are advised to upgrade to 2025.9.25 or newer to remediate this issue.
</code>
- [mcp-guard76/mcp-guard](https://github.com/mcp-guard76/mcp-guard)
### CVE-2025-68147 (2025-12-17)
<code>Open Source Point of Sale (opensourcepos) is a web based point of sale application written in PHP using CodeIgniter framework. Starting in version 3.4.0 and prior to version 3.4.2, a Stored Cross-Site Scripting (XSS) vulnerability exists in the &quot;Return Policy&quot; configuration field. The application does not properly sanitize user input before saving it to the database or displaying it on receipts. An attacker with access to the &quot;Store Configuration&quot; (such as a rogue administrator or an account compromised via the separate CSRF vulnerability) can inject malicious JavaScript payloads into this field. These payloads are executed in the browser of any user (including other administrators and sales staff) whenever they view a receipt or complete a transaction. This can lead to session hijacking, theft of sensitive data, or unauthorized actions performed on behalf of the victim. The vulnerability has been patched in version 3.4.2 by ensuring the output is escaped using the `esc()` function in the receipt template. As a temporary mitigation, administrators should ensure the &quot;Return Policy&quot; field contains only plain text and strictly avoid entering any HTML tags. There is no code-based workaround other than applying the patch.