diff --git a/2016/CVE-2016-10277.json b/2016/CVE-2016-10277.json index c804a01ddc..1b0f7d66fe 100644 --- a/2016/CVE-2016-10277.json +++ b/2016/CVE-2016-10277.json @@ -14,10 +14,10 @@ "description": "Motorola Untethered Jailbreak: Exploiting CVE-2016-10277 for Secure Boot and Device Locking bypass ", "fork": false, "created_at": "2017-06-06T12:00:27Z", - "updated_at": "2026-10-01T16:35:55Z", + "updated_at": "2026-10-26T04:29:39Z", "pushed_at": "2017-08-30T15:17:08Z", - "stargazers_count": 84, - "watchers_count": 84, + "stargazers_count": 85, + "watchers_count": 85, "has_discussions": false, "forks_count": 24, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 24, - "watchers": 84, + "watchers": 85, "score": 0, "subscribers_count": 16 }, diff --git a/2017/CVE-2017-1000028.json b/2017/CVE-2017-1000028.json index d2ce024254..73b97890c6 100644 --- a/2017/CVE-2017-1000028.json +++ b/2017/CVE-2017-1000028.json @@ -64,5 +64,53 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1433864976, + "name": "hdu-is-work1", + "full_name": "skl233\/hdu-is-work1", + "owner": { + "login": "skl233", + "id": 243073411, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/243073411?v=4", + "html_url": "https:\/\/github.com\/skl233", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/skl233\/hdu-is-work1", + "description": "Secure REST API with CI\/CD security scanning (Bandit SAST + pip-audit SCA) and a reproducible CVE-2017-1000028 lab (GlassFish 4.1)", + "fork": false, + "created_at": "2026-10-26T03:38:49Z", + "updated_at": "2026-10-26T04:22:32Z", + "pushed_at": "2026-10-26T04:22:28Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "bandit", + "bcrypt", + "cve-2017-1000028", + "flask", + "github-actions", + "information-security", + "jwt", + "owasp-top-10", + "path-traversal", + "pip-audit", + "python", + "sast", + "sca", + "vulhub" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2017/CVE-2017-11882.json b/2017/CVE-2017-11882.json index 6d7789a63b..9985767995 100644 --- a/2017/CVE-2017-11882.json +++ b/2017/CVE-2017-11882.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2017-11-19T14:57:41Z", - "updated_at": "2017-11-21T09:11:26Z", + "updated_at": "2026-10-26T01:03:00Z", "pushed_at": "2017-11-18T14:21:03Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 3, + "watchers": 4, "score": 0, "subscribers_count": 1 }, diff --git a/2017/CVE-2017-5754.json b/2017/CVE-2017-5754.json index d3c0815f62..5b26893754 100644 --- a/2017/CVE-2017-5754.json +++ b/2017/CVE-2017-5754.json @@ -62,7 +62,7 @@ "stargazers_count": 539, "watchers_count": 539, "has_discussions": false, - "forks_count": 68, + "forks_count": 67, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -79,7 +79,7 @@ "security" ], "visibility": "public", - "forks": 68, + "forks": 67, "watchers": 539, "score": 0, "subscribers_count": 43 diff --git a/2018/CVE-2018-18955.json b/2018/CVE-2018-18955.json index 5b2ad4f4fc..3c9f25f871 100644 --- a/2018/CVE-2018-18955.json +++ b/2018/CVE-2018-18955.json @@ -1,4 +1,43 @@ [ + { + "id": 449732024, + "name": "CVE-2018-18955", + "full_name": "scheatkode\/CVE-2018-18955", + "owner": { + "login": "scheatkode", + "id": 29172448, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/29172448?v=4", + "html_url": "https:\/\/github.com\/scheatkode", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/scheatkode\/CVE-2018-18955", + "description": "💀 Linux local root exploit for CVE-2018-18955", + "fork": false, + "created_at": "2022-01-19T14:47:47Z", + "updated_at": "2026-08-23T12:25:49Z", + "pushed_at": "2022-01-20T21:05:38Z", + "stargazers_count": 25, + "watchers_count": 25, + "has_discussions": false, + "forks_count": 5, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve", + "exploit", + "linux", + "pentest", + "pentesting" + ], + "visibility": "public", + "forks": 5, + "watchers": 25, + "score": 0, + "subscribers_count": 1 + }, { "id": 1308012116, "name": "CVE-2018-18955", diff --git a/2018/CVE-2018-19320.json b/2018/CVE-2018-19320.json index 44d93f2390..e08ee799a7 100644 --- a/2018/CVE-2018-19320.json +++ b/2018/CVE-2018-19320.json @@ -85,7 +85,7 @@ "stargazers_count": 386, "watchers_count": 386, "has_discussions": false, - "forks_count": 87, + "forks_count": 88, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -93,7 +93,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 87, + "forks": 88, "watchers": 386, "score": 0, "subscribers_count": 9 diff --git a/2018/CVE-2018-20062.json b/2018/CVE-2018-20062.json index fa205b659b..7f587e1539 100644 --- a/2018/CVE-2018-20062.json +++ b/2018/CVE-2018-20062.json @@ -32,6 +32,39 @@ "score": 0, "subscribers_count": 1 }, + { + "id": 553722594, + "name": "ThinkPHP5_RCE", + "full_name": "0xRar\/ThinkPHP5_RCE", + "owner": { + "login": "0xRar", + "id": 33517160, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/33517160?v=4", + "html_url": "https:\/\/github.com\/0xRar", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/0xRar\/ThinkPHP5_RCE", + "description": "ThinkPHP 5.0.23 RCE Vulnerability PoC - CVE-2018-20062", + "fork": false, + "created_at": "2022-10-18T16:59:46Z", + "updated_at": "2022-10-18T17:11:18Z", + "pushed_at": "2022-10-18T17:13:35Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, { "id": 562747008, "name": "CVE-2018-20062", diff --git a/2019/CVE-2019-10945.json b/2019/CVE-2019-10945.json index d906e1351d..9d880c5b28 100644 --- a/2019/CVE-2019-10945.json +++ b/2019/CVE-2019-10945.json @@ -14,10 +14,10 @@ "description": "Joomla! Core 1.5.0 - 3.9.4 - Directory Traversal \/ Authenticated Arbitrary File Deletion in Python3", "fork": false, "created_at": "2023-02-24T10:58:53Z", - "updated_at": "2026-09-22T09:07:22Z", + "updated_at": "2026-10-26T01:49:56Z", "pushed_at": "2023-02-27T16:32:59Z", - "stargazers_count": 34, - "watchers_count": 34, + "stargazers_count": 35, + "watchers_count": 35, "has_discussions": false, "forks_count": 4, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 4, - "watchers": 34, + "watchers": 35, "score": 0, "subscribers_count": 1 }, diff --git a/2020/CVE-2020-0796.json b/2020/CVE-2020-0796.json index e948bdbe22..2c8b1e9410 100644 --- a/2020/CVE-2020-0796.json +++ b/2020/CVE-2020-0796.json @@ -766,10 +766,10 @@ "description": "Advanced scanner for CVE-2020-0796 - SMBv3 RCE ", "fork": false, "created_at": "2020-03-14T02:07:16Z", - "updated_at": "2026-05-23T10:50:39Z", + "updated_at": "2026-10-26T00:48:07Z", "pushed_at": "2023-05-22T22:42:20Z", - "stargazers_count": 14, - "watchers_count": 14, + "stargazers_count": 15, + "watchers_count": 15, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -780,7 +780,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 14, + "watchers": 15, "score": 0, "subscribers_count": 2 }, diff --git a/2021/CVE-2021-33044.json b/2021/CVE-2021-33044.json index f2e8368bb0..ad47b93031 100644 --- a/2021/CVE-2021-33044.json +++ b/2021/CVE-2021-33044.json @@ -146,10 +146,10 @@ "description": "Dahua IP camera CVE research toolkit (CVE-2021-33044\/33045, CVE-2025-31700\/31701)", "fork": false, "created_at": "2026-03-03T21:28:23Z", - "updated_at": "2026-10-23T20:32:10Z", + "updated_at": "2026-10-26T05:41:26Z", "pushed_at": "2026-04-02T01:55:41Z", - "stargazers_count": 31, - "watchers_count": 31, + "stargazers_count": 32, + "watchers_count": 32, "has_discussions": false, "forks_count": 9, "allow_forking": true, @@ -160,7 +160,7 @@ "topics": [], "visibility": "public", "forks": 9, - "watchers": 31, + "watchers": 32, "score": 0, "subscribers_count": 2 }, diff --git a/2021/CVE-2021-41773.json b/2021/CVE-2021-41773.json index 156f141d46..7ab7507298 100644 --- a/2021/CVE-2021-41773.json +++ b/2021/CVE-2021-41773.json @@ -5857,8 +5857,8 @@ "description": "Secure REST API with CI security scanning and CVE-2021-41773 reproduction\/fix", "fork": false, "created_at": "2026-10-19T09:16:56Z", - "updated_at": "2026-10-20T04:21:52Z", - "pushed_at": "2026-10-20T04:21:48Z", + "updated_at": "2026-10-26T04:23:29Z", + "pushed_at": "2026-10-26T04:23:26Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2022/CVE-2022-20829.json b/2022/CVE-2022-20829.json index cd9ae6b111..c31def192d 100644 --- a/2022/CVE-2022-20829.json +++ b/2022/CVE-2022-20829.json @@ -14,12 +14,12 @@ "description": "A tool for extracting, modifying, and crafting ASDM binary packages (CVE-2022-20829)", "fork": false, "created_at": "2022-04-28T17:04:58Z", - "updated_at": "2026-08-21T07:43:16Z", + "updated_at": "2026-10-26T03:12:51Z", "pushed_at": "2022-08-15T19:03:07Z", - "stargazers_count": 14, - "watchers_count": 14, + "stargazers_count": 12, + "watchers_count": 12, "has_discussions": false, - "forks_count": 5, + "forks_count": 4, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -34,8 +34,8 @@ "poc" ], "visibility": "public", - "forks": 5, - "watchers": 14, + "forks": 4, + "watchers": 12, "score": 0, "subscribers_count": 1 } diff --git a/2022/CVE-2022-32250.json b/2022/CVE-2022-32250.json index 79194c7d32..5b9b7f7d2f 100644 --- a/2022/CVE-2022-32250.json +++ b/2022/CVE-2022-32250.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2022-08-24T06:00:47Z", - "updated_at": "2026-10-24T22:33:22Z", + "updated_at": "2026-10-26T06:28:49Z", "pushed_at": "2023-06-18T14:43:52Z", - "stargazers_count": 191, - "watchers_count": 191, + "stargazers_count": 192, + "watchers_count": 192, "has_discussions": false, "forks_count": 42, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 42, - "watchers": 191, + "watchers": 192, "score": 0, "subscribers_count": 2 }, diff --git a/2023/CVE-2023-0386.json b/2023/CVE-2023-0386.json index b4e9ae88c7..43782148a2 100644 --- a/2023/CVE-2023-0386.json +++ b/2023/CVE-2023-0386.json @@ -146,7 +146,7 @@ "description": "CVE-2023-0386 EXP", "fork": false, "created_at": "2023-05-08T01:53:50Z", - "updated_at": "2025-03-10T18:02:18Z", + "updated_at": "2026-10-26T03:13:00Z", "pushed_at": "2023-05-08T01:57:12Z", "stargazers_count": 4, "watchers_count": 4, diff --git a/2023/CVE-2023-21839.json b/2023/CVE-2023-21839.json index 8d28e957d9..8b593d35e4 100644 --- a/2023/CVE-2023-21839.json +++ b/2023/CVE-2023-21839.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2023-02-21T16:08:56Z", - "updated_at": "2026-10-13T19:04:12Z", + "updated_at": "2026-10-26T03:21:29Z", "pushed_at": "2023-02-26T06:43:18Z", - "stargazers_count": 241, - "watchers_count": 241, + "stargazers_count": 242, + "watchers_count": 242, "has_discussions": false, "forks_count": 44, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 44, - "watchers": 241, + "watchers": 242, "score": 0, "subscribers_count": 3 }, diff --git a/2023/CVE-2023-27997.json b/2023/CVE-2023-27997.json index e54688d6d3..8601261d64 100644 --- a/2023/CVE-2023-27997.json +++ b/2023/CVE-2023-27997.json @@ -212,10 +212,10 @@ "description": "xortigate-cve-2023-27997", "fork": false, "created_at": "2023-10-12T16:12:41Z", - "updated_at": "2026-10-19T16:28:00Z", + "updated_at": "2026-10-26T03:12:53Z", "pushed_at": "2023-10-12T16:17:23Z", - "stargazers_count": 64, - "watchers_count": 64, + "stargazers_count": 63, + "watchers_count": 63, "has_discussions": false, "forks_count": 13, "allow_forking": true, @@ -226,7 +226,7 @@ "topics": [], "visibility": "public", "forks": 13, - "watchers": 64, + "watchers": 63, "score": 0, "subscribers_count": 3 }, diff --git a/2023/CVE-2023-38646.json b/2023/CVE-2023-38646.json index 98ec8bc018..ccfef1ce33 100644 --- a/2023/CVE-2023-38646.json +++ b/2023/CVE-2023-38646.json @@ -397,10 +397,10 @@ "description": "Metabase Pre-auth RCE (CVE-2023-38646)", "fork": false, "created_at": "2023-08-19T11:47:08Z", - "updated_at": "2026-04-14T17:47:50Z", + "updated_at": "2026-10-26T02:13:29Z", "pushed_at": "2023-08-19T12:18:45Z", - "stargazers_count": 9, - "watchers_count": 9, + "stargazers_count": 10, + "watchers_count": 10, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -426,7 +426,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 9, + "watchers": 10, "score": 0, "subscribers_count": 1 }, @@ -786,10 +786,10 @@ "description": "This script is designed to exploit vulnerable Metabase software versions by providing you as attacker a shell.", "fork": false, "created_at": "2023-10-17T07:43:58Z", - "updated_at": "2024-08-10T06:24:08Z", + "updated_at": "2026-10-26T02:20:45Z", "pushed_at": "2024-08-10T06:24:04Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -800,7 +800,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 1 }, diff --git a/2023/CVE-2023-43208.json b/2023/CVE-2023-43208.json index 40dfbb3259..fef3747fcd 100644 --- a/2023/CVE-2023-43208.json +++ b/2023/CVE-2023-43208.json @@ -284,8 +284,8 @@ "description": "Python implementation of CVE-2023-43208 Mirth Connect RCE (Unauth XStream)", "fork": false, "created_at": "2026-02-26T22:21:23Z", - "updated_at": "2026-05-16T13:44:13Z", - "pushed_at": "2026-03-08T22:25:17Z", + "updated_at": "2026-10-26T03:08:14Z", + "pushed_at": "2026-10-26T03:08:10Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2024/CVE-2024-30088.json b/2024/CVE-2024-30088.json index 2461753a5b..d4ddc985ac 100644 --- a/2024/CVE-2024-30088.json +++ b/2024/CVE-2024-30088.json @@ -113,10 +113,10 @@ "description": "Kernel exploit for Xbox SystemOS using CVE-2024-30088", "fork": false, "created_at": "2024-07-15T08:07:05Z", - "updated_at": "2026-10-25T08:38:52Z", + "updated_at": "2026-10-26T02:12:40Z", "pushed_at": "2025-07-13T14:10:02Z", - "stargazers_count": 530, - "watchers_count": 530, + "stargazers_count": 529, + "watchers_count": 529, "has_discussions": false, "forks_count": 37, "allow_forking": true, @@ -127,7 +127,7 @@ "topics": [], "visibility": "public", "forks": 37, - "watchers": 530, + "watchers": 529, "score": 0, "subscribers_count": 26 }, diff --git a/2024/CVE-2024-3400.json b/2024/CVE-2024-3400.json index 9a042276ac..7a1bb83124 100644 --- a/2024/CVE-2024-3400.json +++ b/2024/CVE-2024-3400.json @@ -344,10 +344,10 @@ "description": "CVE-2024-3400-RCE", "fork": false, "created_at": "2024-04-16T16:18:56Z", - "updated_at": "2026-10-02T15:34:14Z", + "updated_at": "2026-10-26T03:12:53Z", "pushed_at": "2024-04-22T08:50:27Z", - "stargazers_count": 90, - "watchers_count": 90, + "stargazers_count": 89, + "watchers_count": 89, "has_discussions": false, "forks_count": 7, "allow_forking": true, @@ -358,7 +358,7 @@ "topics": [], "visibility": "public", "forks": 7, - "watchers": 90, + "watchers": 89, "score": 0, "subscribers_count": 2 }, diff --git a/2024/CVE-2024-47176.json b/2024/CVE-2024-47176.json index 241874b385..dbba4bc22f 100644 --- a/2024/CVE-2024-47176.json +++ b/2024/CVE-2024-47176.json @@ -14,10 +14,10 @@ "description": "POC scanner for CVE-2024-47176", "fork": false, "created_at": "2024-09-27T01:22:43Z", - "updated_at": "2026-09-04T09:52:52Z", + "updated_at": "2026-10-26T03:12:54Z", "pushed_at": "2024-10-07T19:07:54Z", - "stargazers_count": 8, - "watchers_count": 8, + "stargazers_count": 7, + "watchers_count": 7, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 8, + "watchers": 7, "score": 0, "subscribers_count": 1 }, diff --git a/2025/CVE-2025-24203.json b/2025/CVE-2025-24203.json index 4af0800005..0678caae6e 100644 --- a/2025/CVE-2025-24203.json +++ b/2025/CVE-2025-24203.json @@ -19,7 +19,7 @@ "stargazers_count": 427, "watchers_count": 427, "has_discussions": false, - "forks_count": 41, + "forks_count": 40, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 41, + "forks": 40, "watchers": 427, "score": 0, "subscribers_count": 11 diff --git a/2025/CVE-2025-31700.json b/2025/CVE-2025-31700.json index 0910030fd1..78f1e38645 100644 --- a/2025/CVE-2025-31700.json +++ b/2025/CVE-2025-31700.json @@ -14,10 +14,10 @@ "description": "Dahua IP camera CVE research toolkit (CVE-2021-33044\/33045, CVE-2025-31700\/31701)", "fork": false, "created_at": "2026-03-03T21:28:23Z", - "updated_at": "2026-10-23T20:32:10Z", + "updated_at": "2026-10-26T05:41:26Z", "pushed_at": "2026-04-02T01:55:41Z", - "stargazers_count": 31, - "watchers_count": 31, + "stargazers_count": 32, + "watchers_count": 32, "has_discussions": false, "forks_count": 9, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 9, - "watchers": 31, + "watchers": 32, "score": 0, "subscribers_count": 2 } diff --git a/2025/CVE-2025-31702.json b/2025/CVE-2025-31702.json index a697b23e6b..216cf65e62 100644 --- a/2025/CVE-2025-31702.json +++ b/2025/CVE-2025-31702.json @@ -14,10 +14,10 @@ "description": "Repository with tools, exploits, and material associated with the analysis and discovery process of CVE-2025-31702 and other related security issues.", "fork": false, "created_at": "2025-10-29T15:04:42Z", - "updated_at": "2026-07-08T19:28:03Z", + "updated_at": "2026-10-26T05:33:19Z", "pushed_at": "2025-12-16T18:25:40Z", - "stargazers_count": 10, - "watchers_count": 10, + "stargazers_count": 11, + "watchers_count": 11, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -33,7 +33,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 10, + "watchers": 11, "score": 0, "subscribers_count": 1 } diff --git a/2025/CVE-2025-32463.json b/2025/CVE-2025-32463.json index 3f6d16c968..432f8073a4 100644 --- a/2025/CVE-2025-32463.json +++ b/2025/CVE-2025-32463.json @@ -242,7 +242,7 @@ "stargazers_count": 475, "watchers_count": 475, "has_discussions": false, - "forks_count": 63, + "forks_count": 62, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -262,7 +262,7 @@ "vulnerability" ], "visibility": "public", - "forks": 63, + "forks": 62, "watchers": 475, "score": 0, "subscribers_count": 3 diff --git a/2025/CVE-2025-43990.json b/2025/CVE-2025-43990.json index db0bfd0e9f..b6e9867c9d 100644 --- a/2025/CVE-2025-43990.json +++ b/2025/CVE-2025-43990.json @@ -14,12 +14,12 @@ "description": "Magento APSB25-94 Unauthenticated File Upload to RCE (CVE-2026-XXXX) - Eval Shell + Probe Scanner", "fork": false, "created_at": "2026-04-03T04:00:25Z", - "updated_at": "2026-04-09T07:20:09Z", + "updated_at": "2026-10-26T06:39:48Z", "pushed_at": "2026-04-03T04:02:53Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,8 +27,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, - "watchers": 0, + "forks": 1, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2025/CVE-2025-5548.json b/2025/CVE-2025-5548.json index 7036f54386..ebcbe2546f 100644 --- a/2025/CVE-2025-5548.json +++ b/2025/CVE-2025-5548.json @@ -1076,5 +1076,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1432509621, + "name": "CVE-2025-5548", + "full_name": "FreemanHack\/CVE-2025-5548", + "owner": { + "login": "FreemanHack", + "id": 187629788, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/187629788?v=4", + "html_url": "https:\/\/github.com\/FreemanHack", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/FreemanHack\/CVE-2025-5548", + "description": "Entorno y explotación de la vulnerabilidad CVE-2025-5548 (buffer overflow en FreeFloat FTP Server 1.0)", + "fork": false, + "created_at": "2026-10-24T19:09:24Z", + "updated_at": "2026-10-26T05:54:00Z", + "pushed_at": "2026-10-26T03:00:11Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2025/CVE-2025-55575.json b/2025/CVE-2025-55575.json index 4e58eb27ec..c12e3cf7bb 100644 --- a/2025/CVE-2025-55575.json +++ b/2025/CVE-2025-55575.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2025-08-22T19:04:24Z", - "updated_at": "2026-10-23T18:48:07Z", + "updated_at": "2026-10-26T07:27:20Z", "pushed_at": "2025-08-25T18:42:48Z", - "stargazers_count": 173, - "watchers_count": 173, + "stargazers_count": 172, + "watchers_count": 172, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,8 +28,8 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 173, + "watchers": 172, "score": 0, - "subscribers_count": 172 + "subscribers_count": 171 } ] \ No newline at end of file diff --git a/2025/CVE-2025-5777.json b/2025/CVE-2025-5777.json index 74388df944..14a4e23130 100644 --- a/2025/CVE-2025-5777.json +++ b/2025/CVE-2025-5777.json @@ -455,10 +455,10 @@ "description": "PoC for CVE-2025-5777 – Auth Bypass and RCE in Trend Micro Apex Central", "fork": false, "created_at": "2025-07-23T12:05:05Z", - "updated_at": "2026-08-18T05:26:46Z", + "updated_at": "2026-10-26T03:12:55Z", "pushed_at": "2025-07-23T16:04:48Z", - "stargazers_count": 5, - "watchers_count": 5, + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -479,7 +479,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 5, + "watchers": 4, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-102255.json b/2026/CVE-2026-102255.json index cbc814f3dd..a3bba243d0 100644 --- a/2026/CVE-2026-102255.json +++ b/2026/CVE-2026-102255.json @@ -77,11 +77,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/sonicwall-sma1000-cve-2026-102255-check", - "description": "Standalone defensive checker project for CVE-2026-102255: SonicWall SMA1000 (6210, 7210, 8200v): Pre-authentication server-side request forgery. One exploit per repository; implementation pending.", + "description": "Offline SonicWall SMA1000 evidence checker for CVE-2026-102255. Reported build and configuration evidence. Standalone Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:41:33Z", - "updated_at": "2026-10-26T00:23:08Z", - "pushed_at": "2026-10-26T01:50:56Z", + "updated_at": "2026-10-26T05:07:03Z", + "pushed_at": "2026-10-26T05:19:31Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -91,7 +91,18 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-102255", + "evidence-based", + "html-report", + "offline", + "python", + "security", + "security-audit", + "security-tools", + "sonicwall" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-102256.json b/2026/CVE-2026-102256.json index 64df83e8bf..de8070cb32 100644 --- a/2026/CVE-2026-102256.json +++ b/2026/CVE-2026-102256.json @@ -11,11 +11,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/sonicwall-sma1000-cve-2026-102256-check", - "description": "Standalone defensive checker project for CVE-2026-102256: SonicWall SMA1000 (6210, 7210, 8200v): Authenticated remote code execution. One exploit per repository; implementation pending.", + "description": "Offline SonicWall SMA1000 evidence checker for CVE-2026-102256. Reported build and configuration evidence. Standalone Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:41:46Z", - "updated_at": "2026-10-26T00:22:36Z", - "pushed_at": "2026-10-26T01:52:16Z", + "updated_at": "2026-10-26T05:07:04Z", + "pushed_at": "2026-10-26T05:19:36Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -25,7 +25,18 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-102256", + "evidence-based", + "html-report", + "offline", + "python", + "security", + "security-audit", + "security-tools", + "sonicwall" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-102257.json b/2026/CVE-2026-102257.json index 7b258331fe..bd475c91ef 100644 --- a/2026/CVE-2026-102257.json +++ b/2026/CVE-2026-102257.json @@ -11,11 +11,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/sonicwall-sma1000-cve-2026-102257-check", - "description": "Standalone defensive checker project for CVE-2026-102257: SonicWall SMA1000 (6210, 7210, 8200v): AMC archive path traversal. One exploit per repository; implementation pending.", + "description": "Offline SonicWall SMA1000 evidence checker for CVE-2026-102257. Reported build and configuration evidence. Standalone Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:41:57Z", - "updated_at": "2026-10-26T00:22:32Z", - "pushed_at": "2026-10-26T01:54:23Z", + "updated_at": "2026-10-26T05:07:04Z", + "pushed_at": "2026-10-26T05:19:37Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -25,7 +25,18 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-102257", + "evidence-based", + "html-report", + "offline", + "python", + "security", + "security-audit", + "security-tools", + "sonicwall" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-102258.json b/2026/CVE-2026-102258.json index 0b3ebbeeea..e9ae97a2e8 100644 --- a/2026/CVE-2026-102258.json +++ b/2026/CVE-2026-102258.json @@ -11,11 +11,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/sonicwall-sma1000-cve-2026-102258-check", - "description": "Standalone defensive checker project for CVE-2026-102258: SonicWall SMA1000 (6210, 7210, 8200v): AMC stored cross-site scripting. One exploit per repository; implementation pending.", + "description": "Offline SonicWall SMA1000 evidence checker for CVE-2026-102258. Reported build and configuration evidence. Standalone Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:42:29Z", - "updated_at": "2026-10-26T00:22:27Z", - "pushed_at": "2026-10-26T00:22:22Z", + "updated_at": "2026-10-26T05:07:10Z", + "pushed_at": "2026-10-26T05:19:37Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -25,7 +25,18 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-102258", + "evidence-based", + "html-report", + "offline", + "python", + "security", + "security-audit", + "security-tools", + "sonicwall" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-102764.json b/2026/CVE-2026-102764.json index a9dd470181..bc0230f064 100644 --- a/2026/CVE-2026-102764.json +++ b/2026/CVE-2026-102764.json @@ -77,11 +77,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/beyondtrust-remote-support-cve-2026-102764-check", - "description": "Standalone defensive checker project for CVE-2026-102764: BeyondTrust Remote Support: Internal-message origin validation \/ unauthorized file operations. One exploit per repository; implementation pending.", + "description": "Offline BeyondTrust Remote Support evidence checker for CVE-2026-102764. Remote Support version and configuration evidence. Standalone Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:42:55Z", - "updated_at": "2026-10-26T00:29:44Z", - "pushed_at": "2026-10-26T00:29:39Z", + "updated_at": "2026-10-26T05:02:50Z", + "pushed_at": "2026-10-26T05:17:55Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -91,7 +91,18 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "beyondtrust", + "cli", + "cve-2026-102764", + "evidence-based", + "html-report", + "offline", + "python", + "security", + "security-audit", + "security-tools" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-102826.json b/2026/CVE-2026-102826.json index 0d34949879..d900aa861a 100644 --- a/2026/CVE-2026-102826.json +++ b/2026/CVE-2026-102826.json @@ -11,11 +11,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/simplegit-rce-check", - "description": "Standalone defensive checker project for CVE-2026-102826: simple-git configuration include command injection. One exploit per repository; implementation pending.", + "description": "Offline simple-git evidence checker for CVE-2026-102826. Git configuration and package evidence. Standalone Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:37:04Z", - "updated_at": "2026-10-25T23:27:52Z", - "pushed_at": "2026-10-26T01:28:43Z", + "updated_at": "2026-10-26T05:06:04Z", + "pushed_at": "2026-10-26T05:19:30Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -25,7 +25,18 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-102826", + "evidence-based", + "html-report", + "offline", + "python", + "security", + "security-audit", + "security-tools", + "simple-git" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-104286.json b/2026/CVE-2026-104286.json index 9d58d2db52..77630e0f15 100644 --- a/2026/CVE-2026-104286.json +++ b/2026/CVE-2026-104286.json @@ -110,11 +110,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/fortimail-cve-2026-104286-check", - "description": "Standalone defensive checker project for CVE-2026-104286: Fortinet FortiMail: Path traversal \/ NULL-byte arbitrary file write. One exploit per repository; implementation pending.", + "description": "Offline FortiMail evidence checker for CVE-2026-104286. FortiMail version and deployment evidence. Standalone Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:43:25Z", - "updated_at": "2026-10-26T00:23:12Z", - "pushed_at": "2026-10-26T00:23:08Z", + "updated_at": "2026-10-26T05:05:52Z", + "pushed_at": "2026-10-26T05:18:03Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -124,7 +124,18 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-104286", + "evidence-based", + "fortinet", + "html-report", + "offline", + "python", + "security", + "security-audit", + "security-tools" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-104849.json b/2026/CVE-2026-104849.json index c63eaf050b..76a83bee09 100644 --- a/2026/CVE-2026-104849.json +++ b/2026/CVE-2026-104849.json @@ -11,11 +11,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/tinypool-options-rce-check", - "description": "Standalone defensive checker project for Tinypool CVE-2026-104849. One exploit per repository; implementation pending.", + "description": "Offline Tinypool evidence checker for CVE-2026-104849. Worker-pool package and options evidence. Standalone Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:37:34Z", - "updated_at": "2026-10-24T16:30:50Z", - "pushed_at": "2026-10-26T01:29:32Z", + "updated_at": "2026-10-26T05:10:01Z", + "pushed_at": "2026-10-26T05:19:42Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -25,7 +25,18 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-104849", + "evidence-based", + "html-report", + "offline", + "python", + "security", + "security-audit", + "security-tools", + "tinypool" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-104935.json b/2026/CVE-2026-104935.json index e187e8e376..dc4473c36b 100644 --- a/2026/CVE-2026-104935.json +++ b/2026/CVE-2026-104935.json @@ -143,11 +143,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/ivanti-connect-secure-cve-2026-104935-check", - "description": "Standalone defensive checker project for CVE-2026-104935: Ivanti Connect Secure: Authentication bypass by spoofing. One exploit per repository; implementation pending.", + "description": "Offline Ivanti Connect Secure evidence checker for CVE-2026-104935. Connect Secure build and configuration evidence. Standalone Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:42:43Z", - "updated_at": "2026-10-26T00:29:52Z", - "pushed_at": "2026-10-26T00:29:47Z", + "updated_at": "2026-10-26T05:12:42Z", + "pushed_at": "2026-10-26T05:18:10Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -157,7 +157,18 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-104935", + "evidence-based", + "html-report", + "ivanti", + "offline", + "python", + "security", + "security-audit", + "security-tools" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-105445.json b/2026/CVE-2026-105445.json index eda282a08a..02b2c18d78 100644 --- a/2026/CVE-2026-105445.json +++ b/2026/CVE-2026-105445.json @@ -11,11 +11,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/docker-hub-pat-check", - "description": "Standalone defensive checker project for CVE-2026-105445: Docker Hub account-conversion PAT reassignment. One exploit per repository; implementation pending.", + "description": "Offline Docker Hub PAT evidence checker for CVE-2026-105445. Supplied evidence only; no token collection, login or API requests. JSON\/CSV\/HTML reports.", "fork": false, "created_at": "2026-10-23T23:49:22Z", - "updated_at": "2026-10-24T16:29:16Z", - "pushed_at": "2026-10-24T16:29:13Z", + "updated_at": "2026-10-26T05:02:50Z", + "pushed_at": "2026-10-26T05:18:02Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -25,7 +25,18 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-105445", + "docker-hub", + "evidence-based", + "html-report", + "offline", + "python", + "security", + "security-audit", + "security-tools" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-105481.json b/2026/CVE-2026-105481.json index 26421b4c2c..411168bc96 100644 --- a/2026/CVE-2026-105481.json +++ b/2026/CVE-2026-105481.json @@ -11,11 +11,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/node-cve-2026-105481-check", - "description": "Standalone defensive checker project for CVE-2026-105481: Node.js: HTTP keep-alive premature-response acceptance. One exploit per repository; implementation pending.", + "description": "Offline Node.js evidence checker for CVE-2026-105481: HTTP keep-alive premature-response acceptance. Single-file Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:47:39Z", - "updated_at": "2026-10-24T16:24:27Z", - "pushed_at": "2026-10-24T16:24:24Z", + "updated_at": "2026-10-26T05:05:52Z", + "pushed_at": "2026-10-26T05:18:36Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -25,7 +25,19 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-105481", + "evidence-based", + "html-report", + "nodejs", + "offline", + "python", + "runtime-inventory", + "security", + "security-audit", + "security-tools" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-105482.json b/2026/CVE-2026-105482.json index b623c850e8..10370ca5e3 100644 --- a/2026/CVE-2026-105482.json +++ b/2026/CVE-2026-105482.json @@ -44,11 +44,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/node-cve-2026-105482-check", - "description": "Standalone defensive checker project for CVE-2026-105482: Node.js: DNS resolution NUL-name truncation. One exploit per repository; implementation pending.", + "description": "Offline Node.js evidence checker for CVE-2026-105482: DNS resolution NUL-name truncation. Single-file Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:46:49Z", - "updated_at": "2026-10-24T16:28:45Z", - "pushed_at": "2026-10-24T16:28:40Z", + "updated_at": "2026-10-26T05:06:57Z", + "pushed_at": "2026-10-26T05:18:36Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -58,7 +58,20 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-105482", + "dns", + "evidence-based", + "html-report", + "nodejs", + "offline", + "python", + "runtime-inventory", + "security", + "security-audit", + "security-tools" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-105483.json b/2026/CVE-2026-105483.json index 7e09d6d97f..c8c81d131a 100644 --- a/2026/CVE-2026-105483.json +++ b/2026/CVE-2026-105483.json @@ -11,11 +11,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/node-cve-2026-105483-check", - "description": "Standalone defensive checker project for CVE-2026-105483: Node.js: TLS fullwidth-IP hostname validation bypass. One exploit per repository; implementation pending.", + "description": "Offline Node.js evidence checker for CVE-2026-105483: TLS fullwidth-IP hostname validation bypass. Single-file Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:47:01Z", - "updated_at": "2026-10-24T16:28:52Z", - "pushed_at": "2026-10-24T16:28:48Z", + "updated_at": "2026-10-26T05:10:54Z", + "pushed_at": "2026-10-26T05:18:41Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -25,7 +25,20 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-105483", + "evidence-based", + "html-report", + "nodejs", + "offline", + "python", + "runtime-inventory", + "security", + "security-audit", + "security-tools", + "tls" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-106069.json b/2026/CVE-2026-106069.json index 7581f4fd38..c741186a21 100644 --- a/2026/CVE-2026-106069.json +++ b/2026/CVE-2026-106069.json @@ -11,11 +11,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/node-cve-2026-106069-check", - "description": "Standalone defensive checker project for CVE-2026-106069: Node.js: TLS leading-zero IPv4 resolver mismatch. One exploit per repository; implementation pending.", + "description": "Offline Node.js evidence checker for CVE-2026-106069: TLS leading-zero IPv4 resolver mismatch. Single-file Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:47:14Z", - "updated_at": "2026-10-24T16:28:59Z", - "pushed_at": "2026-10-24T16:28:54Z", + "updated_at": "2026-10-26T05:06:59Z", + "pushed_at": "2026-10-26T05:18:42Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -25,7 +25,20 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-106069", + "evidence-based", + "html-report", + "nodejs", + "offline", + "python", + "runtime-inventory", + "security", + "security-audit", + "security-tools", + "tls" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-106070.json b/2026/CVE-2026-106070.json index e8df2fdcb7..cf47997a12 100644 --- a/2026/CVE-2026-106070.json +++ b/2026/CVE-2026-106070.json @@ -11,11 +11,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/node-cve-2026-106070-check", - "description": "Standalone defensive checker project for CVE-2026-106070: Node.js: ZipFile invalid-header content substitution. One exploit per repository; implementation pending.", + "description": "Offline Node.js evidence checker for CVE-2026-106070: ZipFile invalid-header content substitution. Single-file Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:48:22Z", - "updated_at": "2026-10-24T16:29:05Z", - "pushed_at": "2026-10-24T16:29:01Z", + "updated_at": "2026-10-26T05:08:03Z", + "pushed_at": "2026-10-26T05:18:43Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -25,7 +25,19 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-106070", + "evidence-based", + "html-report", + "nodejs", + "offline", + "python", + "runtime-inventory", + "security", + "security-audit", + "security-tools" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-106071.json b/2026/CVE-2026-106071.json index fcedccc945..9443278cbe 100644 --- a/2026/CVE-2026-106071.json +++ b/2026/CVE-2026-106071.json @@ -11,11 +11,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/node-cve-2026-106071-check", - "description": "Standalone defensive checker project for CVE-2026-106071: Node.js: Permission Model wildcard path over-grant. One exploit per repository; implementation pending.", + "description": "Offline Node.js evidence checker for CVE-2026-106071: Permission Model wildcard path over-grant. Single-file Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:48:35Z", - "updated_at": "2026-10-24T16:29:12Z", - "pushed_at": "2026-10-24T16:29:07Z", + "updated_at": "2026-10-26T05:08:03Z", + "pushed_at": "2026-10-26T05:18:48Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -25,7 +25,20 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-106071", + "evidence-based", + "html-report", + "nodejs", + "offline", + "permission-model", + "python", + "runtime-inventory", + "security", + "security-audit", + "security-tools" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-106072.json b/2026/CVE-2026-106072.json index 5a71ba8d55..89041eb7b9 100644 --- a/2026/CVE-2026-106072.json +++ b/2026/CVE-2026-106072.json @@ -11,11 +11,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/node-cve-2026-106072-check", - "description": "Standalone defensive checker project for CVE-2026-106072: Node.js: TLS noncanonical-IP DNS SAN acceptance. One exploit per repository; implementation pending.", + "description": "Offline Node.js evidence checker for CVE-2026-106072: TLS noncanonical-IP DNS SAN acceptance. Single-file Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:47:51Z", - "updated_at": "2026-10-24T16:29:18Z", - "pushed_at": "2026-10-24T16:29:14Z", + "updated_at": "2026-10-26T05:09:55Z", + "pushed_at": "2026-10-26T05:18:49Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -25,7 +25,21 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-106072", + "dns", + "evidence-based", + "html-report", + "nodejs", + "offline", + "python", + "runtime-inventory", + "security", + "security-audit", + "security-tools", + "tls" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-106073.json b/2026/CVE-2026-106073.json index 1d2bb0c61e..76a243227e 100644 --- a/2026/CVE-2026-106073.json +++ b/2026/CVE-2026-106073.json @@ -11,11 +11,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/node-cve-2026-106073-check", - "description": "Standalone defensive checker project for CVE-2026-106073: Node.js: Permission Model realpathSync read bypass. One exploit per repository; implementation pending.", + "description": "Offline Node.js evidence checker for CVE-2026-106073: Permission Model realpathSync read bypass. Single-file Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:48:48Z", - "updated_at": "2026-10-24T16:29:24Z", - "pushed_at": "2026-10-24T16:29:19Z", + "updated_at": "2026-10-26T05:08:03Z", + "pushed_at": "2026-10-26T05:18:50Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -25,7 +25,20 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-106073", + "evidence-based", + "html-report", + "nodejs", + "offline", + "permission-model", + "python", + "runtime-inventory", + "security", + "security-audit", + "security-tools" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-106074.json b/2026/CVE-2026-106074.json index f003f901d1..e25a457df4 100644 --- a/2026/CVE-2026-106074.json +++ b/2026/CVE-2026-106074.json @@ -11,11 +11,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/node-cve-2026-106074-check", - "description": "Standalone defensive checker project for CVE-2026-106074: Node.js: Crypto entropy cache duplication in snapshots. One exploit per repository; implementation pending.", + "description": "Offline Node.js evidence checker for CVE-2026-106074: Crypto entropy cache duplication in snapshots. Single-file Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:48:04Z", - "updated_at": "2026-10-24T16:29:30Z", - "pushed_at": "2026-10-24T16:29:25Z", + "updated_at": "2026-10-26T05:08:56Z", + "pushed_at": "2026-10-26T05:18:55Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -25,7 +25,19 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-106074", + "evidence-based", + "html-report", + "nodejs", + "offline", + "python", + "runtime-inventory", + "security", + "security-audit", + "security-tools" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-106173.json b/2026/CVE-2026-106173.json index 9d41681406..804cda4ba5 100644 --- a/2026/CVE-2026-106173.json +++ b/2026/CVE-2026-106173.json @@ -14,12 +14,12 @@ "description": "Proof of concept exploit for CVE-2026-106173, a path traversal file write leading to RCE for Fortinet FortiSIEM", "fork": false, "created_at": "2026-10-20T12:29:09Z", - "updated_at": "2026-10-26T01:23:19Z", + "updated_at": "2026-10-26T06:08:47Z", "pushed_at": "2026-10-20T12:43:37Z", - "stargazers_count": 25, - "watchers_count": 25, + "stargazers_count": 27, + "watchers_count": 27, "has_discussions": false, - "forks_count": 9, + "forks_count": 10, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,8 +27,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 9, - "watchers": 25, + "forks": 10, + "watchers": 27, "score": 0, "subscribers_count": 1 }, diff --git a/2026/CVE-2026-10961.json b/2026/CVE-2026-10961.json index 6451e95157..0f40119378 100644 --- a/2026/CVE-2026-10961.json +++ b/2026/CVE-2026-10961.json @@ -14,12 +14,12 @@ "description": "PHP CVE-2026-109618\/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12", "fork": false, "created_at": "2026-10-20T19:16:47Z", - "updated_at": "2026-10-25T20:41:38Z", - "pushed_at": "2026-10-25T05:44:03Z", + "updated_at": "2026-10-26T07:06:04Z", + "pushed_at": "2026-10-26T07:06:00Z", "stargazers_count": 111, "watchers_count": 111, "has_discussions": false, - "forks_count": 25, + "forks_count": 26, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -38,7 +38,7 @@ "session-upload-progress" ], "visibility": "public", - "forks": 25, + "forks": 26, "watchers": 111, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-109618.json b/2026/CVE-2026-109618.json index 3c0036af95..16c7516f6e 100644 --- a/2026/CVE-2026-109618.json +++ b/2026/CVE-2026-109618.json @@ -573,10 +573,10 @@ "description": "PHP CVE-2026-109618\/-109619 research archive — default-128M full-chain RCE, Chain B var_destroy UAF alive on 8.4.27, official patch analysis, detection rules", "fork": false, "created_at": "2026-10-21T07:29:15Z", - "updated_at": "2026-10-23T15:12:37Z", + "updated_at": "2026-10-26T05:24:21Z", "pushed_at": "2026-10-23T11:29:00Z", - "stargazers_count": 8, - "watchers_count": 8, + "stargazers_count": 9, + "watchers_count": 9, "has_discussions": false, "forks_count": 5, "allow_forking": true, @@ -587,7 +587,7 @@ "topics": [], "visibility": "public", "forks": 5, - "watchers": 8, + "watchers": 9, "score": 0, "subscribers_count": 0 }, @@ -705,12 +705,12 @@ "description": "CVE-2026-109618\/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.", "fork": false, "created_at": "2026-10-21T07:55:16Z", - "updated_at": "2026-10-26T01:25:11Z", + "updated_at": "2026-10-26T07:49:23Z", "pushed_at": "2026-10-22T22:41:36Z", - "stargazers_count": 1792, - "watchers_count": 1792, + "stargazers_count": 1807, + "watchers_count": 1807, "has_discussions": false, - "forks_count": 621, + "forks_count": 625, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -733,8 +733,8 @@ "wordpress-security" ], "visibility": "public", - "forks": 621, - "watchers": 1792, + "forks": 625, + "watchers": 1807, "score": 0, "subscribers_count": 5 }, @@ -1006,12 +1006,12 @@ "description": "Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 \/ CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.", "fork": false, "created_at": "2026-10-21T08:31:43Z", - "updated_at": "2026-10-26T01:22:20Z", + "updated_at": "2026-10-26T07:48:51Z", "pushed_at": "2026-10-22T07:19:20Z", - "stargazers_count": 1003, - "watchers_count": 1003, + "stargazers_count": 1013, + "watchers_count": 1013, "has_discussions": false, - "forks_count": 255, + "forks_count": 256, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1019,8 +1019,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 255, - "watchers": 1003, + "forks": 256, + "watchers": 1013, "score": 0, "subscribers_count": 36 }, @@ -1039,12 +1039,12 @@ "description": "Protects an unpatched PHP against php2shell (CVE-2026-109618 \/ CVE-2026-109619): a small extension that mirrors the official fix component by component and steps aside once the engine carries it. PHP 5.6-8.5; Sury, cPanel EA4, DirectAdmin, Docker, Windows.", "fork": false, "created_at": "2026-10-21T09:00:12Z", - "updated_at": "2026-10-25T18:16:49Z", + "updated_at": "2026-10-26T07:43:06Z", "pushed_at": "2026-10-24T17:43:31Z", - "stargazers_count": 151, - "watchers_count": 151, + "stargazers_count": 156, + "watchers_count": 156, "has_discussions": false, - "forks_count": 9, + "forks_count": 10, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1060,8 +1060,8 @@ "security" ], "visibility": "public", - "forks": 9, - "watchers": 151, + "forks": 10, + "watchers": 156, "score": 0, "subscribers_count": 3 }, @@ -1495,10 +1495,10 @@ "description": "CVE-2026-109618\/109619 PHP2Shell — Heap UAF PoC (crash + RCE framework)", "fork": false, "created_at": "2026-10-21T10:44:37Z", - "updated_at": "2026-10-25T20:20:22Z", + "updated_at": "2026-10-26T02:15:19Z", "pushed_at": "2026-10-22T08:15:35Z", - "stargazers_count": 55, - "watchers_count": 55, + "stargazers_count": 56, + "watchers_count": 56, "has_discussions": false, "forks_count": 27, "allow_forking": true, @@ -1509,7 +1509,7 @@ "topics": [], "visibility": "public", "forks": 27, - "watchers": 55, + "watchers": 56, "score": 0, "subscribers_count": 0 }, @@ -1792,10 +1792,10 @@ "description": null, "fork": false, "created_at": "2026-10-21T11:52:39Z", - "updated_at": "2026-10-25T23:35:50Z", + "updated_at": "2026-10-26T07:44:14Z", "pushed_at": "2026-10-21T11:52:57Z", - "stargazers_count": 140, - "watchers_count": 140, + "stargazers_count": 139, + "watchers_count": 139, "has_discussions": false, "forks_count": 82, "allow_forking": true, @@ -1806,7 +1806,7 @@ "topics": [], "visibility": "public", "forks": 82, - "watchers": 140, + "watchers": 139, "score": 0, "subscribers_count": 0 }, @@ -1825,8 +1825,8 @@ "description": "Read-only PHP discovery and patch-review scanner for Windows, Linux, and macOS. Produces HTML+CSV reports for CVE-2026-109618\/109619 assessment — never claims a host is clean or that the active HTTP runtime is verified.", "fork": false, "created_at": "2026-10-21T12:03:24Z", - "updated_at": "2026-10-25T20:31:51Z", - "pushed_at": "2026-10-25T20:32:22Z", + "updated_at": "2026-10-26T07:39:50Z", + "pushed_at": "2026-10-26T07:39:48Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": true, @@ -2061,12 +2061,12 @@ "description": "php2shell: Advanced hybrid exploit framework for CVE-2026-109618, CVE-2026-109619 & CVE-2026-115560. Features Auto-LFI parameter discovery, SAPI profiling, OOM fuzzing calibration, and FPM worker pinning. Stdlib only.", "fork": false, "created_at": "2026-10-21T12:37:59Z", - "updated_at": "2026-10-25T21:43:17Z", + "updated_at": "2026-10-26T05:50:49Z", "pushed_at": "2026-10-23T15:07:53Z", - "stargazers_count": 78, - "watchers_count": 78, + "stargazers_count": 80, + "watchers_count": 80, "has_discussions": false, - "forks_count": 26, + "forks_count": 27, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -2074,8 +2074,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 26, - "watchers": 78, + "forks": 27, + "watchers": 80, "score": 0, "subscribers_count": 0 }, @@ -3015,10 +3015,10 @@ "description": null, "fork": false, "created_at": "2026-10-21T14:20:15Z", - "updated_at": "2026-10-23T19:15:02Z", + "updated_at": "2026-10-26T03:13:33Z", "pushed_at": "2026-10-21T14:22:36Z", - "stargazers_count": 45, - "watchers_count": 45, + "stargazers_count": 44, + "watchers_count": 44, "has_discussions": false, "forks_count": 16, "allow_forking": true, @@ -3029,7 +3029,7 @@ "topics": [], "visibility": "public", "forks": 16, - "watchers": 45, + "watchers": 44, "score": 0, "subscribers_count": 0 }, @@ -3048,10 +3048,10 @@ "description": "Minimal source backports of the PHP core RCE fixes (CVE-2026-109618 \/ CVE-2026-109619) for EOL PHP 5.4 and 7.3", "fork": false, "created_at": "2026-10-21T14:20:57Z", - "updated_at": "2026-10-25T19:30:11Z", + "updated_at": "2026-10-26T07:42:23Z", "pushed_at": "2026-10-22T18:37:16Z", - "stargazers_count": 50, - "watchers_count": 50, + "stargazers_count": 51, + "watchers_count": 51, "has_discussions": false, "forks_count": 10, "allow_forking": true, @@ -3062,7 +3062,7 @@ "topics": [], "visibility": "public", "forks": 10, - "watchers": 50, + "watchers": 51, "score": 0, "subscribers_count": 0 }, @@ -3307,10 +3307,10 @@ "description": "php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.", "fork": false, "created_at": "2026-10-21T14:48:05Z", - "updated_at": "2026-10-26T01:19:37Z", + "updated_at": "2026-10-26T07:17:23Z", "pushed_at": "2026-10-25T13:44:46Z", - "stargazers_count": 107, - "watchers_count": 107, + "stargazers_count": 111, + "watchers_count": 111, "has_discussions": false, "forks_count": 16, "allow_forking": true, @@ -3338,7 +3338,7 @@ ], "visibility": "public", "forks": 16, - "watchers": 107, + "watchers": 111, "score": 0, "subscribers_count": 1 }, @@ -3499,10 +3499,10 @@ "description": "PHP 7.4 \/ 8.0 \/ 8.1 Docker images with the CVE-2026-109618 \/ CVE-2026-109619 fix backported", "fork": false, "created_at": "2026-10-21T15:01:45Z", - "updated_at": "2026-10-25T13:48:10Z", + "updated_at": "2026-10-26T07:19:57Z", "pushed_at": "2026-10-21T20:44:05Z", - "stargazers_count": 60, - "watchers_count": 60, + "stargazers_count": 62, + "watchers_count": 62, "has_discussions": false, "forks_count": 18, "allow_forking": true, @@ -3530,7 +3530,7 @@ ], "visibility": "public", "forks": 18, - "watchers": 60, + "watchers": 62, "score": 0, "subscribers_count": 1 }, @@ -3582,12 +3582,12 @@ "description": "CVE-2026-109618\/109619 PoC — PHP session.upload_progress heap use-after-free (CVSS 9.2)", "fork": false, "created_at": "2026-10-21T15:06:33Z", - "updated_at": "2026-10-25T20:20:29Z", + "updated_at": "2026-10-26T07:25:37Z", "pushed_at": "2026-10-24T11:24:48Z", - "stargazers_count": 140, - "watchers_count": 140, + "stargazers_count": 142, + "watchers_count": 142, "has_discussions": false, - "forks_count": 86, + "forks_count": 87, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -3595,8 +3595,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 86, - "watchers": 140, + "forks": 87, + "watchers": 142, "score": 0, "subscribers_count": 0 }, @@ -4389,10 +4389,10 @@ "description": "php:7.4-fpm rebuilt from source with the official PHP2Shell backport (CVE-2026-109618 \/ CVE-2026-109619): the three things that break a 7.4 build in 2026, fixed", "fork": false, "created_at": "2026-10-21T16:01:19Z", - "updated_at": "2026-10-23T11:50:15Z", + "updated_at": "2026-10-26T06:08:25Z", "pushed_at": "2026-10-21T16:01:24Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -4403,7 +4403,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, @@ -6600,12 +6600,12 @@ "description": "Proof of concept for CVE-2026-109618\/CVE-2026-109619: PHP2Shell", "fork": false, "created_at": "2026-10-21T19:51:22Z", - "updated_at": "2026-10-25T19:35:13Z", + "updated_at": "2026-10-26T07:32:41Z", "pushed_at": "2026-10-22T17:44:04Z", - "stargazers_count": 35, - "watchers_count": 35, + "stargazers_count": 36, + "watchers_count": 36, "has_discussions": false, - "forks_count": 16, + "forks_count": 17, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -6613,8 +6613,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 16, - "watchers": 35, + "forks": 17, + "watchers": 36, "score": 0, "subscribers_count": 0 }, @@ -7245,10 +7245,10 @@ "description": "Unofficial PHP 7.4.33 RPMs for CentOS 7\/EL7 with the PHP2Shell (CVE-2026-109618\/109619) mitigation", "fork": false, "created_at": "2026-10-21T21:18:29Z", - "updated_at": "2026-10-25T17:38:39Z", + "updated_at": "2026-10-26T07:47:19Z", "pushed_at": "2026-10-21T22:18:26Z", - "stargazers_count": 13, - "watchers_count": 13, + "stargazers_count": 14, + "watchers_count": 14, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -7268,7 +7268,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 13, + "watchers": 14, "score": 0, "subscribers_count": 0 }, @@ -7875,12 +7875,12 @@ "description": "PHP2Shell: version-aware research toolkit for CVE-2026-109618 \/ CVE-2026-109619 — pre-auth RCE in PHP session.upload_progress (mod_php). Build profiles, labs, heap calibration and detection guidance for authorized security testing.", "fork": false, "created_at": "2026-10-21T22:53:01Z", - "updated_at": "2026-10-25T23:55:06Z", + "updated_at": "2026-10-26T05:50:32Z", "pushed_at": "2026-10-22T11:43:17Z", - "stargazers_count": 161, - "watchers_count": 161, + "stargazers_count": 163, + "watchers_count": 163, "has_discussions": false, - "forks_count": 53, + "forks_count": 54, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -7903,8 +7903,8 @@ "vulnerability-research" ], "visibility": "public", - "forks": 53, - "watchers": 161, + "forks": 54, + "watchers": 163, "score": 0, "subscribers_count": 0 }, @@ -8155,10 +8155,10 @@ "description": "Passive PHP2Shell (CVE-2026-109618, CVE-2026-109619) exposure checker with branded HTML reports. Single-file Python, no dependencies, no exploit payloads.", "fork": false, "created_at": "2026-10-21T23:45:38Z", - "updated_at": "2026-10-24T07:23:26Z", - "pushed_at": "2026-10-26T01:18:14Z", - "stargazers_count": 3, - "watchers_count": 3, + "updated_at": "2026-10-26T05:19:14Z", + "pushed_at": "2026-10-26T05:25:59Z", + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -8187,7 +8187,7 @@ ], "visibility": "public", "forks": 2, - "watchers": 3, + "watchers": 4, "score": 0, "subscribers_count": 0 }, @@ -8239,10 +8239,10 @@ "description": "宝塔面板（BT Panel）上已停止维护的 PHP 版本（5.4 – 8.1）的 PHP2Shell（CVE-2026-109618 \/ CVE-2026-109619）修复包。仓库里有打好补丁的源码包，以及一键完成编译、替换、回滚的脚本。", "fork": false, "created_at": "2026-10-22T00:04:54Z", - "updated_at": "2026-10-23T15:30:32Z", + "updated_at": "2026-10-26T04:06:27Z", "pushed_at": "2026-10-22T10:38:26Z", - "stargazers_count": 57, - "watchers_count": 57, + "stargazers_count": 59, + "watchers_count": 59, "has_discussions": false, "forks_count": 7, "allow_forking": true, @@ -8253,7 +8253,7 @@ "topics": [], "visibility": "public", "forks": 7, - "watchers": 57, + "watchers": 59, "score": 0, "subscribers_count": 1 }, @@ -9556,10 +9556,10 @@ "description": "Exploit tooling and vulnerability research for CVE-2026-109618 and CVE-2026-109619 — two critical unauthenticated remote code execution (RCE) vulnerabilities patched in PHP 8.4.27, 8.3.36, 8.2.35, and 8.5.12 (released October 21, 2026).", "fork": false, "created_at": "2026-10-22T03:42:57Z", - "updated_at": "2026-10-25T23:28:53Z", + "updated_at": "2026-10-26T03:34:57Z", "pushed_at": "2026-10-22T15:30:31Z", - "stargazers_count": 15, - "watchers_count": 15, + "stargazers_count": 16, + "watchers_count": 16, "has_discussions": false, "forks_count": 5, "allow_forking": true, @@ -9578,7 +9578,7 @@ ], "visibility": "public", "forks": 5, - "watchers": 15, + "watchers": 16, "score": 0, "subscribers_count": 0 }, @@ -9794,12 +9794,12 @@ "description": "High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)", "fork": false, "created_at": "2026-10-22T03:53:20Z", - "updated_at": "2026-10-26T01:53:13Z", + "updated_at": "2026-10-26T06:26:35Z", "pushed_at": "2026-10-24T03:40:18Z", - "stargazers_count": 904, - "watchers_count": 904, + "stargazers_count": 910, + "watchers_count": 910, "has_discussions": false, - "forks_count": 132, + "forks_count": 133, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -9807,8 +9807,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 132, - "watchers": 904, + "forks": 133, + "watchers": 910, "score": 0, "subscribers_count": 2 }, @@ -10154,8 +10154,8 @@ "description": "Full 1:1 reproduction of php2shell (CVE-2026-109618 \/ CVE-2026-109619): pre-auth PHP RCE via session.upload_progress OOM corruption and stale cross-request state. Pinned mod_php 8.4.26 \/ Apache 2.4.69 aarch64 lab, pure HTTP, heap-layout ASLR bypass, no brute force.", "fork": false, "created_at": "2026-10-22T05:20:36Z", - "updated_at": "2026-10-22T10:45:16Z", - "pushed_at": "2026-10-22T10:45:13Z", + "updated_at": "2026-10-26T06:36:41Z", + "pushed_at": "2026-10-26T06:36:37Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, @@ -10874,10 +10874,10 @@ "description": "PHP 7.2 with security fixes for CVE-2026-109618 and CVE-2026-109619", "fork": false, "created_at": "2026-10-22T07:13:14Z", - "updated_at": "2026-10-23T02:12:37Z", + "updated_at": "2026-10-26T03:02:45Z", "pushed_at": "2026-10-22T07:40:05Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -10888,7 +10888,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 3, + "watchers": 4, "score": 0, "subscribers_count": 0 }, @@ -12447,10 +12447,10 @@ "description": "Scanner for PHP2Shell (CVE-2026-109618\/109619): URL blackbox, local device and SSH.", "fork": false, "created_at": "2026-10-22T09:45:34Z", - "updated_at": "2026-10-26T01:42:35Z", + "updated_at": "2026-10-26T02:32:40Z", "pushed_at": "2026-10-23T14:55:12Z", - "stargazers_count": 91, - "watchers_count": 91, + "stargazers_count": 92, + "watchers_count": 92, "has_discussions": false, "forks_count": 13, "allow_forking": true, @@ -12466,7 +12466,7 @@ ], "visibility": "public", "forks": 13, - "watchers": 91, + "watchers": 92, "score": 0, "subscribers_count": 0 }, @@ -13309,7 +13309,7 @@ "stargazers_count": 6, "watchers_count": 6, "has_discussions": false, - "forks_count": 2, + "forks_count": 3, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -13317,7 +13317,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 2, + "forks": 3, "watchers": 6, "score": 0, "subscribers_count": 0 @@ -13670,12 +13670,12 @@ "description": "PHP2Shell exploit framework — CVE-2026-109618\/619 PHP session.upload_progress UAF to RCE", "fork": false, "created_at": "2026-10-22T12:53:40Z", - "updated_at": "2026-10-26T00:19:35Z", + "updated_at": "2026-10-26T05:51:14Z", "pushed_at": "2026-10-24T14:30:09Z", - "stargazers_count": 173, - "watchers_count": 173, + "stargazers_count": 175, + "watchers_count": 175, "has_discussions": false, - "forks_count": 50, + "forks_count": 51, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -13683,8 +13683,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 50, - "watchers": 173, + "forks": 51, + "watchers": 175, "score": 0, "subscribers_count": 0 }, @@ -13983,8 +13983,8 @@ "description": "Read-only auditor for CVE-2026-109618 \/ CVE-2026-109619 — seven independent PHP exposure axes across distro backports, Docker, cPanel and LiteSpeed stacks.", "fork": false, "created_at": "2026-10-22T13:33:26Z", - "updated_at": "2026-10-25T05:27:27Z", - "pushed_at": "2026-10-25T05:27:24Z", + "updated_at": "2026-10-26T02:36:22Z", + "pushed_at": "2026-10-26T02:36:19Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -14308,7 +14308,7 @@ "description": "Read-only triage script for WordPress sites after PHP2Shell (CVE-2026-109618, CVE-2026-109619). Checks for signs of compromise and writes a report per site.", "fork": false, "created_at": "2026-10-22T14:26:42Z", - "updated_at": "2026-10-25T18:22:42Z", + "updated_at": "2026-10-26T02:46:28Z", "pushed_at": "2026-10-24T21:05:11Z", "stargazers_count": 4, "watchers_count": 4, @@ -14769,7 +14769,7 @@ "fork": false, "created_at": "2026-10-22T15:32:21Z", "updated_at": "2026-10-25T17:12:06Z", - "pushed_at": "2026-10-25T17:12:02Z", + "pushed_at": "2026-10-26T06:37:43Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -15479,8 +15479,8 @@ "description": "In-depth technical verification, ASLR boundary analysis, and memory defaults impact for CVE-2026-109618 & CVE-2026-109619 (PHP2Shell) CVE-2026-115560", "fork": false, "created_at": "2026-10-22T16:51:35Z", - "updated_at": "2026-10-26T01:33:25Z", - "pushed_at": "2026-10-26T01:33:22Z", + "updated_at": "2026-10-26T04:34:57Z", + "pushed_at": "2026-10-26T04:34:53Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -18346,7 +18346,7 @@ "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, - "forks_count": 1, + "forks_count": 2, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -18362,7 +18362,7 @@ "reverse-shell" ], "visibility": "public", - "forks": 1, + "forks": 2, "watchers": 3, "score": 0, "subscribers_count": 0 @@ -18760,8 +18760,8 @@ "description": "CVE-2026-109618\/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.", "fork": false, "created_at": "2026-10-23T06:51:22Z", - "updated_at": "2026-10-23T15:23:55Z", - "pushed_at": "2026-10-23T09:27:37Z", + "updated_at": "2026-10-26T07:47:49Z", + "pushed_at": "2026-10-26T07:47:46Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -18826,8 +18826,8 @@ "description": "Aplikasi yang berguna untuk mengecek versi PHP dan apakah versi yang lu Pake, kena CVE-2026-109618 & CVE-2026-109619", "fork": false, "created_at": "2026-10-23T07:32:14Z", - "updated_at": "2026-10-23T07:51:38Z", - "pushed_at": "2026-10-23T07:51:35Z", + "updated_at": "2026-10-26T03:00:32Z", + "pushed_at": "2026-10-26T03:00:29Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -19368,10 +19368,10 @@ "description": null, "fork": false, "created_at": "2026-10-23T10:56:40Z", - "updated_at": "2026-10-23T15:07:49Z", + "updated_at": "2026-10-26T02:08:40Z", "pushed_at": "2026-10-23T11:01:47Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -19382,7 +19382,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 3, "score": 0, "subscribers_count": 0 }, @@ -19448,8 +19448,8 @@ "description": "CVE-2026-109618 and CVE-2026-109619 mitigation", "fork": false, "created_at": "2026-10-23T10:59:31Z", - "updated_at": "2026-10-23T11:01:04Z", - "pushed_at": "2026-10-23T11:00:59Z", + "updated_at": "2026-10-26T07:20:28Z", + "pushed_at": "2026-10-26T07:20:24Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -20228,8 +20228,8 @@ "description": "php2shell (CVE-2026-109618\/109619) 利用工具：带来源与日期的指纹库、两条引擎、免 gdb 标定；含源码级结论——本链下限 PHP 7.0。", "fork": false, "created_at": "2026-10-23T13:55:41Z", - "updated_at": "2026-10-24T14:52:27Z", - "pushed_at": "2026-10-24T14:52:31Z", + "updated_at": "2026-10-26T02:45:35Z", + "pushed_at": "2026-10-26T02:45:42Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": true, @@ -20282,10 +20282,10 @@ "description": "Loopback-only PHP2Shell research lab for CVE-2026-109618 and CVE-2026-109619", "fork": false, "created_at": "2026-10-23T14:01:00Z", - "updated_at": "2026-10-23T14:07:10Z", - "pushed_at": "2026-10-23T14:07:05Z", - "stargazers_count": 0, - "watchers_count": 0, + "updated_at": "2026-10-26T06:25:52Z", + "pushed_at": "2026-10-26T06:25:49Z", + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -20296,7 +20296,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -20655,10 +20655,10 @@ "description": "Drop-in php:7.4-apache\/fpm\/cli Docker images with the official fix for CVE-2026-109618 \/ CVE-2026-109619 (critical PHP RCE). amd64 + arm64.", "fork": false, "created_at": "2026-10-23T15:19:41Z", - "updated_at": "2026-10-24T14:15:39Z", + "updated_at": "2026-10-26T07:37:36Z", "pushed_at": "2026-10-23T15:59:21Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -20682,7 +20682,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 }, @@ -22153,8 +22153,8 @@ "description": " Published indicators and a log-hunting guide for the PHP2Shell PHP flaws (CVE-2026-109618, CVE-2026-109619)", "fork": false, "created_at": "2026-10-24T12:36:49Z", - "updated_at": "2026-10-24T17:13:55Z", - "pushed_at": "2026-10-24T17:13:51Z", + "updated_at": "2026-10-26T02:51:35Z", + "pushed_at": "2026-10-26T02:51:31Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -22268,8 +22268,8 @@ "description": "Detection and response package for php2shell (CVE-2026-109618 \/ CVE-2026-109619): Suricata, Zeek, YARA, Sigma, ModSecurity rules, hunting queries, SOC triage, patch matrix. No exploit code.", "fork": false, "created_at": "2026-10-24T13:28:54Z", - "updated_at": "2026-10-26T00:56:34Z", - "pushed_at": "2026-10-26T00:56:33Z", + "updated_at": "2026-10-26T05:59:34Z", + "pushed_at": "2026-10-26T05:59:30Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -22936,10 +22936,10 @@ "description": " PHP2Shell: finding and patching affected PHP CVE-2026-109618 and CVE-2026-109619 ", "fork": false, "created_at": "2026-10-25T01:34:13Z", - "updated_at": "2026-10-25T06:23:05Z", + "updated_at": "2026-10-26T04:43:09Z", "pushed_at": "2026-10-25T06:23:02Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -22950,7 +22950,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -23101,10 +23101,10 @@ "description": "Curated IoCs, detection engineering rules, and automated threat intel feeds for PHP2Shell (CVE-2026-109618 & CVE-2026-109619).", "fork": false, "created_at": "2026-10-25T07:40:38Z", - "updated_at": "2026-10-25T08:50:57Z", - "pushed_at": "2026-10-25T08:50:53Z", - "stargazers_count": 1, - "watchers_count": 1, + "updated_at": "2026-10-26T05:55:08Z", + "pushed_at": "2026-10-26T03:05:29Z", + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -23123,7 +23123,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, @@ -23241,10 +23241,10 @@ "description": "A deliberately limited, read-only security scanner for assessing exposure to CVE-2026-109618 (RFC 1867 multipart OOM memory corruption) and CVE-2026-109619 (stale global state use-after-free) in PHP deployments.", "fork": false, "created_at": "2026-10-25T09:35:34Z", - "updated_at": "2026-10-25T14:41:51Z", + "updated_at": "2026-10-26T07:10:08Z", "pushed_at": "2026-10-25T10:35:36Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -23264,7 +23264,7 @@ ], "visibility": "public", "forks": 1, - "watchers": 2, + "watchers": 4, "score": 0, "subscribers_count": 0 }, @@ -23367,6 +23367,50 @@ "score": 0, "subscribers_count": 0 }, + { + "id": 1433088466, + "name": "php2shell", + "full_name": "avego\/php2shell", + "owner": { + "login": "avego", + "id": 1747178, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1747178?v=4", + "html_url": "https:\/\/github.com\/avego", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/avego\/php2shell", + "description": "Патчи безопасности и сканер аудита для FastPanel и Debian PHP против уязвимостей CVE-2026-109618 и CVE-2026-109619 (PHP 5.2–8.1). Пошаговые руководства по сборке.", + "fork": false, + "created_at": "2026-10-25T10:45:23Z", + "updated_at": "2026-10-26T05:06:11Z", + "pushed_at": "2026-10-26T04:54:42Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve-2026-109618", + "cve-2026-109619", + "debian", + "fastpanel", + "php", + "php-fpm", + "php5", + "php7", + "security-patch", + "vulnerability" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, { "id": 1433138056, "name": "php2shell-doctor", @@ -23560,7 +23604,7 @@ "forks": 0, "watchers": 1, "score": 0, - "subscribers_count": 0 + "subscribers_count": 1 }, { "id": 1433279537, @@ -23577,10 +23621,10 @@ "description": "php2shell(CVE-2026-109618 \/ CVE-2026-109619) EXP", "fork": false, "created_at": "2026-10-25T14:23:10Z", - "updated_at": "2026-10-25T15:01:22Z", + "updated_at": "2026-10-26T06:44:48Z", "pushed_at": "2026-10-25T15:01:18Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -23591,7 +23635,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -23643,12 +23687,12 @@ "description": null, "fork": false, "created_at": "2026-10-25T17:58:28Z", - "updated_at": "2026-10-26T01:41:41Z", + "updated_at": "2026-10-26T07:24:21Z", "pushed_at": "2026-10-25T18:26:54Z", - "stargazers_count": 12, - "watchers_count": 12, + "stargazers_count": 14, + "watchers_count": 14, "has_discussions": false, - "forks_count": 7, + "forks_count": 9, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -23656,8 +23700,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 7, - "watchers": 12, + "forks": 9, + "watchers": 14, "score": 0, "subscribers_count": 0 }, @@ -23717,8 +23761,8 @@ "description": "A local Docker-based research lab for investigating PHP2Shell (CVE-2026-109618 and CVE-2026-109619), comparing PHP 8.4.26 and 8.4.27, and validating upstream security fixes and regression tests.", "fork": false, "created_at": "2026-10-25T18:51:41Z", - "updated_at": "2026-10-25T19:32:36Z", - "pushed_at": "2026-10-25T19:32:33Z", + "updated_at": "2026-10-26T07:07:23Z", + "pushed_at": "2026-10-26T05:24:14Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -23829,8 +23873,8 @@ "description": "PHP2Shell Monitor - Real-time detection for CVE-2026-109618\/109619 exploitation attempts", "fork": false, "created_at": "2026-10-25T20:16:48Z", - "updated_at": "2026-10-25T20:28:19Z", - "pushed_at": "2026-10-25T20:28:16Z", + "updated_at": "2026-10-26T04:23:16Z", + "pushed_at": "2026-10-26T04:23:13Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -24006,5 +24050,376 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1433809506, + "name": "test-php", + "full_name": "liuhahi\/test-php", + "owner": { + "login": "liuhahi", + "id": 2950675, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/2950675?v=4", + "html_url": "https:\/\/github.com\/liuhahi", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/liuhahi\/test-php", + "description": "Controlled lab pinned to PHP 8.3.35 for reproducing\/patch-verifying PHP2Shell (CVE-2026-109618, CVE-2026-109619)", + "fork": false, + "created_at": "2026-10-26T02:16:24Z", + "updated_at": "2026-10-26T02:26:42Z", + "pushed_at": "2026-10-26T02:26:39Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1433816965, + "name": "php2shell-fixer", + "full_name": "turovskiy\/php2shell-fixer", + "owner": { + "login": "turovskiy", + "id": 47497087, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47497087?v=4", + "html_url": "https:\/\/github.com\/turovskiy", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/turovskiy\/php2shell-fixer", + "description": "Claude Code plugin: audit and patch PHP2Shell (CVE-2026-109618\/109619) on Debian\/Ubuntu PHP servers", + "fork": false, + "created_at": "2026-10-26T02:27:22Z", + "updated_at": "2026-10-26T03:38:31Z", + "pushed_at": "2026-10-26T03:38:28Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1433837164, + "name": "php2shell-scanner", + "full_name": "tranlammankg\/php2shell-scanner", + "owner": { + "login": "tranlammankg", + "id": 154567059, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/154567059?v=4", + "html_url": "https:\/\/github.com\/tranlammankg", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/tranlammankg\/php2shell-scanner", + "description": "Audit & Vulnerability Detection Scanner for PHP2Shell (CVE-2026-109618 & CVE-2026-109619) with Hardening Guidelines", + "fork": false, + "created_at": "2026-10-26T02:57:29Z", + "updated_at": "2026-10-26T07:47:37Z", + "pushed_at": "2026-10-26T06:17:34Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve", + "cybersecurity", + "hardening", + "php", + "php2shell", + "rce", + "security-audit", + "vulnerability-scanner" + ], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1433855117, + "name": "php81-el7-php2shell", + "full_name": "grergea\/php81-el7-php2shell", + "owner": { + "login": "grergea", + "id": 171311784, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/171311784?v=4", + "html_url": "https:\/\/github.com\/grergea", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/grergea\/php81-el7-php2shell", + "description": "Unofficial CentOS 7 (EL7) rebuild of Remi php-8.1.34-6 with the PHP2Shell (CVE-2026-109618, CVE-2026-109619) mitigation", + "fork": false, + "created_at": "2026-10-26T03:24:51Z", + "updated_at": "2026-10-26T05:10:31Z", + "pushed_at": "2026-10-26T05:10:27Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "centos7", + "cve-2026-109618", + "cve-2026-109619", + "php", + "php81", + "rpm" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1433904748, + "name": "php2shell-wordpress-rce-fullchain", + "full_name": "kjry8sb\/php2shell-wordpress-rce-fullchain", + "owner": { + "login": "kjry8sb", + "id": 346315797, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/346315797?v=4", + "html_url": "https:\/\/github.com\/kjry8sb", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/kjry8sb\/php2shell-wordpress-rce-fullchain", + "description": "Pre-auth RCE against WordPress (7.1.2\/7.1.3) via PHP2Shell CVE-2026-109618 \/ CVE-2026-109619", + "fork": false, + "created_at": "2026-10-26T04:34:21Z", + "updated_at": "2026-10-26T07:45:50Z", + "pushed_at": "2026-10-26T04:46:48Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve-2026-109618", + "cve-2026-109619", + "php-rce", + "php2shell", + "php2shell-cve", + "wordpress-rce" + ], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1433937246, + "name": "PHP2shell", + "full_name": "Nostraxiten\/PHP2shell", + "owner": { + "login": "Nostraxiten", + "id": 247368557, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/247368557?v=4", + "html_url": "https:\/\/github.com\/Nostraxiten", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Nostraxiten\/PHP2shell", + "description": "PHP2Shell — Unauthenticated RCE chain exploiting CVE-2026-109618 (OOM memory corruption) + CVE-2026-109619 (stale global state) in PHP. ", + "fork": false, + "created_at": "2026-10-26T05:20:40Z", + "updated_at": "2026-10-26T05:31:26Z", + "pushed_at": "2026-10-26T05:31:22Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1433958145, + "name": "php2shell-research-public", + "full_name": "lynolz163\/php2shell-research-public", + "owner": { + "login": "lynolz163", + "id": 251266113, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/251266113?v=4", + "html_url": "https:\/\/github.com\/lynolz163", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/lynolz163\/php2shell-research-public", + "description": "Reproducible local Docker lab for CVE-2026-109618 PHP-FPM validation", + "fork": false, + "created_at": "2026-10-26T05:49:16Z", + "updated_at": "2026-10-26T05:49:35Z", + "pushed_at": "2026-10-26T05:49:31Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1433991023, + "name": "php2shellscanner-web", + "full_name": "yildirimserkan\/php2shellscanner-web", + "owner": { + "login": "yildirimserkan", + "id": 11732458, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/11732458?v=4", + "html_url": "https:\/\/github.com\/yildirimserkan", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/yildirimserkan\/php2shellscanner-web", + "description": "Browser-based terminal-style UI for assetnote's php2shell-scanner (CVE-2026-109618 \/ CVE-2026-109619), with live per-probe SSE activity log and JSON export. Detection engine by assetnote; original discovery by Calif.", + "fork": false, + "created_at": "2026-10-26T06:29:17Z", + "updated_at": "2026-10-26T06:29:49Z", + "pushed_at": "2026-10-26T06:29:45Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1434003464, + "name": "CVE-2026-109618-109619-php2shell", + "full_name": "gagaltotal\/CVE-2026-109618-109619-php2shell", + "owner": { + "login": "gagaltotal", + "id": 23299078, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/23299078?v=4", + "html_url": "https:\/\/github.com\/gagaltotal", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/gagaltotal\/CVE-2026-109618-109619-php2shell", + "description": "CVE-2026-109618-109619 PHP2shell", + "fork": false, + "created_at": "2026-10-26T06:43:31Z", + "updated_at": "2026-10-26T06:46:01Z", + "pushed_at": "2026-10-26T06:44:39Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve", + "cve-2026-109618", + "cve-2026-109619", + "cves", + "php", + "php-framework", + "php2shell", + "php2shell-cve", + "php2shell-cve-2026", + "php5", + "php7", + "php74", + "php8", + "python", + "python-3", + "python-script", + "python3" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1434009074, + "name": "php82-ubuntu2404-backport", + "full_name": "ahallais\/php82-ubuntu2404-backport", + "owner": { + "login": "ahallais", + "id": 1228641, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1228641?v=4", + "html_url": "https:\/\/github.com\/ahallais", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/ahallais\/php82-ubuntu2404-backport", + "description": "PHP 8.2.35 rebuild (CVE-2026-109618 \/ CVE-2026-109619 fix, no telemetry) for Ubuntu 24.04 hosts running php8.2 8.2.7-1ubuntu1", + "fork": false, + "created_at": "2026-10-26T06:49:43Z", + "updated_at": "2026-10-26T07:22:43Z", + "pushed_at": "2026-10-26T07:22:48Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-109619.json b/2026/CVE-2026-109619.json index 30471dd353..c6b3a35181 100644 --- a/2026/CVE-2026-109619.json +++ b/2026/CVE-2026-109619.json @@ -659,12 +659,12 @@ "description": "Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619\/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design", "fork": false, "created_at": "2026-10-23T13:49:52Z", - "updated_at": "2026-10-26T01:28:59Z", + "updated_at": "2026-10-26T05:50:42Z", "pushed_at": "2026-10-24T13:28:02Z", - "stargazers_count": 75, - "watchers_count": 75, + "stargazers_count": 80, + "watchers_count": 80, "has_discussions": false, - "forks_count": 48, + "forks_count": 50, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -688,8 +688,8 @@ "vulnerability-research" ], "visibility": "public", - "forks": 48, - "watchers": 75, + "forks": 50, + "watchers": 80, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-110264.json b/2026/CVE-2026-110264.json index be3293901c..15abfe38e1 100644 --- a/2026/CVE-2026-110264.json +++ b/2026/CVE-2026-110264.json @@ -400,7 +400,7 @@ "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -408,7 +408,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 0, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-111497.json b/2026/CVE-2026-111497.json index eab15b4bcd..780b48bd4f 100644 --- a/2026/CVE-2026-111497.json +++ b/2026/CVE-2026-111497.json @@ -14,10 +14,10 @@ "description": "Nodejs漏洞 CVE-2026-111497 POC", "fork": false, "created_at": "2026-10-21T15:47:21Z", - "updated_at": "2026-10-25T01:19:25Z", + "updated_at": "2026-10-26T04:30:42Z", "pushed_at": "2026-10-24T04:24:25Z", - "stargazers_count": 14, - "watchers_count": 14, + "stargazers_count": 15, + "watchers_count": 15, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 3, - "watchers": 14, + "watchers": 15, "score": 0, "subscribers_count": 0 }, @@ -47,10 +47,10 @@ "description": "Reproducible local Brotli decoder proof for CVE-2026-111497 with a self-checking tuned RCE harness", "fork": false, "created_at": "2026-10-22T04:08:28Z", - "updated_at": "2026-10-25T23:39:27Z", + "updated_at": "2026-10-26T07:18:09Z", "pushed_at": "2026-10-25T01:09:02Z", - "stargazers_count": 44, - "watchers_count": 44, + "stargazers_count": 47, + "watchers_count": 47, "has_discussions": false, "forks_count": 14, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 14, - "watchers": 44, + "watchers": 47, "score": 0, "subscribers_count": 0 }, @@ -385,8 +385,8 @@ "description": "Check and fix hosts, Docker containers and k8s pods: leaked eMudhra CA trust, and Brotli decoder CVE-2026-111497 scanner", "fork": false, "created_at": "2026-10-23T00:54:47Z", - "updated_at": "2026-10-26T01:36:37Z", - "pushed_at": "2026-10-26T01:36:33Z", + "updated_at": "2026-10-26T03:06:32Z", + "pushed_at": "2026-10-26T03:06:28Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -559,7 +559,7 @@ "description": "CVE-2026-111497 (Node2Shell) — Node.js Brotli decoder OOB heap write. Independent research: exploit code, Docker labs, Express RCE gap analysis.", "fork": false, "created_at": "2026-10-23T14:34:49Z", - "updated_at": "2026-10-23T15:27:39Z", + "updated_at": "2026-10-26T07:17:00Z", "pushed_at": "2026-10-23T15:27:36Z", "stargazers_count": 0, "watchers_count": 0, @@ -664,10 +664,10 @@ "description": "Claude Code and Codex skill for finding potentially vulnerable Brotli copies and guiding updates for CVE-2026-111497.", "fork": false, "created_at": "2026-10-23T16:32:12Z", - "updated_at": "2026-10-25T23:58:14Z", + "updated_at": "2026-10-26T06:03:13Z", "pushed_at": "2026-10-24T04:03:44Z", - "stargazers_count": 45, - "watchers_count": 45, + "stargazers_count": 47, + "watchers_count": 47, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -678,7 +678,7 @@ "topics": [], "visibility": "public", "forks": 3, - "watchers": 45, + "watchers": 47, "score": 0, "subscribers_count": 0 }, @@ -697,8 +697,8 @@ "description": "Passive Node2Shell (CVE-2026-111497) exposure checker and offline Node.js runtime assessment with branded HTML reports. Python 3.10+, no dependencies, no exploit payloads.", "fork": false, "created_at": "2026-10-23T19:07:13Z", - "updated_at": "2026-10-26T01:15:37Z", - "pushed_at": "2026-10-26T01:15:33Z", + "updated_at": "2026-10-26T05:05:58Z", + "pushed_at": "2026-10-26T05:19:22Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, @@ -805,8 +805,8 @@ "description": "Node.js (14 e 20, em fim de vida) com o decoder Brotli corrigido: CVE-2026-111497 (Node2Shell). Não oficial.", "fork": false, "created_at": "2026-10-24T00:25:24Z", - "updated_at": "2026-10-24T00:46:22Z", - "pushed_at": "2026-10-24T00:46:18Z", + "updated_at": "2026-10-26T01:57:46Z", + "pushed_at": "2026-10-26T01:57:43Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -844,8 +844,8 @@ "description": "Reads the Brotli decoder inside every Node, Bun, Electron app and AI coding tool on your machine: which still carry CVE-2026-111497. Executes nothing.", "fork": false, "created_at": "2026-10-24T02:30:57Z", - "updated_at": "2026-10-24T03:32:08Z", - "pushed_at": "2026-10-24T03:32:06Z", + "updated_at": "2026-10-26T02:14:45Z", + "pushed_at": "2026-10-26T02:14:44Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -1213,10 +1213,10 @@ "description": "CVE-2026-111497 Node2Shell — Node.js Brotli OOB Write RCE PoC (CVSS 9.2)", "fork": false, "created_at": "2026-10-24T23:03:18Z", - "updated_at": "2026-10-25T20:32:50Z", + "updated_at": "2026-10-26T07:49:30Z", "pushed_at": "2026-10-25T20:32:46Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 15, + "watchers_count": 15, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -1227,7 +1227,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 15, "score": 0, "subscribers_count": 0 }, @@ -1324,10 +1324,10 @@ "description": "High fidelity detection mechanism for node2shell (CVE-2026-111497)", "fork": false, "created_at": "2026-10-25T04:23:54Z", - "updated_at": "2026-10-26T01:38:37Z", + "updated_at": "2026-10-26T07:43:19Z", "pushed_at": "2026-10-25T04:24:27Z", - "stargazers_count": 51, - "watchers_count": 51, + "stargazers_count": 58, + "watchers_count": 58, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -1338,9 +1338,9 @@ "topics": [], "visibility": "public", "forks": 6, - "watchers": 51, + "watchers": 58, "score": 0, - "subscribers_count": 0 + "subscribers_count": 1 }, { "id": 1433034132, @@ -1464,10 +1464,10 @@ "description": null, "fork": false, "created_at": "2026-10-25T15:32:16Z", - "updated_at": "2026-10-25T16:38:15Z", + "updated_at": "2026-10-26T02:02:48Z", "pushed_at": "2026-10-25T16:38:12Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -1478,7 +1478,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -1663,8 +1663,8 @@ "description": "Offline Brotli \/ HTTP2Shell (CVE-2026-111497) exposure and inventory checker across verified ecosystems. Python 3.10+, no dependencies or exploit payloads.", "fork": false, "created_at": "2026-10-26T01:29:29Z", - "updated_at": "2026-10-26T01:35:46Z", - "pushed_at": "2026-10-26T01:35:43Z", + "updated_at": "2026-10-26T05:02:56Z", + "pushed_at": "2026-10-26T05:18:09Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -1690,5 +1690,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1433920264, + "name": "node2shell-detector", + "full_name": "ionsec\/node2shell-detector", + "owner": { + "login": "ionsec", + "id": 127967266, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/127967266?v=4", + "html_url": "https:\/\/github.com\/ionsec", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/ionsec\/node2shell-detector", + "description": "node2shell-detector - local + network detections for Node2Shell (CVE-2026-111497) by IONSEC. Python CLI: runtime posture, Brotli decoder fingerprints, dependency exposure, log fingerprints, opt-in self-test; plus Sigma, Suricata, ModSecurity, YARA rules and edge\/app snippets.", + "fork": false, + "created_at": "2026-10-26T04:56:41Z", + "updated_at": "2026-10-26T04:56:50Z", + "pushed_at": "2026-10-26T04:56:46Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-111943.json b/2026/CVE-2026-111943.json index 1727e72092..ac7a51643d 100644 --- a/2026/CVE-2026-111943.json +++ b/2026/CVE-2026-111943.json @@ -14,8 +14,8 @@ "description": "针对 CVE-2026-111943（eMudhra \/ emSign 根证书密钥熵坍塌惨案）的突发供应链应急排查与修复工具：一键清洗 Kali、Python、Node.js、uv、Go、Java 与 Docker 中的致命弱私钥信任链。Emergency audit & remediation toolkit for CVE-2026-111943 (eMudhra \/ emSign CA Private Key Entropy Collapse). Purges weak intermediate\/root CAs across Kali, Python, Node.js, Rust uv, Go, Java, and Docker toolchains.", "fork": false, "created_at": "2026-10-21T23:55:23Z", - "updated_at": "2026-10-22T07:20:54Z", - "pushed_at": "2026-10-21T23:59:41Z", + "updated_at": "2026-10-26T02:02:19Z", + "pushed_at": "2026-10-26T02:02:15Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2026/CVE-2026-115560.json b/2026/CVE-2026-115560.json index 1d08bc61f7..38ebbb7a41 100644 --- a/2026/CVE-2026-115560.json +++ b/2026/CVE-2026-115560.json @@ -296,5 +296,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1433810630, + "name": "PHP-CVE-2026-115560-Cheker-v-1.0", + "full_name": "Pr0fEs0r-X\/PHP-CVE-2026-115560-Cheker-v-1.0", + "owner": { + "login": "Pr0fEs0r-X", + "id": 57534280, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57534280?v=4", + "html_url": "https:\/\/github.com\/Pr0fEs0r-X", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Pr0fEs0r-X\/PHP-CVE-2026-115560-Cheker-v-1.0", + "description": "PHP alerta de CVE-2026-115560 PERO SABES SI TUS SISTEMAS SON VULNERABLES? Bueno amigos hice un script que checa si eres vulnerable y te dice exactamente que parámetros modificar para no estar vulnerable pero la buena noticia es que, según el propio proyecto, se trata de un riesgo poco probable en la práctica. ", + "fork": false, + "created_at": "2026-10-26T02:18:11Z", + "updated_at": "2026-10-26T02:48:55Z", + "pushed_at": "2026-10-26T02:44:05Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-116063.json b/2026/CVE-2026-116063.json new file mode 100644 index 0000000000..2fe5fed3d1 --- /dev/null +++ b/2026/CVE-2026-116063.json @@ -0,0 +1,35 @@ +[ + { + "id": 1386837697, + "name": "CVE-2026-116063", + "full_name": "SDshadow\/CVE-2026-116063", + "owner": { + "login": "SDshadow", + "id": 111207701, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/111207701?v=4", + "html_url": "https:\/\/github.com\/SDshadow", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/SDshadow\/CVE-2026-116063", + "description": "Vulnerability advisories by SDshadow - VulDB-style entries with PoC and evidence", + "fork": false, + "created_at": "2026-09-25T05:38:27Z", + "updated_at": "2026-10-26T06:24:50Z", + "pushed_at": "2026-09-25T05:40:44Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-17106.json b/2026/CVE-2026-17106.json index bd03333fcc..01372cc855 100644 --- a/2026/CVE-2026-17106.json +++ b/2026/CVE-2026-17106.json @@ -124,11 +124,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/copyescape-check", - "description": "Standalone defensive checker project for CVE-2026-17106: Docker copy destination escape. One exploit per repository; implementation pending.", + "description": "Offline Docker CopyEscape evidence checker for CVE-2026-17106. Docker version and build-configuration evidence. Standalone Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:49:09Z", - "updated_at": "2026-10-26T00:35:09Z", - "pushed_at": "2026-10-26T00:35:04Z", + "updated_at": "2026-10-26T05:03:56Z", + "pushed_at": "2026-10-26T05:17:55Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -138,7 +138,18 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-17106", + "docker", + "evidence-based", + "html-report", + "offline", + "python", + "security", + "security-audit", + "security-tools" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-19489.json b/2026/CVE-2026-19489.json index b664dd9f4f..efaadb89de 100644 --- a/2026/CVE-2026-19489.json +++ b/2026/CVE-2026-19489.json @@ -11,11 +11,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/netscaler-cve-2026-19489-check", - "description": "Standalone defensive checker project for CVE-2026-19489: Citrix NetScaler ADC \/ Gateway: LSN SIP ALG memory corruption. One exploit per repository; implementation pending.", + "description": "Offline NetScaler ADC \/ Gateway evidence checker for CVE-2026-19489. Reported firmware and configuration evidence. Standalone Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:40:59Z", - "updated_at": "2026-10-26T00:23:04Z", - "pushed_at": "2026-10-26T01:45:00Z", + "updated_at": "2026-10-26T05:03:01Z", + "pushed_at": "2026-10-26T05:18:09Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -25,7 +25,18 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-19489", + "evidence-based", + "html-report", + "netscaler", + "offline", + "python", + "security", + "security-audit", + "security-tools" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-19490.json b/2026/CVE-2026-19490.json index 65ab868b88..6cae895c8a 100644 --- a/2026/CVE-2026-19490.json +++ b/2026/CVE-2026-19490.json @@ -77,11 +77,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/netscaler-cve-2026-19490-check", - "description": "Standalone defensive checker project for CVE-2026-19490: Citrix NetScaler ADC \/ Gateway: Gateway \/ AAA alternate-path authentication bypass. One exploit per repository; implementation pending.", + "description": "Offline NetScaler ADC \/ Gateway evidence checker for CVE-2026-19490. Reported firmware and configuration evidence. Standalone Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:41:11Z", - "updated_at": "2026-10-26T00:29:48Z", - "pushed_at": "2026-10-26T01:46:50Z", + "updated_at": "2026-10-26T05:03:57Z", + "pushed_at": "2026-10-26T05:18:15Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -91,7 +91,18 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-19490", + "evidence-based", + "html-report", + "netscaler", + "offline", + "python", + "security", + "security-audit", + "security-tools" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-20131.json b/2026/CVE-2026-20131.json index 684ecb5d42..3c6a4b203d 100644 --- a/2026/CVE-2026-20131.json +++ b/2026/CVE-2026-20131.json @@ -169,5 +169,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1433936308, + "name": "B63-POC-CVE-2026-20131", + "full_name": "basesixtythree\/B63-POC-CVE-2026-20131", + "owner": { + "login": "basesixtythree", + "id": 220976450, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/220976450?v=4", + "html_url": "https:\/\/github.com\/basesixtythree", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/basesixtythree\/B63-POC-CVE-2026-20131", + "description": "CVE-2026-20131 (Cisco FMC): pre-auth Java deserialization to root — VERIFIED-AT-PRIMITIVE showcase artifact (rebuilt twins; appliance not executed, entitlement-gated)", + "fork": false, + "created_at": "2026-10-26T05:19:19Z", + "updated_at": "2026-10-26T05:19:27Z", + "pushed_at": "2026-10-26T05:19:23Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-21589.json b/2026/CVE-2026-21589.json index 8691b4ce82..337cae8b84 100644 --- a/2026/CVE-2026-21589.json +++ b/2026/CVE-2026-21589.json @@ -437,11 +437,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/atlassian-cve-2026-21589-check", - "description": "Standalone defensive checker project for CVE-2026-21589: Atlassian self-managed products: Data Center arbitrary file access. One exploit per repository; implementation pending.", + "description": "Offline Atlassian Data Center evidence checker for CVE-2026-21589. Self-managed product and version evidence. Standalone Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:43:14Z", - "updated_at": "2026-10-26T00:34:21Z", - "pushed_at": "2026-10-26T00:34:17Z", + "updated_at": "2026-10-26T05:12:43Z", + "pushed_at": "2026-10-26T05:17:55Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -451,7 +451,18 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "atlassian", + "cli", + "cve-2026-21589", + "evidence-based", + "html-report", + "offline", + "python", + "security", + "security-audit", + "security-tools" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-24061.json b/2026/CVE-2026-24061.json index a17159cd65..775a2574e2 100644 --- a/2026/CVE-2026-24061.json +++ b/2026/CVE-2026-24061.json @@ -85,10 +85,10 @@ "description": "CVE-2026-24061 Batch Scanning Tool", "fork": false, "created_at": "2026-01-22T10:48:22Z", - "updated_at": "2026-08-31T11:46:23Z", + "updated_at": "2026-10-26T03:12:56Z", "pushed_at": "2026-01-22T10:53:22Z", - "stargazers_count": 10, - "watchers_count": 10, + "stargazers_count": 9, + "watchers_count": 9, "has_discussions": false, "forks_count": 4, "allow_forking": true, @@ -99,7 +99,7 @@ "topics": [], "visibility": "public", "forks": 4, - "watchers": 10, + "watchers": 9, "score": 0, "subscribers_count": 0 }, @@ -250,10 +250,10 @@ "description": "CVE-2026-24061 - Exploit", "fork": false, "created_at": "2026-01-22T20:33:24Z", - "updated_at": "2026-09-09T15:35:02Z", + "updated_at": "2026-10-26T03:12:56Z", "pushed_at": "2026-01-22T20:39:11Z", - "stargazers_count": 8, - "watchers_count": 8, + "stargazers_count": 7, + "watchers_count": 7, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -264,7 +264,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 8, + "watchers": 7, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-31431.json b/2026/CVE-2026-31431.json index 1ec3e37ff2..f9594c8019 100644 --- a/2026/CVE-2026-31431.json +++ b/2026/CVE-2026-31431.json @@ -47,10 +47,10 @@ "description": "Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code", "fork": false, "created_at": "2026-04-29T12:15:28Z", - "updated_at": "2026-10-25T17:09:11Z", + "updated_at": "2026-10-26T06:48:36Z", "pushed_at": "2026-04-29T21:21:46Z", - "stargazers_count": 4084, - "watchers_count": 4084, + "stargazers_count": 4082, + "watchers_count": 4082, "has_discussions": false, "forks_count": 909, "allow_forking": true, @@ -72,7 +72,7 @@ ], "visibility": "public", "forks": 909, - "watchers": 4084, + "watchers": 4082, "score": 0, "subscribers_count": 34 }, @@ -7131,7 +7131,7 @@ "stargazers_count": 34, "watchers_count": 34, "has_discussions": false, - "forks_count": 7, + "forks_count": 6, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -7150,7 +7150,7 @@ "zeroday" ], "visibility": "public", - "forks": 7, + "forks": 6, "watchers": 34, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-39808.json b/2026/CVE-2026-39808.json index f0b2572f72..299a31b674 100644 --- a/2026/CVE-2026-39808.json +++ b/2026/CVE-2026-39808.json @@ -87,10 +87,10 @@ "description": "FortiSandbox RCE Scanner — CVE-2026-39808", "fork": false, "created_at": "2026-04-21T22:21:48Z", - "updated_at": "2026-10-10T19:14:43Z", + "updated_at": "2026-10-26T03:12:57Z", "pushed_at": "2026-04-21T22:32:02Z", - "stargazers_count": 27, - "watchers_count": 27, + "stargazers_count": 26, + "watchers_count": 26, "has_discussions": false, "forks_count": 9, "allow_forking": true, @@ -101,7 +101,7 @@ "topics": [], "visibility": "public", "forks": 9, - "watchers": 27, + "watchers": 26, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-42945.json b/2026/CVE-2026-42945.json index 4f9f634d9f..02a4adb9f4 100644 --- a/2026/CVE-2026-42945.json +++ b/2026/CVE-2026-42945.json @@ -1569,5 +1569,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1433841195, + "name": "sl0ppy-riftscan-CVE-2026-42945", + "full_name": "x0xr00t\/sl0ppy-riftscan-CVE-2026-42945", + "owner": { + "login": "x0xr00t", + "id": 25748471, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25748471?v=4", + "html_url": "https:\/\/github.com\/x0xr00t", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/x0xr00t\/sl0ppy-riftscan-CVE-2026-42945", + "description": "riftscan module for metasploit msf for cve CVE-2026-42945", + "fork": false, + "created_at": "2026-10-26T03:03:39Z", + "updated_at": "2026-10-26T03:12:52Z", + "pushed_at": "2026-10-26T03:12:48Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-43284.json b/2026/CVE-2026-43284.json index 4977706ab9..f8ed74409f 100644 --- a/2026/CVE-2026-43284.json +++ b/2026/CVE-2026-43284.json @@ -359,10 +359,10 @@ "description": "arm64\/aarch64 port of V4bel\/dirtyfrag (CVE-2026-43284). ESP-only - rxrpc path kernel-oopses on arm64 due to flush_dcache_page", "fork": false, "created_at": "2026-05-10T04:22:19Z", - "updated_at": "2026-10-23T18:00:17Z", + "updated_at": "2026-10-26T05:15:32Z", "pushed_at": "2026-05-13T08:32:55Z", - "stargazers_count": 37, - "watchers_count": 37, + "stargazers_count": 38, + "watchers_count": 38, "has_discussions": false, "forks_count": 7, "allow_forking": true, @@ -384,7 +384,7 @@ ], "visibility": "public", "forks": 7, - "watchers": 37, + "watchers": 38, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-43499.json b/2026/CVE-2026-43499.json index 765a7ac85a..b30c183f46 100644 --- a/2026/CVE-2026-43499.json +++ b/2026/CVE-2026-43499.json @@ -384,7 +384,7 @@ "forks": 93, "watchers": 431, "score": 0, - "subscribers_count": 13 + "subscribers_count": 14 }, { "id": 1298678209, @@ -1028,12 +1028,12 @@ "description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499", "fork": false, "created_at": "2026-07-17T14:24:08Z", - "updated_at": "2026-10-25T23:06:08Z", + "updated_at": "2026-10-26T07:00:32Z", "pushed_at": "2026-09-03T03:21:42Z", - "stargazers_count": 1484, - "watchers_count": 1484, + "stargazers_count": 1487, + "watchers_count": 1487, "has_discussions": false, - "forks_count": 296, + "forks_count": 297, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1041,10 +1041,10 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 296, - "watchers": 1484, + "forks": 297, + "watchers": 1487, "score": 0, - "subscribers_count": 44 + "subscribers_count": 46 }, { "id": 1304629488, @@ -1709,12 +1709,12 @@ "description": "GhostLock One-Tap Execution App (CVE-2026-43499)", "fork": false, "created_at": "2026-07-29T05:04:25Z", - "updated_at": "2026-10-26T00:33:48Z", + "updated_at": "2026-10-26T06:53:21Z", "pushed_at": "2026-10-25T18:09:37Z", - "stargazers_count": 2287, - "watchers_count": 2287, + "stargazers_count": 2296, + "watchers_count": 2296, "has_discussions": true, - "forks_count": 559, + "forks_count": 562, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1722,8 +1722,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 559, - "watchers": 2287, + "forks": 562, + "watchers": 2296, "score": 0, "subscribers_count": 37 }, @@ -2077,10 +2077,10 @@ "description": "Jailbreak supported Google Pixel phones with CVE-2026-43499", "fork": false, "created_at": "2026-08-02T17:34:45Z", - "updated_at": "2026-10-25T21:26:50Z", + "updated_at": "2026-10-26T07:18:58Z", "pushed_at": "2026-09-13T16:31:27Z", - "stargazers_count": 466, - "watchers_count": 466, + "stargazers_count": 468, + "watchers_count": 468, "has_discussions": false, "forks_count": 72, "allow_forking": true, @@ -2098,9 +2098,9 @@ ], "visibility": "public", "forks": 72, - "watchers": 466, + "watchers": 468, "score": 0, - "subscribers_count": 7 + "subscribers_count": 8 }, { "id": 1321239265, @@ -2298,7 +2298,7 @@ "forks": 7, "watchers": 40, "score": 0, - "subscribers_count": 0 + "subscribers_count": 1 }, { "id": 1327794280, @@ -2364,7 +2364,7 @@ "forks": 42, "watchers": 97, "score": 0, - "subscribers_count": 4 + "subscribers_count": 5 }, { "id": 1329128067, @@ -2821,10 +2821,10 @@ "description": "KSuRoot 4.0.0 — 基于 CVE-2026-43499(GhostLock) 的一键 KernelSU 提权工具。多内核支持：6.1 \/ 6.6 \/ 6.12 三族各有专属基线，另有 50 档上游内核适配；多机型动态库内置：122 条厂商载荷（vivo\/iQOO、小米、三星、Pixel 等）离线可用、按机型+内核+commit 三级匹配；新增「载荷构建」用本机 boot.img 解析偏移打出适配本机的载荷（通用 \/ vivo 专用）；免 ADB。Mod by hmascs", "fork": false, "created_at": "2026-08-14T10:51:50Z", - "updated_at": "2026-10-24T16:23:15Z", + "updated_at": "2026-10-26T07:36:42Z", "pushed_at": "2026-10-02T08:20:25Z", - "stargazers_count": 262, - "watchers_count": 262, + "stargazers_count": 261, + "watchers_count": 261, "has_discussions": false, "forks_count": 28, "allow_forking": true, @@ -2835,7 +2835,7 @@ "topics": [], "visibility": "public", "forks": 28, - "watchers": 262, + "watchers": 261, "score": 0, "subscribers_count": 1 }, @@ -2870,7 +2870,7 @@ "forks": 0, "watchers": 1, "score": 0, - "subscribers_count": 0 + "subscribers_count": 1 }, { "id": 1334798539, @@ -2953,10 +2953,10 @@ "description": "Using CVE-2026-43499 to root your Galaxy S24 Series(SM-S92X0 ,(China \/ Hong Kong SAR \/ Taiwan))", "fork": false, "created_at": "2026-08-16T14:37:06Z", - "updated_at": "2026-10-25T18:04:10Z", + "updated_at": "2026-10-26T03:44:44Z", "pushed_at": "2026-10-25T13:46:02Z", - "stargazers_count": 88, - "watchers_count": 88, + "stargazers_count": 89, + "watchers_count": 89, "has_discussions": false, "forks_count": 11, "allow_forking": true, @@ -2982,7 +2982,7 @@ ], "visibility": "public", "forks": 11, - "watchers": 88, + "watchers": 89, "score": 0, "subscribers_count": 1 }, @@ -3149,7 +3149,7 @@ "forks": 1, "watchers": 1, "score": 0, - "subscribers_count": 0 + "subscribers_count": 1 }, { "id": 1339098682, @@ -3430,10 +3430,10 @@ "description": "One-click root for vivo\/iQOO devices on locked bootloader | CVE-2026-43499 + KernelSU", "fork": false, "created_at": "2026-08-25T07:52:11Z", - "updated_at": "2026-10-25T23:48:51Z", + "updated_at": "2026-10-26T06:07:00Z", "pushed_at": "2026-10-23T06:52:34Z", - "stargazers_count": 78, - "watchers_count": 78, + "stargazers_count": 79, + "watchers_count": 79, "has_discussions": false, "forks_count": 11, "allow_forking": true, @@ -3444,7 +3444,7 @@ "topics": [], "visibility": "public", "forks": 11, - "watchers": 78, + "watchers": 79, "score": 0, "subscribers_count": 0 }, @@ -5401,10 +5401,10 @@ "description": "Offline Android root toolkit for Samsung Galaxy (S23-S26 \/ Z Flip \/ Z Fold \/ Tab S9 Ultra). DF chain (DirtyFrag) first, auto-fallback to the SRK chain (CVE-2026-43499, firmware-matched payloads), then DFReroot persistence. KernelSU & KernelSU-Next. For security research only.", "fork": false, "created_at": "2026-10-14T12:08:04Z", - "updated_at": "2026-10-21T09:35:11Z", + "updated_at": "2026-10-26T03:57:44Z", "pushed_at": "2026-10-21T02:09:35Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -5415,7 +5415,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, @@ -5467,8 +5467,8 @@ "description": "Honor 70 (FNE-AN00) privilege escalation PoC: GhostLock (CVE-2026-43499) + custom KernelSU module loading", "fork": false, "created_at": "2026-10-16T11:28:27Z", - "updated_at": "2026-10-25T16:54:25Z", - "pushed_at": "2026-10-25T16:54:21Z", + "updated_at": "2026-10-26T03:43:44Z", + "pushed_at": "2026-10-26T03:43:40Z", "stargazers_count": 8, "watchers_count": 8, "has_discussions": false, @@ -5516,7 +5516,7 @@ "forks": 0, "watchers": 0, "score": 0, - "subscribers_count": 0 + "subscribers_count": 1 }, { "id": 1423430832, @@ -5870,8 +5870,8 @@ "description": "SM-S928B \/ S928BXXU6EZIF port of the CVE-2026-43499 app payload - work in progress, not yet rooted", "fork": false, "created_at": "2026-10-25T19:51:02Z", - "updated_at": "2026-10-25T21:10:10Z", - "pushed_at": "2026-10-25T21:10:06Z", + "updated_at": "2026-10-26T06:06:18Z", + "pushed_at": "2026-10-26T06:06:14Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-45321.json b/2026/CVE-2026-45321.json index 449562c92b..1dece57df3 100644 --- a/2026/CVE-2026-45321.json +++ b/2026/CVE-2026-45321.json @@ -221,7 +221,7 @@ "fork": false, "created_at": "2026-05-16T08:01:40Z", "updated_at": "2026-10-17T07:04:07Z", - "pushed_at": "2026-10-19T06:12:44Z", + "pushed_at": "2026-10-26T06:14:18Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": true, diff --git a/2026/CVE-2026-51994.json b/2026/CVE-2026-51994.json index 35e8ccf569..269e83ac8c 100644 --- a/2026/CVE-2026-51994.json +++ b/2026/CVE-2026-51994.json @@ -14,8 +14,8 @@ "description": "Forensic audit of mcp-remote: seven OAuth trust-boundary advisories, five CVE records (CVE-2026-51994\/51995\/51996\/51997\/52001). Server-selected request path (CWE-918) run against loopback canaries in 62 stable releases, 0.1.32 to the current 0.15.1; selected code and namespace signatures under 12 other npm names; search blind spots above 350 KiB.", "fork": false, "created_at": "2026-07-31T10:36:20Z", - "updated_at": "2026-10-15T10:10:01Z", - "pushed_at": "2026-10-15T09:36:18Z", + "updated_at": "2026-10-26T06:55:01Z", + "pushed_at": "2026-10-26T06:54:57Z", "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, diff --git a/2026/CVE-2026-53264.json b/2026/CVE-2026-53264.json index f8124bf3c3..941436bd02 100644 --- a/2026/CVE-2026-53264.json +++ b/2026/CVE-2026-53264.json @@ -19,7 +19,7 @@ "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, - "forks_count": 4, + "forks_count": 3, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 4, + "forks": 3, "watchers": 3, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-54121.json b/2026/CVE-2026-54121.json index a03ef2dbde..0de634f657 100644 --- a/2026/CVE-2026-54121.json +++ b/2026/CVE-2026-54121.json @@ -424,7 +424,7 @@ "description": "🛡 Official AI Security Tool module for CVE-2026-54121 (Certighost): AD CS certificate abuse deep-dive, defensive audit workflows, and safe in-app console execution for authorized Active Directory security testing.", "fork": false, "created_at": "2026-09-11T23:08:16Z", - "updated_at": "2026-10-26T00:10:39Z", + "updated_at": "2026-10-26T07:04:47Z", "pushed_at": "2026-10-19T11:05:57Z", "stargazers_count": 247, "watchers_count": 247, diff --git a/2026/CVE-2026-56846.json b/2026/CVE-2026-56846.json index f8dc58e362..6a2c6b3bbe 100644 --- a/2026/CVE-2026-56846.json +++ b/2026/CVE-2026-56846.json @@ -11,11 +11,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/node-cve-2026-56846-check", - "description": "Standalone defensive checker project for CVE-2026-56846: Node.js: HTTP\/2 retained header memory exhaustion. One exploit per repository; implementation pending.", + "description": "Offline Node.js evidence checker for CVE-2026-56846: HTTP\/2 retained header memory exhaustion. Single-file Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:43:36Z", - "updated_at": "2026-10-24T16:29:36Z", - "pushed_at": "2026-10-24T16:29:31Z", + "updated_at": "2026-10-26T05:09:55Z", + "pushed_at": "2026-10-26T05:18:55Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -25,7 +25,20 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-56846", + "evidence-based", + "html-report", + "http2", + "nodejs", + "offline", + "python", + "runtime-inventory", + "security", + "security-audit", + "security-tools" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-56847.json b/2026/CVE-2026-56847.json index eb3d045ef2..fde8010349 100644 --- a/2026/CVE-2026-56847.json +++ b/2026/CVE-2026-56847.json @@ -11,11 +11,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/node-cve-2026-56847-check", - "description": "Standalone defensive checker project for CVE-2026-56847: Node.js: Permission Model trace-log filesystem bypass. One exploit per repository; implementation pending.", + "description": "Offline Node.js evidence checker for CVE-2026-56847: Permission Model trace-log filesystem bypass. Single-file Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:45:43Z", - "updated_at": "2026-10-24T16:29:42Z", - "pushed_at": "2026-10-24T16:29:38Z", + "updated_at": "2026-10-26T05:08:56Z", + "pushed_at": "2026-10-26T05:18:56Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -25,7 +25,20 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-56847", + "evidence-based", + "html-report", + "nodejs", + "offline", + "permission-model", + "python", + "runtime-inventory", + "security", + "security-audit", + "security-tools" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-56848.json b/2026/CVE-2026-56848.json index cc62eed328..829ad4213b 100644 --- a/2026/CVE-2026-56848.json +++ b/2026/CVE-2026-56848.json @@ -44,11 +44,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/node-cve-2026-56848-check", - "description": "Standalone defensive checker project for CVE-2026-56848: Node.js: HTTP\/2 reentrant send use-after-free. One exploit per repository; implementation pending.", + "description": "Offline Node.js evidence checker for CVE-2026-56848: HTTP\/2 reentrant send use-after-free. Single-file Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:43:58Z", - "updated_at": "2026-10-24T16:29:48Z", - "pushed_at": "2026-10-24T16:29:44Z", + "updated_at": "2026-10-26T05:08:57Z", + "pushed_at": "2026-10-26T05:19:02Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -58,7 +58,20 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-56848", + "evidence-based", + "html-report", + "http2", + "nodejs", + "offline", + "python", + "runtime-inventory", + "security", + "security-audit", + "security-tools" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-56850.json b/2026/CVE-2026-56850.json index c8d754ddd4..81e8a92a5b 100644 --- a/2026/CVE-2026-56850.json +++ b/2026/CVE-2026-56850.json @@ -11,11 +11,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/node-cve-2026-56850-check", - "description": "Standalone defensive checker project for CVE-2026-56850: Node.js: HTTPS Agent PFX client identity collision. One exploit per repository; implementation pending.", + "description": "Offline Node.js evidence checker for CVE-2026-56850: HTTPS Agent PFX client identity collision. Single-file Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:44:20Z", - "updated_at": "2026-10-24T16:29:55Z", - "pushed_at": "2026-10-24T16:29:50Z", + "updated_at": "2026-10-26T05:09:55Z", + "pushed_at": "2026-10-26T05:19:03Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -25,7 +25,19 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-56850", + "evidence-based", + "html-report", + "nodejs", + "offline", + "python", + "runtime-inventory", + "security", + "security-audit", + "security-tools" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-58039.json b/2026/CVE-2026-58039.json index e89c1bd2f9..ed73565bbb 100644 --- a/2026/CVE-2026-58039.json +++ b/2026/CVE-2026-58039.json @@ -11,11 +11,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/node-cve-2026-58039-check", - "description": "Standalone defensive checker project for CVE-2026-58039: Node.js: Permission Model process-report filesystem bypass. One exploit per repository; implementation pending.", + "description": "Offline Node.js evidence checker for CVE-2026-58039: Permission Model process-report filesystem bypass. Single-file Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:45:55Z", - "updated_at": "2026-10-24T16:30:01Z", - "pushed_at": "2026-10-24T16:29:56Z", + "updated_at": "2026-10-26T05:09:03Z", + "pushed_at": "2026-10-26T05:19:03Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -25,7 +25,20 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-58039", + "evidence-based", + "html-report", + "nodejs", + "offline", + "permission-model", + "python", + "runtime-inventory", + "security", + "security-audit", + "security-tools" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-58040.json b/2026/CVE-2026-58040.json index 7d27652a3b..c3fc89c2d0 100644 --- a/2026/CVE-2026-58040.json +++ b/2026/CVE-2026-58040.json @@ -11,11 +11,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/node-cve-2026-58040-check", - "description": "Standalone defensive checker project for CVE-2026-58040: Node.js: HTTPS Agent TLS session identity-policy bypass. One exploit per repository; implementation pending.", + "description": "Offline Node.js evidence checker for CVE-2026-58040: HTTPS Agent TLS session identity-policy bypass. Single-file Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:44:41Z", - "updated_at": "2026-10-24T16:30:07Z", - "pushed_at": "2026-10-24T16:30:02Z", + "updated_at": "2026-10-26T05:10:54Z", + "pushed_at": "2026-10-26T05:19:09Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -25,7 +25,20 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-58040", + "evidence-based", + "html-report", + "nodejs", + "offline", + "python", + "runtime-inventory", + "security", + "security-audit", + "security-tools", + "tls" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-58041.json b/2026/CVE-2026-58041.json index c3e66a1d23..efbc0c6547 100644 --- a/2026/CVE-2026-58041.json +++ b/2026/CVE-2026-58041.json @@ -11,11 +11,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/node-cve-2026-58041-check", - "description": "Standalone defensive checker project for CVE-2026-58041: Node.js: SQLite cached iterator write replay. One exploit per repository; implementation pending.", + "description": "Offline Node.js evidence checker for CVE-2026-58041: SQLite cached iterator write replay. Single-file Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:44:56Z", - "updated_at": "2026-10-24T16:30:13Z", - "pushed_at": "2026-10-24T16:30:09Z", + "updated_at": "2026-10-26T05:10:54Z", + "pushed_at": "2026-10-26T05:19:09Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -25,7 +25,20 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-58041", + "evidence-based", + "html-report", + "nodejs", + "offline", + "python", + "runtime-inventory", + "security", + "security-audit", + "security-tools", + "sqlite" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-58042.json b/2026/CVE-2026-58042.json index 389379452e..9fa67ad6a3 100644 --- a/2026/CVE-2026-58042.json +++ b/2026/CVE-2026-58042.json @@ -11,11 +11,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/node-cve-2026-58042-check", - "description": "Standalone defensive checker project for CVE-2026-58042: Node.js: DNS resolveAny process abort. One exploit per repository; implementation pending.", + "description": "Offline Node.js evidence checker for CVE-2026-58042: DNS resolveAny process abort. Single-file Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:45:07Z", - "updated_at": "2026-10-24T16:30:19Z", - "pushed_at": "2026-10-24T16:30:15Z", + "updated_at": "2026-10-26T05:11:00Z", + "pushed_at": "2026-10-26T05:19:10Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -25,7 +25,20 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-58042", + "dns", + "evidence-based", + "html-report", + "nodejs", + "offline", + "python", + "runtime-inventory", + "security", + "security-audit", + "security-tools" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-58043.json b/2026/CVE-2026-58043.json index 575992462d..6dd659f56b 100644 --- a/2026/CVE-2026-58043.json +++ b/2026/CVE-2026-58043.json @@ -11,11 +11,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/node-cve-2026-58043-check", - "description": "Standalone defensive checker project for CVE-2026-58043: Node.js: Permission Model path-prefix over-grant. One exploit per repository; implementation pending.", + "description": "Offline Node.js evidence checker for CVE-2026-58043: Permission Model path-prefix over-grant. Single-file Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:44:09Z", - "updated_at": "2026-10-24T16:30:26Z", - "pushed_at": "2026-10-24T16:30:21Z", + "updated_at": "2026-10-26T05:10:02Z", + "pushed_at": "2026-10-26T05:19:16Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -25,7 +25,20 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-58043", + "evidence-based", + "html-report", + "nodejs", + "offline", + "permission-model", + "python", + "runtime-inventory", + "security", + "security-audit", + "security-tools" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-58044.json b/2026/CVE-2026-58044.json index 314defe421..590e6247a3 100644 --- a/2026/CVE-2026-58044.json +++ b/2026/CVE-2026-58044.json @@ -11,11 +11,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/node-cve-2026-58044-check", - "description": "Standalone defensive checker project for CVE-2026-58044: Node.js HTTP header-limit request smuggling. One exploit per repository; implementation pending.", + "description": "Offline Node.js evidence checker for CVE-2026-58044: HTTP header-limit request smuggling. Single-file Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:46:28Z", - "updated_at": "2026-10-24T16:30:31Z", - "pushed_at": "2026-10-24T16:30:27Z", + "updated_at": "2026-10-26T05:10:01Z", + "pushed_at": "2026-10-26T05:19:16Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -25,7 +25,19 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-58044", + "evidence-based", + "html-report", + "nodejs", + "offline", + "python", + "runtime-inventory", + "security", + "security-audit", + "security-tools" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-58045.json b/2026/CVE-2026-58045.json index 3a806a637e..ced24fb3b2 100644 --- a/2026/CVE-2026-58045.json +++ b/2026/CVE-2026-58045.json @@ -11,11 +11,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/node-cve-2026-58045-check", - "description": "Standalone defensive checker project for CVE-2026-58045: Node.js: zlib synchronous API spoofed TypedArray crash. One exploit per repository; implementation pending.", + "description": "Offline Node.js evidence checker for CVE-2026-58045: zlib synchronous API spoofed TypedArray crash. Single-file Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:45:30Z", - "updated_at": "2026-10-24T16:30:38Z", - "pushed_at": "2026-10-24T16:30:34Z", + "updated_at": "2026-10-26T05:09:02Z", + "pushed_at": "2026-10-26T05:19:17Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -25,7 +25,20 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-58045", + "evidence-based", + "html-report", + "nodejs", + "offline", + "python", + "runtime-inventory", + "security", + "security-audit", + "security-tools", + "zlib" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-59248.json b/2026/CVE-2026-59248.json index 47e20810e4..9a03bddc86 100644 --- a/2026/CVE-2026-59248.json +++ b/2026/CVE-2026-59248.json @@ -14,8 +14,8 @@ "description": "CVE-2026-59248", "fork": false, "created_at": "2026-10-25T18:32:57Z", - "updated_at": "2026-10-25T18:34:23Z", - "pushed_at": "2026-10-25T18:34:20Z", + "updated_at": "2026-10-26T06:22:40Z", + "pushed_at": "2026-10-26T06:22:36Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-63077.json b/2026/CVE-2026-63077.json index 11401e25b0..73b2b2071c 100644 --- a/2026/CVE-2026-63077.json +++ b/2026/CVE-2026-63077.json @@ -52,7 +52,7 @@ "stargazers_count": 20, "watchers_count": 20, "has_discussions": false, - "forks_count": 6, + "forks_count": 5, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,7 +60,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 6, + "forks": 5, "watchers": 20, "score": 0, "subscribers_count": 0 @@ -118,7 +118,7 @@ "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, - "forks_count": 2, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -126,7 +126,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 2, + "forks": 1, "watchers": 0, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-64560.json b/2026/CVE-2026-64560.json index cc76de8d4f..7bc76062df 100644 --- a/2026/CVE-2026-64560.json +++ b/2026/CVE-2026-64560.json @@ -597,8 +597,8 @@ "description": "越狱助手 · RootKit for Honor Magic9 (CVE-2026-64560 → cred 写 → 自制内核模块 → KernelSU)，Flutter + Shizuku 一键 root", "fork": false, "created_at": "2026-10-24T18:21:20Z", - "updated_at": "2026-10-25T09:59:03Z", - "pushed_at": "2026-10-25T09:59:07Z", + "updated_at": "2026-10-26T05:21:51Z", + "pushed_at": "2026-10-26T07:23:57Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-64638.json b/2026/CVE-2026-64638.json index 3f4e65a49a..9b38088722 100644 --- a/2026/CVE-2026-64638.json +++ b/2026/CVE-2026-64638.json @@ -47,10 +47,10 @@ "description": "XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template", "fork": false, "created_at": "2026-08-07T17:07:17Z", - "updated_at": "2026-10-26T00:29:12Z", + "updated_at": "2026-10-26T06:41:52Z", "pushed_at": "2026-08-21T13:31:58Z", - "stargazers_count": 119, - "watchers_count": 119, + "stargazers_count": 120, + "watchers_count": 120, "has_discussions": false, "forks_count": 31, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 31, - "watchers": 119, + "watchers": 120, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-67276.json b/2026/CVE-2026-67276.json index eec9dbace7..bb2d6fb5e6 100644 --- a/2026/CVE-2026-67276.json +++ b/2026/CVE-2026-67276.json @@ -47,10 +47,10 @@ "description": "CVE-2026-67276 RouterOS SSH public-key authentication bypass lab PoC", "fork": false, "created_at": "2026-09-06T12:10:51Z", - "updated_at": "2026-10-23T15:04:30Z", + "updated_at": "2026-10-26T05:55:08Z", "pushed_at": "2026-09-06T12:10:54Z", - "stargazers_count": 101, - "watchers_count": 101, + "stargazers_count": 102, + "watchers_count": 102, "has_discussions": false, "forks_count": 34, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 34, - "watchers": 101, + "watchers": 102, "score": 0, "subscribers_count": 2 }, @@ -122,10 +122,10 @@ "description": "Testing tool for the Mikrotrick exploit (CVE-2026-67276)", "fork": false, "created_at": "2026-09-09T12:22:54Z", - "updated_at": "2026-09-30T06:24:18Z", + "updated_at": "2026-10-26T05:51:59Z", "pushed_at": "2026-09-09T12:33:08Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -136,7 +136,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-67279.json b/2026/CVE-2026-67279.json index b86dd774b4..863f02cf58 100644 --- a/2026/CVE-2026-67279.json +++ b/2026/CVE-2026-67279.json @@ -14,10 +14,10 @@ "description": "MikroTrick (MikroTik RouterOS SSH takeover chain) PoC mirror - CVE-2026-67279 + CVE-2026-86060 (+67276); for authorized lab testing", "fork": false, "created_at": "2026-09-26T03:46:49Z", - "updated_at": "2026-10-03T10:06:31Z", + "updated_at": "2026-10-26T05:50:13Z", "pushed_at": "2026-09-26T03:47:20Z", - "stargazers_count": 4, - "watchers_count": 4, + "stargazers_count": 5, + "watchers_count": 5, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 4, + "watchers": 5, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-69254.json b/2026/CVE-2026-69254.json index a446ee5202..68905de2c8 100644 --- a/2026/CVE-2026-69254.json +++ b/2026/CVE-2026-69254.json @@ -11,11 +11,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/flowise-cve-2026-69254-check", - "description": "Standalone defensive checker project for Flowise CVE-2026-69254 (nodeVMOptions sandbox override). One exploit per repository; implementation pending.", + "description": "Offline Flowise evidence checker for CVE-2026-69254. Flowise version and configuration evidence. Standalone Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:36:46Z", - "updated_at": "2026-10-26T00:34:27Z", - "pushed_at": "2026-10-26T01:27:18Z", + "updated_at": "2026-10-26T05:02:57Z", + "pushed_at": "2026-10-26T05:18:03Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -25,7 +25,18 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-69254", + "evidence-based", + "flowise", + "html-report", + "offline", + "python", + "security", + "security-audit", + "security-tools" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-75650.json b/2026/CVE-2026-75650.json index eb98342751..53e4aa0935 100644 --- a/2026/CVE-2026-75650.json +++ b/2026/CVE-2026-75650.json @@ -212,5 +212,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1433936193, + "name": "B63-POC-CVE-2026-75650", + "full_name": "basesixtythree\/B63-POC-CVE-2026-75650", + "owner": { + "login": "basesixtythree", + "id": 220976450, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/220976450?v=4", + "html_url": "https:\/\/github.com\/basesixtythree", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/basesixtythree\/B63-POC-CVE-2026-75650", + "description": "CVE-2026-75650 (StyleSmuggler): unauthenticated RCE via template injection in Magento Open Source \/ Adobe Commerce 2.4.4–2.4.9 — b63 showcase, lab-verified with patched-build negative test", + "fork": false, + "created_at": "2026-10-26T05:19:09Z", + "updated_at": "2026-10-26T05:19:18Z", + "pushed_at": "2026-10-26T05:19:13Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-82329.json b/2026/CVE-2026-82329.json index 57d7635671..ad099a5992 100644 --- a/2026/CVE-2026-82329.json +++ b/2026/CVE-2026-82329.json @@ -228,7 +228,7 @@ "forks": 0, "watchers": 2, "score": 0, - "subscribers_count": 0 + "subscribers_count": 1 }, { "id": 1372064685, diff --git a/2026/CVE-2026-84589.json b/2026/CVE-2026-84589.json new file mode 100644 index 0000000000..1bb1cce306 --- /dev/null +++ b/2026/CVE-2026-84589.json @@ -0,0 +1,35 @@ +[ + { + "id": 1433838709, + "name": "CVE-2026-84589-macOS-TCC-Bypass", + "full_name": "isaiahehlert\/CVE-2026-84589-macOS-TCC-Bypass", + "owner": { + "login": "isaiahehlert", + "id": 207918324, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/207918324?v=4", + "html_url": "https:\/\/github.com\/isaiahehlert", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/isaiahehlert\/CVE-2026-84589-macOS-TCC-Bypass", + "description": "CVE-2026-84589: macOS TCC privacy bypass via FaceTime impersonation. Technical PoC analysis, Apple disclosure timeline, and patch coverage.", + "fork": false, + "created_at": "2026-10-26T02:59:49Z", + "updated_at": "2026-10-26T03:25:35Z", + "pushed_at": "2026-10-26T03:25:31Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-86060.json b/2026/CVE-2026-86060.json index e6beecc708..63be431034 100644 --- a/2026/CVE-2026-86060.json +++ b/2026/CVE-2026-86060.json @@ -47,10 +47,10 @@ "description": "cve-2026-86060 PoC", "fork": false, "created_at": "2026-09-22T13:23:54Z", - "updated_at": "2026-10-20T16:49:45Z", + "updated_at": "2026-10-26T05:58:40Z", "pushed_at": "2026-09-23T12:50:46Z", - "stargazers_count": 55, - "watchers_count": 55, + "stargazers_count": 56, + "watchers_count": 56, "has_discussions": false, "forks_count": 8, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 8, - "watchers": 55, + "watchers": 56, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-86950.json b/2026/CVE-2026-86950.json index dfeae4f063..e9b00f2bac 100644 --- a/2026/CVE-2026-86950.json +++ b/2026/CVE-2026-86950.json @@ -47,7 +47,7 @@ "description": null, "fork": false, "created_at": "2026-10-01T13:01:02Z", - "updated_at": "2026-10-21T02:45:55Z", + "updated_at": "2026-10-26T06:14:48Z", "pushed_at": "2026-10-17T12:32:40Z", "stargazers_count": 1, "watchers_count": 1, diff --git a/2026/CVE-2026-87902.json b/2026/CVE-2026-87902.json index ecc4ec9ecb..9fd7766fe6 100644 --- a/2026/CVE-2026-87902.json +++ b/2026/CVE-2026-87902.json @@ -19,7 +19,7 @@ "stargazers_count": 35, "watchers_count": 35, "has_discussions": false, - "forks_count": 10, + "forks_count": 9, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 10, + "forks": 9, "watchers": 35, "score": 0, "subscribers_count": 0 @@ -621,7 +621,7 @@ "fork": false, "created_at": "2026-09-26T15:15:55Z", "updated_at": "2026-09-27T05:07:23Z", - "pushed_at": "2026-09-27T07:59:59Z", + "pushed_at": "2026-10-26T07:35:38Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-88771.json b/2026/CVE-2026-88771.json index 94944ff39a..18100f8957 100644 --- a/2026/CVE-2026-88771.json +++ b/2026/CVE-2026-88771.json @@ -403,11 +403,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/netscaler-cve-2026-88771-check", - "description": "Offline evidence checker for NetScaler CVE-2026-88771. Edition-aware firmware assessment, separate threat metadata, standalone Python, no exploit payloads.", + "description": "Offline NetScaler ADC \/ Gateway evidence checker for CVE-2026-88771. Reported firmware and configuration evidence. Standalone Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T20:02:16Z", - "updated_at": "2026-10-24T16:31:26Z", - "pushed_at": "2026-10-26T01:23:08Z", + "updated_at": "2026-10-26T05:11:51Z", + "pushed_at": "2026-10-26T05:18:16Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -417,7 +417,18 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-88771", + "evidence-based", + "html-report", + "netscaler", + "offline", + "python", + "security", + "security-audit", + "security-tools" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-88772.json b/2026/CVE-2026-88772.json index da27214c32..55247f6e10 100644 --- a/2026/CVE-2026-88772.json +++ b/2026/CVE-2026-88772.json @@ -110,11 +110,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/netscaler-cve-2026-88772-check", - "description": "Offline evidence checker for NetScaler DTLS CVE-2026-88772. Per-vserver configuration and firmware assessment; standalone Python; no exploit payloads.", + "description": "Offline NetScaler ADC \/ Gateway evidence checker for CVE-2026-88772. Reported firmware and configuration evidence. Standalone Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T20:03:33Z", - "updated_at": "2026-10-24T16:31:32Z", - "pushed_at": "2026-10-26T01:25:13Z", + "updated_at": "2026-10-26T05:03:58Z", + "pushed_at": "2026-10-26T05:18:17Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -124,7 +124,18 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-88772", + "evidence-based", + "html-report", + "netscaler", + "offline", + "python", + "security", + "security-audit", + "security-tools" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-88773.json b/2026/CVE-2026-88773.json index 98d2b27e42..ff14b5015d 100644 --- a/2026/CVE-2026-88773.json +++ b/2026/CVE-2026-88773.json @@ -44,11 +44,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/netscaler-cve-2026-88773-check", - "description": "Standalone defensive checker project for CVE-2026-88773: Citrix NetScaler ADC \/ Gateway: HTTP request smuggling. One exploit per repository; implementation pending.", + "description": "Offline NetScaler ADC \/ Gateway evidence checker for CVE-2026-88773. Reported firmware and configuration evidence. Standalone Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:38:37Z", - "updated_at": "2026-10-26T00:23:00Z", - "pushed_at": "2026-10-26T01:34:32Z", + "updated_at": "2026-10-26T05:04:01Z", + "pushed_at": "2026-10-26T05:18:22Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -58,7 +58,18 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-88773", + "evidence-based", + "html-report", + "netscaler", + "offline", + "python", + "security", + "security-audit", + "security-tools" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-88774.json b/2026/CVE-2026-88774.json index 999720a6fb..f7b491b4f7 100644 --- a/2026/CVE-2026-88774.json +++ b/2026/CVE-2026-88774.json @@ -11,11 +11,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/netscaler-cve-2026-88774-check", - "description": "Standalone defensive checker project for CVE-2026-88774: Citrix NetScaler ADC \/ Gateway: URL-expression policy bypass. One exploit per repository; implementation pending.", + "description": "Offline NetScaler ADC \/ Gateway evidence checker for CVE-2026-88774. Reported firmware and configuration evidence. Standalone Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:39:04Z", - "updated_at": "2026-10-26T00:22:57Z", - "pushed_at": "2026-10-26T01:33:59Z", + "updated_at": "2026-10-26T05:04:02Z", + "pushed_at": "2026-10-26T05:18:23Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -25,7 +25,18 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-88774", + "evidence-based", + "html-report", + "netscaler", + "offline", + "python", + "security", + "security-audit", + "security-tools" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-88775.json b/2026/CVE-2026-88775.json index 8857449f50..3c7d9a1862 100644 --- a/2026/CVE-2026-88775.json +++ b/2026/CVE-2026-88775.json @@ -11,11 +11,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/netscaler-cve-2026-88775-check", - "description": "Standalone defensive checker project for CVE-2026-88775: Citrix NetScaler ADC \/ Gateway: Gateway \/ AAA memory corruption. One exploit per repository; implementation pending.", + "description": "Offline NetScaler ADC \/ Gateway evidence checker for CVE-2026-88775. Reported firmware and configuration evidence. Standalone Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:39:44Z", - "updated_at": "2026-10-26T00:22:53Z", - "pushed_at": "2026-10-26T01:38:34Z", + "updated_at": "2026-10-26T05:11:52Z", + "pushed_at": "2026-10-26T05:18:23Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -25,7 +25,18 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-88775", + "evidence-based", + "html-report", + "netscaler", + "offline", + "python", + "security", + "security-audit", + "security-tools" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-88776.json b/2026/CVE-2026-88776.json index 20988bde21..305b8601c0 100644 --- a/2026/CVE-2026-88776.json +++ b/2026/CVE-2026-88776.json @@ -44,11 +44,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/netscaler-cve-2026-88776-check", - "description": "Standalone defensive checker project for CVE-2026-88776: Citrix NetScaler ADC \/ Gateway: Oracle load-balancer memory corruption. One exploit per repository; implementation pending.", + "description": "Offline NetScaler ADC \/ Gateway evidence checker for CVE-2026-88776. Reported firmware and configuration evidence. Standalone Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:39:55Z", - "updated_at": "2026-10-26T00:22:48Z", - "pushed_at": "2026-10-26T01:39:41Z", + "updated_at": "2026-10-26T05:06:57Z", + "pushed_at": "2026-10-26T05:18:28Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -58,7 +58,18 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-88776", + "evidence-based", + "html-report", + "netscaler", + "offline", + "python", + "security", + "security-audit", + "security-tools" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-88777.json b/2026/CVE-2026-88777.json index 2b4ecc027e..a207db8705 100644 --- a/2026/CVE-2026-88777.json +++ b/2026/CVE-2026-88777.json @@ -11,11 +11,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/netscaler-cve-2026-88777-check", - "description": "Standalone defensive checker project for CVE-2026-88777: Citrix NetScaler ADC \/ Gateway: Non-HTTP L7 memory corruption. One exploit per repository; implementation pending.", + "description": "Offline NetScaler ADC \/ Gateway evidence checker for CVE-2026-88777. Reported firmware and configuration evidence. Standalone Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:40:10Z", - "updated_at": "2026-10-26T00:22:45Z", - "pushed_at": "2026-10-26T01:42:34Z", + "updated_at": "2026-10-26T05:04:05Z", + "pushed_at": "2026-10-26T05:18:29Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -25,7 +25,18 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-88777", + "evidence-based", + "html-report", + "netscaler", + "offline", + "python", + "security", + "security-audit", + "security-tools" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-88778.json b/2026/CVE-2026-88778.json index 30af15f297..1ba6951047 100644 --- a/2026/CVE-2026-88778.json +++ b/2026/CVE-2026-88778.json @@ -11,11 +11,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/netscaler-cve-2026-88778-check", - "description": "Standalone defensive checker project for CVE-2026-88778: Citrix NetScaler ADC \/ Gateway: Predictable TCP initial sequence numbers. One exploit per repository; implementation pending.", + "description": "Offline NetScaler ADC \/ Gateway evidence checker for CVE-2026-88778. Reported firmware and configuration evidence. Standalone Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:40:47Z", - "updated_at": "2026-10-26T00:22:40Z", - "pushed_at": "2026-10-26T01:44:05Z", + "updated_at": "2026-10-26T05:04:08Z", + "pushed_at": "2026-10-26T05:18:30Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -25,7 +25,18 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-88778", + "evidence-based", + "html-report", + "netscaler", + "offline", + "python", + "security", + "security-audit", + "security-tools" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-91403.json b/2026/CVE-2026-91403.json index 22fa9de01d..bbfa850775 100644 --- a/2026/CVE-2026-91403.json +++ b/2026/CVE-2026-91403.json @@ -86,10 +86,10 @@ "description": null, "fork": false, "created_at": "2026-10-23T20:07:08Z", - "updated_at": "2026-10-24T16:12:19Z", + "updated_at": "2026-10-26T02:53:16Z", "pushed_at": "2026-10-24T16:12:15Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -100,7 +100,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-92935.json b/2026/CVE-2026-92935.json index dd5cde440e..14cbcda77f 100644 --- a/2026/CVE-2026-92935.json +++ b/2026/CVE-2026-92935.json @@ -11,11 +11,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/vm2-nesting-check", - "description": "Standalone defensive checker project for vm2 CVE-2026-92935. One exploit per repository; implementation pending.", + "description": "Offline vm2 evidence checker for CVE-2026-92935. Sandbox package and nesting evidence. Standalone Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:37:45Z", - "updated_at": "2026-10-25T23:27:48Z", - "pushed_at": "2026-10-26T01:33:59Z", + "updated_at": "2026-10-26T05:12:43Z", + "pushed_at": "2026-10-26T05:19:43Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -25,7 +25,18 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-92935", + "evidence-based", + "html-report", + "offline", + "python", + "security", + "security-audit", + "security-tools", + "vm2" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-94545.json b/2026/CVE-2026-94545.json index 8f3ecde6f0..28daab0368 100644 --- a/2026/CVE-2026-94545.json +++ b/2026/CVE-2026-94545.json @@ -85,7 +85,7 @@ "stargazers_count": 52, "watchers_count": 52, "has_discussions": false, - "forks_count": 13, + "forks_count": 14, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -93,7 +93,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 13, + "forks": 14, "watchers": 52, "score": 0, "subscribers_count": 1 diff --git a/2026/CVE-2026-96889.json b/2026/CVE-2026-96889.json index 5fbffbdb00..e1fae9a136 100644 --- a/2026/CVE-2026-96889.json +++ b/2026/CVE-2026-96889.json @@ -158,11 +158,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/CompleTetech-Security\/sharp-rsvg-rce-check", - "description": "Standalone defensive checker project for Sharp\/librsvg CVE-2026-96889. One exploit per repository; evidence-based assessment without exploit payloads.", + "description": "Offline Sharp \/ librsvg evidence checker for CVE-2026-96889. Sharp and librsvg version and build evidence. Standalone Python; JSON\/CSV\/HTML reports; no exploit payloads.", "fork": false, "created_at": "2026-10-23T23:35:28Z", - "updated_at": "2026-10-26T00:24:01Z", - "pushed_at": "2026-10-26T01:23:57Z", + "updated_at": "2026-10-26T05:06:04Z", + "pushed_at": "2026-10-26T05:19:29Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -172,7 +172,18 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cli", + "cve-2026-96889", + "evidence-based", + "html-report", + "offline", + "python", + "security", + "security-audit", + "security-tools", + "sharp" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-97205.json b/2026/CVE-2026-97205.json index 917468f8b0..73de6ec7fc 100644 --- a/2026/CVE-2026-97205.json +++ b/2026/CVE-2026-97205.json @@ -14,8 +14,8 @@ "description": null, "fork": false, "created_at": "2026-10-15T10:48:17Z", - "updated_at": "2026-10-24T15:06:10Z", - "pushed_at": "2026-10-24T15:06:06Z", + "updated_at": "2026-10-26T06:30:55Z", + "pushed_at": "2026-10-26T06:30:51Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-98260.json b/2026/CVE-2026-98260.json index ea8de1a851..d05f34043a 100644 --- a/2026/CVE-2026-98260.json +++ b/2026/CVE-2026-98260.json @@ -19,7 +19,7 @@ "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 0, "score": 0, "subscribers_count": 0 @@ -47,10 +47,10 @@ "description": "CVE-2026-98260 (Timer) Android\/ARM64 port", "fork": false, "created_at": "2026-10-18T23:26:39Z", - "updated_at": "2026-10-25T05:35:22Z", + "updated_at": "2026-10-26T04:41:49Z", "pushed_at": "2026-10-25T05:35:18Z", - "stargazers_count": 15, - "watchers_count": 15, + "stargazers_count": 16, + "watchers_count": 16, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 6, - "watchers": 15, + "watchers": 16, "score": 0, "subscribers_count": 0 }, @@ -80,10 +80,10 @@ "description": "Target-specific Android CVE-2026-98260 research port for Xiaomi popsicle", "fork": false, "created_at": "2026-10-23T08:56:37Z", - "updated_at": "2026-10-25T17:19:13Z", + "updated_at": "2026-10-26T06:18:48Z", "pushed_at": "2026-10-23T09:29:52Z", - "stargazers_count": 8, - "watchers_count": 8, + "stargazers_count": 9, + "watchers_count": 9, "has_discussions": false, "forks_count": 8, "allow_forking": true, @@ -94,7 +94,7 @@ "topics": [], "visibility": "public", "forks": 8, - "watchers": 8, + "watchers": 9, "score": 0, "subscribers_count": 0 }, @@ -179,12 +179,12 @@ "description": "Shizuku-driven CVE-2026-98260 root + KernelSU runtime LKM loader for Xiaomi yingtian \/ lhasa (kernel 6.18.21)", "fork": false, "created_at": "2026-10-25T12:51:04Z", - "updated_at": "2026-10-25T19:10:11Z", + "updated_at": "2026-10-26T07:20:22Z", "pushed_at": "2026-10-25T19:06:56Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 12, + "watchers_count": 12, "has_discussions": false, - "forks_count": 0, + "forks_count": 4, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -201,8 +201,8 @@ "xiaomi" ], "visibility": "public", - "forks": 0, - "watchers": 1, + "forks": 4, + "watchers": 12, "score": 0, "subscribers_count": 0 }, @@ -244,5 +244,82 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1433935343, + "name": "CVE-2026-98260-pudding-android", + "full_name": "addxemmm\/CVE-2026-98260-pudding-android", + "owner": { + "login": "addxemmm", + "id": 35447221, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/35447221?v=4", + "html_url": "https:\/\/github.com\/addxemmm", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/addxemmm\/CVE-2026-98260-pudding-android", + "description": "Target-specific Android CVE-2026-98260 research port for Xiaomi 17 (pudding)", + "fork": false, + "created_at": "2026-10-26T05:17:57Z", + "updated_at": "2026-10-26T05:18:07Z", + "pushed_at": "2026-10-26T05:18:03Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1433962985, + "name": "CVE-2026-98260-OnePlus16-PYB110-Jailbreak", + "full_name": "AzirX1337\/CVE-2026-98260-OnePlus16-PYB110-Jailbreak", + "owner": { + "login": "AzirX1337", + "id": 106775167, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/106775167?v=4", + "html_url": "https:\/\/github.com\/AzirX1337", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/AzirX1337\/CVE-2026-98260-OnePlus16-PYB110-Jailbreak", + "description": "CVE-2026-98260 (exec: posix CPU timer UAF) - one-command temporary root for OnePlus 16 (PYB110) from uid 2000 shell, with KernelSU\/FinaSU handover", + "fork": false, + "created_at": "2026-10-26T05:55:31Z", + "updated_at": "2026-10-26T07:40:26Z", + "pushed_at": "2026-10-26T05:58:27Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "android", + "arm64", + "cve-2026-98260", + "kernel-exploit", + "kernelsu", + "lpe", + "oneplus", + "oneplus16", + "pyb110", + "security-research" + ], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-99999.json b/2026/CVE-2026-99999.json index d67c3f9fab..b42a41a011 100644 --- a/2026/CVE-2026-99999.json +++ b/2026/CVE-2026-99999.json @@ -212,12 +212,12 @@ "description": "CVE-2026-99999 (PwnEscape) reproduction: IPv4 csum_start validation bug — IHL rewrite and 32-byte kernel heap disclosure", "fork": false, "created_at": "2026-10-19T05:06:58Z", - "updated_at": "2026-10-19T20:11:55Z", + "updated_at": "2026-10-26T07:36:44Z", "pushed_at": "2026-10-19T06:34:49Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, - "forks_count": 1, + "forks_count": 2, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -231,8 +231,8 @@ "vulnerability-reproduction" ], "visibility": "public", - "forks": 1, - "watchers": 3, + "forks": 2, + "watchers": 2, "score": 0, "subscribers_count": 0 },