From 31b0c8d8fc2bf5cd1a535853978438f3463aacde Mon Sep 17 00:00:00 2001 From: motikan2010-bot Date: Sat, 24 Oct 2026 04:50:15 +0900 Subject: [PATCH] Auto Update 2026/10/23 19:50:15 --- 2017/CVE-2017-11317.json | 4 +- 2017/CVE-2017-20165.json | 4 +- 2018/CVE-2018-4878.json | 2 +- 2018/CVE-2018-7600.json | 6 +- 2019/CVE-2019-18935.json | 8 +- 2019/CVE-2019-2215.json | 8 +- 2021/CVE-2021-3493.json | 8 +- 2021/CVE-2021-44228.json | 33 + 2022/CVE-2022-0492.json | 8 +- 2022/CVE-2022-0847.json | 4 +- 2022/CVE-2022-26134.json | 4 +- 2023/CVE-2023-20198.json | 8 +- 2023/CVE-2023-32434.json | 8 +- 2024/CVE-2024-12986.json | 8 +- 2024/CVE-2024-23334.json | 33 - 2024/CVE-2024-28157.json | 33 - 2024/CVE-2024-38998.json | 8 +- 2024/CVE-2024-4577.json | 46 +- 2024/CVE-2024-48990.json | 4 +- 2025/CVE-2025-0411.json | 8 +- 2025/CVE-2025-24071.json | 8 +- 2025/CVE-2025-24204.json | 8 +- 2025/CVE-2025-31161.json | 8 +- 2025/CVE-2025-32463.json | 33 - 2025/CVE-2025-32756.json | 8 +- 2025/CVE-2025-36911.json | 39 + 2025/CVE-2025-47227.json | 8 +- 2025/CVE-2025-53770.json | 8 +- 2025/CVE-2025-55575.json | 8 +- 2026/CVE-2026-106173.json | 57 +- 2026/CVE-2026-10961.json | 12 +- 2026/CVE-2026-109618.json | 2114 ++++++++++++++++++++++++++++++------- 2026/CVE-2026-109619.json | 98 +- 2026/CVE-2026-110264.json | 44 +- 2026/CVE-2026-111497.json | 191 +++- 2026/CVE-2026-111943.json | 2 +- 2026/CVE-2026-114509.json | 33 + 2026/CVE-2026-115560.json | 107 ++ 2026/CVE-2026-16723.json | 33 + 2026/CVE-2026-23479.json | 4 +- 2026/CVE-2026-31431.json | 16 +- 2026/CVE-2026-32475.json | 8 +- 2026/CVE-2026-33439.json | 4 +- 2026/CVE-2026-33697.json | 4 +- 2026/CVE-2026-41452.json | 4 +- 2026/CVE-2026-43284.json | 14 +- 2026/CVE-2026-43499.json | 116 +- 2026/CVE-2026-43724.json | 8 +- 2026/CVE-2026-48778.json | 4 +- 2026/CVE-2026-5281.json | 4 +- 2026/CVE-2026-54121.json | 8 +- 2026/CVE-2026-57851.json | 4 +- 2026/CVE-2026-58455.json | 8 +- 2026/CVE-2026-63030.json | 8 +- 2026/CVE-2026-64560.json | 16 +- 2026/CVE-2026-64638.json | 20 +- 2026/CVE-2026-65343.json | 8 +- 2026/CVE-2026-67276.json | 16 +- 2026/CVE-2026-75045.json | 4 +- 2026/CVE-2026-75604.json | 8 +- 2026/CVE-2026-76183.json | 35 + 2026/CVE-2026-76504.json | 33 + 2026/CVE-2026-86478.json | 4 +- 2026/CVE-2026-93834.json | 4 +- 2026/CVE-2026-96652.json | 8 +- 2026/CVE-2026-96889.json | 39 + 2026/CVE-2026-97206.json | 4 +- 2026/CVE-2026-98260.json | 20 +- 68 files changed, 2714 insertions(+), 783 deletions(-) create mode 100644 2026/CVE-2026-115560.json create mode 100644 2026/CVE-2026-76183.json diff --git a/2017/CVE-2017-11317.json b/2017/CVE-2017-11317.json index e870486adb..5e6b97c376 100644 --- a/2017/CVE-2017-11317.json +++ b/2017/CVE-2017-11317.json @@ -19,7 +19,7 @@ "stargazers_count": 179, "watchers_count": 179, "has_discussions": false, - "forks_count": 50, + "forks_count": 51, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 50, + "forks": 51, "watchers": 179, "score": 0, "subscribers_count": 7 diff --git a/2017/CVE-2017-20165.json b/2017/CVE-2017-20165.json index 6015bd99f1..d512bb35da 100644 --- a/2017/CVE-2017-20165.json +++ b/2017/CVE-2017-20165.json @@ -19,7 +19,7 @@ "stargazers_count": 15, "watchers_count": 15, "has_discussions": false, - "forks_count": 16, + "forks_count": 17, "allow_forking": true, "is_template": false, "web_commit_signoff_required": true, @@ -31,7 +31,7 @@ "send" ], "visibility": "public", - "forks": 16, + "forks": 17, "watchers": 15, "score": 0, "subscribers_count": 9 diff --git a/2018/CVE-2018-4878.json b/2018/CVE-2018-4878.json index 3f95c05e19..dcb2c47721 100644 --- a/2018/CVE-2018-4878.json +++ b/2018/CVE-2018-4878.json @@ -65,7 +65,7 @@ "forks": 15, "watchers": 0, "score": 0, - "subscribers_count": 0 + "subscribers_count": 1 }, { "id": 120962825, diff --git a/2018/CVE-2018-7600.json b/2018/CVE-2018-7600.json index 781d9ca095..fd9646f18d 100644 --- a/2018/CVE-2018-7600.json +++ b/2018/CVE-2018-7600.json @@ -113,7 +113,7 @@ "forks": 169, "watchers": 601, "score": 0, - "subscribers_count": 22 + "subscribers_count": 21 }, { "id": 129384553, @@ -1744,7 +1744,7 @@ "description": null, "fork": false, "created_at": "2026-08-20T18:21:55Z", - "updated_at": "2026-09-30T14:08:46Z", + "updated_at": "2026-10-23T14:25:28Z", "pushed_at": "2026-08-20T18:25:40Z", "stargazers_count": 2, "watchers_count": 2, @@ -1760,7 +1760,7 @@ "forks": 0, "watchers": 2, "score": 0, - "subscribers_count": 0 + "subscribers_count": 1 }, { "id": 1403505638, diff --git a/2019/CVE-2019-18935.json b/2019/CVE-2019-18935.json index a9031f27d3..9d5b7ea69e 100644 --- a/2019/CVE-2019-18935.json +++ b/2019/CVE-2019-18935.json @@ -19,7 +19,7 @@ "stargazers_count": 179, "watchers_count": 179, "has_discussions": false, - "forks_count": 50, + "forks_count": 51, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 50, + "forks": 51, "watchers": 179, "score": 0, "subscribers_count": 7 @@ -52,7 +52,7 @@ "stargazers_count": 373, "watchers_count": 373, "has_discussions": false, - "forks_count": 86, + "forks_count": 87, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,7 +60,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 86, + "forks": 87, "watchers": 373, "score": 0, "subscribers_count": 11 diff --git a/2019/CVE-2019-2215.json b/2019/CVE-2019-2215.json index 717271cbe2..dfb30d6d60 100644 --- a/2019/CVE-2019-2215.json +++ b/2019/CVE-2019-2215.json @@ -47,10 +47,10 @@ "description": "Temproot for Pixel 2 and Pixel 2 XL via CVE-2019-2215", "fork": false, "created_at": "2019-10-14T17:27:37Z", - "updated_at": "2026-10-19T14:51:04Z", + "updated_at": "2026-10-23T16:33:46Z", "pushed_at": "2019-10-15T01:04:08Z", - "stargazers_count": 137, - "watchers_count": 137, + "stargazers_count": 138, + "watchers_count": 138, "has_discussions": false, "forks_count": 55, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 55, - "watchers": 137, + "watchers": 138, "score": 0, "subscribers_count": 7 }, diff --git a/2021/CVE-2021-3493.json b/2021/CVE-2021-3493.json index 5f1804c956..a6b06afd79 100644 --- a/2021/CVE-2021-3493.json +++ b/2021/CVE-2021-3493.json @@ -14,10 +14,10 @@ "description": "Ubuntu OverlayFS Local Privesc", "fork": false, "created_at": "2021-04-19T20:07:01Z", - "updated_at": "2026-10-20T19:03:23Z", + "updated_at": "2026-10-23T17:15:41Z", "pushed_at": "2024-04-02T02:48:18Z", - "stargazers_count": 443, - "watchers_count": 443, + "stargazers_count": 444, + "watchers_count": 444, "has_discussions": false, "forks_count": 136, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 136, - "watchers": 443, + "watchers": 444, "score": 0, "subscribers_count": 4 }, diff --git a/2021/CVE-2021-44228.json b/2021/CVE-2021-44228.json index 8ea1e53331..fe06651843 100644 --- a/2021/CVE-2021-44228.json +++ b/2021/CVE-2021-44228.json @@ -16085,5 +16085,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1431253701, + "name": "log4shell-audit-2", + "full_name": "mcpmark-eval-liuhezi\/log4shell-audit-2", + "owner": { + "login": "mcpmark-eval-liuhezi", + "id": 305407873, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/305407873?v=4", + "html_url": "https:\/\/github.com\/mcpmark-eval-liuhezi", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/mcpmark-eval-liuhezi\/log4shell-audit-2", + "description": "Security audit and remediation tracking for Log4Shell (CVE-2021-44228)", + "fork": false, + "created_at": "2026-10-23T15:57:44Z", + "updated_at": "2026-10-23T15:57:51Z", + "pushed_at": "2026-10-23T15:59:26Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2022/CVE-2022-0492.json b/2022/CVE-2022-0492.json index 96cc52ac8b..236d4dc85c 100644 --- a/2022/CVE-2022-0492.json +++ b/2022/CVE-2022-0492.json @@ -14,10 +14,10 @@ "description": "Test whether a container environment is vulnerable to container escapes via CVE-2022-0492", "fork": false, "created_at": "2022-02-28T01:25:26Z", - "updated_at": "2026-05-13T19:49:24Z", + "updated_at": "2026-10-23T18:44:34Z", "pushed_at": "2022-03-09T00:09:46Z", - "stargazers_count": 47, - "watchers_count": 47, + "stargazers_count": 46, + "watchers_count": 46, "has_discussions": false, "forks_count": 17, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 17, - "watchers": 47, + "watchers": 46, "score": 0, "subscribers_count": 4 }, diff --git a/2022/CVE-2022-0847.json b/2022/CVE-2022-0847.json index b9581dde5b..8f15379835 100644 --- a/2022/CVE-2022-0847.json +++ b/2022/CVE-2022-0847.json @@ -1242,7 +1242,7 @@ "stargazers_count": 737, "watchers_count": 737, "has_discussions": false, - "forks_count": 160, + "forks_count": 161, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1250,7 +1250,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 160, + "forks": 161, "watchers": 737, "score": 0, "subscribers_count": 13 diff --git a/2022/CVE-2022-26134.json b/2022/CVE-2022-26134.json index 509540e33c..949de6232b 100644 --- a/2022/CVE-2022-26134.json +++ b/2022/CVE-2022-26134.json @@ -2475,8 +2475,8 @@ "description": null, "fork": false, "created_at": "2026-05-06T01:47:50Z", - "updated_at": "2026-10-23T05:06:48Z", - "pushed_at": "2026-10-23T05:06:43Z", + "updated_at": "2026-10-23T17:22:58Z", + "pushed_at": "2026-10-23T17:22:52Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2023/CVE-2023-20198.json b/2023/CVE-2023-20198.json index 6c05ba0adf..3dd9ec881d 100644 --- a/2023/CVE-2023-20198.json +++ b/2023/CVE-2023-20198.json @@ -650,10 +650,10 @@ "description": "CVE-2023-20198 Exploit PoC", "fork": false, "created_at": "2023-11-16T16:39:38Z", - "updated_at": "2026-08-07T02:19:04Z", + "updated_at": "2026-10-23T16:55:37Z", "pushed_at": "2026-03-26T20:39:56Z", - "stargazers_count": 66, - "watchers_count": 66, + "stargazers_count": 67, + "watchers_count": 67, "has_discussions": false, "forks_count": 18, "allow_forking": true, @@ -664,7 +664,7 @@ "topics": [], "visibility": "public", "forks": 18, - "watchers": 66, + "watchers": 67, "score": 0, "subscribers_count": 1 }, diff --git a/2023/CVE-2023-32434.json b/2023/CVE-2023-32434.json index 9de9db377b..e86e733333 100644 --- a/2023/CVE-2023-32434.json +++ b/2023/CVE-2023-32434.json @@ -14,10 +14,10 @@ "description": "Deterministic kernel exploit based on CVE-2023-32434.", "fork": false, "created_at": "2025-03-01T23:07:37Z", - "updated_at": "2026-10-21T06:11:55Z", + "updated_at": "2026-10-23T13:18:23Z", "pushed_at": "2026-10-17T11:47:41Z", - "stargazers_count": 155, - "watchers_count": 155, + "stargazers_count": 156, + "watchers_count": 156, "has_discussions": false, "forks_count": 19, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 19, - "watchers": 155, + "watchers": 156, "score": 0, "subscribers_count": 5 }, diff --git a/2024/CVE-2024-12986.json b/2024/CVE-2024-12986.json index 3e7b493478..861a4291de 100644 --- a/2024/CVE-2024-12986.json +++ b/2024/CVE-2024-12986.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2025-01-04T14:47:09Z", - "updated_at": "2026-10-17T17:12:38Z", + "updated_at": "2026-10-23T18:48:07Z", "pushed_at": "2025-01-04T14:58:25Z", - "stargazers_count": 175, - "watchers_count": 175, + "stargazers_count": 174, + "watchers_count": 174, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 175, + "watchers": 174, "score": 0, "subscribers_count": 173 } diff --git a/2024/CVE-2024-23334.json b/2024/CVE-2024-23334.json index 6916c62fe2..d106bfc429 100644 --- a/2024/CVE-2024-23334.json +++ b/2024/CVE-2024-23334.json @@ -475,39 +475,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1421080618, - "name": "Driftnet", - "full_name": "begzodxasanboev\/Driftnet", - "owner": { - "login": "begzodxasanboev", - "id": 269120561, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/269120561?v=4", - "html_url": "https:\/\/github.com\/begzodxasanboev", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/begzodxasanboev\/Driftnet", - "description": "CTF writeup: rooting a Linux box via CVE-2024-23334 (directory traversal) and CVE-2025-32463 (sudo privilege escalation)", - "fork": false, - "created_at": "2026-10-15T17:12:39Z", - "updated_at": "2026-10-17T19:11:14Z", - "pushed_at": "2026-10-17T19:11:11Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1425138191, "name": "hdu-is-lab1-secure-api", diff --git a/2024/CVE-2024-28157.json b/2024/CVE-2024-28157.json index 668b8edec1..2f038e6bf3 100644 --- a/2024/CVE-2024-28157.json +++ b/2024/CVE-2024-28157.json @@ -31,38 +31,5 @@ "watchers": 0, "score": 0, "subscribers_count": 0 - }, - { - "id": 1376443640, - "name": "PoC_CVE-2024-28157", - "full_name": "Jayesh-Dev21\/PoC_CVE-2024-28157", - "owner": { - "login": "Jayesh-Dev21", - "id": 84006107, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/84006107?v=4", - "html_url": "https:\/\/github.com\/Jayesh-Dev21", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Jayesh-Dev21\/PoC_CVE-2024-28157", - "description": "PoC for (CVE-2024-28157) Stored XSS in Jenkins GitBucket Plugin <= 0.8", - "fork": false, - "created_at": "2026-09-18T21:19:33Z", - "updated_at": "2026-09-18T22:21:01Z", - "pushed_at": "2026-09-18T22:20:57Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2024/CVE-2024-38998.json b/2024/CVE-2024-38998.json index 73faf4a83f..e720e01cc6 100644 --- a/2024/CVE-2024-38998.json +++ b/2024/CVE-2024-38998.json @@ -2,15 +2,15 @@ { "id": 913713750, "name": "PP_CVE-2024-38998", - "full_name": "cesarbtakeda\/PP_CVE-2024-38998", + "full_name": "c4bsec\/PP_CVE-2024-38998", "owner": { - "login": "cesarbtakeda", + "login": "c4bsec", "id": 114227831, "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/114227831?v=4", - "html_url": "https:\/\/github.com\/cesarbtakeda", + "html_url": "https:\/\/github.com\/c4bsec", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/cesarbtakeda\/PP_CVE-2024-38998", + "html_url": "https:\/\/github.com\/c4bsec\/PP_CVE-2024-38998", "description": null, "fork": false, "created_at": "2025-01-08T08:04:54Z", diff --git a/2024/CVE-2024-4577.json b/2024/CVE-2024-4577.json index 400ef0c943..24e3293e7b 100644 --- a/2024/CVE-2024-4577.json +++ b/2024/CVE-2024-4577.json @@ -2394,8 +2394,8 @@ "description": "PHP2Shell Sentinel is an intelligent, zero-dependency, low-resource cross-platform defense daemon to detect, log, prevent, and actively mitigate php2shell exploits (CVE-2026-109618 & CVE-2026-109619, plus CVE-2024-4577) on both Linux and Windows servers", "fork": false, "created_at": "2026-10-23T10:56:58Z", - "updated_at": "2026-10-23T12:10:12Z", - "pushed_at": "2026-10-23T12:10:08Z", + "updated_at": "2026-10-23T16:03:40Z", + "pushed_at": "2026-10-23T16:03:36Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -2409,14 +2409,54 @@ "cve", "cve-2026-109618", "cve-2026-109619", + "php", + "php-fpm", + "php-library", "php2shell", "php2shell-fix", - "php2shell-scanner" + "php2shell-scanner", + "php5", + "php7", + "php74", + "php8" ], "visibility": "public", "forks": 0, "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1431204669, + "name": "POC-CVE-2026-109618-CVE-2026-109619-CVE-2024-4577", + "full_name": "Ghost-Bx1\/POC-CVE-2026-109618-CVE-2026-109619-CVE-2024-4577", + "owner": { + "login": "Ghost-Bx1", + "id": 103540917, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103540917?v=4", + "html_url": "https:\/\/github.com\/Ghost-Bx1", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Ghost-Bx1\/POC-CVE-2026-109618-CVE-2026-109619-CVE-2024-4577", + "description": null, + "fork": false, + "created_at": "2026-10-23T15:14:01Z", + "updated_at": "2026-10-23T15:19:39Z", + "pushed_at": "2026-10-23T15:19:34Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2024/CVE-2024-48990.json b/2024/CVE-2024-48990.json index 02fc3ee342..27ec5b7876 100644 --- a/2024/CVE-2024-48990.json +++ b/2024/CVE-2024-48990.json @@ -484,8 +484,8 @@ "description": "an exploit for CVE-2024-48990 ( Local Privilege Escalation ) in needrestart ", "fork": false, "created_at": "2025-12-16T15:59:02Z", - "updated_at": "2026-03-31T05:32:20Z", - "pushed_at": "2025-12-16T16:12:33Z", + "updated_at": "2026-10-23T14:23:27Z", + "pushed_at": "2026-10-23T14:23:23Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2025/CVE-2025-0411.json b/2025/CVE-2025-0411.json index 7511881010..4489e18e40 100644 --- a/2025/CVE-2025-0411.json +++ b/2025/CVE-2025-0411.json @@ -108,15 +108,15 @@ { "id": 937428817, "name": "7-Zip-CVE-2025-0411-POC", - "full_name": "cesarbtakeda\/7-Zip-CVE-2025-0411-POC", + "full_name": "c4bsec\/7-Zip-CVE-2025-0411-POC", "owner": { - "login": "cesarbtakeda", + "login": "c4bsec", "id": 114227831, "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/114227831?v=4", - "html_url": "https:\/\/github.com\/cesarbtakeda", + "html_url": "https:\/\/github.com\/c4bsec", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/cesarbtakeda\/7-Zip-CVE-2025-0411-POC", + "html_url": "https:\/\/github.com\/c4bsec\/7-Zip-CVE-2025-0411-POC", "description": null, "fork": false, "created_at": "2025-02-23T02:55:44Z", diff --git a/2025/CVE-2025-24071.json b/2025/CVE-2025-24071.json index b3db4de411..d0946cdeed 100644 --- a/2025/CVE-2025-24071.json +++ b/2025/CVE-2025-24071.json @@ -287,15 +287,15 @@ { "id": 957167291, "name": "Windows-Explorer-CVE-2025-24071", - "full_name": "cesarbtakeda\/Windows-Explorer-CVE-2025-24071", + "full_name": "c4bsec\/Windows-Explorer-CVE-2025-24071", "owner": { - "login": "cesarbtakeda", + "login": "c4bsec", "id": 114227831, "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/114227831?v=4", - "html_url": "https:\/\/github.com\/cesarbtakeda", + "html_url": "https:\/\/github.com\/c4bsec", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/cesarbtakeda\/Windows-Explorer-CVE-2025-24071", + "html_url": "https:\/\/github.com\/c4bsec\/Windows-Explorer-CVE-2025-24071", "description": null, "fork": false, "created_at": "2025-03-29T18:00:29Z", diff --git a/2025/CVE-2025-24204.json b/2025/CVE-2025-24204.json index e6e5ab118a..eb31bc35c4 100644 --- a/2025/CVE-2025-24204.json +++ b/2025/CVE-2025-24204.json @@ -14,10 +14,10 @@ "description": "PoC and technical details of CVE-2025-24204", "fork": false, "created_at": "2025-08-15T08:48:37Z", - "updated_at": "2026-10-22T10:20:43Z", + "updated_at": "2026-10-23T19:02:39Z", "pushed_at": "2025-10-07T01:54:24Z", - "stargazers_count": 116, - "watchers_count": 116, + "stargazers_count": 117, + "watchers_count": 117, "has_discussions": false, "forks_count": 17, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 17, - "watchers": 116, + "watchers": 117, "score": 0, "subscribers_count": 0 }, diff --git a/2025/CVE-2025-31161.json b/2025/CVE-2025-31161.json index b02089fa3d..b0397035f3 100644 --- a/2025/CVE-2025-31161.json +++ b/2025/CVE-2025-31161.json @@ -365,15 +365,15 @@ { "id": 1080674716, "name": "CVE-2025-31161", - "full_name": "cesarbtakeda\/CVE-2025-31161", + "full_name": "c4bsec\/CVE-2025-31161", "owner": { - "login": "cesarbtakeda", + "login": "c4bsec", "id": 114227831, "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/114227831?v=4", - "html_url": "https:\/\/github.com\/cesarbtakeda", + "html_url": "https:\/\/github.com\/c4bsec", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/cesarbtakeda\/CVE-2025-31161", + "html_url": "https:\/\/github.com\/c4bsec\/CVE-2025-31161", "description": null, "fork": false, "created_at": "2025-10-21T17:49:57Z", diff --git a/2025/CVE-2025-32463.json b/2025/CVE-2025-32463.json index ec5e5e14aa..a424480376 100644 --- a/2025/CVE-2025-32463.json +++ b/2025/CVE-2025-32463.json @@ -2425,38 +2425,5 @@ "watchers": 1, "score": 0, "subscribers_count": 0 - }, - { - "id": 1421080618, - "name": "Driftnet", - "full_name": "begzodxasanboev\/Driftnet", - "owner": { - "login": "begzodxasanboev", - "id": 269120561, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/269120561?v=4", - "html_url": "https:\/\/github.com\/begzodxasanboev", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/begzodxasanboev\/Driftnet", - "description": "CTF writeup: rooting a Linux box via CVE-2024-23334 (directory traversal) and CVE-2025-32463 (sudo privilege escalation)", - "fork": false, - "created_at": "2026-10-15T17:12:39Z", - "updated_at": "2026-10-17T19:11:14Z", - "pushed_at": "2026-10-17T19:11:11Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2025/CVE-2025-32756.json b/2025/CVE-2025-32756.json index b109b4ee2c..eeb73d02cc 100644 --- a/2025/CVE-2025-32756.json +++ b/2025/CVE-2025-32756.json @@ -47,10 +47,10 @@ "description": "Proof of Concept for CVE-2025-32756 - A critical stack-based buffer overflow vulnerability affecting multiple Fortinet products.", "fork": false, "created_at": "2025-06-05T14:16:31Z", - "updated_at": "2026-10-19T21:25:58Z", + "updated_at": "2026-10-23T14:13:37Z", "pushed_at": "2025-06-13T07:55:34Z", - "stargazers_count": 192, - "watchers_count": 192, + "stargazers_count": 191, + "watchers_count": 191, "has_discussions": false, "forks_count": 29, "allow_forking": true, @@ -66,7 +66,7 @@ ], "visibility": "public", "forks": 29, - "watchers": 192, + "watchers": 191, "score": 0, "subscribers_count": 6 }, diff --git a/2025/CVE-2025-36911.json b/2025/CVE-2025-36911.json index 169cdad913..806d957895 100644 --- a/2025/CVE-2025-36911.json +++ b/2025/CVE-2025-36911.json @@ -137,6 +137,45 @@ "score": 0, "subscribers_count": 0 }, + { + "id": 1137565232, + "name": "wpair-cli", + "full_name": "markmysler\/wpair-cli", + "owner": { + "login": "markmysler", + "id": 104447445, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/104447445?v=4", + "html_url": "https:\/\/github.com\/markmysler", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/markmysler\/wpair-cli", + "description": "Defensive scanner for CVE-2025-36911, the Google Fast Pair Bluetooth vulnerability.", + "fork": false, + "created_at": "2026-01-19T14:36:43Z", + "updated_at": "2026-10-23T16:30:54Z", + "pushed_at": "2026-01-19T14:50:58Z", + "stargazers_count": 2, + "watchers_count": 2, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "bluetooth", + "cve", + "cybersecurity", + "python", + "vulnerability-scanner" + ], + "visibility": "public", + "forks": 0, + "watchers": 2, + "score": 0, + "subscribers_count": 0 + }, { "id": 1138002588, "name": "FrostedFastPair", diff --git a/2025/CVE-2025-47227.json b/2025/CVE-2025-47227.json index 3ac51392a8..c018d6dbe3 100644 --- a/2025/CVE-2025-47227.json +++ b/2025/CVE-2025-47227.json @@ -14,10 +14,10 @@ "description": "ScriptCase Pre-Authenticated Remote Command Execution exploitation script (CVE-2025-47227, CVE-2025-47228).", "fork": false, "created_at": "2025-05-09T07:34:36Z", - "updated_at": "2026-08-22T17:51:58Z", + "updated_at": "2026-10-23T16:45:07Z", "pushed_at": "2025-05-14T07:39:28Z", - "stargazers_count": 11, - "watchers_count": 11, + "stargazers_count": 12, + "watchers_count": 12, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -33,7 +33,7 @@ ], "visibility": "public", "forks": 2, - "watchers": 11, + "watchers": 12, "score": 0, "subscribers_count": 0 } diff --git a/2025/CVE-2025-53770.json b/2025/CVE-2025-53770.json index e1372acb63..520bfa2043 100644 --- a/2025/CVE-2025-53770.json +++ b/2025/CVE-2025-53770.json @@ -80,10 +80,10 @@ "description": "POC", "fork": false, "created_at": "2025-07-21T06:39:21Z", - "updated_at": "2026-02-11T03:07:07Z", + "updated_at": "2026-10-23T19:03:47Z", "pushed_at": "2025-07-21T13:52:29Z", - "stargazers_count": 43, - "watchers_count": 43, + "stargazers_count": 44, + "watchers_count": 44, "has_discussions": false, "forks_count": 20, "allow_forking": true, @@ -94,7 +94,7 @@ "topics": [], "visibility": "public", "forks": 20, - "watchers": 43, + "watchers": 44, "score": 0, "subscribers_count": 0 }, diff --git a/2025/CVE-2025-55575.json b/2025/CVE-2025-55575.json index 9c579ac271..4e58eb27ec 100644 --- a/2025/CVE-2025-55575.json +++ b/2025/CVE-2025-55575.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2025-08-22T19:04:24Z", - "updated_at": "2026-10-17T17:12:39Z", + "updated_at": "2026-10-23T18:48:07Z", "pushed_at": "2025-08-25T18:42:48Z", - "stargazers_count": 174, - "watchers_count": 174, + "stargazers_count": 173, + "watchers_count": 173, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 174, + "watchers": 173, "score": 0, "subscribers_count": 172 } diff --git a/2026/CVE-2026-106173.json b/2026/CVE-2026-106173.json index 22ceb68c4a..41f0784bfa 100644 --- a/2026/CVE-2026-106173.json +++ b/2026/CVE-2026-106173.json @@ -14,10 +14,10 @@ "description": "Proof of concept exploit for CVE-2026-106173, a path traversal file write leading to RCE for Fortinet FortiSIEM", "fork": false, "created_at": "2026-10-20T12:29:09Z", - "updated_at": "2026-10-23T11:14:44Z", + "updated_at": "2026-10-23T19:16:48Z", "pushed_at": "2026-10-20T12:43:37Z", - "stargazers_count": 14, - "watchers_count": 14, + "stargazers_count": 15, + "watchers_count": 15, "has_discussions": false, "forks_count": 5, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 5, - "watchers": 14, + "watchers": 15, "score": 0, "subscribers_count": 1 }, @@ -47,10 +47,10 @@ "description": "CVE-2026-106173", "fork": false, "created_at": "2026-10-20T14:59:39Z", - "updated_at": "2026-10-21T10:46:08Z", + "updated_at": "2026-10-23T19:16:51Z", "pushed_at": "2026-10-20T15:09:44Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, @@ -80,10 +80,10 @@ "description": "CVE-2026-106173 – FortiSIEM phQueryMaster RCE (CVSS 9.8) | Red\/Blue Team suite for unpatched FortiSIEM 7.5.0. 2 tools: Full Exploit (multi-primitive RCE, reverse shell, persistence, creds, readback, mass scan, Tor), Blue Team Checker (exposure detection, HTTP\/2 fingerprint, reporting, audit). Only Use Ethically, Stay Legal <3", "fork": false, "created_at": "2026-10-22T17:17:56Z", - "updated_at": "2026-10-22T18:55:55Z", + "updated_at": "2026-10-23T19:16:52Z", "pushed_at": "2026-10-22T17:25:17Z", - "stargazers_count": 4, - "watchers_count": 4, + "stargazers_count": 5, + "watchers_count": 5, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -109,7 +109,40 @@ ], "visibility": "public", "forks": 0, - "watchers": 4, + "watchers": 5, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431312257, + "name": "rce-FortiSIEM", + "full_name": "MRdark-ops\/rce-FortiSIEM", + "owner": { + "login": "MRdark-ops", + "id": 145036159, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/145036159?v=4", + "html_url": "https:\/\/github.com\/MRdark-ops", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/MRdark-ops\/rce-FortiSIEM", + "description": "Proof of concept exploit for CVE-2026-106173, a path traversal file write leading to RCE for Fortinet FortiSIEM", + "fork": false, + "created_at": "2026-10-23T16:51:52Z", + "updated_at": "2026-10-23T19:16:51Z", + "pushed_at": "2026-10-23T16:53:11Z", + "stargazers_count": 2, + "watchers_count": 2, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 2, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-10961.json b/2026/CVE-2026-10961.json index af11467d38..7b1fd812e6 100644 --- a/2026/CVE-2026-10961.json +++ b/2026/CVE-2026-10961.json @@ -14,12 +14,12 @@ "description": "PHP CVE-2026-109618\/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12", "fork": false, "created_at": "2026-10-20T19:16:47Z", - "updated_at": "2026-10-23T09:48:33Z", + "updated_at": "2026-10-23T19:14:49Z", "pushed_at": "2026-10-23T07:20:19Z", - "stargazers_count": 103, - "watchers_count": 103, + "stargazers_count": 105, + "watchers_count": 105, "has_discussions": false, - "forks_count": 21, + "forks_count": 22, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -38,8 +38,8 @@ "session-upload-progress" ], "visibility": "public", - "forks": 21, - "watchers": 103, + "forks": 22, + "watchers": 105, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-109618.json b/2026/CVE-2026-109618.json index 630a8328d4..46dbb777a5 100644 --- a/2026/CVE-2026-109618.json +++ b/2026/CVE-2026-109618.json @@ -14,10 +14,10 @@ "description": "Zeek and Suricata Detections for \"php2shell\" CVE-2026-109618 and CVE-2026-109619", "fork": false, "created_at": "2026-10-18T06:43:48Z", - "updated_at": "2026-10-23T02:36:01Z", + "updated_at": "2026-10-23T18:02:40Z", "pushed_at": "2026-10-21T14:35:20Z", - "stargazers_count": 7, - "watchers_count": 7, + "stargazers_count": 9, + "watchers_count": 9, "has_discussions": false, "forks_count": 5, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 5, - "watchers": 7, + "watchers": 9, "score": 0, "subscribers_count": 1 }, @@ -85,7 +85,7 @@ "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, - "forks_count": 43, + "forks_count": 42, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -93,7 +93,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 43, + "forks": 42, "watchers": 0, "score": 0, "subscribers_count": 0 @@ -179,10 +179,10 @@ "description": "Offline, reproducible lab to safely analyse an untrusted PoC for CVE-2026-109618\/109619 and build detection rules. No exploit included; bring your own sample.", "fork": false, "created_at": "2026-10-21T03:36:08Z", - "updated_at": "2026-10-23T11:49:12Z", + "updated_at": "2026-10-23T14:04:55Z", "pushed_at": "2026-10-21T15:23:02Z", - "stargazers_count": 29, - "watchers_count": 29, + "stargazers_count": 30, + "watchers_count": 30, "has_discussions": false, "forks_count": 9, "allow_forking": true, @@ -193,7 +193,7 @@ "topics": [], "visibility": "public", "forks": 9, - "watchers": 29, + "watchers": 30, "score": 0, "subscribers_count": 0 }, @@ -212,10 +212,10 @@ "description": "Defensive mitigation and testing toolkit for PHP security vulnerabilities (CVE-2026-109618, CVE-2026-109619, CVE-2026-115560), including Apache protections and PHP hardening guidance", "fork": false, "created_at": "2026-10-21T04:01:24Z", - "updated_at": "2026-10-23T12:05:40Z", + "updated_at": "2026-10-23T16:54:45Z", "pushed_at": "2026-10-23T11:59:53Z", - "stargazers_count": 99, - "watchers_count": 99, + "stargazers_count": 102, + "watchers_count": 102, "has_discussions": false, "forks_count": 10, "allow_forking": true, @@ -236,7 +236,7 @@ ], "visibility": "public", "forks": 10, - "watchers": 99, + "watchers": 102, "score": 0, "subscribers_count": 2 }, @@ -288,12 +288,12 @@ "description": "CVE-2026-109618\/109619 — PHP session.upload_progress pre-auth RCE. Exploit research: remote ASLR chain, PoC & patch analysis.", "fork": false, "created_at": "2026-10-21T04:38:46Z", - "updated_at": "2026-10-23T06:55:13Z", + "updated_at": "2026-10-23T19:15:03Z", "pushed_at": "2026-10-23T03:10:28Z", - "stargazers_count": 37, - "watchers_count": 37, + "stargazers_count": 41, + "watchers_count": 41, "has_discussions": false, - "forks_count": 19, + "forks_count": 21, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -315,8 +315,8 @@ "vulnerability-research" ], "visibility": "public", - "forks": 19, - "watchers": 37, + "forks": 21, + "watchers": 41, "score": 0, "subscribers_count": 0 }, @@ -573,12 +573,12 @@ "description": "PHP CVE-2026-109618\/-109619 research archive — default-128M full-chain RCE, Chain B var_destroy UAF alive on 8.4.27, official patch analysis, detection rules", "fork": false, "created_at": "2026-10-21T07:29:15Z", - "updated_at": "2026-10-23T11:29:03Z", + "updated_at": "2026-10-23T15:12:37Z", "pushed_at": "2026-10-23T11:29:00Z", - "stargazers_count": 7, - "watchers_count": 7, + "stargazers_count": 8, + "watchers_count": 8, "has_discussions": false, - "forks_count": 3, + "forks_count": 4, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -586,8 +586,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 3, - "watchers": 7, + "forks": 4, + "watchers": 8, "score": 0, "subscribers_count": 0 }, @@ -672,10 +672,10 @@ "description": "One-line mitigation for php2shell (CVE-2026-109618 \/ CVE-2026-109619): disables session.upload_progress across all PHP installs", "fork": false, "created_at": "2026-10-21T07:45:57Z", - "updated_at": "2026-10-23T07:49:07Z", - "pushed_at": "2026-10-23T06:40:17Z", - "stargazers_count": 6, - "watchers_count": 6, + "updated_at": "2026-10-23T18:47:51Z", + "pushed_at": "2026-10-23T14:19:24Z", + "stargazers_count": 7, + "watchers_count": 7, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -686,7 +686,7 @@ "topics": [], "visibility": "public", "forks": 3, - "watchers": 6, + "watchers": 7, "score": 0, "subscribers_count": 0 }, @@ -705,12 +705,12 @@ "description": "CVE-2026-109618\/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.", "fork": false, "created_at": "2026-10-21T07:55:16Z", - "updated_at": "2026-10-23T13:50:42Z", + "updated_at": "2026-10-23T19:50:49Z", "pushed_at": "2026-10-22T22:41:36Z", - "stargazers_count": 1638, - "watchers_count": 1638, + "stargazers_count": 1670, + "watchers_count": 1670, "has_discussions": false, - "forks_count": 582, + "forks_count": 586, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -733,8 +733,8 @@ "wordpress-security" ], "visibility": "public", - "forks": 582, - "watchers": 1638, + "forks": 586, + "watchers": 1670, "score": 0, "subscribers_count": 5 }, @@ -861,11 +861,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/PasqualePillitteri\/php2shell-hardening", - "description": "Mitigations for PHP installs that cannot update yet: CVE-2026-109618 \/ CVE-2026-109619 (php2shell). Edge rules, auth before PHP, request limits, PHP settings. Unofficial. The real fix is updating PHP.", + "description": "Mitigations for PHP installs that cannot update yet: CVE-2026-109618 \/ CVE-2026-109619 (php2shell) and CVE-2026-115560. Edge rules, auth before PHP, request limits, PHP settings. Unofficial. The real fix is updating PHP.", "fork": false, "created_at": "2026-10-21T08:24:32Z", - "updated_at": "2026-10-22T23:05:49Z", - "pushed_at": "2026-10-22T07:59:26Z", + "updated_at": "2026-10-23T16:15:28Z", + "pushed_at": "2026-10-23T16:15:23Z", "stargazers_count": 7, "watchers_count": 7, "has_discussions": false, @@ -1006,12 +1006,12 @@ "description": "Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 \/ CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.", "fork": false, "created_at": "2026-10-21T08:31:43Z", - "updated_at": "2026-10-23T13:41:06Z", + "updated_at": "2026-10-23T19:44:54Z", "pushed_at": "2026-10-22T07:19:20Z", - "stargazers_count": 941, - "watchers_count": 941, + "stargazers_count": 957, + "watchers_count": 957, "has_discussions": false, - "forks_count": 230, + "forks_count": 240, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1019,8 +1019,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 230, - "watchers": 941, + "forks": 240, + "watchers": 957, "score": 0, "subscribers_count": 36 }, @@ -1039,10 +1039,10 @@ "description": "Protects an unpatched PHP against php2shell (CVE-2026-109618 \/ CVE-2026-109619): a small extension that mirrors the official fix component by component and steps aside once the engine carries it. PHP 5.6-8.5; Sury, cPanel EA4, DirectAdmin, Docker, Windows.", "fork": false, "created_at": "2026-10-21T09:00:12Z", - "updated_at": "2026-10-23T13:33:01Z", - "pushed_at": "2026-10-23T12:13:50Z", - "stargazers_count": 132, - "watchers_count": 132, + "updated_at": "2026-10-23T19:14:43Z", + "pushed_at": "2026-10-23T15:17:44Z", + "stargazers_count": 138, + "watchers_count": 138, "has_discussions": false, "forks_count": 9, "allow_forking": true, @@ -1061,7 +1061,7 @@ ], "visibility": "public", "forks": 9, - "watchers": 132, + "watchers": 138, "score": 0, "subscribers_count": 3 }, @@ -1080,8 +1080,8 @@ "description": "php2shell | CVE-2026-109618 & CVE-2026-109619", "fork": false, "created_at": "2026-10-21T09:05:58Z", - "updated_at": "2026-10-23T13:44:34Z", - "pushed_at": "2026-10-23T13:44:30Z", + "updated_at": "2026-10-23T17:26:34Z", + "pushed_at": "2026-10-23T17:26:29Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -1233,10 +1233,10 @@ "description": "Local-only PoC lab for CVE-2026-109618 \/ CVE-2026-109619 (php2shell) — two critical RCEs in PHP core, session.upload_progress, on by default since 5.4. Docker A\/B (vulnerable vs patched builds), race harness, ASAN proof.", "fork": false, "created_at": "2026-10-21T09:34:20Z", - "updated_at": "2026-10-23T13:39:24Z", + "updated_at": "2026-10-23T16:45:23Z", "pushed_at": "2026-10-21T16:43:40Z", - "stargazers_count": 9, - "watchers_count": 9, + "stargazers_count": 10, + "watchers_count": 10, "has_discussions": false, "forks_count": 4, "allow_forking": true, @@ -1258,7 +1258,7 @@ ], "visibility": "public", "forks": 4, - "watchers": 9, + "watchers": 10, "score": 0, "subscribers_count": 0 }, @@ -1495,10 +1495,10 @@ "description": "CVE-2026-109618\/109619 PHP2Shell — Heap UAF PoC (crash + RCE framework)", "fork": false, "created_at": "2026-10-21T10:44:37Z", - "updated_at": "2026-10-23T13:39:57Z", + "updated_at": "2026-10-23T19:15:04Z", "pushed_at": "2026-10-22T08:15:35Z", - "stargazers_count": 50, - "watchers_count": 50, + "stargazers_count": 51, + "watchers_count": 51, "has_discussions": false, "forks_count": 25, "allow_forking": true, @@ -1509,7 +1509,7 @@ "topics": [], "visibility": "public", "forks": 25, - "watchers": 50, + "watchers": 51, "score": 0, "subscribers_count": 0 }, @@ -1825,12 +1825,12 @@ "description": null, "fork": false, "created_at": "2026-10-21T11:52:39Z", - "updated_at": "2026-10-23T13:53:31Z", + "updated_at": "2026-10-23T19:05:48Z", "pushed_at": "2026-10-21T11:52:57Z", - "stargazers_count": 136, - "watchers_count": 136, + "stargazers_count": 139, + "watchers_count": 139, "has_discussions": false, - "forks_count": 81, + "forks_count": 82, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1838,8 +1838,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 81, - "watchers": 136, + "forks": 82, + "watchers": 139, "score": 0, "subscribers_count": 0 }, @@ -2002,12 +2002,12 @@ "description": "🐘 php2shell（CVE-2026-109618 \/ CVE-2026-109619）复现靶场 — session.upload_progress 文件名注入 + LFI → RCE，Docker 一键启动，附中文原理分析与 PoC", "fork": false, "created_at": "2026-10-21T12:36:55Z", - "updated_at": "2026-10-23T13:49:39Z", + "updated_at": "2026-10-23T18:16:03Z", "pushed_at": "2026-10-21T14:38:46Z", - "stargazers_count": 27, - "watchers_count": 27, + "stargazers_count": 28, + "watchers_count": 28, "has_discussions": false, - "forks_count": 5, + "forks_count": 6, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -2027,8 +2027,8 @@ "vulnerability" ], "visibility": "public", - "forks": 5, - "watchers": 27, + "forks": 6, + "watchers": 28, "score": 0, "subscribers_count": 0 }, @@ -2044,15 +2044,15 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/murrez\/php2shell", - "description": "php2shell: Advanced hybrid exploit framework for CVE-2026-109618\/109619. Features Auto-LFI parameter discovery, SAPI profiling, OOM fuzzing calibration, and FPM worker pinning. Stdlib only.", + "description": "php2shell: Advanced hybrid exploit framework for CVE-2026-109618, CVE-2026-109619 & CVE-2026-115560. Features Auto-LFI parameter discovery, SAPI profiling, OOM fuzzing calibration, and FPM worker pinning. Stdlib only.", "fork": false, "created_at": "2026-10-21T12:37:59Z", - "updated_at": "2026-10-23T13:49:10Z", - "pushed_at": "2026-10-23T13:49:05Z", - "stargazers_count": 51, - "watchers_count": 51, + "updated_at": "2026-10-23T17:56:27Z", + "pushed_at": "2026-10-23T15:07:53Z", + "stargazers_count": 56, + "watchers_count": 56, "has_discussions": false, - "forks_count": 21, + "forks_count": 23, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -2060,8 +2060,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 21, - "watchers": 51, + "forks": 23, + "watchers": 56, "score": 0, "subscribers_count": 0 }, @@ -2493,7 +2493,7 @@ "stargazers_count": 7, "watchers_count": 7, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -2501,7 +2501,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 7, "score": 0, "subscribers_count": 1 @@ -2866,7 +2866,7 @@ "stargazers_count": 9, "watchers_count": 9, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -2878,7 +2878,7 @@ "php" ], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 9, "score": 0, "subscribers_count": 0 @@ -3001,10 +3001,10 @@ "description": null, "fork": false, "created_at": "2026-10-21T14:20:15Z", - "updated_at": "2026-10-22T19:24:09Z", + "updated_at": "2026-10-23T19:15:02Z", "pushed_at": "2026-10-21T14:22:36Z", - "stargazers_count": 44, - "watchers_count": 44, + "stargazers_count": 45, + "watchers_count": 45, "has_discussions": false, "forks_count": 16, "allow_forking": true, @@ -3015,7 +3015,7 @@ "topics": [], "visibility": "public", "forks": 16, - "watchers": 44, + "watchers": 45, "score": 0, "subscribers_count": 0 }, @@ -3034,10 +3034,10 @@ "description": "Minimal source backports of the PHP core RCE fixes (CVE-2026-109618 \/ CVE-2026-109619) for EOL PHP 5.4 and 7.3", "fork": false, "created_at": "2026-10-21T14:20:57Z", - "updated_at": "2026-10-23T11:33:08Z", + "updated_at": "2026-10-23T18:11:38Z", "pushed_at": "2026-10-22T18:37:16Z", - "stargazers_count": 46, - "watchers_count": 46, + "stargazers_count": 48, + "watchers_count": 48, "has_discussions": false, "forks_count": 9, "allow_forking": true, @@ -3048,7 +3048,7 @@ "topics": [], "visibility": "public", "forks": 9, - "watchers": 46, + "watchers": 48, "score": 0, "subscribers_count": 0 }, @@ -3100,10 +3100,10 @@ "description": "CVE-2026-109618 \/ CVE-2026-109619 Pre-auth RCE through PHP (session.upload_progress)", "fork": false, "created_at": "2026-10-21T14:23:30Z", - "updated_at": "2026-10-23T09:55:51Z", + "updated_at": "2026-10-23T19:14:54Z", "pushed_at": "2026-10-22T07:55:29Z", - "stargazers_count": 8, - "watchers_count": 8, + "stargazers_count": 10, + "watchers_count": 10, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -3117,7 +3117,7 @@ ], "visibility": "public", "forks": 1, - "watchers": 8, + "watchers": 10, "score": 0, "subscribers_count": 0 }, @@ -3209,10 +3209,10 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/wind884\/CVE-2026-109618-109619-PHP2Shell", - "description": "CVE-2026-109618 \/ CVE-2026-109619 (PHP2Shell): PHP RCE source audit, request lifecycle analysis and upstream patch review | PHP RCE 源码审计与补丁分析", + "description": "PHP2Shell · CVE-2026-109618 \/ CVE-2026-109619 的 PHP RCE 源码审计与补丁分析 | PHP remote code execution source audit, request lifecycle analysis and upstream patch review", "fork": false, "created_at": "2026-10-21T14:36:21Z", - "updated_at": "2026-10-22T16:56:30Z", + "updated_at": "2026-10-23T18:48:03Z", "pushed_at": "2026-10-21T14:58:54Z", "stargazers_count": 1, "watchers_count": 1, @@ -3224,10 +3224,20 @@ "has_pull_requests": true, "pull_request_creation_policy": "all", "topics": [ + "cve", "cve-2026-109618", "cve-2026-109619", + "memory-safety", + "patch-analysis", + "php", + "php-src", "php2shell", - "rce" + "rce", + "remote-code-execution", + "security-research", + "source-code-audit", + "use-after-free", + "vulnerability-analysis" ], "visibility": "public", "forks": 0, @@ -3283,10 +3293,10 @@ "description": "php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.", "fork": false, "created_at": "2026-10-21T14:48:05Z", - "updated_at": "2026-10-23T13:50:35Z", + "updated_at": "2026-10-23T18:50:08Z", "pushed_at": "2026-10-23T12:07:31Z", - "stargazers_count": 92, - "watchers_count": 92, + "stargazers_count": 96, + "watchers_count": 96, "has_discussions": false, "forks_count": 10, "allow_forking": true, @@ -3314,7 +3324,7 @@ ], "visibility": "public", "forks": 10, - "watchers": 92, + "watchers": 96, "score": 0, "subscribers_count": 1 }, @@ -3384,8 +3394,8 @@ "description": "Read-only check whether a server is still exposed to php2shell (CVE-2026-109618, CVE-2026-109619): judges Debian\/Ubuntu package versions, containers, FPM pools and websites instead of trusting php -v.", "fork": false, "created_at": "2026-10-21T14:55:29Z", - "updated_at": "2026-10-23T11:51:45Z", - "pushed_at": "2026-10-23T11:51:43Z", + "updated_at": "2026-10-23T18:01:04Z", + "pushed_at": "2026-10-23T18:00:59Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -3475,12 +3485,12 @@ "description": "PHP 7.4 \/ 8.0 \/ 8.1 Docker images with the CVE-2026-109618 \/ CVE-2026-109619 fix backported", "fork": false, "created_at": "2026-10-21T15:01:45Z", - "updated_at": "2026-10-23T11:10:32Z", + "updated_at": "2026-10-23T19:15:02Z", "pushed_at": "2026-10-21T20:44:05Z", - "stargazers_count": 52, - "watchers_count": 52, + "stargazers_count": 54, + "watchers_count": 54, "has_discussions": false, - "forks_count": 16, + "forks_count": 17, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -3505,8 +3515,8 @@ "security" ], "visibility": "public", - "forks": 16, - "watchers": 52, + "forks": 17, + "watchers": 54, "score": 0, "subscribers_count": 1 }, @@ -3558,12 +3568,12 @@ "description": "CVE-2026-109618\/109619 PoC — PHP session.upload_progress heap use-after-free (CVSS 9.2)", "fork": false, "created_at": "2026-10-21T15:06:33Z", - "updated_at": "2026-10-23T13:49:31Z", + "updated_at": "2026-10-23T19:14:51Z", "pushed_at": "2026-10-22T12:18:58Z", - "stargazers_count": 122, - "watchers_count": 122, + "stargazers_count": 127, + "watchers_count": 127, "has_discussions": false, - "forks_count": 78, + "forks_count": 82, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -3571,8 +3581,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 78, - "watchers": 122, + "forks": 82, + "watchers": 127, "score": 0, "subscribers_count": 0 }, @@ -4095,10 +4105,10 @@ "description": "Non-destructive scanner for CVE-2026-109618 \/ CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.", "fork": false, "created_at": "2026-10-21T15:35:43Z", - "updated_at": "2026-10-23T11:08:57Z", + "updated_at": "2026-10-23T18:29:57Z", "pushed_at": "2026-10-21T18:44:33Z", - "stargazers_count": 102, - "watchers_count": 102, + "stargazers_count": 106, + "watchers_count": 106, "has_discussions": false, "forks_count": 31, "allow_forking": true, @@ -4120,7 +4130,7 @@ ], "visibility": "public", "forks": 31, - "watchers": 102, + "watchers": 106, "score": 0, "subscribers_count": 1 }, @@ -4471,8 +4481,8 @@ "description": "Agent plugin to scan, patch, verify and check for compromise after critical PHP vulnerabilities (PHP2Shell CVE-2026-109618\/109619).", "fork": false, "created_at": "2026-10-21T16:05:35Z", - "updated_at": "2026-10-21T18:53:01Z", - "pushed_at": "2026-10-21T18:52:57Z", + "updated_at": "2026-10-23T16:07:24Z", + "pushed_at": "2026-10-23T16:07:21Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -4570,10 +4580,10 @@ "description": "Check if your servers are affected by or compromised via php2shell (CVE-2026-109618 \/ CVE-2026-109619)", "fork": false, "created_at": "2026-10-21T16:16:36Z", - "updated_at": "2026-10-22T07:34:41Z", + "updated_at": "2026-10-23T14:47:01Z", "pushed_at": "2026-10-21T17:23:32Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -4584,7 +4594,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, @@ -5113,12 +5123,12 @@ "description": "Python scanner for CVE-2026-109618, CVE-2026-109619 and the php2shell session chains (handler mismatch + LFI). No external dependencies.", "fork": false, "created_at": "2026-10-21T17:06:30Z", - "updated_at": "2026-10-23T12:25:45Z", + "updated_at": "2026-10-23T18:37:07Z", "pushed_at": "2026-10-22T06:50:25Z", - "stargazers_count": 62, - "watchers_count": 62, + "stargazers_count": 66, + "watchers_count": 66, "has_discussions": false, - "forks_count": 14, + "forks_count": 15, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -5135,8 +5145,8 @@ "vulnerability-scanner" ], "visibility": "public", - "forks": 14, - "watchers": 62, + "forks": 15, + "watchers": 66, "score": 0, "subscribers_count": 1 }, @@ -5852,7 +5862,7 @@ "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, - "forks_count": 7, + "forks_count": 8, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -5860,7 +5870,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 7, + "forks": 8, "watchers": 2, "score": 0, "subscribers_count": 0 @@ -6295,10 +6305,10 @@ "description": "Hunting pack for PHP2Shell (CVE-2026-109618\/109619): find vulnerable PHP assets and hunt for exploitation with Microsoft Defender, Sentinel and Azure tooling", "fork": false, "created_at": "2026-10-21T19:14:17Z", - "updated_at": "2026-10-23T10:08:34Z", + "updated_at": "2026-10-23T19:34:30Z", "pushed_at": "2026-10-23T10:08:30Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -6309,7 +6319,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 3, "score": 0, "subscribers_count": 0 }, @@ -6614,7 +6624,7 @@ "stargazers_count": 31, "watchers_count": 31, "has_discussions": false, - "forks_count": 11, + "forks_count": 14, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -6622,7 +6632,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 11, + "forks": 14, "watchers": 31, "score": 0, "subscribers_count": 0 @@ -6675,12 +6685,12 @@ "description": "CVE-2026-109618\/109619 --- PHP session.upload_progress pre-auth RCE (chain A\/B\/C)", "fork": false, "created_at": "2026-10-21T19:57:51Z", - "updated_at": "2026-10-23T07:31:18Z", + "updated_at": "2026-10-23T17:32:05Z", "pushed_at": "2026-10-21T19:58:22Z", - "stargazers_count": 5, - "watchers_count": 5, + "stargazers_count": 7, + "watchers_count": 7, "has_discussions": false, - "forks_count": 1, + "forks_count": 2, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -6688,8 +6698,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 1, - "watchers": 5, + "forks": 2, + "watchers": 7, "score": 0, "subscribers_count": 0 }, @@ -7296,8 +7306,8 @@ "description": "php2shell (CVE-2026-109618 \/ CVE-2026-109619) — PHP core unauth RCE research: safe differential detector, deterministic worker DoS, in-lab RCE port", "fork": false, "created_at": "2026-10-21T21:26:07Z", - "updated_at": "2026-10-22T13:09:22Z", - "pushed_at": "2026-10-22T13:09:16Z", + "updated_at": "2026-10-23T16:06:24Z", + "pushed_at": "2026-10-23T16:06:20Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -7337,8 +7347,8 @@ "description": "Shell scripts that check Linux hosts for known vulnerabilities (PHP CVE-2026-109618\/109619, Copy Fail CVE-2026-31431), report vulnerable, mitigated or fine, and apply the fix on request with --fix.", "fork": false, "created_at": "2026-10-21T21:30:06Z", - "updated_at": "2026-10-22T01:04:38Z", - "pushed_at": "2026-10-22T01:04:34Z", + "updated_at": "2026-10-23T16:10:45Z", + "pushed_at": "2026-10-23T16:10:39Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -7884,12 +7894,12 @@ "description": "PHP2Shell: version-aware research toolkit for CVE-2026-109618 \/ CVE-2026-109619 — pre-auth RCE in PHP session.upload_progress (mod_php). Build profiles, labs, heap calibration and detection guidance for authorized security testing.", "fork": false, "created_at": "2026-10-21T22:53:01Z", - "updated_at": "2026-10-23T13:21:45Z", + "updated_at": "2026-10-23T19:38:47Z", "pushed_at": "2026-10-22T11:43:17Z", - "stargazers_count": 127, - "watchers_count": 127, + "stargazers_count": 135, + "watchers_count": 135, "has_discussions": false, - "forks_count": 38, + "forks_count": 43, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -7912,8 +7922,8 @@ "vulnerability-research" ], "visibility": "public", - "forks": 38, - "watchers": 127, + "forks": 43, + "watchers": 135, "score": 0, "subscribers_count": 0 }, @@ -8164,8 +8174,8 @@ "description": "Passive PHP2Shell (CVE-2026-109618, CVE-2026-109619) exposure checker with branded HTML reports. Single-file Python, no dependencies, no exploit payloads.", "fork": false, "created_at": "2026-10-21T23:45:38Z", - "updated_at": "2026-10-22T23:57:30Z", - "pushed_at": "2026-10-22T09:36:40Z", + "updated_at": "2026-10-23T19:40:43Z", + "pushed_at": "2026-10-23T19:48:30Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -8248,10 +8258,10 @@ "description": "宝塔面板（BT Panel）上已停止维护的 PHP 版本（5.4 – 8.1）的 PHP2Shell（CVE-2026-109618 \/ CVE-2026-109619）修复包。仓库里有打好补丁的源码包，以及一键完成编译、替换、回滚的脚本。", "fork": false, "created_at": "2026-10-22T00:04:54Z", - "updated_at": "2026-10-23T13:47:35Z", + "updated_at": "2026-10-23T15:30:32Z", "pushed_at": "2026-10-22T10:38:26Z", - "stargazers_count": 56, - "watchers_count": 56, + "stargazers_count": 57, + "watchers_count": 57, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -8262,7 +8272,7 @@ "topics": [], "visibility": "public", "forks": 6, - "watchers": 56, + "watchers": 57, "score": 0, "subscribers_count": 1 }, @@ -8380,10 +8390,10 @@ "description": "Claude Code skill: PHP2Shell (CVE-2026-109618\/109619) exposure report from the Tenable Hexa AI MCP as HTML, PDF and CSV", "fork": false, "created_at": "2026-10-22T00:31:37Z", - "updated_at": "2026-10-22T12:34:52Z", + "updated_at": "2026-10-23T18:12:36Z", "pushed_at": "2026-10-22T01:11:33Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -8394,7 +8404,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -8595,8 +8605,8 @@ "description": "Patches and Windows build scripts for PHP 5.6-7.4 fixing CVE-2026-109618 \/ CVE-2026-109619", "fork": false, "created_at": "2026-10-22T01:08:01Z", - "updated_at": "2026-10-22T21:42:22Z", - "pushed_at": "2026-10-22T21:42:18Z", + "updated_at": "2026-10-23T19:27:39Z", + "pushed_at": "2026-10-23T19:27:35Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, @@ -8628,10 +8638,10 @@ "description": "Unofficial rebuild of PHP 7.4 for EL7 (CentOS\/RHEL 7) with the php2shell fix (CVE-2026-109618\/109619). A stopgap for EOL stacks — upgrading is the real fix.", "fork": false, "created_at": "2026-10-22T01:08:06Z", - "updated_at": "2026-10-22T23:24:30Z", + "updated_at": "2026-10-23T14:59:49Z", "pushed_at": "2026-10-22T01:18:18Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -8642,7 +8652,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 }, @@ -8727,8 +8737,8 @@ "description": "Two small, read-only tools to confirm whether your PHP installations are patched against the critical RCE advisory published 2026-10-21 (CVE-2026-109618 \/ CVE-2026-109619)", "fork": false, "created_at": "2026-10-22T01:27:53Z", - "updated_at": "2026-10-22T14:14:47Z", - "pushed_at": "2026-10-22T13:57:54Z", + "updated_at": "2026-10-23T19:34:35Z", + "pushed_at": "2026-10-23T19:34:31Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -9385,8 +9395,8 @@ "description": "Passive, non-exploiting checker that inventories PHP version disclosure across a list of websites and assesses patch status for CVE-2026-109618 \/ CVE-2026-109619 (PHP2Shell).", "fork": false, "created_at": "2026-10-22T03:05:52Z", - "updated_at": "2026-10-23T13:50:13Z", - "pushed_at": "2026-10-23T13:50:08Z", + "updated_at": "2026-10-23T13:53:19Z", + "pushed_at": "2026-10-23T13:53:14Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -9604,7 +9614,7 @@ "description": "Exploit tooling and vulnerability research for CVE-2026-109618 and CVE-2026-109619 — two critical unauthenticated remote code execution (RCE) vulnerabilities patched in PHP 8.4.27, 8.3.36, 8.2.35, and 8.5.12 (released October 21, 2026).", "fork": false, "created_at": "2026-10-22T03:42:57Z", - "updated_at": "2026-10-23T11:25:47Z", + "updated_at": "2026-10-23T18:46:28Z", "pushed_at": "2026-10-22T15:30:31Z", "stargazers_count": 8, "watchers_count": 8, @@ -9645,10 +9655,10 @@ "description": "Scan local PHP, Docker images, running containers, URLs and inventories for PHP2Shell exposure (CVE-2026-109618 \/ CVE-2026-109619). Zero-dependency Node CLI with terminal UI, HTML dashboard and GitHub Action. Read-only, no exploit code.", "fork": false, "created_at": "2026-10-22T03:45:02Z", - "updated_at": "2026-10-22T18:04:07Z", + "updated_at": "2026-10-23T16:46:47Z", "pushed_at": "2026-10-22T16:39:42Z", - "stargazers_count": 4, - "watchers_count": 4, + "stargazers_count": 5, + "watchers_count": 5, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -9677,7 +9687,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 4, + "watchers": 5, "score": 0, "subscribers_count": 0 }, @@ -9842,12 +9852,12 @@ "description": "High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)", "fork": false, "created_at": "2026-10-22T03:53:20Z", - "updated_at": "2026-10-23T13:51:42Z", + "updated_at": "2026-10-23T19:49:29Z", "pushed_at": "2026-10-23T10:35:00Z", - "stargazers_count": 411, - "watchers_count": 411, + "stargazers_count": 455, + "watchers_count": 455, "has_discussions": false, - "forks_count": 79, + "forks_count": 92, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -9855,8 +9865,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 79, - "watchers": 411, + "forks": 92, + "watchers": 455, "score": 0, "subscribers_count": 2 }, @@ -9990,10 +10000,10 @@ "description": "AriaWave PHP2Shell (CVE-2026-109618 & CVE-2026-109619) Defensive Readiness, SAPI, Apache RLimitMEM & INI Override Scanner + Autonomous Agent Skill (SKILL.md)", "fork": false, "created_at": "2026-10-22T04:57:57Z", - "updated_at": "2026-10-22T13:32:00Z", + "updated_at": "2026-10-23T15:32:31Z", "pushed_at": "2026-10-22T04:58:03Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -10011,7 +10021,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -10474,8 +10484,8 @@ "description": "PHP2Shell (CVE-2026-109618\/109619) vendor and Linux distro status - AI-generated, verify before acting", "fork": false, "created_at": "2026-10-22T05:59:32Z", - "updated_at": "2026-10-23T11:22:56Z", - "pushed_at": "2026-10-23T11:22:53Z", + "updated_at": "2026-10-23T18:24:36Z", + "pushed_at": "2026-10-23T18:24:31Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -10540,8 +10550,8 @@ "description": "Free open-source scanner: is your PHP version vulnerable to php2shell (CVE-2026-109618 \/ CVE-2026-109619)? Disclosure-only — no exploit probes.", "fork": false, "created_at": "2026-10-22T06:18:21Z", - "updated_at": "2026-10-23T00:58:35Z", - "pushed_at": "2026-10-23T00:58:31Z", + "updated_at": "2026-10-23T18:45:39Z", + "pushed_at": "2026-10-23T18:45:35Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -11292,10 +11302,10 @@ "description": "Non-invasive vulnerability assessment for CVE-2026-109618 and CVE-2026-109619.", "fork": false, "created_at": "2026-10-22T07:48:02Z", - "updated_at": "2026-10-22T14:17:04Z", + "updated_at": "2026-10-23T14:44:12Z", "pushed_at": "2026-10-22T08:05:39Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -11306,7 +11316,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 }, @@ -11376,39 +11386,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1429425009, - "name": "PHP2Shell-CVE-2026-109618-CVE-2026-109619-PoC", - "full_name": "xPloits3c\/PHP2Shell-CVE-2026-109618-CVE-2026-109619-PoC", - "owner": { - "login": "xPloits3c", - "id": 153435050, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/153435050?v=4", - "html_url": "https:\/\/github.com\/xPloits3c", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/xPloits3c\/PHP2Shell-CVE-2026-109618-CVE-2026-109619-PoC", - "description": "Local\/remote defensive audit for CVE-2026-109618 and CVE-2026-109619 (\"php2shell\") — verification of patched versions, non-restarted processes, and interim mitigations. No exploits; read-only operation.", - "fork": false, - "created_at": "2026-10-22T07:57:06Z", - "updated_at": "2026-10-23T12:20:31Z", - "pushed_at": "2026-10-22T16:53:18Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, { "id": 1429447957, "name": "php-patch-check", @@ -12145,7 +12122,7 @@ "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -12153,7 +12130,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 0, "score": 0, "subscribers_count": 0 @@ -12462,10 +12439,10 @@ "description": "Lightweight forensic scanner and IOC checker for PHP2Shell (CVE-2026-109618 \/ CVE-2026-109619) targeting Debian, LXC, and Docker environments.", "fork": false, "created_at": "2026-10-22T09:35:19Z", - "updated_at": "2026-10-23T13:35:11Z", - "pushed_at": "2026-10-23T13:35:07Z", - "stargazers_count": 0, - "watchers_count": 0, + "updated_at": "2026-10-23T19:21:59Z", + "pushed_at": "2026-10-23T18:07:58Z", + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -12476,7 +12453,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -12528,10 +12505,10 @@ "description": "Scanner for PHP2Shell (CVE-2026-109618\/109619): URL blackbox, local device and SSH.", "fork": false, "created_at": "2026-10-22T09:45:34Z", - "updated_at": "2026-10-23T10:08:57Z", - "pushed_at": "2026-10-22T13:58:12Z", - "stargazers_count": 43, - "watchers_count": 43, + "updated_at": "2026-10-23T14:47:18Z", + "pushed_at": "2026-10-23T14:55:12Z", + "stargazers_count": 44, + "watchers_count": 44, "has_discussions": false, "forks_count": 7, "allow_forking": true, @@ -12547,7 +12524,7 @@ ], "visibility": "public", "forks": 7, - "watchers": 43, + "watchers": 44, "score": 0, "subscribers_count": 0 }, @@ -12962,10 +12939,10 @@ "description": "php2shell Scanner ", "fork": false, "created_at": "2026-10-22T10:39:58Z", - "updated_at": "2026-10-22T18:05:14Z", - "pushed_at": "2026-10-22T14:49:35Z", - "stargazers_count": 3, - "watchers_count": 3, + "updated_at": "2026-10-23T17:09:25Z", + "pushed_at": "2026-10-23T16:59:59Z", + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -12976,7 +12953,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 3, + "watchers": 4, "score": 0, "subscribers_count": 0 }, @@ -13209,10 +13186,10 @@ "description": "Defensive triage for PHP2Shell (CVE-2026-109618 and CVE-2026-109619): a read-only check of every PHP SAPI, plus indicator hunting and a patch plan.", "fork": false, "created_at": "2026-10-22T11:06:46Z", - "updated_at": "2026-10-23T10:25:44Z", + "updated_at": "2026-10-23T17:02:50Z", "pushed_at": "2026-10-22T13:33:08Z", - "stargazers_count": 19, - "watchers_count": 19, + "stargazers_count": 21, + "watchers_count": 21, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -13223,7 +13200,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 19, + "watchers": 21, "score": 0, "subscribers_count": 0 }, @@ -13315,8 +13292,8 @@ "description": "A single-page, live dashboard of vendors and software affected by the PHP2Shell remote code execution vulnerabilities CVE-2026-109618 and CVE-2026-109619 (fixed in PHP 8.2.35 \/ 8.3.36 \/ 8.4.27 \/ 8.5.12).", "fork": false, "created_at": "2026-10-22T11:39:16Z", - "updated_at": "2026-10-23T12:18:12Z", - "pushed_at": "2026-10-23T12:18:08Z", + "updated_at": "2026-10-23T16:25:44Z", + "pushed_at": "2026-10-23T16:25:40Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -13352,8 +13329,8 @@ "description": "PHP 5.6.40 packages for Debian 7 wheezy with the CVE-2026-109618 \/ CVE-2026-109619 fix (unofficial rebuild of the jessie packaging)", "fork": false, "created_at": "2026-10-22T11:41:07Z", - "updated_at": "2026-10-22T14:30:12Z", - "pushed_at": "2026-10-22T11:41:14Z", + "updated_at": "2026-10-23T14:05:38Z", + "pushed_at": "2026-10-23T14:05:33Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -13751,12 +13728,12 @@ "description": "PHP2Shell exploit framework — CVE-2026-109618\/619 PHP session.upload_progress UAF to RCE", "fork": false, "created_at": "2026-10-22T12:53:40Z", - "updated_at": "2026-10-23T13:36:08Z", - "pushed_at": "2026-10-23T12:33:46Z", - "stargazers_count": 104, - "watchers_count": 104, + "updated_at": "2026-10-23T19:31:19Z", + "pushed_at": "2026-10-23T18:27:39Z", + "stargazers_count": 127, + "watchers_count": 127, "has_discussions": false, - "forks_count": 27, + "forks_count": 33, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -13764,8 +13741,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 27, - "watchers": 104, + "forks": 33, + "watchers": 127, "score": 0, "subscribers_count": 0 }, @@ -13904,7 +13881,7 @@ "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -13912,7 +13889,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 1, "score": 0, "subscribers_count": 0 @@ -14367,8 +14344,8 @@ }, { "id": 1429862111, - "name": "php2shell_hunt_ispconfig", - "full_name": "louzaonet\/php2shell_hunt_ispconfig", + "name": "php2shell_hunt", + "full_name": "louzaonet\/php2shell_hunt", "owner": { "login": "louzaonet", "id": 65809745, @@ -14376,12 +14353,12 @@ "html_url": "https:\/\/github.com\/louzaonet", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/louzaonet\/php2shell_hunt_ispconfig", + "html_url": "https:\/\/github.com\/louzaonet\/php2shell_hunt", "description": "Quick and dirty hunting script for PHP2Shell (CVE-2026-109618 and CVE-2026-109619) on ISPConfig servers.", "fork": false, "created_at": "2026-10-22T14:31:25Z", - "updated_at": "2026-10-23T10:05:27Z", - "pushed_at": "2026-10-23T10:05:23Z", + "updated_at": "2026-10-23T15:07:29Z", + "pushed_at": "2026-10-23T15:06:08Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -14589,8 +14566,8 @@ "description": "Refactored POC for CVE-2026-109618\/109619 php2shell", "fork": false, "created_at": "2026-10-22T15:08:41Z", - "updated_at": "2026-10-23T05:07:56Z", - "pushed_at": "2026-10-23T05:07:52Z", + "updated_at": "2026-10-23T14:45:55Z", + "pushed_at": "2026-10-23T14:45:51Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -15171,8 +15148,8 @@ "description": "Read-only PHP2Shell package checker for Debian 12\/13 (CVE-2026-109618, CVE-2026-109619).", "fork": false, "created_at": "2026-10-22T16:18:22Z", - "updated_at": "2026-10-22T17:57:27Z", - "pushed_at": "2026-10-22T17:56:49Z", + "updated_at": "2026-10-23T17:28:38Z", + "pushed_at": "2026-10-23T17:29:39Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -15183,11 +15160,18 @@ "has_pull_requests": true, "pull_request_creation_policy": "all", "topics": [ + "ai", + "ai-agents", "debian", "php", "php2shell", "security", - "vulnerability-detection" + "skill", + "skill-md", + "skills", + "vulnerability-assessment", + "vulnerability-detection", + "vulnerability-management" ], "visibility": "public", "forks": 0, @@ -15210,10 +15194,10 @@ "description": "Read-only IOC triage for PHP2Shell (CVE-2026-109618 \/ CVE-2026-109619). POSIX sh for WordPress, Nextcloud, Laravel, Drupal and plain PHP, on hosts or inside containers.", "fork": false, "created_at": "2026-10-22T16:18:22Z", - "updated_at": "2026-10-23T08:28:51Z", + "updated_at": "2026-10-23T14:17:32Z", "pushed_at": "2026-10-22T17:40:43Z", - "stargazers_count": 7, - "watchers_count": 7, + "stargazers_count": 8, + "watchers_count": 8, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -15235,7 +15219,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 7, + "watchers": 8, "score": 0, "subscribers_count": 0 }, @@ -15392,8 +15376,8 @@ "description": "PHP vulnerability checker for PHP2Shell (CVE-2026-109618\/109619): audits servers, Docker images & CI. Backport-aware, zero-dep.", "fork": false, "created_at": "2026-10-22T16:46:59Z", - "updated_at": "2026-10-23T00:17:03Z", - "pushed_at": "2026-10-22T21:48:00Z", + "updated_at": "2026-10-23T14:49:07Z", + "pushed_at": "2026-10-23T14:49:04Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": true, @@ -15887,10 +15871,10 @@ "description": "Unofficial patched PHP 7.4.33 for Synology DSM 6.2 x86_64 (replaces PHP7.4 7.4.30-0009). Fixes PHP2Shell (CVE-2026-109618\/109619) plus 90 security backports. Drop-in install with backup and rollback, test page, build scripts. Tested on DS1815+.", "fork": false, "created_at": "2026-10-22T17:59:32Z", - "updated_at": "2026-10-22T19:19:44Z", + "updated_at": "2026-10-23T14:01:33Z", "pushed_at": "2026-10-22T19:22:24Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -15909,7 +15893,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -15961,8 +15945,8 @@ "description": "Chrome extension for Blue Teams: passively identify a site's PHP version and PHP2Shell (CVE-2026-109618\/109619) exposure.", "fork": false, "created_at": "2026-10-22T18:07:06Z", - "updated_at": "2026-10-22T21:49:26Z", - "pushed_at": "2026-10-22T21:49:22Z", + "updated_at": "2026-10-23T17:58:36Z", + "pushed_at": "2026-10-23T17:58:34Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -16003,8 +15987,8 @@ "description": "Unofficial fix for CVE-2026-109618 \/ CVE-2026-109619 (php2shell) for the end-of-life PHP 5.4 \/ 5.3 packages of RHEL, CentOS and Oracle Linux 7 \/ 6", "fork": false, "created_at": "2026-10-22T18:14:29Z", - "updated_at": "2026-10-23T07:46:07Z", - "pushed_at": "2026-10-23T07:13:14Z", + "updated_at": "2026-10-23T15:03:03Z", + "pushed_at": "2026-10-23T15:03:00Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -16123,8 +16107,8 @@ "description": "Interactive Bash audit & remediation tool for PHP2Shell (CVE-2026-109618\/109619). Features live Docker inspection, reversible BSI mitigations, and split-screen TUI.", "fork": false, "created_at": "2026-10-22T18:18:08Z", - "updated_at": "2026-10-22T18:33:26Z", - "pushed_at": "2026-10-22T18:25:49Z", + "updated_at": "2026-10-23T17:25:01Z", + "pushed_at": "2026-10-23T17:11:59Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -16135,17 +16119,23 @@ "has_pull_requests": true, "pull_request_creation_policy": "all", "topics": [ + "auditor", "bash", "bsi", "cve-2026-109618", "cve-2026-109619", + "debian", "docker", + "docker-security", "incident-response", "linux", "php", "php2shell", + "remediation", + "remediation-tool", "security-audit", - "sysadmin" + "sysadmin", + "ubuntu" ], "visibility": "public", "forks": 0, @@ -16377,12 +16367,12 @@ "description": "Pre-auth RCE chain for CVE-2026-109618 \/ CVE-2026-109619 — PHP session.upload_progress exploitation (PHP 5.4.0–8.5.x)", "fork": false, "created_at": "2026-10-22T19:18:24Z", - "updated_at": "2026-10-23T11:00:01Z", + "updated_at": "2026-10-23T16:10:22Z", "pushed_at": "2026-10-22T19:21:09Z", - "stargazers_count": 5, - "watchers_count": 5, + "stargazers_count": 7, + "watchers_count": 7, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -16390,8 +16380,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, - "watchers": 5, + "forks": 1, + "watchers": 7, "score": 0, "subscribers_count": 0 }, @@ -16871,7 +16861,7 @@ "description": "Read-only, on-server PHP2Shell (CVE-2026-109618\/109619) check. Finds every PHP runtime (CLI, FPM, mod_php, cPanel\/Plesk), distro backports, workers still needing a restart, and signs of compromise. No exploit traffic, changes nothing.", "fork": false, "created_at": "2026-10-22T20:42:01Z", - "updated_at": "2026-10-22T21:49:36Z", + "updated_at": "2026-10-23T14:18:40Z", "pushed_at": "2026-10-22T21:18:42Z", "stargazers_count": 1, "watchers_count": 1, @@ -16951,8 +16941,8 @@ "description": "Complete auto exploit for NGINX PHP-FPM CVE-2026-109618 \/ CVE-2026-109619 ", "fork": false, "created_at": "2026-10-22T21:04:53Z", - "updated_at": "2026-10-23T12:48:23Z", - "pushed_at": "2026-10-23T12:41:10Z", + "updated_at": "2026-10-23T19:14:59Z", + "pushed_at": "2026-10-23T19:14:54Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -17120,7 +17110,7 @@ "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -17149,7 +17139,7 @@ "wordpress" ], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 2, "score": 0, "subscribers_count": 0 @@ -17400,7 +17390,7 @@ "description": "php2shell-enterprise-hardening (CVE-2026-109618 \/ CVE-2026-109619) - Hyperscale Defense-in-Depth, Non-Breaking Mitigations & Instant Immunity Auditor for PHP Pre-Auth RCE.", "fork": false, "created_at": "2026-10-22T22:56:00Z", - "updated_at": "2026-10-23T00:58:09Z", + "updated_at": "2026-10-23T17:44:05Z", "pushed_at": "2026-10-23T00:58:05Z", "stargazers_count": 0, "watchers_count": 0, @@ -17411,7 +17401,25 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "apache", + "apache-spark", + "cve-2026-109618", + "cve-2026-109619", + "defense-in-depth", + "devops", + "incident-response", + "mod-php", + "nginx", + "php-fpm", + "php-security", + "php2shell", + "rce-mitigation", + "security-hardening", + "sysadmin", + "vulnerability-auditor", + "vulnerability-scanner" + ], "visibility": "public", "forks": 0, "watchers": 0, @@ -17532,8 +17540,8 @@ "description": " Reverse proxy that blocks PHP parser exploits (CVE-2026-109618\/109619) by replaying requests through an 11-version canary array. Compensating control for EOL PHP 5.6–8.1.", "fork": false, "created_at": "2026-10-23T00:06:02Z", - "updated_at": "2026-10-23T04:40:44Z", - "pushed_at": "2026-10-23T03:09:44Z", + "updated_at": "2026-10-23T19:38:43Z", + "pushed_at": "2026-10-23T19:38:39Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": true, @@ -17867,8 +17875,8 @@ "description": "Guard for PHP 7.4: native Linux package remediation for CVE-2026-109618\/109619, with verified build recipes and deployment checks.", "fork": false, "created_at": "2026-10-23T02:27:31Z", - "updated_at": "2026-10-23T13:07:39Z", - "pushed_at": "2026-10-23T13:09:07Z", + "updated_at": "2026-10-23T17:25:02Z", + "pushed_at": "2026-10-23T17:26:06Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -17940,8 +17948,8 @@ "description": "Risk-reduction WordPress plugin for the PHP2Shell exploit (CVE-2026-109618 \/ CVE-2026-109619) on sites that cannot update PHP yet. A shield, not a cure.", "fork": false, "created_at": "2026-10-23T02:30:48Z", - "updated_at": "2026-10-23T13:42:15Z", - "pushed_at": "2026-10-23T13:42:11Z", + "updated_at": "2026-10-23T17:39:10Z", + "pushed_at": "2026-10-23T17:39:06Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -17969,8 +17977,8 @@ }, { "id": 1430498994, - "name": "php2shell-triage", - "full_name": "leejongyoung\/php2shell-triage", + "name": "php2shell-kr", + "full_name": "leejongyoung\/php2shell-kr", "owner": { "login": "leejongyoung", "id": 105860712, @@ -17978,12 +17986,12 @@ "html_url": "https:\/\/github.com\/leejongyoung", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/leejongyoung\/php2shell-triage", + "html_url": "https:\/\/github.com\/leejongyoung\/php2shell-kr", "description": "PHP2Shell (CVE-2026-109618\/109619) defensive triage & response toolkit: Linux\/Unix\/Windows\/containers, host-specific patch plans, virtual patches, Korean runbook", "fork": false, "created_at": "2026-10-23T02:41:25Z", - "updated_at": "2026-10-23T09:30:48Z", - "pushed_at": "2026-10-23T13:40:27Z", + "updated_at": "2026-10-23T14:37:01Z", + "pushed_at": "2026-10-23T14:37:06Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -18219,10 +18227,10 @@ "description": "PHP2Shell: version-aware research toolkit for CVE-2026-109618 \/ CVE-2026-109619 — pre-auth RCE in PHP session.upload_progress (mod_php). Build profiles, labs, heap calibration and detection guidance for authorized security testing.", "fork": false, "created_at": "2026-10-23T03:46:10Z", - "updated_at": "2026-10-23T08:17:04Z", + "updated_at": "2026-10-23T19:31:13Z", "pushed_at": "2026-10-23T04:15:21Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 5, + "watchers_count": 5, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -18233,7 +18241,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 0, + "watchers": 5, "score": 0, "subscribers_count": 0 }, @@ -18282,11 +18290,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/umair-aziz025\/PHP2Shell", - "description": "Full-pipeline research, passive audit, active behavioral scanner, and automated exploitation toolkit for PHP Core CVE-2026-109618 & CVE-2026-109619 (PHP2Shell \/ EDB-52704).", + "description": "Critical Vulnerabilities in PHP Core (CVE-2026-109618\/CVE-2026-109619) Recon → Passive Fingerprinting → Behavioral Probing → WAF Diagnostics) and separately opt-in exploit\/shell functions.", "fork": false, "created_at": "2026-10-23T03:49:48Z", - "updated_at": "2026-10-23T12:04:09Z", - "pushed_at": "2026-10-23T12:04:05Z", + "updated_at": "2026-10-23T16:59:03Z", + "pushed_at": "2026-10-23T16:16:30Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, @@ -18300,13 +18308,10 @@ "cve-2026-109618", "cve-2026-109619", "exploit", - "exploit-db-52704", - "php", "php2shell", "rce", "remote-code-execution", - "reverse-shell", - "vulnerability-scanner" + "reverse-shell" ], "visibility": "public", "forks": 1, @@ -18326,11 +18331,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/ravhirizaldi\/php2shell-engine-rce", - "description": "Engine-level PHP2SHELL (CVE-2026-109618\/109619) lab: stock PHP 8.4.26 mod_php RCE, interactive exploit, multi-worker\/TLS\/OOB, Docker evidence.", + "description": "Engine-level PHP2SHELL (CVE-2026-109618\/109619) lab: stock PHP RCE, interactive exploit, multi-worker\/TLS\/OOB, Docker evidence.", "fork": false, "created_at": "2026-10-23T04:09:52Z", - "updated_at": "2026-10-23T13:48:20Z", - "pushed_at": "2026-10-23T13:48:15Z", + "updated_at": "2026-10-23T17:26:32Z", + "pushed_at": "2026-10-23T14:05:03Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -18340,7 +18345,18 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cve-2026-109618", + "cve-2026-109619", + "exploit", + "exploratory-data-analysis", + "php", + "php-rce", + "php8", + "rce-exploit", + "rce-testing", + "security-research" + ], "visibility": "public", "forks": 0, "watchers": 1, @@ -18663,10 +18679,10 @@ "description": "CVE-2026-109618\/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.", "fork": false, "created_at": "2026-10-23T06:51:22Z", - "updated_at": "2026-10-23T09:27:41Z", + "updated_at": "2026-10-23T15:23:55Z", "pushed_at": "2026-10-23T09:27:37Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -18677,7 +18693,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -18867,8 +18883,8 @@ "description": "Check PHP2Shell (CVE-2026-109618, CVE-2026-109619) from inside your server: distribution backports, missed restarts and interim mitigations, verdicts computed in the browser.", "fork": false, "created_at": "2026-10-23T08:16:48Z", - "updated_at": "2026-10-23T08:24:00Z", - "pushed_at": "2026-10-23T08:23:47Z", + "updated_at": "2026-10-23T17:13:47Z", + "pushed_at": "2026-10-23T17:13:43Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -19141,6 +19157,46 @@ "score": 0, "subscribers_count": 0 }, + { + "id": 1430884644, + "name": "php2shell-lab", + "full_name": "lesterlam\/php2shell-lab", + "owner": { + "login": "lesterlam", + "id": 8011680, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8011680?v=4", + "html_url": "https:\/\/github.com\/lesterlam", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/lesterlam\/php2shell-lab", + "description": "Reproduction lab for CVE-2026-109618 \/ CVE-2026-109619 (PHP2Shell) - unauthenticated OOM during PHP request startup, before application code runs (CVSS 4.0 9.2). Vulnerable vs patched builds. Trigger condition only; no weaponised exploit.", + "fork": false, + "created_at": "2026-10-23T10:13:40Z", + "updated_at": "2026-10-23T18:26:35Z", + "pushed_at": "2026-10-23T10:26:57Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve-2026-109618", + "cve-2026-109619", + "memory-corruption", + "php", + "php2shell", + "security-lab" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, { "id": 1430894172, "name": "php2shell-scanner", @@ -19231,10 +19287,10 @@ "description": null, "fork": false, "created_at": "2026-10-23T10:56:40Z", - "updated_at": "2026-10-23T11:04:00Z", + "updated_at": "2026-10-23T15:07:49Z", "pushed_at": "2026-10-23T11:01:47Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -19245,7 +19301,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -19264,8 +19320,8 @@ "description": "PHP2Shell Sentinel is an intelligent, zero-dependency, low-resource cross-platform defense daemon to detect, log, prevent, and actively mitigate php2shell exploits (CVE-2026-109618 & CVE-2026-109619, plus CVE-2024-4577) on both Linux and Windows servers", "fork": false, "created_at": "2026-10-23T10:56:58Z", - "updated_at": "2026-10-23T13:50:51Z", - "pushed_at": "2026-10-23T13:50:47Z", + "updated_at": "2026-10-23T16:03:40Z", + "pushed_at": "2026-10-23T16:03:36Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -19279,9 +19335,16 @@ "cve", "cve-2026-109618", "cve-2026-109619", + "php", + "php-fpm", + "php-library", "php2shell", "php2shell-fix", - "php2shell-scanner" + "php2shell-scanner", + "php5", + "php7", + "php74", + "php8" ], "visibility": "public", "forks": 0, @@ -19337,8 +19400,8 @@ "description": "Defensive remediation helper for the PHP2Shell RCE (CVE-2026-109618 \/ CVE-2026-109619): detects exposure and applies the official fix, with a source-build drop-in for end-of-life PHP 7.4\/8.0\/8.1.", "fork": false, "created_at": "2026-10-23T11:00:30Z", - "updated_at": "2026-10-23T13:41:23Z", - "pushed_at": "2026-10-23T13:41:19Z", + "updated_at": "2026-10-23T15:03:30Z", + "pushed_at": "2026-10-23T15:03:25Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -19546,10 +19609,10 @@ "description": "PHP 7.3.33-35 (php2shell fix, CVE-2026-109618\/109619) rebuilt for Ubuntu 18.04, 20.04 and Debian 10", "fork": false, "created_at": "2026-10-23T11:36:57Z", - "updated_at": "2026-10-23T12:47:45Z", + "updated_at": "2026-10-23T15:44:33Z", "pushed_at": "2026-10-23T12:47:41Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -19568,60 +19631,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1430970888, - "name": "PHP2Shell-MultiScan", - "full_name": "LeonKK\/PHP2Shell-MultiScan", - "owner": { - "login": "LeonKK", - "id": 22968924, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/22968924?v=4", - "html_url": "https:\/\/github.com\/LeonKK", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/LeonKK\/PHP2Shell-MultiScan", - "description": "PHP2Shell vulnerability scanner for CVE-2026-109618 and CVE-2026-109619. Discover vulnerable PHP version indicators, scan WordPress endpoints, assess security risks, detect exposure signals, and guide PHP patching and remediation.", - "fork": false, - "created_at": "2026-10-23T11:41:27Z", - "updated_at": "2026-10-23T13:41:06Z", - "pushed_at": "2026-10-23T13:41:02Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2026-109618", - "cve-2026-109619", - "exploit-scanner", - "php-rce", - "php-security", - "php-security-checker", - "php-security-scanner", - "php-vulnerabilities", - "php-vulnerability", - "php-vulnerability-scanner", - "php2shell", - "php2shell-scanner", - "security", - "security-audit", - "security-scanner", - "vulnerability", - "vulnerability-scanner", - "vulnerability-scanners", - "wordpress" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -19691,6 +19701,46 @@ "score": 0, "subscribers_count": 0 }, + { + "id": 1430990030, + "name": "php2shell-scanner", + "full_name": "reza-ghanbari-adivi\/php2shell-scanner", + "owner": { + "login": "reza-ghanbari-adivi", + "id": 135181666, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/135181666?v=4", + "html_url": "https:\/\/github.com\/reza-ghanbari-adivi", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/reza-ghanbari-adivi\/php2shell-scanner", + "description": "Safe, non-destructive network & VLAN scanner to detect exposed PHP runtimes vulnerable to CVE-2026-109618 \/ CVE-2026-109619 (PHP2Shell).", + "fork": false, + "created_at": "2026-10-23T12:00:29Z", + "updated_at": "2026-10-23T17:07:58Z", + "pushed_at": "2026-10-23T17:07:54Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve", + "infosec", + "pentesting", + "php", + "security", + "vulnerability-scanner" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, { "id": 1430999418, "name": "PHP2Shell-CVE-2026-109618-CVE-2026-109619", @@ -19724,6 +19774,50 @@ "score": 0, "subscribers_count": 0 }, + { + "id": 1431005506, + "name": "php2shell-radar", + "full_name": "Secragon\/php2shell-radar", + "owner": { + "login": "Secragon", + "id": 157915777, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/157915777?v=4", + "html_url": "https:\/\/github.com\/Secragon", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Secragon\/php2shell-radar", + "description": "Portable PHP asset discovery and exposure scanner for CVE-2026-109618 and CVE-2026-109619.", + "fork": false, + "created_at": "2026-10-23T12:15:47Z", + "updated_at": "2026-10-23T15:41:21Z", + "pushed_at": "2026-10-23T15:41:25Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "asset-discovery", + "cve-2026-109618", + "cve-2026-109619", + "linux", + "php", + "php2shell", + "security-scanner", + "subdomain-enumeration", + "vulnerability-scanner", + "windows" + ], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 + }, { "id": 1431016559, "name": "php2shell-tools", @@ -19757,6 +19851,99 @@ "score": 0, "subscribers_count": 0 }, + { + "id": 1431017811, + "name": "php-cve-2026-109618-109619-patch", + "full_name": "wunamesst\/php-cve-2026-109618-109619-patch", + "owner": { + "login": "wunamesst", + "id": 147373250, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/147373250?v=4", + "html_url": "https:\/\/github.com\/wunamesst", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/wunamesst\/php-cve-2026-109618-109619-patch", + "description": "Unofficial minimal backports for CVE-2026-109618 and CVE-2026-109619 on end-of-life PHP 5.4.33, 5.6.7, 7.1.1 and 7.3.13. Read the limitations before use; upgrading to a supported PHP release is the complete fix.", + "fork": false, + "created_at": "2026-10-23T12:27:33Z", + "updated_at": "2026-10-23T15:53:50Z", + "pushed_at": "2026-10-23T15:53:41Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "backport", + "cve", + "php", + "php54", + "php56", + "php71", + "php73", + "security" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431018707, + "name": "phpfixes-php2shell", + "full_name": "phpfixes\/phpfixes-php2shell", + "owner": { + "login": "phpfixes", + "id": 346895279, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/346895279?v=4", + "html_url": "https:\/\/github.com\/phpfixes", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/phpfixes\/phpfixes-php2shell", + "description": "Free PHP2Shell (CVE-2026-109618, CVE-2026-109619) check skill for Claude Code and Codex. Reads the PHP package and runtime evidence you supply. MIT.", + "fork": false, + "created_at": "2026-10-23T12:28:23Z", + "updated_at": "2026-10-23T15:29:56Z", + "pushed_at": "2026-10-23T15:29:25Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "agent-skills", + "backports", + "claude-code", + "claude-code-plugin", + "claude-skills", + "codex", + "codex-skills", + "cve-2026-109618", + "cve-2026-109619", + "debian", + "php", + "php-fpm", + "php-security", + "php2shell", + "security", + "ubuntu", + "vulnerability-assessment" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, { "id": 1431032130, "name": "php2shell-remediate", @@ -19772,8 +19959,8 @@ "description": "CVE-2026-109618\/109619 (php2shell) PHP exposure classifier and remediation planner. BSD-2-Clause.", "fork": false, "created_at": "2026-10-23T12:41:30Z", - "updated_at": "2026-10-23T13:34:28Z", - "pushed_at": "2026-10-23T13:34:22Z", + "updated_at": "2026-10-23T15:15:09Z", + "pushed_at": "2026-10-23T15:15:05Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -19806,7 +19993,1116 @@ "fork": false, "created_at": "2026-10-23T13:45:11Z", "updated_at": "2026-10-23T13:50:10Z", - "pushed_at": "2026-10-23T13:47:37Z", + "pushed_at": "2026-10-23T13:53:02Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431106186, + "name": "laravel-bot-protection", + "full_name": "jlrodriguezdev\/laravel-bot-protection", + "owner": { + "login": "jlrodriguezdev", + "id": 11091227, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/11091227?v=4", + "html_url": "https:\/\/github.com\/jlrodriguezdev", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/jlrodriguezdev\/laravel-bot-protection", + "description": "BotProtection, blocking reconnaissance scans used in exploits like PHP2Shell (CVE-2026-109618 \/ CVE-2026-109619) before malicious payloads reach the PHP runtime. ", + "fork": false, + "created_at": "2026-10-23T13:48:40Z", + "updated_at": "2026-10-23T14:53:49Z", + "pushed_at": "2026-10-23T14:53:49Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431111636, + "name": "wp-php2shell-check", + "full_name": "digital-heroes-hamburg\/wp-php2shell-check", + "owner": { + "login": "digital-heroes-hamburg", + "id": 87718488, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/87718488?v=4", + "html_url": "https:\/\/github.com\/digital-heroes-hamburg", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/digital-heroes-hamburg\/wp-php2shell-check", + "description": "Read-only check for WordPress sites on shared PHP hosting after PHP2Shell (CVE-2026-109618\/-109619).", + "fork": false, + "created_at": "2026-10-23T13:53:06Z", + "updated_at": "2026-10-23T14:36:51Z", + "pushed_at": "2026-10-23T14:13:26Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "bash", + "incident-response", + "php", + "security", + "shared-hosting", + "wordpress" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431114829, + "name": "php2shell-exploit", + "full_name": "spade-kk\/php2shell-exploit", + "owner": { + "login": "spade-kk", + "id": 113084528, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/113084528?v=4", + "html_url": "https:\/\/github.com\/spade-kk", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/spade-kk\/php2shell-exploit", + "description": "php2shell (CVE-2026-109618\/109619) 利用工具：带来源与日期的指纹库、两条引擎、免 gdb 标定；含源码级结论——本链下限 PHP 7.0。", + "fork": false, + "created_at": "2026-10-23T13:55:41Z", + "updated_at": "2026-10-23T18:01:55Z", + "pushed_at": "2026-10-23T18:01:51Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": true, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "aslr", + "cve", + "cve-2026-109618", + "cve-2026-109619", + "exploit", + "exploit-development", + "fingerprinting", + "ghsa-6wmf-4rv5-p3rp", + "ghsa-w8hw-w9fx-j79w", + "heap-exploitation", + "mod-php", + "php", + "php-fpm", + "php2shell", + "proof-of-concept", + "rce", + "security", + "session-upload-progress", + "vulnerability", + "zend-engine" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431120855, + "name": "php2shell", + "full_name": "zake1god\/php2shell", + "owner": { + "login": "zake1god", + "id": 139054590, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/139054590?v=4", + "html_url": "https:\/\/github.com\/zake1god", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/zake1god\/php2shell", + "description": "Loopback-only PHP2Shell research lab for CVE-2026-109618 and CVE-2026-109619", + "fork": false, + "created_at": "2026-10-23T14:01:00Z", + "updated_at": "2026-10-23T14:07:10Z", + "pushed_at": "2026-10-23T14:07:05Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431146769, + "name": "php2shell-guard", + "full_name": "malikad778\/php2shell-guard", + "owner": { + "login": "malikad778", + "id": 86764206, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/86764206?v=4", + "html_url": "https:\/\/github.com\/malikad778", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/malikad778\/php2shell-guard", + "description": "Automated runtime, config, and IaC auditor for PHP2Shell (CVE-2026-109618, CVE-2026-109619) and Node.js security advisories", + "fork": false, + "created_at": "2026-10-23T14:23:40Z", + "updated_at": "2026-10-23T15:22:59Z", + "pushed_at": "2026-10-23T15:23:01Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "audit", + "brotli", + "cve-2026-109618", + "cve-2026-109619", + "cve-2026-111497", + "devsecops", + "infosec", + "php", + "php2shell", + "security", + "security-audit", + "vulnerability-scanner" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431163081, + "name": "Paranoid-PHP2Shell", + "full_name": "scriptzteam\/Paranoid-PHP2Shell", + "owner": { + "login": "scriptzteam", + "id": 533180, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/533180?v=4", + "html_url": "https:\/\/github.com\/scriptzteam", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/scriptzteam\/Paranoid-PHP2Shell", + "description": "PHP2Shell - CVE-2026-109618 and CVE-2026-109619", + "fork": false, + "created_at": "2026-10-23T14:37:56Z", + "updated_at": "2026-10-23T16:16:20Z", + "pushed_at": "2026-10-23T16:16:17Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431179179, + "name": "php2shell", + "full_name": "MomoRizza\/php2shell", + "owner": { + "login": "MomoRizza", + "id": 90830785, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90830785?v=4", + "html_url": "https:\/\/github.com\/MomoRizza", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/MomoRizza\/php2shell", + "description": "CVE-2026-109618\/109619 — PHP session.upload_progress pre-auth RCE toolkit + hands-on labs", + "fork": false, + "created_at": "2026-10-23T14:51:40Z", + "updated_at": "2026-10-23T15:19:39Z", + "pushed_at": "2026-10-23T15:19:35Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 1, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 1, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431185596, + "name": "cybersunil.github.io", + "full_name": "CyberSunil\/cybersunil.github.io", + "owner": { + "login": "CyberSunil", + "id": 143227935, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/143227935?v=4", + "html_url": "https:\/\/github.com\/CyberSunil", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/CyberSunil\/cybersunil.github.io", + "description": "PHP2Shell — CVE-2026-109618 & CVE-2026-109619 research hub", + "fork": false, + "created_at": "2026-10-23T14:57:12Z", + "updated_at": "2026-10-23T15:04:23Z", + "pushed_at": "2026-10-23T15:04:18Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431190298, + "name": "php2shell-POC-CVE-2026-109618-CVE-2026-109619", + "full_name": "php2-shell\/php2shell-POC-CVE-2026-109618-CVE-2026-109619", + "owner": { + "login": "php2-shell", + "id": 341133089, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/341133089?v=4", + "html_url": "https:\/\/github.com\/php2-shell", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/php2-shell\/php2shell-POC-CVE-2026-109618-CVE-2026-109619", + "description": "php2shell CVE-2026-109618 CVE-2026-109619 tracks php2shell, cve php2shell and php2shell cve. php2shell vulnerability plus php cve 2026 (cve php 2026), php cve patch: 8.5.12, 8.4.27, 8.3.36, 8.2.35. php cve rce, php security. ", + "fork": false, + "created_at": "2026-10-23T15:01:15Z", + "updated_at": "2026-10-23T15:21:15Z", + "pushed_at": "2026-10-23T15:07:15Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve-2026-109618", + "cve-2026-109619", + "cve-php-2026", + "cve-php2shell", + "latest-php-cve", + "php-critical-cve", + "php-cve-2026", + "php-cve-fix", + "php-cve-latest", + "php-cve-patch", + "php-cve-rce", + "php-cve-vulnerability", + "php-patch", + "php-security", + "php-version-cve", + "php-vulnerability-cve", + "php2shell", + "php2shell-cve", + "php2shell-cve-2026", + "php2shell-vulnerability" + ], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431197392, + "name": "php-oneshot-checker", + "full_name": "K4ySuh\/php-oneshot-checker", + "owner": { + "login": "K4ySuh", + "id": 147923141, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/147923141?v=4", + "html_url": "https:\/\/github.com\/K4ySuh", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/K4ySuh\/php-oneshot-checker", + "description": "PHP configuration and exposure checker for CVE-2026-109618, CVE-2026-109619, and related paths", + "fork": false, + "created_at": "2026-10-23T15:07:29Z", + "updated_at": "2026-10-23T15:10:34Z", + "pushed_at": "2026-10-23T15:07:34Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431203641, + "name": "cve-2026-109618-php-oom-simulation", + "full_name": "ChaskarVinit\/cve-2026-109618-php-oom-simulation", + "owner": { + "login": "ChaskarVinit", + "id": 202975836, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/202975836?v=4", + "html_url": "https:\/\/github.com\/ChaskarVinit", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/ChaskarVinit\/cve-2026-109618-php-oom-simulation", + "description": "Educational HTML\/CSS\/JS visualization of CVE-2026-109618 — a PHP out-of-memory \/ longjmp() request-state corruption issue. For security awareness and blue-team training only.", + "fork": false, + "created_at": "2026-10-23T15:13:05Z", + "updated_at": "2026-10-23T16:00:56Z", + "pushed_at": "2026-10-23T15:13:56Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431204669, + "name": "POC-CVE-2026-109618-CVE-2026-109619-CVE-2024-4577", + "full_name": "Ghost-Bx1\/POC-CVE-2026-109618-CVE-2026-109619-CVE-2024-4577", + "owner": { + "login": "Ghost-Bx1", + "id": 103540917, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103540917?v=4", + "html_url": "https:\/\/github.com\/Ghost-Bx1", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Ghost-Bx1\/POC-CVE-2026-109618-CVE-2026-109619-CVE-2024-4577", + "description": null, + "fork": false, + "created_at": "2026-10-23T15:14:01Z", + "updated_at": "2026-10-23T15:19:39Z", + "pushed_at": "2026-10-23T15:19:34Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431210977, + "name": "php74-cve-patched", + "full_name": "softjapan\/php74-cve-patched", + "owner": { + "login": "softjapan", + "id": 11269856, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/11269856?v=4", + "html_url": "https:\/\/github.com\/softjapan", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/softjapan\/php74-cve-patched", + "description": "Drop-in php:7.4-apache\/fpm\/cli Docker images with the official fix for CVE-2026-109618 \/ CVE-2026-109619 (critical PHP RCE). amd64 + arm64.", + "fork": false, + "created_at": "2026-10-23T15:19:41Z", + "updated_at": "2026-10-23T17:58:00Z", + "pushed_at": "2026-10-23T15:59:21Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "apache", + "cve-2026-109618", + "cve-2026-109619", + "docker", + "docker-image", + "eol", + "legacy", + "mod-php", + "php", + "php-fpm", + "php74", + "security" + ], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431214910, + "name": "cve-2026-109618-109619-poc", + "full_name": "Noshadi-sec\/cve-2026-109618-109619-poc", + "owner": { + "login": "Noshadi-sec", + "id": 148922676, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/148922676?v=4", + "html_url": "https:\/\/github.com\/Noshadi-sec", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Noshadi-sec\/cve-2026-109618-109619-poc", + "description": "PoC exploit harness and research framework for CVE-2026-109618 and CVE-2026-109619 (PHP session.upload_progress UAF).", + "fork": false, + "created_at": "2026-10-23T15:23:13Z", + "updated_at": "2026-10-23T18:47:31Z", + "pushed_at": "2026-10-23T18:47:26Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431222633, + "name": "php-7.3.33-cve-2026-109618-109619", + "full_name": "aiuser888-bot\/php-7.3.33-cve-2026-109618-109619", + "owner": { + "login": "aiuser888-bot", + "id": 345760554, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/345760554?v=4", + "html_url": "https:\/\/github.com\/aiuser888-bot", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/aiuser888-bot\/php-7.3.33-cve-2026-109618-109619", + "description": null, + "fork": false, + "created_at": "2026-10-23T15:29:59Z", + "updated_at": "2026-10-23T15:58:12Z", + "pushed_at": "2026-10-23T15:58:08Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431240050, + "name": "php2shell", + "full_name": "amier-ge\/php2shell", + "owner": { + "login": "amier-ge", + "id": 168223186, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/168223186?v=4", + "html_url": "https:\/\/github.com\/amier-ge", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/amier-ge\/php2shell", + "description": "A local test environment for PHP2Shell (CVE-2026-109618) on a vulnerable PHP server.", + "fork": false, + "created_at": "2026-10-23T15:45:29Z", + "updated_at": "2026-10-23T15:47:35Z", + "pushed_at": "2026-10-23T15:45:39Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431248125, + "name": "php2shell-check", + "full_name": "AmanSin001\/php2shell-check", + "owner": { + "login": "AmanSin001", + "id": 65849351, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/65849351?v=4", + "html_url": "https:\/\/github.com\/AmanSin001", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/AmanSin001\/php2shell-check", + "description": "Check a PHP install for the PHP2Shell fixes (CVE-2026-109618, CVE-2026-109619), including Ubuntu backports, and show interim mitigations.", + "fork": false, + "created_at": "2026-10-23T15:52:40Z", + "updated_at": "2026-10-23T15:52:59Z", + "pushed_at": "2026-10-23T15:52:47Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve-2026-109618", + "cve-2026-109619", + "php", + "php2shell", + "security" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431309421, + "name": "php2shell-scanner", + "full_name": "walt3rblake\/php2shell-scanner", + "owner": { + "login": "walt3rblake", + "id": 205808062, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/205808062?v=4", + "html_url": "https:\/\/github.com\/walt3rblake", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/walt3rblake\/php2shell-scanner", + "description": "Multi-tool passive scanner for CVE-2026-109618 \/ CVE-2026-109619 (PHP memory-corruption RCE pair). Cross-checks 6 independent detection tools, CMS-aware, no exploitation.", + "fork": false, + "created_at": "2026-10-23T16:49:15Z", + "updated_at": "2026-10-23T17:06:41Z", + "pushed_at": "2026-10-23T17:06:38Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431331217, + "name": "php74-el7-php2shell", + "full_name": "jniedergang\/php74-el7-php2shell", + "owner": { + "login": "jniedergang", + "id": 22889291, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/22889291?v=4", + "html_url": "https:\/\/github.com\/jniedergang", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/jniedergang\/php74-el7-php2shell", + "description": "Unofficial EL7 rebuild of Remi's php74 SCL packages with the PHP2Shell fix (CVE-2026-109618, CVE-2026-109619). Not supported by SUSE, Red Hat or Remi.", + "fork": false, + "created_at": "2026-10-23T17:09:43Z", + "updated_at": "2026-10-23T17:22:39Z", + "pushed_at": "2026-10-23T17:22:34Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431363174, + "name": "php2shell-safe-learning-lab", + "full_name": "SANAULLAH-AI\/php2shell-safe-learning-lab", + "owner": { + "login": "SANAULLAH-AI", + "id": 112656222, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/112656222?v=4", + "html_url": "https:\/\/github.com\/SANAULLAH-AI", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/SANAULLAH-AI\/php2shell-safe-learning-lab", + "description": "An educational PHP2Shell (CVE-2026-109618 \/ CVE-2026-109619) learning lab demonstrating HTTP upload handling, memory-safety concepts, safe request simulation, and defensive monitoring. Includes Python examples, Docker setup, unit tests, and a beginner-friendly guide. No exploit payloads or real-world attacks.", + "fork": false, + "created_at": "2026-10-23T17:41:17Z", + "updated_at": "2026-10-23T17:57:23Z", + "pushed_at": "2026-10-23T17:57:20Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431367107, + "name": "php2shell-sapi-differential", + "full_name": "RuxaXa\/php2shell-sapi-differential", + "owner": { + "login": "RuxaXa", + "id": 230383980, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/230383980?v=4", + "html_url": "https:\/\/github.com\/RuxaXa", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/RuxaXa\/php2shell-sapi-differential", + "description": "SAPI differential research on CVE-2026-109618\/109619: FPM session-residue patch verification (29\/29 vs 0\/31), mod_php clean-room PoC, full A\/B labs", + "fork": false, + "created_at": "2026-10-23T17:45:14Z", + "updated_at": "2026-10-23T18:20:21Z", + "pushed_at": "2026-10-23T18:10:02Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve-2026-109618", + "cve-2026-109619", + "defenders", + "detection", + "differential-analysis", + "patch-verification", + "php", + "php-fpm", + "security-research", + "vulnerability-research" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431401151, + "name": "php2shell-fix", + "full_name": "sanketkokate712\/php2shell-fix", + "owner": { + "login": "sanketkokate712", + "id": 186406115, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/186406115?v=4", + "html_url": "https:\/\/github.com\/sanketkokate712", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/sanketkokate712\/php2shell-fix", + "description": "Claude Code skill + scripts to find, patch and verify PHP2Shell (CVE-2026-109618, CVE-2026-109619) on any PHP server", + "fork": false, + "created_at": "2026-10-23T18:19:14Z", + "updated_at": "2026-10-23T18:25:23Z", + "pushed_at": "2026-10-23T18:25:25Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "claude-code", + "claude-plugin", + "claude-skill", + "cve-2026-109618", + "cve-2026-109619", + "devops", + "php", + "php-security", + "php2shell", + "security", + "sysadmin", + "vulnerability-scanner" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431415672, + "name": "php2shell", + "full_name": "abenezer101\/php2shell", + "owner": { + "login": "abenezer101", + "id": 102401562, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102401562?v=4", + "html_url": "https:\/\/github.com\/abenezer101", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/abenezer101\/php2shell", + "description": "Scans a domain for CVE-2026-109618 \/ CVE-2026-109619 (php2shell) exposure, then audits and fixes the vulnerable PHP runtime pin in your code base. Python, stdlib only", + "fork": false, + "created_at": "2026-10-23T18:34:15Z", + "updated_at": "2026-10-23T18:36:19Z", + "pushed_at": "2026-10-23T18:34:55Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431420749, + "name": "php2shell-fix", + "full_name": "devborlot\/php2shell-fix", + "owner": { + "login": "devborlot", + "id": 238906448, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/238906448?v=4", + "html_url": "https:\/\/github.com\/devborlot", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/devborlot\/php2shell-fix", + "description": "Correção e verificação de PHP 7.4 (CVE-2026-109618\/109619) por bind, Apache e nginx\/FPM", + "fork": false, + "created_at": "2026-10-23T18:39:28Z", + "updated_at": "2026-10-23T18:39:37Z", + "pushed_at": "2026-10-23T18:39:43Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431428471, + "name": "php2shell", + "full_name": "KtebhTeam\/php2shell", + "owner": { + "login": "KtebhTeam", + "id": 347062473, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/347062473?v=4", + "html_url": "https:\/\/github.com\/KtebhTeam", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/KtebhTeam\/php2shell", + "description": "Hybrid PHP2Shell Security Toolkit (CVE-2026-109618 & 109619). Features an automated vulnerability scanner, session-state analyzer, and application upload handler validator. For authorized security testing only.", + "fork": false, + "created_at": "2026-10-23T18:47:32Z", + "updated_at": "2026-10-23T19:11:56Z", + "pushed_at": "2026-10-23T19:11:12Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve-2026-109618", + "cve-2026-109619", + "cve-2026-115560", + "defensive-security", + "php-security", + "php2shell", + "php2shell-cve", + "php2shell-cve-2026", + "php2shell-scanner", + "php2shell-vulnerability", + "security-scanner", + "vulnerability-research", + "vulnerability-researcher" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431430491, + "name": "php2shell-detector", + "full_name": "ionsec\/php2shell-detector", + "owner": { + "login": "ionsec", + "id": 127967266, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/127967266?v=4", + "html_url": "https:\/\/github.com\/ionsec", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/ionsec\/php2shell-detector", + "description": "php2shell-detector - local + network detections for PHP2Shell (CVE-2026-109618 \/ CVE-2026-109619) by IONSEC. Python CLI: host posture, access-log fingerprints, binary drift; plus Sigma, Suricata, ModSecurity rules and curated references.", + "fork": false, + "created_at": "2026-10-23T18:49:51Z", + "updated_at": "2026-10-23T18:50:01Z", + "pushed_at": "2026-10-23T18:49:56Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431438629, + "name": "php2shell-pocJavali", + "full_name": "segfaultx01\/php2shell-pocJavali", + "owner": { + "login": "segfaultx01", + "id": 305956896, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/305956896?v=4", + "html_url": "https:\/\/github.com\/segfaultx01", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/segfaultx01\/php2shell-pocJavali", + "description": "Single-file PoC for CVE-2026-109618\/109619 (PHP session upload_progress OOM UAF -> RCE). Authorized internal testing only.", + "fork": false, + "created_at": "2026-10-23T18:58:28Z", + "updated_at": "2026-10-23T19:13:59Z", + "pushed_at": "2026-10-23T19:00:31Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431446295, + "name": "project2026_20261023_php_rce_guard", + "full_name": "Nguemoue\/project2026_20261023_php_rce_guard", + "owner": { + "login": "Nguemoue", + "id": 81599046, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/81599046?v=4", + "html_url": "https:\/\/github.com\/Nguemoue", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Nguemoue\/project2026_20261023_php_rce_guard", + "description": "Vérifie si une version PHP est encore exposée aux RCE du 21 octobre 2026 (CVE-2026-109618, CVE-2026-109619) et rappelle le suivi CVE-2026-115560.", + "fork": false, + "created_at": "2026-10-23T19:06:55Z", + "updated_at": "2026-10-23T19:10:00Z", + "pushed_at": "2026-10-23T19:09:56Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431469535, + "name": "RodMapAuditoriaweb", + "full_name": "Filipegabri\/RodMapAuditoriaweb", + "owner": { + "login": "Filipegabri", + "id": 107229150, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/107229150?v=4", + "html_url": "https:\/\/github.com\/Filipegabri", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Filipegabri\/RodMapAuditoriaweb", + "description": "Metodologia completa de auditoria web - 7 fases - PHP2Shell RCE CVE-2026-109618, Wazuh Baseline 17 regras, MITRE ATT&CK - Por Filipe Gabriel SOC Analyst Luanda", + "fork": false, + "created_at": "2026-10-23T19:33:21Z", + "updated_at": "2026-10-23T19:40:47Z", + "pushed_at": "2026-10-23T19:40:43Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431472054, + "name": "phpguard", + "full_name": "pruthvi0820-cell\/phpguard", + "owner": { + "login": "pruthvi0820-cell", + "id": 238687587, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/238687587?v=4", + "html_url": "https:\/\/github.com\/pruthvi0820-cell", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/pruthvi0820-cell\/phpguard", + "description": "Defensive toolkit for PHP servers after PHP2Shell (CVE-2026-109618\/9): fleet patch audit incl. distro backports & end-of-life PHP, php.ini hardening, owner-only website leak check, and access-log attack detection with canary traps. A–F graded, fix-first reports. Python, no dependencies.", + "fork": false, + "created_at": "2026-10-23T19:36:12Z", + "updated_at": "2026-10-23T19:41:37Z", + "pushed_at": "2026-10-23T19:37:56Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-109619.json b/2026/CVE-2026-109619.json index f6f8e83f42..375971254f 100644 --- a/2026/CVE-2026-109619.json +++ b/2026/CVE-2026-109619.json @@ -158,10 +158,10 @@ "description": null, "fork": false, "created_at": "2026-10-21T19:25:19Z", - "updated_at": "2026-10-22T13:08:39Z", + "updated_at": "2026-10-23T19:44:33Z", "pushed_at": "2026-10-21T19:25:24Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -172,7 +172,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 3, + "watchers": 4, "score": 0, "subscribers_count": 0 }, @@ -578,6 +578,39 @@ "score": 0, "subscribers_count": 0 }, + { + "id": 1430853174, + "name": "solid-palm-tree", + "full_name": "DarynOngera\/solid-palm-tree", + "owner": { + "login": "DarynOngera", + "id": 132561478, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/132561478?v=4", + "html_url": "https:\/\/github.com\/DarynOngera", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/DarynOngera\/solid-palm-tree", + "description": "CVE-2026-109619 \/ CVE-2026-109618 PoC", + "fork": false, + "created_at": "2026-10-23T09:41:48Z", + "updated_at": "2026-10-23T18:28:10Z", + "pushed_at": "2026-10-23T12:55:14Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 + }, { "id": 1431049217, "name": "br-php2shell", @@ -593,10 +626,10 @@ "description": "Descubra se sites da internet é vulnerável a php2shell CVE-2026-109619", "fork": false, "created_at": "2026-10-23T12:57:18Z", - "updated_at": "2026-10-23T13:16:15Z", + "updated_at": "2026-10-23T15:05:55Z", "pushed_at": "2026-10-23T13:16:11Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -607,7 +640,56 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431107565, + "name": "php2shell", + "full_name": "aarsaputra\/php2shell", + "owner": { + "login": "aarsaputra", + "id": 96281224, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/96281224?v=4", + "html_url": "https:\/\/github.com\/aarsaputra", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/aarsaputra\/php2shell", + "description": "Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619\/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design", + "fork": false, + "created_at": "2026-10-23T13:49:52Z", + "updated_at": "2026-10-23T19:35:50Z", + "pushed_at": "2026-10-23T16:10:40Z", + "stargazers_count": 3, + "watchers_count": 3, + "has_discussions": false, + "forks_count": 2, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve", + "exploit", + "penetration-testing", + "php", + "php2shell", + "php2shell-cve", + "php2shell-cve-2026", + "php2shell-vulnerability", + "poc", + "rce", + "rce-scanner", + "security", + "shell", + "shell-backdoor", + "vulnerability-research" + ], + "visibility": "public", + "forks": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-110264.json b/2026/CVE-2026-110264.json index f87418d4e1..b01f23830d 100644 --- a/2026/CVE-2026-110264.json +++ b/2026/CVE-2026-110264.json @@ -166,8 +166,8 @@ "description": "Authorized loopback-only Docker firing range for CVE-2026-110264 (Onigmo regex integer-overflow, unauth RCE) research + detection engineering", "fork": false, "created_at": "2026-10-23T04:07:47Z", - "updated_at": "2026-10-23T11:04:10Z", - "pushed_at": "2026-10-23T11:04:06Z", + "updated_at": "2026-10-23T14:38:23Z", + "pushed_at": "2026-10-23T14:38:18Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -260,5 +260,45 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1431361174, + "name": "onigmo-cve-2026-110264", + "full_name": "lesterlam\/onigmo-cve-2026-110264", + "owner": { + "login": "lesterlam", + "id": 8011680, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8011680?v=4", + "html_url": "https:\/\/github.com\/lesterlam", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/lesterlam\/onigmo-cve-2026-110264", + "description": "Reproduction lab for CVE-2026-110264 - the 16-bit ID overflow in Onigmo, the regexp engine Ruby bundles (GitLab CE\/EE, CVSS 10.0). Standalone engine build + A\/B against the vendor fix. Trigger condition only; no weaponised exploit.", + "fork": false, + "created_at": "2026-10-23T17:39:22Z", + "updated_at": "2026-10-23T18:30:31Z", + "pushed_at": "2026-10-23T18:30:28Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve-2026-110264", + "gitlab", + "memory-corruption", + "onigmo", + "regexp", + "security-lab" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-111497.json b/2026/CVE-2026-111497.json index ab13c2992a..e61aadebd5 100644 --- a/2026/CVE-2026-111497.json +++ b/2026/CVE-2026-111497.json @@ -47,12 +47,12 @@ "description": "Reproducible local Brotli decoder proof for CVE-2026-111497 with a self-checking tuned RCE harness", "fork": false, "created_at": "2026-10-22T04:08:28Z", - "updated_at": "2026-10-23T11:36:20Z", + "updated_at": "2026-10-23T18:43:48Z", "pushed_at": "2026-10-23T11:08:06Z", - "stargazers_count": 12, - "watchers_count": 12, + "stargazers_count": 25, + "watchers_count": 25, "has_discussions": false, - "forks_count": 7, + "forks_count": 10, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,8 +60,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 7, - "watchers": 12, + "forks": 10, + "watchers": 25, "score": 0, "subscribers_count": 0 }, @@ -119,10 +119,10 @@ "description": "Node.js Brotli Decoder OOB Write to RCE", "fork": false, "created_at": "2026-10-22T08:52:11Z", - "updated_at": "2026-10-23T12:40:13Z", + "updated_at": "2026-10-23T14:21:41Z", "pushed_at": "2026-10-22T08:53:45Z", - "stargazers_count": 4, - "watchers_count": 4, + "stargazers_count": 5, + "watchers_count": 5, "has_discussions": false, "forks_count": 4, "allow_forking": true, @@ -135,7 +135,7 @@ ], "visibility": "public", "forks": 4, - "watchers": 4, + "watchers": 5, "score": 0, "subscribers_count": 0 }, @@ -154,10 +154,10 @@ "description": null, "fork": false, "created_at": "2026-10-22T11:53:56Z", - "updated_at": "2026-10-22T12:43:30Z", + "updated_at": "2026-10-23T18:00:26Z", "pushed_at": "2026-10-22T12:43:03Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -168,7 +168,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -310,10 +310,10 @@ "description": "CVE-2026-111497 — Node.js Brotli Decoder OOB Write: Deep Analysis & Structural Unreachability Proof. MLEN_MAX = BLOCK_SIZE_CAP = 2^24 makes RCE structurally unreachable.", "fork": false, "created_at": "2026-10-22T19:40:47Z", - "updated_at": "2026-10-23T04:26:42Z", + "updated_at": "2026-10-23T17:59:55Z", "pushed_at": "2026-10-23T00:41:57Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -324,7 +324,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 }, @@ -493,10 +493,76 @@ "description": "ZeroHack: Node2Shell (CVE-2026-111497) Docker Lab & PoC Framework", "fork": false, "created_at": "2026-10-23T10:53:00Z", - "updated_at": "2026-10-23T13:00:23Z", + "updated_at": "2026-10-23T18:17:55Z", "pushed_at": "2026-10-23T11:17:34Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, + "has_discussions": false, + "forks_count": 1, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 1, + "watchers": 3, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431159567, + "name": "CVE-2026-111497", + "full_name": "Arkango\/CVE-2026-111497", + "owner": { + "login": "Arkango", + "id": 23188987, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/23188987?v=4", + "html_url": "https:\/\/github.com\/Arkango", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Arkango\/CVE-2026-111497", + "description": "CVE-2026-111497 (Node2Shell) — Node.js Brotli decoder OOB heap write. Independent research: exploit code, Docker labs, Express RCE gap analysis.", + "fork": false, + "created_at": "2026-10-23T14:34:49Z", + "updated_at": "2026-10-23T15:27:39Z", + "pushed_at": "2026-10-23T15:27:36Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 1, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 1, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431201407, + "name": "CVE-2026-111497_nodejs_hash_lookup", + "full_name": "w116tjb\/CVE-2026-111497_nodejs_hash_lookup", + "owner": { + "login": "w116tjb", + "id": 19626682, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/19626682?v=4", + "html_url": "https:\/\/github.com\/w116tjb", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/w116tjb\/CVE-2026-111497_nodejs_hash_lookup", + "description": null, + "fork": false, + "created_at": "2026-10-23T15:11:00Z", + "updated_at": "2026-10-23T15:11:51Z", + "pushed_at": "2026-10-23T15:11:46Z", + "stargazers_count": 0, + "watchers_count": 0, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -507,7 +573,88 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 2, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431247957, + "name": "node-brotli-check", + "full_name": "AmanSin001\/node-brotli-check", + "owner": { + "login": "AmanSin001", + "id": 65849351, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/65849351?v=4", + "html_url": "https:\/\/github.com\/AmanSin001", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/AmanSin001\/node-brotli-check", + "description": "Check a Node.js runtime for the CVE-2026-111497 Brotli decoder fix and find where a project decodes outside Brotli data. No dependencies.", + "fork": false, + "created_at": "2026-10-23T15:52:31Z", + "updated_at": "2026-10-23T15:52:58Z", + "pushed_at": "2026-10-23T15:52:38Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "brotli", + "cve-2026-111497", + "express", + "nodejs", + "security" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431446570, + "name": "node2shell-check", + "full_name": "CompleteTech-LLC\/node2shell-check", + "owner": { + "login": "CompleteTech-LLC", + "id": 173582255, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/173582255?v=4", + "html_url": "https:\/\/github.com\/CompleteTech-LLC", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/CompleteTech-LLC\/node2shell-check", + "description": "Passive Node2Shell (CVE-2026-111497) exposure checker and offline Node.js runtime assessment with branded HTML reports. Python 3.10+, no dependencies, no exploit payloads.", + "fork": false, + "created_at": "2026-10-23T19:07:13Z", + "updated_at": "2026-10-23T19:32:40Z", + "pushed_at": "2026-10-23T19:32:37Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "brotli", + "cve-2026-111497", + "html-report", + "node2shell", + "nodejs", + "passive-detection", + "python", + "security-tools" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-111943.json b/2026/CVE-2026-111943.json index 87ae2e0aa6..2a5f3cfba6 100644 --- a/2026/CVE-2026-111943.json +++ b/2026/CVE-2026-111943.json @@ -101,7 +101,7 @@ "fork": false, "created_at": "2026-10-22T11:26:51Z", "updated_at": "2026-10-23T02:35:08Z", - "pushed_at": "2026-10-23T12:04:35Z", + "pushed_at": "2026-10-23T13:52:47Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-114509.json b/2026/CVE-2026-114509.json index e38ac4429f..fda3f07672 100644 --- a/2026/CVE-2026-114509.json +++ b/2026/CVE-2026-114509.json @@ -1,4 +1,37 @@ [ + { + "id": 1426382450, + "name": "CVE-2026-114509-PoC", + "full_name": "hakaioffsec\/CVE-2026-114509-PoC", + "owner": { + "login": "hakaioffsec", + "id": 99059183, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/99059183?v=4", + "html_url": "https:\/\/github.com\/hakaioffsec", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/hakaioffsec\/CVE-2026-114509-PoC", + "description": "A poc for https:\/\/github.com\/laravel\/framework\/security\/advisories\/GHSA-f9x3-7vq9-cph6", + "fork": false, + "created_at": "2026-10-20T01:52:25Z", + "updated_at": "2026-10-23T19:12:36Z", + "pushed_at": "2026-10-23T19:12:32Z", + "stargazers_count": 11, + "watchers_count": 11, + "has_discussions": false, + "forks_count": 2, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 2, + "watchers": 11, + "score": 0, + "subscribers_count": 0 + }, { "id": 1429317603, "name": "-CVE-2026-114509-POC", diff --git a/2026/CVE-2026-115560.json b/2026/CVE-2026-115560.json new file mode 100644 index 0000000000..8d927ab32f --- /dev/null +++ b/2026/CVE-2026-115560.json @@ -0,0 +1,107 @@ +[ + { + "id": 1431297082, + "name": "php-cve-2026-115560-demo", + "full_name": "prnjlksingh\/php-cve-2026-115560-demo", + "owner": { + "login": "prnjlksingh", + "id": 174644555, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/174644555?v=4", + "html_url": "https:\/\/github.com\/prnjlksingh", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/prnjlksingh\/php-cve-2026-115560-demo", + "description": null, + "fork": false, + "created_at": "2026-10-23T16:37:45Z", + "updated_at": "2026-10-23T18:50:53Z", + "pushed_at": "2026-10-23T16:42:59Z", + "stargazers_count": 2, + "watchers_count": 2, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 2, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431326794, + "name": "CVE-2026-115560", + "full_name": "sykeops\/CVE-2026-115560", + "owner": { + "login": "sykeops", + "id": 306985812, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/306985812?v=4", + "html_url": "https:\/\/github.com\/sykeops", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/sykeops\/CVE-2026-115560", + "description": "PHP Session upload progress injection - CVE-2026-115560", + "fork": false, + "created_at": "2026-10-23T17:05:25Z", + "updated_at": "2026-10-23T17:27:26Z", + "pushed_at": "2026-10-23T17:09:22Z", + "stargazers_count": 2, + "watchers_count": 2, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 2, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1431413557, + "name": "B63-POC-CVE-2026-115560", + "full_name": "basesixtythree\/B63-POC-CVE-2026-115560", + "owner": { + "login": "basesixtythree", + "id": 220976450, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/220976450?v=4", + "html_url": "https:\/\/github.com\/basesixtythree", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/basesixtythree\/B63-POC-CVE-2026-115560", + "description": "PoC and verification material for CVE-2026-115560 (PHP session serializer confusion via session.upload_progress -> object injection -> RCE)", + "fork": false, + "created_at": "2026-10-23T18:31:59Z", + "updated_at": "2026-10-23T18:32:07Z", + "pushed_at": "2026-10-23T18:32:03Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve", + "cve-2026-115560", + "php", + "poc", + "security-research" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-16723.json b/2026/CVE-2026-16723.json index 136d47de37..33759fc16d 100644 --- a/2026/CVE-2026-16723.json +++ b/2026/CVE-2026-16723.json @@ -432,5 +432,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1431198255, + "name": "fastjson-CVE-2026-16723", + "full_name": "Ethen1212\/fastjson-CVE-2026-16723", + "owner": { + "login": "Ethen1212", + "id": 195118622, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/195118622?v=4", + "html_url": "https:\/\/github.com\/Ethen1212", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Ethen1212\/fastjson-CVE-2026-16723", + "description": "CVE-2026-16723 Fastjson 1.2.68-1.2.83 ???? RCE ?? (java.lang.Class whitelist bypass)", + "fork": false, + "created_at": "2026-10-23T15:08:12Z", + "updated_at": "2026-10-23T16:36:02Z", + "pushed_at": "2026-10-23T15:10:07Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-23479.json b/2026/CVE-2026-23479.json index ede3bc9b7b..0f6f32625e 100644 --- a/2026/CVE-2026-23479.json +++ b/2026/CVE-2026-23479.json @@ -14,8 +14,8 @@ "description": "Safe read-only version checker + Sigma rule for Redis CVE-2026-23479 (authenticated use-after-free -> RCE). By DugganUSA.", "fork": false, "created_at": "2026-06-04T20:09:02Z", - "updated_at": "2026-10-15T18:11:51Z", - "pushed_at": "2026-10-15T18:11:47Z", + "updated_at": "2026-10-23T18:38:27Z", + "pushed_at": "2026-10-23T18:38:22Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-31431.json b/2026/CVE-2026-31431.json index aeb19a03fe..6cf7f52454 100644 --- a/2026/CVE-2026-31431.json +++ b/2026/CVE-2026-31431.json @@ -124,10 +124,10 @@ "description": "Most Linux LPEs need a race window or a kernel-specific offset. Copy Fail is a straight-line logic flaw, it needs neither. The same 732-byte Python script (or .c elf) roots every Linux distribution shipped since 2017.", "fork": false, "created_at": "2026-04-29T21:08:42Z", - "updated_at": "2026-10-18T11:48:47Z", + "updated_at": "2026-10-23T15:00:23Z", "pushed_at": "2026-04-29T21:22:27Z", - "stargazers_count": 111, - "watchers_count": 111, + "stargazers_count": 110, + "watchers_count": 110, "has_discussions": false, "forks_count": 23, "allow_forking": true, @@ -138,7 +138,7 @@ "topics": [], "visibility": "public", "forks": 23, - "watchers": 111, + "watchers": 110, "score": 0, "subscribers_count": 0 }, @@ -11243,12 +11243,12 @@ "description": "Copy Fail exploit for Ubuntu 20.04 with legacy Python versions, including script to hide Copy Fail.", "fork": false, "created_at": "2026-10-23T08:21:40Z", - "updated_at": "2026-10-23T08:50:47Z", - "pushed_at": "2026-10-23T08:24:47Z", + "updated_at": "2026-10-23T14:06:12Z", + "pushed_at": "2026-10-23T14:06:06Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -11264,7 +11264,7 @@ "security" ], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 0, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-32475.json b/2026/CVE-2026-32475.json index 150098ea33..3f6e24e279 100644 --- a/2026/CVE-2026-32475.json +++ b/2026/CVE-2026-32475.json @@ -80,10 +80,10 @@ "description": "PoC for CVE-2026-32475: Elementor Pro <=4.2.1 unauthenticated file upload to RCE. Stdlib-only Python.", "fork": false, "created_at": "2026-08-25T01:20:49Z", - "updated_at": "2026-10-09T08:32:24Z", + "updated_at": "2026-10-23T19:07:43Z", "pushed_at": "2026-08-25T12:09:35Z", - "stargazers_count": 6, - "watchers_count": 6, + "stargazers_count": 7, + "watchers_count": 7, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -94,7 +94,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 6, + "watchers": 7, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-33439.json b/2026/CVE-2026-33439.json index e6884ff831..82b1a71bb6 100644 --- a/2026/CVE-2026-33439.json +++ b/2026/CVE-2026-33439.json @@ -122,7 +122,7 @@ "stargazers_count": 5, "watchers_count": 5, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -138,7 +138,7 @@ "security-research" ], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 5, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-33697.json b/2026/CVE-2026-33697.json index 9e3e2598a6..19773dd826 100644 --- a/2026/CVE-2026-33697.json +++ b/2026/CVE-2026-33697.json @@ -14,8 +14,8 @@ "description": "DugganUSA threat-intelligence contributions to the IETF Hackathon: real-world agentic-attack benchmark vectors, CVE-2026-33697 attestation analysis, MCP verification.", "fork": false, "created_at": "2026-07-21T15:44:44Z", - "updated_at": "2026-10-15T18:11:29Z", - "pushed_at": "2026-10-15T18:11:25Z", + "updated_at": "2026-10-23T18:38:01Z", + "pushed_at": "2026-10-23T18:37:57Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-41452.json b/2026/CVE-2026-41452.json index 71b750fce5..6be2d391b8 100644 --- a/2026/CVE-2026-41452.json +++ b/2026/CVE-2026-41452.json @@ -47,8 +47,8 @@ "description": null, "fork": false, "created_at": "2026-09-20T23:31:16Z", - "updated_at": "2026-09-20T23:59:19Z", - "pushed_at": "2026-09-20T23:59:16Z", + "updated_at": "2026-10-23T14:23:44Z", + "pushed_at": "2026-10-23T14:23:40Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-43284.json b/2026/CVE-2026-43284.json index 6bb36ef92e..30c72ccd67 100644 --- a/2026/CVE-2026-43284.json +++ b/2026/CVE-2026-43284.json @@ -359,10 +359,10 @@ "description": "arm64\/aarch64 port of V4bel\/dirtyfrag (CVE-2026-43284). ESP-only - rxrpc path kernel-oopses on arm64 due to flush_dcache_page", "fork": false, "created_at": "2026-05-10T04:22:19Z", - "updated_at": "2026-10-22T14:49:07Z", + "updated_at": "2026-10-23T18:00:17Z", "pushed_at": "2026-05-13T08:32:55Z", - "stargazers_count": 36, - "watchers_count": 36, + "stargazers_count": 37, + "watchers_count": 37, "has_discussions": false, "forks_count": 7, "allow_forking": true, @@ -384,7 +384,7 @@ ], "visibility": "public", "forks": 7, - "watchers": 36, + "watchers": 37, "score": 0, "subscribers_count": 0 }, @@ -1388,7 +1388,7 @@ "stargazers_count": 47, "watchers_count": 47, "has_discussions": false, - "forks_count": 21, + "forks_count": 22, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1396,7 +1396,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 21, + "forks": 22, "watchers": 47, "score": 0, "subscribers_count": 1 @@ -1449,7 +1449,7 @@ "description": "Ephemeral root via the CVE-2026-43284 page-cache exploit", "fork": false, "created_at": "2026-10-19T03:38:41Z", - "updated_at": "2026-10-22T01:05:29Z", + "updated_at": "2026-10-23T16:16:21Z", "pushed_at": "2026-10-18T13:09:20Z", "stargazers_count": 0, "watchers_count": 0, diff --git a/2026/CVE-2026-43499.json b/2026/CVE-2026-43499.json index 6a54a580ee..6336b2bd3c 100644 --- a/2026/CVE-2026-43499.json +++ b/2026/CVE-2026-43499.json @@ -1028,12 +1028,12 @@ "description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499", "fork": false, "created_at": "2026-07-17T14:24:08Z", - "updated_at": "2026-10-23T12:41:22Z", + "updated_at": "2026-10-23T18:06:20Z", "pushed_at": "2026-09-03T03:21:42Z", - "stargazers_count": 1467, - "watchers_count": 1467, + "stargazers_count": 1469, + "watchers_count": 1469, "has_discussions": false, - "forks_count": 293, + "forks_count": 294, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1041,8 +1041,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 293, - "watchers": 1467, + "forks": 294, + "watchers": 1469, "score": 0, "subscribers_count": 44 }, @@ -1094,10 +1094,10 @@ "description": "（CVE-2026-43499）内核漏洞利用程序，适用于未解锁 Bootloader 的设备。", "fork": false, "created_at": "2026-07-18T06:24:34Z", - "updated_at": "2026-10-23T06:48:01Z", + "updated_at": "2026-10-23T15:02:09Z", "pushed_at": "2026-07-19T08:28:49Z", - "stargazers_count": 59, - "watchers_count": 59, + "stargazers_count": 60, + "watchers_count": 60, "has_discussions": true, "forks_count": 17, "allow_forking": true, @@ -1108,7 +1108,7 @@ "topics": [], "visibility": "public", "forks": 17, - "watchers": 59, + "watchers": 60, "score": 0, "subscribers_count": 0 }, @@ -1709,12 +1709,12 @@ "description": "GhostLock One-Tap Execution App (CVE-2026-43499)", "fork": false, "created_at": "2026-07-29T05:04:25Z", - "updated_at": "2026-10-23T13:14:55Z", + "updated_at": "2026-10-23T19:34:26Z", "pushed_at": "2026-10-22T01:47:23Z", - "stargazers_count": 2204, - "watchers_count": 2204, + "stargazers_count": 2219, + "watchers_count": 2219, "has_discussions": true, - "forks_count": 549, + "forks_count": 551, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1722,8 +1722,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 549, - "watchers": 2204, + "forks": 551, + "watchers": 2219, "score": 0, "subscribers_count": 37 }, @@ -2077,10 +2077,10 @@ "description": "Jailbreak supported Google Pixel phones with CVE-2026-43499", "fork": false, "created_at": "2026-08-02T17:34:45Z", - "updated_at": "2026-10-23T02:44:57Z", + "updated_at": "2026-10-23T18:07:34Z", "pushed_at": "2026-09-13T16:31:27Z", - "stargazers_count": 459, - "watchers_count": 459, + "stargazers_count": 461, + "watchers_count": 461, "has_discussions": false, "forks_count": 69, "allow_forking": true, @@ -2098,7 +2098,7 @@ ], "visibility": "public", "forks": 69, - "watchers": 459, + "watchers": 461, "score": 0, "subscribers_count": 7 }, @@ -2645,12 +2645,12 @@ "description": "vivo\/iQOO 临时 root 工具箱 (免解锁临时root, CVE-2026-43499) - 源码与脚本", "fork": false, "created_at": "2026-08-12T10:05:38Z", - "updated_at": "2026-10-23T13:29:49Z", + "updated_at": "2026-10-23T15:10:34Z", "pushed_at": "2026-08-12T10:05:44Z", - "stargazers_count": 54, - "watchers_count": 54, + "stargazers_count": 55, + "watchers_count": 55, "has_discussions": false, - "forks_count": 9, + "forks_count": 10, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -2658,8 +2658,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 9, - "watchers": 54, + "forks": 10, + "watchers": 55, "score": 0, "subscribers_count": 0 }, @@ -2953,8 +2953,8 @@ "description": "Using CVE-2026-43499 to root your Galaxy S24 Series(SM-S92X0 ,(China \/ Hong Kong SAR \/ Taiwan))", "fork": false, "created_at": "2026-08-16T14:37:06Z", - "updated_at": "2026-10-23T07:11:52Z", - "pushed_at": "2026-10-18T15:50:17Z", + "updated_at": "2026-10-23T19:12:03Z", + "pushed_at": "2026-10-23T19:44:36Z", "stargazers_count": 87, "watchers_count": 87, "has_discussions": false, @@ -3430,12 +3430,12 @@ "description": "One-click root for vivo\/iQOO devices on locked bootloader | CVE-2026-43499 + KernelSU", "fork": false, "created_at": "2026-08-25T07:52:11Z", - "updated_at": "2026-10-23T13:27:25Z", + "updated_at": "2026-10-23T14:41:14Z", "pushed_at": "2026-10-23T06:52:34Z", "stargazers_count": 72, "watchers_count": 72, "has_discussions": false, - "forks_count": 10, + "forks_count": 11, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -3443,7 +3443,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 10, + "forks": 11, "watchers": 72, "score": 0, "subscribers_count": 0 @@ -5633,7 +5633,7 @@ "fork": false, "created_at": "2026-10-17T20:56:33Z", "updated_at": "2026-10-18T15:53:14Z", - "pushed_at": "2026-10-18T15:53:26Z", + "pushed_at": "2026-10-23T19:46:47Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": true, @@ -5665,10 +5665,10 @@ "description": "GhostLock: Android kernel root exploit for Vivo X100 Ultra (PD2366) via CVE-2026-43499 PI-futex race. KernelSU integration with vr.ko anti-root bypass.", "fork": false, "created_at": "2026-10-19T12:30:07Z", - "updated_at": "2026-10-21T13:44:31Z", + "updated_at": "2026-10-23T16:00:35Z", "pushed_at": "2026-10-21T13:42:05Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -5679,7 +5679,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, @@ -5764,8 +5764,8 @@ "description": "在 AI 帮助下利用 ghostlock 提权 oppo a5 pbbt30 至 root", "fork": false, "created_at": "2026-10-23T06:09:52Z", - "updated_at": "2026-10-23T08:09:49Z", - "pushed_at": "2026-10-23T06:16:22Z", + "updated_at": "2026-10-23T15:47:38Z", + "pushed_at": "2026-10-23T15:47:34Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -5781,5 +5781,45 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1431230772, + "name": "ghostlock-sm-g990b", + "full_name": "k-o-n-t-o-r\/ghostlock-sm-g990b", + "owner": { + "login": "k-o-n-t-o-r", + "id": 15673326, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/15673326?v=4", + "html_url": "https:\/\/github.com\/k-o-n-t-o-r", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/k-o-n-t-o-r\/ghostlock-sm-g990b", + "description": "GhostLock CVE-2026-43499 root exploit for Samsung SM-G990B G990BXXSLIZH2", + "fork": false, + "created_at": "2026-10-23T15:37:08Z", + "updated_at": "2026-10-23T16:59:18Z", + "pushed_at": "2026-10-23T16:59:14Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "android", + "cve-2026-43499", + "ghostlock", + "kernel-exploit", + "samsung", + "security-research" + ], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-43724.json b/2026/CVE-2026-43724.json index 0438fb6772..e04b853e54 100644 --- a/2026/CVE-2026-43724.json +++ b/2026/CVE-2026-43724.json @@ -14,10 +14,10 @@ "description": "DirtySlide XNU Exploit (CVE-2026-43724) For MacOS", "fork": false, "created_at": "2026-06-30T17:40:40Z", - "updated_at": "2026-09-30T06:47:25Z", + "updated_at": "2026-10-23T15:14:54Z", "pushed_at": "2026-06-30T18:02:52Z", - "stargazers_count": 14, - "watchers_count": 14, + "stargazers_count": 15, + "watchers_count": 15, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 6, - "watchers": 14, + "watchers": 15, "score": 0, "subscribers_count": 1 }, diff --git a/2026/CVE-2026-48778.json b/2026/CVE-2026-48778.json index 641e94a2ce..25ac5b52d3 100644 --- a/2026/CVE-2026-48778.json +++ b/2026/CVE-2026-48778.json @@ -11,10 +11,10 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/kavin-jindal\/CVE-2026-48778-PoC", - "description": null, + "description": "CVE-2026-48778 — Notepad++ Arbitrary Code Execution PoC", "fork": false, "created_at": "2026-05-30T12:13:02Z", - "updated_at": "2026-05-31T05:04:28Z", + "updated_at": "2026-10-23T16:16:48Z", "pushed_at": "2026-05-31T05:04:24Z", "stargazers_count": 0, "watchers_count": 0, diff --git a/2026/CVE-2026-5281.json b/2026/CVE-2026-5281.json index b95567beb3..796c731d5a 100644 --- a/2026/CVE-2026-5281.json +++ b/2026/CVE-2026-5281.json @@ -52,7 +52,7 @@ "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, - "forks_count": 1, + "forks_count": 2, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -64,7 +64,7 @@ "google-chrome" ], "visibility": "public", - "forks": 1, + "forks": 2, "watchers": 2, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-54121.json b/2026/CVE-2026-54121.json index 1e7ec3080e..1e80afa41d 100644 --- a/2026/CVE-2026-54121.json +++ b/2026/CVE-2026-54121.json @@ -424,10 +424,10 @@ "description": "🛡 Official AI Security Tool module for CVE-2026-54121 (Certighost): AD CS certificate abuse deep-dive, defensive audit workflows, and safe in-app console execution for authorized Active Directory security testing.", "fork": false, "created_at": "2026-09-11T23:08:16Z", - "updated_at": "2026-10-23T13:02:17Z", + "updated_at": "2026-10-23T19:03:44Z", "pushed_at": "2026-10-19T11:05:57Z", - "stargazers_count": 180, - "watchers_count": 180, + "stargazers_count": 190, + "watchers_count": 190, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -444,7 +444,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 180, + "watchers": 190, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-57851.json b/2026/CVE-2026-57851.json index a2e0010fc7..f53ecba32c 100644 --- a/2026/CVE-2026-57851.json +++ b/2026/CVE-2026-57851.json @@ -19,7 +19,7 @@ "stargazers_count": 9, "watchers_count": 9, "has_discussions": false, - "forks_count": 2, + "forks_count": 3, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 2, + "forks": 3, "watchers": 9, "score": 0, "subscribers_count": 1 diff --git a/2026/CVE-2026-58455.json b/2026/CVE-2026-58455.json index ddee8e04cd..a5aa521a35 100644 --- a/2026/CVE-2026-58455.json +++ b/2026/CVE-2026-58455.json @@ -14,10 +14,10 @@ "description": "PoC for CVE-2026-58455: Dockwatch <=0.6.567 unauthenticated RCE. Stdlib-only Python.", "fork": false, "created_at": "2026-08-21T17:20:20Z", - "updated_at": "2026-08-24T18:26:48Z", + "updated_at": "2026-10-23T18:16:24Z", "pushed_at": "2026-08-21T17:20:35Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-63030.json b/2026/CVE-2026-63030.json index d817830148..1de4d84b6c 100644 --- a/2026/CVE-2026-63030.json +++ b/2026/CVE-2026-63030.json @@ -14,10 +14,10 @@ "description": "wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain", "fork": false, "created_at": "2026-07-17T20:18:33Z", - "updated_at": "2026-10-23T09:51:56Z", + "updated_at": "2026-10-23T15:28:14Z", "pushed_at": "2026-08-11T13:41:27Z", - "stargazers_count": 804, - "watchers_count": 804, + "stargazers_count": 805, + "watchers_count": 805, "has_discussions": false, "forks_count": 183, "allow_forking": true, @@ -32,7 +32,7 @@ ], "visibility": "public", "forks": 183, - "watchers": 804, + "watchers": 805, "score": 0, "subscribers_count": 3 }, diff --git a/2026/CVE-2026-64560.json b/2026/CVE-2026-64560.json index f077a27c44..ed8a66f19b 100644 --- a/2026/CVE-2026-64560.json +++ b/2026/CVE-2026-64560.json @@ -47,10 +47,10 @@ "description": null, "fork": false, "created_at": "2026-08-03T12:36:27Z", - "updated_at": "2026-10-22T11:55:47Z", + "updated_at": "2026-10-23T18:08:40Z", "pushed_at": "2026-08-03T12:39:41Z", - "stargazers_count": 78, - "watchers_count": 78, + "stargazers_count": 79, + "watchers_count": 79, "has_discussions": false, "forks_count": 18, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 18, - "watchers": 78, + "watchers": 79, "score": 0, "subscribers_count": 1 }, @@ -465,10 +465,10 @@ "description": "CVE-2026-64560 temporary-root exploit for realme RMX6699 (Snapdragon 8 Elite, kernel 6.6.118, Android 17\/COOS17)", "fork": false, "created_at": "2026-10-17T12:51:07Z", - "updated_at": "2026-10-17T17:50:25Z", + "updated_at": "2026-10-23T16:17:02Z", "pushed_at": "2026-10-17T13:06:38Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -479,7 +479,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-64638.json b/2026/CVE-2026-64638.json index 63f44b0d49..4dcc8e4714 100644 --- a/2026/CVE-2026-64638.json +++ b/2026/CVE-2026-64638.json @@ -47,12 +47,12 @@ "description": "XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template", "fork": false, "created_at": "2026-08-07T17:07:17Z", - "updated_at": "2026-10-23T12:21:30Z", + "updated_at": "2026-10-23T17:39:35Z", "pushed_at": "2026-08-21T13:31:58Z", - "stargazers_count": 95, - "watchers_count": 95, + "stargazers_count": 100, + "watchers_count": 100, "has_discussions": false, - "forks_count": 22, + "forks_count": 25, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,8 +60,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 22, - "watchers": 95, + "forks": 25, + "watchers": 100, "score": 0, "subscribers_count": 0 }, @@ -278,10 +278,10 @@ "description": "CVE-2026-64638: WordPress Pre-auth XSS → RCE (XSS2Shell) PoC", "fork": false, "created_at": "2026-08-08T01:20:11Z", - "updated_at": "2026-09-21T16:57:12Z", + "updated_at": "2026-10-23T18:34:33Z", "pushed_at": "2026-08-08T01:24:48Z", - "stargazers_count": 11, - "watchers_count": 11, + "stargazers_count": 12, + "watchers_count": 12, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -301,7 +301,7 @@ ], "visibility": "public", "forks": 3, - "watchers": 11, + "watchers": 12, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-65343.json b/2026/CVE-2026-65343.json index 2995d6af85..6963e44937 100644 --- a/2026/CVE-2026-65343.json +++ b/2026/CVE-2026-65343.json @@ -14,10 +14,10 @@ "description": "CVE-2026-65343 PoC — AppleKeyStore OOB read → KASLR defeat (iOS 26.6 \/ 23G71)", "fork": false, "created_at": "2026-09-02T20:12:10Z", - "updated_at": "2026-10-05T11:05:48Z", + "updated_at": "2026-10-23T14:11:10Z", "pushed_at": "2026-09-04T05:48:34Z", - "stargazers_count": 86, - "watchers_count": 86, + "stargazers_count": 85, + "watchers_count": 85, "has_discussions": false, "forks_count": 10, "allow_forking": true, @@ -38,7 +38,7 @@ ], "visibility": "public", "forks": 10, - "watchers": 86, + "watchers": 85, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-67276.json b/2026/CVE-2026-67276.json index c275f5b500..1ed04cf927 100644 --- a/2026/CVE-2026-67276.json +++ b/2026/CVE-2026-67276.json @@ -47,10 +47,10 @@ "description": "CVE-2026-67276 RouterOS SSH public-key authentication bypass lab PoC", "fork": false, "created_at": "2026-09-06T12:10:51Z", - "updated_at": "2026-10-20T16:49:37Z", + "updated_at": "2026-10-23T15:04:30Z", "pushed_at": "2026-09-06T12:10:54Z", - "stargazers_count": 100, - "watchers_count": 100, + "stargazers_count": 101, + "watchers_count": 101, "has_discussions": false, "forks_count": 33, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 33, - "watchers": 100, + "watchers": 101, "score": 0, "subscribers_count": 2 }, @@ -80,10 +80,10 @@ "description": "CVE-2026-67276 MikroTik RouterOS SSH Authentication Bypass Exploit", "fork": false, "created_at": "2026-09-07T06:56:34Z", - "updated_at": "2026-10-22T11:57:07Z", + "updated_at": "2026-10-23T15:04:01Z", "pushed_at": "2026-09-07T06:59:07Z", - "stargazers_count": 13, - "watchers_count": 13, + "stargazers_count": 14, + "watchers_count": 14, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -103,7 +103,7 @@ ], "visibility": "public", "forks": 2, - "watchers": 13, + "watchers": 14, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-75045.json b/2026/CVE-2026-75045.json index 69b2b281d5..783ebcc969 100644 --- a/2026/CVE-2026-75045.json +++ b/2026/CVE-2026-75045.json @@ -14,8 +14,8 @@ "description": "CVE-2026-75045 - JetBrains YouTrack unauthenticated database backup download via shared draft signature (CVSS 9.1)", "fork": false, "created_at": "2026-10-19T20:32:55Z", - "updated_at": "2026-10-21T15:09:37Z", - "pushed_at": "2026-10-21T15:09:04Z", + "updated_at": "2026-10-23T19:39:27Z", + "pushed_at": "2026-10-23T19:39:22Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-75604.json b/2026/CVE-2026-75604.json index 599e78bcb9..9091849c08 100644 --- a/2026/CVE-2026-75604.json +++ b/2026/CVE-2026-75604.json @@ -14,10 +14,10 @@ "description": "CVE-2026-75604 Next.js Windows RCE poc", "fork": false, "created_at": "2026-08-25T19:06:37Z", - "updated_at": "2026-10-18T11:44:33Z", + "updated_at": "2026-10-23T15:03:37Z", "pushed_at": "2026-08-28T02:53:24Z", - "stargazers_count": 105, - "watchers_count": 105, + "stargazers_count": 106, + "watchers_count": 106, "has_discussions": false, "forks_count": 37, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 37, - "watchers": 105, + "watchers": 106, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-76183.json b/2026/CVE-2026-76183.json new file mode 100644 index 0000000000..9f27154382 --- /dev/null +++ b/2026/CVE-2026-76183.json @@ -0,0 +1,35 @@ +[ + { + "id": 1431289419, + "name": "tomcat-CVE-2026-76183", + "full_name": "Ethen1212\/tomcat-CVE-2026-76183", + "owner": { + "login": "Ethen1212", + "id": 195118622, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/195118622?v=4", + "html_url": "https:\/\/github.com\/Ethen1212", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Ethen1212\/tomcat-CVE-2026-76183", + "description": "Apache Tomcat WebSocket security constraint bypass (CVE-2026-76183) reproduction", + "fork": false, + "created_at": "2026-10-23T16:30:46Z", + "updated_at": "2026-10-23T16:32:55Z", + "pushed_at": "2026-10-23T16:31:16Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-76504.json b/2026/CVE-2026-76504.json index e31f07d612..507fe4ca3b 100644 --- a/2026/CVE-2026-76504.json +++ b/2026/CVE-2026-76504.json @@ -64,5 +64,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1431347050, + "name": "CVE-2026-76504-Cisco", + "full_name": "maxprog-svg\/CVE-2026-76504-Cisco", + "owner": { + "login": "maxprog-svg", + "id": 180038121, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/180038121?v=4", + "html_url": "https:\/\/github.com\/maxprog-svg", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/maxprog-svg\/CVE-2026-76504-Cisco", + "description": " CVE-2026-76504 — Cisco Catalyst SD-WAN Manager Auth Bypass Exploit", + "fork": false, + "created_at": "2026-10-23T17:25:14Z", + "updated_at": "2026-10-23T17:30:23Z", + "pushed_at": "2026-10-23T17:30:20Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-86478.json b/2026/CVE-2026-86478.json index f5ed1fc348..099ef34048 100644 --- a/2026/CVE-2026-86478.json +++ b/2026/CVE-2026-86478.json @@ -14,8 +14,8 @@ "description": "CVE-2026-86478 - JetBrains YouTrack Helpdesk unauthenticated account takeover via self-asserted email (CVSS 9.8)", "fork": false, "created_at": "2026-10-21T23:29:52Z", - "updated_at": "2026-10-22T11:58:23Z", - "pushed_at": "2026-10-21T23:30:07Z", + "updated_at": "2026-10-23T19:39:13Z", + "pushed_at": "2026-10-23T19:39:08Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-93834.json b/2026/CVE-2026-93834.json index 40dd8c1cd6..9e90b50a51 100644 --- a/2026/CVE-2026-93834.json +++ b/2026/CVE-2026-93834.json @@ -14,8 +14,8 @@ "description": "Tracking the QEMU CVE-2026-93834 9pfs fid-path use-after-free guest-to-host escape", "fork": false, "created_at": "2026-09-26T09:42:45Z", - "updated_at": "2026-10-23T08:01:10Z", - "pushed_at": "2026-10-23T08:01:06Z", + "updated_at": "2026-10-23T15:53:45Z", + "pushed_at": "2026-10-23T15:53:41Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2026/CVE-2026-96652.json b/2026/CVE-2026-96652.json index dadd193cd4..5cb5c67245 100644 --- a/2026/CVE-2026-96652.json +++ b/2026/CVE-2026-96652.json @@ -47,10 +47,10 @@ "description": "CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 CVE-2026-96656", "fork": false, "created_at": "2026-10-18T05:00:14Z", - "updated_at": "2026-10-22T16:11:18Z", + "updated_at": "2026-10-23T16:04:20Z", "pushed_at": "2026-10-21T18:47:48Z", - "stargazers_count": 96, - "watchers_count": 96, + "stargazers_count": 97, + "watchers_count": 97, "has_discussions": false, "forks_count": 16, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 16, - "watchers": 96, + "watchers": 97, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-96889.json b/2026/CVE-2026-96889.json index d1e72eda69..5f04cedcc3 100644 --- a/2026/CVE-2026-96889.json +++ b/2026/CVE-2026-96889.json @@ -106,5 +106,44 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1431247794, + "name": "next-security-check", + "full_name": "AmanSin001\/next-security-check", + "owner": { + "login": "AmanSin001", + "id": 65849351, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/65849351?v=4", + "html_url": "https:\/\/github.com\/AmanSin001", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/AmanSin001\/next-security-check", + "description": "Check a Next.js project against the October 14, 2026 security advisories (CVE-2026-96889, use cache RCE, Server Actions DoS). No dependencies.", + "fork": false, + "created_at": "2026-10-23T15:52:23Z", + "updated_at": "2026-10-23T15:52:56Z", + "pushed_at": "2026-10-23T15:52:30Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve-2026-96889", + "nextjs", + "security", + "sharp", + "vulnerability-scanner" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-97206.json b/2026/CVE-2026-97206.json index 58dd27a194..ca573c03c8 100644 --- a/2026/CVE-2026-97206.json +++ b/2026/CVE-2026-97206.json @@ -14,8 +14,8 @@ "description": null, "fork": false, "created_at": "2026-10-22T07:12:04Z", - "updated_at": "2026-10-23T08:01:14Z", - "pushed_at": "2026-10-23T08:01:10Z", + "updated_at": "2026-10-23T16:04:05Z", + "pushed_at": "2026-10-23T16:04:01Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-98260.json b/2026/CVE-2026-98260.json index 72f4984530..89ff3396bc 100644 --- a/2026/CVE-2026-98260.json +++ b/2026/CVE-2026-98260.json @@ -80,10 +80,10 @@ "description": "Target-specific Android CVE-2026-98260 research port for Xiaomi popsicle", "fork": false, "created_at": "2026-10-23T08:56:37Z", - "updated_at": "2026-10-23T11:55:41Z", + "updated_at": "2026-10-23T13:55:23Z", "pushed_at": "2026-10-23T09:29:52Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -94,7 +94,7 @@ "topics": [], "visibility": "public", "forks": 3, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, @@ -113,12 +113,12 @@ "description": "Target-specific Android CVE-2026-98260 research port for Xiaomi nezha", "fork": false, "created_at": "2026-10-23T12:12:15Z", - "updated_at": "2026-10-23T12:12:32Z", + "updated_at": "2026-10-23T14:26:37Z", "pushed_at": "2026-10-23T12:12:28Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, - "forks_count": 2, + "forks_count": 3, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -126,8 +126,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 2, - "watchers": 0, + "forks": 3, + "watchers": 1, "score": 0, "subscribers_count": 0 }