diff --git a/2014/CVE-2014-0160.json b/2014/CVE-2014-0160.json index cbb384d308..85c293a3ba 100644 --- a/2014/CVE-2014-0160.json +++ b/2014/CVE-2014-0160.json @@ -2171,15 +2171,15 @@ { "id": 1170219472, "name": "CVE-2014-0160", - "full_name": "0xredash\/CVE-2014-0160", + "full_name": "0xBlackash\/CVE-2014-0160", "owner": { - "login": "0xredash", + "login": "0xBlackash", "id": 259905299, "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/259905299?v=4", - "html_url": "https:\/\/github.com\/0xredash", + "html_url": "https:\/\/github.com\/0xBlackash", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/0xredash\/CVE-2014-0160", + "html_url": "https:\/\/github.com\/0xBlackash\/CVE-2014-0160", "description": "CVE-2014-0160", "fork": false, "created_at": "2026-03-01T21:40:51Z", diff --git a/2014/CVE-2014-3153.json b/2014/CVE-2014-3153.json index 8dc03b5f0c..51fbbe28d2 100644 --- a/2014/CVE-2014-3153.json +++ b/2014/CVE-2014-3153.json @@ -321,8 +321,8 @@ "description": "Persistent root for LG webOS 2.x TVs (CVE-2014-3153)", "fork": false, "created_at": "2026-10-27T18:32:14Z", - "updated_at": "2026-10-28T21:13:30Z", - "pushed_at": "2026-10-28T18:43:22Z", + "updated_at": "2026-10-31T11:58:20Z", + "pushed_at": "2026-10-31T11:58:16Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2014/CVE-2014-6271.json b/2014/CVE-2014-6271.json index a08827281b..7a1e672bf6 100644 --- a/2014/CVE-2014-6271.json +++ b/2014/CVE-2014-6271.json @@ -2700,15 +2700,15 @@ { "id": 1174445534, "name": "CVE-2014-6271", - "full_name": "0xredash\/CVE-2014-6271", + "full_name": "0xBlackash\/CVE-2014-6271", "owner": { - "login": "0xredash", + "login": "0xBlackash", "id": 259905299, "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/259905299?v=4", - "html_url": "https:\/\/github.com\/0xredash", + "html_url": "https:\/\/github.com\/0xBlackash", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/0xredash\/CVE-2014-6271", + "html_url": "https:\/\/github.com\/0xBlackash\/CVE-2014-6271", "description": "CVE-2014-6271", "fork": false, "created_at": "2026-03-06T12:59:16Z", diff --git a/2016/CVE-2016-5195.json b/2016/CVE-2016-5195.json index e786f02520..59d34150d5 100644 --- a/2016/CVE-2016-5195.json +++ b/2016/CVE-2016-5195.json @@ -255,10 +255,10 @@ "description": "A CVE-2016-5195 exploit example.", "fork": false, "created_at": "2016-10-23T00:16:33Z", - "updated_at": "2026-10-23T09:46:19Z", + "updated_at": "2026-10-31T12:02:26Z", "pushed_at": "2017-03-21T16:46:38Z", - "stargazers_count": 343, - "watchers_count": 343, + "stargazers_count": 342, + "watchers_count": 342, "has_discussions": false, "forks_count": 122, "allow_forking": true, @@ -273,7 +273,7 @@ ], "visibility": "public", "forks": 122, - "watchers": 343, + "watchers": 342, "score": 0, "subscribers_count": 13 }, diff --git a/2017/CVE-2017-0144.json b/2017/CVE-2017-0144.json index 9e5909f002..388890baef 100644 --- a/2017/CVE-2017-0144.json +++ b/2017/CVE-2017-0144.json @@ -662,15 +662,15 @@ { "id": 1269311692, "name": "CVE-2017-0144", - "full_name": "0xredash\/CVE-2017-0144", + "full_name": "0xBlackash\/CVE-2017-0144", "owner": { - "login": "0xredash", + "login": "0xBlackash", "id": 259905299, "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/259905299?v=4", - "html_url": "https:\/\/github.com\/0xredash", + "html_url": "https:\/\/github.com\/0xBlackash", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/0xredash\/CVE-2017-0144", + "html_url": "https:\/\/github.com\/0xBlackash\/CVE-2017-0144", "description": "CVE-2017-0144", "fork": false, "created_at": "2026-06-14T15:00:15Z", diff --git a/2019/CVE-2019-11043.json b/2019/CVE-2019-11043.json index be8ddff61a..499552d409 100644 --- a/2019/CVE-2019-11043.json +++ b/2019/CVE-2019-11043.json @@ -921,5 +921,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1440723225, + "name": "php-secure-patch", + "full_name": "esskslifetech\/php-secure-patch", + "owner": { + "login": "esskslifetech", + "id": 226517993, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/226517993?v=4", + "html_url": "https:\/\/github.com\/esskslifetech", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/esskslifetech\/php-secure-patch", + "description": "Bash toolkit that finds and fixes PHP CVEs — PHP2Shell (CVE-2026-109618\/109619), CVE-2026-115560, CVE-2024-4577, CVE-2019-11043 — on Linux and macOS. Detects runtimes, audits config, applies source patches, hardens php.ini \/ FPM \/ nginx \/ Apache, hunts compromise, rolls back cleanly. MIT.", + "fork": false, + "created_at": "2026-10-31T09:56:32Z", + "updated_at": "2026-10-31T11:43:21Z", + "pushed_at": "2026-10-31T11:13:40Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2019/CVE-2019-11358.json b/2019/CVE-2019-11358.json index be5914b087..7db7e3663d 100644 --- a/2019/CVE-2019-11358.json +++ b/2019/CVE-2019-11358.json @@ -133,10 +133,10 @@ "description": "NOTICE This repository contains the public FTC SDK for the SKYSTONE (2019-2020) competition season. If you are looking for the current season's FTC SDK software, please visit the new and permanent home of the public FTC SDK: FtcRobotController repository Welcome! This GitHub repository contains the source code that is used to build an Android app to control a FIRST Tech Challenge competition robot. To use this SDK, download\/clone the entire project to your local computer. Getting Started If you are new to robotics or new to the FIRST Tech Challenge, then you should consider reviewing the FTC Blocks Tutorial to get familiar with how to use the control system: FTC Blocks Online Tutorial Even if you are an advanced Java programmer, it is helpful to start with the FTC Blocks tutorial, and then migrate to the OnBot Java Tool or to Android Studio afterwards. Downloading the Project If you are an Android Studio programmer, there are several ways to download this repo. Note that if you use the Blocks or OnBot Java Tool to program your robot, then you do not need to download this repository. If you are a git user, you can clone the most current version of the repository: git clone https:\/\/github.com\/FIRST-Tech-Challenge\/SKYSTONE.git Or, if you prefer, you can use the \"Download Zip\" button available through the main repository page. Downloading the project as a .ZIP file will keep the size of the download manageable. You can also download the project folder (as a .zip or .tar.gz archive file) from the Downloads subsection of the Releases page for this repository. Once you have downloaded and uncompressed (if needed) your folder, you can use Android Studio to import the folder (\"Import project (Eclipse ADT, Gradle, etc.)\"). Getting Help User Documentation and Tutorials FIRST maintains online documentation with information and tutorials on how to use the FIRST Tech Challenge software and robot control system. You can access this documentation using the following link: SKYSTONE Online Documentation Note that the online documentation is an \"evergreen\" document that is constantly being updated and edited. It contains the most current information about the FIRST Tech Challenge software and control system. Javadoc Reference Material The Javadoc reference documentation for the FTC SDK is now available online. Click on the following link to view the FTC SDK Javadoc documentation as a live website: FTC Javadoc Documentation Documentation for the FTC SDK is also included with this repository. There is a subfolder called \"doc\" which contains several subfolders: The folder \"apk\" contains the .apk files for the FTC Driver Station and FTC Robot Controller apps. The folder \"javadoc\" contains the JavaDoc user documentation for the FTC SDK. Online User Forum For technical questions regarding the Control System or the FTC SDK, please visit the FTC Technology forum: FTC Technology Forum Release Information Version 5.5 (20200824-090813) Version 5.5 requires Android Studio 4.0 or later. New features Adds support for calling custom Java classes from Blocks OpModes (fixes SkyStone issue #161). Classes must be in the org.firstinspires.ftc.teamcode package. Methods must be public static and have no more than 21 parameters. Parameters declared as OpMode, LinearOpMode, Telemetry, and HardwareMap are supported and the argument is provided automatically, regardless of the order of the parameters. On the block, the sockets for those parameters are automatically filled in. Parameters declared as char or java.lang.Character will accept any block that returns text and will only use the first character in the text. Parameters declared as boolean or java.lang.Boolean will accept any block that returns boolean. Parameters declared as byte, java.lang.Byte, short, java.lang.Short, int, java.lang.Integer, long, or java.lang.Long, will accept any block that returns a number and will round that value to the nearest whole number. Parameters declared as float, java.lang.Float, double, java.lang.Double will accept any block that returns a number. Adds telemetry API method for setting display format Classic Monospace HTML (certain tags only) Adds blocks support for switching cameras. Adds Blocks support for TensorFlow Object Detection with a custom model. Adds support for uploading a custom TensorFlow Object Detection model in the Manage page, which is especially useful for Blocks and OnBotJava users. Shows new Control Hub blink codes when the WiFi band is switched using the Control Hub's button (only possible on Control Hub OS 1.1.2) Adds new warnings which can be disabled in the Advanced RC Settings Mismatched app versions warning Unnecessary 2.4 GHz WiFi usage warning REV Hub is running outdated firmware (older than version 1.8.2) Adds support for Sony PS4 gamepad, and reworks how gamepads work on the Driver Station Removes preference which sets gamepad type based on driver position. Replaced with menu which allows specifying type for gamepads with unknown VID and PID Attempts to auto-detect gamepad type based on USB VID and PID If gamepad VID and PID is not known, use type specified by user for that VID and PID If gamepad VID and PID is not known AND the user has not specified a type for that VID and PID, an educated guess is made about how to map the gamepad Driver Station will now attempt to automatically recover from a gamepad disconnecting, and re-assign it to the position it was assigned to when it dropped If only one gamepad is assigned and it drops: it can be recovered If two gamepads are assigned, and have different VID\/PID signatures, and only one drops: it will be recovered If two gamepads are assigned, and have different VID\/PID signatures, and BOTH drop: both will be recovered If two gamepads are assigned, and have the same VID\/PID signatures, and only one drops: it will be recovered If two gamepads are assigned, and have the same VID\/PID signatures, and BOTH drop: neither will be recovered, because of the ambiguity of the gamepads when they re-appear on the USB bus. There is currently one known edge case: if there are two gamepads with the same VID\/PID signature plugged in, but only one is assigned, and they BOTH drop, it's a 50-50 chance of which one will be chosen for automatic recovery to the assigned position: it is determined by whichever one is re-enumerated first by the USB bus controller. Adds landscape user interface to Driver Station New feature: practice timer with audio cues New feature (Control Hub only): wireless network connection strength indicator (0-5 bars) New feature (Control Hub only): tapping on the ping\/channel display will switch to an alternate display showing radio RX dBm and link speed (tap again to switch back) The layout will NOT autorotate. You can switch the layout from the Driver Station's settings menu. Breaking changes Removes support for Android versions 4.4 through 5.1 (KitKat and Lollipop). The minSdkVersion is now 23. Removes the deprecated LinearOpMode methods waitOneFullHardwareCycle() and waitForNextHardwareCycle() Enhancements Handles RS485 address of Control Hub automatically The Control Hub is automatically given a reserved address Existing configuration files will continue to work All addresses in the range of 1-10 are still available for Expansion Hubs The Control Hub light will now normally be solid green, without blinking to indicate the address The Control Hub will not be shown on the Expansion Hub Address Change settings page Improves REV Hub firmware updater The user can now choose between all available firmware update files Version 1.8.2 of the REV Hub firmware is bundled into the Robot Controller app. Text was added to clarify that Expansion Hubs can only be updated via USB. Firmware update speed was reduced to improve reliability Allows REV Hub firmware to be updated directly from the Manage webpage Improves log viewer on Robot Controller Horizontal scrolling support (no longer word wrapped) Supports pinch-to-zoom Uses a monospaced font Error messages are highlighted New color scheme Attempts to force-stop a runaway\/stuck OpMode without restarting the entire app Not all types of runaway conditions are stoppable, but if the user code attempts to talk to hardware during the runaway, the system should be able to capture it. Makes various tweaks to the Self Inspect screen Renames \"OS version\" entry to \"Android version\" Renames \"WiFi Direct Name\" to \"WiFi Name\" Adds Control Hub OS version, when viewing the report of a Control Hub Hides the airplane mode entry, when viewing the report of a Control Hub Removes check for ZTE Speed Channel Changer Shows firmware version for all Expansion and Control Hubs Reworks network settings portion of Manage page All network settings are now applied with a single click The WiFi Direct channel of phone-based Robot Controllers can now be changed from the Manage page WiFi channels are filtered by band (2.4 vs 5 GHz) and whether they overlap with other channels The current WiFi channel is pre-selected on phone-based Robot Controllers, and Control Hubs running OS 1.1.2 or later. On Control Hubs running OS 1.1.2 or later, you can choose to have the system automatically select a channel on the 5 GHz band Improves OnBotJava New light and dark themes replace the old themes (chaos, github, chrome,...) the new default theme is light and will be used when you first update to this version OnBotJava now has a tabbed editor Read-only offline mode Improves function of \"exit\" menu item on Robot Controller and Driver Station Now guaranteed to be fully stopped and unloaded from memory Shows a warning message if a LinearOpMode exists prematurely due to failure to monitor for the start condition Improves error message shown when the Driver Station and Robot Controller are incompatible with each other Driver Station OpMode Control Panel now disabled while a Restart Robot is in progress Disables advanced settings related to WiFi direct when the Robot Controller is a Control Hub. Tint phone battery icons on Driver Station when low\/critical. Uses names \"Control Hub Portal\" and \"Control Hub\" (when appropriate) in new configuration files Improve I2C read performance Very large improvement on Control Hub; up to ~2x faster with small (e.g. 6 byte) reads Not as apparent on Expansion Hubs connected to a phone Update\/refresh build infrastructure Update to 'androidx' support library from 'com.android.support:appcompat', which is end-of-life Update targetSdkVersion and compileSdkVersion to 28 Update Android Studio's Android plugin to latest Fix reported build timestamp in 'About' screen Add sample illustrating manual webcam use: ConceptWebcam Bug fixes Fixes SkyStone issue #248 Fixes SkyStone issue #232 and modifies bulk caching semantics to allow for cache-preserving MANUAL\/AUTO transitions. Improves performance when REV 2M distance sensor is unplugged Improves readability of Toast messages on certain devices Allows a Driver Station to connect to a Robot Controller after another has disconnected Improves generation of fake serial numbers for UVC cameras which do not provide a real serial number Previously some devices would assign such cameras a serial of 0:0 and fail to open and start streaming Fixes ftc_app issue #638. Fixes a slew of bugs with the Vuforia camera monitor including: Fixes bug where preview could be displayed with a wonky aspect ratio Fixes bug where preview could be cut off in landscape Fixes bug where preview got totally messed up when rotating phone Fixes bug where crosshair could drift off target when using webcams Fixes issue in UVC driver on some devices (ftc_app 681) if streaming was started\/stopped multiple times in a row Issue manifested as kernel panic on devices which do not have this kernel patch. On affected devices which do have the patch, the issue was manifest as simply a failure to start streaming. The Tech Team believes that the root cause of the issue is a bug in the Linux kernel XHCI driver. A workaround was implemented in the SDK UVC driver. Fixes bug in UVC driver where often half the frames from the camera would be dropped (e.g. only 15FPS delivered during a streaming session configured for 30FPS). Fixes issue where TensorFlow Object Detection would show results whose confidence was lower than the minimum confidence parameter. Fixes a potential exploitation issue of CVE-2019-11358 in OnBotJava Fixes changing the address of an Expansion Hub with additional Expansion Hubs connected to it Preserves the Control Hub's network connection when \"Restart Robot\" is selected Fixes issue where device scans would fail while the Robot was restarting Fix RenderScript usage Use androidx.renderscript variant: increased compatibility Use RenderScript in Java mode, not native: simplifies build Fixes webcam-frame-to-bitmap conversion problem: alpha channel wasn't being initialized, only R, G, & B Fixes possible arithmetic overflow in Deadline Fixes deadlock in Vuforia webcam support which could cause 5-second delays when stopping OpMode Version 5.4 (20200108-101156) Fixes SkyStone issue #88 Adds an inspection item that notes when a robot controller (Control Hub) is using the factory default password. Fixes SkyStone issue #61 Fixes SkyStone issue #142 Fixes ftc_app issue #417 by adding more current and voltage monitoring capabilities for REV Hubs. Fixes a crash sometimes caused by OnBotJava activity Improves OnBotJava autosave functionality ftc_app #738 Fixes system responsiveness issue when an Expansion Hub is disconnected Fixes issue where IMU initialization could prevent Op Modes from stopping Fixes issue where AndroidTextToSpeech.speak() would fail if it was called too early Adds telemetry.speak() methods and blocks, which cause the Driver Station (if also updated) to speak text Adds and improves Expansion Hub-related warnings Improves Expansion Hub low battery warning Displays the warning immediately after the hub reports it Specifies whether the condition is current or occurred temporarily during an OpMode run Displays which hubs reported low battery Displays warning when hub loses and regains power during an OpMode run Fixes the hub's LED pattern after this condition Displays warning when Expansion Hub is not responding to commands Specifies whether the condition is current or occurred temporarily during an OpMode run Clarifies warning when Expansion Hub is not present at startup Specifies that this condition requires a Robot Restart before the hub can be used. The hub light will now accurately reflect this state Improves logging and reduces log spam during these conditions Syncs the Control Hub time and timezone to a connected web browser programming the robot, if a Driver Station is not available. Adds bulk read functionality for REV Hubs A bulk caching mode must be set at the Hub level with LynxModule#setBulkCachingMode(). This applies to all relevant SDK hardware classes that reference that Hub. The following following Hub bulk caching modes are available: BulkCachingMode.OFF (default): All hardware calls operate as usual. Bulk data can read through LynxModule#getBulkData() and processed manually. BulkCachingMode.AUTO: Applicable hardware calls are served from a bulk read cache that is cleared\/refreshed automatically to ensure identical commands don't hit the same cache. The cache can also be cleared manually with LynxModule#clearBulkCache(), although this is not recommended. (advanced users) BulkCachingMode.MANUAL: Same as BulkCachingMode.AUTO except the cache is never cleared automatically. To avoid getting stale data, the cache must be manually cleared at the beginning of each loop body or as the user deems appropriate. Removes PIDF Annotation values added in Rev 5.3 (to AndyMark, goBILDA and TETRIX motor configurations). The new motor types will still be available but their Default control behavior will revert back to Rev 5.2 Adds new ConceptMotorBulkRead sample Opmode to demonstrate and compare Motor Bulk-Read modes for reducing I\/O latencies. Version 5.3 (20191004-112306) Fixes external USB\/UVC webcam support Makes various bugfixes and improvements to Blocks page, including but not limited to: Many visual tweaks Browser zoom and window resize behave better Resizing the Java preview pane works better and more consistently across browsers The Java preview pane consistently gets scrollbars when needed The Java preview pane is hidden by default on phones Internet Explorer 11 should work Large dropdown lists display properly on lower res screens Disabled buttons are now visually identifiable as disabled A warning is shown if a user selects a TFOD sample, but their device is not compatible Warning messages in a Blocks op mode are now visible by default. Adds goBILDA 5201 and 5202 motors to Robot Configurator Adds PIDF Annotation values to AndyMark, goBILDA and TETRIX motor configurations. This has the effect of causing the RUN_USING_ENCODERS and RUN_TO_POSITION modes to use PIDF vs PID closed loop control on these motors. This should provide more responsive, yet stable, speed control. PIDF adds Feedforward control to the basic PID control loop. Feedforward is useful when controlling a motor's speed because it \"anticipates\" how much the control voltage must change to achieve a new speed set-point, rather than requiring the integrated error to change sufficiently. The PIDF values were chosen to provide responsive, yet stable, speed control on a lightly loaded motor. The more heavily a motor is loaded (drag or friction), the more noticable the PIDF improvement will be. Fixes startup crash on Android 10 Fixes ftc_app issue #712 (thanks to FROGbots-4634) Fixes ftc_app issue #542 Allows \"A\" and lowercase letters when naming device through RC and DS apps. Version 5.2 (20190905-083277) Fixes extra-wide margins on settings activities, and placement of the new configuration button Adds Skystone Vuforia image target data. Includes sample Skystone Vuforia Navigation op modes (Java). Includes sample Skystone Vuforia Navigation op modes (Blocks). Adds TensorFlow inference model (.tflite) for Skystone game elements. Includes sample Skystone TensorFlow op modes (Java). Includes sample Skystone TensorFlow op modes (Blocks). Removes older (season-specific) sample op modes. Includes 64-bit support (to comply with Google Play requirements). Protects against Stuck OpModes when a Restart Robot is requested. (Thanks to FROGbots-4634) (ftc_app issue #709) Blocks related changes: Fixes bug with blocks generated code when hardware device name is a java or javascript reserved word. Shows generated java code for blocks, even when hardware items are missing from the active configuration. Displays warning icon when outdated Vuforia and TensorFlow blocks are used (SkyStone issue #27) Version 5.1 (20190820-222104) Defines default PIDF parameters for the following motors: REV Core Hex Motor REV 20:1 HD Hex Motor REV 40:1 HD Hex Motor Adds back button when running on a device without a system back button (such as a Control Hub) Allows a REV Control Hub to update the firmware on a REV Expansion Hub via USB Fixes SkyStone issue #9 Fixes ftc_app issue #715 Prevents extra DS User clicks by filtering based on current state. Prevents incorrect DS UI state changes when receiving new OpMode list from RC Adds support for REV Color Sensor V3 Adds a manual-refresh DS Camera Stream for remotely viewing RC camera frames. To show the stream on the DS, initialize but do not run a stream-enabled opmode, select the Camera Stream option in the DS menu, and tap the image to refresh. This feature is automatically enabled when using Vuforia or TFOD—no additional RC configuration is required for typical use cases. To hide the stream, select the same menu item again. Note that gamepads are disabled and the selected opmode cannot be started while the stream is open as a safety precaution. To use custom streams, consult the API docs for CameraStreamServer#setSource and CameraStreamSource. Adds many Star Wars sounds to RobotController resources. Added SKYSTONE Sounds Chooser Sample Program. Switches out startup, connect chimes, and error\/warning sounds for Star Wars sounds Updates OnBot Java to use a WebSocket for communication with the robot The OnBot Java page no longer has to do a full refresh when a user switches from editing one file to another Known issues: Camera Stream The Vuforia camera stream inherits the issues present in the phone preview (namely ftc_app issue #574). This problem does not affect the TFOD camera stream even though it receives frames from Vuforia. The orientation of the stream frames may not always match the phone preview. For now, these frames may be rotated manually via a custom CameraStreamSource if desired. OnBotJava Browser back button may not always work correctly It's possible for a build to be queued, but not started. The OnBot Java build console will display a warning if this occurs. A user might not realize they are editing a different file if the user inadvertently switches from one file to another since this switch is now seamless. The name of the currently open file is displayed in the browser tab. Version 5.0 (built on 19.06.14) Support for the REV Robotics Control Hub. Adds a Java preview pane to the Blocks editor. Adds a new offline export feature to the Blocks editor. Display wifi channel in Network circle on Driver Station. Adds calibration for Logitech C270 Updates build tooling and target SDK. Compliance with Google's permissions infrastructure (Required after build tooling update). Keep Alives to mitigate the Motorola wifi scanning problem. Telemetry substitute no longer necessary. Improves Vuforia error reporting. Fixes ftctechnh\/ftc_app issues 621, 713. Miscellaneous bug fixes and improvements. Version 4.3 (built on 18.10.31) Includes missing TensorFlow-related libraries and files. Version 4.2 (built on 18.10.30) Includes fix to avoid deadlock situation with WatchdogMonitor which could result in USB communication errors. Comm error appeared to require that user disconnect USB cable and restart the Robot Controller app to recover. robotControllerLog.txt would have error messages that included the words \"E RobotCore: lynx xmit lock: #### abandoning lock:\" Includes fix to correctly list the parent module address for a REV Robotics Expansion Hub in a configuration (.xml) file. Bug in versions 4.0 and 4.1 would incorrect list the address module for a parent REV Robotics device as \"1\". If the parent module had a higher address value than the daisy-chained module, then this bug would prevent the Robot Controller from communicating with the downstream Expansion Hub. Added requirement for ACCESS_COARSE_LOCATION to allow a Driver Station running Android Oreo to scan for Wi-Fi Direct devices. Added google() repo to build.gradle because aapt2 must be downloaded from the google() repository beginning with version 3.2 of the Android Gradle Plugin. Important Note: Android Studio users will need to be connected to the Internet the first time build the ftc_app project. Internet connectivity is required for the first build so the appropriate files can be downloaded from the Google repository. Users should not need to be connected to the Internet for subsequent builds. This should also fix buid issue where Android Studio would complain that it \"Could not find com.android.tools.lint:lint-gradle:26.1.4\" (or similar). Added support for REV Spark Mini motor controller as part of the configuration menu for a servo\/PWM port on the REV Expansion Hub. Provide examples for playing audio files in an Op Mode. Block Development Tool Changes Includes a fix for a problem with the Velocity blocks that were reported in the FTC Technology forum (Blocks Programming subforum). Change the \"Save completed successfully.\" message to a white color so it will contrast with a green background. Fixed the \"Download image\" feature so it will work if there are text blocks in the op mode. Introduce support for Google's TensorFlow Lite technology for object detetion for 2018-2019 game. TensorFlow lite can recognize Gold Mineral and Silver Mineral from 2018-2019 game. Example Java and Block op modes are included to show how to determine the relative position of the gold block (left, center, right). Version 4.1 (released on 18.09.24) Changes include: Fix to prevent crash when deprecated configuration annotations are used. Change to allow FTC Robot Controller APK to be auto-updated using FIRST Global Control Hub update scripts. Removed samples for non supported \/ non legal hardware. Improvements to Telemetry.addData block with \"text\" socket. Updated Blocks sample op mode list to include Rover Ruckus Vuforia example. Update SDK library version number. Version 4.0 (released on 18.09.12) Changes include: Initial support for UVC compatible cameras If UVC camera has a unique serial number, RC will detect and enumerate by serial number. If UVC camera lacks a unique serial number, RC will only support one camera of that type connected. Calibration settings for a few cameras are included (see TeamCode\/src\/main\/res\/xml\/teamwebcamcalibrations.xml for details). User can upload calibration files from Program and Manage web interface. UVC cameras seem to draw a fair amount of electrical current from the USB bus. This does not appear to present any problems for the REV Robotics Control Hub. This does seem to create stability problems when using some cameras with an Android phone-based Robot Controller. FTC Tech Team is investigating options to mitigate this issue with the phone-based Robot Controllers. Updated sample Vuforia Navigation and VuMark Op Modes to demonstrate how to use an internal phone-based camera and an external UVC webcam. Support for improved motor control. REV Robotics Expansion Hub firmware 1.8 and greater will support a feed forward mechanism for closed loop motor control. FTC SDK has been modified to support PIDF coefficients (proportional, integral, derivative, and feed forward). FTC Blocks development tool modified to include PIDF programming blocks. Deprecated older PID-related methods and variables. REV's 1.8.x PIDF-related changes provide a more linear and accurate way to control a motor. Wireless Added 5GHz support for wireless channel changing for those devices that support it. Tested with Moto G5 and E4 phones. Also tested with other (currently non-approved) phones such as Samsung Galaxy S8. Improved Expansion Hub firmware update support in Robot Controller app Changes to make the system more robust during the firmware update process (when performed through Robot Controller app). User no longer has to disconnect a downstream daisy-chained Expansion Hub when updating an Expansion Hub's firmware. If user is updating an Expansion Hub's firmware through a USB connection, he\/she does not have to disconnect RS485 connection to other Expansion Hubs. The user still must use a USB connection to update an Expansion Hub's firmware. The user cannot update the Expansion Hub firmware for a downstream device that is daisy chained through an RS485 connection. If an Expansion Hub accidentally gets \"bricked\" the Robot Controller app is now more likely to recognize the Hub when it scans the USB bus. Robot Controller app should be able to detect an Expansion Hub, even if it accidentally was bricked in a previous update attempt. Robot Controller app should be able to install the firmware onto the Hub, even if if accidentally was bricked in a previous update attempt. Resiliency FTC software can detect and enable an FTDI reset feature that is available with REV Robotics v1.8 Expansion Hub firmware and greater. When enabled, the Expansion Hub can detect if it hasn't communicated with the Robot Controller over the FTDI (USB) connection. If the Hub hasn't heard from the Robot Controller in a while, it will reset the FTDI connection. This action helps system recover from some ESD-induced disruptions. Various fixes to improve reliability of FTC software. Blocks Fixed errors with string and list indices in blocks export to java. Support for USB connected UVC webcams. Refactored optimized Blocks Vuforia code to support Rover Ruckus image targets. Added programming blocks to support PIDF (proportional, integral, derivative and feed forward) motor control. Added formatting options (under Telemetry and Miscellaneous categories) so user can set how many decimal places to display a numerical value. Support to play audio files (which are uploaded through Blocks web interface) on Driver Station in addition to the Robot Controller. Fixed bug with Download Image of Blocks feature. Support for REV Robotics Blinkin LED Controller. Support for REV Robotics 2m Distance Sensor. Added support for a REV Touch Sensor (no longer have to configure as a generic digital device). Added blocks for DcMotorEx methods. These are enhanced methods that you can use when supported by the motor controller hardware. The REV Robotics Expansion Hub supports these enhanced methods. Enhanced methods include methods to get\/set motor velocity (in encoder pulses per second), get\/set PIDF coefficients, etc.. Modest Improvements in Logging Decrease frequency of battery checker voltage statements. Removed non-FTC related log statements (wherever possible). Introduced a \"Match Logging\" feature. Under \"Settings\" a user can enable\/disable this feature (it's disabled by default). If enabled, user provides a \"Match Number\" through the Driver Station user interface (top of the screen). The Match Number is used to create a log file specifically with log statements from that particular Op Mode run. Match log files are stored in \/sdcard\/FIRST\/matlogs on the Robot Controller. Once an op mode run is complete, the Match Number is cleared. This is a convenient way to create a separate match log with statements only related to a specific op mode run. New Devices Support for REV Robotics Blinkin LED Controller. Support for REV Robotics 2m Distance Sensor. Added configuration option for REV 20:1 HD Hex Motor. Added support for a REV Touch Sensor (no longer have to configure as a generic digital device). Miscellaneous Fixed some errors in the definitions for acceleration and velocity in our javadoc documentation. Added ability to play audio files on Driver Station When user is configuring an Expansion Hub, the LED on the Expansion Hub will change blink pattern (purple-cyan) to indicate which Hub is currently being configured. Renamed I2cSensorType to I2cDeviceType. Added an external sample Op Mode that demonstrates localization using 2018-2019 (Rover Ruckus presented by QualComm) Vuforia targets. Added an external sample Op Mode that demonstrates how to use the REV Robotics 2m Laser Distance Sensor. Added an external sample Op Mode that demonstrates how to use the REV Robotics Blinkin LED Controller. Re-categorized external Java sample Op Modes to \"TeleOp\" instead of \"Autonomous\". Known issues: Initial support for UVC compatible cameras UVC cameras seem to draw significant amount of current from the USB bus. This does not appear to present any problems for the REV Robotics Control Hub. This does seem to create stability problems when using some cameras with an Android phone-based Robot Controller. FTC Tech Team is investigating options to mitigate this issue with the phone-based Robot Controllers. There might be a possible deadlock which causes the RC to become unresponsive when using a UVC webcam with a Nougat Android Robot Controller. Wireless When user selects a wireless channel, this channel does not necessarily persist if the phone is power cycled. Tech Team is hoping to eventually address this issue in a future release. Issue has been present since apps were introduced (i.e., it is not new with the v4.0 release). Wireless channel is not currently displayed for WiFi Direct connections. Miscellaneous The blink indication feature that shows which Expansion Hub is currently being configured does not work for a newly created configuration file. User has to first save a newly created configuration file and then close and re-edit the file in order for blink indicator to work. Version 3.6 (built on 17.12.18) Changes include: Blocks Changes Uses updated Google Blockly software to allow users to edit their op modes on Apple iOS devices (including iPad and iPhone). Improvement in Blocks tool to handle corrupt op mode files. Autonomous op modes should no longer get switched back to tele-op after re-opening them to be edited. The system can now detect type mismatches during runtime and alert the user with a message on the Driver Station. Updated javadoc documentation for setPower() method to reflect correct range of values (-1 to +1). Modified VuforiaLocalizerImpl to allow for user rendering of frames Added a user-overrideable onRenderFrame() method which gets called by the class's renderFrame() method. Version 3.5 (built on 17.10.30) Changes with version 3.5 include: Introduced a fix to prevent random op mode stops, which can occur after the Robot Controller app has been paused and then resumed (for example, when a user temporarily turns off the display of the Robot Controller phone, and then turns the screen back on). Introduced a fix to prevent random op mode stops, which were previously caused by random peer disconnect events on the Driver Station. Fixes issue where log files would be closed on pause of the RC or DS, but not re-opened upon resume. Fixes issue with battery handler (voltage) start\/stop race. Fixes issue where Android Studio generated op modes would disappear from available list in certain situations. Fixes problem where OnBot Java would not build on REV Robotics Control Hub. Fixes problem where OnBot Java would not build if the date and time on the Robot Controller device was \"rewound\" (set to an earlier date\/time). Improved error message on OnBot Java that occurs when renaming a file fails. Removed unneeded resources from android.jar binaries used by OnBot Java to reduce final size of Robot Controller app. Added MR_ANALOG_TOUCH_SENSOR block to Blocks Programming Tool. Version 3.4 (built on 17.09.06) Changes with version 3.4 include: Added telemetry.update() statement for BlankLinearOpMode template. Renamed sample Block op modes to be more consistent with Java samples. Added some additional sample Block op modes. Reworded OnBot Java readme slightly. Version 3.3 (built on 17.09.04) This version of the software includes improves for the FTC Blocks Programming Tool and the OnBot Java Programming Tool. Changes with verion 3.3 include: Android Studio ftc_app project has been updated to use Gradle Plugin 2.3.3. Android Studio ftc_app project is already using gradle 3.5 distribution. Robot Controller log has been renamed to \/sdcard\/RobotControllerLog.txt (note that this change was actually introduced w\/ v3.2). Improvements in I2C reliability. Optimized I2C read for REV Expansion Hub, with v1.7 firmware or greater. Updated all external\/samples (available through OnBot and in Android project folder). Vuforia Added support for VuMarks that will be used for the 2017-2018 season game. Blocks Update to latest Google Blockly release. Sample op modes can be selected as a template when creating new op mode. Fixed bug where the blocks would disappear temporarily when mouse button is held down. Added blocks for Range.clip and Range.scale. User can now disable\/enable Block op modes. Fix to prevent occasional Blocks deadlock. OnBot Java Significant improvements with autocomplete function for OnBot Java editor. Sample op modes can be selected as a template when creating new op mode. Fixes and changes to complete hardware setup feature. Updated (and more useful) onBot welcome message. Known issues: Android Studio After updating to the new v3.3 Android Studio project folder, if you get error messages indicating \"InvalidVirtualFileAccessException\" then you might need to do a File->Invalidate Caches \/ Restart to clear the error. OnBot Java Sometimes when you push the build button to build all op modes, the RC returns an error message that the build failed. If you press the build button a second time, the build typically suceeds. Version 3.2 (built on 17.08.02) This version of the software introduces the \"OnBot Java\" Development Tool. Similar to the FTC Blocks Development Tool, the FTC OnBot Java Development Tool allows a user to create, edit and build op modes dynamically using only a Javascript-enabled web browser. The OnBot Java Development Tool is an integrated development environment (IDE) that is served up by the Robot Controller. Op modes are created and edited using a Javascript-enabled browser (Google Chromse is recommended). Op modes are saved on the Robot Controller Android device directly. The OnBot Java Development Tool provides a Java programming environment that does NOT need Android Studio. Changes with version 3.2 include: Enhanced web-based development tools Introduction of OnBot Java Development Tool. Web-based programming and management features are \"always on\" (user no longer needs to put Robot Controller into programming mode). Web-based management interface (where user can change Robot Controller name and also easily download Robot Controller log file). OnBot Java, Blocks and Management features available from web based interface. Blocks Programming Development Tool: Changed \"LynxI2cColorRangeSensor\" block to \"REV Color\/range sensor\" block. Fixed tooltip for ColorSensor.isLightOn block. Added blocks for ColorSensor.getNormalizedColors and LynxI2cColorRangeSensor.getNormalizedColors. Added example op modes for digital touch sensor and REV Robotics Color Distance sensor. User selectable color themes. Includes many minor enhancements and fixes (too numerous to list). Known issues: Auto complete function is incomplete and does not support the following (for now): Access via this keyword Access via super keyword Members of the super cloass, not overridden by the class Any methods provided in the current class Inner classes Can't handle casted objects Any objects coming from an parenthetically enclosed expression Version 3.10 (built on 17.05.09) This version of the software provides support for the REV Robotics Expansion Hub. This version also includes improvements in the USB communication layer in an effort to enhance system resiliency. If you were using a 2.x version of the software previously, updating to version 3.1 requires that you also update your Driver Station software in addition to updating the Robot Controller software. Also note that in version 3.10 software, the setMaxSpeed and getMaxSpeed methods are no longer available (not deprecated, they have been removed from the SDK). Also note that the the new 3.x software incorporates motor profiles that a user can select as he\/she configures the robot. Changes include: Blocks changes Added VuforiaTrackableDefaultListener.getPose and Vuforia.trackPose blocks. Added optimized blocks support for Vuforia extended tracking. Added atan2 block to the math category. Added useCompetitionFieldTargetLocations parameter to Vuforia.initialize block. If set to false, the target locations are placed at (0,0,0) with target orientation as specified in https:\/\/github.com\/gearsincorg\/FTCVuforiaDemo\/blob\/master\/Robot_Navigation.java tutorial op mode. Incorporates additional improvements to USB comm layer to improve system resiliency (to recover from a greater number of communication disruptions). Additional Notes Regarding Version 3.00 (built on 17.04.13) In addition to the release changes listed below (see section labeled \"Version 3.00 (built on 17.04.013)\"), version 3.00 has the following important changes: Version 3.00 software uses a new version of the FTC Robocol (robot protocol). If you upgrade to v3.0 on the Robot Controller and\/or Android Studio side, you must also upgrade the Driver Station software to match the new Robocol. Version 3.00 software removes the setMaxSpeed and getMaxSpeed methods from the DcMotor class. If you have an op mode that formerly used these methods, you will need to remove the references\/calls to these methods. Instead, v3.0 provides the max speed information through the use of motor profiles that are selected by the user during robot configuration. Version 3.00 software currently does not have a mechanism to disable extra i2c sensors. We hope to re-introduce this function with a release in the near future. Version 3.00 (built on 17.04.13) *** Use this version of the software at YOUR OWN RISK!!! *** This software is being released as an \"alpha\" version. Use this version at your own risk! This pre-release software contains SIGNIFICANT changes, including changes to the Wi-Fi Direct pairing mechanism, rewrites of the I2C sensor classes, changes to the USB\/FTDI layer, and the introduction of support for the REV Robotics Expansion Hub and the REV Robotics color-range-light sensor. These changes were implemented to improve the reliability and resiliency of the FTC control system. Please note, however, that version 3.00 is considered \"alpha\" code. This code is being released so that the FIRST community will have an opportunity to test the new REV Expansion Hub electronics module when it becomes available in May. The developers do not recommend using this code for critical applications (i.e., competition use). *** Use this version of the software at YOUR OWN RISK!!! *** Changes include: Major rework of sensor-related infrastructure. Includes rewriting sensor classes to implement synchronous I2C communication. Fix to reset Autonomous timer back to 30 seconds. Implementation of specific motor profiles for approved 12V motors (includes Tetrix, AndyMark, Matrix and REV models). Modest improvements to enhance Wi-Fi P2P pairing. Fixes telemetry log addition race. Publishes all the sources (not just a select few). Includes Block programming improvements Addition of optimized Vuforia blocks. Auto scrollbar to projects and sounds pages. Fixed blocks paste bug. Blocks execute after while-opModeIsActive loop (to allow for cleanup before exiting op mode). Added gyro integratedZValue block. Fixes bug with projects page for Firefox browser. Added IsSpeaking block to AndroidTextToSpeech. Implements support for the REV Robotics Expansion Hub Implements support for integral REV IMU (physically installed on I2C bus 0, uses same Bosch BNO055 9 axis absolute orientation sensor as Adafruit 9DOF abs orientation sensor). - Implements support for REV color\/range\/light sensor. Provides support to update Expansion Hub firmware through FTC SDK. Detects REV firmware version and records in log file. Includes support for REV Control Hub (note that the REV Control Hub is not yet approved for FTC use). Implements FTC Blocks programming support for REV Expansion Hub and sensor hardware. Detects and alerts when I2C device disconnect. Version 2.62 (built on 17.01.07) Added null pointer check before calling modeToByte() in finishModeSwitchIfNecessary method for ModernRoboticsUsbDcMotorController class. Changes to enhance Modern Robotics USB protocol robustness. Version 2.61 (released on 16.12.19) Blocks Programming mode changes: Fix to correct issue when an exception was thrown because an OpticalDistanceSensor object appears twice in the hardware map (the second time as a LightSensor). Version 2.6 (released on 16.12.16) Fixes for Gyro class: Improve (decrease) sensor refresh latency. fix isCalibrating issues. Blocks Programming mode changes: Blocks now ignores a device in the configuration xml if the name is empty. Other devices work in configuration work fine. Version 2.5 (internal release on released on 16.12.13) Blocks Programming mode changes: Added blocks support for AdafruitBNO055IMU. Added Download Op Mode button to FtcBocks.html. Added support for copying blocks in one OpMode and pasting them in an other OpMode. The clipboard content is stored on the phone, so the programming mode server must be running. Modified Utilities section of the toolbox. In Programming Mode, display information about the active connections. Fixed paste location when workspace has been scrolled. Added blocks support for the android Accelerometer. Fixed issue where Blocks Upload Op Mode truncated name at first dot. Added blocks support for Android SoundPool. Added type safety to blocks for Acceleration. Added type safety to blocks for AdafruitBNO055IMU.Parameters. Added type safety to blocks for AnalogInput. Added type safety to blocks for AngularVelocity. Added type safety to blocks for Color. Added type safety to blocks for ColorSensor. Added type safety to blocks for CompassSensor. Added type safety to blocks for CRServo. Added type safety to blocks for DigitalChannel. Added type safety to blocks for ElapsedTime. Added type safety to blocks for Gamepad. Added type safety to blocks for GyroSensor. Added type safety to blocks for IrSeekerSensor. Added type safety to blocks for LED. Added type safety to blocks for LightSensor. Added type safety to blocks for LinearOpMode. Added type safety to blocks for MagneticFlux. Added type safety to blocks for MatrixF. Added type safety to blocks for MrI2cCompassSensor. Added type safety to blocks for MrI2cRangeSensor. Added type safety to blocks for OpticalDistanceSensor. Added type safety to blocks for Orientation. Added type safety to blocks for Position. Added type safety to blocks for Quaternion. Added type safety to blocks for Servo. Added type safety to blocks for ServoController. Added type safety to blocks for Telemetry. Added type safety to blocks for Temperature. Added type safety to blocks for TouchSensor. Added type safety to blocks for UltrasonicSensor. Added type safety to blocks for VectorF. Added type safety to blocks for Velocity. Added type safety to blocks for VoltageSensor. Added type safety to blocks for VuforiaLocalizer.Parameters. Added type safety to blocks for VuforiaTrackable. Added type safety to blocks for VuforiaTrackables. Added type safety to blocks for enums in AdafruitBNO055IMU.Parameters. Added type safety to blocks for AndroidAccelerometer, AndroidGyroscope, AndroidOrientation, and AndroidTextToSpeech. Version 2.4 (released on 16.11.13) Fix to avoid crashing for nonexistent resources. Blocks Programming mode changes: Added blocks to support OpenGLMatrix, MatrixF, and VectorF. Added blocks to support AngleUnit, AxesOrder, AxesReference, CameraDirection, CameraMonitorFeedback, DistanceUnit, and TempUnit. Added blocks to support Acceleration. Added blocks to support LinearOpMode.getRuntime. Added blocks to support MagneticFlux and Position. Fixed typos. Made blocks for ElapsedTime more consistent with other objects. Added blocks to support Quaternion, Velocity, Orientation, AngularVelocity. Added blocks to support VuforiaTrackables, VuforiaTrackable, VuforiaLocalizer, VuforiaTrackableDefaultListener. Fixed a few blocks. Added type checking to new blocks. Updated to latest blockly. Added default variable blocks to navigation and matrix blocks. Fixed toolbox entry for openGLMatrix_rotation_withAxesArgs. When user downloads Blocks-generated op mode, only the .blk file is downloaded. When user uploads Blocks-generated op mode (.blk file), Javascript code is auto generated. Added DbgLog support. Added logging when a blocks file is read\/written. Fixed bug to properly render blocks even if missing devices from configuration file. Added support for additional characters (not just alphanumeric) for the block file names (for download and upload). Added support for OpMode flavor (“Autonomous” or “TeleOp”) and group. Changes to Samples to prevent tutorial issues. Incorporated suggested changes from public pull 216 (“Replace .. paths”). Remove Servo Glitches when robot stopped. if user hits “Cancels” when editing a configuration file, clears the unsaved changes and reverts to original unmodified configuration. Added log info to help diagnose why the Robot Controller app was terminated (for example, by watch dog function). Added ability to transfer log from the controller. Fixed inconsistency for AngularVelocity Limit unbounded growth of data for telemetry. If user does not call telemetry.update() for LinearOpMode in a timely manner, data added for telemetry might get lost if size limit is exceeded. Version 2.35 (released on 16.10.06) Blockly programming mode - Removed unnecesary idle() call from blocks for new project. Version 2.30 (released on 16.10.05) Blockly programming mode: Mechanism added to save Blockly op modes from Programming Mode Server onto local device To avoid clutter, blocks are displayed in categorized folders Added support for DigitalChannel Added support for ModernRoboticsI2cCompassSensor Added support for ModernRoboticsI2cRangeSensor Added support for VoltageSensor Added support for AnalogInput Added support for AnalogOutput Fix for CompassSensor setMode block Vuforia Fix deadlock \/ make camera data available while Vuforia is running. Update to Vuforia 6.0.117 (recommended by Vuforia and Google to close security loophole). Fix for autonomous 30 second timer bug (where timer was in effect, even though it appeared to have timed out). opModeIsActive changes to allow cleanup after op mode is stopped (with enforced 2 second safety timeout). Fix to avoid reading i2c twice. Updated sample Op Modes. Improved logging and fixed intermittent freezing. Added digital I\/O sample. Cleaned up device names in sample op modes to be consistent with Pushbot guide. Fix to allow use of IrSeekerSensorV3. Version 2.20 (released on 16.09.08) Support for Modern Robotics Compass Sensor. Support for Modern Robotics Range Sensor. Revise device names for Pushbot templates to match the names used in Pushbot guide. Fixed bug so that IrSeekerSensorV3 device is accessible as IrSeekerSensor in hardwareMap. Modified computer vision code to require an individual Vuforia license (per legal requirement from PTC). Minor fixes. Blockly enhancements: Support for Voltage Sensor. Support for Analog Input. Support for Analog Output. Support for Light Sensor. Support for Servo Controller. Version 2.10 (released on 16.09.03) Support for Adafruit IMU. Improvements to ModernRoboticsI2cGyro class Block on reset of z axis. isCalibrating() returns true while gyro is calibration. Updated sample gyro program. Blockly enhancements support for android.graphics.Color. added support for ElapsedTime. improved look and legibility of blocks. support for compass sensor. support for ultrasonic sensor. support for IrSeeker. support for LED. support for color sensor. support for CRServo prompt user to configure robot before using programming mode. Provides ability to disable audio cues. various bug fixes and improvements. Version 2.00 (released on 16.08.19) This is the new release for the upcoming 2016-2017 FIRST Tech Challenge Season. Channel change is enabled in the FTC Robot Controller app for Moto G 2nd and 3rd Gen phones. Users can now use annotations to register\/disable their Op Modes. Changes in the Android SDK, JDK and build tool requirements (minsdk=19, java 1.7, build tools 23.0.3). Standardized units in analog input. Cleaned up code for existing analog sensor classes. setChannelMode and getChannelMode were REMOVED from the DcMotorController class. This is important - we no longer set the motor modes through the motor controller. setMode and getMode were added to the DcMotor class. ContinuousRotationServo class has been added to the FTC SDK. Range.clip() method has been overloaded so it can support this operation for int, short and byte integers. Some changes have been made (new methods added) on how a user can access items from the hardware map. Users can now set the zero power behavior for a DC motor so that the motor will brake or float when power is zero. Prototype Blockly Programming Mode has been added to FTC Robot Controller. Users can place the Robot Controller into this mode, and then use a device (such as a laptop) that has a Javascript enabled browser to write Blockly-based Op Modes directly onto the Robot Controller. Users can now configure the robot remotely through the FTC Driver Station app. Android Studio project supports Android Studio 2.1.x and compile SDK Version 23 (Marshmallow). Vuforia Computer Vision SDK integrated into FTC SDK. Users can use sample vision targets to get localization information on a standard FTC field. Project structure has been reorganized so that there is now a TeamCode package that users can use to place their local\/custom Op Modes into this package. Inspection function has been integrated into the FTC Robot Controller and Driver Station Apps (Thanks Team HazMat… 9277 & 10650!). Audio cues have been incorporated into FTC SDK. Swap mechanism added to FTC Robot Controller configuration activity. For example, if you have two motor controllers on a robot, and you misidentified them in your configuration file, you can use the Swap button to swap the devices within the configuration file (so you do not have to manually re-enter in the configuration info for the two devices). Fix mechanism added to all user to replace an electronic module easily. For example, suppose a servo controller dies on your robot. You replace the broken module with a new module, which has a different serial number from the original servo controller. You can use the Fix button to automatically reconfigure your configuration file to use the serial number of the new module. Improvements made to fix resiliency and responsiveness of the system. For LinearOpMode the user now must for a telemetry.update() to update the telemetry data on the driver station. This update() mechanism ensures that the driver station gets the updated data properly and at the same time. The Auto Configure function of the Robot Controller is now template based. If there is a commonly used robot configuration, a template can be created so that the Auto Configure mechanism can be used to quickly configure a robot of this type. The logic to detect a runaway op mode (both in the LinearOpMode and OpMode types) and to abort the run, then auto recover has been improved\/implemented. Fix has been incorporated so that Logitech F310 gamepad mappings will be correct for Marshmallow users. Release 16.07.08 For the ftc_app project, the gradle files have been modified to support Android Studio 2.1.x. Release 16.03.30 For the MIT App Inventor, the design blocks have new icons that better represent the function of each design component. Some changes were made to the shutdown logic to ensure the robust shutdown of some of our USB services. A change was made to LinearOpMode so as to allow a given instance to be executed more than once, which is required for the App Inventor. Javadoc improved\/updated. Release 16.03.09 Changes made to make the FTC SDK synchronous (significant change!) waitOneFullHardwareCycle() and waitForNextHardwareCycle() are no longer needed and have been deprecated. runOpMode() (for a LinearOpMode) is now decoupled from the system's hardware read\/write thread. loop() (for an OpMode) is now decoupled from the system's hardware read\/write thread. Methods are synchronous. For example, if you call setMode(DcMotorController.RunMode.RESET_ENCODERS) for a motor, the encoder is guaranteed to be reset when the method call is complete. For legacy module (NXT compatible), user no longer has to toggle between read and write modes when reading from or writing to a legacy device. Changes made to enhance reliability\/robustness during ESD event. Changes made to make code thread safe. Debug keystore added so that user-generated robot controller APKs will all use the same signed key (to avoid conflicts if a team has multiple developer laptops for example). Firmware version information for Modern Robotics modules are now logged. Changes made to improve USB comm reliability and robustness. Added support for voltage indicator for legacy (NXT-compatible) motor controllers. Changes made to provide auto stop capabilities for op modes. A LinearOpMode class will stop when the statements in runOpMode() are complete. User does not have to push the stop button on the driver station. If an op mode is stopped by the driver station, but there is a run away\/uninterruptible thread persisting, the app will log an error message then force itself to crash to stop the runaway thread. Driver Station UI modified to display lowest measured voltage below current voltage (12V battery). Driver Station UI modified to have color background for current voltage (green=good, yellow=caution, red=danger, extremely low voltage). javadoc improved (edits and additional classes). Added app build time to About activity for driver station and robot controller apps. Display local IP addresses on Driver Station About activity. Added I2cDeviceSynchImpl. Added I2cDeviceSync interface. Added seconds() and milliseconds() to ElapsedTime for clarity. Added getCallbackCount() to I2cDevice. Added missing clearI2cPortActionFlag. Added code to create log messages while waiting for LinearOpMode shutdown. Fix so Wifi Direct Config activity will no longer launch multiple times. Added the ability to specify an alternate i2c address in software for the Modern Robotics gyro. Release 16.02.09 Improved battery checker feature so that voltage values get refreshed regularly (every 250 msec) on Driver Station (DS) user interface. Improved software so that Robot Controller (RC) is much more resilient and “self-healing” to USB disconnects: If user attempts to start\/restart RC with one or more module missing, it will display a warning but still start up. When running an op mode, if one or more modules gets disconnected, the RC & DS will display warnings,and robot will keep on working in spite of the missing module(s). If a disconnected module gets physically reconnected the RC will auto detect the module and the user will regain control of the recently connected module. Warning messages are more helpful (identifies the type of module that’s missing plus its USB serial number). Code changes to fix the null gamepad reference when users try to reference the gamepads in the init() portion of their op mode. NXT light sensor output is now properly scaled. Note that teams might have to readjust their light threshold values in their op modes. On DS user interface, gamepad icon for a driver will disappear if the matching gamepad is disconnected or if that gamepad gets designated as a different driver. Robot Protocol (ROBOCOL) version number info is displayed in About screen on RC and DS apps. Incorporated a display filter on pairing screen to filter out devices that don’t use the “-“ format. This filter can be turned off to show all WiFi Direct devices. Updated text in License file. Fixed formatting error in OpticalDistanceSensor.toString(). Fixed issue on with a blank (“”) device name that would disrupt WiFi Direct Pairing. Made a change so that the WiFi info and battery info can be displayed more quickly on the DS upon connecting to RC. Improved javadoc generation. Modified code to make it easier to support language localization in the future. Release 16.01.04 Updated compileSdkVersion for apps Prevent Wifi from entering power saving mode removed unused import from driver station Corrrected \"Dead zone\" joystick code. LED.getDeviceName and .getConnectionInfo() return null apps check for ROBOCOL_VERSION mismatch Fix for Telemetry also has off-by-one errors in its data string sizing \/ short size limitations error User telemetry output is sorted. added formatting variants to DbgLog and RobotLog APIs code modified to allow for a long list of op mode names. changes to improve thread safety of RobocolDatagramSocket Fix for \"missing hardware leaves robot controller disconnected from driver station\" error fix for \"fast tapping of Init\/Start causes problems\" (toast is now only instantiated on UI thread). added some log statements for thread life cycle. moved gamepad reset logic inside of initActiveOpMode() for robustness changes made to mitigate risk of race conditions on public methods. changes to try and flag when WiFi Direct name contains non-printable characters. fix to correct race condition between .run() and .close() in ReadWriteRunnableStandard. updated FTDI driver made ReadWriteRunnableStanard interface public. fixed off-by-one errors in Command constructor moved specific hardware implmentations into their own package. moved specific gamepad implemnatations to the hardware library. changed LICENSE file to new BSD version. fixed race condition when shutting down Modern Robotics USB devices. methods in the ColorSensor classes have been synchronized. corrected isBusy() status to reflect end of motion. corrected \"back\" button keycode. the notSupported() method of the GyroSensor class was changed to protected (it should not be public). Release 15.11.04.001 Added Support for Modern Robotics Gyro. The GyroSensor class now supports the MR Gyro Sensor. Users can access heading data (about Z axis) Users can also access raw gyro data (X, Y, & Z axes). Example MRGyroTest.java op mode included. Improved error messages More descriptive error messages for exceptions in user code. Updated DcMotor API Enable read mode on new address in setI2cAddress Fix so that driver station app resets the gamepads when switching op modes. USB-related code changes to make USB comm more responsive and to display more explicit error messages. Fix so that USB will recover properly if the USB bus returns garbage data. Fix USB initializtion race condition. Better error reporting during FTDI open. More explicit messages during USB failures. Fixed bug so that USB device is closed if event loop teardown method was not called. Fixed timer UI issue Fixed duplicate name UI bug (Legacy Module configuration). Fixed race condition in EventLoopManager. Fix to keep references stable when updating gamepad. For legacy Matrix motor\/servo controllers removed necessity of appending \"Motor\" and \"Servo\" to controller names. Updated HT color sensor driver to use constants from ModernRoboticsUsbLegacyModule class. Updated MR color sensor driver to use constants from ModernRoboticsUsbDeviceInterfaceModule class. Correctly handle I2C Address change in all color sensors Updated\/cleaned up op modes. Updated comments in LinearI2cAddressChange.java example op mode. Replaced the calls to \"setChannelMode\" with \"setMode\" (to match the new of the DcMotor method). Removed K9AutoTime.java op mode. Added MRGyroTest.java op mode (demonstrates how to use MR Gyro Sensor). Added MRRGBExample.java op mode (demonstrates how to use MR Color Sensor). Added HTRGBExample.java op mode (demonstrates how to use HT legacy color sensor). Added MatrixControllerDemo.java (demonstrates how to use legacy Matrix controller). Updated javadoc documentation. Updated release .apk files for Robot Controller and Driver Station apps. Release 15.10.06.002 Added support for Legacy Matrix 9.6V motor\/servo controller. Cleaned up build.gradle file. Minor UI and bug fixes for driver station and robot controller apps. Throws error if Ultrasonic sensor (NXT) is not configured for legacy module port 4 or 5. Release 15.08.03.001 New user interfaces for FTC Driver Station and FTC Robot Controller apps. An init() method is added to the OpMode class. For this release, init() is triggered right before the start() method. Eventually, the init() method will be triggered when the user presses an \"INIT\" button on driver station. The init() and loop() methods are now required (i.e., need to be overridden in the user's op mode). The start() and stop() methods are optional. A new LinearOpMode class is introduced. Teams can use the LinearOpMode mode to create a linear (not event driven) program model. Teams can use blocking statements like Thread.sleep() within a linear op mode. The API for the Legacy Module and Core Device Interface Module have been updated. Support for encoders with the Legacy Module is now working. The hardware loop has been updated for better performance.", "fork": false, "created_at": "2021-03-08T11:34:11Z", - "updated_at": "2026-10-29T06:51:26Z", + "updated_at": "2026-10-31T10:26:15Z", "pushed_at": "2024-04-12T05:48:35Z", - "stargazers_count": 320, - "watchers_count": 320, + "stargazers_count": 321, + "watchers_count": 321, "has_discussions": false, "forks_count": 92, "allow_forking": true, @@ -147,7 +147,7 @@ "topics": [], "visibility": "public", "forks": 92, - "watchers": 320, + "watchers": 321, "score": 0, "subscribers_count": 16 }, diff --git a/2019/CVE-2019-12725.json b/2019/CVE-2019-12725.json index 28e312aa94..0cd987f597 100644 --- a/2019/CVE-2019-12725.json +++ b/2019/CVE-2019-12725.json @@ -47,10 +47,10 @@ "description": "漏洞POC、EXP合集，持续更新。Apache Druid-任意文件读取（CVE-2021-36749）、ConfluenceRCE（CVE-2021-26084）、ZeroShell防火墙RCE（CVE-2019-12725）、ApacheSolr任意文件读取、蓝凌OA任意文件读取、phpStudyRCE、ShowDoc任意文件上传、原创先锋后台未授权、Kyan账号密码泄露、TerraMasterTos任意文件读取、TamronOS-IPTV系统RCE、Wayos防火墙账号密码泄露", "fork": false, "created_at": "2021-05-22T05:06:33Z", - "updated_at": "2026-10-09T05:25:00Z", + "updated_at": "2026-10-31T11:54:17Z", "pushed_at": "2021-11-21T10:34:06Z", - "stargazers_count": 178, - "watchers_count": 178, + "stargazers_count": 177, + "watchers_count": 177, "has_discussions": false, "forks_count": 37, "allow_forking": true, @@ -65,7 +65,7 @@ ], "visibility": "public", "forks": 37, - "watchers": 178, + "watchers": 177, "score": 0, "subscribers_count": 5 }, diff --git a/2020/CVE-2020-13927.json b/2020/CVE-2020-13927.json index 65fc6fe178..0e53dae670 100644 --- a/2020/CVE-2020-13927.json +++ b/2020/CVE-2020-13927.json @@ -15,7 +15,7 @@ "fork": false, "created_at": "2026-07-07T23:03:12Z", "updated_at": "2026-10-21T17:13:18Z", - "pushed_at": "2026-10-30T10:13:37Z", + "pushed_at": "2026-10-31T09:48:06Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2021/CVE-2021-1636.json b/2021/CVE-2021-1636.json index 9b74390aaf..385054ad26 100644 --- a/2021/CVE-2021-1636.json +++ b/2021/CVE-2021-1636.json @@ -14,10 +14,10 @@ "description": " ​![​logo​](https:\/\/github.com\/curated-intel\/Ukraine-Cyber-Operations\/blob\/main\/ci-logo.png) ​#​ ​Ukraine-Cyber-Operations ​Curated Intelligence is working with analysts from around the world to provide useful information to organisations in Ukraine looking for additional free threat intelligence. Slava Ukraini. Glory to Ukraine. ([​Blog​](https:\/\/www.curatedintel.org\/2021\/08\/welcome.html) | [​Twitter​](https:\/\/twitter.com\/CuratedIntel) | [​LinkedIn​](https:\/\/www.linkedin.com\/company\/curatedintelligence\/)) ​![​timeline​](https:\/\/github.com\/curated-intel\/Ukraine-Cyber-Operations\/blob\/main\/uacyberopsv2.png) ​![​cyberwar​](https:\/\/github.com\/curated-intel\/Ukraine-Cyber-Operations\/blob\/main\/Russia-Ukraine%20Cyberwar.png) ​###​ ​Analyst Comments: ​-​ 2022-02-25 ​  ​-​ Creation of the initial repository to help organisations in Ukraine ​  ​-​ Added [​Threat Reports​](https:\/\/github.com\/curated-intel\/Ukraine-Cyber-Operations#threat-reports) section ​  ​-​ Added [​Vendor Support​](https:\/\/github.com\/curated-intel\/Ukraine-Cyber-Operations#vendor-support) section ​-​ 2022-02-26 ​  ​-​ Additional resources, chronologically ordered (h\/t Orange-CD) ​  ​-​ Added [​Vetted OSINT Sources​](https:\/\/github.com\/curated-intel\/Ukraine-Cyber-Operations#vetted-osint-sources) section  ​  ​-​ Added [​Miscellaneous Resources​](https:\/\/github.com\/curated-intel\/Ukraine-Cyber-Operations#miscellaneous-resources) section ​-​ 2022-02-27 ​  ​-​ Additional threat reports have been added ​  ​-​ Added [​Data Brokers​](https:\/\/github.com\/curated-intel\/Ukraine-Cyber-Operations\/blob\/main\/README.md#data-brokers) section ​  ​-​ Added [​Access Brokers​](https:\/\/github.com\/curated-intel\/Ukraine-Cyber-Operations\/blob\/main\/README.md#access-brokers) section ​-​ 2022-02-28 ​  ​-​ Added Russian Cyber Operations Against Ukraine Timeline by ETAC ​  ​-​ Added Vetted and Contextualized [​Indicators of Compromise (IOCs)​](https:\/\/github.com\/curated-intel\/Ukraine-Cyber-Operations\/blob\/main\/ETAC_Vetted_UkraineRussiaWar_IOCs.csv) by ETAC ​-​ 2022-03-01 ​  ​-​ Additional threat reports and resources have been added ​-​ 2022-03-02 ​  ​-​ Additional [​Indicators of Compromise (IOCs)​](https:\/\/github.com\/curated-intel\/Ukraine-Cyber-Operations\/blob\/main\/ETAC_Vetted_UkraineRussiaWar_IOCs.csv#L2011) have been added ​  ​-​ Added vetted [​YARA rule collection​](https:\/\/github.com\/curated-intel\/Ukraine-Cyber-Operations\/tree\/main\/yara) from the Threat Reports by ETAC ​  ​-​ Added loosely-vetted [​IOC Threat Hunt Feeds​](https:\/\/github.com\/curated-intel\/Ukraine-Cyber-Operations\/tree\/main\/KPMG-Egyde_Ukraine-Crisis_Feeds\/MISP-CSV_MediumConfidence_Filtered) by KPMG-Egyde CTI (h\/t [​0xDISREL​](https:\/\/twitter.com\/0xDISREL)) ​    ​-​ IOCs shared by these feeds are ​`LOW-TO-MEDIUM CONFIDENCE`​ we strongly recommend NOT adding them to a blocklist ​    ​-​ These could potentially be used for ​`THREAT HUNTING`​ and could be added to a ​`WATCHLIST` ​    ​-​ IOCs are generated in ​`MISP COMPATIBLE`​ CSV format ​-​ 2022-03-03 ​  ​-​ Additional threat reports and vendor support resources have been added ​  ​-​ Updated [​Log4Shell IOC Threat Hunt Feeds​](https:\/\/github.com\/curated-intel\/Log4Shell-IOCs\/tree\/main\/KPMG_Log4Shell_Feeds) by KPMG-Egyde CTI; not directly related to Ukraine, but still a widespread vulnerability. ​  ​-​ Added diagram of Russia-Ukraine Cyberwar Participants 2022 by ETAC ​  ​-​ Additional [​Indicators of Compromise (IOCs)​](https:\/\/github.com\/curated-intel\/Ukraine-Cyber-Operations\/blob\/main\/ETAC_Vetted_UkraineRussiaWar_IOCs.csv#L2042) have been added ​####​ ​`Threat Reports` ​| Date | Source | Threat(s) | URL | ​| --- | --- | --- | --- | ​| 14 JAN | SSU Ukraine | Website Defacements | [ssu.gov.ua](https:\/\/ssu.gov.ua\/novyny\/sbu-rozsliduie-prychetnist-rosiiskykh-spetssluzhb-do-sohodnishnoi-kiberataky-na-orhany-derzhavnoi-vlady-ukrainy)| ​| 15 JAN | Microsoft | WhisperGate wiper (DEV-0586) | [microsoft.com](https:\/\/www.microsoft.com\/security\/blog\/2022\/01\/15\/destructive-malware-targeting-ukrainian-organizations\/) | ​| 19 JAN | Elastic | WhisperGate wiper (Operation BleedingBear) | [elastic.github.io](https:\/\/elastic.github.io\/security-research\/malware\/2022\/01\/01.operation-bleeding-bear\/article\/) | ​| 31 JAN | Symantec | Gamaredon\/Shuckworm\/PrimitiveBear (FSB) | [symantec-enterprise-blogs.security.com](https:\/\/symantec-enterprise-blogs.security.com\/blogs\/threat-intelligence\/shuckworm-gamaredon-espionage-ukraine) | ​| 2 FEB | RaidForums | Access broker \"GodLevel\" offering Ukrainain algricultural exchange | RaidForums [not linked] | ​| 2 FEB | CERT-UA | UAC-0056 using SaintBot and OutSteel malware | [cert.gov.ua](https:\/\/cert.gov.ua\/article\/18419) | ​| 3 FEB | PAN Unit42 | Gamaredon\/Shuckworm\/PrimitiveBear (FSB) | [unit42.paloaltonetworks.com](https:\/\/unit42.paloaltonetworks.com\/gamaredon-primitive-bear-ukraine-update-2021\/) | ​| 4 FEB | Microsoft | Gamaredon\/Shuckworm\/PrimitiveBear (FSB) | [microsoft.com](https:\/\/www.microsoft.com\/security\/blog\/2022\/02\/04\/actinium-targets-ukrainian-organizations\/) | ​| 8 FEB | NSFOCUS | Lorec53 (aka UAC-0056, EmberBear, BleedingBear) | [nsfocusglobal.com](https:\/\/nsfocusglobal.com\/apt-retrospection-lorec53-an-active-russian-hack-group-launched-phishing-attacks-against-georgian-government) | ​| 15 FEB | CERT-UA | DDoS attacks against the name server of government websites as well as Oschadbank (State Savings Bank) & Privatbank (largest commercial bank). False SMS and e-mails to create panic | [cert.gov.ua](https:\/\/cert.gov.ua\/article\/37139) | ​| 23 FEB | The Daily Beast | Ukrainian troops receive threatening SMS messages | [thedailybeast.com](https:\/\/www.thedailybeast.com\/cyberattacks-hit-websites-and-psy-ops-sms-messages-targeting-ukrainians-ramp-up-as-russia-moves-into-ukraine) | ​| 23 FEB | UK NCSC | Sandworm\/VoodooBear (GRU) | [ncsc.gov.uk](https:\/\/www.ncsc.gov.uk\/files\/Joint-Sandworm-Advisory.pdf) | ​| 23 FEB | SentinelLabs | HermeticWiper | [sentinelone.com]( https:\/\/www.sentinelone.com\/labs\/hermetic-wiper-ukraine-under-attack\/ ) | ​| 24 FEB | ESET | HermeticWiper | [welivesecurity.com](https:\/\/www.welivesecurity.com\/2022\/02\/24\/hermeticwiper-new-data-wiping-malware-hits-ukraine\/) | ​| 24 FEB | Symantec | HermeticWiper, PartyTicket ransomware, CVE-2021-1636, unknown webshell | [symantec-enterprise-blogs.security.com](https:\/\/symantec-enterprise-blogs.security.com\/blogs\/threat-intelligence\/ukraine-wiper-malware-russia) | ​| 24 FEB | Cisco Talos | HermeticWiper | [blog.talosintelligence.com](https:\/\/blog.talosintelligence.com\/2022\/02\/threat-advisory-hermeticwiper.html) | ​| 24 FEB | Zscaler | HermeticWiper | [zscaler.com](https:\/\/www.zscaler.com\/blogs\/security-research\/hermetic-wiper-resurgence-targeted-attacks-ukraine) | ​| 24 FEB | Cluster25 | HermeticWiper | [cluster25.io](https:\/\/cluster25.io\/2022\/02\/24\/ukraine-analysis-of-the-new-disk-wiping-malware\/) | ​| 24 FEB | CronUp | Data broker \"FreeCivilian\" offering multiple .gov.ua | [twitter.com\/1ZRR4H](https:\/\/twitter.com\/1ZRR4H\/status\/1496931721052311557)| ​| 24 FEB | RaidForums | Data broker \"Featherine\" offering diia.gov.ua | RaidForums [not linked] | ​| 24 FEB | DomainTools | Unknown scammers | [twitter.com\/SecuritySnacks](https:\/\/twitter.com\/SecuritySnacks\/status\/1496956492636905473?s=20&t=KCIX_1Ughc2Fs6Du-Av0Xw) | ​| 25 FEB | @500mk500 | Gamaredon\/Shuckworm\/PrimitiveBear (FSB) | [twitter.com\/500mk500](https:\/\/twitter.com\/500mk500\/status\/1497339266329894920?s=20&t=opOtwpn82ztiFtwUbLkm9Q) | ​| 25 FEB | @500mk500 | Gamaredon\/Shuckworm\/PrimitiveBear (FSB) | [twitter.com\/500mk500](https:\/\/twitter.com\/500mk500\/status\/1497208285472215042)| ​| 25 FEB | Microsoft | HermeticWiper | [gist.github.com](https:\/\/gist.github.com\/fr0gger\/7882fde2b1b271f9e886a4a9b6fb6b7f) | ​| 25 FEB | 360 NetLab | DDoS (Mirai, Gafgyt, IRCbot, Ripprbot, Moobot) | [blog.netlab.360.com](https:\/\/blog.netlab.360.com\/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days\/) | ​| 25 FEB | Conti [themselves] | Conti ransomware, BazarLoader | Conti News .onion [not linked] | ​| 25 FEB | CoomingProject [themselves] | Data Hostage Group | CoomingProject Telegram [not linked] | ​| 25 FEB | CERT-UA | UNC1151\/Ghostwriter (Belarus MoD) | [CERT-UA Facebook](https:\/\/facebook.com\/story.php?story_fbid=312939130865352&id=100064478028712)| ​| 25 FEB | Sekoia | UNC1151\/Ghostwriter (Belarus MoD) | [twitter.com\/sekoia_io](https:\/\/twitter.com\/sekoia_io\/status\/1497239319295279106) | ​| 25 FEB | @jaimeblascob | UNC1151\/Ghostwriter (Belarus MoD) | [twitter.com\/jaimeblasco](https:\/\/twitter.com\/jaimeblascob\/status\/1497242668627370009)| ​| 25 FEB | RISKIQ | UNC1151\/Ghostwriter (Belarus MoD) | [community.riskiq.com](https:\/\/community.riskiq.com\/article\/e3a7ceea\/) | ​| 25 FEB | MalwareHunterTeam | Unknown phishing | [twitter.com\/malwrhunterteam](https:\/\/twitter.com\/malwrhunterteam\/status\/1497235270416097287) | ​| 25 FEB | ESET | Unknown scammers | [twitter.com\/ESETresearch](https:\/\/twitter.com\/ESETresearch\/status\/1497194165561659394) | ​| 25 FEB | BitDefender | Unknown scammers | [blog.bitdefender.com](https:\/\/blog.bitdefender.com\/blog\/hotforsecurity\/cybercriminals-deploy-spam-campaign-as-tens-of-thousands-of-ukrainians-seek-refuge-in-neighboring-countries\/) | ​| 25 FEB | SSSCIP Ukraine | Unkown phishing | [twitter.com\/dsszzi](https:\/\/twitter.com\/dsszzi\/status\/1497103078029291522) | ​| 25 FEB | RaidForums | Data broker \"NetSec\"  offering FSB (likely SMTP accounts) | RaidForums [not linked] | ​| 25 FEB | Zscaler | PartyTicket decoy ransomware | [zscaler.com](https:\/\/www.zscaler.com\/blogs\/security-research\/technical-analysis-partyticket-ransomware) | ​| 25 FEB | INCERT GIE | Cyclops Blink, HermeticWiper | [linkedin.com](https:\/\/www.linkedin.com\/posts\/activity-6902989337210740736-XohK) [Login Required] | ​| 25 FEB | Proofpoint | UNC1151\/Ghostwriter (Belarus MoD) | [twitter.com\/threatinsight](https:\/\/twitter.com\/threatinsight\/status\/1497355737844133895?s=20&t=Ubi0tb_XxGCbHLnUoQVp8w) | ​| 25 FEB | @fr0gger_ | HermeticWiper capabilities Overview | [twitter.com\/fr0gger_](https:\/\/twitter.com\/fr0gger_\/status\/1497121876870832128?s=20&t=_296n0bPeUgdXleX02M9mg) ​| 26 FEB | BBC Journalist | A fake Telegram account claiming to be President Zelensky is posting dubious messages | [twitter.com\/shayan86](https:\/\/twitter.com\/shayan86\/status\/1497485340738785283?s=21) | ​| 26 FEB | CERT-UA | UNC1151\/Ghostwriter (Belarus MoD) | [CERT_UA Facebook](https:\/\/facebook.com\/story.php?story_fbid=313517477474184&id=100064478028712) | ​| 26 FEB | MHT and TRMLabs | Unknown scammers, linked to ransomware | [twitter.com\/joes_mcgill](https:\/\/twitter.com\/joes_mcgill\/status\/1497609555856932864?s=20&t=KCIX_1Ughc2Fs6Du-Av0Xw) | ​| 26 FEB | US CISA | WhisperGate wiper, HermeticWiper | [cisa.gov](https:\/\/www.cisa.gov\/uscert\/ncas\/alerts\/aa22-057a) | ​| 26 FEB | Bloomberg | Destructive malware (possibly HermeticWiper) deployed at Ukrainian Ministry of Internal Affairs & data stolen from Ukrainian telecommunications networks | [bloomberg.com](https:\/\/www.bloomberg.com\/news\/articles\/2022-02-26\/hackers-destroyed-data-at-key-ukraine-agency-before-invasion?sref=ylv224K8) | ​| 26 FEB | Vice Prime Minister of Ukraine | IT ARMY of Ukraine created to crowdsource offensive operations against Russian infrastructure | [twitter.com\/FedorovMykhailo](https:\/\/twitter.com\/FedorovMykhailo\/status\/1497642156076511233) | ​| 26 FEB | Yoroi | HermeticWiper | [yoroi.company](https:\/\/yoroi.company\/research\/diskkill-hermeticwiper-a-disruptive-cyber-weapon-targeting-ukraines-critical-infrastructures) | ​| 27 FEB | LockBit [themselves] | LockBit ransomware | LockBit .onion [not linked] |  ​| 27 FEB | ALPHV [themselves] | ALPHV ransomware | vHUMINT [closed source] | ​| 27 FEB | Mēris Botnet [themselves] | DDoS attacks | vHUMINT [closed source] | ​| 28 FEB | Horizon News [themselves] | Leak of China's Censorship Order about Ukraine | [TechARP](https:\/\/www-techarp-com.cdn.ampproject.org\/c\/s\/www.techarp.com\/internet\/chinese-media-leaks-ukraine-censor\/?amp=1)| ​| 28 FEB | Microsoft | FoxBlade (aka HermeticWiper) | [Microsoft](https:\/\/blogs.microsoft.com\/on-the-issues\/2022\/02\/28\/ukraine-russia-digital-war-cyberattacks\/?preview_id=65075) | ​| 28 FEB | @heymingwei | Potential BGP hijacks attempts against Ukrainian Internet Names Center | [https:\/\/twitter.com\/heymingwei](https:\/\/twitter.com\/heymingwei\/status\/1498362715198263300?s=20&t=Ju31gTurYc8Aq_yZMbvbxg) | ​| 28 FEB | @cyberknow20 | Stormous ransomware targets Ukraine Ministry of Foreign Affairs | [twitter.com\/cyberknow20](https:\/\/twitter.com\/cyberknow20\/status\/1498434090206314498?s=21) |  ​| 1 MAR | ESET | IsaacWiper and HermeticWizard | [welivesecurity.com](https:\/\/www.welivesecurity.com\/2022\/03\/01\/isaacwiper-hermeticwizard-wiper-worm-targeting-ukraine\/) | ​| 1 MAR | Proofpoint | Ukrainian armed service member's email compromised and sent malspam containing the SunSeed malware (likely TA445\/UNC1151\/Ghostwriter) | [proofpoint.com](https:\/\/www.proofpoint.com\/us\/blog\/threat-insight\/asylum-ambuscade-state-actor-uses-compromised-private-ukrainian-military-emails) | ​| 1 MAR | Elastic | HermeticWiper | [elastic.github.io](https:\/\/elastic.github.io\/security-research\/intelligence\/2022\/03\/01.hermeticwiper-targets-ukraine\/article\/) | ​| 1 MAR | CrowdStrike | PartyTicket (aka HermeticRansom), DriveSlayer (aka HermeticWiper) | [CrowdStrike](https:\/\/www.crowdstrike.com\/blog\/how-to-decrypt-the-partyticket-ransomware-targeting-ukraine\/) | ​| 2 MAR | Zscaler | DanaBot operators launch DDoS attacks against the Ukrainian Ministry of Defense | [zscaler.com](https:\/\/www.zscaler.com\/blogs\/security-research\/danabot-launches-ddos-attack-against-ukrainian-ministry-defense) | ​| 3 MAR | @ShadowChasing1 | Gamaredon\/Shuckworm\/PrimitiveBear (FSB) | [twitter.com\/ShadowChasing1](https:\/\/twitter.com\/ShadowChasing1\/status\/1499361093059153921) | ​| 3 MAR | @vxunderground | News website in Poland was reportedly compromised and the threat actor uploaded anti-Ukrainian propaganda | [twitter.com\/vxunderground](https:\/\/twitter.com\/vxunderground\/status\/1499374914758918151?s=20&t=jyy9Hnpzy-5P1gcx19bvIA) | ​| 3 MAR | @kylaintheburgh | Russian botnet on Twitter is pushing \"#istandwithputin\" and \"#istandwithrussia\" propaganda (in English) | [twitter.com\/kylaintheburgh](https:\/\/twitter.com\/kylaintheburgh\/status\/1499350578371067906?s=21) | ​| 3 MAR | @tracerspiff | UNC1151\/Ghostwriter (Belarus MoD) | [twitter.com](https:\/\/twitter.com\/tracerspiff\/status\/1499444876810854408?s=21) | ​####​ ​`Access Brokers` ​| Date | Threat(s) | Source | ​| --- | --- | --- | ​| 23 JAN | Access broker \"Mont4na\" offering UkrFerry | RaidForums [not linked] | ​| 23 JAN | Access broker \"Mont4na\" offering PrivatBank | RaidForums [not linked] | ​| 24 JAN | Access broker \"Mont4na\" offering DTEK | RaidForums [not linked] | ​| 27 FEB | KelvinSecurity Sharing list of IP cameras in Ukraine | vHUMINT [closed source] | ​| 28 FEB | \"w1nte4mute\" looking to buy access to UA and NATO countries (likely ransomware affiliate) | vHUMINT [closed source] | ​####​ ​`Data Brokers` ​| Threat Actor    | Type            | Observation                                                                                               | Validated | Relevance                     | Source                                                     | ​| --------------- | --------------- | --------------------------------------------------------------------------------------------------------- | --------- | ----------------------------- | ---------------------------------------------------------- | ​| aguyinachair    | UA data sharing | PII DB of ukraine.com (shared as part of a generic compilation)                                           | No        | TA discussion in past 90 days | ELeaks Forum \\[not linked\\]                                | ​| an3key          | UA data sharing | DB of Ministry of Communities and Territories Development of Ukraine (minregion\\[.\\]gov\\[.\\]ua)           | No        | TA discussion in past 90 days | RaidForums \\[not linked; site hijacked since UA invasion\\] | ​| an3key          | UA data sharing | DB of Ukrainian Ministry of Internal Affairs (wanted\\[.\\]mvs\\[.\\]gov\\[.\\]ua)                              | No        | TA discussion in past 90 days | RaidForums \\[not linked; site hijacked since UA invasion\\] | ​| CorelDraw       | UA data sharing | PII DB (40M) of PrivatBank customers (privatbank\\[.\\]ua)                                                  | No        | TA discussion in past 90 days | RaidForums \\[not linked; site hijacked since UA invasion\\] | ​| CorelDraw       | UA data sharing | DB of \"border crossing\" DBs of DPR and LPR                                                                | No        | TA discussion in past 90 days | RaidForums \\[not linked; site hijacked since UA invasion\\] | ​| CorelDraw       | UA data sharing | PII DB (7.5M) of Ukrainian passports                                                                      | No        | TA discussion in past 90 days | RaidForums \\[not linked; site hijacked since UA invasion\\] | ​| CorelDraw       | UA data sharing | PII DB of Ukrainian car registration, license plates, Ukrainian traffic police records                    | No        | TA discussion in past 90 days | RaidForums \\[not linked; site hijacked since UA invasion\\] | ​| CorelDraw       | UA data sharing | PII DB (2.1M) of Ukrainian citizens                                                                       | No        | TA discussion in past 90 days | RaidForums \\[not linked; site hijacked since UA invasion\\] | ​| CorelDraw       | UA data sharing | PII DB (28M) of Ukrainian citizens (passports, drivers licenses, photos)                                  | No        | TA discussion in past 90 days | RaidForums \\[not linked; site hijacked since UA invasion\\] | ​| CorelDraw       | UA data sharing | PII DB (1M) of Ukrainian postal\/courier service customers (novaposhta\\[.\\]ua)                             | No        | TA discussion in past 90 days | RaidForums \\[not linked; site hijacked since UA invasion\\] | ​| CorelDraw       | UA data sharing | PII DB (10M) of Ukrainian telecom customers (vodafone\\[.\\]ua)                                             | No        | TA discussion in past 90 days | RaidForums \\[not linked; site hijacked since UA invasion\\] | ​| CorelDraw       | UA data sharing | PII DB (3M) of Ukrainian telecom customers (lifecell\\[.\\]ua)                                              | No        | TA discussion in past 90 days | RaidForums \\[not linked; site hijacked since UA invasion\\] | ​| CorelDraw       | UA data sharing | PII DB (13M) of Ukrainian telecom customers (kyivstar\\[.\\]ua)                                             | No        | TA discussion in past 90 days | RaidForums \\[not linked; site hijacked since UA invasion\\] | ​| danieltx51      | UA data sharing | DB of Ministry of Foreign Affairs of Ukraine (mfa\\[.\\]gov\\[.\\]ua)                                         | No        | TA discussion in past 90 days | RaidForums \\[not linked; site hijacked since UA invasion\\] | ​| DueDiligenceCIS | UA data sharing | PII DB (63M) of Ukrainian citizens (name, DOB, birth country, phone, TIN, passport, family, etc)          | No        | TA discussion in past 90 days | RaidForums \\[not linked; site hijacked since UA invasion\\] | ​| Featherine      | UA data sharing | DB of Ukrainian 'Diia' e-Governance Portal for Ministry of Digital Transformation of Ukraine              | No        | TA discussion in past 90 days | RaidForums \\[not linked; site hijacked since UA invasion\\] | ​| FreeCivilian    | UA data sharing | DB of Ministry for Internal Affairs of Ukraine public data search engine (wanted\\[.\\]mvs\\[.\\]gov\\[.\\]ua)  | No        | TA discussion in past 90 days | RaidForums \\[not linked; site hijacked since UA invasion\\] | ​| FreeCivilian    | UA data sharing | DB of Ministry for Communities and Territories Development of Ukraine (minregion\\[.\\]gov\\[.\\]ua)          | No        | TA discussion in past 90 days | RaidForums \\[not linked; site hijacked since UA invasion\\] | ​| FreeCivilian    | UA data sharing | DB of Motor Insurance Bureau of Ukraine (mtsbu\\[.\\]ua)                                                    | No        | TA discussion in past 90 days | RaidForums \\[not linked; site hijacked since UA invasion\\] | ​| FreeCivilian    | UA data sharing | PII DB of Ukrainian digital-medicine provider (medstar\\[.\\]ua)                                            | No        | TA discussion in past 90 days | RaidForums \\[not linked; site hijacked since UA invasion\\] | ​| FreeCivilian    | UA data sharing | DB of ticket.kyivcity.gov.ua                                                                              | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of id.kyivcity.gov.ua                                                                                  | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of my.kyivcity.gov.ua                                                                                  | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of portal.kyivcity.gov.ua                                                                              | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of anti-violence-map.msp.gov.ua                                                                        | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of dopomoga.msp.gov.ua                                                                                 | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of e-services.msp.gov.ua                                                                               | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of edu.msp.gov.ua                                                                                      | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of education.msp.gov.ua                                                                                | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of ek-cbi.msp.gov.ua                                                                                   | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of mail.msp.gov.ua                                                                                     | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of portal-gromady.msp.gov.ua                                                                           | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of web-minsoc.msp.gov.ua                                                                               | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of wcs-wim.dsbt.gov.ua                                                                                 | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of bdr.mvs.gov.ua                                                                                      | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of motorsich.com                                                                                       | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of dsns.gov.ua                                                                                         | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of mon.gov.ua                                                                                          | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of minagro.gov.ua                                                                                      | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of zt.gov.ua                                                                                           | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of kmu.gov.ua                                                                                          | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of mvs.gov.ua                                                                                          | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of dsbt.gov.ua                                                                                         | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of forest.gov.ua                                                                                       | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of nkrzi.gov.ua                                                                                        | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of dabi.gov.ua                                                                                         | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of comin.gov.ua                                                                                        | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of dp.dpss.gov.ua                                                                                      | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of esbu.gov.ua                                                                                         | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of mms.gov.ua                                                                                          | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of mova.gov.ua                                                                                         | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of mspu.gov.ua                                                                                         | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of nads.gov.ua                                                                                         | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of reintegration.gov.ua                                                                                | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of sies.gov.ua                                                                                         | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of sport.gov.ua                                                                                        | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of mepr.gov.ua                                                                                         | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of mfa.gov.ua                                                                                          | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of va.gov.ua                                                                                           | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of mtu.gov.ua                                                                                          | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of cg.mvs.gov.ua                                                                                       | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of ch-tmo.mvs.gov.ua                                                                                   | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of cp.mvs.gov.ua                                                                                       | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of cpd.mvs.gov.ua                                                                                      | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of hutirvilnij-mrc.mvs.gov.ua                                                                          | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of dndekc.mvs.gov.ua                                                                                   | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of visnyk.dndekc.mvs.gov.ua                                                                            | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of dpvs.hsc.gov.ua                                                                                     | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of odk.mvs.gov.ua                                                                                      | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of e-driver\\[.\\]hsc\\[.\\]gov\\[.\\]ua                                                                     | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of wanted\\[.\\]mvs\\[.\\]gov\\[.\\]ua                                                                       | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of minregeion\\[.\\]gov\\[.\\]ua                                                                           | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of health\\[.\\]mia\\[.\\]solutions                                                                        | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of mtsbu\\[.\\]ua                                                                                        | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of motorsich\\[.\\]com                                                                                   | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of kyivcity\\[.\\]com                                                                                    | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of bdr\\[.\\]mvs\\[.\\]gov\\[.\\]ua                                                                          | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of gkh\\[.\\]in\\[.\\]ua                                                                                   | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of kmu\\[.\\]gov\\[.\\]ua                                                                                  | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of mon\\[.\\]gov\\[.\\]ua                                                                                  | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of minagro\\[.\\]gov\\[.\\]ua                                                                              | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| FreeCivilian    | UA data sharing | DB of mfa\\[.\\]gov\\[.\\]ua                                                                                  | No        | TA discussion in past 90 days | FreeCivilian .onion \\[not linked\\]                         | ​| Intel\\_Data     | UA data sharing | PII DB (56M) of Ukrainian Citizens                                                                        | No        | TA discussion in past 90 days | RaidForums \\[not linked; site hijacked since UA invasion\\] | ​| Kristina        | UA data sharing | DB of Ukrainian National Police (mvs\\[.\\]gov\\[.\\]ua)                                                      | No        | TA discussion in past 90 days | RaidForums \\[not linked; site hijacked since UA invasion\\] | ​| NetSec          | UA data sharing | PII DB (53M) of Ukrainian citizens                                                                        | No        | TA discussion in past 90 days | RaidForums \\[not linked; site hijacked since UA invasion\\] | ​| Psycho\\_Killer  | UA data sharing | PII DB (56M) of Ukrainian Citizens                                                                        | No        | TA discussion in past 90 days | Exploit Forum .onion \\[not linked\\]                        | ​| Sp333           | UA data sharing | PII DB of Ukrainian and Russian interpreters, translators, and tour guides                                | No        | TA discussion in past 90 days | RaidForums \\[not linked; site hijacked since UA invasion\\] | ​| Vaticano        | UA data sharing | DB of Ukrainian 'Diia' e-Governance Portal for Ministry of Digital Transformation of Ukraine \\[copy\\]     | No        | TA discussion in past 90 days | RaidForums \\[not linked; site hijacked since UA invasion\\] | ​| Vaticano        | UA data sharing | DB of Ministry for Communities and Territories Development of Ukraine (minregion\\[.\\]gov\\[.\\]ua) \\[copy\\] | No        | TA discussion in past 90 days | RaidForums \\[not linked; site hijacked since UA invasion\\] | ​####​ ​`Vendor Support` ​| Vendor | Offering | URL | ​| --- | --- | --- | ​| Dragos | Access to Dragos service if from US\/UK\/ANZ and in need of ICS cybersecurity support | [twitter.com\/RobertMLee](https:\/\/twitter.com\/RobertMLee\/status\/1496862093588455429) | ​| GreyNoise |  Any and all `Ukrainian` emails registered to GreyNoise have been upgraded to VIP which includes full, uncapped enterprise access to all GreyNoise products | [twitter.com\/Andrew___Morris](https:\/\/twitter.com\/Andrew___Morris\/status\/1496923545712091139) | ​| Recorded Future | Providing free intelligence-driven insights, perspectives, and mitigation strategies as the situation in Ukraine evolves| [recordedfuture.com](https:\/\/www.recordedfuture.com\/ukraine\/) | ​| Flashpoint | Free Access to Flashpoint’s Latest Threat Intel on Ukraine | [go.flashpoint-intel.com](https:\/\/go.flashpoint-intel.com\/trial\/access\/30days) | ​| ThreatABLE | A Ukraine tag for free threat intelligence feed that's more highly curated to cyber| [twitter.com\/threatable](https:\/\/twitter.com\/threatable\/status\/1497233721803644950) | ​| Orange | IOCs related to Russia-Ukraine 2022 conflict extracted from our Datalake Threat Intelligence platform. | [github.com\/Orange-Cyberdefense](https:\/\/github.com\/Orange-Cyberdefense\/russia-ukraine_IOCs)| ​| FSecure | F-Secure FREEDOME VPN is now available for free in all of Ukraine | [twitter.com\/FSecure](https:\/\/twitter.com\/FSecure\/status\/1497248407303462960) | ​| Multiple vendors | List of vendors offering their services to Ukraine for free, put together by [@chrisculling](https:\/\/twitter.com\/chrisculling\/status\/1497023038323404803) | [docs.google.com\/spreadsheets](https:\/\/docs.google.com\/spreadsheets\/d\/18WYY9p1_DLwB6dnXoiiOAoWYD8X0voXtoDl_ZQzjzUQ\/edit#gid=0) | ​| Mandiant | Free threat intelligence, webinar and guidance for defensive measures relevant to the situation in Ukraine. | [mandiant.com](https:\/\/www.mandiant.com\/resources\/insights\/ukraine-crisis-resource-center) | ​| Starlink | Satellite internet constellation operated by SpaceX providing satellite Internet access coverage to Ukraine | [twitter.com\/elonmusk](https:\/\/twitter.com\/elonmusk\/status\/1497701484003213317) | ​| Romania DNSC | Romania’s DNSC – in partnership with Bitdefender – will provide technical consulting, threat intelligence and, free of charge, cybersecurity technology to any business, government institution or private citizen of Ukraine for as long as it is necessary. | [Romania's DNSC Press Release](https:\/\/dnsc.ro\/citeste\/press-release-dnsc-and-bitdefender-work-together-in-support-of-ukraine)| ​| BitDefender | Access to Bitdefender technical consulting, threat intelligence and both consumer and enterprise cybersecurity technology | [bitdefender.com\/ukraine\/](https:\/\/www.bitdefender.com\/ukraine\/) | ​| NameCheap | Free anonymous hosting and domain name registration to any anti-Putin anti-regime and protest websites for anyone located within Russia and Belarus | [twitter.com\/Namecheap](https:\/\/twitter.com\/Namecheap\/status\/1498998414020861953) | ​| Avast | Free decryptor for PartyTicket ransomware | [decoded.avast.io](https:\/\/decoded.avast.io\/threatresearch\/help-for-ukraine-free-decryptor-for-hermeticransom-ransomware\/) |  ​####​ ​`Vetted OSINT Sources` ​| Handle | Affiliation | ​| --- | --- | ​| [@KyivIndependent](https:\/\/twitter.com\/KyivIndependent) | English-language journalism in Ukraine | ​| [@IAPonomarenko](https:\/\/twitter.com\/IAPonomarenko) | Defense reporter with The Kyiv Independent | ​| [@KyivPost](https:\/\/twitter.com\/KyivPost) | English-language journalism in Ukraine | ​| [@Shayan86](https:\/\/twitter.com\/Shayan86) | BBC World News Disinformation journalist | ​| [@Liveuamap](https:\/\/twitter.com\/Liveuamap) | Live Universal Awareness Map (“Liveuamap”) independent global news and information site | ​| [@DAlperovitch](https:\/\/twitter.com\/DAlperovitch) | The Alperovitch Institute for Cybersecurity Studies, Founder & Former CTO of CrowdStrike | ​| [@COUPSURE](https:\/\/twitter.com\/COUPSURE) | OSINT investigator for Centre for Information Resilience | ​| [@netblocks](https:\/\/twitter.com\/netblocks) | London-based Internet's Observatory | ​####​ ​`Miscellaneous Resources` ​| Source | URL | Content | ​| --- | --- | --- | ​| PowerOutages.com | https:\/\/poweroutage.com\/ua | Tracking PowerOutages across Ukraine | ​| Monash IP Observatory | https:\/\/twitter.com\/IP_Observatory | Tracking IP address outages across Ukraine | ​| Project Owl Discord | https:\/\/discord.com\/invite\/projectowl | Tracking foreign policy, geopolitical events, military and governments, using a Discord-based crowdsourced approach, with a current emphasis on Ukraine and Russia | ​| russianwarchatter.info | https:\/\/www.russianwarchatter.info\/ | Known Russian Military Radio Frequencies |", "fork": false, "created_at": "2022-03-04T09:00:59Z", - "updated_at": "2026-10-29T10:13:15Z", + "updated_at": "2026-10-31T09:48:26Z", "pushed_at": "2022-03-04T09:03:14Z", - "stargazers_count": 36, - "watchers_count": 36, + "stargazers_count": 35, + "watchers_count": 35, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 3, - "watchers": 36, + "watchers": 35, "score": 0, "subscribers_count": 1 } diff --git a/2021/CVE-2021-21425.json b/2021/CVE-2021-21425.json index 58d763f14b..f5cdbf11ee 100644 --- a/2021/CVE-2021-21425.json +++ b/2021/CVE-2021-21425.json @@ -146,8 +146,8 @@ "description": "CVE-2021-21425 - GravCMS 1.10.7 Unauthenticated RCE via Scheduler. Improved exploit with CLI args and auto base64 encoding.", "fork": false, "created_at": "2026-06-13T11:00:08Z", - "updated_at": "2026-10-30T21:27:49Z", - "pushed_at": "2026-08-22T15:16:38Z", + "updated_at": "2026-10-31T11:37:06Z", + "pushed_at": "2026-10-31T11:37:02Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2021/CVE-2021-22204.json b/2021/CVE-2021-22204.json index ffbd06fd4c..1b33f9245e 100644 --- a/2021/CVE-2021-22204.json +++ b/2021/CVE-2021-22204.json @@ -525,8 +525,8 @@ "description": "ExifTool RCE exploit (CVE-2021-22204) - improved version, no exiftool dependency", "fork": false, "created_at": "2026-06-13T11:14:25Z", - "updated_at": "2026-10-30T21:27:50Z", - "pushed_at": "2026-08-22T15:16:40Z", + "updated_at": "2026-10-31T11:37:12Z", + "pushed_at": "2026-10-31T11:37:08Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2021/CVE-2021-3156.json b/2021/CVE-2021-3156.json index 1422fc231c..4fe78a5fd4 100644 --- a/2021/CVE-2021-3156.json +++ b/2021/CVE-2021-3156.json @@ -2946,5 +2946,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1440789734, + "name": "CVE-2021-3156", + "full_name": "d4ytox\/CVE-2021-3156", + "owner": { + "login": "d4ytox", + "id": 204069580, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/204069580?v=4", + "html_url": "https:\/\/github.com\/d4ytox", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/d4ytox\/CVE-2021-3156", + "description": null, + "fork": false, + "created_at": "2026-10-31T11:27:42Z", + "updated_at": "2026-10-31T11:30:43Z", + "pushed_at": "2026-10-31T11:30:39Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2021/CVE-2021-36749.json b/2021/CVE-2021-36749.json index c48b453bb4..e09ca4acdc 100644 --- a/2021/CVE-2021-36749.json +++ b/2021/CVE-2021-36749.json @@ -14,10 +14,10 @@ "description": "漏洞POC、EXP合集，持续更新。Apache Druid-任意文件读取（CVE-2021-36749）、ConfluenceRCE（CVE-2021-26084）、ZeroShell防火墙RCE（CVE-2019-12725）、ApacheSolr任意文件读取、蓝凌OA任意文件读取、phpStudyRCE、ShowDoc任意文件上传、原创先锋后台未授权、Kyan账号密码泄露、TerraMasterTos任意文件读取、TamronOS-IPTV系统RCE、Wayos防火墙账号密码泄露", "fork": false, "created_at": "2021-05-22T05:06:33Z", - "updated_at": "2026-10-09T05:25:00Z", + "updated_at": "2026-10-31T11:54:17Z", "pushed_at": "2021-11-21T10:34:06Z", - "stargazers_count": 178, - "watchers_count": 178, + "stargazers_count": 177, + "watchers_count": 177, "has_discussions": false, "forks_count": 37, "allow_forking": true, @@ -32,7 +32,7 @@ ], "visibility": "public", "forks": 37, - "watchers": 178, + "watchers": 177, "score": 0, "subscribers_count": 5 }, diff --git a/2021/CVE-2021-42287.json b/2021/CVE-2021-42287.json index 1b2d663477..205c42dcf3 100644 --- a/2021/CVE-2021-42287.json +++ b/2021/CVE-2021-42287.json @@ -14,10 +14,10 @@ "description": "CVE-2021-42287\/CVE-2021-42278 Scanner & Exploiter.", "fork": false, "created_at": "2021-12-11T19:27:30Z", - "updated_at": "2026-10-26T16:52:37Z", + "updated_at": "2026-10-31T11:54:23Z", "pushed_at": "2021-12-16T09:50:15Z", - "stargazers_count": 1417, - "watchers_count": 1417, + "stargazers_count": 1416, + "watchers_count": 1416, "has_discussions": false, "forks_count": 311, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 311, - "watchers": 1417, + "watchers": 1416, "score": 0, "subscribers_count": 25 }, @@ -146,10 +146,10 @@ "description": "CVE-2021-42287\/CVE-2021-42278 Exploiter", "fork": false, "created_at": "2022-12-22T06:39:07Z", - "updated_at": "2026-09-15T02:59:28Z", + "updated_at": "2026-10-31T11:54:30Z", "pushed_at": "2023-01-12T09:05:52Z", - "stargazers_count": 15, - "watchers_count": 15, + "stargazers_count": 14, + "watchers_count": 14, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -160,7 +160,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 15, + "watchers": 14, "score": 0, "subscribers_count": 1 }, diff --git a/2021/CVE-2021-44142.json b/2021/CVE-2021-44142.json index b7dffc97ee..54dafe4034 100644 --- a/2021/CVE-2021-44142.json +++ b/2021/CVE-2021-44142.json @@ -130,5 +130,38 @@ "watchers": 3, "score": 0, "subscribers_count": 0 + }, + { + "id": 1440691562, + "name": "Samba_Fruit_Vuln", + "full_name": "neyugNat\/Samba_Fruit_Vuln", + "owner": { + "login": "neyugNat", + "id": 219427412, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/219427412?v=4", + "html_url": "https:\/\/github.com\/neyugNat", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/neyugNat\/Samba_Fruit_Vuln", + "description": "CVE-2021-44142 — Samba vfs_fruit heap OOB read\/write lab demo (educational)", + "fork": false, + "created_at": "2026-10-31T09:13:27Z", + "updated_at": "2026-10-31T09:13:37Z", + "pushed_at": "2026-10-31T09:13:33Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2021/CVE-2021-44228.json b/2021/CVE-2021-44228.json index 9edf9d02b1..5794a799b4 100644 --- a/2021/CVE-2021-44228.json +++ b/2021/CVE-2021-44228.json @@ -15033,7 +15033,7 @@ "fork": false, "created_at": "2026-06-23T18:32:28Z", "updated_at": "2026-10-21T17:13:11Z", - "pushed_at": "2026-10-30T10:00:08Z", + "pushed_at": "2026-10-31T09:38:37Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2022/CVE-2022-20421.json b/2022/CVE-2022-20421.json index 4bae2a3d1c..d81b36dae2 100644 --- a/2022/CVE-2022-20421.json +++ b/2022/CVE-2022-20421.json @@ -14,10 +14,10 @@ "description": "Bad Spin: Android Binder Privilege Escalation Exploit (CVE-2022-20421)", "fork": false, "created_at": "2023-03-23T10:25:59Z", - "updated_at": "2026-10-31T01:49:53Z", + "updated_at": "2026-10-31T11:17:10Z", "pushed_at": "2023-05-27T15:39:41Z", - "stargazers_count": 300, - "watchers_count": 300, + "stargazers_count": 301, + "watchers_count": 301, "has_discussions": false, "forks_count": 52, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 52, - "watchers": 300, + "watchers": 301, "score": 0, "subscribers_count": 6 }, diff --git a/2022/CVE-2022-26134.json b/2022/CVE-2022-26134.json index 5d4a4de890..731c0f68fa 100644 --- a/2022/CVE-2022-26134.json +++ b/2022/CVE-2022-26134.json @@ -2475,8 +2475,8 @@ "description": null, "fork": false, "created_at": "2026-05-06T01:47:50Z", - "updated_at": "2026-10-29T01:04:13Z", - "pushed_at": "2026-10-29T01:04:08Z", + "updated_at": "2026-10-31T09:07:41Z", + "pushed_at": "2026-10-31T09:07:37Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2022/CVE-2022-36551.json b/2022/CVE-2022-36551.json index 7dceba5b3f..fafc4dbd8a 100644 --- a/2022/CVE-2022-36551.json +++ b/2022/CVE-2022-36551.json @@ -15,7 +15,7 @@ "fork": false, "created_at": "2026-10-07T15:40:44Z", "updated_at": "2026-10-21T16:39:07Z", - "pushed_at": "2026-10-30T10:08:57Z", + "pushed_at": "2026-10-31T09:44:28Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2022/CVE-2022-38694.json b/2022/CVE-2022-38694.json index 92a21afae1..e5eedf60ae 100644 --- a/2022/CVE-2022-38694.json +++ b/2022/CVE-2022-38694.json @@ -421,10 +421,10 @@ "description": "UNISOC BootROM\/FDL flasher for macOS: patched spd_dump with CVE-2022-38694 exec_addr2, protocol reference, partition rules, backup verification (UMS9621)", "fork": false, "created_at": "2026-08-18T05:50:44Z", - "updated_at": "2026-10-28T19:41:27Z", + "updated_at": "2026-10-31T07:09:40Z", "pushed_at": "2026-08-18T05:55:59Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -443,7 +443,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 3, + "watchers": 4, "score": 0, "subscribers_count": 0 }, diff --git a/2022/CVE-2022-42889.json b/2022/CVE-2022-42889.json index cf07a8f7f9..947375dc55 100644 --- a/2022/CVE-2022-42889.json +++ b/2022/CVE-2022-42889.json @@ -19,7 +19,7 @@ "stargazers_count": 35, "watchers_count": 35, "has_discussions": true, - "forks_count": 16, + "forks_count": 17, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -32,7 +32,7 @@ "poc" ], "visibility": "public", - "forks": 16, + "forks": 17, "watchers": 35, "score": 0, "subscribers_count": 2 diff --git a/2023/CVE-2023-0297.json b/2023/CVE-2023-0297.json index acc700624e..138c3c70a4 100644 --- a/2023/CVE-2023-0297.json +++ b/2023/CVE-2023-0297.json @@ -213,7 +213,7 @@ "fork": false, "created_at": "2026-10-07T15:40:37Z", "updated_at": "2026-10-21T16:39:04Z", - "pushed_at": "2026-10-30T10:05:28Z", + "pushed_at": "2026-10-31T09:42:17Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2023/CVE-2023-21839.json b/2023/CVE-2023-21839.json index 8c5c71ec84..31a3ba7600 100644 --- a/2023/CVE-2023-21839.json +++ b/2023/CVE-2023-21839.json @@ -47,10 +47,10 @@ "description": "Weblogic CVE-2023-21839 RCE (无需Java依赖一键RCE)", "fork": false, "created_at": "2023-02-24T13:54:42Z", - "updated_at": "2026-10-17T12:34:58Z", + "updated_at": "2026-10-31T11:54:32Z", "pushed_at": "2026-08-11T13:17:49Z", - "stargazers_count": 118, - "watchers_count": 118, + "stargazers_count": 117, + "watchers_count": 117, "has_discussions": false, "forks_count": 106, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 106, - "watchers": 118, + "watchers": 117, "score": 0, "subscribers_count": 1 }, diff --git a/2023/CVE-2023-42442.json b/2023/CVE-2023-42442.json index be80fd03fb..c9cd0710e8 100644 --- a/2023/CVE-2023-42442.json +++ b/2023/CVE-2023-42442.json @@ -47,10 +47,10 @@ "description": "JumpServer 堡垒机未授权综合漏洞利用, Exploit for CVE-2023-42442 \/ CVE-2023-42820 \/ RCE 2021", "fork": false, "created_at": "2023-10-14T09:35:07Z", - "updated_at": "2026-10-13T19:05:13Z", + "updated_at": "2026-10-31T11:54:37Z", "pushed_at": "2025-06-06T08:17:45Z", - "stargazers_count": 274, - "watchers_count": 274, + "stargazers_count": 273, + "watchers_count": 273, "has_discussions": false, "forks_count": 30, "allow_forking": true, @@ -65,7 +65,7 @@ ], "visibility": "public", "forks": 30, - "watchers": 274, + "watchers": 273, "score": 0, "subscribers_count": 3 }, diff --git a/2023/CVE-2023-45866.json b/2023/CVE-2023-45866.json index a5f6f6975a..b0cc1403fe 100644 --- a/2023/CVE-2023-45866.json +++ b/2023/CVE-2023-45866.json @@ -19,7 +19,7 @@ "stargazers_count": 1903, "watchers_count": 1903, "has_discussions": false, - "forks_count": 319, + "forks_count": 320, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 319, + "forks": 320, "watchers": 1903, "score": 0, "subscribers_count": 30 diff --git a/2023/CVE-2023-7356.json b/2023/CVE-2023-7356.json deleted file mode 100644 index c7fe8baf87..0000000000 --- a/2023/CVE-2023-7356.json +++ /dev/null @@ -1,46 +0,0 @@ -[ - { - "id": 1435724862, - "name": "CVE-2023-7356", - "full_name": "mehmet-emir-eroglu\/CVE-2023-7356", - "owner": { - "login": "mehmet-emir-eroglu", - "id": 206140722, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206140722?v=4", - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu\/CVE-2023-7356", - "description": "Offline Python detector for CVE-2023-7356 exposure in upstream Linux kernels, with CSV\/JSON inventories and auditable reports.", - "fork": false, - "created_at": "2026-10-27T12:51:04Z", - "updated_at": "2026-10-28T19:23:00Z", - "pushed_at": "2026-10-27T12:51:23Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "bluetooth", - "cli", - "cve-2023-7356", - "inventory-analysis", - "linux", - "linux-kernel", - "python", - "security-audit", - "vulnerability-detection", - "vulnerability-management" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-1086.json b/2024/CVE-2024-1086.json index eee0a5427a..a6b9efab50 100644 --- a/2024/CVE-2024-1086.json +++ b/2024/CVE-2024-1086.json @@ -14,10 +14,10 @@ "description": "Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.", "fork": false, "created_at": "2024-03-20T21:16:41Z", - "updated_at": "2026-10-30T04:30:38Z", + "updated_at": "2026-10-31T11:54:40Z", "pushed_at": "2024-04-17T16:09:54Z", - "stargazers_count": 2458, - "watchers_count": 2458, + "stargazers_count": 2457, + "watchers_count": 2457, "has_discussions": false, "forks_count": 326, "allow_forking": true, @@ -34,7 +34,7 @@ ], "visibility": "public", "forks": 326, - "watchers": 2458, + "watchers": 2457, "score": 0, "subscribers_count": 25 }, diff --git a/2024/CVE-2024-21413.json b/2024/CVE-2024-21413.json index a3ea4fa1c4..0e8a1891a5 100644 --- a/2024/CVE-2024-21413.json +++ b/2024/CVE-2024-21413.json @@ -47,12 +47,12 @@ "description": "Microsoft-Outlook-Remote-Code-Execution-Vulnerability", "fork": false, "created_at": "2024-02-16T15:17:59Z", - "updated_at": "2026-10-31T07:12:13Z", + "updated_at": "2026-10-31T10:45:16Z", "pushed_at": "2024-02-19T20:00:35Z", - "stargazers_count": 780, - "watchers_count": 780, + "stargazers_count": 782, + "watchers_count": 782, "has_discussions": false, - "forks_count": 168, + "forks_count": 169, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,8 +60,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 168, - "watchers": 780, + "forks": 169, + "watchers": 782, "score": 0, "subscribers_count": 10 }, diff --git a/2024/CVE-2024-22203.json b/2024/CVE-2024-22203.json index 5a19ab8e09..50d3e3c719 100644 --- a/2024/CVE-2024-22203.json +++ b/2024/CVE-2024-22203.json @@ -15,7 +15,7 @@ "fork": false, "created_at": "2026-10-07T15:40:41Z", "updated_at": "2026-10-21T16:39:02Z", - "pushed_at": "2026-10-30T09:59:02Z", + "pushed_at": "2026-10-31T09:36:37Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-23334.json b/2024/CVE-2024-23334.json index d106bfc429..9d68d40e6c 100644 --- a/2024/CVE-2024-23334.json +++ b/2024/CVE-2024-23334.json @@ -270,15 +270,15 @@ { "id": 885051210, "name": "CVE-2024-23334", - "full_name": "0xR00\/CVE-2024-23334", + "full_name": "frogb1t\/CVE-2024-23334", "owner": { - "login": "0xR00", + "login": "frogb1t", "id": 135266995, "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/135266995?v=4", - "html_url": "https:\/\/github.com\/0xR00", + "html_url": "https:\/\/github.com\/frogb1t", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/0xR00\/CVE-2024-23334", + "html_url": "https:\/\/github.com\/frogb1t\/CVE-2024-23334", "description": null, "fork": false, "created_at": "2024-11-07T21:37:05Z", diff --git a/2024/CVE-2024-23897.json b/2024/CVE-2024-23897.json index 67135fb8c4..b8193a742b 100644 --- a/2024/CVE-2024-23897.json +++ b/2024/CVE-2024-23897.json @@ -1680,8 +1680,8 @@ "description": "Work 1 — secure Flask REST API, three-stage CI, and CVE-2024-23897 (Jenkins CLI) analysis", "fork": false, "created_at": "2026-10-29T07:44:22Z", - "updated_at": "2026-10-29T09:34:34Z", - "pushed_at": "2026-10-29T09:34:30Z", + "updated_at": "2026-10-31T13:13:12Z", + "pushed_at": "2026-10-31T13:13:08Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-45337.json b/2024/CVE-2024-45337.json index 6c520a6fd5..75107257ce 100644 --- a/2024/CVE-2024-45337.json +++ b/2024/CVE-2024-45337.json @@ -157,7 +157,7 @@ "fork": false, "created_at": "2026-07-07T20:45:27Z", "updated_at": "2026-10-21T16:58:51Z", - "pushed_at": "2026-10-30T10:26:15Z", + "pushed_at": "2026-10-31T09:59:02Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-4577.json b/2024/CVE-2024-4577.json index 7d48f7dda5..061f8a298d 100644 --- a/2024/CVE-2024-4577.json +++ b/2024/CVE-2024-4577.json @@ -2392,5 +2392,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1440723225, + "name": "php-secure-patch", + "full_name": "esskslifetech\/php-secure-patch", + "owner": { + "login": "esskslifetech", + "id": 226517993, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/226517993?v=4", + "html_url": "https:\/\/github.com\/esskslifetech", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/esskslifetech\/php-secure-patch", + "description": "Bash toolkit that finds and fixes PHP CVEs — PHP2Shell (CVE-2026-109618\/109619), CVE-2026-115560, CVE-2024-4577, CVE-2019-11043 — on Linux and macOS. Detects runtimes, audits config, applies source patches, hardens php.ini \/ FPM \/ nginx \/ Apache, hunts compromise, rolls back cleanly. MIT.", + "fork": false, + "created_at": "2026-10-31T09:56:32Z", + "updated_at": "2026-10-31T11:43:21Z", + "pushed_at": "2026-10-31T11:13:40Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2024/CVE-2024-45846.json b/2024/CVE-2024-45846.json index 12ca08c7e6..b4e0fa3ed5 100644 --- a/2024/CVE-2024-45846.json +++ b/2024/CVE-2024-45846.json @@ -15,7 +15,7 @@ "fork": false, "created_at": "2026-10-07T15:51:48Z", "updated_at": "2026-10-21T16:39:07Z", - "pushed_at": "2026-10-30T10:05:27Z", + "pushed_at": "2026-10-31T09:42:46Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-55947.json b/2024/CVE-2024-55947.json index 4c4d5bf3f5..1f58bd455c 100644 --- a/2024/CVE-2024-55947.json +++ b/2024/CVE-2024-55947.json @@ -15,7 +15,7 @@ "fork": false, "created_at": "2026-06-23T18:32:13Z", "updated_at": "2026-10-21T17:13:09Z", - "pushed_at": "2026-10-30T09:57:40Z", + "pushed_at": "2026-10-31T09:35:30Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-9264.json b/2024/CVE-2024-9264.json index 06289bb20a..dc83d1c337 100644 --- a/2024/CVE-2024-9264.json +++ b/2024/CVE-2024-9264.json @@ -402,7 +402,7 @@ "fork": false, "created_at": "2026-07-07T23:02:34Z", "updated_at": "2026-10-21T16:58:50Z", - "pushed_at": "2026-10-30T10:32:50Z", + "pushed_at": "2026-10-31T10:03:56Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-32756.json b/2025/CVE-2025-32756.json index 1db9600757..c07fb49484 100644 --- a/2025/CVE-2025-32756.json +++ b/2025/CVE-2025-32756.json @@ -47,10 +47,10 @@ "description": "Proof of Concept for CVE-2025-32756 - A critical stack-based buffer overflow vulnerability affecting multiple Fortinet products.", "fork": false, "created_at": "2025-06-05T14:16:31Z", - "updated_at": "2026-10-30T04:51:16Z", + "updated_at": "2026-10-31T10:34:16Z", "pushed_at": "2025-06-13T07:55:34Z", - "stargazers_count": 193, - "watchers_count": 193, + "stargazers_count": 192, + "watchers_count": 192, "has_discussions": false, "forks_count": 28, "allow_forking": true, @@ -66,7 +66,7 @@ ], "visibility": "public", "forks": 28, - "watchers": 193, + "watchers": 192, "score": 0, "subscribers_count": 6 }, diff --git a/2025/CVE-2025-36911.json b/2025/CVE-2025-36911.json index c73f9817bf..66c39db7f0 100644 --- a/2025/CVE-2025-36911.json +++ b/2025/CVE-2025-36911.json @@ -14,7 +14,7 @@ "description": "Hijacking Bluetooth Accessories Using Google Fast Pair: WhisperPair CVE-2025-36911 Reference Implementation & Vulnerability Verification Toolkit", "fork": false, "created_at": "2026-01-17T01:18:36Z", - "updated_at": "2026-10-23T00:26:28Z", + "updated_at": "2026-10-31T08:44:59Z", "pushed_at": "2026-05-28T08:12:40Z", "stargazers_count": 109, "watchers_count": 109, diff --git a/2025/CVE-2025-38352.json b/2025/CVE-2025-38352.json index 44abca4aed..0297ac9e24 100644 --- a/2025/CVE-2025-38352.json +++ b/2025/CVE-2025-38352.json @@ -164,12 +164,12 @@ "description": "CVE-2025-38352 kernel exploit for LG webOS Smart TVs (ARM64). Achieves persistent root on real consumer hardware with novel exploitation techniques. Responsibly disclosed to LG.", "fork": false, "created_at": "2026-05-30T02:37:10Z", - "updated_at": "2026-09-22T03:11:40Z", + "updated_at": "2026-10-31T11:58:30Z", "pushed_at": "2026-06-01T21:47:09Z", - "stargazers_count": 17, - "watchers_count": 17, + "stargazers_count": 18, + "watchers_count": 18, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -188,8 +188,8 @@ "webos" ], "visibility": "public", - "forks": 0, - "watchers": 17, + "forks": 1, + "watchers": 18, "score": 0, "subscribers_count": 0 }, diff --git a/2025/CVE-2025-48617.json b/2025/CVE-2025-48617.json index 2d55d133ce..3b9a0d4653 100644 --- a/2025/CVE-2025-48617.json +++ b/2025/CVE-2025-48617.json @@ -14,10 +14,10 @@ "description": "无 Root 开启 Pixel VoLTE\/VoNR\/5G —— Shizuku 运营商配置覆写助手（适配 Android 17 QPR1 \/ CVE-2025-48617）", "fork": false, "created_at": "2026-10-05T07:12:55Z", - "updated_at": "2026-10-22T14:43:55Z", + "updated_at": "2026-10-31T10:20:57Z", "pushed_at": "2026-10-06T02:51:16Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 } diff --git a/2025/CVE-2025-50460.json b/2025/CVE-2025-50460.json index 82e862c681..bdf4e913db 100644 --- a/2025/CVE-2025-50460.json +++ b/2025/CVE-2025-50460.json @@ -48,7 +48,7 @@ "fork": false, "created_at": "2026-10-07T15:40:34Z", "updated_at": "2026-10-21T16:39:02Z", - "pushed_at": "2026-10-30T09:57:00Z", + "pushed_at": "2026-10-31T09:34:33Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-55182.json b/2025/CVE-2025-55182.json index da85965167..9cba57d3e5 100644 --- a/2025/CVE-2025-55182.json +++ b/2025/CVE-2025-55182.json @@ -1102,10 +1102,10 @@ "description": "Explanation and full RCE PoC for CVE-2025-55182", "fork": false, "created_at": "2025-12-04T11:49:55Z", - "updated_at": "2026-10-30T21:29:14Z", + "updated_at": "2026-10-31T11:54:50Z", "pushed_at": "2025-12-08T13:51:04Z", - "stargazers_count": 1433, - "watchers_count": 1433, + "stargazers_count": 1432, + "watchers_count": 1432, "has_discussions": false, "forks_count": 195, "allow_forking": true, @@ -1116,7 +1116,7 @@ "topics": [], "visibility": "public", "forks": 195, - "watchers": 1433, + "watchers": 1432, "score": 0, "subscribers_count": 10 }, diff --git a/2025/CVE-2025-66478.json b/2025/CVE-2025-66478.json index 58f3ad5ef2..3e3a7e6a0f 100644 --- a/2025/CVE-2025-66478.json +++ b/2025/CVE-2025-66478.json @@ -211,12 +211,12 @@ "description": "One command to fix CVE-2025-66478 (React 2 Shell RCE) in your Next.js \/ React RSC app.", "fork": false, "created_at": "2025-12-06T02:41:12Z", - "updated_at": "2026-10-16T18:25:58Z", + "updated_at": "2026-10-31T12:54:00Z", "pushed_at": "2025-12-12T03:03:50Z", - "stargazers_count": 402, - "watchers_count": 402, + "stargazers_count": 403, + "watchers_count": 403, "has_discussions": false, - "forks_count": 62, + "forks_count": 63, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -224,8 +224,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 62, - "watchers": 402, + "forks": 63, + "watchers": 403, "score": 0, "subscribers_count": 1 }, diff --git a/2025/CVE-2025-69256.json b/2025/CVE-2025-69256.json index 890d74d2d3..9554b0857c 100644 --- a/2025/CVE-2025-69256.json +++ b/2025/CVE-2025-69256.json @@ -48,7 +48,7 @@ "fork": false, "created_at": "2026-04-27T20:12:08Z", "updated_at": "2026-10-21T06:33:13Z", - "pushed_at": "2026-10-30T19:33:39Z", + "pushed_at": "2026-10-31T11:14:37Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": true, diff --git a/2025/CVE-2025-8110.json b/2025/CVE-2025-8110.json index 8a6e630ebb..d991e8cbba 100644 --- a/2025/CVE-2025-8110.json +++ b/2025/CVE-2025-8110.json @@ -444,7 +444,7 @@ "fork": false, "created_at": "2026-06-23T18:32:13Z", "updated_at": "2026-10-21T17:13:09Z", - "pushed_at": "2026-10-30T09:57:40Z", + "pushed_at": "2026-10-31T09:35:30Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-100105.json b/2026/CVE-2026-100105.json new file mode 100644 index 0000000000..d95bd9183d --- /dev/null +++ b/2026/CVE-2026-100105.json @@ -0,0 +1,35 @@ +[ + { + "id": 1440656886, + "name": "CVE-2026-100105", + "full_name": "googlesky\/CVE-2026-100105", + "owner": { + "login": "googlesky", + "id": 4094347, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4094347?v=4", + "html_url": "https:\/\/github.com\/googlesky", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/googlesky\/CVE-2026-100105", + "description": "Grafana alerting contact point authorization bypass via schema downgrade (CVSS 7.7) — containerized lab, full PoC, plus 2 unreported findings reproducible on 13.2.5", + "fork": false, + "created_at": "2026-10-31T08:25:07Z", + "updated_at": "2026-10-31T11:02:24Z", + "pushed_at": "2026-10-31T11:02:21Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-100886.json b/2026/CVE-2026-100886.json index 231dfd7886..fe928c1788 100644 --- a/2026/CVE-2026-100886.json +++ b/2026/CVE-2026-100886.json @@ -14,8 +14,8 @@ "description": " CVE-2026-100886 | Unauthenticated Remote Code Execution toolkit.", "fork": false, "created_at": "2026-08-21T10:45:01Z", - "updated_at": "2026-10-30T09:42:36Z", - "pushed_at": "2026-09-28T08:15:29Z", + "updated_at": "2026-10-31T10:10:53Z", + "pushed_at": "2026-10-31T10:10:49Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2026/CVE-2026-101767.json b/2026/CVE-2026-101767.json index 8f17bc2dc9..c9dffa86f4 100644 --- a/2026/CVE-2026-101767.json +++ b/2026/CVE-2026-101767.json @@ -130,5 +130,43 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1440673005, + "name": "CVE-2026-101767", + "full_name": "aduli198\/CVE-2026-101767", + "owner": { + "login": "aduli198", + "id": 325961125, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/325961125?v=4", + "html_url": "https:\/\/github.com\/aduli198", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/aduli198\/CVE-2026-101767", + "description": "Unauthenticated SQL injection (CVSS 9.8) in the Oracle EBS 12.2.312.2.15 TCF servlet", + "fork": false, + "created_at": "2026-10-31T08:47:47Z", + "updated_at": "2026-10-31T08:52:34Z", + "pushed_at": "2026-10-31T08:49:28Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve-2026-101767", + "oracle-ebs", + "poc", + "sql-injection" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-105014.json b/2026/CVE-2026-105014.json deleted file mode 100644 index 194022b482..0000000000 --- a/2026/CVE-2026-105014.json +++ /dev/null @@ -1,46 +0,0 @@ -[ - { - "id": 1437440330, - "name": "CVE-2026-105014", - "full_name": "mehmet-emir-eroglu\/CVE-2026-105014", - "owner": { - "login": "mehmet-emir-eroglu", - "id": 206140722, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206140722?v=4", - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu\/CVE-2026-105014", - "description": "Offline Python applicability detector for CVE-2026-105014 in Azure Pipelines, with strict CSV\/JSON inventories and auditable reports.", - "fork": false, - "created_at": "2026-10-28T17:52:53Z", - "updated_at": "2026-10-28T19:22:52Z", - "pushed_at": "2026-10-28T17:53:18Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "asset-inventory", - "azure", - "azure-pipelines", - "cli", - "cloud-security", - "cve-2026-105014", - "cwe-77", - "python", - "security-audit", - "vulnerability-detection" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2026/CVE-2026-106173.json b/2026/CVE-2026-106173.json index b40c02bcab..de0fe10b45 100644 --- a/2026/CVE-2026-106173.json +++ b/2026/CVE-2026-106173.json @@ -14,10 +14,10 @@ "description": "Proof of concept exploit for CVE-2026-106173, a path traversal file write leading to RCE for Fortinet FortiSIEM", "fork": false, "created_at": "2026-10-20T12:29:09Z", - "updated_at": "2026-10-30T18:59:26Z", + "updated_at": "2026-10-31T12:53:43Z", "pushed_at": "2026-10-20T12:43:37Z", - "stargazers_count": 35, - "watchers_count": 35, + "stargazers_count": 36, + "watchers_count": 36, "has_discussions": false, "forks_count": 11, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 11, - "watchers": 35, + "watchers": 36, "score": 0, "subscribers_count": 1 }, diff --git a/2026/CVE-2026-109618.json b/2026/CVE-2026-109618.json index 22ea8a31de..b71fa68775 100644 --- a/2026/CVE-2026-109618.json +++ b/2026/CVE-2026-109618.json @@ -179,10 +179,10 @@ "description": "Defensive mitigation and testing toolkit for PHP security vulnerabilities (CVE-2026-109618, CVE-2026-109619, CVE-2026-115560), including Apache protections and PHP hardening guidance", "fork": false, "created_at": "2026-10-21T04:01:24Z", - "updated_at": "2026-10-27T19:41:59Z", + "updated_at": "2026-10-31T11:27:41Z", "pushed_at": "2026-10-24T23:12:59Z", - "stargazers_count": 119, - "watchers_count": 119, + "stargazers_count": 120, + "watchers_count": 120, "has_discussions": false, "forks_count": 11, "allow_forking": true, @@ -203,7 +203,7 @@ ], "visibility": "public", "forks": 11, - "watchers": 119, + "watchers": 120, "score": 0, "subscribers_count": 3 }, @@ -255,10 +255,10 @@ "description": "CVE-2026-109618\/109619 — PHP session.upload_progress pre-auth RCE. Exploit research: remote ASLR chain, PoC & patch analysis.", "fork": false, "created_at": "2026-10-21T04:38:46Z", - "updated_at": "2026-10-27T12:32:11Z", + "updated_at": "2026-10-31T09:59:00Z", "pushed_at": "2026-10-26T12:42:03Z", - "stargazers_count": 50, - "watchers_count": 50, + "stargazers_count": 51, + "watchers_count": 51, "has_discussions": false, "forks_count": 23, "allow_forking": true, @@ -283,7 +283,7 @@ ], "visibility": "public", "forks": 23, - "watchers": 50, + "watchers": 51, "score": 0, "subscribers_count": 0 }, @@ -573,10 +573,10 @@ "description": "PHP2Shell (CVE-2026-109618 \/ CVE-2026-109619) Docker lab and PoC. Use-After-Free in PHP's session.upload_progress.", "fork": false, "created_at": "2026-10-21T07:35:51Z", - "updated_at": "2026-10-26T12:48:30Z", + "updated_at": "2026-10-31T09:59:21Z", "pushed_at": "2026-10-21T07:42:00Z", - "stargazers_count": 27, - "watchers_count": 27, + "stargazers_count": 28, + "watchers_count": 28, "has_discussions": false, "forks_count": 18, "allow_forking": true, @@ -587,7 +587,7 @@ "topics": [], "visibility": "public", "forks": 18, - "watchers": 27, + "watchers": 28, "score": 0, "subscribers_count": 0 }, @@ -672,10 +672,10 @@ "description": "CVE-2026-109618\/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.", "fork": false, "created_at": "2026-10-21T07:55:16Z", - "updated_at": "2026-10-31T06:37:08Z", + "updated_at": "2026-10-31T13:47:13Z", "pushed_at": "2026-10-28T23:21:57Z", - "stargazers_count": 1912, - "watchers_count": 1912, + "stargazers_count": 1914, + "watchers_count": 1914, "has_discussions": false, "forks_count": 649, "allow_forking": true, @@ -701,7 +701,7 @@ ], "visibility": "public", "forks": 649, - "watchers": 1912, + "watchers": 1914, "score": 0, "subscribers_count": 8 }, @@ -973,10 +973,10 @@ "description": "Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 \/ CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.", "fork": false, "created_at": "2026-10-21T08:31:43Z", - "updated_at": "2026-10-31T00:13:13Z", + "updated_at": "2026-10-31T10:09:37Z", "pushed_at": "2026-10-22T07:19:20Z", - "stargazers_count": 1052, - "watchers_count": 1052, + "stargazers_count": 1053, + "watchers_count": 1053, "has_discussions": false, "forks_count": 264, "allow_forking": true, @@ -987,7 +987,7 @@ "topics": [], "visibility": "public", "forks": 264, - "watchers": 1052, + "watchers": 1053, "score": 0, "subscribers_count": 41 }, @@ -3516,10 +3516,10 @@ "description": "CVE-2026-109618\/109619 PoC — PHP session.upload_progress heap use-after-free (CVSS 9.2)", "fork": false, "created_at": "2026-10-21T15:06:33Z", - "updated_at": "2026-10-29T08:49:05Z", + "updated_at": "2026-10-31T09:59:32Z", "pushed_at": "2026-10-24T11:24:48Z", - "stargazers_count": 149, - "watchers_count": 149, + "stargazers_count": 150, + "watchers_count": 150, "has_discussions": false, "forks_count": 90, "allow_forking": true, @@ -3530,7 +3530,7 @@ "topics": [], "visibility": "public", "forks": 90, - "watchers": 149, + "watchers": 150, "score": 0, "subscribers_count": 0 }, @@ -7708,12 +7708,12 @@ "description": "CVE-2026-109618 \/ CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.", "fork": false, "created_at": "2026-10-21T22:53:01Z", - "updated_at": "2026-10-31T07:46:52Z", + "updated_at": "2026-10-31T13:46:49Z", "pushed_at": "2026-10-30T16:04:28Z", - "stargazers_count": 200, - "watchers_count": 200, + "stargazers_count": 222, + "watchers_count": 222, "has_discussions": false, - "forks_count": 60, + "forks_count": 62, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -7742,8 +7742,8 @@ "vulnerability-research" ], "visibility": "public", - "forks": 60, - "watchers": 200, + "forks": 62, + "watchers": 222, "score": 0, "subscribers_count": 2 }, @@ -9516,10 +9516,10 @@ "description": "High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)", "fork": false, "created_at": "2026-10-22T03:53:20Z", - "updated_at": "2026-10-31T01:02:53Z", + "updated_at": "2026-10-31T10:50:40Z", "pushed_at": "2026-10-24T03:40:18Z", - "stargazers_count": 969, - "watchers_count": 969, + "stargazers_count": 968, + "watchers_count": 968, "has_discussions": false, "forks_count": 143, "allow_forking": true, @@ -9530,7 +9530,7 @@ "topics": [], "visibility": "public", "forks": 143, - "watchers": 969, + "watchers": 968, "score": 0, "subscribers_count": 11 }, @@ -14233,8 +14233,8 @@ "description": "Detect PHP2Shell (CVE-2026-109618, CVE-2026-109619) PHP RCE exploitation attempts by inspecting POST request bodies with nginx mirror", "fork": false, "created_at": "2026-10-22T14:56:21Z", - "updated_at": "2026-10-29T16:30:59Z", - "pushed_at": "2026-10-29T16:30:55Z", + "updated_at": "2026-10-31T12:00:41Z", + "pushed_at": "2026-10-31T12:00:37Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -16506,11 +16506,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/xaviware\/go-php2shell-scanner-CVE-2026-109618-CVE-2026-109619", - "description": "High-performance passive vulnerability scanner in Go for php2shell (CVE-2026-109618 & CVE-2026-109619). CIDR expansion, CDN detection & origin bypass.", + "description": "Fast, passive PHP vulnerability scanner in Go for php2shell (CVE-2026-109618 \/ CVE-2026-109619): subdomain discovery, CIDR scan, CDN\/Cloudflare origin bypass, JSON\/CSV output.", "fork": false, "created_at": "2026-10-22T20:23:59Z", - "updated_at": "2026-10-30T13:03:10Z", - "pushed_at": "2026-10-27T16:33:07Z", + "updated_at": "2026-10-31T11:49:39Z", + "pushed_at": "2026-10-31T11:49:35Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, @@ -16522,13 +16522,24 @@ "pull_request_creation_policy": "all", "topics": [ "appsec", + "bugbounty", + "cdn-bypass", + "cli", + "cloudflare", + "cve", "cve-2026-109618", "cve-2026-109619", + "cybersecurity", "golang", "infosec", + "pentest", "php", + "php-security", "php2shell", + "reconnaissance", + "security-scanner", "security-tools", + "subdomain-enumeration", "vulnerability-scanner" ], "visibility": "public", @@ -17054,50 +17065,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1430335600, - "name": "php2shell", - "full_name": "mehmet-emir-eroglu\/php2shell", - "owner": { - "login": "mehmet-emir-eroglu", - "id": 206140722, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206140722?v=4", - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu\/php2shell", - "description": "A lightweight Python CLI to assess PHP2Shell (CVE-2026-109618 & CVE-2026-109619) exposure via version checks.", - "fork": false, - "created_at": "2026-10-22T22:29:09Z", - "updated_at": "2026-10-28T19:23:15Z", - "pushed_at": "2026-10-22T22:33:28Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2026-109618", - "cve-2026-109619", - "cybersecuirity", - "php-security", - "php2shell", - "php2shell-scanner", - "python", - "security-audit", - "security-tools", - "vulnerability-scanner" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1430341483, "name": "php2shell_scan", @@ -17937,7 +17904,7 @@ "description": "PHP2Shell: version-aware research toolkit for CVE-2026-109618 \/ CVE-2026-109619 — pre-auth RCE in PHP session.upload_progress (mod_php). Build profiles, labs, heap calibration and detection guidance for authorized security testing.", "fork": false, "created_at": "2026-10-23T03:46:10Z", - "updated_at": "2026-10-27T17:29:29Z", + "updated_at": "2026-10-31T13:46:48Z", "pushed_at": "2026-10-23T04:15:21Z", "stargazers_count": 14, "watchers_count": 14, @@ -21200,8 +21167,8 @@ "description": "Live tracker: how fast is the internet patching PHP against PHP2Shell (CVE-2026-109618\/-109619)? Hourly, anonymized.", "fork": false, "created_at": "2026-10-23T22:00:13Z", - "updated_at": "2026-10-30T11:45:52Z", - "pushed_at": "2026-10-30T11:45:48Z", + "updated_at": "2026-10-31T11:19:31Z", + "pushed_at": "2026-10-31T11:19:27Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -23299,11 +23266,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/catscarlet\/php-fpm-docker-PHP-7.4-CVE-2026-109618-109619-free", - "description": "This is a Docker Image of php:7.4-fpm which is **CVE-2026-109618-109691-free**.", + "description": "This is a Docker Image of php:7.4-fpm which is **CVE-2026-109618-109691-patched**.", "fork": false, "created_at": "2026-10-25T12:38:45Z", - "updated_at": "2026-10-28T16:10:06Z", - "pushed_at": "2026-10-28T16:06:47Z", + "updated_at": "2026-10-31T13:49:46Z", + "pushed_at": "2026-10-31T13:45:26Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -23317,6 +23284,7 @@ "cve-2026-109618", "cve-2026-109619", "dockerfiles", + "patched", "php74" ], "visibility": "public", @@ -26542,8 +26510,8 @@ "description": "Is the PHP in your container image really fixed for PHP2Shell (CVE-2026-109618, CVE-2026-109619)? Finds every PHP build without running the image, with backport-aware verdicts and evidence.", "fork": false, "created_at": "2026-10-30T21:46:32Z", - "updated_at": "2026-10-31T07:41:02Z", - "pushed_at": "2026-10-31T07:47:58Z", + "updated_at": "2026-10-31T13:34:58Z", + "pushed_at": "2026-10-31T13:34:54Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -26653,22 +26621,22 @@ "subscribers_count": 0 }, { - "id": 1440565468, - "name": "php2shell-lab", - "full_name": "DarkGlitchLegion\/php2shell-lab", + "id": 1440672729, + "name": "php-8.1-cve-2026-docker", + "full_name": "shellharbor\/php-8.1-cve-2026-docker", "owner": { - "login": "DarkGlitchLegion", - "id": 280652151, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/280652151?v=4", - "html_url": "https:\/\/github.com\/DarkGlitchLegion", + "login": "shellharbor", + "id": 329828247, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/329828247?v=4", + "html_url": "https:\/\/github.com\/shellharbor", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/DarkGlitchLegion\/php2shell-lab", - "description": "Isolated Docker lab for studying PHP2Shell vulnerabilities CVE-2026-109618 and CVE-2026-109619.", + "html_url": "https:\/\/github.com\/shellharbor\/php-8.1-cve-2026-docker", + "description": "PHP 8.1.34 CLI\/FPM Docker image with pinned backports for CVE-2026-109618 and CVE-2026-109619, plus updated native libraries. Documented builds, source and patch checksums, focused regression tests, Trivy reports, and non-root defaults. Linux amd64. UNVERIFIED development preview; independent mysqlnd review remains incomplete.", "fork": false, - "created_at": "2026-10-31T06:12:14Z", - "updated_at": "2026-10-31T07:48:07Z", - "pushed_at": "2026-10-31T07:46:15Z", + "created_at": "2026-10-31T08:47:24Z", + "updated_at": "2026-10-31T13:17:58Z", + "pushed_at": "2026-10-31T11:44:51Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -26678,9 +26646,100 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", + "topics": [ + "amd64", + "backports", + "container-security", + "docker", + "docker-image", + "legacy-php", + "php", + "php-fpm", + "php81", + "security", + "security-patches" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1440723225, + "name": "php-secure-patch", + "full_name": "esskslifetech\/php-secure-patch", + "owner": { + "login": "esskslifetech", + "id": 226517993, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/226517993?v=4", + "html_url": "https:\/\/github.com\/esskslifetech", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/esskslifetech\/php-secure-patch", + "description": "Bash toolkit that finds and fixes PHP CVEs — PHP2Shell (CVE-2026-109618\/109619), CVE-2026-115560, CVE-2024-4577, CVE-2019-11043 — on Linux and macOS. Detects runtimes, audits config, applies source patches, hardens php.ini \/ FPM \/ nginx \/ Apache, hunts compromise, rolls back cleanly. MIT.", + "fork": false, + "created_at": "2026-10-31T09:56:32Z", + "updated_at": "2026-10-31T11:43:21Z", + "pushed_at": "2026-10-31T11:13:40Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", "topics": [], "visibility": "public", "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1440742233, + "name": "php-7.4-cve-2026-docker", + "full_name": "shellharbor\/php-7.4-cve-2026-docker", + "owner": { + "login": "shellharbor", + "id": 329828247, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/329828247?v=4", + "html_url": "https:\/\/github.com\/shellharbor", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/shellharbor\/php-7.4-cve-2026-docker", + "description": "PHP 7.4.33 CLI\/FPM Docker image with pinned backports for CVE-2026-109618 and CVE-2026-109619, plus updated native libraries. Documented builds, source and patch checksums, focused regression tests, Trivy reports, and non-root defaults. Linux amd64. UNVERIFIED development preview; independent mysqlnd review remains incomplete.", + "fork": false, + "created_at": "2026-10-31T10:22:33Z", + "updated_at": "2026-10-31T13:17:53Z", + "pushed_at": "2026-10-31T13:14:59Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "amd64", + "backports", + "container-security", + "cve", + "docker", + "docker-image", + "legacy-php", + "php", + "php-fpm", + "php74", + "security", + "security-patches" + ], + "visibility": "public", + "forks": 0, "watchers": 0, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-109619.json b/2026/CVE-2026-109619.json index 249723cb30..5582120de4 100644 --- a/2026/CVE-2026-109619.json +++ b/2026/CVE-2026-109619.json @@ -664,7 +664,7 @@ "description": "Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619\/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design", "fork": false, "created_at": "2026-10-23T13:49:52Z", - "updated_at": "2026-10-30T21:12:41Z", + "updated_at": "2026-10-31T12:11:49Z", "pushed_at": "2026-10-29T14:37:38Z", "stargazers_count": 120, "watchers_count": 120, diff --git a/2026/CVE-2026-110063.json b/2026/CVE-2026-110063.json deleted file mode 100644 index 50fb906422..0000000000 --- a/2026/CVE-2026-110063.json +++ /dev/null @@ -1,46 +0,0 @@ -[ - { - "id": 1437431721, - "name": "CVE-2026-110063", - "full_name": "mehmet-emir-eroglu\/CVE-2026-110063", - "owner": { - "login": "mehmet-emir-eroglu", - "id": 206140722, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206140722?v=4", - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu\/CVE-2026-110063", - "description": "Offline Python applicability detector for CVE-2026-110063 in Azure VM Inspector, with strict CSV\/JSON inventories and auditable reports.", - "fork": false, - "created_at": "2026-10-28T17:45:04Z", - "updated_at": "2026-10-28T19:22:56Z", - "pushed_at": "2026-10-28T17:45:26Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "asset-inventory", - "azure", - "cli", - "cloud-security", - "cve-2026-110063", - "cwe-59", - "python", - "security-audit", - "vm-inspector", - "vulnerability-detection" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2026/CVE-2026-110264.json b/2026/CVE-2026-110264.json index dc81335dcc..fecaa99ec7 100644 --- a/2026/CVE-2026-110264.json +++ b/2026/CVE-2026-110264.json @@ -130,11 +130,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/xaviware\/go-gitlab-cve-2026-110264-scanner", - "description": "Fast, concurrent and non-intrusive exposure auditor in Go for GitLab CE\/EE unauthenticated RCE (CVE-2026-110264 - CVSS 10.0)", + "description": "Fast, concurrent, non-intrusive exposure auditor in Go for the GitLab CE\/EE unauthenticated RCE (CVE-2026-110264, CVSS 10.0). For defensive use.", "fork": false, "created_at": "2026-10-22T23:11:41Z", - "updated_at": "2026-10-22T23:11:50Z", - "pushed_at": "2026-10-22T23:11:46Z", + "updated_at": "2026-10-31T11:49:41Z", + "pushed_at": "2026-10-31T11:49:38Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -144,7 +144,20 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "blue-team", + "cli", + "cve", + "cve-2026-110264", + "cybersecurity", + "devsecops", + "gitlab", + "go", + "golang", + "infosec", + "security-scanner", + "vulnerability-scanner" + ], "visibility": "public", "forks": 0, "watchers": 0, @@ -412,49 +425,5 @@ "watchers": 0, "score": 0, "subscribers_count": 0 - }, - { - "id": 1432507495, - "name": "CVE-2026-110264", - "full_name": "mehmet-emir-eroglu\/CVE-2026-110264", - "owner": { - "login": "mehmet-emir-eroglu", - "id": 206140722, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206140722?v=4", - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu\/CVE-2026-110264", - "description": "Non-invasive Python detector for CVE-2026-110264 in GitLab, featuring version checks, offline log analysis, and JSON reporting.", - "fork": false, - "created_at": "2026-10-24T19:06:47Z", - "updated_at": "2026-10-28T19:23:13Z", - "pushed_at": "2026-10-24T19:09:31Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve", - "cybersecurity", - "gitlab", - "info-sec", - "log-analysis", - "open-source", - "python", - "security-tools", - "threat-detection", - "vulnerability-detection" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-111497.json b/2026/CVE-2026-111497.json index e28c2394a0..9be171f548 100644 --- a/2026/CVE-2026-111497.json +++ b/2026/CVE-2026-111497.json @@ -664,10 +664,10 @@ "description": "Claude Code and Codex skill for finding potentially vulnerable Brotli copies and guiding updates for CVE-2026-111497.", "fork": false, "created_at": "2026-10-23T16:32:12Z", - "updated_at": "2026-10-30T04:14:37Z", + "updated_at": "2026-10-31T12:33:24Z", "pushed_at": "2026-10-30T21:32:48Z", - "stargazers_count": 65, - "watchers_count": 65, + "stargazers_count": 66, + "watchers_count": 66, "has_discussions": false, "forks_count": 4, "allow_forking": true, @@ -678,7 +678,7 @@ "topics": [], "visibility": "public", "forks": 4, - "watchers": 65, + "watchers": 66, "score": 0, "subscribers_count": 0 }, @@ -1623,50 +1623,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1433519241, - "name": "CVE-2026-111497", - "full_name": "mehmet-emir-eroglu\/CVE-2026-111497", - "owner": { - "login": "mehmet-emir-eroglu", - "id": 206140722, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206140722?v=4", - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu\/CVE-2026-111497", - "description": "Non-invasive Python detector for CVE-2026-111497 with Brotli\/Node.js version checks, JSON inventories, and CI-ready reports.", - "fork": false, - "created_at": "2026-10-25T18:42:23Z", - "updated_at": "2026-10-28T19:23:11Z", - "pushed_at": "2026-10-25T18:44:00Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "brotli", - "cli", - "cve-2026-111497", - "dependency-security", - "devsecops", - "nodejs", - "python", - "security-scanner", - "vulnerability-detection", - "vulnerability-management" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1433557807, "name": "CVE-2026-111497", @@ -2850,5 +2806,47 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1440698123, + "name": "quarkus-brotli-audit", + "full_name": "hayupisama\/quarkus-brotli-audit", + "owner": { + "login": "hayupisama", + "id": 53833518, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/53833518?v=4", + "html_url": "https:\/\/github.com\/hayupisama", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/hayupisama\/quarkus-brotli-audit", + "description": "Audit statique de l'exposition d'une application Quarkus au décodeur Brotli vulnérable (CVE-2026-111497). Généré avec Claude Code.", + "fork": false, + "created_at": "2026-10-31T09:22:21Z", + "updated_at": "2026-10-31T09:25:02Z", + "pushed_at": "2026-10-31T09:24:22Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "brotli", + "cve-2026-111497", + "devsecops", + "quarkus", + "sast", + "security", + "static-analysis", + "vulnerability-management" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-112621.json b/2026/CVE-2026-112621.json index 0677c08dfc..5921419891 100644 --- a/2026/CVE-2026-112621.json +++ b/2026/CVE-2026-112621.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2026-10-29T12:58:50Z", - "updated_at": "2026-10-31T01:20:25Z", + "updated_at": "2026-10-31T09:44:25Z", "pushed_at": "2026-10-29T13:10:26Z", - "stargazers_count": 23, - "watchers_count": 23, + "stargazers_count": 24, + "watchers_count": 24, "has_discussions": true, "forks_count": 7, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 7, - "watchers": 23, + "watchers": 24, "score": 0, "subscribers_count": 0 }, @@ -113,10 +113,10 @@ "description": "This is a fork of vinaykumar´s poc for CVE-2026-112621. This is for educational purposes only. I am only using this to host the website so that I can try the poc", "fork": false, "created_at": "2026-10-30T12:20:13Z", - "updated_at": "2026-10-30T13:20:21Z", + "updated_at": "2026-10-31T08:19:34Z", "pushed_at": "2026-10-30T13:20:17Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -127,7 +127,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-112705.json b/2026/CVE-2026-112705.json index 23de985511..e4a375cc10 100644 --- a/2026/CVE-2026-112705.json +++ b/2026/CVE-2026-112705.json @@ -47,12 +47,12 @@ "description": "PoC & panic evidence for CVE-2026-112705: AppleAVE2 kernel OOB write on iOS 27.0.1 (fixed in 27.2) via VideoToolbox NumberOfTemporalLayers. Independent reproduction; original discovery by Calif \/ Chollima team.", "fork": false, "created_at": "2026-10-30T09:29:03Z", - "updated_at": "2026-10-31T05:29:45Z", + "updated_at": "2026-10-31T12:02:41Z", "pushed_at": "2026-10-30T10:06:16Z", - "stargazers_count": 30, - "watchers_count": 30, + "stargazers_count": 34, + "watchers_count": 34, "has_discussions": false, - "forks_count": 6, + "forks_count": 8, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,8 +60,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 6, - "watchers": 30, + "forks": 8, + "watchers": 34, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-112706.json b/2026/CVE-2026-112706.json index 220496afbd..6fe4acb1ad 100644 --- a/2026/CVE-2026-112706.json +++ b/2026/CVE-2026-112706.json @@ -14,10 +14,10 @@ "description": "Independent discovery & coordinated disclosure: CoreMedia bytestream XPC (mediaplaybackd) vended live file descriptors for protected paths to any sandboxed app on iOS 26.5–27.0.1. Fixed in iOS 27.2 as CVE-2026-112706. PoC + evidence.", "fork": false, "created_at": "2026-10-28T12:03:22Z", - "updated_at": "2026-10-29T16:04:24Z", + "updated_at": "2026-10-31T09:00:38Z", "pushed_at": "2026-10-28T12:04:38Z", - "stargazers_count": 18, - "watchers_count": 18, + "stargazers_count": 17, + "watchers_count": 17, "has_discussions": false, "forks_count": 5, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 5, - "watchers": 18, + "watchers": 17, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-113870.json b/2026/CVE-2026-113870.json deleted file mode 100644 index 0b42d910d9..0000000000 --- a/2026/CVE-2026-113870.json +++ /dev/null @@ -1,46 +0,0 @@ -[ - { - "id": 1435721818, - "name": "CVE-2026-113870", - "full_name": "mehmet-emir-eroglu\/CVE-2026-113870", - "owner": { - "login": "mehmet-emir-eroglu", - "id": 206140722, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206140722?v=4", - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu\/CVE-2026-113870", - "description": "Offline Python detector for CVE-2026-113870 exposure in MongoDB Compass inventories, with CSV\/JSON input and auditable reports.", - "fork": false, - "created_at": "2026-10-27T12:48:24Z", - "updated_at": "2026-10-28T19:23:01Z", - "pushed_at": "2026-10-27T12:48:48Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cli", - "cve-2026-113870", - "cybersecurity", - "inventory-analysis", - "mongodb", - "mongodb-compass", - "python", - "security-audit", - "vulnerability-detection", - "vulnerability-management" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2026/CVE-2026-114509.json b/2026/CVE-2026-114509.json index 94e650d375..c3c1802a4b 100644 --- a/2026/CVE-2026-114509.json +++ b/2026/CVE-2026-114509.json @@ -144,50 +144,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1432512967, - "name": "CVE-2026-114509", - "full_name": "mehmet-emir-eroglu\/CVE-2026-114509", - "owner": { - "login": "mehmet-emir-eroglu", - "id": 206140722, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206140722?v=4", - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu\/CVE-2026-114509", - "description": "Python detector for Laravel TokenGuard CVE-2026-114509 with local dependency analysis, remote authentication checks, and JSON reporting.", - "fork": false, - "created_at": "2026-10-24T19:13:31Z", - "updated_at": "2026-10-28T19:23:12Z", - "pushed_at": "2026-10-24T19:14:23Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "authentication", - "cve", - "cve-2026-114509", - "cybersecurity", - "laravel", - "penetration-testing", - "python", - "security", - "tokenguard", - "vulnerability-scanner" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1435484365, "name": "CVE-2026-114509", diff --git a/2026/CVE-2026-114625.json b/2026/CVE-2026-114625.json index 01aedd7bc9..66e2009a36 100644 --- a/2026/CVE-2026-114625.json +++ b/2026/CVE-2026-114625.json @@ -1,48 +1,4 @@ [ - { - "id": 1437438105, - "name": "CVE-2026-114625", - "full_name": "mehmet-emir-eroglu\/CVE-2026-114625", - "owner": { - "login": "mehmet-emir-eroglu", - "id": 206140722, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206140722?v=4", - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu\/CVE-2026-114625", - "description": "Offline Python detector for CVE-2026-114625 exposure in on-premises VeloCloud Orchestrator, with train-specific build checks and auditable reports.", - "fork": false, - "created_at": "2026-10-28T17:50:50Z", - "updated_at": "2026-10-28T19:22:53Z", - "pushed_at": "2026-10-28T17:51:15Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "arista", - "asset-inventory", - "cli", - "cve-2026-114625", - "cwe-89", - "python", - "sd-wan", - "security-audit", - "velocloud", - "vulnerability-detection" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1439707192, "name": "CVE-2026-114625-Proof-Of-Concept", diff --git a/2026/CVE-2026-114820.json b/2026/CVE-2026-114820.json index c2e6333a1d..9a0f24059b 100644 --- a/2026/CVE-2026-114820.json +++ b/2026/CVE-2026-114820.json @@ -31,49 +31,5 @@ "watchers": 2, "score": 0, "subscribers_count": 0 - }, - { - "id": 1439529511, - "name": "CVE-2026-114820", - "full_name": "mehmet-emir-eroglu\/CVE-2026-114820", - "owner": { - "login": "mehmet-emir-eroglu", - "id": 206140722, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206140722?v=4", - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu\/CVE-2026-114820", - "description": "Offline Python inventory detector for Oracle Java and GraalVM builds affected by CVE-2026-114820.", - "fork": false, - "created_at": "2026-10-30T09:36:15Z", - "updated_at": "2026-10-30T09:36:26Z", - "pushed_at": "2026-10-30T09:36:22Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "asset-inventory", - "cli", - "cve-2026-114820", - "graalvm", - "java", - "jsse", - "oracle", - "python", - "security-audit", - "vulnerability-detection" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-115889.json b/2026/CVE-2026-115889.json index c5089efaa2..efbf683b16 100644 --- a/2026/CVE-2026-115889.json +++ b/2026/CVE-2026-115889.json @@ -31,49 +31,5 @@ "watchers": 0, "score": 0, "subscribers_count": 0 - }, - { - "id": 1438287750, - "name": "CVE-2026-115889", - "full_name": "mehmet-emir-eroglu\/CVE-2026-115889", - "owner": { - "login": "mehmet-emir-eroglu", - "id": 206140722, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206140722?v=4", - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu\/CVE-2026-115889", - "description": "Offline Python detector for CVE-2026-115889 version exposure in Wasmtime.", - "fork": false, - "created_at": "2026-10-29T10:50:55Z", - "updated_at": "2026-10-29T10:51:06Z", - "pushed_at": "2026-10-29T10:51:02Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "asset-inventory", - "cli", - "cranelift", - "cve-2026-115889", - "cwe-197", - "python", - "security-audit", - "vulnerability-detection", - "wasmtime", - "webassembly" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-115905.json b/2026/CVE-2026-115905.json index e5cba1e4d1..b4276450d9 100644 --- a/2026/CVE-2026-115905.json +++ b/2026/CVE-2026-115905.json @@ -56,8 +56,8 @@ "description": "Live demo: the same vulnerable Rust zip crate (RUSTSEC-2026-0367 setuid + CVE-2026-115905 zip cloaking) contained by a deny-by-default Cosmonic WebAssembly sandbox.", "fork": false, "created_at": "2026-10-28T21:31:02Z", - "updated_at": "2026-10-30T23:22:30Z", - "pushed_at": "2026-10-29T18:10:35Z", + "updated_at": "2026-10-31T12:49:32Z", + "pushed_at": "2026-10-31T12:49:28Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2026/CVE-2026-116165.json b/2026/CVE-2026-116165.json deleted file mode 100644 index 1fd3ae11f7..0000000000 --- a/2026/CVE-2026-116165.json +++ /dev/null @@ -1,46 +0,0 @@ -[ - { - "id": 1439530903, - "name": "CVE-2026-116165", - "full_name": "mehmet-emir-eroglu\/CVE-2026-116165", - "owner": { - "login": "mehmet-emir-eroglu", - "id": 206140722, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206140722?v=4", - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu\/CVE-2026-116165", - "description": "Offline Python detector for CVE-2026-116165 using Parse Server versions and database backend inventory.", - "fork": false, - "created_at": "2026-10-30T09:37:45Z", - "updated_at": "2026-10-30T09:37:55Z", - "pushed_at": "2026-10-30T09:37:51Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "asset-inventory", - "cli", - "cve-2026-116165", - "mongodb", - "parse-server", - "python", - "security", - "security-audit", - "semver", - "vulnerability-detection" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2026/CVE-2026-116191.json b/2026/CVE-2026-116191.json index 1e95fe8f55..0ec063750a 100644 --- a/2026/CVE-2026-116191.json +++ b/2026/CVE-2026-116191.json @@ -31,49 +31,5 @@ "watchers": 0, "score": 0, "subscribers_count": 0 - }, - { - "id": 1439532962, - "name": "CVE-2026-116191", - "full_name": "mehmet-emir-eroglu\/CVE-2026-116191", - "owner": { - "login": "mehmet-emir-eroglu", - "id": 206140722, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206140722?v=4", - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu\/CVE-2026-116191", - "description": "Offline Python detector for Rclone version exposure to CVE-2026-116191.", - "fork": false, - "created_at": "2026-10-30T09:39:54Z", - "updated_at": "2026-10-30T09:40:05Z", - "pushed_at": "2026-10-30T09:40:00Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "asset-inventory", - "cli", - "cve-2026-116191", - "path-traversal", - "python", - "rclone", - "security", - "security-audit", - "vulnerability-detection", - "webdav" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-116244.json b/2026/CVE-2026-116244.json index f854a0e9f0..49a2a9adb4 100644 --- a/2026/CVE-2026-116244.json +++ b/2026/CVE-2026-116244.json @@ -14,8 +14,8 @@ "description": "pgAdmin 4 server mode: libpq answers GSSAPI with the service account's Kerberos credentials (CVE-2026-116244, fixed in v9.19) — containerized lab + PoC", "fork": false, "created_at": "2026-10-31T07:40:00Z", - "updated_at": "2026-10-31T07:46:08Z", - "pushed_at": "2026-10-31T07:46:04Z", + "updated_at": "2026-10-31T07:51:54Z", + "pushed_at": "2026-10-31T07:51:50Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-15723.json b/2026/CVE-2026-15723.json deleted file mode 100644 index 6119930ae4..0000000000 --- a/2026/CVE-2026-15723.json +++ /dev/null @@ -1,46 +0,0 @@ -[ - { - "id": 1437442309, - "name": "CVE-2026-15723", - "full_name": "mehmet-emir-eroglu\/CVE-2026-15723", - "owner": { - "login": "mehmet-emir-eroglu", - "id": 206140722, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206140722?v=4", - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu\/CVE-2026-15723", - "description": "Offline Python detector for CVE-2026-15723 version exposure in self-managed GitLab CE\/EE, with CSV\/JSON inventories and auditable reports.", - "fork": false, - "created_at": "2026-10-28T17:54:46Z", - "updated_at": "2026-10-28T19:22:51Z", - "pushed_at": "2026-10-28T17:55:34Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "asset-inventory", - "cli", - "cve-2026-15723", - "cwe-908", - "gitlab", - "ldap", - "python", - "saml", - "security-audit", - "vulnerability-detection" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2026/CVE-2026-34344.json b/2026/CVE-2026-34344.json index 47649a3997..c82302ffaf 100644 --- a/2026/CVE-2026-34344.json +++ b/2026/CVE-2026-34344.json @@ -14,10 +14,10 @@ "description": "CVE 1-day in afd.sys", "fork": false, "created_at": "2026-08-13T01:30:23Z", - "updated_at": "2026-09-08T08:46:51Z", + "updated_at": "2026-10-31T09:20:45Z", "pushed_at": "2026-08-21T02:53:48Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-41940.json b/2026/CVE-2026-41940.json index a58cfda01a..5b442a3fa7 100644 --- a/2026/CVE-2026-41940.json +++ b/2026/CVE-2026-41940.json @@ -550,19 +550,19 @@ { "id": 1226158713, "name": "CVE-2026-41940", - "full_name": "Rosemary1337\/CVE-2026-41940", + "full_name": "ryhnmhrdka\/CVE-2026-41940", "owner": { - "login": "Rosemary1337", + "login": "ryhnmhrdka", "id": 164360967, "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/164360967?v=4", - "html_url": "https:\/\/github.com\/Rosemary1337", + "html_url": "https:\/\/github.com\/ryhnmhrdka", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/Rosemary1337\/CVE-2026-41940", + "html_url": "https:\/\/github.com\/ryhnmhrdka\/CVE-2026-41940", "description": "CVE-2026-41940 Exploit: cPanel & WHM Authentication Bypass", "fork": false, "created_at": "2026-05-01T03:25:57Z", - "updated_at": "2026-05-01T03:31:32Z", + "updated_at": "2026-10-31T13:31:57Z", "pushed_at": "2026-05-01T03:31:29Z", "stargazers_count": 0, "watchers_count": 0, diff --git a/2026/CVE-2026-43499.json b/2026/CVE-2026-43499.json index 2b3f0d70a3..f4a4da66ab 100644 --- a/2026/CVE-2026-43499.json +++ b/2026/CVE-2026-43499.json @@ -361,7 +361,7 @@ "description": "GhostLock (CVE-2026-43499) kernel exploit for Android devices with locked bootloader", "fork": false, "created_at": "2026-07-12T16:05:24Z", - "updated_at": "2026-10-30T07:45:52Z", + "updated_at": "2026-10-31T10:46:30Z", "pushed_at": "2026-09-17T05:30:59Z", "stargazers_count": 439, "watchers_count": 439, @@ -995,12 +995,12 @@ "description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499", "fork": false, "created_at": "2026-07-17T14:24:08Z", - "updated_at": "2026-10-30T21:15:11Z", + "updated_at": "2026-10-31T11:33:11Z", "pushed_at": "2026-09-03T03:21:42Z", - "stargazers_count": 1513, - "watchers_count": 1513, + "stargazers_count": 1515, + "watchers_count": 1515, "has_discussions": false, - "forks_count": 302, + "forks_count": 303, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1008,8 +1008,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 302, - "watchers": 1513, + "forks": 303, + "watchers": 1515, "score": 0, "subscribers_count": 46 }, @@ -1676,12 +1676,12 @@ "description": "GhostLock One-Tap Execution App (CVE-2026-43499)", "fork": false, "created_at": "2026-07-29T05:04:25Z", - "updated_at": "2026-10-31T07:28:02Z", + "updated_at": "2026-10-31T13:33:22Z", "pushed_at": "2026-10-27T12:02:30Z", - "stargazers_count": 2439, - "watchers_count": 2439, + "stargazers_count": 2445, + "watchers_count": 2445, "has_discussions": true, - "forks_count": 595, + "forks_count": 596, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1689,8 +1689,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 595, - "watchers": 2439, + "forks": 596, + "watchers": 2445, "score": 0, "subscribers_count": 44 }, @@ -2480,10 +2480,10 @@ "description": "GhostLock-X200 v1.0 - temporary root toolchain for vivo X200 (PD2415 \/ b57 kernel) based on CVE-2026-43499. For authorized security research only.", "fork": false, "created_at": "2026-08-10T23:26:52Z", - "updated_at": "2026-10-30T14:37:24Z", + "updated_at": "2026-10-31T10:19:20Z", "pushed_at": "2026-08-31T06:05:39Z", - "stargazers_count": 15, - "watchers_count": 15, + "stargazers_count": 16, + "watchers_count": 16, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -2494,7 +2494,7 @@ "topics": [], "visibility": "public", "forks": 3, - "watchers": 15, + "watchers": 16, "score": 0, "subscribers_count": 0 }, @@ -2546,10 +2546,10 @@ "description": "CVE-2026-43499 (GhostLock) rtmutex remove_waiter() UAF local-root PoC adapted for Qualcomm Android 4.19 kernels (Redmi K40 \/ Snapdragon 870 class), LD_PRELOAD based", "fork": false, "created_at": "2026-08-11T07:00:12Z", - "updated_at": "2026-10-29T22:51:35Z", + "updated_at": "2026-10-31T10:49:36Z", "pushed_at": "2026-08-12T05:22:48Z", - "stargazers_count": 23, - "watchers_count": 23, + "stargazers_count": 24, + "watchers_count": 24, "has_discussions": false, "forks_count": 5, "allow_forking": true, @@ -2560,7 +2560,7 @@ "topics": [], "visibility": "public", "forks": 5, - "watchers": 23, + "watchers": 24, "score": 0, "subscribers_count": 0 }, @@ -2788,10 +2788,10 @@ "description": "KSuRoot 4.0.0 — 基于 CVE-2026-43499(GhostLock) 的一键 KernelSU 提权工具。多内核支持：6.1 \/ 6.6 \/ 6.12 三族各有专属基线，另有 50 档上游内核适配；多机型动态库内置：122 条厂商载荷（vivo\/iQOO、小米、三星、Pixel 等）离线可用、按机型+内核+commit 三级匹配；新增「载荷构建」用本机 boot.img 解析偏移打出适配本机的载荷（通用 \/ vivo 专用）；免 ADB。Mod by hmascs", "fork": false, "created_at": "2026-08-14T10:51:50Z", - "updated_at": "2026-10-30T10:10:23Z", + "updated_at": "2026-10-31T10:26:50Z", "pushed_at": "2026-10-02T08:20:25Z", - "stargazers_count": 271, - "watchers_count": 271, + "stargazers_count": 272, + "watchers_count": 272, "has_discussions": false, "forks_count": 30, "allow_forking": true, @@ -2802,7 +2802,7 @@ "topics": [], "visibility": "public", "forks": 30, - "watchers": 271, + "watchers": 272, "score": 0, "subscribers_count": 1 }, @@ -2920,8 +2920,8 @@ "description": "Using CVE-2026-43499 to root your Galaxy S24 Series(SM-S92X0 ,(China \/ Hong Kong SAR \/ Taiwan))", "fork": false, "created_at": "2026-08-16T14:37:06Z", - "updated_at": "2026-10-31T04:35:34Z", - "pushed_at": "2026-10-31T04:48:24Z", + "updated_at": "2026-10-31T09:31:21Z", + "pushed_at": "2026-10-31T09:21:06Z", "stargazers_count": 98, "watchers_count": 98, "has_discussions": false, @@ -3067,7 +3067,7 @@ "description": "尝试移植CVE-2026-43499提权漏洞到HW P20Pro上", "fork": false, "created_at": "2026-08-19T03:11:45Z", - "updated_at": "2026-10-03T10:13:55Z", + "updated_at": "2026-10-31T13:22:54Z", "pushed_at": "2026-08-19T03:41:25Z", "stargazers_count": 0, "watchers_count": 0, @@ -3265,10 +3265,10 @@ "description": "Honor 80 GT privilege escalation PoC: GhostLock (CVE-2026-43499) + custom KernelSU module loading", "fork": false, "created_at": "2026-08-23T02:28:12Z", - "updated_at": "2026-10-27T23:28:41Z", + "updated_at": "2026-10-31T10:59:09Z", "pushed_at": "2026-08-31T02:24:20Z", - "stargazers_count": 30, - "watchers_count": 30, + "stargazers_count": 29, + "watchers_count": 29, "has_discussions": false, "forks_count": 7, "allow_forking": true, @@ -3279,7 +3279,7 @@ "topics": [], "visibility": "public", "forks": 7, - "watchers": 30, + "watchers": 29, "score": 0, "subscribers_count": 0 }, @@ -5467,8 +5467,8 @@ "description": "Honor 70 (FNE-AN00) privilege escalation PoC: GhostLock (CVE-2026-43499) + custom KernelSU module loading", "fork": false, "created_at": "2026-10-16T11:28:27Z", - "updated_at": "2026-10-31T07:43:07Z", - "pushed_at": "2026-10-31T07:43:04Z", + "updated_at": "2026-10-31T09:03:31Z", + "pushed_at": "2026-10-31T09:03:27Z", "stargazers_count": 8, "watchers_count": 8, "has_discussions": false, @@ -5936,8 +5936,8 @@ "description": "GhostLock (CVE-2026-43499) root for Sony Xperia 1 VI — locked bootloader, adb only, per-boot KernelSU", "fork": false, "created_at": "2026-10-26T19:07:09Z", - "updated_at": "2026-10-29T22:28:01Z", - "pushed_at": "2026-10-26T20:39:22Z", + "updated_at": "2026-10-31T11:11:57Z", + "pushed_at": "2026-10-31T11:11:53Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, @@ -6085,5 +6085,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1440771073, + "name": "motogstylus2023-root", + "full_name": "RetributionByRevenue\/motogstylus2023-root", + "owner": { + "login": "RetributionByRevenue", + "id": 56832202, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/56832202?v=4", + "html_url": "https:\/\/github.com\/RetributionByRevenue", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/RetributionByRevenue\/motogstylus2023-root", + "description": "Root exploit for Motorola Moto G Stylus 5G 2023 (genevn) via GhostLock (CVE-2026-43499) — locked bootloader, no flashing", + "fork": false, + "created_at": "2026-10-31T11:02:17Z", + "updated_at": "2026-10-31T11:02:40Z", + "pushed_at": "2026-10-31T11:02:36Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-45321.json b/2026/CVE-2026-45321.json index 1dece57df3..15ac8e585d 100644 --- a/2026/CVE-2026-45321.json +++ b/2026/CVE-2026-45321.json @@ -220,8 +220,8 @@ "description": "Shell script to detect TanStack npm supply chain attack indicators (CVE-2026-45321 \/ GHSA-g7cv-rxg3-hmpx)", "fork": false, "created_at": "2026-05-16T08:01:40Z", - "updated_at": "2026-10-17T07:04:07Z", - "pushed_at": "2026-10-26T06:14:18Z", + "updated_at": "2026-10-31T11:37:17Z", + "pushed_at": "2026-10-31T11:37:21Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": true, diff --git a/2026/CVE-2026-49176.json b/2026/CVE-2026-49176.json index 7966ecce4b..8ec133a91a 100644 --- a/2026/CVE-2026-49176.json +++ b/2026/CVE-2026-49176.json @@ -14,10 +14,10 @@ "description": "Local privilege-escalation proof of concept for the Windows WalletService vulnerability fixed in July 2026.", "fork": false, "created_at": "2026-07-16T13:36:10Z", - "updated_at": "2026-10-27T17:18:08Z", + "updated_at": "2026-10-31T10:30:08Z", "pushed_at": "2026-07-20T09:43:27Z", - "stargazers_count": 62, - "watchers_count": 62, + "stargazers_count": 61, + "watchers_count": 61, "has_discussions": false, "forks_count": 19, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 19, - "watchers": 62, + "watchers": 61, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-49881.json b/2026/CVE-2026-49881.json index 3d6cf2f2b4..cc34dcdcdd 100644 --- a/2026/CVE-2026-49881.json +++ b/2026/CVE-2026-49881.json @@ -14,10 +14,10 @@ "description": "Android complete exploit chain that enables privilege escalation from a local untrusted app to root\/kernel, combination of CVE-2026-49881 and CVE-2026-43284", "fork": false, "created_at": "2026-07-23T07:01:34Z", - "updated_at": "2026-10-30T21:56:32Z", + "updated_at": "2026-10-31T11:35:05Z", "pushed_at": "2026-09-09T00:47:49Z", - "stargazers_count": 483, - "watchers_count": 483, + "stargazers_count": 484, + "watchers_count": 484, "has_discussions": false, "forks_count": 111, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 111, - "watchers": 483, + "watchers": 484, "score": 0, "subscribers_count": 7 }, diff --git a/2026/CVE-2026-50053.json b/2026/CVE-2026-50053.json deleted file mode 100644 index df3d44ae46..0000000000 --- a/2026/CVE-2026-50053.json +++ /dev/null @@ -1,46 +0,0 @@ -[ - { - "id": 1438287964, - "name": "CVE-2026-50053", - "full_name": "mehmet-emir-eroglu\/CVE-2026-50053", - "owner": { - "login": "mehmet-emir-eroglu", - "id": 206140722, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206140722?v=4", - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu\/CVE-2026-50053", - "description": "Offline Python detector for CVE-2026-50053 version exposure in Zimbra Collaboration Suite.", - "fork": false, - "created_at": "2026-10-29T10:51:07Z", - "updated_at": "2026-10-29T10:51:18Z", - "pushed_at": "2026-10-29T10:51:14Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "asset-inventory", - "cli", - "cve-2026-50053", - "cwe-642", - "email-security", - "python", - "security-audit", - "vulnerability-detection", - "zcs", - "zimbra" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2026/CVE-2026-53921.json b/2026/CVE-2026-53921.json index a8a52e9bf5..0f19fcb61a 100644 --- a/2026/CVE-2026-53921.json +++ b/2026/CVE-2026-53921.json @@ -64,49 +64,5 @@ "watchers": 6, "score": 0, "subscribers_count": 0 - }, - { - "id": 1438287578, - "name": "CVE-2026-53921", - "full_name": "mehmet-emir-eroglu\/CVE-2026-53921", - "owner": { - "login": "mehmet-emir-eroglu", - "id": 206140722, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206140722?v=4", - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu\/CVE-2026-53921", - "description": "Offline Python source-pattern auditor for CVE-2026-53921 in odhcpd.", - "fork": false, - "created_at": "2026-10-29T10:50:45Z", - "updated_at": "2026-10-29T10:50:55Z", - "pushed_at": "2026-10-29T10:50:51Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cli", - "cve-2026-53921", - "cwe-121", - "dhcpv6", - "odhcpd", - "openwrt", - "python", - "security-audit", - "source-code-analysis", - "vulnerability-detection" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-54523.json b/2026/CVE-2026-54523.json new file mode 100644 index 0000000000..25776397bc --- /dev/null +++ b/2026/CVE-2026-54523.json @@ -0,0 +1,35 @@ +[ + { + "id": 1440772454, + "name": "SG-2026-0037", + "full_name": "TeamN4C\/SG-2026-0037", + "owner": { + "login": "TeamN4C", + "id": 295141842, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/295141842?v=4", + "html_url": "https:\/\/github.com\/TeamN4C", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/TeamN4C\/SG-2026-0037", + "description": "CVE-2026-54523 Kyverno cross-namespace resource generation PoC and exploit", + "fork": false, + "created_at": "2026-10-31T11:04:18Z", + "updated_at": "2026-10-31T11:04:52Z", + "pushed_at": "2026-10-31T11:04:50Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-6130.json b/2026/CVE-2026-6130.json deleted file mode 100644 index bf9cd01eda..0000000000 --- a/2026/CVE-2026-6130.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1268335092, - "name": "local-mcp", - "full_name": "fan-67\/local-mcp", - "owner": { - "login": "fan-67", - "id": 289333536, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/289333536?v=4", - "html_url": "https:\/\/github.com\/fan-67", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/fan-67\/local-mcp", - "description": "A lightweight stdio-based MCP server for local file system operations — read, write, edit, search, exec for AI assistants. Specially optimized for Chatbox: bat-bypass for exec (CVE-2026-6130), b64 encoding to eliminate escaping issues, and multi-pattern regex for precise code block targeting.", - "fork": false, - "created_at": "2026-06-13T12:10:42Z", - "updated_at": "2026-06-14T18:37:21Z", - "pushed_at": "2026-06-14T18:37:18Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2026/CVE-2026-63686.json b/2026/CVE-2026-63686.json new file mode 100644 index 0000000000..2f8aed28bd --- /dev/null +++ b/2026/CVE-2026-63686.json @@ -0,0 +1,35 @@ +[ + { + "id": 1440662418, + "name": "CVE-2026-63686", + "full_name": "timothyckl\/CVE-2026-63686", + "owner": { + "login": "timothyckl", + "id": 89766111, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/89766111?v=4", + "html_url": "https:\/\/github.com\/timothyckl", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/timothyckl\/CVE-2026-63686", + "description": "CVE-2026-63686 demo", + "fork": false, + "created_at": "2026-10-31T08:33:10Z", + "updated_at": "2026-10-31T11:27:48Z", + "pushed_at": "2026-10-31T11:18:18Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-64560.json b/2026/CVE-2026-64560.json index 29d59b41a3..cde3bca5fd 100644 --- a/2026/CVE-2026-64560.json +++ b/2026/CVE-2026-64560.json @@ -564,12 +564,12 @@ "description": "OnePlus 16 (PYB110) jailbreak: CVE-2026-64560 + CVE-2026-98260 + KernelSU \/ KernelSU Next \/ BakaSU \/ SukiSU Ultra LKM", "fork": false, "created_at": "2026-10-20T09:43:06Z", - "updated_at": "2026-10-31T07:43:26Z", + "updated_at": "2026-10-31T08:02:03Z", "pushed_at": "2026-10-30T11:38:26Z", - "stargazers_count": 18, - "watchers_count": 18, + "stargazers_count": 19, + "watchers_count": 19, "has_discussions": false, - "forks_count": 6, + "forks_count": 7, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -577,8 +577,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 6, - "watchers": 18, + "forks": 7, + "watchers": 19, "score": 0, "subscribers_count": 0 }, @@ -730,5 +730,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1440855460, + "name": "plr110-6.12.38-cve-2026-64560-ksu", + "full_name": "exumeOAO\/plr110-6.12.38-cve-2026-64560-ksu", + "owner": { + "login": "exumeOAO", + "id": 30528067, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/30528067?v=4", + "html_url": "https:\/\/github.com\/exumeOAO", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/exumeOAO\/plr110-6.12.38-cve-2026-64560-ksu", + "description": "Use cve-2026-64560 to root OneOlus ACE 6T", + "fork": false, + "created_at": "2026-10-31T12:53:08Z", + "updated_at": "2026-10-31T13:16:08Z", + "pushed_at": "2026-10-31T13:16:03Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-64638.json b/2026/CVE-2026-64638.json index 8b7cc111ff..91b6e77281 100644 --- a/2026/CVE-2026-64638.json +++ b/2026/CVE-2026-64638.json @@ -47,10 +47,10 @@ "description": "XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template", "fork": false, "created_at": "2026-08-07T17:07:17Z", - "updated_at": "2026-10-30T12:45:07Z", + "updated_at": "2026-10-31T08:00:58Z", "pushed_at": "2026-08-21T13:31:58Z", - "stargazers_count": 127, - "watchers_count": 127, + "stargazers_count": 128, + "watchers_count": 128, "has_discussions": false, "forks_count": 31, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 31, - "watchers": 127, + "watchers": 128, "score": 0, "subscribers_count": 1 }, diff --git a/2026/CVE-2026-71195.json b/2026/CVE-2026-71195.json deleted file mode 100644 index 06bfa898d7..0000000000 --- a/2026/CVE-2026-71195.json +++ /dev/null @@ -1,46 +0,0 @@ -[ - { - "id": 1436173184, - "name": "CVE-2026-71195", - "full_name": "mehmet-emir-eroglu\/CVE-2026-71195", - "owner": { - "login": "mehmet-emir-eroglu", - "id": 206140722, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206140722?v=4", - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu\/CVE-2026-71195", - "description": "Offline Python detector for CVE-2026-71195 exposure in OpenStack Manila, with branch-aware rules, CSV\/JSON inventories, and auditable reports.", - "fork": false, - "created_at": "2026-10-27T19:14:53Z", - "updated_at": "2026-10-28T19:22:57Z", - "pushed_at": "2026-10-27T19:15:12Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "authorization", - "cli", - "cloud-security", - "cve-2026-71195", - "manila", - "openstack", - "python", - "security-audit", - "vulnerability-detection", - "vulnerability-management" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2026/CVE-2026-76466.json b/2026/CVE-2026-76466.json deleted file mode 100644 index a62b748206..0000000000 --- a/2026/CVE-2026-76466.json +++ /dev/null @@ -1,46 +0,0 @@ -[ - { - "id": 1434581427, - "name": "CVE-2026-76466", - "full_name": "mehmet-emir-eroglu\/CVE-2026-76466", - "owner": { - "login": "mehmet-emir-eroglu", - "id": 206140722, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206140722?v=4", - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu\/CVE-2026-76466", - "description": "Offline Python detector for CVE-2026-76466 in Cisco Expressway, using version and clustering evidence with JSON reporting.", - "fork": false, - "created_at": "2026-10-26T15:37:13Z", - "updated_at": "2026-10-28T19:23:09Z", - "pushed_at": "2026-10-26T15:37:44Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cisco", - "configuration-audit", - "cve-2026-76466", - "cybersecurity", - "expressway", - "incident-response", - "python", - "security-audit", - "vulnerability-detection", - "vulnerability-management" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2026/CVE-2026-76473.json b/2026/CVE-2026-76473.json deleted file mode 100644 index d3a435ab26..0000000000 --- a/2026/CVE-2026-76473.json +++ /dev/null @@ -1,46 +0,0 @@ -[ - { - "id": 1435668801, - "name": "CVE-2026-76473", - "full_name": "mehmet-emir-eroglu\/CVE-2026-76473", - "owner": { - "login": "mehmet-emir-eroglu", - "id": 206140722, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206140722?v=4", - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu\/CVE-2026-76473", - "description": "Offline Python detector for CVE-2026-76473 release exposure in Cisco UC inventories, with CSV\/JSON input and auditable reports.", - "fork": false, - "created_at": "2026-10-27T11:59:30Z", - "updated_at": "2026-10-28T19:23:07Z", - "pushed_at": "2026-10-27T12:00:12Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cisco", - "cli", - "cucm", - "cve-2026-76473", - "cybersecurity", - "inventory-analysis", - "python", - "security-audit", - "vulnerability-detection", - "vulnerability-management" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2026/CVE-2026-76474.json b/2026/CVE-2026-76474.json deleted file mode 100644 index 9af47a1f5a..0000000000 --- a/2026/CVE-2026-76474.json +++ /dev/null @@ -1,46 +0,0 @@ -[ - { - "id": 1435678130, - "name": "CVE-2026-76474", - "full_name": "mehmet-emir-eroglu\/CVE-2026-76474", - "owner": { - "login": "mehmet-emir-eroglu", - "id": 206140722, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206140722?v=4", - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu\/CVE-2026-76474", - "description": "Offline Python detector for CVE-2026-76474 exposure in Cisco UC inventories, with CSV\/JSON input, versioned rules, and auditable reports.", - "fork": false, - "created_at": "2026-10-27T12:08:21Z", - "updated_at": "2026-10-28T19:23:06Z", - "pushed_at": "2026-10-27T12:10:04Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cisco", - "cli", - "cucm", - "cve-2026-76474", - "cybersecurity", - "inventory-analysis", - "python", - "security-audit", - "vulnerability-detection", - "vulnerability-management" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2026/CVE-2026-76475.json b/2026/CVE-2026-76475.json deleted file mode 100644 index 3260599334..0000000000 --- a/2026/CVE-2026-76475.json +++ /dev/null @@ -1,46 +0,0 @@ -[ - { - "id": 1435681716, - "name": "CVE-2026-76475", - "full_name": "mehmet-emir-eroglu\/CVE-2026-76475", - "owner": { - "login": "mehmet-emir-eroglu", - "id": 206140722, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206140722?v=4", - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu\/CVE-2026-76475", - "description": "Offline Python detector for CVE-2026-76475 exposure in Cisco UC inventories, with CSV\/JSON input, versioned rules, and auditable reports.", - "fork": false, - "created_at": "2026-10-27T12:11:33Z", - "updated_at": "2026-10-28T19:23:05Z", - "pushed_at": "2026-10-27T12:12:16Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cisco", - "cli", - "cucm", - "cve-2026-76475", - "cybersecurity", - "inventory-analysis", - "python", - "security-audit", - "vulnerability-detection", - "vulnerability-management" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2026/CVE-2026-83938.json b/2026/CVE-2026-83938.json deleted file mode 100644 index 1c3c340448..0000000000 --- a/2026/CVE-2026-83938.json +++ /dev/null @@ -1,46 +0,0 @@ -[ - { - "id": 1437434001, - "name": "CVE-2026-83938", - "full_name": "mehmet-emir-eroglu\/CVE-2026-83938", - "owner": { - "login": "mehmet-emir-eroglu", - "id": 206140722, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206140722?v=4", - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu\/CVE-2026-83938", - "description": "Offline Python applicability detector for CVE-2026-83938 in Azure Kubernetes Configuration Service, with CSV\/JSON inventories and auditable reports.", - "fork": false, - "created_at": "2026-10-28T17:47:04Z", - "updated_at": "2026-10-28T19:22:55Z", - "pushed_at": "2026-10-28T17:47:24Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "asset-inventory", - "azure", - "cli", - "cloud-security", - "cve-2026-83938", - "cwe-306", - "kubernetes", - "python", - "security-audit", - "vulnerability-detection" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2026/CVE-2026-87902.json b/2026/CVE-2026-87902.json index f4a5b638ba..968f4a18a2 100644 --- a/2026/CVE-2026-87902.json +++ b/2026/CVE-2026-87902.json @@ -862,10 +862,10 @@ "description": "cve-2026-87902 lab", "fork": false, "created_at": "2026-10-07T07:42:36Z", - "updated_at": "2026-10-07T07:53:43Z", + "updated_at": "2026-10-31T08:59:20Z", "pushed_at": "2026-10-07T07:53:39Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -876,7 +876,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-89020.json b/2026/CVE-2026-89020.json index 042f4cd221..7625b91e4d 100644 --- a/2026/CVE-2026-89020.json +++ b/2026/CVE-2026-89020.json @@ -15,7 +15,7 @@ "fork": false, "created_at": "2026-10-30T21:26:52Z", "updated_at": "2026-10-31T00:53:18Z", - "pushed_at": "2026-10-31T00:53:13Z", + "pushed_at": "2026-10-31T11:26:07Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-89035.json b/2026/CVE-2026-89035.json deleted file mode 100644 index 95edb47d69..0000000000 --- a/2026/CVE-2026-89035.json +++ /dev/null @@ -1,46 +0,0 @@ -[ - { - "id": 1435690152, - "name": "CVE-2026-89035", - "full_name": "mehmet-emir-eroglu\/CVE-2026-89035", - "owner": { - "login": "mehmet-emir-eroglu", - "id": 206140722, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206140722?v=4", - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu\/CVE-2026-89035", - "description": "Offline Python detector for CVE-2026-89035 exposure in MikroTik RouterOS inventories, with CSV\/JSON input and auditable reports.", - "fork": false, - "created_at": "2026-10-27T12:19:37Z", - "updated_at": "2026-10-28T19:23:03Z", - "pushed_at": "2026-10-27T12:20:09Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cli", - "cve-2026-89035", - "inventory-analysis", - "mikrotik", - "python", - "routeros", - "security-audit", - "vulnerability-detection", - "vulnerability-management", - "webfig" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2026/CVE-2026-91403.json b/2026/CVE-2026-91403.json index b001a1f249..bbfa850775 100644 --- a/2026/CVE-2026-91403.json +++ b/2026/CVE-2026-91403.json @@ -136,49 +136,5 @@ "watchers": 0, "score": 0, "subscribers_count": 0 - }, - { - "id": 1434388372, - "name": "CVE-2026-91403", - "full_name": "mehmet-emir-eroglu\/CVE-2026-91403", - "owner": { - "login": "mehmet-emir-eroglu", - "id": 206140722, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206140722?v=4", - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu\/CVE-2026-91403", - "description": "Offline Python detector for CVE-2026-91403 certificate indicators in Java trust stores, with fingerprint matching and JSON reports.", - "fork": false, - "created_at": "2026-10-26T13:01:33Z", - "updated_at": "2026-10-28T19:23:10Z", - "pushed_at": "2026-10-26T13:08:29Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "compliance-audit", - "cve-2026-91403", - "incident-response", - "java-security", - "offline-scanner", - "python", - "security-scanner", - "truststore", - "vulnerability-assessment", - "x509-certificates" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-94300.json b/2026/CVE-2026-94300.json index 350f9b6cd6..e5f606dfaf 100644 --- a/2026/CVE-2026-94300.json +++ b/2026/CVE-2026-94300.json @@ -31,49 +31,5 @@ "watchers": 0, "score": 0, "subscribers_count": 0 - }, - { - "id": 1436171156, - "name": "CVE-2026-94300", - "full_name": "mehmet-emir-eroglu\/CVE-2026-94300", - "owner": { - "login": "mehmet-emir-eroglu", - "id": 206140722, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206140722?v=4", - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu\/CVE-2026-94300", - "description": "Offline Python detector for CVE-2026-94300 exposure in ISC BIND 9, with edition-aware rules, CSV\/JSON inventories, and auditable reports.", - "fork": false, - "created_at": "2026-10-27T19:12:48Z", - "updated_at": "2026-10-28T19:22:58Z", - "pushed_at": "2026-10-27T19:13:08Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "bind9", - "cli", - "cve-2026-94300", - "dns", - "gss-tsig", - "isc-bind", - "python", - "security-audit", - "vulnerability-detection", - "vulnerability-management" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-97229.json b/2026/CVE-2026-97229.json index 747dcc1a5a..b13bb2668c 100644 --- a/2026/CVE-2026-97229.json +++ b/2026/CVE-2026-97229.json @@ -47,10 +47,10 @@ "description": " GitLab CI lint integer-overflow RCE PoC for CVE-2026-97229, validated against the official 19.4.1 CE amd64 image", "fork": false, "created_at": "2026-10-13T09:39:17Z", - "updated_at": "2026-10-30T13:26:17Z", + "updated_at": "2026-10-31T10:50:52Z", "pushed_at": "2026-10-19T08:46:56Z", - "stargazers_count": 64, - "watchers_count": 64, + "stargazers_count": 65, + "watchers_count": 65, "has_discussions": false, "forks_count": 10, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 10, - "watchers": 64, + "watchers": 65, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-97785.json b/2026/CVE-2026-97785.json deleted file mode 100644 index 2b5b7fa0ff..0000000000 --- a/2026/CVE-2026-97785.json +++ /dev/null @@ -1,46 +0,0 @@ -[ - { - "id": 1437435672, - "name": "CVE-2026-97785", - "full_name": "mehmet-emir-eroglu\/CVE-2026-97785", - "owner": { - "login": "mehmet-emir-eroglu", - "id": 206140722, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206140722?v=4", - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mehmet-emir-eroglu\/CVE-2026-97785", - "description": "Offline Python applicability detector for CVE-2026-97785 in Microsoft Entra application proxy, with CSV\/JSON inventories and auditable reports.", - "fork": false, - "created_at": "2026-10-28T17:48:37Z", - "updated_at": "2026-10-28T19:22:53Z", - "pushed_at": "2026-10-28T17:48:54Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "asset-inventory", - "azure", - "cli", - "cloud-security", - "cve-2026-97785", - "cwe-287", - "entra-id", - "python", - "security-audit", - "vulnerability-detection" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2026/CVE-2026-98260.json b/2026/CVE-2026-98260.json index 0a08211225..9b4f693325 100644 --- a/2026/CVE-2026-98260.json +++ b/2026/CVE-2026-98260.json @@ -52,7 +52,7 @@ "stargazers_count": 40, "watchers_count": 40, "has_discussions": false, - "forks_count": 15, + "forks_count": 16, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,7 +60,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 15, + "forks": 16, "watchers": 40, "score": 0, "subscribers_count": 0 @@ -409,12 +409,12 @@ "description": null, "fork": false, "created_at": "2026-10-26T09:32:43Z", - "updated_at": "2026-10-31T02:34:37Z", + "updated_at": "2026-10-31T12:37:07Z", "pushed_at": "2026-10-26T09:50:29Z", - "stargazers_count": 36, - "watchers_count": 36, + "stargazers_count": 38, + "watchers_count": 38, "has_discussions": false, - "forks_count": 12, + "forks_count": 13, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -422,15 +422,15 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 12, - "watchers": 36, + "forks": 13, + "watchers": 38, "score": 0, "subscribers_count": 0 }, { "id": 1434516481, - "name": "violin-CVE-2026-98260-OS4.0", - "full_name": "ChaYeWuu\/violin-CVE-2026-98260-OS4.0", + "name": "xring-CVE-2026-98260-OS4.0", + "full_name": "ChaYeWuu\/xring-CVE-2026-98260-OS4.0", "owner": { "login": "ChaYeWuu", "id": 56117290, @@ -438,12 +438,12 @@ "html_url": "https:\/\/github.com\/ChaYeWuu", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/ChaYeWuu\/violin-CVE-2026-98260-OS4.0", - "description": "Xiaomi Pad7S Pro12.5在OS4.0.0.14.XOTCNXM利用CVE-2026-98260获取ROOT权限并加载KernelSU。", + "html_url": "https:\/\/github.com\/ChaYeWuu\/xring-CVE-2026-98260-OS4.0", + "description": "CVE-2026-98260 一键 root | 玄戒 O1 家族：Xiaomi Pad 7S Pro 12.5 (violin) \/ Pad 7 Ultra (jinghu) \/ 15S Pro (dijun)，内核 6.18.21 | 可选加载 KernelSU \/ SukiSU \/ KernelSU Next \/ 7kimisu", "fork": false, "created_at": "2026-10-26T14:44:21Z", - "updated_at": "2026-10-30T13:25:09Z", - "pushed_at": "2026-10-30T11:02:35Z", + "updated_at": "2026-10-31T13:22:58Z", + "pushed_at": "2026-10-31T13:26:56Z", "stargazers_count": 6, "watchers_count": 6, "has_discussions": false, @@ -453,7 +453,18 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "android-root", + "arm64", + "cve-2026-98260", + "gki", + "kernel-exploit", + "kernelsu", + "one-click-root", + "sukisu", + "xiaomi", + "xring-o1" + ], "visibility": "public", "forks": 4, "watchers": 6, @@ -541,12 +552,12 @@ "description": "6.12.69-android16-6-g242e1a07f878", "fork": false, "created_at": "2026-10-27T12:53:47Z", - "updated_at": "2026-10-31T05:39:41Z", + "updated_at": "2026-10-31T08:47:54Z", "pushed_at": "2026-10-27T14:13:02Z", - "stargazers_count": 34, - "watchers_count": 34, + "stargazers_count": 36, + "watchers_count": 36, "has_discussions": false, - "forks_count": 10, + "forks_count": 11, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -554,8 +565,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 10, - "watchers": 34, + "forks": 11, + "watchers": 36, "score": 0, "subscribers_count": 0 }, @@ -785,12 +796,12 @@ "description": "GhostKey - CVE-2026-98260 一键提权工具（Shizuku + NDK Native）", "fork": false, "created_at": "2026-10-29T05:12:04Z", - "updated_at": "2026-10-31T07:26:18Z", + "updated_at": "2026-10-31T11:33:18Z", "pushed_at": "2026-10-29T05:13:36Z", - "stargazers_count": 34, - "watchers_count": 34, + "stargazers_count": 37, + "watchers_count": 37, "has_discussions": false, - "forks_count": 19, + "forks_count": 21, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -798,8 +809,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 19, - "watchers": 34, + "forks": 21, + "watchers": 37, "score": 0, "subscribers_count": 0 }, @@ -932,8 +943,8 @@ "description": "CVE 2026 98260 vivo s60 poc", "fork": false, "created_at": "2026-10-30T07:52:25Z", - "updated_at": "2026-10-31T05:04:51Z", - "pushed_at": "2026-10-31T05:04:48Z", + "updated_at": "2026-10-31T11:42:44Z", + "pushed_at": "2026-10-31T11:42:40Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -955,48 +966,5 @@ "watchers": 0, "score": 0, "subscribers_count": 0 - }, - { - "id": 1440107863, - "name": "CVE-2026-98260-IQOO-13", - "full_name": "AmarnathCJD\/CVE-2026-98260-IQOO-13", - "owner": { - "login": "AmarnathCJD", - "id": 72609355, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/72609355?v=4", - "html_url": "https:\/\/github.com\/AmarnathCJD", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/AmarnathCJD\/CVE-2026-98260-IQOO-13", - "description": "Temporary root for the Vivo iQOO 13 via CVE-2026-98260 posix-cpu-timer UAF, with KernelSU and FinaSU late-load", - "fork": false, - "created_at": "2026-10-30T18:42:37Z", - "updated_at": "2026-10-31T07:44:07Z", - "pushed_at": "2026-10-31T07:44:14Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "android", - "android-16", - "cve-2026-98260", - "exploit", - "finasu", - "iqoo-13", - "kernel-exploit", - "kernelsu", - "temp-root" - ], - "visibility": "public", - "forks": 1, - "watchers": 5, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-98432.json b/2026/CVE-2026-98432.json index 63c4b1ad09..fc2aec2a68 100644 --- a/2026/CVE-2026-98432.json +++ b/2026/CVE-2026-98432.json @@ -113,10 +113,10 @@ "description": "Temporary mitigation for CVE-2026-98432 (Linux IPv4 TCP ireq_opt use-after-free): drop IPv4 TCP with IP options, disable MPTCP. Tested scripts + verification. EN\/KO.", "fork": false, "created_at": "2026-10-29T17:22:03Z", - "updated_at": "2026-10-30T18:19:42Z", + "updated_at": "2026-10-31T12:14:53Z", "pushed_at": "2026-10-29T17:22:10Z", - "stargazers_count": 4, - "watchers_count": 4, + "stargazers_count": 5, + "watchers_count": 5, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -133,7 +133,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 4, + "watchers": 5, "score": 0, "subscribers_count": 0 }, @@ -218,10 +218,10 @@ "description": "Race trigger, heap-reuse oracle, pcap analysis, detection and mitigation tooling for CVE-2026-98432 (Linux IPv4\/TCP ireq_opt use-after-free).", "fork": false, "created_at": "2026-10-30T00:22:53Z", - "updated_at": "2026-10-31T06:38:07Z", + "updated_at": "2026-10-31T10:37:19Z", "pushed_at": "2026-10-31T06:38:04Z", - "stargazers_count": 6, - "watchers_count": 6, + "stargazers_count": 7, + "watchers_count": 7, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -239,7 +239,7 @@ ], "visibility": "public", "forks": 1, - "watchers": 6, + "watchers": 7, "score": 0, "subscribers_count": 0 }, @@ -525,10 +525,10 @@ "description": "CVE-2026-98432 (CVSS 9.8) Linux IPv4 TCP use-after-free full toolkit. Detect kernel exposure, trigger the race, analyze captures, recover KASLR slides, and lock down hosts. Single command, zero setup, standard library only. Built for real-world authorized security testing.", "fork": false, "created_at": "2026-10-30T13:11:26Z", - "updated_at": "2026-10-30T22:30:18Z", + "updated_at": "2026-10-31T12:05:34Z", "pushed_at": "2026-10-30T13:51:44Z", - "stargazers_count": 4, - "watchers_count": 4, + "stargazers_count": 5, + "watchers_count": 5, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -554,7 +554,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 4, + "watchers": 5, "score": 0, "subscribers_count": 0 }, @@ -606,12 +606,12 @@ "description": "You should patch, but not worry about CVE-2026-98432", "fork": false, "created_at": "2026-10-30T15:38:53Z", - "updated_at": "2026-10-30T16:12:51Z", + "updated_at": "2026-10-31T12:07:12Z", "pushed_at": "2026-10-30T16:10:03Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -619,8 +619,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, - "watchers": 0, + "forks": 1, + "watchers": 3, "score": 0, "subscribers_count": 0 }, @@ -672,10 +672,10 @@ "description": "Proof-only PoC for CVE-2026-98432 (Linux IPv4\/TCP ireq_opt use-after-free): race trigger, heap-reuse oracle, no code execution", "fork": false, "created_at": "2026-10-30T16:36:43Z", - "updated_at": "2026-10-30T21:23:32Z", + "updated_at": "2026-10-31T11:30:35Z", "pushed_at": "2026-10-30T16:40:41Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -692,7 +692,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, @@ -933,5 +933,210 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1440639563, + "name": "synipopt", + "full_name": "raahilmw\/synipopt", + "owner": { + "login": "raahilmw", + "id": 107349427, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/107349427?v=4", + "html_url": "https:\/\/github.com\/raahilmw", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/raahilmw\/synipopt", + "description": "IPv4 SYN with IP options, one lab target per run, for CVE-2026-98432 research. Header-offset parser, regression tests, and a postmortem of a broken auto-exploiter.", + "fork": false, + "created_at": "2026-10-31T07:59:48Z", + "updated_at": "2026-10-31T08:10:51Z", + "pushed_at": "2026-10-31T08:10:48Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve-2026-98432", + "ipv4", + "linux-kernel", + "raw-sockets", + "security-research", + "tcp" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1440726404, + "name": "cve-2026-98432", + "full_name": "ndeet\/cve-2026-98432", + "owner": { + "login": "ndeet", + "id": 1136761, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1136761?v=4", + "html_url": "https:\/\/github.com\/ndeet", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/ndeet\/cve-2026-98432", + "description": "Stopgap firewall mitigation for CVE-2026-98432 on Ubuntu 16.04\/24.04", + "fork": false, + "created_at": "2026-10-31T10:00:47Z", + "updated_at": "2026-10-31T13:32:01Z", + "pushed_at": "2026-10-31T13:31:57Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1440745336, + "name": "cve-2026-98432-nft-mitigation", + "full_name": "nfodor\/cve-2026-98432-nft-mitigation", + "owner": { + "login": "nfodor", + "id": 877973, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/877973?v=4", + "html_url": "https:\/\/github.com\/nfodor", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/nfodor\/cve-2026-98432-nft-mitigation", + "description": "Interim nftables mitigation for Linux kernel CVE-2026-98432 (IPv4-options UAF in tcp_v4_syn_recv_sock) as a reproducible agent skill", + "fork": false, + "created_at": "2026-10-31T10:26:51Z", + "updated_at": "2026-10-31T10:49:57Z", + "pushed_at": "2026-10-31T10:49:53Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1440750971, + "name": "cve-2026-98432-ubuntu-mitigation", + "full_name": "soroushneshati\/cve-2026-98432-ubuntu-mitigation", + "owner": { + "login": "soroushneshati", + "id": 66794227, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/66794227?v=4", + "html_url": "https:\/\/github.com\/soroushneshati", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/soroushneshati\/cve-2026-98432-ubuntu-mitigation", + "description": "Check an Ubuntu host for CVE-2026-98432 and, after you confirm, apply the interim Red Hat RHSB-2026-016 mitigation. Ubuntu 20.04 to 26.10.", + "fork": false, + "created_at": "2026-10-31T10:34:49Z", + "updated_at": "2026-10-31T10:38:29Z", + "pushed_at": "2026-10-31T10:38:26Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1440788490, + "name": "cve-2026-98432-ebpf", + "full_name": "sevaepsteyn\/cve-2026-98432-ebpf", + "owner": { + "login": "sevaepsteyn", + "id": 556438, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/556438?v=4", + "html_url": "https:\/\/github.com\/sevaepsteyn", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/sevaepsteyn\/cve-2026-98432-ebpf", + "description": "eBPF (XDP\/tc) mitigation for CVE-2026-98432 \/ RHSB-2026-016 - untested draft", + "fork": false, + "created_at": "2026-10-31T11:25:56Z", + "updated_at": "2026-10-31T13:26:10Z", + "pushed_at": "2026-10-31T13:26:06Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1440872581, + "name": "cve-2026-98432-nft", + "full_name": "antonyantony\/cve-2026-98432-nft", + "owner": { + "login": "antonyantony", + "id": 1748530, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1748530?v=4", + "html_url": "https:\/\/github.com\/antonyantony", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/antonyantony\/cve-2026-98432-nft", + "description": null, + "fork": false, + "created_at": "2026-10-31T13:14:39Z", + "updated_at": "2026-10-31T13:43:29Z", + "pushed_at": "2026-10-31T13:43:26Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file