nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/11/06 07:51:27

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-11-06 16:51:27 +09:00
1 parent a1d46cec29
commit 36720193ec
57 files changed
+906 -503
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2017/CVE-2017-7494.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "SambaCry exploit and vulnerable container (CVE-2017-7494)",
"fork": false,
"created_at": "2017-05-26T00:58:25Z",
"updated_at": "2026-08-22T09:19:48Z",
"updated_at": "2026-11-06T00:50:15Z",
"pushed_at": "2022-12-27T20:25:09Z",
"stargazers_count": 380,
"watchers_count": 380,
"stargazers_count": 381,
"watchers_count": 381,
"has_discussions": false,
"forks_count": 98,
"allow_forking": true,
@@ -100,7 +100,7 @@
],
"visibility": "public",
"forks": 98,
"watchers": 380,
"watchers": 381,
"score": 0,
"subscribers_count": 9
},
2019/CVE-2019-17558.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340",
"fork": false,
"created_at": "2020-04-01T09:33:35Z",
"updated_at": "2026-11-05T13:17:44Z",
"updated_at": "2026-11-06T05:19:03Z",
"pushed_at": "2021-04-04T09:13:57Z",
"stargazers_count": 4293,
"watchers_count": 4293,
"stargazers_count": 4294,
"watchers_count": 4294,
"has_discussions": false,
"forks_count": 1077,
"allow_forking": true,
@@ -81,7 +81,7 @@
],
"visibility": "public",
"forks": 1077,
"watchers": 4293,
"watchers": 4294,
"score": 0,
"subscribers_count": 148
},
2020/CVE-2020-1350.json
+33
View File
@@ -481,6 +481,39 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 316133975,
"name": "CVE-2020-1350-Exploit",
"full_name": "Sheisback\/CVE-2020-1350-Exploit",
"owner": {
"login": "Sheisback",
"id": 8948193,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8948193?v=4",
"html_url": "https:\/\/github.com\/Sheisback",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Sheisback\/CVE-2020-1350-Exploit",
"description": null,
"fork": false,
"created_at": "2020-11-26T05:42:25Z",
"updated_at": "2026-11-06T05:29:28Z",
"pushed_at": "2020-12-01T05:07:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1175192277,
"name": "CVE-2020-1350-SigRed",
2020/CVE-2020-14343.json
-33
View File
@@ -32,39 +32,6 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 1105185574,
"name": "CVE-2020-14343-PyYAML",
"full_name": "Kairo-one\/CVE-2020-14343-PyYAML",
"owner": {
"login": "Kairo-one",
"id": 242098124,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/242098124?v=4",
"html_url": "https:\/\/github.com\/Kairo-one",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Kairo-one\/CVE-2020-14343-PyYAML",
"description": "CVE-2020-14343的payload",
"fork": false,
"created_at": "2025-11-27T08:57:28Z",
"updated_at": "2025-11-29T15:02:09Z",
"pushed_at": "2025-11-29T15:01:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1145113719,
"name": "yasa-cve-2020-14343",
2020/CVE-2020-1472.json
+8 -8
View File
@@ -47,10 +47,10 @@
"description": "Test tool for CVE-2020-1472",
"fork": false,
"created_at": "2020-09-08T08:58:37Z",
"updated_at": "2026-10-31T05:46:28Z",
"updated_at": "2026-11-06T02:27:54Z",
"pushed_at": "2025-06-27T07:13:13Z",
"stargazers_count": 1839,
"watchers_count": 1839,
"stargazers_count": 1840,
"watchers_count": 1840,
"has_discussions": false,
"forks_count": 354,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 354,
"watchers": 1839,
"watchers": 1840,
"score": 0,
"subscribers_count": 84
},
@@ -113,10 +113,10 @@
"description": "PoC for Zerologon - all research credits go to Tom Tervoort of Secura",
"fork": false,
"created_at": "2020-09-14T16:56:51Z",
"updated_at": "2026-10-30T03:56:38Z",
"updated_at": "2026-11-06T02:38:34Z",
"pushed_at": "2020-11-03T09:45:24Z",
"stargazers_count": 1333,
"watchers_count": 1333,
"stargazers_count": 1334,
"watchers_count": 1334,
"has_discussions": false,
"forks_count": 282,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 282,
"watchers": 1333,
"watchers": 1334,
"score": 0,
"subscribers_count": 34
},
2020/CVE-2020-14882.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340",
"fork": false,
"created_at": "2020-04-01T09:33:35Z",
"updated_at": "2026-11-05T13:17:44Z",
"updated_at": "2026-11-06T05:19:03Z",
"pushed_at": "2021-04-04T09:13:57Z",
"stargazers_count": 4293,
"watchers_count": 4293,
"stargazers_count": 4294,
"watchers_count": 4294,
"has_discussions": false,
"forks_count": 1077,
"allow_forking": true,
@@ -48,7 +48,7 @@
],
"visibility": "public",
"forks": 1077,
"watchers": 4293,
"watchers": 4294,
"score": 0,
"subscribers_count": 148
},
2020/CVE-2020-1938.json
+4 -4
View File
@@ -977,10 +977,10 @@
"description": "tomcat自动化漏洞扫描利用工具，支持批量弱口令检测、后台部署war包getshell、CVE-2017-12615 文件上传、CVE-2020-1938\/CNVD-2020-10487 文件包含",
"fork": false,
"created_at": "2024-08-29T06:38:16Z",
"updated_at": "2026-10-30T18:40:40Z",
"updated_at": "2026-11-06T06:49:02Z",
"pushed_at": "2026-06-16T13:16:53Z",
"stargazers_count": 297,
"watchers_count": 297,
"stargazers_count": 298,
"watchers_count": 298,
"has_discussions": false,
"forks_count": 24,
"allow_forking": true,
@@ -999,7 +999,7 @@
],
"visibility": "public",
"forks": 24,
"watchers": 297,
"watchers": 298,
"score": 0,
"subscribers_count": 2
},
2020/CVE-2020-26217.json
-33
View File
@@ -167,38 +167,5 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1107316451,
"name": "CVE-2020-26217-XStream",
"full_name": "Kairo-one\/CVE-2020-26217-XStream",
"owner": {
"login": "Kairo-one",
"id": 242098124,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/242098124?v=4",
"html_url": "https:\/\/github.com\/Kairo-one",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Kairo-one\/CVE-2020-26217-XStream",
"description": "CVE-2020-26217 XStream反序列化的poc",
"fork": false,
"created_at": "2025-12-01T00:54:16Z",
"updated_at": "2025-12-11T02:06:44Z",
"pushed_at": "2025-12-01T01:05:12Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
]
2021/CVE-2021-41349.json
+2 -2
View File
@@ -56,7 +56,7 @@
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -64,7 +64,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"forks": 2,
"watchers": 5,
"score": 0,
"subscribers_count": 1
2021/CVE-2021-44228.json
+2 -2
View File
@@ -7510,7 +7510,7 @@
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 7,
"forks_count": 6,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -7518,7 +7518,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 7,
"forks": 6,
"watchers": 10,
"score": 0,
"subscribers_count": 2
2022/CVE-2022-26134.json
+2 -2
View File
@@ -2475,8 +2475,8 @@
"description": null,
"fork": false,
"created_at": "2026-05-06T01:47:50Z",
"updated_at": "2026-11-04T10:09:44Z",
"pushed_at": "2026-11-04T10:07:45Z",
"updated_at": "2026-11-06T02:13:26Z",
"pushed_at": "2026-11-06T02:13:21Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2022/CVE-2022-38694.json
+4 -4
View File
@@ -248,10 +248,10 @@
"description": "rooting an ATOZEE P12 on Android 14 using CVE-2022-38694 — because fastboot oem unlock said no, so we found another way.",
"fork": false,
"created_at": "2026-05-14T18:38:18Z",
"updated_at": "2026-08-31T10:11:35Z",
"updated_at": "2026-11-06T01:31:11Z",
"pushed_at": "2026-05-14T21:14:04Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -270,7 +270,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
2023/CVE-2023-20696.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 45,
"watchers_count": 45,
"has_discussions": false,
"forks_count": 17,
"forks_count": 18,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 17,
"forks": 18,
"watchers": 45,
"score": 0,
"subscribers_count": 1
2023/CVE-2023-26469.json
-33
View File
@@ -31,38 +31,5 @@
"watchers": 2,
"score": 0,
"subscribers_count": 1
},
{
"id": 1109026977,
"name": "CVE-2023-26469-Jorani",
"full_name": "Kairo-one\/CVE-2023-26469-Jorani",
"owner": {
"login": "Kairo-one",
"id": 242098124,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/242098124?v=4",
"html_url": "https:\/\/github.com\/Kairo-one",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Kairo-one\/CVE-2023-26469-Jorani",
"description": null,
"fork": false,
"created_at": "2025-12-03T08:36:36Z",
"updated_at": "2026-06-01T14:46:35Z",
"pushed_at": "2025-12-03T08:45:13Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2024/CVE-2024-1086.json
+2 -2
View File
@@ -596,8 +596,8 @@
"description": "Emergency Zero-Downtime Linux Kernel Defense & Attack-Surface Disarmer. Active hotpatching for CVE-2026-98432 (MPTCP RCE), CVE-2024-1086, CVE-2026-53266 & Seccomp sandboxing.",
"fork": false,
"created_at": "2026-09-26T18:21:49Z",
"updated_at": "2026-11-05T04:38:55Z",
"pushed_at": "2026-11-05T04:38:50Z",
"updated_at": "2026-11-06T04:38:51Z",
"pushed_at": "2026-11-06T04:38:48Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-12986.json
+5 -5
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2025-01-04T14:47:09Z",
"updated_at": "2026-11-05T22:29:43Z",
"updated_at": "2026-11-06T02:46:11Z",
"pushed_at": "2025-01-04T14:58:25Z",
"stargazers_count": 174,
"watchers_count": 174,
"stargazers_count": 170,
"watchers_count": 170,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,8 +28,8 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 174,
"watchers": 170,
"score": 0,
"subscribers_count": 170
"subscribers_count": 171
}
]
2024/CVE-2024-34716.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
"forks_count": 7,
"forks_count": 8,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 7,
"forks": 8,
"watchers": 16,
"score": 0,
"subscribers_count": 2
2025/CVE-2025-24204.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "FairPlay decryptor (dump iPA) for iOS Application that running on macOS with SIP-enabled, using CVE-2025-24204. Support macOS 15.0-15.2",
"fork": false,
"created_at": "2025-09-04T17:49:51Z",
"updated_at": "2026-11-02T01:46:06Z",
"updated_at": "2026-11-06T03:00:46Z",
"pushed_at": "2025-09-04T17:59:49Z",
"stargazers_count": 157,
"watchers_count": 157,
"stargazers_count": 158,
"watchers_count": 158,
"has_discussions": false,
"forks_count": 23,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 23,
"watchers": 157,
"watchers": 158,
"score": 0,
"subscribers_count": 2
}
2025/CVE-2025-3515.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 18,
"watchers_count": 18,
"has_discussions": false,
"forks_count": 5,
"forks_count": 6,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 5,
"forks": 6,
"watchers": 18,
"score": 0,
"subscribers_count": 0
2025/CVE-2025-55575.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2025-08-22T19:04:24Z",
"updated_at": "2026-11-05T22:29:44Z",
"updated_at": "2026-11-06T02:46:11Z",
"pushed_at": "2025-08-25T18:42:48Z",
"stargazers_count": 173,
"watchers_count": 173,
"stargazers_count": 169,
"watchers_count": 169,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 173,
"watchers": 169,
"score": 0,
"subscribers_count": 170
}
2026/CVE-2026-107268.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Drupal-miniorange_2fa",
"fork": false,
"created_at": "2026-10-08T01:03:40Z",
"updated_at": "2026-10-13T01:21:37Z",
"pushed_at": "2026-10-13T01:21:33Z",
"updated_at": "2026-11-06T07:10:35Z",
"pushed_at": "2026-11-06T07:10:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-109518.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "Silly little patch for cve-2026-109518 for apt targeting generic linux and Proxmox host, VM's, containers. CVE happily fixed now by post package maintainers but could be of use. This is how I fixed it while an actual fix was being developed. Tested to work and vibe coded with Claude Opus 5.5.",
"fork": false,
"created_at": "2026-11-05T13:42:56Z",
"updated_at": "2026-11-05T20:19:11Z",
"updated_at": "2026-11-06T02:14:28Z",
"pushed_at": "2026-11-05T13:48:14Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-109618.json
+117 -84
View File
@@ -639,10 +639,10 @@
"description": "One-line mitigation for php2shell (CVE-2026-109618 \/ CVE-2026-109619): disables session.upload_progress across all PHP installs",
"fork": false,
"created_at": "2026-10-21T07:45:57Z",
"updated_at": "2026-10-23T18:47:51Z",
"updated_at": "2026-11-06T06:27:55Z",
"pushed_at": "2026-10-23T14:19:24Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -653,7 +653,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 7,
"watchers": 8,
"score": 0,
"subscribers_count": 0
},
@@ -672,10 +672,10 @@
"description": "CVE-2026-109618\/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.",
"fork": false,
"created_at": "2026-10-21T07:55:16Z",
"updated_at": "2026-11-06T00:26:03Z",
"updated_at": "2026-11-06T07:26:16Z",
"pushed_at": "2026-10-28T23:21:57Z",
"stargazers_count": 1941,
"watchers_count": 1941,
"stargazers_count": 1943,
"watchers_count": 1943,
"has_discussions": false,
"forks_count": 649,
"allow_forking": true,
@@ -701,7 +701,7 @@
],
"visibility": "public",
"forks": 649,
"watchers": 1941,
"watchers": 1943,
"score": 0,
"subscribers_count": 8
},
@@ -973,10 +973,10 @@
"description": "Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 \/ CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.",
"fork": false,
"created_at": "2026-10-21T08:31:43Z",
"updated_at": "2026-11-06T00:07:08Z",
"updated_at": "2026-11-06T06:37:19Z",
"pushed_at": "2026-10-22T07:19:20Z",
"stargazers_count": 1072,
"watchers_count": 1072,
"stargazers_count": 1073,
"watchers_count": 1073,
"has_discussions": false,
"forks_count": 269,
"allow_forking": true,
@@ -987,7 +987,7 @@
"topics": [],
"visibility": "public",
"forks": 269,
"watchers": 1072,
"watchers": 1073,
"score": 0,
"subscribers_count": 41
},
@@ -7633,12 +7633,12 @@
"description": "CVE-2026-109618 \/ CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.",
"fork": false,
"created_at": "2026-10-21T22:53:01Z",
"updated_at": "2026-11-05T16:06:40Z",
"updated_at": "2026-11-06T02:48:42Z",
"pushed_at": "2026-10-30T16:04:28Z",
"stargazers_count": 283,
"watchers_count": 283,
"stargazers_count": 284,
"watchers_count": 284,
"has_discussions": false,
"forks_count": 77,
"forks_count": 78,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -7667,8 +7667,8 @@
"vulnerability-research"
],
"visibility": "public",
"forks": 77,
"watchers": 283,
"forks": 78,
"watchers": 284,
"score": 0,
"subscribers_count": 2
},
@@ -13320,7 +13320,7 @@
"stargazers_count": 194,
"watchers_count": 194,
"has_discussions": false,
"forks_count": 57,
"forks_count": 58,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -13328,7 +13328,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 57,
"forks": 58,
"watchers": 194,
"score": 0,
"subscribers_count": 1
@@ -21233,8 +21233,8 @@
"description": "PHP Runtime Vulnerability Assessment Toolkit — CVE-2026-109618 & CVE-2026-109619",
"fork": false,
"created_at": "2026-10-24T03:49:08Z",
"updated_at": "2026-11-05T11:40:32Z",
"pushed_at": "2026-11-05T11:40:27Z",
"updated_at": "2026-11-06T05:58:25Z",
"pushed_at": "2026-11-06T05:58:21Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -21672,8 +21672,8 @@
"description": " Published indicators and a log-hunting guide for the PHP2Shell PHP flaws (CVE-2026-109618, CVE-2026-109619)",
"fork": false,
"created_at": "2026-10-24T12:36:49Z",
"updated_at": "2026-10-26T02:51:35Z",
"pushed_at": "2026-10-26T02:51:31Z",
"updated_at": "2026-11-06T02:59:53Z",
"pushed_at": "2026-11-06T02:54:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -23466,7 +23466,7 @@
"fork": false,
"created_at": "2026-10-25T20:16:48Z",
"updated_at": "2026-10-30T10:03:20Z",
"pushed_at": "2026-10-26T10:00:17Z",
"pushed_at": "2026-11-06T05:03:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -24609,54 +24609,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1434962898,
"name": "php2shell-coverage-check",
"full_name": "lanz\/php2shell-coverage-check",
"owner": {
"login": "lanz",
"id": 56061103,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/56061103?v=4",
"html_url": "https:\/\/github.com\/lanz",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/lanz\/php2shell-coverage-check",
"description": "Checks that Tenable scanning is set up to detect PHP2Shell (CVE-2026-109618, CVE-2026-109619) on every PHP host: plugin feed, credentials and scan settings. Lists the hosts to rescan and flags end-of-life PHP. Works with Tenable Vulnerability Management, Security Center and .nessus files. Claude Code skill or standalone script.",
"fork": false,
"created_at": "2026-10-26T21:46:46Z",
"updated_at": "2026-10-28T17:36:45Z",
"pushed_at": "2026-10-28T17:36:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"agent-skills",
"claude-code",
"cve-2026-109618",
"cve-2026-109619",
"indicent-response",
"nessus",
"php",
"php2shell",
"pytenable",
"scan-coverage",
"security-center",
"tenable",
"vulnerability-management",
"vulnerability-scanning"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1434969422,
"name": "php2shell-scanner",
@@ -26329,7 +26281,7 @@
"fork": false,
"created_at": "2026-10-30T21:46:32Z",
"updated_at": "2026-11-05T03:05:56Z",
"pushed_at": "2026-11-05T05:32:01Z",
"pushed_at": "2026-11-06T05:45:08Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -26438,6 +26390,39 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1440647814,
"name": "php2shell-CVE-2026-109618-109619",
"full_name": "psikoma\/php2shell-CVE-2026-109618-109619",
"owner": {
"login": "psikoma",
"id": 97631393,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97631393?v=4",
"html_url": "https:\/\/github.com\/psikoma",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/psikoma\/php2shell-CVE-2026-109618-109619",
"description": "php2shell-CVE-2026-109618\/109619 chain",
"fork": false,
"created_at": "2026-10-31T08:11:56Z",
"updated_at": "2026-11-06T07:47:56Z",
"pushed_at": "2026-11-05T07:27:48Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1440672729,
"name": "php-8.1-cve-2026-docker",
@@ -26453,10 +26438,10 @@
"description": "PHP 8.1.34 CLI\/FPM Docker image with pinned backports for CVE-2026-109618 and CVE-2026-109619, plus updated native libraries. Documented builds, source and patch checksums, focused regression tests, Trivy reports, and non-root defaults. Linux amd64. UNVERIFIED development preview; independent mysqlnd review remains incomplete.",
"fork": false,
"created_at": "2026-10-31T08:47:24Z",
"updated_at": "2026-11-05T14:20:36Z",
"updated_at": "2026-11-06T05:20:25Z",
"pushed_at": "2026-10-31T11:44:51Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -26479,7 +26464,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 10,
"score": 0,
"subscribers_count": 0
},
@@ -26531,10 +26516,10 @@
"description": "PHP 7.4.33 CLI\/FPM Docker image with pinned backports for CVE-2026-109618 and CVE-2026-109619, plus updated native libraries. Documented builds, source and patch checksums, focused regression tests, Trivy reports, and non-root defaults. Linux amd64. UNVERIFIED development preview; independent mysqlnd review remains incomplete.",
"fork": false,
"created_at": "2026-10-31T10:22:33Z",
"updated_at": "2026-10-31T13:17:53Z",
"updated_at": "2026-11-06T05:20:24Z",
"pushed_at": "2026-10-31T13:14:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -26558,7 +26543,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 7,
"score": 0,
"subscribers_count": 0
},
@@ -26610,8 +26595,8 @@
"description": "Authorized offensive-security lab using an agentic AI workflow to research, reproduce, and validate PHP2Shell (CVE-2026-109618 \/ CVE-2026-109619) PoCs against vulnerable and patched PHP runtimes.",
"fork": false,
"created_at": "2026-10-31T15:51:17Z",
"updated_at": "2026-11-05T11:37:12Z",
"pushed_at": "2026-11-05T11:46:01Z",
"updated_at": "2026-11-06T07:44:58Z",
"pushed_at": "2026-11-06T07:44:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -27779,5 +27764,53 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1447882409,
"name": "php2shell-coverage-check",
"full_name": "lanz\/php2shell-coverage-check",
"owner": {
"login": "lanz",
"id": 56061103,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/56061103?v=4",
"html_url": "https:\/\/github.com\/lanz",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/lanz\/php2shell-coverage-check",
"description": "Checks that Tenable scanning is set up to detect PHP2Shell (CVE-2026-109618, CVE-2026-109619) on every PHP host: plugin feed, credentials, and scan settings. Lists the hosts to rescan and flags end-of-life PHP. Works with Tenable Vulnerability Management, Security Center, and .nessus files. Claude Code skill or standalone script.",
"fork": false,
"created_at": "2026-11-06T05:48:44Z",
"updated_at": "2026-11-06T06:27:44Z",
"pushed_at": "2026-11-06T06:28:16Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"agent-skills",
"claude-code",
"cve-2026-109618",
"cve-2026-109619",
"incident-response",
"nessus",
"php",
"php2shell",
"pytenable",
"scan-coverage",
"security-center",
"tenable",
"vulnerability-management",
"vulnerability-scanning"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-109619.json
+35 -2
View File
@@ -671,7 +671,7 @@
"stargazers_count": 136,
"watchers_count": 136,
"has_discussions": false,
"forks_count": 65,
"forks_count": 66,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -695,7 +695,7 @@
"vulnerability-research"
],
"visibility": "public",
"forks": 65,
"forks": 66,
"watchers": 136,
"score": 0,
"subscribers_count": 0
@@ -923,5 +923,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1447972576,
"name": "CVE-2026-109619-ZendPipelineLab",
"full_name": "J47-DLK\/CVE-2026-109619-ZendPipelineLab",
"owner": {
"login": "J47-DLK",
"id": 228566769,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/228566769?v=4",
"html_url": "https:\/\/github.com\/J47-DLK",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/J47-DLK\/CVE-2026-109619-ZendPipelineLab",
"description": "PHP CVE-2026-109619 stale session state: calibrated mod_php lab reproduction, evidence, and solver",
"fork": false,
"created_at": "2026-11-06T07:41:25Z",
"updated_at": "2026-11-06T07:46:57Z",
"pushed_at": "2026-11-05T14:13:41Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-111497.json
+2 -2
View File
@@ -1758,8 +1758,8 @@
"description": "Finds copies of the Google Brotli decoder affected by CVE-2026-111497 on Ubuntu and Debian hosts: the OS packages, and the bundled copies an OS update does not fix (Node.js, Python, Envoy, browsers and more). Built by trial and error with AI-Ops, starting with the OSes on my own machines and servers. A PowerShell version for Windows is planned.",
"fork": false,
"created_at": "2026-10-25T21:24:13Z",
"updated_at": "2026-11-05T06:22:08Z",
"pushed_at": "2026-11-06T01:07:56Z",
"updated_at": "2026-11-06T04:18:24Z",
"pushed_at": "2026-11-06T05:12:31Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-111943.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "Find CA bundles in venvs, node_modules, wheels, jars, container images and binaries that still trust a revoked CA (eMudhra 2026, CVE-2026-111943) and the package to upgrade. Offline Rust CLI, SARIF output.",
"fork": false,
"created_at": "2026-10-22T08:22:33Z",
"updated_at": "2026-11-05T19:47:12Z",
"pushed_at": "2026-11-05T19:47:07Z",
"updated_at": "2026-11-06T06:02:59Z",
"pushed_at": "2026-11-06T06:03:13Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-112071.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "unauthenticated order cancellation in TYPO3 EXT:shop",
"fork": false,
"created_at": "2026-10-20T17:44:49Z",
"updated_at": "2026-10-20T18:19:58Z",
"pushed_at": "2026-10-20T18:19:13Z",
"updated_at": "2026-11-06T07:10:38Z",
"pushed_at": "2026-11-06T07:10:34Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-112688.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-112688 CoreMedia PoC: controlled saved-LR corruption in backboardd, stopped by PAC, plus evidence of a constrained write-1 primitive.",
"fork": false,
"created_at": "2026-11-02T05:45:28Z",
"updated_at": "2026-11-06T01:46:37Z",
"updated_at": "2026-11-06T06:30:22Z",
"pushed_at": "2026-11-02T09:20:26Z",
"stargazers_count": 17,
"watchers_count": 17,
"stargazers_count": 21,
"watchers_count": 21,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 17,
"watchers": 21,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-113468.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "forgeable PayPal payment callback in TYPO3 EXT:shop",
"fork": false,
"created_at": "2026-10-20T17:45:28Z",
"updated_at": "2026-10-20T18:20:14Z",
"pushed_at": "2026-10-20T18:19:10Z",
"updated_at": "2026-11-06T07:10:43Z",
"pushed_at": "2026-11-06T07:10:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-114612.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1447096154,
"name": "CVEs",
"full_name": "FORTBRIDGE-UK\/CVEs",
"owner": {
"login": "FORTBRIDGE-UK",
"id": 148392220,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/148392220?v=4",
"html_url": "https:\/\/github.com\/FORTBRIDGE-UK",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/FORTBRIDGE-UK\/CVEs",
"description": "Lab, privilege-escalation check and detection for LiteLLM CVE-2026-114612 (internal user to proxy admin).",
"fork": false,
"created_at": "2026-11-05T14:22:11Z",
"updated_at": "2026-11-06T07:12:25Z",
"pushed_at": "2026-11-06T07:12:21Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-116214.json
+47
View File
@@ -0,0 +1,47 @@
[
{
"id": 1447780125,
"name": "CVE-2026-116214",
"full_name": "zapstiko\/CVE-2026-116214",
"owner": {
"login": "zapstiko",
"id": 44252004,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/44252004?v=4",
"html_url": "https:\/\/github.com\/zapstiko",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/zapstiko\/CVE-2026-116214",
"description": "CVE-2026-116214: unauthenticated account takeover in MacCMS v10 via an unbound password-recovery code. Full technical writeup + self-contained Docker lab (maccms10 2021.1000.2000, PHP 7.4, MariaDB, Mailpit). For authorized testing only.",
"fork": false,
"created_at": "2026-11-06T03:20:02Z",
"updated_at": "2026-11-06T05:29:38Z",
"pushed_at": "2026-11-06T03:21:08Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"account-takeover",
"cve",
"cve-2026-116214",
"cwe-640",
"docker",
"lab",
"maccms",
"maccms10",
"php",
"security-research",
"vulnerability-research"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-118569.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1447932913,
"name": "CVE-2026-118569",
"full_name": "yuwkaaa\/CVE-2026-118569",
"owner": {
"login": "yuwkaaa",
"id": 257728584,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/257728584?v=4",
"html_url": "https:\/\/github.com\/yuwkaaa",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/yuwkaaa\/CVE-2026-118569",
"description": "CVE-2026-118569 — any editor could publish every draft on a Drupal site",
"fork": false,
"created_at": "2026-11-06T06:54:39Z",
"updated_at": "2026-11-06T07:10:46Z",
"pushed_at": "2026-11-06T07:10:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-120491.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1447893554,
"name": "CVE-2026-120491",
"full_name": "3jee\/CVE-2026-120491",
"owner": {
"login": "3jee",
"id": 74990727,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74990727?v=4",
"html_url": "https:\/\/github.com\/3jee",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/3jee\/CVE-2026-120491",
"description": null,
"fork": false,
"created_at": "2026-11-06T06:03:43Z",
"updated_at": "2026-11-06T06:28:00Z",
"pushed_at": "2026-11-06T06:27:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-123158.json
+105 -6
View File
@@ -157,10 +157,10 @@
"description": "Audit & interim mitigation for CVE-2026-123158 (*SSHole) — OpenSSH password bypass on musl\/Alpine — across Docker containers, images and host",
"fork": false,
"created_at": "2026-11-05T22:49:05Z",
"updated_at": "2026-11-05T22:50:03Z",
"updated_at": "2026-11-06T06:44:48Z",
"pushed_at": "2026-11-05T22:49:52Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -178,7 +178,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
@@ -197,8 +197,107 @@
"description": "CVE-2026-123158 SSHole — OpenSSH authentication bypass via musl crypt() overflow on Alpine Linux (Exploit PoC)",
"fork": false,
"created_at": "2026-11-05T22:51:12Z",
"updated_at": "2026-11-05T22:52:11Z",
"pushed_at": "2026-11-05T22:52:07Z",
"updated_at": "2026-11-06T07:27:14Z",
"pushed_at": "2026-11-06T05:48:20Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1447739637,
"name": "sshhole-cve-2026-123158-ste",
"full_name": "ansonhsu-ai\/sshhole-cve-2026-123158-ste",
"owner": {
"login": "ansonhsu-ai",
"id": 229919555,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/229919555?v=4",
"html_url": "https:\/\/github.com\/ansonhsu-ai",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ansonhsu-ai\/sshhole-cve-2026-123158-ste",
"description": null,
"fork": false,
"created_at": "2026-11-06T02:22:53Z",
"updated_at": "2026-11-06T03:24:12Z",
"pushed_at": "2026-11-06T03:24:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1447760236,
"name": "alpine-openssh-sshole-auth-bypass",
"full_name": "akarkode\/alpine-openssh-sshole-auth-bypass",
"owner": {
"login": "akarkode",
"id": 79255351,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79255351?v=4",
"html_url": "https:\/\/github.com\/akarkode",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/akarkode\/alpine-openssh-sshole-auth-bypass",
"description": "Vulnerability research, PoC reproduction lab, and technical analysis for Alpine Linux OpenSSH authentication bypass (CVE-2026-123158 \/ sshole)",
"fork": false,
"created_at": "2026-11-06T02:51:48Z",
"updated_at": "2026-11-06T03:37:34Z",
"pushed_at": "2026-11-06T03:37:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1447854521,
"name": "sshole-guide",
"full_name": "techtaek77\/sshole-guide",
"owner": {
"login": "techtaek77",
"id": 264270329,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/264270329?v=4",
"html_url": "https:\/\/github.com\/techtaek77",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/techtaek77\/sshole-guide",
"description": "OpenSSH sshole(CVE-2026-123158) 알파인 sshd 점검을 벨로키와 쉽게 보기",
"fork": false,
"created_at": "2026-11-06T05:08:37Z",
"updated_at": "2026-11-06T05:08:47Z",
"pushed_at": "2026-11-06T05:08:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-19586.json
+33
View File
@@ -31,5 +31,38 @@
"watchers": 3,
"score": 0,
"subscribers_count": 1
},
{
"id": 1447927021,
"name": "omada-advisory-check",
"full_name": "bgorzelic\/omada-advisory-check",
"owner": {
"login": "bgorzelic",
"id": 20882185,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/20882185?v=4",
"html_url": "https:\/\/github.com\/bgorzelic",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/bgorzelic\/omada-advisory-check",
"description": "Unofficial offline checker: Omada gateway firmware vs TP-Link bulletin 132084 (CVE-2026-19586). Not affiliated with TP-Link.",
"fork": false,
"created_at": "2026-11-06T06:47:36Z",
"updated_at": "2026-11-06T06:47:46Z",
"pushed_at": "2026-11-06T06:47:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-20637.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-20637: AppleSEPKeyStore Use-After-Free — iOS\/macOS kernel vulnerability (patched in 26.4)",
"fork": false,
"created_at": "2026-01-13T08:21:42Z",
"updated_at": "2026-09-20T05:18:26Z",
"updated_at": "2026-11-06T06:33:49Z",
"pushed_at": "2026-08-27T16:29:37Z",
"stargazers_count": 58,
"watchers_count": 58,
"stargazers_count": 59,
"watchers_count": 59,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -35,7 +35,7 @@
],
"visibility": "public",
"forks": 7,
"watchers": 58,
"watchers": 59,
"score": 0,
"subscribers_count": 1
},
2026/CVE-2026-20687.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-20687: AppleJPEGDriver startDecoder Timeout UAF — iOS\/macOS kernel vulnerability leading to deferred panic (A19 Pro, iOS 26.3 RC)",
"fork": false,
"created_at": "2026-02-09T18:21:45Z",
"updated_at": "2026-10-13T20:54:41Z",
"updated_at": "2026-11-06T06:32:59Z",
"pushed_at": "2026-08-27T16:29:39Z",
"stargazers_count": 28,
"watchers_count": 28,
"stargazers_count": 29,
"watchers_count": 29,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -38,7 +38,7 @@
],
"visibility": "public",
"forks": 9,
"watchers": 28,
"watchers": 29,
"score": 0,
"subscribers_count": 3
},
2026/CVE-2026-22765.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1447966949,
"name": "CVE-2026-22765-poc",
"full_name": "Xitro01\/CVE-2026-22765-poc",
"owner": {
"login": "Xitro01",
"id": 19844787,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/19844787?v=4",
"html_url": "https:\/\/github.com\/Xitro01",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Xitro01\/CVE-2026-22765-poc",
"description": "Unauthenticated RCE chain PoC for Dell Wyse Management Suite On-Prem < 5.5 (CVE-2026-22765 + CVE-2026-22766)",
"fork": false,
"created_at": "2026-11-06T07:34:53Z",
"updated_at": "2026-11-06T07:35:34Z",
"pushed_at": "2026-11-06T07:35:31Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-25262.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 34,
"watchers_count": 34,
"has_discussions": false,
"forks_count": 6,
"forks_count": 7,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -34,7 +34,7 @@
"security-research"
],
"visibility": "public",
"forks": 6,
"forks": 7,
"watchers": 34,
"score": 0,
"subscribers_count": 1
2026/CVE-2026-28992.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "UAF and AOP coprocessor panic in IOHIDEventServiceFastPathUserClient. No entitlements, reachable from app sandbox.",
"fork": false,
"created_at": "2026-02-14T03:20:49Z",
"updated_at": "2026-09-20T05:17:15Z",
"updated_at": "2026-11-06T06:32:55Z",
"pushed_at": "2026-08-27T16:29:44Z",
"stargazers_count": 16,
"watchers_count": 16,
"stargazers_count": 17,
"watchers_count": 17,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 16,
"watchers": 17,
"score": 0,
"subscribers_count": 1
},
2026/CVE-2026-31431.json
+4 -4
View File
@@ -7084,10 +7084,10 @@
"description": "Copy Fail (CVE-2026-31431) LPE exploit. A clean, multi-arch Python reimplementation targeting the Linux kernel AF_ALG page cache vulnerability.",
"fork": false,
"created_at": "2026-05-04T09:48:59Z",
"updated_at": "2026-10-09T05:14:20Z",
"updated_at": "2026-11-06T04:24:38Z",
"pushed_at": "2026-05-05T07:01:53Z",
"stargazers_count": 34,
"watchers_count": 34,
"stargazers_count": 35,
"watchers_count": 35,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -7109,7 +7109,7 @@
],
"visibility": "public",
"forks": 6,
"watchers": 34,
"watchers": 35,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-41940.json
+4 -4
View File
@@ -637,10 +637,10 @@
"description": "Detection tool for cPanel\/WHM CVE-2026-41940 (CRLF injection auth bypass). Verify vulnerability on servers you own or have permission to test. For authorized security assessments only.",
"fork": false,
"created_at": "2026-05-01T09:40:22Z",
"updated_at": "2026-09-27T17:26:31Z",
"updated_at": "2026-11-06T02:20:04Z",
"pushed_at": "2026-05-01T09:40:51Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -651,7 +651,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-43284.json
+5 -5
View File
@@ -1341,10 +1341,10 @@
"description": "三星 Galaxy S25 Ultra（SM-S938B）适配版 DFRoot：开机自动获取 root（DirtyFrag CVE-2026-43284 + CVE-2026-43499 双链路），全中文界面，fork 自 diabl0w\/DFRoot",
"fork": false,
"created_at": "2026-09-27T15:02:55Z",
"updated_at": "2026-10-26T19:27:24Z",
"updated_at": "2026-11-06T07:43:01Z",
"pushed_at": "2026-09-28T03:10:07Z",
"stargazers_count": 9,
"watchers_count": 9,
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -1364,7 +1364,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 9,
"watchers": 10,
"score": 0,
"subscribers_count": 1
},
@@ -1383,7 +1383,7 @@
"description": "DirtyFrag Android Root is an Android app and helper module chain based on DirtyFrag (CVE-2026-43284). Tested on iQOO Z9 5G.",
"fork": false,
"created_at": "2026-10-02T18:29:26Z",
"updated_at": "2026-11-05T03:25:21Z",
"updated_at": "2026-11-06T02:34:04Z",
"pushed_at": "2026-10-05T15:01:25Z",
"stargazers_count": 64,
"watchers_count": 64,
2026/CVE-2026-43499.json
+96 -63
View File
@@ -467,10 +467,10 @@
"description": "Android version CVE-2026-43499 tester",
"fork": false,
"created_at": "2026-07-13T13:31:55Z",
"updated_at": "2026-11-05T11:39:33Z",
"updated_at": "2026-11-06T03:12:28Z",
"pushed_at": "2026-07-20T07:22:42Z",
"stargazers_count": 93,
"watchers_count": 93,
"stargazers_count": 94,
"watchers_count": 94,
"has_discussions": false,
"forks_count": 17,
"allow_forking": true,
@@ -481,7 +481,7 @@
"topics": [],
"visibility": "public",
"forks": 17,
"watchers": 93,
"watchers": 94,
"score": 0,
"subscribers_count": 0
},
@@ -533,10 +533,10 @@
"description": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.",
"fork": false,
"created_at": "2026-07-14T14:21:27Z",
"updated_at": "2026-11-05T22:31:37Z",
"updated_at": "2026-11-06T01:56:28Z",
"pushed_at": "2026-07-30T11:28:07Z",
"stargazers_count": 118,
"watchers_count": 118,
"stargazers_count": 117,
"watchers_count": 117,
"has_discussions": false,
"forks_count": 35,
"allow_forking": true,
@@ -547,7 +547,7 @@
"topics": [],
"visibility": "public",
"forks": 35,
"watchers": 118,
"watchers": 117,
"score": 0,
"subscribers_count": 0
},
@@ -995,10 +995,10 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
"updated_at": "2026-11-06T00:32:45Z",
"updated_at": "2026-11-06T07:42:47Z",
"pushed_at": "2026-09-03T03:21:42Z",
"stargazers_count": 1584,
"watchers_count": 1584,
"stargazers_count": 1585,
"watchers_count": 1585,
"has_discussions": false,
"forks_count": 316,
"allow_forking": true,
@@ -1009,7 +1009,7 @@
"topics": [],
"visibility": "public",
"forks": 316,
"watchers": 1584,
"watchers": 1585,
"score": 0,
"subscribers_count": 47
},
@@ -1577,12 +1577,12 @@
"description": "基于内核漏洞CVE-2026-43499的本地提权适配，集成嵌入式 KernelSU.CVE-2026-43499+KernelSU越狱模式 ",
"fork": false,
"created_at": "2026-07-26T12:39:00Z",
"updated_at": "2026-11-06T01:49:35Z",
"updated_at": "2026-11-06T07:35:05Z",
"pushed_at": "2026-07-26T14:04:57Z",
"stargazers_count": 417,
"watchers_count": 417,
"stargazers_count": 459,
"watchers_count": 459,
"has_discussions": false,
"forks_count": 74,
"forks_count": 84,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1590,8 +1590,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 74,
"watchers": 417,
"forks": 84,
"watchers": 459,
"score": 0,
"subscribers_count": 1
},
@@ -1676,12 +1676,12 @@
"description": "GhostLock One-Tap Execution App (CVE-2026-43499)",
"fork": false,
"created_at": "2026-07-29T05:04:25Z",
"updated_at": "2026-11-06T01:43:33Z",
"pushed_at": "2026-11-05T14:57:18Z",
"stargazers_count": 2684,
"watchers_count": 2684,
"updated_at": "2026-11-06T07:36:28Z",
"pushed_at": "2026-11-06T05:01:14Z",
"stargazers_count": 2696,
"watchers_count": 2696,
"has_discussions": true,
"forks_count": 641,
"forks_count": 644,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1689,8 +1689,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 641,
"watchers": 2684,
"forks": 644,
"watchers": 2696,
"score": 0,
"subscribers_count": 49
},
@@ -2612,10 +2612,10 @@
"description": "vivo\/iQOO 临时 root 工具箱 (免解锁临时root, CVE-2026-43499) - 源码与脚本",
"fork": false,
"created_at": "2026-08-12T10:05:38Z",
"updated_at": "2026-11-05T13:56:16Z",
"updated_at": "2026-11-06T04:59:39Z",
"pushed_at": "2026-08-12T10:05:44Z",
"stargazers_count": 64,
"watchers_count": 64,
"stargazers_count": 65,
"watchers_count": 65,
"has_discussions": false,
"forks_count": 13,
"allow_forking": true,
@@ -2626,7 +2626,7 @@
"topics": [],
"visibility": "public",
"forks": 13,
"watchers": 64,
"watchers": 65,
"score": 0,
"subscribers_count": 0
},
@@ -2793,7 +2793,7 @@
"stargazers_count": 281,
"watchers_count": 281,
"has_discussions": false,
"forks_count": 35,
"forks_count": 36,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2801,7 +2801,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 35,
"forks": 36,
"watchers": 281,
"score": 0,
"subscribers_count": 1
@@ -2920,10 +2920,10 @@
"description": "Using CVE-2026-43499 to root your Galaxy S24 Series(SM-S92X0 ,(China \/ Hong Kong SAR \/ Taiwan))",
"fork": false,
"created_at": "2026-08-16T14:37:06Z",
"updated_at": "2026-11-05T20:37:48Z",
"updated_at": "2026-11-06T07:34:09Z",
"pushed_at": "2026-11-05T17:01:35Z",
"stargazers_count": 109,
"watchers_count": 109,
"stargazers_count": 110,
"watchers_count": 110,
"has_discussions": false,
"forks_count": 13,
"allow_forking": true,
@@ -2949,7 +2949,7 @@
],
"visibility": "public",
"forks": 13,
"watchers": 109,
"watchers": 110,
"score": 0,
"subscribers_count": 1
},
@@ -3397,10 +3397,10 @@
"description": "One-click root for vivo\/iQOO devices on locked bootloader | CVE-2026-43499 + KernelSU",
"fork": false,
"created_at": "2026-08-25T07:52:11Z",
"updated_at": "2026-11-05T22:10:26Z",
"pushed_at": "2026-11-04T18:27:05Z",
"stargazers_count": 90,
"watchers_count": 90,
"updated_at": "2026-11-06T07:41:10Z",
"pushed_at": "2026-11-06T07:14:41Z",
"stargazers_count": 93,
"watchers_count": 93,
"has_discussions": false,
"forks_count": 11,
"allow_forking": true,
@@ -3411,7 +3411,7 @@
"topics": [],
"visibility": "public",
"forks": 11,
"watchers": 90,
"watchers": 93,
"score": 0,
"subscribers_count": 0
},
@@ -4531,10 +4531,10 @@
"description": "RootMyGalaxy for Galaxy S23 Ultra SM-S9180 (FZG1) - temp root via CVE-2026-43499, KernelSU late-load, no partition flashing, no Knox",
"fork": false,
"created_at": "2026-09-21T08:44:47Z",
"updated_at": "2026-11-05T14:03:22Z",
"updated_at": "2026-11-06T07:07:55Z",
"pushed_at": "2026-11-05T14:03:17Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -4545,7 +4545,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
@@ -5467,10 +5467,10 @@
"description": "基于 CVE-2026-43499 的锁屏界面自动提权工具，面向 iQOO Neo10 Pro+ 及相同芯片（骁龙8e）相同系统版本（OriginOS 6）设备",
"fork": false,
"created_at": "2026-10-17T14:47:18Z",
"updated_at": "2026-11-01T01:20:25Z",
"updated_at": "2026-11-06T05:00:48Z",
"pushed_at": "2026-10-26T10:07:29Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -5481,7 +5481,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
@@ -5804,10 +5804,10 @@
"description": "One-command ADB root for Samsung Galaxy Tab S10 FE (SM-X520, X520XXSACZH6): CVE-2026-43499 GhostLock exploit + KernelSU late-load. No bootloader unlock.",
"fork": false,
"created_at": "2026-10-25T18:34:52Z",
"updated_at": "2026-11-02T19:46:17Z",
"updated_at": "2026-11-06T05:03:06Z",
"pushed_at": "2026-10-25T18:42:23Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -5818,7 +5818,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
@@ -5870,8 +5870,8 @@
"description": "GhostLock (CVE-2026-43499) root for Sony Xperia 1 VI — locked bootloader, adb only, per-boot KernelSU",
"fork": false,
"created_at": "2026-10-26T19:07:09Z",
"updated_at": "2026-11-04T14:12:29Z",
"pushed_at": "2026-10-31T11:11:53Z",
"updated_at": "2026-11-06T06:16:05Z",
"pushed_at": "2026-11-06T06:16:01Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
@@ -5952,7 +5952,7 @@
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
"subscribers_count": 1
},
{
"id": 1437377706,
@@ -6035,8 +6035,8 @@
"description": "Root exploit for Motorola Moto G Stylus 5G 2023 (genevn) via GhostLock (CVE-2026-43499) — locked bootloader, no flashing",
"fork": false,
"created_at": "2026-10-31T11:02:17Z",
"updated_at": "2026-11-01T06:16:21Z",
"pushed_at": "2026-11-01T06:16:17Z",
"updated_at": "2026-11-06T05:33:20Z",
"pushed_at": "2026-11-06T05:33:16Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -6200,10 +6200,10 @@
"description": "Temporary root research for Xiaomi Mi 11 (venus \/ M2011K2C), HyperOS 2.0.6.0, kernel 5.4.274-qgki. Port of the CVE-2026-43499 futex-PI-UAF chain retargeted to this kernel.",
"fork": false,
"created_at": "2026-11-04T15:44:00Z",
"updated_at": "2026-11-04T17:13:32Z",
"updated_at": "2026-11-06T03:39:28Z",
"pushed_at": "2026-11-04T17:13:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -6214,7 +6214,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
@@ -6233,8 +6233,8 @@
"description": "GhostLock (CVE-2026-43499) port kit for the Samsung Galaxy S20 Ultra SM-G988U (z3q, kernel 4.19.113, non-BTF) — binary-first offsets, Samsung hardening map, KernelSnitch negative result, vmemmap roadmap",
"fork": false,
"created_at": "2026-11-05T08:04:43Z",
"updated_at": "2026-11-05T22:48:14Z",
"pushed_at": "2026-11-05T10:48:14Z",
"updated_at": "2026-11-06T05:23:44Z",
"pushed_at": "2026-11-06T05:23:40Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -6283,5 +6283,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1447832046,
"name": "CVE-2026-43499_study",
"full_name": "Cyb3rCr0wCC\/CVE-2026-43499_study",
"owner": {
"login": "Cyb3rCr0wCC",
"id": 206536465,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206536465?v=4",
"html_url": "https:\/\/github.com\/Cyb3rCr0wCC",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Cyb3rCr0wCC\/CVE-2026-43499_study",
"description": null,
"fork": false,
"created_at": "2026-11-06T04:35:15Z",
"updated_at": "2026-11-06T04:36:59Z",
"pushed_at": "2026-11-06T04:36:55Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-48356.json
+39
View File
@@ -31,5 +31,44 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1438399751,
"name": "polyshell-2026",
"full_name": "Cyber-BansalAI\/polyshell-2026",
"owner": {
"login": "Cyber-BansalAI",
"id": 339360106,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/339360106?v=4",
"html_url": "https:\/\/github.com\/Cyber-BansalAI",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Cyber-BansalAI\/polyshell-2026",
"description": "Indicators and notes for PolyShell (CVE-2026-48356), the Magento and Adobe Commerce file-upload flaw, with credit to the researchers. Not tested, no warranty.",
"fork": false,
"created_at": "2026-10-29T12:37:03Z",
"updated_at": "2026-11-06T03:08:29Z",
"pushed_at": "2026-10-29T12:46:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "collaborators_only",
"topics": [
"incident-response",
"ioc",
"magento",
"security",
"threat-intelligence"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-58115.json
+6 -6
View File
@@ -57,12 +57,12 @@
"description": "CVE-2026-58115: Siemens SIMATIC IoT2050 Node-RED unauthenticated root RCE. PoC, scanner, PCAP, detection rules.",
"fork": false,
"created_at": "2026-11-04T05:48:18Z",
"updated_at": "2026-11-04T05:48:31Z",
"updated_at": "2026-11-06T04:56:27Z",
"pushed_at": "2026-11-04T05:48:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -86,8 +86,8 @@
"vulnerability-research"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-63030.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 812,
"watchers_count": 812,
"has_discussions": false,
"forks_count": 189,
"forks_count": 190,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -31,7 +31,7 @@
"wp2shell-poc"
],
"visibility": "public",
"forks": 189,
"forks": 190,
"watchers": 812,
"score": 0,
"subscribers_count": 3
2026/CVE-2026-64560.json
+2 -2
View File
@@ -470,7 +470,7 @@
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -478,7 +478,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-67276.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "CVE-2026-67276 MikroTik RouterOS SSH Authentication Bypass Exploit",
"fork": false,
"created_at": "2026-09-07T06:56:34Z",
"updated_at": "2026-10-23T15:04:01Z",
"updated_at": "2026-11-06T02:53:36Z",
"pushed_at": "2026-09-07T06:59:07Z",
"stargazers_count": 14,
"watchers_count": 14,
"stargazers_count": 15,
"watchers_count": 15,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -103,7 +103,7 @@
],
"visibility": "public",
"forks": 2,
"watchers": 14,
"watchers": 15,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-67279.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "CVE-2026-67279 + CVE-2026-86060 – MikroTrick MikroTik RouterOS SSH Pre-Auth Takeover (CVSS 9.2) | Red\/Blue Team suite. 2 tools: Full Exploit (rekey bypass, fd-2 policy swap, full-admin shell, plant, mass scan, SOCKS5\/Tor, stealth) & SafeDetect (banner\/version audit, IoC guidance, JSON\/CSV\/HTML). Use Ethically & Safety only.",
"fork": false,
"created_at": "2026-09-27T12:03:42Z",
"updated_at": "2026-11-02T07:33:01Z",
"updated_at": "2026-11-06T03:50:44Z",
"pushed_at": "2026-10-12T14:33:49Z",
"stargazers_count": 8,
"watchers_count": 8,
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -77,7 +77,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 8,
"watchers": 9,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-68138.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-68138 Linux qdisc rate-table race local privilege escalation PoC",
"fork": false,
"created_at": "2026-08-11T22:22:22Z",
"updated_at": "2026-08-27T08:17:07Z",
"updated_at": "2026-11-06T06:50:53Z",
"pushed_at": "2026-08-12T15:31:34Z",
"stargazers_count": 33,
"watchers_count": 33,
"stargazers_count": 34,
"watchers_count": 34,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 33,
"watchers": 34,
"score": 0,
"subscribers_count": 1
},
2026/CVE-2026-83542.json
+45
View File
@@ -0,0 +1,45 @@
[
{
"id": 1447824350,
"name": "ofbiz-scanner",
"full_name": "foxcornlab\/ofbiz-scanner",
"owner": {
"login": "foxcornlab",
"id": 43523802,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43523802?v=4",
"html_url": "https:\/\/github.com\/foxcornlab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/foxcornlab\/ofbiz-scanner",
"description": "Detection-only local triage for Apache OFBiz CVE-2026-83542 (CVSS 9.8) and the 24.09.08 batch — grades installs against the fixed release. No probing, no payloads.",
"fork": false,
"created_at": "2026-11-06T04:23:40Z",
"updated_at": "2026-11-06T04:24:06Z",
"pushed_at": "2026-11-06T04:24:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"apache-ofbiz",
"cve",
"cve-2026-83542",
"detection",
"groovy",
"ofbiz",
"security",
"triage",
"vulnerability-scanner"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-84636.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Proof of concept of CVE-2026-84636, WiFi SSID Info Disclosure",
"fork": false,
"created_at": "2026-10-27T11:20:13Z",
"updated_at": "2026-10-28T21:12:24Z",
"updated_at": "2026-11-06T04:50:18Z",
"pushed_at": "2026-10-28T10:14:22Z",
"stargazers_count": 16,
"watchers_count": 16,
"stargazers_count": 17,
"watchers_count": 17,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 16,
"watchers": 17,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-97229.json
-33
View File
@@ -207,39 +207,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1444735826,
"name": "cve-2026-97229-lab",
"full_name": "emc-kk\/cve-2026-97229-lab",
"owner": {
"login": "emc-kk",
"id": 36583926,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/36583926?v=4",
"html_url": "https:\/\/github.com\/emc-kk",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/emc-kk\/cve-2026-97229-lab",
"description": "CVE-2026-97229 lab — Onigmo repeat integer overflow RCE (GitLab CE 19.2–19.4)",
"fork": false,
"created_at": "2026-11-03T19:22:57Z",
"updated_at": "2026-11-03T19:23:30Z",
"pushed_at": "2026-11-03T19:23:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1446295588,
"name": "CVE-2026-97229-GitLab-CI-CD",
2026/CVE-2026-97798.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-97798 Windows Error Reporting - Command Injection TO SYSTEM",
"fork": false,
"created_at": "2026-10-27T17:45:26Z",
"updated_at": "2026-11-06T00:50:06Z",
"updated_at": "2026-11-06T07:46:36Z",
"pushed_at": "2026-10-30T02:35:54Z",
"stargazers_count": 59,
"watchers_count": 59,
"stargazers_count": 61,
"watchers_count": 61,
"has_discussions": false,
"forks_count": 14,
"allow_forking": true,
@@ -36,7 +36,7 @@
],
"visibility": "public",
"forks": 14,
"watchers": 59,
"watchers": 61,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-98260.json
+72 -72
View File
@@ -47,10 +47,10 @@
"description": "CVE-2026-98260 (Timer) Android\/ARM64 port",
"fork": false,
"created_at": "2026-10-18T23:26:39Z",
"updated_at": "2026-11-06T01:46:25Z",
"updated_at": "2026-11-06T07:41:10Z",
"pushed_at": "2026-10-25T05:35:18Z",
"stargazers_count": 53,
"watchers_count": 53,
"stargazers_count": 54,
"watchers_count": 54,
"has_discussions": false,
"forks_count": 20,
"allow_forking": true,
@@ -61,43 +61,10 @@
"topics": [],
"visibility": "public",
"forks": 20,
"watchers": 53,
"watchers": 54,
"score": 0,
"subscribers_count": 1
},
{
"id": 1426815035,
"name": "OnePlus16-Jailbreak",
"full_name": "Yunnijian\/OnePlus16-Jailbreak",
"owner": {
"login": "Yunnijian",
"id": 162805361,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/162805361?v=4",
"html_url": "https:\/\/github.com\/Yunnijian",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Yunnijian\/OnePlus16-Jailbreak",
"description": "OnePlus 16 (PYB110) jailbreak: CVE-2026-98260 + KernelSU \/ KernelSU Next \/ BakaSU \/ SukiSU Ultra LKM",
"fork": false,
"created_at": "2026-10-20T09:43:06Z",
"updated_at": "2026-11-05T22:43:12Z",
"pushed_at": "2026-11-05T16:34:48Z",
"stargazers_count": 56,
"watchers_count": 56,
"has_discussions": false,
"forks_count": 13,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 13,
"watchers": 56,
"score": 0,
"subscribers_count": 0
},
{
"id": 1430807236,
"name": "CVE-2026-98260-popsicle-android",
@@ -278,6 +245,39 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 1433253343,
"name": "ic-timer-lpe",
"full_name": "kzktor\/ic-timer-lpe",
"owner": {
"login": "kzktor",
"id": 200692182,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/200692182?v=4",
"html_url": "https:\/\/github.com\/kzktor",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/kzktor\/ic-timer-lpe",
"description": "vivo\/IQOO (kernel 6.1.145) CVE-2026-98260 POSIX CPU timer UAF LPE",
"fork": false,
"created_at": "2026-10-25T13:55:54Z",
"updated_at": "2026-11-06T04:34:21Z",
"pushed_at": "2026-11-06T07:22:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1433935343,
"name": "CVE-2026-98260-pudding-android",
@@ -409,10 +409,10 @@
"description": "REDMI K90 Max在OS4.0.5.0.XAACNXM利用CVE-2026-98260获取ROOT权限并加载KSU模块。",
"fork": false,
"created_at": "2026-10-26T09:25:45Z",
"updated_at": "2026-11-05T23:51:24Z",
"updated_at": "2026-11-06T04:27:16Z",
"pushed_at": "2026-11-01T10:05:18Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -433,7 +433,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
@@ -485,10 +485,10 @@
"description": "CVE-2026-98260 一键 root | 玄戒 O1 家族：Xiaomi Pad 7S Pro 12.5 (violin) \/ Pad 7 Ultra (jinghu) \/ 15S Pro (dijun)，内核 6.18.21 | 可选加载 KernelSU \/ SukiSU \/ KernelSU Next \/ 7kimisu",
"fork": false,
"created_at": "2026-10-26T14:44:21Z",
"updated_at": "2026-11-05T04:16:46Z",
"updated_at": "2026-11-06T02:07:00Z",
"pushed_at": "2026-10-31T13:26:56Z",
"stargazers_count": 10,
"watchers_count": 10,
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -510,7 +510,7 @@
],
"visibility": "public",
"forks": 4,
"watchers": 10,
"watchers": 11,
"score": 0,
"subscribers_count": 0
},
@@ -529,10 +529,10 @@
"description": "Android LPE (CVE-2026-98260) on Honor MagicPad3 Pro 13.3 (YLP-W00), kernel 6.12.38 — PoC\/EXP, uid-0 shell, KernelSU app",
"fork": false,
"created_at": "2026-10-26T16:49:03Z",
"updated_at": "2026-11-05T22:09:42Z",
"pushed_at": "2026-11-05T22:05:28Z",
"stargazers_count": 20,
"watchers_count": 20,
"updated_at": "2026-11-06T07:48:48Z",
"pushed_at": "2026-11-06T07:48:44Z",
"stargazers_count": 21,
"watchers_count": 21,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -543,7 +543,7 @@
"topics": [],
"visibility": "public",
"forks": 7,
"watchers": 20,
"watchers": 21,
"score": 0,
"subscribers_count": 0
},
@@ -733,10 +733,10 @@
"description": "Android front end for CVE-2026-98260: root shell + KernelSU late-load through Shizuku",
"fork": false,
"created_at": "2026-10-28T15:15:02Z",
"updated_at": "2026-11-05T16:08:17Z",
"updated_at": "2026-11-06T02:15:34Z",
"pushed_at": "2026-11-03T13:01:24Z",
"stargazers_count": 49,
"watchers_count": 49,
"stargazers_count": 50,
"watchers_count": 50,
"has_discussions": false,
"forks_count": 21,
"allow_forking": true,
@@ -754,9 +754,9 @@
],
"visibility": "public",
"forks": 21,
"watchers": 49,
"watchers": 50,
"score": 0,
"subscribers_count": 0
"subscribers_count": 1
},
{
"id": 1437374690,
@@ -806,10 +806,10 @@
"description": "GhostKey - CVE-2026-98260 一键提权工具（Shizuku + NDK Native）",
"fork": false,
"created_at": "2026-10-29T04:23:27Z",
"updated_at": "2026-11-02T14:59:58Z",
"updated_at": "2026-11-06T05:16:29Z",
"pushed_at": "2026-10-29T01:46:53Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -820,7 +820,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
@@ -839,10 +839,10 @@
"description": "GhostKey - CVE-2026-98260 一键提权工具（Shizuku + NDK Native）",
"fork": false,
"created_at": "2026-10-29T05:12:04Z",
"updated_at": "2026-11-05T16:43:26Z",
"updated_at": "2026-11-06T05:42:57Z",
"pushed_at": "2026-10-29T05:13:36Z",
"stargazers_count": 84,
"watchers_count": 84,
"stargazers_count": 87,
"watchers_count": 87,
"has_discussions": false,
"forks_count": 55,
"allow_forking": true,
@@ -853,7 +853,7 @@
"topics": [],
"visibility": "public",
"forks": 55,
"watchers": 84,
"watchers": 87,
"score": 0,
"subscribers_count": 0
},
@@ -1022,11 +1022,11 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/sabuweis\/GhostLock-CVE-2026-98260",
"description": "基于ghostlock-app与CVE-2026-98260漏洞开发的提权项目",
"description": "基于CVE-2026-98260漏洞开发的提权项目",
"fork": false,
"created_at": "2026-11-01T02:24:20Z",
"updated_at": "2026-11-05T06:49:38Z",
"pushed_at": "2026-11-05T06:49:35Z",
"updated_at": "2026-11-06T07:12:50Z",
"pushed_at": "2026-11-06T07:12:47Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1322,12 +1322,12 @@
"description": "CVE-2026-98260 在小米 17 Pro Max 的工程化利用一键 root",
"fork": false,
"created_at": "2026-11-05T03:16:47Z",
"updated_at": "2026-11-06T01:27:31Z",
"updated_at": "2026-11-06T05:47:17Z",
"pushed_at": "2026-11-05T16:55:30Z",
"stargazers_count": 8,
"watchers_count": 8,
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 2,
"forks_count": 6,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1335,8 +1335,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 8,
"forks": 6,
"watchers": 11,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-98432.json
+14 -14
View File
@@ -14,8 +14,8 @@
"description": "Emergency Zero-Downtime Linux Kernel Defense & Attack-Surface Disarmer. Active hotpatching for CVE-2026-98432 (MPTCP RCE), CVE-2024-1086, CVE-2026-53266 & Seccomp sandboxing.",
"fork": false,
"created_at": "2026-09-26T18:21:49Z",
"updated_at": "2026-11-05T04:38:55Z",
"pushed_at": "2026-11-05T04:38:50Z",
"updated_at": "2026-11-06T04:38:51Z",
"pushed_at": "2026-11-06T04:38:48Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -267,8 +267,8 @@
"description": "Race trigger, heap-reuse oracle, pcap analysis, detection and mitigation tooling for CVE-2026-98432 (Linux IPv4\/TCP ireq_opt use-after-free).",
"fork": false,
"created_at": "2026-10-30T00:22:53Z",
"updated_at": "2026-11-05T05:29:14Z",
"pushed_at": "2026-11-05T22:48:09Z",
"updated_at": "2026-11-06T05:24:56Z",
"pushed_at": "2026-11-06T07:25:08Z",
"stargazers_count": 17,
"watchers_count": 17,
"has_discussions": false,
@@ -579,12 +579,12 @@
"description": "CVE-2026-98432 (CVSS 9.8) Linux IPv4 TCP use-after-free full toolkit. Detect kernel exposure, trigger the race, analyze captures, recover KASLR slides, and lock down hosts. Single command, zero setup, standard library only. Built for real-world authorized security testing.",
"fork": false,
"created_at": "2026-10-30T13:11:26Z",
"updated_at": "2026-11-05T16:19:16Z",
"updated_at": "2026-11-06T04:19:15Z",
"pushed_at": "2026-11-05T13:25:10Z",
"stargazers_count": 31,
"watchers_count": 31,
"stargazers_count": 32,
"watchers_count": 32,
"has_discussions": false,
"forks_count": 8,
"forks_count": 9,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -607,8 +607,8 @@
"vulnerability-scanner"
],
"visibility": "public",
"forks": 8,
"watchers": 31,
"forks": 9,
"watchers": 32,
"score": 0,
"subscribers_count": 0
},
@@ -2493,10 +2493,10 @@
"description": "CVE-2026-98432 UAF Detection for Wazuh",
"fork": false,
"created_at": "2026-11-05T05:20:01Z",
"updated_at": "2026-11-05T05:25:20Z",
"updated_at": "2026-11-06T06:40:42Z",
"pushed_at": "2026-11-05T05:25:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -2507,7 +2507,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},