nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/08/05 06:50:15

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-08-05 15:50:15 +09:00
1 parent 9784296292
commit 400ed050b7
46 files changed
+554 -311
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2017/CVE-2017-20165.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Fork of the send module to deal with CVE-2017-20165",
"fork": false,
"created_at": "2023-01-11T10:20:27Z",
"updated_at": "2026-07-22T06:32:12Z",
"pushed_at": "2026-08-04T08:32:37Z",
"updated_at": "2026-08-05T05:25:36Z",
"pushed_at": "2026-08-05T05:24:56Z",
"stargazers_count": 15,
"watchers_count": 15,
"has_discussions": false,
2018/CVE-2018-6341.json
-33
View File
@@ -31,38 +31,5 @@
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 1319649973,
"name": "react-CVE-2018-6341",
"full_name": "nitindevelopermca\/react-CVE-2018-6341",
"owner": {
"login": "nitindevelopermca",
"id": 1314092,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1314092?v=4",
"html_url": "https:\/\/github.com\/nitindevelopermca",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/nitindevelopermca\/react-CVE-2018-6341",
"description": null,
"fork": false,
"created_at": "2026-08-01T22:01:40Z",
"updated_at": "2026-08-04T18:08:01Z",
"pushed_at": "2026-08-04T22:18:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-08-04T23:36:07Z",
"pushed_at": "2026-08-04T23:35:26Z",
"updated_at": "2026-08-05T04:19:31Z",
"pushed_at": "2026-08-05T04:19:27Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2020/CVE-2020-1472.json
+2 -2
View File
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-08-04T23:38:32Z",
"pushed_at": "2026-08-04T23:38:28Z",
"updated_at": "2026-08-05T04:08:09Z",
"pushed_at": "2026-08-05T04:07:46Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2020/CVE-2020-7961.json
+2 -2
View File
@@ -415,7 +415,7 @@
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 1,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -434,7 +434,7 @@
"vulnerability-research"
],
"visibility": "public",
"forks": 1,
"forks": 0,
"watchers": 5,
"score": 0,
"subscribers_count": 0
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-08-04T23:37:55Z",
"pushed_at": "2026-08-04T23:37:51Z",
"updated_at": "2026-08-05T04:23:49Z",
"pushed_at": "2026-08-05T04:23:45Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-42278.json
+4 -4
View File
@@ -52,10 +52,10 @@
"description": "Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user ",
"fork": false,
"created_at": "2021-12-13T10:28:12Z",
"updated_at": "2026-08-03T06:25:27Z",
"updated_at": "2026-08-05T04:25:02Z",
"pushed_at": "2023-01-29T03:31:27Z",
"stargazers_count": 1015,
"watchers_count": 1015,
"stargazers_count": 1016,
"watchers_count": 1016,
"has_discussions": false,
"forks_count": 132,
"allow_forking": true,
@@ -66,7 +66,7 @@
"topics": [],
"visibility": "public",
"forks": 132,
"watchers": 1015,
"watchers": 1016,
"score": 0,
"subscribers_count": 13
},
2022/CVE-2022-25012.json
+33
View File
@@ -97,5 +97,38 @@
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1323682817,
"name": "CVE-2022-25012-dvr4-weak-password-encryption",
"full_name": "m1kb0k\/CVE-2022-25012-dvr4-weak-password-encryption",
"owner": {
"login": "m1kb0k",
"id": 310983584,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/310983584?v=4",
"html_url": "https:\/\/github.com\/m1kb0k",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/m1kb0k\/CVE-2022-25012-dvr4-weak-password-encryption",
"description": null,
"fork": false,
"created_at": "2026-08-05T05:52:50Z",
"updated_at": "2026-08-05T06:15:18Z",
"pushed_at": "2026-08-05T06:14:41Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-67315.json → 2023/CVE-2023-20768.json
+11 -11
View File
@@ -1,21 +1,21 @@
[
{
"id": 1126874767,
"name": "CVE-2025-67315",
"full_name": "r-pradyun\/CVE-2025-67315",
"id": 1323667716,
"name": "cve-2023-20768",
"full_name": "murf-xd\/cve-2023-20768",
"owner": {
"login": "r-pradyun",
"id": 106298883,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/106298883?v=4",
"html_url": "https:\/\/github.com\/r-pradyun",
"login": "murf-xd",
"id": 184765789,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/184765789?v=4",
"html_url": "https:\/\/github.com\/murf-xd",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/r-pradyun\/CVE-2025-67315",
"html_url": "https:\/\/github.com\/murf-xd\/cve-2023-20768",
"description": null,
"fork": false,
"created_at": "2026-01-02T18:27:31Z",
"updated_at": "2026-01-02T18:34:51Z",
"pushed_at": "2026-01-02T18:34:47Z",
"created_at": "2026-08-05T05:33:06Z",
"updated_at": "2026-08-05T05:39:20Z",
"pushed_at": "2026-08-05T05:39:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-22518.json
+4 -4
View File
@@ -222,15 +222,15 @@
{
"id": 977812226,
"name": "analyze-Exploit-CVE-2023-22518-Confluence",
"full_name": "ductink98lhp\/analyze-Exploit-CVE-2023-22518-Confluence",
"full_name": "d3ckkNo0b\/analyze-Exploit-CVE-2023-22518-Confluence",
"owner": {
"login": "ductink98lhp",
"login": "d3ckkNo0b",
"id": 76523661,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/76523661?v=4",
"html_url": "https:\/\/github.com\/ductink98lhp",
"html_url": "https:\/\/github.com\/d3ckkNo0b",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ductink98lhp\/analyze-Exploit-CVE-2023-22518-Confluence",
"html_url": "https:\/\/github.com\/d3ckkNo0b\/analyze-Exploit-CVE-2023-22518-Confluence",
"description": null,
"fork": false,
"created_at": "2025-05-05T02:12:05Z",
2023/CVE-2023-38831.json
+2 -2
View File
@@ -1956,7 +1956,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1964,7 +1964,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
2023/CVE-2023-44487.json
+2 -2
View File
@@ -611,8 +611,8 @@
"description": "A comprehensive Python testing tool for CVE-2023-44487, the HTTP\/2 Rapid Reset vulnerability. This enhanced version provides granular control over testing parameters, multiple attack patterns, and advanced monitoring capabilities.",
"fork": false,
"created_at": "2025-07-23T01:32:44Z",
"updated_at": "2026-08-04T13:56:00Z",
"pushed_at": "2026-06-14T11:41:56Z",
"updated_at": "2026-08-05T01:05:32Z",
"pushed_at": "2026-08-05T01:05:22Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2023/CVE-2023-7028.json
-33
View File
@@ -35,39 +35,6 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 749490677,
"name": "gitlab-exploit",
"full_name": "hackeremmen\/gitlab-exploit",
"owner": {
"login": "hackeremmen",
"id": 97889952,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97889952?v=4",
"html_url": "https:\/\/github.com\/hackeremmen",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/hackeremmen\/gitlab-exploit",
"description": "GitLab CVE-2023-7028",
"fork": false,
"created_at": "2024-01-28T18:23:31Z",
"updated_at": "2024-01-29T03:26:47Z",
"pushed_at": "2024-01-28T18:24:46Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 1,
"score": 0,
"subscribers_count": 1
},
{
"id": 833605581,
"name": "CVE-2023-7028",
2024/CVE-2024-21413.json
+66
View File
@@ -1237,5 +1237,71 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1323606147,
"name": "CVE-2024-21413-Microsoft-Outlook-Moniker-Link-Vulnerability",
"full_name": "h4cknain\/CVE-2024-21413-Microsoft-Outlook-Moniker-Link-Vulnerability",
"owner": {
"login": "h4cknain",
"id": 220402182,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/220402182?v=4",
"html_url": "https:\/\/github.com\/h4cknain",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/h4cknain\/CVE-2024-21413-Microsoft-Outlook-Moniker-Link-Vulnerability",
"description": null,
"fork": false,
"created_at": "2026-08-05T03:57:08Z",
"updated_at": "2026-08-05T04:11:20Z",
"pushed_at": "2026-08-05T04:10:57Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1323623936,
"name": "tryhackme-monikerlink-writeup",
"full_name": "OmarMahmoud1024\/tryhackme-monikerlink-writeup",
"owner": {
"login": "OmarMahmoud1024",
"id": 166454806,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/166454806?v=4",
"html_url": "https:\/\/github.com\/OmarMahmoud1024",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/OmarMahmoud1024\/tryhackme-monikerlink-writeup",
"description": "TryHackMe Moniker Link (CVE-2024-21413) walkthrough: Outlook Protected View bypass leading to NTLMv2 hash capture via a crafted moniker link.",
"fork": false,
"created_at": "2026-08-05T04:26:30Z",
"updated_at": "2026-08-05T04:27:49Z",
"pushed_at": "2026-08-05T04:27:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2024/CVE-2024-31317.json
+4 -4
View File
@@ -179,10 +179,10 @@
"description": "Quick tool for utilizing CVE-2024-31317 on Android",
"fork": false,
"created_at": "2025-10-20T13:47:09Z",
"updated_at": "2026-08-04T19:25:36Z",
"updated_at": "2026-08-05T02:51:12Z",
"pushed_at": "2026-02-16T10:22:42Z",
"stargazers_count": 71,
"watchers_count": 71,
"stargazers_count": 72,
"watchers_count": 72,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -193,7 +193,7 @@
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 71,
"watchers": 72,
"score": 0,
"subscribers_count": 1
},
2024/CVE-2024-34740.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "Writeup and exploit for CVE-2024-34740, integer overflow in Android's BinaryXmlSerializer to system_server file write and then to system_server code execution from normal installed app",
"fork": false,
"created_at": "2025-10-08T12:54:02Z",
"updated_at": "2026-07-23T17:43:45Z",
"updated_at": "2026-08-05T04:54:19Z",
"pushed_at": "2025-10-08T12:54:46Z",
"stargazers_count": 67,
"watchers_count": 67,
"stargazers_count": 68,
"watchers_count": 68,
"has_discussions": false,
"forks_count": 23,
"forks_count": 24,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 23,
"watchers": 67,
"forks": 24,
"watchers": 68,
"score": 0,
"subscribers_count": 2
}
2024/CVE-2024-52380.json
-33
View File
@@ -31,38 +31,5 @@
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 918490025,
"name": "CVE-2024-52380-Exploit",
"full_name": "Nxploited\/CVE-2024-52380-Exploit",
"owner": {
"login": "Nxploited",
"id": 188819918,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4",
"html_url": "https:\/\/github.com\/Nxploited",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-52380-Exploit",
"description": "Picsmize plugin for WordPress is vulnerable to arbitrary file uploads.",
"fork": false,
"created_at": "2025-01-18T04:10:09Z",
"updated_at": "2026-05-02T05:57:21Z",
"pushed_at": "2025-01-18T04:37:25Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"score": 0,
"subscribers_count": 1
}
]
2024/CVE-2024-56426.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "A PoC of the CVE-2024-56426 vulnerability.",
"fork": false,
"created_at": "2026-04-07T12:02:52Z",
"updated_at": "2026-08-04T10:53:24Z",
"updated_at": "2026-08-05T02:20:11Z",
"pushed_at": "2026-08-04T10:53:20Z",
"stargazers_count": 15,
"watchers_count": 15,
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 7,
"watchers": 15,
"watchers": 16,
"score": 0,
"subscribers_count": 0
}
2024/CVE-2024-57727.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 918274803,
"name": "CVE-2024-57727",
"full_name": "imjdl\/CVE-2024-57727",
"owner": {
"login": "imjdl",
"id": 31382943,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/31382943?v=4",
"html_url": "https:\/\/github.com\/imjdl",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/imjdl\/CVE-2024-57727",
"description": "CVE-2024-57727",
"fork": false,
"created_at": "2025-01-17T15:45:51Z",
"updated_at": "2026-05-04T22:02:55Z",
"pushed_at": "2025-01-17T16:00:38Z",
"stargazers_count": 15,
"watchers_count": 15,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 15,
"score": 0,
"subscribers_count": 1
}
]
2025/CVE-2025-27840.json
+33
View File
@@ -106,5 +106,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 1323574117,
"name": "esp32-cve-2025-27840-power-trace-experiment",
"full_name": "JasonW88\/esp32-cve-2025-27840-power-trace-experiment",
"owner": {
"login": "JasonW88",
"id": 103770424,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103770424?v=4",
"html_url": "https:\/\/github.com\/JasonW88",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/JasonW88\/esp32-cve-2025-27840-power-trace-experiment",
"description": "Firmware for getting a power trace of the behavior of the bluetooth module on the ESP32 when the ESP32 is sent the undocumented hci bluetooth commands (CVE-2025-27840). Uses ESP-IDF v5.0.8 and v5.0.9.",
"fork": false,
"created_at": "2026-08-05T03:06:49Z",
"updated_at": "2026-08-05T03:40:38Z",
"pushed_at": "2026-08-05T03:40:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-43529.json
+2 -2
View File
@@ -250,7 +250,7 @@
"stargazers_count": 57,
"watchers_count": 57,
"has_discussions": false,
"forks_count": 11,
"forks_count": 12,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -258,7 +258,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 11,
"forks": 12,
"watchers": 57,
"score": 0,
"subscribers_count": 1
2025/CVE-2025-52915.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-08-02T21:44:06Z",
"updated_at": "2026-08-05T06:10:13Z",
"pushed_at": "2026-07-12T09:40:22Z",
"stargazers_count": 881,
"watchers_count": 881,
"stargazers_count": 884,
"watchers_count": 884,
"has_discussions": false,
"forks_count": 131,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 131,
"watchers": 881,
"watchers": 884,
"score": 0,
"subscribers_count": 20
}
2025/CVE-2025-55182.json
+6 -6
View File
@@ -2995,7 +2995,7 @@
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -3003,7 +3003,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"forks": 2,
"watchers": 7,
"score": 0,
"subscribers_count": 0
@@ -3827,10 +3827,10 @@
"description": "RSC\/Next.js RCE Vulnerability Detector & PoC Chrome Extension – CVE-2025-55182 & CVE-2025-66478",
"fork": false,
"created_at": "2025-12-06T00:36:16Z",
"updated_at": "2026-07-24T01:12:11Z",
"updated_at": "2026-08-05T03:24:09Z",
"pushed_at": "2025-12-06T01:27:19Z",
"stargazers_count": 313,
"watchers_count": 313,
"stargazers_count": 314,
"watchers_count": 314,
"has_discussions": false,
"forks_count": 56,
"allow_forking": true,
@@ -3841,7 +3841,7 @@
"topics": [],
"visibility": "public",
"forks": 56,
"watchers": 313,
"watchers": 314,
"score": 0,
"subscribers_count": 5
},
2025/CVE-2025-6440.json
-33
View File
@@ -98,39 +98,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1127117975,
"name": "CVE-2025-6440",
"full_name": "rimbadirgantara\/CVE-2025-6440",
"owner": {
"login": "rimbadirgantara",
"id": 97583410,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97583410?v=4",
"html_url": "https:\/\/github.com\/rimbadirgantara",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/rimbadirgantara\/CVE-2025-6440",
"description": "nuclei tamplate to CVE-2025-6440",
"fork": false,
"created_at": "2026-01-03T08:01:10Z",
"updated_at": "2026-01-09T03:37:46Z",
"pushed_at": "2026-01-03T08:05:01Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1176158613,
"name": "CVE-2025-6440",
2025/CVE-2025-64513.json
+33
View File
@@ -31,5 +31,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1323568803,
"name": "milvus-auth-audit",
"full_name": "qianlijaingshan\/milvus-auth-audit",
"owner": {
"login": "qianlijaingshan",
"id": 208015249,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/208015249?v=4",
"html_url": "https:\/\/github.com\/qianlijaingshan",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/qianlijaingshan\/milvus-auth-audit",
"description": "Milvus 认证安全检测脚本：CVE-2025-64513 (sourceid后门) \/ CVE-2026-26190 (\/expr弱token) \/ 内部端口53100",
"fork": false,
"created_at": "2026-08-05T02:57:51Z",
"updated_at": "2026-08-05T03:52:58Z",
"pushed_at": "2026-08-05T03:52:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-66680.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-13934.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1322370900,
"name": "cve-2026-13934",
"full_name": "ArtWide\/cve-2026-13934",
"owner": {
"login": "ArtWide",
"id": 35958480,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/35958480?v=4",
"html_url": "https:\/\/github.com\/ArtWide",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ArtWide\/cve-2026-13934",
"description": "CVE-2026-13934",
"fork": false,
"created_at": "2026-08-04T01:12:23Z",
"updated_at": "2026-08-05T02:44:43Z",
"pushed_at": "2026-08-05T02:44:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-16723.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Docker labs + defensive scanner for fastjson remote-class-load RCE. fastjson 1.2.66-1.2.83: @JSONType resource probe (CVE-2026-16723). fastjson2 2.0.57: attacker @type reaches loadClass with autoType DISABLED via polymorphic types (@JSONType(seeAlso) \/ Jackson @JsonSubTypes). Marker-only payloads; safeMode + JDK17 controls.",
"fork": false,
"created_at": "2026-07-20T17:00:03Z",
"updated_at": "2026-08-04T02:44:03Z",
"updated_at": "2026-08-05T03:25:03Z",
"pushed_at": "2026-07-27T11:16:07Z",
"stargazers_count": 199,
"watchers_count": 199,
"stargazers_count": 200,
"watchers_count": 200,
"has_discussions": false,
"forks_count": 92,
"allow_forking": true,
@@ -44,7 +44,7 @@
],
"visibility": "public",
"forks": 92,
"watchers": 199,
"watchers": 200,
"score": 0,
"subscribers_count": 3
},
2026/CVE-2026-17532.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1323651759,
"name": "CVE-2026-17532",
"full_name": "kalhoralireza\/CVE-2026-17532",
"owner": {
"login": "kalhoralireza",
"id": 60892991,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/60892991?v=4",
"html_url": "https:\/\/github.com\/kalhoralireza",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/kalhoralireza\/CVE-2026-17532",
"description": "Seraphinite Accelerator <= 2.29.18 - Reflected Cross-Site Scripting PoC",
"fork": false,
"created_at": "2026-08-05T05:09:56Z",
"updated_at": "2026-08-05T05:29:07Z",
"pushed_at": "2026-08-05T05:29:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-20980.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Poc for CVE-2026-20980, CVE-2026-20981, CVE-2026-20982",
"fork": false,
"created_at": "2026-06-01T13:14:47Z",
"updated_at": "2026-07-23T17:42:40Z",
"updated_at": "2026-08-05T06:41:31Z",
"pushed_at": "2026-06-01T17:42:26Z",
"stargazers_count": 40,
"watchers_count": 40,
"stargazers_count": 41,
"watchers_count": 41,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 40,
"watchers": 41,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-26190.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1323568803,
"name": "milvus-auth-audit",
"full_name": "qianlijaingshan\/milvus-auth-audit",
"owner": {
"login": "qianlijaingshan",
"id": 208015249,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/208015249?v=4",
"html_url": "https:\/\/github.com\/qianlijaingshan",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/qianlijaingshan\/milvus-auth-audit",
"description": "Milvus 认证安全检测脚本：CVE-2025-64513 (sourceid后门) \/ CVE-2026-26190 (\/expr弱token) \/ 内部端口53100",
"fork": false,
"created_at": "2026-08-05T02:57:51Z",
"updated_at": "2026-08-05T03:52:58Z",
"pushed_at": "2026-08-05T03:52:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-31431.json
+33
View File
@@ -2395,5 +2395,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1323532777,
"name": "copyfail-guard",
"full_name": "joaocalciolari07\/copyfail-guard",
"owner": {
"login": "joaocalciolari07",
"id": 219327560,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/219327560?v=4",
"html_url": "https:\/\/github.com\/joaocalciolari07",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/joaocalciolari07\/copyfail-guard",
"description": "Defensive detection & mitigation tool for CVE-2026-31431 (\"Copy Fail\") — Linux kernel algif_aead LPE. No exploit code included.",
"fork": false,
"created_at": "2026-08-05T01:58:08Z",
"updated_at": "2026-08-05T01:58:43Z",
"pushed_at": "2026-08-05T01:58:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-3609.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-08-02T21:44:06Z",
"updated_at": "2026-08-05T06:10:13Z",
"pushed_at": "2026-07-12T09:40:22Z",
"stargazers_count": 881,
"watchers_count": 881,
"stargazers_count": 884,
"watchers_count": 884,
"has_discussions": false,
"forks_count": 131,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 131,
"watchers": 881,
"watchers": 884,
"score": 0,
"subscribers_count": 20
}
2026/CVE-2026-42271.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "The code for personally reproducing the corresponding vulnerability",
"fork": false,
"created_at": "2026-05-20T01:12:57Z",
"updated_at": "2026-05-20T01:13:40Z",
"updated_at": "2026-08-05T06:02:09Z",
"pushed_at": "2026-05-20T01:13:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-42945.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": "exploit for CVE-2026-42945",
"fork": false,
"created_at": "2026-05-14T11:38:08Z",
"updated_at": "2026-07-31T17:42:47Z",
"updated_at": "2026-08-05T05:18:11Z",
"pushed_at": "2026-05-14T11:38:47Z",
"stargazers_count": 51,
"watchers_count": 51,
"stargazers_count": 52,
"watchers_count": 52,
"has_discussions": false,
"forks_count": 13,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 13,
"watchers": 51,
"watchers": 52,
"score": 0,
"subscribers_count": 1
},
2026/CVE-2026-43499.json
+29 -22
View File
@@ -348,12 +348,12 @@
"description": "GhostLock (CVE-2026-43499) kernel exploit for OnePlus devices with locked bootloader",
"fork": false,
"created_at": "2026-07-12T16:05:24Z",
"updated_at": "2026-08-04T21:27:05Z",
"updated_at": "2026-08-05T06:43:05Z",
"pushed_at": "2026-08-02T16:12:07Z",
"stargazers_count": 173,
"watchers_count": 173,
"stargazers_count": 184,
"watchers_count": 184,
"has_discussions": false,
"forks_count": 39,
"forks_count": 40,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -368,8 +368,8 @@
"root"
],
"visibility": "public",
"forks": 39,
"watchers": 173,
"forks": 40,
"watchers": 184,
"score": 0,
"subscribers_count": 6
},
@@ -1081,12 +1081,12 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
"updated_at": "2026-08-05T00:41:27Z",
"updated_at": "2026-08-05T06:40:17Z",
"pushed_at": "2026-08-04T12:22:40Z",
"stargazers_count": 585,
"watchers_count": 585,
"stargazers_count": 597,
"watchers_count": 597,
"has_discussions": false,
"forks_count": 86,
"forks_count": 87,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1094,8 +1094,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 86,
"watchers": 585,
"forks": 87,
"watchers": 597,
"score": 0,
"subscribers_count": 19
},
@@ -1826,8 +1826,8 @@
"description": null,
"fork": false,
"created_at": "2026-07-31T07:53:51Z",
"updated_at": "2026-08-04T10:53:53Z",
"pushed_at": "2026-08-04T10:59:53Z",
"updated_at": "2026-08-05T01:56:03Z",
"pushed_at": "2026-08-05T01:55:59Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
@@ -1993,11 +1993,11 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/1ndevelopment\/CVE-2026-43499-S26",
"description": "Root prototype for Galaxy S26 , very much indev",
"description": "Root prototype for Galaxy S26 (SM-S942U) that is very much indev",
"fork": false,
"created_at": "2026-08-01T22:45:30Z",
"updated_at": "2026-08-04T06:14:37Z",
"pushed_at": "2026-08-04T06:14:01Z",
"updated_at": "2026-08-05T05:44:34Z",
"pushed_at": "2026-08-05T05:15:46Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
@@ -2007,7 +2007,14 @@
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"topics": [
"cve-2026-43499",
"galaxy",
"prototype",
"root",
"s26",
"sm-s942u"
],
"visibility": "public",
"forks": 1,
"watchers": 5,
@@ -2095,10 +2102,10 @@
"description": "Jailbreak supported Google Pixel phones with CVE-2026-43499",
"fork": false,
"created_at": "2026-08-02T17:34:45Z",
"updated_at": "2026-08-05T00:08:39Z",
"updated_at": "2026-08-05T06:39:59Z",
"pushed_at": "2026-08-04T08:18:30Z",
"stargazers_count": 68,
"watchers_count": 68,
"stargazers_count": 80,
"watchers_count": 80,
"has_discussions": false,
"forks_count": 14,
"allow_forking": true,
@@ -2109,7 +2116,7 @@
"topics": [],
"visibility": "public",
"forks": 14,
"watchers": 68,
"watchers": 80,
"score": 0,
"subscribers_count": 1
},
2026/CVE-2026-46331.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "PACKET_EDIT_MEME.c (aka CVE-2026-46331): yet another page cache poisoning nightmare",
"fork": false,
"created_at": "2026-06-17T04:09:56Z",
"updated_at": "2026-08-02T12:02:08Z",
"updated_at": "2026-08-05T06:39:41Z",
"pushed_at": "2026-06-17T04:55:06Z",
"stargazers_count": 136,
"watchers_count": 136,
2026/CVE-2026-48908.json
+1 -1
View File
@@ -47,7 +47,7 @@
"description": "Unauthenticated RCE PoC for CVE-2026-48908 — SP Page Builder for Joomla (≤ 6.6.1): arbitrary file upload via asset.uploadCustomIcon. Self-cleaning, token-guarded. Authorized testing only.",
"fork": false,
"created_at": "2026-06-22T09:31:27Z",
"updated_at": "2026-07-25T06:36:52Z",
"updated_at": "2026-08-05T02:46:59Z",
"pushed_at": "2026-06-23T09:11:33Z",
"stargazers_count": 15,
"watchers_count": 15,
2026/CVE-2026-54121.json
+4 -4
View File
@@ -179,10 +179,10 @@
"description": "CVE-2026-54121 (Certighost) AD CS DC-impersonation PoC. Patched SAN handling + MAQ-safe account reuse.",
"fork": false,
"created_at": "2026-07-27T11:04:49Z",
"updated_at": "2026-07-30T19:21:44Z",
"updated_at": "2026-08-05T03:30:24Z",
"pushed_at": "2026-07-27T11:28:22Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -193,7 +193,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 7,
"watchers": 8,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-54917.json
+43
View File
@@ -0,0 +1,43 @@
[
{
"id": 1323525131,
"name": "CVE-2026-54917-SeaweedFS-Cross-Bucket-Traversal",
"full_name": "BiiTts\/CVE-2026-54917-SeaweedFS-Cross-Bucket-Traversal",
"owner": {
"login": "BiiTts",
"id": 149285563,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/149285563?v=4",
"html_url": "https:\/\/github.com\/BiiTts",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/BiiTts\/CVE-2026-54917-SeaweedFS-Cross-Bucket-Traversal",
"description": "PoC + analysis for CVE-2026-54917 — SeaweedFS S3 gateway cross-bucket path traversal (CVSS 10.0, <4.30). Read\/write any bucket via .. in the object key.",
"fork": false,
"created_at": "2026-08-05T01:44:54Z",
"updated_at": "2026-08-05T01:47:03Z",
"pushed_at": "2026-08-05T01:47:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-54917",
"exploit",
"path-traversal",
"poc",
"s3",
"seaweedfs",
"security"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-57827.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE. Split-controller upload bypass. CVSS 9.8 | CWE-434 | com_rsfiles < 1.17.12",
"fork": false,
"created_at": "2026-07-29T20:19:30Z",
"updated_at": "2026-08-03T00:44:32Z",
"updated_at": "2026-08-05T04:55:48Z",
"pushed_at": "2026-07-29T20:38:51Z",
"stargazers_count": 14,
"watchers_count": 14,
"stargazers_count": 15,
"watchers_count": 15,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -42,7 +42,7 @@
],
"visibility": "public",
"forks": 2,
"watchers": 14,
"watchers": 15,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-63030.json
+39 -6
View File
@@ -19,7 +19,7 @@
"stargazers_count": 710,
"watchers_count": 710,
"has_discussions": false,
"forks_count": 164,
"forks_count": 163,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -31,7 +31,7 @@
"wp2shell-poc"
],
"visibility": "public",
"forks": 164,
"forks": 163,
"watchers": 710,
"score": 0,
"subscribers_count": 3
@@ -2345,10 +2345,10 @@
"description": "WordPress All-in-One Exploit Framework — detector, scanner, enumerator, exploit, escalation. 10 CVEs from the 2026-08 wave incl. CVE-2026-63030 (wp2shell).",
"fork": false,
"created_at": "2026-08-04T13:35:24Z",
"updated_at": "2026-08-04T20:35:40Z",
"updated_at": "2026-08-05T05:38:06Z",
"pushed_at": "2026-08-04T13:42:36Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -2359,7 +2359,40 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
{
"id": 1323595578,
"name": "wp2shell-CVE-2026-63030",
"full_name": "minwunn\/wp2shell-CVE-2026-63030",
"owner": {
"login": "minwunn",
"id": 204474038,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/204474038?v=4",
"html_url": "https:\/\/github.com\/minwunn",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/minwunn\/wp2shell-CVE-2026-63030",
"description": null,
"fork": false,
"created_at": "2026-08-05T03:41:39Z",
"updated_at": "2026-08-05T05:59:10Z",
"pushed_at": "2026-08-05T03:41:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-64531.json
+4 -4
View File
@@ -117,10 +117,10 @@
"description": "CVE-2026-64531 (OVSwrap) PoC - Linux kernel Open vSwitch LPE; for patch validation and security research",
"fork": false,
"created_at": "2026-08-03T11:25:09Z",
"updated_at": "2026-08-04T10:58:21Z",
"updated_at": "2026-08-05T03:59:45Z",
"pushed_at": "2026-08-04T10:56:41Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -131,7 +131,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-64600.json
+4 -4
View File
@@ -159,10 +159,10 @@
"description": "A POC for the recently discovered Qualys bug on COW with XFS",
"fork": false,
"created_at": "2026-07-27T06:42:58Z",
"updated_at": "2026-07-30T08:11:04Z",
"updated_at": "2026-08-05T04:49:53Z",
"pushed_at": "2026-07-30T08:06:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -179,7 +179,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-67689.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": null,
"fork": false,
"created_at": "2026-08-05T00:49:10Z",
"updated_at": "2026-08-05T00:49:10Z",
"pushed_at": "2026-08-05T00:49:10Z",
"updated_at": "2026-08-05T00:51:27Z",
"pushed_at": "2026-08-05T00:51:24Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
README.md
+39 -15
View File
@@ -1893,6 +1893,13 @@
- [MichaelAdamGroberman/CVE-2026-13768](https://github.com/MichaelAdamGroberman/CVE-2026-13768)
- [J4ck3LSyN-Gen2/CVE-2026-13768](https://github.com/J4ck3LSyN-Gen2/CVE-2026-13768)
### CVE-2026-13934 (2026-06-30)
<code>Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
</code>
- [ArtWide/cve-2026-13934](https://github.com/ArtWide/cve-2026-13934)
### CVE-2026-14191 (2026-07-01)
<code>An out-of-bounds heap write exists in the RAR5 recovery-volume (.rev) parser in WinRAR and UnRAR (RecVolumes5::ReadHeader in recvol5.cpp). The RecItems vector is sized only when the first .rev file in a set is processed; subsequent .rev files supply an independent RecNum value that is validated against that file's own TotalCount field but never against the actual size of RecItems. A crafted set of two or more .rev files can therefore write an attacker-controlled 32-bit value (the header's RevCRC field) to RecItems[RecNum] at an attacker-controlled offset up to 65534 * sizeof(RecVolItem) bytes past the allocation, corrupting adjacent heap objects. Triggering requires the victim to run a recovery/test operation on an attacker-supplied .rev set (for example 'unrar t x.part1.rev', WinRAR 'Repair archive', or auto-recovery when extracting a volume set with a missing .rar part). This is the RAR5-path sibling of CVE-2023-40477 (which was fixed in the RAR3 path only in WinRAR 6.23). Fixed in WinRAR / RAR 7.23.
@@ -2094,6 +2101,9 @@
- [Hunt-Benito/pgadmin-ai-assistant-sql-injection-cve-2026-17351-lexer-differential-bypass](https://github.com/Hunt-Benito/pgadmin-ai-assistant-sql-injection-cve-2026-17351-lexer-differential-bypass)
### CVE-2026-17532
- [kalhoralireza/CVE-2026-17532](https://github.com/kalhoralireza/CVE-2026-17532)
### CVE-2026-17543 (2026-07-30)
<code>Improper escaping of backslashes in attacker-provided parameters would allow for trivial SQL injection in PHP versions from 8.2.* before 8.2.33, from 8.3.* before 8.3.33, from 8.4.* before 8.4.24, and from 8.5.* before 8.5.9.
@@ -3035,6 +3045,13 @@
- [nikosecurity/CVE-2026-26179](https://github.com/nikosecurity/CVE-2026-26179)
### CVE-2026-26190 (2026-02-13)
<code>Milvus is an open-source vector database built for generative AI applications. Prior to 2.5.27 and 2.6.10, Milvus exposes TCP port 9091 by default, which enables authentication bypasses. The /expr debug endpoint uses a weak, predictable default authentication token derived from etcd.rootPath (default: by-dev), enabling arbitrary expression evaluation. The full REST API (/api/v1/*) is registered on the metrics/management port without any authentication, allowing unauthenticated access to all business operations including data manipulation and credential management. This vulnerability is fixed in 2.5.27 and 2.6.10.
</code>
- [qianlijaingshan/milvus-auth-audit](https://github.com/qianlijaingshan/milvus-auth-audit)
### CVE-2026-26216 (2026-02-12)
<code>Crawl4AI versions prior to 0.8.0 contain a remote code execution vulnerability in the Docker API deployment. The /crawl endpoint accepts a hooks parameter containing Python code that is executed using exec(). The __import__ builtin was included in the allowed builtins, allowing unauthenticated remote attackers to import arbitrary modules and execute system commands. Successful exploitation allows full server compromise, including arbitrary command execution, file read and write access, sensitive data exfiltration, and lateral movement within internal networks.
@@ -3480,6 +3497,7 @@
- [TeamN4C/SG-2026-0013](https://github.com/TeamN4C/SG-2026-0013)
- [TrevoCastles/CVE-2026-31431-copy-fail](https://github.com/TrevoCastles/CVE-2026-31431-copy-fail)
- [dev1681/CVE-2026-31431](https://github.com/dev1681/CVE-2026-31431)
- [joaocalciolari07/copyfail-guard](https://github.com/joaocalciolari07/copyfail-guard)
### CVE-2026-31525 (2026-04-22)
@@ -6748,6 +6766,13 @@
- [HORKimhab/CVE-2026-54900](https://github.com/HORKimhab/CVE-2026-54900)
### CVE-2026-54917 (2026-06-25)
<code>SeaweedFS is a distributed storage system for object storage (S3), file systems, and Iceberg tables. Prior to 4.30, the S3 API gateway and the Iceberg REST catalog gateway construct their routers with mux.NewRouter().SkipClean(true). With path cleaning disabled, a .. segment inside the URL survives routing, so a request such as `GET /bucket-A/../evil-bucket/key`, is matched as bucket=bucket-A, object=../evil-bucket/key. The captured object key is then joined into a filer path with util.JoinPath (S3) / path.Join (Iceberg), which collapse the .. server-side, so the actual read or write lands in evil-bucket. This vulnerability is fixed in 4.30.
</code>
- [BiiTts/CVE-2026-54917-SeaweedFS-Cross-Bucket-Traversal](https://github.com/BiiTts/CVE-2026-54917-SeaweedFS-Cross-Bucket-Traversal)
### CVE-2026-54992 (2026-07-14)
<code>Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code locally.
@@ -7256,6 +7281,7 @@
- [Procjevt/CVE-2026-63030](https://github.com/Procjevt/CVE-2026-63030)
- [x-znn/CVE-2026-63030](https://github.com/x-znn/CVE-2026-63030)
- [rechandra/wp2exp-2026](https://github.com/rechandra/wp2exp-2026)
- [minwunn/wp2shell-CVE-2026-63030](https://github.com/minwunn/wp2shell-CVE-2026-63030)
### CVE-2026-63077 (2026-07-27)
@@ -9139,7 +9165,6 @@
- [AnotherSec/CVE-2025-6440](https://github.com/AnotherSec/CVE-2025-6440)
- [Nxploited/CVE-2025-6440](https://github.com/Nxploited/CVE-2025-6440)
- [m2hcz/CVE-2025-6440-Poc-Exploit](https://github.com/m2hcz/CVE-2025-6440-Poc-Exploit)
- [rimbadirgantara/CVE-2025-6440](https://github.com/rimbadirgantara/CVE-2025-6440)
- [0axz-tools/CVE-2025-6440](https://github.com/0axz-tools/CVE-2025-6440)
- [sahmsec/CVE-2025-6440](https://github.com/sahmsec/CVE-2025-6440)
- [Cyber-DarkNay/CVE-2025-6440](https://github.com/Cyber-DarkNay/CVE-2025-6440)
@@ -12335,6 +12360,7 @@
- [em0gi/CVE-2025-27840](https://github.com/em0gi/CVE-2025-27840)
- [demining/Bluetooth-Attacks-CVE-2025-27840](https://github.com/demining/Bluetooth-Attacks-CVE-2025-27840)
- [ladyg00se/CVE-2025-27840-WIP](https://github.com/ladyg00se/CVE-2025-27840-WIP)
- [JasonW88/esp32-cve-2025-27840-power-trace-experiment](https://github.com/JasonW88/esp32-cve-2025-27840-power-trace-experiment)
### CVE-2025-27893 (2025-03-11)
@@ -18120,6 +18146,7 @@
</code>
- [shinyseam/CVE-2025-64513](https://github.com/shinyseam/CVE-2025-64513)
- [qianlijaingshan/milvus-auth-audit](https://github.com/qianlijaingshan/milvus-auth-audit)
### CVE-2025-64516 (2026-01-15)
@@ -18781,9 +18808,6 @@
- [wcnmwcis/CVE-2026-22777](https://github.com/wcnmwcis/CVE-2026-22777)
- [jcaz2378/ComfyUIrce](https://github.com/jcaz2378/ComfyUIrce)
### CVE-2025-67315
- [r-pradyun/CVE-2025-67315](https://github.com/r-pradyun/CVE-2025-67315)
### CVE-2025-67325 (2026-01-08)
<code>Unrestricted file upload in the hotel review feature in QloApps versions 1.7.0 and earlier allows remote unauthenticated attackers to achieve remote code execution.
@@ -23206,6 +23230,8 @@
- [Dhananjayasj/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability](https://github.com/Dhananjayasj/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability)
- [H1ssBl1tz/Blind-Trust-CVE-2024-21413-Research](https://github.com/H1ssBl1tz/Blind-Trust-CVE-2024-21413-Research)
- [YoguiCR/CVE-2024-21413-Outlook-Assessment](https://github.com/YoguiCR/CVE-2024-21413-Outlook-Assessment)
- [h4cknain/CVE-2024-21413-Microsoft-Outlook-Moniker-Link-Vulnerability](https://github.com/h4cknain/CVE-2024-21413-Microsoft-Outlook-Moniker-Link-Vulnerability)
- [OmarMahmoud1024/tryhackme-monikerlink-writeup](https://github.com/OmarMahmoud1024/tryhackme-monikerlink-writeup)
### CVE-2024-21490 (2024-02-10)
@@ -29587,7 +29613,6 @@
</code>
- [RandomRobbieBF/CVE-2024-52380](https://github.com/RandomRobbieBF/CVE-2024-52380)
- [Nxploited/CVE-2024-52380-Exploit](https://github.com/Nxploited/CVE-2024-52380-Exploit)
### CVE-2024-52382 (2024-11-14)
@@ -30413,13 +30438,6 @@
- [pointedsec/CVE-2024-57725](https://github.com/pointedsec/CVE-2024-57725)
### CVE-2024-57727 (2025-01-15)
<code>SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files include server configuration files containing various secrets and hashed user passwords.
</code>
- [imjdl/CVE-2024-57727](https://github.com/imjdl/CVE-2024-57727)
### CVE-2024-57778 (2025-02-14)
<code>An issue in Orbe ONetView Roeador Onet-1200 Orbe 1680210096 allows a remote attacker to escalate privileges via the servers response from status code 500 to status code 200.
@@ -32159,7 +32177,6 @@
</code>
- [yoryio/CVE-2023-7028](https://github.com/yoryio/CVE-2023-7028)
- [hackeremmen/gitlab-exploit](https://github.com/hackeremmen/gitlab-exploit)
- [soltanali0/CVE-2023-7028](https://github.com/soltanali0/CVE-2023-7028)
- [gh-ost00/CVE-2023-7028](https://github.com/gh-ost00/CVE-2023-7028)
- [sariamubeen/CVE-2023-7028](https://github.com/sariamubeen/CVE-2023-7028)
@@ -32350,6 +32367,13 @@
- [kasnria001/pwnage24mtk](https://github.com/kasnria001/pwnage24mtk)
- [wzy114514sb/pwnage24mtk](https://github.com/wzy114514sb/pwnage24mtk)
### CVE-2023-20768 (2023-07-04)
<code>In ion, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07560720; Issue ID: ALPS07559800.
</code>
- [murf-xd/cve-2023-20768](https://github.com/murf-xd/cve-2023-20768)
### CVE-2023-20860 (2023-03-27)
<code>Spring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using &quot;**&quot; as a pattern in Spring Security configuration with the mvcRequestMatcher creates a mismatch in pattern matching between Spring Security and Spring MVC, and the potential for a security bypass.
@@ -32902,7 +32926,7 @@
- [0x0d3ad/CVE-2023-22518](https://github.com/0x0d3ad/CVE-2023-22518)
- [C1ph3rX13/CVE-2023-22518](https://github.com/C1ph3rX13/CVE-2023-22518)
- [Lilly-dox/Exploit-CVE-2023-22518](https://github.com/Lilly-dox/Exploit-CVE-2023-22518)
- [ductink98lhp/analyze-Exploit-CVE-2023-22518-Confluence](https://github.com/ductink98lhp/analyze-Exploit-CVE-2023-22518-Confluence)
- [d3ckkNo0b/analyze-Exploit-CVE-2023-22518-Confluence](https://github.com/d3ckkNo0b/analyze-Exploit-CVE-2023-22518-Confluence)
### CVE-2023-22524 (2023-12-06)
@@ -42598,6 +42622,7 @@
- [s3l33/CVE-2022-25012](https://github.com/s3l33/CVE-2022-25012)
- [G4sp4rCS/CVE-2022-25012-POC](https://github.com/G4sp4rCS/CVE-2022-25012-POC)
- [XK3NF4/CVE-2022-25012](https://github.com/XK3NF4/CVE-2022-25012)
- [m1kb0k/CVE-2022-25012-dvr4-weak-password-encryption](https://github.com/m1kb0k/CVE-2022-25012-dvr4-weak-password-encryption)
### CVE-2022-25018 (2022-03-01)
@@ -64722,7 +64747,6 @@
</code>
- [diwangs/react16-ssr](https://github.com/diwangs/react16-ssr)
- [nitindevelopermca/react-CVE-2018-6341](https://github.com/nitindevelopermca/react-CVE-2018-6341)
### CVE-2018-6376 (2018-01-30)