nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/09/24 07:42:19

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-09-24 16:42:19 +09:00
1 parent b97a51a474
commit 41546cfb8a
76 files changed
+573 -385
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2017/CVE-2017-12615.json
+4 -4
View File
@@ -410,10 +410,10 @@
"description": "tomcat自动化漏洞扫描利用工具，支持批量弱口令检测、后台部署war包getshell、CVE-2017-12615 文件上传、CVE-2020-1938\/CNVD-2020-10487 文件包含",
"fork": false,
"created_at": "2024-08-29T06:38:16Z",
"updated_at": "2026-09-21T06:22:19Z",
"updated_at": "2026-09-24T03:49:53Z",
"pushed_at": "2026-06-16T13:16:53Z",
"stargazers_count": 296,
"watchers_count": 296,
"stargazers_count": 295,
"watchers_count": 295,
"has_discussions": false,
"forks_count": 26,
"allow_forking": true,
@@ -432,7 +432,7 @@
],
"visibility": "public",
"forks": 26,
"watchers": 296,
"watchers": 295,
"score": 0,
"subscribers_count": 2
},
2017/CVE-2017-5638.json
+2 -2
View File
@@ -2665,8 +2665,8 @@
"description": "Using Struts2 and PowerShell to recreate CVE-2017-5638 OGNL Injection vulnerability.",
"fork": false,
"created_at": "2026-04-05T14:14:52Z",
"updated_at": "2026-04-27T08:14:43Z",
"pushed_at": "2026-04-27T08:14:00Z",
"updated_at": "2026-09-24T02:27:57Z",
"pushed_at": "2026-09-24T02:25:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2018/CVE-2018-9995.json
+4 -4
View File
@@ -146,10 +146,10 @@
"description": "DVR-Exploiter a Bash Script Program Exploit The DVR's Based on CVE-2018-9995",
"fork": false,
"created_at": "2018-09-23T20:58:40Z",
"updated_at": "2026-08-31T23:04:11Z",
"updated_at": "2026-09-24T03:00:30Z",
"pushed_at": "2018-10-11T16:54:31Z",
"stargazers_count": 113,
"watchers_count": 113,
"stargazers_count": 112,
"watchers_count": 112,
"has_discussions": false,
"forks_count": 35,
"allow_forking": true,
@@ -160,7 +160,7 @@
"topics": [],
"visibility": "public",
"forks": 35,
"watchers": 113,
"watchers": 112,
"score": 0,
"subscribers_count": 14
},
2019/CVE-2019-11932.json
+4 -4
View File
@@ -426,10 +426,10 @@
"description": "Whatsapp remote code execution CVE-2019-11932 https:\/\/awakened1712.github.io\/hacking\/hacking-whatsapp-gif-rce\/",
"fork": false,
"created_at": "2021-03-19T16:41:31Z",
"updated_at": "2026-09-13T22:04:01Z",
"updated_at": "2026-09-24T04:38:11Z",
"pushed_at": "2021-11-17T14:40:14Z",
"stargazers_count": 27,
"watchers_count": 27,
"stargazers_count": 28,
"watchers_count": 28,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -440,7 +440,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 27,
"watchers": 28,
"score": 0,
"subscribers_count": 2
},
2019/CVE-2019-17558.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340",
"fork": false,
"created_at": "2020-04-01T09:33:35Z",
"updated_at": "2026-09-20T13:26:17Z",
"updated_at": "2026-09-24T06:08:49Z",
"pushed_at": "2021-04-04T09:13:57Z",
"stargazers_count": 4295,
"watchers_count": 4295,
"stargazers_count": 4294,
"watchers_count": 4294,
"has_discussions": false,
"forks_count": 1079,
"allow_forking": true,
@@ -81,7 +81,7 @@
],
"visibility": "public",
"forks": 1079,
"watchers": 4295,
"watchers": 4294,
"score": 0,
"subscribers_count": 148
},
2019/CVE-2019-6693.json
+6 -6
View File
@@ -80,12 +80,12 @@
"description": "An authorized remote user with access or knowledge of the standard encryption key can gain access and decrypt the FortiOS backup files and all non-administator passwords, private keys and High Availability passwords.",
"fork": false,
"created_at": "2023-12-08T11:00:40Z",
"updated_at": "2026-06-27T23:00:53Z",
"updated_at": "2026-09-24T02:45:00Z",
"pushed_at": "2023-12-19T16:39:37Z",
"stargazers_count": 28,
"watchers_count": 28,
"stargazers_count": 29,
"watchers_count": 29,
"has_discussions": false,
"forks_count": 6,
"forks_count": 7,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -93,8 +93,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 28,
"forks": 7,
"watchers": 29,
"score": 0,
"subscribers_count": 2
},
2020/CVE-2020-11896.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "RCE exploit for CVE-2020-11896 (Ripple20 IP-in-IP Heap Overflow Vulnerability) targeting Digi Connect ME 9210",
"fork": false,
"created_at": "2022-11-30T18:44:25Z",
"updated_at": "2026-08-24T14:52:09Z",
"updated_at": "2026-09-24T02:30:55Z",
"pushed_at": "2022-11-30T18:46:27Z",
"stargazers_count": 9,
"watchers_count": 9,
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 9,
"watchers": 10,
"score": 0,
"subscribers_count": 1
}
2020/CVE-2020-14882.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340",
"fork": false,
"created_at": "2020-04-01T09:33:35Z",
"updated_at": "2026-09-20T13:26:17Z",
"updated_at": "2026-09-24T06:08:49Z",
"pushed_at": "2021-04-04T09:13:57Z",
"stargazers_count": 4295,
"watchers_count": 4295,
"stargazers_count": 4294,
"watchers_count": 4294,
"has_discussions": false,
"forks_count": 1079,
"allow_forking": true,
@@ -48,7 +48,7 @@
],
"visibility": "public",
"forks": 1079,
"watchers": 4295,
"watchers": 4294,
"score": 0,
"subscribers_count": 148
},
2020/CVE-2020-1938.json
+4 -4
View File
@@ -977,10 +977,10 @@
"description": "tomcat自动化漏洞扫描利用工具，支持批量弱口令检测、后台部署war包getshell、CVE-2017-12615 文件上传、CVE-2020-1938\/CNVD-2020-10487 文件包含",
"fork": false,
"created_at": "2024-08-29T06:38:16Z",
"updated_at": "2026-09-21T06:22:19Z",
"updated_at": "2026-09-24T03:49:53Z",
"pushed_at": "2026-06-16T13:16:53Z",
"stargazers_count": 296,
"watchers_count": 296,
"stargazers_count": 295,
"watchers_count": 295,
"has_discussions": false,
"forks_count": 26,
"allow_forking": true,
@@ -999,7 +999,7 @@
],
"visibility": "public",
"forks": 26,
"watchers": 296,
"watchers": 295,
"score": 0,
"subscribers_count": 2
},
2020/CVE-2020-24586.json
+1 -1
View File
@@ -15,7 +15,7 @@
"fork": false,
"created_at": "2026-04-12T16:30:45Z",
"updated_at": "2026-09-05T15:19:07Z",
"pushed_at": "2026-09-23T04:55:29Z",
"pushed_at": "2026-09-24T04:58:14Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2021/CVE-2021-1931.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "Unlock the Meta Quest 1 bootloader and gain root access using GhostLock + CVE-2021-1931.",
"fork": false,
"created_at": "2026-07-31T05:37:56Z",
"updated_at": "2026-09-23T04:47:56Z",
"updated_at": "2026-09-24T05:34:52Z",
"pushed_at": "2026-08-28T12:08:00Z",
"stargazers_count": 201,
"watchers_count": 201,
"stargazers_count": 203,
"watchers_count": 203,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -108,7 +108,7 @@
],
"visibility": "public",
"forks": 8,
"watchers": 201,
"watchers": 203,
"score": 0,
"subscribers_count": 5
}
2021/CVE-2021-44967.json
+3 -3
View File
@@ -47,11 +47,11 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/godylockz\/CVE-2021-44967",
"description": "POC for CVE-2021-44967: LimeSurvey RCE",
"description": "Proof of concept for CVE-2021-44967: LimeSurvey authenticated RCE",
"fork": false,
"created_at": "2025-02-17T04:55:23Z",
"updated_at": "2025-02-20T07:34:10Z",
"pushed_at": "2025-02-17T05:33:43Z",
"updated_at": "2026-09-24T04:16:41Z",
"pushed_at": "2026-09-24T04:17:13Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2022/CVE-2022-0847.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": "A root exploit for CVE-2022-0847 (Dirty Pipe)",
"fork": false,
"created_at": "2022-03-07T18:55:20Z",
"updated_at": "2026-09-17T02:55:36Z",
"updated_at": "2026-09-24T06:27:38Z",
"pushed_at": "2022-03-08T06:20:05Z",
"stargazers_count": 1131,
"watchers_count": 1131,
"stargazers_count": 1132,
"watchers_count": 1132,
"has_discussions": false,
"forks_count": 220,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 220,
"watchers": 1131,
"watchers": 1132,
"score": 0,
"subscribers_count": 17
},
2023/CVE-2023-32434.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "Deterministic kernel exploit based on CVE-2023-32434.",
"fork": false,
"created_at": "2025-03-01T23:07:37Z",
"updated_at": "2026-09-18T10:43:27Z",
"updated_at": "2026-09-24T02:49:46Z",
"pushed_at": "2026-05-14T20:54:50Z",
"stargazers_count": 144,
"watchers_count": 144,
"stargazers_count": 145,
"watchers_count": 145,
"has_discussions": false,
"forks_count": 18,
"forks_count": 19,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 18,
"watchers": 144,
"forks": 19,
"watchers": 145,
"score": 0,
"subscribers_count": 5
},
2023/CVE-2023-40028.json
+3 -3
View File
@@ -185,11 +185,11 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/godylockz\/CVE-2023-40028",
"description": "POC for CVE-2023-40028: Ghost CMS Arbitrary File Read",
"description": "Proof of concept for CVE-2023-40028: Ghost arbitrary file read",
"fork": false,
"created_at": "2025-01-20T22:01:38Z",
"updated_at": "2025-05-11T08:40:39Z",
"pushed_at": "2025-02-16T07:47:29Z",
"updated_at": "2026-09-24T04:16:42Z",
"pushed_at": "2026-09-24T04:17:13Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2023/CVE-2023-45866.json
+5 -5
View File
@@ -14,10 +14,10 @@
"description": "🚨 CVE-2023-45866 - BlueDucky Implementation (Using DuckyScript) 🔓 Unauthenticated Peering Leading to Code Execution (Using HID Keyboard)",
"fork": false,
"created_at": "2024-01-16T06:52:02Z",
"updated_at": "2026-09-23T05:29:19Z",
"updated_at": "2026-09-24T03:43:07Z",
"pushed_at": "2026-02-11T00:03:00Z",
"stargazers_count": 1886,
"watchers_count": 1886,
"stargazers_count": 1885,
"watchers_count": 1885,
"has_discussions": false,
"forks_count": 321,
"allow_forking": true,
@@ -28,9 +28,9 @@
"topics": [],
"visibility": "public",
"forks": 321,
"watchers": 1886,
"watchers": 1885,
"score": 0,
"subscribers_count": 29
"subscribers_count": 30
},
{
"id": 743886715,
2024/CVE-2024-0670.json
+2 -2
View File
@@ -118,8 +118,8 @@
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
"fork": false,
"created_at": "2026-01-08T01:32:09Z",
"updated_at": "2026-09-24T01:11:39Z",
"pushed_at": "2026-09-24T01:11:36Z",
"updated_at": "2026-09-24T06:49:53Z",
"pushed_at": "2026-09-24T06:49:48Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-23897.json
+3 -3
View File
@@ -612,11 +612,11 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/godylockz\/CVE-2024-23897",
"description": "POC for CVE-2024-23897 Jenkins File-Read ",
"description": "Proof of concept for CVE-2024-23897: Jenkins arbitrary file read",
"fork": false,
"created_at": "2024-02-16T07:16:04Z",
"updated_at": "2026-09-13T00:38:43Z",
"pushed_at": "2025-11-20T14:47:18Z",
"updated_at": "2026-09-24T04:16:45Z",
"pushed_at": "2026-09-24T04:17:13Z",
"stargazers_count": 45,
"watchers_count": 45,
"has_discussions": false,
2024/CVE-2024-34740.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "Writeup and exploit for CVE-2024-34740, integer overflow in Android's BinaryXmlSerializer to system_server file write and then to system_server code execution from normal installed app",
"fork": false,
"created_at": "2025-10-08T12:54:02Z",
"updated_at": "2026-09-22T05:21:58Z",
"updated_at": "2026-09-24T03:55:07Z",
"pushed_at": "2025-10-08T12:54:46Z",
"stargazers_count": 80,
"watchers_count": 80,
"stargazers_count": 81,
"watchers_count": 81,
"has_discussions": false,
"forks_count": 29,
"forks_count": 30,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 29,
"watchers": 80,
"forks": 30,
"watchers": 81,
"score": 0,
"subscribers_count": 2
}
2024/CVE-2024-38063.json
+4 -37
View File
@@ -182,10 +182,10 @@
"description": "poc for CVE-2024-38063 (RCE in tcpip.sys)",
"fork": false,
"created_at": "2024-08-24T18:25:46Z",
"updated_at": "2026-09-13T13:01:49Z",
"updated_at": "2026-09-24T07:16:30Z",
"pushed_at": "2024-08-27T12:22:39Z",
"stargazers_count": 691,
"watchers_count": 691,
"stargazers_count": 689,
"watchers_count": 689,
"has_discussions": false,
"forks_count": 122,
"allow_forking": true,
@@ -196,7 +196,7 @@
"topics": [],
"visibility": "public",
"forks": 122,
"watchers": 691,
"watchers": 689,
"score": 0,
"subscribers_count": 5
},
@@ -365,39 +365,6 @@
"score": 0,
"subscribers_count": 2
},
{
"id": 850609409,
"name": "CVE-2024-38063_PoC",
"full_name": "KernelKraze\/CVE-2024-38063_PoC",
"owner": {
"login": "KernelKraze",
"id": 82752974,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/82752974?v=4",
"html_url": "https:\/\/github.com\/KernelKraze",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/KernelKraze\/CVE-2024-38063_PoC",
"description": "This is a C language program designed to test the Windows TCP\/IP Remote Code Execution Vulnerability (CVE-2024-38063). It sends specially crafted IPv6 packets with embedded shellcode to exploit the vulnerability.",
"fork": false,
"created_at": "2024-09-01T09:20:02Z",
"updated_at": "2025-10-26T10:35:09Z",
"pushed_at": "2024-09-08T07:12:26Z",
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 9,
"score": 0,
"subscribers_count": 1
},
{
"id": 851150728,
"name": "cve-2024-38063",
2024/CVE-2024-42327.json
+3 -3
View File
@@ -242,11 +242,11 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/godylockz\/CVE-2024-42327",
"description": "POC for CVE-2024-42327: Zabbix Privilege Escalation -> RCE",
"description": "Proof of concept for CVE-2024-42327: Zabbix privilege escalation to RCE",
"fork": false,
"created_at": "2025-02-16T07:33:38Z",
"updated_at": "2025-11-03T08:51:23Z",
"pushed_at": "2025-02-17T05:05:47Z",
"updated_at": "2026-09-24T04:16:47Z",
"pushed_at": "2026-09-24T04:17:13Z",
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
2024/CVE-2024-49112.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "CVE-2024-49112 LDAP RCE PoC and Metasploit Module",
"fork": false,
"created_at": "2025-01-08T01:56:41Z",
"updated_at": "2026-04-26T20:19:30Z",
"updated_at": "2026-09-24T07:16:32Z",
"pushed_at": "2025-01-14T21:22:05Z",
"stargazers_count": 12,
"watchers_count": 12,
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 12,
"watchers": 11,
"score": 0,
"subscribers_count": 1
}
2024/CVE-2024-49113.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "LdapNightmare is a PoC tool that tests a vulnerable Windows Server against CVE-2024-49113",
"fork": false,
"created_at": "2025-01-01T15:48:38Z",
"updated_at": "2026-09-23T05:29:58Z",
"updated_at": "2026-09-24T07:16:31Z",
"pushed_at": "2025-01-02T16:07:23Z",
"stargazers_count": 518,
"watchers_count": 518,
"stargazers_count": 517,
"watchers_count": 517,
"has_discussions": false,
"forks_count": 119,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 119,
"watchers": 518,
"watchers": 517,
"score": 0,
"subscribers_count": 5
},
2024/CVE-2024-53677.json
+2 -2
View File
@@ -324,7 +324,7 @@
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 2,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -332,7 +332,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"forks": 3,
"watchers": 3,
"score": 0,
"subscribers_count": 2
2024/CVE-2024-55591.json
+4 -4
View File
@@ -146,10 +146,10 @@
"description": null,
"fork": false,
"created_at": "2025-01-27T06:25:53Z",
"updated_at": "2026-09-17T02:59:10Z",
"updated_at": "2026-09-24T03:43:15Z",
"pushed_at": "2025-01-27T19:11:46Z",
"stargazers_count": 76,
"watchers_count": 76,
"stargazers_count": 75,
"watchers_count": 75,
"has_discussions": false,
"forks_count": 17,
"allow_forking": true,
@@ -160,7 +160,7 @@
"topics": [],
"visibility": "public",
"forks": 17,
"watchers": 76,
"watchers": 75,
"score": 0,
"subscribers_count": 2
},
2024/CVE-2024-6387.json
+8 -8
View File
@@ -113,10 +113,10 @@
"description": "MIRROR of the original 32-bit PoC for CVE-2024-6387 \"regreSSHion\" by 7etsuo\/cve-2024-6387-poc",
"fork": false,
"created_at": "2024-07-01T12:26:40Z",
"updated_at": "2026-09-23T05:29:38Z",
"updated_at": "2026-09-24T07:16:29Z",
"pushed_at": "2024-07-25T04:23:11Z",
"stargazers_count": 128,
"watchers_count": 128,
"stargazers_count": 127,
"watchers_count": 127,
"has_discussions": false,
"forks_count": 40,
"allow_forking": true,
@@ -134,7 +134,7 @@
],
"visibility": "public",
"forks": 40,
"watchers": 128,
"watchers": 127,
"score": 0,
"subscribers_count": 3
},
@@ -153,10 +153,10 @@
"description": "PoC RCE in OpenSSH",
"fork": false,
"created_at": "2024-07-01T12:51:18Z",
"updated_at": "2026-09-09T01:06:35Z",
"updated_at": "2026-09-24T07:16:29Z",
"pushed_at": "2024-07-01T13:34:47Z",
"stargazers_count": 25,
"watchers_count": 25,
"stargazers_count": 24,
"watchers_count": 24,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -167,7 +167,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 25,
"watchers": 24,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-0133.json
+8 -8
View File
@@ -47,10 +47,10 @@
"description": " CVE-2025-0133 GlobalProtect XSS",
"fork": false,
"created_at": "2025-06-17T17:59:08Z",
"updated_at": "2026-07-08T12:36:57Z",
"updated_at": "2026-09-24T03:43:20Z",
"pushed_at": "2025-06-17T18:04:53Z",
"stargazers_count": 21,
"watchers_count": 21,
"stargazers_count": 20,
"watchers_count": 20,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 21,
"watchers": 20,
"score": 0,
"subscribers_count": 0
},
@@ -113,10 +113,10 @@
"description": "Reflected XSS vulnerability found in Palo Alto GlobalProtect Gateway & Portal. Attackers can inject malicious scripts via crafted requests. ",
"fork": false,
"created_at": "2025-06-24T10:25:32Z",
"updated_at": "2026-05-04T18:05:01Z",
"updated_at": "2026-09-24T05:25:24Z",
"pushed_at": "2025-06-24T11:13:29Z",
"stargazers_count": 10,
"watchers_count": 10,
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -134,7 +134,7 @@
],
"visibility": "public",
"forks": 2,
"watchers": 10,
"watchers": 11,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-14847.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
"fork": false,
"created_at": "2025-07-30T15:52:00Z",
"updated_at": "2026-09-24T01:12:46Z",
"pushed_at": "2026-09-24T01:12:42Z",
"updated_at": "2026-09-24T06:51:03Z",
"pushed_at": "2026-09-24T06:51:00Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1093,8 +1093,8 @@
"description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
"fork": false,
"created_at": "2026-01-14T06:05:44Z",
"updated_at": "2026-09-24T01:12:33Z",
"pushed_at": "2026-09-24T01:12:29Z",
"updated_at": "2026-09-24T06:50:48Z",
"pushed_at": "2026-09-24T06:50:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-24813.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": "his repository contains an automated Proof of Concept (PoC) script for exploiting **CVE-2025-24813**, a Remote Code Execution (RCE) vulnerability in Apache Tomcat. The vulnerability allows an attacker to upload a malicious serialized payload to the server, leading to arbitrary code execution via deserialization when specific conditions are met.",
"fork": false,
"created_at": "2025-03-14T07:36:58Z",
"updated_at": "2026-09-07T04:33:14Z",
"updated_at": "2026-09-24T02:57:20Z",
"pushed_at": "2025-03-14T07:57:27Z",
"stargazers_count": 198,
"watchers_count": 198,
"stargazers_count": 197,
"watchers_count": 197,
"has_discussions": false,
"forks_count": 42,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 42,
"watchers": 198,
"watchers": 197,
"score": 0,
"subscribers_count": 2
},
2025/CVE-2025-32023.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "PoC & Exploit for CVE-2025-32023 \/ PlaidCTF 2025 \"Zerodeo\"",
"fork": false,
"created_at": "2025-07-06T18:09:11Z",
"updated_at": "2026-09-17T02:59:50Z",
"updated_at": "2026-09-24T03:48:29Z",
"pushed_at": "2025-07-06T18:58:01Z",
"stargazers_count": 214,
"watchers_count": 214,
"stargazers_count": 213,
"watchers_count": 213,
"has_discussions": false,
"forks_count": 39,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 39,
"watchers": 214,
"watchers": 213,
"score": 0,
"subscribers_count": 4
},
2025/CVE-2025-36911.json
+4 -4
View File
@@ -86,10 +86,10 @@
"description": "WPair is a defensive security research tool that demonstrates the CVE-2025-36911 (eg WhisperPair) vulnerability in Google's Fast Pair protocol. This vulnerability affects millions of Bluetooth audio devices worldwide, allowing unauthorized pairing and potential microphone access without user consent.",
"fork": false,
"created_at": "2026-01-17T05:28:08Z",
"updated_at": "2026-09-23T04:14:49Z",
"updated_at": "2026-09-24T07:17:05Z",
"pushed_at": "2026-01-18T00:15:59Z",
"stargazers_count": 847,
"watchers_count": 847,
"stargazers_count": 848,
"watchers_count": 848,
"has_discussions": false,
"forks_count": 94,
"allow_forking": true,
@@ -100,7 +100,7 @@
"topics": [],
"visibility": "public",
"forks": 94,
"watchers": 847,
"watchers": 848,
"score": 0,
"subscribers_count": 23
},
2025/CVE-2025-39964.json
+5 -5
View File
@@ -80,10 +80,10 @@
"description": "Neutralizing CISA active Linux kernel CVEs (CVE-2025-39964, CVE-2026-53266, CVE-2025-39682) via modern eBPF, module disarmament, and containerd user namespaces.",
"fork": false,
"created_at": "2026-09-22T10:06:44Z",
"updated_at": "2026-09-23T20:57:49Z",
"pushed_at": "2026-09-23T20:57:46Z",
"stargazers_count": 1,
"watchers_count": 1,
"updated_at": "2026-09-24T03:24:51Z",
"pushed_at": "2026-09-24T03:23:26Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -104,7 +104,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-49844.json
+2 -2
View File
@@ -66,8 +66,8 @@
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
"fork": false,
"created_at": "2022-04-06T09:27:39Z",
"updated_at": "2026-09-24T01:02:48Z",
"pushed_at": "2026-09-24T01:02:45Z",
"updated_at": "2026-09-24T06:41:08Z",
"pushed_at": "2026-09-24T06:41:04Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-52915.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-09-23T12:14:29Z",
"updated_at": "2026-09-24T02:21:31Z",
"pushed_at": "2026-08-18T12:25:25Z",
"stargazers_count": 954,
"watchers_count": 954,
"stargazers_count": 955,
"watchers_count": 955,
"has_discussions": false,
"forks_count": 140,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 140,
"watchers": 954,
"watchers": 955,
"score": 0,
"subscribers_count": 22
}
2025/CVE-2025-54068.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "A tool designed to exploit CVE-2025-54068 and Remote Command Execution if the APP_KEY of the Livewire project is known.",
"fork": false,
"created_at": "2025-12-23T09:54:54Z",
"updated_at": "2026-09-21T11:09:36Z",
"updated_at": "2026-09-24T03:15:06Z",
"pushed_at": "2026-07-16T13:09:29Z",
"stargazers_count": 149,
"watchers_count": 149,
"stargazers_count": 150,
"watchers_count": 150,
"has_discussions": false,
"forks_count": 34,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 34,
"watchers": 149,
"watchers": 150,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-55182.json
+12 -12
View File
@@ -99,8 +99,8 @@
"description": null,
"fork": false,
"created_at": "2024-11-29T12:32:19Z",
"updated_at": "2026-09-24T01:09:38Z",
"pushed_at": "2026-09-24T01:09:34Z",
"updated_at": "2026-09-24T06:47:48Z",
"pushed_at": "2026-09-24T06:47:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -148,8 +148,8 @@
"description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
"fork": false,
"created_at": "2025-06-06T16:34:46Z",
"updated_at": "2026-09-24T01:09:29Z",
"pushed_at": "2026-09-24T01:09:26Z",
"updated_at": "2026-09-24T06:47:39Z",
"pushed_at": "2026-09-24T06:47:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -4859,12 +4859,12 @@
"description": "React Shell & Next.js RSC Exploit Tool (CVE-2025-55182)",
"fork": false,
"created_at": "2025-12-06T21:54:13Z",
"updated_at": "2026-09-23T05:30:52Z",
"updated_at": "2026-09-24T03:43:23Z",
"pushed_at": "2025-12-12T11:11:17Z",
"stargazers_count": 265,
"watchers_count": 265,
"stargazers_count": 264,
"watchers_count": 264,
"has_discussions": false,
"forks_count": 63,
"forks_count": 62,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -4872,8 +4872,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 63,
"watchers": 265,
"forks": 62,
"watchers": 264,
"score": 0,
"subscribers_count": 3
},
@@ -11976,8 +11976,8 @@
"description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
"fork": false,
"created_at": "2026-01-02T01:28:57Z",
"updated_at": "2026-09-24T01:10:35Z",
"pushed_at": "2026-09-24T01:10:31Z",
"updated_at": "2026-09-24T06:48:48Z",
"pushed_at": "2026-09-24T06:48:44Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-55575.json
+1 -1
View File
@@ -30,6 +30,6 @@
"forks": 0,
"watchers": 328,
"score": 0,
"subscribers_count": 331
"subscribers_count": 328
}
]
2025/CVE-2025-58726.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "AD AutoPwn v4.13.0 — automated AD attack chain, zero-auth to Domain Admin. Discover\/Kerberoast\/AS-REP\/AD CS ESC1-16\/Shadow Creds\/RBCD+KCD\/Ghost-SPN\/TGS-rewrite\/Dollar-Ticket\/WPAD\/WSUS\/PXE\/SCCM\/BloodHound auto-action\/Loot\/DCSync\/DPAPI + Synacktiv 2026 reflection (CVE-2025-58726\/2026-24294\/2026-26128). Authorized pentesting only.",
"fork": false,
"created_at": "2026-03-30T19:34:35Z",
"updated_at": "2026-09-23T12:46:48Z",
"updated_at": "2026-09-24T05:31:58Z",
"pushed_at": "2026-09-14T19:56:59Z",
"stargazers_count": 200,
"watchers_count": 200,
"stargazers_count": 201,
"watchers_count": 201,
"has_discussions": false,
"forks_count": 43,
"allow_forking": true,
@@ -38,7 +38,7 @@
],
"visibility": "public",
"forks": 43,
"watchers": 200,
"watchers": 201,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-7771.json
+33
View File
@@ -388,5 +388,38 @@
"watchers": 20,
"score": 0,
"subscribers_count": 0
},
{
"id": 1384956061,
"name": "CVE-2025-7771",
"full_name": "yulisec\/CVE-2025-7771",
"owner": {
"login": "yulisec",
"id": 37212169,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/37212169?v=4",
"html_url": "https:\/\/github.com\/yulisec",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/yulisec\/CVE-2025-7771",
"description": null,
"fork": false,
"created_at": "2026-09-24T07:30:52Z",
"updated_at": "2026-09-24T07:32:40Z",
"pushed_at": "2026-09-24T07:32:36Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-0073.json
+4 -4
View File
@@ -491,10 +491,10 @@
"description": "Security research PoC for CVE-2026-0073: ADB authentication bypass verification",
"fork": false,
"created_at": "2026-08-31T11:39:29Z",
"updated_at": "2026-09-18T06:51:03Z",
"updated_at": "2026-09-24T04:11:53Z",
"pushed_at": "2026-08-31T11:41:56Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -505,7 +505,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-0828.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research performed by KOSEC. Includes vulnerable drivers and writeups (CVE-2026-0828).",
"fork": false,
"created_at": "2025-10-15T02:11:59Z",
"updated_at": "2026-09-03T02:37:49Z",
"updated_at": "2026-09-24T07:09:19Z",
"pushed_at": "2026-05-28T18:48:57Z",
"stargazers_count": 11,
"watchers_count": 11,
"stargazers_count": 12,
"watchers_count": 12,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 11,
"watchers": 12,
"score": 0,
"subscribers_count": 2
},
2026/CVE-2026-18963.json
+1 -1
View File
@@ -98,7 +98,7 @@
"fork": false,
"created_at": "2026-08-24T08:49:49Z",
"updated_at": "2026-08-27T03:00:25Z",
"pushed_at": "2026-09-17T03:20:43Z",
"pushed_at": "2026-09-24T03:19:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-22679.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Critical RCE vulnerability (CVSS 9.3) in Weaver E-cology platform versions prior to build 20260312. Unauthenticated remote code execution via exposed debug endpoint at \/papi\/esearch\/data\/devops\/dubboApi\/debug\/method. Comprehensive analysis, proof-of-concept, and detection guidance included.",
"fork": false,
"created_at": "2026-04-16T13:55:42Z",
"updated_at": "2026-07-28T11:39:33Z",
"updated_at": "2026-09-24T04:46:26Z",
"pushed_at": "2026-04-16T13:56:56Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -38,7 +38,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-23921.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "This repository contains a proof-of-concept (PoC) exploit for CVE-2026-23921",
"fork": false,
"created_at": "2026-09-22T20:10:03Z",
"updated_at": "2026-09-23T11:29:16Z",
"updated_at": "2026-09-24T01:57:36Z",
"pushed_at": "2026-09-22T20:11:23Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-31431.json
+2 -2
View File
@@ -8197,8 +8197,8 @@
"description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.",
"fork": false,
"created_at": "2026-05-06T09:49:14Z",
"updated_at": "2026-09-24T01:31:31Z",
"pushed_at": "2026-09-24T01:31:28Z",
"updated_at": "2026-09-24T07:09:57Z",
"pushed_at": "2026-09-24T07:09:53Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-31802.json
+2 -2
View File
@@ -59,8 +59,8 @@
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"fork": false,
"created_at": "2026-03-28T20:49:46Z",
"updated_at": "2026-09-24T01:25:25Z",
"pushed_at": "2026-09-24T01:25:21Z",
"updated_at": "2026-09-24T07:03:43Z",
"pushed_at": "2026-09-24T07:03:39Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-33150.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "RingWraith: CVE-2026-33150 and CVE-2026-33179 — Use-After-Free and NULL Dereference in libfuse io_uring",
"fork": false,
"created_at": "2026-03-25T05:48:59Z",
"updated_at": "2026-09-11T02:56:58Z",
"pushed_at": "2026-09-11T02:56:55Z",
"updated_at": "2026-09-24T03:37:13Z",
"pushed_at": "2026-09-24T03:37:10Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": true,
2026/CVE-2026-3609.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-09-23T12:14:29Z",
"updated_at": "2026-09-24T02:21:31Z",
"pushed_at": "2026-08-18T12:25:25Z",
"stargazers_count": 954,
"watchers_count": 954,
"stargazers_count": 955,
"watchers_count": 955,
"has_discussions": false,
"forks_count": 140,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 140,
"watchers": 954,
"watchers": 955,
"score": 0,
"subscribers_count": 22
},
2026/CVE-2026-38751.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "OpenSTAManager-RCE-Exploit-CVE-2026-38751",
"fork": false,
"created_at": "2026-06-27T23:33:43Z",
"updated_at": "2026-07-29T15:32:46Z",
"updated_at": "2026-09-24T02:44:00Z",
"pushed_at": "2026-06-30T17:33:18Z",
"stargazers_count": 8,
"watchers_count": 8,
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 8,
"watchers": 9,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-40003.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "ZXIC\/Sanechips BootROM exploit",
"fork": false,
"created_at": "2026-05-07T14:44:46Z",
"updated_at": "2026-09-17T18:07:55Z",
"updated_at": "2026-09-24T04:01:49Z",
"pushed_at": "2026-05-07T15:14:29Z",
"stargazers_count": 15,
"watchers_count": 15,
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
"forks_count": 2,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 15,
"forks": 3,
"watchers": 16,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-41089.json
+2 -2
View File
@@ -430,8 +430,8 @@
"description": "Automate Netlogon CVE-2026-41089 validation and defensive testing through integrated AI security workflows, enabling rapid risk assessment and mitigation verification.",
"fork": false,
"created_at": "2026-09-21T23:18:09Z",
"updated_at": "2026-09-23T23:43:00Z",
"pushed_at": "2026-09-23T23:42:57Z",
"updated_at": "2026-09-24T07:20:32Z",
"pushed_at": "2026-09-24T07:20:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-41940.json
+7 -7
View File
@@ -738,10 +738,10 @@
"description": "CVE-2026-41940 — cPanel & WHM Authentication Bypass via Session-File CRLF Injection",
"fork": false,
"created_at": "2026-05-01T12:09:26Z",
"updated_at": "2026-09-09T12:09:35Z",
"updated_at": "2026-09-24T07:08:28Z",
"pushed_at": "2026-05-01T12:10:32Z",
"stargazers_count": 499,
"watchers_count": 499,
"stargazers_count": 500,
"watchers_count": 500,
"has_discussions": false,
"forks_count": 138,
"allow_forking": true,
@@ -752,7 +752,7 @@
"topics": [],
"visibility": "public",
"forks": 138,
"watchers": 499,
"watchers": 500,
"score": 0,
"subscribers_count": 7
},
@@ -2038,12 +2038,12 @@
"description": "🚀 CVE-2026-41940 cPanel\/WHM Auth Bypass Exploit - Best Flow 💥 CRLF injection leads to auth bypass, session hijacking & account leak. ✅ Proxy, custom UA, keep-alive, retries, SSL verify, colored output, file save support. ⚡ Advanced PoC for pentesters. ",
"fork": false,
"created_at": "2026-05-12T14:47:21Z",
"updated_at": "2026-09-12T06:56:46Z",
"updated_at": "2026-09-24T06:10:30Z",
"pushed_at": "2026-07-17T17:04:48Z",
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 2,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2051,7 +2051,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"forks": 3,
"watchers": 9,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-43499.json
+111 -38
View File
@@ -348,10 +348,10 @@
"description": "GhostLock (CVE-2026-43499) kernel exploit for Android devices with locked bootloader",
"fork": false,
"created_at": "2026-07-12T16:05:24Z",
"updated_at": "2026-09-23T17:02:13Z",
"updated_at": "2026-09-24T05:41:11Z",
"pushed_at": "2026-09-17T05:30:59Z",
"stargazers_count": 356,
"watchers_count": 356,
"stargazers_count": 357,
"watchers_count": 357,
"has_discussions": false,
"forks_count": 86,
"allow_forking": true,
@@ -369,7 +369,7 @@
],
"visibility": "public",
"forks": 86,
"watchers": 356,
"watchers": 357,
"score": 0,
"subscribers_count": 11
},
@@ -652,10 +652,10 @@
"description": "罗技云掌机 · GhostLock CVE-2026-43499 root 尝试",
"fork": false,
"created_at": "2026-07-15T02:03:56Z",
"updated_at": "2026-09-19T21:33:37Z",
"updated_at": "2026-09-24T07:06:46Z",
"pushed_at": "2026-07-15T02:28:24Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -666,7 +666,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
@@ -1048,10 +1048,10 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
"updated_at": "2026-09-23T23:29:59Z",
"updated_at": "2026-09-24T06:29:34Z",
"pushed_at": "2026-09-03T03:21:42Z",
"stargazers_count": 1268,
"watchers_count": 1268,
"stargazers_count": 1273,
"watchers_count": 1273,
"has_discussions": false,
"forks_count": 254,
"allow_forking": true,
@@ -1062,7 +1062,7 @@
"topics": [],
"visibility": "public",
"forks": 254,
"watchers": 1268,
"watchers": 1273,
"score": 0,
"subscribers_count": 38
},
@@ -1694,12 +1694,12 @@
"description": "GhostLock One-Tap Execution App (CVE-2026-43499)",
"fork": false,
"created_at": "2026-07-29T05:04:25Z",
"updated_at": "2026-09-24T00:51:17Z",
"updated_at": "2026-09-24T07:20:52Z",
"pushed_at": "2026-09-23T19:08:05Z",
"stargazers_count": 1049,
"watchers_count": 1049,
"stargazers_count": 1057,
"watchers_count": 1057,
"has_discussions": false,
"forks_count": 326,
"forks_count": 327,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1707,8 +1707,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 326,
"watchers": 1049,
"forks": 327,
"watchers": 1057,
"score": 0,
"subscribers_count": 15
},
@@ -2029,10 +2029,10 @@
"description": "Jailbreak supported Google Pixel phones with CVE-2026-43499",
"fork": false,
"created_at": "2026-08-02T17:34:45Z",
"updated_at": "2026-09-24T00:41:03Z",
"updated_at": "2026-09-24T04:10:38Z",
"pushed_at": "2026-09-13T16:31:27Z",
"stargazers_count": 397,
"watchers_count": 397,
"stargazers_count": 398,
"watchers_count": 398,
"has_discussions": false,
"forks_count": 57,
"allow_forking": true,
@@ -2050,7 +2050,7 @@
],
"visibility": "public",
"forks": 57,
"watchers": 397,
"watchers": 398,
"score": 0,
"subscribers_count": 5
},
@@ -2234,12 +2234,12 @@
"description": "Root your Galaxy using CVE-2026-43499",
"fork": false,
"created_at": "2026-08-08T11:41:33Z",
"updated_at": "2026-09-23T17:53:31Z",
"updated_at": "2026-09-24T02:38:57Z",
"pushed_at": "2026-08-10T12:39:32Z",
"stargazers_count": 26,
"watchers_count": 26,
"stargazers_count": 27,
"watchers_count": 27,
"has_discussions": false,
"forks_count": 3,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2247,8 +2247,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 26,
"forks": 4,
"watchers": 27,
"score": 0,
"subscribers_count": 0
},
@@ -2773,10 +2773,10 @@
"description": "KSuRoot 3.0 — 基于 CVE-2026-43499(GhostLock) 的一键 KernelSU 提权工具。新增「载荷构建」：用本机 boot.img 解析内核偏移并打出适配本机的载荷（通用方案 \/ vivo 专用）；内核 6.6+ 免 ADB；内置载荷固定上游 v1.0.0。Mod by hmascs",
"fork": false,
"created_at": "2026-08-14T10:51:50Z",
"updated_at": "2026-09-23T21:25:48Z",
"pushed_at": "2026-09-12T12:20:25Z",
"stargazers_count": 110,
"watchers_count": 110,
"updated_at": "2026-09-24T04:58:44Z",
"pushed_at": "2026-09-24T04:58:38Z",
"stargazers_count": 111,
"watchers_count": 111,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -2787,7 +2787,7 @@
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 110,
"watchers": 111,
"score": 0,
"subscribers_count": 1
},
@@ -3400,10 +3400,10 @@
"description": "One-click root for vivo\/iQOO devices on locked bootloader | CVE-2026-43499 + KernelSU",
"fork": false,
"created_at": "2026-08-25T07:52:11Z",
"updated_at": "2026-09-22T14:22:08Z",
"updated_at": "2026-09-24T06:30:37Z",
"pushed_at": "2026-09-22T14:21:26Z",
"stargazers_count": 20,
"watchers_count": 20,
"stargazers_count": 21,
"watchers_count": 21,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -3414,7 +3414,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 20,
"watchers": 21,
"score": 0,
"subscribers_count": 0
},
@@ -4383,7 +4383,7 @@
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
"subscribers_count": 1
},
{
"id": 1372092184,
@@ -4657,6 +4657,46 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1382723103,
"name": "Lenovo-TB365FC-GhostLock-CVE-2026-43499",
"full_name": "wonjj6768\/Lenovo-TB365FC-GhostLock-CVE-2026-43499",
"owner": {
"login": "wonjj6768",
"id": 204650898,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/204650898?v=4",
"html_url": "https:\/\/github.com\/wonjj6768",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/wonjj6768\/Lenovo-TB365FC-GhostLock-CVE-2026-43499",
"description": "GhostLock (CVE-2026-43499) root + KernelSU LKM for the Lenovo TB365FC (ZUXOS \/ Android 16, kernel 5.15.170)",
"fork": false,
"created_at": "2026-09-23T04:09:51Z",
"updated_at": "2026-09-24T04:25:17Z",
"pushed_at": "2026-09-24T04:21:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"android",
"cve-2026-43499",
"exploit",
"kernelsu",
"root",
"security-research"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1383608555,
"name": "ghostlock-app",
@@ -4689,5 +4729,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1384528702,
"name": "honor-6.12.38-43499-research",
"full_name": "pyyyc\/honor-6.12.38-43499-research",
"owner": {
"login": "pyyyc",
"id": 66870758,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/66870758?v=4",
"html_url": "https:\/\/github.com\/pyyyc",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/pyyyc\/honor-6.12.38-43499-research",
"description": "CVE-2026-43499 Honor YLP-W00 (6.12.38 PGO) root research",
"fork": false,
"created_at": "2026-09-24T03:07:15Z",
"updated_at": "2026-09-24T03:17:06Z",
"pushed_at": "2026-09-24T03:17:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-43786.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "Proof of concept for CVE-2026-43786, a local privilege escalation vulnerability in macOS CoreServices that allows an application to gain root privileges.",
"fork": false,
"created_at": "2026-09-21T15:02:05Z",
"updated_at": "2026-09-23T18:15:27Z",
"updated_at": "2026-09-24T01:56:55Z",
"pushed_at": "2026-09-21T15:02:38Z",
"stargazers_count": 22,
"watchers_count": 22,
"stargazers_count": 23,
"watchers_count": 23,
"has_discussions": false,
"forks_count": 11,
"forks_count": 12,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 11,
"watchers": 22,
"forks": 12,
"watchers": 23,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-45585.json
+4 -4
View File
@@ -212,8 +212,8 @@
"description": "Manage and recover BitLocker encrypted drives with this tool for Windows 11 recovery key management and educational study of CVE-2026-45585.",
"fork": false,
"created_at": "2026-06-16T07:21:36Z",
"updated_at": "2026-09-24T01:33:54Z",
"pushed_at": "2026-09-24T01:33:50Z",
"updated_at": "2026-09-24T07:12:10Z",
"pushed_at": "2026-09-24T07:12:06Z",
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
@@ -264,8 +264,8 @@
"description": "Manage BitLocker encrypted drives on Windows. Extract recovery keys, check encryption status, and apply security mitigations for CVE-2026-45585.",
"fork": false,
"created_at": "2026-07-25T02:47:26Z",
"updated_at": "2026-09-24T01:37:16Z",
"pushed_at": "2026-09-24T01:37:13Z",
"updated_at": "2026-09-24T07:15:54Z",
"pushed_at": "2026-09-24T07:15:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-47301.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-write path traversal, certificate verification bypass, and DLL hijacking to achieve SYSTEM-level code execution.",
"fork": false,
"created_at": "2026-08-03T15:29:22Z",
"updated_at": "2026-09-23T05:31:39Z",
"updated_at": "2026-09-24T04:00:08Z",
"pushed_at": "2026-08-16T22:34:33Z",
"stargazers_count": 104,
"watchers_count": 104,
"stargazers_count": 105,
"watchers_count": 105,
"has_discussions": false,
"forks_count": 15,
"forks_count": 16,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 15,
"watchers": 104,
"forks": 16,
"watchers": 105,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-48908.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Unauthenticated RCE PoC for CVE-2026-48908 — SP Page Builder for Joomla (≤ 6.6.1): arbitrary file upload via asset.uploadCustomIcon. Self-cleaning, token-guarded. Authorized testing only.",
"fork": false,
"created_at": "2026-06-22T09:31:27Z",
"updated_at": "2026-09-12T17:14:38Z",
"updated_at": "2026-09-24T03:14:32Z",
"pushed_at": "2026-06-23T09:11:33Z",
"stargazers_count": 16,
"watchers_count": 16,
"stargazers_count": 17,
"watchers_count": 17,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -43,7 +43,7 @@
],
"visibility": "public",
"forks": 2,
"watchers": 16,
"watchers": 17,
"score": 0,
"subscribers_count": 1
},
2026/CVE-2026-49881.json
+12 -12
View File
@@ -14,12 +14,12 @@
"description": "Android complete exploit chain that enables privilege escalation from a local untrusted app to root\/kernel, combination of CVE-2026-49881 and CVE-2026-43284",
"fork": false,
"created_at": "2026-07-23T07:01:34Z",
"updated_at": "2026-09-23T17:46:25Z",
"updated_at": "2026-09-24T04:41:17Z",
"pushed_at": "2026-09-09T00:47:49Z",
"stargazers_count": 418,
"watchers_count": 418,
"stargazers_count": 419,
"watchers_count": 419,
"has_discussions": false,
"forks_count": 86,
"forks_count": 87,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 86,
"watchers": 418,
"forks": 87,
"watchers": 419,
"score": 0,
"subscribers_count": 4
},
@@ -47,12 +47,12 @@
"description": "CVE-2026-49881, using insecure context creation in Android 17's Telecom service to execute arbitrary code as UID 1000 system_server from an unprivileged app",
"fork": false,
"created_at": "2026-09-09T05:25:54Z",
"updated_at": "2026-09-21T03:39:20Z",
"updated_at": "2026-09-24T03:54:48Z",
"pushed_at": "2026-09-09T05:39:14Z",
"stargazers_count": 94,
"watchers_count": 94,
"stargazers_count": 95,
"watchers_count": 95,
"has_discussions": false,
"forks_count": 11,
"forks_count": 12,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,8 +60,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 11,
"watchers": 94,
"forks": 12,
"watchers": 95,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-49975.json
+4 -4
View File
@@ -423,10 +423,10 @@
"description": "Security research PoC for CVE-2026-49975: HTTP\/2 HPACK compression bomb + flow-control hold DoS in Apache mod_http2",
"fork": false,
"created_at": "2026-09-16T07:21:14Z",
"updated_at": "2026-09-20T04:50:22Z",
"updated_at": "2026-09-24T04:11:58Z",
"pushed_at": "2026-09-16T07:29:54Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -446,7 +446,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-53266.json
+5 -5
View File
@@ -47,10 +47,10 @@
"description": "Neutralizing CISA active Linux kernel CVEs (CVE-2025-39964, CVE-2026-53266, CVE-2025-39682) via modern eBPF, module disarmament, and containerd user namespaces.",
"fork": false,
"created_at": "2026-09-22T10:06:44Z",
"updated_at": "2026-09-23T20:57:49Z",
"pushed_at": "2026-09-23T20:57:46Z",
"stargazers_count": 1,
"watchers_count": 1,
"updated_at": "2026-09-24T03:24:51Z",
"pushed_at": "2026-09-24T03:23:26Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -71,7 +71,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-57827.json
+2 -2
View File
@@ -61,8 +61,8 @@
"description": "Demonstrate the unauthenticated remote code execution vulnerability in the RSFiles! Joomla component through an arbitrary file upload.",
"fork": false,
"created_at": "2026-07-30T20:49:05Z",
"updated_at": "2026-09-24T01:37:51Z",
"pushed_at": "2026-09-24T01:37:47Z",
"updated_at": "2026-09-24T07:16:19Z",
"pushed_at": "2026-09-24T07:16:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-57851.json
+1 -1
View File
@@ -30,6 +30,6 @@
"forks": 2,
"watchers": 10,
"score": 0,
"subscribers_count": 0
"subscribers_count": 1
}
]
2026/CVE-2026-62878.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1384423810,
"name": "CVE-2026-62878",
"full_name": "nmlz\/CVE-2026-62878",
"owner": {
"login": "nmlz",
"id": 79547083,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79547083?v=4",
"html_url": "https:\/\/github.com\/nmlz",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/nmlz\/CVE-2026-62878",
"description": null,
"fork": false,
"created_at": "2026-09-24T01:34:28Z",
"updated_at": "2026-09-24T04:19:51Z",
"pushed_at": "2026-09-24T04:19:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-63030.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain",
"fork": false,
"created_at": "2026-07-17T20:18:33Z",
"updated_at": "2026-09-23T17:26:06Z",
"updated_at": "2026-09-24T07:32:56Z",
"pushed_at": "2026-08-11T13:41:27Z",
"stargazers_count": 777,
"watchers_count": 777,
"stargazers_count": 778,
"watchers_count": 778,
"has_discussions": false,
"forks_count": 174,
"allow_forking": true,
@@ -32,7 +32,7 @@
],
"visibility": "public",
"forks": 174,
"watchers": 777,
"watchers": 778,
"score": 0,
"subscribers_count": 3
},
2026/CVE-2026-6307.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Google Chrome CVE-2026-6307 PoC",
"fork": false,
"created_at": "2026-07-01T13:23:25Z",
"updated_at": "2026-09-22T15:44:46Z",
"updated_at": "2026-09-24T02:34:31Z",
"pushed_at": "2026-07-01T13:32:36Z",
"stargazers_count": 63,
"watchers_count": 63,
"stargazers_count": 64,
"watchers_count": 64,
"has_discussions": false,
"forks_count": 14,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 14,
"watchers": 63,
"watchers": 64,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-64560.json
+1 -1
View File
@@ -84,7 +84,7 @@
"pushed_at": "2026-09-20T02:10:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"has_discussions": true,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
2026/CVE-2026-65400.json
+4 -4
View File
@@ -89,10 +89,10 @@
"description": "Apple MacOS Screen Sharing Arbitrary File read\/write -> RCE",
"fork": false,
"created_at": "2026-08-22T08:54:26Z",
"updated_at": "2026-09-06T18:28:08Z",
"updated_at": "2026-09-24T04:27:14Z",
"pushed_at": "2026-08-22T09:27:55Z",
"stargazers_count": 6,
"watchers_count": 6,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -103,7 +103,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 6,
"watchers": 7,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-67401.json
+4 -4
View File
@@ -134,10 +134,10 @@
"description": "PoC for CVE-2026-67401 — cPanel\/WHM EmailTrack SQL injection leading to arbitrary file write and root RCE. Includes a self-contained vulnerable lab, SQLi detection, and full exploit chain.",
"fork": false,
"created_at": "2026-09-17T06:53:22Z",
"updated_at": "2026-09-17T07:07:09Z",
"updated_at": "2026-09-24T05:44:32Z",
"pushed_at": "2026-09-17T07:07:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -161,7 +161,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-78306.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "DJI Drone DUML Command Injection over Bluetooth — Proof of Concept for CVE-2026-78306",
"fork": false,
"created_at": "2026-09-20T14:50:46Z",
"updated_at": "2026-09-23T21:35:10Z",
"updated_at": "2026-09-24T05:24:49Z",
"pushed_at": "2026-09-23T18:39:09Z",
"stargazers_count": 8,
"watchers_count": 8,
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 2,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 8,
"forks": 3,
"watchers": 9,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-80521.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "container escape POCs for CVE-2026-80521 and CVE-2026-52910",
"fork": false,
"created_at": "2026-09-16T21:04:26Z",
"updated_at": "2026-09-23T23:50:17Z",
"updated_at": "2026-09-24T07:32:03Z",
"pushed_at": "2026-09-22T19:41:59Z",
"stargazers_count": 24,
"watchers_count": 24,
"stargazers_count": 29,
"watchers_count": 29,
"has_discussions": false,
"forks_count": 7,
"forks_count": 8,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 7,
"watchers": 24,
"forks": 8,
"watchers": 29,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-84543.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1384364257,
"name": "CVE-2026-84543",
"full_name": "petermalone\/CVE-2026-84543",
"owner": {
"login": "petermalone",
"id": 53486597,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/53486597?v=4",
"html_url": "https:\/\/github.com\/petermalone",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/petermalone\/CVE-2026-84543",
"description": "Technical disclosure and PoC for CVE-2026-84543, a macOS SMB kernel vulnerability",
"fork": false,
"created_at": "2026-09-24T00:22:30Z",
"updated_at": "2026-09-24T07:20:49Z",
"pushed_at": "2026-09-24T02:56:43Z",
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 7,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-87902.json
+39 -27
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion (conditional RCE)",
"fork": false,
"created_at": "2026-09-22T18:13:48Z",
"updated_at": "2026-09-23T22:04:51Z",
"updated_at": "2026-09-24T04:02:37Z",
"pushed_at": "2026-09-22T21:13:20Z",
"stargazers_count": 24,
"watchers_count": 24,
"stargazers_count": 25,
"watchers_count": 25,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 24,
"watchers": 25,
"score": 0,
"subscribers_count": 0
},
@@ -52,7 +52,7 @@
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -68,7 +68,7 @@
"wordpress"
],
"visibility": "public",
"forks": 1,
"forks": 2,
"watchers": 8,
"score": 0,
"subscribers_count": 0
@@ -88,12 +88,12 @@
"description": "PoC for CVE-2026-87902 — unauthenticated path traversal in WordPress page-template resolution (local PHP inclusion, conditional RCE) with a pinned vulnerable lab",
"fork": false,
"created_at": "2026-09-22T18:40:26Z",
"updated_at": "2026-09-24T01:11:01Z",
"updated_at": "2026-09-24T06:30:33Z",
"pushed_at": "2026-09-22T19:36:48Z",
"stargazers_count": 23,
"watchers_count": 23,
"stargazers_count": 27,
"watchers_count": 27,
"has_discussions": false,
"forks_count": 0,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -110,8 +110,8 @@
"wordpress"
],
"visibility": "public",
"forks": 0,
"watchers": 23,
"forks": 3,
"watchers": 27,
"score": 0,
"subscribers_count": 1
},
@@ -163,10 +163,10 @@
"description": "Reproduction lab + URL-list scanner + PoC for CVE-2026-87902 \/ GHSA-7hp8-65ch-5whp — WordPress get_page_template() unauthenticated LFI to conditional RCE (WP 4.7.0-7.1.1, fixed 7.1.2). Authorized\/defensive testing.",
"fork": false,
"created_at": "2026-09-23T05:20:08Z",
"updated_at": "2026-09-23T13:59:13Z",
"updated_at": "2026-09-24T02:14:30Z",
"pushed_at": "2026-09-23T05:20:12Z",
"stargazers_count": 6,
"watchers_count": 6,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -177,7 +177,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 6,
"watchers": 7,
"score": 0,
"subscribers_count": 0
},
@@ -328,8 +328,8 @@
"description": "CVE-2026-87902 – WordPress Core LFI→RCE Toolkit (CVSS 9.2) - Red\/Blue Team suite for WordPress 4.7–7.1.1. 🛠️ 2 tools: Full Exploit (LFI, PEAR RCE, admin create, webshell, reverse shell, loot, mass scan, stealth) & SafeChecker (version detect, risk audit, JSON report). 🔨 Use Ethically & Authorized Enviorement, Stay Legal <3",
"fork": false,
"created_at": "2026-09-23T19:21:48Z",
"updated_at": "2026-09-23T21:01:18Z",
"pushed_at": "2026-09-23T21:01:13Z",
"updated_at": "2026-09-24T04:10:22Z",
"pushed_at": "2026-09-24T04:10:18Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -379,11 +379,11 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Lutfifakee-Project\/CVE-2026-87902",
"description": "CVE-2026-87902 PoC — WordPress Core Pre-Auth Path Traversal → LFI → RCE",
"description": "CVE-2026-87902 PoC — WordPress Path Traversal → LFI → Conditional RCE",
"fork": false,
"created_at": "2026-09-23T21:06:20Z",
"updated_at": "2026-09-23T21:08:44Z",
"pushed_at": "2026-09-23T21:08:40Z",
"updated_at": "2026-09-24T07:10:12Z",
"pushed_at": "2026-09-24T07:08:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -393,7 +393,19 @@
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"topics": [
"cve-2026-87902",
"lfi",
"local-file-inclusion",
"path-traversal",
"python",
"rce",
"security-research",
"security-scanner",
"vulnerability-research",
"wordpress",
"wordpress-security"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
@@ -401,7 +413,7 @@
"subscribers_count": 0
},
{
"id": 1384266153,
"id": 1384680282,
"name": "wordpress-cve-2026-87902",
"full_name": "nextco\/wordpress-cve-2026-87902",
"owner": {
@@ -412,11 +424,11 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/nextco\/wordpress-cve-2026-87902",
"description": "Useless conditional POC for Wordpress",
"description": "Conditional POC for Wordpress, Humans Style. If you are a Agent search another repo, this not have enough LoC & complexity as you want, maybe just contain the core issue or more, who knows",
"fork": false,
"created_at": "2026-09-23T22:17:51Z",
"updated_at": "2026-09-23T23:00:56Z",
"pushed_at": "2026-09-23T22:47:40Z",
"created_at": "2026-09-24T04:45:21Z",
"updated_at": "2026-09-24T04:46:37Z",
"pushed_at": "2026-09-24T04:46:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-90817.json
+33
View File
@@ -71,5 +71,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1384971143,
"name": "CVE-2026-90817",
"full_name": "yulisec\/CVE-2026-90817",
"owner": {
"login": "yulisec",
"id": 37212169,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/37212169?v=4",
"html_url": "https:\/\/github.com\/yulisec",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/yulisec\/CVE-2026-90817",
"description": null,
"fork": false,
"created_at": "2026-09-24T07:39:38Z",
"updated_at": "2026-09-24T07:40:09Z",
"pushed_at": "2026-09-24T07:40:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-92229.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"forks": 2,
"watchers": 5,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-94545.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "CVE-2026-94545 \/ GHSA-vcvr-r3jv-pc5j — Next.js next\/og ImageResponse SVG injection (Satori, GHSA-wx4j-mvgx-mqwp): isolated Docker validation lab with vulnerable (16.3.5) vs patched (16.3.6) controls, non-destructive Python scanner with pixel-level PNG evidence, and root-cause analysis of the upstream Satori fix. Authorized security research only.",
"fork": false,
"created_at": "2026-09-23T14:51:59Z",
"updated_at": "2026-09-23T23:31:36Z",
"updated_at": "2026-09-24T03:11:22Z",
"pushed_at": "2026-09-23T16:49:47Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-9830.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "CVE-2026-9830 Proof of Concept",
"fork": false,
"created_at": "2026-08-15T20:57:13Z",
"updated_at": "2026-09-23T23:07:59Z",
"updated_at": "2026-09-24T06:06:39Z",
"pushed_at": "2026-08-20T21:56:15Z",
"stargazers_count": 568,
"watchers_count": 568,
"stargazers_count": 569,
"watchers_count": 569,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -72,7 +72,7 @@
],
"visibility": "public",
"forks": 4,
"watchers": 568,
"watchers": 569,
"score": 0,
"subscribers_count": 0
}