nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/05/02 06:50:42

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-05-02 15:50:42 +09:00
1 parent 2ff16bdd2a
commit 45113597eb
83 files changed
+902 -858
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2016/CVE-2016-15042.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛠️ Validate and demonstrate CVE-2016-15042 with a Dockerized lab for unauthenticated file uploads in WordPress file managers.",
"fork": false,
"created_at": "2023-10-23T05:54:10Z",
"updated_at": "2026-05-02T00:03:20Z",
"pushed_at": "2026-05-02T00:03:16Z",
"updated_at": "2026-05-02T03:43:36Z",
"pushed_at": "2026-05-02T03:43:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2017/CVE-2017-0781.json
+4 -4
View File
@@ -123,10 +123,10 @@
"description": "BlueBorne Exploits & Framework This repository contains a PoC code of various exploits for the BlueBorne vulnerabilities. Under 'android' exploits for the Android RCE vulnerability (CVE-2017-0781), and the SDP Information leak vulnerability (CVE-2017-0785) can be found. Under 'linux-bluez' exploits for the Linux-RCE vulnerability (CVE-2017-1000251) can be found (for Amazon Echo, and Samsung Gear S3). Under 'l2cap_infra' a general testing framework to send and receive raw l2cap messages (using scapy) can be found. Under 'nRF24_BDADDR_Sniffer' a tool to capture bluetooth mac addresses (BDADDR) over the air, using a nRF24L01 chip For more details on BlueBorne, you may read the full technical white paper available here: https:\/\/www.armis.com\/blueborne\/ In addition a several detailed blog posts on the exploitation of these vulnerability can be found here: https:\/\/www.armis.com\/blog\/ =============== Dependencies:",
"fork": false,
"created_at": "2020-10-12T07:21:08Z",
"updated_at": "2026-03-27T19:04:48Z",
"updated_at": "2026-05-02T03:16:36Z",
"pushed_at": "2020-11-04T16:49:05Z",
"stargazers_count": 9,
"watchers_count": 9,
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -137,7 +137,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 9,
"watchers": 10,
"score": 0,
"subscribers_count": 1
},
2017/CVE-2017-1000251.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Blueborne CVE-2017-1000251 PoC for linux machines",
"fork": false,
"created_at": "2017-09-23T06:29:31Z",
"updated_at": "2025-05-14T07:13:43Z",
"updated_at": "2026-05-02T03:15:56Z",
"pushed_at": "2023-03-10T03:04:17Z",
"stargazers_count": 17,
"watchers_count": 17,
"stargazers_count": 18,
"watchers_count": 18,
"has_discussions": false,
"forks_count": 14,
"allow_forking": true,
@@ -33,7 +33,7 @@
],
"visibility": "public",
"forks": 14,
"watchers": 17,
"watchers": 18,
"score": 0,
"subscribers_count": 2
},
2018/CVE-2018-18441.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "D-Link DCS series Wi-Fi camera expose sensitive information.",
"fork": false,
"created_at": "2025-09-28T16:25:33Z",
"updated_at": "2026-04-23T16:14:29Z",
"pushed_at": "2026-04-23T16:14:25Z",
"updated_at": "2026-05-02T03:57:17Z",
"pushed_at": "2026-05-02T03:57:12Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2018/CVE-2018-9995.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "(CVE-2018-9995) Get DVR Credentials",
"fork": false,
"created_at": "2018-04-29T20:00:06Z",
"updated_at": "2026-04-17T03:30:04Z",
"updated_at": "2026-05-02T01:50:31Z",
"pushed_at": "2019-01-23T14:27:21Z",
"stargazers_count": 556,
"watchers_count": 556,
"stargazers_count": 557,
"watchers_count": 557,
"has_discussions": false,
"forks_count": 203,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 203,
"watchers": 556,
"watchers": 557,
"score": 0,
"subscribers_count": 32
},
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-05-01T23:28:51Z",
"pushed_at": "2026-05-01T23:28:48Z",
"updated_at": "2026-05-02T04:27:48Z",
"pushed_at": "2026-05-02T04:27:45Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2019/CVE-2019-11358.json
+4 -4
View File
@@ -133,10 +133,10 @@
"description": "NOTICE This repository contains the public FTC SDK for the SKYSTONE (2019-2020) competition season. If you are looking for the current season's FTC SDK software, please visit the new and permanent home of the public FTC SDK: FtcRobotController repository Welcome! This GitHub repository contains the source code that is used to build an Android app to control a FIRST Tech Challenge competition robot. To use this SDK, download\/clone the entire project to your local computer. Getting Started If you are new to robotics or new to the FIRST Tech Challenge, then you should consider reviewing the FTC Blocks Tutorial to get familiar with how to use the control system: FTC Blocks Online Tutorial Even if you are an advanced Java programmer, it is helpful to start with the FTC Blocks tutorial, and then migrate to the OnBot Java Tool or to Android Studio afterwards. Downloading the Project If you are an Android Studio programmer, there are several ways to download this repo. Note that if you use the Blocks or OnBot Java Tool to program your robot, then you do not need to download this repository. If you are a git user, you can clone the most current version of the repository: git clone https:\/\/github.com\/FIRST-Tech-Challenge\/SKYSTONE.git Or, if you prefer, you can use the \"Download Zip\" button available through the main repository page. Downloading the project as a .ZIP file will keep the size of the download manageable. You can also download the project folder (as a .zip or .tar.gz archive file) from the Downloads subsection of the Releases page for this repository. Once you have downloaded and uncompressed (if needed) your folder, you can use Android Studio to import the folder (\"Import project (Eclipse ADT, Gradle, etc.)\"). Getting Help User Documentation and Tutorials FIRST maintains online documentation with information and tutorials on how to use the FIRST Tech Challenge software and robot control system. You can access this documentation using the following link: SKYSTONE Online Documentation Note that the online documentation is an \"evergreen\" document that is constantly being updated and edited. It contains the most current information about the FIRST Tech Challenge software and control system. Javadoc Reference Material The Javadoc reference documentation for the FTC SDK is now available online. Click on the following link to view the FTC SDK Javadoc documentation as a live website: FTC Javadoc Documentation Documentation for the FTC SDK is also included with this repository. There is a subfolder called \"doc\" which contains several subfolders: The folder \"apk\" contains the .apk files for the FTC Driver Station and FTC Robot Controller apps. The folder \"javadoc\" contains the JavaDoc user documentation for the FTC SDK. Online User Forum For technical questions regarding the Control System or the FTC SDK, please visit the FTC Technology forum: FTC Technology Forum Release Information Version 5.5 (20200824-090813) Version 5.5 requires Android Studio 4.0 or later. New features Adds support for calling custom Java classes from Blocks OpModes (fixes SkyStone issue #161). Classes must be in the org.firstinspires.ftc.teamcode package. Methods must be public static and have no more than 21 parameters. Parameters declared as OpMode, LinearOpMode, Telemetry, and HardwareMap are supported and the argument is provided automatically, regardless of the order of the parameters. On the block, the sockets for those parameters are automatically filled in. Parameters declared as char or java.lang.Character will accept any block that returns text and will only use the first character in the text. Parameters declared as boolean or java.lang.Boolean will accept any block that returns boolean. Parameters declared as byte, java.lang.Byte, short, java.lang.Short, int, java.lang.Integer, long, or java.lang.Long, will accept any block that returns a number and will round that value to the nearest whole number. Parameters declared as float, java.lang.Float, double, java.lang.Double will accept any block that returns a number. Adds telemetry API method for setting display format Classic Monospace HTML (certain tags only) Adds blocks support for switching cameras. Adds Blocks support for TensorFlow Object Detection with a custom model. Adds support for uploading a custom TensorFlow Object Detection model in the Manage page, which is especially useful for Blocks and OnBotJava users. Shows new Control Hub blink codes when the WiFi band is switched using the Control Hub's button (only possible on Control Hub OS 1.1.2) Adds new warnings which can be disabled in the Advanced RC Settings Mismatched app versions warning Unnecessary 2.4 GHz WiFi usage warning REV Hub is running outdated firmware (older than version 1.8.2) Adds support for Sony PS4 gamepad, and reworks how gamepads work on the Driver Station Removes preference which sets gamepad type baseLine truncated
"fork": false,
"created_at": "2021-03-08T11:34:11Z",
"updated_at": "2026-04-30T06:01:34Z",
"updated_at": "2026-05-02T03:01:14Z",
"pushed_at": "2024-04-12T05:48:35Z",
"stargazers_count": 283,
"watchers_count": 283,
"stargazers_count": 284,
"watchers_count": 284,
"has_discussions": false,
"forks_count": 85,
"allow_forking": true,
@@ -147,7 +147,7 @@
"topics": [],
"visibility": "public",
"forks": 85,
"watchers": 283,
"watchers": 284,
"score": 0,
"subscribers_count": 13
},
2020/CVE-2020-0610.json
+2 -2
View File
@@ -58,8 +58,8 @@
"description": "🔍 Create a safe lab environment for testing CVE-2020-0610, a critical RCE vulnerability in Windows RD Gateway, with minimal disruption using DTLS techniques.",
"fork": false,
"created_at": "2025-09-04T13:21:35Z",
"updated_at": "2026-05-02T00:03:09Z",
"pushed_at": "2026-05-02T00:03:05Z",
"updated_at": "2026-05-02T03:43:25Z",
"pushed_at": "2026-05-02T03:43:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2020/CVE-2020-1472.json
+2 -2
View File
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-05-01T23:59:39Z",
"pushed_at": "2026-05-01T23:59:35Z",
"updated_at": "2026-05-02T05:25:36Z",
"pushed_at": "2026-05-02T05:25:33Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2021/CVE-2021-1732.json
-33
View File
@@ -230,39 +230,6 @@
"score": 0,
"subscribers_count": 2
},
{
"id": 451100080,
"name": "CVE-2021-1732-EXP-",
"full_name": "ExploitCN\/CVE-2021-1732-EXP-",
"owner": {
"login": "ExploitCN",
"id": 98264245,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/98264245?v=4",
"html_url": "https:\/\/github.com\/ExploitCN",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ExploitCN\/CVE-2021-1732-EXP-",
"description": "对1909下windows版本的EXP进行分析，并对代码添加调试和注释",
"fork": false,
"created_at": "2022-01-23T12:40:01Z",
"updated_at": "2022-04-12T12:06:58Z",
"pushed_at": "2022-04-12T12:06:55Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 560416302,
"name": "CVE-2021-1732",
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-05-01T23:35:06Z",
"pushed_at": "2026-05-01T23:35:02Z",
"updated_at": "2026-05-02T04:34:06Z",
"pushed_at": "2026-05-02T04:34:02Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2021/CVE-2021-4034.json
+2 -2
View File
@@ -2050,8 +2050,8 @@
"description": "🚀 Enhance your penetration testing with PwnKit Helper, a simple tool for exploiting the CVE-2021-4034 vulnerability in pkexec for local privilege escalation.",
"fork": false,
"created_at": "2025-10-01T09:53:03Z",
"updated_at": "2026-05-02T00:09:58Z",
"pushed_at": "2026-05-02T00:09:55Z",
"updated_at": "2026-05-02T03:50:36Z",
"pushed_at": "2026-05-02T03:50:32Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2021/CVE-2021-41773.json
-33
View File
@@ -2507,39 +2507,6 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 480821526,
"name": "CVE-2021-41773",
"full_name": "Chocapikk\/CVE-2021-41773",
"owner": {
"login": "Chocapikk",
"id": 88535377,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88535377?v=4",
"html_url": "https:\/\/github.com\/Chocapikk",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Chocapikk\/CVE-2021-41773",
"description": null,
"fork": false,
"created_at": "2022-04-12T13:25:58Z",
"updated_at": "2024-08-12T20:22:22Z",
"pushed_at": "2022-04-12T13:26:22Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 1
},
{
"id": 486245191,
"name": "Apache_Penetration_Tool",
2021/CVE-2021-44228.json
+66
View File
@@ -13876,5 +13876,71 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227018906,
"name": "Cyber-Attack-Simulation-",
"full_name": "sajanapamuditha\/Cyber-Attack-Simulation-",
"owner": {
"login": "sajanapamuditha",
"id": 242891739,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/242891739?v=4",
"html_url": "https:\/\/github.com\/sajanapamuditha",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/sajanapamuditha\/Cyber-Attack-Simulation-",
"description": " Log4Shell (CVE-2021-44228)",
"fork": false,
"created_at": "2026-05-02T05:17:53Z",
"updated_at": "2026-05-02T05:18:43Z",
"pushed_at": "2026-05-02T05:18:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227035026,
"name": "craready-test-java-vulns",
"full_name": "neilc1964techned\/craready-test-java-vulns",
"owner": {
"login": "neilc1964techned",
"id": 261917824,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/261917824?v=4",
"html_url": "https:\/\/github.com\/neilc1964techned",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/neilc1964techned\/craready-test-java-vulns",
"description": "CRAReady SBOM test fixture — Java\/Maven app with Log4Shell (CVE-2021-44228), Spring4Shell, Text4Shell, and other critical CVEs",
"fork": false,
"created_at": "2026-05-02T05:51:52Z",
"updated_at": "2026-05-02T05:51:58Z",
"pushed_at": "2026-05-02T05:51:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2022/CVE-2022-1388.json
+4 -4
View File
@@ -351,10 +351,10 @@
"description": "F5 BIG-IP RCE exploitation (CVE-2022-1388)",
"fork": false,
"created_at": "2022-05-09T10:34:38Z",
"updated_at": "2026-04-13T17:56:14Z",
"updated_at": "2026-05-02T05:35:46Z",
"pushed_at": "2022-05-16T12:40:51Z",
"stargazers_count": 86,
"watchers_count": 86,
"stargazers_count": 87,
"watchers_count": 87,
"has_discussions": false,
"forks_count": 17,
"allow_forking": true,
@@ -365,7 +365,7 @@
"topics": [],
"visibility": "public",
"forks": 17,
"watchers": 86,
"watchers": 87,
"score": 0,
"subscribers_count": 1
},
2022/CVE-2022-24125.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Documentation and proof of concept code for CVE-2022-24125 and CVE-2022-24126.",
"fork": false,
"created_at": "2022-01-28T20:37:14Z",
"updated_at": "2026-05-01T15:07:48Z",
"updated_at": "2026-05-02T02:30:11Z",
"pushed_at": "2022-08-30T02:11:05Z",
"stargazers_count": 167,
"watchers_count": 167,
"stargazers_count": 168,
"watchers_count": 168,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -34,7 +34,7 @@
],
"visibility": "public",
"forks": 8,
"watchers": 167,
"watchers": 168,
"score": 0,
"subscribers_count": 4
}
2022/CVE-2022-38691.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 93,
"watchers_count": 93,
"has_discussions": false,
"forks_count": 18,
"forks_count": 19,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -30,7 +30,7 @@
"unisoc"
],
"visibility": "public",
"forks": 18,
"forks": 19,
"watchers": 93,
"score": 0,
"subscribers_count": 6
2022/CVE-2022-38694.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "This is a one-time signature verification bypass. For persistent signature verification bypass, check https:\/\/github.com\/TomKing062\/CVE-2022-38691_38692",
"fork": false,
"created_at": "2023-06-10T08:31:26Z",
"updated_at": "2026-04-30T14:02:08Z",
"updated_at": "2026-05-02T02:02:27Z",
"pushed_at": "2025-06-14T16:55:26Z",
"stargazers_count": 544,
"watchers_count": 544,
"stargazers_count": 545,
"watchers_count": 545,
"has_discussions": true,
"forks_count": 73,
"forks_count": 74,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -30,8 +30,8 @@
"unisoc"
],
"visibility": "public",
"forks": 73,
"watchers": 544,
"forks": 74,
"watchers": 545,
"score": 0,
"subscribers_count": 12
},
2023/CVE-2023-20938.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2025-06-23T10:54:08Z",
"updated_at": "2026-04-30T13:47:38Z",
"updated_at": "2026-05-02T04:25:54Z",
"pushed_at": "2025-10-14T07:35:02Z",
"stargazers_count": 13,
"watchers_count": 13,
"stargazers_count": 14,
"watchers_count": 14,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 13,
"watchers": 14,
"score": 0,
"subscribers_count": 2
},
2023/CVE-2023-32434.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙",
"fork": false,
"created_at": "2025-08-13T09:19:29Z",
"updated_at": "2026-05-01T23:59:19Z",
"pushed_at": "2026-05-01T23:59:15Z",
"updated_at": "2026-05-02T06:30:52Z",
"pushed_at": "2026-05-02T06:30:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-39910.json
+2 -2
View File
@@ -66,8 +66,8 @@
"description": "🔒 Analyze the CVE-2023-39910 vulnerability in Libbitcoin Explorer to understand its impact on Bitcoin wallet security and protect your assets.",
"fork": false,
"created_at": "2026-01-07T14:24:08Z",
"updated_at": "2026-05-01T22:19:51Z",
"pushed_at": "2026-05-01T22:19:48Z",
"updated_at": "2026-05-02T04:45:09Z",
"pushed_at": "2026-05-02T04:45:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-0670.json
+2 -2
View File
@@ -172,8 +172,8 @@
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
"fork": false,
"created_at": "2026-01-08T01:32:09Z",
"updated_at": "2026-05-01T22:20:16Z",
"pushed_at": "2026-05-01T22:20:13Z",
"updated_at": "2026-05-02T04:45:29Z",
"pushed_at": "2026-05-02T04:45:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-20017.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 140,
"watchers_count": 140,
"has_discussions": false,
"forks_count": 31,
"forks_count": 30,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 31,
"forks": 30,
"watchers": 140,
"score": 0,
"subscribers_count": 2
2024/CVE-2024-21413.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": "CVE-2024-21413 PoC for THM Lab",
"fork": false,
"created_at": "2024-02-17T14:52:52Z",
"updated_at": "2026-04-27T08:29:02Z",
"updated_at": "2026-05-02T06:01:29Z",
"pushed_at": "2024-03-13T02:44:28Z",
"stargazers_count": 239,
"watchers_count": 239,
"stargazers_count": 238,
"watchers_count": 238,
"has_discussions": false,
"forks_count": 56,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 56,
"watchers": 239,
"watchers": 238,
"score": 0,
"subscribers_count": 2
},
2024/CVE-2024-22120.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "Time Based SQL Injection in Zabbix Server Audit Log --> RCE",
"fork": false,
"created_at": "2024-05-20T03:29:09Z",
"updated_at": "2026-04-03T01:00:20Z",
"updated_at": "2026-05-02T03:18:31Z",
"pushed_at": "2024-05-21T10:30:49Z",
"stargazers_count": 137,
"watchers_count": 137,
"stargazers_count": 138,
"watchers_count": 138,
"has_discussions": false,
"forks_count": 22,
"forks_count": 23,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -31,8 +31,8 @@
"zabbix"
],
"visibility": "public",
"forks": 22,
"watchers": 137,
"forks": 23,
"watchers": 138,
"score": 0,
"subscribers_count": 1
},
2024/CVE-2024-23222.json
+2 -2
View File
@@ -80,8 +80,8 @@
"description": "Analyze and deobfuscate the Coruna Exploit Kit (CVE-2024-23222) to enhance understanding and detection of related threats.",
"fork": false,
"created_at": "2026-03-15T16:36:07Z",
"updated_at": "2026-05-01T23:06:26Z",
"pushed_at": "2026-05-01T23:06:23Z",
"updated_at": "2026-05-02T05:33:51Z",
"pushed_at": "2026-05-02T05:33:47Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2024/CVE-2024-3094.json
+2 -2
View File
@@ -982,7 +982,7 @@
"stargazers_count": 3558,
"watchers_count": 3558,
"has_discussions": false,
"forks_count": 236,
"forks_count": 235,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -990,7 +990,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 236,
"forks": 235,
"watchers": 3558,
"score": 0,
"subscribers_count": 34
2024/CVE-2024-3400.json
+4 -4
View File
@@ -443,10 +443,10 @@
"description": "CVE-2024-3400 PAN-OS: OS Command Injection Vulnerability in GlobalProtect",
"fork": false,
"created_at": "2024-04-16T21:24:15Z",
"updated_at": "2026-03-20T09:51:16Z",
"updated_at": "2026-05-02T00:43:56Z",
"pushed_at": "2024-04-17T11:03:32Z",
"stargazers_count": 29,
"watchers_count": 29,
"stargazers_count": 30,
"watchers_count": 30,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -457,7 +457,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 29,
"watchers": 30,
"score": 0,
"subscribers_count": 2
},
2024/CVE-2024-49039.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "WPTaskScheduler RPC Persistence & CVE-2024-49039 via Task Scheduler",
"fork": false,
"created_at": "2024-11-19T08:57:18Z",
"updated_at": "2026-04-28T02:11:07Z",
"updated_at": "2026-05-02T03:08:51Z",
"pushed_at": "2025-07-21T02:21:21Z",
"stargazers_count": 143,
"watchers_count": 143,
"stargazers_count": 144,
"watchers_count": 144,
"has_discussions": false,
"forks_count": 28,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 28,
"watchers": 143,
"watchers": 144,
"score": 0,
"subscribers_count": 2
}
2024/CVE-2024-49113.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 516,
"watchers_count": 516,
"has_discussions": false,
"forks_count": 119,
"forks_count": 118,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 119,
"forks": 118,
"watchers": 516,
"score": 0,
"subscribers_count": 5
2024/CVE-2024-52380.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "Picsmize plugin for WordPress is vulnerable to arbitrary file uploads.",
"fork": false,
"created_at": "2025-01-18T04:10:09Z",
"updated_at": "2025-04-03T22:43:42Z",
"updated_at": "2026-05-02T05:57:21Z",
"pushed_at": "2025-01-18T04:37:25Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 1
}
2024/CVE-2024-6387.json
+2 -2
View File
@@ -85,7 +85,7 @@
"stargazers_count": 126,
"watchers_count": 126,
"has_discussions": false,
"forks_count": 41,
"forks_count": 40,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -100,7 +100,7 @@
"ssh"
],
"visibility": "public",
"forks": 41,
"forks": 40,
"watchers": 126,
"score": 0,
"subscribers_count": 4
2025/CVE-2025-14847.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
"fork": false,
"created_at": "2025-07-30T15:52:00Z",
"updated_at": "2026-05-01T22:25:12Z",
"pushed_at": "2026-05-01T22:25:08Z",
"updated_at": "2026-05-02T04:50:39Z",
"pushed_at": "2026-05-02T04:50:35Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1129,8 +1129,8 @@
"description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
"fork": false,
"created_at": "2026-01-14T06:05:44Z",
"updated_at": "2026-05-01T22:24:10Z",
"pushed_at": "2026-05-01T22:24:07Z",
"updated_at": "2026-05-02T04:49:38Z",
"pushed_at": "2026-05-02T04:49:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-21479.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2025-21479 proof-of-concept, I think",
"fork": false,
"created_at": "2025-06-19T19:47:52Z",
"updated_at": "2026-04-25T13:49:26Z",
"updated_at": "2026-05-02T05:36:04Z",
"pushed_at": "2025-08-16T06:52:13Z",
"stargazers_count": 237,
"watchers_count": 237,
"stargazers_count": 238,
"watchers_count": 238,
"has_discussions": false,
"forks_count": 53,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 53,
"watchers": 237,
"watchers": 238,
"score": 0,
"subscribers_count": 2
},
2025/CVE-2025-2304.json
+2 -2
View File
@@ -412,8 +412,8 @@
"description": "🛠️ Exploit CVE-2025-2304 in Camaleon CMS easily with this Python script for privilege escalation, tested on version 2.9.0.",
"fork": false,
"created_at": "2026-02-14T20:01:20Z",
"updated_at": "2026-05-01T22:46:03Z",
"pushed_at": "2026-05-01T22:45:59Z",
"updated_at": "2026-05-02T05:12:55Z",
"pushed_at": "2026-05-02T05:12:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-24204.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "FairPlay decryptor (dump iPA) for iOS Application that running on macOS with SIP-enabled, using CVE-2025-24204. Support macOS 15.0-15.2",
"fork": false,
"created_at": "2025-09-04T17:49:51Z",
"updated_at": "2026-04-30T02:55:40Z",
"updated_at": "2026-05-02T03:13:56Z",
"pushed_at": "2025-09-04T17:59:49Z",
"stargazers_count": 128,
"watchers_count": 128,
"stargazers_count": 129,
"watchers_count": 129,
"has_discussions": false,
"forks_count": 19,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 19,
"watchers": 128,
"watchers": 129,
"score": 0,
"subscribers_count": 2
}
2025/CVE-2025-24257.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis",
"fork": false,
"created_at": "2026-04-04T03:42:55Z",
"updated_at": "2026-05-01T23:17:46Z",
"pushed_at": "2026-05-01T23:17:43Z",
"updated_at": "2026-05-02T05:46:42Z",
"pushed_at": "2026-05-02T05:46:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-24367.json
+33
View File
@@ -163,5 +163,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227065831,
"name": "CVE-2025-24367-WebShell-",
"full_name": "dantedansh\/CVE-2025-24367-WebShell-",
"owner": {
"login": "dantedansh",
"id": 110216359,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/110216359?v=4",
"html_url": "https:\/\/github.com\/dantedansh",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/dantedansh\/CVE-2025-24367-WebShell-",
"description": "CVE-2025-24367 - De Cacti, un script hecho para obtener una webshell gracias a la vulnerabilidad de cacti en su versión 1.2.28.",
"fork": false,
"created_at": "2026-05-02T06:39:48Z",
"updated_at": "2026-05-02T06:45:56Z",
"pushed_at": "2026-05-02T06:45:52Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-31258.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔓 Explore CVE-2025-31258 with this PoC demonstrating partial sandbox escape using RemoteViewServices for practical 1-day security practice.",
"fork": false,
"created_at": "2020-06-23T15:20:11Z",
"updated_at": "2026-05-02T00:05:02Z",
"pushed_at": "2026-05-02T00:04:59Z",
"updated_at": "2026-05-02T06:37:06Z",
"pushed_at": "2026-05-02T06:37:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-32463.json
+6 -6
View File
@@ -645,8 +645,8 @@
"description": "Demonstrate CVE-2025-32463 with this PoC for sudo's chroot feature. Explore the exploit and its impact on vulnerable sudo versions. 🐱💻🔒",
"fork": false,
"created_at": "2025-07-04T18:20:09Z",
"updated_at": "2026-05-01T23:57:42Z",
"pushed_at": "2026-05-01T23:57:39Z",
"updated_at": "2026-05-02T06:29:21Z",
"pushed_at": "2026-05-02T06:29:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -1628,8 +1628,8 @@
"description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.",
"fork": false,
"created_at": "2025-09-20T00:42:07Z",
"updated_at": "2026-05-02T00:06:25Z",
"pushed_at": "2026-05-02T00:06:22Z",
"updated_at": "2026-05-02T06:38:24Z",
"pushed_at": "2026-05-02T06:38:20Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1680,8 +1680,8 @@
"description": null,
"fork": false,
"created_at": "2025-09-20T02:01:08Z",
"updated_at": "2026-05-02T00:06:20Z",
"pushed_at": "2026-05-02T00:06:17Z",
"updated_at": "2026-05-02T06:38:28Z",
"pushed_at": "2026-05-02T06:38:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-36911.json
+6 -6
View File
@@ -86,10 +86,10 @@
"description": "WPair is a defensive security research tool that demonstrates the CVE-2025-36911 (eg WhisperPair) vulnerability in Google's Fast Pair protocol. This vulnerability affects millions of Bluetooth audio devices worldwide, allowing unauthorized pairing and potential microphone access without user consent.",
"fork": false,
"created_at": "2026-01-17T05:28:08Z",
"updated_at": "2026-04-30T20:55:01Z",
"updated_at": "2026-05-02T06:34:57Z",
"pushed_at": "2026-01-18T00:15:59Z",
"stargazers_count": 773,
"watchers_count": 773,
"stargazers_count": 774,
"watchers_count": 774,
"has_discussions": false,
"forks_count": 87,
"allow_forking": true,
@@ -100,7 +100,7 @@
"topics": [],
"visibility": "public",
"forks": 87,
"watchers": 773,
"watchers": 774,
"score": 0,
"subscribers_count": 22
},
@@ -294,8 +294,8 @@
"description": "🔍 Scan and research CVE-2025-36911 vulnerabilities with WPair, a specialized tool for Android built in Kotlin, ensuring your applications remain secure.",
"fork": false,
"created_at": "2026-01-29T01:59:47Z",
"updated_at": "2026-05-01T22:36:05Z",
"pushed_at": "2026-05-01T22:36:02Z",
"updated_at": "2026-05-02T05:02:14Z",
"pushed_at": "2026-05-02T05:02:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-4517.json
+4 -4
View File
@@ -82,10 +82,10 @@
"description": "Python tarfile data filter bypass via PATH_MAX overflow in os.path.realpath() - CVE-2025-4517 \/ CVE-2025-4330",
"fork": false,
"created_at": "2026-02-15T19:39:19Z",
"updated_at": "2026-04-14T10:11:07Z",
"updated_at": "2026-05-02T01:11:07Z",
"pushed_at": "2026-02-15T19:56:08Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -96,7 +96,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-49144.json
+2 -2
View File
@@ -251,8 +251,8 @@
"description": null,
"fork": false,
"created_at": "2025-09-19T17:17:19Z",
"updated_at": "2026-05-02T00:06:09Z",
"pushed_at": "2026-05-02T00:06:05Z",
"updated_at": "2026-05-02T06:38:17Z",
"pushed_at": "2026-05-02T06:38:14Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-49844.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.",
"fork": false,
"created_at": "2019-04-13T07:51:09Z",
"updated_at": "2026-05-02T00:24:24Z",
"pushed_at": "2026-05-02T00:24:20Z",
"updated_at": "2026-05-02T04:05:21Z",
"pushed_at": "2026-05-02T04:05:18Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
"fork": false,
"created_at": "2022-04-06T09:27:39Z",
"updated_at": "2026-05-02T00:25:11Z",
"pushed_at": "2026-05-02T00:25:08Z",
"updated_at": "2026-05-02T04:06:12Z",
"pushed_at": "2026-05-02T04:06:08Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-52915.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055,).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-05-01T08:02:14Z",
"updated_at": "2026-05-02T05:02:36Z",
"pushed_at": "2026-04-12T07:04:32Z",
"stargazers_count": 711,
"watchers_count": 711,
"stargazers_count": 713,
"watchers_count": 713,
"has_discussions": false,
"forks_count": 107,
"allow_forking": true,
@@ -37,7 +37,7 @@
],
"visibility": "public",
"forks": 107,
"watchers": 711,
"watchers": 713,
"score": 0,
"subscribers_count": 18
}
2025/CVE-2025-5419.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛡️ Analyze CVE-2025-5419 to exploit an uninitialized read vulnerability in V8 for arbitrary read\/write access within the sandbox environment.",
"fork": false,
"created_at": "2023-01-25T04:41:49Z",
"updated_at": "2026-05-01T22:44:13Z",
"pushed_at": "2026-05-01T22:44:09Z",
"updated_at": "2026-05-02T05:11:05Z",
"pushed_at": "2026-05-02T05:11:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-54253.json
+2 -2
View File
@@ -67,8 +67,8 @@
"description": "🐙 CVE-2025-54253 exploit demo for Adobe AEM Forms on JEE: OGNL injection to RCE with PoC, Python 3.10 exploit code, reproducer and mitigation guidance.",
"fork": false,
"created_at": "2025-08-17T22:04:33Z",
"updated_at": "2026-05-02T00:00:29Z",
"pushed_at": "2026-05-02T00:00:25Z",
"updated_at": "2026-05-02T06:32:15Z",
"pushed_at": "2026-05-02T06:32:12Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-54424.json
+2 -2
View File
@@ -53,8 +53,8 @@
"description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐",
"fork": false,
"created_at": "2025-08-14T05:16:16Z",
"updated_at": "2026-05-02T00:00:09Z",
"pushed_at": "2026-05-02T00:00:04Z",
"updated_at": "2026-05-02T06:31:53Z",
"pushed_at": "2026-05-02T06:31:50Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-55182.json
+37 -37
View File
@@ -14,8 +14,8 @@
"description": "🔍 Demonstrate CVE-2025-55182, a critical vulnerability in React Server Components allowing unauthenticated arbitrary code execution.",
"fork": false,
"created_at": "2021-09-18T02:04:33Z",
"updated_at": "2026-05-01T22:11:14Z",
"pushed_at": "2026-05-01T22:11:09Z",
"updated_at": "2026-05-02T04:35:46Z",
"pushed_at": "2026-05-02T04:35:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.",
"fork": false,
"created_at": "2022-06-17T10:19:10Z",
"updated_at": "2026-05-01T22:10:36Z",
"pushed_at": "2026-05-01T22:10:32Z",
"updated_at": "2026-05-02T04:35:12Z",
"pushed_at": "2026-05-02T04:35:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -151,8 +151,8 @@
"description": "🔍 Detect vulnerabilities CVE-2025-55182 and CVE-2025-66478 in Next.js apps with this reliable command-line scanner.",
"fork": false,
"created_at": "2023-11-27T18:17:43Z",
"updated_at": "2026-05-01T22:10:27Z",
"pushed_at": "2026-05-01T22:10:23Z",
"updated_at": "2026-05-02T04:35:25Z",
"pushed_at": "2026-05-02T04:35:21Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -203,8 +203,8 @@
"description": "🚨 Exploit CVE-2025-55182, a critical RCE vulnerability in React Server Components for Next.js apps; enables testing for prototype pollution risks.",
"fork": false,
"created_at": "2024-04-24T02:36:56Z",
"updated_at": "2026-05-01T22:11:31Z",
"pushed_at": "2026-05-01T22:11:27Z",
"updated_at": "2026-05-02T04:36:26Z",
"pushed_at": "2026-05-02T04:36:22Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -251,8 +251,8 @@
"description": "🚨 Exploit and scan for CVE-2025-55182, a critical React\/Next.js vulnerability enabling remote code execution through prototype pollution techniques.",
"fork": false,
"created_at": "2024-05-28T16:48:51Z",
"updated_at": "2026-05-01T22:09:56Z",
"pushed_at": "2026-05-01T22:09:52Z",
"updated_at": "2026-05-02T04:34:55Z",
"pushed_at": "2026-05-02T04:34:52Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -303,8 +303,8 @@
"description": null,
"fork": false,
"created_at": "2024-11-29T12:32:19Z",
"updated_at": "2026-05-01T22:11:07Z",
"pushed_at": "2026-05-01T22:11:04Z",
"updated_at": "2026-05-02T04:35:54Z",
"pushed_at": "2026-05-02T04:35:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -352,8 +352,8 @@
"description": "🛠️ Exploit CVE-2025-55182 effortlessly with this GUI tool for vulnerability detection, command execution, and Shell reverse connections.",
"fork": false,
"created_at": "2025-04-21T22:04:31Z",
"updated_at": "2026-05-01T22:14:30Z",
"pushed_at": "2026-05-01T22:14:26Z",
"updated_at": "2026-05-02T04:38:54Z",
"pushed_at": "2026-05-02T04:38:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -406,8 +406,8 @@
"description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
"fork": false,
"created_at": "2025-06-06T16:34:46Z",
"updated_at": "2026-05-01T22:10:36Z",
"pushed_at": "2026-05-01T22:10:32Z",
"updated_at": "2026-05-02T04:35:35Z",
"pushed_at": "2026-05-02T04:35:31Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -458,8 +458,8 @@
"description": "⚠️ Explore a vulnerable environment to test security scanners against the CVE-2025-55182 RCE flaw in React Server Components and Next.js applications.",
"fork": false,
"created_at": "2025-07-15T18:33:34Z",
"updated_at": "2026-05-01T22:11:23Z",
"pushed_at": "2026-05-01T22:11:20Z",
"updated_at": "2026-05-02T04:36:23Z",
"pushed_at": "2026-05-02T04:36:20Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -10208,10 +10208,10 @@
"description": "Advanced Exploitation Toolkit for Next.js Server Actions (CVE-2025-55182)",
"fork": false,
"created_at": "2025-12-12T11:31:45Z",
"updated_at": "2026-04-22T13:03:28Z",
"updated_at": "2026-05-02T05:08:03Z",
"pushed_at": "2025-12-12T11:52:59Z",
"stargazers_count": 36,
"watchers_count": 36,
"stargazers_count": 37,
"watchers_count": 37,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -10230,7 +10230,7 @@
],
"visibility": "public",
"forks": 3,
"watchers": 36,
"watchers": 37,
"score": 0,
"subscribers_count": 0
},
@@ -12284,8 +12284,8 @@
"description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.",
"fork": false,
"created_at": "2025-12-24T14:48:19Z",
"updated_at": "2026-05-01T22:10:41Z",
"pushed_at": "2026-05-01T22:10:38Z",
"updated_at": "2026-05-02T04:35:11Z",
"pushed_at": "2026-05-02T04:35:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12369,8 +12369,8 @@
"description": "🚨 Identify and address CVE-2025-55182, a critical React Server vulnerability allowing remote code execution without authentication.",
"fork": false,
"created_at": "2025-12-24T18:44:51Z",
"updated_at": "2026-05-01T22:09:31Z",
"pushed_at": "2026-05-01T22:09:27Z",
"updated_at": "2026-05-02T04:34:33Z",
"pushed_at": "2026-05-02T04:34:29Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12418,8 +12418,8 @@
"description": "🚨 Demonstrate CVE-2025-55182, a critical React vulnerability allowing remote code execution via prototype chain pollution in `[email protected]`.",
"fork": false,
"created_at": "2025-12-24T18:48:07Z",
"updated_at": "2026-05-01T22:09:36Z",
"pushed_at": "2026-05-01T22:09:33Z",
"updated_at": "2026-05-02T04:34:37Z",
"pushed_at": "2026-05-02T04:34:34Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12503,8 +12503,8 @@
"description": "🔍 Exploit CVE-2025-55182 in Next.js with this versatile tool for security research, featuring advanced payloads and WAF bypass techniques.",
"fork": false,
"created_at": "2025-12-25T19:28:28Z",
"updated_at": "2026-05-01T22:11:03Z",
"pushed_at": "2026-05-01T22:10:59Z",
"updated_at": "2026-05-02T04:36:06Z",
"pushed_at": "2026-05-02T04:36:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12705,8 +12705,8 @@
"description": "⚡ Discover and exploit CVE-2025-55182 with this PoC, offering reliable remote code execution tests for React Server Components in Next.js.",
"fork": false,
"created_at": "2025-12-26T22:26:55Z",
"updated_at": "2026-05-01T22:11:02Z",
"pushed_at": "2026-05-01T22:10:58Z",
"updated_at": "2026-05-02T04:35:52Z",
"pushed_at": "2026-05-02T04:35:48Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12975,8 +12975,8 @@
"description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
"fork": false,
"created_at": "2026-01-02T01:28:57Z",
"updated_at": "2026-05-01T22:15:56Z",
"pushed_at": "2026-05-01T22:15:52Z",
"updated_at": "2026-05-02T04:40:48Z",
"pushed_at": "2026-05-02T04:40:44Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -13496,8 +13496,8 @@
"description": "🔍 Exploit CVE-2025-55182 vulnerabilities in Next.js and React with this efficient framework for rapid testing and assessment.",
"fork": false,
"created_at": "2026-01-08T16:28:04Z",
"updated_at": "2026-05-01T22:20:59Z",
"pushed_at": "2026-05-01T22:20:55Z",
"updated_at": "2026-05-02T04:46:17Z",
"pushed_at": "2026-05-02T04:46:13Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -14396,7 +14396,7 @@
"fork": false,
"created_at": "2026-02-18T11:22:50Z",
"updated_at": "2026-03-31T09:42:49Z",
"pushed_at": "2026-05-01T02:54:09Z",
"pushed_at": "2026-05-02T02:35:43Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-55184.json
+2 -2
View File
@@ -289,8 +289,8 @@
"description": "🛠️ Test and validate the CVE-2025-55184 vulnerability in React Server Components to enhance your application's security against denial-of-service attacks.",
"fork": false,
"created_at": "2026-01-02T05:04:03Z",
"updated_at": "2026-05-01T22:16:10Z",
"pushed_at": "2026-05-01T22:16:06Z",
"updated_at": "2026-05-02T04:41:12Z",
"pushed_at": "2026-05-02T04:41:08Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-59287.json
+2 -2
View File
@@ -200,8 +200,8 @@
"description": "🔍 Analyze WSUS deserialization behavior to enhance security, generate reports, and identify configuration weaknesses in your infrastructure.",
"fork": false,
"created_at": "2026-01-29T02:16:04Z",
"updated_at": "2026-05-01T22:36:01Z",
"pushed_at": "2026-05-01T22:35:58Z",
"updated_at": "2026-05-02T05:02:13Z",
"pushed_at": "2026-05-02T05:02:10Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-61882.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔍 Detect vulnerabilities CVE-2025-61882 and CVE-2025-61884 in Oracle E-Business Suite to help secure your systems from potential remote code execution threats.",
"fork": false,
"created_at": "2025-03-04T15:38:32Z",
"updated_at": "2026-05-02T00:23:05Z",
"pushed_at": "2026-05-02T00:23:02Z",
"updated_at": "2026-05-02T04:03:57Z",
"pushed_at": "2026-05-02T04:03:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-6554.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "🔍 Demonstrate and validate the `addressof` and `fakeobj` primitives in the V8 sandbox for advanced security research on CVE-2025-6554.",
"fork": false,
"created_at": "2025-08-10T21:07:43Z",
"updated_at": "2026-05-01T22:05:17Z",
"pushed_at": "2026-05-01T22:05:13Z",
"updated_at": "2026-05-02T04:30:17Z",
"pushed_at": "2026-05-02T04:30:13Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-66398.json
+2 -2
View File
@@ -64,8 +64,8 @@
"description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.",
"fork": false,
"created_at": "2026-03-23T09:09:21Z",
"updated_at": "2026-05-01T23:11:16Z",
"pushed_at": "2026-05-01T23:11:13Z",
"updated_at": "2026-05-02T05:39:20Z",
"pushed_at": "2026-05-02T05:39:16Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-66478.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.",
"fork": false,
"created_at": "2025-10-01T07:40:09Z",
"updated_at": "2026-05-01T22:11:52Z",
"pushed_at": "2026-05-01T22:11:48Z",
"updated_at": "2026-05-02T04:37:27Z",
"pushed_at": "2026-05-02T04:37:24Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-68921.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.",
"fork": false,
"created_at": "2026-01-24T21:00:41Z",
"updated_at": "2026-05-01T22:32:53Z",
"pushed_at": "2026-05-01T22:32:49Z",
"updated_at": "2026-05-02T04:58:54Z",
"pushed_at": "2026-05-02T04:58:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-69985.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit CVE-2025-69985 to bypass authentication and execute remote commands on FUXA versions ≤ 1.2.8 via the \/api\/runscript endpoint.",
"fork": false,
"created_at": "2025-04-10T09:18:30Z",
"updated_at": "2026-05-01T22:58:30Z",
"pushed_at": "2026-05-01T22:58:26Z",
"updated_at": "2026-05-02T05:25:35Z",
"pushed_at": "2026-05-02T05:25:31Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-70795.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.",
"fork": false,
"created_at": "2024-04-20T04:18:24Z",
"updated_at": "2026-05-01T22:53:54Z",
"pushed_at": "2026-05-01T22:53:50Z",
"updated_at": "2026-05-02T05:21:01Z",
"pushed_at": "2026-05-02T05:20:57Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-8088.json
+2 -2
View File
@@ -838,8 +838,8 @@
"description": "🛠 Exploit CVE-2025-8088 with this Python tool to generate malicious WinRAR archives that ensure payload persistence in Windows startup folders.",
"fork": false,
"created_at": "2025-12-20T13:52:21Z",
"updated_at": "2026-05-01T22:06:30Z",
"pushed_at": "2026-05-01T22:06:26Z",
"updated_at": "2026-05-02T04:31:33Z",
"pushed_at": "2026-05-02T04:31:29Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-8110.json
+2 -2
View File
@@ -146,8 +146,8 @@
"description": "🔍 Detect improper symbolic link handling in Gogs' PutContents API, exposing local code execution risks for versions 0.13.3 and earlier.",
"fork": false,
"created_at": "2025-12-31T13:25:07Z",
"updated_at": "2026-05-01T22:15:14Z",
"pushed_at": "2026-05-01T22:15:11Z",
"updated_at": "2026-05-02T04:40:18Z",
"pushed_at": "2026-05-02T04:40:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-9074.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🚀 Exploit CVE-2025-9074 with this Docker escape framework, simplifying API vulnerabilities and enhancing security testing for developers and researchers.",
"fork": false,
"created_at": "2024-06-19T23:21:41Z",
"updated_at": "2026-05-01T22:16:49Z",
"pushed_at": "2026-05-01T22:16:45Z",
"updated_at": "2026-05-02T04:41:48Z",
"pushed_at": "2026-05-02T04:41:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-0828.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.",
"fork": false,
"created_at": "2024-04-20T04:18:24Z",
"updated_at": "2026-05-01T22:53:54Z",
"pushed_at": "2026-05-01T22:53:50Z",
"updated_at": "2026-05-02T05:21:01Z",
"pushed_at": "2026-05-02T05:20:57Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-1337.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 1150557425,
"name": "CVE-2026-1337",
"full_name": "JoakimBulow\/CVE-2026-1337",
"owner": {
"login": "JoakimBulow",
"id": 2591229,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/2591229?v=4",
"html_url": "https:\/\/github.com\/JoakimBulow",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/JoakimBulow\/CVE-2026-1337",
"description": "CVE-2026-1337 - Neo4j - Log Injection",
"fork": false,
"created_at": "2026-02-05T12:24:04Z",
"updated_at": "2026-04-21T09:28:38Z",
"pushed_at": "2026-02-05T13:12:05Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 1
}
]
2026/CVE-2026-1953.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 1150325410,
"name": "CVE-2026-1953-Disclosure",
"full_name": "carlosbudiman\/CVE-2026-1953-Disclosure",
"owner": {
"login": "carlosbudiman",
"id": 74974341,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74974341?v=4",
"html_url": "https:\/\/github.com\/carlosbudiman",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/carlosbudiman\/CVE-2026-1953-Disclosure",
"description": "Stored cross-site scripting (XSS) vulnerability in the edit profile feature at Nukegraphic CMS V3.1.2",
"fork": false,
"created_at": "2026-02-05T06:25:43Z",
"updated_at": "2026-03-18T15:28:34Z",
"pushed_at": "2026-02-05T11:57:16Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-20841.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.",
"fork": false,
"created_at": "2024-09-22T12:19:06Z",
"updated_at": "2026-05-01T22:53:11Z",
"pushed_at": "2026-05-01T22:53:07Z",
"updated_at": "2026-05-02T05:20:12Z",
"pushed_at": "2026-05-02T05:20:08Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -412,8 +412,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.",
"fork": false,
"created_at": "2026-02-26T05:21:28Z",
"updated_at": "2026-05-01T22:52:13Z",
"pushed_at": "2026-05-01T22:52:09Z",
"updated_at": "2026-05-02T05:19:17Z",
"pushed_at": "2026-05-02T05:19:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-21509.json
-66
View File
@@ -32,72 +32,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1149781000,
"name": "detect_CVE-2026-21509",
"full_name": "decalage2\/detect_CVE-2026-21509",
"owner": {
"login": "decalage2",
"id": 5989656,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5989656?v=4",
"html_url": "https:\/\/github.com\/decalage2",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/decalage2\/detect_CVE-2026-21509",
"description": "YARA rule and python script to detect potential exploits for the CVE-2026-21509 vulnerability in MS Office",
"fork": false,
"created_at": "2026-02-04T14:13:02Z",
"updated_at": "2026-02-21T17:44:42Z",
"pushed_at": "2026-02-04T15:35:45Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1150570492,
"name": "CVE-2026-21509",
"full_name": "kaizensecurity\/CVE-2026-21509",
"owner": {
"login": "kaizensecurity",
"id": 50189722,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50189722?v=4",
"html_url": "https:\/\/github.com\/kaizensecurity",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/kaizensecurity\/CVE-2026-21509",
"description": null,
"fork": false,
"created_at": "2026-02-05T12:42:40Z",
"updated_at": "2026-02-05T12:43:10Z",
"pushed_at": "2026-02-05T12:43:04Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1155262834,
"name": "cve-2026-21509-mitigation",
2026/CVE-2026-2406.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔍 Analyze and detect CVE-2026-2406 vulnerabilities in Telnet to enhance security and prevent unauthorized access with this professional research engine.",
"fork": false,
"created_at": "2025-04-16T07:20:12Z",
"updated_at": "2026-05-01T22:43:39Z",
"pushed_at": "2026-05-01T22:43:36Z",
"updated_at": "2026-05-02T05:10:39Z",
"pushed_at": "2026-05-02T05:10:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24061.json
+2 -134
View File
@@ -89,8 +89,8 @@
"description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.",
"fork": false,
"created_at": "2026-02-03T19:46:10Z",
"updated_at": "2026-05-01T22:40:19Z",
"pushed_at": "2026-05-01T22:40:15Z",
"updated_at": "2026-05-02T05:07:02Z",
"pushed_at": "2026-05-02T05:06:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -125,138 +125,6 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 1150009382,
"name": "telnet-CVE-2026-24061",
"full_name": "lavabyte\/telnet-CVE-2026-24061",
"owner": {
"login": "lavabyte",
"id": 138317871,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/138317871?v=4",
"html_url": "https:\/\/github.com\/lavabyte",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/lavabyte\/telnet-CVE-2026-24061",
"description": null,
"fork": false,
"created_at": "2026-02-04T19:22:29Z",
"updated_at": "2026-02-04T19:57:01Z",
"pushed_at": "2026-02-04T19:56:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1150066721,
"name": "inetutils-telnetd-cve-2026-24061",
"full_name": "canpilayda\/inetutils-telnetd-cve-2026-24061",
"owner": {
"login": "canpilayda",
"id": 165958127,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/165958127?v=4",
"html_url": "https:\/\/github.com\/canpilayda",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/canpilayda\/inetutils-telnetd-cve-2026-24061",
"description": null,
"fork": false,
"created_at": "2026-02-04T20:59:41Z",
"updated_at": "2026-02-04T21:08:39Z",
"pushed_at": "2026-02-04T21:08:36Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1150709517,
"name": "scan-cve-2026-24061",
"full_name": "killsystema\/scan-cve-2026-24061",
"owner": {
"login": "killsystema",
"id": 11667300,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/11667300?v=4",
"html_url": "https:\/\/github.com\/killsystema",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/killsystema\/scan-cve-2026-24061",
"description": null,
"fork": false,
"created_at": "2026-02-05T15:47:03Z",
"updated_at": "2026-02-05T16:06:55Z",
"pushed_at": "2026-02-05T16:00:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1151018164,
"name": "CVE-2026-24061-GNU-inetutils-Telnet-Detector",
"full_name": "nrnw\/CVE-2026-24061-GNU-inetutils-Telnet-Detector",
"owner": {
"login": "nrnw",
"id": 25027417,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25027417?v=4",
"html_url": "https:\/\/github.com\/nrnw",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/nrnw\/CVE-2026-24061-GNU-inetutils-Telnet-Detector",
"description": "A passive detection tool for identifying potential exposure to CVE-2026-24061 in GNU inetutils telnet installations",
"fork": false,
"created_at": "2026-02-06T00:36:20Z",
"updated_at": "2026-02-06T01:20:53Z",
"pushed_at": "2026-02-06T01:20:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1151601240,
"name": "cve-2026-24061",
2026/CVE-2026-24135.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 1151551787,
"name": "CVE-2026-24135",
"full_name": "reschjonas\/CVE-2026-24135",
"owner": {
"login": "reschjonas",
"id": 193651292,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/193651292?v=4",
"html_url": "https:\/\/github.com\/reschjonas",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/reschjonas\/CVE-2026-24135",
"description": "Arbitrary File Deletion in Gogs via Wiki Path Traversal",
"fork": false,
"created_at": "2026-02-06T15:57:03Z",
"updated_at": "2026-04-13T12:52:52Z",
"pushed_at": "2026-02-06T16:00:50Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-24291.json
+2 -2
View File
@@ -80,8 +80,8 @@
"description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions",
"fork": false,
"created_at": "2026-03-26T04:38:27Z",
"updated_at": "2026-05-01T23:13:20Z",
"pushed_at": "2026-05-01T23:13:16Z",
"updated_at": "2026-05-02T05:41:24Z",
"pushed_at": "2026-05-02T05:41:20Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-2441.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.",
"fork": false,
"created_at": "2026-03-03T14:19:18Z",
"updated_at": "2026-05-01T22:55:40Z",
"pushed_at": "2026-05-01T22:55:36Z",
"updated_at": "2026-05-02T05:22:47Z",
"pushed_at": "2026-05-02T05:22:43Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-2472.json
+2 -2
View File
@@ -65,8 +65,8 @@
"description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.",
"fork": false,
"created_at": "2026-03-10T14:40:04Z",
"updated_at": "2026-05-01T23:01:13Z",
"pushed_at": "2026-05-01T23:01:09Z",
"updated_at": "2026-05-02T05:28:27Z",
"pushed_at": "2026-05-02T05:28:24Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-25253.json
-33
View File
@@ -73,39 +73,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1151296434,
"name": "openclaw-vuln-report",
"full_name": "Joseph19820124\/openclaw-vuln-report",
"owner": {
"login": "Joseph19820124",
"id": 164839249,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/164839249?v=4",
"html_url": "https:\/\/github.com\/Joseph19820124",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Joseph19820124\/openclaw-vuln-report",
"description": "OpenClaw CVE-2026-25253 漏洞分析中文版",
"fork": false,
"created_at": "2026-02-06T09:39:29Z",
"updated_at": "2026-02-06T09:40:00Z",
"pushed_at": "2026-02-06T09:39:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1152671546,
"name": "CVE-2026-25253-research",
2026/CVE-2026-25643.json
+2 -35
View File
@@ -1,37 +1,4 @@
[
{
"id": 1150930488,
"name": "CVE-2026-25643-Frigate-RCE",
"full_name": "jduardo2704\/CVE-2026-25643-Frigate-RCE",
"owner": {
"login": "jduardo2704",
"id": 61721902,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61721902?v=4",
"html_url": "https:\/\/github.com\/jduardo2704",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/jduardo2704\/CVE-2026-25643-Frigate-RCE",
"description": null,
"fork": false,
"created_at": "2026-02-05T21:23:22Z",
"updated_at": "2026-04-20T08:38:11Z",
"pushed_at": "2026-02-05T21:31:30Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1166075340,
"name": "CVE-2026-25643",
@@ -94,8 +61,8 @@
"description": "Exploit Frigate NVR ≤0.16.3 to execute commands remotely by abusing a configuration flaw without needing shell access or output capture.",
"fork": false,
"created_at": "2026-03-07T20:23:08Z",
"updated_at": "2026-05-01T22:59:49Z",
"pushed_at": "2026-05-01T22:59:45Z",
"updated_at": "2026-05-02T05:26:56Z",
"pushed_at": "2026-05-02T05:26:53Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-2991.json
+2 -2
View File
@@ -62,8 +62,8 @@
"description": "Explore a PoC for CVE-2026-2991, an auth bypass in KiviCare 4.1.2 and earlier via the patient social-login REST endpoint",
"fork": false,
"created_at": "2026-04-03T20:26:43Z",
"updated_at": "2026-05-01T23:17:15Z",
"pushed_at": "2026-05-01T23:17:11Z",
"updated_at": "2026-05-02T05:45:45Z",
"pushed_at": "2026-05-02T05:45:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-31431.json
+435 -105
View File
@@ -14,12 +14,12 @@
"description": null,
"fork": false,
"created_at": "2026-04-29T12:15:28Z",
"updated_at": "2026-05-02T00:49:41Z",
"updated_at": "2026-05-02T06:49:36Z",
"pushed_at": "2026-04-29T21:21:46Z",
"stargazers_count": 2455,
"watchers_count": 2455,
"stargazers_count": 2622,
"watchers_count": 2622,
"has_discussions": false,
"forks_count": 505,
"forks_count": 538,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 505,
"watchers": 2455,
"forks": 538,
"watchers": 2622,
"score": 0,
"subscribers_count": 7
},
@@ -80,12 +80,12 @@
"description": "Most Linux LPEs need a race window or a kernel-specific offset. Copy Fail is a straight-line logic flaw, it needs neither. The same 732-byte Python script (or .c elf) roots every Linux distribution shipped since 2017.",
"fork": false,
"created_at": "2026-04-29T21:08:42Z",
"updated_at": "2026-05-02T00:13:13Z",
"updated_at": "2026-05-02T04:33:10Z",
"pushed_at": "2026-04-29T21:22:27Z",
"stargazers_count": 49,
"watchers_count": 49,
"stargazers_count": 52,
"watchers_count": 52,
"has_discussions": false,
"forks_count": 9,
"forks_count": 8,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -93,8 +93,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 49,
"forks": 8,
"watchers": 52,
"score": 0,
"subscribers_count": 0
},
@@ -113,12 +113,12 @@
"description": "A Go implementation of copyfail (CVE-2026-31431)",
"fork": false,
"created_at": "2026-04-29T22:51:24Z",
"updated_at": "2026-05-02T00:34:39Z",
"updated_at": "2026-05-02T06:12:08Z",
"pushed_at": "2026-05-01T03:24:14Z",
"stargazers_count": 269,
"watchers_count": 269,
"stargazers_count": 275,
"watchers_count": 275,
"has_discussions": false,
"forks_count": 52,
"forks_count": 54,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -126,8 +126,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 52,
"watchers": 269,
"forks": 54,
"watchers": 275,
"score": 0,
"subscribers_count": 0
},
@@ -146,12 +146,12 @@
"description": "Cross-platform C port of the Copy Fail Linux LPE (CVE-2026-31431). Disclosed 2026-04-29 by Theori \/ Xint.",
"fork": false,
"created_at": "2026-04-29T23:29:14Z",
"updated_at": "2026-05-02T00:28:58Z",
"updated_at": "2026-05-02T06:33:34Z",
"pushed_at": "2026-04-30T17:04:09Z",
"stargazers_count": 198,
"watchers_count": 198,
"stargazers_count": 206,
"watchers_count": 206,
"has_discussions": true,
"forks_count": 56,
"forks_count": 58,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -172,8 +172,8 @@
"security-research"
],
"visibility": "public",
"forks": 56,
"watchers": 198,
"forks": 58,
"watchers": 206,
"score": 0,
"subscribers_count": 0
},
@@ -439,12 +439,12 @@
"description": "CVE-2026-31431 纯文件利用",
"fork": false,
"created_at": "2026-04-30T02:55:03Z",
"updated_at": "2026-05-02T00:34:36Z",
"updated_at": "2026-05-02T03:12:18Z",
"pushed_at": "2026-04-30T16:24:17Z",
"stargazers_count": 67,
"watchers_count": 67,
"stargazers_count": 69,
"watchers_count": 69,
"has_discussions": false,
"forks_count": 21,
"forks_count": 23,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -452,8 +452,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 21,
"watchers": 67,
"forks": 23,
"watchers": 69,
"score": 0,
"subscribers_count": 0
},
@@ -1476,10 +1476,10 @@
"description": "Detection, mitigation, and IOC toolkit for Copy Fail CVE-2026-31431 Linux kernel page-cache privilege escalation",
"fork": false,
"created_at": "2026-04-30T09:02:51Z",
"updated_at": "2026-05-01T20:15:11Z",
"updated_at": "2026-05-02T03:50:33Z",
"pushed_at": "2026-04-30T09:21:00Z",
"stargazers_count": 23,
"watchers_count": 23,
"stargazers_count": 24,
"watchers_count": 24,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -1500,7 +1500,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 23,
"watchers": 24,
"score": 0,
"subscribers_count": 0
},
@@ -1954,10 +1954,10 @@
"description": null,
"fork": false,
"created_at": "2026-04-30T10:49:03Z",
"updated_at": "2026-05-01T12:35:39Z",
"updated_at": "2026-05-02T06:20:24Z",
"pushed_at": "2026-04-30T13:19:29Z",
"stargazers_count": 6,
"watchers_count": 6,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -1968,7 +1968,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 6,
"watchers": 7,
"score": 0,
"subscribers_count": 0
},
@@ -2086,10 +2086,10 @@
"description": null,
"fork": false,
"created_at": "2026-04-30T11:33:22Z",
"updated_at": "2026-05-01T19:21:39Z",
"updated_at": "2026-05-02T06:02:13Z",
"pushed_at": "2026-04-30T13:29:38Z",
"stargazers_count": 24,
"watchers_count": 24,
"stargazers_count": 28,
"watchers_count": 28,
"has_discussions": false,
"forks_count": 10,
"allow_forking": true,
@@ -2100,7 +2100,7 @@
"topics": [],
"visibility": "public",
"forks": 10,
"watchers": 24,
"watchers": 28,
"score": 0,
"subscribers_count": 0
},
@@ -2496,7 +2496,7 @@
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
"forks_count": 1,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2511,7 +2511,7 @@
"workaround"
],
"visibility": "public",
"forks": 1,
"forks": 3,
"watchers": 16,
"score": 0,
"subscribers_count": 0
@@ -3332,7 +3332,7 @@
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -3340,7 +3340,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 0
@@ -3975,41 +3975,8 @@
"description": "CVE-2026-31431",
"fork": false,
"created_at": "2026-05-01T02:58:17Z",
"updated_at": "2026-05-01T02:59:08Z",
"pushed_at": "2026-05-01T02:59:04Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226159558,
"name": "CVE-2026-31431",
"full_name": "johanburati\/CVE-2026-31431",
"owner": {
"login": "johanburati",
"id": 106444,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/106444?v=4",
"html_url": "https:\/\/github.com\/johanburati",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/johanburati\/CVE-2026-31431",
"description": "Detection tool for Linux kernel AF_ALG AEAD use-after-free vulnerability.",
"fork": false,
"created_at": "2026-05-01T03:27:25Z",
"updated_at": "2026-05-01T03:28:41Z",
"pushed_at": "2026-05-01T03:28:38Z",
"updated_at": "2026-05-02T01:58:36Z",
"pushed_at": "2026-05-02T01:58:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -4074,8 +4041,8 @@
"description": "he recently disclosed CVE-2026-31431 — also known as Copy Fail — is not something to take lightly. ",
"fork": false,
"created_at": "2026-05-01T04:01:21Z",
"updated_at": "2026-05-01T04:01:21Z",
"pushed_at": "2026-05-01T04:01:21Z",
"updated_at": "2026-05-02T06:38:22Z",
"pushed_at": "2026-05-02T06:38:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -4410,7 +4377,7 @@
"description": "CVE-2026-31431 C语言复现的poc，可在目标环境没有py时进行利用",
"fork": false,
"created_at": "2026-05-01T09:57:31Z",
"updated_at": "2026-05-01T10:23:08Z",
"updated_at": "2026-05-02T06:35:49Z",
"pushed_at": "2026-05-01T10:23:04Z",
"stargazers_count": 0,
"watchers_count": 0,
@@ -4476,7 +4443,7 @@
"description": "A security auditing toolkit for CVE-2026-31431 vulnerability research",
"fork": false,
"created_at": "2026-05-01T10:09:59Z",
"updated_at": "2026-05-01T12:21:35Z",
"updated_at": "2026-05-02T02:27:08Z",
"pushed_at": "2026-05-01T12:17:25Z",
"stargazers_count": 0,
"watchers_count": 0,
@@ -4704,10 +4671,10 @@
"description": "BPF LSM blocker for CVE-2026-31431 (Copy Fail) — blocks authencesn AF_ALG binds at runtime without rebooting",
"fork": false,
"created_at": "2026-05-01T11:17:59Z",
"updated_at": "2026-05-01T23:58:56Z",
"updated_at": "2026-05-02T06:06:59Z",
"pushed_at": "2026-05-01T23:58:53Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -4718,7 +4685,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
@@ -4737,10 +4704,10 @@
"description": "Clean C version of Copy Fail (CVE-2026-31431) - Linux Local Privilege Escalation exploit using AF_ALG + authencesn + splice primitive. Overwrites the page cache of \/usr\/bin\/su with a tiny setuid shellcode to gain root privileges. Educational proof-of-concept only.",
"fork": false,
"created_at": "2026-05-01T11:51:55Z",
"updated_at": "2026-05-01T16:51:00Z",
"updated_at": "2026-05-02T02:34:50Z",
"pushed_at": "2026-05-01T14:07:35Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -4751,7 +4718,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
@@ -5091,10 +5058,10 @@
"description": null,
"fork": false,
"created_at": "2026-05-01T16:01:03Z",
"updated_at": "2026-05-01T17:20:10Z",
"updated_at": "2026-05-02T06:24:45Z",
"pushed_at": "2026-05-01T16:09:42Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -5105,7 +5072,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
@@ -5157,8 +5124,8 @@
"description": "Easy-to-understand version of CVE-2026-31431",
"fork": false,
"created_at": "2026-05-01T16:48:03Z",
"updated_at": "2026-05-01T20:39:50Z",
"pushed_at": "2026-05-01T20:39:46Z",
"updated_at": "2026-05-02T01:41:07Z",
"pushed_at": "2026-05-02T01:41:03Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -5322,8 +5289,8 @@
"description": "CVE-2026-31431 (Copy Fail) PoC - Linux kernel page cache corruption via authencesn AF_ALG + splice()",
"fork": false,
"created_at": "2026-05-01T19:44:57Z",
"updated_at": "2026-05-01T19:47:01Z",
"pushed_at": "2026-05-01T19:47:06Z",
"updated_at": "2026-05-02T04:54:57Z",
"pushed_at": "2026-05-02T04:54:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -5421,10 +5388,10 @@
"description": null,
"fork": false,
"created_at": "2026-05-01T20:49:56Z",
"updated_at": "2026-05-01T22:46:33Z",
"updated_at": "2026-05-02T02:45:18Z",
"pushed_at": "2026-05-01T22:34:31Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -5435,7 +5402,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
@@ -5537,5 +5504,368 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226909664,
"name": "fix_CVE-2026-31431",
"full_name": "kdjnb\/fix_CVE-2026-31431",
"owner": {
"login": "kdjnb",
"id": 179589276,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/179589276?v=4",
"html_url": "https:\/\/github.com\/kdjnb",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/kdjnb\/fix_CVE-2026-31431",
"description": "破坏CVE-2026-31431所需的漏洞组件，从而达到无法通过CVE-2026-31431提权。",
"fork": false,
"created_at": "2026-05-02T00:55:01Z",
"updated_at": "2026-05-02T01:05:25Z",
"pushed_at": "2026-05-02T01:05:21Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226935074,
"name": "copy-fail-CVE-2026-31431-poc",
"full_name": "euriconicacio\/copy-fail-CVE-2026-31431-poc",
"owner": {
"login": "euriconicacio",
"id": 5957301,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5957301?v=4",
"html_url": "https:\/\/github.com\/euriconicacio",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/euriconicacio\/copy-fail-CVE-2026-31431-poc",
"description": null,
"fork": false,
"created_at": "2026-05-02T02:00:17Z",
"updated_at": "2026-05-02T02:13:12Z",
"pushed_at": "2026-05-02T02:13:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226941225,
"name": "modrosnlr5",
"full_name": "ROSNLR5\/modrosnlr5",
"owner": {
"login": "ROSNLR5",
"id": 281082471,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/281082471?v=4",
"html_url": "https:\/\/github.com\/ROSNLR5",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ROSNLR5\/modrosnlr5",
"description": "Linux Kernel LPE PoC (CVE-2026-31431)",
"fork": false,
"created_at": "2026-05-02T02:15:42Z",
"updated_at": "2026-05-02T03:21:02Z",
"pushed_at": "2026-05-02T03:20:58Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226956768,
"name": "CVE-2026-31431",
"full_name": "TheMursalin\/CVE-2026-31431",
"owner": {
"login": "TheMursalin",
"id": 210463756,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/210463756?v=4",
"html_url": "https:\/\/github.com\/TheMursalin",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/TheMursalin\/CVE-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-05-02T02:54:05Z",
"updated_at": "2026-05-02T03:11:51Z",
"pushed_at": "2026-05-02T03:11:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226964803,
"name": "CVE-2026-31431-Container-Escape",
"full_name": "qi4L\/CVE-2026-31431-Container-Escape",
"owner": {
"login": "qi4L",
"id": 75202638,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/75202638?v=4",
"html_url": "https:\/\/github.com\/qi4L",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/qi4L\/CVE-2026-31431-Container-Escape",
"description": "CVE-2026-31431 容器逃逸",
"fork": false,
"created_at": "2026-05-02T03:13:02Z",
"updated_at": "2026-05-02T05:37:25Z",
"pushed_at": "2026-05-02T03:20:36Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226972986,
"name": "CVE-2026-31431",
"full_name": "0xac1dc0de\/CVE-2026-31431",
"owner": {
"login": "0xac1dc0de",
"id": 104328935,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/104328935?v=4",
"html_url": "https:\/\/github.com\/0xac1dc0de",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xac1dc0de\/CVE-2026-31431",
"description": " su doh.",
"fork": false,
"created_at": "2026-05-02T03:32:52Z",
"updated_at": "2026-05-02T03:36:33Z",
"pushed_at": "2026-05-02T03:36:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226991721,
"name": "CVE-2026-31431-check",
"full_name": "haydenjames\/CVE-2026-31431-check",
"owner": {
"login": "haydenjames",
"id": 6467408,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/6467408?v=4",
"html_url": "https:\/\/github.com\/haydenjames",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/haydenjames\/CVE-2026-31431-check",
"description": "Read-only checker for CVE-2026-31431 (algif_aead local root). Reports kernel\/module state and suggests mitigations.",
"fork": false,
"created_at": "2026-05-02T04:17:15Z",
"updated_at": "2026-05-02T05:34:07Z",
"pushed_at": "2026-05-02T05:34:04Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227010525,
"name": "CVE-2026-31431",
"full_name": "moaaz-mostafa123\/CVE-2026-31431",
"owner": {
"login": "moaaz-mostafa123",
"id": 81266377,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/81266377?v=4",
"html_url": "https:\/\/github.com\/moaaz-mostafa123",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/moaaz-mostafa123\/CVE-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-05-02T04:59:37Z",
"updated_at": "2026-05-02T05:13:24Z",
"pushed_at": "2026-05-02T05:13:21Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227031225,
"name": "CVE-2026-31431",
"full_name": "malwarekid\/CVE-2026-31431",
"owner": {
"login": "malwarekid",
"id": 91931069,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/91931069?v=4",
"html_url": "https:\/\/github.com\/malwarekid",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/malwarekid\/CVE-2026-31431",
"description": "CopyFail is a proof-of-concept exploit for CVE-2026-31431, targeting a memory corruption vulnerability in the Linux Kernel Crypto API (`AF_ALG`). The exploit leverages the `splice` system call to perform unauthorized page-cache patching of the `\/usr\/bin\/su` binary, enabling a password-less escalation to root.",
"fork": false,
"created_at": "2026-05-02T05:44:02Z",
"updated_at": "2026-05-02T06:13:27Z",
"pushed_at": "2026-05-02T06:04:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227035461,
"name": "CVE-2026-31431",
"full_name": "xd20111\/CVE-2026-31431",
"owner": {
"login": "xd20111",
"id": 34960106,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/34960106?v=4",
"html_url": "https:\/\/github.com\/xd20111",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/xd20111\/CVE-2026-31431",
"description": "CVE-2026-31431 Copy Fail - Local Privilege Escalation in the Linux kernel's authencesn cryptographic template via AF_ALG + splice()",
"fork": false,
"created_at": "2026-05-02T05:52:41Z",
"updated_at": "2026-05-02T05:57:47Z",
"pushed_at": "2026-05-02T05:56:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227067224,
"name": "copy-fail-CVE-2026-31431-php",
"full_name": "MartinPham\/copy-fail-CVE-2026-31431-php",
"owner": {
"login": "MartinPham",
"id": 2064515,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/2064515?v=4",
"html_url": "https:\/\/github.com\/MartinPham",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/MartinPham\/copy-fail-CVE-2026-31431-php",
"description": "CVE-2026-31431 (Copy Fail) PHP PoC",
"fork": false,
"created_at": "2026-05-02T06:42:33Z",
"updated_at": "2026-05-02T06:47:58Z",
"pushed_at": "2026-05-02T06:47:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-31802.json
+2 -2
View File
@@ -59,8 +59,8 @@
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"fork": false,
"created_at": "2026-03-28T20:49:46Z",
"updated_at": "2026-05-01T23:14:20Z",
"pushed_at": "2026-05-01T23:14:16Z",
"updated_at": "2026-05-02T05:42:38Z",
"pushed_at": "2026-05-02T05:42:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-25546.json → 2026/CVE-2026-39387.json
+12 -12
View File
@@ -1,21 +1,21 @@
[
{
"id": 1150115684,
"name": "CVE-2026-25546-godot-mcp-0.1.1-OS-Command-Injection",
"full_name": "mbanyamer\/CVE-2026-25546-godot-mcp-0.1.1-OS-Command-Injection",
"id": 1226967915,
"name": "CVE-2026-39387",
"full_name": "xp1tr\/CVE-2026-39387",
"owner": {
"login": "mbanyamer",
"id": 213306745,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/213306745?v=4",
"html_url": "https:\/\/github.com\/mbanyamer",
"login": "xp1tr",
"id": 281034549,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/281034549?v=4",
"html_url": "https:\/\/github.com\/xp1tr",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mbanyamer\/CVE-2026-25546-godot-mcp-0.1.1-OS-Command-Injection",
"description": null,
"html_url": "https:\/\/github.com\/xp1tr\/CVE-2026-39387",
"description": "BoidCMS <= 2.1.2 RCE Exploit",
"fork": false,
"created_at": "2026-02-04T22:37:41Z",
"updated_at": "2026-02-04T22:49:30Z",
"pushed_at": "2026-02-04T22:49:26Z",
"created_at": "2026-05-02T03:20:24Z",
"updated_at": "2026-05-02T03:29:57Z",
"pushed_at": "2026-05-02T03:29:13Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-25512.json → 2026/CVE-2026-41200.json
+11 -11
View File
@@ -1,21 +1,21 @@
[
{
"id": 1150125429,
"name": "CVE-2026-25512-PoC-Group-Office-Authenticated-RCE",
"full_name": "mbanyamer\/CVE-2026-25512-PoC-Group-Office-Authenticated-RCE",
"id": 1227033517,
"name": "cve-2026-41200-stig-manager-oidc-reflected-xss",
"full_name": "Hunt-Benito\/cve-2026-41200-stig-manager-oidc-reflected-xss",
"owner": {
"login": "mbanyamer",
"id": 213306745,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/213306745?v=4",
"html_url": "https:\/\/github.com\/mbanyamer",
"login": "Hunt-Benito",
"id": 174117057,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/174117057?v=4",
"html_url": "https:\/\/github.com\/Hunt-Benito",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mbanyamer\/CVE-2026-25512-PoC-Group-Office-Authenticated-RCE",
"html_url": "https:\/\/github.com\/Hunt-Benito\/cve-2026-41200-stig-manager-oidc-reflected-xss",
"description": null,
"fork": false,
"created_at": "2026-02-04T22:59:46Z",
"updated_at": "2026-02-04T23:00:34Z",
"pushed_at": "2026-02-04T23:00:31Z",
"created_at": "2026-05-02T05:49:01Z",
"updated_at": "2026-05-02T05:49:34Z",
"pushed_at": "2026-05-02T05:49:31Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-41651.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-04-23T08:57:29Z",
"updated_at": "2026-05-01T20:22:17Z",
"updated_at": "2026-05-02T00:55:32Z",
"pushed_at": "2026-04-23T13:55:33Z",
"stargazers_count": 72,
"watchers_count": 72,
"stargazers_count": 73,
"watchers_count": 73,
"has_discussions": false,
"forks_count": 18,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 18,
"watchers": 72,
"watchers": 73,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-41940.json
+88 -22
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-41940 latest cPanel & WHM 0day - 70 million websites are possible to expose by Chirag Artani",
"fork": false,
"created_at": "2026-04-29T17:44:32Z",
"updated_at": "2026-05-01T17:19:49Z",
"updated_at": "2026-05-02T06:37:28Z",
"pushed_at": "2026-04-29T17:55:20Z",
"stargazers_count": 22,
"watchers_count": 22,
"stargazers_count": 25,
"watchers_count": 25,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 22,
"watchers": 25,
"score": 0,
"subscribers_count": 0
},
@@ -52,7 +52,7 @@
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 3,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"forks": 4,
"watchers": 2,
"score": 0,
"subscribers_count": 0
@@ -80,10 +80,10 @@
"description": null,
"fork": false,
"created_at": "2026-04-30T02:38:37Z",
"updated_at": "2026-05-01T20:30:37Z",
"updated_at": "2026-05-02T05:27:04Z",
"pushed_at": "2026-04-30T02:47:37Z",
"stargazers_count": 21,
"watchers_count": 21,
"stargazers_count": 22,
"watchers_count": 22,
"has_discussions": false,
"forks_count": 12,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 12,
"watchers": 21,
"watchers": 22,
"score": 0,
"subscribers_count": 0
},
@@ -317,8 +317,8 @@
"description": "Detection, mitigation, and reverse-engineering tooling for CVE-2026-41940 (SessionScribe): the cPanel\/WHM unauthenticated session-forgery vulnerability disclosed 2026-04-28. Defense-in-depth active mitigation shim, ModSec rule pack, remote probe, on-host IOC scanner, and per-tier RE snapshot collector. GPL v2.",
"fork": false,
"created_at": "2026-04-30T14:32:43Z",
"updated_at": "2026-05-02T00:34:26Z",
"pushed_at": "2026-05-02T00:34:22Z",
"updated_at": "2026-05-02T06:37:09Z",
"pushed_at": "2026-05-02T06:37:05Z",
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
@@ -529,10 +529,10 @@
"description": "A security research tool for detecting and analyzing cPanel\/WHM services and their authentication behavior. Designed for authorized testing and educational purposes only.",
"fork": false,
"created_at": "2026-05-01T01:34:33Z",
"updated_at": "2026-05-01T20:30:27Z",
"updated_at": "2026-05-02T04:10:40Z",
"pushed_at": "2026-05-01T01:40:04Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -543,7 +543,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
@@ -738,12 +738,12 @@
"description": "CVE-2026-41940 — cPanel & WHM Authentication Bypass via Session-File CRLF Injection",
"fork": false,
"created_at": "2026-05-01T12:09:26Z",
"updated_at": "2026-05-02T00:40:58Z",
"updated_at": "2026-05-02T06:29:44Z",
"pushed_at": "2026-05-01T12:10:32Z",
"stargazers_count": 84,
"watchers_count": 84,
"stargazers_count": 112,
"watchers_count": 112,
"has_discussions": false,
"forks_count": 22,
"forks_count": 32,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -751,8 +751,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 22,
"watchers": 84,
"forks": 32,
"watchers": 112,
"score": 0,
"subscribers_count": 0
},
@@ -1131,5 +1131,71 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226931771,
"name": "CVE-2026-41940",
"full_name": "dennisec\/CVE-2026-41940",
"owner": {
"login": "dennisec",
"id": 87594979,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/87594979?v=4",
"html_url": "https:\/\/github.com\/dennisec",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/dennisec\/CVE-2026-41940",
"description": "CVE-2026-41940",
"fork": false,
"created_at": "2026-05-02T01:51:34Z",
"updated_at": "2026-05-02T01:58:35Z",
"pushed_at": "2026-05-02T01:58:32Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227051578,
"name": "CVE-2026-41940---cPanel-WHM-check",
"full_name": "3tternp\/CVE-2026-41940---cPanel-WHM-check",
"owner": {
"login": "3tternp",
"id": 26215963,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26215963?v=4",
"html_url": "https:\/\/github.com\/3tternp",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/3tternp\/CVE-2026-41940---cPanel-WHM-check",
"description": "This is the office check script provided by cPanel for all the users who are using cPanel ",
"fork": false,
"created_at": "2026-05-02T06:18:18Z",
"updated_at": "2026-05-02T06:24:32Z",
"pushed_at": "2026-05-02T06:24:29Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-42167.json
+2 -2
View File
@@ -80,8 +80,8 @@
"description": "Pre-Auth RCE in ProFTPD via mod_sql is_escaped_text() bypass (CVE-2026-42167)",
"fork": false,
"created_at": "2026-05-01T13:36:47Z",
"updated_at": "2026-05-01T15:47:44Z",
"pushed_at": "2026-05-01T15:47:40Z",
"updated_at": "2026-05-02T04:50:11Z",
"pushed_at": "2026-05-02T04:50:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
README.md
+30 -46
View File
@@ -163,13 +163,6 @@
- [sw0rd1ight/CVE-2026-1312](https://github.com/sw0rd1ight/CVE-2026-1312)
- [alpinine/CVE-2026-1312-Testing](https://github.com/alpinine/CVE-2026-1312-Testing)
### CVE-2026-1337 (2026-02-06)
<code>Insufficient escaping of unicode characters in query log in Neo4j Enterprise and Community editions prior to 2026.01 can lead to XSS if the user opens the logs in a tool that treats them as HTML. There is no security impact on Neo4j products, but this advisory is released as a precaution to treat the logs as plain text if using versions prior to 2026.01.\n\nProof of concept exploit:  https://github.com/JoakimBulow/CVE-2026-1337
</code>
- [JoakimBulow/CVE-2026-1337](https://github.com/JoakimBulow/CVE-2026-1337)
### CVE-2026-1357 (2026-02-11)
<code>The Migration, Backup, Staging – WPvivid Backup &amp; Migration plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Upload in versions up to and including 0.9.123. This is due to improper error handling in the RSA decryption process combined with a lack of path sanitization when writing uploaded files. When the plugin fails to decrypt a session key using openssl_private_decrypt(), it does not terminate execution and instead passes the boolean false value to the phpseclib library's AES cipher initialization. The library treats this false value as a string of null bytes, allowing an attacker to encrypt a malicious payload using a predictable null-byte key. Additionally, the plugin accepts filenames from the decrypted payload without sanitization, enabling directory traversal to escape the protected backup directory. This makes it possible for unauthenticated attackers to upload arbitrary PHP files to publicly accessible directories and achieve Remote Code Execution via the wpvivid_action=send_to_site parameter.
@@ -306,13 +299,6 @@
- [Nxploited/CVE-2026-1937](https://github.com/Nxploited/CVE-2026-1937)
### CVE-2026-1953 (2026-02-05)
<code>Nukegraphic CMS v3.1.2 contains a stored cross-site scripting (XSS) vulnerability in the user profile edit functionality at /ngc-cms/user-edit-profile.php. The application fails to properly sanitize user input in the name field before storing it in the database and rendering it across multiple CMS pages. An authenticated attacker with low privileges can inject malicious JavaScript payloads through the profile edit request, which are then executed site-wide whenever the affected user's name is displayed. This allows the attacker to execute arbitrary JavaScript in the context of other users' sessions, potentially leading to session hijacking, credential theft, or unauthorized actions performed on behalf of victims.
</code>
- [carlosbudiman/CVE-2026-1953-Disclosure](https://github.com/carlosbudiman/CVE-2026-1953-Disclosure)
### CVE-2026-1999 (2026-02-18)
<code>An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed an attacker to merge their own pull request into a repository without having push access by exploiting an authorization bypass in the enable_auto_merge mutation for pull requests. This issue only affected repositories that allow forking as the attack relies on opening a pull request from an attacker-controlled fork into the target repository. Exploitation was only possible in specific scenarios. It required a clean pull request status and only applied to branches without branch protection rules enabled. This vulnerability affected GitHub Enterprise Server versions prior to 3.19.2, 3.18.5, and 3.17.11, and was fixed in versions 3.19.2, 3.18.5, and 3.17.11. This vulnerability was reported via the GitHub Bug Bounty program.
@@ -1111,8 +1097,6 @@
</code>
- [SimoesCTT/CTT-MICROSOFT-OFFICE-OLE-MANIFOLD-BYPASS-CVE-2026-21509](https://github.com/SimoesCTT/CTT-MICROSOFT-OFFICE-OLE-MANIFOLD-BYPASS-CVE-2026-21509)
- [decalage2/detect_CVE-2026-21509](https://github.com/decalage2/detect_CVE-2026-21509)
- [kaizensecurity/CVE-2026-21509](https://github.com/kaizensecurity/CVE-2026-21509)
- [planetoid/cve-2026-21509-mitigation](https://github.com/planetoid/cve-2026-21509-mitigation)
- [suuhm/CVE-2026-21509-handler](https://github.com/suuhm/CVE-2026-21509-handler)
- [DameDode/CVE-2026-21509-POC](https://github.com/DameDode/CVE-2026-21509-POC)
@@ -1561,10 +1545,6 @@
- [midox008/CVE-2026-24061](https://github.com/midox008/CVE-2026-24061)
- [0p5cur/CVE-2026-24061-POC](https://github.com/0p5cur/CVE-2026-24061-POC)
- [obrunolima1910/CVE-2026-24061](https://github.com/obrunolima1910/CVE-2026-24061)
- [lavabyte/telnet-CVE-2026-24061](https://github.com/lavabyte/telnet-CVE-2026-24061)
- [canpilayda/inetutils-telnetd-cve-2026-24061](https://github.com/canpilayda/inetutils-telnetd-cve-2026-24061)
- [killsystema/scan-cve-2026-24061](https://github.com/killsystema/scan-cve-2026-24061)
- [nrnw/CVE-2026-24061-GNU-inetutils-Telnet-Detector](https://github.com/nrnw/CVE-2026-24061-GNU-inetutils-Telnet-Detector)
- [scumfrog/cve-2026-24061](https://github.com/scumfrog/cve-2026-24061)
- [tiborscholtz/CVE-2026-24061](https://github.com/tiborscholtz/CVE-2026-24061)
- [athack-ctf/chall2026-telneted](https://github.com/athack-ctf/chall2026-telneted)
@@ -1585,13 +1565,6 @@
- [alexb616/Weblate-CVE-2026-24126](https://github.com/alexb616/Weblate-CVE-2026-24126)
### CVE-2026-24135 (2026-02-06)
<code>Gogs is an open source self-hosted Git service. In version 0.13.3 and prior, a path traversal vulnerability exists in the updateWikiPage function of Gogs. The vulnerability allows an authenticated user with write access to a repository's wiki to delete arbitrary files on the server by manipulating the old_title parameter in the wiki editing form. This issue has been patched in versions 0.13.4 and 0.14.0+dev.
</code>
- [reschjonas/CVE-2026-24135](https://github.com/reschjonas/CVE-2026-24135)
### CVE-2026-24291 (2026-03-10)
<code>Incorrect permission assignment for critical resource in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to elevate privileges locally.
@@ -1744,7 +1717,6 @@
- [msaleme/start-here](https://github.com/msaleme/start-here)
- [adibirzu/openclaw-security-monitor](https://github.com/adibirzu/openclaw-security-monitor)
- [Joseph19820124/openclaw-vuln-report](https://github.com/Joseph19820124/openclaw-vuln-report)
- [al4n4n/CVE-2026-25253-research](https://github.com/al4n4n/CVE-2026-25253-research)
- [Ckokoski/moatbot-security](https://github.com/Ckokoski/moatbot-security)
- [FrigateCaptain/openclaw_vulnerabilities_and_solutions](https://github.com/FrigateCaptain/openclaw_vulnerabilities_and_solutions)
@@ -1752,13 +1724,6 @@
- [ZhaoymOvO/openclaw-1click-rce-env](https://github.com/ZhaoymOvO/openclaw-1click-rce-env)
- [KajzingerAkos/CVE-2026-25253](https://github.com/KajzingerAkos/CVE-2026-25253)
### CVE-2026-25512 (2026-02-04)
<code>Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.150, 25.0.82, and 26.0.5, there is a remote code execution (RCE) vulnerability in Group-Office. The endpoint email/message/tnefAttachmentFromTempFile directly concatenates the user-controlled parameter tmp_file into an exec() call. By injecting shell metacharacters into tmp_file, an authenticated attacker can execute arbitrary system commands on the server. This issue has been patched in versions 6.8.150, 25.0.82, and 26.0.5.
</code>
- [mbanyamer/CVE-2026-25512-PoC-Group-Office-Authenticated-RCE](https://github.com/mbanyamer/CVE-2026-25512-PoC-Group-Office-Authenticated-RCE)
### CVE-2026-25513 (2026-02-04)
<code>FacturaScripts is open-source enterprise resource planning and accounting software. Prior to version 2025.81, FacturaScripts contains a critical SQL injection vulnerability in the REST API that allows authenticated API users to execute arbitrary SQL queries through the sort parameter. The vulnerability exists in the ModelClass::getOrderBy() method where user-supplied sorting parameters are directly concatenated into the SQL ORDER BY clause without validation or sanitization. This affects all API endpoints that support sorting functionality. This issue has been patched in version 2025.81.
@@ -1780,13 +1745,6 @@
- [av4nth1ka/jinjava-cve-2026-25526-poc](https://github.com/av4nth1ka/jinjava-cve-2026-25526-poc)
### CVE-2026-25546 (2026-02-04)
<code>Godot MCP is a Model Context Protocol (MCP) server for interacting with the Godot game engine. Prior to version 0.1.1, a command injection vulnerability in godot-mcp allows remote code execution. The executeOperation function passed user-controlled input (e.g., projectPath) directly to exec(), which spawns a shell. An attacker could inject shell metacharacters like $(command) or &amp;calc to execute arbitrary commands with the privileges of the MCP server process. This affects any tool that accepts projectPath, including create_scene, add_node, load_sprite, and others. This issue has been patched in version 0.1.1.
</code>
- [mbanyamer/CVE-2026-25546-godot-mcp-0.1.1-OS-Command-Injection](https://github.com/mbanyamer/CVE-2026-25546-godot-mcp-0.1.1-OS-Command-Injection)
### CVE-2026-25548 (2026-02-18)
<code>InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. A critical Remote Code Execution (RCE) vulnerability exists in InvoicePlane 1.7.0 through a chained Local File Inclusion (LFI) and Log Poisoning attack. An authenticated administrator can execute arbitrary system commands on the server by manipulating the `public_invoice_template` setting to include poisoned log files containing PHP code. Version 1.7.1 patches the issue.
@@ -1827,7 +1785,6 @@
<code>Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras. Prior to 0.16.4, a critical Remote Command Execution (RCE) vulnerability has been identified in the Frigate integration with go2rtc. The application does not sanitize user input in the video stream configuration (config.yaml), allowing direct injection of system commands via the exec: directive. The go2rtc service executes these commands without restrictions. This vulnerability is only exploitable by an administrator or users who have exposed their Frigate install to the open internet with no authentication which allows anyone full administrative control. This vulnerability is fixed in 0.16.4.
</code>
- [jduardo2704/CVE-2026-25643-Frigate-RCE](https://github.com/jduardo2704/CVE-2026-25643-Frigate-RCE)
- [joshuavanderpoll/CVE-2026-25643](https://github.com/joshuavanderpoll/CVE-2026-25643)
- [DyniePro/CVE-2026-25643](https://github.com/DyniePro/CVE-2026-25643)
@@ -2848,7 +2805,6 @@
- [LeonardoNovais7/Copy-Fail-Exploit-CVE-2026-31431](https://github.com/LeonardoNovais7/Copy-Fail-Exploit-CVE-2026-31431)
- [3jee/copy-fail-go](https://github.com/3jee/copy-fail-go)
- [professional-slacker/alg_check](https://github.com/professional-slacker/alg_check)
- [johanburati/CVE-2026-31431](https://github.com/johanburati/CVE-2026-31431)
- [aestechno/cve-2026-31431-ansible](https://github.com/aestechno/cve-2026-31431-ansible)
- [ashok523/cve-2026-31431](https://github.com/ashok523/cve-2026-31431)
- [jodonnel/copyfail-briefing](https://github.com/jodonnel/copyfail-briefing)
@@ -2893,6 +2849,17 @@
- [glask1d/CVE-2026-31431-PoC](https://github.com/glask1d/CVE-2026-31431-PoC)
- [monobrau/copyfailscan](https://github.com/monobrau/copyfailscan)
- [Emmmmllll/copy-fail-zig](https://github.com/Emmmmllll/copy-fail-zig)
- [kdjnb/fix_CVE-2026-31431](https://github.com/kdjnb/fix_CVE-2026-31431)
- [euriconicacio/copy-fail-CVE-2026-31431-poc](https://github.com/euriconicacio/copy-fail-CVE-2026-31431-poc)
- [ROSNLR5/modrosnlr5](https://github.com/ROSNLR5/modrosnlr5)
- [TheMursalin/CVE-2026-31431](https://github.com/TheMursalin/CVE-2026-31431)
- [qi4L/CVE-2026-31431-Container-Escape](https://github.com/qi4L/CVE-2026-31431-Container-Escape)
- [0xac1dc0de/CVE-2026-31431](https://github.com/0xac1dc0de/CVE-2026-31431)
- [haydenjames/CVE-2026-31431-check](https://github.com/haydenjames/CVE-2026-31431-check)
- [moaaz-mostafa123/CVE-2026-31431](https://github.com/moaaz-mostafa123/CVE-2026-31431)
- [malwarekid/CVE-2026-31431](https://github.com/malwarekid/CVE-2026-31431)
- [xd20111/CVE-2026-31431](https://github.com/xd20111/CVE-2026-31431)
- [MartinPham/copy-fail-CVE-2026-31431-php](https://github.com/MartinPham/copy-fail-CVE-2026-31431-php)
### CVE-2026-31802 (2026-03-09)
@@ -3730,6 +3697,13 @@
- [redyank/CVE-2026-39376](https://github.com/redyank/CVE-2026-39376)
### CVE-2026-39387 (2026-04-14)
<code>BoidCMS is an open-source, PHP-based flat-file CMS for building simple websites and blogs, using JSON as its database. Versions prior to 2.1.3 are vulnerable to a critical Local File Inclusion (LFI) attack via the tpl parameter, which can lead to Remote Code Execution (RCE).The application fails to sanitize the tpl (template) parameter during page creation and updates. This parameter is passed directly to a require_once() statement without path validation. An authenticated administrator can exploit this by injecting path traversal sequences (../) into the tpl value to escape the intended theme directory and include arbitrary files — specifically, files from the server's media/ directory. When combined with the file upload functionality, this becomes a full RCE chain: an attacker can first upload a file with embedded PHP code (e.g., disguised as image data), then use the path traversal vulnerability to include that file via require_once(), executing the embedded code with web server privileges. This issue has been fixed in version 2.1.3.
</code>
- [xp1tr/CVE-2026-39387](https://github.com/xp1tr/CVE-2026-39387)
### CVE-2026-39808 (2026-04-14)
<code>A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.8 may allow attacker to execute unauthorized code or commands via &lt;insert attack vector here&gt;
@@ -3839,6 +3813,13 @@
- [TurkiOS/CVE-2026-41177-Squidex-CMS](https://github.com/TurkiOS/CVE-2026-41177-Squidex-CMS)
### CVE-2026-41200 (2026-04-23)
<code>STIG Manager is an API and web client for managing Security Technical Implementation Guides (STIG) assessments of Information Systems. Versions 1.5.10 through 1.6.7 have a reflected Cross-Site Scripting (XSS) vulnerability in the OIDC authentication error handling code in `src/init.js` and `public/reauth.html`. During the OIDC redirect flow, the `error` and `error_description` query parameters returned by the OIDC provider are written directly to the DOM via `innerHTML` without HTML escaping. An attacker who can craft a malicious redirect URL and convince a user to follow it can execute arbitrary JavaScript in the application's origin context. The vulnerability is most severe when the targeted user has an active STIG Manager session running in another browser tab — injected code executes in the same origin and can communicate with the SharedWorker managing the active access token, enabling authenticated API requests on behalf of the victim including reading and modifying collection data. The vulnerability is patched in version 1.6.8. There is no workaround short of upgrading. Deployments behind a web application firewall that filters reflected XSS payloads in query parameters may have partial mitigation, but this is not a substitute for patching.
</code>
- [Hunt-Benito/cve-2026-41200-stig-manager-oidc-reflected-xss](https://github.com/Hunt-Benito/cve-2026-41200-stig-manager-oidc-reflected-xss)
### CVE-2026-41242 (2026-04-18)
<code>protobufjs compiles protobuf definitions into JavaScript (JS) functions. In versions prior to 8.0.1 and 7.5.5, attackers can inject arbitrary code in the &quot;type&quot; fields of protobuf definitions, which will then execute during object decoding using that definition. Versions 8.0.1 and 7.5.5 patch the issue.
@@ -3924,6 +3905,8 @@
- [vineet7800/cpanel-malware-cleaner-cve-2026](https://github.com/vineet7800/cpanel-malware-cleaner-cve-2026)
- [AmirrezaMarzban/portscan-CVE-2026-41940](https://github.com/AmirrezaMarzban/portscan-CVE-2026-41940)
- [MrAriaNet/cPanel-Fix](https://github.com/MrAriaNet/cPanel-Fix)
- [dennisec/CVE-2026-41940](https://github.com/dennisec/CVE-2026-41940)
- [3tternp/CVE-2026-41940---cPanel-WHM-check](https://github.com/3tternp/CVE-2026-41940---cPanel-WHM-check)
### CVE-2026-42141
- [H4zaz/CVE-2026-42141-xibo-ssrf](https://github.com/H4zaz/CVE-2026-42141-xibo-ssrf)
@@ -7586,6 +7569,7 @@
- [SoftAndoWetto/CVE-2025-24367-PoC-Cacti](https://github.com/SoftAndoWetto/CVE-2025-24367-PoC-Cacti)
- [matesz44/CVE-2025-24367](https://github.com/matesz44/CVE-2025-24367)
- [ShoshinMaster/CVE-2025-24367](https://github.com/ShoshinMaster/CVE-2025-24367)
- [dantedansh/CVE-2025-24367-WebShell-](https://github.com/dantedansh/CVE-2025-24367-WebShell-)
### CVE-2025-24514 (2025-03-24)
@@ -43482,7 +43466,6 @@
- [Pai-Po/CVE-2021-1732](https://github.com/Pai-Po/CVE-2021-1732)
- [exploitblizzard/Windows-Privilege-Escalation-CVE-2021-1732](https://github.com/exploitblizzard/Windows-Privilege-Escalation-CVE-2021-1732)
- [BeneficialCode/CVE-2021-1732](https://github.com/BeneficialCode/CVE-2021-1732)
- [ExploitCN/CVE-2021-1732-EXP-](https://github.com/ExploitCN/CVE-2021-1732-EXP-)
- [fenalik/CVE-2021-1732](https://github.com/fenalik/CVE-2021-1732)
- [4dp/CVE-2021-1732](https://github.com/4dp/CVE-2021-1732)
- [yangshifan-git/CVE-2021-1732](https://github.com/yangshifan-git/CVE-2021-1732)
@@ -48037,7 +48020,6 @@
- [skentagon/CVE-2021-41773](https://github.com/skentagon/CVE-2021-41773)
- [zer0qs/CVE-2021-41773](https://github.com/zer0qs/CVE-2021-41773)
- [bernardas/netsec-polygon](https://github.com/bernardas/netsec-polygon)
- [Chocapikk/CVE-2021-41773](https://github.com/Chocapikk/CVE-2021-41773)
- [wangfly-me/Apache_Penetration_Tool](https://github.com/wangfly-me/Apache_Penetration_Tool)
- [anldori/CVE-2021-41773-Scanner](https://github.com/anldori/CVE-2021-41773-Scanner)
- [iosifache/ApacheRCEEssay](https://github.com/iosifache/ApacheRCEEssay)
@@ -49231,6 +49213,8 @@
- [pinaraltinok/Log4Shell-Attack](https://github.com/pinaraltinok/Log4Shell-Attack)
- [kaleth4/CVE-2021-44228](https://github.com/kaleth4/CVE-2021-44228)
- [tieupham267/log4shell-coraza](https://github.com/tieupham267/log4shell-coraza)
- [sajanapamuditha/Cyber-Attack-Simulation-](https://github.com/sajanapamuditha/Cyber-Attack-Simulation-)
- [neilc1964techned/craready-test-java-vulns](https://github.com/neilc1964techned/craready-test-java-vulns)
### CVE-2021-44255 (2022-01-31)