From 49935f7c86ee94e52098dcdf62147cfce6d82a1e Mon Sep 17 00:00:00 2001 From: motikan2010-bot Date: Sat, 7 Nov 2026 04:51:53 +0900 Subject: [PATCH] Auto Update 2026/11/06 19:51:53 --- 2002/CVE-2002-20001.json | 8 +- 2011/CVE-2011-2523.json | 66 ++++++++++++++ 2013/CVE-2013-5211.json | 4 +- 2014/CVE-2014-0160.json | 41 ++++++++- 2015/CVE-2015-1201.json | 42 +++++++++ 2015/CVE-2015-1805.json | 4 +- 2016/CVE-2016-2107.json | 8 +- 2016/CVE-2016-5195.json | 41 ++++++++- 2017/CVE-2017-0144.json | 4 +- 2017/CVE-2017-11317.json | 8 +- 2017/CVE-2017-18078.json | 35 ++++++++ 2017/CVE-2017-7494.json | 8 +- 2017/CVE-2017-7921.json | 33 +++++++ 2018/CVE-2018-1000810.json | 35 ++++++++ 2018/CVE-2018-11776.json | 8 +- 2018/CVE-2018-6242.json | 4 +- 2019/CVE-2019-1003000.json | 8 +- 2019/CVE-2019-15126.json | 10 +-- 2019/CVE-2019-18935.json | 8 +- 2019/CVE-2019-7192.json | 8 +- 2019/CVE-2019-9053.json | 8 +- 2020/CVE-2020-0688.json | 8 +- 2020/CVE-2020-0796.json | 8 +- 2020/CVE-2020-15368.json | 8 +- 2020/CVE-2020-25213.json | 8 +- 2020/CVE-2020-26235.json | 35 ++++++++ 2020/CVE-2020-5902.json | 8 +- 2021/CVE-2021-1675.json | 16 ++-- 2021/CVE-2021-21972.json | 8 +- 2021/CVE-2021-21985.json | 8 +- 2021/CVE-2021-22204.json | 8 +- 2021/CVE-2021-22986.json | 8 +- 2021/CVE-2021-26084.json | 8 +- 2021/CVE-2021-27651.json | 8 +- 2021/CVE-2021-31166.json | 8 +- 2021/CVE-2021-3156.json | 12 +-- 2021/CVE-2021-32804.json | 33 +++++++ 2021/CVE-2021-34527.json | 8 +- 2021/CVE-2021-36260.json | 8 +- 2021/CVE-2021-3712.json | 33 +++++++ 2021/CVE-2021-4034.json | 8 +- 2021/CVE-2021-40444.json | 8 +- 2021/CVE-2021-41349.json | 8 +- 2021/CVE-2021-42278.json | 16 ++-- 2021/CVE-2021-42287.json | 8 +- 2021/CVE-2021-44228.json | 16 ++-- 2022/CVE-2022-1388.json | 8 +- 2022/CVE-2022-22947.json | 8 +- 2022/CVE-2022-24713.json | 33 +++++++ 2022/CVE-2022-26134.json | 4 +- 2022/CVE-2022-29464.json | 8 +- 2022/CVE-2022-30075.json | 8 +- 2022/CVE-2022-37969.json | 8 +- 2022/CVE-2022-45771.json | 8 +- 2023/CVE-2023-21752.json | 8 +- 2023/CVE-2023-22809.json | 8 +- 2023/CVE-2023-44487.json | 8 +- 2023/CVE-2023-45866.json | 8 +- 2023/CVE-2023-4863.json | 8 +- 2024/CVE-2024-10654.json | 4 +- 2024/CVE-2024-27198.json | 33 ------- 2024/CVE-2024-32002.json | 8 +- 2024/CVE-2024-4367.json | 2 +- 2024/CVE-2024-5716.json | 44 ++++++++++ 2025/CVE-2025-26206.json | 6 +- 2025/CVE-2025-30406.json | 12 +-- 2025/CVE-2025-32433.json | 44 ++++++++++ 2025/CVE-2025-32463.json | 8 +- 2025/CVE-2025-41450.json | 8 +- 2025/CVE-2025-52915.json | 8 +- 2025/CVE-2025-53392.json | 8 +- 2025/CVE-2025-55182.json | 24 ++--- 2025/CVE-2025-6916.json | 4 +- 2025/CVE-2025-9974.json | 4 +- 2026/CVE-2026-100109.json | 12 ++- 2026/CVE-2026-101678.json | 35 ++++++++ 2026/CVE-2026-101767.json | 8 +- 2026/CVE-2026-109618.json | 143 ++++++++++++++++++------------ 2026/CVE-2026-111497.json | 8 +- 2026/CVE-2026-113615.json | 42 +++++++++ 2026/CVE-2026-114612.json | 4 +- 2026/CVE-2026-114630.json | 12 ++- 2026/CVE-2026-116606.json | 8 +- 2026/CVE-2026-116779.json | 33 +++++++ 2026/CVE-2026-118423.json | 77 +++++++++++++++- 2026/CVE-2026-119977.json | 74 +++++++++++++--- 2026/CVE-2026-120209.json | 8 +- 2026/CVE-2026-121720.json | 4 +- 2026/CVE-2026-123158.json | 157 ++++++++++++++++++++++++++++++--- 2026/CVE-2026-19971.json | 4 +- 2026/CVE-2026-34990.json | 8 +- 2026/CVE-2026-3609.json | 8 +- 2026/CVE-2026-39987.json | 8 +- 2026/CVE-2026-41651.json | 39 +++++++++ 2026/CVE-2026-42980.json | 8 +- 2026/CVE-2026-43284.json | 4 +- 2026/CVE-2026-43499.json | 100 ++++++++++----------- 2026/CVE-2026-47301.json | 8 +- 2026/CVE-2026-48356.json | 43 +++++++++ 2026/CVE-2026-50679.json | 4 +- 2026/CVE-2026-54121.json | 8 +- 2026/CVE-2026-58115.json | 8 +- 2026/CVE-2026-58868.json | 17 ++-- 2026/CVE-2026-60586.json | 35 ++++++++ 2026/CVE-2026-60623.json | 35 ++++++++ 2026/CVE-2026-61082.json | 35 ++++++++ 2026/CVE-2026-62735.json | 8 +- 2026/CVE-2026-63030.json | 8 +- 2026/CVE-2026-64560.json | 4 +- 2026/CVE-2026-67276.json | 8 +- 2026/CVE-2026-83844.json | 33 +++++++ 2026/CVE-2026-86060.json | 8 +- 2026/CVE-2026-86596.json | 14 ++- 2026/CVE-2026-96652.json | 8 +- 2026/CVE-2026-97229.json | 42 +++++++++ 2026/CVE-2026-98260.json | 174 ++++++++++++++++++------------------- 2026/CVE-2026-9830.json | 8 +- 2026/CVE-2026-98432.json | 24 +++-- 118 files changed, 1769 insertions(+), 605 deletions(-) create mode 100644 2015/CVE-2015-1201.json create mode 100644 2017/CVE-2017-18078.json create mode 100644 2018/CVE-2018-1000810.json create mode 100644 2020/CVE-2020-26235.json create mode 100644 2024/CVE-2024-5716.json create mode 100644 2026/CVE-2026-101678.json create mode 100644 2026/CVE-2026-113615.json create mode 100644 2026/CVE-2026-60586.json create mode 100644 2026/CVE-2026-60623.json create mode 100644 2026/CVE-2026-61082.json diff --git a/2002/CVE-2002-20001.json b/2002/CVE-2002-20001.json index 25c348d8e2..00e4ade157 100644 --- a/2002/CVE-2002-20001.json +++ b/2002/CVE-2002-20001.json @@ -14,10 +14,10 @@ "description": "D(HE)ater is a proof of concept implementation of the D(HE)at attack (CVE-2002-20001) through which denial-of-service can be performed by enforcing the Diffie-Hellman key exchange. (read-only clone of the original GitLab project)", "fork": false, "created_at": "2021-08-31T09:51:12Z", - "updated_at": "2026-10-29T06:35:55Z", + "updated_at": "2026-11-06T13:44:20Z", "pushed_at": "2026-08-04T21:30:59Z", - "stargazers_count": 223, - "watchers_count": 223, + "stargazers_count": 222, + "watchers_count": 222, "has_discussions": true, "forks_count": 30, "allow_forking": true, @@ -49,7 +49,7 @@ ], "visibility": "public", "forks": 30, - "watchers": 223, + "watchers": 222, "score": 0, "subscribers_count": 7 }, diff --git a/2011/CVE-2011-2523.json b/2011/CVE-2011-2523.json index e8900e501d..adadf9234c 100644 --- a/2011/CVE-2011-2523.json +++ b/2011/CVE-2011-2523.json @@ -2421,5 +2421,71 @@ "watchers": 1, "score": 0, "subscribers_count": 0 + }, + { + "id": 1448256701, + "name": "vsftpd-2.3.4-backdoor-vulnerability-analysis", + "full_name": "nabeelapu\/vsftpd-2.3.4-backdoor-vulnerability-analysis", + "owner": { + "login": "nabeelapu", + "id": 341067593, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/341067593?v=4", + "html_url": "https:\/\/github.com\/nabeelapu", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/nabeelapu\/vsftpd-2.3.4-backdoor-vulnerability-analysis", + "description": "Hands-on vulnerability assessment of the vsftpd 2.3.4 backdoor (CVE-2011-2523) using Kali Linux, Nmap, Metasploit and an isolated Metasploitable 2 lab.", + "fork": false, + "created_at": "2026-11-06T12:50:24Z", + "updated_at": "2026-11-06T12:50:31Z", + "pushed_at": "2026-11-06T12:50:26Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1448266803, + "name": "vsftpd-2.3.4-backdoor-vulnerability_analysis", + "full_name": "nabeelapu\/vsftpd-2.3.4-backdoor-vulnerability_analysis", + "owner": { + "login": "nabeelapu", + "id": 341067593, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/341067593?v=4", + "html_url": "https:\/\/github.com\/nabeelapu", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/nabeelapu\/vsftpd-2.3.4-backdoor-vulnerability_analysis", + "description": "Hands-on vulnerability assessment of the vsftpd 2.3.4 backdoor (CVE-2011-2523) in an isolated lab.", + "fork": false, + "created_at": "2026-11-06T13:00:34Z", + "updated_at": "2026-11-06T13:10:23Z", + "pushed_at": "2026-11-06T13:10:19Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2013/CVE-2013-5211.json b/2013/CVE-2013-5211.json index d86d2fb082..a29a717c03 100644 --- a/2013/CVE-2013-5211.json +++ b/2013/CVE-2013-5211.json @@ -85,7 +85,7 @@ "stargazers_count": 10, "watchers_count": 10, "has_discussions": false, - "forks_count": 11, + "forks_count": 10, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -103,7 +103,7 @@ "spoofed-packets" ], "visibility": "public", - "forks": 11, + "forks": 10, "watchers": 10, "score": 0, "subscribers_count": 1 diff --git a/2014/CVE-2014-0160.json b/2014/CVE-2014-0160.json index 7eefbf0aae..6975eb7da9 100644 --- a/2014/CVE-2014-0160.json +++ b/2014/CVE-2014-0160.json @@ -410,10 +410,10 @@ "description": "Test for SSL heartbeat vulnerability (CVE-2014-0160)", "fork": false, "created_at": "2014-04-09T15:59:14Z", - "updated_at": "2026-09-05T02:40:55Z", + "updated_at": "2026-11-06T13:29:23Z", "pushed_at": "2014-07-10T21:17:22Z", - "stargazers_count": 171, - "watchers_count": 171, + "stargazers_count": 170, + "watchers_count": 170, "has_discussions": false, "forks_count": 84, "allow_forking": true, @@ -424,7 +424,7 @@ "topics": [], "visibility": "public", "forks": 84, - "watchers": 171, + "watchers": 170, "score": 0, "subscribers_count": 5 }, @@ -2497,5 +2497,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1448267742, + "name": "cortex9-heartbleed-heartbeat-bounds-model", + "full_name": "federiconbaez\/cortex9-heartbleed-heartbeat-bounds-model", + "owner": { + "login": "federiconbaez", + "id": 43962066, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43962066?v=4", + "html_url": "https:\/\/github.com\/federiconbaez", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/federiconbaez\/cortex9-heartbleed-heartbeat-bounds-model", + "description": "Offline model of the OpenSSL heartbeat bounds check (CVE-2014-0160) over an in-memory record and a labelled simulated region. No TLS, no real memory.", + "fork": false, + "created_at": "2026-11-06T13:01:27Z", + "updated_at": "2026-11-06T13:01:38Z", + "pushed_at": "2026-11-06T13:01:33Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2015/CVE-2015-1201.json b/2015/CVE-2015-1201.json new file mode 100644 index 0000000000..eb0b166465 --- /dev/null +++ b/2015/CVE-2015-1201.json @@ -0,0 +1,42 @@ +[ + { + "id": 1448447747, + "name": "CVE-2015-1201-wordpress-Reflex-Gallery-plugin-RCE-PoC", + "full_name": "Akshit0203\/CVE-2015-1201-wordpress-Reflex-Gallery-plugin-RCE-PoC", + "owner": { + "login": "Akshit0203", + "id": 128074368, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/128074368?v=4", + "html_url": "https:\/\/github.com\/Akshit0203", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Akshit0203\/CVE-2015-1201-wordpress-Reflex-Gallery-plugin-RCE-PoC", + "description": "PoC exploit for CVE-2015-1201 (EDB-36374) — Unauthenticated Arbitrary File Upload to Remote Code Execution in WordPress Reflex Gallery Plugin ≤ 3.1.3. Features interactive webshell, reverse shell mode, and multi-path upload fallback.", + "fork": false, + "created_at": "2026-11-06T15:48:38Z", + "updated_at": "2026-11-06T15:51:18Z", + "pushed_at": "2026-11-06T15:49:34Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve-2015-1201", + "edb-36374", + "proof-of-concept", + "reflex-gallery", + "wordpress", + "wordpress-plugin" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2015/CVE-2015-1805.json b/2015/CVE-2015-1805.json index c905e770e5..423ac3b346 100644 --- a/2015/CVE-2015-1805.json +++ b/2015/CVE-2015-1805.json @@ -52,7 +52,7 @@ "stargazers_count": 275, "watchers_count": 275, "has_discussions": false, - "forks_count": 146, + "forks_count": 145, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,7 +60,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 146, + "forks": 145, "watchers": 275, "score": 0, "subscribers_count": 18 diff --git a/2016/CVE-2016-2107.json b/2016/CVE-2016-2107.json index 2e87f72c41..d42ebec90a 100644 --- a/2016/CVE-2016-2107.json +++ b/2016/CVE-2016-2107.json @@ -14,10 +14,10 @@ "description": "Simple test for the May 2016 OpenSSL padding oracle (CVE-2016-2107)", "fork": false, "created_at": "2016-05-03T16:47:32Z", - "updated_at": "2026-09-21T16:23:00Z", + "updated_at": "2026-11-06T13:32:11Z", "pushed_at": "2019-03-10T02:18:00Z", - "stargazers_count": 192, - "watchers_count": 192, + "stargazers_count": 191, + "watchers_count": 191, "has_discussions": false, "forks_count": 55, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 55, - "watchers": 192, + "watchers": 191, "score": 0, "subscribers_count": 12 }, diff --git a/2016/CVE-2016-5195.json b/2016/CVE-2016-5195.json index 64c3f20cca..01e22d85f6 100644 --- a/2016/CVE-2016-5195.json +++ b/2016/CVE-2016-5195.json @@ -47,10 +47,10 @@ "description": "CVE-2016-5195 (dirtycow\/dirtyc0w) proof of concept for Android", "fork": false, "created_at": "2016-10-21T11:19:21Z", - "updated_at": "2026-11-04T08:41:55Z", + "updated_at": "2026-11-06T16:52:42Z", "pushed_at": "2021-02-03T16:03:40Z", - "stargazers_count": 1021, - "watchers_count": 1021, + "stargazers_count": 1022, + "watchers_count": 1022, "has_discussions": false, "forks_count": 390, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 390, - "watchers": 1021, + "watchers": 1022, "score": 0, "subscribers_count": 60 }, @@ -2219,5 +2219,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1448267258, + "name": "cortex9-dirtycow-gup-cow-state-model", + "full_name": "federiconbaez\/cortex9-dirtycow-gup-cow-state-model", + "owner": { + "login": "federiconbaez", + "id": 43962066, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43962066?v=4", + "html_url": "https:\/\/github.com\/federiconbaez", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/federiconbaez\/cortex9-dirtycow-gup-cow-state-model", + "description": "Finite state\/interleaving model of the GUP FOLL_WRITE\/COW race vs MADV_DONTNEED (CVE-2016-5195). Abstract states only, no syscalls.", + "fork": false, + "created_at": "2026-11-06T13:00:59Z", + "updated_at": "2026-11-06T13:01:12Z", + "pushed_at": "2026-11-06T13:01:06Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2017/CVE-2017-0144.json b/2017/CVE-2017-0144.json index b1412b7c44..c9d163a833 100644 --- a/2017/CVE-2017-0144.json +++ b/2017/CVE-2017-0144.json @@ -19,7 +19,7 @@ "stargazers_count": 340, "watchers_count": 340, "has_discussions": false, - "forks_count": 98, + "forks_count": 97, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 98, + "forks": 97, "watchers": 340, "score": 0, "subscribers_count": 19 diff --git a/2017/CVE-2017-11317.json b/2017/CVE-2017-11317.json index 2ea3b99c5c..394335d7de 100644 --- a/2017/CVE-2017-11317.json +++ b/2017/CVE-2017-11317.json @@ -14,10 +14,10 @@ "description": "Telerik UI for ASP.NET AJAX File upload and .NET deserialisation exploit (CVE-2017-11317, CVE-2017-11357, CVE-2019-18935)", "fork": false, "created_at": "2018-01-09T13:53:57Z", - "updated_at": "2026-11-05T13:15:27Z", + "updated_at": "2026-11-06T13:34:51Z", "pushed_at": "2020-08-22T06:15:54Z", - "stargazers_count": 178, - "watchers_count": 178, + "stargazers_count": 177, + "watchers_count": 177, "has_discussions": false, "forks_count": 50, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 50, - "watchers": 178, + "watchers": 177, "score": 0, "subscribers_count": 7 }, diff --git a/2017/CVE-2017-18078.json b/2017/CVE-2017-18078.json new file mode 100644 index 0000000000..25a050ba19 --- /dev/null +++ b/2017/CVE-2017-18078.json @@ -0,0 +1,35 @@ +[ + { + "id": 1448266938, + "name": "cortex9-tmpfiles-hardlink-chown-race-model", + "full_name": "federiconbaez\/cortex9-tmpfiles-hardlink-chown-race-model", + "owner": { + "login": "federiconbaez", + "id": 43962066, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43962066?v=4", + "html_url": "https:\/\/github.com\/federiconbaez", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/federiconbaez\/cortex9-tmpfiles-hardlink-chown-race-model", + "description": "Limited educational in-memory FS model of systemd-tmpfiles path_set_perms vs hardlinks (CVE-2017-18078). Not a finding; no real files.", + "fork": false, + "created_at": "2026-11-06T13:00:40Z", + "updated_at": "2026-11-06T13:00:53Z", + "pushed_at": "2026-11-06T13:00:48Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2017/CVE-2017-7494.json b/2017/CVE-2017-7494.json index 211967d0bf..b1726f81de 100644 --- a/2017/CVE-2017-7494.json +++ b/2017/CVE-2017-7494.json @@ -80,10 +80,10 @@ "description": "SambaCry exploit and vulnerable container (CVE-2017-7494)", "fork": false, "created_at": "2017-05-26T00:58:25Z", - "updated_at": "2026-11-06T00:50:15Z", + "updated_at": "2026-11-06T13:33:43Z", "pushed_at": "2022-12-27T20:25:09Z", - "stargazers_count": 381, - "watchers_count": 381, + "stargazers_count": 380, + "watchers_count": 380, "has_discussions": false, "forks_count": 98, "allow_forking": true, @@ -100,7 +100,7 @@ ], "visibility": "public", "forks": 98, - "watchers": 381, + "watchers": 380, "score": 0, "subscribers_count": 9 }, diff --git a/2017/CVE-2017-7921.json b/2017/CVE-2017-7921.json index feb339a586..e22076c10f 100644 --- a/2017/CVE-2017-7921.json +++ b/2017/CVE-2017-7921.json @@ -900,5 +900,38 @@ "watchers": 29, "score": 0, "subscribers_count": 6 + }, + { + "id": 1448284660, + "name": "hikvision-cve-2017-7921-lab", + "full_name": "Bethelhem-Yirga\/hikvision-cve-2017-7921-lab", + "owner": { + "login": "Bethelhem-Yirga", + "id": 139067805, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/139067805?v=4", + "html_url": "https:\/\/github.com\/Bethelhem-Yirga", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Bethelhem-Yirga\/hikvision-cve-2017-7921-lab", + "description": null, + "fork": false, + "created_at": "2026-11-06T13:17:43Z", + "updated_at": "2026-11-06T13:21:16Z", + "pushed_at": "2026-11-06T13:21:12Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2018/CVE-2018-1000810.json b/2018/CVE-2018-1000810.json new file mode 100644 index 0000000000..4f6a739b89 --- /dev/null +++ b/2018/CVE-2018-1000810.json @@ -0,0 +1,35 @@ +[ + { + "id": 1448267596, + "name": "cortex9-rust-str-repeat-capacity-overflow-model", + "full_name": "federiconbaez\/cortex9-rust-str-repeat-capacity-overflow-model", + "owner": { + "login": "federiconbaez", + "id": 43962066, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43962066?v=4", + "html_url": "https:\/\/github.com\/federiconbaez", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/federiconbaez\/cortex9-rust-str-repeat-capacity-overflow-model", + "description": "Abstract execution of Rust [T]::repeat capacity arithmetic in 1.29.0 vs 1.29.1 (CVE-2018-1000810) for 16\/32\/64-bit usize. Allocates nothing.", + "fork": false, + "created_at": "2026-11-06T13:01:17Z", + "updated_at": "2026-11-06T13:01:30Z", + "pushed_at": "2026-11-06T13:01:24Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2018/CVE-2018-11776.json b/2018/CVE-2018-11776.json index 20ead1f4c8..196a4cf749 100644 --- a/2018/CVE-2018-11776.json +++ b/2018/CVE-2018-11776.json @@ -470,10 +470,10 @@ "description": "Critical Remote Code Execution Vulnerability (CVE-2018-11776) Found in Apache Struts.", "fork": false, "created_at": "2019-10-10T13:09:50Z", - "updated_at": "2026-09-07T16:01:40Z", + "updated_at": "2026-11-06T13:38:25Z", "pushed_at": "2020-07-30T21:35:38Z", - "stargazers_count": 17, - "watchers_count": 17, + "stargazers_count": 16, + "watchers_count": 16, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -484,7 +484,7 @@ "topics": [], "visibility": "public", "forks": 6, - "watchers": 17, + "watchers": 16, "score": 0, "subscribers_count": 1 }, diff --git a/2018/CVE-2018-6242.json b/2018/CVE-2018-6242.json index dc86ee2e2b..df13d6a655 100644 --- a/2018/CVE-2018-6242.json +++ b/2018/CVE-2018-6242.json @@ -19,7 +19,7 @@ "stargazers_count": 561, "watchers_count": 561, "has_discussions": false, - "forks_count": 54, + "forks_count": 53, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -34,7 +34,7 @@ "usb" ], "visibility": "public", - "forks": 54, + "forks": 53, "watchers": 561, "score": 0, "subscribers_count": 51 diff --git a/2019/CVE-2019-1003000.json b/2019/CVE-2019-1003000.json index 895a0cea06..706029e1eb 100644 --- a/2019/CVE-2019-1003000.json +++ b/2019/CVE-2019-1003000.json @@ -47,10 +47,10 @@ "description": "Jenkins RCE Proof-of-Concept: SECURITY-1266 \/ CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (Pipeline: Declarative)", "fork": false, "created_at": "2019-02-15T05:59:24Z", - "updated_at": "2026-11-02T12:29:17Z", + "updated_at": "2026-11-06T13:36:55Z", "pushed_at": "2019-04-01T13:19:49Z", - "stargazers_count": 315, - "watchers_count": 315, + "stargazers_count": 314, + "watchers_count": 314, "has_discussions": false, "forks_count": 84, "allow_forking": true, @@ -72,7 +72,7 @@ ], "visibility": "public", "forks": 84, - "watchers": 315, + "watchers": 314, "score": 0, "subscribers_count": 3 }, diff --git a/2019/CVE-2019-15126.json b/2019/CVE-2019-15126.json index 0babec1add..09c1f43450 100644 --- a/2019/CVE-2019-15126.json +++ b/2019/CVE-2019-15126.json @@ -47,10 +47,10 @@ "description": "PoC exploit for the CVE-2019-15126 kr00k vulnerability", "fork": false, "created_at": "2020-03-13T14:53:54Z", - "updated_at": "2026-10-30T21:27:38Z", + "updated_at": "2026-11-06T13:39:15Z", "pushed_at": "2020-03-22T19:46:04Z", - "stargazers_count": 225, - "watchers_count": 225, + "stargazers_count": 224, + "watchers_count": 224, "has_discussions": false, "forks_count": 61, "allow_forking": true, @@ -61,9 +61,9 @@ "topics": [], "visibility": "public", "forks": 61, - "watchers": 225, + "watchers": 224, "score": 0, - "subscribers_count": 14 + "subscribers_count": 15 }, { "id": 248283931, diff --git a/2019/CVE-2019-18935.json b/2019/CVE-2019-18935.json index 631acc11d7..1e5cfbbd49 100644 --- a/2019/CVE-2019-18935.json +++ b/2019/CVE-2019-18935.json @@ -14,10 +14,10 @@ "description": "Telerik UI for ASP.NET AJAX File upload and .NET deserialisation exploit (CVE-2017-11317, CVE-2017-11357, CVE-2019-18935)", "fork": false, "created_at": "2018-01-09T13:53:57Z", - "updated_at": "2026-11-05T13:15:27Z", + "updated_at": "2026-11-06T13:34:51Z", "pushed_at": "2020-08-22T06:15:54Z", - "stargazers_count": 178, - "watchers_count": 178, + "stargazers_count": 177, + "watchers_count": 177, "has_discussions": false, "forks_count": 50, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 50, - "watchers": 178, + "watchers": 177, "score": 0, "subscribers_count": 7 }, diff --git a/2019/CVE-2019-7192.json b/2019/CVE-2019-7192.json index a31bee1e8a..b714672be4 100644 --- a/2019/CVE-2019-7192.json +++ b/2019/CVE-2019-7192.json @@ -47,10 +47,10 @@ "description": "QNAP pre-auth root RCE Exploit (CVE-2019-7192 ~ CVE-2019-7195)", "fork": false, "created_at": "2020-05-24T15:44:29Z", - "updated_at": "2026-06-07T02:42:26Z", + "updated_at": "2026-11-06T13:40:07Z", "pushed_at": "2020-05-24T16:28:46Z", - "stargazers_count": 87, - "watchers_count": 87, + "stargazers_count": 86, + "watchers_count": 86, "has_discussions": false, "forks_count": 37, "allow_forking": true, @@ -64,7 +64,7 @@ ], "visibility": "public", "forks": 37, - "watchers": 87, + "watchers": 86, "score": 0, "subscribers_count": 3 } diff --git a/2019/CVE-2019-9053.json b/2019/CVE-2019-9053.json index 9c95c980c1..829dd1ac62 100644 --- a/2019/CVE-2019-9053.json +++ b/2019/CVE-2019-9053.json @@ -365,15 +365,15 @@ { "id": 723809169, "name": "CVE-2019-9053-exploit", - "full_name": "davcwikla\/CVE-2019-9053-exploit", + "full_name": "dawcwikla\/CVE-2019-9053-exploit", "owner": { - "login": "davcwikla", + "login": "dawcwikla", "id": 94928782, "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/94928782?v=4", - "html_url": "https:\/\/github.com\/davcwikla", + "html_url": "https:\/\/github.com\/dawcwikla", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/davcwikla\/CVE-2019-9053-exploit", + "html_url": "https:\/\/github.com\/dawcwikla\/CVE-2019-9053-exploit", "description": "working exploit for CVE-2019-9053 ", "fork": false, "created_at": "2023-11-26T20:23:28Z", diff --git a/2020/CVE-2020-0688.json b/2020/CVE-2020-0688.json index 4d6d570899..e733957062 100644 --- a/2020/CVE-2020-0688.json +++ b/2020/CVE-2020-0688.json @@ -622,10 +622,10 @@ "description": "Remote Code Execution on Microsoft Exchange Server through fixed cryptographic keys", "fork": false, "created_at": "2021-01-04T10:48:40Z", - "updated_at": "2026-09-17T10:34:44Z", + "updated_at": "2026-11-06T13:41:51Z", "pushed_at": "2021-06-06T16:03:53Z", - "stargazers_count": 22, - "watchers_count": 22, + "stargazers_count": 21, + "watchers_count": 21, "has_discussions": false, "forks_count": 5, "allow_forking": true, @@ -636,7 +636,7 @@ "topics": [], "visibility": "public", "forks": 5, - "watchers": 22, + "watchers": 21, "score": 0, "subscribers_count": 1 }, diff --git a/2020/CVE-2020-0796.json b/2020/CVE-2020-0796.json index 366bdcd4c7..19108e6d87 100644 --- a/2020/CVE-2020-0796.json +++ b/2020/CVE-2020-0796.json @@ -1688,10 +1688,10 @@ "description": "SMBGhost (CVE-2020-0796) Automate Exploitation and Detection", "fork": false, "created_at": "2020-06-10T16:44:39Z", - "updated_at": "2026-11-02T16:14:45Z", + "updated_at": "2026-11-06T13:40:18Z", "pushed_at": "2022-03-30T14:02:04Z", - "stargazers_count": 361, - "watchers_count": 361, + "stargazers_count": 360, + "watchers_count": 360, "has_discussions": false, "forks_count": 49, "allow_forking": true, @@ -1702,7 +1702,7 @@ "topics": [], "visibility": "public", "forks": 49, - "watchers": 361, + "watchers": 360, "score": 0, "subscribers_count": 6 }, diff --git a/2020/CVE-2020-15368.json b/2020/CVE-2020-15368.json index 4dbb0e47c9..e7fd6db2a2 100644 --- a/2020/CVE-2020-15368.json +++ b/2020/CVE-2020-15368.json @@ -14,10 +14,10 @@ "description": "CVE-2020-15368, aka \"How to exploit a vulnerable driver\"", "fork": false, "created_at": "2021-06-29T04:38:24Z", - "updated_at": "2026-11-06T11:29:54Z", + "updated_at": "2026-11-06T18:27:54Z", "pushed_at": "2022-04-14T03:17:44Z", - "stargazers_count": 516, - "watchers_count": 516, + "stargazers_count": 517, + "watchers_count": 517, "has_discussions": false, "forks_count": 48, "allow_forking": true, @@ -33,7 +33,7 @@ ], "visibility": "public", "forks": 48, - "watchers": 516, + "watchers": 517, "score": 0, "subscribers_count": 5 }, diff --git a/2020/CVE-2020-25213.json b/2020/CVE-2020-25213.json index 6fddb54f3e..3a422390b6 100644 --- a/2020/CVE-2020-25213.json +++ b/2020/CVE-2020-25213.json @@ -14,10 +14,10 @@ "description": "https:\/\/medium.com\/@mansoorr\/exploiting-cve-2020-25213-wp-file-manager-wordpress-plugin-6-9-3f79241f0cd8", "fork": false, "created_at": "2020-10-10T17:50:01Z", - "updated_at": "2026-10-22T10:54:22Z", + "updated_at": "2026-11-06T13:41:20Z", "pushed_at": "2020-10-12T09:57:28Z", - "stargazers_count": 58, - "watchers_count": 58, + "stargazers_count": 57, + "watchers_count": 57, "has_discussions": false, "forks_count": 26, "allow_forking": true, @@ -32,7 +32,7 @@ ], "visibility": "public", "forks": 26, - "watchers": 58, + "watchers": 57, "score": 0, "subscribers_count": 2 }, diff --git a/2020/CVE-2020-26235.json b/2020/CVE-2020-26235.json new file mode 100644 index 0000000000..fee73c4bd6 --- /dev/null +++ b/2020/CVE-2020-26235.json @@ -0,0 +1,35 @@ +[ + { + "id": 1448266736, + "name": "cortex9-time-crate-env-race-interleaving-model", + "full_name": "federiconbaez\/cortex9-time-crate-env-race-interleaving-model", + "owner": { + "login": "federiconbaez", + "id": 43962066, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43962066?v=4", + "html_url": "https:\/\/github.com\/federiconbaez", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/federiconbaez\/cortex9-time-crate-env-race-interleaving-model", + "description": "Finite interleaving model of time 0.2.22 tzset\/getenv vs setenv realloc (CVE-2020-26235). No threads, libc or real environment.", + "fork": false, + "created_at": "2026-11-06T13:00:31Z", + "updated_at": "2026-11-06T13:00:43Z", + "pushed_at": "2026-11-06T13:00:38Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2020/CVE-2020-5902.json b/2020/CVE-2020-5902.json index b9cf532aa0..8d8b7afc1c 100644 --- a/2020/CVE-2020-5902.json +++ b/2020/CVE-2020-5902.json @@ -251,10 +251,10 @@ "description": "exploit code for F5-Big-IP (CVE-2020-5902)", "fork": false, "created_at": "2020-07-06T01:12:23Z", - "updated_at": "2024-08-12T20:03:25Z", + "updated_at": "2026-11-06T13:40:36Z", "pushed_at": "2023-05-22T23:32:39Z", - "stargazers_count": 43, - "watchers_count": 43, + "stargazers_count": 42, + "watchers_count": 42, "has_discussions": false, "forks_count": 15, "allow_forking": true, @@ -272,7 +272,7 @@ ], "visibility": "public", "forks": 15, - "watchers": 43, + "watchers": 42, "score": 0, "subscribers_count": 2 }, diff --git a/2021/CVE-2021-1675.json b/2021/CVE-2021-1675.json index d80fc9788b..c0039beadb 100644 --- a/2021/CVE-2021-1675.json +++ b/2021/CVE-2021-1675.json @@ -47,10 +47,10 @@ "description": "C# and Impacket implementation of PrintNightmare CVE-2021-1675\/CVE-2021-34527", "fork": false, "created_at": "2021-06-29T17:24:14Z", - "updated_at": "2026-11-05T15:29:39Z", + "updated_at": "2026-11-06T13:17:02Z", "pushed_at": "2021-07-20T15:28:13Z", - "stargazers_count": 2008, - "watchers_count": 2008, + "stargazers_count": 2009, + "watchers_count": 2009, "has_discussions": false, "forks_count": 572, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 572, - "watchers": 2008, + "watchers": 2009, "score": 0, "subscribers_count": 40 }, @@ -329,10 +329,10 @@ "description": "Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)", "fork": false, "created_at": "2021-07-01T23:45:58Z", - "updated_at": "2026-11-04T14:51:04Z", + "updated_at": "2026-11-06T13:43:35Z", "pushed_at": "2021-07-05T08:54:06Z", - "stargazers_count": 1113, - "watchers_count": 1113, + "stargazers_count": 1112, + "watchers_count": 1112, "has_discussions": false, "forks_count": 221, "allow_forking": true, @@ -343,7 +343,7 @@ "topics": [], "visibility": "public", "forks": 221, - "watchers": 1113, + "watchers": 1112, "score": 0, "subscribers_count": 23 }, diff --git a/2021/CVE-2021-21972.json b/2021/CVE-2021-21972.json index 4953134514..6f54835b17 100644 --- a/2021/CVE-2021-21972.json +++ b/2021/CVE-2021-21972.json @@ -165,10 +165,10 @@ "description": "Proof of Concept Exploit for vCenter CVE-2021-21972", "fork": false, "created_at": "2021-02-24T16:31:34Z", - "updated_at": "2026-11-04T08:44:53Z", + "updated_at": "2026-11-06T13:42:28Z", "pushed_at": "2021-02-25T16:05:02Z", - "stargazers_count": 269, - "watchers_count": 269, + "stargazers_count": 268, + "watchers_count": 268, "has_discussions": false, "forks_count": 83, "allow_forking": true, @@ -179,7 +179,7 @@ "topics": [], "visibility": "public", "forks": 83, - "watchers": 269, + "watchers": 268, "score": 0, "subscribers_count": 6 }, diff --git a/2021/CVE-2021-21985.json b/2021/CVE-2021-21985.json index 10b7872676..600c3d73b8 100644 --- a/2021/CVE-2021-21985.json +++ b/2021/CVE-2021-21985.json @@ -47,10 +47,10 @@ "description": null, "fork": false, "created_at": "2021-05-29T13:07:14Z", - "updated_at": "2026-10-13T19:01:50Z", + "updated_at": "2026-11-06T13:43:15Z", "pushed_at": "2023-01-19T16:24:33Z", - "stargazers_count": 214, - "watchers_count": 214, + "stargazers_count": 213, + "watchers_count": 213, "has_discussions": false, "forks_count": 49, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 49, - "watchers": 214, + "watchers": 213, "score": 0, "subscribers_count": 4 }, diff --git a/2021/CVE-2021-22204.json b/2021/CVE-2021-22204.json index 824d106256..a44d8c4f31 100644 --- a/2021/CVE-2021-22204.json +++ b/2021/CVE-2021-22204.json @@ -14,10 +14,10 @@ "description": "Python exploit for the CVE-2021-22204 vulnerability in Exiftool", "fork": false, "created_at": "2021-05-11T18:45:07Z", - "updated_at": "2026-10-14T08:14:42Z", + "updated_at": "2026-11-06T13:43:03Z", "pushed_at": "2021-05-20T21:42:43Z", - "stargazers_count": 98, - "watchers_count": 98, + "stargazers_count": 96, + "watchers_count": 96, "has_discussions": false, "forks_count": 27, "allow_forking": true, @@ -31,7 +31,7 @@ ], "visibility": "public", "forks": 27, - "watchers": 98, + "watchers": 96, "score": 0, "subscribers_count": 9 }, diff --git a/2021/CVE-2021-22986.json b/2021/CVE-2021-22986.json index cebae4ebb4..71dae4953e 100644 --- a/2021/CVE-2021-22986.json +++ b/2021/CVE-2021-22986.json @@ -181,10 +181,10 @@ "description": "CVE-2021-22986 & F5 BIG-IP RCE", "fork": false, "created_at": "2021-03-22T07:13:50Z", - "updated_at": "2026-05-29T08:08:10Z", + "updated_at": "2026-11-06T13:42:41Z", "pushed_at": "2021-04-03T12:56:37Z", - "stargazers_count": 91, - "watchers_count": 91, + "stargazers_count": 90, + "watchers_count": 90, "has_discussions": false, "forks_count": 29, "allow_forking": true, @@ -198,7 +198,7 @@ ], "visibility": "public", "forks": 29, - "watchers": 91, + "watchers": 90, "score": 0, "subscribers_count": 3 }, diff --git a/2021/CVE-2021-26084.json b/2021/CVE-2021-26084.json index df3f2e53e2..218cb27c6c 100644 --- a/2021/CVE-2021-26084.json +++ b/2021/CVE-2021-26084.json @@ -146,10 +146,10 @@ "description": "Confluence Server Webwork OGNL injection", "fork": false, "created_at": "2021-09-01T07:15:17Z", - "updated_at": "2026-09-14T21:41:20Z", + "updated_at": "2026-11-06T13:44:21Z", "pushed_at": "2025-02-11T01:36:46Z", - "stargazers_count": 316, - "watchers_count": 316, + "stargazers_count": 314, + "watchers_count": 314, "has_discussions": false, "forks_count": 78, "allow_forking": true, @@ -160,7 +160,7 @@ "topics": [], "visibility": "public", "forks": 78, - "watchers": 316, + "watchers": 314, "score": 0, "subscribers_count": 2 }, diff --git a/2021/CVE-2021-27651.json b/2021/CVE-2021-27651.json index 9aafde6a0a..6550edc7f1 100644 --- a/2021/CVE-2021-27651.json +++ b/2021/CVE-2021-27651.json @@ -14,10 +14,10 @@ "description": "RCE for Pega Infinity >= 8.2.1, Pega Infinity <= 8.5.2", "fork": false, "created_at": "2021-05-16T01:40:47Z", - "updated_at": "2024-10-09T18:12:28Z", + "updated_at": "2026-11-06T13:43:05Z", "pushed_at": "2021-05-16T05:54:07Z", - "stargazers_count": 60, - "watchers_count": 60, + "stargazers_count": 59, + "watchers_count": 59, "has_discussions": false, "forks_count": 16, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 16, - "watchers": 60, + "watchers": 59, "score": 0, "subscribers_count": 2 }, diff --git a/2021/CVE-2021-31166.json b/2021/CVE-2021-31166.json index 92d97dd470..99b97514d4 100644 --- a/2021/CVE-2021-31166.json +++ b/2021/CVE-2021-31166.json @@ -14,10 +14,10 @@ "description": "Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.", "fork": false, "created_at": "2021-05-16T16:15:56Z", - "updated_at": "2026-10-13T16:07:11Z", + "updated_at": "2026-11-06T13:43:07Z", "pushed_at": "2021-06-12T08:27:09Z", - "stargazers_count": 823, - "watchers_count": 823, + "stargazers_count": 822, + "watchers_count": 822, "has_discussions": false, "forks_count": 135, "allow_forking": true, @@ -33,7 +33,7 @@ ], "visibility": "public", "forks": 135, - "watchers": 823, + "watchers": 822, "score": 0, "subscribers_count": 1 }, diff --git a/2021/CVE-2021-3156.json b/2021/CVE-2021-3156.json index a405fd9264..b89e6c0d7d 100644 --- a/2021/CVE-2021-3156.json +++ b/2021/CVE-2021-3156.json @@ -516,12 +516,12 @@ "description": null, "fork": false, "created_at": "2021-01-30T20:39:58Z", - "updated_at": "2026-10-30T14:04:40Z", + "updated_at": "2026-11-06T13:40:36Z", "pushed_at": "2021-02-02T17:07:09Z", - "stargazers_count": 1031, - "watchers_count": 1031, + "stargazers_count": 1032, + "watchers_count": 1032, "has_discussions": false, - "forks_count": 233, + "forks_count": 234, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -529,8 +529,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 233, - "watchers": 1031, + "forks": 234, + "watchers": 1032, "score": 0, "subscribers_count": 25 }, diff --git a/2021/CVE-2021-32804.json b/2021/CVE-2021-32804.json index ce3fe1e05e..9e73d15ff1 100644 --- a/2021/CVE-2021-32804.json +++ b/2021/CVE-2021-32804.json @@ -31,5 +31,38 @@ "watchers": 1, "score": 0, "subscribers_count": 8 + }, + { + "id": 1448330394, + "name": "cortex9-node-tar-path-sanitization-model", + "full_name": "federiconbaez\/cortex9-node-tar-path-sanitization-model", + "owner": { + "login": "federiconbaez", + "id": 43962066, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43962066?v=4", + "html_url": "https:\/\/github.com\/federiconbaez", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/federiconbaez\/cortex9-node-tar-path-sanitization-model", + "description": "Offline Python port of node-tar path sanitization (CVE-2021-32804, CVE-2021-37713) with a differential check against the original CHECKPATH logic. No archives are extracted.", + "fork": false, + "created_at": "2026-11-06T13:59:44Z", + "updated_at": "2026-11-06T13:59:58Z", + "pushed_at": "2026-11-06T13:59:52Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2021/CVE-2021-34527.json b/2021/CVE-2021-34527.json index 9d32270047..c13abb6a0d 100644 --- a/2021/CVE-2021-34527.json +++ b/2021/CVE-2021-34527.json @@ -225,10 +225,10 @@ "description": "A PrintNightmare (CVE-2021-34527) Python Scanner. Scan entire subnets for hosts vulnerable to the PrintNightmare RCE", "fork": false, "created_at": "2021-07-05T20:13:49Z", - "updated_at": "2026-10-29T00:07:38Z", + "updated_at": "2026-11-06T13:43:37Z", "pushed_at": "2024-05-19T16:25:52Z", - "stargazers_count": 802, - "watchers_count": 802, + "stargazers_count": 801, + "watchers_count": 801, "has_discussions": false, "forks_count": 116, "allow_forking": true, @@ -239,7 +239,7 @@ "topics": [], "visibility": "public", "forks": 116, - "watchers": 802, + "watchers": 801, "score": 0, "subscribers_count": 8 }, diff --git a/2021/CVE-2021-36260.json b/2021/CVE-2021-36260.json index b7b99ec900..43c2902ffa 100644 --- a/2021/CVE-2021-36260.json +++ b/2021/CVE-2021-36260.json @@ -248,10 +248,10 @@ "description": "HikvisionExploiter is a Python-based utility designed to automate exploitation and directory accessibility checks on Hikvision network cameras exploiting the Web interface Version 3.1.3.150324 + CVE-2021-36260 Detection", "fork": false, "created_at": "2024-07-05T16:58:14Z", - "updated_at": "2026-11-05T17:37:03Z", + "updated_at": "2026-11-06T18:00:07Z", "pushed_at": "2025-12-22T22:57:58Z", - "stargazers_count": 396, - "watchers_count": 396, + "stargazers_count": 397, + "watchers_count": 397, "has_discussions": false, "forks_count": 65, "allow_forking": true, @@ -262,7 +262,7 @@ "topics": [], "visibility": "public", "forks": 65, - "watchers": 396, + "watchers": 397, "score": 0, "subscribers_count": 6 }, diff --git a/2021/CVE-2021-3712.json b/2021/CVE-2021-3712.json index 60516b57d3..71046b3daf 100644 --- a/2021/CVE-2021-3712.json +++ b/2021/CVE-2021-3712.json @@ -31,5 +31,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1448330781, + "name": "cortex9-openssl-asn1-string-nul-scanner", + "full_name": "federiconbaez\/cortex9-openssl-asn1-string-nul-scanner", + "owner": { + "login": "federiconbaez", + "id": 43962066, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43962066?v=4", + "html_url": "https:\/\/github.com\/federiconbaez", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/federiconbaez\/cortex9-openssl-asn1-string-nul-scanner", + "description": "Lexical scanner for ASN1_STRING uses that assume NUL termination (CVE-2021-3712). Labels are NUL_SINK_WARNING, BOUNDED_PATTERN or UNKNOWN; heuristic, not a flow analysis.", + "fork": false, + "created_at": "2026-11-06T14:00:07Z", + "updated_at": "2026-11-06T14:00:21Z", + "pushed_at": "2026-11-06T14:00:15Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2021/CVE-2021-4034.json b/2021/CVE-2021-4034.json index 7d388dd3fb..02d8d49f5e 100644 --- a/2021/CVE-2021-4034.json +++ b/2021/CVE-2021-4034.json @@ -1364,10 +1364,10 @@ "description": "Python exploit code for CVE-2021-4034 (pwnkit)", "fork": false, "created_at": "2022-01-26T17:53:16Z", - "updated_at": "2026-11-04T08:44:59Z", + "updated_at": "2026-11-06T13:46:04Z", "pushed_at": "2022-01-28T00:29:15Z", - "stargazers_count": 179, - "watchers_count": 179, + "stargazers_count": 178, + "watchers_count": 178, "has_discussions": false, "forks_count": 39, "allow_forking": true, @@ -1378,7 +1378,7 @@ "topics": [], "visibility": "public", "forks": 39, - "watchers": 179, + "watchers": 178, "score": 0, "subscribers_count": 1 }, diff --git a/2021/CVE-2021-40444.json b/2021/CVE-2021-40444.json index 5cfcd01614..b2b07d02f9 100644 --- a/2021/CVE-2021-40444.json +++ b/2021/CVE-2021-40444.json @@ -245,10 +245,10 @@ "description": "CVE-2021-40444 PoC", "fork": false, "created_at": "2021-09-10T16:55:53Z", - "updated_at": "2026-11-06T00:23:34Z", + "updated_at": "2026-11-06T18:32:17Z", "pushed_at": "2021-12-25T18:31:02Z", - "stargazers_count": 1855, - "watchers_count": 1855, + "stargazers_count": 1854, + "watchers_count": 1854, "has_discussions": false, "forks_count": 471, "allow_forking": true, @@ -259,7 +259,7 @@ "topics": [], "visibility": "public", "forks": 471, - "watchers": 1855, + "watchers": 1854, "score": 0, "subscribers_count": 28 }, diff --git a/2021/CVE-2021-41349.json b/2021/CVE-2021-41349.json index 5c31946fd6..030fe146b5 100644 --- a/2021/CVE-2021-41349.json +++ b/2021/CVE-2021-41349.json @@ -14,10 +14,10 @@ "description": "Exploiting: CVE-2021-41349", "fork": false, "created_at": "2022-01-06T09:44:15Z", - "updated_at": "2025-02-12T12:03:25Z", + "updated_at": "2026-11-06T13:45:54Z", "pushed_at": "2022-01-06T10:57:17Z", - "stargazers_count": 11, - "watchers_count": 11, + "stargazers_count": 10, + "watchers_count": 10, "has_discussions": false, "forks_count": 5, "allow_forking": true, @@ -32,7 +32,7 @@ ], "visibility": "public", "forks": 5, - "watchers": 11, + "watchers": 10, "score": 0, "subscribers_count": 1 }, diff --git a/2021/CVE-2021-42278.json b/2021/CVE-2021-42278.json index d38be046e8..8de878864e 100644 --- a/2021/CVE-2021-42278.json +++ b/2021/CVE-2021-42278.json @@ -14,10 +14,10 @@ "description": "Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user ", "fork": false, "created_at": "2021-12-11T15:10:30Z", - "updated_at": "2026-11-05T13:20:50Z", + "updated_at": "2026-11-06T13:45:34Z", "pushed_at": "2022-07-10T22:23:13Z", - "stargazers_count": 1071, - "watchers_count": 1071, + "stargazers_count": 1070, + "watchers_count": 1070, "has_discussions": false, "forks_count": 191, "allow_forking": true, @@ -33,7 +33,7 @@ ], "visibility": "public", "forks": 191, - "watchers": 1071, + "watchers": 1070, "score": 0, "subscribers_count": 23 }, @@ -52,10 +52,10 @@ "description": "Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user ", "fork": false, "created_at": "2021-12-13T10:28:12Z", - "updated_at": "2026-11-05T09:01:21Z", + "updated_at": "2026-11-06T13:10:46Z", "pushed_at": "2023-01-29T03:31:27Z", - "stargazers_count": 1029, - "watchers_count": 1029, + "stargazers_count": 1030, + "watchers_count": 1030, "has_discussions": false, "forks_count": 137, "allow_forking": true, @@ -66,7 +66,7 @@ "topics": [], "visibility": "public", "forks": 137, - "watchers": 1029, + "watchers": 1030, "score": 0, "subscribers_count": 13 }, diff --git a/2021/CVE-2021-42287.json b/2021/CVE-2021-42287.json index ea27a8d981..79dfda0391 100644 --- a/2021/CVE-2021-42287.json +++ b/2021/CVE-2021-42287.json @@ -14,10 +14,10 @@ "description": "CVE-2021-42287\/CVE-2021-42278 Scanner & Exploiter.", "fork": false, "created_at": "2021-12-11T19:27:30Z", - "updated_at": "2026-11-05T19:14:53Z", + "updated_at": "2026-11-06T13:45:35Z", "pushed_at": "2021-12-16T09:50:15Z", - "stargazers_count": 1417, - "watchers_count": 1417, + "stargazers_count": 1416, + "watchers_count": 1416, "has_discussions": false, "forks_count": 311, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 311, - "watchers": 1417, + "watchers": 1416, "score": 0, "subscribers_count": 25 }, diff --git a/2021/CVE-2021-44228.json b/2021/CVE-2021-44228.json index 55b4796110..f76846c134 100644 --- a/2021/CVE-2021-44228.json +++ b/2021/CVE-2021-44228.json @@ -3840,10 +3840,10 @@ "description": "A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228 ", "fork": false, "created_at": "2021-12-13T03:57:50Z", - "updated_at": "2026-11-05T13:20:52Z", + "updated_at": "2026-11-06T13:45:36Z", "pushed_at": "2022-11-23T18:23:24Z", - "stargazers_count": 3424, - "watchers_count": 3424, + "stargazers_count": 3423, + "watchers_count": 3423, "has_discussions": true, "forks_count": 722, "allow_forking": true, @@ -3854,7 +3854,7 @@ "topics": [], "visibility": "public", "forks": 722, - "watchers": 3424, + "watchers": 3423, "score": 0, "subscribers_count": 54 }, @@ -6225,10 +6225,10 @@ "description": "Internal network honeypot for detecting if an attacker or insider threat scans your network for log4j CVE-2021-44228", "fork": false, "created_at": "2021-12-14T18:08:45Z", - "updated_at": "2026-07-08T17:14:40Z", + "updated_at": "2026-11-06T13:45:37Z", "pushed_at": "2021-12-20T14:44:27Z", - "stargazers_count": 149, - "watchers_count": 149, + "stargazers_count": 148, + "watchers_count": 148, "has_discussions": false, "forks_count": 25, "allow_forking": true, @@ -6239,7 +6239,7 @@ "topics": [], "visibility": "public", "forks": 25, - "watchers": 149, + "watchers": 148, "score": 0, "subscribers_count": 4 }, diff --git a/2022/CVE-2022-1388.json b/2022/CVE-2022-1388.json index 09486f3f4d..ce76bca0f7 100644 --- a/2022/CVE-2022-1388.json +++ b/2022/CVE-2022-1388.json @@ -450,10 +450,10 @@ "description": "POC for CVE-2022-1388", "fork": false, "created_at": "2022-05-09T11:46:45Z", - "updated_at": "2026-10-13T19:23:46Z", + "updated_at": "2026-11-06T13:47:20Z", "pushed_at": "2022-05-09T20:52:07Z", - "stargazers_count": 230, - "watchers_count": 230, + "stargazers_count": 229, + "watchers_count": 229, "has_discussions": false, "forks_count": 37, "allow_forking": true, @@ -464,7 +464,7 @@ "topics": [], "visibility": "public", "forks": 37, - "watchers": 230, + "watchers": 229, "score": 0, "subscribers_count": 5 }, diff --git a/2022/CVE-2022-22947.json b/2022/CVE-2022-22947.json index c9f4ebea57..3722e3e6f9 100644 --- a/2022/CVE-2022-22947.json +++ b/2022/CVE-2022-22947.json @@ -14,10 +14,10 @@ "description": "CVE-2022-22947", "fork": false, "created_at": "2022-03-02T11:58:55Z", - "updated_at": "2026-10-29T08:45:36Z", + "updated_at": "2026-11-06T15:48:17Z", "pushed_at": "2022-03-03T14:03:30Z", - "stargazers_count": 222, - "watchers_count": 222, + "stargazers_count": 221, + "watchers_count": 221, "has_discussions": false, "forks_count": 58, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 58, - "watchers": 222, + "watchers": 221, "score": 0, "subscribers_count": 1 }, diff --git a/2022/CVE-2022-24713.json b/2022/CVE-2022-24713.json index fd55c11670..55e2e09f03 100644 --- a/2022/CVE-2022-24713.json +++ b/2022/CVE-2022-24713.json @@ -31,5 +31,38 @@ "watchers": 0, "score": 0, "subscribers_count": 1 + }, + { + "id": 1448330593, + "name": "cortex9-rust-regex-empty-repetition-size-limit-model", + "full_name": "federiconbaez\/cortex9-rust-regex-empty-repetition-size-limit-model", + "owner": { + "login": "federiconbaez", + "id": 43962066, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43962066?v=4", + "html_url": "https:\/\/github.com\/federiconbaez", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/federiconbaez\/cortex9-rust-regex-empty-repetition-size-limit-model", + "description": "Offline model of the regex 1.5.4 compile-size accounting for empty repetitions (CVE-2022-24713), checked against regex-syntax HIR and real compile results. Bounded cases are labelled MODEL_LIMIT.", + "fork": false, + "created_at": "2026-11-06T13:59:56Z", + "updated_at": "2026-11-06T14:00:08Z", + "pushed_at": "2026-11-06T14:00:03Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2022/CVE-2022-26134.json b/2022/CVE-2022-26134.json index 0439e41d1c..4a65ab4653 100644 --- a/2022/CVE-2022-26134.json +++ b/2022/CVE-2022-26134.json @@ -2475,8 +2475,8 @@ "description": null, "fork": false, "created_at": "2026-05-06T01:47:50Z", - "updated_at": "2026-11-06T02:13:26Z", - "pushed_at": "2026-11-06T02:13:21Z", + "updated_at": "2026-11-06T18:14:41Z", + "pushed_at": "2026-11-06T18:14:35Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2022/CVE-2022-29464.json b/2022/CVE-2022-29464.json index 4ea957cf3d..a4de49def3 100644 --- a/2022/CVE-2022-29464.json +++ b/2022/CVE-2022-29464.json @@ -14,10 +14,10 @@ "description": "WSO2 RCE (CVE-2022-29464) exploit and writeup.", "fork": false, "created_at": "2022-04-20T21:23:52Z", - "updated_at": "2026-10-28T11:27:31Z", + "updated_at": "2026-11-06T13:47:07Z", "pushed_at": "2022-04-27T05:52:43Z", - "stargazers_count": 379, - "watchers_count": 379, + "stargazers_count": 378, + "watchers_count": 378, "has_discussions": false, "forks_count": 83, "allow_forking": true, @@ -30,7 +30,7 @@ ], "visibility": "public", "forks": 83, - "watchers": 379, + "watchers": 378, "score": 0, "subscribers_count": 6 }, diff --git a/2022/CVE-2022-30075.json b/2022/CVE-2022-30075.json index 7454c234ba..c0e6bae369 100644 --- a/2022/CVE-2022-30075.json +++ b/2022/CVE-2022-30075.json @@ -14,10 +14,10 @@ "description": "Tp-Link Archer AX50 Authenticated RCE (CVE-2022-30075)", "fork": false, "created_at": "2022-06-07T23:26:47Z", - "updated_at": "2026-11-02T00:00:03Z", + "updated_at": "2026-11-06T13:47:42Z", "pushed_at": "2022-11-20T03:03:53Z", - "stargazers_count": 238, - "watchers_count": 238, + "stargazers_count": 237, + "watchers_count": 237, "has_discussions": false, "forks_count": 42, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 42, - "watchers": 238, + "watchers": 237, "score": 0, "subscribers_count": 4 }, diff --git a/2022/CVE-2022-37969.json b/2022/CVE-2022-37969.json index 58266da59d..2226753049 100644 --- a/2022/CVE-2022-37969.json +++ b/2022/CVE-2022-37969.json @@ -14,10 +14,10 @@ "description": "Windows LPE exploit for CVE-2022-37969", "fork": false, "created_at": "2023-03-09T21:17:44Z", - "updated_at": "2026-08-28T14:55:18Z", + "updated_at": "2026-11-06T13:50:44Z", "pushed_at": "2023-07-11T16:50:28Z", - "stargazers_count": 134, - "watchers_count": 134, + "stargazers_count": 133, + "watchers_count": 133, "has_discussions": false, "forks_count": 38, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 38, - "watchers": 134, + "watchers": 133, "score": 0, "subscribers_count": 4 }, diff --git a/2022/CVE-2022-45771.json b/2022/CVE-2022-45771.json index 0d130936e9..db332455e0 100644 --- a/2022/CVE-2022-45771.json +++ b/2022/CVE-2022-45771.json @@ -14,10 +14,10 @@ "description": "Pwndoc local file inclusion to remote code execution of Node.js code on the server", "fork": false, "created_at": "2022-12-13T10:03:14Z", - "updated_at": "2026-01-14T22:12:54Z", + "updated_at": "2026-11-06T13:49:55Z", "pushed_at": "2025-01-31T09:58:14Z", - "stargazers_count": 47, - "watchers_count": 47, + "stargazers_count": 46, + "watchers_count": 46, "has_discussions": false, "forks_count": 7, "allow_forking": true, @@ -33,7 +33,7 @@ ], "visibility": "public", "forks": 7, - "watchers": 47, + "watchers": 46, "score": 0, "subscribers_count": 1 }, diff --git a/2023/CVE-2023-21752.json b/2023/CVE-2023-21752.json index a41d060131..a0a2a3e725 100644 --- a/2023/CVE-2023-21752.json +++ b/2023/CVE-2023-21752.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2023-01-10T15:59:26Z", - "updated_at": "2026-10-17T02:30:52Z", + "updated_at": "2026-11-06T13:50:16Z", "pushed_at": "2023-01-13T09:01:20Z", - "stargazers_count": 327, - "watchers_count": 327, + "stargazers_count": 326, + "watchers_count": 326, "has_discussions": false, "forks_count": 60, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 60, - "watchers": 327, + "watchers": 326, "score": 0, "subscribers_count": 2 }, diff --git a/2023/CVE-2023-22809.json b/2023/CVE-2023-22809.json index 7263c69bf7..820a9aea95 100644 --- a/2023/CVE-2023-22809.json +++ b/2023/CVE-2023-22809.json @@ -14,10 +14,10 @@ "description": "A script to automate privilege escalation with CVE-2023-22809 vulnerability", "fork": false, "created_at": "2023-01-21T15:19:23Z", - "updated_at": "2026-09-15T09:09:15Z", + "updated_at": "2026-11-06T13:50:25Z", "pushed_at": "2023-02-15T18:10:53Z", - "stargazers_count": 164, - "watchers_count": 164, + "stargazers_count": 163, + "watchers_count": 163, "has_discussions": false, "forks_count": 36, "allow_forking": true, @@ -37,7 +37,7 @@ ], "visibility": "public", "forks": 36, - "watchers": 164, + "watchers": 163, "score": 0, "subscribers_count": 2 }, diff --git a/2023/CVE-2023-44487.json b/2023/CVE-2023-44487.json index 9673aef428..464c8f8b57 100644 --- a/2023/CVE-2023-44487.json +++ b/2023/CVE-2023-44487.json @@ -154,10 +154,10 @@ "description": "Tool for testing mitigations and exposure to Rapid Reset DDoS (CVE-2023-44487)", "fork": false, "created_at": "2023-10-13T23:55:32Z", - "updated_at": "2026-10-26T08:07:15Z", + "updated_at": "2026-11-06T13:51:18Z", "pushed_at": "2023-10-30T20:22:37Z", - "stargazers_count": 76, - "watchers_count": 76, + "stargazers_count": 75, + "watchers_count": 75, "has_discussions": false, "forks_count": 16, "allow_forking": true, @@ -168,7 +168,7 @@ "topics": [], "visibility": "public", "forks": 16, - "watchers": 76, + "watchers": 75, "score": 0, "subscribers_count": 3 }, diff --git a/2023/CVE-2023-45866.json b/2023/CVE-2023-45866.json index d9e1f0f169..34cb030968 100644 --- a/2023/CVE-2023-45866.json +++ b/2023/CVE-2023-45866.json @@ -14,10 +14,10 @@ "description": "🚨 CVE-2023-45866 - BlueDucky Implementation (Using DuckyScript) 🔓 Unauthenticated Peering Leading to Code Execution (Using HID Keyboard)", "fork": false, "created_at": "2024-01-16T06:52:02Z", - "updated_at": "2026-11-05T03:34:02Z", + "updated_at": "2026-11-06T13:51:25Z", "pushed_at": "2026-02-11T00:03:00Z", - "stargazers_count": 1906, - "watchers_count": 1906, + "stargazers_count": 1905, + "watchers_count": 1905, "has_discussions": false, "forks_count": 320, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 320, - "watchers": 1906, + "watchers": 1905, "score": 0, "subscribers_count": 30 }, diff --git a/2023/CVE-2023-4863.json b/2023/CVE-2023-4863.json index 0aae96c66e..ba94a0f8f4 100644 --- a/2023/CVE-2023-4863.json +++ b/2023/CVE-2023-4863.json @@ -245,10 +245,10 @@ "description": null, "fork": false, "created_at": "2023-12-18T23:12:25Z", - "updated_at": "2026-08-07T20:39:52Z", + "updated_at": "2026-11-06T13:51:22Z", "pushed_at": "2024-05-13T17:40:58Z", - "stargazers_count": 56, - "watchers_count": 56, + "stargazers_count": 55, + "watchers_count": 55, "has_discussions": false, "forks_count": 9, "allow_forking": true, @@ -259,7 +259,7 @@ "topics": [], "visibility": "public", "forks": 9, - "watchers": 56, + "watchers": 55, "score": 0, "subscribers_count": 3 }, diff --git a/2024/CVE-2024-10654.json b/2024/CVE-2024-10654.json index 966b3f6d34..3c3e14c578 100644 --- a/2024/CVE-2024-10654.json +++ b/2024/CVE-2024-10654.json @@ -19,7 +19,7 @@ "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 0, "score": 0, "subscribers_count": 1 diff --git a/2024/CVE-2024-27198.json b/2024/CVE-2024-27198.json index f5d720fc7d..60d337a5ec 100644 --- a/2024/CVE-2024-27198.json +++ b/2024/CVE-2024-27198.json @@ -488,39 +488,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1242455081, - "name": "CVE-2024-27198_Lab", - "full_name": "cmpnn-romain\/CVE-2024-27198_Lab", - "owner": { - "login": "cmpnn-romain", - "id": 104324449, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/104324449?v=4", - "html_url": "https:\/\/github.com\/cmpnn-romain", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/cmpnn-romain\/CVE-2024-27198_Lab", - "description": "Lab for the CVE-2024-27198", - "fork": false, - "created_at": "2026-05-18T12:49:39Z", - "updated_at": "2026-09-13T17:57:46Z", - "pushed_at": "2026-09-13T17:57:42Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1242753050, "name": "CVE-2024-27198_LAB", diff --git a/2024/CVE-2024-32002.json b/2024/CVE-2024-32002.json index 6a190ee516..79d54697c1 100644 --- a/2024/CVE-2024-32002.json +++ b/2024/CVE-2024-32002.json @@ -80,10 +80,10 @@ "description": "Exploit PoC for CVE-2024-32002", "fork": false, "created_at": "2024-05-17T19:33:08Z", - "updated_at": "2026-11-02T01:03:30Z", + "updated_at": "2026-11-06T15:45:20Z", "pushed_at": "2024-05-19T07:12:00Z", - "stargazers_count": 533, - "watchers_count": 533, + "stargazers_count": 532, + "watchers_count": 532, "has_discussions": false, "forks_count": 147, "allow_forking": true, @@ -99,7 +99,7 @@ ], "visibility": "public", "forks": 147, - "watchers": 533, + "watchers": 532, "score": 0, "subscribers_count": 2 }, diff --git a/2024/CVE-2024-4367.json b/2024/CVE-2024-4367.json index 916474b356..deaf99f65d 100644 --- a/2024/CVE-2024-4367.json +++ b/2024/CVE-2024-4367.json @@ -229,7 +229,7 @@ "fork": false, "created_at": "2024-06-17T11:39:41Z", "updated_at": "2026-06-02T18:17:20Z", - "pushed_at": "2026-10-07T14:54:48Z", + "pushed_at": "2026-11-06T15:17:50Z", "stargazers_count": 10, "watchers_count": 10, "has_discussions": false, diff --git a/2024/CVE-2024-5716.json b/2024/CVE-2024-5716.json new file mode 100644 index 0000000000..b41a9c70c0 --- /dev/null +++ b/2024/CVE-2024-5716.json @@ -0,0 +1,44 @@ +[ + { + "id": 1448438898, + "name": "logsign-rce", + "full_name": "jankesec\/logsign-rce", + "owner": { + "login": "jankesec", + "id": 295349953, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/295349953?v=4", + "html_url": "https:\/\/github.com\/jankesec", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/jankesec\/logsign-rce", + "description": "Logsign Unified SecOps Platform: Pre-Auth Authentication Bypass (CVE-2024-5716) & RCE (CVE-2024-5717) Exploit Chain & Detection Suite", + "fork": false, + "created_at": "2026-11-06T15:40:03Z", + "updated_at": "2026-11-06T15:40:17Z", + "pushed_at": "2026-11-06T15:40:10Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve-2024-5716", + "cve-2024-5717", + "exploit", + "metasploit", + "nuclei", + "offensive-security", + "rce", + "vulnerability-research" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2025/CVE-2025-26206.json b/2025/CVE-2025-26206.json index 85ed8cd054..565e14422f 100644 --- a/2025/CVE-2025-26206.json +++ b/2025/CVE-2025-26206.json @@ -11,11 +11,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/xibhi\/CVE-2025-26206", - "description": "CSRF vulnerability in Selldone Storefront v1.0 leading to privilege escalation (CVE-2025-26206, CVSS 9.0).", + "description": null, "fork": false, "created_at": "2025-02-24T05:53:46Z", - "updated_at": "2026-10-16T04:25:17Z", - "pushed_at": "2026-10-16T04:21:45Z", + "updated_at": "2026-11-06T14:39:54Z", + "pushed_at": "2026-11-06T14:39:50Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-30406.json b/2025/CVE-2025-30406.json index 016674d3e5..e992e6dc10 100644 --- a/2025/CVE-2025-30406.json +++ b/2025/CVE-2025-30406.json @@ -47,12 +47,12 @@ "description": "CVE-2025-30406 ViewState Exploit PoC", "fork": false, "created_at": "2025-07-31T19:14:33Z", - "updated_at": "2026-10-20T10:51:30Z", + "updated_at": "2026-11-06T14:48:19Z", "pushed_at": "2025-07-31T19:26:42Z", - "stargazers_count": 90, - "watchers_count": 90, + "stargazers_count": 91, + "watchers_count": 91, "has_discussions": false, - "forks_count": 18, + "forks_count": 19, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,8 +60,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 18, - "watchers": 90, + "forks": 19, + "watchers": 91, "score": 0, "subscribers_count": 0 } diff --git a/2025/CVE-2025-32433.json b/2025/CVE-2025-32433.json index 3fb5182e5a..2dbd62c12a 100644 --- a/2025/CVE-2025-32433.json +++ b/2025/CVE-2025-32433.json @@ -1441,5 +1441,49 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1448615809, + "name": "cve-2025-32433-erlang-ssh-preauth-rce", + "full_name": "Ghost-Bx1\/cve-2025-32433-erlang-ssh-preauth-rce", + "owner": { + "login": "Ghost-Bx1", + "id": 103540917, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103540917?v=4", + "html_url": "https:\/\/github.com\/Ghost-Bx1", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Ghost-Bx1\/cve-2025-32433-erlang-ssh-preauth-rce", + "description": "CVE-2025-32433 - Erlang\/OTP SSH Pre-Authentication RCE | CVSS 10.0 | By Gh0st-Bx1", + "fork": false, + "created_at": "2026-11-06T18:34:24Z", + "updated_at": "2026-11-06T18:36:05Z", + "pushed_at": "2026-11-06T18:35:48Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve-2025-32433", + "erlang", + "exploit", + "otp", + "poc", + "python", + "rabbitmq", + "rce", + "security", + "ssh" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2025/CVE-2025-32463.json b/2025/CVE-2025-32463.json index c51a74cdd8..07ec23526e 100644 --- a/2025/CVE-2025-32463.json +++ b/2025/CVE-2025-32463.json @@ -237,10 +237,10 @@ "description": "Local Privilege Escalation to Root via Sudo chroot in Linux", "fork": false, "created_at": "2025-07-02T07:20:20Z", - "updated_at": "2026-10-29T09:25:21Z", + "updated_at": "2026-11-06T18:32:52Z", "pushed_at": "2025-07-02T08:04:44Z", - "stargazers_count": 474, - "watchers_count": 474, + "stargazers_count": 473, + "watchers_count": 473, "has_discussions": false, "forks_count": 62, "allow_forking": true, @@ -263,7 +263,7 @@ ], "visibility": "public", "forks": 62, - "watchers": 474, + "watchers": 473, "score": 0, "subscribers_count": 3 }, diff --git a/2025/CVE-2025-41450.json b/2025/CVE-2025-41450.json index fe02c283c6..e0d348f98a 100644 --- a/2025/CVE-2025-41450.json +++ b/2025/CVE-2025-41450.json @@ -14,10 +14,10 @@ "description": "FROMAGEGATE — PoC + detection toolkit for Danfoss AK-SM 8xxA CVE-2025-41450\/-41451\/-41452 (code-of-the-day auth bypass, alarm-to-mail RCE, nginx config injection). For detection-signature development.", "fork": false, "created_at": "2026-10-13T04:22:37Z", - "updated_at": "2026-11-04T15:21:58Z", + "updated_at": "2026-11-06T15:10:37Z", "pushed_at": "2026-10-13T04:22:41Z", - "stargazers_count": 10, - "watchers_count": 10, + "stargazers_count": 11, + "watchers_count": 11, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 10, + "watchers": 11, "score": 0, "subscribers_count": 0 }, diff --git a/2025/CVE-2025-52915.json b/2025/CVE-2025-52915.json index 0fb6a43a55..7c16712cf4 100644 --- a/2025/CVE-2025-52915.json +++ b/2025/CVE-2025-52915.json @@ -14,10 +14,10 @@ "description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).", "fork": false, "created_at": "2023-12-05T14:52:11Z", - "updated_at": "2026-11-06T09:13:39Z", + "updated_at": "2026-11-06T16:52:47Z", "pushed_at": "2026-08-18T12:25:25Z", - "stargazers_count": 1006, - "watchers_count": 1006, + "stargazers_count": 1008, + "watchers_count": 1008, "has_discussions": false, "forks_count": 147, "allow_forking": true, @@ -39,7 +39,7 @@ ], "visibility": "public", "forks": 147, - "watchers": 1006, + "watchers": 1008, "score": 0, "subscribers_count": 22 } diff --git a/2025/CVE-2025-53392.json b/2025/CVE-2025-53392.json index 89a6976945..d4fce2b4b3 100644 --- a/2025/CVE-2025-53392.json +++ b/2025/CVE-2025-53392.json @@ -14,10 +14,10 @@ "description": "Authenticated Arbitrary File Read in pfSense 2.8.0 via Diagnostics Web Interface (CVE-2025-53392)", "fork": false, "created_at": "2025-06-27T18:11:36Z", - "updated_at": "2026-05-16T18:06:25Z", + "updated_at": "2026-11-06T13:52:13Z", "pushed_at": "2026-01-01T07:27:03Z", - "stargazers_count": 14, - "watchers_count": 14, + "stargazers_count": 13, + "watchers_count": 13, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 14, + "watchers": 13, "score": 0, "subscribers_count": 0 } diff --git a/2025/CVE-2025-55182.json b/2025/CVE-2025-55182.json index 4d2d543345..4c8cc25e46 100644 --- a/2025/CVE-2025-55182.json +++ b/2025/CVE-2025-55182.json @@ -1640,10 +1640,10 @@ "description": "Burp Suite extension to detect the Next.js \/ React Server Components (RSC) Remote Code Execution vulnerability (CVE-2025-55182 & CVE-2025-66478).", "fork": false, "created_at": "2025-12-04T19:41:49Z", - "updated_at": "2026-10-24T16:39:39Z", + "updated_at": "2026-11-06T17:49:01Z", "pushed_at": "2025-12-06T01:23:44Z", - "stargazers_count": 25, - "watchers_count": 25, + "stargazers_count": 26, + "watchers_count": 26, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -1654,7 +1654,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 25, + "watchers": 26, "score": 0, "subscribers_count": 0 }, @@ -2295,10 +2295,10 @@ "description": "Original Proof-of-Concepts for React2Shell CVE-2025-55182", "fork": false, "created_at": "2025-12-05T08:00:07Z", - "updated_at": "2026-11-05T13:26:30Z", + "updated_at": "2026-11-06T19:01:08Z", "pushed_at": "2025-12-05T08:56:15Z", - "stargazers_count": 1064, - "watchers_count": 1064, + "stargazers_count": 1065, + "watchers_count": 1065, "has_discussions": false, "forks_count": 112, "allow_forking": true, @@ -2312,7 +2312,7 @@ ], "visibility": "public", "forks": 112, - "watchers": 1064, + "watchers": 1065, "score": 0, "subscribers_count": 25 }, @@ -5404,10 +5404,10 @@ "description": "A complete framework for exploiting the vulnerability CVE-2025-55182", "fork": false, "created_at": "2025-12-07T11:30:44Z", - "updated_at": "2026-11-05T16:30:02Z", + "updated_at": "2026-11-06T15:57:37Z", "pushed_at": "2025-12-07T11:33:30Z", - "stargazers_count": 15, - "watchers_count": 15, + "stargazers_count": 16, + "watchers_count": 16, "has_discussions": false, "forks_count": 5, "allow_forking": true, @@ -5418,7 +5418,7 @@ "topics": [], "visibility": "public", "forks": 5, - "watchers": 15, + "watchers": 16, "score": 0, "subscribers_count": 0 }, diff --git a/2025/CVE-2025-6916.json b/2025/CVE-2025-6916.json index 966b3f6d34..3c3e14c578 100644 --- a/2025/CVE-2025-6916.json +++ b/2025/CVE-2025-6916.json @@ -19,7 +19,7 @@ "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 0, "score": 0, "subscribers_count": 1 diff --git a/2025/CVE-2025-9974.json b/2025/CVE-2025-9974.json index 06bc7e1371..df31a151f3 100644 --- a/2025/CVE-2025-9974.json +++ b/2025/CVE-2025-9974.json @@ -52,7 +52,7 @@ "stargazers_count": 14, "watchers_count": 14, "has_discussions": false, - "forks_count": 5, + "forks_count": 6, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,7 +60,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 5, + "forks": 6, "watchers": 14, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-100109.json b/2026/CVE-2026-100109.json index e0b60d34ff..b1edb4bcf7 100644 --- a/2026/CVE-2026-100109.json +++ b/2026/CVE-2026-100109.json @@ -11,10 +11,10 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/thiscitze\/cve-2026-100109-poc", - "description": "CVE-2026-100109 - Security For WooCommerce 1.0.10-1.0.16 unauthenticated admin creation (PoC by thiscitze)", + "description": "CVE-2026-100109 - Security For WooCommerce 1.0.10-1.0.16 unauthenticated admin creation (PoC + exploit by thiscitze)", "fork": false, "created_at": "2026-11-06T13:30:49Z", - "updated_at": "2026-11-06T13:31:00Z", + "updated_at": "2026-11-06T16:39:02Z", "pushed_at": "2026-11-06T13:30:56Z", "stargazers_count": 0, "watchers_count": 0, @@ -25,7 +25,13 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cve-2026-100109", + "exploit", + "poc", + "privilege-escalation", + "wordpress" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-101678.json b/2026/CVE-2026-101678.json new file mode 100644 index 0000000000..6fffc995cb --- /dev/null +++ b/2026/CVE-2026-101678.json @@ -0,0 +1,35 @@ +[ + { + "id": 1448602031, + "name": "mysql-connector-j-cve-2026-101678-repro", + "full_name": "ryanmurf\/mysql-connector-j-cve-2026-101678-repro", + "owner": { + "login": "ryanmurf", + "id": 4205055, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4205055?v=4", + "html_url": "https:\/\/github.com\/ryanmurf", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/ryanmurf\/mysql-connector-j-cve-2026-101678-repro", + "description": "Reproducer for CVE-2026-101678 (MySQL Connector\/J <= 26.7.0) - malicious server reporting huge result-set column count", + "fork": false, + "created_at": "2026-11-06T18:20:02Z", + "updated_at": "2026-11-06T18:20:13Z", + "pushed_at": "2026-11-06T18:20:09Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-101767.json b/2026/CVE-2026-101767.json index 0e5a11bab4..0f0a00ffed 100644 --- a/2026/CVE-2026-101767.json +++ b/2026/CVE-2026-101767.json @@ -80,10 +80,10 @@ "description": "Research notes on CVE-2026-101767 — unauthenticated vulnerability in Oracle Application Object Library (E-Business Suite)", "fork": false, "created_at": "2026-10-28T19:21:26Z", - "updated_at": "2026-11-04T15:18:10Z", + "updated_at": "2026-11-06T18:27:18Z", "pushed_at": "2026-10-28T19:26:21Z", - "stargazers_count": 8, - "watchers_count": 8, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -94,7 +94,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 8, + "watchers": 2, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-109618.json b/2026/CVE-2026-109618.json index 081167594c..6efa1a6f35 100644 --- a/2026/CVE-2026-109618.json +++ b/2026/CVE-2026-109618.json @@ -672,12 +672,12 @@ "description": "CVE-2026-109618\/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.", "fork": false, "created_at": "2026-10-21T07:55:16Z", - "updated_at": "2026-11-06T13:23:13Z", + "updated_at": "2026-11-06T17:15:36Z", "pushed_at": "2026-10-28T23:21:57Z", - "stargazers_count": 1944, - "watchers_count": 1944, + "stargazers_count": 1945, + "watchers_count": 1945, "has_discussions": false, - "forks_count": 652, + "forks_count": 653, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -700,8 +700,8 @@ "wordpress-security" ], "visibility": "public", - "forks": 652, - "watchers": 1944, + "forks": 653, + "watchers": 1945, "score": 0, "subscribers_count": 8 }, @@ -973,10 +973,10 @@ "description": "Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 \/ CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.", "fork": false, "created_at": "2026-10-21T08:31:43Z", - "updated_at": "2026-11-06T08:20:41Z", + "updated_at": "2026-11-06T16:53:23Z", "pushed_at": "2026-10-22T07:19:20Z", - "stargazers_count": 1074, - "watchers_count": 1074, + "stargazers_count": 1075, + "watchers_count": 1075, "has_discussions": false, "forks_count": 269, "allow_forking": true, @@ -987,7 +987,7 @@ "topics": [], "visibility": "public", "forks": 269, - "watchers": 1074, + "watchers": 1075, "score": 0, "subscribers_count": 41 }, @@ -2436,10 +2436,10 @@ "description": "A working PoC of the PHP2Shell exploit", "fork": false, "created_at": "2026-10-21T13:19:06Z", - "updated_at": "2026-10-24T19:55:24Z", + "updated_at": "2026-11-06T13:53:02Z", "pushed_at": "2026-10-21T13:21:53Z", - "stargazers_count": 8, - "watchers_count": 8, + "stargazers_count": 9, + "watchers_count": 9, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -2450,7 +2450,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 8, + "watchers": 9, "score": 0, "subscribers_count": 1 }, @@ -3434,7 +3434,7 @@ "stargazers_count": 75, "watchers_count": 75, "has_discussions": false, - "forks_count": 21, + "forks_count": 20, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -3459,7 +3459,7 @@ "security" ], "visibility": "public", - "forks": 21, + "forks": 20, "watchers": 75, "score": 0, "subscribers_count": 2 @@ -4688,10 +4688,10 @@ "description": "Unofficial mitigation patches for CVE-2026-109618\/109619 on EOL PHP 5.x", "fork": false, "created_at": "2026-10-21T16:38:33Z", - "updated_at": "2026-11-02T03:45:00Z", + "updated_at": "2026-11-06T14:24:23Z", "pushed_at": "2026-10-26T20:46:58Z", - "stargazers_count": 4, - "watchers_count": 4, + "stargazers_count": 5, + "watchers_count": 5, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -4702,7 +4702,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 4, + "watchers": 5, "score": 0, "subscribers_count": 1 }, @@ -6618,10 +6618,10 @@ "description": "Safe, reversible interim hardening for critical PHP vulnerabilities while you wait for patched builds. One opt-in module per advisory, dry run by default, auto rollback, one-command revert. Current: CVE-2026-109618 \/ CVE-2026-109619 (Oct 2026). Not a fix: update PHP.", "fork": false, "created_at": "2026-10-21T20:25:07Z", - "updated_at": "2026-10-21T21:25:42Z", + "updated_at": "2026-11-06T14:12:10Z", "pushed_at": "2026-10-21T21:18:20Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -6632,7 +6632,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -7633,10 +7633,10 @@ "description": "CVE-2026-109618 \/ CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.", "fork": false, "created_at": "2026-10-21T22:53:01Z", - "updated_at": "2026-11-06T02:48:42Z", + "updated_at": "2026-11-06T14:52:30Z", "pushed_at": "2026-10-30T16:04:28Z", - "stargazers_count": 284, - "watchers_count": 284, + "stargazers_count": 285, + "watchers_count": 285, "has_discussions": false, "forks_count": 78, "allow_forking": true, @@ -7668,7 +7668,7 @@ ], "visibility": "public", "forks": 78, - "watchers": 284, + "watchers": 285, "score": 0, "subscribers_count": 2 }, @@ -8235,8 +8235,8 @@ "description": "Patches and Windows build scripts for PHP 5.6-7.4 fixing CVE-2026-109618 \/ CVE-2026-109619", "fork": false, "created_at": "2026-10-22T01:08:01Z", - "updated_at": "2026-11-04T06:29:23Z", - "pushed_at": "2026-11-02T15:55:27Z", + "updated_at": "2026-11-06T18:53:18Z", + "pushed_at": "2026-11-06T18:53:14Z", "stargazers_count": 4, "watchers_count": 4, "has_discussions": false, @@ -9124,10 +9124,10 @@ "description": "Detect & investigate the PHP session.upload_progress RCE (CVE-2026-109618 \/ CVE-2026-109619, php2shell): non-destructive remote vulnerability scanner + read-only server forensics for webshells, poisoned sessions & persistence, even after PHP was removed. Zero-dependency Python. | php2shell 漏洞检测与入侵取证工具", "fork": false, "created_at": "2026-10-22T03:28:52Z", - "updated_at": "2026-10-24T22:27:33Z", + "updated_at": "2026-11-06T17:36:56Z", "pushed_at": "2026-10-22T07:01:43Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -9159,7 +9159,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 }, @@ -9413,7 +9413,7 @@ "stargazers_count": 988, "watchers_count": 988, "has_discussions": false, - "forks_count": 146, + "forks_count": 145, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -9421,7 +9421,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 146, + "forks": 145, "watchers": 988, "score": 0, "subscribers_count": 11 @@ -18661,10 +18661,10 @@ "description": "PHP2Shell proof of concept for CVE-2026-109618 and CVE-2026-109619, with Docker labs and build-specific profiles for security research.", "fork": false, "created_at": "2026-10-23T09:59:01Z", - "updated_at": "2026-10-26T18:13:01Z", + "updated_at": "2026-11-06T19:33:24Z", "pushed_at": "2026-10-23T10:10:06Z", - "stargazers_count": 7, - "watchers_count": 7, + "stargazers_count": 8, + "watchers_count": 8, "has_discussions": false, "forks_count": 4, "allow_forking": true, @@ -18682,7 +18682,7 @@ ], "visibility": "public", "forks": 4, - "watchers": 7, + "watchers": 8, "score": 0, "subscribers_count": 0 }, @@ -20627,10 +20627,10 @@ "description": "php2shell-detector - local + network detections for PHP2Shell (CVE-2026-109618 \/ CVE-2026-109619) by IONSEC. Python CLI: host posture, access-log fingerprints, binary drift; plus Sigma, Suricata, ModSecurity rules and curated references.", "fork": false, "created_at": "2026-10-23T18:49:51Z", - "updated_at": "2026-11-01T15:23:56Z", + "updated_at": "2026-11-06T18:13:21Z", "pushed_at": "2026-11-01T15:23:52Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -20641,7 +20641,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -21787,8 +21787,8 @@ "description": "Detection and response package for php2shell (CVE-2026-109618 \/ CVE-2026-109619): Suricata, Zeek, YARA, Sigma, ModSecurity rules, hunting queries, SOC triage, patch matrix. No exploit code.", "fork": false, "created_at": "2026-10-24T13:28:54Z", - "updated_at": "2026-11-05T10:56:18Z", - "pushed_at": "2026-11-05T10:56:14Z", + "updated_at": "2026-11-06T14:56:38Z", + "pushed_at": "2026-11-06T14:56:33Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -23353,8 +23353,8 @@ "description": "Bigfix PHP Vulnerability Scanner Content (CVE-2026-109618, CVE-2026-109619) for Windows, Linux and Mac.", "fork": false, "created_at": "2026-10-25T19:00:03Z", - "updated_at": "2026-11-05T18:29:33Z", - "pushed_at": "2026-11-05T18:29:27Z", + "updated_at": "2026-11-06T17:07:50Z", + "pushed_at": "2026-11-06T17:07:46Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -24384,10 +24384,10 @@ "description": "Unauthenticated RCE in PHP via session.upload_progress use-after-free (CVE-2026-109618 \/ CVE-2026-109619)", "fork": false, "created_at": "2026-10-26T12:43:29Z", - "updated_at": "2026-11-02T21:26:19Z", + "updated_at": "2026-11-06T18:27:18Z", "pushed_at": "2026-10-26T12:49:23Z", - "stargazers_count": 9, - "watchers_count": 9, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -24398,7 +24398,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 9, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -26405,8 +26405,8 @@ "description": "php2shell-CVE-2026-109618\/109619 chain", "fork": false, "created_at": "2026-10-31T08:11:56Z", - "updated_at": "2026-11-06T12:58:08Z", - "pushed_at": "2026-11-06T12:58:04Z", + "updated_at": "2026-11-06T14:16:33Z", + "pushed_at": "2026-11-06T14:16:29Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -27781,7 +27781,7 @@ "fork": false, "created_at": "2026-11-06T05:48:44Z", "updated_at": "2026-11-06T06:27:44Z", - "pushed_at": "2026-11-06T06:28:16Z", + "pushed_at": "2026-11-06T16:24:00Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -27812,5 +27812,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1448560740, + "name": "php2shell-lab", + "full_name": "lutfizp\/php2shell-lab", + "owner": { + "login": "lutfizp", + "id": 75983574, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/75983574?v=4", + "html_url": "https:\/\/github.com\/lutfizp", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/lutfizp\/php2shell-lab", + "description": "PHP session.upload_progress CVE-2026-109618 lab PoC and research notes", + "fork": false, + "created_at": "2026-11-06T17:37:38Z", + "updated_at": "2026-11-06T17:37:48Z", + "pushed_at": "2026-11-06T17:37:44Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-111497.json b/2026/CVE-2026-111497.json index cb2177b4ce..7c47162e14 100644 --- a/2026/CVE-2026-111497.json +++ b/2026/CVE-2026-111497.json @@ -3136,12 +3136,12 @@ "description": "Säkerhetsvägledning för GIS-miljöer om Broccoli2Shell (CVE-2026-111497).", "fork": false, "created_at": "2026-11-04T18:19:50Z", - "updated_at": "2026-11-06T13:47:28Z", - "pushed_at": "2026-11-06T13:47:24Z", + "updated_at": "2026-11-06T15:40:02Z", + "pushed_at": "2026-11-06T15:39:58Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -3157,7 +3157,7 @@ "qgis" ], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 0, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-113615.json b/2026/CVE-2026-113615.json new file mode 100644 index 0000000000..170547ae17 --- /dev/null +++ b/2026/CVE-2026-113615.json @@ -0,0 +1,42 @@ +[ + { + "id": 1448471942, + "name": "cve-2026-113615-poc", + "full_name": "thiscitze\/cve-2026-113615-poc", + "owner": { + "login": "thiscitze", + "id": 277468862, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/277468862?v=4", + "html_url": "https:\/\/github.com\/thiscitze", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/thiscitze\/cve-2026-113615-poc", + "description": "CVE-2026-113615 - GS JWT <= 1.0.0 unauthenticated SQLi to administrator JWT (PoC + exploit by thiscitze)", + "fork": false, + "created_at": "2026-11-06T16:11:32Z", + "updated_at": "2026-11-06T16:11:44Z", + "pushed_at": "2026-11-06T16:11:38Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve-2026-113615", + "exploit", + "poc", + "privilege-escalation", + "sql-injection", + "wordpress" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-114612.json b/2026/CVE-2026-114612.json index 6544aa45b2..3d5a01be77 100644 --- a/2026/CVE-2026-114612.json +++ b/2026/CVE-2026-114612.json @@ -14,8 +14,8 @@ "description": "Lab, privilege-escalation check and detection for LiteLLM CVE-2026-114612 (internal user to proxy admin).", "fork": false, "created_at": "2026-11-05T14:22:11Z", - "updated_at": "2026-11-06T08:03:17Z", - "pushed_at": "2026-11-06T08:03:15Z", + "updated_at": "2026-11-06T17:14:34Z", + "pushed_at": "2026-11-06T17:14:30Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-114630.json b/2026/CVE-2026-114630.json index c4f114f409..4fc9aefb1f 100644 --- a/2026/CVE-2026-114630.json +++ b/2026/CVE-2026-114630.json @@ -11,10 +11,10 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/thiscitze\/cve-2026-114630-poc", - "description": "CVE-2026-114630 - ELEX HelpDesk <= 3.3.8 unauthenticated arbitrary file deletion (PoC by thiscitze)", + "description": "CVE-2026-114630 - ELEX HelpDesk <= 3.3.8 unauthenticated arbitrary file deletion (PoC + exploit by thiscitze)", "fork": false, "created_at": "2026-11-06T13:30:41Z", - "updated_at": "2026-11-06T13:30:52Z", + "updated_at": "2026-11-06T16:39:04Z", "pushed_at": "2026-11-06T13:30:47Z", "stargazers_count": 0, "watchers_count": 0, @@ -25,7 +25,13 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "arbitrary-file-delete", + "cve-2026-114630", + "exploit", + "poc", + "wordpress" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-116606.json b/2026/CVE-2026-116606.json index 17e820ee77..e68ee62049 100644 --- a/2026/CVE-2026-116606.json +++ b/2026/CVE-2026-116606.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2026-11-03T19:20:25Z", - "updated_at": "2026-11-05T21:19:51Z", + "updated_at": "2026-11-06T16:07:09Z", "pushed_at": "2026-11-03T19:26:40Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 2, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-116779.json b/2026/CVE-2026-116779.json index 14539e2ffa..376eadefaa 100644 --- a/2026/CVE-2026-116779.json +++ b/2026/CVE-2026-116779.json @@ -31,5 +31,38 @@ "watchers": 1, "score": 0, "subscribers_count": 0 + }, + { + "id": 1448552296, + "name": "freeswitch-cve-2026-116779-POC", + "full_name": "hackzuoji\/freeswitch-cve-2026-116779-POC", + "owner": { + "login": "hackzuoji", + "id": 82810307, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/82810307?v=4", + "html_url": "https:\/\/github.com\/hackzuoji", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/hackzuoji\/freeswitch-cve-2026-116779-POC", + "description": null, + "fork": false, + "created_at": "2026-11-06T17:29:28Z", + "updated_at": "2026-11-06T17:33:20Z", + "pushed_at": "2026-11-06T17:32:09Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-118423.json b/2026/CVE-2026-118423.json index 8d5fb0cbe5..291c980e24 100644 --- a/2026/CVE-2026-118423.json +++ b/2026/CVE-2026-118423.json @@ -11,10 +11,10 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/thiscitze\/cve-2026-118423-poc", - "description": "CVE-2026-118423 - WP Libre Form <= 1.5.0.1 unauthenticated upload to RCE (PoC by thiscitze)", + "description": "CVE-2026-118423 - WP Libre Form <= 1.5.0.1 unauthenticated upload to RCE (PoC + exploit by thiscitze)", "fork": false, "created_at": "2026-11-06T13:30:33Z", - "updated_at": "2026-11-06T13:38:42Z", + "updated_at": "2026-11-06T16:39:01Z", "pushed_at": "2026-11-06T13:38:38Z", "stargazers_count": 0, "watchers_count": 0, @@ -25,6 +25,79 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", + "topics": [ + "cve-2026-118423", + "exploit", + "file-upload", + "poc", + "rce", + "wordpress" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1448435344, + "name": "CVE-2026-118423", + "full_name": "im0xfay\/CVE-2026-118423", + "owner": { + "login": "im0xfay", + "id": 181461, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/181461?v=4", + "html_url": "https:\/\/github.com\/im0xfay", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/im0xfay\/CVE-2026-118423", + "description": "CVE-2026-118423 — WP Libre Form <= 1.5.0.1 unauthenticated file upload to RCE (PoC, lab-verified)", + "fork": false, + "created_at": "2026-11-06T15:36:39Z", + "updated_at": "2026-11-06T16:07:02Z", + "pushed_at": "2026-11-06T16:06:58Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1448604521, + "name": "CVE-2026-118423-WP-Libre-Form", + "full_name": "Sable-Research\/CVE-2026-118423-WP-Libre-Form", + "owner": { + "login": "Sable-Research", + "id": 347979164, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/347979164?v=4", + "html_url": "https:\/\/github.com\/Sable-Research", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Sable-Research\/CVE-2026-118423-WP-Libre-Form", + "description": "Sable Research — Analysis of CVE-2026-118423: Unauthenticated Arbitrary File Upload to RCE in WP Libre Form (≤ 1.5.0.1)", + "fork": false, + "created_at": "2026-11-06T18:22:26Z", + "updated_at": "2026-11-06T18:25:13Z", + "pushed_at": "2026-11-06T18:25:06Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", "topics": [], "visibility": "public", "forks": 0, diff --git a/2026/CVE-2026-119977.json b/2026/CVE-2026-119977.json index acd9fbb555..9cca942495 100644 --- a/2026/CVE-2026-119977.json +++ b/2026/CVE-2026-119977.json @@ -1,4 +1,58 @@ [ + { + "id": 428221259, + "name": "Bash_WP-CLI_Update", + "full_name": "paulmann\/Bash_WP-CLI_Update", + "owner": { + "login": "paulmann", + "id": 2838788, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/2838788?v=4", + "html_url": "https:\/\/github.com\/paulmann", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/paulmann\/Bash_WP-CLI_Update", + "description": "Bash + WP-CLI maintenance for fleets of WordPress sites: core, plugin and theme updates, backups with a restore path, JSON reports, CVE-2026-119977 assessment and hardening.", + "fork": false, + "created_at": "2021-11-15T10:38:16Z", + "updated_at": "2026-11-06T17:44:13Z", + "pushed_at": "2026-11-06T17:50:12Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "automation", + "backup", + "bash", + "cli", + "database-optimization", + "devops", + "linux", + "restore", + "shell-script", + "sysadmin", + "updates", + "wordpress", + "wordpress-admin", + "wordpress-cli", + "wordpress-maintenance", + "wordpress-plugin", + "wordpress-theme", + "wordpress-updater", + "wordpress-updates", + "wp-cli" + ], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 + }, { "id": 1445148242, "name": "wordpress-core-scanner", @@ -57,12 +111,12 @@ "description": null, "fork": false, "created_at": "2026-11-04T10:12:28Z", - "updated_at": "2026-11-05T11:09:59Z", + "updated_at": "2026-11-06T19:47:10Z", "pushed_at": "2026-11-04T10:21:43Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, - "forks_count": 1, + "forks_count": 2, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -70,8 +124,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 1, - "watchers": 3, + "forks": 2, + "watchers": 4, "score": 0, "subscribers_count": 0 }, @@ -90,10 +144,10 @@ "description": null, "fork": false, "created_at": "2026-11-04T18:16:40Z", - "updated_at": "2026-11-06T10:23:56Z", + "updated_at": "2026-11-06T18:27:18Z", "pushed_at": "2026-11-04T19:39:00Z", - "stargazers_count": 17, - "watchers_count": 17, + "stargazers_count": 6, + "watchers_count": 6, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -104,7 +158,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 17, + "watchers": 6, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-120209.json b/2026/CVE-2026-120209.json index 433bc6ee22..1417200dbb 100644 --- a/2026/CVE-2026-120209.json +++ b/2026/CVE-2026-120209.json @@ -14,10 +14,10 @@ "description": " Doctreat Core <= 1.6.8 - Unauthenticated Privilege Escalation | RCE", "fork": false, "created_at": "2026-11-06T11:23:17Z", - "updated_at": "2026-11-06T11:38:02Z", + "updated_at": "2026-11-06T16:11:48Z", "pushed_at": "2026-11-06T11:32:42Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-121720.json b/2026/CVE-2026-121720.json index 95e436e895..33a6220d86 100644 --- a/2026/CVE-2026-121720.json +++ b/2026/CVE-2026-121720.json @@ -14,8 +14,8 @@ "description": "PoC for an OpenVPN Windows Interactive Service privilege bypass via a user-selected OpenSSL provider.", "fork": false, "created_at": "2026-10-31T14:31:10Z", - "updated_at": "2026-11-06T13:11:36Z", - "pushed_at": "2026-11-06T12:59:57Z", + "updated_at": "2026-11-06T18:23:38Z", + "pushed_at": "2026-11-06T18:23:33Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2026/CVE-2026-123158.json b/2026/CVE-2026-123158.json index 74b43e1b31..5d147ce4dc 100644 --- a/2026/CVE-2026-123158.json +++ b/2026/CVE-2026-123158.json @@ -47,8 +47,8 @@ "description": "CVE-2026-123158", "fork": false, "created_at": "2026-11-05T20:13:50Z", - "updated_at": "2026-11-06T01:39:31Z", - "pushed_at": "2026-11-05T20:18:28Z", + "updated_at": "2026-11-06T16:03:36Z", + "pushed_at": "2026-11-06T16:03:32Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -197,10 +197,10 @@ "description": "CVE-2026-123158 SSHole — OpenSSH authentication bypass via musl crypt() overflow on Alpine Linux (Exploit PoC)", "fork": false, "created_at": "2026-11-05T22:51:12Z", - "updated_at": "2026-11-06T13:41:29Z", + "updated_at": "2026-11-06T18:20:45Z", "pushed_at": "2026-11-06T05:48:20Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -211,7 +211,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 3, + "watchers": 4, "score": 0, "subscribers_count": 0 }, @@ -371,10 +371,10 @@ "description": "Exploit para explotar la vulnerabilidad CVE-2026-123158 (conocida como sshole).", "fork": false, "created_at": "2026-11-06T08:01:34Z", - "updated_at": "2026-11-06T10:46:06Z", - "pushed_at": "2026-11-06T08:03:03Z", - "stargazers_count": 1, - "watchers_count": 1, + "updated_at": "2026-11-06T16:18:39Z", + "pushed_at": "2026-11-06T16:16:57Z", + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -385,7 +385,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, @@ -541,5 +541,140 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1448387121, + "name": "sshole_scanner-CVE-2026-123158", + "full_name": "CriticalWombat\/sshole_scanner-CVE-2026-123158", + "owner": { + "login": "CriticalWombat", + "id": 94728168, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/94728168?v=4", + "html_url": "https:\/\/github.com\/CriticalWombat", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/CriticalWombat\/sshole_scanner-CVE-2026-123158", + "description": "A scanner for *sshole SSH vulnerability (CVE-2026-123158)", + "fork": false, + "created_at": "2026-11-06T14:52:00Z", + "updated_at": "2026-11-06T15:02:56Z", + "pushed_at": "2026-11-06T15:02:52Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1448462968, + "name": "openssh-musl-enterprise--hardening-cve-2026-123158", + "full_name": "mc493\/openssh-musl-enterprise--hardening-cve-2026-123158", + "owner": { + "login": "mc493", + "id": 168852847, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/168852847?v=4", + "html_url": "https:\/\/github.com\/mc493", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/mc493\/openssh-musl-enterprise--hardening-cve-2026-123158", + "description": "openssh-musl-enterprise-hardening (CVE-2026-123158)", + "fork": false, + "created_at": "2026-11-06T16:03:01Z", + "updated_at": "2026-11-06T19:34:44Z", + "pushed_at": "2026-11-06T19:34:40Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve-2026-123158", + "openssh" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1448554886, + "name": "CVE-2026-123158_SSHRole_PoC", + "full_name": "crash00xd\/CVE-2026-123158_SSHRole_PoC", + "owner": { + "login": "crash00xd", + "id": 213133982, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/213133982?v=4", + "html_url": "https:\/\/github.com\/crash00xd", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/crash00xd\/CVE-2026-123158_SSHRole_PoC", + "description": "Prova de conceito para exploração da vulnerabilidade CVE-2026-123158.", + "fork": false, + "created_at": "2026-11-06T17:32:09Z", + "updated_at": "2026-11-06T17:51:47Z", + "pushed_at": "2026-11-06T17:51:42Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1448587734, + "name": "CVE-2026-123158", + "full_name": "halilkirazkaya\/CVE-2026-123158", + "owner": { + "login": "halilkirazkaya", + "id": 90972683, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90972683?v=4", + "html_url": "https:\/\/github.com\/halilkirazkaya", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/halilkirazkaya\/CVE-2026-123158", + "description": "sshole (CVE-2026-123158): OpenSSH password bypass on alpine Linux", + "fork": false, + "created_at": "2026-11-06T18:05:42Z", + "updated_at": "2026-11-06T18:39:18Z", + "pushed_at": "2026-11-06T18:39:06Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-19971.json b/2026/CVE-2026-19971.json index 25659c15c6..5986e156d9 100644 --- a/2026/CVE-2026-19971.json +++ b/2026/CVE-2026-19971.json @@ -14,8 +14,8 @@ "description": "LB-LINK WR1210M (CVE-2026-19971) 未授权配置泄露漏洞与访客网络扩展攻击链分析", "fork": false, "created_at": "2026-11-01T14:57:04Z", - "updated_at": "2026-11-01T15:37:39Z", - "pushed_at": "2026-11-01T15:37:36Z", + "updated_at": "2026-11-06T14:52:44Z", + "pushed_at": "2026-11-06T14:52:40Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-34990.json b/2026/CVE-2026-34990.json index 01203eead9..01d74956e0 100644 --- a/2026/CVE-2026-34990.json +++ b/2026/CVE-2026-34990.json @@ -179,10 +179,10 @@ "description": "CVE-2026-34990 minimal PoC. CUPS <= 2.4.16 local privesc.", "fork": false, "created_at": "2026-09-27T19:41:06Z", - "updated_at": "2026-11-05T14:19:41Z", + "updated_at": "2026-11-06T18:27:13Z", "pushed_at": "2026-09-27T19:49:16Z", - "stargazers_count": 16, - "watchers_count": 16, + "stargazers_count": 14, + "watchers_count": 14, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -193,7 +193,7 @@ "topics": [], "visibility": "public", "forks": 3, - "watchers": 16, + "watchers": 14, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-3609.json b/2026/CVE-2026-3609.json index ee212a63d1..dbb0e66108 100644 --- a/2026/CVE-2026-3609.json +++ b/2026/CVE-2026-3609.json @@ -14,10 +14,10 @@ "description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).", "fork": false, "created_at": "2023-12-05T14:52:11Z", - "updated_at": "2026-11-06T13:33:19Z", + "updated_at": "2026-11-06T16:52:47Z", "pushed_at": "2026-08-18T12:25:25Z", - "stargazers_count": 1007, - "watchers_count": 1007, + "stargazers_count": 1008, + "watchers_count": 1008, "has_discussions": false, "forks_count": 147, "allow_forking": true, @@ -39,7 +39,7 @@ ], "visibility": "public", "forks": 147, - "watchers": 1007, + "watchers": 1008, "score": 0, "subscribers_count": 22 }, diff --git a/2026/CVE-2026-39987.json b/2026/CVE-2026-39987.json index 9d49e67b55..1165463456 100644 --- a/2026/CVE-2026-39987.json +++ b/2026/CVE-2026-39987.json @@ -1006,10 +1006,10 @@ "description": "HTB Cohort writeup -- SSRF, Marimo CVE-2026-39987, PackageKit CVE-2026-41651", "fork": false, "created_at": "2026-11-04T00:45:03Z", - "updated_at": "2026-11-05T14:26:10Z", + "updated_at": "2026-11-06T15:18:48Z", "pushed_at": "2026-11-04T01:14:47Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -1020,7 +1020,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-41651.json b/2026/CVE-2026-41651.json index 42dc1254f0..b1b7a9a18c 100644 --- a/2026/CVE-2026-41651.json +++ b/2026/CVE-2026-41651.json @@ -361,5 +361,44 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1447645442, + "name": "cve-2026-41651-poc", + "full_name": "thiscitze\/cve-2026-41651-poc", + "owner": { + "login": "thiscitze", + "id": 277468862, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/277468862?v=4", + "html_url": "https:\/\/github.com\/thiscitze", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/thiscitze\/cve-2026-41651-poc", + "description": "CVE-2026-41651 - PackageKit 1.0.2-1.3.4 TOCTOU local privilege escalation, independent C implementation (PoC + exploit by thiscitze)", + "fork": false, + "created_at": "2026-11-06T00:06:51Z", + "updated_at": "2026-11-06T16:39:16Z", + "pushed_at": "2026-11-06T00:11:00Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve-2026-41651", + "exploit", + "linux", + "packagekit", + "privilege-escalation" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-42980.json b/2026/CVE-2026-42980.json index 141e7522f2..47a08e234e 100644 --- a/2026/CVE-2026-42980.json +++ b/2026/CVE-2026-42980.json @@ -14,10 +14,10 @@ "description": "CVE-2026-42980 PUBLIC EXPLOIT + RESEARCH", "fork": false, "created_at": "2026-07-07T03:52:26Z", - "updated_at": "2026-11-05T00:47:48Z", + "updated_at": "2026-11-06T14:52:30Z", "pushed_at": "2026-07-07T03:53:22Z", - "stargazers_count": 147, - "watchers_count": 147, + "stargazers_count": 148, + "watchers_count": 148, "has_discussions": false, "forks_count": 40, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 40, - "watchers": 147, + "watchers": 148, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-43284.json b/2026/CVE-2026-43284.json index b5676dd251..746d6f93c5 100644 --- a/2026/CVE-2026-43284.json +++ b/2026/CVE-2026-43284.json @@ -1524,8 +1524,8 @@ "description": "Post-root DirtyFrag (CVE-2026-43284) mitigation for Galaxy S25 — a build-gated KernelSU kernel module that privatizes ESP receive buffers. Verified on SM-S931Z \/ DZIF only.", "fork": false, "created_at": "2026-11-06T11:43:07Z", - "updated_at": "2026-11-06T13:37:48Z", - "pushed_at": "2026-11-06T13:37:43Z", + "updated_at": "2026-11-06T13:56:54Z", + "pushed_at": "2026-11-06T13:56:49Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-43499.json b/2026/CVE-2026-43499.json index d008ddde41..8495ee6bee 100644 --- a/2026/CVE-2026-43499.json +++ b/2026/CVE-2026-43499.json @@ -361,10 +361,10 @@ "description": "GhostLock (CVE-2026-43499) kernel exploit for Android devices with locked bootloader", "fork": false, "created_at": "2026-07-12T16:05:24Z", - "updated_at": "2026-11-06T13:30:59Z", + "updated_at": "2026-11-06T16:35:26Z", "pushed_at": "2026-09-17T05:30:59Z", - "stargazers_count": 449, - "watchers_count": 449, + "stargazers_count": 451, + "watchers_count": 451, "has_discussions": false, "forks_count": 96, "allow_forking": true, @@ -382,7 +382,7 @@ ], "visibility": "public", "forks": 96, - "watchers": 449, + "watchers": 451, "score": 0, "subscribers_count": 15 }, @@ -995,10 +995,10 @@ "description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499", "fork": false, "created_at": "2026-07-17T14:24:08Z", - "updated_at": "2026-11-06T13:23:03Z", + "updated_at": "2026-11-06T17:12:50Z", "pushed_at": "2026-09-03T03:21:42Z", - "stargazers_count": 1589, - "watchers_count": 1589, + "stargazers_count": 1592, + "watchers_count": 1592, "has_discussions": false, "forks_count": 316, "allow_forking": true, @@ -1009,7 +1009,7 @@ "topics": [], "visibility": "public", "forks": 316, - "watchers": 1589, + "watchers": 1592, "score": 0, "subscribers_count": 47 }, @@ -1577,10 +1577,10 @@ "description": "基于内核漏洞CVE-2026-43499的本地提权适配，集成嵌入式 KernelSU.CVE-2026-43499+KernelSU越狱模式 ", "fork": false, "created_at": "2026-07-26T12:39:00Z", - "updated_at": "2026-11-06T13:36:16Z", + "updated_at": "2026-11-06T18:50:45Z", "pushed_at": "2026-07-26T14:04:57Z", - "stargazers_count": 496, - "watchers_count": 496, + "stargazers_count": 510, + "watchers_count": 510, "has_discussions": false, "forks_count": 89, "allow_forking": true, @@ -1591,7 +1591,7 @@ "topics": [], "visibility": "public", "forks": 89, - "watchers": 496, + "watchers": 510, "score": 0, "subscribers_count": 1 }, @@ -1676,12 +1676,12 @@ "description": "GhostLock One-Tap Execution App (CVE-2026-43499)", "fork": false, "created_at": "2026-07-29T05:04:25Z", - "updated_at": "2026-11-06T13:39:30Z", + "updated_at": "2026-11-06T19:33:31Z", "pushed_at": "2026-11-06T05:01:14Z", - "stargazers_count": 2711, - "watchers_count": 2711, + "stargazers_count": 2727, + "watchers_count": 2727, "has_discussions": true, - "forks_count": 646, + "forks_count": 648, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1689,8 +1689,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 646, - "watchers": 2711, + "forks": 648, + "watchers": 2727, "score": 0, "subscribers_count": 49 }, @@ -2788,12 +2788,12 @@ "description": "KSuRoot 4.0.0 — 基于 CVE-2026-43499(GhostLock) 的一键 KernelSU 提权工具。多内核支持：6.1 \/ 6.6 \/ 6.12 三族各有专属基线，另有 50 档上游内核适配；多机型动态库内置：122 条厂商载荷（vivo\/iQOO、小米、三星、Pixel 等）离线可用、按机型+内核+commit 三级匹配；新增「载荷构建」用本机 boot.img 解析偏移打出适配本机的载荷（通用 \/ vivo 专用）；免 ADB。Mod by hmascs", "fork": false, "created_at": "2026-08-14T10:51:50Z", - "updated_at": "2026-11-06T13:31:01Z", + "updated_at": "2026-11-06T15:41:18Z", "pushed_at": "2026-10-02T08:20:25Z", - "stargazers_count": 281, - "watchers_count": 281, + "stargazers_count": 282, + "watchers_count": 282, "has_discussions": false, - "forks_count": 36, + "forks_count": 39, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -2801,8 +2801,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 36, - "watchers": 281, + "forks": 39, + "watchers": 282, "score": 0, "subscribers_count": 1 }, @@ -2920,10 +2920,10 @@ "description": "Using CVE-2026-43499 to root your Galaxy S24 Series(SM-S92X0 ,(China \/ Hong Kong SAR \/ Taiwan))", "fork": false, "created_at": "2026-08-16T14:37:06Z", - "updated_at": "2026-11-06T07:34:09Z", + "updated_at": "2026-11-06T15:44:02Z", "pushed_at": "2026-11-05T17:01:35Z", - "stargazers_count": 110, - "watchers_count": 110, + "stargazers_count": 111, + "watchers_count": 111, "has_discussions": false, "forks_count": 13, "allow_forking": true, @@ -2949,7 +2949,7 @@ ], "visibility": "public", "forks": 13, - "watchers": 110, + "watchers": 111, "score": 0, "subscribers_count": 1 }, @@ -3270,7 +3270,7 @@ "stargazers_count": 32, "watchers_count": 32, "has_discussions": false, - "forks_count": 7, + "forks_count": 8, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -3278,7 +3278,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 7, + "forks": 8, "watchers": 32, "score": 0, "subscribers_count": 0 @@ -5008,10 +5008,10 @@ "description": "Porting CVE-2026-43499 (GhostLock) to the Realme GT 7T (RMX5085): device profile from the phone's own boot.img, KernelSU late-load, one-tap root via Anchor, and the four calibrations that made it work", "fork": false, "created_at": "2026-10-06T00:57:32Z", - "updated_at": "2026-10-20T05:06:44Z", + "updated_at": "2026-11-06T13:54:35Z", "pushed_at": "2026-10-06T00:57:37Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -5031,7 +5031,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, @@ -5182,10 +5182,10 @@ "description": "GhostLock (CVE-2026-43499) + KernelSU late-load port for Honor 90 REA-NX9, MagicOS 9.0.0.211 \/ Android 15 (pure-GKI 5.10.236). Fork of GhostLock-H80GT.", "fork": false, "created_at": "2026-10-09T18:06:28Z", - "updated_at": "2026-10-23T21:47:27Z", + "updated_at": "2026-11-06T14:29:45Z", "pushed_at": "2026-10-09T18:08:38Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -5196,7 +5196,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 }, @@ -5533,8 +5533,8 @@ "description": "OPPO A96 (PFUM10) post-relock toolkit: CVE-2026-43499 chain -> real BakaSU driver, ocsk kernel defense probes vs OPPO OPLUS_ROOT_CHECK, boot restore scripts", "fork": false, "created_at": "2026-10-19T10:20:17Z", - "updated_at": "2026-10-29T22:40:02Z", - "pushed_at": "2026-10-29T22:39:57Z", + "updated_at": "2026-11-06T19:50:17Z", + "pushed_at": "2026-11-06T19:50:12Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -5665,8 +5665,8 @@ "description": "在 AI 帮助下利用 ghostlock 提权 oppo a5 pbbt30 至 root", "fork": false, "created_at": "2026-10-23T06:09:52Z", - "updated_at": "2026-10-28T18:03:14Z", - "pushed_at": "2026-10-28T12:07:14Z", + "updated_at": "2026-11-06T15:50:27Z", + "pushed_at": "2026-11-06T15:50:21Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -5870,10 +5870,10 @@ "description": "GhostLock (CVE-2026-43499) root for Sony Xperia 1 VI — locked bootloader, adb only, per-boot KernelSU", "fork": false, "created_at": "2026-10-26T19:07:09Z", - "updated_at": "2026-11-06T06:16:05Z", + "updated_at": "2026-11-06T17:32:39Z", "pushed_at": "2026-11-06T06:16:01Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -5884,7 +5884,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 3, + "watchers": 4, "score": 0, "subscribers_count": 0 }, @@ -6101,10 +6101,10 @@ "description": "CVE-2026-43499 (IonStack\/GhostLock) port for Samsung Galaxy S22 SM-S901E (r0q) on S901EXXSAEXF8 — verified uid=0", "fork": false, "created_at": "2026-11-02T05:50:42Z", - "updated_at": "2026-11-02T08:20:12Z", + "updated_at": "2026-11-06T18:15:48Z", "pushed_at": "2026-11-02T08:20:09Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -6115,7 +6115,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-47301.json b/2026/CVE-2026-47301.json index bc3a8e68ba..25b334586b 100644 --- a/2026/CVE-2026-47301.json +++ b/2026/CVE-2026-47301.json @@ -14,10 +14,10 @@ "description": "Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-write path traversal, certificate verification bypass, and DLL hijacking to achieve SYSTEM-level code execution.", "fork": false, "created_at": "2026-08-03T15:29:22Z", - "updated_at": "2026-10-01T14:29:55Z", + "updated_at": "2026-11-06T14:13:06Z", "pushed_at": "2026-08-16T22:34:33Z", - "stargazers_count": 108, - "watchers_count": 108, + "stargazers_count": 109, + "watchers_count": 109, "has_discussions": false, "forks_count": 16, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 16, - "watchers": 108, + "watchers": 109, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-48356.json b/2026/CVE-2026-48356.json index 12e8f60600..1b61dbaa6c 100644 --- a/2026/CVE-2026-48356.json +++ b/2026/CVE-2026-48356.json @@ -70,5 +70,48 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1448615881, + "name": "cve-2026-48356-magento-file-upload-rce", + "full_name": "Ghost-Bx1\/cve-2026-48356-magento-file-upload-rce", + "owner": { + "login": "Ghost-Bx1", + "id": 103540917, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103540917?v=4", + "html_url": "https:\/\/github.com\/Ghost-Bx1", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Ghost-Bx1\/cve-2026-48356-magento-file-upload-rce", + "description": "CVE-2026-48356 - Adobe Commerce\/Magento Unrestricted File Upload RCE | CVSS 9.3 | By Gh0st-Bx1", + "fork": false, + "created_at": "2026-11-06T18:34:29Z", + "updated_at": "2026-11-06T18:36:03Z", + "pushed_at": "2026-11-06T18:35:51Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "adobe-commerce", + "cve-2026-48356", + "exploit", + "file-upload", + "magento", + "poc", + "python", + "rce", + "security" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-50679.json b/2026/CVE-2026-50679.json index 8418dcb44c..eb8ba9648e 100644 --- a/2026/CVE-2026-50679.json +++ b/2026/CVE-2026-50679.json @@ -19,7 +19,7 @@ "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, - "forks_count": 0, + "forks_count": 2, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 2, "watchers": 0, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-54121.json b/2026/CVE-2026-54121.json index 17ebb22e0a..2e331a7632 100644 --- a/2026/CVE-2026-54121.json +++ b/2026/CVE-2026-54121.json @@ -445,15 +445,15 @@ { "id": 1425445368, "name": "CVE-2026-54121-Certighost", - "full_name": "AnubisRedTeam\/CVE-2026-54121-Certighost", + "full_name": "anubis-claud\/CVE-2026-54121-Certighost", "owner": { - "login": "AnubisRedTeam", + "login": "anubis-claud", "id": 290095090, "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/290095090?v=4", - "html_url": "https:\/\/github.com\/AnubisRedTeam", + "html_url": "https:\/\/github.com\/anubis-claud", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/AnubisRedTeam\/CVE-2026-54121-Certighost", + "html_url": "https:\/\/github.com\/anubis-claud\/CVE-2026-54121-Certighost", "description": "🛡 Official AI Security Tool module for CVE-2026-54121 (Certighost): AD CS certificate abuse deep-dive, defensive audit workflows, and safe in-app console execution for authorized Active Directory security testing.", "fork": false, "created_at": "2026-10-19T10:22:41Z", diff --git a/2026/CVE-2026-58115.json b/2026/CVE-2026-58115.json index edc96f51dc..bf03a80126 100644 --- a/2026/CVE-2026-58115.json +++ b/2026/CVE-2026-58115.json @@ -14,10 +14,10 @@ "description": "Detection-only local triage scanner for CVE-2026-58115 (CVSS 10.0) in Siemens SIMATIC IoT2050 Node-RED: grades Industrial OS versions against V4.3.4.1 and settings.js for adminAuth. No payloads, no remote probing.", "fork": false, "created_at": "2026-11-03T04:17:42Z", - "updated_at": "2026-11-03T04:18:06Z", + "updated_at": "2026-11-06T18:17:14Z", "pushed_at": "2026-11-03T04:17:58Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -38,7 +38,7 @@ ], "visibility": "public", "forks": 1, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-58868.json b/2026/CVE-2026-58868.json index cce0d4b7aa..054b588808 100644 --- a/2026/CVE-2026-58868.json +++ b/2026/CVE-2026-58868.json @@ -11,10 +11,10 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/probear0001\/CVE-2026-58868", - "description": null, + "description": "Original write up for CVE-2026-58868 Android critical severity cve", "fork": false, "created_at": "2026-11-05T07:29:32Z", - "updated_at": "2026-11-05T15:36:31Z", + "updated_at": "2026-11-06T16:41:08Z", "pushed_at": "2026-11-05T12:09:15Z", "stargazers_count": 1, "watchers_count": 1, @@ -25,7 +25,14 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "0-click", + "android", + "android-security", + "critical-vulnerability", + "cve-2026-58868", + "cybersecurity" + ], "visibility": "public", "forks": 0, "watchers": 1, @@ -47,8 +54,8 @@ "description": null, "fork": false, "created_at": "2026-11-05T21:05:48Z", - "updated_at": "2026-11-05T22:56:32Z", - "pushed_at": "2026-11-05T22:56:27Z", + "updated_at": "2026-11-06T18:38:59Z", + "pushed_at": "2026-11-06T18:38:55Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-60586.json b/2026/CVE-2026-60586.json new file mode 100644 index 0000000000..92423e742a --- /dev/null +++ b/2026/CVE-2026-60586.json @@ -0,0 +1,35 @@ +[ + { + "id": 1448625002, + "name": "mysql-connector-j-cve-2026-60586-repro", + "full_name": "ryanmurf\/mysql-connector-j-cve-2026-60586-repro", + "owner": { + "login": "ryanmurf", + "id": 4205055, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4205055?v=4", + "html_url": "https:\/\/github.com\/ryanmurf", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/ryanmurf\/mysql-connector-j-cve-2026-60586-repro", + "description": null, + "fork": false, + "created_at": "2026-11-06T18:44:48Z", + "updated_at": "2026-11-06T18:44:59Z", + "pushed_at": "2026-11-06T18:44:55Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-60623.json b/2026/CVE-2026-60623.json new file mode 100644 index 0000000000..ea38548b19 --- /dev/null +++ b/2026/CVE-2026-60623.json @@ -0,0 +1,35 @@ +[ + { + "id": 1448619128, + "name": "mysql-connector-j-cve-2026-60623-repro", + "full_name": "ryanmurf\/mysql-connector-j-cve-2026-60623-repro", + "owner": { + "login": "ryanmurf", + "id": 4205055, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4205055?v=4", + "html_url": "https:\/\/github.com\/ryanmurf", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/ryanmurf\/mysql-connector-j-cve-2026-60623-repro", + "description": null, + "fork": false, + "created_at": "2026-11-06T18:38:15Z", + "updated_at": "2026-11-06T18:38:26Z", + "pushed_at": "2026-11-06T18:38:22Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-61082.json b/2026/CVE-2026-61082.json new file mode 100644 index 0000000000..9d5be1a79a --- /dev/null +++ b/2026/CVE-2026-61082.json @@ -0,0 +1,35 @@ +[ + { + "id": 1448610948, + "name": "mysql-connector-j-cve-2026-61082-repro", + "full_name": "ryanmurf\/mysql-connector-j-cve-2026-61082-repro", + "owner": { + "login": "ryanmurf", + "id": 4205055, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4205055?v=4", + "html_url": "https:\/\/github.com\/ryanmurf", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/ryanmurf\/mysql-connector-j-cve-2026-61082-repro", + "description": null, + "fork": false, + "created_at": "2026-11-06T18:29:12Z", + "updated_at": "2026-11-06T18:29:23Z", + "pushed_at": "2026-11-06T18:29:18Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-62735.json b/2026/CVE-2026-62735.json index 4317bc25f2..87849dbe64 100644 --- a/2026/CVE-2026-62735.json +++ b/2026/CVE-2026-62735.json @@ -14,10 +14,10 @@ "description": "CVE 1-day in http.sys", "fork": false, "created_at": "2026-08-25T04:55:10Z", - "updated_at": "2026-11-06T01:43:36Z", + "updated_at": "2026-11-06T15:09:19Z", "pushed_at": "2026-09-04T11:06:16Z", - "stargazers_count": 41, - "watchers_count": 41, + "stargazers_count": 42, + "watchers_count": 42, "has_discussions": false, "forks_count": 16, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 16, - "watchers": 41, + "watchers": 42, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-63030.json b/2026/CVE-2026-63030.json index c4c99b088f..6717db4f6f 100644 --- a/2026/CVE-2026-63030.json +++ b/2026/CVE-2026-63030.json @@ -467,10 +467,10 @@ "description": "CVE-2026-63030 + CVE-2026-60137 - “wp2shell”: unauthenticated RCE in WordPress core", "fork": false, "created_at": "2026-07-18T14:27:41Z", - "updated_at": "2026-10-27T17:20:36Z", + "updated_at": "2026-11-06T17:02:36Z", "pushed_at": "2026-07-18T19:05:43Z", - "stargazers_count": 121, - "watchers_count": 121, + "stargazers_count": 122, + "watchers_count": 122, "has_discussions": false, "forks_count": 37, "allow_forking": true, @@ -481,7 +481,7 @@ "topics": [], "visibility": "public", "forks": 37, - "watchers": 121, + "watchers": 122, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-64560.json b/2026/CVE-2026-64560.json index dab170bac7..6a9b129fb9 100644 --- a/2026/CVE-2026-64560.json +++ b/2026/CVE-2026-64560.json @@ -597,8 +597,8 @@ "description": "在 REDMI K90 Max（代号 prague \/ OS4.0.0.14）上，从手机端一键开一个临时 root。利用 CVE-2026-64560（posix-cpu-timers UAF）加载 KernelSU LKM，重启即失效。不需要电脑、不刷机、不解锁 Bootloader。", "fork": false, "created_at": "2026-10-25T15:32:39Z", - "updated_at": "2026-11-05T17:45:47Z", - "pushed_at": "2026-11-05T17:48:40Z", + "updated_at": "2026-11-06T17:40:12Z", + "pushed_at": "2026-11-06T17:46:02Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-67276.json b/2026/CVE-2026-67276.json index 4046796109..2fe8b176cf 100644 --- a/2026/CVE-2026-67276.json +++ b/2026/CVE-2026-67276.json @@ -47,10 +47,10 @@ "description": "CVE-2026-67276 RouterOS SSH public-key authentication bypass lab PoC", "fork": false, "created_at": "2026-09-06T12:10:51Z", - "updated_at": "2026-11-05T19:55:00Z", + "updated_at": "2026-11-06T15:06:52Z", "pushed_at": "2026-09-06T12:10:54Z", - "stargazers_count": 103, - "watchers_count": 103, + "stargazers_count": 104, + "watchers_count": 104, "has_discussions": false, "forks_count": 34, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 34, - "watchers": 103, + "watchers": 104, "score": 0, "subscribers_count": 2 }, diff --git a/2026/CVE-2026-83844.json b/2026/CVE-2026-83844.json index 8dae2a2362..c8e3ea6b7a 100644 --- a/2026/CVE-2026-83844.json +++ b/2026/CVE-2026-83844.json @@ -69,5 +69,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1448396630, + "name": "CVE-2026-83844-PoC-MS-paint-v-11.2609.401.0", + "full_name": "mokshshah18\/CVE-2026-83844-PoC-MS-paint-v-11.2609.401.0", + "owner": { + "login": "mokshshah18", + "id": 98140164, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/98140164?v=4", + "html_url": "https:\/\/github.com\/mokshshah18", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/mokshshah18\/CVE-2026-83844-PoC-MS-paint-v-11.2609.401.0", + "description": "A proof of concept for CVE-2026-83844. Microsoft paint version 11.2609.401.0", + "fork": false, + "created_at": "2026-11-06T15:00:52Z", + "updated_at": "2026-11-06T15:00:58Z", + "pushed_at": "2026-11-06T15:06:13Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-86060.json b/2026/CVE-2026-86060.json index 64ec221fff..ad26e8bb80 100644 --- a/2026/CVE-2026-86060.json +++ b/2026/CVE-2026-86060.json @@ -80,10 +80,10 @@ "description": "MikroTik RouterOS PoC Collection - CVE-2026-86060 - CVE-2026-67279 - CVE-2026-67276 RouterOS SSH", "fork": false, "created_at": "2026-09-25T15:59:34Z", - "updated_at": "2026-11-03T23:38:15Z", + "updated_at": "2026-11-06T17:30:00Z", "pushed_at": "2026-10-08T14:08:24Z", - "stargazers_count": 6, - "watchers_count": 6, + "stargazers_count": 7, + "watchers_count": 7, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -109,7 +109,7 @@ ], "visibility": "public", "forks": 2, - "watchers": 6, + "watchers": 7, "score": 0, "subscribers_count": 1 } diff --git a/2026/CVE-2026-86596.json b/2026/CVE-2026-86596.json index b4f48f61ac..12863894c5 100644 --- a/2026/CVE-2026-86596.json +++ b/2026/CVE-2026-86596.json @@ -11,11 +11,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/thiscitze\/cve-2026-86596-poc", - "description": "CVE-2026-86596 s2Member <= 260927 template-injection PoC (lab; IPN verification required)", + "description": "CVE-2026-86596 - s2Member <= 260927 template injection (lab PoC by thiscitze)", "fork": false, "created_at": "2026-11-02T22:57:32Z", - "updated_at": "2026-11-04T04:30:17Z", - "pushed_at": "2026-11-02T23:31:40Z", + "updated_at": "2026-11-06T16:39:50Z", + "pushed_at": "2026-11-06T16:39:46Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -25,7 +25,13 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cve-2026-86596", + "poc", + "s2member", + "template-injection", + "wordpress" + ], "visibility": "public", "forks": 0, "watchers": 1, diff --git a/2026/CVE-2026-96652.json b/2026/CVE-2026-96652.json index 9dc6245d40..536178b104 100644 --- a/2026/CVE-2026-96652.json +++ b/2026/CVE-2026-96652.json @@ -47,10 +47,10 @@ "description": "CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 CVE-2026-96656", "fork": false, "created_at": "2026-10-18T05:00:14Z", - "updated_at": "2026-11-05T16:34:06Z", + "updated_at": "2026-11-06T18:56:41Z", "pushed_at": "2026-10-21T18:47:48Z", - "stargazers_count": 104, - "watchers_count": 104, + "stargazers_count": 105, + "watchers_count": 105, "has_discussions": false, "forks_count": 18, "allow_forking": true, @@ -66,7 +66,7 @@ ], "visibility": "public", "forks": 18, - "watchers": 104, + "watchers": 105, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-97229.json b/2026/CVE-2026-97229.json index e4b01393e4..263c4c089f 100644 --- a/2026/CVE-2026-97229.json +++ b/2026/CVE-2026-97229.json @@ -272,5 +272,47 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1448615751, + "name": "cve-2026-97229-gitlab-ci-rce", + "full_name": "Ghost-Bx1\/cve-2026-97229-gitlab-ci-rce", + "owner": { + "login": "Ghost-Bx1", + "id": 103540917, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103540917?v=4", + "html_url": "https:\/\/github.com\/Ghost-Bx1", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Ghost-Bx1\/cve-2026-97229-gitlab-ci-rce", + "description": "CVE-2026-97229 - GitLab CE\/EE CI\/CD Integer Overflow RCE | CVSS 10.0 | By Gh0st-Bx1", + "fork": false, + "created_at": "2026-11-06T18:34:20Z", + "updated_at": "2026-11-06T18:36:06Z", + "pushed_at": "2026-11-06T18:35:44Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve-2026-97229", + "exploit", + "gitlab", + "integer-overflow", + "poc", + "python", + "rce", + "security" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-98260.json b/2026/CVE-2026-98260.json index 10e70cddf0..1a6f8a0075 100644 --- a/2026/CVE-2026-98260.json +++ b/2026/CVE-2026-98260.json @@ -80,10 +80,10 @@ "description": "Target-specific Android CVE-2026-98260 research port for Xiaomi popsicle", "fork": false, "created_at": "2026-10-23T08:56:37Z", - "updated_at": "2026-11-05T07:23:55Z", + "updated_at": "2026-11-06T16:50:22Z", "pushed_at": "2026-10-29T14:04:29Z", - "stargazers_count": 25, - "watchers_count": 25, + "stargazers_count": 26, + "watchers_count": 26, "has_discussions": false, "forks_count": 15, "allow_forking": true, @@ -94,7 +94,7 @@ "topics": [], "visibility": "public", "forks": 15, - "watchers": 25, + "watchers": 26, "score": 0, "subscribers_count": 0 }, @@ -221,10 +221,10 @@ "description": "Research notes: porting CVE-2026-98260 to vivo\/iQOO GKI 6.6.127 (no exploit code; coordinated disclosure planned)", "fork": false, "created_at": "2026-10-25T13:37:37Z", - "updated_at": "2026-11-03T11:38:25Z", + "updated_at": "2026-11-06T16:11:14Z", "pushed_at": "2026-10-28T08:15:01Z", - "stargazers_count": 4, - "watchers_count": 4, + "stargazers_count": 5, + "watchers_count": 5, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -241,7 +241,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 4, + "watchers": 5, "score": 0, "subscribers_count": 1 }, @@ -265,7 +265,7 @@ "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -273,7 +273,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 2, "score": 0, "subscribers_count": 0 @@ -452,10 +452,10 @@ "description": null, "fork": false, "created_at": "2026-10-26T09:32:43Z", - "updated_at": "2026-11-06T09:46:33Z", + "updated_at": "2026-11-06T15:00:58Z", "pushed_at": "2026-10-26T09:50:29Z", - "stargazers_count": 45, - "watchers_count": 45, + "stargazers_count": 46, + "watchers_count": 46, "has_discussions": false, "forks_count": 14, "allow_forking": true, @@ -466,7 +466,7 @@ "topics": [], "visibility": "public", "forks": 14, - "watchers": 45, + "watchers": 46, "score": 0, "subscribers_count": 0 }, @@ -529,10 +529,10 @@ "description": "Android LPE (CVE-2026-98260) on Honor MagicPad3 Pro 13.3 (YLP-W00), kernel 6.12.38 — PoC\/EXP, uid-0 shell, KernelSU app", "fork": false, "created_at": "2026-10-26T16:49:03Z", - "updated_at": "2026-11-06T07:55:27Z", + "updated_at": "2026-11-06T15:48:46Z", "pushed_at": "2026-11-06T07:55:24Z", - "stargazers_count": 21, - "watchers_count": 21, + "stargazers_count": 22, + "watchers_count": 22, "has_discussions": false, "forks_count": 7, "allow_forking": true, @@ -543,7 +543,7 @@ "topics": [], "visibility": "public", "forks": 7, - "watchers": 21, + "watchers": 22, "score": 0, "subscribers_count": 0 }, @@ -595,10 +595,10 @@ "description": "6.12.69-android16-6-g242e1a07f878", "fork": false, "created_at": "2026-10-27T12:53:47Z", - "updated_at": "2026-11-05T22:21:38Z", + "updated_at": "2026-11-06T15:18:10Z", "pushed_at": "2026-10-27T14:13:02Z", - "stargazers_count": 47, - "watchers_count": 47, + "stargazers_count": 48, + "watchers_count": 48, "has_discussions": false, "forks_count": 12, "allow_forking": true, @@ -609,7 +609,7 @@ "topics": [], "visibility": "public", "forks": 12, - "watchers": 47, + "watchers": 48, "score": 0, "subscribers_count": 0 }, @@ -628,10 +628,10 @@ "description": "6.6.118-android15-8-g9bc34d5b0c79", "fork": false, "created_at": "2026-10-27T16:18:05Z", - "updated_at": "2026-11-06T09:14:36Z", + "updated_at": "2026-11-06T18:06:45Z", "pushed_at": "2026-10-28T09:14:49Z", - "stargazers_count": 10, - "watchers_count": 10, + "stargazers_count": 11, + "watchers_count": 11, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -642,7 +642,7 @@ "topics": [], "visibility": "public", "forks": 3, - "watchers": 10, + "watchers": 11, "score": 0, "subscribers_count": 0 }, @@ -733,10 +733,10 @@ "description": "Android front end for CVE-2026-98260: root shell + KernelSU late-load through Shizuku", "fork": false, "created_at": "2026-10-28T15:15:02Z", - "updated_at": "2026-11-06T09:22:26Z", + "updated_at": "2026-11-06T15:27:26Z", "pushed_at": "2026-11-03T13:01:24Z", - "stargazers_count": 51, - "watchers_count": 51, + "stargazers_count": 52, + "watchers_count": 52, "has_discussions": false, "forks_count": 21, "allow_forking": true, @@ -754,7 +754,7 @@ ], "visibility": "public", "forks": 21, - "watchers": 51, + "watchers": 52, "score": 0, "subscribers_count": 1 }, @@ -773,8 +773,8 @@ "description": "CVE-2026-98260 (posix-cpu-timers exec UAF) exploit research: S9280 Android 14 GKI 6.1 — UAF trigger + zero-write primitive + SELinux Permissive. Handoff doc in HANDOFF.md", "fork": false, "created_at": "2026-10-28T16:54:41Z", - "updated_at": "2026-11-04T15:41:22Z", - "pushed_at": "2026-11-03T22:48:41Z", + "updated_at": "2026-11-06T16:31:55Z", + "pushed_at": "2026-11-06T16:31:51Z", "stargazers_count": 4, "watchers_count": 4, "has_discussions": false, @@ -806,10 +806,10 @@ "description": "GhostKey - CVE-2026-98260 一键提权工具（Shizuku + NDK Native）", "fork": false, "created_at": "2026-10-29T04:23:27Z", - "updated_at": "2026-11-06T13:32:48Z", + "updated_at": "2026-11-06T16:33:36Z", "pushed_at": "2026-10-29T01:46:53Z", - "stargazers_count": 4, - "watchers_count": 4, + "stargazers_count": 5, + "watchers_count": 5, "has_discussions": false, "forks_count": 5, "allow_forking": true, @@ -820,40 +820,40 @@ "topics": [], "visibility": "public", "forks": 5, - "watchers": 4, + "watchers": 5, "score": 0, "subscribers_count": 0 }, { - "id": 1437975679, + "id": 1438043148, "name": "CVE-2026-98260-GhostKey", - "full_name": "Again1996-bit\/CVE-2026-98260-GhostKey", + "full_name": "SecPhases\/CVE-2026-98260-GhostKey", "owner": { - "login": "Again1996-bit", - "id": 67904045, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/67904045?v=4", - "html_url": "https:\/\/github.com\/Again1996-bit", + "login": "SecPhases", + "id": 71129766, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71129766?v=4", + "html_url": "https:\/\/github.com\/SecPhases", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/Again1996-bit\/CVE-2026-98260-GhostKey", + "html_url": "https:\/\/github.com\/SecPhases\/CVE-2026-98260-GhostKey", "description": "GhostKey - CVE-2026-98260 一键提权工具（Shizuku + NDK Native）", "fork": false, - "created_at": "2026-10-29T05:12:04Z", - "updated_at": "2026-11-06T13:31:04Z", + "created_at": "2026-10-29T06:37:37Z", + "updated_at": "2026-10-29T06:37:38Z", "pushed_at": "2026-10-29T05:13:36Z", - "stargazers_count": 90, - "watchers_count": 90, + "stargazers_count": 0, + "watchers_count": 0, "has_discussions": false, "forks_count": 55, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, - "has_pull_requests": false, + "has_pull_requests": true, "pull_request_creation_policy": "all", "topics": [], "visibility": "public", "forks": 55, - "watchers": 90, + "watchers": 0, "score": 0, "subscribers_count": 0 }, @@ -872,10 +872,10 @@ "description": "CVE-2026-98260 (exec: posix timer UAF) LKM jailbreak for OPPO Find X10 Pro Max (PMX110) and OnePlus 16 (PYB110): one-command root via shell uid 2000, with KernelSU \/ FinaSU \/ SukiSU \/ KernelSU-Next handover. Release build Root618 1.5.12 (R8-obfuscated).", "fork": false, "created_at": "2026-10-29T13:07:46Z", - "updated_at": "2026-11-02T20:31:43Z", + "updated_at": "2026-11-06T17:13:39Z", "pushed_at": "2026-11-04T17:13:39Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -901,7 +901,7 @@ ], "visibility": "public", "forks": 2, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 }, @@ -953,10 +953,10 @@ "description": "CVE 2026 98260 vivo s60 poc", "fork": false, "created_at": "2026-10-30T07:52:25Z", - "updated_at": "2026-11-06T09:06:06Z", + "updated_at": "2026-11-06T14:01:24Z", "pushed_at": "2026-11-06T09:06:02Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -973,7 +973,7 @@ ], "visibility": "public", "forks": 2, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 }, @@ -1058,12 +1058,12 @@ "description": "One-tap Android root for Samsung Galaxy devices, built around the CVE-2026-98260 timer exploit.", "fork": false, "created_at": "2026-11-01T10:00:01Z", - "updated_at": "2026-11-06T13:43:40Z", + "updated_at": "2026-11-06T15:40:30Z", "pushed_at": "2026-11-01T10:11:44Z", - "stargazers_count": 4, - "watchers_count": 4, + "stargazers_count": 5, + "watchers_count": 5, "has_discussions": false, - "forks_count": 4, + "forks_count": 5, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1071,8 +1071,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 4, - "watchers": 4, + "forks": 5, + "watchers": 5, "score": 0, "subscribers_count": 0 }, @@ -1190,10 +1190,10 @@ "description": "锁定设备上的内核 CVE 适用性判定：一个有意保持未定论的适用性结论，以及得到该结论的方法。A vulnerability-applicability study on a locked-down HarmonyOS device: a deliberately unresolved verdict, and the methodology to reach it.", "fork": false, "created_at": "2026-11-03T00:27:22Z", - "updated_at": "2026-11-03T02:03:40Z", + "updated_at": "2026-11-06T15:02:15Z", "pushed_at": "2026-11-03T02:03:43Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -1204,7 +1204,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -1322,10 +1322,10 @@ "description": "CVE-2026-98260 在小米 17 Pro Max 的工程化利用一键 root", "fork": false, "created_at": "2026-11-05T03:16:47Z", - "updated_at": "2026-11-06T09:40:25Z", + "updated_at": "2026-11-06T15:53:41Z", "pushed_at": "2026-11-05T16:55:30Z", - "stargazers_count": 13, - "watchers_count": 13, + "stargazers_count": 14, + "watchers_count": 14, "has_discussions": false, "forks_count": 7, "allow_forking": true, @@ -1336,7 +1336,7 @@ "topics": [], "visibility": "public", "forks": 7, - "watchers": 13, + "watchers": 14, "score": 0, "subscribers_count": 0 }, @@ -1421,10 +1421,10 @@ "description": "Root iQOO Z9 Turbo using CVE-2026-98260", "fork": false, "created_at": "2026-11-05T10:39:52Z", - "updated_at": "2026-11-05T19:08:33Z", - "pushed_at": "2026-11-05T19:08:28Z", - "stargazers_count": 1, - "watchers_count": 1, + "updated_at": "2026-11-06T18:42:02Z", + "pushed_at": "2026-11-06T17:53:25Z", + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -1435,7 +1435,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, @@ -1454,12 +1454,12 @@ "description": null, "fork": false, "created_at": "2026-11-06T09:16:50Z", - "updated_at": "2026-11-06T09:26:58Z", + "updated_at": "2026-11-06T14:04:16Z", "pushed_at": "2026-11-06T09:26:54Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1467,8 +1467,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, - "watchers": 0, + "forks": 1, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -1553,10 +1553,10 @@ "description": null, "fork": false, "created_at": "2026-11-06T12:08:52Z", - "updated_at": "2026-11-06T12:58:35Z", - "pushed_at": "2026-11-06T12:58:30Z", - "stargazers_count": 0, - "watchers_count": 0, + "updated_at": "2026-11-06T17:44:18Z", + "pushed_at": "2026-11-06T17:44:14Z", + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -1567,7 +1567,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-9830.json b/2026/CVE-2026-9830.json index 79b1f2e6b8..b2f06f91cf 100644 --- a/2026/CVE-2026-9830.json +++ b/2026/CVE-2026-9830.json @@ -47,10 +47,10 @@ "description": "CVE-2026-9830 Proof of Concept", "fork": false, "created_at": "2026-08-15T20:57:13Z", - "updated_at": "2026-10-30T03:31:05Z", + "updated_at": "2026-11-06T18:27:17Z", "pushed_at": "2026-10-21T22:09:03Z", - "stargazers_count": 400, - "watchers_count": 400, + "stargazers_count": 382, + "watchers_count": 382, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -72,7 +72,7 @@ ], "visibility": "public", "forks": 3, - "watchers": 400, + "watchers": 382, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-98432.json b/2026/CVE-2026-98432.json index 8bd5500876..a4b1c4c5ea 100644 --- a/2026/CVE-2026-98432.json +++ b/2026/CVE-2026-98432.json @@ -268,7 +268,7 @@ "fork": false, "created_at": "2026-10-30T00:22:53Z", "updated_at": "2026-11-06T05:24:56Z", - "pushed_at": "2026-11-06T12:40:03Z", + "pushed_at": "2026-11-06T19:51:51Z", "stargazers_count": 17, "watchers_count": 17, "has_discussions": false, @@ -579,10 +579,10 @@ "description": "CVE-2026-98432 (CVSS 9.8) Linux IPv4 TCP use-after-free full toolkit. Detect kernel exposure, trigger the race, analyze captures, recover KASLR slides, and lock down hosts. Single command, zero setup, standard library only. Built for real-world authorized security testing.", "fork": false, "created_at": "2026-10-30T13:11:26Z", - "updated_at": "2026-11-06T12:09:03Z", + "updated_at": "2026-11-06T17:28:21Z", "pushed_at": "2026-11-05T13:25:10Z", - "stargazers_count": 35, - "watchers_count": 35, + "stargazers_count": 36, + "watchers_count": 36, "has_discussions": false, "forks_count": 9, "allow_forking": true, @@ -608,7 +608,7 @@ ], "visibility": "public", "forks": 9, - "watchers": 35, + "watchers": 36, "score": 0, "subscribers_count": 0 }, @@ -1608,11 +1608,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/thiscitze\/cve-2026-98432-root-shell", - "description": "CVE-2026-98432 lab root-shell kit (aid kernel; not a stock remote exploit)", + "description": "CVE-2026-98432 - Linux IPv4\/TCP lab root-shell kit (by thiscitze)", "fork": false, "created_at": "2026-11-02T08:07:55Z", - "updated_at": "2026-11-04T04:30:09Z", - "pushed_at": "2026-11-02T08:08:11Z", + "updated_at": "2026-11-06T16:39:54Z", + "pushed_at": "2026-11-06T16:39:50Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -1622,7 +1622,13 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cve-2026-98432", + "lab", + "linux-kernel", + "poc", + "root-shell" + ], "visibility": "public", "forks": 0, "watchers": 1,