nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/04/28 18:54:46

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-04-29 03:54:46 +09:00
1 parent 6adda164e7
commit 49abaf42df
94 files changed
+693 -309
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2014/CVE-2014-9495.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Security research project on fuzzing libpng with OSS-Fuzz. Includes seed corpus analysis, custom read\/write fuzzers, and a proof-of-concept exploit for CVE-2014-9495.",
"fork": false,
"created_at": "2025-10-25T19:55:42Z",
"updated_at": "2025-11-08T11:06:07Z",
"updated_at": "2026-04-28T12:28:13Z",
"pushed_at": "2025-10-25T20:49:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2016/CVE-2016-15042.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛠️ Validate and demonstrate CVE-2016-15042 with a Dockerized lab for unauthenticated file uploads in WordPress file managers.",
"fork": false,
"created_at": "2023-10-23T05:54:10Z",
"updated_at": "2026-04-28T08:46:36Z",
"pushed_at": "2026-04-28T08:46:32Z",
"updated_at": "2026-04-28T16:06:13Z",
"pushed_at": "2026-04-28T16:06:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2016/CVE-2016-5195.json
+4 -4
View File
@@ -255,10 +255,10 @@
"description": "PoC for Dirty COW (CVE-2016-5195)",
"fork": false,
"created_at": "2016-10-22T15:25:34Z",
"updated_at": "2026-04-26T17:21:47Z",
"updated_at": "2026-04-28T13:06:17Z",
"pushed_at": "2022-03-16T12:08:54Z",
"stargazers_count": 509,
"watchers_count": 509,
"stargazers_count": 510,
"watchers_count": 510,
"has_discussions": false,
"forks_count": 146,
"allow_forking": true,
@@ -269,7 +269,7 @@
"topics": [],
"visibility": "public",
"forks": 146,
"watchers": 509,
"watchers": 510,
"score": 0,
"subscribers_count": 19
},
2017/CVE-2017-1000486.json
+2 -2
View File
@@ -143,10 +143,10 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xdsm\/pwnfaces",
"description": "😛 Golang project to exploit an EL Injection vulnerability (CVE-2017-1000486) that affects the Primefaces 5.X versions. This project supports SOCKS proxy to prioritize anonymity.",
"description": "exploit for CVE-2017-1000486 vulnerability with SOCKS proxy support",
"fork": false,
"created_at": "2022-09-09T23:09:40Z",
"updated_at": "2025-10-21T16:46:35Z",
"updated_at": "2026-04-28T15:46:05Z",
"pushed_at": "2023-04-18T14:03:27Z",
"stargazers_count": 18,
"watchers_count": 18,
2017/CVE-2017-5753.json
+1 -1
View File
@@ -36,7 +36,7 @@
"forks": 166,
"watchers": 771,
"score": 0,
"subscribers_count": 41
"subscribers_count": 40
},
{
"id": 116268310,
2018/CVE-2018-15473.json
+4 -4
View File
@@ -1419,10 +1419,10 @@
"description": "A Python 3 reimplementation of the classic CVE-2018-15473 OpenSSH user enumeration exploit, extended with multi-threading, wordlist support, automatic vulnerability detection, and thread-safe exploit patching.",
"fork": false,
"created_at": "2026-03-25T20:00:29Z",
"updated_at": "2026-03-25T20:45:31Z",
"updated_at": "2026-04-28T16:36:20Z",
"pushed_at": "2026-03-25T20:45:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -1433,7 +1433,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
2018/CVE-2018-9995.json
+4 -4
View File
@@ -881,10 +881,10 @@
"description": "POC of CVE-2018-9995 written in Rust.",
"fork": false,
"created_at": "2025-10-28T15:30:18Z",
"updated_at": "2026-04-14T20:29:55Z",
"updated_at": "2026-04-28T14:03:14Z",
"pushed_at": "2025-11-01T22:39:23Z",
"stargazers_count": 96,
"watchers_count": 96,
"stargazers_count": 97,
"watchers_count": 97,
"has_discussions": false,
"forks_count": 13,
"allow_forking": true,
@@ -895,7 +895,7 @@
"topics": [],
"visibility": "public",
"forks": 13,
"watchers": 96,
"watchers": 97,
"score": 0,
"subscribers_count": 1
}
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-04-28T11:26:07Z",
"pushed_at": "2026-04-28T11:26:03Z",
"updated_at": "2026-04-28T17:19:56Z",
"pushed_at": "2026-04-28T17:19:50Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2020/CVE-2020-0610.json
+2 -2
View File
@@ -58,8 +58,8 @@
"description": "🔍 Create a safe lab environment for testing CVE-2020-0610, a critical RCE vulnerability in Windows RD Gateway, with minimal disruption using DTLS techniques.",
"fork": false,
"created_at": "2025-09-04T13:21:35Z",
"updated_at": "2026-04-28T04:59:40Z",
"pushed_at": "2026-04-28T04:59:36Z",
"updated_at": "2026-04-28T16:06:09Z",
"pushed_at": "2026-04-28T16:06:04Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2020/CVE-2020-1472.json
+2 -2
View File
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-04-28T11:55:52Z",
"pushed_at": "2026-04-28T11:55:48Z",
"updated_at": "2026-04-28T17:19:52Z",
"pushed_at": "2026-04-28T17:19:48Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2020/CVE-2020-15906.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Writeup of CVE-2020-15906",
"fork": false,
"created_at": "2020-07-23T09:20:53Z",
"updated_at": "2026-04-26T17:21:39Z",
"updated_at": "2026-04-28T15:34:20Z",
"pushed_at": "2020-10-26T22:01:33Z",
"stargazers_count": 51,
"watchers_count": 51,
"stargazers_count": 52,
"watchers_count": 52,
"has_discussions": false,
"forks_count": 11,
"allow_forking": true,
@@ -33,7 +33,7 @@
],
"visibility": "public",
"forks": 11,
"watchers": 51,
"watchers": 52,
"score": 0,
"subscribers_count": 3
}
2021/CVE-2021-22555.json
+4 -4
View File
@@ -146,10 +146,10 @@
"description": "CVE-2021-22555 exploit rewritten with pipe primitive",
"fork": false,
"created_at": "2022-04-05T06:35:25Z",
"updated_at": "2025-08-30T06:16:32Z",
"updated_at": "2026-04-28T16:29:49Z",
"pushed_at": "2022-05-18T03:10:10Z",
"stargazers_count": 37,
"watchers_count": 37,
"stargazers_count": 38,
"watchers_count": 38,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -160,7 +160,7 @@
"topics": [],
"visibility": "public",
"forks": 7,
"watchers": 37,
"watchers": 38,
"score": 0,
"subscribers_count": 2
},
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-04-28T11:25:21Z",
"pushed_at": "2026-04-28T11:25:17Z",
"updated_at": "2026-04-28T17:18:17Z",
"pushed_at": "2026-04-28T17:18:10Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2021/CVE-2021-4034.json
+2 -2
View File
@@ -2050,8 +2050,8 @@
"description": "🚀 Enhance your penetration testing with PwnKit Helper, a simple tool for exploiting the CVE-2021-4034 vulnerability in pkexec for local privilege escalation.",
"fork": false,
"created_at": "2025-10-01T09:53:03Z",
"updated_at": "2026-04-28T08:54:37Z",
"pushed_at": "2026-04-28T08:54:33Z",
"updated_at": "2026-04-28T16:17:35Z",
"pushed_at": "2026-04-28T16:14:34Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2021/CVE-2021-44228.json
+2 -2
View File
@@ -408,7 +408,7 @@
"stargazers_count": 1142,
"watchers_count": 1142,
"has_discussions": false,
"forks_count": 552,
"forks_count": 551,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -418,7 +418,7 @@
"log4shell"
],
"visibility": "public",
"forks": 552,
"forks": 551,
"watchers": 1142,
"score": 0,
"subscribers_count": 21
2022/CVE-2022-21999.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Exploit for CVE-2022-21999 - Windows Print Spooler Elevation of Privilege Vulnerability (LPE)",
"fork": false,
"created_at": "2022-02-08T17:25:44Z",
"updated_at": "2026-04-24T05:44:02Z",
"updated_at": "2026-04-28T18:22:58Z",
"pushed_at": "2022-02-09T16:54:09Z",
"stargazers_count": 795,
"watchers_count": 795,
"stargazers_count": 796,
"watchers_count": 796,
"has_discussions": false,
"forks_count": 161,
"allow_forking": true,
@@ -31,7 +31,7 @@
],
"visibility": "public",
"forks": 161,
"watchers": 795,
"watchers": 796,
"score": 0,
"subscribers_count": 14
}
2022/CVE-2022-22963.json
+33
View File
@@ -916,5 +916,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 1223653732,
"name": "CVE-2022-22963---Software-Vulnerabilities",
"full_name": "teofoli-matteo\/CVE-2022-22963---Software-Vulnerabilities",
"owner": {
"login": "teofoli-matteo",
"id": 114015283,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/114015283?v=4",
"html_url": "https:\/\/github.com\/teofoli-matteo",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/teofoli-matteo\/CVE-2022-22963---Software-Vulnerabilities",
"description": null,
"fork": false,
"created_at": "2026-04-28T14:25:12Z",
"updated_at": "2026-04-28T14:53:53Z",
"pushed_at": "2026-04-28T14:42:36Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2022/CVE-2022-25636.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2022-25636",
"fork": false,
"created_at": "2022-03-07T13:38:41Z",
"updated_at": "2026-03-23T04:09:49Z",
"updated_at": "2026-04-28T18:25:42Z",
"pushed_at": "2022-03-07T17:18:19Z",
"stargazers_count": 437,
"watchers_count": 437,
"stargazers_count": 438,
"watchers_count": 438,
"has_discussions": false,
"forks_count": 83,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 83,
"watchers": 437,
"watchers": 438,
"score": 0,
"subscribers_count": 6
},
2022/CVE-2022-37705.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 556238627,
"name": "CVE-2022-37705",
"full_name": "MaherAzzouzi\/CVE-2022-37705",
"owner": {
"login": "MaherAzzouzi",
"id": 62230190,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62230190?v=4",
"html_url": "https:\/\/github.com\/MaherAzzouzi",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/MaherAzzouzi\/CVE-2022-37705",
"description": "Amanda 3.5.1 second LPE.",
"fork": false,
"created_at": "2022-10-23T11:48:36Z",
"updated_at": "2022-10-24T02:18:52Z",
"pushed_at": "2022-10-23T11:49:48Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 3,
"score": 0,
"subscribers_count": 1
}
]
2022/CVE-2022-38694.json
+4 -4
View File
@@ -116,10 +116,10 @@
"description": "Free and Open-Source FRP Remover based on CVE-2022-38694",
"fork": false,
"created_at": "2026-02-10T19:40:42Z",
"updated_at": "2026-02-10T19:57:03Z",
"updated_at": "2026-04-28T17:24:39Z",
"pushed_at": "2026-02-10T19:56:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -130,7 +130,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
2022/CVE-2022-39197.json
+33
View File
@@ -370,6 +370,39 @@
"score": 0,
"subscribers_count": 7
},
{
"id": 555782036,
"name": "CVE-2022-39197-RCE",
"full_name": "TheCryingGame\/CVE-2022-39197-RCE",
"owner": {
"login": "TheCryingGame",
"id": 48227194,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48227194?v=4",
"html_url": "https:\/\/github.com\/TheCryingGame",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/TheCryingGame\/CVE-2022-39197-RCE",
"description": "CVE-2022-39197 RCE POC",
"fork": false,
"created_at": "2022-10-22T10:11:37Z",
"updated_at": "2024-05-20T14:01:29Z",
"pushed_at": "2022-10-22T11:13:59Z",
"stargazers_count": 13,
"watchers_count": 13,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 13,
"score": 0,
"subscribers_count": 1
},
{
"id": 570245587,
"name": "CVE-2022-39197",
2023/CVE-2023-22809.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "A script to automate privilege escalation with CVE-2023-22809 vulnerability",
"fork": false,
"created_at": "2023-01-21T15:19:23Z",
"updated_at": "2026-04-17T18:18:48Z",
"updated_at": "2026-04-28T13:08:10Z",
"pushed_at": "2023-02-15T18:10:53Z",
"stargazers_count": 164,
"watchers_count": 164,
"stargazers_count": 165,
"watchers_count": 165,
"has_discussions": false,
"forks_count": 35,
"forks_count": 36,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -36,8 +36,8 @@
"vulnerability"
],
"visibility": "public",
"forks": 35,
"watchers": 164,
"forks": 36,
"watchers": 165,
"score": 0,
"subscribers_count": 2
},
2023/CVE-2023-32434.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙",
"fork": false,
"created_at": "2025-08-13T09:19:29Z",
"updated_at": "2026-04-28T08:42:21Z",
"pushed_at": "2026-04-28T08:42:17Z",
"updated_at": "2026-04-28T16:01:16Z",
"pushed_at": "2026-04-28T16:01:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-39910.json
+2 -2
View File
@@ -66,8 +66,8 @@
"description": "🔒 Analyze the CVE-2023-39910 vulnerability in Libbitcoin Explorer to understand its impact on Bitcoin wallet security and protect your assets.",
"fork": false,
"created_at": "2026-01-07T14:24:08Z",
"updated_at": "2026-04-28T10:58:12Z",
"pushed_at": "2026-04-28T09:58:40Z",
"updated_at": "2026-04-28T17:22:20Z",
"pushed_at": "2026-04-28T17:22:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-41772.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2023-12-19T11:21:12Z",
"updated_at": "2026-04-24T18:40:07Z",
"updated_at": "2026-04-28T13:46:24Z",
"pushed_at": "2023-12-24T10:47:00Z",
"stargazers_count": 13,
"watchers_count": 13,
"stargazers_count": 14,
"watchers_count": 14,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 13,
"watchers": 14,
"score": 0,
"subscribers_count": 1
}
2024/CVE-2024-0670.json
+2 -2
View File
@@ -172,8 +172,8 @@
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
"fork": false,
"created_at": "2026-01-08T01:32:09Z",
"updated_at": "2026-04-28T09:59:14Z",
"pushed_at": "2026-04-28T09:59:09Z",
"updated_at": "2026-04-28T17:22:57Z",
"pushed_at": "2026-04-28T17:22:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-10924.json
+2 -2
View File
@@ -124,7 +124,7 @@
"stargazers_count": 19,
"watchers_count": 19,
"has_discussions": false,
"forks_count": 16,
"forks_count": 17,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -141,7 +141,7 @@
"wordpress"
],
"visibility": "public",
"forks": 16,
"forks": 17,
"watchers": 19,
"score": 0,
"subscribers_count": 1
2024/CVE-2024-23222.json
+2 -2
View File
@@ -80,8 +80,8 @@
"description": "Analyze and deobfuscate the Coruna Exploit Kit (CVE-2024-23222) to enhance understanding and detection of related threats.",
"fork": false,
"created_at": "2026-03-15T16:36:07Z",
"updated_at": "2026-04-28T10:50:31Z",
"pushed_at": "2026-04-28T10:50:27Z",
"updated_at": "2026-04-28T18:32:39Z",
"pushed_at": "2026-04-28T18:32:36Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2024/CVE-2024-29988.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Exploit for Microsoft SmartScreen malicious execution (april 2024)",
"fork": false,
"created_at": "2024-05-03T12:17:25Z",
"updated_at": "2026-04-24T18:40:08Z",
"updated_at": "2026-04-28T13:46:27Z",
"pushed_at": "2024-05-03T12:57:49Z",
"stargazers_count": 6,
"watchers_count": 6,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 6,
"watchers": 7,
"score": 0,
"subscribers_count": 1
},
2024/CVE-2024-30088.json
+2 -2
View File
@@ -245,8 +245,8 @@
"description": "Go offensive-security research library — 15+ injection methods, AMSI\/ETW\/ntdll-unhook evasion, sleep mask (Ekko × XOR\/RC4\/AES), call-stack spoof, BYOVD (RTCore64) + kernel callback removal, LSASS dump + pure-Go MSV1_0 parser w\/ PPL bypass, recon (sandbox\/VM\/debugger\/dllhijack), PE ops (sRDI\/BOF\/CLR), Meterpreter C2, UAC bypass, CVE-2024-30088 LPE.",
"fork": false,
"created_at": "2026-04-01T08:15:08Z",
"updated_at": "2026-04-28T06:18:21Z",
"pushed_at": "2026-04-28T06:18:11Z",
"updated_at": "2026-04-28T14:39:55Z",
"pushed_at": "2026-04-28T14:29:26Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": true,
2024/CVE-2024-38998.json
+4 -4
View File
@@ -35,15 +35,15 @@
{
"id": 913713750,
"name": "PP_CVE-2024-38998",
"full_name": "t0x1nsec\/PP_CVE-2024-38998",
"full_name": "cesarbtakeda\/PP_CVE-2024-38998",
"owner": {
"login": "t0x1nsec",
"login": "cesarbtakeda",
"id": 114227831,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/114227831?v=4",
"html_url": "https:\/\/github.com\/t0x1nsec",
"html_url": "https:\/\/github.com\/cesarbtakeda",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/t0x1nsec\/PP_CVE-2024-38998",
"html_url": "https:\/\/github.com\/cesarbtakeda\/PP_CVE-2024-38998",
"description": null,
"fork": false,
"created_at": "2025-01-08T08:04:54Z",
2024/CVE-2024-44000.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2024-44000 is a vulnerability in the LiteSpeed Cache plugin, a popular WordPress plugin. This vulnerability affects session management in LiteSpeed Cache, allowing attackers to gain unauthorized access to sensitive data.",
"fork": false,
"created_at": "2024-09-06T03:38:13Z",
"updated_at": "2026-01-10T14:57:08Z",
"updated_at": "2026-04-28T15:51:49Z",
"pushed_at": "2024-09-06T03:54:52Z",
"stargazers_count": 15,
"watchers_count": 15,
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
"forks_count": 10,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 10,
"watchers": 15,
"watchers": 16,
"score": 0,
"subscribers_count": 1
},
2024/CVE-2024-4577.json
+4 -4
View File
@@ -179,10 +179,10 @@
"description": "PHP CGI Argument Injection (CVE-2024-4577) Remote Code Execution PoC",
"fork": false,
"created_at": "2024-06-07T09:52:54Z",
"updated_at": "2026-04-24T18:40:09Z",
"updated_at": "2026-04-28T13:46:28Z",
"pushed_at": "2024-06-22T15:13:52Z",
"stargazers_count": 311,
"watchers_count": 311,
"stargazers_count": 312,
"watchers_count": 312,
"has_discussions": false,
"forks_count": 65,
"allow_forking": true,
@@ -193,7 +193,7 @@
"topics": [],
"visibility": "public",
"forks": 65,
"watchers": 311,
"watchers": 312,
"score": 0,
"subscribers_count": 4
},
2024/CVE-2024-49113.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "LdapNightmare is a PoC tool that tests a vulnerable Windows Server against CVE-2024-49113",
"fork": false,
"created_at": "2025-01-01T15:48:38Z",
"updated_at": "2026-03-15T23:59:21Z",
"updated_at": "2026-04-28T13:49:24Z",
"pushed_at": "2025-01-02T16:07:23Z",
"stargazers_count": 515,
"watchers_count": 515,
"stargazers_count": 516,
"watchers_count": 516,
"has_discussions": false,
"forks_count": 119,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 119,
"watchers": 515,
"watchers": 516,
"score": 0,
"subscribers_count": 5
},
2024/CVE-2024-56348.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate an authentication bypass and remote code execution exploit targeting JetBrains TeamCity versions before 2024.12 via REST API abuse.",
"fork": false,
"created_at": "2025-09-17T01:48:09Z",
"updated_at": "2026-04-28T10:53:58Z",
"pushed_at": "2026-04-28T10:53:54Z",
"updated_at": "2026-04-28T18:37:05Z",
"pushed_at": "2026-04-28T18:37:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-56426.json
+1 -1
View File
@@ -15,7 +15,7 @@
"fork": false,
"created_at": "2026-04-07T12:02:52Z",
"updated_at": "2026-04-23T17:25:11Z",
"pushed_at": "2026-04-27T13:40:21Z",
"pushed_at": "2026-04-28T15:57:43Z",
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
2024/CVE-2024-6387.json
+4 -4
View File
@@ -252,10 +252,10 @@
"description": "CVE-2024-6387_Check is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH",
"fork": false,
"created_at": "2024-07-01T20:33:20Z",
"updated_at": "2026-04-21T14:12:47Z",
"updated_at": "2026-04-28T16:32:38Z",
"pushed_at": "2025-06-02T11:06:03Z",
"stargazers_count": 520,
"watchers_count": 520,
"stargazers_count": 521,
"watchers_count": 521,
"has_discussions": false,
"forks_count": 98,
"allow_forking": true,
@@ -272,7 +272,7 @@
],
"visibility": "public",
"forks": 98,
"watchers": 520,
"watchers": 521,
"score": 0,
"subscribers_count": 6
},
2025/CVE-2025-0411.json
+4 -4
View File
@@ -108,15 +108,15 @@
{
"id": 937428817,
"name": "7-Zip-CVE-2025-0411-POC",
"full_name": "t0x1nsec\/7-Zip-CVE-2025-0411-POC",
"full_name": "cesarbtakeda\/7-Zip-CVE-2025-0411-POC",
"owner": {
"login": "t0x1nsec",
"login": "cesarbtakeda",
"id": 114227831,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/114227831?v=4",
"html_url": "https:\/\/github.com\/t0x1nsec",
"html_url": "https:\/\/github.com\/cesarbtakeda",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/t0x1nsec\/7-Zip-CVE-2025-0411-POC",
"html_url": "https:\/\/github.com\/cesarbtakeda\/7-Zip-CVE-2025-0411-POC",
"description": null,
"fork": false,
"created_at": "2025-02-23T02:55:44Z",
2025/CVE-2025-14847.json
+8 -8
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
"fork": false,
"created_at": "2025-07-30T15:52:00Z",
"updated_at": "2026-04-28T10:05:31Z",
"pushed_at": "2026-04-28T10:05:26Z",
"updated_at": "2026-04-28T17:31:00Z",
"pushed_at": "2026-04-28T17:30:55Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -134,10 +134,10 @@
"description": "a critical memory disclosure vulnerability in MongoDB's zlib compression handling. This tool allows security researchers to extract sensitive data from vulnerable MongoDB instances.",
"fork": false,
"created_at": "2025-12-27T15:01:50Z",
"updated_at": "2026-03-09T10:39:01Z",
"updated_at": "2026-04-28T13:40:42Z",
"pushed_at": "2025-12-27T17:50:59Z",
"stargazers_count": 28,
"watchers_count": 28,
"stargazers_count": 29,
"watchers_count": 29,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -148,7 +148,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 28,
"watchers": 29,
"score": 0,
"subscribers_count": 0
},
@@ -1129,8 +1129,8 @@
"description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
"fork": false,
"created_at": "2026-01-14T06:05:44Z",
"updated_at": "2026-04-28T10:03:59Z",
"pushed_at": "2026-04-28T10:03:55Z",
"updated_at": "2026-04-28T17:29:13Z",
"pushed_at": "2026-04-28T17:29:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-2304.json
+2 -2
View File
@@ -412,8 +412,8 @@
"description": "🛠️ Exploit CVE-2025-2304 in Camaleon CMS easily with this Python script for privilege escalation, tested on version 2.9.0.",
"fork": false,
"created_at": "2026-02-14T20:01:20Z",
"updated_at": "2026-04-28T10:28:24Z",
"pushed_at": "2026-04-28T10:28:20Z",
"updated_at": "2026-04-28T18:03:29Z",
"pushed_at": "2026-04-28T18:03:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-24071.json
+4 -4
View File
@@ -247,15 +247,15 @@
{
"id": 957167291,
"name": "Windows-Explorer-CVE-2025-24071",
"full_name": "t0x1nsec\/Windows-Explorer-CVE-2025-24071",
"full_name": "cesarbtakeda\/Windows-Explorer-CVE-2025-24071",
"owner": {
"login": "t0x1nsec",
"login": "cesarbtakeda",
"id": 114227831,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/114227831?v=4",
"html_url": "https:\/\/github.com\/t0x1nsec",
"html_url": "https:\/\/github.com\/cesarbtakeda",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/t0x1nsec\/Windows-Explorer-CVE-2025-24071",
"html_url": "https:\/\/github.com\/cesarbtakeda\/Windows-Explorer-CVE-2025-24071",
"description": null,
"fork": false,
"created_at": "2025-03-29T18:00:29Z",
2025/CVE-2025-24204.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 127,
"watchers_count": 127,
"has_discussions": false,
"forks_count": 18,
"forks_count": 19,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 18,
"forks": 19,
"watchers": 127,
"score": 0,
"subscribers_count": 2
2025/CVE-2025-24257.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis",
"fork": false,
"created_at": "2026-04-04T03:42:55Z",
"updated_at": "2026-04-28T11:03:34Z",
"pushed_at": "2026-04-28T11:03:31Z",
"updated_at": "2026-04-28T18:48:09Z",
"pushed_at": "2026-04-28T18:48:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-26125.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "( 0day ) Local Privilege Escalation in IObit Malware Fighter",
"fork": false,
"created_at": "2025-01-08T05:50:07Z",
"updated_at": "2026-04-24T18:40:14Z",
"updated_at": "2026-04-28T13:46:34Z",
"pushed_at": "2025-03-30T00:44:12Z",
"stargazers_count": 171,
"watchers_count": 171,
"stargazers_count": 172,
"watchers_count": 172,
"has_discussions": false,
"forks_count": 24,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 24,
"watchers": 171,
"watchers": 172,
"score": 0,
"subscribers_count": 3
}
2025/CVE-2025-29927.json
+4 -4
View File
@@ -902,10 +902,10 @@
"description": "PoC for CVE-2025-29927: Next.js Middleware Bypass Vulnerability. Demonstrates how x-middleware-subrequest can bypass authentication checks. Includes Docker setup for testing.",
"fork": false,
"created_at": "2025-03-25T10:30:55Z",
"updated_at": "2025-11-09T13:53:31Z",
"updated_at": "2026-04-28T16:28:27Z",
"pushed_at": "2025-03-25T10:38:24Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -916,7 +916,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-31258.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔓 Explore CVE-2025-31258 with this PoC demonstrating partial sandbox escape using RemoteViewServices for practical 1-day security practice.",
"fork": false,
"created_at": "2020-06-23T15:20:11Z",
"updated_at": "2026-04-28T08:48:36Z",
"pushed_at": "2026-04-28T08:48:31Z",
"updated_at": "2026-04-28T16:08:27Z",
"pushed_at": "2026-04-28T16:08:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-32463.json
+6 -6
View File
@@ -645,8 +645,8 @@
"description": "Demonstrate CVE-2025-32463 with this PoC for sudo's chroot feature. Explore the exploit and its impact on vulnerable sudo versions. 🐱💻🔒",
"fork": false,
"created_at": "2025-07-04T18:20:09Z",
"updated_at": "2026-04-28T12:46:48Z",
"pushed_at": "2026-04-28T12:46:44Z",
"updated_at": "2026-04-28T15:59:08Z",
"pushed_at": "2026-04-28T15:59:04Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -1628,8 +1628,8 @@
"description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.",
"fork": false,
"created_at": "2025-09-20T00:42:07Z",
"updated_at": "2026-04-28T08:49:52Z",
"pushed_at": "2026-04-28T08:49:48Z",
"updated_at": "2026-04-28T16:09:53Z",
"pushed_at": "2026-04-28T16:09:49Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1680,8 +1680,8 @@
"description": null,
"fork": false,
"created_at": "2025-09-20T02:01:08Z",
"updated_at": "2026-04-28T08:50:13Z",
"pushed_at": "2026-04-28T08:50:09Z",
"updated_at": "2026-04-28T16:09:59Z",
"pushed_at": "2026-04-28T16:09:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-36911.json
+2 -2
View File
@@ -294,8 +294,8 @@
"description": "🔍 Scan and research CVE-2025-36911 vulnerabilities with WPair, a specialized tool for Android built in Kotlin, ensuring your applications remain secure.",
"fork": false,
"created_at": "2026-01-29T01:59:47Z",
"updated_at": "2026-04-28T10:17:23Z",
"pushed_at": "2026-04-28T10:17:19Z",
"updated_at": "2026-04-28T17:47:35Z",
"pushed_at": "2026-04-28T17:47:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-48757.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Claude Skill that audits Supabase projects for RLS misconfigurations, exposed keys, auth bypasses, and storage vulnerabilities. 27 anti-patterns sourced from CVE-2025-48757 and 10 security studies. Safe for production.",
"fork": false,
"created_at": "2026-03-15T14:49:30Z",
"updated_at": "2026-04-28T09:02:56Z",
"updated_at": "2026-04-28T18:05:43Z",
"pushed_at": "2026-03-15T14:53:39Z",
"stargazers_count": 11,
"watchers_count": 11,
"stargazers_count": 12,
"watchers_count": 12,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -44,7 +44,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 11,
"watchers": 12,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-49113.json
+4 -4
View File
@@ -419,10 +419,10 @@
"description": "💥 Python Exploit for CVE-2025-49113 | Roundcube Webmail RCE via PHP Object Injection",
"fork": false,
"created_at": "2025-07-19T22:35:27Z",
"updated_at": "2026-04-24T18:40:19Z",
"updated_at": "2026-04-28T13:46:42Z",
"pushed_at": "2025-07-19T22:49:29Z",
"stargazers_count": 6,
"watchers_count": 6,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -433,7 +433,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 6,
"watchers": 7,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-49144.json
+2 -2
View File
@@ -251,8 +251,8 @@
"description": null,
"fork": false,
"created_at": "2025-09-19T17:17:19Z",
"updated_at": "2026-04-28T08:49:45Z",
"pushed_at": "2026-04-28T08:49:41Z",
"updated_at": "2026-04-28T16:09:41Z",
"pushed_at": "2026-04-28T16:09:37Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-49844.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.",
"fork": false,
"created_at": "2019-04-13T07:51:09Z",
"updated_at": "2026-04-28T09:12:07Z",
"pushed_at": "2026-04-28T09:12:02Z",
"updated_at": "2026-04-28T16:32:15Z",
"pushed_at": "2026-04-28T16:32:00Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
"fork": false,
"created_at": "2022-04-06T09:27:39Z",
"updated_at": "2026-04-28T09:13:06Z",
"pushed_at": "2026-04-28T09:13:02Z",
"updated_at": "2026-04-28T16:33:22Z",
"pushed_at": "2026-04-28T16:32:58Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-5419.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛡️ Analyze CVE-2025-5419 to exploit an uninitialized read vulnerability in V8 for arbitrary read\/write access within the sandbox environment.",
"fork": false,
"created_at": "2023-01-25T04:41:49Z",
"updated_at": "2026-04-28T10:26:32Z",
"pushed_at": "2026-04-28T10:26:28Z",
"updated_at": "2026-04-28T18:00:53Z",
"pushed_at": "2026-04-28T18:00:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-54253.json
+2 -2
View File
@@ -67,8 +67,8 @@
"description": "🐙 CVE-2025-54253 exploit demo for Adobe AEM Forms on JEE: OGNL injection to RCE with PoC, Python 3.10 exploit code, reproducer and mitigation guidance.",
"fork": false,
"created_at": "2025-08-17T22:04:33Z",
"updated_at": "2026-04-28T08:43:39Z",
"pushed_at": "2026-04-28T08:43:34Z",
"updated_at": "2026-04-28T16:02:54Z",
"pushed_at": "2026-04-28T16:02:49Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-54424.json
+2 -2
View File
@@ -53,8 +53,8 @@
"description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐",
"fork": false,
"created_at": "2025-08-14T05:16:16Z",
"updated_at": "2026-04-28T08:43:23Z",
"pushed_at": "2026-04-28T08:43:19Z",
"updated_at": "2026-04-28T16:02:23Z",
"pushed_at": "2026-04-28T16:02:18Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-55182.json
+44 -44
View File
@@ -14,8 +14,8 @@
"description": "🔍 Demonstrate CVE-2025-55182, a critical vulnerability in React Server Components allowing unauthenticated arbitrary code execution.",
"fork": false,
"created_at": "2021-09-18T02:04:33Z",
"updated_at": "2026-04-28T09:47:51Z",
"pushed_at": "2026-04-28T09:47:47Z",
"updated_at": "2026-04-28T17:09:18Z",
"pushed_at": "2026-04-28T17:09:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.",
"fork": false,
"created_at": "2022-06-17T10:19:10Z",
"updated_at": "2026-04-28T09:47:14Z",
"pushed_at": "2026-04-28T09:47:10Z",
"updated_at": "2026-04-28T17:08:37Z",
"pushed_at": "2026-04-28T17:08:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -151,8 +151,8 @@
"description": "🔍 Detect vulnerabilities CVE-2025-55182 and CVE-2025-66478 in Next.js apps with this reliable command-line scanner.",
"fork": false,
"created_at": "2023-11-27T18:17:43Z",
"updated_at": "2026-04-28T09:47:26Z",
"pushed_at": "2026-04-28T09:47:22Z",
"updated_at": "2026-04-28T17:08:57Z",
"pushed_at": "2026-04-28T17:08:41Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -203,8 +203,8 @@
"description": "🚨 Exploit CVE-2025-55182, a critical RCE vulnerability in React Server Components for Next.js apps; enables testing for prototype pollution risks.",
"fork": false,
"created_at": "2024-04-24T02:36:56Z",
"updated_at": "2026-04-28T09:48:47Z",
"pushed_at": "2026-04-28T09:48:43Z",
"updated_at": "2026-04-28T17:10:05Z",
"pushed_at": "2026-04-28T17:09:54Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -251,8 +251,8 @@
"description": "🚨 Exploit and scan for CVE-2025-55182, a critical React\/Next.js vulnerability enabling remote code execution through prototype pollution techniques.",
"fork": false,
"created_at": "2024-05-28T16:48:51Z",
"updated_at": "2026-04-28T09:46:58Z",
"pushed_at": "2026-04-28T09:46:54Z",
"updated_at": "2026-04-28T17:08:09Z",
"pushed_at": "2026-04-28T17:08:05Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -303,8 +303,8 @@
"description": null,
"fork": false,
"created_at": "2024-11-29T12:32:19Z",
"updated_at": "2026-04-28T09:48:10Z",
"pushed_at": "2026-04-28T09:48:05Z",
"updated_at": "2026-04-28T17:09:27Z",
"pushed_at": "2026-04-28T17:09:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -352,8 +352,8 @@
"description": "🛠️ Exploit CVE-2025-55182 effortlessly with this GUI tool for vulnerability detection, command execution, and Shell reverse connections.",
"fork": false,
"created_at": "2025-04-21T22:04:31Z",
"updated_at": "2026-04-28T09:51:47Z",
"pushed_at": "2026-04-28T09:51:42Z",
"updated_at": "2026-04-28T17:13:31Z",
"pushed_at": "2026-04-28T17:13:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -406,8 +406,8 @@
"description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
"fork": false,
"created_at": "2025-06-06T16:34:46Z",
"updated_at": "2026-04-28T09:47:37Z",
"pushed_at": "2026-04-28T09:47:33Z",
"updated_at": "2026-04-28T17:08:49Z",
"pushed_at": "2026-04-28T17:08:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -458,8 +458,8 @@
"description": "⚠️ Explore a vulnerable environment to test security scanners against the CVE-2025-55182 RCE flaw in React Server Components and Next.js applications.",
"fork": false,
"created_at": "2025-07-15T18:33:34Z",
"updated_at": "2026-04-28T09:48:42Z",
"pushed_at": "2026-04-28T09:48:38Z",
"updated_at": "2026-04-28T17:10:03Z",
"pushed_at": "2026-04-28T17:10:00Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1043,10 +1043,10 @@
"description": "a critical Remote Code Execution (RCE) vulnerability in React Server Components (RSC). It also includes a realistic \"Lab Environment\" to safely test and understand the vulnerability.",
"fork": false,
"created_at": "2025-12-04T02:46:54Z",
"updated_at": "2026-04-24T18:40:22Z",
"updated_at": "2026-04-28T13:46:47Z",
"pushed_at": "2026-02-28T23:41:05Z",
"stargazers_count": 19,
"watchers_count": 19,
"stargazers_count": 20,
"watchers_count": 20,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -1057,7 +1057,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 19,
"watchers": 20,
"score": 0,
"subscribers_count": 0
},
@@ -1247,10 +1247,10 @@
"description": "High Fidelity Detection Mechanism for RSC\/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)",
"fork": false,
"created_at": "2025-12-04T06:55:04Z",
"updated_at": "2026-04-24T18:40:22Z",
"updated_at": "2026-04-28T13:46:47Z",
"pushed_at": "2025-12-07T04:16:46Z",
"stargazers_count": 2437,
"watchers_count": 2437,
"stargazers_count": 2438,
"watchers_count": 2438,
"has_discussions": false,
"forks_count": 265,
"allow_forking": true,
@@ -1261,7 +1261,7 @@
"topics": [],
"visibility": "public",
"forks": 265,
"watchers": 2437,
"watchers": 2438,
"score": 0,
"subscribers_count": 13
},
@@ -2506,10 +2506,10 @@
"description": "Supports RSC fingerprinting and exploitation of the React component vulnerability CVE-2025-55182.",
"fork": false,
"created_at": "2025-12-05T05:53:25Z",
"updated_at": "2026-04-28T04:37:05Z",
"updated_at": "2026-04-28T13:59:11Z",
"pushed_at": "2025-12-05T08:11:16Z",
"stargazers_count": 566,
"watchers_count": 566,
"stargazers_count": 567,
"watchers_count": 567,
"has_discussions": false,
"forks_count": 87,
"allow_forking": true,
@@ -2520,7 +2520,7 @@
"topics": [],
"visibility": "public",
"forks": 87,
"watchers": 566,
"watchers": 567,
"score": 0,
"subscribers_count": 3
},
@@ -12284,8 +12284,8 @@
"description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.",
"fork": false,
"created_at": "2025-12-24T14:48:19Z",
"updated_at": "2026-04-28T09:47:30Z",
"pushed_at": "2026-04-28T09:47:27Z",
"updated_at": "2026-04-28T17:08:24Z",
"pushed_at": "2026-04-28T17:08:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12369,8 +12369,8 @@
"description": "🚨 Identify and address CVE-2025-55182, a critical React Server vulnerability allowing remote code execution without authentication.",
"fork": false,
"created_at": "2025-12-24T18:44:51Z",
"updated_at": "2026-04-28T09:46:19Z",
"pushed_at": "2026-04-28T09:46:15Z",
"updated_at": "2026-04-28T17:07:37Z",
"pushed_at": "2026-04-28T17:07:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12418,8 +12418,8 @@
"description": "🚨 Demonstrate CVE-2025-55182, a critical React vulnerability allowing remote code execution via prototype chain pollution in `[email protected]`.",
"fork": false,
"created_at": "2025-12-24T18:48:07Z",
"updated_at": "2026-04-28T09:46:26Z",
"pushed_at": "2026-04-28T09:46:22Z",
"updated_at": "2026-04-28T17:07:44Z",
"pushed_at": "2026-04-28T17:07:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12503,8 +12503,8 @@
"description": "🔍 Exploit CVE-2025-55182 in Next.js with this versatile tool for security research, featuring advanced payloads and WAF bypass techniques.",
"fork": false,
"created_at": "2025-12-25T19:28:28Z",
"updated_at": "2026-04-28T09:48:17Z",
"pushed_at": "2026-04-28T09:48:13Z",
"updated_at": "2026-04-28T17:09:38Z",
"pushed_at": "2026-04-28T17:09:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12705,8 +12705,8 @@
"description": "⚡ Discover and exploit CVE-2025-55182 with this PoC, offering reliable remote code execution tests for React Server Components in Next.js.",
"fork": false,
"created_at": "2025-12-26T22:26:55Z",
"updated_at": "2026-04-28T09:48:12Z",
"pushed_at": "2026-04-28T09:48:07Z",
"updated_at": "2026-04-28T17:09:32Z",
"pushed_at": "2026-04-28T17:09:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12975,8 +12975,8 @@
"description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
"fork": false,
"created_at": "2026-01-02T01:28:57Z",
"updated_at": "2026-04-28T09:53:52Z",
"pushed_at": "2026-04-28T09:53:47Z",
"updated_at": "2026-04-28T17:16:12Z",
"pushed_at": "2026-04-28T17:16:07Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -13496,8 +13496,8 @@
"description": "🔍 Exploit CVE-2025-55182 vulnerabilities in Next.js and React with this efficient framework for rapid testing and assessment.",
"fork": false,
"created_at": "2026-01-08T16:28:04Z",
"updated_at": "2026-04-28T10:00:14Z",
"pushed_at": "2026-04-28T10:00:06Z",
"updated_at": "2026-04-28T17:24:08Z",
"pushed_at": "2026-04-28T17:24:03Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-55184.json
+2 -2
View File
@@ -289,8 +289,8 @@
"description": "🛠️ Test and validate the CVE-2025-55184 vulnerability in React Server Components to enhance your application's security against denial-of-service attacks.",
"fork": false,
"created_at": "2026-01-02T05:04:03Z",
"updated_at": "2026-04-28T09:54:24Z",
"pushed_at": "2026-04-28T09:54:19Z",
"updated_at": "2026-04-28T17:16:48Z",
"pushed_at": "2026-04-28T17:16:43Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-27135.json → 2025/CVE-2025-56534.json
+12 -12
View File
@@ -1,21 +1,21 @@
[
{
"id": 1202529762,
"name": "nghttp2-cve-2026-27135-patch",
"full_name": "Zmo247\/nghttp2-cve-2026-27135-patch",
"id": 1223808373,
"name": "OpenNebula-CVE-2025-56534",
"full_name": "MarkArtamonov\/OpenNebula-CVE-2025-56534",
"owner": {
"login": "Zmo247",
"id": 185316561,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/185316561?v=4",
"html_url": "https:\/\/github.com\/Zmo247",
"login": "MarkArtamonov",
"id": 280090624,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/280090624?v=4",
"html_url": "https:\/\/github.com\/MarkArtamonov",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Zmo247\/nghttp2-cve-2026-27135-patch",
"description": "Community patch for CVE-2026-27135 (nghttp2) on Debian-based Docker images",
"html_url": "https:\/\/github.com\/MarkArtamonov\/OpenNebula-CVE-2025-56534",
"description": null,
"fork": false,
"created_at": "2026-04-06T05:47:13Z",
"updated_at": "2026-04-06T05:50:25Z",
"pushed_at": "2026-04-06T05:50:21Z",
"created_at": "2026-04-28T17:14:06Z",
"updated_at": "2026-04-28T18:42:05Z",
"pushed_at": "2026-04-28T18:13:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-56535.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1223836086,
"name": "OpenNebula-CVE-2025-56535",
"full_name": "MarkArtamonov\/OpenNebula-CVE-2025-56535",
"owner": {
"login": "MarkArtamonov",
"id": 280090624,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/280090624?v=4",
"html_url": "https:\/\/github.com\/MarkArtamonov",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/MarkArtamonov\/OpenNebula-CVE-2025-56535",
"description": null,
"fork": false,
"created_at": "2026-04-28T17:46:21Z",
"updated_at": "2026-04-28T18:14:12Z",
"pushed_at": "2026-04-28T18:14:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-56536.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1223844462,
"name": "OpenNebula-CVE-2025-56536",
"full_name": "MarkArtamonov\/OpenNebula-CVE-2025-56536",
"owner": {
"login": "MarkArtamonov",
"id": 280090624,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/280090624?v=4",
"html_url": "https:\/\/github.com\/MarkArtamonov",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/MarkArtamonov\/OpenNebula-CVE-2025-56536",
"description": null,
"fork": false,
"created_at": "2026-04-28T17:56:14Z",
"updated_at": "2026-04-28T18:14:32Z",
"pushed_at": "2026-04-28T18:14:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-56537.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1223853017,
"name": "OpenNebula-CVE-2025-56537",
"full_name": "MarkArtamonov\/OpenNebula-CVE-2025-56537",
"owner": {
"login": "MarkArtamonov",
"id": 280090624,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/280090624?v=4",
"html_url": "https:\/\/github.com\/MarkArtamonov",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/MarkArtamonov\/OpenNebula-CVE-2025-56537",
"description": null,
"fork": false,
"created_at": "2026-04-28T18:06:08Z",
"updated_at": "2026-04-28T18:14:41Z",
"pushed_at": "2026-04-28T18:14:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-58098.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "#exec cmd=... (CVE-2025-58098) argument injection",
"fork": false,
"created_at": "2026-01-12T08:47:12Z",
"updated_at": "2026-04-24T18:40:23Z",
"updated_at": "2026-04-28T13:46:48Z",
"pushed_at": "2026-01-12T11:24:47Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-59287.json
+2 -2
View File
@@ -200,8 +200,8 @@
"description": "🔍 Analyze WSUS deserialization behavior to enhance security, generate reports, and identify configuration weaknesses in your infrastructure.",
"fork": false,
"created_at": "2026-01-29T02:16:04Z",
"updated_at": "2026-04-28T10:17:25Z",
"pushed_at": "2026-04-28T10:17:21Z",
"updated_at": "2026-04-28T17:47:35Z",
"pushed_at": "2026-04-28T17:47:31Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-61882.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔍 Detect vulnerabilities CVE-2025-61882 and CVE-2025-61884 in Oracle E-Business Suite to help secure your systems from potential remote code execution threats.",
"fork": false,
"created_at": "2025-03-04T15:38:32Z",
"updated_at": "2026-04-28T09:10:22Z",
"pushed_at": "2026-04-28T09:10:18Z",
"updated_at": "2026-04-28T16:30:13Z",
"pushed_at": "2026-04-28T16:30:06Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-6554.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "🔍 Demonstrate and validate the `addressof` and `fakeobj` primitives in the V8 sandbox for advanced security research on CVE-2025-6554.",
"fork": false,
"created_at": "2025-08-10T21:07:43Z",
"updated_at": "2026-04-28T09:41:14Z",
"pushed_at": "2026-04-28T09:41:11Z",
"updated_at": "2026-04-28T17:02:19Z",
"pushed_at": "2026-04-28T17:02:15Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-66398.json
+2 -2
View File
@@ -64,8 +64,8 @@
"description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.",
"fork": false,
"created_at": "2026-03-23T09:09:21Z",
"updated_at": "2026-04-28T10:56:13Z",
"pushed_at": "2026-04-28T10:56:09Z",
"updated_at": "2026-04-28T18:39:37Z",
"pushed_at": "2026-04-28T18:39:33Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-66478.json
+6 -6
View File
@@ -14,8 +14,8 @@
"description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.",
"fork": false,
"created_at": "2025-10-01T07:40:09Z",
"updated_at": "2026-04-28T09:49:09Z",
"pushed_at": "2026-04-28T09:49:06Z",
"updated_at": "2026-04-28T17:10:33Z",
"pushed_at": "2026-04-28T17:10:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -129,10 +129,10 @@
"description": "A command-line scanner for batch detection of Next.js application versions and determining if they are affected by CVE-2025-66478 vulnerability.",
"fork": false,
"created_at": "2025-12-04T13:13:33Z",
"updated_at": "2026-04-25T22:17:10Z",
"updated_at": "2026-04-28T13:46:47Z",
"pushed_at": "2025-12-16T03:18:16Z",
"stargazers_count": 419,
"watchers_count": 419,
"stargazers_count": 420,
"watchers_count": 420,
"has_discussions": false,
"forks_count": 87,
"allow_forking": true,
@@ -148,7 +148,7 @@
],
"visibility": "public",
"forks": 87,
"watchers": 419,
"watchers": 420,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-68921.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.",
"fork": false,
"created_at": "2026-01-24T21:00:41Z",
"updated_at": "2026-04-28T10:14:00Z",
"pushed_at": "2026-04-28T10:13:57Z",
"updated_at": "2026-04-28T17:42:48Z",
"pushed_at": "2026-04-28T17:42:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-69600.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": null,
"fork": false,
"created_at": "2026-02-11T12:02:53Z",
"updated_at": "2026-04-22T19:49:35Z",
"pushed_at": "2026-04-22T19:49:31Z",
"updated_at": "2026-04-28T18:35:48Z",
"pushed_at": "2026-04-28T18:35:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-69985.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit CVE-2025-69985 to bypass authentication and execute remote commands on FUXA versions ≤ 1.2.8 via the \/api\/runscript endpoint.",
"fork": false,
"created_at": "2025-04-10T09:18:30Z",
"updated_at": "2026-04-28T10:42:08Z",
"pushed_at": "2026-04-28T10:42:04Z",
"updated_at": "2026-04-28T18:21:57Z",
"pushed_at": "2026-04-28T18:21:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-70795.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.",
"fork": false,
"created_at": "2024-04-20T04:18:24Z",
"updated_at": "2026-04-28T10:37:07Z",
"pushed_at": "2026-04-28T10:37:04Z",
"updated_at": "2026-04-28T18:15:10Z",
"pushed_at": "2026-04-28T18:15:05Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-8088.json
+2 -2
View File
@@ -838,8 +838,8 @@
"description": "🛠 Exploit CVE-2025-8088 with this Python tool to generate malicious WinRAR archives that ensure payload persistence in Windows startup folders.",
"fork": false,
"created_at": "2025-12-20T13:52:21Z",
"updated_at": "2026-04-28T09:42:45Z",
"pushed_at": "2026-04-28T09:42:41Z",
"updated_at": "2026-04-28T17:03:54Z",
"pushed_at": "2026-04-28T17:03:51Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-8110.json
+2 -2
View File
@@ -146,8 +146,8 @@
"description": "🔍 Detect improper symbolic link handling in Gogs' PutContents API, exposing local code execution risks for versions 0.13.3 and earlier.",
"fork": false,
"created_at": "2025-12-31T13:25:07Z",
"updated_at": "2026-04-28T09:53:19Z",
"pushed_at": "2026-04-28T09:53:15Z",
"updated_at": "2026-04-28T17:15:28Z",
"pushed_at": "2026-04-28T17:15:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-9074.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🚀 Exploit CVE-2025-9074 with this Docker escape framework, simplifying API vulnerabilities and enhancing security testing for developers and researchers.",
"fork": false,
"created_at": "2024-06-19T23:21:41Z",
"updated_at": "2026-04-28T09:55:04Z",
"pushed_at": "2026-04-28T09:55:00Z",
"updated_at": "2026-04-28T17:17:44Z",
"pushed_at": "2026-04-28T17:17:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-0828.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.",
"fork": false,
"created_at": "2024-04-20T04:18:24Z",
"updated_at": "2026-04-28T10:37:07Z",
"pushed_at": "2026-04-28T10:37:04Z",
"updated_at": "2026-04-28T18:15:10Z",
"pushed_at": "2026-04-28T18:15:05Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-1306.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1223767424,
"name": "CVE-2026-1306",
"full_name": "murrez\/CVE-2026-1306",
"owner": {
"login": "murrez",
"id": 50166320,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50166320?v=4",
"html_url": "https:\/\/github.com\/murrez",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/murrez\/CVE-2026-1306",
"description": "PoC list runner for CVE-2026-1306 (WordPress midi-Synth ≤1.1.0): fetches exposed midiSynth_nonce, POSTs export AJAX to drop files under sound\/. Authorized security testing only.",
"fork": false,
"created_at": "2026-04-28T16:27:13Z",
"updated_at": "2026-04-28T16:28:06Z",
"pushed_at": "2026-04-28T16:28:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-20131.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": null,
"fork": false,
"created_at": "2026-03-11T01:30:51Z",
"updated_at": "2026-04-14T16:28:39Z",
"updated_at": "2026-04-28T18:14:25Z",
"pushed_at": "2026-03-11T02:17:15Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-20841.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.",
"fork": false,
"created_at": "2024-09-22T12:19:06Z",
"updated_at": "2026-04-28T10:36:15Z",
"pushed_at": "2026-04-28T10:36:12Z",
"updated_at": "2026-04-28T18:13:56Z",
"pushed_at": "2026-04-28T18:13:52Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -412,8 +412,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.",
"fork": false,
"created_at": "2026-02-26T05:21:28Z",
"updated_at": "2026-04-28T10:35:10Z",
"pushed_at": "2026-04-28T10:35:07Z",
"updated_at": "2026-04-28T18:12:31Z",
"pushed_at": "2026-04-28T18:12:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-21636.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": null,
"fork": false,
"created_at": "2026-04-27T19:48:39Z",
"updated_at": "2026-04-27T19:48:47Z",
"pushed_at": "2026-04-27T19:48:43Z",
"updated_at": "2026-04-28T16:33:58Z",
"pushed_at": "2026-04-28T16:33:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-22747.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1223584035,
"name": "cve-2026-22747-lab",
"full_name": "F1n1Sh3r\/cve-2026-22747-lab",
"owner": {
"login": "F1n1Sh3r",
"id": 8713057,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8713057?v=4",
"html_url": "https:\/\/github.com\/F1n1Sh3r",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/F1n1Sh3r\/cve-2026-22747-lab",
"description": null,
"fork": false,
"created_at": "2026-04-28T13:11:38Z",
"updated_at": "2026-04-28T13:17:45Z",
"pushed_at": "2026-04-28T13:17:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-2406.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔍 Analyze and detect CVE-2026-2406 vulnerabilities in Telnet to enhance security and prevent unauthorized access with this professional research engine.",
"fork": false,
"created_at": "2025-04-16T07:20:12Z",
"updated_at": "2026-04-28T10:26:01Z",
"pushed_at": "2026-04-28T10:25:57Z",
"updated_at": "2026-04-28T17:59:57Z",
"pushed_at": "2026-04-28T17:59:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24061.json
+2 -2
View File
@@ -1553,8 +1553,8 @@
"description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.",
"fork": false,
"created_at": "2026-02-03T19:46:10Z",
"updated_at": "2026-04-28T10:22:18Z",
"pushed_at": "2026-04-28T10:22:14Z",
"updated_at": "2026-04-28T17:54:44Z",
"pushed_at": "2026-04-28T17:54:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24291.json
+2 -2
View File
@@ -80,8 +80,8 @@
"description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions",
"fork": false,
"created_at": "2026-03-26T04:38:27Z",
"updated_at": "2026-04-28T10:58:27Z",
"pushed_at": "2026-04-28T10:58:23Z",
"updated_at": "2026-04-28T18:42:18Z",
"pushed_at": "2026-04-28T18:42:15Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-2441.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.",
"fork": false,
"created_at": "2026-03-03T14:19:18Z",
"updated_at": "2026-04-28T10:39:01Z",
"pushed_at": "2026-04-28T10:38:58Z",
"updated_at": "2026-04-28T18:17:56Z",
"pushed_at": "2026-04-28T18:17:51Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-2472.json
+2 -2
View File
@@ -65,8 +65,8 @@
"description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.",
"fork": false,
"created_at": "2026-03-10T14:40:04Z",
"updated_at": "2026-04-28T10:44:54Z",
"pushed_at": "2026-04-28T10:44:51Z",
"updated_at": "2026-04-28T18:25:46Z",
"pushed_at": "2026-04-28T18:25:41Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-25643.json
+2 -2
View File
@@ -94,8 +94,8 @@
"description": "Exploit Frigate NVR ≤0.16.3 to execute commands remotely by abusing a configuration flaw without needing shell access or output capture.",
"fork": false,
"created_at": "2026-03-07T20:23:08Z",
"updated_at": "2026-04-28T10:43:33Z",
"pushed_at": "2026-04-28T10:43:29Z",
"updated_at": "2026-04-28T18:24:13Z",
"pushed_at": "2026-04-28T18:24:10Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-2991.json
+2 -2
View File
@@ -62,8 +62,8 @@
"description": "Explore a PoC for CVE-2026-2991, an auth bypass in KiviCare 4.1.2 and earlier via the patient social-login REST endpoint",
"fork": false,
"created_at": "2026-04-03T20:26:43Z",
"updated_at": "2026-04-28T11:03:06Z",
"pushed_at": "2026-04-28T11:03:02Z",
"updated_at": "2026-04-28T18:47:45Z",
"pushed_at": "2026-04-28T18:47:41Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-29923.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "A newly discovered vulnerable driver, pstrip64.sys (CVE-2026-29923) allows an unprivileged user to escalate privileges to SYSTEM via a crafted IOCTL request ",
"fork": false,
"created_at": "2026-04-10T12:48:55Z",
"updated_at": "2026-04-22T07:08:45Z",
"updated_at": "2026-04-28T14:54:06Z",
"pushed_at": "2026-04-11T13:56:20Z",
"stargazers_count": 19,
"watchers_count": 19,
"stargazers_count": 20,
"watchers_count": 20,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 19,
"watchers": 20,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-31802.json
+2 -2
View File
@@ -59,8 +59,8 @@
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"fork": false,
"created_at": "2026-03-28T20:49:46Z",
"updated_at": "2026-04-28T10:59:42Z",
"pushed_at": "2026-04-28T10:59:38Z",
"updated_at": "2026-04-28T18:44:09Z",
"pushed_at": "2026-04-28T18:44:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-33017.json
+8 -8
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-33017 - An unauthenticated remote code execution in Langflow <= 1.8.1 via Public Flow Build Endpoint",
"fork": false,
"created_at": "2026-03-21T08:11:08Z",
"updated_at": "2026-04-27T23:20:41Z",
"updated_at": "2026-04-28T18:12:26Z",
"pushed_at": "2026-03-22T07:13:04Z",
"stargazers_count": 8,
"watchers_count": 8,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 8,
"watchers": 7,
"score": 0,
"subscribers_count": 0
},
@@ -149,10 +149,10 @@
"description": "CVE-2026-33017: Unauthenticated RCE in Langflow",
"fork": false,
"created_at": "2026-03-27T07:15:07Z",
"updated_at": "2026-04-27T23:21:17Z",
"updated_at": "2026-04-28T18:09:42Z",
"pushed_at": "2026-03-27T12:48:46Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -163,7 +163,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 4,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-42167.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1223664453,
"name": "proftpd-CVE-2026-42167-poc",
"full_name": "ZeroPathAI\/proftpd-CVE-2026-42167-poc",
"owner": {
"login": "ZeroPathAI",
"id": 170791525,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/170791525?v=4",
"html_url": "https:\/\/github.com\/ZeroPathAI",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ZeroPathAI\/proftpd-CVE-2026-42167-poc",
"description": "POCs to demonstrate CVE-2026-42167 in ProFTPD",
"fork": false,
"created_at": "2026-04-28T14:35:46Z",
"updated_at": "2026-04-28T14:45:35Z",
"pushed_at": "2026-04-28T14:36:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-42208.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1223794703,
"name": "CVE-2026-42208_lab",
"full_name": "imjdl\/CVE-2026-42208_lab",
"owner": {
"login": "imjdl",
"id": 31382943,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/31382943?v=4",
"html_url": "https:\/\/github.com\/imjdl",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/imjdl\/CVE-2026-42208_lab",
"description": "CVE-2026-42208 lab",
"fork": false,
"created_at": "2026-04-28T16:57:53Z",
"updated_at": "2026-04-28T17:12:36Z",
"pushed_at": "2026-04-28T17:12:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-4631.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Cockpit: Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection",
"fork": false,
"created_at": "2026-04-18T20:30:02Z",
"updated_at": "2026-04-25T07:26:18Z",
"updated_at": "2026-04-28T15:19:46Z",
"pushed_at": "2026-04-18T22:04:47Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 7,
"watchers": 8,
"score": 0,
"subscribers_count": 1
}
README.md
+51 -13
View File
@@ -205,6 +205,13 @@
- [MehdiLeDeaut/CVE-2026-1281-Ivanti-EPMM-RCE](https://github.com/MehdiLeDeaut/CVE-2026-1281-Ivanti-EPMM-RCE)
- [YunfeiGE18/CVE-2026-1281-CVE-2026-1340-Ivanti-EPMM-RCE](https://github.com/YunfeiGE18/CVE-2026-1281-CVE-2026-1340-Ivanti-EPMM-RCE)
### CVE-2026-1306 (2026-02-14)
<code>The midi-Synth plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type and file extension validation in the 'export' AJAX action in all versions up to, and including, 1.1.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible granted the attacker can obtain a valid nonce. The nonce is exposed in frontend JavaScript making it trivially accessible to unauthenticated attackers.
</code>
- [murrez/CVE-2026-1306](https://github.com/murrez/CVE-2026-1306)
### CVE-2026-1312 (2026-02-03)
<code>An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.\n`.QuerySet.order_by()` is subject to SQL injection in column aliases containing periods when the same alias is, using a suitably crafted dictionary, with dictionary expansion, used in `FilteredRelation`.\nEarlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected.\nDjango would like to thank Solomon Kebede for reporting this issue.
@@ -1477,6 +1484,13 @@
- [n0n4m3x41/CVE-2026-22738-POC](https://github.com/n0n4m3x41/CVE-2026-22738-POC)
- [rockmelodies/CVE-2026-22738](https://github.com/rockmelodies/CVE-2026-22738)
### CVE-2026-22747 (2026-04-22)
<code>Vulnerability in Spring Spring Security. SubjectX500PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN values, which can lead to reading the wrong value for the username. In a carefully crafted certificate, this can lead to an attacker impersonating another user.\nThis issue affects Spring Security: from 7.0.0 through 7.0.4.
</code>
- [F1n1Sh3r/cve-2026-22747-lab](https://github.com/F1n1Sh3r/cve-2026-22747-lab)
### CVE-2026-22777 (2026-01-10)
<code>ComfyUI-Manager is an extension designed to enhance the usability of ComfyUI. Prior to versions 3.39.2 and 4.0.5, an attacker can inject special characters into HTTP query parameters to add arbitrary configuration values to the config.ini file. This can lead to security setting tampering or modification of application behavior. This issue has been patched in versions 3.39.2 and 4.0.5.
@@ -2452,13 +2466,6 @@
- [mbanyamer/CVE-2026-26988-LibreNMS-SQLi](https://github.com/mbanyamer/CVE-2026-26988-LibreNMS-SQLi)
### CVE-2026-27135 (2026-03-18)
<code>nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data when user facing public API `nghttp2_session_terminate_session` or `nghttp2_session_terminate_session2` is called by the application. They might be called internally by the library when it detects the situation that is subject to connection error. Due to the missing internal state validation, the library keeps reading the rest of the data after one of those APIs is called. Then receiving a malformed frame that causes FRAME_SIZE_ERROR causes assertion failure. nghttp2 v1.68.1 adds missing state validation to avoid assertion failure. No known workarounds are available.
</code>
- [Zmo247/nghttp2-cve-2026-27135-patch](https://github.com/Zmo247/nghttp2-cve-2026-27135-patch)
### CVE-2026-27174 (2026-02-18)
<code>MajorDoMo (aka Major Domestic Module) allows unauthenticated remote code execution via the admin panel's PHP console feature. An include order bug in modules/panel.class.php causes execution to continue past a redirect() call that lacks an exit statement, allowing unauthenticated requests to reach the ajax handler in inc_panel_ajax.php. The console handler within that file passes user-supplied input from GET parameters (via register_globals) directly to eval() without any authentication check. An attacker can execute arbitrary PHP code by sending a crafted GET request to /admin.php with ajax_panel, op, and command parameters.
@@ -2862,7 +2869,7 @@
### CVE-2026-29971 (2026-04-27)
<code>A reflected cross-site scripting (XSS) vulnerability exists in WebFileSys version 2.31.1. User-controlled input is reflected into HTML and JavaScript contexts without proper output encoding, allowing arbitrary JavaScript execution in the victim's browser.
<code>A reflected cross-site scripting (XSS) vulnerability exists in WebFileSys version before 2.32.0 and fixed in v.2.32.0. User-controlled input is reflected into HTML and JavaScript contexts without proper output encoding, allowing arbitrary JavaScript execution in the victim's browser via the ftpBackup functionality, authentication input handling, search functionality, and error message rendering components
</code>
- [tharunchidurala-cyber/BACkupCVE-2026-29971](https://github.com/tharunchidurala-cyber/BACkupCVE-2026-29971)
@@ -3876,6 +3883,12 @@
- [bartfroklage/cve-2026-41679](https://github.com/bartfroklage/cve-2026-41679)
### CVE-2026-42167
- [ZeroPathAI/proftpd-CVE-2026-42167-poc](https://github.com/ZeroPathAI/proftpd-CVE-2026-42167-poc)
### CVE-2026-42208
- [imjdl/CVE-2026-42208_lab](https://github.com/imjdl/CVE-2026-42208_lab)
## 2025
### CVE-2025-0054 (2025-02-11)
@@ -3986,7 +3999,7 @@
- [dhmosfunk/7-Zip-CVE-2025-0411-POC](https://github.com/dhmosfunk/7-Zip-CVE-2025-0411-POC)
- [iSee857/CVE-2025-0411-PoC](https://github.com/iSee857/CVE-2025-0411-PoC)
- [ishwardeepp/CVE-2025-0411-MoTW-PoC](https://github.com/ishwardeepp/CVE-2025-0411-MoTW-PoC)
- [t0x1nsec/7-Zip-CVE-2025-0411-POC](https://github.com/t0x1nsec/7-Zip-CVE-2025-0411-POC)
- [cesarbtakeda/7-Zip-CVE-2025-0411-POC](https://github.com/cesarbtakeda/7-Zip-CVE-2025-0411-POC)
- [betulssahin/CVE-2025-0411-7-Zip-Mark-of-the-Web-Bypass](https://github.com/betulssahin/CVE-2025-0411-7-Zip-Mark-of-the-Web-Bypass)
- [RustMacrosRecoil/7-Zip-CVE-2025-0411-POC](https://github.com/RustMacrosRecoil/7-Zip-CVE-2025-0411-POC)
@@ -7390,7 +7403,7 @@
- [ThemeHackers/CVE-2025-24071](https://github.com/ThemeHackers/CVE-2025-24071)
- [rubbxalc/CVE-2025-24071](https://github.com/rubbxalc/CVE-2025-24071)
- [Marcejr117/CVE-2025-24071_PoC](https://github.com/Marcejr117/CVE-2025-24071_PoC)
- [t0x1nsec/Windows-Explorer-CVE-2025-24071](https://github.com/t0x1nsec/Windows-Explorer-CVE-2025-24071)
- [cesarbtakeda/Windows-Explorer-CVE-2025-24071](https://github.com/cesarbtakeda/Windows-Explorer-CVE-2025-24071)
- [pswalia2u/CVE-2025-24071_POC](https://github.com/pswalia2u/CVE-2025-24071_POC)
- [f4dee-backup/CVE-2025-24071](https://github.com/f4dee-backup/CVE-2025-24071)
- [LOOKY243/CVE-2025-24071-PoC](https://github.com/LOOKY243/CVE-2025-24071-PoC)
@@ -12665,6 +12678,18 @@
- [HanTul/Kotaemon-CVE-2025-56526-56527-disclosure](https://github.com/HanTul/Kotaemon-CVE-2025-56526-56527-disclosure)
### CVE-2025-56534
- [MarkArtamonov/OpenNebula-CVE-2025-56534](https://github.com/MarkArtamonov/OpenNebula-CVE-2025-56534)
### CVE-2025-56535
- [MarkArtamonov/OpenNebula-CVE-2025-56535](https://github.com/MarkArtamonov/OpenNebula-CVE-2025-56535)
### CVE-2025-56536
- [MarkArtamonov/OpenNebula-CVE-2025-56536](https://github.com/MarkArtamonov/OpenNebula-CVE-2025-56536)
### CVE-2025-56537
- [MarkArtamonov/OpenNebula-CVE-2025-56537](https://github.com/MarkArtamonov/OpenNebula-CVE-2025-56537)
### CVE-2025-56605 (2026-02-26)
<code>A reflected Cross-Site Scripting (XSS) vulnerability exists in the register.php backend script of PuneethReddyHC Event Management System 1.0. The mobile POST parameter is improperly validated and echoed back in the HTTP response without sanitization, allowing an attacker to inject and execute arbitrary JavaScript code in the victim's browser.
@@ -14365,7 +14390,11 @@
- [kpatsakis/CVE-2025-67221](https://github.com/kpatsakis/CVE-2025-67221)
### CVE-2025-67223
### CVE-2025-67223 (2026-04-28)
<code>The Aranda File Server (AFS) component in Aranda Software Aranda Service Desk before 8.3.12 stores daily activity logs with predictable names in a publicly accessible directory, which allows unauthenticated remote attackers to obtain direct virtual paths of uploaded files and bypass access controls to download sensitive documents containing PII.
</code>
- [brandonperezlara/CVE-2025-67223](https://github.com/brandonperezlara/CVE-2025-67223)
### CVE-2025-67246 (2026-01-15)
@@ -22576,7 +22605,7 @@
### CVE-2024-38998
- [z3ldr1/PP_CVE-2024-38998](https://github.com/z3ldr1/PP_CVE-2024-38998)
- [t0x1nsec/PP_CVE-2024-38998](https://github.com/t0x1nsec/PP_CVE-2024-38998)
- [cesarbtakeda/PP_CVE-2024-38998](https://github.com/cesarbtakeda/PP_CVE-2024-38998)
### CVE-2024-39031 (2024-07-09)
@@ -33931,7 +33960,7 @@
### CVE-2023-45657 (2023-11-06)
<code>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in POSIMYTH Nexter allows SQL Injection.This issue affects Nexter: from n/a through 2.0.3.\n\n
<code>A vulnerability in posimyththemes Nexter nexter.This issue affects Nexter: from n/a through &lt;= 2.0.3.
</code>
- [RandomRobbieBF/CVE-2023-45657](https://github.com/RandomRobbieBF/CVE-2023-45657)
@@ -37539,6 +37568,7 @@
- [BearClaw96/CVE-2022-22963-Poc-Bearcules](https://github.com/BearClaw96/CVE-2022-22963-Poc-Bearcules)
- [jrbH4CK/CVE-2022-22963](https://github.com/jrbH4CK/CVE-2022-22963)
- [Shayz614/CVE-2022-22963](https://github.com/Shayz614/CVE-2022-22963)
- [teofoli-matteo/CVE-2022-22963---Software-Vulnerabilities](https://github.com/teofoli-matteo/CVE-2022-22963---Software-Vulnerabilities)
### CVE-2022-22965 (2022-04-01)
@@ -41140,6 +41170,13 @@
- [MaherAzzouzi/CVE-2022-37704](https://github.com/MaherAzzouzi/CVE-2022-37704)
### CVE-2022-37705 (2023-04-16)
<code>A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can acquire root privileges. The vulnerable component is the runtar SUID program, which is a wrapper to run /usr/bin/tar with specific arguments that are controllable by the attacker. This program mishandles the arguments passed to tar binary (it expects that the argument name and value are separated with a space; however, separating them with an equals sign is also supported),
</code>
- [MaherAzzouzi/CVE-2022-37705](https://github.com/MaherAzzouzi/CVE-2022-37705)
### CVE-2022-37706 (2022-12-25)
<code>enlightenment_sys in Enlightenment before 0.25.4 allows local users to gain privileges because it is setuid root, and the system library function mishandles pathnames that begin with a /dev/.. substring.
@@ -41313,6 +41350,7 @@
- [hluwa/cobaltstrike_swing_xss2rce](https://github.com/hluwa/cobaltstrike_swing_xss2rce)
- [4nth0ny1130/CVE-2022-39197-fix_patch](https://github.com/4nth0ny1130/CVE-2022-39197-fix_patch)
- [its-arun/CVE-2022-39197](https://github.com/its-arun/CVE-2022-39197)
- [TheCryingGame/CVE-2022-39197-RCE](https://github.com/TheCryingGame/CVE-2022-39197-RCE)
- [adeljck/CVE-2022-39197](https://github.com/adeljck/CVE-2022-39197)
- [xiao-zhu-zhu/pig_CS4.4](https://github.com/xiao-zhu-zhu/pig_CS4.4)
- [Romanc9/Gui-poc-test](https://github.com/Romanc9/Gui-poc-test)