From 49abaf42df8554bf54eef17d3e5beb38fdf9e051 Mon Sep 17 00:00:00 2001 From: motikan2010-bot Date: Wed, 29 Apr 2026 03:54:46 +0900 Subject: [PATCH] Auto Update 2026/04/28 18:54:46 --- 2014/CVE-2014-9495.json | 8 +- 2016/CVE-2016-15042.json | 4 +- 2016/CVE-2016-5195.json | 8 +- 2017/CVE-2017-1000486.json | 4 +- 2017/CVE-2017-5753.json | 2 +- 2018/CVE-2018-15473.json | 8 +- 2018/CVE-2018-9995.json | 8 +- 2019/CVE-2019-1040.json | 4 +- 2020/CVE-2020-0610.json | 4 +- 2020/CVE-2020-1472.json | 4 +- 2020/CVE-2020-15906.json | 8 +- 2021/CVE-2021-22555.json | 8 +- 2021/CVE-2021-33044.json | 4 +- 2021/CVE-2021-4034.json | 4 +- 2021/CVE-2021-44228.json | 4 +- 2022/CVE-2022-21999.json | 8 +- 2022/CVE-2022-22963.json | 33 +++++++ 2022/CVE-2022-25636.json | 8 +- 2022/CVE-2022-37705.json | 35 ++++++++ 2022/CVE-2022-38694.json | 8 +- 2022/CVE-2022-39197.json | 33 +++++++ 2023/CVE-2023-22809.json | 12 +-- 2023/CVE-2023-32434.json | 4 +- 2023/CVE-2023-39910.json | 4 +- 2023/CVE-2023-41772.json | 8 +- 2024/CVE-2024-0670.json | 4 +- 2024/CVE-2024-10924.json | 4 +- 2024/CVE-2024-23222.json | 4 +- 2024/CVE-2024-29988.json | 8 +- 2024/CVE-2024-30088.json | 4 +- 2024/CVE-2024-38998.json | 8 +- 2024/CVE-2024-44000.json | 8 +- 2024/CVE-2024-4577.json | 8 +- 2024/CVE-2024-49113.json | 8 +- 2024/CVE-2024-56348.json | 4 +- 2024/CVE-2024-56426.json | 2 +- 2024/CVE-2024-6387.json | 8 +- 2025/CVE-2025-0411.json | 8 +- 2025/CVE-2025-14847.json | 16 ++-- 2025/CVE-2025-2304.json | 4 +- 2025/CVE-2025-24071.json | 8 +- 2025/CVE-2025-24204.json | 4 +- 2025/CVE-2025-24257.json | 4 +- 2025/CVE-2025-26125.json | 8 +- 2025/CVE-2025-29927.json | 8 +- 2025/CVE-2025-31258.json | 4 +- 2025/CVE-2025-32463.json | 12 +-- 2025/CVE-2025-36911.json | 4 +- 2025/CVE-2025-48757.json | 8 +- 2025/CVE-2025-49113.json | 8 +- 2025/CVE-2025-49144.json | 4 +- 2025/CVE-2025-49844.json | 8 +- 2025/CVE-2025-5419.json | 4 +- 2025/CVE-2025-54253.json | 4 +- 2025/CVE-2025-54424.json | 4 +- 2025/CVE-2025-55182.json | 88 +++++++++---------- 2025/CVE-2025-55184.json | 4 +- .../CVE-2025-56534.json | 24 ++--- 2025/CVE-2025-56535.json | 35 ++++++++ 2025/CVE-2025-56536.json | 35 ++++++++ 2025/CVE-2025-56537.json | 35 ++++++++ 2025/CVE-2025-58098.json | 8 +- 2025/CVE-2025-59287.json | 4 +- 2025/CVE-2025-61882.json | 4 +- 2025/CVE-2025-6554.json | 4 +- 2025/CVE-2025-66398.json | 4 +- 2025/CVE-2025-66478.json | 12 +-- 2025/CVE-2025-68921.json | 4 +- 2025/CVE-2025-69600.json | 4 +- 2025/CVE-2025-69985.json | 4 +- 2025/CVE-2025-70795.json | 4 +- 2025/CVE-2025-8088.json | 4 +- 2025/CVE-2025-8110.json | 4 +- 2025/CVE-2025-9074.json | 4 +- 2026/CVE-2026-0828.json | 4 +- 2026/CVE-2026-1306.json | 35 ++++++++ 2026/CVE-2026-20131.json | 8 +- 2026/CVE-2026-20841.json | 8 +- 2026/CVE-2026-21636.json | 4 +- 2026/CVE-2026-22747.json | 35 ++++++++ 2026/CVE-2026-2406.json | 4 +- 2026/CVE-2026-24061.json | 4 +- 2026/CVE-2026-24291.json | 4 +- 2026/CVE-2026-2441.json | 4 +- 2026/CVE-2026-2472.json | 4 +- 2026/CVE-2026-25643.json | 4 +- 2026/CVE-2026-2991.json | 4 +- 2026/CVE-2026-29923.json | 8 +- 2026/CVE-2026-31802.json | 4 +- 2026/CVE-2026-33017.json | 16 ++-- 2026/CVE-2026-42167.json | 35 ++++++++ 2026/CVE-2026-42208.json | 35 ++++++++ 2026/CVE-2026-4631.json | 8 +- README.md | 64 +++++++++++--- 94 files changed, 693 insertions(+), 309 deletions(-) create mode 100644 2022/CVE-2022-37705.json rename 2026/CVE-2026-27135.json => 2025/CVE-2025-56534.json (51%) create mode 100644 2025/CVE-2025-56535.json create mode 100644 2025/CVE-2025-56536.json create mode 100644 2025/CVE-2025-56537.json create mode 100644 2026/CVE-2026-1306.json create mode 100644 2026/CVE-2026-22747.json create mode 100644 2026/CVE-2026-42167.json create mode 100644 2026/CVE-2026-42208.json diff --git a/2014/CVE-2014-9495.json b/2014/CVE-2014-9495.json index 68176523d4..7919f3f635 100644 --- a/2014/CVE-2014-9495.json +++ b/2014/CVE-2014-9495.json @@ -14,10 +14,10 @@ "description": "Security research project on fuzzing libpng with OSS-Fuzz. Includes seed corpus analysis, custom read\/write fuzzers, and a proof-of-concept exploit for CVE-2014-9495.", "fork": false, "created_at": "2025-10-25T19:55:42Z", - "updated_at": "2025-11-08T11:06:07Z", + "updated_at": "2026-04-28T12:28:13Z", "pushed_at": "2025-10-25T20:49:56Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2016/CVE-2016-15042.json b/2016/CVE-2016-15042.json index 94659a5e27..f17368c493 100644 --- a/2016/CVE-2016-15042.json +++ b/2016/CVE-2016-15042.json @@ -14,8 +14,8 @@ "description": "πŸ› οΈ Validate and demonstrate CVE-2016-15042 with a Dockerized lab for unauthenticated file uploads in WordPress file managers.", "fork": false, "created_at": "2023-10-23T05:54:10Z", - "updated_at": "2026-04-28T08:46:36Z", - "pushed_at": "2026-04-28T08:46:32Z", + "updated_at": "2026-04-28T16:06:13Z", + "pushed_at": "2026-04-28T16:06:05Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2016/CVE-2016-5195.json b/2016/CVE-2016-5195.json index 0fd12c8011..74c9bd9979 100644 --- a/2016/CVE-2016-5195.json +++ b/2016/CVE-2016-5195.json @@ -255,10 +255,10 @@ "description": "PoC for Dirty COW (CVE-2016-5195)", "fork": false, "created_at": "2016-10-22T15:25:34Z", - "updated_at": "2026-04-26T17:21:47Z", + "updated_at": "2026-04-28T13:06:17Z", "pushed_at": "2022-03-16T12:08:54Z", - "stargazers_count": 509, - "watchers_count": 509, + "stargazers_count": 510, + "watchers_count": 510, "has_discussions": false, "forks_count": 146, "allow_forking": true, @@ -269,7 +269,7 @@ "topics": [], "visibility": "public", "forks": 146, - "watchers": 509, + "watchers": 510, "score": 0, "subscribers_count": 19 }, diff --git a/2017/CVE-2017-1000486.json b/2017/CVE-2017-1000486.json index 2ddda3eaf4..74c2c110cb 100644 --- a/2017/CVE-2017-1000486.json +++ b/2017/CVE-2017-1000486.json @@ -143,10 +143,10 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/0xdsm\/pwnfaces", - "description": "πŸ˜› Golang project to exploit an EL Injection vulnerability (CVE-2017-1000486) that affects the Primefaces 5.X versions. This project supports SOCKS proxy to prioritize anonymity.", + "description": "exploit for CVE-2017-1000486 vulnerability with SOCKS proxy support", "fork": false, "created_at": "2022-09-09T23:09:40Z", - "updated_at": "2025-10-21T16:46:35Z", + "updated_at": "2026-04-28T15:46:05Z", "pushed_at": "2023-04-18T14:03:27Z", "stargazers_count": 18, "watchers_count": 18, diff --git a/2017/CVE-2017-5753.json b/2017/CVE-2017-5753.json index 2b414f2296..af64935f1d 100644 --- a/2017/CVE-2017-5753.json +++ b/2017/CVE-2017-5753.json @@ -36,7 +36,7 @@ "forks": 166, "watchers": 771, "score": 0, - "subscribers_count": 41 + "subscribers_count": 40 }, { "id": 116268310, diff --git a/2018/CVE-2018-15473.json b/2018/CVE-2018-15473.json index 658058a355..4a55961fed 100644 --- a/2018/CVE-2018-15473.json +++ b/2018/CVE-2018-15473.json @@ -1419,10 +1419,10 @@ "description": "A Python 3 reimplementation of the classic CVE-2018-15473 OpenSSH user enumeration exploit, extended with multi-threading, wordlist support, automatic vulnerability detection, and thread-safe exploit patching.", "fork": false, "created_at": "2026-03-25T20:00:29Z", - "updated_at": "2026-03-25T20:45:31Z", + "updated_at": "2026-04-28T16:36:20Z", "pushed_at": "2026-03-25T20:45:28Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -1433,7 +1433,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, diff --git a/2018/CVE-2018-9995.json b/2018/CVE-2018-9995.json index d7e724ca3b..b5bd20dc17 100644 --- a/2018/CVE-2018-9995.json +++ b/2018/CVE-2018-9995.json @@ -881,10 +881,10 @@ "description": "POC of CVE-2018-9995 written in Rust.", "fork": false, "created_at": "2025-10-28T15:30:18Z", - "updated_at": "2026-04-14T20:29:55Z", + "updated_at": "2026-04-28T14:03:14Z", "pushed_at": "2025-11-01T22:39:23Z", - "stargazers_count": 96, - "watchers_count": 96, + "stargazers_count": 97, + "watchers_count": 97, "has_discussions": false, "forks_count": 13, "allow_forking": true, @@ -895,7 +895,7 @@ "topics": [], "visibility": "public", "forks": 13, - "watchers": 96, + "watchers": 97, "score": 0, "subscribers_count": 1 } diff --git a/2019/CVE-2019-1040.json b/2019/CVE-2019-1040.json index 08b9380100..5d099125bc 100644 --- a/2019/CVE-2019-1040.json +++ b/2019/CVE-2019-1040.json @@ -179,8 +179,8 @@ "description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.", "fork": false, "created_at": "2025-12-06T19:56:12Z", - "updated_at": "2026-04-28T11:26:07Z", - "pushed_at": "2026-04-28T11:26:03Z", + "updated_at": "2026-04-28T17:19:56Z", + "pushed_at": "2026-04-28T17:19:50Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2020/CVE-2020-0610.json b/2020/CVE-2020-0610.json index 29a3af2081..4f0be34f74 100644 --- a/2020/CVE-2020-0610.json +++ b/2020/CVE-2020-0610.json @@ -58,8 +58,8 @@ "description": "πŸ” Create a safe lab environment for testing CVE-2020-0610, a critical RCE vulnerability in Windows RD Gateway, with minimal disruption using DTLS techniques.", "fork": false, "created_at": "2025-09-04T13:21:35Z", - "updated_at": "2026-04-28T04:59:40Z", - "pushed_at": "2026-04-28T04:59:36Z", + "updated_at": "2026-04-28T16:06:09Z", + "pushed_at": "2026-04-28T16:06:04Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2020/CVE-2020-1472.json b/2020/CVE-2020-1472.json index dc8a68b53c..609db249bd 100644 --- a/2020/CVE-2020-1472.json +++ b/2020/CVE-2020-1472.json @@ -2383,8 +2383,8 @@ "description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.", "fork": false, "created_at": "2025-12-06T10:17:38Z", - "updated_at": "2026-04-28T11:55:52Z", - "pushed_at": "2026-04-28T11:55:48Z", + "updated_at": "2026-04-28T17:19:52Z", + "pushed_at": "2026-04-28T17:19:48Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2020/CVE-2020-15906.json b/2020/CVE-2020-15906.json index 0b0d353a31..9536cd16b7 100644 --- a/2020/CVE-2020-15906.json +++ b/2020/CVE-2020-15906.json @@ -14,10 +14,10 @@ "description": "Writeup of CVE-2020-15906", "fork": false, "created_at": "2020-07-23T09:20:53Z", - "updated_at": "2026-04-26T17:21:39Z", + "updated_at": "2026-04-28T15:34:20Z", "pushed_at": "2020-10-26T22:01:33Z", - "stargazers_count": 51, - "watchers_count": 51, + "stargazers_count": 52, + "watchers_count": 52, "has_discussions": false, "forks_count": 11, "allow_forking": true, @@ -33,7 +33,7 @@ ], "visibility": "public", "forks": 11, - "watchers": 51, + "watchers": 52, "score": 0, "subscribers_count": 3 } diff --git a/2021/CVE-2021-22555.json b/2021/CVE-2021-22555.json index c38c9aefe8..d60fa0885e 100644 --- a/2021/CVE-2021-22555.json +++ b/2021/CVE-2021-22555.json @@ -146,10 +146,10 @@ "description": "CVE-2021-22555 exploit rewritten with pipe primitive", "fork": false, "created_at": "2022-04-05T06:35:25Z", - "updated_at": "2025-08-30T06:16:32Z", + "updated_at": "2026-04-28T16:29:49Z", "pushed_at": "2022-05-18T03:10:10Z", - "stargazers_count": 37, - "watchers_count": 37, + "stargazers_count": 38, + "watchers_count": 38, "has_discussions": false, "forks_count": 7, "allow_forking": true, @@ -160,7 +160,7 @@ "topics": [], "visibility": "public", "forks": 7, - "watchers": 37, + "watchers": 38, "score": 0, "subscribers_count": 2 }, diff --git a/2021/CVE-2021-33044.json b/2021/CVE-2021-33044.json index aa6ac3ad7f..a7e286945d 100644 --- a/2021/CVE-2021-33044.json +++ b/2021/CVE-2021-33044.json @@ -212,8 +212,8 @@ "description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.", "fork": false, "created_at": "2026-03-28T17:42:44Z", - "updated_at": "2026-04-28T11:25:21Z", - "pushed_at": "2026-04-28T11:25:17Z", + "updated_at": "2026-04-28T17:18:17Z", + "pushed_at": "2026-04-28T17:18:10Z", "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, diff --git a/2021/CVE-2021-4034.json b/2021/CVE-2021-4034.json index 67a1e530e1..ef63b19dc4 100644 --- a/2021/CVE-2021-4034.json +++ b/2021/CVE-2021-4034.json @@ -2050,8 +2050,8 @@ "description": "πŸš€ Enhance your penetration testing with PwnKit Helper, a simple tool for exploiting the CVE-2021-4034 vulnerability in pkexec for local privilege escalation.", "fork": false, "created_at": "2025-10-01T09:53:03Z", - "updated_at": "2026-04-28T08:54:37Z", - "pushed_at": "2026-04-28T08:54:33Z", + "updated_at": "2026-04-28T16:17:35Z", + "pushed_at": "2026-04-28T16:14:34Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2021/CVE-2021-44228.json b/2021/CVE-2021-44228.json index 24c8716f10..02436e1a60 100644 --- a/2021/CVE-2021-44228.json +++ b/2021/CVE-2021-44228.json @@ -408,7 +408,7 @@ "stargazers_count": 1142, "watchers_count": 1142, "has_discussions": false, - "forks_count": 552, + "forks_count": 551, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -418,7 +418,7 @@ "log4shell" ], "visibility": "public", - "forks": 552, + "forks": 551, "watchers": 1142, "score": 0, "subscribers_count": 21 diff --git a/2022/CVE-2022-21999.json b/2022/CVE-2022-21999.json index b7e034fbc7..733278badc 100644 --- a/2022/CVE-2022-21999.json +++ b/2022/CVE-2022-21999.json @@ -14,10 +14,10 @@ "description": "Exploit for CVE-2022-21999 - Windows Print Spooler Elevation of Privilege Vulnerability (LPE)", "fork": false, "created_at": "2022-02-08T17:25:44Z", - "updated_at": "2026-04-24T05:44:02Z", + "updated_at": "2026-04-28T18:22:58Z", "pushed_at": "2022-02-09T16:54:09Z", - "stargazers_count": 795, - "watchers_count": 795, + "stargazers_count": 796, + "watchers_count": 796, "has_discussions": false, "forks_count": 161, "allow_forking": true, @@ -31,7 +31,7 @@ ], "visibility": "public", "forks": 161, - "watchers": 795, + "watchers": 796, "score": 0, "subscribers_count": 14 } diff --git a/2022/CVE-2022-22963.json b/2022/CVE-2022-22963.json index 2c1a3665dc..eb1205d6e9 100644 --- a/2022/CVE-2022-22963.json +++ b/2022/CVE-2022-22963.json @@ -916,5 +916,38 @@ "watchers": 0, "score": 0, "subscribers_count": 1 + }, + { + "id": 1223653732, + "name": "CVE-2022-22963---Software-Vulnerabilities", + "full_name": "teofoli-matteo\/CVE-2022-22963---Software-Vulnerabilities", + "owner": { + "login": "teofoli-matteo", + "id": 114015283, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/114015283?v=4", + "html_url": "https:\/\/github.com\/teofoli-matteo", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/teofoli-matteo\/CVE-2022-22963---Software-Vulnerabilities", + "description": null, + "fork": false, + "created_at": "2026-04-28T14:25:12Z", + "updated_at": "2026-04-28T14:53:53Z", + "pushed_at": "2026-04-28T14:42:36Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2022/CVE-2022-25636.json b/2022/CVE-2022-25636.json index e54397d975..0eeb610193 100644 --- a/2022/CVE-2022-25636.json +++ b/2022/CVE-2022-25636.json @@ -14,10 +14,10 @@ "description": "CVE-2022-25636", "fork": false, "created_at": "2022-03-07T13:38:41Z", - "updated_at": "2026-03-23T04:09:49Z", + "updated_at": "2026-04-28T18:25:42Z", "pushed_at": "2022-03-07T17:18:19Z", - "stargazers_count": 437, - "watchers_count": 437, + "stargazers_count": 438, + "watchers_count": 438, "has_discussions": false, "forks_count": 83, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 83, - "watchers": 437, + "watchers": 438, "score": 0, "subscribers_count": 6 }, diff --git a/2022/CVE-2022-37705.json b/2022/CVE-2022-37705.json new file mode 100644 index 0000000000..35f5345737 --- /dev/null +++ b/2022/CVE-2022-37705.json @@ -0,0 +1,35 @@ +[ + { + "id": 556238627, + "name": "CVE-2022-37705", + "full_name": "MaherAzzouzi\/CVE-2022-37705", + "owner": { + "login": "MaherAzzouzi", + "id": 62230190, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62230190?v=4", + "html_url": "https:\/\/github.com\/MaherAzzouzi", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/MaherAzzouzi\/CVE-2022-37705", + "description": "Amanda 3.5.1 second LPE.", + "fork": false, + "created_at": "2022-10-23T11:48:36Z", + "updated_at": "2022-10-24T02:18:52Z", + "pushed_at": "2022-10-23T11:49:48Z", + "stargazers_count": 3, + "watchers_count": 3, + "has_discussions": false, + "forks_count": 1, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 1, + "watchers": 3, + "score": 0, + "subscribers_count": 1 + } +] \ No newline at end of file diff --git a/2022/CVE-2022-38694.json b/2022/CVE-2022-38694.json index 30ee1b02d0..5679f5c7f5 100644 --- a/2022/CVE-2022-38694.json +++ b/2022/CVE-2022-38694.json @@ -116,10 +116,10 @@ "description": "Free and Open-Source FRP Remover based on CVE-2022-38694", "fork": false, "created_at": "2026-02-10T19:40:42Z", - "updated_at": "2026-02-10T19:57:03Z", + "updated_at": "2026-04-28T17:24:39Z", "pushed_at": "2026-02-10T19:56:59Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -130,7 +130,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, diff --git a/2022/CVE-2022-39197.json b/2022/CVE-2022-39197.json index 896183f409..abb639aaae 100644 --- a/2022/CVE-2022-39197.json +++ b/2022/CVE-2022-39197.json @@ -370,6 +370,39 @@ "score": 0, "subscribers_count": 7 }, + { + "id": 555782036, + "name": "CVE-2022-39197-RCE", + "full_name": "TheCryingGame\/CVE-2022-39197-RCE", + "owner": { + "login": "TheCryingGame", + "id": 48227194, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48227194?v=4", + "html_url": "https:\/\/github.com\/TheCryingGame", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/TheCryingGame\/CVE-2022-39197-RCE", + "description": "CVE-2022-39197 RCE POC", + "fork": false, + "created_at": "2022-10-22T10:11:37Z", + "updated_at": "2024-05-20T14:01:29Z", + "pushed_at": "2022-10-22T11:13:59Z", + "stargazers_count": 13, + "watchers_count": 13, + "has_discussions": false, + "forks_count": 4, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 4, + "watchers": 13, + "score": 0, + "subscribers_count": 1 + }, { "id": 570245587, "name": "CVE-2022-39197", diff --git a/2023/CVE-2023-22809.json b/2023/CVE-2023-22809.json index 542c358be8..dd1dfa4d88 100644 --- a/2023/CVE-2023-22809.json +++ b/2023/CVE-2023-22809.json @@ -14,12 +14,12 @@ "description": "A script to automate privilege escalation with CVE-2023-22809 vulnerability", "fork": false, "created_at": "2023-01-21T15:19:23Z", - "updated_at": "2026-04-17T18:18:48Z", + "updated_at": "2026-04-28T13:08:10Z", "pushed_at": "2023-02-15T18:10:53Z", - "stargazers_count": 164, - "watchers_count": 164, + "stargazers_count": 165, + "watchers_count": 165, "has_discussions": false, - "forks_count": 35, + "forks_count": 36, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -36,8 +36,8 @@ "vulnerability" ], "visibility": "public", - "forks": 35, - "watchers": 164, + "forks": 36, + "watchers": 165, "score": 0, "subscribers_count": 2 }, diff --git a/2023/CVE-2023-32434.json b/2023/CVE-2023-32434.json index a8fb542f53..ad0766bbe8 100644 --- a/2023/CVE-2023-32434.json +++ b/2023/CVE-2023-32434.json @@ -47,8 +47,8 @@ "description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. πŸ™", "fork": false, "created_at": "2025-08-13T09:19:29Z", - "updated_at": "2026-04-28T08:42:21Z", - "pushed_at": "2026-04-28T08:42:17Z", + "updated_at": "2026-04-28T16:01:16Z", + "pushed_at": "2026-04-28T16:01:12Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2023/CVE-2023-39910.json b/2023/CVE-2023-39910.json index cc73490e72..f5f3d772cc 100644 --- a/2023/CVE-2023-39910.json +++ b/2023/CVE-2023-39910.json @@ -66,8 +66,8 @@ "description": "πŸ”’ Analyze the CVE-2023-39910 vulnerability in Libbitcoin Explorer to understand its impact on Bitcoin wallet security and protect your assets.", "fork": false, "created_at": "2026-01-07T14:24:08Z", - "updated_at": "2026-04-28T10:58:12Z", - "pushed_at": "2026-04-28T09:58:40Z", + "updated_at": "2026-04-28T17:22:20Z", + "pushed_at": "2026-04-28T17:22:15Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2023/CVE-2023-41772.json b/2023/CVE-2023-41772.json index 8c352e3633..03e6e2bab6 100644 --- a/2023/CVE-2023-41772.json +++ b/2023/CVE-2023-41772.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2023-12-19T11:21:12Z", - "updated_at": "2026-04-24T18:40:07Z", + "updated_at": "2026-04-28T13:46:24Z", "pushed_at": "2023-12-24T10:47:00Z", - "stargazers_count": 13, - "watchers_count": 13, + "stargazers_count": 14, + "watchers_count": 14, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 13, + "watchers": 14, "score": 0, "subscribers_count": 1 } diff --git a/2024/CVE-2024-0670.json b/2024/CVE-2024-0670.json index 3012d743af..e39b5d01eb 100644 --- a/2024/CVE-2024-0670.json +++ b/2024/CVE-2024-0670.json @@ -172,8 +172,8 @@ "description": "πŸ” Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.", "fork": false, "created_at": "2026-01-08T01:32:09Z", - "updated_at": "2026-04-28T09:59:14Z", - "pushed_at": "2026-04-28T09:59:09Z", + "updated_at": "2026-04-28T17:22:57Z", + "pushed_at": "2026-04-28T17:22:53Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-10924.json b/2024/CVE-2024-10924.json index 5a4198ef14..ebfa8f911e 100644 --- a/2024/CVE-2024-10924.json +++ b/2024/CVE-2024-10924.json @@ -124,7 +124,7 @@ "stargazers_count": 19, "watchers_count": 19, "has_discussions": false, - "forks_count": 16, + "forks_count": 17, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -141,7 +141,7 @@ "wordpress" ], "visibility": "public", - "forks": 16, + "forks": 17, "watchers": 19, "score": 0, "subscribers_count": 1 diff --git a/2024/CVE-2024-23222.json b/2024/CVE-2024-23222.json index 798973b818..6737fc60db 100644 --- a/2024/CVE-2024-23222.json +++ b/2024/CVE-2024-23222.json @@ -80,8 +80,8 @@ "description": "Analyze and deobfuscate the Coruna Exploit Kit (CVE-2024-23222) to enhance understanding and detection of related threats.", "fork": false, "created_at": "2026-03-15T16:36:07Z", - "updated_at": "2026-04-28T10:50:31Z", - "pushed_at": "2026-04-28T10:50:27Z", + "updated_at": "2026-04-28T18:32:39Z", + "pushed_at": "2026-04-28T18:32:36Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2024/CVE-2024-29988.json b/2024/CVE-2024-29988.json index 5d42cb3da3..b61649c583 100644 --- a/2024/CVE-2024-29988.json +++ b/2024/CVE-2024-29988.json @@ -14,10 +14,10 @@ "description": "Exploit for Microsoft SmartScreen malicious execution (april 2024)", "fork": false, "created_at": "2024-05-03T12:17:25Z", - "updated_at": "2026-04-24T18:40:08Z", + "updated_at": "2026-04-28T13:46:27Z", "pushed_at": "2024-05-03T12:57:49Z", - "stargazers_count": 6, - "watchers_count": 6, + "stargazers_count": 7, + "watchers_count": 7, "has_discussions": false, "forks_count": 8, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 8, - "watchers": 6, + "watchers": 7, "score": 0, "subscribers_count": 1 }, diff --git a/2024/CVE-2024-30088.json b/2024/CVE-2024-30088.json index b2403a7a04..46a3b3cd8a 100644 --- a/2024/CVE-2024-30088.json +++ b/2024/CVE-2024-30088.json @@ -245,8 +245,8 @@ "description": "Go offensive-security research library β€” 15+ injection methods, AMSI\/ETW\/ntdll-unhook evasion, sleep mask (Ekko Γ— XOR\/RC4\/AES), call-stack spoof, BYOVD (RTCore64) + kernel callback removal, LSASS dump + pure-Go MSV1_0 parser w\/ PPL bypass, recon (sandbox\/VM\/debugger\/dllhijack), PE ops (sRDI\/BOF\/CLR), Meterpreter C2, UAC bypass, CVE-2024-30088 LPE.", "fork": false, "created_at": "2026-04-01T08:15:08Z", - "updated_at": "2026-04-28T06:18:21Z", - "pushed_at": "2026-04-28T06:18:11Z", + "updated_at": "2026-04-28T14:39:55Z", + "pushed_at": "2026-04-28T14:29:26Z", "stargazers_count": 4, "watchers_count": 4, "has_discussions": true, diff --git a/2024/CVE-2024-38998.json b/2024/CVE-2024-38998.json index a8443ff50c..f490af2c1b 100644 --- a/2024/CVE-2024-38998.json +++ b/2024/CVE-2024-38998.json @@ -35,15 +35,15 @@ { "id": 913713750, "name": "PP_CVE-2024-38998", - "full_name": "t0x1nsec\/PP_CVE-2024-38998", + "full_name": "cesarbtakeda\/PP_CVE-2024-38998", "owner": { - "login": "t0x1nsec", + "login": "cesarbtakeda", "id": 114227831, "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/114227831?v=4", - "html_url": "https:\/\/github.com\/t0x1nsec", + "html_url": "https:\/\/github.com\/cesarbtakeda", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/t0x1nsec\/PP_CVE-2024-38998", + "html_url": "https:\/\/github.com\/cesarbtakeda\/PP_CVE-2024-38998", "description": null, "fork": false, "created_at": "2025-01-08T08:04:54Z", diff --git a/2024/CVE-2024-44000.json b/2024/CVE-2024-44000.json index 766f8a6b99..071a753951 100644 --- a/2024/CVE-2024-44000.json +++ b/2024/CVE-2024-44000.json @@ -14,10 +14,10 @@ "description": "CVE-2024-44000 is a vulnerability in the LiteSpeed Cache plugin, a popular WordPress plugin. This vulnerability affects session management in LiteSpeed Cache, allowing attackers to gain unauthorized access to sensitive data.", "fork": false, "created_at": "2024-09-06T03:38:13Z", - "updated_at": "2026-01-10T14:57:08Z", + "updated_at": "2026-04-28T15:51:49Z", "pushed_at": "2024-09-06T03:54:52Z", - "stargazers_count": 15, - "watchers_count": 15, + "stargazers_count": 16, + "watchers_count": 16, "has_discussions": false, "forks_count": 10, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 10, - "watchers": 15, + "watchers": 16, "score": 0, "subscribers_count": 1 }, diff --git a/2024/CVE-2024-4577.json b/2024/CVE-2024-4577.json index 8dcb756f54..9a35e1f21e 100644 --- a/2024/CVE-2024-4577.json +++ b/2024/CVE-2024-4577.json @@ -179,10 +179,10 @@ "description": "PHP CGI Argument Injection (CVE-2024-4577) Remote Code Execution PoC", "fork": false, "created_at": "2024-06-07T09:52:54Z", - "updated_at": "2026-04-24T18:40:09Z", + "updated_at": "2026-04-28T13:46:28Z", "pushed_at": "2024-06-22T15:13:52Z", - "stargazers_count": 311, - "watchers_count": 311, + "stargazers_count": 312, + "watchers_count": 312, "has_discussions": false, "forks_count": 65, "allow_forking": true, @@ -193,7 +193,7 @@ "topics": [], "visibility": "public", "forks": 65, - "watchers": 311, + "watchers": 312, "score": 0, "subscribers_count": 4 }, diff --git a/2024/CVE-2024-49113.json b/2024/CVE-2024-49113.json index 4d55bcb687..99d579a3bd 100644 --- a/2024/CVE-2024-49113.json +++ b/2024/CVE-2024-49113.json @@ -14,10 +14,10 @@ "description": "LdapNightmare is a PoC tool that tests a vulnerable Windows Server against CVE-2024-49113", "fork": false, "created_at": "2025-01-01T15:48:38Z", - "updated_at": "2026-03-15T23:59:21Z", + "updated_at": "2026-04-28T13:49:24Z", "pushed_at": "2025-01-02T16:07:23Z", - "stargazers_count": 515, - "watchers_count": 515, + "stargazers_count": 516, + "watchers_count": 516, "has_discussions": false, "forks_count": 119, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 119, - "watchers": 515, + "watchers": 516, "score": 0, "subscribers_count": 5 }, diff --git a/2024/CVE-2024-56348.json b/2024/CVE-2024-56348.json index ba0a773f5c..4d503aedde 100644 --- a/2024/CVE-2024-56348.json +++ b/2024/CVE-2024-56348.json @@ -14,8 +14,8 @@ "description": "Demonstrate an authentication bypass and remote code execution exploit targeting JetBrains TeamCity versions before 2024.12 via REST API abuse.", "fork": false, "created_at": "2025-09-17T01:48:09Z", - "updated_at": "2026-04-28T10:53:58Z", - "pushed_at": "2026-04-28T10:53:54Z", + "updated_at": "2026-04-28T18:37:05Z", + "pushed_at": "2026-04-28T18:37:00Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-56426.json b/2024/CVE-2024-56426.json index fc687394d4..bfde180eb1 100644 --- a/2024/CVE-2024-56426.json +++ b/2024/CVE-2024-56426.json @@ -15,7 +15,7 @@ "fork": false, "created_at": "2026-04-07T12:02:52Z", "updated_at": "2026-04-23T17:25:11Z", - "pushed_at": "2026-04-27T13:40:21Z", + "pushed_at": "2026-04-28T15:57:43Z", "stargazers_count": 6, "watchers_count": 6, "has_discussions": false, diff --git a/2024/CVE-2024-6387.json b/2024/CVE-2024-6387.json index 694cebc107..3204536a31 100644 --- a/2024/CVE-2024-6387.json +++ b/2024/CVE-2024-6387.json @@ -252,10 +252,10 @@ "description": "CVE-2024-6387_Check is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH", "fork": false, "created_at": "2024-07-01T20:33:20Z", - "updated_at": "2026-04-21T14:12:47Z", + "updated_at": "2026-04-28T16:32:38Z", "pushed_at": "2025-06-02T11:06:03Z", - "stargazers_count": 520, - "watchers_count": 520, + "stargazers_count": 521, + "watchers_count": 521, "has_discussions": false, "forks_count": 98, "allow_forking": true, @@ -272,7 +272,7 @@ ], "visibility": "public", "forks": 98, - "watchers": 520, + "watchers": 521, "score": 0, "subscribers_count": 6 }, diff --git a/2025/CVE-2025-0411.json b/2025/CVE-2025-0411.json index c8e61a0252..fab8c25879 100644 --- a/2025/CVE-2025-0411.json +++ b/2025/CVE-2025-0411.json @@ -108,15 +108,15 @@ { "id": 937428817, "name": "7-Zip-CVE-2025-0411-POC", - "full_name": "t0x1nsec\/7-Zip-CVE-2025-0411-POC", + "full_name": "cesarbtakeda\/7-Zip-CVE-2025-0411-POC", "owner": { - "login": "t0x1nsec", + "login": "cesarbtakeda", "id": 114227831, "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/114227831?v=4", - "html_url": "https:\/\/github.com\/t0x1nsec", + "html_url": "https:\/\/github.com\/cesarbtakeda", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/t0x1nsec\/7-Zip-CVE-2025-0411-POC", + "html_url": "https:\/\/github.com\/cesarbtakeda\/7-Zip-CVE-2025-0411-POC", "description": null, "fork": false, "created_at": "2025-02-23T02:55:44Z", diff --git a/2025/CVE-2025-14847.json b/2025/CVE-2025-14847.json index b79dc3812f..df0d2a66bf 100644 --- a/2025/CVE-2025-14847.json +++ b/2025/CVE-2025-14847.json @@ -14,8 +14,8 @@ "description": "πŸ›  Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.", "fork": false, "created_at": "2025-07-30T15:52:00Z", - "updated_at": "2026-04-28T10:05:31Z", - "pushed_at": "2026-04-28T10:05:26Z", + "updated_at": "2026-04-28T17:31:00Z", + "pushed_at": "2026-04-28T17:30:55Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -134,10 +134,10 @@ "description": "a critical memory disclosure vulnerability in MongoDB's zlib compression handling. This tool allows security researchers to extract sensitive data from vulnerable MongoDB instances.", "fork": false, "created_at": "2025-12-27T15:01:50Z", - "updated_at": "2026-03-09T10:39:01Z", + "updated_at": "2026-04-28T13:40:42Z", "pushed_at": "2025-12-27T17:50:59Z", - "stargazers_count": 28, - "watchers_count": 28, + "stargazers_count": 29, + "watchers_count": 29, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -148,7 +148,7 @@ "topics": [], "visibility": "public", "forks": 3, - "watchers": 28, + "watchers": 29, "score": 0, "subscribers_count": 0 }, @@ -1129,8 +1129,8 @@ "description": "πŸ” Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.", "fork": false, "created_at": "2026-01-14T06:05:44Z", - "updated_at": "2026-04-28T10:03:59Z", - "pushed_at": "2026-04-28T10:03:55Z", + "updated_at": "2026-04-28T17:29:13Z", + "pushed_at": "2026-04-28T17:29:08Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-2304.json b/2025/CVE-2025-2304.json index 756832a113..4d0ff5f7ee 100644 --- a/2025/CVE-2025-2304.json +++ b/2025/CVE-2025-2304.json @@ -412,8 +412,8 @@ "description": "πŸ› οΈ Exploit CVE-2025-2304 in Camaleon CMS easily with this Python script for privilege escalation, tested on version 2.9.0.", "fork": false, "created_at": "2026-02-14T20:01:20Z", - "updated_at": "2026-04-28T10:28:24Z", - "pushed_at": "2026-04-28T10:28:20Z", + "updated_at": "2026-04-28T18:03:29Z", + "pushed_at": "2026-04-28T18:03:25Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-24071.json b/2025/CVE-2025-24071.json index de6b708de5..869b7c13b2 100644 --- a/2025/CVE-2025-24071.json +++ b/2025/CVE-2025-24071.json @@ -247,15 +247,15 @@ { "id": 957167291, "name": "Windows-Explorer-CVE-2025-24071", - "full_name": "t0x1nsec\/Windows-Explorer-CVE-2025-24071", + "full_name": "cesarbtakeda\/Windows-Explorer-CVE-2025-24071", "owner": { - "login": "t0x1nsec", + "login": "cesarbtakeda", "id": 114227831, "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/114227831?v=4", - "html_url": "https:\/\/github.com\/t0x1nsec", + "html_url": "https:\/\/github.com\/cesarbtakeda", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/t0x1nsec\/Windows-Explorer-CVE-2025-24071", + "html_url": "https:\/\/github.com\/cesarbtakeda\/Windows-Explorer-CVE-2025-24071", "description": null, "fork": false, "created_at": "2025-03-29T18:00:29Z", diff --git a/2025/CVE-2025-24204.json b/2025/CVE-2025-24204.json index c6b0b9823b..b4412d462e 100644 --- a/2025/CVE-2025-24204.json +++ b/2025/CVE-2025-24204.json @@ -52,7 +52,7 @@ "stargazers_count": 127, "watchers_count": 127, "has_discussions": false, - "forks_count": 18, + "forks_count": 19, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,7 +60,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 18, + "forks": 19, "watchers": 127, "score": 0, "subscribers_count": 2 diff --git a/2025/CVE-2025-24257.json b/2025/CVE-2025-24257.json index 84f9801ca0..5084f7edce 100644 --- a/2025/CVE-2025-24257.json +++ b/2025/CVE-2025-24257.json @@ -14,8 +14,8 @@ "description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis", "fork": false, "created_at": "2026-04-04T03:42:55Z", - "updated_at": "2026-04-28T11:03:34Z", - "pushed_at": "2026-04-28T11:03:31Z", + "updated_at": "2026-04-28T18:48:09Z", + "pushed_at": "2026-04-28T18:48:05Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-26125.json b/2025/CVE-2025-26125.json index 2d0749db1a..e27fdc239c 100644 --- a/2025/CVE-2025-26125.json +++ b/2025/CVE-2025-26125.json @@ -14,10 +14,10 @@ "description": "( 0day ) Local Privilege Escalation in IObit Malware Fighter", "fork": false, "created_at": "2025-01-08T05:50:07Z", - "updated_at": "2026-04-24T18:40:14Z", + "updated_at": "2026-04-28T13:46:34Z", "pushed_at": "2025-03-30T00:44:12Z", - "stargazers_count": 171, - "watchers_count": 171, + "stargazers_count": 172, + "watchers_count": 172, "has_discussions": false, "forks_count": 24, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 24, - "watchers": 171, + "watchers": 172, "score": 0, "subscribers_count": 3 } diff --git a/2025/CVE-2025-29927.json b/2025/CVE-2025-29927.json index ea795faf48..805eb5a4d6 100644 --- a/2025/CVE-2025-29927.json +++ b/2025/CVE-2025-29927.json @@ -902,10 +902,10 @@ "description": "PoC for CVE-2025-29927: Next.js Middleware Bypass Vulnerability. Demonstrates how x-middleware-subrequest can bypass authentication checks. Includes Docker setup for testing.", "fork": false, "created_at": "2025-03-25T10:30:55Z", - "updated_at": "2025-11-09T13:53:31Z", + "updated_at": "2026-04-28T16:28:27Z", "pushed_at": "2025-03-25T10:38:24Z", - "stargazers_count": 4, - "watchers_count": 4, + "stargazers_count": 5, + "watchers_count": 5, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -916,7 +916,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 4, + "watchers": 5, "score": 0, "subscribers_count": 1 }, diff --git a/2025/CVE-2025-31258.json b/2025/CVE-2025-31258.json index 8f8f017a75..e21d9e9706 100644 --- a/2025/CVE-2025-31258.json +++ b/2025/CVE-2025-31258.json @@ -14,8 +14,8 @@ "description": "πŸ”“ Explore CVE-2025-31258 with this PoC demonstrating partial sandbox escape using RemoteViewServices for practical 1-day security practice.", "fork": false, "created_at": "2020-06-23T15:20:11Z", - "updated_at": "2026-04-28T08:48:36Z", - "pushed_at": "2026-04-28T08:48:31Z", + "updated_at": "2026-04-28T16:08:27Z", + "pushed_at": "2026-04-28T16:08:22Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-32463.json b/2025/CVE-2025-32463.json index 0ddc25e958..c0b28e6971 100644 --- a/2025/CVE-2025-32463.json +++ b/2025/CVE-2025-32463.json @@ -645,8 +645,8 @@ "description": "Demonstrate CVE-2025-32463 with this PoC for sudo's chroot feature. Explore the exploit and its impact on vulnerable sudo versions. πŸ±πŸ’»πŸ”’", "fork": false, "created_at": "2025-07-04T18:20:09Z", - "updated_at": "2026-04-28T12:46:48Z", - "pushed_at": "2026-04-28T12:46:44Z", + "updated_at": "2026-04-28T15:59:08Z", + "pushed_at": "2026-04-28T15:59:04Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -1628,8 +1628,8 @@ "description": "πŸ” Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.", "fork": false, "created_at": "2025-09-20T00:42:07Z", - "updated_at": "2026-04-28T08:49:52Z", - "pushed_at": "2026-04-28T08:49:48Z", + "updated_at": "2026-04-28T16:09:53Z", + "pushed_at": "2026-04-28T16:09:49Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -1680,8 +1680,8 @@ "description": null, "fork": false, "created_at": "2025-09-20T02:01:08Z", - "updated_at": "2026-04-28T08:50:13Z", - "pushed_at": "2026-04-28T08:50:09Z", + "updated_at": "2026-04-28T16:09:59Z", + "pushed_at": "2026-04-28T16:09:54Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-36911.json b/2025/CVE-2025-36911.json index 5f14450e27..bea42f3b91 100644 --- a/2025/CVE-2025-36911.json +++ b/2025/CVE-2025-36911.json @@ -294,8 +294,8 @@ "description": "πŸ” Scan and research CVE-2025-36911 vulnerabilities with WPair, a specialized tool for Android built in Kotlin, ensuring your applications remain secure.", "fork": false, "created_at": "2026-01-29T01:59:47Z", - "updated_at": "2026-04-28T10:17:23Z", - "pushed_at": "2026-04-28T10:17:19Z", + "updated_at": "2026-04-28T17:47:35Z", + "pushed_at": "2026-04-28T17:47:30Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-48757.json b/2025/CVE-2025-48757.json index 5e7e32ab1e..26b329173b 100644 --- a/2025/CVE-2025-48757.json +++ b/2025/CVE-2025-48757.json @@ -14,10 +14,10 @@ "description": "Claude Skill that audits Supabase projects for RLS misconfigurations, exposed keys, auth bypasses, and storage vulnerabilities. 27 anti-patterns sourced from CVE-2025-48757 and 10 security studies. Safe for production.", "fork": false, "created_at": "2026-03-15T14:49:30Z", - "updated_at": "2026-04-28T09:02:56Z", + "updated_at": "2026-04-28T18:05:43Z", "pushed_at": "2026-03-15T14:53:39Z", - "stargazers_count": 11, - "watchers_count": 11, + "stargazers_count": 12, + "watchers_count": 12, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -44,7 +44,7 @@ ], "visibility": "public", "forks": 1, - "watchers": 11, + "watchers": 12, "score": 0, "subscribers_count": 0 } diff --git a/2025/CVE-2025-49113.json b/2025/CVE-2025-49113.json index 5f7c3e0a38..08da8716dd 100644 --- a/2025/CVE-2025-49113.json +++ b/2025/CVE-2025-49113.json @@ -419,10 +419,10 @@ "description": "πŸ’₯ Python Exploit for CVE-2025-49113 | Roundcube Webmail RCE via PHP Object Injection", "fork": false, "created_at": "2025-07-19T22:35:27Z", - "updated_at": "2026-04-24T18:40:19Z", + "updated_at": "2026-04-28T13:46:42Z", "pushed_at": "2025-07-19T22:49:29Z", - "stargazers_count": 6, - "watchers_count": 6, + "stargazers_count": 7, + "watchers_count": 7, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -433,7 +433,7 @@ "topics": [], "visibility": "public", "forks": 6, - "watchers": 6, + "watchers": 7, "score": 0, "subscribers_count": 0 }, diff --git a/2025/CVE-2025-49144.json b/2025/CVE-2025-49144.json index e6a44a43de..54ecbd99e3 100644 --- a/2025/CVE-2025-49144.json +++ b/2025/CVE-2025-49144.json @@ -251,8 +251,8 @@ "description": null, "fork": false, "created_at": "2025-09-19T17:17:19Z", - "updated_at": "2026-04-28T08:49:45Z", - "pushed_at": "2026-04-28T08:49:41Z", + "updated_at": "2026-04-28T16:09:41Z", + "pushed_at": "2026-04-28T16:09:37Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-49844.json b/2025/CVE-2025-49844.json index 1e9bc06a16..7a973b61ec 100644 --- a/2025/CVE-2025-49844.json +++ b/2025/CVE-2025-49844.json @@ -14,8 +14,8 @@ "description": "πŸ” Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.", "fork": false, "created_at": "2019-04-13T07:51:09Z", - "updated_at": "2026-04-28T09:12:07Z", - "pushed_at": "2026-04-28T09:12:02Z", + "updated_at": "2026-04-28T16:32:15Z", + "pushed_at": "2026-04-28T16:32:00Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -66,8 +66,8 @@ "description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.", "fork": false, "created_at": "2022-04-06T09:27:39Z", - "updated_at": "2026-04-28T09:13:06Z", - "pushed_at": "2026-04-28T09:13:02Z", + "updated_at": "2026-04-28T16:33:22Z", + "pushed_at": "2026-04-28T16:32:58Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-5419.json b/2025/CVE-2025-5419.json index c3d361dd20..be8de7575d 100644 --- a/2025/CVE-2025-5419.json +++ b/2025/CVE-2025-5419.json @@ -14,8 +14,8 @@ "description": "πŸ›‘οΈ Analyze CVE-2025-5419 to exploit an uninitialized read vulnerability in V8 for arbitrary read\/write access within the sandbox environment.", "fork": false, "created_at": "2023-01-25T04:41:49Z", - "updated_at": "2026-04-28T10:26:32Z", - "pushed_at": "2026-04-28T10:26:28Z", + "updated_at": "2026-04-28T18:00:53Z", + "pushed_at": "2026-04-28T18:00:39Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-54253.json b/2025/CVE-2025-54253.json index 73f464288a..ad0f4fea11 100644 --- a/2025/CVE-2025-54253.json +++ b/2025/CVE-2025-54253.json @@ -67,8 +67,8 @@ "description": "πŸ™ CVE-2025-54253 exploit demo for Adobe AEM Forms on JEE: OGNL injection to RCE with PoC, Python 3.10 exploit code, reproducer and mitigation guidance.", "fork": false, "created_at": "2025-08-17T22:04:33Z", - "updated_at": "2026-04-28T08:43:39Z", - "pushed_at": "2026-04-28T08:43:34Z", + "updated_at": "2026-04-28T16:02:54Z", + "pushed_at": "2026-04-28T16:02:49Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2025/CVE-2025-54424.json b/2025/CVE-2025-54424.json index 78c0a8d033..36ad6d2889 100644 --- a/2025/CVE-2025-54424.json +++ b/2025/CVE-2025-54424.json @@ -53,8 +53,8 @@ "description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. πŸ”", "fork": false, "created_at": "2025-08-14T05:16:16Z", - "updated_at": "2026-04-28T08:43:23Z", - "pushed_at": "2026-04-28T08:43:19Z", + "updated_at": "2026-04-28T16:02:23Z", + "pushed_at": "2026-04-28T16:02:18Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2025/CVE-2025-55182.json b/2025/CVE-2025-55182.json index 7ea9846f77..373be7b1df 100644 --- a/2025/CVE-2025-55182.json +++ b/2025/CVE-2025-55182.json @@ -14,8 +14,8 @@ "description": "πŸ” Demonstrate CVE-2025-55182, a critical vulnerability in React Server Components allowing unauthenticated arbitrary code execution.", "fork": false, "created_at": "2021-09-18T02:04:33Z", - "updated_at": "2026-04-28T09:47:51Z", - "pushed_at": "2026-04-28T09:47:47Z", + "updated_at": "2026-04-28T17:09:18Z", + "pushed_at": "2026-04-28T17:09:12Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -66,8 +66,8 @@ "description": "πŸ” Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.", "fork": false, "created_at": "2022-06-17T10:19:10Z", - "updated_at": "2026-04-28T09:47:14Z", - "pushed_at": "2026-04-28T09:47:10Z", + "updated_at": "2026-04-28T17:08:37Z", + "pushed_at": "2026-04-28T17:08:33Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -151,8 +151,8 @@ "description": "πŸ” Detect vulnerabilities CVE-2025-55182 and CVE-2025-66478 in Next.js apps with this reliable command-line scanner.", "fork": false, "created_at": "2023-11-27T18:17:43Z", - "updated_at": "2026-04-28T09:47:26Z", - "pushed_at": "2026-04-28T09:47:22Z", + "updated_at": "2026-04-28T17:08:57Z", + "pushed_at": "2026-04-28T17:08:41Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -203,8 +203,8 @@ "description": "🚨 Exploit CVE-2025-55182, a critical RCE vulnerability in React Server Components for Next.js apps; enables testing for prototype pollution risks.", "fork": false, "created_at": "2024-04-24T02:36:56Z", - "updated_at": "2026-04-28T09:48:47Z", - "pushed_at": "2026-04-28T09:48:43Z", + "updated_at": "2026-04-28T17:10:05Z", + "pushed_at": "2026-04-28T17:09:54Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -251,8 +251,8 @@ "description": "🚨 Exploit and scan for CVE-2025-55182, a critical React\/Next.js vulnerability enabling remote code execution through prototype pollution techniques.", "fork": false, "created_at": "2024-05-28T16:48:51Z", - "updated_at": "2026-04-28T09:46:58Z", - "pushed_at": "2026-04-28T09:46:54Z", + "updated_at": "2026-04-28T17:08:09Z", + "pushed_at": "2026-04-28T17:08:05Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -303,8 +303,8 @@ "description": null, "fork": false, "created_at": "2024-11-29T12:32:19Z", - "updated_at": "2026-04-28T09:48:10Z", - "pushed_at": "2026-04-28T09:48:05Z", + "updated_at": "2026-04-28T17:09:27Z", + "pushed_at": "2026-04-28T17:09:23Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -352,8 +352,8 @@ "description": "πŸ› οΈ Exploit CVE-2025-55182 effortlessly with this GUI tool for vulnerability detection, command execution, and Shell reverse connections.", "fork": false, "created_at": "2025-04-21T22:04:31Z", - "updated_at": "2026-04-28T09:51:47Z", - "pushed_at": "2026-04-28T09:51:42Z", + "updated_at": "2026-04-28T17:13:31Z", + "pushed_at": "2026-04-28T17:13:26Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -406,8 +406,8 @@ "description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.", "fork": false, "created_at": "2025-06-06T16:34:46Z", - "updated_at": "2026-04-28T09:47:37Z", - "pushed_at": "2026-04-28T09:47:33Z", + "updated_at": "2026-04-28T17:08:49Z", + "pushed_at": "2026-04-28T17:08:45Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -458,8 +458,8 @@ "description": "⚠️ Explore a vulnerable environment to test security scanners against the CVE-2025-55182 RCE flaw in React Server Components and Next.js applications.", "fork": false, "created_at": "2025-07-15T18:33:34Z", - "updated_at": "2026-04-28T09:48:42Z", - "pushed_at": "2026-04-28T09:48:38Z", + "updated_at": "2026-04-28T17:10:03Z", + "pushed_at": "2026-04-28T17:10:00Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -1043,10 +1043,10 @@ "description": "a critical Remote Code Execution (RCE) vulnerability in React Server Components (RSC). It also includes a realistic \"Lab Environment\" to safely test and understand the vulnerability.", "fork": false, "created_at": "2025-12-04T02:46:54Z", - "updated_at": "2026-04-24T18:40:22Z", + "updated_at": "2026-04-28T13:46:47Z", "pushed_at": "2026-02-28T23:41:05Z", - "stargazers_count": 19, - "watchers_count": 19, + "stargazers_count": 20, + "watchers_count": 20, "has_discussions": false, "forks_count": 8, "allow_forking": true, @@ -1057,7 +1057,7 @@ "topics": [], "visibility": "public", "forks": 8, - "watchers": 19, + "watchers": 20, "score": 0, "subscribers_count": 0 }, @@ -1247,10 +1247,10 @@ "description": "High Fidelity Detection Mechanism for RSC\/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)", "fork": false, "created_at": "2025-12-04T06:55:04Z", - "updated_at": "2026-04-24T18:40:22Z", + "updated_at": "2026-04-28T13:46:47Z", "pushed_at": "2025-12-07T04:16:46Z", - "stargazers_count": 2437, - "watchers_count": 2437, + "stargazers_count": 2438, + "watchers_count": 2438, "has_discussions": false, "forks_count": 265, "allow_forking": true, @@ -1261,7 +1261,7 @@ "topics": [], "visibility": "public", "forks": 265, - "watchers": 2437, + "watchers": 2438, "score": 0, "subscribers_count": 13 }, @@ -2506,10 +2506,10 @@ "description": "Supports RSC fingerprinting and exploitation of the React component vulnerability CVE-2025-55182.", "fork": false, "created_at": "2025-12-05T05:53:25Z", - "updated_at": "2026-04-28T04:37:05Z", + "updated_at": "2026-04-28T13:59:11Z", "pushed_at": "2025-12-05T08:11:16Z", - "stargazers_count": 566, - "watchers_count": 566, + "stargazers_count": 567, + "watchers_count": 567, "has_discussions": false, "forks_count": 87, "allow_forking": true, @@ -2520,7 +2520,7 @@ "topics": [], "visibility": "public", "forks": 87, - "watchers": 566, + "watchers": 567, "score": 0, "subscribers_count": 3 }, @@ -12284,8 +12284,8 @@ "description": "πŸ›‘οΈ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.", "fork": false, "created_at": "2025-12-24T14:48:19Z", - "updated_at": "2026-04-28T09:47:30Z", - "pushed_at": "2026-04-28T09:47:27Z", + "updated_at": "2026-04-28T17:08:24Z", + "pushed_at": "2026-04-28T17:08:20Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -12369,8 +12369,8 @@ "description": "🚨 Identify and address CVE-2025-55182, a critical React Server vulnerability allowing remote code execution without authentication.", "fork": false, "created_at": "2025-12-24T18:44:51Z", - "updated_at": "2026-04-28T09:46:19Z", - "pushed_at": "2026-04-28T09:46:15Z", + "updated_at": "2026-04-28T17:07:37Z", + "pushed_at": "2026-04-28T17:07:33Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -12418,8 +12418,8 @@ "description": "🚨 Demonstrate CVE-2025-55182, a critical React vulnerability allowing remote code execution via prototype chain pollution in `react-server-dom-webpack@19.0.0`.", "fork": false, "created_at": "2025-12-24T18:48:07Z", - "updated_at": "2026-04-28T09:46:26Z", - "pushed_at": "2026-04-28T09:46:22Z", + "updated_at": "2026-04-28T17:07:44Z", + "pushed_at": "2026-04-28T17:07:40Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -12503,8 +12503,8 @@ "description": "πŸ” Exploit CVE-2025-55182 in Next.js with this versatile tool for security research, featuring advanced payloads and WAF bypass techniques.", "fork": false, "created_at": "2025-12-25T19:28:28Z", - "updated_at": "2026-04-28T09:48:17Z", - "pushed_at": "2026-04-28T09:48:13Z", + "updated_at": "2026-04-28T17:09:38Z", + "pushed_at": "2026-04-28T17:09:22Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -12705,8 +12705,8 @@ "description": "⚑ Discover and exploit CVE-2025-55182 with this PoC, offering reliable remote code execution tests for React Server Components in Next.js.", "fork": false, "created_at": "2025-12-26T22:26:55Z", - "updated_at": "2026-04-28T09:48:12Z", - "pushed_at": "2026-04-28T09:48:07Z", + "updated_at": "2026-04-28T17:09:32Z", + "pushed_at": "2026-04-28T17:09:28Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -12975,8 +12975,8 @@ "description": "πŸ›‘οΈ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.", "fork": false, "created_at": "2026-01-02T01:28:57Z", - "updated_at": "2026-04-28T09:53:52Z", - "pushed_at": "2026-04-28T09:53:47Z", + "updated_at": "2026-04-28T17:16:12Z", + "pushed_at": "2026-04-28T17:16:07Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -13496,8 +13496,8 @@ "description": "πŸ” Exploit CVE-2025-55182 vulnerabilities in Next.js and React with this efficient framework for rapid testing and assessment.", "fork": false, "created_at": "2026-01-08T16:28:04Z", - "updated_at": "2026-04-28T10:00:14Z", - "pushed_at": "2026-04-28T10:00:06Z", + "updated_at": "2026-04-28T17:24:08Z", + "pushed_at": "2026-04-28T17:24:03Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-55184.json b/2025/CVE-2025-55184.json index a0cb8862e8..8e3af33a96 100644 --- a/2025/CVE-2025-55184.json +++ b/2025/CVE-2025-55184.json @@ -289,8 +289,8 @@ "description": "πŸ› οΈ Test and validate the CVE-2025-55184 vulnerability in React Server Components to enhance your application's security against denial-of-service attacks.", "fork": false, "created_at": "2026-01-02T05:04:03Z", - "updated_at": "2026-04-28T09:54:24Z", - "pushed_at": "2026-04-28T09:54:19Z", + "updated_at": "2026-04-28T17:16:48Z", + "pushed_at": "2026-04-28T17:16:43Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2026/CVE-2026-27135.json b/2025/CVE-2025-56534.json similarity index 51% rename from 2026/CVE-2026-27135.json rename to 2025/CVE-2025-56534.json index 3cc64b6d79..7a8799fad4 100644 --- a/2026/CVE-2026-27135.json +++ b/2025/CVE-2025-56534.json @@ -1,21 +1,21 @@ [ { - "id": 1202529762, - "name": "nghttp2-cve-2026-27135-patch", - "full_name": "Zmo247\/nghttp2-cve-2026-27135-patch", + "id": 1223808373, + "name": "OpenNebula-CVE-2025-56534", + "full_name": "MarkArtamonov\/OpenNebula-CVE-2025-56534", "owner": { - "login": "Zmo247", - "id": 185316561, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/185316561?v=4", - "html_url": "https:\/\/github.com\/Zmo247", + "login": "MarkArtamonov", + "id": 280090624, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/280090624?v=4", + "html_url": "https:\/\/github.com\/MarkArtamonov", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/Zmo247\/nghttp2-cve-2026-27135-patch", - "description": "Community patch for CVE-2026-27135 (nghttp2) on Debian-based Docker images", + "html_url": "https:\/\/github.com\/MarkArtamonov\/OpenNebula-CVE-2025-56534", + "description": null, "fork": false, - "created_at": "2026-04-06T05:47:13Z", - "updated_at": "2026-04-06T05:50:25Z", - "pushed_at": "2026-04-06T05:50:21Z", + "created_at": "2026-04-28T17:14:06Z", + "updated_at": "2026-04-28T18:42:05Z", + "pushed_at": "2026-04-28T18:13:44Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-56535.json b/2025/CVE-2025-56535.json new file mode 100644 index 0000000000..c2738b1254 --- /dev/null +++ b/2025/CVE-2025-56535.json @@ -0,0 +1,35 @@ +[ + { + "id": 1223836086, + "name": "OpenNebula-CVE-2025-56535", + "full_name": "MarkArtamonov\/OpenNebula-CVE-2025-56535", + "owner": { + "login": "MarkArtamonov", + "id": 280090624, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/280090624?v=4", + "html_url": "https:\/\/github.com\/MarkArtamonov", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/MarkArtamonov\/OpenNebula-CVE-2025-56535", + "description": null, + "fork": false, + "created_at": "2026-04-28T17:46:21Z", + "updated_at": "2026-04-28T18:14:12Z", + "pushed_at": "2026-04-28T18:14:08Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2025/CVE-2025-56536.json b/2025/CVE-2025-56536.json new file mode 100644 index 0000000000..ec04134dca --- /dev/null +++ b/2025/CVE-2025-56536.json @@ -0,0 +1,35 @@ +[ + { + "id": 1223844462, + "name": "OpenNebula-CVE-2025-56536", + "full_name": "MarkArtamonov\/OpenNebula-CVE-2025-56536", + "owner": { + "login": "MarkArtamonov", + "id": 280090624, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/280090624?v=4", + "html_url": "https:\/\/github.com\/MarkArtamonov", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/MarkArtamonov\/OpenNebula-CVE-2025-56536", + "description": null, + "fork": false, + "created_at": "2026-04-28T17:56:14Z", + "updated_at": "2026-04-28T18:14:32Z", + "pushed_at": "2026-04-28T18:14:27Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2025/CVE-2025-56537.json b/2025/CVE-2025-56537.json new file mode 100644 index 0000000000..fd0db0ebdf --- /dev/null +++ b/2025/CVE-2025-56537.json @@ -0,0 +1,35 @@ +[ + { + "id": 1223853017, + "name": "OpenNebula-CVE-2025-56537", + "full_name": "MarkArtamonov\/OpenNebula-CVE-2025-56537", + "owner": { + "login": "MarkArtamonov", + "id": 280090624, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/280090624?v=4", + "html_url": "https:\/\/github.com\/MarkArtamonov", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/MarkArtamonov\/OpenNebula-CVE-2025-56537", + "description": null, + "fork": false, + "created_at": "2026-04-28T18:06:08Z", + "updated_at": "2026-04-28T18:14:41Z", + "pushed_at": "2026-04-28T18:14:37Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2025/CVE-2025-58098.json b/2025/CVE-2025-58098.json index d8f933bf24..6a33150fc9 100644 --- a/2025/CVE-2025-58098.json +++ b/2025/CVE-2025-58098.json @@ -14,10 +14,10 @@ "description": "#exec cmd=... (CVE-2025-58098) argument injection", "fork": false, "created_at": "2026-01-12T08:47:12Z", - "updated_at": "2026-04-24T18:40:23Z", + "updated_at": "2026-04-28T13:46:48Z", "pushed_at": "2026-01-12T11:24:47Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 } diff --git a/2025/CVE-2025-59287.json b/2025/CVE-2025-59287.json index 2a0141a11d..eb7a59f3b2 100644 --- a/2025/CVE-2025-59287.json +++ b/2025/CVE-2025-59287.json @@ -200,8 +200,8 @@ "description": "πŸ” Analyze WSUS deserialization behavior to enhance security, generate reports, and identify configuration weaknesses in your infrastructure.", "fork": false, "created_at": "2026-01-29T02:16:04Z", - "updated_at": "2026-04-28T10:17:25Z", - "pushed_at": "2026-04-28T10:17:21Z", + "updated_at": "2026-04-28T17:47:35Z", + "pushed_at": "2026-04-28T17:47:31Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-61882.json b/2025/CVE-2025-61882.json index f1e3918fa9..e1e89999c5 100644 --- a/2025/CVE-2025-61882.json +++ b/2025/CVE-2025-61882.json @@ -14,8 +14,8 @@ "description": "πŸ” Detect vulnerabilities CVE-2025-61882 and CVE-2025-61884 in Oracle E-Business Suite to help secure your systems from potential remote code execution threats.", "fork": false, "created_at": "2025-03-04T15:38:32Z", - "updated_at": "2026-04-28T09:10:22Z", - "pushed_at": "2026-04-28T09:10:18Z", + "updated_at": "2026-04-28T16:30:13Z", + "pushed_at": "2026-04-28T16:30:06Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-6554.json b/2025/CVE-2025-6554.json index e44563bfc3..ea46aa9997 100644 --- a/2025/CVE-2025-6554.json +++ b/2025/CVE-2025-6554.json @@ -179,8 +179,8 @@ "description": "πŸ” Demonstrate and validate the `addressof` and `fakeobj` primitives in the V8 sandbox for advanced security research on CVE-2025-6554.", "fork": false, "created_at": "2025-08-10T21:07:43Z", - "updated_at": "2026-04-28T09:41:14Z", - "pushed_at": "2026-04-28T09:41:11Z", + "updated_at": "2026-04-28T17:02:19Z", + "pushed_at": "2026-04-28T17:02:15Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-66398.json b/2025/CVE-2025-66398.json index 7884f52b3b..305de4ecf5 100644 --- a/2025/CVE-2025-66398.json +++ b/2025/CVE-2025-66398.json @@ -64,8 +64,8 @@ "description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.", "fork": false, "created_at": "2026-03-23T09:09:21Z", - "updated_at": "2026-04-28T10:56:13Z", - "pushed_at": "2026-04-28T10:56:09Z", + "updated_at": "2026-04-28T18:39:37Z", + "pushed_at": "2026-04-28T18:39:33Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-66478.json b/2025/CVE-2025-66478.json index d71b540971..bc9461594c 100644 --- a/2025/CVE-2025-66478.json +++ b/2025/CVE-2025-66478.json @@ -14,8 +14,8 @@ "description": "πŸ”§ Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.", "fork": false, "created_at": "2025-10-01T07:40:09Z", - "updated_at": "2026-04-28T09:49:09Z", - "pushed_at": "2026-04-28T09:49:06Z", + "updated_at": "2026-04-28T17:10:33Z", + "pushed_at": "2026-04-28T17:10:28Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -129,10 +129,10 @@ "description": "A command-line scanner for batch detection of Next.js application versions and determining if they are affected by CVE-2025-66478 vulnerability.", "fork": false, "created_at": "2025-12-04T13:13:33Z", - "updated_at": "2026-04-25T22:17:10Z", + "updated_at": "2026-04-28T13:46:47Z", "pushed_at": "2025-12-16T03:18:16Z", - "stargazers_count": 419, - "watchers_count": 419, + "stargazers_count": 420, + "watchers_count": 420, "has_discussions": false, "forks_count": 87, "allow_forking": true, @@ -148,7 +148,7 @@ ], "visibility": "public", "forks": 87, - "watchers": 419, + "watchers": 420, "score": 0, "subscribers_count": 1 }, diff --git a/2025/CVE-2025-68921.json b/2025/CVE-2025-68921.json index 46b84b0032..d0302f9b81 100644 --- a/2025/CVE-2025-68921.json +++ b/2025/CVE-2025-68921.json @@ -47,8 +47,8 @@ "description": "πŸ” Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.", "fork": false, "created_at": "2026-01-24T21:00:41Z", - "updated_at": "2026-04-28T10:14:00Z", - "pushed_at": "2026-04-28T10:13:57Z", + "updated_at": "2026-04-28T17:42:48Z", + "pushed_at": "2026-04-28T17:42:43Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-69600.json b/2025/CVE-2025-69600.json index 659f3678d5..bc7143f73a 100644 --- a/2025/CVE-2025-69600.json +++ b/2025/CVE-2025-69600.json @@ -14,8 +14,8 @@ "description": null, "fork": false, "created_at": "2026-02-11T12:02:53Z", - "updated_at": "2026-04-22T19:49:35Z", - "pushed_at": "2026-04-22T19:49:31Z", + "updated_at": "2026-04-28T18:35:48Z", + "pushed_at": "2026-04-28T18:35:44Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-69985.json b/2025/CVE-2025-69985.json index e6f6bfad6c..e25ac03528 100644 --- a/2025/CVE-2025-69985.json +++ b/2025/CVE-2025-69985.json @@ -14,8 +14,8 @@ "description": "Exploit CVE-2025-69985 to bypass authentication and execute remote commands on FUXA versions ≀ 1.2.8 via the \/api\/runscript endpoint.", "fork": false, "created_at": "2025-04-10T09:18:30Z", - "updated_at": "2026-04-28T10:42:08Z", - "pushed_at": "2026-04-28T10:42:04Z", + "updated_at": "2026-04-28T18:21:57Z", + "pushed_at": "2026-04-28T18:21:53Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-70795.json b/2025/CVE-2025-70795.json index 8ebb98504e..cd8b616923 100644 --- a/2025/CVE-2025-70795.json +++ b/2025/CVE-2025-70795.json @@ -14,8 +14,8 @@ "description": "πŸ›  Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.", "fork": false, "created_at": "2024-04-20T04:18:24Z", - "updated_at": "2026-04-28T10:37:07Z", - "pushed_at": "2026-04-28T10:37:04Z", + "updated_at": "2026-04-28T18:15:10Z", + "pushed_at": "2026-04-28T18:15:05Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2025/CVE-2025-8088.json b/2025/CVE-2025-8088.json index 6dfcb01bd1..159f7df1db 100644 --- a/2025/CVE-2025-8088.json +++ b/2025/CVE-2025-8088.json @@ -838,8 +838,8 @@ "description": "πŸ›  Exploit CVE-2025-8088 with this Python tool to generate malicious WinRAR archives that ensure payload persistence in Windows startup folders.", "fork": false, "created_at": "2025-12-20T13:52:21Z", - "updated_at": "2026-04-28T09:42:45Z", - "pushed_at": "2026-04-28T09:42:41Z", + "updated_at": "2026-04-28T17:03:54Z", + "pushed_at": "2026-04-28T17:03:51Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2025/CVE-2025-8110.json b/2025/CVE-2025-8110.json index b3a5af07ae..5893c33554 100644 --- a/2025/CVE-2025-8110.json +++ b/2025/CVE-2025-8110.json @@ -146,8 +146,8 @@ "description": "πŸ” Detect improper symbolic link handling in Gogs' PutContents API, exposing local code execution risks for versions 0.13.3 and earlier.", "fork": false, "created_at": "2025-12-31T13:25:07Z", - "updated_at": "2026-04-28T09:53:19Z", - "pushed_at": "2026-04-28T09:53:15Z", + "updated_at": "2026-04-28T17:15:28Z", + "pushed_at": "2026-04-28T17:15:23Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-9074.json b/2025/CVE-2025-9074.json index 5589c51715..3f06e54f8e 100644 --- a/2025/CVE-2025-9074.json +++ b/2025/CVE-2025-9074.json @@ -14,8 +14,8 @@ "description": "πŸš€ Exploit CVE-2025-9074 with this Docker escape framework, simplifying API vulnerabilities and enhancing security testing for developers and researchers.", "fork": false, "created_at": "2024-06-19T23:21:41Z", - "updated_at": "2026-04-28T09:55:04Z", - "pushed_at": "2026-04-28T09:55:00Z", + "updated_at": "2026-04-28T17:17:44Z", + "pushed_at": "2026-04-28T17:17:37Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-0828.json b/2026/CVE-2026-0828.json index eb98573a3e..6fda8af1df 100644 --- a/2026/CVE-2026-0828.json +++ b/2026/CVE-2026-0828.json @@ -14,8 +14,8 @@ "description": "πŸ›  Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.", "fork": false, "created_at": "2024-04-20T04:18:24Z", - "updated_at": "2026-04-28T10:37:07Z", - "pushed_at": "2026-04-28T10:37:04Z", + "updated_at": "2026-04-28T18:15:10Z", + "pushed_at": "2026-04-28T18:15:05Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2026/CVE-2026-1306.json b/2026/CVE-2026-1306.json new file mode 100644 index 0000000000..8fa18141f0 --- /dev/null +++ b/2026/CVE-2026-1306.json @@ -0,0 +1,35 @@ +[ + { + "id": 1223767424, + "name": "CVE-2026-1306", + "full_name": "murrez\/CVE-2026-1306", + "owner": { + "login": "murrez", + "id": 50166320, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50166320?v=4", + "html_url": "https:\/\/github.com\/murrez", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/murrez\/CVE-2026-1306", + "description": "PoC list runner for CVE-2026-1306 (WordPress midi-Synth ≀1.1.0): fetches exposed midiSynth_nonce, POSTs export AJAX to drop files under sound\/. Authorized security testing only.", + "fork": false, + "created_at": "2026-04-28T16:27:13Z", + "updated_at": "2026-04-28T16:28:06Z", + "pushed_at": "2026-04-28T16:28:02Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-20131.json b/2026/CVE-2026-20131.json index fe87befa37..6650f143cd 100644 --- a/2026/CVE-2026-20131.json +++ b/2026/CVE-2026-20131.json @@ -47,10 +47,10 @@ "description": null, "fork": false, "created_at": "2026-03-11T01:30:51Z", - "updated_at": "2026-04-14T16:28:39Z", + "updated_at": "2026-04-28T18:14:25Z", "pushed_at": "2026-03-11T02:17:15Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-20841.json b/2026/CVE-2026-20841.json index 8a287f2f92..08f70e2961 100644 --- a/2026/CVE-2026-20841.json +++ b/2026/CVE-2026-20841.json @@ -14,8 +14,8 @@ "description": "πŸ›  Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.", "fork": false, "created_at": "2024-09-22T12:19:06Z", - "updated_at": "2026-04-28T10:36:15Z", - "pushed_at": "2026-04-28T10:36:12Z", + "updated_at": "2026-04-28T18:13:56Z", + "pushed_at": "2026-04-28T18:13:52Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -412,8 +412,8 @@ "description": "πŸ›  Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.", "fork": false, "created_at": "2026-02-26T05:21:28Z", - "updated_at": "2026-04-28T10:35:10Z", - "pushed_at": "2026-04-28T10:35:07Z", + "updated_at": "2026-04-28T18:12:31Z", + "pushed_at": "2026-04-28T18:12:27Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-21636.json b/2026/CVE-2026-21636.json index 0a069a2f76..0fd397dd31 100644 --- a/2026/CVE-2026-21636.json +++ b/2026/CVE-2026-21636.json @@ -14,8 +14,8 @@ "description": null, "fork": false, "created_at": "2026-04-27T19:48:39Z", - "updated_at": "2026-04-27T19:48:47Z", - "pushed_at": "2026-04-27T19:48:43Z", + "updated_at": "2026-04-28T16:33:58Z", + "pushed_at": "2026-04-28T16:33:18Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-22747.json b/2026/CVE-2026-22747.json new file mode 100644 index 0000000000..74754557ce --- /dev/null +++ b/2026/CVE-2026-22747.json @@ -0,0 +1,35 @@ +[ + { + "id": 1223584035, + "name": "cve-2026-22747-lab", + "full_name": "F1n1Sh3r\/cve-2026-22747-lab", + "owner": { + "login": "F1n1Sh3r", + "id": 8713057, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8713057?v=4", + "html_url": "https:\/\/github.com\/F1n1Sh3r", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/F1n1Sh3r\/cve-2026-22747-lab", + "description": null, + "fork": false, + "created_at": "2026-04-28T13:11:38Z", + "updated_at": "2026-04-28T13:17:45Z", + "pushed_at": "2026-04-28T13:17:26Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-2406.json b/2026/CVE-2026-2406.json index ac4c417700..ad22f9faaa 100644 --- a/2026/CVE-2026-2406.json +++ b/2026/CVE-2026-2406.json @@ -14,8 +14,8 @@ "description": "πŸ” Analyze and detect CVE-2026-2406 vulnerabilities in Telnet to enhance security and prevent unauthorized access with this professional research engine.", "fork": false, "created_at": "2025-04-16T07:20:12Z", - "updated_at": "2026-04-28T10:26:01Z", - "pushed_at": "2026-04-28T10:25:57Z", + "updated_at": "2026-04-28T17:59:57Z", + "pushed_at": "2026-04-28T17:59:53Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-24061.json b/2026/CVE-2026-24061.json index ec00a8080f..a289b04816 100644 --- a/2026/CVE-2026-24061.json +++ b/2026/CVE-2026-24061.json @@ -1553,8 +1553,8 @@ "description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.", "fork": false, "created_at": "2026-02-03T19:46:10Z", - "updated_at": "2026-04-28T10:22:18Z", - "pushed_at": "2026-04-28T10:22:14Z", + "updated_at": "2026-04-28T17:54:44Z", + "pushed_at": "2026-04-28T17:54:40Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-24291.json b/2026/CVE-2026-24291.json index b17ca97fc5..732d6daf55 100644 --- a/2026/CVE-2026-24291.json +++ b/2026/CVE-2026-24291.json @@ -80,8 +80,8 @@ "description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions", "fork": false, "created_at": "2026-03-26T04:38:27Z", - "updated_at": "2026-04-28T10:58:27Z", - "pushed_at": "2026-04-28T10:58:23Z", + "updated_at": "2026-04-28T18:42:18Z", + "pushed_at": "2026-04-28T18:42:15Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2026/CVE-2026-2441.json b/2026/CVE-2026-2441.json index 51243426b7..e158a32cfb 100644 --- a/2026/CVE-2026-2441.json +++ b/2026/CVE-2026-2441.json @@ -179,8 +179,8 @@ "description": "Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.", "fork": false, "created_at": "2026-03-03T14:19:18Z", - "updated_at": "2026-04-28T10:39:01Z", - "pushed_at": "2026-04-28T10:38:58Z", + "updated_at": "2026-04-28T18:17:56Z", + "pushed_at": "2026-04-28T18:17:51Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2026/CVE-2026-2472.json b/2026/CVE-2026-2472.json index 86e98fee4d..4c2173b70d 100644 --- a/2026/CVE-2026-2472.json +++ b/2026/CVE-2026-2472.json @@ -65,8 +65,8 @@ "description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.", "fork": false, "created_at": "2026-03-10T14:40:04Z", - "updated_at": "2026-04-28T10:44:54Z", - "pushed_at": "2026-04-28T10:44:51Z", + "updated_at": "2026-04-28T18:25:46Z", + "pushed_at": "2026-04-28T18:25:41Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2026/CVE-2026-25643.json b/2026/CVE-2026-25643.json index a76b332145..dffa5a0456 100644 --- a/2026/CVE-2026-25643.json +++ b/2026/CVE-2026-25643.json @@ -94,8 +94,8 @@ "description": "Exploit Frigate NVR ≀0.16.3 to execute commands remotely by abusing a configuration flaw without needing shell access or output capture.", "fork": false, "created_at": "2026-03-07T20:23:08Z", - "updated_at": "2026-04-28T10:43:33Z", - "pushed_at": "2026-04-28T10:43:29Z", + "updated_at": "2026-04-28T18:24:13Z", + "pushed_at": "2026-04-28T18:24:10Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2026/CVE-2026-2991.json b/2026/CVE-2026-2991.json index 38df0b9c40..0164a802a1 100644 --- a/2026/CVE-2026-2991.json +++ b/2026/CVE-2026-2991.json @@ -62,8 +62,8 @@ "description": "Explore a PoC for CVE-2026-2991, an auth bypass in KiviCare 4.1.2 and earlier via the patient social-login REST endpoint", "fork": false, "created_at": "2026-04-03T20:26:43Z", - "updated_at": "2026-04-28T11:03:06Z", - "pushed_at": "2026-04-28T11:03:02Z", + "updated_at": "2026-04-28T18:47:45Z", + "pushed_at": "2026-04-28T18:47:41Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-29923.json b/2026/CVE-2026-29923.json index 7c2e8b5d2b..672cbef219 100644 --- a/2026/CVE-2026-29923.json +++ b/2026/CVE-2026-29923.json @@ -47,10 +47,10 @@ "description": "A newly discovered vulnerable driver, pstrip64.sys (CVE-2026-29923) allows an unprivileged user to escalate privileges to SYSTEM via a crafted IOCTL request ", "fork": false, "created_at": "2026-04-10T12:48:55Z", - "updated_at": "2026-04-22T07:08:45Z", + "updated_at": "2026-04-28T14:54:06Z", "pushed_at": "2026-04-11T13:56:20Z", - "stargazers_count": 19, - "watchers_count": 19, + "stargazers_count": 20, + "watchers_count": 20, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 19, + "watchers": 20, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-31802.json b/2026/CVE-2026-31802.json index 51489bf6b5..c73312ef80 100644 --- a/2026/CVE-2026-31802.json +++ b/2026/CVE-2026-31802.json @@ -59,8 +59,8 @@ "description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.", "fork": false, "created_at": "2026-03-28T20:49:46Z", - "updated_at": "2026-04-28T10:59:42Z", - "pushed_at": "2026-04-28T10:59:38Z", + "updated_at": "2026-04-28T18:44:09Z", + "pushed_at": "2026-04-28T18:44:05Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-33017.json b/2026/CVE-2026-33017.json index 2ba2fa474c..627ce3d7b2 100644 --- a/2026/CVE-2026-33017.json +++ b/2026/CVE-2026-33017.json @@ -14,10 +14,10 @@ "description": "CVE-2026-33017 - An unauthenticated remote code execution in Langflow <= 1.8.1 via Public Flow Build Endpoint", "fork": false, "created_at": "2026-03-21T08:11:08Z", - "updated_at": "2026-04-27T23:20:41Z", + "updated_at": "2026-04-28T18:12:26Z", "pushed_at": "2026-03-22T07:13:04Z", - "stargazers_count": 8, - "watchers_count": 8, + "stargazers_count": 7, + "watchers_count": 7, "has_discussions": false, "forks_count": 4, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 4, - "watchers": 8, + "watchers": 7, "score": 0, "subscribers_count": 0 }, @@ -149,10 +149,10 @@ "description": "CVE-2026-33017: Unauthenticated RCE in Langflow", "fork": false, "created_at": "2026-03-27T07:15:07Z", - "updated_at": "2026-04-27T23:21:17Z", + "updated_at": "2026-04-28T18:09:42Z", "pushed_at": "2026-03-27T12:48:46Z", - "stargazers_count": 4, - "watchers_count": 4, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -163,7 +163,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 4, + "watchers": 3, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-42167.json b/2026/CVE-2026-42167.json new file mode 100644 index 0000000000..94740439b1 --- /dev/null +++ b/2026/CVE-2026-42167.json @@ -0,0 +1,35 @@ +[ + { + "id": 1223664453, + "name": "proftpd-CVE-2026-42167-poc", + "full_name": "ZeroPathAI\/proftpd-CVE-2026-42167-poc", + "owner": { + "login": "ZeroPathAI", + "id": 170791525, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/170791525?v=4", + "html_url": "https:\/\/github.com\/ZeroPathAI", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/ZeroPathAI\/proftpd-CVE-2026-42167-poc", + "description": "POCs to demonstrate CVE-2026-42167 in ProFTPD", + "fork": false, + "created_at": "2026-04-28T14:35:46Z", + "updated_at": "2026-04-28T14:45:35Z", + "pushed_at": "2026-04-28T14:36:27Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-42208.json b/2026/CVE-2026-42208.json new file mode 100644 index 0000000000..5584e60e82 --- /dev/null +++ b/2026/CVE-2026-42208.json @@ -0,0 +1,35 @@ +[ + { + "id": 1223794703, + "name": "CVE-2026-42208_lab", + "full_name": "imjdl\/CVE-2026-42208_lab", + "owner": { + "login": "imjdl", + "id": 31382943, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/31382943?v=4", + "html_url": "https:\/\/github.com\/imjdl", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/imjdl\/CVE-2026-42208_lab", + "description": "CVE-2026-42208 lab", + "fork": false, + "created_at": "2026-04-28T16:57:53Z", + "updated_at": "2026-04-28T17:12:36Z", + "pushed_at": "2026-04-28T17:12:30Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-4631.json b/2026/CVE-2026-4631.json index 3711656ad4..3947b810e4 100644 --- a/2026/CVE-2026-4631.json +++ b/2026/CVE-2026-4631.json @@ -14,10 +14,10 @@ "description": "Cockpit: Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection", "fork": false, "created_at": "2026-04-18T20:30:02Z", - "updated_at": "2026-04-25T07:26:18Z", + "updated_at": "2026-04-28T15:19:46Z", "pushed_at": "2026-04-18T22:04:47Z", - "stargazers_count": 7, - "watchers_count": 7, + "stargazers_count": 8, + "watchers_count": 8, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 3, - "watchers": 7, + "watchers": 8, "score": 0, "subscribers_count": 1 } diff --git a/README.md b/README.md index 6390825b30..8749a14b85 100644 --- a/README.md +++ b/README.md @@ -205,6 +205,13 @@ - [MehdiLeDeaut/CVE-2026-1281-Ivanti-EPMM-RCE](https://github.com/MehdiLeDeaut/CVE-2026-1281-Ivanti-EPMM-RCE) - [YunfeiGE18/CVE-2026-1281-CVE-2026-1340-Ivanti-EPMM-RCE](https://github.com/YunfeiGE18/CVE-2026-1281-CVE-2026-1340-Ivanti-EPMM-RCE) +### CVE-2026-1306 (2026-02-14) + +The midi-Synth plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type and file extension validation in the 'export' AJAX action in all versions up to, and including, 1.1.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible granted the attacker can obtain a valid nonce. The nonce is exposed in frontend JavaScript making it trivially accessible to unauthenticated attackers. + + +- [murrez/CVE-2026-1306](https://github.com/murrez/CVE-2026-1306) + ### CVE-2026-1312 (2026-02-03) An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.\n`.QuerySet.order_by()` is subject to SQL injection in column aliases containing periods when the same alias is, using a suitably crafted dictionary, with dictionary expansion, used in `FilteredRelation`.\nEarlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected.\nDjango would like to thank Solomon Kebede for reporting this issue. @@ -1477,6 +1484,13 @@ - [n0n4m3x41/CVE-2026-22738-POC](https://github.com/n0n4m3x41/CVE-2026-22738-POC) - [rockmelodies/CVE-2026-22738](https://github.com/rockmelodies/CVE-2026-22738) +### CVE-2026-22747 (2026-04-22) + +Vulnerability in Spring Spring Security.Β SubjectX500PrincipalExtractorΒ does not correctly handle certain malformed X.509 certificateΒ CNΒ values, which can lead to reading the wrong value for the username. In a carefully crafted certificate, this can lead to an attacker impersonating another user.\nThis issue affects Spring Security: from 7.0.0 through 7.0.4. + + +- [F1n1Sh3r/cve-2026-22747-lab](https://github.com/F1n1Sh3r/cve-2026-22747-lab) + ### CVE-2026-22777 (2026-01-10) ComfyUI-Manager is an extension designed to enhance the usability of ComfyUI. Prior to versions 3.39.2 and 4.0.5, an attacker can inject special characters into HTTP query parameters to add arbitrary configuration values to the config.ini file. This can lead to security setting tampering or modification of application behavior. This issue has been patched in versions 3.39.2 and 4.0.5. @@ -2452,13 +2466,6 @@ - [mbanyamer/CVE-2026-26988-LibreNMS-SQLi](https://github.com/mbanyamer/CVE-2026-26988-LibreNMS-SQLi) -### CVE-2026-27135 (2026-03-18) - -nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops reading the incoming data when user facing public API `nghttp2_session_terminate_session` or `nghttp2_session_terminate_session2` is called by the application. They might be called internally by the library when it detects the situation that is subject to connection error. Due to the missing internal state validation, the library keeps reading the rest of the data after one of those APIs is called. Then receiving a malformed frame that causes FRAME_SIZE_ERROR causes assertion failure. nghttp2 v1.68.1 adds missing state validation to avoid assertion failure. No known workarounds are available. - - -- [Zmo247/nghttp2-cve-2026-27135-patch](https://github.com/Zmo247/nghttp2-cve-2026-27135-patch) - ### CVE-2026-27174 (2026-02-18) MajorDoMo (aka Major Domestic Module) allows unauthenticated remote code execution via the admin panel's PHP console feature. An include order bug in modules/panel.class.php causes execution to continue past a redirect() call that lacks an exit statement, allowing unauthenticated requests to reach the ajax handler in inc_panel_ajax.php. The console handler within that file passes user-supplied input from GET parameters (via register_globals) directly to eval() without any authentication check. An attacker can execute arbitrary PHP code by sending a crafted GET request to /admin.php with ajax_panel, op, and command parameters. @@ -2862,7 +2869,7 @@ ### CVE-2026-29971 (2026-04-27) -A reflected cross-site scripting (XSS) vulnerability exists in WebFileSys version 2.31.1. User-controlled input is reflected into HTML and JavaScript contexts without proper output encoding, allowing arbitrary JavaScript execution in the victim's browser. +A reflected cross-site scripting (XSS) vulnerability exists in WebFileSys version before 2.32.0 and fixed in v.2.32.0. User-controlled input is reflected into HTML and JavaScript contexts without proper output encoding, allowing arbitrary JavaScript execution in the victim's browser via the ftpBackup functionality, authentication input handling, search functionality, and error message rendering components - [tharunchidurala-cyber/BACkupCVE-2026-29971](https://github.com/tharunchidurala-cyber/BACkupCVE-2026-29971) @@ -3876,6 +3883,12 @@ - [bartfroklage/cve-2026-41679](https://github.com/bartfroklage/cve-2026-41679) +### CVE-2026-42167 +- [ZeroPathAI/proftpd-CVE-2026-42167-poc](https://github.com/ZeroPathAI/proftpd-CVE-2026-42167-poc) + +### CVE-2026-42208 +- [imjdl/CVE-2026-42208_lab](https://github.com/imjdl/CVE-2026-42208_lab) + ## 2025 ### CVE-2025-0054 (2025-02-11) @@ -3986,7 +3999,7 @@ - [dhmosfunk/7-Zip-CVE-2025-0411-POC](https://github.com/dhmosfunk/7-Zip-CVE-2025-0411-POC) - [iSee857/CVE-2025-0411-PoC](https://github.com/iSee857/CVE-2025-0411-PoC) - [ishwardeepp/CVE-2025-0411-MoTW-PoC](https://github.com/ishwardeepp/CVE-2025-0411-MoTW-PoC) -- [t0x1nsec/7-Zip-CVE-2025-0411-POC](https://github.com/t0x1nsec/7-Zip-CVE-2025-0411-POC) +- [cesarbtakeda/7-Zip-CVE-2025-0411-POC](https://github.com/cesarbtakeda/7-Zip-CVE-2025-0411-POC) - [betulssahin/CVE-2025-0411-7-Zip-Mark-of-the-Web-Bypass](https://github.com/betulssahin/CVE-2025-0411-7-Zip-Mark-of-the-Web-Bypass) - [RustMacrosRecoil/7-Zip-CVE-2025-0411-POC](https://github.com/RustMacrosRecoil/7-Zip-CVE-2025-0411-POC) @@ -7390,7 +7403,7 @@ - [ThemeHackers/CVE-2025-24071](https://github.com/ThemeHackers/CVE-2025-24071) - [rubbxalc/CVE-2025-24071](https://github.com/rubbxalc/CVE-2025-24071) - [Marcejr117/CVE-2025-24071_PoC](https://github.com/Marcejr117/CVE-2025-24071_PoC) -- [t0x1nsec/Windows-Explorer-CVE-2025-24071](https://github.com/t0x1nsec/Windows-Explorer-CVE-2025-24071) +- [cesarbtakeda/Windows-Explorer-CVE-2025-24071](https://github.com/cesarbtakeda/Windows-Explorer-CVE-2025-24071) - [pswalia2u/CVE-2025-24071_POC](https://github.com/pswalia2u/CVE-2025-24071_POC) - [f4dee-backup/CVE-2025-24071](https://github.com/f4dee-backup/CVE-2025-24071) - [LOOKY243/CVE-2025-24071-PoC](https://github.com/LOOKY243/CVE-2025-24071-PoC) @@ -12665,6 +12678,18 @@ - [HanTul/Kotaemon-CVE-2025-56526-56527-disclosure](https://github.com/HanTul/Kotaemon-CVE-2025-56526-56527-disclosure) +### CVE-2025-56534 +- [MarkArtamonov/OpenNebula-CVE-2025-56534](https://github.com/MarkArtamonov/OpenNebula-CVE-2025-56534) + +### CVE-2025-56535 +- [MarkArtamonov/OpenNebula-CVE-2025-56535](https://github.com/MarkArtamonov/OpenNebula-CVE-2025-56535) + +### CVE-2025-56536 +- [MarkArtamonov/OpenNebula-CVE-2025-56536](https://github.com/MarkArtamonov/OpenNebula-CVE-2025-56536) + +### CVE-2025-56537 +- [MarkArtamonov/OpenNebula-CVE-2025-56537](https://github.com/MarkArtamonov/OpenNebula-CVE-2025-56537) + ### CVE-2025-56605 (2026-02-26) A reflected Cross-Site Scripting (XSS) vulnerability exists in the register.php backend script of PuneethReddyHC Event Management System 1.0. The mobile POST parameter is improperly validated and echoed back in the HTTP response without sanitization, allowing an attacker to inject and execute arbitrary JavaScript code in the victim's browser. @@ -14365,7 +14390,11 @@ - [kpatsakis/CVE-2025-67221](https://github.com/kpatsakis/CVE-2025-67221) -### CVE-2025-67223 +### CVE-2025-67223 (2026-04-28) + +The Aranda File Server (AFS) component in Aranda Software Aranda Service Desk before 8.3.12 stores daily activity logs with predictable names in a publicly accessible directory, which allows unauthenticated remote attackers to obtain direct virtual paths of uploaded files and bypass access controls to download sensitive documents containing PII. + + - [brandonperezlara/CVE-2025-67223](https://github.com/brandonperezlara/CVE-2025-67223) ### CVE-2025-67246 (2026-01-15) @@ -22576,7 +22605,7 @@ ### CVE-2024-38998 - [z3ldr1/PP_CVE-2024-38998](https://github.com/z3ldr1/PP_CVE-2024-38998) -- [t0x1nsec/PP_CVE-2024-38998](https://github.com/t0x1nsec/PP_CVE-2024-38998) +- [cesarbtakeda/PP_CVE-2024-38998](https://github.com/cesarbtakeda/PP_CVE-2024-38998) ### CVE-2024-39031 (2024-07-09) @@ -33931,7 +33960,7 @@ ### CVE-2023-45657 (2023-11-06) -Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in POSIMYTH Nexter allows SQL Injection.This issue affects Nexter: from n/a through 2.0.3.\n\n +A vulnerability in posimyththemes Nexter nexter.This issue affects Nexter: from n/a through <= 2.0.3. - [RandomRobbieBF/CVE-2023-45657](https://github.com/RandomRobbieBF/CVE-2023-45657) @@ -37539,6 +37568,7 @@ - [BearClaw96/CVE-2022-22963-Poc-Bearcules](https://github.com/BearClaw96/CVE-2022-22963-Poc-Bearcules) - [jrbH4CK/CVE-2022-22963](https://github.com/jrbH4CK/CVE-2022-22963) - [Shayz614/CVE-2022-22963](https://github.com/Shayz614/CVE-2022-22963) +- [teofoli-matteo/CVE-2022-22963---Software-Vulnerabilities](https://github.com/teofoli-matteo/CVE-2022-22963---Software-Vulnerabilities) ### CVE-2022-22965 (2022-04-01) @@ -41140,6 +41170,13 @@ - [MaherAzzouzi/CVE-2022-37704](https://github.com/MaherAzzouzi/CVE-2022-37704) +### CVE-2022-37705 (2023-04-16) + +A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can acquire root privileges. The vulnerable component is the runtar SUID program, which is a wrapper to run /usr/bin/tar with specific arguments that are controllable by the attacker. This program mishandles the arguments passed to tar binary (it expects that the argument name and value are separated with a space; however, separating them with an equals sign is also supported), + + +- [MaherAzzouzi/CVE-2022-37705](https://github.com/MaherAzzouzi/CVE-2022-37705) + ### CVE-2022-37706 (2022-12-25) enlightenment_sys in Enlightenment before 0.25.4 allows local users to gain privileges because it is setuid root, and the system library function mishandles pathnames that begin with a /dev/.. substring. @@ -41313,6 +41350,7 @@ - [hluwa/cobaltstrike_swing_xss2rce](https://github.com/hluwa/cobaltstrike_swing_xss2rce) - [4nth0ny1130/CVE-2022-39197-fix_patch](https://github.com/4nth0ny1130/CVE-2022-39197-fix_patch) - [its-arun/CVE-2022-39197](https://github.com/its-arun/CVE-2022-39197) +- [TheCryingGame/CVE-2022-39197-RCE](https://github.com/TheCryingGame/CVE-2022-39197-RCE) - [adeljck/CVE-2022-39197](https://github.com/adeljck/CVE-2022-39197) - [xiao-zhu-zhu/pig_CS4.4](https://github.com/xiao-zhu-zhu/pig_CS4.4) - [Romanc9/Gui-poc-test](https://github.com/Romanc9/Gui-poc-test)