nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/06/24 18:53:20

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-06-25 03:53:20 +09:00
1 parent aec11c4522
commit 4bbadfc307
71 files changed
+482 -456
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2011/CVE-2011-2523.json
+1 -1
View File
@@ -482,7 +482,7 @@
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
"subscribers_count": 0
},
{
"id": 806726183,
2015/CVE-2015-1538.json
+1 -1
View File
@@ -96,7 +96,7 @@
"forks": 116,
"watchers": 205,
"score": 0,
"subscribers_count": 14
"subscribers_count": 15
},
{
"id": 54338368,
2015/CVE-2015-1579.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "[discontinued] Mass exploiter of CVE-2015-1579 for WordPress CMS",
"fork": false,
"created_at": "2016-02-03T21:44:11Z",
"updated_at": "2026-03-31T18:02:10Z",
"updated_at": "2026-06-24T15:36:07Z",
"pushed_at": "2018-05-21T21:20:54Z",
"stargazers_count": 29,
"watchers_count": 29,
"stargazers_count": 30,
"watchers_count": 30,
"has_discussions": false,
"forks_count": 19,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 19,
"watchers": 29,
"watchers": 30,
"score": 0,
"subscribers_count": 2
},
2017/CVE-2017-11882.json
+2 -2
View File
@@ -255,7 +255,7 @@
"stargazers_count": 44,
"watchers_count": 44,
"has_discussions": false,
"forks_count": 69,
"forks_count": 68,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -265,7 +265,7 @@
"cve-2017-11882"
],
"visibility": "public",
"forks": 69,
"forks": 68,
"watchers": 44,
"score": 0,
"subscribers_count": 1
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-06-24T11:13:26Z",
"pushed_at": "2026-06-24T11:13:22Z",
"updated_at": "2026-06-24T17:53:04Z",
"pushed_at": "2026-06-24T17:51:19Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2019/CVE-2019-8942.json
+4 -4
View File
@@ -149,10 +149,10 @@
"description": "Python exploit toolkit for WordPress Crop Image RCE — CVE-2019-8942 & CVE-2019-8943",
"fork": false,
"created_at": "2026-05-22T16:36:35Z",
"updated_at": "2026-05-26T16:11:22Z",
"updated_at": "2026-06-24T14:25:55Z",
"pushed_at": "2026-05-23T22:59:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -163,7 +163,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2020/CVE-2020-1472.json
+2 -2
View File
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-06-24T11:29:52Z",
"pushed_at": "2026-06-24T11:29:48Z",
"updated_at": "2026-06-24T17:45:14Z",
"pushed_at": "2026-06-24T17:45:03Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2020/CVE-2020-21365.json
-66
View File
@@ -1,37 +1,4 @@
[
{
"id": 1001647179,
"name": "CVE-2020-21365",
"full_name": "andrei2308\/CVE-2020-21365",
"owner": {
"login": "andrei2308",
"id": 122682508,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/122682508?v=4",
"html_url": "https:\/\/github.com\/andrei2308",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/andrei2308\/CVE-2020-21365",
"description": null,
"fork": false,
"created_at": "2025-06-13T18:41:55Z",
"updated_at": "2025-08-01T14:00:54Z",
"pushed_at": "2025-08-01T14:00:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1005905577,
"name": "CVE-2020-21365",
@@ -64,38 +31,5 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1030328918,
"name": "CVE-2020-21365-PoC",
"full_name": "andrei2308\/CVE-2020-21365-PoC",
"owner": {
"login": "andrei2308",
"id": 122682508,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/122682508?v=4",
"html_url": "https:\/\/github.com\/andrei2308",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/andrei2308\/CVE-2020-21365-PoC",
"description": "PoC for directory traversal and exposure on wkhtmltopdf 12.0.5",
"fork": false,
"created_at": "2025-08-01T13:04:09Z",
"updated_at": "2026-04-27T03:42:34Z",
"pushed_at": "2025-08-01T14:03:24Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2020/CVE-2020-8636.json
+44
View File
@@ -0,0 +1,44 @@
[
{
"id": 238564119,
"name": "opmonster",
"full_name": "phor3nsic\/opmonster",
"owner": {
"login": "phor3nsic",
"id": 18534814,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18534814?v=4",
"html_url": "https:\/\/github.com\/phor3nsic",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/phor3nsic\/opmonster",
"description": "CVE-2020-8636 authenticated remote code execution exploit for Opmon",
"fork": false,
"created_at": "2020-02-05T22:49:35Z",
"updated_at": "2026-06-24T16:37:45Z",
"pushed_at": "2026-06-24T16:37:32Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2020-8636",
"exploit",
"opmon",
"pentesting",
"python",
"rce",
"red-team",
"security-tools"
],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
]
2021/CVE-2021-0318.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 484744433,
"name": "frameworks_native_AOSP10_r33_CVE-2021-0318",
"full_name": "nanopathi\/frameworks_native_AOSP10_r33_CVE-2021-0318",
"owner": {
"login": "nanopathi",
"id": 26024136,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26024136?v=4",
"html_url": "https:\/\/github.com\/nanopathi",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/nanopathi\/frameworks_native_AOSP10_r33_CVE-2021-0318",
"description": null,
"fork": false,
"created_at": "2022-04-23T12:43:31Z",
"updated_at": "2022-04-23T12:48:06Z",
"pushed_at": "2022-04-23T12:48:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 1
}
]
2021/CVE-2021-33044.json
+35 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-06-24T11:26:03Z",
"pushed_at": "2026-06-24T11:25:59Z",
"updated_at": "2026-06-24T18:03:30Z",
"pushed_at": "2026-06-24T18:03:21Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
@@ -229,5 +229,38 @@
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
{
"id": 1279159027,
"name": "Camera-Dahua-Research-l-h-ng-CVE-2021-33044",
"full_name": "litndat\/Camera-Dahua-Research-l-h-ng-CVE-2021-33044",
"owner": {
"login": "litndat",
"id": 213002857,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/213002857?v=4",
"html_url": "https:\/\/github.com\/litndat",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/litndat\/Camera-Dahua-Research-l-h-ng-CVE-2021-33044",
"description": "DAHUA_AUTH-BYPASS-CVE-2021-33044",
"fork": false,
"created_at": "2026-06-24T12:31:56Z",
"updated_at": "2026-06-24T12:34:24Z",
"pushed_at": "2026-06-24T12:34:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2021/CVE-2021-34527.json
+4 -4
View File
@@ -86,10 +86,10 @@
"description": null,
"fork": false,
"created_at": "2021-07-02T12:10:49Z",
"updated_at": "2026-06-12T15:15:16Z",
"updated_at": "2026-06-24T16:11:36Z",
"pushed_at": "2021-07-02T12:17:50Z",
"stargazers_count": 318,
"watchers_count": 318,
"stargazers_count": 319,
"watchers_count": 319,
"has_discussions": false,
"forks_count": 75,
"allow_forking": true,
@@ -100,7 +100,7 @@
"topics": [],
"visibility": "public",
"forks": 75,
"watchers": 318,
"watchers": 319,
"score": 0,
"subscribers_count": 10
},
2021/CVE-2021-36260.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.",
"fork": false,
"created_at": "2021-10-27T15:51:12Z",
"updated_at": "2026-06-22T11:03:52Z",
"updated_at": "2026-06-24T17:44:46Z",
"pushed_at": "2021-10-28T06:37:37Z",
"stargazers_count": 293,
"watchers_count": 293,
"stargazers_count": 294,
"watchers_count": 294,
"has_discussions": false,
"forks_count": 77,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 77,
"watchers": 293,
"watchers": 294,
"score": 0,
"subscribers_count": 5
},
2021/CVE-2021-40822.json
+13 -4
View File
@@ -11,11 +11,11 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/phor3nsic\/CVE-2021-40822",
"description": null,
"description": "PoC and Dockerized vulnerable lab for CVE-2021-40822 (SSRF in GeoServer)",
"fork": false,
"created_at": "2022-05-17T13:58:11Z",
"updated_at": "2022-05-20T18:23:52Z",
"pushed_at": "2022-05-17T18:38:15Z",
"updated_at": "2026-06-24T16:33:07Z",
"pushed_at": "2026-06-24T16:32:42Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
@@ -25,7 +25,16 @@
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"topics": [
"cve",
"cve-2021-40822",
"exploit",
"geoserver",
"poc",
"python",
"security-research",
"ssrf"
],
"visibility": "public",
"forks": 3,
"watchers": 2,
2021/CVE-2021-44228.json
+2 -2
View File
@@ -7794,7 +7794,7 @@
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 5,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -7802,7 +7802,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 5,
"forks": 4,
"watchers": 2,
"score": 0,
"subscribers_count": 1
2022/CVE-2022-29799.json
+2 -2
View File
@@ -59,8 +59,8 @@
"description": "Demonstrate local privilege escalation in networkd-dispatcher via CVE-2022-29799 and CVE-2022-29800 using this C proof of concept.",
"fork": false,
"created_at": "2026-06-23T14:05:18Z",
"updated_at": "2026-06-24T11:46:25Z",
"pushed_at": "2026-06-24T11:46:22Z",
"updated_at": "2026-06-24T17:01:57Z",
"pushed_at": "2026-06-24T17:00:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2022/CVE-2022-37706.json
+33
View File
@@ -229,5 +229,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 1
},
{
"id": 1279198597,
"name": "CVE-2022-37706",
"full_name": "Massive43\/CVE-2022-37706",
"owner": {
"login": "Massive43",
"id": 176841317,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/176841317?v=4",
"html_url": "https:\/\/github.com\/Massive43",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Massive43\/CVE-2022-37706",
"description": "ROOT TOOL",
"fork": false,
"created_at": "2026-06-24T13:15:37Z",
"updated_at": "2026-06-24T13:16:51Z",
"pushed_at": "2026-06-24T13:16:24Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2022/CVE-2022-38691.json
-33
View File
@@ -34,38 +34,5 @@
"watchers": 103,
"score": 0,
"subscribers_count": 5
},
{
"id": 1269903745,
"name": "CVE-2022-38691",
"full_name": "mutur4\/CVE-2022-38691",
"owner": {
"login": "mutur4",
"id": 68686790,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/68686790?v=4",
"html_url": "https:\/\/github.com\/mutur4",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mutur4\/CVE-2022-38691",
"description": null,
"fork": false,
"created_at": "2026-06-15T07:52:36Z",
"updated_at": "2026-06-15T07:52:36Z",
"pushed_at": "2026-06-15T07:52:36Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2022/CVE-2022-38694.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "This is a one-time signature verification bypass. For persistent signature verification bypass, check https:\/\/github.com\/TomKing062\/CVE-2022-38691_38692",
"fork": false,
"created_at": "2023-06-10T08:31:26Z",
"updated_at": "2026-06-22T11:04:10Z",
"updated_at": "2026-06-24T12:46:52Z",
"pushed_at": "2025-06-14T16:55:26Z",
"stargazers_count": 565,
"watchers_count": 565,
"stargazers_count": 564,
"watchers_count": 564,
"has_discussions": true,
"forks_count": 74,
"allow_forking": true,
@@ -31,7 +31,7 @@
],
"visibility": "public",
"forks": 74,
"watchers": 565,
"watchers": 564,
"score": 0,
"subscribers_count": 12
},
2023/CVE-2023-23397.json
+4 -4
View File
@@ -420,10 +420,10 @@
"description": "Simple PoC of the CVE-2023-23397 vulnerability with the payload sent by email.",
"fork": false,
"created_at": "2023-03-20T16:31:54Z",
"updated_at": "2026-06-23T08:18:18Z",
"updated_at": "2026-06-24T12:58:16Z",
"pushed_at": "2023-03-24T10:46:38Z",
"stargazers_count": 130,
"watchers_count": 130,
"stargazers_count": 132,
"watchers_count": 132,
"has_discussions": false,
"forks_count": 28,
"allow_forking": true,
@@ -436,7 +436,7 @@
],
"visibility": "public",
"forks": 28,
"watchers": 130,
"watchers": 132,
"score": 0,
"subscribers_count": 3
},
2023/CVE-2023-27350.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "Proof of Concept Exploit for PaperCut CVE-2023-27350",
"fork": false,
"created_at": "2023-04-22T21:34:06Z",
"updated_at": "2026-04-06T19:36:38Z",
"updated_at": "2026-06-24T12:51:33Z",
"pushed_at": "2023-05-01T19:31:20Z",
"stargazers_count": 56,
"watchers_count": 56,
"stargazers_count": 55,
"watchers_count": 55,
"has_discussions": false,
"forks_count": 23,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 23,
"watchers": 56,
"watchers": 55,
"score": 0,
"subscribers_count": 3
},
2023/CVE-2023-32434.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙",
"fork": false,
"created_at": "2025-08-13T09:19:29Z",
"updated_at": "2026-06-24T09:53:52Z",
"pushed_at": "2026-06-24T09:53:49Z",
"updated_at": "2026-06-24T18:03:31Z",
"pushed_at": "2026-06-24T18:03:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-0670.json
+2 -2
View File
@@ -172,8 +172,8 @@
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
"fork": false,
"created_at": "2026-01-08T01:32:09Z",
"updated_at": "2026-06-24T10:38:14Z",
"pushed_at": "2026-06-24T10:38:10Z",
"updated_at": "2026-06-24T15:49:08Z",
"pushed_at": "2026-06-24T15:48:57Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-21762.json
+33
View File
@@ -295,5 +295,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1279263927,
"name": "CVE-2024-21762-Safe-Check",
"full_name": "Sxmpl3\/CVE-2024-21762-Safe-Check",
"owner": {
"login": "Sxmpl3",
"id": 116309678,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/116309678?v=4",
"html_url": "https:\/\/github.com\/Sxmpl3",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Sxmpl3\/CVE-2024-21762-Safe-Check",
"description": null,
"fork": false,
"created_at": "2026-06-24T14:20:39Z",
"updated_at": "2026-06-24T14:26:52Z",
"pushed_at": "2026-06-24T14:23:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2024/CVE-2024-31317.json
+2 -2
View File
@@ -316,7 +316,7 @@
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -324,7 +324,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"forks": 2,
"watchers": 1,
"score": 0,
"subscribers_count": 0
2024/CVE-2024-33298.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 914938551,
"name": "CVE-2024-33298",
"full_name": "MathSabo\/CVE-2024-33298",
"owner": {
"login": "MathSabo",
"id": 110696037,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/110696037?v=4",
"html_url": "https:\/\/github.com\/MathSabo",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/MathSabo\/CVE-2024-33298",
"description": "Stored Cross Site Scripting vulnerability in Microweber < 2.0.9",
"fork": false,
"created_at": "2025-01-10T16:08:42Z",
"updated_at": "2025-01-10T16:15:14Z",
"pushed_at": "2025-01-10T16:15:10Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
}
]
2024/CVE-2024-56426.json
+1 -1
View File
@@ -15,7 +15,7 @@
"fork": false,
"created_at": "2026-04-07T12:02:52Z",
"updated_at": "2026-06-24T04:46:20Z",
"pushed_at": "2026-06-17T16:13:46Z",
"pushed_at": "2026-06-24T17:45:44Z",
"stargazers_count": 13,
"watchers_count": 13,
"has_discussions": false,
2025/CVE-2025-14847.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
"fork": false,
"created_at": "2025-07-30T15:52:00Z",
"updated_at": "2026-06-24T10:41:33Z",
"pushed_at": "2026-06-24T10:41:29Z",
"updated_at": "2026-06-24T15:52:50Z",
"pushed_at": "2026-06-24T15:52:33Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1129,8 +1129,8 @@
"description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
"fork": false,
"created_at": "2026-01-14T06:05:44Z",
"updated_at": "2026-06-24T10:40:52Z",
"pushed_at": "2026-06-24T10:40:48Z",
"updated_at": "2026-06-24T15:52:52Z",
"pushed_at": "2026-06-24T15:51:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-24071.json
+4 -4
View File
@@ -154,10 +154,10 @@
"description": "Windows File Explorer Spoofing Vulnerability (CVE-2025-24071)",
"fork": false,
"created_at": "2025-03-27T08:32:38Z",
"updated_at": "2026-05-31T13:33:50Z",
"updated_at": "2026-06-24T15:04:42Z",
"pushed_at": "2025-03-27T08:50:23Z",
"stargazers_count": 33,
"watchers_count": 33,
"stargazers_count": 34,
"watchers_count": 34,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -168,7 +168,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 33,
"watchers": 34,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-24257.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis",
"fork": false,
"created_at": "2026-04-04T03:42:55Z",
"updated_at": "2026-06-24T11:22:34Z",
"pushed_at": "2026-06-24T11:22:30Z",
"updated_at": "2026-06-24T16:35:19Z",
"pushed_at": "2026-06-24T16:35:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-31258.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔓 Explore CVE-2025-31258 with this PoC demonstrating partial sandbox escape using RemoteViewServices for practical 1-day security practice.",
"fork": false,
"created_at": "2020-06-23T15:20:11Z",
"updated_at": "2026-06-24T12:49:57Z",
"pushed_at": "2026-06-24T12:49:53Z",
"updated_at": "2026-06-24T18:08:14Z",
"pushed_at": "2026-06-24T18:08:06Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-32432.json
+1 -1
View File
@@ -224,7 +224,7 @@
"description": "CraftCMS CVE-2025-32432 - Clean PoC",
"fork": false,
"created_at": "2026-06-24T10:46:48Z",
"updated_at": "2026-06-24T11:12:36Z",
"updated_at": "2026-06-24T17:25:43Z",
"pushed_at": "2026-06-24T11:12:30Z",
"stargazers_count": 0,
"watchers_count": 0,
2025/CVE-2025-32463.json
+2 -2
View File
@@ -1595,8 +1595,8 @@
"description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.",
"fork": false,
"created_at": "2025-09-20T00:42:07Z",
"updated_at": "2026-06-24T12:50:54Z",
"pushed_at": "2026-06-24T12:50:50Z",
"updated_at": "2026-06-24T18:09:25Z",
"pushed_at": "2026-06-24T18:09:02Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-33073.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "PoC Exploit for the NTLM reflection SMB flaw.",
"fork": false,
"created_at": "2025-06-13T12:15:14Z",
"updated_at": "2026-06-14T14:25:55Z",
"updated_at": "2026-06-24T17:29:43Z",
"pushed_at": "2026-02-18T09:15:40Z",
"stargazers_count": 705,
"watchers_count": 705,
"stargazers_count": 704,
"watchers_count": 704,
"has_discussions": false,
"forks_count": 136,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 136,
"watchers": 705,
"watchers": 704,
"score": 0,
"subscribers_count": 5
},
2025/CVE-2025-48924.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1078129441,
"name": "apache-commons-lang2",
"full_name": "njawalkar\/apache-commons-lang2",
"owner": {
"login": "njawalkar",
"id": 6178674,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/6178674?v=4",
"html_url": "https:\/\/github.com\/njawalkar",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/njawalkar\/apache-commons-lang2",
"description": "Apache's commons-lang2 v2.6 with a backported fix for CVE-2025-48924",
"fork": false,
"created_at": "2025-10-17T08:53:02Z",
"updated_at": "2025-11-04T08:16:38Z",
"pushed_at": "2025-11-04T08:16:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-49844.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.",
"fork": false,
"created_at": "2019-04-13T07:51:09Z",
"updated_at": "2026-06-24T10:11:12Z",
"pushed_at": "2026-06-24T10:11:07Z",
"updated_at": "2026-06-24T18:21:42Z",
"pushed_at": "2026-06-24T18:21:36Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
"fork": false,
"created_at": "2022-04-06T09:27:39Z",
"updated_at": "2026-06-24T10:11:44Z",
"pushed_at": "2026-06-24T10:11:39Z",
"updated_at": "2026-06-24T18:22:16Z",
"pushed_at": "2026-06-24T18:22:09Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-52915.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-06-24T08:06:11Z",
"updated_at": "2026-06-24T18:04:44Z",
"pushed_at": "2026-06-20T15:36:23Z",
"stargazers_count": 815,
"watchers_count": 815,
"stargazers_count": 816,
"watchers_count": 816,
"has_discussions": false,
"forks_count": 121,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 121,
"watchers": 815,
"watchers": 816,
"score": 0,
"subscribers_count": 19
}
2025/CVE-2025-54424.json
+2 -2
View File
@@ -53,8 +53,8 @@
"description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐",
"fork": false,
"created_at": "2025-08-14T05:16:16Z",
"updated_at": "2026-06-24T12:46:04Z",
"pushed_at": "2026-06-24T12:46:01Z",
"updated_at": "2026-06-24T18:04:17Z",
"pushed_at": "2026-06-24T18:04:12Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2025/CVE-2025-55182.json
+24 -57
View File
@@ -14,8 +14,8 @@
"description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.",
"fork": false,
"created_at": "2022-06-17T10:19:10Z",
"updated_at": "2026-06-24T10:31:29Z",
"pushed_at": "2026-06-24T10:31:25Z",
"updated_at": "2026-06-24T18:42:20Z",
"pushed_at": "2026-06-24T18:42:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -99,8 +99,8 @@
"description": null,
"fork": false,
"created_at": "2024-11-29T12:32:19Z",
"updated_at": "2026-06-24T10:31:58Z",
"pushed_at": "2026-06-24T10:31:54Z",
"updated_at": "2026-06-24T18:42:54Z",
"pushed_at": "2026-06-24T18:42:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -148,8 +148,8 @@
"description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
"fork": false,
"created_at": "2025-06-06T16:34:46Z",
"updated_at": "2026-06-24T10:31:53Z",
"pushed_at": "2026-06-24T10:31:49Z",
"updated_at": "2026-06-24T18:42:37Z",
"pushed_at": "2026-06-24T18:42:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -871,12 +871,12 @@
"description": "High Fidelity Detection Mechanism for RSC\/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)",
"fork": false,
"created_at": "2025-12-04T06:55:04Z",
"updated_at": "2026-06-22T13:10:39Z",
"updated_at": "2026-06-24T17:40:33Z",
"pushed_at": "2025-12-07T04:16:46Z",
"stargazers_count": 2451,
"watchers_count": 2451,
"stargazers_count": 2450,
"watchers_count": 2450,
"has_discussions": false,
"forks_count": 269,
"forks_count": 270,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -884,8 +884,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 269,
"watchers": 2451,
"forks": 270,
"watchers": 2450,
"score": 0,
"subscribers_count": 11
},
@@ -1102,10 +1102,10 @@
"description": "Explanation and full RCE PoC for CVE-2025-55182",
"fork": false,
"created_at": "2025-12-04T11:49:55Z",
"updated_at": "2026-06-22T16:36:33Z",
"updated_at": "2026-06-24T15:49:17Z",
"pushed_at": "2025-12-08T13:51:04Z",
"stargazers_count": 1420,
"watchers_count": 1420,
"stargazers_count": 1421,
"watchers_count": 1421,
"has_discussions": false,
"forks_count": 197,
"allow_forking": true,
@@ -1116,7 +1116,7 @@
"topics": [],
"visibility": "public",
"forks": 197,
"watchers": 1420,
"watchers": 1421,
"score": 0,
"subscribers_count": 10
},
@@ -9310,39 +9310,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1114715610,
"name": "react2shell",
"full_name": "andrei2308\/react2shell",
"owner": {
"login": "andrei2308",
"id": 122682508,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/122682508?v=4",
"html_url": "https:\/\/github.com\/andrei2308",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/andrei2308\/react2shell",
"description": "CVE-2025-55182",
"fork": false,
"created_at": "2025-12-11T19:26:14Z",
"updated_at": "2025-12-12T12:41:22Z",
"pushed_at": "2025-12-12T12:41:18Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1114732179,
"name": "POC_react2shell_CVE-2025-55182",
@@ -11771,8 +11738,8 @@
"description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.",
"fork": false,
"created_at": "2025-12-24T14:48:19Z",
"updated_at": "2026-06-24T10:31:23Z",
"pushed_at": "2026-06-24T10:31:19Z",
"updated_at": "2026-06-24T18:42:31Z",
"pushed_at": "2026-06-24T18:42:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12289,8 +12256,8 @@
"description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
"fork": false,
"created_at": "2026-01-02T01:28:57Z",
"updated_at": "2026-06-24T10:35:16Z",
"pushed_at": "2026-06-24T10:35:10Z",
"updated_at": "2026-06-24T18:46:11Z",
"pushed_at": "2026-06-24T18:46:06Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -14802,10 +14769,10 @@
"description": "CVE-2025-55182 — Unauthenticated RCE in React Server Components (React2Shell). CVSS 10.0 exploit tool for authorized penetration testing.",
"fork": false,
"created_at": "2026-05-24T00:29:42Z",
"updated_at": "2026-06-19T20:16:56Z",
"updated_at": "2026-06-24T14:25:48Z",
"pushed_at": "2026-05-24T00:30:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -14830,7 +14797,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-57819.json
+33
View File
@@ -570,5 +570,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1279462844,
"name": "FreePBX-SQLi-RCE",
"full_name": "JazzTheRabbit\/FreePBX-SQLi-RCE",
"owner": {
"login": "JazzTheRabbit",
"id": 177130031,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/177130031?v=4",
"html_url": "https:\/\/github.com\/JazzTheRabbit",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/JazzTheRabbit\/FreePBX-SQLi-RCE",
"description": "CVE-2025-57819 FreePBX SQLi RCE PoC",
"fork": false,
"created_at": "2026-06-24T17:57:28Z",
"updated_at": "2026-06-24T18:40:35Z",
"pushed_at": "2026-06-24T18:40:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-61638.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "CVE-2025-61638 PoC",
"fork": false,
"created_at": "2025-11-28T11:15:01Z",
"updated_at": "2026-06-23T15:09:33Z",
"pushed_at": "2026-06-23T15:09:28Z",
"updated_at": "2026-06-24T17:18:58Z",
"pushed_at": "2026-06-24T17:18:54Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-66398.json
+2 -2
View File
@@ -64,8 +64,8 @@
"description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.",
"fork": false,
"created_at": "2026-03-23T09:09:21Z",
"updated_at": "2026-06-24T11:16:51Z",
"pushed_at": "2026-06-24T11:16:47Z",
"updated_at": "2026-06-24T16:29:29Z",
"pushed_at": "2026-06-24T16:29:23Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-66478.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.",
"fork": false,
"created_at": "2025-10-01T07:40:09Z",
"updated_at": "2026-06-24T10:32:35Z",
"pushed_at": "2026-06-24T10:32:30Z",
"updated_at": "2026-06-24T18:43:30Z",
"pushed_at": "2026-06-24T18:43:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -249,7 +249,7 @@
"stargazers_count": 403,
"watchers_count": 403,
"has_discussions": false,
"forks_count": 64,
"forks_count": 63,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -257,7 +257,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 64,
"forks": 63,
"watchers": 403,
"score": 0,
"subscribers_count": 2
2025/CVE-2025-68921.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.",
"fork": false,
"created_at": "2026-01-24T21:00:41Z",
"updated_at": "2026-06-24T10:47:04Z",
"pushed_at": "2026-06-24T10:46:55Z",
"updated_at": "2026-06-24T15:58:00Z",
"pushed_at": "2026-06-24T15:57:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-69256.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "Layer-2 supply-chain hardening for MCP servers — Ed25519-signed tool manifests, runtime spawn-attestation, default-deny argument sanitizer. Defends against marketplace-poisoning + CVE-2025-69256 + CVE-2025-61591.",
"fork": false,
"created_at": "2026-04-27T20:12:08Z",
"updated_at": "2026-06-21T16:49:30Z",
"pushed_at": "2026-06-22T04:18:52Z",
"updated_at": "2026-06-24T15:38:12Z",
"pushed_at": "2026-06-24T15:37:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": true,
2025/CVE-2025-69985.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit CVE-2025-69985 to bypass authentication and execute remote commands on FUXA versions ≤ 1.2.8 via the \/api\/runscript endpoint.",
"fork": false,
"created_at": "2025-04-10T09:18:30Z",
"updated_at": "2026-06-24T11:06:45Z",
"pushed_at": "2026-06-24T11:06:37Z",
"updated_at": "2026-06-24T16:19:13Z",
"pushed_at": "2026-06-24T16:18:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-70795.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "The PoC for CVE-2025-70795 \/ CVE-2026-0828 and updated driver",
"fork": false,
"created_at": "2026-02-14T11:50:08Z",
"updated_at": "2026-06-11T02:06:20Z",
"updated_at": "2026-06-24T17:56:34Z",
"pushed_at": "2026-03-13T09:52:10Z",
"stargazers_count": 48,
"watchers_count": 48,
"stargazers_count": 49,
"watchers_count": 49,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 48,
"watchers": 49,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-11834.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Proof of Concept (PoC) for the TP-Link DHCP Option 66 Unauthenticated RCE (CVE-2026-11834)",
"fork": false,
"created_at": "2026-06-23T19:41:07Z",
"updated_at": "2026-06-23T22:32:15Z",
"pushed_at": "2026-06-23T19:44:24Z",
"updated_at": "2026-06-24T17:31:10Z",
"pushed_at": "2026-06-24T17:30:44Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-12416.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1279233499,
"name": "CVE-2026-12416-CVE-2026-12417",
"full_name": "Nxploited\/CVE-2026-12416-CVE-2026-12417",
"owner": {
"login": "Nxploited",
"id": 188819918,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4",
"html_url": "https:\/\/github.com\/Nxploited",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Nxploited\/CVE-2026-12416-CVE-2026-12417",
"description": "Unauthenticated Account Takeover via Weak Password Reset Validation via 'reset_user_id' Parameter | Unauthenticated Privilege Escalation via Weak Password Reset Validation via 'reset_activation_code' Leading to Account Takeover",
"fork": false,
"created_at": "2026-06-24T13:49:45Z",
"updated_at": "2026-06-24T13:52:19Z",
"pushed_at": "2026-06-24T13:51:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-2002.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-2002 writeup and Proof-of-concept",
"fork": false,
"created_at": "2026-06-22T12:52:04Z",
"updated_at": "2026-06-24T12:40:43Z",
"updated_at": "2026-06-24T14:50:16Z",
"pushed_at": "2026-06-24T12:21:37Z",
"stargazers_count": 9,
"watchers_count": 9,
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -33,7 +33,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 9,
"watchers": 11,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-20841.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.",
"fork": false,
"created_at": "2024-09-22T12:19:06Z",
"updated_at": "2026-06-24T11:01:58Z",
"pushed_at": "2026-06-24T11:01:52Z",
"updated_at": "2026-06-24T16:14:42Z",
"pushed_at": "2026-06-24T16:13:33Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.",
"fork": false,
"created_at": "2026-02-26T05:21:28Z",
"updated_at": "2026-06-24T11:01:10Z",
"pushed_at": "2026-06-24T11:01:03Z",
"updated_at": "2026-06-24T16:13:35Z",
"pushed_at": "2026-06-24T16:12:41Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24061.json
+2 -2
View File
@@ -59,8 +59,8 @@
"description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.",
"fork": false,
"created_at": "2026-02-03T19:46:10Z",
"updated_at": "2026-06-24T10:52:23Z",
"pushed_at": "2026-06-24T10:52:19Z",
"updated_at": "2026-06-24T16:04:30Z",
"pushed_at": "2026-06-24T16:03:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24291.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions",
"fork": false,
"created_at": "2026-03-26T04:38:27Z",
"updated_at": "2026-06-24T11:18:37Z",
"pushed_at": "2026-06-24T11:18:32Z",
"updated_at": "2026-06-24T16:31:25Z",
"pushed_at": "2026-06-24T16:31:12Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-2441.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.",
"fork": false,
"created_at": "2026-03-03T14:19:18Z",
"updated_at": "2026-06-24T11:04:13Z",
"pushed_at": "2026-06-24T11:04:08Z",
"updated_at": "2026-06-24T16:16:49Z",
"pushed_at": "2026-06-24T16:15:57Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-2472.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.",
"fork": false,
"created_at": "2026-03-10T14:40:04Z",
"updated_at": "2026-06-24T11:08:37Z",
"pushed_at": "2026-06-24T11:08:33Z",
"updated_at": "2026-06-24T16:21:52Z",
"pushed_at": "2026-06-24T16:20:45Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-27944.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 1232357370,
"name": "HTB-Snapped-Writeup",
"full_name": "karimelsheikh1\/HTB-Snapped-Writeup",
"owner": {
"login": "karimelsheikh1",
"id": 224064244,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/224064244?v=4",
"html_url": "https:\/\/github.com\/karimelsheikh1",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/karimelsheikh1\/HTB-Snapped-Writeup",
"description": "HTB Snapped — Hard Linux machine writeup. CVE-2026-27944 (Nginx UI unauthenticated backup disclosure) chained with CVE-2026-3888 (snapd race condition LPE) to achieve full system compromise.",
"fork": false,
"created_at": "2026-05-07T21:12:14Z",
"updated_at": "2026-06-12T04:48:08Z",
"pushed_at": "2026-05-07T21:16:30Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-31431.json
+4 -4
View File
@@ -1032,8 +1032,8 @@
"description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.",
"fork": false,
"created_at": "2026-05-05T04:58:21Z",
"updated_at": "2026-06-24T11:37:34Z",
"pushed_at": "2026-06-24T11:37:30Z",
"updated_at": "2026-06-24T16:51:42Z",
"pushed_at": "2026-06-24T16:51:36Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -1147,8 +1147,8 @@
"description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.",
"fork": false,
"created_at": "2026-05-06T09:49:14Z",
"updated_at": "2026-06-24T11:38:06Z",
"pushed_at": "2026-06-24T11:38:02Z",
"updated_at": "2026-06-24T16:52:08Z",
"pushed_at": "2026-06-24T16:52:03Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-31802.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"fork": false,
"created_at": "2026-03-28T20:49:46Z",
"updated_at": "2026-06-24T11:19:54Z",
"pushed_at": "2026-06-24T11:19:50Z",
"updated_at": "2026-06-24T16:33:53Z",
"pushed_at": "2026-06-24T16:32:24Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-34908.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Safely detect whether a UniFi OS Server is vulnerable to CVE-2026-34908",
"fork": false,
"created_at": "2026-06-05T20:28:38Z",
"updated_at": "2026-06-23T00:09:44Z",
"updated_at": "2026-06-24T18:05:35Z",
"pushed_at": "2026-06-05T20:28:52Z",
"stargazers_count": 35,
"watchers_count": 35,
"stargazers_count": 45,
"watchers_count": 45,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 35,
"watchers": 45,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-3609.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-06-24T08:06:11Z",
"updated_at": "2026-06-24T18:04:44Z",
"pushed_at": "2026-06-20T15:36:23Z",
"stargazers_count": 815,
"watchers_count": 815,
"stargazers_count": 816,
"watchers_count": 816,
"has_discussions": false,
"forks_count": 121,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 121,
"watchers": 815,
"watchers": 816,
"score": 0,
"subscribers_count": 19
},
2026/CVE-2026-41089.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)",
"fork": false,
"created_at": "2026-06-01T04:22:29Z",
"updated_at": "2026-06-24T08:35:28Z",
"updated_at": "2026-06-24T18:04:48Z",
"pushed_at": "2026-06-02T08:30:55Z",
"stargazers_count": 181,
"watchers_count": 181,
"stargazers_count": 187,
"watchers_count": 187,
"has_discussions": false,
"forks_count": 62,
"forks_count": 64,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -38,8 +38,8 @@
"windows-server"
],
"visibility": "public",
"forks": 62,
"watchers": 181,
"forks": 64,
"watchers": 187,
"score": 0,
"subscribers_count": 1
},
2026/CVE-2026-41940.json
+2 -2
View File
@@ -324,8 +324,8 @@
"description": "Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.",
"fork": false,
"created_at": "2026-05-06T18:08:48Z",
"updated_at": "2026-06-24T11:38:40Z",
"pushed_at": "2026-06-24T11:38:36Z",
"updated_at": "2026-06-24T16:52:24Z",
"pushed_at": "2026-06-24T16:52:19Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-42221.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": null,
"fork": false,
"created_at": "2026-06-23T06:59:10Z",
"updated_at": "2026-06-23T15:01:29Z",
"pushed_at": "2026-06-23T15:01:17Z",
"updated_at": "2026-06-24T15:58:23Z",
"pushed_at": "2026-06-24T15:57:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-42978.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-42978 — Use-After-Free race condition in Windows Push Notifications (WpnService). Patch diff, root cause analysis, TOCTOU lab, Sysmon\/ETW detection rules.",
"fork": false,
"created_at": "2026-06-23T21:05:55Z",
"updated_at": "2026-06-24T12:41:08Z",
"updated_at": "2026-06-24T16:16:26Z",
"pushed_at": "2026-06-23T21:08:36Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 5,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-45504.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "CVE-2026-45504 Microsoft Exchange File Read",
"fork": false,
"created_at": "2026-06-24T01:05:34Z",
"updated_at": "2026-06-24T12:34:34Z",
"updated_at": "2026-06-24T18:04:15Z",
"pushed_at": "2026-06-24T01:45:46Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 14,
"watchers_count": 14,
"has_discussions": false,
"forks_count": 0,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 7,
"forks": 3,
"watchers": 14,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-45585.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Manage and recover BitLocker encrypted drives with this tool for Windows 11 recovery key management and educational study of CVE-2026-45585.",
"fork": false,
"created_at": "2026-06-16T07:21:36Z",
"updated_at": "2026-06-24T11:44:48Z",
"pushed_at": "2026-06-24T11:44:44Z",
"updated_at": "2026-06-24T16:59:21Z",
"pushed_at": "2026-06-24T16:59:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-48908.json
+4 -4
View File
@@ -52,7 +52,7 @@
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -75,7 +75,7 @@
"web-security"
],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 8,
"score": 0,
"subscribers_count": 0
@@ -95,8 +95,8 @@
"description": "CVE-2026-48908 - SP Page Builder Joomla Unauthenticated RCE ",
"fork": false,
"created_at": "2026-06-24T08:31:40Z",
"updated_at": "2026-06-24T08:32:43Z",
"pushed_at": "2026-06-24T08:31:41Z",
"updated_at": "2026-06-24T15:40:38Z",
"pushed_at": "2026-06-24T15:39:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-48909.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-48909 PoC",
"fork": false,
"created_at": "2026-06-21T21:30:39Z",
"updated_at": "2026-06-24T11:30:17Z",
"updated_at": "2026-06-24T17:45:10Z",
"pushed_at": "2026-06-21T21:31:12Z",
"stargazers_count": 19,
"watchers_count": 19,
"stargazers_count": 20,
"watchers_count": 20,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -37,7 +37,7 @@
],
"visibility": "public",
"forks": 2,
"watchers": 19,
"watchers": 20,
"score": 0,
"subscribers_count": 1
}
2026/CVE-2026-49975.json
+2 -2
View File
@@ -217,7 +217,7 @@
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -225,7 +225,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"forks": 2,
"watchers": 1,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-53435.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "An offensive security researcher + an AI vs. a fresh n-day: building the first public PoC for CVE-2026-53435 in one Friday night. Raw 8h20m log inside.",
"fork": false,
"created_at": "2026-06-12T14:50:22Z",
"updated_at": "2026-06-17T08:34:28Z",
"updated_at": "2026-06-24T15:08:02Z",
"pushed_at": "2026-06-12T14:53:33Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 7,
"watchers": 8,
"score": 0,
"subscribers_count": 0
}
README.md
+35 -27
View File
@@ -1078,6 +1078,13 @@
- [Polosss/By-Poloss..-..CVE-2026-11912](https://github.com/Polosss/By-Poloss..-..CVE-2026-11912)
### CVE-2026-12416 (2026-06-24)
<code>The Invoice Generator plugin for WordPress is vulnerable to Account Takeover via Password Reset in all versions up to, and including, 1.0.0. This is due to the `pravel_invoice_change_password()` function being registered as a nopriv AJAX handler with no nonce verification and no authorization check, and performing a loose equality comparison between the supplied `reset_activation_code` POST parameter and the target user's stored `forgot_email` user meta — a check that trivially evaluates to true (`'' == ''`) for any user who has never initiated a forgot-password request, which applies to administrators under normal conditions. This makes it possible for unauthenticated attackers to supply an arbitrary user ID via the `reset_user_id` POST parameter, bypass the activation code check entirely by omitting `reset_activation_code`, and set the target account's password to an attacker-chosen value, enabling full takeover of any account on the site, including administrator accounts.
</code>
- [Nxploited/CVE-2026-12416-CVE-2026-12417](https://github.com/Nxploited/CVE-2026-12416-CVE-2026-12417)
### CVE-2026-20127 (2026-02-25)
<code>A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system.\r\n\r\nThis vulnerability exists because the peering authentication mechanism in an affected system is not working properly. An attacker could exploit this vulnerability by sending crafted requests to an affected system. A successful exploit could allow the attacker to log in to an affected Cisco Catalyst SD-WAN Controller as an internal, high-privileged, non-root&amp;nbsp;user account. Using this account, the attacker could access NETCONF, which would then allow the attacker to manipulate network configuration for the SD-WAN fabric.&amp;nbsp;
@@ -1585,13 +1592,6 @@
- [EvtDanya/CVE-2026-27886](https://github.com/EvtDanya/CVE-2026-27886)
- [thesw0rd/CVE-2026-27886-PoC-Account-Takeover](https://github.com/thesw0rd/CVE-2026-27886-PoC-Account-Takeover)
### CVE-2026-27944 (2026-03-05)
<code>Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.3, the /api/backup endpoint is accessible without authentication and discloses the encryption keys required to decrypt the backup in the X-Backup-Security response header. This allows an unauthenticated attacker to download a full system backup containing sensitive data (user credentials, session tokens, SSL private keys, Nginx configurations) and decrypt it immediately. This issue has been patched in version 2.3.3.
</code>
- [karimelsheikh1/HTB-Snapped-Writeup](https://github.com/karimelsheikh1/HTB-Snapped-Writeup)
### CVE-2026-28318 (2026-06-04)
<code>SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: deflate. Mitigation steps are provided to secure customer environments in the SolarWinds Trust Center if you are unable to deploy the update
@@ -3394,7 +3394,11 @@
- [xtremebeing/starlette-host-header-lab](https://github.com/xtremebeing/starlette-host-header-lab)
- [Bhanunamikaze/BadHost-CVE-2026-48710-Exploit](https://github.com/Bhanunamikaze/BadHost-CVE-2026-48710-Exploit)
### CVE-2026-48732
### CVE-2026-48732 (2026-06-24)
<code>Warp is an agentic development environment. From 0.2023.03.21.08.02.stable_00 until 0.2026.05.06.15.42.stable_01, Warp contains a command injection issue in the legacy SSH background command path. Warp used the remote working directory reported by the session when building helper commands for SSH-backed metadata collection. A remote host, repository, or directory name controlled by an attacker could cause that helper command to execute additional shell syntax on the remote host as the victim's authenticated SSH account. This vulnerability is fixed in 0.2026.05.06.15.42.stable_01.
</code>
- [Saku0512/CVE-2026-48732-poc](https://github.com/Saku0512/CVE-2026-48732-poc)
### CVE-2026-48770
@@ -3699,7 +3703,11 @@
### CVE-2026-54597
- [iltosec/CVE-2026-54597](https://github.com/iltosec/CVE-2026-54597)
### CVE-2026-54686
### CVE-2026-54686 (2026-06-24)
<code>Warp is an agentic development environment. From 0.2021.04.25.23.05.stable_00 until 0.2026.05.06.15.42.stable_01, Warp accepted certain state-mutating terminal lifecycle hooks from the PTY stream without verifying that the hooks were emitted by Warp's shell integration for the active session. An attacker who could cause a victim to view attacker-controlled terminal output in Warp could spoof selected lifecycle metadata, including the current working directory reported for the active block or SSH session transport metadata. This vulnerability is fixed in 0.2026.05.06.15.42.stable_01.
</code>
- [Saku0512/CVE-2026-54686-poc](https://github.com/Saku0512/CVE-2026-54686-poc)
### CVE-2026-54761 (2026-06-23)
@@ -10796,6 +10804,13 @@
- [0xgh057r3c0n/CVE-2026-48907](https://github.com/0xgh057r3c0n/CVE-2026-48907)
### CVE-2025-48924 (2025-07-11)
<code>Uncontrolled Recursion vulnerability in Apache Commons Lang.\n\nThis issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to 2.6, and, from org.apache.commons:commons-lang3 3.0 before 3.18.0.\n\nThe methods ClassUtils.getClass(...) can throw StackOverflowError on very long inputs. Because an Error is usually not handled by applications and libraries, a \nStackOverflowError could cause an application to stop.\n\nUsers are recommended to upgrade to version 3.18.0, which fixes the issue.
</code>
- [njawalkar/apache-commons-lang2](https://github.com/njawalkar/apache-commons-lang2)
### CVE-2025-48932
- [XploitGh0st/CVE-2025-48932---exploit](https://github.com/XploitGh0st/CVE-2025-48932---exploit)
@@ -12358,7 +12373,6 @@
- [trilogy-group/react2shell-scan](https://github.com/trilogy-group/react2shell-scan)
- [VolksRat71/react2shellexploitvisualized](https://github.com/VolksRat71/react2shellexploitvisualized)
- [anuththara2007-W/CVE-2025-55182-Exploit-extension](https://github.com/anuththara2007-W/CVE-2025-55182-Exploit-extension)
- [andrei2308/react2shell](https://github.com/andrei2308/react2shell)
- [Nkwenti-Severian-Ndongtsop/POC_react2shell_CVE-2025-55182](https://github.com/Nkwenti-Severian-Ndongtsop/POC_react2shell_CVE-2025-55182)
- [aseemyash/krle](https://github.com/aseemyash/krle)
- [4nuxd/React2Shell](https://github.com/4nuxd/React2Shell)
@@ -13073,6 +13087,7 @@
- [YuvrajSHAD/FreePBX-CVE-2025-57819](https://github.com/YuvrajSHAD/FreePBX-CVE-2025-57819)
- [0xyngtg/FreePBX-CVE-2025-57819-CVE-2025-61678](https://github.com/0xyngtg/FreePBX-CVE-2025-57819-CVE-2025-61678)
- [ozcanpng/CVE-2025-57819-FreePBX-RCE2Root](https://github.com/ozcanpng/CVE-2025-57819-FreePBX-RCE2Root)
- [JazzTheRabbit/FreePBX-SQLi-RCE](https://github.com/JazzTheRabbit/FreePBX-SQLi-RCE)
### CVE-2025-57833 (2025-09-03)
@@ -19302,6 +19317,7 @@
- [abrewer251/CVE-2024-21762_FortiNet_PoC](https://github.com/abrewer251/CVE-2024-21762_FortiNet_PoC)
- [0x13-ByteZer0/CVE-2024-21762](https://github.com/0x13-ByteZer0/CVE-2024-21762)
- [0x0asif/CVE-2024-21762](https://github.com/0x0asif/CVE-2024-21762)
- [Sxmpl3/CVE-2024-21762-Safe-Check](https://github.com/Sxmpl3/CVE-2024-21762-Safe-Check)
### CVE-2024-21793 (2024-05-08)
@@ -21921,13 +21937,6 @@
- [MathSabo/CVE-2024-33297](https://github.com/MathSabo/CVE-2024-33297)
### CVE-2024-33298 (2025-01-10)
<code>Microweber Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the create new backup function in the endpoint /admin/module/view?type=admin__backup
</code>
- [MathSabo/CVE-2024-33298](https://github.com/MathSabo/CVE-2024-33298)
### CVE-2024-33299 (2025-01-10)
<code>Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the First Name and Last Name parameters in the endpoint /admin/module/view?type=users
@@ -41437,6 +41446,7 @@
- [sanan2004/CVE-2022-37706](https://github.com/sanan2004/CVE-2022-37706)
- [KaoXx/CVE-2022-37706](https://github.com/KaoXx/CVE-2022-37706)
- [d3ndr1t30x/CVE-2022-37706](https://github.com/d3ndr1t30x/CVE-2022-37706)
- [Massive43/CVE-2022-37706](https://github.com/Massive43/CVE-2022-37706)
### CVE-2022-37708
- [thekevinday/docker_lightman_exploit](https://github.com/thekevinday/docker_lightman_exploit)
@@ -41521,7 +41531,6 @@
</code>
- [TomKing062/CVE-2022-38691_38692](https://github.com/TomKing062/CVE-2022-38691_38692)
- [mutur4/CVE-2022-38691](https://github.com/mutur4/CVE-2022-38691)
### CVE-2022-38694 (2025-09-01)
@@ -43178,13 +43187,6 @@
- [pazhanivel07/frameworks_base_Aosp10_r33_CVE-2021-0315](https://github.com/pazhanivel07/frameworks_base_Aosp10_r33_CVE-2021-0315)
- [nanopathi/frameworks_base1_CVE-2021-0315](https://github.com/nanopathi/frameworks_base1_CVE-2021-0315)
### CVE-2021-0318 (2021-01-11)
<code>In appendEventsToCacheLocked of SensorEventConnection.cpp, there is a possible out of bounds write due to a use-after-free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-9, Android-8.1, Android-10, Android-11; Android ID: A-168211968.
</code>
- [nanopathi/frameworks_native_AOSP10_r33_CVE-2021-0318](https://github.com/nanopathi/frameworks_native_AOSP10_r33_CVE-2021-0318)
### CVE-2021-0325 (2021-02-10)
<code>In ih264d_parse_pslice of ih264d_parse_pslice.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-174238784
@@ -46486,6 +46488,7 @@
- [umair-aziz025/dahua-cve-research](https://github.com/umair-aziz025/dahua-cve-research)
- [eagle-nett/DAHUA_AUTH-BYPASS-CVE-2021-33044](https://github.com/eagle-nett/DAHUA_AUTH-BYPASS-CVE-2021-33044)
- [Bd-Mutant7/DahuaLoginBypass](https://github.com/Bd-Mutant7/DahuaLoginBypass)
- [litndat/Camera-Dahua-Research-l-h-ng-CVE-2021-33044](https://github.com/litndat/Camera-Dahua-Research-l-h-ng-CVE-2021-33044)
### CVE-2021-33045 (2021-09-15)
@@ -51822,6 +51825,13 @@
- [Al1ex/CVE-2020-8635](https://github.com/Al1ex/CVE-2020-8635)
### CVE-2020-8636 (2020-02-06)
<code>An issue was discovered in OpServices OpMon 9.3.2 that allows Remote Code Execution .
</code>
- [phor3nsic/opmonster](https://github.com/phor3nsic/opmonster)
### CVE-2020-8637 (2020-04-03)
<code>A SQL injection vulnerability in TestLink 1.9.20 allows attackers to execute arbitrary SQL commands in dragdroptreenodes.php via the node_id parameter.
@@ -54002,9 +54012,7 @@
<code>Directory traversal vulnerability in wkhtmltopdf through 0.12.5 allows remote attackers to read local files and disclose sensitive information via a crafted html file running with the default configurations.
</code>
- [andrei2308/CVE-2020-21365](https://github.com/andrei2308/CVE-2020-21365)
- [samaellovecraft/CVE-2020-21365](https://github.com/samaellovecraft/CVE-2020-21365)
- [andrei2308/CVE-2020-21365-PoC](https://github.com/andrei2308/CVE-2020-21365-PoC)
### CVE-2020-21378 (2020-12-21)