From 4c38d41e501d02f3a87713b64b664c3205e1b2fa Mon Sep 17 00:00:00 2001 From: motikan2010-bot Date: Tue, 27 Oct 2026 20:47:03 +0900 Subject: [PATCH] Auto Update 2026/10/27 11:47:03 --- 2015/CVE-2015-3456.json | 8 +- 2017/CVE-2017-0143.json | 110 -- 2017/CVE-2017-1000112.json | 33 - 2017/CVE-2017-10271.json | 33 - 2017/CVE-2017-12149.json | 37 - 2017/CVE-2017-12615.json | 33 - 2017/CVE-2017-14849.json | 35 - 2017/CVE-2017-14980.json | 33 - 2017/CVE-2017-5638.json | 99 -- 2017/CVE-2017-5941.json | 33 - 2017/CVE-2017-6742.json | 35 - 2017/CVE-2017-7184.json | 33 - 2017/CVE-2017-7269.json | 33 - 2017/CVE-2017-7494.json | 66 -- 2017/CVE-2017-7525.json | 2 +- 2017/CVE-2017-7921.json | 74 +- 2017/CVE-2017-9805.json | 33 - 2019/CVE-2019-0708.json | 33 - 2019/CVE-2019-11358.json | 2 +- 2019/CVE-2019-15813.json | 35 - 2019/CVE-2019-1653.json | 40 - 2019/CVE-2019-3396.json | 33 - 2019/CVE-2019-5736.json | 33 - 2019/CVE-2019-6340.json | 33 - 2019/CVE-2019-6487.json | 8 +- 2020/CVE-2020-10977.json | 33 - 2020/CVE-2020-14882.json | 33 - 2020/CVE-2020-35713.json | 38 - 2020/CVE-2020-7200.json | 41 - 2021/CVE-2021-23639.json | 35 - 2021/CVE-2021-24959.json | 35 - 2021/CVE-2021-28164.json | 33 - 2021/CVE-2021-34527.json | 8 +- 2021/CVE-2021-41773.json | 4 +- 2021/CVE-2021-43798.json | 33 - 2021/CVE-2021-44228.json | 33 - 2022/CVE-2022-0165.json | 43 - 2022/CVE-2022-0847.json | 66 -- 2022/CVE-2022-1329.json | 33 - 2022/CVE-2022-1565.json | 35 - 2022/CVE-2022-21500.json | 42 - 2022/CVE-2022-22978.json | 33 - 2022/CVE-2022-23935.json | 33 - 2022/CVE-2022-24112.json | 33 - 2022/CVE-2022-24355.json | 2 +- 2022/CVE-2022-26134.json | 33 - 2022/CVE-2022-29072.json | 33 - 2022/CVE-2022-32250.json | 33 - 2022/CVE-2022-36446.json | 33 - 2022/CVE-2022-36779.json | 33 - 2022/CVE-2022-38694.json | 8 +- 2022/CVE-2022-44569.json | 35 - 2022/CVE-2022-46169.json | 33 - 2022/CVE-2022-46395.json | 33 - 2022/CVE-2022-46689.json | 8 +- 2023/CVE-2023-20696.json | 8 +- 2023/CVE-2023-23752.json | 40 + 2023/CVE-2023-42931.json | 8 +- 2024/CVE-2024-0044.json | 8 +- 2024/CVE-2024-1086.json | 4 +- 2024/CVE-2024-1561.json | 33 + 2024/CVE-2024-22203.json | 2 +- 2024/CVE-2024-42992.json | 4 +- 2024/CVE-2024-45337.json | 2 +- 2024/CVE-2024-4577.json | 4 +- 2024/CVE-2024-45846.json | 2 +- .../CVE-2024-55090.json | 22 +- 2024/CVE-2024-55947.json | 2 +- 2024/CVE-2024-6387.json | 2 +- 2024/CVE-2024-9264.json | 2 +- 2025/CVE-2025-0890.json | 43 - 2025/CVE-2025-10897.json | 35 - 2025/CVE-2025-15001.json | 35 - 2025/CVE-2025-21479.json | 35 +- 2025/CVE-2025-24071.json | 12 +- ...VE-2025-69286.json => CVE-2025-27740.json} | 24 +- 2025/CVE-2025-27840.json | 33 - 2025/CVE-2025-2945.json | 33 - 2025/CVE-2025-29927.json | 33 - 2025/CVE-2025-32375.json | 33 - 2025/CVE-2025-32432.json | 74 +- 2025/CVE-2025-32433.json | 33 - 2025/CVE-2025-32463.json | 49 +- 2025/CVE-2025-3248.json | 33 - 2025/CVE-2025-32756.json | 8 +- 2025/CVE-2025-36911.json | 8 +- 2025/CVE-2025-37899.json | 4 +- 2025/CVE-2025-48932.json | 33 - 2025/CVE-2025-49844.json | 8 +- 2025/CVE-2025-50460.json | 2 +- 2025/CVE-2025-52464.json | 35 - 2025/CVE-2025-53770.json | 33 - 2025/CVE-2025-55182.json | 245 +---- 2025/CVE-2025-57052.json | 49 - 2025/CVE-2025-5781.json | 68 -- 2025/CVE-2025-57819.json | 33 - 2025/CVE-2025-59528.json | 66 -- 2025/CVE-2025-62593.json | 33 - 2025/CVE-2025-64459.json | 33 - 2025/CVE-2025-64512.json | 66 -- 2025/CVE-2025-64513.json | 33 - 2025/CVE-2025-66390.json | 35 - 2025/CVE-2025-66478.json | 8 +- 2025/CVE-2025-68645.json | 33 - 2025/CVE-2025-68937.json | 41 - 2025/CVE-2025-69212.json | 33 - 2025/CVE-2025-7026.json | 35 - 2025/CVE-2025-7029.json | 35 - 2025/CVE-2025-70559.json | 35 - 2025/CVE-2025-71338.json | 35 - 2025/CVE-2025-7384.json | 35 - 2025/CVE-2025-7771.json | 33 - 2025/CVE-2025-8045.json | 35 - 2025/CVE-2025-8110.json | 35 +- 2026/CVE-2026-100833.json | 2 +- 2026/CVE-2026-106686.json | 35 - 2026/CVE-2026-107092.json | 8 +- .../CVE-2026-107327.json | 22 +- .../CVE-2026-107328.json | 22 +- .../CVE-2026-107329.json | 22 +- 2026/CVE-2026-10961.json | 10 +- 2026/CVE-2026-109618.json | 976 +++++++++++++----- 2026/CVE-2026-109619.json | 49 +- 2026/CVE-2026-110200.json | 35 + 2026/CVE-2026-110922.json | 4 +- 2026/CVE-2026-111497.json | 219 +++- 2026/CVE-2026-112611.json | 35 + 2026/CVE-2026-114509.json | 33 + 2026/CVE-2026-115893.json | 35 + 2026/CVE-2026-115905.json | 44 + 2026/CVE-2026-1668.json | 8 +- 2026/CVE-2026-18107.json | 4 +- 2026/CVE-2026-21589.json | 4 +- 2026/CVE-2026-26336.json | 12 +- 2026/CVE-2026-31431.json | 8 +- 2026/CVE-2026-33825.json | 33 + 2026/CVE-2026-34197.json | 33 - 2026/CVE-2026-40369.json | 8 +- 2026/CVE-2026-41089.json | 66 -- 2026/CVE-2026-42588.json | 33 - 2026/CVE-2026-42945.json | 33 - 2026/CVE-2026-42980.json | 8 +- 2026/CVE-2026-43284.json | 2 +- 2026/CVE-2026-43499.json | 115 ++- 2026/CVE-2026-4372.json | 4 +- 2026/CVE-2026-49881.json | 45 +- 2026/CVE-2026-52656.json | 8 +- 2026/CVE-2026-53576.json | 33 + 2026/CVE-2026-54121.json | 16 +- 2026/CVE-2026-54806.json | 8 +- 2026/CVE-2026-55944.json | 35 + 2026/CVE-2026-62735.json | 8 +- 2026/CVE-2026-63030.json | 49 +- 2026/CVE-2026-64560.json | 65 +- 2026/CVE-2026-64564.json | 2 +- 2026/CVE-2026-64638.json | 10 +- 2026/CVE-2026-65400.json | 8 +- 2026/CVE-2026-70748.json | 37 + 2026/CVE-2026-77647.json | 33 + 2026/CVE-2026-84636.json | 35 + 2026/CVE-2026-85168.json | 4 +- 2026/CVE-2026-86076.json | 4 +- 2026/CVE-2026-90817.json | 33 + 2026/CVE-2026-93328.json | 35 + 2026/CVE-2026-93399.json | 33 + 2026/CVE-2026-96889.json | 4 +- 2026/CVE-2026-97205.json | 33 + 2026/CVE-2026-97629.json | 33 + 2026/CVE-2026-98260.json | 93 +- 169 files changed, 2081 insertions(+), 4213 deletions(-) delete mode 100644 2017/CVE-2017-14849.json delete mode 100644 2017/CVE-2017-6742.json delete mode 100644 2019/CVE-2019-15813.json delete mode 100644 2020/CVE-2020-35713.json delete mode 100644 2020/CVE-2020-7200.json delete mode 100644 2021/CVE-2021-23639.json delete mode 100644 2021/CVE-2021-24959.json delete mode 100644 2022/CVE-2022-0165.json delete mode 100644 2022/CVE-2022-1565.json delete mode 100644 2022/CVE-2022-21500.json delete mode 100644 2022/CVE-2022-44569.json rename 2019/CVE-2019-5737.json => 2024/CVE-2024-55090.json (58%) delete mode 100644 2025/CVE-2025-0890.json delete mode 100644 2025/CVE-2025-10897.json delete mode 100644 2025/CVE-2025-15001.json rename 2025/{CVE-2025-69286.json => CVE-2025-27740.json} (51%) delete mode 100644 2025/CVE-2025-52464.json delete mode 100644 2025/CVE-2025-57052.json delete mode 100644 2025/CVE-2025-5781.json delete mode 100644 2025/CVE-2025-66390.json delete mode 100644 2025/CVE-2025-7026.json delete mode 100644 2025/CVE-2025-7029.json delete mode 100644 2025/CVE-2025-70559.json delete mode 100644 2025/CVE-2025-71338.json delete mode 100644 2025/CVE-2025-7384.json delete mode 100644 2025/CVE-2025-8045.json delete mode 100644 2026/CVE-2026-106686.json rename 2025/CVE-2025-10951.json => 2026/CVE-2026-107327.json (57%) rename 2025/CVE-2025-30374.json => 2026/CVE-2026-107328.json (57%) rename 2025/CVE-2025-11740.json => 2026/CVE-2026-107329.json (57%) create mode 100644 2026/CVE-2026-110200.json create mode 100644 2026/CVE-2026-112611.json create mode 100644 2026/CVE-2026-115893.json create mode 100644 2026/CVE-2026-115905.json create mode 100644 2026/CVE-2026-55944.json create mode 100644 2026/CVE-2026-70748.json create mode 100644 2026/CVE-2026-84636.json create mode 100644 2026/CVE-2026-93328.json diff --git a/2015/CVE-2015-3456.json b/2015/CVE-2015-3456.json index ab1c970eed..a59d71441c 100644 --- a/2015/CVE-2015-3456.json +++ b/2015/CVE-2015-3456.json @@ -14,10 +14,10 @@ "description": "Experiments related to CVE-2015-3456", "fork": false, "created_at": "2015-05-17T20:14:47Z", - "updated_at": "2026-04-10T02:35:45Z", + "updated_at": "2026-10-27T05:36:17Z", "pushed_at": "2015-05-27T13:58:46Z", - "stargazers_count": 13, - "watchers_count": 13, + "stargazers_count": 14, + "watchers_count": 14, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 3, - "watchers": 13, + "watchers": 14, "score": 0, "subscribers_count": 2 }, diff --git a/2017/CVE-2017-0143.json b/2017/CVE-2017-0143.json index f6df416cd2..2028f034e4 100644 --- a/2017/CVE-2017-0143.json +++ b/2017/CVE-2017-0143.json @@ -263,50 +263,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1139163911, - "name": "smb", - "full_name": "hackingyseguridad\/smb", - "owner": { - "login": "hackingyseguridad", - "id": 20928501, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/20928501?v=4", - "html_url": "https:\/\/github.com\/hackingyseguridad", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/hackingyseguridad\/smb", - "description": "SMBv1: CVE-2017-0143, gravedad 8.8, de ejecucion remota de codigo (RCE), en Windows con SMBv1 (ms17-010)", - "fork": false, - "created_at": "2026-01-21T15:53:30Z", - "updated_at": "2026-01-23T12:47:49Z", - "pushed_at": "2026-01-23T12:47:45Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "ethernalblue", - "ransonware", - "samba", - "samba-server", - "server", - "smb", - "vulnerabilidad", - "wanacry", - "windows", - "windows2003" - ], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1243753454, "name": "thm-blue-writeup", @@ -373,72 +329,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1435033252, - "name": "Laboratorio-Hacking-Etico-Vulnerabilidad-CVE-2017-0143", - "full_name": "NeoCoderFSG\/Laboratorio-Hacking-Etico-Vulnerabilidad-CVE-2017-0143", - "owner": { - "login": "NeoCoderFSG", - "id": 296329799, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/296329799?v=4", - "html_url": "https:\/\/github.com\/NeoCoderFSG", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/NeoCoderFSG\/Laboratorio-Hacking-Etico-Vulnerabilidad-CVE-2017-0143", - "description": "En este repositorio voy subir la explotacion de la vulnerablildad CVE-2017-0143 con el exploit eternalblue.", - "fork": false, - "created_at": "2026-10-26T23:26:20Z", - "updated_at": "2026-10-26T23:31:08Z", - "pushed_at": "2026-10-26T23:31:04Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1435042277, - "name": "post-explotacion-CVE-2017-0143", - "full_name": "NeoCoderFSG\/post-explotacion-CVE-2017-0143", - "owner": { - "login": "NeoCoderFSG", - "id": 296329799, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/296329799?v=4", - "html_url": "https:\/\/github.com\/NeoCoderFSG", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/NeoCoderFSG\/post-explotacion-CVE-2017-0143", - "description": "Aqui voy a colocar el paso a paso de la post explotacion de la vulnerabilidad CVE-2017-0143", - "fork": false, - "created_at": "2026-10-26T23:40:32Z", - "updated_at": "2026-10-27T00:21:13Z", - "pushed_at": "2026-10-27T00:21:10Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1435053394, "name": "explotacion-post-CVE-2017-0143", diff --git a/2017/CVE-2017-1000112.json b/2017/CVE-2017-1000112.json index 243f239273..256de59e3a 100644 --- a/2017/CVE-2017-1000112.json +++ b/2017/CVE-2017-1000112.json @@ -98,39 +98,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 1147940830, - "name": "CVE-2017-1000112-PoC", - "full_name": "Spydomain\/CVE-2017-1000112-PoC", - "owner": { - "login": "Spydomain", - "id": 199271706, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/199271706?v=4", - "html_url": "https:\/\/github.com\/Spydomain", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Spydomain\/CVE-2017-1000112-PoC", - "description": null, - "fork": false, - "created_at": "2026-02-02T11:43:26Z", - "updated_at": "2026-03-06T04:27:39Z", - "pushed_at": "2026-02-02T16:53:12Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, { "id": 1308002175, "name": "CVE-2017-1000112", diff --git a/2017/CVE-2017-10271.json b/2017/CVE-2017-10271.json index 58f5c7c341..5b66e923a9 100644 --- a/2017/CVE-2017-10271.json +++ b/2017/CVE-2017-10271.json @@ -970,38 +970,5 @@ "watchers": 0, "score": 0, "subscribers_count": 0 - }, - { - "id": 1409878998, - "name": "vulhub-weblogic-cve-2017-10271", - "full_name": "CyberCTF\/vulhub-weblogic-cve-2017-10271", - "owner": { - "login": "CyberCTF", - "id": 190261590, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/190261590?v=4", - "html_url": "https:\/\/github.com\/CyberCTF", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/CyberCTF\/vulhub-weblogic-cve-2017-10271", - "description": "Vulhub weblogic\/CVE-2017-10271: WebLogic wls-wsat XMLDecoder RCE, run with Isoloom", - "fork": false, - "created_at": "2026-10-08T06:56:16Z", - "updated_at": "2026-10-20T08:31:42Z", - "pushed_at": "2026-10-20T08:31:37Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2017/CVE-2017-12149.json b/2017/CVE-2017-12149.json index 69e79f2e7f..fa90199fad 100644 --- a/2017/CVE-2017-12149.json +++ b/2017/CVE-2017-12149.json @@ -296,43 +296,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 1126430636, - "name": "cve-2017-12149-playground", - "full_name": "galois17\/cve-2017-12149-playground", - "owner": { - "login": "galois17", - "id": 159247, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/159247?v=4", - "html_url": "https:\/\/github.com\/galois17", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/galois17\/cve-2017-12149-playground", - "description": null, - "fork": false, - "created_at": "2026-01-01T22:35:05Z", - "updated_at": "2026-01-09T15:25:55Z", - "pushed_at": "2026-01-09T15:23:28Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "hacking", - "jboss-seam", - "vulnerability" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1410893260, "name": "vulhub-jboss-cve-2017-12149", diff --git a/2017/CVE-2017-12615.json b/2017/CVE-2017-12615.json index 3cdb878961..bc44d146a0 100644 --- a/2017/CVE-2017-12615.json +++ b/2017/CVE-2017-12615.json @@ -568,39 +568,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1410886930, - "name": "vulhub-tomcat-cve-2017-12615", - "full_name": "CyberCTF\/vulhub-tomcat-cve-2017-12615", - "owner": { - "login": "CyberCTF", - "id": 190261590, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/190261590?v=4", - "html_url": "https:\/\/github.com\/CyberCTF", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/CyberCTF\/vulhub-tomcat-cve-2017-12615", - "description": "Vulhub tomcat\/CVE-2017-12615: Tomcat 8.5.19 PUT JSP upload, run with Isoloom", - "fork": false, - "created_at": "2026-10-08T19:53:07Z", - "updated_at": "2026-10-20T07:43:37Z", - "pushed_at": "2026-10-20T07:43:33Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1412541794, "name": "apache-tomcat-security-audit", diff --git a/2017/CVE-2017-14849.json b/2017/CVE-2017-14849.json deleted file mode 100644 index e18924ee98..0000000000 --- a/2017/CVE-2017-14849.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1410907943, - "name": "vulhub-node-cve-2017-14849", - "full_name": "CyberCTF\/vulhub-node-cve-2017-14849", - "owner": { - "login": "CyberCTF", - "id": 190261590, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/190261590?v=4", - "html_url": "https:\/\/github.com\/CyberCTF", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/CyberCTF\/vulhub-node-cve-2017-14849", - "description": "Vulhub node\/CVE-2017-14849: Node.js 8.5.0 Path Traversal (CVE-2017-14849), run with Isoloom", - "fork": false, - "created_at": "2026-10-08T20:15:06Z", - "updated_at": "2026-10-20T07:38:27Z", - "pushed_at": "2026-10-20T07:38:23Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2017/CVE-2017-14980.json b/2017/CVE-2017-14980.json index d9aa75cf86..140becd762 100644 --- a/2017/CVE-2017-14980.json +++ b/2017/CVE-2017-14980.json @@ -108,39 +108,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 1138598989, - "name": "CVE-2017-14980", - "full_name": "DaviGSantana\/CVE-2017-14980", - "owner": { - "login": "DaviGSantana", - "id": 144629099, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/144629099?v=4", - "html_url": "https:\/\/github.com\/DaviGSantana", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/DaviGSantana\/CVE-2017-14980", - "description": "STACK BUFFER OVERFLOW EXPLOIT RESULTING IN REMOTE CODE EXECUTION", - "fork": false, - "created_at": "2026-01-20T22:01:52Z", - "updated_at": "2026-08-28T18:28:20Z", - "pushed_at": "2026-01-20T22:10:34Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1169885121, "name": "CVE-2017-14980.RCE", diff --git a/2017/CVE-2017-5638.json b/2017/CVE-2017-5638.json index 357d391e55..62c560f44e 100644 --- a/2017/CVE-2017-5638.json +++ b/2017/CVE-2017-5638.json @@ -2855,104 +2855,5 @@ "watchers": 1, "score": 0, "subscribers_count": 0 - }, - { - "id": 1406674893, - "name": "struts-patch-gap-auditor", - "full_name": "Piyush-Tiwatne\/struts-patch-gap-auditor", - "owner": { - "login": "Piyush-Tiwatne", - "id": 196505614, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/196505614?v=4", - "html_url": "https:\/\/github.com\/Piyush-Tiwatne", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Piyush-Tiwatne\/struts-patch-gap-auditor", - "description": "Python tool that detects Apache Struts versions vulnerable to CVE-2017-5638, the flaw behind the 2017 Equifax breach.", - "fork": false, - "created_at": "2026-10-06T04:12:34Z", - "updated_at": "2026-10-06T04:26:42Z", - "pushed_at": "2026-10-06T04:26:38Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1423659274, - "name": "Vulnerability-Analysis-and-Mitigation", - "full_name": "s1kh\/Vulnerability-Analysis-and-Mitigation", - "owner": { - "login": "s1kh", - "id": 163766119, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/163766119?v=4", - "html_url": "https:\/\/github.com\/s1kh", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/s1kh\/Vulnerability-Analysis-and-Mitigation", - "description": "Vulnerability analysis, exploitation, and multi-layered defense hardening for Apache Struts 2 (CVE-2017-5638) & Windows Print Spooler \/ PrintNightmare (CVE-2021-34527) with ELK SIEM monitoring and Windows Event Log auditing.", - "fork": false, - "created_at": "2026-10-17T19:11:39Z", - "updated_at": "2026-10-18T04:56:24Z", - "pushed_at": "2026-10-18T04:56:21Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1429314420, - "name": "CVE-2017-5638-Apache-Struts-Analysis", - "full_name": "Ethel087\/CVE-2017-5638-Apache-Struts-Analysis", - "owner": { - "login": "Ethel087", - "id": 346199017, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/346199017?v=4", - "html_url": "https:\/\/github.com\/Ethel087", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Ethel087\/CVE-2017-5638-Apache-Struts-Analysis", - "description": "Analysis of an Apache Struts vulnerability and cybersecurity response.", - "fork": false, - "created_at": "2026-10-22T06:04:40Z", - "updated_at": "2026-10-22T06:08:49Z", - "pushed_at": "2026-10-22T06:08:45Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2017/CVE-2017-5941.json b/2017/CVE-2017-5941.json index de18fe031a..ab826a34ac 100644 --- a/2017/CVE-2017-5941.json +++ b/2017/CVE-2017-5941.json @@ -196,38 +196,5 @@ "watchers": 0, "score": 0, "subscribers_count": 0 - }, - { - "id": 1392206745, - "name": "scenario-c-block", - "full_name": "jimahub\/scenario-c-block", - "owner": { - "login": "jimahub", - "id": 272830642, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/272830642?v=4", - "html_url": "https:\/\/github.com\/jimahub", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/jimahub\/scenario-c-block", - "description": "Thesis scenario test (research only): Scenario C: EPSS-BLOCK path - node-serialize@0.0.4 CVE-2017-5941", - "fork": false, - "created_at": "2026-09-28T08:22:22Z", - "updated_at": "2026-10-03T04:52:35Z", - "pushed_at": "2026-10-03T04:52:32Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2017/CVE-2017-6742.json b/2017/CVE-2017-6742.json deleted file mode 100644 index 8bb4a94895..0000000000 --- a/2017/CVE-2017-6742.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1136485776, - "name": "Cisco-IOS-Exploitation-JAGUAR_TOOTH-CVE-2017-6742-Reconstruction", - "full_name": "sastraadiwiguna-purpleeliteteaming\/Cisco-IOS-Exploitation-JAGUAR_TOOTH-CVE-2017-6742-Reconstruction", - "owner": { - "login": "sastraadiwiguna-purpleeliteteaming", - "id": 248769097, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/248769097?v=4", - "html_url": "https:\/\/github.com\/sastraadiwiguna-purpleeliteteaming", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sastraadiwiguna-purpleeliteteaming\/Cisco-IOS-Exploitation-JAGUAR_TOOTH-CVE-2017-6742-Reconstruction", - "description": "Comprehensive 100% Unrestricted Technical Analysis of JAGUAR_TOOTH Malware (APT28). High-precision reconstruction of Cisco IOS SNMP exploitation, ROP chaining, and memory-resident espionage tactics by SASTRA_ADI_WIGUNA.", - "fork": false, - "created_at": "2026-01-17T19:22:04Z", - "updated_at": "2026-01-18T17:52:54Z", - "pushed_at": "2026-01-18T10:20:56Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2017/CVE-2017-7184.json b/2017/CVE-2017-7184.json index 574f8bcda6..feabe253e2 100644 --- a/2017/CVE-2017-7184.json +++ b/2017/CVE-2017-7184.json @@ -32,39 +32,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 1147950600, - "name": "CVE-2017-7184", - "full_name": "Grish-Pradhan\/CVE-2017-7184", - "owner": { - "login": "Grish-Pradhan", - "id": 122863369, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/122863369?v=4", - "html_url": "https:\/\/github.com\/Grish-Pradhan", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Grish-Pradhan\/CVE-2017-7184", - "description": null, - "fork": false, - "created_at": "2026-02-02T11:58:19Z", - "updated_at": "2026-02-02T12:01:34Z", - "pushed_at": "2026-02-02T12:01:31Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1173498923, "name": "CVE-2017-7184", diff --git a/2017/CVE-2017-7269.json b/2017/CVE-2017-7269.json index 01170e8616..89fae39398 100644 --- a/2017/CVE-2017-7269.json +++ b/2017/CVE-2017-7269.json @@ -572,39 +572,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1137580711, - "name": "Assignement_3-CVE-2017-7269", - "full_name": "Killian0713\/Assignement_3-CVE-2017-7269", - "owner": { - "login": "Killian0713", - "id": 180306942, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/180306942?v=4", - "html_url": "https:\/\/github.com\/Killian0713", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Killian0713\/Assignement_3-CVE-2017-7269", - "description": null, - "fork": false, - "created_at": "2026-01-19T14:58:55Z", - "updated_at": "2026-01-20T17:06:42Z", - "pushed_at": "2026-01-19T16:02:25Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1271622036, "name": "Penetration-Testing-Assessment-23-04-2026", diff --git a/2017/CVE-2017-7494.json b/2017/CVE-2017-7494.json index 053d3e5e6e..90c1579c53 100644 --- a/2017/CVE-2017-7494.json +++ b/2017/CVE-2017-7494.json @@ -599,72 +599,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1151850960, - "name": "cdt-samba-deploy", - "full_name": "Zanex360\/cdt-samba-deploy", - "owner": { - "login": "Zanex360", - "id": 52129941, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/52129941?v=4", - "html_url": "https:\/\/github.com\/Zanex360", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Zanex360\/cdt-samba-deploy", - "description": "CDT Ansible playbook for deploying CVE-2017-7494 aka \"SambaCry\" to an Ubuntu box", - "fork": false, - "created_at": "2026-02-07T01:30:45Z", - "updated_at": "2026-02-07T01:30:49Z", - "pushed_at": "2026-02-07T01:30:46Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1151864542, - "name": "cdt-vulnsamba-deploy", - "full_name": "Zanex360\/cdt-vulnsamba-deploy", - "owner": { - "login": "Zanex360", - "id": 52129941, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/52129941?v=4", - "html_url": "https:\/\/github.com\/Zanex360", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Zanex360\/cdt-vulnsamba-deploy", - "description": "CDT Ansible playbook for deploying CVE-2017-7494 aka \"SambaCry\" to an Ubuntu box ", - "fork": false, - "created_at": "2026-02-07T02:09:47Z", - "updated_at": "2026-02-07T04:36:16Z", - "pushed_at": "2026-02-07T04:36:12Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1335080071, "name": "CVE-2017-7494", diff --git a/2017/CVE-2017-7525.json b/2017/CVE-2017-7525.json index 57266efd8d..2f18f9c672 100644 --- a/2017/CVE-2017-7525.json +++ b/2017/CVE-2017-7525.json @@ -117,7 +117,7 @@ "description": "Jackson Deserialization CVE-2017-7525 PoC", "fork": false, "created_at": "2020-03-02T00:10:09Z", - "updated_at": "2021-12-22T00:55:04Z", + "updated_at": "2026-10-27T03:45:06Z", "pushed_at": "2023-03-28T22:45:35Z", "stargazers_count": 1, "watchers_count": 1, diff --git a/2017/CVE-2017-7921.json b/2017/CVE-2017-7921.json index 50d71e864f..1b56938bf3 100644 --- a/2017/CVE-2017-7921.json +++ b/2017/CVE-2017-7921.json @@ -527,39 +527,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1139171603, - "name": "hikvision-exploiter", - "full_name": "saaydmr\/hikvision-exploiter", - "owner": { - "login": "saaydmr", - "id": 43610019, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43610019?v=4", - "html_url": "https:\/\/github.com\/saaydmr", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/saaydmr\/hikvision-exploiter", - "description": "CVE-2017-7921, CVE-2021-36260 updated 21\/01\/2026", - "fork": false, - "created_at": "2026-01-21T16:04:47Z", - "updated_at": "2026-02-18T09:46:56Z", - "pushed_at": "2026-01-21T16:07:19Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, { "id": 1144526065, "name": "CVE-2017-7921-Research-Toolkit", @@ -707,8 +674,8 @@ "description": "Hikvision CVE-2017-7921 hack", "fork": false, "created_at": "2026-08-02T23:49:12Z", - "updated_at": "2026-08-03T00:20:00Z", - "pushed_at": "2026-08-03T00:19:56Z", + "updated_at": "2026-10-27T01:55:16Z", + "pushed_at": "2026-10-27T01:55:12Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -790,5 +757,42 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1435200938, + "name": "CVE-2017-7921-2026-writeup", + "full_name": "MK-ULTRA-MK-ULTRA\/CVE-2017-7921-2026-writeup", + "owner": { + "login": "MK-ULTRA-MK-ULTRA", + "id": 345058008, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/345058008?v=4", + "html_url": "https:\/\/github.com\/MK-ULTRA-MK-ULTRA", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/MK-ULTRA-MK-ULTRA\/CVE-2017-7921-2026-writeup", + "description": "Vulnerability research write-up on CVE-2017-7921 — a critical unauthenticated auth bypass in Hikvision IP cameras\/DVRs\/NVRs, covering root cause, exploitation path, detection, and remediation.", + "fork": false, + "created_at": "2026-10-27T03:29:29Z", + "updated_at": "2026-10-27T03:39:14Z", + "pushed_at": "2026-10-27T03:31:17Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve", + "cybersecurity", + "security-research" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2017/CVE-2017-9805.json b/2017/CVE-2017-9805.json index 742916b013..bab5087ee9 100644 --- a/2017/CVE-2017-9805.json +++ b/2017/CVE-2017-9805.json @@ -569,39 +569,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1127873832, - "name": "CVE-2017-9805", - "full_name": "Fl5xia\/CVE-2017-9805", - "owner": { - "login": "Fl5xia", - "id": 252786729, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/252786729?v=4", - "html_url": "https:\/\/github.com\/Fl5xia", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Fl5xia\/CVE-2017-9805", - "description": "CVE-2017-9805: Apache Struts 2 S2-052 RCE Exploit - PoC for Harvard University (OTD)", - "fork": false, - "created_at": "2026-01-04T18:57:31Z", - "updated_at": "2026-01-04T19:02:12Z", - "pushed_at": "2026-01-04T19:02:09Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1169235438, "name": "CVE-2017-9805-S2-052", diff --git a/2019/CVE-2019-0708.json b/2019/CVE-2019-0708.json index ca77c5be74..0e27478c38 100644 --- a/2019/CVE-2019-0708.json +++ b/2019/CVE-2019-0708.json @@ -3288,39 +3288,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 310520152, - "name": "CVE-2019-0708-POC", - "full_name": "AaronCaiii\/CVE-2019-0708-POC", - "owner": { - "login": "AaronCaiii", - "id": 40255963, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/40255963?v=4", - "html_url": "https:\/\/github.com\/AaronCaiii", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/AaronCaiii\/CVE-2019-0708-POC", - "description": null, - "fork": false, - "created_at": "2020-11-06T07:13:30Z", - "updated_at": "2020-11-06T08:07:11Z", - "pushed_at": "2020-11-06T08:07:09Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 318113571, "name": "Mass-scanner-for-CVE-2019-0708-RDP-RCE-Exploit", diff --git a/2019/CVE-2019-11358.json b/2019/CVE-2019-11358.json index 767bfb4c8a..a33cc3faff 100644 --- a/2019/CVE-2019-11358.json +++ b/2019/CVE-2019-11358.json @@ -133,7 +133,7 @@ "description": "NOTICE This repository contains the public FTC SDK for the SKYSTONE (2019-2020) competition season. If you are looking for the current season's FTC SDK software, please visit the new and permanent home of the public FTC SDK: FtcRobotController repository Welcome! This GitHub repository contains the source code that is used to build an Android app to control a FIRST Tech Challenge competition robot. To use this SDK, download\/clone the entire project to your local computer. Getting Started If you are new to robotics or new to the FIRST Tech Challenge, then you should consider reviewing the FTC Blocks Tutorial to get familiar with how to use the control system: FTC Blocks Online Tutorial Even if you are an advanced Java programmer, it is helpful to start with the FTC Blocks tutorial, and then migrate to the OnBot Java Tool or to Android Studio afterwards. Downloading the Project If you are an Android Studio programmer, there are several ways to download this repo. Note that if you use the Blocks or OnBot Java Tool to program your robot, then you do not need to download this repository. If you are a git user, you can clone the most current version of the repository: git clone https:\/\/github.com\/FIRST-Tech-Challenge\/SKYSTONE.git Or, if you prefer, you can use the \"Download Zip\" button available through the main repository page. Downloading the project as a .ZIP file will keep the size of the download manageable. You can also download the project folder (as a .zip or .tar.gz archive file) from the Downloads subsection of the Releases page for this repository. Once you have downloaded and uncompressed (if needed) your folder, you can use Android Studio to import the folder (\"Import project (Eclipse ADT, Gradle, etc.)\"). Getting Help User Documentation and Tutorials FIRST maintains online documentation with information and tutorials on how to use the FIRST Tech Challenge software and robot control system. You can access this documentation using the following link: SKYSTONE Online Documentation Note that the online documentation is an \"evergreen\" document that is constantly being updated and edited. It contains the most current information about the FIRST Tech Challenge software and control system. Javadoc Reference Material The Javadoc reference documentation for the FTC SDK is now available online. Click on the following link to view the FTC SDK Javadoc documentation as a live website: FTC Javadoc Documentation Documentation for the FTC SDK is also included with this repository. There is a subfolder called \"doc\" which contains several subfolders: The folder \"apk\" contains the .apk files for the FTC Driver Station and FTC Robot Controller apps. The folder \"javadoc\" contains the JavaDoc user documentation for the FTC SDK. Online User Forum For technical questions regarding the Control System or the FTC SDK, please visit the FTC Technology forum: FTC Technology Forum Release Information Version 5.5 (20200824-090813) Version 5.5 requires Android Studio 4.0 or later. New features Adds support for calling custom Java classes from Blocks OpModes (fixes SkyStone issue #161). Classes must be in the org.firstinspires.ftc.teamcode package. Methods must be public static and have no more than 21 parameters. Parameters declared as OpMode, LinearOpMode, Telemetry, and HardwareMap are supported and the argument is provided automatically, regardless of the order of the parameters. On the block, the sockets for those parameters are automatically filled in. Parameters declared as char or java.lang.Character will accept any block that returns text and will only use the first character in the text. Parameters declared as boolean or java.lang.Boolean will accept any block that returns boolean. Parameters declared as byte, java.lang.Byte, short, java.lang.Short, int, java.lang.Integer, long, or java.lang.Long, will accept any block that returns a number and will round that value to the nearest whole number. Parameters declared as float, java.lang.Float, double, java.lang.Double will accept any block that returns a number. Adds telemetry API method for setting display format Classic Monospace HTML (certain tags only) Adds blocks support for switching cameras. Adds Blocks support for TensorFlow Object Detection with a custom model. Adds support for uploading a custom TensorFlow Object Detection model in the Manage page, which is especially useful for Blocks and OnBotJava users. Shows new Control Hub blink codes when the WiFi band is switched using the Control Hub's button (only possible on Control Hub OS 1.1.2) Adds new warnings which can be disabled in the Advanced RC Settings Mismatched app versions warning Unnecessary 2.4 GHz WiFi usage warning REV Hub is running outdated firmware (older than version 1.8.2) Adds support for Sony PS4 gamepad, and reworks how gamepads work on the Driver Station Removes preference which sets gamepad type based on driver position. Replaced with menu which allows specifying type for gamepads with unknown VID and PID Attempts to auto-detect gamepad type based on USB VID and PID If gamepad VID and PID is not known, use type specified by user for that VID and PID If gamepad VID and PID is not known AND the user has not specified a type for that VID and PID, an educated guess is made about how to map the gamepad Driver Station will now attempt to automatically recover from a gamepad disconnecting, and re-assign it to the position it was assigned to when it dropped If only one gamepad is assigned and it drops: it can be recovered If two gamepads are assigned, and have different VID\/PID signatures, and only one drops: it will be recovered If two gamepads are assigned, and have different VID\/PID signatures, and BOTH drop: both will be recovered If two gamepads are assigned, and have the same VID\/PID signatures, and only one drops: it will be recovered If two gamepads are assigned, and have the same VID\/PID signatures, and BOTH drop: neither will be recovered, because of the ambiguity of the gamepads when they re-appear on the USB bus. There is currently one known edge case: if there are two gamepads with the same VID\/PID signature plugged in, but only one is assigned, and they BOTH drop, it's a 50-50 chance of which one will be chosen for automatic recovery to the assigned position: it is determined by whichever one is re-enumerated first by the USB bus controller. Adds landscape user interface to Driver Station New feature: practice timer with audio cues New feature (Control Hub only): wireless network connection strength indicator (0-5 bars) New feature (Control Hub only): tapping on the ping\/channel display will switch to an alternate display showing radio RX dBm and link speed (tap again to switch back) The layout will NOT autorotate. You can switch the layout from the Driver Station's settings menu. Breaking changes Removes support for Android versions 4.4 through 5.1 (KitKat and Lollipop). The minSdkVersion is now 23. Removes the deprecated LinearOpMode methods waitOneFullHardwareCycle() and waitForNextHardwareCycle() Enhancements Handles RS485 address of Control Hub automatically The Control Hub is automatically given a reserved address Existing configuration files will continue to work All addresses in the range of 1-10 are still available for Expansion Hubs The Control Hub light will now normally be solid green, without blinking to indicate the address The Control Hub will not be shown on the Expansion Hub Address Change settings page Improves REV Hub firmware updater The user can now choose between all available firmware update files Version 1.8.2 of the REV Hub firmware is bundled into the Robot Controller app. Text was added to clarify that Expansion Hubs can only be updated via USB. Firmware update speed was reduced to improve reliability Allows REV Hub firmware to be updated directly from the Manage webpage Improves log viewer on Robot Controller Horizontal scrolling support (no longer word wrapped) Supports pinch-to-zoom Uses a monospaced font Error messages are highlighted New color scheme Attempts to force-stop a runaway\/stuck OpMode without restarting the entire app Not all types of runaway conditions are stoppable, but if the user code attempts to talk to hardware during the runaway, the system should be able to capture it. Makes various tweaks to the Self Inspect screen Renames \"OS version\" entry to \"Android version\" Renames \"WiFi Direct Name\" to \"WiFi Name\" Adds Control Hub OS version, when viewing the report of a Control Hub Hides the airplane mode entry, when viewing the report of a Control Hub Removes check for ZTE Speed Channel Changer Shows firmware version for all Expansion and Control Hubs Reworks network settings portion of Manage page All network settings are now applied with a single click The WiFi Direct channel of phone-based Robot Controllers can now be changed from the Manage page WiFi channels are filtered by band (2.4 vs 5 GHz) and whether they overlap with other channels The current WiFi channel is pre-selected on phone-based Robot Controllers, and Control Hubs running OS 1.1.2 or later. On Control Hubs running OS 1.1.2 or later, you can choose to have the system automatically select a channel on the 5 GHz band Improves OnBotJava New light and dark themes replace the old themes (chaos, github, chrome,...) the new default theme is light and will be used when you first update to this version OnBotJava now has a tabbed editor Read-only offline mode Improves function of \"exit\" menu item on Robot Controller and Driver Station Now guaranteed to be fully stopped and unloaded from memory Shows a warning message if a LinearOpMode exists prematurely due to failure to monitor for the start condition Improves error message shown when the Driver Station and Robot Controller are incompatible with each other Driver Station OpMode Control Panel now disabled while a Restart Robot is in progress Disables advanced settings related to WiFi direct when the Robot Controller is a Control Hub. Tint phone battery icons on Driver Station when low\/critical. Uses names \"Control Hub Portal\" and \"Control Hub\" (when appropriate) in new configuration files Improve I2C read performance Very large improvement on Control Hub; up to ~2x faster with small (e.g. 6 byte) reads Not as apparent on Expansion Hubs connected to a phone Update\/refresh build infrastructure Update to 'androidx' support library from 'com.android.support:appcompat', which is end-of-life Update targetSdkVersion and compileSdkVersion to 28 Update Android Studio's Android plugin to latest Fix reported build timestamp in 'About' screen Add sample illustrating manual webcam use: ConceptWebcam Bug fixes Fixes SkyStone issue #248 Fixes SkyStone issue #232 and modifies bulk caching semantics to allow for cache-preserving MANUAL\/AUTO transitions. Improves performance when REV 2M distance sensor is unplugged Improves readability of Toast messages on certain devices Allows a Driver Station to connect to a Robot Controller after another has disconnected Improves generation of fake serial numbers for UVC cameras which do not provide a real serial number Previously some devices would assign such cameras a serial of 0:0 and fail to open and start streaming Fixes ftc_app issue #638. Fixes a slew of bugs with the Vuforia camera monitor including: Fixes bug where preview could be displayed with a wonky aspect ratio Fixes bug where preview could be cut off in landscape Fixes bug where preview got totally messed up when rotating phone Fixes bug where crosshair could drift off target when using webcams Fixes issue in UVC driver on some devices (ftc_app 681) if streaming was started\/stopped multiple times in a row Issue manifested as kernel panic on devices which do not have this kernel patch. On affected devices which do have the patch, the issue was manifest as simply a failure to start streaming. The Tech Team believes that the root cause of the issue is a bug in the Linux kernel XHCI driver. A workaround was implemented in the SDK UVC driver. Fixes bug in UVC driver where often half the frames from the camera would be dropped (e.g. only 15FPS delivered during a streaming session configured for 30FPS). Fixes issue where TensorFlow Object Detection would show results whose confidence was lower than the minimum confidence parameter. Fixes a potential exploitation issue of CVE-2019-11358 in OnBotJava Fixes changing the address of an Expansion Hub with additional Expansion Hubs connected to it Preserves the Control Hub's network connection when \"Restart Robot\" is selected Fixes issue where device scans would fail while the Robot was restarting Fix RenderScript usage Use androidx.renderscript variant: increased compatibility Use RenderScript in Java mode, not native: simplifies build Fixes webcam-frame-to-bitmap conversion problem: alpha channel wasn't being initialized, only R, G, & B Fixes possible arithmetic overflow in Deadline Fixes deadlock in Vuforia webcam support which could cause 5-second delays when stopping OpMode Version 5.4 (20200108-101156) Fixes SkyStone issue #88 Adds an inspection item that notes when a robot controller (Control Hub) is using the factory default password. Fixes SkyStone issue #61 Fixes SkyStone issue #142 Fixes ftc_app issue #417 by adding more current and voltage monitoring capabilities for REV Hubs. Fixes a crash sometimes caused by OnBotJava activity Improves OnBotJava autosave functionality ftc_app #738 Fixes system responsiveness issue when an Expansion Hub is disconnected Fixes issue where IMU initialization could prevent Op Modes from stopping Fixes issue where AndroidTextToSpeech.speak() would fail if it was called too early Adds telemetry.speak() methods and blocks, which cause the Driver Station (if also updated) to speak text Adds and improves Expansion Hub-related warnings Improves Expansion Hub low battery warning Displays the warning immediately after the hub reports it Specifies whether the condition is current or occurred temporarily during an OpMode run Displays which hubs reported low battery Displays warning when hub loses and regains power during an OpMode run Fixes the hub's LED pattern after this condition Displays warning when Expansion Hub is not responding to commands Specifies whether the condition is current or occurred temporarily during an OpMode run Clarifies warning when Expansion Hub is not present at startup Specifies that this condition requires a Robot Restart before the hub can be used. The hub light will now accurately reflect this state Improves logging and reduces log spam during these conditions Syncs the Control Hub time and timezone to a connected web browser programming the robot, if a Driver Station is not available. Adds bulk read functionality for REV Hubs A bulk caching mode must be set at the Hub level with LynxModule#setBulkCachingMode(). This applies to all relevant SDK hardware classes that reference that Hub. The following following Hub bulk caching modes are available: BulkCachingMode.OFF (default): All hardware calls operate as usual. Bulk data can read through LynxModule#getBulkData() and processed manually. BulkCachingMode.AUTO: Applicable hardware calls are served from a bulk read cache that is cleared\/refreshed automatically to ensure identical commands don't hit the same cache. The cache can also be cleared manually with LynxModule#clearBulkCache(), although this is not recommended. (advanced users) BulkCachingMode.MANUAL: Same as BulkCachingMode.AUTO except the cache is never cleared automatically. To avoid getting stale data, the cache must be manually cleared at the beginning of each loop body or as the user deems appropriate. Removes PIDF Annotation values added in Rev 5.3 (to AndyMark, goBILDA and TETRIX motor configurations). The new motor types will still be available but their Default control behavior will revert back to Rev 5.2 Adds new ConceptMotorBulkRead sample Opmode to demonstrate and compare Motor Bulk-Read modes for reducing I\/O latencies. Version 5.3 (20191004-112306) Fixes external USB\/UVC webcam support Makes various bugfixes and improvements to Blocks page, including but not limited to: Many visual tweaks Browser zoom and window resize behave better Resizing the Java preview pane works better and more consistently across browsers The Java preview pane consistently gets scrollbars when needed The Java preview pane is hidden by default on phones Internet Explorer 11 should work Large dropdown lists display properly on lower res screens Disabled buttons are now visually identifiable as disabled A warning is shown if a user selects a TFOD sample, but their device is not compatible Warning messages in a Blocks op mode are now visible by default. Adds goBILDA 5201 and 5202 motors to Robot Configurator Adds PIDF Annotation values to AndyMark, goBILDA and TETRIX motor configurations. This has the effect of causing the RUN_USING_ENCODERS and RUN_TO_POSITION modes to use PIDF vs PID closed loop control on these motors. This should provide more responsive, yet stable, speed control. PIDF adds Feedforward control to the basic PID control loop. Feedforward is useful when controlling a motor's speed because it \"anticipates\" how much the control voltage must change to achieve a new speed set-point, rather than requiring the integrated error to change sufficiently. The PIDF values were chosen to provide responsive, yet stable, speed control on a lightly loaded motor. The more heavily a motor is loaded (drag or friction), the more noticable the PIDF improvement will be. Fixes startup crash on Android 10 Fixes ftc_app issue #712 (thanks to FROGbots-4634) Fixes ftc_app issue #542 Allows \"A\" and lowercase letters when naming device through RC and DS apps. Version 5.2 (20190905-083277) Fixes extra-wide margins on settings activities, and placement of the new configuration button Adds Skystone Vuforia image target data. Includes sample Skystone Vuforia Navigation op modes (Java). Includes sample Skystone Vuforia Navigation op modes (Blocks). Adds TensorFlow inference model (.tflite) for Skystone game elements. Includes sample Skystone TensorFlow op modes (Java). Includes sample Skystone TensorFlow op modes (Blocks). Removes older (season-specific) sample op modes. Includes 64-bit support (to comply with Google Play requirements). Protects against Stuck OpModes when a Restart Robot is requested. (Thanks to FROGbots-4634) (ftc_app issue #709) Blocks related changes: Fixes bug with blocks generated code when hardware device name is a java or javascript reserved word. Shows generated java code for blocks, even when hardware items are missing from the active configuration. Displays warning icon when outdated Vuforia and TensorFlow blocks are used (SkyStone issue #27) Version 5.1 (20190820-222104) Defines default PIDF parameters for the following motors: REV Core Hex Motor REV 20:1 HD Hex Motor REV 40:1 HD Hex Motor Adds back button when running on a device without a system back button (such as a Control Hub) Allows a REV Control Hub to update the firmware on a REV Expansion Hub via USB Fixes SkyStone issue #9 Fixes ftc_app issue #715 Prevents extra DS User clicks by filtering based on current state. Prevents incorrect DS UI state changes when receiving new OpMode list from RC Adds support for REV Color Sensor V3 Adds a manual-refresh DS Camera Stream for remotely viewing RC camera frames. To show the stream on the DS, initialize but do not run a stream-enabled opmode, select the Camera Stream option in the DS menu, and tap the image to refresh. This feature is automatically enabled when using Vuforia or TFOD—no additional RC configuration is required for typical use cases. To hide the stream, select the same menu item again. Note that gamepads are disabled and the selected opmode cannot be started while the stream is open as a safety precaution. To use custom streams, consult the API docs for CameraStreamServer#setSource and CameraStreamSource. Adds many Star Wars sounds to RobotController resources. Added SKYSTONE Sounds Chooser Sample Program. Switches out startup, connect chimes, and error\/warning sounds for Star Wars sounds Updates OnBot Java to use a WebSocket for communication with the robot The OnBot Java page no longer has to do a full refresh when a user switches from editing one file to another Known issues: Camera Stream The Vuforia camera stream inherits the issues present in the phone preview (namely ftc_app issue #574). This problem does not affect the TFOD camera stream even though it receives frames from Vuforia. The orientation of the stream frames may not always match the phone preview. For now, these frames may be rotated manually via a custom CameraStreamSource if desired. OnBotJava Browser back button may not always work correctly It's possible for a build to be queued, but not started. The OnBot Java build console will display a warning if this occurs. A user might not realize they are editing a different file if the user inadvertently switches from one file to another since this switch is now seamless. The name of the currently open file is displayed in the browser tab. Version 5.0 (built on 19.06.14) Support for the REV Robotics Control Hub. Adds a Java preview pane to the Blocks editor. Adds a new offline export feature to the Blocks editor. Display wifi channel in Network circle on Driver Station. Adds calibration for Logitech C270 Updates build tooling and target SDK. Compliance with Google's permissions infrastructure (Required after build tooling update). Keep Alives to mitigate the Motorola wifi scanning problem. Telemetry substitute no longer necessary. Improves Vuforia error reporting. Fixes ftctechnh\/ftc_app issues 621, 713. Miscellaneous bug fixes and improvements. Version 4.3 (built on 18.10.31) Includes missing TensorFlow-related libraries and files. Version 4.2 (built on 18.10.30) Includes fix to avoid deadlock situation with WatchdogMonitor which could result in USB communication errors. Comm error appeared to require that user disconnect USB cable and restart the Robot Controller app to recover. robotControllerLog.txt would have error messages that included the words \"E RobotCore: lynx xmit lock: #### abandoning lock:\" Includes fix to correctly list the parent module address for a REV Robotics Expansion Hub in a configuration (.xml) file. Bug in versions 4.0 and 4.1 would incorrect list the address module for a parent REV Robotics device as \"1\". If the parent module had a higher address value than the daisy-chained module, then this bug would prevent the Robot Controller from communicating with the downstream Expansion Hub. Added requirement for ACCESS_COARSE_LOCATION to allow a Driver Station running Android Oreo to scan for Wi-Fi Direct devices. Added google() repo to build.gradle because aapt2 must be downloaded from the google() repository beginning with version 3.2 of the Android Gradle Plugin. Important Note: Android Studio users will need to be connected to the Internet the first time build the ftc_app project. Internet connectivity is required for the first build so the appropriate files can be downloaded from the Google repository. Users should not need to be connected to the Internet for subsequent builds. This should also fix buid issue where Android Studio would complain that it \"Could not find com.android.tools.lint:lint-gradle:26.1.4\" (or similar). Added support for REV Spark Mini motor controller as part of the configuration menu for a servo\/PWM port on the REV Expansion Hub. Provide examples for playing audio files in an Op Mode. Block Development Tool Changes Includes a fix for a problem with the Velocity blocks that were reported in the FTC Technology forum (Blocks Programming subforum). Change the \"Save completed successfully.\" message to a white color so it will contrast with a green background. Fixed the \"Download image\" feature so it will work if there are text blocks in the op mode. Introduce support for Google's TensorFlow Lite technology for object detetion for 2018-2019 game. TensorFlow lite can recognize Gold Mineral and Silver Mineral from 2018-2019 game. Example Java and Block op modes are included to show how to determine the relative position of the gold block (left, center, right). Version 4.1 (released on 18.09.24) Changes include: Fix to prevent crash when deprecated configuration annotations are used. Change to allow FTC Robot Controller APK to be auto-updated using FIRST Global Control Hub update scripts. Removed samples for non supported \/ non legal hardware. Improvements to Telemetry.addData block with \"text\" socket. Updated Blocks sample op mode list to include Rover Ruckus Vuforia example. Update SDK library version number. Version 4.0 (released on 18.09.12) Changes include: Initial support for UVC compatible cameras If UVC camera has a unique serial number, RC will detect and enumerate by serial number. If UVC camera lacks a unique serial number, RC will only support one camera of that type connected. Calibration settings for a few cameras are included (see TeamCode\/src\/main\/res\/xml\/teamwebcamcalibrations.xml for details). User can upload calibration files from Program and Manage web interface. UVC cameras seem to draw a fair amount of electrical current from the USB bus. This does not appear to present any problems for the REV Robotics Control Hub. This does seem to create stability problems when using some cameras with an Android phone-based Robot Controller. FTC Tech Team is investigating options to mitigate this issue with the phone-based Robot Controllers. Updated sample Vuforia Navigation and VuMark Op Modes to demonstrate how to use an internal phone-based camera and an external UVC webcam. Support for improved motor control. REV Robotics Expansion Hub firmware 1.8 and greater will support a feed forward mechanism for closed loop motor control. FTC SDK has been modified to support PIDF coefficients (proportional, integral, derivative, and feed forward). FTC Blocks development tool modified to include PIDF programming blocks. Deprecated older PID-related methods and variables. REV's 1.8.x PIDF-related changes provide a more linear and accurate way to control a motor. Wireless Added 5GHz support for wireless channel changing for those devices that support it. Tested with Moto G5 and E4 phones. Also tested with other (currently non-approved) phones such as Samsung Galaxy S8. Improved Expansion Hub firmware update support in Robot Controller app Changes to make the system more robust during the firmware update process (when performed through Robot Controller app). User no longer has to disconnect a downstream daisy-chained Expansion Hub when updating an Expansion Hub's firmware. If user is updating an Expansion Hub's firmware through a USB connection, he\/she does not have to disconnect RS485 connection to other Expansion Hubs. The user still must use a USB connection to update an Expansion Hub's firmware. The user cannot update the Expansion Hub firmware for a downstream device that is daisy chained through an RS485 connection. If an Expansion Hub accidentally gets \"bricked\" the Robot Controller app is now more likely to recognize the Hub when it scans the USB bus. Robot Controller app should be able to detect an Expansion Hub, even if it accidentally was bricked in a previous update attempt. Robot Controller app should be able to install the firmware onto the Hub, even if if accidentally was bricked in a previous update attempt. Resiliency FTC software can detect and enable an FTDI reset feature that is available with REV Robotics v1.8 Expansion Hub firmware and greater. When enabled, the Expansion Hub can detect if it hasn't communicated with the Robot Controller over the FTDI (USB) connection. If the Hub hasn't heard from the Robot Controller in a while, it will reset the FTDI connection. This action helps system recover from some ESD-induced disruptions. Various fixes to improve reliability of FTC software. Blocks Fixed errors with string and list indices in blocks export to java. Support for USB connected UVC webcams. Refactored optimized Blocks Vuforia code to support Rover Ruckus image targets. Added programming blocks to support PIDF (proportional, integral, derivative and feed forward) motor control. Added formatting options (under Telemetry and Miscellaneous categories) so user can set how many decimal places to display a numerical value. Support to play audio files (which are uploaded through Blocks web interface) on Driver Station in addition to the Robot Controller. Fixed bug with Download Image of Blocks feature. Support for REV Robotics Blinkin LED Controller. Support for REV Robotics 2m Distance Sensor. Added support for a REV Touch Sensor (no longer have to configure as a generic digital device). Added blocks for DcMotorEx methods. These are enhanced methods that you can use when supported by the motor controller hardware. The REV Robotics Expansion Hub supports these enhanced methods. Enhanced methods include methods to get\/set motor velocity (in encoder pulses per second), get\/set PIDF coefficients, etc.. Modest Improvements in Logging Decrease frequency of battery checker voltage statements. Removed non-FTC related log statements (wherever possible). Introduced a \"Match Logging\" feature. Under \"Settings\" a user can enable\/disable this feature (it's disabled by default). If enabled, user provides a \"Match Number\" through the Driver Station user interface (top of the screen). The Match Number is used to create a log file specifically with log statements from that particular Op Mode run. Match log files are stored in \/sdcard\/FIRST\/matlogs on the Robot Controller. Once an op mode run is complete, the Match Number is cleared. This is a convenient way to create a separate match log with statements only related to a specific op mode run. New Devices Support for REV Robotics Blinkin LED Controller. Support for REV Robotics 2m Distance Sensor. Added configuration option for REV 20:1 HD Hex Motor. Added support for a REV Touch Sensor (no longer have to configure as a generic digital device). Miscellaneous Fixed some errors in the definitions for acceleration and velocity in our javadoc documentation. Added ability to play audio files on Driver Station When user is configuring an Expansion Hub, the LED on the Expansion Hub will change blink pattern (purple-cyan) to indicate which Hub is currently being configured. Renamed I2cSensorType to I2cDeviceType. Added an external sample Op Mode that demonstrates localization using 2018-2019 (Rover Ruckus presented by QualComm) Vuforia targets. Added an external sample Op Mode that demonstrates how to use the REV Robotics 2m Laser Distance Sensor. Added an external sample Op Mode that demonstrates how to use the REV Robotics Blinkin LED Controller. Re-categorized external Java sample Op Modes to \"TeleOp\" instead of \"Autonomous\". Known issues: Initial support for UVC compatible cameras UVC cameras seem to draw significant amount of current from the USB bus. This does not appear to present any problems for the REV Robotics Control Hub. This does seem to create stability problems when using some cameras with an Android phone-based Robot Controller. FTC Tech Team is investigating options to mitigate this issue with the phone-based Robot Controllers. There might be a possible deadlock which causes the RC to become unresponsive when using a UVC webcam with a Nougat Android Robot Controller. Wireless When user selects a wireless channel, this channel does not necessarily persist if the phone is power cycled. Tech Team is hoping to eventually address this issue in a future release. Issue has been present since apps were introduced (i.e., it is not new with the v4.0 release). Wireless channel is not currently displayed for WiFi Direct connections. Miscellaneous The blink indication feature that shows which Expansion Hub is currently being configured does not work for a newly created configuration file. User has to first save a newly created configuration file and then close and re-edit the file in order for blink indicator to work. Version 3.6 (built on 17.12.18) Changes include: Blocks Changes Uses updated Google Blockly software to allow users to edit their op modes on Apple iOS devices (including iPad and iPhone). Improvement in Blocks tool to handle corrupt op mode files. Autonomous op modes should no longer get switched back to tele-op after re-opening them to be edited. The system can now detect type mismatches during runtime and alert the user with a message on the Driver Station. Updated javadoc documentation for setPower() method to reflect correct range of values (-1 to +1). Modified VuforiaLocalizerImpl to allow for user rendering of frames Added a user-overrideable onRenderFrame() method which gets called by the class's renderFrame() method. Version 3.5 (built on 17.10.30) Changes with version 3.5 include: Introduced a fix to prevent random op mode stops, which can occur after the Robot Controller app has been paused and then resumed (for example, when a user temporarily turns off the display of the Robot Controller phone, and then turns the screen back on). Introduced a fix to prevent random op mode stops, which were previously caused by random peer disconnect events on the Driver Station. Fixes issue where log files would be closed on pause of the RC or DS, but not re-opened upon resume. Fixes issue with battery handler (voltage) start\/stop race. Fixes issue where Android Studio generated op modes would disappear from available list in certain situations. Fixes problem where OnBot Java would not build on REV Robotics Control Hub. Fixes problem where OnBot Java would not build if the date and time on the Robot Controller device was \"rewound\" (set to an earlier date\/time). Improved error message on OnBot Java that occurs when renaming a file fails. Removed unneeded resources from android.jar binaries used by OnBot Java to reduce final size of Robot Controller app. Added MR_ANALOG_TOUCH_SENSOR block to Blocks Programming Tool. Version 3.4 (built on 17.09.06) Changes with version 3.4 include: Added telemetry.update() statement for BlankLinearOpMode template. Renamed sample Block op modes to be more consistent with Java samples. Added some additional sample Block op modes. Reworded OnBot Java readme slightly. Version 3.3 (built on 17.09.04) This version of the software includes improves for the FTC Blocks Programming Tool and the OnBot Java Programming Tool. Changes with verion 3.3 include: Android Studio ftc_app project has been updated to use Gradle Plugin 2.3.3. Android Studio ftc_app project is already using gradle 3.5 distribution. Robot Controller log has been renamed to \/sdcard\/RobotControllerLog.txt (note that this change was actually introduced w\/ v3.2). Improvements in I2C reliability. Optimized I2C read for REV Expansion Hub, with v1.7 firmware or greater. Updated all external\/samples (available through OnBot and in Android project folder). Vuforia Added support for VuMarks that will be used for the 2017-2018 season game. Blocks Update to latest Google Blockly release. Sample op modes can be selected as a template when creating new op mode. Fixed bug where the blocks would disappear temporarily when mouse button is held down. Added blocks for Range.clip and Range.scale. User can now disable\/enable Block op modes. Fix to prevent occasional Blocks deadlock. OnBot Java Significant improvements with autocomplete function for OnBot Java editor. Sample op modes can be selected as a template when creating new op mode. Fixes and changes to complete hardware setup feature. Updated (and more useful) onBot welcome message. Known issues: Android Studio After updating to the new v3.3 Android Studio project folder, if you get error messages indicating \"InvalidVirtualFileAccessException\" then you might need to do a File->Invalidate Caches \/ Restart to clear the error. OnBot Java Sometimes when you push the build button to build all op modes, the RC returns an error message that the build failed. If you press the build button a second time, the build typically suceeds. Version 3.2 (built on 17.08.02) This version of the software introduces the \"OnBot Java\" Development Tool. Similar to the FTC Blocks Development Tool, the FTC OnBot Java Development Tool allows a user to create, edit and build op modes dynamically using only a Javascript-enabled web browser. The OnBot Java Development Tool is an integrated development environment (IDE) that is served up by the Robot Controller. Op modes are created and edited using a Javascript-enabled browser (Google Chromse is recommended). Op modes are saved on the Robot Controller Android device directly. The OnBot Java Development Tool provides a Java programming environment that does NOT need Android Studio. Changes with version 3.2 include: Enhanced web-based development tools Introduction of OnBot Java Development Tool. Web-based programming and management features are \"always on\" (user no longer needs to put Robot Controller into programming mode). Web-based management interface (where user can change Robot Controller name and also easily download Robot Controller log file). OnBot Java, Blocks and Management features available from web based interface. Blocks Programming Development Tool: Changed \"LynxI2cColorRangeSensor\" block to \"REV Color\/range sensor\" block. Fixed tooltip for ColorSensor.isLightOn block. Added blocks for ColorSensor.getNormalizedColors and LynxI2cColorRangeSensor.getNormalizedColors. Added example op modes for digital touch sensor and REV Robotics Color Distance sensor. User selectable color themes. Includes many minor enhancements and fixes (too numerous to list). Known issues: Auto complete function is incomplete and does not support the following (for now): Access via this keyword Access via super keyword Members of the super cloass, not overridden by the class Any methods provided in the current class Inner classes Can't handle casted objects Any objects coming from an parenthetically enclosed expression Version 3.10 (built on 17.05.09) This version of the software provides support for the REV Robotics Expansion Hub. This version also includes improvements in the USB communication layer in an effort to enhance system resiliency. If you were using a 2.x version of the software previously, updating to version 3.1 requires that you also update your Driver Station software in addition to updating the Robot Controller software. Also note that in version 3.10 software, the setMaxSpeed and getMaxSpeed methods are no longer available (not deprecated, they have been removed from the SDK). Also note that the the new 3.x software incorporates motor profiles that a user can select as he\/she configures the robot. Changes include: Blocks changes Added VuforiaTrackableDefaultListener.getPose and Vuforia.trackPose blocks. Added optimized blocks support for Vuforia extended tracking. Added atan2 block to the math category. Added useCompetitionFieldTargetLocations parameter to Vuforia.initialize block. If set to false, the target locations are placed at (0,0,0) with target orientation as specified in https:\/\/github.com\/gearsincorg\/FTCVuforiaDemo\/blob\/master\/Robot_Navigation.java tutorial op mode. Incorporates additional improvements to USB comm layer to improve system resiliency (to recover from a greater number of communication disruptions). Additional Notes Regarding Version 3.00 (built on 17.04.13) In addition to the release changes listed below (see section labeled \"Version 3.00 (built on 17.04.013)\"), version 3.00 has the following important changes: Version 3.00 software uses a new version of the FTC Robocol (robot protocol). If you upgrade to v3.0 on the Robot Controller and\/or Android Studio side, you must also upgrade the Driver Station software to match the new Robocol. Version 3.00 software removes the setMaxSpeed and getMaxSpeed methods from the DcMotor class. If you have an op mode that formerly used these methods, you will need to remove the references\/calls to these methods. Instead, v3.0 provides the max speed information through the use of motor profiles that are selected by the user during robot configuration. Version 3.00 software currently does not have a mechanism to disable extra i2c sensors. We hope to re-introduce this function with a release in the near future. Version 3.00 (built on 17.04.13) *** Use this version of the software at YOUR OWN RISK!!! *** This software is being released as an \"alpha\" version. Use this version at your own risk! This pre-release software contains SIGNIFICANT changes, including changes to the Wi-Fi Direct pairing mechanism, rewrites of the I2C sensor classes, changes to the USB\/FTDI layer, and the introduction of support for the REV Robotics Expansion Hub and the REV Robotics color-range-light sensor. These changes were implemented to improve the reliability and resiliency of the FTC control system. Please note, however, that version 3.00 is considered \"alpha\" code. This code is being released so that the FIRST community will have an opportunity to test the new REV Expansion Hub electronics module when it becomes available in May. The developers do not recommend using this code for critical applications (i.e., competition use). *** Use this version of the software at YOUR OWN RISK!!! *** Changes include: Major rework of sensor-related infrastructure. Includes rewriting sensor classes to implement synchronous I2C communication. Fix to reset Autonomous timer back to 30 seconds. Implementation of specific motor profiles for approved 12V motors (includes Tetrix, AndyMark, Matrix and REV models). Modest improvements to enhance Wi-Fi P2P pairing. Fixes telemetry log addition race. Publishes all the sources (not just a select few). Includes Block programming improvements Addition of optimized Vuforia blocks. Auto scrollbar to projects and sounds pages. Fixed blocks paste bug. Blocks execute after while-opModeIsActive loop (to allow for cleanup before exiting op mode). Added gyro integratedZValue block. Fixes bug with projects page for Firefox browser. Added IsSpeaking block to AndroidTextToSpeech. Implements support for the REV Robotics Expansion Hub Implements support for integral REV IMU (physically installed on I2C bus 0, uses same Bosch BNO055 9 axis absolute orientation sensor as Adafruit 9DOF abs orientation sensor). - Implements support for REV color\/range\/light sensor. Provides support to update Expansion Hub firmware through FTC SDK. Detects REV firmware version and records in log file. Includes support for REV Control Hub (note that the REV Control Hub is not yet approved for FTC use). Implements FTC Blocks programming support for REV Expansion Hub and sensor hardware. Detects and alerts when I2C device disconnect. Version 2.62 (built on 17.01.07) Added null pointer check before calling modeToByte() in finishModeSwitchIfNecessary method for ModernRoboticsUsbDcMotorController class. Changes to enhance Modern Robotics USB protocol robustness. Version 2.61 (released on 16.12.19) Blocks Programming mode changes: Fix to correct issue when an exception was thrown because an OpticalDistanceSensor object appears twice in the hardware map (the second time as a LightSensor). Version 2.6 (released on 16.12.16) Fixes for Gyro class: Improve (decrease) sensor refresh latency. fix isCalibrating issues. Blocks Programming mode changes: Blocks now ignores a device in the configuration xml if the name is empty. Other devices work in configuration work fine. Version 2.5 (internal release on released on 16.12.13) Blocks Programming mode changes: Added blocks support for AdafruitBNO055IMU. Added Download Op Mode button to FtcBocks.html. Added support for copying blocks in one OpMode and pasting them in an other OpMode. The clipboard content is stored on the phone, so the programming mode server must be running. Modified Utilities section of the toolbox. In Programming Mode, display information about the active connections. Fixed paste location when workspace has been scrolled. Added blocks support for the android Accelerometer. Fixed issue where Blocks Upload Op Mode truncated name at first dot. Added blocks support for Android SoundPool. Added type safety to blocks for Acceleration. Added type safety to blocks for AdafruitBNO055IMU.Parameters. Added type safety to blocks for AnalogInput. Added type safety to blocks for AngularVelocity. Added type safety to blocks for Color. Added type safety to blocks for ColorSensor. Added type safety to blocks for CompassSensor. Added type safety to blocks for CRServo. Added type safety to blocks for DigitalChannel. Added type safety to blocks for ElapsedTime. Added type safety to blocks for Gamepad. Added type safety to blocks for GyroSensor. Added type safety to blocks for IrSeekerSensor. Added type safety to blocks for LED. Added type safety to blocks for LightSensor. Added type safety to blocks for LinearOpMode. Added type safety to blocks for MagneticFlux. Added type safety to blocks for MatrixF. Added type safety to blocks for MrI2cCompassSensor. Added type safety to blocks for MrI2cRangeSensor. Added type safety to blocks for OpticalDistanceSensor. Added type safety to blocks for Orientation. Added type safety to blocks for Position. Added type safety to blocks for Quaternion. Added type safety to blocks for Servo. Added type safety to blocks for ServoController. Added type safety to blocks for Telemetry. Added type safety to blocks for Temperature. Added type safety to blocks for TouchSensor. Added type safety to blocks for UltrasonicSensor. Added type safety to blocks for VectorF. Added type safety to blocks for Velocity. Added type safety to blocks for VoltageSensor. Added type safety to blocks for VuforiaLocalizer.Parameters. Added type safety to blocks for VuforiaTrackable. Added type safety to blocks for VuforiaTrackables. Added type safety to blocks for enums in AdafruitBNO055IMU.Parameters. Added type safety to blocks for AndroidAccelerometer, AndroidGyroscope, AndroidOrientation, and AndroidTextToSpeech. Version 2.4 (released on 16.11.13) Fix to avoid crashing for nonexistent resources. Blocks Programming mode changes: Added blocks to support OpenGLMatrix, MatrixF, and VectorF. Added blocks to support AngleUnit, AxesOrder, AxesReference, CameraDirection, CameraMonitorFeedback, DistanceUnit, and TempUnit. Added blocks to support Acceleration. Added blocks to support LinearOpMode.getRuntime. Added blocks to support MagneticFlux and Position. Fixed typos. Made blocks for ElapsedTime more consistent with other objects. Added blocks to support Quaternion, Velocity, Orientation, AngularVelocity. Added blocks to support VuforiaTrackables, VuforiaTrackable, VuforiaLocalizer, VuforiaTrackableDefaultListener. Fixed a few blocks. Added type checking to new blocks. Updated to latest blockly. Added default variable blocks to navigation and matrix blocks. Fixed toolbox entry for openGLMatrix_rotation_withAxesArgs. When user downloads Blocks-generated op mode, only the .blk file is downloaded. When user uploads Blocks-generated op mode (.blk file), Javascript code is auto generated. Added DbgLog support. Added logging when a blocks file is read\/written. Fixed bug to properly render blocks even if missing devices from configuration file. Added support for additional characters (not just alphanumeric) for the block file names (for download and upload). Added support for OpMode flavor (“Autonomous” or “TeleOp”) and group. Changes to Samples to prevent tutorial issues. Incorporated suggested changes from public pull 216 (“Replace .. paths”). Remove Servo Glitches when robot stopped. if user hits “Cancels” when editing a configuration file, clears the unsaved changes and reverts to original unmodified configuration. Added log info to help diagnose why the Robot Controller app was terminated (for example, by watch dog function). Added ability to transfer log from the controller. Fixed inconsistency for AngularVelocity Limit unbounded growth of data for telemetry. If user does not call telemetry.update() for LinearOpMode in a timely manner, data added for telemetry might get lost if size limit is exceeded. Version 2.35 (released on 16.10.06) Blockly programming mode - Removed unnecesary idle() call from blocks for new project. Version 2.30 (released on 16.10.05) Blockly programming mode: Mechanism added to save Blockly op modes from Programming Mode Server onto local device To avoid clutter, blocks are displayed in categorized folders Added support for DigitalChannel Added support for ModernRoboticsI2cCompassSensor Added support for ModernRoboticsI2cRangeSensor Added support for VoltageSensor Added support for AnalogInput Added support for AnalogOutput Fix for CompassSensor setMode block Vuforia Fix deadlock \/ make camera data available while Vuforia is running. Update to Vuforia 6.0.117 (recommended by Vuforia and Google to close security loophole). Fix for autonomous 30 second timer bug (where timer was in effect, even though it appeared to have timed out). opModeIsActive changes to allow cleanup after op mode is stopped (with enforced 2 second safety timeout). Fix to avoid reading i2c twice. Updated sample Op Modes. Improved logging and fixed intermittent freezing. Added digital I\/O sample. Cleaned up device names in sample op modes to be consistent with Pushbot guide. Fix to allow use of IrSeekerSensorV3. Version 2.20 (released on 16.09.08) Support for Modern Robotics Compass Sensor. Support for Modern Robotics Range Sensor. Revise device names for Pushbot templates to match the names used in Pushbot guide. Fixed bug so that IrSeekerSensorV3 device is accessible as IrSeekerSensor in hardwareMap. Modified computer vision code to require an individual Vuforia license (per legal requirement from PTC). Minor fixes. Blockly enhancements: Support for Voltage Sensor. Support for Analog Input. Support for Analog Output. Support for Light Sensor. Support for Servo Controller. Version 2.10 (released on 16.09.03) Support for Adafruit IMU. Improvements to ModernRoboticsI2cGyro class Block on reset of z axis. isCalibrating() returns true while gyro is calibration. Updated sample gyro program. Blockly enhancements support for android.graphics.Color. added support for ElapsedTime. improved look and legibility of blocks. support for compass sensor. support for ultrasonic sensor. support for IrSeeker. support for LED. support for color sensor. support for CRServo prompt user to configure robot before using programming mode. Provides ability to disable audio cues. various bug fixes and improvements. Version 2.00 (released on 16.08.19) This is the new release for the upcoming 2016-2017 FIRST Tech Challenge Season. Channel change is enabled in the FTC Robot Controller app for Moto G 2nd and 3rd Gen phones. Users can now use annotations to register\/disable their Op Modes. Changes in the Android SDK, JDK and build tool requirements (minsdk=19, java 1.7, build tools 23.0.3). Standardized units in analog input. Cleaned up code for existing analog sensor classes. setChannelMode and getChannelMode were REMOVED from the DcMotorController class. This is important - we no longer set the motor modes through the motor controller. setMode and getMode were added to the DcMotor class. ContinuousRotationServo class has been added to the FTC SDK. Range.clip() method has been overloaded so it can support this operation for int, short and byte integers. Some changes have been made (new methods added) on how a user can access items from the hardware map. Users can now set the zero power behavior for a DC motor so that the motor will brake or float when power is zero. Prototype Blockly Programming Mode has been added to FTC Robot Controller. Users can place the Robot Controller into this mode, and then use a device (such as a laptop) that has a Javascript enabled browser to write Blockly-based Op Modes directly onto the Robot Controller. Users can now configure the robot remotely through the FTC Driver Station app. Android Studio project supports Android Studio 2.1.x and compile SDK Version 23 (Marshmallow). Vuforia Computer Vision SDK integrated into FTC SDK. Users can use sample vision targets to get localization information on a standard FTC field. Project structure has been reorganized so that there is now a TeamCode package that users can use to place their local\/custom Op Modes into this package. Inspection function has been integrated into the FTC Robot Controller and Driver Station Apps (Thanks Team HazMat… 9277 & 10650!). Audio cues have been incorporated into FTC SDK. Swap mechanism added to FTC Robot Controller configuration activity. For example, if you have two motor controllers on a robot, and you misidentified them in your configuration file, you can use the Swap button to swap the devices within the configuration file (so you do not have to manually re-enter in the configuration info for the two devices). Fix mechanism added to all user to replace an electronic module easily. For example, suppose a servo controller dies on your robot. You replace the broken module with a new module, which has a different serial number from the original servo controller. You can use the Fix button to automatically reconfigure your configuration file to use the serial number of the new module. Improvements made to fix resiliency and responsiveness of the system. For LinearOpMode the user now must for a telemetry.update() to update the telemetry data on the driver station. This update() mechanism ensures that the driver station gets the updated data properly and at the same time. The Auto Configure function of the Robot Controller is now template based. If there is a commonly used robot configuration, a template can be created so that the Auto Configure mechanism can be used to quickly configure a robot of this type. The logic to detect a runaway op mode (both in the LinearOpMode and OpMode types) and to abort the run, then auto recover has been improved\/implemented. Fix has been incorporated so that Logitech F310 gamepad mappings will be correct for Marshmallow users. Release 16.07.08 For the ftc_app project, the gradle files have been modified to support Android Studio 2.1.x. Release 16.03.30 For the MIT App Inventor, the design blocks have new icons that better represent the function of each design component. Some changes were made to the shutdown logic to ensure the robust shutdown of some of our USB services. A change was made to LinearOpMode so as to allow a given instance to be executed more than once, which is required for the App Inventor. Javadoc improved\/updated. Release 16.03.09 Changes made to make the FTC SDK synchronous (significant change!) waitOneFullHardwareCycle() and waitForNextHardwareCycle() are no longer needed and have been deprecated. runOpMode() (for a LinearOpMode) is now decoupled from the system's hardware read\/write thread. loop() (for an OpMode) is now decoupled from the system's hardware read\/write thread. Methods are synchronous. For example, if you call setMode(DcMotorController.RunMode.RESET_ENCODERS) for a motor, the encoder is guaranteed to be reset when the method call is complete. For legacy module (NXT compatible), user no longer has to toggle between read and write modes when reading from or writing to a legacy device. Changes made to enhance reliability\/robustness during ESD event. Changes made to make code thread safe. Debug keystore added so that user-generated robot controller APKs will all use the same signed key (to avoid conflicts if a team has multiple developer laptops for example). Firmware version information for Modern Robotics modules are now logged. Changes made to improve USB comm reliability and robustness. Added support for voltage indicator for legacy (NXT-compatible) motor controllers. Changes made to provide auto stop capabilities for op modes. A LinearOpMode class will stop when the statements in runOpMode() are complete. User does not have to push the stop button on the driver station. If an op mode is stopped by the driver station, but there is a run away\/uninterruptible thread persisting, the app will log an error message then force itself to crash to stop the runaway thread. Driver Station UI modified to display lowest measured voltage below current voltage (12V battery). Driver Station UI modified to have color background for current voltage (green=good, yellow=caution, red=danger, extremely low voltage). javadoc improved (edits and additional classes). Added app build time to About activity for driver station and robot controller apps. Display local IP addresses on Driver Station About activity. Added I2cDeviceSynchImpl. Added I2cDeviceSync interface. Added seconds() and milliseconds() to ElapsedTime for clarity. Added getCallbackCount() to I2cDevice. Added missing clearI2cPortActionFlag. Added code to create log messages while waiting for LinearOpMode shutdown. Fix so Wifi Direct Config activity will no longer launch multiple times. Added the ability to specify an alternate i2c address in software for the Modern Robotics gyro. Release 16.02.09 Improved battery checker feature so that voltage values get refreshed regularly (every 250 msec) on Driver Station (DS) user interface. Improved software so that Robot Controller (RC) is much more resilient and “self-healing” to USB disconnects: If user attempts to start\/restart RC with one or more module missing, it will display a warning but still start up. When running an op mode, if one or more modules gets disconnected, the RC & DS will display warnings,and robot will keep on working in spite of the missing module(s). If a disconnected module gets physically reconnected the RC will auto detect the module and the user will regain control of the recently connected module. Warning messages are more helpful (identifies the type of module that’s missing plus its USB serial number). Code changes to fix the null gamepad reference when users try to reference the gamepads in the init() portion of their op mode. NXT light sensor output is now properly scaled. Note that teams might have to readjust their light threshold values in their op modes. On DS user interface, gamepad icon for a driver will disappear if the matching gamepad is disconnected or if that gamepad gets designated as a different driver. Robot Protocol (ROBOCOL) version number info is displayed in About screen on RC and DS apps. Incorporated a display filter on pairing screen to filter out devices that don’t use the “-“ format. This filter can be turned off to show all WiFi Direct devices. Updated text in License file. Fixed formatting error in OpticalDistanceSensor.toString(). Fixed issue on with a blank (“”) device name that would disrupt WiFi Direct Pairing. Made a change so that the WiFi info and battery info can be displayed more quickly on the DS upon connecting to RC. Improved javadoc generation. Modified code to make it easier to support language localization in the future. Release 16.01.04 Updated compileSdkVersion for apps Prevent Wifi from entering power saving mode removed unused import from driver station Corrrected \"Dead zone\" joystick code. LED.getDeviceName and .getConnectionInfo() return null apps check for ROBOCOL_VERSION mismatch Fix for Telemetry also has off-by-one errors in its data string sizing \/ short size limitations error User telemetry output is sorted. added formatting variants to DbgLog and RobotLog APIs code modified to allow for a long list of op mode names. changes to improve thread safety of RobocolDatagramSocket Fix for \"missing hardware leaves robot controller disconnected from driver station\" error fix for \"fast tapping of Init\/Start causes problems\" (toast is now only instantiated on UI thread). added some log statements for thread life cycle. moved gamepad reset logic inside of initActiveOpMode() for robustness changes made to mitigate risk of race conditions on public methods. changes to try and flag when WiFi Direct name contains non-printable characters. fix to correct race condition between .run() and .close() in ReadWriteRunnableStandard. updated FTDI driver made ReadWriteRunnableStanard interface public. fixed off-by-one errors in Command constructor moved specific hardware implmentations into their own package. moved specific gamepad implemnatations to the hardware library. changed LICENSE file to new BSD version. fixed race condition when shutting down Modern Robotics USB devices. methods in the ColorSensor classes have been synchronized. corrected isBusy() status to reflect end of motion. corrected \"back\" button keycode. the notSupported() method of the GyroSensor class was changed to protected (it should not be public). Release 15.11.04.001 Added Support for Modern Robotics Gyro. The GyroSensor class now supports the MR Gyro Sensor. Users can access heading data (about Z axis) Users can also access raw gyro data (X, Y, & Z axes). Example MRGyroTest.java op mode included. Improved error messages More descriptive error messages for exceptions in user code. Updated DcMotor API Enable read mode on new address in setI2cAddress Fix so that driver station app resets the gamepads when switching op modes. USB-related code changes to make USB comm more responsive and to display more explicit error messages. Fix so that USB will recover properly if the USB bus returns garbage data. Fix USB initializtion race condition. Better error reporting during FTDI open. More explicit messages during USB failures. Fixed bug so that USB device is closed if event loop teardown method was not called. Fixed timer UI issue Fixed duplicate name UI bug (Legacy Module configuration). Fixed race condition in EventLoopManager. Fix to keep references stable when updating gamepad. For legacy Matrix motor\/servo controllers removed necessity of appending \"Motor\" and \"Servo\" to controller names. Updated HT color sensor driver to use constants from ModernRoboticsUsbLegacyModule class. Updated MR color sensor driver to use constants from ModernRoboticsUsbDeviceInterfaceModule class. Correctly handle I2C Address change in all color sensors Updated\/cleaned up op modes. Updated comments in LinearI2cAddressChange.java example op mode. Replaced the calls to \"setChannelMode\" with \"setMode\" (to match the new of the DcMotor method). Removed K9AutoTime.java op mode. Added MRGyroTest.java op mode (demonstrates how to use MR Gyro Sensor). Added MRRGBExample.java op mode (demonstrates how to use MR Color Sensor). Added HTRGBExample.java op mode (demonstrates how to use HT legacy color sensor). Added MatrixControllerDemo.java (demonstrates how to use legacy Matrix controller). Updated javadoc documentation. Updated release .apk files for Robot Controller and Driver Station apps. Release 15.10.06.002 Added support for Legacy Matrix 9.6V motor\/servo controller. Cleaned up build.gradle file. Minor UI and bug fixes for driver station and robot controller apps. Throws error if Ultrasonic sensor (NXT) is not configured for legacy module port 4 or 5. Release 15.08.03.001 New user interfaces for FTC Driver Station and FTC Robot Controller apps. An init() method is added to the OpMode class. For this release, init() is triggered right before the start() method. Eventually, the init() method will be triggered when the user presses an \"INIT\" button on driver station. The init() and loop() methods are now required (i.e., need to be overridden in the user's op mode). The start() and stop() methods are optional. A new LinearOpMode class is introduced. Teams can use the LinearOpMode mode to create a linear (not event driven) program model. Teams can use blocking statements like Thread.sleep() within a linear op mode. The API for the Legacy Module and Core Device Interface Module have been updated. Support for encoders with the Legacy Module is now working. The hardware loop has been updated for better performance.", "fork": false, "created_at": "2021-03-08T11:34:11Z", - "updated_at": "2026-10-22T18:20:44Z", + "updated_at": "2026-10-27T03:18:15Z", "pushed_at": "2024-04-12T05:48:35Z", "stargazers_count": 319, "watchers_count": 319, diff --git a/2019/CVE-2019-15813.json b/2019/CVE-2019-15813.json deleted file mode 100644 index 14fe09c908..0000000000 --- a/2019/CVE-2019-15813.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 315012145, - "name": "CVE-2019-15813", - "full_name": "wolf1892\/CVE-2019-15813", - "owner": { - "login": "wolf1892", - "id": 24608781, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/24608781?v=4", - "html_url": "https:\/\/github.com\/wolf1892", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/wolf1892\/CVE-2019-15813", - "description": "This container was made to explain and demonstrate how CVE-2019-15813 (Sentrifugo works)", - "fork": false, - "created_at": "2020-11-22T10:35:24Z", - "updated_at": "2021-09-02T03:42:34Z", - "pushed_at": "2020-11-22T10:50:50Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2019/CVE-2019-1653.json b/2019/CVE-2019-1653.json index 808eba1a06..2d315c8295 100644 --- a/2019/CVE-2019-1653.json +++ b/2019/CVE-2019-1653.json @@ -32,46 +32,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 178810790, - "name": "CiscoSpill", - "full_name": "shaheemirza\/CiscoSpill", - "owner": { - "login": "shaheemirza", - "id": 4853436, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4853436?v=4", - "html_url": "https:\/\/github.com\/shaheemirza", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/shaheemirza\/CiscoSpill", - "description": "Just a PoC tool to extract password using CVE-2019-1653.", - "fork": false, - "created_at": "2019-04-01T07:40:01Z", - "updated_at": "2025-01-24T16:25:38Z", - "pushed_at": "2019-04-01T07:50:48Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 5, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cisco", - "exploit", - "exploitation", - "extract-passwords", - "pentest", - "securiy" - ], - "visibility": "public", - "forks": 5, - "watchers": 4, - "score": 0, - "subscribers_count": 3 - }, { "id": 619228408, "name": "CVE-2019-1653", diff --git a/2019/CVE-2019-3396.json b/2019/CVE-2019-3396.json index 87768d8690..01fe21947c 100644 --- a/2019/CVE-2019-3396.json +++ b/2019/CVE-2019-3396.json @@ -466,39 +466,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 313479621, - "name": "cve-2019-3396", - "full_name": "yuehanked\/cve-2019-3396", - "owner": { - "login": "yuehanked", - "id": 74577427, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74577427?v=4", - "html_url": "https:\/\/github.com\/yuehanked", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/yuehanked\/cve-2019-3396", - "description": "windows.vm", - "fork": false, - "created_at": "2020-11-17T02:01:48Z", - "updated_at": "2020-11-17T02:02:54Z", - "pushed_at": "2020-11-17T02:02:52Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 335007063, "name": "cve-2019-3396", diff --git a/2019/CVE-2019-5736.json b/2019/CVE-2019-5736.json index 4d9087155a..2954117674 100644 --- a/2019/CVE-2019-5736.json +++ b/2019/CVE-2019-5736.json @@ -263,39 +263,6 @@ "score": 0, "subscribers_count": 6 }, - { - "id": 173057459, - "name": "CVE-2019-5736-PoC-2", - "full_name": "yyqs2008\/CVE-2019-5736-PoC-2", - "owner": { - "login": "yyqs2008", - "id": 1332668, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1332668?v=4", - "html_url": "https:\/\/github.com\/yyqs2008", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/yyqs2008\/CVE-2019-5736-PoC-2", - "description": null, - "fork": false, - "created_at": "2019-02-28T06:48:13Z", - "updated_at": "2020-06-11T14:27:08Z", - "pushed_at": "2019-02-23T13:20:19Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 177891884, "name": "CVE-2019-5736", diff --git a/2019/CVE-2019-6340.json b/2019/CVE-2019-6340.json index 3b6ab72990..4d7dd0decc 100644 --- a/2019/CVE-2019-6340.json +++ b/2019/CVE-2019-6340.json @@ -98,39 +98,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 172458734, - "name": "CVE-2019-6340", - "full_name": "oways\/CVE-2019-6340", - "owner": { - "login": "oways", - "id": 11142952, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/11142952?v=4", - "html_url": "https:\/\/github.com\/oways", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/oways\/CVE-2019-6340", - "description": "CVE-2019-6340 POC Drupal rce", - "fork": false, - "created_at": "2019-02-25T07:47:16Z", - "updated_at": "2026-10-08T10:27:14Z", - "pushed_at": "2019-02-25T08:57:14Z", - "stargazers_count": 11, - "watchers_count": 11, - "has_discussions": false, - "forks_count": 8, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 8, - "watchers": 11, - "score": 0, - "subscribers_count": 2 - }, { "id": 172766416, "name": "cve-2019-6340", diff --git a/2019/CVE-2019-6487.json b/2019/CVE-2019-6487.json index c40b6facdf..fcfd77a982 100644 --- a/2019/CVE-2019-6487.json +++ b/2019/CVE-2019-6487.json @@ -14,10 +14,10 @@ "description": "CVE-2019-6487. A command injection vulnerability in TP-Link WDR5620 Series up to verion 3.", "fork": false, "created_at": "2019-01-17T14:44:12Z", - "updated_at": "2026-08-24T14:51:34Z", + "updated_at": "2026-10-27T05:09:51Z", "pushed_at": "2019-01-19T10:49:21Z", - "stargazers_count": 41, - "watchers_count": 41, + "stargazers_count": 40, + "watchers_count": 40, "has_discussions": false, "forks_count": 17, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 17, - "watchers": 41, + "watchers": 40, "score": 0, "subscribers_count": 1 } diff --git a/2020/CVE-2020-10977.json b/2020/CVE-2020-10977.json index 8021f2dadb..6c4abbc091 100644 --- a/2020/CVE-2020-10977.json +++ b/2020/CVE-2020-10977.json @@ -136,39 +136,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 342445393, - "name": "cve-2020-10977", - "full_name": "possib1e\/cve-2020-10977", - "owner": { - "login": "possib1e", - "id": 30862319, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/30862319?v=4", - "html_url": "https:\/\/github.com\/possib1e", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/possib1e\/cve-2020-10977", - "description": "GitLab 12.9 Arbitrary File Read", - "fork": false, - "created_at": "2021-02-26T02:57:05Z", - "updated_at": "2021-02-26T02:57:06Z", - "pushed_at": "2021-01-23T18:34:04Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 345284390, "name": "CVE-2020-10977", diff --git a/2020/CVE-2020-14882.json b/2020/CVE-2020-14882.json index d8ffe6335d..4126a64d9d 100644 --- a/2020/CVE-2020-14882.json +++ b/2020/CVE-2020-14882.json @@ -714,39 +714,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 353271458, - "name": "CVE-2020-14882", - "full_name": "kk98kk0\/CVE-2020-14882", - "owner": { - "login": "kk98kk0", - "id": 16933557, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16933557?v=4", - "html_url": "https:\/\/github.com\/kk98kk0", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/kk98kk0\/CVE-2020-14882", - "description": "CVE-2020-14882部署冰蝎内存马", - "fork": false, - "created_at": "2021-03-31T07:49:06Z", - "updated_at": "2023-07-07T13:50:47Z", - "pushed_at": "2021-01-27T06:31:26Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 3, - "score": 0, - "subscribers_count": 0 - }, { "id": 366180883, "name": "CVE-2020-14882-WebLogic", diff --git a/2020/CVE-2020-35713.json b/2020/CVE-2020-35713.json deleted file mode 100644 index f621745aec..0000000000 --- a/2020/CVE-2020-35713.json +++ /dev/null @@ -1,38 +0,0 @@ -[ - { - "id": 331538426, - "name": "CVE-2020-35713", - "full_name": "Al1ex\/CVE-2020-35713", - "owner": { - "login": "Al1ex", - "id": 38161463, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38161463?v=4", - "html_url": "https:\/\/github.com\/Al1ex", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Al1ex\/CVE-2020-35713", - "description": "CVE-2020-35713", - "fork": false, - "created_at": "2021-01-21T06:39:58Z", - "updated_at": "2024-08-12T20:09:37Z", - "pushed_at": "2021-01-21T06:40:15Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "belkin", - "cve-2020-35713" - ], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2020/CVE-2020-7200.json b/2020/CVE-2020-7200.json deleted file mode 100644 index 8291e663b5..0000000000 --- a/2020/CVE-2020-7200.json +++ /dev/null @@ -1,41 +0,0 @@ -[ - { - "id": 329734215, - "name": "CVE-2020-7200", - "full_name": "alexfrancow\/CVE-2020-7200", - "owner": { - "login": "alexfrancow", - "id": 23419929, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/23419929?v=4", - "html_url": "https:\/\/github.com\/alexfrancow", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/alexfrancow\/CVE-2020-7200", - "description": "CVE-2020-7200: HPE Systems Insight Manager (SIM) RCE PoC", - "fork": false, - "created_at": "2021-01-14T21:05:29Z", - "updated_at": "2025-05-06T20:39:29Z", - "pushed_at": "2021-01-17T20:30:38Z", - "stargazers_count": 6, - "watchers_count": 6, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve", - "exploit", - "hpe", - "jboss", - "rce" - ], - "visibility": "public", - "forks": 1, - "watchers": 6, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-23639.json b/2021/CVE-2021-23639.json deleted file mode 100644 index 5fba14eea7..0000000000 --- a/2021/CVE-2021-23639.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 867675283, - "name": "CVE-2021-23639", - "full_name": "MohandAcherir\/CVE-2021-23639", - "owner": { - "login": "MohandAcherir", - "id": 39704385, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/39704385?v=4", - "html_url": "https:\/\/github.com\/MohandAcherir", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/MohandAcherir\/CVE-2021-23639", - "description": "Exploit of CVE-2021-23639 for the vulnerable library 'md-to-pdf' in JS", - "fork": false, - "created_at": "2024-10-04T14:02:46Z", - "updated_at": "2024-10-04T14:05:42Z", - "pushed_at": "2024-10-04T14:05:38Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-24959.json b/2021/CVE-2021-24959.json deleted file mode 100644 index 67413cc953..0000000000 --- a/2021/CVE-2021-24959.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 861757230, - "name": "CVE-2021-24959", - "full_name": "RandomRobbieBF\/CVE-2021-24959", - "owner": { - "login": "RandomRobbieBF", - "id": 51722811, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4", - "html_url": "https:\/\/github.com\/RandomRobbieBF", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2021-24959", - "description": "WP Email Users <= 1.7.6 - SQL Injection", - "fork": false, - "created_at": "2024-09-23T13:15:34Z", - "updated_at": "2024-10-18T17:57:38Z", - "pushed_at": "2024-09-23T13:19:41Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-28164.json b/2021/CVE-2021-28164.json index dac50111e9..bb7df8497e 100644 --- a/2021/CVE-2021-28164.json +++ b/2021/CVE-2021-28164.json @@ -64,38 +64,5 @@ "watchers": 0, "score": 0, "subscribers_count": 0 - }, - { - "id": 1434361916, - "name": "work1-api", - "full_name": "Guanyu-Zhou\/work1-api", - "owner": { - "login": "Guanyu-Zhou", - "id": 175495188, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/175495188?v=4", - "html_url": "https:\/\/github.com\/Guanyu-Zhou", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Guanyu-Zhou\/work1-api", - "description": "Work 1 - secure Flask API, CI\/CD, CVE-2021-28164", - "fork": false, - "created_at": "2026-10-26T12:38:29Z", - "updated_at": "2026-10-26T17:01:16Z", - "pushed_at": "2026-10-26T17:01:10Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2021/CVE-2021-34527.json b/2021/CVE-2021-34527.json index ede903c912..bd82df89f1 100644 --- a/2021/CVE-2021-34527.json +++ b/2021/CVE-2021-34527.json @@ -119,10 +119,10 @@ "description": "PrintNightmare - Windows Print Spooler RCE\/LPE Vulnerability (CVE-2021-34527, CVE-2021-1675) proof of concept exploits", "fork": false, "created_at": "2021-07-03T15:15:12Z", - "updated_at": "2026-10-09T11:54:38Z", + "updated_at": "2026-10-27T04:46:05Z", "pushed_at": "2021-09-13T12:12:17Z", - "stargazers_count": 177, - "watchers_count": 177, + "stargazers_count": 178, + "watchers_count": 178, "has_discussions": false, "forks_count": 40, "allow_forking": true, @@ -140,7 +140,7 @@ ], "visibility": "public", "forks": 40, - "watchers": 177, + "watchers": 178, "score": 0, "subscribers_count": 4 }, diff --git a/2021/CVE-2021-41773.json b/2021/CVE-2021-41773.json index c1f84d2414..f70a18a8b0 100644 --- a/2021/CVE-2021-41773.json +++ b/2021/CVE-2021-41773.json @@ -5923,8 +5923,8 @@ "description": "Work 1 — secure Flask REST API with CI\/CD (bandit, pip-audit) and a CVE-2021-41773 analysis", "fork": false, "created_at": "2026-10-20T16:43:26Z", - "updated_at": "2026-10-22T03:07:05Z", - "pushed_at": "2026-10-22T03:07:01Z", + "updated_at": "2026-10-27T03:38:07Z", + "pushed_at": "2026-10-27T03:38:03Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2021/CVE-2021-43798.json b/2021/CVE-2021-43798.json index 8f01e1a5b5..a7f202c425 100644 --- a/2021/CVE-2021-43798.json +++ b/2021/CVE-2021-43798.json @@ -1390,39 +1390,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 868207969, - "name": "Grafana-CVE-2021-43798", - "full_name": "0xSAZZAD\/Grafana-CVE-2021-43798", - "owner": { - "login": "0xSAZZAD", - "id": 59094087, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59094087?v=4", - "html_url": "https:\/\/github.com\/0xSAZZAD", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0xSAZZAD\/Grafana-CVE-2021-43798", - "description": "Python implementation of a tool for decrypting and encrypting sensitive data in Grafana, specifically addressing the vulnerabilities associated with CVE-2021-43798. Grafana encrypts all data source passwords using the AES algorithm with the secret_key found in the defaults.ini configuration file.", - "fork": false, - "created_at": "2024-10-05T18:51:12Z", - "updated_at": "2026-06-13T15:38:19Z", - "pushed_at": "2024-10-05T19:49:45Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, { "id": 903400976, "name": "GrafXploit", diff --git a/2021/CVE-2021-44228.json b/2021/CVE-2021-44228.json index a313249ea1..bc297dece6 100644 --- a/2021/CVE-2021-44228.json +++ b/2021/CVE-2021-44228.json @@ -13245,39 +13245,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 855503144, - "name": "CVE-2021-44228-Log4Shell-", - "full_name": "OtisSymbos\/CVE-2021-44228-Log4Shell-", - "owner": { - "login": "OtisSymbos", - "id": 78093502, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78093502?v=4", - "html_url": "https:\/\/github.com\/OtisSymbos", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/OtisSymbos\/CVE-2021-44228-Log4Shell-", - "description": null, - "fork": false, - "created_at": "2024-09-11T01:13:35Z", - "updated_at": "2024-09-11T01:20:42Z", - "pushed_at": "2024-09-11T01:14:51Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 855573158, "name": "log4j-shell-poc", diff --git a/2022/CVE-2022-0165.json b/2022/CVE-2022-0165.json deleted file mode 100644 index 08f85fe745..0000000000 --- a/2022/CVE-2022-0165.json +++ /dev/null @@ -1,43 +0,0 @@ -[ - { - "id": 807412299, - "name": "CVE-2022-0165", - "full_name": "Cappricio-Securities\/CVE-2022-0165", - "owner": { - "login": "Cappricio-Securities", - "id": 102907425, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102907425?v=4", - "html_url": "https:\/\/github.com\/Cappricio-Securities", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Cappricio-Securities\/CVE-2022-0165", - "description": "WordPress Page Builder KingComposer <=2.9.6 - Open Redirect", - "fork": false, - "created_at": "2024-05-29T04:00:25Z", - "updated_at": "2024-06-24T09:29:49Z", - "pushed_at": "2024-06-24T09:29:32Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "bugbounty", - "bugbounty-tools", - "cve-2022-0165", - "cve-2022-0165-poc", - "cve-2022-0165-scanner", - "open-redirect", - "wordpress-page-builder-kingcomposer" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-0847.json b/2022/CVE-2022-0847.json index dc4a91c887..f2b2c82c69 100644 --- a/2022/CVE-2022-0847.json +++ b/2022/CVE-2022-0847.json @@ -2912,39 +2912,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 794413658, - "name": "CVE-2022-0847", - "full_name": "xsxtw\/CVE-2022-0847", - "owner": { - "login": "xsxtw", - "id": 168295718, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/168295718?v=4", - "html_url": "https:\/\/github.com\/xsxtw", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/xsxtw\/CVE-2022-0847", - "description": null, - "fork": false, - "created_at": "2024-05-01T05:16:16Z", - "updated_at": "2024-05-01T05:18:06Z", - "pushed_at": "2024-05-01T05:18:07Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 810324570, "name": "CVE-2022-0847-dirty-pipe-checker", @@ -2978,39 +2945,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 811402709, - "name": "CVE-2022-0847-DirtyPipe-Exploits", - "full_name": "muhammad1596\/CVE-2022-0847-DirtyPipe-Exploits", - "owner": { - "login": "muhammad1596", - "id": 68430129, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/68430129?v=4", - "html_url": "https:\/\/github.com\/muhammad1596", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/muhammad1596\/CVE-2022-0847-DirtyPipe-Exploits", - "description": null, - "fork": false, - "created_at": "2024-06-06T14:27:41Z", - "updated_at": "2024-06-06T14:39:21Z", - "pushed_at": "2024-06-06T14:39:17Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 893690392, "name": "DirtyPipe", diff --git a/2022/CVE-2022-1329.json b/2022/CVE-2022-1329.json index 10bd70aa44..62bcdb1eee 100644 --- a/2022/CVE-2022-1329.json +++ b/2022/CVE-2022-1329.json @@ -137,39 +137,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 818198561, - "name": "CVE-2022-1329", - "full_name": "phanthibichtram12\/CVE-2022-1329", - "owner": { - "login": "phanthibichtram12", - "id": 95855503, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/95855503?v=4", - "html_url": "https:\/\/github.com\/phanthibichtram12", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/phanthibichtram12\/CVE-2022-1329", - "description": null, - "fork": false, - "created_at": "2024-06-21T10:05:03Z", - "updated_at": "2024-06-21T10:38:10Z", - "pushed_at": "2024-06-21T10:38:06Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 871297880, "name": "CVE-2022-1329", diff --git a/2022/CVE-2022-1565.json b/2022/CVE-2022-1565.json deleted file mode 100644 index 0ec99c56d4..0000000000 --- a/2022/CVE-2022-1565.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 818221073, - "name": "CVE-2022-1565", - "full_name": "phanthibichtram12\/CVE-2022-1565", - "owner": { - "login": "phanthibichtram12", - "id": 95855503, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/95855503?v=4", - "html_url": "https:\/\/github.com\/phanthibichtram12", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/phanthibichtram12\/CVE-2022-1565", - "description": null, - "fork": false, - "created_at": "2024-06-21T11:08:26Z", - "updated_at": "2024-06-21T11:10:04Z", - "pushed_at": "2024-06-21T11:10:01Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-21500.json b/2022/CVE-2022-21500.json deleted file mode 100644 index fbaf528a91..0000000000 --- a/2022/CVE-2022-21500.json +++ /dev/null @@ -1,42 +0,0 @@ -[ - { - "id": 812484365, - "name": "CVE-2022-21500", - "full_name": "Cappricio-Securities\/CVE-2022-21500", - "owner": { - "login": "Cappricio-Securities", - "id": 102907425, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102907425?v=4", - "html_url": "https:\/\/github.com\/Cappricio-Securities", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Cappricio-Securities\/CVE-2022-21500", - "description": "Oracle E-Business Suite <=12.2 - Authentication Bypass", - "fork": false, - "created_at": "2024-06-09T02:59:45Z", - "updated_at": "2026-01-26T13:10:22Z", - "pushed_at": "2024-06-24T10:50:28Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve", - "cve-2022-21500", - "ebs", - "oracle", - "pentesting", - "wpt" - ], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-22978.json b/2022/CVE-2022-22978.json index d348eeb5d1..5714f83db9 100644 --- a/2022/CVE-2022-22978.json +++ b/2022/CVE-2022-22978.json @@ -169,39 +169,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 801924792, - "name": "CVE-2022-22978-demo", - "full_name": "wan9xx\/CVE-2022-22978-demo", - "owner": { - "login": "wan9xx", - "id": 65795483, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/65795483?v=4", - "html_url": "https:\/\/github.com\/wan9xx", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/wan9xx\/CVE-2022-22978-demo", - "description": "CVE-2022-22978漏洞实例代码", - "fork": false, - "created_at": "2024-05-17T07:26:54Z", - "updated_at": "2024-05-20T03:52:35Z", - "pushed_at": "2024-05-20T03:52:32Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 961436063, "name": "CVE-2022-22978", diff --git a/2022/CVE-2022-23935.json b/2022/CVE-2022-23935.json index 89ed450c74..698acfb8f3 100644 --- a/2022/CVE-2022-23935.json +++ b/2022/CVE-2022-23935.json @@ -32,39 +32,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 598604286, - "name": "CVE-2022-23935", - "full_name": "cowsecurity\/CVE-2022-23935", - "owner": { - "login": "cowsecurity", - "id": 74612612, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74612612?v=4", - "html_url": "https:\/\/github.com\/cowsecurity", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/cowsecurity\/CVE-2022-23935", - "description": "CVE-2022-23935 exploit PoC exiftool version 12.37 written in python", - "fork": false, - "created_at": "2023-02-07T13:02:40Z", - "updated_at": "2024-10-22T14:32:35Z", - "pushed_at": "2023-02-07T13:10:30Z", - "stargazers_count": 8, - "watchers_count": 8, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 8, - "score": 0, - "subscribers_count": 1 - }, { "id": 600164977, "name": "CVE-2022-23935", diff --git a/2022/CVE-2022-24112.json b/2022/CVE-2022-24112.json index 253078e489..43399f2c8d 100644 --- a/2022/CVE-2022-24112.json +++ b/2022/CVE-2022-24112.json @@ -268,39 +268,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 809913189, - "name": "exploit_CVE-2022-24112", - "full_name": "btar1gan\/exploit_CVE-2022-24112", - "owner": { - "login": "btar1gan", - "id": 92728059, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/92728059?v=4", - "html_url": "https:\/\/github.com\/btar1gan", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/btar1gan\/exploit_CVE-2022-24112", - "description": "New exploit for Apache APISIX v2.12.1 - Remote code execution (RCE)", - "fork": false, - "created_at": "2024-06-03T17:33:59Z", - "updated_at": "2025-06-21T16:31:07Z", - "pushed_at": "2024-06-07T05:09:49Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, { "id": 989327326, "name": "CVE-2022-24112", diff --git a/2022/CVE-2022-24355.json b/2022/CVE-2022-24355.json index 9174dfa3e8..3f80d9a075 100644 --- a/2022/CVE-2022-24355.json +++ b/2022/CVE-2022-24355.json @@ -30,7 +30,7 @@ "forks": 0, "watchers": 0, "score": 0, - "subscribers_count": 0 + "subscribers_count": 1 }, { "id": 1317175995, diff --git a/2022/CVE-2022-26134.json b/2022/CVE-2022-26134.json index da7a1f3152..045438e788 100644 --- a/2022/CVE-2022-26134.json +++ b/2022/CVE-2022-26134.json @@ -1954,39 +1954,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 597319077, - "name": "CVE-2022-26134_Behinder_MemShell", - "full_name": "MaskCyberSecurityTeam\/CVE-2022-26134_Behinder_MemShell", - "owner": { - "login": "MaskCyberSecurityTeam", - "id": 107802263, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/107802263?v=4", - "html_url": "https:\/\/github.com\/MaskCyberSecurityTeam", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/MaskCyberSecurityTeam\/CVE-2022-26134_Behinder_MemShell", - "description": null, - "fork": false, - "created_at": "2023-02-04T06:51:47Z", - "updated_at": "2026-09-15T09:09:16Z", - "pushed_at": "2023-02-04T07:18:25Z", - "stargazers_count": 8, - "watchers_count": 8, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 8, - "score": 0, - "subscribers_count": 0 - }, { "id": 672663443, "name": "Atlassian_CVE-2022-26134", diff --git a/2022/CVE-2022-29072.json b/2022/CVE-2022-29072.json index c575596634..cc16679108 100644 --- a/2022/CVE-2022-29072.json +++ b/2022/CVE-2022-29072.json @@ -134,38 +134,5 @@ "watchers": 3, "score": 0, "subscribers_count": 1 - }, - { - "id": 798859541, - "name": "CVE-2022-29072", - "full_name": "rasan2001\/CVE-2022-29072", - "owner": { - "login": "rasan2001", - "id": 156652838, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/156652838?v=4", - "html_url": "https:\/\/github.com\/rasan2001", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/rasan2001\/CVE-2022-29072", - "description": null, - "fork": false, - "created_at": "2024-05-10T16:13:15Z", - "updated_at": "2024-05-10T16:13:36Z", - "pushed_at": "2024-05-10T16:13:34Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2022/CVE-2022-32250.json b/2022/CVE-2022-32250.json index 5b9b7f7d2f..ff87f9befa 100644 --- a/2022/CVE-2022-32250.json +++ b/2022/CVE-2022-32250.json @@ -98,39 +98,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 812759874, - "name": "CVE-2022-32250", - "full_name": "Kristal-g\/CVE-2022-32250", - "owner": { - "login": "Kristal-g", - "id": 61376744, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61376744?v=4", - "html_url": "https:\/\/github.com\/Kristal-g", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Kristal-g\/CVE-2022-32250", - "description": "My exploit for CVE-2022-32250 for linux kernel 5.18", - "fork": false, - "created_at": "2024-06-09T19:53:54Z", - "updated_at": "2026-06-17T23:14:01Z", - "pushed_at": "2024-06-09T20:02:58Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, { "id": 899547899, "name": "CVE-2022-32250", diff --git a/2022/CVE-2022-36446.json b/2022/CVE-2022-36446.json index e50c73cb1e..ec7f130db1 100644 --- a/2022/CVE-2022-36446.json +++ b/2022/CVE-2022-36446.json @@ -73,39 +73,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 813427958, - "name": "CVE-2022-36446", - "full_name": "Kang3639\/CVE-2022-36446", - "owner": { - "login": "Kang3639", - "id": 118144091, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/118144091?v=4", - "html_url": "https:\/\/github.com\/Kang3639", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Kang3639\/CVE-2022-36446", - "description": "CVE-2022-36446 POC 실습", - "fork": false, - "created_at": "2024-06-11T04:21:28Z", - "updated_at": "2024-06-11T05:01:36Z", - "pushed_at": "2024-06-11T05:01:32Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1288879729, "name": "CVE-2022-36446-Webmin-RCE", diff --git a/2022/CVE-2022-36779.json b/2022/CVE-2022-36779.json index 6f380ce436..ea7ee8eeec 100644 --- a/2022/CVE-2022-36779.json +++ b/2022/CVE-2022-36779.json @@ -32,39 +32,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 810016226, - "name": "CVE-2022-36779", - "full_name": "EmadYaY\/CVE-2022-36779", - "owner": { - "login": "EmadYaY", - "id": 80041099, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/80041099?v=4", - "html_url": "https:\/\/github.com\/EmadYaY", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/EmadYaY\/CVE-2022-36779", - "description": "exploit code", - "fork": false, - "created_at": "2024-06-03T22:25:31Z", - "updated_at": "2024-06-03T22:32:34Z", - "pushed_at": "2024-06-03T22:32:31Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1036089104, "name": "exploit-CVE-2022-36779", diff --git a/2022/CVE-2022-38694.json b/2022/CVE-2022-38694.json index 51bd93e063..c1eafab39f 100644 --- a/2022/CVE-2022-38694.json +++ b/2022/CVE-2022-38694.json @@ -14,10 +14,10 @@ "description": "This is a one-time signature verification bypass. For persistent signature verification bypass, check https:\/\/github.com\/TomKing062\/CVE-2022-38691_38692", "fork": false, "created_at": "2023-06-10T08:31:26Z", - "updated_at": "2026-10-25T07:19:27Z", + "updated_at": "2026-10-27T05:30:21Z", "pushed_at": "2025-06-14T16:55:26Z", - "stargazers_count": 637, - "watchers_count": 637, + "stargazers_count": 639, + "watchers_count": 639, "has_discussions": true, "forks_count": 89, "allow_forking": true, @@ -31,7 +31,7 @@ ], "visibility": "public", "forks": 89, - "watchers": 637, + "watchers": 639, "score": 0, "subscribers_count": 15 }, diff --git a/2022/CVE-2022-44569.json b/2022/CVE-2022-44569.json deleted file mode 100644 index 130deb9ae5..0000000000 --- a/2022/CVE-2022-44569.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 797754300, - "name": "ivanti-automationmanager-exploit", - "full_name": "rweijnen\/ivanti-automationmanager-exploit", - "owner": { - "login": "rweijnen", - "id": 7575747, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/7575747?v=4", - "html_url": "https:\/\/github.com\/rweijnen", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/rweijnen\/ivanti-automationmanager-exploit", - "description": "Exploit for Ivanti Automation Manager CVE-2022-44569", - "fork": false, - "created_at": "2024-05-08T13:00:16Z", - "updated_at": "2024-05-08T20:41:45Z", - "pushed_at": "2024-05-08T13:26:27Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-46169.json b/2022/CVE-2022-46169.json index cf83f7b52c..ae17d09c90 100644 --- a/2022/CVE-2022-46169.json +++ b/2022/CVE-2022-46169.json @@ -1022,39 +1022,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 814041598, - "name": "CVE-2022-46169", - "full_name": "HPT-Intern-Task-Submission\/CVE-2022-46169", - "owner": { - "login": "HPT-Intern-Task-Submission", - "id": 169382051, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/169382051?v=4", - "html_url": "https:\/\/github.com\/HPT-Intern-Task-Submission", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/HPT-Intern-Task-Submission\/CVE-2022-46169", - "description": null, - "fork": false, - "created_at": "2024-06-12T08:24:30Z", - "updated_at": "2024-06-14T03:02:02Z", - "pushed_at": "2024-06-14T03:01:59Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 912195951, "name": "CVE-2022-46169", diff --git a/2022/CVE-2022-46395.json b/2022/CVE-2022-46395.json index cf79e9b5e9..81dd28a142 100644 --- a/2022/CVE-2022-46395.json +++ b/2022/CVE-2022-46395.json @@ -65,39 +65,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 821484239, - "name": "CVE-2022-46395", - "full_name": "SmileTabLabo\/CVE-2022-46395", - "owner": { - "login": "SmileTabLabo", - "id": 112930114, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/112930114?v=4", - "html_url": "https:\/\/github.com\/SmileTabLabo", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SmileTabLabo\/CVE-2022-46395", - "description": null, - "fork": false, - "created_at": "2024-06-28T16:37:46Z", - "updated_at": "2026-05-25T07:28:43Z", - "pushed_at": "2024-06-28T17:07:23Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": true, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, { "id": 1259888858, "name": "cve-2022-46395-qemu", diff --git a/2022/CVE-2022-46689.json b/2022/CVE-2022-46689.json index 36e7cd19e5..09259763f7 100644 --- a/2022/CVE-2022-46689.json +++ b/2022/CVE-2022-46689.json @@ -113,10 +113,10 @@ "description": "Proof-of-concept app to overwrite fonts on iOS using CVE-2022-46689.", "fork": false, "created_at": "2022-12-26T06:56:35Z", - "updated_at": "2026-10-20T16:51:55Z", + "updated_at": "2026-10-27T06:07:58Z", "pushed_at": "2023-08-02T09:35:14Z", - "stargazers_count": 885, - "watchers_count": 885, + "stargazers_count": 884, + "watchers_count": 884, "has_discussions": false, "forks_count": 78, "allow_forking": true, @@ -127,7 +127,7 @@ "topics": [], "visibility": "public", "forks": 78, - "watchers": 885, + "watchers": 884, "score": 0, "subscribers_count": 23 }, diff --git a/2023/CVE-2023-20696.json b/2023/CVE-2023-20696.json index d88f8700b8..99c779475d 100644 --- a/2023/CVE-2023-20696.json +++ b/2023/CVE-2023-20696.json @@ -14,10 +14,10 @@ "description": "Cert exploit for MTK devices.There is a logic flaw in MTK cert verification process.Similar to CVE-2023-20696.", "fork": false, "created_at": "2026-06-22T02:09:35Z", - "updated_at": "2026-10-26T08:23:29Z", + "updated_at": "2026-10-27T02:05:18Z", "pushed_at": "2026-07-23T12:23:11Z", - "stargazers_count": 38, - "watchers_count": 38, + "stargazers_count": 39, + "watchers_count": 39, "has_discussions": false, "forks_count": 16, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 16, - "watchers": 38, + "watchers": 39, "score": 0, "subscribers_count": 1 }, diff --git a/2023/CVE-2023-23752.json b/2023/CVE-2023-23752.json index bfe14ed4c9..b6b67e3ed3 100644 --- a/2023/CVE-2023-23752.json +++ b/2023/CVE-2023-23752.json @@ -1551,6 +1551,46 @@ "score": 0, "subscribers_count": 0 }, + { + "id": 1315356622, + "name": "SITEUR", + "full_name": "Charly-bite\/SITEUR", + "owner": { + "login": "Charly-bite", + "id": 202337194, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/202337194?v=4", + "html_url": "https:\/\/github.com\/Charly-bite", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Charly-bite\/SITEUR", + "description": "CVE-2023-23752 Urban Transit Infrastructure Security Audit, CVSS 9.8 Attack Chain Analysis & Blue-Team Remediation Lab", + "fork": false, + "created_at": "2026-07-28T19:20:17Z", + "updated_at": "2026-10-27T04:50:03Z", + "pushed_at": "2026-10-19T18:57:16Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "blue-team", + "cve-2023-23752", + "cybersecurity", + "docker", + "owasp", + "vulnerability-research" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, { "id": 1404026332, "name": "CVE-2023-23752", diff --git a/2023/CVE-2023-42931.json b/2023/CVE-2023-42931.json index 5abb3c936f..b92f530878 100644 --- a/2023/CVE-2023-42931.json +++ b/2023/CVE-2023-42931.json @@ -47,10 +47,10 @@ "description": "The exploit targets a LPE works on macOS 14.0-14.1.2, 13.0-13.6.2, 12.0-12.7.1", "fork": false, "created_at": "2025-07-27T17:22:15Z", - "updated_at": "2026-01-09T10:22:39Z", + "updated_at": "2026-10-27T02:47:55Z", "pushed_at": "2025-07-31T00:34:26Z", - "stargazers_count": 5, - "watchers_count": 5, + "stargazers_count": 6, + "watchers_count": 6, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 5, + "watchers": 6, "score": 0, "subscribers_count": 0 } diff --git a/2024/CVE-2024-0044.json b/2024/CVE-2024-0044.json index 0004f60b37..4b39695f25 100644 --- a/2024/CVE-2024-0044.json +++ b/2024/CVE-2024-0044.json @@ -47,10 +47,10 @@ "description": "CVE-2024-0044: a \"run-as any app\" high-severity vulnerability affecting Android versions 12 and 13", "fork": false, "created_at": "2024-06-18T12:30:53Z", - "updated_at": "2026-10-21T16:29:48Z", + "updated_at": "2026-10-27T09:25:17Z", "pushed_at": "2024-12-02T06:29:52Z", - "stargazers_count": 329, - "watchers_count": 329, + "stargazers_count": 330, + "watchers_count": 330, "has_discussions": false, "forks_count": 67, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 67, - "watchers": 329, + "watchers": 330, "score": 0, "subscribers_count": 5 }, diff --git a/2024/CVE-2024-1086.json b/2024/CVE-2024-1086.json index 1efd1e6702..115e9e455f 100644 --- a/2024/CVE-2024-1086.json +++ b/2024/CVE-2024-1086.json @@ -19,7 +19,7 @@ "stargazers_count": 2456, "watchers_count": 2456, "has_discussions": false, - "forks_count": 328, + "forks_count": 327, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -33,7 +33,7 @@ "poc" ], "visibility": "public", - "forks": 328, + "forks": 327, "watchers": 2456, "score": 0, "subscribers_count": 25 diff --git a/2024/CVE-2024-1561.json b/2024/CVE-2024-1561.json index bddca16555..f90423164d 100644 --- a/2024/CVE-2024-1561.json +++ b/2024/CVE-2024-1561.json @@ -64,5 +64,38 @@ "watchers": 3, "score": 0, "subscribers_count": 1 + }, + { + "id": 1435150274, + "name": "hdu-is-work1", + "full_name": "WeiTao712\/hdu-is-work1", + "owner": { + "login": "WeiTao712", + "id": 242106960, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/242106960?v=4", + "html_url": "https:\/\/github.com\/WeiTao712", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/WeiTao712\/hdu-is-work1", + "description": "HDU IS Work 1 - secure REST API, CI\/CD security pipeline, CVE-2024-1561 remediation", + "fork": false, + "created_at": "2026-10-27T02:20:31Z", + "updated_at": "2026-10-27T02:35:23Z", + "pushed_at": "2026-10-27T02:35:20Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2024/CVE-2024-22203.json b/2024/CVE-2024-22203.json index 7fa012eb76..f53d2a6258 100644 --- a/2024/CVE-2024-22203.json +++ b/2024/CVE-2024-22203.json @@ -15,7 +15,7 @@ "fork": false, "created_at": "2026-10-07T15:40:41Z", "updated_at": "2026-10-21T16:39:02Z", - "pushed_at": "2026-10-26T08:52:43Z", + "pushed_at": "2026-10-27T08:57:43Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-42992.json b/2024/CVE-2024-42992.json index 1816920a49..d24371c412 100644 --- a/2024/CVE-2024-42992.json +++ b/2024/CVE-2024-42992.json @@ -19,7 +19,7 @@ "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, - "forks_count": 2, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 2, + "forks": 1, "watchers": 2, "score": 0, "subscribers_count": 0 diff --git a/2024/CVE-2024-45337.json b/2024/CVE-2024-45337.json index 19b7c70b3f..fcec7c9d0d 100644 --- a/2024/CVE-2024-45337.json +++ b/2024/CVE-2024-45337.json @@ -157,7 +157,7 @@ "fork": false, "created_at": "2026-07-07T20:45:27Z", "updated_at": "2026-10-21T16:58:51Z", - "pushed_at": "2026-10-26T09:20:44Z", + "pushed_at": "2026-10-27T09:19:13Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-4577.json b/2024/CVE-2024-4577.json index e918f9b74f..337744eba3 100644 --- a/2024/CVE-2024-4577.json +++ b/2024/CVE-2024-4577.json @@ -2328,8 +2328,8 @@ "description": "PHP2Shell Sentinel is an intelligent, zero-dependency, low-resource cross-platform defense daemon to detect, log, prevent, and actively mitigate php2shell exploits (CVE-2026-109618 & CVE-2026-109619, plus CVE-2024-4577) on both Linux and Windows servers", "fork": false, "created_at": "2026-10-23T10:56:58Z", - "updated_at": "2026-10-23T16:03:40Z", - "pushed_at": "2026-10-23T16:03:36Z", + "updated_at": "2026-10-27T10:46:45Z", + "pushed_at": "2026-10-27T10:46:41Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-45846.json b/2024/CVE-2024-45846.json index ad647dbb23..4c72d9c528 100644 --- a/2024/CVE-2024-45846.json +++ b/2024/CVE-2024-45846.json @@ -15,7 +15,7 @@ "fork": false, "created_at": "2026-10-07T15:51:48Z", "updated_at": "2026-10-21T16:39:07Z", - "pushed_at": "2026-10-26T09:00:01Z", + "pushed_at": "2026-10-27T09:03:46Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2019/CVE-2019-5737.json b/2024/CVE-2024-55090.json similarity index 58% rename from 2019/CVE-2019-5737.json rename to 2024/CVE-2024-55090.json index 78bb161ce0..5bf9e88b75 100644 --- a/2019/CVE-2019-5737.json +++ b/2024/CVE-2024-55090.json @@ -1,21 +1,21 @@ [ { - "id": 172282648, - "name": "cve-2019-5737", - "full_name": "beelzebruh\/cve-2019-5737", + "id": 1435622132, + "name": "CVE-2024-55090", + "full_name": "Pwned007\/CVE-2024-55090", "owner": { - "login": "beelzebruh", - "id": 39379168, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/39379168?v=4", - "html_url": "https:\/\/github.com\/beelzebruh", + "login": "Pwned007", + "id": 179687053, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/179687053?v=4", + "html_url": "https:\/\/github.com\/Pwned007", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/beelzebruh\/cve-2019-5737", + "html_url": "https:\/\/github.com\/Pwned007\/CVE-2024-55090", "description": null, "fork": false, - "created_at": "2019-02-24T01:20:04Z", - "updated_at": "2021-02-11T02:58:53Z", - "pushed_at": "2019-02-24T03:43:12Z", + "created_at": "2026-10-27T11:14:13Z", + "updated_at": "2026-10-27T11:14:38Z", + "pushed_at": "2026-10-27T11:14:35Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-55947.json b/2024/CVE-2024-55947.json index fc20d9f764..2f8e11bd2f 100644 --- a/2024/CVE-2024-55947.json +++ b/2024/CVE-2024-55947.json @@ -15,7 +15,7 @@ "fork": false, "created_at": "2026-06-23T18:32:13Z", "updated_at": "2026-10-21T17:13:09Z", - "pushed_at": "2026-10-26T08:51:18Z", + "pushed_at": "2026-10-27T08:56:31Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-6387.json b/2024/CVE-2024-6387.json index 9dc5bdcd8e..16d426f0e1 100644 --- a/2024/CVE-2024-6387.json +++ b/2024/CVE-2024-6387.json @@ -63,7 +63,7 @@ "forks": 185, "watchers": 498, "score": 0, - "subscribers_count": 7 + "subscribers_count": 4 }, { "id": 822579775, diff --git a/2024/CVE-2024-9264.json b/2024/CVE-2024-9264.json index c8d17458e7..070d68a7ea 100644 --- a/2024/CVE-2024-9264.json +++ b/2024/CVE-2024-9264.json @@ -402,7 +402,7 @@ "fork": false, "created_at": "2026-07-07T23:02:34Z", "updated_at": "2026-10-21T16:58:50Z", - "pushed_at": "2026-10-26T09:27:39Z", + "pushed_at": "2026-10-27T09:27:28Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-0890.json b/2025/CVE-2025-0890.json deleted file mode 100644 index dfa9196161..0000000000 --- a/2025/CVE-2025-0890.json +++ /dev/null @@ -1,43 +0,0 @@ -[ - { - "id": 1333485026, - "name": "zyxel-p870hn-hardware-hacking", - "full_name": "Danyw24\/zyxel-p870hn-hardware-hacking", - "owner": { - "login": "Danyw24", - "id": 81335686, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/81335686?v=4", - "html_url": "https:\/\/github.com\/Danyw24", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Danyw24\/zyxel-p870hn-hardware-hacking", - "description": "From a bare PCB to root: hardware-hacking a ZyXEL P-870HN (BCM6368) over UART — CVE-2025-0890 + CVE-2024-40891, on my own hardware.", - "fork": false, - "created_at": "2026-08-13T19:47:46Z", - "updated_at": "2026-08-13T19:48:42Z", - "pushed_at": "2026-08-13T19:48:37Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "bcm6368", - "embedded-security", - "hardware-hacking", - "iot-security", - "reverse-engineering", - "uart", - "zyxel" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2025/CVE-2025-10897.json b/2025/CVE-2025-10897.json deleted file mode 100644 index d08e58ac92..0000000000 --- a/2025/CVE-2025-10897.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1319634184, - "name": "CVE-2025-10897", - "full_name": "error-inside\/CVE-2025-10897", - "owner": { - "login": "error-inside", - "id": 149432422, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/149432422?v=4", - "html_url": "https:\/\/github.com\/error-inside", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/error-inside\/CVE-2025-10897", - "description": "WooCommerce Designer Pro <= 1.9.28 - Unauthenticated Arbitrary File Read", - "fork": false, - "created_at": "2026-08-01T21:27:37Z", - "updated_at": "2026-08-01T21:32:24Z", - "pushed_at": "2026-08-01T21:32:20Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2025/CVE-2025-15001.json b/2025/CVE-2025-15001.json deleted file mode 100644 index 7dd97d1a8c..0000000000 --- a/2025/CVE-2025-15001.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1319111153, - "name": "CVE-2025-15001-Exploit", - "full_name": "r00thex\/CVE-2025-15001-Exploit", - "owner": { - "login": "r00thex", - "id": 295794860, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/295794860?v=4", - "html_url": "https:\/\/github.com\/r00thex", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/r00thex\/CVE-2025-15001-Exploit", - "description": null, - "fork": false, - "created_at": "2026-08-01T08:26:53Z", - "updated_at": "2026-09-30T15:59:11Z", - "pushed_at": "2026-08-01T08:37:28Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2025/CVE-2025-21479.json b/2025/CVE-2025-21479.json index 1ee414e668..000055a248 100644 --- a/2025/CVE-2025-21479.json +++ b/2025/CVE-2025-21479.json @@ -131,39 +131,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 1337894995, - "name": "vivo_iqoo_neo_9_root_research_on_CVE-2025-21479", - "full_name": "reaizuguo\/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479", - "owner": { - "login": "reaizuguo", - "id": 133977436, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/133977436?v=4", - "html_url": "https:\/\/github.com\/reaizuguo", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/reaizuguo\/vivo_iqoo_neo_9_root_research_on_CVE-2025-21479", - "description": "iQOO Neo9 (PD2338C) 免解锁 Caps-Root 工具** — 基于 CVE-2025-21479 (Adreno GPU SDS) 的任意物理写提权方案", - "fork": false, - "created_at": "2026-08-18T02:31:53Z", - "updated_at": "2026-09-11T10:00:20Z", - "pushed_at": "2026-08-18T01:46:28Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 6, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 6, - "watchers": 3, - "score": 0, - "subscribers_count": 0 - }, { "id": 1337936206, "name": "cve-2025-21479-iqoo11pro", @@ -368,7 +335,7 @@ "forks": 0, "watchers": 3, "score": 0, - "subscribers_count": 0 + "subscribers_count": 1 }, { "id": 1401988509, diff --git a/2025/CVE-2025-24071.json b/2025/CVE-2025-24071.json index 82a7e3aa71..49ac01e1f1 100644 --- a/2025/CVE-2025-24071.json +++ b/2025/CVE-2025-24071.json @@ -14,12 +14,12 @@ "description": "CVE-2025-24071: NTLM Hash Leak via RAR\/ZIP Extraction and .library-ms File", "fork": false, "created_at": "2025-03-16T20:10:19Z", - "updated_at": "2026-10-26T15:02:33Z", + "updated_at": "2026-10-27T08:03:39Z", "pushed_at": "2025-03-20T21:22:23Z", - "stargazers_count": 410, - "watchers_count": 410, + "stargazers_count": 412, + "watchers_count": 412, "has_discussions": false, - "forks_count": 69, + "forks_count": 70, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,8 +27,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 69, - "watchers": 410, + "forks": 70, + "watchers": 412, "score": 0, "subscribers_count": 1 }, diff --git a/2025/CVE-2025-69286.json b/2025/CVE-2025-27740.json similarity index 51% rename from 2025/CVE-2025-69286.json rename to 2025/CVE-2025-27740.json index 911f697209..88c3958fdf 100644 --- a/2025/CVE-2025-69286.json +++ b/2025/CVE-2025-27740.json @@ -1,21 +1,21 @@ [ { - "id": 1330424371, - "name": "ragflow-audit", - "full_name": "qianlijaingshan\/ragflow-audit", + "id": 1435145760, + "name": "CVE-2025-27740_POC", + "full_name": "Dannners\/CVE-2025-27740_POC", "owner": { - "login": "qianlijaingshan", - "id": 208015249, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/208015249?v=4", - "html_url": "https:\/\/github.com\/qianlijaingshan", + "login": "Dannners", + "id": 37989081, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/37989081?v=4", + "html_url": "https:\/\/github.com\/Dannners", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/qianlijaingshan\/ragflow-audit", - "description": "RAGFlow 三洞审计工具 (CVE-2026-28797 \/ CVE-2026-24770 \/ CVE-2025-69286)", + "html_url": "https:\/\/github.com\/Dannners\/CVE-2025-27740_POC", + "description": "CVE-2025-27740 — AD CS Subject Key Identifier Injection", "fork": false, - "created_at": "2026-08-11T02:36:51Z", - "updated_at": "2026-08-24T07:48:15Z", - "pushed_at": "2026-08-11T02:44:54Z", + "created_at": "2026-10-27T02:14:29Z", + "updated_at": "2026-10-27T03:23:02Z", + "pushed_at": "2026-10-27T02:28:46Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-27840.json b/2025/CVE-2025-27840.json index ecf6a1aad3..45d87adf94 100644 --- a/2025/CVE-2025-27840.json +++ b/2025/CVE-2025-27840.json @@ -106,38 +106,5 @@ "watchers": 0, "score": 0, "subscribers_count": 1 - }, - { - "id": 1323574117, - "name": "esp32-cve-2025-27840-power-trace-experiment", - "full_name": "JasonW88\/esp32-cve-2025-27840-power-trace-experiment", - "owner": { - "login": "JasonW88", - "id": 103770424, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103770424?v=4", - "html_url": "https:\/\/github.com\/JasonW88", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/JasonW88\/esp32-cve-2025-27840-power-trace-experiment", - "description": "Firmware for getting a power trace of the behavior of the bluetooth module on the ESP32 when the ESP32 is sent the undocumented hci bluetooth commands (CVE-2025-27840). Uses ESP-IDF v5.0.8 and v5.0.9.", - "fork": false, - "created_at": "2026-08-05T03:06:49Z", - "updated_at": "2026-08-05T03:40:38Z", - "pushed_at": "2026-08-05T03:40:12Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2025/CVE-2025-2945.json b/2025/CVE-2025-2945.json index 35bbeb758f..14c75f9f3f 100644 --- a/2025/CVE-2025-2945.json +++ b/2025/CVE-2025-2945.json @@ -174,39 +174,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1330207727, - "name": "CVE-2025-2945", - "full_name": "g0d150ne\/CVE-2025-2945", - "owner": { - "login": "g0d150ne", - "id": 214824334, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/214824334?v=4", - "html_url": "https:\/\/github.com\/g0d150ne", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/g0d150ne\/CVE-2025-2945", - "description": "Exploit for pgAdmin4 Remote Code Execution (RCE) vulnerability affecting versions 8.10 to 9.1.", - "fork": false, - "created_at": "2026-08-10T20:06:45Z", - "updated_at": "2026-08-10T20:52:45Z", - "pushed_at": "2026-08-10T20:52:33Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1347281065, "name": "CVE-2025-2945-pgAdmin-RCE", diff --git a/2025/CVE-2025-29927.json b/2025/CVE-2025-29927.json index ed82f5ac74..1f59bbbbac 100644 --- a/2025/CVE-2025-29927.json +++ b/2025/CVE-2025-29927.json @@ -4031,39 +4031,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1321316406, - "name": "nextjs-middleware-auth-bypass-lab", - "full_name": "berraesen\/nextjs-middleware-auth-bypass-lab", - "owner": { - "login": "berraesen", - "id": 163033692, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/163033692?v=4", - "html_url": "https:\/\/github.com\/berraesen", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/berraesen\/nextjs-middleware-auth-bypass-lab", - "description": "Bu laboratuvar ortamını sıfırdan kendim oluşturdum. Next.js uygulaması içerisinde giriş, ana sayfa ve admin sayfalarını hazırladım. Middleware ile yetkilendirme mekanizmasını kurduktan sonra Burp Suite kullanarak CVE-2025-29927 zafiyetini kontrollü ortamda gösterdim.", - "fork": false, - "created_at": "2026-08-03T06:21:14Z", - "updated_at": "2026-08-10T05:57:20Z", - "pushed_at": "2026-08-03T06:32:30Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, { "id": 1350435006, "name": "cve-2025-29927", diff --git a/2025/CVE-2025-32375.json b/2025/CVE-2025-32375.json index 3448136da3..9c3eb51e62 100644 --- a/2025/CVE-2025-32375.json +++ b/2025/CVE-2025-32375.json @@ -31,38 +31,5 @@ "watchers": 3, "score": 0, "subscribers_count": 1 - }, - { - "id": 1324215305, - "name": "CVE-2025-32375-PoC", - "full_name": "SevdaKhidirova\/CVE-2025-32375-PoC", - "owner": { - "login": "SevdaKhidirova", - "id": 100667535, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/100667535?v=4", - "html_url": "https:\/\/github.com\/SevdaKhidirova", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SevdaKhidirova\/CVE-2025-32375-PoC", - "description": null, - "fork": false, - "created_at": "2026-08-05T15:37:12Z", - "updated_at": "2026-08-05T15:43:29Z", - "pushed_at": "2026-08-05T15:42:02Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2025/CVE-2025-32432.json b/2025/CVE-2025-32432.json index 105033c444..9dab418f19 100644 --- a/2025/CVE-2025-32432.json +++ b/2025/CVE-2025-32432.json @@ -257,10 +257,10 @@ "description": "Exploit, POC for CVE-2025-32432, CraftCMS2Shell", "fork": false, "created_at": "2026-07-21T16:52:22Z", - "updated_at": "2026-10-10T12:21:56Z", + "updated_at": "2026-10-27T06:34:57Z", "pushed_at": "2026-07-21T16:55:37Z", - "stargazers_count": 5, - "watchers_count": 5, + "stargazers_count": 6, + "watchers_count": 6, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -271,7 +271,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 5, + "watchers": 6, "score": 0, "subscribers_count": 0 }, @@ -341,72 +341,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1324117005, - "name": "craftcms-cve-2025-32432-rce", - "full_name": "PsyGuy007-sys\/craftcms-cve-2025-32432-rce", - "owner": { - "login": "PsyGuy007-sys", - "id": 77344647, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/77344647?v=4", - "html_url": "https:\/\/github.com\/PsyGuy007-sys", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/PsyGuy007-sys\/craftcms-cve-2025-32432-rce", - "description": "Craft CMS CVE-2025-32432 command runner adapted from Nicolas Bourras and Orange Cyberdefense research", - "fork": false, - "created_at": "2026-08-05T14:01:51Z", - "updated_at": "2026-08-21T21:24:29Z", - "pushed_at": "2026-08-05T14:01:54Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1327159643, - "name": "CVE-2025-32432-PoC", - "full_name": "EzraMansor\/CVE-2025-32432-PoC", - "owner": { - "login": "EzraMansor", - "id": 291137701, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/291137701?v=4", - "html_url": "https:\/\/github.com\/EzraMansor", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/EzraMansor\/CVE-2025-32432-PoC", - "description": "A simple PoC on the Remote Code Execution (RCE) Vulnerability of CraftCMS designated as CVE-2025-32432 written in Go", - "fork": false, - "created_at": "2026-08-07T21:05:02Z", - "updated_at": "2026-09-11T03:36:27Z", - "pushed_at": "2026-08-07T21:21:27Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1369721856, "name": "CVE-2025-32432", diff --git a/2025/CVE-2025-32433.json b/2025/CVE-2025-32433.json index cbf0c64c66..e623931d7f 100644 --- a/2025/CVE-2025-32433.json +++ b/2025/CVE-2025-32433.json @@ -1343,39 +1343,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1334547243, - "name": "CVE-2025-32433-PoC-Analysis", - "full_name": "Liam-Worsley\/CVE-2025-32433-PoC-Analysis", - "owner": { - "login": "Liam-Worsley", - "id": 124000490, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/124000490?v=4", - "html_url": "https:\/\/github.com\/Liam-Worsley", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Liam-Worsley\/CVE-2025-32433-PoC-Analysis", - "description": "This is an analysis for CVE-2025-32433 (Erlang OTP SSH Vulnerability). I did not write any of the code, I only wrote comments describing what the code does and instructions for setting up the server to perform the exploit yourself.", - "fork": false, - "created_at": "2026-08-14T20:17:03Z", - "updated_at": "2026-08-14T20:19:03Z", - "pushed_at": "2026-08-14T20:18:59Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1376190637, "name": "CVE-2025-32433-LAB", diff --git a/2025/CVE-2025-32463.json b/2025/CVE-2025-32463.json index 432f8073a4..7bb73be5ec 100644 --- a/2025/CVE-2025-32463.json +++ b/2025/CVE-2025-32463.json @@ -14,10 +14,10 @@ "description": "Escalation of Privilege to the root through sudo binary with chroot option. CVE-2025-32463", "fork": false, "created_at": "2025-07-01T11:26:15Z", - "updated_at": "2026-10-22T09:21:45Z", + "updated_at": "2026-10-27T04:20:04Z", "pushed_at": "2025-11-19T13:30:29Z", - "stargazers_count": 531, - "watchers_count": 531, + "stargazers_count": 532, + "watchers_count": 532, "has_discussions": false, "forks_count": 94, "allow_forking": true, @@ -46,7 +46,7 @@ ], "visibility": "public", "forks": 94, - "watchers": 531, + "watchers": 532, "score": 0, "subscribers_count": 2 }, @@ -919,10 +919,10 @@ "description": "Privilege escalation to root using sudo chroot, NO NEED for gcc installed.", "fork": false, "created_at": "2025-07-14T23:07:56Z", - "updated_at": "2026-10-15T14:59:24Z", + "updated_at": "2026-10-27T04:23:15Z", "pushed_at": "2025-10-06T18:11:14Z", - "stargazers_count": 50, - "watchers_count": 50, + "stargazers_count": 51, + "watchers_count": 51, "has_discussions": false, "forks_count": 9, "allow_forking": true, @@ -945,7 +945,7 @@ ], "visibility": "public", "forks": 9, - "watchers": 50, + "watchers": 51, "score": 0, "subscribers_count": 2 }, @@ -2358,39 +2358,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1322906299, - "name": "CVE-2025-32463_exploit", - "full_name": "0xdak\/CVE-2025-32463_exploit", - "owner": { - "login": "0xdak", - "id": 58743788, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/58743788?v=4", - "html_url": "https:\/\/github.com\/0xdak", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0xdak\/CVE-2025-32463_exploit", - "description": null, - "fork": false, - "created_at": "2026-08-04T12:08:33Z", - "updated_at": "2026-08-04T12:09:51Z", - "pushed_at": "2026-08-04T12:09:03Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1395299205, "name": "CVE-2025-32463", diff --git a/2025/CVE-2025-3248.json b/2025/CVE-2025-3248.json index 821c15ac64..687723f5c1 100644 --- a/2025/CVE-2025-3248.json +++ b/2025/CVE-2025-3248.json @@ -805,39 +805,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1329211922, - "name": "langflow-exploit", - "full_name": "preemware\/langflow-exploit", - "owner": { - "login": "preemware", - "id": 9146809, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/9146809?v=4", - "html_url": "https:\/\/github.com\/preemware", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/preemware\/langflow-exploit", - "description": "PoC for CVE-2025-3248: unauthenticated RCE in Langflow < 1.3.0 via \/api\/v1\/validate\/code.", - "fork": false, - "created_at": "2026-08-09T21:39:50Z", - "updated_at": "2026-08-10T18:01:07Z", - "pushed_at": "2026-08-09T21:39:53Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, { "id": 1349048885, "name": "CVE-2025-3248-Langflow-RCE", diff --git a/2025/CVE-2025-32756.json b/2025/CVE-2025-32756.json index eeb73d02cc..7fd9b76da0 100644 --- a/2025/CVE-2025-32756.json +++ b/2025/CVE-2025-32756.json @@ -47,10 +47,10 @@ "description": "Proof of Concept for CVE-2025-32756 - A critical stack-based buffer overflow vulnerability affecting multiple Fortinet products.", "fork": false, "created_at": "2025-06-05T14:16:31Z", - "updated_at": "2026-10-23T14:13:37Z", + "updated_at": "2026-10-27T08:39:35Z", "pushed_at": "2025-06-13T07:55:34Z", - "stargazers_count": 191, - "watchers_count": 191, + "stargazers_count": 190, + "watchers_count": 190, "has_discussions": false, "forks_count": 29, "allow_forking": true, @@ -66,7 +66,7 @@ ], "visibility": "public", "forks": 29, - "watchers": 191, + "watchers": 190, "score": 0, "subscribers_count": 6 }, diff --git a/2025/CVE-2025-36911.json b/2025/CVE-2025-36911.json index 1d04aeb49e..746b9051b7 100644 --- a/2025/CVE-2025-36911.json +++ b/2025/CVE-2025-36911.json @@ -86,10 +86,10 @@ "description": "WPair is a defensive security research tool that demonstrates the CVE-2025-36911 (eg WhisperPair) vulnerability in Google's Fast Pair protocol. This vulnerability affects millions of Bluetooth audio devices worldwide, allowing unauthorized pairing and potential microphone access without user consent.", "fork": false, "created_at": "2026-01-17T05:28:08Z", - "updated_at": "2026-10-25T12:50:56Z", + "updated_at": "2026-10-27T03:56:26Z", "pushed_at": "2026-01-18T00:15:59Z", - "stargazers_count": 862, - "watchers_count": 862, + "stargazers_count": 863, + "watchers_count": 863, "has_discussions": false, "forks_count": 98, "allow_forking": true, @@ -100,7 +100,7 @@ "topics": [], "visibility": "public", "forks": 98, - "watchers": 862, + "watchers": 863, "score": 0, "subscribers_count": 23 }, diff --git a/2025/CVE-2025-37899.json b/2025/CVE-2025-37899.json index af615156b7..905e14fda5 100644 --- a/2025/CVE-2025-37899.json +++ b/2025/CVE-2025-37899.json @@ -19,7 +19,7 @@ "stargazers_count": 355, "watchers_count": 355, "has_discussions": false, - "forks_count": 47, + "forks_count": 46, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 47, + "forks": 46, "watchers": 355, "score": 0, "subscribers_count": 2 diff --git a/2025/CVE-2025-48932.json b/2025/CVE-2025-48932.json index 1ba8501764..fc095ae6ba 100644 --- a/2025/CVE-2025-48932.json +++ b/2025/CVE-2025-48932.json @@ -31,38 +31,5 @@ "watchers": 2, "score": 0, "subscribers_count": 0 - }, - { - "id": 1320434422, - "name": "CVE-2025-48932-Invision-Community-SQLi-Exploit", - "full_name": "CerberusMrXi\/CVE-2025-48932-Invision-Community-SQLi-Exploit", - "owner": { - "login": "CerberusMrXi", - "id": 90186307, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90186307?v=4", - "html_url": "https:\/\/github.com\/CerberusMrXi", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/CerberusMrXi\/CVE-2025-48932-Invision-Community-SQLi-Exploit", - "description": "CVE-2025-48932 - Unauthenticated SQL injection exploit for Invision Community ≤ 4.7.20. Fully automated exploitation with database enumeration, credential dumping, admin takeover, session hijacking & multi-threading. No dependencies required. Security research tool by Sudeepa Wanigarathna", - "fork": false, - "created_at": "2026-08-02T17:32:41Z", - "updated_at": "2026-08-03T18:54:40Z", - "pushed_at": "2026-08-02T18:35:08Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2025/CVE-2025-49844.json b/2025/CVE-2025-49844.json index 61061155bf..b3362e7015 100644 --- a/2025/CVE-2025-49844.json +++ b/2025/CVE-2025-49844.json @@ -184,10 +184,10 @@ "description": "CVE-2025-49844 (RediShell)", "fork": false, "created_at": "2025-10-07T06:18:28Z", - "updated_at": "2026-10-13T19:08:46Z", + "updated_at": "2026-10-27T05:08:23Z", "pushed_at": "2025-10-07T07:03:50Z", - "stargazers_count": 345, - "watchers_count": 345, + "stargazers_count": 346, + "watchers_count": 346, "has_discussions": false, "forks_count": 65, "allow_forking": true, @@ -198,7 +198,7 @@ "topics": [], "visibility": "public", "forks": 65, - "watchers": 345, + "watchers": 346, "score": 0, "subscribers_count": 1 }, diff --git a/2025/CVE-2025-50460.json b/2025/CVE-2025-50460.json index 9b0f41c062..e9f5d53558 100644 --- a/2025/CVE-2025-50460.json +++ b/2025/CVE-2025-50460.json @@ -48,7 +48,7 @@ "fork": false, "created_at": "2026-10-07T15:40:34Z", "updated_at": "2026-10-21T16:39:02Z", - "pushed_at": "2026-10-26T08:50:18Z", + "pushed_at": "2026-10-27T08:56:04Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-52464.json b/2025/CVE-2025-52464.json deleted file mode 100644 index 59cd11dc3a..0000000000 --- a/2025/CVE-2025-52464.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1325896838, - "name": "meshtastic-cve-2025-52464-poc", - "full_name": "msdmehdipour\/meshtastic-cve-2025-52464-poc", - "owner": { - "login": "msdmehdipour", - "id": 114863356, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/114863356?v=4", - "html_url": "https:\/\/github.com\/msdmehdipour", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/msdmehdipour\/meshtastic-cve-2025-52464-poc", - "description": "Software-only proof of concept for CVE-2025-52464 in Meshtastic Direct Messages", - "fork": false, - "created_at": "2026-08-06T21:12:34Z", - "updated_at": "2026-08-07T09:08:34Z", - "pushed_at": "2026-08-06T21:24:56Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2025/CVE-2025-53770.json b/2025/CVE-2025-53770.json index 77d27d48c7..869b8b17a4 100644 --- a/2025/CVE-2025-53770.json +++ b/2025/CVE-2025-53770.json @@ -1473,39 +1473,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1322912409, - "name": "cve-2025-53770-research", - "full_name": "mfarshad-abdullah-khan\/cve-2025-53770-research", - "owner": { - "login": "mfarshad-abdullah-khan", - "id": 256970743, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/256970743?v=4", - "html_url": "https:\/\/github.com\/mfarshad-abdullah-khan", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mfarshad-abdullah-khan\/cve-2025-53770-research", - "description": "🚨 Threat intel & incident response research on SharePoint \"ToolShell\" RCE zero-day (CVE-2025-53770). 🕵️‍♂️ Covers root-cause deserialization flaws, attack timelines, risk metrics, and defensive EDR validation playbooks. 🛡️", - "fork": false, - "created_at": "2026-08-04T12:15:10Z", - "updated_at": "2026-08-04T12:27:15Z", - "pushed_at": "2026-08-04T12:26:08Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1422574851, "name": "sharepoint-zero-day-cs50-cybersecurity", diff --git a/2025/CVE-2025-55182.json b/2025/CVE-2025-55182.json index 6a5599a873..6ffc504a75 100644 --- a/2025/CVE-2025-55182.json +++ b/2025/CVE-2025-55182.json @@ -871,10 +871,10 @@ "description": "High Fidelity Detection Mechanism for RSC\/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)", "fork": false, "created_at": "2025-12-04T06:55:04Z", - "updated_at": "2026-10-27T00:07:07Z", + "updated_at": "2026-10-27T07:42:04Z", "pushed_at": "2025-12-07T04:16:46Z", - "stargazers_count": 2457, - "watchers_count": 2457, + "stargazers_count": 2456, + "watchers_count": 2456, "has_discussions": false, "forks_count": 272, "allow_forking": true, @@ -885,7 +885,7 @@ "topics": [], "visibility": "public", "forks": 272, - "watchers": 2457, + "watchers": 2456, "score": 0, "subscribers_count": 11 }, @@ -1102,10 +1102,10 @@ "description": "Explanation and full RCE PoC for CVE-2025-55182", "fork": false, "created_at": "2025-12-04T11:49:55Z", - "updated_at": "2026-10-26T14:38:27Z", + "updated_at": "2026-10-27T10:37:19Z", "pushed_at": "2025-12-08T13:51:04Z", - "stargazers_count": 1432, - "watchers_count": 1432, + "stargazers_count": 1431, + "watchers_count": 1431, "has_discussions": false, "forks_count": 195, "allow_forking": true, @@ -1116,7 +1116,7 @@ "topics": [], "visibility": "public", "forks": 195, - "watchers": 1432, + "watchers": 1431, "score": 0, "subscribers_count": 10 }, @@ -3869,10 +3869,10 @@ "description": "RSC\/Next.js RCE Vulnerability Detector & PoC Chrome Extension – CVE-2025-55182 & CVE-2025-66478", "fork": false, "created_at": "2025-12-06T00:36:16Z", - "updated_at": "2026-10-27T00:08:22Z", + "updated_at": "2026-10-27T05:34:53Z", "pushed_at": "2025-12-06T01:27:19Z", - "stargazers_count": 313, - "watchers_count": 313, + "stargazers_count": 314, + "watchers_count": 314, "has_discussions": false, "forks_count": 54, "allow_forking": true, @@ -3883,7 +3883,7 @@ "topics": [], "visibility": "public", "forks": 54, - "watchers": 313, + "watchers": 314, "score": 0, "subscribers_count": 5 }, @@ -4310,10 +4310,10 @@ "description": null, "fork": false, "created_at": "2025-12-06T14:36:55Z", - "updated_at": "2026-10-26T20:05:44Z", + "updated_at": "2026-10-27T08:56:31Z", "pushed_at": "2025-12-06T19:52:21Z", - "stargazers_count": 280, - "watchers_count": 280, + "stargazers_count": 281, + "watchers_count": 281, "has_discussions": false, "forks_count": 47, "allow_forking": true, @@ -4324,7 +4324,7 @@ "topics": [], "visibility": "public", "forks": 47, - "watchers": 280, + "watchers": 281, "score": 0, "subscribers_count": 0 }, @@ -15205,219 +15205,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1327005225, - "name": "CVE-2025-55182-Advanced-React-Server-Components-RCE-Exploit", - "full_name": "CerberusMrXi\/CVE-2025-55182-Advanced-React-Server-Components-RCE-Exploit", - "owner": { - "login": "CerberusMrXi", - "id": 90186307, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90186307?v=4", - "html_url": "https:\/\/github.com\/CerberusMrXi", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/CerberusMrXi\/CVE-2025-55182-Advanced-React-Server-Components-RCE-Exploit", - "description": "Advanced React Server Components RCE scanner for CVE-2025-55182. Features: multi-stage fingerprinting, vulnerability verification, DNS exfiltration, interactive shell, payload obfuscation, and professional reporting (JSON\/HTML\/PDF). Authorized testing only. ", - "fork": false, - "created_at": "2026-08-07T17:57:25Z", - "updated_at": "2026-08-13T20:27:47Z", - "pushed_at": "2026-08-07T19:20:26Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1331482402, - "name": "CVE-2025-55182-Exploit", - "full_name": "dotnetguard\/CVE-2025-55182-Exploit", - "owner": { - "login": "dotnetguard", - "id": 314261767, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/314261767?v=4", - "html_url": "https:\/\/github.com\/dotnetguard", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dotnetguard\/CVE-2025-55182-Exploit", - "description": "CVE-2025-55182 — Next.js Flight Deserialization RCE exploit with interactive shell, single-command execution and multi-payload reverse shell chain. For authorized penetration testing only.", - "fork": false, - "created_at": "2026-08-12T01:00:47Z", - "updated_at": "2026-08-12T01:01:39Z", - "pushed_at": "2026-08-12T01:01:36Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1332399672, - "name": "cve-2025-55182-react2shell-analysis", - "full_name": "aisha-jimoh\/cve-2025-55182-react2shell-analysis", - "owner": { - "login": "aisha-jimoh", - "id": 200348288, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/200348288?v=4", - "html_url": "https:\/\/github.com\/aisha-jimoh", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/aisha-jimoh\/cve-2025-55182-react2shell-analysis", - "description": "Technical analysis of CVE-2025-55182 (React2Shell), covering vulnerability mechanics, root cause, controlled PoC testing, impact, and mitigation strategies.", - "fork": false, - "created_at": "2026-08-12T19:57:15Z", - "updated_at": "2026-08-12T20:15:41Z", - "pushed_at": "2026-08-12T20:08:37Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve", - "cybersecurity", - "react", - "react-server-components", - "remote-code-execution", - "security-research", - "vulnerability-research" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1334557771, - "name": "cs50-cybersecurity", - "full_name": "balochkainat160-cyber\/cs50-cybersecurity", - "owner": { - "login": "balochkainat160-cyber", - "id": 257261556, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/257261556?v=4", - "html_url": "https:\/\/github.com\/balochkainat160-cyber", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/balochkainat160-cyber\/cs50-cybersecurity", - "description": "CS50's Introduction to Cybersecurity final project on React2Shell (CVE-2025-55182)", - "fork": false, - "created_at": "2026-08-14T20:33:16Z", - "updated_at": "2026-08-14T20:35:35Z", - "pushed_at": "2026-08-14T20:33:17Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1336056384, - "name": "Security_incident_report", - "full_name": "kevin9480\/Security_incident_report", - "owner": { - "login": "kevin9480", - "id": 127842042, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/127842042?v=4", - "html_url": "https:\/\/github.com\/kevin9480", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/kevin9480\/Security_incident_report", - "description": "React2Shell(CVE-2025-55182) 취약점 기반 침해 시나리오를 재현하고, Wazuh\/Sysmon\/Coraza WAF 로그로 침해사고를 분석·대응한 DFIR 프로젝트", - "fork": false, - "created_at": "2026-08-16T15:05:22Z", - "updated_at": "2026-08-16T17:53:04Z", - "pushed_at": "2026-08-16T17:13:11Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cybersecurity", - "dfir", - "incident-response", - "ransomware", - "siem", - "wazuh" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1336972874, - "name": "React2Shell", - "full_name": "PhanHoangKhang\/React2Shell", - "owner": { - "login": "PhanHoangKhang", - "id": 215494686, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/215494686?v=4", - "html_url": "https:\/\/github.com\/PhanHoangKhang", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/PhanHoangKhang\/React2Shell", - "description": "Isolated Docker lab, static detection scanner, and PoC validation for React2Shell (CVE-2025-55182).", - "fork": false, - "created_at": "2026-08-17T09:51:01Z", - "updated_at": "2026-08-17T11:14:18Z", - "pushed_at": "2026-08-17T11:11:57Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1340178809, "name": "React2shell-Research", diff --git a/2025/CVE-2025-57052.json b/2025/CVE-2025-57052.json deleted file mode 100644 index ebb70e7bfe..0000000000 --- a/2025/CVE-2025-57052.json +++ /dev/null @@ -1,49 +0,0 @@ -[ - { - "id": 1319854717, - "name": "cjson-rust-port", - "full_name": "DhruvP2205\/cjson-rust-port", - "owner": { - "login": "DhruvP2205", - "id": 83415057, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/83415057?v=4", - "html_url": "https:\/\/github.com\/DhruvP2205", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/DhruvP2205\/cjson-rust-port", - "description": "🦀 C→Rust port of DaveGamble\/cJSON — 🧪 22\/22 original tests unmodified, 🐛 70M+ fuzz comparisons\/0 divergences, 🎯 CVE-2025-57052 fixed. ", - "fork": false, - "created_at": "2026-08-02T05:38:03Z", - "updated_at": "2026-08-03T17:52:01Z", - "pushed_at": "2026-08-03T08:07:20Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "c", - "c-to-rust", - "cjson", - "cve", - "differential-fuzzing", - "ffi", - "hackathon", - "json", - "json-parser", - "memory-safety", - "rust", - "rust-ffi", - "systems-programming" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2025/CVE-2025-5781.json b/2025/CVE-2025-5781.json deleted file mode 100644 index 10d0bf2bb5..0000000000 --- a/2025/CVE-2025-5781.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 1331304720, - "name": "CVE-2025-5781", - "full_name": "jasonbernier\/CVE-2025-5781", - "owner": { - "login": "jasonbernier", - "id": 24844372, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/24844372?v=4", - "html_url": "https:\/\/github.com\/jasonbernier", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/jasonbernier\/CVE-2025-5781", - "description": "CVE-2025-5781 FreePBX Exploit POC", - "fork": false, - "created_at": "2026-08-11T19:55:00Z", - "updated_at": "2026-08-11T20:02:39Z", - "pushed_at": "2026-08-11T20:02:25Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1335762565, - "name": "cve-2025-5781_FreePBX", - "full_name": "iamrajkumar1995\/cve-2025-5781_FreePBX", - "owner": { - "login": "iamrajkumar1995", - "id": 166055417, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/166055417?v=4", - "html_url": "https:\/\/github.com\/iamrajkumar1995", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/iamrajkumar1995\/cve-2025-5781_FreePBX", - "description": "In August 2025, a critical vulnerability was disclosed in the FreePBX Endpoint module. CVE-2025–57819 allows an unauthenticated attacker to exploit SQL injection in the Endpoint module and, through a chain of database manipulation and scheduled task execution, achieve remote code execution.", - "fork": false, - "created_at": "2026-08-16T08:53:38Z", - "updated_at": "2026-08-16T08:54:02Z", - "pushed_at": "2026-08-16T08:53:39Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2025/CVE-2025-57819.json b/2025/CVE-2025-57819.json index b0fc7c0d80..a817f13246 100644 --- a/2025/CVE-2025-57819.json +++ b/2025/CVE-2025-57819.json @@ -670,39 +670,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1319395730, - "name": "CVE-2025-57819-RCE", - "full_name": "TeteREN\/CVE-2025-57819-RCE", - "owner": { - "login": "TeteREN", - "id": 146318696, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/146318696?v=4", - "html_url": "https:\/\/github.com\/TeteREN", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/TeteREN\/CVE-2025-57819-RCE", - "description": "CVE-2025-57819-RCE_PoC", - "fork": false, - "created_at": "2026-08-01T15:17:23Z", - "updated_at": "2026-08-01T15:20:36Z", - "pushed_at": "2026-08-01T15:20:25Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1359503850, "name": "CVE-2025-57819", diff --git a/2025/CVE-2025-59528.json b/2025/CVE-2025-59528.json index 68b59f48d2..743b67e93f 100644 --- a/2025/CVE-2025-59528.json +++ b/2025/CVE-2025-59528.json @@ -311,72 +311,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1329075074, - "name": "CVE-2025-59528-PoC", - "full_name": "Loaxert\/CVE-2025-59528-PoC", - "owner": { - "login": "Loaxert", - "id": 70897094, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/70897094?v=4", - "html_url": "https:\/\/github.com\/Loaxert", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Loaxert\/CVE-2025-59528-PoC", - "description": "PoC for CVE-2025-59528 used to achieve remote code execution on the Silentium machine at HTB", - "fork": false, - "created_at": "2026-08-09T18:13:57Z", - "updated_at": "2026-08-09T18:20:24Z", - "pushed_at": "2026-08-09T18:20:17Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1329519744, - "name": "CVE-2025-59528-PoC", - "full_name": "sonnelon\/CVE-2025-59528-PoC", - "owner": { - "login": "sonnelon", - "id": 242434829, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/242434829?v=4", - "html_url": "https:\/\/github.com\/sonnelon", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sonnelon\/CVE-2025-59528-PoC", - "description": "The poc of CVE-2025-59528", - "fork": false, - "created_at": "2026-08-10T06:54:32Z", - "updated_at": "2026-08-10T07:22:57Z", - "pushed_at": "2026-08-10T07:22:34Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1349585413, "name": "PoC-and-yara-rules-of-CVE-2025-59528-Flowise-has-Remote-Code-Execution-vulnerability", diff --git a/2025/CVE-2025-62593.json b/2025/CVE-2025-62593.json index 47939d2f9e..c7947a6b57 100644 --- a/2025/CVE-2025-62593.json +++ b/2025/CVE-2025-62593.json @@ -1,37 +1,4 @@ [ - { - "id": 1338800772, - "name": "CVE-2025-62593-PoC", - "full_name": "Boreas37\/CVE-2025-62593-PoC", - "owner": { - "login": "Boreas37", - "id": 185066905, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/185066905?v=4", - "html_url": "https:\/\/github.com\/Boreas37", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Boreas37\/CVE-2025-62593-PoC", - "description": "PoC for CVE-2025-62593: unauthenticated RCE in Ray (CISA KEV). Stdlib-only Python.", - "fork": false, - "created_at": "2026-08-18T20:11:31Z", - "updated_at": "2026-08-19T09:22:13Z", - "pushed_at": "2026-08-18T20:47:15Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 0 - }, { "id": 1353902542, "name": "CVE-2026-33017", diff --git a/2025/CVE-2025-64459.json b/2025/CVE-2025-64459.json index b674cbf92d..76afdf68d2 100644 --- a/2025/CVE-2025-64459.json +++ b/2025/CVE-2025-64459.json @@ -302,38 +302,5 @@ "watchers": 0, "score": 0, "subscribers_count": 0 - }, - { - "id": 1331337390, - "name": "CVE-2025-64459", - "full_name": "YouGina\/CVE-2025-64459", - "owner": { - "login": "YouGina", - "id": 5002624, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5002624?v=4", - "html_url": "https:\/\/github.com\/YouGina", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/YouGina\/CVE-2025-64459", - "description": "CVE-2025-64459 vulnerable by design app", - "fork": false, - "created_at": "2026-08-11T20:42:10Z", - "updated_at": "2026-08-11T20:44:15Z", - "pushed_at": "2026-08-11T20:43:59Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2025/CVE-2025-64512.json b/2025/CVE-2025-64512.json index 2bbcbe329e..b9d1eec0f4 100644 --- a/2025/CVE-2025-64512.json +++ b/2025/CVE-2025-64512.json @@ -240,72 +240,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1331693863, - "name": "CVE-2025-64512", - "full_name": "DodgeNefoli\/CVE-2025-64512", - "owner": { - "login": "DodgeNefoli", - "id": 109746358, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/109746358?v=4", - "html_url": "https:\/\/github.com\/DodgeNefoli", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/DodgeNefoli\/CVE-2025-64512", - "description": null, - "fork": false, - "created_at": "2026-08-12T06:32:18Z", - "updated_at": "2026-08-12T06:33:14Z", - "pushed_at": "2026-08-12T06:33:04Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1335260388, - "name": "CVE-2025-64512-pdfminer-PoC", - "full_name": "oguzylmzx\/CVE-2025-64512-pdfminer-PoC", - "owner": { - "login": "oguzylmzx", - "id": 147805387, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/147805387?v=4", - "html_url": "https:\/\/github.com\/oguzylmzx", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/oguzylmzx\/CVE-2025-64512-pdfminer-PoC", - "description": "PoC for CVE-2025-64512: pdfminer.six CMapDB pickle deserialization RCE via crafted PDF", - "fork": false, - "created_at": "2026-08-15T16:57:44Z", - "updated_at": "2026-08-15T16:58:24Z", - "pushed_at": "2026-08-15T16:57:48Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1370956908, "name": "CVE-2025-64512_PoC", diff --git a/2025/CVE-2025-64513.json b/2025/CVE-2025-64513.json index 1946de2466..36b73c7913 100644 --- a/2025/CVE-2025-64513.json +++ b/2025/CVE-2025-64513.json @@ -31,38 +31,5 @@ "watchers": 1, "score": 0, "subscribers_count": 0 - }, - { - "id": 1323568803, - "name": "milvus-auth-audit", - "full_name": "qianlijaingshan\/milvus-auth-audit", - "owner": { - "login": "qianlijaingshan", - "id": 208015249, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/208015249?v=4", - "html_url": "https:\/\/github.com\/qianlijaingshan", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/qianlijaingshan\/milvus-auth-audit", - "description": "Milvus 认证安全检测脚本：CVE-2025-64513 (sourceid后门) \/ CVE-2026-26190 (\/expr弱token) \/ 内部端口53100", - "fork": false, - "created_at": "2026-08-05T02:57:51Z", - "updated_at": "2026-08-05T03:52:58Z", - "pushed_at": "2026-08-05T03:52:51Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2025/CVE-2025-66390.json b/2025/CVE-2025-66390.json deleted file mode 100644 index 3cb8e9ae1e..0000000000 --- a/2025/CVE-2025-66390.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1324347360, - "name": "Azure-APIM-Dev-Portal-Signup-Bypass", - "full_name": "dz-y\/Azure-APIM-Dev-Portal-Signup-Bypass", - "owner": { - "login": "dz-y", - "id": 163488145, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/163488145?v=4", - "html_url": "https:\/\/github.com\/dz-y", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dz-y\/Azure-APIM-Dev-Portal-Signup-Bypass", - "description": "Python script to bypass Azure APIM signup when UI is disabled, this is different from the CVE-2025-66390 as it does not require you to setup anything cross tenant.", - "fork": false, - "created_at": "2026-08-05T18:04:12Z", - "updated_at": "2026-08-05T18:42:56Z", - "pushed_at": "2026-08-05T18:41:06Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2025/CVE-2025-66478.json b/2025/CVE-2025-66478.json index b8ef6d0cf4..6571a220c5 100644 --- a/2025/CVE-2025-66478.json +++ b/2025/CVE-2025-66478.json @@ -167,10 +167,10 @@ "description": "React2Shell Ultimate - The most comprehensive CVE-2025-66478 Scanner for Next.js RSC RCE vulnerability. Multi-mode detection, WAF bypass, local scanning.", "fork": false, "created_at": "2025-12-05T22:20:14Z", - "updated_at": "2026-10-14T19:21:42Z", + "updated_at": "2026-10-27T08:06:27Z", "pushed_at": "2025-12-10T09:35:17Z", - "stargazers_count": 156, - "watchers_count": 156, + "stargazers_count": 157, + "watchers_count": 157, "has_discussions": false, "forks_count": 30, "allow_forking": true, @@ -192,7 +192,7 @@ ], "visibility": "public", "forks": 30, - "watchers": 156, + "watchers": 157, "score": 0, "subscribers_count": 2 }, diff --git a/2025/CVE-2025-68645.json b/2025/CVE-2025-68645.json index daef45f68d..94e66a3366 100644 --- a/2025/CVE-2025-68645.json +++ b/2025/CVE-2025-68645.json @@ -201,38 +201,5 @@ "watchers": 1, "score": 0, "subscribers_count": 0 - }, - { - "id": 1326996291, - "name": "Ashwesker-CVE-2025-68645", - "full_name": "Ashwesker\/Ashwesker-CVE-2025-68645", - "owner": { - "login": "Ashwesker", - "id": 314371427, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/314371427?v=4", - "html_url": "https:\/\/github.com\/Ashwesker", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Ashwesker\/Ashwesker-CVE-2025-68645", - "description": "POC BLH Magelang CSIRT 2026 by babyrootkid", - "fork": false, - "created_at": "2026-08-07T17:47:55Z", - "updated_at": "2026-08-07T17:48:38Z", - "pushed_at": "2026-08-07T17:48:29Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2025/CVE-2025-68937.json b/2025/CVE-2025-68937.json index 1dc804d649..5cb1534259 100644 --- a/2025/CVE-2025-68937.json +++ b/2025/CVE-2025-68937.json @@ -31,46 +31,5 @@ "watchers": 0, "score": 0, "subscribers_count": 0 - }, - { - "id": 1319775486, - "name": "CVE-2025-68937", - "full_name": "Scratchappy\/CVE-2025-68937", - "owner": { - "login": "Scratchappy", - "id": 203196196, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/203196196?v=4", - "html_url": "https:\/\/github.com\/Scratchappy", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Scratchappy\/CVE-2025-68937", - "description": "Automated PoC exploit for CVE-2025-68937 — Gitea\/Forgejo Template Symlink RCE. Any authenticated user can get a shell as the git service user.", - "fork": false, - "created_at": "2026-08-02T03:14:20Z", - "updated_at": "2026-08-02T03:40:54Z", - "pushed_at": "2026-08-02T03:14:26Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2025-68937", - "exploit", - "gitea", - "poc", - "proof-of-concept", - "rce", - "security" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2025/CVE-2025-69212.json b/2025/CVE-2025-69212.json index 9b54094958..9fc18cd13b 100644 --- a/2025/CVE-2025-69212.json +++ b/2025/CVE-2025-69212.json @@ -346,39 +346,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1319357635, - "name": "CVE-2025-69212-for-myself", - "full_name": "liaomilk\/CVE-2025-69212-for-myself", - "owner": { - "login": "liaomilk", - "id": 306416536, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/306416536?v=4", - "html_url": "https:\/\/github.com\/liaomilk", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/liaomilk\/CVE-2025-69212-for-myself", - "description": "just record for myself", - "fork": false, - "created_at": "2026-08-01T14:25:40Z", - "updated_at": "2026-08-18T01:58:44Z", - "pushed_at": "2026-08-18T01:58:28Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1334003341, "name": "OpenSTA-Exploit", diff --git a/2025/CVE-2025-7026.json b/2025/CVE-2025-7026.json deleted file mode 100644 index 64705c1a34..0000000000 --- a/2025/CVE-2025-7026.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1329223466, - "name": "GIGABYTE-H510M-K-V2-BIOS-SMM-Reverse-Engineering-CVE-2025-7026-7027-7028-7029-Research", - "full_name": "Tobss8\/GIGABYTE-H510M-K-V2-BIOS-SMM-Reverse-Engineering-CVE-2025-7026-7027-7028-7029-Research", - "owner": { - "login": "Tobss8", - "id": 309709454, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/309709454?v=4", - "html_url": "https:\/\/github.com\/Tobss8", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Tobss8\/GIGABYTE-H510M-K-V2-BIOS-SMM-Reverse-Engineering-CVE-2025-7026-7027-7028-7029-Research", - "description": "Static reverse-engineering of a GIGABYTE H510M K V2 (`H510MKV2.F3`) BIOS image: full UEFI firmware-volume extraction analysis of the PI-spec SMM Core memory allocator and a targeted hunt for the four SMM memory-corruption vulnerabilities GIGABYTE\/Binarly disclosed in 2025 (CVE-2025-7026 CVE-2025-7027 CVE-2025-7028 CVE-2025-7029).", - "fork": false, - "created_at": "2026-08-09T22:00:09Z", - "updated_at": "2026-08-10T03:25:46Z", - "pushed_at": "2026-08-09T22:10:34Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2025/CVE-2025-7029.json b/2025/CVE-2025-7029.json deleted file mode 100644 index b4b0529d6e..0000000000 --- a/2025/CVE-2025-7029.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1318895719, - "name": "uefi_bootkit_softlanding", - "full_name": "ARES-SYS\/uefi_bootkit_softlanding", - "owner": { - "login": "ARES-SYS", - "id": 264227664, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/264227664?v=4", - "html_url": "https:\/\/github.com\/ARES-SYS", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ARES-SYS\/uefi_bootkit_softlanding", - "description": "First public analysis of SoftLanding UEFI bootkit: Ring -2 implant, CVE-2025-7029, 240+ Gigabyte boards, GPU AI evasion, dual C2. YARA + Sigma + Suricata included.", - "fork": false, - "created_at": "2026-08-01T02:19:11Z", - "updated_at": "2026-10-13T19:14:58Z", - "pushed_at": "2026-08-01T19:45:21Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2025/CVE-2025-70559.json b/2025/CVE-2025-70559.json deleted file mode 100644 index 29fd500814..0000000000 --- a/2025/CVE-2025-70559.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1334858773, - "name": "CVE-2025-70559", - "full_name": "isukasanuj\/CVE-2025-70559", - "owner": { - "login": "isukasanuj", - "id": 286429492, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/286429492?v=4", - "html_url": "https:\/\/github.com\/isukasanuj", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/isukasanuj\/CVE-2025-70559", - "description": null, - "fork": false, - "created_at": "2026-08-15T06:44:20Z", - "updated_at": "2026-08-15T06:50:48Z", - "pushed_at": "2026-08-15T06:50:41Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2025/CVE-2025-71338.json b/2025/CVE-2025-71338.json deleted file mode 100644 index cd8c426ae3..0000000000 --- a/2025/CVE-2025-71338.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1321552344, - "name": "flowise-arbitrary-file-read-getFileFromStorage", - "full_name": "majpuV\/flowise-arbitrary-file-read-getFileFromStorage", - "owner": { - "login": "majpuV", - "id": 183916812, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/183916812?v=4", - "html_url": "https:\/\/github.com\/majpuV", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/majpuV\/flowise-arbitrary-file-read-getFileFromStorage", - "description": "Unauthenticated arbitrary file read in Flowise (< 2.2.4) via path traversal in getFileFromStorage (storageUtils.ts). Caused by un-sanitized file path combined with mass-assignment in PUT \/api\/v1\/document-store\/store\/:id. Allows full compromise via \/root\/.flowise\/encryption.key read. Distinct from CVE-2025-71338 (fixed in 2.2.4).", - "fork": false, - "created_at": "2026-08-03T09:50:19Z", - "updated_at": "2026-08-03T10:02:31Z", - "pushed_at": "2026-08-03T10:02:14Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2025/CVE-2025-7384.json b/2025/CVE-2025-7384.json deleted file mode 100644 index 3c104292ec..0000000000 --- a/2025/CVE-2025-7384.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1319102928, - "name": "CVE-2025-7384", - "full_name": "Dungsocool\/CVE-2025-7384", - "owner": { - "login": "Dungsocool", - "id": 214970996, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/214970996?v=4", - "html_url": "https:\/\/github.com\/Dungsocool", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Dungsocool\/CVE-2025-7384", - "description": null, - "fork": false, - "created_at": "2026-08-01T08:14:17Z", - "updated_at": "2026-08-01T08:21:07Z", - "pushed_at": "2026-08-01T08:21:00Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2025/CVE-2025-7771.json b/2025/CVE-2025-7771.json index 235ab89a19..80a14ae7ee 100644 --- a/2025/CVE-2025-7771.json +++ b/2025/CVE-2025-7771.json @@ -356,39 +356,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1330317650, - "name": "CVE-2025-7771", - "full_name": "enessakircolak\/CVE-2025-7771", - "owner": { - "login": "enessakircolak", - "id": 69612461, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/69612461?v=4", - "html_url": "https:\/\/github.com\/enessakircolak", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/enessakircolak\/CVE-2025-7771", - "description": "ThrottleStop.sys Arbitrary Physical Memory R\/W", - "fork": false, - "created_at": "2026-08-10T23:15:36Z", - "updated_at": "2026-09-25T12:06:36Z", - "pushed_at": "2026-08-10T23:15:39Z", - "stargazers_count": 22, - "watchers_count": 22, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 22, - "score": 0, - "subscribers_count": 0 - }, { "id": 1384963855, "name": "CVE-2025-7771", diff --git a/2025/CVE-2025-8045.json b/2025/CVE-2025-8045.json deleted file mode 100644 index e754aa7fe9..0000000000 --- a/2025/CVE-2025-8045.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1325305861, - "name": "CVE-2025-8045", - "full_name": "kuzeyardabulut\/CVE-2025-8045", - "owner": { - "login": "kuzeyardabulut", - "id": 54737933, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/54737933?v=4", - "html_url": "https:\/\/github.com\/kuzeyardabulut", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/kuzeyardabulut\/CVE-2025-8045", - "description": "Dirty Pagetable Exploit for CVE-2025-8045", - "fork": false, - "created_at": "2026-08-06T13:52:33Z", - "updated_at": "2026-10-07T05:51:03Z", - "pushed_at": "2026-08-06T14:59:32Z", - "stargazers_count": 7, - "watchers_count": 7, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 7, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2025/CVE-2025-8110.json b/2025/CVE-2025-8110.json index 0bf4b7dbbf..165232bfa5 100644 --- a/2025/CVE-2025-8110.json +++ b/2025/CVE-2025-8110.json @@ -444,7 +444,7 @@ "fork": false, "created_at": "2026-06-23T18:32:13Z", "updated_at": "2026-10-21T17:13:09Z", - "pushed_at": "2026-10-26T08:51:18Z", + "pushed_at": "2026-10-27T08:56:31Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -593,39 +593,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1324479117, - "name": "CVE-2025-8110", - "full_name": "9xh4kv\/CVE-2025-8110", - "owner": { - "login": "9xh4kv", - "id": 63604383, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/63604383?v=4", - "html_url": "https:\/\/github.com\/9xh4kv", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/9xh4kv\/CVE-2025-8110", - "description": "PoC for CVE-2025-8110: Authenticated RCE in Gogs via symlink bypass in PutContents API", - "fork": false, - "created_at": "2026-08-05T21:01:56Z", - "updated_at": "2026-08-05T21:29:43Z", - "pushed_at": "2026-08-05T21:29:38Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1361906905, "name": "CVE-2025-8110", diff --git a/2026/CVE-2026-100833.json b/2026/CVE-2026-100833.json index 004d3140d6..63e1203e61 100644 --- a/2026/CVE-2026-100833.json +++ b/2026/CVE-2026-100833.json @@ -15,7 +15,7 @@ "fork": false, "created_at": "2026-07-06T22:13:03Z", "updated_at": "2026-10-26T22:13:39Z", - "pushed_at": "2026-10-26T22:18:02Z", + "pushed_at": "2026-10-27T08:55:49Z", "stargazers_count": 4, "watchers_count": 4, "has_discussions": false, diff --git a/2026/CVE-2026-106686.json b/2026/CVE-2026-106686.json deleted file mode 100644 index 8dfc4a3880..0000000000 --- a/2026/CVE-2026-106686.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1434092656, - "name": "CVE-2026-106686", - "full_name": "zfzhou0202\/CVE-2026-106686", - "owner": { - "login": "zfzhou0202", - "id": 348181963, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/348181963?v=4", - "html_url": "https:\/\/github.com\/zfzhou0202", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/zfzhou0202\/CVE-2026-106686", - "description": null, - "fork": false, - "created_at": "2026-10-26T08:17:50Z", - "updated_at": "2026-10-26T09:05:15Z", - "pushed_at": "2026-10-26T09:05:11Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2026/CVE-2026-107092.json b/2026/CVE-2026-107092.json index fa32a14f84..ca40ad16bf 100644 --- a/2026/CVE-2026-107092.json +++ b/2026/CVE-2026-107092.json @@ -14,10 +14,10 @@ "description": "CVE-2026-107092 is a critical directory traversal vulnerability in NexoPOS v6.2.4 affecting the api\/update endpoint, where insufficient input sanitization allows unauthenticated attackers to supply path traversal sequences, escape the intended application directory, and potentially execute arbitrary files or remote code on the underlying server.", "fork": false, "created_at": "2026-10-23T10:46:24Z", - "updated_at": "2026-10-26T21:23:12Z", + "updated_at": "2026-10-27T05:05:36Z", "pushed_at": "2026-10-26T19:06:41Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 } diff --git a/2025/CVE-2025-10951.json b/2026/CVE-2026-107327.json similarity index 57% rename from 2025/CVE-2025-10951.json rename to 2026/CVE-2026-107327.json index afb22155f8..228c110e3f 100644 --- a/2025/CVE-2025-10951.json +++ b/2026/CVE-2026-107327.json @@ -1,21 +1,21 @@ [ { - "id": 1331381788, - "name": "CVE-2025-10951", - "full_name": "1amUnvalid\/CVE-2025-10951", + "id": 1388389325, + "name": "POC-CVE-2026-107327", + "full_name": "rmhowe425\/POC-CVE-2026-107327", "owner": { - "login": "1amUnvalid", - "id": 17990831, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/17990831?v=4", - "html_url": "https:\/\/github.com\/1amUnvalid", + "login": "rmhowe425", + "id": 45905457, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/45905457?v=4", + "html_url": "https:\/\/github.com\/rmhowe425", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/1amUnvalid\/CVE-2025-10951", + "html_url": "https:\/\/github.com\/rmhowe425\/POC-CVE-2026-107327", "description": null, "fork": false, - "created_at": "2026-08-11T21:53:00Z", - "updated_at": "2026-08-12T09:33:53Z", - "pushed_at": "2026-08-11T22:03:45Z", + "created_at": "2026-09-26T02:18:36Z", + "updated_at": "2026-10-27T03:04:04Z", + "pushed_at": "2026-10-27T03:03:43Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-30374.json b/2026/CVE-2026-107328.json similarity index 57% rename from 2025/CVE-2025-30374.json rename to 2026/CVE-2026-107328.json index cdb667daf0..0419b4c6c3 100644 --- a/2025/CVE-2025-30374.json +++ b/2026/CVE-2026-107328.json @@ -1,21 +1,21 @@ [ { - "id": 1324409005, - "name": "CVE-2025-30374", - "full_name": "jackfromeast\/CVE-2025-30374", + "id": 1386590673, + "name": "POC-CVE-2026-107328", + "full_name": "rmhowe425\/POC-CVE-2026-107328", "owner": { - "login": "jackfromeast", - "id": 51242003, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51242003?v=4", - "html_url": "https:\/\/github.com\/jackfromeast", + "login": "rmhowe425", + "id": 45905457, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/45905457?v=4", + "html_url": "https:\/\/github.com\/rmhowe425", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/jackfromeast\/CVE-2025-30374", + "html_url": "https:\/\/github.com\/rmhowe425\/POC-CVE-2026-107328", "description": null, "fork": false, - "created_at": "2026-08-05T19:21:12Z", - "updated_at": "2026-08-05T21:37:47Z", - "pushed_at": "2026-08-05T21:37:09Z", + "created_at": "2026-09-25T02:10:37Z", + "updated_at": "2026-10-27T02:19:28Z", + "pushed_at": "2026-10-27T02:18:54Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-11740.json b/2026/CVE-2026-107329.json similarity index 57% rename from 2025/CVE-2025-11740.json rename to 2026/CVE-2026-107329.json index 44dc4cfe28..26297f3803 100644 --- a/2025/CVE-2025-11740.json +++ b/2026/CVE-2026-107329.json @@ -1,21 +1,21 @@ [ { - "id": 1335796164, - "name": "CVE-2025-11740", - "full_name": "Alixploit22\/CVE-2025-11740", + "id": 1386586855, + "name": "POC-CVE-2026-107329", + "full_name": "rmhowe425\/POC-CVE-2026-107329", "owner": { - "login": "Alixploit22", - "id": 317319973, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/317319973?v=4", - "html_url": "https:\/\/github.com\/Alixploit22", + "login": "rmhowe425", + "id": 45905457, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/45905457?v=4", + "html_url": "https:\/\/github.com\/rmhowe425", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/Alixploit22\/CVE-2025-11740", + "html_url": "https:\/\/github.com\/rmhowe425\/POC-CVE-2026-107329", "description": null, "fork": false, - "created_at": "2026-08-16T09:49:50Z", - "updated_at": "2026-08-16T09:50:43Z", - "pushed_at": "2026-08-16T09:50:22Z", + "created_at": "2026-09-25T02:05:33Z", + "updated_at": "2026-10-27T02:03:09Z", + "pushed_at": "2026-10-27T02:02:41Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-10961.json b/2026/CVE-2026-10961.json index e1460752c2..a85b768c8b 100644 --- a/2026/CVE-2026-10961.json +++ b/2026/CVE-2026-10961.json @@ -14,10 +14,10 @@ "description": "PHP CVE-2026-109618\/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12", "fork": false, "created_at": "2026-10-20T19:16:47Z", - "updated_at": "2026-10-27T00:54:23Z", - "pushed_at": "2026-10-26T12:07:00Z", - "stargazers_count": 112, - "watchers_count": 112, + "updated_at": "2026-10-27T11:29:15Z", + "pushed_at": "2026-10-27T11:23:14Z", + "stargazers_count": 114, + "watchers_count": 114, "has_discussions": false, "forks_count": 26, "allow_forking": true, @@ -39,7 +39,7 @@ ], "visibility": "public", "forks": 26, - "watchers": 112, + "watchers": 114, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-109618.json b/2026/CVE-2026-109618.json index 61f14891b8..05685ec408 100644 --- a/2026/CVE-2026-109618.json +++ b/2026/CVE-2026-109618.json @@ -151,7 +151,7 @@ "stargazers_count": 31, "watchers_count": 31, "has_discussions": false, - "forks_count": 11, + "forks_count": 12, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -159,7 +159,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 11, + "forks": 12, "watchers": 31, "score": 0, "subscribers_count": 0 @@ -179,10 +179,10 @@ "description": "Defensive mitigation and testing toolkit for PHP security vulnerabilities (CVE-2026-109618, CVE-2026-109619, CVE-2026-115560), including Apache protections and PHP hardening guidance", "fork": false, "created_at": "2026-10-21T04:01:24Z", - "updated_at": "2026-10-26T16:53:50Z", + "updated_at": "2026-10-27T05:29:45Z", "pushed_at": "2026-10-24T23:12:59Z", - "stargazers_count": 117, - "watchers_count": 117, + "stargazers_count": 118, + "watchers_count": 118, "has_discussions": false, "forks_count": 11, "allow_forking": true, @@ -203,7 +203,7 @@ ], "visibility": "public", "forks": 11, - "watchers": 117, + "watchers": 118, "score": 0, "subscribers_count": 2 }, @@ -255,10 +255,10 @@ "description": "CVE-2026-109618\/109619 — PHP session.upload_progress pre-auth RCE. Exploit research: remote ASLR chain, PoC & patch analysis.", "fork": false, "created_at": "2026-10-21T04:38:46Z", - "updated_at": "2026-10-26T23:54:40Z", + "updated_at": "2026-10-27T08:23:50Z", "pushed_at": "2026-10-26T12:42:03Z", - "stargazers_count": 48, - "watchers_count": 48, + "stargazers_count": 49, + "watchers_count": 49, "has_discussions": false, "forks_count": 24, "allow_forking": true, @@ -283,7 +283,7 @@ ], "visibility": "public", "forks": 24, - "watchers": 48, + "watchers": 49, "score": 0, "subscribers_count": 0 }, @@ -672,12 +672,12 @@ "description": "CVE-2026-109618\/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.", "fork": false, "created_at": "2026-10-21T07:55:16Z", - "updated_at": "2026-10-27T01:41:35Z", + "updated_at": "2026-10-27T11:38:13Z", "pushed_at": "2026-10-22T22:41:36Z", - "stargazers_count": 1833, - "watchers_count": 1833, + "stargazers_count": 1856, + "watchers_count": 1856, "has_discussions": false, - "forks_count": 631, + "forks_count": 633, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -700,8 +700,8 @@ "wordpress-security" ], "visibility": "public", - "forks": 631, - "watchers": 1833, + "forks": 633, + "watchers": 1856, "score": 0, "subscribers_count": 5 }, @@ -973,12 +973,12 @@ "description": "Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 \/ CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.", "fork": false, "created_at": "2026-10-21T08:31:43Z", - "updated_at": "2026-10-27T00:27:21Z", + "updated_at": "2026-10-27T09:42:24Z", "pushed_at": "2026-10-22T07:19:20Z", - "stargazers_count": 1019, - "watchers_count": 1019, + "stargazers_count": 1027, + "watchers_count": 1027, "has_discussions": false, - "forks_count": 257, + "forks_count": 258, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -986,8 +986,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 257, - "watchers": 1019, + "forks": 258, + "watchers": 1027, "score": 0, "subscribers_count": 36 }, @@ -1006,10 +1006,10 @@ "description": "Protects an unpatched PHP against php2shell (CVE-2026-109618 \/ CVE-2026-109619): a small extension that mirrors the official fix component by component and steps aside once the engine carries it. PHP 5.6-8.5; Sury, cPanel EA4, DirectAdmin, Docker, Windows.", "fork": false, "created_at": "2026-10-21T09:00:12Z", - "updated_at": "2026-10-26T21:58:57Z", + "updated_at": "2026-10-27T10:43:31Z", "pushed_at": "2026-10-26T12:14:54Z", - "stargazers_count": 161, - "watchers_count": 161, + "stargazers_count": 165, + "watchers_count": 165, "has_discussions": false, "forks_count": 11, "allow_forking": true, @@ -1028,7 +1028,7 @@ ], "visibility": "public", "forks": 11, - "watchers": 161, + "watchers": 165, "score": 0, "subscribers_count": 3 }, @@ -1462,12 +1462,12 @@ "description": "CVE-2026-109618\/109619 PHP2Shell — Heap UAF PoC (crash + RCE framework)", "fork": false, "created_at": "2026-10-21T10:44:37Z", - "updated_at": "2026-10-26T15:27:09Z", + "updated_at": "2026-10-27T03:19:30Z", "pushed_at": "2026-10-22T08:15:35Z", - "stargazers_count": 57, - "watchers_count": 57, + "stargazers_count": 59, + "watchers_count": 59, "has_discussions": false, - "forks_count": 28, + "forks_count": 29, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1475,8 +1475,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 28, - "watchers": 57, + "forks": 29, + "watchers": 59, "score": 0, "subscribers_count": 0 }, @@ -1731,7 +1731,7 @@ "stargazers_count": 141, "watchers_count": 141, "has_discussions": false, - "forks_count": 82, + "forks_count": 83, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1739,7 +1739,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 82, + "forks": 83, "watchers": 141, "score": 0, "subscribers_count": 0 @@ -1950,12 +1950,12 @@ "description": "🐘 php2shell（CVE-2026-109618 \/ CVE-2026-109619）复现靶场 — session.upload_progress 文件名注入 + LFI → RCE，Docker 一键启动，附中文原理分析与 PoC", "fork": false, "created_at": "2026-10-21T12:36:55Z", - "updated_at": "2026-10-26T10:37:33Z", + "updated_at": "2026-10-27T06:48:32Z", "pushed_at": "2026-10-21T14:38:46Z", - "stargazers_count": 28, - "watchers_count": 28, + "stargazers_count": 29, + "watchers_count": 29, "has_discussions": false, - "forks_count": 7, + "forks_count": 6, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1975,8 +1975,8 @@ "vulnerability" ], "visibility": "public", - "forks": 7, - "watchers": 28, + "forks": 6, + "watchers": 29, "score": 0, "subscribers_count": 0 }, @@ -1995,12 +1995,12 @@ "description": "php2shell: Advanced hybrid exploit framework for CVE-2026-109618, CVE-2026-109619 & CVE-2026-115560. Features Auto-LFI parameter discovery, SAPI profiling, OOM fuzzing calibration, and FPM worker pinning. Stdlib only.", "fork": false, "created_at": "2026-10-21T12:37:59Z", - "updated_at": "2026-10-27T00:04:22Z", + "updated_at": "2026-10-27T09:44:54Z", "pushed_at": "2026-10-23T15:07:53Z", - "stargazers_count": 85, - "watchers_count": 85, + "stargazers_count": 86, + "watchers_count": 86, "has_discussions": false, - "forks_count": 28, + "forks_count": 29, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -2008,8 +2008,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 28, - "watchers": 85, + "forks": 29, + "watchers": 86, "score": 0, "subscribers_count": 0 }, @@ -2982,10 +2982,10 @@ "description": "Minimal source backports of the PHP core RCE fixes (CVE-2026-109618 \/ CVE-2026-109619) for EOL PHP 5.4 and 7.3", "fork": false, "created_at": "2026-10-21T14:20:57Z", - "updated_at": "2026-10-27T01:25:04Z", + "updated_at": "2026-10-27T09:22:13Z", "pushed_at": "2026-10-22T18:37:16Z", - "stargazers_count": 53, - "watchers_count": 53, + "stargazers_count": 55, + "watchers_count": 55, "has_discussions": false, "forks_count": 10, "allow_forking": true, @@ -2996,7 +2996,7 @@ "topics": [], "visibility": "public", "forks": 10, - "watchers": 53, + "watchers": 55, "score": 0, "subscribers_count": 0 }, @@ -3241,12 +3241,12 @@ "description": "php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.", "fork": false, "created_at": "2026-10-21T14:48:05Z", - "updated_at": "2026-10-26T20:49:16Z", + "updated_at": "2026-10-27T11:32:50Z", "pushed_at": "2026-10-26T20:49:12Z", - "stargazers_count": 114, - "watchers_count": 114, + "stargazers_count": 118, + "watchers_count": 118, "has_discussions": false, - "forks_count": 20, + "forks_count": 21, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -3271,8 +3271,8 @@ "security" ], "visibility": "public", - "forks": 20, - "watchers": 114, + "forks": 21, + "watchers": 118, "score": 0, "subscribers_count": 1 }, @@ -3433,10 +3433,10 @@ "description": "PHP 7.4 \/ 8.0 \/ 8.1 Docker images with the CVE-2026-109618 \/ CVE-2026-109619 fix backported", "fork": false, "created_at": "2026-10-21T15:01:45Z", - "updated_at": "2026-10-26T08:30:26Z", + "updated_at": "2026-10-27T09:53:38Z", "pushed_at": "2026-10-21T20:44:05Z", - "stargazers_count": 63, - "watchers_count": 63, + "stargazers_count": 67, + "watchers_count": 67, "has_discussions": false, "forks_count": 18, "allow_forking": true, @@ -3464,7 +3464,7 @@ ], "visibility": "public", "forks": 18, - "watchers": 63, + "watchers": 67, "score": 0, "subscribers_count": 1 }, @@ -3516,7 +3516,7 @@ "description": "CVE-2026-109618\/109619 PoC — PHP session.upload_progress heap use-after-free (CVSS 9.2)", "fork": false, "created_at": "2026-10-21T15:06:33Z", - "updated_at": "2026-10-26T14:47:44Z", + "updated_at": "2026-10-27T02:59:58Z", "pushed_at": "2026-10-24T11:24:48Z", "stargazers_count": 144, "watchers_count": 144, @@ -4020,10 +4020,10 @@ "description": "PHP 8.2.6 + Apache mod_php", "fork": false, "created_at": "2026-10-21T15:31:03Z", - "updated_at": "2026-10-21T23:27:44Z", + "updated_at": "2026-10-27T09:11:16Z", "pushed_at": "2026-10-21T15:32:54Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -4034,7 +4034,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 }, @@ -4053,10 +4053,10 @@ "description": "Non-destructive scanner for CVE-2026-109618 \/ CVE-2026-109619 (PHP core RCE). Subdomain recon via crt.sh + subfinder, robust banner grabbing, version-based detection.", "fork": false, "created_at": "2026-10-21T15:35:43Z", - "updated_at": "2026-10-24T14:58:59Z", + "updated_at": "2026-10-27T05:58:39Z", "pushed_at": "2026-10-21T18:44:33Z", - "stargazers_count": 107, - "watchers_count": 107, + "stargazers_count": 108, + "watchers_count": 108, "has_discussions": false, "forks_count": 31, "allow_forking": true, @@ -4078,7 +4078,7 @@ ], "visibility": "public", "forks": 31, - "watchers": 107, + "watchers": 108, "score": 0, "subscribers_count": 1 }, @@ -4214,10 +4214,10 @@ "description": "Pre-auth RCE lab for CVE-2026-109618\/CVE-2026-109619 - PHP session.upload_progress heap chain", "fork": false, "created_at": "2026-10-21T15:51:22Z", - "updated_at": "2026-10-22T12:08:19Z", + "updated_at": "2026-10-27T08:19:11Z", "pushed_at": "2026-10-22T12:08:15Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -4238,7 +4238,7 @@ ], "visibility": "public", "forks": 1, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -5360,10 +5360,10 @@ "description": "Exploits for CVE-2026-109618 \/ CVE-2026-109619 to achieve RCE on PHP targets", "fork": false, "created_at": "2026-10-21T17:42:17Z", - "updated_at": "2026-10-27T01:17:29Z", + "updated_at": "2026-10-27T05:12:14Z", "pushed_at": "2026-10-21T18:51:46Z", - "stargazers_count": 37, - "watchers_count": 37, + "stargazers_count": 38, + "watchers_count": 38, "has_discussions": false, "forks_count": 10, "allow_forking": true, @@ -5382,7 +5382,7 @@ ], "visibility": "public", "forks": 10, - "watchers": 37, + "watchers": 38, "score": 0, "subscribers_count": 0 }, @@ -6220,8 +6220,8 @@ "description": "Hunting pack for PHP2Shell (CVE-2026-109618\/109619): find vulnerable PHP assets and hunt for exploitation with Microsoft Defender, Sentinel and Azure tooling", "fork": false, "created_at": "2026-10-21T19:14:17Z", - "updated_at": "2026-10-26T11:10:45Z", - "pushed_at": "2026-10-26T11:10:41Z", + "updated_at": "2026-10-27T10:38:25Z", + "pushed_at": "2026-10-27T10:38:22Z", "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, @@ -7179,10 +7179,10 @@ "description": "Unofficial PHP 7.4.33 RPMs for CentOS 7\/EL7 with the PHP2Shell (CVE-2026-109618\/109619) mitigation", "fork": false, "created_at": "2026-10-21T21:18:29Z", - "updated_at": "2026-10-26T07:47:19Z", + "updated_at": "2026-10-27T08:22:13Z", "pushed_at": "2026-10-21T22:18:26Z", - "stargazers_count": 14, - "watchers_count": 14, + "stargazers_count": 15, + "watchers_count": 15, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -7202,7 +7202,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 14, + "watchers": 15, "score": 0, "subscribers_count": 0 }, @@ -7520,7 +7520,7 @@ "stargazers_count": 9, "watchers_count": 9, "has_discussions": false, - "forks_count": 5, + "forks_count": 6, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -7536,7 +7536,7 @@ "session-upload-progress" ], "visibility": "public", - "forks": 5, + "forks": 6, "watchers": 9, "score": 0, "subscribers_count": 0 @@ -7809,12 +7809,12 @@ "description": "PHP2Shell: version-aware research toolkit for CVE-2026-109618 \/ CVE-2026-109619 — pre-auth RCE in PHP session.upload_progress (mod_php). Build profiles, labs, heap calibration and detection guidance for authorized security testing.", "fork": false, "created_at": "2026-10-21T22:53:01Z", - "updated_at": "2026-10-26T23:41:58Z", + "updated_at": "2026-10-27T08:27:09Z", "pushed_at": "2026-10-22T11:43:17Z", - "stargazers_count": 172, - "watchers_count": 172, + "stargazers_count": 174, + "watchers_count": 174, "has_discussions": false, - "forks_count": 57, + "forks_count": 58, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -7837,8 +7837,8 @@ "vulnerability-research" ], "visibility": "public", - "forks": 57, - "watchers": 172, + "forks": 58, + "watchers": 174, "score": 0, "subscribers_count": 0 }, @@ -8211,7 +8211,7 @@ "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -8219,7 +8219,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 0, "score": 0, "subscribers_count": 0 @@ -9582,10 +9582,10 @@ "description": "CVE-2026-109618 \/ CVE-2026-109619 PHP PoC and exploit tool (single-file Go)", "fork": false, "created_at": "2026-10-22T03:48:50Z", - "updated_at": "2026-10-22T05:19:55Z", + "updated_at": "2026-10-27T03:26:10Z", "pushed_at": "2026-10-22T03:53:01Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -9602,7 +9602,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 }, @@ -9728,12 +9728,12 @@ "description": "High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)", "fork": false, "created_at": "2026-10-22T03:53:20Z", - "updated_at": "2026-10-26T20:04:07Z", + "updated_at": "2026-10-27T11:26:11Z", "pushed_at": "2026-10-24T03:40:18Z", - "stargazers_count": 929, - "watchers_count": 929, + "stargazers_count": 941, + "watchers_count": 941, "has_discussions": false, - "forks_count": 136, + "forks_count": 137, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -9741,8 +9741,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 136, - "watchers": 929, + "forks": 137, + "watchers": 941, "score": 0, "subscribers_count": 2 }, @@ -10360,8 +10360,8 @@ "description": "PHP2Shell (CVE-2026-109618\/109619) vendor and Linux distro status - AI-generated, verify before acting", "fork": false, "created_at": "2026-10-22T05:59:32Z", - "updated_at": "2026-10-26T08:32:59Z", - "pushed_at": "2026-10-26T08:32:55Z", + "updated_at": "2026-10-27T11:44:10Z", + "pushed_at": "2026-10-27T11:44:07Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -10398,7 +10398,7 @@ "stargazers_count": 6, "watchers_count": 6, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -10406,7 +10406,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 6, "score": 0, "subscribers_count": 0 @@ -10643,8 +10643,8 @@ "description": "php2shell (CVE-2026-109618\/109619) F5 BIG-IP Advanced WAF check and verification tools", "fork": false, "created_at": "2026-10-22T06:47:46Z", - "updated_at": "2026-10-23T11:49:20Z", - "pushed_at": "2026-10-23T11:49:17Z", + "updated_at": "2026-10-27T04:25:56Z", + "pushed_at": "2026-10-27T04:25:53Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -10709,8 +10709,8 @@ "description": "一个快速、批量检测PHP版本是否存在CVE-2026-109618\/109619", "fork": false, "created_at": "2026-10-22T06:57:01Z", - "updated_at": "2026-10-23T09:49:47Z", - "pushed_at": "2026-10-23T09:51:07Z", + "updated_at": "2026-10-27T08:52:09Z", + "pushed_at": "2026-10-27T08:53:05Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -11696,8 +11696,8 @@ "description": "Am I vulnerable to PHP2Shell (CVE-2026-109618 \/ CVE-2026-109619)? Free passive PHP version check by Securin.", "fork": false, "created_at": "2026-10-22T08:57:09Z", - "updated_at": "2026-10-22T11:24:35Z", - "pushed_at": "2026-10-22T11:24:31Z", + "updated_at": "2026-10-27T09:56:24Z", + "pushed_at": "2026-10-27T09:56:20Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -11762,8 +11762,8 @@ "description": "Sigma detection rules for php2shell OOM multipart probing (CVE-2026-109618 \/ CVE-2026-109619)", "fork": false, "created_at": "2026-10-22T08:59:09Z", - "updated_at": "2026-10-22T08:59:19Z", - "pushed_at": "2026-10-22T08:59:15Z", + "updated_at": "2026-10-27T02:38:14Z", + "pushed_at": "2026-10-27T02:38:10Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -12381,10 +12381,10 @@ "description": "Scanner for PHP2Shell (CVE-2026-109618\/109619): URL blackbox, local device and SSH.", "fork": false, "created_at": "2026-10-22T09:45:34Z", - "updated_at": "2026-10-26T23:15:11Z", + "updated_at": "2026-10-27T09:52:13Z", "pushed_at": "2026-10-23T14:55:12Z", - "stargazers_count": 96, - "watchers_count": 96, + "stargazers_count": 98, + "watchers_count": 98, "has_discussions": false, "forks_count": 14, "allow_forking": true, @@ -12400,7 +12400,7 @@ ], "visibility": "public", "forks": 14, - "watchers": 96, + "watchers": 98, "score": 0, "subscribers_count": 0 }, @@ -13238,10 +13238,10 @@ "description": "ZeroHack: CVE-2026-109618 \/ CVE-2026-109619 Lab & PoC Framework", "fork": false, "created_at": "2026-10-22T11:46:46Z", - "updated_at": "2026-10-23T10:51:23Z", + "updated_at": "2026-10-27T05:19:46Z", "pushed_at": "2026-10-22T14:15:16Z", - "stargazers_count": 6, - "watchers_count": 6, + "stargazers_count": 7, + "watchers_count": 7, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -13252,7 +13252,7 @@ "topics": [], "visibility": "public", "forks": 3, - "watchers": 6, + "watchers": 7, "score": 0, "subscribers_count": 0 }, @@ -13563,10 +13563,10 @@ "description": "Non-destructive exploitability checker for PHP2Shell (CVE-2026-109618\/109619) — probes whether the session.upload_progress use-after-free preconditions are present without dropping shells", "fork": false, "created_at": "2026-10-22T12:34:46Z", - "updated_at": "2026-10-22T14:13:18Z", + "updated_at": "2026-10-27T02:58:45Z", "pushed_at": "2026-10-22T13:56:06Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -13585,7 +13585,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -13604,10 +13604,10 @@ "description": "PHP2Shell exploit framework — CVE-2026-109618\/619 PHP session.upload_progress UAF to RCE", "fork": false, "created_at": "2026-10-22T12:53:40Z", - "updated_at": "2026-10-26T23:04:18Z", + "updated_at": "2026-10-27T07:56:57Z", "pushed_at": "2026-10-26T12:50:30Z", - "stargazers_count": 180, - "watchers_count": 180, + "stargazers_count": 182, + "watchers_count": 182, "has_discussions": false, "forks_count": 52, "allow_forking": true, @@ -13618,7 +13618,7 @@ "topics": [], "visibility": "public", "forks": 52, - "watchers": 180, + "watchers": 182, "score": 0, "subscribers_count": 0 }, @@ -14242,10 +14242,10 @@ "description": "Read-only triage script for WordPress sites after PHP2Shell (CVE-2026-109618, CVE-2026-109619). Checks for signs of compromise and writes a report per site.", "fork": false, "created_at": "2026-10-22T14:26:42Z", - "updated_at": "2026-10-26T15:11:41Z", + "updated_at": "2026-10-27T03:50:31Z", "pushed_at": "2026-10-26T15:11:37Z", - "stargazers_count": 4, - "watchers_count": 4, + "stargazers_count": 5, + "watchers_count": 5, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -14256,7 +14256,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 4, + "watchers": 5, "score": 0, "subscribers_count": 0 }, @@ -15916,10 +15916,10 @@ "description": "Unofficial fix for CVE-2026-109618 \/ CVE-2026-109619 (php2shell) for the end-of-life PHP 5.4 \/ 5.3 packages of RHEL, CentOS and Oracle Linux 7 \/ 6", "fork": false, "created_at": "2026-10-22T18:14:29Z", - "updated_at": "2026-10-26T23:51:10Z", + "updated_at": "2026-10-27T09:15:29Z", "pushed_at": "2026-10-23T15:03:00Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -15951,7 +15951,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, @@ -16087,8 +16087,8 @@ "description": "Порт официального чекера PHP2Shell (CVE-2026-109618\/109619) на Python 3: проверка версии PHP сайта или локального бинарника на уязвимость", "fork": false, "created_at": "2026-10-22T18:26:39Z", - "updated_at": "2026-10-23T06:17:28Z", - "pushed_at": "2026-10-22T18:32:51Z", + "updated_at": "2026-10-27T05:53:14Z", + "pushed_at": "2026-10-27T03:57:35Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -17052,60 +17052,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 1430321668, - "name": "php2shell-poc", - "full_name": "eagleofanadolu\/php2shell-poc", - "owner": { - "login": "eagleofanadolu", - "id": 71570762, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71570762?v=4", - "html_url": "https:\/\/github.com\/eagleofanadolu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/eagleofanadolu\/php2shell-poc", - "description": "PHP2Shell — CVE-2026-109618\/109619 exploit toolkit: 6 RCE chains, memory disclosure, scanner, detection rules, WAF mitigations, Docker labs. Authorized testing only.", - "fork": false, - "created_at": "2026-10-22T22:08:38Z", - "updated_at": "2026-10-24T08:18:53Z", - "pushed_at": "2026-10-22T22:08:48Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "apache", - "bugbounty", - "ctf", - "cve", - "cybersecurity", - "drupal", - "exploit", - "infosec", - "joomla", - "memory-disclosure", - "mod-php", - "penetration-testing", - "php", - "proof-of-concept", - "rce", - "remote-code-execution", - "security", - "security-research", - "vulnerability", - "wordpress" - ], - "visibility": "public", - "forks": 1, - "watchers": 3, - "score": 0, - "subscribers_count": 0 - }, { "id": 1430326047, "name": "php2shell-poc", @@ -18242,8 +18188,8 @@ "description": "CentOS 7 Remi PHP 7.4\/8.3 rebuild for CVE-2026-109618\/109619", "fork": false, "created_at": "2026-10-23T03:48:20Z", - "updated_at": "2026-10-23T07:50:29Z", - "pushed_at": "2026-10-23T07:49:58Z", + "updated_at": "2026-10-27T02:18:21Z", + "pushed_at": "2026-10-27T02:18:18Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -18732,7 +18678,7 @@ "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -18740,7 +18686,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 1, "score": 0, "subscribers_count": 0 @@ -19335,8 +19281,8 @@ "description": "PHP2Shell Sentinel is an intelligent, zero-dependency, low-resource cross-platform defense daemon to detect, log, prevent, and actively mitigate php2shell exploits (CVE-2026-109618 & CVE-2026-109619, plus CVE-2024-4577) on both Linux and Windows servers", "fork": false, "created_at": "2026-10-23T10:56:58Z", - "updated_at": "2026-10-23T16:03:40Z", - "pushed_at": "2026-10-23T16:03:36Z", + "updated_at": "2026-10-27T10:46:45Z", + "pushed_at": "2026-10-27T10:46:41Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -20201,6 +20147,39 @@ "score": 0, "subscribers_count": 0 }, + { + "id": 1431137242, + "name": "php2shell-poc", + "full_name": "onexxu\/php2shell-poc", + "owner": { + "login": "onexxu", + "id": 129130581, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/129130581?v=4", + "html_url": "https:\/\/github.com\/onexxu", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/onexxu\/php2shell-poc", + "description": "PHP2Shell — CVE-2026-109618\/109619 exploit toolkit: 6 RCE chains, memory disclosure, scanner, detection rules, WAF mitigations, Docker labs. Authorized testing only.", + "fork": false, + "created_at": "2026-10-23T14:15:30Z", + "updated_at": "2026-10-23T14:15:30Z", + "pushed_at": "2026-10-22T22:08:48Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, { "id": 1431146769, "name": "php2shell-guard", @@ -20701,8 +20680,8 @@ "description": "Check a PHP install for the PHP2Shell fixes (CVE-2026-109618, CVE-2026-109619), including Ubuntu backports, and show interim mitigations.", "fork": false, "created_at": "2026-10-23T15:52:40Z", - "updated_at": "2026-10-23T15:52:59Z", - "pushed_at": "2026-10-23T15:52:47Z", + "updated_at": "2026-10-27T05:58:58Z", + "pushed_at": "2026-10-27T05:58:55Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -21391,8 +21370,8 @@ "description": "Backport-aware PHP2Shell (CVE-2026-109618\/109619) checker for installed PHP packages; knows distro and vendor fixed builds, incl. patched PHP 5.6-8.4 for CentOS 7", "fork": false, "created_at": "2026-10-23T20:47:08Z", - "updated_at": "2026-10-25T13:53:12Z", - "pushed_at": "2026-10-25T13:53:09Z", + "updated_at": "2026-10-27T10:40:01Z", + "pushed_at": "2026-10-27T10:39:57Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -21433,8 +21412,8 @@ "description": "Live tracker: how fast is the internet patching PHP against PHP2Shell (CVE-2026-109618\/-109619)? Hourly, anonymized.", "fork": false, "created_at": "2026-10-23T22:00:13Z", - "updated_at": "2026-10-26T13:01:02Z", - "pushed_at": "2026-10-26T13:00:58Z", + "updated_at": "2026-10-27T11:09:38Z", + "pushed_at": "2026-10-27T11:09:34Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -21737,6 +21716,39 @@ "score": 0, "subscribers_count": 0 }, + { + "id": 1431834273, + "name": "CVE-2026-PHP-Fix", + "full_name": "ncbtn\/CVE-2026-PHP-Fix", + "owner": { + "login": "ncbtn", + "id": 180109607, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/180109607?v=4", + "html_url": "https:\/\/github.com\/ncbtn", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/ncbtn\/CVE-2026-PHP-Fix", + "description": "PHP2Shell CVE-2026-109618 and CVE-2026-109619 Fix", + "fork": false, + "created_at": "2026-10-24T05:06:54Z", + "updated_at": "2026-10-27T09:35:54Z", + "pushed_at": "2026-10-27T09:41:30Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "collaborators_only", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, { "id": 1431877958, "name": "php2shell-kit", @@ -22202,8 +22214,8 @@ "description": "Detection and response package for php2shell (CVE-2026-109618 \/ CVE-2026-109619): Suricata, Zeek, YARA, Sigma, ModSecurity rules, hunting queries, SOC triage, patch matrix. No exploit code.", "fork": false, "created_at": "2026-10-24T13:28:54Z", - "updated_at": "2026-10-26T23:46:15Z", - "pushed_at": "2026-10-26T23:46:11Z", + "updated_at": "2026-10-27T04:56:20Z", + "pushed_at": "2026-10-27T04:56:16Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -22729,8 +22741,8 @@ "description": "MOSTAFA JR7 - Custom security research framework targeting PHP 8.4.26 Apache Prefork RCE and ASLR bypass.", "fork": false, "created_at": "2026-10-24T23:43:55Z", - "updated_at": "2026-10-25T05:05:15Z", - "pushed_at": "2026-10-25T05:05:12Z", + "updated_at": "2026-10-27T10:08:57Z", + "pushed_at": "2026-10-27T10:08:53Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -22828,10 +22840,10 @@ "description": "Exposure scanner, patch verifier and threat hunter for CVE-2026-109618\/9, with a cyberpunk TUI.", "fork": false, "created_at": "2026-10-25T01:16:24Z", - "updated_at": "2026-10-25T01:41:04Z", + "updated_at": "2026-10-27T02:33:03Z", "pushed_at": "2026-10-25T01:41:02Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -22851,7 +22863,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -23035,8 +23047,8 @@ "description": "Curated IoCs, detection engineering rules, and automated threat intel feeds for PHP2Shell (CVE-2026-109618 & CVE-2026-109619).", "fork": false, "created_at": "2026-10-25T07:40:38Z", - "updated_at": "2026-10-26T11:51:24Z", - "pushed_at": "2026-10-26T11:51:20Z", + "updated_at": "2026-10-27T05:11:37Z", + "pushed_at": "2026-10-27T05:11:34Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, @@ -23324,7 +23336,7 @@ "description": "Патчи безопасности и сканер аудита для FastPanel и Debian PHP против уязвимостей CVE-2026-109618 и CVE-2026-109619 (PHP 5.2–8.1). Пошаговые руководства по сборке.", "fork": false, "created_at": "2026-10-25T10:45:23Z", - "updated_at": "2026-10-26T19:14:22Z", + "updated_at": "2026-10-27T08:19:52Z", "pushed_at": "2026-10-26T19:14:18Z", "stargazers_count": 0, "watchers_count": 0, @@ -23347,6 +23359,7 @@ "php2shell-cve", "php2shell-cve-2026", "php2shell-fix", + "php2shell-patch", "php2shell-vulnerability", "php5", "php7", @@ -23416,10 +23429,10 @@ "description": null, "fork": false, "created_at": "2026-10-25T11:48:32Z", - "updated_at": "2026-10-25T12:18:44Z", + "updated_at": "2026-10-27T03:47:43Z", "pushed_at": "2026-10-25T12:18:41Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -23430,7 +23443,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -23709,8 +23722,8 @@ "description": "Bigfix PHP Vulnerability Scanner Content (CVE-2026-109618, CVE-2026-109619) for Windows, Linux and Mac.", "fork": false, "created_at": "2026-10-25T19:00:03Z", - "updated_at": "2026-10-26T21:30:36Z", - "pushed_at": "2026-10-26T21:30:32Z", + "updated_at": "2026-10-27T05:23:23Z", + "pushed_at": "2026-10-27T05:23:19Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -24014,8 +24027,8 @@ "description": "Controlled lab pinned to PHP 8.3.35 for reproducing\/patch-verifying PHP2Shell (CVE-2026-109618, CVE-2026-109619)", "fork": false, "created_at": "2026-10-26T02:16:24Z", - "updated_at": "2026-10-26T02:26:42Z", - "pushed_at": "2026-10-26T02:26:39Z", + "updated_at": "2026-10-27T08:15:19Z", + "pushed_at": "2026-10-27T08:15:15Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -24755,10 +24768,10 @@ "description": "Analysis and negative control for CVE-2026-109618\/109619: which PHP builds still arm, why 8.4.27 does not, and why the chain does not transfer to PHP-FPM. Exploit withheld until 2026-11-25.", "fork": false, "created_at": "2026-10-26T12:07:28Z", - "updated_at": "2026-10-27T00:38:36Z", - "pushed_at": "2026-10-26T15:26:23Z", - "stargazers_count": 5, - "watchers_count": 5, + "updated_at": "2026-10-27T10:34:31Z", + "pushed_at": "2026-10-27T10:19:37Z", + "stargazers_count": 7, + "watchers_count": 7, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -24775,7 +24788,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 5, + "watchers": 7, "score": 0, "subscribers_count": 0 }, @@ -24827,12 +24840,12 @@ "description": "Check whether a website is affected by PHP2Shell (CVE-2026-109618 \/ CVE-2026-109619)", "fork": false, "created_at": "2026-10-26T14:42:47Z", - "updated_at": "2026-10-26T15:53:57Z", - "pushed_at": "2026-10-26T15:53:52Z", - "stargazers_count": 0, - "watchers_count": 0, + "updated_at": "2026-10-27T11:48:37Z", + "pushed_at": "2026-10-27T11:48:42Z", + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -24840,8 +24853,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, - "watchers": 0, + "forks": 1, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -24902,8 +24915,8 @@ "description": "PoC \/ exploit archive for CVE-2026-109618", "fork": false, "created_at": "2026-10-26T16:48:27Z", - "updated_at": "2026-10-26T16:49:07Z", - "pushed_at": "2026-10-26T16:49:04Z", + "updated_at": "2026-10-27T08:28:40Z", + "pushed_at": "2026-10-27T08:28:38Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -25019,6 +25032,54 @@ "score": 0, "subscribers_count": 0 }, + { + "id": 1434962898, + "name": "php2shell-coverage-check", + "full_name": "lanz\/php2shell-coverage-check", + "owner": { + "login": "lanz", + "id": 56061103, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/56061103?v=4", + "html_url": "https:\/\/github.com\/lanz", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/lanz\/php2shell-coverage-check", + "description": "Checks that Tenable scanning is set up to detect PHP2Shell (CVE-2026-109618, CVE-2026-109619) on every PHP host: plugin feed, credentials and scan settings. Lists the hosts to rescan and flags end-of-life PHP. Works with Tenable Vulnerability Management, Security Center and .nessus files. Claude Code skill or standalone script.", + "fork": false, + "created_at": "2026-10-26T21:46:46Z", + "updated_at": "2026-10-27T02:54:42Z", + "pushed_at": "2026-10-27T02:57:37Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "agent-skills", + "claude-code", + "cve-2026-109618", + "cve-2026-109619", + "indicent-response", + "nessus", + "php", + "php2shell", + "pytenable", + "scan-coverage", + "security-center", + "tenable", + "vulnerability-management", + "vulnerability-scanning" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, { "id": 1434969422, "name": "php2shell-scanner", @@ -25060,5 +25121,440 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1435135468, + "name": "PHP2Shell-Research-Lab-v0.1", + "full_name": "naoki51931\/PHP2Shell-Research-Lab-v0.1", + "owner": { + "login": "naoki51931", + "id": 69281143, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/69281143?v=4", + "html_url": "https:\/\/github.com\/naoki51931", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/naoki51931\/PHP2Shell-Research-Lab-v0.1", + "description": "PHP2Shell（CVE-2026-109618 \/ CVE-2026-109619）の修正状況を確認し、PHPのメモリ安全性を研究するためのセキュリティ検証ツール。", + "fork": false, + "created_at": "2026-10-27T01:59:58Z", + "updated_at": "2026-10-27T02:03:42Z", + "pushed_at": "2026-10-27T02:00:39Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1435211375, + "name": "phpscan", + "full_name": "Mojo7823\/phpscan", + "owner": { + "login": "Mojo7823", + "id": 107752934, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/107752934?v=4", + "html_url": "https:\/\/github.com\/Mojo7823", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Mojo7823\/phpscan", + "description": "Detect-only PHP2Shell (CVE-2026-109618\/109619) exposure check for websites and local network devices", + "fork": false, + "created_at": "2026-10-27T03:43:55Z", + "updated_at": "2026-10-27T03:46:46Z", + "pushed_at": "2026-10-27T03:46:42Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1435238369, + "name": "php2shell", + "full_name": "qw3rtyou\/php2shell", + "owner": { + "login": "qw3rtyou", + "id": 103625068, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103625068?v=4", + "html_url": "https:\/\/github.com\/qw3rtyou", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/qw3rtyou\/php2shell", + "description": "php2shell (CVE-2026-109618\/109619) research: lab + analysis", + "fork": false, + "created_at": "2026-10-27T04:19:56Z", + "updated_at": "2026-10-27T05:42:15Z", + "pushed_at": "2026-10-27T05:42:11Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1435383356, + "name": "crypto_quinxin", + "full_name": "zinspin888\/crypto_quinxin", + "owner": { + "login": "zinspin888", + "id": 348681989, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/348681989?v=4", + "html_url": "https:\/\/github.com\/zinspin888", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/zinspin888\/crypto_quinxin", + "description": "PHP2Shell (CVE-2026-109618\/109619) exposure sweep and takeover assessment across 56 vulnerable TZ\/KE hosts", + "fork": false, + "created_at": "2026-10-27T07:15:27Z", + "updated_at": "2026-10-27T07:56:55Z", + "pushed_at": "2026-10-27T07:56:37Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1435407183, + "name": "php2shell-exposure-scanner", + "full_name": "HARSHA2396\/php2shell-exposure-scanner", + "owner": { + "login": "HARSHA2396", + "id": 112252686, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/112252686?v=4", + "html_url": "https:\/\/github.com\/HARSHA2396", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/HARSHA2396\/php2shell-exposure-scanner", + "description": "Detection-only PHP version\/exposure scanner for CVE-2026-109618 and CVE-2026-109619 (PHP2Shell). Fingerprints PHP version via standard HTTP headers, no exploit payload sent.", + "fork": false, + "created_at": "2026-10-27T07:40:59Z", + "updated_at": "2026-10-27T07:48:30Z", + "pushed_at": "2026-10-27T07:48:27Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1435426453, + "name": "php2shell-scan", + "full_name": "erdemkayar\/php2shell-scan", + "owner": { + "login": "erdemkayar", + "id": 9327416, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/9327416?v=4", + "html_url": "https:\/\/github.com\/erdemkayar", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/erdemkayar\/php2shell-scan", + "description": "Exposure triage, host verification and remediation tracking for PHP2Shell (CVE-2026-109618 \/ CVE-2026-109619)", + "fork": false, + "created_at": "2026-10-27T08:01:12Z", + "updated_at": "2026-10-27T08:01:22Z", + "pushed_at": "2026-10-27T08:01:36Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve-2026-109618", + "cve-2026-109619", + "php", + "php2shell", + "security-tools", + "vulnerability-scanner" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1435440725, + "name": "php2shell-poc", + "full_name": "eagleofanadolu\/php2shell-poc", + "owner": { + "login": "eagleofanadolu", + "id": 71570762, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71570762?v=4", + "html_url": "https:\/\/github.com\/eagleofanadolu", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/eagleofanadolu\/php2shell-poc", + "description": "PHP2Shell — CVE-2026-109618\/109619 pre-auth RCE exploit. Production chain + 8M lab chain + local UAF + handler mismatch.", + "fork": false, + "created_at": "2026-10-27T08:16:29Z", + "updated_at": "2026-10-27T10:12:27Z", + "pushed_at": "2026-10-27T10:12:23Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "apache", + "bugbounty", + "cve", + "cve-2026", + "cybersecurity", + "ethical-hacking", + "exploit", + "infosec", + "mod-php", + "offensive-security", + "penetration-testing", + "php", + "php2shell", + "proof-of-concept", + "rce", + "redteam", + "remote-code-execution", + "security", + "session-upload-progress", + "vulnerability" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1435482475, + "name": "php2shell-version-frontier", + "full_name": "muhammadsohaimmuqtada\/php2shell-version-frontier", + "owner": { + "login": "muhammadsohaimmuqtada", + "id": 244661248, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/244661248?v=4", + "html_url": "https:\/\/github.com\/muhammadsohaimmuqtada", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/muhammadsohaimmuqtada\/php2shell-version-frontier", + "description": "Measured php2shell (CVE-2026-109618\/109619) RCE frontier on amd64: 8.3.35 closed via gdb crash forensics (HTDATA=chunk+0x6a0d8); per-build profiles, tools, method", + "fork": false, + "created_at": "2026-10-27T08:57:49Z", + "updated_at": "2026-10-27T08:57:59Z", + "pushed_at": "2026-10-27T08:57:55Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1435509910, + "name": "php2shell-checks", + "full_name": "FoxKyong\/php2shell-checks", + "owner": { + "login": "FoxKyong", + "id": 2877720, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/2877720?v=4", + "html_url": "https:\/\/github.com\/FoxKyong", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/FoxKyong\/php2shell-checks", + "description": "Read-only exposure checks for PHP2Shell (CVE-2026-109618 \/ -109619): accuracy-hardened scanner + two on-box auditors.", + "fork": false, + "created_at": "2026-10-27T09:24:21Z", + "updated_at": "2026-10-27T09:34:19Z", + "pushed_at": "2026-10-27T09:31:31Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve-2026-109618", + "cve-2026-109619", + "php", + "php2shell", + "security", + "vulnerability-scanner" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1435554189, + "name": "php2shell", + "full_name": "r0yfire\/php2shell", + "owner": { + "login": "r0yfire", + "id": 3650586, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/3650586?v=4", + "html_url": "https:\/\/github.com\/r0yfire", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/r0yfire\/php2shell", + "description": "CVE-2026-109618 · CVE-2026-109619", + "fork": false, + "created_at": "2026-10-27T10:06:44Z", + "updated_at": "2026-10-27T10:09:47Z", + "pushed_at": "2026-10-27T10:07:34Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "php2shell", + "php2shell-cve-2026", + "php2shell-scanner" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1435625816, + "name": "php2shell-scanner", + "full_name": "tal7aouy\/php2shell-scanner", + "owner": { + "login": "tal7aouy", + "id": 241496409, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/241496409?v=4", + "html_url": "https:\/\/github.com\/tal7aouy", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/tal7aouy\/php2shell-scanner", + "description": "Scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)", + "fork": false, + "created_at": "2026-10-27T11:17:52Z", + "updated_at": "2026-10-27T11:35:10Z", + "pushed_at": "2026-10-27T11:35:06Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1435628557, + "name": "php2shell", + "full_name": "bawanu\/php2shell", + "owner": { + "login": "bawanu", + "id": 69847008, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/69847008?v=4", + "html_url": "https:\/\/github.com\/bawanu", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/bawanu\/php2shell", + "description": "Pre-auth RCE exploit toolkit — CVE-2026-109618 \/ CVE-2026-109619 (PHP session.upload_progress UAF)", + "fork": false, + "created_at": "2026-10-27T11:20:32Z", + "updated_at": "2026-10-27T11:20:44Z", + "pushed_at": "2026-10-27T11:20:40Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-109619.json b/2026/CVE-2026-109619.json index 93bb6765ac..5b3edacd56 100644 --- a/2026/CVE-2026-109619.json +++ b/2026/CVE-2026-109619.json @@ -35,7 +35,7 @@ "forks": 0, "watchers": 1, "score": 0, - "subscribers_count": 0 + "subscribers_count": 1 }, { "id": 1428471565, @@ -664,10 +664,10 @@ "description": "Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619\/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design", "fork": false, "created_at": "2026-10-23T13:49:52Z", - "updated_at": "2026-10-27T01:36:38Z", - "pushed_at": "2026-10-26T17:21:54Z", - "stargazers_count": 90, - "watchers_count": 90, + "updated_at": "2026-10-27T10:43:52Z", + "pushed_at": "2026-10-27T07:24:41Z", + "stargazers_count": 95, + "watchers_count": 95, "has_discussions": false, "forks_count": 53, "allow_forking": true, @@ -694,7 +694,7 @@ ], "visibility": "public", "forks": 53, - "watchers": 90, + "watchers": 95, "score": 0, "subscribers_count": 0 }, @@ -833,8 +833,8 @@ "description": "CVE-2026-109619 (PHP2Shell): Pre-Auth Remote Code Execution (RCE) via PHP-FPM Stale Global State Deserialization UAF. Reproducible Docker lab, interactive shell, reverse shell & WAF\/IDS rules.", "fork": false, "created_at": "2026-10-26T11:42:12Z", - "updated_at": "2026-10-26T20:36:54Z", - "pushed_at": "2026-10-26T20:36:50Z", + "updated_at": "2026-10-27T09:21:37Z", + "pushed_at": "2026-10-27T09:21:33Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, @@ -871,5 +871,38 @@ "watchers": 2, "score": 0, "subscribers_count": 0 + }, + { + "id": 1435445205, + "name": "CVE-2026-109619", + "full_name": "piecar21\/CVE-2026-109619", + "owner": { + "login": "piecar21", + "id": 102585548, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102585548?v=4", + "html_url": "https:\/\/github.com\/piecar21", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/piecar21\/CVE-2026-109619", + "description": "PoC \/ exploit archive for CVE-2026-109619", + "fork": false, + "created_at": "2026-10-27T08:21:02Z", + "updated_at": "2026-10-27T08:21:30Z", + "pushed_at": "2026-10-27T08:21:28Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-110200.json b/2026/CVE-2026-110200.json new file mode 100644 index 0000000000..7b32594835 --- /dev/null +++ b/2026/CVE-2026-110200.json @@ -0,0 +1,35 @@ +[ + { + "id": 1388177526, + "name": "POC-CVE-2026-110200", + "full_name": "rmhowe425\/POC-CVE-2026-110200", + "owner": { + "login": "rmhowe425", + "id": 45905457, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/45905457?v=4", + "html_url": "https:\/\/github.com\/rmhowe425", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/rmhowe425\/POC-CVE-2026-110200", + "description": null, + "fork": false, + "created_at": "2026-09-25T20:52:40Z", + "updated_at": "2026-10-27T02:33:30Z", + "pushed_at": "2026-10-27T02:33:05Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-110922.json b/2026/CVE-2026-110922.json index a2a471bd9a..55e405de26 100644 --- a/2026/CVE-2026-110922.json +++ b/2026/CVE-2026-110922.json @@ -14,8 +14,8 @@ "description": "Chrome Vulnerability Laboratory . CVE-2026-110922 ", "fork": false, "created_at": "2026-10-24T09:26:07Z", - "updated_at": "2026-10-27T01:39:47Z", - "pushed_at": "2026-10-27T01:39:42Z", + "updated_at": "2026-10-27T08:49:28Z", + "pushed_at": "2026-10-27T08:49:24Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2026/CVE-2026-111497.json b/2026/CVE-2026-111497.json index 1005e55658..2beaceb695 100644 --- a/2026/CVE-2026-111497.json +++ b/2026/CVE-2026-111497.json @@ -14,10 +14,10 @@ "description": "Nodejs漏洞 CVE-2026-111497 POC", "fork": false, "created_at": "2026-10-21T15:47:21Z", - "updated_at": "2026-10-26T09:51:01Z", + "updated_at": "2026-10-27T05:40:48Z", "pushed_at": "2026-10-24T04:24:25Z", - "stargazers_count": 16, - "watchers_count": 16, + "stargazers_count": 17, + "watchers_count": 17, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 3, - "watchers": 16, + "watchers": 17, "score": 0, "subscribers_count": 0 }, @@ -47,10 +47,10 @@ "description": "Reproducible local Brotli decoder proof for CVE-2026-111497 with a self-checking tuned RCE harness", "fork": false, "created_at": "2026-10-22T04:08:28Z", - "updated_at": "2026-10-26T23:59:29Z", + "updated_at": "2026-10-27T08:07:54Z", "pushed_at": "2026-10-25T01:09:02Z", - "stargazers_count": 55, - "watchers_count": 55, + "stargazers_count": 60, + "watchers_count": 60, "has_discussions": false, "forks_count": 16, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 16, - "watchers": 55, + "watchers": 60, "score": 0, "subscribers_count": 0 }, @@ -310,10 +310,10 @@ "description": "CVE-2026-111497 — Node.js Brotli Decoder OOB Write: Deep Analysis & Structural Unreachability Proof. MLEN_MAX = BLOCK_SIZE_CAP = 2^24 makes RCE structurally unreachable.", "fork": false, "created_at": "2026-10-22T19:40:47Z", - "updated_at": "2026-10-23T17:59:55Z", + "updated_at": "2026-10-27T04:38:43Z", "pushed_at": "2026-10-23T00:41:57Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 4, "allow_forking": true, @@ -324,7 +324,7 @@ "topics": [], "visibility": "public", "forks": 4, - "watchers": 3, + "watchers": 2, "score": 0, "subscribers_count": 0 }, @@ -625,8 +625,8 @@ "description": "Check a Node.js runtime for the CVE-2026-111497 Brotli decoder fix and find where a project decodes outside Brotli data. No dependencies.", "fork": false, "created_at": "2026-10-23T15:52:31Z", - "updated_at": "2026-10-23T15:52:58Z", - "pushed_at": "2026-10-23T15:52:38Z", + "updated_at": "2026-10-27T05:58:55Z", + "pushed_at": "2026-10-27T05:58:51Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -664,10 +664,10 @@ "description": "Claude Code and Codex skill for finding potentially vulnerable Brotli copies and guiding updates for CVE-2026-111497.", "fork": false, "created_at": "2026-10-23T16:32:12Z", - "updated_at": "2026-10-26T20:45:18Z", + "updated_at": "2026-10-27T07:57:12Z", "pushed_at": "2026-10-26T21:33:30Z", - "stargazers_count": 55, - "watchers_count": 55, + "stargazers_count": 56, + "watchers_count": 56, "has_discussions": false, "forks_count": 4, "allow_forking": true, @@ -678,7 +678,7 @@ "topics": [], "visibility": "public", "forks": 4, - "watchers": 55, + "watchers": 56, "score": 0, "subscribers_count": 0 }, @@ -923,10 +923,10 @@ "description": "PoC, Docker lab, and technical report for CVE-2026-111497 (Node2Shell) — Node.js Brotli decoder invalid block-switch OOB write; validated errno differential and weaponized remote DoS, RCE analysis included.", "fork": false, "created_at": "2026-10-24T07:11:16Z", - "updated_at": "2026-10-26T08:57:53Z", + "updated_at": "2026-10-27T01:55:24Z", "pushed_at": "2026-10-24T07:12:02Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -949,7 +949,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, @@ -1246,12 +1246,12 @@ "description": "CVE-2026-111497 Node2Shell — Node.js Brotli OOB Write RCE PoC (CVSS 9.2)", "fork": false, "created_at": "2026-10-24T23:03:18Z", - "updated_at": "2026-10-27T00:55:09Z", + "updated_at": "2026-10-27T09:31:55Z", "pushed_at": "2026-10-25T20:32:46Z", - "stargazers_count": 31, - "watchers_count": 31, + "stargazers_count": 38, + "watchers_count": 38, "has_discussions": false, - "forks_count": 6, + "forks_count": 9, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1259,8 +1259,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 6, - "watchers": 31, + "forks": 9, + "watchers": 38, "score": 0, "subscribers_count": 0 }, @@ -1284,7 +1284,7 @@ "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1304,7 +1304,7 @@ "vulnerability-management" ], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 0, "score": 0, "subscribers_count": 0 @@ -1324,10 +1324,10 @@ "description": "PoC for CVE-2026-111497 (HTTP2Shell)", "fork": false, "created_at": "2026-10-25T04:22:02Z", - "updated_at": "2026-10-26T23:34:33Z", + "updated_at": "2026-10-27T08:15:52Z", "pushed_at": "2026-10-25T04:29:01Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -1338,7 +1338,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 }, @@ -1357,10 +1357,10 @@ "description": "High fidelity detection mechanism for node2shell (CVE-2026-111497)", "fork": false, "created_at": "2026-10-25T04:23:54Z", - "updated_at": "2026-10-26T21:35:52Z", + "updated_at": "2026-10-27T07:56:27Z", "pushed_at": "2026-10-25T04:24:27Z", - "stargazers_count": 69, - "watchers_count": 69, + "stargazers_count": 71, + "watchers_count": 71, "has_discussions": false, "forks_count": 8, "allow_forking": true, @@ -1371,7 +1371,7 @@ "topics": [], "visibility": "public", "forks": 8, - "watchers": 69, + "watchers": 71, "score": 0, "subscribers_count": 1 }, @@ -1395,7 +1395,7 @@ "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1411,7 +1411,7 @@ "pentest" ], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 1, "score": 0, "subscribers_count": 0 @@ -1464,8 +1464,8 @@ "description": "Agent skill + script to scan projects for CVE-2026-111497 (Brotli), rate criticality and suggest fixes", "fork": false, "created_at": "2026-10-25T13:15:15Z", - "updated_at": "2026-10-25T13:19:36Z", - "pushed_at": "2026-10-25T13:19:32Z", + "updated_at": "2026-10-27T02:39:33Z", + "pushed_at": "2026-10-27T02:39:28Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -1638,10 +1638,10 @@ "description": "PoC for CVE-2026-111497, a buffer overflow in Google Brotli 1.0.3–1.2.0 that may cause memory corruption, data disclosure, DoS, or RCE when processing crafted compressed data.", "fork": false, "created_at": "2026-10-25T18:05:02Z", - "updated_at": "2026-10-25T20:00:18Z", + "updated_at": "2026-10-27T08:15:55Z", "pushed_at": "2026-10-25T19:56:16Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 5, + "watchers_count": 5, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -1666,7 +1666,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 3, + "watchers": 5, "score": 0, "subscribers_count": 0 }, @@ -1729,8 +1729,8 @@ "description": "BigFix YARA-X discovery Fixlets and shared Analysis for Node.js Brotli CVE-2026-111497 on Windows, Linux and macOS.", "fork": false, "created_at": "2026-10-25T20:09:18Z", - "updated_at": "2026-10-26T22:04:19Z", - "pushed_at": "2026-10-26T22:04:13Z", + "updated_at": "2026-10-27T07:32:42Z", + "pushed_at": "2026-10-27T07:32:38Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -1762,10 +1762,10 @@ "description": "Offline Brotli \/ HTTP2Shell (CVE-2026-111497) exposure and inventory checker across verified ecosystems. Python 3.10+, no dependencies or exploit payloads.", "fork": false, "created_at": "2026-10-26T01:29:29Z", - "updated_at": "2026-10-26T05:02:56Z", + "updated_at": "2026-10-27T06:20:17Z", "pushed_at": "2026-10-26T05:18:09Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -1786,7 +1786,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -2027,5 +2027,120 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1435345357, + "name": "CVE-2026-111497", + "full_name": "paulmann\/CVE-2026-111497", + "owner": { + "login": "paulmann", + "id": 2838788, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/2838788?v=4", + "html_url": "https:\/\/github.com\/paulmann", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/paulmann\/CVE-2026-111497", + "description": "Security audit and remediation agent for CVE-2026-111497, an out-of-bounds write in the Google Brotli decoder: detect, patch and verify on Debian and Ubuntu", + "fork": false, + "created_at": "2026-10-27T06:35:05Z", + "updated_at": "2026-10-27T11:02:48Z", + "pushed_at": "2026-10-27T11:02:54Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "apt", + "bash", + "brotli", + "cve", + "cve-2026-111497", + "debian", + "defensive-security", + "incident-response", + "node2shell", + "patch-management", + "security-tools", + "shell-script", + "threat-model", + "ubuntu", + "vulnerability-remediation" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1435581171, + "name": "brotli2scan", + "full_name": "akaihigurashi\/brotli2scan", + "owner": { + "login": "akaihigurashi", + "id": 47500397, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47500397?v=4", + "html_url": "https:\/\/github.com\/akaihigurashi", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/akaihigurashi\/brotli2scan", + "description": "Is your website affected by HTTP2Shell (CVE-2026-111497)?", + "fork": false, + "created_at": "2026-10-27T10:33:58Z", + "updated_at": "2026-10-27T10:36:47Z", + "pushed_at": "2026-10-27T10:38:15Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1435627899, + "name": "node2shell-scanner", + "full_name": "tal7aouy\/node2shell-scanner", + "owner": { + "login": "tal7aouy", + "id": 241496409, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/241496409?v=4", + "html_url": "https:\/\/github.com\/tal7aouy", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/tal7aouy\/node2shell-scanner", + "description": "Scanner for php2shell (CVE-2026-111497)", + "fork": false, + "created_at": "2026-10-27T11:19:53Z", + "updated_at": "2026-10-27T11:42:15Z", + "pushed_at": "2026-10-27T11:41:11Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-112611.json b/2026/CVE-2026-112611.json new file mode 100644 index 0000000000..e26e7f642a --- /dev/null +++ b/2026/CVE-2026-112611.json @@ -0,0 +1,35 @@ +[ + { + "id": 1435533356, + "name": "CVE-2026-112611-cg-shading", + "full_name": "Ping-2o\/CVE-2026-112611-cg-shading", + "owner": { + "login": "Ping-2o", + "id": 131540958, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/131540958?v=4", + "html_url": "https:\/\/github.com\/Ping-2o", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Ping-2o\/CVE-2026-112611-cg-shading", + "description": "CVE-2026-112611\/112610: CoreGraphics PDF out-of-bounds writes (fixed in iOS 27.2) — fix-diff analysis, on-device proof, methodology, and PoC generator scripts. No prebuilt PoCs, no crash reports.", + "fork": false, + "created_at": "2026-10-27T09:46:42Z", + "updated_at": "2026-10-27T11:32:27Z", + "pushed_at": "2026-10-27T09:46:48Z", + "stargazers_count": 2, + "watchers_count": 2, + "has_discussions": false, + "forks_count": 1, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 1, + "watchers": 2, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-114509.json b/2026/CVE-2026-114509.json index ad9d7e7fb7..d6938644cd 100644 --- a/2026/CVE-2026-114509.json +++ b/2026/CVE-2026-114509.json @@ -187,5 +187,38 @@ "watchers": 1, "score": 0, "subscribers_count": 0 + }, + { + "id": 1435484365, + "name": "CVE-2026-114509", + "full_name": "Nxploited\/CVE-2026-114509", + "owner": { + "login": "Nxploited", + "id": 188819918, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4", + "html_url": "https:\/\/github.com\/Nxploited", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Nxploited\/CVE-2026-114509", + "description": " Laravel TokenGuard authentication bypass through non-string API credentials", + "fork": false, + "created_at": "2026-10-27T08:59:40Z", + "updated_at": "2026-10-27T09:02:16Z", + "pushed_at": "2026-10-27T09:02:13Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-115893.json b/2026/CVE-2026-115893.json new file mode 100644 index 0000000000..ea92a746e2 --- /dev/null +++ b/2026/CVE-2026-115893.json @@ -0,0 +1,35 @@ +[ + { + "id": 1435499461, + "name": "CVE-2026-115893-wasmtime-sandbox-escape", + "full_name": "shreyas-malhotra\/CVE-2026-115893-wasmtime-sandbox-escape", + "owner": { + "login": "shreyas-malhotra", + "id": 126407864, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/126407864?v=4", + "html_url": "https:\/\/github.com\/shreyas-malhotra", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/shreyas-malhotra\/CVE-2026-115893-wasmtime-sandbox-escape", + "description": "CVE-2026-115893: full Wasmtime aarch64 Cranelift br_table sandbox-escape exploit, PoV, calibration notes, and verification evidence.", + "fork": false, + "created_at": "2026-10-27T09:14:41Z", + "updated_at": "2026-10-27T09:55:58Z", + "pushed_at": "2026-10-27T09:51:13Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-115905.json b/2026/CVE-2026-115905.json new file mode 100644 index 0000000000..4a2f3a8686 --- /dev/null +++ b/2026/CVE-2026-115905.json @@ -0,0 +1,44 @@ +[ + { + "id": 1435401102, + "name": "zip-cloaking-scanner", + "full_name": "foxcornlab\/zip-cloaking-scanner", + "owner": { + "login": "foxcornlab", + "id": 43523802, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43523802?v=4", + "html_url": "https:\/\/github.com\/foxcornlab", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/foxcornlab\/zip-cloaking-scanner", + "description": "Detection-only triage scanner for Rust zip cloaking CVE-2026-115905: Cargo version check plus Central vs Local header comparison. No payloads, no extraction.", + "fork": false, + "created_at": "2026-10-27T07:34:30Z", + "updated_at": "2026-10-27T07:34:49Z", + "pushed_at": "2026-10-27T07:34:44Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve-2026-115905", + "detection", + "rust", + "security-scanner", + "triage", + "vulnerability-scanner", + "zip", + "zip-cloaking" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-1668.json b/2026/CVE-2026-1668.json index 2804f5e964..63f984a0ab 100644 --- a/2026/CVE-2026-1668.json +++ b/2026/CVE-2026-1668.json @@ -14,10 +14,10 @@ "description": "Proof-of-concept exploit for CVE-2026-1668.", "fork": false, "created_at": "2026-04-06T05:36:54Z", - "updated_at": "2026-10-10T04:24:22Z", + "updated_at": "2026-10-27T06:00:49Z", "pushed_at": "2026-10-10T04:24:19Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 3, + "watchers": 4, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-18107.json b/2026/CVE-2026-18107.json index e4eb243838..200e7fe83a 100644 --- a/2026/CVE-2026-18107.json +++ b/2026/CVE-2026-18107.json @@ -14,8 +14,8 @@ "description": "Universal container escape exploit targeting the CRIU container checkpoint\/restore system - CVE-2026-18107", "fork": false, "created_at": "2026-09-27T21:57:13Z", - "updated_at": "2026-10-26T21:52:59Z", - "pushed_at": "2026-10-26T21:52:55Z", + "updated_at": "2026-10-27T09:21:34Z", + "pushed_at": "2026-10-27T09:21:31Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2026/CVE-2026-21589.json b/2026/CVE-2026-21589.json index 337cae8b84..4fd63bf012 100644 --- a/2026/CVE-2026-21589.json +++ b/2026/CVE-2026-21589.json @@ -19,7 +19,7 @@ "stargazers_count": 15, "watchers_count": 15, "has_discussions": false, - "forks_count": 4, + "forks_count": 5, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 4, + "forks": 5, "watchers": 15, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-26336.json b/2026/CVE-2026-26336.json index 0ab871336b..22c5b8ff5b 100644 --- a/2026/CVE-2026-26336.json +++ b/2026/CVE-2026-26336.json @@ -14,12 +14,12 @@ "description": null, "fork": false, "created_at": "2026-05-06T20:36:44Z", - "updated_at": "2026-05-06T20:40:41Z", + "updated_at": "2026-10-27T10:38:29Z", "pushed_at": "2026-05-06T20:40:36Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, - "forks_count": 1, + "forks_count": 2, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,8 +27,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 1, - "watchers": 0, + "forks": 2, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-31431.json b/2026/CVE-2026-31431.json index 80d50de3ec..ee27b2187e 100644 --- a/2026/CVE-2026-31431.json +++ b/2026/CVE-2026-31431.json @@ -794,10 +794,10 @@ "description": "Multi-language implementation and compatibility with older versions of Python.", "fork": false, "created_at": "2026-04-30T04:50:57Z", - "updated_at": "2026-05-18T12:38:34Z", + "updated_at": "2026-10-27T11:08:43Z", "pushed_at": "2026-04-30T04:51:00Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -808,7 +808,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-33825.json b/2026/CVE-2026-33825.json index 65ec41a054..0758ef41f8 100644 --- a/2026/CVE-2026-33825.json +++ b/2026/CVE-2026-33825.json @@ -243,5 +243,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1435454684, + "name": "CVE-2026-33825", + "full_name": "piecar21\/CVE-2026-33825", + "owner": { + "login": "piecar21", + "id": 102585548, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102585548?v=4", + "html_url": "https:\/\/github.com\/piecar21", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/piecar21\/CVE-2026-33825", + "description": "PoC \/ exploit archive for CVE-2026-33825", + "fork": false, + "created_at": "2026-10-27T08:30:38Z", + "updated_at": "2026-10-27T08:31:05Z", + "pushed_at": "2026-10-27T08:31:02Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-34197.json b/2026/CVE-2026-34197.json index 3c39cb4780..7a5a6c2e0c 100644 --- a/2026/CVE-2026-34197.json +++ b/2026/CVE-2026-34197.json @@ -339,39 +339,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1242560997, - "name": "CVE-2026-34197", - "full_name": "hnytgl\/CVE-2026-34197", - "owner": { - "login": "hnytgl", - "id": 26022152, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26022152?v=4", - "html_url": "https:\/\/github.com\/hnytgl", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/hnytgl\/CVE-2026-34197", - "description": "这是一个面向防守和内网排查的 Apache ActiveMQ Classic 暴露面检测工具，用于辅助评估 CVE-2026-34197 相关风险。", - "fork": false, - "created_at": "2026-05-18T14:36:46Z", - "updated_at": "2026-06-06T06:43:20Z", - "pushed_at": "2026-06-06T06:40:41Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, { "id": 1261247367, "name": "CVE-2026-34197", diff --git a/2026/CVE-2026-40369.json b/2026/CVE-2026-40369.json index 8caa186a71..000a34ed40 100644 --- a/2026/CVE-2026-40369.json +++ b/2026/CVE-2026-40369.json @@ -14,10 +14,10 @@ "description": "Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browsers render process sandbox", "fork": false, "created_at": "2026-05-13T20:56:15Z", - "updated_at": "2026-10-27T01:39:56Z", + "updated_at": "2026-10-27T09:49:09Z", "pushed_at": "2026-05-18T21:29:59Z", - "stargazers_count": 272, - "watchers_count": 272, + "stargazers_count": 278, + "watchers_count": 278, "has_discussions": false, "forks_count": 63, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 63, - "watchers": 272, + "watchers": 278, "score": 0, "subscribers_count": 6 }, diff --git a/2026/CVE-2026-41089.json b/2026/CVE-2026-41089.json index 32160810b7..68c6d4fc96 100644 --- a/2026/CVE-2026-41089.json +++ b/2026/CVE-2026-41089.json @@ -108,72 +108,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1257737798, - "name": "CVE-2026-41089-Detector", - "full_name": "hnytgl\/CVE-2026-41089-Detector", - "owner": { - "login": "hnytgl", - "id": 26022152, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26022152?v=4", - "html_url": "https:\/\/github.com\/hnytgl", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/hnytgl\/CVE-2026-41089-Detector", - "description": "这是一个用于防御巡检的 CVE-2026-41089 检测脚本。该漏洞是 Microsoft 在 2026 年 5 月安全更新中披露的 Windows Netlogon 远程代码执行漏洞。", - "fork": false, - "created_at": "2026-06-03T00:59:29Z", - "updated_at": "2026-06-06T07:20:55Z", - "pushed_at": "2026-06-06T06:19:46Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1257789821, - "name": "CVE-2026-41089", - "full_name": "hnytgl\/CVE-2026-41089", - "owner": { - "login": "hnytgl", - "id": 26022152, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26022152?v=4", - "html_url": "https:\/\/github.com\/hnytgl", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/hnytgl\/CVE-2026-41089", - "description": "CVE-2026-41089 是 Windows Netlogon 服务中一个关键的远程代码执行漏洞，单包即可崩溃 lsass.exe，导致域控制器在约 30-60 秒内重启。此期间该 DC 的所有域认证将失败。", - "fork": false, - "created_at": "2026-06-03T02:29:06Z", - "updated_at": "2026-10-13T19:10:46Z", - "pushed_at": "2026-09-26T13:54:28Z", - "stargazers_count": 14, - "watchers_count": 14, - "has_discussions": false, - "forks_count": 12, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 12, - "watchers": 14, - "score": 0, - "subscribers_count": 1 - }, { "id": 1258500124, "name": "CVE-2026-41089-LongLogon", diff --git a/2026/CVE-2026-42588.json b/2026/CVE-2026-42588.json index 291e4cc16c..9677290838 100644 --- a/2026/CVE-2026-42588.json +++ b/2026/CVE-2026-42588.json @@ -32,39 +32,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1261003065, - "name": "CVE-2026-42588", - "full_name": "hnytgl\/CVE-2026-42588", - "owner": { - "login": "hnytgl", - "id": 26022152, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26022152?v=4", - "html_url": "https:\/\/github.com\/hnytgl", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/hnytgl\/CVE-2026-42588", - "description": "CVE-2026-42588 - Apache ActiveMQ Jolokia 远程代码执行漏洞利用 (RCE Exploit)", - "fork": false, - "created_at": "2026-06-06T05:47:28Z", - "updated_at": "2026-06-09T23:22:03Z", - "pushed_at": "2026-06-09T23:22:00Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 0 - }, { "id": 1273278879, "name": "POC", diff --git a/2026/CVE-2026-42945.json b/2026/CVE-2026-42945.json index 02a4adb9f4..8e5e47e2d5 100644 --- a/2026/CVE-2026-42945.json +++ b/2026/CVE-2026-42945.json @@ -742,39 +742,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1242533759, - "name": "CVE-2026-42945", - "full_name": "hnytgl\/CVE-2026-42945", - "owner": { - "login": "hnytgl", - "id": 26022152, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26022152?v=4", - "html_url": "https:\/\/github.com\/hnytgl", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/hnytgl\/CVE-2026-42945", - "description": "这是一个面向防守和内网排查的 CVE-2026-42945 静态检测工具，用于检查 NGINX ngx_http_rewrite_module 相关配置是否存在高风险 rewrite 组合。", - "fork": false, - "created_at": "2026-05-18T14:09:21Z", - "updated_at": "2026-06-06T06:43:44Z", - "pushed_at": "2026-06-06T06:40:41Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, { "id": 1243036207, "name": "CVE-2026-42945", diff --git a/2026/CVE-2026-42980.json b/2026/CVE-2026-42980.json index d6ad6f2859..22bdf32cbd 100644 --- a/2026/CVE-2026-42980.json +++ b/2026/CVE-2026-42980.json @@ -14,10 +14,10 @@ "description": "CVE-2026-42980 PUBLIC EXPLOIT + RESEARCH", "fork": false, "created_at": "2026-07-07T03:52:26Z", - "updated_at": "2026-10-26T14:42:31Z", + "updated_at": "2026-10-27T10:37:42Z", "pushed_at": "2026-07-07T03:53:22Z", - "stargazers_count": 144, - "watchers_count": 144, + "stargazers_count": 145, + "watchers_count": 145, "has_discussions": false, "forks_count": 40, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 40, - "watchers": 144, + "watchers": 145, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-43284.json b/2026/CVE-2026-43284.json index 0e6cb0b950..499c34aff2 100644 --- a/2026/CVE-2026-43284.json +++ b/2026/CVE-2026-43284.json @@ -1399,7 +1399,7 @@ "forks": 24, "watchers": 53, "score": 0, - "subscribers_count": 1 + "subscribers_count": 3 }, { "id": 1408667985, diff --git a/2026/CVE-2026-43499.json b/2026/CVE-2026-43499.json index 2c71b84bcc..5cade35e64 100644 --- a/2026/CVE-2026-43499.json +++ b/2026/CVE-2026-43499.json @@ -361,12 +361,12 @@ "description": "GhostLock (CVE-2026-43499) kernel exploit for Android devices with locked bootloader", "fork": false, "created_at": "2026-07-12T16:05:24Z", - "updated_at": "2026-10-26T19:33:04Z", + "updated_at": "2026-10-27T07:57:46Z", "pushed_at": "2026-09-17T05:30:59Z", - "stargazers_count": 432, - "watchers_count": 432, + "stargazers_count": 434, + "watchers_count": 434, "has_discussions": false, - "forks_count": 93, + "forks_count": 94, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -381,8 +381,8 @@ "root" ], "visibility": "public", - "forks": 93, - "watchers": 432, + "forks": 94, + "watchers": 434, "score": 0, "subscribers_count": 14 }, @@ -533,10 +533,10 @@ "description": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.", "fork": false, "created_at": "2026-07-14T14:21:27Z", - "updated_at": "2026-10-25T23:58:14Z", + "updated_at": "2026-10-27T02:33:14Z", "pushed_at": "2026-07-30T11:28:07Z", - "stargazers_count": 113, - "watchers_count": 113, + "stargazers_count": 114, + "watchers_count": 114, "has_discussions": false, "forks_count": 35, "allow_forking": true, @@ -547,7 +547,7 @@ "topics": [], "visibility": "public", "forks": 35, - "watchers": 113, + "watchers": 114, "score": 0, "subscribers_count": 0 }, @@ -1028,10 +1028,10 @@ "description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499", "fork": false, "created_at": "2026-07-17T14:24:08Z", - "updated_at": "2026-10-26T19:21:08Z", + "updated_at": "2026-10-27T07:56:57Z", "pushed_at": "2026-09-03T03:21:42Z", - "stargazers_count": 1490, - "watchers_count": 1490, + "stargazers_count": 1492, + "watchers_count": 1492, "has_discussions": false, "forks_count": 296, "allow_forking": true, @@ -1042,7 +1042,7 @@ "topics": [], "visibility": "public", "forks": 296, - "watchers": 1490, + "watchers": 1492, "score": 0, "subscribers_count": 46 }, @@ -1709,12 +1709,12 @@ "description": "GhostLock One-Tap Execution App (CVE-2026-43499)", "fork": false, "created_at": "2026-07-29T05:04:25Z", - "updated_at": "2026-10-27T01:31:15Z", - "pushed_at": "2026-10-27T01:19:45Z", - "stargazers_count": 2313, - "watchers_count": 2313, + "updated_at": "2026-10-27T10:41:14Z", + "pushed_at": "2026-10-27T01:59:49Z", + "stargazers_count": 2325, + "watchers_count": 2325, "has_discussions": true, - "forks_count": 564, + "forks_count": 568, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1722,8 +1722,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 564, - "watchers": 2313, + "forks": 568, + "watchers": 2325, "score": 0, "subscribers_count": 37 }, @@ -2513,10 +2513,10 @@ "description": "GhostLock-X200 v1.0 - temporary root toolchain for vivo X200 (PD2415 \/ b57 kernel) based on CVE-2026-43499. For authorized security research only.", "fork": false, "created_at": "2026-08-10T23:26:52Z", - "updated_at": "2026-10-24T00:04:50Z", + "updated_at": "2026-10-27T07:22:12Z", "pushed_at": "2026-08-31T06:05:39Z", - "stargazers_count": 13, - "watchers_count": 13, + "stargazers_count": 14, + "watchers_count": 14, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -2527,7 +2527,7 @@ "topics": [], "visibility": "public", "forks": 3, - "watchers": 13, + "watchers": 14, "score": 0, "subscribers_count": 0 }, @@ -2645,10 +2645,10 @@ "description": "vivo\/iQOO 临时 root 工具箱 (免解锁临时root, CVE-2026-43499) - 源码与脚本", "fork": false, "created_at": "2026-08-12T10:05:38Z", - "updated_at": "2026-10-26T12:54:50Z", + "updated_at": "2026-10-27T03:52:15Z", "pushed_at": "2026-08-12T10:05:44Z", - "stargazers_count": 56, - "watchers_count": 56, + "stargazers_count": 57, + "watchers_count": 57, "has_discussions": false, "forks_count": 11, "allow_forking": true, @@ -2659,7 +2659,7 @@ "topics": [], "visibility": "public", "forks": 11, - "watchers": 56, + "watchers": 57, "score": 0, "subscribers_count": 0 }, @@ -3430,10 +3430,10 @@ "description": "One-click root for vivo\/iQOO devices on locked bootloader | CVE-2026-43499 + KernelSU", "fork": false, "created_at": "2026-08-25T07:52:11Z", - "updated_at": "2026-10-26T06:07:00Z", + "updated_at": "2026-10-27T07:05:12Z", "pushed_at": "2026-10-23T06:52:34Z", - "stargazers_count": 79, - "watchers_count": 79, + "stargazers_count": 80, + "watchers_count": 80, "has_discussions": false, "forks_count": 11, "allow_forking": true, @@ -3444,7 +3444,7 @@ "topics": [], "visibility": "public", "forks": 11, - "watchers": 79, + "watchers": 80, "score": 0, "subscribers_count": 0 }, @@ -4597,8 +4597,8 @@ "description": "RootMyGalaxy for Galaxy S23 Ultra SM-S9180 (FZG1) - temp root via CVE-2026-43499, KernelSU late-load, no partition flashing, no Knox", "fork": false, "created_at": "2026-09-21T08:44:47Z", - "updated_at": "2026-10-23T06:49:18Z", - "pushed_at": "2026-10-23T06:49:19Z", + "updated_at": "2026-10-27T03:53:08Z", + "pushed_at": "2026-10-27T03:53:04Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, @@ -5386,6 +5386,39 @@ "score": 0, "subscribers_count": 0 }, + { + "id": 1413976746, + "name": "rokid-rv101-research", + "full_name": "zero2005x\/rokid-rv101-research", + "owner": { + "login": "zero2005x", + "id": 20224420, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/20224420?v=4", + "html_url": "https:\/\/github.com\/zero2005x", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/zero2005x\/rokid-rv101-research", + "description": "Rokid RV101 眼鏡 root 安全研究（CVE-2026-43499）+ 雙 Android 遙控拍攝系統 + ZeroLightRokid Desktop 工具", + "fork": false, + "created_at": "2026-10-11T05:45:29Z", + "updated_at": "2026-10-27T10:31:14Z", + "pushed_at": "2026-10-11T12:46:52Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, { "id": 1418847784, "name": "SamsungRootKit", @@ -5467,8 +5500,8 @@ "description": "Honor 70 (FNE-AN00) privilege escalation PoC: GhostLock (CVE-2026-43499) + custom KernelSU module loading", "fork": false, "created_at": "2026-10-16T11:28:27Z", - "updated_at": "2026-10-26T12:06:08Z", - "pushed_at": "2026-10-26T12:06:04Z", + "updated_at": "2026-10-27T09:04:24Z", + "pushed_at": "2026-10-27T09:04:20Z", "stargazers_count": 8, "watchers_count": 8, "has_discussions": false, @@ -5731,10 +5764,10 @@ "description": "GhostLock CVE-2026-43499 root exploit for Samsung SM-G990B G990BXXSLIZH2", "fork": false, "created_at": "2026-10-23T15:37:08Z", - "updated_at": "2026-10-23T16:59:18Z", + "updated_at": "2026-10-27T10:22:22Z", "pushed_at": "2026-10-23T16:59:14Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -5752,7 +5785,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-4372.json b/2026/CVE-2026-4372.json index e3a70e85df..6b4c882f56 100644 --- a/2026/CVE-2026-4372.json +++ b/2026/CVE-2026-4372.json @@ -14,8 +14,8 @@ "description": "CVE-2026-4372: Threat Model, Root-Cause Analysis, Replication & Detection", "fork": false, "created_at": "2026-10-14T02:18:39Z", - "updated_at": "2026-10-26T23:08:34Z", - "pushed_at": "2026-10-26T23:08:29Z", + "updated_at": "2026-10-27T07:37:17Z", + "pushed_at": "2026-10-27T07:37:13Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-49881.json b/2026/CVE-2026-49881.json index 0046f5f55c..c7e3c0b5bc 100644 --- a/2026/CVE-2026-49881.json +++ b/2026/CVE-2026-49881.json @@ -14,12 +14,12 @@ "description": "Android complete exploit chain that enables privilege escalation from a local untrusted app to root\/kernel, combination of CVE-2026-49881 and CVE-2026-43284", "fork": false, "created_at": "2026-07-23T07:01:34Z", - "updated_at": "2026-10-27T00:40:56Z", + "updated_at": "2026-10-27T10:40:44Z", "pushed_at": "2026-09-09T00:47:49Z", - "stargazers_count": 480, - "watchers_count": 480, + "stargazers_count": 481, + "watchers_count": 481, "has_discussions": false, - "forks_count": 108, + "forks_count": 109, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,8 +27,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 108, - "watchers": 480, + "forks": 109, + "watchers": 481, "score": 0, "subscribers_count": 7 }, @@ -97,5 +97,38 @@ "watchers": 1, "score": 0, "subscribers_count": 0 + }, + { + "id": 1435644109, + "name": "CVE-2026-49881", + "full_name": "cyb3r-w0lf\/CVE-2026-49881", + "owner": { + "login": "cyb3r-w0lf", + "id": 63139650, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/63139650?v=4", + "html_url": "https:\/\/github.com\/cyb3r-w0lf", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/cyb3r-w0lf\/CVE-2026-49881", + "description": null, + "fork": false, + "created_at": "2026-10-27T11:35:52Z", + "updated_at": "2026-10-27T11:44:30Z", + "pushed_at": "2026-10-27T11:44:26Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-52656.json b/2026/CVE-2026-52656.json index fb35d90ce6..d9cd97e87a 100644 --- a/2026/CVE-2026-52656.json +++ b/2026/CVE-2026-52656.json @@ -14,10 +14,10 @@ "description": "Reverse engineering research and custom firmware for the Allwinner V3-based SJCAM SJ4000 Air, including firmware parsers, an AVIOCTRL client, security research, and the CVE-2026-52656 proof of concept.", "fork": false, "created_at": "2025-12-01T23:00:42Z", - "updated_at": "2026-10-19T14:22:44Z", + "updated_at": "2026-10-27T07:30:49Z", "pushed_at": "2026-07-19T00:30:37Z", - "stargazers_count": 10, - "watchers_count": 10, + "stargazers_count": 11, + "watchers_count": 11, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -43,7 +43,7 @@ ], "visibility": "public", "forks": 1, - "watchers": 10, + "watchers": 11, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-53576.json b/2026/CVE-2026-53576.json index aaff3342ed..2e01fdc7c2 100644 --- a/2026/CVE-2026-53576.json +++ b/2026/CVE-2026-53576.json @@ -64,5 +64,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1435328677, + "name": "Vulnerability-lab-cve-2026-53576", + "full_name": "emitsco768\/Vulnerability-lab-cve-2026-53576", + "owner": { + "login": "emitsco768", + "id": 114807413, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/114807413?v=4", + "html_url": "https:\/\/github.com\/emitsco768", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/emitsco768\/Vulnerability-lab-cve-2026-53576", + "description": null, + "fork": false, + "created_at": "2026-10-27T06:16:20Z", + "updated_at": "2026-10-27T06:20:40Z", + "pushed_at": "2026-10-27T06:20:37Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-54121.json b/2026/CVE-2026-54121.json index 280de50a27..03a473fa0e 100644 --- a/2026/CVE-2026-54121.json +++ b/2026/CVE-2026-54121.json @@ -14,10 +14,10 @@ "description": "Certighost POC", "fork": false, "created_at": "2026-07-23T18:54:34Z", - "updated_at": "2026-10-24T08:28:35Z", + "updated_at": "2026-10-27T11:16:55Z", "pushed_at": "2026-07-28T15:44:50Z", - "stargazers_count": 336, - "watchers_count": 336, + "stargazers_count": 337, + "watchers_count": 337, "has_discussions": false, "forks_count": 86, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 86, - "watchers": 336, + "watchers": 337, "score": 0, "subscribers_count": 0 }, @@ -424,10 +424,10 @@ "description": "🛡 Official AI Security Tool module for CVE-2026-54121 (Certighost): AD CS certificate abuse deep-dive, defensive audit workflows, and safe in-app console execution for authorized Active Directory security testing.", "fork": false, "created_at": "2026-09-11T23:08:16Z", - "updated_at": "2026-10-26T19:14:58Z", + "updated_at": "2026-10-27T10:12:01Z", "pushed_at": "2026-10-19T11:05:57Z", - "stargazers_count": 261, - "watchers_count": 261, + "stargazers_count": 266, + "watchers_count": 266, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -444,7 +444,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 261, + "watchers": 266, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-54806.json b/2026/CVE-2026-54806.json index a064ded0c6..d6111a70dc 100644 --- a/2026/CVE-2026-54806.json +++ b/2026/CVE-2026-54806.json @@ -14,10 +14,10 @@ "description": "Unauthenticated PHP Object Injection to RCE in WP Activity Log <= 5.6.3.1 (CVE-2026-54806)", "fork": false, "created_at": "2026-06-22T16:11:25Z", - "updated_at": "2026-10-26T21:14:32Z", + "updated_at": "2026-10-27T08:57:28Z", "pushed_at": "2026-06-22T16:12:29Z", - "stargazers_count": 15, - "watchers_count": 15, + "stargazers_count": 14, + "watchers_count": 14, "has_discussions": false, "forks_count": 5, "allow_forking": true, @@ -42,7 +42,7 @@ ], "visibility": "public", "forks": 5, - "watchers": 15, + "watchers": 14, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-55944.json b/2026/CVE-2026-55944.json new file mode 100644 index 0000000000..466b8976c6 --- /dev/null +++ b/2026/CVE-2026-55944.json @@ -0,0 +1,35 @@ +[ + { + "id": 1435160010, + "name": "Cve-2026-55944", + "full_name": "kipkorirchirchir800-hash\/Cve-2026-55944", + "owner": { + "login": "kipkorirchirchir800-hash", + "id": 329448394, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/329448394?v=4", + "html_url": "https:\/\/github.com\/kipkorirchirchir800-hash", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/kipkorirchirchir800-hash\/Cve-2026-55944", + "description": "This PoC simulates an XML parsing vulnerability where configuration data is parsed and passed directly to ProcessStartInfo. It extracts executable paths and arguments from XML markup to spawn a system process, demonstrating how unsafe input handling can lead to arbitrary command execution.", + "fork": false, + "created_at": "2026-10-27T02:34:06Z", + "updated_at": "2026-10-27T02:39:54Z", + "pushed_at": "2026-10-27T02:39:50Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-62735.json b/2026/CVE-2026-62735.json index 842a723966..190bb529f8 100644 --- a/2026/CVE-2026-62735.json +++ b/2026/CVE-2026-62735.json @@ -14,10 +14,10 @@ "description": "CVE 1-day in http.sys", "fork": false, "created_at": "2026-08-25T04:55:10Z", - "updated_at": "2026-10-14T03:23:56Z", + "updated_at": "2026-10-27T07:54:56Z", "pushed_at": "2026-09-04T11:06:16Z", - "stargazers_count": 39, - "watchers_count": 39, + "stargazers_count": 40, + "watchers_count": 40, "has_discussions": false, "forks_count": 16, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 16, - "watchers": 39, + "watchers": 40, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-63030.json b/2026/CVE-2026-63030.json index 3ef2cc73fb..73e23aa205 100644 --- a/2026/CVE-2026-63030.json +++ b/2026/CVE-2026-63030.json @@ -14,10 +14,10 @@ "description": "wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain", "fork": false, "created_at": "2026-07-17T20:18:33Z", - "updated_at": "2026-10-26T18:03:47Z", + "updated_at": "2026-10-27T05:36:09Z", "pushed_at": "2026-08-11T13:41:27Z", - "stargazers_count": 807, - "watchers_count": 807, + "stargazers_count": 806, + "watchers_count": 806, "has_discussions": false, "forks_count": 186, "allow_forking": true, @@ -32,7 +32,7 @@ ], "visibility": "public", "forks": 186, - "watchers": 807, + "watchers": 806, "score": 0, "subscribers_count": 3 }, @@ -2673,47 +2673,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1421102338, - "name": "wp2shell-PoC", - "full_name": "gichirimaku\/wp2shell-PoC", - "owner": { - "login": "gichirimaku", - "id": 318126926, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/318126926?v=4", - "html_url": "https:\/\/github.com\/gichirimaku", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/gichirimaku\/wp2shell-PoC", - "description": "CVE-2026-63030 + CVE-2026-60137 exploit RCE chain.", - "fork": false, - "created_at": "2026-10-15T17:29:04Z", - "updated_at": "2026-10-22T18:52:03Z", - "pushed_at": "2026-10-20T17:21:47Z", - "stargazers_count": 564, - "watchers_count": 564, - "has_discussions": false, - "forks_count": 53, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve", - "cve-2026-60137", - "cve-2026-63030", - "cve-scanning", - "wp2shell", - "wp2shell-exploit", - "wp2shell-poc" - ], - "visibility": "public", - "forks": 53, - "watchers": 564, - "score": 0, - "subscribers_count": 6 - }, { "id": 1426159034, "name": "CVE-2026-63030", diff --git a/2026/CVE-2026-64560.json b/2026/CVE-2026-64560.json index 98fd9629a7..f651c658e5 100644 --- a/2026/CVE-2026-64560.json +++ b/2026/CVE-2026-64560.json @@ -151,7 +151,7 @@ "stargazers_count": 14, "watchers_count": 14, "has_discussions": false, - "forks_count": 14, + "forks_count": 15, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -159,7 +159,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 14, + "forks": 15, "watchers": 14, "score": 0, "subscribers_count": 1 @@ -212,10 +212,10 @@ "description": "针对 OnePlus Ace6 设备的 cve-2026-64560 复现", "fork": false, "created_at": "2026-09-25T13:42:42Z", - "updated_at": "2026-10-24T08:50:37Z", + "updated_at": "2026-10-27T10:47:12Z", "pushed_at": "2026-09-25T16:30:55Z", - "stargazers_count": 6, - "watchers_count": 6, + "stargazers_count": 7, + "watchers_count": 7, "has_discussions": false, "forks_count": 4, "allow_forking": true, @@ -226,7 +226,7 @@ "topics": [], "visibility": "public", "forks": 4, - "watchers": 6, + "watchers": 7, "score": 0, "subscribers_count": 0 }, @@ -362,7 +362,7 @@ "stargazers_count": 32, "watchers_count": 32, "has_discussions": false, - "forks_count": 11, + "forks_count": 12, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -379,7 +379,7 @@ "root" ], "visibility": "public", - "forks": 11, + "forks": 12, "watchers": 32, "score": 0, "subscribers_count": 0 @@ -564,8 +564,8 @@ "description": "OnePlus 16 (PYB110) jailbreak: CVE-2026-64560 + KernelSU \/ KernelSU Next \/ BakaSU \/ SukiSU Ultra LKM", "fork": false, "created_at": "2026-10-20T09:43:06Z", - "updated_at": "2026-10-26T23:17:54Z", - "pushed_at": "2026-10-26T17:47:52Z", + "updated_at": "2026-10-27T08:18:48Z", + "pushed_at": "2026-10-27T08:18:43Z", "stargazers_count": 5, "watchers_count": 5, "has_discussions": false, @@ -597,8 +597,8 @@ "description": "越狱助手 · RootKit for Honor Magic9 (CVE-2026-64560 → cred 写 → 自制内核模块 → KernelSU)，Flutter + Shizuku 一键 root", "fork": false, "created_at": "2026-10-24T18:21:20Z", - "updated_at": "2026-10-26T21:26:50Z", - "pushed_at": "2026-10-27T00:50:03Z", + "updated_at": "2026-10-27T10:35:20Z", + "pushed_at": "2026-10-27T10:36:28Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, @@ -656,5 +656,46 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1435519350, + "name": "opd2415-6.6.118-cve-2026-64560-ksu", + "full_name": "Exo1i\/opd2415-6.6.118-cve-2026-64560-ksu", + "owner": { + "login": "Exo1i", + "id": 121557650, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/121557650?v=4", + "html_url": "https:\/\/github.com\/Exo1i", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Exo1i\/opd2415-6.6.118-cve-2026-64560-ksu", + "description": "Per-boot KernelSU late-load via CVE-2026-64560 — OnePlus Pad 3 (OPD2415, SM8750, kernel 6.6.118-android15-8, 4K, locked bootloader): payload port, device profile + kallsyms evidence, host driver, companion APK (me.exo1i.opd2415)", + "fork": false, + "created_at": "2026-10-27T09:33:18Z", + "updated_at": "2026-10-27T11:23:09Z", + "pushed_at": "2026-10-27T11:20:06Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "android-exploit", + "cve-2026-64560", + "gki", + "kernelsu", + "late-load", + "opd2415", + "sm8750" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-64564.json b/2026/CVE-2026-64564.json index 0cbc08186c..5eb0219e84 100644 --- a/2026/CVE-2026-64564.json +++ b/2026/CVE-2026-64564.json @@ -100,7 +100,7 @@ "forks": 0, "watchers": 1, "score": 0, - "subscribers_count": 0 + "subscribers_count": 1 }, { "id": 1331161172, diff --git a/2026/CVE-2026-64638.json b/2026/CVE-2026-64638.json index 462ad44900..676f38fe81 100644 --- a/2026/CVE-2026-64638.json +++ b/2026/CVE-2026-64638.json @@ -47,10 +47,10 @@ "description": "XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template", "fork": false, "created_at": "2026-08-07T17:07:17Z", - "updated_at": "2026-10-26T16:57:38Z", + "updated_at": "2026-10-27T09:52:09Z", "pushed_at": "2026-08-21T13:31:58Z", - "stargazers_count": 121, - "watchers_count": 121, + "stargazers_count": 123, + "watchers_count": 123, "has_discussions": false, "forks_count": 31, "allow_forking": true, @@ -61,9 +61,9 @@ "topics": [], "visibility": "public", "forks": 31, - "watchers": 121, + "watchers": 123, "score": 0, - "subscribers_count": 0 + "subscribers_count": 1 }, { "id": 1326961699, diff --git a/2026/CVE-2026-65400.json b/2026/CVE-2026-65400.json index 982c10eafb..bc5ff27eaf 100644 --- a/2026/CVE-2026-65400.json +++ b/2026/CVE-2026-65400.json @@ -47,10 +47,10 @@ "description": "Read-only PoC for CVE-2026-65400 — macOS Screen Sharing (screensharingd) pre-auth SRP bypass giving root file read. Patched in macOS 26.6.1 \/ 15.7.9 \/ 14.8.9.", "fork": false, "created_at": "2026-08-21T18:22:37Z", - "updated_at": "2026-10-20T21:43:36Z", + "updated_at": "2026-10-27T07:50:21Z", "pushed_at": "2026-08-22T17:57:51Z", - "stargazers_count": 9, - "watchers_count": 9, + "stargazers_count": 10, + "watchers_count": 10, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -70,7 +70,7 @@ ], "visibility": "public", "forks": 1, - "watchers": 9, + "watchers": 10, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-70748.json b/2026/CVE-2026-70748.json new file mode 100644 index 0000000000..b689e6112a --- /dev/null +++ b/2026/CVE-2026-70748.json @@ -0,0 +1,37 @@ +[ + { + "id": 1435358508, + "name": "cve-scanner", + "full_name": "hktalent\/cve-scanner", + "owner": { + "login": "hktalent", + "id": 18223385, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18223385?v=4", + "html_url": "https:\/\/github.com\/hktalent", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/hktalent\/cve-scanner", + "description": "weblogic CVE-2026-70748,CVE-2026-60672,CVE-2026-35301;PHP CVE-2026-109618 CVE-2026-109619,Node.js CVE-2026-111497,NGINX CVE-2026-42945 CVE-2026-42533 CVE-2026-15176 CVE-2026-93479,Apache HTTPD 2.4.66 CVE-2026-23918,IIS CVE-2026-70024,HTTP.sys CVE-2026-47291... RCE CVE scanner", + "fork": false, + "created_at": "2026-10-27T06:49:12Z", + "updated_at": "2026-10-27T08:40:02Z", + "pushed_at": "2026-10-27T07:03:36Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "weblogic" + ], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-77647.json b/2026/CVE-2026-77647.json index 7580c0319a..fdff5af398 100644 --- a/2026/CVE-2026-77647.json +++ b/2026/CVE-2026-77647.json @@ -31,5 +31,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1435451282, + "name": "CVE-2026-77647", + "full_name": "piecar21\/CVE-2026-77647", + "owner": { + "login": "piecar21", + "id": 102585548, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102585548?v=4", + "html_url": "https:\/\/github.com\/piecar21", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/piecar21\/CVE-2026-77647", + "description": "PoC \/ exploit archive for CVE-2026-77647", + "fork": false, + "created_at": "2026-10-27T08:27:12Z", + "updated_at": "2026-10-27T08:27:21Z", + "pushed_at": "2026-10-27T08:27:19Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-84636.json b/2026/CVE-2026-84636.json new file mode 100644 index 0000000000..9328572565 --- /dev/null +++ b/2026/CVE-2026-84636.json @@ -0,0 +1,35 @@ +[ + { + "id": 1435628222, + "name": "CVE-2026-84636-PoC", + "full_name": "speedyfriend433\/CVE-2026-84636-PoC", + "owner": { + "login": "speedyfriend433", + "id": 171631703, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/171631703?v=4", + "html_url": "https:\/\/github.com\/speedyfriend433", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/speedyfriend433\/CVE-2026-84636-PoC", + "description": "Proof of concept of CVE-2026-84636, WiFi SSID Info Disclosure", + "fork": false, + "created_at": "2026-10-27T11:20:13Z", + "updated_at": "2026-10-27T11:44:59Z", + "pushed_at": "2026-10-27T11:20:53Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 1, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 1, + "watchers": 1, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-85168.json b/2026/CVE-2026-85168.json index 19b4750371..2e4dff19e8 100644 --- a/2026/CVE-2026-85168.json +++ b/2026/CVE-2026-85168.json @@ -19,7 +19,7 @@ "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -34,7 +34,7 @@ "security" ], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 0, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-86076.json b/2026/CVE-2026-86076.json index 4110da15cc..deeb6b26d4 100644 --- a/2026/CVE-2026-86076.json +++ b/2026/CVE-2026-86076.json @@ -19,7 +19,7 @@ "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -34,7 +34,7 @@ "security" ], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 0, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-90817.json b/2026/CVE-2026-90817.json index b87ef9b6f7..95cfcf7ab8 100644 --- a/2026/CVE-2026-90817.json +++ b/2026/CVE-2026-90817.json @@ -203,5 +203,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1435448412, + "name": "CVE-2026-90817", + "full_name": "piecar21\/CVE-2026-90817", + "owner": { + "login": "piecar21", + "id": 102585548, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102585548?v=4", + "html_url": "https:\/\/github.com\/piecar21", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/piecar21\/CVE-2026-90817", + "description": "PoC \/ exploit archive for CVE-2026-90817", + "fork": false, + "created_at": "2026-10-27T08:24:22Z", + "updated_at": "2026-10-27T08:24:49Z", + "pushed_at": "2026-10-27T08:24:46Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-93328.json b/2026/CVE-2026-93328.json new file mode 100644 index 0000000000..8403e7d4fe --- /dev/null +++ b/2026/CVE-2026-93328.json @@ -0,0 +1,35 @@ +[ + { + "id": 1435273770, + "name": "cve-2026-93328-gate", + "full_name": "sustilliano\/cve-2026-93328-gate", + "owner": { + "login": "sustilliano", + "id": 24521536, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/24521536?v=4", + "html_url": "https:\/\/github.com\/sustilliano", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/sustilliano\/cve-2026-93328-gate", + "description": "The authorization layer CVE-2026-93328 was missing: scoped grants, path confinement, and signed receipts in front of MCP storage tools. CVE reproduction + gated proof, 10\/10 tests.", + "fork": false, + "created_at": "2026-10-27T05:07:58Z", + "updated_at": "2026-10-27T05:44:12Z", + "pushed_at": "2026-10-27T05:44:08Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-93399.json b/2026/CVE-2026-93399.json index bd71adc138..a1d17c5494 100644 --- a/2026/CVE-2026-93399.json +++ b/2026/CVE-2026-93399.json @@ -71,5 +71,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1435446570, + "name": "CVE-2026-93399", + "full_name": "piecar21\/CVE-2026-93399", + "owner": { + "login": "piecar21", + "id": 102585548, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102585548?v=4", + "html_url": "https:\/\/github.com\/piecar21", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/piecar21\/CVE-2026-93399", + "description": "PoC \/ exploit archive for CVE-2026-93399", + "fork": false, + "created_at": "2026-10-27T08:22:31Z", + "updated_at": "2026-10-27T08:22:45Z", + "pushed_at": "2026-10-27T08:22:43Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-96889.json b/2026/CVE-2026-96889.json index e1fae9a136..c547f1a8e0 100644 --- a/2026/CVE-2026-96889.json +++ b/2026/CVE-2026-96889.json @@ -122,8 +122,8 @@ "description": "Check a Next.js project against the October 14, 2026 security advisories (CVE-2026-96889, use cache RCE, Server Actions DoS). No dependencies.", "fork": false, "created_at": "2026-10-23T15:52:23Z", - "updated_at": "2026-10-23T15:52:56Z", - "pushed_at": "2026-10-23T15:52:30Z", + "updated_at": "2026-10-27T05:58:52Z", + "pushed_at": "2026-10-27T05:58:48Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-97205.json b/2026/CVE-2026-97205.json index f39fb6e7d8..131e33f6dd 100644 --- a/2026/CVE-2026-97205.json +++ b/2026/CVE-2026-97205.json @@ -31,5 +31,38 @@ "watchers": 1, "score": 0, "subscribers_count": 0 + }, + { + "id": 1435439914, + "name": "CVE-2026-97205", + "full_name": "piecar21\/CVE-2026-97205", + "owner": { + "login": "piecar21", + "id": 102585548, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102585548?v=4", + "html_url": "https:\/\/github.com\/piecar21", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/piecar21\/CVE-2026-97205", + "description": "PoC \/ exploit archive for CVE-2026-97205", + "fork": false, + "created_at": "2026-10-27T08:15:37Z", + "updated_at": "2026-10-27T08:15:47Z", + "pushed_at": "2026-10-27T08:15:45Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-97629.json b/2026/CVE-2026-97629.json index 6ece856424..533d6a6d76 100644 --- a/2026/CVE-2026-97629.json +++ b/2026/CVE-2026-97629.json @@ -45,5 +45,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1435440060, + "name": "CVE-2026-97629", + "full_name": "piecar21\/CVE-2026-97629", + "owner": { + "login": "piecar21", + "id": 102585548, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102585548?v=4", + "html_url": "https:\/\/github.com\/piecar21", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/piecar21\/CVE-2026-97629", + "description": "PoC \/ exploit archive for CVE-2026-97629", + "fork": false, + "created_at": "2026-10-27T08:15:47Z", + "updated_at": "2026-10-27T08:15:57Z", + "pushed_at": "2026-10-27T08:15:55Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-98260.json b/2026/CVE-2026-98260.json index 3da4748301..40d7e6cabd 100644 --- a/2026/CVE-2026-98260.json +++ b/2026/CVE-2026-98260.json @@ -14,10 +14,10 @@ "description": "A slow, from-zero walk through a Linux kernel privilege-escalation bug (CVE-2026-98260)", "fork": false, "created_at": "2026-10-18T18:58:35Z", - "updated_at": "2026-10-24T18:50:12Z", + "updated_at": "2026-10-27T10:14:41Z", "pushed_at": "2026-10-24T18:50:09Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -80,10 +80,10 @@ "description": "Target-specific Android CVE-2026-98260 research port for Xiaomi popsicle", "fork": false, "created_at": "2026-10-23T08:56:37Z", - "updated_at": "2026-10-26T16:06:58Z", + "updated_at": "2026-10-27T07:32:38Z", "pushed_at": "2026-10-23T09:29:52Z", - "stargazers_count": 11, - "watchers_count": 11, + "stargazers_count": 13, + "watchers_count": 13, "has_discussions": false, "forks_count": 10, "allow_forking": true, @@ -94,7 +94,7 @@ "topics": [], "visibility": "public", "forks": 10, - "watchers": 11, + "watchers": 13, "score": 0, "subscribers_count": 0 }, @@ -151,7 +151,7 @@ "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -159,7 +159,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 0, "score": 0, "subscribers_count": 0 @@ -179,12 +179,12 @@ "description": "Shizuku-driven CVE-2026-98260 root + KernelSU runtime LKM loader for Xiaomi yingtian \/ lhasa (kernel 6.18.21)", "fork": false, "created_at": "2026-10-25T12:51:04Z", - "updated_at": "2026-10-26T21:34:23Z", + "updated_at": "2026-10-27T09:29:46Z", "pushed_at": "2026-10-25T19:06:56Z", - "stargazers_count": 15, - "watchers_count": 15, + "stargazers_count": 19, + "watchers_count": 19, "has_discussions": false, - "forks_count": 8, + "forks_count": 11, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -201,8 +201,8 @@ "xiaomi" ], "visibility": "public", - "forks": 8, - "watchers": 15, + "forks": 11, + "watchers": 19, "score": 0, "subscribers_count": 0 }, @@ -337,12 +337,12 @@ "description": "CVE-2026-98260（fs\/exec.c POSIX CPU timer UAF）XRING O1 \/ Android 17 \/ 6.18.21 研究记录与 PC 一键流程（授权设备安全研究）", "fork": false, "created_at": "2026-10-26T09:12:27Z", - "updated_at": "2026-10-27T01:45:29Z", - "pushed_at": "2026-10-27T01:45:25Z", - "stargazers_count": 6, - "watchers_count": 6, + "updated_at": "2026-10-27T09:09:11Z", + "pushed_at": "2026-10-27T09:09:14Z", + "stargazers_count": 11, + "watchers_count": 11, "has_discussions": false, - "forks_count": 2, + "forks_count": 6, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -356,8 +356,8 @@ "xring" ], "visibility": "public", - "forks": 2, - "watchers": 6, + "forks": 6, + "watchers": 11, "score": 0, "subscribers_count": 0 }, @@ -409,12 +409,12 @@ "description": "Xiaomi Pad7S Pro12.5在OS4.0.0.14.XOTCNXM利用CVE-2026-98260获取ROOT权限并加载KernelSU。", "fork": false, "created_at": "2026-10-26T14:44:21Z", - "updated_at": "2026-10-27T01:24:33Z", - "pushed_at": "2026-10-27T01:24:27Z", - "stargazers_count": 0, - "watchers_count": 0, + "updated_at": "2026-10-27T09:59:41Z", + "pushed_at": "2026-10-27T09:59:37Z", + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, - "forks_count": 0, + "forks_count": 2, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -422,8 +422,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, - "watchers": 0, + "forks": 2, + "watchers": 2, "score": 0, "subscribers_count": 0 }, @@ -459,5 +459,38 @@ "watchers": 1, "score": 0, "subscribers_count": 0 + }, + { + "id": 1435385425, + "name": "CVE-2026-98260-pandora-lpe", + "full_name": "b1gmang0\/CVE-2026-98260-pandora-lpe", + "owner": { + "login": "b1gmang0", + "id": 32798513, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32798513?v=4", + "html_url": "https:\/\/github.com\/b1gmang0", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/b1gmang0\/CVE-2026-98260-pandora-lpe", + "description": "小米17 Pro 4.0.5.0 本地提权", + "fork": false, + "created_at": "2026-10-27T07:17:41Z", + "updated_at": "2026-10-27T09:23:19Z", + "pushed_at": "2026-10-27T09:23:15Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file