nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/07/25 12:48:49

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-07-25 21:48:49 +09:00
1 parent 582b712b81
commit 50b3c57e9c
64 files changed
+672 -372
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2015/CVE-2015-5254.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": "Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-42588)",
"fork": false,
"created_at": "2026-04-20T02:38:50Z",
"updated_at": "2026-07-15T08:27:46Z",
"updated_at": "2026-07-25T11:48:46Z",
"pushed_at": "2026-06-27T07:20:35Z",
"stargazers_count": 82,
"watchers_count": 82,
"stargazers_count": 83,
"watchers_count": 83,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 82,
"watchers": 83,
"score": 0,
"subscribers_count": 2
}
2016/CVE-2016-3088.json
+4 -4
View File
@@ -249,10 +249,10 @@
"description": "Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-42588)",
"fork": false,
"created_at": "2026-04-20T02:38:50Z",
"updated_at": "2026-07-15T08:27:46Z",
"updated_at": "2026-07-25T11:48:46Z",
"pushed_at": "2026-06-27T07:20:35Z",
"stargazers_count": 82,
"watchers_count": 82,
"stargazers_count": 83,
"watchers_count": 83,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -263,7 +263,7 @@
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 82,
"watchers": 83,
"score": 0,
"subscribers_count": 2
}
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-07-25T04:32:10Z",
"pushed_at": "2026-07-25T04:31:59Z",
"updated_at": "2026-07-25T11:48:43Z",
"pushed_at": "2026-07-25T11:48:39Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2020/CVE-2020-1472.json
+2 -2
View File
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-07-25T06:02:23Z",
"pushed_at": "2026-07-25T06:02:14Z",
"updated_at": "2026-07-25T12:08:52Z",
"pushed_at": "2026-07-25T12:08:48Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2020/CVE-2020-5148.json
+43
View File
@@ -0,0 +1,43 @@
[
{
"id": 1311777031,
"name": "CVE-2020-5148",
"full_name": "l0lsec\/CVE-2020-5148",
"owner": {
"login": "l0lsec",
"id": 51931886,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51931886?v=4",
"html_url": "https:\/\/github.com\/l0lsec",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/l0lsec\/CVE-2020-5148",
"description": "CVE-2020-5148 - Forced Authentication in the SonicWall UTM SSO Agent. The agent probes unvalidated workstations as Domain Admin, so one outbound web request yields a privileged NTLMv2 hash. Advisory SNWLID-2021-0003.",
"fork": false,
"created_at": "2026-07-25T07:33:26Z",
"updated_at": "2026-07-25T07:34:20Z",
"pushed_at": "2026-07-25T07:33:29Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"active-directory",
"cve",
"forced-authentication",
"ntlm-relay",
"penetration-testing",
"sonicwall",
"vulnerability-disclosure"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2021/CVE-2021-26837.json
+43
View File
@@ -0,0 +1,43 @@
[
{
"id": 1311776414,
"name": "CVE-2021-26837",
"full_name": "l0lsec\/CVE-2021-26837",
"owner": {
"login": "l0lsec",
"id": 51931886,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51931886?v=4",
"html_url": "https:\/\/github.com\/l0lsec",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/l0lsec\/CVE-2021-26837",
"description": "CVE-2021-26837 - SQL Injection in the SearchTextbox parameter of HelpSystems\/Fortra DeliverNow. Payloads, annotated requests, and evidence. Fixed in 1.2.18.",
"fork": false,
"created_at": "2026-07-25T07:32:51Z",
"updated_at": "2026-07-25T07:33:01Z",
"pushed_at": "2026-07-25T07:32:55Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"fortra",
"mssql",
"penetration-testing",
"proof-of-concept",
"sql-injection",
"vulnerability-disclosure"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2021/CVE-2021-3262.json
+43
View File
@@ -0,0 +1,43 @@
[
{
"id": 1311776837,
"name": "CVE-2021-3262",
"full_name": "l0lsec\/CVE-2021-3262",
"owner": {
"login": "l0lsec",
"id": 51931886,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51931886?v=4",
"html_url": "https:\/\/github.com\/l0lsec",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/l0lsec\/CVE-2021-3262",
"description": "CVE-2021-3262 - Blind SQL Injection in the editOEN parameter of TripSpark VEO Transportation \/ NovusEDU. Unauthenticated, internet-facing. Payloads, annotated requests, and evidence.",
"fork": false,
"created_at": "2026-07-25T07:33:14Z",
"updated_at": "2026-07-25T07:33:21Z",
"pushed_at": "2026-07-25T07:33:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"mssql",
"penetration-testing",
"proof-of-concept",
"sql-injection",
"tripspark",
"vulnerability-disclosure"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-07-25T06:06:10Z",
"pushed_at": "2026-07-25T06:05:47Z",
"updated_at": "2026-07-25T11:31:16Z",
"pushed_at": "2026-07-25T11:31:06Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-41773.json
-33
View File
@@ -2408,39 +2408,6 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 477111512,
"name": "netsec-polygon",
"full_name": "bernardas\/netsec-polygon",
"owner": {
"login": "bernardas",
"id": 62701131,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62701131?v=4",
"html_url": "https:\/\/github.com\/bernardas",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/bernardas\/netsec-polygon",
"description": "Environment for CVE-2021-41773 recreation.",
"fork": false,
"created_at": "2022-04-02T16:34:45Z",
"updated_at": "2022-04-03T08:19:39Z",
"pushed_at": "2022-05-17T22:16:34Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 486245191,
"name": "Apache_Penetration_Tool",
2021/CVE-2021-43287.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 489551378,
"name": "CVE-2021-43287",
"full_name": "Wrin9\/CVE-2021-43287",
"owner": {
"login": "Wrin9",
"id": 54984589,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/54984589?v=4",
"html_url": "https:\/\/github.com\/Wrin9",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Wrin9\/CVE-2021-43287",
"description": "CVE-2021-43287_GoCD_fileread_POC_EXP",
"fork": false,
"created_at": "2022-05-07T02:54:59Z",
"updated_at": "2022-08-15T15:42:23Z",
"pushed_at": "2022-05-16T01:44:12Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 1
}
]
2021/CVE-2021-44228.json
+4 -4
View File
@@ -3873,10 +3873,10 @@
"description": "A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228 ",
"fork": false,
"created_at": "2021-12-13T03:57:50Z",
"updated_at": "2026-07-24T19:35:00Z",
"updated_at": "2026-07-25T10:32:33Z",
"pushed_at": "2022-11-23T18:23:24Z",
"stargazers_count": 3421,
"watchers_count": 3421,
"stargazers_count": 3422,
"watchers_count": 3422,
"has_discussions": true,
"forks_count": 725,
"allow_forking": true,
@@ -3887,7 +3887,7 @@
"topics": [],
"visibility": "public",
"forks": 725,
"watchers": 3421,
"watchers": 3422,
"score": 0,
"subscribers_count": 54
},
2022/CVE-2022-26134.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "【懒人神器】一款图形化、批量采集url、批量对采集的url进行各种nday检测的工具。可用于src挖掘、cnvd挖掘、0day利用、打造自己的武器库等场景。可以批量利用Actively Exploited Atlassian Confluence 0Day CVE-2022-26134和DedeCMS v5.7.87 SQL注入 CVE-2022-23337。",
"fork": false,
"created_at": "2022-05-31T07:44:01Z",
"updated_at": "2026-07-23T14:45:35Z",
"updated_at": "2026-07-25T08:37:18Z",
"pushed_at": "2023-02-26T14:06:05Z",
"stargazers_count": 1249,
"watchers_count": 1249,
"stargazers_count": 1250,
"watchers_count": 1250,
"has_discussions": true,
"forks_count": 187,
"allow_forking": true,
@@ -48,7 +48,7 @@
],
"visibility": "public",
"forks": 187,
"watchers": 1249,
"watchers": 1250,
"score": 0,
"subscribers_count": 1
},
2022/CVE-2022-29799.json
+2 -2
View File
@@ -59,8 +59,8 @@
"description": "Demonstrate local privilege escalation in networkd-dispatcher via CVE-2022-29799 and CVE-2022-29800 using this C proof of concept.",
"fork": false,
"created_at": "2026-06-23T14:05:18Z",
"updated_at": "2026-07-25T04:13:53Z",
"pushed_at": "2026-07-25T04:13:49Z",
"updated_at": "2026-07-25T10:04:51Z",
"pushed_at": "2026-07-25T10:03:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2022/CVE-2022-41678.json
+4 -4
View File
@@ -88,10 +88,10 @@
"description": "Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-42588)",
"fork": false,
"created_at": "2026-04-20T02:38:50Z",
"updated_at": "2026-07-15T08:27:46Z",
"updated_at": "2026-07-25T11:48:46Z",
"pushed_at": "2026-06-27T07:20:35Z",
"stargazers_count": 82,
"watchers_count": 82,
"stargazers_count": 83,
"watchers_count": 83,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -102,7 +102,7 @@
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 82,
"watchers": 83,
"score": 0,
"subscribers_count": 2
}
2023/CVE-2023-32434.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙",
"fork": false,
"created_at": "2025-08-13T09:19:29Z",
"updated_at": "2026-07-25T04:48:02Z",
"pushed_at": "2026-07-25T04:47:51Z",
"updated_at": "2026-07-25T10:38:57Z",
"pushed_at": "2026-07-25T10:38:34Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-43208.json
+4 -4
View File
@@ -298,10 +298,10 @@
"description": "PoC for CVE-2023-43208 RCE exploitation.",
"fork": false,
"created_at": "2026-02-25T09:45:48Z",
"updated_at": "2026-02-25T10:24:39Z",
"updated_at": "2026-07-25T08:06:51Z",
"pushed_at": "2026-02-25T09:51:21Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -312,7 +312,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 11,
"score": 0,
"subscribers_count": 0
},
2023/CVE-2023-45866.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "🚨 CVE-2023-45866 - BlueDucky Implementation (Using DuckyScript) 🔓 Unauthenticated Peering Leading to Code Execution (Using HID Keyboard)",
"fork": false,
"created_at": "2024-01-16T06:52:02Z",
"updated_at": "2026-07-24T14:03:34Z",
"updated_at": "2026-07-25T07:14:06Z",
"pushed_at": "2026-02-11T00:03:00Z",
"stargazers_count": 1880,
"watchers_count": 1880,
"stargazers_count": 1881,
"watchers_count": 1881,
"has_discussions": false,
"forks_count": 315,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 315,
"watchers": 1880,
"watchers": 1881,
"score": 0,
"subscribers_count": 29
},
2023/CVE-2023-46604.json
+4 -4
View File
@@ -1045,10 +1045,10 @@
"description": "Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-42588)",
"fork": false,
"created_at": "2026-04-20T02:38:50Z",
"updated_at": "2026-07-15T08:27:46Z",
"updated_at": "2026-07-25T11:48:46Z",
"pushed_at": "2026-06-27T07:20:35Z",
"stargazers_count": 82,
"watchers_count": 82,
"stargazers_count": 83,
"watchers_count": 83,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -1059,7 +1059,7 @@
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 82,
"watchers": 83,
"score": 0,
"subscribers_count": 2
},
2023/CVE-2023-4863.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2023-09-21T05:22:51Z",
"updated_at": "2026-07-13T06:07:57Z",
"updated_at": "2026-07-25T07:36:41Z",
"pushed_at": "2023-12-18T04:25:00Z",
"stargazers_count": 317,
"watchers_count": 317,
"stargazers_count": 318,
"watchers_count": 318,
"has_discussions": false,
"forks_count": 48,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 48,
"watchers": 317,
"watchers": 318,
"score": 0,
"subscribers_count": 12
},
2024/CVE-2024-0670.json
+2 -2
View File
@@ -118,8 +118,8 @@
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
"fork": false,
"created_at": "2026-01-08T01:32:09Z",
"updated_at": "2026-07-25T05:34:15Z",
"pushed_at": "2026-07-25T05:33:53Z",
"updated_at": "2026-07-25T11:25:09Z",
"pushed_at": "2026-07-25T11:25:04Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-30088.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 290,
"watchers_count": 290,
"has_discussions": false,
"forks_count": 60,
"forks_count": 61,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 60,
"forks": 61,
"watchers": 290,
"score": 0,
"subscribers_count": 4
2024/CVE-2024-31317.json
+1 -1
View File
@@ -377,7 +377,7 @@
"description": "This is a toolkit that uses CVE-2024-31317 to extract private app data via ADB or spawn a shell with an app's UID.",
"fork": false,
"created_at": "2026-05-29T09:48:31Z",
"updated_at": "2026-05-30T04:35:24Z",
"updated_at": "2026-07-25T12:16:03Z",
"pushed_at": "2026-05-29T09:52:39Z",
"stargazers_count": 2,
"watchers_count": 2,
2024/CVE-2024-32114.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-42588)",
"fork": false,
"created_at": "2026-04-20T02:38:50Z",
"updated_at": "2026-07-15T08:27:46Z",
"updated_at": "2026-07-25T11:48:46Z",
"pushed_at": "2026-06-27T07:20:35Z",
"stargazers_count": 82,
"watchers_count": 82,
"stargazers_count": 83,
"watchers_count": 83,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 82,
"watchers": 83,
"score": 0,
"subscribers_count": 2
}
2025/CVE-2025-14847.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
"fork": false,
"created_at": "2025-07-30T15:52:00Z",
"updated_at": "2026-07-25T05:37:59Z",
"pushed_at": "2026-07-25T05:37:20Z",
"updated_at": "2026-07-25T11:28:45Z",
"pushed_at": "2026-07-25T11:28:33Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1129,8 +1129,8 @@
"description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
"fork": false,
"created_at": "2026-01-14T06:05:44Z",
"updated_at": "2026-07-25T05:37:24Z",
"pushed_at": "2026-07-25T05:36:38Z",
"updated_at": "2026-07-25T11:28:31Z",
"pushed_at": "2026-07-25T11:27:52Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-24257.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis",
"fork": false,
"created_at": "2026-04-04T03:42:55Z",
"updated_at": "2026-07-25T06:19:33Z",
"pushed_at": "2026-07-25T06:19:09Z",
"updated_at": "2026-07-25T12:11:37Z",
"pushed_at": "2026-07-25T12:11:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-32463.json
+2 -2
View File
@@ -1496,8 +1496,8 @@
"description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.",
"fork": false,
"created_at": "2025-09-20T00:42:07Z",
"updated_at": "2026-07-25T04:53:58Z",
"pushed_at": "2026-07-25T04:53:54Z",
"updated_at": "2026-07-25T10:44:42Z",
"pushed_at": "2026-07-25T10:44:13Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-49844.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.",
"fork": false,
"created_at": "2019-04-13T07:51:09Z",
"updated_at": "2026-07-25T05:06:53Z",
"pushed_at": "2026-07-25T05:06:12Z",
"updated_at": "2026-07-25T10:57:20Z",
"pushed_at": "2026-07-25T10:56:57Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
"fork": false,
"created_at": "2022-04-06T09:27:39Z",
"updated_at": "2026-07-25T05:07:16Z",
"pushed_at": "2026-07-25T05:06:46Z",
"updated_at": "2026-07-25T10:57:50Z",
"pushed_at": "2026-07-25T10:57:30Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-54424.json
+2 -2
View File
@@ -53,8 +53,8 @@
"description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐",
"fork": false,
"created_at": "2025-08-14T05:16:16Z",
"updated_at": "2026-07-25T04:48:41Z",
"pushed_at": "2026-07-25T04:48:37Z",
"updated_at": "2026-07-25T10:39:34Z",
"pushed_at": "2026-07-25T10:39:16Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2025/CVE-2025-55182.json
+10 -10
View File
@@ -14,8 +14,8 @@
"description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.",
"fork": false,
"created_at": "2022-06-17T10:19:10Z",
"updated_at": "2026-07-25T05:27:06Z",
"pushed_at": "2026-07-25T05:26:56Z",
"updated_at": "2026-07-25T11:18:34Z",
"pushed_at": "2026-07-25T11:17:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -99,8 +99,8 @@
"description": null,
"fork": false,
"created_at": "2024-11-29T12:32:19Z",
"updated_at": "2026-07-25T05:27:37Z",
"pushed_at": "2026-07-25T05:27:26Z",
"updated_at": "2026-07-25T11:18:33Z",
"pushed_at": "2026-07-25T11:18:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -148,8 +148,8 @@
"description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
"fork": false,
"created_at": "2025-06-06T16:34:46Z",
"updated_at": "2026-07-25T05:27:15Z",
"pushed_at": "2026-07-25T05:27:10Z",
"updated_at": "2026-07-25T11:18:13Z",
"pushed_at": "2026-07-25T11:18:04Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -11741,8 +11741,8 @@
"description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.",
"fork": false,
"created_at": "2025-12-24T14:48:19Z",
"updated_at": "2026-07-25T05:27:28Z",
"pushed_at": "2026-07-25T05:26:49Z",
"updated_at": "2026-07-25T11:19:05Z",
"pushed_at": "2026-07-25T11:17:46Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12259,8 +12259,8 @@
"description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
"fork": false,
"created_at": "2026-01-02T01:28:57Z",
"updated_at": "2026-07-25T05:30:59Z",
"pushed_at": "2026-07-25T05:30:45Z",
"updated_at": "2026-07-25T11:21:51Z",
"pushed_at": "2026-07-25T11:21:48Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-64512.json
+8 -8
View File
@@ -14,10 +14,10 @@
"description": "A Proof-of-Concept for CVE-2025-64512 using a polyglot file.",
"fork": false,
"created_at": "2025-12-11T22:21:42Z",
"updated_at": "2026-07-24T20:35:59Z",
"updated_at": "2026-07-25T08:51:45Z",
"pushed_at": "2026-04-10T11:44:37Z",
"stargazers_count": 6,
"watchers_count": 6,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 6,
"watchers": 7,
"score": 0,
"subscribers_count": 0
},
@@ -47,10 +47,10 @@
"description": "CVE-2025-64512: pdfminer.six pickle deserialization rce; .pickle.gz + pdf generator w\/ custom payloads",
"fork": false,
"created_at": "2026-07-19T10:49:05Z",
"updated_at": "2026-07-22T08:37:40Z",
"updated_at": "2026-07-25T09:20:26Z",
"pushed_at": "2026-07-19T11:00:19Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-66398.json
+2 -2
View File
@@ -64,8 +64,8 @@
"description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.",
"fork": false,
"created_at": "2026-03-23T09:09:21Z",
"updated_at": "2026-07-25T06:13:34Z",
"pushed_at": "2026-07-25T06:13:29Z",
"updated_at": "2026-07-25T12:06:14Z",
"pushed_at": "2026-07-25T12:05:43Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-66478.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.",
"fork": false,
"created_at": "2025-10-01T07:40:09Z",
"updated_at": "2026-07-25T05:28:09Z",
"pushed_at": "2026-07-25T05:28:00Z",
"updated_at": "2026-07-25T11:19:06Z",
"pushed_at": "2026-07-25T11:18:58Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-68921.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.",
"fork": false,
"created_at": "2026-01-24T21:00:41Z",
"updated_at": "2026-07-25T05:42:49Z",
"pushed_at": "2026-07-25T05:42:45Z",
"updated_at": "2026-07-25T11:34:38Z",
"pushed_at": "2026-07-25T11:33:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-12960.json
+43
View File
@@ -0,0 +1,43 @@
[
{
"id": 1311758983,
"name": "CVE-2026-12960",
"full_name": "l0lsec\/CVE-2026-12960",
"owner": {
"login": "l0lsec",
"id": 51931886,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51931886?v=4",
"html_url": "https:\/\/github.com\/l0lsec",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/l0lsec\/CVE-2026-12960",
"description": "CVE-2026-12960 - Improper Export of Android Application Components in the ASUS Router app (com.asus.aihome). PoC, exploit APK, video, and vendor report. Fixed in 1.0.0.9.74.",
"fork": false,
"created_at": "2026-07-25T07:07:51Z",
"updated_at": "2026-07-25T07:08:15Z",
"pushed_at": "2026-07-25T07:07:58Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"android",
"android-security",
"asus",
"cve",
"mobile-security",
"proof-of-concept",
"vulnerability-disclosure"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-14266.json
+33
View File
@@ -64,5 +64,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1311955190,
"name": "CVE-2026-14266",
"full_name": "liyuxuan504-byte\/CVE-2026-14266",
"owner": {
"login": "liyuxuan504-byte",
"id": 296352065,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/296352065?v=4",
"html_url": "https:\/\/github.com\/liyuxuan504-byte",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/liyuxuan504-byte\/CVE-2026-14266",
"description": "7-Zip XZ Decoder Heap Buffer Overflow - Full analysis, root cause, PoC, and RCE exploitation roadmap",
"fork": false,
"created_at": "2026-07-25T12:13:30Z",
"updated_at": "2026-07-25T12:32:43Z",
"pushed_at": "2026-07-25T12:32:36Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-20841.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.",
"fork": false,
"created_at": "2024-09-22T12:19:06Z",
"updated_at": "2026-07-25T05:58:29Z",
"pushed_at": "2026-07-25T05:58:06Z",
"updated_at": "2026-07-25T11:49:43Z",
"pushed_at": "2026-07-25T11:49:39Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.",
"fork": false,
"created_at": "2026-02-26T05:21:28Z",
"updated_at": "2026-07-25T05:57:30Z",
"pushed_at": "2026-07-25T05:57:19Z",
"updated_at": "2026-07-25T11:48:55Z",
"pushed_at": "2026-07-25T11:48:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24061.json
+2 -2
View File
@@ -59,8 +59,8 @@
"description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.",
"fork": false,
"created_at": "2026-02-03T19:46:10Z",
"updated_at": "2026-07-25T05:48:21Z",
"pushed_at": "2026-07-25T05:48:17Z",
"updated_at": "2026-07-25T11:40:10Z",
"pushed_at": "2026-07-25T11:39:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24291.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions",
"fork": false,
"created_at": "2026-03-26T04:38:27Z",
"updated_at": "2026-07-25T06:15:21Z",
"pushed_at": "2026-07-25T06:15:08Z",
"updated_at": "2026-07-25T12:08:41Z",
"pushed_at": "2026-07-25T12:07:24Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-2472.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.",
"fork": false,
"created_at": "2026-03-10T14:40:04Z",
"updated_at": "2026-07-25T06:05:07Z",
"pushed_at": "2026-07-25T06:04:49Z",
"updated_at": "2026-07-25T11:57:02Z",
"pushed_at": "2026-07-25T11:56:31Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-27641.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "PoC and test server",
"fork": false,
"created_at": "2026-07-23T08:48:45Z",
"updated_at": "2026-07-23T09:55:10Z",
"updated_at": "2026-07-25T09:28:41Z",
"pushed_at": "2026-07-23T08:59:37Z",
"stargazers_count": 0,
"watchers_count": 0,
2026/CVE-2026-31431.json
+4 -37
View File
@@ -660,8 +660,8 @@
"description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.",
"fork": false,
"created_at": "2026-05-05T04:58:21Z",
"updated_at": "2026-07-25T06:35:12Z",
"pushed_at": "2026-07-25T06:34:46Z",
"updated_at": "2026-07-25T12:27:09Z",
"pushed_at": "2026-07-25T12:27:03Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -709,8 +709,8 @@
"description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.",
"fork": false,
"created_at": "2026-05-06T09:49:14Z",
"updated_at": "2026-07-25T06:35:38Z",
"pushed_at": "2026-07-25T06:35:22Z",
"updated_at": "2026-07-25T12:27:55Z",
"pushed_at": "2026-07-25T12:27:40Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
@@ -2223,38 +2223,5 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1311745898,
"name": "CVE-2026-31431",
"full_name": "LeoxSoft\/CVE-2026-31431",
"owner": {
"login": "LeoxSoft",
"id": 224305371,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/224305371?v=4",
"html_url": "https:\/\/github.com\/LeoxSoft",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/LeoxSoft\/CVE-2026-31431",
"description": "🚀 CVE-2026-31431 - Linux Kernel AF_ALG + splice() Privilege Escalation Exploit (Zero-Day → Root Persistence)",
"fork": false,
"created_at": "2026-07-25T06:47:57Z",
"updated_at": "2026-07-25T06:48:39Z",
"pushed_at": "2026-07-25T06:48:34Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-31802.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"fork": false,
"created_at": "2026-03-28T20:49:46Z",
"updated_at": "2026-07-25T06:16:26Z",
"pushed_at": "2026-07-25T06:16:17Z",
"updated_at": "2026-07-25T12:08:35Z",
"pushed_at": "2026-07-25T12:08:31Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-34197.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-42588)",
"fork": false,
"created_at": "2026-04-20T02:38:50Z",
"updated_at": "2026-07-15T08:27:46Z",
"updated_at": "2026-07-25T11:48:46Z",
"pushed_at": "2026-06-27T07:20:35Z",
"stargazers_count": 82,
"watchers_count": 82,
"stargazers_count": 83,
"watchers_count": 83,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 82,
"watchers": 83,
"score": 0,
"subscribers_count": 2
},
2026/CVE-2026-3437.json
-37
View File
@@ -1,37 +0,0 @@
[
{
"id": 1270345747,
"name": "portwell-lpe",
"full_name": "tihomirocrew\/portwell-lpe",
"owner": {
"login": "tihomirocrew",
"id": 90578343,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90578343?v=4",
"html_url": "https:\/\/github.com\/tihomirocrew",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/tihomirocrew\/portwell-lpe",
"description": "PoC exploit for CVE-2026-3437: Arbitrary physical memory read\/write leading to LPE in portwell.sys.",
"fork": false,
"created_at": "2026-06-15T16:12:37Z",
"updated_at": "2026-06-28T08:01:59Z",
"pushed_at": "2026-06-15T19:37:16Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-3437"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-41089.json
+2 -2
View File
@@ -256,8 +256,8 @@
"description": "Scan Windows Domain Controllers for CVE-2026-41089 to detect unauthenticated remote code execution vulnerabilities in the Netlogon service.",
"fork": false,
"created_at": "2026-07-22T15:40:18Z",
"updated_at": "2026-07-25T04:24:47Z",
"pushed_at": "2026-07-25T04:24:19Z",
"updated_at": "2026-07-25T12:47:53Z",
"pushed_at": "2026-07-25T12:47:43Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-41651.json
+33
View File
@@ -71,5 +71,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1311803396,
"name": "CVE-2026-41651",
"full_name": "0xDVRK\/CVE-2026-41651",
"owner": {
"login": "0xDVRK",
"id": 191672042,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/191672042?v=4",
"html_url": "https:\/\/github.com\/0xDVRK",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xDVRK\/CVE-2026-41651",
"description": null,
"fork": false,
"created_at": "2026-07-25T08:13:21Z",
"updated_at": "2026-07-25T08:15:05Z",
"pushed_at": "2026-07-25T08:14:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-41940.json
+2 -2
View File
@@ -258,8 +258,8 @@
"description": "Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.",
"fork": false,
"created_at": "2026-05-06T18:08:48Z",
"updated_at": "2026-07-25T06:35:46Z",
"pushed_at": "2026-07-25T06:35:37Z",
"updated_at": "2026-07-25T12:28:36Z",
"pushed_at": "2026-07-25T12:28:01Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-42533.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Static config scanner that flags nginx configs vulnerable to the complex_value two-pass capture-clobbering bug (regex map + regex capture → heap overflow \/ info leak).",
"fork": false,
"created_at": "2026-07-04T11:05:56Z",
"updated_at": "2026-07-24T03:47:02Z",
"updated_at": "2026-07-25T08:30:44Z",
"pushed_at": "2026-07-20T15:12:42Z",
"stargazers_count": 17,
"watchers_count": 17,
"stargazers_count": 18,
"watchers_count": 18,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 17,
"watchers": 18,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-43499.json
+22 -22
View File
@@ -19,7 +19,7 @@
"stargazers_count": 128,
"watchers_count": 128,
"has_discussions": false,
"forks_count": 32,
"forks_count": 33,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 32,
"forks": 33,
"watchers": 128,
"score": 0,
"subscribers_count": 1
@@ -146,7 +146,7 @@
"description": "OPPO Find N2 GhostLock (CVE-2026-43499) exploit adaptation",
"fork": false,
"created_at": "2026-07-09T22:46:15Z",
"updated_at": "2026-07-24T14:30:31Z",
"updated_at": "2026-07-25T10:50:22Z",
"pushed_at": "2026-07-23T04:58:39Z",
"stargazers_count": 50,
"watchers_count": 50,
@@ -311,12 +311,12 @@
"description": "GhostLock (CVE-2026-43499) kernel exploit for OnePlus devices with locked bootloader",
"fork": false,
"created_at": "2026-07-12T16:05:24Z",
"updated_at": "2026-07-25T06:20:40Z",
"pushed_at": "2026-07-24T19:55:01Z",
"stargazers_count": 62,
"watchers_count": 62,
"updated_at": "2026-07-25T12:04:55Z",
"pushed_at": "2026-07-25T12:44:41Z",
"stargazers_count": 64,
"watchers_count": 64,
"has_discussions": false,
"forks_count": 11,
"forks_count": 12,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -331,8 +331,8 @@
"root"
],
"visibility": "public",
"forks": 11,
"watchers": 62,
"forks": 12,
"watchers": 64,
"score": 0,
"subscribers_count": 1
},
@@ -648,8 +648,8 @@
"description": "Xiaomi K70e (duchamp) one-click root via CVE-2026-43499 (IonStack) + KernelSU integration",
"fork": false,
"created_at": "2026-07-15T03:59:56Z",
"updated_at": "2026-07-25T04:38:06Z",
"pushed_at": "2026-07-25T03:12:24Z",
"updated_at": "2026-07-25T12:14:53Z",
"pushed_at": "2026-07-25T12:15:58Z",
"stargazers_count": 31,
"watchers_count": 31,
"has_discussions": true,
@@ -681,8 +681,8 @@
"description": null,
"fork": false,
"created_at": "2026-07-15T08:53:35Z",
"updated_at": "2026-07-24T05:05:51Z",
"pushed_at": "2026-07-24T05:05:30Z",
"updated_at": "2026-07-25T12:15:14Z",
"pushed_at": "2026-07-25T12:15:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -1044,10 +1044,10 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
"updated_at": "2026-07-25T06:11:47Z",
"updated_at": "2026-07-25T10:38:56Z",
"pushed_at": "2026-07-19T09:11:56Z",
"stargazers_count": 90,
"watchers_count": 90,
"stargazers_count": 92,
"watchers_count": 92,
"has_discussions": false,
"forks_count": 20,
"allow_forking": true,
@@ -1058,7 +1058,7 @@
"topics": [],
"visibility": "public",
"forks": 20,
"watchers": 90,
"watchers": 92,
"score": 0,
"subscribers_count": 3
},
@@ -1283,10 +1283,10 @@
"description": "CVE-2026-43499 PoC Scanner",
"fork": false,
"created_at": "2026-07-22T03:34:16Z",
"updated_at": "2026-07-24T08:39:08Z",
"updated_at": "2026-07-25T11:47:40Z",
"pushed_at": "2026-07-22T03:56:16Z",
"stargazers_count": 14,
"watchers_count": 14,
"stargazers_count": 15,
"watchers_count": 15,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -1308,7 +1308,7 @@
],
"visibility": "public",
"forks": 3,
"watchers": 14,
"watchers": 15,
"score": 0,
"subscribers_count": 1
},
2026/CVE-2026-45250.json
+2 -2
View File
@@ -11,10 +11,10 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/venglin\/setcred",
"description": "CVE-2026-45250 - FreeBSD 14.x LPE",
"description": "CVE-2026-45250: FreeBSD 14.4 setcred kernel buffer overflow (LPE)",
"fork": false,
"created_at": "2026-05-21T04:40:37Z",
"updated_at": "2026-07-23T19:37:46Z",
"updated_at": "2026-07-25T07:25:29Z",
"pushed_at": "2026-07-23T19:37:39Z",
"stargazers_count": 22,
"watchers_count": 22,
2026/CVE-2026-45585.json
+6 -6
View File
@@ -212,8 +212,8 @@
"description": "Manage and recover BitLocker encrypted drives with this tool for Windows 11 recovery key management and educational study of CVE-2026-45585.",
"fork": false,
"created_at": "2026-06-16T07:21:36Z",
"updated_at": "2026-07-25T06:42:15Z",
"pushed_at": "2026-07-25T06:42:12Z",
"updated_at": "2026-07-25T12:34:59Z",
"pushed_at": "2026-07-25T12:34:44Z",
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
@@ -264,8 +264,8 @@
"description": "Manage BitLocker recovery keys, monitor drive encryption status, and unlock volumes through a portable interface for Windows.",
"fork": false,
"created_at": "2026-07-21T22:11:28Z",
"updated_at": "2026-07-25T04:24:34Z",
"pushed_at": "2026-07-25T04:24:07Z",
"updated_at": "2026-07-25T12:47:39Z",
"pushed_at": "2026-07-25T12:47:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -370,8 +370,8 @@
"description": "Manage BitLocker encrypted drives on Windows. Extract recovery keys, check encryption status, and apply security mitigations for CVE-2026-45585.",
"fork": false,
"created_at": "2026-07-25T02:47:26Z",
"updated_at": "2026-07-25T02:52:58Z",
"pushed_at": "2026-07-25T02:48:16Z",
"updated_at": "2026-07-25T12:48:13Z",
"pushed_at": "2026-07-25T12:47:50Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-48908.json
+4 -4
View File
@@ -139,10 +139,10 @@
"description": "CVE-2026-48908",
"fork": false,
"created_at": "2026-06-24T23:33:25Z",
"updated_at": "2026-06-25T00:21:23Z",
"updated_at": "2026-07-25T06:49:11Z",
"pushed_at": "2026-06-24T23:50:05Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -153,7 +153,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-50522.json
+33
View File
@@ -31,5 +31,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1311809592,
"name": "CVE-2026-50522",
"full_name": "4minx\/CVE-2026-50522",
"owner": {
"login": "4minx",
"id": 37972730,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/37972730?v=4",
"html_url": "https:\/\/github.com\/4minx",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/4minx\/CVE-2026-50522",
"description": "CVE-2026-50522 PoC",
"fork": false,
"created_at": "2026-07-25T08:23:28Z",
"updated_at": "2026-07-25T09:40:06Z",
"pushed_at": "2026-07-25T09:39:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-52910.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 5,
"forks_count": 6,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -31,7 +31,7 @@
"cve-2026-52910"
],
"visibility": "public",
"forks": 5,
"forks": 6,
"watchers": 10,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-54121.json
+39 -6
View File
@@ -14,12 +14,12 @@
"description": "Certighost POC",
"fork": false,
"created_at": "2026-07-23T18:54:34Z",
"updated_at": "2026-07-25T06:31:20Z",
"updated_at": "2026-07-25T12:08:32Z",
"pushed_at": "2026-07-24T03:40:25Z",
"stargazers_count": 117,
"watchers_count": 117,
"stargazers_count": 144,
"watchers_count": 144,
"has_discussions": false,
"forks_count": 25,
"forks_count": 29,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,41 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 25,
"watchers": 117,
"forks": 29,
"watchers": 144,
"score": 0,
"subscribers_count": 0
},
{
"id": 1311940121,
"name": "CVE-2026-54121",
"full_name": "0xBlackash\/CVE-2026-54121",
"owner": {
"login": "0xBlackash",
"id": 259905299,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/259905299?v=4",
"html_url": "https:\/\/github.com\/0xBlackash",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xBlackash\/CVE-2026-54121",
"description": "CVE-2026-54121",
"fork": false,
"created_at": "2026-07-25T11:50:21Z",
"updated_at": "2026-07-25T12:32:32Z",
"pushed_at": "2026-07-25T12:27:34Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-54415.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "PoC for CVE-2026-54415 — Azuriom CMS (<1.2.11) Broken Access Control → account takeover",
"fork": false,
"created_at": "2026-07-04T11:11:16Z",
"updated_at": "2026-07-12T18:29:51Z",
"updated_at": "2026-07-25T11:33:25Z",
"pushed_at": "2026-07-04T11:15:25Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-0560.json → 2026/CVE-2026-54900.json
+12 -12
View File
@@ -1,21 +1,21 @@
[
{
"id": 1309780003,
"name": "CVE-2026-0560-lollms",
"full_name": "Max78000\/CVE-2026-0560-lollms",
"id": 1311821892,
"name": "CVE-2026-54900",
"full_name": "HORKimhab\/CVE-2026-54900",
"owner": {
"login": "Max78000",
"id": 195171242,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/195171242?v=4",
"html_url": "https:\/\/github.com\/Max78000",
"login": "HORKimhab",
"id": 41143106,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41143106?v=4",
"html_url": "https:\/\/github.com\/HORKimhab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Max78000\/CVE-2026-0560-lollms",
"description": "Test server and PoC",
"html_url": "https:\/\/github.com\/HORKimhab\/CVE-2026-54900",
"description": "CVE-2026-54900, CVE-2026-54902 - Draft",
"fork": false,
"created_at": "2026-07-23T09:47:02Z",
"updated_at": "2026-07-23T10:20:53Z",
"pushed_at": "2026-07-23T10:20:49Z",
"created_at": "2026-07-25T08:42:47Z",
"updated_at": "2026-07-25T08:45:01Z",
"pushed_at": "2026-07-25T08:44:36Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-60206.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "cve cve-2026-60206 weblogic saml exploit poc vulnerability oracle scanner security",
"fork": false,
"created_at": "2026-07-24T02:30:11Z",
"updated_at": "2026-07-25T06:06:38Z",
"updated_at": "2026-07-25T09:26:38Z",
"pushed_at": "2026-07-24T02:46:31Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 4,
"watchers": 7,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-63030.json
+37 -4
View File
@@ -14,10 +14,10 @@
"description": "wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain",
"fork": false,
"created_at": "2026-07-17T20:18:33Z",
"updated_at": "2026-07-25T02:09:24Z",
"updated_at": "2026-07-25T08:09:58Z",
"pushed_at": "2026-07-23T09:23:48Z",
"stargazers_count": 515,
"watchers_count": 515,
"stargazers_count": 516,
"watchers_count": 516,
"has_discussions": false,
"forks_count": 127,
"allow_forking": true,
@@ -32,7 +32,7 @@
],
"visibility": "public",
"forks": 127,
"watchers": 515,
"watchers": 516,
"score": 0,
"subscribers_count": 2
},
@@ -2096,5 +2096,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1311965220,
"name": "WordPress-CVE-2026-63030-Analysis",
"full_name": "imXur\/WordPress-CVE-2026-63030-Analysis",
"owner": {
"login": "imXur",
"id": 216771172,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/216771172?v=4",
"html_url": "https:\/\/github.com\/imXur",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/imXur\/WordPress-CVE-2026-63030-Analysis",
"description": "Technical analysis, root cause breakdown, and non-destructive detection methodology for CVE-2026-63030.",
"fork": false,
"created_at": "2026-07-25T12:29:46Z",
"updated_at": "2026-07-25T12:38:03Z",
"pushed_at": "2026-07-25T12:37:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-64600.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-64600",
"fork": false,
"created_at": "2026-07-22T20:55:41Z",
"updated_at": "2026-07-24T23:00:31Z",
"updated_at": "2026-07-25T08:14:12Z",
"pushed_at": "2026-07-23T17:06:28Z",
"stargazers_count": 8,
"watchers_count": 8,
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 8,
"watchers": 9,
"score": 0,
"subscribers_count": 2
},
2026/CVE-2026-65694.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1311930124,
"name": "CVE-2026-65694-PoC",
"full_name": "abdugafforov-bobur\/CVE-2026-65694-PoC",
"owner": {
"login": "abdugafforov-bobur",
"id": 152521876,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/152521876?v=4",
"html_url": "https:\/\/github.com\/abdugafforov-bobur",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/abdugafforov-bobur\/CVE-2026-65694-PoC",
"description": "PoC for CVE-2026-65694 — Microweber CMS (<=2.0.20) unauthenticated path traversal → arbitrary file read (.env \/ secrets)",
"fork": false,
"created_at": "2026-07-25T11:33:15Z",
"updated_at": "2026-07-25T11:34:23Z",
"pushed_at": "2026-07-25T11:33:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-6330.json → 2026/CVE-2026-66374.json
+12 -12
View File
@@ -1,21 +1,21 @@
[
{
"id": 1309062118,
"name": "ml-kem-key-recovery",
"full_name": "007bsd\/ml-kem-key-recovery",
"id": 1310291342,
"name": "knot-doq",
"full_name": "venglin\/knot-doq",
"owner": {
"login": "007bsd",
"id": 22483432,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/22483432?v=4",
"html_url": "https:\/\/github.com\/007bsd",
"login": "venglin",
"id": 42781581,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42781581?v=4",
"html_url": "https:\/\/github.com\/venglin",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/007bsd\/ml-kem-key-recovery",
"description": "Full ML-KEM-1024 key recovery from a partial Fujisaki-Okamoto comparison in wolfSSL (CVE-2026-6330 NEON, CVE-2026-10097 AVX2)",
"html_url": "https:\/\/github.com\/venglin\/knot-doq",
"description": "CVE-2026-66374: Knot Resolver 6.3.0 DNS-over-QUIC heap overflow (RCE)",
"fork": false,
"created_at": "2026-07-22T17:03:53Z",
"updated_at": "2026-07-23T08:54:55Z",
"pushed_at": "2026-07-23T08:16:21Z",
"created_at": "2026-07-23T19:19:49Z",
"updated_at": "2026-07-25T07:25:41Z",
"pushed_at": "2026-07-23T19:32:16Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-6664.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1236864518,
"name": "bouncer-overflow",
"full_name": "nicolasjulian\/bouncer-overflow",
"owner": {
"login": "nicolasjulian",
"id": 33948000,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/33948000?v=4",
"html_url": "https:\/\/github.com\/nicolasjulian",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/nicolasjulian\/bouncer-overflow",
"description": "Working POC of CVE-2026-6664 written by Sonnet 4.6",
"fork": false,
"created_at": "2026-05-12T16:39:59Z",
"updated_at": "2026-05-12T17:01:47Z",
"pushed_at": "2026-05-12T16:44:57Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
README.md
+61 -30
View File
@@ -91,13 +91,6 @@
- [HORKimhab/CVE-2026-0542](https://github.com/HORKimhab/CVE-2026-0542)
### CVE-2026-0560 (2026-03-29)
<code>A Server-Side Request Forgery (SSRF) vulnerability exists in parisneo/lollms versions prior to 2.2.0, specifically in the `/api/files/export-content` endpoint. The `_download_image_to_temp()` function in `backend/routers/files.py` fails to validate user-controlled URLs, allowing attackers to make arbitrary HTTP requests to internal services and cloud metadata endpoints. This vulnerability can lead to internal network access, cloud metadata access, information disclosure, port scanning, and potentially remote code execution.
</code>
- [Max78000/CVE-2026-0560-lollms](https://github.com/Max78000/CVE-2026-0560-lollms)
### CVE-2026-0594 (2026-01-14)
<code>The List Site Contributors plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'alpha' parameter in versions up to, and including, 1.1.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
@@ -324,13 +317,6 @@
- [itsthalisman/cve-2026-3359-exp](https://github.com/itsthalisman/cve-2026-3359-exp)
### CVE-2026-3437 (2026-03-03)
<code>An improper restriction of operations within the bounds of a memory buffer vulnerability in Portwell Engineering Toolkits version 4.8.2 could allow a local authenticated attacker to read and write to arbitrary memory via the Portwell Engineering Toolkits driver. Successful exploitation of this vulnerability could result in escalation of privileges or cause a denial-of-service condition.
</code>
- [tihomirocrew/portwell-lpe](https://github.com/tihomirocrew/portwell-lpe)
### CVE-2026-3576 (2026-07-11)
<code>The Planyo Online Reservation System plugin for WordPress is vulnerable to Server-Side Request Forgery leading to Local File Inclusion in all versions up to, and including, 3.0. The ulap.php file acts as an AJAX proxy and is directly accessible without WordPress bootstrapping or any authentication. The send_http_post() function validates the host of the provided URL against an allowlist that includes 'localhost', but critically fails to validate the URL scheme/protocol. This makes it possible for unauthenticated attackers to supply a file:// URL (e.g., file://localhost/etc/passwd) which bypasses the host allowlist check because parse_url() returns 'localhost' as the host. The URL is then passed to curl_init() or fopen(), both of which support the file:// protocol, allowing the attacker to read arbitrary local files on the server and have their contents returned in the HTTP response. This can lead to disclosure of sensitive files such as /etc/passwd, wp-config.php (containing database credentials and authentication keys), and other server-side files.
@@ -678,13 +664,6 @@
- [0xsha/CVE-2026-6307](https://github.com/0xsha/CVE-2026-6307)
- [J4ck3LSyN-Gen2/CVE-2026-6307-Longinus](https://github.com/J4ck3LSyN-Gen2/CVE-2026-6307-Longinus)
### CVE-2026-6330 (2026-06-25)
<code>The ML-KEM ARM64 NEON ciphertext comparison only compares half of the input, breaking the Fujisaki-Okamoto transform's implicit rejection and weakening IND-CCA2 security on that code path. The constant-time comparison effectively ignored part of the re-encrypted ciphertext, so a decapsulating party could fail to detect a manipulated ciphertext and proceed without the standard's required implicit rejection.
</code>
- [007bsd/ml-kem-key-recovery](https://github.com/007bsd/ml-kem-key-recovery)
### CVE-2026-6421 (2026-04-17)
<code>A vulnerability has been found in Mobatek MobaXterm Home Edition up to 26.1. This affects an unknown part in the library msimg32.dll. The manipulation leads to uncontrolled search path. An attack has to be approached locally. The attack is considered to have high complexity. It is indicated that the exploitability is difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 26.2 is able to mitigate this issue. It is suggested to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
@@ -706,6 +685,13 @@
- [jackalkarlos/EvilAhenk](https://github.com/jackalkarlos/EvilAhenk)
### CVE-2026-6664 (2026-05-09)
<code>An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash. An unauthenticated remote attacker can crash PgBouncer with a malformed SCRAM authentication packet.
</code>
- [nicolasjulian/bouncer-overflow](https://github.com/nicolasjulian/bouncer-overflow)
### CVE-2026-6741 (2026-04-27)
<code>The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Privilege Escalation in versions up to and including 5.4.1. This is due to a missing authorization check in the execute() method of the connect-customer-to-wp-user ability, which only requires the customer__edit capability granted to the latepoint_agent role by default, without verifying whether the target WordPress user ID belongs to a privileged account. This makes it possible for authenticated attackers with the latepoint_agent role to link any LatePoint customer record to an administrator's WordPress account and subsequently reset the administrator's password via the normal customer password-reset flow, resulting in full site takeover.
@@ -1378,6 +1364,13 @@
- [0xBlackash/CVE-2026-12485](https://github.com/0xBlackash/CVE-2026-12485)
### CVE-2026-12960 (2026-07-03)
<code>An Improper Export of Android Application Components vulnerability in ASUS Router App allows a third-party application on the same device to send a crafted Intent that causes ASUS Router App to open an specified URL.\nRefer to the '\nSecurity Update for ASUS Router Android App ' section on the ASUS Security Advisory for more information.
</code>
- [l0lsec/CVE-2026-12960](https://github.com/l0lsec/CVE-2026-12960)
### CVE-2026-13001 (2026-07-14)
<code>The Podlove Podcast Publisher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'podlove_handle_cache_files' function in all versions up to, and including, 4.5.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
@@ -1426,6 +1419,7 @@
### CVE-2026-14266
- [hg0434hongzh0/CVE-2026-14266](https://github.com/hg0434hongzh0/CVE-2026-14266)
- [4minx/CVE-2026-14266](https://github.com/4minx/CVE-2026-14266)
- [liyuxuan504-byte/CVE-2026-14266](https://github.com/liyuxuan504-byte/CVE-2026-14266)
### CVE-2026-14382 (2026-07-01)
@@ -2576,7 +2570,6 @@
- [kinryulabs/rootpacket-cve-2026-31431](https://github.com/kinryulabs/rootpacket-cve-2026-31431)
- [SugiB3o/CVE-2026-31431](https://github.com/SugiB3o/CVE-2026-31431)
- [jihwan77/Linux-Kernel-Copy-Fail-CVE-2026-31431-](https://github.com/jihwan77/Linux-Kernel-Copy-Fail-CVE-2026-31431-)
- [LeoxSoft/CVE-2026-31431](https://github.com/LeoxSoft/CVE-2026-31431)
### CVE-2026-31525 (2026-04-22)
@@ -3558,6 +3551,7 @@
- [mawussid/CVE-2026-41651-Python](https://github.com/mawussid/CVE-2026-41651-Python)
- [Lutfifakee-Project/CVE-2026-41651](https://github.com/Lutfifakee-Project/CVE-2026-41651)
- [0xDVRK/CVE-2026-41651](https://github.com/0xDVRK/CVE-2026-41651)
### CVE-2026-41729 (2026-06-09)
@@ -5202,6 +5196,7 @@
</code>
- [HORKimhab/CVE-2026-50522](https://github.com/HORKimhab/CVE-2026-50522)
- [4minx/CVE-2026-50522](https://github.com/4minx/CVE-2026-50522)
### CVE-2026-50656 (2026-06-16)
@@ -5455,6 +5450,7 @@
</code>
- [aniqfakhrul/CVE-2026-54121](https://github.com/aniqfakhrul/CVE-2026-54121)
- [0xBlackash/CVE-2026-54121](https://github.com/0xBlackash/CVE-2026-54121)
### CVE-2026-54161
- [ja-errorpro/CVE-2026-54161](https://github.com/ja-errorpro/CVE-2026-54161)
@@ -5554,6 +5550,13 @@
- [izxci/CVE-2026-54807](https://github.com/izxci/CVE-2026-54807)
### CVE-2026-54900 (2026-06-30)
<code>Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to 3.17.2, when in usual mode with create_id enabled, Oj::Parser#parse is vulnerable to heap corruption via a negative-size memcpy. When a JSON object key is exactly 65,535 bytes long, an integer truncation in form_attr (usual.c:63) converts the length to -1 before passing it to memcpy. This causes memcpy to copy SIZE_MAX bytes (interpreted as a huge size_t), corrupting heap memory and crashing the process. The issue has been fixed in version 3.17.2.
</code>
- [HORKimhab/CVE-2026-54900](https://github.com/HORKimhab/CVE-2026-54900)
### CVE-2026-54992 (2026-07-14)
<code>Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code locally.
@@ -5933,6 +5936,7 @@
- [razureink/cve-2026-63030_60137-wordpress_rce_reproduction](https://github.com/razureink/cve-2026-63030_60137-wordpress_rce_reproduction)
- [Giangdurian/CVE-2026-63030-CVE-2026-60137](https://github.com/Giangdurian/CVE-2026-63030-CVE-2026-60137)
- [shinthink/CVE-2026-63030](https://github.com/shinthink/CVE-2026-63030)
- [imXur/WordPress-CVE-2026-63030-Analysis](https://github.com/imXur/WordPress-CVE-2026-63030-Analysis)
### CVE-2026-63766 (2026-07-20)
@@ -5957,6 +5961,13 @@
- [swornim619/CVE-2026-65650](https://github.com/swornim619/CVE-2026-65650)
### CVE-2026-65694 (2026-07-23)
<code>Microweber CMS through 2.0.20 contains a path traversal vulnerability in the static file controller that allows unauthenticated remote attackers to read arbitrary files by supplying directory traversal sequences in the path query parameter. Attackers can send a single unauthenticated HTTP GET request exploiting the failure of normalize_path() to strip traversal sequences, disclosing sensitive files such as environment configuration files containing credentials and system files.
</code>
- [abdugafforov-bobur/CVE-2026-65694-PoC](https://github.com/abdugafforov-bobur/CVE-2026-65694-PoC)
### CVE-2026-65761 (2026-07-23)
<code>Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1 - Improper validation of order parameters lead to an unauthenticated SQL injection in easystore, allowing full DB read access including credentials and sessions.
@@ -5967,6 +5978,13 @@
### CVE-2026-65971
- [BiiTts/POC-CVE-2026-65971](https://github.com/BiiTts/POC-CVE-2026-65971)
### CVE-2026-66374 (2026-07-25)
<code>Knot Resolver before 6.4.1 allows remote code execution via a heap-based buffer overflow in the DoQ (DNS-over-QUIC) receive path.
</code>
- [venglin/knot-doq](https://github.com/venglin/knot-doq)
### CVE-2026-69212
- [c0gnit00/CVE-2026-69212](https://github.com/c0gnit00/CVE-2026-69212)
@@ -46126,6 +46144,13 @@
- [kaisersource/CVE-2021-3166](https://github.com/kaisersource/CVE-2021-3166)
### CVE-2021-3262 (2023-08-29)
<code>TripSpark VEO Transportation-2.2.x-XP_BB-20201123-184084 NovusEDU-2.2.x-XP_BB-20201123-184084 allows unsafe data inputs in POST body parameters from end users without sanitizing using server-side logic. It was possible to inject custom SQL commands into the &quot;Student Busing Information&quot; search queries.
</code>
- [l0lsec/CVE-2021-3262](https://github.com/l0lsec/CVE-2021-3262)
### CVE-2021-3281 (2021-02-02)
<code>In Django 2.2 before 2.2.18, 3.0 before 3.0.12, and 3.1 before 3.1.6, the django.utils.archive.extract method (used by &quot;startapp --template&quot; and &quot;startproject --template&quot;) allows directory traversal via an archive with absolute paths or relative paths with dot segments.
@@ -47832,6 +47857,13 @@
- [gal-nagli/CVE-2021-26832](https://github.com/gal-nagli/CVE-2021-26832)
### CVE-2021-26837 (2023-09-18)
<code>SQL Injection vulnerability in SearchTextBox parameter in Fortra (Formerly HelpSystems) DeliverNow before version 1.2.18, allows attackers to execute arbitrary code, escalate privileges, and gain sensitive information.
</code>
- [l0lsec/CVE-2021-26837](https://github.com/l0lsec/CVE-2021-26837)
### CVE-2021-26855 (2021-03-02)
<code>Microsoft Exchange Server Remote Code Execution Vulnerability
@@ -50359,7 +50391,6 @@
- [kubota/POC-CVE-2021-41773](https://github.com/kubota/POC-CVE-2021-41773)
- [xMohamed0/CVE-2021-41773](https://github.com/xMohamed0/CVE-2021-41773)
- [skentagon/CVE-2021-41773](https://github.com/skentagon/CVE-2021-41773)
- [bernardas/netsec-polygon](https://github.com/bernardas/netsec-polygon)
- [wangfly-me/Apache_Penetration_Tool](https://github.com/wangfly-me/Apache_Penetration_Tool)
- [Habib0x0/CVE-2021-41773](https://github.com/Habib0x0/CVE-2021-41773)
- [pwn3z/CVE-2021-41773-Apache-RCE](https://github.com/pwn3z/CVE-2021-41773-Apache-RCE)
@@ -50893,13 +50924,6 @@
- [DarkSprings/CVE-2021-43267-POC](https://github.com/DarkSprings/CVE-2021-43267-POC)
- [zzhacked/CVE-2021-43267](https://github.com/zzhacked/CVE-2021-43267)
### CVE-2021-43287 (2022-04-14)
<code>An issue was discovered in ThoughtWorks GoCD before 21.3.0. The business continuity add-on, which is enabled by default, leaks all secrets known to the GoCD server to unauthenticated attackers.
</code>
- [Wrin9/CVE-2021-43287](https://github.com/Wrin9/CVE-2021-43287)
### CVE-2021-43326 (2021-12-15)
<code>Automox Agent before 32 on Windows incorrectly sets permissions on a temporary directory.
@@ -53358,6 +53382,13 @@
- [hackerlawyer/CVE-2020-5142-POC-MB](https://github.com/hackerlawyer/CVE-2020-5142-POC-MB)
### CVE-2020-5148 (2021-03-05)
<code>SonicWall SSO-agent default configuration uses NetAPI to probe the associated IP's in the network, this client probing method allows a potential attacker to capture the password hash of the privileged user and potentially forces the SSO Agent to authenticate allowing an attacker to bypass firewall access controls.
</code>
- [l0lsec/CVE-2020-5148](https://github.com/l0lsec/CVE-2020-5148)
### CVE-2020-5236 (2020-02-04)
<code>Waitress version 1.4.2 allows a DOS attack When waitress receives a header that contains invalid characters. When a header like &quot;Bad-header: xxxxxxxxxxxxxxx\x10&quot; is received, it will cause the regular expression engine to catastrophically backtrack causing the process to use 100% CPU time and blocking any other interactions. This allows an attacker to send a single request with an invalid header and take the service offline. This issue was introduced in version 1.4.2 when the regular expression was updated to attempt to match the behaviour required by errata associated with RFC7230. The regular expression that is used to validate incoming headers has been updated in version 1.4.3, it is recommended that people upgrade to the new version of Waitress as soon as possible.