nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/07/22 00:49:07

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-07-22 09:49:07 +09:00
1 parent 75714a8ac8
commit 539c8778fb
89 files changed
+1021 -536
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2011/CVE-2011-2523.json
+4 -4
View File
@@ -318,10 +318,10 @@
"description": "Python exploit for vsftpd 2.3.4 - Backdoor Command Execution",
"fork": false,
"created_at": "2023-05-09T18:44:05Z",
"updated_at": "2026-05-31T23:22:44Z",
"updated_at": "2026-07-21T18:23:45Z",
"pushed_at": "2023-05-09T19:14:25Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -341,7 +341,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 5,
"watchers": 4,
"score": 0,
"subscribers_count": 1
},
2016/CVE-2016-5195.json
+2 -2
View File
@@ -495,7 +495,7 @@
"stargazers_count": 937,
"watchers_count": 937,
"has_discussions": false,
"forks_count": 427,
"forks_count": 426,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -507,7 +507,7 @@
"exploit"
],
"visibility": "public",
"forks": 427,
"forks": 426,
"watchers": 937,
"score": 0,
"subscribers_count": 1
2017/CVE-2017-1000112.json
+33
View File
@@ -130,5 +130,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1308002175,
"name": "CVE-2017-1000112",
"full_name": "WhatsWrongAndWhy\/CVE-2017-1000112",
"owner": {
"login": "WhatsWrongAndWhy",
"id": 158827278,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/158827278?v=4",
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy\/CVE-2017-1000112",
"description": null,
"fork": false,
"created_at": "2026-07-21T18:19:10Z",
"updated_at": "2026-07-21T18:21:09Z",
"pushed_at": "2026-07-21T18:20:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2017/CVE-2017-16995.json
+33
View File
@@ -464,5 +464,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1308005045,
"name": "CVE-2017-16995",
"full_name": "WhatsWrongAndWhy\/CVE-2017-16995",
"owner": {
"login": "WhatsWrongAndWhy",
"id": 158827278,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/158827278?v=4",
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy\/CVE-2017-16995",
"description": null,
"fork": false,
"created_at": "2026-07-21T18:22:42Z",
"updated_at": "2026-07-21T18:25:11Z",
"pushed_at": "2026-07-21T18:23:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2017/CVE-2017-7308.json
+33
View File
@@ -31,5 +31,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 1308007298,
"name": "CVE-2017-7308",
"full_name": "WhatsWrongAndWhy\/CVE-2017-7308",
"owner": {
"login": "WhatsWrongAndWhy",
"id": 158827278,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/158827278?v=4",
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy\/CVE-2017-7308",
"description": null,
"fork": false,
"created_at": "2026-07-21T18:25:37Z",
"updated_at": "2026-07-21T18:28:12Z",
"pushed_at": "2026-07-21T18:26:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2018/CVE-2018-18955.json
+33
View File
@@ -37,5 +37,38 @@
"watchers": 24,
"score": 0,
"subscribers_count": 1
},
{
"id": 1308012116,
"name": "CVE-2018-18955",
"full_name": "WhatsWrongAndWhy\/CVE-2018-18955",
"owner": {
"login": "WhatsWrongAndWhy",
"id": 158827278,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/158827278?v=4",
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy\/CVE-2018-18955",
"description": null,
"fork": false,
"created_at": "2026-07-21T18:31:48Z",
"updated_at": "2026-07-21T18:33:47Z",
"pushed_at": "2026-07-21T18:32:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2018/CVE-2018-3214.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "my exploit for PrimeFaces EL Injection",
"fork": false,
"created_at": "2026-07-21T05:36:23Z",
"updated_at": "2026-07-21T06:11:24Z",
"pushed_at": "2026-07-21T06:11:01Z",
"updated_at": "2026-07-21T18:56:18Z",
"pushed_at": "2026-07-21T18:55:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2018/CVE-2018-5333.json
+33
View File
@@ -31,5 +31,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 1308013611,
"name": "CVE-2018-5333",
"full_name": "WhatsWrongAndWhy\/CVE-2018-5333",
"owner": {
"login": "WhatsWrongAndWhy",
"id": 158827278,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/158827278?v=4",
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy\/CVE-2018-5333",
"description": null,
"fork": false,
"created_at": "2026-07-21T18:33:43Z",
"updated_at": "2026-07-21T18:35:29Z",
"pushed_at": "2026-07-21T18:34:57Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2018/CVE-2018-7600.json
+4 -4
View File
@@ -87,10 +87,10 @@
"description": "Exploit for Drupal v7.x + v8.x (Drupalgeddon 2 \/ CVE-2018-7600 \/ SA-CORE-2018-002)",
"fork": false,
"created_at": "2018-04-12T22:53:14Z",
"updated_at": "2026-06-12T21:41:33Z",
"updated_at": "2026-07-21T21:37:28Z",
"pushed_at": "2021-01-08T10:31:22Z",
"stargazers_count": 599,
"watchers_count": 599,
"stargazers_count": 600,
"watchers_count": 600,
"has_discussions": false,
"forks_count": 170,
"allow_forking": true,
@@ -111,7 +111,7 @@
],
"visibility": "public",
"forks": 170,
"watchers": 599,
"watchers": 600,
"score": 0,
"subscribers_count": 22
},
2019/CVE-2019-0708.json
+10 -10
View File
@@ -1946,10 +1946,10 @@
"description": "Proof of concept for CVE-2019-0708",
"fork": false,
"created_at": "2019-05-29T16:53:54Z",
"updated_at": "2026-07-18T12:56:06Z",
"updated_at": "2026-07-21T18:23:39Z",
"pushed_at": "2026-03-16T15:23:32Z",
"stargazers_count": 1182,
"watchers_count": 1182,
"stargazers_count": 1181,
"watchers_count": 1181,
"has_discussions": false,
"forks_count": 333,
"allow_forking": true,
@@ -1960,7 +1960,7 @@
"topics": [],
"visibility": "public",
"forks": 333,
"watchers": 1182,
"watchers": 1181,
"score": 0,
"subscribers_count": 66
},
@@ -2045,12 +2045,12 @@
"description": "An Attempt to Port BlueKeep PoC from @Ekultek to actual exploits",
"fork": false,
"created_at": "2019-05-31T00:04:12Z",
"updated_at": "2026-04-23T18:57:27Z",
"updated_at": "2026-07-21T18:23:40Z",
"pushed_at": "2021-01-10T04:31:22Z",
"stargazers_count": 344,
"watchers_count": 344,
"stargazers_count": 343,
"watchers_count": 343,
"has_discussions": false,
"forks_count": 123,
"forks_count": 122,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2058,8 +2058,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 123,
"watchers": 344,
"forks": 122,
"watchers": 343,
"score": 0,
"subscribers_count": 1
},
2019/CVE-2019-10149.json
+1 -1
View File
@@ -367,7 +367,7 @@
"forks": 1,
"watchers": 3,
"score": 0,
"subscribers_count": 9
"subscribers_count": 10
},
{
"id": 390790949,
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-07-21T17:58:06Z",
"pushed_at": "2026-07-21T17:57:51Z",
"updated_at": "2026-07-21T23:40:40Z",
"pushed_at": "2026-07-21T23:40:36Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2019/CVE-2019-17625.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Working exploit code for CVE-2019-17625",
"fork": false,
"created_at": "2019-10-31T03:40:07Z",
"updated_at": "2025-11-19T17:47:42Z",
"updated_at": "2026-07-21T18:23:40Z",
"pushed_at": "2020-03-12T18:22:19Z",
"stargazers_count": 19,
"watchers_count": 19,
"stargazers_count": 18,
"watchers_count": 18,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 19,
"watchers": 18,
"score": 0,
"subscribers_count": 1
}
2019/CVE-2019-8781.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "macOS Kernel Exploit for CVE-2019-8781. ",
"fork": false,
"created_at": "2019-09-17T17:59:26Z",
"updated_at": "2026-05-13T19:46:45Z",
"updated_at": "2026-07-21T18:23:40Z",
"pushed_at": "2019-10-15T17:05:38Z",
"stargazers_count": 293,
"watchers_count": 293,
"stargazers_count": 292,
"watchers_count": 292,
"has_discussions": false,
"forks_count": 43,
"allow_forking": true,
@@ -32,7 +32,7 @@
],
"visibility": "public",
"forks": 43,
"watchers": 293,
"watchers": 292,
"score": 0,
"subscribers_count": 11
},
2019/CVE-2019-9506.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "Key Negotiation Of Bluetooth (KNOB) attacks on Bluetooth BR\/EDR and BLE [CVE-2019-9506]",
"fork": false,
"created_at": "2019-08-15T11:54:21Z",
"updated_at": "2026-05-20T01:42:35Z",
"updated_at": "2026-07-21T18:23:40Z",
"pushed_at": "2022-04-04T15:16:08Z",
"stargazers_count": 186,
"watchers_count": 186,
"stargazers_count": 185,
"watchers_count": 185,
"has_discussions": false,
"forks_count": 38,
"forks_count": 37,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -37,8 +37,8 @@
"wireless"
],
"visibility": "public",
"forks": 38,
"watchers": 186,
"forks": 37,
"watchers": 185,
"score": 0,
"subscribers_count": 10
},
2020/CVE-2020-1472.json
+2 -2
View File
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-07-21T17:04:15Z",
"pushed_at": "2026-07-21T17:03:59Z",
"updated_at": "2026-07-21T23:38:32Z",
"pushed_at": "2026-07-21T23:38:27Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2020/CVE-2020-1938.json
+2 -2
View File
@@ -718,7 +718,7 @@
"stargazers_count": 20,
"watchers_count": 20,
"has_discussions": false,
"forks_count": 12,
"forks_count": 13,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -726,7 +726,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 12,
"forks": 13,
"watchers": 20,
"score": 0,
"subscribers_count": 1
2020/CVE-2020-27194.json
+33
View File
@@ -64,5 +64,38 @@
"watchers": 14,
"score": 0,
"subscribers_count": 1
},
{
"id": 1308017170,
"name": "CVE-2020-27194",
"full_name": "WhatsWrongAndWhy\/CVE-2020-27194",
"owner": {
"login": "WhatsWrongAndWhy",
"id": 158827278,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/158827278?v=4",
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy\/CVE-2020-27194",
"description": null,
"fork": false,
"created_at": "2026-07-21T18:38:23Z",
"updated_at": "2026-07-21T18:40:48Z",
"pushed_at": "2026-07-21T18:40:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2020/CVE-2020-8835.json
+33
View File
@@ -196,5 +196,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 1308019298,
"name": "CVE-2020-8835",
"full_name": "WhatsWrongAndWhy\/CVE-2020-8835",
"owner": {
"login": "WhatsWrongAndWhy",
"id": 158827278,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/158827278?v=4",
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy\/CVE-2020-8835",
"description": null,
"fork": false,
"created_at": "2026-07-21T18:41:01Z",
"updated_at": "2026-07-21T18:42:49Z",
"pushed_at": "2026-07-21T18:41:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2021/CVE-2021-21980.json
-33
View File
@@ -32,39 +32,6 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 489669248,
"name": "westone-CVE-2022-1388-scanner",
"full_name": "Osyanina\/westone-CVE-2022-1388-scanner",
"owner": {
"login": "Osyanina",
"id": 78467376,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78467376?v=4",
"html_url": "https:\/\/github.com\/Osyanina",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Osyanina\/westone-CVE-2022-1388-scanner",
"description": "A vulnerability scanner that detects CVE-2021-21980 vulnerabilities.",
"fork": false,
"created_at": "2022-05-07T12:36:41Z",
"updated_at": "2022-05-07T12:37:01Z",
"pushed_at": "2022-05-07T12:41:34Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 1105051109,
"name": "cve-2021-21980-nuclei-poc",
2021/CVE-2021-22555.json
+33
View File
@@ -399,5 +399,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1308020598,
"name": "CVE-2021-22555",
"full_name": "WhatsWrongAndWhy\/CVE-2021-22555",
"owner": {
"login": "WhatsWrongAndWhy",
"id": 158827278,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/158827278?v=4",
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy\/CVE-2021-22555",
"description": null,
"fork": false,
"created_at": "2026-07-21T18:42:43Z",
"updated_at": "2026-07-21T18:43:43Z",
"pushed_at": "2026-07-21T18:43:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2021/CVE-2021-24762.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "This repo shows an exploit to CVE-2021-24762. This is an Blind SQLi exploit that, on default config, greps the admin password.",
"fork": false,
"created_at": "2025-10-15T12:33:44Z",
"updated_at": "2026-03-01T16:54:05Z",
"updated_at": "2026-07-21T20:12:41Z",
"pushed_at": "2025-10-15T13:04:55Z",
"stargazers_count": 1,
"watchers_count": 1,
2021/CVE-2021-25837.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 486821585,
"name": "Ethermint-CVE-2021-25837",
"full_name": "iczc\/Ethermint-CVE-2021-25837",
"owner": {
"login": "iczc",
"id": 12002459,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/12002459?v=4",
"html_url": "https:\/\/github.com\/iczc",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/iczc\/Ethermint-CVE-2021-25837",
"description": null,
"fork": false,
"created_at": "2022-04-29T03:12:27Z",
"updated_at": "2022-08-17T13:55:40Z",
"pushed_at": "2022-05-05T06:10:24Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"score": 0,
"subscribers_count": 1
}
]
2024/CVE-2024-8277.json → 2021/CVE-2021-27365.json
+12 -12
View File
@@ -1,21 +1,21 @@
[
{
"id": 856416225,
"name": "CVE-2024-8277",
"full_name": "PolatBey\/CVE-2024-8277",
"id": 1308023118,
"name": "CVE-2021-27365",
"full_name": "WhatsWrongAndWhy\/CVE-2021-27365",
"owner": {
"login": "PolatBey",
"id": 25030792,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25030792?v=4",
"html_url": "https:\/\/github.com\/PolatBey",
"login": "WhatsWrongAndWhy",
"id": 158827278,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/158827278?v=4",
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/PolatBey\/CVE-2024-8277",
"description": "CVE-2024-8277 - 0Day Auto Exploit Authentication Bypass in WooCommerce Photo Reviews Plugin",
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy\/CVE-2021-27365",
"description": null,
"fork": false,
"created_at": "2024-09-12T14:40:59Z",
"updated_at": "2024-09-12T14:40:59Z",
"pushed_at": "2024-09-12T14:41:35Z",
"created_at": "2026-07-21T18:45:56Z",
"updated_at": "2026-07-21T18:47:30Z",
"pushed_at": "2026-07-21T18:46:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2021/CVE-2021-46108.json → 2021/CVE-2021-31440.json
+13 -13
View File
@@ -1,21 +1,21 @@
[
{
"id": 454438577,
"name": "CVE-2021-46108",
"full_name": "g-rubert\/CVE-2021-46108",
"id": 1308025047,
"name": "CVE-2021-31440",
"full_name": "WhatsWrongAndWhy\/CVE-2021-31440",
"owner": {
"login": "g-rubert",
"id": 40837605,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/40837605?v=4",
"html_url": "https:\/\/github.com\/g-rubert",
"login": "WhatsWrongAndWhy",
"id": 158827278,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/158827278?v=4",
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/g-rubert\/CVE-2021-46108",
"description": " Stored Cross-Site Scripting - D-Link",
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy\/CVE-2021-31440",
"description": null,
"fork": false,
"created_at": "2022-02-01T15:21:15Z",
"updated_at": "2022-02-01T15:37:47Z",
"pushed_at": "2022-05-05T14:58:22Z",
"created_at": "2026-07-21T18:48:23Z",
"updated_at": "2026-07-21T18:51:04Z",
"pushed_at": "2026-07-21T18:49:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -30,6 +30,6 @@
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
"subscribers_count": 0
}
]
2021/CVE-2021-3156.json
+33
View File
@@ -2820,5 +2820,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1308026966,
"name": "CVE-2021-3156",
"full_name": "WhatsWrongAndWhy\/CVE-2021-3156",
"owner": {
"login": "WhatsWrongAndWhy",
"id": 158827278,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/158827278?v=4",
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy\/CVE-2021-3156",
"description": null,
"fork": false,
"created_at": "2026-07-21T18:50:54Z",
"updated_at": "2026-07-21T18:52:00Z",
"pushed_at": "2026-07-21T18:51:55Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-07-21T18:01:06Z",
"pushed_at": "2026-07-21T17:59:36Z",
"updated_at": "2026-07-21T23:56:23Z",
"pushed_at": "2026-07-21T23:56:18Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-3490.json
+33
View File
@@ -130,5 +130,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1308030284,
"name": "CVE-2021-3490",
"full_name": "WhatsWrongAndWhy\/CVE-2021-3490",
"owner": {
"login": "WhatsWrongAndWhy",
"id": 158827278,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/158827278?v=4",
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy\/CVE-2021-3490",
"description": null,
"fork": false,
"created_at": "2026-07-21T18:55:06Z",
"updated_at": "2026-07-21T18:57:53Z",
"pushed_at": "2026-07-21T18:55:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2021/CVE-2021-3493.json
+33
View File
@@ -592,5 +592,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1308031896,
"name": "CVE-2021-3493",
"full_name": "WhatsWrongAndWhy\/CVE-2021-3493",
"owner": {
"login": "WhatsWrongAndWhy",
"id": 158827278,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/158827278?v=4",
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy\/CVE-2021-3493",
"description": null,
"fork": false,
"created_at": "2026-07-21T18:57:05Z",
"updated_at": "2026-07-21T18:59:51Z",
"pushed_at": "2026-07-21T18:57:32Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2021/CVE-2021-3560.json
-33
View File
@@ -437,39 +437,6 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 487080832,
"name": "CVE-2021-3560-Authentication-Agent",
"full_name": "RicterZ\/CVE-2021-3560-Authentication-Agent",
"owner": {
"login": "RicterZ",
"id": 5282759,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5282759?v=4",
"html_url": "https:\/\/github.com\/RicterZ",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/RicterZ\/CVE-2021-3560-Authentication-Agent",
"description": "PolicyKit CVE-2021-3560 Exploit (Authentication Agent)",
"fork": false,
"created_at": "2022-04-29T18:57:30Z",
"updated_at": "2026-05-23T10:53:21Z",
"pushed_at": "2022-05-02T07:49:01Z",
"stargazers_count": 116,
"watchers_count": 116,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 116,
"score": 0,
"subscribers_count": 2
},
{
"id": 487194704,
"name": "CVE-2021-3560",
2021/CVE-2021-36394.json
-33
View File
@@ -31,38 +31,5 @@
"watchers": 13,
"score": 0,
"subscribers_count": 1
},
{
"id": 485686630,
"name": "CVE-2021-36394-Pre-Auth-RCE-in-Moodle",
"full_name": "lavclash75\/CVE-2021-36394-Pre-Auth-RCE-in-Moodle",
"owner": {
"login": "lavclash75",
"id": 46343695,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/46343695?v=4",
"html_url": "https:\/\/github.com\/lavclash75",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/lavclash75\/CVE-2021-36394-Pre-Auth-RCE-in-Moodle",
"description": null,
"fork": false,
"created_at": "2022-04-26T07:52:24Z",
"updated_at": "2024-11-24T16:37:06Z",
"pushed_at": "2022-05-02T17:17:16Z",
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 10,
"score": 0,
"subscribers_count": 1
}
]
2021/CVE-2021-39174.json
-33
View File
@@ -1,37 +1,4 @@
[
{
"id": 488350819,
"name": "CVE-2021-39174-PoC",
"full_name": "n0kovo\/CVE-2021-39174-PoC",
"owner": {
"login": "n0kovo",
"id": 16690056,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16690056?v=4",
"html_url": "https:\/\/github.com\/n0kovo",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/n0kovo\/CVE-2021-39174-PoC",
"description": "Cachet configuration leak dumper. CVE-2021-39174 PoC.",
"fork": false,
"created_at": "2022-05-03T20:17:23Z",
"updated_at": "2025-08-24T00:23:22Z",
"pushed_at": "2022-05-03T20:17:59Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 4,
"score": 0,
"subscribers_count": 1
},
{
"id": 505899527,
"name": "cachet_2.4.0-dev",
2021/CVE-2021-40444.json
+4 -4
View File
@@ -245,10 +245,10 @@
"description": "CVE-2021-40444 PoC",
"fork": false,
"created_at": "2021-09-10T16:55:53Z",
"updated_at": "2026-07-21T08:29:26Z",
"updated_at": "2026-07-21T20:20:00Z",
"pushed_at": "2021-12-25T18:31:02Z",
"stargazers_count": 1773,
"watchers_count": 1773,
"stargazers_count": 1774,
"watchers_count": 1774,
"has_discussions": false,
"forks_count": 476,
"allow_forking": true,
@@ -259,7 +259,7 @@
"topics": [],
"visibility": "public",
"forks": 476,
"watchers": 1773,
"watchers": 1774,
"score": 0,
"subscribers_count": 27
},
2024/CVE-2024-50491.json → 2021/CVE-2021-41073.json
+13 -13
View File
@@ -1,21 +1,21 @@
[
{
"id": 915564003,
"name": "CVE-2024-50491",
"full_name": "RandomRobbieBF\/CVE-2024-50491",
"id": 1308033307,
"name": "CVE-2021-41073",
"full_name": "WhatsWrongAndWhy\/CVE-2021-41073",
"owner": {
"login": "RandomRobbieBF",
"id": 51722811,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
"html_url": "https:\/\/github.com\/RandomRobbieBF",
"login": "WhatsWrongAndWhy",
"id": 158827278,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/158827278?v=4",
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-50491",
"description": "RSVP ME <= 1.9.9 - Unauthenticated SQL Injection",
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy\/CVE-2021-41073",
"description": null,
"fork": false,
"created_at": "2025-01-12T07:26:48Z",
"updated_at": "2026-07-08T12:35:15Z",
"pushed_at": "2025-01-12T07:27:46Z",
"created_at": "2026-07-21T18:58:54Z",
"updated_at": "2026-07-21T18:59:25Z",
"pushed_at": "2026-07-21T18:59:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -30,6 +30,6 @@
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
"subscribers_count": 0
}
]
2021/CVE-2021-42008.json
+33
View File
@@ -64,5 +64,38 @@
"watchers": 30,
"score": 0,
"subscribers_count": 1
},
{
"id": 1308034530,
"name": "CVE-2021-42008",
"full_name": "WhatsWrongAndWhy\/CVE-2021-42008",
"owner": {
"login": "WhatsWrongAndWhy",
"id": 158827278,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/158827278?v=4",
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/WhatsWrongAndWhy\/CVE-2021-42008",
"description": null,
"fork": false,
"created_at": "2026-07-21T19:00:30Z",
"updated_at": "2026-07-21T19:01:54Z",
"pushed_at": "2026-07-21T19:00:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2021/CVE-2021-45232.json
-33
View File
@@ -232,38 +232,5 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 490272524,
"name": "Apisix_Crack",
"full_name": "YutuSec\/Apisix_Crack",
"owner": {
"login": "YutuSec",
"id": 41934714,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41934714?v=4",
"html_url": "https:\/\/github.com\/YutuSec",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/YutuSec\/Apisix_Crack",
"description": "Apisix系列漏洞：未授权漏洞（CVE-2021-45232）、默认秘钥（CVE-2020-13945）批量探测。",
"fork": false,
"created_at": "2022-05-09T12:26:11Z",
"updated_at": "2026-05-24T14:17:25Z",
"pushed_at": "2022-05-09T12:32:43Z",
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 8,
"score": 0,
"subscribers_count": 1
}
]
2022/CVE-2022-26937.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 85,
"watchers_count": 85,
"has_discussions": false,
"forks_count": 23,
"forks_count": 22,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 23,
"forks": 22,
"watchers": 85,
"score": 0,
"subscribers_count": 3
2022/CVE-2022-27255.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 284,
"watchers_count": 284,
"has_discussions": false,
"forks_count": 54,
"forks_count": 53,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 54,
"forks": 53,
"watchers": 284,
"score": 0,
"subscribers_count": 14
2022/CVE-2022-35914.json
+33
View File
@@ -262,5 +262,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 1308124406,
"name": "CVE-2022-35914",
"full_name": "YumeSecurity\/CVE-2022-35914",
"owner": {
"login": "YumeSecurity",
"id": 307403331,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/307403331?v=4",
"html_url": "https:\/\/github.com\/YumeSecurity",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/YumeSecurity\/CVE-2022-35914",
"description": "my exploit for GLPI",
"fork": false,
"created_at": "2026-07-21T21:08:58Z",
"updated_at": "2026-07-21T21:12:23Z",
"pushed_at": "2026-07-21T21:11:52Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2023/CVE-2023-20696.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Cert exploit for MTK devices.There is a logic flaw in MTK cert verification process.Similar to CVE-2023-20696.",
"fork": false,
"created_at": "2026-06-22T02:09:35Z",
"updated_at": "2026-07-21T18:28:46Z",
"updated_at": "2026-07-21T19:52:22Z",
"pushed_at": "2026-07-15T11:49:15Z",
"stargazers_count": 13,
"watchers_count": 13,
"stargazers_count": 14,
"watchers_count": 14,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 13,
"watchers": 14,
"score": 0,
"subscribers_count": 1
},
2023/CVE-2023-33107.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "A kernel exploit for Pico 4 devices based on cve-2023-33107",
"fork": false,
"created_at": "2026-07-18T08:06:18Z",
"updated_at": "2026-07-20T19:29:46Z",
"updated_at": "2026-07-22T00:26:08Z",
"pushed_at": "2026-07-19T11:47:14Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
2023/CVE-2023-38709.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 132,
"watchers_count": 132,
"has_discussions": false,
"forks_count": 24,
"forks_count": 23,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -38,7 +38,7 @@
"cve-2024-39573"
],
"visibility": "public",
"forks": 24,
"forks": 23,
"watchers": 132,
"score": 0,
"subscribers_count": 1
2023/CVE-2023-45866.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "🚨 CVE-2023-45866 - BlueDucky Implementation (Using DuckyScript) 🔓 Unauthenticated Peering Leading to Code Execution (Using HID Keyboard)",
"fork": false,
"created_at": "2024-01-16T06:52:02Z",
"updated_at": "2026-07-21T13:46:24Z",
"updated_at": "2026-07-21T20:21:15Z",
"pushed_at": "2026-02-11T00:03:00Z",
"stargazers_count": 1879,
"watchers_count": 1879,
"stargazers_count": 1878,
"watchers_count": 1878,
"has_discussions": false,
"forks_count": 315,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 315,
"watchers": 1879,
"watchers": 1878,
"score": 0,
"subscribers_count": 29
},
2024/CVE-2024-27867.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1308132950,
"name": "pspgo-airpods-802F0130",
"full_name": "Hirador\/pspgo-airpods-802F0130",
"owner": {
"login": "Hirador",
"id": 63920290,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/63920290?v=4",
"html_url": "https:\/\/github.com\/Hirador",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Hirador\/pspgo-airpods-802F0130",
"description": "Why AirPods stopped pairing with the PSP Go (error 0x802F0130): full reverse-engineering root-cause writeup — CVE-2024-27867",
"fork": false,
"created_at": "2026-07-21T21:22:52Z",
"updated_at": "2026-07-21T21:23:08Z",
"pushed_at": "2026-07-21T21:22:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2024/CVE-2024-3094.json
+4 -4
View File
@@ -1010,10 +1010,10 @@
"description": "notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)",
"fork": false,
"created_at": "2024-04-01T14:28:09Z",
"updated_at": "2026-07-21T05:58:27Z",
"updated_at": "2026-07-21T21:38:02Z",
"pushed_at": "2024-04-03T04:58:50Z",
"stargazers_count": 3557,
"watchers_count": 3557,
"stargazers_count": 3558,
"watchers_count": 3558,
"has_discussions": false,
"forks_count": 235,
"allow_forking": true,
@@ -1024,7 +1024,7 @@
"topics": [],
"visibility": "public",
"forks": 235,
"watchers": 3557,
"watchers": 3558,
"score": 0,
"subscribers_count": 34
},
2024/CVE-2024-38472.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 132,
"watchers_count": 132,
"has_discussions": false,
"forks_count": 24,
"forks_count": 23,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -71,7 +71,7 @@
"cve-2024-39573"
],
"visibility": "public",
"forks": 24,
"forks": 23,
"watchers": 132,
"score": 0,
"subscribers_count": 1
2024/CVE-2024-52940.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 36,
"watchers_count": 36,
"has_discussions": false,
"forks_count": 11,
"forks_count": 10,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -39,7 +39,7 @@
"zero-day-vulnerability"
],
"visibility": "public",
"forks": 11,
"forks": 10,
"watchers": 36,
"score": 0,
"subscribers_count": 1
2024/CVE-2024-6387.json
+4 -4
View File
@@ -285,10 +285,10 @@
"description": "CVE-2024-6387_Check is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH",
"fork": false,
"created_at": "2024-07-01T20:33:20Z",
"updated_at": "2026-07-20T06:32:24Z",
"updated_at": "2026-07-21T21:55:57Z",
"pushed_at": "2026-05-29T11:44:40Z",
"stargazers_count": 525,
"watchers_count": 525,
"stargazers_count": 526,
"watchers_count": 526,
"has_discussions": false,
"forks_count": 100,
"allow_forking": true,
@@ -305,7 +305,7 @@
],
"visibility": "public",
"forks": 100,
"watchers": 525,
"watchers": 526,
"score": 0,
"subscribers_count": 6
},
2025/CVE-2025-47928.json → 2025/CVE-2025-10725.json
+13 -13
View File
@@ -1,25 +1,25 @@
[
{
"id": 1307782476,
"name": "cve-repro-cve-2025-47928",
"full_name": "pvharmo2\/cve-repro-cve-2025-47928",
"id": 1308062766,
"name": "cve-2025-10725-eda-demo",
"full_name": "kaiokmo\/cve-2025-10725-eda-demo",
"owner": {
"login": "pvharmo2",
"id": 304171033,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/304171033?v=4",
"html_url": "https:\/\/github.com\/pvharmo2",
"login": "kaiokmo",
"id": 15371403,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/15371403?v=4",
"html_url": "https:\/\/github.com\/kaiokmo",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/pvharmo2\/cve-repro-cve-2025-47928",
"html_url": "https:\/\/github.com\/kaiokmo\/cve-2025-10725-eda-demo",
"description": null,
"fork": false,
"created_at": "2026-07-21T14:19:29Z",
"updated_at": "2026-07-21T14:25:55Z",
"pushed_at": "2026-07-21T14:22:25Z",
"created_at": "2026-07-21T19:38:55Z",
"updated_at": "2026-07-21T19:47:44Z",
"pushed_at": "2026-07-21T19:47:41Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
2025/CVE-2025-2294.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 1,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"forks": 0,
"watchers": 3,
"score": 0,
"subscribers_count": 1
2025/CVE-2025-24204.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "FairPlay decryptor (dump iPA) for iOS Application that running on macOS with SIP-enabled, using CVE-2025-24204. Support macOS 15.0-15.2",
"fork": false,
"created_at": "2025-09-04T17:49:51Z",
"updated_at": "2026-07-21T00:01:20Z",
"updated_at": "2026-07-21T21:58:30Z",
"pushed_at": "2025-09-04T17:59:49Z",
"stargazers_count": 144,
"watchers_count": 144,
"stargazers_count": 145,
"watchers_count": 145,
"has_discussions": false,
"forks_count": 21,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 21,
"watchers": 144,
"watchers": 145,
"score": 0,
"subscribers_count": 2
}
2025/CVE-2025-31200.json
+2 -2
View File
@@ -127,7 +127,7 @@
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 4,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -135,7 +135,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 4,
"forks": 3,
"watchers": 11,
"score": 0,
"subscribers_count": 1
2025/CVE-2025-36911.json
+2 -2
View File
@@ -91,7 +91,7 @@
"stargazers_count": 810,
"watchers_count": 810,
"has_discussions": false,
"forks_count": 90,
"forks_count": 89,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -99,7 +99,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 90,
"forks": 89,
"watchers": 810,
"score": 0,
"subscribers_count": 23
2025/CVE-2025-38352.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Android kernel exploit for CVE-2025-38352, previously exploited in-the-wild. Targets vulnerable x86_64 Linux kernels v5.10.x.",
"fork": false,
"created_at": "2026-01-03T16:52:18Z",
"updated_at": "2026-07-15T19:27:47Z",
"updated_at": "2026-07-21T19:29:46Z",
"pushed_at": "2026-01-05T03:45:37Z",
"stargazers_count": 308,
"watchers_count": 308,
"stargazers_count": 309,
"watchers_count": 309,
"has_discussions": false,
"forks_count": 48,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 48,
"watchers": 308,
"watchers": 309,
"score": 0,
"subscribers_count": 2
},
2025/CVE-2025-43300.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 116,
"watchers_count": 116,
"has_discussions": false,
"forks_count": 29,
"forks_count": 28,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 29,
"forks": 28,
"watchers": 116,
"score": 0,
"subscribers_count": 2
2025/CVE-2025-43529.json
+4 -4
View File
@@ -245,10 +245,10 @@
"description": "A demonstration of read write using cve-2025-43529 on iOS 26.1",
"fork": false,
"created_at": "2026-06-11T04:48:56Z",
"updated_at": "2026-07-21T11:54:05Z",
"updated_at": "2026-07-21T20:13:33Z",
"pushed_at": "2026-07-21T11:53:21Z",
"stargazers_count": 50,
"watchers_count": 50,
"stargazers_count": 51,
"watchers_count": 51,
"has_discussions": false,
"forks_count": 10,
"allow_forking": true,
@@ -259,7 +259,7 @@
"topics": [],
"visibility": "public",
"forks": 10,
"watchers": 50,
"watchers": 51,
"score": 0,
"subscribers_count": 1
}
2025/CVE-2025-55182.json
+4 -4
View File
@@ -2582,10 +2582,10 @@
"description": "Working proof of concept for NextJS RCE to establish a reverse shell. [React2Shell]",
"fork": false,
"created_at": "2025-12-05T10:52:29Z",
"updated_at": "2025-12-24T11:44:51Z",
"updated_at": "2026-07-21T20:26:41Z",
"pushed_at": "2025-12-05T11:15:07Z",
"stargazers_count": 29,
"watchers_count": 29,
"stargazers_count": 28,
"watchers_count": 28,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -2596,7 +2596,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 29,
"watchers": 28,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-55188.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 32,
"watchers_count": 32,
"has_discussions": false,
"forks_count": 8,
"forks_count": 7,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 8,
"forks": 7,
"watchers": 32,
"score": 0,
"subscribers_count": 0
2025/CVE-2025-58434.json
+4 -4
View File
@@ -212,10 +212,10 @@
"description": "Combined PoC for CVE-2025-28434 and CVE-2025-59528",
"fork": false,
"created_at": "2026-04-13T01:54:37Z",
"updated_at": "2026-06-30T11:08:06Z",
"updated_at": "2026-07-21T20:14:20Z",
"pushed_at": "2026-04-13T05:52:12Z",
"stargazers_count": 18,
"watchers_count": 18,
"stargazers_count": 19,
"watchers_count": 19,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -232,7 +232,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 18,
"watchers": 19,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-61922.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 2,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"forks": 1,
"watchers": 11,
"score": 0,
"subscribers_count": 0
2025/CVE-2025-64512.json
+37 -4
View File
@@ -47,10 +47,10 @@
"description": "CVE-2025-64512: pdfminer.six pickle deserialization rce; .pickle.gz + pdf generator w\/ custom payloads",
"fork": false,
"created_at": "2026-07-19T10:49:05Z",
"updated_at": "2026-07-20T05:59:52Z",
"updated_at": "2026-07-21T23:41:16Z",
"pushed_at": "2026-07-19T11:00:19Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
@@ -140,5 +140,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1308211212,
"name": "CVE-2025-64512-exploit",
"full_name": "MehdiChyhab\/CVE-2025-64512-exploit",
"owner": {
"login": "MehdiChyhab",
"id": 205037018,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/205037018?v=4",
"html_url": "https:\/\/github.com\/MehdiChyhab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/MehdiChyhab\/CVE-2025-64512-exploit",
"description": "CVE-2025-64512 - pdfminer.six Remote Code Execution Exploit",
"fork": false,
"created_at": "2026-07-21T23:46:37Z",
"updated_at": "2026-07-21T23:55:48Z",
"pushed_at": "2026-07-21T23:54:57Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-69219.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 4,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 4,
"forks": 3,
"watchers": 7,
"score": 0,
"subscribers_count": 0
2025/CVE-2025-8088.json
+2 -2
View File
@@ -909,7 +909,7 @@
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 2,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -917,7 +917,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"forks": 1,
"watchers": 5,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-0059.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1308066974,
"name": "bootlicka-POC",
"full_name": "paul-goon\/bootlicka-POC",
"owner": {
"login": "paul-goon",
"id": 307739698,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/307739698?v=4",
"html_url": "https:\/\/github.com\/paul-goon",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/paul-goon\/bootlicka-POC",
"description": "a shitty poc utilizing CVE-2026-0059.",
"fork": false,
"created_at": "2026-07-21T19:44:45Z",
"updated_at": "2026-07-21T19:46:10Z",
"pushed_at": "2026-07-21T19:44:46Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-0257.json
+2 -2
View File
@@ -118,7 +118,7 @@
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -126,7 +126,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 3,
"score": 0,
"subscribers_count": 0
2021/CVE-2021-36981.json → 2026/CVE-2026-20169.json
+12 -12
View File
@@ -1,21 +1,21 @@
[
{
"id": 483644661,
"name": "CVE-2021-36981",
"full_name": "0xBrAinsTorM\/CVE-2021-36981",
"id": 1308163565,
"name": "CVE-2026-20169",
"full_name": "gigachadusers\/CVE-2026-20169",
"owner": {
"login": "0xBrAinsTorM",
"id": 26419565,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26419565?v=4",
"html_url": "https:\/\/github.com\/0xBrAinsTorM",
"login": "gigachadusers",
"id": 264022118,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/264022118?v=4",
"html_url": "https:\/\/github.com\/gigachadusers",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xBrAinsTorM\/CVE-2021-36981",
"html_url": "https:\/\/github.com\/gigachadusers\/CVE-2026-20169",
"description": null,
"fork": false,
"created_at": "2022-04-20T12:26:24Z",
"updated_at": "2026-05-21T04:34:08Z",
"pushed_at": "2022-05-05T12:18:59Z",
"created_at": "2026-07-21T22:13:42Z",
"updated_at": "2026-07-22T00:30:41Z",
"pushed_at": "2026-07-21T22:15:45Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -30,6 +30,6 @@
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 1
"subscribers_count": 0
}
]
2026/CVE-2026-20980.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Poc for CVE-2026-20980, CVE-2026-20981, CVE-2026-20982",
"fork": false,
"created_at": "2026-06-01T13:14:47Z",
"updated_at": "2026-07-21T08:44:23Z",
"updated_at": "2026-07-21T21:41:12Z",
"pushed_at": "2026-06-01T17:42:26Z",
"stargazers_count": 37,
"watchers_count": 37,
"stargazers_count": 39,
"watchers_count": 39,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 37,
"watchers": 39,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-25632.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1308188860,
"name": "CVE-2026-25632",
"full_name": "lazarus0x1337\/CVE-2026-25632",
"owner": {
"login": "lazarus0x1337",
"id": 115117632,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/115117632?v=4",
"html_url": "https:\/\/github.com\/lazarus0x1337",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/lazarus0x1337\/CVE-2026-25632",
"description": "CVE-2026-25632 — Fix Unsafe JSON Deserialization Leading to Remote Code Execution",
"fork": false,
"created_at": "2026-07-21T23:00:44Z",
"updated_at": "2026-07-21T23:08:42Z",
"pushed_at": "2026-07-21T23:02:53Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-27654.json
+4 -4
View File
@@ -85,10 +85,10 @@
"description": "Proof-of-Concept and technical analysis for CVE-2026-27654, a heap-based buffer overflow vulnerability in the NGINX HTTP WebDAV module, including root cause analysis, reproduction, and mitigation.",
"fork": false,
"created_at": "2026-07-21T12:05:07Z",
"updated_at": "2026-07-21T12:39:40Z",
"updated_at": "2026-07-21T20:41:15Z",
"pushed_at": "2026-07-21T12:37:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -112,7 +112,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-31431.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Cross-platform C port of the Copy Fail Linux LPE (CVE-2026-31431). Disclosed 2026-04-29 by Theori \/ Xint.",
"fork": false,
"created_at": "2026-04-29T23:29:14Z",
"updated_at": "2026-07-21T10:15:56Z",
"updated_at": "2026-07-21T21:07:01Z",
"pushed_at": "2026-07-17T13:24:28Z",
"stargazers_count": 436,
"watchers_count": 436,
"stargazers_count": 437,
"watchers_count": 437,
"has_discussions": true,
"forks_count": 120,
"allow_forking": true,
@@ -74,7 +74,7 @@
],
"visibility": "public",
"forks": 120,
"watchers": 436,
"watchers": 437,
"score": 0,
"subscribers_count": 2
},
2026/CVE-2026-31694.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Linux kernel FUSE readdir cache out-of-bounds write (CVE-2026-31694): a malicious FUSE server overflows a page-cache page by 24 bytes. PoC plus an unprivileged local-root exploit via \/etc\/passwd page-cache corruption. Run only inside a VM.",
"fork": false,
"created_at": "2026-06-30T11:49:36Z",
"updated_at": "2026-07-16T20:01:19Z",
"updated_at": "2026-07-21T22:40:17Z",
"pushed_at": "2026-06-30T12:39:22Z",
"stargazers_count": 15,
"watchers_count": 15,
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 15,
"watchers": 16,
"score": 0,
"subscribers_count": 2
}
2026/CVE-2026-33697.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "DugganUSA threat-intelligence contributions to the IETF Hackathon — real-world agentic-attack benchmark vectors, CVE-2026-33697 attestation analysis, MCP verification. Empirical grounding for standards work.",
"fork": false,
"created_at": "2026-07-21T15:44:44Z",
"updated_at": "2026-07-21T16:11:14Z",
"pushed_at": "2026-07-21T16:09:16Z",
"updated_at": "2026-07-21T23:20:50Z",
"pushed_at": "2026-07-21T23:20:46Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-41091.json
+2 -2
View File
@@ -80,8 +80,8 @@
"description": "CVE-2026-41091 SolarFlare | Microsoft Defender LPE exploit. Low-privileged users gain NT AUTHORITY\\SYSTEM 🔥 via Cloud Files API + NTFS junction trickery. Forces Defender to write malicious payloads to System32 with SYSTEM rights. ⚠️ Actively exploited in wild. CVSS 7.8. Patch: Defender Engine 1.1.26040.8. 🛡️ Educational PoC only. ",
"fork": false,
"created_at": "2026-06-20T10:25:34Z",
"updated_at": "2026-07-18T20:11:26Z",
"pushed_at": "2026-07-13T14:17:00Z",
"updated_at": "2026-07-21T21:39:19Z",
"pushed_at": "2026-07-21T21:38:51Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-41940.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 91,
"watchers_count": 91,
"has_discussions": false,
"forks_count": 25,
"forks_count": 24,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 25,
"forks": 24,
"watchers": 91,
"score": 0,
"subscribers_count": 1
2026/CVE-2026-42533.json
+2 -2
View File
@@ -120,8 +120,8 @@
"description": null,
"fork": false,
"created_at": "2026-07-21T05:27:18Z",
"updated_at": "2026-07-21T07:57:56Z",
"pushed_at": "2026-07-21T07:57:35Z",
"updated_at": "2026-07-21T21:18:18Z",
"pushed_at": "2026-07-21T21:18:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-43499.json
+32 -32
View File
@@ -245,12 +245,12 @@
"description": "CVE-2026-43499 Implementation for 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k",
"fork": false,
"created_at": "2026-07-12T10:15:03Z",
"updated_at": "2026-07-21T08:20:04Z",
"updated_at": "2026-07-21T20:10:28Z",
"pushed_at": "2026-07-15T22:46:59Z",
"stargazers_count": 180,
"watchers_count": 180,
"stargazers_count": 181,
"watchers_count": 181,
"has_discussions": false,
"forks_count": 64,
"forks_count": 65,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -258,8 +258,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 64,
"watchers": 180,
"forks": 65,
"watchers": 181,
"score": 0,
"subscribers_count": 1
},
@@ -351,12 +351,12 @@
"description": "基于 CVE-2026-43499 的 8E5 机型自动化解锁辅助工具，仅限授权安全研究与自有设备使用。",
"fork": false,
"created_at": "2026-07-12T22:59:55Z",
"updated_at": "2026-07-21T15:18:05Z",
"updated_at": "2026-07-21T20:10:11Z",
"pushed_at": "2026-07-16T13:25:55Z",
"stargazers_count": 81,
"watchers_count": 81,
"stargazers_count": 82,
"watchers_count": 82,
"has_discussions": false,
"forks_count": 20,
"forks_count": 21,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -364,8 +364,8 @@
"pull_request_creation_policy": "collaborators_only",
"topics": [],
"visibility": "public",
"forks": 20,
"watchers": 81,
"forks": 21,
"watchers": 82,
"score": 0,
"subscribers_count": 1
},
@@ -549,10 +549,10 @@
"description": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.",
"fork": false,
"created_at": "2026-07-14T14:21:27Z",
"updated_at": "2026-07-21T13:29:44Z",
"updated_at": "2026-07-21T21:11:52Z",
"pushed_at": "2026-07-18T22:56:05Z",
"stargazers_count": 79,
"watchers_count": 79,
"stargazers_count": 80,
"watchers_count": 80,
"has_discussions": false,
"forks_count": 36,
"allow_forking": true,
@@ -563,7 +563,7 @@
"topics": [],
"visibility": "public",
"forks": 36,
"watchers": 79,
"watchers": 80,
"score": 0,
"subscribers_count": 0
},
@@ -648,10 +648,10 @@
"description": "Xiaomi K70e (duchamp) one-click root via CVE-2026-43499 (IonStack) + KernelSU integration",
"fork": false,
"created_at": "2026-07-15T03:59:56Z",
"updated_at": "2026-07-21T14:23:50Z",
"updated_at": "2026-07-21T20:40:36Z",
"pushed_at": "2026-07-21T05:16:37Z",
"stargazers_count": 26,
"watchers_count": 26,
"stargazers_count": 27,
"watchers_count": 27,
"has_discussions": true,
"forks_count": 8,
"allow_forking": true,
@@ -662,7 +662,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 26,
"watchers": 27,
"score": 0,
"subscribers_count": 0
},
@@ -846,10 +846,10 @@
"description": "Standalone CVE-2026-43499 PoC for Galaxy S25 Ultra SM-S938N S938NKSUACZF1",
"fork": false,
"created_at": "2026-07-16T08:02:46Z",
"updated_at": "2026-07-21T11:57:21Z",
"updated_at": "2026-07-22T00:47:15Z",
"pushed_at": "2026-07-17T14:41:41Z",
"stargazers_count": 27,
"watchers_count": 27,
"stargazers_count": 28,
"watchers_count": 28,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -860,7 +860,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 27,
"watchers": 28,
"score": 0,
"subscribers_count": 0
},
@@ -1044,10 +1044,10 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
"updated_at": "2026-07-21T18:24:34Z",
"updated_at": "2026-07-22T00:43:00Z",
"pushed_at": "2026-07-19T09:11:56Z",
"stargazers_count": 62,
"watchers_count": 62,
"stargazers_count": 63,
"watchers_count": 63,
"has_discussions": false,
"forks_count": 12,
"allow_forking": true,
@@ -1058,7 +1058,7 @@
"topics": [],
"visibility": "public",
"forks": 12,
"watchers": 62,
"watchers": 63,
"score": 0,
"subscribers_count": 2
},
@@ -1148,7 +1148,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 2,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1164,7 +1164,7 @@
"security-research"
],
"visibility": "public",
"forks": 2,
"forks": 3,
"watchers": 0,
"score": 0,
"subscribers_count": 0
@@ -1283,8 +1283,8 @@
"description": "OnePlus Ace 3 preload.so for CVE-2026-43499 (GhostLock)",
"fork": false,
"created_at": "2026-07-21T18:25:42Z",
"updated_at": "2026-07-21T18:38:07Z",
"pushed_at": "2026-07-21T18:37:38Z",
"updated_at": "2026-07-21T19:25:35Z",
"pushed_at": "2026-07-21T19:22:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-45585.json
+56 -4
View File
@@ -264,10 +264,10 @@
"description": "YellowKey BitLocker CVE-2026-45585 is an open-source utility to extract, backup, and organize BitLocker recovery keys on Windows encrypted drives. Automate volume decryption, manage drive encryption states via command-line tools, export secure configuration files, and track recovery key logs. Download direct repository setup files.",
"fork": false,
"created_at": "2026-07-20T18:10:40Z",
"updated_at": "2026-07-21T18:37:01Z",
"updated_at": "2026-07-22T00:49:54Z",
"pushed_at": "2026-07-20T19:25:22Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 21,
"watchers_count": 21,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -299,7 +299,59 @@
],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 21,
"score": 0,
"subscribers_count": 0
},
{
"id": 1308162212,
"name": "YellowKey-Bitlocker-CVE-2026-45585",
"full_name": "boobalover7\/YellowKey-Bitlocker-CVE-2026-45585",
"owner": {
"login": "boobalover7",
"id": 186405434,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/186405434?v=4",
"html_url": "https:\/\/github.com\/boobalover7",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/boobalover7\/YellowKey-Bitlocker-CVE-2026-45585",
"description": "Manage BitLocker recovery keys, monitor drive encryption status, and unlock volumes through a portable interface for Windows.",
"fork": false,
"created_at": "2026-07-21T22:11:28Z",
"updated_at": "2026-07-21T22:14:21Z",
"pushed_at": "2026-07-21T22:11:52Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"bitlocker-bypass",
"bitlocker-drive-encryption",
"bitlocker-drive-lock",
"bitlocker-drive-management",
"bitlocker-lock",
"cve-2026-45585",
"decryption-tool",
"full-disk-encryption",
"nightmare-eclipse",
"open-source-vulnerabilities",
"vulnerabilities",
"vulnerability",
"yellow",
"yellowkey",
"yellowkey-bitlocker",
"yellowkey-cve",
"yellowkey-exploit",
"yellowkey-vulnerability"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-46331.json
+4 -4
View File
@@ -19,7 +19,7 @@
"stargazers_count": 133,
"watchers_count": 133,
"has_discussions": false,
"forks_count": 45,
"forks_count": 44,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 45,
"forks": 44,
"watchers": 133,
"score": 0,
"subscribers_count": 4
@@ -52,7 +52,7 @@
"stargazers_count": 28,
"watchers_count": 28,
"has_discussions": false,
"forks_count": 5,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 5,
"forks": 4,
"watchers": 28,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-48907.json
+4 -4
View File
@@ -85,7 +85,7 @@
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 5,
"forks_count": 6,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -93,7 +93,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 5,
"forks": 6,
"watchers": 3,
"score": 0,
"subscribers_count": 1
@@ -316,7 +316,7 @@
"stargazers_count": 57,
"watchers_count": 57,
"has_discussions": false,
"forks_count": 11,
"forks_count": 10,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -324,7 +324,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 11,
"forks": 10,
"watchers": 57,
"score": 0,
"subscribers_count": 1
2026/CVE-2026-48909.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 23,
"watchers_count": 23,
"has_discussions": false,
"forks_count": 3,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -36,7 +36,7 @@
"rce"
],
"visibility": "public",
"forks": 3,
"forks": 2,
"watchers": 23,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-49176.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Local privilege-escalation proof of concept for the Windows WalletService vulnerability fixed in July 2026.",
"fork": false,
"created_at": "2026-07-16T13:36:10Z",
"updated_at": "2026-07-21T17:41:26Z",
"updated_at": "2026-07-21T22:16:30Z",
"pushed_at": "2026-07-20T09:43:27Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-53595.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1308061011,
"name": "CVE-2026-53595_exploit",
"full_name": "0xdak\/CVE-2026-53595_exploit",
"owner": {
"login": "0xdak",
"id": 58743788,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/58743788?v=4",
"html_url": "https:\/\/github.com\/0xdak",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xdak\/CVE-2026-53595_exploit",
"description": null,
"fork": false,
"created_at": "2026-07-21T19:36:31Z",
"updated_at": "2026-07-21T19:37:44Z",
"pushed_at": "2026-07-21T19:36:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-56129.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 2,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"forks": 3,
"watchers": 0,
"score": 0,
"subscribers_count": 1
2026/CVE-2026-57588.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "PoC for CVE-2026-57588 - SQL injection in Nessus 10.12.0 XML import. Generates malicious .nessus files to enumerate databases, exfiltrate credentials, and test time-based blind injection. For authorized security research. Author: Sudeepa Wanigarathna. Patched in 10.12.1.",
"fork": false,
"created_at": "2026-07-21T18:13:53Z",
"updated_at": "2026-07-21T18:25:43Z",
"pushed_at": "2026-07-21T18:25:12Z",
"updated_at": "2026-07-21T19:32:15Z",
"pushed_at": "2026-07-21T19:32:10Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-58635.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "PoC for CVE-2026-58635: Windows Narrator Braille Local Privilege Escalation",
"fork": false,
"created_at": "2026-07-15T12:53:34Z",
"updated_at": "2026-07-21T14:11:59Z",
"updated_at": "2026-07-21T22:17:10Z",
"pushed_at": "2026-07-15T12:53:37Z",
"stargazers_count": 23,
"watchers_count": 23,
"stargazers_count": 24,
"watchers_count": 24,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 23,
"watchers": 24,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-60137.json
+2 -2
View File
@@ -216,8 +216,8 @@
"description": "Analysis and end-to-end implementation of the patched wordpress RCE vulnerability - CVE-2026-60137 and CVE-2026-63030",
"fork": false,
"created_at": "2026-07-21T17:49:41Z",
"updated_at": "2026-07-21T18:27:26Z",
"pushed_at": "2026-07-21T18:26:13Z",
"updated_at": "2026-07-21T22:10:37Z",
"pushed_at": "2026-07-21T22:10:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-63030.json
+18 -18
View File
@@ -14,12 +14,12 @@
"description": "wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain",
"fork": false,
"created_at": "2026-07-17T20:18:33Z",
"updated_at": "2026-07-21T17:19:33Z",
"updated_at": "2026-07-21T23:57:13Z",
"pushed_at": "2026-07-21T08:20:56Z",
"stargazers_count": 455,
"watchers_count": 455,
"stargazers_count": 460,
"watchers_count": 460,
"has_discussions": false,
"forks_count": 105,
"forks_count": 107,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -31,8 +31,8 @@
"wp2shell-poc"
],
"visibility": "public",
"forks": 105,
"watchers": 455,
"forks": 107,
"watchers": 460,
"score": 0,
"subscribers_count": 2
},
@@ -513,10 +513,10 @@
"description": "CVE-2026-63030 + CVE-2026-60137 - “wp2shell”: unauthenticated RCE in WordPress core",
"fork": false,
"created_at": "2026-07-18T14:27:41Z",
"updated_at": "2026-07-21T17:00:47Z",
"updated_at": "2026-07-22T00:36:10Z",
"pushed_at": "2026-07-18T19:05:43Z",
"stargazers_count": 57,
"watchers_count": 57,
"stargazers_count": 58,
"watchers_count": 58,
"has_discussions": false,
"forks_count": 19,
"allow_forking": true,
@@ -527,7 +527,7 @@
"topics": [],
"visibility": "public",
"forks": 19,
"watchers": 57,
"watchers": 58,
"score": 0,
"subscribers_count": 0
},
@@ -1046,10 +1046,10 @@
"description": "wp2shell — WordPress Core Pre-Auth RCE (CVE-2026-63030 + CVE-2026-60137). Exploit toolkit + remediation.",
"fork": false,
"created_at": "2026-07-19T06:23:48Z",
"updated_at": "2026-07-21T04:23:10Z",
"updated_at": "2026-07-21T21:06:54Z",
"pushed_at": "2026-07-19T06:23:51Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -1060,7 +1060,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
@@ -1731,10 +1731,10 @@
"description": "Unauthenticated Remote Code Execution (RCE) in WordPress Core allows attackers to execute arbitrary code without logging in by chaining CVE-2026-63030 and CVE-2026-60137, potentially leading to full site compromise.",
"fork": false,
"created_at": "2026-07-20T16:07:03Z",
"updated_at": "2026-07-20T16:28:28Z",
"updated_at": "2026-07-21T20:26:40Z",
"pushed_at": "2026-07-20T16:17:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -1745,7 +1745,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-9973.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": null,
"fork": false,
"created_at": "2026-07-21T11:57:43Z",
"updated_at": "2026-07-21T18:33:42Z",
"pushed_at": "2026-07-21T12:03:30Z",
"updated_at": "2026-07-22T00:05:35Z",
"pushed_at": "2026-07-22T00:05:27Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
README.md
+78 -47
View File
@@ -15,6 +15,13 @@
- [QM4RS/CVE-2026-0023-Update-Ownership-PoC](https://github.com/QM4RS/CVE-2026-0023-Update-Ownership-PoC)
### CVE-2026-0059 (2026-06-01)
<code>In multiple functions of sdp_discovery.cc, there is a possible way to achieve code execution due to a heap buffer overflow. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
</code>
- [paul-goon/bootlicka-POC](https://github.com/paul-goon/bootlicka-POC)
### CVE-2026-0073 (2026-05-04)
<code>In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic error in the code. This could lead to remote (proximal/adjacent) code execution as the shell user with no additional execution privileges needed. User interaction is not needed for exploitation.
@@ -1501,6 +1508,13 @@
- [Hassan-Pouladi/Cisco-FMC-honeypot](https://github.com/Hassan-Pouladi/Cisco-FMC-honeypot)
### CVE-2026-20169 (2026-05-06)
<code>A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to access files and execute commands on a remote router.\r\n\r\nThis vulnerability is due to insufficient input validation of user-supplied data. An attacker could exploit this vulnerability by submitting crafted input in the web-based management interface. A successful exploit could allow the attacker to create, read, or delete files and execute limited commands in&amp;nbsp;user EXEC mode on a remote router.
</code>
- [gigachadusers/CVE-2026-20169](https://github.com/gigachadusers/CVE-2026-20169)
### CVE-2026-20182 (2026-05-14)
<code>May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and fixed after the was disclosed in February 2026. This new advisory is for a new vulnerability in the control connection handshaking. The section of this advisory includes Show Control Connections guidance to help with system checks.&amp;nbsp;\r\n\r\nA vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system.\r\nThis vulnerability exists because the peering authentication mechanism in an affected system is not working properly. An attacker could exploit this vulnerability by sending crafted requests to the affected system. A successful exploit could allow the attacker to log in to an affected Cisco Catalyst SD-WAN Controller as an internal, high-privileged, non-root user account. Using this account, the attacker could access NETCONF, which would then allow the attacker to manipulate network configuration for the SD-WAN fabric.
@@ -2034,6 +2048,13 @@
- [trajanOx/cve-2026-25541-fuel-analysis](https://github.com/trajanOx/cve-2026-25541-fuel-analysis)
### CVE-2026-25632 (2026-02-06)
<code>EPyT-Flow is a Python package designed for the easy generation of hydraulic and water quality scenario data of water distribution networks. Prior to 0.16.1, EPyT-Flow’s REST API parses attacker-controlled JSON request bodies using a custom deserializer (my_load_from_json) that supports a type field. When type is present, the deserializer dynamically imports an attacker-specified module/class and instantiates it with attacker-supplied arguments. This allows invoking dangerous classes such as subprocess.Popen, which can lead to OS command execution during JSON parsing. This also affects the loading of JSON files. This vulnerability is fixed in 0.16.1.
</code>
- [lazarus0x1337/CVE-2026-25632](https://github.com/lazarus0x1337/CVE-2026-25632)
### CVE-2026-25860 (2026-06-09)
<code>OpenClinic GA 5.351.19 contains a reflected cross-site scripting vulnerability in the DICOM image upload handler that allows attackers to execute arbitrary JavaScript in a victim's browser by embedding malicious payloads in DICOM file metadata fields. Attackers can craft a DICOM file with JavaScript payloads in metadata fields such as Study Description, which are reflected without sanitization in popup.jsp and archiving/uploadfiles_jsp.java when processed through the Upload DICOM images feature.
@@ -4104,6 +4125,7 @@
- [ChanderManiPandey2022/YellowKey-BitLocker-Bypass-CVE-2026-45585-Detect-Fix-Automatically-via-Microsoft-Intune](https://github.com/ChanderManiPandey2022/YellowKey-BitLocker-Bypass-CVE-2026-45585-Detect-Fix-Automatically-via-Microsoft-Intune)
- [Desireeontrial76/yellowkey-bitlocker](https://github.com/Desireeontrial76/yellowkey-bitlocker)
- [yellowkeys/YellowKey-Bitlocker-CVE-2026-45585](https://github.com/yellowkeys/YellowKey-Bitlocker-CVE-2026-45585)
- [boobalover7/YellowKey-Bitlocker-CVE-2026-45585](https://github.com/boobalover7/YellowKey-Bitlocker-CVE-2026-45585)
### CVE-2026-45659 (2026-05-22)
@@ -5205,6 +5227,13 @@
### CVE-2026-53582
- [eev4n/CVE-2026-53582](https://github.com/eev4n/CVE-2026-53582)
### CVE-2026-53595 (2026-07-20)
<code>FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.224, the public endpoint `POST /user-setup/{hash}/{invite_sent_at}` (`OpenController@userSetupSave`) selects the target account solely by its `invite_hash` column, then overwrites that account's email and password and logs in as it. No authentication, cookie, or prior session is required. After a user activates, FreeScout sets `invite_hash` to the empty string. On MySQL and MariaDB, `VARCHAR` equality ignores trailing spaces, so a single URL-encoded space (`%20`) matches the stored empty string and selects the lowest-id activated user. The expiry guard decrypts `invite_sent_at` with the target's password hash, but `Helper::decrypt` returns its raw input unchanged when decryption fails. A plaintext numeric value such as `9999999999` therefore passes the time-to-live check without any secret. The result is that an anonymous attacker sets the email and password of the lowest-id activated FreeScout account (a support agent, or an administrator if one was added by invitation) and authenticates as that account. Version 1.8.224 contains a fix.
</code>
- [0xdak/CVE-2026-53595_exploit](https://github.com/0xdak/CVE-2026-53595_exploit)
### CVE-2026-53647 (2026-07-06)
<code>FOSSBilling is a free, open-source billing and client management system. In versions 0.5.3 through 0.7.2, the Guest `serviceapikey/get_info` API endpoint is accessible without authentication. Any caller with a valid API key can retrieve all custom configuration parameters (`custom_*` fields) stored in the key's database record. These custom fields are populated by billing administrators and can contain business-sensitive data such as pricing tiers, feature flags, rate limits, expiry overrides, or access scope data. Version 0.8.0 patches the issue. Some workarounds are available. Administrators can avoid storing sensitive data in `custom_*` API key configuration fields, monitor API logs for suspicious calls to `/api/guest/serviceapikey/get_info`, and/or disable the Serviceapikey module if not in active use.
@@ -8049,6 +8078,13 @@
- [lorenzocamilli/CVE-2025-10720-PoC](https://github.com/lorenzocamilli/CVE-2025-10720-PoC)
### CVE-2025-10725 (2025-09-30)
<code>A flaw was found in Red Hat Openshift AI Service. A low-privileged attacker with access to an authenticated account, for example as a data scientist using a standard Jupyter notebook, can escalate their privileges to a full cluster administrator. This allows for the complete compromise of the cluster's confidentiality, integrity, and availability. The attacker can steal sensitive data, disrupt all services, and take control of the underlying infrastructure, leading to a total breach of the platform and all applications hosted on it.
</code>
- [kaiokmo/cve-2025-10725-eda-demo](https://github.com/kaiokmo/cve-2025-10725-eda-demo)
### CVE-2025-11001 (2025-11-19)
<code>7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this product is required to exploit this vulnerability but attack vectors may vary depending on the implementation.\n\nThe specific flaw exists within the handling of symbolic links in ZIP files. Crafted data in a ZIP file can cause the process to traverse to unintended directories. An attacker can leverage this vulnerability to execute code in the context of a service account. Was ZDI-CAN-26753.
@@ -12611,13 +12647,6 @@
- [byteReaper77/CVE-2025-47917](https://github.com/byteReaper77/CVE-2025-47917)
### CVE-2025-47928 (2025-05-15)
<code>Spotipy is a Python library for the Spotify Web API. As of commit 4f5759dbfb4506c7b6280572a4db1aabc1ac778d, using `pull_request_target` on `.github/workflows/integration_tests.yml` followed by the checking out the head.sha of a forked PR can be exploited by attackers, since untrusted code can be executed having full access to secrets (from the base repo). By exploiting the vulnerability is possible to exfiltrate `GITHUB_TOKEN` and secrets `SPOTIPY_CLIENT_ID`, `SPOTIPY_CLIENT_SECRET`. In particular `GITHUB_TOKEN` which can be used to completely overtake the repo since the token has content write privileges. The `pull_request_target` in GitHub Actions is a major security concern—especially in public repositories—because it executes untrusted code from a PR, but with the context of the base repository, including access to its secrets. Commit 9dfb7177b8d7bb98a5a6014f8e6436812a47576f reverted the change that caused the issue.
</code>
- [pvharmo2/cve-repro-cve-2025-47928](https://github.com/pvharmo2/cve-repro-cve-2025-47928)
### CVE-2025-47962 (2025-06-10)
<code>Improper access control in Windows SDK allows an authorized attacker to elevate privileges locally.
@@ -16101,6 +16130,7 @@
- [matesz44/CVE-2025-64512](https://github.com/matesz44/CVE-2025-64512)
- [joeack123/PoC-for-CVE-2025-64512](https://github.com/joeack123/PoC-for-CVE-2025-64512)
- [BardLaudian/CVE-2025-64512](https://github.com/BardLaudian/CVE-2025-64512)
- [MehdiChyhab/CVE-2025-64512-exploit](https://github.com/MehdiChyhab/CVE-2025-64512-exploit)
### CVE-2025-64513 (2025-11-10)
@@ -19789,13 +19819,6 @@
- [p33d/CVE-2024-8275](https://github.com/p33d/CVE-2024-8275)
### CVE-2024-8277 (2024-09-11)
<code>The WooCommerce Photo Reviews Premium plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.3.13.2. This is due to the plugin not properly validating what user transient is being used in the login() function and not properly verifying the user's identity. This makes it possible for unauthenticated attackers to log in as user that has dismissed an admin notice in the past 30 days, which is often an administrator. Alternatively, a user can log in as any user with any transient that has a valid user_id as the value, though it would be more difficult to exploit this successfully.
</code>
- [PolatBey/CVE-2024-8277](https://github.com/PolatBey/CVE-2024-8277)
### CVE-2024-8289 (2024-09-04)
<code>The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to privilege escalation/de-escalation and account takeover due to an insufficient capability check on the update_item_permissions_check and create_item_permissions_check functions in all versions up to, and including, 4.2.0. This makes it possible for unauthenticated attackers to change the password of any user with the vendor role, create new users with the vendor role, and demote other users like administrators to the vendor role.
@@ -23000,6 +23023,13 @@
- [0xilis/CVE-2024-27821](https://github.com/0xilis/CVE-2024-27821)
### CVE-2024-27867 (2024-06-26)
<code>An authentication issue was addressed with improved state management. This issue is fixed in AirPods Firmware Update 6A326, AirPods Firmware Update 6F8, and Beats Firmware Update 6F8. When your headphones are seeking a connection request to one of your previously paired devices, an attacker in Bluetooth range might be able to spoof the intended source device and gain access to your headphones.
</code>
- [Hirador/pspgo-airpods-802F0130](https://github.com/Hirador/pspgo-airpods-802F0130)
### CVE-2024-27876 (2024-09-16)
<code>A race condition was addressed with improved locking. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7, visionOS 2. Unpacking a maliciously crafted archive may allow an attacker to write arbitrary files.
@@ -27181,13 +27211,6 @@
- [RandomRobbieBF/CVE-2024-50490](https://github.com/RandomRobbieBF/CVE-2024-50490)
### CVE-2024-50491 (2024-10-28)
<code>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MicahBlu RSVP ME rsvp-me allows SQL Injection.This issue affects RSVP ME: from n/a through &lt;= 1.9.9.
</code>
- [RandomRobbieBF/CVE-2024-50491](https://github.com/RandomRobbieBF/CVE-2024-50491)
### CVE-2024-50492 (2024-10-28)
<code>Improper Control of Generation of Code ('Code Injection') vulnerability in Scott Paterson ScottCart scottcart allows Code Injection.This issue affects ScottCart: from n/a through &lt;= 1.1.
@@ -43175,6 +43198,7 @@
- [senderend/CVE-2022-35914](https://github.com/senderend/CVE-2022-35914)
- [noxlumens/CVE-2022-35914_poc](https://github.com/noxlumens/CVE-2022-35914_poc)
- [btar1gan/exploit_CVE-2022-35914](https://github.com/btar1gan/exploit_CVE-2022-35914)
- [YumeSecurity/CVE-2022-35914](https://github.com/YumeSecurity/CVE-2022-35914)
### CVE-2022-35919 (2022-08-01)
@@ -45811,6 +45835,7 @@
- [calonnuotcabe/CVE-2021-3156](https://github.com/calonnuotcabe/CVE-2021-3156)
- [Kranti08/CVE-2021-3156-Baron-Samedit](https://github.com/Kranti08/CVE-2021-3156-Baron-Samedit)
- [IJBaig/CVE-2021-3156](https://github.com/IJBaig/CVE-2021-3156)
- [WhatsWrongAndWhy/CVE-2021-3156](https://github.com/WhatsWrongAndWhy/CVE-2021-3156)
### CVE-2021-3157
- [CrackerCat/cve-2021-3157](https://github.com/CrackerCat/cve-2021-3157)
@@ -45934,6 +45959,7 @@
- [pivik271/CVE-2021-3490](https://github.com/pivik271/CVE-2021-3490)
- [sandesh9978/cve-2021-3490-ebpf-analysis](https://github.com/sandesh9978/cve-2021-3490-ebpf-analysis)
- [prabeershakya/CVE-2021-3490-POC](https://github.com/prabeershakya/CVE-2021-3490-POC)
- [WhatsWrongAndWhy/CVE-2021-3490](https://github.com/WhatsWrongAndWhy/CVE-2021-3490)
### CVE-2021-3492 (2021-04-17)
@@ -45964,6 +45990,7 @@
- [George-Yanni/DeepRoot](https://github.com/George-Yanni/DeepRoot)
- [iqbalhussainas/OverlayFS-LPE-Exploit](https://github.com/iqbalhussainas/OverlayFS-LPE-Exploit)
- [Ayham-Megdadi/Zero-Day-Legacy](https://github.com/Ayham-Megdadi/Zero-Day-Legacy)
- [WhatsWrongAndWhy/CVE-2021-3493](https://github.com/WhatsWrongAndWhy/CVE-2021-3493)
### CVE-2021-3516 (2021-06-01)
@@ -45990,7 +46017,6 @@
- [0dayNinja/CVE-2021-3560](https://github.com/0dayNinja/CVE-2021-3560)
- [admin-079/CVE-2021-3560](https://github.com/admin-079/CVE-2021-3560)
- [chenaotian/CVE-2021-3560](https://github.com/chenaotian/CVE-2021-3560)
- [RicterZ/CVE-2021-3560-Authentication-Agent](https://github.com/RicterZ/CVE-2021-3560-Authentication-Agent)
- [winmin/CVE-2021-3560](https://github.com/winmin/CVE-2021-3560)
- [UNICORDev/exploit-CVE-2021-3560](https://github.com/UNICORDev/exploit-CVE-2021-3560)
- [asepsaepdin/CVE-2021-3560](https://github.com/asepsaepdin/CVE-2021-3560)
@@ -46652,7 +46678,6 @@
</code>
- [Osyanina/westone-CVE-2021-21980-scanner](https://github.com/Osyanina/westone-CVE-2021-21980-scanner)
- [Osyanina/westone-CVE-2022-1388-scanner](https://github.com/Osyanina/westone-CVE-2022-1388-scanner)
- [pkxk5pr6m2-web/cve-2021-21980-nuclei-poc](https://github.com/pkxk5pr6m2-web/cve-2021-21980-nuclei-poc)
- [gui2000guix-ui/cve-2021-21980-nuclei-poc](https://github.com/gui2000guix-ui/cve-2021-21980-nuclei-poc)
- [gui2000guix-ui/cve-2021-21980-mock-server](https://github.com/gui2000guix-ui/cve-2021-21980-mock-server)
@@ -46855,6 +46880,7 @@
- [letsr00t/CVE-2021-22555](https://github.com/letsr00t/CVE-2021-22555)
- [Spydomain/CVE-2021-22555-Poc](https://github.com/Spydomain/CVE-2021-22555-Poc)
- [glutton-su/CVE-2021-22555](https://github.com/glutton-su/CVE-2021-22555)
- [WhatsWrongAndWhy/CVE-2021-22555](https://github.com/WhatsWrongAndWhy/CVE-2021-22555)
### CVE-2021-22600 (2022-01-26)
@@ -47350,13 +47376,6 @@
- [DShankle/VLC_CVE-2021-25804_Analysis](https://github.com/DShankle/VLC_CVE-2021-25804_Analysis)
### CVE-2021-25837 (2021-02-08)
<code>Cosmos Network Ethermint &lt;= v0.4.0 is affected by cache lifecycle inconsistency in the EVM module. Due to the inconsistency between the Storage caching cycle and the Tx processing cycle, Storage changes caused by a failed transaction are improperly reserved in memory. Although the bad storage cache data will be discarded at EndBlock, it is still valid in the current block, which enables many possible attacks such as an &quot;arbitrary mint token&quot;.
</code>
- [iczc/Ethermint-CVE-2021-25837](https://github.com/iczc/Ethermint-CVE-2021-25837)
### CVE-2021-26084 (2021-08-30)
<code>In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions are before version 6.13.23, from version 6.14.0 before 7.4.11, from version 7.5.0 before 7.11.6, and from version 7.12.0 before 7.12.5.
@@ -47738,6 +47757,13 @@
- [mavlevin/D-Link-CVE-2021-27342-exploit](https://github.com/mavlevin/D-Link-CVE-2021-27342-exploit)
### CVE-2021-27365 (2021-03-07)
<code>An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not have appropriate length constraints or checks, and can exceed the PAGE_SIZE value. An unprivileged user can send a Netlink message that is associated with iSCSI, and has a length up to the maximum length of a Netlink message.
</code>
- [WhatsWrongAndWhy/CVE-2021-27365](https://github.com/WhatsWrongAndWhy/CVE-2021-27365)
### CVE-2021-27403 (2021-02-19)
<code>Askey RTF8115VW BR_SV_g11.11_RTF_TEF001_V6.54_V014 devices allow cgi-bin/te_acceso_router.cgi curWebPage XSS.
@@ -48261,6 +48287,13 @@
### CVE-2021-31290
- [qaisarafridi/cve-2021-31290](https://github.com/qaisarafridi/cve-2021-31290)
### CVE-2021-31440 (2021-05-21)
<code>This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel 5.11.15. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of eBPF programs. The issue results from the lack of proper validation of user-supplied eBPF programs prior to executing them. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel. Was ZDI-CAN-13661.
</code>
- [WhatsWrongAndWhy/CVE-2021-31440](https://github.com/WhatsWrongAndWhy/CVE-2021-31440)
### CVE-2021-31589 (2022-01-05)
<code>A cross-site scripting (XSS) vulnerability has been reported and confirmed for BeyondTrust Secure Remote Access Base Software version 6.0.1 and older, which allows the injection of unauthenticated, specially-crafted web requests without proper sanitization.
@@ -48933,7 +48966,6 @@
</code>
- [dinhbaouit/CVE-2021-36394](https://github.com/dinhbaouit/CVE-2021-36394)
- [lavclash75/CVE-2021-36394-Pre-Auth-RCE-in-Moodle](https://github.com/lavclash75/CVE-2021-36394-Pre-Auth-RCE-in-Moodle)
### CVE-2021-36396 (2023-03-06)
@@ -49055,13 +49087,6 @@
- [JiaJinRong12138/CVE-2021-36955-EXP](https://github.com/JiaJinRong12138/CVE-2021-36955-EXP)
### CVE-2021-36981 (2021-08-31)
<code>In the server in SerNet verinice before 1.22.2, insecure Java deserialization allows remote authenticated attackers to execute arbitrary code.
</code>
- [0xBrAinsTorM/CVE-2021-36981](https://github.com/0xBrAinsTorM/CVE-2021-36981)
### CVE-2021-37152 (2021-08-10)
<code>Multiple XSS issues exist in Sonatype Nexus Repository Manager 3 before 3.33.0. An authenticated attacker with the ability to add HTML files to a repository could redirect users to Nexus Repository Manager’s pages with code modifications.
@@ -49353,7 +49378,6 @@
<code>Cachet is an open source status page system. Prior to version 2.5.1, authenticated users, regardless of their privileges (User or Admin), can leak the value of any configuration entry of the dotenv file, e.g. the application secret (`APP_KEY`) and various passwords (email, database, etc). This issue was addressed in version 2.5.1 by improving `UpdateConfigCommandHandler` and preventing the use of nested variables in the resulting dotenv configuration file. As a workaround, only allow trusted source IP addresses to access to the administration dashboard.
</code>
- [n0kovo/CVE-2021-39174-PoC](https://github.com/n0kovo/CVE-2021-39174-PoC)
- [hadrian3689/cachet_2.4.0-dev](https://github.com/hadrian3689/cachet_2.4.0-dev)
### CVE-2021-39273 (2021-08-19)
@@ -49766,6 +49790,13 @@
- [nisdn/CVE-2021-40978](https://github.com/nisdn/CVE-2021-40978)
### CVE-2021-41073 (2021-09-19)
<code>loop_rw_iter in fs/io_uring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORING_OP_PROVIDE_BUFFERS to trigger a free of a kernel buffer, as demonstrated by using /proc/&lt;pid&gt;/maps for exploitation.
</code>
- [WhatsWrongAndWhy/CVE-2021-41073](https://github.com/WhatsWrongAndWhy/CVE-2021-41073)
### CVE-2021-41074 (2026-01-12)
<code>A CSRF issue in index.php in QloApps hotel eCommerce 1.5.1 allows an attacker to change the admin's email address via a crafted HTML document.
@@ -50174,6 +50205,7 @@
- [numanturle/CVE-2021-42008](https://github.com/numanturle/CVE-2021-42008)
- [0xdevil/CVE-2021-42008](https://github.com/0xdevil/CVE-2021-42008)
- [WhatsWrongAndWhy/CVE-2021-42008](https://github.com/WhatsWrongAndWhy/CVE-2021-42008)
### CVE-2021-42013 (2021-10-07)
@@ -51452,7 +51484,6 @@
- [wuppp/cve-2021-45232-exp](https://github.com/wuppp/cve-2021-45232-exp)
- [dskho/CVE-2021-45232](https://github.com/dskho/CVE-2021-45232)
- [fany0r/CVE-2021-45232-RCE](https://github.com/fany0r/CVE-2021-45232-RCE)
- [YutuSec/Apisix_Crack](https://github.com/YutuSec/Apisix_Crack)
### CVE-2021-45428 (2022-01-03)
@@ -51602,13 +51633,6 @@
- [sanupl/Vehicle-Service-Management-System-Multiple-Cross-Site-Request-Forgery-CSRF-Leads-to-XSS](https://github.com/sanupl/Vehicle-Service-Management-System-Multiple-Cross-Site-Request-Forgery-CSRF-Leads-to-XSS)
- [sanupl/CVE-2021-46080](https://github.com/sanupl/CVE-2021-46080)
### CVE-2021-46108 (2022-02-18)
<code>D-Link DSL-2730E CT-20131125 devices allow XSS via the username parameter to the password page in the maintenance configuration.
</code>
- [g-rubert/CVE-2021-46108](https://github.com/g-rubert/CVE-2021-46108)
### CVE-2021-46361 (2022-02-11)
<code>An issue in the Freemark Filter of Magnolia CMS v6.2.11 and below allows attackers to bypass security restrictions and execute arbitrary code via a crafted FreeMarker payload.
@@ -53916,6 +53940,7 @@
- [SplendidSky/CVE-2020-8835](https://github.com/SplendidSky/CVE-2020-8835)
- [digamma-ai/CVE-2020-8835-verification](https://github.com/digamma-ai/CVE-2020-8835-verification)
- [johnatag/INF8602-CVE-2020-8835](https://github.com/johnatag/INF8602-CVE-2020-8835)
- [WhatsWrongAndWhy/CVE-2020-8835](https://github.com/WhatsWrongAndWhy/CVE-2020-8835)
### CVE-2020-8840 (2020-02-10)
@@ -56745,6 +56770,7 @@
- [willinin/CVE-2020-27194-exp](https://github.com/willinin/CVE-2020-27194-exp)
- [xmzyshypnc/CVE-2020-27194](https://github.com/xmzyshypnc/CVE-2020-27194)
- [WhatsWrongAndWhy/CVE-2020-27194](https://github.com/WhatsWrongAndWhy/CVE-2020-27194)
### CVE-2020-27199 (2020-12-17)
@@ -62816,6 +62842,7 @@
</code>
- [hoanganh2k/cve-2018-5333](https://github.com/hoanganh2k/cve-2018-5333)
- [WhatsWrongAndWhy/CVE-2018-5333](https://github.com/WhatsWrongAndWhy/CVE-2018-5333)
### CVE-2018-5353 (2020-09-29)
@@ -65293,6 +65320,7 @@
</code>
- [scheatkode/CVE-2018-18955](https://github.com/scheatkode/CVE-2018-18955)
- [WhatsWrongAndWhy/CVE-2018-18955](https://github.com/WhatsWrongAndWhy/CVE-2018-18955)
### CVE-2018-19052 (2018-11-07)
@@ -66764,6 +66792,7 @@
</code>
- [anldori/CVE-2017-7308](https://github.com/anldori/CVE-2017-7308)
- [WhatsWrongAndWhy/CVE-2017-7308](https://github.com/WhatsWrongAndWhy/CVE-2017-7308)
### CVE-2017-7358 (2017-04-05)
@@ -68143,6 +68172,7 @@
- [mareks1007/cve-2017-16995](https://github.com/mareks1007/cve-2017-16995)
- [ZhiQiAnSecFork/cve-2017-16995](https://github.com/ZhiQiAnSecFork/cve-2017-16995)
- [xxxTectationxxx/CVE-2017-16995](https://github.com/xxxTectationxxx/CVE-2017-16995)
- [WhatsWrongAndWhy/CVE-2017-16995](https://github.com/WhatsWrongAndWhy/CVE-2017-16995)
### CVE-2017-16997 (2017-12-18)
@@ -68316,6 +68346,7 @@
- [ol0273st-s/CVE-2017-1000112-Adpated](https://github.com/ol0273st-s/CVE-2017-1000112-Adpated)
- [IT19083124/SNP-Assignment](https://github.com/IT19083124/SNP-Assignment)
- [Spydomain/CVE-2017-1000112-PoC](https://github.com/Spydomain/CVE-2017-1000112-PoC)
- [WhatsWrongAndWhy/CVE-2017-1000112](https://github.com/WhatsWrongAndWhy/CVE-2017-1000112)
### CVE-2017-1000117 (2017-10-04)