nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/08/12 18:51:17

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-08-13 03:51:17 +09:00
1 parent d69e12b09f
commit 53d8f28941
69 files changed
+714 -677
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2014/CVE-2014-3704.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": "This code is taken from \"Drupal 7.0 < 7.31 - 'Drupalgeddon' SQL Injection (Add Admin User)\" and was converted to Python 3 to suit the exercise in Academy for Module \"Attacking Commoon Applications\" and section \"Attacking Drupal\".",
"fork": false,
"created_at": "2025-02-02T14:46:18Z",
"updated_at": "2025-02-02T14:50:42Z",
"updated_at": "2026-08-12T12:25:22Z",
"pushed_at": "2025-02-02T14:50:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 1
},
2016/CVE-2016-5195.json
+2 -2
View File
@@ -85,7 +85,7 @@
"stargazers_count": 1008,
"watchers_count": 1008,
"has_discussions": false,
"forks_count": 389,
"forks_count": 390,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -93,7 +93,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 389,
"forks": 390,
"watchers": 1008,
"score": 0,
"subscribers_count": 60
2017/CVE-2017-0199.json
+2 -2
View File
@@ -781,8 +781,8 @@
"description": " This repository contains a full blue-team malware analysis of a real malicious DOCX exploiting CVE-2017-0199. The lab includes sandbox execution, network forensics, IOC extraction, MITRE ATT&CK mapping, dropped files review, and detection rules. Evidence screenshots are included inside the evidence folder for professional documentation.",
"fork": false,
"created_at": "2025-11-23T03:32:58Z",
"updated_at": "2026-07-23T10:11:20Z",
"pushed_at": "2026-07-23T09:27:14Z",
"updated_at": "2026-08-12T18:03:08Z",
"pushed_at": "2026-08-12T18:02:25Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2017/CVE-2017-9805.json
+4 -4
View File
@@ -473,15 +473,15 @@
{
"id": 354456108,
"name": "CVE-2017-9805-Exploit",
"full_name": "0xd3vil\/CVE-2017-9805-Exploit",
"full_name": "agent3137\/CVE-2017-9805-Exploit",
"owner": {
"login": "0xd3vil",
"login": "agent3137",
"id": 32324065,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32324065?v=4",
"html_url": "https:\/\/github.com\/0xd3vil",
"html_url": "https:\/\/github.com\/agent3137",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xd3vil\/CVE-2017-9805-Exploit",
"html_url": "https:\/\/github.com\/agent3137\/CVE-2017-9805-Exploit",
"description": "CVE-2017-9805-Exploit",
"fork": false,
"created_at": "2021-04-04T04:35:19Z",
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-08-12T12:07:00Z",
"pushed_at": "2026-08-12T12:06:42Z",
"updated_at": "2026-08-12T17:38:01Z",
"pushed_at": "2026-08-12T17:37:52Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2019/CVE-2019-10945.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Joomla! Core 1.5.0 - 3.9.4 - Directory Traversal \/ Authenticated Arbitrary File Deletion in Python3",
"fork": false,
"created_at": "2023-02-24T10:58:53Z",
"updated_at": "2026-07-04T14:52:49Z",
"updated_at": "2026-08-12T12:25:11Z",
"pushed_at": "2023-02-27T16:32:59Z",
"stargazers_count": 31,
"watchers_count": 31,
"stargazers_count": 32,
"watchers_count": 32,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 31,
"watchers": 32,
"score": 0,
"subscribers_count": 1
},
2020/CVE-2020-1472.json
+10 -10
View File
@@ -47,10 +47,10 @@
"description": "Test tool for CVE-2020-1472",
"fork": false,
"created_at": "2020-09-08T08:58:37Z",
"updated_at": "2026-08-11T20:27:02Z",
"updated_at": "2026-08-12T13:17:15Z",
"pushed_at": "2025-06-27T07:13:13Z",
"stargazers_count": 1826,
"watchers_count": 1826,
"stargazers_count": 1827,
"watchers_count": 1827,
"has_discussions": false,
"forks_count": 358,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 358,
"watchers": 1826,
"watchers": 1827,
"score": 0,
"subscribers_count": 84
},
@@ -113,10 +113,10 @@
"description": "PoC for Zerologon - all research credits go to Tom Tervoort of Secura",
"fork": false,
"created_at": "2020-09-14T16:56:51Z",
"updated_at": "2026-08-05T08:50:55Z",
"updated_at": "2026-08-12T13:49:57Z",
"pushed_at": "2020-11-03T09:45:24Z",
"stargazers_count": 1314,
"watchers_count": 1314,
"stargazers_count": 1315,
"watchers_count": 1315,
"has_discussions": false,
"forks_count": 282,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 282,
"watchers": 1314,
"watchers": 1315,
"score": 0,
"subscribers_count": 34
},
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-08-12T12:10:14Z",
"pushed_at": "2026-08-12T12:09:47Z",
"updated_at": "2026-08-12T17:27:37Z",
"pushed_at": "2026-08-12T17:27:31Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2020/CVE-2020-8597.json
+33
View File
@@ -137,5 +137,38 @@
"watchers": 6,
"score": 0,
"subscribers_count": 1
},
{
"id": 1332267348,
"name": "codeql-buffer-overflow-variant",
"full_name": "anna-kravets\/codeql-buffer-overflow-variant",
"owner": {
"login": "anna-kravets",
"id": 171806947,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/171806947?v=4",
"html_url": "https:\/\/github.com\/anna-kravets",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/anna-kravets\/codeql-buffer-overflow-variant",
"description": "Synthetic CWE-120 stack buffer overflow variant of CVE-2020-8597 (pppd EAP) as a CodeQL static-analysis target",
"fork": false,
"created_at": "2026-08-12T17:07:10Z",
"updated_at": "2026-08-12T17:46:52Z",
"pushed_at": "2026-08-12T17:46:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-08-12T12:08:39Z",
"pushed_at": "2026-08-12T12:08:34Z",
"updated_at": "2026-08-12T17:40:44Z",
"pushed_at": "2026-08-12T17:40:41Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2022/CVE-2022-21894.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "baton drop (CVE-2022-21894): Secure Boot Security Feature Bypass Vulnerability",
"fork": false,
"created_at": "2022-08-09T15:53:48Z",
"updated_at": "2026-07-17T14:57:29Z",
"updated_at": "2026-08-12T14:34:14Z",
"pushed_at": "2023-09-27T06:44:27Z",
"stargazers_count": 352,
"watchers_count": 352,
"stargazers_count": 353,
"watchers_count": 353,
"has_discussions": false,
"forks_count": 64,
"allow_forking": true,
@@ -36,7 +36,7 @@
],
"visibility": "public",
"forks": 64,
"watchers": 352,
"watchers": 353,
"score": 0,
"subscribers_count": 9
},
2022/CVE-2022-25845.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "CVE-2022-25845(fastjson1.2.80) exploit in Spring Env!",
"fork": false,
"created_at": "2024-11-07T13:06:44Z",
"updated_at": "2026-06-12T05:58:16Z",
"updated_at": "2026-08-12T13:42:48Z",
"pushed_at": "2024-11-07T13:38:18Z",
"stargazers_count": 108,
"watchers_count": 108,
"stargazers_count": 109,
"watchers_count": 109,
"has_discussions": false,
"forks_count": 13,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 13,
"watchers": 108,
"watchers": 109,
"score": 0,
"subscribers_count": 3
},
2022/CVE-2022-38694.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 587,
"watchers_count": 587,
"has_discussions": true,
"forks_count": 77,
"forks_count": 78,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -30,7 +30,7 @@
"unisoc"
],
"visibility": "public",
"forks": 77,
"forks": 78,
"watchers": 587,
"score": 0,
"subscribers_count": 13
2024/CVE-2024-0258.json
+2 -2
View File
@@ -11,10 +11,10 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/aliyabuz25\/CVE-2024-0258",
"description": "Technical analysis, reverse engineering notes, and public documentation for Apple's CVE-2024-0258 (libxpc).",
"description": "Security research — reverse engineering and documentation for Apple CVE-2024-0258 (libxpc).",
"fork": false,
"created_at": "2026-06-08T16:59:22Z",
"updated_at": "2026-07-10T18:40:42Z",
"updated_at": "2026-08-12T13:02:26Z",
"pushed_at": "2026-07-10T18:40:07Z",
"stargazers_count": 0,
"watchers_count": 0,
2024/CVE-2024-29943.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "CVE-2024-29943, but with wasm",
"fork": false,
"created_at": "2026-08-10T02:34:36Z",
"updated_at": "2026-08-11T00:56:41Z",
"updated_at": "2026-08-12T13:53:03Z",
"pushed_at": "2026-08-11T00:56:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2024/CVE-2024-45519.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Zimbra - Remote Command Execution (CVE-2024-45519)",
"fork": false,
"created_at": "2024-10-05T00:15:18Z",
"updated_at": "2026-08-10T14:45:11Z",
"updated_at": "2026-08-12T13:08:52Z",
"pushed_at": "2025-04-06T16:49:26Z",
"stargazers_count": 137,
"watchers_count": 137,
"stargazers_count": 138,
"watchers_count": 138,
"has_discussions": false,
"forks_count": 24,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 24,
"watchers": 137,
"watchers": 138,
"score": 0,
"subscribers_count": 3
},
2025/CVE-2025-23211.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": null,
"fork": false,
"created_at": "2026-08-12T04:44:36Z",
"updated_at": "2026-08-12T05:12:33Z",
"pushed_at": "2026-08-12T05:12:10Z",
"updated_at": "2026-08-12T15:39:38Z",
"pushed_at": "2026-08-12T15:39:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-24204.json
+1 -1
View File
@@ -47,7 +47,7 @@
"description": "FairPlay decryptor (dump iPA) for iOS Application that running on macOS with SIP-enabled, using CVE-2025-24204. Support macOS 15.0-15.2",
"fork": false,
"created_at": "2025-09-04T17:49:51Z",
"updated_at": "2026-08-04T20:36:58Z",
"updated_at": "2026-08-12T14:14:04Z",
"pushed_at": "2025-09-04T17:59:49Z",
"stargazers_count": 149,
"watchers_count": 149,
2025/CVE-2025-36911.json
+4 -4
View File
@@ -86,10 +86,10 @@
"description": "WPair is a defensive security research tool that demonstrates the CVE-2025-36911 (eg WhisperPair) vulnerability in Google's Fast Pair protocol. This vulnerability affects millions of Bluetooth audio devices worldwide, allowing unauthorized pairing and potential microphone access without user consent.",
"fork": false,
"created_at": "2026-01-17T05:28:08Z",
"updated_at": "2026-08-12T00:53:36Z",
"updated_at": "2026-08-12T13:13:04Z",
"pushed_at": "2026-01-18T00:15:59Z",
"stargazers_count": 822,
"watchers_count": 822,
"stargazers_count": 823,
"watchers_count": 823,
"has_discussions": false,
"forks_count": 90,
"allow_forking": true,
@@ -100,7 +100,7 @@
"topics": [],
"visibility": "public",
"forks": 90,
"watchers": 822,
"watchers": 823,
"score": 0,
"subscribers_count": 23
},
2025/CVE-2025-49173.json
+5 -5
View File
@@ -1,8 +1,8 @@
[
{
"id": 1113555771,
"name": "cve-2025-49173-macos-mavericks-10.9-local-root-privesc-auth-services",
"full_name": "aliyabuz25\/cve-2025-49173-macos-mavericks-10.9-local-root-privesc-auth-services",
"name": "CVE-2025-49173",
"full_name": "aliyabuz25\/CVE-2025-49173",
"owner": {
"login": "aliyabuz25",
"id": 202120186,
@@ -10,11 +10,11 @@
"html_url": "https:\/\/github.com\/aliyabuz25",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/aliyabuz25\/cve-2025-49173-macos-mavericks-10.9-local-root-privesc-auth-services",
"description": "Official PoC research for a local root privilege escalation vulnerability affecting macOS Mavericks (10.9).",
"html_url": "https:\/\/github.com\/aliyabuz25\/CVE-2025-49173",
"description": "Security research — PoC for local root privilege escalation on macOS Mavericks 10.9.",
"fork": false,
"created_at": "2025-12-10T06:20:52Z",
"updated_at": "2025-12-10T06:25:15Z",
"updated_at": "2026-08-12T13:02:27Z",
"pushed_at": "2025-12-10T06:23:11Z",
"stargazers_count": 0,
"watchers_count": 0,
2025/CVE-2025-54794.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "A high-severity prompt injection flaw in Claude AI proves that even the smartest language models can be turned into weapons — all with a few lines of code.",
"fork": false,
"created_at": "2025-08-06T08:29:35Z",
"updated_at": "2026-08-09T17:20:47Z",
"updated_at": "2026-08-12T17:19:58Z",
"pushed_at": "2025-08-06T08:43:29Z",
"stargazers_count": 36,
"watchers_count": 36,
"stargazers_count": 37,
"watchers_count": 37,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 36,
"watchers": 37,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-55182.json
+4 -4
View File
@@ -871,10 +871,10 @@
"description": "High Fidelity Detection Mechanism for RSC\/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)",
"fork": false,
"created_at": "2025-12-04T06:55:04Z",
"updated_at": "2026-08-09T07:38:57Z",
"updated_at": "2026-08-12T14:41:43Z",
"pushed_at": "2025-12-07T04:16:46Z",
"stargazers_count": 2455,
"watchers_count": 2455,
"stargazers_count": 2456,
"watchers_count": 2456,
"has_discussions": false,
"forks_count": 273,
"allow_forking": true,
@@ -885,7 +885,7 @@
"topics": [],
"visibility": "public",
"forks": 273,
"watchers": 2455,
"watchers": 2456,
"score": 0,
"subscribers_count": 11
},
2025/CVE-2025-7771.json
+8 -8
View File
@@ -47,10 +47,10 @@
"description": "CVE-2025-7771 ThrottleStop.sys privilege escalation exploit - unrestricted IOCTL access to physical memory via MmMapIoSpace",
"fork": false,
"created_at": "2025-09-07T11:46:52Z",
"updated_at": "2026-06-30T23:37:54Z",
"updated_at": "2026-08-12T16:28:39Z",
"pushed_at": "2025-09-07T11:47:59Z",
"stargazers_count": 10,
"watchers_count": 10,
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 10,
"watchers": 11,
"score": 0,
"subscribers_count": 0
},
@@ -371,10 +371,10 @@
"description": "ThrottleStop.sys Arbitrary Physical Memory R\/W",
"fork": false,
"created_at": "2026-08-10T23:15:36Z",
"updated_at": "2026-08-12T08:00:55Z",
"updated_at": "2026-08-12T17:35:45Z",
"pushed_at": "2026-08-10T23:15:39Z",
"stargazers_count": 8,
"watchers_count": 8,
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -385,7 +385,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 8,
"watchers": 10,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-0023.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-06-10T18:42:22Z",
"updated_at": "2026-07-20T08:34:11Z",
"updated_at": "2026-08-12T14:11:53Z",
"pushed_at": "2026-06-10T18:48:53Z",
"stargazers_count": 8,
"watchers_count": 8,
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 8,
"watchers": 9,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-11387.json → 2026/CVE-2026-0075.json
+12 -12
View File
@@ -1,21 +1,21 @@
[
{
"id": 1288059878,
"name": "CVE-2026-11387",
"full_name": "1beelze\/CVE-2026-11387",
"id": 1332041656,
"name": "CVE-2026-0075",
"full_name": "QM4RS\/CVE-2026-0075",
"owner": {
"login": "1beelze",
"id": 299446836,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/299446836?v=4",
"html_url": "https:\/\/github.com\/1beelze",
"login": "QM4RS",
"id": 76250959,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/76250959?v=4",
"html_url": "https:\/\/github.com\/QM4RS",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/1beelze\/CVE-2026-11387",
"description": null,
"html_url": "https:\/\/github.com\/QM4RS\/CVE-2026-0075",
"description": "CVE-2026-0075 — Android ContactsProvider information disclosure via JSON error side-channel, including PoC, root-cause analysis, and patch details.",
"fork": false,
"created_at": "2026-07-03T08:35:14Z",
"updated_at": "2026-07-03T09:31:24Z",
"pushed_at": "2026-07-03T09:25:49Z",
"created_at": "2026-08-12T13:09:06Z",
"updated_at": "2026-08-12T14:07:44Z",
"pushed_at": "2026-08-12T13:09:11Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-14266.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "CVE-2026-14266 - XZ Heap Buffer Overflow PoC Generator for 7-Zip",
"fork": false,
"created_at": "2026-07-22T14:32:34Z",
"updated_at": "2026-08-07T18:01:21Z",
"updated_at": "2026-08-12T14:04:01Z",
"pushed_at": "2026-07-23T12:25:47Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-14459.json
-45
View File
@@ -1,45 +0,0 @@
[
{
"id": 1288525092,
"name": "CVE-2026-14459-14460-pardus-software",
"full_name": "dasokkk\/CVE-2026-14459-14460-pardus-software",
"owner": {
"login": "dasokkk",
"id": 60160607,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/60160607?v=4",
"html_url": "https:\/\/github.com\/dasokkk",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/dasokkk\/CVE-2026-14459-14460-pardus-software",
"description": "Pardus Software Local Privilege Escalation PoC - affected from <= 1.0.4",
"fork": false,
"created_at": "2026-07-03T17:30:00Z",
"updated_at": "2026-07-03T17:38:03Z",
"pushed_at": "2026-07-03T17:32:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"linux",
"local-privilege-escalation",
"pardus",
"pardus-linux",
"pardus-linux-distribution",
"poc",
"polkit",
"privilege-escalation",
"security-research"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-17106.json
+51 -4
View File
@@ -14,10 +14,10 @@
"description": "PoC repository for the blog post CopyEscape: Taking Over Docker Hosts with docker cp",
"fork": false,
"created_at": "2026-08-09T21:02:40Z",
"updated_at": "2026-08-12T08:34:20Z",
"updated_at": "2026-08-12T13:12:41Z",
"pushed_at": "2026-08-09T21:04:41Z",
"stargazers_count": 8,
"watchers_count": 8,
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 8,
"watchers": 9,
"score": 0,
"subscribers_count": 0
},
@@ -64,5 +64,52 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1332245711,
"name": "POC-CopyEscape-CVE-2026-17106",
"full_name": "686f6c61\/POC-CopyEscape-CVE-2026-17106",
"owner": {
"login": "686f6c61",
"id": 6115107,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/6115107?v=4",
"html_url": "https:\/\/github.com\/686f6c61",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/686f6c61\/POC-CopyEscape-CVE-2026-17106",
"description": "PoC funcional de CVE-2026-17106 (CopyEscape): carrera TOCTOU en docker cp que permite escritura arbitraria en el host Docker. Laboratorio Docker + monitor inotify + LD_PRELOAD. Variante macOS inocua y Linux destructiva.",
"fork": false,
"created_at": "2026-08-12T16:41:52Z",
"updated_at": "2026-08-12T16:42:20Z",
"pushed_at": "2026-08-12T16:41:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"container-escape",
"cve",
"cve-2026-17106",
"docker",
"docker-security",
"exploit",
"inotify",
"ld-preload",
"proof-of-concept",
"race-condition",
"security",
"tar-slip",
"toctou"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-17544.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1332276508,
"name": "CVE-2026-17544-PoC",
"full_name": "Boreas37\/CVE-2026-17544-PoC",
"owner": {
"login": "Boreas37",
"id": 185066905,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/185066905?v=4",
"html_url": "https:\/\/github.com\/Boreas37",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Boreas37\/CVE-2026-17544-PoC",
"description": "CVE-2026-17544 — PHP bcmath bccomp() OOB write (stack smashing). Verified: crash on 8.4.23\/8.5.8, fixed in 8.4.24. GHSA-x692-q9x7-8c3f",
"fork": false,
"created_at": "2026-08-12T17:17:50Z",
"updated_at": "2026-08-12T17:48:38Z",
"pushed_at": "2026-08-12T17:17:54Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-23111.json
+43
View File
@@ -203,5 +203,48 @@
"watchers": 7,
"score": 0,
"subscribers_count": 0
},
{
"id": 1332055587,
"name": "CVE-2026-23111-POC-noddlenpottato",
"full_name": "Knz-source\/CVE-2026-23111-POC-noddlenpottato",
"owner": {
"login": "Knz-source",
"id": 72115510,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/72115510?v=4",
"html_url": "https:\/\/github.com\/Knz-source",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Knz-source\/CVE-2026-23111-POC-noddlenpottato",
"description": "CVE-2026-23111 nf_tables catchall UAF — unprivileged LPE for Linux 5.10-6.18. Auto-adaptive exploit with KASLR bypass, arbitrary kernel read, and ROP chain. Supports Debian, Ubuntu, RHEL, Fedora. C\/Python\/Rust + autopwn.",
"fork": false,
"created_at": "2026-08-12T13:23:42Z",
"updated_at": "2026-08-12T14:36:29Z",
"pushed_at": "2026-08-12T13:34:58Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-23111",
"exploit",
"kernel-exploit",
"linux-kernel",
"lpe",
"nftables",
"privilege-escalation",
"security-research",
"uaf"
],
"visibility": "public",
"forks": 0,
"watchers": 5,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-23869.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 1288972192,
"name": "mitigate-cve-2026-23869-react-server-component-loops",
"full_name": "shaheryar773\/mitigate-cve-2026-23869-react-server-component-loops",
"owner": {
"login": "shaheryar773",
"id": 219460677,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/219460677?v=4",
"html_url": "https:\/\/github.com\/shaheryar773",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/shaheryar773\/mitigate-cve-2026-23869-react-server-component-loops",
"description": "Technical troubleshooting repository for fixing infinite rendering vulnerability loops and resource exhaustion threats under CVE-2026-23869 cleanly.",
"fork": false,
"created_at": "2026-07-04T07:17:38Z",
"updated_at": "2026-07-04T07:19:20Z",
"pushed_at": "2026-07-04T07:19:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-2764.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-2764, but with wasm",
"fork": false,
"created_at": "2026-08-11T01:19:14Z",
"updated_at": "2026-08-11T01:19:24Z",
"updated_at": "2026-08-12T13:53:02Z",
"pushed_at": "2026-08-11T01:19:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-2766.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-2766, but with wasm",
"fork": false,
"created_at": "2026-08-11T02:36:01Z",
"updated_at": "2026-08-12T12:31:08Z",
"updated_at": "2026-08-12T13:53:01Z",
"pushed_at": "2026-08-12T12:30:58Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-27912.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "POC tool for ResetNightmare (CVE-2026-27912)",
"fork": false,
"created_at": "2026-08-02T12:36:16Z",
"updated_at": "2026-08-12T11:20:58Z",
"updated_at": "2026-08-12T16:34:09Z",
"pushed_at": "2026-08-02T14:30:24Z",
"stargazers_count": 182,
"watchers_count": 182,
"stargazers_count": 183,
"watchers_count": 183,
"has_discussions": false,
"forks_count": 29,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 29,
"watchers": 182,
"watchers": 183,
"score": 0,
"subscribers_count": 1
},
2026/CVE-2026-36851.json → 2026/CVE-2026-28956.json
+12 -12
View File
@@ -1,21 +1,21 @@
[
{
"id": 1288421360,
"name": "CVE-2026-36851",
"full_name": "SyntaxSaiyan\/CVE-2026-36851",
"id": 1332114767,
"name": "CVE-2026-28956",
"full_name": "HORKimhab\/CVE-2026-28956",
"owner": {
"login": "SyntaxSaiyan",
"id": 52224042,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/52224042?v=4",
"html_url": "https:\/\/github.com\/SyntaxSaiyan",
"login": "HORKimhab",
"id": 41143106,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41143106?v=4",
"html_url": "https:\/\/github.com\/HORKimhab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/SyntaxSaiyan\/CVE-2026-36851",
"description": "Walkthrough and PoC of File path traversal vulnerability(CVE-2026-36851) for UnPoller 2.33.0",
"html_url": "https:\/\/github.com\/HORKimhab\/CVE-2026-28956",
"description": "CVE-2026-28956 - Draft or TODO",
"fork": false,
"created_at": "2026-07-03T15:27:49Z",
"updated_at": "2026-07-03T16:02:13Z",
"pushed_at": "2026-07-03T16:02:07Z",
"created_at": "2026-08-12T14:23:48Z",
"updated_at": "2026-08-12T14:26:14Z",
"pushed_at": "2026-08-12T14:25:41Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-28990.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 45,
"watchers_count": 45,
"has_discussions": false,
"forks_count": 6,
"forks_count": 5,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 6,
"forks": 5,
"watchers": 45,
"score": 0,
"subscribers_count": 2
2026/CVE-2026-31431.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 441,
"watchers_count": 441,
"has_discussions": true,
"forks_count": 122,
"forks_count": 121,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -73,7 +73,7 @@
"security-research"
],
"visibility": "public",
"forks": 122,
"forks": 121,
"watchers": 441,
"score": 0,
"subscribers_count": 2
2026/CVE-2026-33017.json
-33
View File
@@ -65,39 +65,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1289137451,
"name": "CVE-2026-33017",
"full_name": "yayip\/CVE-2026-33017",
"owner": {
"login": "yayip",
"id": 39186995,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/39186995?v=4",
"html_url": "https:\/\/github.com\/yayip",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/yayip\/CVE-2026-33017",
"description": "PoC of Langflow CVE-2026-33017",
"fork": false,
"created_at": "2026-07-04T11:27:58Z",
"updated_at": "2026-07-04T11:29:44Z",
"pushed_at": "2026-07-04T11:29:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1289532430,
"name": "CVE-2026-33017-Exploit",
2026/CVE-2026-33267.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1332277126,
"name": "CVE-2026-33267-PoC",
"full_name": "Boreas37\/CVE-2026-33267-PoC",
"owner": {
"login": "Boreas37",
"id": 185066905,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/185066905?v=4",
"html_url": "https:\/\/github.com\/Boreas37",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Boreas37\/CVE-2026-33267-PoC",
"description": "CVE-2026-33267 — Apache Traffic Server @ header internal-metadata spoof (CVSS 10.0). Verified: @ headers leak to plugins on 10.1.2, stripped on 10.1.4",
"fork": false,
"created_at": "2026-08-12T17:18:32Z",
"updated_at": "2026-08-12T17:49:52Z",
"pushed_at": "2026-08-12T17:18:36Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-34197.json
-33
View File
@@ -131,39 +131,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1288953273,
"name": "apache-activemq-rce-research",
"full_name": "dinosn\/apache-activemq-rce-research",
"owner": {
"login": "dinosn",
"id": 3851678,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/3851678?v=4",
"html_url": "https:\/\/github.com\/dinosn",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/dinosn\/apache-activemq-rce-research",
"description": "Apache ActiveMQ Classic RCE research: CVE-2026-34197 \/ CVE-2026-42588 bypass chain + hardened-6.2.6 audit findings + Crowdfense comparison ",
"fork": false,
"created_at": "2026-07-04T06:45:18Z",
"updated_at": "2026-07-27T02:38:21Z",
"pushed_at": "2026-07-04T07:07:26Z",
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 8,
"score": 0,
"subscribers_count": 0
},
{
"id": 1293518534,
"name": "CVE-2026-34197",
2026/CVE-2026-41089.json
+2 -2
View File
@@ -215,7 +215,7 @@
"stargazers_count": 20,
"watchers_count": 20,
"has_discussions": false,
"forks_count": 26,
"forks_count": 23,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -236,7 +236,7 @@
"zero-day"
],
"visibility": "public",
"forks": 26,
"forks": 23,
"watchers": 20,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-41452.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1332339011,
"name": "CVE-2026-41452-PoC",
"full_name": "Boreas37\/CVE-2026-41452-PoC",
"owner": {
"login": "Boreas37",
"id": 185066905,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/185066905?v=4",
"html_url": "https:\/\/github.com\/Boreas37",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Boreas37\/CVE-2026-41452-PoC",
"description": "CVE-2026-41452 — Krayin CRM unauth installer bypass (X-Requested-With) → admin takeover. Verified: overwrite + login on 2.2.4, blocked on 2.2.5",
"fork": false,
"created_at": "2026-08-12T18:35:57Z",
"updated_at": "2026-08-12T18:36:12Z",
"pushed_at": "2026-08-12T18:36:01Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-41651.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Exploit for CVE-2026-41651 - PackageKit TOCTOU Local Privilege Escalation (Pack2TheRoot)",
"fork": false,
"created_at": "2026-05-20T07:26:05Z",
"updated_at": "2026-08-05T21:49:51Z",
"updated_at": "2026-08-12T13:24:49Z",
"pushed_at": "2026-05-20T07:48:15Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -68,7 +68,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-41940.json
+3 -3
View File
@@ -609,12 +609,12 @@
"description": "A cPanel and WHM authentication bypassing tool",
"fork": false,
"created_at": "2026-07-20T14:15:54Z",
"updated_at": "2026-08-12T11:23:19Z",
"updated_at": "2026-08-12T15:48:04Z",
"pushed_at": "2026-08-08T20:09:34Z",
"stargazers_count": 321,
"watchers_count": 321,
"has_discussions": false,
"forks_count": 41,
"forks_count": 42,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -628,7 +628,7 @@
"python"
],
"visibility": "public",
"forks": 41,
"forks": 42,
"watchers": 321,
"score": 0,
"subscribers_count": 9
2026/CVE-2026-43499.json
+48 -48
View File
@@ -348,10 +348,10 @@
"description": "GhostLock (CVE-2026-43499) kernel exploit for OnePlus devices with locked bootloader",
"fork": false,
"created_at": "2026-07-12T16:05:24Z",
"updated_at": "2026-08-12T09:02:09Z",
"updated_at": "2026-08-12T15:14:58Z",
"pushed_at": "2026-08-06T09:48:14Z",
"stargazers_count": 246,
"watchers_count": 246,
"stargazers_count": 247,
"watchers_count": 247,
"has_discussions": false,
"forks_count": 54,
"allow_forking": true,
@@ -369,7 +369,7 @@
],
"visibility": "public",
"forks": 54,
"watchers": 246,
"watchers": 247,
"score": 0,
"subscribers_count": 10
},
@@ -426,7 +426,7 @@
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 2,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -434,7 +434,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"forks": 3,
"watchers": 5,
"score": 0,
"subscribers_count": 0
@@ -525,7 +525,7 @@
"stargazers_count": 45,
"watchers_count": 45,
"has_discussions": false,
"forks_count": 6,
"forks_count": 7,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -533,7 +533,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 6,
"forks": 7,
"watchers": 45,
"score": 0,
"subscribers_count": 0
@@ -586,10 +586,10 @@
"description": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.",
"fork": false,
"created_at": "2026-07-14T14:21:27Z",
"updated_at": "2026-08-12T11:55:24Z",
"updated_at": "2026-08-12T17:32:17Z",
"pushed_at": "2026-07-30T11:28:07Z",
"stargazers_count": 52,
"watchers_count": 52,
"stargazers_count": 53,
"watchers_count": 53,
"has_discussions": false,
"forks_count": 16,
"allow_forking": true,
@@ -600,7 +600,7 @@
"topics": [],
"visibility": "public",
"forks": 16,
"watchers": 52,
"watchers": 53,
"score": 0,
"subscribers_count": 0
},
@@ -718,10 +718,10 @@
"description": "Xiaomi K70e (duchamp) one-click root via CVE-2026-43499 (IonStack) + KernelSU integration",
"fork": false,
"created_at": "2026-07-15T03:59:56Z",
"updated_at": "2026-08-11T13:55:56Z",
"updated_at": "2026-08-12T16:20:44Z",
"pushed_at": "2026-07-31T03:13:27Z",
"stargazers_count": 46,
"watchers_count": 46,
"stargazers_count": 48,
"watchers_count": 48,
"has_discussions": true,
"forks_count": 14,
"allow_forking": true,
@@ -732,7 +732,7 @@
"topics": [],
"visibility": "public",
"forks": 14,
"watchers": 46,
"watchers": 48,
"score": 0,
"subscribers_count": 1
},
@@ -1081,12 +1081,12 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
"updated_at": "2026-08-12T12:47:19Z",
"updated_at": "2026-08-12T16:57:08Z",
"pushed_at": "2026-08-09T05:13:42Z",
"stargazers_count": 786,
"watchers_count": 786,
"stargazers_count": 788,
"watchers_count": 788,
"has_discussions": false,
"forks_count": 134,
"forks_count": 135,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1094,8 +1094,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 134,
"watchers": 786,
"forks": 135,
"watchers": 788,
"score": 0,
"subscribers_count": 24
},
@@ -1496,10 +1496,10 @@
"description": "（CVE-2026-43499）内核漏洞利用程序，适用于未解锁 Bootloader 的一加15T.",
"fork": false,
"created_at": "2026-07-25T03:02:29Z",
"updated_at": "2026-08-11T20:08:35Z",
"updated_at": "2026-08-12T14:33:34Z",
"pushed_at": "2026-07-25T04:13:46Z",
"stargazers_count": 13,
"watchers_count": 13,
"stargazers_count": 14,
"watchers_count": 14,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -1510,7 +1510,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 13,
"watchers": 14,
"score": 0,
"subscribers_count": 0
},
@@ -1529,10 +1529,10 @@
"description": "CVE-2026-43499 per-boot root exploit — core logic (arm64 Android GKI 6.6)",
"fork": false,
"created_at": "2026-07-25T03:57:16Z",
"updated_at": "2026-07-31T14:55:41Z",
"updated_at": "2026-08-12T18:25:53Z",
"pushed_at": "2026-08-08T13:42:00Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -1543,7 +1543,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
@@ -1595,7 +1595,7 @@
"description": "CVE-2026-43499 research port for Galaxy S24 Ultra SM-S928U1 DZF2 (in progress)",
"fork": false,
"created_at": "2026-07-26T11:55:26Z",
"updated_at": "2026-08-11T23:16:57Z",
"updated_at": "2026-08-12T18:19:59Z",
"pushed_at": "2026-08-11T21:32:03Z",
"stargazers_count": 4,
"watchers_count": 4,
@@ -2070,10 +2070,10 @@
"description": "Jailbreak supported Google Pixel phones with CVE-2026-43499",
"fork": false,
"created_at": "2026-08-02T17:34:45Z",
"updated_at": "2026-08-12T09:33:43Z",
"pushed_at": "2026-08-11T18:46:51Z",
"stargazers_count": 134,
"watchers_count": 134,
"updated_at": "2026-08-12T17:25:14Z",
"pushed_at": "2026-08-12T17:25:07Z",
"stargazers_count": 135,
"watchers_count": 135,
"has_discussions": false,
"forks_count": 29,
"allow_forking": true,
@@ -2090,7 +2090,7 @@
],
"visibility": "public",
"forks": 29,
"watchers": 134,
"watchers": 135,
"score": 0,
"subscribers_count": 4
},
@@ -2175,10 +2175,10 @@
"description": "GhostLock (CVE-2026-43499) exploit adapted for Honor AAK-AN00 (MagicOS 10, kernel 6.6.89-android15)",
"fork": false,
"created_at": "2026-08-04T20:11:37Z",
"updated_at": "2026-08-10T17:33:15Z",
"updated_at": "2026-08-12T18:04:16Z",
"pushed_at": "2026-08-10T17:30:48Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -2189,7 +2189,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
@@ -2241,10 +2241,10 @@
"description": "Root your Galaxy using CVE-2026-43499",
"fork": false,
"created_at": "2026-08-08T11:41:33Z",
"updated_at": "2026-08-12T02:49:08Z",
"updated_at": "2026-08-12T18:51:13Z",
"pushed_at": "2026-08-10T12:39:32Z",
"stargazers_count": 14,
"watchers_count": 14,
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -2255,7 +2255,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 14,
"watchers": 16,
"score": 0,
"subscribers_count": 0
},
@@ -2505,10 +2505,10 @@
"description": "SM-F9360 (Galaxy Z Fold4, q4q) locked-bootloader KernelSU root — CVE-2026-43499 temp root → LD_PRELOAD DEFEX bypass → no-LTO clang-12 kernelsu.ko. Device-verified 2026-08-12.",
"fork": false,
"created_at": "2026-08-12T08:10:15Z",
"updated_at": "2026-08-12T08:10:29Z",
"updated_at": "2026-08-12T14:31:42Z",
"pushed_at": "2026-08-12T08:11:04Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -2519,7 +2519,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-43724.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 20,
"watchers_count": 20,
"has_discussions": false,
"forks_count": 6,
"forks_count": 5,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 6,
"forks": 5,
"watchers": 20,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-44402.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Pre-Authenticated Full Root Remote Command Execution in Voltronic Power SNMP Web Pro 1.1",
"fork": false,
"created_at": "2026-08-12T11:35:20Z",
"updated_at": "2026-08-12T12:49:51Z",
"updated_at": "2026-08-12T13:49:09Z",
"pushed_at": "2026-08-12T12:49:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-44825.json
-42
View File
@@ -1,46 +1,4 @@
[
{
"id": 1288743480,
"name": "solrradar",
"full_name": "shinthink\/solrradar",
"owner": {
"login": "shinthink",
"id": 292174078,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/292174078?v=4",
"html_url": "https:\/\/github.com\/shinthink",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/shinthink\/solrradar",
"description": "☄️ Mass reconnaissance & exploitation framework for Apache Solr CVE-2026-44825 — Velocity template injection to RCE",
"fork": false,
"created_at": "2026-07-03T23:24:25Z",
"updated_at": "2026-07-05T18:07:57Z",
"pushed_at": "2026-07-03T23:56:38Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"apache-solr",
"cve-2026-44825",
"exploit",
"pentesting",
"python",
"rce",
"security-tools",
"vulnerability-scanner"
],
"visibility": "public",
"forks": 1,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
{
"id": 1293914065,
"name": "CVE-2026-44825-Apache-Solr-Scanner",
2026/CVE-2026-46300.json
+4 -4
View File
@@ -416,10 +416,10 @@
"description": "CVE-2026-43284 - CVE-2026-43500 - CVE-2026-46300 Variant of dirtyfrag exploit",
"fork": false,
"created_at": "2026-06-30T18:15:27Z",
"updated_at": "2026-06-30T18:26:39Z",
"updated_at": "2026-08-12T18:37:09Z",
"pushed_at": "2026-06-30T18:26:32Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -430,7 +430,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-48907.json
-33
View File
@@ -509,39 +509,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1288827812,
"name": "CVE-2026-48907",
"full_name": "bayu06802\/CVE-2026-48907",
"owner": {
"login": "bayu06802",
"id": 134147423,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/134147423?v=4",
"html_url": "https:\/\/github.com\/bayu06802",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/bayu06802\/CVE-2026-48907",
"description": "Python & template nuclei",
"fork": false,
"created_at": "2026-07-04T02:43:56Z",
"updated_at": "2026-07-04T02:44:53Z",
"pushed_at": "2026-07-04T02:44:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1305540366,
"name": "CVE-2026-48907_PoC",
2026/CVE-2026-48908.json
+33
View File
@@ -366,5 +366,38 @@
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1332218671,
"name": "CVE-2026-48908-by-yora",
"full_name": "yora1928\/CVE-2026-48908-by-yora",
"owner": {
"login": "yora1928",
"id": 293059973,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/293059973?v=4",
"html_url": "https:\/\/github.com\/yora1928",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/yora1928\/CVE-2026-48908-by-yora",
"description": "Passive security checker for CVE-2026-48908 affecting SP Page Builder.",
"fork": false,
"created_at": "2026-08-12T16:12:13Z",
"updated_at": "2026-08-12T17:22:36Z",
"pushed_at": "2026-08-12T17:19:21Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-49468.json
-42
View File
@@ -1,42 +0,0 @@
[
{
"id": 1287932701,
"name": "CVE-2026-49468-LiteLLM-Auth-Bypass",
"full_name": "BiiTts\/CVE-2026-49468-LiteLLM-Auth-Bypass",
"owner": {
"login": "BiiTts",
"id": 149285563,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/149285563?v=4",
"html_url": "https:\/\/github.com\/BiiTts",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/BiiTts\/CVE-2026-49468-LiteLLM-Auth-Bypass",
"description": "CVE-2026-49468 — LiteLLM (<1.84.0) unauthenticated auth bypass via Host-header route confusion. PoC + docker lab.",
"fork": false,
"created_at": "2026-07-03T06:05:18Z",
"updated_at": "2026-07-03T06:08:52Z",
"pushed_at": "2026-07-03T06:08:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"authentication-bypass",
"cve-2026-49468",
"litellm",
"llm-security",
"poc",
"route-confusion"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-50416.json
+1 -1
View File
@@ -15,7 +15,7 @@
"fork": false,
"created_at": "2026-07-17T12:12:33Z",
"updated_at": "2026-08-01T10:48:29Z",
"pushed_at": "2026-07-18T13:45:51Z",
"pushed_at": "2026-08-12T17:03:46Z",
"stargazers_count": 44,
"watchers_count": 44,
"has_discussions": false,
2026/CVE-2026-53361.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-53361 AF_UNIX GC vs MSG_PEEK use-after-free container escape",
"fork": false,
"created_at": "2026-08-10T19:59:45Z",
"updated_at": "2026-08-12T09:30:57Z",
"updated_at": "2026-08-12T17:28:27Z",
"pushed_at": "2026-08-11T11:43:30Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 5,
"watchers": 7,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-54415.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 1289122014,
"name": "CVE-2026-54415-PoC",
"full_name": "abdugafforov-bobur\/CVE-2026-54415-PoC",
"owner": {
"login": "abdugafforov-bobur",
"id": 152521876,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/152521876?v=4",
"html_url": "https:\/\/github.com\/abdugafforov-bobur",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/abdugafforov-bobur\/CVE-2026-54415-PoC",
"description": "PoC for CVE-2026-54415 — Azuriom CMS (<1.2.11) Broken Access Control → account takeover",
"fork": false,
"created_at": "2026-07-04T11:11:16Z",
"updated_at": "2026-07-25T11:33:25Z",
"pushed_at": "2026-07-04T11:15:25Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-55040.json
+6 -6
View File
@@ -47,12 +47,12 @@
"description": "Microsoft SharePoint JWT Authentication Bypass (CVE-2026-55040)",
"fork": false,
"created_at": "2026-08-06T11:46:34Z",
"updated_at": "2026-08-12T12:46:26Z",
"updated_at": "2026-08-12T17:02:30Z",
"pushed_at": "2026-08-10T15:35:23Z",
"stargazers_count": 22,
"watchers_count": 22,
"stargazers_count": 27,
"watchers_count": 27,
"has_discussions": false,
"forks_count": 4,
"forks_count": 6,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,8 +60,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 22,
"forks": 6,
"watchers": 27,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-5524.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 1288763594,
"name": "CVE-2026-5524-PoC",
"full_name": "caterscam\/CVE-2026-5524-PoC",
"owner": {
"login": "caterscam",
"id": 123180056,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123180056?v=4",
"html_url": "https:\/\/github.com\/caterscam",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/caterscam\/CVE-2026-5524-PoC",
"description": null,
"fork": false,
"created_at": "2026-07-04T00:12:54Z",
"updated_at": "2026-07-29T01:18:09Z",
"pushed_at": "2026-07-04T01:44:20Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-56290.json
-44
View File
@@ -32,50 +32,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1288758716,
"name": "pbck-exploit",
"full_name": "shinthink\/pbck-exploit",
"owner": {
"login": "shinthink",
"id": 292174078,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/292174078?v=4",
"html_url": "https:\/\/github.com\/shinthink",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/shinthink\/pbck-exploit",
"description": "📤 Mass exploitation framework for CVE-2026-56290 — Page Builder CK Joomla unauthenticated file upload to RCE",
"fork": false,
"created_at": "2026-07-04T00:01:31Z",
"updated_at": "2026-07-10T08:02:16Z",
"pushed_at": "2026-07-04T00:01:36Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-56290",
"exploit",
"file-upload",
"joomla",
"pagebuilderck",
"pentesting",
"python",
"rce",
"security-tools",
"vulnerability-scanner"
],
"visibility": "public",
"forks": 0,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1293052504,
"name": "CVE-2026-56290",
2026/CVE-2026-59827.json
+33
View File
@@ -64,5 +64,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1332125451,
"name": "CVE-2026-59827",
"full_name": "Gutierre0x80\/CVE-2026-59827",
"owner": {
"login": "Gutierre0x80",
"id": 63872706,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/63872706?v=4",
"html_url": "https:\/\/github.com\/Gutierre0x80",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Gutierre0x80\/CVE-2026-59827",
"description": "Technical analysis and proof of concept for CVE-2026-59827, a critical unsafe Java deserialization vulnerability in Metabase leading to remote code execution.",
"fork": false,
"created_at": "2026-08-12T14:34:15Z",
"updated_at": "2026-08-12T16:42:05Z",
"pushed_at": "2026-08-12T15:06:19Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-64531.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Tracking OVSwrap (CVE-2026-64531), the Open vSwitch datapath netlink overflow",
"fork": false,
"created_at": "2026-07-29T05:15:24Z",
"updated_at": "2026-08-12T03:39:27Z",
"pushed_at": "2026-08-12T03:39:23Z",
"updated_at": "2026-08-12T16:36:26Z",
"pushed_at": "2026-08-12T16:35:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-64563.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1332239863,
"name": "CVE-2026-64563_EXP",
"full_name": "guard-wait\/CVE-2026-64563_EXP",
"owner": {
"login": "guard-wait",
"id": 98081165,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/98081165?v=4",
"html_url": "https:\/\/github.com\/guard-wait",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/guard-wait\/CVE-2026-64563_EXP",
"description": "关于CVE-2026-64563未完全验证的一种利用思路",
"fork": false,
"created_at": "2026-08-12T16:35:16Z",
"updated_at": "2026-08-12T16:53:51Z",
"pushed_at": "2026-08-12T16:53:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-64564.json
+2 -2
View File
@@ -80,8 +80,8 @@
"description": "Tracking SCTPhantom (CVE-2026-64564), the Linux kernel SCTP ASCONF transport use-after-free",
"fork": false,
"created_at": "2026-08-10T05:16:43Z",
"updated_at": "2026-08-12T03:39:41Z",
"pushed_at": "2026-08-12T03:39:24Z",
"updated_at": "2026-08-12T16:40:29Z",
"pushed_at": "2026-08-12T16:40:23Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-64600.json
+8 -8
View File
@@ -113,10 +113,10 @@
"description": "A C-based Linux security utility for detecting, safely verifying (Proof of Concept), and mitigating CVE-2026-64600 (RefluXFS). It provides kernel vulnerability assessment, XFS reflink detection, a safe race-condition PoC, and layered mitigation using SystemTap and XFS hardening.",
"fork": false,
"created_at": "2026-07-26T12:22:52Z",
"updated_at": "2026-08-05T07:02:00Z",
"updated_at": "2026-08-12T16:18:54Z",
"pushed_at": "2026-07-26T12:46:42Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -140,7 +140,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
@@ -159,10 +159,10 @@
"description": "A POC for the recently discovered Qualys bug on COW with XFS",
"fork": false,
"created_at": "2026-07-27T06:42:58Z",
"updated_at": "2026-08-07T15:36:03Z",
"updated_at": "2026-08-12T16:15:32Z",
"pushed_at": "2026-07-30T08:06:02Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -179,7 +179,7 @@
],
"visibility": "public",
"forks": 2,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-68138.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "CVE-2026-68138 Linux qdisc rate-table race local privilege escalation PoC",
"fork": false,
"created_at": "2026-08-11T22:22:22Z",
"updated_at": "2026-08-12T09:10:23Z",
"pushed_at": "2026-08-12T08:20:50Z",
"updated_at": "2026-08-12T15:32:12Z",
"pushed_at": "2026-08-12T15:31:34Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-68398.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1332154920,
"name": "CVE-2026-68398",
"full_name": "aramosf\/CVE-2026-68398",
"owner": {
"login": "aramosf",
"id": 3511842,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/3511842?v=4",
"html_url": "https:\/\/github.com\/aramosf",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/aramosf\/CVE-2026-68398",
"description": "CVE-2026-68398 Ubuntu PPPoL2TP use-after-free local privilege escalation",
"fork": false,
"created_at": "2026-08-12T15:04:01Z",
"updated_at": "2026-08-12T15:31:59Z",
"pushed_at": "2026-08-12T15:31:34Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-69263.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "MCP environment-variable blocklist bypass leads to unauthenticated RCE in Flowise 3.1.1",
"fork": false,
"created_at": "2026-08-12T12:20:22Z",
"updated_at": "2026-08-12T12:25:22Z",
"updated_at": "2026-08-12T13:09:11Z",
"pushed_at": "2026-08-12T12:24:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-7228.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "risorse di ricerca per cve-2026-7228",
"fork": false,
"created_at": "2026-07-24T09:03:54Z",
"updated_at": "2026-08-10T16:56:34Z",
"pushed_at": "2026-08-10T16:55:51Z",
"updated_at": "2026-08-12T15:07:46Z",
"pushed_at": "2026-08-12T15:04:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-72898.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1332086023,
"name": "CVE-2026-72898",
"full_name": "0xBlackash\/CVE-2026-72898",
"owner": {
"login": "0xBlackash",
"id": 259905299,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/259905299?v=4",
"html_url": "https:\/\/github.com\/0xBlackash",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xBlackash\/CVE-2026-72898",
"description": "CVE-2026-72898",
"fork": false,
"created_at": "2026-08-12T13:54:46Z",
"updated_at": "2026-08-12T13:59:37Z",
"pushed_at": "2026-08-12T13:59:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-34038.json → 2026/CVE-2026-73034.json
+12 -12
View File
@@ -1,21 +1,21 @@
[
{
"id": 1288866193,
"name": "CVE-2026-34038",
"full_name": "ThemeHackers\/CVE-2026-34038",
"id": 1332338588,
"name": "CVE-2026-73034-PoC",
"full_name": "Boreas37\/CVE-2026-73034-PoC",
"owner": {
"login": "ThemeHackers",
"id": 107047730,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/107047730?v=4",
"html_url": "https:\/\/github.com\/ThemeHackers",
"login": "Boreas37",
"id": 185066905,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/185066905?v=4",
"html_url": "https:\/\/github.com\/Boreas37",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ThemeHackers\/CVE-2026-34038",
"description": "CVE-2026-34038: Authenticated Remote Command Injection in Coolify",
"html_url": "https:\/\/github.com\/Boreas37\/CVE-2026-73034-PoC",
"description": "CVE-2026-73034 — DB-GPT v0.8.1 unauth path traversal → arbitrary file write as root via user-id header. Verified + fix diff",
"fork": false,
"created_at": "2026-07-04T04:05:12Z",
"updated_at": "2026-07-04T04:09:19Z",
"pushed_at": "2026-07-04T04:09:07Z",
"created_at": "2026-08-12T18:35:23Z",
"updated_at": "2026-08-12T18:35:43Z",
"pushed_at": "2026-08-12T18:35:27Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
README.md
+75 -60
View File
@@ -55,6 +55,13 @@
- [fredevsec/CVE-2026-0073](https://github.com/fredevsec/CVE-2026-0073)
- [ctn-Qvo/CVE-2026-0073-Android-ADBD-bypass-POC_zh_CN](https://github.com/ctn-Qvo/CVE-2026-0073-Android-ADBD-bypass-POC_zh_CN)
### CVE-2026-0075 (2026-06-01)
<code>In multiple functions, there is a possible way to access the contacts database due to a SQL injection. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
</code>
- [QM4RS/CVE-2026-0075](https://github.com/QM4RS/CVE-2026-0075)
### CVE-2026-0091 (2026-06-01)
<code>In multiple locations, there is a possible way to execute code in the launcher process due to an over-privileged shell user. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
@@ -770,13 +777,6 @@
- [Xaanziu/CVE-2026-5513](https://github.com/Xaanziu/CVE-2026-5513)
- [87achrafg-stack/CVE-2026-5513](https://github.com/87achrafg-stack/CVE-2026-5513)
### CVE-2026-5524 (2026-07-02)
<code>The Divi Form Builder plugin for WordPress is vulnerable to Arbitrary File Upload leading to Remote Code Execution in all versions up to and including 5.1.8. This is due to insufficient file extension validation in the do_image_upload() function where user-supplied input from the acceptFileTypes POST parameter is directly interpolated into a regular expression used to validate uploaded files. Attackers can specify PHP-executable extensions such as .phtml, .phar, .php5, or .php7 to bypass the plugin's .htaccess protection which only blocks .php files specifically. Additionally, on Nginx-based servers, the .htaccess protection is completely ineffective as Nginx does not process .htaccess files. This makes it possible for unauthenticated attackers (who can obtain a nonce from any public page containing a form) to upload executable PHP files to the publicly accessible /wp-content/uploads/de_fb_uploads/ directory and achieve Remote Code Execution by accessing the uploaded file via HTTP. The vulnerability was partially patched in version 5.1.3.
</code>
- [caterscam/CVE-2026-5524-PoC](https://github.com/caterscam/CVE-2026-5524-PoC)
### CVE-2026-5555 (2026-04-05)
<code>A weakness has been identified in code-projects Concert Ticket Reservation System 1.0. This affects an unknown part of the file /ConcertTicketReservationSystem-master/login.php of the component Parameter Handler. Executing a manipulation of the argument Email can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.
@@ -1732,13 +1732,6 @@
- [BishopFox/CVE-2026-11374-check](https://github.com/BishopFox/CVE-2026-11374-check)
### CVE-2026-11387 (2026-07-01)
<code>The SMS Alert – SMS &amp; OTP for WooCommerce, Order Notifications &amp; Abandoned Cart Recovery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.9.5. This is due to the plugin not properly validating a user's identity prior to updating their details like reset the password of any user account, including administrators, and gain full access to those accounts. This makes it possible for unauthenticated attackers to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account. This is only vulnerable on sites with OTP verification for password resets enabled, and where the administrator (or other user) has set a phone number for OTP verification.
</code>
- [1beelze/CVE-2026-11387](https://github.com/1beelze/CVE-2026-11387)
### CVE-2026-11405 (2026-07-06)
<code>The web server binary /bin/httpd contains a hidden backdoor authentication mechanism in the login() function at 004c88b8.\r\n\r\n- The function contains a normal authentication path using MD5/hash-based password verification (prod_encode64/PasswordToMd5/check_rand_key).\r\n- After normal authentication fails, it calls GetValue(&quot;sys.rzadmin.password&quot;) to read a backdoor password from the device configuration.\r\n- It performs a direct strcmp() comparison (plaintext, not hashed) between the config value and the user-supplied password.\r\n\r\nA successful match grants role=2 (admin-level access) and creates a valid session. The rzadmin username is never checked — any username works with the backdoor
@@ -2026,13 +2019,6 @@
- [jaf0rk/CVE-2026-14431](https://github.com/jaf0rk/CVE-2026-14431)
### CVE-2026-14459 (2026-07-03)
<code>Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in TUBITAK BILGEM Software Technologies Research Institute pardus-software allows Argument Injection.\n\nThis issue affects pardus-software: from &lt;= 1.0.4 before 1.0.5.
</code>
- [dasokkk/CVE-2026-14459-14460-pardus-software](https://github.com/dasokkk/CVE-2026-14459-14460-pardus-software)
### CVE-2026-14483 (2026-07-31)
<code>The Realtyna Organic IDX plugin + WPL Real Estate plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 5.2.0 via the upload function. This is due to missing file type validation in the upload function, combined with a publicly accessible I/O endpoint authenticated solely by static, plugin-seeded API credentials that are identical across all installations. This makes it possible for unauthenticated attackers to upload files that may be executable, which makes remote code execution possible. The WPL I/O service endpoint is registered on the public WordPress init hook with no WordPress capability check, and the required api_key and api_secret values are static defaults seeded by the plugin's own SQL migration files, meaning any unauthenticated attacker who knows these publicly documented defaults can reach and exploit the vulnerable upload path.
@@ -2215,6 +2201,7 @@
### CVE-2026-17106
- [masasron/CopyEscape-CVE-2026-17106](https://github.com/masasron/CopyEscape-CVE-2026-17106)
- [HackSpeak/CVE-2026-17106](https://github.com/HackSpeak/CVE-2026-17106)
- [686f6c61/POC-CopyEscape-CVE-2026-17106](https://github.com/686f6c61/POC-CopyEscape-CVE-2026-17106)
### CVE-2026-17351 (2026-07-31)
@@ -2238,6 +2225,13 @@
- [pratham220/CVE-2026-17543-PHP-Exposure-Validator](https://github.com/pratham220/CVE-2026-17543-PHP-Exposure-Validator)
- [Hunt-Benito/e-is-for-exploit-cve-2026-17543-php-pgsql-sql-injection-backslash-breakout](https://github.com/Hunt-Benito/e-is-for-exploit-cve-2026-17543-php-pgsql-sql-injection-backslash-breakout)
### CVE-2026-17544 (2026-07-30)
<code>Attacker-provided inputs to bccomp() could lead to an out-of-bounds write with stack and heap corruption in PHP versions from 8.4.* before 8.4.24 and from 8.5.* before 8.5.9.
</code>
- [Boreas37/CVE-2026-17544-PoC](https://github.com/Boreas37/CVE-2026-17544-PoC)
### CVE-2026-17566 (2026-07-31)
<code>pgAdmin 4's Import/Export Data tool builds a psql \copy (...) command line by interpolating a user-supplied SQL query into a Jinja template and passing the rendered line to psql via --command. To stop an attacker from breaking out of the (...) wrapper, create_import_export_job() (route POST /import_export/job/&lt;sid&gt;, gated only by the ordinary, commonly-granted tools_import_export_data permission) validated the query with a hand-written parenthesis-balance checker, _is_query_parens_balanced(). That checker always treated a backslash before a single quote (\') as escaping the quote, i.e. as if standard_conforming_strings were off. PostgreSQL has defaulted standard_conforming_strings to on since 9.1 (2010), the default on every PostgreSQL version pgAdmin 4 currently supports (13-18); under that default psql's own \copy tokenizer treats \ as an ordinary character, so a single quote immediately after it closes the string literal. A query such as SELECT 'a\') TO PROGRAM 'echo pwned' x' was therefore accepted as &quot;balanced&quot; by pgAdmin's checker (which believed the ) was still inside the string), while psql, run through the actual rendered command line, closes the string at that point and treats the following ) as the end of the wrapping \copy (...) subquery, exposing an attacker-chosen TO PROGRAM '&lt;command&gt;' clause that psql executes via popen() -- independent of a subsequent syntax error later on the same line. This is the same class of bug as CVE-2025-12762/CVE-2025-13780 (RCE via psql meta-command/COPY injection during PLAIN-format dump restore), reached through an independently written defense in a different module (Import/Export Data rather than Restore) that had its own, different logic bug (inverted backslash-escape semantics rather than a BOM-defeated regex anchor).\n\nThe fix rejects any backslash inside a single-quoted string in the query outright, rather than picking one of the two possible psql interpretations. This is intentionally conservative: because the correct interpretation of \ depends on the target server's standard_conforming_strings setting, which the checker cannot reliably know at validation time, refusing the query is safer than guessing.\n\nThis issue affects pgAdmin 4: from the introduction of _is_query_parens_balanced() before 9.18.
@@ -2977,6 +2971,7 @@
- [seguridadentrerios/CVE-2026-23111](https://github.com/seguridadentrerios/CVE-2026-23111)
- [ishankaru/CVE-2026-23111-nftables-lab](https://github.com/ishankaru/CVE-2026-23111-nftables-lab)
- [Baba01hacker666/CVE-2026-23111](https://github.com/Baba01hacker666/CVE-2026-23111)
- [Knz-source/CVE-2026-23111-POC-noddlenpottato](https://github.com/Knz-source/CVE-2026-23111-POC-noddlenpottato)
### CVE-2026-23415 (2026-04-02)
@@ -3099,13 +3094,6 @@
- [offseckit/CVE-2026-23813](https://github.com/offseckit/CVE-2026-23813)
### CVE-2026-23869 (2026-04-08)
<code>A denial of service vulnerability exists in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack and react-server-dom-webpack (versions 19.0.0 through 19.0.4, 19.1.0 through 19.1.5, and 19.2.0 through 19.2.4). The vulnerability is triggered by sending specially crafted HTTP requests to Server Function endpoints.The payload of the HTTP request causes excessive CPU usage for up to a minute ending in a thrown error that is catchable.
</code>
- [shaheryar773/mitigate-cve-2026-23869-react-server-component-loops](https://github.com/shaheryar773/mitigate-cve-2026-23869-react-server-component-loops)
### CVE-2026-23870 (2026-05-06)
<code>A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to server crashes, out-of-memory exceptions or excessive CPU usage; affecting the following packages: react-server-dom-webpack, react-server-dom-parcel, react-server-dom-turbopack (versions 19.0.0 through 19.0.5, 19.1.0 through 19.1.6, and 19.2.0 through 19.2.5).
@@ -3584,6 +3572,13 @@
- [speedyfriend433/CVE-2026-28867-PoC](https://github.com/speedyfriend433/CVE-2026-28867-PoC)
### CVE-2026-28956 (2026-05-11)
<code>A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing a maliciously crafted media file may lead to unexpected app termination or corrupt process memory.
</code>
- [HORKimhab/CVE-2026-28956](https://github.com/HORKimhab/CVE-2026-28956)
### CVE-2026-28990 (2026-05-11)
<code>The issue was addressed with improved memory handling. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Sonoma 14.8.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5, watchOS 26.5. Processing a maliciously crafted image may corrupt process memory.
@@ -3899,7 +3894,6 @@
- [EQSTLab/CVE-2026-33017](https://github.com/EQSTLab/CVE-2026-33017)
- [r3nsi15/CVE-2026-33017-langflow-rce](https://github.com/r3nsi15/CVE-2026-33017-langflow-rce)
- [yayip/CVE-2026-33017](https://github.com/yayip/CVE-2026-33017)
- [diamorphine666/CVE-2026-33017-Exploit](https://github.com/diamorphine666/CVE-2026-33017-Exploit)
- [Usman0220/CVE-2026-33017-Langflow-RCE](https://github.com/Usman0220/CVE-2026-33017-Langflow-RCE)
- [Industri4l-H3ll-Xpl0it3rs/CVE-2026-33017-Langflow-RCE](https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2026-33017-Langflow-RCE)
@@ -3935,6 +3929,13 @@
- [JohannesLks/CVE-2026-33186](https://github.com/JohannesLks/CVE-2026-33186)
### CVE-2026-33267 (2026-07-29)
<code>Improper Input Validation vulnerability in Apache Traffic Server.\n\nThis issue affects Apache Traffic Server: from 9.2.0 through 9.2.14, from 10.1.0 through 10.1.3.\n\nUsers are recommended to upgrade to version 9.2.15 or 10.1.4, which fixes the issue.
</code>
- [Boreas37/CVE-2026-33267-PoC](https://github.com/Boreas37/CVE-2026-33267-PoC)
### CVE-2026-33320 (2026-03-24)
<code>Dasel is a command-line tool and library for querying, modifying, and transforming data structures. Starting in version 3.0.0 and prior to version 3.3.1, Dasel's YAML reader allows an attacker who can supply YAML for processing to trigger extreme CPU and memory consumption. The issue is in the library's own `UnmarshalYAML` implementation, which manually resolves alias nodes by recursively following `yaml.Node.Alias` pointers without any expansion budget, bypassing go-yaml v4's built-in alias expansion limit. Version 3.3.2 contains a patch for the issue.
@@ -4024,13 +4025,6 @@
- [garlic-wizard/CVE-2026-33937-for-DarkZeroReturns](https://github.com/garlic-wizard/CVE-2026-33937-for-DarkZeroReturns)
- [c0gnit00/CVE-2026-33937](https://github.com/c0gnit00/CVE-2026-33937)
### CVE-2026-34038 (2026-07-06)
<code>Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.469, an authenticated remote command injection vulnerability in application deployment handling allows users with application write permissions to achieve remote code execution and exfiltrate sensitive environment variables through deployment logs via fields such as dockerfile_location and deployment commands. This issue is fixed in version 4.0.0-beta.469.
</code>
- [ThemeHackers/CVE-2026-34038](https://github.com/ThemeHackers/CVE-2026-34038)
### CVE-2026-34040 (2026-03-31)
<code>Moby is an open source container framework. Prior to version 29.3.1, a security vulnerability has been detected that allows attackers to bypass authorization plugins (AuthZ). This issue has been patched in version 29.3.1.
@@ -4061,7 +4055,6 @@
- [LAT-06/CVE-2026-34197](https://github.com/LAT-06/CVE-2026-34197)
- [hnytgl/CVE-2026-34197](https://github.com/hnytgl/CVE-2026-34197)
- [asdasddqwdq29-a11y/CVE-2026-34197](https://github.com/asdasddqwdq29-a11y/CVE-2026-34197)
- [dinosn/apache-activemq-rce-research](https://github.com/dinosn/apache-activemq-rce-research)
- [pssec-io/CVE-2026-34197](https://github.com/pssec-io/CVE-2026-34197)
- [K3ysTr0K3R/CVE-2026-34197](https://github.com/K3ysTr0K3R/CVE-2026-34197)
@@ -4352,9 +4345,6 @@
- [calligraf0/CVE-2026-36848](https://github.com/calligraf0/CVE-2026-36848)
### CVE-2026-36851
- [SyntaxSaiyan/CVE-2026-36851](https://github.com/SyntaxSaiyan/CVE-2026-36851)
### CVE-2026-37064
- [jfs-jfs/CVE-2026-37064](https://github.com/jfs-jfs/CVE-2026-37064)
@@ -4869,6 +4859,13 @@
- [xiaoqiMikko/tomcat-check](https://github.com/xiaoqiMikko/tomcat-check)
### CVE-2026-41452 (2026-08-03)
<code>Krayin CRM 2.2.4 contains a missing authentication vulnerability in the installer middleware that allows unauthenticated remote attackers to overwrite the primary administrator account by sending a crafted HTTP POST request with the X-Requested-With: XMLHttpRequest header to bypass the CanInstall middleware redirect check. Attackers can supply arbitrary name, email, and password values to the admin-config-setup endpoint, which performs an unauthenticated updateOrInsert targeting the hardcoded administrator user ID, enabling full administrative access to all CRM data.
</code>
- [Boreas37/CVE-2026-41452-PoC](https://github.com/Boreas37/CVE-2026-41452-PoC)
### CVE-2026-41472 (2026-04-24)
<code>CyberPanel versions prior to 2.4.5 contain a stored cross-site scripting vulnerability in the AI Scanner dashboard where the POST /api/ai-scanner/callback endpoint lacks authentication and allows unauthenticated attackers to inject malicious JavaScript by overwriting the findings_json field of ScanHistory records. Attackers can inject JavaScript that executes in an administrator's authenticated session when they visit the AI Scanner dashboard, allowing them to issue same-origin requests to plant cron jobs and achieve remote code execution on the server.
@@ -5520,7 +5517,6 @@
<code>Hardcoded credentials in the Basic Authentication setup tool (bin/solr auth enable) in Apache Solr versions 9.4.0 through 9.10.1 and 10.0.0 allows a remote attacker to gain full administrative access to the cluster via publicly known default credentials installed silently alongside the user-specified account. \n\nAs an immediate workaround without upgrading, delete the template users (superadmin, admin, search, index) from security.json or change their passwords.\nThe future, not yet released, versions 9.11.0 and 10.1.0 will not be vulnerable, and it will be enough to upgrade to solve the issue.\n\nNot affected:\n * Clusters where bin/solr auth enable was not used to bootstrap BasicAuth\n * Clusters where template users have been assigned strong passwords after bootstrap
</code>
- [shinthink/solrradar](https://github.com/shinthink/solrradar)
- [gagaltotal/CVE-2026-44825-Apache-Solr-Scanner](https://github.com/gagaltotal/CVE-2026-44825-Apache-Solr-Scanner)
### CVE-2026-44881 (2026-05-28)
@@ -6273,7 +6269,6 @@
- [Almavj/Joomla_CVE_2026_48907](https://github.com/Almavj/Joomla_CVE_2026_48907)
- [K3ysTr0K3R/CVE-2026-48907](https://github.com/K3ysTr0K3R/CVE-2026-48907)
- [pssec-io/CVE-2026-48907](https://github.com/pssec-io/CVE-2026-48907)
- [bayu06802/CVE-2026-48907](https://github.com/bayu06802/CVE-2026-48907)
- [ChiefYoru/CVE-2026-48907_PoC](https://github.com/ChiefYoru/CVE-2026-48907_PoC)
### CVE-2026-48908 (2026-06-20)
@@ -6291,6 +6286,7 @@
- [cazzysoci/cve-2026-48908](https://github.com/cazzysoci/cve-2026-48908)
- [g0thamRabb1t/CVE-2026-48908-joomla-sp-page-builder-detection](https://github.com/g0thamRabb1t/CVE-2026-48908-joomla-sp-page-builder-detection)
- [imXur/CVE-2026-48908-Joomla-SP-Page-Builder-RCE](https://github.com/imXur/CVE-2026-48908-Joomla-SP-Page-Builder-RCE)
- [yora1928/CVE-2026-48908-by-yora](https://github.com/yora1928/CVE-2026-48908-by-yora)
### CVE-2026-48909 (2026-06-20)
@@ -6477,13 +6473,6 @@
- [Yayoi-cs/CVE-2026-49417_1day_LPE_exploit](https://github.com/Yayoi-cs/CVE-2026-49417_1day_LPE_exploit)
### CVE-2026-49468 (2026-06-22)
<code>LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, a Host-header parsing flaw in the LiteLLM proxy could, under specific conditions, allow unauthenticated access to protected management routes. The auth layer derived the effective route from request.url.path in litellm/proxy/auth/auth_utils.py::get_request_route(), which Starlette reconstructs from the Host header. A crafted Host could therefore make the auth gate evaluate a different route from the one FastAPI dispatched. This vulnerability is fixed in 1.84.0.
</code>
- [BiiTts/CVE-2026-49468-LiteLLM-Auth-Bypass](https://github.com/BiiTts/CVE-2026-49468-LiteLLM-Auth-Bypass)
### CVE-2026-49492 (2026-06-05)
<code>Markdown Preview Enhanced before 0.8.28 opens external files and links from the preview through a shell and does not validate untrusted inputs taken from the markdown document - the diagram filename attribute, imported file paths, and the latex_engine code-chunk attribute. On Windows, a crafted markdown document can inject operating system commands that execute when the document is previewed. Fixed in 0.8.28 by passing these inputs as literal arguments instead of through a shell and validating them before use.
@@ -7045,13 +7034,6 @@
- [shinthink/CVE-2026-54390](https://github.com/shinthink/CVE-2026-54390)
### CVE-2026-54415 (2026-06-17)
<code>Missing Authorization in the server management routes (routes/admin.php) in Azuriom Azuriom CMS before 1.2.11 on all platforms allows an authenticated attacker with the admin.access permission to create AzLink server tokens and take over non-admin user accounts by changing their passwords and email addresses via crafted HTTP requests to /admin/servers/create and the AzLink API endpoints (/api/azlink/password, /api/azlink/email, /api/azlink/user/{id}).
</code>
- [abdugafforov-bobur/CVE-2026-54415-PoC](https://github.com/abdugafforov-bobur/CVE-2026-54415-PoC)
### CVE-2026-54420 (2026-06-14)
<code>LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web shell access on a shared hosting server running CloudLinux/CageFS, as exploited in the wild in May 2026.
@@ -7253,7 +7235,6 @@
</code>
- [sagsooz/PageBuilderCK-CVE-2026-56290-Exploit](https://github.com/sagsooz/PageBuilderCK-CVE-2026-56290-Exploit)
- [shinthink/pbck-exploit](https://github.com/shinthink/pbck-exploit)
- [Jenderal92/CVE-2026-56290](https://github.com/Jenderal92/CVE-2026-56290)
- [ChiefYoru/CVE-2026-56290_PoC](https://github.com/ChiefYoru/CVE-2026-56290_PoC)
@@ -7365,7 +7346,11 @@
- [readmsr/MSI_FeatureManager_CVE](https://github.com/readmsr/MSI_FeatureManager_CVE)
### CVE-2026-57858
### CVE-2026-57858 (2026-08-12)
<code>Cal.com Cal.diy versions 2.1.1 through 6.2.0 contain a stored cross-site scripting vulnerability in the BookingPageTagManager component that allows authenticated event owners to inject arbitrary JavaScript by supplying a malicious analytics tracking ID without sanitization. Attackers can close the inline script string literal with a crafted payload that executes in the browser of every visitor to the affected public booking page, enabling session cookie theft, forged authenticated requests, and wormable propagation by chaining with CSRF-able endpoints to persist payloads on additional events.
</code>
- [zylideum/CVE-2026-57858](https://github.com/zylideum/CVE-2026-57858)
### CVE-2026-57973 (2026-07-14)
@@ -7475,6 +7460,7 @@
- [c0gnit00/CVE-2026-59827](https://github.com/c0gnit00/CVE-2026-59827)
- [pickl31/CVE-2026-59827](https://github.com/pickl31/CVE-2026-59827)
- [Gutierre0x80/CVE-2026-59827](https://github.com/Gutierre0x80/CVE-2026-59827)
### CVE-2026-59891 (2026-07-14)
@@ -7728,6 +7714,13 @@
- [HackSpeak/CVE-2026-64561](https://github.com/HackSpeak/CVE-2026-64561)
- [chuzhongyun/CVE-2026-64561-Kernel-Fix](https://github.com/chuzhongyun/CVE-2026-64561-Kernel-Fix)
### CVE-2026-64563 (2026-08-04)
<code>In the Linux kernel, the following vulnerability has been resolved:\n\nrhashtable: clear stale iter-&gt;p on table restart\n\nrhashtable_walk_start_check() has two restart paths when resuming a walk.\nWhen iter-&gt;walker.tbl is valid, it re-validates iter-&gt;p against the table\nand sets iter-&gt;p = NULL if the object is gone. When iter-&gt;walker.tbl is\nNULL (table was freed during resize), it resets slot and skip but forgets\nto clear iter-&gt;p.\n\nrhashtable_walk_next() then dereferences the stale iter-&gt;p, reading\nfreed memory. This is a use-after-free.\n\nAny caller that does multi-fragment rhashtable walks across\nwalk_stop/walk_start boundaries is affected. Concrete cases include\nnetlink_diag (__netlink_diag_dump in net/netlink/diag.c) and TIPC\n(tipc_nl_sk_walk in net/tipc/socket.c).\n\nCrash stack (netlink_diag):\n BUG: KASAN: slab-use-after-free in rhashtable_walk_next+0x365/0x3c0\n Read of size 8 at addr ffff88801a9d2438 (freed kmalloc-2k, offset 1080)\n Call Trace:\n rhashtable_walk_next+0x365/0x3c0 (lib/rhashtable.c:1016)\n __netlink_diag_dump+0x160/0x760 (net/netlink/diag.c:122)\n netlink_diag_dump+0xc2/0x240\n netlink_dump+0x5bc/0x1270\n netlink_recvmsg+0x7a3/0x980\n sock_recvmsg+0x1bc/0x200\n __sys_recvfrom+0x1d4/0x2c0
</code>
- [guard-wait/CVE-2026-64563_EXP](https://github.com/guard-wait/CVE-2026-64563_EXP)
### CVE-2026-64564 (2026-08-04)
<code>In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: don't free the ASCONF's own transport in DEL-IP processing\n\nsctp_process_asconf() caches the transport the ASCONF chunk is processed\nagainst in asconf-&gt;transport (== chunk-&gt;transport, set once in sctp_rcv()).\nFor an ASCONF located through its Address Parameter by\n__sctp_rcv_asconf_lookup(), that cached transport corresponds to the\nAddress Parameter, which need not be the packet's source address.\n\nsctp_process_asconf_param() rejects a DEL-IP for the packet source address\n(ADDIP D8, SCTP_ERROR_DEL_SRC_IP), but nothing protects asconf-&gt;transport.\nA single ASCONF can therefore carry, in order:\n\n [Address Parameter L] [DEL-IP L] [DEL-IP 0.0.0.0]\n\nwhere L differs from the source. The DEL-IP for L passes the D8 check and\ncalls sctp_assoc_rm_peer() on the transport that asconf-&gt;transport still\npoints at, freeing it (RCU-deferred). The following wildcard DEL-IP then\nreuses the now-dangling asconf-&gt;transport in sctp_assoc_set_primary() and\nsctp_assoc_del_nonprimary_peers(): set_primary() dereferences the freed\ntransport (-&gt;ipaddr, -&gt;state) and plants the dangling pointer into\nasoc-&gt;peer.primary_path / active_path, and del_nonprimary_peers(), keeping\nonly the pointer that is no longer on the list, removes every real\ntransport, leaving the association with a transport_count of 0 and\nprimary_path/active_path pointing at freed memory.\n\nReject a DEL-IP that targets the transport the ASCONF is being processed\nagainst, mirroring the existing source-address guard, so the wildcard\nbranch can never reuse a freed transport.
@@ -8145,6 +8138,13 @@
- [aramosf/CVE-2026-68138](https://github.com/aramosf/CVE-2026-68138)
### CVE-2026-68398 (2026-08-10)
<code>In the Linux kernel, the following vulnerability has been resolved:\n\nppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF\n\npppol2tp_recv() runs in the L2TP UDP-encap softirq RX path:\n\n l2tp_udp_encap_recv() -&gt; l2tp_recv_common() -&gt; pppol2tp_recv()\n -&gt; ppp_input(&amp;po-&gt;chan)\n\nIt runs under rcu_read_lock() holding only an l2tp_session reference and\ntakes NO reference on the internal PPP channel (struct channel,\nchan-&gt;ppp) that ppp_input() dereferences.\n\nThe pppox socket is SOCK_RCU_FREE, so 'po' and the embedded ppp_channel\nare RCU-safe. But the internal struct channel is a separate allocation\nthat ppp_release_channel() frees with a plain kfree():\n\n close(data socket) -&gt; pppol2tp_release() -&gt; pppox_unbind_sock()\n -&gt; ppp_unregister_channel() -&gt; ppp_release_channel() -&gt; kfree(pch)\n\nFor a channel that is bound (PPPIOCGCHAN) but not attached to a ppp unit\n(no PPPIOCCONNECT, pch-&gt;ppp == NULL) and not bridged, teardown skips\nboth ppp_disconnect_channel()'s synchronize_net() and\nppp_unbridge_channels()'s synchronize_rcu(), so the kfree() has no grace\nperiod. rcu_read_lock() in pppol2tp_recv() does not protect against a\nplain kfree(), so an in-flight ppp_input() on one CPU can dereference\nthe channel just freed by close() on another CPU.\n\nThe bug is reachable by an unprivileged user.\n\nDefer the channel free to an RCU callback via call_rcu() so the grace\nperiod fences any in-flight ppp_input(). The disconnect and unbridge\nteardown paths already fence with synchronize_net()/synchronize_rcu();\ncall_rcu() does the same here without stalling the close() path.
</code>
- [aramosf/CVE-2026-68398](https://github.com/aramosf/CVE-2026-68398)
### CVE-2026-68771 (2026-07-31)
<code>ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node that allows unauthenticated remote attackers to execute arbitrary Python code by uploading a crafted pickle file and triggering its deserialization. Attackers can upload a malicious shard_*.pkl file via the unauthenticated POST /upload/image endpoint and then queue a workflow graph via POST /prompt referencing the uploaded file, causing torch.load to deserialize the attacker-controlled pickle payload using __reduce__ and execute arbitrary commands as the ComfyUI process user.
@@ -8246,6 +8246,20 @@
- [Saku0512/CVE-2026-71557-poc](https://github.com/Saku0512/CVE-2026-71557-poc)
### CVE-2026-72898 (2026-08-10)
<code>Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase instance.
</code>
- [0xBlackash/CVE-2026-72898](https://github.com/0xBlackash/CVE-2026-72898)
### CVE-2026-73034 (2026-08-11)
<code>DB-GPT v0.8.1 contains an unauthenticated path traversal vulnerability that allows remote attackers to write arbitrary files to any location on the server by injecting directory traversal sequences into the user_id HTTP header of the Python file-upload endpoint. Attackers can send a crafted multipart upload request with a traversal-poisoned user_id header to escape the intended upload directory and write attacker-controlled content to locations such as Python startup hooks, cron directories, or agent scripts, resulting in remote code execution.
</code>
- [Boreas37/CVE-2026-73034-PoC](https://github.com/Boreas37/CVE-2026-73034-PoC)
### CVE-2026-999999
- [24520597-blip/CVE-2026-999999](https://github.com/24520597-blip/CVE-2026-999999)
@@ -15571,7 +15585,7 @@
- [havertz2110/CVE-2025-49144-PoC](https://github.com/havertz2110/CVE-2025-49144-PoC)
### CVE-2025-49173
- [aliyabuz25/cve-2025-49173-macos-mavericks-10.9-local-root-privesc-auth-services](https://github.com/aliyabuz25/cve-2025-49173-macos-mavericks-10.9-local-root-privesc-auth-services)
- [aliyabuz25/CVE-2025-49173](https://github.com/aliyabuz25/CVE-2025-49173)
### CVE-2025-49223 (2025-06-04)
@@ -56409,6 +56423,7 @@
- [winmin/CVE-2020-8597](https://github.com/winmin/CVE-2020-8597)
- [Dilan-Diaz/Point-to-Point-Protocol-Daemon-RCE-Vulnerability-CVE-2020-8597-](https://github.com/Dilan-Diaz/Point-to-Point-Protocol-Daemon-RCE-Vulnerability-CVE-2020-8597-)
- [lakwsh/CVE-2020-8597](https://github.com/lakwsh/CVE-2020-8597)
- [anna-kravets/codeql-buffer-overflow-variant](https://github.com/anna-kravets/codeql-buffer-overflow-variant)
### CVE-2020-8617 (2020-05-19)
@@ -69873,7 +69888,7 @@
- [rvermeulen/apache-struts-cve-2017-9805](https://github.com/rvermeulen/apache-struts-cve-2017-9805)
- [jongmartinez/-CVE-2017-9805-](https://github.com/jongmartinez/-CVE-2017-9805-)
- [z3bd/CVE-2017-9805](https://github.com/z3bd/CVE-2017-9805)
- [0xd3vil/CVE-2017-9805-Exploit](https://github.com/0xd3vil/CVE-2017-9805-Exploit)
- [agent3137/CVE-2017-9805-Exploit](https://github.com/agent3137/CVE-2017-9805-Exploit)
- [Shakun8/CVE-2017-9805](https://github.com/Shakun8/CVE-2017-9805)
- [NoSpaceAvailable/CVE-2017-9805_example_build](https://github.com/NoSpaceAvailable/CVE-2017-9805_example_build)
- [Fl5xia/CVE-2017-9805](https://github.com/Fl5xia/CVE-2017-9805)