From 55ef64cd4ee8250ba8876aa870c2b6a825343f01 Mon Sep 17 00:00:00 2001 From: motikan2010-bot Date: Wed, 1 Jul 2026 03:56:41 +0900 Subject: [PATCH] Auto Update 2026/06/30 18:56:41 --- 2002/CVE-2002-20001.json | 8 +- 2012/CVE-2012-1823.json | 45 ++++++ 2014/CVE-2014-4113.json | 4 +- 2015/CVE-2015-1187.json | 35 ++++ 2016/CVE-2016-6210.json | 4 +- 2017/CVE-2017-10271.json | 2 +- 2017/CVE-2017-15303.json | 4 +- 2017/CVE-2017-20165.json | 4 +- 2017/CVE-2017-9769.json | 12 +- 2017/CVE-2017-9798.json | 8 +- 2018/CVE-2018-0824.json | 4 +- 2018/CVE-2018-11235.json | 4 +- 2018/CVE-2018-11776.json | 4 +- 2018/CVE-2018-14847.json | 8 +- 2018/CVE-2018-19320.json | 4 +- 2018/CVE-2018-8897.json | 8 +- 2019/CVE-2019-0708.json | 16 +- 2019/CVE-2019-1040.json | 4 +- 2019/CVE-2019-11510.json | 12 +- 2019/CVE-2019-1458.json | 4 +- 2019/CVE-2019-16098.json | 12 +- 2019/CVE-2019-2215.json | 8 +- 2019/CVE-2019-2729.json | 4 +- 2019/CVE-2019-9729.json | 4 +- 2020/CVE-2020-0601.json | 8 +- 2020/CVE-2020-0787.json | 4 +- 2020/CVE-2020-1034.json | 4 +- 2020/CVE-2020-12928.json | 4 +- 2020/CVE-2020-1337.json | 8 +- 2020/CVE-2020-1350.json | 8 +- 2020/CVE-2020-1472.json | 4 +- 2020/CVE-2020-14882.json | 8 +- 2020/CVE-2020-16938.json | 4 +- 2020/CVE-2020-17103.json | 8 +- 2021/CVE-2021-1656.json | 8 +- 2021/CVE-2021-1675.json | 24 +-- 2021/CVE-2021-2119.json | 12 +- 2021/CVE-2021-21551.json | 4 +- 2021/CVE-2021-21972.json | 24 +-- 2021/CVE-2021-21985.json | 8 +- 2021/CVE-2021-26943.json | 4 +- 2021/CVE-2021-30860.json | 8 +- 2021/CVE-2021-31728.json | 4 +- 2021/CVE-2021-33044.json | 4 +- 2021/CVE-2021-34527.json | 8 +- 2021/CVE-2021-36955.json | 8 +- 2021/CVE-2021-40444.json | 4 +- 2021/CVE-2021-40449.json | 8 +- 2021/CVE-2021-41277.json | 4 +- 2021/CVE-2021-42287.json | 8 +- 2021/CVE-2021-44228.json | 18 +-- 2022/CVE-2022-0337.json | 8 +- 2022/CVE-2022-21882.json | 8 +- 2022/CVE-2022-22077.json | 2 +- 2022/CVE-2022-26134.json | 8 +- 2022/CVE-2022-29799.json | 4 +- 2022/CVE-2022-33679.json | 8 +- 2022/CVE-2022-3699.json | 8 +- 2022/CVE-2022-37932.json | 2 +- 2022/CVE-2022-42889.json | 24 +-- 2023/CVE-2023-0179.json | 8 +- 2023/CVE-2023-2002.json | 8 +- 2023/CVE-2023-20696.json | 14 +- 2023/CVE-2023-21768.json | 8 +- 2023/CVE-2023-23397.json | 8 +- 2023/CVE-2023-29357.json | 16 +- 2023/CVE-2023-2982.json | 8 +- 2023/CVE-2023-32434.json | 4 +- 2023/CVE-2023-3519.json | 8 +- 2023/CVE-2023-38646.json | 8 +- 2023/CVE-2023-38709.json | 4 +- 2023/CVE-2023-43284.json | 8 +- 2023/CVE-2023-45866.json | 6 +- 2023/CVE-2023-4911.json | 20 +-- 2024/CVE-2024-0670.json | 4 +- 2024/CVE-2024-21633.json | 8 +- 2024/CVE-2024-28085.json | 8 +- 2024/CVE-2024-31317.json | 8 +- 2024/CVE-2024-38472.json | 4 +- 2024/CVE-2024-4367.json | 2 +- 2024/CVE-2024-52940.json | 4 +- 2024/CVE-2024-56426.json | 8 +- 2025/CVE-2025-0401.json | 33 ++++ 2025/CVE-2025-14847.json | 8 +- 2025/CVE-2025-21333.json | 8 +- 2025/CVE-2025-24203.json | 8 +- 2025/CVE-2025-24257.json | 4 +- 2025/CVE-2025-30066.json | 2 +- 2025/CVE-2025-31258.json | 4 +- 2025/CVE-2025-32462.json | 8 +- 2025/CVE-2025-32463.json | 12 +- 2025/CVE-2025-40271.json | 33 ++++ 2025/CVE-2025-46731.json | 4 +- 2025/CVE-2025-49844.json | 8 +- 2025/CVE-2025-52915.json | 8 +- 2025/CVE-2025-54068.json | 4 +- 2025/CVE-2025-54424.json | 4 +- 2025/CVE-2025-55182.json | 28 ++-- 2025/CVE-2025-66398.json | 4 +- 2025/CVE-2025-66478.json | 4 +- 2025/CVE-2025-66680.json | 6 +- 2025/CVE-2025-68921.json | 4 +- 2025/CVE-2025-69212.json | 33 ++++ 2026/CVE-2026-11834.json | 8 +- 2026/CVE-2026-20841.json | 8 +- 2026/CVE-2026-21509.json | 35 ++++ 2026/CVE-2026-22241.json | 35 ++++ 2026/CVE-2026-22557.json | 43 +++++ 2026/CVE-2026-24061.json | 12 +- 2026/CVE-2026-24291.json | 4 +- 2026/CVE-2026-2441.json | 4 +- 2026/CVE-2026-2472.json | 4 +- 2026/CVE-2026-27654.json | 4 +- 2026/CVE-2026-31431.json | 153 +----------------- 2026/CVE-2026-31802.json | 4 +- 2026/CVE-2026-33186.json | 40 +++++ 2026/CVE-2026-3609.json | 41 +---- 2026/CVE-2026-38751.json | 4 +- 2026/CVE-2026-4020.json | 4 +- 2026/CVE-2026-40369.json | 4 +- 2026/CVE-2026-41089.json | 8 +- 2026/CVE-2026-41091.json | 4 +- 2026/CVE-2026-41940.json | 45 +----- 2026/CVE-2026-42945.json | 8 +- 2026/CVE-2026-42978.json | 12 +- 2026/CVE-2026-43284.json | 33 ---- 2026/CVE-2026-43503.json | 20 +-- 2026/CVE-2026-44789.json | 4 +- 2026/CVE-2026-4480.json | 8 +- 2026/CVE-2026-45504.json | 12 +- 2026/CVE-2026-45585.json | 4 +- 2026/CVE-2026-46300.json | 33 ++++ 2026/CVE-2026-46331.json | 53 ++++-- 2026/CVE-2026-48907.json | 52 +++++- ...VE-2026-22226.json => CVE-2026-49869.json} | 28 ++-- 2026/CVE-2026-49975.json | 4 +- 2026/CVE-2026-53753.json | 4 +- 2026/CVE-2026-55255.json | 35 ++++ 2026/CVE-2026-56121.json | 4 +- 2026/CVE-2026-56782.json | 4 +- 2026/CVE-2026-5950.json | 2 +- README.md | 56 +++++-- 142 files changed, 1011 insertions(+), 742 deletions(-) create mode 100644 2015/CVE-2015-1187.json create mode 100644 2026/CVE-2026-21509.json create mode 100644 2026/CVE-2026-22241.json create mode 100644 2026/CVE-2026-33186.json rename 2026/{CVE-2026-22226.json => CVE-2026-49869.json} (52%) create mode 100644 2026/CVE-2026-55255.json diff --git a/2002/CVE-2002-20001.json b/2002/CVE-2002-20001.json index 6a038c6c2c..365424f077 100644 --- a/2002/CVE-2002-20001.json +++ b/2002/CVE-2002-20001.json @@ -14,10 +14,10 @@ "description": "D(HE)ater is a proof of concept implementation of the D(HE)at attack (CVE-2002-20001) through which denial-of-service can be performed by enforcing the Diffie-Hellman key exchange. (read-only clone of the original GitLab project)", "fork": false, "created_at": "2021-08-31T09:51:12Z", - "updated_at": "2026-06-13T22:45:39Z", + "updated_at": "2026-06-30T12:16:16Z", "pushed_at": "2026-06-13T19:43:42Z", - "stargazers_count": 216, - "watchers_count": 216, + "stargazers_count": 215, + "watchers_count": 215, "has_discussions": true, "forks_count": 30, "allow_forking": true, @@ -49,7 +49,7 @@ ], "visibility": "public", "forks": 30, - "watchers": 216, + "watchers": 215, "score": 0, "subscribers_count": 7 }, diff --git a/2012/CVE-2012-1823.json b/2012/CVE-2012-1823.json index 8db1579fac..540eb8738e 100644 --- a/2012/CVE-2012-1823.json +++ b/2012/CVE-2012-1823.json @@ -361,5 +361,50 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1285242648, + "name": "CVE-2012-1823", + "full_name": "K3ysTr0K3R\/CVE-2012-1823", + "owner": { + "login": "K3ysTr0K3R", + "id": 70909693, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/70909693?v=4", + "html_url": "https:\/\/github.com\/K3ysTr0K3R", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/K3ysTr0K3R\/CVE-2012-1823", + "description": "CVE-2012-1823 - PHP CGI Argument Injection Remote Code Execution (RCE)", + "fork": false, + "created_at": "2026-06-30T16:01:19Z", + "updated_at": "2026-06-30T16:08:14Z", + "pushed_at": "2026-06-30T16:05:54Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "capture-the-flag", + "ctf", + "cve-2012-1823", + "ethical-hacking", + "exploit", + "exploitation", + "hacking", + "proof-of-concept", + "rce", + "remote-code-execution", + "remote-code-execution-rce" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2014/CVE-2014-4113.json b/2014/CVE-2014-4113.json index 93f7924743..50171a4f37 100644 --- a/2014/CVE-2014-4113.json +++ b/2014/CVE-2014-4113.json @@ -85,7 +85,7 @@ "stargazers_count": 41, "watchers_count": 41, "has_discussions": false, - "forks_count": 22, + "forks_count": 21, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -93,7 +93,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 22, + "forks": 21, "watchers": 41, "score": 0, "subscribers_count": 2 diff --git a/2015/CVE-2015-1187.json b/2015/CVE-2015-1187.json new file mode 100644 index 0000000000..76fe525b22 --- /dev/null +++ b/2015/CVE-2015-1187.json @@ -0,0 +1,35 @@ +[ + { + "id": 1285263248, + "name": "cve-2015-1187-dir820l-reproduction", + "full_name": "Flanbox\/cve-2015-1187-dir820l-reproduction", + "owner": { + "login": "Flanbox", + "id": 217520283, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/217520283?v=4", + "html_url": "https:\/\/github.com\/Flanbox", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Flanbox\/cve-2015-1187-dir820l-reproduction", + "description": "Independent reverse engineering and reproduction of CVE-2015-1187, an unauthenticated command injection in the D-Link DIR-820L (Rev A, v1.05B03). MIPS firmware extraction with binwalk, static analysis in Ghidra, and tracing the `ping_addr` parameter to its command-execution sink.", + "fork": false, + "created_at": "2026-06-30T16:23:45Z", + "updated_at": "2026-06-30T16:23:49Z", + "pushed_at": "2026-06-30T16:23:46Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2016/CVE-2016-6210.json b/2016/CVE-2016-6210.json index 52efe94ece..3de2e5a5e3 100644 --- a/2016/CVE-2016-6210.json +++ b/2016/CVE-2016-6210.json @@ -212,8 +212,8 @@ "description": "This project explores whether modern OpenSSH reveals valid usernames through subtle response or timing differences. CVE-2016-6210 user enumeration investigation ( Welch's t-test, Cohen's d, and detection engineering ) on a controlled lab on Ubuntu 22.04.5 LTS, it also examines the traces such attempts leave behind and how they can be detected..", "fork": false, "created_at": "2026-04-30T12:31:20Z", - "updated_at": "2026-06-12T04:09:47Z", - "pushed_at": "2026-05-06T11:22:12Z", + "updated_at": "2026-06-30T16:32:14Z", + "pushed_at": "2026-06-30T16:32:01Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2017/CVE-2017-10271.json b/2017/CVE-2017-10271.json index 61f1652bfe..92dfcf0d50 100644 --- a/2017/CVE-2017-10271.json +++ b/2017/CVE-2017-10271.json @@ -767,7 +767,7 @@ "forks": 2, "watchers": 2, "score": 0, - "subscribers_count": 1 + "subscribers_count": 0 }, { "id": 253372582, diff --git a/2017/CVE-2017-15303.json b/2017/CVE-2017-15303.json index 9d6b6e4319..ab5be87312 100644 --- a/2017/CVE-2017-15303.json +++ b/2017/CVE-2017-15303.json @@ -19,7 +19,7 @@ "stargazers_count": 113, "watchers_count": 113, "has_discussions": false, - "forks_count": 56, + "forks_count": 55, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -32,7 +32,7 @@ "loader" ], "visibility": "public", - "forks": 56, + "forks": 55, "watchers": 113, "score": 0, "subscribers_count": 0 diff --git a/2017/CVE-2017-20165.json b/2017/CVE-2017-20165.json index a86ef228f5..528951db7e 100644 --- a/2017/CVE-2017-20165.json +++ b/2017/CVE-2017-20165.json @@ -14,8 +14,8 @@ "description": "Fork of the send module to deal with CVE-2017-20165", "fork": false, "created_at": "2023-01-11T10:20:27Z", - "updated_at": "2026-06-19T07:20:33Z", - "pushed_at": "2026-06-30T10:33:05Z", + "updated_at": "2026-06-30T14:20:22Z", + "pushed_at": "2026-06-30T14:19:11Z", "stargazers_count": 15, "watchers_count": 15, "has_discussions": false, diff --git a/2017/CVE-2017-9769.json b/2017/CVE-2017-9769.json index 45d03000e6..d841ef09ee 100644 --- a/2017/CVE-2017-9769.json +++ b/2017/CVE-2017-9769.json @@ -14,12 +14,12 @@ "description": "A specially crafted IOCTL can be issued to the rzpnk.sys driver in Razer Synapse 2.20.15.1104 that is forwarded to ZwOpenProcess allowing a handle to be opened to an arbitrary process.", "fork": false, "created_at": "2020-11-03T10:58:53Z", - "updated_at": "2025-08-20T16:06:58Z", + "updated_at": "2026-06-30T12:16:21Z", "pushed_at": "2020-11-08T21:43:18Z", - "stargazers_count": 14, - "watchers_count": 14, + "stargazers_count": 13, + "watchers_count": 13, "has_discussions": false, - "forks_count": 8, + "forks_count": 7, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -29,8 +29,8 @@ "cve-2017-9769" ], "visibility": "public", - "forks": 8, - "watchers": 14, + "forks": 7, + "watchers": 13, "score": 0, "subscribers_count": 3 } diff --git a/2017/CVE-2017-9798.json b/2017/CVE-2017-9798.json index d979bc55eb..416f44a051 100644 --- a/2017/CVE-2017-9798.json +++ b/2017/CVE-2017-9798.json @@ -113,10 +113,10 @@ "description": "OptionsBleed (CVE-2017-9798) PoC \/ Scanner", "fork": false, "created_at": "2017-09-27T03:28:22Z", - "updated_at": "2026-04-24T04:05:32Z", + "updated_at": "2026-06-30T12:57:49Z", "pushed_at": "2024-05-21T05:25:02Z", - "stargazers_count": 18, - "watchers_count": 18, + "stargazers_count": 19, + "watchers_count": 19, "has_discussions": false, "forks_count": 4, "allow_forking": true, @@ -133,7 +133,7 @@ ], "visibility": "public", "forks": 4, - "watchers": 18, + "watchers": 19, "score": 0, "subscribers_count": 1 } diff --git a/2018/CVE-2018-0824.json b/2018/CVE-2018-0824.json index e876e25331..584da45d0b 100644 --- a/2018/CVE-2018-0824.json +++ b/2018/CVE-2018-0824.json @@ -19,7 +19,7 @@ "stargazers_count": 87, "watchers_count": 87, "has_discussions": false, - "forks_count": 31, + "forks_count": 30, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 31, + "forks": 30, "watchers": 87, "score": 0, "subscribers_count": 5 diff --git a/2018/CVE-2018-11235.json b/2018/CVE-2018-11235.json index 23092de9a6..0009137765 100644 --- a/2018/CVE-2018-11235.json +++ b/2018/CVE-2018-11235.json @@ -267,7 +267,7 @@ "forks": 0, "watchers": 1, "score": 0, - "subscribers_count": 1 + "subscribers_count": 0 }, { "id": 180293963, @@ -300,7 +300,7 @@ "forks": 1, "watchers": 3, "score": 0, - "subscribers_count": 1 + "subscribers_count": 0 }, { "id": 193244232, diff --git a/2018/CVE-2018-11776.json b/2018/CVE-2018-11776.json index 8080d49a80..12d388b4e5 100644 --- a/2018/CVE-2018-11776.json +++ b/2018/CVE-2018-11776.json @@ -95,7 +95,7 @@ "stargazers_count": 123, "watchers_count": 123, "has_discussions": false, - "forks_count": 49, + "forks_count": 48, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -109,7 +109,7 @@ "struts2" ], "visibility": "public", - "forks": 49, + "forks": 48, "watchers": 123, "score": 0, "subscribers_count": 10 diff --git a/2018/CVE-2018-14847.json b/2018/CVE-2018-14847.json index f4111c99d2..206f729cc0 100644 --- a/2018/CVE-2018-14847.json +++ b/2018/CVE-2018-14847.json @@ -283,10 +283,10 @@ "description": "This is a proof of concept of the critical WinBox vulnerability (CVE-2018-14847) which allows for arbitrary file read of plain text passwords. The vulnerability has long since been fixed, so this project has ended and will not be supported or updated anymore. You can fork it and update it yourself instead.", "fork": false, "created_at": "2021-04-21T16:42:31Z", - "updated_at": "2026-03-09T15:31:14Z", + "updated_at": "2026-06-30T14:15:17Z", "pushed_at": "2021-04-21T16:46:37Z", - "stargazers_count": 56, - "watchers_count": 56, + "stargazers_count": 55, + "watchers_count": 55, "has_discussions": false, "forks_count": 24, "allow_forking": true, @@ -297,7 +297,7 @@ "topics": [], "visibility": "public", "forks": 24, - "watchers": 56, + "watchers": 55, "score": 0, "subscribers_count": 3 }, diff --git a/2018/CVE-2018-19320.json b/2018/CVE-2018-19320.json index 7e1e075f3e..e520ffbde3 100644 --- a/2018/CVE-2018-19320.json +++ b/2018/CVE-2018-19320.json @@ -85,7 +85,7 @@ "stargazers_count": 362, "watchers_count": 362, "has_discussions": false, - "forks_count": 85, + "forks_count": 84, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -93,7 +93,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 85, + "forks": 84, "watchers": 362, "score": 0, "subscribers_count": 9 diff --git a/2018/CVE-2018-8897.json b/2018/CVE-2018-8897.json index fe919ca33f..76e79b99fc 100644 --- a/2018/CVE-2018-8897.json +++ b/2018/CVE-2018-8897.json @@ -85,7 +85,7 @@ "stargazers_count": 421, "watchers_count": 421, "has_discussions": false, - "forks_count": 96, + "forks_count": 95, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -93,7 +93,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 96, + "forks": 95, "watchers": 421, "score": 0, "subscribers_count": 15 @@ -118,7 +118,7 @@ "stargazers_count": 118, "watchers_count": 118, "has_discussions": false, - "forks_count": 22, + "forks_count": 21, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -126,7 +126,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 22, + "forks": 21, "watchers": 118, "score": 0, "subscribers_count": 3 diff --git a/2019/CVE-2019-0708.json b/2019/CVE-2019-0708.json index aca6e2fb60..845d14de55 100644 --- a/2019/CVE-2019-0708.json +++ b/2019/CVE-2019-0708.json @@ -1385,10 +1385,10 @@ "description": "My bot (badly written) to search and monitor cve-2019-0708 repositories ", "fork": false, "created_at": "2019-05-21T11:37:00Z", - "updated_at": "2025-03-30T21:43:03Z", + "updated_at": "2026-06-30T15:46:54Z", "pushed_at": "2019-05-21T11:38:10Z", - "stargazers_count": 4, - "watchers_count": 4, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -1399,7 +1399,7 @@ "topics": [], "visibility": "public", "forks": 3, - "watchers": 4, + "watchers": 3, "score": 0, "subscribers_count": 2 }, @@ -1946,10 +1946,10 @@ "description": "Proof of concept for CVE-2019-0708", "fork": false, "created_at": "2019-05-29T16:53:54Z", - "updated_at": "2026-06-30T12:00:38Z", + "updated_at": "2026-06-30T14:48:34Z", "pushed_at": "2026-03-16T15:23:32Z", - "stargazers_count": 1181, - "watchers_count": 1181, + "stargazers_count": 1182, + "watchers_count": 1182, "has_discussions": false, "forks_count": 333, "allow_forking": true, @@ -1960,7 +1960,7 @@ "topics": [], "visibility": "public", "forks": 333, - "watchers": 1181, + "watchers": 1182, "score": 0, "subscribers_count": 66 }, diff --git a/2019/CVE-2019-1040.json b/2019/CVE-2019-1040.json index 138a08342b..818de58b67 100644 --- a/2019/CVE-2019-1040.json +++ b/2019/CVE-2019-1040.json @@ -179,8 +179,8 @@ "description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.", "fork": false, "created_at": "2025-12-06T19:56:12Z", - "updated_at": "2026-06-30T10:17:37Z", - "pushed_at": "2026-06-30T10:17:33Z", + "updated_at": "2026-06-30T17:16:00Z", + "pushed_at": "2026-06-30T17:15:53Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2019/CVE-2019-11510.json b/2019/CVE-2019-11510.json index 93cffb4e63..ed6e4c8f1f 100644 --- a/2019/CVE-2019-11510.json +++ b/2019/CVE-2019-11510.json @@ -19,7 +19,7 @@ "stargazers_count": 362, "watchers_count": 362, "has_discussions": false, - "forks_count": 133, + "forks_count": 132, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 133, + "forks": 132, "watchers": 362, "score": 0, "subscribers_count": 13 @@ -245,10 +245,10 @@ "description": "Exploit for Pulse Connect Secure SSL VPN arbitrary file read vulnerability (CVE-2019-11510)", "fork": false, "created_at": "2019-09-09T15:58:39Z", - "updated_at": "2026-05-06T09:40:01Z", + "updated_at": "2026-06-30T12:16:50Z", "pushed_at": "2020-01-15T17:01:50Z", - "stargazers_count": 135, - "watchers_count": 135, + "stargazers_count": 134, + "watchers_count": 134, "has_discussions": false, "forks_count": 61, "allow_forking": true, @@ -268,7 +268,7 @@ ], "visibility": "public", "forks": 61, - "watchers": 135, + "watchers": 134, "score": 0, "subscribers_count": 13 }, diff --git a/2019/CVE-2019-1458.json b/2019/CVE-2019-1458.json index 27784adddd..5f40e9b159 100644 --- a/2019/CVE-2019-1458.json +++ b/2019/CVE-2019-1458.json @@ -52,7 +52,7 @@ "stargazers_count": 135, "watchers_count": 135, "has_discussions": false, - "forks_count": 34, + "forks_count": 33, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -64,7 +64,7 @@ "lpe" ], "visibility": "public", - "forks": 34, + "forks": 33, "watchers": 135, "score": 0, "subscribers_count": 2 diff --git a/2019/CVE-2019-16098.json b/2019/CVE-2019-16098.json index cd18171c16..5ce124621a 100644 --- a/2019/CVE-2019-16098.json +++ b/2019/CVE-2019-16098.json @@ -19,7 +19,7 @@ "stargazers_count": 202, "watchers_count": 202, "has_discussions": false, - "forks_count": 59, + "forks_count": 58, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 59, + "forks": 58, "watchers": 202, "score": 0, "subscribers_count": 1 @@ -80,10 +80,10 @@ "description": "This exploit rebuilds and exploit the CVE-2019-16098 which is in driver Micro-Star MSI Afterburner 4.6.2.15658 (aka RTCore64.sys and RTCore32.sys) allows any authenticated user to read and write to arbitrary memory, I\/O ports, and MSRs. Instead of hardcoded base address of Ntoskrnl.exe, I calculated it dynamically and recalulated the fields offsets", "fork": false, "created_at": "2024-08-05T16:55:40Z", - "updated_at": "2026-05-14T21:48:11Z", + "updated_at": "2026-06-30T12:56:57Z", "pushed_at": "2024-08-05T18:31:16Z", - "stargazers_count": 32, - "watchers_count": 32, + "stargazers_count": 33, + "watchers_count": 33, "has_discussions": false, "forks_count": 9, "allow_forking": true, @@ -94,7 +94,7 @@ "topics": [], "visibility": "public", "forks": 9, - "watchers": 32, + "watchers": 33, "score": 0, "subscribers_count": 1 }, diff --git a/2019/CVE-2019-2215.json b/2019/CVE-2019-2215.json index fe0cd5b901..2d117dba9a 100644 --- a/2019/CVE-2019-2215.json +++ b/2019/CVE-2019-2215.json @@ -926,10 +926,10 @@ "description": "app that ports CVE-2019-2215 to arm32 and mounts a su binary to \/sbin with denylist + root app installer. firehose\/Magisk guide included", "fork": false, "created_at": "2026-06-30T10:04:00Z", - "updated_at": "2026-06-30T12:04:29Z", + "updated_at": "2026-06-30T12:35:18Z", "pushed_at": "2026-06-30T12:04:25Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -940,7 +940,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 } diff --git a/2019/CVE-2019-2729.json b/2019/CVE-2019-2729.json index a911477d0e..2e2623dd11 100644 --- a/2019/CVE-2019-2729.json +++ b/2019/CVE-2019-2729.json @@ -52,7 +52,7 @@ "stargazers_count": 45, "watchers_count": 45, "has_discussions": false, - "forks_count": 18, + "forks_count": 17, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,7 +60,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 18, + "forks": 17, "watchers": 45, "score": 0, "subscribers_count": 1 diff --git a/2019/CVE-2019-9729.json b/2019/CVE-2019-9729.json index 1150167fb0..d04ae8c680 100644 --- a/2019/CVE-2019-9729.json +++ b/2019/CVE-2019-9729.json @@ -19,7 +19,7 @@ "stargazers_count": 83, "watchers_count": 83, "has_discussions": false, - "forks_count": 29, + "forks_count": 26, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 29, + "forks": 26, "watchers": 83, "score": 0, "subscribers_count": 3 diff --git a/2020/CVE-2020-0601.json b/2020/CVE-2020-0601.json index 14b55945f4..2bbd302c56 100644 --- a/2020/CVE-2020-0601.json +++ b/2020/CVE-2020-0601.json @@ -224,7 +224,7 @@ "stargazers_count": 335, "watchers_count": 335, "has_discussions": false, - "forks_count": 82, + "forks_count": 81, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -232,7 +232,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 82, + "forks": 81, "watchers": 335, "score": 0, "subscribers_count": 21 @@ -629,7 +629,7 @@ "stargazers_count": 77, "watchers_count": 77, "has_discussions": false, - "forks_count": 15, + "forks_count": 14, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -637,7 +637,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 15, + "forks": 14, "watchers": 77, "score": 0, "subscribers_count": 4 diff --git a/2020/CVE-2020-0787.json b/2020/CVE-2020-0787.json index 3bec925a61..fa62dd93d8 100644 --- a/2020/CVE-2020-0787.json +++ b/2020/CVE-2020-0787.json @@ -19,7 +19,7 @@ "stargazers_count": 721, "watchers_count": 721, "has_discussions": false, - "forks_count": 168, + "forks_count": 167, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 168, + "forks": 167, "watchers": 721, "score": 0, "subscribers_count": 16 diff --git a/2020/CVE-2020-1034.json b/2020/CVE-2020-1034.json index b7f691e51c..fa4529ade4 100644 --- a/2020/CVE-2020-1034.json +++ b/2020/CVE-2020-1034.json @@ -19,7 +19,7 @@ "stargazers_count": 124, "watchers_count": 124, "has_discussions": false, - "forks_count": 42, + "forks_count": 41, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -34,7 +34,7 @@ "windows" ], "visibility": "public", - "forks": 42, + "forks": 41, "watchers": 124, "score": 0, "subscribers_count": 5 diff --git a/2020/CVE-2020-12928.json b/2020/CVE-2020-12928.json index b55478307a..3c2f179ba5 100644 --- a/2020/CVE-2020-12928.json +++ b/2020/CVE-2020-12928.json @@ -19,7 +19,7 @@ "stargazers_count": 62, "watchers_count": 62, "has_discussions": false, - "forks_count": 23, + "forks_count": 22, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 23, + "forks": 22, "watchers": 62, "score": 0, "subscribers_count": 4 diff --git a/2020/CVE-2020-1337.json b/2020/CVE-2020-1337.json index 2ebb1bf232..855fda846c 100644 --- a/2020/CVE-2020-1337.json +++ b/2020/CVE-2020-1337.json @@ -14,10 +14,10 @@ "description": "CVE-2020-1337 Windows Print Spooler Privilege Escalation", "fork": false, "created_at": "2020-07-21T08:01:20Z", - "updated_at": "2026-06-30T11:56:33Z", + "updated_at": "2026-06-30T14:48:49Z", "pushed_at": "2023-12-15T02:24:29Z", - "stargazers_count": 149, - "watchers_count": 149, + "stargazers_count": 150, + "watchers_count": 150, "has_discussions": false, "forks_count": 27, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 27, - "watchers": 149, + "watchers": 150, "score": 0, "subscribers_count": 6 }, diff --git a/2020/CVE-2020-1350.json b/2020/CVE-2020-1350.json index a7f67af3dc..129cbf7880 100644 --- a/2020/CVE-2020-1350.json +++ b/2020/CVE-2020-1350.json @@ -64,10 +64,10 @@ "description": "HoneyPoC: Proof-of-Concept (PoC) script to exploit SIGRed (CVE-2020-1350). Achieves Domain Admin on Domain Controllers running Windows Server 2000 up to Windows Server 2019.", "fork": false, "created_at": "2020-07-14T19:02:25Z", - "updated_at": "2026-06-30T11:56:33Z", + "updated_at": "2026-06-30T14:48:49Z", "pushed_at": "2021-06-10T02:46:52Z", - "stargazers_count": 278, - "watchers_count": 278, + "stargazers_count": 279, + "watchers_count": 279, "has_discussions": false, "forks_count": 69, "allow_forking": true, @@ -81,7 +81,7 @@ ], "visibility": "public", "forks": 69, - "watchers": 278, + "watchers": 279, "score": 0, "subscribers_count": 0 }, diff --git a/2020/CVE-2020-1472.json b/2020/CVE-2020-1472.json index ad9762f433..a886f57c3d 100644 --- a/2020/CVE-2020-1472.json +++ b/2020/CVE-2020-1472.json @@ -2383,8 +2383,8 @@ "description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.", "fork": false, "created_at": "2025-12-06T10:17:38Z", - "updated_at": "2026-06-30T11:17:26Z", - "pushed_at": "2026-06-30T11:17:22Z", + "updated_at": "2026-06-30T17:27:41Z", + "pushed_at": "2026-06-30T17:27:17Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2020/CVE-2020-14882.json b/2020/CVE-2020-14882.json index dec29e8edd..51aeeb05e2 100644 --- a/2020/CVE-2020-14882.json +++ b/2020/CVE-2020-14882.json @@ -100,10 +100,10 @@ "description": "CVE-2020–14882 by Jang", "fork": false, "created_at": "2020-10-28T21:28:12Z", - "updated_at": "2024-08-12T20:07:10Z", + "updated_at": "2026-06-30T15:47:15Z", "pushed_at": "2020-10-29T03:57:09Z", - "stargazers_count": 29, - "watchers_count": 29, + "stargazers_count": 28, + "watchers_count": 28, "has_discussions": false, "forks_count": 21, "allow_forking": true, @@ -114,7 +114,7 @@ "topics": [], "visibility": "public", "forks": 21, - "watchers": 29, + "watchers": 28, "score": 0, "subscribers_count": 1 }, diff --git a/2020/CVE-2020-16938.json b/2020/CVE-2020-16938.json index f96dc2341a..62af92ba1f 100644 --- a/2020/CVE-2020-16938.json +++ b/2020/CVE-2020-16938.json @@ -19,7 +19,7 @@ "stargazers_count": 192, "watchers_count": 192, "has_discussions": false, - "forks_count": 39, + "forks_count": 38, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 39, + "forks": 38, "watchers": 192, "score": 0, "subscribers_count": 7 diff --git a/2020/CVE-2020-17103.json b/2020/CVE-2020-17103.json index 3d887e9a90..df857ec039 100644 --- a/2020/CVE-2020-17103.json +++ b/2020/CVE-2020-17103.json @@ -80,10 +80,10 @@ "description": "CVE-2020-17103 adapted for C2 with split-binary SYSTEM callback", "fork": false, "created_at": "2026-05-18T15:36:34Z", - "updated_at": "2026-06-27T15:47:19Z", + "updated_at": "2026-06-30T12:40:23Z", "pushed_at": "2026-05-20T13:07:06Z", - "stargazers_count": 36, - "watchers_count": 36, + "stargazers_count": 37, + "watchers_count": 37, "has_discussions": false, "forks_count": 29, "allow_forking": true, @@ -94,7 +94,7 @@ "topics": [], "visibility": "public", "forks": 29, - "watchers": 36, + "watchers": 37, "score": 0, "subscribers_count": 0 }, diff --git a/2021/CVE-2021-1656.json b/2021/CVE-2021-1656.json index 0f47462b40..626e0d6d19 100644 --- a/2021/CVE-2021-1656.json +++ b/2021/CVE-2021-1656.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2021-03-30T05:21:26Z", - "updated_at": "2026-05-13T19:48:32Z", + "updated_at": "2026-06-30T15:47:49Z", "pushed_at": "2021-03-30T05:31:22Z", - "stargazers_count": 23, - "watchers_count": 23, + "stargazers_count": 22, + "watchers_count": 22, "has_discussions": false, "forks_count": 11, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 11, - "watchers": 23, + "watchers": 22, "score": 0, "subscribers_count": 5 } diff --git a/2021/CVE-2021-1675.json b/2021/CVE-2021-1675.json index 07e13b4b72..48bbbfbec9 100644 --- a/2021/CVE-2021-1675.json +++ b/2021/CVE-2021-1675.json @@ -47,10 +47,10 @@ "description": "C# and Impacket implementation of PrintNightmare CVE-2021-1675\/CVE-2021-34527", "fork": false, "created_at": "2021-06-29T17:24:14Z", - "updated_at": "2026-06-30T11:56:47Z", + "updated_at": "2026-06-30T14:49:05Z", "pushed_at": "2021-07-20T15:28:13Z", - "stargazers_count": 1991, - "watchers_count": 1991, + "stargazers_count": 1992, + "watchers_count": 1992, "has_discussions": false, "forks_count": 578, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 578, - "watchers": 1991, + "watchers": 1992, "score": 0, "subscribers_count": 39 }, @@ -329,10 +329,10 @@ "description": "Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)", "fork": false, "created_at": "2021-07-01T23:45:58Z", - "updated_at": "2026-06-30T12:01:16Z", + "updated_at": "2026-06-30T14:49:05Z", "pushed_at": "2021-07-05T08:54:06Z", - "stargazers_count": 1098, - "watchers_count": 1098, + "stargazers_count": 1099, + "watchers_count": 1099, "has_discussions": false, "forks_count": 225, "allow_forking": true, @@ -343,7 +343,7 @@ "topics": [], "visibility": "public", "forks": 225, - "watchers": 1098, + "watchers": 1099, "score": 0, "subscribers_count": 23 }, @@ -670,7 +670,7 @@ "stargazers_count": 5, "watchers_count": 5, "has_discussions": false, - "forks_count": 4, + "forks_count": 2, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -678,7 +678,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 4, + "forks": 2, "watchers": 5, "score": 0, "subscribers_count": 1 @@ -736,7 +736,7 @@ "stargazers_count": 77, "watchers_count": 77, "has_discussions": false, - "forks_count": 29, + "forks_count": 27, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -749,7 +749,7 @@ "windows-privilege-escalation" ], "visibility": "public", - "forks": 29, + "forks": 27, "watchers": 77, "score": 0, "subscribers_count": 5 diff --git a/2021/CVE-2021-2119.json b/2021/CVE-2021-2119.json index 1155644e85..6b117c6bfe 100644 --- a/2021/CVE-2021-2119.json +++ b/2021/CVE-2021-2119.json @@ -14,12 +14,12 @@ "description": "0day VirtualBox 6.1.2 Escape for RealWorld CTF 2020\/2021 CVE-2021-2119", "fork": false, "created_at": "2021-01-15T17:32:24Z", - "updated_at": "2026-05-29T06:29:33Z", + "updated_at": "2026-06-30T15:47:18Z", "pushed_at": "2021-01-23T01:25:22Z", - "stargazers_count": 147, - "watchers_count": 147, + "stargazers_count": 146, + "watchers_count": 146, "has_discussions": false, - "forks_count": 20, + "forks_count": 19, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,8 +27,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 20, - "watchers": 147, + "forks": 19, + "watchers": 146, "score": 0, "subscribers_count": 9 } diff --git a/2021/CVE-2021-21551.json b/2021/CVE-2021-21551.json index 8533213d5e..429451b9a9 100644 --- a/2021/CVE-2021-21551.json +++ b/2021/CVE-2021-21551.json @@ -232,7 +232,7 @@ "stargazers_count": 85, "watchers_count": 85, "has_discussions": false, - "forks_count": 24, + "forks_count": 23, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -248,7 +248,7 @@ "red-teaming" ], "visibility": "public", - "forks": 24, + "forks": 23, "watchers": 85, "score": 0, "subscribers_count": 2 diff --git a/2021/CVE-2021-21972.json b/2021/CVE-2021-21972.json index 4d1f3576ac..05932f7050 100644 --- a/2021/CVE-2021-21972.json +++ b/2021/CVE-2021-21972.json @@ -97,10 +97,10 @@ "description": "CVE-2021-21972 Exploit", "fork": false, "created_at": "2021-02-24T11:14:58Z", - "updated_at": "2026-06-30T11:56:42Z", + "updated_at": "2026-06-30T14:49:00Z", "pushed_at": "2023-06-08T04:01:33Z", - "stargazers_count": 500, - "watchers_count": 500, + "stargazers_count": 501, + "watchers_count": 501, "has_discussions": false, "forks_count": 140, "allow_forking": true, @@ -113,7 +113,7 @@ ], "visibility": "public", "forks": 140, - "watchers": 500, + "watchers": 501, "score": 0, "subscribers_count": 6 }, @@ -165,10 +165,10 @@ "description": "Proof of Concept Exploit for vCenter CVE-2021-21972", "fork": false, "created_at": "2021-02-24T16:31:34Z", - "updated_at": "2026-06-30T11:56:42Z", + "updated_at": "2026-06-30T14:49:00Z", "pushed_at": "2021-02-25T16:05:02Z", - "stargazers_count": 269, - "watchers_count": 269, + "stargazers_count": 270, + "watchers_count": 270, "has_discussions": false, "forks_count": 83, "allow_forking": true, @@ -179,7 +179,7 @@ "topics": [], "visibility": "public", "forks": 83, - "watchers": 269, + "watchers": 270, "score": 0, "subscribers_count": 6 }, @@ -631,10 +631,10 @@ "description": "CVE-2021-21972 Unauthorized RCE in VMware vCenter metasploit exploit script", "fork": false, "created_at": "2021-03-07T16:30:36Z", - "updated_at": "2026-06-30T11:56:42Z", + "updated_at": "2026-06-30T14:49:00Z", "pushed_at": "2021-03-07T17:12:55Z", - "stargazers_count": 18, - "watchers_count": 18, + "stargazers_count": 19, + "watchers_count": 19, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -645,7 +645,7 @@ "topics": [], "visibility": "public", "forks": 6, - "watchers": 18, + "watchers": 19, "score": 0, "subscribers_count": 1 }, diff --git a/2021/CVE-2021-21985.json b/2021/CVE-2021-21985.json index c1a202e7c1..1303e6c3c1 100644 --- a/2021/CVE-2021-21985.json +++ b/2021/CVE-2021-21985.json @@ -47,10 +47,10 @@ "description": null, "fork": false, "created_at": "2021-05-29T13:07:14Z", - "updated_at": "2026-06-30T11:56:45Z", + "updated_at": "2026-06-30T14:49:03Z", "pushed_at": "2023-01-19T16:24:33Z", - "stargazers_count": 212, - "watchers_count": 212, + "stargazers_count": 213, + "watchers_count": 213, "has_discussions": false, "forks_count": 49, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 49, - "watchers": 212, + "watchers": 213, "score": 0, "subscribers_count": 4 }, diff --git a/2021/CVE-2021-26943.json b/2021/CVE-2021-26943.json index a877c0612b..6e2f206abe 100644 --- a/2021/CVE-2021-26943.json +++ b/2021/CVE-2021-26943.json @@ -19,7 +19,7 @@ "stargazers_count": 148, "watchers_count": 148, "has_discussions": true, - "forks_count": 24, + "forks_count": 23, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -31,7 +31,7 @@ "vulnerability" ], "visibility": "public", - "forks": 24, + "forks": 23, "watchers": 148, "score": 0, "subscribers_count": 7 diff --git a/2021/CVE-2021-30860.json b/2021/CVE-2021-30860.json index db92714cf9..a7e2620df8 100644 --- a/2021/CVE-2021-30860.json +++ b/2021/CVE-2021-30860.json @@ -47,10 +47,10 @@ "description": "Collection of materials relating to FORCEDENTRY", "fork": false, "created_at": "2021-12-25T03:00:01Z", - "updated_at": "2026-05-14T22:42:35Z", + "updated_at": "2026-06-30T16:42:57Z", "pushed_at": "2024-03-30T22:17:05Z", - "stargazers_count": 100, - "watchers_count": 100, + "stargazers_count": 101, + "watchers_count": 101, "has_discussions": false, "forks_count": 25, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 25, - "watchers": 100, + "watchers": 101, "score": 0, "subscribers_count": 3 } diff --git a/2021/CVE-2021-31728.json b/2021/CVE-2021-31728.json index b949adec8b..2479a3efab 100644 --- a/2021/CVE-2021-31728.json +++ b/2021/CVE-2021-31728.json @@ -19,7 +19,7 @@ "stargazers_count": 90, "watchers_count": 90, "has_discussions": false, - "forks_count": 25, + "forks_count": 24, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -31,7 +31,7 @@ "vulnerability" ], "visibility": "public", - "forks": 25, + "forks": 24, "watchers": 90, "score": 0, "subscribers_count": 5 diff --git a/2021/CVE-2021-33044.json b/2021/CVE-2021-33044.json index d041ea6889..7475dcd898 100644 --- a/2021/CVE-2021-33044.json +++ b/2021/CVE-2021-33044.json @@ -212,8 +212,8 @@ "description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.", "fork": false, "created_at": "2026-03-28T17:42:44Z", - "updated_at": "2026-06-30T12:18:30Z", - "pushed_at": "2026-06-30T12:17:45Z", + "updated_at": "2026-06-30T16:56:36Z", + "pushed_at": "2026-06-30T16:56:28Z", "stargazers_count": 4, "watchers_count": 4, "has_discussions": false, diff --git a/2021/CVE-2021-34527.json b/2021/CVE-2021-34527.json index 1eab090ed0..fec13539a2 100644 --- a/2021/CVE-2021-34527.json +++ b/2021/CVE-2021-34527.json @@ -225,10 +225,10 @@ "description": "A PrintNightmare (CVE-2021-34527) Python Scanner. Scan entire subnets for hosts vulnerable to the PrintNightmare RCE", "fork": false, "created_at": "2021-07-05T20:13:49Z", - "updated_at": "2026-06-30T11:56:47Z", + "updated_at": "2026-06-30T14:49:06Z", "pushed_at": "2024-05-19T16:25:52Z", - "stargazers_count": 800, - "watchers_count": 800, + "stargazers_count": 801, + "watchers_count": 801, "has_discussions": false, "forks_count": 118, "allow_forking": true, @@ -239,7 +239,7 @@ "topics": [], "visibility": "public", "forks": 118, - "watchers": 800, + "watchers": 801, "score": 0, "subscribers_count": 8 }, diff --git a/2021/CVE-2021-36955.json b/2021/CVE-2021-36955.json index e5abbeec18..7292690555 100644 --- a/2021/CVE-2021-36955.json +++ b/2021/CVE-2021-36955.json @@ -14,10 +14,10 @@ "description": "CVE-2021-36955", "fork": false, "created_at": "2022-07-18T07:08:56Z", - "updated_at": "2024-12-19T23:48:56Z", + "updated_at": "2026-06-30T15:47:29Z", "pushed_at": "2023-08-15T15:42:39Z", - "stargazers_count": 14, - "watchers_count": 14, + "stargazers_count": 13, + "watchers_count": 13, "has_discussions": false, "forks_count": 7, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 7, - "watchers": 14, + "watchers": 13, "score": 0, "subscribers_count": 1 } diff --git a/2021/CVE-2021-40444.json b/2021/CVE-2021-40444.json index f555f6118b..7beecd0f94 100644 --- a/2021/CVE-2021-40444.json +++ b/2021/CVE-2021-40444.json @@ -250,7 +250,7 @@ "stargazers_count": 1748, "watchers_count": 1748, "has_discussions": false, - "forks_count": 478, + "forks_count": 477, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -258,7 +258,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 478, + "forks": 477, "watchers": 1748, "score": 0, "subscribers_count": 27 diff --git a/2021/CVE-2021-40449.json b/2021/CVE-2021-40449.json index ad8d14f90f..9f2cf8bdb4 100644 --- a/2021/CVE-2021-40449.json +++ b/2021/CVE-2021-40449.json @@ -82,10 +82,10 @@ "description": "LPE exploit for a UAF in Windows (CVE-2021-40449).", "fork": false, "created_at": "2021-10-25T04:58:49Z", - "updated_at": "2026-02-05T12:38:08Z", + "updated_at": "2026-06-30T15:47:23Z", "pushed_at": "2021-11-05T06:54:10Z", - "stargazers_count": 45, - "watchers_count": 45, + "stargazers_count": 44, + "watchers_count": 44, "has_discussions": false, "forks_count": 15, "allow_forking": true, @@ -98,7 +98,7 @@ ], "visibility": "public", "forks": 15, - "watchers": 45, + "watchers": 44, "score": 0, "subscribers_count": 0 }, diff --git a/2021/CVE-2021-41277.json b/2021/CVE-2021-41277.json index 8ccadd2ceb..1f96eb881f 100644 --- a/2021/CVE-2021-41277.json +++ b/2021/CVE-2021-41277.json @@ -19,7 +19,7 @@ "stargazers_count": 11, "watchers_count": 11, "has_discussions": false, - "forks_count": 8, + "forks_count": 7, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -30,7 +30,7 @@ "poc" ], "visibility": "public", - "forks": 8, + "forks": 7, "watchers": 11, "score": 0, "subscribers_count": 1 diff --git a/2021/CVE-2021-42287.json b/2021/CVE-2021-42287.json index 9122b9bf88..49e4ab2ee6 100644 --- a/2021/CVE-2021-42287.json +++ b/2021/CVE-2021-42287.json @@ -14,10 +14,10 @@ "description": "CVE-2021-42287\/CVE-2021-42278 Scanner & Exploiter.", "fork": false, "created_at": "2021-12-11T19:27:30Z", - "updated_at": "2026-06-30T12:01:32Z", + "updated_at": "2026-06-30T15:47:25Z", "pushed_at": "2021-12-16T09:50:15Z", - "stargazers_count": 1405, - "watchers_count": 1405, + "stargazers_count": 1404, + "watchers_count": 1404, "has_discussions": false, "forks_count": 316, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 316, - "watchers": 1405, + "watchers": 1404, "score": 0, "subscribers_count": 24 }, diff --git a/2021/CVE-2021-44228.json b/2021/CVE-2021-44228.json index 339d5d5e54..9eae1ed347 100644 --- a/2021/CVE-2021-44228.json +++ b/2021/CVE-2021-44228.json @@ -403,10 +403,10 @@ "description": "Spring Boot web application vulnerable to Log4Shell (CVE-2021-44228).", "fork": false, "created_at": "2021-12-10T12:38:20Z", - "updated_at": "2026-06-27T11:46:55Z", + "updated_at": "2026-06-30T15:47:25Z", "pushed_at": "2024-04-26T03:16:26Z", - "stargazers_count": 1141, - "watchers_count": 1141, + "stargazers_count": 1140, + "watchers_count": 1140, "has_discussions": false, "forks_count": 553, "allow_forking": true, @@ -419,7 +419,7 @@ ], "visibility": "public", "forks": 553, - "watchers": 1141, + "watchers": 1140, "score": 0, "subscribers_count": 21 }, @@ -1665,7 +1665,7 @@ "fork": false, "created_at": "2021-12-11T12:16:45Z", "updated_at": "2024-04-29T17:48:37Z", - "pushed_at": "2026-05-08T16:32:20Z", + "pushed_at": "2026-06-30T12:42:52Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, @@ -6291,10 +6291,10 @@ "description": "Internal network honeypot for detecting if an attacker or insider threat scans your network for log4j CVE-2021-44228", "fork": false, "created_at": "2021-12-14T18:08:45Z", - "updated_at": "2026-04-16T01:23:12Z", + "updated_at": "2026-06-30T15:47:25Z", "pushed_at": "2021-12-20T14:44:27Z", - "stargazers_count": 151, - "watchers_count": 151, + "stargazers_count": 148, + "watchers_count": 148, "has_discussions": false, "forks_count": 25, "allow_forking": true, @@ -6305,7 +6305,7 @@ "topics": [], "visibility": "public", "forks": 25, - "watchers": 151, + "watchers": 148, "score": 0, "subscribers_count": 4 }, diff --git a/2022/CVE-2022-0337.json b/2022/CVE-2022-0337.json index 6dda6a70ed..76b8376025 100644 --- a/2022/CVE-2022-0337.json +++ b/2022/CVE-2022-0337.json @@ -14,10 +14,10 @@ "description": "🎩 🤟🏻 [P1-$10,000] Google Chrome, Microsoft Edge and Opera - vulnerability reported by Maciej Pulikowski - System environment variables leak - CVE-2022-0337", "fork": false, "created_at": "2022-03-19T08:10:46Z", - "updated_at": "2026-06-30T11:56:54Z", + "updated_at": "2026-06-30T14:49:13Z", "pushed_at": "2022-09-04T17:28:56Z", - "stargazers_count": 339, - "watchers_count": 339, + "stargazers_count": 340, + "watchers_count": 340, "has_discussions": false, "forks_count": 32, "allow_forking": true, @@ -44,7 +44,7 @@ ], "visibility": "public", "forks": 32, - "watchers": 339, + "watchers": 340, "score": 0, "subscribers_count": 3 }, diff --git a/2022/CVE-2022-21882.json b/2022/CVE-2022-21882.json index 5cd15e192f..a54152bdbc 100644 --- a/2022/CVE-2022-21882.json +++ b/2022/CVE-2022-21882.json @@ -14,10 +14,10 @@ "description": "win32k LPE ", "fork": false, "created_at": "2022-01-27T03:44:10Z", - "updated_at": "2026-06-30T12:01:35Z", + "updated_at": "2026-06-30T15:47:26Z", "pushed_at": "2022-01-27T04:18:18Z", - "stargazers_count": 461, - "watchers_count": 461, + "stargazers_count": 460, + "watchers_count": 460, "has_discussions": false, "forks_count": 131, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 131, - "watchers": 461, + "watchers": 460, "score": 0, "subscribers_count": 11 }, diff --git a/2022/CVE-2022-22077.json b/2022/CVE-2022-22077.json index 96b3141d99..9ccd51b223 100644 --- a/2022/CVE-2022-22077.json +++ b/2022/CVE-2022-22077.json @@ -15,7 +15,7 @@ "fork": false, "created_at": "2025-09-08T21:12:19Z", "updated_at": "2026-06-19T21:56:25Z", - "pushed_at": "2026-06-30T04:59:44Z", + "pushed_at": "2026-06-30T14:06:16Z", "stargazers_count": 5, "watchers_count": 5, "has_discussions": false, diff --git a/2022/CVE-2022-26134.json b/2022/CVE-2022-26134.json index 373bcff86d..5439ec6ab4 100644 --- a/2022/CVE-2022-26134.json +++ b/2022/CVE-2022-26134.json @@ -1606,10 +1606,10 @@ "description": "Detecting CVE-2022-26134 using Nuclei", "fork": false, "created_at": "2022-10-09T17:15:07Z", - "updated_at": "2026-06-30T11:57:01Z", + "updated_at": "2026-06-30T14:49:21Z", "pushed_at": "2022-10-09T17:53:18Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -1620,7 +1620,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 1 }, diff --git a/2022/CVE-2022-29799.json b/2022/CVE-2022-29799.json index 158c73f71f..83aecf0e48 100644 --- a/2022/CVE-2022-29799.json +++ b/2022/CVE-2022-29799.json @@ -59,8 +59,8 @@ "description": "Demonstrate local privilege escalation in networkd-dispatcher via CVE-2022-29799 and CVE-2022-29800 using this C proof of concept.", "fork": false, "created_at": "2026-06-23T14:05:18Z", - "updated_at": "2026-06-30T12:05:11Z", - "pushed_at": "2026-06-30T12:05:05Z", + "updated_at": "2026-06-30T17:52:00Z", + "pushed_at": "2026-06-30T17:51:56Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2022/CVE-2022-33679.json b/2022/CVE-2022-33679.json index 1fa4801d6c..e6dc8d7778 100644 --- a/2022/CVE-2022-33679.json +++ b/2022/CVE-2022-33679.json @@ -14,10 +14,10 @@ "description": "One day based on https:\/\/googleprojectzero.blogspot.com\/2022\/10\/rc4-is-still-considered-harmful.html", "fork": false, "created_at": "2022-11-02T18:38:01Z", - "updated_at": "2026-06-30T11:57:01Z", + "updated_at": "2026-06-30T14:49:22Z", "pushed_at": "2024-11-10T17:21:28Z", - "stargazers_count": 413, - "watchers_count": 413, + "stargazers_count": 414, + "watchers_count": 414, "has_discussions": false, "forks_count": 72, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 72, - "watchers": 413, + "watchers": 414, "score": 0, "subscribers_count": 7 }, diff --git a/2022/CVE-2022-3699.json b/2022/CVE-2022-3699.json index 4706adfa4d..b1cd54cbda 100644 --- a/2022/CVE-2022-3699.json +++ b/2022/CVE-2022-3699.json @@ -47,10 +47,10 @@ "description": "CVE-2022-3699 with arbitrary kernel code execution capability", "fork": false, "created_at": "2022-12-25T04:34:26Z", - "updated_at": "2026-04-25T07:09:30Z", + "updated_at": "2026-06-30T13:39:45Z", "pushed_at": "2022-12-27T21:30:08Z", - "stargazers_count": 71, - "watchers_count": 71, + "stargazers_count": 72, + "watchers_count": 72, "has_discussions": false, "forks_count": 23, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 23, - "watchers": 71, + "watchers": 72, "score": 0, "subscribers_count": 3 }, diff --git a/2022/CVE-2022-37932.json b/2022/CVE-2022-37932.json index 2d44c87fa8..5430f9696e 100644 --- a/2022/CVE-2022-37932.json +++ b/2022/CVE-2022-37932.json @@ -14,7 +14,7 @@ "description": null, "fork": false, "created_at": "2025-04-10T03:27:07Z", - "updated_at": "2026-06-23T22:44:51Z", + "updated_at": "2026-06-30T15:36:20Z", "pushed_at": "2025-04-10T03:27:32Z", "stargazers_count": 2, "watchers_count": 2, diff --git a/2022/CVE-2022-42889.json b/2022/CVE-2022-42889.json index db045bc5f4..1880445679 100644 --- a/2022/CVE-2022-42889.json +++ b/2022/CVE-2022-42889.json @@ -118,10 +118,10 @@ "description": "Dockerized POC for CVE-2022-42889 Text4Shell", "fork": false, "created_at": "2022-10-18T09:58:00Z", - "updated_at": "2026-06-30T11:57:01Z", + "updated_at": "2026-06-30T14:49:21Z", "pushed_at": "2022-11-14T17:12:41Z", - "stargazers_count": 75, - "watchers_count": 75, + "stargazers_count": 76, + "watchers_count": 76, "has_discussions": false, "forks_count": 32, "allow_forking": true, @@ -140,7 +140,7 @@ ], "visibility": "public", "forks": 32, - "watchers": 75, + "watchers": 76, "score": 0, "subscribers_count": 2 }, @@ -159,10 +159,10 @@ "description": "cve-2022-42889 Text4Shell CVE-2022-42889 affects Apache Commons Text versions 1.5 through 1.9. It has been patched as of Commons Text version 1.10. ", "fork": false, "created_at": "2022-10-18T13:53:55Z", - "updated_at": "2026-06-30T11:57:01Z", + "updated_at": "2026-06-30T14:49:22Z", "pushed_at": "2022-10-18T14:10:07Z", - "stargazers_count": 38, - "watchers_count": 38, + "stargazers_count": 39, + "watchers_count": 39, "has_discussions": false, "forks_count": 12, "allow_forking": true, @@ -173,7 +173,7 @@ "topics": [], "visibility": "public", "forks": 12, - "watchers": 38, + "watchers": 39, "score": 0, "subscribers_count": 1 }, @@ -298,10 +298,10 @@ "description": "Apache commons text - CVE-2022-42889 Text4Shell proof of concept exploit.", "fork": false, "created_at": "2022-10-19T11:49:08Z", - "updated_at": "2026-06-30T11:57:01Z", + "updated_at": "2026-06-30T14:49:22Z", "pushed_at": "2023-12-29T14:57:34Z", - "stargazers_count": 55, - "watchers_count": 55, + "stargazers_count": 56, + "watchers_count": 56, "has_discussions": false, "forks_count": 8, "allow_forking": true, @@ -324,7 +324,7 @@ ], "visibility": "public", "forks": 8, - "watchers": 55, + "watchers": 56, "score": 0, "subscribers_count": 2 }, diff --git a/2023/CVE-2023-0179.json b/2023/CVE-2023-0179.json index bcb410e75c..76e10b2b00 100644 --- a/2023/CVE-2023-0179.json +++ b/2023/CVE-2023-0179.json @@ -47,10 +47,10 @@ "description": "针对（CVE-2023-0179）漏洞利用 该漏洞被分配为CVE-2023-0179，影响了从5.5到6.2-rc3的所有Linux版本，该漏洞在6.1.6上被测试。 漏洞的细节和文章可以在os-security上找到。", "fork": false, "created_at": "2023-03-16T02:20:52Z", - "updated_at": "2026-06-30T11:57:06Z", + "updated_at": "2026-06-30T14:49:28Z", "pushed_at": "2023-03-16T02:22:28Z", - "stargazers_count": 200, - "watchers_count": 200, + "stargazers_count": 201, + "watchers_count": 201, "has_discussions": false, "forks_count": 26, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 26, - "watchers": 200, + "watchers": 201, "score": 0, "subscribers_count": 3 }, diff --git a/2023/CVE-2023-2002.json b/2023/CVE-2023-2002.json index bdf99f62df..325ec31860 100644 --- a/2023/CVE-2023-2002.json +++ b/2023/CVE-2023-2002.json @@ -14,10 +14,10 @@ "description": "Linux Bluetooth - Run arbitrary management commands as an unprivileged user", "fork": false, "created_at": "2023-04-16T10:05:13Z", - "updated_at": "2026-06-30T11:57:08Z", + "updated_at": "2026-06-30T14:49:30Z", "pushed_at": "2023-05-31T16:06:34Z", - "stargazers_count": 84, - "watchers_count": 84, + "stargazers_count": 85, + "watchers_count": 85, "has_discussions": false, "forks_count": 7, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 7, - "watchers": 84, + "watchers": 85, "score": 0, "subscribers_count": 2 } diff --git a/2023/CVE-2023-20696.json b/2023/CVE-2023-20696.json index 4646d2d146..512cec54ae 100644 --- a/2023/CVE-2023-20696.json +++ b/2023/CVE-2023-20696.json @@ -14,12 +14,12 @@ "description": "Cert exploit for MTK devices.There is a logic flaw in MTK cert verification process.Similar to CVE-2023-20696.", "fork": false, "created_at": "2026-06-22T02:09:35Z", - "updated_at": "2026-06-30T12:05:49Z", - "pushed_at": "2026-06-30T12:05:41Z", - "stargazers_count": 60, - "watchers_count": 60, + "updated_at": "2026-06-30T16:33:19Z", + "pushed_at": "2026-06-30T13:44:57Z", + "stargazers_count": 64, + "watchers_count": 64, "has_discussions": false, - "forks_count": 35, + "forks_count": 40, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,8 +27,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 35, - "watchers": 60, + "forks": 40, + "watchers": 64, "score": 0, "subscribers_count": 0 } diff --git a/2023/CVE-2023-21768.json b/2023/CVE-2023-21768.json index 18b9ed9ea2..0961720018 100644 --- a/2023/CVE-2023-21768.json +++ b/2023/CVE-2023-21768.json @@ -121,10 +121,10 @@ "description": "Windows_AFD_LPE_CVE-2023-21768", "fork": false, "created_at": "2023-03-13T20:32:50Z", - "updated_at": "2026-06-30T11:57:06Z", + "updated_at": "2026-06-30T14:49:28Z", "pushed_at": "2023-08-27T10:41:40Z", - "stargazers_count": 62, - "watchers_count": 62, + "stargazers_count": 63, + "watchers_count": 63, "has_discussions": false, "forks_count": 15, "allow_forking": true, @@ -135,7 +135,7 @@ "topics": [], "visibility": "public", "forks": 15, - "watchers": 62, + "watchers": 63, "score": 0, "subscribers_count": 1 }, diff --git a/2023/CVE-2023-23397.json b/2023/CVE-2023-23397.json index 1820ddc46b..4c961c4922 100644 --- a/2023/CVE-2023-23397.json +++ b/2023/CVE-2023-23397.json @@ -189,10 +189,10 @@ "description": null, "fork": false, "created_at": "2023-03-16T19:43:39Z", - "updated_at": "2026-06-30T11:57:06Z", + "updated_at": "2026-06-30T14:49:28Z", "pushed_at": "2023-03-17T07:47:40Z", - "stargazers_count": 345, - "watchers_count": 345, + "stargazers_count": 346, + "watchers_count": 346, "has_discussions": false, "forks_count": 58, "allow_forking": true, @@ -203,7 +203,7 @@ "topics": [], "visibility": "public", "forks": 58, - "watchers": 345, + "watchers": 346, "score": 0, "subscribers_count": 4 }, diff --git a/2023/CVE-2023-29357.json b/2023/CVE-2023-29357.json index 626c654b61..43d6cbac5e 100644 --- a/2023/CVE-2023-29357.json +++ b/2023/CVE-2023-29357.json @@ -14,10 +14,10 @@ "description": "Microsoft SharePoint Server Elevation of Privilege Vulnerability", "fork": false, "created_at": "2023-09-26T16:18:41Z", - "updated_at": "2026-06-30T11:57:14Z", + "updated_at": "2026-06-30T14:49:38Z", "pushed_at": "2023-09-26T19:04:21Z", - "stargazers_count": 236, - "watchers_count": 236, + "stargazers_count": 237, + "watchers_count": 237, "has_discussions": false, "forks_count": 33, "allow_forking": true, @@ -35,7 +35,7 @@ ], "visibility": "public", "forks": 33, - "watchers": 236, + "watchers": 237, "score": 0, "subscribers_count": 4 }, @@ -54,10 +54,10 @@ "description": null, "fork": false, "created_at": "2023-09-30T23:17:04Z", - "updated_at": "2026-06-30T11:57:14Z", + "updated_at": "2026-06-30T14:49:38Z", "pushed_at": "2023-10-10T19:00:30Z", - "stargazers_count": 53, - "watchers_count": 53, + "stargazers_count": 54, + "watchers_count": 54, "has_discussions": false, "forks_count": 5, "allow_forking": true, @@ -68,7 +68,7 @@ "topics": [], "visibility": "public", "forks": 5, - "watchers": 53, + "watchers": 54, "score": 0, "subscribers_count": 1 }, diff --git a/2023/CVE-2023-2982.json b/2023/CVE-2023-2982.json index f3c5610a1a..aee3c2353f 100644 --- a/2023/CVE-2023-2982.json +++ b/2023/CVE-2023-2982.json @@ -14,10 +14,10 @@ "description": "WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.4 - Authentication Bypass", "fork": false, "created_at": "2023-06-29T14:21:08Z", - "updated_at": "2026-06-30T11:57:11Z", + "updated_at": "2026-06-30T14:49:34Z", "pushed_at": "2023-07-06T08:14:17Z", - "stargazers_count": 81, - "watchers_count": 81, + "stargazers_count": 82, + "watchers_count": 82, "has_discussions": false, "forks_count": 20, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 20, - "watchers": 81, + "watchers": 82, "score": 0, "subscribers_count": 2 }, diff --git a/2023/CVE-2023-32434.json b/2023/CVE-2023-32434.json index 4b95658fd3..ebe22a1914 100644 --- a/2023/CVE-2023-32434.json +++ b/2023/CVE-2023-32434.json @@ -47,8 +47,8 @@ "description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙", "fork": false, "created_at": "2025-08-13T09:19:29Z", - "updated_at": "2026-06-30T10:05:45Z", - "pushed_at": "2026-06-30T10:05:42Z", + "updated_at": "2026-06-30T15:49:35Z", + "pushed_at": "2026-06-30T15:47:51Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2023/CVE-2023-3519.json b/2023/CVE-2023-3519.json index 376646f8c9..7621011f92 100644 --- a/2023/CVE-2023-3519.json +++ b/2023/CVE-2023-3519.json @@ -51,10 +51,10 @@ "description": "Accurately fingerprint and detect vulnerable (and patched!) versions of Netscaler \/ Citrix ADC to CVE-2023-3519", "fork": false, "created_at": "2023-07-20T16:05:07Z", - "updated_at": "2026-06-30T11:57:12Z", + "updated_at": "2026-06-30T14:49:35Z", "pushed_at": "2023-07-23T03:54:44Z", - "stargazers_count": 85, - "watchers_count": 85, + "stargazers_count": 86, + "watchers_count": 86, "has_discussions": false, "forks_count": 14, "allow_forking": true, @@ -70,7 +70,7 @@ ], "visibility": "public", "forks": 14, - "watchers": 85, + "watchers": 86, "score": 0, "subscribers_count": 1 }, diff --git a/2023/CVE-2023-38646.json b/2023/CVE-2023-38646.json index e8640778a9..0cabf800a2 100644 --- a/2023/CVE-2023-38646.json +++ b/2023/CVE-2023-38646.json @@ -397,10 +397,10 @@ "description": "Automatic Tools For Metabase Exploit Known As CVE-2023-38646", "fork": false, "created_at": "2023-08-09T14:05:24Z", - "updated_at": "2026-06-30T11:57:13Z", + "updated_at": "2026-06-30T14:49:36Z", "pushed_at": "2023-08-11T10:31:01Z", - "stargazers_count": 26, - "watchers_count": 26, + "stargazers_count": 27, + "watchers_count": 27, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -411,7 +411,7 @@ "topics": [], "visibility": "public", "forks": 6, - "watchers": 26, + "watchers": 27, "score": 0, "subscribers_count": 1 }, diff --git a/2023/CVE-2023-38709.json b/2023/CVE-2023-38709.json index 5bd144ec5b..1cdd708f52 100644 --- a/2023/CVE-2023-38709.json +++ b/2023/CVE-2023-38709.json @@ -19,7 +19,7 @@ "stargazers_count": 131, "watchers_count": 131, "has_discussions": false, - "forks_count": 21, + "forks_count": 22, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -38,7 +38,7 @@ "cve-2024-39573" ], "visibility": "public", - "forks": 21, + "forks": 22, "watchers": 131, "score": 0, "subscribers_count": 1 diff --git a/2023/CVE-2023-43284.json b/2023/CVE-2023-43284.json index 0deee68a78..e848191596 100644 --- a/2023/CVE-2023-43284.json +++ b/2023/CVE-2023-43284.json @@ -14,10 +14,10 @@ "description": "DLink DIR-846 Authenticated Remote Code Execution", "fork": false, "created_at": "2023-10-04T13:07:37Z", - "updated_at": "2026-06-30T11:57:14Z", + "updated_at": "2026-06-30T14:49:38Z", "pushed_at": "2023-10-04T13:31:59Z", - "stargazers_count": 17, - "watchers_count": 17, + "stargazers_count": 18, + "watchers_count": 18, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 17, + "watchers": 18, "score": 0, "subscribers_count": 1 } diff --git a/2023/CVE-2023-45866.json b/2023/CVE-2023-45866.json index 28bf333ffb..143e4e71e7 100644 --- a/2023/CVE-2023-45866.json +++ b/2023/CVE-2023-45866.json @@ -14,12 +14,12 @@ "description": "🚨 CVE-2023-45866 - BlueDucky Implementation (Using DuckyScript) 🔓 Unauthenticated Peering Leading to Code Execution (Using HID Keyboard)", "fork": false, "created_at": "2024-01-16T06:52:02Z", - "updated_at": "2026-06-30T11:57:18Z", + "updated_at": "2026-06-30T16:55:28Z", "pushed_at": "2026-02-11T00:03:00Z", "stargazers_count": 1868, "watchers_count": 1868, "has_discussions": false, - "forks_count": 316, + "forks_count": 315, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 316, + "forks": 315, "watchers": 1868, "score": 0, "subscribers_count": 29 diff --git a/2023/CVE-2023-4911.json b/2023/CVE-2023-4911.json index 862aa81fb4..27c8b7c469 100644 --- a/2023/CVE-2023-4911.json +++ b/2023/CVE-2023-4911.json @@ -47,10 +47,10 @@ "description": "PoC for CVE-2023-4911", "fork": false, "created_at": "2023-10-04T14:12:16Z", - "updated_at": "2026-06-13T09:51:55Z", + "updated_at": "2026-06-30T18:33:46Z", "pushed_at": "2023-10-04T14:16:36Z", - "stargazers_count": 392, - "watchers_count": 392, + "stargazers_count": 393, + "watchers_count": 393, "has_discussions": false, "forks_count": 57, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 57, - "watchers": 392, + "watchers": 393, "score": 0, "subscribers_count": 4 }, @@ -315,12 +315,12 @@ "description": "Looney Tunables Local privilege escalation (CVE-2023-4911) workshop", "fork": false, "created_at": "2023-10-25T11:59:34Z", - "updated_at": "2026-05-07T23:41:14Z", + "updated_at": "2026-06-30T17:40:22Z", "pushed_at": "2024-10-01T08:39:14Z", - "stargazers_count": 17, - "watchers_count": 17, + "stargazers_count": 18, + "watchers_count": 18, "has_discussions": false, - "forks_count": 2, + "forks_count": 3, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -328,8 +328,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 2, - "watchers": 17, + "forks": 3, + "watchers": 18, "score": 0, "subscribers_count": 1 }, diff --git a/2024/CVE-2024-0670.json b/2024/CVE-2024-0670.json index ff70e2a0b6..79c89cd402 100644 --- a/2024/CVE-2024-0670.json +++ b/2024/CVE-2024-0670.json @@ -172,8 +172,8 @@ "description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.", "fork": false, "created_at": "2026-01-08T01:32:09Z", - "updated_at": "2026-06-30T10:52:57Z", - "pushed_at": "2026-06-30T10:52:54Z", + "updated_at": "2026-06-30T16:36:27Z", + "pushed_at": "2026-06-30T16:36:23Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-21633.json b/2024/CVE-2024-21633.json index 7e816457e0..390299ecbe 100644 --- a/2024/CVE-2024-21633.json +++ b/2024/CVE-2024-21633.json @@ -14,10 +14,10 @@ "description": "MobSF Remote code execution (via CVE-2024-21633)", "fork": false, "created_at": "2024-01-07T21:34:09Z", - "updated_at": "2026-06-30T11:57:17Z", + "updated_at": "2026-06-30T14:49:41Z", "pushed_at": "2024-01-07T21:34:51Z", - "stargazers_count": 78, - "watchers_count": 78, + "stargazers_count": 79, + "watchers_count": 79, "has_discussions": false, "forks_count": 5, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 5, - "watchers": 78, + "watchers": 79, "score": 0, "subscribers_count": 1 } diff --git a/2024/CVE-2024-28085.json b/2024/CVE-2024-28085.json index 8d501dc9cf..a56201eb36 100644 --- a/2024/CVE-2024-28085.json +++ b/2024/CVE-2024-28085.json @@ -14,10 +14,10 @@ "description": "WallEscape vulnerability in util-linux", "fork": false, "created_at": "2024-03-11T00:15:03Z", - "updated_at": "2026-06-30T11:57:19Z", + "updated_at": "2026-06-30T14:49:44Z", "pushed_at": "2024-03-30T01:32:02Z", - "stargazers_count": 55, - "watchers_count": 55, + "stargazers_count": 56, + "watchers_count": 56, "has_discussions": false, "forks_count": 8, "allow_forking": true, @@ -35,7 +35,7 @@ ], "visibility": "public", "forks": 8, - "watchers": 55, + "watchers": 56, "score": 0, "subscribers_count": 1 }, diff --git a/2024/CVE-2024-31317.json b/2024/CVE-2024-31317.json index d7dcbb52a0..0374fd7a86 100644 --- a/2024/CVE-2024-31317.json +++ b/2024/CVE-2024-31317.json @@ -52,7 +52,7 @@ "stargazers_count": 55, "watchers_count": 55, "has_discussions": false, - "forks_count": 20, + "forks_count": 21, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,7 +60,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 20, + "forks": 21, "watchers": 55, "score": 0, "subscribers_count": 3 @@ -349,7 +349,7 @@ "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, - "forks_count": 1, + "forks_count": 2, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -357,7 +357,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 1, + "forks": 2, "watchers": 2, "score": 0, "subscribers_count": 0 diff --git a/2024/CVE-2024-38472.json b/2024/CVE-2024-38472.json index 6858d091fa..c4d8857623 100644 --- a/2024/CVE-2024-38472.json +++ b/2024/CVE-2024-38472.json @@ -52,7 +52,7 @@ "stargazers_count": 131, "watchers_count": 131, "has_discussions": false, - "forks_count": 21, + "forks_count": 22, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -71,7 +71,7 @@ "cve-2024-39573" ], "visibility": "public", - "forks": 21, + "forks": 22, "watchers": 131, "score": 0, "subscribers_count": 1 diff --git a/2024/CVE-2024-4367.json b/2024/CVE-2024-4367.json index 274487ce86..ef731d6f10 100644 --- a/2024/CVE-2024-4367.json +++ b/2024/CVE-2024-4367.json @@ -229,7 +229,7 @@ "fork": false, "created_at": "2024-06-17T11:39:41Z", "updated_at": "2026-06-02T18:17:20Z", - "pushed_at": "2026-06-17T15:10:04Z", + "pushed_at": "2026-06-30T16:36:50Z", "stargazers_count": 10, "watchers_count": 10, "has_discussions": false, diff --git a/2024/CVE-2024-52940.json b/2024/CVE-2024-52940.json index 66bfce069c..12463037fb 100644 --- a/2024/CVE-2024-52940.json +++ b/2024/CVE-2024-52940.json @@ -19,7 +19,7 @@ "stargazers_count": 36, "watchers_count": 36, "has_discussions": false, - "forks_count": 10, + "forks_count": 11, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -39,7 +39,7 @@ "zero-day-vulnerability" ], "visibility": "public", - "forks": 10, + "forks": 11, "watchers": 36, "score": 0, "subscribers_count": 1 diff --git a/2024/CVE-2024-56426.json b/2024/CVE-2024-56426.json index d5dfe4ec9d..ecbdcb29db 100644 --- a/2024/CVE-2024-56426.json +++ b/2024/CVE-2024-56426.json @@ -14,12 +14,12 @@ "description": "A PoC of the CVE-2024-56426 vulnerability.", "fork": false, "created_at": "2026-04-07T12:02:52Z", - "updated_at": "2026-06-30T11:51:55Z", - "pushed_at": "2026-06-30T12:22:57Z", + "updated_at": "2026-06-30T18:34:31Z", + "pushed_at": "2026-06-30T18:34:28Z", "stargazers_count": 14, "watchers_count": 14, "has_discussions": false, - "forks_count": 6, + "forks_count": 7, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 6, + "forks": 7, "watchers": 14, "score": 0, "subscribers_count": 0 diff --git a/2025/CVE-2025-0401.json b/2025/CVE-2025-0401.json index afb5f06a4f..9da019c912 100644 --- a/2025/CVE-2025-0401.json +++ b/2025/CVE-2025-0401.json @@ -1,4 +1,37 @@ [ + { + "id": 958641105, + "name": "CVE-2025-0401", + "full_name": "JoasASantos\/CVE-2025-0401", + "owner": { + "login": "JoasASantos", + "id": 34966120, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/34966120?v=4", + "html_url": "https:\/\/github.com\/JoasASantos", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/JoasASantos\/CVE-2025-0401", + "description": "Privilege Escalation using Passwd - April Fools prank", + "fork": false, + "created_at": "2025-04-01T14:23:43Z", + "updated_at": "2026-06-30T14:48:14Z", + "pushed_at": "2025-04-03T22:18:01Z", + "stargazers_count": 37, + "watchers_count": 37, + "has_discussions": false, + "forks_count": 9, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 9, + "watchers": 37, + "score": 0, + "subscribers_count": 1 + }, { "id": 974757447, "name": "Gombruc", diff --git a/2025/CVE-2025-14847.json b/2025/CVE-2025-14847.json index 1f270cff43..80c77e2096 100644 --- a/2025/CVE-2025-14847.json +++ b/2025/CVE-2025-14847.json @@ -14,8 +14,8 @@ "description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.", "fork": false, "created_at": "2025-07-30T15:52:00Z", - "updated_at": "2026-06-30T10:56:39Z", - "pushed_at": "2026-06-30T10:56:35Z", + "updated_at": "2026-06-30T16:40:07Z", + "pushed_at": "2026-06-30T16:40:02Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -1129,8 +1129,8 @@ "description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.", "fork": false, "created_at": "2026-01-14T06:05:44Z", - "updated_at": "2026-06-30T10:55:49Z", - "pushed_at": "2026-06-30T10:55:45Z", + "updated_at": "2026-06-30T16:39:22Z", + "pushed_at": "2026-06-30T16:39:18Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-21333.json b/2025/CVE-2025-21333.json index b8cc7abf1a..eae32ed5a6 100644 --- a/2025/CVE-2025-21333.json +++ b/2025/CVE-2025-21333.json @@ -14,10 +14,10 @@ "description": "POC exploit for CVE-2025-21333 heap-based buffer overflow. It leverages WNF state data and I\/O ring IOP_MC_BUFFER_ENTRY", "fork": false, "created_at": "2025-02-27T12:36:55Z", - "updated_at": "2026-06-30T11:57:26Z", + "updated_at": "2026-06-30T14:49:51Z", "pushed_at": "2025-04-12T22:14:58Z", - "stargazers_count": 232, - "watchers_count": 232, + "stargazers_count": 233, + "watchers_count": 233, "has_discussions": false, "forks_count": 36, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 36, - "watchers": 232, + "watchers": 233, "score": 0, "subscribers_count": 1 }, diff --git a/2025/CVE-2025-24203.json b/2025/CVE-2025-24203.json index e8edde7425..b3f57a7dc9 100644 --- a/2025/CVE-2025-24203.json +++ b/2025/CVE-2025-24203.json @@ -14,10 +14,10 @@ "description": "A simple customization toolbox that utilizes CVE-2025-24203. Supports iOS 16.0 - iOS 18.3.2.", "fork": false, "created_at": "2025-05-09T07:18:55Z", - "updated_at": "2026-06-30T10:16:28Z", + "updated_at": "2026-06-30T18:10:56Z", "pushed_at": "2026-06-30T02:22:50Z", - "stargazers_count": 401, - "watchers_count": 401, + "stargazers_count": 404, + "watchers_count": 404, "has_discussions": false, "forks_count": 42, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 42, - "watchers": 401, + "watchers": 404, "score": 0, "subscribers_count": 11 }, diff --git a/2025/CVE-2025-24257.json b/2025/CVE-2025-24257.json index ea7a072aa3..577b0feeb6 100644 --- a/2025/CVE-2025-24257.json +++ b/2025/CVE-2025-24257.json @@ -14,8 +14,8 @@ "description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis", "fork": false, "created_at": "2026-04-04T03:42:55Z", - "updated_at": "2026-06-30T11:39:59Z", - "pushed_at": "2026-06-30T11:39:56Z", + "updated_at": "2026-06-30T17:25:28Z", + "pushed_at": "2026-06-30T17:25:24Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-30066.json b/2025/CVE-2025-30066.json index 180630b9b6..5c19805879 100644 --- a/2025/CVE-2025-30066.json +++ b/2025/CVE-2025-30066.json @@ -14,7 +14,7 @@ "description": null, "fork": false, "created_at": "2025-03-18T14:33:29Z", - "updated_at": "2025-03-19T13:50:41Z", + "updated_at": "2026-06-30T13:13:13Z", "pushed_at": "2025-03-19T13:50:37Z", "stargazers_count": 1, "watchers_count": 1, diff --git a/2025/CVE-2025-31258.json b/2025/CVE-2025-31258.json index 5f7b7feffc..ba00c4702c 100644 --- a/2025/CVE-2025-31258.json +++ b/2025/CVE-2025-31258.json @@ -14,8 +14,8 @@ "description": "🔓 Explore CVE-2025-31258 with this PoC demonstrating partial sandbox escape using RemoteViewServices for practical 1-day security practice.", "fork": false, "created_at": "2020-06-23T15:20:11Z", - "updated_at": "2026-06-30T10:10:32Z", - "pushed_at": "2026-06-30T10:10:28Z", + "updated_at": "2026-06-30T15:52:58Z", + "pushed_at": "2026-06-30T15:52:55Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-32462.json b/2025/CVE-2025-32462.json index 7c36ca88c9..fe7b5ed3df 100644 --- a/2025/CVE-2025-32462.json +++ b/2025/CVE-2025-32462.json @@ -47,10 +47,10 @@ "description": "A easy sudo poc by cryingn.", "fork": false, "created_at": "2025-07-03T07:59:37Z", - "updated_at": "2026-06-30T11:57:29Z", + "updated_at": "2026-06-30T14:49:54Z", "pushed_at": "2026-05-06T12:26:57Z", - "stargazers_count": 12, - "watchers_count": 12, + "stargazers_count": 13, + "watchers_count": 13, "has_discussions": false, "forks_count": 4, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 4, - "watchers": 12, + "watchers": 13, "score": 0, "subscribers_count": 1 }, diff --git a/2025/CVE-2025-32463.json b/2025/CVE-2025-32463.json index c6508f83af..885a455324 100644 --- a/2025/CVE-2025-32463.json +++ b/2025/CVE-2025-32463.json @@ -237,10 +237,10 @@ "description": "Local Privilege Escalation to Root via Sudo chroot in Linux", "fork": false, "created_at": "2025-07-02T07:20:20Z", - "updated_at": "2026-06-30T11:57:29Z", + "updated_at": "2026-06-30T14:49:54Z", "pushed_at": "2025-07-02T08:04:44Z", - "stargazers_count": 465, - "watchers_count": 465, + "stargazers_count": 466, + "watchers_count": 466, "has_discussions": false, "forks_count": 63, "allow_forking": true, @@ -263,7 +263,7 @@ ], "visibility": "public", "forks": 63, - "watchers": 465, + "watchers": 466, "score": 0, "subscribers_count": 3 }, @@ -1595,8 +1595,8 @@ "description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.", "fork": false, "created_at": "2025-09-20T00:42:07Z", - "updated_at": "2026-06-30T10:11:29Z", - "pushed_at": "2026-06-30T10:11:25Z", + "updated_at": "2026-06-30T15:54:41Z", + "pushed_at": "2026-06-30T15:54:15Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-40271.json b/2025/CVE-2025-40271.json index 8ac24ef6e6..02f39374fc 100644 --- a/2025/CVE-2025-40271.json +++ b/2025/CVE-2025-40271.json @@ -31,5 +31,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1285379254, + "name": "CVE-2025-40271", + "full_name": "MadExploits\/CVE-2025-40271", + "owner": { + "login": "MadExploits", + "id": 80827394, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/80827394?v=4", + "html_url": "https:\/\/github.com\/MadExploits", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/MadExploits\/CVE-2025-40271", + "description": "CVE-2025-40271 Modifed By MadEploits", + "fork": false, + "created_at": "2026-06-30T18:40:57Z", + "updated_at": "2026-06-30T18:41:55Z", + "pushed_at": "2026-06-30T18:41:51Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2025/CVE-2025-46731.json b/2025/CVE-2025-46731.json index 106858a93a..80c20b86a7 100644 --- a/2025/CVE-2025-46731.json +++ b/2025/CVE-2025-46731.json @@ -19,7 +19,7 @@ "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 0, "score": 0, "subscribers_count": 1 diff --git a/2025/CVE-2025-49844.json b/2025/CVE-2025-49844.json index a5fdc06b4d..8213c7faab 100644 --- a/2025/CVE-2025-49844.json +++ b/2025/CVE-2025-49844.json @@ -14,8 +14,8 @@ "description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.", "fork": false, "created_at": "2019-04-13T07:51:09Z", - "updated_at": "2026-06-30T10:24:42Z", - "pushed_at": "2026-06-30T10:24:20Z", + "updated_at": "2026-06-30T16:07:09Z", + "pushed_at": "2026-06-30T16:07:01Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -66,8 +66,8 @@ "description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.", "fork": false, "created_at": "2022-04-06T09:27:39Z", - "updated_at": "2026-06-30T10:24:58Z", - "pushed_at": "2026-06-30T10:24:54Z", + "updated_at": "2026-06-30T16:07:42Z", + "pushed_at": "2026-06-30T16:07:36Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-52915.json b/2025/CVE-2025-52915.json index 7ebb6aeefb..a104a6875a 100644 --- a/2025/CVE-2025-52915.json +++ b/2025/CVE-2025-52915.json @@ -14,10 +14,10 @@ "description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).", "fork": false, "created_at": "2023-12-05T14:52:11Z", - "updated_at": "2026-06-30T12:05:58Z", + "updated_at": "2026-06-30T14:49:41Z", "pushed_at": "2026-06-28T05:39:27Z", - "stargazers_count": 827, - "watchers_count": 827, + "stargazers_count": 828, + "watchers_count": 828, "has_discussions": false, "forks_count": 120, "allow_forking": true, @@ -39,7 +39,7 @@ ], "visibility": "public", "forks": 120, - "watchers": 827, + "watchers": 828, "score": 0, "subscribers_count": 19 } diff --git a/2025/CVE-2025-54068.json b/2025/CVE-2025-54068.json index 1922ff805f..2c62493d31 100644 --- a/2025/CVE-2025-54068.json +++ b/2025/CVE-2025-54068.json @@ -52,7 +52,7 @@ "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, - "forks_count": 1, + "forks_count": 0, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,7 +60,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 1, + "forks": 0, "watchers": 3, "score": 0, "subscribers_count": 0 diff --git a/2025/CVE-2025-54424.json b/2025/CVE-2025-54424.json index 2d30854297..15fe3acd20 100644 --- a/2025/CVE-2025-54424.json +++ b/2025/CVE-2025-54424.json @@ -53,8 +53,8 @@ "description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐", "fork": false, "created_at": "2025-08-14T05:16:16Z", - "updated_at": "2026-06-30T10:06:26Z", - "pushed_at": "2026-06-30T10:06:22Z", + "updated_at": "2026-06-30T15:48:43Z", + "pushed_at": "2026-06-30T15:48:39Z", "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, diff --git a/2025/CVE-2025-55182.json b/2025/CVE-2025-55182.json index 54f482c2e8..c915dac672 100644 --- a/2025/CVE-2025-55182.json +++ b/2025/CVE-2025-55182.json @@ -14,8 +14,8 @@ "description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.", "fork": false, "created_at": "2022-06-17T10:19:10Z", - "updated_at": "2026-06-30T10:45:40Z", - "pushed_at": "2026-06-30T10:45:37Z", + "updated_at": "2026-06-30T16:29:04Z", + "pushed_at": "2026-06-30T16:28:56Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -99,8 +99,8 @@ "description": null, "fork": false, "created_at": "2024-11-29T12:32:19Z", - "updated_at": "2026-06-30T10:46:11Z", - "pushed_at": "2026-06-30T10:46:07Z", + "updated_at": "2026-06-30T16:29:43Z", + "pushed_at": "2026-06-30T16:29:34Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -148,8 +148,8 @@ "description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.", "fork": false, "created_at": "2025-06-06T16:34:46Z", - "updated_at": "2026-06-30T10:45:54Z", - "pushed_at": "2026-06-30T10:45:50Z", + "updated_at": "2026-06-30T16:29:20Z", + "pushed_at": "2026-06-30T16:29:15Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -2163,10 +2163,10 @@ "description": "Supports RSC fingerprinting and exploitation of the React component vulnerability CVE-2025-55182.", "fork": false, "created_at": "2025-12-05T05:53:25Z", - "updated_at": "2026-06-26T13:38:04Z", + "updated_at": "2026-06-30T15:31:30Z", "pushed_at": "2025-12-05T08:11:16Z", - "stargazers_count": 575, - "watchers_count": 575, + "stargazers_count": 576, + "watchers_count": 576, "has_discussions": false, "forks_count": 87, "allow_forking": true, @@ -2177,7 +2177,7 @@ "topics": [], "visibility": "public", "forks": 87, - "watchers": 575, + "watchers": 576, "score": 0, "subscribers_count": 3 }, @@ -11705,8 +11705,8 @@ "description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.", "fork": false, "created_at": "2025-12-24T14:48:19Z", - "updated_at": "2026-06-30T10:45:38Z", - "pushed_at": "2026-06-30T10:45:34Z", + "updated_at": "2026-06-30T16:29:02Z", + "pushed_at": "2026-06-30T16:28:57Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -12223,8 +12223,8 @@ "description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.", "fork": false, "created_at": "2026-01-02T01:28:57Z", - "updated_at": "2026-06-30T10:49:36Z", - "pushed_at": "2026-06-30T10:49:32Z", + "updated_at": "2026-06-30T16:33:17Z", + "pushed_at": "2026-06-30T16:33:12Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-66398.json b/2025/CVE-2025-66398.json index 7ddb261f58..36713086a4 100644 --- a/2025/CVE-2025-66398.json +++ b/2025/CVE-2025-66398.json @@ -64,8 +64,8 @@ "description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.", "fork": false, "created_at": "2026-03-23T09:09:21Z", - "updated_at": "2026-06-30T11:33:53Z", - "pushed_at": "2026-06-30T11:33:49Z", + "updated_at": "2026-06-30T17:19:00Z", + "pushed_at": "2026-06-30T17:18:56Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-66478.json b/2025/CVE-2025-66478.json index 9dc54289bd..873257ad24 100644 --- a/2025/CVE-2025-66478.json +++ b/2025/CVE-2025-66478.json @@ -14,8 +14,8 @@ "description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.", "fork": false, "created_at": "2025-10-01T07:40:09Z", - "updated_at": "2026-06-30T10:46:47Z", - "pushed_at": "2026-06-30T10:46:43Z", + "updated_at": "2026-06-30T16:30:20Z", + "pushed_at": "2026-06-30T16:30:12Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-66680.json b/2025/CVE-2025-66680.json index 0d30d4181b..7fca2aa695 100644 --- a/2025/CVE-2025-66680.json +++ b/2025/CVE-2025-66680.json @@ -44,11 +44,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/skimask1690\/WiseDelete", - "description": "Windows utility that demonstrates user-mode interaction with the vulnerable WiseDelfile64.sys driver and uses CVE-2025-66680 to perform kernel-assisted file deletion.", + "description": "Windows utility that leverages CVE-2025-66680 to enable kernel-assisted file deletion via the vulnerable WiseDelfile.sys driver.", "fork": false, "created_at": "2026-06-29T03:14:27Z", - "updated_at": "2026-06-30T09:51:13Z", - "pushed_at": "2026-06-29T03:24:27Z", + "updated_at": "2026-06-30T17:15:56Z", + "pushed_at": "2026-06-30T17:04:36Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-68921.json b/2025/CVE-2025-68921.json index 5f91f72f4c..fbaadc06a7 100644 --- a/2025/CVE-2025-68921.json +++ b/2025/CVE-2025-68921.json @@ -47,8 +47,8 @@ "description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.", "fork": false, "created_at": "2026-01-24T21:00:41Z", - "updated_at": "2026-06-30T11:02:07Z", - "pushed_at": "2026-06-30T11:02:04Z", + "updated_at": "2026-06-30T16:45:48Z", + "pushed_at": "2026-06-30T16:45:42Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-69212.json b/2025/CVE-2025-69212.json index 41b1789858..904c843411 100644 --- a/2025/CVE-2025-69212.json +++ b/2025/CVE-2025-69212.json @@ -168,5 +168,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1285105696, + "name": "CVE-2025-69212-PoC", + "full_name": "BridgerAlderson\/CVE-2025-69212-PoC", + "owner": { + "login": "BridgerAlderson", + "id": 139403792, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/139403792?v=4", + "html_url": "https:\/\/github.com\/BridgerAlderson", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/BridgerAlderson\/CVE-2025-69212-PoC", + "description": "OpenSTAManager v2.9.8 and earlier versions contain a critical OS Command Injection vulnerability in the P7M (signed XML) file decoding function.", + "fork": false, + "created_at": "2026-06-30T13:38:40Z", + "updated_at": "2026-06-30T13:39:53Z", + "pushed_at": "2026-06-30T13:39:15Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-11834.json b/2026/CVE-2026-11834.json index 55768e1782..df30e36333 100644 --- a/2026/CVE-2026-11834.json +++ b/2026/CVE-2026-11834.json @@ -14,10 +14,10 @@ "description": "Proof of Concept (PoC) for the TP-Link DHCP Option 66 Unauthenticated RCE (CVE-2026-11834)", "fork": false, "created_at": "2026-06-23T19:41:07Z", - "updated_at": "2026-06-24T17:31:10Z", + "updated_at": "2026-06-30T14:27:05Z", "pushed_at": "2026-06-24T17:30:44Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-20841.json b/2026/CVE-2026-20841.json index 8a14915daf..ae65d228b4 100644 --- a/2026/CVE-2026-20841.json +++ b/2026/CVE-2026-20841.json @@ -14,8 +14,8 @@ "description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.", "fork": false, "created_at": "2024-09-22T12:19:06Z", - "updated_at": "2026-06-30T11:18:06Z", - "pushed_at": "2026-06-30T11:18:03Z", + "updated_at": "2026-06-30T17:02:44Z", + "pushed_at": "2026-06-30T17:02:30Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -66,8 +66,8 @@ "description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.", "fork": false, "created_at": "2026-02-26T05:21:28Z", - "updated_at": "2026-06-30T11:17:19Z", - "pushed_at": "2026-06-30T11:17:15Z", + "updated_at": "2026-06-30T17:01:41Z", + "pushed_at": "2026-06-30T17:01:30Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-21509.json b/2026/CVE-2026-21509.json new file mode 100644 index 0000000000..233e5a002c --- /dev/null +++ b/2026/CVE-2026-21509.json @@ -0,0 +1,35 @@ +[ + { + "id": 1285259707, + "name": "CVE-2026-21509", + "full_name": "sentinel-aidefense\/CVE-2026-21509", + "owner": { + "login": "sentinel-aidefense", + "id": 298335092, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/298335092?v=4", + "html_url": "https:\/\/github.com\/sentinel-aidefense", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/sentinel-aidefense\/CVE-2026-21509", + "description": null, + "fork": false, + "created_at": "2026-06-30T16:19:55Z", + "updated_at": "2026-06-30T16:21:38Z", + "pushed_at": "2026-06-30T16:21:33Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-22241.json b/2026/CVE-2026-22241.json new file mode 100644 index 0000000000..d96bb04fe7 --- /dev/null +++ b/2026/CVE-2026-22241.json @@ -0,0 +1,35 @@ +[ + { + "id": 1161143065, + "name": "CVE-2026-22241", + "full_name": "CVEs-Labs\/CVE-2026-22241", + "owner": { + "login": "CVEs-Labs", + "id": 262418957, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/262418957?v=4", + "html_url": "https:\/\/github.com\/CVEs-Labs", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/CVEs-Labs\/CVE-2026-22241", + "description": "Lab Environment for CVE-2026-22241", + "fork": false, + "created_at": "2026-02-18T19:29:50Z", + "updated_at": "2026-06-30T15:54:28Z", + "pushed_at": "2026-06-30T15:54:24Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-22557.json b/2026/CVE-2026-22557.json index 3ddb4fff2f..0d561c0dcd 100644 --- a/2026/CVE-2026-22557.json +++ b/2026/CVE-2026-22557.json @@ -31,5 +31,48 @@ "watchers": 1, "score": 0, "subscribers_count": 0 + }, + { + "id": 1285229841, + "name": "CVE-2026-22557-Path-Traversal-Ubiquti-UniFi", + "full_name": "gagaltotal\/CVE-2026-22557-Path-Traversal-Ubiquti-UniFi", + "owner": { + "login": "gagaltotal", + "id": 23299078, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/23299078?v=4", + "html_url": "https:\/\/github.com\/gagaltotal", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/gagaltotal\/CVE-2026-22557-Path-Traversal-Ubiquti-UniFi", + "description": "CVE-2026-22557 Path Traversal Ubiquti UniFi Network Application", + "fork": false, + "created_at": "2026-06-30T15:47:17Z", + "updated_at": "2026-06-30T16:00:08Z", + "pushed_at": "2026-06-30T16:00:01Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "api", + "go", + "golang", + "golang-cli", + "pathtraversal", + "ubiquiti", + "ubiquiti-unifi-controller", + "ubiquiti-unifi-network", + "unifi" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-24061.json b/2026/CVE-2026-24061.json index c8d2d40415..73e51a4f1e 100644 --- a/2026/CVE-2026-24061.json +++ b/2026/CVE-2026-24061.json @@ -59,8 +59,8 @@ "description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.", "fork": false, "created_at": "2026-02-03T19:46:10Z", - "updated_at": "2026-06-30T11:08:02Z", - "pushed_at": "2026-06-30T11:07:58Z", + "updated_at": "2026-06-30T16:51:46Z", + "pushed_at": "2026-06-30T16:51:34Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -143,10 +143,10 @@ "description": "CVE-2026-24061 exploit PoC", "fork": false, "created_at": "2026-03-08T11:25:39Z", - "updated_at": "2026-06-29T16:54:06Z", + "updated_at": "2026-06-30T18:05:11Z", "pushed_at": "2026-06-29T16:54:02Z", - "stargazers_count": 204, - "watchers_count": 204, + "stargazers_count": 205, + "watchers_count": 205, "has_discussions": false, "forks_count": 51, "allow_forking": true, @@ -163,7 +163,7 @@ ], "visibility": "public", "forks": 51, - "watchers": 204, + "watchers": 205, "score": 0, "subscribers_count": 1 }, diff --git a/2026/CVE-2026-24291.json b/2026/CVE-2026-24291.json index bfedda2f4e..cc7da70ea8 100644 --- a/2026/CVE-2026-24291.json +++ b/2026/CVE-2026-24291.json @@ -14,8 +14,8 @@ "description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions", "fork": false, "created_at": "2026-03-26T04:38:27Z", - "updated_at": "2026-06-30T11:35:43Z", - "pushed_at": "2026-06-30T11:35:39Z", + "updated_at": "2026-06-30T17:20:53Z", + "pushed_at": "2026-06-30T17:20:48Z", "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, diff --git a/2026/CVE-2026-2441.json b/2026/CVE-2026-2441.json index b2859c9af8..888b007fc7 100644 --- a/2026/CVE-2026-2441.json +++ b/2026/CVE-2026-2441.json @@ -14,8 +14,8 @@ "description": "Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.", "fork": false, "created_at": "2026-03-03T14:19:18Z", - "updated_at": "2026-06-30T11:20:24Z", - "pushed_at": "2026-06-30T11:20:20Z", + "updated_at": "2026-06-30T17:05:01Z", + "pushed_at": "2026-06-30T17:04:50Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2026/CVE-2026-2472.json b/2026/CVE-2026-2472.json index 91dc26f789..4b406ca38a 100644 --- a/2026/CVE-2026-2472.json +++ b/2026/CVE-2026-2472.json @@ -14,8 +14,8 @@ "description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.", "fork": false, "created_at": "2026-03-10T14:40:04Z", - "updated_at": "2026-06-30T11:25:08Z", - "pushed_at": "2026-06-30T11:25:04Z", + "updated_at": "2026-06-30T17:09:47Z", + "pushed_at": "2026-06-30T17:09:42Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2026/CVE-2026-27654.json b/2026/CVE-2026-27654.json index 97810e33c8..194e35841f 100644 --- a/2026/CVE-2026-27654.json +++ b/2026/CVE-2026-27654.json @@ -14,8 +14,8 @@ "description": "NGINX `ngx_http_dav_module` Heap Buffer Overflow via `size_t` Underflow (Remote DoS \/ Potential RCE)", "fork": false, "created_at": "2026-04-06T17:27:29Z", - "updated_at": "2026-06-23T01:57:03Z", - "pushed_at": "2026-06-01T07:33:45Z", + "updated_at": "2026-06-30T18:55:22Z", + "pushed_at": "2026-06-30T18:55:16Z", "stargazers_count": 6, "watchers_count": 6, "has_discussions": false, diff --git a/2026/CVE-2026-31431.json b/2026/CVE-2026-31431.json index a7169166f2..7caee0b3af 100644 --- a/2026/CVE-2026-31431.json +++ b/2026/CVE-2026-31431.json @@ -216,45 +216,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1225547505, - "name": "yc-mk8s-copy-fail-mitigation", - "full_name": "yandex-cloud-examples\/yc-mk8s-copy-fail-mitigation", - "owner": { - "login": "yandex-cloud-examples", - "id": 97603887, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97603887?v=4", - "html_url": "https:\/\/github.com\/yandex-cloud-examples", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/yandex-cloud-examples\/yc-mk8s-copy-fail-mitigation", - "description": "DaemonSet для митигации уязвимости CVE-2026-31431 (Copy Fail)", - "fork": false, - "created_at": "2026-04-30T11:47:33Z", - "updated_at": "2026-05-19T20:50:12Z", - "pushed_at": "2026-05-12T09:17:28Z", - "stargazers_count": 10, - "watchers_count": 10, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "kubernetes", - "mk8s", - "security", - "yandex-cloud", - "yandexcloud" - ], - "visibility": "public", - "forks": 1, - "watchers": 10, - "score": 0, - "subscribers_count": 0 - }, { "id": 1225604678, "name": "CVE-2026-31431", @@ -723,8 +684,8 @@ "description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.", "fork": false, "created_at": "2026-05-05T04:58:21Z", - "updated_at": "2026-06-30T11:55:44Z", - "pushed_at": "2026-06-30T11:55:40Z", + "updated_at": "2026-06-30T17:42:03Z", + "pushed_at": "2026-06-30T17:41:59Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -772,8 +733,8 @@ "description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.", "fork": false, "created_at": "2026-05-06T09:49:14Z", - "updated_at": "2026-06-30T11:56:26Z", - "pushed_at": "2026-06-30T11:56:23Z", + "updated_at": "2026-06-30T17:42:46Z", + "pushed_at": "2026-06-30T17:42:42Z", "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, @@ -806,75 +767,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1231023679, - "name": "cve-2026-31431-ftrace", - "full_name": "philfry\/cve-2026-31431-ftrace", - "owner": { - "login": "philfry", - "id": 1649785, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1649785?v=4", - "html_url": "https:\/\/github.com\/philfry", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/philfry\/cve-2026-31431-ftrace", - "description": "mitigation of cve-2026-31431 using ftrace", - "fork": false, - "created_at": "2026-05-06T14:50:12Z", - "updated_at": "2026-05-12T07:19:30Z", - "pushed_at": "2026-05-12T07:19:26Z", - "stargazers_count": 12, - "watchers_count": 12, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 12, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1232772151, - "name": "Copy-Fail", - "full_name": "p401a-ops\/Copy-Fail", - "owner": { - "login": "p401a-ops", - "id": 261409834, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/261409834?v=4", - "html_url": "https:\/\/github.com\/p401a-ops", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/p401a-ops\/Copy-Fail", - "description": "CVE-2026-31431 (\"Copy Fail\") vulnerability detector & exploit on Astra linux 1.7.6 with 3.7+ python", - "fork": false, - "created_at": "2026-05-08T08:55:08Z", - "updated_at": "2026-05-12T08:37:52Z", - "pushed_at": "2026-05-12T08:37:40Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "astra-linux", - "copy-fail" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1232934547, "name": "ansible-mitigate-copyfail-dirtyfrag", @@ -1238,39 +1130,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1236382288, - "name": "CVE-2026-31431", - "full_name": "studiogangster\/CVE-2026-31431", - "owner": { - "login": "studiogangster", - "id": 12793420, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/12793420?v=4", - "html_url": "https:\/\/github.com\/studiogangster", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/studiogangster\/CVE-2026-31431", - "description": "oen liner CVE-2026-31431 test. Created 'sandbox' on sudo user and tests if ir can escape to root", - "fork": false, - "created_at": "2026-05-12T07:40:49Z", - "updated_at": "2026-05-17T20:15:57Z", - "pushed_at": "2026-05-12T10:40:13Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, { "id": 1236764293, "name": "copyfail-fix", @@ -1896,7 +1755,7 @@ "stargazers_count": 19, "watchers_count": 19, "has_discussions": false, - "forks_count": 3, + "forks_count": 4, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1904,7 +1763,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 3, + "forks": 4, "watchers": 19, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-31802.json b/2026/CVE-2026-31802.json index 01a0f70f21..8e97e36d40 100644 --- a/2026/CVE-2026-31802.json +++ b/2026/CVE-2026-31802.json @@ -14,8 +14,8 @@ "description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.", "fork": false, "created_at": "2026-03-28T20:49:46Z", - "updated_at": "2026-06-30T11:36:52Z", - "pushed_at": "2026-06-30T11:36:49Z", + "updated_at": "2026-06-30T17:22:13Z", + "pushed_at": "2026-06-30T17:22:07Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-33186.json b/2026/CVE-2026-33186.json new file mode 100644 index 0000000000..67cd9be336 --- /dev/null +++ b/2026/CVE-2026-33186.json @@ -0,0 +1,40 @@ +[ + { + "id": 1203070222, + "name": "CVE-2026-33186", + "full_name": "JohannesLks\/CVE-2026-33186", + "owner": { + "login": "JohannesLks", + "id": 74617774, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74617774?v=4", + "html_url": "https:\/\/github.com\/JohannesLks", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/JohannesLks\/CVE-2026-33186", + "description": "gRPC-Go RBAC Authorization Policy Bypass via Missing `:path` Slash (Auth Bypass)", + "fork": false, + "created_at": "2026-04-06T17:33:46Z", + "updated_at": "2026-06-30T18:55:25Z", + "pushed_at": "2026-06-30T18:55:16Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve", + "exploit", + "security", + "vulnerability" + ], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-3609.json b/2026/CVE-2026-3609.json index d21f422b0f..a104a6875a 100644 --- a/2026/CVE-2026-3609.json +++ b/2026/CVE-2026-3609.json @@ -14,10 +14,10 @@ "description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).", "fork": false, "created_at": "2023-12-05T14:52:11Z", - "updated_at": "2026-06-30T12:05:58Z", + "updated_at": "2026-06-30T14:49:41Z", "pushed_at": "2026-06-28T05:39:27Z", - "stargazers_count": 827, - "watchers_count": 827, + "stargazers_count": 828, + "watchers_count": 828, "has_discussions": false, "forks_count": 120, "allow_forking": true, @@ -39,41 +39,8 @@ ], "visibility": "public", "forks": 120, - "watchers": 827, + "watchers": 828, "score": 0, "subscribers_count": 19 - }, - { - "id": 1236416923, - "name": "CredsHunter", - "full_name": "BlackSnufkin\/CredsHunter", - "owner": { - "login": "BlackSnufkin", - "id": 61916899, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61916899?v=4", - "html_url": "https:\/\/github.com\/BlackSnufkin", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/BlackSnufkin\/CredsHunter", - "description": "PoC for CVE-2026-3609 - XIGNCODE3 xhunter1.sys handle leak enabling PPL bypass and LSASS dumping", - "fork": false, - "created_at": "2026-05-12T08:21:00Z", - "updated_at": "2026-06-22T10:35:38Z", - "pushed_at": "2026-05-12T08:38:56Z", - "stargazers_count": 26, - "watchers_count": 26, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 26, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2026/CVE-2026-38751.json b/2026/CVE-2026-38751.json index f4ae567308..57a08868c8 100644 --- a/2026/CVE-2026-38751.json +++ b/2026/CVE-2026-38751.json @@ -14,8 +14,8 @@ "description": "OpenSTAManager-RCE-Exploit-CVE-2026-38751", "fork": false, "created_at": "2026-06-27T23:33:43Z", - "updated_at": "2026-06-28T14:47:41Z", - "pushed_at": "2026-06-27T23:59:06Z", + "updated_at": "2026-06-30T17:33:52Z", + "pushed_at": "2026-06-30T17:33:18Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2026/CVE-2026-4020.json b/2026/CVE-2026-4020.json index 346e0b20a2..de88b6640d 100644 --- a/2026/CVE-2026-4020.json +++ b/2026/CVE-2026-4020.json @@ -47,8 +47,8 @@ "description": null, "fork": false, "created_at": "2026-06-30T11:37:40Z", - "updated_at": "2026-06-30T11:41:05Z", - "pushed_at": "2026-06-30T11:41:00Z", + "updated_at": "2026-06-30T15:26:41Z", + "pushed_at": "2026-06-30T15:25:22Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-40369.json b/2026/CVE-2026-40369.json index 6bcf6b1326..511777d44c 100644 --- a/2026/CVE-2026-40369.json +++ b/2026/CVE-2026-40369.json @@ -19,7 +19,7 @@ "stargazers_count": 253, "watchers_count": 253, "has_discussions": false, - "forks_count": 54, + "forks_count": 55, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 54, + "forks": 55, "watchers": 253, "score": 0, "subscribers_count": 5 diff --git a/2026/CVE-2026-41089.json b/2026/CVE-2026-41089.json index ae054d6b89..8b58ba869c 100644 --- a/2026/CVE-2026-41089.json +++ b/2026/CVE-2026-41089.json @@ -14,10 +14,10 @@ "description": "CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)", "fork": false, "created_at": "2026-06-01T04:22:29Z", - "updated_at": "2026-06-29T14:58:41Z", + "updated_at": "2026-06-30T18:09:07Z", "pushed_at": "2026-06-02T08:30:55Z", - "stargazers_count": 199, - "watchers_count": 199, + "stargazers_count": 200, + "watchers_count": 200, "has_discussions": false, "forks_count": 65, "allow_forking": true, @@ -39,7 +39,7 @@ ], "visibility": "public", "forks": 65, - "watchers": 199, + "watchers": 200, "score": 0, "subscribers_count": 1 }, diff --git a/2026/CVE-2026-41091.json b/2026/CVE-2026-41091.json index e6b81110c3..f8912672d4 100644 --- a/2026/CVE-2026-41091.json +++ b/2026/CVE-2026-41091.json @@ -19,7 +19,7 @@ "stargazers_count": 9, "watchers_count": 9, "has_discussions": false, - "forks_count": 3, + "forks_count": 4, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 3, + "forks": 4, "watchers": 9, "score": 0, "subscribers_count": 1 diff --git a/2026/CVE-2026-41940.json b/2026/CVE-2026-41940.json index 3ce52e8c77..955713fa64 100644 --- a/2026/CVE-2026-41940.json +++ b/2026/CVE-2026-41940.json @@ -225,8 +225,8 @@ "description": "Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.", "fork": false, "created_at": "2026-05-06T18:08:48Z", - "updated_at": "2026-06-30T11:56:48Z", - "pushed_at": "2026-06-30T11:56:44Z", + "updated_at": "2026-06-30T17:43:06Z", + "pushed_at": "2026-06-30T17:43:02Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -254,39 +254,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1231349180, - "name": "CVE-2026-41940", - "full_name": "murrez\/CVE-2026-41940", - "owner": { - "login": "murrez", - "id": 50166320, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50166320?v=4", - "html_url": "https:\/\/github.com\/murrez", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/murrez\/CVE-2026-41940", - "description": "PoC for CVE-2026-41940: WHM\/cPanel authentication bypass chain (Python 2.7). For authorized security research and testing only.", - "fork": false, - "created_at": "2026-05-06T21:59:11Z", - "updated_at": "2026-05-12T06:28:22Z", - "pushed_at": "2026-05-12T06:28:19Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, { "id": 1235271179, "name": "CVE-2026-41940", @@ -576,10 +543,10 @@ "description": "CVE-2026-41940 authentication bypass vulnerability proof-of-concept", "fork": false, "created_at": "2026-06-28T07:13:52Z", - "updated_at": "2026-06-30T12:41:48Z", + "updated_at": "2026-06-30T18:29:57Z", "pushed_at": "2026-06-28T07:42:43Z", - "stargazers_count": 34, - "watchers_count": 34, + "stargazers_count": 53, + "watchers_count": 53, "has_discussions": false, "forks_count": 13, "allow_forking": true, @@ -595,7 +562,7 @@ ], "visibility": "public", "forks": 13, - "watchers": 34, + "watchers": 53, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-42945.json b/2026/CVE-2026-42945.json index 2bb295f8e0..2814ff8263 100644 --- a/2026/CVE-2026-42945.json +++ b/2026/CVE-2026-42945.json @@ -14,10 +14,10 @@ "description": "exploit for CVE-2026-42945", "fork": false, "created_at": "2026-05-12T23:05:32Z", - "updated_at": "2026-06-30T02:20:15Z", + "updated_at": "2026-06-30T18:18:51Z", "pushed_at": "2026-05-13T18:40:57Z", - "stargazers_count": 864, - "watchers_count": 864, + "stargazers_count": 865, + "watchers_count": 865, "has_discussions": false, "forks_count": 159, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 159, - "watchers": 864, + "watchers": 865, "score": 0, "subscribers_count": 6 }, diff --git a/2026/CVE-2026-42978.json b/2026/CVE-2026-42978.json index 37179916f8..da837eee24 100644 --- a/2026/CVE-2026-42978.json +++ b/2026/CVE-2026-42978.json @@ -14,12 +14,12 @@ "description": "CVE-2026-42978 — Use-After-Free race condition in Windows Push Notifications (WpnService). Patch diff, root cause analysis, TOCTOU lab, Sysmon\/ETW detection rules.", "fork": false, "created_at": "2026-06-23T21:05:55Z", - "updated_at": "2026-06-26T00:35:15Z", + "updated_at": "2026-06-30T16:18:51Z", "pushed_at": "2026-06-23T21:08:36Z", - "stargazers_count": 8, - "watchers_count": 8, + "stargazers_count": 9, + "watchers_count": 9, "has_discussions": false, - "forks_count": 1, + "forks_count": 2, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,8 +27,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 1, - "watchers": 8, + "forks": 2, + "watchers": 9, "score": 0, "subscribers_count": 1 } diff --git a/2026/CVE-2026-43284.json b/2026/CVE-2026-43284.json index 058f620e63..3f1fbc7d9e 100644 --- a/2026/CVE-2026-43284.json +++ b/2026/CVE-2026-43284.json @@ -168,39 +168,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1235928119, - "name": "DirtyFrag-Detector", - "full_name": "liamromanis101\/DirtyFrag-Detector", - "owner": { - "login": "liamromanis101", - "id": 67465405, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/67465405?v=4", - "html_url": "https:\/\/github.com\/liamromanis101", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/liamromanis101\/DirtyFrag-Detector", - "description": "CVE-2026-43284\/CVE-2026-43500 'DirtyFrag' Benign patch & mitigation detection script", - "fork": false, - "created_at": "2026-05-11T19:41:31Z", - "updated_at": "2026-06-25T14:59:11Z", - "pushed_at": "2026-05-12T07:14:42Z", - "stargazers_count": 14, - "watchers_count": 14, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 14, - "score": 0, - "subscribers_count": 0 - }, { "id": 1237895562, "name": "CVE-2026-43284", diff --git a/2026/CVE-2026-43503.json b/2026/CVE-2026-43503.json index 8ba966ae45..f7cd4908b4 100644 --- a/2026/CVE-2026-43503.json +++ b/2026/CVE-2026-43503.json @@ -14,10 +14,10 @@ "description": "CVE-2026-43503", "fork": false, "created_at": "2026-06-25T21:58:41Z", - "updated_at": "2026-06-30T09:48:51Z", + "updated_at": "2026-06-30T14:14:02Z", "pushed_at": "2026-06-25T22:42:25Z", - "stargazers_count": 13, - "watchers_count": 13, + "stargazers_count": 14, + "watchers_count": 14, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 13, + "watchers": 14, "score": 0, "subscribers_count": 0 }, @@ -225,12 +225,12 @@ "description": "Python Proof of Concept for DirtyClone (CVE-2026-43503) - Linux kernel LPE via page-cache corruption", "fork": false, "created_at": "2026-06-29T04:44:28Z", - "updated_at": "2026-06-30T12:49:32Z", + "updated_at": "2026-06-30T16:21:10Z", "pushed_at": "2026-06-29T06:28:51Z", - "stargazers_count": 7, - "watchers_count": 7, + "stargazers_count": 8, + "watchers_count": 8, "has_discussions": false, - "forks_count": 3, + "forks_count": 4, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -238,8 +238,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 3, - "watchers": 7, + "forks": 4, + "watchers": 8, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-44789.json b/2026/CVE-2026-44789.json index b4c23c6a29..c10d958fb7 100644 --- a/2026/CVE-2026-44789.json +++ b/2026/CVE-2026-44789.json @@ -14,8 +14,8 @@ "description": "CVE-2026-44789 — n8n <1.123.43 HTTP Request pagination prototype pollution to RCE (NODE_OPTIONS runner-spawn gadget). Lab + automated PoC, verified e2e.", "fork": false, "created_at": "2026-06-30T02:11:56Z", - "updated_at": "2026-06-30T02:12:08Z", - "pushed_at": "2026-06-30T02:12:00Z", + "updated_at": "2026-06-30T14:07:29Z", + "pushed_at": "2026-06-30T14:05:06Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-4480.json b/2026/CVE-2026-4480.json index 2e711f3079..9e00df3123 100644 --- a/2026/CVE-2026-4480.json +++ b/2026/CVE-2026-4480.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2026-06-05T11:05:55Z", - "updated_at": "2026-06-19T20:07:50Z", + "updated_at": "2026-06-30T16:34:57Z", "pushed_at": "2026-06-05T11:31:22Z", - "stargazers_count": 13, - "watchers_count": 13, + "stargazers_count": 14, + "watchers_count": 14, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 13, + "watchers": 14, "score": 0, "subscribers_count": 1 }, diff --git a/2026/CVE-2026-45504.json b/2026/CVE-2026-45504.json index daae877294..23fb344431 100644 --- a/2026/CVE-2026-45504.json +++ b/2026/CVE-2026-45504.json @@ -14,12 +14,12 @@ "description": "CVE-2026-45504 Microsoft Exchange File Read", "fork": false, "created_at": "2026-06-24T01:05:34Z", - "updated_at": "2026-06-29T23:48:20Z", + "updated_at": "2026-06-30T16:17:40Z", "pushed_at": "2026-06-24T01:45:46Z", - "stargazers_count": 51, - "watchers_count": 51, + "stargazers_count": 52, + "watchers_count": 52, "has_discussions": false, - "forks_count": 14, + "forks_count": 15, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,8 +27,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 14, - "watchers": 51, + "forks": 15, + "watchers": 52, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-45585.json b/2026/CVE-2026-45585.json index 8948309987..0e9542d48e 100644 --- a/2026/CVE-2026-45585.json +++ b/2026/CVE-2026-45585.json @@ -212,8 +212,8 @@ "description": "Manage and recover BitLocker encrypted drives with this tool for Windows 11 recovery key management and educational study of CVE-2026-45585.", "fork": false, "created_at": "2026-06-16T07:21:36Z", - "updated_at": "2026-06-30T12:03:33Z", - "pushed_at": "2026-06-30T12:03:28Z", + "updated_at": "2026-06-30T17:50:17Z", + "pushed_at": "2026-06-30T17:50:12Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2026/CVE-2026-46300.json b/2026/CVE-2026-46300.json index 3d23182946..3f8c3722be 100644 --- a/2026/CVE-2026-46300.json +++ b/2026/CVE-2026-46300.json @@ -361,5 +361,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1285359059, + "name": "CVE-2026-46300", + "full_name": "MadExploits\/CVE-2026-46300", + "owner": { + "login": "MadExploits", + "id": 80827394, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/80827394?v=4", + "html_url": "https:\/\/github.com\/MadExploits", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/MadExploits\/CVE-2026-46300", + "description": "CVE-2026-43284 - CVE-2026-43500 - CVE-2026-46300 Variant of dirtyfrag exploit", + "fork": false, + "created_at": "2026-06-30T18:15:27Z", + "updated_at": "2026-06-30T18:26:39Z", + "pushed_at": "2026-06-30T18:26:32Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-46331.json b/2026/CVE-2026-46331.json index c83af140c0..b241f7ebc2 100644 --- a/2026/CVE-2026-46331.json +++ b/2026/CVE-2026-46331.json @@ -14,12 +14,12 @@ "description": "PACKET_EDIT_MEME.c (aka CVE-2026-46331): yet another page cache poisoning nightmare", "fork": false, "created_at": "2026-06-17T04:09:56Z", - "updated_at": "2026-06-30T11:55:10Z", + "updated_at": "2026-06-30T16:13:49Z", "pushed_at": "2026-06-17T04:55:06Z", - "stargazers_count": 110, - "watchers_count": 110, + "stargazers_count": 111, + "watchers_count": 111, "has_discussions": false, - "forks_count": 32, + "forks_count": 33, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,8 +27,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 32, - "watchers": 110, + "forks": 33, + "watchers": 111, "score": 0, "subscribers_count": 1 }, @@ -47,10 +47,10 @@ "description": "CVE-2026-46331", "fork": false, "created_at": "2026-06-26T18:57:23Z", - "updated_at": "2026-06-30T11:10:14Z", + "updated_at": "2026-06-30T16:55:57Z", "pushed_at": "2026-06-26T19:09:41Z", - "stargazers_count": 16, - "watchers_count": 16, + "stargazers_count": 17, + "watchers_count": 17, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 16, + "watchers": 17, "score": 0, "subscribers_count": 0 }, @@ -196,5 +196,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1285370292, + "name": "cve-2026-46331-pedit-cow-auditd-detection", + "full_name": "g0thamRabb1t\/cve-2026-46331-pedit-cow-auditd-detection", + "owner": { + "login": "g0thamRabb1t", + "id": 47489401, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47489401?v=4", + "html_url": "https:\/\/github.com\/g0thamRabb1t", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/g0thamRabb1t\/cve-2026-46331-pedit-cow-auditd-detection", + "description": "Defensive validation of CVE-2026-46331 \/ pedit COW with auditd, AppArmor, mitigation comparison and detection logic.", + "fork": false, + "created_at": "2026-06-30T18:29:43Z", + "updated_at": "2026-06-30T18:31:20Z", + "pushed_at": "2026-06-30T18:31:12Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-48907.json b/2026/CVE-2026-48907.json index d767c96ef7..cb5dd7f028 100644 --- a/2026/CVE-2026-48907.json +++ b/2026/CVE-2026-48907.json @@ -311,10 +311,10 @@ "description": "cve-2026-48907 scanner", "fork": false, "created_at": "2026-06-27T04:48:09Z", - "updated_at": "2026-06-30T11:37:00Z", + "updated_at": "2026-06-30T17:26:11Z", "pushed_at": "2026-06-27T05:25:46Z", - "stargazers_count": 43, - "watchers_count": 43, + "stargazers_count": 44, + "watchers_count": 44, "has_discussions": false, "forks_count": 9, "allow_forking": true, @@ -325,7 +325,7 @@ "topics": [], "visibility": "public", "forks": 9, - "watchers": 43, + "watchers": 44, "score": 0, "subscribers_count": 0 }, @@ -415,7 +415,7 @@ "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -423,7 +423,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 0, "score": 0, "subscribers_count": 0 @@ -468,5 +468,45 @@ "watchers": 1, "score": 0, "subscribers_count": 0 + }, + { + "id": 1285219260, + "name": "CVE-2026-48907", + "full_name": "pssec-io\/CVE-2026-48907", + "owner": { + "login": "pssec-io", + "id": 297554486, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/297554486?v=4", + "html_url": "https:\/\/github.com\/pssec-io", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/pssec-io\/CVE-2026-48907", + "description": "POC for CVE-2026-48907", + "fork": false, + "created_at": "2026-06-30T15:35:57Z", + "updated_at": "2026-06-30T15:50:20Z", + "pushed_at": "2026-06-30T15:37:03Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve-2026-48907", + "joomla", + "poc", + "proof-of-concept", + "pssec", + "pssec-io" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-22226.json b/2026/CVE-2026-49869.json similarity index 52% rename from 2026/CVE-2026-22226.json rename to 2026/CVE-2026-49869.json index 7876de9f00..0dbcc58a66 100644 --- a/2026/CVE-2026-22226.json +++ b/2026/CVE-2026-49869.json @@ -1,21 +1,21 @@ [ { - "id": 1283845760, - "name": "CVE-2026-22226", - "full_name": "LucasVanHaaren\/CVE-2026-22226", + "id": 1285139601, + "name": "CVE-2026-49869", + "full_name": "Ap0dexMe0\/CVE-2026-49869", "owner": { - "login": "LucasVanHaaren", - "id": 29121316, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/29121316?v=4", - "html_url": "https:\/\/github.com\/LucasVanHaaren", + "login": "Ap0dexMe0", + "id": 25004320, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25004320?v=4", + "html_url": "https:\/\/github.com\/Ap0dexMe0", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/LucasVanHaaren\/CVE-2026-22226", - "description": "Proof of Concept for the CVE-2026-22226", + "html_url": "https:\/\/github.com\/Ap0dexMe0\/CVE-2026-49869", + "description": "Kestra Auth-Bypass Vulnerability Checker", "fork": false, - "created_at": "2026-06-29T09:39:38Z", - "updated_at": "2026-06-29T09:54:41Z", - "pushed_at": "2026-06-29T09:54:37Z", + "created_at": "2026-06-30T14:13:04Z", + "updated_at": "2026-06-30T17:04:56Z", + "pushed_at": "2026-06-30T17:04:51Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -26,9 +26,9 @@ "has_pull_requests": true, "pull_request_creation_policy": "all", "topics": [ - "cve-2026-22226", + "kestra", "proof-of-concept", - "tp-link" + "rce" ], "visibility": "public", "forks": 0, diff --git a/2026/CVE-2026-49975.json b/2026/CVE-2026-49975.json index 510fe0b488..f48186c3c0 100644 --- a/2026/CVE-2026-49975.json +++ b/2026/CVE-2026-49975.json @@ -52,7 +52,7 @@ "stargazers_count": 28, "watchers_count": 28, "has_discussions": false, - "forks_count": 9, + "forks_count": 8, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,7 +60,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 9, + "forks": 8, "watchers": 28, "score": 0, "subscribers_count": 3 diff --git a/2026/CVE-2026-53753.json b/2026/CVE-2026-53753.json index ac63979559..75105dcba2 100644 --- a/2026/CVE-2026-53753.json +++ b/2026/CVE-2026-53753.json @@ -14,8 +14,8 @@ "description": "CVE-2026-53753 — Crawl4AI <0.8.7 unauthenticated RCE (AST sandbox escape via gi_frame.f_back). Lab + PoC, verified e2e.", "fork": false, "created_at": "2026-06-29T21:08:54Z", - "updated_at": "2026-06-29T21:09:01Z", - "pushed_at": "2026-06-29T21:08:56Z", + "updated_at": "2026-06-30T14:07:24Z", + "pushed_at": "2026-06-30T14:04:47Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-55255.json b/2026/CVE-2026-55255.json new file mode 100644 index 0000000000..40ae787935 --- /dev/null +++ b/2026/CVE-2026-55255.json @@ -0,0 +1,35 @@ +[ + { + "id": 1285175097, + "name": "CVE-2026-55255-Lab", + "full_name": "rootdirective-sec\/CVE-2026-55255-Lab", + "owner": { + "login": "rootdirective-sec", + "id": 253299769, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/253299769?v=4", + "html_url": "https:\/\/github.com\/rootdirective-sec", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/rootdirective-sec\/CVE-2026-55255-Lab", + "description": null, + "fork": false, + "created_at": "2026-06-30T14:49:22Z", + "updated_at": "2026-06-30T14:52:54Z", + "pushed_at": "2026-06-30T14:51:54Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-56121.json b/2026/CVE-2026-56121.json index b7e0cbe71e..6bc9c51f97 100644 --- a/2026/CVE-2026-56121.json +++ b/2026/CVE-2026-56121.json @@ -14,8 +14,8 @@ "description": "CVE-2026-56121 — Feast <0.63.0 unauthenticated RCE via gRPC registry dill.loads of OnDemandFeatureView UDF (pre-auth). Lab + PoC, verified e2e.", "fork": false, "created_at": "2026-06-30T08:27:06Z", - "updated_at": "2026-06-30T08:27:14Z", - "pushed_at": "2026-06-30T08:27:10Z", + "updated_at": "2026-06-30T14:08:04Z", + "pushed_at": "2026-06-30T14:05:36Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-56782.json b/2026/CVE-2026-56782.json index 3dc2af2e6c..3f1a407dd6 100644 --- a/2026/CVE-2026-56782.json +++ b/2026/CVE-2026-56782.json @@ -14,8 +14,8 @@ "description": "CVE-2026-56782 — Gorse <0.5.10 unauthenticated DB dump\/restore (admin_api_key fail-open). Lab + PoC, verified e2e.", "fork": false, "created_at": "2026-06-29T22:09:45Z", - "updated_at": "2026-06-29T22:10:15Z", - "pushed_at": "2026-06-29T22:10:04Z", + "updated_at": "2026-06-30T14:07:01Z", + "pushed_at": "2026-06-30T14:04:25Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-5950.json b/2026/CVE-2026-5950.json index 51e6dd8fe5..959e04e006 100644 --- a/2026/CVE-2026-5950.json +++ b/2026/CVE-2026-5950.json @@ -14,7 +14,7 @@ "description": "Defensive research notes for CVE-2026-5950, a BIND 9 resolver DoS vulnerability credited to Billy Baraja (BielraX).", "fork": false, "created_at": "2026-06-14T00:28:02Z", - "updated_at": "2026-06-16T05:43:02Z", + "updated_at": "2026-06-30T17:36:48Z", "pushed_at": "2026-06-14T00:28:16Z", "stargazers_count": 1, "watchers_count": 1, diff --git a/README.md b/README.md index f7dbddc510..5050b5ab47 100644 --- a/README.md +++ b/README.md @@ -294,7 +294,6 @@ - [BlackSnufkin/BYOVD](https://github.com/BlackSnufkin/BYOVD) -- [BlackSnufkin/CredsHunter](https://github.com/BlackSnufkin/CredsHunter) ### CVE-2026-3629 (2026-03-21) @@ -1220,6 +1219,13 @@ - [Filipemendonca1978/CVE-2026-21018](https://github.com/Filipemendonca1978/CVE-2026-21018) +### CVE-2026-21509 (2026-01-26) + +Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally. + + +- [sentinel-aidefense/CVE-2026-21509](https://github.com/sentinel-aidefense/CVE-2026-21509) + ### CVE-2026-21852 (2026-01-21) Claude Code is an agentic coding tool. Prior to version 2.0.65, vulnerability in Claude Code's project-load flow allowed malicious repositories to exfiltrate data including Anthropic API keys before users confirmed trust. An attacker-controlled repository could include a settings file that sets ANTHROPIC_BASE_URL to an attacker-controlled endpoint and when the repository was opened, Claude Code would read the configuration and immediately issue API requests before showing the trust prompt, potentially leaking the user's API keys. Users on standard Claude Code auto-update have received this fix already. Users performing manual updates are advised to update to version 2.0.65, which contains a patch, or to the latest version. @@ -1243,12 +1249,12 @@ - [daytriftnewgen/CVE-2026-21876](https://github.com/daytriftnewgen/CVE-2026-21876) -### CVE-2026-22226 (2026-02-02) +### CVE-2026-22241 (2026-01-08) -A command injection vulnerability may be exploited after the admin's authentication in the VPN server configuration module on TP-Link Archer BE230 v1.2 and Archer AX73 v2. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of configuration integrity, network security, and service availability.\n\n\nThis CVE covers one of multiple distinct OS command injection issues identified across separate code paths. Although similar in nature, each instance is tracked under a unique CVE ID.\n\n\nThis issue affects Archer BE230 v1.2 < 1.2.4 Build 20251218 rel.70420 and Archer AX73 v2 < 1.3.1\nBuild 20260430. +The Open eClass platform (formerly known as GUnet eClass) is a complete course management system. Prior to version 4.2, an arbitrary file upload vulnerability in the theme import functionality enables an attacker with administrative privileges to upload arbitrary files on the server's file system. The main cause of the issue is that no validation or sanitization of the file's present inside the zip archive. This leads to remote code execution on the web server. Version 4.2 patches the issue. -- [LucasVanHaaren/CVE-2026-22226](https://github.com/LucasVanHaaren/CVE-2026-22226) +- [CVEs-Labs/CVE-2026-22241](https://github.com/CVEs-Labs/CVE-2026-22241) ### CVE-2026-22356 (2026-02-20) @@ -1270,6 +1276,7 @@ - [BishopFox/CVE-2026-22557-check](https://github.com/BishopFox/CVE-2026-22557-check) +- [gagaltotal/CVE-2026-22557-Path-Traversal-Ubiquti-UniFi](https://github.com/gagaltotal/CVE-2026-22557-Path-Traversal-Ubiquti-UniFi) ### CVE-2026-23111 (2026-02-13) @@ -1765,7 +1772,6 @@ - [ryan2929/CVE-2026-31431](https://github.com/ryan2929/CVE-2026-31431) - [Aurillium/RootRemover](https://github.com/Aurillium/RootRemover) - [adampielak/CVE-2026-31431_SCA_WAZUH](https://github.com/adampielak/CVE-2026-31431_SCA_WAZUH) -- [yandex-cloud-examples/yc-mk8s-copy-fail-mitigation](https://github.com/yandex-cloud-examples/yc-mk8s-copy-fail-mitigation) - [JuanBindez/CVE-2026-31431](https://github.com/JuanBindez/CVE-2026-31431) - [selectel/mks-copy-fail-mitigation](https://github.com/selectel/mks-copy-fail-mitigation) - [deckhouse/d8-copy-fail-mitigation](https://github.com/deckhouse/d8-copy-fail-mitigation) @@ -1781,8 +1787,6 @@ - [ochebotar/copy-fail-CVE-2026-31431-detection-probe](https://github.com/ochebotar/copy-fail-CVE-2026-31431-detection-probe) - [Liverwortenuresis371/copyfail-rs](https://github.com/Liverwortenuresis371/copyfail-rs) - [Dullpurple-sloop726/CVE-2026-31431-Linux-Copy-Fail](https://github.com/Dullpurple-sloop726/CVE-2026-31431-Linux-Copy-Fail) -- [philfry/cve-2026-31431-ftrace](https://github.com/philfry/cve-2026-31431-ftrace) -- [p401a-ops/Copy-Fail](https://github.com/p401a-ops/Copy-Fail) - [infiniroot/ansible-mitigate-copyfail-dirtyfrag](https://github.com/infiniroot/ansible-mitigate-copyfail-dirtyfrag) - [KaraZajac/DIRTYFAIL](https://github.com/KaraZajac/DIRTYFAIL) - [krisiasty/vcheck](https://github.com/krisiasty/vcheck) @@ -1793,7 +1797,6 @@ - [Lutfifakee-Project/CVE-2026-31431](https://github.com/Lutfifakee-Project/CVE-2026-31431) - [mauricioportela/CVE-2026-31431-Analysis](https://github.com/mauricioportela/CVE-2026-31431-Analysis) - [gbonacini/CVE-2026-31431](https://github.com/gbonacini/CVE-2026-31431) -- [studiogangster/CVE-2026-31431](https://github.com/studiogangster/CVE-2026-31431) - [hyz-is/copyfail-fix](https://github.com/hyz-is/copyfail-fix) - [SystemVll/CVE-2026-31431-copyfail-aarch64](https://github.com/SystemVll/CVE-2026-31431-copyfail-aarch64) - [DroPZsec/SplicePrivillegeEscalationFIX](https://github.com/DroPZsec/SplicePrivillegeEscalationFIX) @@ -1919,6 +1922,13 @@ - [0xmrma/CVE-2026-33146](https://github.com/0xmrma/CVE-2026-33146) +### CVE-2026-33186 (2026-03-20) + +gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 `:path` pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests where the `:path` omitted the mandatory leading slash (e.g., `Service/Method` instead of `/Service/Method`). While the server successfully routed these requests to the correct handler, authorization interceptors (including the official `grpc/authz` package) evaluated the raw, non-canonical path string. Consequently, "deny" rules defined using canonical paths (starting with `/`) failed to match the incoming request, allowing it to bypass the policy if a fallback "allow" rule was present. This affects gRPC-Go servers that use path-based authorization interceptors, such as the official RBAC implementation in `google.golang.org/grpc/authz` or custom interceptors relying on `info.FullMethod` or `grpc.Method(ctx)`; AND that have a security policy contains specific "deny" rules for canonical paths but allows other requests by default (a fallback "allow" rule). The vulnerability is exploitable by an attacker who can send raw HTTP/2 frames with malformed `:path` headers directly to the gRPC server. The fix in version 1.79.3 ensures that any request with a `:path` that does not start with a leading slash is immediately rejected with a `codes.Unimplemented` error, preventing it from reaching authorization interceptors or handlers with a non-canonical path string. While upgrading is the most secure and recommended path, users can mitigate the vulnerability using one of the following methods: Use a validating interceptor (recommended mitigation); infrastructure-level normalization; and/or policy hardening. + + +- [JohannesLks/CVE-2026-33186](https://github.com/JohannesLks/CVE-2026-33186) + ### CVE-2026-33320 (2026-03-24) Dasel is a command-line tool and library for querying, modifying, and transforming data structures. Starting in version 3.0.0 and prior to version 3.3.1, Dasel's YAML reader allows an attacker who can supply YAML for processing to trigger extreme CPU and memory consumption. The issue is in the library's own `UnmarshalYAML` implementation, which manually resolves alias nodes by recursively following `yaml.Node.Alias` pointers without any expansion budget, bypassing go-yaml v4's built-in alias expansion limit. Version 3.3.2 contains a patch for the issue. @@ -2599,7 +2609,6 @@ - [Christian93111/CVE-2026-41940](https://github.com/Christian93111/CVE-2026-41940) - [Jenderal92/CVE-2026-41940](https://github.com/Jenderal92/CVE-2026-41940) - [Defacto-ridgepole254/CVE-2026-41940-Exploit-PoC](https://github.com/Defacto-ridgepole254/CVE-2026-41940-Exploit-PoC) -- [murrez/CVE-2026-41940](https://github.com/murrez/CVE-2026-41940) - [anach-ai/CVE-2026-41940](https://github.com/anach-ai/CVE-2026-41940) - [tc4dy/CVE-2026-41940-PoC-Exploit](https://github.com/tc4dy/CVE-2026-41940-PoC-Exploit) - [limo57640-crypto/cpanel-cve-41940-detector](https://github.com/limo57640-crypto/cpanel-cve-41940-detector) @@ -2806,7 +2815,6 @@ - [suominen/CVE-2026-43284](https://github.com/suominen/CVE-2026-43284) - [haydenjames/dirty-frag-check](https://github.com/haydenjames/dirty-frag-check) - [linnemanlabs/dirtyfrag-arm64](https://github.com/linnemanlabs/dirtyfrag-arm64) -- [liamromanis101/DirtyFrag-Detector](https://github.com/liamromanis101/DirtyFrag-Detector) - [FrosterDL/CVE-2026-43284](https://github.com/FrosterDL/CVE-2026-43284) - [ChernStepanov/DirtyFrag-for-dummies](https://github.com/ChernStepanov/DirtyFrag-for-dummies) - [xd20111/CVE-2026-43284](https://github.com/xd20111/CVE-2026-43284) @@ -3159,6 +3167,7 @@ - [BenedictEjepu/CVE-2026-46300-Fragnesia---TryHackMe-Lab-Walkthrough](https://github.com/BenedictEjepu/CVE-2026-46300-Fragnesia---TryHackMe-Lab-Walkthrough) - [BenedictEjepu/CVE-2026-46300-Fragnesia---TryHackMe-Lab-Project](https://github.com/BenedictEjepu/CVE-2026-46300-Fragnesia---TryHackMe-Lab-Project) - [azilRababe/CVE-2026-46300](https://github.com/azilRababe/CVE-2026-46300) +- [MadExploits/CVE-2026-46300](https://github.com/MadExploits/CVE-2026-46300) ### CVE-2026-46331 (2026-06-16) @@ -3171,6 +3180,7 @@ - [vulnquest58/dirtyclone-exploit](https://github.com/vulnquest58/dirtyclone-exploit) - [Quaerendir/cve-2026-46331-audit](https://github.com/Quaerendir/cve-2026-46331-audit) - [seguridadentrerios/CVE-2026-46331](https://github.com/seguridadentrerios/CVE-2026-46331) +- [g0thamRabb1t/cve-2026-46331-pedit-cow-auditd-detection](https://github.com/g0thamRabb1t/cve-2026-46331-pedit-cow-auditd-detection) ### CVE-2026-46333 (2026-05-15) @@ -3474,6 +3484,7 @@ - [xitexploiter96-dot/CVE-2026-48907-](https://github.com/xitexploiter96-dot/CVE-2026-48907-) - [Almavj/Joomla_CVE_2026_48907](https://github.com/Almavj/Joomla_CVE_2026_48907) - [K3ysTr0K3R/CVE-2026-48907](https://github.com/K3ysTr0K3R/CVE-2026-48907) +- [pssec-io/CVE-2026-48907](https://github.com/pssec-io/CVE-2026-48907) ### CVE-2026-48908 (2026-06-20) @@ -3630,6 +3641,13 @@ - [xxconi/CVE-2026-49777-CVE-2026-10735](https://github.com/xxconi/CVE-2026-49777-CVE-2026-10735) - [HORKimhab/CVE-Wordpress](https://github.com/HORKimhab/CVE-Wordpress) +### CVE-2026-49869 (2026-06-26) + +Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21, AuthenticationFilter in Kestra OSS uses request.getPath().endsWith("/configs") to whitelist the public configuration endpoint from Basic Auth. Because the check is a suffix match rather than an exact path match, any API path whose last segment is configs bypasses authentication entirely. An unauthenticated remote attacker can exploit this to create and execute arbitrary workflows without credentials. Because Kestra ships with script execution plugins (plugin-script-shell, plugin-script-python, etc.) enabled by default, this directly results in unauthenticated Remote Code Execution as root inside the Kestra worker container. This vulnerability is fixed in 1.0.45 and 1.3.21. + + +- [Ap0dexMe0/CVE-2026-49869](https://github.com/Ap0dexMe0/CVE-2026-49869) + ### CVE-2026-49943 (2026-06-02) CZ.NIC BIRD Internet Routing Daemon through 2.19.0 contains a stack-based buffer overflow in the BGP AS_PATH mask matching implementation in nest/a-path.c. The as_path_match() function uses a fixed-size stack array of 2048 + 1 pm_pos entries, while parse_path() expands AS_PATH segments from a received BGP UPDATE without enforcing a corresponding capacity limit. When RFC 8654 BGP Extended Messages are enabled and a BIRD filter evaluates an AS path mask expression such as "bgp_path ~ [= ... =]", an established BGP peer can send a long AS_PATH containing more than 2048 expanded ASNs. This causes parse_path()/as_path_match() to write beyond the fixed stack buffer, resulting in a crash of the daemon. NOTE: reportedly, the Supplier's position is that a fix is not being prioritized because all network operators should already be rejecting routes with unusually long attributes. @@ -3818,6 +3836,13 @@ - [0xBlackash/CVE-2026-55200](https://github.com/0xBlackash/CVE-2026-55200) - [xd20111/CVE-2026-55200](https://github.com/xd20111/CVE-2026-55200) +### CVE-2026-55255 (2026-06-23) + +Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.2, an Insecure Direct Object Reference (IDOR) vulnerability in /api/v1/responses endpoint allows an authenticated attacker to execute any flow belonging to another user by specifying the victim's flow ID in the request. This vulnerability is fixed in 1.9.2. + + +- [rootdirective-sec/CVE-2026-55255-Lab](https://github.com/rootdirective-sec/CVE-2026-55255-Lab) + ### CVE-2026-55584 - [mirackayikci/CVE-2026-55584](https://github.com/mirackayikci/CVE-2026-55584) @@ -3949,6 +3974,7 @@ Es wurde eine kritische Schwachstelle in 1902756969 reggie 1.0 entdeckt. Hiervon betroffen ist die Funktion download der Datei src/main/java/com/itheima/reggie/controller/CommonController.java. Durch das Manipulieren des Arguments name mit unbekannten Daten kann eine path traversal-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk angegangen werden. Der Exploit steht zur öffentlichen Verfügung. +- [JoasASantos/CVE-2025-0401](https://github.com/JoasASantos/CVE-2025-0401) - [Darabium/Gombruc](https://github.com/Darabium/Gombruc) ### CVE-2025-0411 (2025-01-25) @@ -9954,6 +9980,7 @@ - [kaleth4/CVE-2025-40271](https://github.com/kaleth4/CVE-2025-40271) +- [MadExploits/CVE-2025-40271](https://github.com/MadExploits/CVE-2025-40271) ### CVE-2025-40536 (2026-01-28) @@ -15221,6 +15248,7 @@ - [tohib09/CVE-2025-69212-PoC](https://github.com/tohib09/CVE-2025-69212-PoC) - [w3nch/CVE-2025-69212](https://github.com/w3nch/CVE-2025-69212) - [xorandd/CVE-2025-69212-PoC](https://github.com/xorandd/CVE-2025-69212-PoC) +- [BridgerAlderson/CVE-2025-69212-PoC](https://github.com/BridgerAlderson/CVE-2025-69212-PoC) ### CVE-2025-69213 (2026-02-04) @@ -67993,6 +68021,13 @@ - [perillamint/CVE-2015-1157](https://github.com/perillamint/CVE-2015-1157) +### CVE-2015-1187 (2017-09-21) + +The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp. + + +- [Flanbox/cve-2015-1187-dir820l-reproduction](https://github.com/Flanbox/cve-2015-1187-dir820l-reproduction) + ### CVE-2015-1318 (2015-04-17) The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted usr/share/apport/apport file in a namespace (container). @@ -70509,6 +70544,7 @@ - [waburig/Open-Worldwide-Application-Security-Project-OWASP-](https://github.com/waburig/Open-Worldwide-Application-Security-Project-OWASP-) - [hackherMind-Pixel/Vulnerable-Lab-Exploitation](https://github.com/hackherMind-Pixel/Vulnerable-Lab-Exploitation) - [tryj/CVE-2012-1823---PHP-CGI---RCE](https://github.com/tryj/CVE-2012-1823---PHP-CGI---RCE) +- [K3ysTr0K3R/CVE-2012-1823](https://github.com/K3ysTr0K3R/CVE-2012-1823) ### CVE-2012-1831 (2012-07-05)