nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/07/15 06:50:23

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-07-15 15:50:23 +09:00
1 parent a8dd65f3bd
commit 5a90ffc0ef
68 files changed
+635 -210
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2014/CVE-2014-6271.json
+2 -2
View File
@@ -2962,8 +2962,8 @@
"description": "its simple Shellshock exploit",
"fork": false,
"created_at": "2026-04-24T04:26:07Z",
"updated_at": "2026-04-24T04:48:00Z",
"pushed_at": "2026-04-24T04:47:56Z",
"updated_at": "2026-07-15T04:41:51Z",
"pushed_at": "2026-07-15T04:41:47Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2015/CVE-2015-5254.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": "Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-42588)",
"fork": false,
"created_at": "2026-04-20T02:38:50Z",
"updated_at": "2026-07-13T12:12:28Z",
"updated_at": "2026-07-15T01:36:22Z",
"pushed_at": "2026-06-27T07:20:35Z",
"stargazers_count": 80,
"watchers_count": 80,
"stargazers_count": 81,
"watchers_count": 81,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 80,
"watchers": 81,
"score": 0,
"subscribers_count": 2
}
2015/CVE-2015-9235.json
+4 -4
View File
@@ -92,10 +92,10 @@
"description": "针对JWT渗透开发的漏洞验证\/密钥爆破工具，针对CVE-2015-9235\/空白密钥\/未验证签名攻击\/CVE-2016-10555\/CVE-2018-0114\/CVE-2020-28042的结果生成用于FUZZ，也可使用字典\/字符枚举(包括JJWT)的方式进行爆破(JWT Crack)",
"fork": false,
"created_at": "2025-01-27T14:23:31Z",
"updated_at": "2026-06-22T11:04:35Z",
"updated_at": "2026-07-15T05:24:27Z",
"pushed_at": "2025-08-12T14:08:12Z",
"stargazers_count": 289,
"watchers_count": 289,
"stargazers_count": 288,
"watchers_count": 288,
"has_discussions": false,
"forks_count": 10,
"allow_forking": true,
@@ -106,7 +106,7 @@
"topics": [],
"visibility": "public",
"forks": 10,
"watchers": 289,
"watchers": 288,
"score": 0,
"subscribers_count": 4
},
2016/CVE-2016-10555.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "针对JWT渗透开发的漏洞验证\/密钥爆破工具，针对CVE-2015-9235\/空白密钥\/未验证签名攻击\/CVE-2016-10555\/CVE-2018-0114\/CVE-2020-28042的结果生成用于FUZZ，也可使用字典\/字符枚举(包括JJWT)的方式进行爆破(JWT Crack)",
"fork": false,
"created_at": "2025-01-27T14:23:31Z",
"updated_at": "2026-06-22T11:04:35Z",
"updated_at": "2026-07-15T05:24:27Z",
"pushed_at": "2025-08-12T14:08:12Z",
"stargazers_count": 289,
"watchers_count": 289,
"stargazers_count": 288,
"watchers_count": 288,
"has_discussions": false,
"forks_count": 10,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 10,
"watchers": 289,
"watchers": 288,
"score": 0,
"subscribers_count": 4
}
2016/CVE-2016-3088.json
+4 -4
View File
@@ -249,10 +249,10 @@
"description": "Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-42588)",
"fork": false,
"created_at": "2026-04-20T02:38:50Z",
"updated_at": "2026-07-13T12:12:28Z",
"updated_at": "2026-07-15T01:36:22Z",
"pushed_at": "2026-06-27T07:20:35Z",
"stargazers_count": 80,
"watchers_count": 80,
"stargazers_count": 81,
"watchers_count": 81,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -263,7 +263,7 @@
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 80,
"watchers": 81,
"score": 0,
"subscribers_count": 2
}
2018/CVE-2018-0114.json
+4 -4
View File
@@ -344,10 +344,10 @@
"description": "针对JWT渗透开发的漏洞验证\/密钥爆破工具，针对CVE-2015-9235\/空白密钥\/未验证签名攻击\/CVE-2016-10555\/CVE-2018-0114\/CVE-2020-28042的结果生成用于FUZZ，也可使用字典\/字符枚举(包括JJWT)的方式进行爆破(JWT Crack)",
"fork": false,
"created_at": "2025-01-27T14:23:31Z",
"updated_at": "2026-06-22T11:04:35Z",
"updated_at": "2026-07-15T05:24:27Z",
"pushed_at": "2025-08-12T14:08:12Z",
"stargazers_count": 289,
"watchers_count": 289,
"stargazers_count": 288,
"watchers_count": 288,
"has_discussions": false,
"forks_count": 10,
"allow_forking": true,
@@ -358,7 +358,7 @@
"topics": [],
"visibility": "public",
"forks": 10,
"watchers": 289,
"watchers": 288,
"score": 0,
"subscribers_count": 4
},
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-07-15T00:04:39Z",
"pushed_at": "2026-07-15T00:04:35Z",
"updated_at": "2026-07-15T05:53:37Z",
"pushed_at": "2026-07-15T05:53:34Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2020/CVE-2020-0796.json
+4 -4
View File
@@ -1103,10 +1103,10 @@
"description": "CVE-2020-0796 - Windows SMBv3 LPE exploit #SMBGhost",
"fork": false,
"created_at": "2020-03-30T11:42:56Z",
"updated_at": "2026-06-16T08:07:23Z",
"updated_at": "2026-07-15T00:30:31Z",
"pushed_at": "2020-12-07T20:04:27Z",
"stargazers_count": 1357,
"watchers_count": 1357,
"stargazers_count": 1356,
"watchers_count": 1356,
"has_discussions": false,
"forks_count": 340,
"allow_forking": true,
@@ -1123,7 +1123,7 @@
],
"visibility": "public",
"forks": 340,
"watchers": 1357,
"watchers": 1356,
"score": 0,
"subscribers_count": 31
},
2020/CVE-2020-11898.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "This comprehensive package contains everything needed to detect, analyze, and remediate Ripple20 (CVE-2020-11898) vulnerabilities in your organization.",
"fork": false,
"created_at": "2026-06-15T11:11:11Z",
"updated_at": "2026-06-15T11:13:12Z",
"pushed_at": "2026-06-15T11:13:08Z",
"updated_at": "2026-07-15T05:22:59Z",
"pushed_at": "2026-07-15T05:22:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2020/CVE-2020-14008.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "CVE-2020-14008 - ManageEngine Applications Manager RCE",
"fork": false,
"created_at": "2026-05-09T15:32:13Z",
"updated_at": "2026-05-28T13:04:40Z",
"updated_at": "2026-07-15T02:24:58Z",
"pushed_at": "2026-05-09T15:38:07Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
}
2020/CVE-2020-1472.json
+2 -2
View File
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-07-14T23:37:41Z",
"pushed_at": "2026-07-14T23:37:38Z",
"updated_at": "2026-07-15T06:02:14Z",
"pushed_at": "2026-07-15T06:02:06Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2020/CVE-2020-28042.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "针对JWT渗透开发的漏洞验证\/密钥爆破工具，针对CVE-2015-9235\/空白密钥\/未验证签名攻击\/CVE-2016-10555\/CVE-2018-0114\/CVE-2020-28042的结果生成用于FUZZ，也可使用字典\/字符枚举(包括JJWT)的方式进行爆破(JWT Crack)",
"fork": false,
"created_at": "2025-01-27T14:23:31Z",
"updated_at": "2026-06-22T11:04:35Z",
"updated_at": "2026-07-15T05:24:27Z",
"pushed_at": "2025-08-12T14:08:12Z",
"stargazers_count": 289,
"watchers_count": 289,
"stargazers_count": 288,
"watchers_count": 288,
"has_discussions": false,
"forks_count": 10,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 10,
"watchers": 289,
"watchers": 288,
"score": 0,
"subscribers_count": 4
}
2021/CVE-2021-1675.json
+4 -4
View File
@@ -1066,10 +1066,10 @@
"description": "Python implementation for PrintNightmare (CVE-2021-1675 \/ CVE-2021-34527)",
"fork": false,
"created_at": "2021-09-26T13:53:10Z",
"updated_at": "2026-06-25T07:22:46Z",
"updated_at": "2026-07-15T00:30:27Z",
"pushed_at": "2021-10-17T13:29:56Z",
"stargazers_count": 210,
"watchers_count": 210,
"stargazers_count": 209,
"watchers_count": 209,
"has_discussions": false,
"forks_count": 32,
"allow_forking": true,
@@ -1083,7 +1083,7 @@
],
"visibility": "public",
"forks": 32,
"watchers": 210,
"watchers": 209,
"score": 0,
"subscribers_count": 4
},
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-07-15T00:07:02Z",
"pushed_at": "2026-07-15T00:06:59Z",
"updated_at": "2026-07-15T05:55:49Z",
"pushed_at": "2026-07-15T05:55:45Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-41773.json
+2 -2
View File
@@ -4714,8 +4714,8 @@
"description": null,
"fork": false,
"created_at": "2026-04-25T09:20:19Z",
"updated_at": "2026-04-25T11:06:46Z",
"pushed_at": "2026-04-25T09:27:06Z",
"updated_at": "2026-07-15T04:42:44Z",
"pushed_at": "2026-07-15T04:42:41Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2022/CVE-2022-21445.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2024-03-12T04:47:02Z",
"updated_at": "2025-12-12T16:08:42Z",
"updated_at": "2026-07-15T03:32:58Z",
"pushed_at": "2024-03-18T07:32:24Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 1
},
2022/CVE-2022-22077.json
+1 -1
View File
@@ -15,7 +15,7 @@
"fork": false,
"created_at": "2025-09-08T21:12:19Z",
"updated_at": "2026-06-19T21:56:25Z",
"pushed_at": "2026-07-14T16:16:55Z",
"pushed_at": "2026-07-15T05:43:42Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
2022/CVE-2022-26134.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "【懒人神器】一款图形化、批量采集url、批量对采集的url进行各种nday检测的工具。可用于src挖掘、cnvd挖掘、0day利用、打造自己的武器库等场景。可以批量利用Actively Exploited Atlassian Confluence 0Day CVE-2022-26134和DedeCMS v5.7.87 SQL注入 CVE-2022-23337。",
"fork": false,
"created_at": "2022-05-31T07:44:01Z",
"updated_at": "2026-07-03T12:06:29Z",
"updated_at": "2026-07-15T01:20:08Z",
"pushed_at": "2023-02-26T14:06:05Z",
"stargazers_count": 1252,
"watchers_count": 1252,
"stargazers_count": 1253,
"watchers_count": 1253,
"has_discussions": true,
"forks_count": 187,
"allow_forking": true,
@@ -48,7 +48,7 @@
],
"visibility": "public",
"forks": 187,
"watchers": 1252,
"watchers": 1253,
"score": 0,
"subscribers_count": 1
},
2022/CVE-2022-29799.json
+2 -2
View File
@@ -59,8 +59,8 @@
"description": "Demonstrate local privilege escalation in networkd-dispatcher via CVE-2022-29799 and CVE-2022-29800 using this C proof of concept.",
"fork": false,
"created_at": "2026-06-23T14:05:18Z",
"updated_at": "2026-07-14T21:16:32Z",
"pushed_at": "2026-07-14T21:16:24Z",
"updated_at": "2026-07-15T03:45:52Z",
"pushed_at": "2026-07-15T03:45:48Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2022/CVE-2022-41678.json
+4 -4
View File
@@ -88,10 +88,10 @@
"description": "Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-42588)",
"fork": false,
"created_at": "2026-04-20T02:38:50Z",
"updated_at": "2026-07-13T12:12:28Z",
"updated_at": "2026-07-15T01:36:22Z",
"pushed_at": "2026-06-27T07:20:35Z",
"stargazers_count": 80,
"watchers_count": 80,
"stargazers_count": 81,
"watchers_count": 81,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -102,7 +102,7 @@
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 80,
"watchers": 81,
"score": 0,
"subscribers_count": 2
}
2022/CVE-2022-42889.json
+33
View File
@@ -1690,5 +1690,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1301091165,
"name": "CVE-2022-42889",
"full_name": "Hkaeeeer\/CVE-2022-42889",
"owner": {
"login": "Hkaeeeer",
"id": 161950504,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/161950504?v=4",
"html_url": "https:\/\/github.com\/Hkaeeeer",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Hkaeeeer\/CVE-2022-42889",
"description": "exploit for CVE-2022-42889",
"fork": false,
"created_at": "2026-07-15T01:35:55Z",
"updated_at": "2026-07-15T01:46:10Z",
"pushed_at": "2026-07-15T01:46:06Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2023/CVE-2023-25950.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "HTTP3ONSTEROIDS - A research on CVE-2023-25950 where HAProxy's HTTP\/3 implementation fails to block a malformed HTTP header field name.",
"fork": false,
"created_at": "2023-07-31T23:57:02Z",
"updated_at": "2025-11-12T21:40:55Z",
"updated_at": "2026-07-15T04:22:36Z",
"pushed_at": "2025-08-06T23:01:08Z",
"stargazers_count": 10,
"watchers_count": 10,
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -37,7 +37,7 @@
],
"visibility": "public",
"forks": 2,
"watchers": 10,
"watchers": 11,
"score": 0,
"subscribers_count": 1
}
2023/CVE-2023-32233.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "Gemini 2.5 Pro nf_tables Red Teaming Case Study (CVE-2023-32233) — LLM Safety Alignment & Responsible Disclosure",
"fork": false,
"created_at": "2026-05-20T12:58:23Z",
"updated_at": "2026-06-05T12:49:56Z",
"pushed_at": "2026-05-20T13:05:15Z",
"updated_at": "2026-07-15T05:07:47Z",
"pushed_at": "2026-07-15T05:07:43Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2023/CVE-2023-32434.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙",
"fork": false,
"created_at": "2025-08-13T09:19:29Z",
"updated_at": "2026-07-14T23:33:50Z",
"pushed_at": "2026-07-14T23:33:45Z",
"updated_at": "2026-07-15T04:59:27Z",
"pushed_at": "2026-07-15T04:59:24Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-46604.json
+4 -4
View File
@@ -1045,10 +1045,10 @@
"description": "Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-42588)",
"fork": false,
"created_at": "2026-04-20T02:38:50Z",
"updated_at": "2026-07-13T12:12:28Z",
"updated_at": "2026-07-15T01:36:22Z",
"pushed_at": "2026-06-27T07:20:35Z",
"stargazers_count": 80,
"watchers_count": 80,
"stargazers_count": 81,
"watchers_count": 81,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -1059,7 +1059,7 @@
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 80,
"watchers": 81,
"score": 0,
"subscribers_count": 2
},
2024/CVE-2024-0044.json
+4 -4
View File
@@ -315,10 +315,10 @@
"description": "RunAsAnyone: PoC and writeup for bypassing the initial patch of CVE-2024-0044, Android run-as any app vulnerability allowing privilege escalation from adb to installed app",
"fork": false,
"created_at": "2024-09-27T09:02:08Z",
"updated_at": "2026-07-14T20:31:47Z",
"updated_at": "2026-07-15T06:00:54Z",
"pushed_at": "2024-09-30T12:48:08Z",
"stargazers_count": 180,
"watchers_count": 180,
"stargazers_count": 182,
"watchers_count": 182,
"has_discussions": false,
"forks_count": 28,
"allow_forking": true,
@@ -329,7 +329,7 @@
"topics": [],
"visibility": "public",
"forks": 28,
"watchers": 180,
"watchers": 182,
"score": 0,
"subscribers_count": 3
},
2024/CVE-2024-0670.json
+2 -2
View File
@@ -118,8 +118,8 @@
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
"fork": false,
"created_at": "2026-01-08T01:32:09Z",
"updated_at": "2026-07-15T00:17:59Z",
"pushed_at": "2026-07-15T00:17:55Z",
"updated_at": "2026-07-15T05:44:48Z",
"pushed_at": "2026-07-15T05:44:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-32114.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-42588)",
"fork": false,
"created_at": "2026-04-20T02:38:50Z",
"updated_at": "2026-07-13T12:12:28Z",
"updated_at": "2026-07-15T01:36:22Z",
"pushed_at": "2026-06-27T07:20:35Z",
"stargazers_count": 80,
"watchers_count": 80,
"stargazers_count": 81,
"watchers_count": 81,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 80,
"watchers": 81,
"score": 0,
"subscribers_count": 2
}
2025/CVE-2025-14847.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
"fork": false,
"created_at": "2025-07-30T15:52:00Z",
"updated_at": "2026-07-15T00:21:20Z",
"pushed_at": "2026-07-15T00:21:16Z",
"updated_at": "2026-07-15T05:48:12Z",
"pushed_at": "2026-07-15T05:48:08Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1129,8 +1129,8 @@
"description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
"fork": false,
"created_at": "2026-01-14T06:05:44Z",
"updated_at": "2026-07-15T00:20:35Z",
"pushed_at": "2026-07-15T00:20:32Z",
"updated_at": "2026-07-15T05:47:38Z",
"pushed_at": "2026-07-15T05:47:34Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-24257.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis",
"fork": false,
"created_at": "2026-04-04T03:42:55Z",
"updated_at": "2026-07-14T20:51:34Z",
"pushed_at": "2026-07-14T20:51:30Z",
"updated_at": "2026-07-15T06:29:55Z",
"pushed_at": "2026-07-15T06:29:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-26529.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "SSRF to XSS - XSS to RCE Moodle",
"fork": false,
"created_at": "2025-04-12T23:17:40Z",
"updated_at": "2026-07-14T21:41:06Z",
"updated_at": "2026-07-15T05:41:41Z",
"pushed_at": "2025-04-13T00:02:26Z",
"stargazers_count": 11,
"watchers_count": 11,
"stargazers_count": 13,
"watchers_count": 13,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 11,
"watchers": 13,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-27591.json
+33
View File
@@ -556,5 +556,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1301182296,
"name": "CVE-2025-27591-PoC",
"full_name": "MoTechStore\/CVE-2025-27591-PoC",
"owner": {
"login": "MoTechStore",
"id": 53371699,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/53371699?v=4",
"html_url": "https:\/\/github.com\/MoTechStore",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/MoTechStore\/CVE-2025-27591-PoC",
"description": "# CVE-2025-27591 PoC — Below Local Privilege Escalation This repository contains a Proof of Concept (PoC) demonstrating the local privilege escalation vulnerability identified as **CVE-2025-27591** in **Below**, a Linux system observability tool.",
"fork": false,
"created_at": "2026-07-15T04:07:13Z",
"updated_at": "2026-07-15T04:15:30Z",
"pushed_at": "2026-07-15T04:15:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-29927.json
+4 -4
View File
@@ -1106,10 +1106,10 @@
"description": "This repository contains a proof of concept (POC) and an exploit script for CVE-2025-29927, a critical vulnerability in Next.js that allows attackers to bypass authorization checks implemented in middleware.",
"fork": false,
"created_at": "2025-03-26T00:12:41Z",
"updated_at": "2026-04-17T14:08:15Z",
"updated_at": "2026-07-15T03:35:21Z",
"pushed_at": "2026-03-22T19:31:55Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -1133,7 +1133,7 @@
],
"visibility": "public",
"forks": 3,
"watchers": 7,
"watchers": 8,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-32463.json
+2 -2
View File
@@ -1529,8 +1529,8 @@
"description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.",
"fork": false,
"created_at": "2025-09-20T00:42:07Z",
"updated_at": "2026-07-14T23:39:07Z",
"pushed_at": "2026-07-14T23:39:04Z",
"updated_at": "2026-07-15T05:05:05Z",
"pushed_at": "2026-07-15T05:05:02Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-48907.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
2025/CVE-2025-49844.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.",
"fork": false,
"created_at": "2019-04-13T07:51:09Z",
"updated_at": "2026-07-14T23:51:16Z",
"pushed_at": "2026-07-14T23:51:12Z",
"updated_at": "2026-07-15T05:17:23Z",
"pushed_at": "2026-07-15T05:17:20Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
"fork": false,
"created_at": "2022-04-06T09:27:39Z",
"updated_at": "2026-07-14T23:51:46Z",
"pushed_at": "2026-07-14T23:51:43Z",
"updated_at": "2026-07-15T05:18:03Z",
"pushed_at": "2026-07-15T05:18:00Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-52915.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-07-14T17:12:05Z",
"updated_at": "2026-07-15T03:13:54Z",
"pushed_at": "2026-07-12T09:40:22Z",
"stargazers_count": 855,
"watchers_count": 855,
"stargazers_count": 856,
"watchers_count": 856,
"has_discussions": false,
"forks_count": 125,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 125,
"watchers": 855,
"watchers": 856,
"score": 0,
"subscribers_count": 20
}
2025/CVE-2025-54424.json
+2 -2
View File
@@ -53,8 +53,8 @@
"description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐",
"fork": false,
"created_at": "2025-08-14T05:16:16Z",
"updated_at": "2026-07-14T23:34:23Z",
"pushed_at": "2026-07-14T23:34:19Z",
"updated_at": "2026-07-15T05:00:16Z",
"pushed_at": "2026-07-15T05:00:07Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2025/CVE-2025-55182.json
+14 -14
View File
@@ -14,8 +14,8 @@
"description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.",
"fork": false,
"created_at": "2022-06-17T10:19:10Z",
"updated_at": "2026-07-15T00:11:12Z",
"pushed_at": "2026-07-15T00:11:08Z",
"updated_at": "2026-07-15T05:37:47Z",
"pushed_at": "2026-07-15T05:37:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -99,8 +99,8 @@
"description": null,
"fork": false,
"created_at": "2024-11-29T12:32:19Z",
"updated_at": "2026-07-15T00:11:42Z",
"pushed_at": "2026-07-15T00:11:39Z",
"updated_at": "2026-07-15T05:38:18Z",
"pushed_at": "2026-07-15T05:38:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -148,8 +148,8 @@
"description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
"fork": false,
"created_at": "2025-06-06T16:34:46Z",
"updated_at": "2026-07-15T00:11:24Z",
"pushed_at": "2026-07-15T00:11:20Z",
"updated_at": "2026-07-15T05:38:03Z",
"pushed_at": "2026-07-15T05:38:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -3683,10 +3683,10 @@
"description": "This repository contains a POC of CVE-2025-55182, a critical (CVSS score 10.0) pre-authentication remote code execution vulnerability affecting React Server Components, also known as React2Shell.",
"fork": false,
"created_at": "2025-12-05T22:32:32Z",
"updated_at": "2026-07-07T05:40:00Z",
"updated_at": "2026-07-15T03:35:05Z",
"pushed_at": "2026-03-22T19:27:58Z",
"stargazers_count": 13,
"watchers_count": 13,
"stargazers_count": 14,
"watchers_count": 14,
"has_discussions": true,
"forks_count": 3,
"allow_forking": true,
@@ -3718,7 +3718,7 @@
],
"visibility": "public",
"forks": 3,
"watchers": 13,
"watchers": 14,
"score": 0,
"subscribers_count": 1
},
@@ -11741,8 +11741,8 @@
"description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.",
"fork": false,
"created_at": "2025-12-24T14:48:19Z",
"updated_at": "2026-07-15T00:11:06Z",
"pushed_at": "2026-07-15T00:11:03Z",
"updated_at": "2026-07-15T05:37:47Z",
"pushed_at": "2026-07-15T05:37:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12259,8 +12259,8 @@
"description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
"fork": false,
"created_at": "2026-01-02T01:28:57Z",
"updated_at": "2026-07-15T00:15:01Z",
"pushed_at": "2026-07-15T00:14:57Z",
"updated_at": "2026-07-15T05:41:43Z",
"pushed_at": "2026-07-15T05:41:39Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-60357.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1301218286,
"name": "CVE-2025-60357",
"full_name": "Nullbyte3117\/CVE-2025-60357",
"owner": {
"login": "Nullbyte3117",
"id": 63184945,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/63184945?v=4",
"html_url": "https:\/\/github.com\/Nullbyte3117",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Nullbyte3117\/CVE-2025-60357",
"description": "CVE-2025-60357- NoSQL(MongoDB) Injection POC",
"fork": false,
"created_at": "2026-07-15T05:04:18Z",
"updated_at": "2026-07-15T05:05:26Z",
"pushed_at": "2026-07-15T05:05:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-66398.json
+2 -2
View File
@@ -64,8 +64,8 @@
"description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.",
"fork": false,
"created_at": "2026-03-23T09:09:21Z",
"updated_at": "2026-07-14T20:44:37Z",
"pushed_at": "2026-07-14T20:44:32Z",
"updated_at": "2026-07-15T06:24:07Z",
"pushed_at": "2026-07-15T06:24:02Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-66478.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.",
"fork": false,
"created_at": "2025-10-01T07:40:09Z",
"updated_at": "2026-07-15T00:12:16Z",
"pushed_at": "2026-07-15T00:12:13Z",
"updated_at": "2026-07-15T05:38:57Z",
"pushed_at": "2026-07-15T05:38:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-68921.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.",
"fork": false,
"created_at": "2026-01-24T21:00:41Z",
"updated_at": "2026-07-15T00:26:31Z",
"pushed_at": "2026-07-15T00:26:27Z",
"updated_at": "2026-07-15T05:53:31Z",
"pushed_at": "2026-07-15T05:53:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-0740.json
+4 -4
View File
@@ -125,10 +125,10 @@
"description": "CVE-2026-0740",
"fork": false,
"created_at": "2026-07-14T15:37:58Z",
"updated_at": "2026-07-14T15:45:56Z",
"updated_at": "2026-07-15T03:53:50Z",
"pushed_at": "2026-07-14T15:40:32Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -139,7 +139,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-15409.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1301123879,
"name": "CVE-2026-15409",
"full_name": "HORKimhab\/CVE-2026-15409",
"owner": {
"login": "HORKimhab",
"id": 41143106,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41143106?v=4",
"html_url": "https:\/\/github.com\/HORKimhab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/HORKimhab\/CVE-2026-15409",
"description": "CVE-2026-15409 - Dectect",
"fork": false,
"created_at": "2026-07-15T02:30:50Z",
"updated_at": "2026-07-15T02:46:49Z",
"pushed_at": "2026-07-15T02:45:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-15410.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1301124507,
"name": "CVE-2026-15410",
"full_name": "HORKimhab\/CVE-2026-15410",
"owner": {
"login": "HORKimhab",
"id": 41143106,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41143106?v=4",
"html_url": "https:\/\/github.com\/HORKimhab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/HORKimhab\/CVE-2026-15410",
"description": "CVE-2026-15410 - More: https:\/\/github.com\/HORKimhab\/poc-cve-collection",
"fork": false,
"created_at": "2026-07-15T02:31:47Z",
"updated_at": "2026-07-15T06:10:17Z",
"pushed_at": "2026-07-15T06:09:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-20841.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.",
"fork": false,
"created_at": "2024-09-22T12:19:06Z",
"updated_at": "2026-07-15T00:41:18Z",
"pushed_at": "2026-07-15T00:41:14Z",
"updated_at": "2026-07-15T06:08:50Z",
"pushed_at": "2026-07-15T06:08:46Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.",
"fork": false,
"created_at": "2026-02-26T05:21:28Z",
"updated_at": "2026-07-15T00:40:35Z",
"pushed_at": "2026-07-15T00:40:32Z",
"updated_at": "2026-07-15T06:08:07Z",
"pushed_at": "2026-07-15T06:08:01Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24061.json
+2 -2
View File
@@ -59,8 +59,8 @@
"description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.",
"fork": false,
"created_at": "2026-02-03T19:46:10Z",
"updated_at": "2026-07-15T00:31:46Z",
"pushed_at": "2026-07-15T00:31:42Z",
"updated_at": "2026-07-15T05:58:58Z",
"pushed_at": "2026-07-15T05:58:55Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24291.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions",
"fork": false,
"created_at": "2026-03-26T04:38:27Z",
"updated_at": "2026-07-14T20:46:43Z",
"pushed_at": "2026-07-14T20:46:39Z",
"updated_at": "2026-07-15T06:25:50Z",
"pushed_at": "2026-07-15T06:25:46Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-2441.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.",
"fork": false,
"created_at": "2026-03-03T14:19:18Z",
"updated_at": "2026-07-15T00:43:28Z",
"pushed_at": "2026-07-15T00:43:25Z",
"updated_at": "2026-07-15T06:11:08Z",
"pushed_at": "2026-07-15T06:11:05Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-2472.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.",
"fork": false,
"created_at": "2026-03-10T14:40:04Z",
"updated_at": "2026-07-15T00:47:47Z",
"pushed_at": "2026-07-15T00:47:44Z",
"updated_at": "2026-07-15T06:15:53Z",
"pushed_at": "2026-07-15T06:15:37Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-27483.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1301285761,
"name": "cve-2026-27483-lab",
"full_name": "nabhan-mohy\/cve-2026-27483-lab",
"owner": {
"login": "nabhan-mohy",
"id": 172956904,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/172956904?v=4",
"html_url": "https:\/\/github.com\/nabhan-mohy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/nabhan-mohy\/cve-2026-27483-lab",
"description": "A containerized enterprise-style lab for researching and defending against CVE-2026-27483.",
"fork": false,
"created_at": "2026-07-15T06:35:47Z",
"updated_at": "2026-07-15T06:46:57Z",
"pushed_at": "2026-07-15T06:46:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-27944.json
+33
View File
@@ -31,5 +31,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1301243832,
"name": "HTB-Snapped-Writeup",
"full_name": "Cosm3No1de\/HTB-Snapped-Writeup",
"owner": {
"login": "Cosm3No1de",
"id": 114448125,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/114448125?v=4",
"html_url": "https:\/\/github.com\/Cosm3No1de",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Cosm3No1de\/HTB-Snapped-Writeup",
"description": "Writeup de la máquina Snapped (Hard) de Hack The Box. Foothold: CVE-2026-27944 — Nginx UI unauthenticated backup disclosure Privilege Escalation: CVE-2026-3888 — snapd race condition LPE Técnicas: subdomain enumeration, AES decryption, bcrypt cracking, namespace manipulation, dynamic linker hijacking.",
"fork": false,
"created_at": "2026-07-15T05:40:45Z",
"updated_at": "2026-07-15T05:51:41Z",
"pushed_at": "2026-07-15T05:51:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-31431.json
+4 -4
View File
@@ -723,8 +723,8 @@
"description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.",
"fork": false,
"created_at": "2026-05-05T04:58:21Z",
"updated_at": "2026-07-14T21:07:23Z",
"pushed_at": "2026-07-14T21:07:18Z",
"updated_at": "2026-07-15T06:45:30Z",
"pushed_at": "2026-07-15T06:45:24Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -772,8 +772,8 @@
"description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.",
"fork": false,
"created_at": "2026-05-06T09:49:14Z",
"updated_at": "2026-07-14T21:07:56Z",
"pushed_at": "2026-07-14T21:07:52Z",
"updated_at": "2026-07-15T06:46:33Z",
"pushed_at": "2026-07-15T06:46:04Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-31802.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"fork": false,
"created_at": "2026-03-28T20:49:46Z",
"updated_at": "2026-07-14T20:48:02Z",
"pushed_at": "2026-07-14T20:47:55Z",
"updated_at": "2026-07-15T06:27:06Z",
"pushed_at": "2026-07-15T06:27:02Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-34197.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466， CVE-2026-42588)",
"fork": false,
"created_at": "2026-04-20T02:38:50Z",
"updated_at": "2026-07-13T12:12:28Z",
"updated_at": "2026-07-15T01:36:22Z",
"pushed_at": "2026-06-27T07:20:35Z",
"stargazers_count": 80,
"watchers_count": 80,
"stargazers_count": 81,
"watchers_count": 81,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 80,
"watchers": 81,
"score": 0,
"subscribers_count": 2
},
2026/CVE-2026-3609.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-07-14T17:12:05Z",
"updated_at": "2026-07-15T03:13:54Z",
"pushed_at": "2026-07-12T09:40:22Z",
"stargazers_count": 855,
"watchers_count": 855,
"stargazers_count": 856,
"watchers_count": 856,
"has_discussions": false,
"forks_count": 125,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 125,
"watchers": 855,
"watchers": 856,
"score": 0,
"subscribers_count": 20
},
2026/CVE-2026-36669.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1301085933,
"name": "CVE-2026-36669-FengOffice",
"full_name": "firstlax6t\/CVE-2026-36669-FengOffice",
"owner": {
"login": "firstlax6t",
"id": 305296191,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/305296191?v=4",
"html_url": "https:\/\/github.com\/firstlax6t",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/firstlax6t\/CVE-2026-36669-FengOffice",
"description": null,
"fork": false,
"created_at": "2026-07-15T01:25:56Z",
"updated_at": "2026-07-15T01:35:05Z",
"pushed_at": "2026-07-15T01:35:01Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-41089.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-41089 PoC — Netlogon CLDAP stack buffer overflow (CVSS 9.8 CRITICAL)",
"fork": false,
"created_at": "2026-06-01T04:22:29Z",
"updated_at": "2026-07-13T12:13:11Z",
"updated_at": "2026-07-15T02:39:46Z",
"pushed_at": "2026-06-02T08:30:55Z",
"stargazers_count": 207,
"watchers_count": 207,
"stargazers_count": 208,
"watchers_count": 208,
"has_discussions": false,
"forks_count": 67,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 67,
"watchers": 207,
"watchers": 208,
"score": 0,
"subscribers_count": 1
},
2026/CVE-2026-41091.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-41091",
"fork": false,
"created_at": "2026-05-21T19:16:25Z",
"updated_at": "2026-07-12T08:46:30Z",
"updated_at": "2026-07-15T03:27:11Z",
"pushed_at": "2026-05-21T19:28:46Z",
"stargazers_count": 10,
"watchers_count": 10,
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 10,
"watchers": 11,
"score": 0,
"subscribers_count": 1
},
2026/CVE-2026-41940.json
+8 -8
View File
@@ -258,8 +258,8 @@
"description": "Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.",
"fork": false,
"created_at": "2026-05-06T18:08:48Z",
"updated_at": "2026-07-14T21:08:16Z",
"pushed_at": "2026-07-14T21:08:12Z",
"updated_at": "2026-07-15T06:46:44Z",
"pushed_at": "2026-07-15T06:46:26Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -576,12 +576,12 @@
"description": "CVE-2026-41940 authentication bypass vulnerability proof-of-concept",
"fork": false,
"created_at": "2026-06-28T07:13:52Z",
"updated_at": "2026-07-15T00:37:20Z",
"updated_at": "2026-07-15T06:46:33Z",
"pushed_at": "2026-07-14T12:46:16Z",
"stargazers_count": 31,
"watchers_count": 31,
"stargazers_count": 128,
"watchers_count": 128,
"has_discussions": false,
"forks_count": 11,
"forks_count": 13,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -594,8 +594,8 @@
"cve-2026-41940-poc"
],
"visibility": "public",
"forks": 11,
"watchers": 31,
"forks": 13,
"watchers": 128,
"score": 0,
"subscribers_count": 1
}
2026/CVE-2026-43499.json
+80 -14
View File
@@ -19,7 +19,7 @@
"stargazers_count": 105,
"watchers_count": 105,
"has_discussions": false,
"forks_count": 26,
"forks_count": 27,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 26,
"forks": 27,
"watchers": 105,
"score": 0,
"subscribers_count": 1
@@ -151,7 +151,7 @@
"stargazers_count": 42,
"watchers_count": 42,
"has_discussions": false,
"forks_count": 19,
"forks_count": 20,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -159,7 +159,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 19,
"forks": 20,
"watchers": 42,
"score": 0,
"subscribers_count": 0
@@ -245,10 +245,10 @@
"description": "CVE-2026-43499 Implementation for 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k",
"fork": false,
"created_at": "2026-07-12T10:15:03Z",
"updated_at": "2026-07-14T23:23:30Z",
"updated_at": "2026-07-15T05:54:40Z",
"pushed_at": "2026-07-12T14:08:59Z",
"stargazers_count": 136,
"watchers_count": 136,
"stargazers_count": 145,
"watchers_count": 145,
"has_discussions": false,
"forks_count": 39,
"allow_forking": true,
@@ -259,7 +259,7 @@
"topics": [],
"visibility": "public",
"forks": 39,
"watchers": 136,
"watchers": 145,
"score": 0,
"subscribers_count": 0
},
@@ -549,12 +549,12 @@
"description": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.",
"fork": false,
"created_at": "2026-07-14T14:21:27Z",
"updated_at": "2026-07-15T00:40:43Z",
"updated_at": "2026-07-15T05:51:25Z",
"pushed_at": "2026-07-14T16:28:49Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 2,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -562,8 +562,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 3,
"forks": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
@@ -599,5 +599,71 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1301107661,
"name": "Logitech-G-Cloud-GhostLock-CVE-2026-43499",
"full_name": "HYCQAQ\/Logitech-G-Cloud-GhostLock-CVE-2026-43499",
"owner": {
"login": "HYCQAQ",
"id": 75055152,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/75055152?v=4",
"html_url": "https:\/\/github.com\/HYCQAQ",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/HYCQAQ\/Logitech-G-Cloud-GhostLock-CVE-2026-43499",
"description": "罗技云掌机 · GhostLock CVE-2026-43499 root 尝试",
"fork": false,
"created_at": "2026-07-15T02:03:56Z",
"updated_at": "2026-07-15T02:28:28Z",
"pushed_at": "2026-07-15T02:28:24Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1301177801,
"name": "duchamp-root",
"full_name": "Colorful-glassblock\/duchamp-root",
"owner": {
"login": "Colorful-glassblock",
"id": 194912369,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/194912369?v=4",
"html_url": "https:\/\/github.com\/Colorful-glassblock",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Colorful-glassblock\/duchamp-root",
"description": "Xiaomi K70e (duchamp) one-click root via CVE-2026-43499 (IonStack) + KernelSU integration",
"fork": false,
"created_at": "2026-07-15T03:59:56Z",
"updated_at": "2026-07-15T04:28:08Z",
"pushed_at": "2026-07-15T04:28:04Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-43724.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "CVE-2026-43724 - Apple's published enough advisories about the issue, I'm not getting paid for any of my kernel bugs. ",
"fork": false,
"created_at": "2026-07-13T22:38:54Z",
"updated_at": "2026-07-15T00:29:58Z",
"updated_at": "2026-07-15T03:02:19Z",
"pushed_at": "2026-07-13T22:40:03Z",
"stargazers_count": 11,
"watchers_count": 11,
"stargazers_count": 12,
"watchers_count": 12,
"has_discussions": false,
"forks_count": 3,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 11,
"forks": 4,
"watchers": 12,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-45585.json
+6 -6
View File
@@ -212,8 +212,8 @@
"description": "Manage and recover BitLocker encrypted drives with this tool for Windows 11 recovery key management and educational study of CVE-2026-45585.",
"fork": false,
"created_at": "2026-06-16T07:21:36Z",
"updated_at": "2026-07-14T21:14:52Z",
"pushed_at": "2026-07-14T21:14:48Z",
"updated_at": "2026-07-15T03:44:14Z",
"pushed_at": "2026-07-15T03:44:10Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
@@ -264,10 +264,10 @@
"description": "yellow key bitlocker yellow screen bitlocker bitlocker recovery key CVE-2026-45585 microsoft account secure boot bypass command prompt windows 11 windows 10 surface pro uefi firmware encryption key data recovery troubleshoot boot loop cmd unlock drive setup guide tutorial",
"fork": false,
"created_at": "2026-07-09T17:32:32Z",
"updated_at": "2026-07-15T00:50:21Z",
"updated_at": "2026-07-15T01:02:56Z",
"pushed_at": "2026-07-09T18:43:42Z",
"stargazers_count": 154,
"watchers_count": 154,
"stargazers_count": 156,
"watchers_count": 156,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -299,7 +299,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 154,
"watchers": 156,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-48907.json
+2 -2
View File
@@ -283,7 +283,7 @@
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -291,7 +291,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-50657.json
+46
View File
@@ -0,0 +1,46 @@
[
{
"id": 1301186839,
"name": "CVE-2026-50657",
"full_name": "NeseOS-Corp\/CVE-2026-50657",
"owner": {
"login": "NeseOS-Corp",
"id": 253272733,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/253272733?v=4",
"html_url": "https:\/\/github.com\/NeseOS-Corp",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/NeseOS-Corp\/CVE-2026-50657",
"description": null,
"fork": false,
"created_at": "2026-07-15T04:14:04Z",
"updated_at": "2026-07-15T04:25:48Z",
"pushed_at": "2026-07-15T04:24:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": false,
"pull_request_creation_policy": "all",
"topics": [
"10",
"11",
"7",
"8",
"cve",
"microsoft",
"neseos",
"vista",
"windows",
"xp"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-55511.json
+3 -3
View File
@@ -11,11 +11,11 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/junfuture1103\/CVE-2026-55511",
"description": "CVE-2026-55511 poc",
"description": "Remote Code Execution (RCE) in Yamcs Mission Control System via Java Statement Injection in Yarch SQL Double-Quoted IdentifiersRemote Code Execution (RCE) in Yamcs Mission Control System via Java Statement Injection in Yarch SQL Double-Quoted Identifiers",
"fork": false,
"created_at": "2026-07-15T00:32:21Z",
"updated_at": "2026-07-15T00:40:10Z",
"pushed_at": "2026-07-15T00:40:05Z",
"updated_at": "2026-07-15T01:03:43Z",
"pushed_at": "2026-07-15T00:53:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
README.md
+39
View File
@@ -1288,6 +1288,20 @@
- [shinthink/CVE-2026-15282](https://github.com/shinthink/CVE-2026-15282)
### CVE-2026-15409 (2026-07-14)
<code>A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. A remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.
</code>
- [HORKimhab/CVE-2026-15409](https://github.com/HORKimhab/CVE-2026-15409)
### CVE-2026-15410 (2026-07-14)
<code>Post-authentication improper control of generation of code ('Code Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands.
</code>
- [HORKimhab/CVE-2026-15410](https://github.com/HORKimhab/CVE-2026-15410)
### CVE-2026-15706
- [musana/CVE-2026-15706](https://github.com/musana/CVE-2026-15706)
@@ -1908,6 +1922,13 @@
- [xxconi/CVE-2026-27384](https://github.com/xxconi/CVE-2026-27384)
### CVE-2026-27483 (2026-02-24)
<code>MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 25.9.1.1, there is a path traversal vulnerability in Mindsdb's /api/files interface, which an authenticated attacker can exploit to achieve remote command execution. The vulnerability exists in the &quot;Upload File&quot; module, which corresponds to the API endpoint /api/files. Since the multipart file upload does not perform security checks on the uploaded file path, an attacker can perform path traversal by using `../` sequences in the filename field. The file write operation occurs before calling clear_filename and save_file, meaning there is no filtering of filenames or file types, allowing arbitrary content to be written to any path on the server. Version 25.9.1.1 patches the issue.
</code>
- [nabhan-mohy/cve-2026-27483-lab](https://github.com/nabhan-mohy/cve-2026-27483-lab)
### CVE-2026-27495 (2026-02-25)
<code>n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user with permission to create or modify workflows could exploit a vulnerability in the JavaScript Task Runner sandbox to execute arbitrary code outside the sandbox boundary. On instances using internal Task Runners (default runner mode), this could result in full compromise of the n8n host. On instances using external Task Runners, the attacker might gain access to or impact other task executed on the Task Runner. Task Runners must be enabled using `N8N_RUNNERS_ENABLED=true`. The issue has been fixed in n8n versions 2.10.1, 2.9.3, and 1.123.22. Users should upgrade to one of these versions or later to remediate the vulnerability. If upgrading is not immediately possible, administrators should consider the following temporary mitigations. Limit workflow creation and editing permissions to fully trusted users only, and/or use external runner mode (`N8N_RUNNERS_MODE=external`) to limit the blast radius. These workarounds do not fully remediate the risk and should only be used as short-term mitigation measures.
@@ -1954,6 +1975,7 @@
</code>
- [BimaBalance/Cve-2026-27944-Tools-Exploit](https://github.com/BimaBalance/Cve-2026-27944-Tools-Exploit)
- [Cosm3No1de/HTB-Snapped-Writeup](https://github.com/Cosm3No1de/HTB-Snapped-Writeup)
### CVE-2026-27966 (2026-02-26)
@@ -2670,6 +2692,9 @@
### CVE-2026-36590
- [MoXie25/NanoMQ-Memory-Leak-Research](https://github.com/MoXie25/NanoMQ-Memory-Leak-Research)
### CVE-2026-36669
- [firstlax6t/CVE-2026-36669-FengOffice](https://github.com/firstlax6t/CVE-2026-36669-FengOffice)
### CVE-2026-36670 (2026-06-15)
<code>A Time-Based Blind SQL Injection vulnerability in the alias_management module of OpenSIPS Control Panel (opensips-cp) prior to version 9.3.3 allows authenticated attackers to execute arbitrary SQL commands via the 'table' GET parameter in alias_management.php.
@@ -3441,6 +3466,8 @@
- [Bartixxx32/CVE-2026-43499-OnePlus15](https://github.com/Bartixxx32/CVE-2026-43499-OnePlus15)
- [Linuxoid-cn/CVE-2026-43499-Poc-Analysis](https://github.com/Linuxoid-cn/CVE-2026-43499-Poc-Analysis)
- [qsvggff-spec/oppo-A5-PRO-5G-CVE-2026-43499](https://github.com/qsvggff-spec/oppo-A5-PRO-5G-CVE-2026-43499)
- [HYCQAQ/Logitech-G-Cloud-GhostLock-CVE-2026-43499](https://github.com/HYCQAQ/Logitech-G-Cloud-GhostLock-CVE-2026-43499)
- [Colorful-glassblock/duchamp-root](https://github.com/Colorful-glassblock/duchamp-root)
### CVE-2026-43500 (2026-05-11)
@@ -4485,6 +4512,13 @@
- [g0thamRabb1t/CVE-2026-50656-rogueplanet-validation](https://github.com/g0thamRabb1t/CVE-2026-50656-rogueplanet-validation)
- [0xBlackash/CVE-2026-50656](https://github.com/0xBlackash/CVE-2026-50656)
### CVE-2026-50657 (2026-07-14)
<code>Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an authorized attacker to disclose information locally.
</code>
- [NeseOS-Corp/CVE-2026-50657](https://github.com/NeseOS-Corp/CVE-2026-50657)
### CVE-2026-50746 (2026-07-02)
<code>A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to execute a Command Injection on the host device.
@@ -9573,6 +9607,7 @@
- [0x00Jeff/CVE-2025-27591](https://github.com/0x00Jeff/CVE-2025-27591)
- [Stp1t/CVE-2025-27591](https://github.com/Stp1t/CVE-2025-27591)
- [rippsec/CVE-2025-27591-Meta-below-LPE](https://github.com/rippsec/CVE-2025-27591-Meta-below-LPE)
- [MoTechStore/CVE-2025-27591-PoC](https://github.com/MoTechStore/CVE-2025-27591-PoC)
### CVE-2025-27607 (2025-03-07)
@@ -14645,6 +14680,9 @@
- [m4sh-wacker/CVE-2025-60188-Atarim-Plugin-Exploit](https://github.com/m4sh-wacker/CVE-2025-60188-Atarim-Plugin-Exploit)
### CVE-2025-60357
- [Nullbyte3117/CVE-2025-60357](https://github.com/Nullbyte3117/CVE-2025-60357)
### CVE-2025-60424 (2025-10-27)
<code>A lack of rate limiting in the OTP verification component of Nagios Fusion v2024R1.2 and v2024R2 allows attackers to bypass authentication via a bruteforce attack.
@@ -43581,6 +43619,7 @@
- [engranaabubakar/CVE-2022-42889](https://github.com/engranaabubakar/CVE-2022-42889)
- [sangrok-jeon/CVE-2022-42889-Analysis](https://github.com/sangrok-jeon/CVE-2022-42889-Analysis)
- [KosmicOwl045/ICT287-CVE-2022-42889](https://github.com/KosmicOwl045/ICT287-CVE-2022-42889)
- [Hkaeeeer/CVE-2022-42889](https://github.com/Hkaeeeer/CVE-2022-42889)
### CVE-2022-42896 (2022-11-23)