nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/06/17 06:51:00

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-06-17 15:51:00 +09:00
1 parent f9d274f9c5
commit 5da4dfab89
40 files changed
+354 -374
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2017/CVE-2017-17275.json
-40
View File
@@ -1,40 +0,0 @@
[
{
"id": 410291020,
"name": "CVE-2017-17275",
"full_name": "kd992102\/CVE-2017-17275",
"owner": {
"login": "kd992102",
"id": 30813510,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/30813510?v=4",
"html_url": "https:\/\/github.com\/kd992102",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/kd992102\/CVE-2017-17275",
"description": "exploit",
"fork": false,
"created_at": "2021-09-25T14:16:54Z",
"updated_at": "2021-10-11T00:48:34Z",
"pushed_at": "2021-09-25T15:06:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2017-17215",
"exploit",
"hg532",
"hg532d"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
}
]
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-06-16T23:12:57Z",
"pushed_at": "2026-06-16T23:12:38Z",
"updated_at": "2026-06-17T01:42:41Z",
"pushed_at": "2026-06-17T01:42:37Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2019/CVE-2019-2205.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "A local PoC exploit for CVE-2019-2205",
"fork": false,
"created_at": "2022-02-09T02:08:50Z",
"updated_at": "2025-07-04T10:00:09Z",
"updated_at": "2026-06-17T03:53:04Z",
"pushed_at": "2022-02-09T02:17:03Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 1
}
2020/CVE-2020-0041.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 257,
"watchers_count": 257,
"has_discussions": false,
"forks_count": 74,
"forks_count": 73,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 74,
"forks": 73,
"watchers": 257,
"score": 0,
"subscribers_count": 10
2020/CVE-2020-1472.json
+2 -2
View File
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-06-16T23:51:04Z",
"pushed_at": "2026-06-16T23:51:00Z",
"updated_at": "2026-06-17T02:06:48Z",
"pushed_at": "2026-06-17T02:06:44Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2021/CVE-2021-0595.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 484316243,
"name": "frameworks_base_Aosp10_r33_CVE-2021-0595",
"full_name": "pazhanivel07\/frameworks_base_Aosp10_r33_CVE-2021-0595",
"owner": {
"login": "pazhanivel07",
"id": 97434034,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97434034?v=4",
"html_url": "https:\/\/github.com\/pazhanivel07",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/pazhanivel07\/frameworks_base_Aosp10_r33_CVE-2021-0595",
"description": null,
"fork": false,
"created_at": "2022-04-22T06:09:00Z",
"updated_at": "2023-03-27T01:19:18Z",
"pushed_at": "2022-04-22T07:02:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
}
]
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-06-17T00:01:36Z",
"pushed_at": "2026-06-17T00:01:16Z",
"updated_at": "2026-06-17T05:06:25Z",
"pushed_at": "2026-06-17T05:06:22Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-44228.json
+1 -1
View File
@@ -14031,7 +14031,7 @@
"fork": false,
"created_at": "2026-05-31T23:20:17Z",
"updated_at": "2026-06-10T17:31:23Z",
"pushed_at": "2026-06-16T05:06:52Z",
"pushed_at": "2026-06-17T04:48:46Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": true,
2022/CVE-2022-22057.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2023-07-10T22:55:02Z",
"updated_at": "2026-05-13T19:49:58Z",
"updated_at": "2026-06-17T03:53:09Z",
"pushed_at": "2023-07-11T23:15:53Z",
"stargazers_count": 10,
"watchers_count": 10,
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 10,
"watchers": 11,
"score": 0,
"subscribers_count": 1
}
2023/CVE-2023-20938.json
+4 -4
View File
@@ -2,15 +2,15 @@
{
"id": 1007025409,
"name": "CVE-2023-20938",
"full_name": "anansi2safe\/CVE-2023-20938",
"full_name": "jaf0rk\/CVE-2023-20938",
"owner": {
"login": "anansi2safe",
"login": "jaf0rk",
"id": 48431086,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48431086?v=4",
"html_url": "https:\/\/github.com\/anansi2safe",
"html_url": "https:\/\/github.com\/jaf0rk",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/anansi2safe\/CVE-2023-20938",
"html_url": "https:\/\/github.com\/jaf0rk\/CVE-2023-20938",
"description": null,
"fork": false,
"created_at": "2025-06-23T10:54:08Z",
2023/CVE-2023-22047.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Leveraging arbitrary file read to RCE on Oracle PeopleSoft",
"fork": false,
"created_at": "2025-04-02T03:54:56Z",
"updated_at": "2026-03-25T04:16:49Z",
"updated_at": "2026-06-17T01:32:22Z",
"pushed_at": "2025-04-02T03:56:30Z",
"stargazers_count": 11,
"watchers_count": 11,
"stargazers_count": 12,
"watchers_count": 12,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 7,
"watchers": 11,
"watchers": 12,
"score": 0,
"subscribers_count": 1
}
2023/CVE-2023-3269.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2023-3269: Linux kernel privilege escalation vulnerability",
"fork": false,
"created_at": "2023-06-28T13:22:26Z",
"updated_at": "2026-05-26T11:41:25Z",
"updated_at": "2026-06-17T01:17:49Z",
"pushed_at": "2026-02-23T14:35:10Z",
"stargazers_count": 497,
"watchers_count": 497,
"stargazers_count": 498,
"watchers_count": 498,
"has_discussions": false,
"forks_count": 38,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 38,
"watchers": 497,
"watchers": 498,
"score": 0,
"subscribers_count": 10
}
2023/CVE-2023-43261.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2023-43261 - Credential Leakage Through Unprotected System Logs and Weak Password Encryption",
"fork": false,
"created_at": "2023-09-28T08:45:55Z",
"updated_at": "2026-05-28T14:14:10Z",
"updated_at": "2026-06-17T02:09:54Z",
"pushed_at": "2023-10-01T08:36:06Z",
"stargazers_count": 57,
"watchers_count": 57,
"stargazers_count": 56,
"watchers_count": 56,
"has_discussions": false,
"forks_count": 10,
"allow_forking": true,
@@ -30,7 +30,7 @@
],
"visibility": "public",
"forks": 10,
"watchers": 57,
"watchers": 56,
"score": 0,
"subscribers_count": 2
}
2024/CVE-2024-20399.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1271832416,
"name": "CVE-2024-20399",
"full_name": "HORKimhab\/CVE-2024-20399",
"owner": {
"login": "HORKimhab",
"id": 41143106,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41143106?v=4",
"html_url": "https:\/\/github.com\/HORKimhab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/HORKimhab\/CVE-2024-20399",
"description": "CVE‑2024‑20399 - Draft",
"fork": false,
"created_at": "2026-06-17T03:49:02Z",
"updated_at": "2026-06-17T03:50:33Z",
"pushed_at": "2026-06-17T03:50:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2024/CVE-2024-37054.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": null,
"fork": false,
"created_at": "2026-05-17T04:54:16Z",
"updated_at": "2026-06-01T12:08:03Z",
"updated_at": "2026-06-17T04:50:01Z",
"pushed_at": "2026-05-17T16:36:41Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
2024/CVE-2024-4577.json
-33
View File
@@ -1681,39 +1681,6 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 913704447,
"name": "CVE-2024-4577",
"full_name": "Dejavu666\/CVE-2024-4577",
"owner": {
"login": "Dejavu666",
"id": 14794918,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/14794918?v=4",
"html_url": "https:\/\/github.com\/Dejavu666",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Dejavu666\/CVE-2024-4577",
"description": "CVE-2024-4577 POC",
"fork": false,
"created_at": "2025-01-08T07:41:29Z",
"updated_at": "2025-01-08T11:17:26Z",
"pushed_at": "2025-01-08T11:17:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 932702088,
"name": "php-cgi-cve-2024-4577",
2025/CVE-2025-24813.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": "his repository contains an automated Proof of Concept (PoC) script for exploiting **CVE-2025-24813**, a Remote Code Execution (RCE) vulnerability in Apache Tomcat. The vulnerability allows an attacker to upload a malicious serialized payload to the server, leading to arbitrary code execution via deserialization when specific conditions are met.",
"fork": false,
"created_at": "2025-03-14T07:36:58Z",
"updated_at": "2026-06-07T11:48:25Z",
"updated_at": "2026-06-17T06:16:45Z",
"pushed_at": "2025-03-14T07:57:27Z",
"stargazers_count": 195,
"watchers_count": 195,
"stargazers_count": 196,
"watchers_count": 196,
"has_discussions": false,
"forks_count": 43,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 43,
"watchers": 195,
"watchers": 196,
"score": 0,
"subscribers_count": 2
},
2025/CVE-2025-48799.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2025-07-08T15:26:04Z",
"updated_at": "2026-05-17T06:53:12Z",
"updated_at": "2026-06-17T01:32:53Z",
"pushed_at": "2025-07-08T19:35:55Z",
"stargazers_count": 270,
"watchers_count": 270,
"stargazers_count": 271,
"watchers_count": 271,
"has_discussions": false,
"forks_count": 69,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 69,
"watchers": 270,
"watchers": 271,
"score": 0,
"subscribers_count": 3
},
2025/CVE-2025-52915.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-06-16T18:04:07Z",
"updated_at": "2026-06-17T02:00:32Z",
"pushed_at": "2026-06-02T11:07:33Z",
"stargazers_count": 797,
"watchers_count": 797,
"stargazers_count": 798,
"watchers_count": 798,
"has_discussions": false,
"forks_count": 118,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 118,
"watchers": 797,
"watchers": 798,
"score": 0,
"subscribers_count": 19
}
2025/CVE-2025-62215.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "This PoC demonstrates a race condition in the Windows kernel leading to a double-free vulnerability, allowing local privilege escalation to SYSTEM. The exploit uses multithreaded handle manipulation and heap spraying to trigger the flaw under controlled conditions.",
"fork": false,
"created_at": "2025-11-18T16:12:44Z",
"updated_at": "2026-06-16T22:23:48Z",
"updated_at": "2026-06-17T03:57:31Z",
"pushed_at": "2025-11-18T16:34:05Z",
"stargazers_count": 12,
"watchers_count": 12,
"stargazers_count": 15,
"watchers_count": 15,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 12,
"watchers": 15,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-41044.json → 2025/CVE-2025-66391.json
+11 -11
View File
@@ -1,21 +1,21 @@
[
{
"id": 1229778965,
"name": "CVE-2026-41044",
"full_name": "mrillicit\/CVE-2026-41044",
"id": 1271782792,
"name": "CVE-2025-66391",
"full_name": "mandeepsohal\/CVE-2025-66391",
"owner": {
"login": "mrillicit",
"id": 57529827,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57529827?v=4",
"html_url": "https:\/\/github.com\/mrillicit",
"login": "mandeepsohal",
"id": 43975863,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43975863?v=4",
"html_url": "https:\/\/github.com\/mandeepsohal",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mrillicit\/CVE-2026-41044",
"html_url": "https:\/\/github.com\/mandeepsohal\/CVE-2025-66391",
"description": null,
"fork": false,
"created_at": "2026-05-05T11:28:39Z",
"updated_at": "2026-05-05T11:44:04Z",
"pushed_at": "2026-05-05T11:44:01Z",
"created_at": "2026-06-17T02:24:00Z",
"updated_at": "2026-06-17T02:36:26Z",
"pushed_at": "2026-06-17T02:36:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-0257.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Proof-of-concept script to leverage the PAN-OS GlobalProtect authentication bypass CVE-2026-0257",
"fork": false,
"created_at": "2026-05-29T11:46:55Z",
"updated_at": "2026-06-15T03:06:30Z",
"updated_at": "2026-06-17T02:09:57Z",
"pushed_at": "2026-05-29T14:29:53Z",
"stargazers_count": 21,
"watchers_count": 21,
"stargazers_count": 22,
"watchers_count": 22,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 7,
"watchers": 21,
"watchers": 22,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-20253.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-06-12T10:04:32Z",
"updated_at": "2026-06-16T08:59:26Z",
"updated_at": "2026-06-17T01:47:47Z",
"pushed_at": "2026-06-12T10:04:57Z",
"stargazers_count": 8,
"watchers_count": 8,
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 8,
"watchers": 9,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-23744.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": "CVE-2026-23744 RCE + Privilege Escalation",
"fork": false,
"created_at": "2026-05-31T07:39:58Z",
"updated_at": "2026-06-04T19:29:43Z",
"updated_at": "2026-06-17T02:23:00Z",
"pushed_at": "2026-05-31T07:51:31Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-23918.json
-33
View File
@@ -1,37 +1,4 @@
[
{
"id": 1229700238,
"name": "CVE-2026-23918-Elite-Auditor",
"full_name": "qassam-315\/CVE-2026-23918-Elite-Auditor",
"owner": {
"login": "qassam-315",
"id": 281894515,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/281894515?v=4",
"html_url": "https:\/\/github.com\/qassam-315",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/qassam-315\/CVE-2026-23918-Elite-Auditor",
"description": "Elite reconnaissance script for auditing Apache's HTTP\/2 stack against memory corruption (CVE-2026-23918). Features ALPN protocol forcing and monochrome dashboard intelligence. Built for Blue Teams and Security Researchers.",
"fork": false,
"created_at": "2026-05-05T09:52:27Z",
"updated_at": "2026-05-09T12:09:18Z",
"pushed_at": "2026-05-05T11:03:24Z",
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
{
"id": 1229781468,
"name": "CVE-2026-23918-test",
2026/CVE-2026-25177.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1271923236,
"name": "CVE-2026-25177",
"full_name": "HORKimhab\/CVE-2026-25177",
"owner": {
"login": "HORKimhab",
"id": 41143106,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41143106?v=4",
"html_url": "https:\/\/github.com\/HORKimhab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/HORKimhab\/CVE-2026-25177",
"description": "CVE-2026-25177 - Draft",
"fork": false,
"created_at": "2026-06-17T06:08:03Z",
"updated_at": "2026-06-17T06:08:19Z",
"pushed_at": "2026-06-17T06:08:06Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-25253.json
+4 -4
View File
@@ -68,10 +68,10 @@
"description": "Proactive security monitoring for OpenClaw deployments. Detects ClawHavoc, AMOS stealer, CVE-2026-25253, memory poisoning, and supply chain attacks.",
"fork": false,
"created_at": "2026-02-05T07:31:07Z",
"updated_at": "2026-06-07T07:57:25Z",
"updated_at": "2026-06-17T03:58:44Z",
"pushed_at": "2026-06-14T05:29:37Z",
"stargazers_count": 46,
"watchers_count": 46,
"stargazers_count": 47,
"watchers_count": 47,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -82,7 +82,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 46,
"watchers": 47,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-31431.json
-104
View File
@@ -831,42 +831,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1226408847,
"name": "CVE-2026-31431",
"full_name": "TheMalwareGuardian\/CVE-2026-31431",
"owner": {
"login": "TheMalwareGuardian",
"id": 118515671,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/118515671?v=4",
"html_url": "https:\/\/github.com\/TheMalwareGuardian",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/TheMalwareGuardian\/CVE-2026-31431",
"description": "A structured explanation of CVE-2026-31431 (Copy Fail), connecting the three kernel changes that introduced the vulnerability and enabled its exploitation.",
"fork": false,
"created_at": "2026-05-01T11:06:03Z",
"updated_at": "2026-05-05T17:33:59Z",
"pushed_at": "2026-05-05T10:07:55Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-31431",
"exploit"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226415858,
"name": "block-copyfail",
@@ -1595,74 +1559,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1229714397,
"name": "Copy-Fail---CVE-2026-31431",
"full_name": "MrMixies\/Copy-Fail---CVE-2026-31431",
"owner": {
"login": "MrMixies",
"id": 15237223,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/15237223?v=4",
"html_url": "https:\/\/github.com\/MrMixies",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/MrMixies\/Copy-Fail---CVE-2026-31431",
"description": "Script Python pour verifier si un systeme Linux est vulnerable a la faille CVE-2026-31431 (Copy Fail), une elevation de privileges locale dans le noyau Linux.",
"fork": false,
"created_at": "2026-05-05T10:09:36Z",
"updated_at": "2026-05-05T12:14:17Z",
"pushed_at": "2026-05-05T10:18:06Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1229748919,
"name": "CVE-2026-31431-Copy-Fail",
"full_name": "Industri4l-H3ll-Xpl0it3rs\/CVE-2026-31431-Copy-Fail",
"owner": {
"login": "Industri4l-H3ll-Xpl0it3rs",
"id": 262636091,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/262636091?v=4",
"html_url": "https:\/\/github.com\/Industri4l-H3ll-Xpl0it3rs",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Industri4l-H3ll-Xpl0it3rs\/CVE-2026-31431-Copy-Fail",
"description": "CVE-2026-31431 Exploit | by infrar3d",
"fork": false,
"created_at": "2026-05-05T10:51:39Z",
"updated_at": "2026-05-05T10:59:44Z",
"pushed_at": "2026-05-05T10:57:32Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"exploit"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1229777395,
"name": "CVE-2026-31431-CopyFail-static-ELF--POC",
2026/CVE-2026-3609.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-06-16T18:04:07Z",
"updated_at": "2026-06-17T02:00:32Z",
"pushed_at": "2026-06-02T11:07:33Z",
"stargazers_count": 797,
"watchers_count": 797,
"stargazers_count": 798,
"watchers_count": 798,
"has_discussions": false,
"forks_count": 118,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 118,
"watchers": 797,
"watchers": 798,
"score": 0,
"subscribers_count": 19
},
2026/CVE-2026-36213.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-39808.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1271757192,
"name": "CVE-2026-39808",
"full_name": "HORKimhab\/CVE-2026-39808",
"owner": {
"login": "HORKimhab",
"id": 41143106,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41143106?v=4",
"html_url": "https:\/\/github.com\/HORKimhab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/HORKimhab\/CVE-2026-39808",
"description": "CVE-2026-39808 - Fortinet Sandbox - Draft",
"fork": false,
"created_at": "2026-06-17T01:42:02Z",
"updated_at": "2026-06-17T01:42:09Z",
"pushed_at": "2026-06-17T01:42:06Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-39813.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1271756816,
"name": "CVE-2026-39813",
"full_name": "HORKimhab\/CVE-2026-39813",
"owner": {
"login": "HORKimhab",
"id": 41143106,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41143106?v=4",
"html_url": "https:\/\/github.com\/HORKimhab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/HORKimhab\/CVE-2026-39813",
"description": "CVE-2026-39813 - Fortinet Sandbox - Draft ",
"fork": false,
"created_at": "2026-06-17T01:41:17Z",
"updated_at": "2026-06-17T01:41:24Z",
"pushed_at": "2026-06-17T01:41:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-42945.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 851,
"watchers_count": 851,
"has_discussions": false,
"forks_count": 157,
"forks_count": 158,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 157,
"forks": 158,
"watchers": 851,
"score": 0,
"subscribers_count": 5
2026/CVE-2026-46331.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1271844056,
"name": "packet_edit_meme",
"full_name": "sgkdev\/packet_edit_meme",
"owner": {
"login": "sgkdev",
"id": 42553321,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42553321?v=4",
"html_url": "https:\/\/github.com\/sgkdev",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/sgkdev\/packet_edit_meme",
"description": "PACKET_EDIT_MEME.c (aka CVE-2026-46331): yet another page cache poisoning nightmare",
"fork": false,
"created_at": "2026-06-17T04:09:56Z",
"updated_at": "2026-06-17T05:21:56Z",
"pushed_at": "2026-06-17T04:55:06Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-48907.json
+33
View File
@@ -130,5 +130,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1271924028,
"name": "CVE-2026-48907",
"full_name": "HORKimhab\/CVE-2026-48907",
"owner": {
"login": "HORKimhab",
"id": 41143106,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41143106?v=4",
"html_url": "https:\/\/github.com\/HORKimhab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/HORKimhab\/CVE-2026-48907",
"description": "CVE-2026-48907",
"fork": false,
"created_at": "2026-06-17T06:09:10Z",
"updated_at": "2026-06-17T06:14:55Z",
"pushed_at": "2026-06-17T06:14:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-5281.json
+4 -4
View File
@@ -2,15 +2,15 @@
{
"id": 1246497103,
"name": "CVE-2026-5281",
"full_name": "anansi2safe\/CVE-2026-5281",
"full_name": "jaf0rk\/CVE-2026-5281",
"owner": {
"login": "anansi2safe",
"login": "jaf0rk",
"id": 48431086,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48431086?v=4",
"html_url": "https:\/\/github.com\/anansi2safe",
"html_url": "https:\/\/github.com\/jaf0rk",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/anansi2safe\/CVE-2026-5281",
"html_url": "https:\/\/github.com\/jaf0rk\/CVE-2026-5281",
"description": null,
"fork": false,
"created_at": "2026-05-22T08:50:43Z",
2026/CVE-2026-53435.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "An offensive security researcher + an AI vs. a fresh n-day: building the first public PoC for CVE-2026-53435 in one Friday night. Raw 8h20m log inside.",
"fork": false,
"created_at": "2026-06-12T14:50:22Z",
"updated_at": "2026-06-16T09:39:05Z",
"updated_at": "2026-06-17T03:59:34Z",
"pushed_at": "2026-06-12T14:53:33Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 5,
"forks": 1,
"watchers": 6,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-5426.json
+3 -3
View File
@@ -11,11 +11,11 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/HORKimhab\/CVE-2026-5426",
"description": "CVE-2026-5426 - Draft",
"description": "CVE-2026-5426",
"fork": false,
"created_at": "2026-05-26T07:08:21Z",
"updated_at": "2026-05-26T07:08:29Z",
"pushed_at": "2026-05-26T07:08:25Z",
"updated_at": "2026-06-17T02:00:17Z",
"pushed_at": "2026-06-17T02:00:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-54420.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-54420",
"fork": false,
"created_at": "2026-06-16T06:09:03Z",
"updated_at": "2026-06-16T06:34:53Z",
"updated_at": "2026-06-17T04:42:00Z",
"pushed_at": "2026-06-16T06:34:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
README.md
+41 -24
View File
@@ -501,7 +501,7 @@
<code>Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
</code>
- [anansi2safe/CVE-2026-5281](https://github.com/anansi2safe/CVE-2026-5281)
- [jaf0rk/CVE-2026-5281](https://github.com/jaf0rk/CVE-2026-5281)
### CVE-2026-5364 (2026-04-24)
@@ -1238,7 +1238,6 @@
<code>Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.\n\nThis issue affects Apache HTTP Server: 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue.
</code>
- [qassam-315/CVE-2026-23918-Elite-Auditor](https://github.com/qassam-315/CVE-2026-23918-Elite-Auditor)
- [12lie20/CVE-2026-23918-test](https://github.com/12lie20/CVE-2026-23918-test)
- [rshosting/Apache-CVE-2026-23918-fix](https://github.com/rshosting/Apache-CVE-2026-23918-fix)
- [aa022/CVE-2026-23918-Passive-Audit](https://github.com/aa022/CVE-2026-23918-Passive-Audit)
@@ -1345,6 +1344,13 @@
- [Dhananjayasj/RRAS-VULNERABILITY-CVE-2026-25172-CVE-2026-25173-CVE-2026--26111](https://github.com/Dhananjayasj/RRAS-VULNERABILITY-CVE-2026-25172-CVE-2026-25173-CVE-2026--26111)
### CVE-2026-25177 (2026-03-10)
<code>Improper restriction of names for files and other resources in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.
</code>
- [HORKimhab/CVE-2026-25177](https://github.com/HORKimhab/CVE-2026-25177)
### CVE-2026-25197 (2026-04-03)
<code>A specific endpoint allows authenticated users to pivot to other user profiles by modifying the id number in the API call.
@@ -1648,7 +1654,6 @@
- [deckhouse/d8-copy-fail-mitigation](https://github.com/deckhouse/d8-copy-fail-mitigation)
- [HulnotHutu/CVE-2026-31431](https://github.com/HulnotHutu/CVE-2026-31431)
- [OmerAti/almalinux-fix-cve-2026-31431](https://github.com/OmerAti/almalinux-fix-cve-2026-31431)
- [TheMalwareGuardian/CVE-2026-31431](https://github.com/TheMalwareGuardian/CVE-2026-31431)
- [atgreen/block-copyfail](https://github.com/atgreen/block-copyfail)
- [rvzsec/CVE-2026-31431](https://github.com/rvzsec/CVE-2026-31431)
- [K3ysTr0K3R/CVE-2026-31431-EXPLOIT](https://github.com/K3ysTr0K3R/CVE-2026-31431-EXPLOIT)
@@ -1670,8 +1675,6 @@
- [AdityaBhatt3010/CVE-2026-31431](https://github.com/AdityaBhatt3010/CVE-2026-31431)
- [6abc/Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284](https://github.com/6abc/Copy-Fail-CVE-2026-31431-dirty-frag-CVE-2026-43284)
- [Liverwortenuresis371/copyfail-rs](https://github.com/Liverwortenuresis371/copyfail-rs)
- [MrMixies/Copy-Fail---CVE-2026-31431](https://github.com/MrMixies/Copy-Fail---CVE-2026-31431)
- [Industri4l-H3ll-Xpl0it3rs/CVE-2026-31431-Copy-Fail](https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2026-31431-Copy-Fail)
- [Rat5ak/CVE-2026-31431-CopyFail-static-ELF--POC](https://github.com/Rat5ak/CVE-2026-31431-CopyFail-static-ELF--POC)
- [zhanghangorg/cve-2026-31431](https://github.com/zhanghangorg/cve-2026-31431)
- [itsystem/afalg-check](https://github.com/itsystem/afalg-check)
@@ -2363,6 +2366,20 @@
- [CatchCatOoO/CVE-2026-39636-vulnerability-exp](https://github.com/CatchCatOoO/CVE-2026-39636-vulnerability-exp)
### CVE-2026-39808 (2026-04-14)
<code>A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.8 may allow attacker to execute unauthorized code or commands via &lt;insert attack vector here&gt;
</code>
- [HORKimhab/CVE-2026-39808](https://github.com/HORKimhab/CVE-2026-39808)
### CVE-2026-39813 (2026-04-14)
<code>A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attacker to escalation of privilege via &lt;insert attack vector here&gt;
</code>
- [HORKimhab/CVE-2026-39813](https://github.com/HORKimhab/CVE-2026-39813)
### CVE-2026-39816 (2026-05-08)
<code>The optional extension component TinkerpopClientService is missing the Restricted annotation with the Execute Code Required Permission in Apache NiFi 2.0.0-M1 through 2.8.0. The TinkerpopClientService supports configuration of ByteCode Submission for the Script Submission Type, enabling Groovy Script execution in the service prior to submitting the query. The missing Restricted annotation allows users without the Execute Code Permission to configure the Service in installations that use fine-grained authorization and have the optional TinkerpopClientService installed. Apache NiFi installations that do not have the nifi-other-graph-services-nar installed are not subject to this vulnerability. Upgrading to Apache NiFi 2.9.0 is the recommended mitigation.
@@ -2472,13 +2489,6 @@
- [daehyuh/CVE-2026-40987](https://github.com/daehyuh/CVE-2026-40987)
### CVE-2026-41044 (2026-04-24)
<code>Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ, Apache ActiveMQ Broker, Apache ActiveMQ All.\n\nAn authenticated attacker can use the admin web console page to construct a malicious broker name that bypasses name validation to include an xbean binding that can be later used by a VM transport to load a remote Spring XML application.\nThe attacker can then use the DestinationView mbean to send a message to trigger a VM transport creation that will reference this malicious broker name which can lead to loading the malicious Spring XML context file.\n\n\nBecause Spring's ResourceXmlApplicationContext instantiates all singleton beans before the BrokerService validates the configuration, arbitrary code execution occurs on the broker's JVM through bean factory methods such as Runtime.exec().\n\nThis issue affects Apache ActiveMQ: before 5.19.6, from 6.0.0 before 6.2.5; Apache ActiveMQ Broker: before 5.19.6, from 6.0.0 before 6.2.5; Apache ActiveMQ All: before 5.19.6, from 6.0.0 before 6.2.5.\n\nUsers are recommended to upgrade to version 6.2.5 or 5.19.6, which fixes the issue.
</code>
- [mrillicit/CVE-2026-41044](https://github.com/mrillicit/CVE-2026-41044)
### CVE-2026-41089 (2026-05-12)
<code>Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
@@ -3073,6 +3083,13 @@
- [AzDevops143/FRAGNESIA-Charan-cve-2026-46300](https://github.com/AzDevops143/FRAGNESIA-Charan-cve-2026-46300)
- [1neptune/Fragnesia](https://github.com/1neptune/Fragnesia)
### CVE-2026-46331 (2026-06-16)
<code>In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: fix pedit partial COW leading to page cache corruption\n\ntcf_pedit_act() computes the COW range for skb_ensure_writable()\nonce before the key loop using tcfp_off_max_hint, but the hint does\nnot account for the runtime header offset added by typed keys. This\ncan leave part of the write region un-COW'd.\n\nFix by moving skb_ensure_writable() inside the per-key loop where\nthe actual write offset is known, and add overflow checking on the\noffset arithmetic. For negative offsets (e.g. Ethernet header edits\nat ingress), use skb_cow() to COW the headroom instead. Guard\noffset_valid() against INT_MIN, where negation is undefined.
</code>
- [sgkdev/packet_edit_meme](https://github.com/sgkdev/packet_edit_meme)
### CVE-2026-46333 (2026-05-15)
<code>In the Linux kernel, the following vulnerability has been resolved:\n\nptrace: slightly saner 'get_dumpable()' logic\n\nThe 'dumpability' of a task is fundamentally about the memory image of\nthe task - the concept comes from whether it can core dump or not - and\nmakes no sense when you don't have an associated mm.\n\nAnd almost all users do in fact use it only for the case where the task\nhas a mm pointer.\n\nBut we have one odd special case: ptrace_may_access() uses 'dumpable' to\ncheck various other things entirely independently of the MM (typically\nexplicitly using flags like PTRACE_MODE_READ_FSCREDS). Including for\nthreads that no longer have a VM (and maybe never did, like most kernel\nthreads).\n\nIt's not what this flag was designed for, but it is what it is.\n\nThe ptrace code does check that the uid/gid matches, so you do have to\nbe uid-0 to see kernel thread details, but this means that the\ntraditional &quot;drop capabilities&quot; model doesn't make any difference for\nthis all.\n\nMake it all make a *bit* more sense by saying that if you don't have a\nMM pointer, we'll use a cached &quot;last dumpability&quot; flag if the thread\never had a MM (it will be zero for kernel threads since it is never\nset), and require a proper CAP_SYS_PTRACE capability to override.
@@ -3309,6 +3326,7 @@
- [ywh-jfellus/CVE-2026-48907](https://github.com/ywh-jfellus/CVE-2026-48907)
- [0xBlackash/CVE-2026-48907](https://github.com/0xBlackash/CVE-2026-48907)
- [87achrafg-stack/CVE-2026-48907](https://github.com/87achrafg-stack/CVE-2026-48907)
- [HORKimhab/CVE-2026-48907](https://github.com/HORKimhab/CVE-2026-48907)
### CVE-2026-48962 (2026-05-27)
@@ -14160,6 +14178,9 @@
- [sid6224/CVE-2025-66249-POC](https://github.com/sid6224/CVE-2025-66249-POC)
### CVE-2025-66391
- [mandeepsohal/CVE-2025-66391](https://github.com/mandeepsohal/CVE-2025-66391)
### CVE-2025-66398 (2026-01-01)
<code>Signal K Server is a server application that runs on a central hub in a boat. Prior to version 2.19.0, an unauthenticated attacker can pollute the internal state (`restoreFilePath`) of the server via the `/skServer/validateBackup` endpoint. This allows the attacker to hijack the administrator's &quot;Restore&quot; functionality to overwrite critical server configuration files (e.g., `security.json`, `package.json`), leading to account takeover and Remote Code Execution (RCE). Version 2.19.0 patches this vulnerability.
@@ -16481,7 +16502,6 @@
- [longhoangth18/CVE-2024-4577](https://github.com/longhoangth18/CVE-2024-4577)
- [ahmetramazank/CVE-2024-4577](https://github.com/ahmetramazank/CVE-2024-4577)
- [BTtea/CVE-2024-4577-RCE-PoC](https://github.com/BTtea/CVE-2024-4577-RCE-PoC)
- [Dejavu666/CVE-2024-4577](https://github.com/Dejavu666/CVE-2024-4577)
- [tpdlshdmlrkfmcla/php-cgi-cve-2024-4577](https://github.com/tpdlshdmlrkfmcla/php-cgi-cve-2024-4577)
- [Didarul342/CVE-2024-4577](https://github.com/Didarul342/CVE-2024-4577)
- [Night-have-dreams/php-cgi-Injector](https://github.com/Night-have-dreams/php-cgi-Injector)
@@ -18576,6 +18596,13 @@
- [nettitude/CVE-2024-20356](https://github.com/nettitude/CVE-2024-20356)
- [SherllyNeo/CVE_2024_20356](https://github.com/SherllyNeo/CVE_2024_20356)
### CVE-2024-20399 (2024-07-01)
<code>A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected device.\r\n\r\nThis vulnerability is due to insufficient validation of arguments that are passed to specific configuration CLI commands. An attacker could exploit this vulnerability by including crafted input as the argument of an affected configuration CLI command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of root.\r\nNote: To successfully exploit this vulnerability on a Cisco NX-OS device, an attacker must have Administrator credentials. The following Cisco devices already allow administrative users to access the underlying operating system through the bash-shell feature, so, for these devices, this vulnerability does not grant any additional privileges:\r\n\r\nNexus 3000 Series Switches\r\nNexus 7000 Series Switches that are running Cisco NX-OS Software releases 8.1(1) and later\r\nNexus 9000 Series Switches in standalone NX-OS mode
</code>
- [HORKimhab/CVE-2024-20399](https://github.com/HORKimhab/CVE-2024-20399)
### CVE-2024-20404 (2024-06-05)
<code>A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct an SSRF attack on an affected system.\r\n\r This vulnerability is due to insufficient validation of user-supplied input for specific HTTP requests that are sent to an affected system. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected device. A successful exploit could allow the attacker to obtain limited sensitive information for services that are associated to the affected device.
@@ -28151,7 +28178,7 @@
<code>In binder_transaction_buffer_release of binder.c, there is a possible use after free due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-257685302References: Upstream kernel
</code>
- [anansi2safe/CVE-2023-20938](https://github.com/anansi2safe/CVE-2023-20938)
- [jaf0rk/CVE-2023-20938](https://github.com/jaf0rk/CVE-2023-20938)
- [0xAtharv/CVE-2023-20938-Public](https://github.com/0xAtharv/CVE-2023-20938-Public)
### CVE-2023-20943 (2023-02-28)
@@ -43032,13 +43059,6 @@
- [Trinadh465/System_bt_AOSP10_r33_CVE-2021-0589](https://github.com/Trinadh465/System_bt_AOSP10_r33_CVE-2021-0589)
- [Satheesh575555/system_bt_AOSP10_r33_CVE-2021-0589](https://github.com/Satheesh575555/system_bt_AOSP10_r33_CVE-2021-0589)
### CVE-2021-0595 (2021-10-06)
<code>In lockAllProfileTasks of RootWindowContainer.java, there is a possible way to access the work profile without the profile PIN, after logging in. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-177457096
</code>
- [pazhanivel07/frameworks_base_Aosp10_r33_CVE-2021-0595](https://github.com/pazhanivel07/frameworks_base_Aosp10_r33_CVE-2021-0595)
### CVE-2021-0683 (2021-10-06)
<code>In runTraceIpcStop of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-185398942
@@ -65817,9 +65837,6 @@
- [wilfred-wulbou/HG532d-RCE-Exploit](https://github.com/wilfred-wulbou/HG532d-RCE-Exploit)
- [ltfafei/HuaWei_Route_HG532_RCE_CVE-2017-17215](https://github.com/ltfafei/HuaWei_Route_HG532_RCE_CVE-2017-17215)
### CVE-2017-17275
- [kd992102/CVE-2017-17275](https://github.com/kd992102/CVE-2017-17275)
### CVE-2017-17485 (2018-01-10)
<code>FasterXML jackson-databind through 2.8.10 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the Spring libraries are available in the classpath.