nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/06/28 12:50:09

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-06-28 21:50:09 +09:00
1 parent 17b1f005e1
commit 66b04b5bca
60 files changed
+495 -469
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2014/CVE-2014-3566.json
+33
View File
@@ -237,5 +237,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1282766907,
"name": "CVE-2014-3566",
"full_name": "Karma4488\/CVE-2014-3566",
"owner": {
"login": "Karma4488",
"id": 199338285,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/199338285?v=4",
"html_url": "https:\/\/github.com\/Karma4488",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Karma4488\/CVE-2014-3566",
"description": null,
"fork": false,
"created_at": "2026-06-28T07:05:35Z",
"updated_at": "2026-06-28T07:07:39Z",
"pushed_at": "2026-06-28T07:07:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2016/CVE-2016-5195.json
+8 -8
View File
@@ -288,10 +288,10 @@
"description": "A CVE-2016-5195 exploit example.",
"fork": false,
"created_at": "2016-10-23T00:16:33Z",
"updated_at": "2026-06-13T05:27:12Z",
"updated_at": "2026-06-28T10:05:26Z",
"pushed_at": "2017-03-21T16:46:38Z",
"stargazers_count": 340,
"watchers_count": 340,
"stargazers_count": 341,
"watchers_count": 341,
"has_discussions": false,
"forks_count": 124,
"allow_forking": true,
@@ -306,7 +306,7 @@
],
"visibility": "public",
"forks": 124,
"watchers": 340,
"watchers": 341,
"score": 0,
"subscribers_count": 13
},
@@ -490,10 +490,10 @@
"description": "Dirty Cow exploit - CVE-2016-5195",
"fork": false,
"created_at": "2016-11-25T21:08:01Z",
"updated_at": "2026-06-26T13:18:40Z",
"updated_at": "2026-06-28T10:05:22Z",
"pushed_at": "2025-07-30T11:31:24Z",
"stargazers_count": 933,
"watchers_count": 933,
"stargazers_count": 934,
"watchers_count": 934,
"has_discussions": false,
"forks_count": 428,
"allow_forking": true,
@@ -508,7 +508,7 @@
],
"visibility": "public",
"forks": 428,
"watchers": 933,
"watchers": 934,
"score": 0,
"subscribers_count": 1
},
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-06-28T06:00:20Z",
"pushed_at": "2026-06-28T06:00:15Z",
"updated_at": "2026-06-28T11:19:56Z",
"pushed_at": "2026-06-28T11:19:52Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2019/CVE-2019-18935.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "RCE exploit for a .NET JSON deserialization vulnerability in Telerik UI for ASP.NET AJAX.",
"fork": false,
"created_at": "2019-12-12T07:58:11Z",
"updated_at": "2026-06-26T23:04:26Z",
"updated_at": "2026-06-28T06:36:35Z",
"pushed_at": "2022-04-14T18:23:38Z",
"stargazers_count": 372,
"watchers_count": 372,
"stargazers_count": 373,
"watchers_count": 373,
"has_discussions": false,
"forks_count": 87,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 87,
"watchers": 372,
"watchers": 373,
"score": 0,
"subscribers_count": 11
},
2020/CVE-2020-1472.json
+6 -6
View File
@@ -80,10 +80,10 @@
"description": null,
"fork": false,
"created_at": "2020-09-14T16:52:37Z",
"updated_at": "2026-05-09T20:56:55Z",
"updated_at": "2026-06-28T06:48:48Z",
"pushed_at": "2020-09-14T16:53:07Z",
"stargazers_count": 37,
"watchers_count": 37,
"stargazers_count": 38,
"watchers_count": 38,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 37,
"watchers": 38,
"score": 0,
"subscribers_count": 1
},
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-06-28T04:47:05Z",
"pushed_at": "2026-06-28T04:47:01Z",
"updated_at": "2026-06-28T12:04:26Z",
"pushed_at": "2026-06-28T12:04:21Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2021/CVE-2021-26855.json
+12 -12
View File
@@ -722,10 +722,10 @@
"description": "CVE-2021-26855: PoC (Not a HoneyPoC for once!)",
"fork": false,
"created_at": "2021-03-14T14:23:34Z",
"updated_at": "2026-04-30T11:26:34Z",
"updated_at": "2026-06-28T12:07:19Z",
"pushed_at": "2025-04-26T06:48:26Z",
"stargazers_count": 29,
"watchers_count": 29,
"stargazers_count": 30,
"watchers_count": 30,
"has_discussions": false,
"forks_count": 15,
"allow_forking": true,
@@ -736,7 +736,7 @@
"topics": [],
"visibility": "public",
"forks": 15,
"watchers": 29,
"watchers": 30,
"score": 0,
"subscribers_count": 1
},
@@ -891,10 +891,10 @@
"description": "ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability, CVE-2021-27065, to get code execution.",
"fork": false,
"created_at": "2021-03-16T07:31:25Z",
"updated_at": "2026-02-14T15:15:14Z",
"updated_at": "2026-06-28T12:04:21Z",
"pushed_at": "2021-05-01T17:20:15Z",
"stargazers_count": 32,
"watchers_count": 32,
"stargazers_count": 33,
"watchers_count": 33,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -905,7 +905,7 @@
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 32,
"watchers": 33,
"score": 0,
"subscribers_count": 2
},
@@ -1137,10 +1137,10 @@
"description": "Proof-of-concept exploit for CVE-2021-26855 and CVE-2021-27065. Unauthenticated RCE in Exchange.",
"fork": false,
"created_at": "2021-03-24T01:12:48Z",
"updated_at": "2026-02-04T07:19:50Z",
"updated_at": "2026-06-28T12:05:13Z",
"pushed_at": "2021-03-24T01:25:05Z",
"stargazers_count": 51,
"watchers_count": 51,
"stargazers_count": 52,
"watchers_count": 52,
"has_discussions": false,
"forks_count": 17,
"allow_forking": true,
@@ -1151,7 +1151,7 @@
"topics": [],
"visibility": "public",
"forks": 17,
"watchers": 51,
"watchers": 52,
"score": 0,
"subscribers_count": 3
},
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-06-28T06:07:47Z",
"pushed_at": "2026-06-28T06:07:43Z",
"updated_at": "2026-06-28T11:22:26Z",
"pushed_at": "2026-06-28T11:22:22Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-42287.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2021-42287\/CVE-2021-42278 Scanner & Exploiter.",
"fork": false,
"created_at": "2021-12-11T19:27:30Z",
"updated_at": "2026-06-26T08:24:20Z",
"updated_at": "2026-06-28T06:48:31Z",
"pushed_at": "2021-12-16T09:50:15Z",
"stargazers_count": 1405,
"watchers_count": 1405,
"stargazers_count": 1406,
"watchers_count": 1406,
"has_discussions": false,
"forks_count": 316,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 316,
"watchers": 1405,
"watchers": 1406,
"score": 0,
"subscribers_count": 24
},
2022/CVE-2022-29799.json
+2 -2
View File
@@ -59,8 +59,8 @@
"description": "Demonstrate local privilege escalation in networkd-dispatcher via CVE-2022-29799 and CVE-2022-29800 using this C proof of concept.",
"fork": false,
"created_at": "2026-06-23T14:05:18Z",
"updated_at": "2026-06-28T05:40:04Z",
"pushed_at": "2026-06-28T05:40:00Z",
"updated_at": "2026-06-28T10:43:41Z",
"pushed_at": "2026-06-28T10:43:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-20198.json
+4 -4
View File
@@ -650,10 +650,10 @@
"description": "CVE-2023-20198 Exploit PoC",
"fork": false,
"created_at": "2023-11-16T16:39:38Z",
"updated_at": "2026-04-23T08:45:05Z",
"updated_at": "2026-06-28T11:29:50Z",
"pushed_at": "2026-03-26T20:39:56Z",
"stargazers_count": 64,
"watchers_count": 64,
"stargazers_count": 65,
"watchers_count": 65,
"has_discussions": false,
"forks_count": 19,
"allow_forking": true,
@@ -664,7 +664,7 @@
"topics": [],
"visibility": "public",
"forks": 19,
"watchers": 64,
"watchers": 65,
"score": 0,
"subscribers_count": 1
},
2023/CVE-2023-20273.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2023-20273 Exploit PoC",
"fork": false,
"created_at": "2023-12-09T07:25:43Z",
"updated_at": "2025-11-17T03:36:45Z",
"updated_at": "2026-06-28T11:29:59Z",
"pushed_at": "2024-04-01T18:59:05Z",
"stargazers_count": 14,
"watchers_count": 14,
"stargazers_count": 15,
"watchers_count": 15,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 14,
"watchers": 15,
"score": 0,
"subscribers_count": 1
}
2023/CVE-2023-28252.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2023-06-27T12:22:05Z",
"updated_at": "2026-06-28T02:54:24Z",
"updated_at": "2026-06-28T09:16:04Z",
"pushed_at": "2023-07-10T16:57:44Z",
"stargazers_count": 181,
"watchers_count": 181,
"stargazers_count": 183,
"watchers_count": 183,
"has_discussions": false,
"forks_count": 44,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 44,
"watchers": 181,
"watchers": 183,
"score": 0,
"subscribers_count": 1
},
2023/CVE-2023-32434.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙",
"fork": false,
"created_at": "2025-08-13T09:19:29Z",
"updated_at": "2026-06-28T03:50:40Z",
"pushed_at": "2026-06-28T03:50:37Z",
"updated_at": "2026-06-28T11:45:17Z",
"pushed_at": "2026-06-28T11:45:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-34362.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "MOVEit CVE-2023-34362",
"fork": false,
"created_at": "2023-06-09T19:07:32Z",
"updated_at": "2026-06-09T15:20:48Z",
"updated_at": "2026-06-28T10:28:07Z",
"pushed_at": "2023-06-26T20:24:32Z",
"stargazers_count": 138,
"watchers_count": 138,
"stargazers_count": 139,
"watchers_count": 139,
"has_discussions": false,
"forks_count": 34,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 34,
"watchers": 138,
"watchers": 139,
"score": 0,
"subscribers_count": 3
},
2024/CVE-2024-0670.json
+2 -2
View File
@@ -172,8 +172,8 @@
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
"fork": false,
"created_at": "2026-01-08T01:32:09Z",
"updated_at": "2026-06-28T04:34:06Z",
"pushed_at": "2026-06-28T04:34:02Z",
"updated_at": "2026-06-28T12:29:12Z",
"pushed_at": "2026-06-28T12:29:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-31317.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "Detailed discussion of Zygote vulnerability CVE-2024-31317",
"fork": false,
"created_at": "2025-04-26T16:46:35Z",
"updated_at": "2026-06-03T02:14:55Z",
"updated_at": "2026-06-28T07:50:24Z",
"pushed_at": "2025-08-05T03:52:00Z",
"stargazers_count": 24,
"watchers_count": 24,
"stargazers_count": 25,
"watchers_count": 25,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 24,
"watchers": 25,
"score": 0,
"subscribers_count": 3
},
2024/CVE-2024-3829.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "CVE-2024-3829",
"fork": false,
"created_at": "2026-03-05T18:28:10Z",
"updated_at": "2026-05-11T16:41:47Z",
"pushed_at": "2026-05-11T16:38:44Z",
"updated_at": "2026-06-28T07:53:27Z",
"pushed_at": "2026-06-28T07:53:23Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2024/CVE-2024-33298.json → 2024/CVE-2024-38513.json
+13 -13
View File
@@ -1,21 +1,21 @@
[
{
"id": 914938551,
"name": "CVE-2024-33298",
"full_name": "MathSabo\/CVE-2024-33298",
"id": 1282980414,
"name": "GoFiber-CVE-2024-38513",
"full_name": "Oyeonseok\/GoFiber-CVE-2024-38513",
"owner": {
"login": "MathSabo",
"id": 110696037,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/110696037?v=4",
"html_url": "https:\/\/github.com\/MathSabo",
"login": "Oyeonseok",
"id": 215274582,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/215274582?v=4",
"html_url": "https:\/\/github.com\/Oyeonseok",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/MathSabo\/CVE-2024-33298",
"description": "Stored Cross Site Scripting vulnerability in Microweber < 2.0.9",
"html_url": "https:\/\/github.com\/Oyeonseok\/GoFiber-CVE-2024-38513",
"description": null,
"fork": false,
"created_at": "2025-01-10T16:08:42Z",
"updated_at": "2025-01-10T16:15:14Z",
"pushed_at": "2025-01-10T16:15:10Z",
"created_at": "2026-06-28T12:18:22Z",
"updated_at": "2026-06-28T12:18:27Z",
"pushed_at": "2026-06-28T12:18:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -30,6 +30,6 @@
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
"subscribers_count": 0
}
]
2024/CVE-2024-6387.json
+4 -4
View File
@@ -1446,10 +1446,10 @@
"description": "CVE-2024-6387-Check is a streamlined and efficient tool created to detect servers operating on vulnerable versions of OpenSSH.",
"fork": false,
"created_at": "2024-07-02T18:46:24Z",
"updated_at": "2026-05-07T09:37:02Z",
"updated_at": "2026-06-28T12:08:45Z",
"pushed_at": "2024-07-02T20:32:48Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -1460,7 +1460,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-14847.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
"fork": false,
"created_at": "2025-07-30T15:52:00Z",
"updated_at": "2026-06-28T04:38:06Z",
"pushed_at": "2026-06-28T04:38:03Z",
"updated_at": "2026-06-28T12:32:30Z",
"pushed_at": "2026-06-28T12:32:27Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1129,8 +1129,8 @@
"description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
"fork": false,
"created_at": "2026-01-14T06:05:44Z",
"updated_at": "2026-06-28T04:36:43Z",
"pushed_at": "2026-06-28T04:36:40Z",
"updated_at": "2026-06-28T12:31:49Z",
"pushed_at": "2026-06-28T12:31:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-24257.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis",
"fork": false,
"created_at": "2026-04-04T03:42:55Z",
"updated_at": "2026-06-28T05:16:50Z",
"pushed_at": "2026-06-28T05:16:46Z",
"updated_at": "2026-06-28T10:19:20Z",
"pushed_at": "2026-06-28T10:19:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-31258.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔓 Explore CVE-2025-31258 with this PoC demonstrating partial sandbox escape using RemoteViewServices for practical 1-day security practice.",
"fork": false,
"created_at": "2020-06-23T15:20:11Z",
"updated_at": "2026-06-28T06:40:12Z",
"pushed_at": "2026-06-28T06:40:09Z",
"updated_at": "2026-06-28T11:49:46Z",
"pushed_at": "2026-06-28T11:49:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-32463.json
+6 -6
View File
@@ -14,10 +14,10 @@
"description": "Escalation of Privilege to the root through sudo binary with chroot option. CVE-2025-32463",
"fork": false,
"created_at": "2025-07-01T11:26:15Z",
"updated_at": "2026-06-14T02:42:00Z",
"updated_at": "2026-06-28T08:41:05Z",
"pushed_at": "2025-11-19T13:30:29Z",
"stargazers_count": 527,
"watchers_count": 527,
"stargazers_count": 528,
"watchers_count": 528,
"has_discussions": false,
"forks_count": 96,
"allow_forking": true,
@@ -46,7 +46,7 @@
],
"visibility": "public",
"forks": 96,
"watchers": 527,
"watchers": 528,
"score": 0,
"subscribers_count": 2
},
@@ -1595,8 +1595,8 @@
"description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.",
"fork": false,
"created_at": "2025-09-20T00:42:07Z",
"updated_at": "2026-06-28T06:41:03Z",
"pushed_at": "2026-06-28T06:41:00Z",
"updated_at": "2026-06-28T11:50:43Z",
"pushed_at": "2026-06-28T11:50:39Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-36911.json
+4 -4
View File
@@ -86,10 +86,10 @@
"description": "WPair is a defensive security research tool that demonstrates the CVE-2025-36911 (eg WhisperPair) vulnerability in Google's Fast Pair protocol. This vulnerability affects millions of Bluetooth audio devices worldwide, allowing unauthorized pairing and potential microphone access without user consent.",
"fork": false,
"created_at": "2026-01-17T05:28:08Z",
"updated_at": "2026-06-25T12:22:52Z",
"updated_at": "2026-06-28T11:23:35Z",
"pushed_at": "2026-01-18T00:15:59Z",
"stargazers_count": 804,
"watchers_count": 804,
"stargazers_count": 805,
"watchers_count": 805,
"has_discussions": false,
"forks_count": 90,
"allow_forking": true,
@@ -100,7 +100,7 @@
"topics": [],
"visibility": "public",
"forks": 90,
"watchers": 804,
"watchers": 805,
"score": 0,
"subscribers_count": 22
},
2025/CVE-2025-38352.json
+6 -6
View File
@@ -47,12 +47,12 @@
"description": "Android kernel exploit for CVE-2025-38352, previously exploited in-the-wild. Targets vulnerable x86_64 Linux kernels v5.10.x.",
"fork": false,
"created_at": "2026-01-03T16:52:18Z",
"updated_at": "2026-06-27T15:46:17Z",
"updated_at": "2026-06-28T11:01:15Z",
"pushed_at": "2026-01-05T03:45:37Z",
"stargazers_count": 303,
"watchers_count": 303,
"stargazers_count": 304,
"watchers_count": 304,
"has_discussions": false,
"forks_count": 46,
"forks_count": 47,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,8 +60,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 46,
"watchers": 303,
"forks": 47,
"watchers": 304,
"score": 0,
"subscribers_count": 2
},
2025/CVE-2025-49844.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.",
"fork": false,
"created_at": "2019-04-13T07:51:09Z",
"updated_at": "2026-06-28T04:07:58Z",
"pushed_at": "2026-06-28T04:07:54Z",
"updated_at": "2026-06-28T12:02:26Z",
"pushed_at": "2026-06-28T12:02:22Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
"fork": false,
"created_at": "2022-04-06T09:27:39Z",
"updated_at": "2026-06-28T04:08:34Z",
"pushed_at": "2026-06-28T04:08:30Z",
"updated_at": "2026-06-28T12:02:57Z",
"pushed_at": "2026-06-28T12:02:54Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-52915.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-06-28T05:39:31Z",
"updated_at": "2026-06-28T07:51:58Z",
"pushed_at": "2026-06-28T05:39:27Z",
"stargazers_count": 823,
"watchers_count": 823,
"stargazers_count": 824,
"watchers_count": 824,
"has_discussions": false,
"forks_count": 121,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 121,
"watchers": 823,
"watchers": 824,
"score": 0,
"subscribers_count": 19
}
2025/CVE-2025-54424.json
+2 -2
View File
@@ -53,8 +53,8 @@
"description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐",
"fork": false,
"created_at": "2025-08-14T05:16:16Z",
"updated_at": "2026-06-28T06:36:31Z",
"pushed_at": "2026-06-28T06:36:28Z",
"updated_at": "2026-06-28T11:45:53Z",
"pushed_at": "2026-06-28T11:45:50Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2025/CVE-2025-55182.json
+30 -30
View File
@@ -14,8 +14,8 @@
"description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.",
"fork": false,
"created_at": "2022-06-17T10:19:10Z",
"updated_at": "2026-06-28T04:27:29Z",
"pushed_at": "2026-06-28T04:27:26Z",
"updated_at": "2026-06-28T12:22:21Z",
"pushed_at": "2026-06-28T12:22:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -99,8 +99,8 @@
"description": null,
"fork": false,
"created_at": "2024-11-29T12:32:19Z",
"updated_at": "2026-06-28T04:28:01Z",
"pushed_at": "2026-06-28T04:27:58Z",
"updated_at": "2026-06-28T12:22:58Z",
"pushed_at": "2026-06-28T12:22:55Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -148,8 +148,8 @@
"description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
"fork": false,
"created_at": "2025-06-06T16:34:46Z",
"updated_at": "2026-06-28T04:27:41Z",
"pushed_at": "2026-06-28T04:27:37Z",
"updated_at": "2026-06-28T12:22:49Z",
"pushed_at": "2026-06-28T12:22:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -233,10 +233,10 @@
"description": "CVE-2025-55182 POC",
"fork": false,
"created_at": "2025-12-03T21:16:22Z",
"updated_at": "2026-06-25T07:36:25Z",
"updated_at": "2026-06-28T08:40:09Z",
"pushed_at": "2025-12-08T21:21:26Z",
"stargazers_count": 797,
"watchers_count": 797,
"stargazers_count": 796,
"watchers_count": 796,
"has_discussions": false,
"forks_count": 205,
"allow_forking": true,
@@ -247,7 +247,7 @@
"topics": [],
"visibility": "public",
"forks": 205,
"watchers": 797,
"watchers": 796,
"score": 0,
"subscribers_count": 4
},
@@ -1335,10 +1335,10 @@
"description": "Actual CVE-2025-55182 detection and exploit. No bullshit LLMs.",
"fork": false,
"created_at": "2025-12-04T14:49:43Z",
"updated_at": "2026-06-06T19:45:07Z",
"updated_at": "2026-06-28T07:38:03Z",
"pushed_at": "2025-12-05T00:07:09Z",
"stargazers_count": 8,
"watchers_count": 8,
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -1349,7 +1349,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 8,
"watchers": 9,
"score": 0,
"subscribers_count": 0
},
@@ -3998,10 +3998,10 @@
"description": "Mass Hunting & Exploitation PoC for CVE-2025-55182 & CVE-2025-66478",
"fork": false,
"created_at": "2025-12-06T09:36:00Z",
"updated_at": "2026-01-29T13:46:17Z",
"updated_at": "2026-06-28T12:40:46Z",
"pushed_at": "2025-12-07T15:27:14Z",
"stargazers_count": 38,
"watchers_count": 38,
"stargazers_count": 37,
"watchers_count": 37,
"has_discussions": false,
"forks_count": 11,
"allow_forking": true,
@@ -4012,7 +4012,7 @@
"topics": [],
"visibility": "public",
"forks": 11,
"watchers": 38,
"watchers": 37,
"score": 0,
"subscribers_count": 0
},
@@ -4823,10 +4823,10 @@
"description": "React Shell & Next.js RSC Exploit Tool (CVE-2025-55182)",
"fork": false,
"created_at": "2025-12-06T21:54:13Z",
"updated_at": "2026-06-16T12:13:30Z",
"updated_at": "2026-06-28T12:38:50Z",
"pushed_at": "2025-12-12T11:11:17Z",
"stargazers_count": 251,
"watchers_count": 251,
"stargazers_count": 250,
"watchers_count": 250,
"has_discussions": false,
"forks_count": 58,
"allow_forking": true,
@@ -4837,7 +4837,7 @@
"topics": [],
"visibility": "public",
"forks": 58,
"watchers": 251,
"watchers": 250,
"score": 0,
"subscribers_count": 3
},
@@ -5698,10 +5698,10 @@
"description": "Torito React2Shell Scanner & Exploit Tool (CVE-2025-55182 \/ 66478)",
"fork": false,
"created_at": "2025-12-07T15:57:58Z",
"updated_at": "2026-04-17T21:30:58Z",
"updated_at": "2026-06-28T10:55:43Z",
"pushed_at": "2025-12-07T16:01:52Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -5718,7 +5718,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
@@ -11705,8 +11705,8 @@
"description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.",
"fork": false,
"created_at": "2025-12-24T14:48:19Z",
"updated_at": "2026-06-28T04:27:27Z",
"pushed_at": "2026-06-28T04:27:23Z",
"updated_at": "2026-06-28T12:22:19Z",
"pushed_at": "2026-06-28T12:22:16Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12223,8 +12223,8 @@
"description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
"fork": false,
"created_at": "2026-01-02T01:28:57Z",
"updated_at": "2026-06-28T04:31:13Z",
"pushed_at": "2026-06-28T04:31:10Z",
"updated_at": "2026-06-28T12:26:00Z",
"pushed_at": "2026-06-28T12:25:57Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-58440.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Remote Code Execution (RCE) via Polyglot File Attack and Null Byte Injection on Laravel FileManager",
"fork": false,
"created_at": "2025-09-04T23:42:23Z",
"updated_at": "2026-05-10T06:56:51Z",
"updated_at": "2026-06-28T12:39:04Z",
"pushed_at": "2025-09-05T00:41:43Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 4,
"watchers": 3,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-66398.json
+2 -2
View File
@@ -64,8 +64,8 @@
"description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.",
"fork": false,
"created_at": "2026-03-23T09:09:21Z",
"updated_at": "2026-06-28T05:11:18Z",
"pushed_at": "2026-06-28T05:11:14Z",
"updated_at": "2026-06-28T10:13:40Z",
"pushed_at": "2026-06-28T10:13:35Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-66478.json
+6 -6
View File
@@ -14,8 +14,8 @@
"description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.",
"fork": false,
"created_at": "2025-10-01T07:40:09Z",
"updated_at": "2026-06-28T04:28:53Z",
"pushed_at": "2026-06-28T04:28:49Z",
"updated_at": "2026-06-28T12:23:23Z",
"pushed_at": "2026-06-28T12:23:19Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -200,10 +200,10 @@
"description": "React2Shell Ultimate - The most comprehensive CVE-2025-66478 Scanner for Next.js RSC RCE vulnerability. Multi-mode detection, WAF bypass, local scanning.",
"fork": false,
"created_at": "2025-12-05T22:20:14Z",
"updated_at": "2026-06-15T17:15:01Z",
"updated_at": "2026-06-28T12:40:38Z",
"pushed_at": "2025-12-10T09:35:17Z",
"stargazers_count": 151,
"watchers_count": 151,
"stargazers_count": 150,
"watchers_count": 150,
"has_discussions": false,
"forks_count": 32,
"allow_forking": true,
@@ -225,7 +225,7 @@
],
"visibility": "public",
"forks": 32,
"watchers": 151,
"watchers": 150,
"score": 0,
"subscribers_count": 2
},
2025/CVE-2025-68921.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.",
"fork": false,
"created_at": "2026-01-24T21:00:41Z",
"updated_at": "2026-06-28T04:42:33Z",
"pushed_at": "2026-06-28T04:42:29Z",
"updated_at": "2026-06-28T12:37:48Z",
"pushed_at": "2026-06-28T12:37:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-69212.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": null,
"fork": false,
"created_at": "2026-06-27T23:54:57Z",
"updated_at": "2026-06-28T00:13:09Z",
"updated_at": "2026-06-28T10:30:48Z",
"pushed_at": "2026-06-28T00:07:25Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 3,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-20841.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.",
"fork": false,
"created_at": "2024-09-22T12:19:06Z",
"updated_at": "2026-06-28T04:57:33Z",
"pushed_at": "2026-06-28T04:57:29Z",
"updated_at": "2026-06-28T09:58:53Z",
"pushed_at": "2026-06-28T09:58:50Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.",
"fork": false,
"created_at": "2026-02-26T05:21:28Z",
"updated_at": "2026-06-28T04:56:12Z",
"pushed_at": "2026-06-28T04:56:08Z",
"updated_at": "2026-06-28T09:58:06Z",
"pushed_at": "2026-06-28T09:58:03Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-23744.json
+33
View File
@@ -602,5 +602,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1282988237,
"name": "DevHub-HTB-Walkthrough",
"full_name": "timgad794\/DevHub-HTB-Walkthrough",
"owner": {
"login": "timgad794",
"id": 179246530,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/179246530?v=4",
"html_url": "https:\/\/github.com\/timgad794",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/timgad794\/DevHub-HTB-Walkthrough",
"description": "Hack The Box - DevHub Machine Walkthrough (Medium Linux, CVE-2026-23744, Chisel Tunneling, Jupyter, Root Privilege Escalation)",
"fork": false,
"created_at": "2026-06-28T12:29:30Z",
"updated_at": "2026-06-28T12:29:30Z",
"pushed_at": "2026-06-28T12:29:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-24061.json
+2 -2
View File
@@ -59,8 +59,8 @@
"description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.",
"fork": false,
"created_at": "2026-02-03T19:46:10Z",
"updated_at": "2026-06-28T04:47:37Z",
"pushed_at": "2026-06-28T04:47:34Z",
"updated_at": "2026-06-28T12:43:06Z",
"pushed_at": "2026-06-28T12:43:03Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24291.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions",
"fork": false,
"created_at": "2026-03-26T04:38:27Z",
"updated_at": "2026-06-28T05:12:56Z",
"pushed_at": "2026-06-28T05:12:52Z",
"updated_at": "2026-06-28T10:15:20Z",
"pushed_at": "2026-06-28T10:15:16Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-2441.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.",
"fork": false,
"created_at": "2026-03-03T14:19:18Z",
"updated_at": "2026-06-28T04:59:16Z",
"pushed_at": "2026-06-28T04:59:10Z",
"updated_at": "2026-06-28T10:01:04Z",
"pushed_at": "2026-06-28T10:00:58Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-2472.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.",
"fork": false,
"created_at": "2026-03-10T14:40:04Z",
"updated_at": "2026-06-28T05:03:24Z",
"pushed_at": "2026-06-28T05:03:20Z",
"updated_at": "2026-06-28T10:05:30Z",
"pushed_at": "2026-06-28T10:05:26Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-26980.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "CVE-2026-26980 - Ghost CMS Content API SQL Injection",
"fork": false,
"created_at": "2026-06-26T05:57:53Z",
"updated_at": "2026-06-28T06:36:15Z",
"updated_at": "2026-06-28T07:50:05Z",
"pushed_at": "2026-06-26T08:48:23Z",
"stargazers_count": 9,
"watchers_count": 9,
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 9,
"watchers": 10,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-27654.json
+33
View File
@@ -36,5 +36,38 @@
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
{
"id": 1282909149,
"name": "CVE-2026-27654",
"full_name": "dead-lamer\/CVE-2026-27654",
"owner": {
"login": "dead-lamer",
"id": 55556930,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/55556930?v=4",
"html_url": "https:\/\/github.com\/dead-lamer",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/dead-lamer\/CVE-2026-27654",
"description": "Обзор n-day уязвимости на русском языке.",
"fork": false,
"created_at": "2026-06-28T10:34:29Z",
"updated_at": "2026-06-28T10:35:15Z",
"pushed_at": "2026-06-28T10:35:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-31431.json
+4 -79
View File
@@ -354,81 +354,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1225962329,
"name": "copy-fail",
"full_name": "Juguitos\/copy-fail",
"owner": {
"login": "Juguitos",
"id": 112290504,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/112290504?v=4",
"html_url": "https:\/\/github.com\/Juguitos",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Juguitos\/copy-fail",
"description": "CVE-2026-31431 - Copy Fail PoC (Python 3.10+)",
"fork": false,
"created_at": "2026-04-30T20:38:16Z",
"updated_at": "2026-06-25T18:36:55Z",
"pushed_at": "2026-05-09T17:48:00Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226065234,
"name": "Porting-CVE-2026-31431-Copy-Fail-to-a-Constrained-Java-Runner",
"full_name": "karollooool\/Porting-CVE-2026-31431-Copy-Fail-to-a-Constrained-Java-Runner",
"owner": {
"login": "karollooool",
"id": 76046300,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/76046300?v=4",
"html_url": "https:\/\/github.com\/karollooool",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/karollooool\/Porting-CVE-2026-31431-Copy-Fail-to-a-Constrained-Java-Runner",
"description": "CVE-2026-31431 (copy.fail) — adapted for constrained Java execution environments via FFM syscall layer + javac annotation processor delivery",
"fork": false,
"created_at": "2026-05-01T00:01:07Z",
"updated_at": "2026-05-10T09:51:39Z",
"pushed_at": "2026-05-10T09:51:35Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"af-alg",
"copyfail",
"cve-2026-31431",
"java",
"linux-kernel",
"lpe",
"page-cache",
"security-research"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 1
},
{
"id": 1226206997,
"name": "d8-copy-fail-mitigation",
@@ -831,8 +756,8 @@
"description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.",
"fork": false,
"created_at": "2026-05-05T04:58:21Z",
"updated_at": "2026-06-28T05:31:24Z",
"pushed_at": "2026-06-28T05:31:20Z",
"updated_at": "2026-06-28T10:34:18Z",
"pushed_at": "2026-06-28T10:34:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -880,8 +805,8 @@
"description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.",
"fork": false,
"created_at": "2026-05-06T09:49:14Z",
"updated_at": "2026-06-28T05:31:59Z",
"pushed_at": "2026-06-28T05:31:55Z",
"updated_at": "2026-06-28T10:34:51Z",
"pushed_at": "2026-06-28T10:34:48Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-31802.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"fork": false,
"created_at": "2026-03-28T20:49:46Z",
"updated_at": "2026-06-28T05:14:05Z",
"pushed_at": "2026-06-28T05:14:02Z",
"updated_at": "2026-06-28T10:16:35Z",
"pushed_at": "2026-06-28T10:16:31Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-3227.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": null,
"fork": false,
"created_at": "2026-06-25T16:31:07Z",
"updated_at": "2026-06-28T04:27:51Z",
"updated_at": "2026-06-28T10:40:58Z",
"pushed_at": "2026-06-25T16:34:33Z",
"stargazers_count": 25,
"watchers_count": 25,
"stargazers_count": 31,
"watchers_count": 31,
"has_discussions": false,
"forks_count": 7,
"forks_count": 9,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 7,
"watchers": 25,
"forks": 9,
"watchers": 31,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-33150.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 1191314137,
"name": "abhinavagarwal07.github.io",
"full_name": "abhinavagarwal07\/abhinavagarwal07.github.io",
"owner": {
"login": "abhinavagarwal07",
"id": 8086316,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8086316?v=4",
"html_url": "https:\/\/github.com\/abhinavagarwal07",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/abhinavagarwal07\/abhinavagarwal07.github.io",
"description": "RingWraith: CVE-2026-33150 and CVE-2026-33179 — Use-After-Free and NULL Dereference in libfuse io_uring",
"fork": false,
"created_at": "2026-03-25T05:48:59Z",
"updated_at": "2026-05-10T07:34:41Z",
"pushed_at": "2026-05-10T07:34:36Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": true,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-33825.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-33825",
"fork": false,
"created_at": "2026-05-18T16:28:47Z",
"updated_at": "2026-05-30T22:02:52Z",
"updated_at": "2026-06-28T10:30:51Z",
"pushed_at": "2026-05-20T10:31:24Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-3437.json
+8 -6
View File
@@ -1,8 +1,8 @@
[
{
"id": 1270345747,
"name": "cve-2026-3437",
"full_name": "tihomirocrew\/cve-2026-3437",
"name": "portwell-lpe",
"full_name": "tihomirocrew\/portwell-lpe",
"owner": {
"login": "tihomirocrew",
"id": 90578343,
@@ -10,11 +10,11 @@
"html_url": "https:\/\/github.com\/tihomirocrew",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/tihomirocrew\/cve-2026-3437",
"description": "Arbitrary physical memory read\/write in portwell.sys",
"html_url": "https:\/\/github.com\/tihomirocrew\/portwell-lpe",
"description": "PoC exploit for CVE-2026-3437: Arbitrary physical memory read\/write leading to LPE in portwell.sys.",
"fork": false,
"created_at": "2026-06-15T16:12:37Z",
"updated_at": "2026-06-15T19:37:20Z",
"updated_at": "2026-06-28T08:01:59Z",
"pushed_at": "2026-06-15T19:37:16Z",
"stargazers_count": 0,
"watchers_count": 0,
@@ -25,7 +25,9 @@
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"topics": [
"cve-2026-3437"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
2026/CVE-2026-3609.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-06-28T05:39:31Z",
"updated_at": "2026-06-28T07:51:58Z",
"pushed_at": "2026-06-28T05:39:27Z",
"stargazers_count": 823,
"watchers_count": 823,
"stargazers_count": 824,
"watchers_count": 824,
"has_discussions": false,
"forks_count": 121,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 121,
"watchers": 823,
"watchers": 824,
"score": 0,
"subscribers_count": 19
},
2026/CVE-2026-38444.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1252698449,
"name": "cve-disclosures",
"full_name": "fr3akhacks\/cve-disclosures",
"owner": {
"login": "fr3akhacks",
"id": 96869992,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/96869992?v=4",
"html_url": "https:\/\/github.com\/fr3akhacks",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/fr3akhacks\/cve-disclosures",
"description": "Security advisories \/ CVE references for osTicket 1.18.3 (CVE-2026-38444, 38446, 38447)",
"fork": false,
"created_at": "2026-05-28T19:27:24Z",
"updated_at": "2026-06-28T07:53:13Z",
"pushed_at": "2026-05-28T19:29:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-41179.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1282965311,
"name": "CVE-2026-41179",
"full_name": "pssec-io\/CVE-2026-41179",
"owner": {
"login": "pssec-io",
"id": 297554486,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/297554486?v=4",
"html_url": "https:\/\/github.com\/pssec-io",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/pssec-io\/CVE-2026-41179",
"description": "POC for CVE-2026-41179",
"fork": false,
"created_at": "2026-06-28T11:58:59Z",
"updated_at": "2026-06-28T12:02:20Z",
"pushed_at": "2026-06-28T12:02:16Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-41940.json
+40 -2
View File
@@ -225,8 +225,8 @@
"description": "Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.",
"fork": false,
"created_at": "2026-05-06T18:08:48Z",
"updated_at": "2026-06-28T05:32:17Z",
"pushed_at": "2026-06-28T05:32:13Z",
"updated_at": "2026-06-28T10:35:10Z",
"pushed_at": "2026-06-28T10:35:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -626,5 +626,43 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1282773048,
"name": "CVE-2026-41940-PoC",
"full_name": "aquace\/CVE-2026-41940-PoC",
"owner": {
"login": "aquace",
"id": 32766565,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32766565?v=4",
"html_url": "https:\/\/github.com\/aquace",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/aquace\/CVE-2026-41940-PoC",
"description": "CVE-2026-41940 authentication bypass vulnerability proof-of-concept",
"fork": false,
"created_at": "2026-06-28T07:13:52Z",
"updated_at": "2026-06-28T07:44:45Z",
"pushed_at": "2026-06-28T07:42:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cpanel",
"cve",
"cve-2026-41940",
"cve-2026-41940-poc"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-42208.json
-43
View File
@@ -1,47 +1,4 @@
[
{
"id": 1234297570,
"name": "threat-intel-brief-cve-2026-42208-litellm",
"full_name": "Zeltoc\/threat-intel-brief-cve-2026-42208-litellm",
"owner": {
"login": "Zeltoc",
"id": 133629778,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/133629778?v=4",
"html_url": "https:\/\/github.com\/Zeltoc",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Zeltoc\/threat-intel-brief-cve-2026-42208-litellm",
"description": "Threat intelligence brief on CVE-2026-42208, a critical pre-auth SQL injection in BerriAI LiteLLM exploited within 36 hours of disclosure. Covers attack path, detection opportunities, and recommended actions.",
"fork": false,
"created_at": "2026-05-10T02:07:25Z",
"updated_at": "2026-05-10T02:09:59Z",
"pushed_at": "2026-05-10T02:08:32Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"ai-security",
"blue-team",
"cisa-kev",
"cve",
"cybersecurity",
"litellm",
"sql-injection",
"threat-intelligence",
"vulnerability-analysis"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1234609901,
"name": "CVE-2026-42208-Lab",
2026/CVE-2026-43284.json
-66
View File
@@ -121,72 +121,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1234132935,
"name": "dirtyfrag-patches",
"full_name": "metalx1993\/dirtyfrag-patches",
"owner": {
"login": "metalx1993",
"id": 5858954,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5858954?v=4",
"html_url": "https:\/\/github.com\/metalx1993",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/metalx1993\/dirtyfrag-patches",
"description": "Kernel patches for Dirty Frag vulnerability (CVE-2026-43284, CVE-2026-43500)",
"fork": false,
"created_at": "2026-05-09T19:43:33Z",
"updated_at": "2026-05-09T19:54:32Z",
"pushed_at": "2026-05-09T19:54:29Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1234336664,
"name": "CVE-2026-43284-",
"full_name": "ryan2929\/CVE-2026-43284-",
"owner": {
"login": "ryan2929",
"id": 31983296,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/31983296?v=4",
"html_url": "https:\/\/github.com\/ryan2929",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ryan2929\/CVE-2026-43284-",
"description": null,
"fork": false,
"created_at": "2026-05-10T03:44:06Z",
"updated_at": "2026-05-10T03:51:03Z",
"pushed_at": "2026-05-10T03:50:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1234352356,
"name": "dirtyfrag-arm64",
2026/CVE-2026-44578.json
+1 -1
View File
@@ -47,7 +47,7 @@
"description": "NextSSRF — CVE-2026-44578 Scanner & Exploit ║ ║ Next.js WebSocket Upgrade Handler SSRF",
"fork": false,
"created_at": "2026-05-15T05:02:38Z",
"updated_at": "2026-06-24T12:49:11Z",
"updated_at": "2026-06-28T12:33:53Z",
"pushed_at": "2026-05-15T05:09:54Z",
"stargazers_count": 75,
"watchers_count": 75,
2026/CVE-2026-45585.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Manage and recover BitLocker encrypted drives with this tool for Windows 11 recovery key management and educational study of CVE-2026-45585.",
"fork": false,
"created_at": "2026-06-16T07:21:36Z",
"updated_at": "2026-06-28T05:38:33Z",
"pushed_at": "2026-06-28T05:38:30Z",
"updated_at": "2026-06-28T10:41:45Z",
"pushed_at": "2026-06-28T10:41:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-46331.json
+39 -6
View File
@@ -14,12 +14,12 @@
"description": "PACKET_EDIT_MEME.c (aka CVE-2026-46331): yet another page cache poisoning nightmare",
"fork": false,
"created_at": "2026-06-17T04:09:56Z",
"updated_at": "2026-06-28T05:19:16Z",
"updated_at": "2026-06-28T11:26:14Z",
"pushed_at": "2026-06-17T04:55:06Z",
"stargazers_count": 76,
"watchers_count": 76,
"stargazers_count": 77,
"watchers_count": 77,
"has_discussions": false,
"forks_count": 20,
"forks_count": 21,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 20,
"watchers": 76,
"forks": 21,
"watchers": 77,
"score": 0,
"subscribers_count": 1
},
@@ -97,5 +97,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1282941941,
"name": "dirtyclone-exploit",
"full_name": "vulnquest58\/dirtyclone-exploit",
"owner": {
"login": "vulnquest58",
"id": 202430906,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/202430906?v=4",
"html_url": "https:\/\/github.com\/vulnquest58",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/vulnquest58\/dirtyclone-exploit",
"description": "CVE-2026-46331 — Linux Kernel Local Privilege Escalation TC pedit + IPsec TEE Page Cache Corruption · Affected kernels: ≤ 6.12.9",
"fork": false,
"created_at": "2026-06-28T11:24:14Z",
"updated_at": "2026-06-28T12:42:46Z",
"pushed_at": "2026-06-28T11:46:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-48907.json
+8 -8
View File
@@ -85,7 +85,7 @@
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 2,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -93,7 +93,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"forks": 3,
"watchers": 2,
"score": 0,
"subscribers_count": 1
@@ -311,12 +311,12 @@
"description": "cve-2026-48907 scanner",
"fork": false,
"created_at": "2026-06-27T04:48:09Z",
"updated_at": "2026-06-28T06:35:42Z",
"updated_at": "2026-06-28T11:10:47Z",
"pushed_at": "2026-06-27T05:25:46Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 3,
"forks_count": 6,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -324,8 +324,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 5,
"forks": 6,
"watchers": 9,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-9082.json
+4 -4
View File
@@ -183,10 +183,10 @@
"description": "Drupal CVE-2026-9082 Blind SQL Injection Checker",
"fork": false,
"created_at": "2026-05-24T02:00:04Z",
"updated_at": "2026-06-17T17:31:55Z",
"updated_at": "2026-06-28T09:44:26Z",
"pushed_at": "2026-05-24T09:00:30Z",
"stargazers_count": 6,
"watchers_count": 6,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -197,7 +197,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 6,
"watchers": 7,
"score": 0,
"subscribers_count": 0
},
README.md
+23 -20
View File
@@ -284,7 +284,7 @@
<code>An improper restriction of operations within the bounds of a memory buffer vulnerability in Portwell Engineering Toolkits version 4.8.2 could allow a local authenticated attacker to read and write to arbitrary memory via the Portwell Engineering Toolkits driver. Successful exploitation of this vulnerability could result in escalation of privileges or cause a denial-of-service condition.
</code>
- [tihomirocrew/cve-2026-3437](https://github.com/tihomirocrew/cve-2026-3437)
- [tihomirocrew/portwell-lpe](https://github.com/tihomirocrew/portwell-lpe)
### CVE-2026-3494 (2026-03-03)
@@ -1351,6 +1351,7 @@
- [kennedy-aikohi/mcpjam-cve-2026-23744-validator](https://github.com/kennedy-aikohi/mcpjam-cve-2026-23744-validator)
- [rohit-sundar/cve-2026-23744](https://github.com/rohit-sundar/cve-2026-23744)
- [daemoncibsec/mcpExec](https://github.com/daemoncibsec/mcpExec)
- [timgad794/DevHub-HTB-Walkthrough](https://github.com/timgad794/DevHub-HTB-Walkthrough)
### CVE-2026-23760 (2026-01-22)
@@ -1609,6 +1610,7 @@
</code>
- [JohannesLks/CVE-2026-27654](https://github.com/JohannesLks/CVE-2026-27654)
- [dead-lamer/CVE-2026-27654](https://github.com/dead-lamer/CVE-2026-27654)
### CVE-2026-27771
- [HORKimhab/CVE-2026-27771](https://github.com/HORKimhab/CVE-2026-27771)
@@ -1762,8 +1764,6 @@
- [yandex-cloud-examples/yc-mk8s-copy-fail-mitigation](https://github.com/yandex-cloud-examples/yc-mk8s-copy-fail-mitigation)
- [JuanBindez/CVE-2026-31431](https://github.com/JuanBindez/CVE-2026-31431)
- [selectel/mks-copy-fail-mitigation](https://github.com/selectel/mks-copy-fail-mitigation)
- [Juguitos/copy-fail](https://github.com/Juguitos/copy-fail)
- [karollooool/Porting-CVE-2026-31431-Copy-Fail-to-a-Constrained-Java-Runner](https://github.com/karollooool/Porting-CVE-2026-31431-Copy-Fail-to-a-Constrained-Java-Runner)
- [deckhouse/d8-copy-fail-mitigation](https://github.com/deckhouse/d8-copy-fail-mitigation)
- [HulnotHutu/CVE-2026-31431](https://github.com/HulnotHutu/CVE-2026-31431)
- [K3ysTr0K3R/CVE-2026-31431-EXPLOIT](https://github.com/K3ysTr0K3R/CVE-2026-31431-EXPLOIT)
@@ -1915,13 +1915,6 @@
- [0xmrma/CVE-2026-33146](https://github.com/0xmrma/CVE-2026-33146)
### CVE-2026-33150 (2026-03-20)
<code>libfuse is the reference implementation of the Linux FUSE. From version 3.18.0 to before version 3.18.2, a use-after-free vulnerability in the io_uring subsystem of libfuse allows a local attacker to crash FUSE filesystem processes and potentially execute arbitrary code. When io_uring thread creation fails due to resource exhaustion (e.g., cgroup pids.max), fuse_uring_start() frees the ring pool structure but stores the dangling pointer in the session state, leading to a use-after-free when the session shuts down. The trigger is reliable in containerized environments where cgroup pids.max limits naturally constrain thread creation. This issue has been patched in version 3.18.2.
</code>
- [abhinavagarwal07/abhinavagarwal07.github.io](https://github.com/abhinavagarwal07/abhinavagarwal07.github.io)
### CVE-2026-33320 (2026-03-24)
<code>Dasel is a command-line tool and library for querying, modifying, and transforming data structures. Starting in version 3.0.0 and prior to version 3.3.1, Dasel's YAML reader allows an attacker who can supply YAML for processing to trigger extreme CPU and memory consumption. The issue is in the library's own `UnmarshalYAML` implementation, which manually resolves alias nodes by recursively following `yaml.Node.Alias` pointers without any expansion budget, bypassing go-yaml v4's built-in alias expansion limit. Version 3.3.2 contains a patch for the issue.
@@ -2313,6 +2306,9 @@
- [sermikr0/CVE-2026-38427](https://github.com/sermikr0/CVE-2026-38427)
### CVE-2026-38444
- [fr3akhacks/cve-disclosures](https://github.com/fr3akhacks/cve-disclosures)
### CVE-2026-38526 (2026-04-14)
<code>An authenticated arbitrary file upload vulnerability in the /admin/tinymce/upload endpoint of Webkul Krayin CRM v2.2.x allows attackers to execute arbitrary code via uploading a crafted PHP file.
@@ -2557,6 +2553,13 @@
- [TwoSevenOneT/CVE-2026-41096-Attack-Surface](https://github.com/TwoSevenOneT/CVE-2026-41096-Attack-Surface)
- [personnumber3377/dns_client_fuzzing](https://github.com/personnumber3377/dns_client_fuzzing)
### CVE-2026-41179 (2026-04-23)
<code>Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Starting in version 1.48.0 and prior to version 1.73.5, the RC endpoint `operations/fsinfo` is exposed without `AuthRequired: true` and accepts attacker-controlled `fs` input. Because `rc.GetFs(...)` supports inline backend definitions, an unauthenticated attacker can instantiate an attacker-controlled backend on demand. For the WebDAV backend, `bearer_token_command` is executed during backend initialization, making single-request unauthenticated local command execution possible on reachable RC deployments without global HTTP authentication. Version 1.73.5 patches the issue.
</code>
- [pssec-io/CVE-2026-41179](https://github.com/pssec-io/CVE-2026-41179)
### CVE-2026-41200 (2026-04-23)
<code>STIG Manager is an API and web client for managing Security Technical Implementation Guides (STIG) assessments of Information Systems. Versions 1.5.10 through 1.6.7 have a reflected Cross-Site Scripting (XSS) vulnerability in the OIDC authentication error handling code in `src/init.js` and `public/reauth.html`. During the OIDC redirect flow, the `error` and `error_description` query parameters returned by the OIDC provider are written directly to the DOM via `innerHTML` without HTML escaping. An attacker who can craft a malicious redirect URL and convince a user to follow it can execute arbitrary JavaScript in the application's origin context. The vulnerability is most severe when the targeted user has an active STIG Manager session running in another browser tab — injected code executes in the same origin and can communicate with the SharedWorker managing the active access token, enabling authenticated API requests on behalf of the victim including reading and modifying collection data. The vulnerability is patched in version 1.6.8. There is no workaround short of upgrading. Deployments behind a web application firewall that filters reflected XSS payloads in query parameters may have partial mitigation, but this is not a substitute for patching.
@@ -2623,6 +2626,7 @@
- [willygailo/CVE-2026-41940-Linux](https://github.com/willygailo/CVE-2026-41940-Linux)
- [yurahshell/CVE-2026-41940](https://github.com/yurahshell/CVE-2026-41940)
- [asdasddqwdq29-a11y/CVE-2026-41940](https://github.com/asdasddqwdq29-a11y/CVE-2026-41940)
- [aquace/CVE-2026-41940-PoC](https://github.com/aquace/CVE-2026-41940-PoC)
### CVE-2026-42048 (2026-05-12)
@@ -2671,7 +2675,6 @@
<code>LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.81.16 to before version 1.83.7, a database query used during proxy API key checks mixed the caller-supplied key value into the query text instead of passing it as a separate parameter. An unauthenticated attacker could send a specially crafted Authorization header to any LLM API route (for example POST /chat/completions) and reach this query through the proxy's error-handling path. An attacker could read data from the proxy's database and may be able to modify it, leading to unauthorised access to the proxy and the credentials it manages. This issue has been patched in version 1.83.7.
</code>
- [Zeltoc/threat-intel-brief-cve-2026-42208-litellm](https://github.com/Zeltoc/threat-intel-brief-cve-2026-42208-litellm)
- [rootdirective-sec/CVE-2026-42208-Lab](https://github.com/rootdirective-sec/CVE-2026-42208-Lab)
- [ridhinva/litellm-sqli-scanner](https://github.com/ridhinva/litellm-sqli-scanner)
- [HAERIN-L/poc_cve-2026-42208](https://github.com/HAERIN-L/poc_cve-2026-42208)
@@ -2829,8 +2832,6 @@
- [mym0us3r/DIRTY-FRAG-Detection-with-Wazuh-4.14.4](https://github.com/mym0us3r/DIRTY-FRAG-Detection-with-Wazuh-4.14.4)
- [suominen/CVE-2026-43284](https://github.com/suominen/CVE-2026-43284)
- [haydenjames/dirty-frag-check](https://github.com/haydenjames/dirty-frag-check)
- [metalx1993/dirtyfrag-patches](https://github.com/metalx1993/dirtyfrag-patches)
- [ryan2929/CVE-2026-43284-](https://github.com/ryan2929/CVE-2026-43284-)
- [linnemanlabs/dirtyfrag-arm64](https://github.com/linnemanlabs/dirtyfrag-arm64)
- [gagaltotal/CVE-2026-43284-CVE-2026-43500-scan](https://github.com/gagaltotal/CVE-2026-43284-CVE-2026-43500-scan)
- [Aiyakami/rust_dirtyfrag](https://github.com/Aiyakami/rust_dirtyfrag)
@@ -3182,6 +3183,7 @@
- [sgkdev/packet_edit_meme](https://github.com/sgkdev/packet_edit_meme)
- [0xBlackash/CVE-2026-46331](https://github.com/0xBlackash/CVE-2026-46331)
- [HORKimhab/CVE-2026-46331](https://github.com/HORKimhab/CVE-2026-46331)
- [vulnquest58/dirtyclone-exploit](https://github.com/vulnquest58/dirtyclone-exploit)
### CVE-2026-46333 (2026-05-15)
@@ -22011,13 +22013,6 @@
- [MathSabo/CVE-2024-33297](https://github.com/MathSabo/CVE-2024-33297)
### CVE-2024-33298 (2025-01-10)
<code>Microweber Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the create new backup function in the endpoint /admin/module/view?type=admin__backup
</code>
- [MathSabo/CVE-2024-33298](https://github.com/MathSabo/CVE-2024-33298)
### CVE-2024-33299 (2025-01-10)
<code>Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the First Name and Last Name parameters in the endpoint /admin/module/view?type=users
@@ -23062,6 +23057,13 @@
- [abanop22333/Apache-Authentication-Flaw-Research-CVE-2024-38476-](https://github.com/abanop22333/Apache-Authentication-Flaw-Research-CVE-2024-38476-)
### CVE-2024-38513 (2024-07-01)
<code>Fiber is an Express-inspired web framework written in Go A vulnerability present in versions prior to 2.52.5 is a session middleware issue in GoFiber versions 2 and above. This vulnerability allows users to supply their own session_id value, resulting in the creation of a session with that key. If a website relies on the mere presence of a session for security purposes, this can lead to significant security risks, including unauthorized access and session fixation attacks. All users utilizing GoFiber's session middleware in the affected versions are impacted. The issue has been addressed in version 2.52.5. Users are strongly encouraged to upgrade to version 2.52.5 or higher to mitigate this vulnerability. Users who are unable to upgrade immediately can apply the following workarounds to reduce the risk: Either implement additional validation to ensure session IDs are not supplied by the user and are securely generated by the server, or regularly rotate session IDs and enforce strict session expiration policies.
</code>
- [Oyeonseok/GoFiber-CVE-2024-38513](https://github.com/Oyeonseok/GoFiber-CVE-2024-38513)
### CVE-2024-38526 (2024-06-25)
<code>pdoc provides API Documentation for Python Projects. Documentation generated with `pdoc --math` linked to JavaScript files from polyfill.io. The polyfill.io CDN has been sold and now serves malicious code. This issue has been fixed in pdoc 14.5.1.
@@ -69352,6 +69354,7 @@
- [GoRuGoo/poodle-attack-sandbox](https://github.com/GoRuGoo/poodle-attack-sandbox)
- [josecl200/VC-PoodlePOC](https://github.com/josecl200/VC-PoodlePOC)
- [jmonge12/Home-Network-Vulnerability-Assessment](https://github.com/jmonge12/Home-Network-Vulnerability-Assessment)
- [Karma4488/CVE-2014-3566](https://github.com/Karma4488/CVE-2014-3566)
### CVE-2014-3570 (2015-01-09)