nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/08/31 07:24:08

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-08-31 16:24:08 +09:00
1 parent 1e305b0151
commit 689636a635
52 files changed
+361 -243
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2014/CVE-2014-4210.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883",
"fork": false,
"created_at": "2020-01-15T04:26:29Z",
"updated_at": "2026-08-21T17:18:01Z",
"updated_at": "2026-08-31T01:49:46Z",
"pushed_at": "2023-11-24T09:21:56Z",
"stargazers_count": 2073,
"watchers_count": 2073,
"stargazers_count": 2074,
"watchers_count": 2074,
"has_discussions": true,
"forks_count": 325,
"allow_forking": true,
@@ -82,7 +82,7 @@
],
"visibility": "public",
"forks": 325,
"watchers": 2073,
"watchers": 2074,
"score": 0,
"subscribers_count": 33
},
2016/CVE-2016-0638.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883",
"fork": false,
"created_at": "2020-01-15T04:26:29Z",
"updated_at": "2026-08-21T17:18:01Z",
"updated_at": "2026-08-31T01:49:46Z",
"pushed_at": "2023-11-24T09:21:56Z",
"stargazers_count": 2073,
"watchers_count": 2073,
"stargazers_count": 2074,
"watchers_count": 2074,
"has_discussions": true,
"forks_count": 325,
"allow_forking": true,
@@ -49,7 +49,7 @@
],
"visibility": "public",
"forks": 325,
"watchers": 2073,
"watchers": 2074,
"score": 0,
"subscribers_count": 33
},
2017/CVE-2017-3248.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883",
"fork": false,
"created_at": "2020-01-15T04:26:29Z",
"updated_at": "2026-08-21T17:18:01Z",
"updated_at": "2026-08-31T01:49:46Z",
"pushed_at": "2023-11-24T09:21:56Z",
"stargazers_count": 2073,
"watchers_count": 2073,
"stargazers_count": 2074,
"watchers_count": 2074,
"has_discussions": true,
"forks_count": 325,
"allow_forking": true,
@@ -82,7 +82,7 @@
],
"visibility": "public",
"forks": 325,
"watchers": 2073,
"watchers": 2074,
"score": 0,
"subscribers_count": 33
},
2018/CVE-2018-2628.json
+4 -4
View File
@@ -612,10 +612,10 @@
"description": "weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883",
"fork": false,
"created_at": "2020-01-15T04:26:29Z",
"updated_at": "2026-08-21T17:18:01Z",
"updated_at": "2026-08-31T01:49:46Z",
"pushed_at": "2023-11-24T09:21:56Z",
"stargazers_count": 2073,
"watchers_count": 2073,
"stargazers_count": 2074,
"watchers_count": 2074,
"has_discussions": true,
"forks_count": 325,
"allow_forking": true,
@@ -647,7 +647,7 @@
],
"visibility": "public",
"forks": 325,
"watchers": 2073,
"watchers": 2074,
"score": 0,
"subscribers_count": 33
},
2019/CVE-2019-11043.json
+4 -4
View File
@@ -278,10 +278,10 @@
"description": "(PoC) Python version of CVE-2019-11043 exploit by neex",
"fork": false,
"created_at": "2019-10-28T11:09:06Z",
"updated_at": "2026-04-27T05:20:45Z",
"updated_at": "2026-08-31T01:48:55Z",
"pushed_at": "2019-10-29T15:47:02Z",
"stargazers_count": 146,
"watchers_count": 146,
"stargazers_count": 147,
"watchers_count": 147,
"has_discussions": false,
"forks_count": 45,
"allow_forking": true,
@@ -292,7 +292,7 @@
"topics": [],
"visibility": "public",
"forks": 45,
"watchers": 146,
"watchers": 147,
"score": 0,
"subscribers_count": 8
},
2019/CVE-2019-2618.json
+4 -4
View File
@@ -212,10 +212,10 @@
"description": "weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883",
"fork": false,
"created_at": "2020-01-15T04:26:29Z",
"updated_at": "2026-08-21T17:18:01Z",
"updated_at": "2026-08-31T01:49:46Z",
"pushed_at": "2023-11-24T09:21:56Z",
"stargazers_count": 2073,
"watchers_count": 2073,
"stargazers_count": 2074,
"watchers_count": 2074,
"has_discussions": true,
"forks_count": 325,
"allow_forking": true,
@@ -247,7 +247,7 @@
],
"visibility": "public",
"forks": 325,
"watchers": 2073,
"watchers": 2074,
"score": 0,
"subscribers_count": 33
}
2020/CVE-2020-2551.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "weblogic 漏洞扫描工具。目前包含对以下漏洞的检测能力：CVE-2014-4210、CVE-2016-0638、CVE-2016-3510、CVE-2017-3248、CVE-2017-3506、CVE-2017-10271、CVE-2018-2628、CVE-2018-2893、CVE-2018-2894、CVE-2018-3191、CVE-2018-3245、CVE-2018-3252、CVE-2019-2618、CVE-2019-2725、CVE-2019-2729、CVE-2019-2890、CVE-2020-2551、CVE-2020-14750、CVE-2020-14882、CVE-2020-14883",
"fork": false,
"created_at": "2020-01-15T04:26:29Z",
"updated_at": "2026-08-21T17:18:01Z",
"updated_at": "2026-08-31T01:49:46Z",
"pushed_at": "2023-11-24T09:21:56Z",
"stargazers_count": 2073,
"watchers_count": 2073,
"stargazers_count": 2074,
"watchers_count": 2074,
"has_discussions": true,
"forks_count": 325,
"allow_forking": true,
@@ -49,7 +49,7 @@
],
"visibility": "public",
"forks": 325,
"watchers": 2073,
"watchers": 2074,
"score": 0,
"subscribers_count": 33
},
2020/CVE-2020-36762.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Security-research lab reproducing CVE-2020-36762 (GHSA-h9gr-83jq-f3xc): bash command injection via github.event.comment.body in the comment workflow of ONSdigital\/ras-collection-instrument",
"fork": false,
"created_at": "2026-08-31T00:34:14Z",
"updated_at": "2026-08-31T00:35:27Z",
"pushed_at": "2026-08-31T00:35:18Z",
"updated_at": "2026-08-31T01:10:22Z",
"pushed_at": "2026-08-31T01:10:04Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2020/CVE-2020-6418.json
+1 -1
View File
@@ -147,7 +147,7 @@
"fork": false,
"created_at": "2026-08-16T18:35:40Z",
"updated_at": "2026-08-24T03:03:48Z",
"pushed_at": "2026-08-16T18:39:11Z",
"pushed_at": "2026-08-31T05:35:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2021/CVE-2021-1931.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "Unlock the Meta Quest 1 bootloader and gain root access using GhostLock + CVE-2021-1931.",
"fork": false,
"created_at": "2026-07-31T05:37:56Z",
"updated_at": "2026-08-30T22:16:49Z",
"updated_at": "2026-08-31T03:00:28Z",
"pushed_at": "2026-08-28T12:08:00Z",
"stargazers_count": 160,
"watchers_count": 160,
"stargazers_count": 161,
"watchers_count": 161,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -108,7 +108,7 @@
],
"visibility": "public",
"forks": 7,
"watchers": 160,
"watchers": 161,
"score": 0,
"subscribers_count": 3
}
2021/CVE-2021-21423.json
+39
View File
@@ -0,0 +1,39 @@
[
{
"id": 1352015127,
"name": "gha-lab-b9842b12c0",
"full_name": "pvharmo2\/gha-lab-b9842b12c0",
"owner": {
"login": "pvharmo2",
"id": 304171033,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/304171033?v=4",
"html_url": "https:\/\/github.com\/pvharmo2",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/pvharmo2\/gha-lab-b9842b12c0",
"description": "Authorized security-research lab reproducing CVE-2021-21423 (GHSA-gg2g-m5wc-vccq): projen rebuild-bot pwn request via issue_comment",
"fork": false,
"created_at": "2026-08-31T05:06:44Z",
"updated_at": "2026-08-31T05:19:56Z",
"pushed_at": "2026-08-31T05:29:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"academic-research",
"github-actions",
"research-artifact"
],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2021/CVE-2021-33044.json
+8 -8
View File
@@ -14,10 +14,10 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2021-10-11T22:08:47Z",
"updated_at": "2026-08-24T14:49:15Z",
"updated_at": "2026-08-31T05:25:56Z",
"pushed_at": "2026-07-03T15:44:27Z",
"stargazers_count": 194,
"watchers_count": 194,
"stargazers_count": 195,
"watchers_count": 195,
"has_discussions": false,
"forks_count": 42,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 42,
"watchers": 194,
"watchers": 195,
"score": 0,
"subscribers_count": 9
},
@@ -146,10 +146,10 @@
"description": "Dahua IP camera CVE research toolkit (CVE-2021-33044\/33045, CVE-2025-31700\/31701)",
"fork": false,
"created_at": "2026-03-03T21:28:23Z",
"updated_at": "2026-08-21T13:38:10Z",
"updated_at": "2026-08-31T05:25:52Z",
"pushed_at": "2026-04-02T01:55:41Z",
"stargazers_count": 27,
"watchers_count": 27,
"stargazers_count": 28,
"watchers_count": 28,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -160,7 +160,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 27,
"watchers": 28,
"score": 0,
"subscribers_count": 2
},
2022/CVE-2022-46689.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": "Proof-of-concept app to overwrite fonts on iOS using CVE-2022-46689.",
"fork": false,
"created_at": "2022-12-26T06:56:35Z",
"updated_at": "2026-08-30T11:06:00Z",
"updated_at": "2026-08-31T05:04:03Z",
"pushed_at": "2023-08-02T09:35:14Z",
"stargazers_count": 890,
"watchers_count": 890,
"stargazers_count": 891,
"watchers_count": 891,
"has_discussions": false,
"forks_count": 78,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 78,
"watchers": 890,
"watchers": 891,
"score": 0,
"subscribers_count": 23
},
2024/CVE-2024-0670.json
+2 -2
View File
@@ -118,8 +118,8 @@
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
"fork": false,
"created_at": "2026-01-08T01:32:09Z",
"updated_at": "2026-08-30T19:10:29Z",
"pushed_at": "2026-08-30T19:09:35Z",
"updated_at": "2026-08-31T02:01:57Z",
"pushed_at": "2026-08-31T02:01:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-4040.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Scanner for CVE-2024-4040",
"fork": false,
"created_at": "2024-04-23T09:31:29Z",
"updated_at": "2026-08-27T20:36:58Z",
"updated_at": "2026-08-31T03:50:18Z",
"pushed_at": "2024-05-17T06:48:43Z",
"stargazers_count": 54,
"watchers_count": 54,
"stargazers_count": 55,
"watchers_count": 55,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 54,
"watchers": 55,
"score": 0,
"subscribers_count": 8
},
2025/CVE-2025-0324.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1352000021,
"name": "CVE-2025-0324-axis-vapix-privesc",
"full_name": "kemrec\/CVE-2025-0324-axis-vapix-privesc",
"owner": {
"login": "kemrec",
"id": 25618690,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25618690?v=4",
"html_url": "https:\/\/github.com\/kemrec",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/kemrec\/CVE-2025-0324-axis-vapix-privesc",
"description": null,
"fork": false,
"created_at": "2026-08-31T04:45:53Z",
"updated_at": "2026-08-31T05:07:27Z",
"pushed_at": "2026-08-31T05:05:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-12917.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 1092884061,
"name": "CVE-2025-12917-PoC",
"full_name": "0xcucumbersalad\/CVE-2025-12917-PoC",
"owner": {
"login": "0xcucumbersalad",
"id": 39252817,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/39252817?v=4",
"html_url": "https:\/\/github.com\/0xcucumbersalad",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xcucumbersalad\/CVE-2025-12917-PoC",
"description": "A vulnerability was identified in TOZED ZLT T10 T10PLUS_3.04.15. The affected element is an unknown function of the file \/reqproc\/proc_post of the component Reboot Handler.",
"fork": false,
"created_at": "2025-11-09T13:58:07Z",
"updated_at": "2026-02-10T11:13:19Z",
"pushed_at": "2025-11-09T13:59:08Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-14847.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
"fork": false,
"created_at": "2025-07-30T15:52:00Z",
"updated_at": "2026-08-30T19:11:20Z",
"pushed_at": "2026-08-30T19:10:42Z",
"updated_at": "2026-08-31T02:04:20Z",
"pushed_at": "2026-08-31T02:02:50Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1093,8 +1093,8 @@
"description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
"fork": false,
"created_at": "2026-01-14T06:05:44Z",
"updated_at": "2026-08-30T19:11:34Z",
"pushed_at": "2026-08-30T19:10:25Z",
"updated_at": "2026-08-31T02:02:43Z",
"pushed_at": "2026-08-31T02:02:34Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-21479.json
+1 -1
View File
@@ -213,7 +213,7 @@
"fork": false,
"created_at": "2026-08-19T09:39:46Z",
"updated_at": "2026-08-28T10:34:13Z",
"pushed_at": "2026-08-27T07:13:47Z",
"pushed_at": "2026-08-31T05:03:05Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
2025/CVE-2025-31700.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Dahua IP camera CVE research toolkit (CVE-2021-33044\/33045, CVE-2025-31700\/31701)",
"fork": false,
"created_at": "2026-03-03T21:28:23Z",
"updated_at": "2026-08-21T13:38:10Z",
"updated_at": "2026-08-31T05:25:52Z",
"pushed_at": "2026-04-02T01:55:41Z",
"stargazers_count": 27,
"watchers_count": 27,
"stargazers_count": 28,
"watchers_count": 28,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 27,
"watchers": 28,
"score": 0,
"subscribers_count": 2
}
2025/CVE-2025-48757.json
+4 -4
View File
@@ -96,10 +96,10 @@
"description": "Pre-launch security checklist for AI-generated apps (Lovable, v0, Bolt, Cursor). 69 checks covering Supabase RLS, exposed keys, and prompt injection. Same patterns behind CVE-2025-48757 (170 apps) and the Moltbook leak (1.5M API tokens).",
"fork": false,
"created_at": "2026-05-01T22:48:32Z",
"updated_at": "2026-08-15T18:06:13Z",
"updated_at": "2026-08-31T05:12:41Z",
"pushed_at": "2026-08-09T13:48:36Z",
"stargazers_count": 14,
"watchers_count": 14,
"stargazers_count": 15,
"watchers_count": 15,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -123,7 +123,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 14,
"watchers": 15,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-49844.json
+2 -2
View File
@@ -66,8 +66,8 @@
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
"fork": false,
"created_at": "2022-04-06T09:27:39Z",
"updated_at": "2026-08-30T19:00:37Z",
"pushed_at": "2026-08-30T19:00:20Z",
"updated_at": "2026-08-31T01:52:44Z",
"pushed_at": "2026-08-31T01:52:40Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-55182.json
+10 -10
View File
@@ -99,8 +99,8 @@
"description": null,
"fork": false,
"created_at": "2024-11-29T12:32:19Z",
"updated_at": "2026-08-30T19:09:11Z",
"pushed_at": "2026-08-30T19:08:21Z",
"updated_at": "2026-08-31T02:00:19Z",
"pushed_at": "2026-08-31T01:59:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -148,8 +148,8 @@
"description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
"fork": false,
"created_at": "2025-06-06T16:34:46Z",
"updated_at": "2026-08-30T19:08:29Z",
"pushed_at": "2026-08-30T19:07:18Z",
"updated_at": "2026-08-31T02:00:22Z",
"pushed_at": "2026-08-31T02:00:10Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -871,10 +871,10 @@
"description": "High Fidelity Detection Mechanism for RSC\/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)",
"fork": false,
"created_at": "2025-12-04T06:55:04Z",
"updated_at": "2026-08-28T17:38:05Z",
"updated_at": "2026-08-31T06:52:54Z",
"pushed_at": "2025-12-07T04:16:46Z",
"stargazers_count": 2460,
"watchers_count": 2460,
"stargazers_count": 2459,
"watchers_count": 2459,
"has_discussions": false,
"forks_count": 271,
"allow_forking": true,
@@ -885,7 +885,7 @@
"topics": [],
"visibility": "public",
"forks": 271,
"watchers": 2460,
"watchers": 2459,
"score": 0,
"subscribers_count": 11
},
@@ -12141,8 +12141,8 @@
"description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
"fork": false,
"created_at": "2026-01-02T01:28:57Z",
"updated_at": "2026-08-30T19:10:00Z",
"pushed_at": "2026-08-30T19:08:30Z",
"updated_at": "2026-08-31T02:01:15Z",
"pushed_at": "2026-08-31T02:00:42Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-0091.json
+4 -4
View File
@@ -14,12 +14,12 @@
"description": "CVE-2026-0091, play with an issue in android window management to perform arbitrary code execution in Launcher process from adb",
"fork": false,
"created_at": "2026-05-25T03:41:43Z",
"updated_at": "2026-08-17T00:15:43Z",
"pushed_at": "2026-07-05T07:55:49Z",
"updated_at": "2026-08-31T06:26:49Z",
"pushed_at": "2026-08-31T06:25:47Z",
"stargazers_count": 33,
"watchers_count": 33,
"has_discussions": false,
"forks_count": 5,
"forks_count": 6,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 5,
"forks": 6,
"watchers": 33,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-16723.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Docker labs + defensive scanner for fastjson remote-class-load RCE. fastjson 1.2.66-1.2.83: @JSONType resource probe (CVE-2026-16723). fastjson2 2.0.57: attacker @type reaches loadClass with autoType DISABLED via polymorphic types (@JSONType(seeAlso) \/ Jackson @JsonSubTypes). Marker-only payloads; safeMode + JDK17 controls.",
"fork": false,
"created_at": "2026-07-20T17:00:03Z",
"updated_at": "2026-08-23T14:21:04Z",
"updated_at": "2026-08-31T01:57:41Z",
"pushed_at": "2026-07-27T11:16:07Z",
"stargazers_count": 205,
"watchers_count": 205,
"stargazers_count": 206,
"watchers_count": 206,
"has_discussions": false,
"forks_count": 92,
"allow_forking": true,
@@ -44,7 +44,7 @@
],
"visibility": "public",
"forks": 92,
"watchers": 205,
"watchers": 206,
"score": 0,
"subscribers_count": 3
},
2026/CVE-2026-19632.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-19632 - TranslatePress One-Day PoC",
"fork": false,
"created_at": "2026-08-26T09:07:43Z",
"updated_at": "2026-08-26T16:08:23Z",
"updated_at": "2026-08-31T06:39:54Z",
"pushed_at": "2026-08-26T09:39:24Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -33,7 +33,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-22732.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": null,
"fork": false,
"created_at": "2026-04-15T02:08:40Z",
"updated_at": "2026-08-28T20:22:55Z",
"pushed_at": "2026-08-28T20:21:53Z",
"updated_at": "2026-08-31T04:45:16Z",
"pushed_at": "2026-08-31T04:44:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-31431.json
+6 -6
View File
@@ -47,10 +47,10 @@
"description": "Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code",
"fork": false,
"created_at": "2026-04-29T12:15:28Z",
"updated_at": "2026-08-31T00:32:50Z",
"updated_at": "2026-08-31T06:17:26Z",
"pushed_at": "2026-04-29T21:21:46Z",
"stargazers_count": 4057,
"watchers_count": 4057,
"stargazers_count": 4056,
"watchers_count": 4056,
"has_discussions": false,
"forks_count": 910,
"allow_forking": true,
@@ -72,7 +72,7 @@
],
"visibility": "public",
"forks": 910,
"watchers": 4057,
"watchers": 4056,
"score": 0,
"subscribers_count": 34
},
@@ -8329,8 +8329,8 @@
"description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.",
"fork": false,
"created_at": "2026-05-06T09:49:14Z",
"updated_at": "2026-08-30T19:30:56Z",
"pushed_at": "2026-08-30T19:30:35Z",
"updated_at": "2026-08-31T02:22:00Z",
"pushed_at": "2026-08-31T02:21:53Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-31802.json
+2 -2
View File
@@ -59,8 +59,8 @@
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"fork": false,
"created_at": "2026-03-28T20:49:46Z",
"updated_at": "2026-08-30T19:25:06Z",
"pushed_at": "2026-08-30T19:24:10Z",
"updated_at": "2026-08-31T02:15:55Z",
"pushed_at": "2026-08-31T02:15:39Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-3227.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-06-25T16:31:07Z",
"updated_at": "2026-08-04T17:45:45Z",
"updated_at": "2026-08-31T07:10:39Z",
"pushed_at": "2026-06-25T16:34:33Z",
"stargazers_count": 42,
"watchers_count": 42,
"stargazers_count": 43,
"watchers_count": 43,
"has_discussions": false,
"forks_count": 12,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 12,
"watchers": 42,
"watchers": 43,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-33017.json
+2 -2
View File
@@ -679,8 +679,8 @@
"description": "CVE-2026-33017: Langflow Unauthenticated RCE PoC",
"fork": false,
"created_at": "2026-08-13T14:06:09Z",
"updated_at": "2026-08-14T15:39:51Z",
"pushed_at": "2026-08-14T15:39:46Z",
"updated_at": "2026-08-31T04:37:34Z",
"pushed_at": "2026-08-31T04:37:27Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-33824.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "IKEv2, ikeext.dll, CVE-2026-33824, double free, heap grooming, ROP, SKF fragmentation, Windows exploit, anti-debug, obfuscation, API hooking, shellcode, reverse shell",
"fork": false,
"created_at": "2026-05-18T13:44:31Z",
"updated_at": "2026-08-20T16:34:33Z",
"updated_at": "2026-08-31T06:40:54Z",
"pushed_at": "2026-06-27T19:43:12Z",
"stargazers_count": 6,
"watchers_count": 6,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": true,
"forks_count": 3,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 6,
"watchers": 5,
"score": 0,
"subscribers_count": 2
}
2026/CVE-2026-38192.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1351873794,
"name": "CVE-2026-38192",
"full_name": "ming1700\/CVE-2026-38192",
"owner": {
"login": "ming1700",
"id": 227300118,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/227300118?v=4",
"html_url": "https:\/\/github.com\/ming1700",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ming1700\/CVE-2026-38192",
"description": "pluck-CMS-4.7.20-code-injection-vulnerability",
"fork": false,
"created_at": "2026-08-31T01:30:09Z",
"updated_at": "2026-08-31T01:36:11Z",
"pushed_at": "2026-08-31T01:31:40Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-3844.json
+2 -2
View File
@@ -307,7 +307,7 @@
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -315,7 +315,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 3,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-41940.json
+2 -2
View File
@@ -1807,8 +1807,8 @@
"description": "Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.",
"fork": false,
"created_at": "2026-05-06T18:08:48Z",
"updated_at": "2026-08-30T19:31:11Z",
"pushed_at": "2026-08-30T19:30:41Z",
"updated_at": "2026-08-31T02:22:19Z",
"pushed_at": "2026-08-31T02:22:09Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-43499.json
+67 -34
View File
@@ -1081,12 +1081,12 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
"updated_at": "2026-08-30T20:45:08Z",
"updated_at": "2026-08-31T07:20:45Z",
"pushed_at": "2026-08-24T07:49:18Z",
"stargazers_count": 962,
"watchers_count": 962,
"stargazers_count": 966,
"watchers_count": 966,
"has_discussions": false,
"forks_count": 193,
"forks_count": 194,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1094,8 +1094,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 193,
"watchers": 962,
"forks": 194,
"watchers": 966,
"score": 0,
"subscribers_count": 28
},
@@ -1727,12 +1727,12 @@
"description": "GhostLock One-Tap Execution App (CVE-2026-43499)",
"fork": false,
"created_at": "2026-07-29T05:04:25Z",
"updated_at": "2026-08-31T00:12:10Z",
"pushed_at": "2026-08-30T07:12:22Z",
"stargazers_count": 614,
"watchers_count": 614,
"updated_at": "2026-08-31T07:03:38Z",
"pushed_at": "2026-08-31T05:24:52Z",
"stargazers_count": 622,
"watchers_count": 622,
"has_discussions": true,
"forks_count": 190,
"forks_count": 193,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1740,8 +1740,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 190,
"watchers": 614,
"forks": 193,
"watchers": 622,
"score": 0,
"subscribers_count": 6
},
@@ -2103,10 +2103,10 @@
"description": "Jailbreak supported Google Pixel phones with CVE-2026-43499",
"fork": false,
"created_at": "2026-08-02T17:34:45Z",
"updated_at": "2026-08-31T00:09:28Z",
"pushed_at": "2026-08-30T18:04:21Z",
"stargazers_count": 234,
"watchers_count": 234,
"updated_at": "2026-08-31T06:37:38Z",
"pushed_at": "2026-08-31T06:35:48Z",
"stargazers_count": 236,
"watchers_count": 236,
"has_discussions": false,
"forks_count": 46,
"allow_forking": true,
@@ -2124,7 +2124,7 @@
],
"visibility": "public",
"forks": 46,
"watchers": 234,
"watchers": 236,
"score": 0,
"subscribers_count": 5
},
@@ -2374,8 +2374,8 @@
"description": "CVE-2026-43499 (GhostLock) research on HUAWEI MatePad Pro 11 GOT-W29",
"fork": false,
"created_at": "2026-08-10T09:01:08Z",
"updated_at": "2026-08-31T00:23:47Z",
"pushed_at": "2026-08-31T00:23:29Z",
"updated_at": "2026-08-31T02:44:32Z",
"pushed_at": "2026-08-31T02:44:25Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
@@ -2440,10 +2440,10 @@
"description": "独立 APK：CVE-2026-43499 GhostLock 提权 + Shizuku shell 身份执行",
"fork": false,
"created_at": "2026-08-10T22:00:35Z",
"updated_at": "2026-08-25T23:10:47Z",
"updated_at": "2026-08-31T04:12:55Z",
"pushed_at": "2026-08-10T22:54:49Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -2454,7 +2454,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
@@ -2473,8 +2473,8 @@
"description": "GhostLock-X200 v1.0 - temporary root toolchain for vivo X200 (PD2415 \/ b57 kernel) based on CVE-2026-43499. For authorized security research only.",
"fork": false,
"created_at": "2026-08-10T23:26:52Z",
"updated_at": "2026-08-22T15:53:39Z",
"pushed_at": "2026-08-17T17:53:03Z",
"updated_at": "2026-08-31T06:08:27Z",
"pushed_at": "2026-08-31T06:05:39Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
@@ -3309,8 +3309,8 @@
"description": "Honor 80 GT privilege escalation PoC: GhostLock (CVE-2026-43499) + custom KernelSU module loading",
"fork": false,
"created_at": "2026-08-23T02:28:12Z",
"updated_at": "2026-08-29T22:45:29Z",
"pushed_at": "2026-08-29T23:00:45Z",
"updated_at": "2026-08-31T02:24:30Z",
"pushed_at": "2026-08-31T02:24:20Z",
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
@@ -3474,10 +3474,10 @@
"description": "adb-driven KernelSU loader for stock Google Pixel: temporary kernel R\/W via CVE-2026-43499 (GhostLock), then late-loads a signature-matched kernelsu.ko for the running KMI. Manager-agnostic.",
"fork": false,
"created_at": "2026-08-25T11:59:16Z",
"updated_at": "2026-08-30T11:29:28Z",
"updated_at": "2026-08-31T06:34:40Z",
"pushed_at": "2026-08-25T12:38:48Z",
"stargazers_count": 9,
"watchers_count": 9,
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -3488,7 +3488,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 9,
"watchers": 11,
"score": 0,
"subscribers_count": 1
},
@@ -3573,8 +3573,8 @@
"description": "Root My Galaxy SM-S9180 (dm3q) S9180ZHS8FZG1 payload port - CVE-2026-43499 + KernelSU LKM",
"fork": false,
"created_at": "2026-08-27T12:33:18Z",
"updated_at": "2026-08-29T12:33:55Z",
"pushed_at": "2026-08-27T12:34:01Z",
"updated_at": "2026-08-31T06:10:57Z",
"pushed_at": "2026-08-31T06:09:45Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
@@ -3689,5 +3689,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1352044873,
"name": "ghostlock-x200-app",
"full_name": "xiaohj233\/ghostlock-x200-app",
"owner": {
"login": "xiaohj233",
"id": 177729788,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/177729788?v=4",
"html_url": "https:\/\/github.com\/xiaohj233",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/xiaohj233\/ghostlock-x200-app",
"description": "vivo X200 设备端一键 root App（Shizuku 授权 shell 域执行，CVE-2026-43499）",
"fork": false,
"created_at": "2026-08-31T05:48:36Z",
"updated_at": "2026-08-31T06:09:17Z",
"pushed_at": "2026-08-31T06:08:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-45585.json
+4 -4
View File
@@ -212,8 +212,8 @@
"description": "Manage and recover BitLocker encrypted drives with this tool for Windows 11 recovery key management and educational study of CVE-2026-45585.",
"fork": false,
"created_at": "2026-06-16T07:21:36Z",
"updated_at": "2026-08-30T19:33:43Z",
"pushed_at": "2026-08-30T19:33:04Z",
"updated_at": "2026-08-31T02:25:34Z",
"pushed_at": "2026-08-31T02:24:16Z",
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
@@ -264,8 +264,8 @@
"description": "Manage BitLocker encrypted drives on Windows. Extract recovery keys, check encryption status, and apply security mitigations for CVE-2026-45585.",
"fork": false,
"created_at": "2026-07-25T02:47:26Z",
"updated_at": "2026-08-30T19:37:32Z",
"pushed_at": "2026-08-30T19:37:06Z",
"updated_at": "2026-08-31T02:28:25Z",
"pushed_at": "2026-08-31T02:28:03Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-46300.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "CVE-2026-46300",
"fork": false,
"created_at": "2026-05-15T15:59:35Z",
"updated_at": "2026-07-31T06:15:51Z",
"updated_at": "2026-08-31T05:54:08Z",
"pushed_at": "2026-05-16T09:19:19Z",
"stargazers_count": 15,
"watchers_count": 15,
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 15,
"watchers": 16,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-48611.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "Automated PoC for CVE-2026-48611 — phpBB OAuth login_link authentication bypass",
"fork": false,
"created_at": "2026-08-30T15:35:30Z",
"updated_at": "2026-08-30T15:37:36Z",
"updated_at": "2026-08-31T02:32:30Z",
"pushed_at": "2026-08-30T15:37:13Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-52923.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": null,
"fork": false,
"created_at": "2026-08-28T07:37:22Z",
"updated_at": "2026-08-28T07:37:23Z",
"pushed_at": "2026-08-28T07:37:23Z",
"updated_at": "2026-08-31T04:05:06Z",
"pushed_at": "2026-08-31T04:04:55Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-57827.json
+2 -2
View File
@@ -61,8 +61,8 @@
"description": "Demonstrate the unauthenticated remote code execution vulnerability in the RSFiles! Joomla component through an arbitrary file upload.",
"fork": false,
"created_at": "2026-07-30T20:49:05Z",
"updated_at": "2026-08-30T19:38:02Z",
"pushed_at": "2026-08-30T19:37:38Z",
"updated_at": "2026-08-31T02:29:04Z",
"pushed_at": "2026-08-31T02:28:41Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-62911.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "POC pre-auth RCE on Exchange",
"fork": false,
"created_at": "2026-08-22T04:49:33Z",
"updated_at": "2026-08-30T22:45:55Z",
"updated_at": "2026-08-31T06:30:05Z",
"pushed_at": "2026-08-22T04:49:54Z",
"stargazers_count": 147,
"watchers_count": 147,
"stargazers_count": 150,
"watchers_count": 150,
"has_discussions": false,
"forks_count": 24,
"forks_count": 26,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -29,8 +29,8 @@
"cve-2026-62911"
],
"visibility": "public",
"forks": 24,
"watchers": 147,
"forks": 26,
"watchers": 150,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-63030.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain",
"fork": false,
"created_at": "2026-07-17T20:18:33Z",
"updated_at": "2026-08-30T19:59:15Z",
"updated_at": "2026-08-31T01:32:35Z",
"pushed_at": "2026-08-11T13:41:27Z",
"stargazers_count": 759,
"watchers_count": 759,
"stargazers_count": 760,
"watchers_count": 760,
"has_discussions": false,
"forks_count": 172,
"allow_forking": true,
@@ -32,7 +32,7 @@
],
"visibility": "public",
"forks": 172,
"watchers": 759,
"watchers": 760,
"score": 0,
"subscribers_count": 3
},
2026/CVE-2026-63077.json
+2 -2
View File
@@ -118,7 +118,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -126,7 +126,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"forks": 2,
"watchers": 0,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-64560.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-08-03T12:36:27Z",
"updated_at": "2026-08-31T00:32:35Z",
"updated_at": "2026-08-31T04:52:12Z",
"pushed_at": "2026-08-03T12:39:41Z",
"stargazers_count": 50,
"watchers_count": 50,
"stargazers_count": 52,
"watchers_count": 52,
"has_discussions": false,
"forks_count": 13,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 13,
"watchers": 50,
"watchers": 52,
"score": 0,
"subscribers_count": 1
}
2026/CVE-2026-64600.json
+4 -4
View File
@@ -159,10 +159,10 @@
"description": "A POC for the recently discovered Qualys bug on COW with XFS",
"fork": false,
"created_at": "2026-07-27T06:42:58Z",
"updated_at": "2026-08-12T16:15:32Z",
"updated_at": "2026-08-31T02:53:24Z",
"pushed_at": "2026-07-30T08:06:02Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -179,7 +179,7 @@
],
"visibility": "public",
"forks": 2,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-68138.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "Tracking CVE-2026-68138, the Linux kernel net\/sched qdisc rate-table use-after-free",
"fork": false,
"created_at": "2026-08-17T07:33:31Z",
"updated_at": "2026-08-30T16:15:11Z",
"pushed_at": "2026-08-30T16:14:57Z",
"updated_at": "2026-08-31T04:27:11Z",
"pushed_at": "2026-08-31T04:27:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-78904.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CBDC Infrastructure Vulnerability Research. CVE-2026-78904: Infinite mint and redemption bypass in central bank digital currency APIs.",
"fork": false,
"created_at": "2026-08-30T21:57:18Z",
"updated_at": "2026-08-30T22:45:49Z",
"updated_at": "2026-08-31T04:48:37Z",
"pushed_at": "2026-08-30T22:06:10Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-82222.json
+6 -6
View File
@@ -52,12 +52,12 @@
"description": "Authorized Docker lab and clean PoC for validating CVE-2026-82222 RCE in GiveWP 4.16.5.1 and the 4.16.7.2 fix.",
"fork": false,
"created_at": "2026-08-30T05:15:27Z",
"updated_at": "2026-08-30T18:54:33Z",
"updated_at": "2026-08-31T06:47:47Z",
"pushed_at": "2026-08-30T05:22:30Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 1,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -73,8 +73,8 @@
"wordpress"
],
"visibility": "public",
"forks": 1,
"watchers": 5,
"forks": 3,
"watchers": 8,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-82539.json
+1 -1
View File
@@ -30,6 +30,6 @@
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
"subscribers_count": 1
}
]
2026/CVE-2026-9830.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "CVE-2026-9830 Proof of Concept",
"fork": false,
"created_at": "2026-08-15T20:57:13Z",
"updated_at": "2026-08-30T22:19:12Z",
"updated_at": "2026-08-31T07:15:25Z",
"pushed_at": "2026-08-20T21:56:15Z",
"stargazers_count": 402,
"watchers_count": 402,
"stargazers_count": 406,
"watchers_count": 406,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -72,7 +72,7 @@
],
"visibility": "public",
"forks": 5,
"watchers": 402,
"watchers": 406,
"score": 0,
"subscribers_count": 0
}
README.md
+18 -7
View File
@@ -9126,6 +9126,9 @@
- [AT190510-Cuong/CVE-2026-38165-SSTI-](https://github.com/AT190510-Cuong/CVE-2026-38165-SSTI-)
### CVE-2026-38192
- [ming1700/CVE-2026-38192](https://github.com/ming1700/CVE-2026-38192)
### CVE-2026-38194
- [4D4J/cormem-read-poc](https://github.com/4D4J/cormem-read-poc)
@@ -10478,6 +10481,7 @@
- [diyiqiuye/ghostlock-pfem10](https://github.com/diyiqiuye/ghostlock-pfem10)
- [ReBiliBin/ghostlock-oppo-watch3pro](https://github.com/ReBiliBin/ghostlock-oppo-watch3pro)
- [alk601/Root-My-Galaxy](https://github.com/alk601/Root-My-Galaxy)
- [xiaohj233/ghostlock-x200-app](https://github.com/xiaohj233/ghostlock-x200-app)
### CVE-2026-43500 (2026-05-11)
@@ -14591,6 +14595,13 @@
- [MrPayloadC/CVE-2025-0316-Exploit](https://github.com/MrPayloadC/CVE-2025-0316-Exploit)
### CVE-2025-0324 (2025-06-02)
<code>The VAPIX Device Configuration framework allowed a privilege escalation, enabling a lower-privileged user to gain administrator privileges.
</code>
- [kemrec/CVE-2025-0324-axis-vapix-privesc](https://github.com/kemrec/CVE-2025-0324-axis-vapix-privesc)
### CVE-2025-0364 (2025-02-04)
<code>BigAntSoft BigAnt Server, up to and including version 5.6.06, is vulnerable to unauthenticated remote code execution via account registration. An unauthenticated remote attacker can create an administrative user through the default exposed SaaS registration mechanism. Once an administrator, the attacker can upload and execute arbitrary PHP code using the &quot;Cloud Storage Addin,&quot; leading to unauthenticated code execution.
@@ -17530,13 +17541,6 @@
- [Jinxia62/Sangfor-CVE-2025-12916](https://github.com/Jinxia62/Sangfor-CVE-2025-12916)
### CVE-2025-12917 (2025-11-09)
<code>In TOZED ZLT T10 T10PLUS_3.04.15 ist eine Schwachstelle entdeckt worden. Dabei betrifft es einen unbekannter Codeteil der Datei /reqproc/proc_post der Komponente Reboot Handler. Durch die Manipulation mit unbekannten Daten kann eine denial of service-Schwachstelle ausgenutzt werden. Die Umsetzung des Angriffs kann dabei im lokalen Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung.
</code>
- [0xcucumbersalad/CVE-2025-12917-PoC](https://github.com/0xcucumbersalad/CVE-2025-12917-PoC)
### CVE-2025-12973 (2025-11-21)
<code>The S2B AI Assistant – ChatBot, ChatGPT, OpenAI, Content &amp; Image Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the storeFile() function in all versions up to, and including, 1.7.8. This makes it possible for authenticated attackers, with Editor-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.
@@ -57973,6 +57977,13 @@
- [somatrasss/CVE-2021-21402](https://github.com/somatrasss/CVE-2021-21402)
- [givemefivw/CVE-2021-21402](https://github.com/givemefivw/CVE-2021-21402)
### CVE-2021-21423 (2021-04-06)
<code>`projen` is a project generation tool that synthesizes project configuration files such as `package.json`, `tsconfig.json`, `.gitignore`, GitHub Workflows, `eslint`, `jest`, and more, from a well-typed definition written in JavaScript. Users of projen's `NodeProject` project type (including any project type derived from it) include a `.github/workflows/rebuild-bot.yml` workflow that may allow any GitHub user to trigger execution of un-trusted code in the context of the &quot;main&quot; repository (as opposed to that of a fork). In some situations, such untrusted code may potentially be able to commit to the &quot;main&quot; repository. The rebuild-bot workflow is triggered by comments including `@projen rebuild` on pull-request to trigger a re-build of the projen project, and updating the pull request with the updated files. This workflow is triggered by an `issue_comment` event, and thus always executes with a `GITHUB_TOKEN` belonging to the repository into which the pull-request is made (this is in contrast with workflows triggered by `pull_request` events, which always execute with a `GITHUB_TOKEN` belonging to the repository from which the pull-request is made). Repositories that do not have branch protection configured on their default branch (typically `main` or `master`) could possibly allow an untrusted user to gain access to secrets configured on the repository (such as NPM tokens, etc). Branch protection prohibits this escalation, as the managed `GITHUB_TOKEN` would not be able to modify the contents of a protected branch and affected workflows must be defined on the default branch.
</code>
- [pvharmo2/gha-lab-b9842b12c0](https://github.com/pvharmo2/gha-lab-b9842b12c0)
### CVE-2021-21424 (2021-05-13)
<code>Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The ability to enumerate users was possible without relevant permissions due to different handling depending on whether the user existed or not when attempting to use the switch users functionality. We now ensure that 403s are returned whether the user exists or not if a user cannot switch to a user or if the user does not exist. The patch for this issue is available for branch 3.4.