nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/07/30 18:51:01

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-07-31 03:51:01 +09:00
1 parent 22733980d8
commit 701b2e1e8e
75 files changed
+446 -424
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2013/CVE-2013-6282.json
+1 -1
View File
@@ -96,7 +96,7 @@
"forks": 2,
"watchers": 12,
"score": 0,
"subscribers_count": 3
"subscribers_count": 2
},
{
"id": 76877120,
2017/CVE-2017-1000117.json
+1 -1
View File
@@ -410,7 +410,7 @@
"description": null,
"fork": false,
"created_at": "2017-08-16T14:34:37Z",
"updated_at": "2017-08-16T14:34:37Z",
"updated_at": "2026-07-30T16:56:36Z",
"pushed_at": "2017-08-17T18:45:24Z",
"stargazers_count": 0,
"watchers_count": 0,
2017/CVE-2017-8890.json
+39
View File
@@ -97,5 +97,44 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1317290475,
"name": "huawei-p10-cve-2017-8890-unlock",
"full_name": "sweatyrocket\/huawei-p10-cve-2017-8890-unlock",
"owner": {
"login": "sweatyrocket",
"id": 67523464,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/67523464?v=4",
"html_url": "https:\/\/github.com\/sweatyrocket",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/sweatyrocket\/huawei-p10-cve-2017-8890-unlock",
"description": "Huawei P10 VTR-L29C432B151 CVE-2017-8890 exploit research and bootloader-unlock journey",
"fork": false,
"created_at": "2026-07-30T13:18:56Z",
"updated_at": "2026-07-30T13:20:38Z",
"pushed_at": "2026-07-30T13:19:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"android-security",
"bootloader-unlock",
"cve-2017-8890",
"huawei-p10",
"kernel-exploitation"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-07-30T12:09:01Z",
"pushed_at": "2026-07-30T12:08:24Z",
"updated_at": "2026-07-30T17:46:20Z",
"pushed_at": "2026-07-30T17:46:12Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2019/CVE-2019-7238.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "🐱‍💻 Poc of CVE-2019-7238 - Nexus Repository Manager 3 Remote Code Execution 🐱‍💻",
"fork": false,
"created_at": "2019-02-24T23:09:43Z",
"updated_at": "2025-12-25T23:28:09Z",
"updated_at": "2026-07-30T15:38:47Z",
"pushed_at": "2019-02-25T07:37:07Z",
"stargazers_count": 153,
"watchers_count": 153,
"stargazers_count": 154,
"watchers_count": 154,
"has_discussions": false,
"forks_count": 50,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 50,
"watchers": 153,
"watchers": 154,
"score": 0,
"subscribers_count": 5
},
2020/CVE-2020-11881.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2020-11881: unauthenticated remote DoS for MikroTik SMB service.",
"fork": false,
"created_at": "2020-06-17T12:15:56Z",
"updated_at": "2025-10-14T22:14:02Z",
"updated_at": "2026-07-30T16:03:53Z",
"pushed_at": "2020-09-26T13:33:27Z",
"stargazers_count": 10,
"watchers_count": 10,
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 10,
"watchers": 11,
"score": 0,
"subscribers_count": 2
}
2020/CVE-2020-12828.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2020-12828 PoC and Analysis. ",
"fork": false,
"created_at": "2020-06-30T15:18:58Z",
"updated_at": "2026-07-29T10:34:09Z",
"updated_at": "2026-07-30T17:35:02Z",
"pushed_at": "2020-06-30T16:03:35Z",
"stargazers_count": 27,
"watchers_count": 27,
"stargazers_count": 28,
"watchers_count": 28,
"has_discussions": false,
"forks_count": 11,
"allow_forking": true,
@@ -35,7 +35,7 @@
],
"visibility": "public",
"forks": 11,
"watchers": 27,
"watchers": 28,
"score": 0,
"subscribers_count": 2
}
2020/CVE-2020-1472.json
+5 -5
View File
@@ -2383,10 +2383,10 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-07-30T11:21:44Z",
"pushed_at": "2026-07-30T11:20:48Z",
"stargazers_count": 3,
"watchers_count": 3,
"updated_at": "2026-07-30T18:03:42Z",
"pushed_at": "2026-07-30T18:00:00Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -2418,7 +2418,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
2020/CVE-2020-3952.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": "Exploit for CVE-2020-3952 in vCenter 6.7 https:\/\/www.guardicore.com\/2020\/04\/pwning-vmware-vcenter-cve-2020-3952\/",
"fork": false,
"created_at": "2020-04-19T18:35:13Z",
"updated_at": "2024-08-12T20:00:27Z",
"updated_at": "2026-07-30T16:18:26Z",
"pushed_at": "2020-04-19T18:35:22Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 1
}
2021/CVE-2021-26855.json
+2 -2
View File
@@ -825,8 +825,8 @@
"description": "patched to work",
"fork": false,
"created_at": "2021-03-15T12:33:04Z",
"updated_at": "2025-12-07T01:31:38Z",
"pushed_at": "2025-12-07T01:31:34Z",
"updated_at": "2026-07-30T13:42:42Z",
"pushed_at": "2026-07-30T13:40:27Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-07-30T10:54:54Z",
"pushed_at": "2026-07-30T10:54:32Z",
"updated_at": "2026-07-30T17:55:19Z",
"pushed_at": "2026-07-30T17:54:19Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-39156.json
+4 -4
View File
@@ -2,15 +2,15 @@
{
"id": 1192683895,
"name": "MicroserviceCVE-2021-39156",
"full_name": "anonymousAIware2026\/MicroserviceCVE-2021-39156",
"full_name": "mostafaanouarghorab\/MicroserviceCVE-2021-39156",
"owner": {
"login": "anonymousAIware2026",
"login": "mostafaanouarghorab",
"id": 12663487,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/12663487?v=4",
"html_url": "https:\/\/github.com\/anonymousAIware2026",
"html_url": "https:\/\/github.com\/mostafaanouarghorab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/anonymousAIware2026\/MicroserviceCVE-2021-39156",
"html_url": "https:\/\/github.com\/mostafaanouarghorab\/MicroserviceCVE-2021-39156",
"description": null,
"fork": false,
"created_at": "2026-03-26T13:10:59Z",
2021/CVE-2021-4034.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec (CVE-2021-4034)",
"fork": false,
"created_at": "2022-01-26T00:56:36Z",
"updated_at": "2026-07-28T02:56:49Z",
"updated_at": "2026-07-30T17:51:43Z",
"pushed_at": "2023-05-04T19:24:39Z",
"stargazers_count": 1156,
"watchers_count": 1156,
"stargazers_count": 1157,
"watchers_count": 1157,
"has_discussions": false,
"forks_count": 314,
"allow_forking": true,
@@ -65,7 +65,7 @@
],
"visibility": "public",
"forks": 314,
"watchers": 1156,
"watchers": 1157,
"score": 0,
"subscribers_count": 13
},
2021/CVE-2021-40444.json
+1 -1
View File
@@ -245,7 +245,7 @@
"description": "CVE-2021-40444 PoC",
"fork": false,
"created_at": "2021-09-10T16:55:53Z",
"updated_at": "2026-07-30T07:51:10Z",
"updated_at": "2026-07-30T17:53:09Z",
"pushed_at": "2021-12-25T18:31:02Z",
"stargazers_count": 1779,
"watchers_count": 1779,
2021/CVE-2021-41773.json
+2 -2
View File
@@ -113,8 +113,8 @@
"description": null,
"fork": false,
"created_at": "2021-10-05T17:29:49Z",
"updated_at": "2025-12-07T01:30:55Z",
"pushed_at": "2025-12-07T01:30:51Z",
"updated_at": "2026-07-30T13:43:20Z",
"pushed_at": "2026-07-30T13:40:14Z",
"stargazers_count": 17,
"watchers_count": 17,
"has_discussions": false,
2021/CVE-2021-42278.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user ",
"fork": false,
"created_at": "2021-12-11T15:10:30Z",
"updated_at": "2026-07-28T08:02:02Z",
"updated_at": "2026-07-30T15:13:12Z",
"pushed_at": "2022-07-10T22:23:13Z",
"stargazers_count": 1063,
"watchers_count": 1063,
"stargazers_count": 1064,
"watchers_count": 1064,
"has_discussions": false,
"forks_count": 191,
"allow_forking": true,
@@ -33,7 +33,7 @@
],
"visibility": "public",
"forks": 191,
"watchers": 1063,
"watchers": 1064,
"score": 0,
"subscribers_count": 23
},
2021/CVE-2021-44228.json
+4 -4
View File
@@ -3873,10 +3873,10 @@
"description": "A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228 ",
"fork": false,
"created_at": "2021-12-13T03:57:50Z",
"updated_at": "2026-07-25T22:56:45Z",
"updated_at": "2026-07-30T15:48:24Z",
"pushed_at": "2022-11-23T18:23:24Z",
"stargazers_count": 3423,
"watchers_count": 3423,
"stargazers_count": 3424,
"watchers_count": 3424,
"has_discussions": true,
"forks_count": 725,
"allow_forking": true,
@@ -3887,7 +3887,7 @@
"topics": [],
"visibility": "public",
"forks": 725,
"watchers": 3423,
"watchers": 3424,
"score": 0,
"subscribers_count": 54
},
2022/CVE-2022-1388.json
+2 -2
View File
@@ -417,8 +417,8 @@
"description": "Exploit and Check Script for CVE 2022-1388",
"fork": false,
"created_at": "2022-05-09T11:30:09Z",
"updated_at": "2026-01-17T19:27:25Z",
"pushed_at": "2025-12-07T01:31:38Z",
"updated_at": "2026-07-30T13:43:53Z",
"pushed_at": "2026-07-30T13:40:28Z",
"stargazers_count": 59,
"watchers_count": 59,
"has_discussions": false,
2022/CVE-2022-20409.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Android kernel exploitation for CVE-2022-20409",
"fork": false,
"created_at": "2022-11-21T22:42:50Z",
"updated_at": "2026-07-26T11:45:07Z",
"updated_at": "2026-07-30T14:33:23Z",
"pushed_at": "2024-10-17T16:26:39Z",
"stargazers_count": 211,
"watchers_count": 211,
"stargazers_count": 212,
"watchers_count": 212,
"has_discussions": false,
"forks_count": 30,
"allow_forking": true,
@@ -32,7 +32,7 @@
],
"visibility": "public",
"forks": 30,
"watchers": 211,
"watchers": 212,
"score": 0,
"subscribers_count": 5
}
2022/CVE-2022-21999.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Exploit for CVE-2022-21999 - Windows Print Spooler Elevation of Privilege Vulnerability (LPE)",
"fork": false,
"created_at": "2022-02-08T17:25:44Z",
"updated_at": "2026-07-27T00:05:33Z",
"updated_at": "2026-07-30T15:00:51Z",
"pushed_at": "2022-02-09T16:54:09Z",
"stargazers_count": 795,
"watchers_count": 795,
"stargazers_count": 796,
"watchers_count": 796,
"has_discussions": false,
"forks_count": 160,
"allow_forking": true,
@@ -31,7 +31,7 @@
],
"visibility": "public",
"forks": 160,
"watchers": 795,
"watchers": 796,
"score": 0,
"subscribers_count": 12
}
2022/CVE-2022-22077.json
+1 -1
View File
@@ -15,7 +15,7 @@
"fork": false,
"created_at": "2025-09-08T21:12:19Z",
"updated_at": "2026-06-19T21:56:25Z",
"pushed_at": "2026-07-30T02:05:43Z",
"pushed_at": "2026-07-30T15:58:30Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
2022/CVE-2022-27255.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 284,
"watchers_count": 284,
"has_discussions": false,
"forks_count": 53,
"forks_count": 54,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 53,
"forks": 54,
"watchers": 284,
"score": 0,
"subscribers_count": 14
2022/CVE-2022-40140.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "Python implementation for NotProxyShell aka CVE-2022-40140 & CVE-2022-41082",
"fork": false,
"created_at": "2022-10-07T08:10:00Z",
"updated_at": "2026-03-26T16:45:10Z",
"pushed_at": "2026-03-26T16:45:13Z",
"updated_at": "2026-07-30T13:44:53Z",
"pushed_at": "2026-07-30T13:40:57Z",
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
2022/CVE-2022-46689.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": "Proof-of-concept app to overwrite fonts on iOS using CVE-2022-46689.",
"fork": false,
"created_at": "2022-12-26T06:56:35Z",
"updated_at": "2026-07-30T00:21:02Z",
"updated_at": "2026-07-30T13:37:57Z",
"pushed_at": "2023-08-02T09:35:14Z",
"stargazers_count": 890,
"watchers_count": 890,
"stargazers_count": 891,
"watchers_count": 891,
"has_discussions": false,
"forks_count": 78,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 78,
"watchers": 890,
"watchers": 891,
"score": 0,
"subscribers_count": 23
},
2023/CVE-2023-1326.json
+33
View File
@@ -32,6 +32,39 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 743946606,
"name": "CVE-2023-1326",
"full_name": "Pol-Ruiz\/CVE-2023-1326",
"owner": {
"login": "Pol-Ruiz",
"id": 151052652,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/151052652?v=4",
"html_url": "https:\/\/github.com\/Pol-Ruiz",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Pol-Ruiz\/CVE-2023-1326",
"description": "Esto es una prueba de concepto propia i basica de la vulneravilidad CVE-2023-1326",
"fork": false,
"created_at": "2024-01-16T10:20:53Z",
"updated_at": "2024-01-16T10:20:53Z",
"pushed_at": "2024-01-26T13:55:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 796053569,
"name": "CVE-2023-1326",
2023/CVE-2023-20198.json
+2 -2
View File
@@ -146,8 +146,8 @@
"description": "CVE-2023-20198 & 0Day Implant Scanner",
"fork": false,
"created_at": "2023-10-17T22:41:14Z",
"updated_at": "2026-01-12T05:06:34Z",
"pushed_at": "2025-12-07T01:30:55Z",
"updated_at": "2026-07-30T13:44:01Z",
"pushed_at": "2026-07-30T13:40:14Z",
"stargazers_count": 33,
"watchers_count": 33,
"has_discussions": false,
2023/CVE-2023-20696.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 50,
"forks_count": 51,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 50,
"forks": 51,
"watchers": 6,
"score": 0,
"subscribers_count": 0
2023/CVE-2023-4863.json
+8 -8
View File
@@ -47,10 +47,10 @@
"description": null,
"fork": false,
"created_at": "2023-09-25T10:33:09Z",
"updated_at": "2026-01-05T20:31:25Z",
"updated_at": "2026-07-30T16:50:01Z",
"pushed_at": "2026-01-05T20:31:20Z",
"stargazers_count": 6,
"watchers_count": 6,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 6,
"watchers": 7,
"score": 0,
"subscribers_count": 1
},
@@ -245,10 +245,10 @@
"description": null,
"fork": false,
"created_at": "2023-12-18T23:12:25Z",
"updated_at": "2026-07-14T23:17:15Z",
"updated_at": "2026-07-30T16:49:38Z",
"pushed_at": "2024-05-13T17:40:58Z",
"stargazers_count": 56,
"watchers_count": 56,
"stargazers_count": 57,
"watchers_count": 57,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -259,7 +259,7 @@
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 56,
"watchers": 57,
"score": 0,
"subscribers_count": 3
},
2023/CVE-2023-48795.json
-43
View File
@@ -1,47 +1,4 @@
[
{
"id": 899056725,
"name": "sshfinder",
"full_name": "kabiri-labs\/sshfinder",
"owner": {
"login": "kabiri-labs",
"id": 56630479,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/56630479?v=4",
"html_url": "https:\/\/github.com\/kabiri-labs",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/kabiri-labs\/sshfinder",
"description": "Fast, parallel SSH discovery and security auditing across hosts and CIDR ranges: identifies SSH on any port in real time, then flags auth methods, weak crypto, Terrapin (CVE-2023-48795), and reused host keys.",
"fork": false,
"created_at": "2024-12-05T14:42:58Z",
"updated_at": "2026-07-30T12:26:56Z",
"pushed_at": "2026-07-30T12:25:28Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"banner-grabbing",
"cve-2023-48795",
"network-security",
"pentesting",
"port-scanner",
"security-tools",
"ssh",
"ssh-audit",
"ssh-scanner"
],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 1
},
{
"id": 913695968,
"name": "CVE-2023-48795",
2024/CVE-2024-21413.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": "CVE-2024-21413 PoC for THM Lab",
"fork": false,
"created_at": "2024-02-17T14:52:52Z",
"updated_at": "2026-07-30T10:09:37Z",
"updated_at": "2026-07-30T15:38:19Z",
"pushed_at": "2024-03-13T02:44:28Z",
"stargazers_count": 266,
"watchers_count": 266,
"stargazers_count": 268,
"watchers_count": 268,
"has_discussions": false,
"forks_count": 61,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 61,
"watchers": 266,
"watchers": 268,
"score": 0,
"subscribers_count": 2
},
2024/CVE-2024-28000.json
+2 -2
View File
@@ -188,8 +188,8 @@
"description": "Hands-on exploit lab for CVE-2024-28000 — unauthenticated privilege escalation in LiteSpeed Cache (WordPress plugin, <=6.3.0.1). Spins up a vulnerable environment with Docker and includes a Go-based brute-forcer that cracks the weak mt_rand hash to create an administrator account.",
"fork": false,
"created_at": "2026-07-30T08:15:26Z",
"updated_at": "2026-07-30T10:39:20Z",
"pushed_at": "2026-07-30T10:38:39Z",
"updated_at": "2026-07-30T17:04:45Z",
"pushed_at": "2026-07-30T17:01:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-3400.json
+2 -2
View File
@@ -509,8 +509,8 @@
"description": "Have we not learnt from HoneyPoC?",
"fork": false,
"created_at": "2024-04-17T11:41:01Z",
"updated_at": "2025-12-07T01:31:02Z",
"pushed_at": "2025-12-07T01:30:58Z",
"updated_at": "2026-07-30T13:43:43Z",
"pushed_at": "2026-07-30T13:40:14Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2024/CVE-2024-4577.json
+2 -2
View File
@@ -509,8 +509,8 @@
"description": "PHP RCE PoC for CVE-2024-4577 written in bash, go, python and a nuclei template",
"fork": false,
"created_at": "2024-06-08T12:23:35Z",
"updated_at": "2026-06-18T13:12:13Z",
"pushed_at": "2025-12-07T01:31:02Z",
"updated_at": "2026-07-30T13:43:23Z",
"pushed_at": "2026-07-30T13:40:16Z",
"stargazers_count": 32,
"watchers_count": 32,
"has_discussions": false,
2024/CVE-2024-53104.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": " Hardening kernel C parsers via Rust rewrite + differential fuzzing + formal verification. First target: UVC (CVE-2024-53104).",
"fork": false,
"created_at": "2026-07-17T05:59:11Z",
"updated_at": "2026-07-17T11:06:02Z",
"pushed_at": "2026-07-30T06:17:59Z",
"updated_at": "2026-07-30T12:56:22Z",
"pushed_at": "2026-07-30T12:58:46Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-54152.json
+4 -4
View File
@@ -1,8 +1,8 @@
[
{
"id": 909882750,
"name": "CVE-2024-54152-poc",
"full_name": "math-x-io\/CVE-2024-54152-poc",
"name": "CVE-2024-54152",
"full_name": "math-x-io\/CVE-2024-54152",
"owner": {
"login": "math-x-io",
"id": 97481289,
@@ -10,11 +10,11 @@
"html_url": "https:\/\/github.com\/math-x-io",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/math-x-io\/CVE-2024-54152-poc",
"html_url": "https:\/\/github.com\/math-x-io\/CVE-2024-54152",
"description": null,
"fork": false,
"created_at": "2024-12-30T01:07:48Z",
"updated_at": "2026-05-15T13:14:17Z",
"updated_at": "2026-07-30T12:52:10Z",
"pushed_at": "2024-12-30T01:08:00Z",
"stargazers_count": 12,
"watchers_count": 12,
2025/CVE-2025-21479.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "CVE-2025-21479 PoC for ZFlip5 with Knox in the way!(˶˃ ᵕ ˂˶) ",
"fork": false,
"created_at": "2026-06-18T19:41:56Z",
"updated_at": "2026-07-29T01:32:41Z",
"updated_at": "2026-07-30T16:54:52Z",
"pushed_at": "2026-06-30T04:51:57Z",
"stargazers_count": 13,
"watchers_count": 13,
"stargazers_count": 14,
"watchers_count": 14,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 13,
"watchers": 14,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-25296.json
+4 -4
View File
@@ -1,8 +1,8 @@
[
{
"id": 940892197,
"name": "CVE-2025-25296-POC",
"full_name": "math-x-io\/CVE-2025-25296-POC",
"name": "CVE-2025-25296",
"full_name": "math-x-io\/CVE-2025-25296",
"owner": {
"login": "math-x-io",
"id": 97481289,
@@ -10,11 +10,11 @@
"html_url": "https:\/\/github.com\/math-x-io",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/math-x-io\/CVE-2025-25296-POC",
"html_url": "https:\/\/github.com\/math-x-io\/CVE-2025-25296",
"description": "Proof of Concept (POC) for the CVE-2025-25296 vulnerability affecting Label Studio versions prior to 1.16.0",
"fork": false,
"created_at": "2025-03-01T02:08:01Z",
"updated_at": "2025-09-15T06:48:10Z",
"updated_at": "2026-07-30T12:55:56Z",
"pushed_at": "2025-03-01T02:09:07Z",
"stargazers_count": 2,
"watchers_count": 2,
2025/CVE-2025-37899.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Artefacts for blog post on finding CVE-2025-37899 with o3",
"fork": false,
"created_at": "2025-05-22T10:36:18Z",
"updated_at": "2026-07-14T04:16:41Z",
"updated_at": "2026-07-30T18:20:50Z",
"pushed_at": "2025-05-22T10:37:04Z",
"stargazers_count": 353,
"watchers_count": 353,
"stargazers_count": 352,
"watchers_count": 352,
"has_discussions": false,
"forks_count": 47,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 47,
"watchers": 353,
"watchers": 352,
"score": 0,
"subscribers_count": 2
},
2025/CVE-2025-48757.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Claude Skill that audits your projects for RLS misconfigurations, exposed keys, auth bypasses, and storage vulnerabilities. 27 anti-patterns sourced from CVE-2025-48757 and 10 security studies. Safe for production.",
"fork": false,
"created_at": "2026-03-15T14:49:30Z",
"updated_at": "2026-07-15T14:10:59Z",
"updated_at": "2026-07-30T14:51:50Z",
"pushed_at": "2026-04-30T08:42:55Z",
"stargazers_count": 40,
"watchers_count": 40,
"stargazers_count": 41,
"watchers_count": 41,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -44,7 +44,7 @@
],
"visibility": "public",
"forks": 5,
"watchers": 40,
"watchers": 41,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-53770.json
+6 -6
View File
@@ -287,8 +287,8 @@
"description": "ToolShell scanner - CVE-2025-53770 and detection information",
"fork": false,
"created_at": "2025-07-21T16:16:57Z",
"updated_at": "2026-07-13T12:07:08Z",
"pushed_at": "2025-12-07T01:31:06Z",
"updated_at": "2026-07-30T13:45:09Z",
"pushed_at": "2026-07-30T13:40:17Z",
"stargazers_count": 18,
"watchers_count": 18,
"has_discussions": false,
@@ -1422,10 +1422,10 @@
"description": "Lab & PoC",
"fork": false,
"created_at": "2026-03-21T04:25:49Z",
"updated_at": "2026-03-21T15:12:28Z",
"updated_at": "2026-07-30T15:06:33Z",
"pushed_at": "2026-03-21T15:12:24Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -1436,7 +1436,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-55182.json
+4 -4
View File
@@ -2154,10 +2154,10 @@
"description": "Next.js React Server Components RCE exploit for CVE-2025-55182",
"fork": false,
"created_at": "2025-12-05T05:41:24Z",
"updated_at": "2026-06-25T07:36:32Z",
"updated_at": "2026-07-30T17:45:14Z",
"pushed_at": "2025-12-05T07:20:34Z",
"stargazers_count": 67,
"watchers_count": 67,
"stargazers_count": 66,
"watchers_count": 66,
"has_discussions": false,
"forks_count": 15,
"allow_forking": true,
@@ -2177,7 +2177,7 @@
],
"visibility": "public",
"forks": 15,
"watchers": 67,
"watchers": 66,
"score": 0,
"subscribers_count": 2
},
2025/CVE-2025-58726.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "AD AutoPwn v4.10.0 — automated AD attack chain, zero-auth to Domain Admin. Discover\/Kerberoast\/AS-REP\/AD CS ESC1-16\/Shadow Creds\/RBCD+KCD\/Ghost-SPN\/TGS-rewrite\/Dollar-Ticket\/WPAD\/WSUS\/PXE\/SCCM\/BloodHound auto-action\/Loot\/DCSync\/DPAPI + Synacktiv 2026 reflection (CVE-2025-58726\/2026-24294\/2026-26128). Authorized pentesting only.",
"fork": false,
"created_at": "2026-03-30T19:34:35Z",
"updated_at": "2026-07-30T02:14:30Z",
"updated_at": "2026-07-30T17:42:03Z",
"pushed_at": "2026-07-27T12:19:44Z",
"stargazers_count": 26,
"watchers_count": 26,
"stargazers_count": 27,
"watchers_count": 27,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -38,7 +38,7 @@
],
"visibility": "public",
"forks": 4,
"watchers": 26,
"watchers": 27,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-64446.json
+33
View File
@@ -434,5 +434,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1317561026,
"name": "FortiWeb-cve-2025-64446-RCE-exploit",
"full_name": "CerberusMrXi\/FortiWeb-cve-2025-64446-RCE-exploit",
"owner": {
"login": "CerberusMrXi",
"id": 90186307,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90186307?v=4",
"html_url": "https:\/\/github.com\/CerberusMrXi",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/CerberusMrXi\/FortiWeb-cve-2025-64446-RCE-exploit",
"description": "Security research tool for FortiWeb CVE-2025-64446 vulnerability. Automated exploitation framework with advanced logging, real-time metrics, proxy debugging, and professional reporting. Includes retry logic, multi-threading, and configurable settings. For authorized security testing only. CVSS 9.8 Critical.",
"fork": false,
"created_at": "2026-07-30T18:14:04Z",
"updated_at": "2026-07-30T18:40:24Z",
"pushed_at": "2026-07-30T18:38:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-67159.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 1126181551,
"name": "CVE-2025-67159",
"full_name": "Remenis\/CVE-2025-67159",
"owner": {
"login": "Remenis",
"id": 97015958,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97015958?v=4",
"html_url": "https:\/\/github.com\/Remenis",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Remenis\/CVE-2025-67159",
"description": "Vatilon-based IP camera firmware allows authentication bypass and plaintext credential exposure via web.cgi API requests.",
"fork": false,
"created_at": "2026-01-01T10:19:17Z",
"updated_at": "2026-01-01T10:20:21Z",
"pushed_at": "2026-01-01T10:20:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-10795.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-10795 – UpdraftPlus Authentication Bypass",
"fork": false,
"created_at": "2026-06-11T10:06:29Z",
"updated_at": "2026-06-12T08:15:45Z",
"updated_at": "2026-07-30T17:02:26Z",
"pushed_at": "2026-06-12T08:15:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-13768.json
+4 -4
View File
@@ -57,10 +57,10 @@
"description": "Azure IoT Hub where exposure of an owner-level Shared Access Key enables unauthenticated remote code execution (RCE) against connected IoT devices. Proof-Of-Concept",
"fork": false,
"created_at": "2026-07-11T23:19:12Z",
"updated_at": "2026-07-12T00:32:14Z",
"updated_at": "2026-07-30T15:06:38Z",
"pushed_at": "2026-07-12T00:32:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -71,7 +71,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-16723.json
+4 -4
View File
@@ -162,10 +162,10 @@
"description": null,
"fork": false,
"created_at": "2026-07-30T12:17:04Z",
"updated_at": "2026-07-30T12:30:03Z",
"updated_at": "2026-07-30T15:46:57Z",
"pushed_at": "2026-07-30T12:27:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -176,7 +176,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-24061.json
+6 -6
View File
@@ -59,10 +59,10 @@
"description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.",
"fork": false,
"created_at": "2026-02-03T19:46:10Z",
"updated_at": "2026-07-30T12:28:28Z",
"updated_at": "2026-07-30T15:47:34Z",
"pushed_at": "2026-07-27T10:17:43Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -91,7 +91,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
@@ -143,8 +143,8 @@
"description": "CVE-2026-24061 exploit PoC",
"fork": false,
"created_at": "2026-03-08T11:25:39Z",
"updated_at": "2026-07-20T13:56:37Z",
"pushed_at": "2026-07-20T13:55:25Z",
"updated_at": "2026-07-30T15:23:02Z",
"pushed_at": "2026-07-30T15:17:50Z",
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
2026/CVE-2026-26114.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": null,
"fork": false,
"created_at": "2026-07-03T14:46:50Z",
"updated_at": "2026-07-13T00:27:40Z",
"updated_at": "2026-07-30T17:18:53Z",
"pushed_at": "2026-07-06T06:57:37Z",
"stargazers_count": 22,
"watchers_count": 22,
"stargazers_count": 23,
"watchers_count": 23,
"has_discussions": false,
"forks_count": 8,
"forks_count": 9,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 22,
"forks": 9,
"watchers": 23,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-31431.json
+33
View File
@@ -78,6 +78,39 @@
"score": 0,
"subscribers_count": 2
},
{
"id": 1225094797,
"name": "CopyFail-CVE-2026-31431",
"full_name": "ZephrFish\/CopyFail-CVE-2026-31431",
"owner": {
"login": "ZephrFish",
"id": 5783068,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5783068?v=4",
"html_url": "https:\/\/github.com\/ZephrFish",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ZephrFish\/CopyFail-CVE-2026-31431",
"description": null,
"fork": false,
"created_at": "2026-04-30T00:11:10Z",
"updated_at": "2026-07-30T13:42:40Z",
"pushed_at": "2026-07-30T13:40:20Z",
"stargazers_count": 22,
"watchers_count": 22,
"has_discussions": false,
"forks_count": 10,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 10,
"watchers": 22,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225193020,
"name": "Detections-CVE-2026-31431",
2026/CVE-2026-33150.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "RingWraith: CVE-2026-33150 and CVE-2026-33179 — Use-After-Free and NULL Dereference in libfuse io_uring",
"fork": false,
"created_at": "2026-03-25T05:48:59Z",
"updated_at": "2026-07-28T11:52:59Z",
"pushed_at": "2026-07-28T11:50:12Z",
"updated_at": "2026-07-30T18:43:58Z",
"pushed_at": "2026-07-30T18:39:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": true,
2026/CVE-2026-34621.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-05-12T20:58:43Z",
"updated_at": "2026-06-22T11:05:03Z",
"updated_at": "2026-07-30T16:02:12Z",
"pushed_at": "2026-05-12T21:15:55Z",
"stargazers_count": 20,
"watchers_count": 20,
"stargazers_count": 21,
"watchers_count": 21,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 20,
"watchers": 21,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-39047.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Epson Printer RAW Protocol Exploit Framework",
"fork": false,
"created_at": "2026-07-05T03:26:02Z",
"updated_at": "2026-07-13T12:13:23Z",
"updated_at": "2026-07-30T15:06:41Z",
"pushed_at": "2026-07-05T21:35:19Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-39875.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Unprivileged user to root on macOS Sonoma, Sequoia, and Tahoe. Patched in macOS 26.6 \/ 15.7.8 \/ 14.8.8.",
"fork": false,
"created_at": "2026-07-27T19:14:06Z",
"updated_at": "2026-07-30T04:10:40Z",
"updated_at": "2026-07-30T15:28:46Z",
"pushed_at": "2026-07-28T18:26:20Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-41472.json
+4 -4
View File
@@ -1,8 +1,8 @@
[
{
"id": 1136918980,
"name": "CyberPanel-Poc",
"full_name": "whiteov3rflow\/CyberPanel-Poc",
"name": "CVE-2026-41472-POC",
"full_name": "whiteov3rflow\/CVE-2026-41472-POC",
"owner": {
"login": "whiteov3rflow",
"id": 35066771,
@@ -10,11 +10,11 @@
"html_url": "https:\/\/github.com\/whiteov3rflow",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/whiteov3rflow\/CyberPanel-Poc",
"html_url": "https:\/\/github.com\/whiteov3rflow\/CVE-2026-41472-POC",
"description": "CyberPanel v2.4.3 XSS Chain to RCE-CVE-2026-41472",
"fork": false,
"created_at": "2026-01-18T15:45:35Z",
"updated_at": "2026-07-24T01:30:31Z",
"updated_at": "2026-07-30T14:12:44Z",
"pushed_at": "2026-07-17T12:30:07Z",
"stargazers_count": 0,
"watchers_count": 0,
2026/CVE-2026-41940.json
+2 -2
View File
@@ -609,8 +609,8 @@
"description": "A cPanel and WHM authentication bypassing tool",
"fork": false,
"created_at": "2026-07-20T14:15:54Z",
"updated_at": "2026-07-27T12:09:38Z",
"pushed_at": "2026-07-20T14:23:26Z",
"updated_at": "2026-07-30T15:05:25Z",
"pushed_at": "2026-07-30T15:00:52Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-42533.json
+10 -10
View File
@@ -14,10 +14,10 @@
"description": "Static config scanner that flags nginx configs vulnerable to the complex_value two-pass capture-clobbering bug (regex map + regex capture → heap overflow \/ info leak).",
"fork": false,
"created_at": "2026-07-04T11:05:56Z",
"updated_at": "2026-07-29T15:02:08Z",
"updated_at": "2026-07-30T16:50:16Z",
"pushed_at": "2026-07-20T15:12:42Z",
"stargazers_count": 26,
"watchers_count": 26,
"stargazers_count": 27,
"watchers_count": 27,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 26,
"watchers": 27,
"score": 0,
"subscribers_count": 0
},
@@ -234,7 +234,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -242,7 +242,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
@@ -262,10 +262,10 @@
"description": "nginx heap buffer overflow PoC — CVE-2026-42533 pre-auth RCE via two-pass capture clobbering. Crash confirmed on Ubuntu 24.04.",
"fork": false,
"created_at": "2026-07-27T08:03:07Z",
"updated_at": "2026-07-30T10:52:11Z",
"updated_at": "2026-07-30T16:39:27Z",
"pushed_at": "2026-07-27T08:09:53Z",
"stargazers_count": 24,
"watchers_count": 24,
"stargazers_count": 25,
"watchers_count": 25,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -276,7 +276,7 @@
"topics": [],
"visibility": "public",
"forks": 7,
"watchers": 24,
"watchers": 25,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-42978.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-42978 — Use-After-Free race condition in Windows Push Notifications (WpnService). Patch diff, root cause analysis, TOCTOU lab, Sysmon\/ETW detection rules.",
"fork": false,
"created_at": "2026-06-23T21:05:55Z",
"updated_at": "2026-07-29T09:53:27Z",
"updated_at": "2026-07-30T18:33:13Z",
"pushed_at": "2026-06-23T21:08:36Z",
"stargazers_count": 23,
"watchers_count": 23,
"stargazers_count": 25,
"watchers_count": 25,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 7,
"watchers": 23,
"watchers": 25,
"score": 0,
"subscribers_count": 1
}
2026/CVE-2026-43499.json
+44 -44
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-43499 PoC",
"fork": false,
"created_at": "2026-06-27T04:09:11Z",
"updated_at": "2026-07-29T22:09:57Z",
"updated_at": "2026-07-30T16:12:01Z",
"pushed_at": "2026-06-27T05:04:04Z",
"stargazers_count": 131,
"watchers_count": 131,
"stargazers_count": 134,
"watchers_count": 134,
"has_discussions": false,
"forks_count": 34,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 34,
"watchers": 131,
"watchers": 134,
"score": 0,
"subscribers_count": 1
},
@@ -146,10 +146,10 @@
"description": "OPPO Find N2 GhostLock (CVE-2026-43499) exploit adaptation",
"fork": false,
"created_at": "2026-07-09T22:46:15Z",
"updated_at": "2026-07-29T22:55:16Z",
"updated_at": "2026-07-30T18:38:58Z",
"pushed_at": "2026-07-23T04:58:39Z",
"stargazers_count": 53,
"watchers_count": 53,
"stargazers_count": 54,
"watchers_count": 54,
"has_discussions": false,
"forks_count": 24,
"allow_forking": true,
@@ -160,7 +160,7 @@
"topics": [],
"visibility": "public",
"forks": 24,
"watchers": 53,
"watchers": 54,
"score": 0,
"subscribers_count": 0
},
@@ -245,10 +245,10 @@
"description": "CVE-2026-43499 Implementation for 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k",
"fork": false,
"created_at": "2026-07-12T10:15:03Z",
"updated_at": "2026-07-28T19:15:03Z",
"updated_at": "2026-07-30T17:10:08Z",
"pushed_at": "2026-07-15T22:46:59Z",
"stargazers_count": 202,
"watchers_count": 202,
"stargazers_count": 204,
"watchers_count": 204,
"has_discussions": false,
"forks_count": 74,
"allow_forking": true,
@@ -259,7 +259,7 @@
"topics": [],
"visibility": "public",
"forks": 74,
"watchers": 202,
"watchers": 204,
"score": 0,
"subscribers_count": 1
},
@@ -311,12 +311,12 @@
"description": "GhostLock (CVE-2026-43499) kernel exploit for OnePlus devices with locked bootloader",
"fork": false,
"created_at": "2026-07-12T16:05:24Z",
"updated_at": "2026-07-30T12:11:40Z",
"updated_at": "2026-07-30T16:31:36Z",
"pushed_at": "2026-07-28T20:20:52Z",
"stargazers_count": 113,
"watchers_count": 113,
"stargazers_count": 119,
"watchers_count": 119,
"has_discussions": false,
"forks_count": 24,
"forks_count": 28,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -331,8 +331,8 @@
"root"
],
"visibility": "public",
"forks": 24,
"watchers": 113,
"forks": 28,
"watchers": 119,
"score": 0,
"subscribers_count": 2
},
@@ -549,12 +549,12 @@
"description": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.",
"fork": false,
"created_at": "2026-07-14T14:21:27Z",
"updated_at": "2026-07-30T11:30:13Z",
"updated_at": "2026-07-30T17:53:34Z",
"pushed_at": "2026-07-30T11:28:07Z",
"stargazers_count": 12,
"watchers_count": 12,
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
"forks_count": 5,
"forks_count": 6,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -562,8 +562,8 @@
"pull_request_creation_policy": "collaborators_only",
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 12,
"forks": 6,
"watchers": 16,
"score": 0,
"subscribers_count": 0
},
@@ -879,10 +879,10 @@
"description": "Standalone CVE-2026-43499 PoC for Galaxy S25 Ultra SM-S938N S938NKSUACZF1",
"fork": false,
"created_at": "2026-07-16T08:02:46Z",
"updated_at": "2026-07-29T06:08:57Z",
"updated_at": "2026-07-30T16:23:08Z",
"pushed_at": "2026-07-17T14:41:41Z",
"stargazers_count": 32,
"watchers_count": 32,
"stargazers_count": 33,
"watchers_count": 33,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -893,7 +893,7 @@
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 32,
"watchers": 33,
"score": 0,
"subscribers_count": 0
},
@@ -1077,12 +1077,12 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
"updated_at": "2026-07-30T12:46:39Z",
"updated_at": "2026-07-30T18:43:04Z",
"pushed_at": "2026-07-19T09:11:56Z",
"stargazers_count": 233,
"watchers_count": 233,
"stargazers_count": 259,
"watchers_count": 259,
"has_discussions": false,
"forks_count": 42,
"forks_count": 44,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1090,8 +1090,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 42,
"watchers": 233,
"forks": 44,
"watchers": 259,
"score": 0,
"subscribers_count": 4
},
@@ -1143,12 +1143,12 @@
"description": "（CVE-2026-43499）内核漏洞利用程序，适用于未解锁 Bootloader 的一加设备。",
"fork": false,
"created_at": "2026-07-18T06:24:34Z",
"updated_at": "2026-07-29T13:57:56Z",
"updated_at": "2026-07-30T17:41:37Z",
"pushed_at": "2026-07-19T08:28:49Z",
"stargazers_count": 27,
"watchers_count": 27,
"stargazers_count": 29,
"watchers_count": 29,
"has_discussions": false,
"forks_count": 10,
"forks_count": 11,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1156,8 +1156,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 10,
"watchers": 27,
"forks": 11,
"watchers": 29,
"score": 0,
"subscribers_count": 0
},
@@ -1492,10 +1492,10 @@
"description": "（CVE-2026-43499）内核漏洞利用程序，适用于未解锁 Bootloader 的一加15T.",
"fork": false,
"created_at": "2026-07-25T03:02:29Z",
"updated_at": "2026-07-29T22:48:27Z",
"updated_at": "2026-07-30T17:42:43Z",
"pushed_at": "2026-07-25T04:13:46Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -1506,7 +1506,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-45321.json
-33
View File
@@ -65,39 +65,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1237024116,
"name": "tanstack-shield",
"full_name": "Caixa-git\/tanstack-shield",
"owner": {
"login": "Caixa-git",
"id": 21361622,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/21361622?v=4",
"html_url": "https:\/\/github.com\/Caixa-git",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Caixa-git\/tanstack-shield",
"description": "🛡️ One-command scanner for CVE-2026-45321 — TanStack npm supply-chain attack",
"fork": false,
"created_at": "2026-05-12T19:58:56Z",
"updated_at": "2026-05-12T20:14:11Z",
"pushed_at": "2026-05-12T20:14:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1237037761,
"name": "scan-shai-hulud",
2026/CVE-2026-46215.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "This is an exploit for CVE-2026-46215 (Linux Kernel Use After Free) Adapted for Linux 7.0 !!! by Antonius (ev1lut10n \/ sw0rdm4n)",
"fork": false,
"created_at": "2026-07-11T16:16:51Z",
"updated_at": "2026-07-28T05:38:51Z",
"updated_at": "2026-07-30T16:56:22Z",
"pushed_at": "2026-07-18T11:23:18Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-48558.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "SimpleHelp OIDC Authentication Bypass PoC",
"fork": false,
"created_at": "2026-07-02T16:11:50Z",
"updated_at": "2026-07-20T23:59:49Z",
"updated_at": "2026-07-30T15:06:43Z",
"pushed_at": "2026-07-02T16:47:50Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 7,
"watchers": 8,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-50416.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-50416: Windows 11 KASLR bypass",
"fork": false,
"created_at": "2026-07-17T12:12:33Z",
"updated_at": "2026-07-30T11:57:35Z",
"updated_at": "2026-07-30T12:54:38Z",
"pushed_at": "2026-07-18T13:45:51Z",
"stargazers_count": 41,
"watchers_count": 41,
"stargazers_count": 42,
"watchers_count": 42,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -45,7 +45,7 @@
],
"visibility": "public",
"forks": 5,
"watchers": 41,
"watchers": 42,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-50522.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "CVE-2026-50522 PoC",
"fork": false,
"created_at": "2026-07-25T08:23:28Z",
"updated_at": "2026-07-30T06:27:50Z",
"updated_at": "2026-07-30T14:50:30Z",
"pushed_at": "2026-07-25T09:39:40Z",
"stargazers_count": 32,
"watchers_count": 32,
"stargazers_count": 33,
"watchers_count": 33,
"has_discussions": false,
"forks_count": 13,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 13,
"watchers": 32,
"watchers": 33,
"score": 0,
"subscribers_count": 2
},
2026/CVE-2026-54121.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "Certighost POC",
"fork": false,
"created_at": "2026-07-23T18:54:34Z",
"updated_at": "2026-07-30T10:41:54Z",
"updated_at": "2026-07-30T16:21:31Z",
"pushed_at": "2026-07-28T15:44:50Z",
"stargazers_count": 281,
"watchers_count": 281,
"stargazers_count": 282,
"watchers_count": 282,
"has_discussions": false,
"forks_count": 69,
"forks_count": 70,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 69,
"watchers": 281,
"forks": 70,
"watchers": 282,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-56782.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-56782 — Gorse <0.5.10 unauthenticated DB dump\/restore (admin_api_key fail-open). Lab + PoC, verified e2e.",
"fork": false,
"created_at": "2026-06-29T22:09:45Z",
"updated_at": "2026-06-30T14:07:01Z",
"updated_at": "2026-07-30T15:55:13Z",
"pushed_at": "2026-06-30T14:04:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -37,7 +37,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-57827.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE. Split-controller upload bypass. CVSS 9.8 | CWE-434 | com_rsfiles < 1.17.12",
"fork": false,
"created_at": "2026-07-29T20:19:30Z",
"updated_at": "2026-07-30T11:23:06Z",
"updated_at": "2026-07-30T15:06:28Z",
"pushed_at": "2026-07-29T20:38:51Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -42,7 +42,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-58457.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "PoC tools for CVE-2026-58457: Unauthenticated OS Command Injection leading to remote root on Shenzhen Aitemi M300 Wi-Fi Repeater (MT02). Includes exploit, validator, payload generator, and Metasploit module. For educational and authorized pentesting only.",
"fork": false,
"created_at": "2026-07-16T22:53:59Z",
"updated_at": "2026-07-17T03:08:56Z",
"updated_at": "2026-07-30T15:06:35Z",
"pushed_at": "2026-07-16T23:44:49Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-60004.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-60004",
"fork": false,
"created_at": "2026-07-29T08:35:16Z",
"updated_at": "2026-07-30T08:30:12Z",
"updated_at": "2026-07-30T17:20:39Z",
"pushed_at": "2026-07-29T08:45:51Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-63030.json
+16 -16
View File
@@ -14,12 +14,12 @@
"description": "wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain",
"fork": false,
"created_at": "2026-07-17T20:18:33Z",
"updated_at": "2026-07-30T11:59:05Z",
"updated_at": "2026-07-30T16:24:36Z",
"pushed_at": "2026-07-23T09:23:48Z",
"stargazers_count": 678,
"watchers_count": 678,
"stargazers_count": 683,
"watchers_count": 683,
"has_discussions": false,
"forks_count": 156,
"forks_count": 157,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -31,8 +31,8 @@
"wp2shell-poc"
],
"visibility": "public",
"forks": 156,
"watchers": 678,
"forks": 157,
"watchers": 683,
"score": 0,
"subscribers_count": 3
},
@@ -89,7 +89,7 @@
"stargazers_count": 44,
"watchers_count": 44,
"has_discussions": false,
"forks_count": 7,
"forks_count": 8,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -97,7 +97,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 7,
"forks": 8,
"watchers": 44,
"score": 0,
"subscribers_count": 0
@@ -546,10 +546,10 @@
"description": "A fully red-team(offensive security) weaponized variant of wp2shell, built for authorized penetration testing & educational purposes.",
"fork": false,
"created_at": "2026-07-18T16:07:41Z",
"updated_at": "2026-07-20T12:30:46Z",
"updated_at": "2026-07-30T15:06:42Z",
"pushed_at": "2026-07-18T20:35:24Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -560,7 +560,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
@@ -1244,10 +1244,10 @@
"description": "Detect & clean up wp2shell (CVE-2026-63030) WordPress compromise — bulk-runnable, read-only by default",
"fork": false,
"created_at": "2026-07-19T16:02:08Z",
"updated_at": "2026-07-28T19:00:41Z",
"updated_at": "2026-07-30T15:22:18Z",
"pushed_at": "2026-07-21T08:22:34Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -1258,7 +1258,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-6307.json
+8 -8
View File
@@ -14,10 +14,10 @@
"description": "Google Chrome CVE-2026-6307 PoC",
"fork": false,
"created_at": "2026-07-01T13:23:25Z",
"updated_at": "2026-07-29T00:57:33Z",
"updated_at": "2026-07-30T17:38:21Z",
"pushed_at": "2026-07-01T13:32:36Z",
"stargazers_count": 50,
"watchers_count": 50,
"stargazers_count": 51,
"watchers_count": 51,
"has_discussions": false,
"forks_count": 13,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 13,
"watchers": 50,
"watchers": 51,
"score": 0,
"subscribers_count": 0
},
@@ -47,10 +47,10 @@
"description": "CVE-2026-6307 PoC: Longinus - 2 Boundaries in One Bug https:\/\/nebusec.ai\/research\/v8-cve-2026-6307-writeup\/)",
"fork": false,
"created_at": "2026-07-01T17:00:30Z",
"updated_at": "2026-07-22T14:57:28Z",
"updated_at": "2026-07-30T15:06:44Z",
"pushed_at": "2026-07-01T18:18:02Z",
"stargazers_count": 9,
"watchers_count": 9,
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 9,
"watchers": 10,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-66066.json
+6 -6
View File
@@ -80,12 +80,12 @@
"description": "PoC for CVE-2026-66066 in Ruby on Rails",
"fork": false,
"created_at": "2026-07-29T21:08:30Z",
"updated_at": "2026-07-30T12:40:00Z",
"updated_at": "2026-07-30T17:17:27Z",
"pushed_at": "2026-07-30T03:31:15Z",
"stargazers_count": 9,
"watchers_count": 9,
"stargazers_count": 14,
"watchers_count": 14,
"has_discussions": false,
"forks_count": 2,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -93,8 +93,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 9,
"forks": 3,
"watchers": 14,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-66412.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛡️ CVE Proof-of-Concept Hub — 21 security advisories · 80+ vulnerabilities · 19 CVEs under review · 1 PUBLISHED (CVE-2026-66412)",
"fork": false,
"created_at": "2026-07-01T20:56:43Z",
"updated_at": "2026-07-29T17:20:30Z",
"pushed_at": "2026-07-29T17:20:11Z",
"updated_at": "2026-07-30T18:51:12Z",
"pushed_at": "2026-07-30T18:46:25Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-7228.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "risorse di ricerca per cve-2026-7228",
"fork": false,
"created_at": "2026-07-24T09:03:54Z",
"updated_at": "2026-07-24T16:16:26Z",
"pushed_at": "2026-07-24T16:16:20Z",
"updated_at": "2026-07-30T15:36:19Z",
"pushed_at": "2026-07-30T15:30:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
README.md
+9 -14
View File
@@ -2622,6 +2622,7 @@
- [John-Popovici/CVE-2026-31431-CopyFail-Linux-PrivEsc](https://github.com/John-Popovici/CVE-2026-31431-CopyFail-Linux-PrivEsc)
- [tgies/copy-fail-c](https://github.com/tgies/copy-fail-c)
- [ZephrFish/CopyFail-CVE-2026-31431](https://github.com/ZephrFish/CopyFail-CVE-2026-31431)
- [insomnisec/Detections-CVE-2026-31431](https://github.com/insomnisec/Detections-CVE-2026-31431)
- [ryan2929/CVE-2026-31431](https://github.com/ryan2929/CVE-2026-31431)
- [st4rburn/RootRemover](https://github.com/st4rburn/RootRemover)
@@ -3678,7 +3679,7 @@
<code>CyberPanel versions prior to 2.4.4 contain a stored cross-site scripting vulnerability in the AI Scanner dashboard where the POST /api/ai-scanner/callback endpoint lacks authentication and allows unauthenticated attackers to inject malicious JavaScript by overwriting the findings_json field of ScanHistory records. Attackers can inject JavaScript that executes in an administrator's authenticated session when they visit the AI Scanner dashboard, allowing them to issue same-origin requests to plant cron jobs and achieve remote code execution on the server.
</code>
- [whiteov3rflow/CyberPanel-Poc](https://github.com/whiteov3rflow/CyberPanel-Poc)
- [whiteov3rflow/CVE-2026-41472-POC](https://github.com/whiteov3rflow/CVE-2026-41472-POC)
### CVE-2026-41490 (2026-05-07)
@@ -4336,7 +4337,6 @@
- [ry-allan/tanstack-compromise-checker](https://github.com/ry-allan/tanstack-compromise-checker)
- [Yomisana/are-you-get-tanstack-attack](https://github.com/Yomisana/are-you-get-tanstack-attack)
- [Caixa-git/tanstack-shield](https://github.com/Caixa-git/tanstack-shield)
- [qi-scape/scan-shai-hulud](https://github.com/qi-scape/scan-shai-hulud)
- [shayr1/shai-hulud-scan](https://github.com/shayr1/shai-hulud-scan)
- [Intrudify/mini-shai-hulud-scanner](https://github.com/Intrudify/mini-shai-hulud-scanner)
@@ -10631,7 +10631,7 @@
<code>Label Studio is an open source data labeling tool. Prior to version 1.16.0, Label Studio's `/projects/upload-example` endpoint allows injection of arbitrary HTML through a `GET` request with an appropriately crafted `label_config` query parameter. By crafting a specially formatted XML label config with inline task data containing malicious HTML/JavaScript, an attacker can achieve Cross-Site Scripting (XSS). While the application has a Content Security Policy (CSP), it is only set in report-only mode, making it ineffective at preventing script execution. The vulnerability exists because the upload-example endpoint renders user-provided HTML content without proper sanitization on a GET request. This allows attackers to inject and execute arbitrary JavaScript in victims' browsers by getting them to visit a maliciously crafted URL. This is considered vulnerable because it enables attackers to execute JavaScript in victims' contexts, potentially allowing theft of sensitive data, session hijacking, or other malicious actions. Version 1.16.0 contains a patch for the issue.
</code>
- [math-x-io/CVE-2025-25296-POC](https://github.com/math-x-io/CVE-2025-25296-POC)
- [math-x-io/CVE-2025-25296](https://github.com/math-x-io/CVE-2025-25296)
### CVE-2025-25347
- [Yetazyyy/CVE-2025-25347](https://github.com/Yetazyyy/CVE-2025-25347)
@@ -16902,6 +16902,7 @@
- [eagle-nett/FORTIWEB_CVE-2025-64446-58034](https://github.com/eagle-nett/FORTIWEB_CVE-2025-64446-58034)
- [0xBlackash/CVE-2025-64446](https://github.com/0xBlackash/CVE-2025-64446)
- [litndat/Vulnerability-CVE-2025-64446-CVE-2025-58034](https://github.com/litndat/Vulnerability-CVE-2025-64446-CVE-2025-58034)
- [CerberusMrXi/FortiWeb-cve-2025-64446-RCE-exploit](https://github.com/CerberusMrXi/FortiWeb-cve-2025-64446-RCE-exploit)
### CVE-2025-64458 (2025-11-05)
@@ -17556,13 +17557,6 @@
- [sivaadityacoder/CVE-2025-67146-CVE-2025-67147](https://github.com/sivaadityacoder/CVE-2025-67146-CVE-2025-67147)
### CVE-2025-67159 (2026-01-02)
<code>Vatilon v1.12.37-20240124 was discovered to transmit user credentials in plaintext.
</code>
- [Remenis/CVE-2025-67159](https://github.com/Remenis/CVE-2025-67159)
### CVE-2025-67160 (2026-01-02)
<code>An issue in Vatilon v1.12.37-20240124 allows attackers to access sensitive directories and files via a directory traversal.
@@ -28708,7 +28702,7 @@
<code>Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to version 1.4.3, an attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. With a more complex (undisclosed) payload, one can get full access to Arbitrary code execution on the system. The problem has been patched in version 1.4.3 of Angular Expressions. Two possible workarounds are available. One may either disable access to `__proto__` globally or make sure that one uses the function with just one argument.
</code>
- [math-x-io/CVE-2024-54152-poc](https://github.com/math-x-io/CVE-2024-54152-poc)
- [math-x-io/CVE-2024-54152](https://github.com/math-x-io/CVE-2024-54152)
### CVE-2024-54160 (2025-02-12)
@@ -29593,6 +29587,7 @@
</code>
- [diego-tella/CVE-2023-1326-PoC](https://github.com/diego-tella/CVE-2023-1326-PoC)
- [Pol-Ruiz/CVE-2023-1326](https://github.com/Pol-Ruiz/CVE-2023-1326)
- [h3x0v3rl0rd/CVE-2023-1326](https://github.com/h3x0v3rl0rd/CVE-2023-1326)
- [cve-2024/CVE-2023-1326-PoC](https://github.com/cve-2024/CVE-2023-1326-PoC)
@@ -30177,7 +30172,7 @@
### CVE-2023-3609 (2023-07-21)
<code>A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation.\n\nIf tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.\n\nWe recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.
<code>A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation.\n\n\n\nIf tcf_change_indev() fails, u32_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.\n\n\n\nWe recommend upgrading past commit 04c55383fa5689357bcdd2c8036725a55ed632bc.
</code>
- [Jturnxd/CVE-2023-3609](https://github.com/Jturnxd/CVE-2023-3609)
@@ -37797,7 +37792,6 @@
<code>The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.
</code>
- [kabiri-labs/sshfinder](https://github.com/kabiri-labs/sshfinder)
- [TrixSec/CVE-2023-48795](https://github.com/TrixSec/CVE-2023-48795)
- [Dr0xharakiri/CVE-2023-48795](https://github.com/Dr0xharakiri/CVE-2023-48795)
- [oseasfr/Scanner_CVE_OpenSSH](https://github.com/oseasfr/Scanner_CVE_OpenSSH)
@@ -50136,7 +50130,7 @@
<code>Istio is an open source platform for providing a uniform way to integrate microservices, manage traffic flow across microservices, enforce policies and aggregate telemetry data. Istio 1.11.0, 1.10.3 and below, and 1.9.7 and below contain a remotely exploitable vulnerability where an HTTP request with `#fragment` in the path may bypass Istio’s URI path based authorization policies. Patches are available in Istio 1.11.1, Istio 1.10.4 and Istio 1.9.8. As a work around a Lua filter may be written to normalize the path.
</code>
- [anonymousAIware2026/MicroserviceCVE-2021-39156](https://github.com/anonymousAIware2026/MicroserviceCVE-2021-39156)
- [mostafaanouarghorab/MicroserviceCVE-2021-39156](https://github.com/mostafaanouarghorab/MicroserviceCVE-2021-39156)
### CVE-2021-39165 (2021-08-26)
@@ -67909,6 +67903,7 @@
- [beraphin/CVE-2017-8890](https://github.com/beraphin/CVE-2017-8890)
- [thinkycx/CVE-2017-8890](https://github.com/thinkycx/CVE-2017-8890)
- [7043mcgeep/cve-2017-8890-msf](https://github.com/7043mcgeep/cve-2017-8890-msf)
- [sweatyrocket/huawei-p10-cve-2017-8890-unlock](https://github.com/sweatyrocket/huawei-p10-cve-2017-8890-unlock)
### CVE-2017-8917 (2017-05-17)