nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/07/31 00:52:06

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-07-31 09:52:06 +09:00
1 parent 701b2e1e8e
commit 722d6b58b0
52 files changed
+622 -307
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2005/CVE-2005-0575.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "CVE-2005-0575 - KNet Web Server 1.04b Remote Buffer Overflow SEH Exploit for x86 Windows XP SP3, this exploit needs some adjustment ! edit the code before run ! Developed by Antonius - made in the past, I forgot when I made it",
"fork": false,
"created_at": "2026-05-14T00:39:08Z",
"updated_at": "2026-07-07T03:59:22Z",
"pushed_at": "2026-07-07T03:44:11Z",
"updated_at": "2026-07-30T19:41:15Z",
"pushed_at": "2026-07-30T19:41:03Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2014/CVE-2014-0160.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "A checker (site and tool) for CVE-2014-0160",
"fork": false,
"created_at": "2014-04-07T23:03:09Z",
"updated_at": "2026-07-19T15:21:44Z",
"updated_at": "2026-07-30T20:00:42Z",
"pushed_at": "2021-02-24T09:17:24Z",
"stargazers_count": 2389,
"watchers_count": 2389,
2018/CVE-2018-16763.json
+4 -4
View File
@@ -358,10 +358,10 @@
"description": "Exploit to trigger RCE for CVE-2018-16763 on FuelCMS <= 1.4.1 and interactive shell. ",
"fork": false,
"created_at": "2022-05-31T15:31:37Z",
"updated_at": "2026-07-29T01:18:42Z",
"updated_at": "2026-07-30T21:23:00Z",
"pushed_at": "2025-01-31T09:32:53Z",
"stargazers_count": 26,
"watchers_count": 26,
"stargazers_count": 25,
"watchers_count": 25,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -377,7 +377,7 @@
],
"visibility": "public",
"forks": 3,
"watchers": 26,
"watchers": 25,
"score": 0,
"subscribers_count": 1
},
2018/CVE-2018-17246.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2018-17246 - Kibana LFI < 6.4.3 & 5.6.13",
"fork": false,
"created_at": "2019-03-08T20:06:15Z",
"updated_at": "2026-07-29T21:19:26Z",
"updated_at": "2026-07-30T21:17:14Z",
"pushed_at": "2019-10-26T13:28:34Z",
"stargazers_count": 66,
"watchers_count": 66,
"stargazers_count": 65,
"watchers_count": 65,
"has_discussions": false,
"forks_count": 15,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 15,
"watchers": 66,
"watchers": 65,
"score": 0,
"subscribers_count": 3
},
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-07-30T17:46:20Z",
"pushed_at": "2026-07-30T17:46:12Z",
"updated_at": "2026-07-30T23:44:16Z",
"pushed_at": "2026-07-30T23:44:12Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2019/CVE-2019-7609.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "RCE on Kibana versions before 5.6.15 and 6.6.0 in the Timelion visualizer",
"fork": false,
"created_at": "2019-10-21T07:32:31Z",
"updated_at": "2026-07-29T21:19:20Z",
"updated_at": "2026-07-30T21:17:21Z",
"pushed_at": "2019-12-20T14:28:44Z",
"stargazers_count": 57,
"watchers_count": 57,
"stargazers_count": 56,
"watchers_count": 56,
"has_discussions": false,
"forks_count": 12,
"allow_forking": true,
@@ -64,7 +64,7 @@
],
"visibility": "public",
"forks": 12,
"watchers": 57,
"watchers": 56,
"score": 0,
"subscribers_count": 2
},
2019/CVE-2019-8942.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "A simple PoC for WordPress RCE (author priviledge), refer to CVE-2019-8942 and CVE-2019-8943.",
"fork": false,
"created_at": "2019-02-25T06:38:15Z",
"updated_at": "2026-07-29T01:15:32Z",
"updated_at": "2026-07-30T21:20:21Z",
"pushed_at": "2019-03-18T01:20:52Z",
"stargazers_count": 74,
"watchers_count": 74,
"stargazers_count": 73,
"watchers_count": 73,
"has_discussions": false,
"forks_count": 20,
"allow_forking": true,
@@ -31,7 +31,7 @@
],
"visibility": "public",
"forks": 20,
"watchers": 74,
"watchers": 73,
"score": 0,
"subscribers_count": 1
},
2019/CVE-2019-9978.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2019-9978 - RCE on a Wordpress plugin: Social Warfare < 3.5.3",
"fork": false,
"created_at": "2019-03-25T23:38:58Z",
"updated_at": "2026-07-29T21:19:37Z",
"updated_at": "2026-07-30T21:17:07Z",
"pushed_at": "2019-05-09T13:36:42Z",
"stargazers_count": 9,
"watchers_count": 9,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -31,7 +31,7 @@
],
"visibility": "public",
"forks": 2,
"watchers": 9,
"watchers": 8,
"score": 0,
"subscribers_count": 1
},
2020/CVE-2020-0668.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Use CVE-2020-0668 to perform an arbitrary privileged file move operation.",
"fork": false,
"created_at": "2020-02-20T06:22:40Z",
"updated_at": "2026-07-29T10:33:50Z",
"updated_at": "2026-07-30T23:34:45Z",
"pushed_at": "2020-02-20T11:03:18Z",
"stargazers_count": 236,
"watchers_count": 236,
"stargazers_count": 237,
"watchers_count": 237,
"has_discussions": false,
"forks_count": 53,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 53,
"watchers": 236,
"watchers": 237,
"score": 0,
"subscribers_count": 6
},
2020/CVE-2020-1472.json
+2 -2
View File
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-07-30T18:03:42Z",
"pushed_at": "2026-07-30T18:00:00Z",
"updated_at": "2026-07-30T23:43:12Z",
"pushed_at": "2026-07-30T23:43:08Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2021/CVE-2021-1675.json
+4 -4
View File
@@ -329,10 +329,10 @@
"description": "Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)",
"fork": false,
"created_at": "2021-07-01T23:45:58Z",
"updated_at": "2026-07-28T18:54:18Z",
"updated_at": "2026-07-30T23:33:47Z",
"pushed_at": "2021-07-05T08:54:06Z",
"stargazers_count": 1102,
"watchers_count": 1102,
"stargazers_count": 1103,
"watchers_count": 1103,
"has_discussions": false,
"forks_count": 225,
"allow_forking": true,
@@ -343,7 +343,7 @@
"topics": [],
"visibility": "public",
"forks": 225,
"watchers": 1102,
"watchers": 1103,
"score": 0,
"subscribers_count": 23
},
2021/CVE-2021-3156.json
+4 -4
View File
@@ -1114,10 +1114,10 @@
"description": "Sudo Baron Samedit Exploit",
"fork": false,
"created_at": "2021-03-15T17:37:02Z",
"updated_at": "2026-07-13T12:00:52Z",
"updated_at": "2026-07-30T21:21:43Z",
"pushed_at": "2022-01-13T05:48:01Z",
"stargazers_count": 801,
"watchers_count": 801,
"stargazers_count": 802,
"watchers_count": 802,
"has_discussions": false,
"forks_count": 175,
"allow_forking": true,
@@ -1128,7 +1128,7 @@
"topics": [],
"visibility": "public",
"forks": 175,
"watchers": 801,
"watchers": 802,
"score": 0,
"subscribers_count": 10
},
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-07-30T17:55:19Z",
"pushed_at": "2026-07-30T17:54:19Z",
"updated_at": "2026-07-30T23:57:06Z",
"pushed_at": "2026-07-30T23:57:03Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2022/CVE-2022-22965.json
-35
View File
@@ -3328,41 +3328,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1292063074,
"name": "CVE-2022-22965",
"full_name": "RootEvil333\/CVE-2022-22965",
"owner": {
"login": "RootEvil333",
"id": 297998846,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/297998846?v=4",
"html_url": "https:\/\/github.com\/RootEvil333",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/RootEvil333\/CVE-2022-22965",
"description": "CVE-2022-22965",
"fork": false,
"created_at": "2026-07-07T09:12:45Z",
"updated_at": "2026-07-07T09:16:17Z",
"pushed_at": "2026-07-07T09:13:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2022-22965"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1301331457,
"name": "spring4shell-local-verification-lab",
2022/CVE-2022-24903.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1317706115,
"name": "CVE-2022-24903-Heap-based-buffer-overflow-Hand-On-Lab",
"full_name": "andree554\/CVE-2022-24903-Heap-based-buffer-overflow-Hand-On-Lab",
"owner": {
"login": "andree554",
"id": 152012008,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/152012008?v=4",
"html_url": "https:\/\/github.com\/andree554",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/andree554\/CVE-2022-24903-Heap-based-buffer-overflow-Hand-On-Lab",
"description": "CVE-2022-24903 Heap-based buffer overflow ",
"fork": false,
"created_at": "2026-07-30T21:47:40Z",
"updated_at": "2026-07-30T21:49:14Z",
"pushed_at": "2026-07-30T21:49:10Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2022/CVE-2022-26134.json
-36
View File
@@ -2492,41 +2492,5 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1296346833,
"name": "CVE-2022-26134",
"full_name": "RootEvil333\/CVE-2022-26134",
"owner": {
"login": "RootEvil333",
"id": 297998846,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/297998846?v=4",
"html_url": "https:\/\/github.com\/RootEvil333",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/RootEvil333\/CVE-2022-26134",
"description": "Exploit for CVE-2022-26134",
"fork": false,
"created_at": "2026-07-10T09:51:02Z",
"updated_at": "2026-07-10T09:57:38Z",
"pushed_at": "2026-07-10T09:52:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2022-26134",
"exploit"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2022/CVE-2022-36446.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "A Python script to exploit CVE-2022-36446 Software Package Updates RCE (Authenticated) on Webmin < 1.997.",
"fork": false,
"created_at": "2022-08-11T11:47:17Z",
"updated_at": "2026-07-29T01:18:39Z",
"updated_at": "2026-07-30T21:23:01Z",
"pushed_at": "2025-01-31T09:36:30Z",
"stargazers_count": 116,
"watchers_count": 116,
"stargazers_count": 115,
"watchers_count": 115,
"has_discussions": false,
"forks_count": 32,
"allow_forking": true,
@@ -36,7 +36,7 @@
],
"visibility": "public",
"forks": 32,
"watchers": 116,
"watchers": 115,
"score": 0,
"subscribers_count": 1
},
2023/CVE-2023-4911.json
+4 -4
View File
@@ -645,10 +645,10 @@
"description": "Pure C exploit for CVE-2023-4911 (Looney Tunables) — x86_64 & aarch64 implementations. Multi-processing brute-forcing, dynamic calibration, integrated ELF parser.",
"fork": false,
"created_at": "2026-06-29T21:05:09Z",
"updated_at": "2026-07-16T16:00:30Z",
"updated_at": "2026-07-30T18:46:26Z",
"pushed_at": "2026-07-07T21:02:06Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -670,7 +670,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
2024/CVE-2024-56145.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Unauthenticated RCE on CraftCMS when PHP `register_argc_argv` config setting is enabled",
"fork": false,
"created_at": "2024-12-20T03:34:01Z",
"updated_at": "2026-07-29T01:11:28Z",
"updated_at": "2026-07-30T21:15:50Z",
"pushed_at": "2024-12-23T12:51:54Z",
"stargazers_count": 48,
"watchers_count": 48,
"stargazers_count": 47,
"watchers_count": 47,
"has_discussions": false,
"forks_count": 12,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 12,
"watchers": 48,
"watchers": 47,
"score": 0,
"subscribers_count": 1
},
2024/CVE-2024-6387.json
+12 -12
View File
@@ -47,10 +47,10 @@
"description": "a signal handler race condition in OpenSSH's server (sshd)",
"fork": false,
"created_at": "2024-07-01T10:55:29Z",
"updated_at": "2026-07-27T22:07:25Z",
"updated_at": "2026-07-30T23:27:53Z",
"pushed_at": "2024-07-01T10:54:02Z",
"stargazers_count": 494,
"watchers_count": 494,
"stargazers_count": 495,
"watchers_count": 495,
"has_discussions": false,
"forks_count": 183,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 183,
"watchers": 494,
"watchers": 495,
"score": 0,
"subscribers_count": 4
},
@@ -285,10 +285,10 @@
"description": "CVE-2024-6387_Check is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH",
"fork": false,
"created_at": "2024-07-01T20:33:20Z",
"updated_at": "2026-07-21T21:55:57Z",
"updated_at": "2026-07-30T23:27:55Z",
"pushed_at": "2026-05-29T11:44:40Z",
"stargazers_count": 526,
"watchers_count": 526,
"stargazers_count": 527,
"watchers_count": 527,
"has_discussions": false,
"forks_count": 100,
"allow_forking": true,
@@ -305,7 +305,7 @@
],
"visibility": "public",
"forks": 100,
"watchers": 526,
"watchers": 527,
"score": 0,
"subscribers_count": 6
},
@@ -2213,10 +2213,10 @@
"description": "Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (CVE-2024-6387)",
"fork": false,
"created_at": "2024-07-08T11:27:49Z",
"updated_at": "2026-07-30T04:06:32Z",
"updated_at": "2026-07-30T23:26:58Z",
"pushed_at": "2024-08-22T08:50:25Z",
"stargazers_count": 187,
"watchers_count": 187,
"stargazers_count": 188,
"watchers_count": 188,
"has_discussions": false,
"forks_count": 47,
"allow_forking": true,
@@ -2227,7 +2227,7 @@
"topics": [],
"visibility": "public",
"forks": 47,
"watchers": 187,
"watchers": 188,
"score": 0,
"subscribers_count": 5
},
2025/CVE-2025-21479.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2025-21479 proof-of-concept, I think",
"fork": false,
"created_at": "2025-06-19T19:47:52Z",
"updated_at": "2026-07-28T11:09:51Z",
"updated_at": "2026-07-30T20:00:44Z",
"pushed_at": "2025-08-16T06:52:13Z",
"stargazers_count": 260,
"watchers_count": 260,
"stargazers_count": 262,
"watchers_count": 262,
"has_discussions": false,
"forks_count": 59,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 59,
"watchers": 260,
"watchers": 262,
"score": 0,
"subscribers_count": 2
},
2025/CVE-2025-32432.json
+37 -4
View File
@@ -290,10 +290,10 @@
"description": "Exploit, POC for CVE-2025-32432, CraftCMS2Shell",
"fork": false,
"created_at": "2026-07-21T16:52:22Z",
"updated_at": "2026-07-21T16:56:02Z",
"updated_at": "2026-07-30T23:44:18Z",
"pushed_at": "2026-07-21T16:55:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -304,7 +304,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
@@ -340,5 +340,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1317756244,
"name": "CVE-2025-32432",
"full_name": "HeltonPojo\/CVE-2025-32432",
"owner": {
"login": "HeltonPojo",
"id": 63515976,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/63515976?v=4",
"html_url": "https:\/\/github.com\/HeltonPojo",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/HeltonPojo\/CVE-2025-32432",
"description": null,
"fork": false,
"created_at": "2026-07-30T23:26:46Z",
"updated_at": "2026-07-30T23:43:35Z",
"pushed_at": "2026-07-30T23:43:31Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-32711.json
+4 -4
View File
@@ -119,10 +119,10 @@
"description": "Scan LLM outputs and AI-generated content for data exfiltration signals (EchoLeak, CVE-2025-32711) before they reach users or downstream systems",
"fork": false,
"created_at": "2026-07-25T13:27:28Z",
"updated_at": "2026-07-29T07:18:06Z",
"updated_at": "2026-07-30T21:41:15Z",
"pushed_at": "2026-07-25T13:27:31Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -139,7 +139,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-36911.json
+4 -4
View File
@@ -86,10 +86,10 @@
"description": "WPair is a defensive security research tool that demonstrates the CVE-2025-36911 (eg WhisperPair) vulnerability in Google's Fast Pair protocol. This vulnerability affects millions of Bluetooth audio devices worldwide, allowing unauthorized pairing and potential microphone access without user consent.",
"fork": false,
"created_at": "2026-01-17T05:28:08Z",
"updated_at": "2026-07-29T08:32:54Z",
"updated_at": "2026-07-30T20:06:07Z",
"pushed_at": "2026-01-18T00:15:59Z",
"stargazers_count": 814,
"watchers_count": 814,
"stargazers_count": 815,
"watchers_count": 815,
"has_discussions": false,
"forks_count": 89,
"allow_forking": true,
@@ -100,7 +100,7 @@
"topics": [],
"visibility": "public",
"forks": 89,
"watchers": 814,
"watchers": 815,
"score": 0,
"subscribers_count": 23
},
2025/CVE-2025-52915.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-07-29T06:59:44Z",
"updated_at": "2026-07-30T20:07:34Z",
"pushed_at": "2026-07-12T09:40:22Z",
"stargazers_count": 872,
"watchers_count": 872,
"stargazers_count": 873,
"watchers_count": 873,
"has_discussions": false,
"forks_count": 129,
"forks_count": 130,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -38,8 +38,8 @@
"vulnerable-driver"
],
"visibility": "public",
"forks": 129,
"watchers": 872,
"forks": 130,
"watchers": 873,
"score": 0,
"subscribers_count": 20
}
2025/CVE-2025-54794.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "A high-severity prompt injection flaw in Claude AI proves that even the smartest language models can be turned into weapons — all with a few lines of code.",
"fork": false,
"created_at": "2025-08-06T08:29:35Z",
"updated_at": "2026-07-07T19:00:45Z",
"updated_at": "2026-07-30T20:20:25Z",
"pushed_at": "2025-08-06T08:43:29Z",
"stargazers_count": 32,
"watchers_count": 32,
"stargazers_count": 33,
"watchers_count": 33,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 32,
"watchers": 33,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-55182.json
+2 -38
View File
@@ -3874,7 +3874,7 @@
"stargazers_count": 313,
"watchers_count": 313,
"has_discussions": false,
"forks_count": 57,
"forks_count": 56,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -3882,7 +3882,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 57,
"forks": 56,
"watchers": 313,
"score": 0,
"subscribers_count": 5
@@ -15512,42 +15512,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1293297542,
"name": "CVE-2025-55182",
"full_name": "RootEvil333\/CVE-2025-55182",
"owner": {
"login": "RootEvil333",
"id": 297998846,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/297998846?v=4",
"html_url": "https:\/\/github.com\/RootEvil333",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/RootEvil333\/CVE-2025-55182",
"description": "Exploit for CVE-2025-55182",
"fork": false,
"created_at": "2026-07-08T08:26:30Z",
"updated_at": "2026-07-08T08:31:38Z",
"pushed_at": "2026-07-08T08:29:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2025-55182",
"exploit"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1302530090,
"name": "Nextjs_Exploit_Tool",
2025/CVE-2025-57819.json
+4 -4
View File
@@ -116,10 +116,10 @@
"description": "FreePBX SQL Injection Exploit",
"fork": false,
"created_at": "2025-09-01T16:29:24Z",
"updated_at": "2026-06-07T14:03:45Z",
"updated_at": "2026-07-30T19:20:48Z",
"pushed_at": "2025-09-01T16:32:45Z",
"stargazers_count": 6,
"watchers_count": 6,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -130,7 +130,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 6,
"watchers": 7,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-58726.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "AD AutoPwn v4.10.0 — automated AD attack chain, zero-auth to Domain Admin. Discover\/Kerberoast\/AS-REP\/AD CS ESC1-16\/Shadow Creds\/RBCD+KCD\/Ghost-SPN\/TGS-rewrite\/Dollar-Ticket\/WPAD\/WSUS\/PXE\/SCCM\/BloodHound auto-action\/Loot\/DCSync\/DPAPI + Synacktiv 2026 reflection (CVE-2025-58726\/2026-24294\/2026-26128). Authorized pentesting only.",
"fork": false,
"created_at": "2026-03-30T19:34:35Z",
"updated_at": "2026-07-30T17:42:03Z",
"updated_at": "2026-07-30T22:56:22Z",
"pushed_at": "2026-07-27T12:19:44Z",
"stargazers_count": 27,
"watchers_count": 27,
"stargazers_count": 28,
"watchers_count": 28,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -38,7 +38,7 @@
],
"visibility": "public",
"forks": 4,
"watchers": 27,
"watchers": 28,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-61155.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "CVE-2025-61155 — arbitrary process termination in GameDriverX64.sys (Tower of Fantasy anti-cheat). Original IDA Pro teardown, PoC, YARA, IOCs, mitigation.",
"fork": false,
"created_at": "2026-06-25T13:01:56Z",
"updated_at": "2026-07-22T01:35:00Z",
"updated_at": "2026-07-30T20:22:58Z",
"pushed_at": "2026-07-06T13:51:03Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -72,7 +72,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-64446.json
+2 -2
View File
@@ -450,8 +450,8 @@
"description": "Security research tool for FortiWeb CVE-2025-64446 vulnerability. Automated exploitation framework with advanced logging, real-time metrics, proxy debugging, and professional reporting. Includes retry logic, multi-threading, and configurable settings. For authorized security testing only. CVSS 9.8 Critical.",
"fork": false,
"created_at": "2026-07-30T18:14:04Z",
"updated_at": "2026-07-30T18:40:24Z",
"pushed_at": "2026-07-30T18:38:33Z",
"updated_at": "2026-07-30T18:58:26Z",
"pushed_at": "2026-07-30T18:58:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-18220.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Proof of Concept (PoC) demonstrating the CVE-2026-18220, an out-of-bounds (OOB) write vulnerability in the DLX ELF backend of GNU binutils (specifically triggered via `objdump -g`)",
"fork": false,
"created_at": "2026-06-22T13:11:58Z",
"updated_at": "2026-07-30T08:30:17Z",
"updated_at": "2026-07-30T19:48:34Z",
"pushed_at": "2026-07-29T12:20:17Z",
"stargazers_count": 73,
"watchers_count": 73,
"stargazers_count": 74,
"watchers_count": 74,
"has_discussions": false,
"forks_count": 18,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 18,
"watchers": 73,
"watchers": 74,
"score": 0,
"subscribers_count": 2
}
2026/CVE-2026-31431.json
+4 -4
View File
@@ -264,10 +264,10 @@
"description": "Copy Fail - CVE-2026-31431",
"fork": false,
"created_at": "2026-04-30T12:59:11Z",
"updated_at": "2026-07-29T07:09:51Z",
"updated_at": "2026-07-30T22:29:43Z",
"pushed_at": "2026-06-05T02:59:22Z",
"stargazers_count": 15,
"watchers_count": 15,
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -278,7 +278,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 15,
"watchers": 16,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-33150.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "RingWraith: CVE-2026-33150 and CVE-2026-33179 — Use-After-Free and NULL Dereference in libfuse io_uring",
"fork": false,
"created_at": "2026-03-25T05:48:59Z",
"updated_at": "2026-07-30T18:43:58Z",
"pushed_at": "2026-07-30T18:39:11Z",
"updated_at": "2026-07-30T19:24:20Z",
"pushed_at": "2026-07-30T19:23:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": true,
2026/CVE-2026-33937.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1317655325,
"name": "CVE-2026-33937-for-DarkZeroReturns",
"full_name": "garlic-wizard\/CVE-2026-33937-for-DarkZeroReturns",
"owner": {
"login": "garlic-wizard",
"id": 70054465,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/70054465?v=4",
"html_url": "https:\/\/github.com\/garlic-wizard",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/garlic-wizard\/CVE-2026-33937-for-DarkZeroReturns",
"description": "this is a poc for CVE-2026-33937 ",
"fork": false,
"created_at": "2026-07-30T20:23:32Z",
"updated_at": "2026-07-30T20:29:52Z",
"pushed_at": "2026-07-30T20:29:32Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-3609.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-07-29T06:59:44Z",
"updated_at": "2026-07-30T20:07:34Z",
"pushed_at": "2026-07-12T09:40:22Z",
"stargazers_count": 872,
"watchers_count": 872,
"stargazers_count": 873,
"watchers_count": 873,
"has_discussions": false,
"forks_count": 129,
"forks_count": 130,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -38,8 +38,8 @@
"vulnerable-driver"
],
"visibility": "public",
"forks": 129,
"watchers": 872,
"forks": 130,
"watchers": 873,
"score": 0,
"subscribers_count": 20
}
2026/CVE-2026-39875.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Unprivileged user to root on macOS Sonoma, Sequoia, and Tahoe. Patched in macOS 26.6 \/ 15.7.8 \/ 14.8.8.",
"fork": false,
"created_at": "2026-07-27T19:14:06Z",
"updated_at": "2026-07-30T15:28:46Z",
"updated_at": "2026-07-30T21:49:07Z",
"pushed_at": "2026-07-28T18:26:20Z",
"stargazers_count": 6,
"watchers_count": 6,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 6,
"watchers": 7,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-42945.json
+4 -4
View File
@@ -509,10 +509,10 @@
"description": "CVE-2026-42945 nginx 32-bit exploit lab ASLR enabled",
"fork": false,
"created_at": "2026-05-16T09:01:39Z",
"updated_at": "2026-06-15T17:36:33Z",
"updated_at": "2026-07-30T21:27:38Z",
"pushed_at": "2026-05-16T09:02:07Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -523,7 +523,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-43499.json
+14 -14
View File
@@ -245,10 +245,10 @@
"description": "CVE-2026-43499 Implementation for 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k",
"fork": false,
"created_at": "2026-07-12T10:15:03Z",
"updated_at": "2026-07-30T17:10:08Z",
"updated_at": "2026-07-30T19:04:10Z",
"pushed_at": "2026-07-15T22:46:59Z",
"stargazers_count": 204,
"watchers_count": 204,
"stargazers_count": 205,
"watchers_count": 205,
"has_discussions": false,
"forks_count": 74,
"allow_forking": true,
@@ -259,7 +259,7 @@
"topics": [],
"visibility": "public",
"forks": 74,
"watchers": 204,
"watchers": 205,
"score": 0,
"subscribers_count": 1
},
@@ -311,10 +311,10 @@
"description": "GhostLock (CVE-2026-43499) kernel exploit for OnePlus devices with locked bootloader",
"fork": false,
"created_at": "2026-07-12T16:05:24Z",
"updated_at": "2026-07-30T16:31:36Z",
"updated_at": "2026-07-30T22:28:41Z",
"pushed_at": "2026-07-28T20:20:52Z",
"stargazers_count": 119,
"watchers_count": 119,
"stargazers_count": 120,
"watchers_count": 120,
"has_discussions": false,
"forks_count": 28,
"allow_forking": true,
@@ -332,7 +332,7 @@
],
"visibility": "public",
"forks": 28,
"watchers": 119,
"watchers": 120,
"score": 0,
"subscribers_count": 2
},
@@ -1077,12 +1077,12 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
"updated_at": "2026-07-30T18:43:04Z",
"updated_at": "2026-07-30T23:38:40Z",
"pushed_at": "2026-07-19T09:11:56Z",
"stargazers_count": 259,
"watchers_count": 259,
"stargazers_count": 272,
"watchers_count": 272,
"has_discussions": false,
"forks_count": 44,
"forks_count": 45,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1090,8 +1090,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 44,
"watchers": 259,
"forks": 45,
"watchers": 272,
"score": 0,
"subscribers_count": 4
},
2026/CVE-2026-50522.json
+6 -6
View File
@@ -47,10 +47,10 @@
"description": "CVE-2026-50522 PoC",
"fork": false,
"created_at": "2026-07-25T08:23:28Z",
"updated_at": "2026-07-30T14:50:30Z",
"updated_at": "2026-07-30T22:42:13Z",
"pushed_at": "2026-07-25T09:39:40Z",
"stargazers_count": 33,
"watchers_count": 33,
"stargazers_count": 34,
"watchers_count": 34,
"has_discussions": false,
"forks_count": 13,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 13,
"watchers": 33,
"watchers": 34,
"score": 0,
"subscribers_count": 2
},
@@ -113,8 +113,8 @@
"description": "Microsoft SharePoint CVE-2026-50522",
"fork": false,
"created_at": "2026-07-28T18:15:28Z",
"updated_at": "2026-07-29T19:09:32Z",
"pushed_at": "2026-07-29T19:08:02Z",
"updated_at": "2026-07-30T19:44:53Z",
"pushed_at": "2026-07-30T19:44:48Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-54121.json
+8 -8
View File
@@ -14,10 +14,10 @@
"description": "Certighost POC",
"fork": false,
"created_at": "2026-07-23T18:54:34Z",
"updated_at": "2026-07-30T16:21:31Z",
"updated_at": "2026-07-30T22:01:48Z",
"pushed_at": "2026-07-28T15:44:50Z",
"stargazers_count": 282,
"watchers_count": 282,
"stargazers_count": 285,
"watchers_count": 285,
"has_discussions": false,
"forks_count": 70,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 70,
"watchers": 282,
"watchers": 285,
"score": 0,
"subscribers_count": 0
},
@@ -179,10 +179,10 @@
"description": "CVE-2026-54121 (Certighost) AD CS DC-impersonation PoC. Patched SAN handling + MAQ-safe account reuse.",
"fork": false,
"created_at": "2026-07-27T11:04:49Z",
"updated_at": "2026-07-28T16:05:41Z",
"updated_at": "2026-07-30T19:21:44Z",
"pushed_at": "2026-07-27T11:28:22Z",
"stargazers_count": 6,
"watchers_count": 6,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -193,7 +193,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 6,
"watchers": 7,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-57239.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Proof of concept exploit for CVE-2026-3775\/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\\SYSTEM rights via the Foxit PDF Reader updater service.",
"fork": false,
"created_at": "2026-07-08T13:47:31Z",
"updated_at": "2026-07-30T01:12:43Z",
"updated_at": "2026-07-31T00:08:04Z",
"pushed_at": "2026-07-27T07:52:49Z",
"stargazers_count": 9,
"watchers_count": 9,
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 9,
"watchers": 10,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-57827.json
+50 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE. Split-controller upload bypass. CVSS 9.8 | CWE-434 | com_rsfiles < 1.17.12",
"fork": false,
"created_at": "2026-07-29T20:19:30Z",
"updated_at": "2026-07-30T15:06:28Z",
"updated_at": "2026-07-31T00:43:12Z",
"pushed_at": "2026-07-29T20:38:51Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -42,7 +42,53 @@
],
"visibility": "public",
"forks": 0,
"watchers": 4,
"watchers": 8,
"score": 0,
"subscribers_count": 0
},
{
"id": 1317672181,
"name": "CVE-2026-57827",
"full_name": "Candisexterior171\/CVE-2026-57827",
"owner": {
"login": "Candisexterior171",
"id": 276743623,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/276743623?v=4",
"html_url": "https:\/\/github.com\/Candisexterior171",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Candisexterior171\/CVE-2026-57827",
"description": "Demonstrate the unauthenticated remote code execution vulnerability in the RSFiles! Joomla component through an arbitrary file upload.",
"fork": false,
"created_at": "2026-07-30T20:49:05Z",
"updated_at": "2026-07-30T20:50:40Z",
"pushed_at": "2026-07-30T20:49:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"cve-2026-57827",
"exploit",
"file-upload",
"joomla",
"pentest",
"poc",
"pre-auth",
"rce",
"rsfiles",
"security",
"vulnerability"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-60004.json
+33
View File
@@ -64,5 +64,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1317725456,
"name": "CVE-2026-60004",
"full_name": "0xBlackash\/CVE-2026-60004",
"owner": {
"login": "0xBlackash",
"id": 259905299,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/259905299?v=4",
"html_url": "https:\/\/github.com\/0xBlackash",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xBlackash\/CVE-2026-60004",
"description": "CVE-2026-60004",
"fork": false,
"created_at": "2026-07-30T22:24:16Z",
"updated_at": "2026-07-30T22:36:39Z",
"pushed_at": "2026-07-30T22:36:36Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-60206.json
+4 -4
View File
@@ -52,7 +52,7 @@
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 4,
"forks_count": 5,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 4,
"forks": 5,
"watchers": 10,
"score": 0,
"subscribers_count": 0
@@ -85,7 +85,7 @@
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -93,7 +93,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"forks": 2,
"watchers": 4,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-61424.json
+48
View File
@@ -0,0 +1,48 @@
[
{
"id": 1317664894,
"name": "CVE-2026-61424",
"full_name": "shinthink\/CVE-2026-61424",
"owner": {
"login": "shinthink",
"id": 292174078,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/292174078?v=4",
"html_url": "https:\/\/github.com\/shinthink",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/shinthink\/CVE-2026-61424",
"description": "DJ-Classifieds Joomla Component Unauthenticated File Upload RCE. 3-string filter bypass via PHP short tags. CVSS 10.0 | CWE-434 | com_djclassifieds < 3.11.2",
"fork": false,
"created_at": "2026-07-30T20:37:37Z",
"updated_at": "2026-07-30T20:42:55Z",
"pushed_at": "2026-07-30T20:42:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"cvss-10",
"dj-classifieds",
"exploit",
"file-upload",
"information-disclosure",
"joomla",
"pentesting",
"rce",
"security",
"unauthenticated",
"vulnerability"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-63030.json
+48 -13
View File
@@ -14,12 +14,12 @@
"description": "wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain",
"fork": false,
"created_at": "2026-07-17T20:18:33Z",
"updated_at": "2026-07-30T16:24:36Z",
"updated_at": "2026-07-30T22:42:35Z",
"pushed_at": "2026-07-23T09:23:48Z",
"stargazers_count": 683,
"watchers_count": 683,
"stargazers_count": 685,
"watchers_count": 685,
"has_discussions": false,
"forks_count": 157,
"forks_count": 158,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -31,8 +31,8 @@
"wp2shell-poc"
],
"visibility": "public",
"forks": 157,
"watchers": 683,
"forks": 158,
"watchers": 685,
"score": 0,
"subscribers_count": 3
},
@@ -84,10 +84,10 @@
"description": "CVE-2026-63030, CVE-2026-60137, wp2shell scanner",
"fork": false,
"created_at": "2026-07-17T23:15:57Z",
"updated_at": "2026-07-30T11:25:05Z",
"updated_at": "2026-07-30T21:10:45Z",
"pushed_at": "2026-07-18T22:07:34Z",
"stargazers_count": 44,
"watchers_count": 44,
"stargazers_count": 45,
"watchers_count": 45,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -98,7 +98,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 44,
"watchers": 45,
"score": 0,
"subscribers_count": 0
},
@@ -1953,7 +1953,7 @@
"description": "CVE-2026-63030 & CVE-2026-60137 Wp2shell Poc",
"fork": false,
"created_at": "2026-07-22T16:21:56Z",
"updated_at": "2026-07-22T16:30:55Z",
"updated_at": "2026-07-30T22:52:01Z",
"pushed_at": "2026-07-22T16:30:44Z",
"stargazers_count": 0,
"watchers_count": 0,
@@ -2178,8 +2178,8 @@
"description": "Read-only WordPress security scanner for HestiaCP servers. Detects wp2shell compromise indicators (CVE-2026-63030 \/ CVE-2026-60137) across all hosted sites — per-user email reports, core file diff against clean WordPress, PHP\/JS\/htaccess\/image analysis, and optional AI evaluation via Claude API.",
"fork": false,
"created_at": "2026-07-27T21:03:54Z",
"updated_at": "2026-07-29T13:27:04Z",
"pushed_at": "2026-07-28T11:03:15Z",
"updated_at": "2026-07-30T21:44:56Z",
"pushed_at": "2026-07-30T21:44:50Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -2195,5 +2195,40 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1317724852,
"name": "CVE-2026-63030-WP2Shell",
"full_name": "Industri4l-H3ll-Xpl0it3rs\/CVE-2026-63030-WP2Shell",
"owner": {
"login": "Industri4l-H3ll-Xpl0it3rs",
"id": 262636091,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/262636091?v=4",
"html_url": "https:\/\/github.com\/Industri4l-H3ll-Xpl0it3rs",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Industri4l-H3ll-Xpl0it3rs\/CVE-2026-63030-WP2Shell",
"description": "CVE-2026-63030 Exploit | by gr1tx",
"fork": false,
"created_at": "2026-07-30T22:23:03Z",
"updated_at": "2026-07-30T22:38:34Z",
"pushed_at": "2026-07-30T22:32:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"exploit"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-63077.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1317647094,
"name": "teamcity-cve-2026-63077-remediation",
"full_name": "unveiledhistory49\/teamcity-cve-2026-63077-remediation",
"owner": {
"login": "unveiledhistory49",
"id": 262132401,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/262132401?v=4",
"html_url": "https:\/\/github.com\/unveiledhistory49",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/unveiledhistory49\/teamcity-cve-2026-63077-remediation",
"description": "JetBrains TeamCity On-Premises CVE-2026-63077 Emergency Hardening & Patch Runbook Package",
"fork": false,
"created_at": "2026-07-30T20:12:13Z",
"updated_at": "2026-07-30T22:46:09Z",
"pushed_at": "2026-07-30T22:46:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-64600.json
+2 -2
View File
@@ -164,7 +164,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -178,7 +178,7 @@
"security-research"
],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-65883.json
+48
View File
@@ -0,0 +1,48 @@
[
{
"id": 1317716945,
"name": "CVE-2026-65883",
"full_name": "shinthink\/CVE-2026-65883",
"owner": {
"login": "shinthink",
"id": 292174078,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/292174078?v=4",
"html_url": "https:\/\/github.com\/shinthink",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/shinthink\/CVE-2026-65883",
"description": "Aimy Captcha-Less Form Guard Joomla Component PHP Object Injection RCE. clfgd XOR keystream recovery + unserialize(). CVSS 10.0 | CWE-502 | aimy_captcha-less_form_guard < 20.1",
"fork": false,
"created_at": "2026-07-30T22:07:42Z",
"updated_at": "2026-07-30T22:07:57Z",
"pushed_at": "2026-07-30T22:07:46Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"aimy-captcha",
"cve",
"cvss-10",
"exploit",
"joomla",
"pentesting",
"php-object-injection",
"rce",
"security",
"unauthenticated",
"unserialize",
"vulnerability"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-66066.json
+43 -10
View File
@@ -47,10 +47,10 @@
"description": "CVE-2026-66066",
"fork": false,
"created_at": "2026-07-29T20:45:27Z",
"updated_at": "2026-07-29T20:49:30Z",
"updated_at": "2026-07-30T22:31:55Z",
"pushed_at": "2026-07-29T20:49:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
@@ -80,12 +80,12 @@
"description": "PoC for CVE-2026-66066 in Ruby on Rails",
"fork": false,
"created_at": "2026-07-29T21:08:30Z",
"updated_at": "2026-07-30T17:17:27Z",
"updated_at": "2026-07-30T23:55:36Z",
"pushed_at": "2026-07-30T03:31:15Z",
"stargazers_count": 14,
"watchers_count": 14,
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
"forks_count": 3,
"forks_count": 8,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -93,8 +93,41 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 14,
"forks": 8,
"watchers": 16,
"score": 0,
"subscribers_count": 0
},
{
"id": 1317682327,
"name": "rails-forensics-CVE-2026-66066",
"full_name": "rails\/rails-forensics-CVE-2026-66066",
"owner": {
"login": "rails",
"id": 4223,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4223?v=4",
"html_url": "https:\/\/github.com\/rails",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/rails\/rails-forensics-CVE-2026-66066",
"description": null,
"fork": false,
"created_at": "2026-07-30T21:06:00Z",
"updated_at": "2026-07-31T00:50:44Z",
"pushed_at": "2026-07-30T22:26:04Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
README.md
+45 -4
View File
@@ -2877,6 +2877,13 @@
- [rahultb-sec/CVE-2026-33829-Writeup](https://github.com/rahultb-sec/CVE-2026-33829-Writeup)
- [seguridadentrerios/CVE-2026-33829](https://github.com/seguridadentrerios/CVE-2026-33829)
### CVE-2026-33937 (2026-03-27)
<code>Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 through 4.7.8, `Handlebars.compile()` accepts a pre-parsed AST object in addition to a template string. The `value` field of a `NumberLiteral` AST node is emitted directly into the generated JavaScript without quoting or sanitization. An attacker who can supply a crafted AST to `compile()` can therefore inject and execute arbitrary JavaScript, leading to Remote Code Execution on the server. Version 4.7.9 fixes the issue. Some workarounds are available. Validate input type before calling `Handlebars.compile()`; ensure the argument is always a `string`, never a plain object or JSON-deserialized value. Use the Handlebars runtime-only build (`handlebars/runtime`) on the server if templates are pre-compiled at build time; `compile()` will be unavailable.
</code>
- [garlic-wizard/CVE-2026-33937-for-DarkZeroReturns](https://github.com/garlic-wizard/CVE-2026-33937-for-DarkZeroReturns)
### CVE-2026-34038 (2026-07-06)
<code>Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.469, an authenticated remote command injection vulnerability in application deployment handling allows users with application write permissions to achieve remote code execution and exfiltrate sensitive environment variables through deployment logs via fields such as dockerfile_location and deployment commands. This issue is fixed in version 4.0.0-beta.469.
@@ -6000,6 +6007,7 @@
</code>
- [shinthink/CVE-2026-57827](https://github.com/shinthink/CVE-2026-57827)
- [Candisexterior171/CVE-2026-57827](https://github.com/Candisexterior171/CVE-2026-57827)
### CVE-2026-57829 (2026-07-13)
@@ -6135,6 +6143,7 @@
### CVE-2026-60004
- [HORKimhab/CVE-2026-60004](https://github.com/HORKimhab/CVE-2026-60004)
- [EQSTLab/CVE-2026-60004](https://github.com/EQSTLab/CVE-2026-60004)
- [0xBlackash/CVE-2026-60004](https://github.com/0xBlackash/CVE-2026-60004)
### CVE-2026-60121 (2026-07-13)
@@ -6173,6 +6182,13 @@
- [nmagill123/CVE-2026-61343-poc-librebooking-rce](https://github.com/nmagill123/CVE-2026-61343-poc-librebooking-rce)
### CVE-2026-61424 (2026-07-20)
<code>Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classifieds &lt; 3.11.2 - The Joomla extension DJ-Classifieds is vulnerable to an unauthenticated file upload, leading to full RCE.
</code>
- [shinthink/CVE-2026-61424](https://github.com/shinthink/CVE-2026-61424)
### CVE-2026-61511 (2026-07-27)
<code>vBulletin 5.x through 5.7.5 and 6.x through 6.2.1 contains an eval injection vulnerability in the vB5_Template_Runtime::runMaths() method within the template runtime that allows unauthenticated remote attackers to execute arbitrary PHP code by supplying crafted input through the pagenav[pagenumber] parameter. Attackers can exploit the insufficiently restrictive regex filter by using phpfuck-style encoding with permitted characters to inject and execute arbitrary PHP code via the unauthenticated ajax/render template route without any authentication.
@@ -6269,6 +6285,14 @@
- [imXur/WordPress-CVE-2026-63030-Analysis](https://github.com/imXur/WordPress-CVE-2026-63030-Analysis)
- [yuag/wp2shell](https://github.com/yuag/wp2shell)
- [BytesPulse-OE/wp2shell-Hestia-Scanner](https://github.com/BytesPulse-OE/wp2shell-Hestia-Scanner)
- [Industri4l-H3ll-Xpl0it3rs/CVE-2026-63030-WP2Shell](https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2026-63030-WP2Shell)
### CVE-2026-63077 (2026-07-27)
<code>In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol
</code>
- [unveiledhistory49/teamcity-cve-2026-63077-remediation](https://github.com/unveiledhistory49/teamcity-cve-2026-63077-remediation)
### CVE-2026-63766 (2026-07-20)
@@ -6326,6 +6350,13 @@
- [shinthink/CVE-2026-65761](https://github.com/shinthink/CVE-2026-65761)
- [ywh-jfellus/CVE-2026-65761](https://github.com/ywh-jfellus/CVE-2026-65761)
### CVE-2026-65883 (2026-07-29)
<code>Joomla Extension - aimy-extensions.com - RCE via PHP object injection in Aimy Captcha-Less Form Guard 18.0 - 20.0 - A forged clfgd field allows PHP objection injection and thereby remote code execution.
</code>
- [shinthink/CVE-2026-65883](https://github.com/shinthink/CVE-2026-65883)
### CVE-2026-65893 (2026-07-27)
<code>This vulnerability exists in CP PLUS EZ-P21 IP Camera due to an insecure debug feature enabled in the firmware.\n\nAn attacker with physical access could exploit this vulnerability by placing arbitrary code on removable media and triggering their execution through the debug mechanism.\n\n\n\nSuccessful exploitation of this vulnerability could allow an attacker to execute arbitrary code with elevated privileges on the targeted device.
@@ -6344,10 +6375,15 @@
- [Hunt-Benito/siyuan-mcp-admin-takeover-cve-2026-66012-missing-authorization](https://github.com/Hunt-Benito/siyuan-mcp-admin-takeover-cve-2026-66012-missing-authorization)
### CVE-2026-66066
### CVE-2026-66066 (2026-07-30)
<code>Action Pack is a framework for handling and responding to web requests. In versions prior to 7.2.3.2, 8.0.5.1 and 8.1.3.1, Active Storage does not disable libvips operations marked unsafe for untrusted content, allowing a crafted upload to invoke such an operation. Consuming applications are affected when configured to use libvips and accept image uploads from untrusted users. An unauthenticated attacker may exploit this behavior to read arbitrary files accessible to the Rails process, including environment variables and application secrets. Exposure of credentials such as secret_key_base or external-service tokens may enable remote code execution or lateral movement. This issue has been fixed in versions 7.2.3.2, 8.0.5.1 and 8.1.3.1.
</code>
- [paveg/rails-activestorage-vips-audit](https://github.com/paveg/rails-activestorage-vips-audit)
- [0xBlackash/CVE-2026-66066](https://github.com/0xBlackash/CVE-2026-66066)
- [Zer0SumGam3/CVE-2026-66066-POC](https://github.com/Zer0SumGam3/CVE-2026-66066-POC)
- [rails/rails-forensics-CVE-2026-66066](https://github.com/rails/rails-forensics-CVE-2026-66066)
### CVE-2026-66374 (2026-07-25)
@@ -12052,6 +12088,7 @@
- [Cosm3No1de/htb-orion-writeup](https://github.com/Cosm3No1de/htb-orion-writeup)
- [c0gnit00/CVE-2025-32432](https://github.com/c0gnit00/CVE-2025-32432)
- [theeomega/CVE-2025-32432-POC](https://github.com/theeomega/CVE-2025-32432-POC)
- [HeltonPojo/CVE-2025-32432](https://github.com/HeltonPojo/CVE-2025-32432)
### CVE-2025-32433 (2025-04-16)
@@ -15393,7 +15430,6 @@
- [k1llmelira/react2shell-exploit](https://github.com/k1llmelira/react2shell-exploit)
- [Herick-Costa/CVE-2025-55182-React2Shell-RCE](https://github.com/Herick-Costa/CVE-2025-55182-React2Shell-RCE)
- [diamorphine666/React2shell-CVE-2025-55182-Exploit](https://github.com/diamorphine666/React2shell-CVE-2025-55182-Exploit)
- [RootEvil333/CVE-2025-55182](https://github.com/RootEvil333/CVE-2025-55182)
- [se1zer/Nextjs_Exploit_Tool](https://github.com/se1zer/Nextjs_Exploit_Tool)
- [6t2kydmp8k-jpg/CVE-2025-55182-Vulnerability-Proof-of-Concept-Group-Project-](https://github.com/6t2kydmp8k-jpg/CVE-2025-55182-Vulnerability-Proof-of-Concept-Group-Project-)
- [razureink/cve-2025-55182-react2shell_reproduction](https://github.com/razureink/cve-2025-55182-react2shell_reproduction)
@@ -40771,7 +40807,6 @@
- [YUTING-HUANG0/Spring4Shell-CTF](https://github.com/YUTING-HUANG0/Spring4Shell-CTF)
- [march0n/PoC-CVE-2022-22965-Spring4Shell](https://github.com/march0n/PoC-CVE-2022-22965-Spring4Shell)
- [Kuri119/CVE-2022-22965-Spring4Shell](https://github.com/Kuri119/CVE-2022-22965-Spring4Shell)
- [RootEvil333/CVE-2022-22965](https://github.com/RootEvil333/CVE-2022-22965)
- [meng-security/spring4shell-local-verification-lab](https://github.com/meng-security/spring4shell-local-verification-lab)
### CVE-2022-22968 (2022-04-14)
@@ -41469,6 +41504,13 @@
- [shoucheng3/xwiki__xwiki-commons_CVE-2022-24897_12-6-6](https://github.com/shoucheng3/xwiki__xwiki-commons_CVE-2022-24897_12-6-6)
### CVE-2022-24903 (2022-05-05)
<code>Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used. This can result in a segfault or some other malfunction. As of our understanding, this vulnerability can not be used for remote code execution. But there may still be a slight chance for experts to do that. The bug occurs when the octet count is read. While there is a check for the maximum number of octets, digits are written to a heap buffer even when the octet count is over the maximum, This can be used to overrun the memory buffer. However, once the sequence of digits stop, no additional characters can be added to the buffer. In our opinion, this makes remote exploits impossible or at least highly complex. Octet-counted framing is one of two potential framing modes. It is relatively uncommon, but enabled by default on receivers. Modules `imtcp`, `imptcp`, `imgssapi`, and `imhttp` are used for regular syslog message reception. It is best practice not to directly expose them to the public. When this practice is followed, the risk is considerably lower. Module `imdiag` is a diagnostics module primarily intended for testbench runs. We do not expect it to be present on any production installation. Octet-counted framing is not very common. Usually, it needs to be specifically enabled at senders. If users do not need it, they can turn it off for the most important modules. This will mitigate the vulnerability.
</code>
- [andree554/CVE-2022-24903-Heap-based-buffer-overflow-Hand-On-Lab](https://github.com/andree554/CVE-2022-24903-Heap-based-buffer-overflow-Hand-On-Lab)
### CVE-2022-24924 (2022-02-11)
<code>An improper access control in LiveWallpaperService prior to versions 3.0.9.0 allows to create a specific named system directory without a proper permission.
@@ -41915,7 +41957,6 @@
- [MAHABUB122003/Atlassian-CVE-2022-26134](https://github.com/MAHABUB122003/Atlassian-CVE-2022-26134)
- [crypt0lith/confluence-ognl-rce](https://github.com/crypt0lith/confluence-ognl-rce)
- [roodhelios/CVE-2022-26134-OGNL-Injection](https://github.com/roodhelios/CVE-2022-26134-OGNL-Injection)
- [RootEvil333/CVE-2022-26134](https://github.com/RootEvil333/CVE-2022-26134)
### CVE-2022-26135 (2022-06-30)