nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/08/08 18:50:04

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-08-09 03:50:04 +09:00
1 parent 2f0d7f3eb6
commit 72f504bace
42 files changed
+584 -165
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2012/CVE-2012-2459.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Browser-based Merkle tree demo — build a tree, generate inclusion proofs, recompute the root hash by hash, and replay the RFC 6962 second-preimage and CVE-2012-2459 attacks. Real SHA-256. No backend.",
"fork": false,
"created_at": "2026-06-28T17:01:57Z",
"updated_at": "2026-08-06T11:06:04Z",
"pushed_at": "2026-08-06T11:05:50Z",
"updated_at": "2026-08-08T13:51:10Z",
"pushed_at": "2026-08-08T13:51:03Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2017/CVE-2017-12636.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 2,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"forks": 1,
"watchers": 6,
"score": 0,
"subscribers_count": 1
2017/CVE-2017-20165.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Fork of the send module to deal with CVE-2017-20165",
"fork": false,
"created_at": "2023-01-11T10:20:27Z",
"updated_at": "2026-08-06T07:57:01Z",
"pushed_at": "2026-08-06T07:56:06Z",
"updated_at": "2026-08-08T14:58:06Z",
"pushed_at": "2026-08-08T14:58:04Z",
"stargazers_count": 15,
"watchers_count": 15,
"has_discussions": false,
2018/CVE-2018-1207.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 18,
"watchers_count": 18,
"has_discussions": false,
"forks_count": 10,
"forks_count": 9,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 10,
"forks": 9,
"watchers": 18,
"score": 0,
"subscribers_count": 2
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-08-08T12:15:39Z",
"pushed_at": "2026-08-08T12:15:34Z",
"updated_at": "2026-08-08T17:49:55Z",
"pushed_at": "2026-08-08T17:49:50Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2019/CVE-2019-14287.json
+2 -2
View File
@@ -923,8 +923,8 @@
"description": "Write-up do Sudo Agent CTF (TryHackMe), com enumeração, exploração web, esteganografia, SSH e privilege escalation via CVE-2019-14287.",
"fork": false,
"created_at": "2026-08-08T02:09:27Z",
"updated_at": "2026-08-08T02:40:35Z",
"pushed_at": "2026-08-08T02:40:30Z",
"updated_at": "2026-08-08T14:10:15Z",
"pushed_at": "2026-08-08T14:09:58Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2019/CVE-2019-17558.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340",
"fork": false,
"created_at": "2020-04-01T09:33:35Z",
"updated_at": "2026-08-07T15:43:42Z",
"updated_at": "2026-08-08T15:36:54Z",
"pushed_at": "2021-04-04T09:13:57Z",
"stargazers_count": 4290,
"watchers_count": 4290,
"stargazers_count": 4291,
"watchers_count": 4291,
"has_discussions": false,
"forks_count": 1083,
"allow_forking": true,
@@ -81,7 +81,7 @@
],
"visibility": "public",
"forks": 1083,
"watchers": 4290,
"watchers": 4291,
"score": 0,
"subscribers_count": 148
},
2020/CVE-2020-1472.json
+2 -2
View File
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-08-08T12:00:02Z",
"pushed_at": "2026-08-08T11:59:58Z",
"updated_at": "2026-08-08T18:00:36Z",
"pushed_at": "2026-08-08T18:00:24Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2020/CVE-2020-14882.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340",
"fork": false,
"created_at": "2020-04-01T09:33:35Z",
"updated_at": "2026-08-07T15:43:42Z",
"updated_at": "2026-08-08T15:36:54Z",
"pushed_at": "2021-04-04T09:13:57Z",
"stargazers_count": 4290,
"watchers_count": 4290,
"stargazers_count": 4291,
"watchers_count": 4291,
"has_discussions": false,
"forks_count": 1083,
"allow_forking": true,
@@ -48,7 +48,7 @@
],
"visibility": "public",
"forks": 1083,
"watchers": 4290,
"watchers": 4291,
"score": 0,
"subscribers_count": 148
},
2021/CVE-2021-26855.json
+4 -4
View File
@@ -1678,10 +1678,10 @@
"description": "CTT-enhanced version of the Microsoft Exchange Server SSRF to RCE exploit (ProxyShell\/ProxyLogon), another CVSS 10.0 critical vulnerability that affected hundreds of thousands of organizations worldwide.",
"fork": false,
"created_at": "2026-01-28T08:45:23Z",
"updated_at": "2026-01-28T08:47:16Z",
"updated_at": "2026-08-08T13:07:14Z",
"pushed_at": "2026-01-28T08:47:13Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -1692,7 +1692,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-08-08T12:17:08Z",
"pushed_at": "2026-08-08T12:17:04Z",
"updated_at": "2026-08-08T18:00:00Z",
"pushed_at": "2026-08-08T17:59:57Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2022/CVE-2022-32832.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Proof-of-concept and write-up for the CVE-2022-32832 vulnerability patched in iOS 15.6",
"fork": false,
"created_at": "2022-07-21T13:09:50Z",
"updated_at": "2026-05-13T19:49:39Z",
"updated_at": "2026-08-08T14:24:04Z",
"pushed_at": "2022-07-21T13:44:32Z",
"stargazers_count": 96,
"watchers_count": 96,
"stargazers_count": 97,
"watchers_count": 97,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 96,
"watchers": 97,
"score": 0,
"subscribers_count": 2
},
2023/CVE-2023-25690.json
+4 -4
View File
@@ -51,10 +51,10 @@
"description": "CVE 2023 25690 Proof of concept - mod_proxy vulnerable configuration on Apache HTTP Server versions 2.4.0 - 2.4.55 leads to HTTP Request Smuggling vulnerability.",
"fork": false,
"created_at": "2023-05-22T03:06:31Z",
"updated_at": "2026-07-25T13:33:22Z",
"updated_at": "2026-08-08T13:06:40Z",
"pushed_at": "2024-08-24T13:38:50Z",
"stargazers_count": 288,
"watchers_count": 288,
"stargazers_count": 289,
"watchers_count": 289,
"has_discussions": false,
"forks_count": 42,
"allow_forking": true,
@@ -73,7 +73,7 @@
],
"visibility": "public",
"forks": 42,
"watchers": 288,
"watchers": 289,
"score": 0,
"subscribers_count": 3
},
2024/CVE-2024-56426.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "A PoC of the CVE-2024-56426 vulnerability.",
"fork": false,
"created_at": "2026-04-07T12:02:52Z",
"updated_at": "2026-08-05T02:20:11Z",
"pushed_at": "2026-08-04T10:53:20Z",
"updated_at": "2026-08-08T16:17:18Z",
"pushed_at": "2026-08-08T16:17:14Z",
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
2025/CVE-2025-24813.json
+2 -2
View File
@@ -1669,7 +1669,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1677,7 +1677,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
2025/CVE-2025-43529.json
+2 -2
View File
@@ -250,7 +250,7 @@
"stargazers_count": 58,
"watchers_count": 58,
"has_discussions": false,
"forks_count": 14,
"forks_count": 15,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -258,7 +258,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 14,
"forks": 15,
"watchers": 58,
"score": 0,
"subscribers_count": 1
2025/CVE-2025-52915.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-08-07T03:00:23Z",
"updated_at": "2026-08-08T18:17:15Z",
"pushed_at": "2026-07-12T09:40:22Z",
"stargazers_count": 893,
"watchers_count": 893,
"stargazers_count": 895,
"watchers_count": 895,
"has_discussions": false,
"forks_count": 132,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 132,
"watchers": 893,
"watchers": 895,
"score": 0,
"subscribers_count": 20
}
2025/CVE-2025-58726.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "AD AutoPwn v4.10.0 — automated AD attack chain, zero-auth to Domain Admin. Discover\/Kerberoast\/AS-REP\/AD CS ESC1-16\/Shadow Creds\/RBCD+KCD\/Ghost-SPN\/TGS-rewrite\/Dollar-Ticket\/WPAD\/WSUS\/PXE\/SCCM\/BloodHound auto-action\/Loot\/DCSync\/DPAPI + Synacktiv 2026 reflection (CVE-2025-58726\/2026-24294\/2026-26128). Authorized pentesting only.",
"fork": false,
"created_at": "2026-03-30T19:34:35Z",
"updated_at": "2026-08-08T04:25:54Z",
"pushed_at": "2026-08-08T12:13:56Z",
"updated_at": "2026-08-08T15:41:35Z",
"pushed_at": "2026-08-08T15:41:31Z",
"stargazers_count": 33,
"watchers_count": 33,
"has_discussions": false,
2025/CVE-2025-8088.json
+4 -4
View File
@@ -598,10 +598,10 @@
"description": "A sophisticated GUI tool for creating malicious RAR archives that exploit the WinRAR path traversal vulnerability (CVE-2025-8088) using ADS and RAR5 header manipulation.",
"fork": false,
"created_at": "2025-09-04T13:33:07Z",
"updated_at": "2026-08-08T01:19:58Z",
"updated_at": "2026-08-08T18:16:52Z",
"pushed_at": "2025-09-04T13:46:26Z",
"stargazers_count": 46,
"watchers_count": 46,
"stargazers_count": 47,
"watchers_count": 47,
"has_discussions": false,
"forks_count": 17,
"allow_forking": true,
@@ -612,7 +612,7 @@
"topics": [],
"visibility": "public",
"forks": 17,
"watchers": 46,
"watchers": 47,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-8110.json
+4 -4
View File
@@ -212,10 +212,10 @@
"description": null,
"fork": false,
"created_at": "2026-04-11T22:40:07Z",
"updated_at": "2026-07-26T07:30:14Z",
"updated_at": "2026-08-08T15:47:18Z",
"pushed_at": "2026-04-20T22:24:19Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -226,7 +226,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-24055.json
+12 -4
View File
@@ -11,11 +11,11 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/imzanggg\/CVE-2026-24055-OAuth-Langfuse",
"description": null,
"description": "Reproduction and patch verification of CVE-2026-24055 (CWE-284) - an unauthenticated OAuth access control vulnerability in Langfuse allowing Slack workspace hijacking. Coursework for Web & Application Security.",
"fork": false,
"created_at": "2026-05-14T03:59:23Z",
"updated_at": "2026-05-14T08:17:31Z",
"pushed_at": "2026-05-14T08:17:26Z",
"updated_at": "2026-08-08T13:55:43Z",
"pushed_at": "2026-08-08T13:50:16Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -25,7 +25,15 @@
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"topics": [
"access-control",
"cve",
"docker",
"oatuh2",
"security-research",
"vulnerability-analysis",
"web-security"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
2026/CVE-2026-24061.json
+4 -4
View File
@@ -143,10 +143,10 @@
"description": "CVE-2026-24061 exploit PoC",
"fork": false,
"created_at": "2026-03-08T11:25:39Z",
"updated_at": "2026-08-08T12:47:41Z",
"updated_at": "2026-08-08T18:42:51Z",
"pushed_at": "2026-07-30T15:17:50Z",
"stargazers_count": 660,
"watchers_count": 660,
"stargazers_count": 716,
"watchers_count": 716,
"has_discussions": false,
"forks_count": 15,
"allow_forking": true,
@@ -163,7 +163,7 @@
],
"visibility": "public",
"forks": 15,
"watchers": 660,
"watchers": 716,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-27912.json
+52 -4
View File
@@ -14,10 +14,10 @@
"description": "POC tool for ResetNightmare (CVE-2026-27912)",
"fork": false,
"created_at": "2026-08-02T12:36:16Z",
"updated_at": "2026-08-08T10:40:15Z",
"updated_at": "2026-08-08T17:39:09Z",
"pushed_at": "2026-08-02T14:30:24Z",
"stargazers_count": 41,
"watchers_count": 41,
"stargazers_count": 46,
"watchers_count": 46,
"has_discussions": false,
"forks_count": 10,
"allow_forking": true,
@@ -28,7 +28,55 @@
"topics": [],
"visibility": "public",
"forks": 10,
"watchers": 41,
"watchers": 46,
"score": 0,
"subscribers_count": 0
},
{
"id": 1327954467,
"name": "ResetNightmare-impacket",
"full_name": "mihat2\/ResetNightmare-impacket",
"owner": {
"login": "mihat2",
"id": 88954195,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88954195?v=4",
"html_url": "https:\/\/github.com\/mihat2",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mihat2\/ResetNightmare-impacket",
"description": "CVE-2026-27912 (ResetNightmare) — Linux\/impacket port of Semperis Community's Invoke-ResetNightmare PoC",
"fork": false,
"created_at": "2026-08-08T16:36:35Z",
"updated_at": "2026-08-08T16:40:24Z",
"pushed_at": "2026-08-08T16:40:34Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"active-directory",
"active-directory-security",
"cve",
"cve-2026-27912",
"impacket",
"kadmin-changepw",
"kerberos",
"ldap",
"password-reset",
"pentesting",
"proof-of-concept",
"python",
"red-team",
"security-research"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-3609.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-08-07T03:00:23Z",
"updated_at": "2026-08-08T18:17:15Z",
"pushed_at": "2026-07-12T09:40:22Z",
"stargazers_count": 893,
"watchers_count": 893,
"stargazers_count": 895,
"watchers_count": 895,
"has_discussions": false,
"forks_count": 132,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 132,
"watchers": 893,
"watchers": 895,
"score": 0,
"subscribers_count": 20
}
2026/CVE-2026-41940.json
+4 -4
View File
@@ -335,10 +335,10 @@
"description": "🚀 CVE-2026-41940 cPanel\/WHM Auth Bypass Exploit - Best Flow 💥 CRLF injection leads to auth bypass, session hijacking & account leak. ✅ Proxy, custom UA, keep-alive, retries, SSL verify, colored output, file save support. ⚡ Advanced PoC for pentesters. ",
"fork": false,
"created_at": "2026-05-12T14:47:21Z",
"updated_at": "2026-07-26T23:04:33Z",
"updated_at": "2026-08-08T17:00:37Z",
"pushed_at": "2026-07-17T17:04:48Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -349,7 +349,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 7,
"watchers": 8,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-42945.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Nginx Rewrite CVE Scan(CVE-2026-42945 nginx-rift CVE-2026-9256)",
"fork": false,
"created_at": "2026-05-14T04:40:47Z",
"updated_at": "2026-07-13T12:12:54Z",
"updated_at": "2026-08-08T16:21:21Z",
"pushed_at": "2026-05-27T08:17:05Z",
"stargazers_count": 33,
"watchers_count": 33,
"stargazers_count": 34,
"watchers_count": 34,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 33,
"watchers": 34,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-43499.json
+27 -27
View File
@@ -348,7 +348,7 @@
"description": "GhostLock (CVE-2026-43499) kernel exploit for OnePlus devices with locked bootloader",
"fork": false,
"created_at": "2026-07-12T16:05:24Z",
"updated_at": "2026-08-08T12:08:59Z",
"updated_at": "2026-08-08T16:01:33Z",
"pushed_at": "2026-08-06T09:48:14Z",
"stargazers_count": 226,
"watchers_count": 226,
@@ -586,12 +586,12 @@
"description": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.",
"fork": false,
"created_at": "2026-07-14T14:21:27Z",
"updated_at": "2026-08-08T09:56:44Z",
"updated_at": "2026-08-08T17:41:57Z",
"pushed_at": "2026-07-30T11:28:07Z",
"stargazers_count": 36,
"watchers_count": 36,
"stargazers_count": 39,
"watchers_count": 39,
"has_discussions": false,
"forks_count": 12,
"forks_count": 13,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -599,8 +599,8 @@
"pull_request_creation_policy": "collaborators_only",
"topics": [],
"visibility": "public",
"forks": 12,
"watchers": 36,
"forks": 13,
"watchers": 39,
"score": 0,
"subscribers_count": 0
},
@@ -1081,12 +1081,12 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
"updated_at": "2026-08-08T10:17:59Z",
"updated_at": "2026-08-08T18:28:15Z",
"pushed_at": "2026-08-08T03:30:18Z",
"stargazers_count": 707,
"watchers_count": 707,
"stargazers_count": 715,
"watchers_count": 715,
"has_discussions": false,
"forks_count": 117,
"forks_count": 121,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1094,8 +1094,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 117,
"watchers": 707,
"forks": 121,
"watchers": 715,
"score": 0,
"subscribers_count": 28
},
@@ -1530,7 +1530,7 @@
"fork": false,
"created_at": "2026-07-25T03:57:16Z",
"updated_at": "2026-07-31T14:55:41Z",
"pushed_at": "2026-07-25T03:57:26Z",
"pushed_at": "2026-08-08T13:42:00Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
@@ -1595,8 +1595,8 @@
"description": "CVE-2026-43499 research port for Galaxy S24 Ultra SM-S928U1 DZF2 (in progress)",
"fork": false,
"created_at": "2026-07-26T11:55:26Z",
"updated_at": "2026-08-04T05:57:14Z",
"pushed_at": "2026-07-26T17:35:25Z",
"updated_at": "2026-08-08T17:59:29Z",
"pushed_at": "2026-08-08T17:59:26Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
@@ -1826,10 +1826,10 @@
"description": null,
"fork": false,
"created_at": "2026-07-31T07:53:51Z",
"updated_at": "2026-08-05T01:56:03Z",
"updated_at": "2026-08-08T13:03:54Z",
"pushed_at": "2026-08-05T01:55:59Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -1840,7 +1840,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 2
},
@@ -2235,8 +2235,8 @@
"description": "ghostlock + tcp-zerocopy hybrid CVE-2026-43499 adaptation for samsung kernel",
"fork": false,
"created_at": "2026-08-07T08:30:56Z",
"updated_at": "2026-08-08T12:10:55Z",
"pushed_at": "2026-08-07T18:35:18Z",
"updated_at": "2026-08-08T16:49:46Z",
"pushed_at": "2026-08-08T16:49:42Z",
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
@@ -2268,10 +2268,10 @@
"description": "Root your Galaxy using CVE-2026-43499",
"fork": false,
"created_at": "2026-08-08T11:41:33Z",
"updated_at": "2026-08-08T12:29:53Z",
"pushed_at": "2026-08-08T12:09:57Z",
"stargazers_count": 4,
"watchers_count": 4,
"updated_at": "2026-08-08T18:10:37Z",
"pushed_at": "2026-08-08T13:43:40Z",
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -2282,7 +2282,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 4,
"watchers": 7,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-4408.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "proof-of-concept scripts for 2 unauthenticated RCEs in Samba (CVE-2026-4408 & CVE-2026-4480) and local privilege escalation in TelnetD (CVE-2026-28372)",
"fork": false,
"created_at": "2026-08-03T07:44:29Z",
"updated_at": "2026-08-06T00:05:57Z",
"updated_at": "2026-08-08T18:34:20Z",
"pushed_at": "2026-08-03T07:45:19Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-58048.json
+4 -4
View File
@@ -58,10 +58,10 @@
"description": "👾 CVE-2026-58048 – cPanel Root SQL Execution Toolkit (CVSS 9.4) | Full Red\/Blue Team Toolkit suite for unpatched cPanel & WHM 11.x. 2 tools: Safe Checker (audit\/reporting), Weaponized (reverse shell, persistence, UDF RCE, deployment, file read\/write, database operations, mass scan). w\/Python. 🦾 Use Ethically, Stay Legal <3",
"fork": false,
"created_at": "2026-08-06T09:33:49Z",
"updated_at": "2026-08-08T11:45:28Z",
"updated_at": "2026-08-08T16:53:19Z",
"pushed_at": "2026-08-08T11:45:25Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -72,7 +72,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-60004.json
+42
View File
@@ -256,5 +256,47 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1327759976,
"name": "CVE-2026-60004-poc-gitea",
"full_name": "gagaltotal\/CVE-2026-60004-poc-gitea",
"owner": {
"login": "gagaltotal",
"id": 23299078,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/23299078?v=4",
"html_url": "https:\/\/github.com\/gagaltotal",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/gagaltotal\/CVE-2026-60004-poc-gitea",
"description": "CVE-2026-60004 — Gitea Pre-Auth RCE via diffpatch hook injection",
"fork": false,
"created_at": "2026-08-08T13:08:31Z",
"updated_at": "2026-08-08T16:41:47Z",
"pushed_at": "2026-08-08T16:41:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"auth",
"gitea",
"gitea-api",
"go",
"golang",
"golang-cli",
"rce",
"rce-exploit"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-60206.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "cve cve-2026-60206 weblogic saml exploit poc vulnerability oracle scanner security",
"fork": false,
"created_at": "2026-07-24T02:30:11Z",
"updated_at": "2026-08-04T15:23:50Z",
"updated_at": "2026-08-08T12:54:17Z",
"pushed_at": "2026-07-24T02:46:31Z",
"stargazers_count": 33,
"watchers_count": 33,
"stargazers_count": 32,
"watchers_count": 32,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 33,
"watchers": 32,
"score": 0,
"subscribers_count": 1
},
2026/CVE-2026-63030.json
+61 -12
View File
@@ -14,12 +14,12 @@
"description": "wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain",
"fork": false,
"created_at": "2026-07-17T20:18:33Z",
"updated_at": "2026-08-08T11:21:00Z",
"updated_at": "2026-08-08T15:17:50Z",
"pushed_at": "2026-07-23T09:23:48Z",
"stargazers_count": 723,
"watchers_count": 723,
"stargazers_count": 724,
"watchers_count": 724,
"has_discussions": false,
"forks_count": 163,
"forks_count": 164,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -31,8 +31,8 @@
"wp2shell-poc"
],
"visibility": "public",
"forks": 163,
"watchers": 723,
"forks": 164,
"watchers": 724,
"score": 0,
"subscribers_count": 3
},
@@ -341,7 +341,7 @@
"stargazers_count": 15,
"watchers_count": 15,
"has_discussions": false,
"forks_count": 6,
"forks_count": 5,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -356,7 +356,7 @@
"wordpress-security"
],
"visibility": "public",
"forks": 6,
"forks": 5,
"watchers": 15,
"score": 0,
"subscribers_count": 1
@@ -2411,10 +2411,10 @@
"description": "CVE-2026-63030 & CVE-2026-60137 RCE chain proof-of-concept",
"fork": false,
"created_at": "2026-08-05T12:48:03Z",
"updated_at": "2026-08-08T12:48:51Z",
"updated_at": "2026-08-08T18:49:27Z",
"pushed_at": "2026-08-05T15:19:27Z",
"stargazers_count": 283,
"watchers_count": 283,
"stargazers_count": 348,
"watchers_count": 348,
"has_discussions": false,
"forks_count": 22,
"allow_forking": true,
@@ -2432,7 +2432,7 @@
],
"visibility": "public",
"forks": 22,
"watchers": 283,
"watchers": 348,
"score": 0,
"subscribers_count": 4
},
@@ -2468,5 +2468,54 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1327994300,
"name": "wp2shell-Exploit-Waf-Bypass",
"full_name": "M4xSec\/wp2shell-Exploit-Waf-Bypass",
"owner": {
"login": "M4xSec",
"id": 57313495,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57313495?v=4",
"html_url": "https:\/\/github.com\/M4xSec",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/M4xSec\/wp2shell-Exploit-Waf-Bypass",
"description": "WordPress Pre-Auth RCE Exploit + Scanner + WAF Bypass | CVE-2026-63030 + CVE-2026-60137 | Go + Python + Metasploit modules + Docker lab",
"fork": false,
"created_at": "2026-08-08T17:22:08Z",
"updated_at": "2026-08-08T17:41:07Z",
"pushed_at": "2026-08-08T17:39:56Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"bug-bounty",
"cloudflare-bypass",
"cve",
"cybersecurity",
"exploit",
"metasploit",
"offensive-security",
"penetration-testing",
"pre-auth-rce",
"rce",
"red-team",
"sql-injection",
"waf-bypass",
"wordpress",
"wordpress-exploit"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-63077.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)",
"fork": false,
"created_at": "2026-08-07T08:38:01Z",
"updated_at": "2026-08-07T18:12:39Z",
"updated_at": "2026-08-08T18:42:09Z",
"pushed_at": "2026-08-07T16:23:37Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 1,
"watchers": 7,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-64561.json
+33
View File
@@ -179,5 +179,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1327912334,
"name": "CVE-2026-64561-Kernel-Fix",
"full_name": "chuzhongyun\/CVE-2026-64561-Kernel-Fix",
"owner": {
"login": "chuzhongyun",
"id": 290793915,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/290793915?v=4",
"html_url": "https:\/\/github.com\/chuzhongyun",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/chuzhongyun\/CVE-2026-64561-Kernel-Fix",
"description": null,
"fork": false,
"created_at": "2026-08-08T15:49:30Z",
"updated_at": "2026-08-08T15:50:29Z",
"pushed_at": "2026-08-08T15:50:24Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-64600.json
+36
View File
@@ -248,5 +248,41 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1327885254,
"name": "CVE-2026-64600-RefluXFS",
"full_name": "masrikky\/CVE-2026-64600-RefluXFS",
"owner": {
"login": "masrikky",
"id": 29677671,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/29677671?v=4",
"html_url": "https:\/\/github.com\/masrikky",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/masrikky\/CVE-2026-64600-RefluXFS",
"description": "A Linux kernel local privilege escalation affecting the XFS filesystem copy-on-write (CoW) path.",
"fork": false,
"created_at": "2026-08-08T15:18:19Z",
"updated_at": "2026-08-08T15:26:00Z",
"pushed_at": "2026-08-08T15:25:55Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"vulnerability"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-64638.json
+81 -15
View File
@@ -47,12 +47,12 @@
"description": "XSS2Shell (CVE-2026-64638) PoC — WordPress pre-auth XSS to RCE chain",
"fork": false,
"created_at": "2026-08-07T17:07:17Z",
"updated_at": "2026-08-08T11:47:36Z",
"updated_at": "2026-08-08T18:46:07Z",
"pushed_at": "2026-08-07T17:07:21Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,8 +60,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"forks": 1,
"watchers": 8,
"score": 0,
"subscribers_count": 0
},
@@ -212,10 +212,10 @@
"description": "CVE-2026-64638 — WordPress Pre-Auth Reflected XSS → RCE via DOM Clobbering + Application Password Theft + REST API Plugin Activation. Dual-mode PoC (XSS chain & direct).",
"fork": false,
"created_at": "2026-08-07T22:07:13Z",
"updated_at": "2026-08-08T11:26:53Z",
"updated_at": "2026-08-08T17:14:14Z",
"pushed_at": "2026-08-08T08:12:07Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -226,7 +226,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
@@ -353,10 +353,10 @@
"description": null,
"fork": false,
"created_at": "2026-08-08T06:10:13Z",
"updated_at": "2026-08-08T09:21:00Z",
"updated_at": "2026-08-08T14:02:17Z",
"pushed_at": "2026-08-08T09:20:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -367,7 +367,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
@@ -452,8 +452,74 @@
"description": "🛡️ CVE-2026-64638 - WordPress Security Assessment Suite (CVSS 8.9) | WordPress 4.7.0-7.0.2 pentest toolkit. Includes vulnerability assessment & advanced analysis modules. 🐍 Safe Check & Exploit, 2 mode. Advanced Blue&Red Team Best 2026-64638 Toolkit, Authorized use only. Stay Legal <3zd",
"fork": false,
"created_at": "2026-08-08T11:53:39Z",
"updated_at": "2026-08-08T11:56:07Z",
"updated_at": "2026-08-08T14:15:31Z",
"pushed_at": "2026-08-08T11:57:26Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1327756636,
"name": "poc-CVE-2026-64638-",
"full_name": "mohwahyudi\/poc-CVE-2026-64638-",
"owner": {
"login": "mohwahyudi",
"id": 57562836,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57562836?v=4",
"html_url": "https:\/\/github.com\/mohwahyudi",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mohwahyudi\/poc-CVE-2026-64638-",
"description": null,
"fork": false,
"created_at": "2026-08-08T13:05:02Z",
"updated_at": "2026-08-08T13:13:32Z",
"pushed_at": "2026-08-08T13:13:21Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1327965896,
"name": "CVE-2026-64638",
"full_name": "Dungsocool\/CVE-2026-64638",
"owner": {
"login": "Dungsocool",
"id": 214970996,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/214970996?v=4",
"html_url": "https:\/\/github.com\/Dungsocool",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Dungsocool\/CVE-2026-64638",
"description": null,
"fork": false,
"created_at": "2026-08-08T16:50:10Z",
"updated_at": "2026-08-08T16:54:26Z",
"pushed_at": "2026-08-08T16:54:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-66491.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1324718763,
"name": "CVE-2026-66491",
"full_name": "toanln-cov\/CVE-2026-66491",
"owner": {
"login": "toanln-cov",
"id": 85386928,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/85386928?v=4",
"html_url": "https:\/\/github.com\/toanln-cov",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/toanln-cov\/CVE-2026-66491",
"description": "The Joomla extension PhocaCommander is vulnerable to Path Traversal in the getSource function",
"fork": false,
"created_at": "2026-08-06T04:01:24Z",
"updated_at": "2026-08-08T16:08:09Z",
"pushed_at": "2026-08-08T14:54:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-66492.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1324711748,
"name": "CVE-2026-66492",
"full_name": "toanln-cov\/CVE-2026-66492",
"owner": {
"login": "toanln-cov",
"id": 85386928,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/85386928?v=4",
"html_url": "https:\/\/github.com\/toanln-cov",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/toanln-cov\/CVE-2026-66492",
"description": "The Joomla extension PhocaCommander is vulnerable to Path Traversal in the file upload action",
"fork": false,
"created_at": "2026-08-06T03:49:33Z",
"updated_at": "2026-08-08T16:07:50Z",
"pushed_at": "2026-08-08T14:46:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-66493.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1324652990,
"name": "CVE-2026-66493",
"full_name": "toanln-cov\/CVE-2026-66493",
"owner": {
"login": "toanln-cov",
"id": 85386928,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/85386928?v=4",
"html_url": "https:\/\/github.com\/toanln-cov",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/toanln-cov\/CVE-2026-66493",
"description": "The Joomla extension PhocaCommander is vulnerable to Path Traversal in delete, copy, move actions",
"fork": false,
"created_at": "2026-08-06T02:27:29Z",
"updated_at": "2026-08-08T16:06:53Z",
"pushed_at": "2026-08-08T14:51:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-7228.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "risorse di ricerca per cve-2026-7228",
"fork": false,
"created_at": "2026-07-24T09:03:54Z",
"updated_at": "2026-08-02T16:43:32Z",
"pushed_at": "2026-08-02T16:43:27Z",
"updated_at": "2026-08-08T14:25:51Z",
"pushed_at": "2026-08-08T14:25:46Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-9256.json
+12 -12
View File
@@ -51,10 +51,10 @@
"description": null,
"fork": false,
"created_at": "2026-05-28T08:22:32Z",
"updated_at": "2026-06-08T08:19:15Z",
"updated_at": "2026-08-08T16:47:45Z",
"pushed_at": "2026-05-30T15:42:37Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -65,7 +65,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
@@ -84,10 +84,10 @@
"description": null,
"fork": false,
"created_at": "2026-05-28T15:12:42Z",
"updated_at": "2026-05-31T02:34:35Z",
"updated_at": "2026-08-08T16:21:17Z",
"pushed_at": "2026-05-28T15:20:33Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -98,7 +98,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
@@ -117,10 +117,10 @@
"description": "CVE-2026-9256 Nginx heap buffer overflow POC",
"fork": false,
"created_at": "2026-06-03T02:17:25Z",
"updated_at": "2026-06-03T02:52:39Z",
"updated_at": "2026-08-08T16:24:45Z",
"pushed_at": "2026-06-03T02:52:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -131,7 +131,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
README.md
+33 -1
View File
@@ -3367,6 +3367,7 @@
</code>
- [Semperis-Community/ResetNightmare](https://github.com/Semperis-Community/ResetNightmare)
- [mihat2/ResetNightmare-impacket](https://github.com/mihat2/ResetNightmare-impacket)
### CVE-2026-27944 (2026-03-05)
@@ -7392,6 +7393,7 @@
- [shinthink/CVE-2026-60004](https://github.com/shinthink/CVE-2026-60004)
- [HackSpeak/CVE-2026-60004](https://github.com/HackSpeak/CVE-2026-60004)
- [Sachinart/CVE-2026-60004-gitea-0day](https://github.com/Sachinart/CVE-2026-60004-gitea-0day)
- [gagaltotal/CVE-2026-60004-poc-gitea](https://github.com/gagaltotal/CVE-2026-60004-poc-gitea)
### CVE-2026-60121 (2026-07-13)
@@ -7544,6 +7546,7 @@
- [minwunn/wp2shell-CVE-2026-63030](https://github.com/minwunn/wp2shell-CVE-2026-63030)
- [sowarma/wp2shell-PoC](https://github.com/sowarma/wp2shell-PoC)
- [AnggaTechI/CVE-2026-63030](https://github.com/AnggaTechI/CVE-2026-63030)
- [M4xSec/wp2shell-Exploit-Waf-Bypass](https://github.com/M4xSec/wp2shell-Exploit-Waf-Bypass)
### CVE-2026-63077 (2026-07-27)
@@ -7610,6 +7613,7 @@
- [aarif450/Zapscape](https://github.com/aarif450/Zapscape)
- [aarif450/aarif450.github.io](https://github.com/aarif450/aarif450.github.io)
- [HackSpeak/CVE-2026-64561](https://github.com/HackSpeak/CVE-2026-64561)
- [chuzhongyun/CVE-2026-64561-Kernel-Fix](https://github.com/chuzhongyun/CVE-2026-64561-Kernel-Fix)
### CVE-2026-64564 (2026-08-04)
@@ -7631,6 +7635,7 @@
- [litosmartin/CVE-2026-64600-Refluxfs-PoC](https://github.com/litosmartin/CVE-2026-64600-Refluxfs-PoC)
- [bha-vin/CVE-2026-64600-Exploit](https://github.com/bha-vin/CVE-2026-64600-Exploit)
- [letsr00t/RefluxFS_CVE-2026-64600](https://github.com/letsr00t/RefluxFS_CVE-2026-64600)
- [masrikky/CVE-2026-64600-RefluXFS](https://github.com/masrikky/CVE-2026-64600-RefluXFS)
### CVE-2026-64633 (2026-08-04)
@@ -7658,6 +7663,8 @@
- [4minx/CVE-2026-64638](https://github.com/4minx/CVE-2026-64638)
- [HackSpeak/CVE-2026-64638](https://github.com/HackSpeak/CVE-2026-64638)
- [tc4dy/CVE-2026-64638-PoC-Exploit](https://github.com/tc4dy/CVE-2026-64638-PoC-Exploit)
- [mohwahyudi/poc-CVE-2026-64638-](https://github.com/mohwahyudi/poc-CVE-2026-64638-)
- [Dungsocool/CVE-2026-64638](https://github.com/Dungsocool/CVE-2026-64638)
### CVE-2026-64640 (2026-08-06)
@@ -7781,6 +7788,27 @@
- [theopaid/CVE-2026-66421-OpenClaw-Dashboard-Stored-XSS-via-lastMessage-Session-Field](https://github.com/theopaid/CVE-2026-66421-OpenClaw-Dashboard-Stored-XSS-via-lastMessage-Session-Field)
### CVE-2026-66491 (2026-08-07)
<code>Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the getSource function lead to an arbitrary file read vulnerability.
</code>
- [toanln-cov/CVE-2026-66491](https://github.com/toanln-cov/CVE-2026-66491)
### CVE-2026-66492 (2026-08-07)
<code>Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the file upload action lead to path a traversal vulnerability.
</code>
- [toanln-cov/CVE-2026-66492](https://github.com/toanln-cov/CVE-2026-66492)
### CVE-2026-66493 (2026-08-07)
<code>Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths for delete, copy and move actions lead to path traversal vulnerabilities.
</code>
- [toanln-cov/CVE-2026-66493](https://github.com/toanln-cov/CVE-2026-66493)
### CVE-2026-66729 (2026-07-27)
<code>facil.io 0.6.0 through 0.7.6 contains an integer underflow vulnerability in the multipart MIME body parser that allows unauthenticated remote attackers to crash the server process by sending a crafted Content-Disposition header with an empty field name. Attackers can trigger a uint32_t wraparound in http_mime_parser.h causing an out-of-bounds memory read past the name pointer, resulting in a bus fault that crashes the handling worker with a single POST request.
@@ -7928,7 +7956,11 @@
- [LazyTitan33/CVE-2026-67599_ClearOS_RCE](https://github.com/LazyTitan33/CVE-2026-67599_ClearOS_RCE)
### CVE-2026-67620
### CVE-2026-67620 (2026-08-08)
<code>Flowise through 3.1.4 contains a server-side request forgery vulnerability in the SSRF guard implemented in httpSecurity.ts, where the DEFAULT_DENY_LIST omits the Oracle Cloud Infrastructure metadata endpoint 192.0.0.192 and the Alibaba Cloud metadata endpoint 100.100.100.200, allowing authenticated attackers to force the server to issue arbitrary GET requests to cloud instance metadata services. Attackers can send requests to the fetch-links API endpoint with a crafted URL parameter, bypassing deny-list validation including redirect-based bypasses, to reach instance metadata services and expose instance identity data and role credentials on Oracle Cloud Infrastructure or Alibaba Cloud deployments, with unauthenticated access possible when URL-fetching nodes exist in public chatflows.
</code>
- [abdugafforov-bobur/CVE-2026-67620-poc](https://github.com/abdugafforov-bobur/CVE-2026-67620-poc)
### CVE-2026-67687 (2026-08-06)