From 72f504bacecf1f1c4a1db1be2fe8d9fae854c4ed Mon Sep 17 00:00:00 2001 From: motikan2010-bot Date: Sun, 9 Aug 2026 03:50:04 +0900 Subject: [PATCH] Auto Update 2026/08/08 18:50:04 --- 2012/CVE-2012-2459.json | 4 +- 2017/CVE-2017-12636.json | 4 +- 2017/CVE-2017-20165.json | 4 +- 2018/CVE-2018-1207.json | 4 +- 2019/CVE-2019-1040.json | 4 +- 2019/CVE-2019-14287.json | 4 +- 2019/CVE-2019-17558.json | 8 ++-- 2020/CVE-2020-1472.json | 4 +- 2020/CVE-2020-14882.json | 8 ++-- 2021/CVE-2021-26855.json | 8 ++-- 2021/CVE-2021-33044.json | 4 +- 2022/CVE-2022-32832.json | 8 ++-- 2023/CVE-2023-25690.json | 8 ++-- 2024/CVE-2024-56426.json | 4 +- 2025/CVE-2025-24813.json | 4 +- 2025/CVE-2025-43529.json | 4 +- 2025/CVE-2025-52915.json | 8 ++-- 2025/CVE-2025-58726.json | 4 +- 2025/CVE-2025-8088.json | 8 ++-- 2025/CVE-2025-8110.json | 8 ++-- 2026/CVE-2026-24055.json | 16 +++++-- 2026/CVE-2026-24061.json | 8 ++-- 2026/CVE-2026-27912.json | 56 +++++++++++++++++++++-- 2026/CVE-2026-3609.json | 8 ++-- 2026/CVE-2026-41940.json | 8 ++-- 2026/CVE-2026-42945.json | 8 ++-- 2026/CVE-2026-43499.json | 54 +++++++++++----------- 2026/CVE-2026-4408.json | 8 ++-- 2026/CVE-2026-58048.json | 8 ++-- 2026/CVE-2026-60004.json | 42 ++++++++++++++++++ 2026/CVE-2026-60206.json | 8 ++-- 2026/CVE-2026-63030.json | 73 +++++++++++++++++++++++++----- 2026/CVE-2026-63077.json | 8 ++-- 2026/CVE-2026-64561.json | 33 ++++++++++++++ 2026/CVE-2026-64600.json | 36 +++++++++++++++ 2026/CVE-2026-64638.json | 96 +++++++++++++++++++++++++++++++++------- 2026/CVE-2026-66491.json | 35 +++++++++++++++ 2026/CVE-2026-66492.json | 35 +++++++++++++++ 2026/CVE-2026-66493.json | 35 +++++++++++++++ 2026/CVE-2026-7228.json | 4 +- 2026/CVE-2026-9256.json | 24 +++++----- README.md | 34 +++++++++++++- 42 files changed, 584 insertions(+), 165 deletions(-) create mode 100644 2026/CVE-2026-66491.json create mode 100644 2026/CVE-2026-66492.json create mode 100644 2026/CVE-2026-66493.json diff --git a/2012/CVE-2012-2459.json b/2012/CVE-2012-2459.json index b999e1d01b..d989de9d64 100644 --- a/2012/CVE-2012-2459.json +++ b/2012/CVE-2012-2459.json @@ -14,8 +14,8 @@ "description": "Browser-based Merkle tree demo — build a tree, generate inclusion proofs, recompute the root hash by hash, and replay the RFC 6962 second-preimage and CVE-2012-2459 attacks. Real SHA-256. No backend.", "fork": false, "created_at": "2026-06-28T17:01:57Z", - "updated_at": "2026-08-06T11:06:04Z", - "pushed_at": "2026-08-06T11:05:50Z", + "updated_at": "2026-08-08T13:51:10Z", + "pushed_at": "2026-08-08T13:51:03Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2017/CVE-2017-12636.json b/2017/CVE-2017-12636.json index 5bf3f27975..2febee9a66 100644 --- a/2017/CVE-2017-12636.json +++ b/2017/CVE-2017-12636.json @@ -52,7 +52,7 @@ "stargazers_count": 6, "watchers_count": 6, "has_discussions": false, - "forks_count": 2, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,7 +60,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 2, + "forks": 1, "watchers": 6, "score": 0, "subscribers_count": 1 diff --git a/2017/CVE-2017-20165.json b/2017/CVE-2017-20165.json index 0e04b749a9..da7aad7de6 100644 --- a/2017/CVE-2017-20165.json +++ b/2017/CVE-2017-20165.json @@ -14,8 +14,8 @@ "description": "Fork of the send module to deal with CVE-2017-20165", "fork": false, "created_at": "2023-01-11T10:20:27Z", - "updated_at": "2026-08-06T07:57:01Z", - "pushed_at": "2026-08-06T07:56:06Z", + "updated_at": "2026-08-08T14:58:06Z", + "pushed_at": "2026-08-08T14:58:04Z", "stargazers_count": 15, "watchers_count": 15, "has_discussions": false, diff --git a/2018/CVE-2018-1207.json b/2018/CVE-2018-1207.json index 1934013595..d0fc654b83 100644 --- a/2018/CVE-2018-1207.json +++ b/2018/CVE-2018-1207.json @@ -19,7 +19,7 @@ "stargazers_count": 18, "watchers_count": 18, "has_discussions": false, - "forks_count": 10, + "forks_count": 9, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 10, + "forks": 9, "watchers": 18, "score": 0, "subscribers_count": 2 diff --git a/2019/CVE-2019-1040.json b/2019/CVE-2019-1040.json index 7cce8a9bd2..6cb35b2310 100644 --- a/2019/CVE-2019-1040.json +++ b/2019/CVE-2019-1040.json @@ -179,8 +179,8 @@ "description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.", "fork": false, "created_at": "2025-12-06T19:56:12Z", - "updated_at": "2026-08-08T12:15:39Z", - "pushed_at": "2026-08-08T12:15:34Z", + "updated_at": "2026-08-08T17:49:55Z", + "pushed_at": "2026-08-08T17:49:50Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2019/CVE-2019-14287.json b/2019/CVE-2019-14287.json index bec2b6c66e..ba287d70b6 100644 --- a/2019/CVE-2019-14287.json +++ b/2019/CVE-2019-14287.json @@ -923,8 +923,8 @@ "description": "Write-up do Sudo Agent CTF (TryHackMe), com enumeração, exploração web, esteganografia, SSH e privilege escalation via CVE-2019-14287.", "fork": false, "created_at": "2026-08-08T02:09:27Z", - "updated_at": "2026-08-08T02:40:35Z", - "pushed_at": "2026-08-08T02:40:30Z", + "updated_at": "2026-08-08T14:10:15Z", + "pushed_at": "2026-08-08T14:09:58Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2019/CVE-2019-17558.json b/2019/CVE-2019-17558.json index 0be7621d53..361d47bdc6 100644 --- a/2019/CVE-2019-17558.json +++ b/2019/CVE-2019-17558.json @@ -47,10 +47,10 @@ "description": "Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340", "fork": false, "created_at": "2020-04-01T09:33:35Z", - "updated_at": "2026-08-07T15:43:42Z", + "updated_at": "2026-08-08T15:36:54Z", "pushed_at": "2021-04-04T09:13:57Z", - "stargazers_count": 4290, - "watchers_count": 4290, + "stargazers_count": 4291, + "watchers_count": 4291, "has_discussions": false, "forks_count": 1083, "allow_forking": true, @@ -81,7 +81,7 @@ ], "visibility": "public", "forks": 1083, - "watchers": 4290, + "watchers": 4291, "score": 0, "subscribers_count": 148 }, diff --git a/2020/CVE-2020-1472.json b/2020/CVE-2020-1472.json index a5eed0076c..2770f95bdb 100644 --- a/2020/CVE-2020-1472.json +++ b/2020/CVE-2020-1472.json @@ -2383,8 +2383,8 @@ "description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.", "fork": false, "created_at": "2025-12-06T10:17:38Z", - "updated_at": "2026-08-08T12:00:02Z", - "pushed_at": "2026-08-08T11:59:58Z", + "updated_at": "2026-08-08T18:00:36Z", + "pushed_at": "2026-08-08T18:00:24Z", "stargazers_count": 4, "watchers_count": 4, "has_discussions": false, diff --git a/2020/CVE-2020-14882.json b/2020/CVE-2020-14882.json index 9ebca0045c..07be4a67ba 100644 --- a/2020/CVE-2020-14882.json +++ b/2020/CVE-2020-14882.json @@ -14,10 +14,10 @@ "description": "Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340", "fork": false, "created_at": "2020-04-01T09:33:35Z", - "updated_at": "2026-08-07T15:43:42Z", + "updated_at": "2026-08-08T15:36:54Z", "pushed_at": "2021-04-04T09:13:57Z", - "stargazers_count": 4290, - "watchers_count": 4290, + "stargazers_count": 4291, + "watchers_count": 4291, "has_discussions": false, "forks_count": 1083, "allow_forking": true, @@ -48,7 +48,7 @@ ], "visibility": "public", "forks": 1083, - "watchers": 4290, + "watchers": 4291, "score": 0, "subscribers_count": 148 }, diff --git a/2021/CVE-2021-26855.json b/2021/CVE-2021-26855.json index 6a74128f07..764905f91e 100644 --- a/2021/CVE-2021-26855.json +++ b/2021/CVE-2021-26855.json @@ -1678,10 +1678,10 @@ "description": "CTT-enhanced version of the Microsoft Exchange Server SSRF to RCE exploit (ProxyShell\/ProxyLogon), another CVSS 10.0 critical vulnerability that affected hundreds of thousands of organizations worldwide.", "fork": false, "created_at": "2026-01-28T08:45:23Z", - "updated_at": "2026-01-28T08:47:16Z", + "updated_at": "2026-08-08T13:07:14Z", "pushed_at": "2026-01-28T08:47:13Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -1692,7 +1692,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, diff --git a/2021/CVE-2021-33044.json b/2021/CVE-2021-33044.json index f73480ec46..811ef063f0 100644 --- a/2021/CVE-2021-33044.json +++ b/2021/CVE-2021-33044.json @@ -212,8 +212,8 @@ "description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.", "fork": false, "created_at": "2026-03-28T17:42:44Z", - "updated_at": "2026-08-08T12:17:08Z", - "pushed_at": "2026-08-08T12:17:04Z", + "updated_at": "2026-08-08T18:00:00Z", + "pushed_at": "2026-08-08T17:59:57Z", "stargazers_count": 4, "watchers_count": 4, "has_discussions": false, diff --git a/2022/CVE-2022-32832.json b/2022/CVE-2022-32832.json index 1031bb05c1..ed43c46612 100644 --- a/2022/CVE-2022-32832.json +++ b/2022/CVE-2022-32832.json @@ -14,10 +14,10 @@ "description": "Proof-of-concept and write-up for the CVE-2022-32832 vulnerability patched in iOS 15.6", "fork": false, "created_at": "2022-07-21T13:09:50Z", - "updated_at": "2026-05-13T19:49:39Z", + "updated_at": "2026-08-08T14:24:04Z", "pushed_at": "2022-07-21T13:44:32Z", - "stargazers_count": 96, - "watchers_count": 96, + "stargazers_count": 97, + "watchers_count": 97, "has_discussions": false, "forks_count": 8, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 8, - "watchers": 96, + "watchers": 97, "score": 0, "subscribers_count": 2 }, diff --git a/2023/CVE-2023-25690.json b/2023/CVE-2023-25690.json index fbca1b905d..9659cec08d 100644 --- a/2023/CVE-2023-25690.json +++ b/2023/CVE-2023-25690.json @@ -51,10 +51,10 @@ "description": "CVE 2023 25690 Proof of concept - mod_proxy vulnerable configuration on Apache HTTP Server versions 2.4.0 - 2.4.55 leads to HTTP Request Smuggling vulnerability.", "fork": false, "created_at": "2023-05-22T03:06:31Z", - "updated_at": "2026-07-25T13:33:22Z", + "updated_at": "2026-08-08T13:06:40Z", "pushed_at": "2024-08-24T13:38:50Z", - "stargazers_count": 288, - "watchers_count": 288, + "stargazers_count": 289, + "watchers_count": 289, "has_discussions": false, "forks_count": 42, "allow_forking": true, @@ -73,7 +73,7 @@ ], "visibility": "public", "forks": 42, - "watchers": 288, + "watchers": 289, "score": 0, "subscribers_count": 3 }, diff --git a/2024/CVE-2024-56426.json b/2024/CVE-2024-56426.json index 600dbcb970..a64f9ee48c 100644 --- a/2024/CVE-2024-56426.json +++ b/2024/CVE-2024-56426.json @@ -14,8 +14,8 @@ "description": "A PoC of the CVE-2024-56426 vulnerability.", "fork": false, "created_at": "2026-04-07T12:02:52Z", - "updated_at": "2026-08-05T02:20:11Z", - "pushed_at": "2026-08-04T10:53:20Z", + "updated_at": "2026-08-08T16:17:18Z", + "pushed_at": "2026-08-08T16:17:14Z", "stargazers_count": 16, "watchers_count": 16, "has_discussions": false, diff --git a/2025/CVE-2025-24813.json b/2025/CVE-2025-24813.json index 82b606a758..58224d9611 100644 --- a/2025/CVE-2025-24813.json +++ b/2025/CVE-2025-24813.json @@ -1669,7 +1669,7 @@ "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1677,7 +1677,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 0, "score": 0, "subscribers_count": 0 diff --git a/2025/CVE-2025-43529.json b/2025/CVE-2025-43529.json index dcb3e86e8e..2e313b7d5b 100644 --- a/2025/CVE-2025-43529.json +++ b/2025/CVE-2025-43529.json @@ -250,7 +250,7 @@ "stargazers_count": 58, "watchers_count": 58, "has_discussions": false, - "forks_count": 14, + "forks_count": 15, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -258,7 +258,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 14, + "forks": 15, "watchers": 58, "score": 0, "subscribers_count": 1 diff --git a/2025/CVE-2025-52915.json b/2025/CVE-2025-52915.json index 29dda4a1be..ee4ba105e3 100644 --- a/2025/CVE-2025-52915.json +++ b/2025/CVE-2025-52915.json @@ -14,10 +14,10 @@ "description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).", "fork": false, "created_at": "2023-12-05T14:52:11Z", - "updated_at": "2026-08-07T03:00:23Z", + "updated_at": "2026-08-08T18:17:15Z", "pushed_at": "2026-07-12T09:40:22Z", - "stargazers_count": 893, - "watchers_count": 893, + "stargazers_count": 895, + "watchers_count": 895, "has_discussions": false, "forks_count": 132, "allow_forking": true, @@ -39,7 +39,7 @@ ], "visibility": "public", "forks": 132, - "watchers": 893, + "watchers": 895, "score": 0, "subscribers_count": 20 } diff --git a/2025/CVE-2025-58726.json b/2025/CVE-2025-58726.json index 8d3640982f..4d0027908e 100644 --- a/2025/CVE-2025-58726.json +++ b/2025/CVE-2025-58726.json @@ -14,8 +14,8 @@ "description": "AD AutoPwn v4.10.0 — automated AD attack chain, zero-auth to Domain Admin. Discover\/Kerberoast\/AS-REP\/AD CS ESC1-16\/Shadow Creds\/RBCD+KCD\/Ghost-SPN\/TGS-rewrite\/Dollar-Ticket\/WPAD\/WSUS\/PXE\/SCCM\/BloodHound auto-action\/Loot\/DCSync\/DPAPI + Synacktiv 2026 reflection (CVE-2025-58726\/2026-24294\/2026-26128). Authorized pentesting only.", "fork": false, "created_at": "2026-03-30T19:34:35Z", - "updated_at": "2026-08-08T04:25:54Z", - "pushed_at": "2026-08-08T12:13:56Z", + "updated_at": "2026-08-08T15:41:35Z", + "pushed_at": "2026-08-08T15:41:31Z", "stargazers_count": 33, "watchers_count": 33, "has_discussions": false, diff --git a/2025/CVE-2025-8088.json b/2025/CVE-2025-8088.json index 82a269d4a3..9f926e51e2 100644 --- a/2025/CVE-2025-8088.json +++ b/2025/CVE-2025-8088.json @@ -598,10 +598,10 @@ "description": "A sophisticated GUI tool for creating malicious RAR archives that exploit the WinRAR path traversal vulnerability (CVE-2025-8088) using ADS and RAR5 header manipulation.", "fork": false, "created_at": "2025-09-04T13:33:07Z", - "updated_at": "2026-08-08T01:19:58Z", + "updated_at": "2026-08-08T18:16:52Z", "pushed_at": "2025-09-04T13:46:26Z", - "stargazers_count": 46, - "watchers_count": 46, + "stargazers_count": 47, + "watchers_count": 47, "has_discussions": false, "forks_count": 17, "allow_forking": true, @@ -612,7 +612,7 @@ "topics": [], "visibility": "public", "forks": 17, - "watchers": 46, + "watchers": 47, "score": 0, "subscribers_count": 0 }, diff --git a/2025/CVE-2025-8110.json b/2025/CVE-2025-8110.json index d4c76545e7..e7ef1ae623 100644 --- a/2025/CVE-2025-8110.json +++ b/2025/CVE-2025-8110.json @@ -212,10 +212,10 @@ "description": null, "fork": false, "created_at": "2026-04-11T22:40:07Z", - "updated_at": "2026-07-26T07:30:14Z", + "updated_at": "2026-08-08T15:47:18Z", "pushed_at": "2026-04-20T22:24:19Z", - "stargazers_count": 4, - "watchers_count": 4, + "stargazers_count": 5, + "watchers_count": 5, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -226,7 +226,7 @@ "topics": [], "visibility": "public", "forks": 3, - "watchers": 4, + "watchers": 5, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-24055.json b/2026/CVE-2026-24055.json index 9350a86606..74551c4826 100644 --- a/2026/CVE-2026-24055.json +++ b/2026/CVE-2026-24055.json @@ -11,11 +11,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/imzanggg\/CVE-2026-24055-OAuth-Langfuse", - "description": null, + "description": "Reproduction and patch verification of CVE-2026-24055 (CWE-284) - an unauthenticated OAuth access control vulnerability in Langfuse allowing Slack workspace hijacking. Coursework for Web & Application Security.", "fork": false, "created_at": "2026-05-14T03:59:23Z", - "updated_at": "2026-05-14T08:17:31Z", - "pushed_at": "2026-05-14T08:17:26Z", + "updated_at": "2026-08-08T13:55:43Z", + "pushed_at": "2026-08-08T13:50:16Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -25,7 +25,15 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "access-control", + "cve", + "docker", + "oatuh2", + "security-research", + "vulnerability-analysis", + "web-security" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-24061.json b/2026/CVE-2026-24061.json index 5d4036308d..48f641a63d 100644 --- a/2026/CVE-2026-24061.json +++ b/2026/CVE-2026-24061.json @@ -143,10 +143,10 @@ "description": "CVE-2026-24061 exploit PoC", "fork": false, "created_at": "2026-03-08T11:25:39Z", - "updated_at": "2026-08-08T12:47:41Z", + "updated_at": "2026-08-08T18:42:51Z", "pushed_at": "2026-07-30T15:17:50Z", - "stargazers_count": 660, - "watchers_count": 660, + "stargazers_count": 716, + "watchers_count": 716, "has_discussions": false, "forks_count": 15, "allow_forking": true, @@ -163,7 +163,7 @@ ], "visibility": "public", "forks": 15, - "watchers": 660, + "watchers": 716, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-27912.json b/2026/CVE-2026-27912.json index e7ae0a1d22..be44da36df 100644 --- a/2026/CVE-2026-27912.json +++ b/2026/CVE-2026-27912.json @@ -14,10 +14,10 @@ "description": "POC tool for ResetNightmare (CVE-2026-27912)", "fork": false, "created_at": "2026-08-02T12:36:16Z", - "updated_at": "2026-08-08T10:40:15Z", + "updated_at": "2026-08-08T17:39:09Z", "pushed_at": "2026-08-02T14:30:24Z", - "stargazers_count": 41, - "watchers_count": 41, + "stargazers_count": 46, + "watchers_count": 46, "has_discussions": false, "forks_count": 10, "allow_forking": true, @@ -28,7 +28,55 @@ "topics": [], "visibility": "public", "forks": 10, - "watchers": 41, + "watchers": 46, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1327954467, + "name": "ResetNightmare-impacket", + "full_name": "mihat2\/ResetNightmare-impacket", + "owner": { + "login": "mihat2", + "id": 88954195, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88954195?v=4", + "html_url": "https:\/\/github.com\/mihat2", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/mihat2\/ResetNightmare-impacket", + "description": "CVE-2026-27912 (ResetNightmare) — Linux\/impacket port of Semperis Community's Invoke-ResetNightmare PoC", + "fork": false, + "created_at": "2026-08-08T16:36:35Z", + "updated_at": "2026-08-08T16:40:24Z", + "pushed_at": "2026-08-08T16:40:34Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "active-directory", + "active-directory-security", + "cve", + "cve-2026-27912", + "impacket", + "kadmin-changepw", + "kerberos", + "ldap", + "password-reset", + "pentesting", + "proof-of-concept", + "python", + "red-team", + "security-research" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-3609.json b/2026/CVE-2026-3609.json index 29dda4a1be..ee4ba105e3 100644 --- a/2026/CVE-2026-3609.json +++ b/2026/CVE-2026-3609.json @@ -14,10 +14,10 @@ "description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).", "fork": false, "created_at": "2023-12-05T14:52:11Z", - "updated_at": "2026-08-07T03:00:23Z", + "updated_at": "2026-08-08T18:17:15Z", "pushed_at": "2026-07-12T09:40:22Z", - "stargazers_count": 893, - "watchers_count": 893, + "stargazers_count": 895, + "watchers_count": 895, "has_discussions": false, "forks_count": 132, "allow_forking": true, @@ -39,7 +39,7 @@ ], "visibility": "public", "forks": 132, - "watchers": 893, + "watchers": 895, "score": 0, "subscribers_count": 20 } diff --git a/2026/CVE-2026-41940.json b/2026/CVE-2026-41940.json index 8fe4d0a192..f8db0ca8ef 100644 --- a/2026/CVE-2026-41940.json +++ b/2026/CVE-2026-41940.json @@ -335,10 +335,10 @@ "description": "🚀 CVE-2026-41940 cPanel\/WHM Auth Bypass Exploit - Best Flow 💥 CRLF injection leads to auth bypass, session hijacking & account leak. ✅ Proxy, custom UA, keep-alive, retries, SSL verify, colored output, file save support. ⚡ Advanced PoC for pentesters. ", "fork": false, "created_at": "2026-05-12T14:47:21Z", - "updated_at": "2026-07-26T23:04:33Z", + "updated_at": "2026-08-08T17:00:37Z", "pushed_at": "2026-07-17T17:04:48Z", - "stargazers_count": 7, - "watchers_count": 7, + "stargazers_count": 8, + "watchers_count": 8, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -349,7 +349,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 7, + "watchers": 8, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-42945.json b/2026/CVE-2026-42945.json index 3b4f687fd9..47a7a766f0 100644 --- a/2026/CVE-2026-42945.json +++ b/2026/CVE-2026-42945.json @@ -14,10 +14,10 @@ "description": "Nginx Rewrite CVE Scan(CVE-2026-42945 nginx-rift CVE-2026-9256)", "fork": false, "created_at": "2026-05-14T04:40:47Z", - "updated_at": "2026-07-13T12:12:54Z", + "updated_at": "2026-08-08T16:21:21Z", "pushed_at": "2026-05-27T08:17:05Z", - "stargazers_count": 33, - "watchers_count": 33, + "stargazers_count": 34, + "watchers_count": 34, "has_discussions": false, "forks_count": 9, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 9, - "watchers": 33, + "watchers": 34, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-43499.json b/2026/CVE-2026-43499.json index e10ad59201..c330eea5c8 100644 --- a/2026/CVE-2026-43499.json +++ b/2026/CVE-2026-43499.json @@ -348,7 +348,7 @@ "description": "GhostLock (CVE-2026-43499) kernel exploit for OnePlus devices with locked bootloader", "fork": false, "created_at": "2026-07-12T16:05:24Z", - "updated_at": "2026-08-08T12:08:59Z", + "updated_at": "2026-08-08T16:01:33Z", "pushed_at": "2026-08-06T09:48:14Z", "stargazers_count": 226, "watchers_count": 226, @@ -586,12 +586,12 @@ "description": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.", "fork": false, "created_at": "2026-07-14T14:21:27Z", - "updated_at": "2026-08-08T09:56:44Z", + "updated_at": "2026-08-08T17:41:57Z", "pushed_at": "2026-07-30T11:28:07Z", - "stargazers_count": 36, - "watchers_count": 36, + "stargazers_count": 39, + "watchers_count": 39, "has_discussions": false, - "forks_count": 12, + "forks_count": 13, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -599,8 +599,8 @@ "pull_request_creation_policy": "collaborators_only", "topics": [], "visibility": "public", - "forks": 12, - "watchers": 36, + "forks": 13, + "watchers": 39, "score": 0, "subscribers_count": 0 }, @@ -1081,12 +1081,12 @@ "description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499", "fork": false, "created_at": "2026-07-17T14:24:08Z", - "updated_at": "2026-08-08T10:17:59Z", + "updated_at": "2026-08-08T18:28:15Z", "pushed_at": "2026-08-08T03:30:18Z", - "stargazers_count": 707, - "watchers_count": 707, + "stargazers_count": 715, + "watchers_count": 715, "has_discussions": false, - "forks_count": 117, + "forks_count": 121, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1094,8 +1094,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 117, - "watchers": 707, + "forks": 121, + "watchers": 715, "score": 0, "subscribers_count": 28 }, @@ -1530,7 +1530,7 @@ "fork": false, "created_at": "2026-07-25T03:57:16Z", "updated_at": "2026-07-31T14:55:41Z", - "pushed_at": "2026-07-25T03:57:26Z", + "pushed_at": "2026-08-08T13:42:00Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, @@ -1595,8 +1595,8 @@ "description": "CVE-2026-43499 research port for Galaxy S24 Ultra SM-S928U1 DZF2 (in progress)", "fork": false, "created_at": "2026-07-26T11:55:26Z", - "updated_at": "2026-08-04T05:57:14Z", - "pushed_at": "2026-07-26T17:35:25Z", + "updated_at": "2026-08-08T17:59:29Z", + "pushed_at": "2026-08-08T17:59:26Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, @@ -1826,10 +1826,10 @@ "description": null, "fork": false, "created_at": "2026-07-31T07:53:51Z", - "updated_at": "2026-08-05T01:56:03Z", + "updated_at": "2026-08-08T13:03:54Z", "pushed_at": "2026-08-05T01:55:59Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -1840,7 +1840,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 2 }, @@ -2235,8 +2235,8 @@ "description": "ghostlock + tcp-zerocopy hybrid CVE-2026-43499 adaptation for samsung kernel", "fork": false, "created_at": "2026-08-07T08:30:56Z", - "updated_at": "2026-08-08T12:10:55Z", - "pushed_at": "2026-08-07T18:35:18Z", + "updated_at": "2026-08-08T16:49:46Z", + "pushed_at": "2026-08-08T16:49:42Z", "stargazers_count": 6, "watchers_count": 6, "has_discussions": false, @@ -2268,10 +2268,10 @@ "description": "Root your Galaxy using CVE-2026-43499", "fork": false, "created_at": "2026-08-08T11:41:33Z", - "updated_at": "2026-08-08T12:29:53Z", - "pushed_at": "2026-08-08T12:09:57Z", - "stargazers_count": 4, - "watchers_count": 4, + "updated_at": "2026-08-08T18:10:37Z", + "pushed_at": "2026-08-08T13:43:40Z", + "stargazers_count": 7, + "watchers_count": 7, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -2282,7 +2282,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 4, + "watchers": 7, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-4408.json b/2026/CVE-2026-4408.json index b25d2d88ec..f123508666 100644 --- a/2026/CVE-2026-4408.json +++ b/2026/CVE-2026-4408.json @@ -14,10 +14,10 @@ "description": "proof-of-concept scripts for 2 unauthenticated RCEs in Samba (CVE-2026-4408 & CVE-2026-4480) and local privilege escalation in TelnetD (CVE-2026-28372)", "fork": false, "created_at": "2026-08-03T07:44:29Z", - "updated_at": "2026-08-06T00:05:57Z", + "updated_at": "2026-08-08T18:34:20Z", "pushed_at": "2026-08-03T07:45:19Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-58048.json b/2026/CVE-2026-58048.json index 8ae6f95b31..83da74cd9f 100644 --- a/2026/CVE-2026-58048.json +++ b/2026/CVE-2026-58048.json @@ -58,10 +58,10 @@ "description": "👾 CVE-2026-58048 – cPanel Root SQL Execution Toolkit (CVSS 9.4) | Full Red\/Blue Team Toolkit suite for unpatched cPanel & WHM 11.x. 2 tools: Safe Checker (audit\/reporting), Weaponized (reverse shell, persistence, UDF RCE, deployment, file read\/write, database operations, mass scan). w\/Python. 🦾 Use Ethically, Stay Legal <3", "fork": false, "created_at": "2026-08-06T09:33:49Z", - "updated_at": "2026-08-08T11:45:28Z", + "updated_at": "2026-08-08T16:53:19Z", "pushed_at": "2026-08-08T11:45:25Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -72,7 +72,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 3, + "watchers": 4, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-60004.json b/2026/CVE-2026-60004.json index 4d18508080..61dab01dd4 100644 --- a/2026/CVE-2026-60004.json +++ b/2026/CVE-2026-60004.json @@ -256,5 +256,47 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1327759976, + "name": "CVE-2026-60004-poc-gitea", + "full_name": "gagaltotal\/CVE-2026-60004-poc-gitea", + "owner": { + "login": "gagaltotal", + "id": 23299078, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/23299078?v=4", + "html_url": "https:\/\/github.com\/gagaltotal", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/gagaltotal\/CVE-2026-60004-poc-gitea", + "description": "CVE-2026-60004 — Gitea Pre-Auth RCE via diffpatch hook injection", + "fork": false, + "created_at": "2026-08-08T13:08:31Z", + "updated_at": "2026-08-08T16:41:47Z", + "pushed_at": "2026-08-08T16:41:43Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "auth", + "gitea", + "gitea-api", + "go", + "golang", + "golang-cli", + "rce", + "rce-exploit" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-60206.json b/2026/CVE-2026-60206.json index af61d47b3c..e0a5a8cbc5 100644 --- a/2026/CVE-2026-60206.json +++ b/2026/CVE-2026-60206.json @@ -47,10 +47,10 @@ "description": "cve cve-2026-60206 weblogic saml exploit poc vulnerability oracle scanner security", "fork": false, "created_at": "2026-07-24T02:30:11Z", - "updated_at": "2026-08-04T15:23:50Z", + "updated_at": "2026-08-08T12:54:17Z", "pushed_at": "2026-07-24T02:46:31Z", - "stargazers_count": 33, - "watchers_count": 33, + "stargazers_count": 32, + "watchers_count": 32, "has_discussions": false, "forks_count": 9, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 9, - "watchers": 33, + "watchers": 32, "score": 0, "subscribers_count": 1 }, diff --git a/2026/CVE-2026-63030.json b/2026/CVE-2026-63030.json index 2c144643f5..d82e49fc02 100644 --- a/2026/CVE-2026-63030.json +++ b/2026/CVE-2026-63030.json @@ -14,12 +14,12 @@ "description": "wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain", "fork": false, "created_at": "2026-07-17T20:18:33Z", - "updated_at": "2026-08-08T11:21:00Z", + "updated_at": "2026-08-08T15:17:50Z", "pushed_at": "2026-07-23T09:23:48Z", - "stargazers_count": 723, - "watchers_count": 723, + "stargazers_count": 724, + "watchers_count": 724, "has_discussions": false, - "forks_count": 163, + "forks_count": 164, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -31,8 +31,8 @@ "wp2shell-poc" ], "visibility": "public", - "forks": 163, - "watchers": 723, + "forks": 164, + "watchers": 724, "score": 0, "subscribers_count": 3 }, @@ -341,7 +341,7 @@ "stargazers_count": 15, "watchers_count": 15, "has_discussions": false, - "forks_count": 6, + "forks_count": 5, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -356,7 +356,7 @@ "wordpress-security" ], "visibility": "public", - "forks": 6, + "forks": 5, "watchers": 15, "score": 0, "subscribers_count": 1 @@ -2411,10 +2411,10 @@ "description": "CVE-2026-63030 & CVE-2026-60137 RCE chain proof-of-concept", "fork": false, "created_at": "2026-08-05T12:48:03Z", - "updated_at": "2026-08-08T12:48:51Z", + "updated_at": "2026-08-08T18:49:27Z", "pushed_at": "2026-08-05T15:19:27Z", - "stargazers_count": 283, - "watchers_count": 283, + "stargazers_count": 348, + "watchers_count": 348, "has_discussions": false, "forks_count": 22, "allow_forking": true, @@ -2432,7 +2432,7 @@ ], "visibility": "public", "forks": 22, - "watchers": 283, + "watchers": 348, "score": 0, "subscribers_count": 4 }, @@ -2468,5 +2468,54 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1327994300, + "name": "wp2shell-Exploit-Waf-Bypass", + "full_name": "M4xSec\/wp2shell-Exploit-Waf-Bypass", + "owner": { + "login": "M4xSec", + "id": 57313495, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57313495?v=4", + "html_url": "https:\/\/github.com\/M4xSec", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/M4xSec\/wp2shell-Exploit-Waf-Bypass", + "description": "WordPress Pre-Auth RCE Exploit + Scanner + WAF Bypass | CVE-2026-63030 + CVE-2026-60137 | Go + Python + Metasploit modules + Docker lab", + "fork": false, + "created_at": "2026-08-08T17:22:08Z", + "updated_at": "2026-08-08T17:41:07Z", + "pushed_at": "2026-08-08T17:39:56Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "bug-bounty", + "cloudflare-bypass", + "cve", + "cybersecurity", + "exploit", + "metasploit", + "offensive-security", + "penetration-testing", + "pre-auth-rce", + "rce", + "red-team", + "sql-injection", + "waf-bypass", + "wordpress", + "wordpress-exploit" + ], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-63077.json b/2026/CVE-2026-63077.json index c06c860bb8..6006cb9a99 100644 --- a/2026/CVE-2026-63077.json +++ b/2026/CVE-2026-63077.json @@ -47,10 +47,10 @@ "description": "Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)", "fork": false, "created_at": "2026-08-07T08:38:01Z", - "updated_at": "2026-08-07T18:12:39Z", + "updated_at": "2026-08-08T18:42:09Z", "pushed_at": "2026-08-07T16:23:37Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 7, + "watchers_count": 7, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 1, + "watchers": 7, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-64561.json b/2026/CVE-2026-64561.json index f607054b81..d44f573a1a 100644 --- a/2026/CVE-2026-64561.json +++ b/2026/CVE-2026-64561.json @@ -179,5 +179,38 @@ "watchers": 1, "score": 0, "subscribers_count": 0 + }, + { + "id": 1327912334, + "name": "CVE-2026-64561-Kernel-Fix", + "full_name": "chuzhongyun\/CVE-2026-64561-Kernel-Fix", + "owner": { + "login": "chuzhongyun", + "id": 290793915, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/290793915?v=4", + "html_url": "https:\/\/github.com\/chuzhongyun", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/chuzhongyun\/CVE-2026-64561-Kernel-Fix", + "description": null, + "fork": false, + "created_at": "2026-08-08T15:49:30Z", + "updated_at": "2026-08-08T15:50:29Z", + "pushed_at": "2026-08-08T15:50:24Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-64600.json b/2026/CVE-2026-64600.json index effd7dbf27..41c66ddaba 100644 --- a/2026/CVE-2026-64600.json +++ b/2026/CVE-2026-64600.json @@ -248,5 +248,41 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1327885254, + "name": "CVE-2026-64600-RefluXFS", + "full_name": "masrikky\/CVE-2026-64600-RefluXFS", + "owner": { + "login": "masrikky", + "id": 29677671, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/29677671?v=4", + "html_url": "https:\/\/github.com\/masrikky", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/masrikky\/CVE-2026-64600-RefluXFS", + "description": "A Linux kernel local privilege escalation affecting the XFS filesystem copy-on-write (CoW) path.", + "fork": false, + "created_at": "2026-08-08T15:18:19Z", + "updated_at": "2026-08-08T15:26:00Z", + "pushed_at": "2026-08-08T15:25:55Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve", + "vulnerability" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-64638.json b/2026/CVE-2026-64638.json index 873c470cff..e06c5f3164 100644 --- a/2026/CVE-2026-64638.json +++ b/2026/CVE-2026-64638.json @@ -47,12 +47,12 @@ "description": "XSS2Shell (CVE-2026-64638) PoC — WordPress pre-auth XSS to RCE chain", "fork": false, "created_at": "2026-08-07T17:07:17Z", - "updated_at": "2026-08-08T11:47:36Z", + "updated_at": "2026-08-08T18:46:07Z", "pushed_at": "2026-08-07T17:07:21Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 8, + "watchers_count": 8, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,8 +60,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, - "watchers": 2, + "forks": 1, + "watchers": 8, "score": 0, "subscribers_count": 0 }, @@ -212,10 +212,10 @@ "description": "CVE-2026-64638 — WordPress Pre-Auth Reflected XSS → RCE via DOM Clobbering + Application Password Theft + REST API Plugin Activation. Dual-mode PoC (XSS chain & direct).", "fork": false, "created_at": "2026-08-07T22:07:13Z", - "updated_at": "2026-08-08T11:26:53Z", + "updated_at": "2026-08-08T17:14:14Z", "pushed_at": "2026-08-08T08:12:07Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -226,7 +226,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 2, + "watchers": 4, "score": 0, "subscribers_count": 0 }, @@ -353,10 +353,10 @@ "description": null, "fork": false, "created_at": "2026-08-08T06:10:13Z", - "updated_at": "2026-08-08T09:21:00Z", + "updated_at": "2026-08-08T14:02:17Z", "pushed_at": "2026-08-08T09:20:53Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -367,7 +367,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -452,8 +452,74 @@ "description": "🛡️ CVE-2026-64638 - WordPress Security Assessment Suite (CVSS 8.9) | WordPress 4.7.0-7.0.2 pentest toolkit. Includes vulnerability assessment & advanced analysis modules. 🐍 Safe Check & Exploit, 2 mode. Advanced Blue&Red Team Best 2026-64638 Toolkit, Authorized use only. Stay Legal <3zd", "fork": false, "created_at": "2026-08-08T11:53:39Z", - "updated_at": "2026-08-08T11:56:07Z", + "updated_at": "2026-08-08T14:15:31Z", "pushed_at": "2026-08-08T11:57:26Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1327756636, + "name": "poc-CVE-2026-64638-", + "full_name": "mohwahyudi\/poc-CVE-2026-64638-", + "owner": { + "login": "mohwahyudi", + "id": 57562836, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57562836?v=4", + "html_url": "https:\/\/github.com\/mohwahyudi", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/mohwahyudi\/poc-CVE-2026-64638-", + "description": null, + "fork": false, + "created_at": "2026-08-08T13:05:02Z", + "updated_at": "2026-08-08T13:13:32Z", + "pushed_at": "2026-08-08T13:13:21Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1327965896, + "name": "CVE-2026-64638", + "full_name": "Dungsocool\/CVE-2026-64638", + "owner": { + "login": "Dungsocool", + "id": 214970996, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/214970996?v=4", + "html_url": "https:\/\/github.com\/Dungsocool", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Dungsocool\/CVE-2026-64638", + "description": null, + "fork": false, + "created_at": "2026-08-08T16:50:10Z", + "updated_at": "2026-08-08T16:54:26Z", + "pushed_at": "2026-08-08T16:54:23Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-66491.json b/2026/CVE-2026-66491.json new file mode 100644 index 0000000000..741a96f6cc --- /dev/null +++ b/2026/CVE-2026-66491.json @@ -0,0 +1,35 @@ +[ + { + "id": 1324718763, + "name": "CVE-2026-66491", + "full_name": "toanln-cov\/CVE-2026-66491", + "owner": { + "login": "toanln-cov", + "id": 85386928, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/85386928?v=4", + "html_url": "https:\/\/github.com\/toanln-cov", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/toanln-cov\/CVE-2026-66491", + "description": "The Joomla extension PhocaCommander is vulnerable to Path Traversal in the getSource function", + "fork": false, + "created_at": "2026-08-06T04:01:24Z", + "updated_at": "2026-08-08T16:08:09Z", + "pushed_at": "2026-08-08T14:54:08Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-66492.json b/2026/CVE-2026-66492.json new file mode 100644 index 0000000000..ccdb3a0bf3 --- /dev/null +++ b/2026/CVE-2026-66492.json @@ -0,0 +1,35 @@ +[ + { + "id": 1324711748, + "name": "CVE-2026-66492", + "full_name": "toanln-cov\/CVE-2026-66492", + "owner": { + "login": "toanln-cov", + "id": 85386928, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/85386928?v=4", + "html_url": "https:\/\/github.com\/toanln-cov", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/toanln-cov\/CVE-2026-66492", + "description": "The Joomla extension PhocaCommander is vulnerable to Path Traversal in the file upload action", + "fork": false, + "created_at": "2026-08-06T03:49:33Z", + "updated_at": "2026-08-08T16:07:50Z", + "pushed_at": "2026-08-08T14:46:25Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-66493.json b/2026/CVE-2026-66493.json new file mode 100644 index 0000000000..446f37d154 --- /dev/null +++ b/2026/CVE-2026-66493.json @@ -0,0 +1,35 @@ +[ + { + "id": 1324652990, + "name": "CVE-2026-66493", + "full_name": "toanln-cov\/CVE-2026-66493", + "owner": { + "login": "toanln-cov", + "id": 85386928, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/85386928?v=4", + "html_url": "https:\/\/github.com\/toanln-cov", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/toanln-cov\/CVE-2026-66493", + "description": "The Joomla extension PhocaCommander is vulnerable to Path Traversal in delete, copy, move actions", + "fork": false, + "created_at": "2026-08-06T02:27:29Z", + "updated_at": "2026-08-08T16:06:53Z", + "pushed_at": "2026-08-08T14:51:42Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-7228.json b/2026/CVE-2026-7228.json index 00fe3c9911..0d8b91c613 100644 --- a/2026/CVE-2026-7228.json +++ b/2026/CVE-2026-7228.json @@ -14,8 +14,8 @@ "description": "risorse di ricerca per cve-2026-7228", "fork": false, "created_at": "2026-07-24T09:03:54Z", - "updated_at": "2026-08-02T16:43:32Z", - "pushed_at": "2026-08-02T16:43:27Z", + "updated_at": "2026-08-08T14:25:51Z", + "pushed_at": "2026-08-08T14:25:46Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-9256.json b/2026/CVE-2026-9256.json index 0b5ded1ae6..0f3cda6443 100644 --- a/2026/CVE-2026-9256.json +++ b/2026/CVE-2026-9256.json @@ -51,10 +51,10 @@ "description": null, "fork": false, "created_at": "2026-05-28T08:22:32Z", - "updated_at": "2026-06-08T08:19:15Z", + "updated_at": "2026-08-08T16:47:45Z", "pushed_at": "2026-05-30T15:42:37Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -65,7 +65,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, @@ -84,10 +84,10 @@ "description": null, "fork": false, "created_at": "2026-05-28T15:12:42Z", - "updated_at": "2026-05-31T02:34:35Z", + "updated_at": "2026-08-08T16:21:17Z", "pushed_at": "2026-05-28T15:20:33Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -98,7 +98,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 }, @@ -117,10 +117,10 @@ "description": "CVE-2026-9256 Nginx heap buffer overflow POC", "fork": false, "created_at": "2026-06-03T02:17:25Z", - "updated_at": "2026-06-03T02:52:39Z", + "updated_at": "2026-08-08T16:24:45Z", "pushed_at": "2026-06-03T02:52:35Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -131,7 +131,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/README.md b/README.md index 1d80107cdf..4ae47ed416 100644 --- a/README.md +++ b/README.md @@ -3367,6 +3367,7 @@ - [Semperis-Community/ResetNightmare](https://github.com/Semperis-Community/ResetNightmare) +- [mihat2/ResetNightmare-impacket](https://github.com/mihat2/ResetNightmare-impacket) ### CVE-2026-27944 (2026-03-05) @@ -7392,6 +7393,7 @@ - [shinthink/CVE-2026-60004](https://github.com/shinthink/CVE-2026-60004) - [HackSpeak/CVE-2026-60004](https://github.com/HackSpeak/CVE-2026-60004) - [Sachinart/CVE-2026-60004-gitea-0day](https://github.com/Sachinart/CVE-2026-60004-gitea-0day) +- [gagaltotal/CVE-2026-60004-poc-gitea](https://github.com/gagaltotal/CVE-2026-60004-poc-gitea) ### CVE-2026-60121 (2026-07-13) @@ -7544,6 +7546,7 @@ - [minwunn/wp2shell-CVE-2026-63030](https://github.com/minwunn/wp2shell-CVE-2026-63030) - [sowarma/wp2shell-PoC](https://github.com/sowarma/wp2shell-PoC) - [AnggaTechI/CVE-2026-63030](https://github.com/AnggaTechI/CVE-2026-63030) +- [M4xSec/wp2shell-Exploit-Waf-Bypass](https://github.com/M4xSec/wp2shell-Exploit-Waf-Bypass) ### CVE-2026-63077 (2026-07-27) @@ -7610,6 +7613,7 @@ - [aarif450/Zapscape](https://github.com/aarif450/Zapscape) - [aarif450/aarif450.github.io](https://github.com/aarif450/aarif450.github.io) - [HackSpeak/CVE-2026-64561](https://github.com/HackSpeak/CVE-2026-64561) +- [chuzhongyun/CVE-2026-64561-Kernel-Fix](https://github.com/chuzhongyun/CVE-2026-64561-Kernel-Fix) ### CVE-2026-64564 (2026-08-04) @@ -7631,6 +7635,7 @@ - [litosmartin/CVE-2026-64600-Refluxfs-PoC](https://github.com/litosmartin/CVE-2026-64600-Refluxfs-PoC) - [bha-vin/CVE-2026-64600-Exploit](https://github.com/bha-vin/CVE-2026-64600-Exploit) - [letsr00t/RefluxFS_CVE-2026-64600](https://github.com/letsr00t/RefluxFS_CVE-2026-64600) +- [masrikky/CVE-2026-64600-RefluXFS](https://github.com/masrikky/CVE-2026-64600-RefluXFS) ### CVE-2026-64633 (2026-08-04) @@ -7658,6 +7663,8 @@ - [4minx/CVE-2026-64638](https://github.com/4minx/CVE-2026-64638) - [HackSpeak/CVE-2026-64638](https://github.com/HackSpeak/CVE-2026-64638) - [tc4dy/CVE-2026-64638-PoC-Exploit](https://github.com/tc4dy/CVE-2026-64638-PoC-Exploit) +- [mohwahyudi/poc-CVE-2026-64638-](https://github.com/mohwahyudi/poc-CVE-2026-64638-) +- [Dungsocool/CVE-2026-64638](https://github.com/Dungsocool/CVE-2026-64638) ### CVE-2026-64640 (2026-08-06) @@ -7781,6 +7788,27 @@ - [theopaid/CVE-2026-66421-OpenClaw-Dashboard-Stored-XSS-via-lastMessage-Session-Field](https://github.com/theopaid/CVE-2026-66421-OpenClaw-Dashboard-Stored-XSS-via-lastMessage-Session-Field) +### CVE-2026-66491 (2026-08-07) + +Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the getSource function lead to an arbitrary file read vulnerability. + + +- [toanln-cov/CVE-2026-66491](https://github.com/toanln-cov/CVE-2026-66491) + +### CVE-2026-66492 (2026-08-07) + +Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths in the file upload action lead to path a traversal vulnerability. + + +- [toanln-cov/CVE-2026-66492](https://github.com/toanln-cov/CVE-2026-66492) + +### CVE-2026-66493 (2026-08-07) + +Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation of paths for delete, copy and move actions lead to path traversal vulnerabilities. + + +- [toanln-cov/CVE-2026-66493](https://github.com/toanln-cov/CVE-2026-66493) + ### CVE-2026-66729 (2026-07-27) facil.io 0.6.0 through 0.7.6 contains an integer underflow vulnerability in the multipart MIME body parser that allows unauthenticated remote attackers to crash the server process by sending a crafted Content-Disposition header with an empty field name. Attackers can trigger a uint32_t wraparound in http_mime_parser.h causing an out-of-bounds memory read past the name pointer, resulting in a bus fault that crashes the handling worker with a single POST request. @@ -7928,7 +7956,11 @@ - [LazyTitan33/CVE-2026-67599_ClearOS_RCE](https://github.com/LazyTitan33/CVE-2026-67599_ClearOS_RCE) -### CVE-2026-67620 +### CVE-2026-67620 (2026-08-08) + +Flowise through 3.1.4 contains a server-side request forgery vulnerability in the SSRF guard implemented in httpSecurity.ts, where the DEFAULT_DENY_LIST omits the Oracle Cloud Infrastructure metadata endpoint 192.0.0.192 and the Alibaba Cloud metadata endpoint 100.100.100.200, allowing authenticated attackers to force the server to issue arbitrary GET requests to cloud instance metadata services. Attackers can send requests to the fetch-links API endpoint with a crafted URL parameter, bypassing deny-list validation including redirect-based bypasses, to reach instance metadata services and expose instance identity data and role credentials on Oracle Cloud Infrastructure or Alibaba Cloud deployments, with unauthenticated access possible when URL-fetching nodes exist in public chatflows. + + - [abdugafforov-bobur/CVE-2026-67620-poc](https://github.com/abdugafforov-bobur/CVE-2026-67620-poc) ### CVE-2026-67687 (2026-08-06)