nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/10/27 01:48:40

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-10-27 10:48:40 +09:00
1 parent 6975643a64
commit 771b79f9d7
75 files changed
+1160 -786
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2017/CVE-2017-0143.json
+99
View File
@@ -372,5 +372,104 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1435033252,
"name": "Laboratorio-Hacking-Etico-Vulnerabilidad-CVE-2017-0143",
"full_name": "NeoCoderFSG\/Laboratorio-Hacking-Etico-Vulnerabilidad-CVE-2017-0143",
"owner": {
"login": "NeoCoderFSG",
"id": 296329799,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/296329799?v=4",
"html_url": "https:\/\/github.com\/NeoCoderFSG",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/NeoCoderFSG\/Laboratorio-Hacking-Etico-Vulnerabilidad-CVE-2017-0143",
"description": "En este repositorio voy subir la explotacion de la vulnerablildad CVE-2017-0143 con el exploit eternalblue.",
"fork": false,
"created_at": "2026-10-26T23:26:20Z",
"updated_at": "2026-10-26T23:31:08Z",
"pushed_at": "2026-10-26T23:31:04Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1435042277,
"name": "post-explotacion-CVE-2017-0143",
"full_name": "NeoCoderFSG\/post-explotacion-CVE-2017-0143",
"owner": {
"login": "NeoCoderFSG",
"id": 296329799,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/296329799?v=4",
"html_url": "https:\/\/github.com\/NeoCoderFSG",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/NeoCoderFSG\/post-explotacion-CVE-2017-0143",
"description": "Aqui voy a colocar el paso a paso de la post explotacion de la vulnerabilidad CVE-2017-0143",
"fork": false,
"created_at": "2026-10-26T23:40:32Z",
"updated_at": "2026-10-27T00:21:13Z",
"pushed_at": "2026-10-27T00:21:10Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1435053394,
"name": "explotacion-post-CVE-2017-0143",
"full_name": "NeoCoderFSG\/explotacion-post-CVE-2017-0143",
"owner": {
"login": "NeoCoderFSG",
"id": 296329799,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/296329799?v=4",
"html_url": "https:\/\/github.com\/NeoCoderFSG",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/NeoCoderFSG\/explotacion-post-CVE-2017-0143",
"description": "Aqui voy a colocar el paso a paso de la post explotacion de la vulnerabilidad CVE-2017-0143",
"fork": false,
"created_at": "2026-10-26T23:58:01Z",
"updated_at": "2026-10-26T23:58:06Z",
"pushed_at": "2026-10-26T23:58:03Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2018/CVE-2018-14847.json
+4 -4
View File
@@ -283,10 +283,10 @@
"description": "This is a proof of concept of the critical WinBox vulnerability (CVE-2018-14847) which allows for arbitrary file read of plain text passwords. The vulnerability has long since been fixed, so this project has ended and will not be supported or updated anymore. You can fork it and update it yourself instead.",
"fork": false,
"created_at": "2021-04-21T16:42:31Z",
"updated_at": "2026-10-18T21:26:50Z",
"updated_at": "2026-10-26T18:38:29Z",
"pushed_at": "2021-04-21T16:46:37Z",
"stargazers_count": 55,
"watchers_count": 55,
"stargazers_count": 54,
"watchers_count": 54,
"has_discussions": false,
"forks_count": 24,
"allow_forking": true,
@@ -297,7 +297,7 @@
"topics": [],
"visibility": "public",
"forks": 24,
"watchers": 55,
"watchers": 54,
"score": 0,
"subscribers_count": 3
},
2019/CVE-2019-9599.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Programa ideal para robar toda la información de un dispositivo remotamente a través de la aplicación AirDroid. [CVE-2019-9599] (https:\/\/www.exploit-db.com\/exploits\/46337)",
"fork": false,
"created_at": "2019-02-09T02:18:37Z",
"updated_at": "2026-09-28T00:13:47Z",
"updated_at": "2026-10-26T19:16:22Z",
"pushed_at": "2019-11-03T17:29:56Z",
"stargazers_count": 68,
"watchers_count": 68,
"stargazers_count": 69,
"watchers_count": 69,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 68,
"watchers": 69,
"score": 0,
"subscribers_count": 3
}
2021/CVE-2021-1675.json
+5 -5
View File
@@ -63,7 +63,7 @@
"forks": 572,
"watchers": 2007,
"score": 0,
"subscribers_count": 44
"subscribers_count": 40
},
{
"id": 381799016,
@@ -329,10 +329,10 @@
"description": "Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)",
"fork": false,
"created_at": "2021-07-01T23:45:58Z",
"updated_at": "2026-10-24T11:24:24Z",
"updated_at": "2026-10-26T23:42:01Z",
"pushed_at": "2021-07-05T08:54:06Z",
"stargazers_count": 1113,
"watchers_count": 1113,
"stargazers_count": 1114,
"watchers_count": 1114,
"has_discussions": false,
"forks_count": 222,
"allow_forking": true,
@@ -343,7 +343,7 @@
"topics": [],
"visibility": "public",
"forks": 222,
"watchers": 1113,
"watchers": 1114,
"score": 0,
"subscribers_count": 23
},
2021/CVE-2021-4034.json
+37 -4
View File
@@ -961,10 +961,10 @@
"description": "Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation",
"fork": false,
"created_at": "2022-01-26T14:26:10Z",
"updated_at": "2026-10-25T07:04:07Z",
"updated_at": "2026-10-26T21:45:54Z",
"pushed_at": "2022-06-21T14:52:05Z",
"stargazers_count": 1335,
"watchers_count": 1335,
"stargazers_count": 1336,
"watchers_count": 1336,
"has_discussions": false,
"forks_count": 208,
"allow_forking": true,
@@ -977,7 +977,7 @@
],
"visibility": "public",
"forks": 208,
"watchers": 1335,
"watchers": 1336,
"score": 0,
"subscribers_count": 13
},
@@ -6194,5 +6194,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1434591114,
"name": "CVE-2021-4034",
"full_name": "axisops\/CVE-2021-4034",
"owner": {
"login": "axisops",
"id": 5512152,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5512152?v=4",
"html_url": "https:\/\/github.com\/axisops",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/axisops\/CVE-2021-4034",
"description": "PwnKit CVE-2021-4034 Mitigation work (Ansible Role)",
"fork": false,
"created_at": "2026-10-26T15:45:24Z",
"updated_at": "2026-10-27T00:10:39Z",
"pushed_at": "2026-10-26T16:00:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2021/CVE-2021-40444.json
+8 -8
View File
@@ -245,10 +245,10 @@
"description": "CVE-2021-40444 PoC",
"fork": false,
"created_at": "2021-09-10T16:55:53Z",
"updated_at": "2026-10-20T14:38:41Z",
"updated_at": "2026-10-26T20:25:37Z",
"pushed_at": "2021-12-25T18:31:02Z",
"stargazers_count": 1847,
"watchers_count": 1847,
"stargazers_count": 1848,
"watchers_count": 1848,
"has_discussions": false,
"forks_count": 472,
"allow_forking": true,
@@ -259,7 +259,7 @@
"topics": [],
"visibility": "public",
"forks": 472,
"watchers": 1847,
"watchers": 1848,
"score": 0,
"subscribers_count": 28
},
@@ -542,10 +542,10 @@
"description": "CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit",
"fork": false,
"created_at": "2021-09-15T22:34:35Z",
"updated_at": "2026-10-03T21:01:34Z",
"updated_at": "2026-10-26T20:26:06Z",
"pushed_at": "2023-10-11T18:44:51Z",
"stargazers_count": 836,
"watchers_count": 836,
"stargazers_count": 837,
"watchers_count": 837,
"has_discussions": false,
"forks_count": 163,
"allow_forking": true,
@@ -563,7 +563,7 @@
],
"visibility": "public",
"forks": 163,
"watchers": 836,
"watchers": 837,
"score": 0,
"subscribers_count": 14
},
2022/CVE-2022-20409.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Android kernel exploitation for CVE-2022-20409",
"fork": false,
"created_at": "2022-11-21T22:42:50Z",
"updated_at": "2026-09-29T17:33:59Z",
"updated_at": "2026-10-27T00:28:06Z",
"pushed_at": "2024-10-17T16:26:39Z",
"stargazers_count": 215,
"watchers_count": 215,
"stargazers_count": 216,
"watchers_count": 216,
"has_discussions": false,
"forks_count": 30,
"allow_forking": true,
@@ -32,7 +32,7 @@
],
"visibility": "public",
"forks": 30,
"watchers": 215,
"watchers": 216,
"score": 0,
"subscribers_count": 5
}
2022/CVE-2022-42889.json
+1 -1
View File
@@ -1410,7 +1410,7 @@
"fork": false,
"created_at": "2023-09-22T17:17:26Z",
"updated_at": "2023-09-22T17:17:44Z",
"pushed_at": "2026-10-15T15:28:22Z",
"pushed_at": "2026-10-26T23:34:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-33107.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "A kernel exploit for Pico 4 devices based on cve-2023-33107. ",
"fork": false,
"created_at": "2026-07-18T08:06:18Z",
"updated_at": "2026-10-17T23:01:31Z",
"updated_at": "2026-10-26T22:23:07Z",
"pushed_at": "2026-10-04T18:31:03Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 7,
"watchers": 8,
"score": 0,
"subscribers_count": 0
}
2023/CVE-2023-42413.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 695761286,
"name": "cve-2023-42413",
"full_name": "chenghao-hao\/cve-2023-42413",
"owner": {
"login": "chenghao-hao",
"id": 73655831,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/73655831?v=4",
"html_url": "https:\/\/github.com\/chenghao-hao",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/chenghao-hao\/cve-2023-42413",
"description": "ecology_9_sql ",
"fork": false,
"created_at": "2023-09-24T06:17:33Z",
"updated_at": "2023-09-24T06:17:34Z",
"pushed_at": "2023-09-24T06:17:34Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 2
}
]
2023/CVE-2023-43360.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 692729326,
"name": "CVE-2023-43360-CMSmadesimple-Stored-XSS---File-Picker-extension",
"full_name": "sromanhu\/CVE-2023-43360-CMSmadesimple-Stored-XSS---File-Picker-extension",
"owner": {
"login": "sromanhu",
"id": 87250597,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/87250597?v=4",
"html_url": "https:\/\/github.com\/sromanhu",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/sromanhu\/CVE-2023-43360-CMSmadesimple-Stored-XSS---File-Picker-extension",
"description": "Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Top Directory in the File Picker Menu.",
"fork": false,
"created_at": "2023-09-17T12:06:56Z",
"updated_at": "2023-09-28T22:37:11Z",
"pushed_at": "2023-09-21T12:25:06Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
}
]
2024/CVE-2024-30088.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": "Kernel exploit for Xbox SystemOS using CVE-2024-30088",
"fork": false,
"created_at": "2024-07-15T08:07:05Z",
"updated_at": "2026-10-26T02:12:40Z",
"updated_at": "2026-10-26T22:23:21Z",
"pushed_at": "2025-07-13T14:10:02Z",
"stargazers_count": 529,
"watchers_count": 529,
"stargazers_count": 530,
"watchers_count": 530,
"has_discussions": false,
"forks_count": 37,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 37,
"watchers": 529,
"watchers": 530,
"score": 0,
"subscribers_count": 26
},
2024/CVE-2024-3094.json
+33
View File
@@ -2898,5 +2898,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1434591779,
"name": "CVE-2024-3094",
"full_name": "axisops\/CVE-2024-3094",
"owner": {
"login": "axisops",
"id": 5512152,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5512152?v=4",
"html_url": "https:\/\/github.com\/axisops",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/axisops\/CVE-2024-3094",
"description": "xz Backdoor CVE-2024-3094 Detection and Mitigation work (Ansible Role)",
"fork": false,
"created_at": "2026-10-26T15:45:56Z",
"updated_at": "2026-10-27T00:11:11Z",
"pushed_at": "2026-10-26T16:00:52Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2024/CVE-2024-6387.json
+33
View File
@@ -3293,5 +3293,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1434592636,
"name": "CVE-2024-6387",
"full_name": "axisops\/CVE-2024-6387",
"owner": {
"login": "axisops",
"id": 5512152,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5512152?v=4",
"html_url": "https:\/\/github.com\/axisops",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/axisops\/CVE-2024-6387",
"description": "regreSSHion CVE-2024-6387 Mitigation work (Ansible Role)",
"fork": false,
"created_at": "2026-10-26T15:46:36Z",
"updated_at": "2026-10-27T00:11:24Z",
"pushed_at": "2026-10-26T16:00:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-14174.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 4,
"score": 0,
"subscribers_count": 0
2025/CVE-2025-29927.json
+33
View File
@@ -4261,5 +4261,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1434593324,
"name": "CVE-2025-29927",
"full_name": "axisops\/CVE-2025-29927",
"owner": {
"login": "axisops",
"id": 5512152,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5512152?v=4",
"html_url": "https:\/\/github.com\/axisops",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/axisops\/CVE-2025-29927",
"description": "Next.js Middleware Bypass CVE-2025-29927 Mitigation work (Ansible Role)",
"fork": false,
"created_at": "2026-10-26T15:47:12Z",
"updated_at": "2026-10-27T00:12:07Z",
"pushed_at": "2026-10-26T16:00:55Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-30208.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "全网首发 CVE-2025-31125 CVE-2025-30208 CVE-2025-32395 Vite Scanner",
"fork": false,
"created_at": "2025-03-26T10:26:12Z",
"updated_at": "2026-09-21T10:32:14Z",
"updated_at": "2026-10-27T00:51:55Z",
"pushed_at": "2025-04-13T05:21:53Z",
"stargazers_count": 49,
"watchers_count": 49,
"stargazers_count": 50,
"watchers_count": 50,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -36,7 +36,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 49,
"watchers": 50,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-3248.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "A vulnerability scanner for CVE-2025-3248 in Langflow applications. 用于扫描 Langflow 应用中 CVE-2025-3248 漏洞的工具。",
"fork": false,
"created_at": "2025-04-10T11:45:57Z",
"updated_at": "2026-09-21T10:32:15Z",
"updated_at": "2026-10-27T00:54:11Z",
"pushed_at": "2025-04-10T12:32:30Z",
"stargazers_count": 11,
"watchers_count": 11,
"stargazers_count": 12,
"watchers_count": 12,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -31,7 +31,7 @@
],
"visibility": "public",
"forks": 2,
"watchers": 11,
"watchers": 12,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-43529.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 87,
"watchers_count": 87,
"has_discussions": false,
"forks_count": 13,
"forks_count": 14,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 13,
"forks": 14,
"watchers": 87,
"score": 0,
"subscribers_count": 0
2025/CVE-2025-52691.json
+2 -2
View File
@@ -118,8 +118,8 @@
"description": "An enhanced proof-of-concept exploit for CVE-2025-52691 (SmarterMail Arbitrary File Upload RCE) with APT-level features like stealth obfuscation, persistence, exfiltration, and interactive mode. For educational and authorized testing only. Credits to the original PoC by yt2w\/CVE-2025-52691.",
"fork": false,
"created_at": "2025-12-30T18:21:29Z",
"updated_at": "2026-09-06T18:26:15Z",
"pushed_at": "2025-12-30T18:47:12Z",
"updated_at": "2026-10-27T00:40:04Z",
"pushed_at": "2026-10-27T00:40:00Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
2025/CVE-2025-52915.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-10-26T18:50:04Z",
"updated_at": "2026-10-26T20:13:17Z",
"pushed_at": "2026-08-18T12:25:25Z",
"stargazers_count": 989,
"watchers_count": 989,
"stargazers_count": 990,
"watchers_count": 990,
"has_discussions": false,
"forks_count": 147,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 147,
"watchers": 989,
"watchers": 990,
"score": 0,
"subscribers_count": 22
}
2025/CVE-2025-55182.json
+22 -22
View File
@@ -871,12 +871,12 @@
"description": "High Fidelity Detection Mechanism for RSC\/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)",
"fork": false,
"created_at": "2025-12-04T06:55:04Z",
"updated_at": "2026-10-26T15:03:32Z",
"updated_at": "2026-10-27T00:07:07Z",
"pushed_at": "2025-12-07T04:16:46Z",
"stargazers_count": 2456,
"watchers_count": 2456,
"stargazers_count": 2457,
"watchers_count": 2457,
"has_discussions": false,
"forks_count": 270,
"forks_count": 272,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -884,8 +884,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 270,
"watchers": 2456,
"forks": 272,
"watchers": 2457,
"score": 0,
"subscribers_count": 11
},
@@ -2295,12 +2295,12 @@
"description": "Original Proof-of-Concepts for React2Shell CVE-2025-55182",
"fork": false,
"created_at": "2025-12-05T08:00:07Z",
"updated_at": "2026-10-26T15:03:33Z",
"updated_at": "2026-10-27T00:07:53Z",
"pushed_at": "2025-12-05T08:56:15Z",
"stargazers_count": 1063,
"watchers_count": 1063,
"stargazers_count": 1064,
"watchers_count": 1064,
"has_discussions": false,
"forks_count": 109,
"forks_count": 110,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2311,8 +2311,8 @@
"react2shell"
],
"visibility": "public",
"forks": 109,
"watchers": 1063,
"forks": 110,
"watchers": 1064,
"score": 0,
"subscribers_count": 25
},
@@ -3869,12 +3869,12 @@
"description": "RSC\/Next.js RCE Vulnerability Detector & PoC Chrome Extension – CVE-2025-55182 & CVE-2025-66478",
"fork": false,
"created_at": "2025-12-06T00:36:16Z",
"updated_at": "2026-10-20T16:52:50Z",
"updated_at": "2026-10-27T00:08:22Z",
"pushed_at": "2025-12-06T01:27:19Z",
"stargazers_count": 312,
"watchers_count": 312,
"stargazers_count": 313,
"watchers_count": 313,
"has_discussions": false,
"forks_count": 53,
"forks_count": 54,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -3882,8 +3882,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 53,
"watchers": 312,
"forks": 54,
"watchers": 313,
"score": 0,
"subscribers_count": 5
},
@@ -4310,10 +4310,10 @@
"description": null,
"fork": false,
"created_at": "2025-12-06T14:36:55Z",
"updated_at": "2026-10-16T10:20:35Z",
"updated_at": "2026-10-26T20:05:44Z",
"pushed_at": "2025-12-06T19:52:21Z",
"stargazers_count": 281,
"watchers_count": 281,
"stargazers_count": 280,
"watchers_count": 280,
"has_discussions": false,
"forks_count": 47,
"allow_forking": true,
@@ -4324,7 +4324,7 @@
"topics": [],
"visibility": "public",
"forks": 47,
"watchers": 281,
"watchers": 280,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-5548.json
+33
View File
@@ -1143,6 +1143,39 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1433957487,
"name": "CVE-2025-5548",
"full_name": "libeazu\/CVE-2025-5548",
"owner": {
"login": "libeazu",
"id": 59836749,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59836749?v=4",
"html_url": "https:\/\/github.com\/libeazu",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/libeazu\/CVE-2025-5548",
"description": "Análisis de la vulnerabilidad CVE-2025-5548",
"fork": false,
"created_at": "2026-10-26T05:48:23Z",
"updated_at": "2026-10-26T21:03:01Z",
"pushed_at": "2026-10-26T20:59:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1434577408,
"name": "CVE-2025-5548",
2025/CVE-2025-68613.json
+4 -4
View File
@@ -127,10 +127,10 @@
"description": "CVE-2025-68613: n8n RCE vulnerability exploit and documentation",
"fork": false,
"created_at": "2025-12-22T21:49:36Z",
"updated_at": "2026-10-11T10:26:47Z",
"updated_at": "2026-10-26T19:51:01Z",
"pushed_at": "2025-12-23T08:54:59Z",
"stargazers_count": 105,
"watchers_count": 105,
"stargazers_count": 106,
"watchers_count": 106,
"has_discussions": false,
"forks_count": 21,
"allow_forking": true,
@@ -148,7 +148,7 @@
],
"visibility": "public",
"forks": 21,
"watchers": 105,
"watchers": 106,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-0073.json
+4 -4
View File
@@ -538,10 +538,10 @@
"description": "CVE-2026-0073: Android adbd TLS auth bypass PoC. Exploits a logic bug where OpenSSL's EVP_PKEY_cmp() returns -1 on key type mismatch (EC vs RSA), incorrectly evaluating to true and granting access. Includes functional Python and standalone C exploits to gain unauthenticated remote shell on Android devices with Wireless Debugging enabled.",
"fork": false,
"created_at": "2026-10-25T19:46:46Z",
"updated_at": "2026-10-25T21:53:04Z",
"updated_at": "2026-10-27T00:14:13Z",
"pushed_at": "2026-10-25T21:53:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -552,7 +552,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-100833.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Early Attestation Considered Very Harmful (CVE-2026-100833 of CVSS 9.6, CVE-2026-108265 of CVSS 9.1, CVE-2026-108266 of CVSS 9.1, CVE-2026-108267 of CVSS 9.1, CVE-2026-108268 of CVSS 9.1, CVE-2026-108269 of CVSS 9.1, CVE-2026-100835 of CVSS 9.1, CVE-2026-92701 of CVSS 9.1, CVE-2026-92702 of CVSS 9.1, CVE-2026-33697 of CVSS 7.5, and more to come)",
"fork": false,
"created_at": "2026-07-06T22:13:03Z",
"updated_at": "2026-10-24T23:59:00Z",
"pushed_at": "2026-10-25T02:18:38Z",
"updated_at": "2026-10-26T22:13:39Z",
"pushed_at": "2026-10-26T22:18:02Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2026/CVE-2026-101767.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "CVE-2026-101767-POC",
"fork": false,
"created_at": "2026-10-26T02:40:31Z",
"updated_at": "2026-10-26T13:53:32Z",
"pushed_at": "2026-10-26T13:37:59Z",
"updated_at": "2026-10-27T01:25:42Z",
"pushed_at": "2026-10-27T01:25:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-102785.json
-33
View File
@@ -1,37 +1,4 @@
[
{
"id": 1429790189,
"name": "CVE-2026-102785---YooTheme-Mass-Exploit-Webshell.Store-",
"full_name": "BIBILZERODAY\/CVE-2026-102785---YooTheme-Mass-Exploit-Webshell.Store-",
"owner": {
"login": "BIBILZERODAY",
"id": 318742045,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/318742045?v=4",
"html_url": "https:\/\/github.com\/BIBILZERODAY",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/BIBILZERODAY\/CVE-2026-102785---YooTheme-Mass-Exploit-Webshell.Store-",
"description": null,
"fork": false,
"created_at": "2026-10-22T13:31:46Z",
"updated_at": "2026-10-22T13:36:11Z",
"pushed_at": "2026-10-22T13:32:21Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1431671851,
"name": "CVE-2026-102785",
2026/CVE-2026-104736.json
-66
View File
@@ -1,37 +1,4 @@
[
{
"id": 1422648954,
"name": "CVE-2026-104736---Proof-of-Concept-PoC-Exploit-Details",
"full_name": "BIBILZERODAY\/CVE-2026-104736---Proof-of-Concept-PoC-Exploit-Details",
"owner": {
"login": "BIBILZERODAY",
"id": 318742045,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/318742045?v=4",
"html_url": "https:\/\/github.com\/BIBILZERODAY",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/BIBILZERODAY\/CVE-2026-104736---Proof-of-Concept-PoC-Exploit-Details",
"description": null,
"fork": false,
"created_at": "2026-10-16T20:37:10Z",
"updated_at": "2026-10-16T20:37:49Z",
"pushed_at": "2026-10-16T20:37:46Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1424817454,
"name": "CVE-2026-104736",
@@ -70,38 +37,5 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1427883969,
"name": "CVE-2026-104736-Mass-Webshell-CVE",
"full_name": "BIBILZERODAY\/CVE-2026-104736-Mass-Webshell-CVE",
"owner": {
"login": "BIBILZERODAY",
"id": 318742045,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/318742045?v=4",
"html_url": "https:\/\/github.com\/BIBILZERODAY",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/BIBILZERODAY\/CVE-2026-104736-Mass-Webshell-CVE",
"description": null,
"fork": false,
"created_at": "2026-10-21T04:41:12Z",
"updated_at": "2026-10-21T04:41:29Z",
"pushed_at": "2026-10-21T04:41:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-104748.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Unauthenticated privilege escalation in SimpleForm WordPress plugin <= 3.10.0. Registers an administrator account without authentication",
"fork": false,
"created_at": "2026-10-14T09:59:22Z",
"updated_at": "2026-10-14T11:00:29Z",
"updated_at": "2026-10-26T21:14:21Z",
"pushed_at": "2026-10-14T10:42:57Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-105810.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"forks": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-105950.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Bilingual PoC and technical analysis for CVE-2026-105950 — Formwork formaction URI sanitizer bypass",
"fork": false,
"created_at": "2026-10-13T14:02:57Z",
"updated_at": "2026-10-13T14:08:14Z",
"pushed_at": "2026-10-13T14:08:10Z",
"updated_at": "2026-10-26T23:19:38Z",
"pushed_at": "2026-10-26T23:19:34Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-106173.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Proof of concept exploit for CVE-2026-106173, a path traversal file write leading to RCE for Fortinet FortiSIEM",
"fork": false,
"created_at": "2026-10-20T12:29:09Z",
"updated_at": "2026-10-26T15:43:37Z",
"updated_at": "2026-10-27T00:38:52Z",
"pushed_at": "2026-10-20T12:43:37Z",
"stargazers_count": 32,
"watchers_count": 32,
"stargazers_count": 34,
"watchers_count": 34,
"has_discussions": false,
"forks_count": 11,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 11,
"watchers": 32,
"watchers": 34,
"score": 0,
"subscribers_count": 1
},
2026/CVE-2026-107092.json
+2 -2
View File
@@ -11,10 +11,10 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/raivenLockdown\/CVE-2026-107092",
"description": null,
"description": "CVE-2026-107092 is a critical directory traversal vulnerability in NexoPOS v6.2.4 affecting the api\/update endpoint, where insufficient input sanitization allows unauthenticated attackers to supply path traversal sequences, escape the intended application directory, and potentially execute arbitrary files or remote code on the underlying server.",
"fork": false,
"created_at": "2026-10-23T10:46:24Z",
"updated_at": "2026-10-26T19:06:45Z",
"updated_at": "2026-10-26T21:23:12Z",
"pushed_at": "2026-10-26T19:06:41Z",
"stargazers_count": 1,
"watchers_count": 1,
2026/CVE-2026-107406.json
-33
View File
@@ -31,38 +31,5 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1414151695,
"name": "CVE-2026-107406",
"full_name": "ctroy999\/CVE-2026-107406",
"owner": {
"login": "ctroy999",
"id": 239646784,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/239646784?v=4",
"html_url": "https:\/\/github.com\/ctroy999",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ctroy999\/CVE-2026-107406",
"description": null,
"fork": false,
"created_at": "2026-10-11T09:11:11Z",
"updated_at": "2026-10-11T09:27:49Z",
"pushed_at": "2026-10-11T09:27:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-10961.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "PHP CVE-2026-109618\/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12",
"fork": false,
"created_at": "2026-10-20T19:16:47Z",
"updated_at": "2026-10-26T12:07:04Z",
"updated_at": "2026-10-27T00:54:23Z",
"pushed_at": "2026-10-26T12:07:00Z",
"stargazers_count": 111,
"watchers_count": 111,
"stargazers_count": 112,
"watchers_count": 112,
"has_discussions": false,
"forks_count": 26,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 26,
"watchers": 111,
"watchers": 112,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-109618.json
+217 -175
View File
@@ -255,12 +255,12 @@
"description": "CVE-2026-109618\/109619 — PHP session.upload_progress pre-auth RCE. Exploit research: remote ASLR chain, PoC & patch analysis.",
"fork": false,
"created_at": "2026-10-21T04:38:46Z",
"updated_at": "2026-10-26T12:44:48Z",
"updated_at": "2026-10-26T23:54:40Z",
"pushed_at": "2026-10-26T12:42:03Z",
"stargazers_count": 47,
"watchers_count": 47,
"stargazers_count": 48,
"watchers_count": 48,
"has_discussions": false,
"forks_count": 23,
"forks_count": 24,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -282,8 +282,8 @@
"vulnerability-research"
],
"visibility": "public",
"forks": 23,
"watchers": 47,
"forks": 24,
"watchers": 48,
"score": 0,
"subscribers_count": 0
},
@@ -672,12 +672,12 @@
"description": "CVE-2026-109618\/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.",
"fork": false,
"created_at": "2026-10-21T07:55:16Z",
"updated_at": "2026-10-26T19:43:26Z",
"updated_at": "2026-10-27T01:41:35Z",
"pushed_at": "2026-10-22T22:41:36Z",
"stargazers_count": 1828,
"watchers_count": 1828,
"stargazers_count": 1833,
"watchers_count": 1833,
"has_discussions": false,
"forks_count": 628,
"forks_count": 631,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -700,8 +700,8 @@
"wordpress-security"
],
"visibility": "public",
"forks": 628,
"watchers": 1828,
"forks": 631,
"watchers": 1833,
"score": 0,
"subscribers_count": 5
},
@@ -973,12 +973,12 @@
"description": "Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 \/ CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.",
"fork": false,
"created_at": "2026-10-21T08:31:43Z",
"updated_at": "2026-10-26T17:03:21Z",
"updated_at": "2026-10-27T00:27:21Z",
"pushed_at": "2026-10-22T07:19:20Z",
"stargazers_count": 1017,
"watchers_count": 1017,
"stargazers_count": 1019,
"watchers_count": 1019,
"has_discussions": false,
"forks_count": 256,
"forks_count": 257,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -986,8 +986,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 256,
"watchers": 1017,
"forks": 257,
"watchers": 1019,
"score": 0,
"subscribers_count": 36
},
@@ -1006,10 +1006,10 @@
"description": "Protects an unpatched PHP against php2shell (CVE-2026-109618 \/ CVE-2026-109619): a small extension that mirrors the official fix component by component and steps aside once the engine carries it. PHP 5.6-8.5; Sury, cPanel EA4, DirectAdmin, Docker, Windows.",
"fork": false,
"created_at": "2026-10-21T09:00:12Z",
"updated_at": "2026-10-26T15:29:49Z",
"updated_at": "2026-10-26T21:58:57Z",
"pushed_at": "2026-10-26T12:14:54Z",
"stargazers_count": 160,
"watchers_count": 160,
"stargazers_count": 161,
"watchers_count": 161,
"has_discussions": false,
"forks_count": 11,
"allow_forking": true,
@@ -1028,7 +1028,7 @@
],
"visibility": "public",
"forks": 11,
"watchers": 160,
"watchers": 161,
"score": 0,
"subscribers_count": 3
},
@@ -1467,7 +1467,7 @@
"stargazers_count": 57,
"watchers_count": 57,
"has_discussions": false,
"forks_count": 27,
"forks_count": 28,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1475,7 +1475,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 27,
"forks": 28,
"watchers": 57,
"score": 0,
"subscribers_count": 0
@@ -1579,39 +1579,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1428261566,
"name": "PHP2Shell-CVE-2026-109618-CVE-2026-109619-Mass-Exploit",
"full_name": "BIBILZERODAY\/PHP2Shell-CVE-2026-109618-CVE-2026-109619-Mass-Exploit",
"owner": {
"login": "BIBILZERODAY",
"id": 318742045,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/318742045?v=4",
"html_url": "https:\/\/github.com\/BIBILZERODAY",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/BIBILZERODAY\/PHP2Shell-CVE-2026-109618-CVE-2026-109619-Mass-Exploit",
"description": null,
"fork": false,
"created_at": "2026-10-21T11:05:28Z",
"updated_at": "2026-10-22T17:42:36Z",
"pushed_at": "2026-10-22T17:41:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1428268170,
"name": "php-rfc1867-guard",
@@ -1759,10 +1726,10 @@
"description": null,
"fork": false,
"created_at": "2026-10-21T11:52:39Z",
"updated_at": "2026-10-26T18:56:53Z",
"updated_at": "2026-10-27T01:47:46Z",
"pushed_at": "2026-10-21T11:52:57Z",
"stargazers_count": 140,
"watchers_count": 140,
"stargazers_count": 141,
"watchers_count": 141,
"has_discussions": false,
"forks_count": 82,
"allow_forking": true,
@@ -1773,7 +1740,7 @@
"topics": [],
"visibility": "public",
"forks": 82,
"watchers": 140,
"watchers": 141,
"score": 0,
"subscribers_count": 0
},
@@ -2028,10 +1995,10 @@
"description": "php2shell: Advanced hybrid exploit framework for CVE-2026-109618, CVE-2026-109619 & CVE-2026-115560. Features Auto-LFI parameter discovery, SAPI profiling, OOM fuzzing calibration, and FPM worker pinning. Stdlib only.",
"fork": false,
"created_at": "2026-10-21T12:37:59Z",
"updated_at": "2026-10-26T13:22:42Z",
"updated_at": "2026-10-27T00:04:22Z",
"pushed_at": "2026-10-23T15:07:53Z",
"stargazers_count": 83,
"watchers_count": 83,
"stargazers_count": 85,
"watchers_count": 85,
"has_discussions": false,
"forks_count": 28,
"allow_forking": true,
@@ -2042,7 +2009,7 @@
"topics": [],
"visibility": "public",
"forks": 28,
"watchers": 83,
"watchers": 85,
"score": 0,
"subscribers_count": 0
},
@@ -3015,10 +2982,10 @@
"description": "Minimal source backports of the PHP core RCE fixes (CVE-2026-109618 \/ CVE-2026-109619) for EOL PHP 5.4 and 7.3",
"fork": false,
"created_at": "2026-10-21T14:20:57Z",
"updated_at": "2026-10-26T15:24:43Z",
"updated_at": "2026-10-27T01:25:04Z",
"pushed_at": "2026-10-22T18:37:16Z",
"stargazers_count": 52,
"watchers_count": 52,
"stargazers_count": 53,
"watchers_count": 53,
"has_discussions": false,
"forks_count": 10,
"allow_forking": true,
@@ -3029,7 +2996,7 @@
"topics": [],
"visibility": "public",
"forks": 10,
"watchers": 52,
"watchers": 53,
"score": 0,
"subscribers_count": 0
},
@@ -3274,12 +3241,12 @@
"description": "php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.",
"fork": false,
"created_at": "2026-10-21T14:48:05Z",
"updated_at": "2026-10-26T15:37:18Z",
"pushed_at": "2026-10-26T15:16:01Z",
"updated_at": "2026-10-26T20:49:16Z",
"pushed_at": "2026-10-26T20:49:12Z",
"stargazers_count": 114,
"watchers_count": 114,
"has_discussions": false,
"forks_count": 17,
"forks_count": 20,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -3304,7 +3271,7 @@
"security"
],
"visibility": "public",
"forks": 17,
"forks": 20,
"watchers": 114,
"score": 0,
"subscribers_count": 1
@@ -3554,7 +3521,7 @@
"stargazers_count": 144,
"watchers_count": 144,
"has_discussions": false,
"forks_count": 88,
"forks_count": 89,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -3562,7 +3529,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 88,
"forks": 89,
"watchers": 144,
"score": 0,
"subscribers_count": 0
@@ -4802,12 +4769,12 @@
"description": "Unofficial mitigation patches for CVE-2026-109618\/109619 on EOL PHP 5.x",
"fork": false,
"created_at": "2026-10-21T16:38:33Z",
"updated_at": "2026-10-26T19:08:06Z",
"pushed_at": "2026-10-26T19:08:02Z",
"updated_at": "2026-10-26T23:30:04Z",
"pushed_at": "2026-10-26T20:46:58Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -4815,7 +4782,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"forks": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
@@ -5393,10 +5360,10 @@
"description": "Exploits for CVE-2026-109618 \/ CVE-2026-109619 to achieve RCE on PHP targets",
"fork": false,
"created_at": "2026-10-21T17:42:17Z",
"updated_at": "2026-10-25T12:23:21Z",
"updated_at": "2026-10-27T01:17:29Z",
"pushed_at": "2026-10-21T18:51:46Z",
"stargazers_count": 36,
"watchers_count": 36,
"stargazers_count": 37,
"watchers_count": 37,
"has_discussions": false,
"forks_count": 10,
"allow_forking": true,
@@ -5415,7 +5382,7 @@
],
"visibility": "public",
"forks": 10,
"watchers": 36,
"watchers": 37,
"score": 0,
"subscribers_count": 0
},
@@ -6633,10 +6600,10 @@
"description": "CVE-2026-109618\/109619 --- PHP session.upload_progress pre-auth RCE (chain A\/B\/C)",
"fork": false,
"created_at": "2026-10-21T19:57:51Z",
"updated_at": "2026-10-24T21:04:23Z",
"updated_at": "2026-10-26T23:54:58Z",
"pushed_at": "2026-10-21T19:58:22Z",
"stargazers_count": 11,
"watchers_count": 11,
"stargazers_count": 12,
"watchers_count": 12,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -6647,7 +6614,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 11,
"watchers": 12,
"score": 0,
"subscribers_count": 0
},
@@ -6704,7 +6671,7 @@
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 2,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -6712,7 +6679,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"forks": 3,
"watchers": 8,
"score": 0,
"subscribers_count": 0
@@ -7842,12 +7809,12 @@
"description": "PHP2Shell: version-aware research toolkit for CVE-2026-109618 \/ CVE-2026-109619 — pre-auth RCE in PHP session.upload_progress (mod_php). Build profiles, labs, heap calibration and detection guidance for authorized security testing.",
"fork": false,
"created_at": "2026-10-21T22:53:01Z",
"updated_at": "2026-10-26T19:43:22Z",
"updated_at": "2026-10-26T23:41:58Z",
"pushed_at": "2026-10-22T11:43:17Z",
"stargazers_count": 169,
"watchers_count": 169,
"stargazers_count": 172,
"watchers_count": 172,
"has_discussions": false,
"forks_count": 55,
"forks_count": 57,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -7870,8 +7837,8 @@
"vulnerability-research"
],
"visibility": "public",
"forks": 55,
"watchers": 169,
"forks": 57,
"watchers": 172,
"score": 0,
"subscribers_count": 0
},
@@ -8211,7 +8178,7 @@
"stargazers_count": 61,
"watchers_count": 61,
"has_discussions": false,
"forks_count": 7,
"forks_count": 8,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -8219,7 +8186,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 7,
"forks": 8,
"watchers": 61,
"score": 0,
"subscribers_count": 1
@@ -9761,12 +9728,12 @@
"description": "High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)",
"fork": false,
"created_at": "2026-10-22T03:53:20Z",
"updated_at": "2026-10-26T17:26:18Z",
"updated_at": "2026-10-26T20:04:07Z",
"pushed_at": "2026-10-24T03:40:18Z",
"stargazers_count": 928,
"watchers_count": 928,
"stargazers_count": 929,
"watchers_count": 929,
"has_discussions": false,
"forks_count": 134,
"forks_count": 136,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -9774,8 +9741,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 134,
"watchers": 928,
"forks": 136,
"watchers": 929,
"score": 0,
"subscribers_count": 2
},
@@ -12414,10 +12381,10 @@
"description": "Scanner for PHP2Shell (CVE-2026-109618\/109619): URL blackbox, local device and SSH.",
"fork": false,
"created_at": "2026-10-22T09:45:34Z",
"updated_at": "2026-10-26T19:45:02Z",
"updated_at": "2026-10-26T23:15:11Z",
"pushed_at": "2026-10-23T14:55:12Z",
"stargazers_count": 95,
"watchers_count": 95,
"stargazers_count": 96,
"watchers_count": 96,
"has_discussions": false,
"forks_count": 14,
"allow_forking": true,
@@ -12433,7 +12400,7 @@
],
"visibility": "public",
"forks": 14,
"watchers": 95,
"watchers": 96,
"score": 0,
"subscribers_count": 0
},
@@ -12848,10 +12815,10 @@
"description": "php2shell Scanner ",
"fork": false,
"created_at": "2026-10-22T10:39:58Z",
"updated_at": "2026-10-26T17:43:35Z",
"updated_at": "2026-10-27T01:29:08Z",
"pushed_at": "2026-10-24T16:54:48Z",
"stargazers_count": 17,
"watchers_count": 17,
"stargazers_count": 18,
"watchers_count": 18,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -12862,7 +12829,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 17,
"watchers": 18,
"score": 0,
"subscribers_count": 0
},
@@ -13637,10 +13604,10 @@
"description": "PHP2Shell exploit framework — CVE-2026-109618\/619 PHP session.upload_progress UAF to RCE",
"fork": false,
"created_at": "2026-10-22T12:53:40Z",
"updated_at": "2026-10-26T18:56:44Z",
"updated_at": "2026-10-26T23:04:18Z",
"pushed_at": "2026-10-26T12:50:30Z",
"stargazers_count": 179,
"watchers_count": 179,
"stargazers_count": 180,
"watchers_count": 180,
"has_discussions": false,
"forks_count": 52,
"allow_forking": true,
@@ -13651,7 +13618,7 @@
"topics": [],
"visibility": "public",
"forks": 52,
"watchers": 179,
"watchers": 180,
"score": 0,
"subscribers_count": 0
},
@@ -14802,7 +14769,7 @@
"fork": false,
"created_at": "2026-10-22T15:45:52Z",
"updated_at": "2026-10-25T23:43:19Z",
"pushed_at": "2026-10-22T17:32:52Z",
"pushed_at": "2026-10-27T01:24:32Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -15833,10 +15800,10 @@
"description": "Unofficial patched PHP 7.4.33 for Synology DSM 6.2 x86_64 (replaces PHP7.4 7.4.30-0009). Fixes PHP2Shell (CVE-2026-109618\/109619) plus 90 security backports. Drop-in install with backup and rollback, test page, build scripts. Tested on DS1815+.",
"fork": false,
"created_at": "2026-10-22T17:59:32Z",
"updated_at": "2026-10-25T17:45:35Z",
"updated_at": "2026-10-26T23:12:26Z",
"pushed_at": "2026-10-22T19:22:24Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -15855,7 +15822,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
@@ -15949,10 +15916,10 @@
"description": "Unofficial fix for CVE-2026-109618 \/ CVE-2026-109619 (php2shell) for the end-of-life PHP 5.4 \/ 5.3 packages of RHEL, CentOS and Oracle Linux 7 \/ 6",
"fork": false,
"created_at": "2026-10-22T18:14:29Z",
"updated_at": "2026-10-23T15:03:03Z",
"updated_at": "2026-10-26T23:51:10Z",
"pushed_at": "2026-10-23T15:03:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -15984,7 +15951,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
@@ -19543,39 +19510,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1430942649,
"name": "php2shell-poc",
"full_name": "9hb\/php2shell-poc",
"owner": {
"login": "9hb",
"id": 70175464,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/70175464?v=4",
"html_url": "https:\/\/github.com\/9hb",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/9hb\/php2shell-poc",
"description": "php2shell rce proof of concept for cve-2026-109618 and cve-2026-109619",
"fork": false,
"created_at": "2026-10-23T11:12:44Z",
"updated_at": "2026-10-23T11:40:22Z",
"pushed_at": "2026-10-23T11:40:19Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1430943364,
"name": "php2shell_lab",
@@ -20622,10 +20556,10 @@
"description": "Drop-in php:7.4-apache\/fpm\/cli Docker images with the official fix for CVE-2026-109618 \/ CVE-2026-109619 (critical PHP RCE). amd64 + arm64.",
"fork": false,
"created_at": "2026-10-23T15:19:41Z",
"updated_at": "2026-10-26T07:37:36Z",
"updated_at": "2026-10-26T23:08:52Z",
"pushed_at": "2026-10-23T15:59:21Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -20649,7 +20583,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
@@ -22268,8 +22202,8 @@
"description": "Detection and response package for php2shell (CVE-2026-109618 \/ CVE-2026-109619): Suricata, Zeek, YARA, Sigma, ModSecurity rules, hunting queries, SOC triage, patch matrix. No exploit code.",
"fork": false,
"created_at": "2026-10-24T13:28:54Z",
"updated_at": "2026-10-26T13:40:52Z",
"pushed_at": "2026-10-26T13:40:48Z",
"updated_at": "2026-10-26T23:46:15Z",
"pushed_at": "2026-10-26T23:46:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -23775,8 +23709,8 @@
"description": "Bigfix PHP Vulnerability Scanner Content (CVE-2026-109618, CVE-2026-109619) for Windows, Linux and Mac.",
"fork": false,
"created_at": "2026-10-25T19:00:03Z",
"updated_at": "2026-10-25T20:17:44Z",
"pushed_at": "2026-10-25T20:17:40Z",
"updated_at": "2026-10-26T21:30:36Z",
"pushed_at": "2026-10-26T21:30:32Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -24026,10 +23960,10 @@
"description": "CVE-2026-109618 - PHP session.upload_progress Heap UAF Pre-Auth RCE (CVSS 9.2)",
"fork": false,
"created_at": "2026-10-26T01:46:40Z",
"updated_at": "2026-10-26T01:55:51Z",
"updated_at": "2026-10-26T20:46:30Z",
"pushed_at": "2026-10-26T01:46:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -24061,7 +23995,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
@@ -24821,10 +24755,10 @@
"description": "Analysis and negative control for CVE-2026-109618\/109619: which PHP builds still arm, why 8.4.27 does not, and why the chain does not transfer to PHP-FPM. Exploit withheld until 2026-11-25.",
"fork": false,
"created_at": "2026-10-26T12:07:28Z",
"updated_at": "2026-10-26T19:42:09Z",
"updated_at": "2026-10-27T00:38:36Z",
"pushed_at": "2026-10-26T15:26:23Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -24841,7 +24775,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
@@ -24926,8 +24860,8 @@
"description": "PHP2SHELL — remote scanner + research PoC for CVE-2026-109618 \/ CVE-2026-109619: the PHP rfc1867 pre-request OOM RCE pair (PHP 5.4.0–8.5.11, fixed in 8.5.12). Reverse-engineered from the 8.5.11→8.5.12 diff, verified against both builds.",
"fork": false,
"created_at": "2026-10-26T16:26:32Z",
"updated_at": "2026-10-26T16:27:47Z",
"pushed_at": "2026-10-26T16:27:28Z",
"updated_at": "2026-10-26T21:15:23Z",
"pushed_at": "2026-10-26T21:15:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -25018,5 +24952,113 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1434881802,
"name": "php2shell-detect",
"full_name": "ProTekk\/php2shell-detect",
"owner": {
"login": "ProTekk",
"id": 1816069,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1816069?v=4",
"html_url": "https:\/\/github.com\/ProTekk",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ProTekk\/php2shell-detect",
"description": "Benign client-testing detector for PHP2Shell \/ PHP session upload-progress (CVE-2026-109618, CVE-2026-109619): version ladder, config gate, behavioral probe, and the chain pubstate probe. Stdlib-only; Linux, macOS, Windows.",
"fork": false,
"created_at": "2026-10-26T20:11:59Z",
"updated_at": "2026-10-26T20:36:48Z",
"pushed_at": "2026-10-26T20:36:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1434911833,
"name": "php2shell-scan-patch",
"full_name": "thetowsif\/php2shell-scan-patch",
"owner": {
"login": "thetowsif",
"id": 69382676,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/69382676?v=4",
"html_url": "https:\/\/github.com\/thetowsif",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/thetowsif\/php2shell-scan-patch",
"description": "Universal scanner and automated patching playbook for CVE-2026-109618 and CVE-2026-109619 (\"PHP2Shell\")",
"fork": false,
"created_at": "2026-10-26T20:45:18Z",
"updated_at": "2026-10-26T21:30:55Z",
"pushed_at": "2026-10-26T21:30:52Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1434969422,
"name": "php2shell-scanner",
"full_name": "foxcornlab\/php2shell-scanner",
"owner": {
"login": "foxcornlab",
"id": 43523802,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43523802?v=4",
"html_url": "https:\/\/github.com\/foxcornlab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/foxcornlab\/php2shell-scanner",
"description": "Detection-only triage scanner for PHP2Shell CVE-2026-109618 \/ CVE-2026-109619: PHP version fingerprinting, SAPI detection, and local php.ini audit. No exploit payloads.",
"fork": false,
"created_at": "2026-10-26T21:55:15Z",
"updated_at": "2026-10-26T21:55:41Z",
"pushed_at": "2026-10-26T21:55:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-109618",
"cve-2026-109619",
"detection",
"php",
"php2shell",
"security-scanner",
"triage",
"vulnerability-scanner"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-109619.json
+10 -10
View File
@@ -664,10 +664,10 @@
"description": "Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619\/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design",
"fork": false,
"created_at": "2026-10-23T13:49:52Z",
"updated_at": "2026-10-26T19:24:25Z",
"updated_at": "2026-10-27T01:36:38Z",
"pushed_at": "2026-10-26T17:21:54Z",
"stargazers_count": 87,
"watchers_count": 87,
"stargazers_count": 90,
"watchers_count": 90,
"has_discussions": false,
"forks_count": 53,
"allow_forking": true,
@@ -694,7 +694,7 @@
],
"visibility": "public",
"forks": 53,
"watchers": 87,
"watchers": 90,
"score": 0,
"subscribers_count": 0
},
@@ -779,10 +779,10 @@
"description": "CVE-2026-109619 - PHP session.upload_progress File Poisoning + LFI RCE (CVSS 9.2)",
"fork": false,
"created_at": "2026-10-26T01:45:45Z",
"updated_at": "2026-10-26T01:55:50Z",
"updated_at": "2026-10-26T20:46:31Z",
"pushed_at": "2026-10-26T01:45:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -814,7 +814,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
@@ -833,8 +833,8 @@
"description": "CVE-2026-109619 (PHP2Shell): Pre-Auth Remote Code Execution (RCE) via PHP-FPM Stale Global State Deserialization UAF. Reproducible Docker lab, interactive shell, reverse shell & WAF\/IDS rules.",
"fork": false,
"created_at": "2026-10-26T11:42:12Z",
"updated_at": "2026-10-26T18:49:19Z",
"pushed_at": "2026-10-26T18:49:15Z",
"updated_at": "2026-10-26T20:36:54Z",
"pushed_at": "2026-10-26T20:36:50Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-110025.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "CVE-2026-110025: bilingual analysis and safe local PoC for phpwcms unrestricted upload to RCE",
"fork": false,
"created_at": "2026-10-13T22:45:00Z",
"updated_at": "2026-10-13T22:45:10Z",
"pushed_at": "2026-10-13T22:45:05Z",
"updated_at": "2026-10-26T23:19:41Z",
"pushed_at": "2026-10-26T23:19:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-110922.json
+5 -5
View File
@@ -14,10 +14,10 @@
"description": "Chrome Vulnerability Laboratory . CVE-2026-110922 ",
"fork": false,
"created_at": "2026-10-24T09:26:07Z",
"updated_at": "2026-10-26T15:35:20Z",
"pushed_at": "2026-10-26T15:35:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"updated_at": "2026-10-27T01:39:47Z",
"pushed_at": "2026-10-27T01:39:42Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-111497.json
+65 -32
View File
@@ -47,12 +47,12 @@
"description": "Reproducible local Brotli decoder proof for CVE-2026-111497 with a self-checking tuned RCE harness",
"fork": false,
"created_at": "2026-10-22T04:08:28Z",
"updated_at": "2026-10-26T16:35:35Z",
"updated_at": "2026-10-26T23:59:29Z",
"pushed_at": "2026-10-25T01:09:02Z",
"stargazers_count": 53,
"watchers_count": 53,
"stargazers_count": 55,
"watchers_count": 55,
"has_discussions": false,
"forks_count": 14,
"forks_count": 16,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,8 +60,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 14,
"watchers": 53,
"forks": 16,
"watchers": 55,
"score": 0,
"subscribers_count": 0
},
@@ -315,7 +315,7 @@
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 3,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -323,7 +323,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"forks": 4,
"watchers": 3,
"score": 0,
"subscribers_count": 0
@@ -664,8 +664,8 @@
"description": "Claude Code and Codex skill for finding potentially vulnerable Brotli copies and guiding updates for CVE-2026-111497.",
"fork": false,
"created_at": "2026-10-23T16:32:12Z",
"updated_at": "2026-10-26T19:18:35Z",
"pushed_at": "2026-10-26T19:12:48Z",
"updated_at": "2026-10-26T20:45:18Z",
"pushed_at": "2026-10-26T21:33:30Z",
"stargazers_count": 55,
"watchers_count": 55,
"has_discussions": false,
@@ -1246,10 +1246,10 @@
"description": "CVE-2026-111497 Node2Shell — Node.js Brotli OOB Write RCE PoC (CVSS 9.2)",
"fork": false,
"created_at": "2026-10-24T23:03:18Z",
"updated_at": "2026-10-26T17:43:14Z",
"updated_at": "2026-10-27T00:55:09Z",
"pushed_at": "2026-10-25T20:32:46Z",
"stargazers_count": 25,
"watchers_count": 25,
"stargazers_count": 31,
"watchers_count": 31,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -1260,7 +1260,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 25,
"watchers": 31,
"score": 0,
"subscribers_count": 0
},
@@ -1324,10 +1324,10 @@
"description": "PoC for CVE-2026-111497 (HTTP2Shell)",
"fork": false,
"created_at": "2026-10-25T04:22:02Z",
"updated_at": "2026-10-25T07:19:23Z",
"updated_at": "2026-10-26T23:34:33Z",
"pushed_at": "2026-10-25T04:29:01Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -1338,7 +1338,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
@@ -1357,10 +1357,10 @@
"description": "High fidelity detection mechanism for node2shell (CVE-2026-111497)",
"fork": false,
"created_at": "2026-10-25T04:23:54Z",
"updated_at": "2026-10-26T15:28:33Z",
"updated_at": "2026-10-26T21:35:52Z",
"pushed_at": "2026-10-25T04:24:27Z",
"stargazers_count": 68,
"watchers_count": 68,
"stargazers_count": 69,
"watchers_count": 69,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -1371,7 +1371,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 68,
"watchers": 69,
"score": 0,
"subscribers_count": 1
},
@@ -1530,8 +1530,8 @@
"description": "Security research on CVE-2026-111497 (HTTP2Shell): Docker-only differential lab probing the Brotli decoder OOB write across vulnerable\/fixed Node builds",
"fork": false,
"created_at": "2026-10-25T17:23:52Z",
"updated_at": "2026-10-26T14:33:53Z",
"pushed_at": "2026-10-26T14:33:48Z",
"updated_at": "2026-10-27T01:00:21Z",
"pushed_at": "2026-10-27T01:00:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -1729,8 +1729,8 @@
"description": "BigFix YARA-X discovery Fixlets and shared Analysis for Node.js Brotli CVE-2026-111497 on Windows, Linux and macOS.",
"fork": false,
"created_at": "2026-10-25T20:09:18Z",
"updated_at": "2026-10-26T15:36:32Z",
"pushed_at": "2026-10-26T15:36:28Z",
"updated_at": "2026-10-26T22:04:19Z",
"pushed_at": "2026-10-26T22:04:13Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -1838,10 +1838,10 @@
"description": "CVE-2026-111497",
"fork": false,
"created_at": "2026-10-26T10:03:58Z",
"updated_at": "2026-10-26T11:54:12Z",
"updated_at": "2026-10-26T21:06:48Z",
"pushed_at": "2026-10-26T11:54:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -1852,7 +1852,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
@@ -1977,8 +1977,41 @@
"description": "formbricks 5.1.4 with Node.js 24.22.1 (CVE-2026-111497 and others) swapped in",
"fork": false,
"created_at": "2026-10-26T16:57:01Z",
"updated_at": "2026-10-26T16:57:43Z",
"pushed_at": "2026-10-26T16:57:38Z",
"updated_at": "2026-10-26T20:48:56Z",
"pushed_at": "2026-10-26T20:48:52Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1435043505,
"name": "CVE-2026-111497",
"full_name": "axisops\/CVE-2026-111497",
"owner": {
"login": "axisops",
"id": 5512152,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5512152?v=4",
"html_url": "https:\/\/github.com\/axisops",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/axisops\/CVE-2026-111497",
"description": "Brotli decoder CVE-2026-111497 Mitigation work (Ansible Role)",
"fork": false,
"created_at": "2026-10-26T23:42:30Z",
"updated_at": "2026-10-27T00:12:00Z",
"pushed_at": "2026-10-27T00:05:48Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-114509.json
+2 -2
View File
@@ -80,8 +80,8 @@
"description": "Reproducible local Laravel lab and self-checking PoC for CVE-2026-114509",
"fork": false,
"created_at": "2026-10-24T01:12:34Z",
"updated_at": "2026-10-26T16:09:54Z",
"pushed_at": "2026-10-26T16:09:49Z",
"updated_at": "2026-10-27T01:42:10Z",
"pushed_at": "2026-10-27T01:42:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-116000.json
+41
View File
@@ -0,0 +1,41 @@
[
{
"id": 1435024674,
"name": "CVE-2026-116000",
"full_name": "capivara-research\/CVE-2026-116000",
"owner": {
"login": "capivara-research",
"id": 287438663,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/287438663?v=4",
"html_url": "https:\/\/github.com\/capivara-research",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/capivara-research\/CVE-2026-116000",
"description": "Safe PoC and technical analysis for CVE-2026-116000",
"fork": false,
"created_at": "2026-10-26T23:13:23Z",
"updated_at": "2026-10-26T23:45:16Z",
"pushed_at": "2026-10-26T23:45:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"poc",
"privategpt",
"ssrf",
"vulnerability-research"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-116004.json
+41
View File
@@ -0,0 +1,41 @@
[
{
"id": 1435024766,
"name": "CVE-2026-116004",
"full_name": "capivara-research\/CVE-2026-116004",
"owner": {
"login": "capivara-research",
"id": 287438663,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/287438663?v=4",
"html_url": "https:\/\/github.com\/capivara-research",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/capivara-research\/CVE-2026-116004",
"description": "Safe PoC and technical analysis for CVE-2026-116004",
"fork": false,
"created_at": "2026-10-26T23:13:31Z",
"updated_at": "2026-10-26T23:45:19Z",
"pushed_at": "2026-10-26T23:45:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"iframe",
"poc",
"vulnerability-research",
"xss"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-19745.json → 2026/CVE-2026-116370.json
+18 -12
View File
@@ -1,8 +1,8 @@
[
{
"id": 1350733740,
"name": "CVE-2026-19745",
"full_name": "drbloop2000\/CVE-2026-19745",
"id": 1404351968,
"name": "Sid-Meier-s-Civilization-VI-RCE",
"full_name": "drbloop2000\/Sid-Meier-s-Civilization-VI-RCE",
"owner": {
"login": "drbloop2000",
"id": 322517856,
@@ -10,14 +10,14 @@
"html_url": "https:\/\/github.com\/drbloop2000",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/drbloop2000\/CVE-2026-19745",
"description": "Learn how I found my first two CVEs by pure accident.",
"html_url": "https:\/\/github.com\/drbloop2000\/Sid-Meier-s-Civilization-VI-RCE",
"description": "CVE-2026-116370",
"fork": false,
"created_at": "2026-08-29T16:21:05Z",
"updated_at": "2026-08-29T23:55:32Z",
"pushed_at": "2026-08-29T16:36:35Z",
"stargazers_count": 2,
"watchers_count": 2,
"created_at": "2026-10-04T12:09:01Z",
"updated_at": "2026-10-26T20:18:22Z",
"pushed_at": "2026-10-26T20:18:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -25,10 +25,16 @@
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"topics": [
"cve",
"exploit",
"rce",
"remote-code-execution",
"sandbox-escape"
],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-18107.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Universal container escape exploit targeting the CRIU container checkpoint\/restore system - CVE-2026-18107",
"fork": false,
"created_at": "2026-09-27T21:57:13Z",
"updated_at": "2026-10-26T17:58:30Z",
"pushed_at": "2026-10-26T17:58:26Z",
"updated_at": "2026-10-26T21:52:59Z",
"pushed_at": "2026-10-26T21:52:55Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-20700.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 17,
"watchers_count": 17,
"has_discussions": false,
"forks_count": 6,
"forks_count": 7,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 6,
"forks": 7,
"watchers": 17,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-20980.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Poc for CVE-2026-20980, CVE-2026-20981, CVE-2026-20982",
"fork": false,
"created_at": "2026-06-01T13:14:47Z",
"updated_at": "2026-10-24T16:22:17Z",
"updated_at": "2026-10-26T22:00:51Z",
"pushed_at": "2026-06-01T17:42:26Z",
"stargazers_count": 53,
"watchers_count": 53,
"stargazers_count": 54,
"watchers_count": 54,
"has_discussions": false,
"forks_count": 13,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 13,
"watchers": 53,
"watchers": 54,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-24291.json
+4 -4
View File
@@ -165,10 +165,10 @@
"description": "About 2026 Guide: Bypass User Account Control Prompts on Windows 11",
"fork": false,
"created_at": "2026-07-11T23:35:08Z",
"updated_at": "2026-09-11T21:50:22Z",
"updated_at": "2026-10-27T00:45:14Z",
"pushed_at": "2026-07-12T05:46:40Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -181,7 +181,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-26268.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "IOC scanner for agentic AI coding tools — detects Mini Shai-Hulud, Gemini CLI RCE, Cursor CVE-2026-26268, and DPRK PromptMink.",
"fork": false,
"created_at": "2026-05-05T14:57:30Z",
"updated_at": "2026-05-20T11:17:42Z",
"updated_at": "2026-10-26T20:54:51Z",
"pushed_at": "2026-05-20T11:17:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-2991.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "PoC exploit for CVE-2026-2991 — authentication bypass in KiviCare WordPress plugin (≤4.1.2) allowing unauthenticated patient account takeover and admin session extraction.",
"fork": false,
"created_at": "2026-03-18T19:09:24Z",
"updated_at": "2026-08-19T08:07:19Z",
"updated_at": "2026-10-26T21:13:25Z",
"pushed_at": "2026-03-18T19:25:25Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -43,7 +43,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-31431.json
+6 -6
View File
@@ -5457,7 +5457,7 @@
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -5465,7 +5465,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 9,
"score": 0,
"subscribers_count": 0
@@ -11282,10 +11282,10 @@
"description": "Copy Fail exploit for Ubuntu 20.04 with legacy Python versions, including script to hide Copy Fail.",
"fork": false,
"created_at": "2026-10-23T08:21:40Z",
"updated_at": "2026-10-23T14:06:12Z",
"updated_at": "2026-10-26T20:26:42Z",
"pushed_at": "2026-10-23T14:06:06Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -11304,7 +11304,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-3609.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-10-26T18:50:04Z",
"updated_at": "2026-10-26T20:13:17Z",
"pushed_at": "2026-08-18T12:25:25Z",
"stargazers_count": 989,
"watchers_count": 989,
"stargazers_count": 990,
"watchers_count": 990,
"has_discussions": false,
"forks_count": 147,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 147,
"watchers": 989,
"watchers": 990,
"score": 0,
"subscribers_count": 22
},
2024/CVE-2024-43047.json → 2026/CVE-2026-38903.json
+12 -12
View File
@@ -1,21 +1,21 @@
[
{
"id": 1434745864,
"name": "sonim-x320-root",
"full_name": "JMTDI\/sonim-x320-root",
"id": 1434880115,
"name": "CVE-2026-38903",
"full_name": "Lenard-BIDaaS\/CVE-2026-38903",
"owner": {
"login": "JMTDI",
"id": 212186038,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/212186038?v=4",
"html_url": "https:\/\/github.com\/JMTDI",
"login": "Lenard-BIDaaS",
"id": 293694992,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/293694992?v=4",
"html_url": "https:\/\/github.com\/Lenard-BIDaaS",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/JMTDI\/sonim-x320-root",
"description": "Exploit-based root for Sonim X320 (CVE-2024-43047)",
"html_url": "https:\/\/github.com\/Lenard-BIDaaS\/CVE-2026-38903",
"description": null,
"fork": false,
"created_at": "2026-10-26T17:58:19Z",
"updated_at": "2026-10-26T17:58:25Z",
"pushed_at": "2026-10-26T17:58:21Z",
"created_at": "2026-10-26T20:10:14Z",
"updated_at": "2026-10-26T20:46:20Z",
"pushed_at": "2026-10-26T20:42:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-3891.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload (CVE-2026-3891) PoC",
"fork": false,
"created_at": "2026-03-13T20:33:42Z",
"updated_at": "2026-08-19T13:35:10Z",
"updated_at": "2026-10-26T21:13:47Z",
"pushed_at": "2026-03-13T21:20:37Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -43,7 +43,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 7,
"watchers": 8,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-40369.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browsers render process sandbox",
"fork": false,
"created_at": "2026-05-13T20:56:15Z",
"updated_at": "2026-10-17T02:31:05Z",
"updated_at": "2026-10-27T01:39:56Z",
"pushed_at": "2026-05-18T21:29:59Z",
"stargazers_count": 264,
"watchers_count": 264,
"stargazers_count": 272,
"watchers_count": 272,
"has_discussions": false,
"forks_count": 62,
"forks_count": 63,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 62,
"watchers": 264,
"forks": 63,
"watchers": 272,
"score": 0,
"subscribers_count": 6
},
2026/CVE-2026-41089.json
+4 -50
View File
@@ -227,52 +227,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1307172425,
"name": "CVE-2026-41089-Netlogon-RCE",
"full_name": "HydraSoft\/CVE-2026-41089-Netlogon-RCE",
"owner": {
"login": "HydraSoft",
"id": 306914243,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/306914243?v=4",
"html_url": "https:\/\/github.com\/HydraSoft",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/HydraSoft\/CVE-2026-41089-Netlogon-RCE",
"description": "Technical analysis and Proof-of-Concept (PoC) for CVE-2026-41089, a critical unauthenticated Remote Code Execution (RCE) vulnerability in the Windows Netlogon service affecting Domain Controllers.",
"fork": false,
"created_at": "2026-07-21T02:05:07Z",
"updated_at": "2026-10-01T02:44:05Z",
"pushed_at": "2026-08-24T04:08:31Z",
"stargazers_count": 34,
"watchers_count": 34,
"has_discussions": false,
"forks_count": 10,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"active-directory",
"buffer-overflow",
"cve-2026-41089",
"cybersecurity",
"domain-controller",
"exploit-poc",
"netlogon-rce",
"privilege-escalation",
"remote-code-execution",
"threat-hunting",
"windows-security",
"zero-day"
],
"visibility": "public",
"forks": 10,
"watchers": 34,
"score": 0,
"subscribers_count": 3
},
{
"id": 1308986120,
"name": "CVE-2026-41089-Netlogon-RCE",
@@ -334,10 +288,10 @@
"description": "🛡️ Official AI Security Tool diagnostic module for CVE-2026-41089 (Windows Netlogon Stack Buffer Overflow RCE). Features technical writeup, attack architecture, IoCs, and mitigation strategy.",
"fork": false,
"created_at": "2026-09-10T21:39:19Z",
"updated_at": "2026-09-29T14:31:13Z",
"updated_at": "2026-10-27T00:45:15Z",
"pushed_at": "2026-09-29T14:30:55Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -361,7 +315,7 @@
],
"visibility": "public",
"forks": 3,
"watchers": 5,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-43284.json
-33
View File
@@ -1475,38 +1475,5 @@
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1432721297,
"name": "DFRoot",
"full_name": "yameteeee-kudasaiiiiiii90\/DFRoot",
"owner": {
"login": "yameteeee-kudasaiiiiiii90",
"id": 333906014,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/333906014?v=4",
"html_url": "https:\/\/github.com\/yameteeee-kudasaiiiiiii90",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/yameteeee-kudasaiiiiiii90\/DFRoot",
"description": "Fork of datfooldive\/DFRoot (DirtyFrag CVE-2026-43284, ReSukiSU) + GitHub Actions APK build",
"fork": false,
"created_at": "2026-10-25T00:58:27Z",
"updated_at": "2026-10-25T20:26:31Z",
"pushed_at": "2026-10-25T01:04:13Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-43499.json
+25 -25
View File
@@ -538,7 +538,7 @@
"stargazers_count": 113,
"watchers_count": 113,
"has_discussions": false,
"forks_count": 34,
"forks_count": 35,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -546,7 +546,7 @@
"pull_request_creation_policy": "collaborators_only",
"topics": [],
"visibility": "public",
"forks": 34,
"forks": 35,
"watchers": 113,
"score": 0,
"subscribers_count": 0
@@ -1709,12 +1709,12 @@
"description": "GhostLock One-Tap Execution App (CVE-2026-43499)",
"fork": false,
"created_at": "2026-07-29T05:04:25Z",
"updated_at": "2026-10-26T19:33:01Z",
"pushed_at": "2026-10-25T18:09:37Z",
"stargazers_count": 2304,
"watchers_count": 2304,
"updated_at": "2026-10-27T01:31:15Z",
"pushed_at": "2026-10-27T01:19:45Z",
"stargazers_count": 2313,
"watchers_count": 2313,
"has_discussions": true,
"forks_count": 563,
"forks_count": 564,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1722,8 +1722,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 563,
"watchers": 2304,
"forks": 564,
"watchers": 2313,
"score": 0,
"subscribers_count": 37
},
@@ -2077,10 +2077,10 @@
"description": "Jailbreak supported Google Pixel phones with CVE-2026-43499",
"fork": false,
"created_at": "2026-08-02T17:34:45Z",
"updated_at": "2026-10-26T07:18:58Z",
"updated_at": "2026-10-26T23:02:41Z",
"pushed_at": "2026-09-13T16:31:27Z",
"stargazers_count": 468,
"watchers_count": 468,
"stargazers_count": 469,
"watchers_count": 469,
"has_discussions": false,
"forks_count": 72,
"allow_forking": true,
@@ -2098,7 +2098,7 @@
],
"visibility": "public",
"forks": 72,
"watchers": 468,
"watchers": 469,
"score": 0,
"subscribers_count": 8
},
@@ -3006,7 +3006,7 @@
"stargazers_count": 48,
"watchers_count": 48,
"has_discussions": false,
"forks_count": 12,
"forks_count": 13,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -3014,7 +3014,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 12,
"forks": 13,
"watchers": 48,
"score": 0,
"subscribers_count": 2
@@ -3892,10 +3892,10 @@
"description": "Validated GhostLock CVE-2026-43499 port for NVIDIA Shield TV Pro mdarcy 9.2.4",
"fork": false,
"created_at": "2026-09-08T22:09:41Z",
"updated_at": "2026-10-17T22:03:53Z",
"updated_at": "2026-10-26T23:39:28Z",
"pushed_at": "2026-09-09T01:11:09Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -3913,7 +3913,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 1
},
@@ -4326,10 +4326,10 @@
"description": "CVE-2026-43499 GhostLock root exploit for Chromecast with Google TV (sabrina)",
"fork": false,
"created_at": "2026-09-14T19:58:49Z",
"updated_at": "2026-10-25T14:53:45Z",
"updated_at": "2026-10-26T22:48:31Z",
"pushed_at": "2026-09-17T18:16:42Z",
"stargazers_count": 10,
"watchers_count": 10,
"stargazers_count": 12,
"watchers_count": 12,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -4347,7 +4347,7 @@
],
"visibility": "public",
"forks": 3,
"watchers": 10,
"watchers": 12,
"score": 0,
"subscribers_count": 0
},
@@ -5903,8 +5903,8 @@
"description": "GhostLock (CVE-2026-43499) root for Sony Xperia 1 VI — locked bootloader, adb only, per-boot KernelSU",
"fork": false,
"created_at": "2026-10-26T19:07:09Z",
"updated_at": "2026-10-26T19:17:41Z",
"pushed_at": "2026-10-26T19:17:36Z",
"updated_at": "2026-10-26T20:39:26Z",
"pushed_at": "2026-10-26T20:39:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-110372.json → 2026/CVE-2026-43621.json
+11 -11
View File
@@ -1,21 +1,21 @@
[
{
"id": 1427884496,
"name": "CVE-2026-110372-MASS-EXPLOIT-WEBSHELL.STORE",
"full_name": "BIBILZERODAY\/CVE-2026-110372-MASS-EXPLOIT-WEBSHELL.STORE",
"id": 1435063061,
"name": "CVE-2026-43621",
"full_name": "KharalDipendra\/CVE-2026-43621",
"owner": {
"login": "BIBILZERODAY",
"id": 318742045,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/318742045?v=4",
"html_url": "https:\/\/github.com\/BIBILZERODAY",
"login": "KharalDipendra",
"id": 45440343,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/45440343?v=4",
"html_url": "https:\/\/github.com\/KharalDipendra",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/BIBILZERODAY\/CVE-2026-110372-MASS-EXPLOIT-WEBSHELL.STORE",
"html_url": "https:\/\/github.com\/KharalDipendra\/CVE-2026-43621",
"description": null,
"fork": false,
"created_at": "2026-10-21T04:41:56Z",
"updated_at": "2026-10-21T04:42:09Z",
"pushed_at": "2026-10-21T04:42:06Z",
"created_at": "2026-10-27T00:13:20Z",
"updated_at": "2026-10-27T00:15:01Z",
"pushed_at": "2026-10-27T00:14:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-4372.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "CVE-2026-4372: Threat Model, Root-Cause Analysis, Replication & Detection",
"fork": false,
"created_at": "2026-10-14T02:18:39Z",
"updated_at": "2026-10-26T13:25:04Z",
"pushed_at": "2026-10-26T17:17:39Z",
"updated_at": "2026-10-26T23:08:34Z",
"pushed_at": "2026-10-26T23:08:29Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-49772.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-49772 — The Events Calendar (WordPress) unauthenticated blind SQLi PoC",
"fork": false,
"created_at": "2026-06-22T21:02:56Z",
"updated_at": "2026-08-19T08:07:04Z",
"updated_at": "2026-10-26T21:14:27Z",
"pushed_at": "2026-06-22T21:05:24Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -41,7 +41,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-49881.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "Android complete exploit chain that enables privilege escalation from a local untrusted app to root\/kernel, combination of CVE-2026-49881 and CVE-2026-43284",
"fork": false,
"created_at": "2026-07-23T07:01:34Z",
"updated_at": "2026-10-26T15:57:47Z",
"updated_at": "2026-10-27T00:40:56Z",
"pushed_at": "2026-09-09T00:47:49Z",
"stargazers_count": 479,
"watchers_count": 479,
"stargazers_count": 480,
"watchers_count": 480,
"has_discussions": false,
"forks_count": 107,
"forks_count": 108,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 107,
"watchers": 479,
"forks": 108,
"watchers": 480,
"score": 0,
"subscribers_count": 7
},
2026/CVE-2026-54806.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Unauthenticated PHP Object Injection to RCE in WP Activity Log <= 5.6.3.1 (CVE-2026-54806)",
"fork": false,
"created_at": "2026-06-22T16:11:25Z",
"updated_at": "2026-09-29T00:57:36Z",
"updated_at": "2026-10-26T21:14:32Z",
"pushed_at": "2026-06-22T16:12:29Z",
"stargazers_count": 14,
"watchers_count": 14,
"stargazers_count": 15,
"watchers_count": 15,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -42,7 +42,7 @@
],
"visibility": "public",
"forks": 5,
"watchers": 14,
"watchers": 15,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-58231.json
-33
View File
@@ -64,38 +64,5 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1354542167,
"name": "CVE-2026-58231",
"full_name": "SAP-system-update\/CVE-2026-58231",
"owner": {
"login": "SAP-system-update",
"id": 215716275,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/215716275?v=4",
"html_url": "https:\/\/github.com\/SAP-system-update",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/SAP-system-update\/CVE-2026-58231",
"description": null,
"fork": false,
"created_at": "2026-09-02T08:52:46Z",
"updated_at": "2026-09-02T08:54:43Z",
"pushed_at": "2026-09-02T08:53:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-60137.json
-33
View File
@@ -356,38 +356,5 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1422650114,
"name": "CVE-2026-60137---WordPress-Core-Critical-SQL-Injection-SQLi-PoC",
"full_name": "BIBILZERODAY\/CVE-2026-60137---WordPress-Core-Critical-SQL-Injection-SQLi-PoC",
"owner": {
"login": "BIBILZERODAY",
"id": 318742045,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/318742045?v=4",
"html_url": "https:\/\/github.com\/BIBILZERODAY",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/BIBILZERODAY\/CVE-2026-60137---WordPress-Core-Critical-SQL-Injection-SQLi-PoC",
"description": null,
"fork": false,
"created_at": "2026-10-16T20:38:38Z",
"updated_at": "2026-10-16T20:38:55Z",
"pushed_at": "2026-10-16T20:38:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-63030.json
+2 -2
View File
@@ -1644,8 +1644,8 @@
"description": "PoC detector & safe validator for the WP2Shell WordPress vulnerability chain: CVE-2026-63030 (REST batch-route confusion) + CVE-2026-60137 (author__not_in SQL injection). For authorized security testing only.",
"fork": false,
"created_at": "2026-07-21T17:51:33Z",
"updated_at": "2026-07-21T17:51:48Z",
"pushed_at": "2026-07-21T17:51:37Z",
"updated_at": "2026-10-26T20:46:19Z",
"pushed_at": "2026-10-26T20:46:16Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-6307.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "Google Chrome CVE-2026-6307 PoC",
"fork": false,
"created_at": "2026-07-01T13:23:25Z",
"updated_at": "2026-10-05T01:02:24Z",
"updated_at": "2026-10-26T20:30:11Z",
"pushed_at": "2026-07-01T13:32:36Z",
"stargazers_count": 67,
"watchers_count": 67,
"stargazers_count": 68,
"watchers_count": 68,
"has_discussions": false,
"forks_count": 14,
"forks_count": 15,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 14,
"watchers": 67,
"forks": 15,
"watchers": 68,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-64560.json
+11 -11
View File
@@ -564,12 +564,12 @@
"description": "OnePlus 16 (PYB110) jailbreak: CVE-2026-64560 + KernelSU \/ KernelSU Next \/ BakaSU \/ SukiSU Ultra LKM",
"fork": false,
"created_at": "2026-10-20T09:43:06Z",
"updated_at": "2026-10-26T17:47:56Z",
"updated_at": "2026-10-26T23:17:54Z",
"pushed_at": "2026-10-26T17:47:52Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 2,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -577,8 +577,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 4,
"forks": 3,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
@@ -597,10 +597,10 @@
"description": "越狱助手 · RootKit for Honor Magic9 (CVE-2026-64560 → cred 写 → 自制内核模块 → KernelSU)，Flutter + Shizuku 一键 root",
"fork": false,
"created_at": "2026-10-24T18:21:20Z",
"updated_at": "2026-10-26T09:57:18Z",
"pushed_at": "2026-10-26T19:37:11Z",
"stargazers_count": 1,
"watchers_count": 1,
"updated_at": "2026-10-26T21:26:50Z",
"pushed_at": "2026-10-27T00:50:03Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -611,7 +611,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-65400.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -69,7 +69,7 @@
"vulnerability-research"
],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 9,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-61979.json → 2026/CVE-2026-77647.json
+12 -12
View File
@@ -1,21 +1,21 @@
[
{
"id": 1422650576,
"name": "CVE-2026-61979-miniOrange-SAML-Auth-Bypass-Exploit",
"full_name": "BIBILZERODAY\/CVE-2026-61979-miniOrange-SAML-Auth-Bypass-Exploit",
"id": 1435024241,
"name": "CVE-2026-77647",
"full_name": "Nxploited\/CVE-2026-77647",
"owner": {
"login": "BIBILZERODAY",
"id": 318742045,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/318742045?v=4",
"html_url": "https:\/\/github.com\/BIBILZERODAY",
"login": "Nxploited",
"id": 188819918,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4",
"html_url": "https:\/\/github.com\/Nxploited",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/BIBILZERODAY\/CVE-2026-61979-miniOrange-SAML-Auth-Bypass-Exploit",
"description": null,
"html_url": "https:\/\/github.com\/Nxploited\/CVE-2026-77647",
"description": "SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code",
"fork": false,
"created_at": "2026-10-16T20:39:12Z",
"updated_at": "2026-10-16T20:39:28Z",
"pushed_at": "2026-10-16T20:39:23Z",
"created_at": "2026-10-26T23:12:44Z",
"updated_at": "2026-10-26T23:14:44Z",
"pushed_at": "2026-10-26T23:14:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-78306.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 19,
"watchers_count": 19,
"has_discussions": false,
"forks_count": 6,
"forks_count": 7,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 6,
"forks": 7,
"watchers": 19,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-90931.json
+41
View File
@@ -0,0 +1,41 @@
[
{
"id": 1435041582,
"name": "CVE-2026-90931",
"full_name": "capivara-research\/CVE-2026-90931",
"owner": {
"login": "capivara-research",
"id": 287438663,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/287438663?v=4",
"html_url": "https:\/\/github.com\/capivara-research",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/capivara-research\/CVE-2026-90931",
"description": "CVE-2026-90931: LaraDashboard stored XSS via SVG upload — bilingual analysis and safe PoC",
"fork": false,
"created_at": "2026-10-26T23:39:24Z",
"updated_at": "2026-10-26T23:40:26Z",
"pushed_at": "2026-10-26T23:39:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"cybersecurity",
"laradashboard",
"proof-of-concept",
"xss"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-90932.json
+41
View File
@@ -0,0 +1,41 @@
[
{
"id": 1435041650,
"name": "CVE-2026-90932",
"full_name": "capivara-research\/CVE-2026-90932",
"owner": {
"login": "capivara-research",
"id": 287438663,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/287438663?v=4",
"html_url": "https:\/\/github.com\/capivara-research",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/capivara-research\/CVE-2026-90932",
"description": "CVE-2026-90932: LaraDashboard path traversal to arbitrary file deletion\/write — bilingual analysis and safe PoC",
"fork": false,
"created_at": "2026-10-26T23:39:32Z",
"updated_at": "2026-10-26T23:44:21Z",
"pushed_at": "2026-10-26T23:39:38Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"cybersecurity",
"laradashboard",
"path-traversal",
"proof-of-concept"
],
"visibility": "public",
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-98260.json
+92 -20
View File
@@ -47,10 +47,10 @@
"description": "CVE-2026-98260 (Timer) Android\/ARM64 port",
"fork": false,
"created_at": "2026-10-18T23:26:39Z",
"updated_at": "2026-10-26T04:41:49Z",
"updated_at": "2026-10-27T01:03:58Z",
"pushed_at": "2026-10-25T05:35:18Z",
"stargazers_count": 16,
"watchers_count": 16,
"stargazers_count": 17,
"watchers_count": 17,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 16,
"watchers": 17,
"score": 0,
"subscribers_count": 0
},
@@ -179,10 +179,10 @@
"description": "Shizuku-driven CVE-2026-98260 root + KernelSU runtime LKM loader for Xiaomi yingtian \/ lhasa (kernel 6.18.21)",
"fork": false,
"created_at": "2026-10-25T12:51:04Z",
"updated_at": "2026-10-26T13:43:41Z",
"updated_at": "2026-10-26T21:34:23Z",
"pushed_at": "2026-10-25T19:06:56Z",
"stargazers_count": 14,
"watchers_count": 14,
"stargazers_count": 15,
"watchers_count": 15,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -202,7 +202,7 @@
],
"visibility": "public",
"forks": 8,
"watchers": 14,
"watchers": 15,
"score": 0,
"subscribers_count": 0
},
@@ -322,6 +322,45 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1434148482,
"name": "xring-cve-2026-98260",
"full_name": "Lw5959\/xring-cve-2026-98260",
"owner": {
"login": "Lw5959",
"id": 119849622,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/119849622?v=4",
"html_url": "https:\/\/github.com\/Lw5959",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Lw5959\/xring-cve-2026-98260",
"description": "CVE-2026-98260（fs\/exec.c POSIX CPU timer UAF）XRING O1 \/ Android 17 \/ 6.18.21 研究记录与 PC 一键流程（授权设备安全研究）",
"fork": false,
"created_at": "2026-10-26T09:12:27Z",
"updated_at": "2026-10-27T01:45:29Z",
"pushed_at": "2026-10-27T01:45:25Z",
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"android-kernel",
"cve-2026-98260",
"kernelsu",
"security-research",
"xring"
],
"visibility": "public",
"forks": 2,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
{
"id": 1434169714,
"name": "CVE-2026-98260-Analysis",
@@ -356,22 +395,22 @@
"subscribers_count": 0
},
{
"id": 1434666603,
"name": "CVE-2026-98260",
"full_name": "woshigenm\/CVE-2026-98260",
"id": 1434516481,
"name": "violin-CVE-2026-98260-OS4.0",
"full_name": "ChaYeWuu\/violin-CVE-2026-98260-OS4.0",
"owner": {
"login": "woshigenm",
"id": 99122353,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/99122353?v=4",
"html_url": "https:\/\/github.com\/woshigenm",
"login": "ChaYeWuu",
"id": 56117290,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/56117290?v=4",
"html_url": "https:\/\/github.com\/ChaYeWuu",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/woshigenm\/CVE-2026-98260",
"description": "Android LPE (CVE-2026-98260) on Honor MagicPad3 Pro 13.3 (YLP-W00), kernel 6.12.38 — PoC\/EXP, uid-0 shell, KernelSU app",
"html_url": "https:\/\/github.com\/ChaYeWuu\/violin-CVE-2026-98260-OS4.0",
"description": "Xiaomi Pad7S Pro12.5在OS4.0.0.14.XOTCNXM利用CVE-2026-98260获取ROOT权限并加载KernelSU。",
"fork": false,
"created_at": "2026-10-26T16:49:03Z",
"updated_at": "2026-10-26T16:59:45Z",
"pushed_at": "2026-10-26T19:04:56Z",
"created_at": "2026-10-26T14:44:21Z",
"updated_at": "2026-10-27T01:24:33Z",
"pushed_at": "2026-10-27T01:24:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -387,5 +426,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1434666603,
"name": "CVE-2026-98260",
"full_name": "woshigenm\/CVE-2026-98260",
"owner": {
"login": "woshigenm",
"id": 99122353,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/99122353?v=4",
"html_url": "https:\/\/github.com\/woshigenm",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/woshigenm\/CVE-2026-98260",
"description": "Android LPE (CVE-2026-98260) on Honor MagicPad3 Pro 13.3 (YLP-W00), kernel 6.12.38 — PoC\/EXP, uid-0 shell, KernelSU app",
"fork": false,
"created_at": "2026-10-26T16:49:03Z",
"updated_at": "2026-10-27T00:27:18Z",
"pushed_at": "2026-10-26T19:04:56Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]