From 771b79f9d7814d2dcb7837a0fb2df7a494503148 Mon Sep 17 00:00:00 2001 From: motikan2010-bot Date: Tue, 27 Oct 2026 10:48:40 +0900 Subject: [PATCH] Auto Update 2026/10/27 01:48:40 --- 2017/CVE-2017-0143.json | 99 +++++ 2018/CVE-2018-14847.json | 8 +- 2019/CVE-2019-9599.json | 8 +- 2021/CVE-2021-1675.json | 10 +- 2021/CVE-2021-4034.json | 41 +- 2021/CVE-2021-40444.json | 16 +- 2022/CVE-2022-20409.json | 8 +- 2022/CVE-2022-42889.json | 2 +- 2023/CVE-2023-33107.json | 8 +- 2023/CVE-2023-42413.json | 35 ++ 2023/CVE-2023-43360.json | 35 ++ 2024/CVE-2024-30088.json | 8 +- 2024/CVE-2024-3094.json | 33 ++ 2024/CVE-2024-6387.json | 33 ++ 2025/CVE-2025-14174.json | 4 +- 2025/CVE-2025-29927.json | 33 ++ 2025/CVE-2025-30208.json | 8 +- 2025/CVE-2025-3248.json | 8 +- 2025/CVE-2025-43529.json | 4 +- 2025/CVE-2025-52691.json | 4 +- 2025/CVE-2025-52915.json | 8 +- 2025/CVE-2025-55182.json | 44 +- 2025/CVE-2025-5548.json | 33 ++ 2025/CVE-2025-68613.json | 8 +- 2026/CVE-2026-0073.json | 8 +- 2026/CVE-2026-100833.json | 4 +- 2026/CVE-2026-101767.json | 4 +- 2026/CVE-2026-102785.json | 33 -- 2026/CVE-2026-104736.json | 66 --- 2026/CVE-2026-104748.json | 8 +- 2026/CVE-2026-105810.json | 4 +- 2026/CVE-2026-105950.json | 4 +- 2026/CVE-2026-106173.json | 8 +- 2026/CVE-2026-107092.json | 4 +- 2026/CVE-2026-107406.json | 33 -- 2026/CVE-2026-10961.json | 8 +- 2026/CVE-2026-109618.json | 392 ++++++++++-------- 2026/CVE-2026-109619.json | 20 +- 2026/CVE-2026-110025.json | 4 +- 2026/CVE-2026-110922.json | 10 +- 2026/CVE-2026-111497.json | 97 +++-- 2026/CVE-2026-114509.json | 4 +- 2026/CVE-2026-116000.json | 41 ++ 2026/CVE-2026-116004.json | 41 ++ ...E-2026-19745.json => CVE-2026-116370.json} | 30 +- 2026/CVE-2026-18107.json | 4 +- 2026/CVE-2026-20700.json | 4 +- 2026/CVE-2026-20980.json | 8 +- 2026/CVE-2026-24291.json | 8 +- 2026/CVE-2026-26268.json | 8 +- 2026/CVE-2026-2991.json | 8 +- 2026/CVE-2026-31431.json | 12 +- 2026/CVE-2026-3609.json | 8 +- .../CVE-2026-38903.json | 24 +- 2026/CVE-2026-3891.json | 8 +- 2026/CVE-2026-40369.json | 12 +- 2026/CVE-2026-41089.json | 54 +-- 2026/CVE-2026-43284.json | 33 -- 2026/CVE-2026-43499.json | 50 +-- ...E-2026-110372.json => CVE-2026-43621.json} | 22 +- 2026/CVE-2026-4372.json | 4 +- 2026/CVE-2026-49772.json | 8 +- 2026/CVE-2026-49881.json | 12 +- 2026/CVE-2026-54806.json | 8 +- 2026/CVE-2026-58231.json | 33 -- 2026/CVE-2026-60137.json | 33 -- 2026/CVE-2026-63030.json | 4 +- 2026/CVE-2026-6307.json | 12 +- 2026/CVE-2026-64560.json | 22 +- 2026/CVE-2026-65400.json | 4 +- ...VE-2026-61979.json => CVE-2026-77647.json} | 24 +- 2026/CVE-2026-78306.json | 4 +- 2026/CVE-2026-90931.json | 41 ++ 2026/CVE-2026-90932.json | 41 ++ 2026/CVE-2026-98260.json | 112 ++++- 75 files changed, 1160 insertions(+), 786 deletions(-) create mode 100644 2023/CVE-2023-42413.json create mode 100644 2023/CVE-2023-43360.json create mode 100644 2026/CVE-2026-116000.json create mode 100644 2026/CVE-2026-116004.json rename 2026/{CVE-2026-19745.json => CVE-2026-116370.json} (50%) rename 2024/CVE-2024-43047.json => 2026/CVE-2026-38903.json (54%) rename 2026/{CVE-2026-110372.json => CVE-2026-43621.json} (53%) rename 2026/{CVE-2026-61979.json => CVE-2026-77647.json} (50%) create mode 100644 2026/CVE-2026-90931.json create mode 100644 2026/CVE-2026-90932.json diff --git a/2017/CVE-2017-0143.json b/2017/CVE-2017-0143.json index 682cfec32a..f6df416cd2 100644 --- a/2017/CVE-2017-0143.json +++ b/2017/CVE-2017-0143.json @@ -372,5 +372,104 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1435033252, + "name": "Laboratorio-Hacking-Etico-Vulnerabilidad-CVE-2017-0143", + "full_name": "NeoCoderFSG\/Laboratorio-Hacking-Etico-Vulnerabilidad-CVE-2017-0143", + "owner": { + "login": "NeoCoderFSG", + "id": 296329799, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/296329799?v=4", + "html_url": "https:\/\/github.com\/NeoCoderFSG", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/NeoCoderFSG\/Laboratorio-Hacking-Etico-Vulnerabilidad-CVE-2017-0143", + "description": "En este repositorio voy subir la explotacion de la vulnerablildad CVE-2017-0143 con el exploit eternalblue.", + "fork": false, + "created_at": "2026-10-26T23:26:20Z", + "updated_at": "2026-10-26T23:31:08Z", + "pushed_at": "2026-10-26T23:31:04Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1435042277, + "name": "post-explotacion-CVE-2017-0143", + "full_name": "NeoCoderFSG\/post-explotacion-CVE-2017-0143", + "owner": { + "login": "NeoCoderFSG", + "id": 296329799, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/296329799?v=4", + "html_url": "https:\/\/github.com\/NeoCoderFSG", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/NeoCoderFSG\/post-explotacion-CVE-2017-0143", + "description": "Aqui voy a colocar el paso a paso de la post explotacion de la vulnerabilidad CVE-2017-0143", + "fork": false, + "created_at": "2026-10-26T23:40:32Z", + "updated_at": "2026-10-27T00:21:13Z", + "pushed_at": "2026-10-27T00:21:10Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1435053394, + "name": "explotacion-post-CVE-2017-0143", + "full_name": "NeoCoderFSG\/explotacion-post-CVE-2017-0143", + "owner": { + "login": "NeoCoderFSG", + "id": 296329799, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/296329799?v=4", + "html_url": "https:\/\/github.com\/NeoCoderFSG", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/NeoCoderFSG\/explotacion-post-CVE-2017-0143", + "description": "Aqui voy a colocar el paso a paso de la post explotacion de la vulnerabilidad CVE-2017-0143", + "fork": false, + "created_at": "2026-10-26T23:58:01Z", + "updated_at": "2026-10-26T23:58:06Z", + "pushed_at": "2026-10-26T23:58:03Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2018/CVE-2018-14847.json b/2018/CVE-2018-14847.json index ba82a87e68..23cc563fa9 100644 --- a/2018/CVE-2018-14847.json +++ b/2018/CVE-2018-14847.json @@ -283,10 +283,10 @@ "description": "This is a proof of concept of the critical WinBox vulnerability (CVE-2018-14847) which allows for arbitrary file read of plain text passwords. The vulnerability has long since been fixed, so this project has ended and will not be supported or updated anymore. You can fork it and update it yourself instead.", "fork": false, "created_at": "2021-04-21T16:42:31Z", - "updated_at": "2026-10-18T21:26:50Z", + "updated_at": "2026-10-26T18:38:29Z", "pushed_at": "2021-04-21T16:46:37Z", - "stargazers_count": 55, - "watchers_count": 55, + "stargazers_count": 54, + "watchers_count": 54, "has_discussions": false, "forks_count": 24, "allow_forking": true, @@ -297,7 +297,7 @@ "topics": [], "visibility": "public", "forks": 24, - "watchers": 55, + "watchers": 54, "score": 0, "subscribers_count": 3 }, diff --git a/2019/CVE-2019-9599.json b/2019/CVE-2019-9599.json index 8c4c5b5810..8a36a1ea72 100644 --- a/2019/CVE-2019-9599.json +++ b/2019/CVE-2019-9599.json @@ -14,10 +14,10 @@ "description": "Programa ideal para robar toda la información de un dispositivo remotamente a través de la aplicación AirDroid. [CVE-2019-9599] (https:\/\/www.exploit-db.com\/exploits\/46337)", "fork": false, "created_at": "2019-02-09T02:18:37Z", - "updated_at": "2026-09-28T00:13:47Z", + "updated_at": "2026-10-26T19:16:22Z", "pushed_at": "2019-11-03T17:29:56Z", - "stargazers_count": 68, - "watchers_count": 68, + "stargazers_count": 69, + "watchers_count": 69, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 6, - "watchers": 68, + "watchers": 69, "score": 0, "subscribers_count": 3 } diff --git a/2021/CVE-2021-1675.json b/2021/CVE-2021-1675.json index de0f4dee84..4e8571d68d 100644 --- a/2021/CVE-2021-1675.json +++ b/2021/CVE-2021-1675.json @@ -63,7 +63,7 @@ "forks": 572, "watchers": 2007, "score": 0, - "subscribers_count": 44 + "subscribers_count": 40 }, { "id": 381799016, @@ -329,10 +329,10 @@ "description": "Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)", "fork": false, "created_at": "2021-07-01T23:45:58Z", - "updated_at": "2026-10-24T11:24:24Z", + "updated_at": "2026-10-26T23:42:01Z", "pushed_at": "2021-07-05T08:54:06Z", - "stargazers_count": 1113, - "watchers_count": 1113, + "stargazers_count": 1114, + "watchers_count": 1114, "has_discussions": false, "forks_count": 222, "allow_forking": true, @@ -343,7 +343,7 @@ "topics": [], "visibility": "public", "forks": 222, - "watchers": 1113, + "watchers": 1114, "score": 0, "subscribers_count": 23 }, diff --git a/2021/CVE-2021-4034.json b/2021/CVE-2021-4034.json index e30f9b1a62..f7668dd7ce 100644 --- a/2021/CVE-2021-4034.json +++ b/2021/CVE-2021-4034.json @@ -961,10 +961,10 @@ "description": "Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation", "fork": false, "created_at": "2022-01-26T14:26:10Z", - "updated_at": "2026-10-25T07:04:07Z", + "updated_at": "2026-10-26T21:45:54Z", "pushed_at": "2022-06-21T14:52:05Z", - "stargazers_count": 1335, - "watchers_count": 1335, + "stargazers_count": 1336, + "watchers_count": 1336, "has_discussions": false, "forks_count": 208, "allow_forking": true, @@ -977,7 +977,7 @@ ], "visibility": "public", "forks": 208, - "watchers": 1335, + "watchers": 1336, "score": 0, "subscribers_count": 13 }, @@ -6194,5 +6194,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1434591114, + "name": "CVE-2021-4034", + "full_name": "axisops\/CVE-2021-4034", + "owner": { + "login": "axisops", + "id": 5512152, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5512152?v=4", + "html_url": "https:\/\/github.com\/axisops", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/axisops\/CVE-2021-4034", + "description": "PwnKit CVE-2021-4034 Mitigation work (Ansible Role)", + "fork": false, + "created_at": "2026-10-26T15:45:24Z", + "updated_at": "2026-10-27T00:10:39Z", + "pushed_at": "2026-10-26T16:00:47Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2021/CVE-2021-40444.json b/2021/CVE-2021-40444.json index ee83f8b0e2..2a63426942 100644 --- a/2021/CVE-2021-40444.json +++ b/2021/CVE-2021-40444.json @@ -245,10 +245,10 @@ "description": "CVE-2021-40444 PoC", "fork": false, "created_at": "2021-09-10T16:55:53Z", - "updated_at": "2026-10-20T14:38:41Z", + "updated_at": "2026-10-26T20:25:37Z", "pushed_at": "2021-12-25T18:31:02Z", - "stargazers_count": 1847, - "watchers_count": 1847, + "stargazers_count": 1848, + "watchers_count": 1848, "has_discussions": false, "forks_count": 472, "allow_forking": true, @@ -259,7 +259,7 @@ "topics": [], "visibility": "public", "forks": 472, - "watchers": 1847, + "watchers": 1848, "score": 0, "subscribers_count": 28 }, @@ -542,10 +542,10 @@ "description": "CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit", "fork": false, "created_at": "2021-09-15T22:34:35Z", - "updated_at": "2026-10-03T21:01:34Z", + "updated_at": "2026-10-26T20:26:06Z", "pushed_at": "2023-10-11T18:44:51Z", - "stargazers_count": 836, - "watchers_count": 836, + "stargazers_count": 837, + "watchers_count": 837, "has_discussions": false, "forks_count": 163, "allow_forking": true, @@ -563,7 +563,7 @@ ], "visibility": "public", "forks": 163, - "watchers": 836, + "watchers": 837, "score": 0, "subscribers_count": 14 }, diff --git a/2022/CVE-2022-20409.json b/2022/CVE-2022-20409.json index 0d4ca1924b..35febbf7d3 100644 --- a/2022/CVE-2022-20409.json +++ b/2022/CVE-2022-20409.json @@ -14,10 +14,10 @@ "description": "Android kernel exploitation for CVE-2022-20409", "fork": false, "created_at": "2022-11-21T22:42:50Z", - "updated_at": "2026-09-29T17:33:59Z", + "updated_at": "2026-10-27T00:28:06Z", "pushed_at": "2024-10-17T16:26:39Z", - "stargazers_count": 215, - "watchers_count": 215, + "stargazers_count": 216, + "watchers_count": 216, "has_discussions": false, "forks_count": 30, "allow_forking": true, @@ -32,7 +32,7 @@ ], "visibility": "public", "forks": 30, - "watchers": 215, + "watchers": 216, "score": 0, "subscribers_count": 5 } diff --git a/2022/CVE-2022-42889.json b/2022/CVE-2022-42889.json index b356678e79..29511dff42 100644 --- a/2022/CVE-2022-42889.json +++ b/2022/CVE-2022-42889.json @@ -1410,7 +1410,7 @@ "fork": false, "created_at": "2023-09-22T17:17:26Z", "updated_at": "2023-09-22T17:17:44Z", - "pushed_at": "2026-10-15T15:28:22Z", + "pushed_at": "2026-10-26T23:34:40Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2023/CVE-2023-33107.json b/2023/CVE-2023-33107.json index 3fa79fff20..bd0fd7d115 100644 --- a/2023/CVE-2023-33107.json +++ b/2023/CVE-2023-33107.json @@ -47,10 +47,10 @@ "description": "A kernel exploit for Pico 4 devices based on cve-2023-33107. ", "fork": false, "created_at": "2026-07-18T08:06:18Z", - "updated_at": "2026-10-17T23:01:31Z", + "updated_at": "2026-10-26T22:23:07Z", "pushed_at": "2026-10-04T18:31:03Z", - "stargazers_count": 7, - "watchers_count": 7, + "stargazers_count": 8, + "watchers_count": 8, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 7, + "watchers": 8, "score": 0, "subscribers_count": 0 } diff --git a/2023/CVE-2023-42413.json b/2023/CVE-2023-42413.json new file mode 100644 index 0000000000..38fa6d47fc --- /dev/null +++ b/2023/CVE-2023-42413.json @@ -0,0 +1,35 @@ +[ + { + "id": 695761286, + "name": "cve-2023-42413", + "full_name": "chenghao-hao\/cve-2023-42413", + "owner": { + "login": "chenghao-hao", + "id": 73655831, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/73655831?v=4", + "html_url": "https:\/\/github.com\/chenghao-hao", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/chenghao-hao\/cve-2023-42413", + "description": "ecology_9_sql ", + "fork": false, + "created_at": "2023-09-24T06:17:33Z", + "updated_at": "2023-09-24T06:17:34Z", + "pushed_at": "2023-09-24T06:17:34Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 2 + } +] \ No newline at end of file diff --git a/2023/CVE-2023-43360.json b/2023/CVE-2023-43360.json new file mode 100644 index 0000000000..24b8e32bfa --- /dev/null +++ b/2023/CVE-2023-43360.json @@ -0,0 +1,35 @@ +[ + { + "id": 692729326, + "name": "CVE-2023-43360-CMSmadesimple-Stored-XSS---File-Picker-extension", + "full_name": "sromanhu\/CVE-2023-43360-CMSmadesimple-Stored-XSS---File-Picker-extension", + "owner": { + "login": "sromanhu", + "id": 87250597, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/87250597?v=4", + "html_url": "https:\/\/github.com\/sromanhu", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/sromanhu\/CVE-2023-43360-CMSmadesimple-Stored-XSS---File-Picker-extension", + "description": "Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Top Directory in the File Picker Menu.", + "fork": false, + "created_at": "2023-09-17T12:06:56Z", + "updated_at": "2023-09-28T22:37:11Z", + "pushed_at": "2023-09-21T12:25:06Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 1 + } +] \ No newline at end of file diff --git a/2024/CVE-2024-30088.json b/2024/CVE-2024-30088.json index d4ddc985ac..40b5aac207 100644 --- a/2024/CVE-2024-30088.json +++ b/2024/CVE-2024-30088.json @@ -113,10 +113,10 @@ "description": "Kernel exploit for Xbox SystemOS using CVE-2024-30088", "fork": false, "created_at": "2024-07-15T08:07:05Z", - "updated_at": "2026-10-26T02:12:40Z", + "updated_at": "2026-10-26T22:23:21Z", "pushed_at": "2025-07-13T14:10:02Z", - "stargazers_count": 529, - "watchers_count": 529, + "stargazers_count": 530, + "watchers_count": 530, "has_discussions": false, "forks_count": 37, "allow_forking": true, @@ -127,7 +127,7 @@ "topics": [], "visibility": "public", "forks": 37, - "watchers": 529, + "watchers": 530, "score": 0, "subscribers_count": 26 }, diff --git a/2024/CVE-2024-3094.json b/2024/CVE-2024-3094.json index d64f68da07..6fdd892f78 100644 --- a/2024/CVE-2024-3094.json +++ b/2024/CVE-2024-3094.json @@ -2898,5 +2898,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1434591779, + "name": "CVE-2024-3094", + "full_name": "axisops\/CVE-2024-3094", + "owner": { + "login": "axisops", + "id": 5512152, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5512152?v=4", + "html_url": "https:\/\/github.com\/axisops", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/axisops\/CVE-2024-3094", + "description": "xz Backdoor CVE-2024-3094 Detection and Mitigation work (Ansible Role)", + "fork": false, + "created_at": "2026-10-26T15:45:56Z", + "updated_at": "2026-10-27T00:11:11Z", + "pushed_at": "2026-10-26T16:00:52Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2024/CVE-2024-6387.json b/2024/CVE-2024-6387.json index f2ef7cbe98..9dc5bdcd8e 100644 --- a/2024/CVE-2024-6387.json +++ b/2024/CVE-2024-6387.json @@ -3293,5 +3293,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1434592636, + "name": "CVE-2024-6387", + "full_name": "axisops\/CVE-2024-6387", + "owner": { + "login": "axisops", + "id": 5512152, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5512152?v=4", + "html_url": "https:\/\/github.com\/axisops", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/axisops\/CVE-2024-6387", + "description": "regreSSHion CVE-2024-6387 Mitigation work (Ansible Role)", + "fork": false, + "created_at": "2026-10-26T15:46:36Z", + "updated_at": "2026-10-27T00:11:24Z", + "pushed_at": "2026-10-26T16:00:53Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2025/CVE-2025-14174.json b/2025/CVE-2025-14174.json index c290193b93..cd421cc1c8 100644 --- a/2025/CVE-2025-14174.json +++ b/2025/CVE-2025-14174.json @@ -52,7 +52,7 @@ "stargazers_count": 4, "watchers_count": 4, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,7 +60,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 4, "score": 0, "subscribers_count": 0 diff --git a/2025/CVE-2025-29927.json b/2025/CVE-2025-29927.json index 6e6ffa67ca..ed82f5ac74 100644 --- a/2025/CVE-2025-29927.json +++ b/2025/CVE-2025-29927.json @@ -4261,5 +4261,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1434593324, + "name": "CVE-2025-29927", + "full_name": "axisops\/CVE-2025-29927", + "owner": { + "login": "axisops", + "id": 5512152, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5512152?v=4", + "html_url": "https:\/\/github.com\/axisops", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/axisops\/CVE-2025-29927", + "description": "Next.js Middleware Bypass CVE-2025-29927 Mitigation work (Ansible Role)", + "fork": false, + "created_at": "2026-10-26T15:47:12Z", + "updated_at": "2026-10-27T00:12:07Z", + "pushed_at": "2026-10-26T16:00:55Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2025/CVE-2025-30208.json b/2025/CVE-2025-30208.json index 0b47434799..0ceef3e9e6 100644 --- a/2025/CVE-2025-30208.json +++ b/2025/CVE-2025-30208.json @@ -14,10 +14,10 @@ "description": "全网首发 CVE-2025-31125 CVE-2025-30208 CVE-2025-32395 Vite Scanner", "fork": false, "created_at": "2025-03-26T10:26:12Z", - "updated_at": "2026-09-21T10:32:14Z", + "updated_at": "2026-10-27T00:51:55Z", "pushed_at": "2025-04-13T05:21:53Z", - "stargazers_count": 49, - "watchers_count": 49, + "stargazers_count": 50, + "watchers_count": 50, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -36,7 +36,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 49, + "watchers": 50, "score": 0, "subscribers_count": 1 }, diff --git a/2025/CVE-2025-3248.json b/2025/CVE-2025-3248.json index 9170aabfb9..821c15ac64 100644 --- a/2025/CVE-2025-3248.json +++ b/2025/CVE-2025-3248.json @@ -14,10 +14,10 @@ "description": "A vulnerability scanner for CVE-2025-3248 in Langflow applications. 用于扫描 Langflow 应用中 CVE-2025-3248 漏洞的工具。", "fork": false, "created_at": "2025-04-10T11:45:57Z", - "updated_at": "2026-09-21T10:32:15Z", + "updated_at": "2026-10-27T00:54:11Z", "pushed_at": "2025-04-10T12:32:30Z", - "stargazers_count": 11, - "watchers_count": 11, + "stargazers_count": 12, + "watchers_count": 12, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -31,7 +31,7 @@ ], "visibility": "public", "forks": 2, - "watchers": 11, + "watchers": 12, "score": 0, "subscribers_count": 1 }, diff --git a/2025/CVE-2025-43529.json b/2025/CVE-2025-43529.json index 62a07f6740..6df70d0782 100644 --- a/2025/CVE-2025-43529.json +++ b/2025/CVE-2025-43529.json @@ -19,7 +19,7 @@ "stargazers_count": 87, "watchers_count": 87, "has_discussions": false, - "forks_count": 13, + "forks_count": 14, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 13, + "forks": 14, "watchers": 87, "score": 0, "subscribers_count": 0 diff --git a/2025/CVE-2025-52691.json b/2025/CVE-2025-52691.json index 65fcc086ff..80f42a677b 100644 --- a/2025/CVE-2025-52691.json +++ b/2025/CVE-2025-52691.json @@ -118,8 +118,8 @@ "description": "An enhanced proof-of-concept exploit for CVE-2025-52691 (SmarterMail Arbitrary File Upload RCE) with APT-level features like stealth obfuscation, persistence, exfiltration, and interactive mode. For educational and authorized testing only. Credits to the original PoC by yt2w\/CVE-2025-52691.", "fork": false, "created_at": "2025-12-30T18:21:29Z", - "updated_at": "2026-09-06T18:26:15Z", - "pushed_at": "2025-12-30T18:47:12Z", + "updated_at": "2026-10-27T00:40:04Z", + "pushed_at": "2026-10-27T00:40:00Z", "stargazers_count": 5, "watchers_count": 5, "has_discussions": false, diff --git a/2025/CVE-2025-52915.json b/2025/CVE-2025-52915.json index 008d031e78..f9698f7016 100644 --- a/2025/CVE-2025-52915.json +++ b/2025/CVE-2025-52915.json @@ -14,10 +14,10 @@ "description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).", "fork": false, "created_at": "2023-12-05T14:52:11Z", - "updated_at": "2026-10-26T18:50:04Z", + "updated_at": "2026-10-26T20:13:17Z", "pushed_at": "2026-08-18T12:25:25Z", - "stargazers_count": 989, - "watchers_count": 989, + "stargazers_count": 990, + "watchers_count": 990, "has_discussions": false, "forks_count": 147, "allow_forking": true, @@ -39,7 +39,7 @@ ], "visibility": "public", "forks": 147, - "watchers": 989, + "watchers": 990, "score": 0, "subscribers_count": 22 } diff --git a/2025/CVE-2025-55182.json b/2025/CVE-2025-55182.json index b79ccb3b96..6a5599a873 100644 --- a/2025/CVE-2025-55182.json +++ b/2025/CVE-2025-55182.json @@ -871,12 +871,12 @@ "description": "High Fidelity Detection Mechanism for RSC\/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)", "fork": false, "created_at": "2025-12-04T06:55:04Z", - "updated_at": "2026-10-26T15:03:32Z", + "updated_at": "2026-10-27T00:07:07Z", "pushed_at": "2025-12-07T04:16:46Z", - "stargazers_count": 2456, - "watchers_count": 2456, + "stargazers_count": 2457, + "watchers_count": 2457, "has_discussions": false, - "forks_count": 270, + "forks_count": 272, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -884,8 +884,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 270, - "watchers": 2456, + "forks": 272, + "watchers": 2457, "score": 0, "subscribers_count": 11 }, @@ -2295,12 +2295,12 @@ "description": "Original Proof-of-Concepts for React2Shell CVE-2025-55182", "fork": false, "created_at": "2025-12-05T08:00:07Z", - "updated_at": "2026-10-26T15:03:33Z", + "updated_at": "2026-10-27T00:07:53Z", "pushed_at": "2025-12-05T08:56:15Z", - "stargazers_count": 1063, - "watchers_count": 1063, + "stargazers_count": 1064, + "watchers_count": 1064, "has_discussions": false, - "forks_count": 109, + "forks_count": 110, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -2311,8 +2311,8 @@ "react2shell" ], "visibility": "public", - "forks": 109, - "watchers": 1063, + "forks": 110, + "watchers": 1064, "score": 0, "subscribers_count": 25 }, @@ -3869,12 +3869,12 @@ "description": "RSC\/Next.js RCE Vulnerability Detector & PoC Chrome Extension – CVE-2025-55182 & CVE-2025-66478", "fork": false, "created_at": "2025-12-06T00:36:16Z", - "updated_at": "2026-10-20T16:52:50Z", + "updated_at": "2026-10-27T00:08:22Z", "pushed_at": "2025-12-06T01:27:19Z", - "stargazers_count": 312, - "watchers_count": 312, + "stargazers_count": 313, + "watchers_count": 313, "has_discussions": false, - "forks_count": 53, + "forks_count": 54, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -3882,8 +3882,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 53, - "watchers": 312, + "forks": 54, + "watchers": 313, "score": 0, "subscribers_count": 5 }, @@ -4310,10 +4310,10 @@ "description": null, "fork": false, "created_at": "2025-12-06T14:36:55Z", - "updated_at": "2026-10-16T10:20:35Z", + "updated_at": "2026-10-26T20:05:44Z", "pushed_at": "2025-12-06T19:52:21Z", - "stargazers_count": 281, - "watchers_count": 281, + "stargazers_count": 280, + "watchers_count": 280, "has_discussions": false, "forks_count": 47, "allow_forking": true, @@ -4324,7 +4324,7 @@ "topics": [], "visibility": "public", "forks": 47, - "watchers": 281, + "watchers": 280, "score": 0, "subscribers_count": 0 }, diff --git a/2025/CVE-2025-5548.json b/2025/CVE-2025-5548.json index 17d113d38f..1571bdae54 100644 --- a/2025/CVE-2025-5548.json +++ b/2025/CVE-2025-5548.json @@ -1143,6 +1143,39 @@ "score": 0, "subscribers_count": 0 }, + { + "id": 1433957487, + "name": "CVE-2025-5548", + "full_name": "libeazu\/CVE-2025-5548", + "owner": { + "login": "libeazu", + "id": 59836749, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59836749?v=4", + "html_url": "https:\/\/github.com\/libeazu", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/libeazu\/CVE-2025-5548", + "description": "Análisis de la vulnerabilidad CVE-2025-5548", + "fork": false, + "created_at": "2026-10-26T05:48:23Z", + "updated_at": "2026-10-26T21:03:01Z", + "pushed_at": "2026-10-26T20:59:17Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, { "id": 1434577408, "name": "CVE-2025-5548", diff --git a/2025/CVE-2025-68613.json b/2025/CVE-2025-68613.json index b379c105f2..8c1fd73de0 100644 --- a/2025/CVE-2025-68613.json +++ b/2025/CVE-2025-68613.json @@ -127,10 +127,10 @@ "description": "CVE-2025-68613: n8n RCE vulnerability exploit and documentation", "fork": false, "created_at": "2025-12-22T21:49:36Z", - "updated_at": "2026-10-11T10:26:47Z", + "updated_at": "2026-10-26T19:51:01Z", "pushed_at": "2025-12-23T08:54:59Z", - "stargazers_count": 105, - "watchers_count": 105, + "stargazers_count": 106, + "watchers_count": 106, "has_discussions": false, "forks_count": 21, "allow_forking": true, @@ -148,7 +148,7 @@ ], "visibility": "public", "forks": 21, - "watchers": 105, + "watchers": 106, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-0073.json b/2026/CVE-2026-0073.json index b4a4fd3503..8b095bad67 100644 --- a/2026/CVE-2026-0073.json +++ b/2026/CVE-2026-0073.json @@ -538,10 +538,10 @@ "description": "CVE-2026-0073: Android adbd TLS auth bypass PoC. Exploits a logic bug where OpenSSL's EVP_PKEY_cmp() returns -1 on key type mismatch (EC vs RSA), incorrectly evaluating to true and granting access. Includes functional Python and standalone C exploits to gain unauthenticated remote shell on Android devices with Wireless Debugging enabled.", "fork": false, "created_at": "2026-10-25T19:46:46Z", - "updated_at": "2026-10-25T21:53:04Z", + "updated_at": "2026-10-27T00:14:13Z", "pushed_at": "2026-10-25T21:53:00Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -552,7 +552,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-100833.json b/2026/CVE-2026-100833.json index f39b79cc28..004d3140d6 100644 --- a/2026/CVE-2026-100833.json +++ b/2026/CVE-2026-100833.json @@ -14,8 +14,8 @@ "description": "Early Attestation Considered Very Harmful (CVE-2026-100833 of CVSS 9.6, CVE-2026-108265 of CVSS 9.1, CVE-2026-108266 of CVSS 9.1, CVE-2026-108267 of CVSS 9.1, CVE-2026-108268 of CVSS 9.1, CVE-2026-108269 of CVSS 9.1, CVE-2026-100835 of CVSS 9.1, CVE-2026-92701 of CVSS 9.1, CVE-2026-92702 of CVSS 9.1, CVE-2026-33697 of CVSS 7.5, and more to come)", "fork": false, "created_at": "2026-07-06T22:13:03Z", - "updated_at": "2026-10-24T23:59:00Z", - "pushed_at": "2026-10-25T02:18:38Z", + "updated_at": "2026-10-26T22:13:39Z", + "pushed_at": "2026-10-26T22:18:02Z", "stargazers_count": 4, "watchers_count": 4, "has_discussions": false, diff --git a/2026/CVE-2026-101767.json b/2026/CVE-2026-101767.json index 859ed306f2..2ecb8d065f 100644 --- a/2026/CVE-2026-101767.json +++ b/2026/CVE-2026-101767.json @@ -14,8 +14,8 @@ "description": "CVE-2026-101767-POC", "fork": false, "created_at": "2026-10-26T02:40:31Z", - "updated_at": "2026-10-26T13:53:32Z", - "pushed_at": "2026-10-26T13:37:59Z", + "updated_at": "2026-10-27T01:25:42Z", + "pushed_at": "2026-10-27T01:25:38Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-102785.json b/2026/CVE-2026-102785.json index c63c0f429e..c0a8ae8248 100644 --- a/2026/CVE-2026-102785.json +++ b/2026/CVE-2026-102785.json @@ -1,37 +1,4 @@ [ - { - "id": 1429790189, - "name": "CVE-2026-102785---YooTheme-Mass-Exploit-Webshell.Store-", - "full_name": "BIBILZERODAY\/CVE-2026-102785---YooTheme-Mass-Exploit-Webshell.Store-", - "owner": { - "login": "BIBILZERODAY", - "id": 318742045, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/318742045?v=4", - "html_url": "https:\/\/github.com\/BIBILZERODAY", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/BIBILZERODAY\/CVE-2026-102785---YooTheme-Mass-Exploit-Webshell.Store-", - "description": null, - "fork": false, - "created_at": "2026-10-22T13:31:46Z", - "updated_at": "2026-10-22T13:36:11Z", - "pushed_at": "2026-10-22T13:32:21Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1431671851, "name": "CVE-2026-102785", diff --git a/2026/CVE-2026-104736.json b/2026/CVE-2026-104736.json index f159a70311..ab03d0e75b 100644 --- a/2026/CVE-2026-104736.json +++ b/2026/CVE-2026-104736.json @@ -1,37 +1,4 @@ [ - { - "id": 1422648954, - "name": "CVE-2026-104736---Proof-of-Concept-PoC-Exploit-Details", - "full_name": "BIBILZERODAY\/CVE-2026-104736---Proof-of-Concept-PoC-Exploit-Details", - "owner": { - "login": "BIBILZERODAY", - "id": 318742045, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/318742045?v=4", - "html_url": "https:\/\/github.com\/BIBILZERODAY", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/BIBILZERODAY\/CVE-2026-104736---Proof-of-Concept-PoC-Exploit-Details", - "description": null, - "fork": false, - "created_at": "2026-10-16T20:37:10Z", - "updated_at": "2026-10-16T20:37:49Z", - "pushed_at": "2026-10-16T20:37:46Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1424817454, "name": "CVE-2026-104736", @@ -70,38 +37,5 @@ "watchers": 0, "score": 0, "subscribers_count": 0 - }, - { - "id": 1427883969, - "name": "CVE-2026-104736-Mass-Webshell-CVE", - "full_name": "BIBILZERODAY\/CVE-2026-104736-Mass-Webshell-CVE", - "owner": { - "login": "BIBILZERODAY", - "id": 318742045, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/318742045?v=4", - "html_url": "https:\/\/github.com\/BIBILZERODAY", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/BIBILZERODAY\/CVE-2026-104736-Mass-Webshell-CVE", - "description": null, - "fork": false, - "created_at": "2026-10-21T04:41:12Z", - "updated_at": "2026-10-21T04:41:29Z", - "pushed_at": "2026-10-21T04:41:25Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-104748.json b/2026/CVE-2026-104748.json index ed39e91a45..4ada01bb9e 100644 --- a/2026/CVE-2026-104748.json +++ b/2026/CVE-2026-104748.json @@ -14,10 +14,10 @@ "description": "Unauthenticated privilege escalation in SimpleForm WordPress plugin <= 3.10.0. Registers an administrator account without authentication", "fork": false, "created_at": "2026-10-14T09:59:22Z", - "updated_at": "2026-10-14T11:00:29Z", + "updated_at": "2026-10-26T21:14:21Z", "pushed_at": "2026-10-14T10:42:57Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -39,7 +39,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-105810.json b/2026/CVE-2026-105810.json index 2611a6d828..0ad8ce669a 100644 --- a/2026/CVE-2026-105810.json +++ b/2026/CVE-2026-105810.json @@ -19,7 +19,7 @@ "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, - "forks_count": 1, + "forks_count": 2, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 1, + "forks": 2, "watchers": 3, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-105950.json b/2026/CVE-2026-105950.json index 0adbcded60..d1cc9d7c2d 100644 --- a/2026/CVE-2026-105950.json +++ b/2026/CVE-2026-105950.json @@ -14,8 +14,8 @@ "description": "Bilingual PoC and technical analysis for CVE-2026-105950 — Formwork formaction URI sanitizer bypass", "fork": false, "created_at": "2026-10-13T14:02:57Z", - "updated_at": "2026-10-13T14:08:14Z", - "pushed_at": "2026-10-13T14:08:10Z", + "updated_at": "2026-10-26T23:19:38Z", + "pushed_at": "2026-10-26T23:19:34Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-106173.json b/2026/CVE-2026-106173.json index 8c2c2f7a57..8b0102f4bd 100644 --- a/2026/CVE-2026-106173.json +++ b/2026/CVE-2026-106173.json @@ -14,10 +14,10 @@ "description": "Proof of concept exploit for CVE-2026-106173, a path traversal file write leading to RCE for Fortinet FortiSIEM", "fork": false, "created_at": "2026-10-20T12:29:09Z", - "updated_at": "2026-10-26T15:43:37Z", + "updated_at": "2026-10-27T00:38:52Z", "pushed_at": "2026-10-20T12:43:37Z", - "stargazers_count": 32, - "watchers_count": 32, + "stargazers_count": 34, + "watchers_count": 34, "has_discussions": false, "forks_count": 11, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 11, - "watchers": 32, + "watchers": 34, "score": 0, "subscribers_count": 1 }, diff --git a/2026/CVE-2026-107092.json b/2026/CVE-2026-107092.json index 7965156675..fa32a14f84 100644 --- a/2026/CVE-2026-107092.json +++ b/2026/CVE-2026-107092.json @@ -11,10 +11,10 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/raivenLockdown\/CVE-2026-107092", - "description": null, + "description": "CVE-2026-107092 is a critical directory traversal vulnerability in NexoPOS v6.2.4 affecting the api\/update endpoint, where insufficient input sanitization allows unauthenticated attackers to supply path traversal sequences, escape the intended application directory, and potentially execute arbitrary files or remote code on the underlying server.", "fork": false, "created_at": "2026-10-23T10:46:24Z", - "updated_at": "2026-10-26T19:06:45Z", + "updated_at": "2026-10-26T21:23:12Z", "pushed_at": "2026-10-26T19:06:41Z", "stargazers_count": 1, "watchers_count": 1, diff --git a/2026/CVE-2026-107406.json b/2026/CVE-2026-107406.json index 146aa4cf37..2baa048057 100644 --- a/2026/CVE-2026-107406.json +++ b/2026/CVE-2026-107406.json @@ -31,38 +31,5 @@ "watchers": 0, "score": 0, "subscribers_count": 0 - }, - { - "id": 1414151695, - "name": "CVE-2026-107406", - "full_name": "ctroy999\/CVE-2026-107406", - "owner": { - "login": "ctroy999", - "id": 239646784, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/239646784?v=4", - "html_url": "https:\/\/github.com\/ctroy999", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ctroy999\/CVE-2026-107406", - "description": null, - "fork": false, - "created_at": "2026-10-11T09:11:11Z", - "updated_at": "2026-10-11T09:27:49Z", - "pushed_at": "2026-10-11T09:27:45Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-10961.json b/2026/CVE-2026-10961.json index ad3e6b30bc..e1460752c2 100644 --- a/2026/CVE-2026-10961.json +++ b/2026/CVE-2026-10961.json @@ -14,10 +14,10 @@ "description": "PHP CVE-2026-109618\/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12", "fork": false, "created_at": "2026-10-20T19:16:47Z", - "updated_at": "2026-10-26T12:07:04Z", + "updated_at": "2026-10-27T00:54:23Z", "pushed_at": "2026-10-26T12:07:00Z", - "stargazers_count": 111, - "watchers_count": 111, + "stargazers_count": 112, + "watchers_count": 112, "has_discussions": false, "forks_count": 26, "allow_forking": true, @@ -39,7 +39,7 @@ ], "visibility": "public", "forks": 26, - "watchers": 111, + "watchers": 112, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-109618.json b/2026/CVE-2026-109618.json index 8df13271b5..61f14891b8 100644 --- a/2026/CVE-2026-109618.json +++ b/2026/CVE-2026-109618.json @@ -255,12 +255,12 @@ "description": "CVE-2026-109618\/109619 — PHP session.upload_progress pre-auth RCE. Exploit research: remote ASLR chain, PoC & patch analysis.", "fork": false, "created_at": "2026-10-21T04:38:46Z", - "updated_at": "2026-10-26T12:44:48Z", + "updated_at": "2026-10-26T23:54:40Z", "pushed_at": "2026-10-26T12:42:03Z", - "stargazers_count": 47, - "watchers_count": 47, + "stargazers_count": 48, + "watchers_count": 48, "has_discussions": false, - "forks_count": 23, + "forks_count": 24, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -282,8 +282,8 @@ "vulnerability-research" ], "visibility": "public", - "forks": 23, - "watchers": 47, + "forks": 24, + "watchers": 48, "score": 0, "subscribers_count": 0 }, @@ -672,12 +672,12 @@ "description": "CVE-2026-109618\/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.", "fork": false, "created_at": "2026-10-21T07:55:16Z", - "updated_at": "2026-10-26T19:43:26Z", + "updated_at": "2026-10-27T01:41:35Z", "pushed_at": "2026-10-22T22:41:36Z", - "stargazers_count": 1828, - "watchers_count": 1828, + "stargazers_count": 1833, + "watchers_count": 1833, "has_discussions": false, - "forks_count": 628, + "forks_count": 631, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -700,8 +700,8 @@ "wordpress-security" ], "visibility": "public", - "forks": 628, - "watchers": 1828, + "forks": 631, + "watchers": 1833, "score": 0, "subscribers_count": 5 }, @@ -973,12 +973,12 @@ "description": "Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 \/ CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.", "fork": false, "created_at": "2026-10-21T08:31:43Z", - "updated_at": "2026-10-26T17:03:21Z", + "updated_at": "2026-10-27T00:27:21Z", "pushed_at": "2026-10-22T07:19:20Z", - "stargazers_count": 1017, - "watchers_count": 1017, + "stargazers_count": 1019, + "watchers_count": 1019, "has_discussions": false, - "forks_count": 256, + "forks_count": 257, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -986,8 +986,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 256, - "watchers": 1017, + "forks": 257, + "watchers": 1019, "score": 0, "subscribers_count": 36 }, @@ -1006,10 +1006,10 @@ "description": "Protects an unpatched PHP against php2shell (CVE-2026-109618 \/ CVE-2026-109619): a small extension that mirrors the official fix component by component and steps aside once the engine carries it. PHP 5.6-8.5; Sury, cPanel EA4, DirectAdmin, Docker, Windows.", "fork": false, "created_at": "2026-10-21T09:00:12Z", - "updated_at": "2026-10-26T15:29:49Z", + "updated_at": "2026-10-26T21:58:57Z", "pushed_at": "2026-10-26T12:14:54Z", - "stargazers_count": 160, - "watchers_count": 160, + "stargazers_count": 161, + "watchers_count": 161, "has_discussions": false, "forks_count": 11, "allow_forking": true, @@ -1028,7 +1028,7 @@ ], "visibility": "public", "forks": 11, - "watchers": 160, + "watchers": 161, "score": 0, "subscribers_count": 3 }, @@ -1467,7 +1467,7 @@ "stargazers_count": 57, "watchers_count": 57, "has_discussions": false, - "forks_count": 27, + "forks_count": 28, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1475,7 +1475,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 27, + "forks": 28, "watchers": 57, "score": 0, "subscribers_count": 0 @@ -1579,39 +1579,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1428261566, - "name": "PHP2Shell-CVE-2026-109618-CVE-2026-109619-Mass-Exploit", - "full_name": "BIBILZERODAY\/PHP2Shell-CVE-2026-109618-CVE-2026-109619-Mass-Exploit", - "owner": { - "login": "BIBILZERODAY", - "id": 318742045, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/318742045?v=4", - "html_url": "https:\/\/github.com\/BIBILZERODAY", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/BIBILZERODAY\/PHP2Shell-CVE-2026-109618-CVE-2026-109619-Mass-Exploit", - "description": null, - "fork": false, - "created_at": "2026-10-21T11:05:28Z", - "updated_at": "2026-10-22T17:42:36Z", - "pushed_at": "2026-10-22T17:41:43Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1428268170, "name": "php-rfc1867-guard", @@ -1759,10 +1726,10 @@ "description": null, "fork": false, "created_at": "2026-10-21T11:52:39Z", - "updated_at": "2026-10-26T18:56:53Z", + "updated_at": "2026-10-27T01:47:46Z", "pushed_at": "2026-10-21T11:52:57Z", - "stargazers_count": 140, - "watchers_count": 140, + "stargazers_count": 141, + "watchers_count": 141, "has_discussions": false, "forks_count": 82, "allow_forking": true, @@ -1773,7 +1740,7 @@ "topics": [], "visibility": "public", "forks": 82, - "watchers": 140, + "watchers": 141, "score": 0, "subscribers_count": 0 }, @@ -2028,10 +1995,10 @@ "description": "php2shell: Advanced hybrid exploit framework for CVE-2026-109618, CVE-2026-109619 & CVE-2026-115560. Features Auto-LFI parameter discovery, SAPI profiling, OOM fuzzing calibration, and FPM worker pinning. Stdlib only.", "fork": false, "created_at": "2026-10-21T12:37:59Z", - "updated_at": "2026-10-26T13:22:42Z", + "updated_at": "2026-10-27T00:04:22Z", "pushed_at": "2026-10-23T15:07:53Z", - "stargazers_count": 83, - "watchers_count": 83, + "stargazers_count": 85, + "watchers_count": 85, "has_discussions": false, "forks_count": 28, "allow_forking": true, @@ -2042,7 +2009,7 @@ "topics": [], "visibility": "public", "forks": 28, - "watchers": 83, + "watchers": 85, "score": 0, "subscribers_count": 0 }, @@ -3015,10 +2982,10 @@ "description": "Minimal source backports of the PHP core RCE fixes (CVE-2026-109618 \/ CVE-2026-109619) for EOL PHP 5.4 and 7.3", "fork": false, "created_at": "2026-10-21T14:20:57Z", - "updated_at": "2026-10-26T15:24:43Z", + "updated_at": "2026-10-27T01:25:04Z", "pushed_at": "2026-10-22T18:37:16Z", - "stargazers_count": 52, - "watchers_count": 52, + "stargazers_count": 53, + "watchers_count": 53, "has_discussions": false, "forks_count": 10, "allow_forking": true, @@ -3029,7 +2996,7 @@ "topics": [], "visibility": "public", "forks": 10, - "watchers": 52, + "watchers": 53, "score": 0, "subscribers_count": 0 }, @@ -3274,12 +3241,12 @@ "description": "php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.", "fork": false, "created_at": "2026-10-21T14:48:05Z", - "updated_at": "2026-10-26T15:37:18Z", - "pushed_at": "2026-10-26T15:16:01Z", + "updated_at": "2026-10-26T20:49:16Z", + "pushed_at": "2026-10-26T20:49:12Z", "stargazers_count": 114, "watchers_count": 114, "has_discussions": false, - "forks_count": 17, + "forks_count": 20, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -3304,7 +3271,7 @@ "security" ], "visibility": "public", - "forks": 17, + "forks": 20, "watchers": 114, "score": 0, "subscribers_count": 1 @@ -3554,7 +3521,7 @@ "stargazers_count": 144, "watchers_count": 144, "has_discussions": false, - "forks_count": 88, + "forks_count": 89, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -3562,7 +3529,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 88, + "forks": 89, "watchers": 144, "score": 0, "subscribers_count": 0 @@ -4802,12 +4769,12 @@ "description": "Unofficial mitigation patches for CVE-2026-109618\/109619 on EOL PHP 5.x", "fork": false, "created_at": "2026-10-21T16:38:33Z", - "updated_at": "2026-10-26T19:08:06Z", - "pushed_at": "2026-10-26T19:08:02Z", + "updated_at": "2026-10-26T23:30:04Z", + "pushed_at": "2026-10-26T20:46:58Z", "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, - "forks_count": 1, + "forks_count": 2, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -4815,7 +4782,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 1, + "forks": 2, "watchers": 3, "score": 0, "subscribers_count": 0 @@ -5393,10 +5360,10 @@ "description": "Exploits for CVE-2026-109618 \/ CVE-2026-109619 to achieve RCE on PHP targets", "fork": false, "created_at": "2026-10-21T17:42:17Z", - "updated_at": "2026-10-25T12:23:21Z", + "updated_at": "2026-10-27T01:17:29Z", "pushed_at": "2026-10-21T18:51:46Z", - "stargazers_count": 36, - "watchers_count": 36, + "stargazers_count": 37, + "watchers_count": 37, "has_discussions": false, "forks_count": 10, "allow_forking": true, @@ -5415,7 +5382,7 @@ ], "visibility": "public", "forks": 10, - "watchers": 36, + "watchers": 37, "score": 0, "subscribers_count": 0 }, @@ -6633,10 +6600,10 @@ "description": "CVE-2026-109618\/109619 --- PHP session.upload_progress pre-auth RCE (chain A\/B\/C)", "fork": false, "created_at": "2026-10-21T19:57:51Z", - "updated_at": "2026-10-24T21:04:23Z", + "updated_at": "2026-10-26T23:54:58Z", "pushed_at": "2026-10-21T19:58:22Z", - "stargazers_count": 11, - "watchers_count": 11, + "stargazers_count": 12, + "watchers_count": 12, "has_discussions": false, "forks_count": 4, "allow_forking": true, @@ -6647,7 +6614,7 @@ "topics": [], "visibility": "public", "forks": 4, - "watchers": 11, + "watchers": 12, "score": 0, "subscribers_count": 0 }, @@ -6704,7 +6671,7 @@ "stargazers_count": 8, "watchers_count": 8, "has_discussions": false, - "forks_count": 2, + "forks_count": 3, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -6712,7 +6679,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 2, + "forks": 3, "watchers": 8, "score": 0, "subscribers_count": 0 @@ -7842,12 +7809,12 @@ "description": "PHP2Shell: version-aware research toolkit for CVE-2026-109618 \/ CVE-2026-109619 — pre-auth RCE in PHP session.upload_progress (mod_php). Build profiles, labs, heap calibration and detection guidance for authorized security testing.", "fork": false, "created_at": "2026-10-21T22:53:01Z", - "updated_at": "2026-10-26T19:43:22Z", + "updated_at": "2026-10-26T23:41:58Z", "pushed_at": "2026-10-22T11:43:17Z", - "stargazers_count": 169, - "watchers_count": 169, + "stargazers_count": 172, + "watchers_count": 172, "has_discussions": false, - "forks_count": 55, + "forks_count": 57, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -7870,8 +7837,8 @@ "vulnerability-research" ], "visibility": "public", - "forks": 55, - "watchers": 169, + "forks": 57, + "watchers": 172, "score": 0, "subscribers_count": 0 }, @@ -8211,7 +8178,7 @@ "stargazers_count": 61, "watchers_count": 61, "has_discussions": false, - "forks_count": 7, + "forks_count": 8, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -8219,7 +8186,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 7, + "forks": 8, "watchers": 61, "score": 0, "subscribers_count": 1 @@ -9761,12 +9728,12 @@ "description": "High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)", "fork": false, "created_at": "2026-10-22T03:53:20Z", - "updated_at": "2026-10-26T17:26:18Z", + "updated_at": "2026-10-26T20:04:07Z", "pushed_at": "2026-10-24T03:40:18Z", - "stargazers_count": 928, - "watchers_count": 928, + "stargazers_count": 929, + "watchers_count": 929, "has_discussions": false, - "forks_count": 134, + "forks_count": 136, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -9774,8 +9741,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 134, - "watchers": 928, + "forks": 136, + "watchers": 929, "score": 0, "subscribers_count": 2 }, @@ -12414,10 +12381,10 @@ "description": "Scanner for PHP2Shell (CVE-2026-109618\/109619): URL blackbox, local device and SSH.", "fork": false, "created_at": "2026-10-22T09:45:34Z", - "updated_at": "2026-10-26T19:45:02Z", + "updated_at": "2026-10-26T23:15:11Z", "pushed_at": "2026-10-23T14:55:12Z", - "stargazers_count": 95, - "watchers_count": 95, + "stargazers_count": 96, + "watchers_count": 96, "has_discussions": false, "forks_count": 14, "allow_forking": true, @@ -12433,7 +12400,7 @@ ], "visibility": "public", "forks": 14, - "watchers": 95, + "watchers": 96, "score": 0, "subscribers_count": 0 }, @@ -12848,10 +12815,10 @@ "description": "php2shell Scanner ", "fork": false, "created_at": "2026-10-22T10:39:58Z", - "updated_at": "2026-10-26T17:43:35Z", + "updated_at": "2026-10-27T01:29:08Z", "pushed_at": "2026-10-24T16:54:48Z", - "stargazers_count": 17, - "watchers_count": 17, + "stargazers_count": 18, + "watchers_count": 18, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -12862,7 +12829,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 17, + "watchers": 18, "score": 0, "subscribers_count": 0 }, @@ -13637,10 +13604,10 @@ "description": "PHP2Shell exploit framework — CVE-2026-109618\/619 PHP session.upload_progress UAF to RCE", "fork": false, "created_at": "2026-10-22T12:53:40Z", - "updated_at": "2026-10-26T18:56:44Z", + "updated_at": "2026-10-26T23:04:18Z", "pushed_at": "2026-10-26T12:50:30Z", - "stargazers_count": 179, - "watchers_count": 179, + "stargazers_count": 180, + "watchers_count": 180, "has_discussions": false, "forks_count": 52, "allow_forking": true, @@ -13651,7 +13618,7 @@ "topics": [], "visibility": "public", "forks": 52, - "watchers": 179, + "watchers": 180, "score": 0, "subscribers_count": 0 }, @@ -14802,7 +14769,7 @@ "fork": false, "created_at": "2026-10-22T15:45:52Z", "updated_at": "2026-10-25T23:43:19Z", - "pushed_at": "2026-10-22T17:32:52Z", + "pushed_at": "2026-10-27T01:24:32Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -15833,10 +15800,10 @@ "description": "Unofficial patched PHP 7.4.33 for Synology DSM 6.2 x86_64 (replaces PHP7.4 7.4.30-0009). Fixes PHP2Shell (CVE-2026-109618\/109619) plus 90 security backports. Drop-in install with backup and rollback, test page, build scripts. Tested on DS1815+.", "fork": false, "created_at": "2026-10-22T17:59:32Z", - "updated_at": "2026-10-25T17:45:35Z", + "updated_at": "2026-10-26T23:12:26Z", "pushed_at": "2026-10-22T19:22:24Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -15855,7 +15822,7 @@ ], "visibility": "public", "forks": 1, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 }, @@ -15949,10 +15916,10 @@ "description": "Unofficial fix for CVE-2026-109618 \/ CVE-2026-109619 (php2shell) for the end-of-life PHP 5.4 \/ 5.3 packages of RHEL, CentOS and Oracle Linux 7 \/ 6", "fork": false, "created_at": "2026-10-22T18:14:29Z", - "updated_at": "2026-10-23T15:03:03Z", + "updated_at": "2026-10-26T23:51:10Z", "pushed_at": "2026-10-23T15:03:00Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -15984,7 +15951,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -19543,39 +19510,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1430942649, - "name": "php2shell-poc", - "full_name": "9hb\/php2shell-poc", - "owner": { - "login": "9hb", - "id": 70175464, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/70175464?v=4", - "html_url": "https:\/\/github.com\/9hb", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/9hb\/php2shell-poc", - "description": "php2shell rce proof of concept for cve-2026-109618 and cve-2026-109619", - "fork": false, - "created_at": "2026-10-23T11:12:44Z", - "updated_at": "2026-10-23T11:40:22Z", - "pushed_at": "2026-10-23T11:40:19Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1430943364, "name": "php2shell_lab", @@ -20622,10 +20556,10 @@ "description": "Drop-in php:7.4-apache\/fpm\/cli Docker images with the official fix for CVE-2026-109618 \/ CVE-2026-109619 (critical PHP RCE). amd64 + arm64.", "fork": false, "created_at": "2026-10-23T15:19:41Z", - "updated_at": "2026-10-26T07:37:36Z", + "updated_at": "2026-10-26T23:08:52Z", "pushed_at": "2026-10-23T15:59:21Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -20649,7 +20583,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 3, + "watchers": 4, "score": 0, "subscribers_count": 0 }, @@ -22268,8 +22202,8 @@ "description": "Detection and response package for php2shell (CVE-2026-109618 \/ CVE-2026-109619): Suricata, Zeek, YARA, Sigma, ModSecurity rules, hunting queries, SOC triage, patch matrix. No exploit code.", "fork": false, "created_at": "2026-10-24T13:28:54Z", - "updated_at": "2026-10-26T13:40:52Z", - "pushed_at": "2026-10-26T13:40:48Z", + "updated_at": "2026-10-26T23:46:15Z", + "pushed_at": "2026-10-26T23:46:11Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -23775,8 +23709,8 @@ "description": "Bigfix PHP Vulnerability Scanner Content (CVE-2026-109618, CVE-2026-109619) for Windows, Linux and Mac.", "fork": false, "created_at": "2026-10-25T19:00:03Z", - "updated_at": "2026-10-25T20:17:44Z", - "pushed_at": "2026-10-25T20:17:40Z", + "updated_at": "2026-10-26T21:30:36Z", + "pushed_at": "2026-10-26T21:30:32Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -24026,10 +23960,10 @@ "description": "CVE-2026-109618 - PHP session.upload_progress Heap UAF Pre-Auth RCE (CVSS 9.2)", "fork": false, "created_at": "2026-10-26T01:46:40Z", - "updated_at": "2026-10-26T01:55:51Z", + "updated_at": "2026-10-26T20:46:30Z", "pushed_at": "2026-10-26T01:46:45Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -24061,7 +23995,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -24821,10 +24755,10 @@ "description": "Analysis and negative control for CVE-2026-109618\/109619: which PHP builds still arm, why 8.4.27 does not, and why the chain does not transfer to PHP-FPM. Exploit withheld until 2026-11-25.", "fork": false, "created_at": "2026-10-26T12:07:28Z", - "updated_at": "2026-10-26T19:42:09Z", + "updated_at": "2026-10-27T00:38:36Z", "pushed_at": "2026-10-26T15:26:23Z", - "stargazers_count": 4, - "watchers_count": 4, + "stargazers_count": 5, + "watchers_count": 5, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -24841,7 +24775,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 4, + "watchers": 5, "score": 0, "subscribers_count": 0 }, @@ -24926,8 +24860,8 @@ "description": "PHP2SHELL — remote scanner + research PoC for CVE-2026-109618 \/ CVE-2026-109619: the PHP rfc1867 pre-request OOM RCE pair (PHP 5.4.0–8.5.11, fixed in 8.5.12). Reverse-engineered from the 8.5.11→8.5.12 diff, verified against both builds.", "fork": false, "created_at": "2026-10-26T16:26:32Z", - "updated_at": "2026-10-26T16:27:47Z", - "pushed_at": "2026-10-26T16:27:28Z", + "updated_at": "2026-10-26T21:15:23Z", + "pushed_at": "2026-10-26T21:15:18Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -25018,5 +24952,113 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1434881802, + "name": "php2shell-detect", + "full_name": "ProTekk\/php2shell-detect", + "owner": { + "login": "ProTekk", + "id": 1816069, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1816069?v=4", + "html_url": "https:\/\/github.com\/ProTekk", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/ProTekk\/php2shell-detect", + "description": "Benign client-testing detector for PHP2Shell \/ PHP session upload-progress (CVE-2026-109618, CVE-2026-109619): version ladder, config gate, behavioral probe, and the chain pubstate probe. Stdlib-only; Linux, macOS, Windows.", + "fork": false, + "created_at": "2026-10-26T20:11:59Z", + "updated_at": "2026-10-26T20:36:48Z", + "pushed_at": "2026-10-26T20:36:45Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1434911833, + "name": "php2shell-scan-patch", + "full_name": "thetowsif\/php2shell-scan-patch", + "owner": { + "login": "thetowsif", + "id": 69382676, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/69382676?v=4", + "html_url": "https:\/\/github.com\/thetowsif", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/thetowsif\/php2shell-scan-patch", + "description": "Universal scanner and automated patching playbook for CVE-2026-109618 and CVE-2026-109619 (\"PHP2Shell\")", + "fork": false, + "created_at": "2026-10-26T20:45:18Z", + "updated_at": "2026-10-26T21:30:55Z", + "pushed_at": "2026-10-26T21:30:52Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1434969422, + "name": "php2shell-scanner", + "full_name": "foxcornlab\/php2shell-scanner", + "owner": { + "login": "foxcornlab", + "id": 43523802, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43523802?v=4", + "html_url": "https:\/\/github.com\/foxcornlab", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/foxcornlab\/php2shell-scanner", + "description": "Detection-only triage scanner for PHP2Shell CVE-2026-109618 \/ CVE-2026-109619: PHP version fingerprinting, SAPI detection, and local php.ini audit. No exploit payloads.", + "fork": false, + "created_at": "2026-10-26T21:55:15Z", + "updated_at": "2026-10-26T21:55:41Z", + "pushed_at": "2026-10-26T21:55:37Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve-2026-109618", + "cve-2026-109619", + "detection", + "php", + "php2shell", + "security-scanner", + "triage", + "vulnerability-scanner" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-109619.json b/2026/CVE-2026-109619.json index 0e83d77e27..93bb6765ac 100644 --- a/2026/CVE-2026-109619.json +++ b/2026/CVE-2026-109619.json @@ -664,10 +664,10 @@ "description": "Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619\/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design", "fork": false, "created_at": "2026-10-23T13:49:52Z", - "updated_at": "2026-10-26T19:24:25Z", + "updated_at": "2026-10-27T01:36:38Z", "pushed_at": "2026-10-26T17:21:54Z", - "stargazers_count": 87, - "watchers_count": 87, + "stargazers_count": 90, + "watchers_count": 90, "has_discussions": false, "forks_count": 53, "allow_forking": true, @@ -694,7 +694,7 @@ ], "visibility": "public", "forks": 53, - "watchers": 87, + "watchers": 90, "score": 0, "subscribers_count": 0 }, @@ -779,10 +779,10 @@ "description": "CVE-2026-109619 - PHP session.upload_progress File Poisoning + LFI RCE (CVSS 9.2)", "fork": false, "created_at": "2026-10-26T01:45:45Z", - "updated_at": "2026-10-26T01:55:50Z", + "updated_at": "2026-10-26T20:46:31Z", "pushed_at": "2026-10-26T01:45:51Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -814,7 +814,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -833,8 +833,8 @@ "description": "CVE-2026-109619 (PHP2Shell): Pre-Auth Remote Code Execution (RCE) via PHP-FPM Stale Global State Deserialization UAF. Reproducible Docker lab, interactive shell, reverse shell & WAF\/IDS rules.", "fork": false, "created_at": "2026-10-26T11:42:12Z", - "updated_at": "2026-10-26T18:49:19Z", - "pushed_at": "2026-10-26T18:49:15Z", + "updated_at": "2026-10-26T20:36:54Z", + "pushed_at": "2026-10-26T20:36:50Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2026/CVE-2026-110025.json b/2026/CVE-2026-110025.json index 2146f8ee4e..9207282bcb 100644 --- a/2026/CVE-2026-110025.json +++ b/2026/CVE-2026-110025.json @@ -14,8 +14,8 @@ "description": "CVE-2026-110025: bilingual analysis and safe local PoC for phpwcms unrestricted upload to RCE", "fork": false, "created_at": "2026-10-13T22:45:00Z", - "updated_at": "2026-10-13T22:45:10Z", - "pushed_at": "2026-10-13T22:45:05Z", + "updated_at": "2026-10-26T23:19:41Z", + "pushed_at": "2026-10-26T23:19:37Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-110922.json b/2026/CVE-2026-110922.json index 724a9d2877..a2a471bd9a 100644 --- a/2026/CVE-2026-110922.json +++ b/2026/CVE-2026-110922.json @@ -14,10 +14,10 @@ "description": "Chrome Vulnerability Laboratory . CVE-2026-110922 ", "fork": false, "created_at": "2026-10-24T09:26:07Z", - "updated_at": "2026-10-26T15:35:20Z", - "pushed_at": "2026-10-26T15:35:15Z", - "stargazers_count": 0, - "watchers_count": 0, + "updated_at": "2026-10-27T01:39:47Z", + "pushed_at": "2026-10-27T01:39:42Z", + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-111497.json b/2026/CVE-2026-111497.json index 66d93e67e0..1005e55658 100644 --- a/2026/CVE-2026-111497.json +++ b/2026/CVE-2026-111497.json @@ -47,12 +47,12 @@ "description": "Reproducible local Brotli decoder proof for CVE-2026-111497 with a self-checking tuned RCE harness", "fork": false, "created_at": "2026-10-22T04:08:28Z", - "updated_at": "2026-10-26T16:35:35Z", + "updated_at": "2026-10-26T23:59:29Z", "pushed_at": "2026-10-25T01:09:02Z", - "stargazers_count": 53, - "watchers_count": 53, + "stargazers_count": 55, + "watchers_count": 55, "has_discussions": false, - "forks_count": 14, + "forks_count": 16, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,8 +60,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 14, - "watchers": 53, + "forks": 16, + "watchers": 55, "score": 0, "subscribers_count": 0 }, @@ -315,7 +315,7 @@ "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, - "forks_count": 3, + "forks_count": 4, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -323,7 +323,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 3, + "forks": 4, "watchers": 3, "score": 0, "subscribers_count": 0 @@ -664,8 +664,8 @@ "description": "Claude Code and Codex skill for finding potentially vulnerable Brotli copies and guiding updates for CVE-2026-111497.", "fork": false, "created_at": "2026-10-23T16:32:12Z", - "updated_at": "2026-10-26T19:18:35Z", - "pushed_at": "2026-10-26T19:12:48Z", + "updated_at": "2026-10-26T20:45:18Z", + "pushed_at": "2026-10-26T21:33:30Z", "stargazers_count": 55, "watchers_count": 55, "has_discussions": false, @@ -1246,10 +1246,10 @@ "description": "CVE-2026-111497 Node2Shell — Node.js Brotli OOB Write RCE PoC (CVSS 9.2)", "fork": false, "created_at": "2026-10-24T23:03:18Z", - "updated_at": "2026-10-26T17:43:14Z", + "updated_at": "2026-10-27T00:55:09Z", "pushed_at": "2026-10-25T20:32:46Z", - "stargazers_count": 25, - "watchers_count": 25, + "stargazers_count": 31, + "watchers_count": 31, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -1260,7 +1260,7 @@ "topics": [], "visibility": "public", "forks": 6, - "watchers": 25, + "watchers": 31, "score": 0, "subscribers_count": 0 }, @@ -1324,10 +1324,10 @@ "description": "PoC for CVE-2026-111497 (HTTP2Shell)", "fork": false, "created_at": "2026-10-25T04:22:02Z", - "updated_at": "2026-10-25T07:19:23Z", + "updated_at": "2026-10-26T23:34:33Z", "pushed_at": "2026-10-25T04:29:01Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -1338,7 +1338,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, @@ -1357,10 +1357,10 @@ "description": "High fidelity detection mechanism for node2shell (CVE-2026-111497)", "fork": false, "created_at": "2026-10-25T04:23:54Z", - "updated_at": "2026-10-26T15:28:33Z", + "updated_at": "2026-10-26T21:35:52Z", "pushed_at": "2026-10-25T04:24:27Z", - "stargazers_count": 68, - "watchers_count": 68, + "stargazers_count": 69, + "watchers_count": 69, "has_discussions": false, "forks_count": 8, "allow_forking": true, @@ -1371,7 +1371,7 @@ "topics": [], "visibility": "public", "forks": 8, - "watchers": 68, + "watchers": 69, "score": 0, "subscribers_count": 1 }, @@ -1530,8 +1530,8 @@ "description": "Security research on CVE-2026-111497 (HTTP2Shell): Docker-only differential lab probing the Brotli decoder OOB write across vulnerable\/fixed Node builds", "fork": false, "created_at": "2026-10-25T17:23:52Z", - "updated_at": "2026-10-26T14:33:53Z", - "pushed_at": "2026-10-26T14:33:48Z", + "updated_at": "2026-10-27T01:00:21Z", + "pushed_at": "2026-10-27T01:00:17Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -1729,8 +1729,8 @@ "description": "BigFix YARA-X discovery Fixlets and shared Analysis for Node.js Brotli CVE-2026-111497 on Windows, Linux and macOS.", "fork": false, "created_at": "2026-10-25T20:09:18Z", - "updated_at": "2026-10-26T15:36:32Z", - "pushed_at": "2026-10-26T15:36:28Z", + "updated_at": "2026-10-26T22:04:19Z", + "pushed_at": "2026-10-26T22:04:13Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -1838,10 +1838,10 @@ "description": "CVE-2026-111497", "fork": false, "created_at": "2026-10-26T10:03:58Z", - "updated_at": "2026-10-26T11:54:12Z", + "updated_at": "2026-10-26T21:06:48Z", "pushed_at": "2026-10-26T11:54:07Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -1852,7 +1852,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -1977,8 +1977,41 @@ "description": "formbricks 5.1.4 with Node.js 24.22.1 (CVE-2026-111497 and others) swapped in", "fork": false, "created_at": "2026-10-26T16:57:01Z", - "updated_at": "2026-10-26T16:57:43Z", - "pushed_at": "2026-10-26T16:57:38Z", + "updated_at": "2026-10-26T20:48:56Z", + "pushed_at": "2026-10-26T20:48:52Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1435043505, + "name": "CVE-2026-111497", + "full_name": "axisops\/CVE-2026-111497", + "owner": { + "login": "axisops", + "id": 5512152, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5512152?v=4", + "html_url": "https:\/\/github.com\/axisops", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/axisops\/CVE-2026-111497", + "description": "Brotli decoder CVE-2026-111497 Mitigation work (Ansible Role)", + "fork": false, + "created_at": "2026-10-26T23:42:30Z", + "updated_at": "2026-10-27T00:12:00Z", + "pushed_at": "2026-10-27T00:05:48Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-114509.json b/2026/CVE-2026-114509.json index 466780578c..ad9d7e7fb7 100644 --- a/2026/CVE-2026-114509.json +++ b/2026/CVE-2026-114509.json @@ -80,8 +80,8 @@ "description": "Reproducible local Laravel lab and self-checking PoC for CVE-2026-114509", "fork": false, "created_at": "2026-10-24T01:12:34Z", - "updated_at": "2026-10-26T16:09:54Z", - "pushed_at": "2026-10-26T16:09:49Z", + "updated_at": "2026-10-27T01:42:10Z", + "pushed_at": "2026-10-27T01:42:07Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-116000.json b/2026/CVE-2026-116000.json new file mode 100644 index 0000000000..4cb77ce880 --- /dev/null +++ b/2026/CVE-2026-116000.json @@ -0,0 +1,41 @@ +[ + { + "id": 1435024674, + "name": "CVE-2026-116000", + "full_name": "capivara-research\/CVE-2026-116000", + "owner": { + "login": "capivara-research", + "id": 287438663, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/287438663?v=4", + "html_url": "https:\/\/github.com\/capivara-research", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/capivara-research\/CVE-2026-116000", + "description": "Safe PoC and technical analysis for CVE-2026-116000", + "fork": false, + "created_at": "2026-10-26T23:13:23Z", + "updated_at": "2026-10-26T23:45:16Z", + "pushed_at": "2026-10-26T23:45:12Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve", + "poc", + "privategpt", + "ssrf", + "vulnerability-research" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-116004.json b/2026/CVE-2026-116004.json new file mode 100644 index 0000000000..ef74db7158 --- /dev/null +++ b/2026/CVE-2026-116004.json @@ -0,0 +1,41 @@ +[ + { + "id": 1435024766, + "name": "CVE-2026-116004", + "full_name": "capivara-research\/CVE-2026-116004", + "owner": { + "login": "capivara-research", + "id": 287438663, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/287438663?v=4", + "html_url": "https:\/\/github.com\/capivara-research", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/capivara-research\/CVE-2026-116004", + "description": "Safe PoC and technical analysis for CVE-2026-116004", + "fork": false, + "created_at": "2026-10-26T23:13:31Z", + "updated_at": "2026-10-26T23:45:19Z", + "pushed_at": "2026-10-26T23:45:15Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve", + "iframe", + "poc", + "vulnerability-research", + "xss" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-19745.json b/2026/CVE-2026-116370.json similarity index 50% rename from 2026/CVE-2026-19745.json rename to 2026/CVE-2026-116370.json index 47896c95c6..48c8575608 100644 --- a/2026/CVE-2026-19745.json +++ b/2026/CVE-2026-116370.json @@ -1,8 +1,8 @@ [ { - "id": 1350733740, - "name": "CVE-2026-19745", - "full_name": "drbloop2000\/CVE-2026-19745", + "id": 1404351968, + "name": "Sid-Meier-s-Civilization-VI-RCE", + "full_name": "drbloop2000\/Sid-Meier-s-Civilization-VI-RCE", "owner": { "login": "drbloop2000", "id": 322517856, @@ -10,14 +10,14 @@ "html_url": "https:\/\/github.com\/drbloop2000", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/drbloop2000\/CVE-2026-19745", - "description": "Learn how I found my first two CVEs by pure accident.", + "html_url": "https:\/\/github.com\/drbloop2000\/Sid-Meier-s-Civilization-VI-RCE", + "description": "CVE-2026-116370", "fork": false, - "created_at": "2026-08-29T16:21:05Z", - "updated_at": "2026-08-29T23:55:32Z", - "pushed_at": "2026-08-29T16:36:35Z", - "stargazers_count": 2, - "watchers_count": 2, + "created_at": "2026-10-04T12:09:01Z", + "updated_at": "2026-10-26T20:18:22Z", + "pushed_at": "2026-10-26T20:18:18Z", + "stargazers_count": 0, + "watchers_count": 0, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -25,10 +25,16 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "cve", + "exploit", + "rce", + "remote-code-execution", + "sandbox-escape" + ], "visibility": "public", "forks": 0, - "watchers": 2, + "watchers": 0, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-18107.json b/2026/CVE-2026-18107.json index 1818580533..e4eb243838 100644 --- a/2026/CVE-2026-18107.json +++ b/2026/CVE-2026-18107.json @@ -14,8 +14,8 @@ "description": "Universal container escape exploit targeting the CRIU container checkpoint\/restore system - CVE-2026-18107", "fork": false, "created_at": "2026-09-27T21:57:13Z", - "updated_at": "2026-10-26T17:58:30Z", - "pushed_at": "2026-10-26T17:58:26Z", + "updated_at": "2026-10-26T21:52:59Z", + "pushed_at": "2026-10-26T21:52:55Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2026/CVE-2026-20700.json b/2026/CVE-2026-20700.json index 8bc781f96d..601e72c6d8 100644 --- a/2026/CVE-2026-20700.json +++ b/2026/CVE-2026-20700.json @@ -19,7 +19,7 @@ "stargazers_count": 17, "watchers_count": 17, "has_discussions": false, - "forks_count": 6, + "forks_count": 7, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 6, + "forks": 7, "watchers": 17, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-20980.json b/2026/CVE-2026-20980.json index 90f29b0f0f..1cadee3e2a 100644 --- a/2026/CVE-2026-20980.json +++ b/2026/CVE-2026-20980.json @@ -14,10 +14,10 @@ "description": "Poc for CVE-2026-20980, CVE-2026-20981, CVE-2026-20982", "fork": false, "created_at": "2026-06-01T13:14:47Z", - "updated_at": "2026-10-24T16:22:17Z", + "updated_at": "2026-10-26T22:00:51Z", "pushed_at": "2026-06-01T17:42:26Z", - "stargazers_count": 53, - "watchers_count": 53, + "stargazers_count": 54, + "watchers_count": 54, "has_discussions": false, "forks_count": 13, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 13, - "watchers": 53, + "watchers": 54, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-24291.json b/2026/CVE-2026-24291.json index 0b0b3329a9..62f836782f 100644 --- a/2026/CVE-2026-24291.json +++ b/2026/CVE-2026-24291.json @@ -165,10 +165,10 @@ "description": "About 2026 Guide: Bypass User Account Control Prompts on Windows 11", "fork": false, "created_at": "2026-07-11T23:35:08Z", - "updated_at": "2026-09-11T21:50:22Z", + "updated_at": "2026-10-27T00:45:14Z", "pushed_at": "2026-07-12T05:46:40Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 0, + "watchers_count": 0, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -181,7 +181,7 @@ ], "visibility": "public", "forks": 1, - "watchers": 1, + "watchers": 0, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-26268.json b/2026/CVE-2026-26268.json index 223f2620dd..0f4dbac65b 100644 --- a/2026/CVE-2026-26268.json +++ b/2026/CVE-2026-26268.json @@ -14,10 +14,10 @@ "description": "IOC scanner for agentic AI coding tools — detects Mini Shai-Hulud, Gemini CLI RCE, Cursor CVE-2026-26268, and DPRK PromptMink.", "fork": false, "created_at": "2026-05-05T14:57:30Z", - "updated_at": "2026-05-20T11:17:42Z", + "updated_at": "2026-10-26T20:54:51Z", "pushed_at": "2026-05-20T11:17:39Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-2991.json b/2026/CVE-2026-2991.json index 4ec46d230b..519e56a3cc 100644 --- a/2026/CVE-2026-2991.json +++ b/2026/CVE-2026-2991.json @@ -14,10 +14,10 @@ "description": "PoC exploit for CVE-2026-2991 — authentication bypass in KiviCare WordPress plugin (≤4.1.2) allowing unauthenticated patient account takeover and admin session extraction.", "fork": false, "created_at": "2026-03-18T19:09:24Z", - "updated_at": "2026-08-19T08:07:19Z", + "updated_at": "2026-10-26T21:13:25Z", "pushed_at": "2026-03-18T19:25:25Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -43,7 +43,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 3, + "watchers": 4, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-31431.json b/2026/CVE-2026-31431.json index cfaa93a159..80d50de3ec 100644 --- a/2026/CVE-2026-31431.json +++ b/2026/CVE-2026-31431.json @@ -5457,7 +5457,7 @@ "stargazers_count": 9, "watchers_count": 9, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -5465,7 +5465,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 9, "score": 0, "subscribers_count": 0 @@ -11282,10 +11282,10 @@ "description": "Copy Fail exploit for Ubuntu 20.04 with legacy Python versions, including script to hide Copy Fail.", "fork": false, "created_at": "2026-10-23T08:21:40Z", - "updated_at": "2026-10-23T14:06:12Z", + "updated_at": "2026-10-26T20:26:42Z", "pushed_at": "2026-10-23T14:06:06Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -11304,7 +11304,7 @@ ], "visibility": "public", "forks": 1, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-3609.json b/2026/CVE-2026-3609.json index cd765e48ff..3f3fc5e4fa 100644 --- a/2026/CVE-2026-3609.json +++ b/2026/CVE-2026-3609.json @@ -14,10 +14,10 @@ "description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).", "fork": false, "created_at": "2023-12-05T14:52:11Z", - "updated_at": "2026-10-26T18:50:04Z", + "updated_at": "2026-10-26T20:13:17Z", "pushed_at": "2026-08-18T12:25:25Z", - "stargazers_count": 989, - "watchers_count": 989, + "stargazers_count": 990, + "watchers_count": 990, "has_discussions": false, "forks_count": 147, "allow_forking": true, @@ -39,7 +39,7 @@ ], "visibility": "public", "forks": 147, - "watchers": 989, + "watchers": 990, "score": 0, "subscribers_count": 22 }, diff --git a/2024/CVE-2024-43047.json b/2026/CVE-2026-38903.json similarity index 54% rename from 2024/CVE-2024-43047.json rename to 2026/CVE-2026-38903.json index b3f00437fa..8c6edfff29 100644 --- a/2024/CVE-2024-43047.json +++ b/2026/CVE-2026-38903.json @@ -1,21 +1,21 @@ [ { - "id": 1434745864, - "name": "sonim-x320-root", - "full_name": "JMTDI\/sonim-x320-root", + "id": 1434880115, + "name": "CVE-2026-38903", + "full_name": "Lenard-BIDaaS\/CVE-2026-38903", "owner": { - "login": "JMTDI", - "id": 212186038, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/212186038?v=4", - "html_url": "https:\/\/github.com\/JMTDI", + "login": "Lenard-BIDaaS", + "id": 293694992, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/293694992?v=4", + "html_url": "https:\/\/github.com\/Lenard-BIDaaS", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/JMTDI\/sonim-x320-root", - "description": "Exploit-based root for Sonim X320 (CVE-2024-43047)", + "html_url": "https:\/\/github.com\/Lenard-BIDaaS\/CVE-2026-38903", + "description": null, "fork": false, - "created_at": "2026-10-26T17:58:19Z", - "updated_at": "2026-10-26T17:58:25Z", - "pushed_at": "2026-10-26T17:58:21Z", + "created_at": "2026-10-26T20:10:14Z", + "updated_at": "2026-10-26T20:46:20Z", + "pushed_at": "2026-10-26T20:42:35Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-3891.json b/2026/CVE-2026-3891.json index 15862f1856..f0ed49456a 100644 --- a/2026/CVE-2026-3891.json +++ b/2026/CVE-2026-3891.json @@ -14,10 +14,10 @@ "description": "Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload (CVE-2026-3891) PoC", "fork": false, "created_at": "2026-03-13T20:33:42Z", - "updated_at": "2026-08-19T13:35:10Z", + "updated_at": "2026-10-26T21:13:47Z", "pushed_at": "2026-03-13T21:20:37Z", - "stargazers_count": 7, - "watchers_count": 7, + "stargazers_count": 8, + "watchers_count": 8, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -43,7 +43,7 @@ ], "visibility": "public", "forks": 1, - "watchers": 7, + "watchers": 8, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-40369.json b/2026/CVE-2026-40369.json index e900623a59..8caa186a71 100644 --- a/2026/CVE-2026-40369.json +++ b/2026/CVE-2026-40369.json @@ -14,12 +14,12 @@ "description": "Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browsers render process sandbox", "fork": false, "created_at": "2026-05-13T20:56:15Z", - "updated_at": "2026-10-17T02:31:05Z", + "updated_at": "2026-10-27T01:39:56Z", "pushed_at": "2026-05-18T21:29:59Z", - "stargazers_count": 264, - "watchers_count": 264, + "stargazers_count": 272, + "watchers_count": 272, "has_discussions": false, - "forks_count": 62, + "forks_count": 63, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,8 +27,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 62, - "watchers": 264, + "forks": 63, + "watchers": 272, "score": 0, "subscribers_count": 6 }, diff --git a/2026/CVE-2026-41089.json b/2026/CVE-2026-41089.json index 76db6f8d54..32160810b7 100644 --- a/2026/CVE-2026-41089.json +++ b/2026/CVE-2026-41089.json @@ -227,52 +227,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1307172425, - "name": "CVE-2026-41089-Netlogon-RCE", - "full_name": "HydraSoft\/CVE-2026-41089-Netlogon-RCE", - "owner": { - "login": "HydraSoft", - "id": 306914243, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/306914243?v=4", - "html_url": "https:\/\/github.com\/HydraSoft", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/HydraSoft\/CVE-2026-41089-Netlogon-RCE", - "description": "Technical analysis and Proof-of-Concept (PoC) for CVE-2026-41089, a critical unauthenticated Remote Code Execution (RCE) vulnerability in the Windows Netlogon service affecting Domain Controllers.", - "fork": false, - "created_at": "2026-07-21T02:05:07Z", - "updated_at": "2026-10-01T02:44:05Z", - "pushed_at": "2026-08-24T04:08:31Z", - "stargazers_count": 34, - "watchers_count": 34, - "has_discussions": false, - "forks_count": 10, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "active-directory", - "buffer-overflow", - "cve-2026-41089", - "cybersecurity", - "domain-controller", - "exploit-poc", - "netlogon-rce", - "privilege-escalation", - "remote-code-execution", - "threat-hunting", - "windows-security", - "zero-day" - ], - "visibility": "public", - "forks": 10, - "watchers": 34, - "score": 0, - "subscribers_count": 3 - }, { "id": 1308986120, "name": "CVE-2026-41089-Netlogon-RCE", @@ -334,10 +288,10 @@ "description": "🛡️ Official AI Security Tool diagnostic module for CVE-2026-41089 (Windows Netlogon Stack Buffer Overflow RCE). Features technical writeup, attack architecture, IoCs, and mitigation strategy.", "fork": false, "created_at": "2026-09-10T21:39:19Z", - "updated_at": "2026-09-29T14:31:13Z", + "updated_at": "2026-10-27T00:45:15Z", "pushed_at": "2026-09-29T14:30:55Z", - "stargazers_count": 5, - "watchers_count": 5, + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -361,7 +315,7 @@ ], "visibility": "public", "forks": 3, - "watchers": 5, + "watchers": 4, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-43284.json b/2026/CVE-2026-43284.json index 3b809fff8f..0e6cb0b950 100644 --- a/2026/CVE-2026-43284.json +++ b/2026/CVE-2026-43284.json @@ -1475,38 +1475,5 @@ "watchers": 3, "score": 0, "subscribers_count": 0 - }, - { - "id": 1432721297, - "name": "DFRoot", - "full_name": "yameteeee-kudasaiiiiiii90\/DFRoot", - "owner": { - "login": "yameteeee-kudasaiiiiiii90", - "id": 333906014, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/333906014?v=4", - "html_url": "https:\/\/github.com\/yameteeee-kudasaiiiiiii90", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/yameteeee-kudasaiiiiiii90\/DFRoot", - "description": "Fork of datfooldive\/DFRoot (DirtyFrag CVE-2026-43284, ReSukiSU) + GitHub Actions APK build", - "fork": false, - "created_at": "2026-10-25T00:58:27Z", - "updated_at": "2026-10-25T20:26:31Z", - "pushed_at": "2026-10-25T01:04:13Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-43499.json b/2026/CVE-2026-43499.json index 9cafba0b13..2c71b84bcc 100644 --- a/2026/CVE-2026-43499.json +++ b/2026/CVE-2026-43499.json @@ -538,7 +538,7 @@ "stargazers_count": 113, "watchers_count": 113, "has_discussions": false, - "forks_count": 34, + "forks_count": 35, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -546,7 +546,7 @@ "pull_request_creation_policy": "collaborators_only", "topics": [], "visibility": "public", - "forks": 34, + "forks": 35, "watchers": 113, "score": 0, "subscribers_count": 0 @@ -1709,12 +1709,12 @@ "description": "GhostLock One-Tap Execution App (CVE-2026-43499)", "fork": false, "created_at": "2026-07-29T05:04:25Z", - "updated_at": "2026-10-26T19:33:01Z", - "pushed_at": "2026-10-25T18:09:37Z", - "stargazers_count": 2304, - "watchers_count": 2304, + "updated_at": "2026-10-27T01:31:15Z", + "pushed_at": "2026-10-27T01:19:45Z", + "stargazers_count": 2313, + "watchers_count": 2313, "has_discussions": true, - "forks_count": 563, + "forks_count": 564, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1722,8 +1722,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 563, - "watchers": 2304, + "forks": 564, + "watchers": 2313, "score": 0, "subscribers_count": 37 }, @@ -2077,10 +2077,10 @@ "description": "Jailbreak supported Google Pixel phones with CVE-2026-43499", "fork": false, "created_at": "2026-08-02T17:34:45Z", - "updated_at": "2026-10-26T07:18:58Z", + "updated_at": "2026-10-26T23:02:41Z", "pushed_at": "2026-09-13T16:31:27Z", - "stargazers_count": 468, - "watchers_count": 468, + "stargazers_count": 469, + "watchers_count": 469, "has_discussions": false, "forks_count": 72, "allow_forking": true, @@ -2098,7 +2098,7 @@ ], "visibility": "public", "forks": 72, - "watchers": 468, + "watchers": 469, "score": 0, "subscribers_count": 8 }, @@ -3006,7 +3006,7 @@ "stargazers_count": 48, "watchers_count": 48, "has_discussions": false, - "forks_count": 12, + "forks_count": 13, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -3014,7 +3014,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 12, + "forks": 13, "watchers": 48, "score": 0, "subscribers_count": 2 @@ -3892,10 +3892,10 @@ "description": "Validated GhostLock CVE-2026-43499 port for NVIDIA Shield TV Pro mdarcy 9.2.4", "fork": false, "created_at": "2026-09-08T22:09:41Z", - "updated_at": "2026-10-17T22:03:53Z", + "updated_at": "2026-10-26T23:39:28Z", "pushed_at": "2026-09-09T01:11:09Z", - "stargazers_count": 5, - "watchers_count": 5, + "stargazers_count": 6, + "watchers_count": 6, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -3913,7 +3913,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 5, + "watchers": 6, "score": 0, "subscribers_count": 1 }, @@ -4326,10 +4326,10 @@ "description": "CVE-2026-43499 GhostLock root exploit for Chromecast with Google TV (sabrina)", "fork": false, "created_at": "2026-09-14T19:58:49Z", - "updated_at": "2026-10-25T14:53:45Z", + "updated_at": "2026-10-26T22:48:31Z", "pushed_at": "2026-09-17T18:16:42Z", - "stargazers_count": 10, - "watchers_count": 10, + "stargazers_count": 12, + "watchers_count": 12, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -4347,7 +4347,7 @@ ], "visibility": "public", "forks": 3, - "watchers": 10, + "watchers": 12, "score": 0, "subscribers_count": 0 }, @@ -5903,8 +5903,8 @@ "description": "GhostLock (CVE-2026-43499) root for Sony Xperia 1 VI — locked bootloader, adb only, per-boot KernelSU", "fork": false, "created_at": "2026-10-26T19:07:09Z", - "updated_at": "2026-10-26T19:17:41Z", - "pushed_at": "2026-10-26T19:17:36Z", + "updated_at": "2026-10-26T20:39:26Z", + "pushed_at": "2026-10-26T20:39:22Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-110372.json b/2026/CVE-2026-43621.json similarity index 53% rename from 2026/CVE-2026-110372.json rename to 2026/CVE-2026-43621.json index e8220165ef..179a6fd807 100644 --- a/2026/CVE-2026-110372.json +++ b/2026/CVE-2026-43621.json @@ -1,21 +1,21 @@ [ { - "id": 1427884496, - "name": "CVE-2026-110372-MASS-EXPLOIT-WEBSHELL.STORE", - "full_name": "BIBILZERODAY\/CVE-2026-110372-MASS-EXPLOIT-WEBSHELL.STORE", + "id": 1435063061, + "name": "CVE-2026-43621", + "full_name": "KharalDipendra\/CVE-2026-43621", "owner": { - "login": "BIBILZERODAY", - "id": 318742045, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/318742045?v=4", - "html_url": "https:\/\/github.com\/BIBILZERODAY", + "login": "KharalDipendra", + "id": 45440343, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/45440343?v=4", + "html_url": "https:\/\/github.com\/KharalDipendra", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/BIBILZERODAY\/CVE-2026-110372-MASS-EXPLOIT-WEBSHELL.STORE", + "html_url": "https:\/\/github.com\/KharalDipendra\/CVE-2026-43621", "description": null, "fork": false, - "created_at": "2026-10-21T04:41:56Z", - "updated_at": "2026-10-21T04:42:09Z", - "pushed_at": "2026-10-21T04:42:06Z", + "created_at": "2026-10-27T00:13:20Z", + "updated_at": "2026-10-27T00:15:01Z", + "pushed_at": "2026-10-27T00:14:56Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-4372.json b/2026/CVE-2026-4372.json index cb82406e6b..e3a70e85df 100644 --- a/2026/CVE-2026-4372.json +++ b/2026/CVE-2026-4372.json @@ -14,8 +14,8 @@ "description": "CVE-2026-4372: Threat Model, Root-Cause Analysis, Replication & Detection", "fork": false, "created_at": "2026-10-14T02:18:39Z", - "updated_at": "2026-10-26T13:25:04Z", - "pushed_at": "2026-10-26T17:17:39Z", + "updated_at": "2026-10-26T23:08:34Z", + "pushed_at": "2026-10-26T23:08:29Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-49772.json b/2026/CVE-2026-49772.json index f5b036d05b..90078e8e27 100644 --- a/2026/CVE-2026-49772.json +++ b/2026/CVE-2026-49772.json @@ -14,10 +14,10 @@ "description": "CVE-2026-49772 — The Events Calendar (WordPress) unauthenticated blind SQLi PoC", "fork": false, "created_at": "2026-06-22T21:02:56Z", - "updated_at": "2026-08-19T08:07:04Z", + "updated_at": "2026-10-26T21:14:27Z", "pushed_at": "2026-06-22T21:05:24Z", - "stargazers_count": 4, - "watchers_count": 4, + "stargazers_count": 5, + "watchers_count": 5, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -41,7 +41,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 4, + "watchers": 5, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-49881.json b/2026/CVE-2026-49881.json index fab0449817..0046f5f55c 100644 --- a/2026/CVE-2026-49881.json +++ b/2026/CVE-2026-49881.json @@ -14,12 +14,12 @@ "description": "Android complete exploit chain that enables privilege escalation from a local untrusted app to root\/kernel, combination of CVE-2026-49881 and CVE-2026-43284", "fork": false, "created_at": "2026-07-23T07:01:34Z", - "updated_at": "2026-10-26T15:57:47Z", + "updated_at": "2026-10-27T00:40:56Z", "pushed_at": "2026-09-09T00:47:49Z", - "stargazers_count": 479, - "watchers_count": 479, + "stargazers_count": 480, + "watchers_count": 480, "has_discussions": false, - "forks_count": 107, + "forks_count": 108, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,8 +27,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 107, - "watchers": 479, + "forks": 108, + "watchers": 480, "score": 0, "subscribers_count": 7 }, diff --git a/2026/CVE-2026-54806.json b/2026/CVE-2026-54806.json index b6ac472772..a064ded0c6 100644 --- a/2026/CVE-2026-54806.json +++ b/2026/CVE-2026-54806.json @@ -14,10 +14,10 @@ "description": "Unauthenticated PHP Object Injection to RCE in WP Activity Log <= 5.6.3.1 (CVE-2026-54806)", "fork": false, "created_at": "2026-06-22T16:11:25Z", - "updated_at": "2026-09-29T00:57:36Z", + "updated_at": "2026-10-26T21:14:32Z", "pushed_at": "2026-06-22T16:12:29Z", - "stargazers_count": 14, - "watchers_count": 14, + "stargazers_count": 15, + "watchers_count": 15, "has_discussions": false, "forks_count": 5, "allow_forking": true, @@ -42,7 +42,7 @@ ], "visibility": "public", "forks": 5, - "watchers": 14, + "watchers": 15, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-58231.json b/2026/CVE-2026-58231.json index 63abc162c7..29a0aec78a 100644 --- a/2026/CVE-2026-58231.json +++ b/2026/CVE-2026-58231.json @@ -64,38 +64,5 @@ "watchers": 0, "score": 0, "subscribers_count": 0 - }, - { - "id": 1354542167, - "name": "CVE-2026-58231", - "full_name": "SAP-system-update\/CVE-2026-58231", - "owner": { - "login": "SAP-system-update", - "id": 215716275, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/215716275?v=4", - "html_url": "https:\/\/github.com\/SAP-system-update", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SAP-system-update\/CVE-2026-58231", - "description": null, - "fork": false, - "created_at": "2026-09-02T08:52:46Z", - "updated_at": "2026-09-02T08:54:43Z", - "pushed_at": "2026-09-02T08:53:15Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-60137.json b/2026/CVE-2026-60137.json index 9629a0b4c7..b7cb7a2ca8 100644 --- a/2026/CVE-2026-60137.json +++ b/2026/CVE-2026-60137.json @@ -356,38 +356,5 @@ "watchers": 0, "score": 0, "subscribers_count": 0 - }, - { - "id": 1422650114, - "name": "CVE-2026-60137---WordPress-Core-Critical-SQL-Injection-SQLi-PoC", - "full_name": "BIBILZERODAY\/CVE-2026-60137---WordPress-Core-Critical-SQL-Injection-SQLi-PoC", - "owner": { - "login": "BIBILZERODAY", - "id": 318742045, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/318742045?v=4", - "html_url": "https:\/\/github.com\/BIBILZERODAY", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/BIBILZERODAY\/CVE-2026-60137---WordPress-Core-Critical-SQL-Injection-SQLi-PoC", - "description": null, - "fork": false, - "created_at": "2026-10-16T20:38:38Z", - "updated_at": "2026-10-16T20:38:55Z", - "pushed_at": "2026-10-16T20:38:51Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-63030.json b/2026/CVE-2026-63030.json index ea7d8a74b7..3ef2cc73fb 100644 --- a/2026/CVE-2026-63030.json +++ b/2026/CVE-2026-63030.json @@ -1644,8 +1644,8 @@ "description": "PoC detector & safe validator for the WP2Shell WordPress vulnerability chain: CVE-2026-63030 (REST batch-route confusion) + CVE-2026-60137 (author__not_in SQL injection). For authorized security testing only.", "fork": false, "created_at": "2026-07-21T17:51:33Z", - "updated_at": "2026-07-21T17:51:48Z", - "pushed_at": "2026-07-21T17:51:37Z", + "updated_at": "2026-10-26T20:46:19Z", + "pushed_at": "2026-10-26T20:46:16Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-6307.json b/2026/CVE-2026-6307.json index 78ff66c2a4..8711a9cdc2 100644 --- a/2026/CVE-2026-6307.json +++ b/2026/CVE-2026-6307.json @@ -14,12 +14,12 @@ "description": "Google Chrome CVE-2026-6307 PoC", "fork": false, "created_at": "2026-07-01T13:23:25Z", - "updated_at": "2026-10-05T01:02:24Z", + "updated_at": "2026-10-26T20:30:11Z", "pushed_at": "2026-07-01T13:32:36Z", - "stargazers_count": 67, - "watchers_count": 67, + "stargazers_count": 68, + "watchers_count": 68, "has_discussions": false, - "forks_count": 14, + "forks_count": 15, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,8 +27,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 14, - "watchers": 67, + "forks": 15, + "watchers": 68, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-64560.json b/2026/CVE-2026-64560.json index 1cce630c54..98fd9629a7 100644 --- a/2026/CVE-2026-64560.json +++ b/2026/CVE-2026-64560.json @@ -564,12 +564,12 @@ "description": "OnePlus 16 (PYB110) jailbreak: CVE-2026-64560 + KernelSU \/ KernelSU Next \/ BakaSU \/ SukiSU Ultra LKM", "fork": false, "created_at": "2026-10-20T09:43:06Z", - "updated_at": "2026-10-26T17:47:56Z", + "updated_at": "2026-10-26T23:17:54Z", "pushed_at": "2026-10-26T17:47:52Z", - "stargazers_count": 4, - "watchers_count": 4, + "stargazers_count": 5, + "watchers_count": 5, "has_discussions": false, - "forks_count": 2, + "forks_count": 3, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -577,8 +577,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 2, - "watchers": 4, + "forks": 3, + "watchers": 5, "score": 0, "subscribers_count": 0 }, @@ -597,10 +597,10 @@ "description": "越狱助手 · RootKit for Honor Magic9 (CVE-2026-64560 → cred 写 → 自制内核模块 → KernelSU)，Flutter + Shizuku 一键 root", "fork": false, "created_at": "2026-10-24T18:21:20Z", - "updated_at": "2026-10-26T09:57:18Z", - "pushed_at": "2026-10-26T19:37:11Z", - "stargazers_count": 1, - "watchers_count": 1, + "updated_at": "2026-10-26T21:26:50Z", + "pushed_at": "2026-10-27T00:50:03Z", + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -611,7 +611,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-65400.json b/2026/CVE-2026-65400.json index 5635068704..982c10eafb 100644 --- a/2026/CVE-2026-65400.json +++ b/2026/CVE-2026-65400.json @@ -52,7 +52,7 @@ "stargazers_count": 9, "watchers_count": 9, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -69,7 +69,7 @@ "vulnerability-research" ], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 9, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-61979.json b/2026/CVE-2026-77647.json similarity index 50% rename from 2026/CVE-2026-61979.json rename to 2026/CVE-2026-77647.json index 7b66e8df91..7580c0319a 100644 --- a/2026/CVE-2026-61979.json +++ b/2026/CVE-2026-77647.json @@ -1,21 +1,21 @@ [ { - "id": 1422650576, - "name": "CVE-2026-61979-miniOrange-SAML-Auth-Bypass-Exploit", - "full_name": "BIBILZERODAY\/CVE-2026-61979-miniOrange-SAML-Auth-Bypass-Exploit", + "id": 1435024241, + "name": "CVE-2026-77647", + "full_name": "Nxploited\/CVE-2026-77647", "owner": { - "login": "BIBILZERODAY", - "id": 318742045, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/318742045?v=4", - "html_url": "https:\/\/github.com\/BIBILZERODAY", + "login": "Nxploited", + "id": 188819918, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4", + "html_url": "https:\/\/github.com\/Nxploited", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/BIBILZERODAY\/CVE-2026-61979-miniOrange-SAML-Auth-Bypass-Exploit", - "description": null, + "html_url": "https:\/\/github.com\/Nxploited\/CVE-2026-77647", + "description": "SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code", "fork": false, - "created_at": "2026-10-16T20:39:12Z", - "updated_at": "2026-10-16T20:39:28Z", - "pushed_at": "2026-10-16T20:39:23Z", + "created_at": "2026-10-26T23:12:44Z", + "updated_at": "2026-10-26T23:14:44Z", + "pushed_at": "2026-10-26T23:14:40Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-78306.json b/2026/CVE-2026-78306.json index c6b1a746b4..91d34e9a7c 100644 --- a/2026/CVE-2026-78306.json +++ b/2026/CVE-2026-78306.json @@ -19,7 +19,7 @@ "stargazers_count": 19, "watchers_count": 19, "has_discussions": false, - "forks_count": 6, + "forks_count": 7, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 6, + "forks": 7, "watchers": 19, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-90931.json b/2026/CVE-2026-90931.json new file mode 100644 index 0000000000..20d58fcd59 --- /dev/null +++ b/2026/CVE-2026-90931.json @@ -0,0 +1,41 @@ +[ + { + "id": 1435041582, + "name": "CVE-2026-90931", + "full_name": "capivara-research\/CVE-2026-90931", + "owner": { + "login": "capivara-research", + "id": 287438663, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/287438663?v=4", + "html_url": "https:\/\/github.com\/capivara-research", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/capivara-research\/CVE-2026-90931", + "description": "CVE-2026-90931: LaraDashboard stored XSS via SVG upload — bilingual analysis and safe PoC", + "fork": false, + "created_at": "2026-10-26T23:39:24Z", + "updated_at": "2026-10-26T23:40:26Z", + "pushed_at": "2026-10-26T23:39:30Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve", + "cybersecurity", + "laradashboard", + "proof-of-concept", + "xss" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-90932.json b/2026/CVE-2026-90932.json new file mode 100644 index 0000000000..ba21ed85cf --- /dev/null +++ b/2026/CVE-2026-90932.json @@ -0,0 +1,41 @@ +[ + { + "id": 1435041650, + "name": "CVE-2026-90932", + "full_name": "capivara-research\/CVE-2026-90932", + "owner": { + "login": "capivara-research", + "id": 287438663, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/287438663?v=4", + "html_url": "https:\/\/github.com\/capivara-research", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/capivara-research\/CVE-2026-90932", + "description": "CVE-2026-90932: LaraDashboard path traversal to arbitrary file deletion\/write — bilingual analysis and safe PoC", + "fork": false, + "created_at": "2026-10-26T23:39:32Z", + "updated_at": "2026-10-26T23:44:21Z", + "pushed_at": "2026-10-26T23:39:38Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 1, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve", + "cybersecurity", + "laradashboard", + "path-traversal", + "proof-of-concept" + ], + "visibility": "public", + "forks": 1, + "watchers": 1, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-98260.json b/2026/CVE-2026-98260.json index 7046a3cc13..3da4748301 100644 --- a/2026/CVE-2026-98260.json +++ b/2026/CVE-2026-98260.json @@ -47,10 +47,10 @@ "description": "CVE-2026-98260 (Timer) Android\/ARM64 port", "fork": false, "created_at": "2026-10-18T23:26:39Z", - "updated_at": "2026-10-26T04:41:49Z", + "updated_at": "2026-10-27T01:03:58Z", "pushed_at": "2026-10-25T05:35:18Z", - "stargazers_count": 16, - "watchers_count": 16, + "stargazers_count": 17, + "watchers_count": 17, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 6, - "watchers": 16, + "watchers": 17, "score": 0, "subscribers_count": 0 }, @@ -179,10 +179,10 @@ "description": "Shizuku-driven CVE-2026-98260 root + KernelSU runtime LKM loader for Xiaomi yingtian \/ lhasa (kernel 6.18.21)", "fork": false, "created_at": "2026-10-25T12:51:04Z", - "updated_at": "2026-10-26T13:43:41Z", + "updated_at": "2026-10-26T21:34:23Z", "pushed_at": "2026-10-25T19:06:56Z", - "stargazers_count": 14, - "watchers_count": 14, + "stargazers_count": 15, + "watchers_count": 15, "has_discussions": false, "forks_count": 8, "allow_forking": true, @@ -202,7 +202,7 @@ ], "visibility": "public", "forks": 8, - "watchers": 14, + "watchers": 15, "score": 0, "subscribers_count": 0 }, @@ -322,6 +322,45 @@ "score": 0, "subscribers_count": 0 }, + { + "id": 1434148482, + "name": "xring-cve-2026-98260", + "full_name": "Lw5959\/xring-cve-2026-98260", + "owner": { + "login": "Lw5959", + "id": 119849622, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/119849622?v=4", + "html_url": "https:\/\/github.com\/Lw5959", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Lw5959\/xring-cve-2026-98260", + "description": "CVE-2026-98260（fs\/exec.c POSIX CPU timer UAF）XRING O1 \/ Android 17 \/ 6.18.21 研究记录与 PC 一键流程（授权设备安全研究）", + "fork": false, + "created_at": "2026-10-26T09:12:27Z", + "updated_at": "2026-10-27T01:45:29Z", + "pushed_at": "2026-10-27T01:45:25Z", + "stargazers_count": 6, + "watchers_count": 6, + "has_discussions": false, + "forks_count": 2, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "android-kernel", + "cve-2026-98260", + "kernelsu", + "security-research", + "xring" + ], + "visibility": "public", + "forks": 2, + "watchers": 6, + "score": 0, + "subscribers_count": 0 + }, { "id": 1434169714, "name": "CVE-2026-98260-Analysis", @@ -356,22 +395,22 @@ "subscribers_count": 0 }, { - "id": 1434666603, - "name": "CVE-2026-98260", - "full_name": "woshigenm\/CVE-2026-98260", + "id": 1434516481, + "name": "violin-CVE-2026-98260-OS4.0", + "full_name": "ChaYeWuu\/violin-CVE-2026-98260-OS4.0", "owner": { - "login": "woshigenm", - "id": 99122353, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/99122353?v=4", - "html_url": "https:\/\/github.com\/woshigenm", + "login": "ChaYeWuu", + "id": 56117290, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/56117290?v=4", + "html_url": "https:\/\/github.com\/ChaYeWuu", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/woshigenm\/CVE-2026-98260", - "description": "Android LPE (CVE-2026-98260) on Honor MagicPad3 Pro 13.3 (YLP-W00), kernel 6.12.38 — PoC\/EXP, uid-0 shell, KernelSU app", + "html_url": "https:\/\/github.com\/ChaYeWuu\/violin-CVE-2026-98260-OS4.0", + "description": "Xiaomi Pad7S Pro12.5在OS4.0.0.14.XOTCNXM利用CVE-2026-98260获取ROOT权限并加载KernelSU。", "fork": false, - "created_at": "2026-10-26T16:49:03Z", - "updated_at": "2026-10-26T16:59:45Z", - "pushed_at": "2026-10-26T19:04:56Z", + "created_at": "2026-10-26T14:44:21Z", + "updated_at": "2026-10-27T01:24:33Z", + "pushed_at": "2026-10-27T01:24:27Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -387,5 +426,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1434666603, + "name": "CVE-2026-98260", + "full_name": "woshigenm\/CVE-2026-98260", + "owner": { + "login": "woshigenm", + "id": 99122353, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/99122353?v=4", + "html_url": "https:\/\/github.com\/woshigenm", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/woshigenm\/CVE-2026-98260", + "description": "Android LPE (CVE-2026-98260) on Honor MagicPad3 Pro 13.3 (YLP-W00), kernel 6.12.38 — PoC\/EXP, uid-0 shell, KernelSU app", + "fork": false, + "created_at": "2026-10-26T16:49:03Z", + "updated_at": "2026-10-27T00:27:18Z", + "pushed_at": "2026-10-26T19:04:56Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file