From 7e00699c6ddff4d98f3f7c4075f9eca98d7b56cc Mon Sep 17 00:00:00 2001 From: motikan2010-bot Date: Fri, 6 Nov 2026 22:52:20 +0900 Subject: [PATCH] Auto Update 2026/11/06 13:52:20 --- 2015/CVE-2015-1805.json | 8 +- 2017/CVE-2017-12615.json | 8 +- 2017/CVE-2017-5638.json | 4 +- 2019/CVE-2019-10744.json | 33 +++ 2019/CVE-2019-9513.json | 35 +++ 2020/CVE-2020-13927.json | 2 +- 2020/CVE-2020-14883.json | 4 +- 2020/CVE-2020-15368.json | 8 +- 2021/CVE-2021-0928.json | 4 +- 2021/CVE-2021-21300.json | 33 +++ 2021/CVE-2021-23017.json | 8 +- 2021/CVE-2021-25646.json | 4 +- 2021/CVE-2021-28879.json | 35 +++ 2021/CVE-2021-34527.json | 8 +- 2021/CVE-2021-3493.json | 4 +- 2021/CVE-2021-44228.json | 2 +- 2022/CVE-2022-0778.json | 33 +++ 2022/CVE-2022-24765.json | 35 +++ 2022/CVE-2022-25235.json | 33 +++ 2022/CVE-2022-25236.json | 33 +++ 2022/CVE-2022-36551.json | 2 +- 2022/CVE-2022-38181.json | 8 +- 2022/CVE-2022-38694.json | 16 +- 2023/CVE-2023-0297.json | 2 +- 2023/CVE-2023-44487.json | 33 +++ 2023/CVE-2023-48795.json | 33 +++ 2024/CVE-2024-21762.json | 12 +- 2024/CVE-2024-22203.json | 2 +- 2024/CVE-2024-24576.json | 33 +++ 2024/CVE-2024-27876.json | 8 +- 2024/CVE-2024-45337.json | 2 +- 2024/CVE-2024-45846.json | 2 +- 2024/CVE-2024-55947.json | 2 +- 2024/CVE-2024-9264.json | 2 +- 2025/CVE-2025-10184.json | 8 +- 2025/CVE-2025-24203.json | 4 +- 2025/CVE-2025-49132.json | 8 +- 2025/CVE-2025-50460.json | 2 +- 2025/CVE-2025-52915.json | 8 +- 2025/CVE-2025-55182.json | 16 +- 2025/CVE-2025-8110.json | 2 +- 2025/CVE-2025-9974.json | 8 +- 2026/CVE-2026-0264.json | 35 +++ 2026/CVE-2026-100109.json | 35 +++ 2026/CVE-2026-102578.json | 8 +- 2026/CVE-2026-109519.json | 8 +- 2026/CVE-2026-109618.json | 60 ++--- 2026/CVE-2026-109619.json | 45 +--- 2026/CVE-2026-111497.json | 18 +- 2026/CVE-2026-112688.json | 8 +- 2026/CVE-2026-114509.json | 8 +- 2026/CVE-2026-114612.json | 4 +- 2026/CVE-2026-114630.json | 35 +++ 2026/CVE-2026-118306.json | 8 +- 2026/CVE-2026-118423.json | 35 +++ 2026/CVE-2026-118569.json | 4 +- .../CVE-2026-118570.json | 24 +- 2026/CVE-2026-119977.json | 8 +- 2026/CVE-2026-120209.json | 35 +++ 2026/CVE-2026-121720.json | 12 +- 2026/CVE-2026-123025.json | 35 +++ 2026/CVE-2026-123158.json | 236 +++++++++++++++++- 2026/CVE-2026-19219.json | 37 +++ 2026/CVE-2026-19586.json | 4 +- 2026/CVE-2026-20253.json | 38 +++ 2026/CVE-2026-20687.json | 8 +- 2026/CVE-2026-20980.json | 2 +- 2026/CVE-2026-28576.json | 8 +- 2026/CVE-2026-33017.json | 40 +++ 2026/CVE-2026-33871.json | 35 +++ 2026/CVE-2026-3609.json | 2 +- 2026/CVE-2026-39987.json | 17 +- 2026/CVE-2026-41940.json | 8 +- 2026/CVE-2026-43284.json | 41 +++ 2026/CVE-2026-43499.json | 198 ++++++++++----- 2026/CVE-2026-50679.json | 35 +++ 2026/CVE-2026-5281.json | 8 +- 2026/CVE-2026-6023.json | 37 +++ 2026/CVE-2026-64560.json | 16 +- 2026/CVE-2026-75604.json | 8 +- 2026/CVE-2026-83844.json | 73 ++++++ 2026/CVE-2026-9082.json | 8 +- 2026/CVE-2026-97229.json | 41 ++- 2026/CVE-2026-98260.json | 232 +++++++++++++---- 2026/CVE-2026-98432.json | 47 +++- 85 files changed, 1771 insertions(+), 380 deletions(-) create mode 100644 2019/CVE-2019-9513.json create mode 100644 2021/CVE-2021-28879.json create mode 100644 2022/CVE-2022-24765.json create mode 100644 2026/CVE-2026-0264.json create mode 100644 2026/CVE-2026-100109.json create mode 100644 2026/CVE-2026-114630.json create mode 100644 2026/CVE-2026-118423.json rename 2015/CVE-2015-9331.json => 2026/CVE-2026-118570.json (55%) create mode 100644 2026/CVE-2026-120209.json create mode 100644 2026/CVE-2026-123025.json create mode 100644 2026/CVE-2026-19219.json create mode 100644 2026/CVE-2026-33871.json create mode 100644 2026/CVE-2026-50679.json create mode 100644 2026/CVE-2026-6023.json create mode 100644 2026/CVE-2026-83844.json diff --git a/2015/CVE-2015-1805.json b/2015/CVE-2015-1805.json index 50ae1b6a2f..c905e770e5 100644 --- a/2015/CVE-2015-1805.json +++ b/2015/CVE-2015-1805.json @@ -47,10 +47,10 @@ "description": "CVE-2015-1805 root tool", "fork": false, "created_at": "2016-04-01T12:10:14Z", - "updated_at": "2026-10-30T04:27:45Z", + "updated_at": "2026-11-06T12:00:16Z", "pushed_at": "2017-11-23T20:55:03Z", - "stargazers_count": 276, - "watchers_count": 276, + "stargazers_count": 275, + "watchers_count": 275, "has_discussions": false, "forks_count": 146, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 146, - "watchers": 276, + "watchers": 275, "score": 0, "subscribers_count": 18 }, diff --git a/2017/CVE-2017-12615.json b/2017/CVE-2017-12615.json index ec0ba67489..80bc069883 100644 --- a/2017/CVE-2017-12615.json +++ b/2017/CVE-2017-12615.json @@ -410,10 +410,10 @@ "description": "tomcat自动化漏洞扫描利用工具，支持批量弱口令检测、后台部署war包getshell、CVE-2017-12615 文件上传、CVE-2020-1938\/CNVD-2020-10487 文件包含", "fork": false, "created_at": "2024-08-29T06:38:16Z", - "updated_at": "2026-10-30T18:40:40Z", + "updated_at": "2026-11-06T06:49:02Z", "pushed_at": "2026-06-16T13:16:53Z", - "stargazers_count": 297, - "watchers_count": 297, + "stargazers_count": 298, + "watchers_count": 298, "has_discussions": false, "forks_count": 24, "allow_forking": true, @@ -432,7 +432,7 @@ ], "visibility": "public", "forks": 24, - "watchers": 297, + "watchers": 298, "score": 0, "subscribers_count": 2 }, diff --git a/2017/CVE-2017-5638.json b/2017/CVE-2017-5638.json index b817b57697..c4406fbfd5 100644 --- a/2017/CVE-2017-5638.json +++ b/2017/CVE-2017-5638.json @@ -460,7 +460,7 @@ "stargazers_count": 444, "watchers_count": 444, "has_discussions": false, - "forks_count": 133, + "forks_count": 132, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -474,7 +474,7 @@ "struts-pwn" ], "visibility": "public", - "forks": 133, + "forks": 132, "watchers": 444, "score": 0, "subscribers_count": 21 diff --git a/2019/CVE-2019-10744.json b/2019/CVE-2019-10744.json index 4d95e870ef..16fed3149c 100644 --- a/2019/CVE-2019-10744.json +++ b/2019/CVE-2019-10744.json @@ -64,5 +64,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1448204295, + "name": "cortex9-lodash-defaultsdeep-prototype-pollution-model", + "full_name": "federiconbaez\/cortex9-lodash-defaultsdeep-prototype-pollution-model", + "owner": { + "login": "federiconbaez", + "id": 43962066, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43962066?v=4", + "html_url": "https:\/\/github.com\/federiconbaez", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/federiconbaez\/cortex9-lodash-defaultsdeep-prototype-pollution-model", + "description": "Python model of lodash _.defaultsDeep 4.17.11 vs 4.17.12 (CVE-2019-10744) in a throwaway realm. No JS engine, no gadgets.", + "fork": false, + "created_at": "2026-11-06T11:54:45Z", + "updated_at": "2026-11-06T11:54:56Z", + "pushed_at": "2026-11-06T11:54:52Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2019/CVE-2019-9513.json b/2019/CVE-2019-9513.json new file mode 100644 index 0000000000..20acb85bd8 --- /dev/null +++ b/2019/CVE-2019-9513.json @@ -0,0 +1,35 @@ +[ + { + "id": 1448203631, + "name": "cortex9-http2-priority-churn-cost-model", + "full_name": "federiconbaez\/cortex9-http2-priority-churn-cost-model", + "owner": { + "login": "federiconbaez", + "id": 43962066, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43962066?v=4", + "html_url": "https:\/\/github.com\/federiconbaez", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/federiconbaez\/cortex9-http2-priority-churn-cost-model", + "description": "Offline Rust model of the HTTP\/2 priority tree with a work counter and nginx PRIORITY budget (CVE-2019-9513 study). No sockets; not a reproduction.", + "fork": false, + "created_at": "2026-11-06T11:54:02Z", + "updated_at": "2026-11-06T11:54:13Z", + "pushed_at": "2026-11-06T11:54:09Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2020/CVE-2020-13927.json b/2020/CVE-2020-13927.json index 6428deb98f..4ca1befb84 100644 --- a/2020/CVE-2020-13927.json +++ b/2020/CVE-2020-13927.json @@ -15,7 +15,7 @@ "fork": false, "created_at": "2026-07-07T23:03:12Z", "updated_at": "2026-10-21T17:13:18Z", - "pushed_at": "2026-11-05T11:10:59Z", + "pushed_at": "2026-11-06T11:07:42Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2020/CVE-2020-14883.json b/2020/CVE-2020-14883.json index 4dc5d75dbf..b9ddb52743 100644 --- a/2020/CVE-2020-14883.json +++ b/2020/CVE-2020-14883.json @@ -153,7 +153,7 @@ "stargazers_count": 1071, "watchers_count": 1071, "has_discussions": false, - "forks_count": 311, + "forks_count": 310, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -165,7 +165,7 @@ "poc" ], "visibility": "public", - "forks": 311, + "forks": 310, "watchers": 1071, "score": 0, "subscribers_count": 34 diff --git a/2020/CVE-2020-15368.json b/2020/CVE-2020-15368.json index 8b86b64291..4dbb0e47c9 100644 --- a/2020/CVE-2020-15368.json +++ b/2020/CVE-2020-15368.json @@ -14,10 +14,10 @@ "description": "CVE-2020-15368, aka \"How to exploit a vulnerable driver\"", "fork": false, "created_at": "2021-06-29T04:38:24Z", - "updated_at": "2026-10-31T16:52:47Z", + "updated_at": "2026-11-06T11:29:54Z", "pushed_at": "2022-04-14T03:17:44Z", - "stargazers_count": 515, - "watchers_count": 515, + "stargazers_count": 516, + "watchers_count": 516, "has_discussions": false, "forks_count": 48, "allow_forking": true, @@ -33,7 +33,7 @@ ], "visibility": "public", "forks": 48, - "watchers": 515, + "watchers": 516, "score": 0, "subscribers_count": 5 }, diff --git a/2021/CVE-2021-0928.json b/2021/CVE-2021-0928.json index 469e03f8c6..e6f95aac5a 100644 --- a/2021/CVE-2021-0928.json +++ b/2021/CVE-2021-0928.json @@ -19,7 +19,7 @@ "stargazers_count": 127, "watchers_count": 127, "has_discussions": false, - "forks_count": 24, + "forks_count": 25, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 24, + "forks": 25, "watchers": 127, "score": 0, "subscribers_count": 5 diff --git a/2021/CVE-2021-21300.json b/2021/CVE-2021-21300.json index 0ae6aa3be7..82a81a0d14 100644 --- a/2021/CVE-2021-21300.json +++ b/2021/CVE-2021-21300.json @@ -460,5 +460,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1448204123, + "name": "cortex9-git-case-insensitive-symlink-checkout-model", + "full_name": "federiconbaez\/cortex9-git-case-insensitive-symlink-checkout-model", + "owner": { + "login": "federiconbaez", + "id": 43962066, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43962066?v=4", + "html_url": "https:\/\/github.com\/federiconbaez", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/federiconbaez\/cortex9-git-case-insensitive-symlink-checkout-model", + "description": "In-memory model of git's checkout lstat cache before\/after 684dd4c2b414 (CVE-2021-21300). No git, no clone, nothing written to disk.", + "fork": false, + "created_at": "2026-11-06T11:54:34Z", + "updated_at": "2026-11-06T11:54:46Z", + "pushed_at": "2026-11-06T11:54:41Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2021/CVE-2021-23017.json b/2021/CVE-2021-23017.json index f6e1ff6616..371e0dc49d 100644 --- a/2021/CVE-2021-23017.json +++ b/2021/CVE-2021-23017.json @@ -47,10 +47,10 @@ "description": "PoC for Nginx 0.6.18 - 1.20.0 Memory Overwrite Vulnerability CVE-2021-23017", "fork": false, "created_at": "2022-06-30T04:39:58Z", - "updated_at": "2026-11-05T17:54:35Z", + "updated_at": "2026-11-06T12:54:07Z", "pushed_at": "2023-11-12T16:29:03Z", - "stargazers_count": 137, - "watchers_count": 137, + "stargazers_count": 138, + "watchers_count": 138, "has_discussions": false, "forks_count": 27, "allow_forking": true, @@ -65,7 +65,7 @@ ], "visibility": "public", "forks": 27, - "watchers": 137, + "watchers": 138, "score": 0, "subscribers_count": 4 }, diff --git a/2021/CVE-2021-25646.json b/2021/CVE-2021-25646.json index cc65d29bb3..6182ef48c0 100644 --- a/2021/CVE-2021-25646.json +++ b/2021/CVE-2021-25646.json @@ -151,7 +151,7 @@ "stargazers_count": 1071, "watchers_count": 1071, "has_discussions": false, - "forks_count": 311, + "forks_count": 310, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -163,7 +163,7 @@ "poc" ], "visibility": "public", - "forks": 311, + "forks": 310, "watchers": 1071, "score": 0, "subscribers_count": 34 diff --git a/2021/CVE-2021-28879.json b/2021/CVE-2021-28879.json new file mode 100644 index 0000000000..540ec5d73e --- /dev/null +++ b/2021/CVE-2021-28879.json @@ -0,0 +1,35 @@ +[ + { + "id": 1448203964, + "name": "cortex9-rust-zip-size-hint-overflow-model", + "full_name": "federiconbaez\/cortex9-rust-zip-size-hint-overflow-model", + "owner": { + "login": "federiconbaez", + "id": 43962066, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43962066?v=4", + "html_url": "https:\/\/github.com\/federiconbaez", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/federiconbaez\/cortex9-rust-zip-size-hint-overflow-model", + "description": "Safe-Rust model of core Zip TrustedRandomAccess before\/after rust-lang\/rust PR #82289 (CVE-2021-28879). Model indices only; not a reproduction.", + "fork": false, + "created_at": "2026-11-06T11:54:23Z", + "updated_at": "2026-11-06T11:54:35Z", + "pushed_at": "2026-11-06T11:54:30Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2021/CVE-2021-34527.json b/2021/CVE-2021-34527.json index b711cd9e32..9d32270047 100644 --- a/2021/CVE-2021-34527.json +++ b/2021/CVE-2021-34527.json @@ -119,10 +119,10 @@ "description": "PrintNightmare - Windows Print Spooler RCE\/LPE Vulnerability (CVE-2021-34527, CVE-2021-1675) proof of concept exploits", "fork": false, "created_at": "2021-07-03T15:15:12Z", - "updated_at": "2026-11-04T21:53:12Z", + "updated_at": "2026-11-06T10:24:06Z", "pushed_at": "2021-09-13T12:12:17Z", - "stargazers_count": 180, - "watchers_count": 180, + "stargazers_count": 181, + "watchers_count": 181, "has_discussions": false, "forks_count": 39, "allow_forking": true, @@ -140,7 +140,7 @@ ], "visibility": "public", "forks": 39, - "watchers": 180, + "watchers": 181, "score": 0, "subscribers_count": 4 }, diff --git a/2021/CVE-2021-3493.json b/2021/CVE-2021-3493.json index 1841f3725e..674d5568ab 100644 --- a/2021/CVE-2021-3493.json +++ b/2021/CVE-2021-3493.json @@ -19,7 +19,7 @@ "stargazers_count": 445, "watchers_count": 445, "has_discussions": false, - "forks_count": 136, + "forks_count": 135, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 136, + "forks": 135, "watchers": 445, "score": 0, "subscribers_count": 4 diff --git a/2021/CVE-2021-44228.json b/2021/CVE-2021-44228.json index ba95e114cf..55b4796110 100644 --- a/2021/CVE-2021-44228.json +++ b/2021/CVE-2021-44228.json @@ -15033,7 +15033,7 @@ "fork": false, "created_at": "2026-06-23T18:32:28Z", "updated_at": "2026-10-21T17:13:11Z", - "pushed_at": "2026-11-05T10:55:35Z", + "pushed_at": "2026-11-06T10:52:14Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2022/CVE-2022-0778.json b/2022/CVE-2022-0778.json index 4a9bfd6609..ee9105245e 100644 --- a/2022/CVE-2022-0778.json +++ b/2022/CVE-2022-0778.json @@ -202,5 +202,38 @@ "watchers": 1, "score": 0, "subscribers_count": 1 + }, + { + "id": 1448204456, + "name": "cortex9-openssl-bn-mod-sqrt-loop-model", + "full_name": "federiconbaez\/cortex9-openssl-bn-mod-sqrt-loop-model", + "owner": { + "login": "federiconbaez", + "id": 43962066, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43962066?v=4", + "html_url": "https:\/\/github.com\/federiconbaez", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/federiconbaez\/cortex9-openssl-bn-mod-sqrt-loop-model", + "description": "Pure-Python port of OpenSSL BN_mod_sqrt before\/after the CVE-2022-0778 fix, with a step budget on the loops that can grow. Offline.", + "fork": false, + "created_at": "2026-11-06T11:54:55Z", + "updated_at": "2026-11-06T11:55:07Z", + "pushed_at": "2026-11-06T11:55:02Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2022/CVE-2022-24765.json b/2022/CVE-2022-24765.json new file mode 100644 index 0000000000..dc24e8ef84 --- /dev/null +++ b/2022/CVE-2022-24765.json @@ -0,0 +1,35 @@ +[ + { + "id": 1448203797, + "name": "cortex9-git-safe-directory-discovery-model", + "full_name": "federiconbaez\/cortex9-git-safe-directory-discovery-model", + "owner": { + "login": "federiconbaez", + "id": 43962066, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43962066?v=4", + "html_url": "https:\/\/github.com\/federiconbaez", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/federiconbaez\/cortex9-git-safe-directory-discovery-model", + "description": "In-memory model of git repository discovery and the safe.directory ownership check (CVE-2022-24765). Never runs git or touches the real FS.", + "fork": false, + "created_at": "2026-11-06T11:54:13Z", + "updated_at": "2026-11-06T11:54:24Z", + "pushed_at": "2026-11-06T11:54:20Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2022/CVE-2022-25235.json b/2022/CVE-2022-25235.json index ea1c475936..02dc82fb7c 100644 --- a/2022/CVE-2022-25235.json +++ b/2022/CVE-2022-25235.json @@ -31,5 +31,38 @@ "watchers": 0, "score": 0, "subscribers_count": 1 + }, + { + "id": 1448267429, + "name": "cortex9-expat-utf8-name-validation-model", + "full_name": "federiconbaez\/cortex9-expat-utf8-name-validation-model", + "owner": { + "login": "federiconbaez", + "id": 43962066, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43962066?v=4", + "html_url": "https:\/\/github.com\/federiconbaez", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/federiconbaez\/cortex9-expat-utf8-name-validation-model", + "description": "Offline Python model of expat's UTF-8 name checks before\/after the CVE-2022-25235 fix, with an independent RFC 3629 decoder. No XML parsing of untrusted input.", + "fork": false, + "created_at": "2026-11-06T13:01:08Z", + "updated_at": "2026-11-06T13:01:20Z", + "pushed_at": "2026-11-06T13:01:15Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2022/CVE-2022-25236.json b/2022/CVE-2022-25236.json index 6d1240418b..6e94ef5677 100644 --- a/2022/CVE-2022-25236.json +++ b/2022/CVE-2022-25236.json @@ -31,5 +31,38 @@ "watchers": 0, "score": 0, "subscribers_count": 1 + }, + { + "id": 1448267092, + "name": "cortex9-expat-namespace-separator-model", + "full_name": "federiconbaez\/cortex9-expat-namespace-separator-model", + "owner": { + "login": "federiconbaez", + "id": 43962066, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43962066?v=4", + "html_url": "https:\/\/github.com\/federiconbaez", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/federiconbaez\/cortex9-expat-namespace-separator-model", + "description": "Offline Python model of expat addBinding\/namespace-separator handling in 2.4.4, 2.4.5 and 2.4.7 (CVE-2022-25236). String-level only.", + "fork": false, + "created_at": "2026-11-06T13:00:50Z", + "updated_at": "2026-11-06T13:01:02Z", + "pushed_at": "2026-11-06T13:00:56Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2022/CVE-2022-36551.json b/2022/CVE-2022-36551.json index 7570d21e2f..4f715ad03e 100644 --- a/2022/CVE-2022-36551.json +++ b/2022/CVE-2022-36551.json @@ -15,7 +15,7 @@ "fork": false, "created_at": "2026-10-07T15:40:44Z", "updated_at": "2026-10-21T16:39:07Z", - "pushed_at": "2026-11-05T11:03:59Z", + "pushed_at": "2026-11-06T11:00:45Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2022/CVE-2022-38181.json b/2022/CVE-2022-38181.json index 5af05df7b3..54ae0d7474 100644 --- a/2022/CVE-2022-38181.json +++ b/2022/CVE-2022-38181.json @@ -238,8 +238,8 @@ }, { "id": 1447464045, - "name": "AGM3-W09HN-TempRoot", - "full_name": "lRENyaaa\/AGM3-W09HN-TempRoot", + "name": "AGM3-W09HN-TMP-ROOT-CVE-2022-38181", + "full_name": "lRENyaaa\/AGM3-W09HN-TMP-ROOT-CVE-2022-38181", "owner": { "login": "lRENyaaa", "id": 92320175, @@ -247,11 +247,11 @@ "html_url": "https:\/\/github.com\/lRENyaaa", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/lRENyaaa\/AGM3-W09HN-TempRoot", + "html_url": "https:\/\/github.com\/lRENyaaa\/AGM3-W09HN-TMP-ROOT-CVE-2022-38181", "description": "在 AGM3-W09HN 上通过 CVE-2022-38181 取得临时Root", "fork": false, "created_at": "2026-11-05T20:08:35Z", - "updated_at": "2026-11-05T20:14:33Z", + "updated_at": "2026-11-06T11:37:27Z", "pushed_at": "2026-11-05T20:14:30Z", "stargazers_count": 0, "watchers_count": 0, diff --git a/2022/CVE-2022-38694.json b/2022/CVE-2022-38694.json index 636af073d2..724eabbf1b 100644 --- a/2022/CVE-2022-38694.json +++ b/2022/CVE-2022-38694.json @@ -14,10 +14,10 @@ "description": "This is a one-time signature verification bypass. For persistent signature verification bypass, check https:\/\/github.com\/TomKing062\/CVE-2022-38691_38692", "fork": false, "created_at": "2023-06-10T08:31:26Z", - "updated_at": "2026-11-02T03:57:12Z", + "updated_at": "2026-11-06T11:11:56Z", "pushed_at": "2025-06-14T16:55:26Z", - "stargazers_count": 648, - "watchers_count": 648, + "stargazers_count": 649, + "watchers_count": 649, "has_discussions": true, "forks_count": 91, "allow_forking": true, @@ -31,7 +31,7 @@ ], "visibility": "public", "forks": 91, - "watchers": 648, + "watchers": 649, "score": 0, "subscribers_count": 14 }, @@ -215,10 +215,10 @@ "description": "Unlock Bootloader for Itel S23 (S665L) \/ Unisoc T606 using CVE-2022-38694", "fork": false, "created_at": "2026-03-04T15:43:17Z", - "updated_at": "2026-09-12T01:37:25Z", + "updated_at": "2026-11-06T10:50:57Z", "pushed_at": "2026-03-04T15:43:46Z", - "stargazers_count": 7, - "watchers_count": 7, + "stargazers_count": 8, + "watchers_count": 8, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -229,7 +229,7 @@ "topics": [], "visibility": "public", "forks": 3, - "watchers": 7, + "watchers": 8, "score": 0, "subscribers_count": 0 }, diff --git a/2023/CVE-2023-0297.json b/2023/CVE-2023-0297.json index 39264219d4..c2bf722576 100644 --- a/2023/CVE-2023-0297.json +++ b/2023/CVE-2023-0297.json @@ -213,7 +213,7 @@ "fork": false, "created_at": "2026-10-07T15:40:37Z", "updated_at": "2026-10-21T16:39:04Z", - "pushed_at": "2026-11-05T10:59:28Z", + "pushed_at": "2026-11-06T10:57:26Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2023/CVE-2023-44487.json b/2023/CVE-2023-44487.json index ed19b4810c..9673aef428 100644 --- a/2023/CVE-2023-44487.json +++ b/2023/CVE-2023-44487.json @@ -894,5 +894,38 @@ "watchers": 1, "score": 0, "subscribers_count": 0 + }, + { + "id": 1448159693, + "name": "cortex9-http2-rapid-reset-stream-accounting-model", + "full_name": "federiconbaez\/cortex9-http2-rapid-reset-stream-accounting-model", + "owner": { + "login": "federiconbaez", + "id": 43962066, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43962066?v=4", + "html_url": "https:\/\/github.com\/federiconbaez", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/federiconbaez\/cortex9-http2-rapid-reset-stream-accounting-model", + "description": "Discrete-time Rust model of HTTP\/2 stream accounting vs handler work for studying Rapid Reset (CVE-2023-44487). Not a reproduction, no sockets.", + "fork": false, + "created_at": "2026-11-06T11:05:50Z", + "updated_at": "2026-11-06T11:06:03Z", + "pushed_at": "2026-11-06T11:05:57Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2023/CVE-2023-48795.json b/2023/CVE-2023-48795.json index 8a6c3dacd7..a190354eb9 100644 --- a/2023/CVE-2023-48795.json +++ b/2023/CVE-2023-48795.json @@ -163,5 +163,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1448122490, + "name": "cortex9-terrapin-strict-kex-model", + "full_name": "federiconbaez\/cortex9-terrapin-strict-kex-model", + "owner": { + "login": "federiconbaez", + "id": 43962066, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43962066?v=4", + "html_url": "https:\/\/github.com\/federiconbaez", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/federiconbaez\/cortex9-terrapin-strict-kex-model", + "description": "Abstract state model of SSH sequence numbers and OpenSSH strict KEX for studying Terrapin (CVE-2023-48795). Not a reproduction.", + "fork": false, + "created_at": "2026-11-06T10:25:45Z", + "updated_at": "2026-11-06T11:09:35Z", + "pushed_at": "2026-11-06T11:09:31Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2024/CVE-2024-21762.json b/2024/CVE-2024-21762.json index e46c5ee1a6..a9f5a0cc5e 100644 --- a/2024/CVE-2024-21762.json +++ b/2024/CVE-2024-21762.json @@ -52,7 +52,7 @@ "stargazers_count": 150, "watchers_count": 150, "has_discussions": false, - "forks_count": 25, + "forks_count": 24, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,7 +60,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 25, + "forks": 24, "watchers": 150, "score": 0, "subscribers_count": 3 @@ -332,15 +332,15 @@ { "id": 1279263927, "name": "CVE-2024-21762-Safe-Check", - "full_name": "izancxg\/CVE-2024-21762-Safe-Check", + "full_name": "IzanInPublic\/CVE-2024-21762-Safe-Check", "owner": { - "login": "izancxg", + "login": "IzanInPublic", "id": 116309678, "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/116309678?v=4", - "html_url": "https:\/\/github.com\/izancxg", + "html_url": "https:\/\/github.com\/IzanInPublic", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/izancxg\/CVE-2024-21762-Safe-Check", + "html_url": "https:\/\/github.com\/IzanInPublic\/CVE-2024-21762-Safe-Check", "description": null, "fork": false, "created_at": "2026-06-24T14:20:39Z", diff --git a/2024/CVE-2024-22203.json b/2024/CVE-2024-22203.json index f727fb94fc..5290aaa990 100644 --- a/2024/CVE-2024-22203.json +++ b/2024/CVE-2024-22203.json @@ -15,7 +15,7 @@ "fork": false, "created_at": "2026-10-07T15:40:41Z", "updated_at": "2026-10-21T16:39:02Z", - "pushed_at": "2026-11-05T10:51:56Z", + "pushed_at": "2026-11-06T10:50:30Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-24576.json b/2024/CVE-2024-24576.json index 763d285492..851ad3ba05 100644 --- a/2024/CVE-2024-24576.json +++ b/2024/CVE-2024-24576.json @@ -234,5 +234,38 @@ "watchers": 0, "score": 0, "subscribers_count": 1 + }, + { + "id": 1448159836, + "name": "cortex9-rust-batbadbut-args-model", + "full_name": "federiconbaez\/cortex9-rust-batbadbut-args-model", + "owner": { + "login": "federiconbaez", + "id": 43962066, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43962066?v=4", + "html_url": "https:\/\/github.com\/federiconbaez", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/federiconbaez\/cortex9-rust-batbadbut-args-model", + "description": "Offline model of Rust std 1.77.1 vs 1.77.2 batch-file argument quoting (CVE-2024-24576). No processes, no cmd.exe; real cmd behaviour UNKNOWN.", + "fork": false, + "created_at": "2026-11-06T11:06:00Z", + "updated_at": "2026-11-06T11:06:11Z", + "pushed_at": "2026-11-06T11:06:06Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2024/CVE-2024-27876.json b/2024/CVE-2024-27876.json index d033ba1a43..ee0e264edb 100644 --- a/2024/CVE-2024-27876.json +++ b/2024/CVE-2024-27876.json @@ -14,10 +14,10 @@ "description": "libAppleArchive exploit maker, read the writeup here https:\/\/snoolie.gay\/blog\/CVE-2024-27876", "fork": false, "created_at": "2025-04-23T21:42:32Z", - "updated_at": "2026-10-05T11:05:35Z", + "updated_at": "2026-11-06T10:38:35Z", "pushed_at": "2025-04-23T21:50:36Z", - "stargazers_count": 46, - "watchers_count": 46, + "stargazers_count": 47, + "watchers_count": 47, "has_discussions": false, "forks_count": 7, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 7, - "watchers": 46, + "watchers": 47, "score": 0, "subscribers_count": 2 } diff --git a/2024/CVE-2024-45337.json b/2024/CVE-2024-45337.json index c544c5eda4..993f17ee4b 100644 --- a/2024/CVE-2024-45337.json +++ b/2024/CVE-2024-45337.json @@ -157,7 +157,7 @@ "fork": false, "created_at": "2026-07-07T20:45:27Z", "updated_at": "2026-10-21T16:58:51Z", - "pushed_at": "2026-11-05T11:26:00Z", + "pushed_at": "2026-11-06T11:24:40Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-45846.json b/2024/CVE-2024-45846.json index 2549af8425..bf9bf611bd 100644 --- a/2024/CVE-2024-45846.json +++ b/2024/CVE-2024-45846.json @@ -15,7 +15,7 @@ "fork": false, "created_at": "2026-10-07T15:51:48Z", "updated_at": "2026-10-21T16:39:07Z", - "pushed_at": "2026-11-05T10:59:41Z", + "pushed_at": "2026-11-06T10:57:36Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-55947.json b/2024/CVE-2024-55947.json index b6b86274dd..bb9ad1cfca 100644 --- a/2024/CVE-2024-55947.json +++ b/2024/CVE-2024-55947.json @@ -15,7 +15,7 @@ "fork": false, "created_at": "2026-06-23T18:32:13Z", "updated_at": "2026-10-21T17:13:09Z", - "pushed_at": "2026-11-05T10:49:26Z", + "pushed_at": "2026-11-06T10:49:16Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-9264.json b/2024/CVE-2024-9264.json index 5d50151669..1670760be1 100644 --- a/2024/CVE-2024-9264.json +++ b/2024/CVE-2024-9264.json @@ -402,7 +402,7 @@ "fork": false, "created_at": "2026-07-07T23:02:34Z", "updated_at": "2026-10-21T16:58:50Z", - "pushed_at": "2026-11-05T11:35:50Z", + "pushed_at": "2026-11-06T11:34:35Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-10184.json b/2025/CVE-2025-10184.json index 631456efca..2208e6bb8c 100644 --- a/2025/CVE-2025-10184.json +++ b/2025/CVE-2025-10184.json @@ -47,10 +47,10 @@ "description": "ColorOS短信漏洞，以及用户自救方案", "fork": false, "created_at": "2025-09-24T11:48:03Z", - "updated_at": "2026-11-02T12:41:36Z", + "updated_at": "2026-11-06T13:27:55Z", "pushed_at": "2025-10-15T11:32:43Z", - "stargazers_count": 387, - "watchers_count": 387, + "stargazers_count": 386, + "watchers_count": 386, "has_discussions": true, "forks_count": 42, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 42, - "watchers": 387, + "watchers": 386, "score": 0, "subscribers_count": 0 }, diff --git a/2025/CVE-2025-24203.json b/2025/CVE-2025-24203.json index 3c1558fb5b..7573040a29 100644 --- a/2025/CVE-2025-24203.json +++ b/2025/CVE-2025-24203.json @@ -19,7 +19,7 @@ "stargazers_count": 429, "watchers_count": 429, "has_discussions": false, - "forks_count": 40, + "forks_count": 39, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 40, + "forks": 39, "watchers": 429, "score": 0, "subscribers_count": 11 diff --git a/2025/CVE-2025-49132.json b/2025/CVE-2025-49132.json index 1e7c3dd5f3..e73706daae 100644 --- a/2025/CVE-2025-49132.json +++ b/2025/CVE-2025-49132.json @@ -536,15 +536,15 @@ { "id": 1155189530, "name": "CVE-2025-49132_HTB_SEASON10", - "full_name": "Ahmedf000\/CVE-2025-49132_HTB_SEASON10", + "full_name": "Ossipher\/CVE-2025-49132_HTB_SEASON10", "owner": { - "login": "Ahmedf000", + "login": "Ossipher", "id": 213241251, "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/213241251?v=4", - "html_url": "https:\/\/github.com\/Ahmedf000", + "html_url": "https:\/\/github.com\/Ossipher", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/Ahmedf000\/CVE-2025-49132_HTB_SEASON10", + "html_url": "https:\/\/github.com\/Ossipher\/CVE-2025-49132_HTB_SEASON10", "description": null, "fork": false, "created_at": "2026-02-11T08:19:34Z", diff --git a/2025/CVE-2025-50460.json b/2025/CVE-2025-50460.json index 39fc67e715..cbec090c61 100644 --- a/2025/CVE-2025-50460.json +++ b/2025/CVE-2025-50460.json @@ -48,7 +48,7 @@ "fork": false, "created_at": "2026-10-07T15:40:34Z", "updated_at": "2026-10-21T16:39:02Z", - "pushed_at": "2026-11-05T10:48:49Z", + "pushed_at": "2026-11-06T10:47:51Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-52915.json b/2025/CVE-2025-52915.json index 67405e10f6..0fb6a43a55 100644 --- a/2025/CVE-2025-52915.json +++ b/2025/CVE-2025-52915.json @@ -14,10 +14,10 @@ "description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).", "fork": false, "created_at": "2023-12-05T14:52:11Z", - "updated_at": "2026-11-06T00:20:39Z", + "updated_at": "2026-11-06T09:13:39Z", "pushed_at": "2026-08-18T12:25:25Z", - "stargazers_count": 1007, - "watchers_count": 1007, + "stargazers_count": 1006, + "watchers_count": 1006, "has_discussions": false, "forks_count": 147, "allow_forking": true, @@ -39,7 +39,7 @@ ], "visibility": "public", "forks": 147, - "watchers": 1007, + "watchers": 1006, "score": 0, "subscribers_count": 22 } diff --git a/2025/CVE-2025-55182.json b/2025/CVE-2025-55182.json index 2f27c7887b..4d2d543345 100644 --- a/2025/CVE-2025-55182.json +++ b/2025/CVE-2025-55182.json @@ -431,10 +431,10 @@ "description": "React2Shell Proof of Concept", "fork": false, "created_at": "2025-12-04T01:29:45Z", - "updated_at": "2026-10-16T18:26:03Z", + "updated_at": "2026-11-06T11:29:12Z", "pushed_at": "2026-01-03T10:54:12Z", - "stargazers_count": 95, - "watchers_count": 95, + "stargazers_count": 96, + "watchers_count": 96, "has_discussions": false, "forks_count": 34, "allow_forking": true, @@ -450,7 +450,7 @@ ], "visibility": "public", "forks": 34, - "watchers": 95, + "watchers": 96, "score": 0, "subscribers_count": 0 }, @@ -871,10 +871,10 @@ "description": "High Fidelity Detection Mechanism for RSC\/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)", "fork": false, "created_at": "2025-12-04T06:55:04Z", - "updated_at": "2026-11-05T22:06:33Z", + "updated_at": "2026-11-06T12:30:52Z", "pushed_at": "2025-12-07T04:16:46Z", - "stargazers_count": 2453, - "watchers_count": 2453, + "stargazers_count": 2454, + "watchers_count": 2454, "has_discussions": false, "forks_count": 271, "allow_forking": true, @@ -885,7 +885,7 @@ "topics": [], "visibility": "public", "forks": 271, - "watchers": 2453, + "watchers": 2454, "score": 0, "subscribers_count": 11 }, diff --git a/2025/CVE-2025-8110.json b/2025/CVE-2025-8110.json index 487b823dc0..f708e7e842 100644 --- a/2025/CVE-2025-8110.json +++ b/2025/CVE-2025-8110.json @@ -444,7 +444,7 @@ "fork": false, "created_at": "2026-06-23T18:32:13Z", "updated_at": "2026-10-21T17:13:09Z", - "pushed_at": "2026-11-05T10:49:26Z", + "pushed_at": "2026-11-06T10:49:16Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-9974.json b/2025/CVE-2025-9974.json index 480214eeb9..06bc7e1371 100644 --- a/2025/CVE-2025-9974.json +++ b/2025/CVE-2025-9974.json @@ -80,10 +80,10 @@ "description": "Proof of Concept code for the CVE-2025-9974 affecting Nokia Beacon routers.", "fork": false, "created_at": "2026-10-22T15:11:36Z", - "updated_at": "2026-11-05T13:08:48Z", + "updated_at": "2026-11-06T10:29:49Z", "pushed_at": "2026-11-05T13:08:43Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -94,7 +94,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-0264.json b/2026/CVE-2026-0264.json new file mode 100644 index 0000000000..4538d2ab5c --- /dev/null +++ b/2026/CVE-2026-0264.json @@ -0,0 +1,35 @@ +[ + { + "id": 1448274222, + "name": "PoC-CVE-2026-0264", + "full_name": "iam-s21-caece\/PoC-CVE-2026-0264", + "owner": { + "login": "iam-s21-caece", + "id": 280435787, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/280435787?v=4", + "html_url": "https:\/\/github.com\/iam-s21-caece", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/iam-s21-caece\/PoC-CVE-2026-0264", + "description": null, + "fork": false, + "created_at": "2026-11-06T13:07:50Z", + "updated_at": "2026-11-06T13:10:29Z", + "pushed_at": "2026-11-06T13:10:25Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-100109.json b/2026/CVE-2026-100109.json new file mode 100644 index 0000000000..e0b60d34ff --- /dev/null +++ b/2026/CVE-2026-100109.json @@ -0,0 +1,35 @@ +[ + { + "id": 1448298599, + "name": "cve-2026-100109-poc", + "full_name": "thiscitze\/cve-2026-100109-poc", + "owner": { + "login": "thiscitze", + "id": 277468862, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/277468862?v=4", + "html_url": "https:\/\/github.com\/thiscitze", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/thiscitze\/cve-2026-100109-poc", + "description": "CVE-2026-100109 - Security For WooCommerce 1.0.10-1.0.16 unauthenticated admin creation (PoC by thiscitze)", + "fork": false, + "created_at": "2026-11-06T13:30:49Z", + "updated_at": "2026-11-06T13:31:00Z", + "pushed_at": "2026-11-06T13:30:56Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-102578.json b/2026/CVE-2026-102578.json index 247702de27..60d7c3e15a 100644 --- a/2026/CVE-2026-102578.json +++ b/2026/CVE-2026-102578.json @@ -14,10 +14,10 @@ "description": "Proof of concept for CVE-2026-102578, a Moodle question-bank SQL injection", "fork": false, "created_at": "2026-10-20T10:01:19Z", - "updated_at": "2026-11-05T03:43:27Z", + "updated_at": "2026-11-06T11:43:34Z", "pushed_at": "2026-10-20T12:30:12Z", - "stargazers_count": 8, - "watchers_count": 8, + "stargazers_count": 9, + "watchers_count": 9, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -34,7 +34,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 8, + "watchers": 9, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-109519.json b/2026/CVE-2026-109519.json index f5b6631925..c24d73bdb0 100644 --- a/2026/CVE-2026-109519.json +++ b/2026/CVE-2026-109519.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2026-09-16T08:12:49Z", - "updated_at": "2026-10-29T21:38:56Z", + "updated_at": "2026-11-06T10:48:31Z", "pushed_at": "2026-10-26T13:33:46Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-109618.json b/2026/CVE-2026-109618.json index bc8d17e8c6..081167594c 100644 --- a/2026/CVE-2026-109618.json +++ b/2026/CVE-2026-109618.json @@ -672,12 +672,12 @@ "description": "CVE-2026-109618\/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.", "fork": false, "created_at": "2026-10-21T07:55:16Z", - "updated_at": "2026-11-06T07:26:16Z", + "updated_at": "2026-11-06T13:23:13Z", "pushed_at": "2026-10-28T23:21:57Z", - "stargazers_count": 1943, - "watchers_count": 1943, + "stargazers_count": 1944, + "watchers_count": 1944, "has_discussions": false, - "forks_count": 649, + "forks_count": 652, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -700,8 +700,8 @@ "wordpress-security" ], "visibility": "public", - "forks": 649, - "watchers": 1943, + "forks": 652, + "watchers": 1944, "score": 0, "subscribers_count": 8 }, @@ -973,10 +973,10 @@ "description": "Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 \/ CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.", "fork": false, "created_at": "2026-10-21T08:31:43Z", - "updated_at": "2026-11-06T06:37:19Z", + "updated_at": "2026-11-06T08:20:41Z", "pushed_at": "2026-10-22T07:19:20Z", - "stargazers_count": 1073, - "watchers_count": 1073, + "stargazers_count": 1074, + "watchers_count": 1074, "has_discussions": false, "forks_count": 269, "allow_forking": true, @@ -987,7 +987,7 @@ "topics": [], "visibility": "public", "forks": 269, - "watchers": 1073, + "watchers": 1074, "score": 0, "subscribers_count": 41 }, @@ -5279,10 +5279,10 @@ "description": "Exploits for CVE-2026-109618 \/ CVE-2026-109619 to achieve RCE on PHP targets", "fork": false, "created_at": "2026-10-21T17:42:17Z", - "updated_at": "2026-11-05T09:01:20Z", + "updated_at": "2026-11-06T13:09:07Z", "pushed_at": "2026-10-21T18:51:46Z", - "stargazers_count": 40, - "watchers_count": 40, + "stargazers_count": 41, + "watchers_count": 41, "has_discussions": false, "forks_count": 10, "allow_forking": true, @@ -5301,7 +5301,7 @@ ], "visibility": "public", "forks": 10, - "watchers": 40, + "watchers": 41, "score": 0, "subscribers_count": 1 }, @@ -6413,12 +6413,12 @@ "description": "CVE-2026-109618\/109619 --- PHP session.upload_progress pre-auth RCE (chain A\/B\/C)", "fork": false, "created_at": "2026-10-21T19:57:51Z", - "updated_at": "2026-11-05T22:09:14Z", + "updated_at": "2026-11-06T13:34:03Z", "pushed_at": "2026-10-21T19:58:22Z", - "stargazers_count": 11, - "watchers_count": 11, + "stargazers_count": 12, + "watchers_count": 12, "has_discussions": false, - "forks_count": 5, + "forks_count": 6, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -6426,8 +6426,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 5, - "watchers": 11, + "forks": 6, + "watchers": 12, "score": 0, "subscribers_count": 0 }, @@ -9408,10 +9408,10 @@ "description": "High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)", "fork": false, "created_at": "2026-10-22T03:53:20Z", - "updated_at": "2026-11-06T00:53:39Z", + "updated_at": "2026-11-06T12:30:58Z", "pushed_at": "2026-10-24T03:40:18Z", - "stargazers_count": 986, - "watchers_count": 986, + "stargazers_count": 988, + "watchers_count": 988, "has_discussions": false, "forks_count": 146, "allow_forking": true, @@ -9422,7 +9422,7 @@ "topics": [], "visibility": "public", "forks": 146, - "watchers": 986, + "watchers": 988, "score": 0, "subscribers_count": 11 }, @@ -20985,8 +20985,8 @@ "description": "Live tracker: how fast is the internet patching PHP against PHP2Shell (CVE-2026-109618\/-109619)? Hourly, anonymized.", "fork": false, "created_at": "2026-10-23T22:00:13Z", - "updated_at": "2026-11-05T13:36:12Z", - "pushed_at": "2026-11-05T13:36:07Z", + "updated_at": "2026-11-06T13:20:27Z", + "pushed_at": "2026-11-06T13:20:23Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -21233,8 +21233,8 @@ "description": "PHP Runtime Vulnerability Assessment Toolkit — CVE-2026-109618 & CVE-2026-109619", "fork": false, "created_at": "2026-10-24T03:49:08Z", - "updated_at": "2026-11-06T05:58:25Z", - "pushed_at": "2026-11-06T05:58:21Z", + "updated_at": "2026-11-06T08:46:30Z", + "pushed_at": "2026-11-06T08:46:26Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -26405,8 +26405,8 @@ "description": "php2shell-CVE-2026-109618\/109619 chain", "fork": false, "created_at": "2026-10-31T08:11:56Z", - "updated_at": "2026-11-06T07:47:56Z", - "pushed_at": "2026-11-05T07:27:48Z", + "updated_at": "2026-11-06T12:58:08Z", + "pushed_at": "2026-11-06T12:58:04Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-109619.json b/2026/CVE-2026-109619.json index 12a5d8e131..e85af9eccb 100644 --- a/2026/CVE-2026-109619.json +++ b/2026/CVE-2026-109619.json @@ -666,10 +666,10 @@ "description": "Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619\/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design", "fork": false, "created_at": "2026-10-23T13:49:52Z", - "updated_at": "2026-11-05T19:25:26Z", + "updated_at": "2026-11-06T09:10:00Z", "pushed_at": "2026-10-29T14:37:38Z", - "stargazers_count": 136, - "watchers_count": 136, + "stargazers_count": 137, + "watchers_count": 137, "has_discussions": false, "forks_count": 66, "allow_forking": true, @@ -696,7 +696,7 @@ ], "visibility": "public", "forks": 66, - "watchers": 136, + "watchers": 137, "score": 0, "subscribers_count": 0 }, @@ -901,8 +901,8 @@ "description": "PHP CVE-2026-109619 stale session state: calibrated mod_php lab reproduction, evidence, and solver", "fork": false, "created_at": "2026-11-05T07:40:07Z", - "updated_at": "2026-11-05T14:13:45Z", - "pushed_at": "2026-11-05T14:13:41Z", + "updated_at": "2026-11-06T09:51:20Z", + "pushed_at": "2026-11-06T09:51:15Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -923,38 +923,5 @@ "watchers": 0, "score": 0, "subscribers_count": 0 - }, - { - "id": 1447972576, - "name": "CVE-2026-109619-ZendPipelineLab", - "full_name": "J47-DLK\/CVE-2026-109619-ZendPipelineLab", - "owner": { - "login": "J47-DLK", - "id": 228566769, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/228566769?v=4", - "html_url": "https:\/\/github.com\/J47-DLK", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/J47-DLK\/CVE-2026-109619-ZendPipelineLab", - "description": "PHP CVE-2026-109619 stale session state: calibrated mod_php lab reproduction, evidence, and solver", - "fork": false, - "created_at": "2026-11-06T07:41:25Z", - "updated_at": "2026-11-06T07:46:57Z", - "pushed_at": "2026-11-05T14:13:41Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-111497.json b/2026/CVE-2026-111497.json index 6473f138f9..cb2177b4ce 100644 --- a/2026/CVE-2026-111497.json +++ b/2026/CVE-2026-111497.json @@ -665,7 +665,7 @@ "fork": false, "created_at": "2026-10-23T16:32:12Z", "updated_at": "2026-11-04T08:03:56Z", - "pushed_at": "2026-11-02T20:10:45Z", + "pushed_at": "2026-11-06T08:25:52Z", "stargazers_count": 68, "watchers_count": 68, "has_discussions": false, @@ -1366,10 +1366,10 @@ "description": "High fidelity detection mechanism for node2shell (CVE-2026-111497)", "fork": false, "created_at": "2026-10-25T04:23:54Z", - "updated_at": "2026-11-05T00:37:43Z", + "updated_at": "2026-11-06T12:31:08Z", "pushed_at": "2026-10-25T04:24:27Z", - "stargazers_count": 85, - "watchers_count": 85, + "stargazers_count": 86, + "watchers_count": 86, "has_discussions": false, "forks_count": 13, "allow_forking": true, @@ -1380,7 +1380,7 @@ "topics": [], "visibility": "public", "forks": 13, - "watchers": 85, + "watchers": 86, "score": 0, "subscribers_count": 1 }, @@ -1758,8 +1758,8 @@ "description": "Finds copies of the Google Brotli decoder affected by CVE-2026-111497 on Ubuntu and Debian hosts: the OS packages, and the bundled copies an OS update does not fix (Node.js, Python, Envoy, browsers and more). Built by trial and error with AI-Ops, starting with the OSes on my own machines and servers. A PowerShell version for Windows is planned.", "fork": false, "created_at": "2026-10-25T21:24:13Z", - "updated_at": "2026-11-06T04:18:24Z", - "pushed_at": "2026-11-06T05:12:31Z", + "updated_at": "2026-11-06T10:56:34Z", + "pushed_at": "2026-11-06T10:56:27Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -3136,8 +3136,8 @@ "description": "Säkerhetsvägledning för GIS-miljöer om Broccoli2Shell (CVE-2026-111497).", "fork": false, "created_at": "2026-11-04T18:19:50Z", - "updated_at": "2026-11-05T19:58:54Z", - "pushed_at": "2026-11-05T19:58:49Z", + "updated_at": "2026-11-06T13:47:28Z", + "pushed_at": "2026-11-06T13:47:24Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-112688.json b/2026/CVE-2026-112688.json index c38d10a2b9..968c8e3da3 100644 --- a/2026/CVE-2026-112688.json +++ b/2026/CVE-2026-112688.json @@ -14,10 +14,10 @@ "description": "CVE-2026-112688 CoreMedia PoC: controlled saved-LR corruption in backboardd, stopped by PAC, plus evidence of a constrained write-1 primitive.", "fork": false, "created_at": "2026-11-02T05:45:28Z", - "updated_at": "2026-11-06T06:30:22Z", + "updated_at": "2026-11-06T12:37:52Z", "pushed_at": "2026-11-02T09:20:26Z", - "stargazers_count": 21, - "watchers_count": 21, + "stargazers_count": 22, + "watchers_count": 22, "has_discussions": false, "forks_count": 4, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 4, - "watchers": 21, + "watchers": 22, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-114509.json b/2026/CVE-2026-114509.json index da750fa659..8a491cde08 100644 --- a/2026/CVE-2026-114509.json +++ b/2026/CVE-2026-114509.json @@ -159,10 +159,10 @@ "description": " Laravel TokenGuard authentication bypass through non-string API credentials", "fork": false, "created_at": "2026-10-27T08:59:40Z", - "updated_at": "2026-11-01T12:40:07Z", + "updated_at": "2026-11-06T13:50:45Z", "pushed_at": "2026-10-27T09:02:13Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -173,7 +173,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-114612.json b/2026/CVE-2026-114612.json index cbd34310ec..6544aa45b2 100644 --- a/2026/CVE-2026-114612.json +++ b/2026/CVE-2026-114612.json @@ -14,8 +14,8 @@ "description": "Lab, privilege-escalation check and detection for LiteLLM CVE-2026-114612 (internal user to proxy admin).", "fork": false, "created_at": "2026-11-05T14:22:11Z", - "updated_at": "2026-11-06T07:12:25Z", - "pushed_at": "2026-11-06T07:12:21Z", + "updated_at": "2026-11-06T08:03:17Z", + "pushed_at": "2026-11-06T08:03:15Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-114630.json b/2026/CVE-2026-114630.json new file mode 100644 index 0000000000..c4f114f409 --- /dev/null +++ b/2026/CVE-2026-114630.json @@ -0,0 +1,35 @@ +[ + { + "id": 1448298462, + "name": "cve-2026-114630-poc", + "full_name": "thiscitze\/cve-2026-114630-poc", + "owner": { + "login": "thiscitze", + "id": 277468862, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/277468862?v=4", + "html_url": "https:\/\/github.com\/thiscitze", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/thiscitze\/cve-2026-114630-poc", + "description": "CVE-2026-114630 - ELEX HelpDesk <= 3.3.8 unauthenticated arbitrary file deletion (PoC by thiscitze)", + "fork": false, + "created_at": "2026-11-06T13:30:41Z", + "updated_at": "2026-11-06T13:30:52Z", + "pushed_at": "2026-11-06T13:30:47Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-118306.json b/2026/CVE-2026-118306.json index 9c51178454..55f0e93ae2 100644 --- a/2026/CVE-2026-118306.json +++ b/2026/CVE-2026-118306.json @@ -14,10 +14,10 @@ "description": "CVE-2026-118306: Chromium FileSystemAccessManagerImpl Use-After-Free (CVSS 9.6) - PoC, checker, detection rules", "fork": false, "created_at": "2026-11-04T17:41:59Z", - "updated_at": "2026-11-05T09:34:46Z", + "updated_at": "2026-11-06T13:41:32Z", "pushed_at": "2026-11-05T09:34:42Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -44,7 +44,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-118423.json b/2026/CVE-2026-118423.json new file mode 100644 index 0000000000..8d5fb0cbe5 --- /dev/null +++ b/2026/CVE-2026-118423.json @@ -0,0 +1,35 @@ +[ + { + "id": 1448298307, + "name": "cve-2026-118423-poc", + "full_name": "thiscitze\/cve-2026-118423-poc", + "owner": { + "login": "thiscitze", + "id": 277468862, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/277468862?v=4", + "html_url": "https:\/\/github.com\/thiscitze", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/thiscitze\/cve-2026-118423-poc", + "description": "CVE-2026-118423 - WP Libre Form <= 1.5.0.1 unauthenticated upload to RCE (PoC by thiscitze)", + "fork": false, + "created_at": "2026-11-06T13:30:33Z", + "updated_at": "2026-11-06T13:38:42Z", + "pushed_at": "2026-11-06T13:38:38Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-118569.json b/2026/CVE-2026-118569.json index 52ba851645..4cf397e78c 100644 --- a/2026/CVE-2026-118569.json +++ b/2026/CVE-2026-118569.json @@ -14,8 +14,8 @@ "description": "CVE-2026-118569 — any editor could publish every draft on a Drupal site", "fork": false, "created_at": "2026-11-06T06:54:39Z", - "updated_at": "2026-11-06T07:10:46Z", - "pushed_at": "2026-11-06T07:10:43Z", + "updated_at": "2026-11-06T07:59:27Z", + "pushed_at": "2026-11-06T07:59:23Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2015/CVE-2015-9331.json b/2026/CVE-2026-118570.json similarity index 55% rename from 2015/CVE-2015-9331.json rename to 2026/CVE-2026-118570.json index 6d101e30e9..686c91c9a2 100644 --- a/2015/CVE-2015-9331.json +++ b/2026/CVE-2026-118570.json @@ -1,21 +1,21 @@ [ { - "id": 1113571035, - "name": "CVE-2015-9331", - "full_name": "Kairo-one\/CVE-2015-9331", + "id": 1447976888, + "name": "CVE-2026-118570", + "full_name": "yuwkaaa\/CVE-2026-118570", "owner": { - "login": "Kairo-one", - "id": 242098124, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/242098124?v=4", - "html_url": "https:\/\/github.com\/Kairo-one", + "login": "yuwkaaa", + "id": 257728584, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/257728584?v=4", + "html_url": "https:\/\/github.com\/yuwkaaa", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/Kairo-one\/CVE-2015-9331", - "description": "CVE-2015-9331的poc", + "html_url": "https:\/\/github.com\/yuwkaaa\/CVE-2026-118570", + "description": "CVE-2026-118570 — CSRF on the Drupal fasttoggle toggle route", "fork": false, - "created_at": "2025-12-10T06:50:33Z", - "updated_at": "2025-12-10T06:53:35Z", - "pushed_at": "2025-12-10T06:53:31Z", + "created_at": "2026-11-06T07:46:33Z", + "updated_at": "2026-11-06T08:27:08Z", + "pushed_at": "2026-11-06T07:59:11Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-119977.json b/2026/CVE-2026-119977.json index d4117b9c0e..acd9fbb555 100644 --- a/2026/CVE-2026-119977.json +++ b/2026/CVE-2026-119977.json @@ -90,10 +90,10 @@ "description": null, "fork": false, "created_at": "2026-11-04T18:16:40Z", - "updated_at": "2026-11-05T17:01:17Z", + "updated_at": "2026-11-06T10:23:56Z", "pushed_at": "2026-11-04T19:39:00Z", - "stargazers_count": 9, - "watchers_count": 9, + "stargazers_count": 17, + "watchers_count": 17, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -104,7 +104,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 9, + "watchers": 17, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-120209.json b/2026/CVE-2026-120209.json new file mode 100644 index 0000000000..433bc6ee22 --- /dev/null +++ b/2026/CVE-2026-120209.json @@ -0,0 +1,35 @@ +[ + { + "id": 1448175831, + "name": "CVE-2026-120209", + "full_name": "Nxploited\/CVE-2026-120209", + "owner": { + "login": "Nxploited", + "id": 188819918, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4", + "html_url": "https:\/\/github.com\/Nxploited", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Nxploited\/CVE-2026-120209", + "description": " Doctreat Core <= 1.6.8 - Unauthenticated Privilege Escalation | RCE", + "fork": false, + "created_at": "2026-11-06T11:23:17Z", + "updated_at": "2026-11-06T11:38:02Z", + "pushed_at": "2026-11-06T11:32:42Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-121720.json b/2026/CVE-2026-121720.json index 0198632f9c..95e436e895 100644 --- a/2026/CVE-2026-121720.json +++ b/2026/CVE-2026-121720.json @@ -11,13 +11,13 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/refiaa\/CVE-2026-121720", - "description": "PoC for an OpenVPN Windows Interactive Service privilege-boundary bypass that lets a user-selected OpenSSL provider perform privileged route operations through an inherited service channel.", + "description": "PoC for an OpenVPN Windows Interactive Service privilege bypass via a user-selected OpenSSL provider.", "fork": false, "created_at": "2026-10-31T14:31:10Z", - "updated_at": "2026-11-06T01:06:31Z", - "pushed_at": "2026-11-06T01:06:27Z", - "stargazers_count": 0, - "watchers_count": 0, + "updated_at": "2026-11-06T13:11:36Z", + "pushed_at": "2026-11-06T12:59:57Z", + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -31,7 +31,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 2, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-123025.json b/2026/CVE-2026-123025.json new file mode 100644 index 0000000000..9b4867e994 --- /dev/null +++ b/2026/CVE-2026-123025.json @@ -0,0 +1,35 @@ +[ + { + "id": 1448217991, + "name": "CVE-2026-123025", + "full_name": "cppghoul\/CVE-2026-123025", + "owner": { + "login": "cppghoul", + "id": 192524270, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/192524270?v=4", + "html_url": "https:\/\/github.com\/cppghoul", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/cppghoul\/CVE-2026-123025", + "description": "OS command injection as root via Google Cloud DNS challenge key", + "fork": false, + "created_at": "2026-11-06T12:09:29Z", + "updated_at": "2026-11-06T12:10:59Z", + "pushed_at": "2026-11-06T12:10:55Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-123158.json b/2026/CVE-2026-123158.json index dfa3ec60ea..74b43e1b31 100644 --- a/2026/CVE-2026-123158.json +++ b/2026/CVE-2026-123158.json @@ -197,10 +197,10 @@ "description": "CVE-2026-123158 SSHole — OpenSSH authentication bypass via musl crypt() overflow on Alpine Linux (Exploit PoC)", "fork": false, "created_at": "2026-11-05T22:51:12Z", - "updated_at": "2026-11-06T07:27:14Z", + "updated_at": "2026-11-06T13:41:29Z", "pushed_at": "2026-11-06T05:48:20Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -211,7 +211,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 3, "score": 0, "subscribers_count": 0 }, @@ -313,5 +313,233 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1447954701, + "name": "alpinegate", + "full_name": "techdevfun\/alpinegate", + "owner": { + "login": "techdevfun", + "id": 208121911, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/208121911?v=4", + "html_url": "https:\/\/github.com\/techdevfun", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/techdevfun\/alpinegate", + "description": "Find which images and containers run a vulnerable Alpine + OpenSSH combination (CVE-2026-123158) — five-condition check, zero network, first-hour playbook.", + "fork": false, + "created_at": "2026-11-06T07:20:05Z", + "updated_at": "2026-11-06T12:05:17Z", + "pushed_at": "2026-11-06T12:03:30Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "alpine-linux", + "cli", + "containers", + "devops", + "docker", + "openssh", + "security", + "vulnerability-scanner" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1447989855, + "name": "CVE-2026-123158", + "full_name": "Maalfer\/CVE-2026-123158", + "owner": { + "login": "Maalfer", + "id": 96432001, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/96432001?v=4", + "html_url": "https:\/\/github.com\/Maalfer", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Maalfer\/CVE-2026-123158", + "description": "Exploit para explotar la vulnerabilidad CVE-2026-123158 (conocida como sshole).", + "fork": false, + "created_at": "2026-11-06T08:01:34Z", + "updated_at": "2026-11-06T10:46:06Z", + "pushed_at": "2026-11-06T08:03:03Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1448148427, + "name": "CVE-2026-123158", + "full_name": "HackSpeak\/CVE-2026-123158", + "owner": { + "login": "HackSpeak", + "id": 312486542, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/312486542?v=4", + "html_url": "https:\/\/github.com\/HackSpeak", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/HackSpeak\/CVE-2026-123158", + "description": "OpenSSH + musl password authentication bypass (sshole) checker: local precondition audit + remote verification; for authorized testing", + "fork": false, + "created_at": "2026-11-06T10:53:29Z", + "updated_at": "2026-11-06T11:10:15Z", + "pushed_at": "2026-11-06T11:04:47Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1448168970, + "name": "sshole-bypass-openssh-password", + "full_name": "Hel1um17\/sshole-bypass-openssh-password", + "owner": { + "login": "Hel1um17", + "id": 109215215, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/109215215?v=4", + "html_url": "https:\/\/github.com\/Hel1um17", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Hel1um17\/sshole-bypass-openssh-password", + "description": "sshole漏洞复现，CVE-2026-123158", + "fork": false, + "created_at": "2026-11-06T11:15:44Z", + "updated_at": "2026-11-06T11:47:57Z", + "pushed_at": "2026-11-06T11:47:53Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1448215231, + "name": "ansible-sshole-remediate", + "full_name": "mlazzarotto\/ansible-sshole-remediate", + "owner": { + "login": "mlazzarotto", + "id": 8932945, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8932945?v=4", + "html_url": "https:\/\/github.com\/mlazzarotto", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/mlazzarotto\/ansible-sshole-remediate", + "description": "Ansible playbook that upgrades OpenSSH to 10.6p2 on Alpine Linux to remediate CVE-2026-123158", + "fork": false, + "created_at": "2026-11-06T12:06:27Z", + "updated_at": "2026-11-06T12:09:49Z", + "pushed_at": "2026-11-06T12:09:45Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "alpine-linux", + "ansible", + "ansible-playbook", + "cve-2026-123158", + "musl", + "openrc", + "openssh", + "remediation", + "security" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1448233891, + "name": "check-sshole", + "full_name": "shenxianpeng\/check-sshole", + "owner": { + "login": "shenxianpeng", + "id": 3353385, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/3353385?v=4", + "html_url": "https:\/\/github.com\/shenxianpeng", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/shenxianpeng\/check-sshole", + "description": "Find Dockerfiles that ship an sshd exposed to *sshole (CVE-2026-123158). CLI, pre-commit hook and GitHub Action.", + "fork": false, + "created_at": "2026-11-06T12:26:25Z", + "updated_at": "2026-11-06T12:26:40Z", + "pushed_at": "2026-11-06T12:26:31Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "alpine", + "cve-2026-123158", + "docker", + "dockerfile", + "github-actions", + "openssh", + "pre-commit", + "security", + "sshd", + "sshole" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-19219.json b/2026/CVE-2026-19219.json new file mode 100644 index 0000000000..34b45492a3 --- /dev/null +++ b/2026/CVE-2026-19219.json @@ -0,0 +1,37 @@ +[ + { + "id": 1448013457, + "name": "CVE-2026-19219", + "full_name": "kjry8sb\/CVE-2026-19219", + "owner": { + "login": "kjry8sb", + "id": 346315797, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/346315797?v=4", + "html_url": "https:\/\/github.com\/kjry8sb", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/kjry8sb\/CVE-2026-19219", + "description": null, + "fork": false, + "created_at": "2026-11-06T08:28:53Z", + "updated_at": "2026-11-06T08:49:34Z", + "pushed_at": "2026-11-06T08:31:26Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve-2026-19219" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-19586.json b/2026/CVE-2026-19586.json index 5c900f08fb..a01f1ee33a 100644 --- a/2026/CVE-2026-19586.json +++ b/2026/CVE-2026-19586.json @@ -47,8 +47,8 @@ "description": "Unofficial offline checker: Omada gateway firmware vs TP-Link bulletin 132084 (CVE-2026-19586). Not affiliated with TP-Link.", "fork": false, "created_at": "2026-11-06T06:47:36Z", - "updated_at": "2026-11-06T06:47:46Z", - "pushed_at": "2026-11-06T06:47:42Z", + "updated_at": "2026-11-06T07:55:17Z", + "pushed_at": "2026-11-06T07:55:13Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-20253.json b/2026/CVE-2026-20253.json index a20f37e931..283cc686df 100644 --- a/2026/CVE-2026-20253.json +++ b/2026/CVE-2026-20253.json @@ -204,6 +204,44 @@ "score": 0, "subscribers_count": 0 }, + { + "id": 1305074633, + "name": "owasp-nettacker-contribution", + "full_name": "NSK-394\/owasp-nettacker-contribution", + "owner": { + "login": "NSK-394", + "id": 228297649, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/228297649?v=4", + "html_url": "https:\/\/github.com\/NSK-394", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/NSK-394\/owasp-nettacker-contribution", + "description": "My OWASP Nettacker contributions — 4 merged PRs including a CVE-2026-20253 (Splunk) detection module; this repo writes up PR #1612 (CSV-export IndexError fix with regression tests)", + "fork": false, + "created_at": "2026-07-18T16:52:09Z", + "updated_at": "2026-11-06T11:38:13Z", + "pushed_at": "2026-07-18T16:55:21Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "open-source", + "owasp", + "python", + "security" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, { "id": 1363664845, "name": "CVE-2026-20253", diff --git a/2026/CVE-2026-20687.json b/2026/CVE-2026-20687.json index 7953181707..c76e398827 100644 --- a/2026/CVE-2026-20687.json +++ b/2026/CVE-2026-20687.json @@ -14,10 +14,10 @@ "description": "CVE-2026-20687: AppleJPEGDriver startDecoder Timeout UAF — iOS\/macOS kernel vulnerability leading to deferred panic (A19 Pro, iOS 26.3 RC)", "fork": false, "created_at": "2026-02-09T18:21:45Z", - "updated_at": "2026-11-06T06:32:59Z", + "updated_at": "2026-11-06T07:48:33Z", "pushed_at": "2026-08-27T16:29:39Z", - "stargazers_count": 29, - "watchers_count": 29, + "stargazers_count": 30, + "watchers_count": 30, "has_discussions": false, "forks_count": 9, "allow_forking": true, @@ -38,7 +38,7 @@ ], "visibility": "public", "forks": 9, - "watchers": 29, + "watchers": 30, "score": 0, "subscribers_count": 3 }, diff --git a/2026/CVE-2026-20980.json b/2026/CVE-2026-20980.json index 8a55bfb420..78b4dba89e 100644 --- a/2026/CVE-2026-20980.json +++ b/2026/CVE-2026-20980.json @@ -14,7 +14,7 @@ "description": "Poc for CVE-2026-20980, CVE-2026-20981, CVE-2026-20982", "fork": false, "created_at": "2026-06-01T13:14:47Z", - "updated_at": "2026-10-26T22:00:51Z", + "updated_at": "2026-11-06T08:05:49Z", "pushed_at": "2026-06-01T17:42:26Z", "stargazers_count": 54, "watchers_count": 54, diff --git a/2026/CVE-2026-28576.json b/2026/CVE-2026-28576.json index 990b28bd33..d78354da6d 100644 --- a/2026/CVE-2026-28576.json +++ b/2026/CVE-2026-28576.json @@ -14,10 +14,10 @@ "description": "SQL injection vulnerability in Android 17 (AOSP)", "fork": false, "created_at": "2026-09-07T09:25:30Z", - "updated_at": "2026-10-11T08:12:19Z", + "updated_at": "2026-11-06T08:05:58Z", "pushed_at": "2026-09-07T09:32:54Z", - "stargazers_count": 44, - "watchers_count": 44, + "stargazers_count": 45, + "watchers_count": 45, "has_discussions": false, "forks_count": 21, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 21, - "watchers": 44, + "watchers": 45, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-33017.json b/2026/CVE-2026-33017.json index 93c6f323d5..7fcb2be1a8 100644 --- a/2026/CVE-2026-33017.json +++ b/2026/CVE-2026-33017.json @@ -602,6 +602,46 @@ "score": 0, "subscribers_count": 0 }, + { + "id": 1329796068, + "name": "kavach-loop", + "full_name": "NSK-394\/kavach-loop", + "owner": { + "login": "NSK-394", + "id": 228297649, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/228297649?v=4", + "html_url": "https:\/\/github.com\/NSK-394", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/NSK-394\/kavach-loop", + "description": "Closed-loop vulnerability remediation: detect -> reproduce exploit -> generate patch -> verify with a proof harness. Worked example: Langflow CVE-2026-33017", + "fork": false, + "created_at": "2026-08-10T12:21:38Z", + "updated_at": "2026-11-06T11:37:15Z", + "pushed_at": "2026-11-06T11:37:10Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve", + "exploit", + "patch", + "python", + "security", + "vulnerability-management" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, { "id": 1333153425, "name": "CVE-2026-33017-PoC", diff --git a/2026/CVE-2026-33871.json b/2026/CVE-2026-33871.json new file mode 100644 index 0000000000..8fe1b21f9e --- /dev/null +++ b/2026/CVE-2026-33871.json @@ -0,0 +1,35 @@ +[ + { + "id": 1448281577, + "name": "PoC-CVE-2026-33871", + "full_name": "iam-s21-caece\/PoC-CVE-2026-33871", + "owner": { + "login": "iam-s21-caece", + "id": 280435787, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/280435787?v=4", + "html_url": "https:\/\/github.com\/iam-s21-caece", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/iam-s21-caece\/PoC-CVE-2026-33871", + "description": null, + "fork": false, + "created_at": "2026-11-06T13:14:58Z", + "updated_at": "2026-11-06T13:16:02Z", + "pushed_at": "2026-11-06T13:15:58Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-3609.json b/2026/CVE-2026-3609.json index 6387a66dfd..ee212a63d1 100644 --- a/2026/CVE-2026-3609.json +++ b/2026/CVE-2026-3609.json @@ -14,7 +14,7 @@ "description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).", "fork": false, "created_at": "2023-12-05T14:52:11Z", - "updated_at": "2026-11-06T00:20:39Z", + "updated_at": "2026-11-06T13:33:19Z", "pushed_at": "2026-08-18T12:25:25Z", "stargazers_count": 1007, "watchers_count": 1007, diff --git a/2026/CVE-2026-39987.json b/2026/CVE-2026-39987.json index 17a9d12356..9d49e67b55 100644 --- a/2026/CVE-2026-39987.json +++ b/2026/CVE-2026-39987.json @@ -846,8 +846,8 @@ }, { "id": 1390670815, - "name": "CVE-2026-39987-Marimo-Preauth-RCE", - "full_name": "LaRemontada12\/CVE-2026-39987-Marimo-Preauth-RCE", + "name": "CVE-2026-39987-Marimo-RCE-SOC-Detection", + "full_name": "LaRemontada12\/CVE-2026-39987-Marimo-RCE-SOC-Detection", "owner": { "login": "LaRemontada12", "id": 188646803, @@ -855,12 +855,12 @@ "html_url": "https:\/\/github.com\/LaRemontada12", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/LaRemontada12\/CVE-2026-39987-Marimo-Preauth-RCE", - "description": "CVE-2026-39987 Marimo Pre-auth RCE research, Docker lab reproduction, root cause analysis, and patch validation.", + "html_url": "https:\/\/github.com\/LaRemontada12\/CVE-2026-39987-Marimo-RCE-SOC-Detection", + "description": "Security research and SOC investigation of CVE-2026-39987 using Docker, Nginx, Linux process monitoring, Splunk SIEM, and SPL detection rules.", "fork": false, "created_at": "2026-09-27T11:07:39Z", - "updated_at": "2026-10-23T08:42:41Z", - "pushed_at": "2026-10-23T08:33:24Z", + "updated_at": "2026-11-06T13:37:57Z", + "pushed_at": "2026-11-06T13:33:27Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -871,12 +871,17 @@ "has_pull_requests": true, "pull_request_creation_policy": "all", "topics": [ + "blue-team", "cve", "cybersecurity", + "detection-engineering", "docker", + "incident-response", "marimo", "pentesting", "security-research", + "soc", + "splunk", "websocket" ], "visibility": "public", diff --git a/2026/CVE-2026-41940.json b/2026/CVE-2026-41940.json index 08a977e8f8..d28f51ece0 100644 --- a/2026/CVE-2026-41940.json +++ b/2026/CVE-2026-41940.json @@ -703,10 +703,10 @@ "description": "CVE-2026-41940 — cPanel & WHM Authentication Bypass via Session-File CRLF Injection", "fork": false, "created_at": "2026-05-01T12:09:26Z", - "updated_at": "2026-11-05T09:51:17Z", + "updated_at": "2026-11-06T08:19:38Z", "pushed_at": "2026-05-01T12:10:32Z", - "stargazers_count": 508, - "watchers_count": 508, + "stargazers_count": 509, + "watchers_count": 509, "has_discussions": false, "forks_count": 143, "allow_forking": true, @@ -717,7 +717,7 @@ "topics": [], "visibility": "public", "forks": 143, - "watchers": 508, + "watchers": 509, "score": 0, "subscribers_count": 7 }, diff --git a/2026/CVE-2026-43284.json b/2026/CVE-2026-43284.json index 483e36769b..b5676dd251 100644 --- a/2026/CVE-2026-43284.json +++ b/2026/CVE-2026-43284.json @@ -1508,5 +1508,46 @@ "watchers": 2, "score": 0, "subscribers_count": 0 + }, + { + "id": 1448193809, + "name": "Shizuka", + "full_name": "EmilyTsum\/Shizuka", + "owner": { + "login": "EmilyTsum", + "id": 297192186, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/297192186?v=4", + "html_url": "https:\/\/github.com\/EmilyTsum", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/EmilyTsum\/Shizuka", + "description": "Post-root DirtyFrag (CVE-2026-43284) mitigation for Galaxy S25 — a build-gated KernelSU kernel module that privatizes ESP receive buffers. Verified on SM-S931Z \/ DZIF only.", + "fork": false, + "created_at": "2026-11-06T11:43:07Z", + "updated_at": "2026-11-06T13:37:48Z", + "pushed_at": "2026-11-06T13:37:43Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve-2026-43284", + "dirtyfrag", + "galaxy-s25", + "kernel-module", + "kernelsu", + "netfilter", + "one-ui" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-43499.json b/2026/CVE-2026-43499.json index e9a84a2200..d008ddde41 100644 --- a/2026/CVE-2026-43499.json +++ b/2026/CVE-2026-43499.json @@ -14,10 +14,10 @@ "description": "CVE-2026-43499 PoC", "fork": false, "created_at": "2026-06-27T04:09:11Z", - "updated_at": "2026-10-24T17:48:39Z", + "updated_at": "2026-11-06T13:30:57Z", "pushed_at": "2026-06-27T05:04:04Z", - "stargazers_count": 163, - "watchers_count": 163, + "stargazers_count": 162, + "watchers_count": 162, "has_discussions": false, "forks_count": 38, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 38, - "watchers": 163, + "watchers": 162, "score": 0, "subscribers_count": 1 }, @@ -361,10 +361,10 @@ "description": "GhostLock (CVE-2026-43499) kernel exploit for Android devices with locked bootloader", "fork": false, "created_at": "2026-07-12T16:05:24Z", - "updated_at": "2026-11-05T01:41:38Z", + "updated_at": "2026-11-06T13:30:59Z", "pushed_at": "2026-09-17T05:30:59Z", - "stargazers_count": 450, - "watchers_count": 450, + "stargazers_count": 449, + "watchers_count": 449, "has_discussions": false, "forks_count": 96, "allow_forking": true, @@ -382,7 +382,7 @@ ], "visibility": "public", "forks": 96, - "watchers": 450, + "watchers": 449, "score": 0, "subscribers_count": 15 }, @@ -467,7 +467,7 @@ "description": "Android version CVE-2026-43499 tester", "fork": false, "created_at": "2026-07-13T13:31:55Z", - "updated_at": "2026-11-06T03:12:28Z", + "updated_at": "2026-11-06T08:05:48Z", "pushed_at": "2026-07-20T07:22:42Z", "stargazers_count": 94, "watchers_count": 94, @@ -533,10 +533,10 @@ "description": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.", "fork": false, "created_at": "2026-07-14T14:21:27Z", - "updated_at": "2026-11-06T01:56:28Z", + "updated_at": "2026-11-06T12:52:37Z", "pushed_at": "2026-07-30T11:28:07Z", - "stargazers_count": 117, - "watchers_count": 117, + "stargazers_count": 118, + "watchers_count": 118, "has_discussions": false, "forks_count": 35, "allow_forking": true, @@ -547,7 +547,7 @@ "topics": [], "visibility": "public", "forks": 35, - "watchers": 117, + "watchers": 118, "score": 0, "subscribers_count": 0 }, @@ -632,10 +632,10 @@ "description": "Xiaomi K70e (duchamp) one-click root via CVE-2026-43499 (IonStack) + KernelSU integration", "fork": false, "created_at": "2026-07-15T03:59:56Z", - "updated_at": "2026-10-04T23:26:19Z", + "updated_at": "2026-11-06T10:32:58Z", "pushed_at": "2026-07-31T03:13:27Z", - "stargazers_count": 50, - "watchers_count": 50, + "stargazers_count": 51, + "watchers_count": 51, "has_discussions": true, "forks_count": 17, "allow_forking": true, @@ -646,7 +646,7 @@ "topics": [], "visibility": "public", "forks": 17, - "watchers": 50, + "watchers": 51, "score": 0, "subscribers_count": 1 }, @@ -995,10 +995,10 @@ "description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499", "fork": false, "created_at": "2026-07-17T14:24:08Z", - "updated_at": "2026-11-06T07:42:47Z", + "updated_at": "2026-11-06T13:23:03Z", "pushed_at": "2026-09-03T03:21:42Z", - "stargazers_count": 1585, - "watchers_count": 1585, + "stargazers_count": 1589, + "watchers_count": 1589, "has_discussions": false, "forks_count": 316, "allow_forking": true, @@ -1009,7 +1009,7 @@ "topics": [], "visibility": "public", "forks": 316, - "watchers": 1585, + "watchers": 1589, "score": 0, "subscribers_count": 47 }, @@ -1577,12 +1577,12 @@ "description": "基于内核漏洞CVE-2026-43499的本地提权适配，集成嵌入式 KernelSU.CVE-2026-43499+KernelSU越狱模式 ", "fork": false, "created_at": "2026-07-26T12:39:00Z", - "updated_at": "2026-11-06T07:35:05Z", + "updated_at": "2026-11-06T13:36:16Z", "pushed_at": "2026-07-26T14:04:57Z", - "stargazers_count": 459, - "watchers_count": 459, + "stargazers_count": 496, + "watchers_count": 496, "has_discussions": false, - "forks_count": 84, + "forks_count": 89, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1590,8 +1590,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 84, - "watchers": 459, + "forks": 89, + "watchers": 496, "score": 0, "subscribers_count": 1 }, @@ -1676,12 +1676,12 @@ "description": "GhostLock One-Tap Execution App (CVE-2026-43499)", "fork": false, "created_at": "2026-07-29T05:04:25Z", - "updated_at": "2026-11-06T07:36:28Z", + "updated_at": "2026-11-06T13:39:30Z", "pushed_at": "2026-11-06T05:01:14Z", - "stargazers_count": 2696, - "watchers_count": 2696, + "stargazers_count": 2711, + "watchers_count": 2711, "has_discussions": true, - "forks_count": 644, + "forks_count": 646, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1689,8 +1689,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 644, - "watchers": 2696, + "forks": 646, + "watchers": 2711, "score": 0, "subscribers_count": 49 }, @@ -2381,10 +2381,10 @@ "description": "CVE-2026-43499 (GhostLock) research on HUAWEI MatePad Pro 11 GOT-W29", "fork": false, "created_at": "2026-08-10T09:01:08Z", - "updated_at": "2026-10-22T18:22:23Z", + "updated_at": "2026-11-06T08:52:29Z", "pushed_at": "2026-10-22T18:22:15Z", - "stargazers_count": 6, - "watchers_count": 6, + "stargazers_count": 7, + "watchers_count": 7, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -2395,7 +2395,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 6, + "watchers": 7, "score": 0, "subscribers_count": 0 }, @@ -2579,12 +2579,12 @@ "description": "SM-F9360 (Galaxy Z Fold4, q4q) locked-bootloader KernelSU root — CVE-2026-43499 temp root → LD_PRELOAD DEFEX bypass → no-LTO clang-12 kernelsu.ko. Device-verified 2026-08-12.", "fork": false, "created_at": "2026-08-12T08:10:15Z", - "updated_at": "2026-10-30T06:07:21Z", + "updated_at": "2026-11-06T08:09:05Z", "pushed_at": "2026-10-30T06:07:17Z", - "stargazers_count": 4, - "watchers_count": 4, + "stargazers_count": 5, + "watchers_count": 5, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -2592,8 +2592,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, - "watchers": 4, + "forks": 1, + "watchers": 5, "score": 0, "subscribers_count": 0 }, @@ -2617,7 +2617,7 @@ "stargazers_count": 65, "watchers_count": 65, "has_discussions": false, - "forks_count": 13, + "forks_count": 14, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -2625,7 +2625,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 13, + "forks": 14, "watchers": 65, "score": 0, "subscribers_count": 0 @@ -2788,7 +2788,7 @@ "description": "KSuRoot 4.0.0 — 基于 CVE-2026-43499(GhostLock) 的一键 KernelSU 提权工具。多内核支持：6.1 \/ 6.6 \/ 6.12 三族各有专属基线，另有 50 档上游内核适配；多机型动态库内置：122 条厂商载荷（vivo\/iQOO、小米、三星、Pixel 等）离线可用、按机型+内核+commit 三级匹配；新增「载荷构建」用本机 boot.img 解析偏移打出适配本机的载荷（通用 \/ vivo 专用）；免 ADB。Mod by hmascs", "fork": false, "created_at": "2026-08-14T10:51:50Z", - "updated_at": "2026-11-06T00:58:01Z", + "updated_at": "2026-11-06T13:31:01Z", "pushed_at": "2026-10-02T08:20:25Z", "stargazers_count": 281, "watchers_count": 281, @@ -3965,10 +3965,10 @@ "description": "Honor WIN RT (AAK-AN00) CVE-2026-43499 temporary root - research notes", "fork": false, "created_at": "2026-09-11T17:00:20Z", - "updated_at": "2026-11-02T05:12:08Z", + "updated_at": "2026-11-06T13:00:05Z", "pushed_at": "2026-10-12T09:19:51Z", - "stargazers_count": 4, - "watchers_count": 4, + "stargazers_count": 5, + "watchers_count": 5, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -3979,7 +3979,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 4, + "watchers": 5, "score": 0, "subscribers_count": 0 }, @@ -4531,8 +4531,8 @@ "description": "RootMyGalaxy for Galaxy S23 Ultra SM-S9180 (FZG1) - temp root via CVE-2026-43499, KernelSU late-load, no partition flashing, no Knox", "fork": false, "created_at": "2026-09-21T08:44:47Z", - "updated_at": "2026-11-06T07:07:55Z", - "pushed_at": "2026-11-05T14:03:17Z", + "updated_at": "2026-11-06T08:07:59Z", + "pushed_at": "2026-11-06T08:07:55Z", "stargazers_count": 4, "watchers_count": 4, "has_discussions": false, @@ -5467,10 +5467,10 @@ "description": "基于 CVE-2026-43499 的锁屏界面自动提权工具，面向 iQOO Neo10 Pro+ 及相同芯片（骁龙8e）相同系统版本（OriginOS 6）设备", "fork": false, "created_at": "2026-10-17T14:47:18Z", - "updated_at": "2026-11-06T05:00:48Z", + "updated_at": "2026-11-06T08:20:11Z", "pushed_at": "2026-10-26T10:07:29Z", - "stargazers_count": 4, - "watchers_count": 4, + "stargazers_count": 5, + "watchers_count": 5, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -5481,7 +5481,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 4, + "watchers": 5, "score": 0, "subscribers_count": 0 }, @@ -6233,10 +6233,10 @@ "description": "GhostLock (CVE-2026-43499) port kit for the Samsung Galaxy S20 Ultra SM-G988U (z3q, kernel 4.19.113, non-BTF) — binary-first offsets, Samsung hardening map, KernelSnitch negative result, vmemmap roadmap", "fork": false, "created_at": "2026-11-05T08:04:43Z", - "updated_at": "2026-11-06T05:23:44Z", + "updated_at": "2026-11-06T08:50:54Z", "pushed_at": "2026-11-06T05:23:40Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -6247,7 +6247,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, @@ -6316,5 +6316,83 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1448025108, + "name": "root-my-s24-on-oneui6.1", + "full_name": "nnka3\/root-my-s24-on-oneui6.1", + "owner": { + "login": "nnka3", + "id": 88210386, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88210386?v=4", + "html_url": "https:\/\/github.com\/nnka3", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/nnka3\/root-my-s24-on-oneui6.1", + "description": "Using CVE-2026-43499 to root your Galaxy S24 Series on oneui 6.1(successful on 6.1.75-android14-11-29543898-abS9210ZHS4AYB3)", + "fork": false, + "created_at": "2026-11-06T08:41:47Z", + "updated_at": "2026-11-06T12:40:28Z", + "pushed_at": "2026-11-06T12:40:24Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1448126336, + "name": "ghostlock-a55x", + "full_name": "chjwoo7\/ghostlock-a55x", + "owner": { + "login": "chjwoo7", + "id": 200876158, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/200876158?v=4", + "html_url": "https:\/\/github.com\/chjwoo7", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/chjwoo7\/ghostlock-a55x", + "description": "CVE-2026-43499 target port for Samsung Galaxy A55 5G (SM-A556, Exynos 1480, 6.1.157-android14-11) - offsets, P0 fingerprints, KernelSU pair", + "fork": false, + "created_at": "2026-11-06T10:29:54Z", + "updated_at": "2026-11-06T10:32:34Z", + "pushed_at": "2026-11-06T10:32:23Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "android", + "arm64", + "cve-2026-43499", + "exynos", + "exynos-1480", + "galaxy-a55", + "ghostlock", + "kernelsu", + "root", + "samsung", + "sm-a556" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-50679.json b/2026/CVE-2026-50679.json new file mode 100644 index 0000000000..8418dcb44c --- /dev/null +++ b/2026/CVE-2026-50679.json @@ -0,0 +1,35 @@ +[ + { + "id": 1447000441, + "name": "CVE-2026-50679", + "full_name": "h4urek\/CVE-2026-50679", + "owner": { + "login": "h4urek", + "id": 116811503, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/116811503?v=4", + "html_url": "https:\/\/github.com\/h4urek", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/h4urek\/CVE-2026-50679", + "description": "CVE-2026-50679 - Windows Search Heap Buffer Overflow", + "fork": false, + "created_at": "2026-11-05T12:55:47Z", + "updated_at": "2026-11-06T13:01:57Z", + "pushed_at": "2026-11-06T12:34:35Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-5281.json b/2026/CVE-2026-5281.json index 796c731d5a..ab55215527 100644 --- a/2026/CVE-2026-5281.json +++ b/2026/CVE-2026-5281.json @@ -117,10 +117,10 @@ "description": null, "fork": false, "created_at": "2026-08-25T03:27:09Z", - "updated_at": "2026-09-18T02:55:30Z", + "updated_at": "2026-11-06T08:47:56Z", "pushed_at": "2026-08-28T01:08:15Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -131,7 +131,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-6023.json b/2026/CVE-2026-6023.json new file mode 100644 index 0000000000..78d6ce36f8 --- /dev/null +++ b/2026/CVE-2026-6023.json @@ -0,0 +1,37 @@ +[ + { + "id": 1448010771, + "name": "CVE-2026-6023", + "full_name": "kjry8sb\/CVE-2026-6023", + "owner": { + "login": "kjry8sb", + "id": 346315797, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/346315797?v=4", + "html_url": "https:\/\/github.com\/kjry8sb", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/kjry8sb\/CVE-2026-6023", + "description": null, + "fork": false, + "created_at": "2026-11-06T08:25:57Z", + "updated_at": "2026-11-06T08:49:08Z", + "pushed_at": "2026-11-06T08:26:43Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve-2026-6023" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-64560.json b/2026/CVE-2026-64560.json index bc9937652b..dab170bac7 100644 --- a/2026/CVE-2026-64560.json +++ b/2026/CVE-2026-64560.json @@ -498,10 +498,10 @@ "description": "CVE-2026-64560 staged security research package", "fork": false, "created_at": "2026-10-19T05:30:01Z", - "updated_at": "2026-11-04T01:58:57Z", + "updated_at": "2026-11-06T12:53:12Z", "pushed_at": "2026-10-19T06:16:24Z", - "stargazers_count": 27, - "watchers_count": 27, + "stargazers_count": 28, + "watchers_count": 28, "has_discussions": false, "forks_count": 21, "allow_forking": true, @@ -512,7 +512,7 @@ "topics": [], "visibility": "public", "forks": 21, - "watchers": 27, + "watchers": 28, "score": 0, "subscribers_count": 1 }, @@ -639,10 +639,10 @@ "description": "Per-boot KernelSU late-load via CVE-2026-64560 — OnePlus Pad 3 (OPD2415, SM8750, kernel 6.6.118-android15-8, 4K, locked bootloader): payload port, device profile + kallsyms evidence, host driver, companion APK (me.exo1i.opd2415)", "fork": false, "created_at": "2026-10-27T09:33:18Z", - "updated_at": "2026-10-27T11:23:09Z", + "updated_at": "2026-11-06T10:48:30Z", "pushed_at": "2026-10-27T11:20:06Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -661,7 +661,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-75604.json b/2026/CVE-2026-75604.json index c710cb22e8..c5d877dc4c 100644 --- a/2026/CVE-2026-75604.json +++ b/2026/CVE-2026-75604.json @@ -14,10 +14,10 @@ "description": "CVE-2026-75604 Next.js Windows RCE poc", "fork": false, "created_at": "2026-08-25T19:06:37Z", - "updated_at": "2026-11-01T05:19:32Z", + "updated_at": "2026-11-06T12:11:07Z", "pushed_at": "2026-08-28T02:53:24Z", - "stargazers_count": 107, - "watchers_count": 107, + "stargazers_count": 109, + "watchers_count": 109, "has_discussions": false, "forks_count": 39, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 39, - "watchers": 107, + "watchers": 109, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-83844.json b/2026/CVE-2026-83844.json new file mode 100644 index 0000000000..8dae2a2362 --- /dev/null +++ b/2026/CVE-2026-83844.json @@ -0,0 +1,73 @@ +[ + { + "id": 1448015309, + "name": "CVE-2026-83844", + "full_name": "LilPoule\/CVE-2026-83844", + "owner": { + "login": "LilPoule", + "id": 146761810, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/146761810?v=4", + "html_url": "https:\/\/github.com\/LilPoule", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/LilPoule\/CVE-2026-83844", + "description": "Microsoft Paint CVE-2026-83844 Verification Script", + "fork": false, + "created_at": "2026-11-06T08:30:59Z", + "updated_at": "2026-11-06T09:34:23Z", + "pushed_at": "2026-11-06T09:34:18Z", + "stargazers_count": 2, + "watchers_count": 2, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve", + "cve-2026-83844", + "powershell", + "python" + ], + "visibility": "public", + "forks": 0, + "watchers": 2, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1448236874, + "name": "CVE-2026-83844", + "full_name": "0xBlackash\/CVE-2026-83844", + "owner": { + "login": "0xBlackash", + "id": 259905299, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/259905299?v=4", + "html_url": "https:\/\/github.com\/0xBlackash", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/0xBlackash\/CVE-2026-83844", + "description": "CVE-2026-83844", + "fork": false, + "created_at": "2026-11-06T12:29:37Z", + "updated_at": "2026-11-06T12:44:13Z", + "pushed_at": "2026-11-06T12:44:09Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-9082.json b/2026/CVE-2026-9082.json index 0d62bcf6e2..9d509225e9 100644 --- a/2026/CVE-2026-9082.json +++ b/2026/CVE-2026-9082.json @@ -229,10 +229,10 @@ "description": "Drupal CVE-2026-9082 Blind SQL Injection Checker", "fork": false, "created_at": "2026-05-24T02:00:04Z", - "updated_at": "2026-11-05T21:02:06Z", + "updated_at": "2026-11-06T08:31:13Z", "pushed_at": "2026-05-24T09:00:30Z", - "stargazers_count": 9, - "watchers_count": 9, + "stargazers_count": 8, + "watchers_count": 8, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -243,7 +243,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 9, + "watchers": 8, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-97229.json b/2026/CVE-2026-97229.json index 3ac850892d..e4b01393e4 100644 --- a/2026/CVE-2026-97229.json +++ b/2026/CVE-2026-97229.json @@ -47,10 +47,10 @@ "description": " GitLab CI lint integer-overflow RCE PoC for CVE-2026-97229, validated against the official 19.4.1 CE amd64 image", "fork": false, "created_at": "2026-10-13T09:39:17Z", - "updated_at": "2026-10-31T10:50:52Z", + "updated_at": "2026-11-06T10:42:59Z", "pushed_at": "2026-10-19T08:46:56Z", - "stargazers_count": 65, - "watchers_count": 65, + "stargazers_count": 66, + "watchers_count": 66, "has_discussions": false, "forks_count": 12, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 12, - "watchers": 65, + "watchers": 66, "score": 0, "subscribers_count": 0 }, @@ -207,6 +207,39 @@ "score": 0, "subscribers_count": 0 }, + { + "id": 1444735826, + "name": "cve-2026-97229-lab", + "full_name": "emc-kk\/cve-2026-97229-lab", + "owner": { + "login": "emc-kk", + "id": 36583926, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/36583926?v=4", + "html_url": "https:\/\/github.com\/emc-kk", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/emc-kk\/cve-2026-97229-lab", + "description": "CVE-2026-97229 lab — Onigmo repeat integer overflow RCE (GitLab CE 19.2–19.4)", + "fork": false, + "created_at": "2026-11-03T19:22:57Z", + "updated_at": "2026-11-03T19:23:30Z", + "pushed_at": "2026-11-03T19:23:37Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, { "id": 1446295588, "name": "CVE-2026-97229-GitLab-CI-CD", diff --git a/2026/CVE-2026-98260.json b/2026/CVE-2026-98260.json index 14e96a5b1c..10e70cddf0 100644 --- a/2026/CVE-2026-98260.json +++ b/2026/CVE-2026-98260.json @@ -47,10 +47,10 @@ "description": "CVE-2026-98260 (Timer) Android\/ARM64 port", "fork": false, "created_at": "2026-10-18T23:26:39Z", - "updated_at": "2026-11-06T07:41:10Z", + "updated_at": "2026-11-06T12:52:28Z", "pushed_at": "2026-10-25T05:35:18Z", - "stargazers_count": 54, - "watchers_count": 54, + "stargazers_count": 58, + "watchers_count": 58, "has_discussions": false, "forks_count": 20, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 20, - "watchers": 54, + "watchers": 58, "score": 0, "subscribers_count": 1 }, @@ -179,10 +179,10 @@ "description": "Shizuku-driven CVE-2026-98260 root + KernelSU runtime LKM loader for Xiaomi yingtian \/ lhasa (kernel 6.18.21)", "fork": false, "created_at": "2026-10-25T12:51:04Z", - "updated_at": "2026-11-06T01:47:06Z", + "updated_at": "2026-11-06T12:43:07Z", "pushed_at": "2026-11-05T05:07:52Z", - "stargazers_count": 82, - "watchers_count": 82, + "stargazers_count": 87, + "watchers_count": 87, "has_discussions": true, "forks_count": 19, "allow_forking": true, @@ -202,7 +202,7 @@ ], "visibility": "public", "forks": 19, - "watchers": 82, + "watchers": 87, "score": 0, "subscribers_count": 0 }, @@ -260,10 +260,10 @@ "description": "vivo\/IQOO (kernel 6.1.145) CVE-2026-98260 POSIX CPU timer UAF LPE", "fork": false, "created_at": "2026-10-25T13:55:54Z", - "updated_at": "2026-11-06T04:34:21Z", - "pushed_at": "2026-11-06T07:22:22Z", - "stargazers_count": 0, - "watchers_count": 0, + "updated_at": "2026-11-06T13:05:57Z", + "pushed_at": "2026-11-06T10:08:14Z", + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -274,7 +274,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 2, "score": 0, "subscribers_count": 0 }, @@ -452,10 +452,10 @@ "description": null, "fork": false, "created_at": "2026-10-26T09:32:43Z", - "updated_at": "2026-11-03T06:28:10Z", + "updated_at": "2026-11-06T09:46:33Z", "pushed_at": "2026-10-26T09:50:29Z", - "stargazers_count": 44, - "watchers_count": 44, + "stargazers_count": 45, + "watchers_count": 45, "has_discussions": false, "forks_count": 14, "allow_forking": true, @@ -466,7 +466,7 @@ "topics": [], "visibility": "public", "forks": 14, - "watchers": 44, + "watchers": 45, "score": 0, "subscribers_count": 0 }, @@ -529,8 +529,8 @@ "description": "Android LPE (CVE-2026-98260) on Honor MagicPad3 Pro 13.3 (YLP-W00), kernel 6.12.38 — PoC\/EXP, uid-0 shell, KernelSU app", "fork": false, "created_at": "2026-10-26T16:49:03Z", - "updated_at": "2026-11-06T07:48:48Z", - "pushed_at": "2026-11-06T07:48:44Z", + "updated_at": "2026-11-06T07:55:27Z", + "pushed_at": "2026-11-06T07:55:24Z", "stargazers_count": 21, "watchers_count": 21, "has_discussions": false, @@ -628,10 +628,10 @@ "description": "6.6.118-android15-8-g9bc34d5b0c79", "fork": false, "created_at": "2026-10-27T16:18:05Z", - "updated_at": "2026-11-03T08:32:40Z", + "updated_at": "2026-11-06T09:14:36Z", "pushed_at": "2026-10-28T09:14:49Z", - "stargazers_count": 9, - "watchers_count": 9, + "stargazers_count": 10, + "watchers_count": 10, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -642,7 +642,7 @@ "topics": [], "visibility": "public", "forks": 3, - "watchers": 9, + "watchers": 10, "score": 0, "subscribers_count": 0 }, @@ -733,10 +733,10 @@ "description": "Android front end for CVE-2026-98260: root shell + KernelSU late-load through Shizuku", "fork": false, "created_at": "2026-10-28T15:15:02Z", - "updated_at": "2026-11-06T02:15:34Z", + "updated_at": "2026-11-06T09:22:26Z", "pushed_at": "2026-11-03T13:01:24Z", - "stargazers_count": 50, - "watchers_count": 50, + "stargazers_count": 51, + "watchers_count": 51, "has_discussions": false, "forks_count": 21, "allow_forking": true, @@ -754,7 +754,7 @@ ], "visibility": "public", "forks": 21, - "watchers": 50, + "watchers": 51, "score": 0, "subscribers_count": 1 }, @@ -806,7 +806,7 @@ "description": "GhostKey - CVE-2026-98260 一键提权工具（Shizuku + NDK Native）", "fork": false, "created_at": "2026-10-29T04:23:27Z", - "updated_at": "2026-11-06T05:16:29Z", + "updated_at": "2026-11-06T13:32:48Z", "pushed_at": "2026-10-29T01:46:53Z", "stargazers_count": 4, "watchers_count": 4, @@ -839,10 +839,10 @@ "description": "GhostKey - CVE-2026-98260 一键提权工具（Shizuku + NDK Native）", "fork": false, "created_at": "2026-10-29T05:12:04Z", - "updated_at": "2026-11-06T05:42:57Z", + "updated_at": "2026-11-06T13:31:04Z", "pushed_at": "2026-10-29T05:13:36Z", - "stargazers_count": 87, - "watchers_count": 87, + "stargazers_count": 90, + "watchers_count": 90, "has_discussions": false, "forks_count": 55, "allow_forking": true, @@ -853,7 +853,7 @@ "topics": [], "visibility": "public", "forks": 55, - "watchers": 87, + "watchers": 90, "score": 0, "subscribers_count": 0 }, @@ -953,8 +953,8 @@ "description": "CVE 2026 98260 vivo s60 poc", "fork": false, "created_at": "2026-10-30T07:52:25Z", - "updated_at": "2026-11-05T02:59:05Z", - "pushed_at": "2026-11-05T02:45:22Z", + "updated_at": "2026-11-06T09:06:06Z", + "pushed_at": "2026-11-06T09:06:02Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, @@ -1058,12 +1058,12 @@ "description": "One-tap Android root for Samsung Galaxy devices, built around the CVE-2026-98260 timer exploit.", "fork": false, "created_at": "2026-11-01T10:00:01Z", - "updated_at": "2026-11-05T10:46:02Z", + "updated_at": "2026-11-06T13:43:40Z", "pushed_at": "2026-11-01T10:11:44Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, - "forks_count": 3, + "forks_count": 4, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1071,8 +1071,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 3, - "watchers": 3, + "forks": 4, + "watchers": 4, "score": 0, "subscribers_count": 0 }, @@ -1322,12 +1322,12 @@ "description": "CVE-2026-98260 在小米 17 Pro Max 的工程化利用一键 root", "fork": false, "created_at": "2026-11-05T03:16:47Z", - "updated_at": "2026-11-06T05:47:17Z", + "updated_at": "2026-11-06T09:40:25Z", "pushed_at": "2026-11-05T16:55:30Z", - "stargazers_count": 11, - "watchers_count": 11, + "stargazers_count": 13, + "watchers_count": 13, "has_discussions": false, - "forks_count": 6, + "forks_count": 7, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1335,8 +1335,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 6, - "watchers": 11, + "forks": 7, + "watchers": 13, "score": 0, "subscribers_count": 0 }, @@ -1355,10 +1355,10 @@ "description": "真我 GT7 Pro (RMX5010) 免解BL临时Root · CVE-2026-98260 机型适配 · KernelSU 晚加载 · Temporary root for realme GT7 Pro without bootloader unlock", "fork": false, "created_at": "2026-11-05T04:05:57Z", - "updated_at": "2026-11-05T13:03:49Z", + "updated_at": "2026-11-06T09:14:41Z", "pushed_at": "2026-11-05T04:06:04Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -1369,7 +1369,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, @@ -1438,5 +1438,137 @@ "watchers": 1, "score": 0, "subscribers_count": 0 + }, + { + "id": 1448057825, + "name": "CVE-2026-98260-iQOO12", + "full_name": "VinSon326\/CVE-2026-98260-iQOO12", + "owner": { + "login": "VinSon326", + "id": 121611151, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/121611151?v=4", + "html_url": "https:\/\/github.com\/VinSon326", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/VinSon326\/CVE-2026-98260-iQOO12", + "description": null, + "fork": false, + "created_at": "2026-11-06T09:16:50Z", + "updated_at": "2026-11-06T09:26:58Z", + "pushed_at": "2026-11-06T09:26:54Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1448107921, + "name": "CVE-2026-98260-amg-an00", + "full_name": "ANYAEGW\/CVE-2026-98260-amg-an00", + "owner": { + "login": "ANYAEGW", + "id": 338439777, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/338439777?v=4", + "html_url": "https:\/\/github.com\/ANYAEGW", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/ANYAEGW\/CVE-2026-98260-amg-an00", + "description": "CVE-2026-98260 port for HONOR AMG-AN00 (SM8650 \/ 6.1.157-android14-11)", + "fork": false, + "created_at": "2026-11-06T10:10:08Z", + "updated_at": "2026-11-06T10:10:28Z", + "pushed_at": "2026-11-06T10:10:24Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1448213128, + "name": "CVE-2026-98260-pkt110-kernelsu", + "full_name": "nemoiwkryang\/CVE-2026-98260-pkt110-kernelsu", + "owner": { + "login": "nemoiwkryang", + "id": 111504576, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/111504576?v=4", + "html_url": "https:\/\/github.com\/nemoiwkryang", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/nemoiwkryang\/CVE-2026-98260-pkt110-kernelsu", + "description": "CVE-2026-98260 (posix-cpu-timers UAF) to KernelSU on a bootloader-locked OPPO PKT110: exploit core, on-device app, and the research write-up.", + "fork": false, + "created_at": "2026-11-06T12:04:15Z", + "updated_at": "2026-11-06T12:06:28Z", + "pushed_at": "2026-11-06T12:06:23Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1448217444, + "name": "CVE-2026-98260", + "full_name": "Dream-Rainy\/CVE-2026-98260", + "owner": { + "login": "Dream-Rainy", + "id": 88184993, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88184993?v=4", + "html_url": "https:\/\/github.com\/Dream-Rainy", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Dream-Rainy\/CVE-2026-98260", + "description": null, + "fork": false, + "created_at": "2026-11-06T12:08:52Z", + "updated_at": "2026-11-06T12:58:35Z", + "pushed_at": "2026-11-06T12:58:30Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-98432.json b/2026/CVE-2026-98432.json index 82bdb8bf93..8bd5500876 100644 --- a/2026/CVE-2026-98432.json +++ b/2026/CVE-2026-98432.json @@ -268,7 +268,7 @@ "fork": false, "created_at": "2026-10-30T00:22:53Z", "updated_at": "2026-11-06T05:24:56Z", - "pushed_at": "2026-11-06T07:25:08Z", + "pushed_at": "2026-11-06T12:40:03Z", "stargazers_count": 17, "watchers_count": 17, "has_discussions": false, @@ -579,10 +579,10 @@ "description": "CVE-2026-98432 (CVSS 9.8) Linux IPv4 TCP use-after-free full toolkit. Detect kernel exposure, trigger the race, analyze captures, recover KASLR slides, and lock down hosts. Single command, zero setup, standard library only. Built for real-world authorized security testing.", "fork": false, "created_at": "2026-10-30T13:11:26Z", - "updated_at": "2026-11-06T04:19:15Z", + "updated_at": "2026-11-06T12:09:03Z", "pushed_at": "2026-11-05T13:25:10Z", - "stargazers_count": 32, - "watchers_count": 32, + "stargazers_count": 35, + "watchers_count": 35, "has_discussions": false, "forks_count": 9, "allow_forking": true, @@ -608,7 +608,7 @@ ], "visibility": "public", "forks": 9, - "watchers": 32, + "watchers": 35, "score": 0, "subscribers_count": 0 }, @@ -2592,8 +2592,8 @@ "description": "CVE-2026-98432 firewall mitigation for unpatched Linux OS.", "fork": false, "created_at": "2026-11-05T11:54:06Z", - "updated_at": "2026-11-05T12:02:04Z", - "pushed_at": "2026-11-05T12:02:00Z", + "updated_at": "2026-11-06T11:38:06Z", + "pushed_at": "2026-11-06T11:38:02Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -2675,5 +2675,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1448014652, + "name": "verification-gap-cve-2026-98432", + "full_name": "s97472091-pixel\/verification-gap-cve-2026-98432", + "owner": { + "login": "s97472091-pixel", + "id": 267665950, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/267665950?v=4", + "html_url": "https:\/\/github.com\/s97472091-pixel", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/s97472091-pixel\/verification-gap-cve-2026-98432", + "description": "A Patch Without Proof: the verification gap behind CVE-2026-98432", + "fork": false, + "created_at": "2026-11-06T08:30:12Z", + "updated_at": "2026-11-06T08:55:55Z", + "pushed_at": "2026-11-06T08:55:51Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file