nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/05/19 06:51:52

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-05-19 15:51:52 +09:00
1 parent 15d04171be
commit 7f04847be5
95 files changed
+580 -579
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2014/CVE-2014-6271.json
-33
View File
@@ -1969,39 +1969,6 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 462057697,
"name": "shellshock",
"full_name": "hadrian3689\/shellshock",
"owner": {
"login": "hadrian3689",
"id": 71423134,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71423134?v=4",
"html_url": "https:\/\/github.com\/hadrian3689",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/hadrian3689\/shellshock",
"description": "CVE-2014-6271 Shellshock",
"fork": false,
"created_at": "2022-02-21T22:53:00Z",
"updated_at": "2023-01-03T01:54:36Z",
"pushed_at": "2022-09-20T15:37:01Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 476981161,
"name": "CVE-2014-6271",
2014/CVE-2014-6287.json
-33
View File
@@ -131,39 +131,6 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 449130770,
"name": "rejetto_hfs_rce",
"full_name": "hadrian3689\/rejetto_hfs_rce",
"owner": {
"login": "hadrian3689",
"id": 71423134,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71423134?v=4",
"html_url": "https:\/\/github.com\/hadrian3689",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/hadrian3689\/rejetto_hfs_rce",
"description": "CVE-2014-6287 Rejetto HFS 2.3",
"fork": false,
"created_at": "2022-01-18T03:45:16Z",
"updated_at": "2023-01-03T01:54:47Z",
"pushed_at": "2022-09-20T15:34:44Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 1
},
{
"id": 623623395,
"name": "Rejetto-HTTP-File-Server-HFS-2.3.x---Remote-Command-Execution",
2015/CVE-2015-5254.json
+6 -6
View File
@@ -113,12 +113,12 @@
"description": "Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466)",
"fork": false,
"created_at": "2026-04-20T02:38:50Z",
"updated_at": "2026-05-15T06:56:36Z",
"updated_at": "2026-05-19T04:05:38Z",
"pushed_at": "2026-05-15T06:56:32Z",
"stargazers_count": 52,
"watchers_count": 52,
"stargazers_count": 53,
"watchers_count": 53,
"has_discussions": false,
"forks_count": 3,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -126,8 +126,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 52,
"forks": 4,
"watchers": 53,
"score": 0,
"subscribers_count": 2
}
2016/CVE-2016-10735.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "A poc for Bootstrap XSS(CVE-2024-6485、CVE-2016-10735、CVE-2019-8331、CVE-2018-14040)",
"fork": false,
"created_at": "2025-07-21T08:52:37Z",
"updated_at": "2026-02-05T01:49:48Z",
"updated_at": "2026-05-19T01:11:52Z",
"pushed_at": "2025-08-21T04:06:24Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
}
2016/CVE-2016-15042.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛠️ Validate and demonstrate CVE-2016-15042 with a Dockerized lab for unauthenticated file uploads in WordPress file managers.",
"fork": false,
"created_at": "2023-10-23T05:54:10Z",
"updated_at": "2026-05-18T20:46:26Z",
"pushed_at": "2026-05-18T20:46:22Z",
"updated_at": "2026-05-19T03:12:55Z",
"pushed_at": "2026-05-19T03:12:52Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2016/CVE-2016-3088.json
+6 -6
View File
@@ -249,12 +249,12 @@
"description": "Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466)",
"fork": false,
"created_at": "2026-04-20T02:38:50Z",
"updated_at": "2026-05-15T06:56:36Z",
"updated_at": "2026-05-19T04:05:38Z",
"pushed_at": "2026-05-15T06:56:32Z",
"stargazers_count": 52,
"watchers_count": 52,
"stargazers_count": 53,
"watchers_count": 53,
"has_discussions": false,
"forks_count": 3,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -262,8 +262,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 52,
"forks": 4,
"watchers": 53,
"score": 0,
"subscribers_count": 2
}
2018/CVE-2018-14040.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "A poc for Bootstrap XSS(CVE-2024-6485、CVE-2016-10735、CVE-2019-8331、CVE-2018-14040)",
"fork": false,
"created_at": "2025-07-21T08:52:37Z",
"updated_at": "2026-02-05T01:49:48Z",
"updated_at": "2026-05-19T01:11:52Z",
"pushed_at": "2025-08-21T04:06:24Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
}
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-05-18T23:39:58Z",
"pushed_at": "2026-05-18T23:39:54Z",
"updated_at": "2026-05-19T05:47:40Z",
"pushed_at": "2026-05-19T05:47:36Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2019/CVE-2019-17558.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340",
"fork": false,
"created_at": "2020-04-01T09:33:35Z",
"updated_at": "2026-05-18T17:11:13Z",
"updated_at": "2026-05-19T03:11:26Z",
"pushed_at": "2021-04-04T09:13:57Z",
"stargazers_count": 4277,
"watchers_count": 4277,
"stargazers_count": 4279,
"watchers_count": 4279,
"has_discussions": false,
"forks_count": 1088,
"allow_forking": true,
@@ -81,7 +81,7 @@
],
"visibility": "public",
"forks": 1088,
"watchers": 4277,
"watchers": 4279,
"score": 0,
"subscribers_count": 148
},
2019/CVE-2019-8331.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "A poc for Bootstrap XSS(CVE-2024-6485、CVE-2016-10735、CVE-2019-8331、CVE-2018-14040)",
"fork": false,
"created_at": "2025-07-21T08:52:37Z",
"updated_at": "2026-02-05T01:49:48Z",
"updated_at": "2026-05-19T01:11:52Z",
"pushed_at": "2025-08-21T04:06:24Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
}
2020/CVE-2020-0610.json
+2 -2
View File
@@ -58,8 +58,8 @@
"description": "🔍 Create a safe lab environment for testing CVE-2020-0610, a critical RCE vulnerability in Windows RD Gateway, with minimal disruption using DTLS techniques.",
"fork": false,
"created_at": "2025-09-04T13:21:35Z",
"updated_at": "2026-05-18T20:46:21Z",
"pushed_at": "2026-05-18T20:46:17Z",
"updated_at": "2026-05-19T03:12:45Z",
"pushed_at": "2026-05-19T03:12:41Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2020/CVE-2020-0796.json
+4 -4
View File
@@ -489,10 +489,10 @@
"description": "PoC for triggering buffer overflow via CVE-2020-0796",
"fork": false,
"created_at": "2020-03-12T18:34:40Z",
"updated_at": "2026-04-07T19:36:13Z",
"updated_at": "2026-05-19T03:18:39Z",
"pushed_at": "2023-02-26T07:01:03Z",
"stargazers_count": 332,
"watchers_count": 332,
"stargazers_count": 333,
"watchers_count": 333,
"has_discussions": false,
"forks_count": 120,
"allow_forking": true,
@@ -508,7 +508,7 @@
],
"visibility": "public",
"forks": 120,
"watchers": 332,
"watchers": 333,
"score": 0,
"subscribers_count": 18
},
2020/CVE-2020-1472.json
+2 -2
View File
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-05-18T23:44:48Z",
"pushed_at": "2026-05-18T23:44:44Z",
"updated_at": "2026-05-19T05:45:47Z",
"pushed_at": "2026-05-19T05:45:43Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2020/CVE-2020-14882.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340",
"fork": false,
"created_at": "2020-04-01T09:33:35Z",
"updated_at": "2026-05-18T17:11:13Z",
"updated_at": "2026-05-19T03:11:26Z",
"pushed_at": "2021-04-04T09:13:57Z",
"stargazers_count": 4277,
"watchers_count": 4277,
"stargazers_count": 4279,
"watchers_count": 4279,
"has_discussions": false,
"forks_count": 1088,
"allow_forking": true,
@@ -48,7 +48,7 @@
],
"visibility": "public",
"forks": 1088,
"watchers": 4277,
"watchers": 4279,
"score": 0,
"subscribers_count": 148
},
2020/CVE-2020-17103.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "CVE-2020-17103 was apparently not patched or the patch was reversed, regardless this the PoC for an LPE in cldflt.sys",
"fork": false,
"created_at": "2026-05-14T20:32:21Z",
"updated_at": "2026-05-18T23:57:22Z",
"updated_at": "2026-05-19T06:18:29Z",
"pushed_at": "2026-05-16T06:01:33Z",
"stargazers_count": 498,
"watchers_count": 498,
"stargazers_count": 517,
"watchers_count": 517,
"has_discussions": false,
"forks_count": 120,
"forks_count": 126,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 120,
"watchers": 498,
"forks": 126,
"watchers": 517,
"score": 0,
"subscribers_count": 7
},
2020/CVE-2020-25042.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "PoC for CVE-2020-25042: automated Mara CMS 7.5 authenticated PHP upload to RCE, with login hash handling, shell reuse, custom payload support, and clean CLI output.",
"fork": false,
"created_at": "2026-05-17T18:00:46Z",
"updated_at": "2026-05-18T02:42:21Z",
"updated_at": "2026-05-19T03:29:22Z",
"pushed_at": "2026-05-17T23:59:47Z",
"stargazers_count": 4,
"watchers_count": 4,
2021/CVE-2021-21972.json
+4 -4
View File
@@ -165,10 +165,10 @@
"description": "Proof of Concept Exploit for vCenter CVE-2021-21972",
"fork": false,
"created_at": "2021-02-24T16:31:34Z",
"updated_at": "2026-05-13T19:48:27Z",
"updated_at": "2026-05-19T05:07:55Z",
"pushed_at": "2021-02-25T16:05:02Z",
"stargazers_count": 270,
"watchers_count": 270,
"stargazers_count": 271,
"watchers_count": 271,
"has_discussions": false,
"forks_count": 83,
"allow_forking": true,
@@ -179,7 +179,7 @@
"topics": [],
"visibility": "public",
"forks": 83,
"watchers": 270,
"watchers": 271,
"score": 0,
"subscribers_count": 6
},
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-05-19T00:13:06Z",
"pushed_at": "2026-05-19T00:13:02Z",
"updated_at": "2026-05-19T04:35:23Z",
"pushed_at": "2026-05-19T04:35:19Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-4034.json
+4 -4
View File
@@ -155,7 +155,7 @@
"stargazers_count": 1308,
"watchers_count": 1308,
"has_discussions": false,
"forks_count": 205,
"forks_count": 206,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -165,7 +165,7 @@
"cve-2021-4034"
],
"visibility": "public",
"forks": 205,
"forks": 206,
"watchers": 1308,
"score": 0,
"subscribers_count": 13
@@ -2017,8 +2017,8 @@
"description": "🚀 Enhance your penetration testing with PwnKit Helper, a simple tool for exploiting the CVE-2021-4034 vulnerability in pkexec for local privilege escalation.",
"fork": false,
"created_at": "2025-10-01T09:53:03Z",
"updated_at": "2026-05-18T20:53:21Z",
"pushed_at": "2026-05-18T20:52:59Z",
"updated_at": "2026-05-19T03:20:15Z",
"pushed_at": "2026-05-19T03:20:12Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2021/CVE-2021-44228.json
+4 -4
View File
@@ -993,7 +993,7 @@
"stargazers_count": 1849,
"watchers_count": 1849,
"has_discussions": false,
"forks_count": 545,
"forks_count": 544,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1006,7 +1006,7 @@
"security"
],
"visibility": "public",
"forks": 545,
"forks": 544,
"watchers": 1849,
"score": 0,
"subscribers_count": 0
@@ -14001,8 +14001,8 @@
"description": "Intentionally vulnerable Log4j 2.14.1 demo for Sysdig CNAPP scanning (CVE-2021-44228)",
"fork": false,
"created_at": "2026-05-16T01:52:21Z",
"updated_at": "2026-05-16T02:58:16Z",
"pushed_at": "2026-05-16T03:21:48Z",
"updated_at": "2026-05-19T05:44:47Z",
"pushed_at": "2026-05-19T05:44:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2022/CVE-2022-36883.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
2022/CVE-2022-38694.json
+4 -4
View File
@@ -50,10 +50,10 @@
"description": "Bootloader unlock using CVE-2022-38694 for Anbernic Unisoc T820 devices",
"fork": false,
"created_at": "2024-06-27T14:28:13Z",
"updated_at": "2026-05-09T13:31:06Z",
"updated_at": "2026-05-19T00:48:41Z",
"pushed_at": "2025-09-19T15:48:29Z",
"stargazers_count": 60,
"watchers_count": 60,
"stargazers_count": 61,
"watchers_count": 61,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -64,7 +64,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 60,
"watchers": 61,
"score": 0,
"subscribers_count": 5
},
2022/CVE-2022-41678.json
+6 -6
View File
@@ -88,12 +88,12 @@
"description": "Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466)",
"fork": false,
"created_at": "2026-04-20T02:38:50Z",
"updated_at": "2026-05-15T06:56:36Z",
"updated_at": "2026-05-19T04:05:38Z",
"pushed_at": "2026-05-15T06:56:32Z",
"stargazers_count": 52,
"watchers_count": 52,
"stargazers_count": 53,
"watchers_count": 53,
"has_discussions": false,
"forks_count": 3,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -101,8 +101,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 52,
"forks": 4,
"watchers": 53,
"score": 0,
"subscribers_count": 2
}
2022/CVE-2022-44666.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Write-up for another forgotten Windows vulnerability (0day): Microsoft Windows Contacts (VCF\/Contact\/LDAP) syslink control href attribute escape, which was not fully fixed as CVE-2022-44666 in the patches released on December, 2022.",
"fork": false,
"created_at": "2023-02-15T18:12:04Z",
"updated_at": "2026-05-13T19:49:50Z",
"updated_at": "2026-05-19T04:44:10Z",
"pushed_at": "2023-06-18T21:10:39Z",
"stargazers_count": 154,
"watchers_count": 154,
"stargazers_count": 155,
"watchers_count": 155,
"has_discussions": false,
"forks_count": 24,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 24,
"watchers": 154,
"watchers": 155,
"score": 0,
"subscribers_count": 4
}
2023/CVE-2023-20938.json
-33
View File
@@ -64,38 +64,5 @@
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1237309226,
"name": "cve-2023-20938",
"full_name": "Cyb3rCr0wCC\/cve-2023-20938",
"owner": {
"login": "Cyb3rCr0wCC",
"id": 206536465,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206536465?v=4",
"html_url": "https:\/\/github.com\/Cyb3rCr0wCC",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Cyb3rCr0wCC\/cve-2023-20938",
"description": "My note while studying cve-2023-20938 vulnerability.",
"fork": false,
"created_at": "2026-05-13T04:14:22Z",
"updated_at": "2026-05-13T04:20:00Z",
"pushed_at": "2026-05-13T04:19:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2023/CVE-2023-27327.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Exploits for CVE-2023-27327 and CVE-2023-27328",
"fork": false,
"created_at": "2023-05-09T20:14:43Z",
"updated_at": "2025-02-14T17:11:34Z",
"updated_at": "2026-05-19T01:44:30Z",
"pushed_at": "2023-05-09T22:35:28Z",
"stargazers_count": 14,
"watchers_count": 14,
"stargazers_count": 15,
"watchers_count": 15,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 14,
"watchers": 15,
"score": 0,
"subscribers_count": 1
}
2023/CVE-2023-32434.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙",
"fork": false,
"created_at": "2025-08-13T09:19:29Z",
"updated_at": "2026-05-19T00:27:29Z",
"pushed_at": "2026-05-19T00:27:25Z",
"updated_at": "2026-05-19T03:08:52Z",
"pushed_at": "2026-05-19T03:08:48Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-39910.json
+2 -2
View File
@@ -66,8 +66,8 @@
"description": "🔒 Analyze the CVE-2023-39910 vulnerability in Libbitcoin Explorer to understand its impact on Bitcoin wallet security and protect your assets.",
"fork": false,
"created_at": "2026-01-07T14:24:08Z",
"updated_at": "2026-05-18T21:45:15Z",
"pushed_at": "2026-05-18T21:45:10Z",
"updated_at": "2026-05-19T04:13:39Z",
"pushed_at": "2026-05-19T04:13:36Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-44487.json
+8 -8
View File
@@ -14,10 +14,10 @@
"description": "Basic vulnerability scanning to see if web servers may be vulnerable to CVE-2023-44487",
"fork": false,
"created_at": "2023-10-10T14:20:42Z",
"updated_at": "2026-05-11T17:02:36Z",
"updated_at": "2026-05-19T03:44:09Z",
"pushed_at": "2024-01-08T11:12:08Z",
"stargazers_count": 243,
"watchers_count": 243,
"stargazers_count": 244,
"watchers_count": 244,
"has_discussions": false,
"forks_count": 47,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 47,
"watchers": 243,
"watchers": 244,
"score": 0,
"subscribers_count": 5
},
@@ -47,10 +47,10 @@
"description": "Proof of concept for DoS exploit ",
"fork": false,
"created_at": "2023-10-11T01:59:47Z",
"updated_at": "2026-04-13T12:19:50Z",
"updated_at": "2026-05-19T03:44:14Z",
"pushed_at": "2023-10-13T11:19:10Z",
"stargazers_count": 54,
"watchers_count": 54,
"stargazers_count": 55,
"watchers_count": 55,
"has_discussions": false,
"forks_count": 17,
"allow_forking": true,
@@ -69,7 +69,7 @@
],
"visibility": "public",
"forks": 17,
"watchers": 54,
"watchers": 55,
"score": 0,
"subscribers_count": 2
},
2023/CVE-2023-46604.json
+6 -6
View File
@@ -1045,12 +1045,12 @@
"description": "Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466)",
"fork": false,
"created_at": "2026-04-20T02:38:50Z",
"updated_at": "2026-05-15T06:56:36Z",
"updated_at": "2026-05-19T04:05:38Z",
"pushed_at": "2026-05-15T06:56:32Z",
"stargazers_count": 52,
"watchers_count": 52,
"stargazers_count": 53,
"watchers_count": 53,
"has_discussions": false,
"forks_count": 3,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1058,8 +1058,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 52,
"forks": 4,
"watchers": 53,
"score": 0,
"subscribers_count": 2
},
2023/CVE-2023-48022.json
+33
View File
@@ -1,4 +1,37 @@
[
{
"id": 741317419,
"name": "CVE-2023-48022",
"full_name": "0x656565\/CVE-2023-48022",
"owner": {
"login": "0x656565",
"id": 84010223,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/84010223?v=4",
"html_url": "https:\/\/github.com\/0x656565",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0x656565\/CVE-2023-48022",
"description": "CVE-2023-48022 exploit modified from Bishop Fox work",
"fork": false,
"created_at": "2024-01-10T06:26:01Z",
"updated_at": "2024-03-28T17:24:01Z",
"pushed_at": "2024-01-10T06:33:04Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 2,
"score": 0,
"subscribers_count": 1
},
{
"id": 779214530,
"name": "ShadowRay-RCE-PoC-CVE-2023-48022",
2024/CVE-2024-0670.json
+2 -2
View File
@@ -172,8 +172,8 @@
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
"fork": false,
"created_at": "2026-01-08T01:32:09Z",
"updated_at": "2026-05-18T21:45:36Z",
"pushed_at": "2026-05-18T21:45:31Z",
"updated_at": "2026-05-19T04:13:56Z",
"pushed_at": "2026-05-19T04:13:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-1086.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.",
"fork": false,
"created_at": "2024-03-20T21:16:41Z",
"updated_at": "2026-05-16T15:13:07Z",
"updated_at": "2026-05-19T02:32:39Z",
"pushed_at": "2024-04-17T16:09:54Z",
"stargazers_count": 2446,
"watchers_count": 2446,
"stargazers_count": 2447,
"watchers_count": 2447,
"has_discussions": false,
"forks_count": 331,
"allow_forking": true,
@@ -34,7 +34,7 @@
],
"visibility": "public",
"forks": 331,
"watchers": 2446,
"watchers": 2447,
"score": 0,
"subscribers_count": 25
},
2024/CVE-2024-23222.json
+2 -2
View File
@@ -80,8 +80,8 @@
"description": "Analyze and deobfuscate the Coruna Exploit Kit (CVE-2024-23222) to enhance understanding and detection of related threats.",
"fork": false,
"created_at": "2026-03-15T16:36:07Z",
"updated_at": "2026-05-18T22:29:45Z",
"pushed_at": "2026-05-18T22:29:42Z",
"updated_at": "2026-05-19T04:58:50Z",
"pushed_at": "2026-05-19T04:58:46Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2024/CVE-2024-32114.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466)",
"fork": false,
"created_at": "2026-04-20T02:38:50Z",
"updated_at": "2026-05-15T06:56:36Z",
"updated_at": "2026-05-19T06:37:51Z",
"pushed_at": "2026-05-15T06:56:32Z",
"stargazers_count": 52,
"watchers_count": 52,
"stargazers_count": 54,
"watchers_count": 54,
"has_discussions": false,
"forks_count": 3,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 52,
"forks": 4,
"watchers": 54,
"score": 0,
"subscribers_count": 2
}
2024/CVE-2024-37032.json
+41
View File
@@ -97,5 +97,46 @@
"watchers": 8,
"score": 0,
"subscribers_count": 1
},
{
"id": 1243045131,
"name": "CVE-2024-37032-PoC",
"full_name": "itzSh4dowxZ\/CVE-2024-37032-PoC",
"owner": {
"login": "itzSh4dowxZ",
"id": 148664323,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/148664323?v=4",
"html_url": "https:\/\/github.com\/itzSh4dowxZ",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/itzSh4dowxZ\/CVE-2024-37032-PoC",
"description": "PoC for CVE-2024-37032 (Probllama): Ollama <=0.1.33 path traversal\/arbitrary file write via model digest handling, using a FastAPI rogue registry, connector workflow, and shared object preload demo for authorized lab testing.",
"fork": false,
"created_at": "2026-05-19T02:10:28Z",
"updated_at": "2026-05-19T05:52:23Z",
"pushed_at": "2026-05-19T05:19:58Z",
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"c",
"cve-2024-37032",
"fastapi",
"ollama",
"probllama",
"python",
"shared-library"
],
"visibility": "public",
"forks": 0,
"watchers": 6,
"score": 0,
"subscribers_count": 0
}
]
2024/CVE-2024-55978.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 911200848,
"name": "CVE-2024-55978",
"full_name": "RandomRobbieBF\/CVE-2024-55978",
"owner": {
"login": "RandomRobbieBF",
"id": 51722811,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4",
"html_url": "https:\/\/github.com\/RandomRobbieBF",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-55978",
"description": "Code Generator Pro <= 1.2 - Unauthenticated SQL Injection",
"fork": false,
"created_at": "2025-01-02T13:21:36Z",
"updated_at": "2025-01-06T13:26:00Z",
"pushed_at": "2025-01-02T13:25:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
}
]
2024/CVE-2024-6485.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "A poc for Bootstrap XSS(CVE-2024-6485、CVE-2016-10735、CVE-2019-8331、CVE-2018-14040)",
"fork": false,
"created_at": "2025-07-21T08:52:37Z",
"updated_at": "2026-02-05T01:49:48Z",
"updated_at": "2026-05-19T01:11:52Z",
"pushed_at": "2025-08-21T04:06:24Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-7028.json → 2025/CVE-2025-11203.json
+12 -12
View File
@@ -1,21 +1,21 @@
[
{
"id": 1202973314,
"name": "CVE-2026-7028-SQLI",
"full_name": "Xmyronn\/CVE-2026-7028-SQLI",
"id": 1243027261,
"name": "CVE-2025-11203-PoC",
"full_name": "learner202649\/CVE-2025-11203-PoC",
"owner": {
"login": "Xmyronn",
"id": 190940534,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/190940534?v=4",
"html_url": "https:\/\/github.com\/Xmyronn",
"login": "learner202649",
"id": 274674211,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/274674211?v=4",
"html_url": "https:\/\/github.com\/learner202649",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Xmyronn\/CVE-2026-7028-SQLI",
"description": null,
"html_url": "https:\/\/github.com\/learner202649\/CVE-2025-11203-PoC",
"description": "The code for personally reproducing the corresponding vulnerability",
"fork": false,
"created_at": "2026-04-06T15:39:15Z",
"updated_at": "2026-04-26T11:16:29Z",
"pushed_at": "2026-04-08T22:00:41Z",
"created_at": "2026-05-19T01:39:07Z",
"updated_at": "2026-05-19T03:35:50Z",
"pushed_at": "2026-05-19T03:35:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-14847.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
"fork": false,
"created_at": "2025-07-30T15:52:00Z",
"updated_at": "2026-05-18T21:50:34Z",
"pushed_at": "2026-05-18T21:50:30Z",
"updated_at": "2026-05-19T04:18:51Z",
"pushed_at": "2026-05-19T04:18:48Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1129,8 +1129,8 @@
"description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
"fork": false,
"created_at": "2026-01-14T06:05:44Z",
"updated_at": "2026-05-18T21:49:49Z",
"pushed_at": "2026-05-18T21:49:33Z",
"updated_at": "2026-05-19T04:17:53Z",
"pushed_at": "2026-05-19T04:17:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-2304.json
+2 -2
View File
@@ -412,8 +412,8 @@
"description": "🛠️ Exploit CVE-2025-2304 in Camaleon CMS easily with this Python script for privilege escalation, tested on version 2.9.0.",
"fork": false,
"created_at": "2026-02-14T20:01:20Z",
"updated_at": "2026-05-18T22:10:59Z",
"pushed_at": "2026-05-18T22:10:54Z",
"updated_at": "2026-05-19T04:39:24Z",
"pushed_at": "2026-05-19T04:39:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-24071.json
+4 -4
View File
@@ -626,10 +626,10 @@
"description": "This is a python PoC scripts for CVE-2025-24071 which is a vulnerability in Windows File Explorer that allows unauthorized access to sensitive information like NTLM Exposure.",
"fork": false,
"created_at": "2025-12-16T00:20:36Z",
"updated_at": "2025-12-16T20:12:42Z",
"updated_at": "2026-05-19T04:44:53Z",
"pushed_at": "2025-12-16T20:12:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -640,7 +640,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-24257.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis",
"fork": false,
"created_at": "2026-04-04T03:42:55Z",
"updated_at": "2026-05-18T22:40:56Z",
"pushed_at": "2026-05-18T22:40:53Z",
"updated_at": "2026-05-19T05:11:38Z",
"pushed_at": "2026-05-19T05:11:34Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-31258.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔓 Explore CVE-2025-31258 with this PoC demonstrating partial sandbox escape using RemoteViewServices for practical 1-day security practice.",
"fork": false,
"created_at": "2020-06-23T15:20:11Z",
"updated_at": "2026-05-19T00:32:19Z",
"pushed_at": "2026-05-19T00:32:16Z",
"updated_at": "2026-05-19T03:14:37Z",
"pushed_at": "2026-05-19T03:14:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-32463.json
+6 -6
View File
@@ -645,8 +645,8 @@
"description": "Demonstrate CVE-2025-32463 with this PoC for sudo's chroot feature. Explore the exploit and its impact on vulnerable sudo versions. 🐱💻🔒",
"fork": false,
"created_at": "2025-07-04T18:20:09Z",
"updated_at": "2026-05-19T00:25:30Z",
"pushed_at": "2026-05-19T00:25:27Z",
"updated_at": "2026-05-19T03:07:27Z",
"pushed_at": "2026-05-19T03:07:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -1628,8 +1628,8 @@
"description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.",
"fork": false,
"created_at": "2025-09-20T00:42:07Z",
"updated_at": "2026-05-19T00:33:29Z",
"pushed_at": "2026-05-19T00:33:25Z",
"updated_at": "2026-05-19T03:15:53Z",
"pushed_at": "2026-05-19T03:15:50Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1680,8 +1680,8 @@
"description": null,
"fork": false,
"created_at": "2025-09-20T02:01:08Z",
"updated_at": "2026-05-19T00:33:31Z",
"pushed_at": "2026-05-19T00:33:27Z",
"updated_at": "2026-05-19T03:15:56Z",
"pushed_at": "2026-05-19T03:15:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-36911.json
+2 -2
View File
@@ -294,8 +294,8 @@
"description": "🔍 Scan and research CVE-2025-36911 vulnerabilities with WPair, a specialized tool for Android built in Kotlin, ensuring your applications remain secure.",
"fork": false,
"created_at": "2026-01-29T01:59:47Z",
"updated_at": "2026-05-18T22:01:34Z",
"pushed_at": "2026-05-18T22:01:30Z",
"updated_at": "2026-05-19T04:29:40Z",
"pushed_at": "2026-05-19T04:29:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-37899.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 355,
"watchers_count": 355,
"has_discussions": false,
"forks_count": 46,
"forks_count": 47,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 46,
"forks": 47,
"watchers": 355,
"score": 0,
"subscribers_count": 2
2026/CVE-2026-7071.json → 2025/CVE-2025-45809.json
+12 -12
View File
@@ -1,21 +1,21 @@
[
{
"id": 1204274854,
"name": "CVE-2026-7071-access-Control",
"full_name": "Xmyronn\/CVE-2026-7071-access-Control",
"id": 1243088466,
"name": "CVE-2025-45809-PoC",
"full_name": "learner202649\/CVE-2025-45809-PoC",
"owner": {
"login": "Xmyronn",
"id": 190940534,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/190940534?v=4",
"html_url": "https:\/\/github.com\/Xmyronn",
"login": "learner202649",
"id": 274674211,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/274674211?v=4",
"html_url": "https:\/\/github.com\/learner202649",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Xmyronn\/CVE-2026-7071-access-Control",
"description": null,
"html_url": "https:\/\/github.com\/learner202649\/CVE-2025-45809-PoC",
"description": "The code for personally reproducing the corresponding vulnerability",
"fork": false,
"created_at": "2026-04-07T21:24:33Z",
"updated_at": "2026-04-26T11:16:03Z",
"pushed_at": "2026-04-08T21:55:58Z",
"created_at": "2026-05-19T03:21:37Z",
"updated_at": "2026-05-19T03:27:28Z",
"pushed_at": "2026-05-19T03:27:24Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-48757.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Claude Skill that audits your projects for RLS misconfigurations, exposed keys, auth bypasses, and storage vulnerabilities. 27 anti-patterns sourced from CVE-2025-48757 and 10 security studies. Safe for production.",
"fork": false,
"created_at": "2026-03-15T14:49:30Z",
"updated_at": "2026-05-15T19:22:54Z",
"updated_at": "2026-05-19T05:54:54Z",
"pushed_at": "2026-04-30T08:42:55Z",
"stargazers_count": 20,
"watchers_count": 20,
"stargazers_count": 21,
"watchers_count": 21,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -44,7 +44,7 @@
],
"visibility": "public",
"forks": 3,
"watchers": 20,
"watchers": 21,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-49144.json
+2 -2
View File
@@ -251,8 +251,8 @@
"description": null,
"fork": false,
"created_at": "2025-09-19T17:17:19Z",
"updated_at": "2026-05-19T00:33:22Z",
"pushed_at": "2026-05-19T00:33:19Z",
"updated_at": "2026-05-19T03:15:48Z",
"pushed_at": "2026-05-19T03:15:44Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-49844.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.",
"fork": false,
"created_at": "2019-04-13T07:51:09Z",
"updated_at": "2026-05-18T21:07:46Z",
"pushed_at": "2026-05-18T21:07:41Z",
"updated_at": "2026-05-19T03:35:08Z",
"pushed_at": "2026-05-19T03:35:04Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
"fork": false,
"created_at": "2022-04-06T09:27:39Z",
"updated_at": "2026-05-18T21:08:00Z",
"pushed_at": "2026-05-18T21:07:56Z",
"updated_at": "2026-05-19T03:35:59Z",
"pushed_at": "2026-05-19T03:35:55Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-5419.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛡️ Analyze CVE-2025-5419 to exploit an uninitialized read vulnerability in V8 for arbitrary read\/write access within the sandbox environment.",
"fork": false,
"created_at": "2023-01-25T04:41:49Z",
"updated_at": "2026-05-18T22:09:31Z",
"pushed_at": "2026-05-18T22:09:22Z",
"updated_at": "2026-05-19T04:37:47Z",
"pushed_at": "2026-05-19T04:37:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-54253.json
+2 -2
View File
@@ -67,8 +67,8 @@
"description": "🐙 CVE-2025-54253 exploit demo for Adobe AEM Forms on JEE: OGNL injection to RCE with PoC, Python 3.10 exploit code, reproducer and mitigation guidance.",
"fork": false,
"created_at": "2025-08-17T22:04:33Z",
"updated_at": "2026-05-19T00:28:04Z",
"pushed_at": "2026-05-19T00:28:01Z",
"updated_at": "2026-05-19T03:10:11Z",
"pushed_at": "2026-05-19T03:10:06Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-54424.json
+2 -2
View File
@@ -53,8 +53,8 @@
"description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐",
"fork": false,
"created_at": "2025-08-14T05:16:16Z",
"updated_at": "2026-05-19T00:27:42Z",
"pushed_at": "2026-05-19T00:27:38Z",
"updated_at": "2026-05-19T03:09:50Z",
"pushed_at": "2026-05-19T03:09:47Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2025/CVE-2025-55182.json
+32 -32
View File
@@ -14,8 +14,8 @@
"description": "🔍 Demonstrate CVE-2025-55182, a critical vulnerability in React Server Components allowing unauthenticated arbitrary code execution.",
"fork": false,
"created_at": "2021-09-18T02:04:33Z",
"updated_at": "2026-05-18T21:36:30Z",
"pushed_at": "2026-05-18T21:36:26Z",
"updated_at": "2026-05-19T04:04:51Z",
"pushed_at": "2026-05-19T04:04:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.",
"fork": false,
"created_at": "2022-06-17T10:19:10Z",
"updated_at": "2026-05-18T21:36:03Z",
"pushed_at": "2026-05-18T21:36:00Z",
"updated_at": "2026-05-19T04:04:24Z",
"pushed_at": "2026-05-19T04:04:21Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -151,8 +151,8 @@
"description": "🔍 Detect vulnerabilities CVE-2025-55182 and CVE-2025-66478 in Next.js apps with this reliable command-line scanner.",
"fork": false,
"created_at": "2023-11-27T18:17:43Z",
"updated_at": "2026-05-18T21:36:12Z",
"pushed_at": "2026-05-18T21:36:08Z",
"updated_at": "2026-05-19T04:04:37Z",
"pushed_at": "2026-05-19T04:04:33Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -203,8 +203,8 @@
"description": "🚨 Exploit CVE-2025-55182, a critical RCE vulnerability in React Server Components for Next.js apps; enables testing for prototype pollution risks.",
"fork": false,
"created_at": "2024-04-24T02:36:56Z",
"updated_at": "2026-05-18T21:37:12Z",
"pushed_at": "2026-05-18T21:37:08Z",
"updated_at": "2026-05-19T04:05:30Z",
"pushed_at": "2026-05-19T04:05:26Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -251,8 +251,8 @@
"description": "🚨 Exploit and scan for CVE-2025-55182, a critical React\/Next.js vulnerability enabling remote code execution through prototype pollution techniques.",
"fork": false,
"created_at": "2024-05-28T16:48:51Z",
"updated_at": "2026-05-18T21:35:53Z",
"pushed_at": "2026-05-18T21:35:49Z",
"updated_at": "2026-05-19T04:04:08Z",
"pushed_at": "2026-05-19T04:04:04Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -303,8 +303,8 @@
"description": null,
"fork": false,
"created_at": "2024-11-29T12:32:19Z",
"updated_at": "2026-05-18T21:36:53Z",
"pushed_at": "2026-05-18T21:36:50Z",
"updated_at": "2026-05-19T04:05:07Z",
"pushed_at": "2026-05-19T04:05:03Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -352,8 +352,8 @@
"description": "🛠️ Exploit CVE-2025-55182 effortlessly with this GUI tool for vulnerability detection, command execution, and Shell reverse connections.",
"fork": false,
"created_at": "2025-04-21T22:04:31Z",
"updated_at": "2026-05-18T21:39:56Z",
"pushed_at": "2026-05-18T21:39:38Z",
"updated_at": "2026-05-19T04:07:53Z",
"pushed_at": "2026-05-19T04:07:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -406,8 +406,8 @@
"description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
"fork": false,
"created_at": "2025-06-06T16:34:46Z",
"updated_at": "2026-05-18T21:36:24Z",
"pushed_at": "2026-05-18T21:36:19Z",
"updated_at": "2026-05-19T04:04:42Z",
"pushed_at": "2026-05-19T04:04:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -458,8 +458,8 @@
"description": "⚠️ Explore a vulnerable environment to test security scanners against the CVE-2025-55182 RCE flaw in React Server Components and Next.js applications.",
"fork": false,
"created_at": "2025-07-15T18:33:34Z",
"updated_at": "2026-05-18T21:37:29Z",
"pushed_at": "2026-05-18T21:37:11Z",
"updated_at": "2026-05-19T04:05:30Z",
"pushed_at": "2026-05-19T04:05:27Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -12284,8 +12284,8 @@
"description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.",
"fork": false,
"created_at": "2025-12-24T14:48:19Z",
"updated_at": "2026-05-18T21:36:04Z",
"pushed_at": "2026-05-18T21:36:00Z",
"updated_at": "2026-05-19T04:04:38Z",
"pushed_at": "2026-05-19T04:04:34Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12369,8 +12369,8 @@
"description": "🚨 Identify and address CVE-2025-55182, a critical React Server vulnerability allowing remote code execution without authentication.",
"fork": false,
"created_at": "2025-12-24T18:44:51Z",
"updated_at": "2026-05-18T21:35:23Z",
"pushed_at": "2026-05-18T21:35:19Z",
"updated_at": "2026-05-19T04:03:39Z",
"pushed_at": "2026-05-19T04:03:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12418,8 +12418,8 @@
"description": "🚨 Demonstrate CVE-2025-55182, a critical React vulnerability allowing remote code execution via prototype chain pollution in `[email protected]`.",
"fork": false,
"created_at": "2025-12-24T18:48:07Z",
"updated_at": "2026-05-18T21:35:25Z",
"pushed_at": "2026-05-18T21:35:21Z",
"updated_at": "2026-05-19T04:03:45Z",
"pushed_at": "2026-05-19T04:03:41Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12503,8 +12503,8 @@
"description": "🔍 Exploit CVE-2025-55182 in Next.js with this versatile tool for security research, featuring advanced payloads and WAF bypass techniques.",
"fork": false,
"created_at": "2025-12-25T19:28:28Z",
"updated_at": "2026-05-18T21:36:55Z",
"pushed_at": "2026-05-18T21:36:51Z",
"updated_at": "2026-05-19T04:05:16Z",
"pushed_at": "2026-05-19T04:05:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12705,8 +12705,8 @@
"description": "⚡ Discover and exploit CVE-2025-55182 with this PoC, offering reliable remote code execution tests for React Server Components in Next.js.",
"fork": false,
"created_at": "2025-12-26T22:26:55Z",
"updated_at": "2026-05-18T21:36:50Z",
"pushed_at": "2026-05-18T21:36:46Z",
"updated_at": "2026-05-19T04:05:16Z",
"pushed_at": "2026-05-19T04:05:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12975,8 +12975,8 @@
"description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
"fork": false,
"created_at": "2026-01-02T01:28:57Z",
"updated_at": "2026-05-18T21:41:16Z",
"pushed_at": "2026-05-18T21:41:12Z",
"updated_at": "2026-05-19T04:09:43Z",
"pushed_at": "2026-05-19T04:09:40Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -13496,8 +13496,8 @@
"description": "🔍 Exploit CVE-2025-55182 vulnerabilities in Next.js and React with this efficient framework for rapid testing and assessment.",
"fork": false,
"created_at": "2026-01-08T16:28:04Z",
"updated_at": "2026-05-18T21:46:18Z",
"pushed_at": "2026-05-18T21:46:14Z",
"updated_at": "2026-05-19T04:14:41Z",
"pushed_at": "2026-05-19T04:14:38Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-55184.json
+2 -2
View File
@@ -289,8 +289,8 @@
"description": "🛠️ Test and validate the CVE-2025-55184 vulnerability in React Server Components to enhance your application's security against denial-of-service attacks.",
"fork": false,
"created_at": "2026-01-02T05:04:03Z",
"updated_at": "2026-05-18T21:41:39Z",
"pushed_at": "2026-05-18T21:41:34Z",
"updated_at": "2026-05-19T04:10:05Z",
"pushed_at": "2026-05-19T04:10:01Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-59287.json
+2 -2
View File
@@ -200,8 +200,8 @@
"description": "🔍 Analyze WSUS deserialization behavior to enhance security, generate reports, and identify configuration weaknesses in your infrastructure.",
"fork": false,
"created_at": "2026-01-29T02:16:04Z",
"updated_at": "2026-05-18T22:01:28Z",
"pushed_at": "2026-05-18T22:01:24Z",
"updated_at": "2026-05-19T04:29:44Z",
"pushed_at": "2026-05-19T04:29:41Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-59536.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "CVE-2025-59536: RCE via Claude Code Project Hooks (PoC)",
"fork": false,
"created_at": "2026-05-17T08:15:34Z",
"updated_at": "2026-05-17T10:39:15Z",
"pushed_at": "2026-05-17T10:39:11Z",
"updated_at": "2026-05-19T01:25:53Z",
"pushed_at": "2026-05-19T01:25:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-61638.json
+1 -1
View File
@@ -15,7 +15,7 @@
"fork": false,
"created_at": "2025-11-28T11:15:01Z",
"updated_at": "2026-05-16T18:47:31Z",
"pushed_at": "2026-05-16T18:47:34Z",
"pushed_at": "2026-05-19T00:48:33Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-61882.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔍 Detect vulnerabilities CVE-2025-61882 and CVE-2025-61884 in Oracle E-Business Suite to help secure your systems from potential remote code execution threats.",
"fork": false,
"created_at": "2025-03-04T15:38:32Z",
"updated_at": "2026-05-18T21:05:56Z",
"pushed_at": "2026-05-18T21:05:52Z",
"updated_at": "2026-05-19T03:33:44Z",
"pushed_at": "2026-05-19T03:33:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-6554.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "🔍 Demonstrate and validate the `addressof` and `fakeobj` primitives in the V8 sandbox for advanced security research on CVE-2025-6554.",
"fork": false,
"created_at": "2025-08-10T21:07:43Z",
"updated_at": "2026-05-18T21:31:15Z",
"pushed_at": "2026-05-18T21:31:11Z",
"updated_at": "2026-05-19T03:59:27Z",
"pushed_at": "2026-05-19T03:59:23Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-66398.json
+2 -2
View File
@@ -64,8 +64,8 @@
"description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.",
"fork": false,
"created_at": "2026-03-23T09:09:21Z",
"updated_at": "2026-05-18T22:34:56Z",
"pushed_at": "2026-05-18T22:34:52Z",
"updated_at": "2026-05-19T05:04:13Z",
"pushed_at": "2026-05-19T05:04:10Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-66478.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.",
"fork": false,
"created_at": "2025-10-01T07:40:09Z",
"updated_at": "2026-05-18T21:37:56Z",
"pushed_at": "2026-05-18T21:37:33Z",
"updated_at": "2026-05-19T04:05:57Z",
"pushed_at": "2026-05-19T04:05:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-68921.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.",
"fork": false,
"created_at": "2026-01-24T21:00:41Z",
"updated_at": "2026-05-18T21:58:31Z",
"pushed_at": "2026-05-18T21:58:28Z",
"updated_at": "2026-05-19T04:26:44Z",
"pushed_at": "2026-05-19T04:26:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-69985.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit CVE-2025-69985 to bypass authentication and execute remote commands on FUXA versions ≤ 1.2.8 via the \/api\/runscript endpoint.",
"fork": false,
"created_at": "2025-04-10T09:18:30Z",
"updated_at": "2026-05-18T22:22:42Z",
"pushed_at": "2026-05-18T22:22:38Z",
"updated_at": "2026-05-19T04:51:15Z",
"pushed_at": "2026-05-19T04:51:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-70795.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.",
"fork": false,
"created_at": "2024-04-20T04:18:24Z",
"updated_at": "2026-05-18T22:18:28Z",
"pushed_at": "2026-05-18T22:18:23Z",
"updated_at": "2026-05-19T04:46:56Z",
"pushed_at": "2026-05-19T04:46:52Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-7771.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2025-7771: Arbitrary physical memory and I\/O port read\/write via ThrottleStop driver",
"fork": false,
"created_at": "2025-08-31T12:46:25Z",
"updated_at": "2026-04-26T12:58:44Z",
"updated_at": "2026-05-19T03:07:50Z",
"pushed_at": "2025-09-05T12:51:44Z",
"stargazers_count": 15,
"watchers_count": 15,
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 7,
"watchers": 15,
"watchers": 16,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-8088.json
+2 -2
View File
@@ -838,8 +838,8 @@
"description": "🛠 Exploit CVE-2025-8088 with this Python tool to generate malicious WinRAR archives that ensure payload persistence in Windows startup folders.",
"fork": false,
"created_at": "2025-12-20T13:52:21Z",
"updated_at": "2026-05-18T21:32:28Z",
"pushed_at": "2026-05-18T21:32:25Z",
"updated_at": "2026-05-19T04:00:36Z",
"pushed_at": "2026-05-19T04:00:33Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-8110.json
+2 -2
View File
@@ -146,8 +146,8 @@
"description": "🔍 Detect improper symbolic link handling in Gogs' PutContents API, exposing local code execution risks for versions 0.13.3 and earlier.",
"fork": false,
"created_at": "2025-12-31T13:25:07Z",
"updated_at": "2026-05-18T21:40:50Z",
"pushed_at": "2026-05-18T21:40:46Z",
"updated_at": "2026-05-19T04:09:09Z",
"pushed_at": "2026-05-19T04:09:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-9074.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🚀 Exploit CVE-2025-9074 with this Docker escape framework, simplifying API vulnerabilities and enhancing security testing for developers and researchers.",
"fork": false,
"created_at": "2024-06-19T23:21:41Z",
"updated_at": "2026-05-18T21:42:12Z",
"pushed_at": "2026-05-18T21:42:08Z",
"updated_at": "2026-05-19T04:10:33Z",
"pushed_at": "2026-05-19T04:10:29Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-0828.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.",
"fork": false,
"created_at": "2024-04-20T04:18:24Z",
"updated_at": "2026-05-18T22:18:28Z",
"pushed_at": "2026-05-18T22:18:23Z",
"updated_at": "2026-05-19T04:46:56Z",
"pushed_at": "2026-05-19T04:46:52Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-20841.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.",
"fork": false,
"created_at": "2024-09-22T12:19:06Z",
"updated_at": "2026-05-18T22:17:47Z",
"pushed_at": "2026-05-18T22:17:43Z",
"updated_at": "2026-05-19T04:46:09Z",
"pushed_at": "2026-05-19T04:46:05Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.",
"fork": false,
"created_at": "2026-02-26T05:21:28Z",
"updated_at": "2026-05-18T22:16:56Z",
"pushed_at": "2026-05-18T22:16:50Z",
"updated_at": "2026-05-19T04:45:12Z",
"pushed_at": "2026-05-19T04:45:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-22679.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Critical RCE vulnerability (CVSS 9.3) in Weaver E-cology platform versions prior to build 20260312. Unauthenticated remote code execution via exposed debug endpoint at \/papi\/esearch\/data\/devops\/dubboApi\/debug\/method. Comprehensive analysis, proof-of-concept, and detection guidance included.",
"fork": false,
"created_at": "2026-04-16T13:55:42Z",
"updated_at": "2026-05-05T14:24:30Z",
"updated_at": "2026-05-19T02:05:19Z",
"pushed_at": "2026-04-16T13:56:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -38,7 +38,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-2406.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔍 Analyze and detect CVE-2026-2406 vulnerabilities in Telnet to enhance security and prevent unauthorized access with this professional research engine.",
"fork": false,
"created_at": "2025-04-16T07:20:12Z",
"updated_at": "2026-05-18T22:08:52Z",
"pushed_at": "2026-05-18T22:08:48Z",
"updated_at": "2026-05-19T04:37:12Z",
"pushed_at": "2026-05-19T04:37:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24061.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.",
"fork": false,
"created_at": "2026-02-03T19:46:10Z",
"updated_at": "2026-05-18T22:05:54Z",
"pushed_at": "2026-05-18T22:05:49Z",
"updated_at": "2026-05-19T04:34:01Z",
"pushed_at": "2026-05-19T04:33:57Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24291.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions",
"fork": false,
"created_at": "2026-03-26T04:38:27Z",
"updated_at": "2026-05-18T22:36:53Z",
"pushed_at": "2026-05-18T22:36:50Z",
"updated_at": "2026-05-19T05:06:26Z",
"pushed_at": "2026-05-19T05:06:22Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-2441.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.",
"fork": false,
"created_at": "2026-03-03T14:19:18Z",
"updated_at": "2026-05-18T22:20:08Z",
"pushed_at": "2026-05-18T22:20:04Z",
"updated_at": "2026-05-19T04:48:34Z",
"pushed_at": "2026-05-19T04:48:30Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-2472.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.",
"fork": false,
"created_at": "2026-03-10T14:40:04Z",
"updated_at": "2026-05-18T22:25:04Z",
"pushed_at": "2026-05-18T22:24:59Z",
"updated_at": "2026-05-19T04:53:57Z",
"pushed_at": "2026-05-19T04:53:53Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-25643.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit Frigate NVR ≤0.16.3 to execute commands remotely by abusing a configuration flaw without needing shell access or output capture.",
"fork": false,
"created_at": "2026-03-07T20:23:08Z",
"updated_at": "2026-05-18T22:23:49Z",
"pushed_at": "2026-05-18T22:23:45Z",
"updated_at": "2026-05-19T04:52:38Z",
"pushed_at": "2026-05-19T04:52:34Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-2991.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Explore a PoC for CVE-2026-2991, an auth bypass in KiviCare 4.1.2 and earlier via the patient social-login REST endpoint",
"fork": false,
"created_at": "2026-04-03T20:26:43Z",
"updated_at": "2026-05-18T22:40:37Z",
"pushed_at": "2026-05-18T22:40:33Z",
"updated_at": "2026-05-19T05:11:06Z",
"pushed_at": "2026-05-19T05:11:01Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-31431.json
+39 -39
View File
@@ -47,12 +47,12 @@
"description": "Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code",
"fork": false,
"created_at": "2026-04-29T12:15:28Z",
"updated_at": "2026-05-19T00:17:11Z",
"updated_at": "2026-05-19T06:17:38Z",
"pushed_at": "2026-04-29T21:21:46Z",
"stargazers_count": 3846,
"watchers_count": 3846,
"stargazers_count": 3852,
"watchers_count": 3852,
"has_discussions": false,
"forks_count": 850,
"forks_count": 854,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -71,8 +71,8 @@
"xint-code"
],
"visibility": "public",
"forks": 850,
"watchers": 3846,
"forks": 854,
"watchers": 3852,
"score": 0,
"subscribers_count": 32
},
@@ -1899,12 +1899,12 @@
"description": "CVE-2026-31431 Copy Fail — Universal LPE exploit. Dynamic ELF offset + full-binary overwrite, Python 2\/3 compatible with ctypes splice fallback",
"fork": false,
"created_at": "2026-04-30T10:49:03Z",
"updated_at": "2026-05-18T13:50:37Z",
"updated_at": "2026-05-19T03:51:32Z",
"pushed_at": "2026-05-06T16:22:13Z",
"stargazers_count": 52,
"watchers_count": 52,
"stargazers_count": 53,
"watchers_count": 53,
"has_discussions": false,
"forks_count": 10,
"forks_count": 11,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1920,8 +1920,8 @@
"privilege-escalation"
],
"visibility": "public",
"forks": 10,
"watchers": 52,
"forks": 11,
"watchers": 53,
"score": 0,
"subscribers_count": 0
},
@@ -2039,10 +2039,10 @@
"description": "PoC: fully unprivileged container escape to node-level code execution on Kubernetes via CVE-2026-31431 page-cache corruption + shared image layers. Validated on Alibaba Cloud ACK, Amazon EKS and Google GKE.",
"fork": false,
"created_at": "2026-04-30T11:33:22Z",
"updated_at": "2026-05-18T15:11:16Z",
"updated_at": "2026-05-19T03:06:27Z",
"pushed_at": "2026-05-07T09:04:29Z",
"stargazers_count": 137,
"watchers_count": 137,
"stargazers_count": 138,
"watchers_count": 138,
"has_discussions": false,
"forks_count": 23,
"allow_forking": true,
@@ -2064,7 +2064,7 @@
],
"visibility": "public",
"forks": 23,
"watchers": 137,
"watchers": 138,
"score": 0,
"subscribers_count": 0
},
@@ -4469,10 +4469,10 @@
"description": "Copy Fail -- CVE-2026-31431 - Hardened AF_ALG\/splice page-cache mutation primitive for RedTeam Ops.",
"fork": false,
"created_at": "2026-05-01T10:43:26Z",
"updated_at": "2026-05-13T11:18:52Z",
"updated_at": "2026-05-19T06:39:34Z",
"pushed_at": "2026-05-01T16:19:38Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -4494,7 +4494,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
@@ -5642,12 +5642,12 @@
"description": "CVE-2026-31431 容器逃逸",
"fork": false,
"created_at": "2026-05-02T03:13:02Z",
"updated_at": "2026-05-15T15:14:58Z",
"updated_at": "2026-05-19T04:02:27Z",
"pushed_at": "2026-05-02T03:20:36Z",
"stargazers_count": 17,
"watchers_count": 17,
"stargazers_count": 18,
"watchers_count": 18,
"has_discussions": false,
"forks_count": 5,
"forks_count": 6,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -5655,8 +5655,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 17,
"forks": 6,
"watchers": 18,
"score": 0,
"subscribers_count": 0
},
@@ -7303,8 +7303,8 @@
"description": "Read-only Bash checker for the Copy Fail Linux kernel vulnerability (CVE-2026-31431)",
"fork": false,
"created_at": "2026-05-04T05:30:03Z",
"updated_at": "2026-05-13T00:51:00Z",
"pushed_at": "2026-05-04T05:38:36Z",
"updated_at": "2026-05-19T05:45:33Z",
"pushed_at": "2026-05-19T05:45:57Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
@@ -7878,8 +7878,8 @@
"description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.",
"fork": false,
"created_at": "2026-05-05T04:58:21Z",
"updated_at": "2026-05-18T22:58:15Z",
"pushed_at": "2026-05-18T22:58:11Z",
"updated_at": "2026-05-19T05:30:46Z",
"pushed_at": "2026-05-19T05:30:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -8713,8 +8713,8 @@
"description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.",
"fork": false,
"created_at": "2026-05-06T09:49:14Z",
"updated_at": "2026-05-18T22:59:05Z",
"pushed_at": "2026-05-18T22:59:01Z",
"updated_at": "2026-05-19T05:31:51Z",
"pushed_at": "2026-05-19T05:31:47Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
@@ -9561,7 +9561,7 @@
"description": "Detector + PoC for Linux page-cache write vulnerabilities: Copy Fail (CVE-2026-31431) and Dirty Frag (CVE-2026-43284\/43500). Authorized security research only.",
"fork": false,
"created_at": "2026-05-08T14:05:37Z",
"updated_at": "2026-05-18T15:59:25Z",
"updated_at": "2026-05-19T02:01:46Z",
"pushed_at": "2026-05-17T14:38:43Z",
"stargazers_count": 14,
"watchers_count": 14,
@@ -10107,8 +10107,8 @@
"description": "A CVE-2026-31431 implementation in c++ and inline assembly dependency free",
"fork": false,
"created_at": "2026-05-12T07:30:56Z",
"updated_at": "2026-05-18T05:53:35Z",
"pushed_at": "2026-05-18T05:53:53Z",
"updated_at": "2026-05-19T03:57:33Z",
"pushed_at": "2026-05-19T03:58:03Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
@@ -10646,10 +10646,10 @@
"description": "Research artifacts, PoC scripts, and lab assets for the Copy Fail Linux local privilege escalation writeup on 4xura.com\/{wait_for_post_released}}.",
"fork": false,
"created_at": "2026-05-18T05:23:15Z",
"updated_at": "2026-05-19T00:42:29Z",
"updated_at": "2026-05-19T02:08:47Z",
"pushed_at": "2026-05-18T09:02:53Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -10660,7 +10660,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-31802.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"fork": false,
"created_at": "2026-03-28T20:49:46Z",
"updated_at": "2026-05-18T22:37:53Z",
"pushed_at": "2026-05-18T22:37:49Z",
"updated_at": "2026-05-19T05:07:43Z",
"pushed_at": "2026-05-19T05:07:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-34197.json
+6 -39
View File
@@ -1,37 +1,4 @@
[
{
"id": 1205274738,
"name": "CVE-2026-34197",
"full_name": "DEVSECURITYSPRO\/CVE-2026-34197",
"owner": {
"login": "DEVSECURITYSPRO",
"id": 212176934,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/212176934?v=4",
"html_url": "https:\/\/github.com\/DEVSECURITYSPRO",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/DEVSECURITYSPRO\/CVE-2026-34197",
"description": "CVE-2026-34197 - Apache ActiveMQ RCE via Jolokia Endpoint PoC",
"fork": false,
"created_at": "2026-04-08T20:07:01Z",
"updated_at": "2026-05-06T11:53:41Z",
"pushed_at": "2026-04-08T20:07:07Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 4,
"score": 0,
"subscribers_count": 1
},
{
"id": 1205805147,
"name": "CVE-2026-34197-Apache-ActiveMQ-RCE",
@@ -222,12 +189,12 @@
"description": "Apache ActiveMQ漏洞综合利用工具(CVE-2015-5254，CVE-2016-3088，CVE-2022-41678，CVE-2023-46604，CVE-2024-32114，CVE-2026-34197，CVE-2026-40466)",
"fork": false,
"created_at": "2026-04-20T02:38:50Z",
"updated_at": "2026-05-15T06:56:36Z",
"updated_at": "2026-05-19T06:37:51Z",
"pushed_at": "2026-05-15T06:56:32Z",
"stargazers_count": 52,
"watchers_count": 52,
"stargazers_count": 54,
"watchers_count": 54,
"has_discussions": false,
"forks_count": 3,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -235,8 +202,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 52,
"forks": 4,
"watchers": 54,
"score": 0,
"subscribers_count": 2
},
2026/CVE-2026-34486.json
+33
View File
@@ -163,5 +163,38 @@
"watchers": 64,
"score": 0,
"subscribers_count": 0
},
{
"id": 1243094226,
"name": "CVE-2026-34486-e-Tomcat-Tribes",
"full_name": "anonmrc\/CVE-2026-34486-e-Tomcat-Tribes",
"owner": {
"login": "anonmrc",
"id": 52287676,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/52287676?v=4",
"html_url": "https:\/\/github.com\/anonmrc",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/anonmrc\/CVE-2026-34486-e-Tomcat-Tribes",
"description": null,
"fork": false,
"created_at": "2026-05-19T03:31:20Z",
"updated_at": "2026-05-19T03:31:20Z",
"pushed_at": "2026-05-19T03:31:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-34621.json
+4 -4
View File
@@ -146,10 +146,10 @@
"description": null,
"fork": false,
"created_at": "2026-05-12T20:58:43Z",
"updated_at": "2026-05-18T07:23:21Z",
"updated_at": "2026-05-19T06:48:57Z",
"pushed_at": "2026-05-12T21:15:55Z",
"stargazers_count": 12,
"watchers_count": 12,
"stargazers_count": 13,
"watchers_count": 13,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -160,7 +160,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 12,
"watchers": 13,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-6201.json → 2026/CVE-2026-36748.json
+11 -11
View File
@@ -1,21 +1,21 @@
[
{
"id": 1202324850,
"name": "CVE-2026-6201-IDOR",
"full_name": "Xmyronn\/CVE-2026-6201-IDOR",
"id": 1243049404,
"name": "CVE-2026-36748",
"full_name": "rufflabs\/CVE-2026-36748",
"owner": {
"login": "Xmyronn",
"id": 190940534,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/190940534?v=4",
"html_url": "https:\/\/github.com\/Xmyronn",
"login": "rufflabs",
"id": 1290999,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1290999?v=4",
"html_url": "https:\/\/github.com\/rufflabs",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Xmyronn\/CVE-2026-6201-IDOR",
"html_url": "https:\/\/github.com\/rufflabs\/CVE-2026-36748",
"description": null,
"fork": false,
"created_at": "2026-04-05T22:28:22Z",
"updated_at": "2026-04-13T11:44:15Z",
"pushed_at": "2026-04-08T21:59:27Z",
"created_at": "2026-05-19T02:17:46Z",
"updated_at": "2026-05-19T02:17:47Z",
"pushed_at": "2026-05-19T02:17:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-39636.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "暂无",
"fork": false,
"created_at": "2026-05-18T07:01:22Z",
"updated_at": "2026-05-18T07:28:26Z",
"updated_at": "2026-05-19T03:30:08Z",
"pushed_at": "2026-05-18T07:28:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-40369.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browsers render process sandbox",
"fork": false,
"created_at": "2026-05-13T20:56:15Z",
"updated_at": "2026-05-19T00:12:21Z",
"updated_at": "2026-05-19T06:39:13Z",
"pushed_at": "2026-05-18T21:29:59Z",
"stargazers_count": 86,
"watchers_count": 86,
"stargazers_count": 96,
"watchers_count": 96,
"has_discussions": false,
"forks_count": 16,
"forks_count": 18,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 16,
"watchers": 86,
"forks": 18,
"watchers": 96,
"score": 0,
"subscribers_count": 2
}
2026/CVE-2026-40897.json
+6 -6
View File
@@ -11,13 +11,13 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/EQSTLab\/CVE-2026-40897",
"description": "mathjs",
"description": "Math.js Expression Parser RCE",
"fork": false,
"created_at": "2026-05-07T04:27:44Z",
"updated_at": "2026-05-07T04:27:48Z",
"pushed_at": "2026-05-07T04:27:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"updated_at": "2026-05-19T06:13:10Z",
"pushed_at": "2026-05-19T06:13:07Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-41940.json
+6 -6
View File
@@ -771,10 +771,10 @@
"description": "cPanel\/WHM Authentication Bypass (Zero-Day Vulnerability)",
"fork": false,
"created_at": "2026-05-01T14:57:03Z",
"updated_at": "2026-05-18T23:54:39Z",
"updated_at": "2026-05-19T05:40:06Z",
"pushed_at": "2026-05-16T10:26:21Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -795,7 +795,7 @@
],
"visibility": "public",
"forks": 2,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
@@ -1845,8 +1845,8 @@
"description": "Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.",
"fork": false,
"created_at": "2026-05-06T18:08:48Z",
"updated_at": "2026-05-18T22:59:24Z",
"pushed_at": "2026-05-18T22:59:20Z",
"updated_at": "2026-05-19T05:32:06Z",
"pushed_at": "2026-05-19T05:32:01Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-42945.json
+47 -14
View File
@@ -14,12 +14,12 @@
"description": "exploit for CVE-2026-42945",
"fork": false,
"created_at": "2026-05-12T23:05:32Z",
"updated_at": "2026-05-18T23:48:11Z",
"updated_at": "2026-05-19T05:59:56Z",
"pushed_at": "2026-05-13T18:40:57Z",
"stargazers_count": 710,
"watchers_count": 710,
"stargazers_count": 721,
"watchers_count": 721,
"has_discussions": false,
"forks_count": 121,
"forks_count": 123,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 121,
"watchers": 710,
"forks": 123,
"watchers": 721,
"score": 0,
"subscribers_count": 5
},
@@ -52,7 +52,7 @@
"stargazers_count": 30,
"watchers_count": 30,
"has_discussions": false,
"forks_count": 7,
"forks_count": 8,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 7,
"forks": 8,
"watchers": 30,
"score": 0,
"subscribers_count": 0
@@ -146,10 +146,10 @@
"description": "exploit for CVE-2026-42945",
"fork": false,
"created_at": "2026-05-14T11:38:08Z",
"updated_at": "2026-05-18T13:17:20Z",
"updated_at": "2026-05-19T05:43:05Z",
"pushed_at": "2026-05-14T11:38:47Z",
"stargazers_count": 12,
"watchers_count": 12,
"stargazers_count": 15,
"watchers_count": 15,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -160,7 +160,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 12,
"watchers": 15,
"score": 0,
"subscribers_count": 1
},
@@ -217,7 +217,7 @@
"stargazers_count": 14,
"watchers_count": 14,
"has_discussions": false,
"forks_count": 2,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -225,7 +225,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"forks": 3,
"watchers": 14,
"score": 0,
"subscribers_count": 0
@@ -724,5 +724,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1243036207,
"name": "CVE-2026-42945",
"full_name": "imSre9\/CVE-2026-42945",
"owner": {
"login": "imSre9",
"id": 143157786,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/143157786?v=4",
"html_url": "https:\/\/github.com\/imSre9",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/imSre9\/CVE-2026-42945",
"description": null,
"fork": false,
"created_at": "2026-05-19T01:54:52Z",
"updated_at": "2026-05-19T02:26:12Z",
"pushed_at": "2026-05-19T02:26:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-43284.json
+42 -4
View File
@@ -355,10 +355,10 @@
"description": "arm64\/aarch64 port of V4bel\/dirtyfrag (CVE-2026-43284). ESP-only - rxrpc path kernel-oopses on arm64 due to flush_dcache_page",
"fork": false,
"created_at": "2026-05-10T04:22:19Z",
"updated_at": "2026-05-18T00:58:12Z",
"updated_at": "2026-05-19T02:03:07Z",
"pushed_at": "2026-05-13T08:32:55Z",
"stargazers_count": 17,
"watchers_count": 17,
"stargazers_count": 18,
"watchers_count": 18,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -383,7 +383,7 @@
],
"visibility": "public",
"forks": 5,
"watchers": 17,
"watchers": 18,
"score": 0,
"subscribers_count": 0
},
@@ -659,5 +659,43 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1243006856,
"name": "CVE-2026-43284",
"full_name": "LucasPDiniz\/CVE-2026-43284",
"owner": {
"login": "LucasPDiniz",
"id": 57265360,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57265360?v=4",
"html_url": "https:\/\/github.com\/LucasPDiniz",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/LucasPDiniz\/CVE-2026-43284",
"description": "Dirty Frag - kernel Linux critical Vulnerability",
"fork": false,
"created_at": "2026-05-19T01:02:36Z",
"updated_at": "2026-05-19T01:06:45Z",
"pushed_at": "2026-05-19T01:05:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-43284",
"dirty-frag",
"kernel",
"vulnerability"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-46333.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "CVE-2026-46333",
"fork": false,
"created_at": "2026-05-17T10:14:44Z",
"updated_at": "2026-05-19T00:39:10Z",
"updated_at": "2026-05-19T05:18:37Z",
"pushed_at": "2026-05-17T10:38:48Z",
"stargazers_count": 6,
"watchers_count": 6,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 6,
"watchers": 8,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-46391.json
+2 -2
View File
@@ -11,10 +11,10 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/bradyjmcl\/cve-2026-46391",
"description": "Proof of Concept exploit for CVE-2026-46391",
"description": "Proof of concept exploit for CVE-2026-46391",
"fork": false,
"created_at": "2026-05-14T03:43:36Z",
"updated_at": "2026-05-14T04:51:47Z",
"updated_at": "2026-05-19T04:44:20Z",
"pushed_at": "2026-05-14T04:51:43Z",
"stargazers_count": 0,
"watchers_count": 0,
README.md
+22 -32
View File
@@ -616,13 +616,6 @@
- [Xmyronn/CVE-2026-6184-stored-XSS](https://github.com/Xmyronn/CVE-2026-6184-stored-XSS)
### CVE-2026-6201 (2026-04-13)
<code>A vulnerability was identified in CodeAstro Online Job Portal 1.0. The impacted element is an unknown function of the file /jobs/job-delete.php of the component Delete Job Posting Handler. Such manipulation of the argument ID leads to improper access controls. The attack can be launched remotely. The exploit is publicly available and might be used.
</code>
- [Xmyronn/CVE-2026-6201-IDOR](https://github.com/Xmyronn/CVE-2026-6201-IDOR)
### CVE-2026-6227 (2026-04-14)
<code>The BackWPup plugin for WordPress is vulnerable to Local File Inclusion via the `block_name` parameter of the `/wp-json/backwpup/v1/getblock` REST endpoint in all versions up to, and including, 5.6.6 due to a non-recursive `str_replace()` sanitization of path traversal sequences. This makes it possible for authenticated attackers, with Administrator-level access and above, to include arbitrary PHP files on the server via crafted traversal sequences (e.g., `....//`), which can be leveraged to read sensitive files such as `wp-config.php` or achieve remote code execution in certain configurations. Administrators have the ability to grant individual users permission to handle backups, which may then allow lower-level users to exploit this vulnerability.
@@ -721,20 +714,6 @@
- [davidrxchester/CVE-2026-7020](https://github.com/davidrxchester/CVE-2026-7020)
### CVE-2026-7028 (2026-04-26)
<code>A security flaw has been discovered in CodeAstro Online Job Portal 1.0. The affected element is an unknown function of the file /admin/jobs-admins/delete-jobs.php of the component All Jobs Page. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.
</code>
- [Xmyronn/CVE-2026-7028-SQLI](https://github.com/Xmyronn/CVE-2026-7028-SQLI)
### CVE-2026-7071 (2026-04-27)
<code>A security vulnerability has been detected in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /users/user-cvs/. The manipulation leads to file and directory information exposure. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
</code>
- [Xmyronn/CVE-2026-7071-access-Control](https://github.com/Xmyronn/CVE-2026-7071-access-Control)
### CVE-2026-7222 (2026-04-28)
<code>A vulnerability was determined in code-projects Coaching Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /cims/modules/student/complaint.php of the component Complaint Form Page. This manipulation of the argument Complaint causes cross site scripting. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
@@ -2307,7 +2286,6 @@
<code>Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ.\n\nApache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia access policy permits exec operations on all ActiveMQ MBeans (org.apache.activemq:*), including\nBrokerService.addNetworkConnector(String) and BrokerService.addConnector(String).\n\nAn authenticated attacker can invoke these operations with a crafted discovery URI that triggers the VM transport's brokerConfig parameter to load a remote Spring XML application context using ResourceXmlApplicationContext.\nBecause Spring's ResourceXmlApplicationContext instantiates all singleton beans before the BrokerService validates the configuration, arbitrary code execution occurs on the broker's JVM through bean factory methods such as Runtime.exec().\n\n\n\nThis issue affects Apache ActiveMQ Broker: before 5.19.4, from 6.0.0 before 6.2.3; Apache ActiveMQ All: before 5.19.4, from 6.0.0 before 6.2.3; Apache ActiveMQ: before 5.19.4, from 6.0.0 before 6.2.3.\n\n\n\nUsers are recommended to upgrade to version 5.19.4 or 6.2.3, which fixes the issue
</code>
- [DEVSECURITYSPRO/CVE-2026-34197](https://github.com/DEVSECURITYSPRO/CVE-2026-34197)
- [AtoposX-J/CVE-2026-34197-Apache-ActiveMQ-RCE](https://github.com/AtoposX-J/CVE-2026-34197-Apache-ActiveMQ-RCE)
- [KONDORDEVSECURITYCORP/CVE-2026-34197](https://github.com/KONDORDEVSECURITYCORP/CVE-2026-34197)
- [hg0434hongzh0/CVE-2026-34197](https://github.com/hg0434hongzh0/CVE-2026-34197)
@@ -2356,6 +2334,7 @@
- [404-src/CVE-2026-34486](https://github.com/404-src/CVE-2026-34486)
- [helGayhub233/CVE-2026-34486-Tribes](https://github.com/helGayhub233/CVE-2026-34486-Tribes)
- [striga-ai/CVE-2026-34486](https://github.com/striga-ai/CVE-2026-34486)
- [anonmrc/CVE-2026-34486-e-Tomcat-Tribes](https://github.com/anonmrc/CVE-2026-34486-e-Tomcat-Tribes)
### CVE-2026-34621 (2026-04-11)
@@ -2512,6 +2491,9 @@
- [kensh1k/CVE-2026-36438](https://github.com/kensh1k/CVE-2026-36438)
### CVE-2026-36748
- [rufflabs/CVE-2026-36748](https://github.com/rufflabs/CVE-2026-36748)
### CVE-2026-36956 (2026-04-30)
<code>A Cross-Site Request Forgery (CSRF) vulnerability exists in the web management interface of the Dbit N300 T1 Pro wireless router V1.0.0. The router fails to implement proper CSRF protection mechanisms such as anti-CSRF tokens or strict Origin/Referer validation for administrative API endpoints. An attacker can craft a malicious webpage that sends forged HTTP requests to configuration endpoints such as /api/setWlan. If an authenticated administrator visits the malicious webpage, the victim's browser automatically includes the valid session cookie in the request, allowing the router to process the request as a legitimate administrative action.
@@ -3083,6 +3065,7 @@
- [tal7aouy/nginx-cve-2026-42945](https://github.com/tal7aouy/nginx-cve-2026-42945)
- [Renison-Gohel/CVE-2026-42945-NGINX-Rift](https://github.com/Renison-Gohel/CVE-2026-42945-NGINX-Rift)
- [hnytgl/cve-2026-42945](https://github.com/hnytgl/cve-2026-42945)
- [imSre9/CVE-2026-42945](https://github.com/imSre9/CVE-2026-42945)
### CVE-2026-43284 (2026-05-08)
@@ -3107,6 +3090,7 @@
- [xd20111/CVE-2026-43284](https://github.com/xd20111/CVE-2026-43284)
- [grabesec/XCP_ng_CVE-2026-43284_tester](https://github.com/grabesec/XCP_ng_CVE-2026-43284_tester)
- [whosfault/CVE-2026-43284](https://github.com/whosfault/CVE-2026-43284)
- [LucasPDiniz/CVE-2026-43284](https://github.com/LucasPDiniz/CVE-2026-43284)
### CVE-2026-43500 (2026-05-11)
@@ -5592,6 +5576,13 @@
- [metadust/CVE-2025-11187](https://github.com/metadust/CVE-2025-11187)
### CVE-2025-11203 (2025-10-29)
<code>LiteLLM Information health API_KEY Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LiteLLM. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of the API_KEY parameter provided to the health endpoint. The issue results from exposing sensitive information to an unauthorized actor. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-26585.
</code>
- [learner202649/CVE-2025-11203-PoC](https://github.com/learner202649/CVE-2025-11203-PoC)
### CVE-2025-11380 (2025-10-11)
<code>The Everest Backup – WordPress Cloud Backup, Migration, Restore &amp; Cloning Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'everest_process_status' AJAX action in all versions up to, and including, 2.3.5. This makes it possible for unauthenticated attackers to retrieve back-up file locations that can be subsequently accessed and downloaded. This does require a back-up to be running in order for an attacker to retrieve the back-up location.
@@ -9634,6 +9625,13 @@
- [mohammed-alsaqqaf/CVE-2025-45805](https://github.com/mohammed-alsaqqaf/CVE-2025-45805)
### CVE-2025-45809 (2025-07-03)
<code>SQL Injection vulnerability in BerriAI LiteLLM before 1.81.0 allows attackers to execute arbitrary commands via the key parameter to the &quot;/key/block&quot; and &quot;/key/unblock&quot; API endpoints.
</code>
- [learner202649/CVE-2025-45809-PoC](https://github.com/learner202649/CVE-2025-45809-PoC)
### CVE-2025-45955
- [surendrapuppala7/CVE-2025-45955](https://github.com/surendrapuppala7/CVE-2025-45955)
@@ -21822,6 +21820,7 @@
- [Bi0x/CVE-2024-37032](https://github.com/Bi0x/CVE-2024-37032)
- [ahboon/CVE-2024-37032-scanner](https://github.com/ahboon/CVE-2024-37032-scanner)
- [pankass/CVE-2024-37032_CVE-2024-45436](https://github.com/pankass/CVE-2024-37032_CVE-2024-45436)
- [itzSh4dowxZ/CVE-2024-37032-PoC](https://github.com/itzSh4dowxZ/CVE-2024-37032-PoC)
### CVE-2024-37051 (2024-06-10)
@@ -25377,13 +25376,6 @@
- [RandomRobbieBF/CVE-2024-55976](https://github.com/RandomRobbieBF/CVE-2024-55976)
### CVE-2024-55978 (2024-12-16)
<code>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WalletStation Code Generator Pro code-generator-pro allows SQL Injection.This issue affects Code Generator Pro: from n/a through &lt;= 1.2.
</code>
- [RandomRobbieBF/CVE-2024-55978](https://github.com/RandomRobbieBF/CVE-2024-55978)
### CVE-2024-55981 (2024-12-16)
<code>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nabajit Roy Nabz Image Gallery nabz-image-gallery allows SQL Injection.This issue affects Nabz Image Gallery: from n/a through &lt;= v1.00.
@@ -27773,7 +27765,6 @@
- [anansi2safe/CVE-2023-20938](https://github.com/anansi2safe/CVE-2023-20938)
- [0xAtharv/CVE-2023-20938-Public](https://github.com/0xAtharv/CVE-2023-20938-Public)
- [Cyb3rCr0wCC/cve-2023-20938](https://github.com/Cyb3rCr0wCC/cve-2023-20938)
### CVE-2023-20943 (2023-02-28)
@@ -34205,6 +34196,7 @@
<code>Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission API. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment. (Also, within that environment, customers at version 2.52.0 and later can choose to use token authentication.)
</code>
- [0x656565/CVE-2023-48022](https://github.com/0x656565/CVE-2023-48022)
- [jakabakos/ShadowRay-RCE-PoC-CVE-2023-48022](https://github.com/jakabakos/ShadowRay-RCE-PoC-CVE-2023-48022)
### CVE-2023-48034 (2023-11-27)
@@ -68914,7 +68906,6 @@
- [MuirlandOracle/CVE-2014-6271-IPFire](https://github.com/MuirlandOracle/CVE-2014-6271-IPFire)
- [mochizuki875/CVE-2014-6271-Apache-Debian](https://github.com/mochizuki875/CVE-2014-6271-Apache-Debian)
- [b4keSn4ke/CVE-2014-6271](https://github.com/b4keSn4ke/CVE-2014-6271)
- [hadrian3689/shellshock](https://github.com/hadrian3689/shellshock)
- [akr3ch/CVE-2014-6271](https://github.com/akr3ch/CVE-2014-6271)
- [Gurguii/cgi-bin-shellshock](https://github.com/Gurguii/cgi-bin-shellshock)
- [anujbhan/shellshock-victim-host](https://github.com/anujbhan/shellshock-victim-host)
@@ -68955,7 +68946,6 @@
- [Nicoslo/Windows-exploitation-Rejetto-HTTP-File-Server-HFS-2.3.x-CVE-2014-6287](https://github.com/Nicoslo/Windows-exploitation-Rejetto-HTTP-File-Server-HFS-2.3.x-CVE-2014-6287)
- [wizardy0ga/THM-Steel_Mountain-CVE-2014-6287](https://github.com/wizardy0ga/THM-Steel_Mountain-CVE-2014-6287)
- [mrintern/thm_steelmountain_CVE-2014-6287](https://github.com/mrintern/thm_steelmountain_CVE-2014-6287)
- [hadrian3689/rejetto_hfs_rce](https://github.com/hadrian3689/rejetto_hfs_rce)
- [randallbanner/Rejetto-HTTP-File-Server-HFS-2.3.x---Remote-Command-Execution](https://github.com/randallbanner/Rejetto-HTTP-File-Server-HFS-2.3.x---Remote-Command-Execution)
- [zhsh9/CVE-2014-6287](https://github.com/zhsh9/CVE-2014-6287)
- [10cks/CVE-2014-6287](https://github.com/10cks/CVE-2014-6287)