From 7f20a6e55ebc8434e91fac87aeef10fcdc3abb77 Mon Sep 17 00:00:00 2001 From: motikan2010-bot Date: Mon, 26 Oct 2026 10:55:42 +0900 Subject: [PATCH] Auto Update 2026/10/26 01:55:42 --- 2007/CVE-2007-2447.json | 8 +- 2014/CVE-2014-6271.json | 2 +- 2015/CVE-2015-1805.json | 6 +- 2016/CVE-2016-10033.json | 8 +- 2016/CVE-2016-5195.json | 33 ++ 2017/CVE-2017-5689.json | 49 +++ 2018/CVE-2018-0886.json | 8 +- 2018/CVE-2018-18955.json | 39 --- 2018/CVE-2018-3252.json | 8 +- 2019/CVE-2019-11932.json | 8 +- 2019/CVE-2019-15514.json | 8 +- 2019/CVE-2019-2215.json | 8 +- 2019/CVE-2019-5420.json | 8 +- 2020/CVE-2020-9484.json | 2 +- 2021/CVE-2021-1931.json | 2 +- 2021/CVE-2021-23410.json | 33 ++ 2021/CVE-2021-26855.json | 8 +- 2021/CVE-2021-30128.json | 8 +- 2021/CVE-2021-31166.json | 8 +- 2021/CVE-2021-44228.json | 2 +- 2022/CVE-2022-0848.json | 8 +- 2022/CVE-2022-1015.json | 4 +- 2022/CVE-2022-26134.json | 4 +- 2022/CVE-2022-26809.json | 16 +- 2022/CVE-2022-39073.json | 8 +- 2022/CVE-2022-42889.json | 8 +- 2023/CVE-2023-25136.json | 8 +- 2023/CVE-2023-29357.json | 8 +- 2023/CVE-2023-32233.json | 4 +- 2023/CVE-2023-33246.json | 8 +- 2023/CVE-2023-41992.json | 8 +- 2024/CVE-2024-1086.json | 8 +- 2024/CVE-2024-1709.json | 4 +- 2024/CVE-2024-23653.json | 8 +- 2025/CVE-2025-11171.json | 8 +- 2025/CVE-2025-11174.json | 8 +- 2025/CVE-2025-12030.json | 8 +- 2025/CVE-2025-12163.json | 8 +- 2025/CVE-2025-21479.json | 8 +- 2025/CVE-2025-53770.json | 8 +- 2025/CVE-2025-55182.json | 8 +- 2025/CVE-2025-9776.json | 8 +- 2026/CVE-2026-0073.json | 4 +- 2026/CVE-2026-0828.json | 33 -- 2026/CVE-2026-102255.json | 4 +- 2026/CVE-2026-102256.json | 4 +- 2026/CVE-2026-102257.json | 4 +- 2026/CVE-2026-102258.json | 4 +- 2026/CVE-2026-102764.json | 4 +- 2026/CVE-2026-102826.json | 4 +- 2026/CVE-2026-104286.json | 4 +- 2026/CVE-2026-104849.json | 2 +- 2026/CVE-2026-104935.json | 4 +- 2026/CVE-2026-106173.json | 8 +- 2026/CVE-2026-10961.json | 8 +- 2026/CVE-2026-109618.json | 628 +++++++++++++++++++++++++++----------- 2026/CVE-2026-109619.json | 55 ++-- 2026/CVE-2026-110152.json | 35 --- 2026/CVE-2026-110922.json | 4 +- 2026/CVE-2026-111497.json | 146 +++++---- 2026/CVE-2026-112325.json | 35 +++ 2026/CVE-2026-115560.json | 4 +- 2026/CVE-2026-116012.json | 8 +- 2026/CVE-2026-116105.json | 35 +++ 2026/CVE-2026-116106.json | 35 +++ 2026/CVE-2026-116191.json | 35 +++ 2026/CVE-2026-1208.json | 8 +- 2026/CVE-2026-17106.json | 4 +- 2026/CVE-2026-18107.json | 35 +++ 2026/CVE-2026-19489.json | 4 +- 2026/CVE-2026-19490.json | 4 +- 2026/CVE-2026-21589.json | 4 +- 2026/CVE-2026-28912.json | 8 +- 2026/CVE-2026-31899.json | 8 +- 2026/CVE-2026-32794.json | 8 +- 2026/CVE-2026-3288.json | 8 +- 2026/CVE-2026-33693.json | 8 +- 2026/CVE-2026-43284.json | 8 +- 2026/CVE-2026-43499.json | 134 ++++---- 2026/CVE-2026-47644.json | 8 +- 2026/CVE-2026-49881.json | 8 +- 2026/CVE-2026-54121.json | 8 +- 2026/CVE-2026-64560.json | 8 +- 2026/CVE-2026-64638.json | 8 +- 2026/CVE-2026-66418.json | 8 +- 2026/CVE-2026-69254.json | 4 +- 2026/CVE-2026-71362.json | 8 +- 2026/CVE-2026-87902.json | 4 +- 2026/CVE-2026-88771.json | 2 +- 2026/CVE-2026-88772.json | 2 +- 2026/CVE-2026-88773.json | 4 +- 2026/CVE-2026-88774.json | 4 +- 2026/CVE-2026-88775.json | 4 +- 2026/CVE-2026-88776.json | 4 +- 2026/CVE-2026-88777.json | 4 +- 2026/CVE-2026-88778.json | 4 +- 2026/CVE-2026-92935.json | 4 +- 2026/CVE-2026-96889.json | 4 +- 98 files changed, 1179 insertions(+), 693 deletions(-) delete mode 100644 2026/CVE-2026-110152.json create mode 100644 2026/CVE-2026-112325.json create mode 100644 2026/CVE-2026-116105.json create mode 100644 2026/CVE-2026-116106.json create mode 100644 2026/CVE-2026-116191.json create mode 100644 2026/CVE-2026-18107.json diff --git a/2007/CVE-2007-2447.json b/2007/CVE-2007-2447.json index 6c6a260a87..bc602b6962 100644 --- a/2007/CVE-2007-2447.json +++ b/2007/CVE-2007-2447.json @@ -14,10 +14,10 @@ "description": "CVE-2007-2447 - Samba usermap script", "fork": false, "created_at": "2018-08-03T18:39:56Z", - "updated_at": "2026-10-19T11:13:27Z", + "updated_at": "2026-10-25T21:33:59Z", "pushed_at": "2020-08-16T18:54:38Z", - "stargazers_count": 62, - "watchers_count": 62, + "stargazers_count": 63, + "watchers_count": 63, "has_discussions": false, "forks_count": 30, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 30, - "watchers": 62, + "watchers": 63, "score": 0, "subscribers_count": 1 }, diff --git a/2014/CVE-2014-6271.json b/2014/CVE-2014-6271.json index 86767ad54b..2595a534a2 100644 --- a/2014/CVE-2014-6271.json +++ b/2014/CVE-2014-6271.json @@ -2407,7 +2407,7 @@ "description": "Projet de présentation d'une CVE (ShellShock) avec pdf, démonstration technique et reproductible", "fork": false, "created_at": "2024-11-26T09:07:24Z", - "updated_at": "2025-10-28T06:44:37Z", + "updated_at": "2026-10-25T23:18:20Z", "pushed_at": "2024-11-26T12:45:31Z", "stargazers_count": 1, "watchers_count": 1, diff --git a/2015/CVE-2015-1805.json b/2015/CVE-2015-1805.json index 0f7729a93b..83aa74b677 100644 --- a/2015/CVE-2015-1805.json +++ b/2015/CVE-2015-1805.json @@ -230,11 +230,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/cjn304\/Root-My-Galaxy-S4", - "description": "Root the Samsung Galaxy S4 on official firmware via CVE-2015-1805 & KNOX e-fuse stays intact", + "description": "Root the GT-I9500 on official Lollipop firmware via CVE-2015-1805 without tripping the KNOX e-fuse", "fork": false, "created_at": "2026-10-25T15:51:32Z", - "updated_at": "2026-10-25T18:24:00Z", - "pushed_at": "2026-10-25T18:23:56Z", + "updated_at": "2026-10-25T20:42:45Z", + "pushed_at": "2026-10-25T19:26:25Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2016/CVE-2016-10033.json b/2016/CVE-2016-10033.json index 53a56c4eb1..fa4a76bab6 100644 --- a/2016/CVE-2016-10033.json +++ b/2016/CVE-2016-10033.json @@ -14,10 +14,10 @@ "description": "PHPMailer < 5.2.18 Remote Code Execution exploit and vulnerable container", "fork": false, "created_at": "2016-12-26T13:39:03Z", - "updated_at": "2026-10-12T13:28:57Z", + "updated_at": "2026-10-25T23:49:00Z", "pushed_at": "2023-02-27T06:48:09Z", - "stargazers_count": 408, - "watchers_count": 408, + "stargazers_count": 409, + "watchers_count": 409, "has_discussions": false, "forks_count": 144, "allow_forking": true, @@ -37,7 +37,7 @@ ], "visibility": "public", "forks": 144, - "watchers": 408, + "watchers": 409, "score": 0, "subscribers_count": 25 }, diff --git a/2016/CVE-2016-5195.json b/2016/CVE-2016-5195.json index a8407447bf..78d12e5135 100644 --- a/2016/CVE-2016-5195.json +++ b/2016/CVE-2016-5195.json @@ -1836,6 +1836,39 @@ "score": 0, "subscribers_count": 0 }, + { + "id": 1192172896, + "name": "Dirty-Cow-Ubuntu-Server-16.04.1", + "full_name": "cbry-96\/Dirty-Cow-Ubuntu-Server-16.04.1", + "owner": { + "login": "cbry-96", + "id": 169823204, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/169823204?v=4", + "html_url": "https:\/\/github.com\/cbry-96", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/cbry-96\/Dirty-Cow-Ubuntu-Server-16.04.1", + "description": "CVE-2016-5195 (Dirty COW) privilege escalation on Ubuntu Server 16.04.1 — exploit, impact & mitigation", + "fork": false, + "created_at": "2026-03-26T00:46:45Z", + "updated_at": "2026-10-25T23:18:39Z", + "pushed_at": "2026-10-22T20:28:39Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 + }, { "id": 1239401979, "name": "Escalamiento-de-Privilegios-usando-el-Kernel-Exploit-Dirty-Cow", diff --git a/2017/CVE-2017-5689.json b/2017/CVE-2017-5689.json index 1a46766e94..30deb24d9c 100644 --- a/2017/CVE-2017-5689.json +++ b/2017/CVE-2017-5689.json @@ -169,5 +169,54 @@ "watchers": 0, "score": 0, "subscribers_count": 1 + }, + { + "id": 1433591976, + "name": "C-A-S", + "full_name": "aix567\/C-A-S", + "owner": { + "login": "aix567", + "id": 340335264, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/340335264?v=4", + "html_url": "https:\/\/github.com\/aix567", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/aix567\/C-A-S", + "description": "C.A.S-Exploit — Python-based security research and proof-of-concept toolkit for CVE-2017-5689 (Intel AMT authentication bypass), featuring Shodan discovery, HTTP\/WS-Management testing, batch scanning, and vulnerability logging.", + "fork": false, + "created_at": "2026-10-25T20:17:24Z", + "updated_at": "2026-10-25T20:37:07Z", + "pushed_at": "2026-10-25T20:37:04Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "authentication-bypass", + "crypto-anarchy-squad", + "cve-2017-5689", + "cybersecurity", + "exploit", + "intel-amt", + "network-security", + "penetration-testing", + "poc", + "python", + "security-research", + "security-tools", + "shodan", + "vulnerability-research", + "ws-management" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2018/CVE-2018-0886.json b/2018/CVE-2018-0886.json index 7d123e7c2d..7eba8a7a54 100644 --- a/2018/CVE-2018-0886.json +++ b/2018/CVE-2018-0886.json @@ -14,10 +14,10 @@ "description": "A code demonstrating CVE-2018-0886", "fork": false, "created_at": "2018-04-02T12:52:07Z", - "updated_at": "2026-07-29T10:32:00Z", + "updated_at": "2026-10-25T23:22:27Z", "pushed_at": "2020-08-14T16:33:44Z", - "stargazers_count": 267, - "watchers_count": 267, + "stargazers_count": 268, + "watchers_count": 268, "has_discussions": false, "forks_count": 57, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 57, - "watchers": 267, + "watchers": 268, "score": 0, "subscribers_count": 15 } diff --git a/2018/CVE-2018-18955.json b/2018/CVE-2018-18955.json index 3c9f25f871..5b2ad4f4fc 100644 --- a/2018/CVE-2018-18955.json +++ b/2018/CVE-2018-18955.json @@ -1,43 +1,4 @@ [ - { - "id": 449732024, - "name": "CVE-2018-18955", - "full_name": "scheatkode\/CVE-2018-18955", - "owner": { - "login": "scheatkode", - "id": 29172448, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/29172448?v=4", - "html_url": "https:\/\/github.com\/scheatkode", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/scheatkode\/CVE-2018-18955", - "description": "💀 Linux local root exploit for CVE-2018-18955", - "fork": false, - "created_at": "2022-01-19T14:47:47Z", - "updated_at": "2026-08-23T12:25:49Z", - "pushed_at": "2022-01-20T21:05:38Z", - "stargazers_count": 25, - "watchers_count": 25, - "has_discussions": false, - "forks_count": 5, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve", - "exploit", - "linux", - "pentest", - "pentesting" - ], - "visibility": "public", - "forks": 5, - "watchers": 25, - "score": 0, - "subscribers_count": 1 - }, { "id": 1308012116, "name": "CVE-2018-18955", diff --git a/2018/CVE-2018-3252.json b/2018/CVE-2018-3252.json index 68925d8590..6897bdf87b 100644 --- a/2018/CVE-2018-3252.json +++ b/2018/CVE-2018-3252.json @@ -47,10 +47,10 @@ "description": null, "fork": false, "created_at": "2018-12-04T03:14:21Z", - "updated_at": "2023-02-14T04:28:25Z", + "updated_at": "2026-10-25T22:36:27Z", "pushed_at": "2018-12-04T04:01:01Z", - "stargazers_count": 18, - "watchers_count": 18, + "stargazers_count": 19, + "watchers_count": 19, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 18, + "watchers": 19, "score": 0, "subscribers_count": 1 }, diff --git a/2019/CVE-2019-11932.json b/2019/CVE-2019-11932.json index 1feca60885..3fd7fcbf50 100644 --- a/2019/CVE-2019-11932.json +++ b/2019/CVE-2019-11932.json @@ -14,10 +14,10 @@ "description": " double-free bug in WhatsApp exploit poc", "fork": false, "created_at": "2019-10-03T09:26:24Z", - "updated_at": "2026-05-13T19:46:49Z", + "updated_at": "2026-10-25T22:15:39Z", "pushed_at": "2021-03-19T17:23:25Z", - "stargazers_count": 267, - "watchers_count": 267, + "stargazers_count": 268, + "watchers_count": 268, "has_discussions": false, "forks_count": 71, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 71, - "watchers": 267, + "watchers": 268, "score": 0, "subscribers_count": 16 }, diff --git a/2019/CVE-2019-15514.json b/2019/CVE-2019-15514.json index a2eb2027ad..163b5b132a 100644 --- a/2019/CVE-2019-15514.json +++ b/2019/CVE-2019-15514.json @@ -14,10 +14,10 @@ "description": "telegram bug that discloses user's hidden phone number (still unpatched) (exploit included) ", "fork": false, "created_at": "2021-12-21T19:23:09Z", - "updated_at": "2026-10-20T17:14:23Z", + "updated_at": "2026-10-25T21:48:05Z", "pushed_at": "2021-12-19T18:18:36Z", - "stargazers_count": 25, - "watchers_count": 25, + "stargazers_count": 26, + "watchers_count": 26, "has_discussions": false, "forks_count": 15, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 15, - "watchers": 25, + "watchers": 26, "score": 0, "subscribers_count": 0 } diff --git a/2019/CVE-2019-2215.json b/2019/CVE-2019-2215.json index dfb30d6d60..c1944e3137 100644 --- a/2019/CVE-2019-2215.json +++ b/2019/CVE-2019-2215.json @@ -80,10 +80,10 @@ "description": "CVE 2019-2215 Android Binder Use After Free", "fork": false, "created_at": "2019-10-17T02:14:36Z", - "updated_at": "2026-09-01T16:49:56Z", + "updated_at": "2026-10-25T20:10:40Z", "pushed_at": "2019-10-16T17:28:21Z", - "stargazers_count": 4, - "watchers_count": 4, + "stargazers_count": 5, + "watchers_count": 5, "has_discussions": false, "forks_count": 13, "allow_forking": true, @@ -94,7 +94,7 @@ "topics": [], "visibility": "public", "forks": 13, - "watchers": 4, + "watchers": 5, "score": 0, "subscribers_count": 0 }, diff --git a/2019/CVE-2019-5420.json b/2019/CVE-2019-5420.json index bea6ae032a..c18bcabe44 100644 --- a/2019/CVE-2019-5420.json +++ b/2019/CVE-2019-5420.json @@ -245,10 +245,10 @@ "description": "Exploit for the Rails CVE-2019-5420", "fork": false, "created_at": "2022-03-14T17:29:47Z", - "updated_at": "2022-03-14T17:43:03Z", + "updated_at": "2026-10-26T00:39:05Z", "pushed_at": "2022-03-14T17:46:27Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -259,7 +259,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 1 }, diff --git a/2020/CVE-2020-9484.json b/2020/CVE-2020-9484.json index f321181deb..06146c712e 100644 --- a/2020/CVE-2020-9484.json +++ b/2020/CVE-2020-9484.json @@ -63,7 +63,7 @@ "forks": 27, "watchers": 126, "score": 0, - "subscribers_count": 3 + "subscribers_count": 2 }, { "id": 265741960, diff --git a/2021/CVE-2021-1931.json b/2021/CVE-2021-1931.json index 718984cd51..a5ea879688 100644 --- a/2021/CVE-2021-1931.json +++ b/2021/CVE-2021-1931.json @@ -80,7 +80,7 @@ "description": "Unlock the Meta Quest 1 bootloader and gain root access using GhostLock + CVE-2021-1931.", "fork": false, "created_at": "2026-07-31T05:37:56Z", - "updated_at": "2026-10-20T22:15:32Z", + "updated_at": "2026-10-25T19:28:23Z", "pushed_at": "2026-08-28T12:08:00Z", "stargazers_count": 217, "watchers_count": 217, diff --git a/2021/CVE-2021-23410.json b/2021/CVE-2021-23410.json index 7166d6c055..c62cddfcd1 100644 --- a/2021/CVE-2021-23410.json +++ b/2021/CVE-2021-23410.json @@ -31,5 +31,38 @@ "watchers": 1, "score": 0, "subscribers_count": 1 + }, + { + "id": 1433589362, + "name": "msgpack-CVE-2021-23410-test.hpp", + "full_name": "risvensehiraxt\/msgpack-CVE-2021-23410-test.hpp", + "owner": { + "login": "risvensehiraxt", + "id": 318865956, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/318865956?v=4", + "html_url": "https:\/\/github.com\/risvensehiraxt", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/risvensehiraxt\/msgpack-CVE-2021-23410-test.hpp", + "description": "the improve SourceInfo UX around server:", + "fork": false, + "created_at": "2026-10-25T20:13:36Z", + "updated_at": "2026-10-25T20:15:54Z", + "pushed_at": "2026-10-25T20:16:19Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2021/CVE-2021-26855.json b/2021/CVE-2021-26855.json index b17c7521f5..944b5c1cb5 100644 --- a/2021/CVE-2021-26855.json +++ b/2021/CVE-2021-26855.json @@ -755,10 +755,10 @@ "description": "RCE exploit for ProxyLogon vulnerability in Microsoft Exchange", "fork": false, "created_at": "2021-03-14T22:57:21Z", - "updated_at": "2026-02-05T04:48:56Z", + "updated_at": "2026-10-25T23:30:25Z", "pushed_at": "2021-03-14T23:03:12Z", - "stargazers_count": 9, - "watchers_count": 9, + "stargazers_count": 10, + "watchers_count": 10, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -769,7 +769,7 @@ "topics": [], "visibility": "public", "forks": 6, - "watchers": 9, + "watchers": 10, "score": 0, "subscribers_count": 1 }, diff --git a/2021/CVE-2021-30128.json b/2021/CVE-2021-30128.json index 4a9e761a2c..48285a37b2 100644 --- a/2021/CVE-2021-30128.json +++ b/2021/CVE-2021-30128.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2021-04-29T17:59:59Z", - "updated_at": "2025-09-03T11:58:09Z", + "updated_at": "2026-10-25T20:45:19Z", "pushed_at": "2021-04-30T15:01:38Z", - "stargazers_count": 21, - "watchers_count": 21, + "stargazers_count": 22, + "watchers_count": 22, "has_discussions": false, "forks_count": 12, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 12, - "watchers": 21, + "watchers": 22, "score": 0, "subscribers_count": 1 } diff --git a/2021/CVE-2021-31166.json b/2021/CVE-2021-31166.json index cd80a9ce03..92d97dd470 100644 --- a/2021/CVE-2021-31166.json +++ b/2021/CVE-2021-31166.json @@ -416,10 +416,10 @@ "description": null, "fork": false, "created_at": "2026-10-24T20:23:59Z", - "updated_at": "2026-10-24T23:53:30Z", + "updated_at": "2026-10-25T19:28:44Z", "pushed_at": "2026-10-24T23:53:27Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -430,7 +430,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2021/CVE-2021-44228.json b/2021/CVE-2021-44228.json index 3517c56fb0..ce5f09c011 100644 --- a/2021/CVE-2021-44228.json +++ b/2021/CVE-2021-44228.json @@ -10910,7 +10910,7 @@ "forks": 3, "watchers": 3, "score": 0, - "subscribers_count": 1 + "subscribers_count": 2 }, { "id": 445745731, diff --git a/2022/CVE-2022-0848.json b/2022/CVE-2022-0848.json index 07068a5cd4..18c199c6ae 100644 --- a/2022/CVE-2022-0848.json +++ b/2022/CVE-2022-0848.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2022-03-11T07:26:04Z", - "updated_at": "2025-09-19T09:55:47Z", + "updated_at": "2026-10-25T22:17:17Z", "pushed_at": "2022-03-11T07:29:41Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 1 }, diff --git a/2022/CVE-2022-1015.json b/2022/CVE-2022-1015.json index 35c05a7cf5..6df063fd72 100644 --- a/2022/CVE-2022-1015.json +++ b/2022/CVE-2022-1015.json @@ -19,7 +19,7 @@ "stargazers_count": 210, "watchers_count": 210, "has_discussions": false, - "forks_count": 30, + "forks_count": 31, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 30, + "forks": 31, "watchers": 210, "score": 0, "subscribers_count": 6 diff --git a/2022/CVE-2022-26134.json b/2022/CVE-2022-26134.json index a4dc861865..0c6542b4ea 100644 --- a/2022/CVE-2022-26134.json +++ b/2022/CVE-2022-26134.json @@ -2475,8 +2475,8 @@ "description": null, "fork": false, "created_at": "2026-05-06T01:47:50Z", - "updated_at": "2026-10-25T09:06:12Z", - "pushed_at": "2026-10-25T09:06:07Z", + "updated_at": "2026-10-25T21:09:17Z", + "pushed_at": "2026-10-25T21:09:12Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2022/CVE-2022-26809.json b/2022/CVE-2022-26809.json index d538a3fbbe..c8d00a1b3f 100644 --- a/2022/CVE-2022-26809.json +++ b/2022/CVE-2022-26809.json @@ -47,10 +47,10 @@ "description": "Remote Code Execution Exploit in the RPC Library", "fork": false, "created_at": "2022-04-14T08:12:24Z", - "updated_at": "2026-10-02T15:34:04Z", + "updated_at": "2026-10-25T20:14:50Z", "pushed_at": "2022-04-19T17:04:04Z", - "stargazers_count": 27, - "watchers_count": 27, + "stargazers_count": 28, + "watchers_count": 28, "has_discussions": false, "forks_count": 4, "allow_forking": true, @@ -63,7 +63,7 @@ ], "visibility": "public", "forks": 4, - "watchers": 27, + "watchers": 28, "score": 0, "subscribers_count": 18 }, @@ -249,10 +249,10 @@ "description": "PoC for CVE-2022-26809, analisys and considerations are shown in the github.io.", "fork": false, "created_at": "2022-06-13T11:08:33Z", - "updated_at": "2026-10-10T10:56:00Z", + "updated_at": "2026-10-25T20:18:43Z", "pushed_at": "2022-06-18T13:53:53Z", - "stargazers_count": 107, - "watchers_count": 107, + "stargazers_count": 108, + "watchers_count": 108, "has_discussions": false, "forks_count": 26, "allow_forking": true, @@ -263,7 +263,7 @@ "topics": [], "visibility": "public", "forks": 26, - "watchers": 107, + "watchers": 108, "score": 0, "subscribers_count": 3 }, diff --git a/2022/CVE-2022-39073.json b/2022/CVE-2022-39073.json index b474bc2666..ee8ae7aab0 100644 --- a/2022/CVE-2022-39073.json +++ b/2022/CVE-2022-39073.json @@ -14,10 +14,10 @@ "description": "Proof of concept for the command injection vulnerability affecting the ZTE MF286R router, including an RCE exploit.", "fork": false, "created_at": "2023-01-07T20:46:20Z", - "updated_at": "2026-10-19T13:58:36Z", + "updated_at": "2026-10-26T00:43:21Z", "pushed_at": "2023-01-07T20:54:07Z", - "stargazers_count": 12, - "watchers_count": 12, + "stargazers_count": 13, + "watchers_count": 13, "has_discussions": false, "forks_count": 5, "allow_forking": true, @@ -37,7 +37,7 @@ ], "visibility": "public", "forks": 5, - "watchers": 12, + "watchers": 13, "score": 0, "subscribers_count": 1 } diff --git a/2022/CVE-2022-42889.json b/2022/CVE-2022-42889.json index 20563f37ee..b356678e79 100644 --- a/2022/CVE-2022-42889.json +++ b/2022/CVE-2022-42889.json @@ -752,10 +752,10 @@ "description": "CVE-2022-42889 aka Text4Shell research & PoC", "fork": false, "created_at": "2022-10-23T13:42:23Z", - "updated_at": "2025-11-05T05:42:24Z", + "updated_at": "2026-10-25T22:04:12Z", "pushed_at": "2023-03-17T16:15:41Z", - "stargazers_count": 20, - "watchers_count": 20, + "stargazers_count": 21, + "watchers_count": 21, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -770,7 +770,7 @@ ], "visibility": "public", "forks": 3, - "watchers": 20, + "watchers": 21, "score": 0, "subscribers_count": 1 }, diff --git a/2023/CVE-2023-25136.json b/2023/CVE-2023-25136.json index 25f090fa8f..8f296ca88e 100644 --- a/2023/CVE-2023-25136.json +++ b/2023/CVE-2023-25136.json @@ -113,10 +113,10 @@ "description": "OpenSSH Pre-Auth Double Free CVE-2023-25136 POC", "fork": false, "created_at": "2023-04-18T21:47:47Z", - "updated_at": "2025-10-09T06:58:26Z", + "updated_at": "2026-10-25T21:24:38Z", "pushed_at": "2023-04-21T14:22:41Z", - "stargazers_count": 47, - "watchers_count": 47, + "stargazers_count": 48, + "watchers_count": 48, "has_discussions": false, "forks_count": 9, "allow_forking": true, @@ -127,7 +127,7 @@ "topics": [], "visibility": "public", "forks": 9, - "watchers": 47, + "watchers": 48, "score": 0, "subscribers_count": 1 }, diff --git a/2023/CVE-2023-29357.json b/2023/CVE-2023-29357.json index f0cccad405..4c4eab1681 100644 --- a/2023/CVE-2023-29357.json +++ b/2023/CVE-2023-29357.json @@ -87,10 +87,10 @@ "description": "Recreation of the SharePoint PoC for CVE-2023-29357 in C# from LuemmelSec", "fork": false, "created_at": "2023-10-10T13:41:21Z", - "updated_at": "2024-02-17T23:21:40Z", + "updated_at": "2026-10-25T20:41:48Z", "pushed_at": "2023-10-10T13:44:08Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -101,7 +101,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 1 }, diff --git a/2023/CVE-2023-32233.json b/2023/CVE-2023-32233.json index 7a48f4e839..98236c7ee9 100644 --- a/2023/CVE-2023-32233.json +++ b/2023/CVE-2023-32233.json @@ -52,7 +52,7 @@ "stargazers_count": 383, "watchers_count": 383, "has_discussions": false, - "forks_count": 77, + "forks_count": 78, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,7 +60,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 77, + "forks": 78, "watchers": 383, "score": 0, "subscribers_count": 2 diff --git a/2023/CVE-2023-33246.json b/2023/CVE-2023-33246.json index 96f48155c3..1b35beb7b2 100644 --- a/2023/CVE-2023-33246.json +++ b/2023/CVE-2023-33246.json @@ -47,10 +47,10 @@ "description": null, "fork": false, "created_at": "2023-05-31T07:28:46Z", - "updated_at": "2026-09-30T02:47:24Z", + "updated_at": "2026-10-25T20:09:15Z", "pushed_at": "2023-06-01T02:55:55Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 3, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 1 }, diff --git a/2023/CVE-2023-41992.json b/2023/CVE-2023-41992.json index ac02f2dd22..0a741db170 100644 --- a/2023/CVE-2023-41992.json +++ b/2023/CVE-2023-41992.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2025-05-12T09:26:37Z", - "updated_at": "2026-10-12T19:36:33Z", + "updated_at": "2026-10-25T21:17:22Z", "pushed_at": "2025-10-22T02:53:12Z", - "stargazers_count": 55, - "watchers_count": 55, + "stargazers_count": 56, + "watchers_count": 56, "has_discussions": false, "forks_count": 12, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 12, - "watchers": 55, + "watchers": 56, "score": 0, "subscribers_count": 1 } diff --git a/2024/CVE-2024-1086.json b/2024/CVE-2024-1086.json index 70035089e3..1efd1e6702 100644 --- a/2024/CVE-2024-1086.json +++ b/2024/CVE-2024-1086.json @@ -218,10 +218,10 @@ "description": null, "fork": false, "created_at": "2024-12-16T17:33:13Z", - "updated_at": "2026-09-02T19:13:28Z", + "updated_at": "2026-10-25T20:43:25Z", "pushed_at": "2024-12-16T17:38:23Z", - "stargazers_count": 22, - "watchers_count": 22, + "stargazers_count": 23, + "watchers_count": 23, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -232,7 +232,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 22, + "watchers": 23, "score": 0, "subscribers_count": 1 }, diff --git a/2024/CVE-2024-1709.json b/2024/CVE-2024-1709.json index 789fbfdc7b..816e68bf94 100644 --- a/2024/CVE-2024-1709.json +++ b/2024/CVE-2024-1709.json @@ -19,7 +19,7 @@ "stargazers_count": 114, "watchers_count": 114, "has_discussions": false, - "forks_count": 38, + "forks_count": 40, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -36,7 +36,7 @@ "screenconnect" ], "visibility": "public", - "forks": 38, + "forks": 40, "watchers": 114, "score": 0, "subscribers_count": 3 diff --git a/2024/CVE-2024-23653.json b/2024/CVE-2024-23653.json index 04e87130e7..663194b472 100644 --- a/2024/CVE-2024-23653.json +++ b/2024/CVE-2024-23653.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2024-12-13T18:27:39Z", - "updated_at": "2025-10-04T06:56:32Z", + "updated_at": "2026-10-25T20:09:39Z", "pushed_at": "2025-04-06T13:07:58Z", - "stargazers_count": 4, - "watchers_count": 4, + "stargazers_count": 5, + "watchers_count": 5, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 4, + "watchers": 5, "score": 0, "subscribers_count": 1 } diff --git a/2025/CVE-2025-11171.json b/2025/CVE-2025-11171.json index 688da2fa53..f7523abe02 100644 --- a/2025/CVE-2025-11171.json +++ b/2025/CVE-2025-11171.json @@ -14,10 +14,10 @@ "description": "CVE-2025-11171", "fork": false, "created_at": "2025-10-13T07:41:35Z", - "updated_at": "2026-05-08T16:05:45Z", + "updated_at": "2026-10-26T00:44:01Z", "pushed_at": "2026-05-08T16:05:41Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -38,7 +38,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2025/CVE-2025-11174.json b/2025/CVE-2025-11174.json index 5fba347bd9..f330d5c786 100644 --- a/2025/CVE-2025-11174.json +++ b/2025/CVE-2025-11174.json @@ -14,10 +14,10 @@ "description": "Document Library Lite <= 1.1.6 - Missing Authorization to Sensitive Information Exposure | CVE-2025-11174", "fork": false, "created_at": "2025-11-02T06:57:29Z", - "updated_at": "2026-05-08T16:05:47Z", + "updated_at": "2026-10-26T00:44:02Z", "pushed_at": "2026-05-08T16:05:42Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -34,7 +34,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2025/CVE-2025-12030.json b/2025/CVE-2025-12030.json index 4768deed64..22dfd1e3db 100644 --- a/2025/CVE-2025-12030.json +++ b/2025/CVE-2025-12030.json @@ -14,10 +14,10 @@ "description": "ACF to REST API WordPress Plugin IDOR Vulnerability (CVE-2025-12030) - Security flaw allowing authenticated users with Contributor-level access to modify ACF fields on objects they do not own.", "fork": false, "created_at": "2026-01-06T21:17:57Z", - "updated_at": "2026-05-08T16:05:47Z", + "updated_at": "2026-10-26T00:44:03Z", "pushed_at": "2026-05-08T16:05:43Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -33,7 +33,7 @@ ], "visibility": "public", "forks": 1, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2025/CVE-2025-12163.json b/2025/CVE-2025-12163.json index 39b9a3ea3d..03bc7ccb00 100644 --- a/2025/CVE-2025-12163.json +++ b/2025/CVE-2025-12163.json @@ -14,10 +14,10 @@ "description": "CVE-2025-12163: Stored Cross-Site Scripting in Omnipress WordPress Plugin", "fork": false, "created_at": "2025-12-15T21:45:00Z", - "updated_at": "2026-05-08T16:05:48Z", + "updated_at": "2026-10-26T00:44:05Z", "pushed_at": "2026-05-08T16:05:44Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -33,7 +33,7 @@ ], "visibility": "public", "forks": 1, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2025/CVE-2025-21479.json b/2025/CVE-2025-21479.json index cea661fbfe..1ee414e668 100644 --- a/2025/CVE-2025-21479.json +++ b/2025/CVE-2025-21479.json @@ -14,10 +14,10 @@ "description": "CVE-2025-21479 proof-of-concept, I think", "fork": false, "created_at": "2025-06-19T19:47:52Z", - "updated_at": "2026-10-23T07:16:50Z", + "updated_at": "2026-10-26T00:03:08Z", "pushed_at": "2025-08-16T06:52:13Z", - "stargazers_count": 277, - "watchers_count": 277, + "stargazers_count": 278, + "watchers_count": 278, "has_discussions": false, "forks_count": 63, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 63, - "watchers": 277, + "watchers": 278, "score": 0, "subscribers_count": 3 }, diff --git a/2025/CVE-2025-53770.json b/2025/CVE-2025-53770.json index 5bf959166b..77d27d48c7 100644 --- a/2025/CVE-2025-53770.json +++ b/2025/CVE-2025-53770.json @@ -1224,10 +1224,10 @@ "description": null, "fork": false, "created_at": "2025-09-04T19:12:13Z", - "updated_at": "2025-11-13T17:05:13Z", + "updated_at": "2026-10-26T00:12:36Z", "pushed_at": "2025-09-04T19:30:38Z", - "stargazers_count": 4, - "watchers_count": 4, + "stargazers_count": 5, + "watchers_count": 5, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -1238,7 +1238,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 4, + "watchers": 5, "score": 0, "subscribers_count": 0 }, diff --git a/2025/CVE-2025-55182.json b/2025/CVE-2025-55182.json index b2dd3da4e2..d0deec3143 100644 --- a/2025/CVE-2025-55182.json +++ b/2025/CVE-2025-55182.json @@ -1102,10 +1102,10 @@ "description": "Explanation and full RCE PoC for CVE-2025-55182", "fork": false, "created_at": "2025-12-04T11:49:55Z", - "updated_at": "2026-10-23T08:13:09Z", + "updated_at": "2026-10-25T20:59:40Z", "pushed_at": "2025-12-08T13:51:04Z", - "stargazers_count": 1432, - "watchers_count": 1432, + "stargazers_count": 1431, + "watchers_count": 1431, "has_discussions": false, "forks_count": 195, "allow_forking": true, @@ -1116,7 +1116,7 @@ "topics": [], "visibility": "public", "forks": 195, - "watchers": 1432, + "watchers": 1431, "score": 0, "subscribers_count": 10 }, diff --git a/2025/CVE-2025-9776.json b/2025/CVE-2025-9776.json index c62c1cfa6f..2ab1028fe4 100644 --- a/2025/CVE-2025-9776.json +++ b/2025/CVE-2025-9776.json @@ -14,10 +14,10 @@ "description": "CVE-2025-9776 — CatFolders WordPress Plugin: Authenticated SQL Injection via CSV Import | POC + Walkthrough", "fork": false, "created_at": "2025-09-13T06:24:29Z", - "updated_at": "2026-05-08T16:05:50Z", + "updated_at": "2026-10-26T00:44:05Z", "pushed_at": "2026-05-08T16:05:45Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -34,7 +34,7 @@ ], "visibility": "public", "forks": 1, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-0073.json b/2026/CVE-2026-0073.json index 477bb3d66a..b4a4fd3503 100644 --- a/2026/CVE-2026-0073.json +++ b/2026/CVE-2026-0073.json @@ -538,8 +538,8 @@ "description": "CVE-2026-0073: Android adbd TLS auth bypass PoC. Exploits a logic bug where OpenSSL's EVP_PKEY_cmp() returns -1 on key type mismatch (EC vs RSA), incorrectly evaluating to true and granting access. Includes functional Python and standalone C exploits to gain unauthenticated remote shell on Android devices with Wireless Debugging enabled.", "fork": false, "created_at": "2026-10-25T19:46:46Z", - "updated_at": "2026-10-25T19:49:43Z", - "pushed_at": "2026-10-25T19:49:40Z", + "updated_at": "2026-10-25T21:53:04Z", + "pushed_at": "2026-10-25T21:53:00Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-0828.json b/2026/CVE-2026-0828.json index 8ffc8bca6c..a3c6404188 100644 --- a/2026/CVE-2026-0828.json +++ b/2026/CVE-2026-0828.json @@ -180,39 +180,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1340066799, - "name": "Terminator_Killer", - "full_name": "Hika-sec\/Terminator_Killer", - "owner": { - "login": "Hika-sec", - "id": 266563669, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/266563669?v=4", - "html_url": "https:\/\/github.com\/Hika-sec", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Hika-sec\/Terminator_Killer", - "description": "Ring0-level process killer leveraging CVE-2026-0828 (BYOVD). Designed to demonstrate kernel-level process termination via a vulnerable signed driver, highlighting the security risks of Bring Your Own Vulnerable Driver attacks and the importance of driver trust, monitoring, and endpoint protection.", - "fork": false, - "created_at": "2026-08-19T22:16:22Z", - "updated_at": "2026-08-23T21:35:50Z", - "pushed_at": "2026-08-23T21:35:42Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, { "id": 1354810306, "name": "dast", diff --git a/2026/CVE-2026-102255.json b/2026/CVE-2026-102255.json index c0a0e1e7ad..cbc814f3dd 100644 --- a/2026/CVE-2026-102255.json +++ b/2026/CVE-2026-102255.json @@ -80,8 +80,8 @@ "description": "Standalone defensive checker project for CVE-2026-102255: SonicWall SMA1000 (6210, 7210, 8200v): Pre-authentication server-side request forgery. One exploit per repository; implementation pending.", "fork": false, "created_at": "2026-10-23T23:41:33Z", - "updated_at": "2026-10-24T16:24:34Z", - "pushed_at": "2026-10-24T16:24:32Z", + "updated_at": "2026-10-26T00:23:08Z", + "pushed_at": "2026-10-26T01:50:56Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-102256.json b/2026/CVE-2026-102256.json index d3be662c35..64df83e8bf 100644 --- a/2026/CVE-2026-102256.json +++ b/2026/CVE-2026-102256.json @@ -14,8 +14,8 @@ "description": "Standalone defensive checker project for CVE-2026-102256: SonicWall SMA1000 (6210, 7210, 8200v): Authenticated remote code execution. One exploit per repository; implementation pending.", "fork": false, "created_at": "2026-10-23T23:41:46Z", - "updated_at": "2026-10-24T16:31:02Z", - "pushed_at": "2026-10-24T16:30:57Z", + "updated_at": "2026-10-26T00:22:36Z", + "pushed_at": "2026-10-26T01:52:16Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-102257.json b/2026/CVE-2026-102257.json index 9978bc61ff..7b258331fe 100644 --- a/2026/CVE-2026-102257.json +++ b/2026/CVE-2026-102257.json @@ -14,8 +14,8 @@ "description": "Standalone defensive checker project for CVE-2026-102257: SonicWall SMA1000 (6210, 7210, 8200v): AMC archive path traversal. One exploit per repository; implementation pending.", "fork": false, "created_at": "2026-10-23T23:41:57Z", - "updated_at": "2026-10-24T16:31:08Z", - "pushed_at": "2026-10-24T16:31:03Z", + "updated_at": "2026-10-26T00:22:32Z", + "pushed_at": "2026-10-26T01:54:23Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-102258.json b/2026/CVE-2026-102258.json index cea9223b3b..0b3ebbeeea 100644 --- a/2026/CVE-2026-102258.json +++ b/2026/CVE-2026-102258.json @@ -14,8 +14,8 @@ "description": "Standalone defensive checker project for CVE-2026-102258: SonicWall SMA1000 (6210, 7210, 8200v): AMC stored cross-site scripting. One exploit per repository; implementation pending.", "fork": false, "created_at": "2026-10-23T23:42:29Z", - "updated_at": "2026-10-24T16:31:14Z", - "pushed_at": "2026-10-24T16:31:09Z", + "updated_at": "2026-10-26T00:22:27Z", + "pushed_at": "2026-10-26T00:22:22Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-102764.json b/2026/CVE-2026-102764.json index 3ab82d9933..a9dd470181 100644 --- a/2026/CVE-2026-102764.json +++ b/2026/CVE-2026-102764.json @@ -80,8 +80,8 @@ "description": "Standalone defensive checker project for CVE-2026-102764: BeyondTrust Remote Support: Internal-message origin validation \/ unauthorized file operations. One exploit per repository; implementation pending.", "fork": false, "created_at": "2026-10-23T23:42:55Z", - "updated_at": "2026-10-24T16:29:03Z", - "pushed_at": "2026-10-24T16:28:59Z", + "updated_at": "2026-10-26T00:29:44Z", + "pushed_at": "2026-10-26T00:29:39Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-102826.json b/2026/CVE-2026-102826.json index bc493722cd..0d34949879 100644 --- a/2026/CVE-2026-102826.json +++ b/2026/CVE-2026-102826.json @@ -14,8 +14,8 @@ "description": "Standalone defensive checker project for CVE-2026-102826: simple-git configuration include command injection. One exploit per repository; implementation pending.", "fork": false, "created_at": "2026-10-23T23:37:04Z", - "updated_at": "2026-10-24T16:30:44Z", - "pushed_at": "2026-10-24T16:30:40Z", + "updated_at": "2026-10-25T23:27:52Z", + "pushed_at": "2026-10-26T01:28:43Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-104286.json b/2026/CVE-2026-104286.json index efdc6c3122..9d58d2db52 100644 --- a/2026/CVE-2026-104286.json +++ b/2026/CVE-2026-104286.json @@ -113,8 +113,8 @@ "description": "Standalone defensive checker project for CVE-2026-104286: Fortinet FortiMail: Path traversal \/ NULL-byte arbitrary file write. One exploit per repository; implementation pending.", "fork": false, "created_at": "2026-10-23T23:43:25Z", - "updated_at": "2026-10-24T16:24:04Z", - "pushed_at": "2026-10-24T16:24:02Z", + "updated_at": "2026-10-26T00:23:12Z", + "pushed_at": "2026-10-26T00:23:08Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-104849.json b/2026/CVE-2026-104849.json index b3e7ae0ded..c63eaf050b 100644 --- a/2026/CVE-2026-104849.json +++ b/2026/CVE-2026-104849.json @@ -15,7 +15,7 @@ "fork": false, "created_at": "2026-10-23T23:37:34Z", "updated_at": "2026-10-24T16:30:50Z", - "pushed_at": "2026-10-24T16:30:46Z", + "pushed_at": "2026-10-26T01:29:32Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-104935.json b/2026/CVE-2026-104935.json index 138b2994c3..e187e8e376 100644 --- a/2026/CVE-2026-104935.json +++ b/2026/CVE-2026-104935.json @@ -146,8 +146,8 @@ "description": "Standalone defensive checker project for CVE-2026-104935: Ivanti Connect Secure: Authentication bypass by spoofing. One exploit per repository; implementation pending.", "fork": false, "created_at": "2026-10-23T23:42:43Z", - "updated_at": "2026-10-24T16:24:13Z", - "pushed_at": "2026-10-24T16:24:10Z", + "updated_at": "2026-10-26T00:29:52Z", + "pushed_at": "2026-10-26T00:29:47Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-106173.json b/2026/CVE-2026-106173.json index ddf9f90776..9d41681406 100644 --- a/2026/CVE-2026-106173.json +++ b/2026/CVE-2026-106173.json @@ -14,10 +14,10 @@ "description": "Proof of concept exploit for CVE-2026-106173, a path traversal file write leading to RCE for Fortinet FortiSIEM", "fork": false, "created_at": "2026-10-20T12:29:09Z", - "updated_at": "2026-10-25T12:39:56Z", + "updated_at": "2026-10-26T01:23:19Z", "pushed_at": "2026-10-20T12:43:37Z", - "stargazers_count": 24, - "watchers_count": 24, + "stargazers_count": 25, + "watchers_count": 25, "has_discussions": false, "forks_count": 9, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 9, - "watchers": 24, + "watchers": 25, "score": 0, "subscribers_count": 1 }, diff --git a/2026/CVE-2026-10961.json b/2026/CVE-2026-10961.json index a1a6cd33d0..6451e95157 100644 --- a/2026/CVE-2026-10961.json +++ b/2026/CVE-2026-10961.json @@ -14,10 +14,10 @@ "description": "PHP CVE-2026-109618\/109619 — self-contained unauthenticated RCE on stock PHP 8.5.11 (in-band PS(id)→cookie memory disclosure + UAF chain), full control ladders, fixed-version negative control on 8.5.12", "fork": false, "created_at": "2026-10-20T19:16:47Z", - "updated_at": "2026-10-25T05:44:06Z", + "updated_at": "2026-10-25T20:41:38Z", "pushed_at": "2026-10-25T05:44:03Z", - "stargazers_count": 110, - "watchers_count": 110, + "stargazers_count": 111, + "watchers_count": 111, "has_discussions": false, "forks_count": 25, "allow_forking": true, @@ -39,7 +39,7 @@ ], "visibility": "public", "forks": 25, - "watchers": 110, + "watchers": 111, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-109618.json b/2026/CVE-2026-109618.json index 670e5272a6..3c0036af95 100644 --- a/2026/CVE-2026-109618.json +++ b/2026/CVE-2026-109618.json @@ -14,10 +14,10 @@ "description": "Zeek and Suricata Detections for \"php2shell\" CVE-2026-109618 and CVE-2026-109619", "fork": false, "created_at": "2026-10-18T06:43:48Z", - "updated_at": "2026-10-24T00:16:49Z", + "updated_at": "2026-10-25T22:29:43Z", "pushed_at": "2026-10-21T14:35:20Z", - "stargazers_count": 10, - "watchers_count": 10, + "stargazers_count": 11, + "watchers_count": 11, "has_discussions": false, "forks_count": 5, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 5, - "watchers": 10, + "watchers": 11, "score": 0, "subscribers_count": 1 }, @@ -179,10 +179,10 @@ "description": "Offline, reproducible lab to safely analyse an untrusted PoC for CVE-2026-109618\/109619 and build detection rules. No exploit included; bring your own sample.", "fork": false, "created_at": "2026-10-21T03:36:08Z", - "updated_at": "2026-10-25T09:09:59Z", + "updated_at": "2026-10-26T01:18:15Z", "pushed_at": "2026-10-21T15:23:02Z", - "stargazers_count": 30, - "watchers_count": 30, + "stargazers_count": 31, + "watchers_count": 31, "has_discussions": false, "forks_count": 11, "allow_forking": true, @@ -193,7 +193,7 @@ "topics": [], "visibility": "public", "forks": 11, - "watchers": 30, + "watchers": 31, "score": 0, "subscribers_count": 0 }, @@ -212,10 +212,10 @@ "description": "Defensive mitigation and testing toolkit for PHP security vulnerabilities (CVE-2026-109618, CVE-2026-109619, CVE-2026-115560), including Apache protections and PHP hardening guidance", "fork": false, "created_at": "2026-10-21T04:01:24Z", - "updated_at": "2026-10-25T13:53:50Z", + "updated_at": "2026-10-26T00:01:56Z", "pushed_at": "2026-10-24T23:12:59Z", - "stargazers_count": 114, - "watchers_count": 114, + "stargazers_count": 115, + "watchers_count": 115, "has_discussions": false, "forks_count": 11, "allow_forking": true, @@ -236,7 +236,7 @@ ], "visibility": "public", "forks": 11, - "watchers": 114, + "watchers": 115, "score": 0, "subscribers_count": 2 }, @@ -335,10 +335,10 @@ "description": "PHP estate triage for CVE-2026-109618 \/ CVE-2026-109619: inventory, Plesk audit, child-process detection. No exploit code.", "fork": false, "created_at": "2026-10-21T05:42:32Z", - "updated_at": "2026-10-23T12:47:16Z", + "updated_at": "2026-10-25T20:36:33Z", "pushed_at": "2026-10-21T05:43:18Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, "forks_count": 4, "allow_forking": true, @@ -356,7 +356,7 @@ ], "visibility": "public", "forks": 4, - "watchers": 3, + "watchers": 4, "score": 0, "subscribers_count": 0 }, @@ -578,7 +578,7 @@ "stargazers_count": 8, "watchers_count": 8, "has_discussions": false, - "forks_count": 4, + "forks_count": 5, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -586,7 +586,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 4, + "forks": 5, "watchers": 8, "score": 0, "subscribers_count": 0 @@ -705,12 +705,12 @@ "description": "CVE-2026-109618\/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.", "fork": false, "created_at": "2026-10-21T07:55:16Z", - "updated_at": "2026-10-25T19:14:57Z", + "updated_at": "2026-10-26T01:25:11Z", "pushed_at": "2026-10-22T22:41:36Z", - "stargazers_count": 1785, - "watchers_count": 1785, + "stargazers_count": 1792, + "watchers_count": 1792, "has_discussions": false, - "forks_count": 619, + "forks_count": 621, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -733,8 +733,8 @@ "wordpress-security" ], "visibility": "public", - "forks": 619, - "watchers": 1785, + "forks": 621, + "watchers": 1792, "score": 0, "subscribers_count": 5 }, @@ -1006,10 +1006,10 @@ "description": "Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 \/ CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.", "fork": false, "created_at": "2026-10-21T08:31:43Z", - "updated_at": "2026-10-25T19:30:15Z", + "updated_at": "2026-10-26T01:22:20Z", "pushed_at": "2026-10-22T07:19:20Z", - "stargazers_count": 1002, - "watchers_count": 1002, + "stargazers_count": 1003, + "watchers_count": 1003, "has_discussions": false, "forks_count": 255, "allow_forking": true, @@ -1020,7 +1020,7 @@ "topics": [], "visibility": "public", "forks": 255, - "watchers": 1002, + "watchers": 1003, "score": 0, "subscribers_count": 36 }, @@ -1200,10 +1200,10 @@ "description": null, "fork": false, "created_at": "2026-10-21T09:34:03Z", - "updated_at": "2026-10-23T09:57:00Z", + "updated_at": "2026-10-26T00:49:04Z", "pushed_at": "2026-10-21T09:37:50Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -1214,7 +1214,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, @@ -1495,10 +1495,10 @@ "description": "CVE-2026-109618\/109619 PHP2Shell — Heap UAF PoC (crash + RCE framework)", "fork": false, "created_at": "2026-10-21T10:44:37Z", - "updated_at": "2026-10-25T14:57:27Z", + "updated_at": "2026-10-25T20:20:22Z", "pushed_at": "2026-10-22T08:15:35Z", - "stargazers_count": 56, - "watchers_count": 56, + "stargazers_count": 55, + "watchers_count": 55, "has_discussions": false, "forks_count": 27, "allow_forking": true, @@ -1509,7 +1509,7 @@ "topics": [], "visibility": "public", "forks": 27, - "watchers": 56, + "watchers": 55, "score": 0, "subscribers_count": 0 }, @@ -1792,10 +1792,10 @@ "description": null, "fork": false, "created_at": "2026-10-21T11:52:39Z", - "updated_at": "2026-10-25T15:12:32Z", + "updated_at": "2026-10-25T23:35:50Z", "pushed_at": "2026-10-21T11:52:57Z", - "stargazers_count": 139, - "watchers_count": 139, + "stargazers_count": 140, + "watchers_count": 140, "has_discussions": false, "forks_count": 82, "allow_forking": true, @@ -1806,7 +1806,7 @@ "topics": [], "visibility": "public", "forks": 82, - "watchers": 139, + "watchers": 140, "score": 0, "subscribers_count": 0 }, @@ -1825,8 +1825,8 @@ "description": "Read-only PHP discovery and patch-review scanner for Windows, Linux, and macOS. Produces HTML+CSV reports for CVE-2026-109618\/109619 assessment — never claims a host is clean or that the active HTTP runtime is verified.", "fork": false, "created_at": "2026-10-21T12:03:24Z", - "updated_at": "2026-10-25T19:07:37Z", - "pushed_at": "2026-10-25T19:13:33Z", + "updated_at": "2026-10-25T20:31:51Z", + "pushed_at": "2026-10-25T20:32:22Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": true, @@ -2021,7 +2021,7 @@ "stargazers_count": 27, "watchers_count": 27, "has_discussions": false, - "forks_count": 6, + "forks_count": 7, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -2041,7 +2041,7 @@ "vulnerability" ], "visibility": "public", - "forks": 6, + "forks": 7, "watchers": 27, "score": 0, "subscribers_count": 0 @@ -2061,10 +2061,10 @@ "description": "php2shell: Advanced hybrid exploit framework for CVE-2026-109618, CVE-2026-109619 & CVE-2026-115560. Features Auto-LFI parameter discovery, SAPI profiling, OOM fuzzing calibration, and FPM worker pinning. Stdlib only.", "fork": false, "created_at": "2026-10-21T12:37:59Z", - "updated_at": "2026-10-25T17:15:17Z", + "updated_at": "2026-10-25T21:43:17Z", "pushed_at": "2026-10-23T15:07:53Z", - "stargazers_count": 75, - "watchers_count": 75, + "stargazers_count": 78, + "watchers_count": 78, "has_discussions": false, "forks_count": 26, "allow_forking": true, @@ -2075,7 +2075,7 @@ "topics": [], "visibility": "public", "forks": 26, - "watchers": 75, + "watchers": 78, "score": 0, "subscribers_count": 0 }, @@ -2136,8 +2136,8 @@ "description": "Independent source-level analysis and detection tooling for the PHP session.upload_progress pre-RINIT use-after-free (CVE-2026-109618 \/ CVE-2026-109619, CVSS 9.2, fixed 2026-10-21). Includes a heap layout study, a reproduction lab, an exposure scanner and a one-line remediation guide.", "fork": false, "created_at": "2026-10-21T12:48:10Z", - "updated_at": "2026-10-21T15:58:09Z", - "pushed_at": "2026-10-21T13:40:11Z", + "updated_at": "2026-10-25T23:21:49Z", + "pushed_at": "2026-10-25T23:21:45Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -3307,10 +3307,10 @@ "description": "php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.", "fork": false, "created_at": "2026-10-21T14:48:05Z", - "updated_at": "2026-10-25T13:44:50Z", + "updated_at": "2026-10-26T01:19:37Z", "pushed_at": "2026-10-25T13:44:46Z", - "stargazers_count": 106, - "watchers_count": 106, + "stargazers_count": 107, + "watchers_count": 107, "has_discussions": false, "forks_count": 16, "allow_forking": true, @@ -3338,7 +3338,7 @@ ], "visibility": "public", "forks": 16, - "watchers": 106, + "watchers": 107, "score": 0, "subscribers_count": 1 }, @@ -3582,10 +3582,10 @@ "description": "CVE-2026-109618\/109619 PoC — PHP session.upload_progress heap use-after-free (CVSS 9.2)", "fork": false, "created_at": "2026-10-21T15:06:33Z", - "updated_at": "2026-10-25T14:32:38Z", + "updated_at": "2026-10-25T20:20:29Z", "pushed_at": "2026-10-24T11:24:48Z", - "stargazers_count": 141, - "watchers_count": 141, + "stargazers_count": 140, + "watchers_count": 140, "has_discussions": false, "forks_count": 86, "allow_forking": true, @@ -3596,7 +3596,7 @@ "topics": [], "visibility": "public", "forks": 86, - "watchers": 141, + "watchers": 140, "score": 0, "subscribers_count": 0 }, @@ -4835,8 +4835,8 @@ "description": "Unofficial mitigation patches for CVE-2026-109618\/109619 on EOL PHP 5.x", "fork": false, "created_at": "2026-10-21T16:38:33Z", - "updated_at": "2026-10-25T09:15:53Z", - "pushed_at": "2026-10-22T08:41:28Z", + "updated_at": "2026-10-25T22:20:46Z", + "pushed_at": "2026-10-25T22:20:42Z", "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, @@ -5287,10 +5287,10 @@ "description": "Remediation scripts for PHP2Shell vulnerabilities CVE-2026-109618 and CVE-2026-109619, targeting HestiaCP and Plesk environments. Automates PHP configuration hardening and service reloads to help reduce exposure across supported PHP versions and hosting configurations.", "fork": false, "created_at": "2026-10-21T17:22:50Z", - "updated_at": "2026-10-22T16:14:00Z", + "updated_at": "2026-10-26T01:53:57Z", "pushed_at": "2026-10-22T00:53:44Z", - "stargazers_count": 6, - "watchers_count": 6, + "stargazers_count": 7, + "watchers_count": 7, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -5301,7 +5301,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 6, + "watchers": 7, "score": 0, "subscribers_count": 0 }, @@ -6732,10 +6732,10 @@ "description": "PHP 7.4 for Windows with CVE-2026-109618 \/ CVE-2026-109619 Backport", "fork": false, "created_at": "2026-10-21T20:14:03Z", - "updated_at": "2026-10-24T09:15:34Z", + "updated_at": "2026-10-26T00:41:45Z", "pushed_at": "2026-10-23T12:33:45Z", - "stargazers_count": 7, - "watchers_count": 7, + "stargazers_count": 8, + "watchers_count": 8, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -6746,7 +6746,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 7, + "watchers": 8, "score": 0, "subscribers_count": 0 }, @@ -7328,8 +7328,8 @@ "description": "Shell scripts that check Linux hosts for known vulnerabilities (PHP CVE-2026-109618\/109619, Copy Fail CVE-2026-31431), report vulnerable, mitigated or fine, and apply the fix on request with --fix.", "fork": false, "created_at": "2026-10-21T21:30:06Z", - "updated_at": "2026-10-23T22:32:37Z", - "pushed_at": "2026-10-23T22:32:33Z", + "updated_at": "2026-10-26T00:19:24Z", + "pushed_at": "2026-10-26T00:19:20Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -7875,10 +7875,10 @@ "description": "PHP2Shell: version-aware research toolkit for CVE-2026-109618 \/ CVE-2026-109619 — pre-auth RCE in PHP session.upload_progress (mod_php). Build profiles, labs, heap calibration and detection guidance for authorized security testing.", "fork": false, "created_at": "2026-10-21T22:53:01Z", - "updated_at": "2026-10-25T19:48:48Z", + "updated_at": "2026-10-25T23:55:06Z", "pushed_at": "2026-10-22T11:43:17Z", - "stargazers_count": 159, - "watchers_count": 159, + "stargazers_count": 161, + "watchers_count": 161, "has_discussions": false, "forks_count": 53, "allow_forking": true, @@ -7904,7 +7904,7 @@ ], "visibility": "public", "forks": 53, - "watchers": 159, + "watchers": 161, "score": 0, "subscribers_count": 0 }, @@ -8156,7 +8156,7 @@ "fork": false, "created_at": "2026-10-21T23:45:38Z", "updated_at": "2026-10-24T07:23:26Z", - "pushed_at": "2026-10-23T21:02:47Z", + "pushed_at": "2026-10-26T01:18:14Z", "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, @@ -9556,10 +9556,10 @@ "description": "Exploit tooling and vulnerability research for CVE-2026-109618 and CVE-2026-109619 — two critical unauthenticated remote code execution (RCE) vulnerabilities patched in PHP 8.4.27, 8.3.36, 8.2.35, and 8.5.12 (released October 21, 2026).", "fork": false, "created_at": "2026-10-22T03:42:57Z", - "updated_at": "2026-10-24T10:27:44Z", + "updated_at": "2026-10-25T23:28:53Z", "pushed_at": "2026-10-22T15:30:31Z", - "stargazers_count": 13, - "watchers_count": 13, + "stargazers_count": 15, + "watchers_count": 15, "has_discussions": false, "forks_count": 5, "allow_forking": true, @@ -9578,7 +9578,7 @@ ], "visibility": "public", "forks": 5, - "watchers": 13, + "watchers": 15, "score": 0, "subscribers_count": 0 }, @@ -9794,12 +9794,12 @@ "description": "High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)", "fork": false, "created_at": "2026-10-22T03:53:20Z", - "updated_at": "2026-10-25T19:13:39Z", + "updated_at": "2026-10-26T01:53:13Z", "pushed_at": "2026-10-24T03:40:18Z", - "stargazers_count": 897, - "watchers_count": 897, + "stargazers_count": 904, + "watchers_count": 904, "has_discussions": false, - "forks_count": 131, + "forks_count": 132, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -9807,8 +9807,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 131, - "watchers": 897, + "forks": 132, + "watchers": 904, "score": 0, "subscribers_count": 2 }, @@ -12447,10 +12447,10 @@ "description": "Scanner for PHP2Shell (CVE-2026-109618\/109619): URL blackbox, local device and SSH.", "fork": false, "created_at": "2026-10-22T09:45:34Z", - "updated_at": "2026-10-25T17:44:13Z", + "updated_at": "2026-10-26T01:42:35Z", "pushed_at": "2026-10-23T14:55:12Z", - "stargazers_count": 88, - "watchers_count": 88, + "stargazers_count": 91, + "watchers_count": 91, "has_discussions": false, "forks_count": 13, "allow_forking": true, @@ -12466,7 +12466,7 @@ ], "visibility": "public", "forks": 13, - "watchers": 88, + "watchers": 91, "score": 0, "subscribers_count": 0 }, @@ -12881,10 +12881,10 @@ "description": "php2shell Scanner ", "fork": false, "created_at": "2026-10-22T10:39:58Z", - "updated_at": "2026-10-25T15:52:29Z", + "updated_at": "2026-10-26T01:08:54Z", "pushed_at": "2026-10-24T16:54:48Z", - "stargazers_count": 15, - "watchers_count": 15, + "stargazers_count": 16, + "watchers_count": 16, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -12895,7 +12895,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 15, + "watchers": 16, "score": 0, "subscribers_count": 0 }, @@ -13670,10 +13670,10 @@ "description": "PHP2Shell exploit framework — CVE-2026-109618\/619 PHP session.upload_progress UAF to RCE", "fork": false, "created_at": "2026-10-22T12:53:40Z", - "updated_at": "2026-10-25T16:27:10Z", + "updated_at": "2026-10-26T00:19:35Z", "pushed_at": "2026-10-24T14:30:09Z", - "stargazers_count": 172, - "watchers_count": 172, + "stargazers_count": 173, + "watchers_count": 173, "has_discussions": false, "forks_count": 50, "allow_forking": true, @@ -13684,7 +13684,7 @@ "topics": [], "visibility": "public", "forks": 50, - "watchers": 172, + "watchers": 173, "score": 0, "subscribers_count": 0 }, @@ -13703,10 +13703,10 @@ "description": "Verifica se um servidor Linux está vulnerável ao php2shell (CVE-2026-109618 \/ CVE-2026-109619)", "fork": false, "created_at": "2026-10-22T12:58:48Z", - "updated_at": "2026-10-22T12:58:57Z", + "updated_at": "2026-10-26T00:00:36Z", "pushed_at": "2026-10-22T12:58:53Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -13717,7 +13717,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -14834,10 +14834,10 @@ "description": "Honeypot to attract attacks for php2shell (CVE-2026-109618 and CVE-2026-109619)", "fork": false, "created_at": "2026-10-22T15:45:52Z", - "updated_at": "2026-10-22T17:32:33Z", + "updated_at": "2026-10-25T23:43:19Z", "pushed_at": "2026-10-22T17:32:52Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -14848,7 +14848,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -15476,11 +15476,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/JoshRob297\/php2shell-research", - "description": "In-depth technical verification, ASLR boundary analysis, and memory defaults impact for CVE-2026-109618 & CVE-2026-109619 (PHP2Shell)", + "description": "In-depth technical verification, ASLR boundary analysis, and memory defaults impact for CVE-2026-109618 & CVE-2026-109619 (PHP2Shell) CVE-2026-115560", "fork": false, "created_at": "2026-10-22T16:51:35Z", - "updated_at": "2026-10-25T19:34:42Z", - "pushed_at": "2026-10-25T19:34:39Z", + "updated_at": "2026-10-26T01:33:25Z", + "pushed_at": "2026-10-26T01:33:22Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -15871,7 +15871,7 @@ "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -15887,7 +15887,7 @@ "synology-nas" ], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 2, "score": 0, "subscribers_count": 0 @@ -16969,10 +16969,10 @@ "description": "Complete auto exploit for NGINX PHP-FPM CVE-2026-109618 \/ CVE-2026-109619 ", "fork": false, "created_at": "2026-10-22T21:04:53Z", - "updated_at": "2026-10-25T07:32:33Z", + "updated_at": "2026-10-25T20:14:15Z", "pushed_at": "2026-10-24T10:33:07Z", - "stargazers_count": 4, - "watchers_count": 4, + "stargazers_count": 5, + "watchers_count": 5, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -16996,7 +16996,7 @@ ], "visibility": "public", "forks": 1, - "watchers": 4, + "watchers": 5, "score": 0, "subscribers_count": 0 }, @@ -18793,10 +18793,10 @@ "description": "php7-security-backports-for-PHP2Shell，(CVE-2026-109618 、 CVE-2026-109619)", "fork": false, "created_at": "2026-10-23T07:18:35Z", - "updated_at": "2026-10-23T10:53:09Z", + "updated_at": "2026-10-26T00:39:43Z", "pushed_at": "2026-10-23T10:53:05Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -18807,7 +18807,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -18964,8 +18964,8 @@ "description": "Check PHP2Shell (CVE-2026-109618, CVE-2026-109619) from inside your server: distribution backports, missed restarts and interim mitigations, verdicts computed in the browser.", "fork": false, "created_at": "2026-10-23T08:16:48Z", - "updated_at": "2026-10-23T17:13:47Z", - "pushed_at": "2026-10-23T17:13:43Z", + "updated_at": "2026-10-26T00:54:32Z", + "pushed_at": "2026-10-26T00:54:29Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -20346,6 +20346,48 @@ "score": 0, "subscribers_count": 0 }, + { + "id": 1431150364, + "name": "shiny-php", + "full_name": "SirjanSingh\/shiny-php", + "owner": { + "login": "SirjanSingh", + "id": 66999258, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/66999258?v=4", + "html_url": "https:\/\/github.com\/SirjanSingh", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/SirjanSingh\/shiny-php", + "description": "Defensive checker, preventer & log scanner for the PHP2Shell RCE flaws (CVE-2026-109618 \/ CVE-2026-109619). Zero dependencies, stdlib-only, no remote probing.", + "fork": false, + "created_at": "2026-10-23T14:26:46Z", + "updated_at": "2026-10-25T21:38:40Z", + "pushed_at": "2026-10-25T21:37:45Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve", + "cve-2026-109618", + "cve-2026-109619", + "php", + "php2shell", + "rce", + "security", + "vulnerability-scanner" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, { "id": 1431163081, "name": "Paranoid-PHP2Shell", @@ -21964,12 +22006,12 @@ "description": "Unofficial patched PHP 5.6-8.1 builds for RunCloud on Ubuntu 16.04-24.04 (PHP2Shell, CVE-2026-109618\/109619), with scripts to build them yourself", "fork": false, "created_at": "2026-10-24T09:18:00Z", - "updated_at": "2026-10-25T07:51:22Z", + "updated_at": "2026-10-26T01:06:58Z", "pushed_at": "2026-10-25T07:51:18Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -21984,8 +22026,8 @@ "ubuntu" ], "visibility": "public", - "forks": 0, - "watchers": 1, + "forks": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, @@ -22226,8 +22268,8 @@ "description": "Detection and response package for php2shell (CVE-2026-109618 \/ CVE-2026-109619): Suricata, Zeek, YARA, Sigma, ModSecurity rules, hunting queries, SOC triage, patch matrix. No exploit code.", "fork": false, "created_at": "2026-10-24T13:28:54Z", - "updated_at": "2026-10-25T18:51:01Z", - "pushed_at": "2026-10-25T18:50:57Z", + "updated_at": "2026-10-26T00:56:34Z", + "pushed_at": "2026-10-26T00:56:33Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -22343,39 +22385,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1432343982, - "name": "cve-2026-109618-php2shell-poc", - "full_name": "utkarsssh17\/cve-2026-109618-php2shell-poc", - "owner": { - "login": "utkarsssh17", - "id": 32358122, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32358122?v=4", - "html_url": "https:\/\/github.com\/utkarsssh17", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/utkarsssh17\/cve-2026-109618-php2shell-poc", - "description": "CVE-2026-109618 (php2shell part 1): local deterministic memory-safety PoC", - "fork": false, - "created_at": "2026-10-24T15:54:42Z", - "updated_at": "2026-10-24T17:06:56Z", - "pushed_at": "2026-10-24T15:54:46Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1432422003, "name": "php2shell-el7-el8-rpm-fixed", @@ -23501,8 +23510,8 @@ }, { "id": 1433211708, - "name": "php2shellX", - "full_name": "testerxma\/php2shellX", + "name": "php2shell", + "full_name": "testerxma\/php2shell", "owner": { "login": "testerxma", "id": 240902345, @@ -23510,12 +23519,12 @@ "html_url": "https:\/\/github.com\/testerxma", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/testerxma\/php2shellX", - "description": "Next-generation exploit orchestrator for CVE-2026-109618\/619 — adds Cloudflare WAF bypass, flexible target specification (URL\/host\/port\/path\/batch), multi-format output (JSON\/CSV\/table), resume capability, and lab automation (Docker restart). Authored by TESTERXMA.", + "html_url": "https:\/\/github.com\/testerxma\/php2shell", + "description": "Next-generation exploit orchestrator for CVE-2026-109618\/619 — adds Cloudflare WAF bypass, flexible target specification (URL\/host\/port\/path\/batch), multi-format output (JSON\/CSV\/table), resume capability, aslr bypass, revers shell, Authored by TESTERXMA.", "fork": false, "created_at": "2026-10-25T13:10:48Z", - "updated_at": "2026-10-25T18:01:11Z", - "pushed_at": "2026-10-25T18:01:07Z", + "updated_at": "2026-10-25T23:31:20Z", + "pushed_at": "2026-10-25T23:31:17Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -23526,16 +23535,26 @@ "has_pull_requests": true, "pull_request_creation_policy": "all", "topics": [ + "aslr", + "aslr-bypass", + "automated-testing", "cloudflare", - "exploit", - "php", - "php-shell", - "php-webshell", - "post-exploitation", - "rce", + "critical", + "cve-2026-109618", + "cve-2026-109619", + "cves", + "exploitation", + "exploitation-and-pentesting", + "exploitation-tool", + "php2shell", + "php2shell-cve", + "php2shell-cve-2026", + "php2shell-scanner", + "php2shell-vulnerability", "red-team", - "web-shell", - "webshell" + "reverse-shell", + "waf-bypass", + "web-shell" ], "visibility": "public", "forks": 0, @@ -23591,8 +23610,8 @@ "description": "CVE-2026-109618 \/ 109619 checker", "fork": false, "created_at": "2026-10-25T17:25:19Z", - "updated_at": "2026-10-25T19:38:42Z", - "pushed_at": "2026-10-25T19:38:37Z", + "updated_at": "2026-10-25T19:54:46Z", + "pushed_at": "2026-10-25T19:54:42Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -23624,12 +23643,12 @@ "description": null, "fork": false, "created_at": "2026-10-25T17:58:28Z", - "updated_at": "2026-10-25T19:26:28Z", + "updated_at": "2026-10-26T01:41:41Z", "pushed_at": "2026-10-25T18:26:54Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 12, + "watchers_count": 12, "has_discussions": false, - "forks_count": 0, + "forks_count": 7, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -23637,8 +23656,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, - "watchers": 0, + "forks": 7, + "watchers": 12, "score": 0, "subscribers_count": 0 }, @@ -23731,8 +23750,8 @@ "description": "Bigfix PHP Vulnerability Scanner Content (CVE-2026-109618, CVE-2026-109619) for Windows, Linux and Mac.", "fork": false, "created_at": "2026-10-25T19:00:03Z", - "updated_at": "2026-10-25T19:04:54Z", - "pushed_at": "2026-10-25T19:04:50Z", + "updated_at": "2026-10-25T20:17:44Z", + "pushed_at": "2026-10-25T20:17:40Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -23748,5 +23767,244 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1433573924, + "name": "php2shell-unchained", + "full_name": "Leviticus-Triage\/php2shell-unchained", + "owner": { + "login": "Leviticus-Triage", + "id": 181639834, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/181639834?v=4", + "html_url": "https:\/\/github.com\/Leviticus-Triage", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Leviticus-Triage\/php2shell-unchained", + "description": "Isolated Docker adversary-emulation lab: PHP2Shell (CVE-2026-109618\/619, CVE-2026-115560) exploit chains, 11-scenario patch & WAF audit, Sliver C2, Cloudflare Quick Tunnel + Tor egress, guided mitigation validation.", + "fork": false, + "created_at": "2026-10-25T19:52:38Z", + "updated_at": "2026-10-26T00:54:05Z", + "pushed_at": "2026-10-26T00:54:01Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "blue-team", + "cve-2026-109618", + "cve-2026-109619", + "docker", + "pentest", + "php", + "php2shell", + "red-team", + "security", + "sliver-c2", + "tor", + "waf-bypass" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1433591586, + "name": "php2shell-monitor-rz", + "full_name": "daothinh\/php2shell-monitor-rz", + "owner": { + "login": "daothinh", + "id": 53637588, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/53637588?v=4", + "html_url": "https:\/\/github.com\/daothinh", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/daothinh\/php2shell-monitor-rz", + "description": "PHP2Shell Monitor - Real-time detection for CVE-2026-109618\/109619 exploitation attempts", + "fork": false, + "created_at": "2026-10-25T20:16:48Z", + "updated_at": "2026-10-25T20:28:19Z", + "pushed_at": "2026-10-25T20:28:16Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1433689400, + "name": "php2shell-wordpress-check", + "full_name": "fernandotellado\/php2shell-wordpress-check", + "owner": { + "login": "fernandotellado", + "id": 1914800, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1914800?v=4", + "html_url": "https:\/\/github.com\/fernandotellado", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/fernandotellado\/php2shell-wordpress-check", + "description": "A read-only Site Health check that compares the PHP version your site is running with the releases that fix PHP2Shell (CVE-2026-109618 and CVE-2026-109619)", + "fork": false, + "created_at": "2026-10-25T22:49:06Z", + "updated_at": "2026-10-25T22:51:58Z", + "pushed_at": "2026-10-25T22:52:39Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1433716346, + "name": "php2shell-behind-nginx", + "full_name": "MrPrinceRawat\/php2shell-behind-nginx", + "owner": { + "login": "MrPrinceRawat", + "id": 51529046, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51529046?v=4", + "html_url": "https:\/\/github.com\/MrPrinceRawat", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/MrPrinceRawat\/php2shell-behind-nginx", + "description": "php2shell (CVE-2026-109618\/9) behind nginx: measurements, lab, and an app-LFI chain that survives a proxy", + "fork": false, + "created_at": "2026-10-25T23:38:32Z", + "updated_at": "2026-10-25T23:38:45Z", + "pushed_at": "2026-10-25T23:38:40Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve-2026-109618", + "exploit", + "nginx", + "php", + "php2shell", + "rce" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1433723012, + "name": "PHP2Shell__CVE-2026-109618__CVE2026-109619", + "full_name": "lucasbarros097\/PHP2Shell__CVE-2026-109618__CVE2026-109619", + "owner": { + "login": "lucasbarros097", + "id": 84112839, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/84112839?v=4", + "html_url": "https:\/\/github.com\/lucasbarros097", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/lucasbarros097\/PHP2Shell__CVE-2026-109618__CVE2026-109619", + "description": null, + "fork": false, + "created_at": "2026-10-25T23:51:08Z", + "updated_at": "2026-10-26T00:57:51Z", + "pushed_at": "2026-10-26T00:57:48Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1433789910, + "name": "CVE-2026-109618", + "full_name": "franckferman\/CVE-2026-109618", + "owner": { + "login": "franckferman", + "id": 73023545, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/73023545?v=4", + "html_url": "https:\/\/github.com\/franckferman", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/franckferman\/CVE-2026-109618", + "description": "CVE-2026-109618 - PHP session.upload_progress Heap UAF Pre-Auth RCE (CVSS 9.2)", + "fork": false, + "created_at": "2026-10-26T01:46:40Z", + "updated_at": "2026-10-26T01:55:51Z", + "pushed_at": "2026-10-26T01:46:45Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "bug-bounty", + "cve", + "cve-2026-109618", + "cybersecurity", + "exploit", + "hacking", + "heap-overflow", + "offensive-security", + "pentest", + "pentesting", + "php", + "php-exploit", + "poc", + "pre-auth", + "rce", + "red-team", + "security", + "uaf", + "use-after-free", + "vulnerability" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-109619.json b/2026/CVE-2026-109619.json index 39545dd01b..30471dd353 100644 --- a/2026/CVE-2026-109619.json +++ b/2026/CVE-2026-109619.json @@ -659,10 +659,10 @@ "description": "Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619\/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design", "fork": false, "created_at": "2026-10-23T13:49:52Z", - "updated_at": "2026-10-25T18:55:16Z", + "updated_at": "2026-10-26T01:28:59Z", "pushed_at": "2026-10-24T13:28:02Z", - "stargazers_count": 73, - "watchers_count": 73, + "stargazers_count": 75, + "watchers_count": 75, "has_discussions": false, "forks_count": 48, "allow_forking": true, @@ -689,7 +689,7 @@ ], "visibility": "public", "forks": 48, - "watchers": 73, + "watchers": 75, "score": 0, "subscribers_count": 0 }, @@ -760,22 +760,22 @@ "subscribers_count": 0 }, { - "id": 1432361228, - "name": "cve-2026-109619-php-uaf-poc", - "full_name": "utkarsssh17\/cve-2026-109619-php-uaf-poc", + "id": 1433789354, + "name": "CVE-2026-109619", + "full_name": "franckferman\/CVE-2026-109619", "owner": { - "login": "utkarsssh17", - "id": 32358122, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32358122?v=4", - "html_url": "https:\/\/github.com\/utkarsssh17", + "login": "franckferman", + "id": 73023545, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/73023545?v=4", + "html_url": "https:\/\/github.com\/franckferman", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/utkarsssh17\/cve-2026-109619-php-uaf-poc", - "description": null, + "html_url": "https:\/\/github.com\/franckferman\/CVE-2026-109619", + "description": "CVE-2026-109619 - PHP session.upload_progress File Poisoning + LFI RCE (CVSS 9.2)", "fork": false, - "created_at": "2026-10-24T16:13:43Z", - "updated_at": "2026-10-24T17:07:52Z", - "pushed_at": "2026-10-24T16:13:47Z", + "created_at": "2026-10-26T01:45:45Z", + "updated_at": "2026-10-26T01:55:50Z", + "pushed_at": "2026-10-26T01:45:51Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -785,7 +785,28 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "bug-bounty", + "cve", + "cve-2026-109619", + "cybersecurity", + "exploit", + "hacking", + "lfi", + "local-file-inclusion", + "offensive-security", + "pentest", + "pentesting", + "php", + "php-exploit", + "poc", + "pre-auth", + "rce", + "red-team", + "security", + "session-poisoning", + "vulnerability" + ], "visibility": "public", "forks": 0, "watchers": 0, diff --git a/2026/CVE-2026-110152.json b/2026/CVE-2026-110152.json deleted file mode 100644 index 4961d7f72a..0000000000 --- a/2026/CVE-2026-110152.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1432420823, - "name": "cve-2026-110152-chrome-ngle-rce-poc", - "full_name": "utkarsssh17\/cve-2026-110152-chrome-ngle-rce-poc", - "owner": { - "login": "utkarsssh17", - "id": 32358122, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32358122?v=4", - "html_url": "https:\/\/github.com\/utkarsssh17", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/utkarsssh17\/cve-2026-110152-chrome-ngle-rce-poc", - "description": "PoC: CVE-2026-110152 Chrome ANGLE vertex-attribute translation heap buffer overflow (CVSS 9.6)", - "fork": false, - "created_at": "2026-10-24T17:21:47Z", - "updated_at": "2026-10-25T00:38:31Z", - "pushed_at": "2026-10-25T00:38:27Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2026/CVE-2026-110922.json b/2026/CVE-2026-110922.json index ea85a3a22e..94c4444384 100644 --- a/2026/CVE-2026-110922.json +++ b/2026/CVE-2026-110922.json @@ -14,8 +14,8 @@ "description": "Chrome Vulnerability Laboratory . CVE-2026-110922 ", "fork": false, "created_at": "2026-10-24T09:26:07Z", - "updated_at": "2026-10-25T19:05:41Z", - "pushed_at": "2026-10-25T19:05:37Z", + "updated_at": "2026-10-25T21:53:36Z", + "pushed_at": "2026-10-25T21:53:33Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-111497.json b/2026/CVE-2026-111497.json index 3c766af0c4..eab15b4bcd 100644 --- a/2026/CVE-2026-111497.json +++ b/2026/CVE-2026-111497.json @@ -47,10 +47,10 @@ "description": "Reproducible local Brotli decoder proof for CVE-2026-111497 with a self-checking tuned RCE harness", "fork": false, "created_at": "2026-10-22T04:08:28Z", - "updated_at": "2026-10-25T18:50:12Z", + "updated_at": "2026-10-25T23:39:27Z", "pushed_at": "2026-10-25T01:09:02Z", - "stargazers_count": 43, - "watchers_count": 43, + "stargazers_count": 44, + "watchers_count": 44, "has_discussions": false, "forks_count": 14, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 14, - "watchers": 43, + "watchers": 44, "score": 0, "subscribers_count": 0 }, @@ -372,8 +372,8 @@ }, { "id": 1430428544, - "name": "emudhra-fix", - "full_name": "datmt\/emudhra-fix", + "name": "vulcheck", + "full_name": "datmt\/vulcheck", "owner": { "login": "datmt", "id": 14150061, @@ -381,12 +381,12 @@ "html_url": "https:\/\/github.com\/datmt", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/datmt\/emudhra-fix", + "html_url": "https:\/\/github.com\/datmt\/vulcheck", "description": "Check and fix hosts, Docker containers and k8s pods: leaked eMudhra CA trust, and Brotli decoder CVE-2026-111497 scanner", "fork": false, "created_at": "2026-10-23T00:54:47Z", - "updated_at": "2026-10-24T14:40:34Z", - "pushed_at": "2026-10-24T14:40:30Z", + "updated_at": "2026-10-26T01:36:37Z", + "pushed_at": "2026-10-26T01:36:33Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -664,10 +664,10 @@ "description": "Claude Code and Codex skill for finding potentially vulnerable Brotli copies and guiding updates for CVE-2026-111497.", "fork": false, "created_at": "2026-10-23T16:32:12Z", - "updated_at": "2026-10-25T18:33:12Z", + "updated_at": "2026-10-25T23:58:14Z", "pushed_at": "2026-10-24T04:03:44Z", - "stargazers_count": 42, - "watchers_count": 42, + "stargazers_count": 45, + "watchers_count": 45, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -678,7 +678,7 @@ "topics": [], "visibility": "public", "forks": 3, - "watchers": 42, + "watchers": 45, "score": 0, "subscribers_count": 0 }, @@ -697,8 +697,8 @@ "description": "Passive Node2Shell (CVE-2026-111497) exposure checker and offline Node.js runtime assessment with branded HTML reports. Python 3.10+, no dependencies, no exploit payloads.", "fork": false, "created_at": "2026-10-23T19:07:13Z", - "updated_at": "2026-10-25T10:28:39Z", - "pushed_at": "2026-10-24T15:59:33Z", + "updated_at": "2026-10-26T01:15:37Z", + "pushed_at": "2026-10-26T01:15:33Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, @@ -875,39 +875,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1431762603, - "name": "cve-2026-111497-brotli-poc", - "full_name": "utkarsssh17\/cve-2026-111497-brotli-poc", - "owner": { - "login": "utkarsssh17", - "id": 32358122, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32358122?v=4", - "html_url": "https:\/\/github.com\/utkarsssh17", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/utkarsssh17\/cve-2026-111497-brotli-poc", - "description": null, - "fork": false, - "created_at": "2026-10-24T03:06:27Z", - "updated_at": "2026-10-24T17:07:15Z", - "pushed_at": "2026-10-24T15:21:25Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1431768975, "name": "CVE-2026-111497-assessment", @@ -1089,8 +1056,8 @@ "description": "Node2Shell \/ HTTP2Shell (CVE-2026-111497) exposure-audit kit — read-only scanner + agent prompt pack. Portable: macOS bash 3.2 + Linux. Mutation-tested regression suite, CI on 3 platforms.", "fork": false, "created_at": "2026-10-24T10:02:46Z", - "updated_at": "2026-10-25T06:37:21Z", - "pushed_at": "2026-10-25T06:37:17Z", + "updated_at": "2026-10-26T00:23:06Z", + "pushed_at": "2026-10-26T00:23:08Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -1246,8 +1213,8 @@ "description": "CVE-2026-111497 Node2Shell — Node.js Brotli OOB Write RCE PoC (CVSS 9.2)", "fork": false, "created_at": "2026-10-24T23:03:18Z", - "updated_at": "2026-10-25T19:14:06Z", - "pushed_at": "2026-10-25T19:14:02Z", + "updated_at": "2026-10-25T20:32:50Z", + "pushed_at": "2026-10-25T20:32:46Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -1357,10 +1324,10 @@ "description": "High fidelity detection mechanism for node2shell (CVE-2026-111497)", "fork": false, "created_at": "2026-10-25T04:23:54Z", - "updated_at": "2026-10-25T19:30:31Z", + "updated_at": "2026-10-26T01:38:37Z", "pushed_at": "2026-10-25T04:24:27Z", - "stargazers_count": 43, - "watchers_count": 43, + "stargazers_count": 51, + "watchers_count": 51, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -1371,7 +1338,7 @@ "topics": [], "visibility": "public", "forks": 6, - "watchers": 43, + "watchers": 51, "score": 0, "subscribers_count": 0 }, @@ -1390,8 +1357,8 @@ "description": "Node2Shell (CVE-2026-111497, Node.js Brotli decoder OOB write) black-box pentest lab — crash-gated double flag, agent-calibrated. Part of the *2Shell lab series. EN\/中文\/日本語.", "fork": false, "created_at": "2026-10-25T09:36:56Z", - "updated_at": "2026-10-25T14:22:07Z", - "pushed_at": "2026-10-25T11:41:54Z", + "updated_at": "2026-10-26T01:15:46Z", + "pushed_at": "2026-10-26T01:15:42Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -1605,8 +1572,8 @@ "description": "PoC for CVE-2026-111497, a buffer overflow in Google Brotli 1.0.3–1.2.0 that may cause memory corruption, data disclosure, DoS, or RCE when processing crafted compressed data.", "fork": false, "created_at": "2026-10-25T18:05:02Z", - "updated_at": "2026-10-25T19:28:56Z", - "pushed_at": "2026-10-25T19:28:52Z", + "updated_at": "2026-10-25T20:00:18Z", + "pushed_at": "2026-10-25T19:56:16Z", "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, @@ -1616,7 +1583,21 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "brotli", + "bun", + "cve-2026-111497", + "exploit", + "exploit-development", + "memory-corruption", + "nodejs", + "out-of-bounds-write", + "poc", + "python-exploit", + "rce", + "security-researchers", + "vulnerability" + ], "visibility": "public", "forks": 0, "watchers": 3, @@ -1666,5 +1647,48 @@ "watchers": 1, "score": 0, "subscribers_count": 0 + }, + { + "id": 1433779392, + "name": "http2shell-check", + "full_name": "CompleTetech-Security\/http2shell-check", + "owner": { + "login": "CompleTetech-Security", + "id": 347271566, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/347271566?v=4", + "html_url": "https:\/\/github.com\/CompleTetech-Security", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/CompleTetech-Security\/http2shell-check", + "description": "Offline Brotli \/ HTTP2Shell (CVE-2026-111497) exposure and inventory checker across verified ecosystems. Python 3.10+, no dependencies or exploit payloads.", + "fork": false, + "created_at": "2026-10-26T01:29:29Z", + "updated_at": "2026-10-26T01:35:46Z", + "pushed_at": "2026-10-26T01:35:43Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "brotli", + "cve-2026-111497", + "html-report", + "http2shell", + "inventory", + "node2shell", + "offline", + "python", + "security-tools" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-112325.json b/2026/CVE-2026-112325.json new file mode 100644 index 0000000000..e91359e1b3 --- /dev/null +++ b/2026/CVE-2026-112325.json @@ -0,0 +1,35 @@ +[ + { + "id": 1433577725, + "name": "CVE-2026-112325", + "full_name": "j0xh-sec\/CVE-2026-112325", + "owner": { + "login": "j0xh-sec", + "id": 214419951, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/214419951?v=4", + "html_url": "https:\/\/github.com\/j0xh-sec", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/j0xh-sec\/CVE-2026-112325", + "description": null, + "fork": false, + "created_at": "2026-10-25T19:57:38Z", + "updated_at": "2026-10-25T20:56:26Z", + "pushed_at": "2026-10-25T20:56:22Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-115560.json b/2026/CVE-2026-115560.json index 8ce8a3a36e..1d08bc61f7 100644 --- a/2026/CVE-2026-115560.json +++ b/2026/CVE-2026-115560.json @@ -190,7 +190,7 @@ "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, - "forks_count": 1, + "forks_count": 2, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -210,7 +210,7 @@ "vulnerability-research" ], "visibility": "public", - "forks": 1, + "forks": 2, "watchers": 1, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-116012.json b/2026/CVE-2026-116012.json index 6f2d991422..6d3308080f 100644 --- a/2026/CVE-2026-116012.json +++ b/2026/CVE-2026-116012.json @@ -14,10 +14,10 @@ "description": "NSA Ghidra contains a numeric truncation vulnerability in PackedDecode::skipAttribute and skipAttributeRemaining in marshal.cc.", "fork": false, "created_at": "2026-10-24T19:13:32Z", - "updated_at": "2026-10-25T00:42:51Z", + "updated_at": "2026-10-25T19:49:55Z", "pushed_at": "2026-10-24T19:13:49Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-116105.json b/2026/CVE-2026-116105.json new file mode 100644 index 0000000000..ffebf18df2 --- /dev/null +++ b/2026/CVE-2026-116105.json @@ -0,0 +1,35 @@ +[ + { + "id": 1433662128, + "name": "CVE-2026-116105", + "full_name": "ohackercego\/CVE-2026-116105", + "owner": { + "login": "ohackercego", + "id": 342562901, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/342562901?v=4", + "html_url": "https:\/\/github.com\/ohackercego", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/ohackercego\/CVE-2026-116105", + "description": "CVE-2026-116105 - HeyCyan App 1.0.103 (Android) transmissao em texto claro \/ cleartext transmission (CWE-319) - VulDB VDB-426173", + "fork": false, + "created_at": "2026-10-25T22:03:04Z", + "updated_at": "2026-10-25T22:03:13Z", + "pushed_at": "2026-10-25T22:03:10Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-116106.json b/2026/CVE-2026-116106.json new file mode 100644 index 0000000000..227fa41390 --- /dev/null +++ b/2026/CVE-2026-116106.json @@ -0,0 +1,35 @@ +[ + { + "id": 1433662229, + "name": "CVE-2026-116106", + "full_name": "ohackercego\/CVE-2026-116106", + "owner": { + "login": "ohackercego", + "id": 342562901, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/342562901?v=4", + "html_url": "https:\/\/github.com\/ohackercego", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/ohackercego\/CVE-2026-116106", + "description": "CVE-2026-116106 - HeyCyan App 1.0.103 (Android) controle de acesso incorreto no FileProvider (CWE-284) - VulDB VDB-426174", + "fork": false, + "created_at": "2026-10-25T22:03:15Z", + "updated_at": "2026-10-25T22:03:24Z", + "pushed_at": "2026-10-25T22:03:21Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-116191.json b/2026/CVE-2026-116191.json new file mode 100644 index 0000000000..0ec063750a --- /dev/null +++ b/2026/CVE-2026-116191.json @@ -0,0 +1,35 @@ +[ + { + "id": 1433674490, + "name": "CVE-2026-116191-poc", + "full_name": "asvorg\/CVE-2026-116191-poc", + "owner": { + "login": "asvorg", + "id": 22218356, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/22218356?v=4", + "html_url": "https:\/\/github.com\/asvorg", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/asvorg\/CVE-2026-116191-poc", + "description": null, + "fork": false, + "created_at": "2026-10-25T22:23:38Z", + "updated_at": "2026-10-25T22:31:01Z", + "pushed_at": "2026-10-25T22:30:57Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-1208.json b/2026/CVE-2026-1208.json index 7fabad8391..88c51d6835 100644 --- a/2026/CVE-2026-1208.json +++ b/2026/CVE-2026-1208.json @@ -14,10 +14,10 @@ "description": "Friendly Functions for Welcart <= 1.2.5 - Cross-Site Request Forgery to Settings Update", "fork": false, "created_at": "2026-01-23T20:51:35Z", - "updated_at": "2026-05-08T16:05:51Z", + "updated_at": "2026-10-26T00:44:06Z", "pushed_at": "2026-05-08T16:05:46Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-17106.json b/2026/CVE-2026-17106.json index 06c4e62e01..bd03333fcc 100644 --- a/2026/CVE-2026-17106.json +++ b/2026/CVE-2026-17106.json @@ -127,8 +127,8 @@ "description": "Standalone defensive checker project for CVE-2026-17106: Docker copy destination escape. One exploit per repository; implementation pending.", "fork": false, "created_at": "2026-10-23T23:49:09Z", - "updated_at": "2026-10-24T16:29:09Z", - "pushed_at": "2026-10-24T16:29:06Z", + "updated_at": "2026-10-26T00:35:09Z", + "pushed_at": "2026-10-26T00:35:04Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-18107.json b/2026/CVE-2026-18107.json new file mode 100644 index 0000000000..3154c6b0aa --- /dev/null +++ b/2026/CVE-2026-18107.json @@ -0,0 +1,35 @@ +[ + { + "id": 1391440232, + "name": "criu-exploit", + "full_name": "robalb\/criu-exploit", + "owner": { + "login": "robalb", + "id": 11277482, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/11277482?v=4", + "html_url": "https:\/\/github.com\/robalb", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/robalb\/criu-exploit", + "description": "Universal container escape exploit targeting the CRIU container checkpoint\/restore system - CVE-2026-18107", + "fork": false, + "created_at": "2026-09-27T21:57:13Z", + "updated_at": "2026-10-26T00:24:05Z", + "pushed_at": "2026-10-26T00:13:10Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-19489.json b/2026/CVE-2026-19489.json index ac1ed59d90..b664dd9f4f 100644 --- a/2026/CVE-2026-19489.json +++ b/2026/CVE-2026-19489.json @@ -14,8 +14,8 @@ "description": "Standalone defensive checker project for CVE-2026-19489: Citrix NetScaler ADC \/ Gateway: LSN SIP ALG memory corruption. One exploit per repository; implementation pending.", "fork": false, "created_at": "2026-10-23T23:40:59Z", - "updated_at": "2026-10-24T16:24:42Z", - "pushed_at": "2026-10-24T16:24:39Z", + "updated_at": "2026-10-26T00:23:04Z", + "pushed_at": "2026-10-26T01:45:00Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-19490.json b/2026/CVE-2026-19490.json index a4ffbdb20b..65ab868b88 100644 --- a/2026/CVE-2026-19490.json +++ b/2026/CVE-2026-19490.json @@ -80,8 +80,8 @@ "description": "Standalone defensive checker project for CVE-2026-19490: Citrix NetScaler ADC \/ Gateway: Gateway \/ AAA alternate-path authentication bypass. One exploit per repository; implementation pending.", "fork": false, "created_at": "2026-10-23T23:41:11Z", - "updated_at": "2026-10-24T16:24:20Z", - "pushed_at": "2026-10-24T16:24:17Z", + "updated_at": "2026-10-26T00:29:48Z", + "pushed_at": "2026-10-26T01:46:50Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-21589.json b/2026/CVE-2026-21589.json index 76fdf3553c..8691b4ce82 100644 --- a/2026/CVE-2026-21589.json +++ b/2026/CVE-2026-21589.json @@ -440,8 +440,8 @@ "description": "Standalone defensive checker project for CVE-2026-21589: Atlassian self-managed products: Data Center arbitrary file access. One exploit per repository; implementation pending.", "fork": false, "created_at": "2026-10-23T23:43:14Z", - "updated_at": "2026-10-24T16:28:56Z", - "pushed_at": "2026-10-24T16:28:53Z", + "updated_at": "2026-10-26T00:34:21Z", + "pushed_at": "2026-10-26T00:34:17Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-28912.json b/2026/CVE-2026-28912.json index a24fd1ad4f..a95507465f 100644 --- a/2026/CVE-2026-28912.json +++ b/2026/CVE-2026-28912.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2026-09-28T11:58:35Z", - "updated_at": "2026-10-20T16:49:48Z", + "updated_at": "2026-10-25T23:06:03Z", "pushed_at": "2026-09-28T12:07:10Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-31899.json b/2026/CVE-2026-31899.json index f5b8a45161..f25e9e3274 100644 --- a/2026/CVE-2026-31899.json +++ b/2026/CVE-2026-31899.json @@ -14,10 +14,10 @@ "description": "CVE-2026-31899: Exponential DoS via Recursive Element Amplification in CairoSVG (CVSS 7.5 High)", "fork": false, "created_at": "2026-03-15T08:25:43Z", - "updated_at": "2026-05-08T16:05:52Z", + "updated_at": "2026-10-26T00:44:07Z", "pushed_at": "2026-05-08T16:05:47Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-32794.json b/2026/CVE-2026-32794.json index d669ce6208..fd9e7e8d4b 100644 --- a/2026/CVE-2026-32794.json +++ b/2026/CVE-2026-32794.json @@ -14,10 +14,10 @@ "description": "CVE-2026-32794: TLS Certificate Verification Bypass in Apache Airflow Databricks Provider", "fork": false, "created_at": "2026-03-24T01:58:19Z", - "updated_at": "2026-05-08T16:05:53Z", + "updated_at": "2026-10-26T00:44:09Z", "pushed_at": "2026-05-08T16:05:48Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -39,7 +39,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-3288.json b/2026/CVE-2026-3288.json index 6061e3517e..ed33dba921 100644 --- a/2026/CVE-2026-3288.json +++ b/2026/CVE-2026-3288.json @@ -14,10 +14,10 @@ "description": "Walkthrough: ingress-nginx Configuration Injection via rewrite-target Annotation", "fork": false, "created_at": "2026-03-10T07:11:00Z", - "updated_at": "2026-05-08T16:05:53Z", + "updated_at": "2026-10-26T00:44:09Z", "pushed_at": "2026-05-08T16:05:49Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -33,7 +33,7 @@ ], "visibility": "public", "forks": 1, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-33693.json b/2026/CVE-2026-33693.json index c468dc554a..c85b870f73 100644 --- a/2026/CVE-2026-33693.json +++ b/2026/CVE-2026-33693.json @@ -14,10 +14,10 @@ "description": "CVE-2026-33693: SSRF via 0.0.0.0 Bypass in activitypub-federation-rust v4_is_invalid() (CVSS 6.5 Moderate)", "fork": false, "created_at": "2026-03-23T23:00:03Z", - "updated_at": "2026-10-01T03:16:45Z", + "updated_at": "2026-10-26T00:44:10Z", "pushed_at": "2026-05-08T16:05:50Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -36,7 +36,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-43284.json b/2026/CVE-2026-43284.json index b67d1054f6..4977706ab9 100644 --- a/2026/CVE-2026-43284.json +++ b/2026/CVE-2026-43284.json @@ -1491,10 +1491,10 @@ "description": "Fork of datfooldive\/DFRoot (DirtyFrag CVE-2026-43284, ReSukiSU) + GitHub Actions APK build", "fork": false, "created_at": "2026-10-25T00:58:27Z", - "updated_at": "2026-10-25T01:04:16Z", + "updated_at": "2026-10-25T20:26:31Z", "pushed_at": "2026-10-25T01:04:13Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -1505,7 +1505,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-43499.json b/2026/CVE-2026-43499.json index fab3c660e9..765a7ac85a 100644 --- a/2026/CVE-2026-43499.json +++ b/2026/CVE-2026-43499.json @@ -183,10 +183,10 @@ "description": "OPPO Find N2 GhostLock (CVE-2026-43499) exploit adaptation", "fork": false, "created_at": "2026-07-09T22:46:15Z", - "updated_at": "2026-10-10T15:45:31Z", + "updated_at": "2026-10-25T21:47:45Z", "pushed_at": "2026-10-10T15:45:27Z", - "stargazers_count": 66, - "watchers_count": 66, + "stargazers_count": 67, + "watchers_count": 67, "has_discussions": false, "forks_count": 27, "allow_forking": true, @@ -210,7 +210,7 @@ ], "visibility": "public", "forks": 27, - "watchers": 66, + "watchers": 67, "score": 0, "subscribers_count": 1 }, @@ -467,10 +467,10 @@ "description": "Android version CVE-2026-43499 tester", "fork": false, "created_at": "2026-07-13T13:31:55Z", - "updated_at": "2026-10-24T08:24:25Z", + "updated_at": "2026-10-25T23:02:23Z", "pushed_at": "2026-07-20T07:22:42Z", - "stargazers_count": 89, - "watchers_count": 89, + "stargazers_count": 90, + "watchers_count": 90, "has_discussions": false, "forks_count": 18, "allow_forking": true, @@ -481,7 +481,7 @@ "topics": [], "visibility": "public", "forks": 18, - "watchers": 89, + "watchers": 90, "score": 0, "subscribers_count": 0 }, @@ -533,10 +533,10 @@ "description": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.", "fork": false, "created_at": "2026-07-14T14:21:27Z", - "updated_at": "2026-10-19T07:46:42Z", + "updated_at": "2026-10-25T23:58:14Z", "pushed_at": "2026-07-30T11:28:07Z", - "stargazers_count": 114, - "watchers_count": 114, + "stargazers_count": 113, + "watchers_count": 113, "has_discussions": false, "forks_count": 34, "allow_forking": true, @@ -547,7 +547,7 @@ "topics": [], "visibility": "public", "forks": 34, - "watchers": 114, + "watchers": 113, "score": 0, "subscribers_count": 0 }, @@ -1028,10 +1028,10 @@ "description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499", "fork": false, "created_at": "2026-07-17T14:24:08Z", - "updated_at": "2026-10-25T17:20:15Z", + "updated_at": "2026-10-25T23:06:08Z", "pushed_at": "2026-09-03T03:21:42Z", - "stargazers_count": 1483, - "watchers_count": 1483, + "stargazers_count": 1484, + "watchers_count": 1484, "has_discussions": false, "forks_count": 296, "allow_forking": true, @@ -1042,7 +1042,7 @@ "topics": [], "visibility": "public", "forks": 296, - "watchers": 1483, + "watchers": 1484, "score": 0, "subscribers_count": 44 }, @@ -1709,12 +1709,12 @@ "description": "GhostLock One-Tap Execution App (CVE-2026-43499)", "fork": false, "created_at": "2026-07-29T05:04:25Z", - "updated_at": "2026-10-25T18:20:22Z", + "updated_at": "2026-10-26T00:33:48Z", "pushed_at": "2026-10-25T18:09:37Z", - "stargazers_count": 2284, - "watchers_count": 2284, + "stargazers_count": 2287, + "watchers_count": 2287, "has_discussions": true, - "forks_count": 557, + "forks_count": 559, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1722,8 +1722,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 557, - "watchers": 2284, + "forks": 559, + "watchers": 2287, "score": 0, "subscribers_count": 37 }, @@ -2077,10 +2077,10 @@ "description": "Jailbreak supported Google Pixel phones with CVE-2026-43499", "fork": false, "created_at": "2026-08-02T17:34:45Z", - "updated_at": "2026-10-25T13:15:17Z", + "updated_at": "2026-10-25T21:26:50Z", "pushed_at": "2026-09-13T16:31:27Z", - "stargazers_count": 465, - "watchers_count": 465, + "stargazers_count": 466, + "watchers_count": 466, "has_discussions": false, "forks_count": 72, "allow_forking": true, @@ -2098,7 +2098,7 @@ ], "visibility": "public", "forks": 72, - "watchers": 465, + "watchers": 466, "score": 0, "subscribers_count": 7 }, @@ -3001,10 +3001,10 @@ "description": "Kernel root exploit (CVE-2026-43499) for some Amazon devices", "fork": false, "created_at": "2026-08-17T16:57:57Z", - "updated_at": "2026-10-25T18:46:24Z", + "updated_at": "2026-10-25T21:23:23Z", "pushed_at": "2026-10-24T13:35:00Z", - "stargazers_count": 46, - "watchers_count": 46, + "stargazers_count": 47, + "watchers_count": 47, "has_discussions": false, "forks_count": 12, "allow_forking": true, @@ -3015,7 +3015,7 @@ "topics": [], "visibility": "public", "forks": 12, - "watchers": 46, + "watchers": 47, "score": 0, "subscribers_count": 2 }, @@ -3430,10 +3430,10 @@ "description": "One-click root for vivo\/iQOO devices on locked bootloader | CVE-2026-43499 + KernelSU", "fork": false, "created_at": "2026-08-25T07:52:11Z", - "updated_at": "2026-10-25T13:04:10Z", + "updated_at": "2026-10-25T23:48:51Z", "pushed_at": "2026-10-23T06:52:34Z", - "stargazers_count": 77, - "watchers_count": 77, + "stargazers_count": 78, + "watchers_count": 78, "has_discussions": false, "forks_count": 11, "allow_forking": true, @@ -3444,7 +3444,7 @@ "topics": [], "visibility": "public", "forks": 11, - "watchers": 77, + "watchers": 78, "score": 0, "subscribers_count": 0 }, @@ -5419,39 +5419,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1420541525, - "name": "ghostlock-brt-w09", - "full_name": "y896406256-lang\/ghostlock-brt-w09", - "owner": { - "login": "y896406256-lang", - "id": 311516684, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/311516684?v=4", - "html_url": "https:\/\/github.com\/y896406256-lang", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/y896406256-lang\/ghostlock-brt-w09", - "description": "⚠️ NOT SUCCESSFUL - GhostLock (CVE-2026-43499) adaptation attempt for Honor Pad V8 (BRT-W09 \/ MediaTek MT8797 \/ kernel 4.14.186+). Verified offsets + why KernelSnitch fails on 4.14.", - "fork": false, - "created_at": "2026-10-15T10:30:22Z", - "updated_at": "2026-10-15T10:47:47Z", - "pushed_at": "2026-10-15T10:47:43Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1421778182, "name": "magicpad3-root-research", @@ -5887,5 +5854,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1433572669, + "name": "Root-My-Galaxy-Payloads-SM-S928B", + "full_name": "theboringhumane\/Root-My-Galaxy-Payloads-SM-S928B", + "owner": { + "login": "theboringhumane", + "id": 46974223, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/46974223?v=4", + "html_url": "https:\/\/github.com\/theboringhumane", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/theboringhumane\/Root-My-Galaxy-Payloads-SM-S928B", + "description": "SM-S928B \/ S928BXXU6EZIF port of the CVE-2026-43499 app payload - work in progress, not yet rooted", + "fork": false, + "created_at": "2026-10-25T19:51:02Z", + "updated_at": "2026-10-25T21:10:10Z", + "pushed_at": "2026-10-25T21:10:06Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-47644.json b/2026/CVE-2026-47644.json index 12ba5a75bf..565d02b909 100644 --- a/2026/CVE-2026-47644.json +++ b/2026/CVE-2026-47644.json @@ -14,10 +14,10 @@ "description": "CVE-2026-47644 ($12,000): Edge Copilot Prompt Injection Leads to Cross-Tab Data Exfiltration - PoC & full writeup", "fork": false, "created_at": "2026-10-15T05:22:05Z", - "updated_at": "2026-10-24T15:52:03Z", + "updated_at": "2026-10-26T00:02:46Z", "pushed_at": "2026-10-15T07:30:24Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -36,7 +36,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-49881.json b/2026/CVE-2026-49881.json index ad6e328e71..374d54db88 100644 --- a/2026/CVE-2026-49881.json +++ b/2026/CVE-2026-49881.json @@ -14,10 +14,10 @@ "description": "Android complete exploit chain that enables privilege escalation from a local untrusted app to root\/kernel, combination of CVE-2026-49881 and CVE-2026-43284", "fork": false, "created_at": "2026-07-23T07:01:34Z", - "updated_at": "2026-10-25T03:09:31Z", + "updated_at": "2026-10-25T21:05:43Z", "pushed_at": "2026-09-09T00:47:49Z", - "stargazers_count": 476, - "watchers_count": 476, + "stargazers_count": 477, + "watchers_count": 477, "has_discussions": false, "forks_count": 107, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 107, - "watchers": 476, + "watchers": 477, "score": 0, "subscribers_count": 7 }, diff --git a/2026/CVE-2026-54121.json b/2026/CVE-2026-54121.json index da499f410a..a03ef2dbde 100644 --- a/2026/CVE-2026-54121.json +++ b/2026/CVE-2026-54121.json @@ -424,10 +424,10 @@ "description": "🛡 Official AI Security Tool module for CVE-2026-54121 (Certighost): AD CS certificate abuse deep-dive, defensive audit workflows, and safe in-app console execution for authorized Active Directory security testing.", "fork": false, "created_at": "2026-09-11T23:08:16Z", - "updated_at": "2026-10-25T19:30:21Z", + "updated_at": "2026-10-26T00:10:39Z", "pushed_at": "2026-10-19T11:05:57Z", - "stargazers_count": 236, - "watchers_count": 236, + "stargazers_count": 247, + "watchers_count": 247, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -444,7 +444,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 236, + "watchers": 247, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-64560.json b/2026/CVE-2026-64560.json index 6546af65af..cc76de8d4f 100644 --- a/2026/CVE-2026-64560.json +++ b/2026/CVE-2026-64560.json @@ -357,10 +357,10 @@ "description": "一加 15T（PLZ110）临时 root + KernelSU per-boot 接管：CVE-2026-64560 移植，不写分区、重启即失效。内核 6.12.69-android16-6-g242e1a07f878。", "fork": false, "created_at": "2026-10-15T14:19:23Z", - "updated_at": "2026-10-25T17:06:53Z", + "updated_at": "2026-10-26T01:38:44Z", "pushed_at": "2026-10-15T14:25:19Z", - "stargazers_count": 31, - "watchers_count": 31, + "stargazers_count": 32, + "watchers_count": 32, "has_discussions": false, "forks_count": 11, "allow_forking": true, @@ -380,7 +380,7 @@ ], "visibility": "public", "forks": 11, - "watchers": 31, + "watchers": 32, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-64638.json b/2026/CVE-2026-64638.json index 233c2bfbf6..3f4e65a49a 100644 --- a/2026/CVE-2026-64638.json +++ b/2026/CVE-2026-64638.json @@ -47,10 +47,10 @@ "description": "XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template", "fork": false, "created_at": "2026-08-07T17:07:17Z", - "updated_at": "2026-10-25T13:26:20Z", + "updated_at": "2026-10-26T00:29:12Z", "pushed_at": "2026-08-21T13:31:58Z", - "stargazers_count": 118, - "watchers_count": 118, + "stargazers_count": 119, + "watchers_count": 119, "has_discussions": false, "forks_count": 31, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 31, - "watchers": 118, + "watchers": 119, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-66418.json b/2026/CVE-2026-66418.json index 1bb1418eb0..b46d620875 100644 --- a/2026/CVE-2026-66418.json +++ b/2026/CVE-2026-66418.json @@ -14,10 +14,10 @@ "description": "Security Advisory: Unauthenticated Stored Cross-Site Scripting Leading To Administrator Account Takeover (openclaw-dashboard)", "fork": false, "created_at": "2026-07-30T05:10:39Z", - "updated_at": "2026-09-07T08:45:02Z", + "updated_at": "2026-10-26T00:34:22Z", "pushed_at": "2026-08-02T22:14:53Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-69254.json b/2026/CVE-2026-69254.json index 5ba8013b7e..a446ee5202 100644 --- a/2026/CVE-2026-69254.json +++ b/2026/CVE-2026-69254.json @@ -14,8 +14,8 @@ "description": "Standalone defensive checker project for Flowise CVE-2026-69254 (nodeVMOptions sandbox override). One exploit per repository; implementation pending.", "fork": false, "created_at": "2026-10-23T23:36:46Z", - "updated_at": "2026-10-24T16:29:23Z", - "pushed_at": "2026-10-24T16:29:20Z", + "updated_at": "2026-10-26T00:34:27Z", + "pushed_at": "2026-10-26T01:27:18Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-71362.json b/2026/CVE-2026-71362.json index f0bb9f322a..0ef13936f6 100644 --- a/2026/CVE-2026-71362.json +++ b/2026/CVE-2026-71362.json @@ -47,10 +47,10 @@ "description": "CVE-2026-71362 — Magento Session Identity Poisoning → Mass Account Takeover (CVSS 9.1, CISA KEV)", "fork": false, "created_at": "2026-10-23T03:11:27Z", - "updated_at": "2026-10-24T23:25:05Z", + "updated_at": "2026-10-25T23:36:49Z", "pushed_at": "2026-10-23T03:11:34Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-87902.json b/2026/CVE-2026-87902.json index 6ef6679a4b..ecc4ec9ecb 100644 --- a/2026/CVE-2026-87902.json +++ b/2026/CVE-2026-87902.json @@ -19,7 +19,7 @@ "stargazers_count": 35, "watchers_count": 35, "has_discussions": false, - "forks_count": 9, + "forks_count": 10, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 9, + "forks": 10, "watchers": 35, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-88771.json b/2026/CVE-2026-88771.json index 94569a9f78..94944ff39a 100644 --- a/2026/CVE-2026-88771.json +++ b/2026/CVE-2026-88771.json @@ -407,7 +407,7 @@ "fork": false, "created_at": "2026-10-23T20:02:16Z", "updated_at": "2026-10-24T16:31:26Z", - "pushed_at": "2026-10-24T16:31:22Z", + "pushed_at": "2026-10-26T01:23:08Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-88772.json b/2026/CVE-2026-88772.json index daa1e582b2..da27214c32 100644 --- a/2026/CVE-2026-88772.json +++ b/2026/CVE-2026-88772.json @@ -114,7 +114,7 @@ "fork": false, "created_at": "2026-10-23T20:03:33Z", "updated_at": "2026-10-24T16:31:32Z", - "pushed_at": "2026-10-24T16:31:28Z", + "pushed_at": "2026-10-26T01:25:13Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-88773.json b/2026/CVE-2026-88773.json index d6a3b8412b..98d2b27e42 100644 --- a/2026/CVE-2026-88773.json +++ b/2026/CVE-2026-88773.json @@ -47,8 +47,8 @@ "description": "Standalone defensive checker project for CVE-2026-88773: Citrix NetScaler ADC \/ Gateway: HTTP request smuggling. One exploit per repository; implementation pending.", "fork": false, "created_at": "2026-10-23T23:38:37Z", - "updated_at": "2026-10-24T16:24:49Z", - "pushed_at": "2026-10-24T16:24:46Z", + "updated_at": "2026-10-26T00:23:00Z", + "pushed_at": "2026-10-26T01:34:32Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-88774.json b/2026/CVE-2026-88774.json index 5a14f728dd..999720a6fb 100644 --- a/2026/CVE-2026-88774.json +++ b/2026/CVE-2026-88774.json @@ -14,8 +14,8 @@ "description": "Standalone defensive checker project for CVE-2026-88774: Citrix NetScaler ADC \/ Gateway: URL-expression policy bypass. One exploit per repository; implementation pending.", "fork": false, "created_at": "2026-10-23T23:39:04Z", - "updated_at": "2026-10-24T16:24:56Z", - "pushed_at": "2026-10-24T16:24:53Z", + "updated_at": "2026-10-26T00:22:57Z", + "pushed_at": "2026-10-26T01:33:59Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-88775.json b/2026/CVE-2026-88775.json index 530de3fc12..8857449f50 100644 --- a/2026/CVE-2026-88775.json +++ b/2026/CVE-2026-88775.json @@ -14,8 +14,8 @@ "description": "Standalone defensive checker project for CVE-2026-88775: Citrix NetScaler ADC \/ Gateway: Gateway \/ AAA memory corruption. One exploit per repository; implementation pending.", "fork": false, "created_at": "2026-10-23T23:39:44Z", - "updated_at": "2026-10-24T16:25:04Z", - "pushed_at": "2026-10-24T16:25:00Z", + "updated_at": "2026-10-26T00:22:53Z", + "pushed_at": "2026-10-26T01:38:34Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-88776.json b/2026/CVE-2026-88776.json index 8117669fdb..20988bde21 100644 --- a/2026/CVE-2026-88776.json +++ b/2026/CVE-2026-88776.json @@ -47,8 +47,8 @@ "description": "Standalone defensive checker project for CVE-2026-88776: Citrix NetScaler ADC \/ Gateway: Oracle load-balancer memory corruption. One exploit per repository; implementation pending.", "fork": false, "created_at": "2026-10-23T23:39:55Z", - "updated_at": "2026-10-24T16:25:11Z", - "pushed_at": "2026-10-24T16:25:08Z", + "updated_at": "2026-10-26T00:22:48Z", + "pushed_at": "2026-10-26T01:39:41Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-88777.json b/2026/CVE-2026-88777.json index 607ba679d0..2b4ecc027e 100644 --- a/2026/CVE-2026-88777.json +++ b/2026/CVE-2026-88777.json @@ -14,8 +14,8 @@ "description": "Standalone defensive checker project for CVE-2026-88777: Citrix NetScaler ADC \/ Gateway: Non-HTTP L7 memory corruption. One exploit per repository; implementation pending.", "fork": false, "created_at": "2026-10-23T23:40:10Z", - "updated_at": "2026-10-24T16:25:18Z", - "pushed_at": "2026-10-24T16:25:15Z", + "updated_at": "2026-10-26T00:22:45Z", + "pushed_at": "2026-10-26T01:42:34Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-88778.json b/2026/CVE-2026-88778.json index 3313f745d6..30af15f297 100644 --- a/2026/CVE-2026-88778.json +++ b/2026/CVE-2026-88778.json @@ -14,8 +14,8 @@ "description": "Standalone defensive checker project for CVE-2026-88778: Citrix NetScaler ADC \/ Gateway: Predictable TCP initial sequence numbers. One exploit per repository; implementation pending.", "fork": false, "created_at": "2026-10-23T23:40:47Z", - "updated_at": "2026-10-24T16:25:25Z", - "pushed_at": "2026-10-24T16:25:22Z", + "updated_at": "2026-10-26T00:22:40Z", + "pushed_at": "2026-10-26T01:44:05Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-92935.json b/2026/CVE-2026-92935.json index 161ebf8b6a..dd5cde440e 100644 --- a/2026/CVE-2026-92935.json +++ b/2026/CVE-2026-92935.json @@ -14,8 +14,8 @@ "description": "Standalone defensive checker project for vm2 CVE-2026-92935. One exploit per repository; implementation pending.", "fork": false, "created_at": "2026-10-23T23:37:45Z", - "updated_at": "2026-10-24T16:30:56Z", - "pushed_at": "2026-10-24T16:30:51Z", + "updated_at": "2026-10-25T23:27:48Z", + "pushed_at": "2026-10-26T01:33:59Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-96889.json b/2026/CVE-2026-96889.json index dc5548edd8..5fbffbdb00 100644 --- a/2026/CVE-2026-96889.json +++ b/2026/CVE-2026-96889.json @@ -161,8 +161,8 @@ "description": "Standalone defensive checker project for Sharp\/librsvg CVE-2026-96889. One exploit per repository; evidence-based assessment without exploit payloads.", "fork": false, "created_at": "2026-10-23T23:35:28Z", - "updated_at": "2026-10-24T16:31:20Z", - "pushed_at": "2026-10-24T16:31:15Z", + "updated_at": "2026-10-26T00:24:01Z", + "pushed_at": "2026-10-26T01:23:57Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false,