nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/10/17 19:43:49

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-10-18 04:43:49 +09:00
1 parent 97f5866fa6
commit 8166d9df08
60 files changed
+555 -281
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2002/CVE-2002-0082.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Secured root-level access by identifying and exploiting misconfigurations and outdated software. Buffer overflow vulnerability in an outdated version of mod_ssl (CVE-2002-0082). Privilege escalation was subsequently achieved by exploiting a race condition in the Linux kernel's \"ptrace\" utility (CVE-2003-0127),",
"fork": false,
"created_at": "2026-04-15T17:41:33Z",
"updated_at": "2026-04-15T18:36:39Z",
"updated_at": "2026-10-17T16:23:31Z",
"pushed_at": "2026-04-15T18:36:36Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
2003/CVE-2003-0127.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Secured root-level access by identifying and exploiting misconfigurations and outdated software. Buffer overflow vulnerability in an outdated version of mod_ssl (CVE-2002-0082). Privilege escalation was subsequently achieved by exploiting a race condition in the Linux kernel's \"ptrace\" utility (CVE-2003-0127),",
"fork": false,
"created_at": "2026-04-15T17:41:33Z",
"updated_at": "2026-04-15T18:36:39Z",
"updated_at": "2026-10-17T16:23:31Z",
"pushed_at": "2026-04-15T18:36:36Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2018/CVE-2018-14847.json
+6 -6
View File
@@ -283,12 +283,12 @@
"description": "This is a proof of concept of the critical WinBox vulnerability (CVE-2018-14847) which allows for arbitrary file read of plain text passwords. The vulnerability has long since been fixed, so this project has ended and will not be supported or updated anymore. You can fork it and update it yourself instead.",
"fork": false,
"created_at": "2021-04-21T16:42:31Z",
"updated_at": "2026-06-30T14:15:17Z",
"updated_at": "2026-10-17T16:42:09Z",
"pushed_at": "2021-04-21T16:46:37Z",
"stargazers_count": 55,
"watchers_count": 55,
"stargazers_count": 56,
"watchers_count": 56,
"has_discussions": false,
"forks_count": 23,
"forks_count": 24,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -296,8 +296,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 23,
"watchers": 55,
"forks": 24,
"watchers": 56,
"score": 0,
"subscribers_count": 3
},
2019/CVE-2019-10149.json
+4 -4
View File
@@ -351,10 +351,10 @@
"description": "Data Collection Related to Exim CVE-2019-10149",
"fork": false,
"created_at": "2020-06-03T02:27:01Z",
"updated_at": "2026-07-21T10:36:25Z",
"updated_at": "2026-10-17T14:12:40Z",
"pushed_at": "2026-04-23T22:40:55Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -365,7 +365,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 3,
"watchers": 2,
"score": 0,
"subscribers_count": 10
},
2019/CVE-2019-2215.json
+4 -4
View File
@@ -728,10 +728,10 @@
"description": "CVE-2019-2215 poc for Huawei hardened kernel",
"fork": false,
"created_at": "2025-02-04T08:58:20Z",
"updated_at": "2026-10-13T18:25:32Z",
"updated_at": "2026-10-17T18:17:57Z",
"pushed_at": "2025-02-04T09:16:25Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -742,7 +742,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 7,
"watchers": 8,
"score": 0,
"subscribers_count": 1
},
2021/CVE-2021-3129.json
+4 -4
View File
@@ -381,10 +381,10 @@
"description": "Laravel RCE Exploit PoC - CVE-2021-3129 (user-friendly with automatic log path detection)",
"fork": false,
"created_at": "2022-04-16T17:22:55Z",
"updated_at": "2026-10-08T15:56:33Z",
"updated_at": "2026-10-17T17:06:34Z",
"pushed_at": "2026-05-21T06:40:47Z",
"stargazers_count": 158,
"watchers_count": 158,
"stargazers_count": 157,
"watchers_count": 157,
"has_discussions": false,
"forks_count": 27,
"allow_forking": true,
@@ -409,7 +409,7 @@
],
"visibility": "public",
"forks": 27,
"watchers": 158,
"watchers": 157,
"score": 0,
"subscribers_count": 1
},
2021/CVE-2021-3156.json
+8 -8
View File
@@ -450,10 +450,10 @@
"description": "PoC for CVE-2021-3156 (sudo heap overflow)",
"fork": false,
"created_at": "2021-01-30T03:22:04Z",
"updated_at": "2026-10-13T19:01:31Z",
"updated_at": "2026-10-17T14:21:37Z",
"pushed_at": "2022-04-14T11:51:18Z",
"stargazers_count": 429,
"watchers_count": 429,
"stargazers_count": 430,
"watchers_count": 430,
"has_discussions": false,
"forks_count": 106,
"allow_forking": true,
@@ -464,7 +464,7 @@
"topics": [],
"visibility": "public",
"forks": 106,
"watchers": 429,
"watchers": 430,
"score": 0,
"subscribers_count": 7
},
@@ -516,10 +516,10 @@
"description": null,
"fork": false,
"created_at": "2021-01-30T20:39:58Z",
"updated_at": "2026-10-14T12:36:55Z",
"updated_at": "2026-10-17T14:59:58Z",
"pushed_at": "2021-02-02T17:07:09Z",
"stargazers_count": 1026,
"watchers_count": 1026,
"stargazers_count": 1027,
"watchers_count": 1027,
"has_discussions": false,
"forks_count": 232,
"allow_forking": true,
@@ -530,7 +530,7 @@
"topics": [],
"visibility": "public",
"forks": 232,
"watchers": 1026,
"watchers": 1027,
"score": 0,
"subscribers_count": 25
},
2021/CVE-2021-36260.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.",
"fork": false,
"created_at": "2021-10-27T15:51:12Z",
"updated_at": "2026-10-09T17:31:02Z",
"updated_at": "2026-10-17T16:08:06Z",
"pushed_at": "2021-10-28T06:37:37Z",
"stargazers_count": 305,
"watchers_count": 305,
"stargazers_count": 306,
"watchers_count": 306,
"has_discussions": false,
"forks_count": 80,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 80,
"watchers": 305,
"watchers": 306,
"score": 0,
"subscribers_count": 5
},
2021/CVE-2021-41773.json
+4 -4
View File
@@ -3486,10 +3486,10 @@
"description": "Apache HTTP-Server 2.4.49-2.4.50 Path Traversal & Remote Code Execution PoC (CVE-2021-41773 & CVE-2021-42013)",
"fork": false,
"created_at": "2022-11-22T14:09:18Z",
"updated_at": "2026-08-12T03:22:28Z",
"updated_at": "2026-10-17T17:06:34Z",
"pushed_at": "2025-08-22T10:05:43Z",
"stargazers_count": 14,
"watchers_count": 14,
"stargazers_count": 13,
"watchers_count": 13,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -3500,7 +3500,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 14,
"watchers": 13,
"score": 0,
"subscribers_count": 2
},
2022/CVE-2022-36446.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "A Python script to exploit CVE-2022-36446 Software Package Updates RCE (Authenticated) on Webmin < 1.997.",
"fork": false,
"created_at": "2022-08-11T11:47:17Z",
"updated_at": "2026-07-30T21:23:01Z",
"updated_at": "2026-10-17T13:27:06Z",
"pushed_at": "2025-01-31T09:36:30Z",
"stargazers_count": 115,
"watchers_count": 115,
"stargazers_count": 116,
"watchers_count": 116,
"has_discussions": false,
"forks_count": 30,
"allow_forking": true,
@@ -36,7 +36,7 @@
],
"visibility": "public",
"forks": 30,
"watchers": 115,
"watchers": 116,
"score": 0,
"subscribers_count": 1
},
2022/CVE-2022-46689.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": "Proof-of-concept app to overwrite fonts on iOS using CVE-2022-46689.",
"fork": false,
"created_at": "2022-12-26T06:56:35Z",
"updated_at": "2026-10-16T14:28:01Z",
"updated_at": "2026-10-17T13:19:35Z",
"pushed_at": "2023-08-02T09:35:14Z",
"stargazers_count": 888,
"watchers_count": 888,
"stargazers_count": 887,
"watchers_count": 887,
"has_discussions": false,
"forks_count": 79,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 79,
"watchers": 888,
"watchers": 887,
"score": 0,
"subscribers_count": 23
},
2023/CVE-2023-23397.json
+1 -1
View File
@@ -957,7 +957,7 @@
"fork": false,
"created_at": "2026-08-28T09:00:27Z",
"updated_at": "2026-09-11T07:16:27Z",
"pushed_at": "2026-09-11T07:16:24Z",
"pushed_at": "2026-10-17T14:28:21Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-32434.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Deterministic kernel exploit based on CVE-2023-32434.",
"fork": false,
"created_at": "2025-03-01T23:07:37Z",
"updated_at": "2026-10-17T12:23:01Z",
"updated_at": "2026-10-17T17:26:55Z",
"pushed_at": "2026-10-17T11:47:41Z",
"stargazers_count": 146,
"watchers_count": 146,
"stargazers_count": 148,
"watchers_count": 148,
"has_discussions": false,
"forks_count": 19,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 19,
"watchers": 146,
"watchers": 148,
"score": 0,
"subscribers_count": 5
},
2023/CVE-2023-33107.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "full exploit code",
"fork": false,
"created_at": "2026-02-05T09:34:52Z",
"updated_at": "2026-08-02T11:04:25Z",
"updated_at": "2026-10-17T17:50:05Z",
"pushed_at": "2026-03-17T04:38:08Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 7,
"watchers": 8,
"score": 0,
"subscribers_count": 0
},
2023/CVE-2023-41993.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2023-10-15T12:14:18Z",
"updated_at": "2026-05-21T19:05:12Z",
"updated_at": "2026-10-17T17:45:30Z",
"pushed_at": "2024-03-08T12:57:53Z",
"stargazers_count": 202,
"watchers_count": 202,
"stargazers_count": 203,
"watchers_count": 203,
"has_discussions": false,
"forks_count": 36,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 36,
"watchers": 202,
"watchers": 203,
"score": 0,
"subscribers_count": 7
},
2024/CVE-2024-10914.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Exploit for cve-2024-10914: D-Link DNS-320, DNS-320LW, DNS-325, DNS-340L Version 1.00, Version 1.01.0914.2012, Version 1.01, Version 1.02, Version 1.08 Command Injection",
"fork": false,
"created_at": "2024-11-09T19:30:39Z",
"updated_at": "2026-10-14T12:37:30Z",
"updated_at": "2026-10-17T18:58:45Z",
"pushed_at": "2024-11-09T19:31:42Z",
"stargazers_count": 15,
"watchers_count": 15,
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 15,
"watchers": 16,
"score": 0,
"subscribers_count": 2
},
2024/CVE-2024-12986.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2025-01-04T14:47:09Z",
"updated_at": "2026-10-15T09:54:21Z",
"updated_at": "2026-10-17T17:12:38Z",
"pushed_at": "2025-01-04T14:58:25Z",
"stargazers_count": 178,
"watchers_count": 178,
"stargazers_count": 175,
"watchers_count": 175,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 178,
"watchers": 175,
"score": 0,
"subscribers_count": 187
}
2024/CVE-2024-23334.json
+2 -2
View File
@@ -490,8 +490,8 @@
"description": "CTF writeup: rooting a Linux box via CVE-2024-23334 (directory traversal) and CVE-2025-32463 (sudo privilege escalation)",
"fork": false,
"created_at": "2026-10-15T17:12:39Z",
"updated_at": "2026-10-16T11:15:31Z",
"pushed_at": "2026-10-16T11:15:27Z",
"updated_at": "2026-10-17T19:11:14Z",
"pushed_at": "2026-10-17T19:11:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-32507.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1423438399,
"name": "CVE-2024-32507",
"full_name": "4minx\/CVE-2024-32507",
"owner": {
"login": "4minx",
"id": 37972730,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/37972730?v=4",
"html_url": "https:\/\/github.com\/4minx",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/4minx\/CVE-2024-32507",
"description": "CVE-2024-32507: login-with-phone-number Unauthenticated Password Reset (Account Takeover)",
"fork": false,
"created_at": "2026-10-17T14:55:18Z",
"updated_at": "2026-10-17T14:56:12Z",
"pushed_at": "2026-10-17T14:56:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2024/CVE-2024-45519.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Zimbra - Remote Command Execution (CVE-2024-45519)",
"fork": false,
"created_at": "2024-10-05T00:15:18Z",
"updated_at": "2026-10-09T20:37:16Z",
"updated_at": "2026-10-17T13:35:37Z",
"pushed_at": "2025-04-06T16:49:26Z",
"stargazers_count": 141,
"watchers_count": 141,
"stargazers_count": 140,
"watchers_count": 140,
"has_discussions": false,
"forks_count": 24,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 24,
"watchers": 141,
"watchers": 140,
"score": 0,
"subscribers_count": 3
},
2024/CVE-2024-6678.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "PoC for CVE-2024-6678",
"fork": false,
"created_at": "2026-05-21T08:44:56Z",
"updated_at": "2026-06-16T15:29:57Z",
"updated_at": "2026-10-17T14:41:59Z",
"pushed_at": "2026-05-21T16:09:18Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-1122.json
+10 -10
View File
@@ -37,15 +37,15 @@
{
"id": 1410966665,
"name": "RMASmoke-v2",
"full_name": "ts2023dev\/RMASmoke-v2",
"full_name": "jenson8161\/RMASmoke-v2",
"owner": {
"login": "ts2023dev",
"login": "jenson8161",
"id": 317913523,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/317913523?v=4",
"html_url": "https:\/\/github.com\/ts2023dev",
"html_url": "https:\/\/github.com\/jenson8161",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ts2023dev\/RMASmoke-v2",
"html_url": "https:\/\/github.com\/jenson8161\/RMASmoke-v2",
"description": "RMASmoke main repo. CVE-2025-1122, (But better)",
"fork": false,
"created_at": "2026-10-08T21:20:29Z",
@@ -70,20 +70,20 @@
{
"id": 1411154784,
"name": "exploit-docs",
"full_name": "ts2023dev\/exploit-docs",
"full_name": "jenson8161\/exploit-docs",
"owner": {
"login": "ts2023dev",
"login": "jenson8161",
"id": 317913523,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/317913523?v=4",
"html_url": "https:\/\/github.com\/ts2023dev",
"html_url": "https:\/\/github.com\/jenson8161",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ts2023dev\/exploit-docs",
"html_url": "https:\/\/github.com\/jenson8161\/exploit-docs",
"description": "the files\/docs for various exploits, such as (LTBEEF, Sh1mmer, CryptoSmite, RMASmoke, aka: CVE-2025-1122, etc.)",
"fork": false,
"created_at": "2026-10-09T01:57:49Z",
"updated_at": "2026-10-12T18:45:32Z",
"pushed_at": "2026-10-12T18:45:28Z",
"updated_at": "2026-10-17T18:34:30Z",
"pushed_at": "2026-10-17T18:34:26Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-32463.json
+2 -2
View File
@@ -2441,8 +2441,8 @@
"description": "CTF writeup: rooting a Linux box via CVE-2024-23334 (directory traversal) and CVE-2025-32463 (sudo privilege escalation)",
"fork": false,
"created_at": "2026-10-15T17:12:39Z",
"updated_at": "2026-10-16T11:15:31Z",
"pushed_at": "2026-10-16T11:15:27Z",
"updated_at": "2026-10-17T19:11:14Z",
"pushed_at": "2026-10-17T19:11:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-32756.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Proof of Concept for CVE-2025-32756 - A critical stack-based buffer overflow vulnerability affecting multiple Fortinet products.",
"fork": false,
"created_at": "2025-06-05T14:16:31Z",
"updated_at": "2026-10-09T17:26:16Z",
"updated_at": "2026-10-17T13:27:56Z",
"pushed_at": "2025-06-13T07:55:34Z",
"stargazers_count": 192,
"watchers_count": 192,
"stargazers_count": 191,
"watchers_count": 191,
"has_discussions": false,
"forks_count": 29,
"allow_forking": true,
@@ -66,7 +66,7 @@
],
"visibility": "public",
"forks": 29,
"watchers": 192,
"watchers": 191,
"score": 0,
"subscribers_count": 6
},
2025/CVE-2025-43529.json
+4 -4
View File
@@ -212,10 +212,10 @@
"description": "A demonstration of read write using cve-2025-43529 and userland PAC bypass on iOS 26.1",
"fork": false,
"created_at": "2026-06-11T04:48:56Z",
"updated_at": "2026-10-17T08:22:54Z",
"updated_at": "2026-10-17T16:00:30Z",
"pushed_at": "2026-08-04T16:37:36Z",
"stargazers_count": 106,
"watchers_count": 106,
"stargazers_count": 107,
"watchers_count": 107,
"has_discussions": false,
"forks_count": 26,
"allow_forking": true,
@@ -226,7 +226,7 @@
"topics": [],
"visibility": "public",
"forks": 26,
"watchers": 106,
"watchers": 107,
"score": 0,
"subscribers_count": 3
}
2025/CVE-2025-55575.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2025-08-22T19:04:24Z",
"updated_at": "2026-10-15T09:54:29Z",
"updated_at": "2026-10-17T17:12:39Z",
"pushed_at": "2025-08-25T18:42:48Z",
"stargazers_count": 177,
"watchers_count": 177,
"stargazers_count": 174,
"watchers_count": 174,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 177,
"watchers": 174,
"score": 0,
"subscribers_count": 187
}
2025/CVE-2025-8110.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "CVE-2025-8110 PoC",
"fork": false,
"created_at": "2025-12-13T04:15:23Z",
"updated_at": "2026-09-26T13:19:53Z",
"updated_at": "2026-10-17T17:06:35Z",
"pushed_at": "2025-12-24T22:17:22Z",
"stargazers_count": 31,
"watchers_count": 31,
"stargazers_count": 30,
"watchers_count": 30,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 31,
"watchers": 30,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-102764.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-102764 BeyondTrust Remote Support unauthenticated file write \/ RCE proof of concept",
"fork": false,
"created_at": "2026-10-16T19:14:48Z",
"updated_at": "2026-10-17T07:14:29Z",
"updated_at": "2026-10-17T13:47:27Z",
"pushed_at": "2026-10-16T19:37:50Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-104850.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1423513066,
"name": "mcp-oauth-discovery-prober",
"full_name": "Iceman2050\/mcp-oauth-discovery-prober",
"owner": {
"login": "Iceman2050",
"id": 250391065,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/250391065?v=4",
"html_url": "https:\/\/github.com\/Iceman2050",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Iceman2050\/mcp-oauth-discovery-prober",
"description": "Probe MCP OAuth discovery issuer validation (CVE-2026-104850 class)",
"fork": false,
"created_at": "2026-10-17T16:16:13Z",
"updated_at": "2026-10-17T17:25:28Z",
"pushed_at": "2026-10-17T17:25:24Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-110447.json
+35 -2
View File
@@ -1,4 +1,37 @@
[
{
"id": 1419731721,
"name": "cve-2026-110447",
"full_name": "adriyansyah-mf\/cve-2026-110447",
"owner": {
"login": "adriyansyah-mf",
"id": 72158292,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/72158292?v=4",
"html_url": "https:\/\/github.com\/adriyansyah-mf",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/adriyansyah-mf\/cve-2026-110447",
"description": null,
"fork": false,
"created_at": "2026-10-14T19:22:35Z",
"updated_at": "2026-10-17T18:17:29Z",
"pushed_at": "2026-10-17T18:17:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1420732290,
"name": "cve-2026-110447-checker",
@@ -14,8 +47,8 @@
"description": "Free CLI: check a Nextcloud instance for CVE-2026-110447 exposure. Stdlib only, honest verdicts. By Ingenious AI.",
"fork": false,
"created_at": "2026-10-15T12:58:28Z",
"updated_at": "2026-10-15T16:31:00Z",
"pushed_at": "2026-10-15T16:30:56Z",
"updated_at": "2026-10-17T17:53:13Z",
"pushed_at": "2026-10-17T17:53:10Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-111437.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1423486334,
"name": "CVE-2026-111437-Denial-of-Service-Advisory-Technical-Report",
"full_name": "ulvigulmaliyev\/CVE-2026-111437-Denial-of-Service-Advisory-Technical-Report",
"owner": {
"login": "ulvigulmaliyev",
"id": 82860351,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/82860351?v=4",
"html_url": "https:\/\/github.com\/ulvigulmaliyev",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ulvigulmaliyev\/CVE-2026-111437-Denial-of-Service-Advisory-Technical-Report",
"description": "Official security advisory and technical report for CVE-2026-111437: CPU resource exhaustion and Denial of Service (DoS) in django-import-export (v2.7.0 to v4.4.1) via unvalidated integer conversion in IntegerWidget.clean()",
"fork": false,
"created_at": "2026-10-17T15:46:57Z",
"updated_at": "2026-10-17T15:53:59Z",
"pushed_at": "2026-10-17T15:53:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-12227.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": "CVE-2026-12227 is a critical (CVSS 9.8) unauthenticated Local File Inclusion (LFI) vulnerability in the Visual Composer Website Builder plugin for WordPress, affecting all versions up to and including 45.16.0, This can lead to sensitive data exposure, access control bypass, or even full Remote Code Execution (RCE).",
"fork": false,
"created_at": "2026-09-30T18:20:31Z",
"updated_at": "2026-09-30T18:29:40Z",
"updated_at": "2026-10-17T17:33:52Z",
"pushed_at": "2026-09-30T18:29:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-19660.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Proof-of-concept scanner and exploit helper for CVE-2026-14378: unauthenticated administrator session takeover in the WordPress plugin DevKit Pro (dplugins) through a flawed user-switch “revert” flow.",
"fork": false,
"created_at": "2026-10-03T13:28:21Z",
"updated_at": "2026-10-05T23:39:44Z",
"updated_at": "2026-10-17T17:33:49Z",
"pushed_at": "2026-10-03T13:32:24Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-22732.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": null,
"fork": false,
"created_at": "2026-04-15T02:08:40Z",
"updated_at": "2026-10-09T10:05:21Z",
"pushed_at": "2026-10-09T10:05:16Z",
"updated_at": "2026-10-17T18:32:50Z",
"pushed_at": "2026-10-17T18:32:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24332.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Unpatched Discord privacy leak allowing presence inference while Invisible.",
"fork": false,
"created_at": "2026-09-13T06:25:18Z",
"updated_at": "2026-09-13T06:32:40Z",
"updated_at": "2026-10-17T16:21:04Z",
"pushed_at": "2026-09-13T06:30:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -68,7 +68,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-27280.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "Write up and PoC for CVE-2026-27280",
"fork": false,
"created_at": "2026-10-17T04:50:00Z",
"updated_at": "2026-10-17T04:57:32Z",
"pushed_at": "2026-10-17T04:57:29Z",
"updated_at": "2026-10-17T18:34:35Z",
"pushed_at": "2026-10-17T18:34:32Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-31431.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 4081,
"watchers_count": 4081,
"has_discussions": false,
"forks_count": 914,
"forks_count": 913,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -71,7 +71,7 @@
"xint-code"
],
"visibility": "public",
"forks": 914,
"forks": 913,
"watchers": 4081,
"score": 0,
"subscribers_count": 34
2026/CVE-2026-38526.json
+4 -4
View File
@@ -392,10 +392,10 @@
"description": "CVE-2026-38526 - Authenticated RCE exploit for Krayin CRM <= 2.2.x. Upload arbitrary PHP via \/admin\/tinymce\/upload and gain remote code execution. Python PoC for security researchers, CTF players and bug bounty hunters. Tested on HTB Nexus.",
"fork": false,
"created_at": "2026-09-28T20:49:54Z",
"updated_at": "2026-09-28T20:53:05Z",
"updated_at": "2026-10-17T17:34:03Z",
"pushed_at": "2026-09-28T20:53:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -406,7 +406,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-38838.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1423660702,
"name": "CVE-2026-38838",
"full_name": "pawelskokowski\/CVE-2026-38838",
"owner": {
"login": "pawelskokowski",
"id": 328441233,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/328441233?v=4",
"html_url": "https:\/\/github.com\/pawelskokowski",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/pawelskokowski\/CVE-2026-38838",
"description": "Path traversal (CWE-22) in the Akai MPC Sample built-in web server CVE-2026-38838",
"fork": false,
"created_at": "2026-10-17T19:13:36Z",
"updated_at": "2026-10-17T19:22:08Z",
"pushed_at": "2026-10-17T19:22:04Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-4020.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": null,
"fork": false,
"created_at": "2026-06-30T11:37:40Z",
"updated_at": "2026-08-13T16:07:34Z",
"pushed_at": "2026-08-13T16:06:56Z",
"updated_at": "2026-10-17T18:12:22Z",
"pushed_at": "2026-10-17T18:12:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-40281.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Gotenberg 8.30.1 unauthenticated RCE exploit",
"fork": false,
"created_at": "2026-10-02T14:20:27Z",
"updated_at": "2026-10-04T20:24:08Z",
"updated_at": "2026-10-17T17:33:48Z",
"pushed_at": "2026-10-04T20:24:03Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-41651.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": null,
"fork": false,
"created_at": "2026-04-23T08:57:29Z",
"updated_at": "2026-10-11T12:21:36Z",
"updated_at": "2026-10-17T14:41:41Z",
"pushed_at": "2026-04-23T13:55:33Z",
"stargazers_count": 126,
"watchers_count": 126,
"stargazers_count": 127,
"watchers_count": 127,
"has_discussions": false,
"forks_count": 19,
"forks_count": 20,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 19,
"watchers": 126,
"forks": 20,
"watchers": 127,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-41940.json
+7 -7
View File
@@ -2591,12 +2591,12 @@
"description": "cPanel & WHM Authentication Bypass via CVE-2026-41940 explotation",
"fork": false,
"created_at": "2026-10-11T07:54:18Z",
"updated_at": "2026-10-17T13:26:54Z",
"pushed_at": "2026-10-15T12:44:33Z",
"stargazers_count": 135,
"watchers_count": 135,
"updated_at": "2026-10-17T19:39:19Z",
"pushed_at": "2026-10-17T16:48:15Z",
"stargazers_count": 176,
"watchers_count": 176,
"has_discussions": false,
"forks_count": 43,
"forks_count": 51,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2609,8 +2609,8 @@
"cve-2026-41940-poc"
],
"visibility": "public",
"forks": 43,
"watchers": 135,
"forks": 51,
"watchers": 176,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-42945.json
+3 -3
View File
@@ -113,12 +113,12 @@
"description": "exploit for CVE-2026-42945",
"fork": false,
"created_at": "2026-05-14T11:38:08Z",
"updated_at": "2026-09-26T15:31:48Z",
"updated_at": "2026-10-17T17:46:32Z",
"pushed_at": "2026-05-14T11:38:47Z",
"stargazers_count": 64,
"watchers_count": 64,
"has_discussions": false,
"forks_count": 13,
"forks_count": 14,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -126,7 +126,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 13,
"forks": 14,
"watchers": 64,
"score": 0,
"subscribers_count": 1
2026/CVE-2026-43284.json
+8 -8
View File
@@ -359,10 +359,10 @@
"description": "arm64\/aarch64 port of V4bel\/dirtyfrag (CVE-2026-43284). ESP-only - rxrpc path kernel-oopses on arm64 due to flush_dcache_page",
"fork": false,
"created_at": "2026-05-10T04:22:19Z",
"updated_at": "2026-10-15T06:51:34Z",
"updated_at": "2026-10-17T17:40:28Z",
"pushed_at": "2026-05-13T08:32:55Z",
"stargazers_count": 33,
"watchers_count": 33,
"stargazers_count": 34,
"watchers_count": 34,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -384,7 +384,7 @@
],
"visibility": "public",
"forks": 7,
"watchers": 33,
"watchers": 34,
"score": 0,
"subscribers_count": 0
},
@@ -1341,10 +1341,10 @@
"description": "三星 Galaxy S25 Ultra（SM-S938B）适配版 DFRoot：开机自动获取 root（DirtyFrag CVE-2026-43284 + CVE-2026-43499 双链路），全中文界面，fork 自 diabl0w\/DFRoot",
"fork": false,
"created_at": "2026-09-27T15:02:55Z",
"updated_at": "2026-10-10T04:51:12Z",
"updated_at": "2026-10-17T14:12:51Z",
"pushed_at": "2026-09-28T03:10:07Z",
"stargazers_count": 6,
"watchers_count": 6,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -1364,7 +1364,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 6,
"watchers": 5,
"score": 0,
"subscribers_count": 1
},
2026/CVE-2026-43499.json
+42 -42
View File
@@ -295,7 +295,7 @@
"description": "CVE-2026-43499 Implementation for 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k",
"fork": false,
"created_at": "2026-07-12T10:15:03Z",
"updated_at": "2026-10-16T11:15:03Z",
"updated_at": "2026-10-17T16:23:40Z",
"pushed_at": "2026-07-15T22:46:59Z",
"stargazers_count": 256,
"watchers_count": 256,
@@ -361,10 +361,10 @@
"description": "GhostLock (CVE-2026-43499) kernel exploit for Android devices with locked bootloader",
"fork": false,
"created_at": "2026-07-12T16:05:24Z",
"updated_at": "2026-10-17T06:39:17Z",
"updated_at": "2026-10-17T14:47:26Z",
"pushed_at": "2026-09-17T05:30:59Z",
"stargazers_count": 423,
"watchers_count": 423,
"stargazers_count": 422,
"watchers_count": 422,
"has_discussions": false,
"forks_count": 93,
"allow_forking": true,
@@ -382,7 +382,7 @@
],
"visibility": "public",
"forks": 93,
"watchers": 423,
"watchers": 422,
"score": 0,
"subscribers_count": 13
},
@@ -1028,12 +1028,12 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
"updated_at": "2026-10-17T09:41:22Z",
"updated_at": "2026-10-17T19:33:32Z",
"pushed_at": "2026-09-03T03:21:42Z",
"stargazers_count": 1425,
"watchers_count": 1425,
"stargazers_count": 1427,
"watchers_count": 1427,
"has_discussions": false,
"forks_count": 288,
"forks_count": 289,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1041,8 +1041,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 288,
"watchers": 1425,
"forks": 289,
"watchers": 1427,
"score": 0,
"subscribers_count": 44
},
@@ -1709,12 +1709,12 @@
"description": "GhostLock One-Tap Execution App (CVE-2026-43499)",
"fork": false,
"created_at": "2026-07-29T05:04:25Z",
"updated_at": "2026-10-17T13:07:57Z",
"updated_at": "2026-10-17T18:59:27Z",
"pushed_at": "2026-10-16T01:35:44Z",
"stargazers_count": 2011,
"watchers_count": 2011,
"stargazers_count": 2020,
"watchers_count": 2020,
"has_discussions": true,
"forks_count": 515,
"forks_count": 517,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1722,8 +1722,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 515,
"watchers": 2011,
"forks": 517,
"watchers": 2020,
"score": 0,
"subscribers_count": 27
},
@@ -2077,10 +2077,10 @@
"description": "Jailbreak supported Google Pixel phones with CVE-2026-43499",
"fork": false,
"created_at": "2026-08-02T17:34:45Z",
"updated_at": "2026-10-17T11:54:53Z",
"updated_at": "2026-10-17T17:55:51Z",
"pushed_at": "2026-09-13T16:31:27Z",
"stargazers_count": 450,
"watchers_count": 450,
"stargazers_count": 451,
"watchers_count": 451,
"has_discussions": false,
"forks_count": 65,
"allow_forking": true,
@@ -2098,7 +2098,7 @@
],
"visibility": "public",
"forks": 65,
"watchers": 450,
"watchers": 451,
"score": 0,
"subscribers_count": 7
},
@@ -2645,10 +2645,10 @@
"description": "vivo\/iQOO 临时 root 工具箱 (免解锁临时root, CVE-2026-43499) - 源码与脚本",
"fork": false,
"created_at": "2026-08-12T10:05:38Z",
"updated_at": "2026-10-17T12:09:38Z",
"updated_at": "2026-10-17T16:11:34Z",
"pushed_at": "2026-08-12T10:05:44Z",
"stargazers_count": 51,
"watchers_count": 51,
"stargazers_count": 52,
"watchers_count": 52,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -2659,7 +2659,7 @@
"topics": [],
"visibility": "public",
"forks": 7,
"watchers": 51,
"watchers": 52,
"score": 0,
"subscribers_count": 0
},
@@ -2821,10 +2821,10 @@
"description": "KSuRoot 4.0.0 — 基于 CVE-2026-43499(GhostLock) 的一键 KernelSU 提权工具。多内核支持：6.1 \/ 6.6 \/ 6.12 三族各有专属基线，另有 50 档上游内核适配；多机型动态库内置：122 条厂商载荷（vivo\/iQOO、小米、三星、Pixel 等）离线可用、按机型+内核+commit 三级匹配；新增「载荷构建」用本机 boot.img 解析偏移打出适配本机的载荷（通用 \/ vivo 专用）；免 ADB。Mod by hmascs",
"fork": false,
"created_at": "2026-08-14T10:51:50Z",
"updated_at": "2026-10-17T02:41:50Z",
"updated_at": "2026-10-17T14:46:38Z",
"pushed_at": "2026-10-02T08:20:25Z",
"stargazers_count": 255,
"watchers_count": 255,
"stargazers_count": 254,
"watchers_count": 254,
"has_discussions": false,
"forks_count": 23,
"allow_forking": true,
@@ -2835,7 +2835,7 @@
"topics": [],
"visibility": "public",
"forks": 23,
"watchers": 255,
"watchers": 254,
"score": 0,
"subscribers_count": 1
},
@@ -2953,10 +2953,10 @@
"description": "Using CVE-2026-43499 to root your Galaxy S24 Series(SM-S92X0 ,(China \/ Hong Kong SAR \/ Taiwan))",
"fork": false,
"created_at": "2026-08-16T14:37:06Z",
"updated_at": "2026-10-17T08:50:47Z",
"pushed_at": "2026-10-17T01:15:53Z",
"stargazers_count": 71,
"watchers_count": 71,
"updated_at": "2026-10-17T16:41:33Z",
"pushed_at": "2026-10-17T16:00:45Z",
"stargazers_count": 72,
"watchers_count": 72,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -2982,7 +2982,7 @@
],
"visibility": "public",
"forks": 8,
"watchers": 71,
"watchers": 72,
"score": 0,
"subscribers_count": 1
},
@@ -3760,10 +3760,10 @@
"description": null,
"fork": false,
"created_at": "2026-09-01T09:26:04Z",
"updated_at": "2026-09-02T11:26:39Z",
"updated_at": "2026-10-17T19:28:40Z",
"pushed_at": "2026-09-02T11:22:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -3774,7 +3774,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
@@ -5541,8 +5541,8 @@
"description": "Honor 70 (FNE-AN00) privilege escalation PoC: GhostLock (CVE-2026-43499) + custom KernelSU module loading",
"fork": false,
"created_at": "2026-10-16T11:28:27Z",
"updated_at": "2026-10-17T13:14:17Z",
"pushed_at": "2026-10-17T13:14:12Z",
"updated_at": "2026-10-17T15:34:19Z",
"pushed_at": "2026-10-17T15:35:01Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -5574,8 +5574,8 @@
"description": "HLK-AL00 (4.14.116 \/ Kirin 810) 内核云编译 — CVE-2026-43499 授权安全研究",
"fork": false,
"created_at": "2026-10-17T02:44:14Z",
"updated_at": "2026-10-17T03:33:14Z",
"pushed_at": "2026-10-17T03:33:10Z",
"updated_at": "2026-10-17T19:33:37Z",
"pushed_at": "2026-10-17T19:33:34Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-48907.json
+33
View File
@@ -665,5 +665,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1423639956,
"name": "CVE-2026-48907-RCE",
"full_name": "0xCyp1337\/CVE-2026-48907-RCE",
"owner": {
"login": "0xCyp1337",
"id": 323652322,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/323652322?v=4",
"html_url": "https:\/\/github.com\/0xCyp1337",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xCyp1337\/CVE-2026-48907-RCE",
"description": null,
"fork": false,
"created_at": "2026-10-17T18:46:29Z",
"updated_at": "2026-10-17T18:54:10Z",
"pushed_at": "2026-10-17T18:54:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-55559.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Unauthenticated RCE in Yamcs mission control via YAML injection in reconfigureInstance()",
"fork": false,
"created_at": "2026-10-02T14:30:25Z",
"updated_at": "2026-10-02T14:33:27Z",
"updated_at": "2026-10-17T17:33:50Z",
"pushed_at": "2026-10-02T14:33:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-60004.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "CVE-2026-60004",
"fork": false,
"created_at": "2026-07-30T22:24:16Z",
"updated_at": "2026-10-02T11:02:10Z",
"updated_at": "2026-10-17T14:14:52Z",
"pushed_at": "2026-07-30T22:36:36Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-63030.json
+15 -15
View File
@@ -1794,10 +1794,10 @@
"description": "Pre-auth RCE PoC for WordPress core — chains CVE-2026-63030 (REST \/batch\/v1 route-confusion desync) with CVE-2026-60137 (author__not_in SQLi) into an unauthenticated shell. Authorized testing only.",
"fork": false,
"created_at": "2026-07-22T10:53:51Z",
"updated_at": "2026-10-13T10:46:38Z",
"updated_at": "2026-10-17T15:57:36Z",
"pushed_at": "2026-07-22T11:01:23Z",
"stargazers_count": 15,
"watchers_count": 15,
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
"forks_count": 10,
"allow_forking": true,
@@ -1808,7 +1808,7 @@
"topics": [],
"visibility": "public",
"forks": 10,
"watchers": 15,
"watchers": 16,
"score": 0,
"subscribers_count": 0
},
@@ -2686,10 +2686,10 @@
"description": "Unauthenticated SQL injection PoC and vulnerable lab environment for WP2Shell (CVE-2026-63030 + CVE-2026-60137) — a WordPress REST API batch route confusion chained into a WP_Query SQL injection. Includes Docker Compose lab setup and a Python exploitation script. For authorized security research only.",
"fork": false,
"created_at": "2026-09-29T16:26:47Z",
"updated_at": "2026-10-10T13:30:39Z",
"updated_at": "2026-10-17T17:33:57Z",
"pushed_at": "2026-09-29T16:28:32Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -2700,7 +2700,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
@@ -2788,12 +2788,12 @@
"description": "CVE-2026-63030 + CVE-2026-60137 exploit RCE chain.",
"fork": false,
"created_at": "2026-10-15T17:29:04Z",
"updated_at": "2026-10-17T13:46:01Z",
"pushed_at": "2026-10-15T17:30:52Z",
"stargazers_count": 123,
"watchers_count": 123,
"updated_at": "2026-10-17T19:39:07Z",
"pushed_at": "2026-10-17T16:52:19Z",
"stargazers_count": 163,
"watchers_count": 163,
"has_discussions": false,
"forks_count": 35,
"forks_count": 44,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2809,8 +2809,8 @@
"wp2shell-poc"
],
"visibility": "public",
"forks": 35,
"watchers": 123,
"forks": 44,
"watchers": 163,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-64560.json
+19 -19
View File
@@ -1,8 +1,8 @@
[
{
"id": 1309769310,
"name": "CVE-2026-64560-exploit",
"full_name": "imkidz0\/CVE-2026-64560-exploit",
"name": "exploit-CVE-2026-64560",
"full_name": "imkidz0\/exploit-CVE-2026-64560",
"owner": {
"login": "imkidz0",
"id": 45529052,
@@ -10,11 +10,11 @@
"html_url": "https:\/\/github.com\/imkidz0",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/imkidz0\/CVE-2026-64560-exploit",
"description": "CVE-2026-64560, kernelctf-lts-6.12.95",
"html_url": "https:\/\/github.com\/imkidz0\/exploit-CVE-2026-64560",
"description": "Exploit for CVE-2026-64560, kernelctf-lts-6.12.95",
"fork": false,
"created_at": "2026-07-23T09:35:07Z",
"updated_at": "2026-10-15T19:21:07Z",
"updated_at": "2026-10-17T16:23:48Z",
"pushed_at": "2026-10-15T19:21:02Z",
"stargazers_count": 2,
"watchers_count": 2,
@@ -362,7 +362,7 @@
"stargazers_count": 18,
"watchers_count": 18,
"has_discussions": false,
"forks_count": 4,
"forks_count": 6,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -379,7 +379,7 @@
"root"
],
"visibility": "public",
"forks": 4,
"forks": 6,
"watchers": 18,
"score": 0,
"subscribers_count": 0
@@ -399,8 +399,8 @@
"description": "PMX110 (OPPO MT6995, kernel 6.18.21) CVE-2026-64560 research: port, evidence, bounded run scripts",
"fork": false,
"created_at": "2026-10-17T08:26:48Z",
"updated_at": "2026-10-17T11:40:06Z",
"pushed_at": "2026-10-17T11:40:02Z",
"updated_at": "2026-10-17T15:51:17Z",
"pushed_at": "2026-10-17T15:51:13Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -432,12 +432,12 @@
"description": "REDMI K90 Max在OS4.0.0.14.XAACNXM利用CVE-2026-64560获取ROOT权限。",
"fork": false,
"created_at": "2026-10-17T11:27:09Z",
"updated_at": "2026-10-17T12:41:36Z",
"updated_at": "2026-10-17T17:08:33Z",
"pushed_at": "2026-10-17T12:41:32Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -445,8 +445,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"forks": 2,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
@@ -465,10 +465,10 @@
"description": "CVE-2026-64560 temporary-root exploit for realme RMX6699 (Snapdragon 8 Elite, kernel 6.6.118, Android 17\/COOS17)",
"fork": false,
"created_at": "2026-10-17T12:51:07Z",
"updated_at": "2026-10-17T13:05:00Z",
"updated_at": "2026-10-17T17:50:25Z",
"pushed_at": "2026-10-17T13:06:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -479,7 +479,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-76639.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Unitree G1 RCE PoC & Scripts (CVE-2026-76639 \/ CVE-2026-76640) technical details at boschko.ca\/g1-ble-rce\/",
"fork": false,
"created_at": "2026-08-24T21:18:35Z",
"updated_at": "2026-10-13T13:21:05Z",
"updated_at": "2026-10-17T17:51:29Z",
"pushed_at": "2026-08-27T22:48:44Z",
"stargazers_count": 6,
"watchers_count": 6,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 6,
"watchers": 7,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-83834.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-10-14T16:23:07Z",
"updated_at": "2026-10-17T10:51:21Z",
"updated_at": "2026-10-17T19:20:37Z",
"pushed_at": "2026-10-14T16:31:24Z",
"stargazers_count": 44,
"watchers_count": 44,
"stargazers_count": 45,
"watchers_count": 45,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 44,
"watchers": 45,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-87902.json
+4 -4
View File
@@ -841,10 +841,10 @@
"description": "CVE-2026-87902 — WordPress Core LFI → RCE",
"fork": false,
"created_at": "2026-09-28T21:18:39Z",
"updated_at": "2026-09-28T21:21:19Z",
"updated_at": "2026-10-17T17:34:03Z",
"pushed_at": "2026-09-28T21:21:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -855,7 +855,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-89079.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-89079 — WordPress Theme My Login multisite unauth password overwrite PoC (check, verify, exploit). Not version-only: requires MS + tml_user_passwords.",
"fork": false,
"created_at": "2026-10-16T11:44:49Z",
"updated_at": "2026-10-16T21:02:22Z",
"updated_at": "2026-10-17T17:12:53Z",
"pushed_at": "2026-10-16T11:46:13Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 6,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-94169.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1423640960,
"name": "CVE-2026-94169",
"full_name": "kize7\/CVE-2026-94169",
"owner": {
"login": "kize7",
"id": 107405609,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/107405609?v=4",
"html_url": "https:\/\/github.com\/kize7",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/kize7\/CVE-2026-94169",
"description": "WordPress The Grid plugin <= 2.8.1 - Remote Code Execution (RCE) vulnerability",
"fork": false,
"created_at": "2026-10-17T18:47:45Z",
"updated_at": "2026-10-17T18:49:14Z",
"pushed_at": "2026-10-17T18:49:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-94545.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "Next.js RCE",
"fork": false,
"created_at": "2026-09-29T07:57:18Z",
"updated_at": "2026-10-13T19:11:21Z",
"updated_at": "2026-10-17T15:27:18Z",
"pushed_at": "2026-09-29T08:12:51Z",
"stargazers_count": 51,
"watchers_count": 51,
"stargazers_count": 52,
"watchers_count": 52,
"has_discussions": false,
"forks_count": 12,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 12,
"watchers": 51,
"watchers": 52,
"score": 0,
"subscribers_count": 1
},
2026/CVE-2026-96652.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 CVE-2026-96656",
"fork": false,
"created_at": "2026-10-16T16:36:01Z",
"updated_at": "2026-10-17T02:33:14Z",
"pushed_at": "2026-10-16T20:31:21Z",
"updated_at": "2026-10-17T19:18:22Z",
"pushed_at": "2026-10-17T19:18:19Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-97229.json
+33
View File
@@ -97,5 +97,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1423605441,
"name": "cve-2026-97229-lab",
"full_name": "gandli\/cve-2026-97229-lab",
"owner": {
"login": "gandli",
"id": 85359251,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/85359251?v=4",
"html_url": "https:\/\/github.com\/gandli",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/gandli\/cve-2026-97229-lab",
"description": "CVE-2026-97229 GitLab CI lint regex integer overflow RCE — InstaBox version matrix reproduction & libruby gadget reverse engineering",
"fork": false,
"created_at": "2026-10-17T18:03:59Z",
"updated_at": "2026-10-17T18:12:44Z",
"pushed_at": "2026-10-17T18:12:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-99999.json
+8 -8
View File
@@ -14,10 +14,10 @@
"description": "Restricted eBPF TC ingress guard, CO-RE detector, verified loader, and C11 VMM launch supervisor for CVE-2026-99999",
"fork": false,
"created_at": "2026-10-16T17:52:16Z",
"updated_at": "2026-10-16T23:30:06Z",
"updated_at": "2026-10-17T16:37:38Z",
"pushed_at": "2026-10-16T23:30:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
@@ -47,10 +47,10 @@
"description": "PoC for CVE-2026-99999 (PwnEscape) on a prepared TAP.",
"fork": false,
"created_at": "2026-10-17T06:21:55Z",
"updated_at": "2026-10-17T07:50:25Z",
"updated_at": "2026-10-17T15:17:08Z",
"pushed_at": "2026-10-17T07:36:13Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},