From 878c7a268598afa767d2e53d4cc16c286ecaeaba Mon Sep 17 00:00:00 2001 From: motikan2010-bot Date: Thu, 29 Oct 2026 18:04:13 +0900 Subject: [PATCH] Auto Update README.md 2026/10/29 09:04:08 --- README.md | 317 +++++++++++++++++++++++++++--------------------------- 1 file changed, 156 insertions(+), 161 deletions(-) diff --git a/README.md b/README.md index bfa0ac3c6c..8b3a210605 100644 --- a/README.md +++ b/README.md @@ -69,7 +69,7 @@ - [adityatelange/poc-CVE-2026-0073](https://github.com/adityatelange/poc-CVE-2026-0073) - [MartinPSDev/CVE-2026-0073-Android-ADBD-bypass-POC](https://github.com/MartinPSDev/CVE-2026-0073-Android-ADBD-bypass-POC) - [unnaim/adbHijacker](https://github.com/unnaim/adbHijacker) -- [0xBlackash/CVE-2026-0073](https://github.com/0xBlackash/CVE-2026-0073) +- [0xredash/CVE-2026-0073](https://github.com/0xredash/CVE-2026-0073) - [xqi1337/poc-CVE-2026-0073](https://github.com/xqi1337/poc-CVE-2026-0073) - [xqi1337/CVE-2026-0073-Android-ADBD-bypass-POC](https://github.com/xqi1337/CVE-2026-0073-Android-ADBD-bypass-POC) - [tc4dy/CVE-2026-0073-PoC-Exploit](https://github.com/tc4dy/CVE-2026-0073-PoC-Exploit) @@ -123,7 +123,7 @@ - [sfewer-r7/CVE-2026-0257](https://github.com/sfewer-r7/CVE-2026-0257) - [akashsingh0454/CVE-2026-0257-PoC](https://github.com/akashsingh0454/CVE-2026-0257-PoC) - [HORKimhab/CVE-2026-0257](https://github.com/HORKimhab/CVE-2026-0257) -- [0xBlackash/CVE-2026-0257](https://github.com/0xBlackash/CVE-2026-0257) +- [0xredash/CVE-2026-0257](https://github.com/0xredash/CVE-2026-0257) - [tushargurav28/CVE-2026-0257](https://github.com/tushargurav28/CVE-2026-0257) - [grayxploit/CVE-2026-0257](https://github.com/grayxploit/CVE-2026-0257) - [Ez4rd1x1/CVE-2026-0257](https://github.com/Ez4rd1x1/CVE-2026-0257) @@ -153,7 +153,7 @@ - [qassam-315/PAN-OS-User-ID-Buffer-Overflow-PoC](https://github.com/qassam-315/PAN-OS-User-ID-Buffer-Overflow-PoC) - [mr-r3b00t/CVE-2026-0300](https://github.com/mr-r3b00t/CVE-2026-0300) -- [0xBlackash/CVE-2026-0300](https://github.com/0xBlackash/CVE-2026-0300) +- [0xredash/CVE-2026-0300](https://github.com/0xredash/CVE-2026-0300) - [TailwindRG/cve-2026-0300-audit](https://github.com/TailwindRG/cve-2026-0300-audit) - [matad0r-maghribi/CVE-2026-0300-PANOS](https://github.com/matad0r-maghribi/CVE-2026-0300-PANOS) - [shizuku198411/CVE-2026-0300](https://github.com/shizuku198411/CVE-2026-0300) @@ -297,7 +297,7 @@ - [affix/CVE-2026-0770-PoC](https://github.com/affix/CVE-2026-0770-PoC) - [0xgh057r3c0n/CVE-2026-0770](https://github.com/0xgh057r3c0n/CVE-2026-0770) - [Yetazyyy/CVE-2026-0770](https://github.com/Yetazyyy/CVE-2026-0770) -- [0xBlackash/CVE-2026-0770](https://github.com/0xBlackash/CVE-2026-0770) +- [0xredash/CVE-2026-0770](https://github.com/0xredash/CVE-2026-0770) - [Ez4rd1x1/CVE-2026-0770](https://github.com/Ez4rd1x1/CVE-2026-0770) - [diamorphine666/CVE-2026-0770](https://github.com/diamorphine666/CVE-2026-0770) - [razureink/cve-2026-0770-langflow_rce_reproduction](https://github.com/razureink/cve-2026-0770-langflow_rce_reproduction) @@ -536,7 +536,7 @@ - [rootdirective-sec/CVE-2026-1357-Lab](https://github.com/rootdirective-sec/CVE-2026-1357-Lab) - [CVEs-Labs/CVE-2026-1357](https://github.com/CVEs-Labs/CVE-2026-1357) - [Nxploited/CVE-2026-1357](https://github.com/Nxploited/CVE-2026-1357) -- [0xBlackash/CVE-2026-1357](https://github.com/0xBlackash/CVE-2026-1357) +- [0xredash/CVE-2026-1357](https://github.com/0xredash/CVE-2026-1357) - [masterwok/PoC-CVE-2026-1357](https://github.com/masterwok/PoC-CVE-2026-1357) - [sahmsec/CVE-2026-1357](https://github.com/sahmsec/CVE-2026-1357) - [stj8703-web/CVE-2026-1357](https://github.com/stj8703-web/CVE-2026-1357) @@ -898,7 +898,7 @@ - [watchtowrlabs/watchTowr-vs-Progress-ShareFile-CVE-2026-2699](https://github.com/watchtowrlabs/watchTowr-vs-Progress-ShareFile-CVE-2026-2699) -- [0xBlackash/CVE-2026-2699](https://github.com/0xBlackash/CVE-2026-2699) +- [0xredash/CVE-2026-2699](https://github.com/0xredash/CVE-2026-2699) ### CVE-2026-2749 (2026-02-27) @@ -991,7 +991,7 @@ Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread -- [0xBlackash/CVE-2026-3055](https://github.com/0xBlackash/CVE-2026-3055) +- [0xredash/CVE-2026-3055](https://github.com/0xredash/CVE-2026-3055) - [fevar54/CVE-2026-3055---Citrix-NetScaler-Memory-Overread-PoC](https://github.com/fevar54/CVE-2026-3055---Citrix-NetScaler-Memory-Overread-PoC) - [fevar54/CVE-2026-3055-Scanner---Herramienta-de-Detecci-n](https://github.com/fevar54/CVE-2026-3055-Scanner---Herramienta-de-Detecci-n) - [l0lsec/check-cve-2026-3055-netscaler](https://github.com/l0lsec/check-cve-2026-3055-netscaler) @@ -1415,7 +1415,7 @@ - [TheCyberGeek/CVE-2026-4480-PoC](https://github.com/TheCyberGeek/CVE-2026-4480-PoC) - [robinxiang/CVE-2026-4480](https://github.com/robinxiang/CVE-2026-4480) -- [0xBlackash/CVE-2026-4480](https://github.com/0xBlackash/CVE-2026-4480) +- [0xredash/CVE-2026-4480](https://github.com/0xredash/CVE-2026-4480) - [saitoken241/CVE-2026-4480-POC](https://github.com/saitoken241/CVE-2026-4480-POC) - [Vusal777/CVE-2026-4480-exploit-poc](https://github.com/Vusal777/CVE-2026-4480-exploit-poc) - [ClearLotus-git/CVE-2026-4480-PoC](https://github.com/ClearLotus-git/CVE-2026-4480-PoC) @@ -1556,7 +1556,7 @@ - [yahiahamza/CVE-2026-5027](https://github.com/yahiahamza/CVE-2026-5027) - [min8282/CVE-2026-5027](https://github.com/min8282/CVE-2026-5027) - [EQSTLab/CVE-2026-5027](https://github.com/EQSTLab/CVE-2026-5027) -- [0xBlackash/CVE-2026-5027](https://github.com/0xBlackash/CVE-2026-5027) +- [0xredash/CVE-2026-5027](https://github.com/0xredash/CVE-2026-5027) - [Layer-6/CVE-2026-5027-Langflow](https://github.com/Layer-6/CVE-2026-5027-Langflow) - [HORKimhab/CVE-2026-5027](https://github.com/HORKimhab/CVE-2026-5027) - [yym8538/CVE-2026-5027](https://github.com/yym8538/CVE-2026-5027) @@ -1643,7 +1643,7 @@ GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.9.6 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an authenticated user to invoke unintended server-side methods through websocket connections due to improper access control. -- [0xBlackash/CVE-2026-5173](https://github.com/0xBlackash/CVE-2026-5173) +- [0xredash/CVE-2026-5173](https://github.com/0xredash/CVE-2026-5173) ### CVE-2026-5201 (2026-03-31) @@ -2024,7 +2024,7 @@ - [goldendivider/cve-2026-6471-postgres-logical-decoding-dlopen](https://github.com/goldendivider/cve-2026-6471-postgres-logical-decoding-dlopen) -- [0xBlackash/CVE-2026-6471](https://github.com/0xBlackash/CVE-2026-6471) +- [0xredash/CVE-2026-6471](https://github.com/0xredash/CVE-2026-6471) ### CVE-2026-6475 (2026-05-14) @@ -2315,7 +2315,7 @@ Anthropic Claude Desktop Cowork VM image handling (confirmed across v1.1348.0 through v1.2278.0, including v1.1348.0, v1.1617.0, and v1.2278.0) validates only file presence and a version marker string before booting rootfs.img, but does not verify image content integrity at time-of-use. A local attacker with unprivileged code execution as the victim macOS user can modify the VM root filesystem image and have it trusted on subsequent Cowork VM boots, enabling persistent arbitrary code execution in the VM and access to host-mounted directories. The estimated CWE mapping is CWE-353 (Missing Support for Integrity Check). -- [0xBlackash/CVE-2026-7574](https://github.com/0xBlackash/CVE-2026-7574) +- [0xredash/CVE-2026-7574](https://github.com/0xredash/CVE-2026-7574) ### CVE-2026-7654 (2026-06-05) @@ -2530,7 +2530,7 @@ - [watchtowrlabs/watchTowr-vs-Netscaler-CVE-2026-8451](https://github.com/watchtowrlabs/watchTowr-vs-Netscaler-CVE-2026-8451) - [derekpreston81/CVE_ADC_IOC_2026](https://github.com/derekpreston81/CVE_ADC_IOC_2026) - [attarwahyup/Netscaler-CVE-2026-8451](https://github.com/attarwahyup/Netscaler-CVE-2026-8451) -- [0xBlackash/CVE-2026-8451](https://github.com/0xBlackash/CVE-2026-8451) +- [0xredash/CVE-2026-8451](https://github.com/0xredash/CVE-2026-8451) ### CVE-2026-8452 (2026-06-30) @@ -2551,7 +2551,7 @@ - [anyanything/CVE-2026-8461-PoC](https://github.com/anyanything/CVE-2026-8461-PoC) - [Y5neKO/CVE-2026-8461-EXP](https://github.com/Y5neKO/CVE-2026-8461-EXP) - [HORKimhab/CVE-2026-8461](https://github.com/HORKimhab/CVE-2026-8461) -- [0xBlackash/CVE-2026-8461](https://github.com/0xBlackash/CVE-2026-8461) +- [0xredash/CVE-2026-8461](https://github.com/0xredash/CVE-2026-8461) - [se1ims/PixelSmash](https://github.com/se1ims/PixelSmash) ### CVE-2026-8467 (2026-05-20) @@ -2671,7 +2671,7 @@ libcurl would reuse a previously created connection even when some mTLS config\nrelated option had been changed that should have prohibited reuse.\n\nlibcurl keeps previously used connections in a connection pool for subsequent\ntransfers to reuse if one of them matches the setup. However, some TLS\nsettings related to client certificates were left out from the configuration\nmatch checks, making them match too easily. In particular options related to\nthe private key. -- [0xBlackash/CVE-2026-8932](https://github.com/0xBlackash/CVE-2026-8932) +- [0xredash/CVE-2026-8932](https://github.com/0xredash/CVE-2026-8932) - [nimaarek/CVE-2026-8932-PoC](https://github.com/nimaarek/CVE-2026-8932-PoC) ### CVE-2026-8933 (2026-07-21) @@ -2710,7 +2710,7 @@ - [HORKimhab/CVE-2026-9082](https://github.com/HORKimhab/CVE-2026-9082) - [lysophavin18/cve-2026-9082](https://github.com/lysophavin18/cve-2026-9082) -- [0xBlackash/CVE-2026-9082](https://github.com/0xBlackash/CVE-2026-9082) +- [0xredash/CVE-2026-9082](https://github.com/0xredash/CVE-2026-9082) - [7h30th3r0n3/CVE-2026-9082-Drupal-PoC](https://github.com/7h30th3r0n3/CVE-2026-9082-Drupal-PoC) - [ywh-jfellus/CVE-2026-9082](https://github.com/ywh-jfellus/CVE-2026-9082) - [ridhinva/drupal-jsonapi-sqli-scanner](https://github.com/ridhinva/drupal-jsonapi-sqli-scanner) @@ -3038,7 +3038,7 @@ - [watchtowrlabs/watchTowr-vs-Ivanti-Sentry-RCE-CVE-2026-10520-CVE-2026-10523](https://github.com/watchtowrlabs/watchTowr-vs-Ivanti-Sentry-RCE-CVE-2026-10520-CVE-2026-10523) - [HORKimhab/CVE-2026-10520-10523](https://github.com/HORKimhab/CVE-2026-10520-10523) -- [0xBlackash/CVE-2026-10520](https://github.com/0xBlackash/CVE-2026-10520) +- [0xredash/CVE-2026-10520](https://github.com/0xredash/CVE-2026-10520) - [error-inside/CVE-2026-10520](https://github.com/error-inside/CVE-2026-10520) - [emilliewatson96/spryCVE-2026-10520](https://github.com/emilliewatson96/spryCVE-2026-10520) - [gduma-phData/patch-CVE-2026-10520](https://github.com/gduma-phData/patch-CVE-2026-10520) @@ -3306,7 +3306,7 @@ A vulnerability was determined in Tenda HG7, HG9 and HG10 300001138_en_xpon. This affects the function formDOMAINBLK of the file /boaform/formDOMAINBLK. Executing a manipulation of the argument blkDomain can lead to stack-based buffer overflow. The attack may be performed from remote. -- [0xBlackash/CVE-2026-11499](https://github.com/0xBlackash/CVE-2026-11499) +- [0xredash/CVE-2026-11499](https://github.com/0xredash/CVE-2026-11499) ### CVE-2026-11518 (2026-06-08) @@ -3352,7 +3352,7 @@ - [fevar54/CVE-2026-11645-Out-of-bounds-Read-Write](https://github.com/fevar54/CVE-2026-11645-Out-of-bounds-Read-Write) - [adamshaikhma/CVE-2026-11645](https://github.com/adamshaikhma/CVE-2026-11645) -- [0xBlackash/CVE-2026-11645](https://github.com/0xBlackash/CVE-2026-11645) +- [0xredash/CVE-2026-11645](https://github.com/0xredash/CVE-2026-11645) - [emlinhax/CVE-2026-11645-poc](https://github.com/emlinhax/CVE-2026-11645-poc) ### CVE-2026-11784 (2026-06-18) @@ -3414,13 +3414,6 @@ - [gduma-phData/patch-CVE-2026-12087](https://github.com/gduma-phData/patch-CVE-2026-12087) -### CVE-2026-12118 (2026-07-30) - -IBM webMethods Integration (on prem) 10.15, 10.11 could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted data. - - -- [uday952/CVE-2026-12118-POC-](https://github.com/uday952/CVE-2026-12118-POC-) - ### CVE-2026-12166 (2026-07-02) A NULL pointer dereference vulnerability for driver `GFAC_Sys_x64.sys` in Little Orbit GFAC allows a local attacker to cause a denial of service via crafted requests that trigger a system crash. @@ -3516,7 +3509,7 @@ GV-I/O Box 4E is a smart embedded device with 4 input and 4 relays output that can be controlled over Ethernet and RS-485.\n\nDVRSearch is a service running by default on the IOBox listening for UDP messages on port 10001. Any user on the network can send messages to this service and interact with it. \n\n\n\nUpon receiving a UDP message, the server reads at most 1460 bytes into a local buffer and a pointer to the buffer is stored in a global variable:\n\n\n#### IP field stack overflow\n\nThe following code is vulnerable to a stack overflow that is attacker-controlled:\n\n\n\n v3 = strlen(g_network_config->ip_addr);\n\n memcpy(&reply_buf[36], g_network_config->ip_addr, v3); -- [0xBlackash/CVE-2026-12485](https://github.com/0xBlackash/CVE-2026-12485) +- [0xredash/CVE-2026-12485](https://github.com/0xredash/CVE-2026-12485) ### CVE-2026-12513 (2026-08-28) @@ -3945,7 +3938,7 @@ - [HORKimhab/CVE-2026-15409](https://github.com/HORKimhab/CVE-2026-15409) - [remmons-r7/rapid7-CVE-2026-15409](https://github.com/remmons-r7/rapid7-CVE-2026-15409) -- [0xBlackash/CVE-2026-15409](https://github.com/0xBlackash/CVE-2026-15409) +- [0xredash/CVE-2026-15409](https://github.com/0xredash/CVE-2026-15409) - [MrRawBit/SonicWall-SMA1000-Zero-Day-IoC-Check](https://github.com/MrRawBit/SonicWall-SMA1000-Zero-Day-IoC-Check) - [tc4dy/CVE-2026-15409-15410-Framework](https://github.com/tc4dy/CVE-2026-15409-15410-Framework) - [Ch4120N/CVE-2026-15409](https://github.com/Ch4120N/CVE-2026-15409) @@ -4680,7 +4673,7 @@ A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating system.&nbsp;\r\n\r\nThis vulnerability is due to an improper system process that is created at boot time. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute a variety of scripts and commands that allow&nbsp;root access to the device.&nbsp; -- [0xBlackash/CVE-2026-20079](https://github.com/0xBlackash/CVE-2026-20079) +- [0xredash/CVE-2026-20079](https://github.com/0xredash/CVE-2026-20079) - [CyberAuth/CVE-2026-20079](https://github.com/CyberAuth/CVE-2026-20079) - [DiegoArias008/CVE-2026-20079-checker](https://github.com/DiegoArias008/CVE-2026-20079-checker) @@ -4696,7 +4689,7 @@ - [abrahamsurf/sdwan-scanner-CVE-2026-20127](https://github.com/abrahamsurf/sdwan-scanner-CVE-2026-20127) - [sfewer-r7/CVE-2026-20127](https://github.com/sfewer-r7/CVE-2026-20127) - [gigachadusers/cve-2026-20127](https://github.com/gigachadusers/cve-2026-20127) -- [0xBlackash/CVE-2026-20127](https://github.com/0xBlackash/CVE-2026-20127) +- [0xredash/CVE-2026-20127](https://github.com/0xredash/CVE-2026-20127) - [anuththara2007-W/CVE-2026-20127-Exploit-Extension](https://github.com/anuththara2007-W/CVE-2026-20127-Exploit-Extension) ### CVE-2026-20131 (2026-03-04) @@ -4707,7 +4700,7 @@ - [p3Nt3st3r-sTAr/CVE-2026-20131-POC](https://github.com/p3Nt3st3r-sTAr/CVE-2026-20131-POC) - [sak110/CVE-2026-20131](https://github.com/sak110/CVE-2026-20131) - [Hassan-Pouladi/Cisco-FMC-honeypot](https://github.com/Hassan-Pouladi/Cisco-FMC-honeypot) -- [0xBlackash/CVE-2026-20131](https://github.com/0xBlackash/CVE-2026-20131) +- [0xredash/CVE-2026-20131](https://github.com/0xredash/CVE-2026-20131) - [Jwa7470/CVE-2026-20131-Post-Incident-Written-Report](https://github.com/Jwa7470/CVE-2026-20131-Post-Incident-Written-Report) - [basesixtythree/B63-POC-CVE-2026-20131](https://github.com/basesixtythree/B63-POC-CVE-2026-20131) @@ -4785,7 +4778,7 @@ - [HORKimhab/CVE-2026-20245](https://github.com/HORKimhab/CVE-2026-20245) - [fevar54/CVE-2026-20245---Cisco-SD-WAN-Privilege-Escalation-Exploit](https://github.com/fevar54/CVE-2026-20245---Cisco-SD-WAN-Privilege-Escalation-Exploit) -- [0xBlackash/CVE-2026-20245](https://github.com/0xBlackash/CVE-2026-20245) +- [0xredash/CVE-2026-20245](https://github.com/0xredash/CVE-2026-20245) ### CVE-2026-20251 (2026-06-10) @@ -4800,7 +4793,7 @@ - [watchtowrlabs/watchTowr-vs-Splunk-CVE-2026-20253](https://github.com/watchtowrlabs/watchTowr-vs-Splunk-CVE-2026-20253) -- [0xBlackash/CVE-2026-20253](https://github.com/0xBlackash/CVE-2026-20253) +- [0xredash/CVE-2026-20253](https://github.com/0xredash/CVE-2026-20253) - [HORKimhab/CVE-2026-20253](https://github.com/HORKimhab/CVE-2026-20253) - [fevar54/CVE-2026-20253-Splunk-Enterprise-Pre-Auth-RCE-](https://github.com/fevar54/CVE-2026-20253-Splunk-Enterprise-Pre-Auth-RCE-) - [pssec-io/CVE-2026-20253](https://github.com/pssec-io/CVE-2026-20253) @@ -4964,7 +4957,7 @@ - [EleniChristopoulou/PoC-CVE-2026-20841](https://github.com/EleniChristopoulou/PoC-CVE-2026-20841) - [404godd/CVE-2026-20841-PoC](https://github.com/404godd/CVE-2026-20841-PoC) - [whiskeylab/notepad_CVE_2026_20841](https://github.com/whiskeylab/notepad_CVE_2026_20841) -- [0xBlackash/CVE-2026-20841](https://github.com/0xBlackash/CVE-2026-20841) +- [0xredash/CVE-2026-20841](https://github.com/0xredash/CVE-2026-20841) ### CVE-2026-20896 (2026-07-03) @@ -5260,7 +5253,7 @@ - [tc4dy/CVE-2026-21589-PoC-Exploit](https://github.com/tc4dy/CVE-2026-21589-PoC-Exploit) - [aduli198/CVE-2026-21589](https://github.com/aduli198/CVE-2026-21589) - [BimBoxH4/CVE-2026-21589](https://github.com/BimBoxH4/CVE-2026-21589) -- [0xBlackash/CVE-2026-21589](https://github.com/0xBlackash/CVE-2026-21589) +- [0xredash/CVE-2026-21589](https://github.com/0xredash/CVE-2026-21589) - [ynsmroztas/AtlasSniper](https://github.com/ynsmroztas/AtlasSniper) - [rxsklife/CVE-2026-21589](https://github.com/rxsklife/CVE-2026-21589) - [murrez/CVE-2026-21589](https://github.com/murrez/CVE-2026-21589) @@ -5297,7 +5290,7 @@ - [alirezac0/CVE-2026-21643](https://github.com/alirezac0/CVE-2026-21643) -- [0xBlackash/CVE-2026-21643](https://github.com/0xBlackash/CVE-2026-21643) +- [0xredash/CVE-2026-21643](https://github.com/0xredash/CVE-2026-21643) ### CVE-2026-21710 (2026-03-30) @@ -5350,7 +5343,7 @@ - [bgarz929/Ashwesker-CVE-2026-21858](https://github.com/bgarz929/Ashwesker-CVE-2026-21858) - [Alhakim88/CVE-2026-21858](https://github.com/Alhakim88/CVE-2026-21858) - [EQSTLab/CVE-2026-21858](https://github.com/EQSTLab/CVE-2026-21858) -- [0xBlackash/CVE-2026-21858](https://github.com/0xBlackash/CVE-2026-21858) +- [0xredash/CVE-2026-21858](https://github.com/0xredash/CVE-2026-21858) - [kaleth4/CVE-2026-21858](https://github.com/kaleth4/CVE-2026-21858) - [masterwok/PoC-CVE-2026-21858](https://github.com/masterwok/PoC-CVE-2026-21858) - [Bannt08/Research-CVE-2026-21858](https://github.com/Bannt08/Research-CVE-2026-21858) @@ -5403,7 +5396,7 @@ - [George0Papasotiriou/CVE-2026-21962-Oracle-HTTP-Server-WebLogic-Proxy-Plug-in-Critical-](https://github.com/George0Papasotiriou/CVE-2026-21962-Oracle-HTTP-Server-WebLogic-Proxy-Plug-in-Critical-) - [gregk4sec/cve-2026-21962](https://github.com/gregk4sec/cve-2026-21962) - [naozibuhao/CVE-2026-21962_Java_GUI_Exploit_Tool](https://github.com/naozibuhao/CVE-2026-21962_Java_GUI_Exploit_Tool) -- [0xBlackash/CVE-2026-21962](https://github.com/0xBlackash/CVE-2026-21962) +- [0xredash/CVE-2026-21962](https://github.com/0xredash/CVE-2026-21962) - [zeetee1235/CVE-2026-21962](https://github.com/zeetee1235/CVE-2026-21962) - [KaiserdesMonats/CVE-2026-21962-Blog](https://github.com/KaiserdesMonats/CVE-2026-21962-Blog) @@ -5602,7 +5595,7 @@ - [Ashifcoder/CVE-2026-22241](https://github.com/Ashifcoder/CVE-2026-22241) - [CVEs-Labs/CVE-2026-22241](https://github.com/CVEs-Labs/CVE-2026-22241) -- [0xBlackash/CVE-2026-22241](https://github.com/0xBlackash/CVE-2026-22241) +- [0xredash/CVE-2026-22241](https://github.com/0xredash/CVE-2026-22241) ### CVE-2026-22243 (2026-01-28) @@ -5639,7 +5632,7 @@ - [GarethMSheldon/cve-2026-22557-unifi-detection](https://github.com/GarethMSheldon/cve-2026-22557-unifi-detection) -- [0xBlackash/CVE-2026-22557](https://github.com/0xBlackash/CVE-2026-22557) +- [0xredash/CVE-2026-22557](https://github.com/0xredash/CVE-2026-22557) - [ThePotatoOfDoom/CVE-2026-22557-PoC](https://github.com/ThePotatoOfDoom/CVE-2026-22557-PoC) - [BishopFox/CVE-2026-22557-check](https://github.com/BishopFox/CVE-2026-22557-check) - [gagaltotal/CVE-2026-22557-Path-Traversal-Ubiquti-UniFi](https://github.com/gagaltotal/CVE-2026-22557-Path-Traversal-Ubiquti-UniFi) @@ -5788,7 +5781,7 @@ - [0xgh057r3c0n/CVE-2026-22812](https://github.com/0xgh057r3c0n/CVE-2026-22812) - [CayberMods/CVE-2026-22812-POC](https://github.com/CayberMods/CVE-2026-22812-POC) - [HodgeLuke/ai-agent-security-research](https://github.com/HodgeLuke/ai-agent-security-research) -- [0xBlackash/CVE-2026-22812](https://github.com/0xBlackash/CVE-2026-22812) +- [0xredash/CVE-2026-22812](https://github.com/0xredash/CVE-2026-22812) - [Hex-Neo/CVE-2026-22812-OpenCode-RCE-exp](https://github.com/Hex-Neo/CVE-2026-22812-OpenCode-RCE-exp) ### CVE-2026-22849 (2026-01-21) @@ -5896,7 +5889,7 @@ - [HORKimhab/CVE-2026-23111](https://github.com/HORKimhab/CVE-2026-23111) - [criann/check-cve-2026-23111](https://github.com/criann/check-cve-2026-23111) -- [0xBlackash/CVE-2026-23111](https://github.com/0xBlackash/CVE-2026-23111) +- [0xredash/CVE-2026-23111](https://github.com/0xredash/CVE-2026-23111) - [seguridadentrerios/CVE-2026-23111](https://github.com/seguridadentrerios/CVE-2026-23111) - [ishankaru/CVE-2026-23111-nftables-lab](https://github.com/ishankaru/CVE-2026-23111-nftables-lab) - [Baba01hacker666/CVE-2026-23111](https://github.com/Baba01hacker666/CVE-2026-23111) @@ -6315,7 +6308,7 @@ - [athack-ctf/chall2026-telneted](https://github.com/athack-ctf/chall2026-telneted) - [mbanyamer/CVE-2026-24061-GNU-Inetutils-telnetd-Remote-Authentication-Bypass-Root-Shell-](https://github.com/mbanyamer/CVE-2026-24061-GNU-Inetutils-telnetd-Remote-Authentication-Bypass-Root-Shell-) - [setuju/telnetd](https://github.com/setuju/telnetd) -- [0xBlackash/CVE-2026-24061](https://github.com/0xBlackash/CVE-2026-24061) +- [0xredash/CVE-2026-24061](https://github.com/0xredash/CVE-2026-24061) - [HD0x01/CVE-2026-24061-NSE](https://github.com/HD0x01/CVE-2026-24061-NSE) - [przemytn/CVE-2026-24061](https://github.com/przemytn/CVE-2026-24061) - [ekomsSavior/telnet_scan](https://github.com/ekomsSavior/telnet_scan) @@ -6351,7 +6344,7 @@ Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow. -- [wnduddld0513/Lenovo_Qcom_RPMB_Tool](https://github.com/wnduddld0513/Lenovo_Qcom_RPMB_Tool) +- [wnduddld0513/Lenovo-Qcom-RPMB-PoC](https://github.com/wnduddld0513/Lenovo-Qcom-RPMB-PoC) ### CVE-2026-24102 - [SimoesCTT/CTT-Kernel-Resonance-io_uring-Temporal-Phase-Transition](https://github.com/SimoesCTT/CTT-Kernel-Resonance-io_uring-Temporal-Phase-Transition) @@ -6572,7 +6565,7 @@ - [otakuliu/Expression-Sandbox-Escape-Simulation-Lab](https://github.com/otakuliu/Expression-Sandbox-Escape-Simulation-Lab) -- [0xBlackash/CVE-2026-25049](https://github.com/0xBlackash/CVE-2026-25049) +- [0xredash/CVE-2026-25049](https://github.com/0xredash/CVE-2026-25049) ### CVE-2026-25050 (2026-01-30) @@ -6608,7 +6601,7 @@ - [HORKimhab/CVE-2026-25089](https://github.com/HORKimhab/CVE-2026-25089) -- [0xBlackash/CVE-2026-25089](https://github.com/0xBlackash/CVE-2026-25089) +- [0xredash/CVE-2026-25089](https://github.com/0xredash/CVE-2026-25089) ### CVE-2026-25099 (2026-03-27) @@ -6871,7 +6864,7 @@ - [hakaioffsec/CVE-2026-25769](https://github.com/hakaioffsec/CVE-2026-25769) - [Samres27/CVE-2026-25769---CVE-2026-25770](https://github.com/Samres27/CVE-2026-25769---CVE-2026-25770) - [njeru-codes/CVE-2026-25769](https://github.com/njeru-codes/CVE-2026-25769) -- [0xBlackash/CVE-2026-25769](https://github.com/0xBlackash/CVE-2026-25769) +- [0xredash/CVE-2026-25769](https://github.com/0xredash/CVE-2026-25769) ### CVE-2026-25854 (2026-04-09) @@ -7525,7 +7518,7 @@ A chained attack via SQL Expressions and a Grafana Enterprise plugin can lead to a remote arbitrary code execution impact (RCE). This is enabled by a feature in Grafana (OSS), so all users are always recommended to update to avoid future attack vectors going this path.\n\nOnly instances with the sqlExpressions feature toggle enabled are vulnerable.\n\nOnly instances in the following version ranges are affected:\n\n- 11.6.0 (inclusive) to 11.6.14 (exclusive): 11.6.14 has the fix. 11.5 and below are not affected.\n- 12.0.0 (inclusive) to 12.1.10 (exclusive): 12.1.10 has the fix. 12.0 did not receive an update, as it is end-of-life.\n- 12.2.0 (inclusive) to 12.2.8 (exclusive): 12.2.8 has the fix.\n- 12.3.0 (inclusive) to 12.3.6 (exclusive): 12.3.6 has the fix.\n- 12.4.0 (inclusive) to 12.4.2 (exclusive): 12.4.2 has the fix. 13.0.0 and above also have the fix: no v13 release is affected. -- [0xBlackash/CVE-2026-27876](https://github.com/0xBlackash/CVE-2026-27876) +- [0xredash/CVE-2026-27876](https://github.com/0xredash/CVE-2026-27876) - [atiilla/CVE-2026-27876](https://github.com/atiilla/CVE-2026-27876) ### CVE-2026-27884 (2026-02-26) @@ -7642,7 +7635,7 @@ FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. A patch bypass vulnerability for CVE-2026-27636 in FreeScout 1.8.206 and earlier allows any authenticated user with file upload permissions to achieve Remote Code Execution (RCE) on the server by uploading a malicious .htaccess file using a zero-width space character prefix to bypass the security check. The vulnerability exists in the sanitizeUploadedFileName() function in app/Http/Helper.php. The function contains a Time-of-Check to Time-of-Use (TOCTOU) flaw where the dot-prefix check occurs before sanitization removes invisible characters. This vulnerability is fixed in 1.8.207. -- [0xBlackash/CVE-2026-28289](https://github.com/0xBlackash/CVE-2026-28289) +- [0xredash/CVE-2026-28289](https://github.com/0xredash/CVE-2026-28289) ### CVE-2026-28318 (2026-06-04) @@ -8312,7 +8305,7 @@ In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix heap overflow in NFSv4.0 LOCK replay cache\n\nThe NFSv4.0 replay cache uses a fixed 112-byte inline buffer\n(rp_ibuf[NFSD4_REPLAY_ISIZE]) to store encoded operation responses.\nThis size was calculated based on OPEN responses and does not account\nfor LOCK denied responses, which include the conflicting lock owner as\na variable-length field up to 1024 bytes (NFS4_OPAQUE_LIMIT).\n\nWhen a LOCK operation is denied due to a conflict with an existing lock\nthat has a large owner, nfsd4_encode_operation() copies the full encoded\nresponse into the undersized replay buffer via read_bytes_from_xdr_buf()\nwith no bounds check. This results in a slab-out-of-bounds write of up\nto 944 bytes past the end of the buffer, corrupting adjacent heap memory.\n\nThis can be triggered remotely by an unauthenticated attacker with two\ncooperating NFSv4.0 clients: one sets a lock with a large owner string,\nthen the other requests a conflicting lock to provoke the denial.\n\nWe could fix this by increasing NFSD4_REPLAY_ISIZE to allow for a full\nopaque, but that would increase the size of every stateowner, when most\nlockowners are not that large.\n\nInstead, fix this by checking the encoded response length against\nNFSD4_REPLAY_ISIZE before copying into the replay buffer. If the\nresponse is too large, set rp_buflen to 0 to skip caching the replay\npayload. The status is still cached, and the client already received the\ncorrect response on the original request. -- [0xBlackash/CVE-2026-31402](https://github.com/0xBlackash/CVE-2026-31402) +- [0xredash/CVE-2026-31402](https://github.com/0xredash/CVE-2026-31402) ### CVE-2026-31413 (2026-04-12) @@ -8381,7 +8374,7 @@ - [adampielak/CVE-2026-31431_SCA_WAZUH](https://github.com/adampielak/CVE-2026-31431_SCA_WAZUH) - [jiangban046-spec/CVE-2026-31431-exploit_py2_py3](https://github.com/jiangban046-spec/CVE-2026-31431-exploit_py2_py3) - [dorianhhuc/CVE-2026-31431](https://github.com/dorianhhuc/CVE-2026-31431) -- [0xBlackash/CVE-2026-31431](https://github.com/0xBlackash/CVE-2026-31431) +- [0xredash/CVE-2026-31431](https://github.com/0xredash/CVE-2026-31431) - [H1d3r/copy-fail_LPE_Interactive](https://github.com/H1d3r/copy-fail_LPE_Interactive) - [amdisrar/cve-2026-31431-mitigation](https://github.com/amdisrar/cve-2026-31431-mitigation) - [G01d3nW01f/CVE-2026-31431](https://github.com/G01d3nW01f/CVE-2026-31431) @@ -8672,7 +8665,7 @@ In the Linux kernel, the following vulnerability has been resolved:\n\nrxrpc: fix oversized RESPONSE authenticator length check\n\nrxgk_verify_response() decodes auth_len from the packet and is supposed\nto verify that it fits in the remaining bytes. The existing check is\ninverted, so oversized RESPONSE authenticators are accepted and passed\nto rxgk_decrypt_skb(), which can later reach skb_to_sgvec() with an\nimpossible length and hit BUG_ON(len).\n\nDecoded from the original latest-net reproduction logs with\nscripts/decode_stacktrace.sh:\n\nRIP: __skb_to_sgvec()\n [net/core/skbuff.c:5285 (discriminator 1)]\nCall Trace:\n skb_to_sgvec() [net/core/skbuff.c:5305]\n rxgk_decrypt_skb() [net/rxrpc/rxgk_common.h:81]\n rxgk_verify_response() [net/rxrpc/rxgk.c:1268]\n rxrpc_process_connection()\n [net/rxrpc/conn_event.c:266 net/rxrpc/conn_event.c:364\n net/rxrpc/conn_event.c:386]\n process_one_work() [kernel/workqueue.c:3281]\n worker_thread()\n [kernel/workqueue.c:3353 kernel/workqueue.c:3440]\n kthread() [kernel/kthread.c:436]\n ret_from_fork() [arch/x86/kernel/process.c:164]\n\nReject authenticator lengths that exceed the remaining packet payload. -- [0xBlackash/CVE-2026-31635](https://github.com/0xBlackash/CVE-2026-31635) +- [0xredash/CVE-2026-31635](https://github.com/0xredash/CVE-2026-31635) - [0xFuffM3/CVE-2026-31635-DirtyDecrypt](https://github.com/0xFuffM3/CVE-2026-31635-DirtyDecrypt) - [Koshmare-Blossom/DirtyDecrypt-go](https://github.com/Koshmare-Blossom/DirtyDecrypt-go) @@ -8887,7 +8880,7 @@ - [absholi7ly/Elementor-Pro-Unauthenticated-Arbitrary-File-Upload-to-RCE](https://github.com/absholi7ly/Elementor-Pro-Unauthenticated-Arbitrary-File-Upload-to-RCE) -- [0xBlackash/CVE-2026-32475](https://github.com/0xBlackash/CVE-2026-32475) +- [0xredash/CVE-2026-32475](https://github.com/0xredash/CVE-2026-32475) - [Boreas37/CVE-2026-32475-PoC](https://github.com/Boreas37/CVE-2026-32475-PoC) - [sahmsec/CVE-2026-32475](https://github.com/sahmsec/CVE-2026-32475) - [dinosn/cve-2026-32475-elementor-pro-lab](https://github.com/dinosn/cve-2026-32475-elementor-pro-lab) @@ -9060,7 +9053,7 @@ - [z4yd3/PoC-CVE-2026-33017](https://github.com/z4yd3/PoC-CVE-2026-33017) - [EQSTLab/CVE-2026-33017](https://github.com/EQSTLab/CVE-2026-33017) - [masterwok/PoC-CVE-2026-33017](https://github.com/masterwok/PoC-CVE-2026-33017) -- [0xBlackash/CVE-2026-33017](https://github.com/0xBlackash/CVE-2026-33017) +- [0xredash/CVE-2026-33017](https://github.com/0xredash/CVE-2026-33017) - [Jorrit-VM/CVE-2026-33017](https://github.com/Jorrit-VM/CVE-2026-33017) - [arensballiu/CVE-2026-33017-langflow-rce](https://github.com/arensballiu/CVE-2026-33017-langflow-rce) - [c0gnit00/CVE-2026-33017](https://github.com/c0gnit00/CVE-2026-33017) @@ -9415,7 +9408,7 @@ - [Bilal3755/Detecting_blue_hammer_vuln](https://github.com/Bilal3755/Detecting_blue_hammer_vuln) - [kaleth4/CVE-2026-33825](https://github.com/kaleth4/CVE-2026-33825) - [Joe1sn/CVE-2026-33825](https://github.com/Joe1sn/CVE-2026-33825) -- [0xBlackash/CVE-2026-33825](https://github.com/0xBlackash/CVE-2026-33825) +- [0xredash/CVE-2026-33825](https://github.com/0xredash/CVE-2026-33825) - [anasabugaddara-ux/defender-bluehammer-audit](https://github.com/anasabugaddara-ux/defender-bluehammer-audit) - [dntaskmehow/NEO-DEFENDER](https://github.com/dntaskmehow/NEO-DEFENDER) @@ -9526,7 +9519,7 @@ NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Prior to version 2.0.28, NocoBase's Workflow Script Node executes user-supplied JavaScript inside a Node.js vm sandbox with a custom require allowlist (controlled by WORKFLOW_SCRIPT_MODULES env var). However, the console object passed into the sandbox context exposes host-realm WritableWorkerStdio stream objects via console._stdout and console._stderr. An authenticated attacker can traverse the prototype chain to escape the sandbox and achieve Remote Code Execution as root. This issue has been patched in version 2.0.28. -- [0xBlackash/CVE-2026-34156](https://github.com/0xBlackash/CVE-2026-34156) +- [0xredash/CVE-2026-34156](https://github.com/0xredash/CVE-2026-34156) - [Dhananjayasj/CVE-2026-34156-NocoBase-Sandbox-Escape-via-Workflow-Execution-Vulnerability-](https://github.com/Dhananjayasj/CVE-2026-34156-NocoBase-Sandbox-Escape-via-Workflow-Execution-Vulnerability-) ### CVE-2026-34157 @@ -9553,7 +9546,7 @@ Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ.\n\nApache ActiveMQ Classic exposes the Jolokia JMX-HTTP bridge at /api/jolokia/ on the web console. The default Jolokia access policy permits exec operations on all ActiveMQ MBeans (org.apache.activemq:*), including\nBrokerService.addNetworkConnector(String) and BrokerService.addConnector(String).\n\nAn authenticated attacker can invoke these operations with a crafted discovery URI that triggers the VM transport's brokerConfig parameter to load a remote Spring XML application context using ResourceXmlApplicationContext.\nBecause Spring's ResourceXmlApplicationContext instantiates all singleton beans before the BrokerService validates the configuration, arbitrary code execution occurs on the broker's JVM through bean factory methods such as Runtime.exec().\n\n\n\nThis issue affects Apache ActiveMQ Broker: before 5.19.4, from 6.0.0 before 6.2.3; Apache ActiveMQ All: before 5.19.4, from 6.0.0 before 6.2.3; Apache ActiveMQ: before 5.19.4, from 6.0.0 before 6.2.3.\n\n\n\nUsers are recommended to upgrade to version 5.19.4 or 6.2.3, which fixes the issue -- [0xBlackash/CVE-2026-34197](https://github.com/0xBlackash/CVE-2026-34197) +- [0xredash/CVE-2026-34197](https://github.com/0xredash/CVE-2026-34197) - [dinosn/CVE-2026-34197](https://github.com/dinosn/CVE-2026-34197) - [DEVSECURITYSPRO/CVE-2026-34197](https://github.com/DEVSECURITYSPRO/CVE-2026-34197) - [AtoposX-J/CVE-2026-34197-Apache-ActiveMQ-RCE](https://github.com/AtoposX-J/CVE-2026-34197-Apache-ActiveMQ-RCE) @@ -9708,7 +9701,7 @@ Zammad is a web based open source helpdesk/customer support system. Prior to 7.0.1, a server-side template injection vulnerability which leads to RCE via AI Agent exists. Impact is limited to environments where an attacker can control or influence type_enrichment_data (typically high-privilege administrative configuration). This vulnerability is fixed in 7.0.1. -- [0xBlackash/CVE-2026-34724](https://github.com/0xBlackash/CVE-2026-34724) +- [0xredash/CVE-2026-34724](https://github.com/0xredash/CVE-2026-34724) ### CVE-2026-34753 (2026-04-06) @@ -9868,7 +9861,7 @@ - [HORKimhab/CVE-2026-35273](https://github.com/HORKimhab/CVE-2026-35273) -- [0xBlackash/CVE-2026-35273](https://github.com/0xBlackash/CVE-2026-35273) +- [0xredash/CVE-2026-35273](https://github.com/0xredash/CVE-2026-35273) - [12hrformat/CVE-2026-35273-POC](https://github.com/12hrformat/CVE-2026-35273-POC) - [rayo0009/CVE-2026-35273-Oracle-PeopleSoft-PeopleTools-Zero-Day-](https://github.com/rayo0009/CVE-2026-35273-Oracle-PeopleSoft-PeopleTools-Zero-Day-) @@ -9953,7 +9946,7 @@ A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests. -- [0xBlackash/CVE-2026-35616](https://github.com/0xBlackash/CVE-2026-35616) +- [0xredash/CVE-2026-35616](https://github.com/0xredash/CVE-2026-35616) - [fevar54/CVE-2026-35616-detector.py](https://github.com/fevar54/CVE-2026-35616-detector.py) - [fevar54/forticlient_ems_cve_2026_35616_poc.py](https://github.com/fevar54/forticlient_ems_cve_2026_35616_poc.py) - [BishopFox/CVE-2026-35616-check](https://github.com/BishopFox/CVE-2026-35616-check) @@ -10620,7 +10613,7 @@ - [samu-delucas/CVE-2026-39808](https://github.com/samu-delucas/CVE-2026-39808) -- [0xBlackash/CVE-2026-39808](https://github.com/0xBlackash/CVE-2026-39808) +- [0xredash/CVE-2026-39808](https://github.com/0xredash/CVE-2026-39808) - [ynsmroztas/FortiSandbox-RCE-Exploit-CVE-2026-39808](https://github.com/ynsmroztas/FortiSandbox-RCE-Exploit-CVE-2026-39808) - [HORKimhab/CVE-2026-39808](https://github.com/HORKimhab/CVE-2026-39808) - [error-inside/CVE-2026-39808](https://github.com/error-inside/CVE-2026-39808) @@ -10632,7 +10625,7 @@ A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attacker to escalation of privilege via specially crafted HTTP requests. -- [0xBlackash/CVE-2026-39813](https://github.com/0xBlackash/CVE-2026-39813) +- [0xredash/CVE-2026-39813](https://github.com/0xredash/CVE-2026-39813) - [HORKimhab/CVE-2026-39813](https://github.com/HORKimhab/CVE-2026-39813) ### CVE-2026-39816 (2026-05-08) @@ -10711,7 +10704,7 @@ marimo is a reactive Python notebook. Prior to 0.23.0, Marimo has a Pre-Auth RCE vulnerability. The terminal WebSocket endpoint /terminal/ws lacks authentication validation, allowing an unauthenticated attacker to obtain a full PTY shell and execute arbitrary system commands. Unlike other WebSocket endpoints (e.g., /ws) that correctly call validate_auth() for authentication, the /terminal/ws endpoint only checks the running mode and platform support before accepting connections, completely skipping authentication verification. This vulnerability is fixed in 0.23.0. -- [0xBlackash/CVE-2026-39987](https://github.com/0xBlackash/CVE-2026-39987) +- [0xredash/CVE-2026-39987](https://github.com/0xredash/CVE-2026-39987) - [fevar54/marimo_CVE-2026-39987_RCE_PoC](https://github.com/fevar54/marimo_CVE-2026-39987_RCE_PoC) - [mki9/CVE-2026-39987_exploit](https://github.com/mki9/CVE-2026-39987_exploit) - [keraattin/CVE-2026-39987](https://github.com/keraattin/CVE-2026-39987) @@ -10795,7 +10788,7 @@ Axios is a promise based HTTP client for the browser and Node.js. Versions prior to 1.15.0 and 0.3.1 are vulnerable to a specific gadget-style attack chain in which prototype pollution in a third-party dependency may be leveraged to inject unsanitized header values into outbound requests. This vulnerability is fixed in 1.15.0 and 0.3.1. -- [0xBlackash/CVE-2026-40175](https://github.com/0xBlackash/CVE-2026-40175) +- [0xredash/CVE-2026-40175](https://github.com/0xredash/CVE-2026-40175) - [surri/audit-axios](https://github.com/surri/audit-axios) - [LeeKangHyun/axios-security-guide](https://github.com/LeeKangHyun/axios-security-guide) - [pjt3591oo/CVE-2026-40175-poc](https://github.com/pjt3591oo/CVE-2026-40175-poc) @@ -10854,7 +10847,7 @@ - [orinimron123/CVE-2026-40369-EXPLOIT](https://github.com/orinimron123/CVE-2026-40369-EXPLOIT) - [ercihan/CVE-2026-40369](https://github.com/ercihan/CVE-2026-40369) - [piffd0s/ntoskrnl-metadata](https://github.com/piffd0s/ntoskrnl-metadata) -- [0xBlackash/CVE-2026-40369](https://github.com/0xBlackash/CVE-2026-40369) +- [0xredash/CVE-2026-40369](https://github.com/0xredash/CVE-2026-40369) - [CCELEND/CVE-2026-40369](https://github.com/CCELEND/CVE-2026-40369) - [dbgbgtf1/cve-2026-40369-exploit](https://github.com/dbgbgtf1/cve-2026-40369-exploit) - [ZeroDayEvil/CVE-2026-40369-EXPLOIT](https://github.com/ZeroDayEvil/CVE-2026-40369-EXPLOIT) @@ -11002,8 +10995,7 @@ - [0xABCD01/CVE-2026-41089](https://github.com/0xABCD01/CVE-2026-41089) -- [jelasin/CVE-2026-41089](https://github.com/jelasin/CVE-2026-41089) -- [0xBlackash/CVE-2026-41089](https://github.com/0xBlackash/CVE-2026-41089) +- [0xredash/CVE-2026-41089](https://github.com/0xredash/CVE-2026-41089) - [ADScanPro/CVE-2026-41089-LongLogon](https://github.com/ADScanPro/CVE-2026-41089-LongLogon) - [ZeroDayVPN/CVE-2026-41089-Netlogon](https://github.com/ZeroDayVPN/CVE-2026-41089-Netlogon) - [SyntaxMethod/CVE-2026-41089-Netlogon-RCE-PoC](https://github.com/SyntaxMethod/CVE-2026-41089-Netlogon-RCE-PoC) @@ -11015,7 +11007,7 @@ Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally. -- [0xBlackash/CVE-2026-41091](https://github.com/0xBlackash/CVE-2026-41091) +- [0xredash/CVE-2026-41091](https://github.com/0xredash/CVE-2026-41091) - [ridhinva/defender-privilege-escalation-scanner](https://github.com/ridhinva/defender-privilege-escalation-scanner) - [tc4dy/CVE-2026-41091-PoC-Exploit](https://github.com/tc4dy/CVE-2026-41091-PoC-Exploit) - [s4m98/RedSun-](https://github.com/s4m98/RedSun-) @@ -11118,7 +11110,7 @@ ProjeQtor versions 7.0 through 12.4.3 contain an unauthenticated SQL injection vulnerability in the login functionality where the login variable is directly concatenated into a SQL query without parameterization or sanitization. Attackers can inject arbitrary SQL expressions through the username field at the authentication endpoint to create privileged accounts, read sensitive data, and execute operating system commands if the database user has elevated permissions. -- [0xBlackash/CVE-2026-41462](https://github.com/0xBlackash/CVE-2026-41462) +- [0xredash/CVE-2026-41462](https://github.com/0xredash/CVE-2026-41462) ### CVE-2026-41472 (2026-04-24) @@ -11169,7 +11161,7 @@ - [Vozec/CVE-2026-41651](https://github.com/Vozec/CVE-2026-41651) - [CipherCloak/CVE-2026-41651](https://github.com/CipherCloak/CVE-2026-41651) -- [0xBlackash/CVE-2026-41651](https://github.com/0xBlackash/CVE-2026-41651) +- [0xredash/CVE-2026-41651](https://github.com/0xredash/CVE-2026-41651) - [baph00met/CVE-2026-41651](https://github.com/baph00met/CVE-2026-41651) - [dinosn/pack2theroot-lab](https://github.com/dinosn/pack2theroot-lab) - [shibaaa204/Pack2TheRoot](https://github.com/shibaaa204/Pack2TheRoot) @@ -11260,7 +11252,7 @@ - [kmaruthisrikar/CVE-2026-41940-cPanel-Auth-Bypass-Exploit](https://github.com/kmaruthisrikar/CVE-2026-41940-cPanel-Auth-Bypass-Exploit) - [Jenderal92/CVE-2026-41940](https://github.com/Jenderal92/CVE-2026-41940) - [XsanFlip/poc-cpanel-cve-2026-41940](https://github.com/XsanFlip/poc-cpanel-cve-2026-41940) -- [0xBlackash/CVE-2026-41940](https://github.com/0xBlackash/CVE-2026-41940) +- [0xredash/CVE-2026-41940](https://github.com/0xredash/CVE-2026-41940) - [vineet7800/cpanel-malware-cleaner-cve-2026](https://github.com/vineet7800/cpanel-malware-cleaner-cve-2026) - [AmirrezaMarzban/portscan-CVE-2026-41940](https://github.com/AmirrezaMarzban/portscan-CVE-2026-41940) - [MrAriaNet/cPanel-Fix](https://github.com/MrAriaNet/cPanel-Fix) @@ -11382,7 +11374,7 @@ - [imjdl/CVE-2026-42208_lab](https://github.com/imjdl/CVE-2026-42208_lab) -- [0xBlackash/CVE-2026-42208](https://github.com/0xBlackash/CVE-2026-42208) +- [0xredash/CVE-2026-42208](https://github.com/0xredash/CVE-2026-42208) - [Zeltoc/threat-intel-brief-cve-2026-42208-litellm](https://github.com/Zeltoc/threat-intel-brief-cve-2026-42208-litellm) - [rootdirective-sec/CVE-2026-42208-Lab](https://github.com/rootdirective-sec/CVE-2026-42208-Lab) - [ridhinva/litellm-sqli-scanner](https://github.com/ridhinva/litellm-sqli-scanner) @@ -11452,7 +11444,7 @@ - [HORKimhab/CVE-2026-42530](https://github.com/HORKimhab/CVE-2026-42530) - [v4ltonn/CVE-2026-42530](https://github.com/v4ltonn/CVE-2026-42530) -- [0xBlackash/CVE-2026-42530](https://github.com/0xBlackash/CVE-2026-42530) +- [0xredash/CVE-2026-42530](https://github.com/0xredash/CVE-2026-42530) ### CVE-2026-42533 (2026-07-15) @@ -11465,8 +11457,8 @@ - [suominen/CVE-2026-42533](https://github.com/suominen/CVE-2026-42533) - [seguridadentrerios/CVE-2026-42533](https://github.com/seguridadentrerios/CVE-2026-42533) - [gagaltotal/CVE-2026-42533-nginx](https://github.com/gagaltotal/CVE-2026-42533-nginx) -- [jelasin/CVE-2026-42533](https://github.com/jelasin/CVE-2026-42533) - [imbas007/CVE-2026-42533](https://github.com/imbas007/CVE-2026-42533) +- [0xh3y3/cve-2026-42533](https://github.com/0xh3y3/cve-2026-42533) - [0xCyberstan/CVE-2026-42533-POC](https://github.com/0xCyberstan/CVE-2026-42533-POC) - [Leeyoonjoo/CVE-2026-42533](https://github.com/Leeyoonjoo/CVE-2026-42533) - [FranklinF25/cve-2026-42533](https://github.com/FranklinF25/cve-2026-42533) @@ -11498,7 +11490,7 @@ phpVMS is a PHP application to run and simulate an airline. Prior to version 7.0.6, a critical vulnerability in phpVMS allowed unauthenticated access to a legacy import feature. This issue has been patched in version 7.0.6. -- [0xBlackash/CVE-2026-42569](https://github.com/0xBlackash/CVE-2026-42569) +- [0xredash/CVE-2026-42569](https://github.com/0xredash/CVE-2026-42569) ### CVE-2026-42588 (2026-06-01) @@ -11608,13 +11600,12 @@ - [cipherspy/CVE-2026-42945-POC](https://github.com/cipherspy/CVE-2026-42945-POC) - [nanwinata/nginxrift-CVE-2026-42945](https://github.com/nanwinata/nginxrift-CVE-2026-42945) - [rheodev/CVE-2026-42945](https://github.com/rheodev/CVE-2026-42945) -- [0xBlackash/CVE-2026-42945](https://github.com/0xBlackash/CVE-2026-42945) +- [0xredash/CVE-2026-42945](https://github.com/0xredash/CVE-2026-42945) - [ChamsBouzaiene/ai-vuln-rediscovery-nginx-cve-2026-42945](https://github.com/ChamsBouzaiene/ai-vuln-rediscovery-nginx-cve-2026-42945) - [oseasfr/Scanner_CVE_2026-42945](https://github.com/oseasfr/Scanner_CVE_2026-42945) - [forxiucn/nginx-cve-2026-42945-poc](https://github.com/forxiucn/nginx-cve-2026-42945-poc) - [chenqin231/CVE-2026-42945](https://github.com/chenqin231/CVE-2026-42945) - [iammerrida-source/nginx-rift-detect](https://github.com/iammerrida-source/nginx-rift-detect) -- [jelasin/CVE-2026-42945](https://github.com/jelasin/CVE-2026-42945) - [soksofos/wazuh-nginx-cve-2026-42945-sca-lab](https://github.com/soksofos/wazuh-nginx-cve-2026-42945-sca-lab) - [byezero/nginx-cve-2026-42945-check](https://github.com/byezero/nginx-cve-2026-42945-check) - [dinosn/cve-2026-42945-nginx32-lab](https://github.com/dinosn/cve-2026-42945-nginx32-lab) @@ -11627,6 +11618,7 @@ - [imSre9/CVE-2026-42945](https://github.com/imSre9/CVE-2026-42945) - [RedCrazyGhost/CVE-2026-42945](https://github.com/RedCrazyGhost/CVE-2026-42945) - [fkj-src/fix_nginx_cve_2026_42945](https://github.com/fkj-src/fix_nginx_cve_2026_42945) +- [richard-rodriguez26/CVE-2026-42945](https://github.com/richard-rodriguez26/CVE-2026-42945) - [gagaltotal/CVE-2026-42945-NGINX-Rift-Toolkit](https://github.com/gagaltotal/CVE-2026-42945-NGINX-Rift-Toolkit) - [yusufdalbudak/CVE-2026-42945](https://github.com/yusufdalbudak/CVE-2026-42945) - [F2u0a0d3/CVE-2026-42945-nginx-rift-poc](https://github.com/F2u0a0d3/CVE-2026-42945-nginx-rift-poc) @@ -11683,7 +11675,7 @@ - [Percivalll/Dirty-Frag-Kubernetes-PoC](https://github.com/Percivalll/Dirty-Frag-Kubernetes-PoC) - [scriptzteam/Paranoid-Dirty-Frag-CVE-2026-43284](https://github.com/scriptzteam/Paranoid-Dirty-Frag-CVE-2026-43284) - [mym0us3r/DIRTY-FRAG-Detection-with-Wazuh-4.14.4](https://github.com/mym0us3r/DIRTY-FRAG-Detection-with-Wazuh-4.14.4) -- [0xBlackash/CVE-2026-43284](https://github.com/0xBlackash/CVE-2026-43284) +- [0xredash/CVE-2026-43284](https://github.com/0xredash/CVE-2026-43284) - [suominen/CVE-2026-43284](https://github.com/suominen/CVE-2026-43284) - [AK777177/Dirty-Frag-Analysis](https://github.com/AK777177/Dirty-Frag-Analysis) - [haydenjames/dirty-frag-check](https://github.com/haydenjames/dirty-frag-check) @@ -11729,7 +11721,7 @@ - [suominen/pintheft](https://github.com/suominen/pintheft) -- [0xBlackash/CVE-2026-43494](https://github.com/0xBlackash/CVE-2026-43494) +- [0xredash/CVE-2026-43494](https://github.com/0xredash/CVE-2026-43494) - [Kagantua/PinTheft-go](https://github.com/Kagantua/PinTheft-go) - [jayhutajulu1/CVE-2026-43494-PinTheft-PoC](https://github.com/jayhutajulu1/CVE-2026-43494-PinTheft-PoC) - [tanzz1337/CVE-2026-43494-PinTheft-PoC](https://github.com/tanzz1337/CVE-2026-43494-PinTheft-PoC) @@ -11742,7 +11734,7 @@ - [MobiusM/CVE-2026-43499](https://github.com/MobiusM/CVE-2026-43499) - [HORKimhab/CVE-2026-43499](https://github.com/HORKimhab/CVE-2026-43499) -- [0xBlackash/CVE-2026-43499](https://github.com/0xBlackash/CVE-2026-43499) +- [0xredash/CVE-2026-43499](https://github.com/0xredash/CVE-2026-43499) - [tc3650/CVE-2026-43499-armv7](https://github.com/tc3650/CVE-2026-43499-armv7) - [suominen/ghostlock](https://github.com/suominen/ghostlock) - [pubglite55/oppofindN2-ghostlock](https://github.com/pubglite55/oppofindN2-ghostlock) @@ -11940,7 +11932,7 @@ In the Linux kernel, the following vulnerability has been resolved:\n\nnet: skbuff: propagate shared-frag marker through frag-transfer helpers\n\nTwo frag-transfer helpers (__pskb_copy_fclone() and skb_shift()) fail\nto propagate the SKBFL_SHARED_FRAG bit in skb_shinfo()->flags when\nmoving frags from source to destination. __pskb_copy_fclone() defers\nthe rest of the shinfo metadata to skb_copy_header() after copying\nfrag descriptors, but that helper only carries over gso_{size,segs,\ntype} and never touches skb_shinfo()->flags; skb_shift() moves frag\ndescriptors directly and leaves flags untouched. As a result, the\ndestination skb keeps a reference to the same externally-owned or\npage-cache-backed pages while reporting skb_has_shared_frag() as\nfalse.\n\nThe mismatch is harmful in any in-place writer that uses\nskb_has_shared_frag() to decide whether shared pages must be detoured\nthrough skb_cow_data(). ESP input is one such writer (esp4.c,\nesp6.c), and a single nft 'dup to <local>' rule -- or any other\nnf_dup_ipv4() / xt_TEE caller -- is enough to land a pskb_copy()'d\nskb in esp_input() with the marker stripped, letting an unprivileged\nuser write into the page cache of a root-owned read-only file via\nauthencesn-ESN stray writes.\n\nSet SKBFL_SHARED_FRAG on the destination whenever frag descriptors\nwere actually moved from the source. skb_copy() and skb_copy_expand()\nshare skb_copy_header() too but linearize all paged data into freshly\nallocated head storage and emerge with nr_frags == 0, so\nskb_has_shared_frag() returns false on its own; they need no change.\n\nThe same omission exists in skb_gro_receive() and skb_gro_receive_list().\nThe former moves the incoming skb's frag descriptors into the\naccumulator's last sub-skb via two paths (a direct frag-move loop and\nthe head_frag + memcpy path); the latter chains the incoming skb whole\nonto p's frag_list. Downstream skb_segment() reads only\nskb_shinfo(p)->flags, and skb_segment_list() reuses each sub-skb's\nshinfo as the nskb -- both p and lp must carry the marker.\n\nThe same omission also exists in tcp_clone_payload(), which builds an\nMTU probe skb by moving frag descriptors from skbs on sk_write_queue\ninto a freshly allocated nskb. The helper falls into the same family\nand warrants the same fix for consistency; no TCP TX-side in-place\nwriter is currently known to reach a user page through this gap, but\na future consumer depending on the marker would regress silently.\n\nThe same omission exists in skb_segment(): the per-iteration flag\nmerge takes only head_skb's flag, and the inner switch that rebinds\nfrag_skb to list_skb on head_skb-frags exhaustion does not fold the\nnew frag_skb's flag into nskb. Fold frag_skb's flag at both sites\nso segments drawing frags from frag_list members carry the marker. -- [0xBlackash/CVE-2026-43503](https://github.com/0xBlackash/CVE-2026-43503) +- [0xredash/CVE-2026-43503](https://github.com/0xredash/CVE-2026-43503) - [mooder1/dirtyclone-CVE-2026-43503](https://github.com/mooder1/dirtyclone-CVE-2026-43503) - [sec0x/CVE-2026-43503](https://github.com/sec0x/CVE-2026-43503) - [douglasmun/pagecache-lpe-containment-kit](https://github.com/douglasmun/pagecache-lpe-containment-kit) @@ -12036,7 +12028,7 @@ - [Malwation/CVE-2026-43786](https://github.com/Malwation/CVE-2026-43786) -- [0xBlackash/CVE-2026-43786](https://github.com/0xBlackash/CVE-2026-43786) +- [0xredash/CVE-2026-43786](https://github.com/0xredash/CVE-2026-43786) ### CVE-2026-43805 (2026-07-27) @@ -12135,7 +12127,7 @@ A improper access control vulnerability in Fortinet FortiAuthenticator 8.0.2, FortiAuthenticator 8.0.0, FortiAuthenticator 6.6.0 through 6.6.8, FortiAuthenticator 6.5.0 through 6.5.6 may allow attacker to execute unauthorized code or commands via crafted requests. -- [0xBlackash/CVE-2026-44277](https://github.com/0xBlackash/CVE-2026-44277) +- [0xredash/CVE-2026-44277](https://github.com/0xredash/CVE-2026-44277) ### CVE-2026-44338 (2026-05-08) @@ -12187,7 +12179,7 @@ - [tocong282/CVE-2026-44578-PoC](https://github.com/tocong282/CVE-2026-44578-PoC) - [love07oj/nextjs-cve-2026-44578](https://github.com/love07oj/nextjs-cve-2026-44578) - [dinosn/CVE-2026-44578](https://github.com/dinosn/CVE-2026-44578) -- [0xBlackash/CVE-2026-44578](https://github.com/0xBlackash/CVE-2026-44578) +- [0xredash/CVE-2026-44578](https://github.com/0xredash/CVE-2026-44578) - [lxxexxbxx/CVE-2026-44578](https://github.com/lxxexxbxx/CVE-2026-44578) - [isaca0315/CVE-2026-44578-next-js-ssrf](https://github.com/isaca0315/CVE-2026-44578-next-js-ssrf) @@ -12454,7 +12446,7 @@ - [HORKimhab/CVE-2026-45447](https://github.com/HORKimhab/CVE-2026-45447) -- [0xBlackash/CVE-2026-45447](https://github.com/0xBlackash/CVE-2026-45447) +- [0xredash/CVE-2026-45447](https://github.com/0xredash/CVE-2026-45447) ### CVE-2026-45498 (2026-05-20) @@ -12485,7 +12477,7 @@ - [bjbakker1984/Yellowkey-mitigation](https://github.com/bjbakker1984/Yellowkey-mitigation) - [everest90909/YellowKey-WinRE-Remediation](https://github.com/everest90909/YellowKey-WinRE-Remediation) - [andrei-majer/bitlocker-hardening](https://github.com/andrei-majer/bitlocker-hardening) -- [0xBlackash/CVE-2026-45585](https://github.com/0xBlackash/CVE-2026-45585) +- [0xredash/CVE-2026-45585](https://github.com/0xredash/CVE-2026-45585) - [ChanderManiPandey2022/Yellow-Key-Check](https://github.com/ChanderManiPandey2022/Yellow-Key-Check) - [ChanderManiPandey2022/YellowKey-BitLocker-Bypass-CVE-2026-45585-Detect-Fix-Automatically-via-Microsoft-Intune](https://github.com/ChanderManiPandey2022/YellowKey-BitLocker-Bypass-CVE-2026-45585-Detect-Fix-Automatically-via-Microsoft-Intune) - [Desireeontrial76/yellowkey-bitlocker](https://github.com/Desireeontrial76/yellowkey-bitlocker) @@ -12543,7 +12535,7 @@ - [fevar54/FULL-ANALYSIS---CVE-2026-45829-ChromaDB-](https://github.com/fevar54/FULL-ANALYSIS---CVE-2026-45829-ChromaDB-) -- [0xBlackash/CVE-2026-45829](https://github.com/0xBlackash/CVE-2026-45829) +- [0xredash/CVE-2026-45829](https://github.com/0xredash/CVE-2026-45829) ### CVE-2026-45833 (2026-06-12) @@ -12566,7 +12558,7 @@ In the Linux kernel, the following vulnerability has been resolved:\n\neventpoll: fix ep_remove struct eventpoll / struct file UAF\n\nep_remove() (via ep_remove_file()) cleared file->f_ep under\nfile->f_lock but then kept using @file inside the critical section\n(is_file_epoll(), hlist_del_rcu() through the head, spin_unlock).\nA concurrent __fput() taking the eventpoll_release() fastpath in\nthat window observed the transient NULL, skipped\neventpoll_release_file() and ran to f_op->release / file_free().\n\nFor the epoll-watches-epoll case, f_op->release is\nep_eventpoll_release() -> ep_clear_and_put() -> ep_free(), which\nkfree()s the watched struct eventpoll. Its embedded ->refs\nhlist_head is exactly where epi->fllink.pprev points, so the\nsubsequent hlist_del_rcu()'s "*pprev = next" scribbles into freed\nkmalloc-192 memory.\n\nIn addition, struct file is SLAB_TYPESAFE_BY_RCU, so the slot\nbacking @file could be recycled by alloc_empty_file() --\nreinitializing f_lock and f_ep -- while ep_remove() is still\nnominally inside that lock. The upshot is an attacker-controllable\nkmem_cache_free() against the wrong slab cache.\n\nPin @file via epi_fget() at the top of ep_remove() and gate the\ncritical section on the pin succeeding. With the pin held @file\ncannot reach refcount zero, which holds __fput() off and\ntransitively keeps the watched struct eventpoll alive across the\nhlist_del_rcu() and the f_lock use, closing both UAFs.\n\nIf the pin fails @file has already reached refcount zero and its\n__fput() is in flight. Because we bailed before clearing f_ep,\nthat path takes the eventpoll_release() slow path into\neventpoll_release_file() and blocks on ep->mtx until the waiter\nside's ep_clear_and_put() drops it. The bailed epi's share of\nep->refcount stays intact, so the trailing ep_refcount_dec_and_test()\nin ep_clear_and_put() cannot free the eventpoll out from under\neventpoll_release_file(); the orphaned epi is then cleaned up\nthere.\n\nA successful pin also proves we are not racing\neventpoll_release_file() on this epi, so drop the now-redundant\nre-check of epi->dying under f_lock. The cheap lockless\nREAD_ONCE(epi->dying) fast-path bailout stays. -- [0xBlackash/CVE-2026-46242](https://github.com/0xBlackash/CVE-2026-46242) +- [0xredash/CVE-2026-46242](https://github.com/0xredash/CVE-2026-46242) - [SaithFranklinB/ScannerBadEpoll](https://github.com/SaithFranklinB/ScannerBadEpoll) - [Baba01hacker666/CVE-2026-46242](https://github.com/Baba01hacker666/CVE-2026-46242) - [BinaryMasc/CVE-2026-46242](https://github.com/BinaryMasc/CVE-2026-46242) @@ -12581,7 +12573,7 @@ - [Koshmare-Blossom/CIFSwitch-go](https://github.com/Koshmare-Blossom/CIFSwitch-go) - [MrForkBomb/CIFSwitch-Checker-CVE-2026-46243](https://github.com/MrForkBomb/CIFSwitch-Checker-CVE-2026-46243) - [liamromanis101/cifswitch-check](https://github.com/liamromanis101/cifswitch-check) -- [0xBlackash/CVE-2026-46243](https://github.com/0xBlackash/CVE-2026-46243) +- [0xredash/CVE-2026-46243](https://github.com/0xredash/CVE-2026-46243) ### CVE-2026-46275 (2026-06-08) @@ -12597,7 +12589,7 @@ - [HORKimhab/CVE-2026-46300](https://github.com/HORKimhab/CVE-2026-46300) - [Sentebale/CVE-2026-46300](https://github.com/Sentebale/CVE-2026-46300) -- [0xBlackash/CVE-2026-46300](https://github.com/0xBlackash/CVE-2026-46300) +- [0xredash/CVE-2026-46300](https://github.com/0xredash/CVE-2026-46300) - [ExploitEoom/CVE-2026-46300](https://github.com/ExploitEoom/CVE-2026-46300) - [First-John/cve_2026_frag_family_fix](https://github.com/First-John/cve_2026_frag_family_fix) - [Koshmare-Blossom/Fragnesia-go](https://github.com/Koshmare-Blossom/Fragnesia-go) @@ -12624,7 +12616,7 @@ - [sgkdev/packet_edit_meme](https://github.com/sgkdev/packet_edit_meme) -- [0xBlackash/CVE-2026-46331](https://github.com/0xBlackash/CVE-2026-46331) +- [0xredash/CVE-2026-46331](https://github.com/0xredash/CVE-2026-46331) - [HORKimhab/CVE-2026-46331](https://github.com/HORKimhab/CVE-2026-46331) - [vulnquest58/dirtyclone-exploit](https://github.com/vulnquest58/dirtyclone-exploit) - [Quaerendir/cve-2026-46331-audit](https://github.com/Quaerendir/cve-2026-46331-audit) @@ -12645,7 +12637,7 @@ - [KaraZajac/CHARON](https://github.com/KaraZajac/CHARON) - [st4rburn/public-passwd](https://github.com/st4rburn/public-passwd) -- [0xBlackash/CVE-2026-46333](https://github.com/0xBlackash/CVE-2026-46333) +- [0xredash/CVE-2026-46333](https://github.com/0xredash/CVE-2026-46333) - [studiogangster/CVE-2026-46333](https://github.com/studiogangster/CVE-2026-46333) - [dr4mohamed/CVE-2026-46333](https://github.com/dr4mohamed/CVE-2026-46333) @@ -12857,7 +12849,7 @@ Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Payments. Successful attacks of this vulnerability can result in takeover of Oracle Payments. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). -- [0xBlackash/CVE-2026-46817](https://github.com/0xBlackash/CVE-2026-46817) +- [0xredash/CVE-2026-46817](https://github.com/0xredash/CVE-2026-46817) - [HORKimhab/CVE-2026-46817](https://github.com/HORKimhab/CVE-2026-46817) ### CVE-2026-46858 (2026-06-16) @@ -12979,7 +12971,7 @@ Squid is a caching proxy for the Web. Prior to 7.6, due to an improper validation of syntactic correctness of input in the FTP gateway (src/clients/FtpGateway.cc), Squid is vulnerable to an out-of-bounds read: when a listing entry date in the TypeA or TypeB directory-listing formats is not followed by a filename, parsing was not restricted to the input buffer, so a trusted client accessing a misbehaving FTP server through Squid's gateway feature could read memory from random unrelated transactions. This issue is fixed in version 7.6. -- [0xBlackash/CVE-2026-47729](https://github.com/0xBlackash/CVE-2026-47729) +- [0xredash/CVE-2026-47729](https://github.com/0xredash/CVE-2026-47729) ### CVE-2026-47761 (2026-05-28) @@ -13244,7 +13236,7 @@ - [ywh-jfellus/CVE-2026-48907](https://github.com/ywh-jfellus/CVE-2026-48907) -- [0xBlackash/CVE-2026-48907](https://github.com/0xBlackash/CVE-2026-48907) +- [0xredash/CVE-2026-48907](https://github.com/0xredash/CVE-2026-48907) - [87achrafg-stack/CVE-2026-48907](https://github.com/87achrafg-stack/CVE-2026-48907) - [HORKimhab/CVE-2026-48907](https://github.com/HORKimhab/CVE-2026-48907) - [wearehackers160/CVE-2026-48907](https://github.com/wearehackers160/CVE-2026-48907) @@ -13272,7 +13264,7 @@ - [papageo75/CVE-2026-48908-PoC](https://github.com/papageo75/CVE-2026-48908-PoC) - [gagaltotal/CVE-2026-48908-SP-Page-Builder-Joomla](https://github.com/gagaltotal/CVE-2026-48908-SP-Page-Builder-Joomla) -- [0xBlackash/CVE-2026-48908](https://github.com/0xBlackash/CVE-2026-48908) +- [0xredash/CVE-2026-48908](https://github.com/0xredash/CVE-2026-48908) - [ayiezola/CVE-2026-48908](https://github.com/ayiezola/CVE-2026-48908) - [bayu06802/CVE-2026-48908](https://github.com/bayu06802/CVE-2026-48908) - [Jenderal92/CVE-2026-48908](https://github.com/Jenderal92/CVE-2026-48908) @@ -13678,7 +13670,7 @@ - [g0thamRabb1t/CVE-2026-50656-rogueplanet-validation](https://github.com/g0thamRabb1t/CVE-2026-50656-rogueplanet-validation) -- [0xBlackash/CVE-2026-50656](https://github.com/0xBlackash/CVE-2026-50656) +- [0xredash/CVE-2026-50656](https://github.com/0xredash/CVE-2026-50656) - [HORKimhab/CVE-2026-50656](https://github.com/HORKimhab/CVE-2026-50656) - [eh-amish/Windows-Defender-Security-Auditor-CVE-2026-50656-](https://github.com/eh-amish/Windows-Defender-Security-Auditor-CVE-2026-50656-) @@ -13702,7 +13694,7 @@ - [WadesWeaponShed/CVE-2026-50751-Mitigation-Scripts](https://github.com/WadesWeaponShed/CVE-2026-50751-Mitigation-Scripts) -- [0xBlackash/CVE-2026-50751](https://github.com/0xBlackash/CVE-2026-50751) +- [0xredash/CVE-2026-50751](https://github.com/0xredash/CVE-2026-50751) - [fevar54/CVE-2026-50751---Check-Point-IKEv1-Authentication-Bypass-Exploit](https://github.com/fevar54/CVE-2026-50751---Check-Point-IKEv1-Authentication-Bypass-Exploit) - [fernstedt/CVE-2026-50751](https://github.com/fernstedt/CVE-2026-50751) - [watchtowrlabs/watchTowr-vs-Check-Point-CVE-2026-50751](https://github.com/watchtowrlabs/watchTowr-vs-Check-Point-CVE-2026-50751) @@ -14076,7 +14068,7 @@ - [HORKimhab/CVE-2026-53359](https://github.com/HORKimhab/CVE-2026-53359) -- [0xBlackash/CVE-2026-53359](https://github.com/0xBlackash/CVE-2026-53359) +- [0xredash/CVE-2026-53359](https://github.com/0xredash/CVE-2026-53359) - [Aoripus-LTD/Januscape-Hotfix](https://github.com/Aoripus-LTD/Januscape-Hotfix) - [chuzhongyun/CVE-2026-53359-Kernel-Fix](https://github.com/chuzhongyun/CVE-2026-53359-Kernel-Fix) - [suominen/januscape](https://github.com/suominen/januscape) @@ -14244,7 +14236,7 @@ odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to version 25.12, odhcpd's DHCPv6 IA response handler writes past the end of a fixed 512-byte stack buffer (pdbuf) when a single DHCPv6 REQUEST carries enough IA options to nearly exhaust the reply space. Two independent overflow sites exist in the same call chain, both reachable from the network via a single unauthenticated UDP packet. odhcpd runs as root on OpenWrt; embedded targets often lack stack canaries and ASLR, making code execution realistic. This issue has been patched in version 25.12. -- [0xBlackash/CVE-2026-53921](https://github.com/0xBlackash/CVE-2026-53921) +- [0xredash/CVE-2026-53921](https://github.com/0xredash/CVE-2026-53921) - [tc4dy/CVE-2026-53921-PoC-Exploit](https://github.com/tc4dy/CVE-2026-53921-PoC-Exploit) ### CVE-2026-53959 (2026-08-18) @@ -14281,7 +14273,7 @@ - [aniqfakhrul/CVE-2026-54121](https://github.com/aniqfakhrul/CVE-2026-54121) -- [0xBlackash/CVE-2026-54121](https://github.com/0xBlackash/CVE-2026-54121) +- [0xredash/CVE-2026-54121](https://github.com/0xredash/CVE-2026-54121) - [HORKimhab/CVE-2026-54121](https://github.com/HORKimhab/CVE-2026-54121) - [tc4dy/CVE-2026-54121-PoC-Exploit](https://github.com/tc4dy/CVE-2026-54121-PoC-Exploit) - [GlendonNotGlen/certighost-cve-2026-54121-slides](https://github.com/GlendonNotGlen/certighost-cve-2026-54121-slides) @@ -14508,7 +14500,7 @@ libssh2 1.11.1, fixed in commit 97acf3d, contains an out-of-bounds write vulnerability in ssh2_transport_read() that fails to enforce upper bounds on packet_length field. Remote attackers can send crafted SSH packets with excessively large packet_length values to corrupt heap memory and achieve remote code execution. -- [0xBlackash/CVE-2026-55200](https://github.com/0xBlackash/CVE-2026-55200) +- [0xredash/CVE-2026-55200](https://github.com/0xredash/CVE-2026-55200) - [xd20111/CVE-2026-55200](https://github.com/xd20111/CVE-2026-55200) - [kaleth4/CVE-2026-55200](https://github.com/kaleth4/CVE-2026-55200) @@ -14524,7 +14516,7 @@ Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, unauthenticated users can upload any amount of data to the server without any limitations. No need for any prior knowledge, only network access to Langflow. This can lead to space exhaustion on the server. In addition, in the response, the absolute path of the uploaded file is reported to the attacker, which is an information leak that can assist in chaining other primitives. This vulnerability is fixed in 1.9.1. -- [0xBlackash/CVE-2026-55450](https://github.com/0xBlackash/CVE-2026-55450) +- [0xredash/CVE-2026-55450](https://github.com/0xredash/CVE-2026-55450) ### CVE-2026-55494 (2026-09-30) @@ -14998,7 +14990,7 @@ - [Ch4120N/CVE-2026-58138](https://github.com/Ch4120N/CVE-2026-58138) - [0xgh057r3c0n/CVE-2026-58138](https://github.com/0xgh057r3c0n/CVE-2026-58138) - [Procjevt/CVE-2026-58138](https://github.com/Procjevt/CVE-2026-58138) -- [0xBlackash/CVE-2026-58138](https://github.com/0xBlackash/CVE-2026-58138) +- [0xredash/CVE-2026-58138](https://github.com/0xredash/CVE-2026-58138) - [Ez4rd1x1/CVE-2026-58138-Research](https://github.com/Ez4rd1x1/CVE-2026-58138-Research) ### CVE-2026-58221 @@ -15204,7 +15196,7 @@ - [HORKimhab/CVE-2026-60004](https://github.com/HORKimhab/CVE-2026-60004) - [EQSTLab/CVE-2026-60004](https://github.com/EQSTLab/CVE-2026-60004) -- [0xBlackash/CVE-2026-60004](https://github.com/0xBlackash/CVE-2026-60004) +- [0xredash/CVE-2026-60004](https://github.com/0xredash/CVE-2026-60004) - [imbas007/CVE-2026-60004-POC](https://github.com/imbas007/CVE-2026-60004-POC) - [shinthink/CVE-2026-60004](https://github.com/shinthink/CVE-2026-60004) - [HackSpeak/CVE-2026-60004](https://github.com/HackSpeak/CVE-2026-60004) @@ -15249,7 +15241,7 @@ Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SAML to compromise Oracle WebLogic Server. While the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H). -- [0xBlackash/CVE-2026-60206](https://github.com/0xBlackash/CVE-2026-60206) +- [0xredash/CVE-2026-60206](https://github.com/0xredash/CVE-2026-60206) - [imbas007/POC-CVE-2026-60206](https://github.com/imbas007/POC-CVE-2026-60206) - [tc4dy/CVE-2026-60206-PoC-Exploit](https://github.com/tc4dy/CVE-2026-60206-PoC-Exploit) - [Debajyoti0-0/CVE-2026-60206](https://github.com/Debajyoti0-0/CVE-2026-60206) @@ -15408,7 +15400,7 @@ - [0xsha/wp2shell](https://github.com/0xsha/wp2shell) - [J4ck3LSyN-Gen2/CVE-2026-63030-wp2r00t](https://github.com/J4ck3LSyN-Gen2/CVE-2026-63030-wp2r00t) - [gbrsh/CVE-2026-63030](https://github.com/gbrsh/CVE-2026-63030) -- [0xBlackash/CVE-2026-63030](https://github.com/0xBlackash/CVE-2026-63030) +- [0xredash/CVE-2026-63030](https://github.com/0xredash/CVE-2026-63030) - [mrx-arafat/CVE-2026-63030-POC](https://github.com/mrx-arafat/CVE-2026-63030-POC) - [0xWhoknows/wp2shell](https://github.com/0xWhoknows/wp2shell) - [zi3lak/wp2shell_scanner](https://github.com/zi3lak/wp2shell_scanner) @@ -15483,7 +15475,7 @@ Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based\non querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive\ncan write and cleanse more bytes than that query reports, causing an 8-byte\nout-of-bounds heap write.\n\nImpact summary: An attacker who supplies a crafted CMS message can trigger a\ndeterministic 8-byte out-of-bounds heap write when the victim decrypts it\nwith CMS_decrypt(), corrupting the heap and typically resulting in a Denial\nof Service.\n\nCWE: CWE-787: Out-of-bounds Write\n\nDescription: The key-wrap OID is potentially attacker-controlled on the wire.\nCMS unwrapping allows both id-aesNNN-wrap-pad and id-aesNNN-wrap ciphers.\nAn attacker can take a legitimate message and change a single OID byte to\nselect the padded variant while leaving the message otherwise valid. Since\nthe unwrap key is derived from the recipient's private operation (ECDH key\nagreement or ML-KEM decapsulation), the RFC 5649 integrity check cannot\npass, and the decryption fails with integrity failure.\n\nThe write is a fixed-size (8-byte), fixed-value (zero) heap overflow\nimmediately past the allocation, requires no special configuration, and is\nreachable from the public CMS_decrypt() function. The consequence is\na heap corruption leading to a Denial of Service. The fix in the CMS code\nsizes the unwrap output buffer for the worst case so a failed unwrap cannot\nwrite past the allocation.\n\nFIPS impact: no\n\nAs the CMS code lives outside the FIPS module boundary, no FIPS\nmodules are affected by this CVE. -- [0xBlackash/CVE-2026-63072](https://github.com/0xBlackash/CVE-2026-63072) +- [0xredash/CVE-2026-63072](https://github.com/0xredash/CVE-2026-63072) ### CVE-2026-63077 (2026-07-27) @@ -15526,7 +15518,7 @@ Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause a denial of service or potentially execute arbitrary code via an HTTP request with a Host header exceeding 8192 bytes when VirtualDocumentRoot uses a hostname format specifier and LimitRequestFieldSize is raised above the default.\n\nUsers are recommended to upgrade to version 2.4.69, which fixes this issue. -- [0xBlackash/CVE-2026-63292](https://github.com/0xBlackash/CVE-2026-63292) +- [0xredash/CVE-2026-63292](https://github.com/0xredash/CVE-2026-63292) ### CVE-2026-63520 (2026-08-11) @@ -15598,7 +15590,7 @@ - [suominen/ovswrap](https://github.com/suominen/ovswrap) - [mahfuzreham/OVSwrap-CVE-2026-64531-Mitigation-Tool](https://github.com/mahfuzreham/OVSwrap-CVE-2026-64531-Mitigation-Tool) -- [0xBlackash/CVE-2026-64531](https://github.com/0xBlackash/CVE-2026-64531) +- [0xredash/CVE-2026-64531](https://github.com/0xredash/CVE-2026-64531) - [HackSpeak/CVE-2026-64531](https://github.com/HackSpeak/CVE-2026-64531) ### CVE-2026-64560 (2026-07-29) @@ -15663,7 +15655,7 @@ In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: resample the data fork mapping after cycling ILOCK\n\nxfs_reflink_fill_{cow_hole,delalloc} are both presented with an inode,\na data fork mapping, and a cow fork mapping. Unfortunately, these two\nhelpers cycle the ILOCK to grab a transaction, which means that the\nmappings are stale as soon as we reacquire the ILOCK. Currently we\nrefresh the cow fork mapping by re-calling xfs_find_trim_cow_extent, but\nwe don't refresh the data fork mapping beforehand, which means that the\nxfs_bmap_trim_cow in that function queries the refcount btree about the\nwrong physical blocks and returns an inaccurate value in *shared.\n\nIf *shared is now false, the directio write proceeds with a stale data\nfork mapping. Fix this by querying the data fork mapping if the\nsequence counter changes across the ILOCK cycle. -- [0xBlackash/CVE-2026-64600](https://github.com/0xBlackash/CVE-2026-64600) +- [0xredash/CVE-2026-64600](https://github.com/0xredash/CVE-2026-64600) - [HORKimhab/CVE-2026-64600](https://github.com/HORKimhab/CVE-2026-64600) - [vulnquest58/VQ-RefluxCore](https://github.com/vulnquest58/VQ-RefluxCore) - [Debajyoti0-0/CVE-2026-64600](https://github.com/Debajyoti0-0/CVE-2026-64600) @@ -15692,7 +15684,7 @@ - [wordsec/XSS2Shell](https://github.com/wordsec/XSS2Shell) - [5yu4n/CVE-2026-64638](https://github.com/5yu4n/CVE-2026-64638) - [ZSecur1ty/XSS2Shell-CVE-2026-64638](https://github.com/ZSecur1ty/XSS2Shell-CVE-2026-64638) -- [0xBlackash/CVE-2026-64638](https://github.com/0xBlackash/CVE-2026-64638) +- [0xredash/CVE-2026-64638](https://github.com/0xredash/CVE-2026-64638) - [renzi25031469/CVE-2026-64638-WordPress-Core-XSS2Shell](https://github.com/renzi25031469/CVE-2026-64638-WordPress-Core-XSS2Shell) - [imbas007/CVE-2026-64638-POC](https://github.com/imbas007/CVE-2026-64638-POC) - [yogaGymn/XSS2Shell-CVE-2026-64638](https://github.com/yogaGymn/XSS2Shell-CVE-2026-64638) @@ -15952,7 +15944,7 @@ Action Pack is a framework for handling and responding to web requests. In versions prior to 7.2.3.2, 8.0.5.1 and 8.1.3.1, Active Storage does not disable libvips operations marked unsafe for untrusted content, allowing a crafted upload to invoke such an operation. Consuming applications are affected when configured to use libvips and accept image uploads from untrusted users. An unauthenticated attacker may exploit this behavior to read arbitrary files accessible to the Rails process, including environment variables and application secrets. Exposure of credentials such as secret_key_base or external-service tokens may enable remote code execution or lateral movement. This issue has been fixed in versions 7.2.3.2, 8.0.5.1 and 8.1.3.1. -- [0xBlackash/CVE-2026-66066](https://github.com/0xBlackash/CVE-2026-66066) +- [0xredash/CVE-2026-66066](https://github.com/0xredash/CVE-2026-66066) - [Zer0SumGam3/CVE-2026-66066-POC](https://github.com/Zer0SumGam3/CVE-2026-66066-POC) - [rails/rails-forensics-CVE-2026-66066](https://github.com/rails/rails-forensics-CVE-2026-66066) - [0xsha/KindaRails2Shell](https://github.com/0xsha/KindaRails2Shell) @@ -16330,7 +16322,7 @@ - [suominen/pppoeject](https://github.com/suominen/pppoeject) -- [0xBlackash/CVE-2026-68121](https://github.com/0xBlackash/CVE-2026-68121) +- [0xredash/CVE-2026-68121](https://github.com/0xredash/CVE-2026-68121) - [HORKimhab/CVE-2026-68121](https://github.com/HORKimhab/CVE-2026-68121) ### CVE-2026-68136 (2026-08-10) @@ -16666,7 +16658,7 @@ In the Linux kernel, the following vulnerability has been resolved:\n\ndibs: loopback: validate offset and size in move_data()\n\nThe loopback move_data() performs a memcpy into the registered DMB\nwithout checking whether offset + size exceeds the DMB length. Unlike\nreal ISM hardware, which enforces memory region bounds natively, the\nsoftware loopback has no such protection.\n\nA peer-supplied out-of-bounds offset or oversized write would result in\nan OOB write past the allocated kernel buffer. Add an explicit bounds\ncheck before the memcpy to reject such requests with -EINVAL. -- [0xBlackash/CVE-2026-72018](https://github.com/0xBlackash/CVE-2026-72018) +- [0xredash/CVE-2026-72018](https://github.com/0xredash/CVE-2026-72018) ### CVE-2026-72530 (2026-08-19) @@ -16776,7 +16768,7 @@ Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase instance. -- [0xBlackash/CVE-2026-72898](https://github.com/0xBlackash/CVE-2026-72898) +- [0xredash/CVE-2026-72898](https://github.com/0xredash/CVE-2026-72898) - [codeb0ssx/CVE-2026-72898-PoC](https://github.com/codeb0ssx/CVE-2026-72898-PoC) - [4minx/CVE-2026-72898](https://github.com/4minx/CVE-2026-72898) - [ubitquity/Metabase-Setup-Endpoint-SQLi-Fix](https://github.com/ubitquity/Metabase-Setup-Endpoint-SQLi-Fix) @@ -16815,7 +16807,7 @@ Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, create_mobile_data_collection_server and create_mobile_action_server in ufo/client/mcp/http_servers/mobile_mcp_server.py exposed Streamable HTTP MCP services on TCP ports 8020 and 8021 without authentication, allowing an unauthenticated remote attacker to invoke capture_screenshot, get_ui_tree, tap, swipe, type_text, launch_app, press_key, and click_control against an ADB-connected Android device, disclose screen and device data, and modify device state. This issue is fixed in version 3.0.8. -- [0xBlackash/CVE-2026-73296](https://github.com/0xBlackash/CVE-2026-73296) +- [0xredash/CVE-2026-73296](https://github.com/0xredash/CVE-2026-73296) ### CVE-2026-73309 (2026-09-08) @@ -16931,7 +16923,7 @@ - [dahnutz/zimbra-cve-2026-73570-ir](https://github.com/dahnutz/zimbra-cve-2026-73570-ir) - [juanpoch/CVE-2026-73570](https://github.com/juanpoch/CVE-2026-73570) - [hainhc/CVE-2026-73570](https://github.com/hainhc/CVE-2026-73570) -- [0xBlackash/CVE-2026-73570](https://github.com/0xBlackash/CVE-2026-73570) +- [0xredash/CVE-2026-73570](https://github.com/0xredash/CVE-2026-73570) ### CVE-2026-73633 (2026-08-14) @@ -17003,7 +16995,7 @@ - [suominen/diagspill](https://github.com/suominen/diagspill) -- [0xBlackash/CVE-2026-74469](https://github.com/0xBlackash/CVE-2026-74469) +- [0xredash/CVE-2026-74469](https://github.com/0xredash/CVE-2026-74469) - [HORKimhab/CVE-2026-74469](https://github.com/HORKimhab/CVE-2026-74469) ### CVE-2026-74580 (2026-08-21) @@ -17220,7 +17212,7 @@ - [HORKimhab/CVE-2026-76461](https://github.com/HORKimhab/CVE-2026-76461) -- [0xBlackash/CVE-2026-76461](https://github.com/0xBlackash/CVE-2026-76461) +- [0xredash/CVE-2026-76461](https://github.com/0xredash/CVE-2026-76461) - [fevar54/CVE-2026-76461-Detection-Kit-](https://github.com/fevar54/CVE-2026-76461-Detection-Kit-) - [S3v3n-JG/CVE-2026-76461](https://github.com/S3v3n-JG/CVE-2026-76461) @@ -17797,7 +17789,7 @@ - [suominen/dirtyah6](https://github.com/suominen/dirtyah6) -- [0xBlackash/CVE-2026-80844](https://github.com/0xBlackash/CVE-2026-80844) +- [0xredash/CVE-2026-80844](https://github.com/0xredash/CVE-2026-80844) - [HORKimhab/CVE-2026-80844](https://github.com/HORKimhab/CVE-2026-80844) ### CVE-2026-81000 (2026-09-11) @@ -17806,7 +17798,7 @@ - [suominen/tunderflow](https://github.com/suominen/tunderflow) -- [0xBlackash/CVE-2026-81000](https://github.com/0xBlackash/CVE-2026-81000) +- [0xredash/CVE-2026-81000](https://github.com/0xredash/CVE-2026-81000) - [HORKimhab/CVE-2026-81000](https://github.com/HORKimhab/CVE-2026-81000) ### CVE-2026-81294 (2026-09-02) @@ -18513,7 +18505,7 @@ - [msuiche/hotcell](https://github.com/msuiche/hotcell) - [java99999/CVE-2026-86950-POC](https://github.com/java99999/CVE-2026-86950-POC) - [decalage2/detect_CVE-2026-86950](https://github.com/decalage2/detect_CVE-2026-86950) -- [0xBlackash/CVE-2026-86950](https://github.com/0xBlackash/CVE-2026-86950) +- [0xredash/CVE-2026-86950](https://github.com/0xredash/CVE-2026-86950) - [jpdagostin0/CVE-2026-86950-POC](https://github.com/jpdagostin0/CVE-2026-86950-POC) ### CVE-2026-86998 @@ -19140,7 +19132,7 @@ - [HORKimhab/CVE-2026-93485](https://github.com/HORKimhab/CVE-2026-93485) -- [0xBlackash/CVE-2026-93485](https://github.com/0xBlackash/CVE-2026-93485) +- [0xredash/CVE-2026-93485](https://github.com/0xredash/CVE-2026-93485) - [DeathShotXD/Comment2Shell](https://github.com/DeathShotXD/Comment2Shell) - [686f6c61/POC-WP-CORE-CVE-2026-93485](https://github.com/686f6c61/POC-WP-CORE-CVE-2026-93485) @@ -19644,6 +19636,7 @@ - [colorgarden/CVE-2026-98260-y700-TB321FU-lpe](https://github.com/colorgarden/CVE-2026-98260-y700-TB321FU-lpe) - [kpgc10kai/TimerRoot](https://github.com/kpgc10kai/TimerRoot) - [NanoTurtle1145/cve-2026-98260-uaf](https://github.com/NanoTurtle1145/cve-2026-98260-uaf) +- [Feiman55/CVE-2026-98260-GhostKey](https://github.com/Feiman55/CVE-2026-98260-GhostKey) - [Again1996-bit/CVE-2026-98260-GhostKey](https://github.com/Again1996-bit/CVE-2026-98260-GhostKey) ### CVE-2026-98385 (2026-10-12) @@ -19813,7 +19806,7 @@ - [seck19/CVE-2026-101767-POC](https://github.com/seck19/CVE-2026-101767-POC) -- [0xBlackash/CVE-2026-101767](https://github.com/0xBlackash/CVE-2026-101767) +- [0xredash/CVE-2026-101767](https://github.com/0xredash/CVE-2026-101767) - [Sable-Research/CVE-2026-101767-research](https://github.com/Sable-Research/CVE-2026-101767-research) ### CVE-2026-101894 (2026-09-28) @@ -20211,14 +20204,6 @@ - [AmalJafarzade/CVE-2026-104587](https://github.com/AmalJafarzade/CVE-2026-104587) -### CVE-2026-104711 (2026-10-05) - -Improper neutralization of special elements used in an expression language statement ('Expression Language Injection') vulnerability in Apache Struts. If the application is configured to use the legacy RESTful action mapper, a crafted request can inject an OGNL expression that may lead to remote code execution. Struts 7 is affected only when the OGNL allowlist is disabled; it is enabled by default. Applications using the default action mapper, the restful2 mapper, or the Struts REST plugin are not affected.\n\nThis issue affects Apache Struts: from 2.0.0 through 2.3.37, from 2.5.0 through 2.5.33, from 6.0.0 through 6.11.0, from 7.0.0 through 7.3.0.\n\nUsers are recommended to upgrade to version 6.12.0 or 7.4.0, which fixes the issue. - - -- [uday952/CVE-2026-104711](https://github.com/uday952/CVE-2026-104711) -- [uday952/CVE-2026-104711-POC-NEW-VARIANT](https://github.com/uday952/CVE-2026-104711-POC-NEW-VARIANT) - ### CVE-2026-104715 (2026-10-16) A flaw was found in cifs-utils. This flaw allows an unprivileged local user to achieve privilege escalation. When a privileged service mounts a Common Internet File System (CIFS) share using a user-controlled credentials file, input values are not properly sanitized before being assembled into mount options. A local attacker can exploit this vulnerability to inject unauthorized mount options, allowing them to bypass permission checks and execute files with administrative (root) privileges. @@ -20476,7 +20461,7 @@ - [horizon3ai/CVE-2026-106173](https://github.com/horizon3ai/CVE-2026-106173) -- [0xBlackash/CVE-2026-106173](https://github.com/0xBlackash/CVE-2026-106173) +- [0xredash/CVE-2026-106173](https://github.com/0xredash/CVE-2026-106173) - [tc4dy/CVE-2026-106173-PoC-Exploit](https://github.com/tc4dy/CVE-2026-106173-PoC-Exploit) - [MRdark-ops/rce-FortiSIEM](https://github.com/MRdark-ops/rce-FortiSIEM) - [aduli198/CVE-2026-106173](https://github.com/aduli198/CVE-2026-106173) @@ -20708,7 +20693,7 @@ - [slabbdev/php2shell-cve-2026-109618-109619](https://github.com/slabbdev/php2shell-cve-2026-109618-109619) - [MakFly/php2shell-check](https://github.com/MakFly/php2shell-check) - [daffa001/php-CVE-2026-109618-CVE-2026-109619](https://github.com/daffa001/php-CVE-2026-109618-CVE-2026-109619) -- [0xBlackash/CVE-2026-109618](https://github.com/0xBlackash/CVE-2026-109618) +- [0xredash/CVE-2026-109618](https://github.com/0xredash/CVE-2026-109618) - [WeszNL/directadmin-php2shell-ansible-mitigation](https://github.com/WeszNL/directadmin-php2shell-ansible-mitigation) - [ecomyseo/ecom_blockrceflaws](https://github.com/ecomyseo/ecom_blockrceflaws) - [codewizdevs/php2shell-watcher](https://github.com/codewizdevs/php2shell-watcher) @@ -21382,6 +21367,12 @@ - [IamLucif3r/CVE-2026-109618-exploit](https://github.com/IamLucif3r/CVE-2026-109618-exploit) - [nfemenia/php56-amzn1-security](https://github.com/nfemenia/php56-amzn1-security) - [dguerri/php2leak](https://github.com/dguerri/php2leak) +- [aulwardana/php2shell-check](https://github.com/aulwardana/php2shell-check) +- [kokilyadm/waffers](https://github.com/kokilyadm/waffers) +- [Captain-AI-Hub/PHP2shell](https://github.com/Captain-AI-Hub/PHP2shell) +- [GarciaG1/charla-php2shell](https://github.com/GarciaG1/charla-php2shell) +- [RedSideSecurity/php2shell](https://github.com/RedSideSecurity/php2shell) +- [fahise/cve-2026-109618-cve-2026-109619-poc](https://github.com/fahise/cve-2026-109618-cve-2026-109619-poc) ### CVE-2026-109619 (2026-10-21) @@ -21426,6 +21417,13 @@ - [Scyrix-LLC/CVE-2026-109721](https://github.com/Scyrix-LLC/CVE-2026-109721) +### CVE-2026-109722 (2026-10-13) + +JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. + + +- [Scyrix-LLC/CVE-2026-109722](https://github.com/Scyrix-LLC/CVE-2026-109722) + ### CVE-2026-110025 (2026-10-13) A flaw has been found in slackero phpwcms up to 1.9.49/1.12.3. This issue affects some unknown processing of the file include/inc_front/content/cnt23.article.inc.php of the component Extension Check. This manipulation of the argument POST_name causes unrestricted upload. The attack can be initiated remotely. Upgrading to version 1.9.50 and 1.12.4 is capable of addressing this issue. Patch name: 118c978430f5a9668b30535f6e592c7ae8df711f/f4c136b467565b2d16ebe2b8276b9a03547a9a69/8571cb47df8d66804d1eb88ae3d1ab4fb513e1e7. Upgrading the affected component is recommended. @@ -21495,7 +21493,7 @@ - [dreamfast/CVE-2026-110912](https://github.com/dreamfast/CVE-2026-110912) -- [0xBlackash/CVE-2026-110912](https://github.com/0xBlackash/CVE-2026-110912) +- [0xredash/CVE-2026-110912](https://github.com/0xredash/CVE-2026-110912) ### CVE-2026-110922 (2026-10-15) @@ -21601,9 +21599,10 @@ - [emirwtz/CVE-2026-111497](https://github.com/emirwtz/CVE-2026-111497) - [thebarel/CVE-2026-111497](https://github.com/thebarel/CVE-2026-111497) - [jeffschafer/Bigfix-NodeJS-Vulnerability-Scanner-Content-CVE-2026-111497](https://github.com/jeffschafer/Bigfix-NodeJS-Vulnerability-Scanner-Content-CVE-2026-111497) +- [sakai-sktech/brotli-check](https://github.com/sakai-sktech/brotli-check) - [CompleTech-Security/http2shell-check](https://github.com/CompleTech-Security/http2shell-check) - [ionsec/node2shell-detector](https://github.com/ionsec/node2shell-detector) -- [0xBlackash/CVE-2026-111497](https://github.com/0xBlackash/CVE-2026-111497) +- [0xredash/CVE-2026-111497](https://github.com/0xredash/CVE-2026-111497) - [AdapptOnAzure/CVE-2026-111497-DotNetBrotliScan](https://github.com/AdapptOnAzure/CVE-2026-111497-DotNetBrotliScan) - [amier-ge/node2shell-checker](https://github.com/amier-ge/node2shell-checker) - [amier-ge/Node2Shell](https://github.com/amier-ge/Node2Shell) @@ -21621,6 +21620,8 @@ - [gik2927/CVE-2026-111497-DOS-](https://github.com/gik2927/CVE-2026-111497-DOS-) - [caveeroo/cve-2026-111497-wordpress-poc](https://github.com/caveeroo/cve-2026-111497-wordpress-poc) - [Quaerendir/node2shell-audit](https://github.com/Quaerendir/node2shell-audit) +- [fieldse/brotli-node2shell-check](https://github.com/fieldse/brotli-node2shell-check) +- [foxcornlab/node2shell-inventory-scanner](https://github.com/foxcornlab/node2shell-inventory-scanner) ### CVE-2026-111770 - [hahahahahahahahah6/mcp-idprobe](https://github.com/hahahahahahahahah6/mcp-idprobe) @@ -21674,6 +21675,9 @@ - [al4n4n/CVE-2026-112403](https://github.com/al4n4n/CVE-2026-112403) +### CVE-2026-112445 +- [Mas0nShi/CVE-2026-112445](https://github.com/Mas0nShi/CVE-2026-112445) + ### CVE-2026-112611 (2026-10-26) An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.2 and iPadOS 26.7.2, iOS 27.2 and iPadOS 27.2, macOS Sequoia 15.8.2, macOS Tahoe 26.7.2. Processing a maliciously crafted PDF file may lead to memory corruption. @@ -21759,7 +21763,7 @@ In EPICS Base release 7.0.10 and prior, an integer overflow in network request processing can cause memory to be allocated with an incorrect size. Subsequent handling of attacker supplied data may result in memory corruption, denial of service, or potential remote code execution. -- [0xBlackash/CVE-2026-114595](https://github.com/0xBlackash/CVE-2026-114595) +- [0xredash/CVE-2026-114595](https://github.com/0xredash/CVE-2026-114595) ### CVE-2026-114612 (2026-10-22) @@ -21908,9 +21912,6 @@ - [foxcornlab/mlflow-scorer-scanner](https://github.com/foxcornlab/mlflow-scorer-scanner) -### CVE-2026-117025 -- [Lariinz/CVE-2026-117025](https://github.com/Lariinz/CVE-2026-117025) - ### CVE-2026-117532 (2026-10-27) REDAXO core from 5.3.0 before 5.21.4 contains an authentication bypass vulnerability in the structure/history plugin that allows unauthenticated attackers to forge temporary login tokens. Attackers can force the session-tied secret into a predictable state and forge tokens for accounts like admin, gaining backend access and code execution outside live mode. @@ -23347,7 +23348,7 @@ - [ndr-repo/CVE-2025-5777](https://github.com/ndr-repo/CVE-2025-5777) - [mr-r3b00t/CVE-2025-5777](https://github.com/mr-r3b00t/CVE-2025-5777) - [rashedhasan090/CVE-2025-5777](https://github.com/rashedhasan090/CVE-2025-5777) -- [0xBlackash/CVE-2025-5777](https://github.com/0xBlackash/CVE-2025-5777) +- [0xredash/CVE-2025-5777](https://github.com/0xredash/CVE-2025-5777) - [sentinel-aidefense/CVE-2025-5777](https://github.com/sentinel-aidefense/CVE-2025-5777) - [razureink/cve-2025-5777-citrixbleed2_reproduction](https://github.com/razureink/cve-2025-5777-citrixbleed2_reproduction) - [maxprog-svg/CitrixBleedCVE-2026-8452-2025-5777](https://github.com/maxprog-svg/CitrixBleedCVE-2026-8452-2025-5777) @@ -24970,13 +24971,6 @@ - [Nxploited/CVE-2025-12539](https://github.com/Nxploited/CVE-2025-12539) -### CVE-2025-12543 (2026-01-07) - -A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly validate the Host header in incoming HTTP requests.As a result, requests containing malformed or malicious Host headers are processed without rejection, enabling attackers to poison caches, perform internal network scans, or hijack user sessions. - - -- [kavin71725/CVE-2025-12543-Fix-for-Wildfly](https://github.com/kavin71725/CVE-2025-12543-Fix-for-Wildfly) - ### CVE-2025-12585 (2025-12-03) The MxChat – AI Chatbot for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.5.5 via upload filenames. This makes it possible for unauthenticated attackers to extract session values that can subsequently be used to access conversation data. @@ -25103,7 +25097,7 @@ Twonky Server 8.5.2 on Linux and Windows is vulnerable to an access control flaw. An unauthenticated attacker can bypass web service API authentication controls to leak a log file and read the administrator's username and encrypted password. -- [0xBlackash/CVE-2025-13315](https://github.com/0xBlackash/CVE-2025-13315) +- [0xredash/CVE-2025-13315](https://github.com/0xredash/CVE-2025-13315) ### CVE-2025-13339 (2025-12-10) @@ -25454,7 +25448,7 @@ - [amnnrth/CVE-2025-14847](https://github.com/amnnrth/CVE-2025-14847) - [InfoSecAntara/CVE-2025-14847-MongoDB](https://github.com/InfoSecAntara/CVE-2025-14847-MongoDB) - [sho-luv/MongoBleed](https://github.com/sho-luv/MongoBleed) -- [0xBlackash/CVE-2025-14847](https://github.com/0xBlackash/CVE-2025-14847) +- [0xredash/CVE-2025-14847](https://github.com/0xredash/CVE-2025-14847) - [dawnsmithcyber/azure-vulnerability-remediation-project](https://github.com/dawnsmithcyber/azure-vulnerability-remediation-project) - [shokribardiya/CVE-2025-14847-mongobleed](https://github.com/shokribardiya/CVE-2025-14847-mongobleed) - [SAIM28826/TEST](https://github.com/SAIM28826/TEST) @@ -27861,7 +27855,7 @@ - [ch3m1cl/CVE-2025-31161](https://github.com/ch3m1cl/CVE-2025-31161) - [Dairrow/CVE-2025-31161](https://github.com/Dairrow/CVE-2025-31161) - [eserror/CVE-2025-31161](https://github.com/eserror/CVE-2025-31161) -- [0xBlackash/CVE-2025-31161](https://github.com/0xBlackash/CVE-2025-31161) +- [0xredash/CVE-2025-31161](https://github.com/0xredash/CVE-2025-31161) - [rufflabs/crushftp_cve-2025-31161](https://github.com/rufflabs/crushftp_cve-2025-31161) - [rufflabs/ludus_crushftp_cve-2025-31161](https://github.com/rufflabs/ludus_crushftp_cve-2025-31161) - [rufflabs/ludus_crushftp_cve-2025-31161_sim](https://github.com/rufflabs/ludus_crushftp_cve-2025-31161_sim) @@ -28183,7 +28177,7 @@ - [carlosalbertotuma/CVE-2025-32433](https://github.com/carlosalbertotuma/CVE-2025-32433) - [yonathanpy/CVE-2025-32433.py](https://github.com/yonathanpy/CVE-2025-32433.py) - [joshuavanderpoll/cve-2025-32433](https://github.com/joshuavanderpoll/cve-2025-32433) -- [0xBlackash/CVE-2025-32433](https://github.com/0xBlackash/CVE-2025-32433) +- [0xredash/CVE-2025-32433](https://github.com/0xredash/CVE-2025-32433) - [chuzouX/CVE-2025-32433-Exploit-edited](https://github.com/chuzouX/CVE-2025-32433-Exploit-edited) - [dampedcoast/Exploiting-a-vulnerability-using-reverse-shell](https://github.com/dampedcoast/Exploiting-a-vulnerability-using-reverse-shell) - [razureink/cve-2025-32433-erlang_ssh_rce_reproduction](https://github.com/razureink/cve-2025-32433-erlang_ssh_rce_reproduction) @@ -28293,7 +28287,7 @@ - [SpycioKon/CVE-2025-32463](https://github.com/SpycioKon/CVE-2025-32463) - [vpr-labs/CVE-2025-32463](https://github.com/vpr-labs/CVE-2025-32463) - [danilo1992-sys/CVE-2025-32463](https://github.com/danilo1992-sys/CVE-2025-32463) -- [0xBlackash/CVE-2025-32463](https://github.com/0xBlackash/CVE-2025-32463) +- [0xredash/CVE-2025-32463](https://github.com/0xredash/CVE-2025-32463) - [EthanEvans92/CVE-2025-32463](https://github.com/EthanEvans92/CVE-2025-32463) - [Fomovet/cve-2025-32463](https://github.com/Fomovet/cve-2025-32463) - [0xdak/CVE-2025-32463_exploit](https://github.com/0xdak/CVE-2025-32463_exploit) @@ -30204,7 +30198,7 @@ - [elyasbassir/CVE-2025-49844](https://github.com/elyasbassir/CVE-2025-49844) - [saneki/cve-2025-49844](https://github.com/saneki/cve-2025-49844) - [zbyszkok/CVE-2025-49844-RediShell-AI-made-Revshell](https://github.com/zbyszkok/CVE-2025-49844-RediShell-AI-made-Revshell) -- [0xBlackash/CVE-2025-49844](https://github.com/0xBlackash/CVE-2025-49844) +- [0xredash/CVE-2025-49844](https://github.com/0xredash/CVE-2025-49844) - [Cilectiy/CVE-2025-49844](https://github.com/Cilectiy/CVE-2025-49844) - [open-flaw/CVE-2025-49844](https://github.com/open-flaw/CVE-2025-49844) - [cc3305/CVE-2025-49844](https://github.com/cc3305/CVE-2025-49844) @@ -31817,7 +31811,7 @@ - [Wyl-cmd/CVE-2025-55182](https://github.com/Wyl-cmd/CVE-2025-55182) - [H4R335HR/reactshell](https://github.com/H4R335HR/reactshell) - [orgito1015/CVE-2025-55182-Researching-process](https://github.com/orgito1015/CVE-2025-55182-Researching-process) -- [0xBlackash/CVE-2025-55182](https://github.com/0xBlackash/CVE-2025-55182) +- [0xredash/CVE-2025-55182](https://github.com/0xredash/CVE-2025-55182) - [alptexans/RSC-Detect-CVE-2025-55182](https://github.com/alptexans/RSC-Detect-CVE-2025-55182) - [MrMahile/MassScanning-CVE-2025-55182](https://github.com/MrMahile/MassScanning-CVE-2025-55182) - [androidteacher/REACT-CVE-2025-55182-Lab](https://github.com/androidteacher/REACT-CVE-2025-55182-Lab) @@ -33857,7 +33851,7 @@ - [AN5I/cve-2025-64446-fortiweb-exploit](https://github.com/AN5I/cve-2025-64446-fortiweb-exploit) - [lequoca/fortinet-fortiweb-cve-2025-64446-58034](https://github.com/lequoca/fortinet-fortiweb-cve-2025-64446-58034) - [eagle-nett/FORTIWEB_CVE-2025-64446-58034](https://github.com/eagle-nett/FORTIWEB_CVE-2025-64446-58034) -- [0xBlackash/CVE-2025-64446](https://github.com/0xBlackash/CVE-2025-64446) +- [0xredash/CVE-2025-64446](https://github.com/0xredash/CVE-2025-64446) - [litndat/Vulnerability-CVE-2025-64446-CVE-2025-58034](https://github.com/litndat/Vulnerability-CVE-2025-64446-CVE-2025-58034) - [CerberusMrXi/FortiWeb-cve-2025-64446-RCE-exploit](https://github.com/CerberusMrXi/FortiWeb-cve-2025-64446-RCE-exploit) @@ -34865,7 +34859,7 @@ - [MaxMnMl/zimbramail-CVE-2025-68645-poc](https://github.com/MaxMnMl/zimbramail-CVE-2025-68645-poc) - [faysalferdous/CVE-2025-68645-Exploiting-Zimbra-Webmail-LFI-Vulnerability](https://github.com/faysalferdous/CVE-2025-68645-Exploiting-Zimbra-Webmail-LFI-Vulnerability) - [Crow5-oss/CVE-2025-68645](https://github.com/Crow5-oss/CVE-2025-68645) -- [0xBlackash/CVE-2025-68645](https://github.com/0xBlackash/CVE-2025-68645) +- [0xredash/CVE-2025-68645](https://github.com/0xredash/CVE-2025-68645) - [HarisAidhin/Poc_CVE-2025-68645](https://github.com/HarisAidhin/Poc_CVE-2025-68645) - [Ashwesker/Ashwesker-CVE-2025-68645](https://github.com/Ashwesker/Ashwesker-CVE-2025-68645) @@ -36856,6 +36850,7 @@ - [Suleman-Elahi/php2shell-sentinel](https://github.com/Suleman-Elahi/php2shell-sentinel) - [Ghost-Bx1/php-exploits-CVE-2026-109618-CVE-2026-109619-CVE-2024-4577](https://github.com/Ghost-Bx1/php-exploits-CVE-2026-109618-CVE-2026-109619-CVE-2024-4577) - [CyberDefenderAI/AI-Threat-Detection-PHP-CGI-Vulnerabilities](https://github.com/CyberDefenderAI/AI-Threat-Detection-PHP-CGI-Vulnerabilities) +- [kokilyadm/waffers](https://github.com/kokilyadm/waffers) ### CVE-2024-4701 (2024-05-10) @@ -48141,7 +48136,7 @@ A use-after-free vulnerability in the Linux kernel's af_unix component can be exploited to achieve local privilege escalation.\n\n\n\nThe unix_stream_sendpage() function tries to add data to the last skb in the peer's recv queue without locking the queue. Thus there is a race where unix_stream_sendpage() could access an skb locklessly that is being released by garbage collection, resulting in use-after-free.\n\n\n\nWe recommend upgrading past commit 790c2f9d15b594350ae9bca7b236f2b1859de02c (or backported equivalents). -- [uz56764/CVE-CVE-2023-4622](https://github.com/uz56764/CVE-CVE-2023-4622) +- [android-cve-exploits/0range1337--CVE-CVE-2023-4622](https://github.com/android-cve-exploits/0range1337--CVE-CVE-2023-4622) ### CVE-2023-4631 (2023-09-25) @@ -56961,7 +56956,6 @@ - [delsploit/CVE-2022-1015](https://github.com/delsploit/CVE-2022-1015) - [pivik271/CVE-2022-1015](https://github.com/pivik271/CVE-2022-1015) - [more-kohii/CVE-2022-1015](https://github.com/more-kohii/CVE-2022-1015) -- [uz56764/CVE-2022-1015](https://github.com/uz56764/CVE-2022-1015) - [seadragnol/CVE-2022-1015](https://github.com/seadragnol/CVE-2022-1015) ### CVE-2022-1026 (2022-04-04) @@ -57874,7 +57868,7 @@ - [Bariskizilkaya/CVE-2022-20186_CTXZ](https://github.com/Bariskizilkaya/CVE-2022-20186_CTXZ) -- [SmileTabLabo/CVE-2022-20186](https://github.com/SmileTabLabo/CVE-2022-20186) +- [android-cve-exploits/SmileTabLabo--CVE-2022-20186](https://github.com/android-cve-exploits/SmileTabLabo--CVE-2022-20186) ### CVE-2022-20223 (2022-07-13) @@ -62382,6 +62376,7 @@ - [soralis0912/CVE-2022-38181-aristotle](https://github.com/soralis0912/CVE-2022-38181-aristotle) - [ericpardee/fire-hd-ownership](https://github.com/ericpardee/fire-hd-ownership) - [artur9010/amazon-mustang-hack](https://github.com/artur9010/amazon-mustang-hack) +- [s1204IT/CVE-2022-38181](https://github.com/s1204IT/CVE-2022-38181) ### CVE-2022-38374 (2022-11-02)