diff --git a/2015/CVE-2015-9235.json b/2015/CVE-2015-9235.json
index 21ce7d719a..dfd8f6b46b 100644
--- a/2015/CVE-2015-9235.json
+++ b/2015/CVE-2015-9235.json
@@ -92,10 +92,10 @@
"description": "针对JWT渗透开发的漏洞验证\/密钥爆破工具，针对CVE-2015-9235\/空白密钥\/未验证签名攻击\/CVE-2016-10555\/CVE-2018-0114\/CVE-2020-28042的结果生成用于FUZZ，也可使用字典\/字符枚举(包括JJWT)的方式进行爆破(JWT Crack)",
"fork": false,
"created_at": "2025-01-27T14:23:31Z",
- "updated_at": "2026-05-07T04:54:35Z",
+ "updated_at": "2026-05-13T07:45:55Z",
"pushed_at": "2025-08-12T14:08:12Z",
- "stargazers_count": 288,
- "watchers_count": 288,
+ "stargazers_count": 289,
+ "watchers_count": 289,
"has_discussions": false,
"forks_count": 10,
"allow_forking": true,
@@ -106,7 +106,7 @@
"topics": [],
"visibility": "public",
"forks": 10,
- "watchers": 288,
+ "watchers": 289,
"score": 0,
"subscribers_count": 4
},
diff --git a/2016/CVE-2016-10555.json b/2016/CVE-2016-10555.json
index c655108760..444770e8bd 100644
--- a/2016/CVE-2016-10555.json
+++ b/2016/CVE-2016-10555.json
@@ -80,10 +80,10 @@
"description": "针对JWT渗透开发的漏洞验证\/密钥爆破工具，针对CVE-2015-9235\/空白密钥\/未验证签名攻击\/CVE-2016-10555\/CVE-2018-0114\/CVE-2020-28042的结果生成用于FUZZ，也可使用字典\/字符枚举(包括JJWT)的方式进行爆破(JWT Crack)",
"fork": false,
"created_at": "2025-01-27T14:23:31Z",
- "updated_at": "2026-05-07T04:54:35Z",
+ "updated_at": "2026-05-13T07:45:55Z",
"pushed_at": "2025-08-12T14:08:12Z",
- "stargazers_count": 288,
- "watchers_count": 288,
+ "stargazers_count": 289,
+ "watchers_count": 289,
"has_discussions": false,
"forks_count": 10,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 10,
- "watchers": 288,
+ "watchers": 289,
"score": 0,
"subscribers_count": 4
}
diff --git a/2016/CVE-2016-15042.json b/2016/CVE-2016-15042.json
index 9be9e13282..9c29b8e863 100644
--- a/2016/CVE-2016-15042.json
+++ b/2016/CVE-2016-15042.json
@@ -14,8 +14,8 @@
"description": "🛠️ Validate and demonstrate CVE-2016-15042 with a Dockerized lab for unauthenticated file uploads in WordPress file managers.",
"fork": false,
"created_at": "2023-10-23T05:54:10Z",
- "updated_at": "2026-05-13T05:41:28Z",
- "pushed_at": "2026-05-13T05:41:25Z",
+ "updated_at": "2026-05-13T08:45:42Z",
+ "pushed_at": "2026-05-13T08:45:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2016/CVE-2016-5195.json b/2016/CVE-2016-5195.json
index 47e56c09ea..3204cd54a5 100644
--- a/2016/CVE-2016-5195.json
+++ b/2016/CVE-2016-5195.json
@@ -1158,10 +1158,10 @@
"description": "DirtyCow root privilege escalation (CVE-2016-5195)",
"fork": false,
"created_at": "2021-10-06T17:29:32Z",
- "updated_at": "2024-11-27T09:25:30Z",
+ "updated_at": "2026-05-13T09:51:44Z",
"pushed_at": "2024-10-11T16:32:12Z",
- "stargazers_count": 4,
- "watchers_count": 4,
+ "stargazers_count": 5,
+ "watchers_count": 5,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -1172,7 +1172,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
- "watchers": 4,
+ "watchers": 5,
"score": 0,
"subscribers_count": 1
},
diff --git a/2018/CVE-2018-0114.json b/2018/CVE-2018-0114.json
index 6cd7a5192c..a25cfb369c 100644
--- a/2018/CVE-2018-0114.json
+++ b/2018/CVE-2018-0114.json
@@ -344,10 +344,10 @@
"description": "针对JWT渗透开发的漏洞验证\/密钥爆破工具，针对CVE-2015-9235\/空白密钥\/未验证签名攻击\/CVE-2016-10555\/CVE-2018-0114\/CVE-2020-28042的结果生成用于FUZZ，也可使用字典\/字符枚举(包括JJWT)的方式进行爆破(JWT Crack)",
"fork": false,
"created_at": "2025-01-27T14:23:31Z",
- "updated_at": "2026-05-07T04:54:35Z",
+ "updated_at": "2026-05-13T07:45:55Z",
"pushed_at": "2025-08-12T14:08:12Z",
- "stargazers_count": 288,
- "watchers_count": 288,
+ "stargazers_count": 289,
+ "watchers_count": 289,
"has_discussions": false,
"forks_count": 10,
"allow_forking": true,
@@ -358,7 +358,7 @@
"topics": [],
"visibility": "public",
"forks": 10,
- "watchers": 288,
+ "watchers": 289,
"score": 0,
"subscribers_count": 4
},
diff --git a/2018/CVE-2018-16843.json b/2018/CVE-2018-16843.json
index 604302a22b..46480c554e 100644
--- a/2018/CVE-2018-16843.json
+++ b/2018/CVE-2018-16843.json
@@ -14,10 +14,10 @@
"description": "based on nginx 1.19.5 to fix for CVE-2018-16843, CVE-2018-16844, CVE-2019-9511, CVE-2019-9513, and CVE-2019-9516",
"fork": false,
"created_at": "2020-12-22T10:16:11Z",
- "updated_at": "2020-12-23T11:45:29Z",
+ "updated_at": "2026-05-13T07:10:51Z",
"pushed_at": "2020-12-23T11:45:24Z",
- "stargazers_count": 0,
- "watchers_count": 0,
+ "stargazers_count": 1,
+ "watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
- "watchers": 0,
+ "watchers": 1,
"score": 0,
"subscribers_count": 1
}
diff --git a/2019/CVE-2019-1040.json b/2019/CVE-2019-1040.json
index db5387a3fe..91a467fda2 100644
--- a/2019/CVE-2019-1040.json
+++ b/2019/CVE-2019-1040.json
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
- "updated_at": "2026-05-13T04:15:29Z",
- "pushed_at": "2026-05-13T04:15:24Z",
+ "updated_at": "2026-05-13T10:05:50Z",
+ "pushed_at": "2026-05-13T10:05:28Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2019/CVE-2019-15107.json b/2019/CVE-2019-15107.json
index 59b1cbf2a3..cab64e7b76 100644
--- a/2019/CVE-2019-15107.json
+++ b/2019/CVE-2019-15107.json
@@ -420,10 +420,10 @@
"description": "CVE-2019–15107 - Unauthenticated RCE Webmin <=1.920",
"fork": false,
"created_at": "2020-10-15T14:53:48Z",
- "updated_at": "2026-05-09T08:43:35Z",
+ "updated_at": "2026-05-13T08:47:49Z",
"pushed_at": "2020-10-15T15:10:22Z",
- "stargazers_count": 2,
- "watchers_count": 2,
+ "stargazers_count": 3,
+ "watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -434,7 +434,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
- "watchers": 2,
+ "watchers": 3,
"score": 0,
"subscribers_count": 2
},
diff --git a/2019/CVE-2019-17558.json b/2019/CVE-2019-17558.json
index bca5086c49..8c8f1c3338 100644
--- a/2019/CVE-2019-17558.json
+++ b/2019/CVE-2019-17558.json
@@ -52,7 +52,7 @@
"stargazers_count": 4278,
"watchers_count": 4278,
"has_discussions": false,
- "forks_count": 1091,
+ "forks_count": 1090,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -80,7 +80,7 @@
"webshell"
],
"visibility": "public",
- "forks": 1091,
+ "forks": 1090,
"watchers": 4278,
"score": 0,
"subscribers_count": 149
diff --git a/2019/CVE-2019-9053.json b/2019/CVE-2019-9053.json
index 328b072077..9786e2b474 100644
--- a/2019/CVE-2019-9053.json
+++ b/2019/CVE-2019-9053.json
@@ -1349,10 +1349,10 @@
"description": "First CTF successfully completed! This repo documents my walkthrough of TryHackMe's Simple CTF. It covers network reconnaissance (Nmap), web exploitation (CVE-2019-9053), and credential cracking. As a dev, it was great to pivot from SQLi to a Root shell by leveraging Sudo misconfigurations. Educational purposes only. ",
"fork": false,
"created_at": "2026-05-13T04:17:22Z",
- "updated_at": "2026-05-13T04:19:53Z",
+ "updated_at": "2026-05-13T11:46:35Z",
"pushed_at": "2026-05-13T04:19:50Z",
- "stargazers_count": 0,
- "watchers_count": 0,
+ "stargazers_count": 1,
+ "watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -1363,7 +1363,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
- "watchers": 0,
+ "watchers": 1,
"score": 0,
"subscribers_count": 0
}
diff --git a/2019/CVE-2019-9511.json b/2019/CVE-2019-9511.json
index 5862bb97b6..edec69617e 100644
--- a/2019/CVE-2019-9511.json
+++ b/2019/CVE-2019-9511.json
@@ -14,10 +14,10 @@
"description": "based on nginx 1.19.5 to fix for CVE-2018-16843, CVE-2018-16844, CVE-2019-9511, CVE-2019-9513, and CVE-2019-9516",
"fork": false,
"created_at": "2020-12-22T10:16:11Z",
- "updated_at": "2020-12-23T11:45:29Z",
+ "updated_at": "2026-05-13T07:10:51Z",
"pushed_at": "2020-12-23T11:45:24Z",
- "stargazers_count": 0,
- "watchers_count": 0,
+ "stargazers_count": 1,
+ "watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
- "watchers": 0,
+ "watchers": 1,
"score": 0,
"subscribers_count": 1
},
diff --git a/2020/CVE-2020-0610.json b/2020/CVE-2020-0610.json
index d715cf7337..3168736b97 100644
--- a/2020/CVE-2020-0610.json
+++ b/2020/CVE-2020-0610.json
@@ -58,8 +58,8 @@
"description": "🔍 Create a safe lab environment for testing CVE-2020-0610, a critical RCE vulnerability in Windows RD Gateway, with minimal disruption using DTLS techniques.",
"fork": false,
"created_at": "2025-09-04T13:21:35Z",
- "updated_at": "2026-05-13T05:41:42Z",
- "pushed_at": "2026-05-13T05:41:38Z",
+ "updated_at": "2026-05-13T08:45:21Z",
+ "pushed_at": "2026-05-13T08:45:16Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2020/CVE-2020-1472.json b/2020/CVE-2020-1472.json
index fce3a14464..596c95b721 100644
--- a/2020/CVE-2020-1472.json
+++ b/2020/CVE-2020-1472.json
@@ -47,10 +47,10 @@
"description": "Test tool for CVE-2020-1472",
"fork": false,
"created_at": "2020-09-08T08:58:37Z",
- "updated_at": "2026-05-12T07:43:33Z",
+ "updated_at": "2026-05-13T06:24:59Z",
"pushed_at": "2025-06-27T07:13:13Z",
- "stargazers_count": 1812,
- "watchers_count": 1812,
+ "stargazers_count": 1813,
+ "watchers_count": 1813,
"has_discussions": false,
"forks_count": 356,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 356,
- "watchers": 1812,
+ "watchers": 1813,
"score": 0,
"subscribers_count": 84
},
@@ -113,10 +113,10 @@
"description": "PoC for Zerologon - all research credits go to Tom Tervoort of Secura",
"fork": false,
"created_at": "2020-09-14T16:56:51Z",
- "updated_at": "2026-05-12T10:47:50Z",
+ "updated_at": "2026-05-13T10:06:00Z",
"pushed_at": "2020-11-03T09:45:24Z",
- "stargazers_count": 1293,
- "watchers_count": 1293,
+ "stargazers_count": 1294,
+ "watchers_count": 1294,
"has_discussions": false,
"forks_count": 280,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 280,
- "watchers": 1293,
+ "watchers": 1294,
"score": 0,
"subscribers_count": 33
},
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
- "updated_at": "2026-05-13T05:02:53Z",
- "pushed_at": "2026-05-13T05:02:49Z",
+ "updated_at": "2026-05-13T10:13:07Z",
+ "pushed_at": "2026-05-13T10:12:55Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
diff --git a/2020/CVE-2020-14882.json b/2020/CVE-2020-14882.json
index 6bfd9be9b3..c9f9636464 100644
--- a/2020/CVE-2020-14882.json
+++ b/2020/CVE-2020-14882.json
@@ -19,7 +19,7 @@
"stargazers_count": 4278,
"watchers_count": 4278,
"has_discussions": false,
- "forks_count": 1091,
+ "forks_count": 1090,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -47,7 +47,7 @@
"webshell"
],
"visibility": "public",
- "forks": 1091,
+ "forks": 1090,
"watchers": 4278,
"score": 0,
"subscribers_count": 149
diff --git a/2020/CVE-2020-28042.json b/2020/CVE-2020-28042.json
index 62f954679e..49b65b7c16 100644
--- a/2020/CVE-2020-28042.json
+++ b/2020/CVE-2020-28042.json
@@ -14,10 +14,10 @@
"description": "针对JWT渗透开发的漏洞验证\/密钥爆破工具，针对CVE-2015-9235\/空白密钥\/未验证签名攻击\/CVE-2016-10555\/CVE-2018-0114\/CVE-2020-28042的结果生成用于FUZZ，也可使用字典\/字符枚举(包括JJWT)的方式进行爆破(JWT Crack)",
"fork": false,
"created_at": "2025-01-27T14:23:31Z",
- "updated_at": "2026-05-07T04:54:35Z",
+ "updated_at": "2026-05-13T07:45:55Z",
"pushed_at": "2025-08-12T14:08:12Z",
- "stargazers_count": 288,
- "watchers_count": 288,
+ "stargazers_count": 289,
+ "watchers_count": 289,
"has_discussions": false,
"forks_count": 10,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 10,
- "watchers": 288,
+ "watchers": 289,
"score": 0,
"subscribers_count": 4
}
diff --git a/2021/CVE-2021-25337.json b/2021/CVE-2021-25337.json
index dd9ac17d81..4396de97fb 100644
--- a/2021/CVE-2021-25337.json
+++ b/2021/CVE-2021-25337.json
@@ -14,8 +14,8 @@
"description": "CVE-2021-25337",
"fork": false,
"created_at": "2026-04-17T14:20:30Z",
- "updated_at": "2026-04-17T14:26:20Z",
- "pushed_at": "2026-04-17T14:26:16Z",
+ "updated_at": "2026-05-13T07:38:43Z",
+ "pushed_at": "2026-05-13T07:38:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2021/CVE-2021-33044.json b/2021/CVE-2021-33044.json
index 1185266b46..12df659df3 100644
--- a/2021/CVE-2021-33044.json
+++ b/2021/CVE-2021-33044.json
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
- "updated_at": "2026-05-13T05:11:10Z",
- "pushed_at": "2026-05-13T05:11:07Z",
+ "updated_at": "2026-05-13T10:44:35Z",
+ "pushed_at": "2026-05-13T10:44:30Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
diff --git a/2021/CVE-2021-36260.json b/2021/CVE-2021-36260.json
index dc1f518fc4..9787079104 100644
--- a/2021/CVE-2021-36260.json
+++ b/2021/CVE-2021-36260.json
@@ -146,10 +146,10 @@
"description": "海康威视RCE漏洞 批量检测和利用工具",
"fork": false,
"created_at": "2022-08-03T17:27:59Z",
- "updated_at": "2026-04-26T10:05:23Z",
+ "updated_at": "2026-05-13T07:49:33Z",
"pushed_at": "2022-08-05T19:57:30Z",
- "stargazers_count": 166,
- "watchers_count": 166,
+ "stargazers_count": 167,
+ "watchers_count": 167,
"has_discussions": false,
"forks_count": 23,
"allow_forking": true,
@@ -163,7 +163,7 @@
],
"visibility": "public",
"forks": 23,
- "watchers": 166,
+ "watchers": 167,
"score": 0,
"subscribers_count": 2
},
diff --git a/2021/CVE-2021-4034.json b/2021/CVE-2021-4034.json
index 9f1fc26268..aee0202eff 100644
--- a/2021/CVE-2021-4034.json
+++ b/2021/CVE-2021-4034.json
@@ -47,10 +47,10 @@
"description": "PoC for PwnKit: Local Privilege Escalation Vulnerability in polkit’s pkexec (CVE-2021-4034)",
"fork": false,
"created_at": "2022-01-26T00:56:36Z",
- "updated_at": "2026-05-04T14:26:00Z",
+ "updated_at": "2026-05-13T07:41:43Z",
"pushed_at": "2023-05-04T19:24:39Z",
- "stargazers_count": 1151,
- "watchers_count": 1151,
+ "stargazers_count": 1150,
+ "watchers_count": 1150,
"has_discussions": false,
"forks_count": 316,
"allow_forking": true,
@@ -65,7 +65,7 @@
],
"visibility": "public",
"forks": 316,
- "watchers": 1151,
+ "watchers": 1150,
"score": 0,
"subscribers_count": 14
},
@@ -150,10 +150,10 @@
"description": "Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation",
"fork": false,
"created_at": "2022-01-26T14:26:10Z",
- "updated_at": "2026-05-11T09:41:40Z",
+ "updated_at": "2026-05-13T08:38:04Z",
"pushed_at": "2022-06-21T14:52:05Z",
- "stargazers_count": 1307,
- "watchers_count": 1307,
+ "stargazers_count": 1308,
+ "watchers_count": 1308,
"has_discussions": false,
"forks_count": 205,
"allow_forking": true,
@@ -166,7 +166,7 @@
],
"visibility": "public",
"forks": 205,
- "watchers": 1307,
+ "watchers": 1308,
"score": 0,
"subscribers_count": 13
},
@@ -2050,8 +2050,8 @@
"description": "🚀 Enhance your penetration testing with PwnKit Helper, a simple tool for exploiting the CVE-2021-4034 vulnerability in pkexec for local privilege escalation.",
"fork": false,
"created_at": "2025-10-01T09:53:03Z",
- "updated_at": "2026-05-13T05:48:19Z",
- "pushed_at": "2026-05-13T05:48:16Z",
+ "updated_at": "2026-05-13T08:53:06Z",
+ "pushed_at": "2026-05-13T08:53:03Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
diff --git a/2021/CVE-2021-44228.json b/2021/CVE-2021-44228.json
index eb8d2c698e..7e7db6a4d7 100644
--- a/2021/CVE-2021-44228.json
+++ b/2021/CVE-2021-44228.json
@@ -1552,10 +1552,10 @@
"description": "Vulnerability scanner and mitigation patch for Log4j2 CVE-2021-44228",
"fork": false,
"created_at": "2021-12-11T11:18:46Z",
- "updated_at": "2026-05-09T22:55:52Z",
+ "updated_at": "2026-05-13T07:43:45Z",
"pushed_at": "2022-04-07T14:47:03Z",
- "stargazers_count": 861,
- "watchers_count": 861,
+ "stargazers_count": 862,
+ "watchers_count": 862,
"has_discussions": false,
"forks_count": 170,
"allow_forking": true,
@@ -1579,7 +1579,7 @@
],
"visibility": "public",
"forks": 170,
- "watchers": 861,
+ "watchers": 862,
"score": 0,
"subscribers_count": 32
},
diff --git a/2022/CVE-2022-0847.json b/2022/CVE-2022-0847.json
index 948b3cb6da..73db2b652d 100644
--- a/2022/CVE-2022-0847.json
+++ b/2022/CVE-2022-0847.json
@@ -1237,10 +1237,10 @@
"description": "A collection of exploits and documentation that can be used to exploit the Linux Dirty Pipe vulnerability.",
"fork": false,
"created_at": "2022-03-12T20:57:24Z",
- "updated_at": "2026-05-12T05:07:01Z",
+ "updated_at": "2026-05-13T11:06:40Z",
"pushed_at": "2023-05-20T05:55:45Z",
- "stargazers_count": 717,
- "watchers_count": 717,
+ "stargazers_count": 718,
+ "watchers_count": 718,
"has_discussions": false,
"forks_count": 161,
"allow_forking": true,
@@ -1251,7 +1251,7 @@
"topics": [],
"visibility": "public",
"forks": 161,
- "watchers": 717,
+ "watchers": 718,
"score": 0,
"subscribers_count": 14
},
diff --git a/2022/CVE-2022-38691.json b/2022/CVE-2022-38691.json
index a08e4804a3..83f491e0b6 100644
--- a/2022/CVE-2022-38691.json
+++ b/2022/CVE-2022-38691.json
@@ -19,7 +19,7 @@
"stargazers_count": 96,
"watchers_count": 96,
"has_discussions": false,
- "forks_count": 19,
+ "forks_count": 20,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -30,7 +30,7 @@
"unisoc"
],
"visibility": "public",
- "forks": 19,
+ "forks": 20,
"watchers": 96,
"score": 0,
"subscribers_count": 6
diff --git a/2023/CVE-2023-32434.json b/2023/CVE-2023-32434.json
index 90a2f75a63..e2340dbce0 100644
--- a/2023/CVE-2023-32434.json
+++ b/2023/CVE-2023-32434.json
@@ -47,8 +47,8 @@
"description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙",
"fork": false,
"created_at": "2025-08-13T09:19:29Z",
- "updated_at": "2026-05-13T05:37:40Z",
- "pushed_at": "2026-05-13T05:37:37Z",
+ "updated_at": "2026-05-13T12:31:34Z",
+ "pushed_at": "2026-05-13T12:30:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2023/CVE-2023-34468.json b/2023/CVE-2023-34468.json
index ea0c3a721e..73d9ca030f 100644
--- a/2023/CVE-2023-34468.json
+++ b/2023/CVE-2023-34468.json
@@ -87,10 +87,10 @@
"description": "PoC exploit for CVE-2023-34468 — RCE via H2 RUNSCRIPT in Apache NiFi <= 1.21.0",
"fork": false,
"created_at": "2026-05-10T15:43:28Z",
- "updated_at": "2026-05-10T18:40:55Z",
+ "updated_at": "2026-05-13T10:24:02Z",
"pushed_at": "2026-05-10T18:40:52Z",
- "stargazers_count": 0,
- "watchers_count": 0,
+ "stargazers_count": 1,
+ "watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -101,7 +101,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
- "watchers": 0,
+ "watchers": 1,
"score": 0,
"subscribers_count": 0
},
diff --git a/2023/CVE-2023-39910.json b/2023/CVE-2023-39910.json
index 795a24f540..1116c5c067 100644
--- a/2023/CVE-2023-39910.json
+++ b/2023/CVE-2023-39910.json
@@ -66,8 +66,8 @@
"description": "🔒 Analyze the CVE-2023-39910 vulnerability in Libbitcoin Explorer to understand its impact on Bitcoin wallet security and protect your assets.",
"fork": false,
"created_at": "2026-01-07T14:24:08Z",
- "updated_at": "2026-05-13T02:59:03Z",
- "pushed_at": "2026-05-13T02:59:00Z",
+ "updated_at": "2026-05-13T09:53:23Z",
+ "pushed_at": "2026-05-13T09:53:19Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2023/CVE-2023-46604.json b/2023/CVE-2023-46604.json
index 779cd1e26c..e543a2f98c 100644
--- a/2023/CVE-2023-46604.json
+++ b/2023/CVE-2023-46604.json
@@ -1153,8 +1153,8 @@
"description": "Exploitation of CVE-2023-44604. Using a Kali Linux VM (attacker) and a Debian 11 server VM (victim)",
"fork": false,
"created_at": "2026-05-01T08:30:07Z",
- "updated_at": "2026-05-13T00:03:20Z",
- "pushed_at": "2026-05-13T00:03:16Z",
+ "updated_at": "2026-05-13T11:59:50Z",
+ "pushed_at": "2026-05-13T11:59:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2023/CVE-2023-4863.json b/2023/CVE-2023-4863.json
index 67bf4cefa2..0b1336d244 100644
--- a/2023/CVE-2023-4863.json
+++ b/2023/CVE-2023-4863.json
@@ -378,7 +378,7 @@
"fork": false,
"created_at": "2026-05-08T13:04:43Z",
"updated_at": "2026-05-08T13:05:11Z",
- "pushed_at": "2026-05-13T06:16:53Z",
+ "pushed_at": "2026-05-13T08:14:31Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2023/CVE-2023-48795.json b/2023/CVE-2023-48795.json
index b8215b10dc..cab5f1f4bc 100644
--- a/2023/CVE-2023-48795.json
+++ b/2023/CVE-2023-48795.json
@@ -47,7 +47,7 @@
"description": "Python tool to identify SSH servers potentially vulnerable to CVE-2023-48795 (Terrapin) by analyzing OpenSSH version banners via netcat. Useful for internal audits, penetration testing, and vulnerability assessments.",
"fork": false,
"created_at": "2025-05-23T06:14:57Z",
- "updated_at": "2025-05-23T11:32:13Z",
+ "updated_at": "2026-05-13T07:04:07Z",
"pushed_at": "2025-05-23T11:32:10Z",
"stargazers_count": 0,
"watchers_count": 0,
@@ -80,8 +80,8 @@
"description": "SSH Terrapin Attack Vulnerability Scanner (CVE-2023-48795)",
"fork": false,
"created_at": "2026-03-22T08:00:23Z",
- "updated_at": "2026-05-13T06:30:51Z",
- "pushed_at": "2026-03-22T08:38:30Z",
+ "updated_at": "2026-05-13T11:06:57Z",
+ "pushed_at": "2026-05-13T10:56:41Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2023/CVE-2023-6241.json b/2023/CVE-2023-6241.json
index e7399dd810..e2fbb23712 100644
--- a/2023/CVE-2023-6241.json
+++ b/2023/CVE-2023-6241.json
@@ -56,10 +56,10 @@
"description": "Adaptation of CVE-2023-6241 for Google Pixel 7 from Google Pixel 8 taken from securitylab\/SecurityExploits\/Android\/Mali\/CVE_2023_6241",
"fork": false,
"created_at": "2024-09-17T07:19:54Z",
- "updated_at": "2026-04-17T06:57:39Z",
+ "updated_at": "2026-05-13T08:40:33Z",
"pushed_at": "2025-03-21T14:30:46Z",
- "stargazers_count": 5,
- "watchers_count": 5,
+ "stargazers_count": 6,
+ "watchers_count": 6,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -70,7 +70,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
- "watchers": 5,
+ "watchers": 6,
"score": 0,
"subscribers_count": 1
}
diff --git a/2024/CVE-2024-0044.json b/2024/CVE-2024-0044.json
index 76e41f4223..3a28f2dfcf 100644
--- a/2024/CVE-2024-0044.json
+++ b/2024/CVE-2024-0044.json
@@ -47,10 +47,10 @@
"description": "CVE-2024-0044: a \"run-as any app\" high-severity vulnerability affecting Android versions 12 and 13",
"fork": false,
"created_at": "2024-06-18T12:30:53Z",
- "updated_at": "2026-04-28T20:35:43Z",
+ "updated_at": "2026-05-13T12:31:05Z",
"pushed_at": "2024-12-02T06:29:52Z",
- "stargazers_count": 331,
- "watchers_count": 331,
+ "stargazers_count": 332,
+ "watchers_count": 332,
"has_discussions": false,
"forks_count": 68,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 68,
- "watchers": 331,
+ "watchers": 332,
"score": 0,
"subscribers_count": 7
},
diff --git a/2024/CVE-2024-0670.json b/2024/CVE-2024-0670.json
index 6995622ea5..8c9a9cfcd9 100644
--- a/2024/CVE-2024-0670.json
+++ b/2024/CVE-2024-0670.json
@@ -172,8 +172,8 @@
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
"fork": false,
"created_at": "2026-01-08T01:32:09Z",
- "updated_at": "2026-05-13T02:59:21Z",
- "pushed_at": "2026-05-13T02:59:18Z",
+ "updated_at": "2026-05-13T09:53:59Z",
+ "pushed_at": "2026-05-13T09:53:55Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2024/CVE-2024-21338.json b/2024/CVE-2024-21338.json
index cf58641db5..bf8d4d323e 100644
--- a/2024/CVE-2024-21338.json
+++ b/2024/CVE-2024-21338.json
@@ -14,7 +14,7 @@
"description": "Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled.",
"fork": false,
"created_at": "2024-04-13T05:53:02Z",
- "updated_at": "2026-05-07T15:52:41Z",
+ "updated_at": "2026-05-13T10:08:45Z",
"pushed_at": "2024-04-16T21:00:14Z",
"stargazers_count": 319,
"watchers_count": 319,
diff --git a/2024/CVE-2024-21626.json b/2024/CVE-2024-21626.json
index 328cd21c8b..75f74906f9 100644
--- a/2024/CVE-2024-21626.json
+++ b/2024/CVE-2024-21626.json
@@ -547,10 +547,10 @@
"description": "PoC for CVE-2024-21626: runc leaks an internal fd referencing the host CWD before pivot_root, enabling container escape by setting process.cwd to \/proc\/self\/fd\/7",
"fork": false,
"created_at": "2026-02-28T15:54:15Z",
- "updated_at": "2026-02-28T15:58:48Z",
+ "updated_at": "2026-05-13T07:56:19Z",
"pushed_at": "2026-02-28T15:58:16Z",
- "stargazers_count": 0,
- "watchers_count": 0,
+ "stargazers_count": 1,
+ "watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -561,7 +561,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
- "watchers": 0,
+ "watchers": 1,
"score": 0,
"subscribers_count": 0
}
diff --git a/2024/CVE-2024-21683.json b/2024/CVE-2024-21683.json
index 2feae83afd..e228d78b94 100644
--- a/2024/CVE-2024-21683.json
+++ b/2024/CVE-2024-21683.json
@@ -134,5 +134,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 1
+ },
+ {
+ "id": 1106770320,
+ "name": "cve-2024-21683-rce",
+ "full_name": "r3db34rdh4x\/cve-2024-21683-rce",
+ "owner": {
+ "login": "r3db34rdh4x",
+ "id": 180334279,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/180334279?v=4",
+ "html_url": "https:\/\/github.com\/r3db34rdh4x",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/r3db34rdh4x\/cve-2024-21683-rce",
+ "description": "CVE-2024-21683 Confluence Post Auth RCE",
+ "fork": false,
+ "created_at": "2025-11-29T22:48:39Z",
+ "updated_at": "2025-11-29T22:48:39Z",
+ "pushed_at": "2024-11-29T13:33:23Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2024/CVE-2024-23222.json b/2024/CVE-2024-23222.json
index f8f9fb3107..d0e50fab48 100644
--- a/2024/CVE-2024-23222.json
+++ b/2024/CVE-2024-23222.json
@@ -80,8 +80,8 @@
"description": "Analyze and deobfuscate the Coruna Exploit Kit (CVE-2024-23222) to enhance understanding and detection of related threats.",
"fork": false,
"created_at": "2026-03-15T16:36:07Z",
- "updated_at": "2026-05-13T03:42:40Z",
- "pushed_at": "2026-05-13T03:42:36Z",
+ "updated_at": "2026-05-13T10:56:27Z",
+ "pushed_at": "2026-05-13T10:56:24Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2024/CVE-2024-31317.json b/2024/CVE-2024-31317.json
index 1784aa1488..935d421eb3 100644
--- a/2024/CVE-2024-31317.json
+++ b/2024/CVE-2024-31317.json
@@ -217,7 +217,7 @@
"stargazers_count": 57,
"watchers_count": 57,
"has_discussions": false,
- "forks_count": 6,
+ "forks_count": 7,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -225,7 +225,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 6,
+ "forks": 7,
"watchers": 57,
"score": 0,
"subscribers_count": 1
diff --git a/2024/CVE-2024-32019.json b/2024/CVE-2024-32019.json
index d1a44b92d4..1bc60a0789 100644
--- a/2024/CVE-2024-32019.json
+++ b/2024/CVE-2024-32019.json
@@ -403,5 +403,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1237473549,
+ "name": "CVE-2024-32019-Netdata-ndsudo-PrivEsc",
+ "full_name": "kikechans\/CVE-2024-32019-Netdata-ndsudo-PrivEsc",
+ "owner": {
+ "login": "kikechans",
+ "id": 29206508,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/29206508?v=4",
+ "html_url": "https:\/\/github.com\/kikechans",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/kikechans\/CVE-2024-32019-Netdata-ndsudo-PrivEsc",
+ "description": null,
+ "fork": false,
+ "created_at": "2026-05-13T08:05:36Z",
+ "updated_at": "2026-05-13T08:08:58Z",
+ "pushed_at": "2026-05-13T08:08:54Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2024/CVE-2024-3400.json b/2024/CVE-2024-3400.json
index c62a964bd2..687a71ac78 100644
--- a/2024/CVE-2024-3400.json
+++ b/2024/CVE-2024-3400.json
@@ -80,10 +80,10 @@
"description": "CVE-2024-3400",
"fork": false,
"created_at": "2024-04-13T14:00:31Z",
- "updated_at": "2026-03-27T19:05:16Z",
+ "updated_at": "2026-05-13T08:22:53Z",
"pushed_at": "2024-04-18T07:11:17Z",
- "stargazers_count": 71,
- "watchers_count": 71,
+ "stargazers_count": 72,
+ "watchers_count": 72,
"has_discussions": false,
"forks_count": 26,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 26,
- "watchers": 71,
+ "watchers": 72,
"score": 0,
"subscribers_count": 2
},
diff --git a/2024/CVE-2024-36401.json b/2024/CVE-2024-36401.json
index 3f4f99edda..b580d5f36d 100644
--- a/2024/CVE-2024-36401.json
+++ b/2024/CVE-2024-36401.json
@@ -521,10 +521,10 @@
"description": "CVE-2024-36401 图形化利用工具，支持各个JDK版本利用以及回显、内存马实现",
"fork": false,
"created_at": "2025-04-11T04:36:34Z",
- "updated_at": "2026-05-09T07:10:44Z",
+ "updated_at": "2026-05-13T09:12:06Z",
"pushed_at": "2025-07-16T11:52:37Z",
- "stargazers_count": 42,
- "watchers_count": 42,
+ "stargazers_count": 43,
+ "watchers_count": 43,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -535,7 +535,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
- "watchers": 42,
+ "watchers": 43,
"score": 0,
"subscribers_count": 1
},
diff --git a/2024/CVE-2024-4367.json b/2024/CVE-2024-4367.json
index 183219cfed..19e659c42a 100644
--- a/2024/CVE-2024-4367.json
+++ b/2024/CVE-2024-4367.json
@@ -665,72 +665,6 @@
"score": 0,
"subscribers_count": 0
},
- {
- "id": 1031345181,
- "name": "POC_CVE-2024-4367",
- "full_name": "MihranGIT\/POC_CVE-2024-4367",
- "owner": {
- "login": "MihranGIT",
- "id": 91540388,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/91540388?v=4",
- "html_url": "https:\/\/github.com\/MihranGIT",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/MihranGIT\/POC_CVE-2024-4367",
- "description": "POC",
- "fork": false,
- "created_at": "2025-08-03T14:48:17Z",
- "updated_at": "2026-01-29T09:57:51Z",
- "pushed_at": "2026-01-29T09:57:47Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 0
- },
- {
- "id": 1031349528,
- "name": "CVE-2024-4367",
- "full_name": "MihranGIT\/CVE-2024-4367",
- "owner": {
- "login": "MihranGIT",
- "id": 91540388,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/91540388?v=4",
- "html_url": "https:\/\/github.com\/MihranGIT",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/MihranGIT\/CVE-2024-4367",
- "description": null,
- "fork": false,
- "created_at": "2025-08-03T14:57:40Z",
- "updated_at": "2025-08-03T14:57:40Z",
- "pushed_at": "2025-08-03T14:57:40Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 0
- },
{
"id": 1042501983,
"name": "CVE-2024-4367",
diff --git a/2024/CVE-2024-44258.json b/2024/CVE-2024-44258.json
index b6a3426ae9..321b1f0732 100644
--- a/2024/CVE-2024-44258.json
+++ b/2024/CVE-2024-44258.json
@@ -80,10 +80,10 @@
"description": "CVE-2024-44258",
"fork": false,
"created_at": "2026-05-13T01:57:49Z",
- "updated_at": "2026-05-13T02:17:45Z",
+ "updated_at": "2026-05-13T11:43:12Z",
"pushed_at": "2026-05-13T02:11:10Z",
- "stargazers_count": 1,
- "watchers_count": 1,
+ "stargazers_count": 3,
+ "watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
- "watchers": 1,
+ "watchers": 3,
"score": 0,
"subscribers_count": 0
}
diff --git a/2024/CVE-2024-47823.json b/2024/CVE-2024-47823.json
index bd92a5b8e6..f5e1301bd7 100644
--- a/2024/CVE-2024-47823.json
+++ b/2024/CVE-2024-47823.json
@@ -14,8 +14,8 @@
"description": "High-interaction honeypot mimicking a vulnerable Laravel\/Livewire app. Captures RCE exploits and webshells targeting CVE-2024-47823, CVE-2025-54068, and CVE-2025-14894, then analyzes them in sandboxed Docker containers to extract IOCs.",
"fork": false,
"created_at": "2026-04-10T09:21:26Z",
- "updated_at": "2026-04-12T20:24:18Z",
- "pushed_at": "2026-04-12T07:39:40Z",
+ "updated_at": "2026-05-13T12:12:19Z",
+ "pushed_at": "2026-05-13T12:11:55Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2025/CVE-2025-14847.json b/2025/CVE-2025-14847.json
index 07ca76539f..7f96b82131 100644
--- a/2025/CVE-2025-14847.json
+++ b/2025/CVE-2025-14847.json
@@ -14,8 +14,8 @@
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
"fork": false,
"created_at": "2025-07-30T15:52:00Z",
- "updated_at": "2026-05-13T03:04:01Z",
- "pushed_at": "2026-05-13T03:03:57Z",
+ "updated_at": "2026-05-13T10:01:14Z",
+ "pushed_at": "2026-05-13T10:00:52Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1129,8 +1129,8 @@
"description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
"fork": false,
"created_at": "2026-01-14T06:05:44Z",
- "updated_at": "2026-05-13T06:48:35Z",
- "pushed_at": "2026-05-13T06:48:31Z",
+ "updated_at": "2026-05-13T09:59:24Z",
+ "pushed_at": "2026-05-13T09:59:21Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-2304.json b/2025/CVE-2025-2304.json
index 66ecf11eb5..f4710d3c19 100644
--- a/2025/CVE-2025-2304.json
+++ b/2025/CVE-2025-2304.json
@@ -412,8 +412,8 @@
"description": "🛠️ Exploit CVE-2025-2304 in Camaleon CMS easily with this Python script for privilege escalation, tested on version 2.9.0.",
"fork": false,
"created_at": "2026-02-14T20:01:20Z",
- "updated_at": "2026-05-13T03:23:30Z",
- "pushed_at": "2026-05-13T03:23:27Z",
+ "updated_at": "2026-05-13T10:31:08Z",
+ "pushed_at": "2026-05-13T10:30:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-24257.json b/2025/CVE-2025-24257.json
index d63efba2fa..057ae286b9 100644
--- a/2025/CVE-2025-24257.json
+++ b/2025/CVE-2025-24257.json
@@ -14,8 +14,8 @@
"description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis",
"fork": false,
"created_at": "2026-04-04T03:42:55Z",
- "updated_at": "2026-05-13T03:53:38Z",
- "pushed_at": "2026-05-13T03:53:34Z",
+ "updated_at": "2026-05-13T11:10:41Z",
+ "pushed_at": "2026-05-13T11:10:36Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-24893.json b/2025/CVE-2025-24893.json
index 3137122ce9..c1e2009fbf 100644
--- a/2025/CVE-2025-24893.json
+++ b/2025/CVE-2025-24893.json
@@ -321,10 +321,10 @@
"description": "PoC for CVE-2025-24893: XWiki' Remote Code Execution exploit for versions prior to 15.10.11, 16.4.1 and 16.5.0RC1.",
"fork": false,
"created_at": "2025-08-04T02:29:17Z",
- "updated_at": "2026-01-14T07:38:06Z",
+ "updated_at": "2026-05-13T07:36:47Z",
"pushed_at": "2025-08-22T05:34:13Z",
- "stargazers_count": 20,
- "watchers_count": 20,
+ "stargazers_count": 21,
+ "watchers_count": 21,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -342,7 +342,7 @@
],
"visibility": "public",
"forks": 3,
- "watchers": 20,
+ "watchers": 21,
"score": 0,
"subscribers_count": 0
},
diff --git a/2025/CVE-2025-26788.json b/2025/CVE-2025-26788.json
index 62471a521a..6136cf34b4 100644
--- a/2025/CVE-2025-26788.json
+++ b/2025/CVE-2025-26788.json
@@ -31,5 +31,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1237450543,
+ "name": "CVE-2025-26788",
+ "full_name": "jun2e0\/CVE-2025-26788",
+ "owner": {
+ "login": "jun2e0",
+ "id": 283872288,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/283872288?v=4",
+ "html_url": "https:\/\/github.com\/jun2e0",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/jun2e0\/CVE-2025-26788",
+ "description": null,
+ "fork": false,
+ "created_at": "2026-05-13T07:38:31Z",
+ "updated_at": "2026-05-13T08:01:12Z",
+ "pushed_at": "2026-05-13T08:01:09Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2026/CVE-2026-27940.json b/2025/CVE-2025-29338.json
similarity index 58%
rename from 2026/CVE-2026-27940.json
rename to 2025/CVE-2025-29338.json
index d42a6499d2..6186658bcb 100644
--- a/2026/CVE-2026-27940.json
+++ b/2025/CVE-2025-29338.json
@@ -1,21 +1,21 @@
[
{
- "id": 1195282286,
- "name": "CVE-2026-27940",
- "full_name": "ngtuonghung\/CVE-2026-27940",
+ "id": 1237446165,
+ "name": "CVE-2025-29338",
+ "full_name": "masjadaan\/CVE-2025-29338",
"owner": {
- "login": "ngtuonghung",
- "id": 141505121,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/141505121?v=4",
- "html_url": "https:\/\/github.com\/ngtuonghung",
+ "login": "masjadaan",
+ "id": 24417891,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/24417891?v=4",
+ "html_url": "https:\/\/github.com\/masjadaan",
"user_view_type": "public"
},
- "html_url": "https:\/\/github.com\/ngtuonghung\/CVE-2026-27940",
+ "html_url": "https:\/\/github.com\/masjadaan\/CVE-2025-29338",
"description": null,
"fork": false,
- "created_at": "2026-03-29T13:30:04Z",
- "updated_at": "2026-04-04T11:21:14Z",
- "pushed_at": "2026-03-29T13:34:53Z",
+ "created_at": "2026-05-13T07:33:26Z",
+ "updated_at": "2026-05-13T07:41:40Z",
+ "pushed_at": "2026-05-13T07:41:36Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-31258.json b/2025/CVE-2025-31258.json
index 70152f54a5..28633ed169 100644
--- a/2025/CVE-2025-31258.json
+++ b/2025/CVE-2025-31258.json
@@ -14,8 +14,8 @@
"description": "🔓 Explore CVE-2025-31258 with this PoC demonstrating partial sandbox escape using RemoteViewServices for practical 1-day security practice.",
"fork": false,
"created_at": "2020-06-23T15:20:11Z",
- "updated_at": "2026-05-13T05:43:16Z",
- "pushed_at": "2026-05-13T05:43:12Z",
+ "updated_at": "2026-05-13T12:36:43Z",
+ "pushed_at": "2026-05-13T12:36:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-32463.json b/2025/CVE-2025-32463.json
index f06dabe65d..dfb4796108 100644
--- a/2025/CVE-2025-32463.json
+++ b/2025/CVE-2025-32463.json
@@ -645,8 +645,8 @@
"description": "Demonstrate CVE-2025-32463 with this PoC for sudo's chroot feature. Explore the exploit and its impact on vulnerable sudo versions. 🐱💻🔒",
"fork": false,
"created_at": "2025-07-04T18:20:09Z",
- "updated_at": "2026-05-13T05:36:33Z",
- "pushed_at": "2026-05-13T05:36:29Z",
+ "updated_at": "2026-05-13T12:29:18Z",
+ "pushed_at": "2026-05-13T12:29:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -1628,8 +1628,8 @@
"description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.",
"fork": false,
"created_at": "2025-09-20T00:42:07Z",
- "updated_at": "2026-05-13T05:44:26Z",
- "pushed_at": "2026-05-13T05:44:23Z",
+ "updated_at": "2026-05-13T12:38:10Z",
+ "pushed_at": "2026-05-13T12:38:06Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1680,8 +1680,8 @@
"description": null,
"fork": false,
"created_at": "2025-09-20T02:01:08Z",
- "updated_at": "2026-05-13T05:44:26Z",
- "pushed_at": "2026-05-13T05:44:23Z",
+ "updated_at": "2026-05-13T12:38:09Z",
+ "pushed_at": "2026-05-13T12:38:04Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-36911.json b/2025/CVE-2025-36911.json
index cf58267593..aebb78f46b 100644
--- a/2025/CVE-2025-36911.json
+++ b/2025/CVE-2025-36911.json
@@ -294,8 +294,8 @@
"description": "🔍 Scan and research CVE-2025-36911 vulnerabilities with WPair, a specialized tool for Android built in Kotlin, ensuring your applications remain secure.",
"fork": false,
"created_at": "2026-01-29T01:59:47Z",
- "updated_at": "2026-05-13T03:14:14Z",
- "pushed_at": "2026-05-13T03:14:10Z",
+ "updated_at": "2026-05-13T10:15:52Z",
+ "pushed_at": "2026-05-13T10:15:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-38352.json b/2025/CVE-2025-38352.json
index 7dfa05884b..e2859cc3cd 100644
--- a/2025/CVE-2025-38352.json
+++ b/2025/CVE-2025-38352.json
@@ -47,10 +47,10 @@
"description": "Android kernel exploit for CVE-2025-38352, previously exploited in-the-wild. Targets vulnerable x86_64 Linux kernels v5.10.x.",
"fork": false,
"created_at": "2026-01-03T16:52:18Z",
- "updated_at": "2026-05-08T23:35:05Z",
+ "updated_at": "2026-05-13T12:01:24Z",
"pushed_at": "2026-01-05T03:45:37Z",
- "stargazers_count": 290,
- "watchers_count": 290,
+ "stargazers_count": 291,
+ "watchers_count": 291,
"has_discussions": false,
"forks_count": 44,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 44,
- "watchers": 290,
+ "watchers": 291,
"score": 0,
"subscribers_count": 2
},
diff --git a/2025/CVE-2025-4275.json b/2025/CVE-2025-4275.json
index 774872a120..9daef8975f 100644
--- a/2025/CVE-2025-4275.json
+++ b/2025/CVE-2025-4275.json
@@ -14,10 +14,10 @@
"description": "Binaries, drivers, PoCs and other stuff on Hydroph0bia vulnerability (CVE-2025-4275)",
"fork": false,
"created_at": "2025-06-10T11:24:13Z",
- "updated_at": "2026-03-15T16:20:29Z",
+ "updated_at": "2026-05-13T10:19:15Z",
"pushed_at": "2025-06-20T05:47:21Z",
- "stargazers_count": 41,
- "watchers_count": 41,
+ "stargazers_count": 42,
+ "watchers_count": 42,
"has_discussions": false,
"forks_count": 13,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 13,
- "watchers": 41,
+ "watchers": 42,
"score": 0,
"subscribers_count": 1
}
diff --git a/2025/CVE-2025-48804.json b/2025/CVE-2025-48804.json
index eec56b7d52..70f3f080b0 100644
--- a/2025/CVE-2025-48804.json
+++ b/2025/CVE-2025-48804.json
@@ -14,12 +14,12 @@
"description": "Downgrade attack for CVE-2025-48804",
"fork": false,
"created_at": "2026-04-30T13:05:30Z",
- "updated_at": "2026-05-13T06:45:37Z",
+ "updated_at": "2026-05-13T12:33:57Z",
"pushed_at": "2026-05-06T15:45:37Z",
- "stargazers_count": 74,
- "watchers_count": 74,
+ "stargazers_count": 94,
+ "watchers_count": 94,
"has_discussions": false,
- "forks_count": 8,
+ "forks_count": 11,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -31,8 +31,8 @@
"cve-2025-48804"
],
"visibility": "public",
- "forks": 8,
- "watchers": 74,
+ "forks": 11,
+ "watchers": 94,
"score": 0,
"subscribers_count": 0
}
diff --git a/2025/CVE-2025-49132.json b/2025/CVE-2025-49132.json
index 7c4bb64c96..4ec5117100 100644
--- a/2025/CVE-2025-49132.json
+++ b/2025/CVE-2025-49132.json
@@ -461,6 +461,44 @@
"score": 0,
"subscribers_count": 0
},
+ {
+ "id": 1153650233,
+ "name": "HTB-Pterodactyl-RCE-CVE-2025-49132",
+ "full_name": "symphony2colour\/HTB-Pterodactyl-RCE-CVE-2025-49132",
+ "owner": {
+ "login": "symphony2colour",
+ "id": 117383949,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/117383949?v=4",
+ "html_url": "https:\/\/github.com\/symphony2colour",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/symphony2colour\/HTB-Pterodactyl-RCE-CVE-2025-49132",
+ "description": "This repo contains RCE exploit for Pterodactyl htb machine",
+ "fork": false,
+ "created_at": "2026-02-09T14:43:12Z",
+ "updated_at": "2026-05-13T10:50:53Z",
+ "pushed_at": "2026-02-20T08:54:12Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve-2025-49132",
+ "htb",
+ "htb-scripts",
+ "htb-writeups"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ },
{
"id": 1154791403,
"name": "CVE-2025-49132",
diff --git a/2025/CVE-2025-49144.json b/2025/CVE-2025-49144.json
index 7fc8b51f1f..db1ed2bf3b 100644
--- a/2025/CVE-2025-49144.json
+++ b/2025/CVE-2025-49144.json
@@ -251,8 +251,8 @@
"description": null,
"fork": false,
"created_at": "2025-09-19T17:17:19Z",
- "updated_at": "2026-05-13T05:44:21Z",
- "pushed_at": "2026-05-13T05:44:17Z",
+ "updated_at": "2026-05-13T12:37:59Z",
+ "pushed_at": "2026-05-13T12:37:55Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2025/CVE-2025-49844.json b/2025/CVE-2025-49844.json
index 6694f0a313..32a125ec2a 100644
--- a/2025/CVE-2025-49844.json
+++ b/2025/CVE-2025-49844.json
@@ -14,8 +14,8 @@
"description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.",
"fork": false,
"created_at": "2019-04-13T07:51:09Z",
- "updated_at": "2026-05-13T06:05:42Z",
- "pushed_at": "2026-05-13T06:05:39Z",
+ "updated_at": "2026-05-13T09:08:25Z",
+ "pushed_at": "2026-05-13T09:08:14Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
"fork": false,
"created_at": "2022-04-06T09:27:39Z",
- "updated_at": "2026-05-13T06:06:11Z",
- "pushed_at": "2026-05-13T06:06:08Z",
+ "updated_at": "2026-05-13T09:09:04Z",
+ "pushed_at": "2026-05-13T09:08:59Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2025/CVE-2025-52915.json b/2025/CVE-2025-52915.json
index 062344ba21..02d5776627 100644
--- a/2025/CVE-2025-52915.json
+++ b/2025/CVE-2025-52915.json
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055,).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
- "updated_at": "2026-05-12T18:39:34Z",
+ "updated_at": "2026-05-13T10:49:10Z",
"pushed_at": "2026-05-09T10:13:34Z",
- "stargazers_count": 729,
- "watchers_count": 729,
+ "stargazers_count": 731,
+ "watchers_count": 731,
"has_discussions": false,
"forks_count": 109,
"allow_forking": true,
@@ -37,7 +37,7 @@
],
"visibility": "public",
"forks": 109,
- "watchers": 729,
+ "watchers": 731,
"score": 0,
"subscribers_count": 18
}
diff --git a/2025/CVE-2025-54068.json b/2025/CVE-2025-54068.json
index 723325bd33..eeda0d61ee 100644
--- a/2025/CVE-2025-54068.json
+++ b/2025/CVE-2025-54068.json
@@ -151,8 +151,8 @@
"description": "High-interaction honeypot mimicking a vulnerable Laravel\/Livewire app. Captures RCE exploits and webshells targeting CVE-2024-47823, CVE-2025-54068, and CVE-2025-14894, then analyzes them in sandboxed Docker containers to extract IOCs.",
"fork": false,
"created_at": "2026-04-10T09:21:26Z",
- "updated_at": "2026-04-12T20:24:18Z",
- "pushed_at": "2026-04-12T07:39:40Z",
+ "updated_at": "2026-05-13T12:12:19Z",
+ "pushed_at": "2026-05-13T12:11:55Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2025/CVE-2025-5419.json b/2025/CVE-2025-5419.json
index ee252fa456..6143c4c35c 100644
--- a/2025/CVE-2025-5419.json
+++ b/2025/CVE-2025-5419.json
@@ -14,8 +14,8 @@
"description": "🛡️ Analyze CVE-2025-5419 to exploit an uninitialized read vulnerability in V8 for arbitrary read\/write access within the sandbox environment.",
"fork": false,
"created_at": "2023-01-25T04:41:49Z",
- "updated_at": "2026-05-13T03:21:57Z",
- "pushed_at": "2026-05-13T03:21:54Z",
+ "updated_at": "2026-05-13T10:29:47Z",
+ "pushed_at": "2026-05-13T10:27:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-54253.json b/2025/CVE-2025-54253.json
index 66352a9338..8a4a9b40a1 100644
--- a/2025/CVE-2025-54253.json
+++ b/2025/CVE-2025-54253.json
@@ -67,8 +67,8 @@
"description": "🐙 CVE-2025-54253 exploit demo for Adobe AEM Forms on JEE: OGNL injection to RCE with PoC, Python 3.10 exploit code, reproducer and mitigation guidance.",
"fork": false,
"created_at": "2025-08-17T22:04:33Z",
- "updated_at": "2026-05-13T05:38:50Z",
- "pushed_at": "2026-05-13T05:38:46Z",
+ "updated_at": "2026-05-13T12:32:18Z",
+ "pushed_at": "2026-05-13T12:32:02Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
diff --git a/2025/CVE-2025-54424.json b/2025/CVE-2025-54424.json
index b3c0a80d5d..65b43cea9a 100644
--- a/2025/CVE-2025-54424.json
+++ b/2025/CVE-2025-54424.json
@@ -53,8 +53,8 @@
"description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐",
"fork": false,
"created_at": "2025-08-14T05:16:16Z",
- "updated_at": "2026-05-13T05:38:25Z",
- "pushed_at": "2026-05-13T05:38:22Z",
+ "updated_at": "2026-05-13T12:32:01Z",
+ "pushed_at": "2026-05-13T12:31:44Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
diff --git a/2025/CVE-2025-55182.json b/2025/CVE-2025-55182.json
index 8160a3b1d1..2dad66fab5 100644
--- a/2025/CVE-2025-55182.json
+++ b/2025/CVE-2025-55182.json
@@ -14,8 +14,8 @@
"description": "🔍 Demonstrate CVE-2025-55182, a critical vulnerability in React Server Components allowing unauthenticated arbitrary code execution.",
"fork": false,
"created_at": "2021-09-18T02:04:33Z",
- "updated_at": "2026-05-13T06:35:27Z",
- "pushed_at": "2026-05-13T06:35:24Z",
+ "updated_at": "2026-05-13T09:41:55Z",
+ "pushed_at": "2026-05-13T09:41:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.",
"fork": false,
"created_at": "2022-06-17T10:19:10Z",
- "updated_at": "2026-05-13T06:35:10Z",
- "pushed_at": "2026-05-13T06:35:07Z",
+ "updated_at": "2026-05-13T09:41:27Z",
+ "pushed_at": "2026-05-13T09:40:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -151,8 +151,8 @@
"description": "🔍 Detect vulnerabilities CVE-2025-55182 and CVE-2025-66478 in Next.js apps with this reliable command-line scanner.",
"fork": false,
"created_at": "2023-11-27T18:17:43Z",
- "updated_at": "2026-05-13T06:35:11Z",
- "pushed_at": "2026-05-13T06:35:07Z",
+ "updated_at": "2026-05-13T09:41:46Z",
+ "pushed_at": "2026-05-13T09:40:58Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -203,8 +203,8 @@
"description": "🚨 Exploit CVE-2025-55182, a critical RCE vulnerability in React Server Components for Next.js apps; enables testing for prototype pollution risks.",
"fork": false,
"created_at": "2024-04-24T02:36:56Z",
- "updated_at": "2026-05-13T06:36:09Z",
- "pushed_at": "2026-05-13T06:36:06Z",
+ "updated_at": "2026-05-13T09:43:11Z",
+ "pushed_at": "2026-05-13T09:42:13Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -251,8 +251,8 @@
"description": "🚨 Exploit and scan for CVE-2025-55182, a critical React\/Next.js vulnerability enabling remote code execution through prototype pollution techniques.",
"fork": false,
"created_at": "2024-05-28T16:48:51Z",
- "updated_at": "2026-05-13T06:34:54Z",
- "pushed_at": "2026-05-13T06:34:50Z",
+ "updated_at": "2026-05-13T09:41:10Z",
+ "pushed_at": "2026-05-13T09:40:30Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -303,8 +303,8 @@
"description": null,
"fork": false,
"created_at": "2024-11-29T12:32:19Z",
- "updated_at": "2026-05-13T06:35:50Z",
- "pushed_at": "2026-05-13T06:35:46Z",
+ "updated_at": "2026-05-13T09:42:23Z",
+ "pushed_at": "2026-05-13T09:41:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -352,8 +352,8 @@
"description": "🛠️ Exploit CVE-2025-55182 effortlessly with this GUI tool for vulnerability detection, command execution, and Shell reverse connections.",
"fork": false,
"created_at": "2025-04-21T22:04:31Z",
- "updated_at": "2026-05-13T06:38:35Z",
- "pushed_at": "2026-05-13T06:38:31Z",
+ "updated_at": "2026-05-13T09:45:37Z",
+ "pushed_at": "2026-05-13T09:45:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -406,8 +406,8 @@
"description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
"fork": false,
"created_at": "2025-06-06T16:34:46Z",
- "updated_at": "2026-05-13T06:35:23Z",
- "pushed_at": "2026-05-13T06:35:18Z",
+ "updated_at": "2026-05-13T09:42:06Z",
+ "pushed_at": "2026-05-13T09:41:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -458,8 +458,8 @@
"description": "⚠️ Explore a vulnerable environment to test security scanners against the CVE-2025-55182 RCE flaw in React Server Components and Next.js applications.",
"fork": false,
"created_at": "2025-07-15T18:33:34Z",
- "updated_at": "2026-05-13T06:36:08Z",
- "pushed_at": "2026-05-13T06:36:04Z",
+ "updated_at": "2026-05-13T09:43:04Z",
+ "pushed_at": "2026-05-13T09:42:17Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -12284,8 +12284,8 @@
"description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.",
"fork": false,
"created_at": "2025-12-24T14:48:19Z",
- "updated_at": "2026-05-13T06:35:04Z",
- "pushed_at": "2026-05-13T06:35:01Z",
+ "updated_at": "2026-05-13T09:41:23Z",
+ "pushed_at": "2026-05-13T09:40:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12369,8 +12369,8 @@
"description": "🚨 Identify and address CVE-2025-55182, a critical React Server vulnerability allowing remote code execution without authentication.",
"fork": false,
"created_at": "2025-12-24T18:44:51Z",
- "updated_at": "2026-05-13T06:34:12Z",
- "pushed_at": "2026-05-13T06:34:08Z",
+ "updated_at": "2026-05-13T09:40:37Z",
+ "pushed_at": "2026-05-13T09:40:06Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12418,8 +12418,8 @@
"description": "🚨 Demonstrate CVE-2025-55182, a critical React vulnerability allowing remote code execution via prototype chain pollution in `react-server-dom-webpack@19.0.0`.",
"fork": false,
"created_at": "2025-12-24T18:48:07Z",
- "updated_at": "2026-05-13T06:34:21Z",
- "pushed_at": "2026-05-13T06:34:17Z",
+ "updated_at": "2026-05-13T09:40:52Z",
+ "pushed_at": "2026-05-13T09:40:19Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12503,8 +12503,8 @@
"description": "🔍 Exploit CVE-2025-55182 in Next.js with this versatile tool for security research, featuring advanced payloads and WAF bypass techniques.",
"fork": false,
"created_at": "2025-12-25T19:28:28Z",
- "updated_at": "2026-05-13T06:36:02Z",
- "pushed_at": "2026-05-13T06:35:58Z",
+ "updated_at": "2026-05-13T09:42:43Z",
+ "pushed_at": "2026-05-13T09:41:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12705,8 +12705,8 @@
"description": "⚡ Discover and exploit CVE-2025-55182 with this PoC, offering reliable remote code execution tests for React Server Components in Next.js.",
"fork": false,
"created_at": "2025-12-26T22:26:55Z",
- "updated_at": "2026-05-13T06:35:48Z",
- "pushed_at": "2026-05-13T06:35:44Z",
+ "updated_at": "2026-05-13T09:42:46Z",
+ "pushed_at": "2026-05-13T09:41:48Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12975,8 +12975,8 @@
"description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
"fork": false,
"created_at": "2026-01-02T01:28:57Z",
- "updated_at": "2026-05-13T06:40:28Z",
- "pushed_at": "2026-05-13T06:40:24Z",
+ "updated_at": "2026-05-13T09:48:02Z",
+ "pushed_at": "2026-05-13T09:47:47Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -13496,8 +13496,8 @@
"description": "🔍 Exploit CVE-2025-55182 vulnerabilities in Next.js and React with this efficient framework for rapid testing and assessment.",
"fork": false,
"created_at": "2026-01-08T16:28:04Z",
- "updated_at": "2026-05-13T06:45:28Z",
- "pushed_at": "2026-05-13T06:45:24Z",
+ "updated_at": "2026-05-13T09:54:58Z",
+ "pushed_at": "2026-05-13T09:54:53Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2025/CVE-2025-55184.json b/2025/CVE-2025-55184.json
index a212ba869e..c33ef7fa9a 100644
--- a/2025/CVE-2025-55184.json
+++ b/2025/CVE-2025-55184.json
@@ -289,8 +289,8 @@
"description": "🛠️ Test and validate the CVE-2025-55184 vulnerability in React Server Components to enhance your application's security against denial-of-service attacks.",
"fork": false,
"created_at": "2026-01-02T05:04:03Z",
- "updated_at": "2026-05-13T06:40:44Z",
- "pushed_at": "2026-05-13T06:40:40Z",
+ "updated_at": "2026-05-13T09:48:36Z",
+ "pushed_at": "2026-05-13T09:48:31Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2025/CVE-2025-59287.json b/2025/CVE-2025-59287.json
index 2980f52e1b..5580e4b918 100644
--- a/2025/CVE-2025-59287.json
+++ b/2025/CVE-2025-59287.json
@@ -200,8 +200,8 @@
"description": "🔍 Analyze WSUS deserialization behavior to enhance security, generate reports, and identify configuration weaknesses in your infrastructure.",
"fork": false,
"created_at": "2026-01-29T02:16:04Z",
- "updated_at": "2026-05-13T03:14:27Z",
- "pushed_at": "2026-05-13T03:14:23Z",
+ "updated_at": "2026-05-13T10:16:02Z",
+ "pushed_at": "2026-05-13T10:15:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-61882.json b/2025/CVE-2025-61882.json
index cea68592cd..fb0e7efaed 100644
--- a/2025/CVE-2025-61882.json
+++ b/2025/CVE-2025-61882.json
@@ -14,8 +14,8 @@
"description": "🔍 Detect vulnerabilities CVE-2025-61882 and CVE-2025-61884 in Oracle E-Business Suite to help secure your systems from potential remote code execution threats.",
"fork": false,
"created_at": "2025-03-04T15:38:32Z",
- "updated_at": "2026-05-13T06:04:05Z",
- "pushed_at": "2026-05-13T06:04:02Z",
+ "updated_at": "2026-05-13T09:06:59Z",
+ "pushed_at": "2026-05-13T09:06:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-6554.json b/2025/CVE-2025-6554.json
index 4283c80265..3500cf082a 100644
--- a/2025/CVE-2025-6554.json
+++ b/2025/CVE-2025-6554.json
@@ -179,8 +179,8 @@
"description": "🔍 Demonstrate and validate the `addressof` and `fakeobj` primitives in the V8 sandbox for advanced security research on CVE-2025-6554.",
"fork": false,
"created_at": "2025-08-10T21:07:43Z",
- "updated_at": "2026-05-13T06:29:27Z",
- "pushed_at": "2026-05-13T06:29:23Z",
+ "updated_at": "2026-05-13T09:35:26Z",
+ "pushed_at": "2026-05-13T09:35:22Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2025/CVE-2025-66398.json b/2025/CVE-2025-66398.json
index 7ab5f07474..0e7e1b3be0 100644
--- a/2025/CVE-2025-66398.json
+++ b/2025/CVE-2025-66398.json
@@ -64,8 +64,8 @@
"description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.",
"fork": false,
"created_at": "2026-03-23T09:09:21Z",
- "updated_at": "2026-05-13T03:47:32Z",
- "pushed_at": "2026-05-13T03:47:28Z",
+ "updated_at": "2026-05-13T11:02:56Z",
+ "pushed_at": "2026-05-13T11:02:52Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2025/CVE-2025-66478.json b/2025/CVE-2025-66478.json
index 2fa2ae9b7c..74de178c1a 100644
--- a/2025/CVE-2025-66478.json
+++ b/2025/CVE-2025-66478.json
@@ -14,8 +14,8 @@
"description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.",
"fork": false,
"created_at": "2025-10-01T07:40:09Z",
- "updated_at": "2026-05-13T06:36:33Z",
- "pushed_at": "2026-05-13T06:36:29Z",
+ "updated_at": "2026-05-13T09:43:26Z",
+ "pushed_at": "2026-05-13T09:42:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-67303.json b/2025/CVE-2025-67303.json
index 112956ab03..2db1be1c00 100644
--- a/2025/CVE-2025-67303.json
+++ b/2025/CVE-2025-67303.json
@@ -196,5 +196,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1237694722,
+ "name": "CVE-2025-67303",
+ "full_name": "jcaz2378\/CVE-2025-67303",
+ "owner": {
+ "login": "jcaz2378",
+ "id": 212997707,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/212997707?v=4",
+ "html_url": "https:\/\/github.com\/jcaz2378",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/jcaz2378\/CVE-2025-67303",
+ "description": "Git CVE-2025-67303 payload",
+ "fork": false,
+ "created_at": "2026-05-13T12:23:22Z",
+ "updated_at": "2026-05-13T12:24:24Z",
+ "pushed_at": "2026-05-13T12:23:40Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-68921.json b/2025/CVE-2025-68921.json
index fcc72f7819..820e052edf 100644
--- a/2025/CVE-2025-68921.json
+++ b/2025/CVE-2025-68921.json
@@ -47,8 +47,8 @@
"description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.",
"fork": false,
"created_at": "2026-01-24T21:00:41Z",
- "updated_at": "2026-05-13T03:11:23Z",
- "pushed_at": "2026-05-13T03:11:19Z",
+ "updated_at": "2026-05-13T10:11:48Z",
+ "pushed_at": "2026-05-13T10:11:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-69985.json b/2025/CVE-2025-69985.json
index 92db3ded37..23597af572 100644
--- a/2025/CVE-2025-69985.json
+++ b/2025/CVE-2025-69985.json
@@ -14,8 +14,8 @@
"description": "Exploit CVE-2025-69985 to bypass authentication and execute remote commands on FUXA versions ≤ 1.2.8 via the \/api\/runscript endpoint.",
"fork": false,
"created_at": "2025-04-10T09:18:30Z",
- "updated_at": "2026-05-13T03:35:33Z",
- "pushed_at": "2026-05-13T03:35:30Z",
+ "updated_at": "2026-05-13T10:46:58Z",
+ "pushed_at": "2026-05-13T10:46:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-70795.json b/2025/CVE-2025-70795.json
index a82d0053ea..006889a40e 100644
--- a/2025/CVE-2025-70795.json
+++ b/2025/CVE-2025-70795.json
@@ -14,8 +14,8 @@
"description": "🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.",
"fork": false,
"created_at": "2024-04-20T04:18:24Z",
- "updated_at": "2026-05-13T03:30:56Z",
- "pushed_at": "2026-05-13T03:30:53Z",
+ "updated_at": "2026-05-13T10:40:41Z",
+ "pushed_at": "2026-05-13T10:40:37Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
diff --git a/2025/CVE-2025-8088.json b/2025/CVE-2025-8088.json
index cc14faff2f..64f583f1ff 100644
--- a/2025/CVE-2025-8088.json
+++ b/2025/CVE-2025-8088.json
@@ -838,8 +838,8 @@
"description": "🛠 Exploit CVE-2025-8088 with this Python tool to generate malicious WinRAR archives that ensure payload persistence in Windows startup folders.",
"fork": false,
"created_at": "2025-12-20T13:52:21Z",
- "updated_at": "2026-05-13T06:30:35Z",
- "pushed_at": "2026-05-13T06:30:32Z",
+ "updated_at": "2026-05-13T09:36:47Z",
+ "pushed_at": "2026-05-13T09:36:43Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
diff --git a/2025/CVE-2025-8110.json b/2025/CVE-2025-8110.json
index cb6b425071..97a7bf78df 100644
--- a/2025/CVE-2025-8110.json
+++ b/2025/CVE-2025-8110.json
@@ -146,8 +146,8 @@
"description": "🔍 Detect improper symbolic link handling in Gogs' PutContents API, exposing local code execution risks for versions 0.13.3 and earlier.",
"fork": false,
"created_at": "2025-12-31T13:25:07Z",
- "updated_at": "2026-05-13T06:39:48Z",
- "pushed_at": "2026-05-13T06:39:44Z",
+ "updated_at": "2026-05-13T09:47:29Z",
+ "pushed_at": "2026-05-13T09:47:13Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-9074.json b/2025/CVE-2025-9074.json
index 30434ab2e6..c5fb95deff 100644
--- a/2025/CVE-2025-9074.json
+++ b/2025/CVE-2025-9074.json
@@ -14,8 +14,8 @@
"description": "🚀 Exploit CVE-2025-9074 with this Docker escape framework, simplifying API vulnerabilities and enhancing security testing for developers and researchers.",
"fork": false,
"created_at": "2024-06-19T23:21:41Z",
- "updated_at": "2026-05-13T06:41:19Z",
- "pushed_at": "2026-05-13T06:41:15Z",
+ "updated_at": "2026-05-13T09:49:19Z",
+ "pushed_at": "2026-05-13T09:49:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2026/CVE-2026-0073.json b/2026/CVE-2026-0073.json
index 0f73002a8f..011d02d36e 100644
--- a/2026/CVE-2026-0073.json
+++ b/2026/CVE-2026-0073.json
@@ -47,10 +47,10 @@
"description": null,
"fork": false,
"created_at": "2026-05-05T21:53:08Z",
- "updated_at": "2026-05-13T01:01:08Z",
+ "updated_at": "2026-05-13T08:55:01Z",
"pushed_at": "2026-05-05T22:11:24Z",
- "stargazers_count": 54,
- "watchers_count": 54,
+ "stargazers_count": 55,
+ "watchers_count": 55,
"has_discussions": false,
"forks_count": 30,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 30,
- "watchers": 54,
+ "watchers": 55,
"score": 0,
"subscribers_count": 1
},
@@ -113,10 +113,10 @@
"description": "CVE-2026-0073 - ADB Wireless Mutual Authentication Bypass PoC",
"fork": false,
"created_at": "2026-05-06T17:44:38Z",
- "updated_at": "2026-05-09T17:36:38Z",
+ "updated_at": "2026-05-13T10:43:48Z",
"pushed_at": "2026-05-06T17:53:25Z",
- "stargazers_count": 10,
- "watchers_count": 10,
+ "stargazers_count": 11,
+ "watchers_count": 11,
"has_discussions": true,
"forks_count": 3,
"allow_forking": true,
@@ -132,7 +132,7 @@
],
"visibility": "public",
"forks": 3,
- "watchers": 10,
+ "watchers": 11,
"score": 0,
"subscribers_count": 0
},
diff --git a/2026/CVE-2026-0300.json b/2026/CVE-2026-0300.json
index e72aa75694..b5e6eae40f 100644
--- a/2026/CVE-2026-0300.json
+++ b/2026/CVE-2026-0300.json
@@ -224,7 +224,7 @@
"description": null,
"fork": false,
"created_at": "2026-05-06T23:56:52Z",
- "updated_at": "2026-05-12T12:19:24Z",
+ "updated_at": "2026-05-13T08:21:10Z",
"pushed_at": "2026-05-07T12:41:25Z",
"stargazers_count": 4,
"watchers_count": 4,
diff --git a/2026/CVE-2026-0828.json b/2026/CVE-2026-0828.json
index 633e55b77a..dc53e553ef 100644
--- a/2026/CVE-2026-0828.json
+++ b/2026/CVE-2026-0828.json
@@ -14,8 +14,8 @@
"description": "🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.",
"fork": false,
"created_at": "2024-04-20T04:18:24Z",
- "updated_at": "2026-05-13T03:30:56Z",
- "pushed_at": "2026-05-13T03:30:53Z",
+ "updated_at": "2026-05-13T10:40:41Z",
+ "pushed_at": "2026-05-13T10:40:37Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
diff --git a/2026/CVE-2026-0848.json b/2026/CVE-2026-0848.json
index 2bb976e5e9..1159654df8 100644
--- a/2026/CVE-2026-0848.json
+++ b/2026/CVE-2026-0848.json
@@ -1,37 +1,4 @@
[
- {
- "id": 1195105956,
- "name": "CVE-2026-0848",
- "full_name": "HyperPS\/CVE-2026-0848",
- "owner": {
- "login": "HyperPS",
- "id": 103917093,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103917093?v=4",
- "html_url": "https:\/\/github.com\/HyperPS",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/HyperPS\/CVE-2026-0848",
- "description": "nltk.tokenize.StanfordSegmenter dynamically loads external Java .jar files without verification or sandboxing. If an attacker can supply or replace the JAR (e.g., a poisoned model download, MITM package swap, or dependency poisoning), arbitrary Java bytecode executes at import time.",
- "fork": false,
- "created_at": "2026-03-29T08:20:30Z",
- "updated_at": "2026-03-29T08:30:02Z",
- "pushed_at": "2026-03-29T08:29:59Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 0
- },
{
"id": 1197378555,
"name": "CVE-2026-0848-PoC-Improper-Input-Validation",
diff --git a/2026/CVE-2026-0897.json b/2026/CVE-2026-0897.json
deleted file mode 100644
index 81541239b6..0000000000
--- a/2026/CVE-2026-0897.json
+++ /dev/null
@@ -1,35 +0,0 @@
-[
- {
- "id": 1195118577,
- "name": "CVE-2026-0897",
- "full_name": "HyperPS\/CVE-2026-0897",
- "owner": {
- "login": "HyperPS",
- "id": 103917093,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/103917093?v=4",
- "html_url": "https:\/\/github.com\/HyperPS",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/HyperPS\/CVE-2026-0897",
- "description": "Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0 through 3.13.0 on all platforms allows a remote attacker to cause a Denial of Service (DoS) through memory exhaustion and a crash of the Python interpreter via a crafted .keras ",
- "fork": false,
- "created_at": "2026-03-29T08:44:34Z",
- "updated_at": "2026-03-29T09:27:44Z",
- "pushed_at": "2026-03-29T09:27:41Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 1,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 1,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 0
- }
-]
\ No newline at end of file
diff --git a/2026/CVE-2026-20841.json b/2026/CVE-2026-20841.json
index 96dd79e238..b639d0b7d4 100644
--- a/2026/CVE-2026-20841.json
+++ b/2026/CVE-2026-20841.json
@@ -14,12 +14,12 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.",
"fork": false,
"created_at": "2024-09-22T12:19:06Z",
- "updated_at": "2026-05-13T03:30:11Z",
- "pushed_at": "2026-05-13T03:30:08Z",
+ "updated_at": "2026-05-13T10:39:36Z",
+ "pushed_at": "2026-05-13T10:39:32Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
- "forks_count": 0,
+ "forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -46,7 +46,7 @@
"windows-notepad"
],
"visibility": "public",
- "forks": 0,
+ "forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 1
@@ -66,8 +66,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.",
"fork": false,
"created_at": "2026-02-26T05:21:28Z",
- "updated_at": "2026-05-13T03:29:19Z",
- "pushed_at": "2026-05-13T03:29:15Z",
+ "updated_at": "2026-05-13T10:38:25Z",
+ "pushed_at": "2026-05-13T10:38:21Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2026/CVE-2026-22812.json b/2026/CVE-2026-22812.json
index 70870f7186..394055bacc 100644
--- a/2026/CVE-2026-22812.json
+++ b/2026/CVE-2026-22812.json
@@ -1,37 +1,4 @@
[
- {
- "id": 1195202220,
- "name": "ai-agent-security-research",
- "full_name": "HodgeLuke\/ai-agent-security-research",
- "owner": {
- "login": "HodgeLuke",
- "id": 220791909,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/220791909?v=4",
- "html_url": "https:\/\/github.com\/HodgeLuke",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/HodgeLuke\/ai-agent-security-research",
- "description": "Open security research on AI coding agent infrastructure. Agent-executable remediation manifests for CVE-2026-22812 and CVE-2026-22813.",
- "fork": false,
- "created_at": "2026-03-29T11:19:22Z",
- "updated_at": "2026-04-05T21:13:48Z",
- "pushed_at": "2026-03-29T11:27:33Z",
- "stargazers_count": 1,
- "watchers_count": 1,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 1,
- "score": 0,
- "subscribers_count": 0
- },
{
"id": 1202590298,
"name": "CVE-2026-22812",
diff --git a/2026/CVE-2026-23744.json b/2026/CVE-2026-23744.json
index fb118a7046..769a35b1b2 100644
--- a/2026/CVE-2026-23744.json
+++ b/2026/CVE-2026-23744.json
@@ -1,37 +1,4 @@
[
- {
- "id": 1195404718,
- "name": "CVE-2026-23744",
- "full_name": "CyLock11\/CVE-2026-23744",
- "owner": {
- "login": "CyLock11",
- "id": 146887827,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/146887827?v=4",
- "html_url": "https:\/\/github.com\/CyLock11",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/CyLock11\/CVE-2026-23744",
- "description": "CVE-2026-23744 - MCP Connect RCE via Unauthenticated Command Injection",
- "fork": false,
- "created_at": "2026-03-29T16:26:01Z",
- "updated_at": "2026-04-30T07:06:54Z",
- "pushed_at": "2026-03-29T16:31:26Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 0
- },
{
"id": 1206650375,
"name": "exploit-CVE-2026-23744",
diff --git a/2026/CVE-2026-23870.json b/2026/CVE-2026-23870.json
index f59998a033..d38bbac597 100644
--- a/2026/CVE-2026-23870.json
+++ b/2026/CVE-2026-23870.json
@@ -14,10 +14,10 @@
"description": "Next.js v16.2.4 Security PoC Collection (CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, CVE-2026-44581, CVE-2026-44580, CVE-2026-44577, CVE-2026-44576, CVE-2026-44582, CVE-2026-44572)",
"fork": false,
"created_at": "2026-05-07T23:00:40Z",
- "updated_at": "2026-05-13T05:56:52Z",
+ "updated_at": "2026-05-13T12:23:50Z",
"pushed_at": "2026-05-12T04:28:18Z",
- "stargazers_count": 124,
- "watchers_count": 124,
+ "stargazers_count": 126,
+ "watchers_count": 126,
"has_discussions": true,
"forks_count": 25,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 25,
- "watchers": 124,
+ "watchers": 126,
"score": 0,
"subscribers_count": 0
}
diff --git a/2026/CVE-2026-23918.json b/2026/CVE-2026-23918.json
index eb11b35f47..dd1fb61ddb 100644
--- a/2026/CVE-2026-23918.json
+++ b/2026/CVE-2026-23918.json
@@ -397,10 +397,10 @@
"description": "Apache httpd mod_http2 double-free, pre-auth RCE PoC",
"fork": false,
"created_at": "2026-05-11T14:07:41Z",
- "updated_at": "2026-05-13T04:06:39Z",
+ "updated_at": "2026-05-13T08:40:04Z",
"pushed_at": "2026-05-11T14:07:45Z",
- "stargazers_count": 19,
- "watchers_count": 19,
+ "stargazers_count": 20,
+ "watchers_count": 20,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -411,7 +411,40 @@
"topics": [],
"visibility": "public",
"forks": 6,
- "watchers": 19,
+ "watchers": 20,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1237509422,
+ "name": "CVE-2026-23918-poc",
+ "full_name": "Bencodin\/CVE-2026-23918-poc",
+ "owner": {
+ "login": "Bencodin",
+ "id": 86976820,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/86976820?v=4",
+ "html_url": "https:\/\/github.com\/Bencodin",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Bencodin\/CVE-2026-23918-poc",
+ "description": null,
+ "fork": false,
+ "created_at": "2026-05-13T08:47:24Z",
+ "updated_at": "2026-05-13T08:50:14Z",
+ "pushed_at": "2026-05-13T08:50:09Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
"score": 0,
"subscribers_count": 0
}
diff --git a/2026/CVE-2026-2406.json b/2026/CVE-2026-2406.json
index 68fc672f41..247872edb0 100644
--- a/2026/CVE-2026-2406.json
+++ b/2026/CVE-2026-2406.json
@@ -14,8 +14,8 @@
"description": "🔍 Analyze and detect CVE-2026-2406 vulnerabilities in Telnet to enhance security and prevent unauthorized access with this professional research engine.",
"fork": false,
"created_at": "2025-04-16T07:20:12Z",
- "updated_at": "2026-05-13T03:21:27Z",
- "pushed_at": "2026-05-13T03:21:23Z",
+ "updated_at": "2026-05-13T10:27:09Z",
+ "pushed_at": "2026-05-13T10:27:04Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2026/CVE-2026-24061.json b/2026/CVE-2026-24061.json
index aaf956dd7a..3cb5fc93c7 100644
--- a/2026/CVE-2026-24061.json
+++ b/2026/CVE-2026-24061.json
@@ -47,8 +47,8 @@
"description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.",
"fork": false,
"created_at": "2026-02-03T19:46:10Z",
- "updated_at": "2026-05-13T03:18:14Z",
- "pushed_at": "2026-05-13T03:18:10Z",
+ "updated_at": "2026-05-13T10:22:52Z",
+ "pushed_at": "2026-05-13T10:22:16Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2026/CVE-2026-24291.json b/2026/CVE-2026-24291.json
index 30b7869cc2..95e6bacc98 100644
--- a/2026/CVE-2026-24291.json
+++ b/2026/CVE-2026-24291.json
@@ -14,8 +14,8 @@
"description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions",
"fork": false,
"created_at": "2026-03-26T04:38:27Z",
- "updated_at": "2026-05-13T03:49:23Z",
- "pushed_at": "2026-05-13T03:49:19Z",
+ "updated_at": "2026-05-13T11:05:26Z",
+ "pushed_at": "2026-05-13T11:05:12Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
diff --git a/2026/CVE-2026-2441.json b/2026/CVE-2026-2441.json
index 9b04a312b5..cc3649fd96 100644
--- a/2026/CVE-2026-2441.json
+++ b/2026/CVE-2026-2441.json
@@ -14,8 +14,8 @@
"description": "Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.",
"fork": false,
"created_at": "2026-03-03T14:19:18Z",
- "updated_at": "2026-05-13T03:32:47Z",
- "pushed_at": "2026-05-13T03:32:44Z",
+ "updated_at": "2026-05-13T10:43:18Z",
+ "pushed_at": "2026-05-13T10:43:03Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2026/CVE-2026-2472.json b/2026/CVE-2026-2472.json
index f4d32f0d30..4656f1e4a5 100644
--- a/2026/CVE-2026-2472.json
+++ b/2026/CVE-2026-2472.json
@@ -14,8 +14,8 @@
"description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.",
"fork": false,
"created_at": "2026-03-10T14:40:04Z",
- "updated_at": "2026-05-13T03:37:59Z",
- "pushed_at": "2026-05-13T03:37:55Z",
+ "updated_at": "2026-05-13T10:50:34Z",
+ "pushed_at": "2026-05-13T10:50:29Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
diff --git a/2026/CVE-2026-25643.json b/2026/CVE-2026-25643.json
index 362e5189f8..c6b1e657fc 100644
--- a/2026/CVE-2026-25643.json
+++ b/2026/CVE-2026-25643.json
@@ -14,8 +14,8 @@
"description": "Exploit Frigate NVR ≤0.16.3 to execute commands remotely by abusing a configuration flaw without needing shell access or output capture.",
"fork": false,
"created_at": "2026-03-07T20:23:08Z",
- "updated_at": "2026-05-13T03:36:49Z",
- "pushed_at": "2026-05-13T03:36:45Z",
+ "updated_at": "2026-05-13T10:48:50Z",
+ "pushed_at": "2026-05-13T10:48:46Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
diff --git a/2026/CVE-2026-29000.json b/2026/CVE-2026-29000.json
index e20d0fe116..e6605a9a32 100644
--- a/2026/CVE-2026-29000.json
+++ b/2026/CVE-2026-29000.json
@@ -214,10 +214,10 @@
"description": "CVE-2026-29000 PoC: pac4j-jwt PlainJWT-in-JWE authentication bypass.",
"fork": false,
"created_at": "2026-05-03T07:20:31Z",
- "updated_at": "2026-05-08T14:34:49Z",
+ "updated_at": "2026-05-13T07:56:06Z",
"pushed_at": "2026-05-03T07:24:49Z",
- "stargazers_count": 1,
- "watchers_count": 1,
+ "stargazers_count": 2,
+ "watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -228,7 +228,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
- "watchers": 1,
+ "watchers": 2,
"score": 0,
"subscribers_count": 0
},
diff --git a/2026/CVE-2026-29204.json b/2026/CVE-2026-29204.json
new file mode 100644
index 0000000000..ac228ae77f
--- /dev/null
+++ b/2026/CVE-2026-29204.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1237536928,
+ "name": "cve-2026-29204-whmcs-clientarea-addonid",
+ "full_name": "bogdanrotariu\/cve-2026-29204-whmcs-clientarea-addonid",
+ "owner": {
+ "login": "bogdanrotariu",
+ "id": 15088729,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/15088729?v=4",
+ "html_url": "https:\/\/github.com\/bogdanrotariu",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/bogdanrotariu\/cve-2026-29204-whmcs-clientarea-addonid",
+ "description": null,
+ "fork": false,
+ "created_at": "2026-05-13T09:18:51Z",
+ "updated_at": "2026-05-13T09:37:57Z",
+ "pushed_at": "2026-05-13T09:37:53Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2026/CVE-2026-2991.json b/2026/CVE-2026-2991.json
index 0a2f932762..931f3962e1 100644
--- a/2026/CVE-2026-2991.json
+++ b/2026/CVE-2026-2991.json
@@ -14,8 +14,8 @@
"description": "Explore a PoC for CVE-2026-2991, an auth bypass in KiviCare 4.1.2 and earlier via the patient social-login REST endpoint",
"fork": false,
"created_at": "2026-04-03T20:26:43Z",
- "updated_at": "2026-05-13T03:53:16Z",
- "pushed_at": "2026-05-13T03:53:12Z",
+ "updated_at": "2026-05-13T11:10:20Z",
+ "pushed_at": "2026-05-13T11:10:16Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2026/CVE-2026-3055.json b/2026/CVE-2026-3055.json
index 3a9b6c7e23..eeb936b083 100644
--- a/2026/CVE-2026-3055.json
+++ b/2026/CVE-2026-3055.json
@@ -1,37 +1,4 @@
[
- {
- "id": 1195190427,
- "name": "CVE-2026-3055",
- "full_name": "0xBlackash\/CVE-2026-3055",
- "owner": {
- "login": "0xBlackash",
- "id": 259905299,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/259905299?v=4",
- "html_url": "https:\/\/github.com\/0xBlackash",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/0xBlackash\/CVE-2026-3055",
- "description": "CVE-2026-3055",
- "fork": false,
- "created_at": "2026-03-29T10:58:13Z",
- "updated_at": "2026-03-29T11:01:40Z",
- "pushed_at": "2026-03-29T11:01:36Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 0
- },
{
"id": 1197484845,
"name": "CVE-2026-3055---Citrix-NetScaler-Memory-Overread-PoC",
diff --git a/2026/CVE-2026-31156.json b/2026/CVE-2026-31156.json
new file mode 100644
index 0000000000..8e31519db7
--- /dev/null
+++ b/2026/CVE-2026-31156.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1237498749,
+ "name": "CVE-2026-31156",
+ "full_name": "unicorn-hyh\/CVE-2026-31156",
+ "owner": {
+ "login": "unicorn-hyh",
+ "id": 102516021,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102516021?v=4",
+ "html_url": "https:\/\/github.com\/unicorn-hyh",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/unicorn-hyh\/CVE-2026-31156",
+ "description": "There is a path injection vulnerability in OpenPLC-v3, which arises from the program not performing any validity checks on the file path parameters passed in from the command line. Attackers can read any readable file by constructing malicious paths, posing a risk of information leakage.",
+ "fork": false,
+ "created_at": "2026-05-13T08:34:45Z",
+ "updated_at": "2026-05-13T09:45:41Z",
+ "pushed_at": "2026-05-13T09:45:25Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2026/CVE-2026-31431.json b/2026/CVE-2026-31431.json
index 3acd0b0199..f1fefa1798 100644
--- a/2026/CVE-2026-31431.json
+++ b/2026/CVE-2026-31431.json
@@ -47,12 +47,12 @@
"description": "Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code",
"fork": false,
"created_at": "2026-04-29T12:15:28Z",
- "updated_at": "2026-05-13T06:43:45Z",
+ "updated_at": "2026-05-13T12:40:50Z",
"pushed_at": "2026-04-29T21:21:46Z",
- "stargazers_count": 3731,
- "watchers_count": 3731,
+ "stargazers_count": 3750,
+ "watchers_count": 3750,
"has_discussions": false,
- "forks_count": 822,
+ "forks_count": 826,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -71,8 +71,8 @@
"xint-code"
],
"visibility": "public",
- "forks": 822,
- "watchers": 3731,
+ "forks": 826,
+ "watchers": 3750,
"score": 0,
"subscribers_count": 29
},
@@ -129,7 +129,7 @@
"stargazers_count": 88,
"watchers_count": 88,
"has_discussions": false,
- "forks_count": 18,
+ "forks_count": 19,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -137,7 +137,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 18,
+ "forks": 19,
"watchers": 88,
"score": 0,
"subscribers_count": 0
@@ -190,10 +190,10 @@
"description": "Cross-platform C port of the Copy Fail Linux LPE (CVE-2026-31431). Disclosed 2026-04-29 by Theori \/ Xint.",
"fork": false,
"created_at": "2026-04-29T23:29:14Z",
- "updated_at": "2026-05-13T06:40:20Z",
+ "updated_at": "2026-05-13T12:06:30Z",
"pushed_at": "2026-05-07T06:05:20Z",
- "stargazers_count": 385,
- "watchers_count": 385,
+ "stargazers_count": 390,
+ "watchers_count": 390,
"has_discussions": true,
"forks_count": 108,
"allow_forking": true,
@@ -217,7 +217,7 @@
],
"visibility": "public",
"forks": 108,
- "watchers": 385,
+ "watchers": 390,
"score": 0,
"subscribers_count": 2
},
@@ -318,10 +318,10 @@
"description": null,
"fork": false,
"created_at": "2026-04-30T01:47:40Z",
- "updated_at": "2026-05-07T06:48:01Z",
+ "updated_at": "2026-05-13T08:18:44Z",
"pushed_at": "2026-04-30T01:53:49Z",
- "stargazers_count": 4,
- "watchers_count": 4,
+ "stargazers_count": 5,
+ "watchers_count": 5,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -332,7 +332,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
- "watchers": 4,
+ "watchers": 5,
"score": 0,
"subscribers_count": 0
},
@@ -714,10 +714,10 @@
"description": "Rust implementation Exploit\/PoC of CVE-2026-31431-Linux-Copy-Fail, allow executing customized shellcode (such as Meterpreter).",
"fork": false,
"created_at": "2026-04-30T04:16:32Z",
- "updated_at": "2026-05-11T21:52:53Z",
+ "updated_at": "2026-05-13T09:26:20Z",
"pushed_at": "2026-04-30T15:39:36Z",
- "stargazers_count": 48,
- "watchers_count": 48,
+ "stargazers_count": 49,
+ "watchers_count": 49,
"has_discussions": false,
"forks_count": 18,
"allow_forking": true,
@@ -742,7 +742,7 @@
],
"visibility": "public",
"forks": 18,
- "watchers": 48,
+ "watchers": 49,
"score": 0,
"subscribers_count": 0
},
@@ -944,39 +944,6 @@
"score": 0,
"subscribers_count": 0
},
- {
- "id": 1225288927,
- "name": "linux-vuln-CVE-2026-31431",
- "full_name": "NichiyaOba\/linux-vuln-CVE-2026-31431",
- "owner": {
- "login": "NichiyaOba",
- "id": 163647167,
- "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/163647167?v=4",
- "html_url": "https:\/\/github.com\/NichiyaOba",
- "user_view_type": "public"
- },
- "html_url": "https:\/\/github.com\/NichiyaOba\/linux-vuln-CVE-2026-31431",
- "description": null,
- "fork": false,
- "created_at": "2026-04-30T06:14:22Z",
- "updated_at": "2026-04-30T06:14:22Z",
- "pushed_at": "2026-04-30T06:14:22Z",
- "stargazers_count": 0,
- "watchers_count": 0,
- "has_discussions": false,
- "forks_count": 0,
- "allow_forking": true,
- "is_template": false,
- "web_commit_signoff_required": false,
- "has_pull_requests": true,
- "pull_request_creation_policy": "all",
- "topics": [],
- "visibility": "public",
- "forks": 0,
- "watchers": 0,
- "score": 0,
- "subscribers_count": 0
- },
{
"id": 1225290691,
"name": "check-cve-2026-31431",
@@ -2495,12 +2462,12 @@
"description": "CopyFail (CVE-2026-31431): Linux kernel page-cache PrivEsc PoC + the only public detection tool. Novel PAM auth-bypass vector + Sigma\/auditd\/eBPF rules.",
"fork": false,
"created_at": "2026-04-30T14:04:58Z",
- "updated_at": "2026-05-11T16:40:01Z",
+ "updated_at": "2026-05-13T08:36:21Z",
"pushed_at": "2026-05-06T12:42:59Z",
- "stargazers_count": 18,
- "watchers_count": 18,
+ "stargazers_count": 19,
+ "watchers_count": 19,
"has_discussions": false,
- "forks_count": 3,
+ "forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2523,8 +2490,8 @@
"sigma-rules"
],
"visibility": "public",
- "forks": 3,
- "watchers": 18,
+ "forks": 4,
+ "watchers": 19,
"score": 0,
"subscribers_count": 2
},
@@ -2651,10 +2618,10 @@
"description": "Defense-in-depth primitives for CVE-2026-31431 (Copy Fail) — kernel detection probe and LD_PRELOAD AF_ALG block",
"fork": false,
"created_at": "2026-04-30T14:33:36Z",
- "updated_at": "2026-05-10T23:26:52Z",
+ "updated_at": "2026-05-13T12:30:16Z",
"pushed_at": "2026-05-08T23:10:29Z",
- "stargazers_count": 10,
- "watchers_count": 10,
+ "stargazers_count": 11,
+ "watchers_count": 11,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -2673,7 +2640,7 @@
],
"visibility": "public",
"forks": 0,
- "watchers": 10,
+ "watchers": 11,
"score": 0,
"subscribers_count": 0
},
@@ -4535,10 +4502,10 @@
"description": "Copy Fail -- CVE-2026-31431 - Hardened AF_ALG\/splice page-cache mutation primitive for RedTeam Ops.",
"fork": false,
"created_at": "2026-05-01T10:43:26Z",
- "updated_at": "2026-05-04T01:37:39Z",
+ "updated_at": "2026-05-13T11:18:52Z",
"pushed_at": "2026-05-01T16:19:38Z",
- "stargazers_count": 3,
- "watchers_count": 3,
+ "stargazers_count": 4,
+ "watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -4560,7 +4527,7 @@
],
"visibility": "public",
"forks": 0,
- "watchers": 3,
+ "watchers": 4,
"score": 0,
"subscribers_count": 0
},
@@ -5332,10 +5299,10 @@
"description": "CVE-2026-31431 (Copy Fail) PoC - Linux kernel page cache corruption via authencesn AF_ALG + splice()",
"fork": false,
"created_at": "2026-05-01T19:44:57Z",
- "updated_at": "2026-05-13T05:47:44Z",
+ "updated_at": "2026-05-13T10:07:41Z",
"pushed_at": "2026-05-12T13:44:11Z",
- "stargazers_count": 8,
- "watchers_count": 8,
+ "stargazers_count": 9,
+ "watchers_count": 9,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -5346,7 +5313,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
- "watchers": 8,
+ "watchers": 9,
"score": 0,
"subscribers_count": 0
},
@@ -7944,8 +7911,8 @@
"description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.",
"fork": false,
"created_at": "2026-05-05T04:58:21Z",
- "updated_at": "2026-05-13T04:11:56Z",
- "pushed_at": "2026-05-13T04:11:53Z",
+ "updated_at": "2026-05-13T11:33:04Z",
+ "pushed_at": "2026-05-13T11:33:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -8779,8 +8746,8 @@
"description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.",
"fork": false,
"created_at": "2026-05-06T09:49:14Z",
- "updated_at": "2026-05-13T04:12:48Z",
- "pushed_at": "2026-05-13T04:12:45Z",
+ "updated_at": "2026-05-13T11:34:11Z",
+ "pushed_at": "2026-05-13T11:34:07Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
@@ -9616,10 +9583,10 @@
"description": "Simple Ansible Playbook to mitigate against CopyFail (CVE-2026-31431) and DirtyFrag (CVE-2026-43284) vulnerabilities.",
"fork": false,
"created_at": "2026-05-08T12:26:13Z",
- "updated_at": "2026-05-10T22:09:08Z",
+ "updated_at": "2026-05-13T09:41:32Z",
"pushed_at": "2026-05-09T06:08:39Z",
- "stargazers_count": 5,
- "watchers_count": 5,
+ "stargazers_count": 6,
+ "watchers_count": 6,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -9639,7 +9606,7 @@
],
"visibility": "public",
"forks": 0,
- "watchers": 5,
+ "watchers": 6,
"score": 0,
"subscribers_count": 0
},
@@ -10171,10 +10138,10 @@
"description": "A CVE-2026-31431 implementation in c++ and inline assembly dependency free",
"fork": false,
"created_at": "2026-05-12T07:30:56Z",
- "updated_at": "2026-05-13T04:52:29Z",
+ "updated_at": "2026-05-13T08:28:49Z",
"pushed_at": "2026-05-12T16:51:45Z",
- "stargazers_count": 1,
- "watchers_count": 1,
+ "stargazers_count": 2,
+ "watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -10189,7 +10156,7 @@
],
"visibility": "public",
"forks": 0,
- "watchers": 1,
+ "watchers": 2,
"score": 0,
"subscribers_count": 0
},
@@ -10324,5 +10291,71 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1237516631,
+ "name": "Copyfail-sh",
+ "full_name": "Koshmare-Blossom\/Copyfail-sh",
+ "owner": {
+ "login": "Koshmare-Blossom",
+ "id": 284257714,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/284257714?v=4",
+ "html_url": "https:\/\/github.com\/Koshmare-Blossom",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Koshmare-Blossom\/Copyfail-sh",
+ "description": "A Bash implementation of copyfail (CVE-2026-31431)",
+ "fork": false,
+ "created_at": "2026-05-13T08:55:17Z",
+ "updated_at": "2026-05-13T12:15:22Z",
+ "pushed_at": "2026-05-13T09:07:12Z",
+ "stargazers_count": 1,
+ "watchers_count": 1,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 1,
+ "score": 0,
+ "subscribers_count": 0
+ },
+ {
+ "id": 1237654676,
+ "name": "Copy-Fail-CVE-2026-31431-Lab",
+ "full_name": "kuniyal08\/Copy-Fail-CVE-2026-31431-Lab",
+ "owner": {
+ "login": "kuniyal08",
+ "id": 179104695,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/179104695?v=4",
+ "html_url": "https:\/\/github.com\/kuniyal08",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/kuniyal08\/Copy-Fail-CVE-2026-31431-Lab",
+ "description": null,
+ "fork": false,
+ "created_at": "2026-05-13T11:36:00Z",
+ "updated_at": "2026-05-13T11:36:05Z",
+ "pushed_at": "2026-05-13T11:36:01Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2026/CVE-2026-31802.json b/2026/CVE-2026-31802.json
index b0459c05f8..cbb50991d3 100644
--- a/2026/CVE-2026-31802.json
+++ b/2026/CVE-2026-31802.json
@@ -14,8 +14,8 @@
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"fork": false,
"created_at": "2026-03-28T20:49:46Z",
- "updated_at": "2026-05-13T03:50:27Z",
- "pushed_at": "2026-05-13T03:50:24Z",
+ "updated_at": "2026-05-13T11:06:57Z",
+ "pushed_at": "2026-05-13T11:06:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2026/CVE-2026-32710.json b/2026/CVE-2026-32710.json
index d1a17c0b88..634c9b1037 100644
--- a/2026/CVE-2026-32710.json
+++ b/2026/CVE-2026-32710.json
@@ -19,7 +19,7 @@
"stargazers_count": 12,
"watchers_count": 12,
"has_discussions": false,
- "forks_count": 1,
+ "forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 1,
+ "forks": 2,
"watchers": 12,
"score": 0,
"subscribers_count": 0
diff --git a/2026/CVE-2026-34475.json b/2026/CVE-2026-34475.json
index 39a727b7b3..d956dcaab1 100644
--- a/2026/CVE-2026-34475.json
+++ b/2026/CVE-2026-34475.json
@@ -14,8 +14,8 @@
"description": "Two-stage Nuclei detection for CVE-2026-34475: fingerprint vulnerable Varnish instances, verify cache-key collision behavior, and confirm exploitability via VCL inspection - unfortunetly without triggering the bug and exploitation",
"fork": false,
"created_at": "2026-04-30T13:04:21Z",
- "updated_at": "2026-04-30T15:32:21Z",
- "pushed_at": "2026-04-30T15:29:56Z",
+ "updated_at": "2026-05-13T09:53:27Z",
+ "pushed_at": "2026-05-13T09:53:24Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2026/CVE-2026-34486.json b/2026/CVE-2026-34486.json
index fca5ace5bd..1d1f531fa8 100644
--- a/2026/CVE-2026-34486.json
+++ b/2026/CVE-2026-34486.json
@@ -146,10 +146,10 @@
"description": "Apache Tomcat Tribes EncryptInterceptor fail-open bypass, unauthenticated RCE PoC",
"fork": false,
"created_at": "2026-05-11T14:07:46Z",
- "updated_at": "2026-05-13T04:06:18Z",
+ "updated_at": "2026-05-13T12:24:09Z",
"pushed_at": "2026-05-11T14:07:48Z",
- "stargazers_count": 53,
- "watchers_count": 53,
+ "stargazers_count": 55,
+ "watchers_count": 55,
"has_discussions": false,
"forks_count": 11,
"allow_forking": true,
@@ -160,7 +160,7 @@
"topics": [],
"visibility": "public",
"forks": 11,
- "watchers": 53,
+ "watchers": 55,
"score": 0,
"subscribers_count": 0
}
diff --git a/2026/CVE-2026-41651.json b/2026/CVE-2026-41651.json
index 5b199d6dd6..550ca70654 100644
--- a/2026/CVE-2026-41651.json
+++ b/2026/CVE-2026-41651.json
@@ -311,8 +311,8 @@
"description": null,
"fork": false,
"created_at": "2026-05-06T07:39:29Z",
- "updated_at": "2026-05-11T07:05:17Z",
- "pushed_at": "2026-05-11T07:05:10Z",
+ "updated_at": "2026-05-13T10:01:48Z",
+ "pushed_at": "2026-05-13T10:01:29Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2026/CVE-2026-41940.json b/2026/CVE-2026-41940.json
index c0d9051430..976feccd93 100644
--- a/2026/CVE-2026-41940.json
+++ b/2026/CVE-2026-41940.json
@@ -317,8 +317,8 @@
"description": "Detection, mitigation, and reverse-engineering tooling for CVE-2026-41940 (SessionScribe): the cPanel\/WHM unauthenticated session-forgery vulnerability disclosed 2026-04-28. Defense-in-depth active mitigation shim, ModSec rule pack, remote probe, on-host IOC scanner, and per-tier RE snapshot collector. GPL v2.",
"fork": false,
"created_at": "2026-04-30T14:32:43Z",
- "updated_at": "2026-05-11T21:32:56Z",
- "pushed_at": "2026-05-11T21:32:52Z",
+ "updated_at": "2026-05-13T07:40:04Z",
+ "pushed_at": "2026-05-13T07:40:00Z",
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
@@ -595,10 +595,10 @@
"description": "cPanel CVE-2026-41940 nuclear.x86 Security Audit & Cleanup Script",
"fork": false,
"created_at": "2026-05-01T07:27:21Z",
- "updated_at": "2026-05-05T12:35:02Z",
+ "updated_at": "2026-05-13T11:26:26Z",
"pushed_at": "2026-05-01T07:53:48Z",
- "stargazers_count": 2,
- "watchers_count": 2,
+ "stargazers_count": 3,
+ "watchers_count": 3,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -618,7 +618,7 @@
],
"visibility": "public",
"forks": 1,
- "watchers": 2,
+ "watchers": 3,
"score": 0,
"subscribers_count": 0
},
@@ -738,12 +738,12 @@
"description": "CVE-2026-41940 — cPanel & WHM Authentication Bypass via Session-File CRLF Injection",
"fork": false,
"created_at": "2026-05-01T12:09:26Z",
- "updated_at": "2026-05-13T06:10:11Z",
+ "updated_at": "2026-05-13T06:58:55Z",
"pushed_at": "2026-05-01T12:10:32Z",
- "stargazers_count": 395,
- "watchers_count": 395,
+ "stargazers_count": 396,
+ "watchers_count": 396,
"has_discussions": false,
- "forks_count": 123,
+ "forks_count": 124,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -751,8 +751,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 123,
- "watchers": 395,
+ "forks": 124,
+ "watchers": 396,
"score": 0,
"subscribers_count": 5
},
@@ -1845,8 +1845,8 @@
"description": "Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.",
"fork": false,
"created_at": "2026-05-06T18:08:48Z",
- "updated_at": "2026-05-13T04:13:09Z",
- "pushed_at": "2026-05-13T04:13:05Z",
+ "updated_at": "2026-05-13T11:34:41Z",
+ "pushed_at": "2026-05-13T11:34:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -2120,8 +2120,8 @@
"description": "CVE-2026-41940 — cPanel\/WHM Auth Bypass By Dr.Anach, CRLF injection in `cpsrvd` Basic auth handler → unauthenticated WHM API access → RCE as root. All cPanel since v11.40 affected.",
"fork": false,
"created_at": "2026-05-11T07:01:25Z",
- "updated_at": "2026-05-11T15:44:06Z",
- "pushed_at": "2026-05-11T15:36:10Z",
+ "updated_at": "2026-05-13T10:35:32Z",
+ "pushed_at": "2026-05-13T10:35:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2026/CVE-2026-43284.json b/2026/CVE-2026-43284.json
index 98924aa635..f273b0109b 100644
--- a/2026/CVE-2026-43284.json
+++ b/2026/CVE-2026-43284.json
@@ -355,12 +355,12 @@
"description": "arm64\/aarch64 port of V4bel\/dirtyfrag (CVE-2026-43284). ESP-only - rxrpc path kernel-oopses on arm64 due to flush_dcache_page",
"fork": false,
"created_at": "2026-05-10T04:22:19Z",
- "updated_at": "2026-05-13T02:58:48Z",
- "pushed_at": "2026-05-11T10:02:56Z",
- "stargazers_count": 12,
- "watchers_count": 12,
+ "updated_at": "2026-05-13T10:42:24Z",
+ "pushed_at": "2026-05-13T08:32:55Z",
+ "stargazers_count": 13,
+ "watchers_count": 13,
"has_discussions": false,
- "forks_count": 3,
+ "forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": true,
@@ -382,8 +382,8 @@
"yara-rules"
],
"visibility": "public",
- "forks": 3,
- "watchers": 12,
+ "forks": 4,
+ "watchers": 13,
"score": 0,
"subscribers_count": 0
},
diff --git a/2026/CVE-2026-44578.json b/2026/CVE-2026-44578.json
index 5c333f4d43..949f9e4c2c 100644
--- a/2026/CVE-2026-44578.json
+++ b/2026/CVE-2026-44578.json
@@ -14,8 +14,8 @@
"description": "OOB verifier for GHSA-c4j6-fc7j-m34r \/ CVE-2026-44578 (Next.js WebSocket-upgrade SSRF)",
"fork": false,
"created_at": "2026-05-13T05:49:11Z",
- "updated_at": "2026-05-13T06:31:57Z",
- "pushed_at": "2026-05-13T06:31:53Z",
+ "updated_at": "2026-05-13T08:01:12Z",
+ "pushed_at": "2026-05-13T08:01:06Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2026/CVE-2026-45321.json b/2026/CVE-2026-45321.json
index 6dc2f92816..f38a3f7c1e 100644
--- a/2026/CVE-2026-45321.json
+++ b/2026/CVE-2026-45321.json
@@ -171,5 +171,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1237635372,
+ "name": "mini-shai-hulud-scanner",
+ "full_name": "Intrudify\/mini-shai-hulud-scanner",
+ "owner": {
+ "login": "Intrudify",
+ "id": 226148976,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/226148976?v=4",
+ "html_url": "https:\/\/github.com\/Intrudify",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/Intrudify\/mini-shai-hulud-scanner",
+ "description": "Scanner for the Mini Shai-Hulud npm\/PyPI supply chain worm (NHS CC-4781 · CVE-2026-45321). Detects gh-token-monitor persistence, payload artefacts, and attacker commits. Python, Bash, PowerShell.",
+ "fork": false,
+ "created_at": "2026-05-13T11:12:50Z",
+ "updated_at": "2026-05-13T11:34:39Z",
+ "pushed_at": "2026-05-13T11:34:35Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2026/CVE-2026-8196.json b/2026/CVE-2026-8196.json
new file mode 100644
index 0000000000..b2d3340abc
--- /dev/null
+++ b/2026/CVE-2026-8196.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1237419923,
+ "name": "CVE-2026-8196",
+ "full_name": "HORKimhab\/CVE-2026-8196",
+ "owner": {
+ "login": "HORKimhab",
+ "id": 41143106,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41143106?v=4",
+ "html_url": "https:\/\/github.com\/HORKimhab",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/HORKimhab\/CVE-2026-8196",
+ "description": "CVE-2026-8196",
+ "fork": false,
+ "created_at": "2026-05-13T07:01:17Z",
+ "updated_at": "2026-05-13T07:05:21Z",
+ "pushed_at": "2026-05-13T07:05:14Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/README.md b/README.md
index b4bd43e7f7..3aac7da80e 100644
--- a/README.md
+++ b/README.md
@@ -93,17 +93,9 @@
NLTK versions <=3.9.2 are vulnerable to arbitrary code execution due to improper input validation in the StanfordSegmenter module. The module dynamically loads external Java .jar files without verification or sandboxing. An attacker can supply or replace the JAR file, enabling the execution of arbitrary Java bytecode at import time. This vulnerability can be exploited through methods such as model poisoning, MITM attacks, or dependency poisoning, leading to remote code execution. The issue arises from the direct execution of the JAR file via subprocess with unvalidated classpath input, allowing malicious classes to execute when loaded by the JVM.
-- [HyperPS/CVE-2026-0848](https://github.com/HyperPS/CVE-2026-0848)
- [fevar54/CVE-2026-0848-PoC-Improper-Input-Validation](https://github.com/fevar54/CVE-2026-0848-PoC-Improper-Input-Validation)
- [fevar54/CVE-2026-0848-Scanner---Herramienta-de-Detecci-n](https://github.com/fevar54/CVE-2026-0848-Scanner---Herramienta-de-Detecci-n)
-### CVE-2026-0897 (2026-01-15)
-
-Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0 through 3.13.0 on all platforms allows a remote attacker to cause a Denial of Service (DoS) through memory exhaustion and a crash of the Python interpreter via a crafted .keras archive containing a valid model.weights.h5 file whose dataset declares an extremely large shape.
-
-
-- [HyperPS/CVE-2026-0897](https://github.com/HyperPS/CVE-2026-0897)
-
### CVE-2026-0911 (2026-01-24)
The Hustle – Email Marketing, Lead Generation, Optins, Popups plugin for WordPress is vulnerable to arbitrary file uploads due to incorrect file type validation in the action_import_module() function in all versions up to, and including, 7.8.9.2. This makes it possible for authenticated attackers, with a lower-privileged role (e.g., Subscriber-level access and above), to upload arbitrary files on the affected site's server which may make remote code execution possible. Successful exploitation requires an admin to grant Hustle module permissions (or module edit access) to the low-privileged user so they can access the Hustle admin page and obtain the required nonce.
@@ -310,7 +302,6 @@
Insufficient input validation in NetScaler ADC and NetScaler Gateway when configured as a SAML IDP leading to memory overread
-- [0xBlackash/CVE-2026-3055](https://github.com/0xBlackash/CVE-2026-3055)
- [fevar54/CVE-2026-3055---Citrix-NetScaler-Memory-Overread-PoC](https://github.com/fevar54/CVE-2026-3055---Citrix-NetScaler-Memory-Overread-PoC)
- [fevar54/CVE-2026-3055-Scanner---Herramienta-de-Detecci-n](https://github.com/fevar54/CVE-2026-3055-Scanner---Herramienta-de-Detecci-n)
- [l0lsec/check-cve-2026-3055-netscaler](https://github.com/l0lsec/check-cve-2026-3055-netscaler)
@@ -854,6 +845,13 @@
- [Ser0n-ath/multiparty-CVE-2026-8161](https://github.com/Ser0n-ath/multiparty-CVE-2026-8161)
+### CVE-2026-8196 (2026-05-09)
+
+A flaw has been found in JeecgBoot 3.9.1. The impacted element is an unknown function of the file jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/system/controller/LoginController.java of the component mLogin Endpoint. This manipulation causes authorization bypass. The attack is possible to be carried out remotely. The attack is considered to have high complexity. The exploitability is regarded as difficult. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
+
+
+- [HORKimhab/CVE-2026-8196](https://github.com/HORKimhab/CVE-2026-8196)
+
### CVE-2026-20127 (2026-02-25)
A vulnerability in the peering authentication in Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, and Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to bypass authentication and obtain administrative privileges on an affected system.\r\n\r\nThis vulnerability exists because the peering authentication mechanism in an affected system is not working properly. An attacker could exploit this vulnerability by sending crafted requests to an affected system. A successful exploit could allow the attacker to log in to an affected Cisco Catalyst SD-WAN Controller as an internal, high-privileged, non-root user account. Using this account, the attacker could access NETCONF, which would then allow the attacker to manipulate network configuration for the SD-WAN fabric.
@@ -1099,7 +1097,6 @@
OpenCode is an open source AI coding agent. Prior to 1.0.216, OpenCode automatically starts an unauthenticated HTTP server that allows any local process (or any website via permissive CORS) to execute arbitrary shell commands with the user's privileges. This vulnerability is fixed in 1.0.216.
-- [HodgeLuke/ai-agent-security-research](https://github.com/HodgeLuke/ai-agent-security-research)
- [0xBlackash/CVE-2026-22812](https://github.com/0xBlackash/CVE-2026-22812)
- [Hex-Neo/CVE-2026-22812-OpenCode-RCE-exp](https://github.com/Hex-Neo/CVE-2026-22812-OpenCode-RCE-exp)
@@ -1165,7 +1162,6 @@
MCPJam inspector is the local-first development platform for MCP servers. Versions 1.4.2 and earlier are vulnerable to remote code execution (RCE) vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. Since MCPJam inspector by default listens on 0.0.0.0 instead of 127.0.0.1, an attacker can trigger the RCE remotely via a simple HTTP request. Version 1.4.3 contains a patch.
-- [CyLock11/CVE-2026-23744](https://github.com/CyLock11/CVE-2026-23744)
- [luiskrnr/exploit-CVE-2026-23744](https://github.com/luiskrnr/exploit-CVE-2026-23744)
- [ledksv/kobold](https://github.com/ledksv/kobold)
@@ -1201,6 +1197,7 @@
- [alt3kx/CVE-2026-23918](https://github.com/alt3kx/CVE-2026-23918)
- [insomnisec/Detections-CVE-2026-23918](https://github.com/insomnisec/Detections-CVE-2026-23918)
- [striga-ai/CVE-2026-23918](https://github.com/striga-ai/CVE-2026-23918)
+- [Bencodin/CVE-2026-23918-poc](https://github.com/Bencodin/CVE-2026-23918-poc)
### CVE-2026-23980 (2026-02-24)
@@ -1518,13 +1515,6 @@
- [0xBlackash/CVE-2026-27876](https://github.com/0xBlackash/CVE-2026-27876)
-### CVE-2026-27940 (2026-03-12)
-
-llama.cpp is an inference of several LLM models in C/C++. Prior to b8146, the gguf_init_from_file_impl() in gguf.cpp is vulnerable to an Integer overflow, leading to an undersized heap allocation. Using the subsequent fread() writes 528+ bytes of attacker-controlled data past the buffer boundary. This is a bypass of a similar bug in the same file - CVE-2025-53630, but the fix overlooked some areas. This vulnerability is fixed in b8146.
-
-
-- [ngtuonghung/CVE-2026-27940](https://github.com/ngtuonghung/CVE-2026-27940)
-
### CVE-2026-27944 (2026-03-05)
Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.3, the /api/backup endpoint is accessible without authentication and discloses the encryption keys required to decrypt the backup in the X-Backup-Security response header. This allows an unauthenticated attacker to download a full system backup containing sensitive data (user credentials, session tokens, SSL private keys, Nginx configurations) and decrypt it immediately. This issue has been patched in version 2.3.3.
@@ -1628,6 +1618,13 @@
- [gregk4sec/cve-2026-29145](https://github.com/gregk4sec/cve-2026-29145)
- [sancliffe/CVE-2026-29145-Tester](https://github.com/sancliffe/CVE-2026-29145-Tester)
+### CVE-2026-29204 (2026-05-12)
+
+Insufficient ownership check in `clientarea.php` allows an authenticated client area user to submit requests using another user’s `addonId` without any ownership validation leading to unauthorized access to the victim's account.
+
+
+- [bogdanrotariu/cve-2026-29204-whmcs-clientarea-addonid](https://github.com/bogdanrotariu/cve-2026-29204-whmcs-clientarea-addonid)
+
### CVE-2026-29597 (2026-03-30)
DDSN Interactive cm3 Acora CMS version 10.7.1 contains an improper access control vulnerability. An editor-privileged user can access sensitive configuration files by force browsing the “/Admin/file_manager/file_details.asp” endpoint and manipulating the “file” parameter. By referencing specific files (e.g., cm3.xml), the attacker can retrieve system administrator credentials, SMTP settings, database credentials, and other confidential information. The exposure of this information can lead to full administrative access to the CMS, unauthorized access to email services, compromise of backend databases, lateral movement within the network, and long-term persistence by an attacker. This access control bypass poses a critical risk of account takeover, privilege escalation, and systemic compromise of the affected application and its associated infrastructure.
@@ -1737,6 +1734,9 @@
- [Sif-0x01/security-advisories](https://github.com/Sif-0x01/security-advisories)
+### CVE-2026-31156
+- [unicorn-hyh/CVE-2026-31156](https://github.com/unicorn-hyh/CVE-2026-31156)
+
### CVE-2026-31266
- [0xrixet/Craftcms-PoC-CVE-2026-31266](https://github.com/0xrixet/Craftcms-PoC-CVE-2026-31266)
@@ -1824,7 +1824,6 @@
- [Y5neKO/copy-fail-CVE-2026-31431-universal](https://github.com/Y5neKO/copy-fail-CVE-2026-31431-universal)
- [bigwario/copy-fail-CVE-2026-31431-C](https://github.com/bigwario/copy-fail-CVE-2026-31431-C)
- [twowb/CVE-2026-31431-](https://github.com/twowb/CVE-2026-31431-)
-- [NichiyaOba/linux-vuln-CVE-2026-31431](https://github.com/NichiyaOba/linux-vuln-CVE-2026-31431)
- [arkdev1/check-cve-2026-31431](https://github.com/arkdev1/check-cve-2026-31431)
- [wuwu001/CVE-2026-31431-exploit](https://github.com/wuwu001/CVE-2026-31431-exploit)
- [ryan2929/CVE-2026-31431](https://github.com/ryan2929/CVE-2026-31431)
@@ -2096,6 +2095,8 @@
- [paulorlima9/copyfail-fix](https://github.com/paulorlima9/copyfail-fix)
- [SystemVll/CVE-2026-31431-copyfail-aarch64](https://github.com/SystemVll/CVE-2026-31431-copyfail-aarch64)
- [DroPZsec/SplicePrivillegeEscalationFIX](https://github.com/DroPZsec/SplicePrivillegeEscalationFIX)
+- [Koshmare-Blossom/Copyfail-sh](https://github.com/Koshmare-Blossom/Copyfail-sh)
+- [kuniyal08/Copy-Fail-CVE-2026-31431-Lab](https://github.com/kuniyal08/Copy-Fail-CVE-2026-31431-Lab)
### CVE-2026-31717 (2026-05-01)
@@ -3376,6 +3377,7 @@
- [Caixa-git/tanstack-shield](https://github.com/Caixa-git/tanstack-shield)
- [qi-scape/scan-shai-hulud](https://github.com/qi-scape/scan-shai-hulud)
- [shayr1/shai-hulud-scan](https://github.com/shayr1/shai-hulud-scan)
+- [Intrudify/mini-shai-hulud-scanner](https://github.com/Intrudify/mini-shai-hulud-scanner)
### CVE-2026-350234
- [usernameisunavailable-cell/Bili-cracker](https://github.com/usernameisunavailable-cell/Bili-cracker)
@@ -7668,6 +7670,7 @@
- [EQSTLab/CVE-2025-26788](https://github.com/EQSTLab/CVE-2025-26788)
+- [jun2e0/CVE-2025-26788](https://github.com/jun2e0/CVE-2025-26788)
### CVE-2025-26794 (2025-02-21)
@@ -8009,6 +8012,9 @@
- [amalpvatayam67/day06-foxcms-rce](https://github.com/amalpvatayam67/day06-foxcms-rce)
- [mantanhacker/Mass-CVE-2025-29306](https://github.com/mantanhacker/Mass-CVE-2025-29306)
+### CVE-2025-29338
+- [masjadaan/CVE-2025-29338](https://github.com/masjadaan/CVE-2025-29338)
+
### CVE-2025-29384 (2025-03-14)
In Tenda AC9 v1.0 V15.03.05.14_multi, the wanMTU parameter of /goform/AdvSetMacMtuWan has a stack overflow vulnerability, which can lead to remote arbitrary code execution.
@@ -10333,6 +10339,7 @@
- [YoyoChaud/CVE-2025-49132](https://github.com/YoyoChaud/CVE-2025-49132)
- [ramzihafiz/CVE-2025-49132](https://github.com/ramzihafiz/CVE-2025-49132)
- [kerburenthusiasm/CVE-2025-49132-PoC](https://github.com/kerburenthusiasm/CVE-2025-49132-PoC)
+- [symphony2colour/HTB-Pterodactyl-RCE-CVE-2025-49132](https://github.com/symphony2colour/HTB-Pterodactyl-RCE-CVE-2025-49132)
- [matesz44/CVE-2025-49132](https://github.com/matesz44/CVE-2025-49132)
- [Ahmedf000/CVE-2025-49132_HTB_SEASON10](https://github.com/Ahmedf000/CVE-2025-49132_HTB_SEASON10)
- [Pwndalf/CVE-2025-49132-PoC](https://github.com/Pwndalf/CVE-2025-49132-PoC)
@@ -14029,6 +14036,7 @@
- [materaj2/exploit_cve_2025_67303](https://github.com/materaj2/exploit_cve_2025_67303)
- [Remnant-DB/CVE-2025-67303](https://github.com/Remnant-DB/CVE-2025-67303)
- [wcnmwcis/CVE-2026-22777](https://github.com/wcnmwcis/CVE-2026-22777)
+- [jcaz2378/CVE-2025-67303](https://github.com/jcaz2378/CVE-2025-67303)
### CVE-2025-67315
- [r-pradyun/CVE-2025-67315](https://github.com/r-pradyun/CVE-2025-67315)
@@ -15991,8 +15999,6 @@
- [Bhavyakcwestern/Hacking-pdf.js-vulnerability](https://github.com/Bhavyakcwestern/Hacking-pdf.js-vulnerability)
- [PenguinCabinet/CVE-2024-4367-hands-on](https://github.com/PenguinCabinet/CVE-2024-4367-hands-on)
- [pS3ud0RAnD0m/cve-2024-4367-poc](https://github.com/pS3ud0RAnD0m/cve-2024-4367-poc)
-- [MihranGIT/POC_CVE-2024-4367](https://github.com/MihranGIT/POC_CVE-2024-4367)
-- [MihranGIT/CVE-2024-4367](https://github.com/MihranGIT/CVE-2024-4367)
- [0xr2r/CVE-2024-4367](https://github.com/0xr2r/CVE-2024-4367)
- [1337rokudenashi/Odoo_PDFjs_CVE-2024-4367.pdf](https://github.com/1337rokudenashi/Odoo_PDFjs_CVE-2024-4367.pdf)
@@ -18561,6 +18567,7 @@
- [W01fh4cker/CVE-2024-21683-RCE](https://github.com/W01fh4cker/CVE-2024-21683-RCE)
- [absholi7ly/-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server](https://github.com/absholi7ly/-CVE-2024-21683-RCE-in-Confluence-Data-Center-and-Server)
- [phucrio/CVE-2024-21683-RCE](https://github.com/phucrio/CVE-2024-21683-RCE)
+- [r3db34rdh4x/cve-2024-21683-rce](https://github.com/r3db34rdh4x/cve-2024-21683-rce)
### CVE-2024-21689 (2024-08-20)
@@ -21006,6 +21013,7 @@
- [80Ottanta80/CVE-2024-32019-PoC](https://github.com/80Ottanta80/CVE-2024-32019-PoC)
- [julichaan/CVE-2024-32019-ndsudo-local-privilege-escalation-NetData](https://github.com/julichaan/CVE-2024-32019-ndsudo-local-privilege-escalation-NetData)
- [justjoeyking/CVE-2024-32019-ndsudo](https://github.com/justjoeyking/CVE-2024-32019-ndsudo)
+- [kikechans/CVE-2024-32019-Netdata-ndsudo-PrivEsc](https://github.com/kikechans/CVE-2024-32019-Netdata-ndsudo-PrivEsc)
### CVE-2024-32022 (2024-04-16)