nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/08/06 06:54:34

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-08-06 15:54:34 +09:00
1 parent 2204bbca7a
commit 8f8915fb85
54 files changed
+432 -257
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2012/CVE-2012-2459.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Browser-based Merkle tree demo — build a tree, generate inclusion proofs, recompute the root hash by hash, and replay the RFC 6962 second-preimage and CVE-2012-2459 attacks. Real SHA-256. No backend.",
"fork": false,
"created_at": "2026-06-28T17:01:57Z",
"updated_at": "2026-08-04T11:08:21Z",
"pushed_at": "2026-08-04T11:08:05Z",
"updated_at": "2026-08-06T00:20:14Z",
"pushed_at": "2026-08-06T00:34:58Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2013/CVE-2013-2028.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 30,
"watchers_count": 30,
"has_discussions": false,
"forks_count": 10,
"forks_count": 9,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 10,
"forks": 9,
"watchers": 30,
"score": 0,
"subscribers_count": 3
2016/CVE-2016-6210.json
-33
View File
@@ -244,38 +244,5 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1227512123,
"name": "poc-CVE20166210",
"full_name": "serexp\/poc-CVE20166210",
"owner": {
"login": "serexp",
"id": 160177873,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/160177873?v=4",
"html_url": "https:\/\/github.com\/serexp",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/serexp\/poc-CVE20166210",
"description": "CVE-2016-6210\/Openssh 7.2p2 side channel info disclosure POC",
"fork": false,
"created_at": "2026-05-02T19:37:32Z",
"updated_at": "2026-05-26T12:08:33Z",
"pushed_at": "2026-05-02T19:42:10Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
]
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-08-05T23:38:19Z",
"pushed_at": "2026-08-05T23:38:15Z",
"updated_at": "2026-08-06T04:25:34Z",
"pushed_at": "2026-08-06T04:24:41Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2020/CVE-2020-1472.json
+2 -2
View File
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-08-06T00:05:11Z",
"pushed_at": "2026-08-06T00:05:00Z",
"updated_at": "2026-08-06T06:09:56Z",
"pushed_at": "2026-08-06T06:09:11Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-1931.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "Unlock the Meta Quest 1 bootloader and gain root access using GhostLock + CVE-2021-1931.",
"fork": false,
"created_at": "2026-07-31T05:37:56Z",
"updated_at": "2026-08-05T14:30:57Z",
"updated_at": "2026-08-06T00:36:30Z",
"pushed_at": "2026-07-31T12:18:42Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -107,7 +107,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 0
}
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-08-06T00:11:23Z",
"pushed_at": "2026-08-06T00:11:15Z",
"updated_at": "2026-08-06T06:14:56Z",
"pushed_at": "2026-08-06T06:14:52Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-41773.json
+2 -2
View File
@@ -5162,8 +5162,8 @@
"description": null,
"fork": false,
"created_at": "2026-08-05T11:29:28Z",
"updated_at": "2026-08-05T13:26:58Z",
"pushed_at": "2026-08-05T13:25:21Z",
"updated_at": "2026-08-06T04:15:48Z",
"pushed_at": "2026-08-06T04:15:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2022/CVE-2022-25012.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": null,
"fork": false,
"created_at": "2026-08-05T05:52:50Z",
"updated_at": "2026-08-05T08:20:03Z",
"updated_at": "2026-08-06T03:53:12Z",
"pushed_at": "2026-08-05T08:18:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2022/CVE-2022-38694.json
+6 -6
View File
@@ -149,12 +149,12 @@
"description": "CVE-2022-38694 Hardened Exploit - RP2350 USB Host Auto Flasher for Unisoc devices",
"fork": false,
"created_at": "2026-02-20T16:40:39Z",
"updated_at": "2026-08-05T23:18:24Z",
"updated_at": "2026-08-06T00:42:55Z",
"pushed_at": "2026-08-05T16:54:53Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 1,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -162,8 +162,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 5,
"forks": 3,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
2022/CVE-2022-39073.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 4,
"forks_count": 5,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -36,7 +36,7 @@
"zte"
],
"visibility": "public",
"forks": 4,
"forks": 5,
"watchers": 11,
"score": 0,
"subscribers_count": 1
2023/CVE-2023-45866.json
+4 -4
View File
@@ -151,10 +151,10 @@
"description": "Exploit basado en vulnerabilidades criticas Bluetooth (CVE-2023-45866, CVE-2024-21306)",
"fork": false,
"created_at": "2024-12-15T03:00:47Z",
"updated_at": "2026-07-23T10:02:04Z",
"updated_at": "2026-08-06T04:18:18Z",
"pushed_at": "2026-07-23T09:08:54Z",
"stargazers_count": 14,
"watchers_count": 14,
"stargazers_count": 15,
"watchers_count": 15,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -165,7 +165,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 14,
"watchers": 15,
"score": 0,
"subscribers_count": 1
},
2024/CVE-2024-21306.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "Exploit basado en vulnerabilidades criticas Bluetooth (CVE-2023-45866, CVE-2024-21306)",
"fork": false,
"created_at": "2024-12-15T03:00:47Z",
"updated_at": "2026-07-23T10:02:04Z",
"updated_at": "2026-08-06T04:18:18Z",
"pushed_at": "2026-07-23T09:08:54Z",
"stargazers_count": 14,
"watchers_count": 14,
"stargazers_count": 15,
"watchers_count": 15,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 14,
"watchers": 15,
"score": 0,
"subscribers_count": 1
}
2024/CVE-2024-21338.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled.",
"fork": false,
"created_at": "2024-04-13T05:53:02Z",
"updated_at": "2026-07-31T19:02:25Z",
"updated_at": "2026-08-06T05:14:01Z",
"pushed_at": "2024-04-16T21:00:14Z",
"stargazers_count": 334,
"watchers_count": 334,
"stargazers_count": 335,
"watchers_count": 335,
"has_discussions": false,
"forks_count": 70,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 70,
"watchers": 334,
"watchers": 335,
"score": 0,
"subscribers_count": 3
},
2024/CVE-2024-27198.json
+2 -2
View File
@@ -678,8 +678,8 @@
"description": "My write-ups from CyberDefenders' Blue Team labs, solved using Wireshark. Covers TeamCity RCE (CVE-2024-27198), XSS session hijacking, and LLMNR\/NBT-NS credential poisoning — each with step-by-step packet analysis, screenshots, and a full Wireshark filter\/command reference. Personal SOC Analyst Tier 1 learning log.",
"fork": false,
"created_at": "2026-08-01T09:25:34Z",
"updated_at": "2026-08-05T14:32:30Z",
"pushed_at": "2026-08-05T14:29:41Z",
"updated_at": "2026-08-06T05:36:08Z",
"pushed_at": "2026-08-06T05:35:58Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-2961.json
+33
View File
@@ -470,5 +470,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1324842994,
"name": "CVE-2022-31626-CVE-2024-2961-CVE-2019-6977",
"full_name": "HORKimhab\/CVE-2022-31626-CVE-2024-2961-CVE-2019-6977",
"owner": {
"login": "HORKimhab",
"id": 41143106,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41143106?v=4",
"html_url": "https:\/\/github.com\/HORKimhab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/HORKimhab\/CVE-2022-31626-CVE-2024-2961-CVE-2019-6977",
"description": "CVE-2022-31626, CVE-2024-2961, CVE-2019-6977, PHP security research",
"fork": false,
"created_at": "2026-08-06T06:39:46Z",
"updated_at": "2026-08-06T06:43:40Z",
"pushed_at": "2026-08-06T06:42:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2024/CVE-2024-32002.json
+2 -2
View File
@@ -229,7 +229,7 @@
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 4,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -237,7 +237,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 4,
"forks": 3,
"watchers": 1,
"score": 0,
"subscribers_count": 1
2024/CVE-2024-54369.json
-33
View File
@@ -31,38 +31,5 @@
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 918594689,
"name": "CVE-2024-54369-PoC",
"full_name": "Nxploited\/CVE-2024-54369-PoC",
"owner": {
"login": "Nxploited",
"id": 188819918,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4",
"html_url": "https:\/\/github.com\/Nxploited",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-54369-PoC",
"description": "PoC: Plugin: Zita Site Builder <= 1.0.2 - Arbitrary Plugin Installation",
"fork": false,
"created_at": "2025-01-18T10:52:03Z",
"updated_at": "2025-01-18T11:22:40Z",
"pushed_at": "2025-01-18T11:22:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
}
]
2024/CVE-2024-6387.json
+4 -4
View File
@@ -2213,10 +2213,10 @@
"description": "Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (CVE-2024-6387)",
"fork": false,
"created_at": "2024-07-08T11:27:49Z",
"updated_at": "2026-07-30T23:26:58Z",
"updated_at": "2026-08-06T02:55:54Z",
"pushed_at": "2024-08-22T08:50:25Z",
"stargazers_count": 188,
"watchers_count": 188,
"stargazers_count": 189,
"watchers_count": 189,
"has_discussions": false,
"forks_count": 47,
"allow_forking": true,
@@ -2227,7 +2227,7 @@
"topics": [],
"visibility": "public",
"forks": 47,
"watchers": 188,
"watchers": 189,
"score": 0,
"subscribers_count": 5
},
2025/CVE-2025-2304.json
+4 -4
View File
@@ -247,10 +247,10 @@
"description": null,
"fork": false,
"created_at": "2026-02-01T18:57:09Z",
"updated_at": "2026-04-24T00:51:23Z",
"updated_at": "2026-08-06T03:41:11Z",
"pushed_at": "2026-02-03T01:41:05Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -261,7 +261,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-24813.json
+4 -4
View File
@@ -776,15 +776,15 @@
{
"id": 963370983,
"name": "CVE-2025-24813-POC",
"full_name": "f8l124\/CVE-2025-24813-POC",
"full_name": "NamelessSaint8\/CVE-2025-24813-POC",
"owner": {
"login": "f8l124",
"login": "NamelessSaint8",
"id": 162183079,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/162183079?v=4",
"html_url": "https:\/\/github.com\/f8l124",
"html_url": "https:\/\/github.com\/NamelessSaint8",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/f8l124\/CVE-2025-24813-POC",
"html_url": "https:\/\/github.com\/NamelessSaint8\/CVE-2025-24813-POC",
"description": "A simple, easy-to-use POC for CVE-2025-42813 (Apache Tomcat versions below 9.0.99).",
"fork": false,
"created_at": "2025-04-09T15:20:32Z",
2025/CVE-2025-50168.json
+1 -1
View File
@@ -30,6 +30,6 @@
"forks": 20,
"watchers": 144,
"score": 0,
"subscribers_count": 0
"subscribers_count": 1
}
]
2025/CVE-2025-52915.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-08-05T16:46:45Z",
"updated_at": "2026-08-06T06:21:26Z",
"pushed_at": "2026-07-12T09:40:22Z",
"stargazers_count": 887,
"watchers_count": 887,
"stargazers_count": 888,
"watchers_count": 888,
"has_discussions": false,
"forks_count": 131,
"forks_count": 132,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -38,8 +38,8 @@
"vulnerable-driver"
],
"visibility": "public",
"forks": 131,
"watchers": 887,
"forks": 132,
"watchers": 888,
"score": 0,
"subscribers_count": 20
}
2025/CVE-2025-54424.json
+2 -2
View File
@@ -53,8 +53,8 @@
"description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐",
"fork": false,
"created_at": "2025-08-14T05:16:16Z",
"updated_at": "2026-08-06T00:29:13Z",
"pushed_at": "2026-08-06T00:29:02Z",
"updated_at": "2026-08-06T05:44:25Z",
"pushed_at": "2026-08-06T05:43:13Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2025/CVE-2025-55182.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.",
"fork": false,
"created_at": "2022-06-17T10:19:10Z",
"updated_at": "2026-08-05T23:43:10Z",
"pushed_at": "2026-08-05T23:43:06Z",
"updated_at": "2026-08-06T05:58:01Z",
"pushed_at": "2026-08-06T05:56:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -11684,8 +11684,8 @@
"description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.",
"fork": false,
"created_at": "2025-12-24T14:48:19Z",
"updated_at": "2026-08-06T00:42:13Z",
"pushed_at": "2026-08-06T00:42:09Z",
"updated_at": "2026-08-06T05:56:48Z",
"pushed_at": "2026-08-06T05:56:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-66398.json
+2 -2
View File
@@ -64,8 +64,8 @@
"description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.",
"fork": false,
"created_at": "2026-03-23T09:09:21Z",
"updated_at": "2026-08-05T23:58:40Z",
"pushed_at": "2026-08-05T23:58:33Z",
"updated_at": "2026-08-06T06:13:14Z",
"pushed_at": "2026-08-06T06:13:06Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-0073.json
+4 -4
View File
@@ -146,10 +146,10 @@
"description": "0-Click RCE Android Adb TLS Wireless Debugging",
"fork": false,
"created_at": "2026-06-04T03:06:59Z",
"updated_at": "2026-06-04T23:02:40Z",
"updated_at": "2026-08-06T03:51:26Z",
"pushed_at": "2026-06-04T23:02:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -160,7 +160,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-15430.json
+7 -7
View File
@@ -11,15 +11,15 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/BlackSnufkin\/AxHunter",
"description": "PoCs for Wellbia XIGNCODE3 anti-cheat xhunter driver family - xhunter1.sys v2023.12.7.78 and xhunter2.sys v2026.6.1.192 (CVE-2026-15430).",
"description": "PoCs for Wellbia XIGNCODE3 anti-cheat xhunter driver family - xhunter1.sys v2023.12.7.78 and xhunter2.sys v2026.6.1.192 (CVE-2026-15430, CVE-2026-3609).",
"fork": false,
"created_at": "2026-08-05T10:03:50Z",
"updated_at": "2026-08-05T11:28:55Z",
"updated_at": "2026-08-06T06:53:15Z",
"pushed_at": "2026-08-05T11:26:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"forks": 2,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-16723.json
+4 -4
View File
@@ -275,12 +275,12 @@
"description": null,
"fork": false,
"created_at": "2026-08-05T09:29:39Z",
"updated_at": "2026-08-05T14:02:09Z",
"pushed_at": "2026-08-05T11:51:40Z",
"updated_at": "2026-08-06T06:40:40Z",
"pushed_at": "2026-08-06T06:39:47Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -288,7 +288,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"forks": 2,
"watchers": 1,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-18556.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Read-only N-able N-central CVE-2026-18556\/CVE-2026-18577 post-exploitation IoC hunter for Windows endpoints",
"fork": false,
"created_at": "2026-08-06T00:01:06Z",
"updated_at": "2026-08-06T00:01:18Z",
"pushed_at": "2026-08-06T00:01:09Z",
"updated_at": "2026-08-06T03:45:11Z",
"pushed_at": "2026-08-06T03:44:58Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-20841.json
+2 -2
View File
@@ -66,8 +66,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.",
"fork": false,
"created_at": "2026-02-26T05:21:28Z",
"updated_at": "2026-08-05T23:53:37Z",
"pushed_at": "2026-08-05T23:53:20Z",
"updated_at": "2026-08-06T06:08:45Z",
"pushed_at": "2026-08-06T06:07:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-20980.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Poc for CVE-2026-20980, CVE-2026-20981, CVE-2026-20982",
"fork": false,
"created_at": "2026-06-01T13:14:47Z",
"updated_at": "2026-08-05T06:41:31Z",
"updated_at": "2026-08-06T03:13:32Z",
"pushed_at": "2026-06-01T17:42:26Z",
"stargazers_count": 41,
"watchers_count": 41,
"stargazers_count": 40,
"watchers_count": 40,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 41,
"watchers": 40,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-24061.json
+2 -2
View File
@@ -59,8 +59,8 @@
"description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.",
"fork": false,
"created_at": "2026-02-03T19:46:10Z",
"updated_at": "2026-08-05T23:50:24Z",
"pushed_at": "2026-08-05T23:50:20Z",
"updated_at": "2026-08-06T06:05:43Z",
"pushed_at": "2026-08-06T06:04:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-25243.json
+33
View File
@@ -64,5 +64,38 @@
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1324830907,
"name": "CVE-2026-25243",
"full_name": "sohail-saha-optiv\/CVE-2026-25243",
"owner": {
"login": "sohail-saha-optiv",
"id": 217196995,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/217196995?v=4",
"html_url": "https:\/\/github.com\/sohail-saha-optiv",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/sohail-saha-optiv\/CVE-2026-25243",
"description": null,
"fork": false,
"created_at": "2026-08-06T06:28:46Z",
"updated_at": "2026-08-06T06:28:46Z",
"pushed_at": "2026-08-06T06:28:46Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-31431.json
+6 -6
View File
@@ -264,10 +264,10 @@
"description": "Copy Fail - CVE-2026-31431",
"fork": false,
"created_at": "2026-04-30T12:59:11Z",
"updated_at": "2026-07-30T22:29:43Z",
"updated_at": "2026-08-06T03:37:36Z",
"pushed_at": "2026-06-05T02:59:22Z",
"stargazers_count": 16,
"watchers_count": 16,
"stargazers_count": 17,
"watchers_count": 17,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -278,7 +278,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 16,
"watchers": 17,
"score": 0,
"subscribers_count": 0
},
@@ -733,8 +733,8 @@
"description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.",
"fork": false,
"created_at": "2026-05-05T04:58:21Z",
"updated_at": "2026-08-06T00:05:43Z",
"pushed_at": "2026-08-06T00:05:36Z",
"updated_at": "2026-08-06T06:20:34Z",
"pushed_at": "2026-08-06T06:20:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-34980.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1324745742,
"name": "CVE-2026-34980",
"full_name": "HORKimhab\/CVE-2026-34980",
"owner": {
"login": "HORKimhab",
"id": 41143106,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41143106?v=4",
"html_url": "https:\/\/github.com\/HORKimhab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/HORKimhab\/CVE-2026-34980",
"description": "CVE-2026-34980 - Draft or Todo",
"fork": false,
"created_at": "2026-08-06T04:45:52Z",
"updated_at": "2026-08-06T04:46:00Z",
"pushed_at": "2026-08-06T04:45:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-34990.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1324746434,
"name": "CVE-2026-34990",
"full_name": "HORKimhab\/CVE-2026-34990",
"owner": {
"login": "HORKimhab",
"id": 41143106,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41143106?v=4",
"html_url": "https:\/\/github.com\/HORKimhab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/HORKimhab\/CVE-2026-34990",
"description": "CVE-2026-34990 - Draft or Todo",
"fork": false,
"created_at": "2026-08-06T04:46:51Z",
"updated_at": "2026-08-06T04:47:39Z",
"pushed_at": "2026-08-06T04:46:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-3609.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-08-05T16:46:45Z",
"updated_at": "2026-08-06T06:21:26Z",
"pushed_at": "2026-07-12T09:40:22Z",
"stargazers_count": 887,
"watchers_count": 887,
"stargazers_count": 888,
"watchers_count": 888,
"has_discussions": false,
"forks_count": 131,
"forks_count": 132,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -38,8 +38,8 @@
"vulnerable-driver"
],
"visibility": "public",
"forks": 131,
"watchers": 887,
"forks": 132,
"watchers": 888,
"score": 0,
"subscribers_count": 20
}
2026/CVE-2026-39875.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Unprivileged user to root on macOS Sonoma, Sequoia, and Tahoe. Patched in macOS 26.6 \/ 15.7.8 \/ 14.8.8.",
"fork": false,
"created_at": "2026-07-27T19:14:06Z",
"updated_at": "2026-08-05T12:39:22Z",
"updated_at": "2026-08-06T06:12:25Z",
"pushed_at": "2026-07-28T18:26:20Z",
"stargazers_count": 8,
"watchers_count": 8,
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 8,
"watchers": 9,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-41089.json
+2 -2
View File
@@ -256,8 +256,8 @@
"description": "Scan Windows Domain Controllers for CVE-2026-41089 to detect unauthenticated remote code execution vulnerabilities in the Netlogon service.",
"fork": false,
"created_at": "2026-07-22T15:40:18Z",
"updated_at": "2026-08-06T00:12:10Z",
"pushed_at": "2026-08-06T00:12:05Z",
"updated_at": "2026-08-06T06:28:38Z",
"pushed_at": "2026-08-06T06:27:22Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-43499.json
+34 -34
View File
@@ -348,10 +348,10 @@
"description": "GhostLock (CVE-2026-43499) kernel exploit for OnePlus devices with locked bootloader",
"fork": false,
"created_at": "2026-07-12T16:05:24Z",
"updated_at": "2026-08-06T00:10:35Z",
"updated_at": "2026-08-06T06:37:10Z",
"pushed_at": "2026-08-05T07:22:51Z",
"stargazers_count": 199,
"watchers_count": 199,
"stargazers_count": 206,
"watchers_count": 206,
"has_discussions": false,
"forks_count": 44,
"allow_forking": true,
@@ -369,7 +369,7 @@
],
"visibility": "public",
"forks": 44,
"watchers": 199,
"watchers": 206,
"score": 0,
"subscribers_count": 6
},
@@ -586,12 +586,12 @@
"description": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.",
"fork": false,
"created_at": "2026-07-14T14:21:27Z",
"updated_at": "2026-08-05T17:48:44Z",
"updated_at": "2026-08-06T02:31:23Z",
"pushed_at": "2026-07-30T11:28:07Z",
"stargazers_count": 32,
"watchers_count": 32,
"stargazers_count": 33,
"watchers_count": 33,
"has_discussions": false,
"forks_count": 10,
"forks_count": 11,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -599,8 +599,8 @@
"pull_request_creation_policy": "collaborators_only",
"topics": [],
"visibility": "public",
"forks": 10,
"watchers": 32,
"forks": 11,
"watchers": 33,
"score": 0,
"subscribers_count": 0
},
@@ -883,7 +883,7 @@
"description": "Standalone CVE-2026-43499 PoC for Galaxy S25 Ultra SM-S938N S938NKSUACZF1",
"fork": false,
"created_at": "2026-07-16T08:02:46Z",
"updated_at": "2026-08-04T11:00:33Z",
"updated_at": "2026-08-06T01:48:31Z",
"pushed_at": "2026-07-17T14:41:41Z",
"stargazers_count": 37,
"watchers_count": 37,
@@ -1081,12 +1081,12 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
"updated_at": "2026-08-05T23:58:51Z",
"pushed_at": "2026-08-05T14:41:06Z",
"stargazers_count": 629,
"watchers_count": 629,
"updated_at": "2026-08-06T06:48:45Z",
"pushed_at": "2026-08-06T06:44:54Z",
"stargazers_count": 640,
"watchers_count": 640,
"has_discussions": false,
"forks_count": 90,
"forks_count": 92,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1094,8 +1094,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 90,
"watchers": 629,
"forks": 92,
"watchers": 640,
"score": 0,
"subscribers_count": 24
},
@@ -1147,12 +1147,12 @@
"description": "（CVE-2026-43499）内核漏洞利用程序，适用于未解锁 Bootloader 的一加设备。",
"fork": false,
"created_at": "2026-07-18T06:24:34Z",
"updated_at": "2026-08-05T14:28:46Z",
"updated_at": "2026-08-06T03:55:16Z",
"pushed_at": "2026-07-19T08:28:49Z",
"stargazers_count": 36,
"watchers_count": 36,
"stargazers_count": 37,
"watchers_count": 37,
"has_discussions": true,
"forks_count": 11,
"forks_count": 12,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1160,8 +1160,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 11,
"watchers": 36,
"forks": 12,
"watchers": 37,
"score": 0,
"subscribers_count": 0
},
@@ -2037,10 +2037,10 @@
"description": "CVE-2026-43499 for the Meta Quest",
"fork": false,
"created_at": "2026-08-02T00:53:02Z",
"updated_at": "2026-08-02T03:44:20Z",
"updated_at": "2026-08-06T02:38:08Z",
"pushed_at": "2026-08-02T02:25:49Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -2051,7 +2051,7 @@
"topics": [],
"visibility": "public",
"forks": 7,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
@@ -2103,12 +2103,12 @@
"description": "Jailbreak supported Google Pixel phones with CVE-2026-43499",
"fork": false,
"created_at": "2026-08-02T17:34:45Z",
"updated_at": "2026-08-05T23:22:22Z",
"updated_at": "2026-08-06T04:10:51Z",
"pushed_at": "2026-08-05T10:11:39Z",
"stargazers_count": 94,
"watchers_count": 94,
"stargazers_count": 96,
"watchers_count": 96,
"has_discussions": false,
"forks_count": 18,
"forks_count": 20,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2116,8 +2116,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 18,
"watchers": 94,
"forks": 20,
"watchers": 96,
"score": 0,
"subscribers_count": 4
},
2026/CVE-2026-45585.json
+4 -4
View File
@@ -398,10 +398,10 @@
"description": "YellowKey BitLocker CVE-2026-45585 free open-source utility to extract, backup and view BitLocker recovery keys on Windows 10\/11. BitLocker bypass vulnerability tool, remediation and mitigation. Tom's Hardware coverage. Check TPM status, protector types, encryption state. Download YellowKey free, portable, no install needed.",
"fork": false,
"created_at": "2026-08-01T18:09:20Z",
"updated_at": "2026-08-06T00:45:57Z",
"updated_at": "2026-08-06T01:50:12Z",
"pushed_at": "2026-08-01T19:13:03Z",
"stargazers_count": 42,
"watchers_count": 42,
"stargazers_count": 54,
"watchers_count": 54,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -433,7 +433,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 42,
"watchers": 54,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-50343.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-50343 InstallService StaticPluginMap EoP - standard user to SYSTEM",
"fork": false,
"created_at": "2026-06-03T08:50:32Z",
"updated_at": "2026-08-05T23:10:16Z",
"updated_at": "2026-08-06T03:04:15Z",
"pushed_at": "2026-07-16T10:14:52Z",
"stargazers_count": 45,
"watchers_count": 45,
"stargazers_count": 47,
"watchers_count": 47,
"has_discussions": false,
"forks_count": 12,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 12,
"watchers": 45,
"watchers": 47,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-57239.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Proof of concept exploit for CVE-2026-3775\/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\\SYSTEM rights via the Foxit PDF Reader updater service.",
"fork": false,
"created_at": "2026-07-08T13:47:31Z",
"updated_at": "2026-08-04T05:38:41Z",
"updated_at": "2026-08-06T06:43:04Z",
"pushed_at": "2026-07-27T07:52:49Z",
"stargazers_count": 14,
"watchers_count": 14,
"stargazers_count": 15,
"watchers_count": 15,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -32,7 +32,7 @@
],
"visibility": "public",
"forks": 3,
"watchers": 14,
"watchers": 15,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-59774.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1324786027,
"name": "CVE-2026-59774_docker",
"full_name": "FlowerWitch\/CVE-2026-59774_docker",
"owner": {
"login": "FlowerWitch",
"id": 19641363,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/19641363?v=4",
"html_url": "https:\/\/github.com\/FlowerWitch",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/FlowerWitch\/CVE-2026-59774_docker",
"description": "CVE-2026-59774",
"fork": false,
"created_at": "2026-08-06T05:43:33Z",
"updated_at": "2026-08-06T06:45:41Z",
"pushed_at": "2026-08-06T06:44:15Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-60004.json
+6 -6
View File
@@ -113,12 +113,12 @@
"description": "CVE-2026-60004 Pre-Auth RCE Exploit — Gitea <= 1.27.0 diffpatch git hook injection (CVSS 9.8)",
"fork": false,
"created_at": "2026-08-03T07:48:39Z",
"updated_at": "2026-08-05T11:22:28Z",
"updated_at": "2026-08-06T04:30:26Z",
"pushed_at": "2026-08-03T08:31:38Z",
"stargazers_count": 9,
"watchers_count": 9,
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 3,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -137,8 +137,8 @@
"vulnerability"
],
"visibility": "public",
"forks": 3,
"watchers": 9,
"forks": 4,
"watchers": 10,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-63030.json
+8 -8
View File
@@ -14,10 +14,10 @@
"description": "wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain",
"fork": false,
"created_at": "2026-07-17T20:18:33Z",
"updated_at": "2026-08-05T12:50:40Z",
"updated_at": "2026-08-06T02:25:16Z",
"pushed_at": "2026-07-23T09:23:48Z",
"stargazers_count": 712,
"watchers_count": 712,
"stargazers_count": 713,
"watchers_count": 713,
"has_discussions": false,
"forks_count": 163,
"allow_forking": true,
@@ -32,7 +32,7 @@
],
"visibility": "public",
"forks": 163,
"watchers": 712,
"watchers": 713,
"score": 0,
"subscribers_count": 3
},
@@ -2246,10 +2246,10 @@
"description": "WordPress CVE-2026-63030 and CVE-2026-60137 security tool for detecting exposure to the WP2Shell pre-authentication RCE chain.",
"fork": false,
"created_at": "2026-08-02T16:33:02Z",
"updated_at": "2026-08-04T13:32:38Z",
"updated_at": "2026-08-06T02:04:00Z",
"pushed_at": "2026-08-04T09:36:29Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -2260,7 +2260,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-64531.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Tracking OVSwrap (CVE-2026-64531), the Open vSwitch datapath netlink overflow",
"fork": false,
"created_at": "2026-07-29T05:15:24Z",
"updated_at": "2026-08-05T07:10:00Z",
"pushed_at": "2026-08-05T07:09:34Z",
"updated_at": "2026-08-06T05:17:22Z",
"pushed_at": "2026-08-06T05:17:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-64600.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "is an advanced security research framework designed to model, analyze, and demonstrate Local Privilege Escalation (LPE) mechanics associated with kernel-level race conditions and filesystem structure vulnerabilities (CVE-2026-64600 \/ RefluXFS)",
"fork": false,
"created_at": "2026-07-24T23:27:22Z",
"updated_at": "2026-07-28T11:46:34Z",
"updated_at": "2026-08-06T06:18:29Z",
"pushed_at": "2026-07-24T23:29:23Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-65058.json
+46
View File
@@ -0,0 +1,46 @@
[
{
"id": 1324753529,
"name": "trezor-cve-2026-65058",
"full_name": "iktok90-design\/trezor-cve-2026-65058",
"owner": {
"login": "iktok90-design",
"id": 312922209,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/312922209?v=4",
"html_url": "https:\/\/github.com\/iktok90-design",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/iktok90-design\/trezor-cve-2026-65058",
"description": "Security research: Trezor Safe calldata confirmation-binding bypass vulnerability analysis. Educational proof-of-concept for hardware wallet transaction display verification.",
"fork": false,
"created_at": "2026-08-06T04:57:58Z",
"updated_at": "2026-08-06T05:02:03Z",
"pushed_at": "2026-08-06T05:00:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"calldata",
"cryptography",
"cve",
"ethereum",
"firmware",
"hardware-wallet",
"poc",
"security-research",
"trezor",
"vulnerability"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-66066.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": null,
"fork": false,
"created_at": "2026-07-30T21:06:00Z",
"updated_at": "2026-08-05T19:42:01Z",
"updated_at": "2026-08-06T01:27:43Z",
"pushed_at": "2026-07-31T15:27:43Z",
"stargazers_count": 22,
"watchers_count": 22,
"stargazers_count": 23,
"watchers_count": 23,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 22,
"watchers": 23,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-69083.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-9198.json
+2 -2
View File
@@ -113,8 +113,8 @@
"description": null,
"fork": false,
"created_at": "2026-08-05T17:44:08Z",
"updated_at": "2026-08-05T19:23:25Z",
"pushed_at": "2026-08-05T18:45:22Z",
"updated_at": "2026-08-06T01:07:09Z",
"pushed_at": "2026-08-06T01:07:04Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
README.md
+27 -3
View File
@@ -3083,6 +3083,7 @@
- [dinosn/CVE-2026-25243](https://github.com/dinosn/CVE-2026-25243)
- [dinosn/CVE-2026-25243-debugfree](https://github.com/dinosn/CVE-2026-25243-debugfree)
- [sohail-saha-optiv/CVE-2026-25243](https://github.com/sohail-saha-optiv/CVE-2026-25243)
### CVE-2026-25250
- [TheMalwareGuardian/CVE-2026-25250](https://github.com/TheMalwareGuardian/CVE-2026-25250)
@@ -3971,6 +3972,20 @@
- [HORKimhab/CVE-2026-34926](https://github.com/HORKimhab/CVE-2026-34926)
### CVE-2026-34980 (2026-04-03)
<code>OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, in a network-exposed cupsd with a shared target queue, an unauthorized client can send a Print-Job to that shared PostScript queue without authentication. The server accepts a page-border value supplied as textWithoutLanguage, preserves an embedded newline through option escaping and reparse, and then reparses the resulting second-line PPD: text as a trusted scheduler control record. A follow-up raw print job can therefore make the server execute an attacker-chosen existing binary such as /usr/bin/vim as lp. At time of publication, there are no publicly available patches.
</code>
- [HORKimhab/CVE-2026-34980](https://github.com/HORKimhab/CVE-2026-34980)
### CVE-2026-34990 (2026-04-03)
<code>OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, a local unprivileged user can coerce cupsd into authenticating to an attacker-controlled localhost IPP service with a reusable Authorization: Local ... token. That token is enough to drive /admin/ requests on localhost, and the attacker can combine CUPS-Create-Local-Printer with printer-is-shared=true to persist a file:///... queue even though the normal FileDevice policy rejects such URIs. Printing to that queue gives an arbitrary root file overwrite; the PoC below uses that primitive to drop a sudoers fragment and demonstrate root command execution. At time of publication, there are no publicly available patches.
</code>
- [HORKimhab/CVE-2026-34990](https://github.com/HORKimhab/CVE-2026-34990)
### CVE-2026-35029 (2026-04-06)
<code>LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.0, the /config/update endpoint does not enforce admin role authorization. A user who is already authenticated into the platform can then use this endpoint to modify proxy configuration and environment variables, register custom pass-through endpoint handlers pointing to attacker-controlled Python code, achieving remote code execution, read arbitrary server files by setting UI_LOGO_PATH and fetching via /get_image, and take over other privileged accounts by overwriting UI_USERNAME and UI_PASSWORD environment variables. Fixed in v1.83.0.
@@ -7245,6 +7260,9 @@
- [cybertechajju/CVE-2026-59734-POC](https://github.com/cybertechajju/CVE-2026-59734-POC)
### CVE-2026-59774
- [FlowerWitch/CVE-2026-59774_docker](https://github.com/FlowerWitch/CVE-2026-59774_docker)
### CVE-2026-59827 (2026-07-09)
<code>Metabase is an open-source business intelligence and embedded analytics tool. Prior to 1.58.15, 1.59.12, 1.60.6.3, and 1.61.1.4, Metabase instances with an H2 database connection, including the default sample database, deserialize arbitrary Java objects returned in H2 native query result columns of type OTHER without validation, allowing an authenticated user who can run native H2 queries to execute code on the Metabase server. This issue is fixed in versions 1.58.15, 1.59.12, 1.60.6.3, and 1.61.1.4.
@@ -7507,6 +7525,13 @@
- [zer0dayf/CVE-2026-65008](https://github.com/zer0dayf/CVE-2026-65008)
### CVE-2026-65058 (2026-07-21)
<code>Trezor Safe 3, Safe 5, and Safe 7 firmware contains a confirmation-binding flaw in the Ethereum sign_tx / sign_tx_eip1559 flow. For contract interactions, the device confirms only the initial calldata chunk while the signature commits to the full streamed calldata. An attacker could present calldata to a victim then supply a different tail that changes the signed transaction. Fixed in 70c9b0c.
</code>
- [iktok90-design/trezor-cve-2026-65058](https://github.com/iktok90-design/trezor-cve-2026-65058)
### CVE-2026-65321 (2026-08-02)
<code>PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticated attackers to inject arbitrary SQL by exploiting improper quote-escaping in DefaultParameterFormatter.format(), which routes DELETE and CTAS statements to the _escape_hive function that backslash-escapes single quotes rather than doubling them. Because Athena and Trino do not treat backslashes as escape characters inside string literals, attacker-supplied input such as a single quote followed by SQL syntax causes the parser to terminate the string literal prematurely, enabling data exfiltration via UNION SELECT, execution of destructive statements, and attacker-controlled CTAS destination and content.
@@ -11755,7 +11780,7 @@
- [La3B0z/CVE-2025-24813-POC](https://github.com/La3B0z/CVE-2025-24813-POC)
- [Heimd411/CVE-2025-24813-noPoC](https://github.com/Heimd411/CVE-2025-24813-noPoC)
- [horsehacks/CVE-2025-24813-checker](https://github.com/horsehacks/CVE-2025-24813-checker)
- [f8l124/CVE-2025-24813-POC](https://github.com/f8l124/CVE-2025-24813-POC)
- [NamelessSaint8/CVE-2025-24813-POC](https://github.com/NamelessSaint8/CVE-2025-24813-POC)
- [Franconyu/Poc_for_CVE-2025-24813](https://github.com/Franconyu/Poc_for_CVE-2025-24813)
- [cchopin/CVE-Arsenal-Lab](https://github.com/cchopin/CVE-Arsenal-Lab)
- [Mattb709/CVE-2025-24813-PoC-Apache-Tomcat-RCE](https://github.com/Mattb709/CVE-2025-24813-PoC-Apache-Tomcat-RCE)
@@ -20522,6 +20547,7 @@
- [Clarissss/osTicketFileReadIntoRCE](https://github.com/Clarissss/osTicketFileReadIntoRCE)
- [rcribelar-nucleus/my-cool-demo-php-code](https://github.com/rcribelar-nucleus/my-cool-demo-php-code)
- [whyuhurtz/wongpress](https://github.com/whyuhurtz/wongpress)
- [HORKimhab/CVE-2022-31626-CVE-2024-2961-CVE-2019-6977](https://github.com/HORKimhab/CVE-2022-31626-CVE-2024-2961-CVE-2019-6977)
### CVE-2024-2997 (2024-03-27)
@@ -30039,7 +30065,6 @@
</code>
- [RandomRobbieBF/CVE-2024-54369](https://github.com/RandomRobbieBF/CVE-2024-54369)
- [Nxploited/CVE-2024-54369-PoC](https://github.com/Nxploited/CVE-2024-54369-PoC)
### CVE-2024-54378 (2024-12-16)
@@ -71277,7 +71302,6 @@
- [nicoleman0/CVE-2016-6210-OpenSSHd-7.2p2](https://github.com/nicoleman0/CVE-2016-6210-OpenSSHd-7.2p2)
- [KiPhuong/cve-2016-6210](https://github.com/KiPhuong/cve-2016-6210)
- [Alisha-chaudhary/ssh-enum](https://github.com/Alisha-chaudhary/ssh-enum)
- [serexp/poc-CVE20166210](https://github.com/serexp/poc-CVE20166210)
### CVE-2016-6271 (2017-01-18)