From 8f8915fb8528acceea10fcd94e24975c98e3301b Mon Sep 17 00:00:00 2001 From: motikan2010-bot Date: Thu, 6 Aug 2026 15:54:34 +0900 Subject: [PATCH] Auto Update 2026/08/06 06:54:34 --- 2012/CVE-2012-2459.json | 4 +-- 2013/CVE-2013-2028.json | 4 +-- 2016/CVE-2016-6210.json | 33 ------------------- 2019/CVE-2019-1040.json | 4 +-- 2020/CVE-2020-1472.json | 4 +-- 2021/CVE-2021-1931.json | 8 ++--- 2021/CVE-2021-33044.json | 4 +-- 2021/CVE-2021-41773.json | 4 +-- 2022/CVE-2022-25012.json | 8 ++--- 2022/CVE-2022-38694.json | 12 +++---- 2022/CVE-2022-39073.json | 4 +-- 2023/CVE-2023-45866.json | 8 ++--- 2024/CVE-2024-21306.json | 8 ++--- 2024/CVE-2024-21338.json | 8 ++--- 2024/CVE-2024-27198.json | 4 +-- 2024/CVE-2024-2961.json | 33 +++++++++++++++++++ 2024/CVE-2024-32002.json | 4 +-- 2024/CVE-2024-54369.json | 33 ------------------- 2024/CVE-2024-6387.json | 8 ++--- 2025/CVE-2025-2304.json | 8 ++--- 2025/CVE-2025-24813.json | 8 ++--- 2025/CVE-2025-50168.json | 2 +- 2025/CVE-2025-52915.json | 12 +++---- 2025/CVE-2025-54424.json | 4 +-- 2025/CVE-2025-55182.json | 8 ++--- 2025/CVE-2025-66398.json | 4 +-- 2026/CVE-2026-0073.json | 8 ++--- 2026/CVE-2026-15430.json | 14 ++++----- 2026/CVE-2026-16723.json | 8 ++--- 2026/CVE-2026-18556.json | 4 +-- 2026/CVE-2026-20841.json | 4 +-- 2026/CVE-2026-20980.json | 8 ++--- 2026/CVE-2026-24061.json | 4 +-- 2026/CVE-2026-25243.json | 33 +++++++++++++++++++ 2026/CVE-2026-31431.json | 12 +++---- 2026/CVE-2026-34980.json | 35 +++++++++++++++++++++ 2026/CVE-2026-34990.json | 35 +++++++++++++++++++++ 2026/CVE-2026-3609.json | 12 +++---- 2026/CVE-2026-39875.json | 8 ++--- 2026/CVE-2026-41089.json | 4 +-- 2026/CVE-2026-43499.json | 68 ++++++++++++++++++++-------------------- 2026/CVE-2026-45585.json | 8 ++--- 2026/CVE-2026-50343.json | 8 ++--- 2026/CVE-2026-57239.json | 8 ++--- 2026/CVE-2026-59774.json | 35 +++++++++++++++++++++ 2026/CVE-2026-60004.json | 12 +++---- 2026/CVE-2026-63030.json | 16 +++++----- 2026/CVE-2026-64531.json | 4 +-- 2026/CVE-2026-64600.json | 8 ++--- 2026/CVE-2026-65058.json | 46 +++++++++++++++++++++++++++ 2026/CVE-2026-66066.json | 8 ++--- 2026/CVE-2026-69083.json | 4 +-- 2026/CVE-2026-9198.json | 4 +-- README.md | 30 ++++++++++++++++-- 54 files changed, 432 insertions(+), 257 deletions(-) create mode 100644 2026/CVE-2026-34980.json create mode 100644 2026/CVE-2026-34990.json create mode 100644 2026/CVE-2026-59774.json create mode 100644 2026/CVE-2026-65058.json diff --git a/2012/CVE-2012-2459.json b/2012/CVE-2012-2459.json index fe8ba87d1b..f312e70ee7 100644 --- a/2012/CVE-2012-2459.json +++ b/2012/CVE-2012-2459.json @@ -14,8 +14,8 @@ "description": "Browser-based Merkle tree demo — build a tree, generate inclusion proofs, recompute the root hash by hash, and replay the RFC 6962 second-preimage and CVE-2012-2459 attacks. Real SHA-256. No backend.", "fork": false, "created_at": "2026-06-28T17:01:57Z", - "updated_at": "2026-08-04T11:08:21Z", - "pushed_at": "2026-08-04T11:08:05Z", + "updated_at": "2026-08-06T00:20:14Z", + "pushed_at": "2026-08-06T00:34:58Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2013/CVE-2013-2028.json b/2013/CVE-2013-2028.json index b96339c203..5df6d78f73 100644 --- a/2013/CVE-2013-2028.json +++ b/2013/CVE-2013-2028.json @@ -19,7 +19,7 @@ "stargazers_count": 30, "watchers_count": 30, "has_discussions": false, - "forks_count": 10, + "forks_count": 9, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 10, + "forks": 9, "watchers": 30, "score": 0, "subscribers_count": 3 diff --git a/2016/CVE-2016-6210.json b/2016/CVE-2016-6210.json index f6e54de31b..1d7ecf444a 100644 --- a/2016/CVE-2016-6210.json +++ b/2016/CVE-2016-6210.json @@ -244,38 +244,5 @@ "watchers": 0, "score": 0, "subscribers_count": 0 - }, - { - "id": 1227512123, - "name": "poc-CVE20166210", - "full_name": "serexp\/poc-CVE20166210", - "owner": { - "login": "serexp", - "id": 160177873, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/160177873?v=4", - "html_url": "https:\/\/github.com\/serexp", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/serexp\/poc-CVE20166210", - "description": "CVE-2016-6210\/Openssh 7.2p2 side channel info disclosure POC", - "fork": false, - "created_at": "2026-05-02T19:37:32Z", - "updated_at": "2026-05-26T12:08:33Z", - "pushed_at": "2026-05-02T19:42:10Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2019/CVE-2019-1040.json b/2019/CVE-2019-1040.json index 5378fbd957..9e120e8aad 100644 --- a/2019/CVE-2019-1040.json +++ b/2019/CVE-2019-1040.json @@ -179,8 +179,8 @@ "description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.", "fork": false, "created_at": "2025-12-06T19:56:12Z", - "updated_at": "2026-08-05T23:38:19Z", - "pushed_at": "2026-08-05T23:38:15Z", + "updated_at": "2026-08-06T04:25:34Z", + "pushed_at": "2026-08-06T04:24:41Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2020/CVE-2020-1472.json b/2020/CVE-2020-1472.json index 37af082d9e..f14b52e764 100644 --- a/2020/CVE-2020-1472.json +++ b/2020/CVE-2020-1472.json @@ -2383,8 +2383,8 @@ "description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.", "fork": false, "created_at": "2025-12-06T10:17:38Z", - "updated_at": "2026-08-06T00:05:11Z", - "pushed_at": "2026-08-06T00:05:00Z", + "updated_at": "2026-08-06T06:09:56Z", + "pushed_at": "2026-08-06T06:09:11Z", "stargazers_count": 4, "watchers_count": 4, "has_discussions": false, diff --git a/2021/CVE-2021-1931.json b/2021/CVE-2021-1931.json index b54db79042..9c39827e16 100644 --- a/2021/CVE-2021-1931.json +++ b/2021/CVE-2021-1931.json @@ -80,10 +80,10 @@ "description": "Unlock the Meta Quest 1 bootloader and gain root access using GhostLock + CVE-2021-1931.", "fork": false, "created_at": "2026-07-31T05:37:56Z", - "updated_at": "2026-08-05T14:30:57Z", + "updated_at": "2026-08-06T00:36:30Z", "pushed_at": "2026-07-31T12:18:42Z", - "stargazers_count": 5, - "watchers_count": 5, + "stargazers_count": 6, + "watchers_count": 6, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -107,7 +107,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 5, + "watchers": 6, "score": 0, "subscribers_count": 0 } diff --git a/2021/CVE-2021-33044.json b/2021/CVE-2021-33044.json index 3efb459b58..fa2b7c65ee 100644 --- a/2021/CVE-2021-33044.json +++ b/2021/CVE-2021-33044.json @@ -212,8 +212,8 @@ "description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.", "fork": false, "created_at": "2026-03-28T17:42:44Z", - "updated_at": "2026-08-06T00:11:23Z", - "pushed_at": "2026-08-06T00:11:15Z", + "updated_at": "2026-08-06T06:14:56Z", + "pushed_at": "2026-08-06T06:14:52Z", "stargazers_count": 4, "watchers_count": 4, "has_discussions": false, diff --git a/2021/CVE-2021-41773.json b/2021/CVE-2021-41773.json index d4f7007e77..e44e93b86a 100644 --- a/2021/CVE-2021-41773.json +++ b/2021/CVE-2021-41773.json @@ -5162,8 +5162,8 @@ "description": null, "fork": false, "created_at": "2026-08-05T11:29:28Z", - "updated_at": "2026-08-05T13:26:58Z", - "pushed_at": "2026-08-05T13:25:21Z", + "updated_at": "2026-08-06T04:15:48Z", + "pushed_at": "2026-08-06T04:15:37Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2022/CVE-2022-25012.json b/2022/CVE-2022-25012.json index cab7af1299..8848dda3b7 100644 --- a/2022/CVE-2022-25012.json +++ b/2022/CVE-2022-25012.json @@ -113,10 +113,10 @@ "description": null, "fork": false, "created_at": "2026-08-05T05:52:50Z", - "updated_at": "2026-08-05T08:20:03Z", + "updated_at": "2026-08-06T03:53:12Z", "pushed_at": "2026-08-05T08:18:30Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -127,7 +127,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2022/CVE-2022-38694.json b/2022/CVE-2022-38694.json index 49ebdce937..428e24cc48 100644 --- a/2022/CVE-2022-38694.json +++ b/2022/CVE-2022-38694.json @@ -149,12 +149,12 @@ "description": "CVE-2022-38694 Hardened Exploit - RP2350 USB Host Auto Flasher for Unisoc devices", "fork": false, "created_at": "2026-02-20T16:40:39Z", - "updated_at": "2026-08-05T23:18:24Z", + "updated_at": "2026-08-06T00:42:55Z", "pushed_at": "2026-08-05T16:54:53Z", - "stargazers_count": 5, - "watchers_count": 5, + "stargazers_count": 6, + "watchers_count": 6, "has_discussions": false, - "forks_count": 1, + "forks_count": 3, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -162,8 +162,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 1, - "watchers": 5, + "forks": 3, + "watchers": 6, "score": 0, "subscribers_count": 0 }, diff --git a/2022/CVE-2022-39073.json b/2022/CVE-2022-39073.json index 4e3fdf6cb8..12893fea3a 100644 --- a/2022/CVE-2022-39073.json +++ b/2022/CVE-2022-39073.json @@ -19,7 +19,7 @@ "stargazers_count": 11, "watchers_count": 11, "has_discussions": false, - "forks_count": 4, + "forks_count": 5, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -36,7 +36,7 @@ "zte" ], "visibility": "public", - "forks": 4, + "forks": 5, "watchers": 11, "score": 0, "subscribers_count": 1 diff --git a/2023/CVE-2023-45866.json b/2023/CVE-2023-45866.json index feb99b730f..5f98ecde77 100644 --- a/2023/CVE-2023-45866.json +++ b/2023/CVE-2023-45866.json @@ -151,10 +151,10 @@ "description": "Exploit basado en vulnerabilidades criticas Bluetooth (CVE-2023-45866, CVE-2024-21306)", "fork": false, "created_at": "2024-12-15T03:00:47Z", - "updated_at": "2026-07-23T10:02:04Z", + "updated_at": "2026-08-06T04:18:18Z", "pushed_at": "2026-07-23T09:08:54Z", - "stargazers_count": 14, - "watchers_count": 14, + "stargazers_count": 15, + "watchers_count": 15, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -165,7 +165,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 14, + "watchers": 15, "score": 0, "subscribers_count": 1 }, diff --git a/2024/CVE-2024-21306.json b/2024/CVE-2024-21306.json index a4bbb3f732..f8cb334734 100644 --- a/2024/CVE-2024-21306.json +++ b/2024/CVE-2024-21306.json @@ -80,10 +80,10 @@ "description": "Exploit basado en vulnerabilidades criticas Bluetooth (CVE-2023-45866, CVE-2024-21306)", "fork": false, "created_at": "2024-12-15T03:00:47Z", - "updated_at": "2026-07-23T10:02:04Z", + "updated_at": "2026-08-06T04:18:18Z", "pushed_at": "2026-07-23T09:08:54Z", - "stargazers_count": 14, - "watchers_count": 14, + "stargazers_count": 15, + "watchers_count": 15, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -94,7 +94,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 14, + "watchers": 15, "score": 0, "subscribers_count": 1 } diff --git a/2024/CVE-2024-21338.json b/2024/CVE-2024-21338.json index a714329d48..f49edfc9da 100644 --- a/2024/CVE-2024-21338.json +++ b/2024/CVE-2024-21338.json @@ -14,10 +14,10 @@ "description": "Local Privilege Escalation from Admin to Kernel vulnerability on Windows 10 and Windows 11 operating systems with HVCI enabled.", "fork": false, "created_at": "2024-04-13T05:53:02Z", - "updated_at": "2026-07-31T19:02:25Z", + "updated_at": "2026-08-06T05:14:01Z", "pushed_at": "2024-04-16T21:00:14Z", - "stargazers_count": 334, - "watchers_count": 334, + "stargazers_count": 335, + "watchers_count": 335, "has_discussions": false, "forks_count": 70, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 70, - "watchers": 334, + "watchers": 335, "score": 0, "subscribers_count": 3 }, diff --git a/2024/CVE-2024-27198.json b/2024/CVE-2024-27198.json index a0d520128d..1d04c3ce20 100644 --- a/2024/CVE-2024-27198.json +++ b/2024/CVE-2024-27198.json @@ -678,8 +678,8 @@ "description": "My write-ups from CyberDefenders' Blue Team labs, solved using Wireshark. Covers TeamCity RCE (CVE-2024-27198), XSS session hijacking, and LLMNR\/NBT-NS credential poisoning — each with step-by-step packet analysis, screenshots, and a full Wireshark filter\/command reference. Personal SOC Analyst Tier 1 learning log.", "fork": false, "created_at": "2026-08-01T09:25:34Z", - "updated_at": "2026-08-05T14:32:30Z", - "pushed_at": "2026-08-05T14:29:41Z", + "updated_at": "2026-08-06T05:36:08Z", + "pushed_at": "2026-08-06T05:35:58Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-2961.json b/2024/CVE-2024-2961.json index f860e54fd5..8e418e5d66 100644 --- a/2024/CVE-2024-2961.json +++ b/2024/CVE-2024-2961.json @@ -470,5 +470,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1324842994, + "name": "CVE-2022-31626-CVE-2024-2961-CVE-2019-6977", + "full_name": "HORKimhab\/CVE-2022-31626-CVE-2024-2961-CVE-2019-6977", + "owner": { + "login": "HORKimhab", + "id": 41143106, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41143106?v=4", + "html_url": "https:\/\/github.com\/HORKimhab", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/HORKimhab\/CVE-2022-31626-CVE-2024-2961-CVE-2019-6977", + "description": "CVE-2022-31626, CVE-2024-2961, CVE-2019-6977, PHP security research", + "fork": false, + "created_at": "2026-08-06T06:39:46Z", + "updated_at": "2026-08-06T06:43:40Z", + "pushed_at": "2026-08-06T06:42:38Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2024/CVE-2024-32002.json b/2024/CVE-2024-32002.json index 5fb5eb2004..d9495216f9 100644 --- a/2024/CVE-2024-32002.json +++ b/2024/CVE-2024-32002.json @@ -229,7 +229,7 @@ "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, - "forks_count": 4, + "forks_count": 3, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -237,7 +237,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 4, + "forks": 3, "watchers": 1, "score": 0, "subscribers_count": 1 diff --git a/2024/CVE-2024-54369.json b/2024/CVE-2024-54369.json index cfb6fdc355..f63dde1675 100644 --- a/2024/CVE-2024-54369.json +++ b/2024/CVE-2024-54369.json @@ -31,38 +31,5 @@ "watchers": 0, "score": 0, "subscribers_count": 1 - }, - { - "id": 918594689, - "name": "CVE-2024-54369-PoC", - "full_name": "Nxploited\/CVE-2024-54369-PoC", - "owner": { - "login": "Nxploited", - "id": 188819918, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4", - "html_url": "https:\/\/github.com\/Nxploited", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-54369-PoC", - "description": "PoC: Plugin: Zita Site Builder <= 1.0.2 - Arbitrary Plugin Installation", - "fork": false, - "created_at": "2025-01-18T10:52:03Z", - "updated_at": "2025-01-18T11:22:40Z", - "pushed_at": "2025-01-18T11:22:39Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2024/CVE-2024-6387.json b/2024/CVE-2024-6387.json index 939328a0cb..1aeb41c16e 100644 --- a/2024/CVE-2024-6387.json +++ b/2024/CVE-2024-6387.json @@ -2213,10 +2213,10 @@ "description": "Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (CVE-2024-6387)", "fork": false, "created_at": "2024-07-08T11:27:49Z", - "updated_at": "2026-07-30T23:26:58Z", + "updated_at": "2026-08-06T02:55:54Z", "pushed_at": "2024-08-22T08:50:25Z", - "stargazers_count": 188, - "watchers_count": 188, + "stargazers_count": 189, + "watchers_count": 189, "has_discussions": false, "forks_count": 47, "allow_forking": true, @@ -2227,7 +2227,7 @@ "topics": [], "visibility": "public", "forks": 47, - "watchers": 188, + "watchers": 189, "score": 0, "subscribers_count": 5 }, diff --git a/2025/CVE-2025-2304.json b/2025/CVE-2025-2304.json index 3c6d467ddf..4e6f98f304 100644 --- a/2025/CVE-2025-2304.json +++ b/2025/CVE-2025-2304.json @@ -247,10 +247,10 @@ "description": null, "fork": false, "created_at": "2026-02-01T18:57:09Z", - "updated_at": "2026-04-24T00:51:23Z", + "updated_at": "2026-08-06T03:41:11Z", "pushed_at": "2026-02-03T01:41:05Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -261,7 +261,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 1 }, diff --git a/2025/CVE-2025-24813.json b/2025/CVE-2025-24813.json index 1f39c7d720..82b606a758 100644 --- a/2025/CVE-2025-24813.json +++ b/2025/CVE-2025-24813.json @@ -776,15 +776,15 @@ { "id": 963370983, "name": "CVE-2025-24813-POC", - "full_name": "f8l124\/CVE-2025-24813-POC", + "full_name": "NamelessSaint8\/CVE-2025-24813-POC", "owner": { - "login": "f8l124", + "login": "NamelessSaint8", "id": 162183079, "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/162183079?v=4", - "html_url": "https:\/\/github.com\/f8l124", + "html_url": "https:\/\/github.com\/NamelessSaint8", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/f8l124\/CVE-2025-24813-POC", + "html_url": "https:\/\/github.com\/NamelessSaint8\/CVE-2025-24813-POC", "description": "A simple, easy-to-use POC for CVE-2025-42813 (Apache Tomcat versions below 9.0.99).", "fork": false, "created_at": "2025-04-09T15:20:32Z", diff --git a/2025/CVE-2025-50168.json b/2025/CVE-2025-50168.json index 8ea3210a8f..82314b82a2 100644 --- a/2025/CVE-2025-50168.json +++ b/2025/CVE-2025-50168.json @@ -30,6 +30,6 @@ "forks": 20, "watchers": 144, "score": 0, - "subscribers_count": 0 + "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2025/CVE-2025-52915.json b/2025/CVE-2025-52915.json index 9513a592f5..dfca51f8e0 100644 --- a/2025/CVE-2025-52915.json +++ b/2025/CVE-2025-52915.json @@ -14,12 +14,12 @@ "description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).", "fork": false, "created_at": "2023-12-05T14:52:11Z", - "updated_at": "2026-08-05T16:46:45Z", + "updated_at": "2026-08-06T06:21:26Z", "pushed_at": "2026-07-12T09:40:22Z", - "stargazers_count": 887, - "watchers_count": 887, + "stargazers_count": 888, + "watchers_count": 888, "has_discussions": false, - "forks_count": 131, + "forks_count": 132, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -38,8 +38,8 @@ "vulnerable-driver" ], "visibility": "public", - "forks": 131, - "watchers": 887, + "forks": 132, + "watchers": 888, "score": 0, "subscribers_count": 20 } diff --git a/2025/CVE-2025-54424.json b/2025/CVE-2025-54424.json index 467633f119..2aaa93b12f 100644 --- a/2025/CVE-2025-54424.json +++ b/2025/CVE-2025-54424.json @@ -53,8 +53,8 @@ "description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐", "fork": false, "created_at": "2025-08-14T05:16:16Z", - "updated_at": "2026-08-06T00:29:13Z", - "pushed_at": "2026-08-06T00:29:02Z", + "updated_at": "2026-08-06T05:44:25Z", + "pushed_at": "2026-08-06T05:43:13Z", "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, diff --git a/2025/CVE-2025-55182.json b/2025/CVE-2025-55182.json index 4d7eccccc9..9cec8f0168 100644 --- a/2025/CVE-2025-55182.json +++ b/2025/CVE-2025-55182.json @@ -14,8 +14,8 @@ "description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.", "fork": false, "created_at": "2022-06-17T10:19:10Z", - "updated_at": "2026-08-05T23:43:10Z", - "pushed_at": "2026-08-05T23:43:06Z", + "updated_at": "2026-08-06T05:58:01Z", + "pushed_at": "2026-08-06T05:56:49Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -11684,8 +11684,8 @@ "description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.", "fork": false, "created_at": "2025-12-24T14:48:19Z", - "updated_at": "2026-08-06T00:42:13Z", - "pushed_at": "2026-08-06T00:42:09Z", + "updated_at": "2026-08-06T05:56:48Z", + "pushed_at": "2026-08-06T05:56:44Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-66398.json b/2025/CVE-2025-66398.json index 20433c78ca..a25707a4e4 100644 --- a/2025/CVE-2025-66398.json +++ b/2025/CVE-2025-66398.json @@ -64,8 +64,8 @@ "description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.", "fork": false, "created_at": "2026-03-23T09:09:21Z", - "updated_at": "2026-08-05T23:58:40Z", - "pushed_at": "2026-08-05T23:58:33Z", + "updated_at": "2026-08-06T06:13:14Z", + "pushed_at": "2026-08-06T06:13:06Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2026/CVE-2026-0073.json b/2026/CVE-2026-0073.json index fb20be2df1..7d64c6aeaa 100644 --- a/2026/CVE-2026-0073.json +++ b/2026/CVE-2026-0073.json @@ -146,10 +146,10 @@ "description": "0-Click RCE Android Adb TLS Wireless Debugging", "fork": false, "created_at": "2026-06-04T03:06:59Z", - "updated_at": "2026-06-04T23:02:40Z", + "updated_at": "2026-08-06T03:51:26Z", "pushed_at": "2026-06-04T23:02:35Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -160,7 +160,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-15430.json b/2026/CVE-2026-15430.json index f192a0877f..c3e1a025a1 100644 --- a/2026/CVE-2026-15430.json +++ b/2026/CVE-2026-15430.json @@ -11,15 +11,15 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/BlackSnufkin\/AxHunter", - "description": "PoCs for Wellbia XIGNCODE3 anti-cheat xhunter driver family - xhunter1.sys v2023.12.7.78 and xhunter2.sys v2026.6.1.192 (CVE-2026-15430).", + "description": "PoCs for Wellbia XIGNCODE3 anti-cheat xhunter driver family - xhunter1.sys v2023.12.7.78 and xhunter2.sys v2026.6.1.192 (CVE-2026-15430, CVE-2026-3609).", "fork": false, "created_at": "2026-08-05T10:03:50Z", - "updated_at": "2026-08-05T11:28:55Z", + "updated_at": "2026-08-06T06:53:15Z", "pushed_at": "2026-08-05T11:26:12Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, - "forks_count": 1, + "forks_count": 2, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,8 +27,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 1, - "watchers": 0, + "forks": 2, + "watchers": 2, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-16723.json b/2026/CVE-2026-16723.json index dc4009c3c5..3fd2565f02 100644 --- a/2026/CVE-2026-16723.json +++ b/2026/CVE-2026-16723.json @@ -275,12 +275,12 @@ "description": null, "fork": false, "created_at": "2026-08-05T09:29:39Z", - "updated_at": "2026-08-05T14:02:09Z", - "pushed_at": "2026-08-05T11:51:40Z", + "updated_at": "2026-08-06T06:40:40Z", + "pushed_at": "2026-08-06T06:39:47Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, - "forks_count": 1, + "forks_count": 2, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -288,7 +288,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 1, + "forks": 2, "watchers": 1, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-18556.json b/2026/CVE-2026-18556.json index fd7b685c38..4727006a03 100644 --- a/2026/CVE-2026-18556.json +++ b/2026/CVE-2026-18556.json @@ -14,8 +14,8 @@ "description": "Read-only N-able N-central CVE-2026-18556\/CVE-2026-18577 post-exploitation IoC hunter for Windows endpoints", "fork": false, "created_at": "2026-08-06T00:01:06Z", - "updated_at": "2026-08-06T00:01:18Z", - "pushed_at": "2026-08-06T00:01:09Z", + "updated_at": "2026-08-06T03:45:11Z", + "pushed_at": "2026-08-06T03:44:58Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-20841.json b/2026/CVE-2026-20841.json index 7c484e24c1..c056760cc5 100644 --- a/2026/CVE-2026-20841.json +++ b/2026/CVE-2026-20841.json @@ -66,8 +66,8 @@ "description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.", "fork": false, "created_at": "2026-02-26T05:21:28Z", - "updated_at": "2026-08-05T23:53:37Z", - "pushed_at": "2026-08-05T23:53:20Z", + "updated_at": "2026-08-06T06:08:45Z", + "pushed_at": "2026-08-06T06:07:30Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-20980.json b/2026/CVE-2026-20980.json index 2d66204b7b..ebd6bfcc9e 100644 --- a/2026/CVE-2026-20980.json +++ b/2026/CVE-2026-20980.json @@ -14,10 +14,10 @@ "description": "Poc for CVE-2026-20980, CVE-2026-20981, CVE-2026-20982", "fork": false, "created_at": "2026-06-01T13:14:47Z", - "updated_at": "2026-08-05T06:41:31Z", + "updated_at": "2026-08-06T03:13:32Z", "pushed_at": "2026-06-01T17:42:26Z", - "stargazers_count": 41, - "watchers_count": 41, + "stargazers_count": 40, + "watchers_count": 40, "has_discussions": false, "forks_count": 8, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 8, - "watchers": 41, + "watchers": 40, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-24061.json b/2026/CVE-2026-24061.json index eb619cfae9..2f73d4a946 100644 --- a/2026/CVE-2026-24061.json +++ b/2026/CVE-2026-24061.json @@ -59,8 +59,8 @@ "description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.", "fork": false, "created_at": "2026-02-03T19:46:10Z", - "updated_at": "2026-08-05T23:50:24Z", - "pushed_at": "2026-08-05T23:50:20Z", + "updated_at": "2026-08-06T06:05:43Z", + "pushed_at": "2026-08-06T06:04:18Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-25243.json b/2026/CVE-2026-25243.json index 78fe486d8f..b852837c5f 100644 --- a/2026/CVE-2026-25243.json +++ b/2026/CVE-2026-25243.json @@ -64,5 +64,38 @@ "watchers": 2, "score": 0, "subscribers_count": 0 + }, + { + "id": 1324830907, + "name": "CVE-2026-25243", + "full_name": "sohail-saha-optiv\/CVE-2026-25243", + "owner": { + "login": "sohail-saha-optiv", + "id": 217196995, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/217196995?v=4", + "html_url": "https:\/\/github.com\/sohail-saha-optiv", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/sohail-saha-optiv\/CVE-2026-25243", + "description": null, + "fork": false, + "created_at": "2026-08-06T06:28:46Z", + "updated_at": "2026-08-06T06:28:46Z", + "pushed_at": "2026-08-06T06:28:46Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-31431.json b/2026/CVE-2026-31431.json index 63460f4431..0c485b9a2b 100644 --- a/2026/CVE-2026-31431.json +++ b/2026/CVE-2026-31431.json @@ -264,10 +264,10 @@ "description": "Copy Fail - CVE-2026-31431", "fork": false, "created_at": "2026-04-30T12:59:11Z", - "updated_at": "2026-07-30T22:29:43Z", + "updated_at": "2026-08-06T03:37:36Z", "pushed_at": "2026-06-05T02:59:22Z", - "stargazers_count": 16, - "watchers_count": 16, + "stargazers_count": 17, + "watchers_count": 17, "has_discussions": false, "forks_count": 5, "allow_forking": true, @@ -278,7 +278,7 @@ "topics": [], "visibility": "public", "forks": 5, - "watchers": 16, + "watchers": 17, "score": 0, "subscribers_count": 0 }, @@ -733,8 +733,8 @@ "description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.", "fork": false, "created_at": "2026-05-05T04:58:21Z", - "updated_at": "2026-08-06T00:05:43Z", - "pushed_at": "2026-08-06T00:05:36Z", + "updated_at": "2026-08-06T06:20:34Z", + "pushed_at": "2026-08-06T06:20:27Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-34980.json b/2026/CVE-2026-34980.json new file mode 100644 index 0000000000..a274390221 --- /dev/null +++ b/2026/CVE-2026-34980.json @@ -0,0 +1,35 @@ +[ + { + "id": 1324745742, + "name": "CVE-2026-34980", + "full_name": "HORKimhab\/CVE-2026-34980", + "owner": { + "login": "HORKimhab", + "id": 41143106, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41143106?v=4", + "html_url": "https:\/\/github.com\/HORKimhab", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/HORKimhab\/CVE-2026-34980", + "description": "CVE-2026-34980 - Draft or Todo", + "fork": false, + "created_at": "2026-08-06T04:45:52Z", + "updated_at": "2026-08-06T04:46:00Z", + "pushed_at": "2026-08-06T04:45:56Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-34990.json b/2026/CVE-2026-34990.json new file mode 100644 index 0000000000..53032d6e32 --- /dev/null +++ b/2026/CVE-2026-34990.json @@ -0,0 +1,35 @@ +[ + { + "id": 1324746434, + "name": "CVE-2026-34990", + "full_name": "HORKimhab\/CVE-2026-34990", + "owner": { + "login": "HORKimhab", + "id": 41143106, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41143106?v=4", + "html_url": "https:\/\/github.com\/HORKimhab", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/HORKimhab\/CVE-2026-34990", + "description": "CVE-2026-34990 - Draft or Todo", + "fork": false, + "created_at": "2026-08-06T04:46:51Z", + "updated_at": "2026-08-06T04:47:39Z", + "pushed_at": "2026-08-06T04:46:54Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-3609.json b/2026/CVE-2026-3609.json index 9513a592f5..dfca51f8e0 100644 --- a/2026/CVE-2026-3609.json +++ b/2026/CVE-2026-3609.json @@ -14,12 +14,12 @@ "description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).", "fork": false, "created_at": "2023-12-05T14:52:11Z", - "updated_at": "2026-08-05T16:46:45Z", + "updated_at": "2026-08-06T06:21:26Z", "pushed_at": "2026-07-12T09:40:22Z", - "stargazers_count": 887, - "watchers_count": 887, + "stargazers_count": 888, + "watchers_count": 888, "has_discussions": false, - "forks_count": 131, + "forks_count": 132, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -38,8 +38,8 @@ "vulnerable-driver" ], "visibility": "public", - "forks": 131, - "watchers": 887, + "forks": 132, + "watchers": 888, "score": 0, "subscribers_count": 20 } diff --git a/2026/CVE-2026-39875.json b/2026/CVE-2026-39875.json index 67faca7e0f..786348820d 100644 --- a/2026/CVE-2026-39875.json +++ b/2026/CVE-2026-39875.json @@ -14,10 +14,10 @@ "description": "Unprivileged user to root on macOS Sonoma, Sequoia, and Tahoe. Patched in macOS 26.6 \/ 15.7.8 \/ 14.8.8.", "fork": false, "created_at": "2026-07-27T19:14:06Z", - "updated_at": "2026-08-05T12:39:22Z", + "updated_at": "2026-08-06T06:12:25Z", "pushed_at": "2026-07-28T18:26:20Z", - "stargazers_count": 8, - "watchers_count": 8, + "stargazers_count": 9, + "watchers_count": 9, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 8, + "watchers": 9, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-41089.json b/2026/CVE-2026-41089.json index 2743e4d331..282eaf50b4 100644 --- a/2026/CVE-2026-41089.json +++ b/2026/CVE-2026-41089.json @@ -256,8 +256,8 @@ "description": "Scan Windows Domain Controllers for CVE-2026-41089 to detect unauthenticated remote code execution vulnerabilities in the Netlogon service.", "fork": false, "created_at": "2026-07-22T15:40:18Z", - "updated_at": "2026-08-06T00:12:10Z", - "pushed_at": "2026-08-06T00:12:05Z", + "updated_at": "2026-08-06T06:28:38Z", + "pushed_at": "2026-08-06T06:27:22Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2026/CVE-2026-43499.json b/2026/CVE-2026-43499.json index 38e85e2e9f..21ddb21a54 100644 --- a/2026/CVE-2026-43499.json +++ b/2026/CVE-2026-43499.json @@ -348,10 +348,10 @@ "description": "GhostLock (CVE-2026-43499) kernel exploit for OnePlus devices with locked bootloader", "fork": false, "created_at": "2026-07-12T16:05:24Z", - "updated_at": "2026-08-06T00:10:35Z", + "updated_at": "2026-08-06T06:37:10Z", "pushed_at": "2026-08-05T07:22:51Z", - "stargazers_count": 199, - "watchers_count": 199, + "stargazers_count": 206, + "watchers_count": 206, "has_discussions": false, "forks_count": 44, "allow_forking": true, @@ -369,7 +369,7 @@ ], "visibility": "public", "forks": 44, - "watchers": 199, + "watchers": 206, "score": 0, "subscribers_count": 6 }, @@ -586,12 +586,12 @@ "description": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.", "fork": false, "created_at": "2026-07-14T14:21:27Z", - "updated_at": "2026-08-05T17:48:44Z", + "updated_at": "2026-08-06T02:31:23Z", "pushed_at": "2026-07-30T11:28:07Z", - "stargazers_count": 32, - "watchers_count": 32, + "stargazers_count": 33, + "watchers_count": 33, "has_discussions": false, - "forks_count": 10, + "forks_count": 11, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -599,8 +599,8 @@ "pull_request_creation_policy": "collaborators_only", "topics": [], "visibility": "public", - "forks": 10, - "watchers": 32, + "forks": 11, + "watchers": 33, "score": 0, "subscribers_count": 0 }, @@ -883,7 +883,7 @@ "description": "Standalone CVE-2026-43499 PoC for Galaxy S25 Ultra SM-S938N S938NKSUACZF1", "fork": false, "created_at": "2026-07-16T08:02:46Z", - "updated_at": "2026-08-04T11:00:33Z", + "updated_at": "2026-08-06T01:48:31Z", "pushed_at": "2026-07-17T14:41:41Z", "stargazers_count": 37, "watchers_count": 37, @@ -1081,12 +1081,12 @@ "description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499", "fork": false, "created_at": "2026-07-17T14:24:08Z", - "updated_at": "2026-08-05T23:58:51Z", - "pushed_at": "2026-08-05T14:41:06Z", - "stargazers_count": 629, - "watchers_count": 629, + "updated_at": "2026-08-06T06:48:45Z", + "pushed_at": "2026-08-06T06:44:54Z", + "stargazers_count": 640, + "watchers_count": 640, "has_discussions": false, - "forks_count": 90, + "forks_count": 92, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1094,8 +1094,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 90, - "watchers": 629, + "forks": 92, + "watchers": 640, "score": 0, "subscribers_count": 24 }, @@ -1147,12 +1147,12 @@ "description": "（CVE-2026-43499）内核漏洞利用程序，适用于未解锁 Bootloader 的一加设备。", "fork": false, "created_at": "2026-07-18T06:24:34Z", - "updated_at": "2026-08-05T14:28:46Z", + "updated_at": "2026-08-06T03:55:16Z", "pushed_at": "2026-07-19T08:28:49Z", - "stargazers_count": 36, - "watchers_count": 36, + "stargazers_count": 37, + "watchers_count": 37, "has_discussions": true, - "forks_count": 11, + "forks_count": 12, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1160,8 +1160,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 11, - "watchers": 36, + "forks": 12, + "watchers": 37, "score": 0, "subscribers_count": 0 }, @@ -2037,10 +2037,10 @@ "description": "CVE-2026-43499 for the Meta Quest", "fork": false, "created_at": "2026-08-02T00:53:02Z", - "updated_at": "2026-08-02T03:44:20Z", + "updated_at": "2026-08-06T02:38:08Z", "pushed_at": "2026-08-02T02:25:49Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 7, "allow_forking": true, @@ -2051,7 +2051,7 @@ "topics": [], "visibility": "public", "forks": 7, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, @@ -2103,12 +2103,12 @@ "description": "Jailbreak supported Google Pixel phones with CVE-2026-43499", "fork": false, "created_at": "2026-08-02T17:34:45Z", - "updated_at": "2026-08-05T23:22:22Z", + "updated_at": "2026-08-06T04:10:51Z", "pushed_at": "2026-08-05T10:11:39Z", - "stargazers_count": 94, - "watchers_count": 94, + "stargazers_count": 96, + "watchers_count": 96, "has_discussions": false, - "forks_count": 18, + "forks_count": 20, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -2116,8 +2116,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 18, - "watchers": 94, + "forks": 20, + "watchers": 96, "score": 0, "subscribers_count": 4 }, diff --git a/2026/CVE-2026-45585.json b/2026/CVE-2026-45585.json index 6cb1ac8a9c..78f25077a5 100644 --- a/2026/CVE-2026-45585.json +++ b/2026/CVE-2026-45585.json @@ -398,10 +398,10 @@ "description": "YellowKey BitLocker CVE-2026-45585 free open-source utility to extract, backup and view BitLocker recovery keys on Windows 10\/11. BitLocker bypass vulnerability tool, remediation and mitigation. Tom's Hardware coverage. Check TPM status, protector types, encryption state. Download YellowKey free, portable, no install needed.", "fork": false, "created_at": "2026-08-01T18:09:20Z", - "updated_at": "2026-08-06T00:45:57Z", + "updated_at": "2026-08-06T01:50:12Z", "pushed_at": "2026-08-01T19:13:03Z", - "stargazers_count": 42, - "watchers_count": 42, + "stargazers_count": 54, + "watchers_count": 54, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -433,7 +433,7 @@ ], "visibility": "public", "forks": 1, - "watchers": 42, + "watchers": 54, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-50343.json b/2026/CVE-2026-50343.json index 72bba85cab..591aed1e56 100644 --- a/2026/CVE-2026-50343.json +++ b/2026/CVE-2026-50343.json @@ -14,10 +14,10 @@ "description": "CVE-2026-50343 InstallService StaticPluginMap EoP - standard user to SYSTEM", "fork": false, "created_at": "2026-06-03T08:50:32Z", - "updated_at": "2026-08-05T23:10:16Z", + "updated_at": "2026-08-06T03:04:15Z", "pushed_at": "2026-07-16T10:14:52Z", - "stargazers_count": 45, - "watchers_count": 45, + "stargazers_count": 47, + "watchers_count": 47, "has_discussions": false, "forks_count": 12, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 12, - "watchers": 45, + "watchers": 47, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-57239.json b/2026/CVE-2026-57239.json index 528c33f4cf..9f439f6cfa 100644 --- a/2026/CVE-2026-57239.json +++ b/2026/CVE-2026-57239.json @@ -14,10 +14,10 @@ "description": "Proof of concept exploit for CVE-2026-3775\/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\\SYSTEM rights via the Foxit PDF Reader updater service.", "fork": false, "created_at": "2026-07-08T13:47:31Z", - "updated_at": "2026-08-04T05:38:41Z", + "updated_at": "2026-08-06T06:43:04Z", "pushed_at": "2026-07-27T07:52:49Z", - "stargazers_count": 14, - "watchers_count": 14, + "stargazers_count": 15, + "watchers_count": 15, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -32,7 +32,7 @@ ], "visibility": "public", "forks": 3, - "watchers": 14, + "watchers": 15, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-59774.json b/2026/CVE-2026-59774.json new file mode 100644 index 0000000000..bd181cec91 --- /dev/null +++ b/2026/CVE-2026-59774.json @@ -0,0 +1,35 @@ +[ + { + "id": 1324786027, + "name": "CVE-2026-59774_docker", + "full_name": "FlowerWitch\/CVE-2026-59774_docker", + "owner": { + "login": "FlowerWitch", + "id": 19641363, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/19641363?v=4", + "html_url": "https:\/\/github.com\/FlowerWitch", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/FlowerWitch\/CVE-2026-59774_docker", + "description": "CVE-2026-59774", + "fork": false, + "created_at": "2026-08-06T05:43:33Z", + "updated_at": "2026-08-06T06:45:41Z", + "pushed_at": "2026-08-06T06:44:15Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-60004.json b/2026/CVE-2026-60004.json index 8fee95d2a7..5dc0868e9d 100644 --- a/2026/CVE-2026-60004.json +++ b/2026/CVE-2026-60004.json @@ -113,12 +113,12 @@ "description": "CVE-2026-60004 Pre-Auth RCE Exploit — Gitea <= 1.27.0 diffpatch git hook injection (CVSS 9.8)", "fork": false, "created_at": "2026-08-03T07:48:39Z", - "updated_at": "2026-08-05T11:22:28Z", + "updated_at": "2026-08-06T04:30:26Z", "pushed_at": "2026-08-03T08:31:38Z", - "stargazers_count": 9, - "watchers_count": 9, + "stargazers_count": 10, + "watchers_count": 10, "has_discussions": false, - "forks_count": 3, + "forks_count": 4, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -137,8 +137,8 @@ "vulnerability" ], "visibility": "public", - "forks": 3, - "watchers": 9, + "forks": 4, + "watchers": 10, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-63030.json b/2026/CVE-2026-63030.json index e2e73e8f18..87a2ec1ab4 100644 --- a/2026/CVE-2026-63030.json +++ b/2026/CVE-2026-63030.json @@ -14,10 +14,10 @@ "description": "wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain", "fork": false, "created_at": "2026-07-17T20:18:33Z", - "updated_at": "2026-08-05T12:50:40Z", + "updated_at": "2026-08-06T02:25:16Z", "pushed_at": "2026-07-23T09:23:48Z", - "stargazers_count": 712, - "watchers_count": 712, + "stargazers_count": 713, + "watchers_count": 713, "has_discussions": false, "forks_count": 163, "allow_forking": true, @@ -32,7 +32,7 @@ ], "visibility": "public", "forks": 163, - "watchers": 712, + "watchers": 713, "score": 0, "subscribers_count": 3 }, @@ -2246,10 +2246,10 @@ "description": "WordPress CVE-2026-63030 and CVE-2026-60137 security tool for detecting exposure to the WP2Shell pre-authentication RCE chain.", "fork": false, "created_at": "2026-08-02T16:33:02Z", - "updated_at": "2026-08-04T13:32:38Z", + "updated_at": "2026-08-06T02:04:00Z", "pushed_at": "2026-08-04T09:36:29Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -2260,7 +2260,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-64531.json b/2026/CVE-2026-64531.json index 96ea4f3ab3..c491971bc3 100644 --- a/2026/CVE-2026-64531.json +++ b/2026/CVE-2026-64531.json @@ -14,8 +14,8 @@ "description": "Tracking OVSwrap (CVE-2026-64531), the Open vSwitch datapath netlink overflow", "fork": false, "created_at": "2026-07-29T05:15:24Z", - "updated_at": "2026-08-05T07:10:00Z", - "pushed_at": "2026-08-05T07:09:34Z", + "updated_at": "2026-08-06T05:17:22Z", + "pushed_at": "2026-08-06T05:17:05Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-64600.json b/2026/CVE-2026-64600.json index 0b6ade9544..01d21f9800 100644 --- a/2026/CVE-2026-64600.json +++ b/2026/CVE-2026-64600.json @@ -80,10 +80,10 @@ "description": "is an advanced security research framework designed to model, analyze, and demonstrate Local Privilege Escalation (LPE) mechanics associated with kernel-level race conditions and filesystem structure vulnerabilities (CVE-2026-64600 \/ RefluXFS)", "fork": false, "created_at": "2026-07-24T23:27:22Z", - "updated_at": "2026-07-28T11:46:34Z", + "updated_at": "2026-08-06T06:18:29Z", "pushed_at": "2026-07-24T23:29:23Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 0, + "watchers_count": 0, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -94,7 +94,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 0, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-65058.json b/2026/CVE-2026-65058.json new file mode 100644 index 0000000000..41b3d7ea39 --- /dev/null +++ b/2026/CVE-2026-65058.json @@ -0,0 +1,46 @@ +[ + { + "id": 1324753529, + "name": "trezor-cve-2026-65058", + "full_name": "iktok90-design\/trezor-cve-2026-65058", + "owner": { + "login": "iktok90-design", + "id": 312922209, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/312922209?v=4", + "html_url": "https:\/\/github.com\/iktok90-design", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/iktok90-design\/trezor-cve-2026-65058", + "description": "Security research: Trezor Safe calldata confirmation-binding bypass vulnerability analysis. Educational proof-of-concept for hardware wallet transaction display verification.", + "fork": false, + "created_at": "2026-08-06T04:57:58Z", + "updated_at": "2026-08-06T05:02:03Z", + "pushed_at": "2026-08-06T05:00:59Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "calldata", + "cryptography", + "cve", + "ethereum", + "firmware", + "hardware-wallet", + "poc", + "security-research", + "trezor", + "vulnerability" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-66066.json b/2026/CVE-2026-66066.json index a76b4a4bed..707ad0fb81 100644 --- a/2026/CVE-2026-66066.json +++ b/2026/CVE-2026-66066.json @@ -80,10 +80,10 @@ "description": null, "fork": false, "created_at": "2026-07-30T21:06:00Z", - "updated_at": "2026-08-05T19:42:01Z", + "updated_at": "2026-08-06T01:27:43Z", "pushed_at": "2026-07-31T15:27:43Z", - "stargazers_count": 22, - "watchers_count": 22, + "stargazers_count": 23, + "watchers_count": 23, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -94,7 +94,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 22, + "watchers": 23, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-69083.json b/2026/CVE-2026-69083.json index fb63080c65..cfa38b2ff2 100644 --- a/2026/CVE-2026-69083.json +++ b/2026/CVE-2026-69083.json @@ -19,7 +19,7 @@ "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 0, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-9198.json b/2026/CVE-2026-9198.json index b701fa3ed4..98c74af476 100644 --- a/2026/CVE-2026-9198.json +++ b/2026/CVE-2026-9198.json @@ -113,8 +113,8 @@ "description": null, "fork": false, "created_at": "2026-08-05T17:44:08Z", - "updated_at": "2026-08-05T19:23:25Z", - "pushed_at": "2026-08-05T18:45:22Z", + "updated_at": "2026-08-06T01:07:09Z", + "pushed_at": "2026-08-06T01:07:04Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/README.md b/README.md index 55afdb9776..8707cba17c 100644 --- a/README.md +++ b/README.md @@ -3083,6 +3083,7 @@ - [dinosn/CVE-2026-25243](https://github.com/dinosn/CVE-2026-25243) - [dinosn/CVE-2026-25243-debugfree](https://github.com/dinosn/CVE-2026-25243-debugfree) +- [sohail-saha-optiv/CVE-2026-25243](https://github.com/sohail-saha-optiv/CVE-2026-25243) ### CVE-2026-25250 - [TheMalwareGuardian/CVE-2026-25250](https://github.com/TheMalwareGuardian/CVE-2026-25250) @@ -3971,6 +3972,20 @@ - [HORKimhab/CVE-2026-34926](https://github.com/HORKimhab/CVE-2026-34926) +### CVE-2026-34980 (2026-04-03) + +OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, in a network-exposed cupsd with a shared target queue, an unauthorized client can send a Print-Job to that shared PostScript queue without authentication. The server accepts a page-border value supplied as textWithoutLanguage, preserves an embedded newline through option escaping and reparse, and then reparses the resulting second-line PPD: text as a trusted scheduler control record. A follow-up raw print job can therefore make the server execute an attacker-chosen existing binary such as /usr/bin/vim as lp. At time of publication, there are no publicly available patches. + + +- [HORKimhab/CVE-2026-34980](https://github.com/HORKimhab/CVE-2026-34980) + +### CVE-2026-34990 (2026-04-03) + +OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. In versions 2.4.16 and prior, a local unprivileged user can coerce cupsd into authenticating to an attacker-controlled localhost IPP service with a reusable Authorization: Local ... token. That token is enough to drive /admin/ requests on localhost, and the attacker can combine CUPS-Create-Local-Printer with printer-is-shared=true to persist a file:///... queue even though the normal FileDevice policy rejects such URIs. Printing to that queue gives an arbitrary root file overwrite; the PoC below uses that primitive to drop a sudoers fragment and demonstrate root command execution. At time of publication, there are no publicly available patches. + + +- [HORKimhab/CVE-2026-34990](https://github.com/HORKimhab/CVE-2026-34990) + ### CVE-2026-35029 (2026-04-06) LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.0, the /config/update endpoint does not enforce admin role authorization. A user who is already authenticated into the platform can then use this endpoint to modify proxy configuration and environment variables, register custom pass-through endpoint handlers pointing to attacker-controlled Python code, achieving remote code execution, read arbitrary server files by setting UI_LOGO_PATH and fetching via /get_image, and take over other privileged accounts by overwriting UI_USERNAME and UI_PASSWORD environment variables. Fixed in v1.83.0. @@ -7245,6 +7260,9 @@ - [cybertechajju/CVE-2026-59734-POC](https://github.com/cybertechajju/CVE-2026-59734-POC) +### CVE-2026-59774 +- [FlowerWitch/CVE-2026-59774_docker](https://github.com/FlowerWitch/CVE-2026-59774_docker) + ### CVE-2026-59827 (2026-07-09) Metabase is an open-source business intelligence and embedded analytics tool. Prior to 1.58.15, 1.59.12, 1.60.6.3, and 1.61.1.4, Metabase instances with an H2 database connection, including the default sample database, deserialize arbitrary Java objects returned in H2 native query result columns of type OTHER without validation, allowing an authenticated user who can run native H2 queries to execute code on the Metabase server. This issue is fixed in versions 1.58.15, 1.59.12, 1.60.6.3, and 1.61.1.4. @@ -7507,6 +7525,13 @@ - [zer0dayf/CVE-2026-65008](https://github.com/zer0dayf/CVE-2026-65008) +### CVE-2026-65058 (2026-07-21) + +Trezor Safe 3, Safe 5, and Safe 7 firmware contains a confirmation-binding flaw in the Ethereum sign_tx / sign_tx_eip1559 flow. For contract interactions, the device confirms only the initial calldata chunk while the signature commits to the full streamed calldata. An attacker could present calldata to a victim then supply a different tail that changes the signed transaction. Fixed in 70c9b0c. + + +- [iktok90-design/trezor-cve-2026-65058](https://github.com/iktok90-design/trezor-cve-2026-65058) + ### CVE-2026-65321 (2026-08-02) PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticated attackers to inject arbitrary SQL by exploiting improper quote-escaping in DefaultParameterFormatter.format(), which routes DELETE and CTAS statements to the _escape_hive function that backslash-escapes single quotes rather than doubling them. Because Athena and Trino do not treat backslashes as escape characters inside string literals, attacker-supplied input such as a single quote followed by SQL syntax causes the parser to terminate the string literal prematurely, enabling data exfiltration via UNION SELECT, execution of destructive statements, and attacker-controlled CTAS destination and content. @@ -11755,7 +11780,7 @@ - [La3B0z/CVE-2025-24813-POC](https://github.com/La3B0z/CVE-2025-24813-POC) - [Heimd411/CVE-2025-24813-noPoC](https://github.com/Heimd411/CVE-2025-24813-noPoC) - [horsehacks/CVE-2025-24813-checker](https://github.com/horsehacks/CVE-2025-24813-checker) -- [f8l124/CVE-2025-24813-POC](https://github.com/f8l124/CVE-2025-24813-POC) +- [NamelessSaint8/CVE-2025-24813-POC](https://github.com/NamelessSaint8/CVE-2025-24813-POC) - [Franconyu/Poc_for_CVE-2025-24813](https://github.com/Franconyu/Poc_for_CVE-2025-24813) - [cchopin/CVE-Arsenal-Lab](https://github.com/cchopin/CVE-Arsenal-Lab) - [Mattb709/CVE-2025-24813-PoC-Apache-Tomcat-RCE](https://github.com/Mattb709/CVE-2025-24813-PoC-Apache-Tomcat-RCE) @@ -20522,6 +20547,7 @@ - [Clarissss/osTicketFileReadIntoRCE](https://github.com/Clarissss/osTicketFileReadIntoRCE) - [rcribelar-nucleus/my-cool-demo-php-code](https://github.com/rcribelar-nucleus/my-cool-demo-php-code) - [whyuhurtz/wongpress](https://github.com/whyuhurtz/wongpress) +- [HORKimhab/CVE-2022-31626-CVE-2024-2961-CVE-2019-6977](https://github.com/HORKimhab/CVE-2022-31626-CVE-2024-2961-CVE-2019-6977) ### CVE-2024-2997 (2024-03-27) @@ -30039,7 +30065,6 @@ - [RandomRobbieBF/CVE-2024-54369](https://github.com/RandomRobbieBF/CVE-2024-54369) -- [Nxploited/CVE-2024-54369-PoC](https://github.com/Nxploited/CVE-2024-54369-PoC) ### CVE-2024-54378 (2024-12-16) @@ -71277,7 +71302,6 @@ - [nicoleman0/CVE-2016-6210-OpenSSHd-7.2p2](https://github.com/nicoleman0/CVE-2016-6210-OpenSSHd-7.2p2) - [KiPhuong/cve-2016-6210](https://github.com/KiPhuong/cve-2016-6210) - [Alisha-chaudhary/ssh-enum](https://github.com/Alisha-chaudhary/ssh-enum) -- [serexp/poc-CVE20166210](https://github.com/serexp/poc-CVE20166210) ### CVE-2016-6271 (2017-01-18)