nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/11/07 14:03:11

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-11-07 23:03:11 +09:00
1 parent 02c663045c
commit 93173b59a6
61 files changed
+1201 -320
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2017/CVE-2017-10271.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2017-10271 WEBLOGIC RCE (TESTED)",
"fork": false,
"created_at": "2017-12-23T13:04:23Z",
"updated_at": "2025-05-15T10:42:02Z",
"updated_at": "2026-11-07T11:07:04Z",
"pushed_at": "2017-12-23T13:12:06Z",
"stargazers_count": 39,
"watchers_count": 39,
"stargazers_count": 38,
"watchers_count": 38,
"has_discussions": false,
"forks_count": 25,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 25,
"watchers": 39,
"watchers": 38,
"score": 0,
"subscribers_count": 2
},
2020/CVE-2020-13927.json
+1 -1
View File
@@ -15,7 +15,7 @@
"fork": false,
"created_at": "2026-07-07T23:03:12Z",
"updated_at": "2026-10-21T17:13:18Z",
"pushed_at": "2026-11-06T11:07:42Z",
"pushed_at": "2026-11-07T10:27:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2020/CVE-2020-35489.json
+33
View File
@@ -147,5 +147,38 @@
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1449333984,
"name": "SOC-wordpress-compromise-report",
"full_name": "elabod1\/SOC-wordpress-compromise-report",
"owner": {
"login": "elabod1",
"id": 152025059,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/152025059?v=4",
"html_url": "https:\/\/github.com\/elabod1",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/elabod1\/SOC-wordpress-compromise-report",
"description": "Incident report: WordPress compromise via Simple File List RCE (CVE-2020-35489)",
"fork": false,
"created_at": "2026-11-07T12:25:18Z",
"updated_at": "2026-11-07T12:33:42Z",
"pushed_at": "2026-11-07T12:33:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2021/CVE-2021-44228.json
+1 -1
View File
@@ -15033,7 +15033,7 @@
"fork": false,
"created_at": "2026-06-23T18:32:28Z",
"updated_at": "2026-10-21T17:13:11Z",
"pushed_at": "2026-11-06T10:52:14Z",
"pushed_at": "2026-11-07T10:07:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2022/CVE-2022-22063.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Security issue in the hypervisor firmware of some older Qualcomm chipsets",
"fork": false,
"created_at": "2022-12-27T19:48:30Z",
"updated_at": "2026-09-09T17:40:23Z",
"updated_at": "2026-11-07T11:37:13Z",
"pushed_at": "2022-12-27T20:32:37Z",
"stargazers_count": 46,
"watchers_count": 46,
"stargazers_count": 47,
"watchers_count": 47,
"has_discussions": true,
"forks_count": 4,
"allow_forking": true,
@@ -37,7 +37,7 @@
],
"visibility": "public",
"forks": 4,
"watchers": 46,
"watchers": 47,
"score": 0,
"subscribers_count": 3
}
2022/CVE-2022-36551.json
+1 -1
View File
@@ -15,7 +15,7 @@
"fork": false,
"created_at": "2026-10-07T15:40:44Z",
"updated_at": "2026-10-21T16:39:07Z",
"pushed_at": "2026-11-06T11:00:45Z",
"pushed_at": "2026-11-07T10:21:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2022/CVE-2022-38694.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 649,
"watchers_count": 649,
"has_discussions": true,
"forks_count": 91,
"forks_count": 92,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -30,7 +30,7 @@
"unisoc"
],
"visibility": "public",
"forks": 91,
"forks": 92,
"watchers": 649,
"score": 0,
"subscribers_count": 14
2023/CVE-2023-0297.json
+1 -1
View File
@@ -213,7 +213,7 @@
"fork": false,
"created_at": "2026-10-07T15:40:37Z",
"updated_at": "2026-10-21T16:39:04Z",
"pushed_at": "2026-11-06T10:57:26Z",
"pushed_at": "2026-11-07T10:16:19Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-22203.json
+1 -1
View File
@@ -15,7 +15,7 @@
"fork": false,
"created_at": "2026-10-07T15:40:41Z",
"updated_at": "2026-10-21T16:39:02Z",
"pushed_at": "2026-11-06T10:50:30Z",
"pushed_at": "2026-11-07T10:03:41Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-24919.json
+33
View File
@@ -1910,5 +1910,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1449298616,
"name": "CVE-2024-24919-PoC",
"full_name": "khdertaysh1\/CVE-2024-24919-PoC",
"owner": {
"login": "khdertaysh1",
"id": 317481704,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/317481704?v=4",
"html_url": "https:\/\/github.com\/khdertaysh1",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/khdertaysh1\/CVE-2024-24919-PoC",
"description": null,
"fork": false,
"created_at": "2026-11-07T11:36:03Z",
"updated_at": "2026-11-07T11:44:39Z",
"pushed_at": "2026-11-07T11:44:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2024/CVE-2024-31317.json
+4 -4
View File
@@ -179,10 +179,10 @@
"description": "Quick tool for utilizing CVE-2024-31317 on Android",
"fork": false,
"created_at": "2025-10-20T13:47:09Z",
"updated_at": "2026-10-25T05:19:41Z",
"updated_at": "2026-11-07T08:31:39Z",
"pushed_at": "2026-02-16T10:22:42Z",
"stargazers_count": 93,
"watchers_count": 93,
"stargazers_count": 94,
"watchers_count": 94,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -193,7 +193,7 @@
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 93,
"watchers": 94,
"score": 0,
"subscribers_count": 1
},
2024/CVE-2024-34102.json
+42
View File
@@ -793,5 +793,47 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1449192379,
"name": "module-cosmicsting-patch",
"full_name": "bigcartenergy\/module-cosmicsting-patch",
"owner": {
"login": "bigcartenergy",
"id": 343177696,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/343177696?v=4",
"html_url": "https:\/\/github.com\/bigcartenergy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/bigcartenergy\/module-cosmicsting-patch",
"description": "Free security patch for Magento Open Source and Mage-OS by Big Cart Energy: closes CVE-2024-34102 (CosmicSting) on the Magento 2.3 and 2.4 releases that have no official fix, as one plugin on the Web API input processor that applies the rule of Adobe's fix. No core file is modified.",
"fork": false,
"created_at": "2026-11-07T09:03:56Z",
"updated_at": "2026-11-07T09:07:38Z",
"pushed_at": "2026-11-07T09:48:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"adobe-commerce",
"composer-package",
"cosmicsting",
"cve-2024-34102",
"magento-open-source",
"magento2",
"magento2-module",
"security-patch"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2024/CVE-2024-45337.json
+1 -1
View File
@@ -157,7 +157,7 @@
"fork": false,
"created_at": "2026-07-07T20:45:27Z",
"updated_at": "2026-10-21T16:58:51Z",
"pushed_at": "2026-11-06T11:24:40Z",
"pushed_at": "2026-11-07T10:37:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-45846.json
+1 -1
View File
@@ -15,7 +15,7 @@
"fork": false,
"created_at": "2026-10-07T15:51:48Z",
"updated_at": "2026-10-21T16:39:07Z",
"pushed_at": "2026-11-06T10:57:36Z",
"pushed_at": "2026-11-07T10:16:10Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-55947.json
+1 -1
View File
@@ -15,7 +15,7 @@
"fork": false,
"created_at": "2026-06-23T18:32:13Z",
"updated_at": "2026-10-21T17:13:09Z",
"pushed_at": "2026-11-06T10:49:16Z",
"pushed_at": "2026-11-07T10:02:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-9264.json
+1 -1
View File
@@ -402,7 +402,7 @@
"fork": false,
"created_at": "2026-07-07T23:02:34Z",
"updated_at": "2026-10-21T16:58:50Z",
"pushed_at": "2026-11-06T11:34:35Z",
"pushed_at": "2026-11-07T10:45:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-31710.json
+33
View File
@@ -31,5 +31,38 @@
"watchers": 141,
"score": 0,
"subscribers_count": 2
},
{
"id": 1449382234,
"name": "360-kidwatch-11X-W370-Ghostroot",
"full_name": "Little-yellow-duck1206\/360-kidwatch-11X-W370-Ghostroot",
"owner": {
"login": "Little-yellow-duck1206",
"id": 309855370,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/309855370?v=4",
"html_url": "https:\/\/github.com\/Little-yellow-duck1206",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Little-yellow-duck1206\/360-kidwatch-11X-W370-Ghostroot",
"description": "A stealthy, file-based Local Privilege Escalation (LPE) PoC for 360 11X W370 (Unisoc SC8541E, Android 8.1) exploiting CVE-2025-31710. No PC required. For research only.",
"fork": false,
"created_at": "2026-11-07T13:28:19Z",
"updated_at": "2026-11-07T13:34:41Z",
"pushed_at": "2026-11-07T13:34:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-50460.json
+1 -1
View File
@@ -48,7 +48,7 @@
"fork": false,
"created_at": "2026-10-07T15:40:34Z",
"updated_at": "2026-10-21T16:39:02Z",
"pushed_at": "2026-11-06T10:47:51Z",
"pushed_at": "2026-11-07T10:01:29Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-54236.json
+42
View File
@@ -249,5 +249,47 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1449192433,
"name": "module-sessionreaper-patch",
"full_name": "bigcartenergy\/module-sessionreaper-patch",
"owner": {
"login": "bigcartenergy",
"id": 343177696,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/343177696?v=4",
"html_url": "https:\/\/github.com\/bigcartenergy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/bigcartenergy\/module-sessionreaper-patch",
"description": "Free security patch for Magento Open Source and Mage-OS by Big Cart Energy: closes CVE-2025-54236 (SessionReaper) on the Magento 2.3 and 2.4 releases that have no official fix, as one plugin on the Web API input processor that applies the allow-list of Adobe's fix. No core file is modified.",
"fork": false,
"created_at": "2026-11-07T09:04:01Z",
"updated_at": "2026-11-07T09:07:42Z",
"pushed_at": "2026-11-07T09:48:48Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"adobe-commerce",
"composer-package",
"cve-2025-54236",
"magento-open-source",
"magento2",
"magento2-module",
"security-patch",
"sessionreaper"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-59528.json
+2 -2
View File
@@ -392,8 +392,8 @@
"description": "poc and yara rules",
"fork": false,
"created_at": "2026-08-28T12:36:55Z",
"updated_at": "2026-10-24T18:50:10Z",
"pushed_at": "2026-10-24T18:50:06Z",
"updated_at": "2026-11-07T11:08:00Z",
"pushed_at": "2026-11-07T11:07:56Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-61622.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 1069122189,
"name": "cve_2025_61622_poc",
"full_name": "fa1consec\/cve_2025_61622_poc",
"owner": {
"login": "fa1consec",
"id": 118619230,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/118619230?v=4",
"html_url": "https:\/\/github.com\/fa1consec",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/fa1consec\/cve_2025_61622_poc",
"description": "This PoC demonstrates the Remote Code Execution (RCE) vulnerability in Apache Pyfory (versions 0.12.0-0.12.2 and legacy PyFury 0.1.0-0.10.3) due to insecure pickle fallback deserialization (CVE-2025-61622).",
"fork": false,
"created_at": "2025-10-03T12:44:16Z",
"updated_at": "2025-11-16T15:08:56Z",
"pushed_at": "2025-10-03T16:30:18Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 4,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-8110.json
+1 -1
View File
@@ -444,7 +444,7 @@
"fork": false,
"created_at": "2026-06-23T18:32:13Z",
"updated_at": "2026-10-21T17:13:09Z",
"pushed_at": "2026-11-06T10:49:16Z",
"pushed_at": "2026-11-07T10:02:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-0073.json
+4 -4
View File
@@ -118,10 +118,10 @@
"description": "CVE-2026-0073 — Android ADB daemon (adbd) TLS authentication bypass via EVP_PKEY_cmp type confusion. Gain unauthorized shell access over WiFi using EC\/Ed25519 key mismatch. PoC exploit for Android 14+.",
"fork": false,
"created_at": "2026-05-06T23:11:23Z",
"updated_at": "2026-11-01T04:32:59Z",
"updated_at": "2026-11-07T12:33:00Z",
"pushed_at": "2026-05-07T11:15:25Z",
"stargazers_count": 23,
"watchers_count": 23,
"stargazers_count": 24,
"watchers_count": 24,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -142,7 +142,7 @@
],
"visibility": "public",
"forks": 6,
"watchers": 23,
"watchers": 24,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-102578.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Proof of concept for CVE-2026-102578, a Moodle question-bank SQL injection",
"fork": false,
"created_at": "2026-10-20T10:01:19Z",
"updated_at": "2026-11-06T11:43:34Z",
"updated_at": "2026-11-07T08:16:54Z",
"pushed_at": "2026-10-20T12:30:12Z",
"stargazers_count": 9,
"watchers_count": 9,
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -34,7 +34,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 9,
"watchers": 10,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-109618.json
+40 -40
View File
@@ -146,10 +146,10 @@
"description": "Offline, reproducible lab to safely analyse an untrusted PoC for CVE-2026-109618\/109619 and build detection rules. No exploit included; bring your own sample.",
"fork": false,
"created_at": "2026-10-21T03:36:08Z",
"updated_at": "2026-10-30T16:27:06Z",
"updated_at": "2026-11-07T09:56:15Z",
"pushed_at": "2026-10-21T15:23:02Z",
"stargazers_count": 32,
"watchers_count": 32,
"stargazers_count": 33,
"watchers_count": 33,
"has_discussions": false,
"forks_count": 12,
"allow_forking": true,
@@ -160,7 +160,7 @@
"topics": [],
"visibility": "public",
"forks": 12,
"watchers": 32,
"watchers": 33,
"score": 0,
"subscribers_count": 0
},
@@ -672,12 +672,12 @@
"description": "CVE-2026-109618\/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.",
"fork": false,
"created_at": "2026-10-21T07:55:16Z",
"updated_at": "2026-11-06T17:15:36Z",
"updated_at": "2026-11-07T09:25:37Z",
"pushed_at": "2026-10-28T23:21:57Z",
"stargazers_count": 1945,
"watchers_count": 1945,
"stargazers_count": 1946,
"watchers_count": 1946,
"has_discussions": false,
"forks_count": 654,
"forks_count": 653,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -700,8 +700,8 @@
"wordpress-security"
],
"visibility": "public",
"forks": 654,
"watchers": 1945,
"forks": 653,
"watchers": 1946,
"score": 0,
"subscribers_count": 8
},
@@ -1950,10 +1950,10 @@
"description": "🐘 php2shell（CVE-2026-109618 \/ CVE-2026-109619）复现靶场 — session.upload_progress 文件名注入 + LFI → RCE，Docker 一键启动，附中文原理分析与 PoC",
"fork": false,
"created_at": "2026-10-21T12:36:55Z",
"updated_at": "2026-11-07T07:32:30Z",
"updated_at": "2026-11-07T09:37:02Z",
"pushed_at": "2026-10-21T14:38:46Z",
"stargazers_count": 34,
"watchers_count": 34,
"stargazers_count": 35,
"watchers_count": 35,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -1976,7 +1976,7 @@
],
"visibility": "public",
"forks": 6,
"watchers": 34,
"watchers": 35,
"score": 0,
"subscribers_count": 0
},
@@ -7633,10 +7633,10 @@
"description": "CVE-2026-109618 \/ CVE-2026-109619 pre-auth RCE in PHP session.upload_progress (mod_php): version-aware exploit profiles, Docker labs, heap calibration and detection guidance.",
"fork": false,
"created_at": "2026-10-21T22:53:01Z",
"updated_at": "2026-11-06T14:52:30Z",
"updated_at": "2026-11-07T09:41:43Z",
"pushed_at": "2026-10-30T16:04:28Z",
"stargazers_count": 285,
"watchers_count": 285,
"stargazers_count": 287,
"watchers_count": 287,
"has_discussions": false,
"forks_count": 78,
"allow_forking": true,
@@ -7668,7 +7668,7 @@
],
"visibility": "public",
"forks": 78,
"watchers": 285,
"watchers": 287,
"score": 0,
"subscribers_count": 2
},
@@ -9408,10 +9408,10 @@
"description": "High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)",
"fork": false,
"created_at": "2026-10-22T03:53:20Z",
"updated_at": "2026-11-06T12:30:58Z",
"updated_at": "2026-11-07T12:41:10Z",
"pushed_at": "2026-10-24T03:40:18Z",
"stargazers_count": 988,
"watchers_count": 988,
"stargazers_count": 989,
"watchers_count": 989,
"has_discussions": false,
"forks_count": 145,
"allow_forking": true,
@@ -9422,7 +9422,7 @@
"topics": [],
"visibility": "public",
"forks": 145,
"watchers": 988,
"watchers": 989,
"score": 0,
"subscribers_count": 11
},
@@ -20952,8 +20952,8 @@
"description": "Live tracker: how fast is the internet patching PHP against PHP2Shell (CVE-2026-109618\/-109619)? Hourly, anonymized.",
"fork": false,
"created_at": "2026-10-23T22:00:13Z",
"updated_at": "2026-11-06T13:20:27Z",
"pushed_at": "2026-11-06T13:20:23Z",
"updated_at": "2026-11-07T11:59:31Z",
"pushed_at": "2026-11-07T11:59:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -21754,8 +21754,8 @@
"description": "Detection and response package for php2shell (CVE-2026-109618 \/ CVE-2026-109619): Suricata, Zeek, YARA, Sigma, ModSecurity rules, hunting queries, SOC triage, patch matrix. No exploit code.",
"fork": false,
"created_at": "2026-10-24T13:28:54Z",
"updated_at": "2026-11-06T14:56:38Z",
"pushed_at": "2026-11-06T14:56:33Z",
"updated_at": "2026-11-07T12:55:57Z",
"pushed_at": "2026-11-07T12:55:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -22639,8 +22639,8 @@
"description": "Curated IoCs, detection engineering rules, and automated threat intel feeds for PHP2Shell (CVE-2026-109618 & CVE-2026-109619).",
"fork": false,
"created_at": "2026-10-25T07:40:38Z",
"updated_at": "2026-11-05T02:59:25Z",
"pushed_at": "2026-11-02T15:22:34Z",
"updated_at": "2026-11-07T12:46:35Z",
"pushed_at": "2026-11-07T12:46:31Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
@@ -26372,8 +26372,8 @@
"description": "php2shell-CVE-2026-109618\/109619 chain",
"fork": false,
"created_at": "2026-10-31T08:11:56Z",
"updated_at": "2026-11-06T14:16:33Z",
"pushed_at": "2026-11-06T14:16:29Z",
"updated_at": "2026-11-07T08:11:49Z",
"pushed_at": "2026-11-07T08:11:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -26405,10 +26405,10 @@
"description": "PHP 8.1.34 CLI\/FPM Docker image with pinned backports for CVE-2026-109618 and CVE-2026-109619, plus updated native libraries. Documented builds, source and patch checksums, focused regression tests, Trivy reports, and non-root defaults. Linux amd64. UNVERIFIED development preview; independent mysqlnd review remains incomplete.",
"fork": false,
"created_at": "2026-10-31T08:47:24Z",
"updated_at": "2026-11-06T05:20:25Z",
"updated_at": "2026-11-07T11:26:48Z",
"pushed_at": "2026-10-31T11:44:51Z",
"stargazers_count": 10,
"watchers_count": 10,
"stargazers_count": 14,
"watchers_count": 14,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -26431,7 +26431,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 10,
"watchers": 14,
"score": 0,
"subscribers_count": 0
},
@@ -26483,10 +26483,10 @@
"description": "PHP 7.4.33 CLI\/FPM Docker image with pinned backports for CVE-2026-109618 and CVE-2026-109619, plus updated native libraries. Documented builds, source and patch checksums, focused regression tests, Trivy reports, and non-root defaults. Linux amd64. UNVERIFIED development preview; independent mysqlnd review remains incomplete.",
"fork": false,
"created_at": "2026-10-31T10:22:33Z",
"updated_at": "2026-11-06T05:20:24Z",
"updated_at": "2026-11-07T11:26:47Z",
"pushed_at": "2026-10-31T13:14:59Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -26510,7 +26510,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 7,
"watchers": 11,
"score": 0,
"subscribers_count": 0
},
@@ -26836,8 +26836,8 @@
"description": "POC of CVE-2026-109618(PHP2SHELL)",
"fork": false,
"created_at": "2026-11-01T16:22:24Z",
"updated_at": "2026-11-02T06:18:35Z",
"pushed_at": "2026-11-02T06:18:31Z",
"updated_at": "2026-11-07T10:27:43Z",
"pushed_at": "2026-11-07T10:27:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-111497.json
+2 -2
View File
@@ -3136,8 +3136,8 @@
"description": "Säkerhetsvägledning för GIS-miljöer om Broccoli2Shell (CVE-2026-111497).",
"fork": false,
"created_at": "2026-11-04T18:19:50Z",
"updated_at": "2026-11-06T20:49:49Z",
"pushed_at": "2026-11-06T20:49:45Z",
"updated_at": "2026-11-07T13:23:07Z",
"pushed_at": "2026-11-07T13:23:03Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-112222.json
+47
View File
@@ -0,0 +1,47 @@
[
{
"id": 1449337408,
"name": "CVE-2026-112222",
"full_name": "Mor-Golan\/CVE-2026-112222",
"owner": {
"login": "Mor-Golan",
"id": 297464417,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/297464417?v=4",
"html_url": "https:\/\/github.com\/Mor-Golan",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Mor-Golan\/CVE-2026-112222",
"description": "CVE-2026-112222: Broken Access Control in Surfer WordPress Plugin. PoC by Mor Golan.",
"fork": false,
"created_at": "2026-11-07T12:30:00Z",
"updated_at": "2026-11-07T12:53:40Z",
"pushed_at": "2026-11-07T12:30:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"broken-access-control",
"bug-bounty",
"cve",
"cve-2026-112222",
"exploit",
"penetration-testing",
"poc",
"red-team",
"vulnerability-research",
"wordpress",
"wordpress-plugin"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-112705.json
+6 -6
View File
@@ -47,12 +47,12 @@
"description": "PoC & panic evidence for CVE-2026-112705: AppleAVE2 kernel OOB write on iOS 27.0.1 (fixed in 27.2) via VideoToolbox NumberOfTemporalLayers. Independent reproduction; original discovery by Calif \/ Chollima team.",
"fork": false,
"created_at": "2026-10-30T09:29:03Z",
"updated_at": "2026-11-06T00:39:58Z",
"updated_at": "2026-11-07T13:25:03Z",
"pushed_at": "2026-10-30T10:06:16Z",
"stargazers_count": 55,
"watchers_count": 55,
"stargazers_count": 58,
"watchers_count": 58,
"has_discussions": false,
"forks_count": 11,
"forks_count": 12,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,8 +60,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 11,
"watchers": 55,
"forks": 12,
"watchers": 58,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-112869.json
+47
View File
@@ -0,0 +1,47 @@
[
{
"id": 1449337535,
"name": "CVE-2026-112869",
"full_name": "Mor-Golan\/CVE-2026-112869",
"owner": {
"login": "Mor-Golan",
"id": 297464417,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/297464417?v=4",
"html_url": "https:\/\/github.com\/Mor-Golan",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Mor-Golan\/CVE-2026-112869",
"description": "CVE-2026-112869: Unauthenticated Cross Site Scripting (XSS) in We're Open! WordPress Plugin. PoC by Mor Golan.",
"fork": false,
"created_at": "2026-11-07T12:30:09Z",
"updated_at": "2026-11-07T12:53:41Z",
"pushed_at": "2026-11-07T12:30:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"bug-bounty",
"cve",
"cve-2026-112869",
"exploit",
"penetration-testing",
"poc",
"red-team",
"vulnerability-research",
"wordpress",
"wordpress-plugin",
"xss"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-115560.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "PHP Session upload progress RCE - CVE-2026-115560",
"fork": false,
"created_at": "2026-10-23T17:05:25Z",
"updated_at": "2026-11-07T03:30:04Z",
"updated_at": "2026-11-07T13:44:43Z",
"pushed_at": "2026-10-24T19:54:15Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-115596.json
+47
View File
@@ -0,0 +1,47 @@
[
{
"id": 1449337645,
"name": "CVE-2026-115596",
"full_name": "Mor-Golan\/CVE-2026-115596",
"owner": {
"login": "Mor-Golan",
"id": 297464417,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/297464417?v=4",
"html_url": "https:\/\/github.com\/Mor-Golan",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Mor-Golan\/CVE-2026-115596",
"description": "CVE-2026-115596: Unauthenticated Cross Site Scripting (XSS) in eCommerce Product Catalog WordPress Plugin. PoC by Mor Golan.",
"fork": false,
"created_at": "2026-11-07T12:30:18Z",
"updated_at": "2026-11-07T12:53:43Z",
"pushed_at": "2026-11-07T12:30:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"bug-bounty",
"cve",
"cve-2026-115596",
"exploit",
"penetration-testing",
"poc",
"red-team",
"vulnerability-research",
"wordpress",
"wordpress-plugin",
"xss"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-116512.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "Exploit for CVE-2026-116512 - weDevs Project Manager <= 4.1.1 Unauthenticated RCE. For educational and authorized security testing only.",
"fork": false,
"created_at": "2026-11-01T21:02:29Z",
"updated_at": "2026-11-05T10:53:44Z",
"updated_at": "2026-11-07T13:52:37Z",
"pushed_at": "2026-11-05T10:53:38Z",
"stargazers_count": 5,
"watchers_count": 5,
2026/CVE-2026-116606.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-11-03T19:20:25Z",
"updated_at": "2026-11-06T16:07:09Z",
"updated_at": "2026-11-07T09:59:25Z",
"pushed_at": "2026-11-03T19:26:40Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-119977.json
+4 -4
View File
@@ -177,10 +177,10 @@
"description": "CVE-2026-119977 – WordPress Core Upgrade-Window RCE (CVSS 8.1) | Red\/Blue Team Toolkit. Predictable staging dir takeover, wp-config.php promotion, Bait MySQL proof, WAF origin discovery, rate-limited race oracle, admin shell deploy, version triage. Async, CI-tested. Only ethical & authorized use, stay legal.",
"fork": false,
"created_at": "2026-11-05T16:40:50Z",
"updated_at": "2026-11-05T18:04:07Z",
"updated_at": "2026-11-07T10:09:42Z",
"pushed_at": "2026-11-05T17:01:25Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -206,7 +206,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-122675.json
+47
View File
@@ -0,0 +1,47 @@
[
{
"id": 1449337743,
"name": "CVE-2026-122675",
"full_name": "Mor-Golan\/CVE-2026-122675",
"owner": {
"login": "Mor-Golan",
"id": 297464417,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/297464417?v=4",
"html_url": "https:\/\/github.com\/Mor-Golan",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Mor-Golan\/CVE-2026-122675",
"description": "CVE-2026-122675: Cross Site Request Forgery (CSRF) in Wp Social WordPress Plugin. PoC by Mor Golan.",
"fork": false,
"created_at": "2026-11-07T12:30:27Z",
"updated_at": "2026-11-07T12:53:44Z",
"pushed_at": "2026-11-07T12:30:32Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"bug-bounty",
"csrf",
"cve",
"cve-2026-122675",
"exploit",
"penetration-testing",
"poc",
"red-team",
"vulnerability-research",
"wordpress",
"wordpress-plugin"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-123158.json
+4 -4
View File
@@ -197,10 +197,10 @@
"description": "CVE-2026-123158 SSHole — OpenSSH authentication bypass via musl crypt() overflow on Alpine Linux (Exploit PoC)",
"fork": false,
"created_at": "2026-11-05T22:51:12Z",
"updated_at": "2026-11-07T05:20:47Z",
"updated_at": "2026-11-07T13:59:53Z",
"pushed_at": "2026-11-06T05:48:20Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -211,7 +211,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-15409.json
+2 -2
View File
@@ -146,8 +146,8 @@
"description": "CVE-2026-15409\/15410 SonicWall SMA1000 multi-exploit Framework - SSRF→Erlang RPC→RCE→root privesc. Features: --detect safe check, --exec, --read-file, --privesc, --rpc, interactive shell, batch threading, file write, ws-url override, pipe support. KEV listed CVSS 10.0 actively exploited. Authorized testing only. Use Ethically, Stay Legal. ",
"fork": false,
"created_at": "2026-07-17T17:30:02Z",
"updated_at": "2026-10-13T16:08:42Z",
"pushed_at": "2026-09-29T13:26:27Z",
"updated_at": "2026-11-07T12:17:45Z",
"pushed_at": "2026-11-07T12:17:41Z",
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
2026/CVE-2026-19868.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1449305327,
"name": "CVE-2026-19868",
"full_name": "EXEcution-py\/CVE-2026-19868",
"owner": {
"login": "EXEcution-py",
"id": 277331196,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/277331196?v=4",
"html_url": "https:\/\/github.com\/EXEcution-py",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/EXEcution-py\/CVE-2026-19868",
"description": "SonicWall SonicOS SSLVPN SAML \/ MFA bypass (Gen7 \/ Gen8)",
"fork": false,
"created_at": "2026-11-07T11:45:30Z",
"updated_at": "2026-11-07T11:55:34Z",
"pushed_at": "2026-11-07T11:55:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-24332.json
-33
View File
@@ -71,38 +71,5 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1427602046,
"name": "invisible-detector",
"full_name": "LinkMakesMods\/invisible-detector",
"owner": {
"login": "LinkMakesMods",
"id": 334673515,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/334673515?v=4",
"html_url": "https:\/\/github.com\/LinkMakesMods",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/LinkMakesMods\/invisible-detector",
"description": "An actual use of the discord exploit CVE-2026-24332.",
"fork": false,
"created_at": "2026-10-20T21:53:53Z",
"updated_at": "2026-10-21T20:15:07Z",
"pushed_at": "2026-10-21T20:15:03Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-39732.json
+47
View File
@@ -0,0 +1,47 @@
[
{
"id": 1449337855,
"name": "CVE-2026-39732",
"full_name": "Mor-Golan\/CVE-2026-39732",
"owner": {
"login": "Mor-Golan",
"id": 297464417,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/297464417?v=4",
"html_url": "https:\/\/github.com\/Mor-Golan",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Mor-Golan\/CVE-2026-39732",
"description": "CVE-2026-39732: Unauthenticated SQL Injection in Transliterator WordPress Plugin. PoC by Mor Golan.",
"fork": false,
"created_at": "2026-11-07T12:30:36Z",
"updated_at": "2026-11-07T12:53:45Z",
"pushed_at": "2026-11-07T12:30:41Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"bug-bounty",
"cve",
"cve-2026-39732",
"exploit",
"penetration-testing",
"poc",
"red-team",
"sql-injection",
"vulnerability-research",
"wordpress",
"wordpress-plugin"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-43284.json
+4 -45
View File
@@ -1449,10 +1449,10 @@
"description": "Ephemeral root for Samsung Galaxy devices via CVE-2026-43284 — stability fork of DirtyFrag. Reboot to undo.",
"fork": false,
"created_at": "2026-10-19T09:24:01Z",
"updated_at": "2026-11-04T01:05:39Z",
"updated_at": "2026-11-07T11:37:18Z",
"pushed_at": "2026-10-19T09:48:30Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -1472,7 +1472,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
@@ -1509,47 +1509,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1448193809,
"name": "Shizuka",
"full_name": "EmilyTsum\/Shizuka",
"owner": {
"login": "EmilyTsum",
"id": 297192186,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/297192186?v=4",
"html_url": "https:\/\/github.com\/EmilyTsum",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/EmilyTsum\/Shizuka",
"description": "Post-root DirtyFrag (CVE-2026-43284) mitigation for Galaxy S25 — a build-gated KernelSU kernel module that privatizes ESP receive buffers. Verified on SM-S931Z \/ DZIF only.",
"fork": false,
"created_at": "2026-11-06T11:43:07Z",
"updated_at": "2026-11-06T13:56:54Z",
"pushed_at": "2026-11-06T13:56:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-43284",
"dirtyfrag",
"galaxy-s25",
"kernel-module",
"kernelsu",
"netfilter",
"one-ui"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1449024742,
"name": "redmi-k50-temp-root",
2026/CVE-2026-43499.json
+118 -36
View File
@@ -361,10 +361,10 @@
"description": "GhostLock (CVE-2026-43499) kernel exploit for Android devices with locked bootloader",
"fork": false,
"created_at": "2026-07-12T16:05:24Z",
"updated_at": "2026-11-07T01:28:49Z",
"updated_at": "2026-11-07T12:34:13Z",
"pushed_at": "2026-09-17T05:30:59Z",
"stargazers_count": 453,
"watchers_count": 453,
"stargazers_count": 454,
"watchers_count": 454,
"has_discussions": false,
"forks_count": 96,
"allow_forking": true,
@@ -382,7 +382,7 @@
],
"visibility": "public",
"forks": 96,
"watchers": 453,
"watchers": 454,
"score": 0,
"subscribers_count": 15
},
@@ -995,10 +995,10 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
"updated_at": "2026-11-07T07:34:04Z",
"updated_at": "2026-11-07T13:51:04Z",
"pushed_at": "2026-09-03T03:21:42Z",
"stargazers_count": 1593,
"watchers_count": 1593,
"stargazers_count": 1594,
"watchers_count": 1594,
"has_discussions": false,
"forks_count": 317,
"allow_forking": true,
@@ -1009,7 +1009,7 @@
"topics": [],
"visibility": "public",
"forks": 317,
"watchers": 1593,
"watchers": 1594,
"score": 0,
"subscribers_count": 47
},
@@ -1577,10 +1577,10 @@
"description": "基于内核漏洞CVE-2026-43499的本地提权适配，集成嵌入式 KernelSU.CVE-2026-43499+KernelSU越狱模式 ",
"fork": false,
"created_at": "2026-07-26T12:39:00Z",
"updated_at": "2026-11-07T06:23:24Z",
"updated_at": "2026-11-07T13:13:23Z",
"pushed_at": "2026-07-26T14:04:57Z",
"stargazers_count": 519,
"watchers_count": 519,
"stargazers_count": 521,
"watchers_count": 521,
"has_discussions": false,
"forks_count": 90,
"allow_forking": true,
@@ -1591,7 +1591,7 @@
"topics": [],
"visibility": "public",
"forks": 90,
"watchers": 519,
"watchers": 521,
"score": 0,
"subscribers_count": 1
},
@@ -1676,10 +1676,10 @@
"description": "GhostLock One-Tap Execution App (CVE-2026-43499)",
"fork": false,
"created_at": "2026-07-29T05:04:25Z",
"updated_at": "2026-11-07T07:38:17Z",
"updated_at": "2026-11-07T13:54:56Z",
"pushed_at": "2026-11-06T05:01:14Z",
"stargazers_count": 2750,
"watchers_count": 2750,
"stargazers_count": 2768,
"watchers_count": 2768,
"has_discussions": true,
"forks_count": 653,
"allow_forking": true,
@@ -1690,7 +1690,7 @@
"topics": [],
"visibility": "public",
"forks": 653,
"watchers": 2750,
"watchers": 2768,
"score": 0,
"subscribers_count": 49
},
@@ -2049,7 +2049,7 @@
"stargazers_count": 491,
"watchers_count": 491,
"has_discussions": false,
"forks_count": 72,
"forks_count": 73,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2064,7 +2064,7 @@
"root"
],
"visibility": "public",
"forks": 72,
"forks": 73,
"watchers": 491,
"score": 0,
"subscribers_count": 9
@@ -2249,10 +2249,10 @@
"description": "Root your Galaxy using CVE-2026-43499",
"fork": false,
"created_at": "2026-08-08T11:41:33Z",
"updated_at": "2026-10-31T01:27:07Z",
"updated_at": "2026-11-07T10:02:15Z",
"pushed_at": "2026-10-14T05:11:30Z",
"stargazers_count": 40,
"watchers_count": 40,
"stargazers_count": 41,
"watchers_count": 41,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -2263,7 +2263,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 40,
"watchers": 41,
"score": 0,
"subscribers_count": 1
},
@@ -2381,10 +2381,10 @@
"description": "CVE-2026-43499 (GhostLock) research on HUAWEI MatePad Pro 11 GOT-W29",
"fork": false,
"created_at": "2026-08-10T09:01:08Z",
"updated_at": "2026-11-06T08:52:29Z",
"updated_at": "2026-11-07T11:31:52Z",
"pushed_at": "2026-10-22T18:22:15Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -2395,7 +2395,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 7,
"watchers": 8,
"score": 0,
"subscribers_count": 0
},
@@ -2617,7 +2617,7 @@
"stargazers_count": 65,
"watchers_count": 65,
"has_discussions": false,
"forks_count": 14,
"forks_count": 15,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2625,7 +2625,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 14,
"forks": 15,
"watchers": 65,
"score": 0,
"subscribers_count": 0
@@ -2920,8 +2920,8 @@
"description": "Using CVE-2026-43499 to root your Galaxy S24 Series(SM-S92X0 ,(China \/ Hong Kong SAR \/ Taiwan))",
"fork": false,
"created_at": "2026-08-16T14:37:06Z",
"updated_at": "2026-11-07T03:36:44Z",
"pushed_at": "2026-11-07T03:36:44Z",
"updated_at": "2026-11-07T12:20:45Z",
"pushed_at": "2026-11-07T12:20:41Z",
"stargazers_count": 111,
"watchers_count": 111,
"has_discussions": false,
@@ -5533,8 +5533,8 @@
"description": "OPPO A96 (PFUM10) post-relock toolkit: CVE-2026-43499 chain -> real BakaSU driver, ocsk kernel defense probes vs OPPO OPLUS_ROOT_CHECK, boot restore scripts",
"fork": false,
"created_at": "2026-10-19T10:20:17Z",
"updated_at": "2026-11-06T22:20:11Z",
"pushed_at": "2026-11-06T22:20:07Z",
"updated_at": "2026-11-07T11:08:50Z",
"pushed_at": "2026-11-07T11:08:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -5969,10 +5969,10 @@
"description": "Galaxy S25 Ultra (SM-S9380): GhostLock\/CVE-2026-43499 memory-only root + KernelSU LKM via kallsyms prelink; Zygisk findings",
"fork": false,
"created_at": "2026-10-28T16:57:15Z",
"updated_at": "2026-10-28T16:57:48Z",
"updated_at": "2026-11-07T08:04:45Z",
"pushed_at": "2026-10-28T16:57:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -5983,7 +5983,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
@@ -6394,5 +6394,87 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1449158500,
"name": "MiTV-MFTP0-GhostLock",
"full_name": "kipcloud120\/MiTV-MFTP0-GhostLock",
"owner": {
"login": "kipcloud120",
"id": 317922099,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/317922099?v=4",
"html_url": "https:\/\/github.com\/kipcloud120",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/kipcloud120\/MiTV-MFTP0-GhostLock",
"description": "GhostLock (CVE-2026-43499) port for Xiaomi MiTV-MFTP0 (alita \/ L65R8-X), MediaTek MT9652, Android 9, kernel 4.9.118 - futex PI UAF LPE, full partition map, TvService backdoor analysis.",
"fork": false,
"created_at": "2026-11-07T08:11:40Z",
"updated_at": "2026-11-07T12:22:52Z",
"pushed_at": "2026-11-07T12:22:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"android",
"android-9",
"armv8l",
"cve-2026-43499",
"futex",
"ghostlock",
"kernel-exploit",
"lpe",
"mediatek",
"mt9652",
"privilege-escalation",
"reverse-engineering",
"selinux",
"xiaomi",
"xiaomi-tv"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1449222265,
"name": "w25-cve-2026-43499-notes",
"full_name": "a78c7\/w25-cve-2026-43499-notes",
"owner": {
"login": "a78c7",
"id": 278338512,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/278338512?v=4",
"html_url": "https:\/\/github.com\/a78c7",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/a78c7\/w25-cve-2026-43499-notes",
"description": "Field notes: CVE-2026-43499 on Samsung Galaxy W25 (SM-W9025, CHC) - offsets, failed routes, repro",
"fork": false,
"created_at": "2026-11-07T09:48:46Z",
"updated_at": "2026-11-07T13:57:12Z",
"pushed_at": "2026-11-07T13:57:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-51994.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Forensic audit of mcp-remote: seven OAuth trust-boundary advisories, five CVE records (CVE-2026-51994\/51995\/51996\/51997\/52001). Server-selected request path (CWE-918) run against loopback canaries in 62 stable releases, 0.1.32 to the current 0.15.1; selected code and namespace signatures under 12 other npm names; search blind spots above 350 KiB.",
"fork": false,
"created_at": "2026-07-31T10:36:20Z",
"updated_at": "2026-11-04T03:23:24Z",
"pushed_at": "2026-11-04T03:23:20Z",
"updated_at": "2026-11-07T11:44:54Z",
"pushed_at": "2026-11-07T11:44:51Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-53362.json
+33
View File
@@ -35,5 +35,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1449169735,
"name": "cve-2026-53362-ipv6-frag-escape",
"full_name": "sol4ce503\/cve-2026-53362-ipv6-frag-escape",
"owner": {
"login": "sol4ce503",
"id": 178799214,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/178799214?v=4",
"html_url": "https:\/\/github.com\/sol4ce503",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/sol4ce503\/cve-2026-53362-ipv6-frag-escape",
"description": null,
"fork": false,
"created_at": "2026-11-07T08:29:23Z",
"updated_at": "2026-11-07T08:32:07Z",
"pushed_at": "2026-11-07T08:32:03Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-58868.json
+2 -2
View File
@@ -54,8 +54,8 @@
"description": null,
"fork": false,
"created_at": "2026-11-05T21:05:48Z",
"updated_at": "2026-11-07T00:33:09Z",
"pushed_at": "2026-11-07T00:20:18Z",
"updated_at": "2026-11-07T10:44:54Z",
"pushed_at": "2026-11-07T10:44:50Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-61989.json
+47
View File
@@ -0,0 +1,47 @@
[
{
"id": 1449337955,
"name": "CVE-2026-61989",
"full_name": "Mor-Golan\/CVE-2026-61989",
"owner": {
"login": "Mor-Golan",
"id": 297464417,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/297464417?v=4",
"html_url": "https:\/\/github.com\/Mor-Golan",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Mor-Golan\/CVE-2026-61989",
"description": "CVE-2026-61989: Unauthenticated Cross Site Scripting (XSS) in Easy Property Listings WordPress Plugin. PoC by Mor Golan.",
"fork": false,
"created_at": "2026-11-07T12:30:44Z",
"updated_at": "2026-11-07T12:53:47Z",
"pushed_at": "2026-11-07T12:30:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"bug-bounty",
"cve",
"cve-2026-61989",
"exploit",
"penetration-testing",
"poc",
"red-team",
"vulnerability-research",
"wordpress",
"wordpress-plugin",
"xss"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-64560.json
+4 -4
View File
@@ -597,10 +597,10 @@
"description": "在 REDMI K90 Max（代号 prague \/ OS4.0.0.14）上，从手机端一键开一个临时 root。利用 CVE-2026-64560（posix-cpu-timers UAF）加载 KernelSU LKM，重启即失效。不需要电脑、不刷机、不解锁 Bootloader。",
"fork": false,
"created_at": "2026-10-25T15:32:39Z",
"updated_at": "2026-11-06T17:40:12Z",
"updated_at": "2026-11-07T09:00:55Z",
"pushed_at": "2026-11-06T17:46:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -620,7 +620,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-73577.json
+37
View File
@@ -0,0 +1,37 @@
[
{
"id": 1447436530,
"name": "apache-ofbiz-2026-pocs",
"full_name": "Crypto-Cat\/apache-ofbiz-2026-pocs",
"owner": {
"login": "Crypto-Cat",
"id": 12751872,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/12751872?v=4",
"html_url": "https:\/\/github.com\/Crypto-Cat",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Crypto-Cat\/apache-ofbiz-2026-pocs",
"description": "Proof-of-concept exploits for seven Apache OFBiz vulnerabilities reported in 2026, all fixed in Apache OFBiz 24.09.08. CVE-2026-73577, CVE-2026-73578, CVE-2026-82894, CVE-2026-83538, CVE-2026-83542, CVE-2026-84183, CVE-2026-48728",
"fork": false,
"created_at": "2026-11-05T19:39:39Z",
"updated_at": "2026-11-07T10:15:45Z",
"pushed_at": "2026-11-05T19:54:44Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-77812.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "DJI Drone Cleartext Bluetooth Transmission of Wi-Fi PSK and Session UUID — Proof of Concept for CVE-2026-77812.",
"fork": false,
"created_at": "2026-09-20T20:33:14Z",
"updated_at": "2026-11-01T09:03:51Z",
"updated_at": "2026-11-07T09:21:49Z",
"pushed_at": "2026-09-23T20:59:48Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-83844.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Microsoft Paint CVE-2026-83844 Verification Script",
"fork": false,
"created_at": "2026-11-06T08:30:59Z",
"updated_at": "2026-11-06T09:34:23Z",
"updated_at": "2026-11-07T13:44:15Z",
"pushed_at": "2026-11-06T09:34:18Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -33,7 +33,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-86777.json
+42
View File
@@ -0,0 +1,42 @@
[
{
"id": 1449283709,
"name": "CVE-2026-86777-AlchemyCMS-Navigation-Disclosure",
"full_name": "shohruhyuldashev\/CVE-2026-86777-AlchemyCMS-Navigation-Disclosure",
"owner": {
"login": "shohruhyuldashev",
"id": 93183101,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/93183101?v=4",
"html_url": "https:\/\/github.com\/shohruhyuldashev",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/shohruhyuldashev\/CVE-2026-86777-AlchemyCMS-Navigation-Disclosure",
"description": "Technical research and proof of concept for CVE-2026-86777 affecting AlchemyCMS.",
"fork": false,
"created_at": "2026-11-07T11:15:12Z",
"updated_at": "2026-11-07T11:43:29Z",
"pushed_at": "2026-11-07T11:25:37Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"bug-report",
"cve",
"cve-2026-86777",
"cwe-200",
"cwe-862",
"security-bug"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-91403.json
+2 -2
View File
@@ -152,8 +152,8 @@
"description": "HCL Domino \/ Notes eMudhra 憑證事件 (CVE-2026-91403) 的最小化清查與移除 SOP，純 keytool，不需大型工具",
"fork": false,
"created_at": "2026-11-05T10:52:22Z",
"updated_at": "2026-11-07T07:47:47Z",
"pushed_at": "2026-11-07T07:47:43Z",
"updated_at": "2026-11-07T08:03:44Z",
"pushed_at": "2026-11-07T08:03:41Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-94074.json
+47
View File
@@ -0,0 +1,47 @@
[
{
"id": 1449338066,
"name": "CVE-2026-94074",
"full_name": "Mor-Golan\/CVE-2026-94074",
"owner": {
"login": "Mor-Golan",
"id": 297464417,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/297464417?v=4",
"html_url": "https:\/\/github.com\/Mor-Golan",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Mor-Golan\/CVE-2026-94074",
"description": "CVE-2026-94074: Unauthenticated Broken Access Control in Simply Schedule Appointments WordPress Plugin. PoC by Mor Golan.",
"fork": false,
"created_at": "2026-11-07T12:30:53Z",
"updated_at": "2026-11-07T12:53:48Z",
"pushed_at": "2026-11-07T12:30:58Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"broken-access-control",
"bug-bounty",
"cve",
"cve-2026-94074",
"exploit",
"penetration-testing",
"poc",
"red-team",
"vulnerability-research",
"wordpress",
"wordpress-plugin"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-94113.json
+42
View File
@@ -0,0 +1,42 @@
[
{
"id": 1449269235,
"name": "CVE-2026-94113-ERPNext-Timesheet",
"full_name": "shohruhyuldashev\/CVE-2026-94113-ERPNext-Timesheet",
"owner": {
"login": "shohruhyuldashev",
"id": 93183101,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/93183101?v=4",
"html_url": "https:\/\/github.com\/shohruhyuldashev",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/shohruhyuldashev\/CVE-2026-94113-ERPNext-Timesheet",
"description": "Technical analysis and proof of concept for CVE-2026-94113 — Missing Authorization in ERPNext Timesheet endpoints.",
"fork": false,
"created_at": "2026-11-07T10:55:10Z",
"updated_at": "2026-11-07T11:43:30Z",
"pushed_at": "2026-11-07T11:05:33Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"bug-report",
"cve",
"cve-2026-94113",
"cwe",
"cwe-200",
"cwe-862"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-94641.json
+47
View File
@@ -0,0 +1,47 @@
[
{
"id": 1449338165,
"name": "CVE-2026-94641",
"full_name": "Mor-Golan\/CVE-2026-94641",
"owner": {
"login": "Mor-Golan",
"id": 297464417,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/297464417?v=4",
"html_url": "https:\/\/github.com\/Mor-Golan",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Mor-Golan\/CVE-2026-94641",
"description": "CVE-2026-94641: Unauthenticated Cross Site Scripting (XSS) in UsersWP WordPress Plugin. PoC by Mor Golan.",
"fork": false,
"created_at": "2026-11-07T12:31:02Z",
"updated_at": "2026-11-07T12:53:49Z",
"pushed_at": "2026-11-07T12:31:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"bug-bounty",
"cve",
"cve-2026-94641",
"exploit",
"penetration-testing",
"poc",
"red-team",
"vulnerability-research",
"wordpress",
"wordpress-plugin",
"xss"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-95597.json
+47
View File
@@ -0,0 +1,47 @@
[
{
"id": 1449361352,
"name": "CVE-2026-95597",
"full_name": "Mor-Golan\/CVE-2026-95597",
"owner": {
"login": "Mor-Golan",
"id": 297464417,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/297464417?v=4",
"html_url": "https:\/\/github.com\/Mor-Golan",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Mor-Golan\/CVE-2026-95597",
"description": "CVE-2026-95597: Unauthenticated Settings Change in PGALL for WooCommerce (????? ?? ????) WordPress Plugin. PoC by Mor Golan.",
"fork": false,
"created_at": "2026-11-07T13:01:39Z",
"updated_at": "2026-11-07T13:01:47Z",
"pushed_at": "2026-11-07T13:01:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"broken-access-control",
"bug-bounty",
"cve",
"cve-2026-95597",
"exploit",
"penetration-testing",
"poc",
"red-team",
"vulnerability-research",
"wordpress",
"wordpress-plugin"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-96838.json
+47
View File
@@ -0,0 +1,47 @@
[
{
"id": 1449361448,
"name": "CVE-2026-96838",
"full_name": "Mor-Golan\/CVE-2026-96838",
"owner": {
"login": "Mor-Golan",
"id": 297464417,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/297464417?v=4",
"html_url": "https:\/\/github.com\/Mor-Golan",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Mor-Golan\/CVE-2026-96838",
"description": "CVE-2026-96838: Cross Site Request Forgery (CSRF) in Blacklist Manager for WooCommerce WordPress Plugin. PoC by Mor Golan.",
"fork": false,
"created_at": "2026-11-07T13:01:46Z",
"updated_at": "2026-11-07T13:01:55Z",
"pushed_at": "2026-11-07T13:01:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"bug-bounty",
"csrf",
"cve",
"cve-2026-96838",
"exploit",
"penetration-testing",
"poc",
"red-team",
"vulnerability-research",
"wordpress",
"wordpress-plugin"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-97205.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": null,
"fork": false,
"created_at": "2026-10-15T10:48:17Z",
"updated_at": "2026-11-03T05:30:10Z",
"pushed_at": "2026-11-03T05:30:06Z",
"updated_at": "2026-11-07T07:48:22Z",
"pushed_at": "2026-11-07T07:48:18Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-97798.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-97798 Windows Error Reporting - Command Injection TO SYSTEM",
"fork": false,
"created_at": "2026-10-27T17:45:26Z",
"updated_at": "2026-11-07T01:29:49Z",
"updated_at": "2026-11-07T09:19:41Z",
"pushed_at": "2026-10-30T02:35:54Z",
"stargazers_count": 62,
"watchers_count": 62,
"stargazers_count": 63,
"watchers_count": 63,
"has_discussions": false,
"forks_count": 14,
"allow_forking": true,
@@ -36,7 +36,7 @@
],
"visibility": "public",
"forks": 14,
"watchers": 62,
"watchers": 63,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-98260.json
+77 -44
View File
@@ -179,12 +179,12 @@
"description": "Shizuku-driven CVE-2026-98260 root + KernelSU runtime LKM loader for Xiaomi yingtian \/ lhasa (kernel 6.18.21)",
"fork": false,
"created_at": "2026-10-25T12:51:04Z",
"updated_at": "2026-11-07T01:12:54Z",
"updated_at": "2026-11-07T13:46:49Z",
"pushed_at": "2026-11-05T05:07:52Z",
"stargazers_count": 89,
"watchers_count": 89,
"stargazers_count": 92,
"watchers_count": 92,
"has_discussions": true,
"forks_count": 20,
"forks_count": 21,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -201,8 +201,8 @@
"xiaomi"
],
"visibility": "public",
"forks": 20,
"watchers": 89,
"forks": 21,
"watchers": 92,
"score": 0,
"subscribers_count": 0
},
@@ -260,12 +260,12 @@
"description": "vivo\/IQOO (kernel 6.1.145) CVE-2026-98260 POSIX CPU timer UAF LPE",
"fork": false,
"created_at": "2026-10-25T13:55:54Z",
"updated_at": "2026-11-07T07:12:07Z",
"pushed_at": "2026-11-07T07:12:04Z",
"stargazers_count": 5,
"watchers_count": 5,
"updated_at": "2026-11-07T13:15:29Z",
"pushed_at": "2026-11-07T13:15:25Z",
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 2,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -273,8 +273,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 5,
"forks": 3,
"watchers": 7,
"score": 0,
"subscribers_count": 0
},
@@ -452,10 +452,10 @@
"description": null,
"fork": false,
"created_at": "2026-10-26T09:32:43Z",
"updated_at": "2026-11-06T15:00:58Z",
"updated_at": "2026-11-07T13:06:27Z",
"pushed_at": "2026-10-26T09:50:29Z",
"stargazers_count": 46,
"watchers_count": 46,
"stargazers_count": 47,
"watchers_count": 47,
"has_discussions": false,
"forks_count": 14,
"allow_forking": true,
@@ -466,7 +466,7 @@
"topics": [],
"visibility": "public",
"forks": 14,
"watchers": 46,
"watchers": 47,
"score": 0,
"subscribers_count": 0
},
@@ -529,12 +529,12 @@
"description": "Android LPE (CVE-2026-98260) on Honor MagicPad3 Pro 13.3 (YLP-W00), kernel 6.12.38 — PoC\/EXP, uid-0 shell, KernelSU app",
"fork": false,
"created_at": "2026-10-26T16:49:03Z",
"updated_at": "2026-11-07T01:30:46Z",
"updated_at": "2026-11-07T14:03:03Z",
"pushed_at": "2026-11-06T07:55:24Z",
"stargazers_count": 24,
"watchers_count": 24,
"stargazers_count": 32,
"watchers_count": 32,
"has_discussions": false,
"forks_count": 8,
"forks_count": 10,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -542,8 +542,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 24,
"forks": 10,
"watchers": 32,
"score": 0,
"subscribers_count": 0
},
@@ -733,12 +733,12 @@
"description": "Android front end for CVE-2026-98260: root shell + KernelSU late-load through Shizuku",
"fork": false,
"created_at": "2026-10-28T15:15:02Z",
"updated_at": "2026-11-07T05:25:17Z",
"updated_at": "2026-11-07T10:19:05Z",
"pushed_at": "2026-11-03T13:01:24Z",
"stargazers_count": 57,
"watchers_count": 57,
"stargazers_count": 58,
"watchers_count": 58,
"has_discussions": false,
"forks_count": 21,
"forks_count": 22,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -753,8 +753,8 @@
"shizuku"
],
"visibility": "public",
"forks": 21,
"watchers": 57,
"forks": 22,
"watchers": 58,
"score": 0,
"subscribers_count": 1
},
@@ -773,10 +773,10 @@
"description": "CVE-2026-98260 (posix-cpu-timers exec UAF) exploit research: S9280 Android 14 GKI 6.1 — UAF trigger + zero-write primitive + SELinux Permissive. Handoff doc in HANDOFF.md",
"fork": false,
"created_at": "2026-10-28T16:54:41Z",
"updated_at": "2026-11-06T16:31:55Z",
"pushed_at": "2026-11-06T16:31:51Z",
"stargazers_count": 4,
"watchers_count": 4,
"updated_at": "2026-11-07T11:44:53Z",
"pushed_at": "2026-11-07T08:07:13Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -787,7 +787,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
@@ -806,10 +806,10 @@
"description": "GhostKey - CVE-2026-98260 一键提权工具（Shizuku + NDK Native）",
"fork": false,
"created_at": "2026-10-29T04:23:27Z",
"updated_at": "2026-11-06T16:33:36Z",
"updated_at": "2026-11-07T08:11:09Z",
"pushed_at": "2026-10-29T01:46:53Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -820,7 +820,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
@@ -1058,12 +1058,12 @@
"description": "One-tap Android root for Samsung Galaxy devices, built around the CVE-2026-98260 timer exploit.",
"fork": false,
"created_at": "2026-11-01T10:00:01Z",
"updated_at": "2026-11-07T06:34:39Z",
"pushed_at": "2026-11-01T10:11:44Z",
"updated_at": "2026-11-07T09:42:49Z",
"pushed_at": "2026-11-07T09:42:46Z",
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 5,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1071,7 +1071,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 5,
"forks": 4,
"watchers": 7,
"score": 0,
"subscribers_count": 0
@@ -1459,7 +1459,7 @@
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1467,7 +1467,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"forks": 2,
"watchers": 1,
"score": 0,
"subscribers_count": 0
@@ -1570,5 +1570,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1449400029,
"name": "GhostKey",
"full_name": "countryside99\/GhostKey",
"owner": {
"login": "countryside99",
"id": 299937001,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/299937001?v=4",
"html_url": "https:\/\/github.com\/countryside99",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/countryside99\/GhostKey",
"description": "Ephemeral root through CVE-2026-98260 vulnerability (GhostKey).",
"fork": false,
"created_at": "2026-11-07T13:50:13Z",
"updated_at": "2026-11-07T13:51:08Z",
"pushed_at": "2026-11-07T13:51:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-98432.json
+34 -1
View File
@@ -268,7 +268,7 @@
"fork": false,
"created_at": "2026-10-30T00:22:53Z",
"updated_at": "2026-11-06T05:24:56Z",
"pushed_at": "2026-11-07T07:35:55Z",
"pushed_at": "2026-11-07T13:32:48Z",
"stargazers_count": 17,
"watchers_count": 17,
"has_discussions": false,
@@ -2716,5 +2716,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1449344527,
"name": "cve_2026_98432_livepatch",
"full_name": "zhao-xiaogang\/cve_2026_98432_livepatch",
"owner": {
"login": "zhao-xiaogang",
"id": 15973495,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/15973495?v=4",
"html_url": "https:\/\/github.com\/zhao-xiaogang",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/zhao-xiaogang\/cve_2026_98432_livepatch",
"description": "Reference livepatch for CVE-2026-98432 on Ubuntu 22 5.15.0-71-generic",
"fork": false,
"created_at": "2026-11-07T12:39:34Z",
"updated_at": "2026-11-07T12:42:44Z",
"pushed_at": "2026-11-07T12:42:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]