nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/07/09 00:50:19

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-07-09 09:50:19 +09:00
1 parent 9d9e060ef0
commit 999d648b8e
81 files changed
+635 -439
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2008/CVE-2008-5161.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
2016/CVE-2016-5195.json
+4 -4
View File
@@ -490,10 +490,10 @@
"description": "Dirty Cow exploit - CVE-2016-5195",
"fork": false,
"created_at": "2016-11-25T21:08:01Z",
"updated_at": "2026-07-01T07:56:39Z",
"updated_at": "2026-07-08T22:01:43Z",
"pushed_at": "2025-07-30T11:31:24Z",
"stargazers_count": 936,
"watchers_count": 936,
"stargazers_count": 937,
"watchers_count": 937,
"has_discussions": false,
"forks_count": 428,
"allow_forking": true,
@@ -508,7 +508,7 @@
],
"visibility": "public",
"forks": 428,
"watchers": 936,
"watchers": 937,
"score": 0,
"subscribers_count": 1
},
2018/CVE-2018-11776.json
+2 -2
View File
@@ -95,7 +95,7 @@
"stargazers_count": 123,
"watchers_count": 123,
"has_discussions": false,
"forks_count": 48,
"forks_count": 49,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -109,7 +109,7 @@
"struts2"
],
"visibility": "public",
"forks": 48,
"forks": 49,
"watchers": 123,
"score": 0,
"subscribers_count": 10
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-07-08T17:04:10Z",
"pushed_at": "2026-07-08T17:03:07Z",
"updated_at": "2026-07-08T23:41:32Z",
"pushed_at": "2026-07-08T23:41:28Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2019/CVE-2019-9053.json
-33
View File
@@ -263,39 +263,6 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 664209679,
"name": "guncel-cve-2019-9053.py",
"full_name": "bthnrml\/guncel-cve-2019-9053.py",
"owner": {
"login": "bthnrml",
"id": 57349165,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57349165?v=4",
"html_url": "https:\/\/github.com\/bthnrml",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/bthnrml\/guncel-cve-2019-9053.py",
"description": null,
"fork": false,
"created_at": "2023-07-09T08:50:38Z",
"updated_at": "2023-07-09T08:50:39Z",
"pushed_at": "2023-07-09T08:50:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 2
},
{
"id": 675828578,
"name": "CVE-2019-9053",
2020/CVE-2020-1472.json
+6 -6
View File
@@ -113,10 +113,10 @@
"description": "PoC for Zerologon - all research credits go to Tom Tervoort of Secura",
"fork": false,
"created_at": "2020-09-14T16:56:51Z",
"updated_at": "2026-07-04T05:14:25Z",
"updated_at": "2026-07-08T18:39:31Z",
"pushed_at": "2020-11-03T09:45:24Z",
"stargazers_count": 1306,
"watchers_count": 1306,
"stargazers_count": 1307,
"watchers_count": 1307,
"has_discussions": false,
"forks_count": 280,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 280,
"watchers": 1306,
"watchers": 1307,
"score": 0,
"subscribers_count": 33
},
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-07-08T18:06:32Z",
"pushed_at": "2026-07-08T18:05:44Z",
"updated_at": "2026-07-08T23:46:22Z",
"pushed_at": "2026-07-08T23:46:17Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2021/CVE-2021-1675.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "C# and Impacket implementation of PrintNightmare CVE-2021-1675\/CVE-2021-34527",
"fork": false,
"created_at": "2021-06-29T17:24:14Z",
"updated_at": "2026-07-04T05:14:28Z",
"updated_at": "2026-07-08T19:04:14Z",
"pushed_at": "2021-07-20T15:28:13Z",
"stargazers_count": 1992,
"watchers_count": 1992,
"stargazers_count": 1993,
"watchers_count": 1993,
"has_discussions": false,
"forks_count": 577,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 577,
"watchers": 1992,
"watchers": 1993,
"score": 0,
"subscribers_count": 39
},
2021/CVE-2021-3156.json
+4 -4
View File
@@ -1114,10 +1114,10 @@
"description": "Sudo Baron Samedit Exploit",
"fork": false,
"created_at": "2021-03-15T17:37:02Z",
"updated_at": "2026-07-07T09:38:52Z",
"updated_at": "2026-07-08T22:02:36Z",
"pushed_at": "2022-01-13T05:48:01Z",
"stargazers_count": 799,
"watchers_count": 799,
"stargazers_count": 800,
"watchers_count": 800,
"has_discussions": false,
"forks_count": 175,
"allow_forking": true,
@@ -1128,7 +1128,7 @@
"topics": [],
"visibility": "public",
"forks": 175,
"watchers": 799,
"watchers": 800,
"score": 0,
"subscribers_count": 10
},
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-07-08T18:14:58Z",
"pushed_at": "2026-07-08T18:13:07Z",
"updated_at": "2026-07-08T23:37:59Z",
"pushed_at": "2026-07-08T23:37:55Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-34527.json
+4 -4
View File
@@ -119,10 +119,10 @@
"description": "PrintNightmare - Windows Print Spooler RCE\/LPE Vulnerability (CVE-2021-34527, CVE-2021-1675) proof of concept exploits",
"fork": false,
"created_at": "2021-07-03T15:15:12Z",
"updated_at": "2026-06-30T12:12:01Z",
"updated_at": "2026-07-08T19:07:13Z",
"pushed_at": "2021-09-13T12:12:17Z",
"stargazers_count": 173,
"watchers_count": 173,
"stargazers_count": 174,
"watchers_count": 174,
"has_discussions": false,
"forks_count": 42,
"allow_forking": true,
@@ -140,7 +140,7 @@
],
"visibility": "public",
"forks": 42,
"watchers": 173,
"watchers": 174,
"score": 0,
"subscribers_count": 4
},
2021/CVE-2021-37624.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 30,
"watchers_count": 30,
"has_discussions": false,
"forks_count": 9,
"forks_count": 10,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -34,7 +34,7 @@
"voip-telephony-providers"
],
"visibility": "public",
"forks": 9,
"forks": 10,
"watchers": 30,
"score": 0,
"subscribers_count": 0
2021/CVE-2021-4034.json
+4 -4
View File
@@ -150,10 +150,10 @@
"description": "Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation",
"fork": false,
"created_at": "2022-01-26T14:26:10Z",
"updated_at": "2026-07-06T04:43:48Z",
"updated_at": "2026-07-08T22:02:31Z",
"pushed_at": "2022-06-21T14:52:05Z",
"stargazers_count": 1312,
"watchers_count": 1312,
"stargazers_count": 1313,
"watchers_count": 1313,
"has_discussions": false,
"forks_count": 208,
"allow_forking": true,
@@ -166,7 +166,7 @@
],
"visibility": "public",
"forks": 208,
"watchers": 1312,
"watchers": 1313,
"score": 0,
"subscribers_count": 12
},
2021/CVE-2021-40444.json
+4 -4
View File
@@ -245,10 +245,10 @@
"description": "CVE-2021-40444 PoC",
"fork": false,
"created_at": "2021-09-10T16:55:53Z",
"updated_at": "2026-07-08T08:47:16Z",
"updated_at": "2026-07-08T23:10:23Z",
"pushed_at": "2021-12-25T18:31:02Z",
"stargazers_count": 1753,
"watchers_count": 1753,
"stargazers_count": 1754,
"watchers_count": 1754,
"has_discussions": false,
"forks_count": 476,
"allow_forking": true,
@@ -259,7 +259,7 @@
"topics": [],
"visibility": "public",
"forks": 476,
"watchers": 1753,
"watchers": 1754,
"score": 0,
"subscribers_count": 27
},
2021/CVE-2021-44228.json
+2 -2
View File
@@ -5879,7 +5879,7 @@
"stargazers_count": 395,
"watchers_count": 395,
"has_discussions": false,
"forks_count": 55,
"forks_count": 56,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -5893,7 +5893,7 @@
"vulnerability-scanners"
],
"visibility": "public",
"forks": 55,
"forks": 56,
"watchers": 395,
"score": 0,
"subscribers_count": 9
2022/CVE-2022-0185.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2022-0185",
"fork": false,
"created_at": "2022-01-19T06:19:38Z",
"updated_at": "2026-07-08T10:50:47Z",
"updated_at": "2026-07-08T22:02:22Z",
"pushed_at": "2022-04-25T04:11:33Z",
"stargazers_count": 377,
"watchers_count": 377,
"stargazers_count": 378,
"watchers_count": 378,
"has_discussions": false,
"forks_count": 57,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 57,
"watchers": 377,
"watchers": 378,
"score": 0,
"subscribers_count": 37
},
2022/CVE-2022-0492.json
+4 -4
View File
@@ -179,10 +179,10 @@
"description": "Docker Breakout Checker and PoC via CAP_SYS_ADMIN and via user namespaces (CVE-2022-0492)",
"fork": false,
"created_at": "2023-02-18T04:48:25Z",
"updated_at": "2026-05-10T10:41:28Z",
"updated_at": "2026-07-08T22:02:27Z",
"pushed_at": "2023-02-18T05:28:02Z",
"stargazers_count": 6,
"watchers_count": 6,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -200,7 +200,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 6,
"watchers": 7,
"score": 0,
"subscribers_count": 1
},
2022/CVE-2022-0847.json
+4 -4
View File
@@ -1237,10 +1237,10 @@
"description": "A collection of exploits and documentation that can be used to exploit the Linux Dirty Pipe vulnerability.",
"fork": false,
"created_at": "2022-03-12T20:57:24Z",
"updated_at": "2026-07-07T02:40:31Z",
"updated_at": "2026-07-08T22:01:39Z",
"pushed_at": "2023-05-20T05:55:45Z",
"stargazers_count": 723,
"watchers_count": 723,
"stargazers_count": 724,
"watchers_count": 724,
"has_discussions": false,
"forks_count": 160,
"allow_forking": true,
@@ -1251,7 +1251,7 @@
"topics": [],
"visibility": "public",
"forks": 160,
"watchers": 723,
"watchers": 724,
"score": 0,
"subscribers_count": 13
},
2022/CVE-2022-20421.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 287,
"watchers_count": 287,
"has_discussions": false,
"forks_count": 49,
"forks_count": 50,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 49,
"forks": 50,
"watchers": 287,
"score": 0,
"subscribers_count": 6
2022/CVE-2022-2588.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "exploit for CVE-2022-2588",
"fork": false,
"created_at": "2022-08-11T06:01:24Z",
"updated_at": "2026-06-12T06:05:38Z",
"updated_at": "2026-07-08T22:02:17Z",
"pushed_at": "2023-03-04T05:52:28Z",
"stargazers_count": 488,
"watchers_count": 488,
"stargazers_count": 489,
"watchers_count": 489,
"has_discussions": false,
"forks_count": 71,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 71,
"watchers": 488,
"watchers": 489,
"score": 0,
"subscribers_count": 48
},
2022/CVE-2022-29799.json
+2 -2
View File
@@ -59,8 +59,8 @@
"description": "Demonstrate local privilege escalation in networkd-dispatcher via CVE-2022-29799 and CVE-2022-29800 using this C proof of concept.",
"fork": false,
"created_at": "2026-06-23T14:05:18Z",
"updated_at": "2026-07-08T17:05:34Z",
"pushed_at": "2026-07-08T17:04:09Z",
"updated_at": "2026-07-08T22:36:03Z",
"pushed_at": "2026-07-08T22:35:58Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-0386.json
+37 -4
View File
@@ -247,10 +247,10 @@
"description": null,
"fork": false,
"created_at": "2023-12-23T11:01:55Z",
"updated_at": "2026-06-19T01:56:57Z",
"updated_at": "2026-07-08T22:01:53Z",
"pushed_at": "2023-12-23T11:12:56Z",
"stargazers_count": 18,
"watchers_count": 18,
"stargazers_count": 19,
"watchers_count": 19,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -261,7 +261,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 18,
"watchers": 19,
"score": 0,
"subscribers_count": 1
},
@@ -567,5 +567,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1294074372,
"name": "TwoMillion-HTB-Write-up",
"full_name": "Cosm3No1de\/TwoMillion-HTB-Write-up",
"owner": {
"login": "Cosm3No1de",
"id": 114448125,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/114448125?v=4",
"html_url": "https:\/\/github.com\/Cosm3No1de",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Cosm3No1de\/TwoMillion-HTB-Write-up",
"description": "Write-up completo de la máquina TwoMillion de Hack The Box. Enumeración web, explotación de API, escalada a admin, inyección de comandos (RCE), reverse shell y escalada a root mediante CVE-2023-0386 (OverlayFS + FUSE). Técnicas de pentesting aplicadas en un entorno controlado.",
"fork": false,
"created_at": "2026-07-08T18:52:36Z",
"updated_at": "2026-07-08T19:30:00Z",
"pushed_at": "2026-07-08T19:29:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2023/CVE-2023-20198.json
+2 -2
View File
@@ -1145,8 +1145,8 @@
"description": null,
"fork": false,
"created_at": "2026-07-08T17:48:39Z",
"updated_at": "2026-07-08T17:53:07Z",
"pushed_at": "2026-07-08T17:53:00Z",
"updated_at": "2026-07-08T18:49:18Z",
"pushed_at": "2026-07-08T18:49:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-20696.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 50,
"forks_count": 51,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 50,
"forks": 51,
"watchers": 2,
"score": 0,
"subscribers_count": 0
2023/CVE-2023-21563.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "BitLocker full-disk encryption bypass research using CVE-2023-21563 (BitPixie). Methodology, exploit chain, and defensive recommendations.",
"fork": false,
"created_at": "2026-04-12T02:14:38Z",
"updated_at": "2026-06-03T10:55:44Z",
"pushed_at": "2026-04-12T02:15:02Z",
"updated_at": "2026-07-08T18:40:44Z",
"pushed_at": "2026-07-08T18:39:11Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2023/CVE-2023-22527.json
-33
View File
@@ -98,39 +98,6 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 747075547,
"name": "CVE-2023-22527",
"full_name": "Vozec\/CVE-2023-22527",
"owner": {
"login": "Vozec",
"id": 61807609,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61807609?v=4",
"html_url": "https:\/\/github.com\/Vozec",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Vozec\/CVE-2023-22527",
"description": "This repository presents a proof-of-concept of CVE-2023-22527",
"fork": false,
"created_at": "2024-01-23T08:06:15Z",
"updated_at": "2026-04-25T19:14:30Z",
"pushed_at": "2024-01-23T09:13:39Z",
"stargazers_count": 14,
"watchers_count": 14,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 14,
"score": 0,
"subscribers_count": 1
},
{
"id": 747107640,
"name": "CVE-2023-22527",
2023/CVE-2023-2640.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "GameOver(lay) Ubuntu Privilege Escalation",
"fork": false,
"created_at": "2023-10-09T22:02:42Z",
"updated_at": "2026-06-19T20:16:53Z",
"updated_at": "2026-07-08T22:02:00Z",
"pushed_at": "2023-10-09T22:44:21Z",
"stargazers_count": 132,
"watchers_count": 132,
"stargazers_count": 133,
"watchers_count": 133,
"has_discussions": false,
"forks_count": 22,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 22,
"watchers": 132,
"watchers": 133,
"score": 0,
"subscribers_count": 1
},
2023/CVE-2023-27350.json
+2 -2
View File
@@ -85,7 +85,7 @@
"stargazers_count": 55,
"watchers_count": 55,
"has_discussions": false,
"forks_count": 23,
"forks_count": 24,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -93,7 +93,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 23,
"forks": 24,
"watchers": 55,
"score": 0,
"subscribers_count": 3
2023/CVE-2023-31497.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 18,
"watchers_count": 18,
"has_discussions": false,
"forks_count": 2,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -32,7 +32,7 @@
"privilege-escalation"
],
"visibility": "public",
"forks": 2,
"forks": 3,
"watchers": 18,
"score": 0,
"subscribers_count": 1
2023/CVE-2023-32233.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "CVE-2023-32233: Linux内核中的安全漏洞",
"fork": false,
"created_at": "2023-05-16T03:06:40Z",
"updated_at": "2026-07-08T10:50:43Z",
"updated_at": "2026-07-08T22:02:11Z",
"pushed_at": "2023-05-16T04:34:16Z",
"stargazers_count": 381,
"watchers_count": 381,
"stargazers_count": 382,
"watchers_count": 382,
"has_discussions": false,
"forks_count": 77,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 77,
"watchers": 381,
"watchers": 382,
"score": 0,
"subscribers_count": 2
},
2023/CVE-2023-32434.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙",
"fork": false,
"created_at": "2025-08-13T09:19:29Z",
"updated_at": "2026-07-08T17:33:31Z",
"pushed_at": "2026-07-08T17:33:06Z",
"updated_at": "2026-07-08T23:03:49Z",
"pushed_at": "2026-07-08T23:03:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-0670.json
+2 -2
View File
@@ -118,8 +118,8 @@
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
"fork": false,
"created_at": "2026-01-08T01:32:09Z",
"updated_at": "2026-07-08T18:21:35Z",
"pushed_at": "2026-07-08T18:20:53Z",
"updated_at": "2026-07-08T23:48:34Z",
"pushed_at": "2026-07-08T23:48:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-1086.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.",
"fork": false,
"created_at": "2024-03-20T21:16:41Z",
"updated_at": "2026-07-07T09:42:23Z",
"updated_at": "2026-07-08T22:02:06Z",
"pushed_at": "2024-04-17T16:09:54Z",
"stargazers_count": 2451,
"watchers_count": 2451,
"stargazers_count": 2452,
"watchers_count": 2452,
"has_discussions": false,
"forks_count": 329,
"allow_forking": true,
@@ -34,7 +34,7 @@
],
"visibility": "public",
"forks": 329,
"watchers": 2451,
"watchers": 2452,
"score": 0,
"subscribers_count": 25
},
2024/CVE-2024-12558.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 915119296,
"name": "CVE-2024-12558-exploit",
"full_name": "Nxploited\/CVE-2024-12558-exploit",
"owner": {
"login": "Nxploited",
"id": 188819918,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4",
"html_url": "https:\/\/github.com\/Nxploited",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-12558-exploit",
"description": null,
"fork": false,
"created_at": "2025-01-11T02:50:14Z",
"updated_at": "2025-01-11T05:05:09Z",
"pushed_at": "2025-01-11T05:05:06Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
}
]
2024/CVE-2024-41713.json
+33
View File
@@ -98,6 +98,39 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 915117254,
"name": "CVE-2024-41713-Scan",
"full_name": "amanverma-wsu\/CVE-2024-41713-Scan",
"owner": {
"login": "amanverma-wsu",
"id": 146479253,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/146479253?v=4",
"html_url": "https:\/\/github.com\/amanverma-wsu",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/amanverma-wsu\/CVE-2024-41713-Scan",
"description": "A Python script to detect CVE-2024-41713, a directory traversal vulnerability in Apache HTTP Server, enabling unauthorized access to restricted resources. This tool is for educational purposes and authorized testing only. Unauthorized usage is unethical and illegal.",
"fork": false,
"created_at": "2025-01-11T02:39:36Z",
"updated_at": "2025-01-11T02:46:25Z",
"pushed_at": "2025-01-11T02:46:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 985646517,
"name": "CVE-2024-41713-PoC-exploit",
2024/CVE-2024-51482.json
-66
View File
@@ -197,39 +197,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1221820939,
"name": "CCTV-MACHINE",
"full_name": "Revnin\/CCTV-MACHINE",
"owner": {
"login": "Revnin",
"id": 154089274,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/154089274?v=4",
"html_url": "https:\/\/github.com\/Revnin",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Revnin\/CCTV-MACHINE",
"description": "A black box penetration test on HackTheBox's CCTV machine achieving full root compromise via four vulnerabilities: default credentials, SQL injection (CVE-2024-51482), password hash cracking, and Remote Code Execution in motionEye (CVE-2025-60787)",
"fork": false,
"created_at": "2026-04-26T18:14:06Z",
"updated_at": "2026-04-26T18:23:21Z",
"pushed_at": "2026-04-26T18:23:16Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1224032434,
"name": "CVE-2024-51482-POC",
@@ -262,38 +229,5 @@
"watchers": 7,
"score": 0,
"subscribers_count": 0
},
{
"id": 1225965654,
"name": "htb-cctv",
"full_name": "mattiapertusati\/htb-cctv",
"owner": {
"login": "mattiapertusati",
"id": 260771873,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/260771873?v=4",
"html_url": "https:\/\/github.com\/mattiapertusati",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mattiapertusati\/htb-cctv",
"description": "HackTheBox — CCTV (Easy\/Linux) | CVE-2024-51482 + SqlMap+ SSH Key + Root",
"fork": false,
"created_at": "2026-04-30T20:43:41Z",
"updated_at": "2026-05-01T17:27:38Z",
"pushed_at": "2026-05-01T17:27:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2024/CVE-2024-6387.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "32-bit PoC for CVE-2024-6387 — mirror of the original 7etsuo\/cve-2024-6387-poc",
"fork": false,
"created_at": "2024-07-01T12:16:21Z",
"updated_at": "2026-06-08T06:31:09Z",
"updated_at": "2026-07-08T21:38:00Z",
"pushed_at": "2024-07-01T12:25:01Z",
"stargazers_count": 381,
"watchers_count": 381,
"stargazers_count": 380,
"watchers_count": 380,
"has_discussions": false,
"forks_count": 85,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 85,
"watchers": 381,
"watchers": 380,
"score": 0,
"subscribers_count": 7
},
2024/CVE-2024-9166.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "A vulnerability scanner that searches for the CVE-2024-9166 vulnerability on websites, more info about this vulnerability here: https:\/\/www.tenable.com\/cve\/CVE-2024-9166",
"fork": false,
"created_at": "2024-09-26T23:21:06Z",
"updated_at": "2025-09-19T15:51:39Z",
"updated_at": "2026-07-08T19:15:50Z",
"pushed_at": "2024-10-01T02:46:37Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -36,7 +36,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 1
}
2025/CVE-2025-14558.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "FreeBSD rtsold DNSSL Command Injection (RCE)",
"fork": false,
"created_at": "2025-12-20T17:41:03Z",
"updated_at": "2026-07-07T09:46:58Z",
"updated_at": "2026-07-08T21:39:24Z",
"pushed_at": "2026-04-05T21:24:53Z",
"stargazers_count": 12,
"watchers_count": 12,
2025/CVE-2025-14847.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
"fork": false,
"created_at": "2025-07-30T15:52:00Z",
"updated_at": "2026-07-08T18:24:40Z",
"pushed_at": "2026-07-08T18:24:21Z",
"updated_at": "2026-07-08T23:51:55Z",
"pushed_at": "2026-07-08T23:51:52Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1129,8 +1129,8 @@
"description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
"fork": false,
"created_at": "2026-01-14T06:05:44Z",
"updated_at": "2026-07-08T18:23:57Z",
"pushed_at": "2026-07-08T18:23:46Z",
"updated_at": "2026-07-08T23:51:15Z",
"pushed_at": "2026-07-08T23:51:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-24257.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis",
"fork": false,
"created_at": "2026-04-04T03:42:55Z",
"updated_at": "2026-07-08T16:38:27Z",
"pushed_at": "2026-07-08T16:38:20Z",
"updated_at": "2026-07-09T00:32:42Z",
"pushed_at": "2026-07-09T00:32:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-31258.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔓 Explore CVE-2025-31258 with this PoC demonstrating partial sandbox escape using RemoteViewServices for practical 1-day security practice.",
"fork": false,
"created_at": "2020-06-23T15:20:11Z",
"updated_at": "2026-07-08T17:39:22Z",
"pushed_at": "2026-07-08T17:38:04Z",
"updated_at": "2026-07-08T23:08:27Z",
"pushed_at": "2026-07-08T23:08:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-31702.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Repository with tools, exploits, and material associated with the analysis and discovery process of CVE-2025-31702 and other related security issues.",
"fork": false,
"created_at": "2025-10-29T15:04:42Z",
"updated_at": "2026-07-07T02:00:40Z",
"updated_at": "2026-07-08T19:28:03Z",
"pushed_at": "2025-12-16T18:25:40Z",
"stargazers_count": 9,
"watchers_count": 9,
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -33,7 +33,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 9,
"watchers": 10,
"score": 0,
"subscribers_count": 1
}
2025/CVE-2025-32463.json
+2 -2
View File
@@ -1529,8 +1529,8 @@
"description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.",
"fork": false,
"created_at": "2025-09-20T00:42:07Z",
"updated_at": "2026-07-08T17:39:14Z",
"pushed_at": "2026-07-08T17:39:05Z",
"updated_at": "2026-07-08T23:09:24Z",
"pushed_at": "2026-07-08T23:09:20Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-36911.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Hijacking Bluetooth Accessories Using Google Fast Pair: WhisperPair CVE-2025-36911 Reference Implementation & Vulnerability Verification Toolkit",
"fork": false,
"created_at": "2026-01-17T01:18:36Z",
"updated_at": "2026-07-06T23:33:39Z",
"updated_at": "2026-07-08T19:13:46Z",
"pushed_at": "2026-05-28T08:12:40Z",
"stargazers_count": 100,
"watchers_count": 100,
"stargazers_count": 101,
"watchers_count": 101,
"has_discussions": false,
"forks_count": 17,
"allow_forking": true,
@@ -34,7 +34,7 @@
],
"visibility": "public",
"forks": 17,
"watchers": 100,
"watchers": 101,
"score": 0,
"subscribers_count": 5
},
2025/CVE-2025-48757.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Claude Skill that audits your projects for RLS misconfigurations, exposed keys, auth bypasses, and storage vulnerabilities. 27 anti-patterns sourced from CVE-2025-48757 and 10 security studies. Safe for production.",
"fork": false,
"created_at": "2026-03-15T14:49:30Z",
"updated_at": "2026-07-07T19:01:18Z",
"updated_at": "2026-07-08T21:28:53Z",
"pushed_at": "2026-04-30T08:42:55Z",
"stargazers_count": 38,
"watchers_count": 38,
"stargazers_count": 39,
"watchers_count": 39,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -44,7 +44,7 @@
],
"visibility": "public",
"forks": 5,
"watchers": 38,
"watchers": 39,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-49844.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.",
"fork": false,
"created_at": "2019-04-13T07:51:09Z",
"updated_at": "2026-07-08T17:52:21Z",
"pushed_at": "2026-07-08T17:52:17Z",
"updated_at": "2026-07-08T23:21:43Z",
"pushed_at": "2026-07-08T23:21:39Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
"fork": false,
"created_at": "2022-04-06T09:27:39Z",
"updated_at": "2026-07-08T17:52:57Z",
"pushed_at": "2026-07-08T17:52:52Z",
"updated_at": "2026-07-08T23:22:28Z",
"pushed_at": "2026-07-08T23:22:24Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-52915.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-07-08T02:32:16Z",
"updated_at": "2026-07-08T19:37:36Z",
"pushed_at": "2026-06-28T05:39:27Z",
"stargazers_count": 842,
"watchers_count": 842,
"stargazers_count": 843,
"watchers_count": 843,
"has_discussions": false,
"forks_count": 123,
"forks_count": 124,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -38,8 +38,8 @@
"vulnerable-driver"
],
"visibility": "public",
"forks": 123,
"watchers": 842,
"forks": 124,
"watchers": 843,
"score": 0,
"subscribers_count": 20
}
2025/CVE-2025-54424.json
+2 -2
View File
@@ -53,8 +53,8 @@
"description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐",
"fork": false,
"created_at": "2025-08-14T05:16:16Z",
"updated_at": "2026-07-08T17:33:57Z",
"pushed_at": "2026-07-08T17:33:53Z",
"updated_at": "2026-07-08T23:04:33Z",
"pushed_at": "2026-07-08T23:04:30Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2025/CVE-2025-55182.json
+10 -10
View File
@@ -14,8 +14,8 @@
"description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.",
"fork": false,
"created_at": "2022-06-17T10:19:10Z",
"updated_at": "2026-07-08T18:14:20Z",
"pushed_at": "2026-07-08T18:13:38Z",
"updated_at": "2026-07-08T23:41:48Z",
"pushed_at": "2026-07-08T23:41:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -99,8 +99,8 @@
"description": null,
"fork": false,
"created_at": "2024-11-29T12:32:19Z",
"updated_at": "2026-07-08T18:14:15Z",
"pushed_at": "2026-07-08T18:14:09Z",
"updated_at": "2026-07-08T23:42:17Z",
"pushed_at": "2026-07-08T23:42:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -148,8 +148,8 @@
"description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
"fork": false,
"created_at": "2025-06-06T16:34:46Z",
"updated_at": "2026-07-08T18:14:00Z",
"pushed_at": "2026-07-08T18:13:55Z",
"updated_at": "2026-07-08T23:41:59Z",
"pushed_at": "2026-07-08T23:41:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -11738,8 +11738,8 @@
"description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.",
"fork": false,
"created_at": "2025-12-24T14:48:19Z",
"updated_at": "2026-07-08T18:13:51Z",
"pushed_at": "2026-07-08T18:13:37Z",
"updated_at": "2026-07-08T23:41:45Z",
"pushed_at": "2026-07-08T23:41:41Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12256,8 +12256,8 @@
"description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
"fork": false,
"created_at": "2026-01-02T01:28:57Z",
"updated_at": "2026-07-08T18:17:45Z",
"pushed_at": "2026-07-08T18:17:36Z",
"updated_at": "2026-07-08T23:45:32Z",
"pushed_at": "2026-07-08T23:45:28Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-60787.json
-33
View File
@@ -207,38 +207,5 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1221820939,
"name": "CCTV-MACHINE",
"full_name": "Revnin\/CCTV-MACHINE",
"owner": {
"login": "Revnin",
"id": 154089274,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/154089274?v=4",
"html_url": "https:\/\/github.com\/Revnin",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Revnin\/CCTV-MACHINE",
"description": "A black box penetration test on HackTheBox's CCTV machine achieving full root compromise via four vulnerabilities: default credentials, SQL injection (CVE-2024-51482), password hash cracking, and Remote Code Execution in motionEye (CVE-2025-60787)",
"fork": false,
"created_at": "2026-04-26T18:14:06Z",
"updated_at": "2026-04-26T18:23:21Z",
"pushed_at": "2026-04-26T18:23:16Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-66398.json
+2 -2
View File
@@ -64,8 +64,8 @@
"description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.",
"fork": false,
"created_at": "2026-03-23T09:09:21Z",
"updated_at": "2026-07-08T16:32:25Z",
"pushed_at": "2026-07-08T16:32:20Z",
"updated_at": "2026-07-09T00:27:01Z",
"pushed_at": "2026-07-09T00:26:58Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-66478.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.",
"fork": false,
"created_at": "2025-10-01T07:40:09Z",
"updated_at": "2026-07-08T18:15:00Z",
"pushed_at": "2026-07-08T18:14:48Z",
"updated_at": "2026-07-08T23:42:54Z",
"pushed_at": "2026-07-08T23:42:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-68921.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.",
"fork": false,
"created_at": "2026-01-24T21:00:41Z",
"updated_at": "2026-07-08T18:30:59Z",
"pushed_at": "2026-07-08T18:29:41Z",
"updated_at": "2026-07-08T23:57:08Z",
"pushed_at": "2026-07-08T23:57:04Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-7771.json
+1 -1
View File
@@ -113,7 +113,7 @@
"description": "Arbitrary physical memory read\/write exploitation using ThrottleStop.sys (CVE-2025-7771) with superfetch address translation - Windows kernel security research",
"fork": false,
"created_at": "2025-11-13T22:26:38Z",
"updated_at": "2026-06-07T02:44:56Z",
"updated_at": "2026-07-08T18:59:41Z",
"pushed_at": "2025-11-13T22:32:11Z",
"stargazers_count": 14,
"watchers_count": 14,
2025/CVE-2025-8088.json
+6 -6
View File
@@ -598,12 +598,12 @@
"description": "A sophisticated GUI tool for creating malicious RAR archives that exploit the WinRAR path traversal vulnerability (CVE-2025-8088) using ADS and RAR5 header manipulation.",
"fork": false,
"created_at": "2025-09-04T13:33:07Z",
"updated_at": "2026-06-30T10:20:20Z",
"updated_at": "2026-07-08T20:26:37Z",
"pushed_at": "2025-09-04T13:46:26Z",
"stargazers_count": 43,
"watchers_count": 43,
"stargazers_count": 44,
"watchers_count": 44,
"has_discussions": false,
"forks_count": 15,
"forks_count": 16,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -611,8 +611,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 15,
"watchers": 43,
"forks": 16,
"watchers": 44,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-0091.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-0091, play with an issue in android window management to perform arbitrary code execution in Launcher process from adb",
"fork": false,
"created_at": "2026-05-25T03:41:43Z",
"updated_at": "2026-07-08T12:04:37Z",
"updated_at": "2026-07-08T20:04:34Z",
"pushed_at": "2026-07-05T07:55:49Z",
"stargazers_count": 21,
"watchers_count": 21,
"stargazers_count": 22,
"watchers_count": 22,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 21,
"watchers": 22,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-14762.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "CVE-2026-14762 exploit for Hotel & Tourism Reservation 1.0. Time-based blind SQL injection via \/admin\/rooms.php?delete. Dumps DB, tables, columns, reads files, writes webshells. Multi-threaded, proxy support, interactive shell. CVSS 7.3. Authorized testing only. By| @tc4dy",
"fork": false,
"created_at": "2026-07-07T12:20:08Z",
"updated_at": "2026-07-08T10:08:17Z",
"pushed_at": "2026-07-07T22:53:21Z",
"updated_at": "2026-07-08T19:33:49Z",
"pushed_at": "2026-07-08T19:33:40Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-20841.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.",
"fork": false,
"created_at": "2024-09-22T12:19:06Z",
"updated_at": "2026-07-08T18:46:50Z",
"pushed_at": "2026-07-08T18:45:32Z",
"updated_at": "2026-07-09T00:12:22Z",
"pushed_at": "2026-07-09T00:12:19Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.",
"fork": false,
"created_at": "2026-02-26T05:21:28Z",
"updated_at": "2026-07-08T18:44:53Z",
"pushed_at": "2026-07-08T18:44:48Z",
"updated_at": "2026-07-09T00:11:39Z",
"pushed_at": "2026-07-09T00:11:34Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-20896.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "CVE-2026-20896 Gitea Docker X-WEBAUTH-USER auth bypass checker",
"fork": false,
"created_at": "2026-07-07T20:31:16Z",
"updated_at": "2026-07-08T16:48:48Z",
"updated_at": "2026-07-08T22:21:10Z",
"pushed_at": "2026-07-07T20:31:19Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-24061.json
+2 -2
View File
@@ -59,8 +59,8 @@
"description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.",
"fork": false,
"created_at": "2026-02-03T19:46:10Z",
"updated_at": "2026-07-08T18:36:09Z",
"pushed_at": "2026-07-08T18:35:22Z",
"updated_at": "2026-07-09T00:02:39Z",
"pushed_at": "2026-07-09T00:02:34Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24291.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions",
"fork": false,
"created_at": "2026-03-26T04:38:27Z",
"updated_at": "2026-07-08T16:34:20Z",
"pushed_at": "2026-07-08T16:34:12Z",
"updated_at": "2026-07-09T00:28:43Z",
"pushed_at": "2026-07-09T00:28:39Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-2441.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.",
"fork": false,
"created_at": "2026-03-03T14:19:18Z",
"updated_at": "2026-07-08T18:48:22Z",
"pushed_at": "2026-07-08T18:48:01Z",
"updated_at": "2026-07-09T00:14:36Z",
"pushed_at": "2026-07-09T00:14:31Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-2472.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.",
"fork": false,
"created_at": "2026-03-10T14:40:04Z",
"updated_at": "2026-07-08T16:23:34Z",
"pushed_at": "2026-07-08T16:23:30Z",
"updated_at": "2026-07-09T00:18:56Z",
"pushed_at": "2026-07-09T00:18:52Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-31309.json
+3 -3
View File
@@ -11,11 +11,11 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Sch8ill\/CVE-2026-31309",
"description": null,
"description": "Broken Access Control in Mysterium Node TequilAPI before v1.36.0",
"fork": false,
"created_at": "2026-04-10T09:21:40Z",
"updated_at": "2026-07-05T07:30:27Z",
"pushed_at": "2026-07-05T07:22:33Z",
"updated_at": "2026-07-08T22:16:59Z",
"pushed_at": "2026-07-08T22:15:41Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-31431.json
+4 -37
View File
@@ -651,8 +651,8 @@
"description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.",
"fork": false,
"created_at": "2026-05-05T04:58:21Z",
"updated_at": "2026-07-08T16:54:42Z",
"pushed_at": "2026-07-08T16:54:35Z",
"updated_at": "2026-07-09T00:47:30Z",
"pushed_at": "2026-07-09T00:47:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -700,8 +700,8 @@
"description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.",
"fork": false,
"created_at": "2026-05-06T09:49:14Z",
"updated_at": "2026-07-08T16:55:37Z",
"pushed_at": "2026-07-08T16:55:14Z",
"updated_at": "2026-07-09T00:48:02Z",
"pushed_at": "2026-07-09T00:47:59Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
@@ -1064,39 +1064,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1236764293,
"name": "copyfail-fix",
"full_name": "hyz-is\/copyfail-fix",
"owner": {
"login": "hyz-is",
"id": 209261759,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/209261759?v=4",
"html_url": "https:\/\/github.com\/hyz-is",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/hyz-is\/copyfail-fix",
"description": "Quick mitigation and patch script for CVE-2026-31431 (Copy Fail) on Ubuntu\/Debian VPS",
"fork": false,
"created_at": "2026-05-12T14:50:38Z",
"updated_at": "2026-06-12T18:12:45Z",
"pushed_at": "2026-05-12T15:25:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1237022452,
"name": "CVE-2026-31431-copyfail-aarch64",
2026/CVE-2026-31635.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": null,
"fork": false,
"created_at": "2026-05-21T12:37:54Z",
"updated_at": "2026-07-04T05:00:20Z",
"updated_at": "2026-07-08T22:01:33Z",
"pushed_at": "2026-05-21T14:26:34Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-31802.json
+5 -5
View File
@@ -14,10 +14,10 @@
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"fork": false,
"created_at": "2026-03-28T20:49:46Z",
"updated_at": "2026-07-08T16:36:26Z",
"pushed_at": "2026-07-08T16:35:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"updated_at": "2026-07-09T00:29:52Z",
"pushed_at": "2026-07-09T00:29:49Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -40,7 +40,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-34908.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Safely detect whether a UniFi OS Server is vulnerable to CVE-2026-34908",
"fork": false,
"created_at": "2026-06-05T20:28:38Z",
"updated_at": "2026-07-08T12:24:00Z",
"updated_at": "2026-07-08T19:57:38Z",
"pushed_at": "2026-06-05T20:28:52Z",
"stargazers_count": 61,
"watchers_count": 61,
"stargazers_count": 62,
"watchers_count": 62,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 61,
"watchers": 62,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-3609.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-07-08T02:32:16Z",
"updated_at": "2026-07-08T19:37:36Z",
"pushed_at": "2026-06-28T05:39:27Z",
"stargazers_count": 842,
"watchers_count": 842,
"stargazers_count": 843,
"watchers_count": 843,
"has_discussions": false,
"forks_count": 123,
"forks_count": 124,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -38,8 +38,8 @@
"vulnerable-driver"
],
"visibility": "public",
"forks": 123,
"watchers": 842,
"forks": 124,
"watchers": 843,
"score": 0,
"subscribers_count": 20
}
2026/CVE-2026-41940.json
+2 -2
View File
@@ -258,8 +258,8 @@
"description": "Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.",
"fork": false,
"created_at": "2026-05-06T18:08:48Z",
"updated_at": "2026-07-08T16:56:00Z",
"pushed_at": "2026-07-08T16:55:35Z",
"updated_at": "2026-07-09T00:48:21Z",
"pushed_at": "2026-07-09T00:48:17Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-43499.json
+70 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-43499 PoC",
"fork": false,
"created_at": "2026-06-27T04:09:11Z",
"updated_at": "2026-07-08T18:31:12Z",
"updated_at": "2026-07-09T00:44:11Z",
"pushed_at": "2026-06-27T05:04:04Z",
"stargazers_count": 43,
"watchers_count": 43,
"stargazers_count": 48,
"watchers_count": 48,
"has_discussions": false,
"forks_count": 10,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 10,
"watchers": 43,
"watchers": 48,
"score": 0,
"subscribers_count": 0
},
@@ -64,5 +64,71 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1294407597,
"name": "CVE-2026-43499",
"full_name": "0xBlackash\/CVE-2026-43499",
"owner": {
"login": "0xBlackash",
"id": 259905299,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/259905299?v=4",
"html_url": "https:\/\/github.com\/0xBlackash",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xBlackash\/CVE-2026-43499",
"description": "CVE-2026-43499",
"fork": false,
"created_at": "2026-07-08T23:50:22Z",
"updated_at": "2026-07-08T23:50:26Z",
"pushed_at": "2026-07-08T23:50:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1294461583,
"name": "CVE-2026-43499-armv7",
"full_name": "tc3650\/CVE-2026-43499-armv7",
"owner": {
"login": "tc3650",
"id": 209333966,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/209333966?v=4",
"html_url": "https:\/\/github.com\/tc3650",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/tc3650\/CVE-2026-43499-armv7",
"description": null,
"fork": false,
"created_at": "2026-07-09T00:41:15Z",
"updated_at": "2026-07-09T00:41:24Z",
"pushed_at": "2026-07-09T00:41:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-43503.json
+8 -8
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-43503",
"fork": false,
"created_at": "2026-06-25T21:58:41Z",
"updated_at": "2026-07-07T05:09:24Z",
"updated_at": "2026-07-08T22:01:25Z",
"pushed_at": "2026-06-25T22:42:25Z",
"stargazers_count": 18,
"watchers_count": 18,
"stargazers_count": 19,
"watchers_count": 19,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 18,
"watchers": 19,
"score": 0,
"subscribers_count": 0
},
@@ -80,10 +80,10 @@
"description": null,
"fork": false,
"created_at": "2026-06-26T11:06:01Z",
"updated_at": "2026-07-03T16:55:14Z",
"updated_at": "2026-07-08T22:48:13Z",
"pushed_at": "2026-06-26T11:09:41Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-45585.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Manage and recover BitLocker encrypted drives with this tool for Windows 11 recovery key management and educational study of CVE-2026-45585.",
"fork": false,
"created_at": "2026-06-16T07:21:36Z",
"updated_at": "2026-07-08T17:03:53Z",
"pushed_at": "2026-07-08T17:02:27Z",
"updated_at": "2026-07-08T22:34:36Z",
"pushed_at": "2026-07-08T22:34:31Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-48282.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": null,
"fork": false,
"created_at": "2026-07-06T12:57:37Z",
"updated_at": "2026-07-08T09:57:17Z",
"updated_at": "2026-07-09T00:00:30Z",
"pushed_at": "2026-07-07T14:28:17Z",
"stargazers_count": 11,
"watchers_count": 11,
"stargazers_count": 12,
"watchers_count": 12,
"has_discussions": false,
"forks_count": 2,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 11,
"forks": 3,
"watchers": 12,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-50131.json
+40
View File
@@ -0,0 +1,40 @@
[
{
"id": 1294450250,
"name": "CVE-2026-50131",
"full_name": "chaitanyagarware\/CVE-2026-50131",
"owner": {
"login": "chaitanyagarware",
"id": 97582002,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97582002?v=4",
"html_url": "https:\/\/github.com\/chaitanyagarware",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/chaitanyagarware\/CVE-2026-50131",
"description": "CVE-2026-50131 \/ GHSA-xw9q-2mv6-9fr8: Fedify incomplete SSRF mitigation advisory landing page",
"fork": false,
"created_at": "2026-07-09T00:30:45Z",
"updated_at": "2026-07-09T00:49:56Z",
"pushed_at": "2026-07-09T00:31:55Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"ghsa",
"security-advisory",
"vulnerability-research"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-50181.json
+40
View File
@@ -0,0 +1,40 @@
[
{
"id": 1294450342,
"name": "CVE-2026-50181",
"full_name": "chaitanyagarware\/CVE-2026-50181",
"owner": {
"login": "chaitanyagarware",
"id": 97582002,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97582002?v=4",
"html_url": "https:\/\/github.com\/chaitanyagarware",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/chaitanyagarware\/CVE-2026-50181",
"description": "CVE-2026-50181 \/ GHSA-fg23-3346-88f5: Langroid path traversal advisory landing page",
"fork": false,
"created_at": "2026-07-09T00:30:51Z",
"updated_at": "2026-07-09T00:49:58Z",
"pushed_at": "2026-07-09T00:31:59Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"ghsa",
"security-advisory",
"vulnerability-research"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-51788.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": null,
"fork": false,
"created_at": "2026-07-08T16:46:45Z",
"updated_at": "2026-07-08T16:58:32Z",
"pushed_at": "2026-07-08T16:57:36Z",
"updated_at": "2026-07-08T23:24:58Z",
"pushed_at": "2026-07-08T23:24:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-52658.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1284466902,
"name": "CVE-2026-52658",
"full_name": "mirackayikci\/CVE-2026-52658",
"owner": {
"login": "mirackayikci",
"id": 134744464,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/134744464?v=4",
"html_url": "https:\/\/github.com\/mirackayikci",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mirackayikci\/CVE-2026-52658",
"description": "CVE-2026-52658 — AureusERP Stored XSS",
"fork": false,
"created_at": "2026-06-29T22:27:47Z",
"updated_at": "2026-07-08T19:58:41Z",
"pushed_at": "2026-07-08T19:57:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-54519.json
+40
View File
@@ -0,0 +1,40 @@
[
{
"id": 1294450421,
"name": "CVE-2026-54519",
"full_name": "chaitanyagarware\/CVE-2026-54519",
"owner": {
"login": "chaitanyagarware",
"id": 97582002,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97582002?v=4",
"html_url": "https:\/\/github.com\/chaitanyagarware",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/chaitanyagarware\/CVE-2026-54519",
"description": "CVE-2026-54519 \/ GHSA-qv97-83w4-ff86: ai-agent-automation memory authorization advisory landing page",
"fork": false,
"created_at": "2026-07-09T00:30:56Z",
"updated_at": "2026-07-09T00:50:01Z",
"pushed_at": "2026-07-09T00:32:01Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"ghsa",
"security-advisory",
"vulnerability-research"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-54520.json
+40
View File
@@ -0,0 +1,40 @@
[
{
"id": 1294450488,
"name": "CVE-2026-54520",
"full_name": "chaitanyagarware\/CVE-2026-54520",
"owner": {
"login": "chaitanyagarware",
"id": 97582002,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97582002?v=4",
"html_url": "https:\/\/github.com\/chaitanyagarware",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/chaitanyagarware\/CVE-2026-54520",
"description": "CVE-2026-54520 \/ GHSA-cm8g-8jfq-887p: ai-agent-automation workflow path traversal advisory landing page",
"fork": false,
"created_at": "2026-07-09T00:31:01Z",
"updated_at": "2026-07-09T00:50:02Z",
"pushed_at": "2026-07-09T00:32:04Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"ghsa",
"security-advisory",
"vulnerability-research"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
README.md
+43 -11
View File
@@ -2040,7 +2040,11 @@
- [0xrixet/Craftcms-PoC-CVE-2026-31266](https://github.com/0xrixet/Craftcms-PoC-CVE-2026-31266)
### CVE-2026-31309
### CVE-2026-31309 (2026-07-08)
<code>Improper authorization in the /tequilapi/config/user endpoint of Mysterium Node before v1.36.0 allows unauthenticated attackers to arbitrarily overwrite the node's configuration and achieve a full node takeover via supplying a crafted POST request.
</code>
- [Sch8ill/CVE-2026-31309](https://github.com/Sch8ill/CVE-2026-31309)
### CVE-2026-31431 (2026-04-22)
@@ -2077,7 +2081,6 @@
- [Lutfifakee-Project/CVE-2026-31431](https://github.com/Lutfifakee-Project/CVE-2026-31431)
- [mauricioportela/CVE-2026-31431-Analysis](https://github.com/mauricioportela/CVE-2026-31431-Analysis)
- [gbonacini/CVE-2026-31431](https://github.com/gbonacini/CVE-2026-31431)
- [hyz-is/copyfail-fix](https://github.com/hyz-is/copyfail-fix)
- [sh4den/CVE-2026-31431-copyfail-aarch64](https://github.com/sh4den/CVE-2026-31431-copyfail-aarch64)
- [DroPZsec/SplicePrivillegeEscalationFIX](https://github.com/DroPZsec/SplicePrivillegeEscalationFIX)
- [Koshmare-Blossom/Copyfail-sh](https://github.com/Koshmare-Blossom/Copyfail-sh)
@@ -2477,7 +2480,11 @@
- [PwnOnu/T3-Technology-CPE-Advisories](https://github.com/PwnOnu/T3-Technology-CPE-Advisories)
### CVE-2026-36027
### CVE-2026-36027 (2026-07-08)
<code>An issue in Code27 Companion Hub SQ3A.220705.003.A1 allows a physically proximate attacker to execute arbitrary code via the USB debugging (ADB) and Android Debug Bridge components
</code>
- [redr0nin/Code-27-Companion-Hub-Exploits](https://github.com/redr0nin/Code-27-Companion-Hub-Exploits)
### CVE-2026-36213 (2026-06-15)
@@ -3240,6 +3247,8 @@
- [MobiusM/CVE-2026-43499](https://github.com/MobiusM/CVE-2026-43499)
- [HORKimhab/CVE-2026-43499](https://github.com/HORKimhab/CVE-2026-43499)
- [0xBlackash/CVE-2026-43499](https://github.com/0xBlackash/CVE-2026-43499)
- [tc3650/CVE-2026-43499-armv7](https://github.com/tc3650/CVE-2026-43499-armv7)
### CVE-2026-43500 (2026-05-11)
@@ -4070,7 +4079,7 @@
### CVE-2026-49468 (2026-06-22)
<code>LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, This vulnerability is fixed in 1.84.0.
<code>LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, a Host-header parsing flaw in the LiteLLM proxy could, under specific conditions, allow unauthenticated access to protected management routes. The auth layer derived the effective route from request.url.path in litellm/proxy/auth/auth_utils.py::get_request_route(), which Starlette reconstructs from the Host header. A crafted Host could therefore make the auth gate evaluate a different route from the one FastAPI dispatched. This vulnerability is fixed in 1.84.0.
</code>
- [BiiTts/CVE-2026-49468-LiteLLM-Auth-Bypass](https://github.com/BiiTts/CVE-2026-49468-LiteLLM-Auth-Bypass)
@@ -4145,9 +4154,19 @@
- [0xc03307b/CVE-2026-49975](https://github.com/0xc03307b/CVE-2026-49975)
- [Manisso/http2-bomb](https://github.com/Manisso/http2-bomb)
### CVE-2026-50131 (2026-06-10)
<code>Fedify is a TypeScript library for building federated server apps powered by ActivityPub. Fedify previously addressed SSRF/internal network access in GHSA-p9cg-vqcc-grcx by adding public URL validation before runtime document and media fetching. However, the IPv4 validation logic present starting in version 0.11.2 and prior to versions 1.9.12, 1.10.11, 2.0.19, 2.1.15, and 2.2.4 appears incomplete. The `validatePublicUrl()` protection relies on `isValidPublicIPv4Address()` to reject non-public IPv4 destinations. The function blocks common private and local ranges such as `10.0.0.0/8`, `127.0.0.0/8`, `169.254.0.0/16`, `172.16.0.0/12`, and `192.168.0.0/16`, but it still treats several special-use, reserved, multicast, benchmarking, and carrier-grade NAT IPv4 ranges as valid public destinations. Because this validation is used as an SSRF defense before outbound fetches, this appears to be an incomplete mitigation or bypass class for the previous SSRF issue. Versions 1.9.12, 1.10.11, 2.0.19, 2.1.15, and 2.2.4 contain an updated patch.
</code>
- [chaitanyagarware/CVE-2026-50131](https://github.com/chaitanyagarware/CVE-2026-50131)
### CVE-2026-50142
- [MuhammedHussein17/libheif-cve-2026-50142](https://github.com/MuhammedHussein17/libheif-cve-2026-50142)
### CVE-2026-50181
- [chaitanyagarware/CVE-2026-50181](https://github.com/chaitanyagarware/CVE-2026-50181)
### CVE-2026-50229 (2026-06-29)
<code>Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in the number guess example for Apache Tomcat.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M1 through 10.1.55, from 9.0.0.M1 through 9.0.118, from 8.5.0 through 8.5.100, from 7.0.0 through 7.0.109. Other versions that have reached end of support may also be affected.\n\nUsers are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119, which fix the issue.
@@ -4157,14 +4176,14 @@
### CVE-2026-50507 (2026-06-09)
<code>Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
<code>Missing authentication for critical function in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
</code>
- [HORKimhab/CVE-2026-50507](https://github.com/HORKimhab/CVE-2026-50507)
### CVE-2026-50656 (2026-06-16)
<code>Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as &amp;quot;RoguePlanet &amp;quot;. We are working to provide a high quality security update that addresses this vulnerability. We will provide information in this CVE when the update is available.
<code>Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as &amp;quot;RoguePlanet &amp;quot;.
</code>
- [0xBlackash/CVE-2026-50656](https://github.com/0xBlackash/CVE-2026-50656)
@@ -4198,6 +4217,9 @@
### CVE-2026-52217
- [teteco/CVE-2026-52217-VTEX-Checkout-CrossTenant-IDOR](https://github.com/teteco/CVE-2026-52217-VTEX-Checkout-CrossTenant-IDOR)
### CVE-2026-52658
- [mirackayikci/CVE-2026-52658](https://github.com/mirackayikci/CVE-2026-52658)
### CVE-2026-52806 (2026-06-24)
<code>Gogs is an open source self-hosted Git service. Prior to 0.14.3, Gogs allows authenticated users to achieve Remote Code Execution (RCE) on the server by creating a pull request with a specially crafted branch name that injects the --exec flag into the git rebase command during the &quot;Rebase before merging&quot; merge operation. This vulnerability is fixed in 0.14.3.
@@ -4354,6 +4376,12 @@
- [MichaelAdamGroberman/CVE-2026-54477](https://github.com/MichaelAdamGroberman/CVE-2026-54477)
### CVE-2026-54519
- [chaitanyagarware/CVE-2026-54519](https://github.com/chaitanyagarware/CVE-2026-54519)
### CVE-2026-54520
- [chaitanyagarware/CVE-2026-54520](https://github.com/chaitanyagarware/CVE-2026-54520)
### CVE-2026-54596
- [iltosec/CVE-2026-54596](https://github.com/iltosec/CVE-2026-54596)
@@ -14247,7 +14275,6 @@
- [lil0xplorer/CVE-2025-60787_PoC](https://github.com/lil0xplorer/CVE-2025-60787_PoC)
- [d3vn0mi/CVE-2025-60787-POC](https://github.com/d3vn0mi/CVE-2025-60787-POC)
- [agent-skywalker/CVE-2025-60787](https://github.com/agent-skywalker/CVE-2025-60787)
- [Revnin/CCTV-MACHINE](https://github.com/Revnin/CCTV-MACHINE)
### CVE-2025-60852 (2025-10-23)
@@ -19496,6 +19523,13 @@
- [Nxploited/CVE-2024-12542-PoC](https://github.com/Nxploited/CVE-2024-12542-PoC)
### CVE-2024-12558 (2024-12-21)
<code>The WP BASE Booking of Appointments, Services and Events plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the export_db function in all versions up to, and including, 4.9.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to expose sensitive information from the database, such as the hashed administrator password.
</code>
- [Nxploited/CVE-2024-12558-exploit](https://github.com/Nxploited/CVE-2024-12558-exploit)
### CVE-2024-12583 (2025-01-04)
<code>The Dynamics 365 Integration plugin for WordPress is vulnerable to Remote Code Execution and Arbitrary File Read in all versions up to, and including, 1.3.23 via Twig Server-Side Template Injection. This is due to missing input validation and sanitization on the render function. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server.
@@ -24393,6 +24427,7 @@
- [watchtowrlabs/Mitel-MiCollab-Auth-Bypass_CVE-2024-41713](https://github.com/watchtowrlabs/Mitel-MiCollab-Auth-Bypass_CVE-2024-41713)
- [zxj-hub/CVE-2024-41713POC](https://github.com/zxj-hub/CVE-2024-41713POC)
- [Sanandd/cve-2024-CVE-2024-41713](https://github.com/Sanandd/cve-2024-CVE-2024-41713)
- [amanverma-wsu/CVE-2024-41713-Scan](https://github.com/amanverma-wsu/CVE-2024-41713-Scan)
- [gunyakit/CVE-2024-41713-PoC-exploit](https://github.com/gunyakit/CVE-2024-41713-PoC-exploit)
### CVE-2024-41817 (2024-07-29)
@@ -26226,9 +26261,7 @@
- [Ravi-lk/CVE-2024-51482-ZoneMinder-v1.37.-1.37.64-SQL-Injection-POC](https://github.com/Ravi-lk/CVE-2024-51482-ZoneMinder-v1.37.-1.37.64-SQL-Injection-POC)
- [lnn0v4/sqli-hunter-CVE-2024-51482-PoC](https://github.com/lnn0v4/sqli-hunter-CVE-2024-51482-PoC)
- [Erhui-Li/CVE-2024-51482-ZoneMinder-CCTV-HTB-Reliable-EXP](https://github.com/Erhui-Li/CVE-2024-51482-ZoneMinder-CCTV-HTB-Reliable-EXP)
- [Revnin/CCTV-MACHINE](https://github.com/Revnin/CCTV-MACHINE)
- [0xDaeras/CVE-2024-51482-POC](https://github.com/0xDaeras/CVE-2024-51482-POC)
- [mattiapertusati/htb-cctv](https://github.com/mattiapertusati/htb-cctv)
### CVE-2024-51567 (2024-10-29)
@@ -27427,6 +27460,7 @@
- [julianertle/CVE-2023-0386-CTF](https://github.com/julianertle/CVE-2023-0386-CTF)
- [anxs3c/TwoMillion-Machine](https://github.com/anxs3c/TwoMillion-Machine)
- [pwncone/CVE-2023-0386-OverlayFS](https://github.com/pwncone/CVE-2023-0386-OverlayFS)
- [Cosm3No1de/TwoMillion-HTB-Write-up](https://github.com/Cosm3No1de/TwoMillion-HTB-Write-up)
### CVE-2023-0400 (2023-02-01)
@@ -29754,7 +29788,6 @@
- [Avento/CVE-2023-22527_Confluence_RCE](https://github.com/Avento/CVE-2023-22527_Confluence_RCE)
- [thanhlam-attt/CVE-2023-22527](https://github.com/thanhlam-attt/CVE-2023-22527)
- [Manh130902/CVE-2023-22527-POC](https://github.com/Manh130902/CVE-2023-22527-POC)
- [Vozec/CVE-2023-22527](https://github.com/Vozec/CVE-2023-22527)
- [Niuwoo/CVE-2023-22527](https://github.com/Niuwoo/CVE-2023-22527)
- [Chocapikk/CVE-2023-22527](https://github.com/Chocapikk/CVE-2023-22527)
- [RevoltSecurities/CVE-2023-22527](https://github.com/RevoltSecurities/CVE-2023-22527)
@@ -57959,7 +57992,6 @@
- [ELIZEUOPAIN/CVE-2019-9053-CMS-Made-Simple-2.2.10---SQL-Injection-Exploit](https://github.com/ELIZEUOPAIN/CVE-2019-9053-CMS-Made-Simple-2.2.10---SQL-Injection-Exploit)
- [Mahamedm/CVE-2019-9053-Exploit-Python-3](https://github.com/Mahamedm/CVE-2019-9053-Exploit-Python-3)
- [im-suman-roy/CVE-2019-9053](https://github.com/im-suman-roy/CVE-2019-9053)
- [bthnrml/guncel-cve-2019-9053.py](https://github.com/bthnrml/guncel-cve-2019-9053.py)
- [kahluri/CVE-2019-9053](https://github.com/kahluri/CVE-2019-9053)
- [fernandobortotti/CVE-2019-9053](https://github.com/fernandobortotti/CVE-2019-9053)
- [byrek/CVE-2019-9053](https://github.com/byrek/CVE-2019-9053)