nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/10/21 07:46:44

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-10-21 16:46:44 +09:00
1 parent f861c5b7a6
commit 9e0a35e9d6
56 files changed
+1085 -474
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2006/CVE-2006-5051.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 35,
"watchers_count": 35,
"has_discussions": false,
"forks_count": 8,
"forks_count": 7,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -33,7 +33,7 @@
"ssh-server"
],
"visibility": "public",
"forks": 8,
"forks": 7,
"watchers": 35,
"score": 0,
"subscribers_count": 1
2008/CVE-2008-4109.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 35,
"watchers_count": 35,
"has_discussions": false,
"forks_count": 8,
"forks_count": 7,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -33,7 +33,7 @@
"ssh-server"
],
"visibility": "public",
"forks": 8,
"forks": 7,
"watchers": 35,
"score": 0,
"subscribers_count": 1
2017/CVE-2017-0199.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF\/PPSX file and deliver metasploit \/ meterpreter \/ other payload to victim without any complex configuration.",
"fork": false,
"created_at": "2017-04-17T08:10:07Z",
"updated_at": "2026-10-20T19:03:06Z",
"updated_at": "2026-10-21T05:51:01Z",
"pushed_at": "2017-11-19T11:01:16Z",
"stargazers_count": 725,
"watchers_count": 725,
"stargazers_count": 726,
"watchers_count": 726,
"has_discussions": false,
"forks_count": 254,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 254,
"watchers": 725,
"watchers": 726,
"score": 0,
"subscribers_count": 44
},
2019/CVE-2019-11358.json
+4 -4
View File
@@ -133,10 +133,10 @@
"description": "NOTICE This repository contains the public FTC SDK for the SKYSTONE (2019-2020) competition season. If you are looking for the current season's FTC SDK software, please visit the new and permanent home of the public FTC SDK: FtcRobotController repository Welcome! This GitHub repository contains the source code that is used to build an Android app to control a FIRST Tech Challenge competition robot. To use this SDK, download\/clone the entire project to your local computer. Getting Started If you are new to robotics or new to the FIRST Tech Challenge, then you should consider reviewing the FTC Blocks Tutorial to get familiar with how to use the control system: FTC Blocks Online Tutorial Even if you are an advanced Java programmer, it is helpful to start with the FTC Blocks tutorial, and then migrate to the OnBot Java Tool or to Android Studio afterwards. Downloading the Project If you are an Android Studio programmer, there are several ways to download this repo. Note that if you use the Blocks or OnBot Java Tool to program your robot, then you do not need to download this repository. If you are a git user, you can clone the most current version of the repository: git clone https:\/\/github.com\/FIRST-Tech-Challenge\/SKYSTONE.git Or, if you prefer, you can use the \"Download Zip\" button available through the main repository page. Downloading the project as a .ZIP file will keep the size of the download manageable. You can also download the project folder (as a .zip or .tar.gz archive file) from the Downloads subsection of the Releases page for this repository. Once you have downloaded and uncompressed (if needed) your folder, you can use Android Studio to import the folder (\"Import project (Eclipse ADT, Gradle, etc.)\"). Getting Help User Documentation and Tutorials FIRST maintains online documentation with information and tutorials on how to use the FIRST Tech Challenge software and robot control system. You can access this documentation using the following link: SKYSTONE Online Documentation Note that the online documentation is an \"evergreen\" document that is constantly being updated and edited. It contains the most current information about the FIRST Tech Challenge software and control system. Javadoc Reference Material The Javadoc reference documentation for the FTC SDK is now available online. Click on the following link to view the FTC SDK Javadoc documentation as a live website: FTC Javadoc Documentation Documentation for the FTC SDK is also included with this repository. There is a subfolder called \"doc\" which contains several subfolders: The folder \"apk\" contains the .apk files for the FTC Driver Station and FTC Robot Controller apps. The folder \"javadoc\" contains the JavaDoc user documentation for the FTC SDK. Online User Forum For technical questions regarding the Control System or the FTC SDK, please visit the FTC Technology forum: FTC Technology Forum Release Information Version 5.5 (20200824-090813) Version 5.5 requires Android Studio 4.0 or later. New features Adds support for calling custom Java classes from Blocks OpModes (fixes SkyStone issue #161). Classes must be in the org.firstinspires.ftc.teamcode package. Methods must be public static and have no more than 21 parameters. Parameters declared as OpMode, LinearOpMode, Telemetry, and HardwareMap are supported and the argument is provided automatically, regardless of the order of the parameters. On the block, the sockets for those parameters are automatically filled in. Parameters declared as char or java.lang.Character will accept any block that returns text and will only use the first character in the text. Parameters declared as boolean or java.lang.Boolean will accept any block that returns boolean. Parameters declared as byte, java.lang.Byte, short, java.lang.Short, int, java.lang.Integer, long, or java.lang.Long, will accept any block that returns a number and will round that value to the nearest whole number. Parameters declared as float, java.lang.Float, double, java.lang.Double will accept any block that returns a number. Adds telemetry API method for setting display format Classic Monospace HTML (certain tags only) Adds blocks support for switching cameras. Adds Blocks support for TensorFlow Object Detection with a custom model. Adds support for uploading a custom TensorFlow Object Detection model in the Manage page, which is especially useful for Blocks and OnBotJava users. Shows new Control Hub blink codes when the WiFi band is switched using the Control Hub's button (only possible on Control Hub OS 1.1.2) Adds new warnings which can be disabled in the Advanced RC Settings Mismatched app versions warning Unnecessary 2.4 GHz WiFi usage warning REV Hub is running outdated firmware (older than version 1.8.2) Adds support for Sony PS4 gamepad, and reworks how gamepads work on the Driver Station Removes preference which sets gamepad type baseLine truncated
"fork": false,
"created_at": "2021-03-08T11:34:11Z",
"updated_at": "2026-10-20T21:42:46Z",
"updated_at": "2026-10-21T01:46:03Z",
"pushed_at": "2024-04-12T05:48:35Z",
"stargazers_count": 318,
"watchers_count": 318,
"stargazers_count": 319,
"watchers_count": 319,
"has_discussions": false,
"forks_count": 92,
"allow_forking": true,
@@ -147,7 +147,7 @@
"topics": [],
"visibility": "public",
"forks": 92,
"watchers": 318,
"watchers": 319,
"score": 0,
"subscribers_count": 15
},
2019/CVE-2019-2215.json
+1 -1
View File
@@ -1158,7 +1158,7 @@
"fork": false,
"created_at": "2026-10-20T10:09:03Z",
"updated_at": "2026-10-20T11:14:23Z",
"pushed_at": "2026-10-20T11:14:18Z",
"pushed_at": "2026-10-21T04:09:46Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2019/CVE-2019-5736.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 658,
"watchers_count": 658,
"has_discussions": false,
"forks_count": 163,
"forks_count": 164,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 163,
"forks": 164,
"watchers": 658,
"score": 0,
"subscribers_count": 1
2020/CVE-2020-14008.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "CVE-2020-14008 - ManageEngine Applications Manager RCE",
"fork": false,
"created_at": "2026-05-09T15:32:13Z",
"updated_at": "2026-09-10T02:14:12Z",
"updated_at": "2026-10-21T00:52:35Z",
"pushed_at": "2026-05-09T15:38:07Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
2020/CVE-2020-35489.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 32,
"watchers_count": 32,
"has_discussions": false,
"forks_count": 16,
"forks_count": 15,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -33,7 +33,7 @@
"wordpress-plugin"
],
"visibility": "public",
"forks": 16,
"forks": 15,
"watchers": 32,
"score": 0,
"subscribers_count": 1
2021/CVE-2021-21974.json
+4 -4
View File
@@ -212,10 +212,10 @@
"description": "自研针对ESXI 堆栈溢出的CVE-2021-21974 POC，只支持项目给出的的目标和环境，用于学习和研究",
"fork": false,
"created_at": "2026-07-08T07:52:01Z",
"updated_at": "2026-08-13T09:35:28Z",
"updated_at": "2026-10-21T03:06:25Z",
"pushed_at": "2026-07-09T07:59:18Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -226,7 +226,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 0
}
2021/CVE-2021-41773.json
+2 -2
View File
@@ -5890,8 +5890,8 @@
"description": "Secure REST API with CI\/CD and CVE-2021-41773 analysis",
"fork": false,
"created_at": "2026-10-20T03:40:56Z",
"updated_at": "2026-10-20T03:56:18Z",
"pushed_at": "2026-10-20T03:56:14Z",
"updated_at": "2026-10-21T03:23:04Z",
"pushed_at": "2026-10-21T03:23:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2021/CVE-2021-44228.json
+34 -1
View File
@@ -15541,7 +15541,7 @@
"fork": false,
"created_at": "2026-09-18T18:28:53Z",
"updated_at": "2026-10-20T07:12:17Z",
"pushed_at": "2026-10-20T07:12:13Z",
"pushed_at": "2026-10-21T02:39:13Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -15821,5 +15821,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1427894257,
"name": "log4shell-drill",
"full_name": "mcpmark-eval-liuhezi\/log4shell-drill",
"owner": {
"login": "mcpmark-eval-liuhezi",
"id": 305407873,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/305407873?v=4",
"html_url": "https:\/\/github.com\/mcpmark-eval-liuhezi",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mcpmark-eval-liuhezi\/log4shell-drill",
"description": "Incident-response tabletop exercise artifacts for the Log4Shell (CVE-2021-44228) drill",
"fork": false,
"created_at": "2026-10-21T04:55:21Z",
"updated_at": "2026-10-21T04:56:25Z",
"pushed_at": "2026-10-21T04:57:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2023/CVE-2023-32434.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Deterministic kernel exploit based on CVE-2023-32434.",
"fork": false,
"created_at": "2025-03-01T23:07:37Z",
"updated_at": "2026-10-20T07:22:59Z",
"updated_at": "2026-10-21T06:11:55Z",
"pushed_at": "2026-10-17T11:47:41Z",
"stargazers_count": 154,
"watchers_count": 154,
"stargazers_count": 155,
"watchers_count": 155,
"has_discussions": false,
"forks_count": 19,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 19,
"watchers": 154,
"watchers": 155,
"score": 0,
"subscribers_count": 5
},
2023/CVE-2023-46014.json
+1 -1
View File
@@ -74,6 +74,6 @@
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
"subscribers_count": 1
}
]
2023/CVE-2023-46023.json
+1 -1
View File
@@ -35,6 +35,6 @@
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
"subscribers_count": 1
}
]
2023/CVE-2023-46024.json
+1 -1
View File
@@ -36,6 +36,6 @@
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
"subscribers_count": 1
}
]
2023/CVE-2023-46580.json
+1 -1
View File
@@ -36,6 +36,6 @@
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
"subscribers_count": 1
}
]
2023/CVE-2023-47250.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1427872104,
"name": "CVE-2023-47250-break-fix",
"full_name": "christinasm1th\/CVE-2023-47250-break-fix",
"owner": {
"login": "christinasm1th",
"id": 119090940,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/119090940?v=4",
"html_url": "https:\/\/github.com\/christinasm1th",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/christinasm1th\/CVE-2023-47250-break-fix",
"description": "Controlled break-fix demo and Bash automation for CVE-2023-47250, an X11 session access-control vulnerability (Kali Linux).",
"fork": false,
"created_at": "2026-10-21T04:24:11Z",
"updated_at": "2026-10-21T04:36:18Z",
"pushed_at": "2026-10-21T04:24:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2024/CVE-2024-12986.json
+1 -1
View File
@@ -30,6 +30,6 @@
"forks": 0,
"watchers": 175,
"score": 0,
"subscribers_count": 187
"subscribers_count": 173
}
]
2025/CVE-2025-14847.json
+4 -4
View File
@@ -1336,10 +1336,10 @@
"description": "CVE-2025-14847 mongobleed python file ",
"fork": false,
"created_at": "2026-06-14T15:17:12Z",
"updated_at": "2026-10-20T08:04:56Z",
"updated_at": "2026-10-21T01:55:26Z",
"pushed_at": "2026-06-14T15:21:07Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -1350,7 +1350,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-24203.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Simple customization toolbox, utilizing CVE-2025-24203. Supports iOS 16.0 - iOS 18.3.2.",
"fork": false,
"created_at": "2025-05-09T07:18:55Z",
"updated_at": "2026-10-19T22:21:11Z",
"updated_at": "2026-10-21T06:57:36Z",
"pushed_at": "2026-09-07T04:53:41Z",
"stargazers_count": 427,
"watchers_count": 427,
"stargazers_count": 428,
"watchers_count": 428,
"has_discussions": false,
"forks_count": 40,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 40,
"watchers": 427,
"watchers": 428,
"score": 0,
"subscribers_count": 11
},
2025/CVE-2025-52915.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-10-20T15:07:52Z",
"updated_at": "2026-10-21T06:08:38Z",
"pushed_at": "2026-08-18T12:25:25Z",
"stargazers_count": 984,
"watchers_count": 984,
"stargazers_count": 985,
"watchers_count": 985,
"has_discussions": false,
"forks_count": 144,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 144,
"watchers": 984,
"watchers": 985,
"score": 0,
"subscribers_count": 22
}
2025/CVE-2025-69256.json
+4 -4
View File
@@ -47,8 +47,8 @@
"description": "Layer-2 supply-chain hardening for MCP servers — Ed25519-signed tool manifests, runtime spawn-attestation, default-deny argument sanitizer. Defends against marketplace-poisoning + CVE-2025-69256 + CVE-2025-61591.",
"fork": false,
"created_at": "2026-04-27T20:12:08Z",
"updated_at": "2026-10-05T07:21:00Z",
"pushed_at": "2026-10-19T04:14:15Z",
"updated_at": "2026-10-21T06:33:13Z",
"pushed_at": "2026-10-21T06:33:16Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": true,
@@ -97,8 +97,8 @@
"description": "Defense-in-depth bundle for MCP stdio servers: drop-in guardExec\/guardSpawn wrappers, AST audit CLI, reference MCP server. Closes the Ox-Security 200k-server stdio-RCE class (LiteLLM CVE-2025-69256). MIT, TypeScript, Node >= 20.",
"fork": false,
"created_at": "2026-05-07T19:24:41Z",
"updated_at": "2026-10-04T19:37:40Z",
"pushed_at": "2026-10-18T09:25:54Z",
"updated_at": "2026-10-21T06:22:34Z",
"pushed_at": "2026-10-21T06:29:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-104736.json
+33
View File
@@ -70,5 +70,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1427883969,
"name": "CVE-2026-104736-Mass-Webshell-CVE",
"full_name": "BIBILZERODAY\/CVE-2026-104736-Mass-Webshell-CVE",
"owner": {
"login": "BIBILZERODAY",
"id": 318742045,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/318742045?v=4",
"html_url": "https:\/\/github.com\/BIBILZERODAY",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/BIBILZERODAY\/CVE-2026-104736-Mass-Webshell-CVE",
"description": null,
"fork": false,
"created_at": "2026-10-21T04:41:12Z",
"updated_at": "2026-10-21T04:41:29Z",
"pushed_at": "2026-10-21T04:41:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-106173.json
+7 -7
View File
@@ -14,12 +14,12 @@
"description": "Proof of concept exploit for CVE-2026-106173, a path traversal file write leading to RCE for Fortinet FortiSIEM",
"fork": false,
"created_at": "2026-10-20T12:29:09Z",
"updated_at": "2026-10-20T22:58:37Z",
"updated_at": "2026-10-21T05:09:42Z",
"pushed_at": "2026-10-20T12:43:37Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 3,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,10 +27,10 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 3,
"forks": 4,
"watchers": 6,
"score": 0,
"subscribers_count": 0
"subscribers_count": 1
},
{
"id": 1427178290,
2026/CVE-2026-109618.json
+556 -12
View File
@@ -1,21 +1,565 @@
[
{
"id": 1427729326,
"name": "php2shell",
"full_name": "Unkn0vv\/php2shell",
"id": 1427813903,
"name": "CVE-2026-109618",
"full_name": "Zer061\/CVE-2026-109618",
"owner": {
"login": "Unkn0vv",
"id": 345557263,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/345557263?v=4",
"html_url": "https:\/\/github.com\/Unkn0vv",
"login": "Zer061",
"id": 28704143,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/28704143?v=4",
"html_url": "https:\/\/github.com\/Zer061",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Unkn0vv\/php2shell",
"description": "PHP2Shell Censys Query (CVE-2026-109618 \/ CVE-2026-109619 ) ",
"html_url": "https:\/\/github.com\/Zer061\/CVE-2026-109618",
"description": "PoC CVE-2026-109618 \/ -109619 (PHP session.upload_progress heap UAF)",
"fork": false,
"created_at": "2026-10-21T01:06:38Z",
"updated_at": "2026-10-21T01:08:56Z",
"pushed_at": "2026-10-21T01:08:53Z",
"created_at": "2026-10-21T03:06:03Z",
"updated_at": "2026-10-21T07:40:07Z",
"pushed_at": "2026-10-21T03:09:47Z",
"stargazers_count": 19,
"watchers_count": 19,
"has_discussions": false,
"forks_count": 15,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 15,
"watchers": 19,
"score": 0,
"subscribers_count": 0
},
{
"id": 1427826898,
"name": "CVE-2026-109618",
"full_name": "19h\/CVE-2026-109618",
"owner": {
"login": "19h",
"id": 280212,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/280212?v=4",
"html_url": "https:\/\/github.com\/19h",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/19h\/CVE-2026-109618",
"description": null,
"fork": false,
"created_at": "2026-10-21T03:22:41Z",
"updated_at": "2026-10-21T06:57:49Z",
"pushed_at": "2026-10-21T03:28:33Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1427833477,
"name": "php2shell",
"full_name": "0ldbaby\/php2shell",
"owner": {
"login": "0ldbaby",
"id": 25341682,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25341682?v=4",
"html_url": "https:\/\/github.com\/0ldbaby",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0ldbaby\/php2shell",
"description": "CVE-2026-109618 \/ CVE-2026-109619",
"fork": false,
"created_at": "2026-10-21T03:31:44Z",
"updated_at": "2026-10-21T03:31:49Z",
"pushed_at": "2026-10-21T03:31:46Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1427836702,
"name": "php2shell-lab",
"full_name": "mikensec\/php2shell-lab",
"owner": {
"login": "mikensec",
"id": 26197321,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26197321?v=4",
"html_url": "https:\/\/github.com\/mikensec",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mikensec\/php2shell-lab",
"description": "Offline, reproducible lab to safely analyse an untrusted PoC for CVE-2026-109618\/109619 and build detection rules. No exploit included; bring your own sample.",
"fork": false,
"created_at": "2026-10-21T03:36:08Z",
"updated_at": "2026-10-21T07:40:32Z",
"pushed_at": "2026-10-21T05:39:21Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
{
"id": 1427856225,
"name": "php2shell-protection",
"full_name": "syhunt\/php2shell-protection",
"owner": {
"login": "syhunt",
"id": 7361944,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/7361944?v=4",
"html_url": "https:\/\/github.com\/syhunt",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/syhunt\/php2shell-protection",
"description": "Emergency Apache mitigation and testing toolkit for the zero day php2shell (CVE-2026-109618 \/ CVE-2026-109619), blocking multipart POST requests before they reach PHP.",
"fork": false,
"created_at": "2026-10-21T04:01:24Z",
"updated_at": "2026-10-21T07:36:57Z",
"pushed_at": "2026-10-21T06:15:46Z",
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 9,
"score": 0,
"subscribers_count": 0
},
{
"id": 1427877823,
"name": "php-uploadprogress-waf",
"full_name": "break-the-build\/php-uploadprogress-waf",
"owner": {
"login": "break-the-build",
"id": 145877102,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/145877102?v=4",
"html_url": "https:\/\/github.com\/break-the-build",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/break-the-build\/php-uploadprogress-waf",
"description": "Defensive WAF\/IDS rules for PHP session.upload_progress UAF (CVE-2026-109618\/109619); detection only",
"fork": false,
"created_at": "2026-10-21T04:32:30Z",
"updated_at": "2026-10-21T05:15:21Z",
"pushed_at": "2026-10-21T04:32:34Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1427882263,
"name": "CVE-2026-109618-109619-audit",
"full_name": "xuehuolll\/CVE-2026-109618-109619-audit",
"owner": {
"login": "xuehuolll",
"id": 96810899,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/96810899?v=4",
"html_url": "https:\/\/github.com\/xuehuolll",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/xuehuolll\/CVE-2026-109618-109619-audit",
"description": "CVE-2026-109618 \/ CVE-2026-109619 audit: session poisoning to command execution reproduced; BGCTX OOM precondition reproduced; claimed progress-array UAF not reproduced on stock builds.",
"fork": false,
"created_at": "2026-10-21T04:38:46Z",
"updated_at": "2026-10-21T07:41:18Z",
"pushed_at": "2026-10-21T07:33:16Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"asan",
"cve",
"cve-2026-109618",
"cve-2026-109619",
"php",
"security",
"session-upload-progress",
"vulnerability-research"
],
"visibility": "public",
"forks": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1427929571,
"name": "php2shell-triage",
"full_name": "yetDevs\/php2shell-triage",
"owner": {
"login": "yetDevs",
"id": 62317893,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62317893?v=4",
"html_url": "https:\/\/github.com\/yetDevs",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/yetDevs\/php2shell-triage",
"description": "PHP estate triage for CVE-2026-109618 \/ CVE-2026-109619: inventory, Plesk audit, child-process detection. No exploit code.",
"fork": false,
"created_at": "2026-10-21T05:42:32Z",
"updated_at": "2026-10-21T06:55:24Z",
"pushed_at": "2026-10-21T05:43:18Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"detection",
"incident-response",
"php",
"plesk",
"security"
],
"visibility": "public",
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1427961844,
"name": "php2shell-scan",
"full_name": "0xrsydn\/php2shell-scan",
"owner": {
"login": "0xrsydn",
"id": 78522797,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78522797?v=4",
"html_url": "https:\/\/github.com\/0xrsydn",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xrsydn\/php2shell-scan",
"description": "Reachability + change detector for the php2shell PHP RCEs (CVE-2026-109618 \/ CVE-2026-109619). Agent-ready, stdlib only, read-only by default.",
"fork": false,
"created_at": "2026-10-21T06:19:55Z",
"updated_at": "2026-10-21T07:30:45Z",
"pushed_at": "2026-10-21T07:30:41Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1427969661,
"name": "php2shell-mitigation",
"full_name": "FacundoGimenez\/php2shell-mitigation",
"owner": {
"login": "FacundoGimenez",
"id": 27829678,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/27829678?v=4",
"html_url": "https:\/\/github.com\/FacundoGimenez",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/FacundoGimenez\/php2shell-mitigation",
"description": "Interim mitigations, exposure checks and detection helpers for php2shell (CVE-2026-109618 \/ CVE-2026-109619)",
"fork": false,
"created_at": "2026-10-21T06:28:14Z",
"updated_at": "2026-10-21T06:53:02Z",
"pushed_at": "2026-10-21T06:52:58Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1427969799,
"name": "php2shell-remediation",
"full_name": "edgarbaldemarmx\/php2shell-remediation",
"owner": {
"login": "edgarbaldemarmx",
"id": 3525770,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/3525770?v=4",
"html_url": "https:\/\/github.com\/edgarbaldemarmx",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/edgarbaldemarmx\/php2shell-remediation",
"description": "Emergency mitigation for php2shell (CVE-2026-109618 \/ CVE-2026-109619): disables session.upload_progress on shared hosting (DreamHost, cPanel) at fleet scale",
"fork": false,
"created_at": "2026-10-21T06:28:23Z",
"updated_at": "2026-10-21T06:28:32Z",
"pushed_at": "2026-10-21T06:28:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1427982729,
"name": "aws-waf-php2shell-post-guard",
"full_name": "cm-suzuki-ryo\/aws-waf-php2shell-post-guard",
"owner": {
"login": "cm-suzuki-ryo",
"id": 13096219,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/13096219?v=4",
"html_url": "https:\/\/github.com\/cm-suzuki-ryo",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/cm-suzuki-ryo\/aws-waf-php2shell-post-guard",
"description": " AWS WAF (REGIONAL) CloudFormation sample for ALB: block POST from outside Japan, rate-limit POST per IP and per TLS JA4 fingerprint, and return the blocking rule name in the response. Verification sample for the php2shell (CVE-2026-109618\/109619) period; not a fix for the PHP vulnerabilities.",
"fork": false,
"created_at": "2026-10-21T06:42:12Z",
"updated_at": "2026-10-21T07:02:07Z",
"pushed_at": "2026-10-21T07:02:03Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1428015134,
"name": "PHP2Shell-CVE-2026-109618-CVE-2026-109619",
"full_name": "AmpedWasTaken\/PHP2Shell-CVE-2026-109618-CVE-2026-109619",
"owner": {
"login": "AmpedWasTaken",
"id": 52733865,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/52733865?v=4",
"html_url": "https:\/\/github.com\/AmpedWasTaken",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/AmpedWasTaken\/PHP2Shell-CVE-2026-109618-CVE-2026-109619",
"description": null,
"fork": false,
"created_at": "2026-10-21T07:13:56Z",
"updated_at": "2026-10-21T07:41:05Z",
"pushed_at": "2026-10-21T07:47:41Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1428031890,
"name": "CVE-2026-109618-CVSS-9.2-Critical",
"full_name": "WoYinDao\/CVE-2026-109618-CVSS-9.2-Critical",
"owner": {
"login": "WoYinDao",
"id": 235995906,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/235995906?v=4",
"html_url": "https:\/\/github.com\/WoYinDao",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/WoYinDao\/CVE-2026-109618-CVSS-9.2-Critical",
"description": "PHP session.upload_progress RCE pair (CVSS v4.0 9.2 Critical x2) — full analysis, verified primitives, RCE chain, UAF weaponization harness, per-build symbol extraction",
"fork": false,
"created_at": "2026-10-21T07:29:15Z",
"updated_at": "2026-10-21T07:33:04Z",
"pushed_at": "2026-10-21T07:33:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1428038610,
"name": "CVE-2026-109618-php2shell-lab",
"full_name": "0x4148\/CVE-2026-109618-php2shell-lab",
"owner": {
"login": "0x4148",
"id": 9975923,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/9975923?v=4",
"html_url": "https:\/\/github.com\/0x4148",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0x4148\/CVE-2026-109618-php2shell-lab",
"description": "PHP2Shell (CVE-2026-109618 \/ CVE-2026-109619) Docker lab and PoC. Use-After-Free in PHP's session.upload_progress.",
"fork": false,
"created_at": "2026-10-21T07:35:51Z",
"updated_at": "2026-10-21T07:42:03Z",
"pushed_at": "2026-10-21T07:42:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1428044088,
"name": "php-up-2026",
"full_name": "cereZ23\/php-up-2026",
"owner": {
"login": "cereZ23",
"id": 169937286,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/169937286?v=4",
"html_url": "https:\/\/github.com\/cereZ23",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/cereZ23\/php-up-2026",
"description": "PHP session.upload_progress UAF validation bundle (presumed CVE-2026-109618 \/ CVE-2026-109619) — authorized defensive-research use only",
"fork": false,
"created_at": "2026-10-21T07:40:59Z",
"updated_at": "2026-10-21T07:45:37Z",
"pushed_at": "2026-10-21T07:45:32Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1428049067,
"name": "php-fix",
"full_name": "ersinkoc\/php-fix",
"owner": {
"login": "ersinkoc",
"id": 408479,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/408479?v=4",
"html_url": "https:\/\/github.com\/ersinkoc",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ersinkoc\/php-fix",
"description": "One-line mitigation for php2shell (CVE-2026-109618 \/ CVE-2026-109619): disables session.upload_progress across all PHP installs",
"fork": false,
"created_at": "2026-10-21T07:45:57Z",
"updated_at": "2026-10-21T07:46:07Z",
"pushed_at": "2026-10-21T07:46:03Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-110372.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1427884496,
"name": "CVE-2026-110372-MASS-EXPLOIT-WEBSHELL.STORE",
"full_name": "BIBILZERODAY\/CVE-2026-110372-MASS-EXPLOIT-WEBSHELL.STORE",
"owner": {
"login": "BIBILZERODAY",
"id": 318742045,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/318742045?v=4",
"html_url": "https:\/\/github.com\/BIBILZERODAY",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/BIBILZERODAY\/CVE-2026-110372-MASS-EXPLOIT-WEBSHELL.STORE",
"description": null,
"fork": false,
"created_at": "2026-10-21T04:41:56Z",
"updated_at": "2026-10-21T04:42:09Z",
"pushed_at": "2026-10-21T04:42:06Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-111058.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "Mercury unauth RCE combo: CVE-2026-111058 (kernels) + CVE-2026-111057 (terminals). By 0xNuts (@ExDev994). Authorized testing only.",
"fork": false,
"created_at": "2026-10-20T04:38:18Z",
"updated_at": "2026-10-20T05:13:20Z",
"updated_at": "2026-10-21T05:57:08Z",
"pushed_at": "2026-10-20T05:13:16Z",
"stargazers_count": 0,
"watchers_count": 0,
2026/CVE-2026-20841.json
+1 -1
View File
@@ -285,7 +285,7 @@
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
"subscribers_count": 1
},
{
"id": 1156380448,
2026/CVE-2026-21509.json
+6 -6
View File
@@ -47,12 +47,12 @@
"description": "Educational PoC for CVE‑2026‑21509 (Microsoft Office security feature bypass). Generates a harmless DOCX with dummy OLE artifacts to study EDR\/AV visibility. Not an exploit. For isolated labs only; see README for 7‑Zip inspection steps and mitigation references.",
"fork": false,
"created_at": "2026-01-29T00:51:18Z",
"updated_at": "2026-10-20T20:29:40Z",
"updated_at": "2026-10-21T06:26:51Z",
"pushed_at": "2026-01-28T20:33:28Z",
"stargazers_count": 21,
"watchers_count": 21,
"stargazers_count": 25,
"watchers_count": 25,
"has_discussions": false,
"forks_count": 11,
"forks_count": 12,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,8 +60,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 11,
"watchers": 21,
"forks": 12,
"watchers": 25,
"score": 0,
"subscribers_count": 1
},
2026/CVE-2026-31431.json
+3 -42
View File
@@ -47,12 +47,12 @@
"description": "Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code",
"fork": false,
"created_at": "2026-04-29T12:15:28Z",
"updated_at": "2026-10-19T16:36:25Z",
"updated_at": "2026-10-21T06:47:42Z",
"pushed_at": "2026-04-29T21:21:46Z",
"stargazers_count": 4083,
"watchers_count": 4083,
"has_discussions": false,
"forks_count": 912,
"forks_count": 913,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -71,7 +71,7 @@
"xint-code"
],
"visibility": "public",
"forks": 912,
"forks": 913,
"watchers": 4083,
"score": 0,
"subscribers_count": 34
@@ -9499,45 +9499,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1235059624,
"name": "CVE-2026-31431",
"full_name": "Lutfifakee-Project\/CVE-2026-31431",
"owner": {
"login": "Lutfifakee-Project",
"id": 244214024,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/244214024?v=4",
"html_url": "https:\/\/github.com\/Lutfifakee-Project",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Lutfifakee-Project\/CVE-2026-31431",
"description": "CVE-2026-31431 - Linux Kernel Page Cache Vulnerability",
"fork": false,
"created_at": "2026-05-11T01:14:12Z",
"updated_at": "2026-09-27T22:10:06Z",
"pushed_at": "2026-09-27T22:10:02Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-31431",
"cve-2026-31431-lpe-exploit",
"cve-2026-31431-poc",
"linux-kernel",
"security-research"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1235439128,
"name": "CVE-2026-31431-CopyFail-Lab",
2026/CVE-2026-31635.json
-33
View File
@@ -32,39 +32,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1244389571,
"name": "CVE-2026-31635",
"full_name": "Lutfifakee-Project\/CVE-2026-31635",
"owner": {
"login": "Lutfifakee-Project",
"id": 244214024,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/244214024?v=4",
"html_url": "https:\/\/github.com\/Lutfifakee-Project",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Lutfifakee-Project\/CVE-2026-31635",
"description": "Exploit for DirtyDecrypt - CVE-2026-31635 Local Privilege Escalation",
"fork": false,
"created_at": "2026-05-20T08:12:15Z",
"updated_at": "2026-05-20T17:02:57Z",
"pushed_at": "2026-05-20T08:14:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1245660248,
"name": "CVE-2026-31635-DirtyDecrypt",
2026/CVE-2026-3609.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-10-20T15:07:52Z",
"updated_at": "2026-10-21T06:08:38Z",
"pushed_at": "2026-08-18T12:25:25Z",
"stargazers_count": 984,
"watchers_count": 984,
"stargazers_count": 985,
"watchers_count": 985,
"has_discussions": false,
"forks_count": 144,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 144,
"watchers": 984,
"watchers": 985,
"score": 0,
"subscribers_count": 22
},
2026/CVE-2026-3888.json
+1 -1
View File
@@ -306,6 +306,6 @@
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
"subscribers_count": 1
}
]
2026/CVE-2026-41651.json
+37 -44
View File
@@ -179,10 +179,10 @@
"description": "Poc for Pack2TheRoot CVE-2026-41651",
"fork": false,
"created_at": "2026-04-29T15:40:54Z",
"updated_at": "2026-10-14T07:26:10Z",
"updated_at": "2026-10-21T02:10:36Z",
"pushed_at": "2026-04-29T15:41:45Z",
"stargazers_count": 10,
"watchers_count": 10,
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -193,7 +193,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 10,
"watchers": 11,
"score": 0,
"subscribers_count": 0
},
@@ -263,46 +263,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1244350875,
"name": "CVE-2026-41651",
"full_name": "Lutfifakee-Project\/CVE-2026-41651",
"owner": {
"login": "Lutfifakee-Project",
"id": 244214024,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/244214024?v=4",
"html_url": "https:\/\/github.com\/Lutfifakee-Project",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Lutfifakee-Project\/CVE-2026-41651",
"description": "Exploit for CVE-2026-41651 - PackageKit TOCTOU Local Privilege Escalation (Pack2TheRoot)",
"fork": false,
"created_at": "2026-05-20T07:26:05Z",
"updated_at": "2026-09-26T08:50:28Z",
"pushed_at": "2026-05-20T07:48:15Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-41651",
"linux-exploit",
"local-privilege-escalation",
"lpe",
"pack2theroot",
"packagekit"
],
"visibility": "public",
"forks": 1,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
{
"id": 1311803396,
"name": "CVE-2026-41651",
@@ -369,6 +329,39 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1384168863,
"name": "CVE-2026-41651",
"full_name": "Thhc10\/CVE-2026-41651",
"owner": {
"login": "Thhc10",
"id": 39107746,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/39107746?v=4",
"html_url": "https:\/\/github.com\/Thhc10",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Thhc10\/CVE-2026-41651",
"description": "Exploit for CVE-2026-41651 - PackageKit TOCTOU Local Privilege Escalation (Pack2TheRoot)",
"fork": false,
"created_at": "2026-09-23T20:35:48Z",
"updated_at": "2026-09-23T20:35:48Z",
"pushed_at": "2026-05-20T07:48:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1393670103,
"name": "CVE-2026-41651",
2026/CVE-2026-41940.json
-35
View File
@@ -655,41 +655,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1226391467,
"name": "CVE-2026-41940",
"full_name": "Lutfifakee-Project\/CVE-2026-41940",
"owner": {
"login": "Lutfifakee-Project",
"id": 244214024,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/244214024?v=4",
"html_url": "https:\/\/github.com\/Lutfifakee-Project",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Lutfifakee-Project\/CVE-2026-41940",
"description": "cPanel\/WHM CVE-2026-41940 - Mass Scanner & Exploiter",
"fork": false,
"created_at": "2026-05-01T10:37:13Z",
"updated_at": "2026-09-27T17:26:31Z",
"pushed_at": "2026-05-01T12:33:31Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-41940"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1226421168,
"name": "cve-2026-41940-tool",
2026/CVE-2026-43284.json
+6 -6
View File
@@ -1388,7 +1388,7 @@
"stargazers_count": 44,
"watchers_count": 44,
"has_discussions": false,
"forks_count": 21,
"forks_count": 22,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1396,7 +1396,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 21,
"forks": 22,
"watchers": 44,
"score": 0,
"subscribers_count": 1
@@ -1482,10 +1482,10 @@
"description": "Ephemeral root for Samsung Galaxy devices via CVE-2026-43284 — stability fork of DirtyFrag. Reboot to undo.",
"fork": false,
"created_at": "2026-10-19T09:24:01Z",
"updated_at": "2026-10-19T09:48:34Z",
"updated_at": "2026-10-21T01:48:43Z",
"pushed_at": "2026-10-19T09:48:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -1505,7 +1505,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-43499.json
+55 -55
View File
@@ -300,7 +300,7 @@
"stargazers_count": 254,
"watchers_count": 254,
"has_discussions": false,
"forks_count": 101,
"forks_count": 102,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -308,7 +308,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 101,
"forks": 102,
"watchers": 254,
"score": 0,
"subscribers_count": 3
@@ -361,12 +361,12 @@
"description": "GhostLock (CVE-2026-43499) kernel exploit for Android devices with locked bootloader",
"fork": false,
"created_at": "2026-07-12T16:05:24Z",
"updated_at": "2026-10-20T12:57:52Z",
"updated_at": "2026-10-21T02:04:43Z",
"pushed_at": "2026-09-17T05:30:59Z",
"stargazers_count": 428,
"watchers_count": 428,
"stargazers_count": 429,
"watchers_count": 429,
"has_discussions": false,
"forks_count": 93,
"forks_count": 94,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -381,8 +381,8 @@
"root"
],
"visibility": "public",
"forks": 93,
"watchers": 428,
"forks": 94,
"watchers": 429,
"score": 0,
"subscribers_count": 13
},
@@ -538,7 +538,7 @@
"stargazers_count": 114,
"watchers_count": 114,
"has_discussions": false,
"forks_count": 33,
"forks_count": 34,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -546,7 +546,7 @@
"pull_request_creation_policy": "collaborators_only",
"topics": [],
"visibility": "public",
"forks": 33,
"forks": 34,
"watchers": 114,
"score": 0,
"subscribers_count": 0
@@ -1028,10 +1028,10 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
"updated_at": "2026-10-21T00:52:11Z",
"updated_at": "2026-10-21T03:13:29Z",
"pushed_at": "2026-09-03T03:21:42Z",
"stargazers_count": 1450,
"watchers_count": 1450,
"stargazers_count": 1451,
"watchers_count": 1451,
"has_discussions": false,
"forks_count": 292,
"allow_forking": true,
@@ -1042,7 +1042,7 @@
"topics": [],
"visibility": "public",
"forks": 292,
"watchers": 1450,
"watchers": 1451,
"score": 0,
"subscribers_count": 44
},
@@ -1709,12 +1709,12 @@
"description": "GhostLock One-Tap Execution App (CVE-2026-43499)",
"fork": false,
"created_at": "2026-07-29T05:04:25Z",
"updated_at": "2026-10-20T23:20:43Z",
"updated_at": "2026-10-21T07:18:12Z",
"pushed_at": "2026-10-20T13:14:19Z",
"stargazers_count": 2119,
"watchers_count": 2119,
"stargazers_count": 2129,
"watchers_count": 2129,
"has_discussions": true,
"forks_count": 536,
"forks_count": 538,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1722,8 +1722,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 536,
"watchers": 2119,
"forks": 538,
"watchers": 2129,
"score": 0,
"subscribers_count": 37
},
@@ -2348,10 +2348,10 @@
"description": "CVE-2026-43499 full exploit chain for Samsung Galaxy S22 Ultra (Android 5.10 kernel)",
"fork": false,
"created_at": "2026-08-08T23:35:25Z",
"updated_at": "2026-10-20T21:07:45Z",
"updated_at": "2026-10-21T01:47:10Z",
"pushed_at": "2026-10-13T03:01:42Z",
"stargazers_count": 95,
"watchers_count": 95,
"stargazers_count": 96,
"watchers_count": 96,
"has_discussions": true,
"forks_count": 42,
"allow_forking": true,
@@ -2362,7 +2362,7 @@
"topics": [],
"visibility": "public",
"forks": 42,
"watchers": 95,
"watchers": 96,
"score": 0,
"subscribers_count": 4
},
@@ -2650,7 +2650,7 @@
"stargazers_count": 53,
"watchers_count": 53,
"has_discussions": false,
"forks_count": 7,
"forks_count": 8,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2658,7 +2658,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 7,
"forks": 8,
"watchers": 53,
"score": 0,
"subscribers_count": 0
@@ -2821,10 +2821,10 @@
"description": "KSuRoot 4.0.0 — 基于 CVE-2026-43499(GhostLock) 的一键 KernelSU 提权工具。多内核支持：6.1 \/ 6.6 \/ 6.12 三族各有专属基线，另有 50 档上游内核适配；多机型动态库内置：122 条厂商载荷（vivo\/iQOO、小米、三星、Pixel 等）离线可用、按机型+内核+commit 三级匹配；新增「载荷构建」用本机 boot.img 解析偏移打出适配本机的载荷（通用 \/ vivo 专用）；免 ADB。Mod by hmascs",
"fork": false,
"created_at": "2026-08-14T10:51:50Z",
"updated_at": "2026-10-20T07:04:51Z",
"updated_at": "2026-10-21T02:48:36Z",
"pushed_at": "2026-10-02T08:20:25Z",
"stargazers_count": 258,
"watchers_count": 258,
"stargazers_count": 259,
"watchers_count": 259,
"has_discussions": false,
"forks_count": 25,
"allow_forking": true,
@@ -2835,7 +2835,7 @@
"topics": [],
"visibility": "public",
"forks": 25,
"watchers": 258,
"watchers": 259,
"score": 0,
"subscribers_count": 1
},
@@ -2953,10 +2953,10 @@
"description": "Using CVE-2026-43499 to root your Galaxy S24 Series(SM-S92X0 ,(China \/ Hong Kong SAR \/ Taiwan))",
"fork": false,
"created_at": "2026-08-16T14:37:06Z",
"updated_at": "2026-10-20T16:52:26Z",
"updated_at": "2026-10-21T06:36:13Z",
"pushed_at": "2026-10-18T15:50:17Z",
"stargazers_count": 79,
"watchers_count": 79,
"stargazers_count": 80,
"watchers_count": 80,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -2982,7 +2982,7 @@
],
"visibility": "public",
"forks": 9,
"watchers": 79,
"watchers": 80,
"score": 0,
"subscribers_count": 1
},
@@ -3001,10 +3001,10 @@
"description": "Kernel root exploit (CVE-2026-43499) for some Amazon devices",
"fork": false,
"created_at": "2026-08-17T16:57:57Z",
"updated_at": "2026-10-17T21:58:04Z",
"updated_at": "2026-10-21T04:55:19Z",
"pushed_at": "2026-10-19T17:52:11Z",
"stargazers_count": 43,
"watchers_count": 43,
"stargazers_count": 44,
"watchers_count": 44,
"has_discussions": false,
"forks_count": 11,
"allow_forking": true,
@@ -3015,7 +3015,7 @@
"topics": [],
"visibility": "public",
"forks": 11,
"watchers": 43,
"watchers": 44,
"score": 0,
"subscribers_count": 2
},
@@ -3430,10 +3430,10 @@
"description": "One-click root for vivo\/iQOO devices on locked bootloader | CVE-2026-43499 + KernelSU",
"fork": false,
"created_at": "2026-08-25T07:52:11Z",
"updated_at": "2026-10-20T09:17:21Z",
"updated_at": "2026-10-21T05:37:23Z",
"pushed_at": "2026-10-19T08:08:14Z",
"stargazers_count": 65,
"watchers_count": 65,
"stargazers_count": 66,
"watchers_count": 66,
"has_discussions": false,
"forks_count": 10,
"allow_forking": true,
@@ -3444,7 +3444,7 @@
"topics": [],
"visibility": "public",
"forks": 10,
"watchers": 65,
"watchers": 66,
"score": 0,
"subscribers_count": 0
},
@@ -3948,7 +3948,7 @@
"forks": 3,
"watchers": 5,
"score": 0,
"subscribers_count": 0
"subscribers_count": 1
},
{
"id": 1363796680,
@@ -4253,10 +4253,10 @@
"description": "CVE-2026-43499 root payloads feed for Root-My-Galaxy",
"fork": false,
"created_at": "2026-09-14T10:24:15Z",
"updated_at": "2026-10-20T15:00:05Z",
"updated_at": "2026-10-21T03:24:30Z",
"pushed_at": "2026-09-14T16:10:52Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -4267,7 +4267,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
@@ -5314,10 +5314,10 @@
"description": "GhostLock (CVE-2026-43499) + KernelSU late-load port for Honor 90 REA-NX9, MagicOS 9.0.0.211 \/ Android 15 (pure-GKI 5.10.236). Fork of GhostLock-H80GT.",
"fork": false,
"created_at": "2026-10-09T18:06:28Z",
"updated_at": "2026-10-09T18:08:47Z",
"updated_at": "2026-10-21T07:31:32Z",
"pushed_at": "2026-10-09T18:08:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -5328,7 +5328,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
@@ -5434,8 +5434,8 @@
"description": "Offline Android root toolkit for Samsung Galaxy (S23-S26 \/ Z Flip \/ Z Fold \/ Tab S9 Ultra). DF chain (DirtyFrag) first, auto-fallback to the SRK chain (CVE-2026-43499, firmware-matched payloads), then DFReroot persistence. KernelSU & KernelSU-Next. For security research only.",
"fork": false,
"created_at": "2026-10-14T12:08:04Z",
"updated_at": "2026-10-14T12:34:01Z",
"pushed_at": "2026-10-14T12:34:23Z",
"updated_at": "2026-10-21T02:09:39Z",
"pushed_at": "2026-10-21T02:09:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -5533,8 +5533,8 @@
"description": "Honor 70 (FNE-AN00) privilege escalation PoC: GhostLock (CVE-2026-43499) + custom KernelSU module loading",
"fork": false,
"created_at": "2026-10-16T11:28:27Z",
"updated_at": "2026-10-20T12:45:48Z",
"pushed_at": "2026-10-20T11:28:06Z",
"updated_at": "2026-10-21T06:18:46Z",
"pushed_at": "2026-10-21T06:18:42Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2026/CVE-2026-51954.json
+33
View File
@@ -31,5 +31,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1427955172,
"name": "CVE-2026-51954",
"full_name": "Envincion\/CVE-2026-51954",
"owner": {
"login": "Envincion",
"id": 50993067,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50993067?v=4",
"html_url": "https:\/\/github.com\/Envincion",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Envincion\/CVE-2026-51954",
"description": null,
"fork": false,
"created_at": "2026-10-21T06:12:52Z",
"updated_at": "2026-10-21T06:13:18Z",
"pushed_at": "2026-10-21T06:13:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-54121.json
+4 -4
View File
@@ -424,10 +424,10 @@
"description": "🛡 Official AI Security Tool module for CVE-2026-54121 (Certighost): AD CS certificate abuse deep-dive, defensive audit workflows, and safe in-app console execution for authorized Active Directory security testing.",
"fork": false,
"created_at": "2026-09-11T23:08:16Z",
"updated_at": "2026-10-21T00:05:20Z",
"updated_at": "2026-10-21T07:02:22Z",
"pushed_at": "2026-10-19T11:05:57Z",
"stargazers_count": 131,
"watchers_count": 131,
"stargazers_count": 132,
"watchers_count": 132,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -444,7 +444,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 131,
"watchers": 132,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-59310.json
+6 -6
View File
@@ -158,12 +158,12 @@
"description": "VC-Strike — VMware vCenter CVE-2026-59310 (unauth root RCE) & CVE-2026-59309 (SRP auth bypass) authorized pentest suite. GUI+CLI, multi-session C2, stdlib-only. 授权测试专用",
"fork": false,
"created_at": "2026-10-01T01:29:10Z",
"updated_at": "2026-10-20T03:34:24Z",
"updated_at": "2026-10-21T07:13:05Z",
"pushed_at": "2026-10-03T03:12:01Z",
"stargazers_count": 11,
"watchers_count": 11,
"stargazers_count": 12,
"watchers_count": 12,
"has_discussions": false,
"forks_count": 6,
"forks_count": 7,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -180,8 +180,8 @@
"vmware"
],
"visibility": "public",
"forks": 6,
"watchers": 11,
"forks": 7,
"watchers": 12,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-62911.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "POC pre-auth RCE on Exchange",
"fork": false,
"created_at": "2026-08-22T04:49:33Z",
"updated_at": "2026-10-19T08:04:51Z",
"updated_at": "2026-10-21T07:29:41Z",
"pushed_at": "2026-08-22T04:49:54Z",
"stargazers_count": 188,
"watchers_count": 188,
"stargazers_count": 189,
"watchers_count": 189,
"has_discussions": false,
"forks_count": 34,
"allow_forking": true,
@@ -30,7 +30,7 @@
],
"visibility": "public",
"forks": 34,
"watchers": 188,
"watchers": 189,
"score": 0,
"subscribers_count": 1
},
2026/CVE-2026-63030.json
+37 -50
View File
@@ -183,10 +183,10 @@
"description": "Non-destructive detector + Docker lab for wp2shell (CVE-2026-63030 REST \/batch\/v1 route confusion + CVE-2026-60137 author__not_in SQLi) in WordPress core 6.9.0-6.9.4 \/ 7.0.0-7.0.1",
"fork": false,
"created_at": "2026-07-18T03:04:50Z",
"updated_at": "2026-10-13T19:11:04Z",
"updated_at": "2026-10-21T05:16:06Z",
"pushed_at": "2026-07-22T11:36:51Z",
"stargazers_count": 64,
"watchers_count": 64,
"stargazers_count": 65,
"watchers_count": 65,
"has_discussions": false,
"forks_count": 19,
"allow_forking": true,
@@ -205,7 +205,7 @@
],
"visibility": "public",
"forks": 19,
"watchers": 64,
"watchers": 65,
"score": 0,
"subscribers_count": 1
},
@@ -242,52 +242,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1304642266,
"name": "wp2shell",
"full_name": "Lutfifakee-Project\/wp2shell",
"owner": {
"login": "Lutfifakee-Project",
"id": 244214024,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/244214024?v=4",
"html_url": "https:\/\/github.com\/Lutfifakee-Project",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Lutfifakee-Project\/wp2shell",
"description": "wp2shell - WordPress CVE-2026-63030 Exploit & Scanner",
"fork": false,
"created_at": "2026-07-18T05:57:03Z",
"updated_at": "2026-09-09T17:39:55Z",
"pushed_at": "2026-07-18T06:44:40Z",
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-63030",
"exploit",
"python",
"rce",
"security-tools",
"sql-injection",
"unauthenticated",
"unauthenticated-rce",
"vulnerability-scanner",
"wordpress",
"wp2shell",
"wp2shell-poc"
],
"visibility": "public",
"forks": 2,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
{
"id": 1304667289,
"name": "wp2shell",
@@ -2364,6 +2318,39 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1336097815,
"name": "wp2shell2026",
"full_name": "0xIIDe231\/wp2shell2026",
"owner": {
"login": "0xIIDe231",
"id": 43062701,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43062701?v=4",
"html_url": "https:\/\/github.com\/0xIIDe231",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xIIDe231\/wp2shell2026",
"description": "wp2shell - WordPress CVE-2026-63030 Exploit & Scanner well forked",
"fork": false,
"created_at": "2026-08-16T15:48:26Z",
"updated_at": "2026-08-16T15:48:26Z",
"pushed_at": "2026-07-18T06:44:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1339296023,
"name": "POC-CVE-2026-63030-CVE-2026-60137-",
2026/CVE-2026-6307.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 2,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"forks": 3,
"watchers": 10,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-64560.json
+4 -4
View File
@@ -357,10 +357,10 @@
"description": "一加 15T（PLZ110）临时 root + KernelSU per-boot 接管：CVE-2026-64560 移植，不写分区、重启即失效。内核 6.12.69-android16-6-g242e1a07f878。",
"fork": false,
"created_at": "2026-10-15T14:19:23Z",
"updated_at": "2026-10-20T22:07:51Z",
"updated_at": "2026-10-21T06:55:24Z",
"pushed_at": "2026-10-15T14:25:19Z",
"stargazers_count": 26,
"watchers_count": 26,
"stargazers_count": 27,
"watchers_count": 27,
"has_discussions": false,
"forks_count": 10,
"allow_forking": true,
@@ -380,7 +380,7 @@
],
"visibility": "public",
"forks": 10,
"watchers": 26,
"watchers": 27,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-64638.json
+1 -1
View File
@@ -912,6 +912,6 @@
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
"subscribers_count": 1
}
]
2026/CVE-2026-66804.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": null,
"fork": false,
"created_at": "2026-07-23T11:51:53Z",
"updated_at": "2026-10-14T08:03:38Z",
"updated_at": "2026-10-21T03:16:30Z",
"pushed_at": "2026-08-11T18:49:46Z",
"stargazers_count": 15,
"watchers_count": 15,
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 15,
"watchers": 16,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-75604.json
+4 -4
View File
@@ -146,10 +146,10 @@
"description": "🛡 Official AI Security Tool module for CVE-2026-75604 (Next.js Windows Unauthenticated Remote Code Execution) with safe in-app execution, deep vulnerability validation, and DevSecOps-ready security auditing workflows.",
"fork": false,
"created_at": "2026-09-28T19:01:45Z",
"updated_at": "2026-10-21T01:19:15Z",
"updated_at": "2026-10-21T07:02:36Z",
"pushed_at": "2026-10-19T13:50:31Z",
"stargazers_count": 101,
"watchers_count": 101,
"stargazers_count": 102,
"watchers_count": 102,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -177,7 +177,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 101,
"watchers": 102,
"score": 0,
"subscribers_count": 1
}
2026/CVE-2026-77680.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1427946517,
"name": "CVE-2026-77680-Security-Analysis",
"full_name": "OJ01-creates\/CVE-2026-77680-Security-Analysis",
"owner": {
"login": "OJ01-creates",
"id": 286638746,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/286638746?v=4",
"html_url": "https:\/\/github.com\/OJ01-creates",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/OJ01-creates\/CVE-2026-77680-Security-Analysis",
"description": "Cybersecurity research and vulnerability analysis",
"fork": false,
"created_at": "2026-10-21T06:03:02Z",
"updated_at": "2026-10-21T06:08:31Z",
"pushed_at": "2026-10-21T06:08:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-86950.json
+24 -24
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-10-01T13:01:02Z",
"updated_at": "2026-10-17T12:32:44Z",
"updated_at": "2026-10-21T02:45:55Z",
"pushed_at": "2026-10-17T12:32:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
@@ -47,10 +47,10 @@
"description": "Runtime exploit monitor for Apple document\/image pipelines (iOS\/macOS) — EXPMON concept: Frida agent + behavioral rules. First target: the CVE-2026-86950 glyph chain.",
"fork": false,
"created_at": "2026-10-01T18:13:27Z",
"updated_at": "2026-10-09T08:48:49Z",
"updated_at": "2026-10-21T02:45:53Z",
"pushed_at": "2026-10-02T17:16:49Z",
"stargazers_count": 9,
"watchers_count": 9,
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 9,
"watchers": 10,
"score": 0,
"subscribers_count": 0
},
@@ -80,10 +80,10 @@
"description": "Out-of-bounds Write (CWE-787)",
"fork": false,
"created_at": "2026-10-02T03:30:22Z",
"updated_at": "2026-10-02T03:30:22Z",
"updated_at": "2026-10-21T02:45:57Z",
"pushed_at": "2026-09-29T09:00:19Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
@@ -113,10 +113,10 @@
"description": "A python tool to detect PDF files exploiting CVE-2026-86950",
"fork": false,
"created_at": "2026-10-02T19:30:07Z",
"updated_at": "2026-10-13T07:16:10Z",
"updated_at": "2026-10-21T02:45:51Z",
"pushed_at": "2026-10-02T20:57:10Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
@@ -146,10 +146,10 @@
"description": "CVE-2026-86950",
"fork": false,
"created_at": "2026-10-05T12:32:14Z",
"updated_at": "2026-10-05T12:39:52Z",
"updated_at": "2026-10-21T02:45:54Z",
"pushed_at": "2026-10-05T12:39:48Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -160,7 +160,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
@@ -179,10 +179,10 @@
"description": "Proof of Concept for CVE-2026-86950",
"fork": false,
"created_at": "2026-10-20T22:45:41Z",
"updated_at": "2026-10-20T22:49:09Z",
"updated_at": "2026-10-21T02:45:59Z",
"pushed_at": "2026-10-20T22:49:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -193,7 +193,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-87902.json
-45
View File
@@ -400,51 +400,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1384201214,
"name": "CVE-2026-87902",
"full_name": "Lutfifakee-Project\/CVE-2026-87902",
"owner": {
"login": "Lutfifakee-Project",
"id": 244214024,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/244214024?v=4",
"html_url": "https:\/\/github.com\/Lutfifakee-Project",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Lutfifakee-Project\/CVE-2026-87902",
"description": "CVE-2026-87902 PoC — WordPress Path Traversal → LFI → Conditional RCE",
"fork": false,
"created_at": "2026-09-23T21:06:20Z",
"updated_at": "2026-10-05T19:08:59Z",
"pushed_at": "2026-09-24T07:08:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-87902",
"lfi",
"local-file-inclusion",
"path-traversal",
"python",
"rce",
"security-research",
"security-scanner",
"vulnerability-research",
"wordpress",
"wordpress-security"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1384680282,
"name": "wordpress-cve-2026-87902",
2026/CVE-2026-9618.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1427767789,
"name": "cve-2026-9618-Patch",
"full_name": "SleepTheGod\/cve-2026-9618-Patch",
"owner": {
"login": "SleepTheGod",
"id": 86472964,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/86472964?v=4",
"html_url": "https:\/\/github.com\/SleepTheGod",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/SleepTheGod\/cve-2026-9618-Patch",
"description": "cve-2026-9618 Poc Patch",
"fork": false,
"created_at": "2026-10-21T02:02:58Z",
"updated_at": "2026-10-21T02:08:21Z",
"pushed_at": "2026-10-21T02:08:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-96652.json
+6 -6
View File
@@ -47,12 +47,12 @@
"description": "CVE-2026-96652 CVE-2026-96654 CVE-2026-96655 CVE-2026-96656",
"fork": false,
"created_at": "2026-10-18T05:00:14Z",
"updated_at": "2026-10-21T00:54:01Z",
"updated_at": "2026-10-21T07:46:15Z",
"pushed_at": "2026-10-19T01:31:02Z",
"stargazers_count": 46,
"watchers_count": 46,
"stargazers_count": 68,
"watchers_count": 68,
"has_discussions": false,
"forks_count": 11,
"forks_count": 13,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,8 +60,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 11,
"watchers": 46,
"forks": 13,
"watchers": 68,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-96889.json
+1 -1
View File
@@ -47,7 +47,7 @@
"description": "Lab PoC for CVE-2026-96889: Next.js Image Optimization SVG typed as AVIF reaches librsvg UAF (RUSTSEC-2026-0305). Unauthenticated RCE on glibc Linux.",
"fork": false,
"created_at": "2026-10-16T06:31:29Z",
"updated_at": "2026-10-16T07:02:37Z",
"updated_at": "2026-10-21T02:08:33Z",
"pushed_at": "2026-10-16T06:31:37Z",
"stargazers_count": 2,
"watchers_count": 2,
2026/CVE-2026-97229.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": " GitLab CI lint integer-overflow RCE PoC for CVE-2026-97229, validated against the official 19.4.1 CE amd64 image",
"fork": false,
"created_at": "2026-10-13T09:39:17Z",
"updated_at": "2026-10-20T16:49:54Z",
"updated_at": "2026-10-21T05:57:01Z",
"pushed_at": "2026-10-19T08:46:56Z",
"stargazers_count": 59,
"watchers_count": 59,
"stargazers_count": 60,
"watchers_count": 60,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 59,
"watchers": 60,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-98260.json
+7 -7
View File
@@ -47,10 +47,10 @@
"description": "a complete exploit chain for CVE-2026-982600,",
"fork": false,
"created_at": "2026-10-18T21:04:03Z",
"updated_at": "2026-10-21T01:43:59Z",
"pushed_at": "2026-10-21T01:43:55Z",
"stargazers_count": 0,
"watchers_count": 0,
"updated_at": "2026-10-21T02:47:05Z",
"pushed_at": "2026-10-21T02:00:17Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
@@ -85,7 +85,7 @@
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 5,
"forks_count": 6,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -93,7 +93,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 5,
"forks": 6,
"watchers": 7,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-99999.json
+8 -8
View File
@@ -146,8 +146,8 @@
"description": "kpatch livepatch build for CVE-2026-99999 on AlmaLinux 8\/9 GA kernels",
"fork": false,
"created_at": "2026-10-18T10:31:50Z",
"updated_at": "2026-10-20T20:00:54Z",
"pushed_at": "2026-10-20T20:00:49Z",
"updated_at": "2026-10-21T02:47:38Z",
"pushed_at": "2026-10-21T02:47:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -179,10 +179,10 @@
"description": "CVE-2026-99999 PwnEscape PoC - Linux kernel IPv4 csum_start validation bug guest-to-host memory leak (CVSS 9.3)",
"fork": false,
"created_at": "2026-10-18T13:16:12Z",
"updated_at": "2026-10-20T05:18:55Z",
"updated_at": "2026-10-21T02:36:09Z",
"pushed_at": "2026-10-20T05:18:51Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -193,7 +193,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
@@ -284,8 +284,8 @@
"description": "kpatch livepatch build and load test for CVE-2026-99999 on Rocky Linux 8.10 (4.18.0-553.144.1.el8_10)",
"fork": false,
"created_at": "2026-10-19T12:48:59Z",
"updated_at": "2026-10-20T19:02:05Z",
"pushed_at": "2026-10-20T19:02:01Z",
"updated_at": "2026-10-21T04:16:11Z",
"pushed_at": "2026-10-21T04:16:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,