nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/08/18 12:51:07

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-08-18 21:51:08 +09:00
1 parent 3589255d94
commit 9fe2a1765c
61 files changed
+387 -389
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2017/CVE-2017-11317.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Telerik UI for ASP.NET AJAX File upload and .NET deserialisation exploit (CVE-2017-11317, CVE-2017-11357, CVE-2019-18935)",
"fork": false,
"created_at": "2018-01-09T13:53:57Z",
"updated_at": "2026-08-15T23:11:55Z",
"updated_at": "2026-08-18T08:45:13Z",
"pushed_at": "2020-08-22T06:15:54Z",
"stargazers_count": 179,
"watchers_count": 179,
"stargazers_count": 180,
"watchers_count": 180,
"has_discussions": false,
"forks_count": 50,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 50,
"watchers": 179,
"watchers": 180,
"score": 0,
"subscribers_count": 7
},
2017/CVE-2017-5754.json
+4 -4
View File
@@ -57,10 +57,10 @@
"description": "Meltdown Exploit \/ Proof-of-concept \/ checks whether system is affected by Variant 3: rogue data cache load (CVE-2017-5754), a.k.a MELTDOWN.",
"fork": false,
"created_at": "2018-01-04T23:51:12Z",
"updated_at": "2026-07-29T17:57:46Z",
"updated_at": "2026-08-18T07:05:54Z",
"pushed_at": "2018-02-27T05:22:38Z",
"stargazers_count": 539,
"watchers_count": 539,
"stargazers_count": 538,
"watchers_count": 538,
"has_discussions": false,
"forks_count": 68,
"allow_forking": true,
@@ -80,7 +80,7 @@
],
"visibility": "public",
"forks": 68,
"watchers": 539,
"watchers": 538,
"score": 0,
"subscribers_count": 43
},
2017/CVE-2017-7921.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Hikvision camera CVE-2017-7921-EXP",
"fork": false,
"created_at": "2020-04-27T11:49:40Z",
"updated_at": "2026-08-18T02:48:16Z",
"updated_at": "2026-08-18T09:19:24Z",
"pushed_at": "2023-12-04T15:47:16Z",
"stargazers_count": 103,
"watchers_count": 103,
"stargazers_count": 102,
"watchers_count": 102,
"has_discussions": false,
"forks_count": 19,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 19,
"watchers": 103,
"watchers": 102,
"score": 0,
"subscribers_count": 2
},
2017/CVE-2017-8529.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "My CVE-2017-8529 files",
"fork": false,
"created_at": "2020-02-09T05:46:20Z",
"updated_at": "2020-02-09T05:49:47Z",
"updated_at": "2026-08-18T07:10:17Z",
"pushed_at": "2020-02-09T05:49:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 1
}
2018/CVE-2018-19320.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "Unsigned driver loader using CVE-2018-19320",
"fork": false,
"created_at": "2022-11-12T05:48:13Z",
"updated_at": "2026-08-10T03:22:38Z",
"updated_at": "2026-08-18T11:07:43Z",
"pushed_at": "2026-03-16T09:42:55Z",
"stargazers_count": 370,
"watchers_count": 370,
"stargazers_count": 371,
"watchers_count": 371,
"has_discussions": false,
"forks_count": 84,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 84,
"watchers": 370,
"watchers": 371,
"score": 0,
"subscribers_count": 9
}
2019/CVE-2019-0232.json
+4 -4
View File
@@ -212,10 +212,10 @@
"description": "Vulnerability analysis and PoC for the Apache Tomcat - CGIServlet enableCmdLineArguments Remote Code Execution (RCE)",
"fork": false,
"created_at": "2021-03-25T20:09:54Z",
"updated_at": "2026-08-17T15:10:30Z",
"updated_at": "2026-08-18T10:37:24Z",
"pushed_at": "2021-09-04T00:45:00Z",
"stargazers_count": 30,
"watchers_count": 30,
"stargazers_count": 31,
"watchers_count": 31,
"has_discussions": false,
"forks_count": 11,
"allow_forking": true,
@@ -230,7 +230,7 @@
],
"visibility": "public",
"forks": 11,
"watchers": 30,
"watchers": 31,
"score": 0,
"subscribers_count": 1
},
2019/CVE-2019-18935.json
+8 -8
View File
@@ -14,10 +14,10 @@
"description": "Telerik UI for ASP.NET AJAX File upload and .NET deserialisation exploit (CVE-2017-11317, CVE-2017-11357, CVE-2019-18935)",
"fork": false,
"created_at": "2018-01-09T13:53:57Z",
"updated_at": "2026-08-15T23:11:55Z",
"updated_at": "2026-08-18T08:45:13Z",
"pushed_at": "2020-08-22T06:15:54Z",
"stargazers_count": 179,
"watchers_count": 179,
"stargazers_count": 180,
"watchers_count": 180,
"has_discussions": false,
"forks_count": 50,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 50,
"watchers": 179,
"watchers": 180,
"score": 0,
"subscribers_count": 7
},
@@ -47,10 +47,10 @@
"description": "RCE exploit for a .NET JSON deserialization vulnerability in Telerik UI for ASP.NET AJAX.",
"fork": false,
"created_at": "2019-12-12T07:58:11Z",
"updated_at": "2026-07-29T10:33:43Z",
"updated_at": "2026-08-18T07:57:54Z",
"pushed_at": "2022-04-14T18:23:38Z",
"stargazers_count": 373,
"watchers_count": 373,
"stargazers_count": 374,
"watchers_count": 374,
"has_discussions": false,
"forks_count": 88,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 88,
"watchers": 373,
"watchers": 374,
"score": 0,
"subscribers_count": 11
},
2019/CVE-2019-2215.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2019-10-04T06:32:08Z",
"updated_at": "2026-05-13T19:46:49Z",
"updated_at": "2026-08-18T11:12:37Z",
"pushed_at": "2019-11-12T03:58:00Z",
"stargazers_count": 77,
"watchers_count": 77,
"stargazers_count": 78,
"watchers_count": 78,
"has_discussions": false,
"forks_count": 35,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 35,
"watchers": 77,
"watchers": 78,
"score": 0,
"subscribers_count": 6
},
2021/CVE-2021-1675.json
+4 -4
View File
@@ -329,10 +329,10 @@
"description": "Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)",
"fork": false,
"created_at": "2021-07-01T23:45:58Z",
"updated_at": "2026-08-11T11:56:45Z",
"updated_at": "2026-08-18T08:56:42Z",
"pushed_at": "2021-07-05T08:54:06Z",
"stargazers_count": 1104,
"watchers_count": 1104,
"stargazers_count": 1105,
"watchers_count": 1105,
"has_discussions": false,
"forks_count": 225,
"allow_forking": true,
@@ -343,7 +343,7 @@
"topics": [],
"visibility": "public",
"forks": 225,
"watchers": 1104,
"watchers": 1105,
"score": 0,
"subscribers_count": 23
},
2021/CVE-2021-1931.json
+2 -2
View File
@@ -80,8 +80,8 @@
"description": "Unlock the Meta Quest 1 bootloader and gain root access using GhostLock + CVE-2021-1931.",
"fork": false,
"created_at": "2026-07-31T05:37:56Z",
"updated_at": "2026-08-16T13:54:53Z",
"pushed_at": "2026-08-15T16:51:04Z",
"updated_at": "2026-08-18T07:06:51Z",
"pushed_at": "2026-08-18T07:05:15Z",
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
2021/CVE-2021-33044.json
+6 -6
View File
@@ -146,10 +146,10 @@
"description": "Dahua IP camera CVE research toolkit (CVE-2021-33044\/33045, CVE-2025-31700\/31701)",
"fork": false,
"created_at": "2026-03-03T21:28:23Z",
"updated_at": "2026-08-18T05:59:13Z",
"updated_at": "2026-08-18T08:14:10Z",
"pushed_at": "2026-04-02T01:55:41Z",
"stargazers_count": 23,
"watchers_count": 23,
"stargazers_count": 24,
"watchers_count": 24,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -160,7 +160,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 23,
"watchers": 24,
"score": 0,
"subscribers_count": 2
},
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-08-18T06:03:05Z",
"pushed_at": "2026-08-18T06:01:51Z",
"updated_at": "2026-08-18T12:02:40Z",
"pushed_at": "2026-08-18T11:58:24Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-40444.json
+6 -6
View File
@@ -250,7 +250,7 @@
"stargazers_count": 1789,
"watchers_count": 1789,
"has_discussions": false,
"forks_count": 475,
"forks_count": 473,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -258,7 +258,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 475,
"forks": 473,
"watchers": 1789,
"score": 0,
"subscribers_count": 27
@@ -575,10 +575,10 @@
"description": "CVE-2021-40444 - Fully Weaponized Microsoft Office Word RCE Exploit",
"fork": false,
"created_at": "2021-09-15T22:34:35Z",
"updated_at": "2026-08-15T20:34:09Z",
"updated_at": "2026-08-18T08:43:59Z",
"pushed_at": "2023-10-11T18:44:51Z",
"stargazers_count": 834,
"watchers_count": 834,
"stargazers_count": 833,
"watchers_count": 833,
"has_discussions": false,
"forks_count": 164,
"allow_forking": true,
@@ -596,7 +596,7 @@
],
"visibility": "public",
"forks": 164,
"watchers": 834,
"watchers": 833,
"score": 0,
"subscribers_count": 14
},
2022/CVE-2022-27254.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "PoC for vulnerability in Honda's Remote Keyless System(CVE-2022-27254)",
"fork": false,
"created_at": "2022-03-23T15:03:09Z",
"updated_at": "2026-07-19T23:33:24Z",
"updated_at": "2026-08-18T09:57:20Z",
"pushed_at": "2022-03-26T05:52:15Z",
"stargazers_count": 460,
"watchers_count": 460,
"stargazers_count": 459,
"watchers_count": 459,
"has_discussions": false,
"forks_count": 53,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 53,
"watchers": 460,
"watchers": 459,
"score": 0,
"subscribers_count": 17
}
2023/CVE-2023-21752.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 327,
"watchers_count": 327,
"has_discussions": false,
"forks_count": 65,
"forks_count": 64,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 65,
"forks": 64,
"watchers": 327,
"score": 0,
"subscribers_count": 2
2023/CVE-2023-24055.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 253,
"watchers_count": 253,
"has_discussions": false,
"forks_count": 37,
"forks_count": 36,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 37,
"forks": 36,
"watchers": 253,
"score": 0,
"subscribers_count": 6
2024/CVE-2024-0670.json
+2 -2
View File
@@ -118,8 +118,8 @@
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
"fork": false,
"created_at": "2026-01-08T01:32:09Z",
"updated_at": "2026-08-16T04:00:41Z",
"pushed_at": "2026-08-16T04:00:09Z",
"updated_at": "2026-08-18T09:56:02Z",
"pushed_at": "2026-08-18T09:55:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-31317.json
+4 -4
View File
@@ -179,10 +179,10 @@
"description": "Quick tool for utilizing CVE-2024-31317 on Android",
"fork": false,
"created_at": "2025-10-20T13:47:09Z",
"updated_at": "2026-08-12T10:44:15Z",
"updated_at": "2026-08-18T11:43:52Z",
"pushed_at": "2026-02-16T10:22:42Z",
"stargazers_count": 75,
"watchers_count": 75,
"stargazers_count": 76,
"watchers_count": 76,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -193,7 +193,7 @@
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 75,
"watchers": 76,
"score": 0,
"subscribers_count": 1
},
2024/CVE-2024-4577.json
+4 -4
View File
@@ -146,10 +146,10 @@
"description": "PHP CGI Argument Injection (CVE-2024-4577) Remote Code Execution PoC",
"fork": false,
"created_at": "2024-06-07T09:52:54Z",
"updated_at": "2026-08-16T21:56:58Z",
"updated_at": "2026-08-18T10:19:12Z",
"pushed_at": "2024-06-22T15:13:52Z",
"stargazers_count": 318,
"watchers_count": 318,
"stargazers_count": 319,
"watchers_count": 319,
"has_discussions": false,
"forks_count": 64,
"allow_forking": true,
@@ -160,7 +160,7 @@
"topics": [],
"visibility": "public",
"forks": 64,
"watchers": 318,
"watchers": 319,
"score": 0,
"subscribers_count": 4
},
2024/CVE-2024-49138.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 270,
"watchers_count": 270,
"has_discussions": false,
"forks_count": 62,
"forks_count": 61,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -32,7 +32,7 @@
"windows"
],
"visibility": "public",
"forks": 62,
"forks": 61,
"watchers": 270,
"score": 0,
"subscribers_count": 3
2025/CVE-2025-14847.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
"fork": false,
"created_at": "2025-07-30T15:52:00Z",
"updated_at": "2026-08-16T04:01:25Z",
"pushed_at": "2026-08-16T04:01:19Z",
"updated_at": "2026-08-18T09:57:26Z",
"pushed_at": "2026-08-18T09:56:31Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -964,8 +964,8 @@
"description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
"fork": false,
"created_at": "2026-01-14T06:05:44Z",
"updated_at": "2026-08-16T04:01:07Z",
"pushed_at": "2026-08-16T04:01:03Z",
"updated_at": "2026-08-18T09:57:58Z",
"pushed_at": "2026-08-18T09:56:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-21479.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "iQOO Neo9 (PD2338C) 免解锁 Caps-Root 工具** — 基于 CVE-2025-21479 (Adreno GPU SDS) 的任意物理写提权方案",
"fork": false,
"created_at": "2026-08-17T14:37:05Z",
"updated_at": "2026-08-18T04:10:37Z",
"pushed_at": "2026-08-18T04:10:31Z",
"updated_at": "2026-08-18T07:18:41Z",
"pushed_at": "2026-08-18T07:16:27Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-2304.json
+4 -4
View File
@@ -214,10 +214,10 @@
"description": "Python script to exploit Privilege Escalation in Camaleon CMS.",
"fork": false,
"created_at": "2026-02-01T09:37:13Z",
"updated_at": "2026-07-23T07:45:55Z",
"updated_at": "2026-08-18T08:44:06Z",
"pushed_at": "2026-02-01T09:47:35Z",
"stargazers_count": 17,
"watchers_count": 17,
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -228,7 +228,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 17,
"watchers": 16,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-31700.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Dahua IP camera CVE research toolkit (CVE-2021-33044\/33045, CVE-2025-31700\/31701)",
"fork": false,
"created_at": "2026-03-03T21:28:23Z",
"updated_at": "2026-08-18T05:59:13Z",
"updated_at": "2026-08-18T08:14:10Z",
"pushed_at": "2026-04-02T01:55:41Z",
"stargazers_count": 23,
"watchers_count": 23,
"stargazers_count": 24,
"watchers_count": 24,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 23,
"watchers": 24,
"score": 0,
"subscribers_count": 2
}
2025/CVE-2025-36911.json
+4 -4
View File
@@ -86,10 +86,10 @@
"description": "WPair is a defensive security research tool that demonstrates the CVE-2025-36911 (eg WhisperPair) vulnerability in Google's Fast Pair protocol. This vulnerability affects millions of Bluetooth audio devices worldwide, allowing unauthorized pairing and potential microphone access without user consent.",
"fork": false,
"created_at": "2026-01-17T05:28:08Z",
"updated_at": "2026-08-17T18:51:30Z",
"updated_at": "2026-08-18T10:24:05Z",
"pushed_at": "2026-01-18T00:15:59Z",
"stargazers_count": 826,
"watchers_count": 826,
"stargazers_count": 827,
"watchers_count": 827,
"has_discussions": false,
"forks_count": 91,
"allow_forking": true,
@@ -100,7 +100,7 @@
"topics": [],
"visibility": "public",
"forks": 91,
"watchers": 826,
"watchers": 827,
"score": 0,
"subscribers_count": 23
},
2025/CVE-2025-49844.json
+2 -2
View File
@@ -66,8 +66,8 @@
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
"fork": false,
"created_at": "2022-04-06T09:27:39Z",
"updated_at": "2026-08-16T03:51:28Z",
"pushed_at": "2026-08-16T03:51:24Z",
"updated_at": "2026-08-18T09:47:24Z",
"pushed_at": "2026-08-18T09:45:45Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-52915.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-08-18T05:38:37Z",
"pushed_at": "2026-08-15T12:46:49Z",
"updated_at": "2026-08-18T12:30:00Z",
"pushed_at": "2026-08-18T12:25:25Z",
"stargazers_count": 908,
"watchers_count": 908,
"has_discussions": false,
2025/CVE-2025-55182.json
+14 -14
View File
@@ -99,8 +99,8 @@
"description": null,
"fork": false,
"created_at": "2024-11-29T12:32:19Z",
"updated_at": "2026-08-16T03:58:09Z",
"pushed_at": "2026-08-16T03:58:05Z",
"updated_at": "2026-08-18T09:55:03Z",
"pushed_at": "2026-08-18T09:52:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -148,8 +148,8 @@
"description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
"fork": false,
"created_at": "2025-06-06T16:34:46Z",
"updated_at": "2026-08-16T03:58:27Z",
"pushed_at": "2026-08-16T03:57:57Z",
"updated_at": "2026-08-18T09:54:02Z",
"pushed_at": "2026-08-18T09:52:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -9833,10 +9833,10 @@
"description": "Hack The Box Writeup for Retired Challenge ReactOOPS - Complete solution and educational guide to CVE-2025-55182\/CVE-2025-66478 (React2Shell RCE). Includes detailed vulnerability analysis, exploitation techniques, and team learning materials.",
"fork": false,
"created_at": "2025-12-13T03:48:28Z",
"updated_at": "2026-05-30T11:28:03Z",
"updated_at": "2026-08-18T11:30:40Z",
"pushed_at": "2025-12-13T18:20:12Z",
"stargazers_count": 6,
"watchers_count": 6,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -9858,7 +9858,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 6,
"watchers": 7,
"score": 0,
"subscribers_count": 0
},
@@ -11401,10 +11401,10 @@
"description": "CVE-2025-55182 React2Shell PoC - Critical RCE in React Server Components \/ Next.js. CVSS 10.0. Error-based exfil, reverse shell, interactive mode.",
"fork": false,
"created_at": "2025-12-20T19:59:11Z",
"updated_at": "2026-07-14T23:56:36Z",
"updated_at": "2026-08-18T09:58:19Z",
"pushed_at": "2026-05-24T16:13:57Z",
"stargazers_count": 9,
"watchers_count": 9,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -11426,7 +11426,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 9,
"watchers": 8,
"score": 0,
"subscribers_count": 0
},
@@ -12178,8 +12178,8 @@
"description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
"fork": false,
"created_at": "2026-01-02T01:28:57Z",
"updated_at": "2026-08-16T03:59:12Z",
"pushed_at": "2026-08-16T03:59:08Z",
"updated_at": "2026-08-18T09:54:39Z",
"pushed_at": "2026-08-18T09:54:11Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-69848.json
+4 -4
View File
@@ -1,8 +1,8 @@
[
{
"id": 1148221508,
"name": "security-advisories",
"full_name": "alkimcoskun\/security-advisories",
"name": "CVE-2025-69848-security-advisories",
"full_name": "alkimcoskun\/CVE-2025-69848-security-advisories",
"owner": {
"login": "alkimcoskun",
"id": 65768966,
@@ -10,11 +10,11 @@
"html_url": "https:\/\/github.com\/alkimcoskun",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/alkimcoskun\/security-advisories",
"html_url": "https:\/\/github.com\/alkimcoskun\/CVE-2025-69848-security-advisories",
"description": "Security advisory for CVE-2025-69848 – Reflected XSS in NetBox ProtectedError handling",
"fork": false,
"created_at": "2026-02-02T18:05:59Z",
"updated_at": "2026-02-02T18:06:45Z",
"updated_at": "2026-08-18T10:16:09Z",
"pushed_at": "2026-02-02T18:06:41Z",
"stargazers_count": 0,
"watchers_count": 0,
2025/CVE-2025-8088.json
+12 -12
View File
@@ -154,10 +154,10 @@
"description": "CVE-2025-8088 WinRAR Proof of Concept (PoC-Exploit)",
"fork": false,
"created_at": "2025-08-13T11:05:46Z",
"updated_at": "2026-07-08T04:47:56Z",
"updated_at": "2026-08-18T07:52:22Z",
"pushed_at": "2025-08-13T11:09:34Z",
"stargazers_count": 72,
"watchers_count": 72,
"stargazers_count": 73,
"watchers_count": 73,
"has_discussions": false,
"forks_count": 31,
"allow_forking": true,
@@ -168,7 +168,7 @@
"topics": [],
"visibility": "public",
"forks": 31,
"watchers": 72,
"watchers": 73,
"score": 0,
"subscribers_count": 1
},
@@ -263,10 +263,10 @@
"description": "Exploit systems using older WinRAR without knowing their username (unlike other projects)",
"fork": false,
"created_at": "2025-08-16T06:12:34Z",
"updated_at": "2026-07-18T03:21:13Z",
"updated_at": "2026-08-18T08:12:32Z",
"pushed_at": "2025-08-17T02:58:56Z",
"stargazers_count": 36,
"watchers_count": 36,
"stargazers_count": 35,
"watchers_count": 35,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -277,7 +277,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 36,
"watchers": 35,
"score": 0,
"subscribers_count": 0
},
@@ -730,10 +730,10 @@
"description": "CVE-2025-8088 C++ implementation",
"fork": false,
"created_at": "2025-09-25T05:44:47Z",
"updated_at": "2026-08-07T07:19:41Z",
"updated_at": "2026-08-18T11:16:26Z",
"pushed_at": "2026-06-19T07:23:57Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -744,7 +744,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 7,
"watchers": 8,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-12478.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Vulnerability research write-ups — CVE-2026-12478 (libsoup), Apple WebKit, Google VRP",
"fork": false,
"created_at": "2026-08-01T11:25:16Z",
"updated_at": "2026-08-02T04:57:38Z",
"pushed_at": "2026-08-02T04:57:07Z",
"updated_at": "2026-08-18T09:37:41Z",
"pushed_at": "2026-08-18T09:37:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-14669.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1338332768,
"name": "CVE-2026-14669",
"full_name": "HackSpeak\/CVE-2026-14669",
"owner": {
"login": "HackSpeak",
"id": 312486542,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/312486542?v=4",
"html_url": "https:\/\/github.com\/HackSpeak",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/HackSpeak\/CVE-2026-14669",
"description": "CVE-2026-14669 - PostgreSQL to_char() timezone abbreviation heap buffer overflow PoC; for authorized security testing",
"fork": false,
"created_at": "2026-08-18T11:37:14Z",
"updated_at": "2026-08-18T11:42:03Z",
"pushed_at": "2026-08-18T11:41:59Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-19478.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1338094971,
"name": "CVE-2026-19478-PoC",
"full_name": "davkharrr\/CVE-2026-19478-PoC",
"owner": {
"login": "davkharrr",
"id": 33713553,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/33713553?v=4",
"html_url": "https:\/\/github.com\/davkharrr",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/davkharrr\/CVE-2026-19478-PoC",
"description": "CVE-2026-19478 PoC . Unauthenticated remote code-injection in GitLab's GraphQL layer ",
"fork": false,
"created_at": "2026-08-18T07:14:05Z",
"updated_at": "2026-08-18T09:37:16Z",
"pushed_at": "2026-08-18T07:21:58Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-20253.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "CVE-2026-20253",
"fork": false,
"created_at": "2026-06-13T18:09:32Z",
"updated_at": "2026-07-24T02:43:41Z",
"updated_at": "2026-08-18T11:04:06Z",
"pushed_at": "2026-06-13T18:20:45Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-28992.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "UAF and AOP coprocessor panic in IOHIDEventServiceFastPathUserClient. No entitlements, reachable from app sandbox.",
"fork": false,
"created_at": "2026-02-14T03:20:49Z",
"updated_at": "2026-08-11T15:02:16Z",
"updated_at": "2026-08-18T12:39:09Z",
"pushed_at": "2026-06-28T22:18:38Z",
"stargazers_count": 13,
"watchers_count": 13,
"stargazers_count": 14,
"watchers_count": 14,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 13,
"watchers": 14,
"score": 0,
"subscribers_count": 1
},
2026/CVE-2026-31431.json
+6 -6
View File
@@ -47,10 +47,10 @@
"description": "Cross-platform C port of the Copy Fail Linux LPE (CVE-2026-31431). Disclosed 2026-04-29 by Theori \/ Xint.",
"fork": false,
"created_at": "2026-04-29T23:29:14Z",
"updated_at": "2026-08-16T11:07:46Z",
"updated_at": "2026-08-18T10:19:18Z",
"pushed_at": "2026-07-17T13:24:28Z",
"stargazers_count": 442,
"watchers_count": 442,
"stargazers_count": 444,
"watchers_count": 444,
"has_discussions": true,
"forks_count": 121,
"allow_forking": true,
@@ -74,7 +74,7 @@
],
"visibility": "public",
"forks": 121,
"watchers": 442,
"watchers": 444,
"score": 0,
"subscribers_count": 2
},
@@ -773,8 +773,8 @@
"description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.",
"fork": false,
"created_at": "2026-05-06T09:49:14Z",
"updated_at": "2026-08-16T04:20:27Z",
"pushed_at": "2026-08-16T04:20:20Z",
"updated_at": "2026-08-18T10:17:51Z",
"pushed_at": "2026-08-18T10:17:09Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-31635.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "CVE-2026-31635",
"fork": false,
"created_at": "2026-05-19T21:39:31Z",
"updated_at": "2026-07-04T04:59:00Z",
"updated_at": "2026-08-18T09:02:13Z",
"pushed_at": "2026-05-20T10:22:15Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 3,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 5,
"forks": 4,
"watchers": 7,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-31802.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"fork": false,
"created_at": "2026-03-28T20:49:46Z",
"updated_at": "2026-08-16T04:14:30Z",
"pushed_at": "2026-08-16T04:13:56Z",
"updated_at": "2026-08-18T10:10:55Z",
"pushed_at": "2026-08-18T10:10:29Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-32128.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1338267956,
"name": "fastgpt-sandbox-audit",
"full_name": "qianlijaingshan\/fastgpt-sandbox-audit",
"owner": {
"login": "qianlijaingshan",
"id": 208015249,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/208015249?v=4",
"html_url": "https:\/\/github.com\/qianlijaingshan",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/qianlijaingshan\/fastgpt-sandbox-audit",
"description": "FastGPT Python sandbox escape chain audit tool (CVE-2026-32128 related, v4.14.8 inspect chain)",
"fork": false,
"created_at": "2026-08-18T10:22:06Z",
"updated_at": "2026-08-18T10:23:50Z",
"pushed_at": "2026-08-18T10:22:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-3609.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-08-18T05:38:37Z",
"pushed_at": "2026-08-15T12:46:49Z",
"updated_at": "2026-08-18T12:30:00Z",
"pushed_at": "2026-08-18T12:25:25Z",
"stargazers_count": 908,
"watchers_count": 908,
"has_discussions": false,
2026/CVE-2026-41940.json
+6 -6
View File
@@ -291,8 +291,8 @@
"description": "Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.",
"fork": false,
"created_at": "2026-05-06T18:08:48Z",
"updated_at": "2026-08-16T04:20:21Z",
"pushed_at": "2026-08-16T04:20:12Z",
"updated_at": "2026-08-18T10:19:37Z",
"pushed_at": "2026-08-18T10:17:24Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -807,10 +807,10 @@
"description": "A cPanel and WHM authentication bypassing tool",
"fork": false,
"created_at": "2026-08-13T16:03:48Z",
"updated_at": "2026-08-17T16:21:47Z",
"updated_at": "2026-08-18T08:34:58Z",
"pushed_at": "2026-08-13T16:09:49Z",
"stargazers_count": 281,
"watchers_count": 281,
"stargazers_count": 282,
"watchers_count": 282,
"has_discussions": false,
"forks_count": 14,
"allow_forking": true,
@@ -826,7 +826,7 @@
],
"visibility": "public",
"forks": 14,
"watchers": 281,
"watchers": 282,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-42533.json
+2 -2
View File
@@ -120,8 +120,8 @@
"description": "Tracking the nginx CVE-2026-42533 map\/regex capture-clobbering heap overflow",
"fork": false,
"created_at": "2026-07-21T05:27:18Z",
"updated_at": "2026-08-16T07:02:10Z",
"pushed_at": "2026-08-16T07:01:04Z",
"updated_at": "2026-08-18T08:14:08Z",
"pushed_at": "2026-08-18T08:13:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-43499.json
+27 -27
View File
@@ -254,7 +254,7 @@
"stargazers_count": 226,
"watchers_count": 226,
"has_discussions": false,
"forks_count": 86,
"forks_count": 87,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -262,7 +262,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 86,
"forks": 87,
"watchers": 226,
"score": 0,
"subscribers_count": 1
@@ -320,7 +320,7 @@
"stargazers_count": 266,
"watchers_count": 266,
"has_discussions": false,
"forks_count": 54,
"forks_count": 55,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -335,7 +335,7 @@
"root"
],
"visibility": "public",
"forks": 54,
"forks": 55,
"watchers": 266,
"score": 0,
"subscribers_count": 10
@@ -1048,10 +1048,10 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
"updated_at": "2026-08-18T03:21:56Z",
"updated_at": "2026-08-18T11:48:59Z",
"pushed_at": "2026-08-09T05:13:42Z",
"stargazers_count": 855,
"watchers_count": 855,
"stargazers_count": 858,
"watchers_count": 858,
"has_discussions": false,
"forks_count": 161,
"allow_forking": true,
@@ -1062,7 +1062,7 @@
"topics": [],
"visibility": "public",
"forks": 161,
"watchers": 855,
"watchers": 858,
"score": 0,
"subscribers_count": 27
},
@@ -2004,8 +2004,8 @@
"description": "Jailbreak supported Google Pixel phones with CVE-2026-43499",
"fork": false,
"created_at": "2026-08-02T17:34:45Z",
"updated_at": "2026-08-18T05:19:55Z",
"pushed_at": "2026-08-16T17:53:37Z",
"updated_at": "2026-08-18T12:26:42Z",
"pushed_at": "2026-08-18T12:16:13Z",
"stargazers_count": 170,
"watchers_count": 170,
"has_discussions": false,
@@ -2308,10 +2308,10 @@
"description": "独立 APK：CVE-2026-43499 GhostLock 提权 + Shizuku shell 身份执行",
"fork": false,
"created_at": "2026-08-10T22:00:35Z",
"updated_at": "2026-08-10T22:54:55Z",
"updated_at": "2026-08-18T11:17:36Z",
"pushed_at": "2026-08-10T22:54:49Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -2322,7 +2322,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
@@ -2341,10 +2341,10 @@
"description": "GhostLock-X200 v1.0 - temporary root toolchain for vivo X200 (PD2415 \/ b57 kernel) based on CVE-2026-43499. For authorized security research only.",
"fork": false,
"created_at": "2026-08-10T23:26:52Z",
"updated_at": "2026-08-17T17:55:49Z",
"updated_at": "2026-08-18T12:23:32Z",
"pushed_at": "2026-08-17T17:53:03Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -2355,7 +2355,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 2,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
@@ -2473,10 +2473,10 @@
"description": "vivo\/iQOO 临时 root 工具箱 (免解锁临时root, CVE-2026-43499) - 源码与脚本",
"fork": false,
"created_at": "2026-08-12T10:05:38Z",
"updated_at": "2026-08-17T13:00:49Z",
"updated_at": "2026-08-18T08:55:20Z",
"pushed_at": "2026-08-12T10:05:44Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -2487,7 +2487,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
@@ -2814,10 +2814,10 @@
"description": "Kernel root exploit (CVE-2026-43499) for some 5.X devices (mostly Amazon)",
"fork": false,
"created_at": "2026-08-17T16:57:57Z",
"updated_at": "2026-08-18T06:38:01Z",
"pushed_at": "2026-08-18T02:18:22Z",
"stargazers_count": 4,
"watchers_count": 4,
"updated_at": "2026-08-18T11:24:43Z",
"pushed_at": "2026-08-18T10:22:17Z",
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -2828,7 +2828,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 4,
"watchers": 8,
"score": 0,
"subscribers_count": 1
}
2026/CVE-2026-45585.json
+8 -8
View File
@@ -80,10 +80,10 @@
"description": "BitLocker TPM+PIN Hardening Against CVE-2026-45585 (YellowKey)",
"fork": false,
"created_at": "2026-05-24T05:26:15Z",
"updated_at": "2026-07-15T16:00:35Z",
"updated_at": "2026-08-18T10:39:50Z",
"pushed_at": "2026-05-24T06:16:44Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
@@ -212,8 +212,8 @@
"description": "Manage and recover BitLocker encrypted drives with this tool for Windows 11 recovery key management and educational study of CVE-2026-45585.",
"fork": false,
"created_at": "2026-06-16T07:21:36Z",
"updated_at": "2026-08-16T04:22:36Z",
"pushed_at": "2026-08-16T04:22:30Z",
"updated_at": "2026-08-18T10:20:31Z",
"pushed_at": "2026-08-18T10:19:53Z",
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
@@ -316,8 +316,8 @@
"description": "Manage BitLocker encrypted drives on Windows. Extract recovery keys, check encryption status, and apply security mitigations for CVE-2026-45585.",
"fork": false,
"created_at": "2026-07-25T02:47:26Z",
"updated_at": "2026-08-17T16:39:35Z",
"pushed_at": "2026-08-16T04:26:29Z",
"updated_at": "2026-08-18T10:24:09Z",
"pushed_at": "2026-08-18T10:24:04Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-48908.json
-33
View File
@@ -190,39 +190,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1295761917,
"name": "CVE-2026-48908-joomla-sp-page-builder-detection",
"full_name": "g0thamRabb1t\/CVE-2026-48908-joomla-sp-page-builder-detection",
"owner": {
"login": "g0thamRabb1t",
"id": 47489401,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47489401?v=4",
"html_url": "https:\/\/github.com\/g0thamRabb1t",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/g0thamRabb1t\/CVE-2026-48908-joomla-sp-page-builder-detection",
"description": "Laboratory validation of CVE-2026-48908 in Joomla SP Page Builder, covering unauthorized icon upload, PHP file write, code execution as www-data, auditd and PCAP evidence, event timeline reconstruction, and SOC detection recommendations. Includes Polish and English reports.",
"fork": false,
"created_at": "2026-07-09T20:42:00Z",
"updated_at": "2026-07-09T20:55:31Z",
"pushed_at": "2026-07-09T20:43:21Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1311982668,
"name": "CVE-2026-48908-Joomla-SP-Page-Builder-RCE",
2026/CVE-2026-49230.json
-45
View File
@@ -1,45 +0,0 @@
[
{
"id": 1295803232,
"name": "CVE-2026-49230-APISIX-jwe-decrypt-Auth-Bypass",
"full_name": "BiiTts\/CVE-2026-49230-APISIX-jwe-decrypt-Auth-Bypass",
"owner": {
"login": "BiiTts",
"id": 149285563,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/149285563?v=4",
"html_url": "https:\/\/github.com\/BiiTts",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/BiiTts\/CVE-2026-49230-APISIX-jwe-decrypt-Auth-Bypass",
"description": "PoC for CVE-2026-49230: Apache APISIX jwe-decrypt authentication bypass (missing AES-GCM tag validation, CWE-354, CVSS 9.1)",
"fork": false,
"created_at": "2026-07-09T21:46:14Z",
"updated_at": "2026-07-09T21:49:01Z",
"pushed_at": "2026-07-09T21:48:57Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"apache-apisix",
"api-gateway",
"apisix",
"authentication-bypass",
"cve",
"cve-2026-49230",
"jwe",
"poc",
"security"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-55040.json
+8 -8
View File
@@ -14,10 +14,10 @@
"description": "Exploit code for CVE-2026-55040, it can create auth header for any validate account.",
"fork": false,
"created_at": "2026-07-28T08:46:15Z",
"updated_at": "2026-08-14T02:09:44Z",
"updated_at": "2026-08-18T09:25:51Z",
"pushed_at": "2026-07-28T09:04:14Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
@@ -47,10 +47,10 @@
"description": "Microsoft SharePoint JWT Authentication Bypass (CVE-2026-55040)",
"fork": false,
"created_at": "2026-08-06T11:46:34Z",
"updated_at": "2026-08-18T01:24:45Z",
"updated_at": "2026-08-18T10:31:07Z",
"pushed_at": "2026-08-10T15:35:23Z",
"stargazers_count": 52,
"watchers_count": 52,
"stargazers_count": 53,
"watchers_count": 53,
"has_discussions": false,
"forks_count": 11,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 11,
"watchers": 52,
"watchers": 53,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-57827.json
+2 -2
View File
@@ -61,8 +61,8 @@
"description": "Demonstrate the unauthenticated remote code execution vulnerability in the RSFiles! Joomla component through an arbitrary file upload.",
"fork": false,
"created_at": "2026-07-30T20:49:05Z",
"updated_at": "2026-08-16T04:27:14Z",
"pushed_at": "2026-08-16T04:27:08Z",
"updated_at": "2026-08-18T10:25:44Z",
"pushed_at": "2026-08-18T10:24:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-57973.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 1313898055,
"name": "CVE-2026-57973",
"full_name": "riddhimaan-sth404\/CVE-2026-57973",
"owner": {
"login": "riddhimaan-sth404",
"id": 250097584,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/250097584?v=4",
"html_url": "https:\/\/github.com\/riddhimaan-sth404",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/riddhimaan-sth404\/CVE-2026-57973",
"description": "CVE-2026-57973 is a medium-severity (CVSS 6.3) TOCTOU race condition flaw in Windows Subsystem for Linux (WSL2). It allows a local, low-privileged attacker to bypass security boundaries and perform unauthorized kernel-level tampering on the host machine without user interaction.",
"fork": false,
"created_at": "2026-07-27T13:49:55Z",
"updated_at": "2026-07-27T14:18:18Z",
"pushed_at": "2026-07-27T14:15:04Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-63030.json
+6 -6
View File
@@ -2411,12 +2411,12 @@
"description": "CVE-2026-63030 & CVE-2026-60137 RCE chain proof-of-concept",
"fork": false,
"created_at": "2026-08-05T12:48:03Z",
"updated_at": "2026-08-18T06:43:39Z",
"updated_at": "2026-08-18T12:47:13Z",
"pushed_at": "2026-08-13T15:04:07Z",
"stargazers_count": 684,
"watchers_count": 684,
"stargazers_count": 709,
"watchers_count": 709,
"has_discussions": false,
"forks_count": 138,
"forks_count": 142,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2431,8 +2431,8 @@
"wp2shell-poc"
],
"visibility": "public",
"forks": 138,
"watchers": 684,
"forks": 142,
"watchers": 709,
"score": 0,
"subscribers_count": 5
},
2026/CVE-2026-64531.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Tracking OVSwrap (CVE-2026-64531), the Open vSwitch datapath netlink overflow",
"fork": false,
"created_at": "2026-07-29T05:15:24Z",
"updated_at": "2026-08-18T06:30:30Z",
"pushed_at": "2026-08-18T06:29:59Z",
"updated_at": "2026-08-18T06:52:41Z",
"pushed_at": "2026-08-18T06:51:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-64560.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-08-03T12:36:27Z",
"updated_at": "2026-08-18T06:51:09Z",
"updated_at": "2026-08-18T07:14:59Z",
"pushed_at": "2026-08-03T12:39:41Z",
"stargazers_count": 29,
"watchers_count": 29,
"stargazers_count": 30,
"watchers_count": 30,
"has_discussions": false,
"forks_count": 12,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 12,
"watchers": 29,
"watchers": 30,
"score": 0,
"subscribers_count": 1
}
2026/CVE-2026-64564.json
+2 -2
View File
@@ -80,8 +80,8 @@
"description": "Tracking SCTPhantom (CVE-2026-64564), the Linux kernel SCTP ASCONF transport use-after-free",
"fork": false,
"created_at": "2026-08-10T05:16:43Z",
"updated_at": "2026-08-17T18:52:11Z",
"pushed_at": "2026-08-17T18:48:43Z",
"updated_at": "2026-08-18T08:16:51Z",
"pushed_at": "2026-08-18T08:13:27Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-65400.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-65400 - Draft or TODO",
"fork": false,
"created_at": "2026-08-18T01:45:39Z",
"updated_at": "2026-08-18T01:51:47Z",
"updated_at": "2026-08-18T08:46:16Z",
"pushed_at": "2026-08-18T01:51:36Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-66804.json
+6 -6
View File
@@ -47,12 +47,12 @@
"description": "CVE-2026-66804 Windows Cross Device virtual camera EoP - Standard user to SYSTEM",
"fork": false,
"created_at": "2026-08-13T01:42:43Z",
"updated_at": "2026-08-17T00:20:33Z",
"updated_at": "2026-08-18T11:32:33Z",
"pushed_at": "2026-08-13T04:21:37Z",
"stargazers_count": 17,
"watchers_count": 17,
"stargazers_count": 19,
"watchers_count": 19,
"has_discussions": false,
"forks_count": 7,
"forks_count": 8,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,8 +60,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 7,
"watchers": 17,
"forks": 8,
"watchers": 19,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-68138.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "Tracking CVE-2026-68138, the Linux kernel net\/sched qdisc rate-table use-after-free",
"fork": false,
"created_at": "2026-08-17T07:33:31Z",
"updated_at": "2026-08-18T06:29:02Z",
"pushed_at": "2026-08-18T06:28:26Z",
"updated_at": "2026-08-18T08:16:00Z",
"pushed_at": "2026-08-18T08:13:29Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-12400.json → 2026/CVE-2026-69414.json
+12 -12
View File
@@ -1,21 +1,21 @@
[
{
"id": 1295781069,
"name": "CVE-2026-12400-Exploit",
"full_name": "0x00phantom-hat\/CVE-2026-12400-Exploit",
"id": 1338091333,
"name": "ShieldBreak",
"full_name": "1neptune\/ShieldBreak",
"owner": {
"login": "0x00phantom-hat",
"id": 175491851,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/175491851?v=4",
"html_url": "https:\/\/github.com\/0x00phantom-hat",
"login": "1neptune",
"id": 76670255,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/76670255?v=4",
"html_url": "https:\/\/github.com\/1neptune",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0x00phantom-hat\/CVE-2026-12400-Exploit",
"description": null,
"html_url": "https:\/\/github.com\/1neptune\/ShieldBreak",
"description": "Windows Defender 0day vulnerability CVE-2026-69414 ShieldBreak",
"fork": false,
"created_at": "2026-07-09T21:10:54Z",
"updated_at": "2026-07-09T22:01:45Z",
"pushed_at": "2026-07-09T21:56:42Z",
"created_at": "2026-08-18T07:09:54Z",
"updated_at": "2026-08-18T07:17:44Z",
"pushed_at": "2026-08-18T07:17:05Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-73519.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "PoC for CVE-2026-73519 - WolfStack hardcoded cluster secret leads to unauthenticated RCE (CVSS 9.8)",
"fork": false,
"created_at": "2026-08-16T04:38:09Z",
"updated_at": "2026-08-16T04:38:30Z",
"pushed_at": "2026-08-16T04:38:13Z",
"updated_at": "2026-08-18T11:46:58Z",
"pushed_at": "2026-08-18T11:42:13Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-73847.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "PoC for CVE-2026-73847 - emlog AI Assistant CSRF to SQL execution to admin takeover (CVSS 6.8)",
"fork": false,
"created_at": "2026-08-16T04:38:17Z",
"updated_at": "2026-08-16T04:38:36Z",
"pushed_at": "2026-08-16T04:38:20Z",
"updated_at": "2026-08-18T11:46:31Z",
"pushed_at": "2026-08-18T11:42:10Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-8452.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 55,
"watchers_count": 55,
"has_discussions": false,
"forks_count": 10,
"forks_count": 11,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 10,
"forks": 11,
"watchers": 55,
"score": 0,
"subscribers_count": 1
2026/CVE-2026-9830.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "CVE-2026-9830 Proof of Concept",
"fork": false,
"created_at": "2026-08-15T20:57:13Z",
"updated_at": "2026-08-18T06:43:38Z",
"updated_at": "2026-08-18T09:30:38Z",
"pushed_at": "2026-08-15T22:39:12Z",
"stargazers_count": 217,
"watchers_count": 217,
"stargazers_count": 220,
"watchers_count": 220,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -72,7 +72,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 217,
"watchers": 220,
"score": 0,
"subscribers_count": 0
}
README.md
+29 -23
View File
@@ -1845,13 +1845,6 @@
- [hakaioffsec/CVE-2026-12191](https://github.com/hakaioffsec/CVE-2026-12191)
### CVE-2026-12400 (2026-07-10)
<code>The FlowForms – Conversational Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.1 via the update_form due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with contributor-level access and above, to modify the content, design, and settings of, as well as publish or revert, any form on the site — including forms owned by administrators — by supplying an arbitrary form ID in the REST URL.
</code>
- [0x00phantom-hat/CVE-2026-12400-Exploit](https://github.com/0x00phantom-hat/CVE-2026-12400-Exploit)
### CVE-2026-12415 (2026-06-27)
<code>The Invoice Generator plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the pravel_invoice_edit_account() AJAX action in versions up to, and including, 1.0.0. The handler is exposed via wp_ajax_nopriv_pravel_invoice_edit_account, accepts an attacker-controlled user_id and user_email from POST data, and calls wp_update_user() without verifying authentication, ownership, or a nonce. This makes it possible for unauthenticated attackers to change the email address of any user, including administrators, and then trigger WordPress's password reset flow to gain access to the targeted account.
@@ -2025,6 +2018,13 @@
- [MadExploits/CVE-2026-14483](https://github.com/MadExploits/CVE-2026-14483)
- [0xdak/CVE-2026-14483_exploit](https://github.com/0xdak/CVE-2026-14483_exploit)
### CVE-2026-14669 (2026-08-13)
<code>Heap buffer overflow in PostgreSQL to_char(timestamptz) allows the party choosing the timezone to execute arbitrary code as the operating system user running the database, via a long POSIX timezone abbreviation. Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.
</code>
- [HackSpeak/CVE-2026-14669](https://github.com/HackSpeak/CVE-2026-14669)
### CVE-2026-14802 (2026-07-06)
<code>A vulnerability was detected in react create-react-app up to 5.0.1 on macOS. This affects the function startBrowserProcess of the file openBrowser.js of the component react-dev-utils. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
@@ -2330,6 +2330,13 @@
- [DarkLycn1976/CVE-2026-19264](https://github.com/DarkLycn1976/CVE-2026-19264)
### CVE-2026-19478 (2026-08-17)
<code>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain conditions could allow an unauthenticated user to remotely modify or delete public projects and user data via a GraphQL directive.
</code>
- [davkharrr/CVE-2026-19478-PoC](https://github.com/davkharrr/CVE-2026-19478-PoC)
### CVE-2026-19650 (2026-08-17)
<code>GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain conditions could have allowed an unauthenticated user to execute mutations via GET requests due to improper request validation in GraphQL multiplex query handling.
@@ -3826,6 +3833,13 @@
- [K3ysTr0K3R/CVE-2026-31816](https://github.com/K3ysTr0K3R/CVE-2026-31816)
### CVE-2026-32128 (2026-03-11)
<code>FastGPT is an AI Agent building platform. In 4.14.7 and earlier, FastGPT's Python Sandbox (fastgpt-sandbox) includes guardrails intended to prevent file writes (static detection + seccomp). These guardrails are bypassable by remapping stdout (fd 1) to an arbitrary writable file descriptor using fcntl. After remapping, writing via sys.stdout.write() still satisfies the seccomp rule write(fd==1), enabling arbitrary file creation/overwrite inside the sandbox container despite the intended no file writes restriction.
</code>
- [qianlijaingshan/fastgpt-sandbox-audit](https://github.com/qianlijaingshan/fastgpt-sandbox-audit)
### CVE-2026-32194 (2026-03-19)
<code>Improper neutralization of special elements used in a command ('command injection') in Microsoft Bing Images allows an unauthorized attacker to execute code over a network.
@@ -6240,7 +6254,6 @@
- [0xBlackash/CVE-2026-48908](https://github.com/0xBlackash/CVE-2026-48908)
- [ayiezola/CVE-2026-48908](https://github.com/ayiezola/CVE-2026-48908)
- [cazzysoci/cve-2026-48908](https://github.com/cazzysoci/cve-2026-48908)
- [g0thamRabb1t/CVE-2026-48908-joomla-sp-page-builder-detection](https://github.com/g0thamRabb1t/CVE-2026-48908-joomla-sp-page-builder-detection)
- [imXur/CVE-2026-48908-Joomla-SP-Page-Builder-RCE](https://github.com/imXur/CVE-2026-48908-Joomla-SP-Page-Builder-RCE)
- [yora1928/CVE-2026-48908-by-yora](https://github.com/yora1928/CVE-2026-48908-by-yora)
@@ -6384,13 +6397,6 @@
- [DavidCarliez/CVE-2026-49176_LPE_POC](https://github.com/DavidCarliez/CVE-2026-49176_LPE_POC)
- [777erp/CVE-2026-49176_BOF](https://github.com/777erp/CVE-2026-49176_BOF)
### CVE-2026-49230 (2026-06-19)
<code>Improper Validation of Integrity Check Value vulnerability in Apache APISIX.\n\nThe jwe-decrypt plugin under default configuration is vulnerable to authentication bypass. \nThis issue affects Apache APISIX: from 3.8.0 through 3.16.0.\n\nUsers are recommended to upgrade to version 3.17.0, which fixes the issue.
</code>
- [BiiTts/CVE-2026-49230-APISIX-jwe-decrypt-Auth-Bypass](https://github.com/BiiTts/CVE-2026-49230-APISIX-jwe-decrypt-Auth-Bypass)
### CVE-2026-49268 (2026-06-17)
<code>A remote attacker can inject LDAP special characters into the Distinguished Name (DN) construction in DefaultLdapRealm class. User-supplied username input is directly concatenated into the LDAP DN template without any escaping of RFC 2253 special characters. This allows an attacker to manipulate the DN structure used for LDAP bind authentication, potentially bypassing authentication or impersonating other users.\n\nThis issue affects all Apache Shiro versions through 2.2.0, and 3.0.0-alpha-1 when using DefaultLdapRealm\nUpgrade to Apache Shiro 2.2.1 or 3.0.0-alpha-2 or later, which fixes the issue.
@@ -7252,13 +7258,6 @@
- [zylideum/CVE-2026-57858](https://github.com/zylideum/CVE-2026-57858)
### CVE-2026-57973 (2026-07-14)
<code>Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to perform tampering locally.
</code>
- [riddhimaan-sth404/CVE-2026-57973](https://github.com/riddhimaan-sth404/CVE-2026-57973)
### CVE-2026-58025 (2026-07-01)
<code>Deserialization of untrusted data vulnerability in Wikimedia Foundation MediaWiki.\n\n This vulnerability is associated with program files includes/Import/WikiImporter.Php, includes/Import/WikiRevision.Php, includes/Logging/LogEntryBase.Php.\n\n\n\nThis issue affects MediaWiki: from * before 1.46.0, 1.45.4, 1.44.6, 1.43.9.
@@ -8130,6 +8129,13 @@
- [leoelsolh/CVE-2026-69263](https://github.com/leoelsolh/CVE-2026-69263)
### CVE-2026-69414 (2026-08-14)
<code>Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as &amp;quot;ShieldBreak &amp;quot;.\nWe are working to provide a high quality security update that addresses this vulnerability. We will provide information in this CVE when the update is available.
</code>
- [1neptune/ShieldBreak](https://github.com/1neptune/ShieldBreak)
### CVE-2026-70376 (2026-08-05)
<code>Pluck CMS's admin panel relies solely on a Referer-header comparison (requestedByTheSameDomain in data/inc/functions.admin.php, gating every admin.php action) for CSRF protection, with no per-request anti-CSRF token anywhere in the admin area.
@@ -20015,7 +20021,7 @@
<code>NetBox is an open-source infrastructure resource modeling and IP address management platform. A reflected cross-site scripting (XSS) vulnerability exists in versions 2.11.0 through 3.7.x in the ProtectedError handling logic, where object names are included in HTML error messages without proper escaping. This allows user-controlled content to be rendered in the web interface when a delete operation fails due to protected relationships, potentially enabling execution of arbitrary client-side code in the context of a privileged user.
</code>
- [alkimcoskun/security-advisories](https://github.com/alkimcoskun/security-advisories)
- [alkimcoskun/CVE-2025-69848-security-advisories](https://github.com/alkimcoskun/CVE-2025-69848-security-advisories)
### CVE-2025-69906 (2026-02-05)