diff --git a/2002/CVE-2002-20001.json b/2002/CVE-2002-20001.json index baa89e2f71..11f614d354 100644 --- a/2002/CVE-2002-20001.json +++ b/2002/CVE-2002-20001.json @@ -19,7 +19,7 @@ "stargazers_count": 215, "watchers_count": 215, "has_discussions": false, - "forks_count": 29, + "forks_count": 30, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -48,7 +48,7 @@ "tls" ], "visibility": "public", - "forks": 29, + "forks": 30, "watchers": 215, "score": 0, "subscribers_count": 7 diff --git a/2016/CVE-2016-15042.json b/2016/CVE-2016-15042.json index 0ca27d3230..42b2889003 100644 --- a/2016/CVE-2016-15042.json +++ b/2016/CVE-2016-15042.json @@ -14,8 +14,8 @@ "description": "🛠️ Validate and demonstrate CVE-2016-15042 with a Dockerized lab for unauthenticated file uploads in WordPress file managers.", "fork": false, "created_at": "2023-10-23T05:54:10Z", - "updated_at": "2026-05-20T17:22:47Z", - "pushed_at": "2026-05-20T17:22:43Z", + "updated_at": "2026-05-20T21:39:51Z", + "pushed_at": "2026-05-20T21:39:47Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2016/CVE-2016-6210.json b/2016/CVE-2016-6210.json index 3704c8d58e..5e8ac42502 100644 --- a/2016/CVE-2016-6210.json +++ b/2016/CVE-2016-6210.json @@ -52,7 +52,7 @@ "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, - "forks_count": 1, + "forks_count": 0, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,7 +60,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 1, + "forks": 0, "watchers": 1, "score": 0, "subscribers_count": 1 diff --git a/2018/CVE-2018-14847.json b/2018/CVE-2018-14847.json index 0e124f1581..dd7fa3ad63 100644 --- a/2018/CVE-2018-14847.json +++ b/2018/CVE-2018-14847.json @@ -457,5 +457,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1245031652, + "name": "VULNERAVEL-CVE-2018-14847---CREDENCIAIS-EXTRAIDAS", + "full_name": "mourafuseti\/VULNERAVEL-CVE-2018-14847---CREDENCIAIS-EXTRAIDAS", + "owner": { + "login": "mourafuseti", + "id": 215736774, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/215736774?v=4", + "html_url": "https:\/\/github.com\/mourafuseti", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/mourafuseti\/VULNERAVEL-CVE-2018-14847---CREDENCIAIS-EXTRAIDAS", + "description": "VULNERAVEL CVE-2018-14847 - CREDENCIAIS EXTRAIDAS MIKROTIK EM PYTHON", + "fork": false, + "created_at": "2026-05-20T20:58:01Z", + "updated_at": "2026-05-20T21:19:54Z", + "pushed_at": "2026-05-20T21:19:48Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2019/CVE-2019-1040.json b/2019/CVE-2019-1040.json index 92f6c01924..53fc92ef11 100644 --- a/2019/CVE-2019-1040.json +++ b/2019/CVE-2019-1040.json @@ -179,8 +179,8 @@ "description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.", "fork": false, "created_at": "2025-12-06T19:56:12Z", - "updated_at": "2026-05-20T17:33:22Z", - "pushed_at": "2026-05-20T17:33:16Z", + "updated_at": "2026-05-21T00:14:15Z", + "pushed_at": "2026-05-21T00:14:11Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2019/CVE-2019-11358.json b/2019/CVE-2019-11358.json index 907f3ec219..6ff2e1bad7 100644 --- a/2019/CVE-2019-11358.json +++ b/2019/CVE-2019-11358.json @@ -133,10 +133,10 @@ "description": "NOTICE This repository contains the public FTC SDK for the SKYSTONE (2019-2020) competition season. If you are looking for the current season's FTC SDK software, please visit the new and permanent home of the public FTC SDK: FtcRobotController repository Welcome! This GitHub repository contains the source code that is used to build an Android app to control a FIRST Tech Challenge competition robot. To use this SDK, download\/clone the entire project to your local computer. Getting Started If you are new to robotics or new to the FIRST Tech Challenge, then you should consider reviewing the FTC Blocks Tutorial to get familiar with how to use the control system: FTC Blocks Online Tutorial Even if you are an advanced Java programmer, it is helpful to start with the FTC Blocks tutorial, and then migrate to the OnBot Java Tool or to Android Studio afterwards. Downloading the Project If you are an Android Studio programmer, there are several ways to download this repo. Note that if you use the Blocks or OnBot Java Tool to program your robot, then you do not need to download this repository. If you are a git user, you can clone the most current version of the repository: git clone https:\/\/github.com\/FIRST-Tech-Challenge\/SKYSTONE.git Or, if you prefer, you can use the \"Download Zip\" button available through the main repository page. Downloading the project as a .ZIP file will keep the size of the download manageable. You can also download the project folder (as a .zip or .tar.gz archive file) from the Downloads subsection of the Releases page for this repository. Once you have downloaded and uncompressed (if needed) your folder, you can use Android Studio to import the folder (\"Import project (Eclipse ADT, Gradle, etc.)\"). Getting Help User Documentation and Tutorials FIRST maintains online documentation with information and tutorials on how to use the FIRST Tech Challenge software and robot control system. You can access this documentation using the following link: SKYSTONE Online Documentation Note that the online documentation is an \"evergreen\" document that is constantly being updated and edited. It contains the most current information about the FIRST Tech Challenge software and control system. Javadoc Reference Material The Javadoc reference documentation for the FTC SDK is now available online. Click on the following link to view the FTC SDK Javadoc documentation as a live website: FTC Javadoc Documentation Documentation for the FTC SDK is also included with this repository. There is a subfolder called \"doc\" which contains several subfolders: The folder \"apk\" contains the .apk files for the FTC Driver Station and FTC Robot Controller apps. The folder \"javadoc\" contains the JavaDoc user documentation for the FTC SDK. Online User Forum For technical questions regarding the Control System or the FTC SDK, please visit the FTC Technology forum: FTC Technology Forum Release Information Version 5.5 (20200824-090813) Version 5.5 requires Android Studio 4.0 or later. New features Adds support for calling custom Java classes from Blocks OpModes (fixes SkyStone issue #161). Classes must be in the org.firstinspires.ftc.teamcode package. Methods must be public static and have no more than 21 parameters. Parameters declared as OpMode, LinearOpMode, Telemetry, and HardwareMap are supported and the argument is provided automatically, regardless of the order of the parameters. On the block, the sockets for those parameters are automatically filled in. Parameters declared as char or java.lang.Character will accept any block that returns text and will only use the first character in the text. Parameters declared as boolean or java.lang.Boolean will accept any block that returns boolean. Parameters declared as byte, java.lang.Byte, short, java.lang.Short, int, java.lang.Integer, long, or java.lang.Long, will accept any block that returns a number and will round that value to the nearest whole number. Parameters declared as float, java.lang.Float, double, java.lang.Double will accept any block that returns a number. Adds telemetry API method for setting display format Classic Monospace HTML (certain tags only) Adds blocks support for switching cameras. Adds Blocks support for TensorFlow Object Detection with a custom model. Adds support for uploading a custom TensorFlow Object Detection model in the Manage page, which is especially useful for Blocks and OnBotJava users. Shows new Control Hub blink codes when the WiFi band is switched using the Control Hub's button (only possible on Control Hub OS 1.1.2) Adds new warnings which can be disabled in the Advanced RC Settings Mismatched app versions warning Unnecessary 2.4 GHz WiFi usage warning REV Hub is running outdated firmware (older than version 1.8.2) Adds support for Sony PS4 gamepad, and reworks how gamepads work on the Driver Station Removes preference which sets gamepad type based on driver position. Replaced with menu which allows specifying type for gamepads with unknown VID and PID Attempts to auto-detect gamepad type based on USB VID and PID If gamepad VID and PID is not known, use type specified by user for that VID and PID If gamepad VID and PID is not known AND the user has not specified a type for that VID and PID, an educated guess is made about how to map the gamepad Driver Station will now attempt to automatically recover from a gamepad disconnecting, and re-assign it to the position it was assigned to when it dropped If only one gamepad is assigned and it drops: it can be recovered If two gamepads are assigned, and have different VID\/PID signatures, and only one drops: it will be recovered If two gamepads are assigned, and have different VID\/PID signatures, and BOTH drop: both will be recovered If two gamepads are assigned, and have the same VID\/PID signatures, and only one drops: it will be recovered If two gamepads are assigned, and have the same VID\/PID signatures, and BOTH drop: neither will be recovered, because of the ambiguity of the gamepads when they re-appear on the USB bus. There is currently one known edge case: if there are two gamepads with the same VID\/PID signature plugged in, but only one is assigned, and they BOTH drop, it's a 50-50 chance of which one will be chosen for automatic recovery to the assigned position: it is determined by whichever one is re-enumerated first by the USB bus controller. Adds landscape user interface to Driver Station New feature: practice timer with audio cues New feature (Control Hub only): wireless network connection strength indicator (0-5 bars) New feature (Control Hub only): tapping on the ping\/channel display will switch to an alternate display showing radio RX dBm and link speed (tap again to switch back) The layout will NOT autorotate. You can switch the layout from the Driver Station's settings menu. Breaking changes Removes support for Android versions 4.4 through 5.1 (KitKat and Lollipop). The minSdkVersion is now 23. Removes the deprecated LinearOpMode methods waitOneFullHardwareCycle() and waitForNextHardwareCycle() Enhancements Handles RS485 address of Control Hub automatically The Control Hub is automatically given a reserved address Existing configuration files will continue to work All addresses in the range of 1-10 are still available for Expansion Hubs The Control Hub light will now normally be solid green, without blinking to indicate the address The Control Hub will not be shown on the Expansion Hub Address Change settings page Improves REV Hub firmware updater The user can now choose between all available firmware update files Version 1.8.2 of the REV Hub firmware is bundled into the Robot Controller app. Text was added to clarify that Expansion Hubs can only be updated via USB. Firmware update speed was reduced to improve reliability Allows REV Hub firmware to be updated directly from the Manage webpage Improves log viewer on Robot Controller Horizontal scrolling support (no longer word wrapped) Supports pinch-to-zoom Uses a monospaced font Error messages are highlighted New color scheme Attempts to force-stop a runaway\/stuck OpMode without restarting the entire app Not all types of runaway conditions are stoppable, but if the user code attempts to talk to hardware during the runaway, the system should be able to capture it. Makes various tweaks to the Self Inspect screen Renames \"OS version\" entry to \"Android version\" Renames \"WiFi Direct Name\" to \"WiFi Name\" Adds Control Hub OS version, when viewing the report of a Control Hub Hides the airplane mode entry, when viewing the report of a Control Hub Removes check for ZTE Speed Channel Changer Shows firmware version for all Expansion and Control Hubs Reworks network settings portion of Manage page All network settings are now applied with a single click The WiFi Direct channel of phone-based Robot Controllers can now be changed from the Manage page WiFi channels are filtered by band (2.4 vs 5 GHz) and whether they overlap with other channels The current WiFi channel is pre-selected on phone-based Robot Controllers, and Control Hubs running OS 1.1.2 or later. On Control Hubs running OS 1.1.2 or later, you can choose to have the system automatically select a channel on the 5 GHz band Improves OnBotJava New light and dark themes replace the old themes (chaos, github, chrome,...) the new default theme is light and will be used when you first update to this version OnBotJava now has a tabbed editor Read-only offline mode Improves function of \"exit\" menu item on Robot Controller and Driver Station Now guaranteed to be fully stopped and unloaded from memory Shows a warning message if a LinearOpMode exists prematurely due to failure to monitor for the start condition Improves error message shown when the Driver Station and Robot Controller are incompatible with each other Driver Station OpMode Control Panel now disabled while a Restart Robot is in progress Disables advanced settings related to WiFi direct when the Robot Controller is a Control Hub. Tint phone battery icons on Driver Station when low\/critical. Uses names \"Control Hub Portal\" and \"Control Hub\" (when appropriate) in new configuration files Improve I2C read performance Very large improvement on Control Hub; up to ~2x faster with small (e.g. 6 byte) reads Not as apparent on Expansion Hubs connected to a phone Update\/refresh build infrastructure Update to 'androidx' support library from 'com.android.support:appcompat', which is end-of-life Update targetSdkVersion and compileSdkVersion to 28 Update Android Studio's Android plugin to latest Fix reported build timestamp in 'About' screen Add sample illustrating manual webcam use: ConceptWebcam Bug fixes Fixes SkyStone issue #248 Fixes SkyStone issue #232 and modifies bulk caching semantics to allow for cache-preserving MANUAL\/AUTO transitions. Improves performance when REV 2M distance sensor is unplugged Improves readability of Toast messages on certain devices Allows a Driver Station to connect to a Robot Controller after another has disconnected Improves generation of fake serial numbers for UVC cameras which do not provide a real serial number Previously some devices would assign such cameras a serial of 0:0 and fail to open and start streaming Fixes ftc_app issue #638. Fixes a slew of bugs with the Vuforia camera monitor including: Fixes bug where preview could be displayed with a wonky aspect ratio Fixes bug where preview could be cut off in landscape Fixes bug where preview got totally messed up when rotating phone Fixes bug where crosshair could drift off target when using webcams Fixes issue in UVC driver on some devices (ftc_app 681) if streaming was started\/stopped multiple times in a row Issue manifested as kernel panic on devices which do not have this kernel patch. On affected devices which do have the patch, the issue was manifest as simply a failure to start streaming. The Tech Team believes that the root cause of the issue is a bug in the Linux kernel XHCI driver. A workaround was implemented in the SDK UVC driver. Fixes bug in UVC driver where often half the frames from the camera would be dropped (e.g. only 15FPS delivered during a streaming session configured for 30FPS). Fixes issue where TensorFlow Object Detection would show results whose confidence was lower than the minimum confidence parameter. Fixes a potential exploitation issue of CVE-2019-11358 in OnBotJava Fixes changing the address of an Expansion Hub with additional Expansion Hubs connected to it Preserves the Control Hub's network connection when \"Restart Robot\" is selected Fixes issue where device scans would fail while the Robot was restarting Fix RenderScript usage Use androidx.renderscript variant: increased compatibility Use RenderScript in Java mode, not native: simplifies build Fixes webcam-frame-to-bitmap conversion problem: alpha channel wasn't being initialized, only R, G, & B Fixes possible arithmetic overflow in Deadline Fixes deadlock in Vuforia webcam support which could cause 5-second delays when stopping OpMode Version 5.4 (20200108-101156) Fixes SkyStone issue #88 Adds an inspection item that notes when a robot controller (Control Hub) is using the factory default password. Fixes SkyStone issue #61 Fixes SkyStone issue #142 Fixes ftc_app issue #417 by adding more current and voltage monitoring capabilities for REV Hubs. Fixes a crash sometimes caused by OnBotJava activity Improves OnBotJava autosave functionality ftc_app #738 Fixes system responsiveness issue when an Expansion Hub is disconnected Fixes issue where IMU initialization could prevent Op Modes from stopping Fixes issue where AndroidTextToSpeech.speak() would fail if it was called too early Adds telemetry.speak() methods and blocks, which cause the Driver Station (if also updated) to speak text Adds and improves Expansion Hub-related warnings Improves Expansion Hub low battery warning Displays the warning immediately after the hub reports it Specifies whether the condition is current or occurred temporarily during an OpMode run Displays which hubs reported low battery Displays warning when hub loses and regains power during an OpMode run Fixes the hub's LED pattern after this condition Displays warning when Expansion Hub is not responding to commands Specifies whether the condition is current or occurred temporarily during an OpMode run Clarifies warning when Expansion Hub is not present at startup Specifies that this condition requires a Robot Restart before the hub can be used. The hub light will now accurately reflect this state Improves logging and reduces log spam during these conditions Syncs the Control Hub time and timezone to a connected web browser programming the robot, if a Driver Station is not available. Adds bulk read functionality for REV Hubs A bulk caching mode must be set at the Hub level with LynxModule#setBulkCachingMode(). This applies to all relevant SDK hardware classes that reference that Hub. The following following Hub bulk caching modes are available: BulkCachingMode.OFF (default): All hardware calls operate as usual. Bulk data can read through LynxModule#getBulkData() and processed manually. BulkCachingMode.AUTO: Applicable hardware calls are served from a bulk read cache that is cleared\/refreshed automatically to ensure identical commands don't hit the same cache. The cache can also be cleared manually with LynxModule#clearBulkCache(), although this is not recommended. (advanced users) BulkCachingMode.MANUAL: Same as BulkCachingMode.AUTO except the cache is never cleared automatically. To avoid getting stale data, the cache must be manually cleared at the beginning of each loop body or as the user deems appropriate. Removes PIDF Annotation values added in Rev 5.3 (to AndyMark, goBILDA and TETRIX motor configurations). The new motor types will still be available but their Default control behavior will revert back to Rev 5.2 Adds new ConceptMotorBulkRead sample Opmode to demonstrate and compare Motor Bulk-Read modes for reducing I\/O latencies. Version 5.3 (20191004-112306) Fixes external USB\/UVC webcam support Makes various bugfixes and improvements to Blocks page, including but not limited to: Many visual tweaks Browser zoom and window resize behave better Resizing the Java preview pane works better and more consistently across browsers The Java preview pane consistently gets scrollbars when needed The Java preview pane is hidden by default on phones Internet Explorer 11 should work Large dropdown lists display properly on lower res screens Disabled buttons are now visually identifiable as disabled A warning is shown if a user selects a TFOD sample, but their device is not compatible Warning messages in a Blocks op mode are now visible by default. Adds goBILDA 5201 and 5202 motors to Robot Configurator Adds PIDF Annotation values to AndyMark, goBILDA and TETRIX motor configurations. This has the effect of causing the RUN_USING_ENCODERS and RUN_TO_POSITION modes to use PIDF vs PID closed loop control on these motors. This should provide more responsive, yet stable, speed control. PIDF adds Feedforward control to the basic PID control loop. Feedforward is useful when controlling a motor's speed because it \"anticipates\" how much the control voltage must change to achieve a new speed set-point, rather than requiring the integrated error to change sufficiently. The PIDF values were chosen to provide responsive, yet stable, speed control on a lightly loaded motor. The more heavily a motor is loaded (drag or friction), the more noticable the PIDF improvement will be. Fixes startup crash on Android 10 Fixes ftc_app issue #712 (thanks to FROGbots-4634) Fixes ftc_app issue #542 Allows \"A\" and lowercase letters when naming device through RC and DS apps. Version 5.2 (20190905-083277) Fixes extra-wide margins on settings activities, and placement of the new configuration button Adds Skystone Vuforia image target data. Includes sample Skystone Vuforia Navigation op modes (Java). Includes sample Skystone Vuforia Navigation op modes (Blocks). Adds TensorFlow inference model (.tflite) for Skystone game elements. Includes sample Skystone TensorFlow op modes (Java). Includes sample Skystone TensorFlow op modes (Blocks). Removes older (season-specific) sample op modes. Includes 64-bit support (to comply with Google Play requirements). Protects against Stuck OpModes when a Restart Robot is requested. (Thanks to FROGbots-4634) (ftc_app issue #709) Blocks related changes: Fixes bug with blocks generated code when hardware device name is a java or javascript reserved word. Shows generated java code for blocks, even when hardware items are missing from the active configuration. Displays warning icon when outdated Vuforia and TensorFlow blocks are used (SkyStone issue #27) Version 5.1 (20190820-222104) Defines default PIDF parameters for the following motors: REV Core Hex Motor REV 20:1 HD Hex Motor REV 40:1 HD Hex Motor Adds back button when running on a device without a system back button (such as a Control Hub) Allows a REV Control Hub to update the firmware on a REV Expansion Hub via USB Fixes SkyStone issue #9 Fixes ftc_app issue #715 Prevents extra DS User clicks by filtering based on current state. Prevents incorrect DS UI state changes when receiving new OpMode list from RC Adds support for REV Color Sensor V3 Adds a manual-refresh DS Camera Stream for remotely viewing RC camera frames. To show the stream on the DS, initialize but do not run a stream-enabled opmode, select the Camera Stream option in the DS menu, and tap the image to refresh. This feature is automatically enabled when using Vuforia or TFOD—no additional RC configuration is required for typical use cases. To hide the stream, select the same menu item again. Note that gamepads are disabled and the selected opmode cannot be started while the stream is open as a safety precaution. To use custom streams, consult the API docs for CameraStreamServer#setSource and CameraStreamSource. Adds many Star Wars sounds to RobotController resources. Added SKYSTONE Sounds Chooser Sample Program. Switches out startup, connect chimes, and error\/warning sounds for Star Wars sounds Updates OnBot Java to use a WebSocket for communication with the robot The OnBot Java page no longer has to do a full refresh when a user switches from editing one file to another Known issues: Camera Stream The Vuforia camera stream inherits the issues present in the phone preview (namely ftc_app issue #574). This problem does not affect the TFOD camera stream even though it receives frames from Vuforia. The orientation of the stream frames may not always match the phone preview. For now, these frames may be rotated manually via a custom CameraStreamSource if desired. OnBotJava Browser back button may not always work correctly It's possible for a build to be queued, but not started. The OnBot Java build console will display a warning if this occurs. A user might not realize they are editing a different file if the user inadvertently switches from one file to another since this switch is now seamless. The name of the currently open file is displayed in the browser tab. Version 5.0 (built on 19.06.14) Support for the REV Robotics Control Hub. Adds a Java preview pane to the Blocks editor. Adds a new offline export feature to the Blocks editor. Display wifi channel in Network circle on Driver Station. Adds calibration for Logitech C270 Updates build tooling and target SDK. Compliance with Google's permissions infrastructure (Required after build tooling update). Keep Alives to mitigate the Motorola wifi scanning problem. Telemetry substitute no longer necessary. Improves Vuforia error reporting. Fixes ftctechnh\/ftc_app issues 621, 713. Miscellaneous bug fixes and improvements. Version 4.3 (built on 18.10.31) Includes missing TensorFlow-related libraries and files. Version 4.2 (built on 18.10.30) Includes fix to avoid deadlock situation with WatchdogMonitor which could result in USB communication errors. Comm error appeared to require that user disconnect USB cable and restart the Robot Controller app to recover. robotControllerLog.txt would have error messages that included the words \"E RobotCore: lynx xmit lock: #### abandoning lock:\" Includes fix to correctly list the parent module address for a REV Robotics Expansion Hub in a configuration (.xml) file. Bug in versions 4.0 and 4.1 would incorrect list the address module for a parent REV Robotics device as \"1\". If the parent module had a higher address value than the daisy-chained module, then this bug would prevent the Robot Controller from communicating with the downstream Expansion Hub. Added requirement for ACCESS_COARSE_LOCATION to allow a Driver Station running Android Oreo to scan for Wi-Fi Direct devices. Added google() repo to build.gradle because aapt2 must be downloaded from the google() repository beginning with version 3.2 of the Android Gradle Plugin. Important Note: Android Studio users will need to be connected to the Internet the first time build the ftc_app project. Internet connectivity is required for the first build so the appropriate files can be downloaded from the Google repository. Users should not need to be connected to the Internet for subsequent builds. This should also fix buid issue where Android Studio would complain that it \"Could not find com.android.tools.lint:lint-gradle:26.1.4\" (or similar). Added support for REV Spark Mini motor controller as part of the configuration menu for a servo\/PWM port on the REV Expansion Hub. Provide examples for playing audio files in an Op Mode. Block Development Tool Changes Includes a fix for a problem with the Velocity blocks that were reported in the FTC Technology forum (Blocks Programming subforum). Change the \"Save completed successfully.\" message to a white color so it will contrast with a green background. Fixed the \"Download image\" feature so it will work if there are text blocks in the op mode. Introduce support for Google's TensorFlow Lite technology for object detetion for 2018-2019 game. TensorFlow lite can recognize Gold Mineral and Silver Mineral from 2018-2019 game. Example Java and Block op modes are included to show how to determine the relative position of the gold block (left, center, right). Version 4.1 (released on 18.09.24) Changes include: Fix to prevent crash when deprecated configuration annotations are used. Change to allow FTC Robot Controller APK to be auto-updated using FIRST Global Control Hub update scripts. Removed samples for non supported \/ non legal hardware. Improvements to Telemetry.addData block with \"text\" socket. Updated Blocks sample op mode list to include Rover Ruckus Vuforia example. Update SDK library version number. Version 4.0 (released on 18.09.12) Changes include: Initial support for UVC compatible cameras If UVC camera has a unique serial number, RC will detect and enumerate by serial number. If UVC camera lacks a unique serial number, RC will only support one camera of that type connected. Calibration settings for a few cameras are included (see TeamCode\/src\/main\/res\/xml\/teamwebcamcalibrations.xml for details). User can upload calibration files from Program and Manage web interface. UVC cameras seem to draw a fair amount of electrical current from the USB bus. This does not appear to present any problems for the REV Robotics Control Hub. This does seem to create stability problems when using some cameras with an Android phone-based Robot Controller. FTC Tech Team is investigating options to mitigate this issue with the phone-based Robot Controllers. Updated sample Vuforia Navigation and VuMark Op Modes to demonstrate how to use an internal phone-based camera and an external UVC webcam. Support for improved motor control. REV Robotics Expansion Hub firmware 1.8 and greater will support a feed forward mechanism for closed loop motor control. FTC SDK has been modified to support PIDF coefficients (proportional, integral, derivative, and feed forward). FTC Blocks development tool modified to include PIDF programming blocks. Deprecated older PID-related methods and variables. REV's 1.8.x PIDF-related changes provide a more linear and accurate way to control a motor. Wireless Added 5GHz support for wireless channel changing for those devices that support it. Tested with Moto G5 and E4 phones. Also tested with other (currently non-approved) phones such as Samsung Galaxy S8. Improved Expansion Hub firmware update support in Robot Controller app Changes to make the system more robust during the firmware update process (when performed through Robot Controller app). User no longer has to disconnect a downstream daisy-chained Expansion Hub when updating an Expansion Hub's firmware. If user is updating an Expansion Hub's firmware through a USB connection, he\/she does not have to disconnect RS485 connection to other Expansion Hubs. The user still must use a USB connection to update an Expansion Hub's firmware. The user cannot update the Expansion Hub firmware for a downstream device that is daisy chained through an RS485 connection. If an Expansion Hub accidentally gets \"bricked\" the Robot Controller app is now more likely to recognize the Hub when it scans the USB bus. Robot Controller app should be able to detect an Expansion Hub, even if it accidentally was bricked in a previous update attempt. Robot Controller app should be able to install the firmware onto the Hub, even if if accidentally was bricked in a previous update attempt. Resiliency FTC software can detect and enable an FTDI reset feature that is available with REV Robotics v1.8 Expansion Hub firmware and greater. When enabled, the Expansion Hub can detect if it hasn't communicated with the Robot Controller over the FTDI (USB) connection. If the Hub hasn't heard from the Robot Controller in a while, it will reset the FTDI connection. This action helps system recover from some ESD-induced disruptions. Various fixes to improve reliability of FTC software. Blocks Fixed errors with string and list indices in blocks export to java. Support for USB connected UVC webcams. Refactored optimized Blocks Vuforia code to support Rover Ruckus image targets. Added programming blocks to support PIDF (proportional, integral, derivative and feed forward) motor control. Added formatting options (under Telemetry and Miscellaneous categories) so user can set how many decimal places to display a numerical value. Support to play audio files (which are uploaded through Blocks web interface) on Driver Station in addition to the Robot Controller. Fixed bug with Download Image of Blocks feature. Support for REV Robotics Blinkin LED Controller. Support for REV Robotics 2m Distance Sensor. Added support for a REV Touch Sensor (no longer have to configure as a generic digital device). Added blocks for DcMotorEx methods. These are enhanced methods that you can use when supported by the motor controller hardware. The REV Robotics Expansion Hub supports these enhanced methods. Enhanced methods include methods to get\/set motor velocity (in encoder pulses per second), get\/set PIDF coefficients, etc.. Modest Improvements in Logging Decrease frequency of battery checker voltage statements. Removed non-FTC related log statements (wherever possible). Introduced a \"Match Logging\" feature. Under \"Settings\" a user can enable\/disable this feature (it's disabled by default). If enabled, user provides a \"Match Number\" through the Driver Station user interface (top of the screen). The Match Number is used to create a log file specifically with log statements from that particular Op Mode run. Match log files are stored in \/sdcard\/FIRST\/matlogs on the Robot Controller. Once an op mode run is complete, the Match Number is cleared. This is a convenient way to create a separate match log with statements only related to a specific op mode run. New Devices Support for REV Robotics Blinkin LED Controller. Support for REV Robotics 2m Distance Sensor. Added configuration option for REV 20:1 HD Hex Motor. Added support for a REV Touch Sensor (no longer have to configure as a generic digital device). Miscellaneous Fixed some errors in the definitions for acceleration and velocity in our javadoc documentation. Added ability to play audio files on Driver Station When user is configuring an Expansion Hub, the LED on the Expansion Hub will change blink pattern (purple-cyan) to indicate which Hub is currently being configured. Renamed I2cSensorType to I2cDeviceType. Added an external sample Op Mode that demonstrates localization using 2018-2019 (Rover Ruckus presented by QualComm) Vuforia targets. Added an external sample Op Mode that demonstrates how to use the REV Robotics 2m Laser Distance Sensor. Added an external sample Op Mode that demonstrates how to use the REV Robotics Blinkin LED Controller. Re-categorized external Java sample Op Modes to \"TeleOp\" instead of \"Autonomous\". Known issues: Initial support for UVC compatible cameras UVC cameras seem to draw significant amount of current from the USB bus. This does not appear to present any problems for the REV Robotics Control Hub. This does seem to create stability problems when using some cameras with an Android phone-based Robot Controller. FTC Tech Team is investigating options to mitigate this issue with the phone-based Robot Controllers. There might be a possible deadlock which causes the RC to become unresponsive when using a UVC webcam with a Nougat Android Robot Controller. Wireless When user selects a wireless channel, this channel does not necessarily persist if the phone is power cycled. Tech Team is hoping to eventually address this issue in a future release. Issue has been present since apps were introduced (i.e., it is not new with the v4.0 release). Wireless channel is not currently displayed for WiFi Direct connections. Miscellaneous The blink indication feature that shows which Expansion Hub is currently being configured does not work for a newly created configuration file. User has to first save a newly created configuration file and then close and re-edit the file in order for blink indicator to work. Version 3.6 (built on 17.12.18) Changes include: Blocks Changes Uses updated Google Blockly software to allow users to edit their op modes on Apple iOS devices (including iPad and iPhone). Improvement in Blocks tool to handle corrupt op mode files. Autonomous op modes should no longer get switched back to tele-op after re-opening them to be edited. The system can now detect type mismatches during runtime and alert the user with a message on the Driver Station. Updated javadoc documentation for setPower() method to reflect correct range of values (-1 to +1). Modified VuforiaLocalizerImpl to allow for user rendering of frames Added a user-overrideable onRenderFrame() method which gets called by the class's renderFrame() method. Version 3.5 (built on 17.10.30) Changes with version 3.5 include: Introduced a fix to prevent random op mode stops, which can occur after the Robot Controller app has been paused and then resumed (for example, when a user temporarily turns off the display of the Robot Controller phone, and then turns the screen back on). Introduced a fix to prevent random op mode stops, which were previously caused by random peer disconnect events on the Driver Station. Fixes issue where log files would be closed on pause of the RC or DS, but not re-opened upon resume. Fixes issue with battery handler (voltage) start\/stop race. Fixes issue where Android Studio generated op modes would disappear from available list in certain situations. Fixes problem where OnBot Java would not build on REV Robotics Control Hub. Fixes problem where OnBot Java would not build if the date and time on the Robot Controller device was \"rewound\" (set to an earlier date\/time). Improved error message on OnBot Java that occurs when renaming a file fails. Removed unneeded resources from android.jar binaries used by OnBot Java to reduce final size of Robot Controller app. Added MR_ANALOG_TOUCH_SENSOR block to Blocks Programming Tool. Version 3.4 (built on 17.09.06) Changes with version 3.4 include: Added telemetry.update() statement for BlankLinearOpMode template. Renamed sample Block op modes to be more consistent with Java samples. Added some additional sample Block op modes. Reworded OnBot Java readme slightly. Version 3.3 (built on 17.09.04) This version of the software includes improves for the FTC Blocks Programming Tool and the OnBot Java Programming Tool. Changes with verion 3.3 include: Android Studio ftc_app project has been updated to use Gradle Plugin 2.3.3. Android Studio ftc_app project is already using gradle 3.5 distribution. Robot Controller log has been renamed to \/sdcard\/RobotControllerLog.txt (note that this change was actually introduced w\/ v3.2). Improvements in I2C reliability. Optimized I2C read for REV Expansion Hub, with v1.7 firmware or greater. Updated all external\/samples (available through OnBot and in Android project folder). Vuforia Added support for VuMarks that will be used for the 2017-2018 season game. Blocks Update to latest Google Blockly release. Sample op modes can be selected as a template when creating new op mode. Fixed bug where the blocks would disappear temporarily when mouse button is held down. Added blocks for Range.clip and Range.scale. User can now disable\/enable Block op modes. Fix to prevent occasional Blocks deadlock. OnBot Java Significant improvements with autocomplete function for OnBot Java editor. Sample op modes can be selected as a template when creating new op mode. Fixes and changes to complete hardware setup feature. Updated (and more useful) onBot welcome message. Known issues: Android Studio After updating to the new v3.3 Android Studio project folder, if you get error messages indicating \"InvalidVirtualFileAccessException\" then you might need to do a File->Invalidate Caches \/ Restart to clear the error. OnBot Java Sometimes when you push the build button to build all op modes, the RC returns an error message that the build failed. If you press the build button a second time, the build typically suceeds. Version 3.2 (built on 17.08.02) This version of the software introduces the \"OnBot Java\" Development Tool. Similar to the FTC Blocks Development Tool, the FTC OnBot Java Development Tool allows a user to create, edit and build op modes dynamically using only a Javascript-enabled web browser. The OnBot Java Development Tool is an integrated development environment (IDE) that is served up by the Robot Controller. Op modes are created and edited using a Javascript-enabled browser (Google Chromse is recommended). Op modes are saved on the Robot Controller Android device directly. The OnBot Java Development Tool provides a Java programming environment that does NOT need Android Studio. Changes with version 3.2 include: Enhanced web-based development tools Introduction of OnBot Java Development Tool. Web-based programming and management features are \"always on\" (user no longer needs to put Robot Controller into programming mode). Web-based management interface (where user can change Robot Controller name and also easily download Robot Controller log file). OnBot Java, Blocks and Management features available from web based interface. Blocks Programming Development Tool: Changed \"LynxI2cColorRangeSensor\" block to \"REV Color\/range sensor\" block. Fixed tooltip for ColorSensor.isLightOn block. Added blocks for ColorSensor.getNormalizedColors and LynxI2cColorRangeSensor.getNormalizedColors. Added example op modes for digital touch sensor and REV Robotics Color Distance sensor. User selectable color themes. Includes many minor enhancements and fixes (too numerous to list). Known issues: Auto complete function is incomplete and does not support the following (for now): Access via this keyword Access via super keyword Members of the super cloass, not overridden by the class Any methods provided in the current class Inner classes Can't handle casted objects Any objects coming from an parenthetically enclosed expression Version 3.10 (built on 17.05.09) This version of the software provides support for the REV Robotics Expansion Hub. This version also includes improvements in the USB communication layer in an effort to enhance system resiliency. If you were using a 2.x version of the software previously, updating to version 3.1 requires that you also update your Driver Station software in addition to updating the Robot Controller software. Also note that in version 3.10 software, the setMaxSpeed and getMaxSpeed methods are no longer available (not deprecated, they have been removed from the SDK). Also note that the the new 3.x software incorporates motor profiles that a user can select as he\/she configures the robot. Changes include: Blocks changes Added VuforiaTrackableDefaultListener.getPose and Vuforia.trackPose blocks. Added optimized blocks support for Vuforia extended tracking. Added atan2 block to the math category. Added useCompetitionFieldTargetLocations parameter to Vuforia.initialize block. If set to false, the target locations are placed at (0,0,0) with target orientation as specified in https:\/\/github.com\/gearsincorg\/FTCVuforiaDemo\/blob\/master\/Robot_Navigation.java tutorial op mode. Incorporates additional improvements to USB comm layer to improve system resiliency (to recover from a greater number of communication disruptions). Additional Notes Regarding Version 3.00 (built on 17.04.13) In addition to the release changes listed below (see section labeled \"Version 3.00 (built on 17.04.013)\"), version 3.00 has the following important changes: Version 3.00 software uses a new version of the FTC Robocol (robot protocol). If you upgrade to v3.0 on the Robot Controller and\/or Android Studio side, you must also upgrade the Driver Station software to match the new Robocol. Version 3.00 software removes the setMaxSpeed and getMaxSpeed methods from the DcMotor class. If you have an op mode that formerly used these methods, you will need to remove the references\/calls to these methods. Instead, v3.0 provides the max speed information through the use of motor profiles that are selected by the user during robot configuration. Version 3.00 software currently does not have a mechanism to disable extra i2c sensors. We hope to re-introduce this function with a release in the near future. Version 3.00 (built on 17.04.13) *** Use this version of the software at YOUR OWN RISK!!! *** This software is being released as an \"alpha\" version. Use this version at your own risk! This pre-release software contains SIGNIFICANT changes, including changes to the Wi-Fi Direct pairing mechanism, rewrites of the I2C sensor classes, changes to the USB\/FTDI layer, and the introduction of support for the REV Robotics Expansion Hub and the REV Robotics color-range-light sensor. These changes were implemented to improve the reliability and resiliency of the FTC control system. Please note, however, that version 3.00 is considered \"alpha\" code. This code is being released so that the FIRST community will have an opportunity to test the new REV Expansion Hub electronics module when it becomes available in May. The developers do not recommend using this code for critical applications (i.e., competition use). *** Use this version of the software at YOUR OWN RISK!!! *** Changes include: Major rework of sensor-related infrastructure. Includes rewriting sensor classes to implement synchronous I2C communication. Fix to reset Autonomous timer back to 30 seconds. Implementation of specific motor profiles for approved 12V motors (includes Tetrix, AndyMark, Matrix and REV models). Modest improvements to enhance Wi-Fi P2P pairing. Fixes telemetry log addition race. Publishes all the sources (not just a select few). Includes Block programming improvements Addition of optimized Vuforia blocks. Auto scrollbar to projects and sounds pages. Fixed blocks paste bug. Blocks execute after while-opModeIsActive loop (to allow for cleanup before exiting op mode). Added gyro integratedZValue block. Fixes bug with projects page for Firefox browser. Added IsSpeaking block to AndroidTextToSpeech. Implements support for the REV Robotics Expansion Hub Implements support for integral REV IMU (physically installed on I2C bus 0, uses same Bosch BNO055 9 axis absolute orientation sensor as Adafruit 9DOF abs orientation sensor). - Implements support for REV color\/range\/light sensor. Provides support to update Expansion Hub firmware through FTC SDK. Detects REV firmware version and records in log file. Includes support for REV Control Hub (note that the REV Control Hub is not yet approved for FTC use). Implements FTC Blocks programming support for REV Expansion Hub and sensor hardware. Detects and alerts when I2C device disconnect. Version 2.62 (built on 17.01.07) Added null pointer check before calling modeToByte() in finishModeSwitchIfNecessary method for ModernRoboticsUsbDcMotorController class. Changes to enhance Modern Robotics USB protocol robustness. Version 2.61 (released on 16.12.19) Blocks Programming mode changes: Fix to correct issue when an exception was thrown because an OpticalDistanceSensor object appears twice in the hardware map (the second time as a LightSensor). Version 2.6 (released on 16.12.16) Fixes for Gyro class: Improve (decrease) sensor refresh latency. fix isCalibrating issues. Blocks Programming mode changes: Blocks now ignores a device in the configuration xml if the name is empty. Other devices work in configuration work fine. Version 2.5 (internal release on released on 16.12.13) Blocks Programming mode changes: Added blocks support for AdafruitBNO055IMU. Added Download Op Mode button to FtcBocks.html. Added support for copying blocks in one OpMode and pasting them in an other OpMode. The clipboard content is stored on the phone, so the programming mode server must be running. Modified Utilities section of the toolbox. In Programming Mode, display information about the active connections. Fixed paste location when workspace has been scrolled. Added blocks support for the android Accelerometer. Fixed issue where Blocks Upload Op Mode truncated name at first dot. Added blocks support for Android SoundPool. Added type safety to blocks for Acceleration. Added type safety to blocks for AdafruitBNO055IMU.Parameters. Added type safety to blocks for AnalogInput. Added type safety to blocks for AngularVelocity. Added type safety to blocks for Color. Added type safety to blocks for ColorSensor. Added type safety to blocks for CompassSensor. Added type safety to blocks for CRServo. Added type safety to blocks for DigitalChannel. Added type safety to blocks for ElapsedTime. Added type safety to blocks for Gamepad. Added type safety to blocks for GyroSensor. Added type safety to blocks for IrSeekerSensor. Added type safety to blocks for LED. Added type safety to blocks for LightSensor. Added type safety to blocks for LinearOpMode. Added type safety to blocks for MagneticFlux. Added type safety to blocks for MatrixF. Added type safety to blocks for MrI2cCompassSensor. Added type safety to blocks for MrI2cRangeSensor. Added type safety to blocks for OpticalDistanceSensor. Added type safety to blocks for Orientation. Added type safety to blocks for Position. Added type safety to blocks for Quaternion. Added type safety to blocks for Servo. Added type safety to blocks for ServoController. Added type safety to blocks for Telemetry. Added type safety to blocks for Temperature. Added type safety to blocks for TouchSensor. Added type safety to blocks for UltrasonicSensor. Added type safety to blocks for VectorF. Added type safety to blocks for Velocity. Added type safety to blocks for VoltageSensor. Added type safety to blocks for VuforiaLocalizer.Parameters. Added type safety to blocks for VuforiaTrackable. Added type safety to blocks for VuforiaTrackables. Added type safety to blocks for enums in AdafruitBNO055IMU.Parameters. Added type safety to blocks for AndroidAccelerometer, AndroidGyroscope, AndroidOrientation, and AndroidTextToSpeech. Version 2.4 (released on 16.11.13) Fix to avoid crashing for nonexistent resources. Blocks Programming mode changes: Added blocks to support OpenGLMatrix, MatrixF, and VectorF. Added blocks to support AngleUnit, AxesOrder, AxesReference, CameraDirection, CameraMonitorFeedback, DistanceUnit, and TempUnit. Added blocks to support Acceleration. Added blocks to support LinearOpMode.getRuntime. Added blocks to support MagneticFlux and Position. Fixed typos. Made blocks for ElapsedTime more consistent with other objects. Added blocks to support Quaternion, Velocity, Orientation, AngularVelocity. Added blocks to support VuforiaTrackables, VuforiaTrackable, VuforiaLocalizer, VuforiaTrackableDefaultListener. Fixed a few blocks. Added type checking to new blocks. Updated to latest blockly. Added default variable blocks to navigation and matrix blocks. Fixed toolbox entry for openGLMatrix_rotation_withAxesArgs. When user downloads Blocks-generated op mode, only the .blk file is downloaded. When user uploads Blocks-generated op mode (.blk file), Javascript code is auto generated. Added DbgLog support. Added logging when a blocks file is read\/written. Fixed bug to properly render blocks even if missing devices from configuration file. Added support for additional characters (not just alphanumeric) for the block file names (for download and upload). Added support for OpMode flavor (“Autonomous” or “TeleOp”) and group. Changes to Samples to prevent tutorial issues. Incorporated suggested changes from public pull 216 (“Replace .. paths”). Remove Servo Glitches when robot stopped. if user hits “Cancels” when editing a configuration file, clears the unsaved changes and reverts to original unmodified configuration. Added log info to help diagnose why the Robot Controller app was terminated (for example, by watch dog function). Added ability to transfer log from the controller. Fixed inconsistency for AngularVelocity Limit unbounded growth of data for telemetry. If user does not call telemetry.update() for LinearOpMode in a timely manner, data added for telemetry might get lost if size limit is exceeded. Version 2.35 (released on 16.10.06) Blockly programming mode - Removed unnecesary idle() call from blocks for new project. Version 2.30 (released on 16.10.05) Blockly programming mode: Mechanism added to save Blockly op modes from Programming Mode Server onto local device To avoid clutter, blocks are displayed in categorized folders Added support for DigitalChannel Added support for ModernRoboticsI2cCompassSensor Added support for ModernRoboticsI2cRangeSensor Added support for VoltageSensor Added support for AnalogInput Added support for AnalogOutput Fix for CompassSensor setMode block Vuforia Fix deadlock \/ make camera data available while Vuforia is running. Update to Vuforia 6.0.117 (recommended by Vuforia and Google to close security loophole). Fix for autonomous 30 second timer bug (where timer was in effect, even though it appeared to have timed out). opModeIsActive changes to allow cleanup after op mode is stopped (with enforced 2 second safety timeout). Fix to avoid reading i2c twice. Updated sample Op Modes. Improved logging and fixed intermittent freezing. Added digital I\/O sample. Cleaned up device names in sample op modes to be consistent with Pushbot guide. Fix to allow use of IrSeekerSensorV3. Version 2.20 (released on 16.09.08) Support for Modern Robotics Compass Sensor. Support for Modern Robotics Range Sensor. Revise device names for Pushbot templates to match the names used in Pushbot guide. Fixed bug so that IrSeekerSensorV3 device is accessible as IrSeekerSensor in hardwareMap. Modified computer vision code to require an individual Vuforia license (per legal requirement from PTC). Minor fixes. Blockly enhancements: Support for Voltage Sensor. Support for Analog Input. Support for Analog Output. Support for Light Sensor. Support for Servo Controller. Version 2.10 (released on 16.09.03) Support for Adafruit IMU. Improvements to ModernRoboticsI2cGyro class Block on reset of z axis. isCalibrating() returns true while gyro is calibration. Updated sample gyro program. Blockly enhancements support for android.graphics.Color. added support for ElapsedTime. improved look and legibility of blocks. support for compass sensor. support for ultrasonic sensor. support for IrSeeker. support for LED. support for color sensor. support for CRServo prompt user to configure robot before using programming mode. Provides ability to disable audio cues. various bug fixes and improvements. Version 2.00 (released on 16.08.19) This is the new release for the upcoming 2016-2017 FIRST Tech Challenge Season. Channel change is enabled in the FTC Robot Controller app for Moto G 2nd and 3rd Gen phones. Users can now use annotations to register\/disable their Op Modes. Changes in the Android SDK, JDK and build tool requirements (minsdk=19, java 1.7, build tools 23.0.3). Standardized units in analog input. Cleaned up code for existing analog sensor classes. setChannelMode and getChannelMode were REMOVED from the DcMotorController class. This is important - we no longer set the motor modes through the motor controller. setMode and getMode were added to the DcMotor class. ContinuousRotationServo class has been added to the FTC SDK. Range.clip() method has been overloaded so it can support this operation for int, short and byte integers. Some changes have been made (new methods added) on how a user can access items from the hardware map. Users can now set the zero power behavior for a DC motor so that the motor will brake or float when power is zero. Prototype Blockly Programming Mode has been added to FTC Robot Controller. Users can place the Robot Controller into this mode, and then use a device (such as a laptop) that has a Javascript enabled browser to write Blockly-based Op Modes directly onto the Robot Controller. Users can now configure the robot remotely through the FTC Driver Station app. Android Studio project supports Android Studio 2.1.x and compile SDK Version 23 (Marshmallow). Vuforia Computer Vision SDK integrated into FTC SDK. Users can use sample vision targets to get localization information on a standard FTC field. Project structure has been reorganized so that there is now a TeamCode package that users can use to place their local\/custom Op Modes into this package. Inspection function has been integrated into the FTC Robot Controller and Driver Station Apps (Thanks Team HazMat… 9277 & 10650!). Audio cues have been incorporated into FTC SDK. Swap mechanism added to FTC Robot Controller configuration activity. For example, if you have two motor controllers on a robot, and you misidentified them in your configuration file, you can use the Swap button to swap the devices within the configuration file (so you do not have to manually re-enter in the configuration info for the two devices). Fix mechanism added to all user to replace an electronic module easily. For example, suppose a servo controller dies on your robot. You replace the broken module with a new module, which has a different serial number from the original servo controller. You can use the Fix button to automatically reconfigure your configuration file to use the serial number of the new module. Improvements made to fix resiliency and responsiveness of the system. For LinearOpMode the user now must for a telemetry.update() to update the telemetry data on the driver station. This update() mechanism ensures that the driver station gets the updated data properly and at the same time. The Auto Configure function of the Robot Controller is now template based. If there is a commonly used robot configuration, a template can be created so that the Auto Configure mechanism can be used to quickly configure a robot of this type. The logic to detect a runaway op mode (both in the LinearOpMode and OpMode types) and to abort the run, then auto recover has been improved\/implemented. Fix has been incorporated so that Logitech F310 gamepad mappings will be correct for Marshmallow users. Release 16.07.08 For the ftc_app project, the gradle files have been modified to support Android Studio 2.1.x. Release 16.03.30 For the MIT App Inventor, the design blocks have new icons that better represent the function of each design component. Some changes were made to the shutdown logic to ensure the robust shutdown of some of our USB services. A change was made to LinearOpMode so as to allow a given instance to be executed more than once, which is required for the App Inventor. Javadoc improved\/updated. Release 16.03.09 Changes made to make the FTC SDK synchronous (significant change!) waitOneFullHardwareCycle() and waitForNextHardwareCycle() are no longer needed and have been deprecated. runOpMode() (for a LinearOpMode) is now decoupled from the system's hardware read\/write thread. loop() (for an OpMode) is now decoupled from the system's hardware read\/write thread. Methods are synchronous. For example, if you call setMode(DcMotorController.RunMode.RESET_ENCODERS) for a motor, the encoder is guaranteed to be reset when the method call is complete. For legacy module (NXT compatible), user no longer has to toggle between read and write modes when reading from or writing to a legacy device. Changes made to enhance reliability\/robustness during ESD event. Changes made to make code thread safe. Debug keystore added so that user-generated robot controller APKs will all use the same signed key (to avoid conflicts if a team has multiple developer laptops for example). Firmware version information for Modern Robotics modules are now logged. Changes made to improve USB comm reliability and robustness. Added support for voltage indicator for legacy (NXT-compatible) motor controllers. Changes made to provide auto stop capabilities for op modes. A LinearOpMode class will stop when the statements in runOpMode() are complete. User does not have to push the stop button on the driver station. If an op mode is stopped by the driver station, but there is a run away\/uninterruptible thread persisting, the app will log an error message then force itself to crash to stop the runaway thread. Driver Station UI modified to display lowest measured voltage below current voltage (12V battery). Driver Station UI modified to have color background for current voltage (green=good, yellow=caution, red=danger, extremely low voltage). javadoc improved (edits and additional classes). Added app build time to About activity for driver station and robot controller apps. Display local IP addresses on Driver Station About activity. Added I2cDeviceSynchImpl. Added I2cDeviceSync interface. Added seconds() and milliseconds() to ElapsedTime for clarity. Added getCallbackCount() to I2cDevice. Added missing clearI2cPortActionFlag. Added code to create log messages while waiting for LinearOpMode shutdown. Fix so Wifi Direct Config activity will no longer launch multiple times. Added the ability to specify an alternate i2c address in software for the Modern Robotics gyro. Release 16.02.09 Improved battery checker feature so that voltage values get refreshed regularly (every 250 msec) on Driver Station (DS) user interface. Improved software so that Robot Controller (RC) is much more resilient and “self-healing” to USB disconnects: If user attempts to start\/restart RC with one or more module missing, it will display a warning but still start up. When running an op mode, if one or more modules gets disconnected, the RC & DS will display warnings,and robot will keep on working in spite of the missing module(s). If a disconnected module gets physically reconnected the RC will auto detect the module and the user will regain control of the recently connected module. Warning messages are more helpful (identifies the type of module that’s missing plus its USB serial number). Code changes to fix the null gamepad reference when users try to reference the gamepads in the init() portion of their op mode. NXT light sensor output is now properly scaled. Note that teams might have to readjust their light threshold values in their op modes. On DS user interface, gamepad icon for a driver will disappear if the matching gamepad is disconnected or if that gamepad gets designated as a different driver. Robot Protocol (ROBOCOL) version number info is displayed in About screen on RC and DS apps. Incorporated a display filter on pairing screen to filter out devices that don’t use the “-“ format. This filter can be turned off to show all WiFi Direct devices. Updated text in License file. Fixed formatting error in OpticalDistanceSensor.toString(). Fixed issue on with a blank (“”) device name that would disrupt WiFi Direct Pairing. Made a change so that the WiFi info and battery info can be displayed more quickly on the DS upon connecting to RC. Improved javadoc generation. Modified code to make it easier to support language localization in the future. Release 16.01.04 Updated compileSdkVersion for apps Prevent Wifi from entering power saving mode removed unused import from driver station Corrrected \"Dead zone\" joystick code. LED.getDeviceName and .getConnectionInfo() return null apps check for ROBOCOL_VERSION mismatch Fix for Telemetry also has off-by-one errors in its data string sizing \/ short size limitations error User telemetry output is sorted. added formatting variants to DbgLog and RobotLog APIs code modified to allow for a long list of op mode names. changes to improve thread safety of RobocolDatagramSocket Fix for \"missing hardware leaves robot controller disconnected from driver station\" error fix for \"fast tapping of Init\/Start causes problems\" (toast is now only instantiated on UI thread). added some log statements for thread life cycle. moved gamepad reset logic inside of initActiveOpMode() for robustness changes made to mitigate risk of race conditions on public methods. changes to try and flag when WiFi Direct name contains non-printable characters. fix to correct race condition between .run() and .close() in ReadWriteRunnableStandard. updated FTDI driver made ReadWriteRunnableStanard interface public. fixed off-by-one errors in Command constructor moved specific hardware implmentations into their own package. moved specific gamepad implemnatations to the hardware library. changed LICENSE file to new BSD version. fixed race condition when shutting down Modern Robotics USB devices. methods in the ColorSensor classes have been synchronized. corrected isBusy() status to reflect end of motion. corrected \"back\" button keycode. the notSupported() method of the GyroSensor class was changed to protected (it should not be public). Release 15.11.04.001 Added Support for Modern Robotics Gyro. The GyroSensor class now supports the MR Gyro Sensor. Users can access heading data (about Z axis) Users can also access raw gyro data (X, Y, & Z axes). Example MRGyroTest.java op mode included. Improved error messages More descriptive error messages for exceptions in user code. Updated DcMotor API Enable read mode on new address in setI2cAddress Fix so that driver station app resets the gamepads when switching op modes. USB-related code changes to make USB comm more responsive and to display more explicit error messages. Fix so that USB will recover properly if the USB bus returns garbage data. Fix USB initializtion race condition. Better error reporting during FTDI open. More explicit messages during USB failures. Fixed bug so that USB device is closed if event loop teardown method was not called. Fixed timer UI issue Fixed duplicate name UI bug (Legacy Module configuration). Fixed race condition in EventLoopManager. Fix to keep references stable when updating gamepad. For legacy Matrix motor\/servo controllers removed necessity of appending \"Motor\" and \"Servo\" to controller names. Updated HT color sensor driver to use constants from ModernRoboticsUsbLegacyModule class. Updated MR color sensor driver to use constants from ModernRoboticsUsbDeviceInterfaceModule class. Correctly handle I2C Address change in all color sensors Updated\/cleaned up op modes. Updated comments in LinearI2cAddressChange.java example op mode. Replaced the calls to \"setChannelMode\" with \"setMode\" (to match the new of the DcMotor method). Removed K9AutoTime.java op mode. Added MRGyroTest.java op mode (demonstrates how to use MR Gyro Sensor). Added MRRGBExample.java op mode (demonstrates how to use MR Color Sensor). Added HTRGBExample.java op mode (demonstrates how to use HT legacy color sensor). Added MatrixControllerDemo.java (demonstrates how to use legacy Matrix controller). Updated javadoc documentation. Updated release .apk files for Robot Controller and Driver Station apps. Release 15.10.06.002 Added support for Legacy Matrix 9.6V motor\/servo controller. Cleaned up build.gradle file. Minor UI and bug fixes for driver station and robot controller apps. Throws error if Ultrasonic sensor (NXT) is not configured for legacy module port 4 or 5. Release 15.08.03.001 New user interfaces for FTC Driver Station and FTC Robot Controller apps. An init() method is added to the OpMode class. For this release, init() is triggered right before the start() method. Eventually, the init() method will be triggered when the user presses an \"INIT\" button on driver station. The init() and loop() methods are now required (i.e., need to be overridden in the user's op mode). The start() and stop() methods are optional. A new LinearOpMode class is introduced. Teams can use the LinearOpMode mode to create a linear (not event driven) program model. Teams can use blocking statements like Thread.sleep() within a linear op mode. The API for the Legacy Module and Core Device Interface Module have been updated. Support for encoders with the Legacy Module is now working. The hardware loop has been updated for better performance.", "fork": false, "created_at": "2021-03-08T11:34:11Z", - "updated_at": "2026-05-20T14:21:11Z", + "updated_at": "2026-05-20T20:15:55Z", "pushed_at": "2024-04-12T05:48:35Z", - "stargazers_count": 280, - "watchers_count": 280, + "stargazers_count": 281, + "watchers_count": 281, "has_discussions": false, "forks_count": 86, "allow_forking": true, @@ -147,7 +147,7 @@ "topics": [], "visibility": "public", "forks": 86, - "watchers": 280, + "watchers": 281, "score": 0, "subscribers_count": 13 }, diff --git a/2019/CVE-2019-12586.json b/2019/CVE-2019-12586.json index 6f2aa7c447..e17dc67406 100644 --- a/2019/CVE-2019-12586.json +++ b/2019/CVE-2019-12586.json @@ -14,10 +14,10 @@ "description": "Proof of Concept of ESP32\/8266 Wi-Fi vulnerabilties (CVE-2019-12586, CVE-2019-12587, CVE-2019-12588)", "fork": false, "created_at": "2019-09-03T15:08:49Z", - "updated_at": "2026-04-28T08:41:29Z", + "updated_at": "2026-05-20T23:33:27Z", "pushed_at": "2019-09-08T06:09:11Z", - "stargazers_count": 818, - "watchers_count": 818, + "stargazers_count": 817, + "watchers_count": 817, "has_discussions": false, "forks_count": 69, "allow_forking": true, @@ -34,7 +34,7 @@ ], "visibility": "public", "forks": 69, - "watchers": 818, + "watchers": 817, "score": 0, "subscribers_count": 32 } diff --git a/2019/CVE-2019-18371.json b/2019/CVE-2019-18371.json index 9f693a3a17..28356afd29 100644 --- a/2019/CVE-2019-18371.json +++ b/2019/CVE-2019-18371.json @@ -14,10 +14,10 @@ "description": "A login bypass(CVE-2019-18371) and a command injection vulnerability(CVE-2019-18370) in Xiaomi Router R3G up to version 2.28.23.", "fork": false, "created_at": "2019-08-30T16:32:13Z", - "updated_at": "2026-04-27T05:20:21Z", + "updated_at": "2026-05-20T23:30:10Z", "pushed_at": "2020-01-12T02:34:45Z", - "stargazers_count": 187, - "watchers_count": 187, + "stargazers_count": 186, + "watchers_count": 186, "has_discussions": false, "forks_count": 28, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 28, - "watchers": 187, + "watchers": 186, "score": 0, "subscribers_count": 6 }, diff --git a/2019/CVE-2019-7609.json b/2019/CVE-2019-7609.json index 56a15950df..6430095c69 100644 --- a/2019/CVE-2019-7609.json +++ b/2019/CVE-2019-7609.json @@ -83,10 +83,10 @@ "description": "exploit CVE-2019-7609(kibana RCE) on right way by python2 scripts", "fork": false, "created_at": "2019-10-21T15:31:13Z", - "updated_at": "2026-04-18T03:38:24Z", + "updated_at": "2026-05-20T23:27:04Z", "pushed_at": "2023-08-29T17:49:28Z", - "stargazers_count": 166, - "watchers_count": 166, + "stargazers_count": 167, + "watchers_count": 167, "has_discussions": false, "forks_count": 63, "allow_forking": true, @@ -101,7 +101,7 @@ ], "visibility": "public", "forks": 63, - "watchers": 166, + "watchers": 167, "score": 0, "subscribers_count": 6 }, diff --git a/2020/CVE-2020-0423.json b/2020/CVE-2020-0423.json index af93745789..76746c1ebb 100644 --- a/2020/CVE-2020-0423.json +++ b/2020/CVE-2020-0423.json @@ -47,8 +47,8 @@ "description": "An exploit to CVE-2020-0423, which is a Binder deffered work UAF.", "fork": false, "created_at": "2026-05-10T17:43:30Z", - "updated_at": "2026-05-10T17:47:21Z", - "pushed_at": "2026-05-10T17:47:17Z", + "updated_at": "2026-05-20T21:58:06Z", + "pushed_at": "2026-05-20T21:58:01Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2020/CVE-2020-0610.json b/2020/CVE-2020-0610.json index 853bdb0606..d00125cc0b 100644 --- a/2020/CVE-2020-0610.json +++ b/2020/CVE-2020-0610.json @@ -58,8 +58,8 @@ "description": "🔍 Create a safe lab environment for testing CVE-2020-0610, a critical RCE vulnerability in Windows RD Gateway, with minimal disruption using DTLS techniques.", "fork": false, "created_at": "2025-09-04T13:21:35Z", - "updated_at": "2026-05-20T17:22:41Z", - "pushed_at": "2026-05-20T17:22:36Z", + "updated_at": "2026-05-21T00:18:33Z", + "pushed_at": "2026-05-21T00:18:29Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2020/CVE-2020-1472.json b/2020/CVE-2020-1472.json index acd1092935..976c8ab757 100644 --- a/2020/CVE-2020-1472.json +++ b/2020/CVE-2020-1472.json @@ -2383,8 +2383,8 @@ "description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.", "fork": false, "created_at": "2025-12-06T10:17:38Z", - "updated_at": "2026-05-20T16:37:56Z", - "pushed_at": "2026-05-20T16:37:52Z", + "updated_at": "2026-05-20T23:51:10Z", + "pushed_at": "2026-05-20T23:51:07Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2020/CVE-2020-17103.json b/2020/CVE-2020-17103.json index 2aa552ef9c..e7bd218bb5 100644 --- a/2020/CVE-2020-17103.json +++ b/2020/CVE-2020-17103.json @@ -14,12 +14,12 @@ "description": "CVE-2020-17103 was apparently not patched or the patch was reversed, regardless this the PoC for an LPE in cldflt.sys", "fork": false, "created_at": "2026-05-14T20:32:21Z", - "updated_at": "2026-05-20T18:07:38Z", + "updated_at": "2026-05-20T23:06:43Z", "pushed_at": "2026-05-16T06:01:33Z", - "stargazers_count": 647, - "watchers_count": 647, + "stargazers_count": 657, + "watchers_count": 657, "has_discussions": false, - "forks_count": 160, + "forks_count": 163, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,10 +27,10 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 160, - "watchers": 647, + "forks": 163, + "watchers": 657, "score": 0, - "subscribers_count": 7 + "subscribers_count": 10 }, { "id": 1239196941, diff --git a/2020/CVE-2020-25078.json b/2020/CVE-2020-25078.json index 5126b7ddfd..f5b21a68a4 100644 --- a/2020/CVE-2020-25078.json +++ b/2020/CVE-2020-25078.json @@ -64,5 +64,38 @@ "watchers": 0, "score": 0, "subscribers_count": 1 + }, + { + "id": 1245095402, + "name": "abyss-c2", + "full_name": "flags-alt\/abyss-c2", + "owner": { + "login": "flags-alt", + "id": 217268508, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/217268508?v=4", + "html_url": "https:\/\/github.com\/flags-alt", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/flags-alt\/abyss-c2", + "description": " ABYSS C2 — HiSilicon DVR Exploit Framework (CVE-2020-25078). Educational IoT security research platform.", + "fork": false, + "created_at": "2026-05-20T22:54:01Z", + "updated_at": "2026-05-20T22:55:03Z", + "pushed_at": "2026-05-20T22:54:59Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2020/CVE-2020-7602.json b/2020/CVE-2020-7602.json index 356580e429..6494fb25c5 100644 --- a/2020/CVE-2020-7602.json +++ b/2020/CVE-2020-7602.json @@ -15,7 +15,7 @@ "fork": false, "created_at": "2026-05-20T04:27:16Z", "updated_at": "2026-05-20T04:27:23Z", - "pushed_at": "2026-05-20T05:49:45Z", + "pushed_at": "2026-05-20T21:53:55Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2021/CVE-2021-23797.json b/2021/CVE-2021-23797.json index 2977086576..521d9c2de9 100644 --- a/2021/CVE-2021-23797.json +++ b/2021/CVE-2021-23797.json @@ -15,7 +15,7 @@ "fork": false, "created_at": "2026-05-20T04:27:12Z", "updated_at": "2026-05-20T04:27:19Z", - "pushed_at": "2026-05-20T18:21:33Z", + "pushed_at": "2026-05-20T21:53:52Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2021/CVE-2021-33044.json b/2021/CVE-2021-33044.json index a29070128b..219dbf0e9c 100644 --- a/2021/CVE-2021-33044.json +++ b/2021/CVE-2021-33044.json @@ -212,8 +212,8 @@ "description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.", "fork": false, "created_at": "2026-03-28T17:42:44Z", - "updated_at": "2026-05-20T17:36:41Z", - "pushed_at": "2026-05-20T17:36:37Z", + "updated_at": "2026-05-21T00:15:38Z", + "pushed_at": "2026-05-21T00:15:35Z", "stargazers_count": 4, "watchers_count": 4, "has_discussions": false, diff --git a/2021/CVE-2021-3490.json b/2021/CVE-2021-3490.json index f65675c00e..24739d0a96 100644 --- a/2021/CVE-2021-3490.json +++ b/2021/CVE-2021-3490.json @@ -14,10 +14,10 @@ "description": null, "fork": false, "created_at": "2021-06-24T18:50:17Z", - "updated_at": "2026-05-13T19:48:46Z", + "updated_at": "2026-05-20T22:58:09Z", "pushed_at": "2023-07-10T16:41:49Z", - "stargazers_count": 313, - "watchers_count": 313, + "stargazers_count": 314, + "watchers_count": 314, "has_discussions": false, "forks_count": 47, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 47, - "watchers": 313, + "watchers": 314, "score": 0, "subscribers_count": 5 }, diff --git a/2021/CVE-2021-4034.json b/2021/CVE-2021-4034.json index 70502faf43..e0a1265aa9 100644 --- a/2021/CVE-2021-4034.json +++ b/2021/CVE-2021-4034.json @@ -14,10 +14,10 @@ "description": "CVE-2021-4034 1day", "fork": false, "created_at": "2022-01-25T23:51:37Z", - "updated_at": "2026-05-18T10:02:34Z", + "updated_at": "2026-05-20T23:33:10Z", "pushed_at": "2022-06-08T04:00:28Z", - "stargazers_count": 2043, - "watchers_count": 2043, + "stargazers_count": 2042, + "watchers_count": 2042, "has_discussions": false, "forks_count": 510, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 510, - "watchers": 2043, + "watchers": 2042, "score": 0, "subscribers_count": 19 }, @@ -2017,8 +2017,8 @@ "description": "🚀 Enhance your penetration testing with PwnKit Helper, a simple tool for exploiting the CVE-2021-4034 vulnerability in pkexec for local privilege escalation.", "fork": false, "created_at": "2025-10-01T09:53:03Z", - "updated_at": "2026-05-20T17:30:51Z", - "pushed_at": "2026-05-20T17:30:28Z", + "updated_at": "2026-05-20T21:46:22Z", + "pushed_at": "2026-05-20T21:46:18Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2021/CVE-2021-40444.json b/2021/CVE-2021-40444.json index a1cea708ed..cdffe689d9 100644 --- a/2021/CVE-2021-40444.json +++ b/2021/CVE-2021-40444.json @@ -245,10 +245,10 @@ "description": "CVE-2021-40444 PoC", "fork": false, "created_at": "2021-09-10T16:55:53Z", - "updated_at": "2026-05-20T18:17:47Z", + "updated_at": "2026-05-20T23:36:51Z", "pushed_at": "2021-12-25T18:31:02Z", - "stargazers_count": 1736, - "watchers_count": 1736, + "stargazers_count": 1735, + "watchers_count": 1735, "has_discussions": false, "forks_count": 477, "allow_forking": true, @@ -259,7 +259,7 @@ "topics": [], "visibility": "public", "forks": 477, - "watchers": 1736, + "watchers": 1735, "score": 0, "subscribers_count": 28 }, diff --git a/2021/CVE-2021-40449.json b/2021/CVE-2021-40449.json index a041092296..d50b063ecc 100644 --- a/2021/CVE-2021-40449.json +++ b/2021/CVE-2021-40449.json @@ -117,10 +117,10 @@ "description": "Exploit for CVE-2021-40449", "fork": false, "created_at": "2021-11-07T16:15:19Z", - "updated_at": "2026-05-13T19:49:08Z", + "updated_at": "2026-05-20T23:35:35Z", "pushed_at": "2021-11-07T16:21:20Z", - "stargazers_count": 53, - "watchers_count": 53, + "stargazers_count": 52, + "watchers_count": 52, "has_discussions": false, "forks_count": 12, "allow_forking": true, @@ -131,7 +131,7 @@ "topics": [], "visibility": "public", "forks": 12, - "watchers": 53, + "watchers": 52, "score": 0, "subscribers_count": 2 }, diff --git a/2021/CVE-2021-44228.json b/2021/CVE-2021-44228.json index d25fe9fe9c..f43526ab5b 100644 --- a/2021/CVE-2021-44228.json +++ b/2021/CVE-2021-44228.json @@ -988,10 +988,10 @@ "description": "A Proof-Of-Concept for the CVE-2021-44228 vulnerability. ", "fork": false, "created_at": "2021-12-10T23:19:28Z", - "updated_at": "2026-05-13T15:00:30Z", + "updated_at": "2026-05-20T23:33:42Z", "pushed_at": "2024-02-12T22:37:25Z", - "stargazers_count": 1849, - "watchers_count": 1849, + "stargazers_count": 1848, + "watchers_count": 1848, "has_discussions": false, "forks_count": 544, "allow_forking": true, @@ -1007,7 +1007,7 @@ ], "visibility": "public", "forks": 544, - "watchers": 1849, + "watchers": 1848, "score": 0, "subscribers_count": 0 }, @@ -3906,10 +3906,10 @@ "description": "A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228 ", "fork": false, "created_at": "2021-12-13T03:57:50Z", - "updated_at": "2026-05-20T08:31:59Z", + "updated_at": "2026-05-20T20:04:23Z", "pushed_at": "2022-11-23T18:23:24Z", - "stargazers_count": 3431, - "watchers_count": 3431, + "stargazers_count": 3432, + "watchers_count": 3432, "has_discussions": true, "forks_count": 728, "allow_forking": true, @@ -3920,7 +3920,7 @@ "topics": [], "visibility": "public", "forks": 728, - "watchers": 3431, + "watchers": 3432, "score": 0, "subscribers_count": 55 }, diff --git a/2022/CVE-2022-20452.json b/2022/CVE-2022-20452.json index 851528ae70..50b66b2e4a 100644 --- a/2022/CVE-2022-20452.json +++ b/2022/CVE-2022-20452.json @@ -14,10 +14,10 @@ "description": "Exploit for CVE-2022-20452, privilege escalation on Android from installed app to system app (or another app) via LazyValue using Parcel after recycle()", "fork": false, "created_at": "2023-01-10T16:24:51Z", - "updated_at": "2026-05-17T18:28:01Z", + "updated_at": "2026-05-20T23:28:08Z", "pushed_at": "2023-04-12T17:28:49Z", - "stargazers_count": 346, - "watchers_count": 346, + "stargazers_count": 345, + "watchers_count": 345, "has_discussions": false, "forks_count": 64, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 64, - "watchers": 346, + "watchers": 345, "score": 0, "subscribers_count": 10 } diff --git a/2022/CVE-2022-21882.json b/2022/CVE-2022-21882.json index 25c0b26868..5b42e2692c 100644 --- a/2022/CVE-2022-21882.json +++ b/2022/CVE-2022-21882.json @@ -80,10 +80,10 @@ "description": null, "fork": false, "created_at": "2022-02-03T11:25:14Z", - "updated_at": "2026-04-09T15:13:08Z", + "updated_at": "2026-05-20T23:32:48Z", "pushed_at": "2022-02-04T02:20:47Z", - "stargazers_count": 200, - "watchers_count": 200, + "stargazers_count": 199, + "watchers_count": 199, "has_discussions": false, "forks_count": 47, "allow_forking": true, @@ -94,7 +94,7 @@ "topics": [], "visibility": "public", "forks": 47, - "watchers": 200, + "watchers": 199, "score": 0, "subscribers_count": 5 }, diff --git a/2022/CVE-2022-30075.json b/2022/CVE-2022-30075.json index ddd031b320..74a45b17c1 100644 --- a/2022/CVE-2022-30075.json +++ b/2022/CVE-2022-30075.json @@ -14,10 +14,10 @@ "description": "Tp-Link Archer AX50 Authenticated RCE (CVE-2022-30075)", "fork": false, "created_at": "2022-06-07T23:26:47Z", - "updated_at": "2026-05-19T12:50:55Z", + "updated_at": "2026-05-20T23:31:35Z", "pushed_at": "2022-11-20T03:03:53Z", - "stargazers_count": 233, - "watchers_count": 233, + "stargazers_count": 234, + "watchers_count": 234, "has_discussions": false, "forks_count": 43, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 43, - "watchers": 233, + "watchers": 234, "score": 0, "subscribers_count": 4 }, diff --git a/2022/CVE-2022-39227.json b/2022/CVE-2022-39227.json index 4f4213d2bc..29bb9df99e 100644 --- a/2022/CVE-2022-39227.json +++ b/2022/CVE-2022-39227.json @@ -89,8 +89,8 @@ "description": null, "fork": false, "created_at": "2026-04-27T23:32:48Z", - "updated_at": "2026-05-01T19:27:08Z", - "pushed_at": "2026-05-01T16:59:54Z", + "updated_at": "2026-05-20T21:52:39Z", + "pushed_at": "2026-05-20T21:52:35Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2023/CVE-2023-0386.json b/2023/CVE-2023-0386.json index 0773022770..2458e917de 100644 --- a/2023/CVE-2023-0386.json +++ b/2023/CVE-2023-0386.json @@ -478,8 +478,8 @@ "description": null, "fork": false, "created_at": "2026-05-20T11:44:38Z", - "updated_at": "2026-05-20T18:11:05Z", - "pushed_at": "2026-05-20T18:10:59Z", + "updated_at": "2026-05-20T19:28:57Z", + "pushed_at": "2026-05-20T19:28:53Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2023/CVE-2023-26035.json b/2023/CVE-2023-26035.json index d751d53ada..2b45ad0e94 100644 --- a/2023/CVE-2023-26035.json +++ b/2023/CVE-2023-26035.json @@ -14,10 +14,10 @@ "description": "Unauthenticated RCE in ZoneMinder Snapshots - Poc Exploit", "fork": false, "created_at": "2023-12-11T19:23:13Z", - "updated_at": "2026-03-08T23:09:27Z", + "updated_at": "2026-05-21T00:29:25Z", "pushed_at": "2024-05-07T03:32:04Z", - "stargazers_count": 23, - "watchers_count": 23, + "stargazers_count": 24, + "watchers_count": 24, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -31,7 +31,7 @@ ], "visibility": "public", "forks": 2, - "watchers": 23, + "watchers": 24, "score": 0, "subscribers_count": 1 }, diff --git a/2023/CVE-2023-29401.json b/2023/CVE-2023-29401.json index 6abc70f58b..7c3ca81648 100644 --- a/2023/CVE-2023-29401.json +++ b/2023/CVE-2023-29401.json @@ -14,8 +14,8 @@ "description": "Demo consumer for gin v1.7.0 (CVE-2023-29401) — Context.FileAttachment with user input. endorctl scan target.", "fork": false, "created_at": "2026-05-20T05:45:18Z", - "updated_at": "2026-05-20T18:20:07Z", - "pushed_at": "2026-05-20T18:21:38Z", + "updated_at": "2026-05-20T20:01:05Z", + "pushed_at": "2026-05-20T23:18:54Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2023/CVE-2023-32434.json b/2023/CVE-2023-32434.json index c17798d49f..71bf645e44 100644 --- a/2023/CVE-2023-32434.json +++ b/2023/CVE-2023-32434.json @@ -47,8 +47,8 @@ "description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙", "fork": false, "created_at": "2025-08-13T09:19:29Z", - "updated_at": "2026-05-20T17:19:00Z", - "pushed_at": "2026-05-20T17:18:26Z", + "updated_at": "2026-05-21T00:15:00Z", + "pushed_at": "2026-05-21T00:14:55Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2023/CVE-2023-32784.json b/2023/CVE-2023-32784.json index bdfd0958fb..43d3e88190 100644 --- a/2023/CVE-2023-32784.json +++ b/2023/CVE-2023-32784.json @@ -14,10 +14,10 @@ "description": "Original PoC for CVE-2023-32784", "fork": false, "created_at": "2023-05-01T17:08:55Z", - "updated_at": "2026-05-15T18:19:46Z", + "updated_at": "2026-05-20T23:26:50Z", "pushed_at": "2023-08-17T19:26:55Z", - "stargazers_count": 652, - "watchers_count": 652, + "stargazers_count": 651, + "watchers_count": 651, "has_discussions": false, "forks_count": 60, "allow_forking": true, @@ -31,7 +31,7 @@ ], "visibility": "public", "forks": 60, - "watchers": 652, + "watchers": 651, "score": 0, "subscribers_count": 9 }, diff --git a/2023/CVE-2023-39910.json b/2023/CVE-2023-39910.json index 751ad32926..d84336bf36 100644 --- a/2023/CVE-2023-39910.json +++ b/2023/CVE-2023-39910.json @@ -66,8 +66,8 @@ "description": "🔒 Analyze the CVE-2023-39910 vulnerability in Libbitcoin Explorer to understand its impact on Bitcoin wallet security and protect your assets.", "fork": false, "created_at": "2026-01-07T14:24:08Z", - "updated_at": "2026-05-20T18:33:53Z", - "pushed_at": "2026-05-20T18:33:49Z", + "updated_at": "2026-05-20T22:36:25Z", + "pushed_at": "2026-05-20T22:36:21Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2023/CVE-2023-44976.json b/2023/CVE-2023-44976.json index a12e89e411..0e4d837f0a 100644 --- a/2023/CVE-2023-44976.json +++ b/2023/CVE-2023-44976.json @@ -14,10 +14,10 @@ "description": "A vulnerable driver exploited by me (BYOVD) that is capable of terminating several EDRs and antivirus software in the market, rendering them ineffective, working for both x32 and x64(CVE-2023-44976).", "fork": false, "created_at": "2023-10-01T18:24:38Z", - "updated_at": "2026-04-28T02:27:37Z", + "updated_at": "2026-05-20T19:48:00Z", "pushed_at": "2024-12-26T13:43:18Z", - "stargazers_count": 106, - "watchers_count": 106, + "stargazers_count": 107, + "watchers_count": 107, "has_discussions": false, "forks_count": 20, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 20, - "watchers": 106, + "watchers": 107, "score": 0, "subscribers_count": 1 } diff --git a/2024/CVE-2024-0582.json b/2024/CVE-2024-0582.json index ff5f42f8bd..7d156f4ad8 100644 --- a/2024/CVE-2024-0582.json +++ b/2024/CVE-2024-0582.json @@ -264,8 +264,8 @@ "description": "An exploit for a Use-After-Free vulnerability in the io_uring subsystem in the linux kernel", "fork": false, "created_at": "2026-05-12T20:29:01Z", - "updated_at": "2026-05-12T22:23:30Z", - "pushed_at": "2026-05-12T22:23:26Z", + "updated_at": "2026-05-20T20:41:46Z", + "pushed_at": "2026-05-20T20:41:42Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-0670.json b/2024/CVE-2024-0670.json index 38be8dd0a4..0a8e55fa51 100644 --- a/2024/CVE-2024-0670.json +++ b/2024/CVE-2024-0670.json @@ -172,8 +172,8 @@ "description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.", "fork": false, "created_at": "2026-01-08T01:32:09Z", - "updated_at": "2026-05-20T18:34:19Z", - "pushed_at": "2026-05-20T18:34:15Z", + "updated_at": "2026-05-20T22:36:44Z", + "pushed_at": "2026-05-20T22:36:40Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-10821.json b/2024/CVE-2024-10821.json index 250964392a..a3afad2017 100644 --- a/2024/CVE-2024-10821.json +++ b/2024/CVE-2024-10821.json @@ -15,7 +15,7 @@ "fork": false, "created_at": "2026-05-19T22:25:36Z", "updated_at": "2026-05-19T22:25:42Z", - "pushed_at": "2026-05-20T18:21:48Z", + "pushed_at": "2026-05-20T21:54:04Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-1086.json b/2024/CVE-2024-1086.json index 0abb58fc22..e889076bb3 100644 --- a/2024/CVE-2024-1086.json +++ b/2024/CVE-2024-1086.json @@ -14,10 +14,10 @@ "description": "Universal local privilege escalation Proof-of-Concept exploit for CVE-2024-1086, working on most Linux kernels between v5.14 and v6.6, including Debian, Ubuntu, and KernelCTF. The success rate is 99.4% in KernelCTF images.", "fork": false, "created_at": "2024-03-20T21:16:41Z", - "updated_at": "2026-05-19T02:32:39Z", + "updated_at": "2026-05-20T23:13:48Z", "pushed_at": "2024-04-17T16:09:54Z", - "stargazers_count": 2447, - "watchers_count": 2447, + "stargazers_count": 2446, + "watchers_count": 2446, "has_discussions": false, "forks_count": 331, "allow_forking": true, @@ -34,7 +34,7 @@ ], "visibility": "public", "forks": 331, - "watchers": 2447, + "watchers": 2446, "score": 0, "subscribers_count": 25 }, diff --git a/2024/CVE-2024-12886.json b/2024/CVE-2024-12886.json index d113517282..61fd458b5e 100644 --- a/2024/CVE-2024-12886.json +++ b/2024/CVE-2024-12886.json @@ -15,7 +15,7 @@ "fork": false, "created_at": "2026-05-19T22:25:32Z", "updated_at": "2026-05-19T22:25:39Z", - "pushed_at": "2026-05-20T18:21:42Z", + "pushed_at": "2026-05-20T21:54:01Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-23222.json b/2024/CVE-2024-23222.json index fc5bf290ea..1a27984aa9 100644 --- a/2024/CVE-2024-23222.json +++ b/2024/CVE-2024-23222.json @@ -80,8 +80,8 @@ "description": "Analyze and deobfuscate the Coruna Exploit Kit (CVE-2024-23222) to enhance understanding and detection of related threats.", "fork": false, "created_at": "2026-03-15T16:36:07Z", - "updated_at": "2026-05-20T15:14:54Z", - "pushed_at": "2026-05-20T15:05:27Z", + "updated_at": "2026-05-20T23:20:04Z", + "pushed_at": "2026-05-20T23:20:00Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -130,8 +130,8 @@ "description": "CVE-2024-23222 WebKit type confusion → iOS 16.4.1 sandbox escape. Full chain: JSC JIT confusion → addrof\/read64\/write64 → WASM indirect call → arbitrary C functions → file write outside sandbox.", "fork": false, "created_at": "2026-05-19T10:09:50Z", - "updated_at": "2026-05-20T01:24:00Z", - "pushed_at": "2026-05-20T01:23:56Z", + "updated_at": "2026-05-20T22:36:17Z", + "pushed_at": "2026-05-20T22:36:13Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-3094.json b/2024/CVE-2024-3094.json index 439175b8f8..cbfb998661 100644 --- a/2024/CVE-2024-3094.json +++ b/2024/CVE-2024-3094.json @@ -1010,10 +1010,10 @@ "description": "notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)", "fork": false, "created_at": "2024-04-01T14:28:09Z", - "updated_at": "2026-05-18T14:02:52Z", + "updated_at": "2026-05-20T23:13:48Z", "pushed_at": "2024-04-03T04:58:50Z", - "stargazers_count": 3559, - "watchers_count": 3559, + "stargazers_count": 3558, + "watchers_count": 3558, "has_discussions": false, "forks_count": 236, "allow_forking": true, @@ -1024,7 +1024,7 @@ "topics": [], "visibility": "public", "forks": 236, - "watchers": 3559, + "watchers": 3558, "score": 0, "subscribers_count": 34 }, diff --git a/2024/CVE-2024-32002.json b/2024/CVE-2024-32002.json index e092564421..82918243bd 100644 --- a/2024/CVE-2024-32002.json +++ b/2024/CVE-2024-32002.json @@ -80,12 +80,12 @@ "description": "Exploit PoC for CVE-2024-32002", "fork": false, "created_at": "2024-05-17T19:33:08Z", - "updated_at": "2026-05-19T14:17:38Z", + "updated_at": "2026-05-20T23:12:04Z", "pushed_at": "2024-05-19T07:12:00Z", "stargazers_count": 532, "watchers_count": 532, "has_discussions": false, - "forks_count": 150, + "forks_count": 151, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -98,7 +98,7 @@ "rce" ], "visibility": "public", - "forks": 150, + "forks": 151, "watchers": 532, "score": 0, "subscribers_count": 2 diff --git a/2024/CVE-2024-37054.json b/2024/CVE-2024-37054.json index 30933f42ab..5d4e1f799a 100644 --- a/2024/CVE-2024-37054.json +++ b/2024/CVE-2024-37054.json @@ -163,38 +163,5 @@ "watchers": 0, "score": 0, "subscribers_count": 0 - }, - { - "id": 1244687013, - "name": "CVE-2024-37054", - "full_name": "vanhari\/CVE-2024-37054", - "owner": { - "login": "vanhari", - "id": 163671161, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/163671161?v=4", - "html_url": "https:\/\/github.com\/vanhari", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/vanhari\/CVE-2024-37054", - "description": "a proof-of-concept for MLflow RCE (remote code execution)", - "fork": false, - "created_at": "2026-05-20T13:54:35Z", - "updated_at": "2026-05-20T13:56:19Z", - "pushed_at": "2026-05-20T13:54:36Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2024/CVE-2024-49138.json b/2024/CVE-2024-49138.json index d9ed45a720..9c89c240ba 100644 --- a/2024/CVE-2024-49138.json +++ b/2024/CVE-2024-49138.json @@ -169,39 +169,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 992606524, - "name": "SCRAPPED", - "full_name": "1rhino2\/SCRAPPED", - "owner": { - "login": "1rhino2", - "id": 195818135, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/195818135?v=4", - "html_url": "https:\/\/github.com\/1rhino2", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/1rhino2\/SCRAPPED", - "description": "This is my biggest project yet: a DLang file encryptor that escalates privileges using CVE-2024-49138 and disables Windows Defender.", - "fork": false, - "created_at": "2025-05-29T12:31:34Z", - "updated_at": "2025-09-06T01:52:09Z", - "pushed_at": "2025-09-06T01:52:06Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 4, - "score": 0, - "subscribers_count": 0 - }, { "id": 1000862061, "name": "SOC335-Event-ID-313-CVE-2024-49138-Exploitation-Detected--Lest-Defend-Writeup", diff --git a/2024/CVE-2024-54374.json b/2024/CVE-2024-54374.json new file mode 100644 index 0000000000..f1c7f58fcb --- /dev/null +++ b/2024/CVE-2024-54374.json @@ -0,0 +1,35 @@ +[ + { + "id": 911563924, + "name": "CVE-2024-54374", + "full_name": "RandomRobbieBF\/CVE-2024-54374", + "owner": { + "login": "RandomRobbieBF", + "id": 51722811, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4", + "html_url": "https:\/\/github.com\/RandomRobbieBF", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-54374", + "description": "Sogrid <= 1.5.6 - Unauthenticated Local File Inclusion", + "fork": false, + "created_at": "2025-01-03T10:08:54Z", + "updated_at": "2026-02-24T12:59:58Z", + "pushed_at": "2025-01-03T10:09:57Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 1 + } +] \ No newline at end of file diff --git a/2024/CVE-2024-55988.json b/2024/CVE-2024-55988.json new file mode 100644 index 0000000000..82bc4ef749 --- /dev/null +++ b/2024/CVE-2024-55988.json @@ -0,0 +1,35 @@ +[ + { + "id": 911576506, + "name": "CVE-2024-55988", + "full_name": "RandomRobbieBF\/CVE-2024-55988", + "owner": { + "login": "RandomRobbieBF", + "id": 51722811, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4", + "html_url": "https:\/\/github.com\/RandomRobbieBF", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-55988", + "description": "Navayan CSV Export <= 1.0.9 - Unauthenticated SQL Injection", + "fork": false, + "created_at": "2025-01-03T10:45:42Z", + "updated_at": "2026-02-24T12:59:58Z", + "pushed_at": "2025-01-03T11:02:23Z", + "stargazers_count": 2, + "watchers_count": 2, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 2, + "score": 0, + "subscribers_count": 1 + } +] \ No newline at end of file diff --git a/2024/CVE-2024-56426.json b/2024/CVE-2024-56426.json index 84dc9d1339..f8a2d4a3f7 100644 --- a/2024/CVE-2024-56426.json +++ b/2024/CVE-2024-56426.json @@ -14,8 +14,8 @@ "description": "A PoC of the CVE-2024-56426 vulnerability.", "fork": false, "created_at": "2026-04-07T12:02:52Z", - "updated_at": "2026-05-20T16:27:00Z", - "pushed_at": "2026-05-18T18:15:30Z", + "updated_at": "2026-05-20T22:01:07Z", + "pushed_at": "2026-05-20T22:01:02Z", "stargazers_count": 8, "watchers_count": 8, "has_discussions": false, diff --git a/2024/CVE-2024-6387.json b/2024/CVE-2024-6387.json index 4c5ad2bbc0..18992efc9a 100644 --- a/2024/CVE-2024-6387.json +++ b/2024/CVE-2024-6387.json @@ -1404,10 +1404,10 @@ "description": "PoC - Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (Scanner and Exploit) ", "fork": false, "created_at": "2024-07-02T18:32:46Z", - "updated_at": "2026-05-05T06:06:34Z", + "updated_at": "2026-05-21T00:15:13Z", "pushed_at": "2024-07-05T15:19:28Z", - "stargazers_count": 102, - "watchers_count": 102, + "stargazers_count": 103, + "watchers_count": 103, "has_discussions": false, "forks_count": 36, "allow_forking": true, @@ -1427,7 +1427,7 @@ ], "visibility": "public", "forks": 36, - "watchers": 102, + "watchers": 103, "score": 0, "subscribers_count": 3 }, diff --git a/2025/CVE-2025-14847.json b/2025/CVE-2025-14847.json index da57fd8e77..bcfb653191 100644 --- a/2025/CVE-2025-14847.json +++ b/2025/CVE-2025-14847.json @@ -14,8 +14,8 @@ "description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.", "fork": false, "created_at": "2025-07-30T15:52:00Z", - "updated_at": "2026-05-20T18:39:56Z", - "pushed_at": "2026-05-20T18:39:52Z", + "updated_at": "2026-05-20T22:41:32Z", + "pushed_at": "2026-05-20T22:41:28Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -1129,8 +1129,8 @@ "description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.", "fork": false, "created_at": "2026-01-14T06:05:44Z", - "updated_at": "2026-05-20T18:38:54Z", - "pushed_at": "2026-05-20T18:38:49Z", + "updated_at": "2026-05-20T22:40:37Z", + "pushed_at": "2026-05-20T22:40:33Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-21479.json b/2025/CVE-2025-21479.json index d65c6943cd..99145b076b 100644 --- a/2025/CVE-2025-21479.json +++ b/2025/CVE-2025-21479.json @@ -14,10 +14,10 @@ "description": "CVE-2025-21479 proof-of-concept, I think", "fork": false, "created_at": "2025-06-19T19:47:52Z", - "updated_at": "2026-05-13T16:11:49Z", + "updated_at": "2026-05-20T23:36:55Z", "pushed_at": "2025-08-16T06:52:13Z", - "stargazers_count": 242, - "watchers_count": 242, + "stargazers_count": 243, + "watchers_count": 243, "has_discussions": false, "forks_count": 53, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 53, - "watchers": 242, + "watchers": 243, "score": 0, "subscribers_count": 2 }, diff --git a/2025/CVE-2025-2304.json b/2025/CVE-2025-2304.json index abca7c119c..c7fb0d5590 100644 --- a/2025/CVE-2025-2304.json +++ b/2025/CVE-2025-2304.json @@ -412,8 +412,8 @@ "description": "🛠️ Exploit CVE-2025-2304 in Camaleon CMS easily with this Python script for privilege escalation, tested on version 2.9.0.", "fork": false, "created_at": "2026-02-14T20:01:20Z", - "updated_at": "2026-05-20T14:58:32Z", - "pushed_at": "2026-05-20T14:38:57Z", + "updated_at": "2026-05-20T23:00:59Z", + "pushed_at": "2026-05-20T23:00:55Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-24203.json b/2025/CVE-2025-24203.json index 1b7e5ad498..0456503a39 100644 --- a/2025/CVE-2025-24203.json +++ b/2025/CVE-2025-24203.json @@ -51,10 +51,10 @@ "description": "CVE-2025-24203漏洞", "fork": false, "created_at": "2025-05-25T05:34:30Z", - "updated_at": "2026-03-11T09:35:48Z", + "updated_at": "2026-05-20T23:08:39Z", "pushed_at": "2025-05-25T14:41:19Z", - "stargazers_count": 23, - "watchers_count": 23, + "stargazers_count": 24, + "watchers_count": 24, "has_discussions": true, "forks_count": 3, "allow_forking": true, @@ -65,7 +65,7 @@ "topics": [], "visibility": "public", "forks": 3, - "watchers": 23, + "watchers": 24, "score": 0, "subscribers_count": 1 } diff --git a/2025/CVE-2025-24257.json b/2025/CVE-2025-24257.json index 1d48a861c1..7852b5ffd0 100644 --- a/2025/CVE-2025-24257.json +++ b/2025/CVE-2025-24257.json @@ -14,8 +14,8 @@ "description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis", "fork": false, "created_at": "2026-04-04T03:42:55Z", - "updated_at": "2026-05-20T15:27:30Z", - "pushed_at": "2026-05-20T15:18:37Z", + "updated_at": "2026-05-20T23:30:44Z", + "pushed_at": "2026-05-20T23:30:40Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-31258.json b/2025/CVE-2025-31258.json index 41f48b727b..63c47d248b 100644 --- a/2025/CVE-2025-31258.json +++ b/2025/CVE-2025-31258.json @@ -14,8 +14,8 @@ "description": "🔓 Explore CVE-2025-31258 with this PoC demonstrating partial sandbox escape using RemoteViewServices for practical 1-day security practice.", "fork": false, "created_at": "2020-06-23T15:20:11Z", - "updated_at": "2026-05-20T17:25:07Z", - "pushed_at": "2026-05-20T17:24:59Z", + "updated_at": "2026-05-21T00:20:12Z", + "pushed_at": "2026-05-21T00:20:06Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-32432.json b/2025/CVE-2025-32432.json index f27734fd7b..096c5ef1ed 100644 --- a/2025/CVE-2025-32432.json +++ b/2025/CVE-2025-32432.json @@ -179,10 +179,10 @@ "description": "Working PoC for CVE-2025-32432 - Craft CMS <= 5.6.16 unauthenticated RCE via Yii2 PhpManager gadget + nginx access.log poisoning", "fork": false, "created_at": "2026-05-15T14:09:32Z", - "updated_at": "2026-05-15T18:00:45Z", + "updated_at": "2026-05-20T23:17:10Z", "pushed_at": "2026-05-15T14:28:48Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -205,7 +205,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 } diff --git a/2025/CVE-2025-32463.json b/2025/CVE-2025-32463.json index 3021f8372c..69fb090071 100644 --- a/2025/CVE-2025-32463.json +++ b/2025/CVE-2025-32463.json @@ -645,8 +645,8 @@ "description": "Demonstrate CVE-2025-32463 with this PoC for sudo's chroot feature. Explore the exploit and its impact on vulnerable sudo versions. 🐱💻🔒", "fork": false, "created_at": "2025-07-04T18:20:09Z", - "updated_at": "2026-05-20T17:16:49Z", - "pushed_at": "2026-05-20T17:16:43Z", + "updated_at": "2026-05-21T00:13:52Z", + "pushed_at": "2026-05-21T00:13:48Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -1628,8 +1628,8 @@ "description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.", "fork": false, "created_at": "2025-09-20T00:42:07Z", - "updated_at": "2026-05-20T17:26:09Z", - "pushed_at": "2026-05-20T17:26:05Z", + "updated_at": "2026-05-21T00:21:33Z", + "pushed_at": "2026-05-21T00:21:30Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -1680,8 +1680,8 @@ "description": null, "fork": false, "created_at": "2025-09-20T02:01:08Z", - "updated_at": "2026-05-20T17:26:17Z", - "pushed_at": "2026-05-20T17:26:11Z", + "updated_at": "2026-05-21T00:21:23Z", + "pushed_at": "2026-05-21T00:21:19Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-32756.json b/2025/CVE-2025-32756.json index 83a698cb60..5e70ce23dd 100644 --- a/2025/CVE-2025-32756.json +++ b/2025/CVE-2025-32756.json @@ -47,10 +47,10 @@ "description": "Proof of Concept for CVE-2025-32756 - A critical stack-based buffer overflow vulnerability affecting multiple Fortinet products.", "fork": false, "created_at": "2025-06-05T14:16:31Z", - "updated_at": "2026-05-11T01:25:49Z", + "updated_at": "2026-05-21T00:02:13Z", "pushed_at": "2025-06-13T07:55:34Z", - "stargazers_count": 196, - "watchers_count": 196, + "stargazers_count": 197, + "watchers_count": 197, "has_discussions": false, "forks_count": 29, "allow_forking": true, @@ -66,7 +66,7 @@ ], "visibility": "public", "forks": 29, - "watchers": 196, + "watchers": 197, "score": 0, "subscribers_count": 6 }, diff --git a/2025/CVE-2025-33073.json b/2025/CVE-2025-33073.json index 24b7abe9dd..d4b7d94c1e 100644 --- a/2025/CVE-2025-33073.json +++ b/2025/CVE-2025-33073.json @@ -19,7 +19,7 @@ "stargazers_count": 700, "watchers_count": 700, "has_discussions": false, - "forks_count": 132, + "forks_count": 133, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 132, + "forks": 133, "watchers": 700, "score": 0, "subscribers_count": 5 diff --git a/2025/CVE-2025-36911.json b/2025/CVE-2025-36911.json index 94cef4d287..31bed2d753 100644 --- a/2025/CVE-2025-36911.json +++ b/2025/CVE-2025-36911.json @@ -294,8 +294,8 @@ "description": "🔍 Scan and research CVE-2025-36911 vulnerabilities with WPair, a specialized tool for Android built in Kotlin, ensuring your applications remain secure.", "fork": false, "created_at": "2026-01-29T01:59:47Z", - "updated_at": "2026-05-20T14:38:34Z", - "pushed_at": "2026-05-20T14:26:50Z", + "updated_at": "2026-05-20T22:51:41Z", + "pushed_at": "2026-05-20T22:51:37Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-48757.json b/2025/CVE-2025-48757.json index a3b5e988ca..279df2790f 100644 --- a/2025/CVE-2025-48757.json +++ b/2025/CVE-2025-48757.json @@ -14,10 +14,10 @@ "description": "Claude Skill that audits your projects for RLS misconfigurations, exposed keys, auth bypasses, and storage vulnerabilities. 27 anti-patterns sourced from CVE-2025-48757 and 10 security studies. Safe for production.", "fork": false, "created_at": "2026-03-15T14:49:30Z", - "updated_at": "2026-05-20T01:43:22Z", + "updated_at": "2026-05-20T23:21:18Z", "pushed_at": "2026-04-30T08:42:55Z", - "stargazers_count": 22, - "watchers_count": 22, + "stargazers_count": 23, + "watchers_count": 23, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -44,7 +44,7 @@ ], "visibility": "public", "forks": 3, - "watchers": 22, + "watchers": 23, "score": 0, "subscribers_count": 0 }, diff --git a/2025/CVE-2025-49144.json b/2025/CVE-2025-49144.json index 05e679c78f..d8170e1170 100644 --- a/2025/CVE-2025-49144.json +++ b/2025/CVE-2025-49144.json @@ -251,8 +251,8 @@ "description": null, "fork": false, "created_at": "2025-09-19T17:17:19Z", - "updated_at": "2026-05-20T17:25:59Z", - "pushed_at": "2026-05-20T17:25:54Z", + "updated_at": "2026-05-21T00:21:14Z", + "pushed_at": "2026-05-21T00:21:10Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-49844.json b/2025/CVE-2025-49844.json index 6f42170d58..f9f0acc95f 100644 --- a/2025/CVE-2025-49844.json +++ b/2025/CVE-2025-49844.json @@ -14,8 +14,8 @@ "description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.", "fork": false, "created_at": "2019-04-13T07:51:09Z", - "updated_at": "2026-05-20T17:46:50Z", - "pushed_at": "2026-05-20T17:46:46Z", + "updated_at": "2026-05-21T00:39:09Z", + "pushed_at": "2026-05-21T00:39:05Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -66,8 +66,8 @@ "description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.", "fork": false, "created_at": "2022-04-06T09:27:39Z", - "updated_at": "2026-05-20T17:47:23Z", - "pushed_at": "2026-05-20T17:47:19Z", + "updated_at": "2026-05-21T00:39:54Z", + "pushed_at": "2026-05-21T00:39:51Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-52915.json b/2025/CVE-2025-52915.json index bd8383548b..5383548d0f 100644 --- a/2025/CVE-2025-52915.json +++ b/2025/CVE-2025-52915.json @@ -14,10 +14,10 @@ "description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055,).", "fork": false, "created_at": "2023-12-05T14:52:11Z", - "updated_at": "2026-05-20T17:00:43Z", + "updated_at": "2026-05-20T22:04:00Z", "pushed_at": "2026-05-19T07:17:52Z", - "stargazers_count": 749, - "watchers_count": 749, + "stargazers_count": 750, + "watchers_count": 750, "has_discussions": false, "forks_count": 112, "allow_forking": true, @@ -37,7 +37,7 @@ ], "visibility": "public", "forks": 112, - "watchers": 749, + "watchers": 750, "score": 0, "subscribers_count": 18 } diff --git a/2025/CVE-2025-5419.json b/2025/CVE-2025-5419.json index 0224efe2ea..8b5b0d9241 100644 --- a/2025/CVE-2025-5419.json +++ b/2025/CVE-2025-5419.json @@ -14,8 +14,8 @@ "description": "🛡️ Analyze CVE-2025-5419 to exploit an uninitialized read vulnerability in V8 for arbitrary read\/write access within the sandbox environment.", "fork": false, "created_at": "2023-01-25T04:41:49Z", - "updated_at": "2026-05-20T14:50:14Z", - "pushed_at": "2026-05-20T14:36:20Z", + "updated_at": "2026-05-20T22:59:22Z", + "pushed_at": "2026-05-20T22:59:18Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-54253.json b/2025/CVE-2025-54253.json index 2afe325902..8515883f64 100644 --- a/2025/CVE-2025-54253.json +++ b/2025/CVE-2025-54253.json @@ -67,8 +67,8 @@ "description": "🐙 CVE-2025-54253 exploit demo for Adobe AEM Forms on JEE: OGNL injection to RCE with PoC, Python 3.10 exploit code, reproducer and mitigation guidance.", "fork": false, "created_at": "2025-08-17T22:04:33Z", - "updated_at": "2026-05-20T17:20:18Z", - "pushed_at": "2026-05-20T17:19:46Z", + "updated_at": "2026-05-21T00:16:12Z", + "pushed_at": "2026-05-21T00:16:08Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2025/CVE-2025-54424.json b/2025/CVE-2025-54424.json index 1e8bd7a3df..b9537de345 100644 --- a/2025/CVE-2025-54424.json +++ b/2025/CVE-2025-54424.json @@ -53,8 +53,8 @@ "description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐", "fork": false, "created_at": "2025-08-14T05:16:16Z", - "updated_at": "2026-05-20T17:19:28Z", - "pushed_at": "2026-05-20T17:19:19Z", + "updated_at": "2026-05-21T00:15:46Z", + "pushed_at": "2026-05-21T00:15:43Z", "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, diff --git a/2025/CVE-2025-55182.json b/2025/CVE-2025-55182.json index e5844bdf8d..34989cf348 100644 --- a/2025/CVE-2025-55182.json +++ b/2025/CVE-2025-55182.json @@ -14,8 +14,8 @@ "description": "🔍 Demonstrate CVE-2025-55182, a critical vulnerability in React Server Components allowing unauthenticated arbitrary code execution.", "fork": false, "created_at": "2021-09-18T02:04:33Z", - "updated_at": "2026-05-20T18:24:02Z", - "pushed_at": "2026-05-20T18:23:43Z", + "updated_at": "2026-05-20T22:27:53Z", + "pushed_at": "2026-05-20T22:27:50Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -66,8 +66,8 @@ "description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.", "fork": false, "created_at": "2022-06-17T10:19:10Z", - "updated_at": "2026-05-20T18:23:18Z", - "pushed_at": "2026-05-20T18:23:14Z", + "updated_at": "2026-05-20T22:27:47Z", + "pushed_at": "2026-05-20T22:27:43Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -151,8 +151,8 @@ "description": "🔍 Detect vulnerabilities CVE-2025-55182 and CVE-2025-66478 in Next.js apps with this reliable command-line scanner.", "fork": false, "created_at": "2023-11-27T18:17:43Z", - "updated_at": "2026-05-20T18:23:29Z", - "pushed_at": "2026-05-20T18:23:25Z", + "updated_at": "2026-05-20T22:27:37Z", + "pushed_at": "2026-05-20T22:27:34Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -203,8 +203,8 @@ "description": "🚨 Exploit CVE-2025-55182, a critical RCE vulnerability in React Server Components for Next.js apps; enables testing for prototype pollution risks.", "fork": false, "created_at": "2024-04-24T02:36:56Z", - "updated_at": "2026-05-20T18:24:39Z", - "pushed_at": "2026-05-20T18:24:33Z", + "updated_at": "2026-05-20T22:28:45Z", + "pushed_at": "2026-05-20T22:28:41Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -251,8 +251,8 @@ "description": "🚨 Exploit and scan for CVE-2025-55182, a critical React\/Next.js vulnerability enabling remote code execution through prototype pollution techniques.", "fork": false, "created_at": "2024-05-28T16:48:51Z", - "updated_at": "2026-05-20T18:23:29Z", - "pushed_at": "2026-05-20T18:23:01Z", + "updated_at": "2026-05-20T22:27:11Z", + "pushed_at": "2026-05-20T22:27:08Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -303,8 +303,8 @@ "description": null, "fork": false, "created_at": "2024-11-29T12:32:19Z", - "updated_at": "2026-05-20T18:24:27Z", - "pushed_at": "2026-05-20T18:24:08Z", + "updated_at": "2026-05-20T22:28:20Z", + "pushed_at": "2026-05-20T22:28:16Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -352,8 +352,8 @@ "description": "🛠️ Exploit CVE-2025-55182 effortlessly with this GUI tool for vulnerability detection, command execution, and Shell reverse connections.", "fork": false, "created_at": "2025-04-21T22:04:31Z", - "updated_at": "2026-05-20T18:27:28Z", - "pushed_at": "2026-05-20T18:27:23Z", + "updated_at": "2026-05-20T22:30:57Z", + "pushed_at": "2026-05-20T22:30:53Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -406,8 +406,8 @@ "description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.", "fork": false, "created_at": "2025-06-06T16:34:46Z", - "updated_at": "2026-05-20T18:23:46Z", - "pushed_at": "2026-05-20T18:23:41Z", + "updated_at": "2026-05-20T22:27:51Z", + "pushed_at": "2026-05-20T22:27:47Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -458,8 +458,8 @@ "description": "⚠️ Explore a vulnerable environment to test security scanners against the CVE-2025-55182 RCE flaw in React Server Components and Next.js applications.", "fork": false, "created_at": "2025-07-15T18:33:34Z", - "updated_at": "2026-05-20T18:24:46Z", - "pushed_at": "2026-05-20T18:24:42Z", + "updated_at": "2026-05-20T22:28:37Z", + "pushed_at": "2026-05-20T22:28:34Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -10468,7 +10468,7 @@ "description": "A CLI tool that exploits vulnerabilities in React Server Components and Server Actions (CVE-2025-55182, CVE-2025-66478) to achieve remote code execution (RCE) on vulnerable servers.", "fork": false, "created_at": "2025-12-13T07:21:28Z", - "updated_at": "2026-02-26T04:57:08Z", + "updated_at": "2026-05-20T20:38:32Z", "pushed_at": "2025-12-17T14:24:27Z", "stargazers_count": 0, "watchers_count": 0, @@ -12284,8 +12284,8 @@ "description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.", "fork": false, "created_at": "2025-12-24T14:48:19Z", - "updated_at": "2026-05-20T18:23:21Z", - "pushed_at": "2026-05-20T18:23:17Z", + "updated_at": "2026-05-20T22:27:29Z", + "pushed_at": "2026-05-20T22:27:26Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -12369,8 +12369,8 @@ "description": "🚨 Identify and address CVE-2025-55182, a critical React Server vulnerability allowing remote code execution without authentication.", "fork": false, "created_at": "2025-12-24T18:44:51Z", - "updated_at": "2026-05-20T18:22:37Z", - "pushed_at": "2026-05-20T18:22:17Z", + "updated_at": "2026-05-20T22:26:51Z", + "pushed_at": "2026-05-20T22:26:47Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -12418,8 +12418,8 @@ "description": "🚨 Demonstrate CVE-2025-55182, a critical React vulnerability allowing remote code execution via prototype chain pollution in `react-server-dom-webpack@19.0.0`.", "fork": false, "created_at": "2025-12-24T18:48:07Z", - "updated_at": "2026-05-20T18:23:01Z", - "pushed_at": "2026-05-20T18:22:29Z", + "updated_at": "2026-05-20T22:26:59Z", + "pushed_at": "2026-05-20T22:26:53Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -12503,8 +12503,8 @@ "description": "🔍 Exploit CVE-2025-55182 in Next.js with this versatile tool for security research, featuring advanced payloads and WAF bypass techniques.", "fork": false, "created_at": "2025-12-25T19:28:28Z", - "updated_at": "2026-05-20T18:24:23Z", - "pushed_at": "2026-05-20T18:24:12Z", + "updated_at": "2026-05-20T22:28:20Z", + "pushed_at": "2026-05-20T22:28:15Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -12705,8 +12705,8 @@ "description": "⚡ Discover and exploit CVE-2025-55182 with this PoC, offering reliable remote code execution tests for React Server Components in Next.js.", "fork": false, "created_at": "2025-12-26T22:26:55Z", - "updated_at": "2026-05-20T18:24:11Z", - "pushed_at": "2026-05-20T18:24:07Z", + "updated_at": "2026-05-20T22:28:14Z", + "pushed_at": "2026-05-20T22:28:10Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -12975,8 +12975,8 @@ "description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.", "fork": false, "created_at": "2026-01-02T01:28:57Z", - "updated_at": "2026-05-20T18:29:17Z", - "pushed_at": "2026-05-20T18:29:13Z", + "updated_at": "2026-05-20T22:32:33Z", + "pushed_at": "2026-05-20T22:32:30Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -13496,8 +13496,8 @@ "description": "🔍 Exploit CVE-2025-55182 vulnerabilities in Next.js and React with this efficient framework for rapid testing and assessment.", "fork": false, "created_at": "2026-01-08T16:28:04Z", - "updated_at": "2026-05-20T18:35:25Z", - "pushed_at": "2026-05-20T18:35:20Z", + "updated_at": "2026-05-20T22:37:36Z", + "pushed_at": "2026-05-20T22:37:32Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-55184.json b/2025/CVE-2025-55184.json index ae90afc502..d69e57d210 100644 --- a/2025/CVE-2025-55184.json +++ b/2025/CVE-2025-55184.json @@ -289,8 +289,8 @@ "description": "🛠️ Test and validate the CVE-2025-55184 vulnerability in React Server Components to enhance your application's security against denial-of-service attacks.", "fork": false, "created_at": "2026-01-02T05:04:03Z", - "updated_at": "2026-05-20T18:29:43Z", - "pushed_at": "2026-05-20T18:29:38Z", + "updated_at": "2026-05-20T22:33:02Z", + "pushed_at": "2026-05-20T22:32:58Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-59287.json b/2025/CVE-2025-59287.json index 28e9616ef2..87d886bc24 100644 --- a/2025/CVE-2025-59287.json +++ b/2025/CVE-2025-59287.json @@ -200,8 +200,8 @@ "description": "🔍 Analyze WSUS deserialization behavior to enhance security, generate reports, and identify configuration weaknesses in your infrastructure.", "fork": false, "created_at": "2026-01-29T02:16:04Z", - "updated_at": "2026-05-20T14:39:13Z", - "pushed_at": "2026-05-20T14:26:39Z", + "updated_at": "2026-05-20T22:51:40Z", + "pushed_at": "2026-05-20T22:51:36Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-61882.json b/2025/CVE-2025-61882.json index d10fd0d7ec..ae5cd3a534 100644 --- a/2025/CVE-2025-61882.json +++ b/2025/CVE-2025-61882.json @@ -14,8 +14,8 @@ "description": "🔍 Detect vulnerabilities CVE-2025-61882 and CVE-2025-61884 in Oracle E-Business Suite to help secure your systems from potential remote code execution threats.", "fork": false, "created_at": "2025-03-04T15:38:32Z", - "updated_at": "2026-05-20T17:44:57Z", - "pushed_at": "2026-05-20T17:44:52Z", + "updated_at": "2026-05-21T00:37:44Z", + "pushed_at": "2026-05-21T00:37:40Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-6554.json b/2025/CVE-2025-6554.json index b579255ed1..018110ec60 100644 --- a/2025/CVE-2025-6554.json +++ b/2025/CVE-2025-6554.json @@ -179,8 +179,8 @@ "description": "🔍 Demonstrate and validate the `addressof` and `fakeobj` primitives in the V8 sandbox for advanced security research on CVE-2025-6554.", "fork": false, "created_at": "2025-08-10T21:07:43Z", - "updated_at": "2026-05-20T18:17:34Z", - "pushed_at": "2026-05-20T18:17:30Z", + "updated_at": "2026-05-20T22:23:19Z", + "pushed_at": "2026-05-20T22:22:59Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-66398.json b/2025/CVE-2025-66398.json index 1a8af2d3f5..245d0e2e29 100644 --- a/2025/CVE-2025-66398.json +++ b/2025/CVE-2025-66398.json @@ -64,8 +64,8 @@ "description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.", "fork": false, "created_at": "2026-03-23T09:09:21Z", - "updated_at": "2026-05-20T15:18:28Z", - "pushed_at": "2026-05-20T15:11:28Z", + "updated_at": "2026-05-20T23:25:09Z", + "pushed_at": "2026-05-20T23:25:05Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-66478.json b/2025/CVE-2025-66478.json index 20c4bf7902..21af369f16 100644 --- a/2025/CVE-2025-66478.json +++ b/2025/CVE-2025-66478.json @@ -14,8 +14,8 @@ "description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.", "fork": false, "created_at": "2025-10-01T07:40:09Z", - "updated_at": "2026-05-20T18:25:08Z", - "pushed_at": "2026-05-20T18:25:03Z", + "updated_at": "2026-05-20T22:29:02Z", + "pushed_at": "2026-05-20T22:28:58Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-68921.json b/2025/CVE-2025-68921.json index 351c48c2c0..58a10a74b3 100644 --- a/2025/CVE-2025-68921.json +++ b/2025/CVE-2025-68921.json @@ -47,8 +47,8 @@ "description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.", "fork": false, "created_at": "2026-01-24T21:00:41Z", - "updated_at": "2026-05-20T18:48:04Z", - "pushed_at": "2026-05-20T18:48:00Z", + "updated_at": "2026-05-20T22:48:47Z", + "pushed_at": "2026-05-20T22:48:43Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-69985.json b/2025/CVE-2025-69985.json index e684cc60fd..bb37fd4955 100644 --- a/2025/CVE-2025-69985.json +++ b/2025/CVE-2025-69985.json @@ -14,8 +14,8 @@ "description": "Exploit CVE-2025-69985 to bypass authentication and execute remote commands on FUXA versions ≤ 1.2.8 via the \/api\/runscript endpoint.", "fork": false, "created_at": "2025-04-10T09:18:30Z", - "updated_at": "2026-05-20T15:15:30Z", - "pushed_at": "2026-05-20T14:57:12Z", + "updated_at": "2026-05-20T23:13:14Z", + "pushed_at": "2026-05-20T23:13:10Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-70795.json b/2025/CVE-2025-70795.json index 3ab7c8043b..a8242ee7b4 100644 --- a/2025/CVE-2025-70795.json +++ b/2025/CVE-2025-70795.json @@ -14,8 +14,8 @@ "description": "🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.", "fork": false, "created_at": "2024-04-20T04:18:24Z", - "updated_at": "2026-05-20T14:58:45Z", - "pushed_at": "2026-05-20T14:51:11Z", + "updated_at": "2026-05-20T23:08:16Z", + "pushed_at": "2026-05-20T23:08:12Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2025/CVE-2025-8088.json b/2025/CVE-2025-8088.json index f29a87d0e4..b2f7330a3f 100644 --- a/2025/CVE-2025-8088.json +++ b/2025/CVE-2025-8088.json @@ -838,8 +838,8 @@ "description": "🛠 Exploit CVE-2025-8088 with this Python tool to generate malicious WinRAR archives that ensure payload persistence in Windows startup folders.", "fork": false, "created_at": "2025-12-20T13:52:21Z", - "updated_at": "2026-05-20T18:18:56Z", - "pushed_at": "2026-05-20T18:18:50Z", + "updated_at": "2026-05-20T22:24:09Z", + "pushed_at": "2026-05-20T22:24:05Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2025/CVE-2025-8110.json b/2025/CVE-2025-8110.json index cdae1db7d7..d4ff7068bd 100644 --- a/2025/CVE-2025-8110.json +++ b/2025/CVE-2025-8110.json @@ -146,8 +146,8 @@ "description": "🔍 Detect improper symbolic link handling in Gogs' PutContents API, exposing local code execution risks for versions 0.13.3 and earlier.", "fork": false, "created_at": "2025-12-31T13:25:07Z", - "updated_at": "2026-05-20T18:28:45Z", - "pushed_at": "2026-05-20T18:28:41Z", + "updated_at": "2026-05-20T22:32:08Z", + "pushed_at": "2026-05-20T22:32:05Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -533,8 +533,8 @@ "description": "CVE-2025-8110 Proof of Concept", "fork": false, "created_at": "2026-05-20T12:54:20Z", - "updated_at": "2026-05-20T13:36:58Z", - "pushed_at": "2026-05-20T13:35:41Z", + "updated_at": "2026-05-20T21:55:16Z", + "pushed_at": "2026-05-20T21:55:12Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-9074.json b/2025/CVE-2025-9074.json index efa60b9528..fb24912759 100644 --- a/2025/CVE-2025-9074.json +++ b/2025/CVE-2025-9074.json @@ -14,8 +14,8 @@ "description": "🚀 Exploit CVE-2025-9074 with this Docker escape framework, simplifying API vulnerabilities and enhancing security testing for developers and researchers.", "fork": false, "created_at": "2024-06-19T23:21:41Z", - "updated_at": "2026-05-20T18:30:24Z", - "pushed_at": "2026-05-20T18:30:17Z", + "updated_at": "2026-05-20T22:33:27Z", + "pushed_at": "2026-05-20T22:33:23Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-0073.json b/2026/CVE-2026-0073.json index 3dcccc1259..6ab9d1cf8e 100644 --- a/2026/CVE-2026-0073.json +++ b/2026/CVE-2026-0073.json @@ -326,10 +326,10 @@ "description": "An automated exploit for CVE-2026-0073 (Android ADB TLS Auth Bypass). Features a built-in mDNS\/Zeroconf scanner to instantly discover randomized Wireless Debugging ports on Android 13+ and establishes a fully interactive raw PTY shell.", "fork": false, "created_at": "2026-05-20T08:02:35Z", - "updated_at": "2026-05-20T18:25:42Z", + "updated_at": "2026-05-20T20:01:20Z", "pushed_at": "2026-05-20T10:53:30Z", - "stargazers_count": 6, - "watchers_count": 6, + "stargazers_count": 7, + "watchers_count": 7, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -340,7 +340,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 6, + "watchers": 7, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-0828.json b/2026/CVE-2026-0828.json index dc1b76fdae..ad698016f1 100644 --- a/2026/CVE-2026-0828.json +++ b/2026/CVE-2026-0828.json @@ -14,8 +14,8 @@ "description": "🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.", "fork": false, "created_at": "2024-04-20T04:18:24Z", - "updated_at": "2026-05-20T14:58:45Z", - "pushed_at": "2026-05-20T14:51:11Z", + "updated_at": "2026-05-20T23:08:16Z", + "pushed_at": "2026-05-20T23:08:12Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2026/CVE-2026-2005.json b/2026/CVE-2026-2005.json index 116eb57ea7..6cbce9b586 100644 --- a/2026/CVE-2026-2005.json +++ b/2026/CVE-2026-2005.json @@ -47,12 +47,12 @@ "description": "PoC for CVE-2026-2005", "fork": false, "created_at": "2026-05-13T15:29:43Z", - "updated_at": "2026-05-20T10:37:24Z", + "updated_at": "2026-05-21T00:04:42Z", "pushed_at": "2026-05-13T15:31:10Z", - "stargazers_count": 20, - "watchers_count": 20, + "stargazers_count": 21, + "watchers_count": 21, "has_discussions": false, - "forks_count": 3, + "forks_count": 4, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,8 +60,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 3, - "watchers": 20, + "forks": 4, + "watchers": 21, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-20841.json b/2026/CVE-2026-20841.json index 833e4462f0..f2cb55da78 100644 --- a/2026/CVE-2026-20841.json +++ b/2026/CVE-2026-20841.json @@ -14,8 +14,8 @@ "description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.", "fork": false, "created_at": "2024-09-22T12:19:06Z", - "updated_at": "2026-05-20T15:01:11Z", - "pushed_at": "2026-05-20T14:49:58Z", + "updated_at": "2026-05-20T23:07:39Z", + "pushed_at": "2026-05-20T23:07:36Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -66,8 +66,8 @@ "description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.", "fork": false, "created_at": "2026-02-26T05:21:28Z", - "updated_at": "2026-05-20T15:01:05Z", - "pushed_at": "2026-05-20T14:48:44Z", + "updated_at": "2026-05-20T23:06:39Z", + "pushed_at": "2026-05-20T23:06:35Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-2406.json b/2026/CVE-2026-2406.json index 6613e6e75e..98e601fcd0 100644 --- a/2026/CVE-2026-2406.json +++ b/2026/CVE-2026-2406.json @@ -14,8 +14,8 @@ "description": "🔍 Analyze and detect CVE-2026-2406 vulnerabilities in Telnet to enhance security and prevent unauthorized access with this professional research engine.", "fork": false, "created_at": "2025-04-16T07:20:12Z", - "updated_at": "2026-05-20T14:55:46Z", - "pushed_at": "2026-05-20T14:35:42Z", + "updated_at": "2026-05-20T22:58:58Z", + "pushed_at": "2026-05-20T22:58:54Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-24061.json b/2026/CVE-2026-24061.json index 0859b582e4..251c7ec0fe 100644 --- a/2026/CVE-2026-24061.json +++ b/2026/CVE-2026-24061.json @@ -47,8 +47,8 @@ "description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.", "fork": false, "created_at": "2026-02-03T19:46:10Z", - "updated_at": "2026-05-20T14:44:47Z", - "pushed_at": "2026-05-20T14:31:25Z", + "updated_at": "2026-05-20T22:55:44Z", + "pushed_at": "2026-05-20T22:55:40Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-24291.json b/2026/CVE-2026-24291.json index 3e8ddd3106..e22bdbc3c9 100644 --- a/2026/CVE-2026-24291.json +++ b/2026/CVE-2026-24291.json @@ -14,8 +14,8 @@ "description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions", "fork": false, "created_at": "2026-03-26T04:38:27Z", - "updated_at": "2026-05-20T15:19:58Z", - "pushed_at": "2026-05-20T15:13:48Z", + "updated_at": "2026-05-20T23:26:48Z", + "pushed_at": "2026-05-20T23:26:45Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2026/CVE-2026-2441.json b/2026/CVE-2026-2441.json index 9f3e896bbe..54da847e5c 100644 --- a/2026/CVE-2026-2441.json +++ b/2026/CVE-2026-2441.json @@ -14,8 +14,8 @@ "description": "Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.", "fork": false, "created_at": "2026-03-03T14:19:18Z", - "updated_at": "2026-05-20T15:03:33Z", - "pushed_at": "2026-05-20T14:53:53Z", + "updated_at": "2026-05-20T23:09:54Z", + "pushed_at": "2026-05-20T23:09:51Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2026/CVE-2026-2472.json b/2026/CVE-2026-2472.json index 0459265eb0..ec6e2e1753 100644 --- a/2026/CVE-2026-2472.json +++ b/2026/CVE-2026-2472.json @@ -14,8 +14,8 @@ "description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.", "fork": false, "created_at": "2026-03-10T14:40:04Z", - "updated_at": "2026-05-20T15:06:01Z", - "pushed_at": "2026-05-20T14:59:54Z", + "updated_at": "2026-05-20T23:15:34Z", + "pushed_at": "2026-05-20T23:15:30Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2026/CVE-2026-25643.json b/2026/CVE-2026-25643.json index 20e52f04ad..7d44d7f956 100644 --- a/2026/CVE-2026-25643.json +++ b/2026/CVE-2026-25643.json @@ -14,8 +14,8 @@ "description": "Exploit Frigate NVR ≤0.16.3 to execute commands remotely by abusing a configuration flaw without needing shell access or output capture.", "fork": false, "created_at": "2026-03-07T20:23:08Z", - "updated_at": "2026-05-20T15:08:36Z", - "pushed_at": "2026-05-20T14:58:39Z", + "updated_at": "2026-05-20T23:14:36Z", + "pushed_at": "2026-05-20T23:14:32Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2026/CVE-2026-2587.json b/2026/CVE-2026-2587.json new file mode 100644 index 0000000000..748a4db02c --- /dev/null +++ b/2026/CVE-2026-2587.json @@ -0,0 +1,50 @@ +[ + { + "id": 1245051627, + "name": "CVE-2026-2587-Exploit-POC", + "full_name": "Bhanunamikaze\/CVE-2026-2587-Exploit-POC", + "owner": { + "login": "Bhanunamikaze", + "id": 17119658, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/17119658?v=4", + "html_url": "https:\/\/github.com\/Bhanunamikaze", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Bhanunamikaze\/CVE-2026-2587-Exploit-POC", + "description": "PoC validator for CVE-2026-2587 — Critical (CVSS 9.6) EL Injection RCE in Eclipse GlassFish < 7.1.0 admin console gadget handler. Multi-target scanner with CSV\/JSON output.", + "fork": false, + "created_at": "2026-05-20T21:31:14Z", + "updated_at": "2026-05-20T22:31:48Z", + "pushed_at": "2026-05-20T22:31:43Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve", + "cve-2026-2587", + "cwe-917", + "eclipse-glassfish", + "el-injection", + "exploit", + "expression-language-injection", + "glassfish", + "java", + "pentest", + "poc", + "rce", + "security-research", + "vulnerability" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-2991.json b/2026/CVE-2026-2991.json index 7d11a1afa6..27422ca91a 100644 --- a/2026/CVE-2026-2991.json +++ b/2026/CVE-2026-2991.json @@ -14,8 +14,8 @@ "description": "Explore a PoC for CVE-2026-2991, an auth bypass in KiviCare 4.1.2 and earlier via the patient social-login REST endpoint", "fork": false, "created_at": "2026-04-03T20:26:43Z", - "updated_at": "2026-05-20T15:25:28Z", - "pushed_at": "2026-05-20T15:18:12Z", + "updated_at": "2026-05-20T23:30:22Z", + "pushed_at": "2026-05-20T23:30:17Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-31048.json b/2026/CVE-2026-30950.json similarity index 51% rename from 2026/CVE-2026-31048.json rename to 2026/CVE-2026-30950.json index d7d62c60b3..a89c93a98e 100644 --- a/2026/CVE-2026-31048.json +++ b/2026/CVE-2026-30950.json @@ -1,21 +1,21 @@ [ { - "id": 1207154083, - "name": "security-advisories", - "full_name": "Sif-0x01\/security-advisories", + "id": 1244946141, + "name": "autogpt-CVE-2026-30950-poc", + "full_name": "ZeroPathAI\/autogpt-CVE-2026-30950-poc", "owner": { - "login": "Sif-0x01", - "id": 255500712, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/255500712?v=4", - "html_url": "https:\/\/github.com\/Sif-0x01", + "login": "ZeroPathAI", + "id": 170791525, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/170791525?v=4", + "html_url": "https:\/\/github.com\/ZeroPathAI", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/Sif-0x01\/security-advisories", - "description": "Security advisory for CVE-2026-31048", + "html_url": "https:\/\/github.com\/ZeroPathAI\/autogpt-CVE-2026-30950-poc", + "description": "POC for CVE-2026-30950 which allows session hijacking in AutoGpt", "fork": false, - "created_at": "2026-04-10T16:25:41Z", - "updated_at": "2026-04-10T16:25:50Z", - "pushed_at": "2026-04-10T16:25:42Z", + "created_at": "2026-05-20T18:55:58Z", + "updated_at": "2026-05-20T22:38:57Z", + "pushed_at": "2026-05-20T22:38:54Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-31280.json b/2026/CVE-2026-31280.json deleted file mode 100644 index 28ae575f7f..0000000000 --- a/2026/CVE-2026-31280.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1207264865, - "name": "CVE-2026-31280-Insecure-Bluetooth-RFCOMM-Leading-to-Device-Crash-in-Parani-M10-Intercom", - "full_name": "CipherX1802\/CVE-2026-31280-Insecure-Bluetooth-RFCOMM-Leading-to-Device-Crash-in-Parani-M10-Intercom", - "owner": { - "login": "CipherX1802", - "id": 121545792, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/121545792?v=4", - "html_url": "https:\/\/github.com\/CipherX1802", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/CipherX1802\/CVE-2026-31280-Insecure-Bluetooth-RFCOMM-Leading-to-Device-Crash-in-Parani-M10-Intercom", - "description": "A Bluetooth Classic RFCOMM service is exposed without enforcing secure authentication or proper access control. Once within range, any device can: Establish a connection without proper pairing restrictions Access RFCOMM channels directly Send arbitrary or malformed payloads", - "fork": false, - "created_at": "2026-04-10T18:51:42Z", - "updated_at": "2026-04-10T18:54:09Z", - "pushed_at": "2026-04-10T18:54:04Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2026/CVE-2026-31431.json b/2026/CVE-2026-31431.json index d813d6fdb4..5e25ef6763 100644 --- a/2026/CVE-2026-31431.json +++ b/2026/CVE-2026-31431.json @@ -47,12 +47,12 @@ "description": "Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code", "fork": false, "created_at": "2026-04-29T12:15:28Z", - "updated_at": "2026-05-20T17:15:29Z", + "updated_at": "2026-05-21T00:47:23Z", "pushed_at": "2026-04-29T21:21:46Z", - "stargazers_count": 3869, - "watchers_count": 3869, + "stargazers_count": 3871, + "watchers_count": 3871, "has_discussions": false, - "forks_count": 857, + "forks_count": 858, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -71,8 +71,8 @@ "xint-code" ], "visibility": "public", - "forks": 857, - "watchers": 3869, + "forks": 858, + "watchers": 3871, "score": 0, "subscribers_count": 32 }, @@ -190,7 +190,7 @@ "description": "Cross-platform C port of the Copy Fail Linux LPE (CVE-2026-31431). Disclosed 2026-04-29 by Theori \/ Xint.", "fork": false, "created_at": "2026-04-29T23:29:14Z", - "updated_at": "2026-05-20T12:23:34Z", + "updated_at": "2026-05-20T21:22:53Z", "pushed_at": "2026-05-20T04:13:26Z", "stargazers_count": 404, "watchers_count": 404, @@ -269,10 +269,10 @@ "description": "Minimal no-libc Linux x86_64 ELF PoC build for Copy Fail (CVE-2026-31431)", "fork": false, "created_at": "2026-04-30T00:30:40Z", - "updated_at": "2026-05-17T21:25:27Z", + "updated_at": "2026-05-20T22:42:26Z", "pushed_at": "2026-05-03T01:42:43Z", - "stargazers_count": 60, - "watchers_count": 60, + "stargazers_count": 61, + "watchers_count": 61, "has_discussions": false, "forks_count": 10, "allow_forking": true, @@ -299,7 +299,7 @@ ], "visibility": "public", "forks": 10, - "watchers": 60, + "watchers": 61, "score": 0, "subscribers_count": 1 }, @@ -761,10 +761,10 @@ "description": "CVE-2026-31431: Copy Fail | A minimal exploit for Linux authencesn + AF_ALG + splice() page cache write.", "fork": false, "created_at": "2026-04-30T04:25:00Z", - "updated_at": "2026-05-14T00:06:26Z", + "updated_at": "2026-05-20T22:05:26Z", "pushed_at": "2026-04-30T04:30:27Z", - "stargazers_count": 69, - "watchers_count": 69, + "stargazers_count": 70, + "watchers_count": 70, "has_discussions": false, "forks_count": 66, "allow_forking": true, @@ -775,7 +775,7 @@ "topics": [], "visibility": "public", "forks": 66, - "watchers": 69, + "watchers": 70, "score": 0, "subscribers_count": 0 }, @@ -827,10 +827,10 @@ "description": "Defensive detection package for CVE-2026-31431 (Linux kernel AF_ALG LPE). Sigma, Falco, auditd, KQL, and EQL rules mapped to MITRE ATT&CK T1068\/T1611. Includes detection logic designed for auditd, eBPF, and EDR telemetry pipelines.", "fork": false, "created_at": "2026-04-30T04:42:02Z", - "updated_at": "2026-05-18T16:27:22Z", + "updated_at": "2026-05-20T19:49:31Z", "pushed_at": "2026-04-30T05:28:22Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 0, + "watchers_count": 0, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -841,7 +841,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 1, + "watchers": 0, "score": 0, "subscribers_count": 0 }, @@ -1899,12 +1899,12 @@ "description": "CVE-2026-31431 Copy Fail — Universal LPE exploit. Dynamic ELF offset + full-binary overwrite, Python 2\/3 compatible with ctypes splice fallback", "fork": false, "created_at": "2026-04-30T10:49:03Z", - "updated_at": "2026-05-19T03:51:32Z", + "updated_at": "2026-05-20T19:24:57Z", "pushed_at": "2026-05-06T16:22:13Z", - "stargazers_count": 53, - "watchers_count": 53, + "stargazers_count": 54, + "watchers_count": 54, "has_discussions": false, - "forks_count": 11, + "forks_count": 12, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1920,8 +1920,8 @@ "privilege-escalation" ], "visibility": "public", - "forks": 11, - "watchers": 53, + "forks": 12, + "watchers": 54, "score": 0, "subscribers_count": 0 }, @@ -3022,10 +3022,10 @@ "description": "Exploit for cve-2026-31431", "fork": false, "created_at": "2026-04-30T16:18:31Z", - "updated_at": "2026-05-18T09:19:38Z", + "updated_at": "2026-05-20T22:56:46Z", "pushed_at": "2026-05-01T15:10:22Z", - "stargazers_count": 10, - "watchers_count": 10, + "stargazers_count": 11, + "watchers_count": 11, "has_discussions": false, "forks_count": 5, "allow_forking": true, @@ -3036,7 +3036,7 @@ "topics": [], "visibility": "public", "forks": 5, - "watchers": 10, + "watchers": 11, "score": 0, "subscribers_count": 0 }, @@ -6015,7 +6015,7 @@ "description": "Tracking CVE-2026-31431", "fork": false, "created_at": "2026-05-02T10:22:01Z", - "updated_at": "2026-05-18T17:39:10Z", + "updated_at": "2026-05-20T20:50:36Z", "pushed_at": "2026-05-18T17:39:05Z", "stargazers_count": 0, "watchers_count": 0, @@ -6026,7 +6026,10 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "linux", + "security" + ], "visibility": "public", "forks": 0, "watchers": 0, @@ -7504,10 +7507,10 @@ "description": "Copy Fail (CVE-2026-31431) LPE exploit. A clean, multi-arch Python reimplementation targeting the Linux kernel AF_ALG page cache vulnerability.", "fork": false, "created_at": "2026-05-04T09:48:59Z", - "updated_at": "2026-05-18T05:59:01Z", + "updated_at": "2026-05-20T20:28:34Z", "pushed_at": "2026-05-05T07:01:53Z", - "stargazers_count": 8, - "watchers_count": 8, + "stargazers_count": 9, + "watchers_count": 9, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -7529,7 +7532,7 @@ ], "visibility": "public", "forks": 2, - "watchers": 8, + "watchers": 9, "score": 0, "subscribers_count": 0 }, @@ -7878,8 +7881,8 @@ "description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.", "fork": false, "created_at": "2026-05-05T04:58:21Z", - "updated_at": "2026-05-20T15:42:10Z", - "pushed_at": "2026-05-20T15:39:17Z", + "updated_at": "2026-05-20T23:48:13Z", + "pushed_at": "2026-05-20T23:48:08Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -8713,8 +8716,8 @@ "description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.", "fork": false, "created_at": "2026-05-06T09:49:14Z", - "updated_at": "2026-05-20T15:42:43Z", - "pushed_at": "2026-05-20T15:40:27Z", + "updated_at": "2026-05-20T23:49:00Z", + "pushed_at": "2026-05-20T23:48:56Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, @@ -10815,12 +10818,12 @@ "description": "CVE-2026-31431-killed page-cache exploit — code exec into containers sharing the same image layer", "fork": false, "created_at": "2026-05-20T04:37:35Z", - "updated_at": "2026-05-20T15:59:41Z", + "updated_at": "2026-05-20T22:57:51Z", "pushed_at": "2026-05-20T04:52:41Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 6, + "watchers_count": 6, "has_discussions": false, - "forks_count": 0, + "forks_count": 2, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -10828,8 +10831,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, - "watchers": 3, + "forks": 2, + "watchers": 6, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-31635.json b/2026/CVE-2026-31635.json index 167a40f16b..eed54e879b 100644 --- a/2026/CVE-2026-31635.json +++ b/2026/CVE-2026-31635.json @@ -14,10 +14,10 @@ "description": "CVE-2026-31635", "fork": false, "created_at": "2026-05-19T21:39:31Z", - "updated_at": "2026-05-20T14:48:46Z", + "updated_at": "2026-05-20T19:02:02Z", "pushed_at": "2026-05-20T10:22:15Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-31802.json b/2026/CVE-2026-31802.json index 3c4d390293..f3723af927 100644 --- a/2026/CVE-2026-31802.json +++ b/2026/CVE-2026-31802.json @@ -14,8 +14,8 @@ "description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.", "fork": false, "created_at": "2026-03-28T20:49:46Z", - "updated_at": "2026-05-20T15:24:39Z", - "pushed_at": "2026-05-20T15:15:01Z", + "updated_at": "2026-05-20T23:27:55Z", + "pushed_at": "2026-05-20T23:27:51Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-34621.json b/2026/CVE-2026-34621.json index e0d90bcb15..98b9115d14 100644 --- a/2026/CVE-2026-34621.json +++ b/2026/CVE-2026-34621.json @@ -146,10 +146,10 @@ "description": null, "fork": false, "created_at": "2026-05-12T20:58:43Z", - "updated_at": "2026-05-20T07:50:57Z", + "updated_at": "2026-05-21T00:25:36Z", "pushed_at": "2026-05-12T21:15:55Z", - "stargazers_count": 15, - "watchers_count": 15, + "stargazers_count": 16, + "watchers_count": 16, "has_discussions": false, "forks_count": 4, "allow_forking": true, @@ -160,7 +160,7 @@ "topics": [], "visibility": "public", "forks": 4, - "watchers": 15, + "watchers": 16, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-35455.json b/2026/CVE-2026-35455.json index 19e8bb194f..5c64a8f049 100644 --- a/2026/CVE-2026-35455.json +++ b/2026/CVE-2026-35455.json @@ -14,8 +14,8 @@ "description": "Cybersecurity demo exploiting CVE-2026-35455 with automatic API key generation and exfiltration", "fork": false, "created_at": "2026-05-12T17:08:09Z", - "updated_at": "2026-05-20T17:42:22Z", - "pushed_at": "2026-05-20T17:42:17Z", + "updated_at": "2026-05-20T18:54:43Z", + "pushed_at": "2026-05-20T18:54:39Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-7229.json b/2026/CVE-2026-39107.json similarity index 58% rename from 2026/CVE-2026-7229.json rename to 2026/CVE-2026-39107.json index 96b98c720c..e685f8fb1f 100644 --- a/2026/CVE-2026-7229.json +++ b/2026/CVE-2026-39107.json @@ -1,21 +1,21 @@ [ { - "id": 1207213226, - "name": "CVE-2026-7229-SQLI", - "full_name": "Xmyronn\/CVE-2026-7229-SQLI", + "id": 1245017922, + "name": "CVE-2026-39107", + "full_name": "MGTx2\/CVE-2026-39107", "owner": { - "login": "Xmyronn", - "id": 190940534, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/190940534?v=4", - "html_url": "https:\/\/github.com\/Xmyronn", + "login": "MGTx2", + "id": 237940485, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/237940485?v=4", + "html_url": "https:\/\/github.com\/MGTx2", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/Xmyronn\/CVE-2026-7229-SQLI", + "html_url": "https:\/\/github.com\/MGTx2\/CVE-2026-39107", "description": null, "fork": false, - "created_at": "2026-04-10T17:42:03Z", - "updated_at": "2026-04-27T22:33:40Z", - "pushed_at": "2026-04-10T18:35:50Z", + "created_at": "2026-05-20T20:36:36Z", + "updated_at": "2026-05-21T00:21:59Z", + "pushed_at": "2026-05-21T00:21:56Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-39983.json b/2026/CVE-2026-39983.json deleted file mode 100644 index 78e931cc3e..0000000000 --- a/2026/CVE-2026-39983.json +++ /dev/null @@ -1,40 +0,0 @@ -[ - { - "id": 1207095013, - "name": "CVE-2026-39983", - "full_name": "zebbernCVE\/CVE-2026-39983", - "owner": { - "login": "zebbernCVE", - "id": 264845891, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/264845891?v=4", - "html_url": "https:\/\/github.com\/zebbernCVE", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/zebbernCVE\/CVE-2026-39983", - "description": "Advisory for basic-ftp ⌯⌲ 20 mill weekly downloads", - "fork": false, - "created_at": "2026-04-10T15:11:48Z", - "updated_at": "2026-04-15T11:27:54Z", - "pushed_at": "2026-04-10T15:13:33Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2026-39983", - "cwe-93", - "high", - "zebbern" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2026/CVE-2026-40369.json b/2026/CVE-2026-40369.json index a9fcfd2183..f9d54ad846 100644 --- a/2026/CVE-2026-40369.json +++ b/2026/CVE-2026-40369.json @@ -14,10 +14,10 @@ "description": "Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browsers render process sandbox", "fork": false, "created_at": "2026-05-13T20:56:15Z", - "updated_at": "2026-05-20T15:11:03Z", + "updated_at": "2026-05-20T21:23:29Z", "pushed_at": "2026-05-18T21:29:59Z", - "stargazers_count": 128, - "watchers_count": 128, + "stargazers_count": 129, + "watchers_count": 129, "has_discussions": false, "forks_count": 26, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 26, - "watchers": 128, + "watchers": 129, "score": 0, "subscribers_count": 2 } diff --git a/2026/CVE-2026-41940.json b/2026/CVE-2026-41940.json index 974a592cdc..cc48236428 100644 --- a/2026/CVE-2026-41940.json +++ b/2026/CVE-2026-41940.json @@ -738,10 +738,10 @@ "description": "CVE-2026-41940 — cPanel & WHM Authentication Bypass via Session-File CRLF Injection", "fork": false, "created_at": "2026-05-01T12:09:26Z", - "updated_at": "2026-05-20T17:41:48Z", + "updated_at": "2026-05-20T21:55:51Z", "pushed_at": "2026-05-01T12:10:32Z", - "stargazers_count": 423, - "watchers_count": 423, + "stargazers_count": 424, + "watchers_count": 424, "has_discussions": false, "forks_count": 127, "allow_forking": true, @@ -752,7 +752,7 @@ "topics": [], "visibility": "public", "forks": 127, - "watchers": 423, + "watchers": 424, "score": 0, "subscribers_count": 6 }, @@ -1845,8 +1845,8 @@ "description": "Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.", "fork": false, "created_at": "2026-05-06T18:08:48Z", - "updated_at": "2026-05-20T15:43:48Z", - "pushed_at": "2026-05-20T15:40:43Z", + "updated_at": "2026-05-20T23:49:19Z", + "pushed_at": "2026-05-20T23:49:16Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-42945.json b/2026/CVE-2026-42945.json index 0e1b8d6d1b..89a6a4fcec 100644 --- a/2026/CVE-2026-42945.json +++ b/2026/CVE-2026-42945.json @@ -14,12 +14,12 @@ "description": "exploit for CVE-2026-42945", "fork": false, "created_at": "2026-05-12T23:05:32Z", - "updated_at": "2026-05-20T18:44:29Z", + "updated_at": "2026-05-20T23:56:57Z", "pushed_at": "2026-05-13T18:40:57Z", - "stargazers_count": 749, - "watchers_count": 749, + "stargazers_count": 753, + "watchers_count": 753, "has_discussions": false, - "forks_count": 132, + "forks_count": 133, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,8 +27,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 132, - "watchers": 749, + "forks": 133, + "watchers": 753, "score": 0, "subscribers_count": 5 }, @@ -184,7 +184,7 @@ "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, - "forks_count": 2, + "forks_count": 3, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -192,7 +192,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 2, + "forks": 3, "watchers": 1, "score": 0, "subscribers_count": 0 @@ -311,10 +311,10 @@ "description": "Script Python para detecção de instâncias Nginx vulneráveis ao CVE-2026-42945 em IPs, CIDRs e ASNs.", "fork": false, "created_at": "2026-05-15T00:16:39Z", - "updated_at": "2026-05-20T17:56:17Z", + "updated_at": "2026-05-21T00:41:02Z", "pushed_at": "2026-05-20T12:25:09Z", - "stargazers_count": 12, - "watchers_count": 12, + "stargazers_count": 14, + "watchers_count": 14, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -325,7 +325,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 12, + "watchers": 14, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-43284.json b/2026/CVE-2026-43284.json index dea0b35984..d7df610107 100644 --- a/2026/CVE-2026-43284.json +++ b/2026/CVE-2026-43284.json @@ -169,7 +169,7 @@ "description": "Tracking CVE-2026-43284", "fork": false, "created_at": "2026-05-08T18:24:12Z", - "updated_at": "2026-05-20T07:49:45Z", + "updated_at": "2026-05-20T20:50:57Z", "pushed_at": "2026-05-20T07:49:41Z", "stargazers_count": 0, "watchers_count": 0, @@ -180,7 +180,10 @@ "web_commit_signoff_required": false, "has_pull_requests": true, "pull_request_creation_policy": "all", - "topics": [], + "topics": [ + "linux", + "security" + ], "visibility": "public", "forks": 0, "watchers": 0, @@ -477,10 +480,10 @@ "description": "CVE-2026-43284\/CVE-2026-43500 'DirtyFrag' Benign patch & mitigation detection script", "fork": false, "created_at": "2026-05-11T19:41:31Z", - "updated_at": "2026-05-16T17:43:54Z", + "updated_at": "2026-05-20T22:54:46Z", "pushed_at": "2026-05-12T07:14:42Z", - "stargazers_count": 7, - "watchers_count": 7, + "stargazers_count": 8, + "watchers_count": 8, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -491,7 +494,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 7, + "watchers": 8, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-45321.json b/2026/CVE-2026-45321.json index 2e8d4607f8..2523da57a9 100644 --- a/2026/CVE-2026-45321.json +++ b/2026/CVE-2026-45321.json @@ -324,5 +324,38 @@ "watchers": 1, "score": 0, "subscribers_count": 0 + }, + { + "id": 1245106276, + "name": "mini-shai-hulud-detector", + "full_name": "prashanthnataraj\/mini-shai-hulud-detector", + "owner": { + "login": "prashanthnataraj", + "id": 233522739, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/233522739?v=4", + "html_url": "https:\/\/github.com\/prashanthnataraj", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/prashanthnataraj\/mini-shai-hulud-detector", + "description": "One-command scanner for the Mini Shai-Hulud npm supply-chain worm (CVE-2026-45321). Detect before rotating tokens.", + "fork": false, + "created_at": "2026-05-20T23:16:16Z", + "updated_at": "2026-05-21T00:12:26Z", + "pushed_at": "2026-05-21T00:12:22Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-46333.json b/2026/CVE-2026-46333.json index 8c7f529834..3e6e37080d 100644 --- a/2026/CVE-2026-46333.json +++ b/2026/CVE-2026-46333.json @@ -80,10 +80,10 @@ "description": "CVE-2026-46333", "fork": false, "created_at": "2026-05-17T10:14:44Z", - "updated_at": "2026-05-20T15:16:48Z", + "updated_at": "2026-05-21T00:34:44Z", "pushed_at": "2026-05-17T10:38:48Z", - "stargazers_count": 12, - "watchers_count": 12, + "stargazers_count": 13, + "watchers_count": 13, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -94,7 +94,7 @@ "topics": [], "visibility": "public", "forks": 3, - "watchers": 12, + "watchers": 13, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-4660.json b/2026/CVE-2026-4660.json deleted file mode 100644 index b91de7357d..0000000000 --- a/2026/CVE-2026-4660.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1207321921, - "name": "CVE-2026-4660-PoC", - "full_name": "gouldnicholas\/CVE-2026-4660-PoC", - "owner": { - "login": "gouldnicholas", - "id": 40551787, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/40551787?v=4", - "html_url": "https:\/\/github.com\/gouldnicholas", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/gouldnicholas\/CVE-2026-4660-PoC", - "description": "PoC for CVE-2026-4660: arbitrary file read via git checkout in hashicorp\/go-getter", - "fork": false, - "created_at": "2026-04-10T20:15:25Z", - "updated_at": "2026-04-10T20:16:44Z", - "pushed_at": "2026-04-10T20:16:37Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/README.md b/README.md index 07ad26aa03..efba745ec8 100644 --- a/README.md +++ b/README.md @@ -238,6 +238,13 @@ - [megafart1/CVE-2026-2472-Vertex-AI-SDK-Google-Cloud](https://github.com/megafart1/CVE-2026-2472-Vertex-AI-SDK-Google-Cloud) +### CVE-2026-2587 (2026-05-19) + +A critical Remote Code Execution (RCE) vulnerability was identified in the server-side template rendering mechanism used by the Glassfish gadget handler. The application processes .xml files and evaluates user-supplied values within a context where Expression Language (EL) “expressions” are processed without proper sanitization or escaping. By injecting expressions such as #{7*7}, the server returns 49, confirming server-side EL evaluation. This issue allows a remote attacker to fully compromise the underlying host, enabling capabilities as reading/modifying data, executing arbitrary commands, persistence, and lateral movement. + + +- [Bhanunamikaze/CVE-2026-2587-Exploit-POC](https://github.com/Bhanunamikaze/CVE-2026-2587-Exploit-POC) + ### CVE-2026-2600 (2026-04-04) The ElementsKit Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ekit_tab_title' parameter in the Simple Tab widget in all versions up to, and including, 3.7.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. @@ -422,13 +429,6 @@ - [cyberheartmi9/CVE-2026-4631-cockpit-RCE](https://github.com/cyberheartmi9/CVE-2026-4631-cockpit-RCE) -### CVE-2026-4660 (2026-04-09) - -HashiCorp’s go-getter library up to v1.8.5 may allow arbitrary file reads on the file system during certain git operations through a maliciously crafted URL. This vulnerability, CVE-2026-4660, is fixed in go-getter v1.8.6. This vulnerability does not affect the go-getter/v2 branch and package. - - -- [gouldnicholas/CVE-2026-4660-PoC](https://github.com/gouldnicholas/CVE-2026-4660-PoC) - ### CVE-2026-4802 (2026-05-11) A flaw was found in Cockpit. This vulnerability allows a remote attacker to achieve arbitrary command execution on the host by exploiting unsanitized user-controlled parameters within crafted links in the system logs user interface (UI). An attacker can inject shell metacharacters and command substitutions into these parameters, leading to the execution of arbitrary shell commands on the affected system. This could result in a complete system compromise. @@ -636,13 +636,6 @@ - [Xmyronn/CVE-2026-7222-XSS](https://github.com/Xmyronn/CVE-2026-7222-XSS) -### CVE-2026-7229 (2026-04-28) - -A vulnerability was found in code-projects Coaching Management System 1.0. This affects an unknown function of the file /cims/modules/admin/reply.php of the component POST Handler. Performing a manipulation of the argument complaintreply results in sql injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used. - - -- [Xmyronn/CVE-2026-7229-SQLI](https://github.com/Xmyronn/CVE-2026-7229-SQLI) - ### CVE-2026-7270 (2026-04-30) An operator precedence bug in the kernel results in a scenario where a buffer overflow causes attacker-controlled data to overwrite adjacent execve(2) argument buffers.\n\nThe bug may be exploitable by an unprivileged user to obtain superuser privileges. @@ -1438,6 +1431,13 @@ - [drkim-dev/CVE-2026-30862](https://github.com/drkim-dev/CVE-2026-30862) +### CVE-2026-30950 (2026-05-18) + +AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Versions 0.6.36 through 0.6.50 are vulnerable to Authenticated Session Hijacking via IDOR. If an authenticated attacker can determine the session_id of another user's session, they can take it over, reading any messages in it and locking the legitimate user out. The PATCH /sessions/{session_id}/assign-user endpoint authenticates the caller but never verifies session ownership: the service layer invokes the session lookup with user_id=None, which the data access layer interprets as a privileged/system call that bypasses the ownership filter, allowing any authenticated user to reassign an arbitrary session to themselves. This issue has been patched in version 0.6.51. + + +- [ZeroPathAI/autogpt-CVE-2026-30950-poc](https://github.com/ZeroPathAI/autogpt-CVE-2026-30950-poc) + ### CVE-2026-30951 (2026-03-10) Sequelize is a Node.js ORM tool. Prior to 6.37.8, there is SQL injection via unescaped cast type in JSON/JSONB where clause processing. The _traverseJSON() function splits JSON path keys on :: to extract a cast type, which is interpolated raw into CAST(... AS <type>) SQL. An attacker who controls JSON object keys can inject arbitrary SQL and exfiltrate data from any table. This vulnerability is fixed in 6.37.8. @@ -1448,13 +1448,6 @@ ### CVE-2026-31024 - [ErikDervishi03/CVE-2026-31024](https://github.com/ErikDervishi03/CVE-2026-31024) -### CVE-2026-31048 (2026-04-13) - -An issue in the <code>pickle</code> protocol of Pyro v3.x allows attackers to execute arbitrary code via supplying a crafted pickled string message. - - -- [Sif-0x01/security-advisories](https://github.com/Sif-0x01/security-advisories) - ### CVE-2026-31156 (2026-05-13) A path injection vulnerability exists in OpenPLC v3 (2c82b0e79c53f8c1f1458eee15fec173400d6e1a) as the binary program compiled from glue_generator.cpp does not perform any validation on the file path parameters passed via the command line. The user-controlled input parameters are directly passed to the underlying file operation functions (fopen/ifstream/ofstream) for file reading and writing. An attacker can exploit this vulnerability by constructing a malicious path to read arbitrary readable files. @@ -1462,13 +1455,6 @@ - [unicorn-hyh/CVE-2026-31156](https://github.com/unicorn-hyh/CVE-2026-31156) -### CVE-2026-31280 (2026-04-13) - -An issue in the Bluetooth RFCOMM service of Parani M10 Motorcycle Intercom v2.1.3 allows unauthorized attackers to cause a Denial of Service (DoS) via supplying crafted RFCOMM frames. - - -- [CipherX1802/CVE-2026-31280-Insecure-Bluetooth-RFCOMM-Leading-to-Device-Crash-in-Parani-M10-Intercom](https://github.com/CipherX1802/CVE-2026-31280-Insecure-Bluetooth-RFCOMM-Leading-to-Device-Crash-in-Parani-M10-Intercom) - ### CVE-2026-31281 (2026-04-13) Totara LMS v19.1.5 and before is vulnerable to HTML Injection. An attacker can inject malicious HTML code in a message and send it to all the users in the application, resulting in executing the code and may lead to session hijacking and executing commands on the victim's browser. NOTE: The supplier states that the product name is Totara Learning and that the functionality referenced is the in app messaging client. They note that the in app messaging client only has the ability to embed a specific allowed list of HTML tags commonly used for text enhancement, which includes italic, bold, underline, strong, etc. Last, they state that the in app messaging client cannot embed <script>, <style>, <iframe>, <object>, <embed>, <form>, <input>, <button>, <svg>, <math>, etc., and any attempt to embed tags or attributes outside of the allowed list (including onerror, onaction, etc.) is sanitized via DOMPurify. @@ -2520,6 +2506,9 @@ ### CVE-2026-38945 - [Wise-Security/CVE-2026-38945](https://github.com/Wise-Security/CVE-2026-38945) +### CVE-2026-39107 +- [MGTx2/CVE-2026-39107](https://github.com/MGTx2/CVE-2026-39107) + ### CVE-2026-39363 (2026-04-07) Vite is a frontend tooling framework for JavaScript. From 6.0.0 to before 6.4.2, 7.3.2, and 8.0.5, if it is possible to connect to the Vite dev server’s WebSocket without an Origin header, an attacker can invoke fetchModule via the custom WebSocket event vite:invoke and combine file://... with ?raw (or ?inline) to retrieve the contents of arbitrary files on the server as a JavaScript string (e.g., export default "..."). The access control enforced in the HTTP request path (such as server.fs.allow) is not applied to this WebSocket-based execution path. This vulnerability is fixed in 6.4.2, 7.3.2, and 8.0.5. @@ -2592,13 +2581,6 @@ - [frawlaboy/CVE-2026-39973-PoC](https://github.com/frawlaboy/CVE-2026-39973-PoC) -### CVE-2026-39983 (2026-04-09) - -basic-ftp is an FTP client for Node.js. Prior to 5.2.1, basic-ftp allows FTP command injection via CRLF sequences (\r\n) in file path parameters passed to high-level path APIs such as cd(), remove(), rename(), uploadFrom(), downloadTo(), list(), and removeDir(). The library's protectWhitespace() helper only handles leading spaces and returns other paths unchanged, while FtpContext.send() writes the resulting command string directly to the control socket with \r\n appended. This lets attacker-controlled path strings split one intended FTP command into multiple commands. This vulnerability is fixed in 5.2.1. - - -- [zebbernCVE/CVE-2026-39983](https://github.com/zebbernCVE/CVE-2026-39983) - ### CVE-2026-39987 (2026-04-09) marimo is a reactive Python notebook. Prior to 0.23.0, Marimo has a Pre-Auth RCE vulnerability. The terminal WebSocket endpoint /terminal/ws lacks authentication validation, allowing an unauthenticated attacker to obtain a full PTY shell and execute arbitrary system commands. Unlike other WebSocket endpoints (e.g., /ws) that correctly call validate_auth() for authentication, the /terminal/ws endpoint only checks the running mode and platform support before accepting connections, completely skipping authentication verification. This vulnerability is fixed in 0.23.0. @@ -3131,6 +3113,7 @@ - [fabriziosalmi/tanstack-compromise-checker](https://github.com/fabriziosalmi/tanstack-compromise-checker) - [digi4care/shai-scan](https://github.com/digi4care/shai-scan) - [nkopylov/tanscript-exploit-check](https://github.com/nkopylov/tanscript-exploit-check) +- [prashanthnataraj/mini-shai-hulud-detector](https://github.com/prashanthnataraj/mini-shai-hulud-detector) ### CVE-2026-45585 (2026-05-19) @@ -21825,7 +21808,6 @@ - [jimmexploit/CVE-2024-37054-PoC](https://github.com/jimmexploit/CVE-2024-37054-PoC) - [Spydomain/CVE-2024-37054-MLflow-reverse-shell](https://github.com/Spydomain/CVE-2024-37054-MLflow-reverse-shell) - [tristanqtn/CVE-2024-37054](https://github.com/tristanqtn/CVE-2024-37054) -- [vanhari/CVE-2024-37054](https://github.com/vanhari/CVE-2024-37054) ### CVE-2024-37081 (2024-06-18) @@ -24061,7 +24043,6 @@ - [DeividasTerechovas/SOC335-CVE-2024-49138-Exploitation-Detected](https://github.com/DeividasTerechovas/SOC335-CVE-2024-49138-Exploitation-Detected) - [CyprianAtsyor/letsdefend-cve-2024-49138-investigation](https://github.com/CyprianAtsyor/letsdefend-cve-2024-49138-investigation) - [Bridg3Ops/SOC335-CVE-2024-49138-Exploitation-Detected](https://github.com/Bridg3Ops/SOC335-CVE-2024-49138-Exploitation-Detected) -- [1rhino2/SCRAPPED](https://github.com/1rhino2/SCRAPPED) - [onixgod/SOC335-Event-ID-313-CVE-2024-49138-Exploitation-Detected--Lest-Defend-Writeup](https://github.com/onixgod/SOC335-Event-ID-313-CVE-2024-49138-Exploitation-Detected--Lest-Defend-Writeup) - [Zedocun/soc-investigation-powershell-edrfreeze](https://github.com/Zedocun/soc-investigation-powershell-edrfreeze) - [vettrivel007/CVE-2024-49138](https://github.com/vettrivel007/CVE-2024-49138) @@ -25046,6 +25027,13 @@ - [RandomRobbieBF/CVE-2024-54369](https://github.com/RandomRobbieBF/CVE-2024-54369) - [Nxploited/CVE-2024-54369-PoC](https://github.com/Nxploited/CVE-2024-54369-PoC) +### CVE-2024-54374 (2024-12-16) + +Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Sabri Sogrid sogrid allows PHP Local File Inclusion.This issue affects Sogrid: from n/a through <= 1.5.6. + + +- [RandomRobbieBF/CVE-2024-54374](https://github.com/RandomRobbieBF/CVE-2024-54374) + ### CVE-2024-54378 (2024-12-16) Missing Authorization vulnerability in Quietly Quietly Insights quietly-insights allows Privilege Escalation.This issue affects Quietly Insights: from n/a through <= 1.2.2. @@ -25358,6 +25346,13 @@ - [RandomRobbieBF/CVE-2024-55982](https://github.com/RandomRobbieBF/CVE-2024-55982) +### CVE-2024-55988 (2024-12-16) + +Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Amol Nirmala Waman Navayan CSV Export navayan-csv-export allows Blind SQL Injection.This issue affects Navayan CSV Export: from n/a through <= 1.0.9. + + +- [RandomRobbieBF/CVE-2024-55988](https://github.com/RandomRobbieBF/CVE-2024-55988) + ### CVE-2024-56058 (2024-12-18) Deserialization of Untrusted Data vulnerability in denniskravetstns VRPConnector vrpconnector allows Object Injection.This issue affects VRPConnector: from n/a through <= 2.0.1. @@ -33697,7 +33692,7 @@ ### CVE-2023-46136 (2023-10-24) -Werkzeug is a comprehensive WSGI web application library. If an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1. +Werkzeug is a comprehensive WSGI web application library. In versions on the 3.x branch prior to 3.0.1 and on the 2.x branch prior to 2.3.8, if an upload of a file that starts with CR or LF and then is followed by megabytes of data without these characters: all of these bytes are appended chunk by chunk into internal bytearray and lookup for boundary is performed on growing buffer. This allows an attacker to cause a denial of service by sending crafted multipart data to an endpoint that will parse it. The amount of CPU time required can block worker processes from handling legitimate requests. This vulnerability has been patched in version 3.0.1 and 2.3.8. - [JawadPy/WerkGhost](https://github.com/JawadPy/WerkGhost) @@ -53717,6 +53712,7 @@ - [MzzdToT/CVE-2020-25078](https://github.com/MzzdToT/CVE-2020-25078) - [chinaYozz/CVE-2020-25078](https://github.com/chinaYozz/CVE-2020-25078) +- [flags-alt/abyss-c2](https://github.com/flags-alt/abyss-c2) ### CVE-2020-25134 (2020-09-25) @@ -61910,6 +61906,7 @@ - [K3ysTr0K3R/CVE-2018-14847-EXPLOIT](https://github.com/K3ysTr0K3R/CVE-2018-14847-EXPLOIT) - [tausifzaman/CVE-2018-14847](https://github.com/tausifzaman/CVE-2018-14847) - [TheMalwareGuardian/CVE-2018-14847](https://github.com/TheMalwareGuardian/CVE-2018-14847) +- [mourafuseti/VULNERAVEL-CVE-2018-14847---CREDENCIAIS-EXTRAIDAS](https://github.com/mourafuseti/VULNERAVEL-CVE-2018-14847---CREDENCIAIS-EXTRAIDAS) ### CVE-2018-14879 (2019-10-03)