mirror of
https://github.com/nomi-sec/PoC-in-GitHub.git
synced 2026-11-07 08:30:25 -10:00
Auto Update 2026/06/29 12:55:09
This commit is contained in:
1 parent
01b6666f4a
commit
a40903d2d0
77 files changed
+658
-435
No files matched your search
@@ -0,0 +1,45 @@
|
||||
[
|
||||
{
|
||||
"id": 1283206775,
|
||||
"name": "crypto-lab-merkle-proofs",
|
||||
"full_name": "systemslibrarian\/crypto-lab-merkle-proofs",
|
||||
"owner": {
|
||||
"login": "systemslibrarian",
|
||||
"id": 5807986,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5807986?v=4",
|
||||
"html_url": "https:\/\/github.com\/systemslibrarian",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/systemslibrarian\/crypto-lab-merkle-proofs",
|
||||
"description": "Browser-based Merkle tree demo — build a tree, generate inclusion proofs, recompute the root hash by hash, and replay the RFC 6962 second-preimage and CVE-2012-2459 attacks. Real SHA-256. No backend.",
|
||||
"fork": false,
|
||||
"created_at": "2026-06-28T17:01:57Z",
|
||||
"updated_at": "2026-06-29T10:07:25Z",
|
||||
"pushed_at": "2026-06-28T22:31:44Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [
|
||||
"certificate-transparency",
|
||||
"crypto-lab",
|
||||
"cryptography",
|
||||
"hash-based",
|
||||
"inclusion-proof",
|
||||
"merkle-proof",
|
||||
"merkle-tree",
|
||||
"rfc6962",
|
||||
"sha256"
|
||||
],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
]
|
||||
@@ -179,10 +179,10 @@
|
||||
"description": "Fixed No Virus Manual Automatic Loader exe no zip because zip picks up the anti virus detector.",
|
||||
"fork": false,
|
||||
"created_at": "2018-04-10T18:34:17Z",
|
||||
"updated_at": "2025-02-04T12:26:34Z",
|
||||
"updated_at": "2026-06-29T11:13:01Z",
|
||||
"pushed_at": "2018-04-17T23:14:39Z",
|
||||
"stargazers_count": 13,
|
||||
"watchers_count": 13,
|
||||
"stargazers_count": 14,
|
||||
"watchers_count": 14,
|
||||
"has_discussions": false,
|
||||
"forks_count": 16,
|
||||
"allow_forking": true,
|
||||
@@ -193,7 +193,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 16,
|
||||
"watchers": 13,
|
||||
"watchers": 14,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
|
||||
@@ -14,10 +14,10 @@
|
||||
"description": "An example exploit for CVE-2017-7376",
|
||||
"fork": false,
|
||||
"created_at": "2020-06-11T06:55:32Z",
|
||||
"updated_at": "2023-05-04T13:51:57Z",
|
||||
"updated_at": "2026-06-29T11:28:50Z",
|
||||
"pushed_at": "2020-06-11T10:02:29Z",
|
||||
"stargazers_count": 2,
|
||||
"watchers_count": 2,
|
||||
"stargazers_count": 3,
|
||||
"watchers_count": 3,
|
||||
"has_discussions": false,
|
||||
"forks_count": 3,
|
||||
"allow_forking": true,
|
||||
@@ -28,7 +28,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 3,
|
||||
"watchers": 2,
|
||||
"watchers": 3,
|
||||
"score": 0,
|
||||
"subscribers_count": 2
|
||||
}
|
||||
|
||||
@@ -3105,10 +3105,10 @@
|
||||
"description": "ispy V1.0 - Eternalblue(ms17-010)\/Bluekeep(CVE-2019-0708) Scanner and exploit ( Metasploit automation )",
|
||||
"fork": false,
|
||||
"created_at": "2019-09-30T19:46:21Z",
|
||||
"updated_at": "2026-06-24T20:34:04Z",
|
||||
"updated_at": "2026-06-29T11:11:13Z",
|
||||
"pushed_at": "2021-02-06T00:24:21Z",
|
||||
"stargazers_count": 244,
|
||||
"watchers_count": 244,
|
||||
"stargazers_count": 245,
|
||||
"watchers_count": 245,
|
||||
"has_discussions": false,
|
||||
"forks_count": 71,
|
||||
"allow_forking": true,
|
||||
@@ -3119,7 +3119,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 71,
|
||||
"watchers": 244,
|
||||
"watchers": 245,
|
||||
"score": 0,
|
||||
"subscribers_count": 22
|
||||
},
|
||||
|
||||
@@ -179,8 +179,8 @@
|
||||
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
|
||||
"fork": false,
|
||||
"created_at": "2025-12-06T19:56:12Z",
|
||||
"updated_at": "2026-06-29T02:55:21Z",
|
||||
"pushed_at": "2026-06-29T02:55:17Z",
|
||||
"updated_at": "2026-06-29T08:12:11Z",
|
||||
"pushed_at": "2026-06-29T08:12:08Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -1754,10 +1754,10 @@
|
||||
"description": "SMBGhost (CVE-2020-0796) Automate Exploitation and Detection",
|
||||
"fork": false,
|
||||
"created_at": "2020-06-10T16:44:39Z",
|
||||
"updated_at": "2026-06-26T20:57:05Z",
|
||||
"updated_at": "2026-06-29T09:29:19Z",
|
||||
"pushed_at": "2022-03-30T14:02:04Z",
|
||||
"stargazers_count": 348,
|
||||
"watchers_count": 348,
|
||||
"stargazers_count": 349,
|
||||
"watchers_count": 349,
|
||||
"has_discussions": false,
|
||||
"forks_count": 49,
|
||||
"allow_forking": true,
|
||||
@@ -1768,7 +1768,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 49,
|
||||
"watchers": 348,
|
||||
"watchers": 349,
|
||||
"score": 0,
|
||||
"subscribers_count": 6
|
||||
},
|
||||
|
||||
@@ -186,10 +186,10 @@
|
||||
"description": "Exploit for zerologon cve-2020-1472",
|
||||
"fork": false,
|
||||
"created_at": "2020-09-14T19:19:07Z",
|
||||
"updated_at": "2026-06-26T01:21:17Z",
|
||||
"updated_at": "2026-06-29T11:08:24Z",
|
||||
"pushed_at": "2020-10-15T18:31:15Z",
|
||||
"stargazers_count": 695,
|
||||
"watchers_count": 695,
|
||||
"stargazers_count": 696,
|
||||
"watchers_count": 696,
|
||||
"has_discussions": false,
|
||||
"forks_count": 146,
|
||||
"allow_forking": true,
|
||||
@@ -200,7 +200,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 146,
|
||||
"watchers": 695,
|
||||
"watchers": 696,
|
||||
"score": 0,
|
||||
"subscribers_count": 10
|
||||
},
|
||||
@@ -2383,8 +2383,8 @@
|
||||
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
|
||||
"fork": false,
|
||||
"created_at": "2025-12-06T10:17:38Z",
|
||||
"updated_at": "2026-06-29T06:19:03Z",
|
||||
"pushed_at": "2026-06-29T06:18:59Z",
|
||||
"updated_at": "2026-06-29T11:25:11Z",
|
||||
"pushed_at": "2026-06-29T11:25:07Z",
|
||||
"stargazers_count": 2,
|
||||
"watchers_count": 2,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,10 +14,10 @@
|
||||
"description": null,
|
||||
"fork": false,
|
||||
"created_at": "2022-12-07T21:15:23Z",
|
||||
"updated_at": "2026-04-16T01:18:32Z",
|
||||
"updated_at": "2026-06-29T08:15:35Z",
|
||||
"pushed_at": "2022-12-07T21:26:44Z",
|
||||
"stargazers_count": 12,
|
||||
"watchers_count": 12,
|
||||
"stargazers_count": 13,
|
||||
"watchers_count": 13,
|
||||
"has_discussions": false,
|
||||
"forks_count": 2,
|
||||
"allow_forking": true,
|
||||
@@ -28,7 +28,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 2,
|
||||
"watchers": 12,
|
||||
"watchers": 13,
|
||||
"score": 0,
|
||||
"subscribers_count": 1
|
||||
},
|
||||
|
||||
@@ -14,10 +14,10 @@
|
||||
"description": "Let's hijack our bootchain - CVE-2021-30327",
|
||||
"fork": false,
|
||||
"created_at": "2026-06-25T12:12:38Z",
|
||||
"updated_at": "2026-06-27T16:17:37Z",
|
||||
"updated_at": "2026-06-29T11:03:32Z",
|
||||
"pushed_at": "2026-06-25T14:18:43Z",
|
||||
"stargazers_count": 4,
|
||||
"watchers_count": 4,
|
||||
"stargazers_count": 5,
|
||||
"watchers_count": 5,
|
||||
"has_discussions": false,
|
||||
"forks_count": 2,
|
||||
"allow_forking": true,
|
||||
@@ -28,7 +28,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 2,
|
||||
"watchers": 4,
|
||||
"watchers": 5,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
|
||||
@@ -212,8 +212,8 @@
|
||||
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
|
||||
"fork": false,
|
||||
"created_at": "2026-03-28T17:42:44Z",
|
||||
"updated_at": "2026-06-29T01:52:51Z",
|
||||
"pushed_at": "2026-06-29T01:52:47Z",
|
||||
"updated_at": "2026-06-29T11:48:28Z",
|
||||
"pushed_at": "2026-06-29T11:48:24Z",
|
||||
"stargazers_count": 4,
|
||||
"watchers_count": 4,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,10 +14,10 @@
|
||||
"description": "CVE-2021-42287\/CVE-2021-42278 Scanner & Exploiter.",
|
||||
"fork": false,
|
||||
"created_at": "2021-12-11T19:27:30Z",
|
||||
"updated_at": "2026-06-28T06:48:31Z",
|
||||
"updated_at": "2026-06-29T10:49:36Z",
|
||||
"pushed_at": "2021-12-16T09:50:15Z",
|
||||
"stargazers_count": 1406,
|
||||
"watchers_count": 1406,
|
||||
"stargazers_count": 1407,
|
||||
"watchers_count": 1407,
|
||||
"has_discussions": false,
|
||||
"forks_count": 316,
|
||||
"allow_forking": true,
|
||||
@@ -28,7 +28,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 316,
|
||||
"watchers": 1406,
|
||||
"watchers": 1407,
|
||||
"score": 0,
|
||||
"subscribers_count": 24
|
||||
},
|
||||
|
||||
@@ -988,10 +988,10 @@
|
||||
"description": "A Proof-Of-Concept for the CVE-2021-44228 vulnerability. ",
|
||||
"fork": false,
|
||||
"created_at": "2021-12-10T23:19:28Z",
|
||||
"updated_at": "2026-06-18T02:08:46Z",
|
||||
"updated_at": "2026-06-29T10:43:47Z",
|
||||
"pushed_at": "2024-02-12T22:37:25Z",
|
||||
"stargazers_count": 1849,
|
||||
"watchers_count": 1849,
|
||||
"stargazers_count": 1850,
|
||||
"watchers_count": 1850,
|
||||
"has_discussions": false,
|
||||
"forks_count": 543,
|
||||
"allow_forking": true,
|
||||
@@ -1007,7 +1007,7 @@
|
||||
],
|
||||
"visibility": "public",
|
||||
"forks": 543,
|
||||
"watchers": 1849,
|
||||
"watchers": 1850,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
|
||||
@@ -113,10 +113,10 @@
|
||||
"description": "A root exploit for CVE-2022-0847 (Dirty Pipe)",
|
||||
"fork": false,
|
||||
"created_at": "2022-03-07T18:55:20Z",
|
||||
"updated_at": "2026-06-14T22:13:04Z",
|
||||
"updated_at": "2026-06-29T09:00:08Z",
|
||||
"pushed_at": "2022-03-08T06:20:05Z",
|
||||
"stargazers_count": 1128,
|
||||
"watchers_count": 1128,
|
||||
"stargazers_count": 1129,
|
||||
"watchers_count": 1129,
|
||||
"has_discussions": false,
|
||||
"forks_count": 222,
|
||||
"allow_forking": true,
|
||||
@@ -127,7 +127,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 222,
|
||||
"watchers": 1128,
|
||||
"watchers": 1129,
|
||||
"score": 0,
|
||||
"subscribers_count": 17
|
||||
},
|
||||
|
||||
@@ -15,7 +15,7 @@
|
||||
"fork": false,
|
||||
"created_at": "2025-09-08T21:12:19Z",
|
||||
"updated_at": "2026-06-19T21:56:25Z",
|
||||
"pushed_at": "2026-06-29T05:40:41Z",
|
||||
"pushed_at": "2026-06-29T10:30:37Z",
|
||||
"stargazers_count": 5,
|
||||
"watchers_count": 5,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -59,8 +59,8 @@
|
||||
"description": "Demonstrate local privilege escalation in networkd-dispatcher via CVE-2022-29799 and CVE-2022-29800 using this C proof of concept.",
|
||||
"fork": false,
|
||||
"created_at": "2026-06-23T14:05:18Z",
|
||||
"updated_at": "2026-06-29T04:42:35Z",
|
||||
"pushed_at": "2026-06-29T04:42:31Z",
|
||||
"updated_at": "2026-06-29T11:32:57Z",
|
||||
"pushed_at": "2026-06-29T11:32:54Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -550,8 +550,8 @@
|
||||
"description": "Copy fake in-memory files to disk using overlayFS",
|
||||
"fork": false,
|
||||
"created_at": "2026-06-28T19:50:42Z",
|
||||
"updated_at": "2026-06-28T19:51:24Z",
|
||||
"pushed_at": "2026-06-28T19:51:21Z",
|
||||
"updated_at": "2026-06-29T07:06:56Z",
|
||||
"pushed_at": "2026-06-29T07:06:52Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,12 +14,12 @@
|
||||
"description": "Cert exploit for MTK devices.There is a logic flaw in MTK cert verification process.Similar to CVE-2023-20696.",
|
||||
"fork": false,
|
||||
"created_at": "2026-06-22T02:09:35Z",
|
||||
"updated_at": "2026-06-29T06:32:31Z",
|
||||
"pushed_at": "2026-06-29T03:02:37Z",
|
||||
"stargazers_count": 18,
|
||||
"watchers_count": 18,
|
||||
"updated_at": "2026-06-29T12:34:42Z",
|
||||
"pushed_at": "2026-06-29T11:19:42Z",
|
||||
"stargazers_count": 30,
|
||||
"watchers_count": 30,
|
||||
"has_discussions": false,
|
||||
"forks_count": 15,
|
||||
"forks_count": 20,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
@@ -27,8 +27,8 @@
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 15,
|
||||
"watchers": 18,
|
||||
"forks": 20,
|
||||
"watchers": 30,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
|
||||
@@ -85,7 +85,7 @@
|
||||
"stargazers_count": 202,
|
||||
"watchers_count": 202,
|
||||
"has_discussions": false,
|
||||
"forks_count": 39,
|
||||
"forks_count": 40,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
@@ -101,7 +101,7 @@
|
||||
"windows"
|
||||
],
|
||||
"visibility": "public",
|
||||
"forks": 39,
|
||||
"forks": 40,
|
||||
"watchers": 202,
|
||||
"score": 0,
|
||||
"subscribers_count": 4
|
||||
|
||||
@@ -14,10 +14,10 @@
|
||||
"description": "PoC CVE-2023-28205: Apple WebKit Use-After-Free Vulnerability",
|
||||
"fork": false,
|
||||
"created_at": "2024-11-30T12:25:47Z",
|
||||
"updated_at": "2026-04-08T18:19:55Z",
|
||||
"updated_at": "2026-06-29T11:12:09Z",
|
||||
"pushed_at": "2024-12-01T16:08:19Z",
|
||||
"stargazers_count": 18,
|
||||
"watchers_count": 18,
|
||||
"stargazers_count": 17,
|
||||
"watchers_count": 17,
|
||||
"has_discussions": false,
|
||||
"forks_count": 4,
|
||||
"allow_forking": true,
|
||||
@@ -37,7 +37,7 @@
|
||||
],
|
||||
"visibility": "public",
|
||||
"forks": 4,
|
||||
"watchers": 18,
|
||||
"watchers": 17,
|
||||
"score": 0,
|
||||
"subscribers_count": 2
|
||||
},
|
||||
|
||||
@@ -14,10 +14,10 @@
|
||||
"description": "EXP for CVE-2023-28434 MinIO unauthorized to RCE",
|
||||
"fork": false,
|
||||
"created_at": "2023-03-27T08:53:04Z",
|
||||
"updated_at": "2026-05-23T10:54:18Z",
|
||||
"updated_at": "2026-06-29T08:06:35Z",
|
||||
"pushed_at": "2023-04-04T05:26:59Z",
|
||||
"stargazers_count": 319,
|
||||
"watchers_count": 319,
|
||||
"stargazers_count": 320,
|
||||
"watchers_count": 320,
|
||||
"has_discussions": false,
|
||||
"forks_count": 39,
|
||||
"allow_forking": true,
|
||||
@@ -31,7 +31,7 @@
|
||||
],
|
||||
"visibility": "public",
|
||||
"forks": 39,
|
||||
"watchers": 319,
|
||||
"watchers": 320,
|
||||
"score": 0,
|
||||
"subscribers_count": 2
|
||||
}
|
||||
|
||||
@@ -47,8 +47,8 @@
|
||||
"description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙",
|
||||
"fork": false,
|
||||
"created_at": "2025-08-13T09:19:29Z",
|
||||
"updated_at": "2026-06-29T05:08:37Z",
|
||||
"pushed_at": "2026-06-29T05:08:34Z",
|
||||
"updated_at": "2026-06-29T11:58:58Z",
|
||||
"pushed_at": "2026-06-29T11:58:54Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,10 +14,10 @@
|
||||
"description": null,
|
||||
"fork": false,
|
||||
"created_at": "2023-10-23T19:06:36Z",
|
||||
"updated_at": "2026-06-26T02:21:48Z",
|
||||
"updated_at": "2026-06-29T08:23:25Z",
|
||||
"pushed_at": "2023-10-29T11:12:26Z",
|
||||
"stargazers_count": 168,
|
||||
"watchers_count": 168,
|
||||
"stargazers_count": 169,
|
||||
"watchers_count": 169,
|
||||
"has_discussions": false,
|
||||
"forks_count": 49,
|
||||
"allow_forking": true,
|
||||
@@ -28,7 +28,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 49,
|
||||
"watchers": 168,
|
||||
"watchers": 169,
|
||||
"score": 0,
|
||||
"subscribers_count": 3
|
||||
}
|
||||
|
||||
@@ -14,12 +14,12 @@
|
||||
"description": "This POC exploits a format validation vulnerability in the RTSP service of the Hipcam RealServer\/V1.0, inducing a crash for approximately 45 seconds by injecting random data into the 'client_port' parameter during the RTSP SETUP request. Hipcam RealServer\/V1.0 is used in many Hipcam Cameras. | CVE-2023-50685",
|
||||
"fork": false,
|
||||
"created_at": "2023-12-10T13:21:43Z",
|
||||
"updated_at": "2026-06-20T23:56:16Z",
|
||||
"updated_at": "2026-06-29T11:09:09Z",
|
||||
"pushed_at": "2024-05-02T14:40:04Z",
|
||||
"stargazers_count": 17,
|
||||
"watchers_count": 17,
|
||||
"stargazers_count": 16,
|
||||
"watchers_count": 16,
|
||||
"has_discussions": false,
|
||||
"forks_count": 7,
|
||||
"forks_count": 6,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
@@ -37,8 +37,8 @@
|
||||
"vulnerability"
|
||||
],
|
||||
"visibility": "public",
|
||||
"forks": 7,
|
||||
"watchers": 17,
|
||||
"forks": 6,
|
||||
"watchers": 16,
|
||||
"score": 0,
|
||||
"subscribers_count": 1
|
||||
}
|
||||
|
||||
@@ -47,10 +47,10 @@
|
||||
"description": "PoC scripts to exploit LFR (Local File Read) via PHP filters chain oracle (php:\/\/filter), especially for CTF purposes or the exploit of CVE-2023-6199, etc. This's a one-script exploitation PoC modified from https:\/\/github.com\/synacktiv\/php_filter_chains_oracle_exploit",
|
||||
"fork": false,
|
||||
"created_at": "2025-03-04T13:32:00Z",
|
||||
"updated_at": "2026-03-24T20:32:21Z",
|
||||
"updated_at": "2026-06-29T10:38:41Z",
|
||||
"pushed_at": "2025-03-05T03:55:30Z",
|
||||
"stargazers_count": 2,
|
||||
"watchers_count": 2,
|
||||
"stargazers_count": 3,
|
||||
"watchers_count": 3,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
@@ -61,7 +61,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 2,
|
||||
"watchers": 3,
|
||||
"score": 0,
|
||||
"subscribers_count": 1
|
||||
}
|
||||
|
||||
@@ -316,10 +316,10 @@
|
||||
"description": "Exploitation and Post-Exploitation Multitool for Palo Alto PAN-OS Systems affected by vulnerabilities CVE-2024-0012 and CVE-2024-9474",
|
||||
"fork": false,
|
||||
"created_at": "2025-05-21T03:59:13Z",
|
||||
"updated_at": "2026-06-11T18:32:08Z",
|
||||
"updated_at": "2026-06-29T07:15:16Z",
|
||||
"pushed_at": "2026-06-05T15:03:14Z",
|
||||
"stargazers_count": 5,
|
||||
"watchers_count": 5,
|
||||
"stargazers_count": 6,
|
||||
"watchers_count": 6,
|
||||
"has_discussions": false,
|
||||
"forks_count": 1,
|
||||
"allow_forking": true,
|
||||
@@ -330,7 +330,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 1,
|
||||
"watchers": 5,
|
||||
"watchers": 6,
|
||||
"score": 0,
|
||||
"subscribers_count": 1
|
||||
}
|
||||
|
||||
@@ -172,8 +172,8 @@
|
||||
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
|
||||
"fork": false,
|
||||
"created_at": "2026-01-08T01:32:09Z",
|
||||
"updated_at": "2026-06-29T03:38:22Z",
|
||||
"pushed_at": "2026-06-29T03:38:19Z",
|
||||
"updated_at": "2026-06-29T12:43:20Z",
|
||||
"pushed_at": "2026-06-29T12:43:11Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -1,35 +0,0 @@
|
||||
[
|
||||
{
|
||||
"id": 914938551,
|
||||
"name": "CVE-2024-33298",
|
||||
"full_name": "MathSabo\/CVE-2024-33298",
|
||||
"owner": {
|
||||
"login": "MathSabo",
|
||||
"id": 110696037,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/110696037?v=4",
|
||||
"html_url": "https:\/\/github.com\/MathSabo",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/MathSabo\/CVE-2024-33298",
|
||||
"description": "Stored Cross Site Scripting vulnerability in Microweber < 2.0.9",
|
||||
"fork": false,
|
||||
"created_at": "2025-01-10T16:08:42Z",
|
||||
"updated_at": "2025-01-10T16:15:14Z",
|
||||
"pushed_at": "2025-01-10T16:15:10Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 1
|
||||
}
|
||||
]
|
||||
@@ -344,10 +344,10 @@
|
||||
"description": "CVE-2024-3400-RCE",
|
||||
"fork": false,
|
||||
"created_at": "2024-04-16T16:18:56Z",
|
||||
"updated_at": "2026-04-23T23:03:02Z",
|
||||
"updated_at": "2026-06-29T06:58:35Z",
|
||||
"pushed_at": "2024-04-22T08:50:27Z",
|
||||
"stargazers_count": 90,
|
||||
"watchers_count": 90,
|
||||
"stargazers_count": 91,
|
||||
"watchers_count": 91,
|
||||
"has_discussions": false,
|
||||
"forks_count": 7,
|
||||
"allow_forking": true,
|
||||
@@ -358,7 +358,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 7,
|
||||
"watchers": 90,
|
||||
"watchers": 91,
|
||||
"score": 0,
|
||||
"subscribers_count": 2
|
||||
},
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "A PoC of the CVE-2024-56426 vulnerability.",
|
||||
"fork": false,
|
||||
"created_at": "2026-04-07T12:02:52Z",
|
||||
"updated_at": "2026-06-28T23:45:17Z",
|
||||
"pushed_at": "2026-06-24T17:45:44Z",
|
||||
"updated_at": "2026-06-29T11:34:38Z",
|
||||
"pushed_at": "2026-06-29T11:34:30Z",
|
||||
"stargazers_count": 14,
|
||||
"watchers_count": 14,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -385,5 +385,38 @@
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
{
|
||||
"id": 1283694842,
|
||||
"name": "CVE-2024-9264",
|
||||
"full_name": "yeonchoda\/CVE-2024-9264",
|
||||
"owner": {
|
||||
"login": "yeonchoda",
|
||||
"id": 245557290,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/245557290?v=4",
|
||||
"html_url": "https:\/\/github.com\/yeonchoda",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/yeonchoda\/CVE-2024-9264",
|
||||
"description": null,
|
||||
"fork": false,
|
||||
"created_at": "2026-06-29T06:44:01Z",
|
||||
"updated_at": "2026-06-29T12:28:09Z",
|
||||
"pushed_at": "2026-06-29T12:27:59Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
]
|
||||
@@ -236,5 +236,38 @@
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
{
|
||||
"id": 1283853023,
|
||||
"name": "cve-2025-0133",
|
||||
"full_name": "radityahack\/cve-2025-0133",
|
||||
"owner": {
|
||||
"login": "radityahack",
|
||||
"id": 181808765,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/181808765?v=4",
|
||||
"html_url": "https:\/\/github.com\/radityahack",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/radityahack\/cve-2025-0133",
|
||||
"description": "CVE-2025-0133 Scanner | Palo Alto GlobalProtect XSS Checker ",
|
||||
"fork": false,
|
||||
"created_at": "2026-06-29T09:47:24Z",
|
||||
"updated_at": "2026-06-29T11:14:32Z",
|
||||
"pushed_at": "2026-06-29T11:14:29Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
]
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
|
||||
"fork": false,
|
||||
"created_at": "2025-07-30T15:52:00Z",
|
||||
"updated_at": "2026-06-29T03:41:40Z",
|
||||
"pushed_at": "2026-06-29T03:41:36Z",
|
||||
"updated_at": "2026-06-29T12:46:42Z",
|
||||
"pushed_at": "2026-06-29T12:46:36Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
@@ -1129,8 +1129,8 @@
|
||||
"description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
|
||||
"fork": false,
|
||||
"created_at": "2026-01-14T06:05:44Z",
|
||||
"updated_at": "2026-06-29T03:41:00Z",
|
||||
"pushed_at": "2026-06-29T03:40:56Z",
|
||||
"updated_at": "2026-06-29T12:45:57Z",
|
||||
"pushed_at": "2026-06-29T12:45:53Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -19,7 +19,7 @@
|
||||
"stargazers_count": 21,
|
||||
"watchers_count": 21,
|
||||
"has_discussions": false,
|
||||
"forks_count": 10,
|
||||
"forks_count": 11,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
@@ -27,7 +27,7 @@
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 10,
|
||||
"forks": 11,
|
||||
"watchers": 21,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
|
||||
@@ -80,10 +80,10 @@
|
||||
"description": "CVE-2025-21479 PoC for ZFlip5 with Knox in the way!(˶˃ ᵕ ˂˶) ",
|
||||
"fork": false,
|
||||
"created_at": "2026-06-18T19:41:56Z",
|
||||
"updated_at": "2026-06-25T17:31:57Z",
|
||||
"updated_at": "2026-06-29T10:29:36Z",
|
||||
"pushed_at": "2026-06-25T17:31:53Z",
|
||||
"stargazers_count": 8,
|
||||
"watchers_count": 8,
|
||||
"stargazers_count": 9,
|
||||
"watchers_count": 9,
|
||||
"has_discussions": false,
|
||||
"forks_count": 2,
|
||||
"allow_forking": true,
|
||||
@@ -94,7 +94,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 2,
|
||||
"watchers": 8,
|
||||
"watchers": 9,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis",
|
||||
"fork": false,
|
||||
"created_at": "2026-04-04T03:42:55Z",
|
||||
"updated_at": "2026-06-29T04:20:00Z",
|
||||
"pushed_at": "2026-06-29T04:19:56Z",
|
||||
"updated_at": "2026-06-29T11:09:05Z",
|
||||
"pushed_at": "2026-06-29T11:09:01Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -149,10 +149,10 @@
|
||||
"description": null,
|
||||
"fork": false,
|
||||
"created_at": "2025-03-23T09:22:35Z",
|
||||
"updated_at": "2026-06-14T19:31:25Z",
|
||||
"updated_at": "2026-06-29T08:59:16Z",
|
||||
"pushed_at": "2026-06-14T19:31:21Z",
|
||||
"stargazers_count": 15,
|
||||
"watchers_count": 15,
|
||||
"stargazers_count": 14,
|
||||
"watchers_count": 14,
|
||||
"has_discussions": false,
|
||||
"forks_count": 8,
|
||||
"allow_forking": true,
|
||||
@@ -163,7 +163,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 8,
|
||||
"watchers": 15,
|
||||
"watchers": 14,
|
||||
"score": 0,
|
||||
"subscribers_count": 1
|
||||
},
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "🔓 Explore CVE-2025-31258 with this PoC demonstrating partial sandbox escape using RemoteViewServices for practical 1-day security practice.",
|
||||
"fork": false,
|
||||
"created_at": "2020-06-23T15:20:11Z",
|
||||
"updated_at": "2026-06-29T05:12:54Z",
|
||||
"pushed_at": "2026-06-29T05:12:50Z",
|
||||
"updated_at": "2026-06-29T12:04:03Z",
|
||||
"pushed_at": "2026-06-29T12:03:59Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -1595,8 +1595,8 @@
|
||||
"description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.",
|
||||
"fork": false,
|
||||
"created_at": "2025-09-20T00:42:07Z",
|
||||
"updated_at": "2026-06-29T05:13:40Z",
|
||||
"pushed_at": "2026-06-29T05:13:36Z",
|
||||
"updated_at": "2026-06-29T12:04:29Z",
|
||||
"pushed_at": "2026-06-29T12:04:25Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -157,7 +157,7 @@
|
||||
"stargazers_count": 9,
|
||||
"watchers_count": 9,
|
||||
"has_discussions": false,
|
||||
"forks_count": 1,
|
||||
"forks_count": 2,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
@@ -172,7 +172,7 @@
|
||||
"whisperpair"
|
||||
],
|
||||
"visibility": "public",
|
||||
"forks": 1,
|
||||
"forks": 2,
|
||||
"watchers": 9,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.",
|
||||
"fork": false,
|
||||
"created_at": "2019-04-13T07:51:09Z",
|
||||
"updated_at": "2026-06-29T03:12:54Z",
|
||||
"pushed_at": "2026-06-29T03:12:51Z",
|
||||
"updated_at": "2026-06-29T12:16:56Z",
|
||||
"pushed_at": "2026-06-29T12:16:52Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
@@ -66,8 +66,8 @@
|
||||
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
|
||||
"fork": false,
|
||||
"created_at": "2022-04-06T09:27:39Z",
|
||||
"updated_at": "2026-06-29T03:13:29Z",
|
||||
"pushed_at": "2026-06-29T03:13:25Z",
|
||||
"updated_at": "2026-06-29T12:17:05Z",
|
||||
"pushed_at": "2026-06-29T12:16:59Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -53,8 +53,8 @@
|
||||
"description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐",
|
||||
"fork": false,
|
||||
"created_at": "2025-08-14T05:16:16Z",
|
||||
"updated_at": "2026-06-29T05:09:10Z",
|
||||
"pushed_at": "2026-06-29T05:09:06Z",
|
||||
"updated_at": "2026-06-29T11:59:37Z",
|
||||
"pushed_at": "2026-06-29T11:59:33Z",
|
||||
"stargazers_count": 3,
|
||||
"watchers_count": 3,
|
||||
"has_discussions": false,
|
||||
|
||||
+18
-18
@@ -14,8 +14,8 @@
|
||||
"description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.",
|
||||
"fork": false,
|
||||
"created_at": "2022-06-17T10:19:10Z",
|
||||
"updated_at": "2026-06-29T03:31:56Z",
|
||||
"pushed_at": "2026-06-29T03:31:52Z",
|
||||
"updated_at": "2026-06-29T12:36:33Z",
|
||||
"pushed_at": "2026-06-29T12:36:21Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
@@ -99,8 +99,8 @@
|
||||
"description": null,
|
||||
"fork": false,
|
||||
"created_at": "2024-11-29T12:32:19Z",
|
||||
"updated_at": "2026-06-29T03:32:24Z",
|
||||
"pushed_at": "2026-06-29T03:32:21Z",
|
||||
"updated_at": "2026-06-29T12:37:28Z",
|
||||
"pushed_at": "2026-06-29T12:37:14Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
@@ -148,8 +148,8 @@
|
||||
"description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
|
||||
"fork": false,
|
||||
"created_at": "2025-06-06T16:34:46Z",
|
||||
"updated_at": "2026-06-29T03:32:04Z",
|
||||
"pushed_at": "2026-06-29T03:32:00Z",
|
||||
"updated_at": "2026-06-29T12:36:39Z",
|
||||
"pushed_at": "2026-06-29T12:36:35Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
@@ -2262,10 +2262,10 @@
|
||||
"description": "Original Proof-of-Concepts for React2Shell CVE-2025-55182",
|
||||
"fork": false,
|
||||
"created_at": "2025-12-05T08:00:07Z",
|
||||
"updated_at": "2026-06-28T02:05:19Z",
|
||||
"updated_at": "2026-06-29T10:37:32Z",
|
||||
"pushed_at": "2025-12-05T08:56:15Z",
|
||||
"stargazers_count": 1051,
|
||||
"watchers_count": 1051,
|
||||
"stargazers_count": 1053,
|
||||
"watchers_count": 1053,
|
||||
"has_discussions": false,
|
||||
"forks_count": 108,
|
||||
"allow_forking": true,
|
||||
@@ -2279,7 +2279,7 @@
|
||||
],
|
||||
"visibility": "public",
|
||||
"forks": 108,
|
||||
"watchers": 1051,
|
||||
"watchers": 1053,
|
||||
"score": 0,
|
||||
"subscribers_count": 25
|
||||
},
|
||||
@@ -2331,10 +2331,10 @@
|
||||
"description": "Burp Suite\/antsword - Interactive shell (HTTP hijack + POST + AES-256-CBC\/BASE64)",
|
||||
"fork": false,
|
||||
"created_at": "2025-12-05T08:15:17Z",
|
||||
"updated_at": "2026-06-22T11:04:50Z",
|
||||
"updated_at": "2026-06-29T10:32:23Z",
|
||||
"pushed_at": "2025-12-08T03:54:23Z",
|
||||
"stargazers_count": 30,
|
||||
"watchers_count": 30,
|
||||
"stargazers_count": 31,
|
||||
"watchers_count": 31,
|
||||
"has_discussions": false,
|
||||
"forks_count": 4,
|
||||
"allow_forking": true,
|
||||
@@ -2345,7 +2345,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 4,
|
||||
"watchers": 30,
|
||||
"watchers": 31,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
@@ -11705,8 +11705,8 @@
|
||||
"description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.",
|
||||
"fork": false,
|
||||
"created_at": "2025-12-24T14:48:19Z",
|
||||
"updated_at": "2026-06-29T03:31:49Z",
|
||||
"pushed_at": "2026-06-29T03:31:46Z",
|
||||
"updated_at": "2026-06-29T12:36:18Z",
|
||||
"pushed_at": "2026-06-29T12:36:14Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
@@ -12223,8 +12223,8 @@
|
||||
"description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
|
||||
"fork": false,
|
||||
"created_at": "2026-01-02T01:28:57Z",
|
||||
"updated_at": "2026-06-29T03:35:27Z",
|
||||
"pushed_at": "2026-06-29T03:35:24Z",
|
||||
"updated_at": "2026-06-29T12:40:26Z",
|
||||
"pushed_at": "2026-06-29T12:40:11Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -64,8 +64,8 @@
|
||||
"description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.",
|
||||
"fork": false,
|
||||
"created_at": "2026-03-23T09:09:21Z",
|
||||
"updated_at": "2026-06-29T04:14:45Z",
|
||||
"pushed_at": "2026-06-29T04:14:42Z",
|
||||
"updated_at": "2026-06-29T11:03:30Z",
|
||||
"pushed_at": "2026-06-29T11:03:24Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.",
|
||||
"fork": false,
|
||||
"created_at": "2025-10-01T07:40:09Z",
|
||||
"updated_at": "2026-06-29T03:32:56Z",
|
||||
"pushed_at": "2026-06-29T03:32:52Z",
|
||||
"updated_at": "2026-06-29T12:37:29Z",
|
||||
"pushed_at": "2026-06-29T12:37:22Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -47,8 +47,8 @@
|
||||
"description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.",
|
||||
"fork": false,
|
||||
"created_at": "2026-01-24T21:00:41Z",
|
||||
"updated_at": "2026-06-29T03:46:36Z",
|
||||
"pushed_at": "2026-06-29T03:46:33Z",
|
||||
"updated_at": "2026-06-29T10:33:55Z",
|
||||
"pushed_at": "2026-06-29T10:33:51Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -32,6 +32,39 @@
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
{
|
||||
"id": 1282464219,
|
||||
"name": "CVE-2025-69212-Authenticated-RCE-PoC",
|
||||
"full_name": "jonathan-corbin\/CVE-2025-69212-Authenticated-RCE-PoC",
|
||||
"owner": {
|
||||
"login": "jonathan-corbin",
|
||||
"id": 16522083,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16522083?v=4",
|
||||
"html_url": "https:\/\/github.com\/jonathan-corbin",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/jonathan-corbin\/CVE-2025-69212-Authenticated-RCE-PoC",
|
||||
"description": "Automated PoC for CVE-2025-69212 - OpenSTAManager <=2.9.8 authenticated RCE",
|
||||
"fork": false,
|
||||
"created_at": "2026-06-27T20:03:55Z",
|
||||
"updated_at": "2026-06-29T08:26:33Z",
|
||||
"pushed_at": "2026-06-29T08:25:02Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
{
|
||||
"id": 1282562072,
|
||||
"name": "CVE-2025-69212-PoC",
|
||||
@@ -64,5 +97,38 @@
|
||||
"watchers": 3,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
{
|
||||
"id": 1283792124,
|
||||
"name": "CVE-2025-69212",
|
||||
"full_name": "w3nch\/CVE-2025-69212",
|
||||
"owner": {
|
||||
"login": "w3nch",
|
||||
"id": 133785769,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/133785769?v=4",
|
||||
"html_url": "https:\/\/github.com\/w3nch",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/w3nch\/CVE-2025-69212",
|
||||
"description": null,
|
||||
"fork": false,
|
||||
"created_at": "2026-06-29T08:39:18Z",
|
||||
"updated_at": "2026-06-29T08:48:15Z",
|
||||
"pushed_at": "2026-06-29T08:48:12Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 1,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
]
|
||||
@@ -631,10 +631,10 @@
|
||||
"description": "A sophisticated GUI tool for creating malicious RAR archives that exploit the WinRAR path traversal vulnerability (CVE-2025-8088) using ADS and RAR5 header manipulation.",
|
||||
"fork": false,
|
||||
"created_at": "2025-09-04T13:33:07Z",
|
||||
"updated_at": "2026-06-23T10:46:13Z",
|
||||
"updated_at": "2026-06-29T08:26:00Z",
|
||||
"pushed_at": "2025-09-04T13:46:26Z",
|
||||
"stargazers_count": 40,
|
||||
"watchers_count": 40,
|
||||
"stargazers_count": 41,
|
||||
"watchers_count": 41,
|
||||
"has_discussions": false,
|
||||
"forks_count": 16,
|
||||
"allow_forking": true,
|
||||
@@ -645,7 +645,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 16,
|
||||
"watchers": 40,
|
||||
"watchers": 41,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
|
||||
@@ -85,7 +85,7 @@
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"forks_count": 1,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
@@ -93,7 +93,7 @@
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"forks": 1,
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
|
||||
@@ -130,5 +130,42 @@
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
{
|
||||
"id": 1283753284,
|
||||
"name": "CVE-2026-20253",
|
||||
"full_name": "pssec-io\/CVE-2026-20253",
|
||||
"owner": {
|
||||
"login": "pssec-io",
|
||||
"id": 297554486,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/297554486?v=4",
|
||||
"html_url": "https:\/\/github.com\/pssec-io",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/pssec-io\/CVE-2026-20253",
|
||||
"description": "POC for CVE-2026-20253",
|
||||
"fork": false,
|
||||
"created_at": "2026-06-29T07:53:55Z",
|
||||
"updated_at": "2026-06-29T08:02:09Z",
|
||||
"pushed_at": "2026-06-29T08:01:00Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [
|
||||
"cve-2026-20253",
|
||||
"proof-of-concept",
|
||||
"pssec"
|
||||
],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
]
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.",
|
||||
"fork": false,
|
||||
"created_at": "2024-09-22T12:19:06Z",
|
||||
"updated_at": "2026-06-29T04:00:51Z",
|
||||
"pushed_at": "2026-06-29T04:00:47Z",
|
||||
"updated_at": "2026-06-29T10:48:48Z",
|
||||
"pushed_at": "2026-06-29T10:48:41Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
@@ -66,8 +66,8 @@
|
||||
"description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.",
|
||||
"fork": false,
|
||||
"created_at": "2026-02-26T05:21:28Z",
|
||||
"updated_at": "2026-06-29T04:00:14Z",
|
||||
"pushed_at": "2026-06-29T04:00:07Z",
|
||||
"updated_at": "2026-06-29T07:54:08Z",
|
||||
"pushed_at": "2026-06-29T07:54:04Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,10 +14,10 @@
|
||||
"description": "Poc for CVE-2026-20980, CVE-2026-20981, CVE-2026-20982",
|
||||
"fork": false,
|
||||
"created_at": "2026-06-01T13:14:47Z",
|
||||
"updated_at": "2026-06-29T03:32:08Z",
|
||||
"updated_at": "2026-06-29T12:01:48Z",
|
||||
"pushed_at": "2026-06-01T17:42:26Z",
|
||||
"stargazers_count": 23,
|
||||
"watchers_count": 23,
|
||||
"stargazers_count": 24,
|
||||
"watchers_count": 24,
|
||||
"has_discussions": false,
|
||||
"forks_count": 7,
|
||||
"allow_forking": true,
|
||||
@@ -28,7 +28,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 7,
|
||||
"watchers": 23,
|
||||
"watchers": 24,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
|
||||
@@ -0,0 +1,39 @@
|
||||
[
|
||||
{
|
||||
"id": 1283845760,
|
||||
"name": "CVE-2026-22226",
|
||||
"full_name": "LucasVanHaaren\/CVE-2026-22226",
|
||||
"owner": {
|
||||
"login": "LucasVanHaaren",
|
||||
"id": 29121316,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/29121316?v=4",
|
||||
"html_url": "https:\/\/github.com\/LucasVanHaaren",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/LucasVanHaaren\/CVE-2026-22226",
|
||||
"description": "Proof of Concept for the CVE-2026-22226",
|
||||
"fork": false,
|
||||
"created_at": "2026-06-29T09:39:38Z",
|
||||
"updated_at": "2026-06-29T09:54:41Z",
|
||||
"pushed_at": "2026-06-29T09:54:37Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [
|
||||
"cve-2026-22226",
|
||||
"proof-of-concept",
|
||||
"tp-link"
|
||||
],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
]
|
||||
@@ -14,10 +14,10 @@
|
||||
"description": "Next.js v16.2.4 Security PoC Collection (CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, CVE-2026-44581, CVE-2026-44580, CVE-2026-44577, CVE-2026-44576, CVE-2026-44582, CVE-2026-44572)",
|
||||
"fork": false,
|
||||
"created_at": "2026-05-07T23:00:40Z",
|
||||
"updated_at": "2026-06-26T22:12:47Z",
|
||||
"updated_at": "2026-06-29T08:50:52Z",
|
||||
"pushed_at": "2026-05-12T04:28:18Z",
|
||||
"stargazers_count": 169,
|
||||
"watchers_count": 169,
|
||||
"stargazers_count": 170,
|
||||
"watchers_count": 170,
|
||||
"has_discussions": true,
|
||||
"forks_count": 38,
|
||||
"allow_forking": true,
|
||||
@@ -28,7 +28,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 38,
|
||||
"watchers": 169,
|
||||
"watchers": 170,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
|
||||
@@ -179,8 +179,8 @@
|
||||
"description": "Double-free in Apache httpd mod_http2 stream cleanup leading to pre-auth RCE",
|
||||
"fork": false,
|
||||
"created_at": "2026-06-28T20:50:15Z",
|
||||
"updated_at": "2026-06-28T20:50:20Z",
|
||||
"pushed_at": "2026-06-28T20:50:16Z",
|
||||
"updated_at": "2026-06-29T08:33:10Z",
|
||||
"pushed_at": "2026-06-29T08:33:06Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
@@ -190,7 +190,19 @@
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"topics": [
|
||||
"apache",
|
||||
"cve",
|
||||
"cve-search",
|
||||
"cves",
|
||||
"go",
|
||||
"golang",
|
||||
"golang-cli",
|
||||
"http",
|
||||
"http-server",
|
||||
"rce",
|
||||
"rce-exploit"
|
||||
],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 0,
|
||||
|
||||
@@ -59,8 +59,8 @@
|
||||
"description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.",
|
||||
"fork": false,
|
||||
"created_at": "2026-02-03T19:46:10Z",
|
||||
"updated_at": "2026-06-29T03:51:45Z",
|
||||
"pushed_at": "2026-06-29T03:51:41Z",
|
||||
"updated_at": "2026-06-29T10:39:14Z",
|
||||
"pushed_at": "2026-06-29T10:39:10Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions",
|
||||
"fork": false,
|
||||
"created_at": "2026-03-26T04:38:27Z",
|
||||
"updated_at": "2026-06-29T04:16:25Z",
|
||||
"pushed_at": "2026-06-29T04:16:22Z",
|
||||
"updated_at": "2026-06-29T11:05:12Z",
|
||||
"pushed_at": "2026-06-29T11:05:09Z",
|
||||
"stargazers_count": 3,
|
||||
"watchers_count": 3,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.",
|
||||
"fork": false,
|
||||
"created_at": "2026-03-03T14:19:18Z",
|
||||
"updated_at": "2026-06-29T04:02:58Z",
|
||||
"pushed_at": "2026-06-29T04:02:54Z",
|
||||
"updated_at": "2026-06-29T10:50:54Z",
|
||||
"pushed_at": "2026-06-29T10:50:49Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.",
|
||||
"fork": false,
|
||||
"created_at": "2026-03-10T14:40:04Z",
|
||||
"updated_at": "2026-06-29T04:07:03Z",
|
||||
"pushed_at": "2026-06-29T04:06:59Z",
|
||||
"updated_at": "2026-06-29T10:55:21Z",
|
||||
"pushed_at": "2026-06-29T10:55:16Z",
|
||||
"stargazers_count": 2,
|
||||
"watchers_count": 2,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -52,7 +52,7 @@
|
||||
"stargazers_count": 3,
|
||||
"watchers_count": 3,
|
||||
"has_discussions": false,
|
||||
"forks_count": 1,
|
||||
"forks_count": 2,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
@@ -60,7 +60,7 @@
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 1,
|
||||
"forks": 2,
|
||||
"watchers": 3,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
@@ -80,10 +80,10 @@
|
||||
"description": "CVE-2026-26980 - Ghost CMS Content API SQL Injection",
|
||||
"fork": false,
|
||||
"created_at": "2026-06-26T05:57:53Z",
|
||||
"updated_at": "2026-06-28T07:50:05Z",
|
||||
"updated_at": "2026-06-29T11:25:40Z",
|
||||
"pushed_at": "2026-06-26T08:48:23Z",
|
||||
"stargazers_count": 10,
|
||||
"watchers_count": 10,
|
||||
"stargazers_count": 11,
|
||||
"watchers_count": 11,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
@@ -91,10 +91,21 @@
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"topics": [
|
||||
"api",
|
||||
"api-rest",
|
||||
"ghost-blog",
|
||||
"ghost-cms",
|
||||
"go",
|
||||
"golang",
|
||||
"golang-cli",
|
||||
"linux",
|
||||
"sqli",
|
||||
"sqlinjection"
|
||||
],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 10,
|
||||
"watchers": 11,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
|
||||
@@ -47,10 +47,10 @@
|
||||
"description": "Python POC, Exploit for CVE-2026-29000",
|
||||
"fork": false,
|
||||
"created_at": "2026-05-30T07:34:02Z",
|
||||
"updated_at": "2026-05-30T07:34:53Z",
|
||||
"updated_at": "2026-06-29T09:02:26Z",
|
||||
"pushed_at": "2026-05-30T07:34:48Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
@@ -61,7 +61,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 0,
|
||||
"watchers": 1,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
|
||||
@@ -756,8 +756,8 @@
|
||||
"description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.",
|
||||
"fork": false,
|
||||
"created_at": "2026-05-05T04:58:21Z",
|
||||
"updated_at": "2026-06-29T04:34:06Z",
|
||||
"pushed_at": "2026-06-29T04:34:02Z",
|
||||
"updated_at": "2026-06-29T11:23:50Z",
|
||||
"pushed_at": "2026-06-29T11:23:47Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
@@ -805,8 +805,8 @@
|
||||
"description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.",
|
||||
"fork": false,
|
||||
"created_at": "2026-05-06T09:49:14Z",
|
||||
"updated_at": "2026-06-29T04:34:49Z",
|
||||
"pushed_at": "2026-06-29T04:34:45Z",
|
||||
"updated_at": "2026-06-29T11:24:34Z",
|
||||
"pushed_at": "2026-06-29T11:24:30Z",
|
||||
"stargazers_count": 3,
|
||||
"watchers_count": 3,
|
||||
"has_discussions": false,
|
||||
@@ -1195,39 +1195,6 @@
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
{
|
||||
"id": 1234921588,
|
||||
"name": "CVE-2026-31431",
|
||||
"full_name": "Karim33z\/CVE-2026-31431",
|
||||
"owner": {
|
||||
"login": "Karim33z",
|
||||
"id": 211137778,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/211137778?v=4",
|
||||
"html_url": "https:\/\/github.com\/Karim33z",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/Karim33z\/CVE-2026-31431",
|
||||
"description": "Educational Proof of Concept for CVE-2026-31431 \/ Copy Fail Linux local privilege escalation via AF_ALG algif_aead",
|
||||
"fork": false,
|
||||
"created_at": "2026-05-10T20:12:29Z",
|
||||
"updated_at": "2026-05-10T21:08:44Z",
|
||||
"pushed_at": "2026-05-10T20:23:46Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
{
|
||||
"id": 1235059624,
|
||||
"name": "CVE-2026-31431",
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
|
||||
"fork": false,
|
||||
"created_at": "2026-03-28T20:49:46Z",
|
||||
"updated_at": "2026-06-29T04:17:32Z",
|
||||
"pushed_at": "2026-06-29T04:17:28Z",
|
||||
"updated_at": "2026-06-29T11:06:17Z",
|
||||
"pushed_at": "2026-06-29T11:06:12Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,10 +14,10 @@
|
||||
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
|
||||
"fork": false,
|
||||
"created_at": "2023-12-05T14:52:11Z",
|
||||
"updated_at": "2026-06-28T07:51:58Z",
|
||||
"updated_at": "2026-06-29T12:49:38Z",
|
||||
"pushed_at": "2026-06-28T05:39:27Z",
|
||||
"stargazers_count": 824,
|
||||
"watchers_count": 824,
|
||||
"stargazers_count": 825,
|
||||
"watchers_count": 825,
|
||||
"has_discussions": false,
|
||||
"forks_count": 121,
|
||||
"allow_forking": true,
|
||||
@@ -39,7 +39,7 @@
|
||||
],
|
||||
"visibility": "public",
|
||||
"forks": 121,
|
||||
"watchers": 824,
|
||||
"watchers": 825,
|
||||
"score": 0,
|
||||
"subscribers_count": 19
|
||||
},
|
||||
|
||||
@@ -1,35 +0,0 @@
|
||||
[
|
||||
{
|
||||
"id": 1234929842,
|
||||
"name": "CVE-2026-36981-Kernel-EoP-PoC",
|
||||
"full_name": "canomer\/CVE-2026-36981-Kernel-EoP-PoC",
|
||||
"owner": {
|
||||
"login": "canomer",
|
||||
"id": 120277270,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/120277270?v=4",
|
||||
"html_url": "https:\/\/github.com\/canomer",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/canomer\/CVE-2026-36981-Kernel-EoP-PoC",
|
||||
"description": "Project Date : Feb 2026 \/ Memory corruption vulnerability within the kernel driver of MiniTool. Demonstrates a debugger-assisted arbitrary kernel write primitive that can be leveraged toward privilege escalation.",
|
||||
"fork": false,
|
||||
"created_at": "2026-05-10T20:28:37Z",
|
||||
"updated_at": "2026-06-05T06:16:35Z",
|
||||
"pushed_at": "2026-05-10T22:31:30Z",
|
||||
"stargazers_count": 2,
|
||||
"watchers_count": 2,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 2,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
]
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "CVE-2026-40987 PoC",
|
||||
"fork": false,
|
||||
"created_at": "2026-05-11T18:17:53Z",
|
||||
"updated_at": "2026-06-12T15:42:18Z",
|
||||
"pushed_at": "2026-06-12T15:27:21Z",
|
||||
"updated_at": "2026-06-29T09:04:14Z",
|
||||
"pushed_at": "2026-06-29T09:04:11Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -14,8 +14,8 @@
|
||||
"description": "CVE-2026-41729 PoC",
|
||||
"fork": false,
|
||||
"created_at": "2026-05-13T14:15:13Z",
|
||||
"updated_at": "2026-06-12T15:42:29Z",
|
||||
"pushed_at": "2026-06-12T15:25:45Z",
|
||||
"updated_at": "2026-06-29T09:04:17Z",
|
||||
"pushed_at": "2026-06-29T09:04:11Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
|
||||
@@ -225,8 +225,8 @@
|
||||
"description": "Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.",
|
||||
"fork": false,
|
||||
"created_at": "2026-05-06T18:08:48Z",
|
||||
"updated_at": "2026-06-29T04:35:09Z",
|
||||
"pushed_at": "2026-06-29T04:35:05Z",
|
||||
"updated_at": "2026-06-29T11:24:51Z",
|
||||
"pushed_at": "2026-06-29T11:24:48Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
@@ -287,72 +287,6 @@
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
{
|
||||
"id": 1234624933,
|
||||
"name": "cpsniper",
|
||||
"full_name": "44pie\/cpsniper",
|
||||
"owner": {
|
||||
"login": "44pie",
|
||||
"id": 242387879,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/242387879?v=4",
|
||||
"html_url": "https:\/\/github.com\/44pie",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/44pie\/cpsniper",
|
||||
"description": "cPanelSniper STABLE - CVE-2026-41940 optimized for 10M+ targets",
|
||||
"fork": false,
|
||||
"created_at": "2026-05-10T12:35:57Z",
|
||||
"updated_at": "2026-05-27T10:16:55Z",
|
||||
"pushed_at": "2026-05-10T16:35:22Z",
|
||||
"stargazers_count": 2,
|
||||
"watchers_count": 2,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 2,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
{
|
||||
"id": 1234784359,
|
||||
"name": "cpanel-forensics",
|
||||
"full_name": "ngksiva\/cpanel-forensics",
|
||||
"owner": {
|
||||
"login": "ngksiva",
|
||||
"id": 113836253,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/113836253?v=4",
|
||||
"html_url": "https:\/\/github.com\/ngksiva",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/ngksiva\/cpanel-forensics",
|
||||
"description": "Форензика после CVE-2026-41940 (cPanel\/WHM) — bash-скрипт и чек-лист",
|
||||
"fork": false,
|
||||
"created_at": "2026-05-10T16:31:29Z",
|
||||
"updated_at": "2026-05-10T17:15:05Z",
|
||||
"pushed_at": "2026-05-10T17:15:01Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
{
|
||||
"id": 1235271179,
|
||||
"name": "CVE-2026-41940",
|
||||
@@ -642,12 +576,12 @@
|
||||
"description": "CVE-2026-41940 authentication bypass vulnerability proof-of-concept",
|
||||
"fork": false,
|
||||
"created_at": "2026-06-28T07:13:52Z",
|
||||
"updated_at": "2026-06-28T07:44:45Z",
|
||||
"updated_at": "2026-06-29T11:25:51Z",
|
||||
"pushed_at": "2026-06-28T07:42:43Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"stargazers_count": 2,
|
||||
"watchers_count": 2,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"forks_count": 1,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
@@ -660,8 +594,8 @@
|
||||
"cve-2026-41940-poc"
|
||||
],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 0,
|
||||
"forks": 1,
|
||||
"watchers": 2,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
|
||||
@@ -30,7 +30,7 @@
|
||||
"forks": 159,
|
||||
"watchers": 862,
|
||||
"score": 0,
|
||||
"subscribers_count": 5
|
||||
"subscribers_count": 6
|
||||
},
|
||||
{
|
||||
"id": 1238390311,
|
||||
|
||||
@@ -14,10 +14,10 @@
|
||||
"description": "CVE-2026-43503",
|
||||
"fork": false,
|
||||
"created_at": "2026-06-25T21:58:41Z",
|
||||
"updated_at": "2026-06-29T06:46:57Z",
|
||||
"updated_at": "2026-06-29T10:04:30Z",
|
||||
"pushed_at": "2026-06-25T22:42:25Z",
|
||||
"stargazers_count": 8,
|
||||
"watchers_count": 8,
|
||||
"stargazers_count": 9,
|
||||
"watchers_count": 9,
|
||||
"has_discussions": false,
|
||||
"forks_count": 1,
|
||||
"allow_forking": true,
|
||||
@@ -28,7 +28,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 1,
|
||||
"watchers": 8,
|
||||
"watchers": 9,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
@@ -47,10 +47,10 @@
|
||||
"description": null,
|
||||
"fork": false,
|
||||
"created_at": "2026-06-26T00:20:58Z",
|
||||
"updated_at": "2026-06-29T06:21:12Z",
|
||||
"updated_at": "2026-06-29T07:46:38Z",
|
||||
"pushed_at": "2026-06-26T00:22:35Z",
|
||||
"stargazers_count": 10,
|
||||
"watchers_count": 10,
|
||||
"stargazers_count": 11,
|
||||
"watchers_count": 11,
|
||||
"has_discussions": false,
|
||||
"forks_count": 3,
|
||||
"allow_forking": true,
|
||||
@@ -61,7 +61,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 3,
|
||||
"watchers": 10,
|
||||
"watchers": 11,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
|
||||
@@ -212,8 +212,8 @@
|
||||
"description": "Manage and recover BitLocker encrypted drives with this tool for Windows 11 recovery key management and educational study of CVE-2026-45585.",
|
||||
"fork": false,
|
||||
"created_at": "2026-06-16T07:21:36Z",
|
||||
"updated_at": "2026-06-29T04:41:08Z",
|
||||
"pushed_at": "2026-06-29T04:41:04Z",
|
||||
"updated_at": "2026-06-29T11:31:18Z",
|
||||
"pushed_at": "2026-06-29T11:31:14Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
|
||||
+10
-10
@@ -14,12 +14,12 @@
|
||||
"description": "PACKET_EDIT_MEME.c (aka CVE-2026-46331): yet another page cache poisoning nightmare",
|
||||
"fork": false,
|
||||
"created_at": "2026-06-17T04:09:56Z",
|
||||
"updated_at": "2026-06-29T04:36:58Z",
|
||||
"updated_at": "2026-06-29T12:19:47Z",
|
||||
"pushed_at": "2026-06-17T04:55:06Z",
|
||||
"stargazers_count": 92,
|
||||
"watchers_count": 92,
|
||||
"stargazers_count": 95,
|
||||
"watchers_count": 95,
|
||||
"has_discussions": false,
|
||||
"forks_count": 27,
|
||||
"forks_count": 31,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
@@ -27,8 +27,8 @@
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 27,
|
||||
"watchers": 92,
|
||||
"forks": 31,
|
||||
"watchers": 95,
|
||||
"score": 0,
|
||||
"subscribers_count": 1
|
||||
},
|
||||
@@ -47,10 +47,10 @@
|
||||
"description": "CVE-2026-46331",
|
||||
"fork": false,
|
||||
"created_at": "2026-06-26T18:57:23Z",
|
||||
"updated_at": "2026-06-29T03:14:03Z",
|
||||
"updated_at": "2026-06-29T08:42:19Z",
|
||||
"pushed_at": "2026-06-26T19:09:41Z",
|
||||
"stargazers_count": 9,
|
||||
"watchers_count": 9,
|
||||
"stargazers_count": 10,
|
||||
"watchers_count": 10,
|
||||
"has_discussions": false,
|
||||
"forks_count": 3,
|
||||
"allow_forking": true,
|
||||
@@ -61,7 +61,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 3,
|
||||
"watchers": 9,
|
||||
"watchers": 10,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
|
||||
@@ -47,10 +47,10 @@
|
||||
"description": "PoC for CVE-2026-48907 - Joomla! JCE extension < 2.9.99.5 unauthenticated RCE",
|
||||
"fork": false,
|
||||
"created_at": "2026-06-11T13:14:16Z",
|
||||
"updated_at": "2026-06-24T06:38:47Z",
|
||||
"updated_at": "2026-06-29T07:23:04Z",
|
||||
"pushed_at": "2026-06-11T14:38:26Z",
|
||||
"stargazers_count": 11,
|
||||
"watchers_count": 11,
|
||||
"stargazers_count": 12,
|
||||
"watchers_count": 12,
|
||||
"has_discussions": false,
|
||||
"forks_count": 3,
|
||||
"allow_forking": true,
|
||||
@@ -61,7 +61,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 3,
|
||||
"watchers": 11,
|
||||
"watchers": 12,
|
||||
"score": 0,
|
||||
"subscribers_count": 2
|
||||
},
|
||||
@@ -311,10 +311,10 @@
|
||||
"description": "cve-2026-48907 scanner",
|
||||
"fork": false,
|
||||
"created_at": "2026-06-27T04:48:09Z",
|
||||
"updated_at": "2026-06-29T06:47:15Z",
|
||||
"updated_at": "2026-06-29T12:47:20Z",
|
||||
"pushed_at": "2026-06-27T05:25:46Z",
|
||||
"stargazers_count": 34,
|
||||
"watchers_count": 34,
|
||||
"stargazers_count": 39,
|
||||
"watchers_count": 39,
|
||||
"has_discussions": false,
|
||||
"forks_count": 9,
|
||||
"allow_forking": true,
|
||||
@@ -325,7 +325,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 9,
|
||||
"watchers": 34,
|
||||
"watchers": 39,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
@@ -394,5 +394,38 @@
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
{
|
||||
"id": 1283722770,
|
||||
"name": "Joomla_CVE_2026_48907",
|
||||
"full_name": "Almavj\/Joomla_CVE_2026_48907",
|
||||
"owner": {
|
||||
"login": "Almavj",
|
||||
"id": 155616927,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/155616927?v=4",
|
||||
"html_url": "https:\/\/github.com\/Almavj",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/Almavj\/Joomla_CVE_2026_48907",
|
||||
"description": "cve-2026-48907 scanner",
|
||||
"fork": false,
|
||||
"created_at": "2026-06-29T07:17:32Z",
|
||||
"updated_at": "2026-06-29T07:27:16Z",
|
||||
"pushed_at": "2026-06-29T07:27:12Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
]
|
||||
@@ -0,0 +1,35 @@
|
||||
[
|
||||
{
|
||||
"id": 1283925174,
|
||||
"name": "By-Poloss..-..CVE-2026-48939",
|
||||
"full_name": "Polosss\/By-Poloss..-..CVE-2026-48939",
|
||||
"owner": {
|
||||
"login": "Polosss",
|
||||
"id": 178707366,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/178707366?v=4",
|
||||
"html_url": "https:\/\/github.com\/Polosss",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/Polosss\/By-Poloss..-..CVE-2026-48939",
|
||||
"description": "iCagenda Unauthenticated File Upload to RCE",
|
||||
"fork": false,
|
||||
"created_at": "2026-06-29T11:09:38Z",
|
||||
"updated_at": "2026-06-29T11:11:43Z",
|
||||
"pushed_at": "2026-06-29T11:11:39Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
]
|
||||
@@ -47,10 +47,10 @@
|
||||
"description": "HTTP\/2 Bomb PoC — CVE-2026-49975 (HPACK indexed reference bomb + flow-control stall)",
|
||||
"fork": false,
|
||||
"created_at": "2026-06-04T06:22:54Z",
|
||||
"updated_at": "2026-06-28T14:28:46Z",
|
||||
"updated_at": "2026-06-29T11:05:55Z",
|
||||
"pushed_at": "2026-06-04T06:23:03Z",
|
||||
"stargazers_count": 27,
|
||||
"watchers_count": 27,
|
||||
"stargazers_count": 28,
|
||||
"watchers_count": 28,
|
||||
"has_discussions": false,
|
||||
"forks_count": 9,
|
||||
"allow_forking": true,
|
||||
@@ -61,7 +61,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 9,
|
||||
"watchers": 27,
|
||||
"watchers": 28,
|
||||
"score": 0,
|
||||
"subscribers_count": 3
|
||||
},
|
||||
@@ -113,10 +113,10 @@
|
||||
"description": "Disclosed on June 3, 2026, the \"HTTP\/2 Bomb\" is an unauthenticated remote DoS that combines an HPACK compression bomb with a Slowloris-style hold to exhaust server memory. It affects default HTTP\/2 configurations of **nginx, Apache httpd, Microsoft IIS, Envoy, and Cloudflare Pingora**.",
|
||||
"fork": false,
|
||||
"created_at": "2026-06-08T14:44:32Z",
|
||||
"updated_at": "2026-06-11T10:24:45Z",
|
||||
"updated_at": "2026-06-29T10:57:08Z",
|
||||
"pushed_at": "2026-06-08T14:58:44Z",
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"stargazers_count": 2,
|
||||
"watchers_count": 2,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
@@ -127,7 +127,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 1,
|
||||
"watchers": 2,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
|
||||
@@ -31,5 +31,38 @@
|
||||
"watchers": 8,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
},
|
||||
{
|
||||
"id": 1283978469,
|
||||
"name": "CVE-2026-55200",
|
||||
"full_name": "xd20111\/CVE-2026-55200",
|
||||
"owner": {
|
||||
"login": "xd20111",
|
||||
"id": 34960106,
|
||||
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/34960106?v=4",
|
||||
"html_url": "https:\/\/github.com\/xd20111",
|
||||
"user_view_type": "public"
|
||||
},
|
||||
"html_url": "https:\/\/github.com\/xd20111\/CVE-2026-55200",
|
||||
"description": "CVE-2026-55200 - Critical libssh2 Remote Code Execution Vulnerability",
|
||||
"fork": false,
|
||||
"created_at": "2026-06-29T12:11:55Z",
|
||||
"updated_at": "2026-06-29T12:12:46Z",
|
||||
"pushed_at": "2026-06-29T12:12:33Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
"is_template": false,
|
||||
"web_commit_signoff_required": false,
|
||||
"has_pull_requests": true,
|
||||
"pull_request_creation_policy": "all",
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 0,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
]
|
||||
@@ -14,10 +14,10 @@
|
||||
"description": null,
|
||||
"fork": false,
|
||||
"created_at": "2026-06-28T19:30:00Z",
|
||||
"updated_at": "2026-06-28T19:33:52Z",
|
||||
"updated_at": "2026-06-29T09:02:17Z",
|
||||
"pushed_at": "2026-06-28T19:33:48Z",
|
||||
"stargazers_count": 0,
|
||||
"watchers_count": 0,
|
||||
"stargazers_count": 1,
|
||||
"watchers_count": 1,
|
||||
"has_discussions": false,
|
||||
"forks_count": 0,
|
||||
"allow_forking": true,
|
||||
@@ -28,7 +28,7 @@
|
||||
"topics": [],
|
||||
"visibility": "public",
|
||||
"forks": 0,
|
||||
"watchers": 0,
|
||||
"watchers": 1,
|
||||
"score": 0,
|
||||
"subscribers_count": 0
|
||||
}
|
||||
|
||||
@@ -215,14 +215,14 @@
|
||||
|
||||
### CVE-2026-2586 (2026-05-19)
|
||||
|
||||
<code>An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console. A user with access to the panel can send crafted requests that allow the execution of arbitrary operating system commands with the privileges of the application service user.
|
||||
<code>An authenticated Remote Code Execution (RCE) vulnerability was identified in GlassFish's Administration Console. A user with access to the panel can send crafted requests that allow the execution of arbitrary operating system commands with the privileges of the application service user. This issue affects Eclipse GlassFish: from 8.0.0 to 8.0.1, fixed in 8.0.2; 7.1.0, fixed in 7.1.1; from 7.0.0 to 7.0.25, fixed in 7.0.26. Impact on versions from 5.1.0 to 6.2.5 is unknown.
|
||||
</code>
|
||||
|
||||
- [DeepSecurityResearch/CVE-2026-2586](https://github.com/DeepSecurityResearch/CVE-2026-2586)
|
||||
|
||||
### CVE-2026-2587 (2026-05-19)
|
||||
|
||||
<code>A critical Remote Code Execution (RCE) vulnerability was identified in the server-side template rendering mechanism used by the Glassfish gadget handler. The application processes .xml files and evaluates user-supplied values within a context where Expression Language (EL) “expressions” are processed without proper sanitization or escaping. By injecting expressions such as #{7*7}, the server returns 49, confirming server-side EL evaluation. This issue allows a remote attacker to fully compromise the underlying host, enabling capabilities as reading/modifying data, executing arbitrary commands, persistence, and lateral movement.
|
||||
<code>A critical Remote Code Execution (RCE) vulnerability was identified in the server-side template rendering mechanism used by the Glassfish gadget handler. The application processes .xml files and evaluates user-supplied values within a context where Expression Language (EL) “expressions” are processed without proper sanitization or escaping. By injecting expressions such as #{7*7}, the server returns 49, confirming server-side EL evaluation. This issue allows a remote attacker to fully compromise the underlying host, enabling capabilities as reading/modifying data, executing arbitrary commands, persistence, and lateral movement. This issue affects Eclipse GlassFish: from 8.0.0 to 8.0.1, fixed in 8.0.2; 7.1.0, fixed in 7.1.1; from 7.0.0 to 7.0.25, fixed in 7.0.26. Impact on versions from 5.1.0 to 6.2.5 is unknown.
|
||||
</code>
|
||||
|
||||
- [Bhanunamikaze/CVE-2026-2587-Exploit-POC](https://github.com/Bhanunamikaze/CVE-2026-2587-Exploit-POC)
|
||||
@@ -1171,6 +1171,7 @@
|
||||
- [0xBlackash/CVE-2026-20253](https://github.com/0xBlackash/CVE-2026-20253)
|
||||
- [HORKimhab/CVE-2026-20253](https://github.com/HORKimhab/CVE-2026-20253)
|
||||
- [fevar54/CVE-2026-20253-Splunk-Enterprise-Pre-Auth-RCE-](https://github.com/fevar54/CVE-2026-20253-Splunk-Enterprise-Pre-Auth-RCE-)
|
||||
- [pssec-io/CVE-2026-20253](https://github.com/pssec-io/CVE-2026-20253)
|
||||
|
||||
### CVE-2026-20262 (2026-06-15)
|
||||
|
||||
@@ -1262,6 +1263,13 @@
|
||||
|
||||
- [daytriftnewgen/CVE-2026-21876](https://github.com/daytriftnewgen/CVE-2026-21876)
|
||||
|
||||
### CVE-2026-22226 (2026-02-02)
|
||||
|
||||
<code>A command injection vulnerability may be exploited after the admin's authentication in the VPN server configuration module on TP-Link Archer BE230 v1.2 and Archer AX73 v2. Successful exploitation could allow an attacker to gain full administrative control of the device, resulting in severe compromise of configuration integrity, network security, and service availability.\n\n\nThis CVE covers one of multiple distinct OS command injection issues identified across separate code paths. Although similar in nature, each instance is tracked under a unique CVE ID.\n\n\nThis issue affects Archer BE230 v1.2 < 1.2.4 Build 20251218 rel.70420 and Archer AX73 v2 < 1.3.1\nBuild 20260430.
|
||||
</code>
|
||||
|
||||
- [LucasVanHaaren/CVE-2026-22226](https://github.com/LucasVanHaaren/CVE-2026-22226)
|
||||
|
||||
### CVE-2026-22356 (2026-02-20)
|
||||
|
||||
<code>Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Automattic Jetpack CRM zero-bs-crm allows PHP Local File Inclusion.This issue affects Jetpack CRM: from n/a through <= 6.7.0.
|
||||
@@ -1800,7 +1808,6 @@
|
||||
- [Helios973/CVE-2026-31431_exp.c](https://github.com/Helios973/CVE-2026-31431_exp.c)
|
||||
- [haydenjames/CVE-2026-31431-check](https://github.com/haydenjames/CVE-2026-31431-check)
|
||||
- [vorkampfer/copyfail2_electric_boogaloo_fix](https://github.com/vorkampfer/copyfail2_electric_boogaloo_fix)
|
||||
- [Karim33z/CVE-2026-31431](https://github.com/Karim33z/CVE-2026-31431)
|
||||
- [Lutfifakee-Project/CVE-2026-31431](https://github.com/Lutfifakee-Project/CVE-2026-31431)
|
||||
- [u1tr0nex/CVE-2026-31431-CopyFail-Lab](https://github.com/u1tr0nex/CVE-2026-31431-CopyFail-Lab)
|
||||
- [mauricioportela/CVE-2026-31431-Analysis](https://github.com/mauricioportela/CVE-2026-31431-Analysis)
|
||||
@@ -2241,9 +2248,6 @@
|
||||
### CVE-2026-36980
|
||||
- [canomer/CVE-2026-36980-Kernel-BSOD-DoS-PoC](https://github.com/canomer/CVE-2026-36980-Kernel-BSOD-DoS-PoC)
|
||||
|
||||
### CVE-2026-36981
|
||||
- [canomer/CVE-2026-36981-Kernel-EoP-PoC](https://github.com/canomer/CVE-2026-36981-Kernel-EoP-PoC)
|
||||
|
||||
### CVE-2026-37064
|
||||
- [jfs-jfs/CVE-2026-37064](https://github.com/jfs-jfs/CVE-2026-37064)
|
||||
|
||||
@@ -2621,8 +2625,6 @@
|
||||
- [Jenderal92/CVE-2026-41940](https://github.com/Jenderal92/CVE-2026-41940)
|
||||
- [Defacto-ridgepole254/CVE-2026-41940-Exploit-PoC](https://github.com/Defacto-ridgepole254/CVE-2026-41940-Exploit-PoC)
|
||||
- [murrez/CVE-2026-41940](https://github.com/murrez/CVE-2026-41940)
|
||||
- [44pie/cpsniper](https://github.com/44pie/cpsniper)
|
||||
- [ngksiva/cpanel-forensics](https://github.com/ngksiva/cpanel-forensics)
|
||||
- [anach-ai/CVE-2026-41940](https://github.com/anach-ai/CVE-2026-41940)
|
||||
- [tc4dy/CVE-2026-41940-PoC-Exploit](https://github.com/tc4dy/CVE-2026-41940-PoC-Exploit)
|
||||
- [limo57640-crypto/cpanel-cve-41940-detector](https://github.com/limo57640-crypto/cpanel-cve-41940-detector)
|
||||
@@ -3481,6 +3483,7 @@
|
||||
- [gh1mau/masta-cve-2026-48907](https://github.com/gh1mau/masta-cve-2026-48907)
|
||||
- [grayxploit/CVE-2026-48907](https://github.com/grayxploit/CVE-2026-48907)
|
||||
- [xitexploiter96-dot/CVE-2026-48907-](https://github.com/xitexploiter96-dot/CVE-2026-48907-)
|
||||
- [Almavj/Joomla_CVE_2026_48907](https://github.com/Almavj/Joomla_CVE_2026_48907)
|
||||
|
||||
### CVE-2026-48908 (2026-06-20)
|
||||
|
||||
@@ -3500,6 +3503,13 @@
|
||||
|
||||
- [Is4yev/CVE-2026-48909](https://github.com/Is4yev/CVE-2026-48909)
|
||||
|
||||
### CVE-2026-48939 (2026-06-20)
|
||||
|
||||
<code>A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment feature, ultimately resulting in PHP code upload and execution.
|
||||
</code>
|
||||
|
||||
- [Polosss/By-Poloss..-..CVE-2026-48939](https://github.com/Polosss/By-Poloss..-..CVE-2026-48939)
|
||||
|
||||
### CVE-2026-48962 (2026-05-27)
|
||||
|
||||
<code>IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob.\n\n_parseOutputGlob() wraps the caller-supplied output glob string in double quotes and stores it in the parser state; _getFiles() then runs the stored expression through eval STRING. A literal double quote in the output glob closes the dquote wrapper, and the characters that follow are evaluated as Perl.\n\nArbitrary Perl in the output glob executes at the calling process's privilege.
|
||||
@@ -3809,6 +3819,7 @@
|
||||
</code>
|
||||
|
||||
- [0xBlackash/CVE-2026-55200](https://github.com/0xBlackash/CVE-2026-55200)
|
||||
- [xd20111/CVE-2026-55200](https://github.com/xd20111/CVE-2026-55200)
|
||||
|
||||
### CVE-2026-55584
|
||||
- [mirackayikci/CVE-2026-55584](https://github.com/mirackayikci/CVE-2026-55584)
|
||||
@@ -3868,6 +3879,7 @@
|
||||
- [shawarkhanethicalhacker/CVE-2025-0133-exploit](https://github.com/shawarkhanethicalhacker/CVE-2025-0133-exploit)
|
||||
- [adhamelhansye/CVE-2025-0133](https://github.com/adhamelhansye/CVE-2025-0133)
|
||||
- [cruxN3T/CVE-2025-0133](https://github.com/cruxN3T/CVE-2025-0133)
|
||||
- [radityahack/cve-2025-0133](https://github.com/radityahack/cve-2025-0133)
|
||||
|
||||
### CVE-2025-0184 (2025-03-20)
|
||||
|
||||
@@ -15209,7 +15221,9 @@
|
||||
</code>
|
||||
|
||||
- [lukasz-rybak/CVE-2025-69212](https://github.com/lukasz-rybak/CVE-2025-69212)
|
||||
- [jonathan-corbin/CVE-2025-69212-Authenticated-RCE-PoC](https://github.com/jonathan-corbin/CVE-2025-69212-Authenticated-RCE-PoC)
|
||||
- [tohib09/CVE-2025-69212-PoC](https://github.com/tohib09/CVE-2025-69212-PoC)
|
||||
- [w3nch/CVE-2025-69212](https://github.com/w3nch/CVE-2025-69212)
|
||||
|
||||
### CVE-2025-69213 (2026-02-04)
|
||||
|
||||
@@ -18044,6 +18058,7 @@
|
||||
- [rvzsec/CVE-2024-9264](https://github.com/rvzsec/CVE-2024-9264)
|
||||
- [patrickpichler/grafana-CVE-2024-9264](https://github.com/patrickpichler/grafana-CVE-2024-9264)
|
||||
- [amalpvatayam67/day05-grafana-sqlexpr-lab](https://github.com/amalpvatayam67/day05-grafana-sqlexpr-lab)
|
||||
- [yeonchoda/CVE-2024-9264](https://github.com/yeonchoda/CVE-2024-9264)
|
||||
|
||||
### CVE-2024-9290 (2024-12-13)
|
||||
|
||||
@@ -22030,13 +22045,6 @@
|
||||
|
||||
- [MathSabo/CVE-2024-33297](https://github.com/MathSabo/CVE-2024-33297)
|
||||
|
||||
### CVE-2024-33298 (2025-01-10)
|
||||
|
||||
<code>Microweber Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the create new backup function in the endpoint /admin/module/view?type=admin__backup
|
||||
</code>
|
||||
|
||||
- [MathSabo/CVE-2024-33298](https://github.com/MathSabo/CVE-2024-33298)
|
||||
|
||||
### CVE-2024-33299 (2025-01-10)
|
||||
|
||||
<code>Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the First Name and Last Name parameters in the endpoint /admin/module/view?type=users
|
||||
@@ -70569,6 +70577,13 @@
|
||||
- [zhangkaibin0921/CVE-2012-2122](https://github.com/zhangkaibin0921/CVE-2012-2122)
|
||||
- [netw0rk7/CVE-2012-2122-Home-Lab](https://github.com/netw0rk7/CVE-2012-2122-Home-Lab)
|
||||
|
||||
### CVE-2012-2459 (2012-08-06)
|
||||
|
||||
<code>Unspecified vulnerability in bitcoind and Bitcoin-Qt before 0.4.6, 0.5.x before 0.5.5, 0.6.0.x before 0.6.0.7, and 0.6.x before 0.6.2 allows remote attackers to cause a denial of service (block-processing outage and incorrect block count) via unknown behavior on a Bitcoin network.
|
||||
</code>
|
||||
|
||||
- [systemslibrarian/crypto-lab-merkle-proofs](https://github.com/systemslibrarian/crypto-lab-merkle-proofs)
|
||||
|
||||
### CVE-2012-2593 (2020-02-06)
|
||||
|
||||
<code>Cross-site scripting (XSS) vulnerability in the administrative interface in Atmail Webmail Server 6.4 allows remote attackers to inject arbitrary web script or HTML via the Date field of an email.
|
||||
|
||||
Reference in new issue
Block a user