nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/07/10 12:52:00

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-07-10 21:52:00 +09:00
1 parent e6132d038c
commit a7cec6728e
91 files changed
+784 -380
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2013/CVE-2013-5211.json
+4 -4
View File
@@ -123,10 +123,10 @@
"description": null,
"fork": false,
"created_at": "2023-05-03T17:20:51Z",
"updated_at": "2026-01-04T06:15:52Z",
"updated_at": "2026-07-10T10:04:04Z",
"pushed_at": "2023-05-03T19:24:05Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -137,7 +137,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 1
},
2016/CVE-2016-7434.json
+4 -4
View File
@@ -54,10 +54,10 @@
"description": null,
"fork": false,
"created_at": "2016-11-27T01:14:20Z",
"updated_at": "2025-11-28T02:05:35Z",
"updated_at": "2026-07-10T10:04:05Z",
"pushed_at": "2016-11-27T01:18:38Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -68,7 +68,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 1
},
2017/CVE-2017-5123.json
+4 -4
View File
@@ -172,15 +172,15 @@
{
"id": 612740053,
"name": "CVE-2017-5123",
"full_name": "ahiahai242\/CVE-2017-5123",
"full_name": "h1bAna\/CVE-2017-5123",
"owner": {
"login": "ahiahai242",
"login": "h1bAna",
"id": 70074237,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/70074237?v=4",
"html_url": "https:\/\/github.com\/ahiahai242",
"html_url": "https:\/\/github.com\/h1bAna",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ahiahai242\/CVE-2017-5123",
"html_url": "https:\/\/github.com\/h1bAna\/CVE-2017-5123",
"description": null,
"fork": false,
"created_at": "2023-03-11T20:45:15Z",
2017/CVE-2017-6971.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Exploit for CVE-2017-6971 remote command execution in nfsen 1.3.7.",
"fork": false,
"created_at": "2017-04-10T00:13:24Z",
"updated_at": "2024-08-12T19:28:59Z",
"updated_at": "2026-07-10T06:41:03Z",
"pushed_at": "2017-04-10T16:06:56Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 1
},
2018/CVE-2018-8897.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "Arbitrary code execution with kernel privileges using CVE-2018-8897.",
"fork": false,
"created_at": "2018-05-13T19:34:17Z",
"updated_at": "2026-06-14T16:15:18Z",
"updated_at": "2026-07-10T09:18:51Z",
"pushed_at": "2018-05-18T12:26:53Z",
"stargazers_count": 421,
"watchers_count": 421,
"stargazers_count": 422,
"watchers_count": 422,
"has_discussions": false,
"forks_count": 95,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 95,
"watchers": 421,
"watchers": 422,
"score": 0,
"subscribers_count": 15
},
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-07-10T04:28:22Z",
"pushed_at": "2026-07-10T04:28:18Z",
"updated_at": "2026-07-10T11:14:10Z",
"pushed_at": "2026-07-10T11:13:40Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2019/CVE-2019-17558.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340",
"fork": false,
"created_at": "2020-04-01T09:33:35Z",
"updated_at": "2026-07-10T02:34:12Z",
"updated_at": "2026-07-10T07:54:51Z",
"pushed_at": "2021-04-04T09:13:57Z",
"stargazers_count": 4288,
"watchers_count": 4288,
"stargazers_count": 4289,
"watchers_count": 4289,
"has_discussions": false,
"forks_count": 1083,
"allow_forking": true,
@@ -81,7 +81,7 @@
],
"visibility": "public",
"forks": 1083,
"watchers": 4288,
"watchers": 4289,
"score": 0,
"subscribers_count": 148
},
2020/CVE-2020-1472.json
+2 -2
View File
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-07-10T05:10:19Z",
"pushed_at": "2026-07-10T05:10:14Z",
"updated_at": "2026-07-10T11:28:49Z",
"pushed_at": "2026-07-10T11:28:20Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2020/CVE-2020-14882.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Exphub[漏洞利用脚本库] 包括Webloigc、Struts2、Tomcat、Nexus、Solr、Jboss、Drupal的漏洞利用脚本，最新添加CVE-2020-14882、CVE-2020-11444、CVE-2020-10204、CVE-2020-10199、CVE-2020-1938、CVE-2020-2551、CVE-2020-2555、CVE-2020-2883、CVE-2019-17558、CVE-2019-6340",
"fork": false,
"created_at": "2020-04-01T09:33:35Z",
"updated_at": "2026-07-10T02:34:12Z",
"updated_at": "2026-07-10T07:54:51Z",
"pushed_at": "2021-04-04T09:13:57Z",
"stargazers_count": 4288,
"watchers_count": 4288,
"stargazers_count": 4289,
"watchers_count": 4289,
"has_discussions": false,
"forks_count": 1083,
"allow_forking": true,
@@ -48,7 +48,7 @@
],
"visibility": "public",
"forks": 1083,
"watchers": 4288,
"watchers": 4289,
"score": 0,
"subscribers_count": 148
},
2020/CVE-2020-1938.json
+4 -4
View File
@@ -377,10 +377,10 @@
"description": "Ghostcat read file\/code execute,CNVD-2020-10487(CVE-2020-1938) ",
"fork": false,
"created_at": "2020-02-22T16:16:20Z",
"updated_at": "2026-07-02T22:18:16Z",
"updated_at": "2026-07-10T07:51:45Z",
"pushed_at": "2020-03-09T14:51:43Z",
"stargazers_count": 419,
"watchers_count": 419,
"stargazers_count": 420,
"watchers_count": 420,
"has_discussions": false,
"forks_count": 112,
"allow_forking": true,
@@ -397,7 +397,7 @@
],
"visibility": "public",
"forks": 112,
"watchers": 419,
"watchers": 420,
"score": 0,
"subscribers_count": 3
},
2020/CVE-2020-8287.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
2021/CVE-2021-23358.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Detection script for cve-2021-23358",
"fork": false,
"created_at": "2023-02-25T19:12:13Z",
"updated_at": "2025-08-29T16:33:49Z",
"updated_at": "2026-07-10T07:41:02Z",
"pushed_at": "2023-02-25T19:16:22Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 1,
"score": 0,
"subscribers_count": 1
},
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-07-10T05:05:34Z",
"pushed_at": "2026-07-10T05:05:22Z",
"updated_at": "2026-07-10T11:31:49Z",
"pushed_at": "2026-07-10T11:31:34Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-4034.json
+5 -5
View File
@@ -150,12 +150,12 @@
"description": "Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation",
"fork": false,
"created_at": "2022-01-26T14:26:10Z",
"updated_at": "2026-07-08T22:02:31Z",
"updated_at": "2026-07-10T09:01:54Z",
"pushed_at": "2022-06-21T14:52:05Z",
"stargazers_count": 1313,
"watchers_count": 1313,
"has_discussions": false,
"forks_count": 208,
"forks_count": 209,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -165,7 +165,7 @@
"cve-2021-4034"
],
"visibility": "public",
"forks": 208,
"forks": 209,
"watchers": 1313,
"score": 0,
"subscribers_count": 12
@@ -2452,8 +2452,8 @@
"description": "Whitehat School 4기 CVE-2021-4034 분석 및 POC 작성",
"fork": false,
"created_at": "2026-07-09T08:43:31Z",
"updated_at": "2026-07-09T15:06:56Z",
"pushed_at": "2026-07-09T15:05:50Z",
"updated_at": "2026-07-10T08:23:47Z",
"pushed_at": "2026-07-10T08:23:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2021/CVE-2021-42287.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2021-42287\/CVE-2021-42278 Scanner & Exploiter.",
"fork": false,
"created_at": "2021-12-11T19:27:30Z",
"updated_at": "2026-07-07T02:26:11Z",
"updated_at": "2026-07-10T08:07:48Z",
"pushed_at": "2021-12-16T09:50:15Z",
"stargazers_count": 1407,
"watchers_count": 1407,
"stargazers_count": 1408,
"watchers_count": 1408,
"has_discussions": false,
"forks_count": 315,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 315,
"watchers": 1407,
"watchers": 1408,
"score": 0,
"subscribers_count": 24
},
2022/CVE-2022-0847.json
+4 -4
View File
@@ -1237,10 +1237,10 @@
"description": "A collection of exploits and documentation that can be used to exploit the Linux Dirty Pipe vulnerability.",
"fork": false,
"created_at": "2022-03-12T20:57:24Z",
"updated_at": "2026-07-08T22:01:39Z",
"updated_at": "2026-07-10T10:06:26Z",
"pushed_at": "2023-05-20T05:55:45Z",
"stargazers_count": 724,
"watchers_count": 724,
"stargazers_count": 725,
"watchers_count": 725,
"has_discussions": false,
"forks_count": 160,
"allow_forking": true,
@@ -1251,7 +1251,7 @@
"topics": [],
"visibility": "public",
"forks": 160,
"watchers": 724,
"watchers": 725,
"score": 0,
"subscribers_count": 13
},
2022/CVE-2022-20409.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 210,
"watchers_count": 210,
"has_discussions": false,
"forks_count": 29,
"forks_count": 30,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -31,7 +31,7 @@
"kernel-exploitation"
],
"visibility": "public",
"forks": 29,
"forks": 30,
"watchers": 210,
"score": 0,
"subscribers_count": 5
2022/CVE-2022-22947.json
-33
View File
@@ -2022,38 +2022,5 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1295273036,
"name": "CVE-2022-22947",
"full_name": "Y0ngC1oud\/CVE-2022-22947",
"owner": {
"login": "Y0ngC1oud",
"id": 84855371,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/84855371?v=4",
"html_url": "https:\/\/github.com\/Y0ngC1oud",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Y0ngC1oud\/CVE-2022-22947",
"description": null,
"fork": false,
"created_at": "2026-07-09T13:16:21Z",
"updated_at": "2026-07-10T04:08:50Z",
"pushed_at": "2026-07-10T04:08:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2022/CVE-2022-26134.json
+36
View File
@@ -2492,5 +2492,41 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1296346833,
"name": "CVE-2022-26134",
"full_name": "RootEvil333\/CVE-2022-26134",
"owner": {
"login": "RootEvil333",
"id": 297998846,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/297998846?v=4",
"html_url": "https:\/\/github.com\/RootEvil333",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/RootEvil333\/CVE-2022-26134",
"description": "Exploit for CVE-2022-26134",
"fork": false,
"created_at": "2026-07-10T09:51:02Z",
"updated_at": "2026-07-10T09:57:38Z",
"pushed_at": "2026-07-10T09:52:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2022-26134",
"exploit"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2022/CVE-2022-29799.json
+2 -2
View File
@@ -59,8 +59,8 @@
"description": "Demonstrate local privilege escalation in networkd-dispatcher via CVE-2022-29799 and CVE-2022-29800 using this C proof of concept.",
"fork": false,
"created_at": "2026-06-23T14:05:18Z",
"updated_at": "2026-07-10T06:14:32Z",
"pushed_at": "2026-07-10T06:14:27Z",
"updated_at": "2026-07-10T11:43:40Z",
"pushed_at": "2026-07-10T11:43:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2022/CVE-2022-38694.json
+4 -4
View File
@@ -50,10 +50,10 @@
"description": "Bootloader unlock using CVE-2022-38694 for Anbernic Unisoc T820 devices",
"fork": false,
"created_at": "2024-06-27T14:28:13Z",
"updated_at": "2026-07-08T12:33:54Z",
"updated_at": "2026-07-10T11:09:17Z",
"pushed_at": "2025-09-19T15:48:29Z",
"stargazers_count": 63,
"watchers_count": 63,
"stargazers_count": 64,
"watchers_count": 64,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -64,7 +64,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 63,
"watchers": 64,
"score": 0,
"subscribers_count": 5
},
2022/CVE-2022-44877.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "CVE-2022-44877 Centos Web Panel 7 Unauthenticated Remote Code Execution",
"fork": false,
"created_at": "2023-01-06T16:53:51Z",
"updated_at": "2023-12-21T10:22:09Z",
"updated_at": "2026-07-10T12:27:15Z",
"pushed_at": "2023-01-06T17:00:09Z",
"stargazers_count": 9,
"watchers_count": 9,
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 9,
"watchers": 10,
"score": 0,
"subscribers_count": 1
},
2023/CVE-2023-20696.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "Cert exploit for MTK devices.There is a logic flaw in MTK cert verification process.Similar to CVE-2023-20696.",
"fork": false,
"created_at": "2026-06-28T23:00:44Z",
"updated_at": "2026-07-09T04:58:07Z",
"updated_at": "2026-07-10T10:33:13Z",
"pushed_at": "2026-06-29T10:38:10Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 51,
"forks_count": 53,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 51,
"watchers": 4,
"forks": 53,
"watchers": 5,
"score": 0,
"subscribers_count": 0
}
2023/CVE-2023-21768.json
+4 -4
View File
@@ -175,15 +175,15 @@
{
"id": 623746365,
"name": "CVE-2023-21768",
"full_name": "ahiahai242\/CVE-2023-21768",
"full_name": "h1bAna\/CVE-2023-21768",
"owner": {
"login": "ahiahai242",
"login": "h1bAna",
"id": 70074237,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/70074237?v=4",
"html_url": "https:\/\/github.com\/ahiahai242",
"html_url": "https:\/\/github.com\/h1bAna",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ahiahai242\/CVE-2023-21768",
"html_url": "https:\/\/github.com\/h1bAna\/CVE-2023-21768",
"description": null,
"fork": false,
"created_at": "2023-04-05T02:05:17Z",
2023/CVE-2023-28218.json
+4 -4
View File
@@ -2,15 +2,15 @@
{
"id": 648327862,
"name": "CVE-2023-28218",
"full_name": "ahiahai242\/CVE-2023-28218",
"full_name": "h1bAna\/CVE-2023-28218",
"owner": {
"login": "ahiahai242",
"login": "h1bAna",
"id": 70074237,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/70074237?v=4",
"html_url": "https:\/\/github.com\/ahiahai242",
"html_url": "https:\/\/github.com\/h1bAna",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ahiahai242\/CVE-2023-28218",
"html_url": "https:\/\/github.com\/h1bAna\/CVE-2023-28218",
"description": null,
"fork": false,
"created_at": "2023-06-01T18:04:32Z",
2023/CVE-2023-32434.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙",
"fork": false,
"created_at": "2025-08-13T09:19:29Z",
"updated_at": "2026-07-10T04:19:31Z",
"pushed_at": "2026-07-10T04:19:27Z",
"updated_at": "2026-07-10T09:45:31Z",
"pushed_at": "2026-07-10T09:45:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-4357.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "[漏洞复现] 全球首款单文件利用 CVE-2023-4357 Chrome XXE 漏洞 EXP, 实现对访客者本地文件窃取. Chrome XXE vulnerability EXP, allowing attackers to obtain local files of visitors.",
"fork": false,
"created_at": "2023-11-17T10:32:31Z",
"updated_at": "2026-06-22T12:48:20Z",
"updated_at": "2026-07-10T10:05:39Z",
"pushed_at": "2025-04-04T18:37:38Z",
"stargazers_count": 229,
"watchers_count": 229,
"stargazers_count": 230,
"watchers_count": 230,
"has_discussions": false,
"forks_count": 37,
"allow_forking": true,
@@ -30,7 +30,7 @@
],
"visibility": "public",
"forks": 37,
"watchers": 229,
"watchers": 230,
"score": 0,
"subscribers_count": 2
},
2023/CVE-2023-45866.json
+10 -10
View File
@@ -14,12 +14,12 @@
"description": "🚨 CVE-2023-45866 - BlueDucky Implementation (Using DuckyScript) 🔓 Unauthenticated Peering Leading to Code Execution (Using HID Keyboard)",
"fork": false,
"created_at": "2024-01-16T06:52:02Z",
"updated_at": "2026-07-09T21:45:26Z",
"updated_at": "2026-07-10T10:06:20Z",
"pushed_at": "2026-02-11T00:03:00Z",
"stargazers_count": 1871,
"watchers_count": 1871,
"stargazers_count": 1872,
"watchers_count": 1872,
"has_discussions": false,
"forks_count": 315,
"forks_count": 314,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 315,
"watchers": 1871,
"forks": 314,
"watchers": 1872,
"score": 0,
"subscribers_count": 29
},
@@ -184,10 +184,10 @@
"description": "Exploit basado en vulnerabilidades criticas Bluetooth (CVE-2023-45866, CVE-2024-21306)",
"fork": false,
"created_at": "2024-12-15T03:00:47Z",
"updated_at": "2026-07-02T10:23:22Z",
"updated_at": "2026-07-10T10:05:26Z",
"pushed_at": "2024-12-15T06:41:13Z",
"stargazers_count": 13,
"watchers_count": 13,
"stargazers_count": 14,
"watchers_count": 14,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -198,7 +198,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 13,
"watchers": 14,
"score": 0,
"subscribers_count": 1
},
2024/CVE-2024-0670.json
+2 -2
View File
@@ -118,8 +118,8 @@
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
"fork": false,
"created_at": "2026-01-08T01:32:09Z",
"updated_at": "2026-07-10T05:04:58Z",
"pushed_at": "2026-07-10T05:04:50Z",
"updated_at": "2026-07-10T10:32:39Z",
"pushed_at": "2026-07-10T10:32:16Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-21306.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "Exploit basado en vulnerabilidades criticas Bluetooth (CVE-2023-45866, CVE-2024-21306)",
"fork": false,
"created_at": "2024-12-15T03:00:47Z",
"updated_at": "2026-07-02T10:23:22Z",
"updated_at": "2026-07-10T10:05:26Z",
"pushed_at": "2024-12-15T06:41:13Z",
"stargazers_count": 13,
"watchers_count": 13,
"stargazers_count": 14,
"watchers_count": 14,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 13,
"watchers": 14,
"score": 0,
"subscribers_count": 1
}
2024/CVE-2024-31317.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "A command-line utility to exploit Android Zygote injection (CVE-2024-31317)",
"fork": false,
"created_at": "2025-04-17T16:20:00Z",
"updated_at": "2026-07-02T21:07:35Z",
"updated_at": "2026-07-10T10:04:09Z",
"pushed_at": "2025-12-17T19:16:05Z",
"stargazers_count": 56,
"watchers_count": 56,
"stargazers_count": 57,
"watchers_count": 57,
"has_discussions": false,
"forks_count": 20,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 20,
"watchers": 56,
"watchers": 57,
"score": 0,
"subscribers_count": 3
},
2024/CVE-2024-36401.json
+8 -8
View File
@@ -186,10 +186,10 @@
"description": "geoserver CVE-2024-36401漏洞利用工具",
"fork": false,
"created_at": "2024-07-17T02:25:21Z",
"updated_at": "2026-07-07T09:42:49Z",
"updated_at": "2026-07-10T08:38:23Z",
"pushed_at": "2024-07-24T15:33:03Z",
"stargazers_count": 43,
"watchers_count": 43,
"stargazers_count": 44,
"watchers_count": 44,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -200,7 +200,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 43,
"watchers": 44,
"score": 0,
"subscribers_count": 0
},
@@ -575,15 +575,15 @@
{
"id": 1023820934,
"name": "Exploit-CVE-2024-36401",
"full_name": "reveravip\/Exploit-CVE-2024-36401",
"full_name": "ArcticDU\/Exploit-CVE-2024-36401",
"owner": {
"login": "reveravip",
"login": "ArcticDU",
"id": 98260160,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/98260160?v=4",
"html_url": "https:\/\/github.com\/reveravip",
"html_url": "https:\/\/github.com\/ArcticDU",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/reveravip\/Exploit-CVE-2024-36401",
"html_url": "https:\/\/github.com\/ArcticDU\/Exploit-CVE-2024-36401",
"description": "Python exploit for GeoServer (CVE-2024-36401) with JSP web shell upload",
"fork": false,
"created_at": "2025-07-21T18:40:39Z",
2024/CVE-2024-40111.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 915029581,
"name": "CVE-2024-40111-Exploit",
"full_name": "theexploiters\/CVE-2024-40111-Exploit",
"owner": {
"login": "theexploiters",
"id": 185040501,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/185040501?v=4",
"html_url": "https:\/\/github.com\/theexploiters",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/theexploiters\/CVE-2024-40111-Exploit",
"description": "Exploit For: CVE-2024-40111: Stored Cross-Site Scripting (XSS) in Automad 2.0.0-alpha.4",
"fork": false,
"created_at": "2025-01-10T20:14:07Z",
"updated_at": "2025-12-11T16:58:08Z",
"pushed_at": "2025-01-10T20:14:28Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 1
}
]
2024/CVE-2024-51482.json
+33
View File
@@ -229,5 +229,38 @@
"watchers": 7,
"score": 0,
"subscribers_count": 0
},
{
"id": 1296220942,
"name": "CVE-2024-51482",
"full_name": "c0gnit00\/CVE-2024-51482",
"owner": {
"login": "c0gnit00",
"id": 172115438,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/172115438?v=4",
"html_url": "https:\/\/github.com\/c0gnit00",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/c0gnit00\/CVE-2024-51482",
"description": "CVE-2025-51482 POC, Dump Credentials From zm.Users ",
"fork": false,
"created_at": "2026-07-10T07:37:39Z",
"updated_at": "2026-07-10T07:38:58Z",
"pushed_at": "2026-07-10T07:38:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2024/CVE-2024-6387.json
+2 -2
View File
@@ -290,7 +290,7 @@
"stargazers_count": 523,
"watchers_count": 523,
"has_discussions": false,
"forks_count": 99,
"forks_count": 100,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -304,7 +304,7 @@
"redteam"
],
"visibility": "public",
"forks": 99,
"forks": 100,
"watchers": 523,
"score": 0,
"subscribers_count": 6
2025/CVE-2025-14847.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
"fork": false,
"created_at": "2025-07-30T15:52:00Z",
"updated_at": "2026-07-10T05:08:34Z",
"pushed_at": "2026-07-10T05:08:30Z",
"updated_at": "2026-07-10T10:36:19Z",
"pushed_at": "2026-07-10T10:35:51Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1129,8 +1129,8 @@
"description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
"fork": false,
"created_at": "2026-01-14T06:05:44Z",
"updated_at": "2026-07-10T05:07:45Z",
"pushed_at": "2026-07-10T05:07:41Z",
"updated_at": "2026-07-10T10:35:19Z",
"pushed_at": "2026-07-10T10:35:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-20720.json
+44
View File
@@ -0,0 +1,44 @@
[
{
"id": 1296252100,
"name": "CVE-2025-20720",
"full_name": "shinthink\/CVE-2025-20720",
"owner": {
"login": "shinthink",
"id": 292174078,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/292174078?v=4",
"html_url": "https:\/\/github.com\/shinthink",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/shinthink\/CVE-2025-20720",
"description": "CVE-2025-20720 — PolyShell: Magento 2 Unauthenticated Arbitrary File Upload RCE | GIF89a polyglot bypass | guest-cart REST API | 79.5% stores targeted",
"fork": false,
"created_at": "2026-07-10T08:02:19Z",
"updated_at": "2026-07-10T11:57:05Z",
"pushed_at": "2026-07-10T09:53:07Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"adobe-commerce",
"cve",
"exploit",
"file-upload",
"magento",
"mass-scanner",
"polyshell",
"rce"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-21756.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Exploit for CVE-2025-21756 for Linux kernel 6.6.75. My first linux kernel exploit!",
"fork": false,
"created_at": "2025-04-18T14:22:15Z",
"updated_at": "2026-06-23T04:23:44Z",
"updated_at": "2026-07-10T10:04:50Z",
"pushed_at": "2025-06-05T21:32:05Z",
"stargazers_count": 160,
"watchers_count": 160,
"stargazers_count": 161,
"watchers_count": 161,
"has_discussions": false,
"forks_count": 26,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 26,
"watchers": 160,
"watchers": 161,
"score": 0,
"subscribers_count": 3
},
2025/CVE-2025-24204.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "FairPlay decryptor (dump iPA) for iOS Application that running on macOS with SIP-enabled, using CVE-2025-24204. Support macOS 15.0-15.2",
"fork": false,
"created_at": "2025-09-04T17:49:51Z",
"updated_at": "2026-07-05T03:42:48Z",
"updated_at": "2026-07-10T09:53:07Z",
"pushed_at": "2025-09-04T17:59:49Z",
"stargazers_count": 141,
"watchers_count": 141,
"stargazers_count": 142,
"watchers_count": 142,
"has_discussions": false,
"forks_count": 20,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 20,
"watchers": 141,
"watchers": 142,
"score": 0,
"subscribers_count": 2
}
2025/CVE-2025-24257.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis",
"fork": false,
"created_at": "2026-04-04T03:42:55Z",
"updated_at": "2026-07-10T05:50:18Z",
"pushed_at": "2026-07-10T05:50:10Z",
"updated_at": "2026-07-10T11:19:19Z",
"pushed_at": "2026-07-10T11:18:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-27363.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2025-03-23T23:30:37Z",
"updated_at": "2026-03-12T02:51:38Z",
"updated_at": "2026-07-10T10:03:51Z",
"pushed_at": "2025-03-23T23:31:00Z",
"stargazers_count": 38,
"watchers_count": 38,
"stargazers_count": 39,
"watchers_count": 39,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 38,
"watchers": 39,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-31258.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔓 Explore CVE-2025-31258 with this PoC demonstrating partial sandbox escape using RemoteViewServices for practical 1-day security practice.",
"fork": false,
"created_at": "2020-06-23T15:20:11Z",
"updated_at": "2026-07-10T04:24:05Z",
"pushed_at": "2026-07-10T04:24:01Z",
"updated_at": "2026-07-10T09:50:34Z",
"pushed_at": "2026-07-10T09:50:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-32463.json
+2 -2
View File
@@ -1529,8 +1529,8 @@
"description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.",
"fork": false,
"created_at": "2025-09-20T00:42:07Z",
"updated_at": "2026-07-10T04:24:58Z",
"pushed_at": "2026-07-10T04:24:55Z",
"updated_at": "2026-07-10T09:51:16Z",
"pushed_at": "2026-07-10T09:51:03Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-38352.json
+8 -8
View File
@@ -80,10 +80,10 @@
"description": null,
"fork": false,
"created_at": "2026-01-08T14:14:19Z",
"updated_at": "2026-04-15T03:52:50Z",
"updated_at": "2026-07-10T07:36:43Z",
"pushed_at": "2026-01-08T14:19:45Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -112,7 +112,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
@@ -164,10 +164,10 @@
"description": "CVE-2025-38352 kernel exploit for LG webOS Smart TVs (ARM64). Achieves persistent root on real consumer hardware with novel exploitation techniques. Responsibly disclosed to LG.",
"fork": false,
"created_at": "2026-05-30T02:37:10Z",
"updated_at": "2026-07-01T06:52:48Z",
"updated_at": "2026-07-10T07:08:16Z",
"pushed_at": "2026-06-01T21:47:09Z",
"stargazers_count": 8,
"watchers_count": 8,
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -189,7 +189,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 8,
"watchers": 9,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-45422.json
+5 -5
View File
@@ -14,10 +14,10 @@
"description": "CVE-2025-45422: Proximus b-box UPnP Persistence & Access Control Bypass",
"fork": false,
"created_at": "2026-06-30T10:01:26Z",
"updated_at": "2026-06-30T10:02:26Z",
"pushed_at": "2026-06-30T10:02:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"updated_at": "2026-07-10T09:02:46Z",
"pushed_at": "2026-07-10T09:02:29Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-48804.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Downgrade attack for CVE-2025-48804",
"fork": false,
"created_at": "2026-04-30T13:05:30Z",
"updated_at": "2026-07-07T09:50:09Z",
"updated_at": "2026-07-10T12:11:00Z",
"pushed_at": "2026-05-20T14:39:54Z",
"stargazers_count": 217,
"watchers_count": 217,
"stargazers_count": 218,
"watchers_count": 218,
"has_discussions": false,
"forks_count": 41,
"allow_forking": true,
@@ -32,7 +32,7 @@
],
"visibility": "public",
"forks": 41,
"watchers": 217,
"watchers": 218,
"score": 0,
"subscribers_count": 3
}
2025/CVE-2025-49844.json
+7 -7
View File
@@ -14,8 +14,8 @@
"description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.",
"fork": false,
"created_at": "2019-04-13T07:51:09Z",
"updated_at": "2026-07-10T04:37:26Z",
"pushed_at": "2026-07-10T04:37:22Z",
"updated_at": "2026-07-10T10:04:45Z",
"pushed_at": "2026-07-10T10:03:51Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,10 +66,10 @@
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
"fork": false,
"created_at": "2022-04-06T09:27:39Z",
"updated_at": "2026-07-10T04:38:05Z",
"pushed_at": "2026-07-10T04:38:01Z",
"stargazers_count": 1,
"watchers_count": 1,
"updated_at": "2026-07-10T10:04:41Z",
"pushed_at": "2026-07-10T10:04:38Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -99,7 +99,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-51482.json
+33
View File
@@ -31,5 +31,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1296220942,
"name": "CVE-2024-51482",
"full_name": "c0gnit00\/CVE-2024-51482",
"owner": {
"login": "c0gnit00",
"id": 172115438,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/172115438?v=4",
"html_url": "https:\/\/github.com\/c0gnit00",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/c0gnit00\/CVE-2024-51482",
"description": "CVE-2025-51482 POC, Dump Credentials From zm.Users ",
"fork": false,
"created_at": "2026-07-10T07:37:39Z",
"updated_at": "2026-07-10T07:38:58Z",
"pushed_at": "2026-07-10T07:38:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-54424.json
+2 -2
View File
@@ -53,8 +53,8 @@
"description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐",
"fork": false,
"created_at": "2025-08-14T05:16:16Z",
"updated_at": "2026-07-10T04:20:15Z",
"pushed_at": "2026-07-10T04:20:10Z",
"updated_at": "2026-07-10T09:46:38Z",
"pushed_at": "2026-07-10T09:46:12Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2025/CVE-2025-55182.json
+10 -10
View File
@@ -14,8 +14,8 @@
"description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.",
"fork": false,
"created_at": "2022-06-17T10:19:10Z",
"updated_at": "2026-07-10T04:57:55Z",
"pushed_at": "2026-07-10T04:57:50Z",
"updated_at": "2026-07-10T10:25:55Z",
"pushed_at": "2026-07-10T10:25:03Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -99,8 +99,8 @@
"description": null,
"fork": false,
"created_at": "2024-11-29T12:32:19Z",
"updated_at": "2026-07-10T04:58:26Z",
"pushed_at": "2026-07-10T04:58:22Z",
"updated_at": "2026-07-10T10:25:53Z",
"pushed_at": "2026-07-10T10:25:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -148,8 +148,8 @@
"description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
"fork": false,
"created_at": "2025-06-06T16:34:46Z",
"updated_at": "2026-07-10T04:58:15Z",
"pushed_at": "2026-07-10T04:58:11Z",
"updated_at": "2026-07-10T10:25:52Z",
"pushed_at": "2026-07-10T10:25:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -11738,8 +11738,8 @@
"description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.",
"fork": false,
"created_at": "2025-12-24T14:48:19Z",
"updated_at": "2026-07-10T04:57:54Z",
"pushed_at": "2026-07-10T04:57:50Z",
"updated_at": "2026-07-10T10:25:21Z",
"pushed_at": "2026-07-10T10:25:04Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12256,8 +12256,8 @@
"description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
"fork": false,
"created_at": "2026-01-02T01:28:57Z",
"updated_at": "2026-07-10T05:01:49Z",
"pushed_at": "2026-07-10T05:01:44Z",
"updated_at": "2026-07-10T10:29:10Z",
"pushed_at": "2026-07-10T10:29:05Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-56399.json
+4 -4
View File
@@ -90,10 +90,10 @@
"description": "PoC for CVE-2025-56399 - Unrestricted File Upload leading to RCE in alexusmai\/laravel-file-manager (≤3.3.1). Automates detection, CSRF extraction, and File Upload",
"fork": false,
"created_at": "2026-06-28T03:43:50Z",
"updated_at": "2026-06-28T04:02:39Z",
"updated_at": "2026-07-10T12:33:47Z",
"pushed_at": "2026-06-28T04:02:36Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -115,7 +115,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-5777.json
+4 -4
View File
@@ -252,10 +252,10 @@
"description": "CVE-2025-5777 (CitrixBleed 2) - Critical memory leak vulnerability affecting Citrix NetScaler ADC and Gateway devices",
"fork": false,
"created_at": "2025-07-08T14:12:45Z",
"updated_at": "2026-06-05T15:09:53Z",
"updated_at": "2026-07-10T12:08:56Z",
"pushed_at": "2025-07-08T17:58:44Z",
"stargazers_count": 47,
"watchers_count": 47,
"stargazers_count": 48,
"watchers_count": 48,
"has_discussions": false,
"forks_count": 14,
"allow_forking": true,
@@ -271,7 +271,7 @@
],
"visibility": "public",
"forks": 14,
"watchers": 47,
"watchers": 48,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-66398.json
+2 -2
View File
@@ -64,8 +64,8 @@
"description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.",
"fork": false,
"created_at": "2026-03-23T09:09:21Z",
"updated_at": "2026-07-10T05:44:29Z",
"pushed_at": "2026-07-10T05:44:26Z",
"updated_at": "2026-07-10T11:13:17Z",
"pushed_at": "2026-07-10T11:12:52Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-66478.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.",
"fork": false,
"created_at": "2025-10-01T07:40:09Z",
"updated_at": "2026-07-10T04:59:07Z",
"pushed_at": "2026-07-10T04:59:03Z",
"updated_at": "2026-07-10T10:26:21Z",
"pushed_at": "2026-07-10T10:26:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-68613.json
+4 -4
View File
@@ -127,10 +127,10 @@
"description": "CVE-2025-68613: n8n RCE vulnerability exploit and documentation",
"fork": false,
"created_at": "2025-12-22T21:49:36Z",
"updated_at": "2026-07-08T10:30:56Z",
"updated_at": "2026-07-10T07:11:59Z",
"pushed_at": "2025-12-23T08:54:59Z",
"stargazers_count": 101,
"watchers_count": 101,
"stargazers_count": 102,
"watchers_count": 102,
"has_discussions": false,
"forks_count": 22,
"allow_forking": true,
@@ -148,7 +148,7 @@
],
"visibility": "public",
"forks": 22,
"watchers": 101,
"watchers": 102,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-68921.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.",
"fork": false,
"created_at": "2026-01-24T21:00:41Z",
"updated_at": "2026-07-10T05:13:47Z",
"pushed_at": "2026-07-10T05:13:44Z",
"updated_at": "2026-07-10T10:41:37Z",
"pushed_at": "2026-07-10T10:41:24Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-7771.json
+4 -4
View File
@@ -256,10 +256,10 @@
"description": "Advanced PoC & Research for CVE-2026-0828 (Safetica) and CVE-2025-7771 (ThrottleStop). Analysis of BYOVD (Bring Your Own Vulnerable Driver) TTPs for Ring 0 process termination and physical memory R\/W. Researching EDR-Killer patterns, PPL bypasses, and kernel-mode primitives used by MedusaLocker and other threat actors.",
"fork": false,
"created_at": "2026-02-04T01:47:36Z",
"updated_at": "2026-07-02T11:34:59Z",
"updated_at": "2026-07-10T09:01:39Z",
"pushed_at": "2026-02-04T02:20:21Z",
"stargazers_count": 44,
"watchers_count": 44,
"stargazers_count": 45,
"watchers_count": 45,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -286,7 +286,7 @@
],
"visibility": "public",
"forks": 5,
"watchers": 44,
"watchers": 45,
"score": 0,
"subscribers_count": 1
},
2026/CVE-2026-0091.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-0091, play with an issue in android window management to perform arbitrary code execution in Launcher process from adb",
"fork": false,
"created_at": "2026-05-25T03:41:43Z",
"updated_at": "2026-07-10T00:14:14Z",
"updated_at": "2026-07-10T07:15:11Z",
"pushed_at": "2026-07-05T07:55:49Z",
"stargazers_count": 24,
"watchers_count": 24,
"stargazers_count": 25,
"watchers_count": 25,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 24,
"watchers": 25,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-14382.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": null,
"fork": false,
"created_at": "2026-07-06T09:34:07Z",
"updated_at": "2026-07-10T06:32:49Z",
"pushed_at": "2026-07-10T06:32:44Z",
"updated_at": "2026-07-10T11:47:45Z",
"pushed_at": "2026-07-10T11:46:59Z",
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
2026/CVE-2026-20841.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.",
"fork": false,
"created_at": "2024-09-22T12:19:06Z",
"updated_at": "2026-07-10T05:29:23Z",
"pushed_at": "2026-07-10T05:29:19Z",
"updated_at": "2026-07-10T10:57:29Z",
"pushed_at": "2026-07-10T10:57:09Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.",
"fork": false,
"created_at": "2026-02-26T05:21:28Z",
"updated_at": "2026-07-10T05:28:25Z",
"pushed_at": "2026-07-10T05:28:21Z",
"updated_at": "2026-07-10T10:56:27Z",
"pushed_at": "2026-07-10T10:56:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-23111.json
+4 -4
View File
@@ -179,10 +179,10 @@
"description": "Linux Kernel nf_tables Use-After-Free (CVE-2026-23111) — LPE PoC",
"fork": false,
"created_at": "2026-06-25T11:15:38Z",
"updated_at": "2026-07-09T08:14:11Z",
"updated_at": "2026-07-10T11:22:11Z",
"pushed_at": "2026-07-10T03:59:16Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -193,7 +193,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-23744.json
+33
View File
@@ -668,5 +668,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1296225020,
"name": "CVE-2026-23744",
"full_name": "0x77FSec\/CVE-2026-23744",
"owner": {
"login": "0x77FSec",
"id": 180836485,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/180836485?v=4",
"html_url": "https:\/\/github.com\/0x77FSec",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0x77FSec\/CVE-2026-23744",
"description": null,
"fork": false,
"created_at": "2026-07-10T07:39:22Z",
"updated_at": "2026-07-10T10:54:50Z",
"pushed_at": "2026-07-10T10:54:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-24061.json
+2 -2
View File
@@ -59,8 +59,8 @@
"description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.",
"fork": false,
"created_at": "2026-02-03T19:46:10Z",
"updated_at": "2026-07-10T05:19:21Z",
"pushed_at": "2026-07-10T05:19:17Z",
"updated_at": "2026-07-10T10:47:12Z",
"pushed_at": "2026-07-10T10:47:06Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24291.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions",
"fork": false,
"created_at": "2026-03-26T04:38:27Z",
"updated_at": "2026-07-10T05:46:12Z",
"pushed_at": "2026-07-10T05:46:08Z",
"updated_at": "2026-07-10T11:15:38Z",
"pushed_at": "2026-07-10T11:14:43Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-2441.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.",
"fork": false,
"created_at": "2026-03-03T14:19:18Z",
"updated_at": "2026-07-10T05:31:45Z",
"pushed_at": "2026-07-10T05:31:39Z",
"updated_at": "2026-07-10T11:00:04Z",
"pushed_at": "2026-07-10T10:59:29Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-2472.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.",
"fork": false,
"created_at": "2026-03-10T14:40:04Z",
"updated_at": "2026-07-10T05:35:59Z",
"pushed_at": "2026-07-10T05:35:55Z",
"updated_at": "2026-07-10T11:04:45Z",
"pushed_at": "2026-07-10T11:04:08Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-25253.json
+33
View File
@@ -162,5 +162,38 @@
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1296308030,
"name": "openclaw-hardening-check",
"full_name": "cain66666\/openclaw-hardening-check",
"owner": {
"login": "cain66666",
"id": 141477002,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/141477002?v=4",
"html_url": "https:\/\/github.com\/cain66666",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/cain66666\/openclaw-hardening-check",
"description": "Offline, read-only hardening check for a self-hosted OpenClaw install — gateway exposure, auth, CVE-2026-25253. Never prints secrets, makes no network calls.",
"fork": false,
"created_at": "2026-07-10T09:06:57Z",
"updated_at": "2026-07-10T09:07:59Z",
"pushed_at": "2026-07-10T09:07:01Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-27966.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Pre-auth RCE scanner for Langflow < 1.8.0 — Route Injection + Vertex Injection → Code Execution (CVSS 9.8)",
"fork": false,
"created_at": "2026-07-05T19:59:34Z",
"updated_at": "2026-07-09T21:55:57Z",
"updated_at": "2026-07-10T11:54:51Z",
"pushed_at": "2026-07-06T00:17:48Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -40,7 +40,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-31431.json
+4 -4
View File
@@ -651,8 +651,8 @@
"description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.",
"fork": false,
"created_at": "2026-05-05T04:58:21Z",
"updated_at": "2026-07-10T06:05:27Z",
"pushed_at": "2026-07-10T06:05:22Z",
"updated_at": "2026-07-10T11:34:34Z",
"pushed_at": "2026-07-10T11:34:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -700,8 +700,8 @@
"description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.",
"fork": false,
"created_at": "2026-05-06T09:49:14Z",
"updated_at": "2026-07-10T06:06:06Z",
"pushed_at": "2026-07-10T06:05:58Z",
"updated_at": "2026-07-10T11:35:08Z",
"pushed_at": "2026-07-10T11:35:03Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-31694.json
+1 -1
View File
@@ -30,6 +30,6 @@
"forks": 1,
"watchers": 12,
"score": 0,
"subscribers_count": 0
"subscribers_count": 1
}
]
2026/CVE-2026-31802.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"fork": false,
"created_at": "2026-03-28T20:49:46Z",
"updated_at": "2026-07-10T05:47:19Z",
"pushed_at": "2026-07-10T05:47:15Z",
"updated_at": "2026-07-10T11:16:09Z",
"pushed_at": "2026-07-10T11:15:56Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-40858.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1296211274,
"name": "CVE-2026-40858",
"full_name": "oscerd\/CVE-2026-40858",
"owner": {
"login": "oscerd",
"id": 5106647,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5106647?v=4",
"html_url": "https:\/\/github.com\/oscerd",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/oscerd\/CVE-2026-40858",
"description": "Reproducer for CVE-2026-40858 — Apache Camel camel-infinispan remote aggregation repository unsafe deserialization (RCE)",
"fork": false,
"created_at": "2026-07-10T07:33:32Z",
"updated_at": "2026-07-10T07:33:40Z",
"pushed_at": "2026-07-10T07:33:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-40859.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1296297365,
"name": "CVE-2026-40859",
"full_name": "oscerd\/CVE-2026-40859",
"owner": {
"login": "oscerd",
"id": 5106647,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5106647?v=4",
"html_url": "https:\/\/github.com\/oscerd",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/oscerd\/CVE-2026-40859",
"description": "Reproducer for CVE-2026-40859 — Apache Camel camel-netty-http \/ camel-vertx-http producer-side unsafe deserialization of HTTP response bodies (RCE)",
"fork": false,
"created_at": "2026-07-10T08:54:55Z",
"updated_at": "2026-07-10T08:56:03Z",
"pushed_at": "2026-07-10T08:54:58Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-40860.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1296313451,
"name": "CVE-2026-40860",
"full_name": "oscerd\/CVE-2026-40860",
"owner": {
"login": "oscerd",
"id": 5106647,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5106647?v=4",
"html_url": "https:\/\/github.com\/oscerd",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/oscerd\/CVE-2026-40860",
"description": "Reproducer for CVE-2026-40860 — Apache Camel camel-jms\/sjms\/amqp JMS ObjectMessage unsafe deserialization (RCE)",
"fork": false,
"created_at": "2026-07-10T09:13:13Z",
"updated_at": "2026-07-10T09:13:55Z",
"pushed_at": "2026-07-10T09:13:16Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-41940.json
+4 -4
View File
@@ -258,8 +258,8 @@
"description": "Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.",
"fork": false,
"created_at": "2026-05-06T18:08:48Z",
"updated_at": "2026-07-10T06:06:27Z",
"pushed_at": "2026-07-10T06:06:23Z",
"updated_at": "2026-07-10T11:35:38Z",
"pushed_at": "2026-07-10T11:35:21Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -335,8 +335,8 @@
"description": "🚀 CVE-2026-41940 cPanel\/WHM Auth Bypass Exploit - Best Flow 💥 CRLF injection leads to auth bypass, session hijacking & account leak. ✅ Proxy, custom UA, keep-alive, retries, SSL verify, colored output, file save support. ⚡ Advanced PoC for pentesters. ",
"fork": false,
"created_at": "2026-05-12T14:47:21Z",
"updated_at": "2026-06-29T20:43:08Z",
"pushed_at": "2026-06-07T13:02:43Z",
"updated_at": "2026-07-10T09:17:01Z",
"pushed_at": "2026-07-10T09:15:48Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
2026/CVE-2026-42978.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-42978 — Use-After-Free race condition in Windows Push Notifications (WpnService). Patch diff, root cause analysis, TOCTOU lab, Sysmon\/ETW detection rules.",
"fork": false,
"created_at": "2026-06-23T21:05:55Z",
"updated_at": "2026-06-30T16:18:51Z",
"updated_at": "2026-07-10T08:53:16Z",
"pushed_at": "2026-06-23T21:08:36Z",
"stargazers_count": 9,
"watchers_count": 9,
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 9,
"watchers": 10,
"score": 0,
"subscribers_count": 1
}
2026/CVE-2026-43499.json
+14 -14
View File
@@ -14,12 +14,12 @@
"description": "CVE-2026-43499 PoC",
"fork": false,
"created_at": "2026-06-27T04:09:11Z",
"updated_at": "2026-07-10T06:30:37Z",
"updated_at": "2026-07-10T11:17:40Z",
"pushed_at": "2026-06-27T05:04:04Z",
"stargazers_count": 83,
"watchers_count": 83,
"stargazers_count": 85,
"watchers_count": 85,
"has_discussions": false,
"forks_count": 22,
"forks_count": 23,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,10 +27,10 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 22,
"watchers": 83,
"forks": 23,
"watchers": 85,
"score": 0,
"subscribers_count": 0
"subscribers_count": 1
},
{
"id": 1293178818,
@@ -146,12 +146,12 @@
"description": "OPPO Find N2 GhostLock (CVE-2026-43499) exploit adaptation",
"fork": false,
"created_at": "2026-07-09T22:46:15Z",
"updated_at": "2026-07-10T06:37:48Z",
"pushed_at": "2026-07-09T23:11:45Z",
"stargazers_count": 15,
"watchers_count": 15,
"updated_at": "2026-07-10T12:14:22Z",
"pushed_at": "2026-07-10T11:48:03Z",
"stargazers_count": 19,
"watchers_count": 19,
"has_discussions": false,
"forks_count": 13,
"forks_count": 15,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -159,8 +159,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 13,
"watchers": 15,
"forks": 15,
"watchers": 19,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-43503.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 22,
"watchers_count": 22,
"has_discussions": false,
"forks_count": 4,
"forks_count": 5,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 4,
"forks": 5,
"watchers": 22,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-45585.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Manage and recover BitLocker encrypted drives with this tool for Windows 11 recovery key management and educational study of CVE-2026-45585.",
"fork": false,
"created_at": "2026-06-16T07:21:36Z",
"updated_at": "2026-07-10T06:13:01Z",
"pushed_at": "2026-07-10T06:12:57Z",
"updated_at": "2026-07-10T11:42:01Z",
"pushed_at": "2026-07-10T11:41:56Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-46215.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-06-18T14:39:11Z",
"updated_at": "2026-07-09T16:22:07Z",
"updated_at": "2026-07-10T08:59:00Z",
"pushed_at": "2026-06-18T15:58:56Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-46331.json
+6 -6
View File
@@ -52,7 +52,7 @@
"stargazers_count": 25,
"watchers_count": 25,
"has_discussions": false,
"forks_count": 4,
"forks_count": 5,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 4,
"forks": 5,
"watchers": 25,
"score": 0,
"subscribers_count": 0
@@ -278,10 +278,10 @@
"description": "A Proof of Concept (PoC) exploit for CVE-2026-46331",
"fork": false,
"created_at": "2026-07-10T03:07:44Z",
"updated_at": "2026-07-10T03:13:42Z",
"updated_at": "2026-07-10T12:33:03Z",
"pushed_at": "2026-07-10T03:13:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -292,7 +292,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-48282.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-07-06T12:57:37Z",
"updated_at": "2026-07-09T23:27:05Z",
"updated_at": "2026-07-10T12:28:38Z",
"pushed_at": "2026-07-07T14:28:17Z",
"stargazers_count": 15,
"watchers_count": 15,
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 15,
"watchers": 16,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-48908.json
+8 -8
View File
@@ -47,10 +47,10 @@
"description": "Unauthenticated RCE PoC for CVE-2026-48908 — SP Page Builder for Joomla (≤ 6.6.1): arbitrary file upload via asset.uploadCustomIcon. Self-cleaning, token-guarded. Authorized testing only.",
"fork": false,
"created_at": "2026-06-22T09:31:27Z",
"updated_at": "2026-06-28T06:40:07Z",
"updated_at": "2026-07-10T12:15:17Z",
"pushed_at": "2026-06-23T09:11:33Z",
"stargazers_count": 12,
"watchers_count": 12,
"stargazers_count": 13,
"watchers_count": 13,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -76,7 +76,7 @@
],
"visibility": "public",
"forks": 2,
"watchers": 12,
"watchers": 13,
"score": 0,
"subscribers_count": 1
},
@@ -238,10 +238,10 @@
"description": "CVE-2026-48908 — PoC exploit for unauthenticated RCE in SP Page Builder (Joomla) via arbitrary file upload. Multi‑threaded, case‑bypass, shell verification. For authorized security testing only.",
"fork": false,
"created_at": "2026-07-07T01:31:14Z",
"updated_at": "2026-07-08T04:18:18Z",
"updated_at": "2026-07-10T07:58:58Z",
"pushed_at": "2026-07-08T04:18:13Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -264,7 +264,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-49049.json
+33
View File
@@ -73,5 +73,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1296272977,
"name": "CVE-2026-49049",
"full_name": "Dr-D25\/CVE-2026-49049",
"owner": {
"login": "Dr-D25",
"id": 292827243,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/292827243?v=4",
"html_url": "https:\/\/github.com\/Dr-D25",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Dr-D25\/CVE-2026-49049",
"description": null,
"fork": false,
"created_at": "2026-07-10T08:26:45Z",
"updated_at": "2026-07-10T08:32:09Z",
"pushed_at": "2026-07-10T08:31:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-50656.json
+6 -6
View File
@@ -47,12 +47,12 @@
"description": "CVE-2026-50656",
"fork": false,
"created_at": "2026-06-18T13:16:36Z",
"updated_at": "2026-07-04T15:15:05Z",
"updated_at": "2026-07-10T11:33:26Z",
"pushed_at": "2026-06-18T13:44:42Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,8 +60,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 5,
"forks": 1,
"watchers": 6,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-54390.json
+43
View File
@@ -0,0 +1,43 @@
[
{
"id": 1296400972,
"name": "CVE-2026-54390",
"full_name": "shinthink\/CVE-2026-54390",
"owner": {
"login": "shinthink",
"id": 292174078,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/292174078?v=4",
"html_url": "https:\/\/github.com\/shinthink",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/shinthink\/CVE-2026-54390",
"description": "CVE-2026-54390 — JTL Shop Smarty SSTI RCE | Pre-Auth Template Injection via fetch('string:' . ) | 5.2.0-5.7.1",
"fork": false,
"created_at": "2026-07-10T10:55:39Z",
"updated_at": "2026-07-10T11:29:59Z",
"pushed_at": "2026-07-10T11:29:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"exploit",
"jtl-shop",
"mass-scanner",
"rce",
"smarty",
"ssti"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-56129.json
+1 -1
View File
@@ -30,6 +30,6 @@
"forks": 2,
"watchers": 0,
"score": 0,
"subscribers_count": 0
"subscribers_count": 1
}
]
2026/CVE-2026-56290.json
+8 -8
View File
@@ -47,10 +47,10 @@
"description": "📤 Mass exploitation framework for CVE-2026-56290 — Page Builder CK Joomla unauthenticated file upload to RCE",
"fork": false,
"created_at": "2026-07-04T00:01:31Z",
"updated_at": "2026-07-06T16:15:52Z",
"updated_at": "2026-07-10T08:02:16Z",
"pushed_at": "2026-07-04T00:01:36Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -72,7 +72,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
@@ -91,10 +91,10 @@
"description": "CVE-2026-56290 - Mass Exploit for Joomla Com_pagebuilderck component (Unrestricted File Upload → RCE). Multi-threaded, automatic CSRF bypass, PHP shell uploader.",
"fork": false,
"created_at": "2026-07-08T04:30:25Z",
"updated_at": "2026-07-08T04:34:47Z",
"updated_at": "2026-07-10T11:34:25Z",
"pushed_at": "2026-07-08T04:32:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -117,7 +117,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-8206.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Mass exploitation tool for CVE-2026-8206 – Unauthenticated Privilege Escalation via 'handle_forgot_password' in Kirki WordPress plugin (≤6.0.6).",
"fork": false,
"created_at": "2026-06-02T10:53:31Z",
"updated_at": "2026-06-22T11:05:04Z",
"updated_at": "2026-07-10T12:34:09Z",
"pushed_at": "2026-06-02T11:46:06Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -37,7 +37,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-9558.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1296464988,
"name": "cve-2026-9558-poc",
"full_name": "covepseng\/cve-2026-9558-poc",
"owner": {
"login": "covepseng",
"id": 62238290,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62238290?v=4",
"html_url": "https:\/\/github.com\/covepseng",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/covepseng\/cve-2026-9558-poc",
"description": "Exploitability PoC for CVE-2026-9558 (SSTI Mautic Theme)",
"fork": false,
"created_at": "2026-07-10T12:13:25Z",
"updated_at": "2026-07-10T12:13:25Z",
"pushed_at": "2026-07-10T12:13:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
README.md
+57 -13
View File
@@ -977,6 +977,13 @@
- [shinthink/CVE-2026-9290](https://github.com/shinthink/CVE-2026-9290)
### CVE-2026-9558 (2026-05-29)
<code>A Server-Side Template Injection (SSTI) vulnerability exists in Mautic's theme engine. The platform renders uploaded Twig templates without a sandbox or strict function restrictions. Authenticated users with permissions to create or upload themes can abuse this to execute arbitrary code on the hosting server (Remote Code Execution) or access restricted system files and configuration settings.
</code>
- [covepseng/cve-2026-9558-poc](https://github.com/covepseng/cve-2026-9558-poc)
### CVE-2026-9560 (2026-05-26)
<code>Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary commands with elevated privileges via local IPC channel
@@ -1173,7 +1180,11 @@
- [moritakaaz/CVE-2026-12277](https://github.com/moritakaaz/CVE-2026-12277)
### CVE-2026-12400
### CVE-2026-12400 (2026-07-10)
<code>The FlowForms – Conversational Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.1.1 via the update_form due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with contributor-level access and above, to modify the content, design, and settings of, as well as publish or revert, any form on the site — including forms owned by administrators — by supplying an arbitrary form ID in the REST URL.
</code>
- [0x00phantom-hat/CVE-2026-12400-Exploit](https://github.com/0x00phantom-hat/CVE-2026-12400-Exploit)
### CVE-2026-12415 (2026-06-27)
@@ -1554,6 +1565,7 @@
- [daemoncibsec/mcpExec](https://github.com/daemoncibsec/mcpExec)
- [timgad794/DevHub-HTB-Walkthrough](https://github.com/timgad794/DevHub-HTB-Walkthrough)
- [diamorphine666/CVE-2026-23744-exploit](https://github.com/diamorphine666/CVE-2026-23744-exploit)
- [0x77FSec/CVE-2026-23744](https://github.com/0x77FSec/CVE-2026-23744)
### CVE-2026-23760 (2026-01-22)
@@ -1725,6 +1737,7 @@
- [msaleme/start-here](https://github.com/msaleme/start-here)
- [adibirzu/openclaw-security-monitor](https://github.com/adibirzu/openclaw-security-monitor)
- [EQSTLab/CVE-2026-25253](https://github.com/EQSTLab/CVE-2026-25253)
- [cain66666/openclaw-hardening-check](https://github.com/cain66666/openclaw-hardening-check)
### CVE-2026-25262
- [shurikgo/cve-2026-25262-sm8450-research](https://github.com/shurikgo/cve-2026-25262-sm8450-research)
@@ -2885,6 +2898,27 @@
- [Rat5ak/CVE-2026-40791-WP-Time-Slots-Booking-Form-XSS](https://github.com/Rat5ak/CVE-2026-40791-WP-Time-Slots-Booking-Form-XSS)
### CVE-2026-40858 (2026-04-27)
<code>The camel-infinispan component's ProtoStream-based remote aggregation repository deserializes data read from a remote Infinispan cache using java.io.ObjectInputStream without applying any ObjectInputFilter. An attacker who can write to the Infinispan cache used by a Camel application can inject a crafted serialized Java object that, when read during normal aggregation repository operations such as get or recover, results in arbitrary code execution in the context of the application.\n\nThis issue affects Apache Camel: from 4.0.0 before 4.14.7, from 4.15.0 before 4.18.2, from 4.19.0 before 4.20.0.\n\nUsers are recommended to upgrade to version 4.20.0, which fixes the issue. If users are on the 4.14.x LTS releases stream, then they are suggested to upgrade to 4.14.7. If users are on the 4.18.x releases stream, then they are suggested to upgrade to 4.18.2.\n\nThe JIRA ticket: https://issues.apache.org/jira/browse/CAMEL-23322 refers to the various commits that resolved the issue, and have more details. This issue follows the same class of vulnerability previously addressed in CVE-2024-22369, CVE-2024-23114 and CVE-2026-25747.
</code>
- [oscerd/CVE-2026-40858](https://github.com/oscerd/CVE-2026-40858)
### CVE-2026-40859 (2026-07-06)
<code>Deserialization of Untrusted Data vulnerability in Apache Camel.\n\nThe camel-vertx-http component deserializes HTTP response bodies carrying the Content-Type application/x-java-serialized-object using a raw java.io.ObjectInputStream, without applying any ObjectInputFilter (VertxHttpHelper.deserializeJavaObjectFromStream) This deserialization path is reached only when the producer endpoint is configured with transferException=true (or the component-level allowJavaSerializedObject=true) and throwExceptionOnFailure is left at its default value of true; in that case a backend HTTP response with a 5xx status and the application/x-java-serialized-object content type has its body deserialized with no class restrictions. An attacker who controls the backend the Camel producer talks to - through a man-in-the-middle position on an unencrypted (plain HTTP) connection, or by compromising the backend service - can return a crafted serialized Java object and, if a suitable gadget chain is present on the classpath, achieve remote code execution on the Camel application host. The path is not reachable in the default configuration, where transferException is false.\nThis issue affects Apache Camel: from 4.0.0 before 4.14.8, from 4.15.0 before 4.18.3, from 4.19.0 before 4.20.0.\n\nUsers are recommended to upgrade to version 4.20.0, which fixes the issue. If users are on the 4.14.x LTS releases stream, then they are suggested to upgrade to 4.14.8. If users are on the 4.18.x releases stream, then they are suggested to upgrade to 4.18.3. After upgrading, the deserialization performed by both helper utilities is constrained by a default ObjectInputFilter (allow-list java.**;javax.**;org.apache.camel.**;!*), which can be customised through the new deserializationFilter endpoint option or the JVM-wide -Djdk.serialFilter system property. For deployments that cannot upgrade immediately: do not enable transferException=true (or allowJavaSerializedObject=true) on producers that talk to untrusted or network-reachable backends; ensure producer connections use TLS (https) so that a response cannot be substituted by a man-in-the-middle; and, where the option is required, set an explicit -Djdk.serialFilter allow-list (for example java.**;org.apache.camel.**;!*) to constrain deserialization.
</code>
- [oscerd/CVE-2026-40859](https://github.com/oscerd/CVE-2026-40859)
### CVE-2026-40860 (2026-04-27)
<code>JmsBinding.extractBodyFromJms() in camel-jms, and the equivalent JmsBinding class in camel-sjms, deserialized the payload of incoming JMS ObjectMessage values via javax.jms.ObjectMessage.getObject() without applying any ObjectInputFilter, class allowlist or class denylist. Because this code path is reached whenever the mapJmsMessage option is enabled (the default) and Camel acts as a JMS consumer, an attacker able to publish a crafted ObjectMessage to a queue or topic consumed by a Camel application could achieve remote code execution when a deserialization gadget chain was present on the classpath. The same handling was reached transitively through camel-sjms2 (whose Sjms2Endpoint extends SjmsEndpoint) and through camel-amqp (whose AMQPJmsBinding extends JmsBinding), and by other JMS-family components built on JmsComponent such as camel-activemq and camel-activemq6.\n\nThis issue affects Apache Camel: from 3.0.0 before 4.14.7, from 4.15.0 before 4.18.2, from 4.19.0 before 4.20.0.\n\nUsers are recommended to upgrade to version 4.20.0, which fixes the issue. If users are on the 4.14.x LTS releases stream, then they are suggested to upgrade to 4.14.7. If users are on the 4.18.x releases stream, then they are suggested to upgrade to 4.18.2.
</code>
- [oscerd/CVE-2026-40860](https://github.com/oscerd/CVE-2026-40860)
### CVE-2026-40864 (2026-05-22)
<code>JupyterHub is software that allows users to create a multi-user server for Jupyter notebooks. In versions 4.1.0 through 5.4.4, XSRF protection (updated in 4.1.0) inappropriately treated requests with Sec-Fetch-Mode: no-cors as same-origin requests, bypassing XSRF checks. The JSON API is not affected, only HTTP form endpoints, such as /hub/spawn and /hub/accept-share, meaning attackers could trigger server spawn (but not access the server) and if the attacker is a JupyterHub user permitted to share access to their server, cause a user to accept a share and have access to the attacker's server. This issue has been fixed in version 5.4.5. If developers are unable to immediately upgrade, they can temporarily mitigate this issue by dropping requests to JupyterHub with Sec-Fetch-Mode: no-cors if they are using a reverse proxy.
@@ -3995,6 +4029,7 @@
- [shinthink/CVE-2026-49049](https://github.com/shinthink/CVE-2026-49049)
- [frada321/asdsadsadasdasdsadsad](https://github.com/frada321/asdsadsadasdasdsadsad)
- [Dr-D25/CVE-2026-49049](https://github.com/Dr-D25/CVE-2026-49049)
### CVE-2026-49060 (2026-06-11)
@@ -4381,6 +4416,13 @@
- [BiiTts/CVE-2026-54350-Budibase-NoSQL-Injection](https://github.com/BiiTts/CVE-2026-54350-Budibase-NoSQL-Injection)
### CVE-2026-54390 (2026-06-18)
<code>JTL Shop versions 5.2.0 through 5.7.1 contains a server-side template injection vulnerability that allows unauthenticated attackers to inject malicious template syntax due to unsanitized user-supplied input passed to the Smarty template engine. Attackers can exploit this flaw to read sensitive server-side values such as database credentials and encryption keys, and on versions 5.4.0 through 5.7.1, leverage registered Smarty modifiers including unserialize and file_get_contents to write a webshell to the web root and execute arbitrary commands as the web server user.
</code>
- [shinthink/CVE-2026-54390](https://github.com/shinthink/CVE-2026-54390)
### CVE-2026-54415 (2026-06-17)
<code>Missing Authorization in the server management routes (routes/admin.php) in Azuriom Azuriom CMS before 1.2.11 on all platforms allows an authenticated attacker with the admin.access permission to create AzLink server tokens and take over non-admin user accounts by changing their passwords and email addresses via crafted HTTP requests to /admin/servers/create and the AzLink API endpoints (/api/azlink/password, /api/azlink/email, /api/azlink/user/{id}).
@@ -7855,6 +7897,13 @@
- [SpiritualMachines/buds-audit](https://github.com/SpiritualMachines/buds-audit)
### CVE-2025-20720 (2025-10-14)
<code>In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418954; Issue ID: MSV-3569.
</code>
- [shinthink/CVE-2025-20720](https://github.com/shinthink/CVE-2025-20720)
### CVE-2025-21042 (2025-09-12)
<code>Out-of-bounds write in libimagecodec.quram.so prior to SMR Apr-2025 Release 1 allows remote attackers to execute arbitrary code.
@@ -12201,6 +12250,7 @@
</code>
- [Kai-One001/Letta-CVE-2025-51482-RCE](https://github.com/Kai-One001/Letta-CVE-2025-51482-RCE)
- [c0gnit00/CVE-2024-51482](https://github.com/c0gnit00/CVE-2024-51482)
### CVE-2025-51495 (2025-09-29)
@@ -23394,7 +23444,7 @@
- [whitebear-ch/GeoServerExploit](https://github.com/whitebear-ch/GeoServerExploit)
- [bmth666/GeoServer-Tools-CVE-2024-36401](https://github.com/bmth666/GeoServer-Tools-CVE-2024-36401)
- [amoy6228/CVE-2024-36401_Geoserver_RCE_POC](https://github.com/amoy6228/CVE-2024-36401_Geoserver_RCE_POC)
- [reveravip/Exploit-CVE-2024-36401](https://github.com/reveravip/Exploit-CVE-2024-36401)
- [ArcticDU/Exploit-CVE-2024-36401](https://github.com/ArcticDU/Exploit-CVE-2024-36401)
- [URJACK2025/CVE-2024-36401](https://github.com/URJACK2025/CVE-2024-36401)
- [mantanhacker/CVE-2024-36401-MASS](https://github.com/mantanhacker/CVE-2024-36401-MASS)
- [Delt-A/CVE-2024-36401-poc](https://github.com/Delt-A/CVE-2024-36401-poc)
@@ -24168,13 +24218,6 @@
- [thiagosmith/CVE-2024-40110](https://github.com/thiagosmith/CVE-2024-40110)
- [AnGrY-Althaf/CVE-2024-40110](https://github.com/AnGrY-Althaf/CVE-2024-40110)
### CVE-2024-40111 (2024-08-23)
<code>A persistent (stored) cross-site scripting (XSS) vulnerability has been identified in Automad 2.0.0-alpha.4. This vulnerability enables an attacker to inject malicious JavaScript code into the template body. The injected code is stored within the flat file CMS and is executed in the browser of any user visiting the forum.
</code>
- [theexploiters/CVE-2024-40111-Exploit](https://github.com/theexploiters/CVE-2024-40111-Exploit)
### CVE-2024-40119 (2024-07-17)
<code>Nepstech Wifi Router xpon (terminal) model NTPL-Xpon1GFEVN v.1.0 Firmware V2.0.1 contains a Cross-Site Request Forgery (CSRF) vulnerability in the password change function, which allows remote attackers to change the admin password without the user's consent, leading to a potential account takeover.
@@ -26330,6 +26373,7 @@
- [lnn0v4/sqli-hunter-CVE-2024-51482-PoC](https://github.com/lnn0v4/sqli-hunter-CVE-2024-51482-PoC)
- [Erhui-Li/CVE-2024-51482-ZoneMinder-CCTV-HTB-Reliable-EXP](https://github.com/Erhui-Li/CVE-2024-51482-ZoneMinder-CCTV-HTB-Reliable-EXP)
- [0xDaeras/CVE-2024-51482-POC](https://github.com/0xDaeras/CVE-2024-51482-POC)
- [c0gnit00/CVE-2024-51482](https://github.com/c0gnit00/CVE-2024-51482)
### CVE-2024-51567 (2024-10-29)
@@ -29674,7 +29718,7 @@
- [SamuelTulach/nullmap](https://github.com/SamuelTulach/nullmap)
- [Malwareman007/CVE-2023-21768](https://github.com/Malwareman007/CVE-2023-21768)
- [P4x1s/CVE-2023-21768-POC](https://github.com/P4x1s/CVE-2023-21768-POC)
- [ahiahai242/CVE-2023-21768](https://github.com/ahiahai242/CVE-2023-21768)
- [h1bAna/CVE-2023-21768](https://github.com/h1bAna/CVE-2023-21768)
- [zoemurmure/CVE-2023-21768-AFD-for-WinSock-EoP-exploit](https://github.com/zoemurmure/CVE-2023-21768-AFD-for-WinSock-EoP-exploit)
- [ivanovick1/Windows_AFD_LPE_CVE-2023-21768](https://github.com/ivanovick1/Windows_AFD_LPE_CVE-2023-21768)
- [Rosayxy/Recreate-cve-2023-21768](https://github.com/Rosayxy/Recreate-cve-2023-21768)
@@ -30976,7 +31020,7 @@
<code>Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
</code>
- [ahiahai242/CVE-2023-28218](https://github.com/ahiahai242/CVE-2023-28218)
- [h1bAna/CVE-2023-28218](https://github.com/h1bAna/CVE-2023-28218)
### CVE-2023-28229 (2023-04-11)
@@ -38649,7 +38693,6 @@
- [SanderSchepers1993/CyberSec2026](https://github.com/SanderSchepers1993/CyberSec2026)
- [ciri3/spring-cloud-gateway-cve-2022-22947-report](https://github.com/ciri3/spring-cloud-gateway-cve-2022-22947-report)
- [entr0pie/demo-cve-2022-22947](https://github.com/entr0pie/demo-cve-2022-22947)
- [Y0ngC1oud/CVE-2022-22947](https://github.com/Y0ngC1oud/CVE-2022-22947)
### CVE-2022-22948 (2022-03-29)
@@ -39956,6 +39999,7 @@
- [MAHABUB122003/Atlassian-CVE-2022-26134](https://github.com/MAHABUB122003/Atlassian-CVE-2022-26134)
- [crypt0lith/confluence-ognl-rce](https://github.com/crypt0lith/confluence-ognl-rce)
- [roodhelios/CVE-2022-26134-OGNL-Injection](https://github.com/roodhelios/CVE-2022-26134-OGNL-Injection)
- [RootEvil333/CVE-2022-26134](https://github.com/RootEvil333/CVE-2022-26134)
### CVE-2022-26135 (2022-06-30)
@@ -65219,7 +65263,7 @@
- [Synacktiv-contrib/exploiting-cve-2017-5123](https://github.com/Synacktiv-contrib/exploiting-cve-2017-5123)
- [teawater/CVE-2017-5123](https://github.com/teawater/CVE-2017-5123)
- [c3r34lk1ll3r/CVE-2017-5123](https://github.com/c3r34lk1ll3r/CVE-2017-5123)
- [ahiahai242/CVE-2017-5123](https://github.com/ahiahai242/CVE-2017-5123)
- [h1bAna/CVE-2017-5123](https://github.com/h1bAna/CVE-2017-5123)
- [NabilBoudra/cve-2017-5123](https://github.com/NabilBoudra/cve-2017-5123)
### CVE-2017-5124 (2018-02-07)