nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/07/15 00:49:33

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-07-15 09:49:33 +09:00
1 parent f1911a8817
commit a8dd65f3bd
73 files changed
+551 -341
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2015/CVE-2015-1538.json
+6 -6
View File
@@ -80,12 +80,12 @@
"description": "An exploit for CVE-2015-1538-1 - Google Stagefright ‘stsc’ MP4 Atom Integer Overflow Remote Code Execution",
"fork": false,
"created_at": "2015-09-10T23:00:59Z",
"updated_at": "2026-07-07T18:14:30Z",
"updated_at": "2026-07-14T20:28:30Z",
"pushed_at": "2015-09-10T23:01:09Z",
"stargazers_count": 204,
"watchers_count": 204,
"stargazers_count": 205,
"watchers_count": 205,
"has_discussions": false,
"forks_count": 115,
"forks_count": 116,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -93,8 +93,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 115,
"watchers": 204,
"forks": 116,
"watchers": 205,
"score": 0,
"subscribers_count": 14
},
2017/CVE-2017-0143.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "EternalBlue is a well-known SMB exploit created by the NSA to attack various versions of Windows, including Windows 7. Etern-Blue-Windows-7-Checker will basically send SMB packets to a host to see if that Windows host machine is vulnerable to the EternalBlue exploit (CVE-2017-0143).",
"fork": false,
"created_at": "2020-10-07T06:19:45Z",
"updated_at": "2026-07-07T18:16:24Z",
"updated_at": "2026-07-14T20:30:05Z",
"pushed_at": "2026-03-07T07:19:18Z",
"stargazers_count": 6,
"watchers_count": 6,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 6,
"watchers": 7,
"score": 0,
"subscribers_count": 1
},
2017/CVE-2017-0199.json
+6 -6
View File
@@ -80,12 +80,12 @@
"description": "Exploit toolkit CVE-2017-0199 - v4.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft Office RCE. It could generate a malicious RTF\/PPSX file and deliver metasploit \/ meterpreter \/ other payload to victim without any complex configuration.",
"fork": false,
"created_at": "2017-04-17T08:10:07Z",
"updated_at": "2026-07-07T18:14:49Z",
"updated_at": "2026-07-14T20:28:48Z",
"pushed_at": "2017-11-19T11:01:16Z",
"stargazers_count": 723,
"watchers_count": 723,
"stargazers_count": 724,
"watchers_count": 724,
"has_discussions": false,
"forks_count": 255,
"forks_count": 256,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -93,8 +93,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 255,
"watchers": 723,
"forks": 256,
"watchers": 724,
"score": 0,
"subscribers_count": 43
},
2017/CVE-2017-11882.json
+10 -10
View File
@@ -146,10 +146,10 @@
"description": "CVE-2017-11882 Exploit accepts over 17k bytes long command\/code in maximum.",
"fork": false,
"created_at": "2017-11-21T15:22:41Z",
"updated_at": "2026-07-07T18:15:03Z",
"updated_at": "2026-07-14T20:29:00Z",
"pushed_at": "2017-12-06T12:47:31Z",
"stargazers_count": 330,
"watchers_count": 330,
"stargazers_count": 331,
"watchers_count": 331,
"has_discussions": false,
"forks_count": 92,
"allow_forking": true,
@@ -165,7 +165,7 @@
],
"visibility": "public",
"forks": 92,
"watchers": 330,
"watchers": 331,
"score": 0,
"subscribers_count": 15
},
@@ -417,12 +417,12 @@
"description": "PoC Exploit for CVE-2018-0802 (and optionally CVE-2017-11882)",
"fork": false,
"created_at": "2018-01-11T09:43:46Z",
"updated_at": "2026-07-07T18:15:07Z",
"updated_at": "2026-07-14T20:29:03Z",
"pushed_at": "2018-02-28T12:32:54Z",
"stargazers_count": 269,
"watchers_count": 269,
"stargazers_count": 270,
"watchers_count": 270,
"has_discussions": false,
"forks_count": 126,
"forks_count": 127,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -430,8 +430,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 126,
"watchers": 269,
"forks": 127,
"watchers": 270,
"score": 0,
"subscribers_count": 16
},
2017/CVE-2017-8759.json
+6 -6
View File
@@ -217,12 +217,12 @@
"description": "Exploit toolkit CVE-2017-8759 - v1.0 is a handy python script which provides pentesters and security researchers a quick and effective way to test Microsoft .NET Framework RCE. It could generate a malicious RTF file and deliver metasploit \/ meterpreter \/ other payload to victim without any complex configuration.",
"fork": false,
"created_at": "2017-09-14T10:04:39Z",
"updated_at": "2026-07-07T18:14:59Z",
"updated_at": "2026-07-14T20:28:56Z",
"pushed_at": "2018-09-10T16:25:12Z",
"stargazers_count": 312,
"watchers_count": 312,
"stargazers_count": 313,
"watchers_count": 313,
"has_discussions": false,
"forks_count": 108,
"forks_count": 109,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -230,8 +230,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 108,
"watchers": 312,
"forks": 109,
"watchers": 313,
"score": 0,
"subscribers_count": 22
},
2018/CVE-2018-0802.json
+6 -6
View File
@@ -47,12 +47,12 @@
"description": "PoC Exploit for CVE-2018-0802 (and optionally CVE-2017-11882)",
"fork": false,
"created_at": "2018-01-11T09:43:46Z",
"updated_at": "2026-07-07T18:15:07Z",
"updated_at": "2026-07-14T20:29:03Z",
"pushed_at": "2018-02-28T12:32:54Z",
"stargazers_count": 269,
"watchers_count": 269,
"stargazers_count": 270,
"watchers_count": 270,
"has_discussions": false,
"forks_count": 126,
"forks_count": 127,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,8 +60,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 126,
"watchers": 269,
"forks": 127,
"watchers": 270,
"score": 0,
"subscribers_count": 16
},
2018/CVE-2018-1000117.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Buffer Overflow Vulnerability that can result ACE",
"fork": false,
"created_at": "2018-06-05T20:28:29Z",
"updated_at": "2026-07-07T18:15:18Z",
"updated_at": "2026-07-14T20:29:12Z",
"pushed_at": "2018-06-05T20:45:13Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
}
2018/CVE-2018-19126.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "PrestaShop (1.6.x <= 1.6.1.23 or 1.7.x <= 1.7.4.4) Back Office Remote Code Execution (CVE-2018-19126)",
"fork": false,
"created_at": "2018-12-01T10:53:45Z",
"updated_at": "2026-07-07T18:15:28Z",
"updated_at": "2026-07-14T20:29:20Z",
"pushed_at": "2018-12-12T22:11:45Z",
"stargazers_count": 39,
"watchers_count": 39,
"stargazers_count": 40,
"watchers_count": 40,
"has_discussions": false,
"forks_count": 10,
"allow_forking": true,
@@ -32,7 +32,7 @@
],
"visibility": "public",
"forks": 10,
"watchers": 39,
"watchers": 40,
"score": 0,
"subscribers_count": 4
}
2018/CVE-2018-20250.json
+6 -6
View File
@@ -151,7 +151,7 @@
"stargazers_count": 21,
"watchers_count": 21,
"has_discussions": false,
"forks_count": 15,
"forks_count": 16,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -159,7 +159,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 15,
"forks": 16,
"watchers": 21,
"score": 0,
"subscribers_count": 5
@@ -184,7 +184,7 @@
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 5,
"forks_count": 6,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -192,7 +192,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 5,
"forks": 6,
"watchers": 2,
"score": 0,
"subscribers_count": 0
@@ -421,7 +421,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 3,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -429,7 +429,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"forks": 4,
"watchers": 0,
"score": 0,
"subscribers_count": 0
2018/CVE-2018-8120.json
+4 -4
View File
@@ -117,10 +117,10 @@
"description": "CVE-2018-8120 Exploit for Win2003 Win2008 WinXP Win7 ",
"fork": false,
"created_at": "2018-06-07T08:30:07Z",
"updated_at": "2026-07-07T18:15:18Z",
"updated_at": "2026-07-14T20:29:12Z",
"pushed_at": "2018-08-08T05:48:24Z",
"stargazers_count": 292,
"watchers_count": 292,
"stargazers_count": 293,
"watchers_count": 293,
"has_discussions": false,
"forks_count": 114,
"allow_forking": true,
@@ -131,7 +131,7 @@
"topics": [],
"visibility": "public",
"forks": 114,
"watchers": 292,
"watchers": 293,
"score": 0,
"subscribers_count": 1
},
2019/CVE-2019-0708.json
+6 -6
View File
@@ -1951,7 +1951,7 @@
"stargazers_count": 1181,
"watchers_count": 1181,
"has_discussions": false,
"forks_count": 332,
"forks_count": 333,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1959,7 +1959,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 332,
"forks": 333,
"watchers": 1181,
"score": 0,
"subscribers_count": 66
@@ -3105,10 +3105,10 @@
"description": "ispy V1.0 - Eternalblue(ms17-010)\/Bluekeep(CVE-2019-0708) Scanner and exploit ( Metasploit automation )",
"fork": false,
"created_at": "2019-09-30T19:46:21Z",
"updated_at": "2026-07-07T18:15:50Z",
"updated_at": "2026-07-14T20:29:38Z",
"pushed_at": "2021-02-06T00:24:21Z",
"stargazers_count": 244,
"watchers_count": 244,
"stargazers_count": 245,
"watchers_count": 245,
"has_discussions": false,
"forks_count": 70,
"allow_forking": true,
@@ -3119,7 +3119,7 @@
"topics": [],
"visibility": "public",
"forks": 70,
"watchers": 244,
"watchers": 245,
"score": 0,
"subscribers_count": 22
},
2019/CVE-2019-0808.json
+2 -2
View File
@@ -85,7 +85,7 @@
"stargazers_count": 90,
"watchers_count": 90,
"has_discussions": false,
"forks_count": 35,
"forks_count": 36,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -93,7 +93,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 35,
"forks": 36,
"watchers": 90,
"score": 0,
"subscribers_count": 4
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-07-14T17:32:52Z",
"pushed_at": "2026-07-14T17:32:36Z",
"updated_at": "2026-07-15T00:04:39Z",
"pushed_at": "2026-07-15T00:04:35Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2019/CVE-2019-15514.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "telegram bug that discloses user's hidden phone number (still unpatched) (exploit included) ",
"fork": false,
"created_at": "2021-12-21T19:23:09Z",
"updated_at": "2026-07-13T19:48:50Z",
"updated_at": "2026-07-14T18:56:24Z",
"pushed_at": "2021-12-19T18:18:36Z",
"stargazers_count": 24,
"watchers_count": 24,
"stargazers_count": 25,
"watchers_count": 25,
"has_discussions": false,
"forks_count": 15,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 15,
"watchers": 24,
"watchers": 25,
"score": 0,
"subscribers_count": 0
}
2019/CVE-2019-2215.json
+4 -4
View File
@@ -214,10 +214,10 @@
"description": "android-kernel-exploitation-ashfaq-CVE-2019-2215 docker setup for mac users ",
"fork": false,
"created_at": "2020-04-25T07:31:35Z",
"updated_at": "2026-07-07T18:16:07Z",
"updated_at": "2026-07-14T20:29:51Z",
"pushed_at": "2020-04-25T07:34:43Z",
"stargazers_count": 6,
"watchers_count": 6,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -228,7 +228,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 6,
"watchers": 7,
"score": 0,
"subscribers_count": 1
},
2019/CVE-2019-9193.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 21,
"watchers_count": 21,
"has_discussions": false,
"forks_count": 5,
"forks_count": 6,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -68,7 +68,7 @@
"remote-code-execution"
],
"visibility": "public",
"forks": 5,
"forks": 6,
"watchers": 21,
"score": 0,
"subscribers_count": 1
2020/CVE-2020-1472.json
+10 -10
View File
@@ -47,10 +47,10 @@
"description": "Test tool for CVE-2020-1472",
"fork": false,
"created_at": "2020-09-08T08:58:37Z",
"updated_at": "2026-07-12T17:20:50Z",
"updated_at": "2026-07-14T20:58:01Z",
"pushed_at": "2025-06-27T07:13:13Z",
"stargazers_count": 1823,
"watchers_count": 1823,
"stargazers_count": 1824,
"watchers_count": 1824,
"has_discussions": false,
"forks_count": 359,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 359,
"watchers": 1823,
"watchers": 1824,
"score": 0,
"subscribers_count": 84
},
@@ -716,10 +716,10 @@
"description": "Test script for CVE-2020-1472 for both RPC\/TCP and RPC\/SMB",
"fork": false,
"created_at": "2020-09-17T16:53:17Z",
"updated_at": "2026-01-20T00:10:05Z",
"updated_at": "2026-07-14T20:51:15Z",
"pushed_at": "2023-05-01T21:48:28Z",
"stargazers_count": 61,
"watchers_count": 61,
"stargazers_count": 62,
"watchers_count": 62,
"has_discussions": false,
"forks_count": 13,
"allow_forking": true,
@@ -730,7 +730,7 @@
"topics": [],
"visibility": "public",
"forks": 13,
"watchers": 61,
"watchers": 62,
"score": 0,
"subscribers_count": 7
},
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-07-14T17:49:41Z",
"pushed_at": "2026-07-14T17:49:36Z",
"updated_at": "2026-07-14T23:37:41Z",
"pushed_at": "2026-07-14T23:37:38Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2021/CVE-2021-21972.json
+4 -4
View File
@@ -798,10 +798,10 @@
"description": "CVE-2021-21972 – ᴠᴍᴡᴀʀᴇ ᴄʟɪᴇɴᴛ ᴜɴᴀᴜᴛʜᴏʀɪᴢᴇᴅ ᴄᴏᴅᴇ ɪɴᴊᴇᴄᴛɪᴏɴ (ʀᴄᴇ)",
"fork": false,
"created_at": "2021-10-03T23:03:11Z",
"updated_at": "2026-07-07T18:17:14Z",
"updated_at": "2026-07-14T20:30:51Z",
"pushed_at": "2022-03-07T14:12:38Z",
"stargazers_count": 10,
"watchers_count": 10,
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -817,7 +817,7 @@
],
"visibility": "public",
"forks": 4,
"watchers": 10,
"watchers": 11,
"score": 0,
"subscribers_count": 1
},
2021/CVE-2021-26857.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "proxylogon exploit - CVE-2021-26857",
"fork": false,
"created_at": "2021-03-11T17:32:32Z",
"updated_at": "2026-07-07T18:16:44Z",
"updated_at": "2026-07-14T20:30:26Z",
"pushed_at": "2021-03-11T17:34:15Z",
"stargazers_count": 110,
"watchers_count": 110,
"stargazers_count": 111,
"watchers_count": 111,
"has_discussions": false,
"forks_count": 34,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 34,
"watchers": 110,
"watchers": 111,
"score": 0,
"subscribers_count": 6
}
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-07-14T17:45:25Z",
"pushed_at": "2026-07-14T17:44:45Z",
"updated_at": "2026-07-15T00:07:02Z",
"pushed_at": "2026-07-15T00:06:59Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-35448.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "POC for CVE-2021-35448 based on https:\/\/www.exploit-db.com\/exploits\/49601",
"fork": false,
"created_at": "2025-08-06T16:10:00Z",
"updated_at": "2026-07-14T18:23:10Z",
"pushed_at": "2025-08-06T16:58:44Z",
"updated_at": "2026-07-14T18:25:35Z",
"pushed_at": "2026-07-14T18:25:31Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2021/CVE-2021-4034.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 1157,
"watchers_count": 1157,
"has_discussions": false,
"forks_count": 315,
"forks_count": 314,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -64,7 +64,7 @@
"poc"
],
"visibility": "public",
"forks": 315,
"forks": 314,
"watchers": 1157,
"score": 0,
"subscribers_count": 13
2021/CVE-2021-40444.json
+4 -4
View File
@@ -245,10 +245,10 @@
"description": "CVE-2021-40444 PoC",
"fork": false,
"created_at": "2021-09-10T16:55:53Z",
"updated_at": "2026-07-14T13:38:48Z",
"updated_at": "2026-07-14T19:28:15Z",
"pushed_at": "2021-12-25T18:31:02Z",
"stargazers_count": 1762,
"watchers_count": 1762,
"stargazers_count": 1763,
"watchers_count": 1763,
"has_discussions": false,
"forks_count": 476,
"allow_forking": true,
@@ -259,7 +259,7 @@
"topics": [],
"visibility": "public",
"forks": 476,
"watchers": 1762,
"watchers": 1763,
"score": 0,
"subscribers_count": 27
},
2022/CVE-2022-0847.json
+4 -4
View File
@@ -377,10 +377,10 @@
"description": "CVE-2022-0847: Linux Kernel Privilege Escalation Vulnerability",
"fork": false,
"created_at": "2022-03-08T12:43:43Z",
"updated_at": "2026-07-07T18:17:33Z",
"updated_at": "2026-07-14T20:31:08Z",
"pushed_at": "2022-03-08T13:15:35Z",
"stargazers_count": 20,
"watchers_count": 20,
"stargazers_count": 21,
"watchers_count": 21,
"has_discussions": false,
"forks_count": 15,
"allow_forking": true,
@@ -391,7 +391,7 @@
"topics": [],
"visibility": "public",
"forks": 15,
"watchers": 20,
"watchers": 21,
"score": 0,
"subscribers_count": 1
},
2022/CVE-2022-21894.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 351,
"watchers_count": 351,
"has_discussions": false,
"forks_count": 63,
"forks_count": 64,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -35,7 +35,7 @@
"windows-boot"
],
"visibility": "public",
"forks": 63,
"forks": 64,
"watchers": 351,
"score": 0,
"subscribers_count": 9
2022/CVE-2022-22947.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "Spring cloud gateway code injection : CVE-2022-22947",
"fork": false,
"created_at": "2022-03-03T11:14:37Z",
"updated_at": "2026-07-07T18:17:32Z",
"updated_at": "2026-07-14T20:31:07Z",
"pushed_at": "2022-03-03T11:27:18Z",
"stargazers_count": 9,
"watchers_count": 9,
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 9,
"watchers": 10,
"score": 0,
"subscribers_count": 1
},
2022/CVE-2022-29464.json
+4 -4
View File
@@ -457,10 +457,10 @@
"description": "A bots loader for CVE-2022-29464 with multithreading",
"fork": false,
"created_at": "2022-05-15T08:51:16Z",
"updated_at": "2026-07-12T21:42:46Z",
"updated_at": "2026-07-14T20:31:16Z",
"pushed_at": "2026-07-06T08:38:43Z",
"stargazers_count": 10,
"watchers_count": 10,
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -479,7 +479,7 @@
],
"visibility": "public",
"forks": 4,
"watchers": 10,
"watchers": 11,
"score": 0,
"subscribers_count": 1
},
2022/CVE-2022-29799.json
+2 -2
View File
@@ -59,8 +59,8 @@
"description": "Demonstrate local privilege escalation in networkd-dispatcher via CVE-2022-29799 and CVE-2022-29800 using this C proof of concept.",
"fork": false,
"created_at": "2026-06-23T14:05:18Z",
"updated_at": "2026-07-14T18:04:36Z",
"pushed_at": "2026-07-14T18:02:50Z",
"updated_at": "2026-07-14T21:16:32Z",
"pushed_at": "2026-07-14T21:16:24Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-21674.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2024-03-07T05:43:48Z",
"updated_at": "2026-04-19T21:19:17Z",
"updated_at": "2026-07-15T00:23:56Z",
"pushed_at": "2024-04-05T00:05:44Z",
"stargazers_count": 39,
"watchers_count": 39,
"stargazers_count": 40,
"watchers_count": 40,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 7,
"watchers": 39,
"watchers": 40,
"score": 0,
"subscribers_count": 2
}
2023/CVE-2023-32434.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙",
"fork": false,
"created_at": "2025-08-13T09:19:29Z",
"updated_at": "2026-07-14T15:48:39Z",
"pushed_at": "2026-07-14T15:48:36Z",
"updated_at": "2026-07-14T23:33:50Z",
"pushed_at": "2026-07-14T23:33:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-4863.json
+4 -4
View File
@@ -245,10 +245,10 @@
"description": null,
"fork": false,
"created_at": "2023-12-18T23:12:25Z",
"updated_at": "2026-07-02T14:27:39Z",
"updated_at": "2026-07-14T23:17:15Z",
"pushed_at": "2024-05-13T17:40:58Z",
"stargazers_count": 55,
"watchers_count": 55,
"stargazers_count": 56,
"watchers_count": 56,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -259,7 +259,7 @@
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 55,
"watchers": 56,
"score": 0,
"subscribers_count": 3
},
2024/CVE-2024-0044.json
+4 -4
View File
@@ -315,10 +315,10 @@
"description": "RunAsAnyone: PoC and writeup for bypassing the initial patch of CVE-2024-0044, Android run-as any app vulnerability allowing privilege escalation from adb to installed app",
"fork": false,
"created_at": "2024-09-27T09:02:08Z",
"updated_at": "2026-07-14T11:47:06Z",
"updated_at": "2026-07-14T20:31:47Z",
"pushed_at": "2024-09-30T12:48:08Z",
"stargazers_count": 179,
"watchers_count": 179,
"stargazers_count": 180,
"watchers_count": 180,
"has_discussions": false,
"forks_count": 28,
"allow_forking": true,
@@ -329,7 +329,7 @@
"topics": [],
"visibility": "public",
"forks": 28,
"watchers": 179,
"watchers": 180,
"score": 0,
"subscribers_count": 3
},
2024/CVE-2024-0670.json
+2 -2
View File
@@ -118,8 +118,8 @@
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
"fork": false,
"created_at": "2026-01-08T01:32:09Z",
"updated_at": "2026-07-14T16:49:12Z",
"pushed_at": "2026-07-14T16:49:07Z",
"updated_at": "2026-07-15T00:17:59Z",
"pushed_at": "2026-07-15T00:17:55Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-31317.json
+4 -4
View File
@@ -52,7 +52,7 @@
"stargazers_count": 57,
"watchers_count": 57,
"has_discussions": false,
"forks_count": 20,
"forks_count": 21,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 20,
"forks": 21,
"watchers": 57,
"score": 0,
"subscribers_count": 3
@@ -349,7 +349,7 @@
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -357,7 +357,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"forks": 2,
"watchers": 2,
"score": 0,
"subscribers_count": 0
2024/CVE-2024-34740.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Writeup and exploit for CVE-2024-34740, integer overflow in Android's BinaryXmlSerializer to system_server file write and then to system_server code execution from normal installed app",
"fork": false,
"created_at": "2025-10-08T12:54:02Z",
"updated_at": "2026-07-07T18:18:23Z",
"updated_at": "2026-07-14T20:31:51Z",
"pushed_at": "2025-10-08T12:54:46Z",
"stargazers_count": 66,
"watchers_count": 66,
"stargazers_count": 67,
"watchers_count": 67,
"has_discussions": false,
"forks_count": 21,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 21,
"watchers": 66,
"watchers": 67,
"score": 0,
"subscribers_count": 2
}
2025/CVE-2025-14847.json
+6 -6
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
"fork": false,
"created_at": "2025-07-30T15:52:00Z",
"updated_at": "2026-07-14T16:53:45Z",
"pushed_at": "2026-07-14T16:53:41Z",
"updated_at": "2026-07-15T00:21:20Z",
"pushed_at": "2026-07-15T00:21:16Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -661,8 +661,8 @@
"description": "Burp Suite extension to detect CVE-2025-14847 (MongoBleed) via manual leak tests from a dedicated UI tab.",
"fork": false,
"created_at": "2025-12-30T12:31:01Z",
"updated_at": "2026-04-16T18:55:57Z",
"pushed_at": "2026-04-16T18:55:52Z",
"updated_at": "2026-07-14T21:21:43Z",
"pushed_at": "2026-07-14T21:21:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -1129,8 +1129,8 @@
"description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
"fork": false,
"created_at": "2026-01-14T06:05:44Z",
"updated_at": "2026-07-14T16:52:48Z",
"pushed_at": "2026-07-14T16:52:43Z",
"updated_at": "2026-07-15T00:20:35Z",
"pushed_at": "2026-07-15T00:20:32Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-24071.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "CVE-2025-24071: NTLM Hash Leak via RAR\/ZIP Extraction and .library-ms File",
"fork": false,
"created_at": "2025-03-16T20:10:19Z",
"updated_at": "2026-07-11T15:43:54Z",
"updated_at": "2026-07-14T20:31:48Z",
"pushed_at": "2025-03-20T21:22:23Z",
"stargazers_count": 402,
"watchers_count": 402,
"stargazers_count": 403,
"watchers_count": 403,
"has_discussions": false,
"forks_count": 67,
"forks_count": 68,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 67,
"watchers": 402,
"forks": 68,
"watchers": 403,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-24085.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Glass Cage is a zero-click PNG-based RCE chain in iOS 18.2.1, bypassing LockDown mode protection by exploiting ImageIO (CVE-2025-43300), then WebKit(CVE-2025-24201) and Core Media(CVE-2025-24085) to achieve sandbox escape, kernel-level access, and device bricking. Triggered via iMessage, it enables full compromise with no user interaction.",
"fork": false,
"created_at": "2025-08-23T05:08:06Z",
"updated_at": "2026-06-22T19:38:01Z",
"updated_at": "2026-07-14T18:53:57Z",
"pushed_at": "2026-01-11T20:09:28Z",
"stargazers_count": 39,
"watchers_count": 39,
"stargazers_count": 40,
"watchers_count": 40,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 9,
"watchers": 39,
"watchers": 40,
"score": 0,
"subscribers_count": 1
}
2025/CVE-2025-24257.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis",
"fork": false,
"created_at": "2026-04-04T03:42:55Z",
"updated_at": "2026-07-14T17:38:13Z",
"pushed_at": "2026-07-14T17:37:52Z",
"updated_at": "2026-07-14T20:51:34Z",
"pushed_at": "2026-07-14T20:51:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-26529.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "SSRF to XSS - XSS to RCE Moodle",
"fork": false,
"created_at": "2025-04-12T23:17:40Z",
"updated_at": "2026-05-06T23:47:47Z",
"updated_at": "2026-07-14T21:41:06Z",
"pushed_at": "2025-04-13T00:02:26Z",
"stargazers_count": 10,
"watchers_count": 10,
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 10,
"watchers": 11,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-27363.json
+2 -2
View File
@@ -80,8 +80,8 @@
"description": "Integer overflow in FreeType software, which also affects Chrome",
"fork": false,
"created_at": "2025-07-23T09:44:58Z",
"updated_at": "2026-05-29T21:42:41Z",
"pushed_at": "2025-08-27T20:06:22Z",
"updated_at": "2026-07-14T19:36:54Z",
"pushed_at": "2026-07-14T19:36:49Z",
"stargazers_count": 31,
"watchers_count": 31,
"has_discussions": false,
2025/CVE-2025-32463.json
+2 -2
View File
@@ -1529,8 +1529,8 @@
"description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.",
"fork": false,
"created_at": "2025-09-20T00:42:07Z",
"updated_at": "2026-07-14T15:54:45Z",
"pushed_at": "2026-07-14T15:54:41Z",
"updated_at": "2026-07-14T23:39:07Z",
"pushed_at": "2026-07-14T23:39:04Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-36911.json
+4 -4
View File
@@ -86,10 +86,10 @@
"description": "WPair is a defensive security research tool that demonstrates the CVE-2025-36911 (eg WhisperPair) vulnerability in Google's Fast Pair protocol. This vulnerability affects millions of Bluetooth audio devices worldwide, allowing unauthorized pairing and potential microphone access without user consent.",
"fork": false,
"created_at": "2026-01-17T05:28:08Z",
"updated_at": "2026-07-14T08:29:24Z",
"updated_at": "2026-07-15T00:01:39Z",
"pushed_at": "2026-01-18T00:15:59Z",
"stargazers_count": 806,
"watchers_count": 806,
"stargazers_count": 807,
"watchers_count": 807,
"has_discussions": false,
"forks_count": 90,
"allow_forking": true,
@@ -100,7 +100,7 @@
"topics": [],
"visibility": "public",
"forks": 90,
"watchers": 806,
"watchers": 807,
"score": 0,
"subscribers_count": 23
},
2025/CVE-2025-38352.json
+8 -8
View File
@@ -14,10 +14,10 @@
"description": "This is a proof of concept for CVE-2025-38352, a vulnerability in the Linux kernel's POSIX CPU timers implementation. The September 2025 Android Bulletin mentions that this vulnerability has been used in limited, targeted exploitation in the wild.",
"fork": false,
"created_at": "2025-12-21T23:59:18Z",
"updated_at": "2026-07-13T12:09:13Z",
"updated_at": "2026-07-14T20:31:53Z",
"pushed_at": "2026-01-05T15:41:23Z",
"stargazers_count": 112,
"watchers_count": 112,
"stargazers_count": 113,
"watchers_count": 113,
"has_discussions": false,
"forks_count": 11,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 11,
"watchers": 112,
"watchers": 113,
"score": 0,
"subscribers_count": 1
},
@@ -47,10 +47,10 @@
"description": "Android kernel exploit for CVE-2025-38352, previously exploited in-the-wild. Targets vulnerable x86_64 Linux kernels v5.10.x.",
"fork": false,
"created_at": "2026-01-03T16:52:18Z",
"updated_at": "2026-07-09T23:37:00Z",
"updated_at": "2026-07-14T20:31:53Z",
"pushed_at": "2026-01-05T03:45:37Z",
"stargazers_count": 307,
"watchers_count": 307,
"stargazers_count": 308,
"watchers_count": 308,
"has_discussions": false,
"forks_count": 48,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 48,
"watchers": 307,
"watchers": 308,
"score": 0,
"subscribers_count": 2
},
2025/CVE-2025-49844.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.",
"fork": false,
"created_at": "2019-04-13T07:51:09Z",
"updated_at": "2026-07-14T16:15:00Z",
"pushed_at": "2026-07-14T16:12:57Z",
"updated_at": "2026-07-14T23:51:16Z",
"pushed_at": "2026-07-14T23:51:12Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
"fork": false,
"created_at": "2022-04-06T09:27:39Z",
"updated_at": "2026-07-14T16:14:02Z",
"pushed_at": "2026-07-14T16:13:55Z",
"updated_at": "2026-07-14T23:51:46Z",
"pushed_at": "2026-07-14T23:51:43Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-54068.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "A tool designed to exploit CVE-2025-54068 and Remote Command Execution if the APP_KEY of the Livewire project is known.",
"fork": false,
"created_at": "2025-12-23T09:54:54Z",
"updated_at": "2026-07-13T12:09:15Z",
"updated_at": "2026-07-14T20:20:36Z",
"pushed_at": "2026-07-06T15:13:59Z",
"stargazers_count": 147,
"watchers_count": 147,
"stargazers_count": 148,
"watchers_count": 148,
"has_discussions": false,
"forks_count": 35,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 35,
"watchers": 147,
"watchers": 148,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-54424.json
+2 -2
View File
@@ -53,8 +53,8 @@
"description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐",
"fork": false,
"created_at": "2025-08-14T05:16:16Z",
"updated_at": "2026-07-14T15:50:28Z",
"pushed_at": "2026-07-14T15:49:17Z",
"updated_at": "2026-07-14T23:34:23Z",
"pushed_at": "2026-07-14T23:34:19Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2025/CVE-2025-55182.json
+22 -22
View File
@@ -14,8 +14,8 @@
"description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.",
"fork": false,
"created_at": "2022-06-17T10:19:10Z",
"updated_at": "2026-07-14T16:40:49Z",
"pushed_at": "2026-07-14T16:39:50Z",
"updated_at": "2026-07-15T00:11:12Z",
"pushed_at": "2026-07-15T00:11:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -99,8 +99,8 @@
"description": null,
"fork": false,
"created_at": "2024-11-29T12:32:19Z",
"updated_at": "2026-07-14T16:41:13Z",
"pushed_at": "2026-07-14T16:40:34Z",
"updated_at": "2026-07-15T00:11:42Z",
"pushed_at": "2026-07-15T00:11:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -148,8 +148,8 @@
"description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
"fork": false,
"created_at": "2025-06-06T16:34:46Z",
"updated_at": "2026-07-14T16:41:00Z",
"pushed_at": "2026-07-14T16:40:06Z",
"updated_at": "2026-07-15T00:11:24Z",
"pushed_at": "2026-07-15T00:11:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -4310,10 +4310,10 @@
"description": null,
"fork": false,
"created_at": "2025-12-06T14:29:35Z",
"updated_at": "2026-04-09T07:57:15Z",
"updated_at": "2026-07-14T19:49:59Z",
"pushed_at": "2026-03-06T00:09:21Z",
"stargazers_count": 17,
"watchers_count": 17,
"stargazers_count": 18,
"watchers_count": 18,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -4324,7 +4324,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 17,
"watchers": 18,
"score": 0,
"subscribers_count": 0
},
@@ -11449,10 +11449,10 @@
"description": "CVE-2025-55182 React2Shell PoC - Critical RCE in React Server Components \/ Next.js. CVSS 10.0. Error-based exfil, reverse shell, interactive mode.",
"fork": false,
"created_at": "2025-12-20T19:59:11Z",
"updated_at": "2026-07-01T23:47:48Z",
"updated_at": "2026-07-14T23:56:36Z",
"pushed_at": "2026-05-24T16:13:57Z",
"stargazers_count": 8,
"watchers_count": 8,
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -11474,7 +11474,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 8,
"watchers": 9,
"score": 0,
"subscribers_count": 0
},
@@ -11741,8 +11741,8 @@
"description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.",
"fork": false,
"created_at": "2025-12-24T14:48:19Z",
"updated_at": "2026-07-14T16:40:43Z",
"pushed_at": "2026-07-14T16:39:49Z",
"updated_at": "2026-07-15T00:11:06Z",
"pushed_at": "2026-07-15T00:11:03Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12259,8 +12259,8 @@
"description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
"fork": false,
"created_at": "2026-01-02T01:28:57Z",
"updated_at": "2026-07-14T16:45:05Z",
"pushed_at": "2026-07-14T16:44:57Z",
"updated_at": "2026-07-15T00:15:01Z",
"pushed_at": "2026-07-15T00:14:57Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -15204,10 +15204,10 @@
"description": "Toolkit for CVE-2025-55182, also known as React2Shell.",
"fork": false,
"created_at": "2026-06-12T12:53:14Z",
"updated_at": "2026-07-05T17:02:07Z",
"updated_at": "2026-07-14T23:53:39Z",
"pushed_at": "2026-06-12T12:55:52Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -15226,7 +15226,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-66398.json
+2 -2
View File
@@ -64,8 +64,8 @@
"description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.",
"fork": false,
"created_at": "2026-03-23T09:09:21Z",
"updated_at": "2026-07-14T17:31:54Z",
"pushed_at": "2026-07-14T17:31:46Z",
"updated_at": "2026-07-14T20:44:37Z",
"pushed_at": "2026-07-14T20:44:32Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-66478.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.",
"fork": false,
"created_at": "2025-10-01T07:40:09Z",
"updated_at": "2026-07-14T16:42:15Z",
"pushed_at": "2026-07-14T16:41:18Z",
"updated_at": "2026-07-15T00:12:16Z",
"pushed_at": "2026-07-15T00:12:13Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-68921.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.",
"fork": false,
"created_at": "2026-01-24T21:00:41Z",
"updated_at": "2026-07-14T16:59:30Z",
"pushed_at": "2026-07-14T16:59:23Z",
"updated_at": "2026-07-15T00:26:31Z",
"pushed_at": "2026-07-15T00:26:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-20841.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.",
"fork": false,
"created_at": "2024-09-22T12:19:06Z",
"updated_at": "2026-07-14T17:16:20Z",
"pushed_at": "2026-07-14T17:15:39Z",
"updated_at": "2026-07-15T00:41:18Z",
"pushed_at": "2026-07-15T00:41:14Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.",
"fork": false,
"created_at": "2026-02-26T05:21:28Z",
"updated_at": "2026-07-14T17:15:31Z",
"pushed_at": "2026-07-14T17:14:50Z",
"updated_at": "2026-07-15T00:40:35Z",
"pushed_at": "2026-07-15T00:40:32Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-21628.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1199641361,
"name": "CVE-2026-21628-POC",
"full_name": "webshellseo8\/CVE-2026-21628-POC",
"owner": {
"login": "webshellseo8",
"id": 201017228,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/201017228?v=4",
"html_url": "https:\/\/github.com\/webshellseo8",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/webshellseo8\/CVE-2026-21628-POC",
"description": null,
"fork": false,
"created_at": "2026-04-02T14:56:08Z",
"updated_at": "2026-07-15T00:05:12Z",
"pushed_at": "2026-07-15T00:05:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-24061.json
+2 -2
View File
@@ -59,8 +59,8 @@
"description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.",
"fork": false,
"created_at": "2026-02-03T19:46:10Z",
"updated_at": "2026-07-14T17:06:23Z",
"pushed_at": "2026-07-14T17:05:19Z",
"updated_at": "2026-07-15T00:31:46Z",
"pushed_at": "2026-07-15T00:31:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24291.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions",
"fork": false,
"created_at": "2026-03-26T04:38:27Z",
"updated_at": "2026-07-14T17:33:59Z",
"pushed_at": "2026-07-14T17:33:34Z",
"updated_at": "2026-07-14T20:46:43Z",
"pushed_at": "2026-07-14T20:46:39Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-2441.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.",
"fork": false,
"created_at": "2026-03-03T14:19:18Z",
"updated_at": "2026-07-14T17:18:30Z",
"pushed_at": "2026-07-14T17:18:03Z",
"updated_at": "2026-07-15T00:43:28Z",
"pushed_at": "2026-07-15T00:43:25Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-2472.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.",
"fork": false,
"created_at": "2026-03-10T14:40:04Z",
"updated_at": "2026-07-14T17:23:25Z",
"pushed_at": "2026-07-14T17:22:39Z",
"updated_at": "2026-07-15T00:47:47Z",
"pushed_at": "2026-07-15T00:47:44Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-26718.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1300981534,
"name": "CVE-2026-26718",
"full_name": "Ibrahim-Sartawi\/CVE-2026-26718",
"owner": {
"login": "Ibrahim-Sartawi",
"id": 77017701,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/77017701?v=4",
"html_url": "https:\/\/github.com\/Ibrahim-Sartawi",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Ibrahim-Sartawi\/CVE-2026-26718",
"description": "A Cross-Site Request Forgery (CSRF) vulnerability exists in the xxl-job-admin web application that allows an attacker to perform unauthorized modifications to Glue IDE shell scripts. The affected endpoint lacks proper CSRF token validation and accepts arbitrary HTTP methods via a permissive request mapping",
"fork": false,
"created_at": "2026-07-14T22:08:26Z",
"updated_at": "2026-07-14T22:19:24Z",
"pushed_at": "2026-07-14T22:19:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-26719.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1134993882,
"name": "CVE-2026-26719",
"full_name": "Ibrahim-Sartawi\/CVE-2026-26719",
"owner": {
"login": "Ibrahim-Sartawi",
"id": 77017701,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/77017701?v=4",
"html_url": "https:\/\/github.com\/Ibrahim-Sartawi",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Ibrahim-Sartawi\/CVE-2026-26719",
"description": "A stored Cross‑Site Scripting vulnerability exists in xxl-job-admin JobInfoController.java where the addressList parameter accepts unsanitized URL‑encoded JavaScript. The payload is stored and later executed in users’ browsers, lead unauthorized actions.",
"fork": false,
"created_at": "2026-01-15T13:50:14Z",
"updated_at": "2026-07-14T22:19:19Z",
"pushed_at": "2026-07-14T22:19:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-31431.json
+4 -40
View File
@@ -723,8 +723,8 @@
"description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.",
"fork": false,
"created_at": "2026-05-05T04:58:21Z",
"updated_at": "2026-07-14T17:54:21Z",
"pushed_at": "2026-07-14T17:53:26Z",
"updated_at": "2026-07-14T21:07:23Z",
"pushed_at": "2026-07-14T21:07:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -772,8 +772,8 @@
"description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.",
"fork": false,
"created_at": "2026-05-06T09:49:14Z",
"updated_at": "2026-07-14T17:54:11Z",
"pushed_at": "2026-07-14T17:54:07Z",
"updated_at": "2026-07-14T21:07:56Z",
"pushed_at": "2026-07-14T21:07:52Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
@@ -806,42 +806,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1232772151,
"name": "Copy-Fail",
"full_name": "p401a-ops\/Copy-Fail",
"owner": {
"login": "p401a-ops",
"id": 261409834,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/261409834?v=4",
"html_url": "https:\/\/github.com\/p401a-ops",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/p401a-ops\/Copy-Fail",
"description": "CVE-2026-31431 (\"Copy Fail\") vulnerability detector & exploit on Astra linux 1.7.6 with 3.7+ python",
"fork": false,
"created_at": "2026-05-08T08:55:08Z",
"updated_at": "2026-05-12T08:37:52Z",
"pushed_at": "2026-05-12T08:37:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"astra-linux",
"copy-fail"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1232934547,
"name": "ansible-mitigate-copyfail-dirtyfrag",
2026/CVE-2026-31802.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"fork": false,
"created_at": "2026-03-28T20:49:46Z",
"updated_at": "2026-07-14T17:34:55Z",
"pushed_at": "2026-07-14T17:34:45Z",
"updated_at": "2026-07-14T20:48:02Z",
"pushed_at": "2026-07-14T20:47:55Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-41940.json
+8 -8
View File
@@ -258,8 +258,8 @@
"description": "Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.",
"fork": false,
"created_at": "2026-05-06T18:08:48Z",
"updated_at": "2026-07-14T17:54:28Z",
"pushed_at": "2026-07-14T17:54:23Z",
"updated_at": "2026-07-14T21:08:16Z",
"pushed_at": "2026-07-14T21:08:12Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -576,12 +576,12 @@
"description": "CVE-2026-41940 authentication bypass vulnerability proof-of-concept",
"fork": false,
"created_at": "2026-06-28T07:13:52Z",
"updated_at": "2026-07-14T12:46:33Z",
"updated_at": "2026-07-15T00:37:20Z",
"pushed_at": "2026-07-14T12:46:16Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 31,
"watchers_count": 31,
"has_discussions": false,
"forks_count": 2,
"forks_count": 11,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -594,8 +594,8 @@
"cve-2026-41940-poc"
],
"visibility": "public",
"forks": 2,
"watchers": 7,
"forks": 11,
"watchers": 31,
"score": 0,
"subscribers_count": 1
}
2026/CVE-2026-43499.json
+50 -10
View File
@@ -245,10 +245,10 @@
"description": "CVE-2026-43499 Implementation for 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k",
"fork": false,
"created_at": "2026-07-12T10:15:03Z",
"updated_at": "2026-07-14T17:22:54Z",
"updated_at": "2026-07-14T23:23:30Z",
"pushed_at": "2026-07-12T14:08:59Z",
"stargazers_count": 130,
"watchers_count": 130,
"stargazers_count": 136,
"watchers_count": 136,
"has_discussions": false,
"forks_count": 39,
"allow_forking": true,
@@ -259,7 +259,7 @@
"topics": [],
"visibility": "public",
"forks": 39,
"watchers": 130,
"watchers": 136,
"score": 0,
"subscribers_count": 0
},
@@ -296,6 +296,46 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1298423930,
"name": "ghostlock-oneplus",
"full_name": "JoinChang\/ghostlock-oneplus",
"owner": {
"login": "JoinChang",
"id": 35451392,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/35451392?v=4",
"html_url": "https:\/\/github.com\/JoinChang",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/JoinChang\/ghostlock-oneplus",
"description": "GhostLock (CVE-2026-43499) kernel exploit for OnePlus devices with locked bootloader",
"fork": false,
"created_at": "2026-07-12T16:05:24Z",
"updated_at": "2026-07-14T19:09:32Z",
"pushed_at": "2026-07-14T19:09:06Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"android",
"coloros",
"ghostlock",
"kernelsu",
"oneplus",
"root"
],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1298678209,
"name": "Mi8E5-Unlocker-by-CVE-2026-43499",
@@ -509,12 +549,12 @@
"description": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.",
"fork": false,
"created_at": "2026-07-14T14:21:27Z",
"updated_at": "2026-07-14T16:29:00Z",
"updated_at": "2026-07-15T00:40:43Z",
"pushed_at": "2026-07-14T16:28:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -522,8 +562,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"forks": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-43501.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Termux Privilege Escalation Tool & Root Manager - CVE-2026-43501",
"fork": false,
"created_at": "2026-07-11T03:46:50Z",
"updated_at": "2026-07-12T04:10:34Z",
"updated_at": "2026-07-14T23:07:33Z",
"pushed_at": "2026-07-11T04:30:20Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-43724.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-43724 - Apple's published enough advisories about the issue, I'm not getting paid for any of my kernel bugs. ",
"fork": false,
"created_at": "2026-07-13T22:38:54Z",
"updated_at": "2026-07-14T16:16:34Z",
"updated_at": "2026-07-15T00:29:58Z",
"pushed_at": "2026-07-13T22:40:03Z",
"stargazers_count": 9,
"watchers_count": 9,
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 9,
"watchers": 11,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-45585.json
+6 -6
View File
@@ -212,8 +212,8 @@
"description": "Manage and recover BitLocker encrypted drives with this tool for Windows 11 recovery key management and educational study of CVE-2026-45585.",
"fork": false,
"created_at": "2026-06-16T07:21:36Z",
"updated_at": "2026-07-14T18:02:59Z",
"pushed_at": "2026-07-14T18:01:15Z",
"updated_at": "2026-07-14T21:14:52Z",
"pushed_at": "2026-07-14T21:14:48Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
@@ -264,10 +264,10 @@
"description": "yellow key bitlocker yellow screen bitlocker bitlocker recovery key CVE-2026-45585 microsoft account secure boot bypass command prompt windows 11 windows 10 surface pro uefi firmware encryption key data recovery troubleshoot boot loop cmd unlock drive setup guide tutorial",
"fork": false,
"created_at": "2026-07-09T17:32:32Z",
"updated_at": "2026-07-14T13:06:56Z",
"updated_at": "2026-07-15T00:50:21Z",
"pushed_at": "2026-07-09T18:43:42Z",
"stargazers_count": 127,
"watchers_count": 127,
"stargazers_count": 154,
"watchers_count": 154,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -299,7 +299,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 127,
"watchers": 154,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-48939.json
+8 -8
View File
@@ -14,10 +14,10 @@
"description": "iCagenda Unauthenticated File Upload to RCE",
"fork": false,
"created_at": "2026-06-29T11:09:38Z",
"updated_at": "2026-06-29T11:11:43Z",
"updated_at": "2026-07-14T23:05:10Z",
"pushed_at": "2026-06-29T11:11:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
@@ -47,10 +47,10 @@
"description": "Pre-auth arbitrary file upload RCE exploit for iCagenda Joomla extension < 4.0.8 (CVSS 10.0)",
"fork": false,
"created_at": "2026-07-05T20:56:48Z",
"updated_at": "2026-07-07T02:12:49Z",
"updated_at": "2026-07-14T23:05:29Z",
"pushed_at": "2026-07-06T00:18:01Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -71,7 +71,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-52200.json → 2026/CVE-2026-50338.json
+11 -11
View File
@@ -1,21 +1,21 @@
[
{
"id": 1236406042,
"name": "CVE-2026-52200",
"full_name": "lamaper\/CVE-2026-52200",
"id": 1301000567,
"name": "CVE-2026-50338",
"full_name": "JohannesLks\/CVE-2026-50338",
"owner": {
"login": "lamaper",
"id": 108182318,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/108182318?v=4",
"html_url": "https:\/\/github.com\/lamaper",
"login": "JohannesLks",
"id": 74617774,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74617774?v=4",
"html_url": "https:\/\/github.com\/JohannesLks",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/lamaper\/CVE-2026-52200",
"html_url": "https:\/\/github.com\/JohannesLks\/CVE-2026-50338",
"description": null,
"fork": false,
"created_at": "2026-05-12T08:08:17Z",
"updated_at": "2026-07-03T02:14:29Z",
"pushed_at": "2026-05-12T08:34:01Z",
"created_at": "2026-07-14T22:41:54Z",
"updated_at": "2026-07-14T22:47:42Z",
"pushed_at": "2026-07-14T22:47:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-51833.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1296733457,
"name": "CVE-2026-51833-Public-Disclosure",
"full_name": "dennywise\/CVE-2026-51833-Public-Disclosure",
"owner": {
"login": "dennywise",
"id": 111564474,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/111564474?v=4",
"html_url": "https:\/\/github.com\/dennywise",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/dennywise\/CVE-2026-51833-Public-Disclosure",
"description": "CVE-2026-51833 Advisory",
"fork": false,
"created_at": "2026-07-10T17:12:46Z",
"updated_at": "2026-07-14T21:31:37Z",
"pushed_at": "2026-07-14T21:31:31Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-55511.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1301055967,
"name": "CVE-2026-55511",
"full_name": "junfuture1103\/CVE-2026-55511",
"owner": {
"login": "junfuture1103",
"id": 62176354,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62176354?v=4",
"html_url": "https:\/\/github.com\/junfuture1103",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/junfuture1103\/CVE-2026-55511",
"description": "CVE-2026-55511 poc",
"fork": false,
"created_at": "2026-07-15T00:32:21Z",
"updated_at": "2026-07-15T00:40:10Z",
"pushed_at": "2026-07-15T00:40:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-56291.json
+4 -4
View File
@@ -87,10 +87,10 @@
"description": "Mendeteksi versi (passive detection) & Exploitation CVE POC",
"fork": false,
"created_at": "2026-07-13T19:50:06Z",
"updated_at": "2026-07-13T23:08:05Z",
"updated_at": "2026-07-14T20:55:49Z",
"pushed_at": "2026-07-13T22:58:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -103,7 +103,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-8181.json
+2 -2
View File
@@ -366,8 +366,8 @@
"description": "CVE-2026-8181 — Burst Statistics WordPress plugin Authentication Bypass (CVSS 9.8) to Admin Account Takeover. Mass scanner with FOFA\/Shodan integration and modern GUI.",
"fork": false,
"created_at": "2026-07-14T14:40:53Z",
"updated_at": "2026-07-14T15:51:29Z",
"pushed_at": "2026-07-14T15:43:25Z",
"updated_at": "2026-07-14T19:53:03Z",
"pushed_at": "2026-07-14T19:52:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
README.md
+41 -10
View File
@@ -777,7 +777,7 @@
### CVE-2026-8023 (2026-06-29)
<code>Zephyr's HTTP server (subsys/net/lib/http) provides a static-filesystem resource type (HTTP_RESOURCE_TYPE_STATIC_FS, available when CONFIG_FILE_SYSTEM is enabled) that serves files from a configured root directory. Before this fix, both the HTTP/1 and HTTP/2 front-ends placed the raw, attacker-controlled request path into client-url_buffer (assembled in on_url() for HTTP/1 and copied verbatim from the :path pseudo-header for HTTP/2) without resolving ./.. segments. The static-FS handler then built the on-disk filename by directly concatenating the configured root with that raw URL (snprintk(fname, ..., &quot;%s%s&quot;, static_fs_detail-fs_path, client-url_buffer) at http_server_http1.c:603 and http_server_http2.c:490) and opened it with fs_open(fname, FS_O_READ). Because the handler is reached via wildcard/leading-dir (fnmatch FNM_LEADING_DIR) or fallback resource matching, a request such as GET /&lt;prefix/../../&lt;file is dispatched to the handler and, after the underlying filesystem (e.g. LittleFS/FAT) resolves the .. segments, escapes the configured web root, letting an unauthenticated remote client read arbitrary readable files on the mounted volume (information disclosure). The HTTP server requires no TLS or authentication to reach this path. The fix adds http_server_remove_dot_segments(), which canonicalizes the path portion of the URL before resource lookup in both protocol handlers, neutralizing the traversal. Affects releases v4.0.0 through v4.4.0 for deployments that register a static-filesystem resource.
<code>Zephyr's HTTP server (subsys/net/lib/http) provides a static-filesystem resource type (HTTP_RESOURCE_TYPE_STATIC_FS, available when CONFIG_FILE_SYSTEM is enabled) that serves files from a configured root directory. Before this fix, both the HTTP/1 and HTTP/2 front-ends placed the raw, attacker-controlled request path into client-&gt;url_buffer (assembled in on_url() for HTTP/1 and copied verbatim from the :path pseudo-header for HTTP/2) without resolving ./.. segments. The static-FS handler then built the on-disk filename by directly concatenating the configured root with that raw URL (snprintk(fname, ..., &quot;%s%s&quot;, static_fs_detail-&gt;fs_path, client-&gt;url_buffer) at http_server_http1.c:603 and http_server_http2.c:490) and opened it with fs_open(fname, FS_O_READ). Because the handler is reached via wildcard/leading-dir (fnmatch FNM_LEADING_DIR) or fallback resource matching, a request such as GET /&lt;prefix&gt;/../../&lt;file&gt; is dispatched to the handler and, after the underlying filesystem (e.g. LittleFS/FAT) resolves the .. segments, escapes the configured web root, letting an unauthenticated remote client read arbitrary readable files on the mounted volume (information disclosure). The HTTP server requires no TLS or authentication to reach this path. The fix adds http_server_remove_dot_segments(), which canonicalizes the path portion of the URL before resource lookup in both protocol handlers, neutralizing the traversal. Affects releases v4.0.0 through v4.4.0 for deployments that register a static-filesystem resource.
</code>
- [ret2c/CVE-2026-8023](https://github.com/ret2c/CVE-2026-8023)
@@ -1455,6 +1455,13 @@
- [sentinel-aidefense/CVE-2026-21509](https://github.com/sentinel-aidefense/CVE-2026-21509)
### CVE-2026-21628 (2026-03-05)
<code>A improperly secured file management feature allows uploads of dangerous data types for unauthenticated users, leading to remote code execution.
</code>
- [webshellseo8/CVE-2026-21628-POC](https://github.com/webshellseo8/CVE-2026-21628-POC)
### CVE-2026-21852 (2026-01-21)
<code>Claude Code is an agentic coding tool. Prior to version 2.0.65, vulnerability in Claude Code's project-load flow allowed malicious repositories to exfiltrate data including Anthropic API keys before users confirmed trust. An attacker-controlled repository could include a settings file that sets ANTHROPIC_BASE_URL to an attacker-controlled endpoint and when the repository was opened, Claude Code would read the configuration and immediately issue API requests before showing the trust prompt, potentially leaking the user's API keys. Users on standard Claude Code auto-update have received this fix already. Users performing manual updates are advised to update to version 2.0.65, which contains a patch, or to the latest version.
@@ -1851,6 +1858,12 @@
### CVE-2026-26555
- [horrister/axios-supply-chain-cve-2026-26555](https://github.com/horrister/axios-supply-chain-cve-2026-26555)
### CVE-2026-26718
- [Ibrahim-Sartawi/CVE-2026-26718](https://github.com/Ibrahim-Sartawi/CVE-2026-26718)
### CVE-2026-26719
- [Ibrahim-Sartawi/CVE-2026-26719](https://github.com/Ibrahim-Sartawi/CVE-2026-26719)
### CVE-2026-26897
- [iwallplace/CVE-2026-26897-EcoOnline-DeepLink](https://github.com/iwallplace/CVE-2026-26897-EcoOnline-DeepLink)
@@ -2171,7 +2184,6 @@
- [ochebotar/copy-fail-CVE-2026-31431-detection-probe](https://github.com/ochebotar/copy-fail-CVE-2026-31431-detection-probe)
- [Liverwortenuresis371/copyfail-rs](https://github.com/Liverwortenuresis371/copyfail-rs)
- [Dullpurple-sloop726/CVE-2026-31431-Linux-Copy-Fail](https://github.com/Dullpurple-sloop726/CVE-2026-31431-Linux-Copy-Fail)
- [p401a-ops/Copy-Fail](https://github.com/p401a-ops/Copy-Fail)
- [infiniroot/ansible-mitigate-copyfail-dirtyfrag](https://github.com/infiniroot/ansible-mitigate-copyfail-dirtyfrag)
- [KaraZajac/DIRTYFAIL](https://github.com/KaraZajac/DIRTYFAIL)
- [krisiasty/vcheck](https://github.com/krisiasty/vcheck)
@@ -3420,6 +3432,7 @@
- [caspy123/CVE-2026-43499](https://github.com/caspy123/CVE-2026-43499)
- [x-spy/CVE-2026-43499-popsicle](https://github.com/x-spy/CVE-2026-43499-popsicle)
- [dmcdtc/openvz-cve-patch-2026](https://github.com/dmcdtc/openvz-cve-patch-2026)
- [JoinChang/ghostlock-oneplus](https://github.com/JoinChang/ghostlock-oneplus)
- [Linuxoid-cn/Mi8E5-Unlocker-by-CVE-2026-43499](https://github.com/Linuxoid-cn/Mi8E5-Unlocker-by-CVE-2026-43499)
- [joehquak/Mi8E5-Unlocker-by-CVE-2026-43499](https://github.com/joehquak/Mi8E5-Unlocker-by-CVE-2026-43499)
- [Yakayna/SpringPeace](https://github.com/Yakayna/SpringPeace)
@@ -4017,10 +4030,18 @@
- [ManagerEmpty/CVE-2026-47291-httpsys](https://github.com/ManagerEmpty/CVE-2026-47291-httpsys)
### CVE-2026-47423
### CVE-2026-47423 (2026-07-14)
<code>DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. In 3.4.4, DOMPurify allowed selectedcontent by default, allowing browsers to re-clone an XSS payload after sanitization so that unsanitized markup inside &lt;selectedcontent&gt; is returned. This issue is fixed in version 3.4.5.
</code>
- [Galaxy-sc/CVE-2026-47423-dompurify-xss-detector](https://github.com/Galaxy-sc/CVE-2026-47423-dompurify-xss-detector)
### CVE-2026-47429
### CVE-2026-47429 (2026-07-14)
<code>Vitest is a testing framework powered by Vite. Prior to 3.2.5 and 4.1.0, the Vitest UI/API server on Windows used isFileServingAllowed incorrectly for /__vitest_attachment__, allowing \\?\\..\\ path traversal to read files outside the project; exposed API write and rerun features such as saveTestFile and rerun could also allow arbitrary script execution. This issue is fixed in versions 3.2.5 and 4.1.0.
</code>
- [az9713/cve-lite-on-pi](https://github.com/az9713/cve-lite-on-pi)
### CVE-2026-47668
@@ -4442,6 +4463,13 @@
- [zero-trace7/CVE-2026-50229](https://github.com/zero-trace7/CVE-2026-50229)
### CVE-2026-50338 (2026-07-14)
<code>Improper authentication in Azure Spring Apps allows an authorized attacker to elevate privileges over a network.
</code>
- [JohannesLks/CVE-2026-50338](https://github.com/JohannesLks/CVE-2026-50338)
### CVE-2026-50507 (2026-06-09)
<code>Missing authentication for critical function in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.
@@ -4493,6 +4521,9 @@
### CVE-2026-51788
- [aykhan32/CVE-2026-51788](https://github.com/aykhan32/CVE-2026-51788)
### CVE-2026-51833
- [dennywise/CVE-2026-51833-Public-Disclosure](https://github.com/dennywise/CVE-2026-51833-Public-Disclosure)
### CVE-2026-51947 (2026-07-01)
<code>An issue in Pivotal CRM 6.6.4.08 and systems using patch-ghi-15381-cwe-502-20251225.zip (fixed in Pivotal CRM 6.6.5.10 and Patch_CWE502_20260316.zip) allows a remote attacker to execute arbitrary code via the Pivotal.Engine.Client.Services.Conversion.dll component. NOTE: this issue exists because of an incomplete fix for CVE-2026-39253.
@@ -4500,15 +4531,12 @@
- [timtimxs/CVE-2026-51947-Advisory](https://github.com/timtimxs/CVE-2026-51947-Advisory)
### CVE-2026-52100
- [nk7667/-linx-server-vulnerability-report](https://github.com/nk7667/-linx-server-vulnerability-report)
### CVE-2026-52100 (2026-07-14)
### CVE-2026-52200 (2026-07-08)
<code>An issue in Generic OEM UZ801_v2.1 4G LTE Router V3.4.3 allows a remote attacker to execute arbitrary code via the /ajax web management API endpoint in MifiService.apk
<code>Cross Site Request Forgery vulnerability in andreimarcu linux-server v.1.0 through v.2.3.8 allows a remote attacker to execute arbitrary code via the uploadPutHandler function
</code>
- [lamaper/CVE-2026-52200](https://github.com/lamaper/CVE-2026-52200)
- [nk7667/-linx-server-vulnerability-report](https://github.com/nk7667/-linx-server-vulnerability-report)
### CVE-2026-52217
- [teteco/CVE-2026-52217-VTEX-Checkout-CrossTenant-IDOR](https://github.com/teteco/CVE-2026-52217-VTEX-Checkout-CrossTenant-IDOR)
@@ -4773,6 +4801,9 @@
### CVE-2026-55494
- [4qu4r1um/tugtainer-1.30.2-CVE-2026-55494-and-CVE-2026-62308-to-RCE](https://github.com/4qu4r1um/tugtainer-1.30.2-CVE-2026-55494-and-CVE-2026-62308-to-RCE)
### CVE-2026-55511
- [junfuture1103/CVE-2026-55511](https://github.com/junfuture1103/CVE-2026-55511)
### CVE-2026-55584
- [mirackayikci/CVE-2026-55584](https://github.com/mirackayikci/CVE-2026-55584)