nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/07/24 12:49:05

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-07-24 21:49:05 +09:00
1 parent d954aa5ddf
commit af9b233451
83 files changed
+837 -662
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2010/CVE-2010-4804.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Android Data Stealing Vulnerability",
"fork": false,
"created_at": "2014-02-06T18:53:31Z",
"updated_at": "2026-05-27T01:14:56Z",
"updated_at": "2026-07-24T11:28:51Z",
"pushed_at": "2014-02-06T19:06:01Z",
"stargazers_count": 9,
"watchers_count": 9,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 9,
"watchers": 8,
"score": 0,
"subscribers_count": 1
}
2016/CVE-2016-10033.json
+33
View File
@@ -612,5 +612,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1310916936,
"name": "CVE-2016-10033",
"full_name": "blue-chocolates\/CVE-2016-10033",
"owner": {
"login": "blue-chocolates",
"id": 87387117,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/87387117?v=4",
"html_url": "https:\/\/github.com\/blue-chocolates",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/blue-chocolates\/CVE-2016-10033",
"description": null,
"fork": false,
"created_at": "2026-07-24T10:28:59Z",
"updated_at": "2026-07-24T10:34:41Z",
"pushed_at": "2026-07-24T10:34:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2017/CVE-2017-11882.json
+8 -8
View File
@@ -80,10 +80,10 @@
"description": "CVE-2017-11882 from https:\/\/github.com\/embedi\/CVE-2017-11882",
"fork": false,
"created_at": "2017-11-21T05:55:53Z",
"updated_at": "2026-07-23T09:59:41Z",
"updated_at": "2026-07-24T08:30:43Z",
"pushed_at": "2017-11-29T03:33:53Z",
"stargazers_count": 536,
"watchers_count": 536,
"stargazers_count": 537,
"watchers_count": 537,
"has_discussions": false,
"forks_count": 242,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 242,
"watchers": 536,
"watchers": 537,
"score": 0,
"subscribers_count": 24
},
@@ -146,10 +146,10 @@
"description": "CVE-2017-11882 Exploit accepts over 17k bytes long command\/code in maximum.",
"fork": false,
"created_at": "2017-11-21T15:22:41Z",
"updated_at": "2026-07-15T21:47:11Z",
"updated_at": "2026-07-24T08:31:11Z",
"pushed_at": "2017-12-06T12:47:31Z",
"stargazers_count": 330,
"watchers_count": 330,
"stargazers_count": 331,
"watchers_count": 331,
"has_discussions": false,
"forks_count": 92,
"allow_forking": true,
@@ -165,7 +165,7 @@
],
"visibility": "public",
"forks": 92,
"watchers": 330,
"watchers": 331,
"score": 0,
"subscribers_count": 15
},
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-07-24T04:30:40Z",
"pushed_at": "2026-07-24T04:30:28Z",
"updated_at": "2026-07-24T11:21:57Z",
"pushed_at": "2026-07-24T11:20:27Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2019/CVE-2019-11581.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Atlassian JIRA Template injection vulnerability RCE",
"fork": false,
"created_at": "2019-07-16T02:27:00Z",
"updated_at": "2026-02-07T06:28:32Z",
"updated_at": "2026-07-24T06:38:07Z",
"pushed_at": "2019-07-22T06:47:52Z",
"stargazers_count": 92,
"watchers_count": 92,
"stargazers_count": 93,
"watchers_count": 93,
"has_discussions": false,
"forks_count": 30,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 30,
"watchers": 92,
"watchers": 93,
"score": 0,
"subscribers_count": 2
},
2020/CVE-2020-1472.json
+2 -2
View File
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-07-24T06:11:04Z",
"pushed_at": "2026-07-24T06:10:59Z",
"updated_at": "2026-07-24T12:04:59Z",
"pushed_at": "2026-07-24T12:04:03Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-07-24T04:33:44Z",
"pushed_at": "2026-07-24T04:33:40Z",
"updated_at": "2026-07-24T11:23:55Z",
"pushed_at": "2026-07-24T11:23:10Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-44228.json
+35 -35
View File
@@ -3845,7 +3845,7 @@
"stargazers_count": 37,
"watchers_count": 37,
"has_discussions": false,
"forks_count": 6,
"forks_count": 7,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -3853,7 +3853,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 6,
"forks": 7,
"watchers": 37,
"score": 0,
"subscribers_count": 7
@@ -11027,39 +11027,6 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 487921535,
"name": "Log4j-Exploit-CVE-2021-44228",
"full_name": "Willian-2-0-0-1\/Log4j-Exploit-CVE-2021-44228",
"owner": {
"login": "Willian-2-0-0-1",
"id": 39037497,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/39037497?v=4",
"html_url": "https:\/\/github.com\/Willian-2-0-0-1",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Willian-2-0-0-1\/Log4j-Exploit-CVE-2021-44228",
"description": null,
"fork": false,
"created_at": "2022-05-02T16:53:26Z",
"updated_at": "2022-05-02T16:53:26Z",
"pushed_at": "2022-05-14T13:18:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 490330900,
"name": "Log4Shell-obfuscated-payloads-generator",
@@ -14249,5 +14216,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1310832690,
"name": "cve-2021-44228-log4shell_rce_reproduction",
"full_name": "razureink\/cve-2021-44228-log4shell_rce_reproduction",
"owner": {
"login": "razureink",
"id": 200357710,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/200357710?v=4",
"html_url": "https:\/\/github.com\/razureink",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/razureink\/cve-2021-44228-log4shell_rce_reproduction",
"description": "CVE-2021-44228 Log4Shell - Apache Log4j2 JNDI Injection RCE",
"fork": false,
"created_at": "2026-07-24T08:51:13Z",
"updated_at": "2026-07-24T08:52:12Z",
"pushed_at": "2026-07-24T08:51:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2022/CVE-2022-29799.json
+2 -2
View File
@@ -59,8 +59,8 @@
"description": "Demonstrate local privilege escalation in networkd-dispatcher via CVE-2022-29799 and CVE-2022-29800 using this C proof of concept.",
"fork": false,
"created_at": "2026-06-23T14:05:18Z",
"updated_at": "2026-07-19T07:06:48Z",
"pushed_at": "2026-07-19T07:06:42Z",
"updated_at": "2026-07-24T11:23:52Z",
"pushed_at": "2026-07-24T11:23:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-20696.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 16,
"watchers_count": 16,
"has_discussions": false,
"forks_count": 5,
"forks_count": 6,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 5,
"forks": 6,
"watchers": 16,
"score": 0,
"subscribers_count": 1
2023/CVE-2023-32434.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙",
"fork": false,
"created_at": "2025-08-13T09:19:29Z",
"updated_at": "2026-07-19T08:22:40Z",
"pushed_at": "2026-07-19T08:22:33Z",
"updated_at": "2026-07-24T11:58:16Z",
"pushed_at": "2026-07-24T11:57:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-38709.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Apache HTTP Server Vulnerability Testing Tool | PoC for CVE-2024-38472 , CVE-2024-39573 , CVE-2024-38477 , CVE-2024-38476 , CVE-2024-38475 , CVE-2024-38474 , CVE-2024-38473 , CVE-2023-38709",
"fork": false,
"created_at": "2024-10-05T20:32:45Z",
"updated_at": "2026-07-23T19:31:25Z",
"updated_at": "2026-07-24T11:42:30Z",
"pushed_at": "2024-10-05T20:37:02Z",
"stargazers_count": 133,
"watchers_count": 133,
"stargazers_count": 134,
"watchers_count": 134,
"has_discussions": false,
"forks_count": 23,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 23,
"watchers": 133,
"watchers": 134,
"score": 0,
"subscribers_count": 1
}
2023/CVE-2023-38817.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": ":pager: a tiny code that performs kernel-mode read\/write using CVE-2023-38817.",
"fork": false,
"created_at": "2023-11-05T06:00:08Z",
"updated_at": "2025-10-03T23:11:14Z",
"updated_at": "2026-07-24T08:29:29Z",
"pushed_at": "2025-03-28T06:37:20Z",
"stargazers_count": 18,
"watchers_count": 18,
"stargazers_count": 19,
"watchers_count": 19,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -32,7 +32,7 @@
],
"visibility": "public",
"forks": 4,
"watchers": 18,
"watchers": 19,
"score": 0,
"subscribers_count": 1
},
2024/CVE-2024-0670.json
+2 -2
View File
@@ -118,8 +118,8 @@
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
"fork": false,
"created_at": "2026-01-08T01:32:09Z",
"updated_at": "2026-07-19T05:57:32Z",
"pushed_at": "2026-07-19T05:57:28Z",
"updated_at": "2026-07-24T10:14:38Z",
"pushed_at": "2026-07-24T10:13:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-1708.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Reproduction of cve-2024-1708-connectwise_rce_reproduction",
"fork": false,
"created_at": "2026-07-24T06:35:53Z",
"updated_at": "2026-07-24T06:35:54Z",
"pushed_at": "2026-07-24T06:35:54Z",
"updated_at": "2026-07-24T06:45:49Z",
"pushed_at": "2026-07-24T06:45:32Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-23897.json
+2 -2
View File
@@ -1466,8 +1466,8 @@
"description": "Reproduction of cve-2024-23897-jenkins_lfi_reproduction",
"fork": false,
"created_at": "2026-07-24T06:36:17Z",
"updated_at": "2026-07-24T06:36:18Z",
"pushed_at": "2026-07-24T06:36:18Z",
"updated_at": "2026-07-24T06:45:56Z",
"pushed_at": "2026-07-24T06:45:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-27198.json
+33
View File
@@ -662,5 +662,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1310789052,
"name": "CVE-2024-27198",
"full_name": "kxom9ks\/CVE-2024-27198",
"owner": {
"login": "kxom9ks",
"id": 210848900,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/210848900?v=4",
"html_url": "https:\/\/github.com\/kxom9ks",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/kxom9ks\/CVE-2024-27198",
"description": null,
"fork": false,
"created_at": "2026-07-24T08:03:55Z",
"updated_at": "2026-07-24T09:41:07Z",
"pushed_at": "2026-07-24T09:39:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2024/CVE-2024-3400.json
+2 -2
View File
@@ -1432,8 +1432,8 @@
"description": "Reproduction of cve-2024-3400-panos_rce_reproduction",
"fork": false,
"created_at": "2026-07-24T06:36:40Z",
"updated_at": "2026-07-24T06:36:41Z",
"pushed_at": "2026-07-24T06:36:41Z",
"updated_at": "2026-07-24T06:46:54Z",
"pushed_at": "2026-07-24T06:45:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-38472.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Apache HTTP Server Vulnerability Testing Tool | PoC for CVE-2024-38472 , CVE-2024-39573 , CVE-2024-38477 , CVE-2024-38476 , CVE-2024-38475 , CVE-2024-38474 , CVE-2024-38473 , CVE-2023-38709",
"fork": false,
"created_at": "2024-10-05T20:32:45Z",
"updated_at": "2026-07-23T19:31:25Z",
"updated_at": "2026-07-24T11:42:30Z",
"pushed_at": "2024-10-05T20:37:02Z",
"stargazers_count": 133,
"watchers_count": 133,
"stargazers_count": 134,
"watchers_count": 134,
"has_discussions": false,
"forks_count": 23,
"allow_forking": true,
@@ -72,7 +72,7 @@
],
"visibility": "public",
"forks": 23,
"watchers": 133,
"watchers": 134,
"score": 0,
"subscribers_count": 1
}
2024/CVE-2024-49112.json
-33
View File
@@ -31,38 +31,5 @@
"watchers": 14,
"score": 0,
"subscribers_count": 2
},
{
"id": 913597480,
"name": "CVE-2024-49112-PoC",
"full_name": "bo0l3an\/CVE-2024-49112-PoC",
"owner": {
"login": "bo0l3an",
"id": 194175693,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/194175693?v=4",
"html_url": "https:\/\/github.com\/bo0l3an",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/bo0l3an\/CVE-2024-49112-PoC",
"description": "CVE-2024-49112 LDAP RCE PoC and Metasploit Module",
"fork": false,
"created_at": "2025-01-08T01:56:41Z",
"updated_at": "2026-04-26T20:19:30Z",
"pushed_at": "2025-01-14T21:22:05Z",
"stargazers_count": 12,
"watchers_count": 12,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 12,
"score": 0,
"subscribers_count": 1
}
]
2024/CVE-2024-49113.json
+2 -2
View File
@@ -83,8 +83,8 @@
"description": "Reproduction of cve-2024-49113-ldap_nightmare_reproduction",
"fork": false,
"created_at": "2026-07-24T06:37:05Z",
"updated_at": "2026-07-24T06:37:06Z",
"pushed_at": "2026-07-24T06:37:06Z",
"updated_at": "2026-07-24T06:46:45Z",
"pushed_at": "2026-07-24T06:46:29Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-56426.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "A PoC of the CVE-2024-56426 vulnerability.",
"fork": false,
"created_at": "2026-04-07T12:02:52Z",
"updated_at": "2026-07-21T16:22:06Z",
"pushed_at": "2026-07-20T19:45:44Z",
"updated_at": "2026-07-24T11:47:52Z",
"pushed_at": "2026-07-24T11:47:29Z",
"stargazers_count": 15,
"watchers_count": 15,
"has_discussions": false,
2025/CVE-2025-0282.json
+2 -2
View File
@@ -344,8 +344,8 @@
"description": "Reproduction of cve-2025-0282-ivanti_rce_reproduction",
"fork": false,
"created_at": "2026-07-24T06:37:30Z",
"updated_at": "2026-07-24T06:37:31Z",
"pushed_at": "2026-07-24T06:37:31Z",
"updated_at": "2026-07-24T06:48:01Z",
"pushed_at": "2026-07-24T06:47:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-14847.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
"fork": false,
"created_at": "2025-07-30T15:52:00Z",
"updated_at": "2026-07-19T06:01:15Z",
"pushed_at": "2026-07-19T06:01:01Z",
"updated_at": "2026-07-24T10:17:38Z",
"pushed_at": "2026-07-24T10:17:25Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1129,8 +1129,8 @@
"description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
"fork": false,
"created_at": "2026-01-14T06:05:44Z",
"updated_at": "2026-07-19T06:00:35Z",
"pushed_at": "2026-07-19T06:00:23Z",
"updated_at": "2026-07-24T10:16:40Z",
"pushed_at": "2026-07-24T10:16:36Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-20701.json
+1 -1
View File
@@ -37,6 +37,6 @@
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
"subscribers_count": 1
}
]
2025/CVE-2025-21479.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "CVE-2025-21479 PoC for ZFlip5 with Knox in the way!(˶˃ ᵕ ˂˶) ",
"fork": false,
"created_at": "2026-06-18T19:41:56Z",
"updated_at": "2026-07-23T17:16:48Z",
"updated_at": "2026-07-24T09:51:35Z",
"pushed_at": "2026-06-30T04:51:57Z",
"stargazers_count": 11,
"watchers_count": 11,
"stargazers_count": 12,
"watchers_count": 12,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 11,
"watchers": 12,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-24257.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis",
"fork": false,
"created_at": "2026-04-04T03:42:55Z",
"updated_at": "2026-07-19T06:42:30Z",
"pushed_at": "2026-07-19T06:42:26Z",
"updated_at": "2026-07-24T10:59:12Z",
"pushed_at": "2026-07-24T10:59:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-32433.json
+2 -2
View File
@@ -1292,8 +1292,8 @@
"description": "Reproduction of cve-2025-32433-erlang_ssh_rce_reproduction",
"fork": false,
"created_at": "2026-07-24T06:37:55Z",
"updated_at": "2026-07-24T06:37:56Z",
"pushed_at": "2026-07-24T06:37:56Z",
"updated_at": "2026-07-24T06:48:40Z",
"pushed_at": "2026-07-24T06:48:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-32463.json
+2 -35
View File
@@ -1496,8 +1496,8 @@
"description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.",
"fork": false,
"created_at": "2025-09-20T00:42:07Z",
"updated_at": "2026-07-19T08:28:09Z",
"pushed_at": "2026-07-19T08:28:05Z",
"updated_at": "2026-07-24T12:04:56Z",
"pushed_at": "2026-07-24T12:03:23Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1818,39 +1818,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1124631983,
"name": "CVE-2025-32463",
"full_name": "aexdyhaxor\/CVE-2025-32463",
"owner": {
"login": "aexdyhaxor",
"id": 184463179,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/184463179?v=4",
"html_url": "https:\/\/github.com\/aexdyhaxor",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/aexdyhaxor\/CVE-2025-32463",
"description": null,
"fork": false,
"created_at": "2025-12-29T10:48:24Z",
"updated_at": "2026-03-26T08:57:45Z",
"pushed_at": "2026-03-20T04:56:40Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1150353076,
"name": "CVE-2025-32463",
2025/CVE-2025-32756.json
+1 -1
View File
@@ -68,7 +68,7 @@
"forks": 29,
"watchers": 195,
"score": 0,
"subscribers_count": 5
"subscribers_count": 6
},
{
"id": 998874025,
2025/CVE-2025-38001.json
+11 -11
View File
@@ -136,26 +136,26 @@
"subscribers_count": 0
},
{
"id": 1179774030,
"id": 1234596909,
"name": "CVE-2025-38001",
"full_name": "aexdyhaxor\/CVE-2025-38001",
"full_name": "Jevil36239\/CVE-2025-38001",
"owner": {
"login": "aexdyhaxor",
"id": 184463179,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/184463179?v=4",
"html_url": "https:\/\/github.com\/aexdyhaxor",
"login": "Jevil36239",
"id": 51107256,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51107256?v=4",
"html_url": "https:\/\/github.com\/Jevil36239",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/aexdyhaxor\/CVE-2025-38001",
"html_url": "https:\/\/github.com\/Jevil36239\/CVE-2025-38001",
"description": "Repository ini berisi Proof of Concept (PoC) untuk celah keamanan CVE-2025-38001 yang menyerang modul HFSC pada Kernel Linux. Dibuat khusus untuk bahan belajar kernel memory corruption dan audit sistem keamanan",
"fork": false,
"created_at": "2026-03-12T11:16:04Z",
"updated_at": "2026-03-20T04:36:15Z",
"created_at": "2026-05-10T11:50:43Z",
"updated_at": "2026-05-10T11:50:43Z",
"pushed_at": "2026-03-20T04:36:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -163,7 +163,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
2025/CVE-2025-43564.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Reproduction of cve-2025-43564-tomcat_put_rce_reproduction",
"fork": false,
"created_at": "2026-07-24T06:38:25Z",
"updated_at": "2026-07-24T06:38:26Z",
"pushed_at": "2026-07-24T06:38:26Z",
"updated_at": "2026-07-24T06:47:32Z",
"pushed_at": "2026-07-24T06:47:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-49844.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.",
"fork": false,
"created_at": "2019-04-13T07:51:09Z",
"updated_at": "2026-07-19T05:30:21Z",
"pushed_at": "2026-07-19T05:30:16Z",
"updated_at": "2026-07-24T12:16:27Z",
"pushed_at": "2026-07-24T12:15:59Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
"fork": false,
"created_at": "2022-04-06T09:27:39Z",
"updated_at": "2026-07-19T05:30:59Z",
"pushed_at": "2026-07-19T05:30:55Z",
"updated_at": "2026-07-24T12:17:22Z",
"pushed_at": "2026-07-24T12:16:43Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-52915.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-07-24T03:54:03Z",
"updated_at": "2026-07-24T11:29:02Z",
"pushed_at": "2026-07-12T09:40:22Z",
"stargazers_count": 867,
"watchers_count": 867,
"stargazers_count": 866,
"watchers_count": 866,
"has_discussions": false,
"forks_count": 129,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 129,
"watchers": 867,
"watchers": 866,
"score": 0,
"subscribers_count": 20
}
2025/CVE-2025-53779.json
+4 -4
View File
@@ -80,12 +80,12 @@
"description": "Reproduction of cve-2025-53779-kerberos_bypass_reproduction",
"fork": false,
"created_at": "2026-07-24T06:38:52Z",
"updated_at": "2026-07-24T06:38:53Z",
"pushed_at": "2026-07-24T06:38:53Z",
"updated_at": "2026-07-24T06:47:47Z",
"pushed_at": "2026-07-24T06:47:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -93,7 +93,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
2025/CVE-2025-54424.json
+2 -2
View File
@@ -53,8 +53,8 @@
"description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐",
"fork": false,
"created_at": "2025-08-14T05:16:16Z",
"updated_at": "2026-07-19T08:23:22Z",
"pushed_at": "2026-07-19T08:23:15Z",
"updated_at": "2026-07-24T11:58:50Z",
"pushed_at": "2026-07-24T11:58:35Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2025/CVE-2025-55182.json
+16 -16
View File
@@ -14,8 +14,8 @@
"description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.",
"fork": false,
"created_at": "2022-06-17T10:19:10Z",
"updated_at": "2026-07-19T05:50:47Z",
"pushed_at": "2026-07-19T05:50:39Z",
"updated_at": "2026-07-24T12:37:26Z",
"pushed_at": "2026-07-24T12:36:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -99,8 +99,8 @@
"description": null,
"fork": false,
"created_at": "2024-11-29T12:32:19Z",
"updated_at": "2026-07-19T05:51:09Z",
"pushed_at": "2026-07-19T05:51:05Z",
"updated_at": "2026-07-24T12:37:19Z",
"pushed_at": "2026-07-24T12:37:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -148,8 +148,8 @@
"description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
"fork": false,
"created_at": "2025-06-06T16:34:46Z",
"updated_at": "2026-07-19T05:50:53Z",
"pushed_at": "2026-07-19T05:50:49Z",
"updated_at": "2026-07-24T12:37:55Z",
"pushed_at": "2026-07-24T12:36:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -876,7 +876,7 @@
"stargazers_count": 2453,
"watchers_count": 2453,
"has_discussions": false,
"forks_count": 270,
"forks_count": 269,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -884,7 +884,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 270,
"forks": 269,
"watchers": 2453,
"score": 0,
"subscribers_count": 11
@@ -1102,10 +1102,10 @@
"description": "Explanation and full RCE PoC for CVE-2025-55182",
"fork": false,
"created_at": "2025-12-04T11:49:55Z",
"updated_at": "2026-07-23T17:36:13Z",
"updated_at": "2026-07-24T12:07:03Z",
"pushed_at": "2025-12-08T13:51:04Z",
"stargazers_count": 1429,
"watchers_count": 1429,
"stargazers_count": 1428,
"watchers_count": 1428,
"has_discussions": false,
"forks_count": 197,
"allow_forking": true,
@@ -1116,7 +1116,7 @@
"topics": [],
"visibility": "public",
"forks": 197,
"watchers": 1429,
"watchers": 1428,
"score": 0,
"subscribers_count": 10
},
@@ -11741,8 +11741,8 @@
"description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.",
"fork": false,
"created_at": "2025-12-24T14:48:19Z",
"updated_at": "2026-07-19T05:50:36Z",
"pushed_at": "2026-07-19T05:50:32Z",
"updated_at": "2026-07-24T12:37:12Z",
"pushed_at": "2026-07-24T12:36:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12259,8 +12259,8 @@
"description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
"fork": false,
"created_at": "2026-01-02T01:28:57Z",
"updated_at": "2026-07-19T05:54:31Z",
"pushed_at": "2026-07-19T05:54:27Z",
"updated_at": "2026-07-24T12:41:09Z",
"pushed_at": "2026-07-24T12:40:29Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-59536.json
+4 -4
View File
@@ -35,15 +35,15 @@
{
"id": 1183620492,
"name": "AETHER-PROTOCOL-P",
"full_name": "DBarr3\/AETHER-PROTOCOL-P",
"full_name": "AetherAI3\/AETHER-PROTOCOL-P",
"owner": {
"login": "DBarr3",
"login": "AetherAI3",
"id": 143002219,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/143002219?v=4",
"html_url": "https:\/\/github.com\/DBarr3",
"html_url": "https:\/\/github.com\/AetherAI3",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/DBarr3\/AETHER-PROTOCOL-P",
"html_url": "https:\/\/github.com\/AetherAI3\/AETHER-PROTOCOL-P",
"description": "Working implementation: cryptographically verified short-lived identities for AI decision authentication — CVE-2025-59536 (Patent Pending US 64\/006,746)",
"fork": false,
"created_at": "2026-03-16T19:43:41Z",
2025/CVE-2025-66398.json
+2 -2
View File
@@ -64,8 +64,8 @@
"description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.",
"fork": false,
"created_at": "2026-03-23T09:09:21Z",
"updated_at": "2026-07-19T06:36:58Z",
"pushed_at": "2026-07-19T06:36:50Z",
"updated_at": "2026-07-24T10:54:36Z",
"pushed_at": "2026-07-24T10:54:10Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-66478.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.",
"fork": false,
"created_at": "2025-10-01T07:40:09Z",
"updated_at": "2026-07-19T05:51:49Z",
"pushed_at": "2026-07-19T05:51:38Z",
"updated_at": "2026-07-24T12:38:03Z",
"pushed_at": "2026-07-24T12:37:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-68921.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.",
"fork": false,
"created_at": "2026-01-24T21:00:41Z",
"updated_at": "2026-07-19T06:06:19Z",
"pushed_at": "2026-07-19T06:06:15Z",
"updated_at": "2026-07-24T10:23:11Z",
"pushed_at": "2026-07-24T10:23:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-7441.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "StoryChief <= 1.0.42 - Unauthenticated Arbitrary File Upload",
"fork": false,
"created_at": "2025-10-14T17:40:14Z",
"updated_at": "2026-06-16T19:40:02Z",
"updated_at": "2026-07-24T07:46:23Z",
"pushed_at": "2026-06-16T19:39:57Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-20841.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.",
"fork": false,
"created_at": "2024-09-22T12:19:06Z",
"updated_at": "2026-07-19T06:21:39Z",
"pushed_at": "2026-07-19T06:21:34Z",
"updated_at": "2026-07-24T10:39:18Z",
"pushed_at": "2026-07-24T10:38:01Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.",
"fork": false,
"created_at": "2026-02-26T05:21:28Z",
"updated_at": "2026-07-19T06:21:03Z",
"pushed_at": "2026-07-19T06:21:00Z",
"updated_at": "2026-07-24T10:37:31Z",
"pushed_at": "2026-07-24T10:37:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24061.json
+2 -2
View File
@@ -59,8 +59,8 @@
"description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.",
"fork": false,
"created_at": "2026-02-03T19:46:10Z",
"updated_at": "2026-07-19T06:11:45Z",
"pushed_at": "2026-07-19T06:11:41Z",
"updated_at": "2026-07-24T10:28:26Z",
"pushed_at": "2026-07-24T10:28:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24291.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions",
"fork": false,
"created_at": "2026-03-26T04:38:27Z",
"updated_at": "2026-07-19T06:38:30Z",
"pushed_at": "2026-07-19T06:38:24Z",
"updated_at": "2026-07-24T10:55:42Z",
"pushed_at": "2026-07-24T10:55:15Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-2472.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.",
"fork": false,
"created_at": "2026-03-10T14:40:04Z",
"updated_at": "2026-07-19T06:28:25Z",
"pushed_at": "2026-07-19T06:28:19Z",
"updated_at": "2026-07-24T10:45:57Z",
"pushed_at": "2026-07-24T10:45:47Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-25243.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-25243 — Redis RESTORE zipmap double-free → remote code execution (ASLR on).",
"fork": false,
"created_at": "2026-06-13T04:02:03Z",
"updated_at": "2026-07-24T02:10:00Z",
"updated_at": "2026-07-24T09:12:51Z",
"pushed_at": "2026-06-13T07:02:27Z",
"stargazers_count": 10,
"watchers_count": 10,
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 10,
"watchers": 11,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-26980.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "CVE-2026-26980 - Ghost CMS Content API SQL Injection",
"fork": false,
"created_at": "2026-06-26T05:57:53Z",
"updated_at": "2026-06-29T11:25:40Z",
"updated_at": "2026-07-24T11:29:09Z",
"pushed_at": "2026-06-26T08:48:23Z",
"stargazers_count": 11,
"watchers_count": 11,
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -105,7 +105,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 11,
"watchers": 10,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-28995.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "# CVE-2026-28995 Proof of Concept for CVE-2026-28995 — Path Traversal vulnerability in App Intents on iOS 26.4.2 and below.",
"fork": false,
"created_at": "2026-07-03T04:19:24Z",
"updated_at": "2026-07-06T13:40:20Z",
"updated_at": "2026-07-24T09:55:28Z",
"pushed_at": "2026-07-03T04:27:43Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-29519.json
+1 -1
View File
@@ -30,6 +30,6 @@
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
"subscribers_count": 1
}
]
2026/CVE-2026-31431.json
+4 -37
View File
@@ -530,39 +530,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1227691582,
"name": "CVE-2026-31431-copy-fail",
"full_name": "aexdyhaxor\/CVE-2026-31431-copy-fail",
"owner": {
"login": "aexdyhaxor",
"id": 184463179,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/184463179?v=4",
"html_url": "https:\/\/github.com\/aexdyhaxor",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/aexdyhaxor\/CVE-2026-31431-copy-fail",
"description": "CVE-2026-31431 merupakan celah keamanan yang terjadi akibat kegagalan dalam proses penyalinan data (copy operation failure). Kerentanan ini muncul ketika sistem tidak melakukan validasi atau penanganan error dengan benar saat melakukan proses copy data dari satu buffer ke buffer lain",
"fork": false,
"created_at": "2026-05-03T03:08:04Z",
"updated_at": "2026-05-24T04:24:28Z",
"pushed_at": "2026-05-24T04:24:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1228239811,
"name": "copyfail-guard",
@@ -693,8 +660,8 @@
"description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.",
"fork": false,
"created_at": "2026-05-05T04:58:21Z",
"updated_at": "2026-07-19T06:57:53Z",
"pushed_at": "2026-07-19T06:57:37Z",
"updated_at": "2026-07-24T11:16:15Z",
"pushed_at": "2026-07-24T11:15:19Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -742,8 +709,8 @@
"description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.",
"fork": false,
"created_at": "2026-05-06T09:49:14Z",
"updated_at": "2026-07-19T06:58:22Z",
"pushed_at": "2026-07-19T06:58:16Z",
"updated_at": "2026-07-24T11:15:50Z",
"pushed_at": "2026-07-24T11:15:13Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-31635.json
-33
View File
@@ -32,39 +32,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1244148568,
"name": "DirtyDecrypt",
"full_name": "aexdyhaxor\/DirtyDecrypt",
"owner": {
"login": "aexdyhaxor",
"id": 184463179,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/184463179?v=4",
"html_url": "https:\/\/github.com\/aexdyhaxor",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/aexdyhaxor\/DirtyDecrypt",
"description": "DirtyDecrypt PoC Released for Linux Kernel CVE-2026-31635 LPE Vulnerability",
"fork": false,
"created_at": "2026-05-20T02:22:12Z",
"updated_at": "2026-05-20T02:24:57Z",
"pushed_at": "2026-05-20T02:24:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1244389571,
"name": "CVE-2026-31635",
2026/CVE-2026-31802.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"fork": false,
"created_at": "2026-03-28T20:49:46Z",
"updated_at": "2026-07-19T06:39:43Z",
"pushed_at": "2026-07-19T06:39:39Z",
"updated_at": "2026-07-24T10:56:49Z",
"pushed_at": "2026-07-24T10:56:21Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-34621.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1237065498,
"name": "CVE-2026-34621",
"full_name": "azefzafyoussef\/CVE-2026-34621",
"owner": {
"login": "azefzafyoussef",
"id": 239175157,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/239175157?v=4",
"html_url": "https:\/\/github.com\/azefzafyoussef",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/azefzafyoussef\/CVE-2026-34621",
"description": null,
"fork": false,
"created_at": "2026-05-12T20:58:43Z",
"updated_at": "2026-06-22T11:05:03Z",
"pushed_at": "2026-05-12T21:15:55Z",
"stargazers_count": 20,
"watchers_count": 20,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 20,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-3609.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-07-24T03:54:03Z",
"updated_at": "2026-07-24T11:29:02Z",
"pushed_at": "2026-07-12T09:40:22Z",
"stargazers_count": 867,
"watchers_count": 867,
"stargazers_count": 866,
"watchers_count": 866,
"has_discussions": false,
"forks_count": 129,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 129,
"watchers": 867,
"watchers": 866,
"score": 0,
"subscribers_count": 20
}
2026/CVE-2026-41089.json
+2 -2
View File
@@ -256,8 +256,8 @@
"description": "Scan Windows Domain Controllers for CVE-2026-41089 to detect unauthenticated remote code execution vulnerabilities in the Netlogon service.",
"fork": false,
"created_at": "2026-07-22T15:40:18Z",
"updated_at": "2026-07-23T07:54:54Z",
"pushed_at": "2026-07-22T15:40:57Z",
"updated_at": "2026-07-24T11:35:12Z",
"pushed_at": "2026-07-24T11:34:49Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-41651.json
-33
View File
@@ -1,37 +1,4 @@
[
{
"id": 1227686549,
"name": "CVE-2026-41651",
"full_name": "aexdyhaxor\/CVE-2026-41651",
"owner": {
"login": "aexdyhaxor",
"id": 184463179,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/184463179?v=4",
"html_url": "https:\/\/github.com\/aexdyhaxor",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/aexdyhaxor\/CVE-2026-41651",
"description": "Privilege Escalation Vulnerability in PackageKit (TOCTOU Race Condition)",
"fork": false,
"created_at": "2026-05-03T02:54:51Z",
"updated_at": "2026-05-29T09:22:34Z",
"pushed_at": "2026-05-29T09:22:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1230654503,
"name": "CVE-2026-41651-Python",
2026/CVE-2026-41940.json
+2 -35
View File
@@ -258,8 +258,8 @@
"description": "Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.",
"fork": false,
"created_at": "2026-05-06T18:08:48Z",
"updated_at": "2026-07-19T06:58:37Z",
"pushed_at": "2026-07-19T06:58:33Z",
"updated_at": "2026-07-24T11:16:19Z",
"pushed_at": "2026-07-24T11:15:30Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -665,38 +665,5 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1310104637,
"name": "Cpanel",
"full_name": "dann3xplo1t\/Cpanel",
"owner": {
"login": "dann3xplo1t",
"id": 301648018,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/301648018?v=4",
"html_url": "https:\/\/github.com\/dann3xplo1t",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/dann3xplo1t\/Cpanel",
"description": "CVE-2026-41940 & CVE-2026-41948 — cPanel & WHM Auth Bypass",
"fork": false,
"created_at": "2026-07-23T15:42:12Z",
"updated_at": "2026-07-23T15:54:28Z",
"pushed_at": "2026-07-23T15:52:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-42945.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 890,
"watchers_count": 890,
"has_discussions": false,
"forks_count": 166,
"forks_count": 165,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 166,
"forks": 165,
"watchers": 890,
"score": 0,
"subscribers_count": 6
2026/CVE-2026-42980.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-42980 PUBLIC EXPLOIT + RESEARCH",
"fork": false,
"created_at": "2026-07-07T03:52:26Z",
"updated_at": "2026-07-24T05:30:01Z",
"updated_at": "2026-07-24T06:53:10Z",
"pushed_at": "2026-07-07T03:53:22Z",
"stargazers_count": 49,
"watchers_count": 49,
"stargazers_count": 50,
"watchers_count": 50,
"has_discussions": false,
"forks_count": 13,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 13,
"watchers": 49,
"watchers": 50,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-43499.json
+73 -73
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-43499 PoC",
"fork": false,
"created_at": "2026-06-27T04:09:11Z",
"updated_at": "2026-07-23T12:26:07Z",
"updated_at": "2026-07-24T11:24:32Z",
"pushed_at": "2026-06-27T05:04:04Z",
"stargazers_count": 126,
"watchers_count": 126,
"stargazers_count": 128,
"watchers_count": 128,
"has_discussions": false,
"forks_count": 32,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 32,
"watchers": 126,
"watchers": 128,
"score": 0,
"subscribers_count": 1
},
@@ -245,10 +245,10 @@
"description": "CVE-2026-43499 Implementation for 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k",
"fork": false,
"created_at": "2026-07-12T10:15:03Z",
"updated_at": "2026-07-23T14:24:53Z",
"updated_at": "2026-07-24T09:08:48Z",
"pushed_at": "2026-07-15T22:46:59Z",
"stargazers_count": 187,
"watchers_count": 187,
"stargazers_count": 190,
"watchers_count": 190,
"has_discussions": false,
"forks_count": 68,
"allow_forking": true,
@@ -259,7 +259,7 @@
"topics": [],
"visibility": "public",
"forks": 68,
"watchers": 187,
"watchers": 190,
"score": 0,
"subscribers_count": 1
},
@@ -311,12 +311,12 @@
"description": "GhostLock (CVE-2026-43499) kernel exploit for OnePlus devices with locked bootloader",
"fork": false,
"created_at": "2026-07-12T16:05:24Z",
"updated_at": "2026-07-23T19:04:59Z",
"updated_at": "2026-07-24T12:18:35Z",
"pushed_at": "2026-07-22T18:05:50Z",
"stargazers_count": 57,
"watchers_count": 57,
"stargazers_count": 59,
"watchers_count": 59,
"has_discussions": false,
"forks_count": 11,
"forks_count": 10,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -331,8 +331,8 @@
"root"
],
"visibility": "public",
"forks": 11,
"watchers": 57,
"forks": 10,
"watchers": 59,
"score": 0,
"subscribers_count": 1
},
@@ -450,10 +450,10 @@
"description": "OPPO Find X6 Pro GhostLock (CVE-2026-43499) exploit adaptation",
"fork": false,
"created_at": "2026-07-13T07:35:54Z",
"updated_at": "2026-07-23T08:19:40Z",
"updated_at": "2026-07-24T12:20:52Z",
"pushed_at": "2026-07-13T07:36:39Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -464,7 +464,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
@@ -549,12 +549,12 @@
"description": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.",
"fork": false,
"created_at": "2026-07-14T14:21:27Z",
"updated_at": "2026-07-24T04:42:34Z",
"pushed_at": "2026-07-18T22:56:05Z",
"stargazers_count": 91,
"watchers_count": 91,
"updated_at": "2026-07-24T11:40:50Z",
"pushed_at": "2026-07-24T10:04:53Z",
"stargazers_count": 94,
"watchers_count": 94,
"has_discussions": false,
"forks_count": 43,
"forks_count": 44,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -562,8 +562,8 @@
"pull_request_creation_policy": "collaborators_only",
"topics": [],
"visibility": "public",
"forks": 43,
"watchers": 91,
"forks": 44,
"watchers": 94,
"score": 0,
"subscribers_count": 0
},
@@ -648,12 +648,12 @@
"description": "Xiaomi K70e (duchamp) one-click root via CVE-2026-43499 (IonStack) + KernelSU integration",
"fork": false,
"created_at": "2026-07-15T03:59:56Z",
"updated_at": "2026-07-21T20:40:36Z",
"updated_at": "2026-07-24T10:40:05Z",
"pushed_at": "2026-07-21T05:16:37Z",
"stargazers_count": 27,
"watchers_count": 27,
"stargazers_count": 30,
"watchers_count": 30,
"has_discussions": true,
"forks_count": 8,
"forks_count": 10,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -661,8 +661,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 27,
"forks": 10,
"watchers": 30,
"score": 0,
"subscribers_count": 0
},
@@ -813,10 +813,10 @@
"description": "CVE-2026-43499 GhostLock exploit for Redmi K70 Ultra (rothko) - data-only physmap overwrite",
"fork": false,
"created_at": "2026-07-16T01:48:30Z",
"updated_at": "2026-07-23T07:51:33Z",
"updated_at": "2026-07-24T12:18:59Z",
"pushed_at": "2026-07-16T02:51:29Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -827,7 +827,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
@@ -928,7 +928,7 @@
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 1
"subscribers_count": 0
},
{
"id": 1303391957,
@@ -1044,12 +1044,12 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
"updated_at": "2026-07-24T01:51:01Z",
"updated_at": "2026-07-24T08:26:19Z",
"pushed_at": "2026-07-19T09:11:56Z",
"stargazers_count": 84,
"watchers_count": 84,
"stargazers_count": 85,
"watchers_count": 85,
"has_discussions": false,
"forks_count": 17,
"forks_count": 18,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1057,8 +1057,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 17,
"watchers": 84,
"forks": 18,
"watchers": 85,
"score": 0,
"subscribers_count": 3
},
@@ -1077,10 +1077,10 @@
"description": "Use CVE-2026-43499 to disable SELinux on Android",
"fork": false,
"created_at": "2026-07-18T05:33:53Z",
"updated_at": "2026-07-23T08:17:03Z",
"updated_at": "2026-07-24T12:19:32Z",
"pushed_at": "2026-07-18T09:51:29Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -1091,7 +1091,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
@@ -1110,10 +1110,10 @@
"description": "（CVE-2026-43499）内核漏洞利用程序，适用于未解锁 Bootloader 的一加设备。",
"fork": false,
"created_at": "2026-07-18T06:24:34Z",
"updated_at": "2026-07-23T22:53:51Z",
"updated_at": "2026-07-24T12:20:14Z",
"pushed_at": "2026-07-19T08:28:49Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -1124,7 +1124,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
@@ -1143,10 +1143,10 @@
"description": "CVE-2026-43499 (IonStack\/GhostLock) pure-C re-root POC for Samsung SM-T878U \/ gts7l (T878USQS8DXE1)",
"fork": false,
"created_at": "2026-07-18T08:18:28Z",
"updated_at": "2026-07-22T14:30:46Z",
"updated_at": "2026-07-24T12:20:25Z",
"pushed_at": "2026-07-21T13:45:47Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -1165,7 +1165,7 @@
],
"visibility": "public",
"forks": 3,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
@@ -1250,8 +1250,8 @@
"description": "Use CVE-2026-43499 on Redmi Turbo 5 to escalate privilege",
"fork": false,
"created_at": "2026-07-21T11:28:41Z",
"updated_at": "2026-07-21T11:49:58Z",
"pushed_at": "2026-07-21T11:49:00Z",
"updated_at": "2026-07-24T11:55:45Z",
"pushed_at": "2026-07-24T11:55:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -1283,12 +1283,12 @@
"description": "CVE-2026-43499 PoC Scanner",
"fork": false,
"created_at": "2026-07-22T03:34:16Z",
"updated_at": "2026-07-24T06:20:12Z",
"updated_at": "2026-07-24T08:39:08Z",
"pushed_at": "2026-07-22T03:56:16Z",
"stargazers_count": 13,
"watchers_count": 13,
"stargazers_count": 14,
"watchers_count": 14,
"has_discussions": false,
"forks_count": 2,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1307,10 +1307,10 @@
"scanner"
],
"visibility": "public",
"forks": 2,
"watchers": 13,
"forks": 3,
"watchers": 14,
"score": 0,
"subscribers_count": 0
"subscribers_count": 1
},
{
"id": 1309665571,
@@ -1327,10 +1327,10 @@
"description": null,
"fork": false,
"created_at": "2026-07-23T07:40:13Z",
"updated_at": "2026-07-24T04:48:14Z",
"updated_at": "2026-07-24T08:30:07Z",
"pushed_at": "2026-07-24T04:48:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -1341,7 +1341,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
@@ -1360,8 +1360,8 @@
"description": null,
"fork": false,
"created_at": "2026-07-23T07:47:23Z",
"updated_at": "2026-07-24T06:29:44Z",
"pushed_at": "2026-07-24T06:30:49Z",
"updated_at": "2026-07-24T12:31:51Z",
"pushed_at": "2026-07-24T12:32:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -1393,12 +1393,12 @@
"description": "CVE-2026-43499 exploit configuration for realme RMX3888 (Android 16) - 20 verified kernel offsets",
"fork": false,
"created_at": "2026-07-23T10:23:19Z",
"updated_at": "2026-07-23T14:31:24Z",
"pushed_at": "2026-07-23T13:36:22Z",
"updated_at": "2026-07-24T11:23:21Z",
"pushed_at": "2026-07-24T11:23:16Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1406,7 +1406,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-43503.json
-33
View File
@@ -65,39 +65,6 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 1281241830,
"name": "CVE-2026-43503-DirtyClone",
"full_name": "aexdyhaxor\/CVE-2026-43503-DirtyClone",
"owner": {
"login": "aexdyhaxor",
"id": 184463179,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/184463179?v=4",
"html_url": "https:\/\/github.com\/aexdyhaxor",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/aexdyhaxor\/CVE-2026-43503-DirtyClone",
"description": null,
"fork": false,
"created_at": "2026-06-26T11:06:01Z",
"updated_at": "2026-07-08T22:48:13Z",
"pushed_at": "2026-06-26T11:09:41Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
{
"id": 1281712977,
"name": "CVE-2026-43503",
2026/CVE-2026-45185.json
+39
View File
@@ -1,4 +1,43 @@
[
{
"id": 1236925198,
"name": "Dead.Letter-CVE-2026-45185",
"full_name": "liamromanis101\/Dead.Letter-CVE-2026-45185",
"owner": {
"login": "liamromanis101",
"id": 67465405,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/67465405?v=4",
"html_url": "https:\/\/github.com\/liamromanis101",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/liamromanis101\/Dead.Letter-CVE-2026-45185",
"description": "Dead.Letter CVE-2026-45185 EXIM Vulnerability Detection Script",
"fork": false,
"created_at": "2026-05-12T17:51:05Z",
"updated_at": "2026-07-15T17:56:42Z",
"pushed_at": "2026-05-12T21:34:16Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-45185",
"exim",
"exim4",
"gnutls",
"linux"
],
"visibility": "public",
"forks": 2,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1238365952,
"name": "cve-2026-45185-detection-script",
2026/CVE-2026-45321.json
+74
View File
@@ -65,6 +65,80 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1237037761,
"name": "scan-shai-hulud",
"full_name": "qi-scape\/scan-shai-hulud",
"owner": {
"login": "qi-scape",
"id": 211389695,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/211389695?v=4",
"html_url": "https:\/\/github.com\/qi-scape",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/qi-scape\/scan-shai-hulud",
"description": "Detect CVE-2026-45321 Mini Shai-Hulud supply chain compromise — scans for 170 npm + 2 PyPI poisoned packages across TanStack, Mistral AI, UiPath, OpenSearch, Guardrails AI",
"fork": false,
"created_at": "2026-05-12T20:18:18Z",
"updated_at": "2026-05-22T18:41:46Z",
"pushed_at": "2026-05-12T22:41:31Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2026-45321",
"npm",
"pypi",
"security-scanner",
"supply-chain-security",
"tanstack",
"vulnerability-detection"
],
"visibility": "public",
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1237161931,
"name": "shai-hulud-scan",
"full_name": "shayr1\/shai-hulud-scan",
"owner": {
"login": "shayr1",
"id": 8818761,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8818761?v=4",
"html_url": "https:\/\/github.com\/shayr1",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/shayr1\/shai-hulud-scan",
"description": "Claude Code skill to scan machines for Mini Shai-Hulud (CVE-2026-45321) supply chain worm IOCs",
"fork": false,
"created_at": "2026-05-12T23:54:59Z",
"updated_at": "2026-05-18T05:08:49Z",
"pushed_at": "2026-05-13T00:01:00Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1237635372,
"name": "mini-shai-hulud-scanner",
2026/CVE-2026-45585.json
+5 -5
View File
@@ -212,8 +212,8 @@
"description": "Manage and recover BitLocker encrypted drives with this tool for Windows 11 recovery key management and educational study of CVE-2026-45585.",
"fork": false,
"created_at": "2026-06-16T07:21:36Z",
"updated_at": "2026-07-21T09:06:14Z",
"pushed_at": "2026-07-19T07:05:12Z",
"updated_at": "2026-07-24T11:22:14Z",
"pushed_at": "2026-07-24T11:22:05Z",
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
@@ -264,8 +264,8 @@
"description": "Manage BitLocker recovery keys, monitor drive encryption status, and unlock volumes through a portable interface for Windows.",
"fork": false,
"created_at": "2026-07-21T22:11:28Z",
"updated_at": "2026-07-21T22:14:21Z",
"pushed_at": "2026-07-21T22:11:52Z",
"updated_at": "2026-07-24T11:35:14Z",
"pushed_at": "2026-07-24T11:34:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -353,6 +353,6 @@
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
"subscribers_count": 14
}
]
2026/CVE-2026-46215.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "CVE-2026-46215 DRM GEM UAF Exploit for Linux 7.0 - by Antonius (sw0rdm4n, w1sdom, ev1lut10n)",
"fork": false,
"created_at": "2026-07-19T05:37:45Z",
"updated_at": "2026-07-22T13:47:26Z",
"updated_at": "2026-07-24T07:19:41Z",
"pushed_at": "2026-07-22T13:45:00Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-46331.json
-33
View File
@@ -263,39 +263,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1295994098,
"name": "CVE-2026-46331",
"full_name": "aexdyhaxor\/CVE-2026-46331",
"owner": {
"login": "aexdyhaxor",
"id": 184463179,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/184463179?v=4",
"html_url": "https:\/\/github.com\/aexdyhaxor",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/aexdyhaxor\/CVE-2026-46331",
"description": "A Proof of Concept (PoC) exploit for CVE-2026-46331",
"fork": false,
"created_at": "2026-07-10T03:07:44Z",
"updated_at": "2026-07-10T17:02:46Z",
"pushed_at": "2026-07-10T03:13:39Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1297198138,
"name": "CVE-2026-46331",
2026/CVE-2026-46455.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Reproducer for CVE-2026-46455 — Apache Camel camel-keycloak missing TokenVerifier.IS_ACTIVE check (expired access tokens accepted)",
"fork": false,
"created_at": "2026-07-13T15:47:38Z",
"updated_at": "2026-07-13T15:49:07Z",
"pushed_at": "2026-07-13T15:48:15Z",
"updated_at": "2026-07-24T10:16:15Z",
"pushed_at": "2026-07-24T10:15:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-46584.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Reproducer for CVE-2026-46584: Apache Camel camel-mail mail.smtp.* header injection enabling credential theft via on-path SOCKS interception (fixed in 4.14.8\/4.18.3\/4.21.0)",
"fork": false,
"created_at": "2026-07-14T16:04:20Z",
"updated_at": "2026-07-14T16:06:03Z",
"pushed_at": "2026-07-14T16:04:23Z",
"updated_at": "2026-07-24T07:42:13Z",
"pushed_at": "2026-07-24T07:41:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-46590.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Reproducer for CVE-2026-46590: Apache Camel camel-pqc key-lifecycle unsafe deserialization (FileBasedKeyLifecycleManager legacy .key migration via ObjectInputStream), incomplete remediation of CVE-2026-40048 (fixed in 4.18.3\/4.21.0)",
"fork": false,
"created_at": "2026-07-15T13:15:04Z",
"updated_at": "2026-07-15T13:16:43Z",
"pushed_at": "2026-07-15T13:15:08Z",
"updated_at": "2026-07-24T08:08:39Z",
"pushed_at": "2026-07-24T08:06:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-46726.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Reproducer for CVE-2026-46726: Apache Camel camel-vertx-websocket unfiltered inbound header injection enabling SSRF and secret disclosure via property-placeholder resolution (fixed in 4.14.8\/4.18.3\/4.21.0)",
"fork": false,
"created_at": "2026-07-16T12:51:36Z",
"updated_at": "2026-07-16T12:52:13Z",
"pushed_at": "2026-07-16T12:51:39Z",
"updated_at": "2026-07-24T09:29:26Z",
"pushed_at": "2026-07-24T09:29:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-59880.json → 2026/CVE-2026-47761.json
+12 -12
View File
@@ -1,21 +1,21 @@
[
{
"id": 1310264513,
"name": "cve-2026-59880",
"full_name": "nvth\/cve-2026-59880",
"id": 1310855015,
"name": "CVE-2026-47761",
"full_name": "ange-primiterra\/CVE-2026-47761",
"owner": {
"login": "nvth",
"id": 63294758,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/63294758?v=4",
"html_url": "https:\/\/github.com\/nvth",
"login": "ange-primiterra",
"id": 273454648,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/273454648?v=4",
"html_url": "https:\/\/github.com\/ange-primiterra",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/nvth\/cve-2026-59880",
"description": "finding by nvth",
"html_url": "https:\/\/github.com\/ange-primiterra\/CVE-2026-47761",
"description": null,
"fork": false,
"created_at": "2026-07-23T18:43:15Z",
"updated_at": "2026-07-23T18:56:21Z",
"pushed_at": "2026-07-23T18:56:16Z",
"created_at": "2026-07-24T09:16:00Z",
"updated_at": "2026-07-24T09:17:08Z",
"pushed_at": "2026-07-24T09:16:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-53359.json
+1 -1
View File
@@ -63,7 +63,7 @@
"forks": 3,
"watchers": 3,
"score": 0,
"subscribers_count": 0
"subscribers_count": 1
},
{
"id": 1292111415,
2026/CVE-2026-54121.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "Certighost POC",
"fork": false,
"created_at": "2026-07-23T18:54:34Z",
"updated_at": "2026-07-24T06:15:46Z",
"updated_at": "2026-07-24T12:33:58Z",
"pushed_at": "2026-07-24T03:40:25Z",
"stargazers_count": 6,
"watchers_count": 6,
"stargazers_count": 34,
"watchers_count": 34,
"has_discussions": false,
"forks_count": 1,
"forks_count": 7,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 6,
"forks": 7,
"watchers": 34,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-60137.json
+2 -2
View File
@@ -80,8 +80,8 @@
"description": "Abdal CVE-2026-60137 is an advanced WordPress security scanner for identifying systems potentially affected by the CVE-2026-60137 SQL Injection vulnerability. Developed by Ebrahim Shafiei (EbraSha) for vulnerability assessment, security research, and authorized penetration testing.",
"fork": false,
"created_at": "2026-07-18T19:23:49Z",
"updated_at": "2026-07-22T19:53:41Z",
"pushed_at": "2026-07-18T19:56:25Z",
"updated_at": "2026-07-24T11:48:20Z",
"pushed_at": "2026-07-24T11:47:53Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-63030.json
+104 -57
View File
@@ -14,12 +14,12 @@
"description": "wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain",
"fork": false,
"created_at": "2026-07-17T20:18:33Z",
"updated_at": "2026-07-24T06:44:52Z",
"updated_at": "2026-07-24T12:46:09Z",
"pushed_at": "2026-07-23T09:23:48Z",
"stargazers_count": 506,
"watchers_count": 506,
"stargazers_count": 508,
"watchers_count": 508,
"has_discussions": false,
"forks_count": 123,
"forks_count": 124,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -31,8 +31,8 @@
"wp2shell-poc"
],
"visibility": "public",
"forks": 123,
"watchers": 506,
"forks": 124,
"watchers": 508,
"score": 0,
"subscribers_count": 2
},
@@ -84,10 +84,10 @@
"description": "CVE-2026-63030, CVE-2026-60137, wp2shell scanner",
"fork": false,
"created_at": "2026-07-17T23:15:57Z",
"updated_at": "2026-07-23T07:51:28Z",
"updated_at": "2026-07-24T12:35:07Z",
"pushed_at": "2026-07-18T22:07:34Z",
"stargazers_count": 24,
"watchers_count": 24,
"stargazers_count": 25,
"watchers_count": 25,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -98,7 +98,7 @@
"topics": [],
"visibility": "public",
"forks": 7,
"watchers": 24,
"watchers": 25,
"score": 0,
"subscribers_count": 0
},
@@ -188,7 +188,7 @@
"stargazers_count": 38,
"watchers_count": 38,
"has_discussions": false,
"forks_count": 11,
"forks_count": 12,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -204,7 +204,7 @@
"wp2shell"
],
"visibility": "public",
"forks": 11,
"forks": 12,
"watchers": 38,
"score": 0,
"subscribers_count": 1
@@ -224,10 +224,10 @@
"description": "Educational PoC + lab for CVE-2026-63030 + CVE-2026-60137: pre-auth SQLi in WordPress core via REST batch-route confusion",
"fork": false,
"created_at": "2026-07-18T03:16:37Z",
"updated_at": "2026-07-22T03:33:04Z",
"updated_at": "2026-07-24T07:08:21Z",
"pushed_at": "2026-07-18T03:53:29Z",
"stargazers_count": 13,
"watchers_count": 13,
"stargazers_count": 12,
"watchers_count": 12,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -238,7 +238,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 13,
"watchers": 12,
"score": 0,
"subscribers_count": 0
},
@@ -750,8 +750,8 @@
"description": "Abdal CVE-2026-63030 is a professional WordPress vulnerability scanner designed to detect exposure to CVE-2026-63030 through version analysis and REST API security checks. Developed by Ebrahim Shafiei (EbraSha) for cybersecurity research, penetration testing, and WordPress security assessment.",
"fork": false,
"created_at": "2026-07-18T19:24:30Z",
"updated_at": "2026-07-22T19:53:37Z",
"pushed_at": "2026-07-18T19:47:33Z",
"updated_at": "2026-07-24T11:48:20Z",
"pushed_at": "2026-07-24T11:47:56Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
@@ -914,10 +914,10 @@
"description": "Blackbox, non-intrusive detector for wp2shell (WordPress core pre-auth RCE, CVE-2026-63030 \/ CVE-2026-60137). Detection only.",
"fork": false,
"created_at": "2026-07-18T21:06:14Z",
"updated_at": "2026-07-20T08:35:12Z",
"updated_at": "2026-07-24T07:14:13Z",
"pushed_at": "2026-07-19T17:16:17Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -928,7 +928,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 5,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
@@ -1716,39 +1716,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1306661781,
"name": "wp2shell-cf-WAF-bypass",
"full_name": "ASYquan\/wp2shell-cf-WAF-bypass",
"owner": {
"login": "ASYquan",
"id": 77693509,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/77693509?v=4",
"html_url": "https:\/\/github.com\/ASYquan",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ASYquan\/wp2shell-cf-WAF-bypass",
"description": "wp2shell PoC with Cloudflare WAF bypass via body padding (CVE-2026-63030)",
"fork": false,
"created_at": "2026-07-20T13:54:39Z",
"updated_at": "2026-07-23T11:05:45Z",
"pushed_at": "2026-07-23T11:05:03Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1306784696,
"name": "wp2shell-Wordpress-TOWN",
@@ -1892,7 +1859,7 @@
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 4,
"forks_count": 5,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1900,7 +1867,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 4,
"forks": 5,
"watchers": 10,
"score": 0,
"subscribers_count": 0
@@ -2049,5 +2016,85 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1310883781,
"name": "CVE-2026-63030-CVE-2026-60137",
"full_name": "Giangdurian\/CVE-2026-63030-CVE-2026-60137",
"owner": {
"login": "Giangdurian",
"id": 93591423,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/93591423?v=4",
"html_url": "https:\/\/github.com\/Giangdurian",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Giangdurian\/CVE-2026-63030-CVE-2026-60137",
"description": null,
"fork": false,
"created_at": "2026-07-24T09:49:20Z",
"updated_at": "2026-07-24T09:51:01Z",
"pushed_at": "2026-07-24T09:50:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1310932768,
"name": "CVE-2026-63030",
"full_name": "shinthink\/CVE-2026-63030",
"owner": {
"login": "shinthink",
"id": 292174078,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/292174078?v=4",
"html_url": "https:\/\/github.com\/shinthink",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/shinthink\/CVE-2026-63030",
"description": "WordPress Core Pre-Auth RCE via REST Batch Route Confusion + SQLi (CVE-2026-63030 + CVE-2026-60137)",
"fork": false,
"created_at": "2026-07-24T10:48:23Z",
"updated_at": "2026-07-24T10:50:32Z",
"pushed_at": "2026-07-24T10:50:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"batch-api",
"cve",
"cve-2026-60137",
"cve-2026-63030",
"exploit",
"pre-auth",
"python",
"rce",
"security",
"sql-injection",
"vulnerability",
"wordpress",
"wp2shell"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-64600.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-64600",
"fork": false,
"created_at": "2026-07-22T20:55:41Z",
"updated_at": "2026-07-24T04:41:43Z",
"updated_at": "2026-07-24T12:15:48Z",
"pushed_at": "2026-07-23T17:06:28Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-65650.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1310985747,
"name": "CVE-2026-65650",
"full_name": "swornim619\/CVE-2026-65650",
"owner": {
"login": "swornim619",
"id": 270108045,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/270108045?v=4",
"html_url": "https:\/\/github.com\/swornim619",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/swornim619\/CVE-2026-65650",
"description": "PoC for CVE-2026-65650 - Elgg avatar upload DoS",
"fork": false,
"created_at": "2026-07-24T11:55:35Z",
"updated_at": "2026-07-24T12:14:52Z",
"pushed_at": "2026-07-24T12:13:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-65761.json
+48
View File
@@ -0,0 +1,48 @@
[
{
"id": 1310946744,
"name": "CVE-2026-65761",
"full_name": "shinthink\/CVE-2026-65761",
"owner": {
"login": "shinthink",
"id": 292174078,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/292174078?v=4",
"html_url": "https:\/\/github.com\/shinthink",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/shinthink\/CVE-2026-65761",
"description": "EasyStore Joomla Pre-Auth SQL Injection via filter_sortby Direction (CVE-2026-65761, CVSS 9.3)",
"fork": false,
"created_at": "2026-07-24T11:07:02Z",
"updated_at": "2026-07-24T11:07:18Z",
"pushed_at": "2026-07-24T11:07:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"blind-sqli",
"cve",
"cve-2026-65761",
"easystore",
"exploit",
"joomla",
"joomshaper",
"pre-auth",
"python",
"security",
"sql-injection",
"vulnerability"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-7228.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1310844309,
"name": "ricerca-tesi",
"full_name": "mikecostanzi\/ricerca-tesi",
"owner": {
"login": "mikecostanzi",
"id": 95308395,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/95308395?v=4",
"html_url": "https:\/\/github.com\/mikecostanzi",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/mikecostanzi\/ricerca-tesi",
"description": "risorse di ricerca per cve-2026-7228",
"fork": false,
"created_at": "2026-07-24T09:03:54Z",
"updated_at": "2026-07-24T09:04:16Z",
"pushed_at": "2026-07-24T09:03:55Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-8838.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": null,
"fork": false,
"created_at": "2026-07-16T07:01:44Z",
"updated_at": "2026-07-24T06:36:54Z",
"pushed_at": "2026-07-24T06:36:44Z",
"updated_at": "2026-07-24T09:04:05Z",
"pushed_at": "2026-07-24T09:03:03Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-9198.json
+33
View File
@@ -31,5 +31,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1310866585,
"name": "CVE-2026-9198",
"full_name": "ywh-jfellus\/CVE-2026-9198",
"owner": {
"login": "ywh-jfellus",
"id": 270658067,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/270658067?v=4",
"html_url": "https:\/\/github.com\/ywh-jfellus",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ywh-jfellus\/CVE-2026-9198",
"description": "Proof of Concept for CVE-2026-9198 - IBM Langflow Unauthenticated RCE via Auto-Login Bypass",
"fork": false,
"created_at": "2026-07-24T09:29:30Z",
"updated_at": "2026-07-24T09:42:55Z",
"pushed_at": "2026-07-24T09:41:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
README.md
+46 -19
View File
@@ -742,6 +742,13 @@
- [nicholas-howland/CVE-2026-6992-PoC](https://github.com/nicholas-howland/CVE-2026-6992-PoC)
### CVE-2026-7228 (2026-04-28)
<code>A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. The affected element is the function get_cart_count of the file /admin/ajax.php?action=get_cart_count. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used.
</code>
- [mikecostanzi/ricerca-tesi](https://github.com/mikecostanzi/ricerca-tesi)
### CVE-2026-7275
- [ExDev994/CVE-2026-7275-moodle](https://github.com/ExDev994/CVE-2026-7275-moodle)
@@ -1032,6 +1039,7 @@
</code>
- [0xdak/CVE-2026-9198_exploit](https://github.com/0xdak/CVE-2026-9198_exploit)
- [ywh-jfellus/CVE-2026-9198](https://github.com/ywh-jfellus/CVE-2026-9198)
### CVE-2026-9256 (2026-05-22)
@@ -2504,7 +2512,6 @@
- [bootsareme/copyfail-deconstructed](https://github.com/bootsareme/copyfail-deconstructed)
- [monobrau/copyfailscan](https://github.com/monobrau/copyfailscan)
- [suominen/CVE-2026-31431](https://github.com/suominen/CVE-2026-31431)
- [aexdyhaxor/CVE-2026-31431-copy-fail](https://github.com/aexdyhaxor/CVE-2026-31431-copy-fail)
- [juliosuas/copyfail-guard](https://github.com/juliosuas/copyfail-guard)
- [samanzamani/copy-fail-checker](https://github.com/samanzamani/copy-fail-checker)
- [ochebotar/copy-fail-CVE-2026-31431-detection-probe](https://github.com/ochebotar/copy-fail-CVE-2026-31431-detection-probe)
@@ -2567,7 +2574,6 @@
</code>
- [0xBlackash/CVE-2026-31635](https://github.com/0xBlackash/CVE-2026-31635)
- [aexdyhaxor/DirtyDecrypt](https://github.com/aexdyhaxor/DirtyDecrypt)
- [Lutfifakee-Project/CVE-2026-31635](https://github.com/Lutfifakee-Project/CVE-2026-31635)
- [0xFuffM3/CVE-2026-31635-DirtyDecrypt](https://github.com/0xFuffM3/CVE-2026-31635-DirtyDecrypt)
- [Koshmare-Blossom/DirtyDecrypt-go](https://github.com/Koshmare-Blossom/DirtyDecrypt-go)
@@ -2831,6 +2837,13 @@
- [anonmrc/CVE-2026-34486-e-Tomcat-Tribes](https://github.com/anonmrc/CVE-2026-34486-e-Tomcat-Tribes)
- [razureink/cve-2026-34486-tomcat_encrypt_bypass_reproduction](https://github.com/razureink/cve-2026-34486-tomcat_encrypt_bypass_reproduction)
### CVE-2026-34621 (2026-04-11)
<code>Acrobat Reader versions 24.001.30356, 26.001.21367 and earlier are affected by an Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
</code>
- [azefzafyoussef/CVE-2026-34621](https://github.com/azefzafyoussef/CVE-2026-34621)
### CVE-2026-34835 (2026-04-02)
<code>Rack is a modular Ruby web server interface. From versions 3.0.0.beta1 to before 3.1.21, and 3.2.0 to before 3.2.6, Rack::Request parses the Host header using an AUTHORITY regular expression that accepts characters not permitted in RFC-compliant hostnames, including /, ?, #, and @. Because req.host returns the full parsed value, applications that validate hosts using naive prefix or suffix checks can be bypassed. This can lead to host header poisoning in applications that use req.host, req.url, or req.base_url for link generation, redirects, or origin validation. This issue has been patched in versions 3.1.21 and 3.2.6.
@@ -3520,7 +3533,6 @@
<code>PackageKit is a a D-Bus abstraction layer that allows the user to manage packages in a secure way using a cross-distro, cross-architecture API. PackageKit between and including versions 1.0.2 and 1.3.4 is vulnerable to a time-of-check time-of-use (TOCTOU) race condition on transaction flags that allows unprivileged users to install packages as root and thus leads to a local privilege escalation. This is patched in version 1.3.5.\n\nA local unprivileged user can install arbitrary RPM packages as root, including executing RPM scriptlets, without authentication. The vulnerability is a TOCTOU race condition on `transaction-&gt;cached_transaction_flags` combined with a silent state-machine guard that discards illegal backward transitions while leaving corrupted flags in place. Three bugs exist in `src/pk-transaction.c`:\n1. Unconditional flag overwrite (line 4036): `InstallFiles()` writes caller-supplied flags to `transaction-&gt;cached_transaction_flags` without checking whether the transaction has already been authorized/started. A second call blindly overwrites the flags even while the transaction is RUNNING.\n2. Silent state-transition rejection (lines 873–882): `pk_transaction_set_state()` silently discards backward state transitions (e.g. `RUNNING` → `WAITING_FOR_AUTH`) but the flag overwrite at step 1 already happened. The transaction continues running with corrupted flags.\n3. Late flag read at execution time (lines 2273–2277): The scheduler's idle callback reads cached_transaction_flags at dispatch time, not at authorization time. If flags were overwritten between authorization and execution, the backend sees the attacker's flags.
</code>
- [aexdyhaxor/CVE-2026-41651](https://github.com/aexdyhaxor/CVE-2026-41651)
- [mawussid/CVE-2026-41651-Python](https://github.com/mawussid/CVE-2026-41651-Python)
- [Lutfifakee-Project/CVE-2026-41651](https://github.com/Lutfifakee-Project/CVE-2026-41651)
@@ -3561,7 +3573,6 @@
- [oguz-kagan-akar/CVE-2026-41940-analysis](https://github.com/oguz-kagan-akar/CVE-2026-41940-analysis)
- [soverineg/cve-2026-41940-PoC](https://github.com/soverineg/cve-2026-41940-PoC)
- [razureink/cve-2026-41940-cpanel_authbypass_reproduction](https://github.com/razureink/cve-2026-41940-cpanel_authbypass_reproduction)
- [dann3xplo1t/Cpanel](https://github.com/dann3xplo1t/Cpanel)
### CVE-2026-42048 (2026-05-12)
@@ -3887,7 +3898,6 @@
- [0xBlackash/CVE-2026-43503](https://github.com/0xBlackash/CVE-2026-43503)
- [mooder1/dirtyclone-CVE-2026-43503](https://github.com/mooder1/dirtyclone-CVE-2026-43503)
- [aexdyhaxor/CVE-2026-43503-DirtyClone](https://github.com/aexdyhaxor/CVE-2026-43503-DirtyClone)
- [sec0x/CVE-2026-43503](https://github.com/sec0x/CVE-2026-43503)
- [douglasmun/pagecache-lpe-containment-kit](https://github.com/douglasmun/pagecache-lpe-containment-kit)
- [gl1tch0x1/DirtyClone](https://github.com/gl1tch0x1/DirtyClone)
@@ -4111,6 +4121,7 @@
<code>Exim before 4.99.3, in certain GnuTLS configurations, has a remotely reachable use-after-free in the BDAT body parsing path. It is triggered when a client sends a TLS close_notify mid-body during a CHUNKING transfer, followed by a final cleartext byte on the same TCP connection. This can lead to heap corruption. An unauthenticated network attacker exploiting this vulnerability could execute arbitrary code.
</code>
- [liamromanis101/Dead.Letter-CVE-2026-45185](https://github.com/liamromanis101/Dead.Letter-CVE-2026-45185)
- [materaj2/cve-2026-45185-detection-script](https://github.com/materaj2/cve-2026-45185-detection-script)
- [MJ-bin/POC_CVE-2026-45185](https://github.com/MJ-bin/POC_CVE-2026-45185)
@@ -4143,6 +4154,8 @@
- [ry-allan/tanstack-compromise-checker](https://github.com/ry-allan/tanstack-compromise-checker)
- [Yomisana/are-you-get-tanstack-attack](https://github.com/Yomisana/are-you-get-tanstack-attack)
- [qi-scape/scan-shai-hulud](https://github.com/qi-scape/scan-shai-hulud)
- [shayr1/shai-hulud-scan](https://github.com/shayr1/shai-hulud-scan)
- [Intrudify/mini-shai-hulud-scanner](https://github.com/Intrudify/mini-shai-hulud-scanner)
- [fabriziosalmi/tanstack-compromise-checker](https://github.com/fabriziosalmi/tanstack-compromise-checker)
- [digi4care/shai-scan](https://github.com/digi4care/shai-scan)
@@ -4304,7 +4317,6 @@
- [seguridadentrerios/CVE-2026-46331](https://github.com/seguridadentrerios/CVE-2026-46331)
- [g0thamRabb1t/CVE-2026-46331-pedit-COW-detection](https://github.com/g0thamRabb1t/CVE-2026-46331-pedit-COW-detection)
- [V0IDNETWORK/CVE-2026-46331](https://github.com/V0IDNETWORK/CVE-2026-46331)
- [aexdyhaxor/CVE-2026-46331](https://github.com/aexdyhaxor/CVE-2026-46331)
- [yanxinwu946/CVE-2026-46331](https://github.com/yanxinwu946/CVE-2026-46331)
- [MarwahHadi/CVE-2026-46331-pedit-cow](https://github.com/MarwahHadi/CVE-2026-46331-pedit-cow)
- [rjt-gupta/page-cache-corruption-lpes](https://github.com/rjt-gupta/page-cache-corruption-lpes)
@@ -4587,6 +4599,13 @@
- [0xBlackash/CVE-2026-47729](https://github.com/0xBlackash/CVE-2026-47729)
### CVE-2026-47761 (2026-05-28)
<code>TinyMCE is an open source rich text editor. Prior to 5.11.1, 7.9.3, and 8.5.1, there is a stored XSS vulnerability in the media plugin. Attackers can inject malicious scripts via crafted data-mce-* attributes, which are executed when content is rendered. Impacts users of TinyMCE with the media plugin enabled. This vulnerability is fixed in 5.11.1, 7.9.3, and 8.5.1.
</code>
- [ange-primiterra/CVE-2026-47761](https://github.com/ange-primiterra/CVE-2026-47761)
### CVE-2026-47777 (2026-06-15)
<code>Mastodon is a free, open-source social network server based on ActivityPub. In versions there is a missing condition in the check if remote accounts consented to be featured in a remote Collection could lead to attackers bypassing the check and faking consent. An attacker could forge the FeatureAuthorization object that is used to verify consent to be featured in a Collection and thus make it appear as if an account is allowed to be in a Collection when it actually is not. While the FeatureAuthorization must reside on the same domain as the object it is for, a check is missing to make sure said object is actually the same as in the Collection item. This allows an attacker to forge the authorization. Mastodon servers are affected only if running the main branch or nightly builds who have opted into testing the experimental &quot;Collections&quot; feature by setting the environment variable EXPERIMENTAL_FEATURES to a value including collections. This has been patched in version 4.6.0-beta.1.
@@ -5766,13 +5785,6 @@
- [c0gnit00/CVE-2026-59827](https://github.com/c0gnit00/CVE-2026-59827)
- [pickl31/CVE-2026-59827](https://github.com/pickl31/CVE-2026-59827)
### CVE-2026-59880 (2026-07-08)
<code>Immutable.js provides many Persistent Immutable data structures. Prior to 4.3.9 and 5.1.8, Immutable.Map and Immutable.Set keep keys that share the same 32-bit hash in a HashCollisionNode collision bucket that is scanned linearly, allowing an attacker who controls keys inserted into a Map, such as through Immutable.Map(obj), Immutable.fromJS(obj), state.merge(userObject), or mergeDeep, to craft many colliding keys and degrade insertion and lookup to consume disproportionate CPU. This issue is fixed in versions 4.3.9 and 5.1.8.
</code>
- [nvth/cve-2026-59880](https://github.com/nvth/cve-2026-59880)
### CVE-2026-60121 (2026-07-13)
<code>Vitec Flamingo 4.12.2 contains an unauthenticated OS command injection vulnerability in the admin/ajax/ping.php endpoint that allows remote attackers to execute arbitrary commands by exploiting a double-evaluation flaw in shell argument handling. The endpoint applies escapeshellarg() to the user-supplied host POST parameter before passing it to a system wrapper, but the wrapper retrieves the decoded value from argv and incorporates it into a second shell_exec() call without escaping, allowing injected commands to execute with root privileges via passwordless sudo.
@@ -5871,7 +5883,6 @@
- [wn-iqbal/wp2shell](https://github.com/wn-iqbal/wp2shell)
- [SentinelXofficial/sxwp2shell](https://github.com/SentinelXofficial/sxwp2shell)
- [GhostInExile/CVE-2026-63030-Wp2Shell](https://github.com/GhostInExile/CVE-2026-63030-Wp2Shell)
- [ASYquan/wp2shell-cf-WAF-bypass](https://github.com/ASYquan/wp2shell-cf-WAF-bypass)
- [lucifer0xf/wp2shell-Wordpress-TOWN](https://github.com/lucifer0xf/wp2shell-Wordpress-TOWN)
- [Ch4120N/CVE-2026-63030](https://github.com/Ch4120N/CVE-2026-63030)
- [Bhanunamikaze/WP2Shell-CVE-2026-63030-POC](https://github.com/Bhanunamikaze/WP2Shell-CVE-2026-63030-POC)
@@ -5880,6 +5891,8 @@
- [raphy76/wp2shell-poc-fulljs](https://github.com/raphy76/wp2shell-poc-fulljs)
- [gagaltotal/CVE-2026-63030-CVE-2026-60137-wp2shell-poc](https://github.com/gagaltotal/CVE-2026-63030-CVE-2026-60137-wp2shell-poc)
- [razureink/cve-2026-63030_60137-wordpress_rce_reproduction](https://github.com/razureink/cve-2026-63030_60137-wordpress_rce_reproduction)
- [Giangdurian/CVE-2026-63030-CVE-2026-60137](https://github.com/Giangdurian/CVE-2026-63030-CVE-2026-60137)
- [shinthink/CVE-2026-63030](https://github.com/shinthink/CVE-2026-63030)
### CVE-2026-63766 (2026-07-20)
@@ -5896,6 +5909,20 @@
- [0xBlackash/CVE-2026-64600](https://github.com/0xBlackash/CVE-2026-64600)
- [HORKimhab/CVE-2026-64600](https://github.com/HORKimhab/CVE-2026-64600)
### CVE-2026-65650 (2026-07-22)
<code>Elgg before 7.0.0 does not check image dimensions to prevent denial of service via a large avatar upload.
</code>
- [swornim619/CVE-2026-65650](https://github.com/swornim619/CVE-2026-65650)
### CVE-2026-65761 (2026-07-23)
<code>Joomla Extension - joomshaper.com - Unauthenticated SQL injection in Easy Store extension 1.0.0-2.0.1 - Improper validation of order parameters lead to an unauthenticated SQL injection in easystore, allowing full DB read access including credentials and sessions.
</code>
- [shinthink/CVE-2026-65761](https://github.com/shinthink/CVE-2026-65761)
### CVE-2026-65971
- [BiiTts/POC-CVE-2026-65971](https://github.com/BiiTts/POC-CVE-2026-65971)
@@ -11596,7 +11623,6 @@
- [ankitpandey383/CVE-2025-32463-Sudo-Privilege-Escalation](https://github.com/ankitpandey383/CVE-2025-32463-Sudo-Privilege-Escalation)
- [justjoeyking/CVE-2025-32463](https://github.com/justjoeyking/CVE-2025-32463)
- [Mr-Alperen/CVE-2025-32463](https://github.com/Mr-Alperen/CVE-2025-32463)
- [aexdyhaxor/CVE-2025-32463](https://github.com/aexdyhaxor/CVE-2025-32463)
- [SpycioKon/CVE-2025-32463](https://github.com/SpycioKon/CVE-2025-32463)
- [vpr-labs/CVE-2025-32463](https://github.com/vpr-labs/CVE-2025-32463)
- [danilo1992-sys/CVE-2025-32463](https://github.com/danilo1992-sys/CVE-2025-32463)
@@ -11933,7 +11959,7 @@
- [khoatran107/cve-2025-38001](https://github.com/khoatran107/cve-2025-38001)
- [ngobao2002/CVE-2025-38001-test](https://github.com/ngobao2002/CVE-2025-38001-test)
- [boeseejykbtanke348/CVE-2025-38001](https://github.com/boeseejykbtanke348/CVE-2025-38001)
- [aexdyhaxor/CVE-2025-38001](https://github.com/aexdyhaxor/CVE-2025-38001)
- [Jevil36239/CVE-2025-38001](https://github.com/Jevil36239/CVE-2025-38001)
### CVE-2025-38089 (2025-06-30)
@@ -15605,7 +15631,7 @@
</code>
- [Rohitberiwala/Claude-Code-MCP-Injection-PoC](https://github.com/Rohitberiwala/Claude-Code-MCP-Injection-PoC)
- [DBarr3/AETHER-PROTOCOL-P](https://github.com/DBarr3/AETHER-PROTOCOL-P)
- [AetherAI3/AETHER-PROTOCOL-P](https://github.com/AetherAI3/AETHER-PROTOCOL-P)
- [NetVanguard-cmd/CVE-2025-59536](https://github.com/NetVanguard-cmd/CVE-2025-59536)
- [TreRB/ai-ide-config-guard](https://github.com/TreRB/ai-ide-config-guard)
- [Razi-Interactive/claude-project-scanner](https://github.com/Razi-Interactive/claude-project-scanner)
@@ -23084,6 +23110,7 @@
- [Ne0zer01/CVE-2024-27198_LAB](https://github.com/Ne0zer01/CVE-2024-27198_LAB)
- [ptd200110/CVE-2024-27198-SOC-Lab](https://github.com/ptd200110/CVE-2024-27198-SOC-Lab)
- [BilalAlshiekh912/Incident-Response-Report-TeamCity-Compromise-CVE-2024-27198-](https://github.com/BilalAlshiekh912/Incident-Response-Report-TeamCity-Compromise-CVE-2024-27198-)
- [kxom9ks/CVE-2024-27198](https://github.com/kxom9ks/CVE-2024-27198)
### CVE-2024-27292 (2024-02-29)
@@ -27179,7 +27206,6 @@
</code>
- [tnkr/poc_monitor](https://github.com/tnkr/poc_monitor)
- [bo0l3an/CVE-2024-49112-PoC](https://github.com/bo0l3an/CVE-2024-49112-PoC)
### CVE-2024-49113 (2024-12-10)
@@ -51414,7 +51440,6 @@
- [hotpotcookie/CVE-2021-44228-white-box](https://github.com/hotpotcookie/CVE-2021-44228-white-box)
- [s-retlaw/l4srs](https://github.com/s-retlaw/l4srs)
- [TPower2112/Writing-Sample-1](https://github.com/TPower2112/Writing-Sample-1)
- [Willian-2-0-0-1/Log4j-Exploit-CVE-2021-44228](https://github.com/Willian-2-0-0-1/Log4j-Exploit-CVE-2021-44228)
- [r3kind1e/Log4Shell-obfuscated-payloads-generator](https://github.com/r3kind1e/Log4Shell-obfuscated-payloads-generator)
- [yuuki1967/CVE-2021-44228-Apache-Log4j-Rce](https://github.com/yuuki1967/CVE-2021-44228-Apache-Log4j-Rce)
- [moshuum/tf-log4j-aws-poc](https://github.com/moshuum/tf-log4j-aws-poc)
@@ -51509,6 +51534,7 @@
- [AstralJays/TraditionalJay](https://github.com/AstralJays/TraditionalJay)
- [prmawyer/log4shell-vulnerable-app](https://github.com/prmawyer/log4shell-vulnerable-app)
- [arpitgupta369/log4shell-scanner](https://github.com/arpitgupta369/log4shell-scanner)
- [razureink/cve-2021-44228-log4shell_rce_reproduction](https://github.com/razureink/cve-2021-44228-log4shell_rce_reproduction)
### CVE-2021-44255 (2022-01-31)
@@ -69947,6 +69973,7 @@
- [Astrowmist/POC-CVE-2016-10033](https://github.com/Astrowmist/POC-CVE-2016-10033)
- [sealldeveloper/CVE-2016-10033-PoC](https://github.com/sealldeveloper/CVE-2016-10033-PoC)
- [alexander47777/CVE-2016-10033](https://github.com/alexander47777/CVE-2016-10033)
- [blue-chocolates/CVE-2016-10033](https://github.com/blue-chocolates/CVE-2016-10033)
### CVE-2016-10034 (2016-12-30)