nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/05/31 00:49:37

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-05-31 09:49:37 +09:00
1 parent 3f23236824
commit b0dc5e8432
98 files changed
+556 -475
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2016/CVE-2016-15042.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛠️ Validate and demonstrate CVE-2016-15042 with a Dockerized lab for unauthenticated file uploads in WordPress file managers.",
"fork": false,
"created_at": "2023-10-23T05:54:10Z",
"updated_at": "2026-05-30T15:45:33Z",
"pushed_at": "2026-05-30T15:45:29Z",
"updated_at": "2026-05-30T22:07:29Z",
"pushed_at": "2026-05-30T22:07:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2018/CVE-2018-1000224.json
+2 -2
View File
@@ -11,10 +11,10 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/zann1x\/ITS",
"description": "Repo for a uni project to give a detailed explanation of CVE-2018-1000224",
"description": "[Course Work] Detailed explanation of CVE-2018-1000224",
"fork": false,
"created_at": "2019-04-28T18:31:03Z",
"updated_at": "2021-12-07T21:13:59Z",
"updated_at": "2026-05-30T23:26:46Z",
"pushed_at": "2019-06-21T13:14:45Z",
"stargazers_count": 0,
"watchers_count": 0,
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-05-30T17:39:15Z",
"pushed_at": "2026-05-30T17:39:11Z",
"updated_at": "2026-05-30T23:15:54Z",
"pushed_at": "2026-05-30T23:15:50Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2019/CVE-2019-7609.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "RCE on Kibana versions before 5.6.15 and 6.6.0 in the Timelion visualizer",
"fork": false,
"created_at": "2019-10-21T07:32:31Z",
"updated_at": "2026-05-26T14:47:28Z",
"updated_at": "2026-05-30T20:47:01Z",
"pushed_at": "2019-12-20T14:28:44Z",
"stargazers_count": 57,
"watchers_count": 57,
"stargazers_count": 56,
"watchers_count": 56,
"has_discussions": false,
"forks_count": 12,
"allow_forking": true,
@@ -64,7 +64,7 @@
],
"visibility": "public",
"forks": 12,
"watchers": 57,
"watchers": 56,
"score": 0,
"subscribers_count": 2
},
2020/CVE-2020-0610.json
+2 -2
View File
@@ -58,8 +58,8 @@
"description": "🔍 Create a safe lab environment for testing CVE-2020-0610, a critical RCE vulnerability in Windows RD Gateway, with minimal disruption using DTLS techniques.",
"fork": false,
"created_at": "2025-09-04T13:21:35Z",
"updated_at": "2026-05-30T15:45:27Z",
"pushed_at": "2026-05-30T15:45:24Z",
"updated_at": "2026-05-30T22:07:24Z",
"pushed_at": "2026-05-30T22:07:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2020/CVE-2020-1472.json
+2 -2
View File
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-05-30T17:40:26Z",
"pushed_at": "2026-05-30T17:40:22Z",
"updated_at": "2026-05-30T23:36:21Z",
"pushed_at": "2026-05-30T23:36:17Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-05-30T17:52:06Z",
"pushed_at": "2026-05-30T17:52:03Z",
"updated_at": "2026-05-30T23:30:38Z",
"pushed_at": "2026-05-30T23:30:34Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-4034.json
+2 -2
View File
@@ -2017,8 +2017,8 @@
"description": "🚀 Enhance your penetration testing with PwnKit Helper, a simple tool for exploiting the CVE-2021-4034 vulnerability in pkexec for local privilege escalation.",
"fork": false,
"created_at": "2025-10-01T09:53:03Z",
"updated_at": "2026-05-30T15:52:13Z",
"pushed_at": "2026-05-30T15:52:09Z",
"updated_at": "2026-05-30T22:13:58Z",
"pushed_at": "2026-05-30T22:13:54Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2021/CVE-2021-44228.json
+8 -8
View File
@@ -2265,10 +2265,10 @@
"description": "An agent to hotpatch the log4j RCE from CVE-2021-44228.",
"fork": false,
"created_at": "2021-12-12T01:24:51Z",
"updated_at": "2026-02-03T07:31:29Z",
"updated_at": "2026-05-30T20:55:19Z",
"pushed_at": "2022-10-24T02:25:53Z",
"stargazers_count": 496,
"watchers_count": 496,
"stargazers_count": 497,
"watchers_count": 497,
"has_discussions": false,
"forks_count": 72,
"allow_forking": true,
@@ -2279,7 +2279,7 @@
"topics": [],
"visibility": "public",
"forks": 72,
"watchers": 496,
"watchers": 497,
"score": 0,
"subscribers_count": 24
},
@@ -6117,10 +6117,10 @@
"description": "Find vulnerable Log4j2 versions on disk and also inside Java Archive Files (Log4Shell CVE-2021-44228, CVE-2021-45046, CVE-2021-45105)",
"fork": false,
"created_at": "2021-12-14T10:04:42Z",
"updated_at": "2026-04-13T11:59:57Z",
"updated_at": "2026-05-30T20:59:31Z",
"pushed_at": "2022-12-27T17:57:19Z",
"stargazers_count": 439,
"watchers_count": 439,
"stargazers_count": 440,
"watchers_count": 440,
"has_discussions": true,
"forks_count": 97,
"allow_forking": true,
@@ -6140,7 +6140,7 @@
],
"visibility": "public",
"forks": 97,
"watchers": 439,
"watchers": 440,
"score": 0,
"subscribers_count": 18
},
2022/CVE-2022-46364.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2022-46364-Poc Apache CXF SSRF via MTOM XOP:Include",
"fork": false,
"created_at": "2026-03-28T21:10:47Z",
"updated_at": "2026-05-21T05:53:01Z",
"updated_at": "2026-05-30T22:18:31Z",
"pushed_at": "2026-03-28T21:13:06Z",
"stargazers_count": 6,
"watchers_count": 6,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 6,
"watchers": 7,
"score": 0,
"subscribers_count": 0
},
2023/CVE-2023-23752.json
+2 -2
View File
@@ -414,8 +414,8 @@
"description": "python 2.7",
"fork": false,
"created_at": "2023-03-11T11:20:44Z",
"updated_at": "2026-05-30T11:21:22Z",
"pushed_at": "2026-05-30T11:21:18Z",
"updated_at": "2026-05-30T19:40:51Z",
"pushed_at": "2026-05-30T19:40:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-2732.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "Python 2.7",
"fork": false,
"created_at": "2023-06-06T02:59:22Z",
"updated_at": "2026-05-30T01:21:25Z",
"pushed_at": "2026-05-30T01:21:21Z",
"updated_at": "2026-05-30T20:08:12Z",
"pushed_at": "2026-05-30T20:08:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-27350.json
+42 -2
View File
@@ -183,8 +183,8 @@
"description": "Python 2.7",
"fork": false,
"created_at": "2023-06-13T22:13:24Z",
"updated_at": "2026-05-30T01:31:34Z",
"pushed_at": "2026-05-30T01:31:30Z",
"updated_at": "2026-05-30T18:38:12Z",
"pushed_at": "2026-05-30T18:38:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -398,5 +398,45 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1254594187,
"name": "PaperCut-Authentication_Bypass_and_RCE",
"full_name": "joaoaugustom\/PaperCut-Authentication_Bypass_and_RCE",
"owner": {
"login": "joaoaugustom",
"id": 34131293,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/34131293?v=4",
"html_url": "https:\/\/github.com\/joaoaugustom",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/joaoaugustom\/PaperCut-Authentication_Bypass_and_RCE",
"description": "This exploit is based on CVE-2023-27350 and was built upon the original exploit by horizon3ai and the Metasploit module.",
"fork": false,
"created_at": "2026-05-30T19:08:15Z",
"updated_at": "2026-05-30T19:16:40Z",
"pushed_at": "2026-05-30T19:15:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"cve-2023-27350",
"exploit",
"papercut",
"papercut-mf",
"penetration-testing"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2023/CVE-2023-28121.json
+2 -2
View File
@@ -154,8 +154,8 @@
"description": "Wordpress CVE-2023-28121",
"fork": false,
"created_at": "2023-11-03T01:19:09Z",
"updated_at": "2026-05-30T01:21:37Z",
"pushed_at": "2026-05-30T01:21:33Z",
"updated_at": "2026-05-30T20:08:15Z",
"pushed_at": "2026-05-30T20:08:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-28588.json
-33
View File
@@ -32,39 +32,6 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 742454957,
"name": "CVE-2023-28588",
"full_name": "Trinadh465\/CVE-2023-28588",
"owner": {
"login": "Trinadh465",
"id": 102574296,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102574296?v=4",
"html_url": "https:\/\/github.com\/Trinadh465",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Trinadh465\/CVE-2023-28588",
"description": null,
"fork": false,
"created_at": "2024-01-12T14:15:42Z",
"updated_at": "2024-01-12T16:38:02Z",
"pushed_at": "2024-01-12T14:20:08Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 1
},
{
"id": 742472564,
"name": "CVE-2023-28588_system_bt",
2023/CVE-2023-32243.json
+2 -2
View File
@@ -282,8 +282,8 @@
"description": "Wordpress CVE-2023-32243",
"fork": false,
"created_at": "2023-07-03T04:16:16Z",
"updated_at": "2025-10-05T02:48:49Z",
"pushed_at": "2025-10-05T02:48:45Z",
"updated_at": "2026-05-30T20:08:19Z",
"pushed_at": "2026-05-30T20:08:16Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2023/CVE-2023-32434.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙",
"fork": false,
"created_at": "2025-08-13T09:19:29Z",
"updated_at": "2026-05-30T15:41:34Z",
"pushed_at": "2026-05-30T15:41:30Z",
"updated_at": "2026-05-30T22:03:54Z",
"pushed_at": "2026-05-30T22:03:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-38831.json
+4 -4
View File
@@ -1951,10 +1951,10 @@
"description": "This project is a cybersecurity research and analysis project focused on CVE-2023-38831, a critical WinRAR vulnerability that allows attackers to execute malicious code through specially crafted archive files. The project was conducted in a controlled lab environment for educational and defensive security purposes only.",
"fork": false,
"created_at": "2026-05-11T11:08:04Z",
"updated_at": "2026-05-11T11:33:21Z",
"updated_at": "2026-05-30T21:24:53Z",
"pushed_at": "2026-05-11T11:33:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -1965,7 +1965,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2023/CVE-2023-39910.json
+2 -2
View File
@@ -66,8 +66,8 @@
"description": "🔒 Analyze the CVE-2023-39910 vulnerability in Libbitcoin Explorer to understand its impact on Bitcoin wallet security and protect your assets.",
"fork": false,
"created_at": "2026-01-07T14:24:08Z",
"updated_at": "2026-05-30T16:45:07Z",
"pushed_at": "2026-05-30T16:45:03Z",
"updated_at": "2026-05-30T23:02:25Z",
"pushed_at": "2026-05-30T23:02:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-45866.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "🚨 CVE-2023-45866 - BlueDucky Implementation (Using DuckyScript) 🔓 Unauthenticated Peering Leading to Code Execution (Using HID Keyboard)",
"fork": false,
"created_at": "2024-01-16T06:52:02Z",
"updated_at": "2026-05-30T09:46:23Z",
"updated_at": "2026-05-30T20:27:44Z",
"pushed_at": "2026-02-11T00:03:00Z",
"stargazers_count": 1848,
"watchers_count": 1848,
"stargazers_count": 1851,
"watchers_count": 1851,
"has_discussions": false,
"forks_count": 312,
"forks_count": 313,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 312,
"watchers": 1848,
"forks": 313,
"watchers": 1851,
"score": 0,
"subscribers_count": 29
},
2023/CVE-2023-4863.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 317,
"watchers_count": 317,
"has_discussions": false,
"forks_count": 47,
"forks_count": 48,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 47,
"forks": 48,
"watchers": 317,
"score": 0,
"subscribers_count": 12
2023/CVE-2023-5360.json
+2 -2
View File
@@ -159,8 +159,8 @@
"description": "Wordpress CVE-2023-5360",
"fork": false,
"created_at": "2023-11-03T00:58:36Z",
"updated_at": "2026-05-30T01:21:50Z",
"pushed_at": "2026-05-30T01:21:46Z",
"updated_at": "2026-05-30T20:08:23Z",
"pushed_at": "2026-05-30T20:08:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-6553.json
+2 -2
View File
@@ -165,7 +165,7 @@
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -173,7 +173,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"forks": 0,
"watchers": 2,
"score": 0,
"subscribers_count": 0
2023/CVE-2023-6972.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
2024/CVE-2024-0670.json
+2 -2
View File
@@ -172,8 +172,8 @@
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
"fork": false,
"created_at": "2026-01-08T01:32:09Z",
"updated_at": "2026-05-30T16:45:28Z",
"pushed_at": "2026-05-30T16:45:25Z",
"updated_at": "2026-05-30T23:02:42Z",
"pushed_at": "2026-05-30T23:02:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-10508.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "This tool scans WordPress sites for vulnerabilities in the \"RegistrationMagic\" plugin (CVE-2024-10508). It checks for the presence of a specific version (`6.0.2.6`) and marks the site as vulnerable if found. The results are saved in a file (`vuln.txt`) for further analysis.",
"fork": false,
"created_at": "2024-11-21T04:32:19Z",
"updated_at": "2026-05-30T00:25:19Z",
"pushed_at": "2026-05-30T00:25:15Z",
"updated_at": "2026-05-30T18:40:00Z",
"pushed_at": "2026-05-30T18:39:56Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2024/CVE-2024-23222.json
+2 -2
View File
@@ -80,8 +80,8 @@
"description": "Analyze and deobfuscate the Coruna Exploit Kit (CVE-2024-23222) to enhance understanding and detection of related threats.",
"fork": false,
"created_at": "2026-03-15T16:36:07Z",
"updated_at": "2026-05-30T17:31:32Z",
"pushed_at": "2026-05-30T17:31:29Z",
"updated_at": "2026-05-30T23:43:48Z",
"pushed_at": "2026-05-30T23:43:45Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2024/CVE-2024-3400.json
+5 -5
View File
@@ -1419,8 +1419,8 @@
},
{
"id": 1254573114,
"name": "CVE-2024-3400_Testing",
"full_name": "Nikki-the-Parcel\/CVE-2024-3400_Testing",
"name": "Global-Protect_VPN_Vuln",
"full_name": "Nikki-the-Parcel\/Global-Protect_VPN_Vuln",
"owner": {
"login": "Nikki-the-Parcel",
"id": 50167941,
@@ -1428,12 +1428,12 @@
"html_url": "https:\/\/github.com\/Nikki-the-Parcel",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Nikki-the-Parcel\/CVE-2024-3400_Testing",
"html_url": "https:\/\/github.com\/Nikki-the-Parcel\/Global-Protect_VPN_Vuln",
"description": "Testing a List of IP address incase they are vulnerable to CVE-2024-3400",
"fork": false,
"created_at": "2026-05-30T18:31:50Z",
"updated_at": "2026-05-30T18:32:30Z",
"pushed_at": "2026-05-30T18:32:27Z",
"updated_at": "2026-05-30T18:50:32Z",
"pushed_at": "2026-05-30T18:50:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-36401.json
+8 -8
View File
@@ -14,10 +14,10 @@
"description": "POC for CVE-2024-36401. This POC will attempt to establish a reverse shell from the vlun targets.",
"fork": false,
"created_at": "2024-07-04T13:19:47Z",
"updated_at": "2025-09-26T11:12:58Z",
"updated_at": "2026-05-30T22:31:02Z",
"pushed_at": "2024-07-04T19:18:04Z",
"stargazers_count": 35,
"watchers_count": 35,
"stargazers_count": 34,
"watchers_count": 34,
"has_discussions": false,
"forks_count": 15,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 15,
"watchers": 35,
"watchers": 34,
"score": 0,
"subscribers_count": 1
},
@@ -219,10 +219,10 @@
"description": "GeoServer Remote Code Execution",
"fork": false,
"created_at": "2024-07-30T18:43:40Z",
"updated_at": "2026-05-06T07:19:07Z",
"updated_at": "2026-05-30T22:31:15Z",
"pushed_at": "2025-04-06T16:50:10Z",
"stargazers_count": 87,
"watchers_count": 87,
"stargazers_count": 86,
"watchers_count": 86,
"has_discussions": false,
"forks_count": 11,
"allow_forking": true,
@@ -233,7 +233,7 @@
"topics": [],
"visibility": "public",
"forks": 11,
"watchers": 87,
"watchers": 86,
"score": 0,
"subscribers_count": 1
},
2024/CVE-2024-52940.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2024-52940 - A zero-day vulnerability in AnyDesk's \"Allow Direct Connections\" feature, discovered and registered by Ebrahim Shafiei (EbraSha), exposing public and private IP addresses. For details, visit the NVD, Tenable, or MITRE pages.",
"fork": false,
"created_at": "2024-10-27T15:29:56Z",
"updated_at": "2026-05-26T08:43:03Z",
"updated_at": "2026-05-30T19:06:45Z",
"pushed_at": "2024-11-18T15:09:32Z",
"stargazers_count": 34,
"watchers_count": 34,
"stargazers_count": 35,
"watchers_count": 35,
"has_discussions": false,
"forks_count": 10,
"allow_forking": true,
@@ -40,7 +40,7 @@
],
"visibility": "public",
"forks": 10,
"watchers": 34,
"watchers": 35,
"score": 0,
"subscribers_count": 1
},
2024/CVE-2024-6387.json
+4 -4
View File
@@ -285,10 +285,10 @@
"description": "CVE-2024-6387_Check is a lightweight, efficient tool designed to identify servers running vulnerable versions of OpenSSH",
"fork": false,
"created_at": "2024-07-01T20:33:20Z",
"updated_at": "2026-05-30T09:53:11Z",
"updated_at": "2026-05-30T22:30:40Z",
"pushed_at": "2026-05-29T11:44:40Z",
"stargazers_count": 525,
"watchers_count": 525,
"stargazers_count": 524,
"watchers_count": 524,
"has_discussions": false,
"forks_count": 99,
"allow_forking": true,
@@ -305,7 +305,7 @@
],
"visibility": "public",
"forks": 99,
"watchers": 525,
"watchers": 524,
"score": 0,
"subscribers_count": 6
},
2024/CVE-2024-7029.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "A PoC tool for exploiting CVE-2024-7029 in AvTech devices, enabling RCE, vulnerability scanning, and an interactive shell.",
"fork": false,
"created_at": "2024-09-02T10:16:49Z",
"updated_at": "2024-11-20T19:07:31Z",
"updated_at": "2026-05-30T19:06:49Z",
"pushed_at": "2024-09-02T11:43:07Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": true,
"forks_count": 4,
"allow_forking": true,
@@ -70,7 +70,7 @@
],
"visibility": "public",
"forks": 4,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 1
},
2024/CVE-2024-8856.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "This tool scans WordPress websites for vulnerabilities in the WP Time Capsule plugin related to CVE-2024-8856. It identifies plugin versions below 1.22.22 as vulnerable and logs results to vuln.txt. Simple and efficient, it helps security researchers and admins detect and address risks quickly.",
"fork": false,
"created_at": "2024-11-21T04:01:27Z",
"updated_at": "2026-05-30T00:25:23Z",
"pushed_at": "2026-05-30T00:25:20Z",
"updated_at": "2026-05-30T19:37:33Z",
"pushed_at": "2026-05-30T19:37:29Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2024/CVE-2024-9290.json
+2 -2
View File
@@ -50,8 +50,8 @@
"description": "The tool targets WordPress websites that use the Super Backup & Clone plugin and are vulnerable to arbitrary file upload.",
"fork": false,
"created_at": "2024-12-24T00:04:17Z",
"updated_at": "2026-05-29T23:56:32Z",
"pushed_at": "2026-05-29T23:56:29Z",
"updated_at": "2026-05-30T19:37:36Z",
"pushed_at": "2026-05-30T19:37:32Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-41575.json → 2025/CVE-2025-10162.json
+12 -12
View File
@@ -1,21 +1,21 @@
[
{
"id": 1218236232,
"name": "CVE-2026-41575",
"full_name": "krrazee\/CVE-2026-41575",
"id": 1254689780,
"name": "CVE-2025-10162-Exploit",
"full_name": "diamorphine666\/CVE-2025-10162-Exploit",
"owner": {
"login": "krrazee",
"id": 276931143,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/276931143?v=4",
"html_url": "https:\/\/github.com\/krrazee",
"login": "diamorphine666",
"id": 121056021,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/121056021?v=4",
"html_url": "https:\/\/github.com\/diamorphine666",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/krrazee\/CVE-2026-41575",
"description": null,
"html_url": "https:\/\/github.com\/diamorphine666\/CVE-2025-10162-Exploit",
"description": "CVE-2025-10162 Exploit",
"fork": false,
"created_at": "2026-04-22T17:09:53Z",
"updated_at": "2026-04-27T08:30:58Z",
"pushed_at": "2026-04-27T08:30:53Z",
"created_at": "2026-05-30T22:15:33Z",
"updated_at": "2026-05-30T22:15:52Z",
"pushed_at": "2026-05-30T22:15:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-14847.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
"fork": false,
"created_at": "2025-07-30T15:52:00Z",
"updated_at": "2026-05-30T16:50:34Z",
"pushed_at": "2026-05-30T16:50:31Z",
"updated_at": "2026-05-30T23:07:14Z",
"pushed_at": "2026-05-30T23:07:11Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1129,8 +1129,8 @@
"description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
"fork": false,
"created_at": "2026-01-14T06:05:44Z",
"updated_at": "2026-05-30T16:49:31Z",
"pushed_at": "2026-05-30T16:49:28Z",
"updated_at": "2026-05-30T23:06:13Z",
"pushed_at": "2026-05-30T23:06:10Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-2304.json
+2 -2
View File
@@ -412,8 +412,8 @@
"description": "🛠️ Exploit CVE-2025-2304 in Camaleon CMS easily with this Python script for privilege escalation, tested on version 2.9.0.",
"fork": false,
"created_at": "2026-02-14T20:01:20Z",
"updated_at": "2026-05-30T17:11:57Z",
"pushed_at": "2026-05-30T17:11:54Z",
"updated_at": "2026-05-30T23:26:01Z",
"pushed_at": "2026-05-30T23:25:58Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-24257.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis",
"fork": false,
"created_at": "2026-04-04T03:42:55Z",
"updated_at": "2026-05-30T17:42:52Z",
"pushed_at": "2026-05-30T17:42:48Z",
"updated_at": "2026-05-30T23:54:03Z",
"pushed_at": "2026-05-30T23:53:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-31258.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔓 Explore CVE-2025-31258 with this PoC demonstrating partial sandbox escape using RemoteViewServices for practical 1-day security practice.",
"fork": false,
"created_at": "2020-06-23T15:20:11Z",
"updated_at": "2026-05-30T15:47:12Z",
"pushed_at": "2026-05-30T15:47:09Z",
"updated_at": "2026-05-30T22:09:10Z",
"pushed_at": "2026-05-30T22:09:06Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-32462.json
+4 -4
View File
@@ -146,10 +146,10 @@
"description": "🔓 Local privilege escalation PoC for CVE-2025-32462 (sudo -h bypass) – gain root via misconfigured sudoers",
"fork": false,
"created_at": "2025-07-04T20:04:34Z",
"updated_at": "2026-02-17T19:11:16Z",
"updated_at": "2026-05-30T20:25:57Z",
"pushed_at": "2026-02-17T19:11:13Z",
"stargazers_count": 8,
"watchers_count": 8,
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -160,7 +160,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 8,
"watchers": 9,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-32463.json
+6 -6
View File
@@ -645,8 +645,8 @@
"description": "Demonstrate CVE-2025-32463 with this PoC for sudo's chroot feature. Explore the exploit and its impact on vulnerable sudo versions. 🐱💻🔒",
"fork": false,
"created_at": "2025-07-04T18:20:09Z",
"updated_at": "2026-05-30T15:40:13Z",
"pushed_at": "2026-05-30T15:40:10Z",
"updated_at": "2026-05-30T22:02:35Z",
"pushed_at": "2026-05-30T22:02:31Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -1628,8 +1628,8 @@
"description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.",
"fork": false,
"created_at": "2025-09-20T00:42:07Z",
"updated_at": "2026-05-30T15:48:22Z",
"pushed_at": "2026-05-30T15:48:18Z",
"updated_at": "2026-05-30T22:10:21Z",
"pushed_at": "2026-05-30T22:10:18Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1680,8 +1680,8 @@
"description": null,
"fork": false,
"created_at": "2025-09-20T02:01:08Z",
"updated_at": "2026-05-30T15:48:23Z",
"pushed_at": "2026-05-30T15:48:20Z",
"updated_at": "2026-05-30T22:10:20Z",
"pushed_at": "2026-05-30T22:10:16Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-32756.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Proof of Concept for CVE-2025-32756 - A critical stack-based buffer overflow vulnerability affecting multiple Fortinet products.",
"fork": false,
"created_at": "2025-06-05T14:16:31Z",
"updated_at": "2026-05-27T07:46:59Z",
"updated_at": "2026-05-31T00:01:31Z",
"pushed_at": "2025-06-13T07:55:34Z",
"stargazers_count": 198,
"watchers_count": 198,
"stargazers_count": 199,
"watchers_count": 199,
"has_discussions": false,
"forks_count": 29,
"allow_forking": true,
@@ -66,7 +66,7 @@
],
"visibility": "public",
"forks": 29,
"watchers": 198,
"watchers": 199,
"score": 0,
"subscribers_count": 6
},
2025/CVE-2025-36911.json
+2 -2
View File
@@ -294,8 +294,8 @@
"description": "🔍 Scan and research CVE-2025-36911 vulnerabilities with WPair, a specialized tool for Android built in Kotlin, ensuring your applications remain secure.",
"fork": false,
"created_at": "2026-01-29T01:59:47Z",
"updated_at": "2026-05-30T17:01:42Z",
"pushed_at": "2026-05-30T17:01:39Z",
"updated_at": "2026-05-30T23:16:56Z",
"pushed_at": "2026-05-30T23:16:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-38352.json
+2 -2
View File
@@ -169,7 +169,7 @@
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 1,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -188,7 +188,7 @@
"webos"
],
"visibility": "public",
"forks": 1,
"forks": 0,
"watchers": 4,
"score": 0,
"subscribers_count": 0
2025/CVE-2025-48757.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Claude Skill that audits your projects for RLS misconfigurations, exposed keys, auth bypasses, and storage vulnerabilities. 27 anti-patterns sourced from CVE-2025-48757 and 10 security studies. Safe for production.",
"fork": false,
"created_at": "2026-03-15T14:49:30Z",
"updated_at": "2026-05-27T05:18:25Z",
"updated_at": "2026-05-30T19:08:55Z",
"pushed_at": "2026-04-30T08:42:55Z",
"stargazers_count": 27,
"watchers_count": 27,
"stargazers_count": 28,
"watchers_count": 28,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -44,7 +44,7 @@
],
"visibility": "public",
"forks": 3,
"watchers": 27,
"watchers": 28,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-49144.json
+2 -2
View File
@@ -251,8 +251,8 @@
"description": null,
"fork": false,
"created_at": "2025-09-19T17:17:19Z",
"updated_at": "2026-05-30T15:48:23Z",
"pushed_at": "2026-05-30T15:48:20Z",
"updated_at": "2026-05-30T22:10:16Z",
"pushed_at": "2026-05-30T22:10:12Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-49844.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.",
"fork": false,
"created_at": "2019-04-13T07:51:09Z",
"updated_at": "2026-05-30T16:06:34Z",
"pushed_at": "2026-05-30T16:06:30Z",
"updated_at": "2026-05-30T22:27:12Z",
"pushed_at": "2026-05-30T22:27:09Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
"fork": false,
"created_at": "2022-04-06T09:27:39Z",
"updated_at": "2026-05-30T16:07:18Z",
"pushed_at": "2026-05-30T16:07:15Z",
"updated_at": "2026-05-30T22:28:05Z",
"pushed_at": "2026-05-30T22:28:02Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-54123.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2025-54123 Hoverfly Authenticated Middleware Command Injection RCE",
"fork": false,
"created_at": "2026-03-28T21:49:30Z",
"updated_at": "2026-05-18T14:53:31Z",
"updated_at": "2026-05-30T22:23:04Z",
"pushed_at": "2026-03-28T21:50:31Z",
"stargazers_count": 6,
"watchers_count": 6,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 6,
"watchers": 7,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-5419.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛡️ Analyze CVE-2025-5419 to exploit an uninitialized read vulnerability in V8 for arbitrary read\/write access within the sandbox environment.",
"fork": false,
"created_at": "2023-01-25T04:41:49Z",
"updated_at": "2026-05-30T17:10:18Z",
"pushed_at": "2026-05-30T17:10:14Z",
"updated_at": "2026-05-30T23:24:31Z",
"pushed_at": "2026-05-30T23:24:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-54236.json
+2 -2
View File
@@ -161,8 +161,8 @@
"description": "SessionReaper-CVE-2025-54236",
"fork": false,
"created_at": "2026-05-13T03:42:51Z",
"updated_at": "2026-05-30T00:03:47Z",
"pushed_at": "2026-05-30T00:03:43Z",
"updated_at": "2026-05-30T19:41:33Z",
"pushed_at": "2026-05-30T19:41:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-54253.json
+2 -2
View File
@@ -67,8 +67,8 @@
"description": "🐙 CVE-2025-54253 exploit demo for Adobe AEM Forms on JEE: OGNL injection to RCE with PoC, Python 3.10 exploit code, reproducer and mitigation guidance.",
"fork": false,
"created_at": "2025-08-17T22:04:33Z",
"updated_at": "2026-05-30T15:42:53Z",
"pushed_at": "2026-05-30T15:42:49Z",
"updated_at": "2026-05-30T22:05:03Z",
"pushed_at": "2026-05-30T22:04:58Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-54424.json
+2 -2
View File
@@ -53,8 +53,8 @@
"description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐",
"fork": false,
"created_at": "2025-08-14T05:16:16Z",
"updated_at": "2026-05-30T15:42:24Z",
"pushed_at": "2026-05-30T15:42:21Z",
"updated_at": "2026-05-30T22:04:38Z",
"pushed_at": "2026-05-30T22:04:35Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2025/CVE-2025-55182.json
+69 -69
View File
@@ -14,8 +14,8 @@
"description": "🔍 Demonstrate CVE-2025-55182, a critical vulnerability in React Server Components allowing unauthenticated arbitrary code execution.",
"fork": false,
"created_at": "2021-09-18T02:04:33Z",
"updated_at": "2026-05-30T16:35:56Z",
"pushed_at": "2026-05-30T16:35:53Z",
"updated_at": "2026-05-30T22:54:12Z",
"pushed_at": "2026-05-30T22:54:09Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.",
"fork": false,
"created_at": "2022-06-17T10:19:10Z",
"updated_at": "2026-05-30T16:35:33Z",
"pushed_at": "2026-05-30T16:35:29Z",
"updated_at": "2026-05-30T22:54:02Z",
"pushed_at": "2026-05-30T22:53:59Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -151,8 +151,8 @@
"description": "🔍 Detect vulnerabilities CVE-2025-55182 and CVE-2025-66478 in Next.js apps with this reliable command-line scanner.",
"fork": false,
"created_at": "2023-11-27T18:17:43Z",
"updated_at": "2026-05-30T16:35:43Z",
"pushed_at": "2026-05-30T16:35:40Z",
"updated_at": "2026-05-30T22:53:58Z",
"pushed_at": "2026-05-30T22:53:55Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -203,8 +203,8 @@
"description": "🚨 Exploit CVE-2025-55182, a critical RCE vulnerability in React Server Components for Next.js apps; enables testing for prototype pollution risks.",
"fork": false,
"created_at": "2024-04-24T02:36:56Z",
"updated_at": "2026-05-30T16:36:42Z",
"pushed_at": "2026-05-30T16:36:39Z",
"updated_at": "2026-05-30T22:54:55Z",
"pushed_at": "2026-05-30T22:54:51Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -251,8 +251,8 @@
"description": "🚨 Exploit and scan for CVE-2025-55182, a critical React\/Next.js vulnerability enabling remote code execution through prototype pollution techniques.",
"fork": false,
"created_at": "2024-05-28T16:48:51Z",
"updated_at": "2026-05-30T16:35:20Z",
"pushed_at": "2026-05-30T16:35:17Z",
"updated_at": "2026-05-30T22:53:35Z",
"pushed_at": "2026-05-30T22:53:32Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -303,8 +303,8 @@
"description": null,
"fork": false,
"created_at": "2024-11-29T12:32:19Z",
"updated_at": "2026-05-30T16:36:18Z",
"pushed_at": "2026-05-30T16:36:14Z",
"updated_at": "2026-05-30T22:54:36Z",
"pushed_at": "2026-05-30T22:54:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -352,8 +352,8 @@
"description": "🛠️ Exploit CVE-2025-55182 effortlessly with this GUI tool for vulnerability detection, command execution, and Shell reverse connections.",
"fork": false,
"created_at": "2025-04-21T22:04:31Z",
"updated_at": "2026-05-30T16:39:09Z",
"pushed_at": "2026-05-30T16:39:06Z",
"updated_at": "2026-05-30T22:57:06Z",
"pushed_at": "2026-05-30T22:57:03Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -406,8 +406,8 @@
"description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
"fork": false,
"created_at": "2025-06-06T16:34:46Z",
"updated_at": "2026-05-30T16:35:52Z",
"pushed_at": "2026-05-30T16:35:47Z",
"updated_at": "2026-05-30T22:54:12Z",
"pushed_at": "2026-05-30T22:54:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -458,8 +458,8 @@
"description": "⚠️ Explore a vulnerable environment to test security scanners against the CVE-2025-55182 RCE flaw in React Server Components and Next.js applications.",
"fork": false,
"created_at": "2025-07-15T18:33:34Z",
"updated_at": "2026-05-30T16:36:40Z",
"pushed_at": "2026-05-30T16:36:36Z",
"updated_at": "2026-05-30T22:54:50Z",
"pushed_at": "2026-05-30T22:54:46Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -2610,7 +2610,7 @@
"stargazers_count": 1048,
"watchers_count": 1048,
"has_discussions": false,
"forks_count": 108,
"forks_count": 107,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2621,7 +2621,7 @@
"react2shell"
],
"visibility": "public",
"forks": 108,
"forks": 107,
"watchers": 1048,
"score": 0,
"subscribers_count": 24
@@ -10087,39 +10087,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1115033619,
"name": "COMPLETE-CVE-2025-55182",
"full_name": "alphad4n\/COMPLETE-CVE-2025-55182",
"owner": {
"login": "alphad4n",
"id": 112778628,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/112778628?v=4",
"html_url": "https:\/\/github.com\/alphad4n",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/alphad4n\/COMPLETE-CVE-2025-55182",
"description": null,
"fork": false,
"created_at": "2025-12-12T08:43:39Z",
"updated_at": "2025-12-12T08:44:50Z",
"pushed_at": "2025-12-12T08:44:46Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1115060201,
"name": "RCE_React2Shell_ButCooler-SomeUselessUsefulThingsLMAO-",
@@ -12284,8 +12251,8 @@
"description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.",
"fork": false,
"created_at": "2025-12-24T14:48:19Z",
"updated_at": "2026-05-30T16:35:31Z",
"pushed_at": "2026-05-30T16:35:28Z",
"updated_at": "2026-05-30T22:53:51Z",
"pushed_at": "2026-05-30T22:53:48Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12369,8 +12336,8 @@
"description": "🚨 Identify and address CVE-2025-55182, a critical React Server vulnerability allowing remote code execution without authentication.",
"fork": false,
"created_at": "2025-12-24T18:44:51Z",
"updated_at": "2026-05-30T16:34:51Z",
"pushed_at": "2026-05-30T16:34:47Z",
"updated_at": "2026-05-30T22:53:15Z",
"pushed_at": "2026-05-30T22:53:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12418,8 +12385,8 @@
"description": "🚨 Demonstrate CVE-2025-55182, a critical React vulnerability allowing remote code execution via prototype chain pollution in `[email protected]`.",
"fork": false,
"created_at": "2025-12-24T18:48:07Z",
"updated_at": "2026-05-30T16:34:55Z",
"pushed_at": "2026-05-30T16:34:51Z",
"updated_at": "2026-05-30T22:53:16Z",
"pushed_at": "2026-05-30T22:53:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12503,8 +12470,8 @@
"description": "🔍 Exploit CVE-2025-55182 in Next.js with this versatile tool for security research, featuring advanced payloads and WAF bypass techniques.",
"fork": false,
"created_at": "2025-12-25T19:28:28Z",
"updated_at": "2026-05-30T16:36:25Z",
"pushed_at": "2026-05-30T16:36:22Z",
"updated_at": "2026-05-30T22:54:34Z",
"pushed_at": "2026-05-30T22:54:31Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12705,8 +12672,8 @@
"description": "⚡ Discover and exploit CVE-2025-55182 with this PoC, offering reliable remote code execution tests for React Server Components in Next.js.",
"fork": false,
"created_at": "2025-12-26T22:26:55Z",
"updated_at": "2026-05-30T16:36:17Z",
"pushed_at": "2026-05-30T16:36:14Z",
"updated_at": "2026-05-30T22:54:32Z",
"pushed_at": "2026-05-30T22:54:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12975,8 +12942,8 @@
"description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
"fork": false,
"created_at": "2026-01-02T01:28:57Z",
"updated_at": "2026-05-30T16:40:56Z",
"pushed_at": "2026-05-30T16:40:52Z",
"updated_at": "2026-05-30T22:58:41Z",
"pushed_at": "2026-05-30T22:58:37Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -13496,8 +13463,8 @@
"description": "🔍 Exploit CVE-2025-55182 vulnerabilities in Next.js and React with this efficient framework for rapid testing and assessment.",
"fork": false,
"created_at": "2026-01-08T16:28:04Z",
"updated_at": "2026-05-30T16:46:21Z",
"pushed_at": "2026-05-30T16:46:17Z",
"updated_at": "2026-05-30T23:03:25Z",
"pushed_at": "2026-05-30T23:03:22Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -15458,6 +15425,39 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1226511261,
"name": "CVE-2025-55182-EXPLOIT",
"full_name": "K3ysTr0K3R\/CVE-2025-55182-EXPLOIT",
"owner": {
"login": "K3ysTr0K3R",
"id": 70909693,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/70909693?v=4",
"html_url": "https:\/\/github.com\/K3ysTr0K3R",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/K3ysTr0K3R\/CVE-2025-55182-EXPLOIT",
"description": null,
"fork": false,
"created_at": "2026-05-01T13:49:37Z",
"updated_at": "2026-05-30T21:31:47Z",
"pushed_at": "2026-05-30T21:31:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1241294318,
"name": "Info-Sys-Security-CVE-2025-55182",
@@ -15687,8 +15687,8 @@
"description": "CVE-2025-55182 Exploit Tool – Python 2.7 exploit for Next.js prototype pollution leading to RCE",
"fork": false,
"created_at": "2026-05-25T10:32:03Z",
"updated_at": "2026-05-29T23:56:35Z",
"pushed_at": "2026-05-29T23:56:32Z",
"updated_at": "2026-05-30T19:37:39Z",
"pushed_at": "2026-05-30T19:37:36Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-55184.json
+2 -2
View File
@@ -289,8 +289,8 @@
"description": "🛠️ Test and validate the CVE-2025-55184 vulnerability in React Server Components to enhance your application's security against denial-of-service attacks.",
"fork": false,
"created_at": "2026-01-02T05:04:03Z",
"updated_at": "2026-05-30T16:41:21Z",
"pushed_at": "2026-05-30T16:41:16Z",
"updated_at": "2026-05-30T22:59:07Z",
"pushed_at": "2026-05-30T22:59:02Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-59287.json
+2 -2
View File
@@ -200,8 +200,8 @@
"description": "🔍 Analyze WSUS deserialization behavior to enhance security, generate reports, and identify configuration weaknesses in your infrastructure.",
"fork": false,
"created_at": "2026-01-29T02:16:04Z",
"updated_at": "2026-05-30T17:01:45Z",
"pushed_at": "2026-05-30T17:01:41Z",
"updated_at": "2026-05-30T23:16:53Z",
"pushed_at": "2026-05-30T23:16:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-59528.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": "Authenticated Remote Code Execution (RCE) exploit for Flowise AI versions ≤ 3.0.4. Leverages a vulnerability in the \/api\/v1\/node-load-method\/customMCP endpoint to execute arbitrary system commands via Node.js child_process.execSync(). Includes full PoC script and remediation steps.",
"fork": false,
"created_at": "2026-04-15T12:47:25Z",
"updated_at": "2026-04-15T12:50:43Z",
"updated_at": "2026-05-30T20:55:28Z",
"pushed_at": "2026-04-15T12:50:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-61882.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔍 Detect vulnerabilities CVE-2025-61882 and CVE-2025-61884 in Oracle E-Business Suite to help secure your systems from potential remote code execution threats.",
"fork": false,
"created_at": "2025-03-04T15:38:32Z",
"updated_at": "2026-05-30T16:05:05Z",
"pushed_at": "2026-05-30T16:05:01Z",
"updated_at": "2026-05-30T22:25:57Z",
"pushed_at": "2026-05-30T22:25:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-6554.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "🔍 Demonstrate and validate the `addressof` and `fakeobj` primitives in the V8 sandbox for advanced security research on CVE-2025-6554.",
"fork": false,
"created_at": "2025-08-10T21:07:43Z",
"updated_at": "2026-05-30T16:30:50Z",
"pushed_at": "2026-05-30T16:30:47Z",
"updated_at": "2026-05-30T22:49:26Z",
"pushed_at": "2026-05-30T22:49:22Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-66398.json
+2 -2
View File
@@ -64,8 +64,8 @@
"description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.",
"fork": false,
"created_at": "2026-03-23T09:09:21Z",
"updated_at": "2026-05-30T17:36:31Z",
"pushed_at": "2026-05-30T17:36:27Z",
"updated_at": "2026-05-30T23:48:24Z",
"pushed_at": "2026-05-30T23:48:21Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-66478.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.",
"fork": false,
"created_at": "2025-10-01T07:40:09Z",
"updated_at": "2026-05-30T16:37:09Z",
"pushed_at": "2026-05-30T16:37:06Z",
"updated_at": "2026-05-30T22:55:19Z",
"pushed_at": "2026-05-30T22:55:15Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-68921.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.",
"fork": false,
"created_at": "2026-01-24T21:00:41Z",
"updated_at": "2026-05-30T16:58:30Z",
"pushed_at": "2026-05-30T16:58:27Z",
"updated_at": "2026-05-30T23:14:00Z",
"pushed_at": "2026-05-30T23:13:57Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-6934.json
+39
View File
@@ -164,6 +164,45 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1069983875,
"name": "WP-CVE-2025-6934",
"full_name": "Jenderal92\/WP-CVE-2025-6934",
"owner": {
"login": "Jenderal92",
"id": 59664965,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59664965?v=4",
"html_url": "https:\/\/github.com\/Jenderal92",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Jenderal92\/WP-CVE-2025-6934",
"description": "WP-CVE-2025-6934 | Opal Estate Pro <= 1.7.5 - Unauthenticated Privilege Escalation",
"fork": false,
"created_at": "2025-10-05T02:41:35Z",
"updated_at": "2026-05-30T20:08:27Z",
"pushed_at": "2026-05-30T20:08:24Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve-2025-6934",
"python27",
"security-research",
"wordpress",
"wordpress-plugin"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1145907638,
"name": "CVE-2025-6934",
2025/CVE-2025-69985.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit CVE-2025-69985 to bypass authentication and execute remote commands on FUXA versions ≤ 1.2.8 via the \/api\/runscript endpoint.",
"fork": false,
"created_at": "2025-04-10T09:18:30Z",
"updated_at": "2026-05-30T17:24:02Z",
"pushed_at": "2026-05-30T17:23:58Z",
"updated_at": "2026-05-30T23:36:50Z",
"pushed_at": "2026-05-30T23:36:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-70795.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.",
"fork": false,
"created_at": "2024-04-20T04:18:24Z",
"updated_at": "2026-05-30T17:19:37Z",
"pushed_at": "2026-05-30T17:19:34Z",
"updated_at": "2026-05-30T23:32:56Z",
"pushed_at": "2026-05-30T23:32:52Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-8088.json
+2 -2
View File
@@ -838,8 +838,8 @@
"description": "🛠 Exploit CVE-2025-8088 with this Python tool to generate malicious WinRAR archives that ensure payload persistence in Windows startup folders.",
"fork": false,
"created_at": "2025-12-20T13:52:21Z",
"updated_at": "2026-05-30T16:31:54Z",
"pushed_at": "2026-05-30T16:31:50Z",
"updated_at": "2026-05-30T22:50:30Z",
"pushed_at": "2026-05-30T22:50:26Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-8110.json
+6 -6
View File
@@ -146,8 +146,8 @@
"description": "🔍 Detect improper symbolic link handling in Gogs' PutContents API, exposing local code execution risks for versions 0.13.3 and earlier.",
"fork": false,
"created_at": "2025-12-31T13:25:07Z",
"updated_at": "2026-05-30T16:40:34Z",
"pushed_at": "2026-05-30T16:40:31Z",
"updated_at": "2026-05-30T22:58:18Z",
"pushed_at": "2026-05-30T22:58:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -328,10 +328,10 @@
"description": "Gogs CVE-2025-8110 RCE Exploit",
"fork": false,
"created_at": "2026-04-12T12:06:42Z",
"updated_at": "2026-05-26T17:25:27Z",
"updated_at": "2026-05-30T21:40:22Z",
"pushed_at": "2026-04-12T12:12:18Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -349,7 +349,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-9074.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🚀 Exploit CVE-2025-9074 with this Docker escape framework, simplifying API vulnerabilities and enhancing security testing for developers and researchers.",
"fork": false,
"created_at": "2024-06-19T23:21:41Z",
"updated_at": "2026-05-30T16:41:58Z",
"pushed_at": "2026-05-30T16:41:55Z",
"updated_at": "2026-05-30T22:59:35Z",
"pushed_at": "2026-05-30T22:59:31Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-0828.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit and control Windows processes using CVE-2025-70795 and CVE-2026-0828 with driver-based termination tools.",
"fork": false,
"created_at": "2024-04-20T04:18:24Z",
"updated_at": "2026-05-30T17:19:37Z",
"pushed_at": "2026-05-30T17:19:34Z",
"updated_at": "2026-05-30T23:32:56Z",
"pushed_at": "2026-05-30T23:32:52Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-20841.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.",
"fork": false,
"created_at": "2024-09-22T12:19:06Z",
"updated_at": "2026-05-30T17:19:11Z",
"pushed_at": "2026-05-30T17:19:07Z",
"updated_at": "2026-05-30T23:32:29Z",
"pushed_at": "2026-05-30T23:32:26Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.",
"fork": false,
"created_at": "2026-02-26T05:21:28Z",
"updated_at": "2026-05-30T17:18:02Z",
"pushed_at": "2026-05-30T17:17:58Z",
"updated_at": "2026-05-30T23:31:32Z",
"pushed_at": "2026-05-30T23:31:29Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-23744.json
+68
View File
@@ -0,0 +1,68 @@
[
{
"id": 1254604463,
"name": "CVE-2026-23744",
"full_name": "w3nch\/CVE-2026-23744",
"owner": {
"login": "w3nch",
"id": 133785769,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/133785769?v=4",
"html_url": "https:\/\/github.com\/w3nch",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/w3nch\/CVE-2026-23744",
"description": "CVE-2026-23744 - Versions 1.4.2 and earlier of MCPJam inspector",
"fork": false,
"created_at": "2026-05-30T19:26:23Z",
"updated_at": "2026-05-30T19:26:47Z",
"pushed_at": "2026-05-30T19:26:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1254684507,
"name": "DevHub-HackTheBox-ss11",
"full_name": "SuriyaBoon\/DevHub-HackTheBox-ss11",
"owner": {
"login": "SuriyaBoon",
"id": 277692345,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/277692345?v=4",
"html_url": "https:\/\/github.com\/SuriyaBoon",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/SuriyaBoon\/DevHub-HackTheBox-ss11",
"description": "HTB Season 11 — DevHub Writeup Exploiting CVE-2026-23744 (MCPJam Inspector unauthenticated RCE via \/api\/mcp\/connect) to gain initial foothold, then lateral movement through Jupyter Lab token leaked in systemd service file. Stack: nginx · MCPJam Inspector 1.4.2 · Jupyter Lab · OPSMCP (root)",
"fork": false,
"created_at": "2026-05-30T22:03:43Z",
"updated_at": "2026-05-31T00:15:29Z",
"pushed_at": "2026-05-31T00:15:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-23870.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Next.js v16.2.4 Security PoC Collection (CVE-2026-23870, CVE-2026-44575, CVE-2026-44579, CVE-2026-44574, CVE-2026-44578, CVE-2026-44573, CVE-2026-44581, CVE-2026-44580, CVE-2026-44577, CVE-2026-44576, CVE-2026-44582, CVE-2026-44572)",
"fork": false,
"created_at": "2026-05-07T23:00:40Z",
"updated_at": "2026-05-28T17:03:02Z",
"updated_at": "2026-05-30T20:35:16Z",
"pushed_at": "2026-05-12T04:28:18Z",
"stargazers_count": 159,
"watchers_count": 159,
"stargazers_count": 160,
"watchers_count": 160,
"has_discussions": true,
"forks_count": 33,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 33,
"watchers": 159,
"watchers": 160,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-2406.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔍 Analyze and detect CVE-2026-2406 vulnerabilities in Telnet to enhance security and prevent unauthorized access with this professional research engine.",
"fork": false,
"created_at": "2025-04-16T07:20:12Z",
"updated_at": "2026-05-30T17:09:48Z",
"pushed_at": "2026-05-30T17:09:44Z",
"updated_at": "2026-05-30T23:24:02Z",
"pushed_at": "2026-05-30T23:23:58Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24061.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.",
"fork": false,
"created_at": "2026-02-03T19:46:10Z",
"updated_at": "2026-05-30T17:06:13Z",
"pushed_at": "2026-05-30T17:06:09Z",
"updated_at": "2026-05-30T23:20:50Z",
"pushed_at": "2026-05-30T23:20:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24291.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions",
"fork": false,
"created_at": "2026-03-26T04:38:27Z",
"updated_at": "2026-05-30T17:38:47Z",
"pushed_at": "2026-05-30T17:38:44Z",
"updated_at": "2026-05-30T23:50:06Z",
"pushed_at": "2026-05-30T23:50:02Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-2441.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.",
"fork": false,
"created_at": "2026-03-03T14:19:18Z",
"updated_at": "2026-05-30T17:21:20Z",
"pushed_at": "2026-05-30T17:21:17Z",
"updated_at": "2026-05-30T23:34:26Z",
"pushed_at": "2026-05-30T23:34:22Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-2472.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.",
"fork": false,
"created_at": "2026-03-10T14:40:04Z",
"updated_at": "2026-05-30T17:26:44Z",
"pushed_at": "2026-05-30T17:26:40Z",
"updated_at": "2026-05-30T23:39:14Z",
"pushed_at": "2026-05-30T23:39:11Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-25643.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit Frigate NVR ≤0.16.3 to execute commands remotely by abusing a configuration flaw without needing shell access or output capture.",
"fork": false,
"created_at": "2026-03-07T20:23:08Z",
"updated_at": "2026-05-30T17:25:30Z",
"pushed_at": "2026-05-30T17:25:26Z",
"updated_at": "2026-05-30T23:38:04Z",
"pushed_at": "2026-05-30T23:38:01Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-2991.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Explore a PoC for CVE-2026-2991, an auth bypass in KiviCare 4.1.2 and earlier via the patient social-login REST endpoint",
"fork": false,
"created_at": "2026-04-03T20:26:43Z",
"updated_at": "2026-05-30T17:42:27Z",
"pushed_at": "2026-05-30T17:42:24Z",
"updated_at": "2026-05-30T23:53:42Z",
"pushed_at": "2026-05-30T23:53:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-31431.json
+14 -14
View File
@@ -47,10 +47,10 @@
"description": "Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code",
"fork": false,
"created_at": "2026-04-29T12:15:28Z",
"updated_at": "2026-05-30T12:34:44Z",
"updated_at": "2026-05-30T21:53:44Z",
"pushed_at": "2026-04-29T21:21:46Z",
"stargazers_count": 3917,
"watchers_count": 3917,
"stargazers_count": 3918,
"watchers_count": 3918,
"has_discussions": false,
"forks_count": 872,
"allow_forking": true,
@@ -72,7 +72,7 @@
],
"visibility": "public",
"forks": 872,
"watchers": 3917,
"watchers": 3918,
"score": 0,
"subscribers_count": 32
},
@@ -761,12 +761,12 @@
"description": "CVE-2026-31431: Copy Fail | A minimal exploit for Linux authencesn + AF_ALG + splice() page cache write.",
"fork": false,
"created_at": "2026-04-30T04:25:00Z",
"updated_at": "2026-05-25T09:59:01Z",
"updated_at": "2026-05-31T00:01:55Z",
"pushed_at": "2026-04-30T04:30:27Z",
"stargazers_count": 67,
"watchers_count": 67,
"stargazers_count": 68,
"watchers_count": 68,
"has_discussions": false,
"forks_count": 64,
"forks_count": 65,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -774,8 +774,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 64,
"watchers": 67,
"forks": 65,
"watchers": 68,
"score": 0,
"subscribers_count": 0
},
@@ -7799,8 +7799,8 @@
"description": "Exploit and detect CVE-2026-31431 vulnerabilities using a static binary that monitors system integrity and bypasses PAM authentication.",
"fork": false,
"created_at": "2026-05-05T04:58:21Z",
"updated_at": "2026-05-30T18:01:32Z",
"pushed_at": "2026-05-30T18:01:29Z",
"updated_at": "2026-05-31T00:11:17Z",
"pushed_at": "2026-05-31T00:11:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -8634,8 +8634,8 @@
"description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.",
"fork": false,
"created_at": "2026-05-06T09:49:14Z",
"updated_at": "2026-05-30T18:02:25Z",
"pushed_at": "2026-05-30T18:02:21Z",
"updated_at": "2026-05-31T00:12:04Z",
"pushed_at": "2026-05-31T00:12:01Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-31802.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"fork": false,
"created_at": "2026-03-28T20:49:46Z",
"updated_at": "2026-05-30T17:39:43Z",
"pushed_at": "2026-05-30T17:39:40Z",
"updated_at": "2026-05-30T23:51:04Z",
"pushed_at": "2026-05-30T23:51:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-33825.json
+4 -4
View File
@@ -94,10 +94,10 @@
"description": "CVE-2026-33825",
"fork": false,
"created_at": "2026-05-18T16:28:47Z",
"updated_at": "2026-05-20T10:31:28Z",
"updated_at": "2026-05-30T22:02:52Z",
"pushed_at": "2026-05-20T10:31:24Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -108,7 +108,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-33937.json
-33
View File
@@ -43,38 +43,5 @@
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 1217653827,
"name": "CVE-2026-33937",
"full_name": "EQSTLab\/CVE-2026-33937",
"owner": {
"login": "EQSTLab",
"id": 148991397,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/148991397?v=4",
"html_url": "https:\/\/github.com\/EQSTLab",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/EQSTLab\/CVE-2026-33937",
"description": "Handlebars.js AST Injection Remote Code Execution Vulnerability",
"fork": false,
"created_at": "2026-04-22T05:09:10Z",
"updated_at": "2026-05-06T01:13:58Z",
"pushed_at": "2026-04-27T08:54:56Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-35330.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "CVE-2026-35330: strongSwan EAP-SIM\/AKA heap overflow PoC",
"fork": false,
"created_at": "2026-05-14T06:45:05Z",
"updated_at": "2026-05-15T18:26:55Z",
"updated_at": "2026-05-30T21:08:01Z",
"pushed_at": "2026-05-15T18:26:52Z",
"stargazers_count": 0,
"watchers_count": 0,
2026/CVE-2026-35333.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "CVE-2026-35333: strongSwan RADIUS attribute iterator infinite loop PoC",
"fork": false,
"created_at": "2026-05-14T07:02:54Z",
"updated_at": "2026-05-15T18:26:43Z",
"updated_at": "2026-05-30T21:08:22Z",
"pushed_at": "2026-05-15T18:26:08Z",
"stargazers_count": 0,
"watchers_count": 0,
2026/CVE-2026-38934.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 1222327303,
"name": "diskoverdata-cve-writeups",
"full_name": "VadlaReddySai\/diskoverdata-cve-writeups",
"owner": {
"login": "VadlaReddySai",
"id": 146691360,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/146691360?v=4",
"html_url": "https:\/\/github.com\/VadlaReddySai",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/VadlaReddySai\/diskoverdata-cve-writeups",
"description": "Multiple CVEs (CVE-2026-38934, CVE-2026-38935, CVE-2026-38936) discovered in diskover-community including CSRF and XSS vulnerabilities with proof-of-concept and impact analysis.",
"fork": false,
"created_at": "2026-04-27T08:57:53Z",
"updated_at": "2026-04-27T09:37:52Z",
"pushed_at": "2026-04-27T09:37:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-40369.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "Full exploit code for CVE-2026-40369 - A Windows kernel arbitrary write vulnerability that allows browser sandbox escape from all browsers render process sandbox",
"fork": false,
"created_at": "2026-05-13T20:56:15Z",
"updated_at": "2026-05-30T17:42:00Z",
"updated_at": "2026-05-30T23:40:00Z",
"pushed_at": "2026-05-18T21:29:59Z",
"stargazers_count": 208,
"watchers_count": 208,
"stargazers_count": 211,
"watchers_count": 211,
"has_discussions": false,
"forks_count": 45,
"forks_count": 46,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 45,
"watchers": 208,
"forks": 46,
"watchers": 211,
"score": 0,
"subscribers_count": 4
},
2026/CVE-2026-41940.json
+16 -16
View File
@@ -317,10 +317,10 @@
"description": "Detection, mitigation, and reverse-engineering tooling for CVE-2026-41940 (SessionScribe): the cPanel\/WHM unauthenticated session-forgery vulnerability disclosed 2026-04-28. Defense-in-depth active mitigation shim, ModSec rule pack, remote probe, on-host IOC scanner, and per-tier RE snapshot collector. GPL v2.",
"fork": false,
"created_at": "2026-04-30T14:32:43Z",
"updated_at": "2026-05-21T19:48:56Z",
"updated_at": "2026-05-30T19:59:53Z",
"pushed_at": "2026-05-21T19:48:31Z",
"stargazers_count": 12,
"watchers_count": 12,
"stargazers_count": 13,
"watchers_count": 13,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -345,7 +345,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 12,
"watchers": 13,
"score": 0,
"subscribers_count": 1
},
@@ -738,10 +738,10 @@
"description": "CVE-2026-41940 — cPanel & WHM Authentication Bypass via Session-File CRLF Injection",
"fork": false,
"created_at": "2026-05-01T12:09:26Z",
"updated_at": "2026-05-30T17:31:38Z",
"updated_at": "2026-05-30T19:50:26Z",
"pushed_at": "2026-05-01T12:10:32Z",
"stargazers_count": 448,
"watchers_count": 448,
"stargazers_count": 450,
"watchers_count": 450,
"has_discussions": false,
"forks_count": 131,
"allow_forking": true,
@@ -752,7 +752,7 @@
"topics": [],
"visibility": "public",
"forks": 131,
"watchers": 448,
"watchers": 450,
"score": 0,
"subscribers_count": 6
},
@@ -771,10 +771,10 @@
"description": "cPanel\/WHM Authentication Bypass (Zero-Day Vulnerability)",
"fork": false,
"created_at": "2026-05-01T14:57:03Z",
"updated_at": "2026-05-29T08:41:52Z",
"updated_at": "2026-05-30T19:06:59Z",
"pushed_at": "2026-05-16T10:26:21Z",
"stargazers_count": 8,
"watchers_count": 8,
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -795,7 +795,7 @@
],
"visibility": "public",
"forks": 2,
"watchers": 8,
"watchers": 9,
"score": 0,
"subscribers_count": 0
},
@@ -880,8 +880,8 @@
"description": "Bulk scanner and mass exploitation tool for CVE-2026-41940 on cPanel\/WHM, built for automated target validation and high-speed multi-threaded execution.",
"fork": false,
"created_at": "2026-05-01T15:43:28Z",
"updated_at": "2026-05-29T23:56:44Z",
"pushed_at": "2026-05-29T23:56:40Z",
"updated_at": "2026-05-30T19:37:53Z",
"pushed_at": "2026-05-30T19:37:49Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
@@ -1812,8 +1812,8 @@
"description": "Test authentication bypass vulnerabilities in cPanel and WHM using this proof of concept exploit tool written in Go.",
"fork": false,
"created_at": "2026-05-06T18:08:48Z",
"updated_at": "2026-05-30T18:02:47Z",
"pushed_at": "2026-05-30T18:02:43Z",
"updated_at": "2026-05-31T00:12:24Z",
"pushed_at": "2026-05-31T00:12:21Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-42945.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "exploit for CVE-2026-42945",
"fork": false,
"created_at": "2026-05-12T23:05:32Z",
"updated_at": "2026-05-30T05:57:35Z",
"updated_at": "2026-05-30T22:01:48Z",
"pushed_at": "2026-05-13T18:40:57Z",
"stargazers_count": 819,
"watchers_count": 819,
"stargazers_count": 820,
"watchers_count": 820,
"has_discussions": false,
"forks_count": 153,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 153,
"watchers": 819,
"watchers": 820,
"score": 0,
"subscribers_count": 5
},
2026/CVE-2026-43284.json
+33
View File
@@ -898,5 +898,38 @@
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
{
"id": 1254629079,
"name": "CVE-2026-43284-CVE-2026-43500-EXPLOIT",
"full_name": "K3ysTr0K3R\/CVE-2026-43284-CVE-2026-43500-EXPLOIT",
"owner": {
"login": "K3ysTr0K3R",
"id": 70909693,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/70909693?v=4",
"html_url": "https:\/\/github.com\/K3ysTr0K3R",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/K3ysTr0K3R\/CVE-2026-43284-CVE-2026-43500-EXPLOIT",
"description": null,
"fork": false,
"created_at": "2026-05-30T20:11:27Z",
"updated_at": "2026-05-30T20:21:22Z",
"pushed_at": "2026-05-30T20:21:19Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-45585.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "yellowkey bitlocker github vulnerability bypass cve-2026-45585 windows 11 security zero day exploit winre recovery mode poc nightmare eclipse chaotic eclipse exploit tool usb attack encryption hack script mitigation guide fstx winpeshl shell unpatched fix tool",
"fork": false,
"created_at": "2026-05-23T17:19:03Z",
"updated_at": "2026-05-30T18:30:26Z",
"updated_at": "2026-05-31T00:22:21Z",
"pushed_at": "2026-05-23T17:24:38Z",
"stargazers_count": 409,
"watchers_count": 409,
"stargazers_count": 414,
"watchers_count": 414,
"has_discussions": false,
"forks_count": 16,
"allow_forking": true,
@@ -109,7 +109,7 @@
],
"visibility": "public",
"forks": 16,
"watchers": 409,
"watchers": 414,
"score": 0,
"subscribers_count": 1
},
2026/CVE-2026-47668.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "DbGate Unauthenticated Remote Code Execution",
"fork": false,
"created_at": "2026-05-26T14:47:03Z",
"updated_at": "2026-05-28T07:24:08Z",
"updated_at": "2026-05-30T23:53:57Z",
"pushed_at": "2026-05-26T14:54:52Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-48778.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Notepad++ RCE via config.xml commandLineInterpreter",
"fork": false,
"created_at": "2026-05-30T17:49:16Z",
"updated_at": "2026-05-30T18:24:20Z",
"updated_at": "2026-05-31T00:10:42Z",
"pushed_at": "2026-05-30T18:22:39Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 4,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-4885.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "Piotnet Addons for Elementor Pro <= 7.1.70 - Unauthenticated Arbitrary File Upload via Form File Upload",
"fork": false,
"created_at": "2026-05-23T17:45:40Z",
"updated_at": "2026-05-29T23:56:47Z",
"pushed_at": "2026-05-29T23:56:43Z",
"updated_at": "2026-05-30T19:37:56Z",
"pushed_at": "2026-05-30T19:37:53Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-5118.json
+2 -2
View File
@@ -80,8 +80,8 @@
"description": "CVE-2026-5118 – Python2 mass exploit for Divi WordPress plugin Unauthenticated administrator registration via admin-ajax.php. Multi‑threaded scanner with nonce extraction.",
"fork": false,
"created_at": "2026-05-21T22:45:59Z",
"updated_at": "2026-05-29T23:56:49Z",
"pushed_at": "2026-05-29T23:56:46Z",
"updated_at": "2026-05-30T19:38:00Z",
"pushed_at": "2026-05-30T19:37:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-8181.json
+2 -2
View File
@@ -80,8 +80,8 @@
"description": "CVE-2026-8181: Burst Statistics Auth Bypass → REST API takeover & admin creation. Python 2.7. Educational use only.",
"fork": false,
"created_at": "2026-05-16T02:50:28Z",
"updated_at": "2026-05-29T23:56:54Z",
"pushed_at": "2026-05-29T23:56:50Z",
"updated_at": "2026-05-30T19:38:04Z",
"pushed_at": "2026-05-30T19:38:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-8732.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "WP Maps Pro <= 6.1.0 - Unauthenticated Privilege Escalation via Administrator Account Creation to wpgmp_temp_access_ajax AJAX Action",
"fork": false,
"created_at": "2026-05-30T11:16:07Z",
"updated_at": "2026-05-30T11:47:17Z",
"pushed_at": "2026-05-30T11:47:13Z",
"updated_at": "2026-05-30T19:38:08Z",
"pushed_at": "2026-05-30T19:38:04Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-9082.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": "Drupal Core PostgreSQL SQL Injection PoC - CVE-2026-9082. Ethical PoC for the Drupal vulnerability allowing anonymous SQL injection through the JSON:API module on PostgreSQL-backed sites.",
"fork": false,
"created_at": "2026-05-21T10:42:30Z",
"updated_at": "2026-05-30T17:23:51Z",
"updated_at": "2026-05-30T18:59:20Z",
"pushed_at": "2026-05-21T11:45:46Z",
"stargazers_count": 11,
"watchers_count": 11,
"stargazers_count": 12,
"watchers_count": 12,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 11,
"watchers": 12,
"score": 0,
"subscribers_count": 0
},
README.md
+20 -18
View File
@@ -849,6 +849,14 @@
- [kikechans/-Educational-PoC-CVE-2026-23520](https://github.com/kikechans/-Educational-PoC-CVE-2026-23520)
### CVE-2026-23744 (2026-01-16)
<code>MCPJam inspector is the local-first development platform for MCP servers. Versions 1.4.2 and earlier are vulnerable to remote code execution (RCE) vulnerability, which allows an attacker to send a crafted HTTP request that triggers the installation of an MCP server, leading to RCE. Since MCPJam inspector by default listens on 0.0.0.0 instead of 127.0.0.1, an attacker can trigger the RCE remotely via a simple HTTP request. Version 1.4.3 contains a patch.
</code>
- [w3nch/CVE-2026-23744](https://github.com/w3nch/CVE-2026-23744)
- [SuriyaBoon/DevHub-HackTheBox-ss11](https://github.com/SuriyaBoon/DevHub-HackTheBox-ss11)
### CVE-2026-23813 (2026-03-11)
<code>A vulnerability has been identified in the web-based management interface of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. In some cases this could enable resetting the admin password.
@@ -1709,7 +1717,6 @@
</code>
- [dinhvaren/cve-2026-33937](https://github.com/dinhvaren/cve-2026-33937)
- [EQSTLab/CVE-2026-33937](https://github.com/EQSTLab/CVE-2026-33937)
### CVE-2026-33980 (2026-03-27)
@@ -2072,13 +2079,6 @@
### CVE-2026-38766
- [D7EAD/CVE-2026-38766](https://github.com/D7EAD/CVE-2026-38766)
### CVE-2026-38934 (2026-04-27)
<code>Cross Site Request Forgery vulnerability in diskoverdata diskover-community v.2.3.5. and before allows a remote attacker to escalate privileges and obtain sensitive information via the public/settings_process.php
</code>
- [VadlaReddySai/diskoverdata-cve-writeups](https://github.com/VadlaReddySai/diskoverdata-cve-writeups)
### CVE-2026-38945 (2026-05-27)
<code>Command injection in Raynet rvia version 12.6 Update 8 and previous versions allows adversaries to execute arbitrary code via a crafted path that matches the improperly terminated search criteria of rvia's Java search using the find command.
@@ -2240,13 +2240,6 @@
- [0xBlackash/CVE-2026-41462](https://github.com/0xBlackash/CVE-2026-41462)
### CVE-2026-41575 (2026-05-08)
<code>In th30d4y/IP from version 1.0.1 to before version 2.0.1, a DOM-Based Cross-Site Scripting (XSS) vulnerability was identified in an IP Reputation Checker application. Unsanitized user input was directly rendered in the browser, allowing attackers to execute arbitrary JavaScript. This issue has been patched in version 2.0.1.
</code>
- [krrazee/CVE-2026-41575](https://github.com/krrazee/CVE-2026-41575)
### CVE-2026-41651 (2026-04-22)
<code>PackageKit is a a D-Bus abstraction layer that allows the user to manage packages in a secure way using a cross-distro, cross-architecture API. PackageKit between and including versions 1.0.2 and 1.3.4 is vulnerable to a time-of-check time-of-use (TOCTOU) race condition on transaction flags that allows unprivileged users to install packages as root and thus leads to a local privilege escalation. This is patched in version 1.3.5.\n\nA local unprivileged user can install arbitrary RPM packages as root, including executing RPM scriptlets, without authentication. The vulnerability is a TOCTOU race condition on `transaction-&gt;cached_transaction_flags` combined with a silent state-machine guard that discards illegal backward transitions while leaving corrupted flags in place. Three bugs exist in `src/pk-transaction.c`:\n1. Unconditional flag overwrite (line 4036): `InstallFiles()` writes caller-supplied flags to `transaction-&gt;cached_transaction_flags` without checking whether the transaction has already been authorized/started. A second call blindly overwrites the flags even while the transaction is RUNNING.\n2. Silent state-transition rejection (lines 873–882): `pk_transaction_set_state()` silently discards backward state transitions (e.g. `RUNNING` → `WAITING_FOR_AUTH`) but the flag overwrite at step 1 already happened. The transaction continues running with corrupted flags.\n3. Late flag read at execution time (lines 2273–2277): The scheduler's idle callback reads cached_transaction_flags at dispatch time, not at authorization time. If flags were overwritten between authorization and execution, the backend sees the attacker's flags.
@@ -2571,6 +2564,7 @@
- [DylanClaudio/Reporte-de-Escalada-de-Privilegios-Local-Dirty-Frag](https://github.com/DylanClaudio/Reporte-de-Escalada-de-Privilegios-Local-Dirty-Frag)
- [AtlasVector/Dirty-Frag-CVE-2026-43284](https://github.com/AtlasVector/Dirty-Frag-CVE-2026-43284)
- [jayhutajulu1/CVE-2026-43284-DirtyFrag-PoC](https://github.com/jayhutajulu1/CVE-2026-43284-DirtyFrag-PoC)
- [K3ysTr0K3R/CVE-2026-43284-CVE-2026-43500-EXPLOIT](https://github.com/K3ysTr0K3R/CVE-2026-43284-CVE-2026-43500-EXPLOIT)
### CVE-2026-43494 (2026-05-21)
@@ -4488,6 +4482,7 @@
- [0xgh057r3c0n/CVE-2025-6934](https://github.com/0xgh057r3c0n/CVE-2025-6934)
- [yukinime/CVE-2025-6934](https://github.com/yukinime/CVE-2025-6934)
- [AnotherSec/CVE-2025-6934](https://github.com/AnotherSec/CVE-2025-6934)
- [Jenderal92/WP-CVE-2025-6934](https://github.com/Jenderal92/WP-CVE-2025-6934)
- [1atakan1/CVE-2025-6934](https://github.com/1atakan1/CVE-2025-6934)
- [0xTerror/CVE-2025-6934](https://github.com/0xTerror/CVE-2025-6934)
- [MejbanKadir/CVE-2025-6934-PoC](https://github.com/MejbanKadir/CVE-2025-6934-PoC)
@@ -5119,6 +5114,13 @@
- [ghostpel-sec/CVE-2025-10147](https://github.com/ghostpel-sec/CVE-2025-10147)
### CVE-2025-10162 (2025-10-07)
<code>The Admin and Customer Messages After Order for WooCommerce: OrderConvo WordPress plugin before 14 does not validate the path of files to be downloaded, which could allow unauthenticated attacker to read/download arbitrary files via a path traversal attack
</code>
- [diamorphine666/CVE-2025-10162-Exploit](https://github.com/diamorphine666/CVE-2025-10162-Exploit)
### CVE-2025-10175 (2025-10-11)
<code>The WP Links Page plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 4.9.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
@@ -11428,7 +11430,6 @@
- [Shadowroot97/React2Shell-CVE-2025-55182](https://github.com/Shadowroot97/React2Shell-CVE-2025-55182)
- [yuta3003/CVE-2025-55182](https://github.com/yuta3003/CVE-2025-55182)
- [rahul-securify/React2Shell-CVE-2025-55182](https://github.com/rahul-securify/React2Shell-CVE-2025-55182)
- [alphad4n/COMPLETE-CVE-2025-55182](https://github.com/alphad4n/COMPLETE-CVE-2025-55182)
- [raivenLockdown/RCE_React2Shell_ButCooler-SomeUselessUsefulThingsLMAO-](https://github.com/raivenLockdown/RCE_React2Shell_ButCooler-SomeUselessUsefulThingsLMAO-)
- [oguri-souhei/CVE-2025-55182](https://github.com/oguri-souhei/CVE-2025-55182)
- [xalgord/React2Shell](https://github.com/xalgord/React2Shell)
@@ -11583,6 +11584,7 @@
- [joaoreis13/flight-risk](https://github.com/joaoreis13/flight-risk)
- [shibaaa204/React2Shell](https://github.com/shibaaa204/React2Shell)
- [Cybersecurity-Enthusiasts-CE/CVE-2025-55182-Researching-process](https://github.com/Cybersecurity-Enthusiasts-CE/CVE-2025-55182-Researching-process)
- [K3ysTr0K3R/CVE-2025-55182-EXPLOIT](https://github.com/K3ysTr0K3R/CVE-2025-55182-EXPLOIT)
- [MuharremK0/Info-Sys-Security-CVE-2025-55182](https://github.com/MuharremK0/Info-Sys-Security-CVE-2025-55182)
- [ycseo-git/CVE-2025-55182](https://github.com/ycseo-git/CVE-2025-55182)
- [Industri4l-H3ll-Xpl0it3rs/CVE-2025-55182-React2Shell](https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2025-55182-React2Shell)
@@ -15399,7 +15401,7 @@
- [GhassanSabir/CVE-2024-3400-poc](https://github.com/GhassanSabir/CVE-2024-3400-poc)
- [Zedocun/PAN-OS-CVE-2024-3400-Command-Injection-Investigation](https://github.com/Zedocun/PAN-OS-CVE-2024-3400-Command-Injection-Investigation)
- [wa6n3r/CVE-2024-3400](https://github.com/wa6n3r/CVE-2024-3400)
- [Nikki-the-Parcel/CVE-2024-3400_Testing](https://github.com/Nikki-the-Parcel/CVE-2024-3400_Testing)
- [Nikki-the-Parcel/Global-Protect_VPN_Vuln](https://github.com/Nikki-the-Parcel/Global-Protect_VPN_Vuln)
### CVE-2024-3408 (2024-06-06)
@@ -28951,6 +28953,7 @@
- [0xB0y426/CVE-2023-27350-PoC](https://github.com/0xB0y426/CVE-2023-27350-PoC)
- [Royall-Researchers/CVE-2023-27350](https://github.com/Royall-Researchers/CVE-2023-27350)
- [dezso-dfield/CVE-2023-27350](https://github.com/dezso-dfield/CVE-2023-27350)
- [joaoaugustom/PaperCut-Authentication_Bypass_and_RCE](https://github.com/joaoaugustom/PaperCut-Authentication_Bypass_and_RCE)
### CVE-2023-27363 (2024-05-03)
@@ -29268,7 +29271,6 @@
</code>
- [uthrasri/CVE-2023-28588](https://github.com/uthrasri/CVE-2023-28588)
- [Trinadh465/CVE-2023-28588](https://github.com/Trinadh465/CVE-2023-28588)
- [uthrasri/CVE-2023-28588_system_bt](https://github.com/uthrasri/CVE-2023-28588_system_bt)
- [uthrasri/CVE-2023-28588_Singlefile](https://github.com/uthrasri/CVE-2023-28588_Singlefile)
- [uthrasri/G2.5_CVE-2023-28588](https://github.com/uthrasri/G2.5_CVE-2023-28588)