nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/08/17 06:50:14

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-08-17 15:50:14 +09:00
1 parent 306a9deceb
commit b37a4ed9e5
66 files changed
+395 -418
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2014/CVE-2014-0160.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "A checker (site and tool) for CVE-2014-0160",
"fork": false,
"created_at": "2014-04-07T23:03:09Z",
"updated_at": "2026-08-16T15:26:36Z",
"updated_at": "2026-08-17T04:35:33Z",
"pushed_at": "2021-02-24T09:17:24Z",
"stargazers_count": 2379,
"watchers_count": 2379,
"stargazers_count": 2380,
"watchers_count": 2380,
"has_discussions": false,
"forks_count": 453,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 453,
"watchers": 2379,
"watchers": 2380,
"score": 0,
"subscribers_count": 105
},
2015/CVE-2015-5254.json
+2 -2
View File
@@ -118,7 +118,7 @@
"stargazers_count": 83,
"watchers_count": 83,
"has_discussions": false,
"forks_count": 9,
"forks_count": 10,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -126,7 +126,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 9,
"forks": 10,
"watchers": 83,
"score": 0,
"subscribers_count": 2
2016/CVE-2016-3088.json
+2 -2
View File
@@ -254,7 +254,7 @@
"stargazers_count": 83,
"watchers_count": 83,
"has_discussions": false,
"forks_count": 9,
"forks_count": 10,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -262,7 +262,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 9,
"forks": 10,
"watchers": 83,
"score": 0,
"subscribers_count": 2
2017/CVE-2017-9248.json
+2 -2
View File
@@ -146,8 +146,8 @@
"description": "Another tool for exploiting CVE-2017-9248, a cryptographic weakness in Telerik UI for ASP.NET AJAX dialog handler.",
"fork": false,
"created_at": "2022-10-04T21:09:27Z",
"updated_at": "2026-04-01T19:54:21Z",
"pushed_at": "2026-04-01T19:54:17Z",
"updated_at": "2026-08-17T02:05:22Z",
"pushed_at": "2026-08-17T02:05:20Z",
"stargazers_count": 60,
"watchers_count": 60,
"has_discussions": false,
2018/CVE-2018-8611.json
+33
View File
@@ -31,5 +31,38 @@
"watchers": 10,
"score": 0,
"subscribers_count": 1
},
{
"id": 1336660297,
"name": "cve-2018-8611",
"full_name": "ahm3dgg\/cve-2018-8611",
"owner": {
"login": "ahm3dgg",
"id": 210139660,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/210139660?v=4",
"html_url": "https:\/\/github.com\/ahm3dgg",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ahm3dgg\/cve-2018-8611",
"description": "CVE-2018-8611 PrivEsc Exploit",
"fork": false,
"created_at": "2026-08-17T04:20:38Z",
"updated_at": "2026-08-17T04:23:48Z",
"pushed_at": "2026-08-17T04:22:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2019/CVE-2019-1003000.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 316,
"watchers_count": 316,
"has_discussions": false,
"forks_count": 87,
"forks_count": 86,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -71,7 +71,7 @@
"security-1266"
],
"visibility": "public",
"forks": 87,
"forks": 86,
"watchers": 316,
"score": 0,
"subscribers_count": 3
2019/CVE-2019-2215.json
+8 -8
View File
@@ -47,10 +47,10 @@
"description": "Temproot for Pixel 2 and Pixel 2 XL via CVE-2019-2215",
"fork": false,
"created_at": "2019-10-14T17:27:37Z",
"updated_at": "2026-08-14T09:55:52Z",
"updated_at": "2026-08-17T03:23:56Z",
"pushed_at": "2019-10-15T01:04:08Z",
"stargazers_count": 135,
"watchers_count": 135,
"stargazers_count": 136,
"watchers_count": 136,
"has_discussions": false,
"forks_count": 55,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 55,
"watchers": 135,
"watchers": 136,
"score": 0,
"subscribers_count": 7
},
@@ -530,10 +530,10 @@
"description": "Android Kernel Vulnerability (CVE-2019-2215) temporary root PoC",
"fork": false,
"created_at": "2023-11-05T14:32:11Z",
"updated_at": "2026-05-25T04:37:39Z",
"updated_at": "2026-08-17T03:23:06Z",
"pushed_at": "2023-12-21T06:18:47Z",
"stargazers_count": 16,
"watchers_count": 16,
"stargazers_count": 17,
"watchers_count": 17,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -544,7 +544,7 @@
"topics": [],
"visibility": "public",
"forks": 7,
"watchers": 16,
"watchers": 17,
"score": 0,
"subscribers_count": 1
},
2021/CVE-2021-21972.json
+4 -4
View File
@@ -836,10 +836,10 @@
"description": "一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972\/31656以及log4j，提供一键上传webshell，命令执行或者上传公钥使用SSH免密连接",
"fork": false,
"created_at": "2022-10-04T03:39:27Z",
"updated_at": "2026-08-13T07:29:55Z",
"updated_at": "2026-08-17T02:19:39Z",
"pushed_at": "2024-04-25T06:09:38Z",
"stargazers_count": 1483,
"watchers_count": 1483,
"stargazers_count": 1484,
"watchers_count": 1484,
"has_discussions": false,
"forks_count": 166,
"allow_forking": true,
@@ -857,7 +857,7 @@
],
"visibility": "public",
"forks": 166,
"watchers": 1483,
"watchers": 1484,
"score": 0,
"subscribers_count": 14
},
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-08-16T23:48:50Z",
"pushed_at": "2026-08-16T23:48:43Z",
"updated_at": "2026-08-17T06:03:10Z",
"pushed_at": "2026-08-17T06:02:46Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-4034.json
-33
View File
@@ -1,37 +1,4 @@
[
{
"id": 452081015,
"name": "CVE-2021-4034",
"full_name": "berdav\/CVE-2021-4034",
"owner": {
"login": "berdav",
"id": 1332095,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1332095?v=4",
"html_url": "https:\/\/github.com\/berdav",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/berdav\/CVE-2021-4034",
"description": "CVE-2021-4034 1day",
"fork": false,
"created_at": "2022-01-25T23:51:37Z",
"updated_at": "2026-08-10T14:45:01Z",
"pushed_at": "2022-06-08T04:00:28Z",
"stargazers_count": 2044,
"watchers_count": 2044,
"has_discussions": false,
"forks_count": 507,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 507,
"watchers": 2044,
"score": 0,
"subscribers_count": 18
},
{
"id": 452094681,
"name": "CVE-2021-4034",
2021/CVE-2021-42574.json
+2 -2
View File
@@ -294,8 +294,8 @@
"description": "Security hardening toolkit for COBOL legacy — detects Trojan Source (CVE-2021-42574) and Glassworm invisible Unicode in GnuCOBOL \/ Zowe pipelines",
"fork": false,
"created_at": "2026-08-12T23:01:35Z",
"updated_at": "2026-08-16T23:24:54Z",
"pushed_at": "2026-08-16T23:24:36Z",
"updated_at": "2026-08-17T04:30:57Z",
"pushed_at": "2026-08-17T04:30:13Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2021/CVE-2021-44228.json
+54
View File
@@ -13847,6 +13847,60 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1255516094,
"name": "Log4ShellAuditor",
"full_name": "C00LN3T\/Log4ShellAuditor",
"owner": {
"login": "C00LN3T",
"id": 217349927,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/217349927?v=4",
"html_url": "https:\/\/github.com\/C00LN3T",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/C00LN3T\/Log4ShellAuditor",
"description": "An autonomous reflective Go agent for full-cycle security auditing, WAF evasion, OOB LDAP verification, self-remediation (auto-patching), and compliance reporting for CVE-2021-44228 (Log4Shell).",
"fork": false,
"created_at": "2026-05-31T23:20:17Z",
"updated_at": "2026-08-17T00:54:29Z",
"pushed_at": "2026-08-17T00:54:23Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": true,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"agent",
"agentic",
"ai",
"ai-agent",
"audit",
"auto-audit",
"automation",
"autonomous-agent",
"cve-2021-44228",
"cyber-security",
"cybersecurity",
"cybersecurity-tools",
"devsecops",
"golang",
"log4shell",
"oob-verification",
"pentesting",
"remediation",
"security-agent",
"spring"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1258372826,
"name": "vulnerable-java-app",
2022/CVE-2022-22077.json
+1 -1
View File
@@ -15,7 +15,7 @@
"fork": false,
"created_at": "2025-09-08T21:12:19Z",
"updated_at": "2026-06-19T21:56:25Z",
"pushed_at": "2026-08-15T17:51:35Z",
"pushed_at": "2026-08-17T05:54:57Z",
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
2022/CVE-2022-22954.json
+4 -4
View File
@@ -809,10 +809,10 @@
"description": "一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972\/31656以及log4j，提供一键上传webshell，命令执行或者上传公钥使用SSH免密连接",
"fork": false,
"created_at": "2022-10-04T03:39:27Z",
"updated_at": "2026-08-13T07:29:55Z",
"updated_at": "2026-08-17T02:19:39Z",
"pushed_at": "2024-04-25T06:09:38Z",
"stargazers_count": 1483,
"watchers_count": 1483,
"stargazers_count": 1484,
"watchers_count": 1484,
"has_discussions": false,
"forks_count": 166,
"allow_forking": true,
@@ -830,7 +830,7 @@
],
"visibility": "public",
"forks": 166,
"watchers": 1483,
"watchers": 1484,
"score": 0,
"subscribers_count": 14
},
2022/CVE-2022-24086.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "CVE-2022-24086 about Magento RCE ",
"fork": false,
"created_at": "2022-02-20T13:52:31Z",
"updated_at": "2026-05-13T19:49:23Z",
"updated_at": "2026-08-17T02:31:14Z",
"pushed_at": "2022-12-16T16:51:43Z",
"stargazers_count": 35,
"watchers_count": 35,
2022/CVE-2022-38694.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "This is a one-time signature verification bypass. For persistent signature verification bypass, check https:\/\/github.com\/TomKing062\/CVE-2022-38691_38692",
"fork": false,
"created_at": "2023-06-10T08:31:26Z",
"updated_at": "2026-08-16T12:29:46Z",
"updated_at": "2026-08-17T06:27:12Z",
"pushed_at": "2025-06-14T16:55:26Z",
"stargazers_count": 589,
"watchers_count": 589,
"stargazers_count": 588,
"watchers_count": 588,
"has_discussions": true,
"forks_count": 78,
"allow_forking": true,
@@ -31,7 +31,7 @@
],
"visibility": "public",
"forks": 78,
"watchers": 589,
"watchers": 588,
"score": 0,
"subscribers_count": 14
},
2022/CVE-2022-41678.json
+2 -2
View File
@@ -93,7 +93,7 @@
"stargazers_count": 83,
"watchers_count": 83,
"has_discussions": false,
"forks_count": 9,
"forks_count": 10,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -101,7 +101,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 9,
"forks": 10,
"watchers": 83,
"score": 0,
"subscribers_count": 2
2023/CVE-2023-32434.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙",
"fork": false,
"created_at": "2025-08-13T09:19:29Z",
"updated_at": "2026-08-16T22:52:57Z",
"pushed_at": "2026-08-16T22:52:51Z",
"updated_at": "2026-08-17T06:06:52Z",
"pushed_at": "2026-08-17T06:06:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-46604.json
+2 -2
View File
@@ -1050,7 +1050,7 @@
"stargazers_count": 83,
"watchers_count": 83,
"has_discussions": false,
"forks_count": 9,
"forks_count": 10,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1058,7 +1058,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 9,
"forks": 10,
"watchers": 83,
"score": 0,
"subscribers_count": 2
2023/CVE-2023-4863.json
+4 -4
View File
@@ -332,15 +332,15 @@
{
"id": 1218155617,
"name": "CVE-2023-4863",
"full_name": "jpselva\/CVE-2023-4863",
"full_name": "jpsbern\/CVE-2023-4863",
"owner": {
"login": "jpselva",
"login": "jpsbern",
"id": 82722340,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/82722340?v=4",
"html_url": "https:\/\/github.com\/jpselva",
"html_url": "https:\/\/github.com\/jpsbern",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/jpselva\/CVE-2023-4863",
"html_url": "https:\/\/github.com\/jpsbern\/CVE-2023-4863",
"description": null,
"fork": false,
"created_at": "2026-04-22T15:32:23Z",
2024/CVE-2024-1651.json
-33
View File
@@ -36,39 +36,6 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 765380419,
"name": "CVE-2024-1651-exploit-RCE",
"full_name": "hy011121\/CVE-2024-1651-exploit-RCE",
"owner": {
"login": "hy011121",
"id": 75035965,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/75035965?v=4",
"html_url": "https:\/\/github.com\/hy011121",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/hy011121\/CVE-2024-1651-exploit-RCE",
"description": "(Mirorring)",
"fork": false,
"created_at": "2024-02-29T20:06:30Z",
"updated_at": "2024-05-31T16:53:29Z",
"pushed_at": "2024-02-29T21:09:19Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 3,
"score": 0,
"subscribers_count": 1
},
{
"id": 789059612,
"name": "CVE-2024-1651-PoC",
2024/CVE-2024-20137.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"forks": 2,
"watchers": 1,
"score": 0,
"subscribers_count": 1
2024/CVE-2024-25600.json
-33
View File
@@ -98,39 +98,6 @@
"score": 0,
"subscribers_count": 2
},
{
"id": 765397075,
"name": "CVE-2024-25600-wordpress-Exploit-RCE",
"full_name": "hy011121\/CVE-2024-25600-wordpress-Exploit-RCE",
"owner": {
"login": "hy011121",
"id": 75035965,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/75035965?v=4",
"html_url": "https:\/\/github.com\/hy011121",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/hy011121\/CVE-2024-25600-wordpress-Exploit-RCE",
"description": "(Mirorring)",
"fork": false,
"created_at": "2024-02-29T20:53:42Z",
"updated_at": "2024-06-16T18:49:22Z",
"pushed_at": "2024-02-29T21:04:40Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 3,
"score": 0,
"subscribers_count": 1
},
{
"id": 765618070,
"name": "CVE-2024-25600-EXPLOIT",
2024/CVE-2024-32114.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 83,
"watchers_count": 83,
"has_discussions": false,
"forks_count": 9,
"forks_count": 10,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 9,
"forks": 10,
"watchers": 83,
"score": 0,
"subscribers_count": 2
2024/CVE-2024-44258.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2024-44258",
"fork": false,
"created_at": "2024-10-29T09:45:03Z",
"updated_at": "2025-12-14T17:15:33Z",
"updated_at": "2026-08-17T02:42:51Z",
"pushed_at": "2024-11-02T19:20:44Z",
"stargazers_count": 89,
"watchers_count": 89,
"stargazers_count": 90,
"watchers_count": 90,
"has_discussions": false,
"forks_count": 14,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 14,
"watchers": 89,
"watchers": 90,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-21479.json
+2 -2
View File
@@ -146,8 +146,8 @@
"description": "CVE-2025-21479 (Qualcomm Adreno GPU) reproduction notes for vivo iQOO 11 Pro (PD2254) - authorized research",
"fork": false,
"created_at": "2026-08-13T08:02:16Z",
"updated_at": "2026-08-16T13:03:51Z",
"pushed_at": "2026-08-16T13:03:06Z",
"updated_at": "2026-08-17T05:36:16Z",
"pushed_at": "2026-08-17T05:34:59Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2025/CVE-2025-24257.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis",
"fork": false,
"created_at": "2026-04-04T03:42:55Z",
"updated_at": "2026-08-16T23:23:59Z",
"pushed_at": "2026-08-16T23:23:53Z",
"updated_at": "2026-08-17T06:38:54Z",
"pushed_at": "2026-08-17T06:37:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-32023.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "PoC & Exploit for CVE-2025-32023 \/ PlaidCTF 2025 \"Zerodeo\"",
"fork": false,
"created_at": "2025-07-06T18:09:11Z",
"updated_at": "2026-07-23T07:53:05Z",
"updated_at": "2026-08-17T06:27:29Z",
"pushed_at": "2025-07-06T18:58:01Z",
"stargazers_count": 216,
"watchers_count": 216,
"stargazers_count": 215,
"watchers_count": 215,
"has_discussions": false,
"forks_count": 40,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 40,
"watchers": 216,
"watchers": 215,
"score": 0,
"subscribers_count": 4
},
2025/CVE-2025-32463.json
+2 -2
View File
@@ -1496,8 +1496,8 @@
"description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.",
"fork": false,
"created_at": "2025-09-20T00:42:07Z",
"updated_at": "2026-08-16T16:02:01Z",
"pushed_at": "2026-08-16T16:01:47Z",
"updated_at": "2026-08-17T06:08:40Z",
"pushed_at": "2026-08-17T06:08:35Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-43529.json
+6 -6
View File
@@ -212,12 +212,12 @@
"description": "A demonstration of read write using cve-2025-43529 on iOS 26.1",
"fork": false,
"created_at": "2026-06-11T04:48:56Z",
"updated_at": "2026-08-15T17:52:08Z",
"updated_at": "2026-08-17T05:04:08Z",
"pushed_at": "2026-08-04T16:37:36Z",
"stargazers_count": 61,
"watchers_count": 61,
"stargazers_count": 62,
"watchers_count": 62,
"has_discussions": false,
"forks_count": 16,
"forks_count": 17,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -225,8 +225,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 16,
"watchers": 61,
"forks": 17,
"watchers": 62,
"score": 0,
"subscribers_count": 2
}
2025/CVE-2025-48804.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Downgrade attack for CVE-2025-48804",
"fork": false,
"created_at": "2026-04-30T13:05:30Z",
"updated_at": "2026-08-16T16:43:52Z",
"updated_at": "2026-08-17T04:36:57Z",
"pushed_at": "2026-08-12T12:01:15Z",
"stargazers_count": 224,
"watchers_count": 224,
"stargazers_count": 225,
"watchers_count": 225,
"has_discussions": false,
"forks_count": 44,
"allow_forking": true,
@@ -32,7 +32,7 @@
],
"visibility": "public",
"forks": 44,
"watchers": 224,
"watchers": 225,
"score": 0,
"subscribers_count": 3
}
2025/CVE-2025-49844.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.",
"fork": false,
"created_at": "2019-04-13T07:51:09Z",
"updated_at": "2026-08-16T16:06:14Z",
"pushed_at": "2026-08-16T16:06:00Z",
"updated_at": "2026-08-17T06:12:48Z",
"pushed_at": "2026-08-17T06:12:38Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-52688.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
2025/CVE-2025-52915.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-08-16T02:16:48Z",
"updated_at": "2026-08-17T03:41:10Z",
"pushed_at": "2026-08-15T12:46:49Z",
"stargazers_count": 903,
"watchers_count": 903,
"stargazers_count": 905,
"watchers_count": 905,
"has_discussions": false,
"forks_count": 132,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 132,
"watchers": 903,
"watchers": 905,
"score": 0,
"subscribers_count": 20
}
2025/CVE-2025-66478.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.",
"fork": false,
"created_at": "2025-10-01T07:40:09Z",
"updated_at": "2026-08-16T23:06:52Z",
"pushed_at": "2026-08-16T23:06:44Z",
"updated_at": "2026-08-17T06:21:11Z",
"pushed_at": "2026-08-17T06:20:03Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-68921.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.",
"fork": false,
"created_at": "2026-01-24T21:00:41Z",
"updated_at": "2026-08-16T23:11:55Z",
"pushed_at": "2026-08-16T23:11:40Z",
"updated_at": "2026-08-17T06:25:26Z",
"pushed_at": "2026-08-17T06:24:58Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-0023.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 9,
"watchers_count": 9,
"has_discussions": false,
"forks_count": 3,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"forks": 4,
"watchers": 9,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-14762.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 1292289986,
"name": "CVE-2026-14762-PoC-Exploit",
"full_name": "tc4dy\/CVE-2026-14762-PoC-Exploit",
"owner": {
"login": "tc4dy",
"id": 140116264,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/140116264?v=4",
"html_url": "https:\/\/github.com\/tc4dy",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/tc4dy\/CVE-2026-14762-PoC-Exploit",
"description": "CVE-2026-14762 exploit for Hotel & Tourism Reservation 1.0. Time-based blind SQL injection via \/admin\/rooms.php?delete. Dumps DB, tables, columns, reads files, writes webshells. Multi-threaded, proxy support, interactive shell. CVSS 7.3. Authorized testing only. By| @tc4dy",
"fork": false,
"created_at": "2026-07-07T12:20:08Z",
"updated_at": "2026-07-24T22:26:32Z",
"pushed_at": "2026-07-08T19:33:40Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-15430.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "PoCs for Wellbia XIGNCODE3 anti-cheat xhunter driver family - xhunter1.sys v2023.12.7.78 and xhunter2.sys v2026.6.1.192 (CVE-2026-15430, CVE-2026-3609).",
"fork": false,
"created_at": "2026-08-05T10:03:50Z",
"updated_at": "2026-08-14T05:30:06Z",
"updated_at": "2026-08-17T03:34:08Z",
"pushed_at": "2026-08-07T07:33:26Z",
"stargazers_count": 11,
"watchers_count": 11,
"stargazers_count": 12,
"watchers_count": 12,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 11,
"watchers": 12,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-17106.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "PoC repository for the blog post CopyEscape: Taking Over Docker Hosts with docker cp",
"fork": false,
"created_at": "2026-08-09T21:02:40Z",
"updated_at": "2026-08-14T13:53:12Z",
"updated_at": "2026-08-17T03:54:26Z",
"pushed_at": "2026-08-09T21:04:41Z",
"stargazers_count": 15,
"watchers_count": 15,
"stargazers_count": 17,
"watchers_count": 17,
"has_discussions": false,
"forks_count": 2,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 15,
"forks": 3,
"watchers": 17,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-20841.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.",
"fork": false,
"created_at": "2024-09-22T12:19:06Z",
"updated_at": "2026-08-16T23:17:11Z",
"pushed_at": "2026-08-16T23:16:53Z",
"updated_at": "2026-08-17T06:30:31Z",
"pushed_at": "2026-08-17T06:30:21Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-24291.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions",
"fork": false,
"created_at": "2026-03-26T04:38:27Z",
"updated_at": "2026-08-16T23:22:19Z",
"pushed_at": "2026-08-16T23:22:14Z",
"updated_at": "2026-08-17T06:37:05Z",
"pushed_at": "2026-08-17T06:36:35Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-2472.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.",
"fork": false,
"created_at": "2026-03-10T14:40:04Z",
"updated_at": "2026-08-16T23:18:58Z",
"pushed_at": "2026-08-16T23:18:49Z",
"updated_at": "2026-08-17T06:33:15Z",
"pushed_at": "2026-08-17T06:32:34Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-31367.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1336569875,
"name": "EITS-Portal-Exploit-CVE-2026-31367-PoC",
"full_name": "hereticL1nk\/EITS-Portal-Exploit-CVE-2026-31367-PoC",
"owner": {
"login": "hereticL1nk",
"id": 317736177,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/317736177?v=4",
"html_url": "https:\/\/github.com\/hereticL1nk",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/hereticL1nk\/EITS-Portal-Exploit-CVE-2026-31367-PoC",
"description": null,
"fork": false,
"created_at": "2026-08-17T02:24:44Z",
"updated_at": "2026-08-17T02:29:09Z",
"pushed_at": "2026-08-17T02:28:52Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-33017.json
-33
View File
@@ -65,39 +65,6 @@
"score": 0,
"subscribers_count": 0
},
{
"id": 1294052130,
"name": "CVE-2026-33017-Langflow-RCE",
"full_name": "Usman0220\/CVE-2026-33017-Langflow-RCE",
"owner": {
"login": "Usman0220",
"id": 95473084,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/95473084?v=4",
"html_url": "https:\/\/github.com\/Usman0220",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Usman0220\/CVE-2026-33017-Langflow-RCE",
"description": "CVE-2026-33017 - Langflow < 1.9.0 Unauthenticated RCE PoC",
"fork": false,
"created_at": "2026-07-08T18:36:03Z",
"updated_at": "2026-07-08T18:36:33Z",
"pushed_at": "2026-07-08T18:36:27Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1303049240,
"name": "CVE-2026-33017-Langflow-RCE",
2026/CVE-2026-34197.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 83,
"watchers_count": 83,
"has_discussions": false,
"forks_count": 9,
"forks_count": 10,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 9,
"forks": 10,
"watchers": 83,
"score": 0,
"subscribers_count": 2
2026/CVE-2026-3609.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-08-16T02:16:48Z",
"updated_at": "2026-08-17T03:41:10Z",
"pushed_at": "2026-08-15T12:46:49Z",
"stargazers_count": 903,
"watchers_count": 903,
"stargazers_count": 905,
"watchers_count": 905,
"has_discussions": false,
"forks_count": 132,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 132,
"watchers": 903,
"watchers": 905,
"score": 0,
"subscribers_count": 20
}
2026/CVE-2026-36425.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-36425 OPSWAT AppRemover (ardrv.sys) improper access control advisory",
"fork": false,
"created_at": "2026-06-17T15:11:22Z",
"updated_at": "2026-08-15T19:13:49Z",
"updated_at": "2026-08-17T03:25:01Z",
"pushed_at": "2026-07-17T12:52:36Z",
"stargazers_count": 19,
"watchers_count": 19,
"stargazers_count": 20,
"watchers_count": 20,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -34,7 +34,7 @@
],
"visibility": "public",
"forks": 5,
"watchers": 19,
"watchers": 20,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-40453.json
-41
View File
@@ -1,41 +0,0 @@
[
{
"id": 1294024431,
"name": "CVE-2026-40453",
"full_name": "oscerd\/CVE-2026-40453",
"owner": {
"login": "oscerd",
"id": 5106647,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5106647?v=4",
"html_url": "https:\/\/github.com\/oscerd",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/oscerd\/CVE-2026-40453",
"description": "Reproducer for CVE-2026-40453: Apache Camel case-variant Camel header injection (incomplete fix of CVE-2025-27636)",
"fork": false,
"created_at": "2026-07-08T18:10:21Z",
"updated_at": "2026-08-06T16:26:48Z",
"pushed_at": "2026-07-08T18:10:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"apache-camel",
"cve",
"proof-of-concept",
"security",
"vulnerability"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-41089.json
+4 -4
View File
@@ -210,10 +210,10 @@
"description": "Technical analysis and Proof-of-Concept (PoC) for CVE-2026-41089, a critical unauthenticated Remote Code Execution (RCE) vulnerability in the Windows Netlogon service affecting Domain Controllers.",
"fork": false,
"created_at": "2026-07-21T02:05:07Z",
"updated_at": "2026-08-13T18:19:56Z",
"updated_at": "2026-08-17T01:33:49Z",
"pushed_at": "2026-08-07T00:49:48Z",
"stargazers_count": 17,
"watchers_count": 17,
"stargazers_count": 18,
"watchers_count": 18,
"has_discussions": false,
"forks_count": 13,
"allow_forking": true,
@@ -237,7 +237,7 @@
],
"visibility": "public",
"forks": 13,
"watchers": 17,
"watchers": 18,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-41940.json
+4 -4
View File
@@ -774,10 +774,10 @@
"description": "A cPanel and WHM authentication bypassing tool",
"fork": false,
"created_at": "2026-08-13T16:03:48Z",
"updated_at": "2026-08-17T00:06:23Z",
"updated_at": "2026-08-17T03:06:31Z",
"pushed_at": "2026-08-13T16:09:49Z",
"stargazers_count": 276,
"watchers_count": 276,
"stargazers_count": 278,
"watchers_count": 278,
"has_discussions": false,
"forks_count": 13,
"allow_forking": true,
@@ -793,7 +793,7 @@
],
"visibility": "public",
"forks": 13,
"watchers": 276,
"watchers": 278,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-43074.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Use CVE-2026-43074 to disable SELinux on Android (Linux 6.6\/6.12)",
"fork": false,
"created_at": "2026-07-18T01:04:37Z",
"updated_at": "2026-08-10T05:46:24Z",
"updated_at": "2026-08-17T01:23:09Z",
"pushed_at": "2026-07-18T05:33:44Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 7,
"watchers": 8,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-43499.json
+22 -22
View File
@@ -254,7 +254,7 @@
"stargazers_count": 226,
"watchers_count": 226,
"has_discussions": false,
"forks_count": 85,
"forks_count": 86,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -262,7 +262,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 85,
"forks": 86,
"watchers": 226,
"score": 0,
"subscribers_count": 1
@@ -315,8 +315,8 @@
"description": "GhostLock (CVE-2026-43499) kernel exploit for OnePlus devices with locked bootloader",
"fork": false,
"created_at": "2026-07-12T16:05:24Z",
"updated_at": "2026-08-16T17:12:29Z",
"pushed_at": "2026-08-06T09:48:14Z",
"updated_at": "2026-08-17T06:27:43Z",
"pushed_at": "2026-08-17T05:30:42Z",
"stargazers_count": 262,
"watchers_count": 262,
"has_discussions": false,
@@ -553,10 +553,10 @@
"description": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.",
"fork": false,
"created_at": "2026-07-14T14:21:27Z",
"updated_at": "2026-08-16T22:45:49Z",
"updated_at": "2026-08-17T06:36:43Z",
"pushed_at": "2026-07-30T11:28:07Z",
"stargazers_count": 62,
"watchers_count": 62,
"stargazers_count": 64,
"watchers_count": 64,
"has_discussions": false,
"forks_count": 19,
"allow_forking": true,
@@ -567,7 +567,7 @@
"topics": [],
"visibility": "public",
"forks": 19,
"watchers": 62,
"watchers": 64,
"score": 0,
"subscribers_count": 0
},
@@ -685,10 +685,10 @@
"description": "Xiaomi K70e (duchamp) one-click root via CVE-2026-43499 (IonStack) + KernelSU integration",
"fork": false,
"created_at": "2026-07-15T03:59:56Z",
"updated_at": "2026-08-12T16:20:44Z",
"updated_at": "2026-08-17T06:27:43Z",
"pushed_at": "2026-07-31T03:13:27Z",
"stargazers_count": 48,
"watchers_count": 48,
"stargazers_count": 47,
"watchers_count": 47,
"has_discussions": true,
"forks_count": 15,
"allow_forking": true,
@@ -699,7 +699,7 @@
"topics": [],
"visibility": "public",
"forks": 15,
"watchers": 48,
"watchers": 47,
"score": 0,
"subscribers_count": 1
},
@@ -1048,10 +1048,10 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
"updated_at": "2026-08-17T00:38:37Z",
"updated_at": "2026-08-17T03:47:15Z",
"pushed_at": "2026-08-09T05:13:42Z",
"stargazers_count": 837,
"watchers_count": 837,
"stargazers_count": 839,
"watchers_count": 839,
"has_discussions": false,
"forks_count": 157,
"allow_forking": true,
@@ -1062,7 +1062,7 @@
"topics": [],
"visibility": "public",
"forks": 157,
"watchers": 837,
"watchers": 839,
"score": 0,
"subscribers_count": 27
},
@@ -2004,10 +2004,10 @@
"description": "Jailbreak supported Google Pixel phones with CVE-2026-43499",
"fork": false,
"created_at": "2026-08-02T17:34:45Z",
"updated_at": "2026-08-16T21:24:29Z",
"updated_at": "2026-08-17T05:28:23Z",
"pushed_at": "2026-08-16T17:53:37Z",
"stargazers_count": 152,
"watchers_count": 152,
"stargazers_count": 158,
"watchers_count": 158,
"has_discussions": false,
"forks_count": 31,
"allow_forking": true,
@@ -2025,7 +2025,7 @@
],
"visibility": "public",
"forks": 31,
"watchers": 152,
"watchers": 158,
"score": 0,
"subscribers_count": 6
},
@@ -2781,8 +2781,8 @@
"description": "Using CVE-2026-43499 to root your Galaxy S24 Ultra(SM-S9280 ,(China \/ Hong Kong SAR \/ Taiwan))",
"fork": false,
"created_at": "2026-08-16T14:37:06Z",
"updated_at": "2026-08-16T16:37:32Z",
"pushed_at": "2026-08-16T16:36:39Z",
"updated_at": "2026-08-17T05:48:50Z",
"pushed_at": "2026-08-17T05:48:47Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-45585.json
+4 -4
View File
@@ -264,8 +264,8 @@
"description": "Manage BitLocker recovery keys, monitor drive encryption status, and unlock volumes through a portable interface for Windows.",
"fork": false,
"created_at": "2026-07-21T22:11:28Z",
"updated_at": "2026-08-16T23:34:48Z",
"pushed_at": "2026-08-16T23:34:45Z",
"updated_at": "2026-08-17T06:49:19Z",
"pushed_at": "2026-08-17T06:48:48Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -398,8 +398,8 @@
"description": "Manage BitLocker recovery keys, unlock encrypted drives, and monitor encryption status with this lightweight Windows utility.",
"fork": false,
"created_at": "2026-08-03T11:32:18Z",
"updated_at": "2026-08-16T23:36:09Z",
"pushed_at": "2026-08-16T23:36:03Z",
"updated_at": "2026-08-17T06:50:19Z",
"pushed_at": "2026-08-17T06:49:57Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-47301.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-write path traversal, certificate verification bypass, and DLL hijacking to achieve SYSTEM-level code execution.",
"fork": false,
"created_at": "2026-08-03T15:29:22Z",
"updated_at": "2026-08-17T00:11:45Z",
"updated_at": "2026-08-17T03:07:03Z",
"pushed_at": "2026-08-16T22:34:33Z",
"stargazers_count": 73,
"watchers_count": 73,
"stargazers_count": 77,
"watchers_count": 77,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 7,
"watchers": 73,
"watchers": 77,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-49176.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Local privilege-escalation proof of concept for the Windows WalletService vulnerability fixed in July 2026.",
"fork": false,
"created_at": "2026-07-16T13:36:10Z",
"updated_at": "2026-08-16T05:08:08Z",
"updated_at": "2026-08-17T06:27:43Z",
"pushed_at": "2026-07-20T09:43:27Z",
"stargazers_count": 51,
"watchers_count": 51,
"stargazers_count": 50,
"watchers_count": 50,
"has_discussions": false,
"forks_count": 17,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 17,
"watchers": 51,
"watchers": 50,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-54121.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Certighost POC",
"fork": false,
"created_at": "2026-07-23T18:54:34Z",
"updated_at": "2026-08-16T08:46:49Z",
"updated_at": "2026-08-17T03:26:24Z",
"pushed_at": "2026-07-28T15:44:50Z",
"stargazers_count": 315,
"watchers_count": 315,
"stargazers_count": 316,
"watchers_count": 316,
"has_discussions": false,
"forks_count": 77,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 77,
"watchers": 315,
"watchers": 316,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-58635.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "PoC for CVE-2026-58635: Windows Narrator Braille Local Privilege Escalation",
"fork": false,
"created_at": "2026-07-15T12:53:34Z",
"updated_at": "2026-08-06T13:27:19Z",
"updated_at": "2026-08-17T06:27:43Z",
"pushed_at": "2026-07-15T12:53:37Z",
"stargazers_count": 29,
"watchers_count": 29,
"stargazers_count": 28,
"watchers_count": 28,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 29,
"watchers": 28,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-60206.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 32,
"watchers_count": 32,
"has_discussions": false,
"forks_count": 9,
"forks_count": 10,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 9,
"forks": 10,
"watchers": 32,
"score": 0,
"subscribers_count": 1
2026/CVE-2026-63030.json
+7 -7
View File
@@ -14,7 +14,7 @@
"description": "wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain",
"fork": false,
"created_at": "2026-07-17T20:18:33Z",
"updated_at": "2026-08-16T21:41:53Z",
"updated_at": "2026-08-17T06:27:43Z",
"pushed_at": "2026-08-11T13:41:27Z",
"stargazers_count": 745,
"watchers_count": 745,
@@ -2411,12 +2411,12 @@
"description": "CVE-2026-63030 & CVE-2026-60137 RCE chain proof-of-concept",
"fork": false,
"created_at": "2026-08-05T12:48:03Z",
"updated_at": "2026-08-17T00:49:17Z",
"updated_at": "2026-08-17T06:35:05Z",
"pushed_at": "2026-08-13T15:04:07Z",
"stargazers_count": 523,
"watchers_count": 523,
"stargazers_count": 564,
"watchers_count": 564,
"has_discussions": false,
"forks_count": 79,
"forks_count": 89,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2431,8 +2431,8 @@
"wp2shell-poc"
],
"visibility": "public",
"forks": 79,
"watchers": 523,
"forks": 89,
"watchers": 564,
"score": 0,
"subscribers_count": 5
},
2026/CVE-2026-64560.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-08-03T12:36:27Z",
"updated_at": "2026-08-16T20:34:55Z",
"updated_at": "2026-08-17T02:18:18Z",
"pushed_at": "2026-08-03T12:39:41Z",
"stargazers_count": 23,
"watchers_count": 23,
"stargazers_count": 26,
"watchers_count": 26,
"has_discussions": false,
"forks_count": 11,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 11,
"watchers": 23,
"watchers": 26,
"score": 0,
"subscribers_count": 1
}
2026/CVE-2026-64747.json
+33
View File
@@ -31,5 +31,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1336615508,
"name": "ave263-chain",
"full_name": "yiyeshi0-hash\/ave263-chain",
"owner": {
"login": "yiyeshi0-hash",
"id": 279206767,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/279206767?v=4",
"html_url": "https:\/\/github.com\/yiyeshi0-hash",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/yiyeshi0-hash\/ave263-chain",
"description": "iPad 8 iPadOS 26.3 AVE toolchain research (CVE-2026-64747 class)",
"fork": false,
"created_at": "2026-08-17T03:24:57Z",
"updated_at": "2026-08-17T06:49:03Z",
"pushed_at": "2026-08-17T06:48:57Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-74251.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1336567205,
"name": "CVE-2026-74251",
"full_name": "toanln-cov\/CVE-2026-74251",
"owner": {
"login": "toanln-cov",
"id": 85386928,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/85386928?v=4",
"html_url": "https:\/\/github.com\/toanln-cov",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/toanln-cov\/CVE-2026-74251",
"description": "Unauthenticated SQL Injection via Attribute Filter in Phoca Cart",
"fork": false,
"created_at": "2026-08-17T02:20:42Z",
"updated_at": "2026-08-17T02:55:07Z",
"pushed_at": "2026-08-17T02:55:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-8452.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-8452 PreAuth RCE",
"fork": false,
"created_at": "2026-08-14T15:01:25Z",
"updated_at": "2026-08-17T00:25:59Z",
"updated_at": "2026-08-17T04:51:18Z",
"pushed_at": "2026-08-14T15:08:55Z",
"stargazers_count": 27,
"watchers_count": 27,
"stargazers_count": 31,
"watchers_count": 31,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 27,
"watchers": 31,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-9830.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "CVE-2026-9830 Proof of Concept",
"fork": false,
"created_at": "2026-08-15T20:57:13Z",
"updated_at": "2026-08-17T00:36:36Z",
"updated_at": "2026-08-17T06:46:44Z",
"pushed_at": "2026-08-15T22:39:12Z",
"stargazers_count": 148,
"watchers_count": 148,
"stargazers_count": 172,
"watchers_count": 172,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -72,7 +72,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 148,
"watchers": 172,
"score": 0,
"subscribers_count": 0
}
README.md
+14 -19
View File
@@ -2026,13 +2026,6 @@
- [MadExploits/CVE-2026-14483](https://github.com/MadExploits/CVE-2026-14483)
- [0xdak/CVE-2026-14483_exploit](https://github.com/0xdak/CVE-2026-14483_exploit)
### CVE-2026-14762 (2026-07-05)
<code>A vulnerability was detected in code-projects Hotel and Tourism Reservation 1.0. The impacted element is an unknown function of the file /admin/rooms.php of the component Room Management Page. The manipulation of the argument delete results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used.
</code>
- [tc4dy/CVE-2026-14762-PoC-Exploit](https://github.com/tc4dy/CVE-2026-14762-PoC-Exploit)
### CVE-2026-14802 (2026-07-06)
<code>A vulnerability was detected in react create-react-app up to 5.0.1 on macOS. This affects the function startBrowserProcess of the file openBrowser.js of the component react-dev-utils. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
@@ -3673,6 +3666,9 @@
- [Sch8ill/CVE-2026-31309](https://github.com/Sch8ill/CVE-2026-31309)
### CVE-2026-31367
- [hereticL1nk/EITS-Portal-Exploit-CVE-2026-31367-PoC](https://github.com/hereticL1nk/EITS-Portal-Exploit-CVE-2026-31367-PoC)
### CVE-2026-31431 (2026-04-22)
<code>In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: algif_aead - Revert to operating out-of-place\n\nThis mostly reverts commit 72548b093ee3 except for the copying of\nthe associated data.\n\nThere is no benefit in operating in-place in algif_aead since the\nsource and destination come from different mappings. Get rid of\nall the complexity added for in-place operation and just copy the\nAD directly.
@@ -3854,7 +3850,6 @@
- [EQSTLab/CVE-2026-33017](https://github.com/EQSTLab/CVE-2026-33017)
- [r3nsi15/CVE-2026-33017-langflow-rce](https://github.com/r3nsi15/CVE-2026-33017-langflow-rce)
- [Usman0220/CVE-2026-33017-Langflow-RCE](https://github.com/Usman0220/CVE-2026-33017-Langflow-RCE)
- [Industri4l-H3ll-Xpl0it3rs/CVE-2026-33017-Langflow-RCE](https://github.com/Industri4l-H3ll-Xpl0it3rs/CVE-2026-33017-Langflow-RCE)
- [CerberusMrXi/Langflow-cve-2026-33017-exploit](https://github.com/CerberusMrXi/Langflow-cve-2026-33017-exploit)
- [Dynamo2k1/CVE-2026-33017](https://github.com/Dynamo2k1/CVE-2026-33017)
@@ -4604,13 +4599,6 @@
- [0xBlackash/CVE-2026-40369](https://github.com/0xBlackash/CVE-2026-40369)
- [CCELEND/CVE-2026-40369](https://github.com/CCELEND/CVE-2026-40369)
### CVE-2026-40453 (2026-04-27)
<code>The fix for CVE-2025-27636 added setLowerCase(true) to HttpHeaderFilterStrategy so that case-variant header names such as 'CAmelExecCommandExecutable' are filtered out alongside 'CamelExecCommandExecutable'. The same setLowerCase(true) call was not applied to five non-HTTP HeaderFilterStrategy implementations: JmsHeaderFilterStrategy and ClassicJmsHeaderFilterStrategy in camel-jms, SjmsHeaderFilterStrategy in camel-sjms, CoAPHeaderFilterStrategy in camel-coap, and GooglePubsubHeaderFilterStrategy in camel-google-pubsub. Because those strategies use case-sensitive String.startsWith('Camel'/'camel') filtering while the Camel Exchange stores headers in a case-insensitive map, an attacker with JMS (or equivalent) producer access to the broker consumed by a Camel route can inject case-variant Camel internal headers, which are then resolved by downstream components such as camel-exec and camel-file using their canonical casing. This enables remote code execution and arbitrary file write on routes that forward JMS messages to header-driven components.\n\nThis issue affects Apache Camel: from 3.0.0 before 4.14.6, from 4.15.0 before 4.18.2, from 4.19.0 before 4.20.0.\n\nUsers are recommended to upgrade to version 4.20.0, which fixes the issue. If users are on the 4.14.x LTS releases stream, then they are suggested to upgrade to 4.14.6. If users are on the 4.18.x releases stream, then they are suggested to upgrade to 4.18.2.
</code>
- [oscerd/CVE-2026-40453](https://github.com/oscerd/CVE-2026-40453)
### CVE-2026-40473 (2026-04-27)
<code>The camel-mina component's MinaConverter.toObjectInput(IoBuffer) type converter wraps an IoBuffer in a java.io.ObjectInputStream without applying any ObjectInputFilter or class-loading restrictions. When a Camel route uses camel-mina as a TCP or UDP consumer and requests conversion to ObjectInput (for example via getBody(ObjectInput.class) or @Body ObjectInput), an attacker sending a crafted serialized Java object over the network to the MINA consumer port can trigger arbitrary code execution in the context of the application during readObject().\n\nThis issue affects Apache Camel: from 3.0.0 before 4.14.6, from 4.15.0 before 4.18.2, from 4.19.0 before 4.20.0.\n\nUsers are recommended to upgrade to version 4.20.0, which fixes the issue. If users are on the 4.14.x LTS releases stream, then they are suggested to upgrade to 4.14.6. If users are on the 4.18.x releases stream, then they are suggested to upgrade to 4.18.2.
@@ -7720,6 +7708,7 @@
</code>
- [jiuyi155/agxprobe](https://github.com/jiuyi155/agxprobe)
- [yiyeshi0-hash/ave263-chain](https://github.com/yiyeshi0-hash/ave263-chain)
### CVE-2026-64824 (2026-07-21)
@@ -8283,6 +8272,13 @@
- [squeeze440/CVE-2026-73847-emlog-PoC](https://github.com/squeeze440/CVE-2026-73847-emlog-PoC)
### CVE-2026-74251 (2026-08-16)
<code>Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6 - The a[] (attribute) and s[] (specification) GET array parameters on Phoca Cart's public shop items page are concatenated raw into SQL WHERE clauses without parameterization or escaping. An unauthenticated attacker can inject arbitrary SQL through these parameters, enabling full database extraction via time-based blind techniques.
</code>
- [toanln-cov/CVE-2026-74251](https://github.com/toanln-cov/CVE-2026-74251)
### CVE-2026-999999
- [24520597-blip/CVE-2026-999999](https://github.com/24520597-blip/CVE-2026-999999)
@@ -20772,7 +20768,6 @@
</code>
- [sharpicx/CVE-2024-1651-PoC](https://github.com/sharpicx/CVE-2024-1651-PoC)
- [hy011121/CVE-2024-1651-exploit-RCE](https://github.com/hy011121/CVE-2024-1651-exploit-RCE)
- [Whiteh4tWolf/CVE-2024-1651-PoC](https://github.com/Whiteh4tWolf/CVE-2024-1651-PoC)
- [killukeren/cve-2024-1651](https://github.com/killukeren/cve-2024-1651)
@@ -25267,7 +25262,6 @@
- [Chocapikk/CVE-2024-25600](https://github.com/Chocapikk/CVE-2024-25600)
- [Christbowel/CVE-2024-25600_Nuclei-Template](https://github.com/Christbowel/CVE-2024-25600_Nuclei-Template)
- [Tornad0007/CVE-2024-25600-Bricks-Builder-plugin-for-WordPress](https://github.com/Tornad0007/CVE-2024-25600-Bricks-Builder-plugin-for-WordPress)
- [hy011121/CVE-2024-25600-wordpress-Exploit-RCE](https://github.com/hy011121/CVE-2024-25600-wordpress-Exploit-RCE)
- [K3ysTr0K3R/CVE-2024-25600-EXPLOIT](https://github.com/K3ysTr0K3R/CVE-2024-25600-EXPLOIT)
- [X-Projetion/WORDPRESS-CVE-2024-25600-EXPLOIT-RCE](https://github.com/X-Projetion/WORDPRESS-CVE-2024-25600-EXPLOIT-RCE)
- [svchostmm/CVE-2024-25600-mass](https://github.com/svchostmm/CVE-2024-25600-mass)
@@ -32334,7 +32328,7 @@
- [LiveOverflow/webp-CVE-2023-4863](https://github.com/LiveOverflow/webp-CVE-2023-4863)
- [caoweiquan322/NotEnough](https://github.com/caoweiquan322/NotEnough)
- [CrackerCat/CVE-2023-4863-](https://github.com/CrackerCat/CVE-2023-4863-)
- [jpselva/CVE-2023-4863](https://github.com/jpselva/CVE-2023-4863)
- [jpsbern/CVE-2023-4863](https://github.com/jpsbern/CVE-2023-4863)
- [577Industries/aegisgraph](https://github.com/577Industries/aegisgraph)
- [pixelotes/lab-cve-2023-4863](https://github.com/pixelotes/lab-cve-2023-4863)
- [Shcesama/cve-2023-4863-analysis](https://github.com/Shcesama/cve-2023-4863-analysis)
@@ -48675,7 +48669,6 @@
<code>A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.
</code>
- [berdav/CVE-2021-4034](https://github.com/berdav/CVE-2021-4034)
- [arthepsy/CVE-2021-4034](https://github.com/arthepsy/CVE-2021-4034)
- [Y3A/CVE-2021-4034](https://github.com/Y3A/CVE-2021-4034)
- [ly4k/PwnKit](https://github.com/ly4k/PwnKit)
@@ -53831,6 +53824,7 @@
- [MAFO-sec/mi-laboratorio-log4shell](https://github.com/MAFO-sec/mi-laboratorio-log4shell)
- [felisha-elmer/Sandbox-Challenge-Log4Shell-CVE-2021-44228-](https://github.com/felisha-elmer/Sandbox-Challenge-Log4Shell-CVE-2021-44228-)
- [jomjosh17/Log4Shell-CVE-2021-44228-](https://github.com/jomjosh17/Log4Shell-CVE-2021-44228-)
- [C00LN3T/Log4ShellAuditor](https://github.com/C00LN3T/Log4ShellAuditor)
- [bhimsekhar/vulnerable-java-app](https://github.com/bhimsekhar/vulnerable-java-app)
- [horrister/log4shell-cve-2021-44228](https://github.com/horrister/log4shell-cve-2021-44228)
- [hmxh123/Log4Shell-Vulnerability-Replication](https://github.com/hmxh123/Log4Shell-Vulnerability-Replication)
@@ -66243,6 +66237,7 @@
</code>
- [lsw29475/CVE-2018-8611](https://github.com/lsw29475/CVE-2018-8611)
- [ahm3dgg/cve-2018-8611](https://github.com/ahm3dgg/cve-2018-8611)
### CVE-2018-8639 (2018-12-12)