From b5fa7289d574a44cae92be3efe7c314a5875e55d Mon Sep 17 00:00:00 2001 From: motikan2010-bot Date: Fri, 14 Aug 2026 09:53:03 +0900 Subject: [PATCH] Auto Update 2026/08/14 00:53:03 --- 2012/CVE-2012-2459.json | 2 +- 2015/CVE-2015-1925.json | 4 +- 2015/CVE-2015-7545.json | 4 +- 2017/CVE-2017-5638.json | 24 +- .../CVE-2019-10070.json | 22 +- 2019/CVE-2019-1040.json | 4 +- 2019/CVE-2019-2215.json | 4 +- 2020/CVE-2020-11179.json | 8 +- 2020/CVE-2020-1472.json | 4 +- 2021/CVE-2021-1056.json | 39 - 2021/CVE-2021-1647.json | 35 - 2021/CVE-2021-1656.json | 35 - 2021/CVE-2021-1675.json | 99 - 2021/CVE-2021-1699.json | 35 - 2021/CVE-2021-1732.json | 198 -- 2021/CVE-2021-1782.json | 68 - 2021/CVE-2021-1905.json | 35 - 2021/CVE-2021-2021.json | 35 - 2021/CVE-2021-20717.json | 35 - 2021/CVE-2021-21014.json | 35 - 2021/CVE-2021-21017.json | 35 - 2021/CVE-2021-21042.json | 33 - 2021/CVE-2021-2109.json | 104 - 2021/CVE-2021-21110.json | 35 - 2021/CVE-2021-21123.json | 50 - 2021/CVE-2021-21148.json | 35 - 2021/CVE-2021-2119.json | 35 - 2021/CVE-2021-21234.json | 33 - 2021/CVE-2021-21300.json | 297 -- 2021/CVE-2021-21315.json | 46 - 2021/CVE-2021-21341.json | 35 - 2021/CVE-2021-21349.json | 35 - 2021/CVE-2021-21389.json | 33 - 2021/CVE-2021-21402.json | 101 - 2021/CVE-2021-21551.json | 132 - 2021/CVE-2021-2173.json | 35 - 2021/CVE-2021-21972.json | 650 ---- 2021/CVE-2021-21973.json | 35 - 2021/CVE-2021-21975.json | 208 -- 2021/CVE-2021-21978.json | 101 - 2021/CVE-2021-21985.json | 139 - 2021/CVE-2021-22192.json | 33 - 2021/CVE-2021-22201.json | 35 - 2021/CVE-2021-22204.json | 102 - 2021/CVE-2021-22214.json | 33 - 2021/CVE-2021-22893.json | 33 - 2021/CVE-2021-22986.json | 335 --- 2021/CVE-2021-23132.json | 35 - 2021/CVE-2021-23383.json | 33 - 2021/CVE-2021-24027.json | 35 - 2021/CVE-2021-24085.json | 35 - 2021/CVE-2021-24086.json | 39 - 2021/CVE-2021-24096.json | 35 - 2021/CVE-2021-24098.json | 35 - 2021/CVE-2021-25281.json | 35 - 2021/CVE-2021-25641.json | 33 - 2021/CVE-2021-25646.json | 165 - 2021/CVE-2021-25679.json | 35 - 2021/CVE-2021-25735.json | 35 - 2021/CVE-2021-26121.json | 35 - 2021/CVE-2021-26295.json | 167 -- 2021/CVE-2021-26415.json | 35 - 2021/CVE-2021-26700.json | 33 - 2021/CVE-2021-26708.json | 66 - 2021/CVE-2021-26714.json | 35 - 2021/CVE-2021-26814.json | 66 - 2021/CVE-2021-26828.json | 33 - 2021/CVE-2021-26832.json | 35 - 2021/CVE-2021-26855.json | 1080 ------- 2021/CVE-2021-26856.json | 35 - 2021/CVE-2021-26857.json | 35 - 2021/CVE-2021-26868.json | 35 - 2021/CVE-2021-26871.json | 35 - 2021/CVE-2021-26882.json | 35 - 2021/CVE-2021-26903.json | 35 - 2021/CVE-2021-26904.json | 35 - 2021/CVE-2021-26943.json | 39 - 2021/CVE-2021-27065.json | 35 - 2021/CVE-2021-27187.json | 35 - 2021/CVE-2021-27188.json | 35 - 2021/CVE-2021-27190.json | 35 - 2021/CVE-2021-27246.json | 35 - 2021/CVE-2021-27338.json | 35 - 2021/CVE-2021-27342.json | 35 - 2021/CVE-2021-27403.json | 35 - 2021/CVE-2021-27404.json | 35 - 2021/CVE-2021-27651.json | 33 - 2021/CVE-2021-27850.json | 33 - 2021/CVE-2021-27890.json | 35 - 2021/CVE-2021-27905.json | 66 - 2021/CVE-2021-27963.json | 35 - 2021/CVE-2021-27965.json | 48 - 2021/CVE-2021-28310.json | 35 - 2021/CVE-2021-28312.json | 35 - 2021/CVE-2021-28476.json | 74 - 2021/CVE-2021-28482.json | 68 - 2021/CVE-2021-29155.json | 35 - 2021/CVE-2021-29200.json | 35 - 2021/CVE-2021-29267.json | 35 - 2021/CVE-2021-29349.json | 68 - 2021/CVE-2021-29440.json | 35 - 2021/CVE-2021-29447.json | 33 - 2021/CVE-2021-29505.json | 33 - 2021/CVE-2021-29627.json | 35 - 2021/CVE-2021-30005.json | 35 - 2021/CVE-2021-3007.json | 33 - 2021/CVE-2021-30128.json | 35 - 2021/CVE-2021-30146.json | 35 - 2021/CVE-2021-3019.json | 200 -- 2021/CVE-2021-30461.json | 36 - 2021/CVE-2021-30481.json | 35 - 2021/CVE-2021-31159.json | 39 - 2021/CVE-2021-31166.json | 141 - 2021/CVE-2021-31184.json | 35 - 2021/CVE-2021-3129.json | 235 -- 2021/CVE-2021-3130.json | 33 - 2021/CVE-2021-3131.json | 35 - 2021/CVE-2021-3138.json | 35 - 2021/CVE-2021-3156.json | 1199 -------- 2021/CVE-2021-3157.json | 35 - 2021/CVE-2021-3164.json | 35 - 2021/CVE-2021-31728.json | 39 - 2021/CVE-2021-31760.json | 68 - 2021/CVE-2021-31761.json | 68 - 2021/CVE-2021-31762.json | 68 - 2021/CVE-2021-31856.json | 35 - 2021/CVE-2021-31955.json | 33 - 2021/CVE-2021-32156.json | 35 - 2021/CVE-2021-32157.json | 35 - 2021/CVE-2021-32158.json | 35 - 2021/CVE-2021-32159.json | 35 - 2021/CVE-2021-32160.json | 35 - 2021/CVE-2021-32161.json | 35 - 2021/CVE-2021-32162.json | 35 - 2021/CVE-2021-32537.json | 41 - 2021/CVE-2021-32819.json | 35 - 2021/CVE-2021-3291.json | 35 - 2021/CVE-2021-33044.json | 4 +- 2021/CVE-2021-3310.json | 35 - 2021/CVE-2021-3317.json | 39 - 2021/CVE-2021-3345.json | 42 - 2021/CVE-2021-33558.json | 33 - 2021/CVE-2021-33564.json | 68 - 2021/CVE-2021-33624.json | 35 - 2021/CVE-2021-33739.json | 33 - 2021/CVE-2021-3378.json | 35 - 2021/CVE-2021-33879.json | 42 - 2021/CVE-2021-3395.json | 35 - 2021/CVE-2021-3441.json | 40 - 2021/CVE-2021-3492.json | 35 - 2021/CVE-2021-3493.json | 66 - 2021/CVE-2021-35064.json | 35 - 2021/CVE-2021-3560.json | 207 -- 2021/CVE-2021-3572.json | 35 - 2021/CVE-2021-4034.json | 33 - 2021/CVE-2021-41773.json | 73 + 2021/CVE-2021-44228.json | 2 +- 2021/CVE-2021-44790.json | 8 +- 2021/CVE-2021-6857.json | 38 - 2022/CVE-2022-0824.json | 8 +- 2022/CVE-2022-27255.json | 4 +- 2022/CVE-2022-29799.json | 4 +- 2023/CVE-2023-32434.json | 4 +- 2023/CVE-2023-38831.json | 4 +- 2023/CVE-2023-45866.json | 2 +- 2023/CVE-2023-5968.json | 4 +- 2024/CVE-2024-0012.json | 33 - 2024/CVE-2024-0235.json | 33 - 2024/CVE-2024-0402.json | 35 - 2024/CVE-2024-0406.json | 68 - 2024/CVE-2024-0520.json | 35 - 2024/CVE-2024-0582.json | 38 - 2024/CVE-2024-0760.json | 35 - 2024/CVE-2024-0762.json | 33 - 2024/CVE-2024-10220.json | 33 - 2024/CVE-2024-10578.json | 35 - 2024/CVE-2024-10629.json | 33 - 2024/CVE-2024-10673.json | 35 - 2024/CVE-2024-10674.json | 35 - 2024/CVE-2024-10858.json | 35 - 2024/CVE-2024-10914.json | 99 - 2024/CVE-2024-10915.json | 35 - 2024/CVE-2024-10924.json | 243 +- 2024/CVE-2024-10930.json | 35 - 2024/CVE-2024-11040.json | 35 - 2024/CVE-2024-11042.json | 35 - 2024/CVE-2024-11972.json | 68 - 2024/CVE-2024-12008.json | 35 - 2024/CVE-2024-12084.json | 33 - 2024/CVE-2024-12085.json | 35 - 2024/CVE-2024-1212.json | 33 - 2024/CVE-2024-12252.json | 35 - 2024/CVE-2024-12342.json | 35 - 2024/CVE-2024-12365.json | 35 - 2024/CVE-2024-12542.json | 35 - 2024/CVE-2024-12877.json | 35 - 2024/CVE-2024-12905.json | 35 - 2024/CVE-2024-13159.json | 35 - 2024/CVE-2024-13184.json | 35 - 2024/CVE-2024-13346.json | 41 - 2024/CVE-2024-13478.json | 35 - 2024/CVE-2024-13479.json | 35 - 2024/CVE-2024-13481.json | 35 - 2024/CVE-2024-13483.json | 35 - 2024/CVE-2024-13485.json | 35 - 2024/CVE-2024-13488.json | 35 - 2024/CVE-2024-13489.json | 35 - 2024/CVE-2024-13513.json | 33 - 2024/CVE-2024-13800.json | 35 - 2024/CVE-2024-13869.json | 35 - 2024/CVE-2024-1651.json | 33 - 2024/CVE-2024-2053.json | 35 - 2024/CVE-2024-20674.json | 35 - 2024/CVE-2024-20767.json | 33 - 2024/CVE-2024-21006.json | 33 - 2024/CVE-2024-21306.json | 2 +- 2024/CVE-2024-21409.json | 35 - 2024/CVE-2024-21413.json | 99 - 2024/CVE-2024-21513.json | 68 - 2024/CVE-2024-21546.json | 35 - 2024/CVE-2024-21762.json | 33 - 2024/CVE-2024-21887.json | 66 - 2024/CVE-2024-22243.json | 33 - 2024/CVE-2024-22371.json | 35 - 2024/CVE-2024-23113.json | 66 - 2024/CVE-2024-23346.json | 99 - 2024/CVE-2024-23666.json | 35 - 2024/CVE-2024-23673.json | 35 - 2024/CVE-2024-23692.json | 33 - 2024/CVE-2024-23724.json | 68 - 2024/CVE-2024-23733.json | 35 - 2024/CVE-2024-2387.json | 35 - 2024/CVE-2024-23897.json | 132 - 2024/CVE-2024-24450.json | 35 - 2024/CVE-2024-24451.json | 35 - 2024/CVE-2024-24919.json | 231 -- 2024/CVE-2024-25092.json | 33 - 2024/CVE-2024-25180.json | 35 - 2024/CVE-2024-25600.json | 230 -- 2024/CVE-2024-25641.json | 33 - 2024/CVE-2024-27198.json | 33 - 2024/CVE-2024-27348.json | 33 - 2024/CVE-2024-27686.json | 40 - 2024/CVE-2024-2771.json | 35 - 2024/CVE-2024-27804.json | 33 - 2024/CVE-2024-2782.json | 35 - 2024/CVE-2024-27876.json | 35 - 2024/CVE-2024-27954.json | 33 - 2024/CVE-2024-27956.json | 66 - 2024/CVE-2024-28397.json | 99 - 2024/CVE-2024-28752.json | 35 - 2024/CVE-2024-28784.json | 35 - 2024/CVE-2024-2887.json | 33 - 2024/CVE-2024-28987.json | 33 - 2024/CVE-2024-2961.json | 132 - 2024/CVE-2024-2997.json | 33 - 2024/CVE-2024-30485.json | 35 - 2024/CVE-2024-3094.json | 205 -- 2024/CVE-2024-31114.json | 35 - 2024/CVE-2024-3121.json | 35 - 2024/CVE-2024-31317.json | 99 - 2024/CVE-2024-31320.json | 35 - 2024/CVE-2024-31449.json | 33 - 2024/CVE-2024-31903.json | 35 - 2024/CVE-2024-31964.json | 35 - 2024/CVE-2024-31969.json | 35 - 2024/CVE-2024-32002.json | 99 - 2024/CVE-2024-32019.json | 207 -- 2024/CVE-2024-32113.json | 33 - 2024/CVE-2024-32462.json | 35 - 2024/CVE-2024-32830.json | 35 - 2024/CVE-2024-32962.json | 35 - 2024/CVE-2024-33676.json | 35 - 2024/CVE-2024-3400.json | 99 - 2024/CVE-2024-34102.json | 66 - 2024/CVE-2024-34327.json | 35 - 2024/CVE-2024-34328.json | 35 - 2024/CVE-2024-34370.json | 35 - 2024/CVE-2024-34716.json | 33 - 2024/CVE-2024-35106.json | 35 - 2024/CVE-2024-3552.json | 68 - 2024/CVE-2024-3568.json | 35 - 2024/CVE-2024-3640.json | 35 - 2024/CVE-2024-36401.json | 66 - 2024/CVE-2024-36437.json | 35 - 2024/CVE-2024-36587.json | 35 - 2024/CVE-2024-3660.json | 35 - 2024/CVE-2024-3661.json | 66 - 2024/CVE-2024-3673.json | 35 - 2024/CVE-2024-36886.json | 35 - 2024/CVE-2024-36991.json | 72 - 2024/CVE-2024-37010.json | 35 - 2024/CVE-2024-37054.json | 33 - 2024/CVE-2024-38063.json | 33 - 2024/CVE-2024-38077.json | 33 - 2024/CVE-2024-38112.json | 35 - 2024/CVE-2024-38143.json | 35 - 2024/CVE-2024-38475.json | 66 - 2024/CVE-2024-38526.json | 33 - 2024/CVE-2024-38816.json | 33 - 2024/CVE-2024-38819.json | 66 - 2024/CVE-2024-38828.json | 101 - 2024/CVE-2024-38856.json | 33 - 2024/CVE-2024-39713.json | 33 - 2024/CVE-2024-39719.json | 35 - 2024/CVE-2024-39722.json | 35 - 2024/CVE-2024-39930.json | 66 - 2024/CVE-2024-39943.json | 33 - 2024/CVE-2024-40110.json | 33 - 2024/CVE-2024-4040.json | 33 - 2024/CVE-2024-40445.json | 35 - 2024/CVE-2024-40453.json | 38 - 2024/CVE-2024-40586.json | 35 - 2024/CVE-2024-40635.json | 35 - 2024/CVE-2024-40891.json | 43 + 2024/CVE-2024-40898.json | 68 - 2024/CVE-2024-41570.json | 138 - 2024/CVE-2024-415770.json | 35 - 2024/CVE-2024-41713.json | 33 - 2024/CVE-2024-41817.json | 86 - 2024/CVE-2024-42007.json | 35 - 2024/CVE-2024-42008.json | 107 - 2024/CVE-2024-42009.json | 99 - 2024/CVE-2024-42049.json | 37 - 2024/CVE-2024-42327.json | 66 - 2024/CVE-2024-42471.json | 35 - 2024/CVE-2024-43018.json | 35 - 2024/CVE-2024-43425.json | 103 - 2024/CVE-2024-43451.json | 33 - 2024/CVE-2024-43535.json | 35 - 2024/CVE-2024-43583.json | 35 - 2024/CVE-2024-4367.json | 316 -- 2024/CVE-2024-43788.json | 35 - 2024/CVE-2024-43917.json | 33 - 2024/CVE-2024-43998.json | 33 - 2024/CVE-2024-44258.json | 33 - 2024/CVE-2024-44308.json | 35 - 2024/CVE-2024-44313.json | 35 - 2024/CVE-2024-44378.json | 35 - 2024/CVE-2024-44871.json | 35 - 2024/CVE-2024-45195.json | 35 - 2024/CVE-2024-45337.json | 33 - 2024/CVE-2024-45352.json | 134 - 2024/CVE-2024-45436.json | 35 - 2024/CVE-2024-45519.json | 33 - 2024/CVE-2024-45590.json | 33 - 2024/CVE-2024-4577.json | 467 --- 2024/CVE-2024-45870.json | 37 - 2024/CVE-2024-46507.json | 35 - 2024/CVE-2024-46981.json | 68 - 2024/CVE-2024-46982.json | 33 - 2024/CVE-2024-47051.json | 33 - 2024/CVE-2024-47533.json | 137 - 2024/CVE-2024-47575.json | 33 - 2024/CVE-2024-47875.json | 33 - 2024/CVE-2024-48061.json | 38 - 2024/CVE-2024-48248.json | 35 - 2024/CVE-2024-48307.json | 35 - 2024/CVE-2024-48590.json | 35 - 2024/CVE-2024-48591.json | 35 - 2024/CVE-2024-48887.json | 68 - 2024/CVE-2024-48990.json | 38 - 2024/CVE-2024-49019.json | 35 - 2024/CVE-2024-49113.json | 33 - 2024/CVE-2024-49138.json | 176 -- 2024/CVE-2024-4947.json | 35 - 2024/CVE-2024-4956.json | 66 - 2024/CVE-2024-49653.json | 35 - 2024/CVE-2024-49668.json | 35 - 2024/CVE-2024-50379.json | 70 - 2024/CVE-2024-50492.json | 35 - 2024/CVE-2024-50562.json | 35 - 2024/CVE-2024-50623.json | 33 - 2024/CVE-2024-5083.json | 35 - 2024/CVE-2024-5084.json | 33 - 2024/CVE-2024-51568.json | 35 - 2024/CVE-2024-51788.json | 35 - 2024/CVE-2024-51793.json | 33 - 2024/CVE-2024-51977.json | 35 - 2024/CVE-2024-51996.json | 35 - 2024/CVE-2024-52010.json | 35 - 2024/CVE-2024-52375.json | 35 - 2024/CVE-2024-52402.json | 35 - 2024/CVE-2024-52550.json | 35 - 2024/CVE-2024-52794.json | 35 - 2024/CVE-2024-53027.json | 35 - 2024/CVE-2024-53591.json | 35 - 2024/CVE-2024-53677.json | 165 - 2024/CVE-2024-53703.json | 35 - 2024/CVE-2024-53704.json | 66 - 2024/CVE-2024-53900.json | 68 - 2024/CVE-2024-53924.json | 35 - 2024/CVE-2024-54085.json | 35 - 2024/CVE-2024-54239.json | 35 - 2024/CVE-2024-54383.json | 35 - 2024/CVE-2024-54498.json | 35 - 2024/CVE-2024-54507.json | 35 - 2024/CVE-2024-5452.json | 35 - 2024/CVE-2024-54772.json | 68 - 2024/CVE-2024-54879.json | 35 - 2024/CVE-2024-54880.json | 35 - 2024/CVE-2024-54916.json | 35 - 2024/CVE-2024-54951.json | 35 - 2024/CVE-2024-55060.json | 35 - 2024/CVE-2024-55347.json | 42 - 2024/CVE-2024-5535.json | 35 - 2024/CVE-2024-55466.json | 35 - 2024/CVE-2024-55504.json | 35 - 2024/CVE-2024-55511.json | 35 - 2024/CVE-2024-55555.json | 35 - 2024/CVE-2024-55591.json | 241 -- 2024/CVE-2024-55656.json | 35 - 2024/CVE-2024-55890.json | 35 - 2024/CVE-2024-55963.json | 39 - 2024/CVE-2024-56071.json | 35 - 2024/CVE-2024-56145.json | 33 - 2024/CVE-2024-56249.json | 35 - 2024/CVE-2024-56264.json | 68 - 2024/CVE-2024-56428.json | 35 - 2024/CVE-2024-56429.json | 35 - 2024/CVE-2024-56801.json | 35 - 2024/CVE-2024-56882.json | 35 - 2024/CVE-2024-56883.json | 35 - 2024/CVE-2024-56889.json | 35 - 2024/CVE-2024-56924.json | 35 - 2024/CVE-2024-57040.json | 35 - 2024/CVE-2024-57175.json | 35 - 2024/CVE-2024-57373.json | 35 - 2024/CVE-2024-57376.json | 35 - 2024/CVE-2024-57394.json | 35 - 2024/CVE-2024-57427.json | 35 - 2024/CVE-2024-57428.json | 35 - 2024/CVE-2024-57429.json | 35 - 2024/CVE-2024-57430.json | 35 - 2024/CVE-2024-57484.json | 44 - 2024/CVE-2024-57514.json | 35 - 2024/CVE-2024-57522.json | 35 - 2024/CVE-2024-57609.json | 35 - 2024/CVE-2024-57610.json | 35 - 2024/CVE-2024-57725.json | 35 - 2024/CVE-2024-57778.json | 35 - 2024/CVE-2024-57972.json | 35 - 2024/CVE-2024-5806.json | 33 - 2024/CVE-2024-5909.json | 35 - 2024/CVE-2024-5932.json | 33 - 2024/CVE-2024-6132.json | 35 - 2024/CVE-2024-6244.json | 35 - 2024/CVE-2024-6366.json | 33 - 2024/CVE-2024-6387.json | 70 +- 2024/CVE-2024-6460.json | 68 - 2024/CVE-2024-6485.json | 35 - 2024/CVE-2024-6648.json | 35 - 2024/CVE-2024-7014.json | 68 - 2024/CVE-2024-7120.json | 33 - 2024/CVE-2024-7399.json | 35 - 2024/CVE-2024-7479.json | 33 - 2024/CVE-2024-7595.json | 51 - 2024/CVE-2024-7627.json | 36 - 2024/CVE-2024-7954.json | 66 - 2024/CVE-2024-7966.json | 35 - 2024/CVE-2024-7971.json | 35 - 2024/CVE-2024-7985.json | 35 - 2024/CVE-2024-8118.json | 35 - 2024/CVE-2024-8176.json | 35 - 2024/CVE-2024-8190.json | 33 - 2024/CVE-2024-8193.json | 35 - 2024/CVE-2024-8198.json | 35 - 2024/CVE-2024-8232.json | 35 - 2024/CVE-2024-8289.json | 35 - 2024/CVE-2024-8381.json | 35 - 2024/CVE-2024-8425.json | 35 - 2024/CVE-2024-8517.json | 33 - 2024/CVE-2024-8636.json | 35 - 2024/CVE-2024-8682.json | 35 - 2024/CVE-2024-8743.json | 38 - 2024/CVE-2024-9014.json | 33 - 2024/CVE-2024-9047.json | 66 - 2024/CVE-2024-9264.json | 198 -- 2024/CVE-2024-9463.json | 35 - 2024/CVE-2024-9513.json | 35 - 2024/CVE-2024-9698.json | 35 - 2024/CVE-2024-9756.json | 35 - 2024/CVE-2024-9796.json | 69 - 2024/CVE-2024-9950.json | 35 - 2025/CVE-2025-0890.json | 43 + 2025/CVE-2025-21479.json | 8 +- 2025/CVE-2025-24257.json | 4 +- 2025/CVE-2025-32463.json | 4 +- 2025/CVE-2025-49844.json | 4 +- 2025/CVE-2025-54794.json | 4 +- 2025/CVE-2025-55182.json | 8 +- 2025/CVE-2025-56399.json | 8 +- 2025/CVE-2025-66478.json | 4 +- 2025/CVE-2025-68921.json | 4 +- 2025/CVE-2025-69194.json | 35 - 2025/CVE-2025-71329.json | 8 +- 2026/CVE-2026-10104.json | 35 - 2026/CVE-2026-14628.json | 35 - 2026/CVE-2026-20841.json | 4 +- 2026/CVE-2026-20896.json | 33 - 2026/CVE-2026-21877.json | 4 +- 2026/CVE-2026-22874.json | 35 - 2026/CVE-2026-23870.json | 39 - 2026/CVE-2026-24291.json | 4 +- 2026/CVE-2026-2472.json | 4 +- 2026/CVE-2026-41089.json | 4 +- 2026/CVE-2026-41651.json | 8 +- 2026/CVE-2026-41940.json | 12 +- 2026/CVE-2026-43499.json | 119 +- 2026/CVE-2026-43724.json | 8 +- 2026/CVE-2026-43813.json | 8 +- 2026/CVE-2026-45585.json | 8 +- 2026/CVE-2026-47301.json | 8 +- 2026/CVE-2026-4882.json | 8 +- 2026/CVE-2026-4885.json | 8 +- 2026/CVE-2026-48908.json | 8 +- 2026/CVE-2026-49176.json | 8 +- 2026/CVE-2026-53361.json | 8 +- 2026/CVE-2026-53767.json | 40 + 2026/CVE-2026-55040.json | 8 +- 2026/CVE-2026-56290.json | 8 +- 2026/CVE-2026-63030.json | 24 +- 2026/CVE-2026-63077.json | 8 +- 2026/CVE-2026-64531.json | 4 +- 2026/CVE-2026-64561.json | 4 +- 2026/CVE-2026-64564.json | 8 +- 2026/CVE-2026-64638.json | 16 +- 2026/CVE-2026-64747.json | 8 +- 2026/CVE-2026-66804.json | 26 +- 2026/CVE-2026-68138.json | 12 +- 2026/CVE-2026-72898.json | 40 + .../CVE-2026-73673.json | 24 +- 2026/CVE-2026-8181.json | 8 +- 2026/CVE-2026-8206.json | 16 +- 2026/CVE-2026-8732.json | 16 +- README.md | 2653 +---------------- 536 files changed, 612 insertions(+), 29377 deletions(-) rename 2024/CVE-2024-12583.json => 2019/CVE-2019-10070.json (55%) delete mode 100644 2021/CVE-2021-1056.json delete mode 100644 2021/CVE-2021-1647.json delete mode 100644 2021/CVE-2021-1656.json delete mode 100644 2021/CVE-2021-1699.json delete mode 100644 2021/CVE-2021-1782.json delete mode 100644 2021/CVE-2021-1905.json delete mode 100644 2021/CVE-2021-2021.json delete mode 100644 2021/CVE-2021-20717.json delete mode 100644 2021/CVE-2021-21014.json delete mode 100644 2021/CVE-2021-21017.json delete mode 100644 2021/CVE-2021-21110.json delete mode 100644 2021/CVE-2021-21123.json delete mode 100644 2021/CVE-2021-21148.json delete mode 100644 2021/CVE-2021-2119.json delete mode 100644 2021/CVE-2021-21341.json delete mode 100644 2021/CVE-2021-21349.json delete mode 100644 2021/CVE-2021-21402.json delete mode 100644 2021/CVE-2021-2173.json delete mode 100644 2021/CVE-2021-21973.json delete mode 100644 2021/CVE-2021-21978.json delete mode 100644 2021/CVE-2021-22201.json delete mode 100644 2021/CVE-2021-23132.json delete mode 100644 2021/CVE-2021-24027.json delete mode 100644 2021/CVE-2021-24085.json delete mode 100644 2021/CVE-2021-24096.json delete mode 100644 2021/CVE-2021-24098.json delete mode 100644 2021/CVE-2021-25281.json delete mode 100644 2021/CVE-2021-25679.json delete mode 100644 2021/CVE-2021-25735.json delete mode 100644 2021/CVE-2021-26121.json delete mode 100644 2021/CVE-2021-26295.json delete mode 100644 2021/CVE-2021-26415.json delete mode 100644 2021/CVE-2021-26714.json delete mode 100644 2021/CVE-2021-26832.json delete mode 100644 2021/CVE-2021-26856.json delete mode 100644 2021/CVE-2021-26857.json delete mode 100644 2021/CVE-2021-26868.json delete mode 100644 2021/CVE-2021-26871.json delete mode 100644 2021/CVE-2021-26882.json delete mode 100644 2021/CVE-2021-26903.json delete mode 100644 2021/CVE-2021-26904.json delete mode 100644 2021/CVE-2021-26943.json delete mode 100644 2021/CVE-2021-27065.json delete mode 100644 2021/CVE-2021-27187.json delete mode 100644 2021/CVE-2021-27188.json delete mode 100644 2021/CVE-2021-27190.json delete mode 100644 2021/CVE-2021-27246.json delete mode 100644 2021/CVE-2021-27338.json delete mode 100644 2021/CVE-2021-27342.json delete mode 100644 2021/CVE-2021-27403.json delete mode 100644 2021/CVE-2021-27404.json delete mode 100644 2021/CVE-2021-27890.json delete mode 100644 2021/CVE-2021-27963.json delete mode 100644 2021/CVE-2021-28310.json delete mode 100644 2021/CVE-2021-28312.json delete mode 100644 2021/CVE-2021-28482.json delete mode 100644 2021/CVE-2021-29155.json delete mode 100644 2021/CVE-2021-29200.json delete mode 100644 2021/CVE-2021-29267.json delete mode 100644 2021/CVE-2021-29349.json delete mode 100644 2021/CVE-2021-29440.json delete mode 100644 2021/CVE-2021-29627.json delete mode 100644 2021/CVE-2021-30005.json delete mode 100644 2021/CVE-2021-30128.json delete mode 100644 2021/CVE-2021-30146.json delete mode 100644 2021/CVE-2021-30481.json delete mode 100644 2021/CVE-2021-31159.json delete mode 100644 2021/CVE-2021-31184.json delete mode 100644 2021/CVE-2021-3131.json delete mode 100644 2021/CVE-2021-3138.json delete mode 100644 2021/CVE-2021-3157.json delete mode 100644 2021/CVE-2021-3164.json delete mode 100644 2021/CVE-2021-31728.json delete mode 100644 2021/CVE-2021-31760.json delete mode 100644 2021/CVE-2021-31761.json delete mode 100644 2021/CVE-2021-31762.json delete mode 100644 2021/CVE-2021-31856.json delete mode 100644 2021/CVE-2021-32156.json delete mode 100644 2021/CVE-2021-32157.json delete mode 100644 2021/CVE-2021-32158.json delete mode 100644 2021/CVE-2021-32159.json delete mode 100644 2021/CVE-2021-32160.json delete mode 100644 2021/CVE-2021-32161.json delete mode 100644 2021/CVE-2021-32162.json delete mode 100644 2021/CVE-2021-32537.json delete mode 100644 2021/CVE-2021-32819.json delete mode 100644 2021/CVE-2021-3291.json delete mode 100644 2021/CVE-2021-3310.json delete mode 100644 2021/CVE-2021-3317.json delete mode 100644 2021/CVE-2021-33564.json delete mode 100644 2021/CVE-2021-33624.json delete mode 100644 2021/CVE-2021-3378.json delete mode 100644 2021/CVE-2021-33879.json delete mode 100644 2021/CVE-2021-3395.json delete mode 100644 2021/CVE-2021-3441.json delete mode 100644 2021/CVE-2021-3492.json delete mode 100644 2021/CVE-2021-35064.json delete mode 100644 2021/CVE-2021-3572.json delete mode 100644 2021/CVE-2021-6857.json delete mode 100644 2024/CVE-2024-0402.json delete mode 100644 2024/CVE-2024-0406.json delete mode 100644 2024/CVE-2024-0520.json delete mode 100644 2024/CVE-2024-0760.json delete mode 100644 2024/CVE-2024-10578.json delete mode 100644 2024/CVE-2024-10673.json delete mode 100644 2024/CVE-2024-10674.json delete mode 100644 2024/CVE-2024-10858.json delete mode 100644 2024/CVE-2024-10915.json delete mode 100644 2024/CVE-2024-10930.json delete mode 100644 2024/CVE-2024-11040.json delete mode 100644 2024/CVE-2024-11042.json delete mode 100644 2024/CVE-2024-11972.json delete mode 100644 2024/CVE-2024-12008.json delete mode 100644 2024/CVE-2024-12085.json delete mode 100644 2024/CVE-2024-12252.json delete mode 100644 2024/CVE-2024-12342.json delete mode 100644 2024/CVE-2024-12365.json delete mode 100644 2024/CVE-2024-12542.json delete mode 100644 2024/CVE-2024-12877.json delete mode 100644 2024/CVE-2024-12905.json delete mode 100644 2024/CVE-2024-13159.json delete mode 100644 2024/CVE-2024-13184.json delete mode 100644 2024/CVE-2024-13346.json delete mode 100644 2024/CVE-2024-13478.json delete mode 100644 2024/CVE-2024-13479.json delete mode 100644 2024/CVE-2024-13481.json delete mode 100644 2024/CVE-2024-13483.json delete mode 100644 2024/CVE-2024-13485.json delete mode 100644 2024/CVE-2024-13488.json delete mode 100644 2024/CVE-2024-13489.json delete mode 100644 2024/CVE-2024-13800.json delete mode 100644 2024/CVE-2024-13869.json delete mode 100644 2024/CVE-2024-2053.json delete mode 100644 2024/CVE-2024-20674.json delete mode 100644 2024/CVE-2024-21409.json delete mode 100644 2024/CVE-2024-21513.json delete mode 100644 2024/CVE-2024-21546.json delete mode 100644 2024/CVE-2024-22371.json delete mode 100644 2024/CVE-2024-23666.json delete mode 100644 2024/CVE-2024-23673.json delete mode 100644 2024/CVE-2024-23724.json delete mode 100644 2024/CVE-2024-23733.json delete mode 100644 2024/CVE-2024-2387.json delete mode 100644 2024/CVE-2024-24450.json delete mode 100644 2024/CVE-2024-24451.json delete mode 100644 2024/CVE-2024-25180.json delete mode 100644 2024/CVE-2024-27686.json delete mode 100644 2024/CVE-2024-2771.json delete mode 100644 2024/CVE-2024-2782.json delete mode 100644 2024/CVE-2024-27876.json delete mode 100644 2024/CVE-2024-28752.json delete mode 100644 2024/CVE-2024-28784.json delete mode 100644 2024/CVE-2024-30485.json delete mode 100644 2024/CVE-2024-31114.json delete mode 100644 2024/CVE-2024-3121.json delete mode 100644 2024/CVE-2024-31320.json delete mode 100644 2024/CVE-2024-31903.json delete mode 100644 2024/CVE-2024-31964.json delete mode 100644 2024/CVE-2024-31969.json delete mode 100644 2024/CVE-2024-32462.json delete mode 100644 2024/CVE-2024-32830.json delete mode 100644 2024/CVE-2024-32962.json delete mode 100644 2024/CVE-2024-33676.json delete mode 100644 2024/CVE-2024-34327.json delete mode 100644 2024/CVE-2024-34328.json delete mode 100644 2024/CVE-2024-34370.json delete mode 100644 2024/CVE-2024-35106.json delete mode 100644 2024/CVE-2024-3552.json delete mode 100644 2024/CVE-2024-3568.json delete mode 100644 2024/CVE-2024-3640.json delete mode 100644 2024/CVE-2024-36437.json delete mode 100644 2024/CVE-2024-36587.json delete mode 100644 2024/CVE-2024-3660.json delete mode 100644 2024/CVE-2024-3673.json delete mode 100644 2024/CVE-2024-36886.json delete mode 100644 2024/CVE-2024-37010.json delete mode 100644 2024/CVE-2024-38112.json delete mode 100644 2024/CVE-2024-38143.json delete mode 100644 2024/CVE-2024-38828.json delete mode 100644 2024/CVE-2024-39719.json delete mode 100644 2024/CVE-2024-39722.json delete mode 100644 2024/CVE-2024-40445.json delete mode 100644 2024/CVE-2024-40453.json delete mode 100644 2024/CVE-2024-40586.json delete mode 100644 2024/CVE-2024-40635.json create mode 100644 2024/CVE-2024-40891.json delete mode 100644 2024/CVE-2024-40898.json delete mode 100644 2024/CVE-2024-415770.json delete mode 100644 2024/CVE-2024-41817.json delete mode 100644 2024/CVE-2024-42007.json delete mode 100644 2024/CVE-2024-42008.json delete mode 100644 2024/CVE-2024-42049.json delete mode 100644 2024/CVE-2024-42471.json delete mode 100644 2024/CVE-2024-43018.json delete mode 100644 2024/CVE-2024-43535.json delete mode 100644 2024/CVE-2024-43583.json delete mode 100644 2024/CVE-2024-43788.json delete mode 100644 2024/CVE-2024-44308.json delete mode 100644 2024/CVE-2024-44313.json delete mode 100644 2024/CVE-2024-44378.json delete mode 100644 2024/CVE-2024-44871.json delete mode 100644 2024/CVE-2024-45195.json delete mode 100644 2024/CVE-2024-45352.json delete mode 100644 2024/CVE-2024-45436.json delete mode 100644 2024/CVE-2024-45870.json delete mode 100644 2024/CVE-2024-46507.json delete mode 100644 2024/CVE-2024-46981.json delete mode 100644 2024/CVE-2024-48061.json delete mode 100644 2024/CVE-2024-48248.json delete mode 100644 2024/CVE-2024-48307.json delete mode 100644 2024/CVE-2024-48590.json delete mode 100644 2024/CVE-2024-48591.json delete mode 100644 2024/CVE-2024-48887.json delete mode 100644 2024/CVE-2024-49019.json delete mode 100644 2024/CVE-2024-4947.json delete mode 100644 2024/CVE-2024-49653.json delete mode 100644 2024/CVE-2024-49668.json delete mode 100644 2024/CVE-2024-50492.json delete mode 100644 2024/CVE-2024-50562.json delete mode 100644 2024/CVE-2024-5083.json delete mode 100644 2024/CVE-2024-51568.json delete mode 100644 2024/CVE-2024-51788.json delete mode 100644 2024/CVE-2024-51977.json delete mode 100644 2024/CVE-2024-51996.json delete mode 100644 2024/CVE-2024-52010.json delete mode 100644 2024/CVE-2024-52375.json delete mode 100644 2024/CVE-2024-52402.json delete mode 100644 2024/CVE-2024-52550.json delete mode 100644 2024/CVE-2024-52794.json delete mode 100644 2024/CVE-2024-53027.json delete mode 100644 2024/CVE-2024-53591.json delete mode 100644 2024/CVE-2024-53703.json delete mode 100644 2024/CVE-2024-53900.json delete mode 100644 2024/CVE-2024-53924.json delete mode 100644 2024/CVE-2024-54085.json delete mode 100644 2024/CVE-2024-54239.json delete mode 100644 2024/CVE-2024-54383.json delete mode 100644 2024/CVE-2024-54498.json delete mode 100644 2024/CVE-2024-54507.json delete mode 100644 2024/CVE-2024-5452.json delete mode 100644 2024/CVE-2024-54772.json delete mode 100644 2024/CVE-2024-54879.json delete mode 100644 2024/CVE-2024-54880.json delete mode 100644 2024/CVE-2024-54916.json delete mode 100644 2024/CVE-2024-54951.json delete mode 100644 2024/CVE-2024-55060.json delete mode 100644 2024/CVE-2024-55347.json delete mode 100644 2024/CVE-2024-5535.json delete mode 100644 2024/CVE-2024-55466.json delete mode 100644 2024/CVE-2024-55504.json delete mode 100644 2024/CVE-2024-55511.json delete mode 100644 2024/CVE-2024-55555.json delete mode 100644 2024/CVE-2024-55591.json delete mode 100644 2024/CVE-2024-55656.json delete mode 100644 2024/CVE-2024-55890.json delete mode 100644 2024/CVE-2024-55963.json delete mode 100644 2024/CVE-2024-56071.json delete mode 100644 2024/CVE-2024-56249.json delete mode 100644 2024/CVE-2024-56264.json delete mode 100644 2024/CVE-2024-56428.json delete mode 100644 2024/CVE-2024-56429.json delete mode 100644 2024/CVE-2024-56801.json delete mode 100644 2024/CVE-2024-56882.json delete mode 100644 2024/CVE-2024-56883.json delete mode 100644 2024/CVE-2024-56889.json delete mode 100644 2024/CVE-2024-56924.json delete mode 100644 2024/CVE-2024-57040.json delete mode 100644 2024/CVE-2024-57175.json delete mode 100644 2024/CVE-2024-57373.json delete mode 100644 2024/CVE-2024-57376.json delete mode 100644 2024/CVE-2024-57394.json delete mode 100644 2024/CVE-2024-57427.json delete mode 100644 2024/CVE-2024-57428.json delete mode 100644 2024/CVE-2024-57429.json delete mode 100644 2024/CVE-2024-57430.json delete mode 100644 2024/CVE-2024-57484.json delete mode 100644 2024/CVE-2024-57514.json delete mode 100644 2024/CVE-2024-57522.json delete mode 100644 2024/CVE-2024-57609.json delete mode 100644 2024/CVE-2024-57610.json delete mode 100644 2024/CVE-2024-57725.json delete mode 100644 2024/CVE-2024-57778.json delete mode 100644 2024/CVE-2024-57972.json delete mode 100644 2024/CVE-2024-5909.json delete mode 100644 2024/CVE-2024-6132.json delete mode 100644 2024/CVE-2024-6244.json delete mode 100644 2024/CVE-2024-6460.json delete mode 100644 2024/CVE-2024-6485.json delete mode 100644 2024/CVE-2024-6648.json delete mode 100644 2024/CVE-2024-7014.json delete mode 100644 2024/CVE-2024-7399.json delete mode 100644 2024/CVE-2024-7595.json delete mode 100644 2024/CVE-2024-7966.json delete mode 100644 2024/CVE-2024-7971.json delete mode 100644 2024/CVE-2024-7985.json delete mode 100644 2024/CVE-2024-8118.json delete mode 100644 2024/CVE-2024-8176.json delete mode 100644 2024/CVE-2024-8193.json delete mode 100644 2024/CVE-2024-8198.json delete mode 100644 2024/CVE-2024-8232.json delete mode 100644 2024/CVE-2024-8289.json delete mode 100644 2024/CVE-2024-8381.json delete mode 100644 2024/CVE-2024-8425.json delete mode 100644 2024/CVE-2024-8636.json delete mode 100644 2024/CVE-2024-8682.json delete mode 100644 2024/CVE-2024-8743.json delete mode 100644 2024/CVE-2024-9463.json delete mode 100644 2024/CVE-2024-9513.json delete mode 100644 2024/CVE-2024-9698.json delete mode 100644 2024/CVE-2024-9756.json delete mode 100644 2024/CVE-2024-9950.json create mode 100644 2025/CVE-2025-0890.json delete mode 100644 2025/CVE-2025-69194.json delete mode 100644 2026/CVE-2026-10104.json delete mode 100644 2026/CVE-2026-14628.json delete mode 100644 2026/CVE-2026-22874.json delete mode 100644 2026/CVE-2026-23870.json create mode 100644 2026/CVE-2026-53767.json rename 2021/CVE-2021-3360.json => 2026/CVE-2026-73673.json (52%) diff --git a/2012/CVE-2012-2459.json b/2012/CVE-2012-2459.json index 1b67404c62..9797ec8e62 100644 --- a/2012/CVE-2012-2459.json +++ b/2012/CVE-2012-2459.json @@ -15,7 +15,7 @@ "fork": false, "created_at": "2026-06-28T17:01:57Z", "updated_at": "2026-08-10T01:52:58Z", - "pushed_at": "2026-08-10T01:52:54Z", + "pushed_at": "2026-08-13T18:06:33Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2015/CVE-2015-1925.json b/2015/CVE-2015-1925.json index 530be6c4b2..051b200904 100644 --- a/2015/CVE-2015-1925.json +++ b/2015/CVE-2015-1925.json @@ -14,8 +14,8 @@ "description": "Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a denial of service", "fork": false, "created_at": "2026-03-01T13:16:31Z", - "updated_at": "2026-08-02T12:16:42Z", - "pushed_at": "2026-03-02T10:17:45Z", + "updated_at": "2026-08-13T19:17:47Z", + "pushed_at": "2026-08-13T19:16:06Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2015/CVE-2015-7545.json b/2015/CVE-2015-7545.json index 04eacd2689..3db7860865 100644 --- a/2015/CVE-2015-7545.json +++ b/2015/CVE-2015-7545.json @@ -19,7 +19,7 @@ "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, - "forks_count": 1, + "forks_count": 0, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 1, + "forks": 0, "watchers": 2, "score": 0, "subscribers_count": 0 diff --git a/2017/CVE-2017-5638.json b/2017/CVE-2017-5638.json index dff5a74e64..b09dd69b35 100644 --- a/2017/CVE-2017-5638.json +++ b/2017/CVE-2017-5638.json @@ -179,10 +179,10 @@ "description": "Example PoC Code for CVE-2017-5638 | Apache Struts Exploit ", "fork": false, "created_at": "2017-03-10T16:56:14Z", - "updated_at": "2026-05-29T08:49:43Z", + "updated_at": "2026-08-13T19:42:55Z", "pushed_at": "2017-03-12T15:43:27Z", - "stargazers_count": 21, - "watchers_count": 21, + "stargazers_count": 22, + "watchers_count": 22, "has_discussions": false, "forks_count": 24, "allow_forking": true, @@ -202,7 +202,7 @@ ], "visibility": "public", "forks": 24, - "watchers": 21, + "watchers": 22, "score": 0, "subscribers_count": 0 }, @@ -2279,10 +2279,10 @@ "description": "This repository provides a PoC for CVE-2017-5638, a remote code execution vulnerability in Apache Struts 2, exploitable via a crafted Content-Type HTTP header.", "fork": false, "created_at": "2024-09-04T19:59:29Z", - "updated_at": "2025-01-31T21:15:12Z", + "updated_at": "2026-08-13T19:44:50Z", "pushed_at": "2024-09-12T01:40:57Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -2293,7 +2293,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 1 }, @@ -2312,10 +2312,10 @@ "description": "Proof of concept of CVE-2017-5638 including the whole setup of the Apache vulnerable server", "fork": false, "created_at": "2024-12-08T17:22:38Z", - "updated_at": "2025-02-06T19:12:17Z", + "updated_at": "2026-08-13T19:45:09Z", "pushed_at": "2025-02-06T19:12:14Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -2326,7 +2326,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 1 }, diff --git a/2024/CVE-2024-12583.json b/2019/CVE-2019-10070.json similarity index 55% rename from 2024/CVE-2024-12583.json rename to 2019/CVE-2019-10070.json index 3f43b15484..f1379bcc7d 100644 --- a/2024/CVE-2024-12583.json +++ b/2019/CVE-2019-10070.json @@ -1,21 +1,21 @@ [ { - "id": 989076825, - "name": "CVE-2024-12583", - "full_name": "pouriam23\/CVE-2024-12583", + "id": 1333508909, + "name": "cve-2019-10070-apache-atlas-xss", + "full_name": "PerfectPoH\/cve-2019-10070-apache-atlas-xss", "owner": { - "login": "pouriam23", - "id": 174950792, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/174950792?v=4", - "html_url": "https:\/\/github.com\/pouriam23", + "login": "PerfectPoH", + "id": 151148113, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/151148113?v=4", + "html_url": "https:\/\/github.com\/PerfectPoH", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/pouriam23\/CVE-2024-12583", + "html_url": "https:\/\/github.com\/PerfectPoH\/cve-2019-10070-apache-atlas-xss", "description": null, "fork": false, - "created_at": "2025-05-23T14:16:19Z", - "updated_at": "2025-05-23T14:18:15Z", - "pushed_at": "2025-05-23T14:18:12Z", + "created_at": "2026-08-13T20:21:31Z", + "updated_at": "2026-08-13T20:38:26Z", + "pushed_at": "2026-08-13T20:38:08Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2019/CVE-2019-1040.json b/2019/CVE-2019-1040.json index 1a9a7d2fd5..1a60c4ef4e 100644 --- a/2019/CVE-2019-1040.json +++ b/2019/CVE-2019-1040.json @@ -179,8 +179,8 @@ "description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.", "fork": false, "created_at": "2025-12-06T19:56:12Z", - "updated_at": "2026-08-13T17:38:51Z", - "pushed_at": "2026-08-13T17:38:36Z", + "updated_at": "2026-08-13T23:40:12Z", + "pushed_at": "2026-08-13T23:40:08Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2019/CVE-2019-2215.json b/2019/CVE-2019-2215.json index 688ef28f90..7f79bc0c1a 100644 --- a/2019/CVE-2019-2215.json +++ b/2019/CVE-2019-2215.json @@ -469,7 +469,7 @@ "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, - "forks_count": 2, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -477,7 +477,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 2, + "forks": 1, "watchers": 3, "score": 0, "subscribers_count": 1 diff --git a/2020/CVE-2020-11179.json b/2020/CVE-2020-11179.json index f199922ae3..628b56650f 100644 --- a/2020/CVE-2020-11179.json +++ b/2020/CVE-2020-11179.json @@ -14,10 +14,10 @@ "description": "Productization efforts of CVE-2020-11179 Adreno-Qualcomm-GPU bug, original poc by Ben Hawkes of P0", "fork": false, "created_at": "2024-10-28T00:50:57Z", - "updated_at": "2026-06-12T16:35:26Z", + "updated_at": "2026-08-13T20:11:31Z", "pushed_at": "2024-12-22T22:43:48Z", - "stargazers_count": 7, - "watchers_count": 7, + "stargazers_count": 8, + "watchers_count": 8, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 3, - "watchers": 7, + "watchers": 8, "score": 0, "subscribers_count": 1 } diff --git a/2020/CVE-2020-1472.json b/2020/CVE-2020-1472.json index 05ba3e01dc..894ac1c7d9 100644 --- a/2020/CVE-2020-1472.json +++ b/2020/CVE-2020-1472.json @@ -2383,8 +2383,8 @@ "description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.", "fork": false, "created_at": "2025-12-06T10:17:38Z", - "updated_at": "2026-08-13T18:04:00Z", - "pushed_at": "2026-08-13T18:03:05Z", + "updated_at": "2026-08-14T00:10:01Z", + "pushed_at": "2026-08-14T00:09:56Z", "stargazers_count": 4, "watchers_count": 4, "has_discussions": false, diff --git a/2021/CVE-2021-1056.json b/2021/CVE-2021-1056.json deleted file mode 100644 index addd8aac63..0000000000 --- a/2021/CVE-2021-1056.json +++ /dev/null @@ -1,39 +0,0 @@ -[ - { - "id": 327884232, - "name": "CVE-2021-1056", - "full_name": "pokerfaceSad\/CVE-2021-1056", - "owner": { - "login": "pokerfaceSad", - "id": 22297037, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/22297037?v=4", - "html_url": "https:\/\/github.com\/pokerfaceSad", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/pokerfaceSad\/CVE-2021-1056", - "description": "PoC for CVE-2021-1056, related to GPU Container Security", - "fork": false, - "created_at": "2021-01-08T11:29:48Z", - "updated_at": "2025-06-03T06:04:31Z", - "pushed_at": "2021-01-12T09:21:02Z", - "stargazers_count": 16, - "watchers_count": 16, - "has_discussions": false, - "forks_count": 7, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2021-1056", - "gpu-container", - "kubernetes-clusters" - ], - "visibility": "public", - "forks": 7, - "watchers": 16, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-1647.json b/2021/CVE-2021-1647.json deleted file mode 100644 index 805dee8327..0000000000 --- a/2021/CVE-2021-1647.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 332213147, - "name": "cve-2021-1647", - "full_name": "findcool\/cve-2021-1647", - "owner": { - "login": "findcool", - "id": 73280456, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/73280456?v=4", - "html_url": "https:\/\/github.com\/findcool", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/findcool\/cve-2021-1647", - "description": null, - "fork": false, - "created_at": "2021-01-23T13:10:35Z", - "updated_at": "2024-10-15T16:58:00Z", - "pushed_at": "2021-01-20T14:55:37Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 7, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 7, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-1656.json b/2021/CVE-2021-1656.json deleted file mode 100644 index 626e0d6d19..0000000000 --- a/2021/CVE-2021-1656.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 352879385, - "name": "CVE-2021-1656", - "full_name": "waleedassar\/CVE-2021-1656", - "owner": { - "login": "waleedassar", - "id": 5983995, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5983995?v=4", - "html_url": "https:\/\/github.com\/waleedassar", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/waleedassar\/CVE-2021-1656", - "description": null, - "fork": false, - "created_at": "2021-03-30T05:21:26Z", - "updated_at": "2026-06-30T15:47:49Z", - "pushed_at": "2021-03-30T05:31:22Z", - "stargazers_count": 22, - "watchers_count": 22, - "has_discussions": false, - "forks_count": 11, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 11, - "watchers": 22, - "score": 0, - "subscribers_count": 5 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-1675.json b/2021/CVE-2021-1675.json index 0178b3df61..9379013094 100644 --- a/2021/CVE-2021-1675.json +++ b/2021/CVE-2021-1675.json @@ -1,70 +1,4 @@ [ - { - "id": 381392691, - "name": "CVE-2021-1675", - "full_name": "yu2u\/CVE-2021-1675", - "owner": { - "login": "yu2u", - "id": 25322880, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25322880?v=4", - "html_url": "https:\/\/github.com\/yu2u", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/yu2u\/CVE-2021-1675", - "description": "CVE-2021-1675 exploit", - "fork": false, - "created_at": "2021-06-29T14:24:30Z", - "updated_at": "2021-09-15T02:02:40Z", - "pushed_at": "2021-06-29T14:26:25Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 2 - }, - { - "id": 381444656, - "name": "CVE-2021-1675", - "full_name": "cube0x0\/CVE-2021-1675", - "owner": { - "login": "cube0x0", - "id": 39370848, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/39370848?v=4", - "html_url": "https:\/\/github.com\/cube0x0", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/cube0x0\/CVE-2021-1675", - "description": "C# and Impacket implementation of PrintNightmare CVE-2021-1675\/CVE-2021-34527", - "fork": false, - "created_at": "2021-06-29T17:24:14Z", - "updated_at": "2026-08-11T03:22:17Z", - "pushed_at": "2021-07-20T15:28:13Z", - "stargazers_count": 1999, - "watchers_count": 1999, - "has_discussions": false, - "forks_count": 574, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 574, - "watchers": 1999, - "score": 0, - "subscribers_count": 40 - }, { "id": 381799016, "name": "CVE-2021-1675", @@ -98,39 +32,6 @@ "score": 0, "subscribers_count": 16 }, - { - "id": 381858715, - "name": "patch-cve-2021-1675", - "full_name": "kondah\/patch-cve-2021-1675", - "owner": { - "login": "kondah", - "id": 7760108, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/7760108?v=4", - "html_url": "https:\/\/github.com\/kondah", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/kondah\/patch-cve-2021-1675", - "description": null, - "fork": false, - "created_at": "2021-06-30T23:39:21Z", - "updated_at": "2025-04-11T21:26:06Z", - "pushed_at": "2021-06-30T23:40:44Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, { "id": 381971547, "name": "CVE-2021-1675-LPE-EXP", diff --git a/2021/CVE-2021-1699.json b/2021/CVE-2021-1699.json deleted file mode 100644 index 2b0fd47c22..0000000000 --- a/2021/CVE-2021-1699.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 353281089, - "name": "CVE-2021-1699", - "full_name": "waleedassar\/CVE-2021-1699", - "owner": { - "login": "waleedassar", - "id": 5983995, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5983995?v=4", - "html_url": "https:\/\/github.com\/waleedassar", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/waleedassar\/CVE-2021-1699", - "description": "POC for CVE-2021-1699", - "fork": false, - "created_at": "2021-03-31T08:22:49Z", - "updated_at": "2026-05-13T19:48:32Z", - "pushed_at": "2021-03-31T08:29:23Z", - "stargazers_count": 16, - "watchers_count": 16, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 16, - "score": 0, - "subscribers_count": 3 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-1732.json b/2021/CVE-2021-1732.json index 463dae1f81..95c5481c76 100644 --- a/2021/CVE-2021-1732.json +++ b/2021/CVE-2021-1732.json @@ -1,202 +1,4 @@ [ - { - "id": 344667460, - "name": "CVE-2021-1732-Exploit", - "full_name": "KaLendsi\/CVE-2021-1732-Exploit", - "owner": { - "login": "KaLendsi", - "id": 68001644, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/68001644?v=4", - "html_url": "https:\/\/github.com\/KaLendsi", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/KaLendsi\/CVE-2021-1732-Exploit", - "description": "CVE-2021-1732 Exploit", - "fork": false, - "created_at": "2021-03-05T02:11:10Z", - "updated_at": "2026-08-11T08:36:35Z", - "pushed_at": "2021-03-05T03:10:26Z", - "stargazers_count": 426, - "watchers_count": 426, - "has_discussions": false, - "forks_count": 123, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 123, - "watchers": 426, - "score": 0, - "subscribers_count": 5 - }, - { - "id": 345659892, - "name": "CVE-2021-1732", - "full_name": "flyinbedxyz\/CVE-2021-1732", - "owner": { - "login": "flyinbedxyz", - "id": 37978080, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/37978080?v=4", - "html_url": "https:\/\/github.com\/flyinbedxyz", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/flyinbedxyz\/CVE-2021-1732", - "description": "CVE-­2021­-1732 Microsoft Windows 10 本地提权漏 研究及Poc\/Exploit开发", - "fork": false, - "created_at": "2021-03-08T13:09:20Z", - "updated_at": "2021-03-08T13:09:22Z", - "pushed_at": "2021-03-08T11:41:19Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 24, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 24, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 345855407, - "name": "CVE-2021-1732-Exploit", - "full_name": "oneoy\/CVE-2021-1732-Exploit", - "owner": { - "login": "oneoy", - "id": 38435398, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38435398?v=4", - "html_url": "https:\/\/github.com\/oneoy", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/oneoy\/CVE-2021-1732-Exploit", - "description": null, - "fork": false, - "created_at": "2021-03-09T02:13:43Z", - "updated_at": "2025-08-07T14:09:20Z", - "pushed_at": "2021-03-09T02:13:51Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 4, - "watchers": 1, - "score": 0, - "subscribers_count": 2 - }, - { - "id": 353872268, - "name": "CVE-2021-1732_exp", - "full_name": "linuxdy\/CVE-2021-1732_exp", - "owner": { - "login": "linuxdy", - "id": 50064309, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50064309?v=4", - "html_url": "https:\/\/github.com\/linuxdy", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/linuxdy\/CVE-2021-1732_exp", - "description": null, - "fork": false, - "created_at": "2021-04-02T01:35:41Z", - "updated_at": "2026-02-23T13:40:17Z", - "pushed_at": "2021-03-30T08:32:03Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 4, - "watchers": 3, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 360813608, - "name": "CVE-2021-1732", - "full_name": "po4sec\/CVE-2021-1732", - "owner": { - "login": "po4sec", - "id": 12437819, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/12437819?v=4", - "html_url": "https:\/\/github.com\/po4sec", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/po4sec\/CVE-2021-1732", - "description": "CVE-2021-1732 poc & exp; tested on 20H2", - "fork": false, - "created_at": "2021-04-23T08:21:54Z", - "updated_at": "2026-01-13T11:21:50Z", - "pushed_at": "2021-04-23T08:28:53Z", - "stargazers_count": 66, - "watchers_count": 66, - "has_discussions": false, - "forks_count": 15, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 15, - "watchers": 66, - "score": 0, - "subscribers_count": 5 - }, - { - "id": 361428612, - "name": "Windows-Privilege-Escalation-CVE-2021-1732", - "full_name": "exploitblizzard\/Windows-Privilege-Escalation-CVE-2021-1732", - "owner": { - "login": "exploitblizzard", - "id": 61627070, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61627070?v=4", - "html_url": "https:\/\/github.com\/exploitblizzard", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/exploitblizzard\/Windows-Privilege-Escalation-CVE-2021-1732", - "description": "Read my blog for more info - ", - "fork": false, - "created_at": "2021-04-25T12:55:15Z", - "updated_at": "2026-05-18T16:50:19Z", - "pushed_at": "2021-04-27T21:13:18Z", - "stargazers_count": 31, - "watchers_count": 31, - "has_discussions": false, - "forks_count": 16, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 16, - "watchers": 31, - "score": 0, - "subscribers_count": 2 - }, { "id": 409794385, "name": "CVE-2021-1732", diff --git a/2021/CVE-2021-1782.json b/2021/CVE-2021-1782.json deleted file mode 100644 index bd64a9ac42..0000000000 --- a/2021/CVE-2021-1782.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 336072318, - "name": "cve-2021-1782", - "full_name": "raymontag\/cve-2021-1782", - "owner": { - "login": "raymontag", - "id": 106421, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/106421?v=4", - "html_url": "https:\/\/github.com\/raymontag", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/raymontag\/cve-2021-1782", - "description": null, - "fork": false, - "created_at": "2021-02-04T20:19:22Z", - "updated_at": "2023-03-29T09:27:08Z", - "pushed_at": "2021-03-05T21:25:12Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 2 - }, - { - "id": 337752034, - "name": "CVE-2021-1782", - "full_name": "synacktiv\/CVE-2021-1782", - "owner": { - "login": "synacktiv", - "id": 50145679, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50145679?v=4", - "html_url": "https:\/\/github.com\/synacktiv", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/synacktiv\/CVE-2021-1782", - "description": null, - "fork": false, - "created_at": "2021-02-10T14:38:05Z", - "updated_at": "2026-05-13T19:48:24Z", - "pushed_at": "2021-02-10T14:39:04Z", - "stargazers_count": 40, - "watchers_count": 40, - "has_discussions": false, - "forks_count": 10, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 10, - "watchers": 40, - "score": 0, - "subscribers_count": 5 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-1905.json b/2021/CVE-2021-1905.json deleted file mode 100644 index dd56e1bc4d..0000000000 --- a/2021/CVE-2021-1905.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 370174301, - "name": "CVE-2021-1905-CVE-2021-1906-CVE-2021-28663-CVE-2021-28664", - "full_name": "TAKIANFIF\/CVE-2021-1905-CVE-2021-1906-CVE-2021-28663-CVE-2021-28664", - "owner": { - "login": "TAKIANFIF", - "id": 50182078, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50182078?v=4", - "html_url": "https:\/\/github.com\/TAKIANFIF", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/TAKIANFIF\/CVE-2021-1905-CVE-2021-1906-CVE-2021-28663-CVE-2021-28664", - "description": "Qualcomm GPU \/ ARM Mali GPU", - "fork": false, - "created_at": "2021-05-23T23:02:41Z", - "updated_at": "2021-05-23T23:02:41Z", - "pushed_at": "2021-05-23T23:02:41Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-2021.json b/2021/CVE-2021-2021.json deleted file mode 100644 index e6f2bff39b..0000000000 --- a/2021/CVE-2021-2021.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 367292787, - "name": "CVE-2021-2021good", - "full_name": "TheCryingGame\/CVE-2021-2021good", - "owner": { - "login": "TheCryingGame", - "id": 48227194, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48227194?v=4", - "html_url": "https:\/\/github.com\/TheCryingGame", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/TheCryingGame\/CVE-2021-2021good", - "description": "This is a good projects.", - "fork": false, - "created_at": "2021-05-14T08:03:43Z", - "updated_at": "2021-05-14T08:03:43Z", - "pushed_at": "2021-05-14T08:03:44Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-20717.json b/2021/CVE-2021-20717.json deleted file mode 100644 index 2711f8f340..0000000000 --- a/2021/CVE-2021-20717.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 371916803, - "name": "CVE-2021-20717", - "full_name": "s-index\/CVE-2021-20717", - "owner": { - "login": "s-index", - "id": 56715563, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/56715563?v=4", - "html_url": "https:\/\/github.com\/s-index", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/s-index\/CVE-2021-20717", - "description": "CVE-2021-20717-EC-CUBE-XSS", - "fork": false, - "created_at": "2021-05-29T08:08:21Z", - "updated_at": "2022-09-27T16:28:51Z", - "pushed_at": "2021-05-29T08:12:04Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-21014.json b/2021/CVE-2021-21014.json deleted file mode 100644 index d688713603..0000000000 --- a/2021/CVE-2021-21014.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 338510801, - "name": "CVE-2021-21014", - "full_name": "HoangKien1020\/CVE-2021-21014", - "owner": { - "login": "HoangKien1020", - "id": 24661746, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/24661746?v=4", - "html_url": "https:\/\/github.com\/HoangKien1020", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/HoangKien1020\/CVE-2021-21014", - "description": "Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to a file upload restriction bypass. Successful exploitation could lead to arbitrary code execution by an authenticated attacker.", - "fork": false, - "created_at": "2021-02-13T06:16:39Z", - "updated_at": "2024-08-12T20:10:20Z", - "pushed_at": "2021-02-13T06:30:25Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-21017.json b/2021/CVE-2021-21017.json deleted file mode 100644 index 66206a9220..0000000000 --- a/2021/CVE-2021-21017.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 342597395, - "name": "CVE-2021-21017", - "full_name": "ZeusBox\/CVE-2021-21017", - "owner": { - "login": "ZeusBox", - "id": 78951067, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78951067?v=4", - "html_url": "https:\/\/github.com\/ZeusBox", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ZeusBox\/CVE-2021-21017", - "description": null, - "fork": false, - "created_at": "2021-02-26T14:18:13Z", - "updated_at": "2026-04-27T00:11:21Z", - "pushed_at": "2021-02-27T09:57:00Z", - "stargazers_count": 44, - "watchers_count": 44, - "has_discussions": false, - "forks_count": 12, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 12, - "watchers": 44, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-21042.json b/2021/CVE-2021-21042.json index d1b9dbb095..aff9c97f06 100644 --- a/2021/CVE-2021-21042.json +++ b/2021/CVE-2021-21042.json @@ -1,37 +1,4 @@ [ - { - "id": 344380474, - "name": "CVE-2021-21042", - "full_name": "NattiSamson\/CVE-2021-21042", - "owner": { - "login": "NattiSamson", - "id": 45117900, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/45117900?v=4", - "html_url": "https:\/\/github.com\/NattiSamson", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/NattiSamson\/CVE-2021-21042", - "description": "Exploit code for CVE-2021-21042", - "fork": false, - "created_at": "2021-03-04T07:01:08Z", - "updated_at": "2024-03-05T16:34:39Z", - "pushed_at": "2021-03-04T07:05:01Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, { "id": 432305625, "name": "CVE-2021-21042", diff --git a/2021/CVE-2021-2109.json b/2021/CVE-2021-2109.json index 70dee0d36b..cddf2494bd 100644 --- a/2021/CVE-2021-2109.json +++ b/2021/CVE-2021-2109.json @@ -1,108 +1,4 @@ [ - { - "id": 331847444, - "name": "CVE-2021-2109", - "full_name": "Al1ex\/CVE-2021-2109", - "owner": { - "login": "Al1ex", - "id": 38161463, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38161463?v=4", - "html_url": "https:\/\/github.com\/Al1ex", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Al1ex\/CVE-2021-2109", - "description": "CVE-2021-2109 && Weblogic Server RCE via JNDI", - "fork": false, - "created_at": "2021-01-22T05:37:11Z", - "updated_at": "2025-06-02T13:58:48Z", - "pushed_at": "2021-01-22T05:52:26Z", - "stargazers_count": 31, - "watchers_count": 31, - "has_discussions": false, - "forks_count": 10, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2021-2109", - "jndi", - "rce", - "weblogic" - ], - "visibility": "public", - "forks": 10, - "watchers": 31, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 331873303, - "name": "CVE-2021-2109", - "full_name": "rabbitsafe\/CVE-2021-2109", - "owner": { - "login": "rabbitsafe", - "id": 33046073, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/33046073?v=4", - "html_url": "https:\/\/github.com\/rabbitsafe", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/rabbitsafe\/CVE-2021-2109", - "description": null, - "fork": false, - "created_at": "2021-01-22T07:43:46Z", - "updated_at": "2024-08-12T20:09:39Z", - "pushed_at": "2021-01-22T08:34:11Z", - "stargazers_count": 9, - "watchers_count": 9, - "has_discussions": false, - "forks_count": 5, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 5, - "watchers": 9, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 367086891, - "name": "CVE-2021-2109_poc", - "full_name": "yuaneuro\/CVE-2021-2109_poc", - "owner": { - "login": "yuaneuro", - "id": 42265015, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42265015?v=4", - "html_url": "https:\/\/github.com\/yuaneuro", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/yuaneuro\/CVE-2021-2109_poc", - "description": "weblogic CVE-2021-2109批量验证poc", - "fork": false, - "created_at": "2021-05-13T15:10:03Z", - "updated_at": "2024-08-12T20:12:58Z", - "pushed_at": "2021-05-14T04:27:23Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 4, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - }, { "id": 394257292, "name": "CVE-2021-2109", diff --git a/2021/CVE-2021-21110.json b/2021/CVE-2021-21110.json deleted file mode 100644 index 1f3c5e4adb..0000000000 --- a/2021/CVE-2021-21110.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 340540711, - "name": "CVE-2021-21110", - "full_name": "Gh0st0ne\/CVE-2021-21110", - "owner": { - "login": "Gh0st0ne", - "id": 47971115, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47971115?v=4", - "html_url": "https:\/\/github.com\/Gh0st0ne", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Gh0st0ne\/CVE-2021-21110", - "description": "CVE-2021-21110 : Tiki Wiki CMS GroupWare Serverside Template Injection Remote Code Execution Exploit", - "fork": false, - "created_at": "2021-02-20T02:19:40Z", - "updated_at": "2024-09-28T09:19:47Z", - "pushed_at": "2021-02-20T02:20:48Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-21123.json b/2021/CVE-2021-21123.json deleted file mode 100644 index 69520d48c3..0000000000 --- a/2021/CVE-2021-21123.json +++ /dev/null @@ -1,50 +0,0 @@ -[ - { - "id": 350325088, - "name": "CVE-2021-21123-PoC-Google-Chrome", - "full_name": "Puliczek\/CVE-2021-21123-PoC-Google-Chrome", - "owner": { - "login": "Puliczek", - "id": 12344862, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/12344862?v=4", - "html_url": "https:\/\/github.com\/Puliczek", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Puliczek\/CVE-2021-21123-PoC-Google-Chrome", - "description": "🐱‍💻 👍 Google Chrome - File System Access API - vulnerabilities reported by Maciej Pulikowski | Total Bug Bounty Reward: $5.000 | CVE-2021-21123 and 5 more...", - "fork": false, - "created_at": "2021-03-22T11:53:57Z", - "updated_at": "2026-07-24T18:04:54Z", - "pushed_at": "2021-03-22T18:24:20Z", - "stargazers_count": 175, - "watchers_count": 175, - "has_discussions": false, - "forks_count": 24, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "bugbounty", - "bugbounty-writeups", - "bugbountytips", - "cve", - "cybersecurity", - "exploit", - "hacking", - "payload", - "pentesing", - "pentest", - "red-team", - "security", - "security-writeups", - "writeups" - ], - "visibility": "public", - "forks": 24, - "watchers": 175, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-21148.json b/2021/CVE-2021-21148.json deleted file mode 100644 index daa20e4ae4..0000000000 --- a/2021/CVE-2021-21148.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 336754176, - "name": "CVE-2021-21148", - "full_name": "Grayhaxor\/CVE-2021-21148", - "owner": { - "login": "Grayhaxor", - "id": 74397435, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74397435?v=4", - "html_url": "https:\/\/github.com\/Grayhaxor", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Grayhaxor\/CVE-2021-21148", - "description": null, - "fork": false, - "created_at": "2021-02-07T09:59:47Z", - "updated_at": "2022-04-20T06:48:02Z", - "pushed_at": "2021-02-07T10:03:16Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-2119.json b/2021/CVE-2021-2119.json deleted file mode 100644 index a605046e4a..0000000000 --- a/2021/CVE-2021-2119.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 329979678, - "name": "RWCTF21-VirtualBox-61-escape", - "full_name": "Sauercloud\/RWCTF21-VirtualBox-61-escape", - "owner": { - "login": "Sauercloud", - "id": 41395211, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41395211?v=4", - "html_url": "https:\/\/github.com\/Sauercloud", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Sauercloud\/RWCTF21-VirtualBox-61-escape", - "description": "0day VirtualBox 6.1.2 Escape for RealWorld CTF 2020\/2021 CVE-2021-2119", - "fork": false, - "created_at": "2021-01-15T17:32:24Z", - "updated_at": "2026-07-17T06:00:34Z", - "pushed_at": "2021-01-23T01:25:22Z", - "stargazers_count": 148, - "watchers_count": 148, - "has_discussions": false, - "forks_count": 19, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 19, - "watchers": 148, - "score": 0, - "subscribers_count": 9 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-21234.json b/2021/CVE-2021-21234.json index f27adcb28f..11c24f9487 100644 --- a/2021/CVE-2021-21234.json +++ b/2021/CVE-2021-21234.json @@ -1,37 +1,4 @@ [ - { - "id": 375059494, - "name": "CVE-2021-21234", - "full_name": "PwCNO-CTO\/CVE-2021-21234", - "owner": { - "login": "PwCNO-CTO", - "id": 58770486, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/58770486?v=4", - "html_url": "https:\/\/github.com\/PwCNO-CTO", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/PwCNO-CTO\/CVE-2021-21234", - "description": "Directory traversal vulnerability in the spring-boot-actuator-logview library", - "fork": false, - "created_at": "2021-06-08T15:31:54Z", - "updated_at": "2022-03-16T01:54:31Z", - "pushed_at": "2021-06-08T15:32:07Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, { "id": 418722822, "name": "CVE-2021-21234", diff --git a/2021/CVE-2021-21300.json b/2021/CVE-2021-21300.json index 4c601fceb7..3cf3c7849f 100644 --- a/2021/CVE-2021-21300.json +++ b/2021/CVE-2021-21300.json @@ -1,301 +1,4 @@ [ - { - "id": 346285133, - "name": "CVE-2021-21300", - "full_name": "AlkenePan\/CVE-2021-21300", - "owner": { - "login": "AlkenePan", - "id": 8273781, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8273781?v=4", - "html_url": "https:\/\/github.com\/AlkenePan", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/AlkenePan\/CVE-2021-21300", - "description": null, - "fork": false, - "created_at": "2021-03-10T08:29:49Z", - "updated_at": "2023-11-18T03:10:56Z", - "pushed_at": "2021-03-10T08:30:25Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 5, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 5, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 346425578, - "name": "CVE-2021-21300", - "full_name": "Faisal78123\/CVE-2021-21300", - "owner": { - "login": "Faisal78123", - "id": 2056026, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/2056026?v=4", - "html_url": "https:\/\/github.com\/Faisal78123", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Faisal78123\/CVE-2021-21300", - "description": null, - "fork": false, - "created_at": "2021-03-10T16:45:46Z", - "updated_at": "2021-03-18T10:37:28Z", - "pushed_at": "2021-03-18T10:37:26Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 346434188, - "name": "CVE-2021-21300", - "full_name": "erranfenech\/CVE-2021-21300", - "owner": { - "login": "erranfenech", - "id": 52293769, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/52293769?v=4", - "html_url": "https:\/\/github.com\/erranfenech", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/erranfenech\/CVE-2021-21300", - "description": null, - "fork": false, - "created_at": "2021-03-10T17:15:49Z", - "updated_at": "2021-03-10T17:26:03Z", - "pushed_at": "2021-03-10T17:26:00Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 346559767, - "name": "CVE-2021-21300", - "full_name": "Maskhe\/CVE-2021-21300", - "owner": { - "login": "Maskhe", - "id": 30264078, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/30264078?v=4", - "html_url": "https:\/\/github.com\/Maskhe", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Maskhe\/CVE-2021-21300", - "description": null, - "fork": false, - "created_at": "2021-03-11T02:57:11Z", - "updated_at": "2023-09-28T11:25:41Z", - "pushed_at": "2021-03-11T03:16:37Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 346572089, - "name": "CVE-2021-21300", - "full_name": "1uanWu\/CVE-2021-21300", - "owner": { - "login": "1uanWu", - "id": 23513206, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/23513206?v=4", - "html_url": "https:\/\/github.com\/1uanWu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/1uanWu\/CVE-2021-21300", - "description": "remote code exec for git", - "fork": false, - "created_at": "2021-03-11T03:59:49Z", - "updated_at": "2021-03-16T02:36:13Z", - "pushed_at": "2021-03-11T04:14:25Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 346654892, - "name": "CVE-2021-21300", - "full_name": "Kirill89\/CVE-2021-21300", - "owner": { - "login": "Kirill89", - "id": 2003936, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/2003936?v=4", - "html_url": "https:\/\/github.com\/Kirill89", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Kirill89\/CVE-2021-21300", - "description": null, - "fork": false, - "created_at": "2021-03-11T09:56:03Z", - "updated_at": "2021-03-11T10:01:59Z", - "pushed_at": "2021-03-11T10:01:57Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 347847778, - "name": "cve-2021-21300", - "full_name": "ETOCheney\/cve-2021-21300", - "owner": { - "login": "ETOCheney", - "id": 28469578, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/28469578?v=4", - "html_url": "https:\/\/github.com\/ETOCheney", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ETOCheney\/cve-2021-21300", - "description": null, - "fork": false, - "created_at": "2021-03-15T05:28:47Z", - "updated_at": "2021-03-15T05:30:16Z", - "pushed_at": "2021-03-15T05:30:14Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 355023650, - "name": "CVE-2021-21300", - "full_name": "fengzhouc\/CVE-2021-21300", - "owner": { - "login": "fengzhouc", - "id": 22309037, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/22309037?v=4", - "html_url": "https:\/\/github.com\/fengzhouc", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/fengzhouc\/CVE-2021-21300", - "description": null, - "fork": false, - "created_at": "2021-04-06T01:44:17Z", - "updated_at": "2021-04-06T02:14:31Z", - "pushed_at": "2021-04-06T02:14:29Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 355441102, - "name": "CVE-2021-21300", - "full_name": "danshuizhangyu\/CVE-2021-21300", - "owner": { - "login": "danshuizhangyu", - "id": 82081080, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/82081080?v=4", - "html_url": "https:\/\/github.com\/danshuizhangyu", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/danshuizhangyu\/CVE-2021-21300", - "description": null, - "fork": false, - "created_at": "2021-04-07T06:48:16Z", - "updated_at": "2021-04-08T01:46:54Z", - "pushed_at": "2021-04-08T01:46:52Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 2 - }, { "id": 407074218, "name": "CVE-2021-21300", diff --git a/2021/CVE-2021-21315.json b/2021/CVE-2021-21315.json index 320c57f926..c304af85dc 100644 --- a/2021/CVE-2021-21315.json +++ b/2021/CVE-2021-21315.json @@ -1,50 +1,4 @@ [ - { - "id": 343523383, - "name": "CVE-2021-21315-PoC", - "full_name": "ForbiddenProgrammer\/CVE-2021-21315-PoC", - "owner": { - "login": "ForbiddenProgrammer", - "id": 72838191, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/72838191?v=4", - "html_url": "https:\/\/github.com\/ForbiddenProgrammer", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ForbiddenProgrammer\/CVE-2021-21315-PoC", - "description": "CVE 2021-21315 PoC", - "fork": false, - "created_at": "2021-03-01T18:52:41Z", - "updated_at": "2026-05-05T15:51:49Z", - "pushed_at": "2021-06-09T13:27:20Z", - "stargazers_count": 160, - "watchers_count": 160, - "has_discussions": false, - "forks_count": 25, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve", - "cybersecurity", - "infosec", - "injection", - "nodejs", - "offensive-security", - "pentesting", - "proof-of-concept", - "redteaming", - "research", - "vulnerabilities", - "vulnerability" - ], - "visibility": "public", - "forks": 25, - "watchers": 160, - "score": 0, - "subscribers_count": 8 - }, { "id": 387065961, "name": "CVE-2021-21315-exploit", diff --git a/2021/CVE-2021-21341.json b/2021/CVE-2021-21341.json deleted file mode 100644 index da7ade1405..0000000000 --- a/2021/CVE-2021-21341.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 365686424, - "name": "CVE-2021-21341", - "full_name": "s-index\/CVE-2021-21341", - "owner": { - "login": "s-index", - "id": 56715563, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/56715563?v=4", - "html_url": "https:\/\/github.com\/s-index", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/s-index\/CVE-2021-21341", - "description": "XStream DoS CVE-2021-21341", - "fork": false, - "created_at": "2021-05-09T06:46:38Z", - "updated_at": "2021-05-09T06:48:28Z", - "pushed_at": "2021-05-09T06:48:26Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-21349.json b/2021/CVE-2021-21349.json deleted file mode 100644 index 91020efb02..0000000000 --- a/2021/CVE-2021-21349.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 365687047, - "name": "CVE-2021-21349", - "full_name": "s-index\/CVE-2021-21349", - "owner": { - "login": "s-index", - "id": 56715563, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/56715563?v=4", - "html_url": "https:\/\/github.com\/s-index", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/s-index\/CVE-2021-21349", - "description": "XStream SSRF CVE-2021-21349", - "fork": false, - "created_at": "2021-05-09T06:50:31Z", - "updated_at": "2021-06-09T15:09:36Z", - "pushed_at": "2021-05-09T06:54:09Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-21389.json b/2021/CVE-2021-21389.json index a68627f661..6221682054 100644 --- a/2021/CVE-2021-21389.json +++ b/2021/CVE-2021-21389.json @@ -1,37 +1,4 @@ [ - { - "id": 372529238, - "name": "CVE-2021-21389", - "full_name": "HoangKien1020\/CVE-2021-21389", - "owner": { - "login": "HoangKien1020", - "id": 24661746, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/24661746?v=4", - "html_url": "https:\/\/github.com\/HoangKien1020", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/HoangKien1020\/CVE-2021-21389", - "description": "BuddyPress is an open source WordPress plugin to build a community site. In releases of BuddyPress from 5.0.0 before 7.2.1 it's possible for a non-privileged, regular user to obtain administrator rights by exploiting an issue in the REST API members endpoint. The vulnerability has been fixed in BuddyPress 7.2.1. Existing installations of the plugin should be updated to this version to mitigate the issue.", - "fork": false, - "created_at": "2021-05-31T14:12:26Z", - "updated_at": "2025-07-13T01:25:32Z", - "pushed_at": "2021-05-31T14:16:20Z", - "stargazers_count": 19, - "watchers_count": 19, - "has_discussions": false, - "forks_count": 5, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 5, - "watchers": 19, - "score": 0, - "subscribers_count": 1 - }, { "id": 900986411, "name": "CVE-2021-21389", diff --git a/2021/CVE-2021-21402.json b/2021/CVE-2021-21402.json deleted file mode 100644 index e279f8d756..0000000000 --- a/2021/CVE-2021-21402.json +++ /dev/null @@ -1,101 +0,0 @@ -[ - { - "id": 356203698, - "name": "CVE-2021-21402-Jellyfin", - "full_name": "jiaocoll\/CVE-2021-21402-Jellyfin", - "owner": { - "login": "jiaocoll", - "id": 62785738, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62785738?v=4", - "html_url": "https:\/\/github.com\/jiaocoll", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/jiaocoll\/CVE-2021-21402-Jellyfin", - "description": "CVE-2021-21402-Jellyfin-任意文件读取", - "fork": false, - "created_at": "2021-04-09T08:54:55Z", - "updated_at": "2021-04-10T03:10:17Z", - "pushed_at": "2021-04-10T03:10:15Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 358308476, - "name": "CVE-2021-21402", - "full_name": "somatrasss\/CVE-2021-21402", - "owner": { - "login": "somatrasss", - "id": 69829610, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/69829610?v=4", - "html_url": "https:\/\/github.com\/somatrasss", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/somatrasss\/CVE-2021-21402", - "description": "本项目涉及到的仅为安全研究和授权情况下使用，其使用人员有责任和义务遵守当地法律条规。", - "fork": false, - "created_at": "2021-04-15T15:32:39Z", - "updated_at": "2024-08-12T20:12:11Z", - "pushed_at": "2021-04-15T15:51:16Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 358484211, - "name": "CVE-2021-21402", - "full_name": "givemefivw\/CVE-2021-21402", - "owner": { - "login": "givemefivw", - "id": 65514141, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/65514141?v=4", - "html_url": "https:\/\/github.com\/givemefivw", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/givemefivw\/CVE-2021-21402", - "description": "CVE-2021-21402 Jellyfin任意文件读取 Wker脚本，可批量。", - "fork": false, - "created_at": "2021-04-16T05:20:20Z", - "updated_at": "2021-04-16T06:04:51Z", - "pushed_at": "2021-04-16T05:24:09Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-21551.json b/2021/CVE-2021-21551.json index 824d713e77..885cbd7e0d 100644 --- a/2021/CVE-2021-21551.json +++ b/2021/CVE-2021-21551.json @@ -1,103 +1,4 @@ [ - { - "id": 367056155, - "name": "CVE-2021-21551", - "full_name": "waldo-irc\/CVE-2021-21551", - "owner": { - "login": "waldo-irc", - "id": 10516272, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/10516272?v=4", - "html_url": "https:\/\/github.com\/waldo-irc", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/waldo-irc\/CVE-2021-21551", - "description": "Exploit to SYSTEM for CVE-2021-21551", - "fork": false, - "created_at": "2021-05-13T13:23:38Z", - "updated_at": "2026-07-23T04:43:44Z", - "pushed_at": "2021-05-20T20:33:09Z", - "stargazers_count": 236, - "watchers_count": 236, - "has_discussions": false, - "forks_count": 43, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 43, - "watchers": 236, - "score": 0, - "subscribers_count": 9 - }, - { - "id": 369400184, - "name": "CVE-2021-21551", - "full_name": "ch3rn0byl\/CVE-2021-21551", - "owner": { - "login": "ch3rn0byl", - "id": 13082307, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/13082307?v=4", - "html_url": "https:\/\/github.com\/ch3rn0byl", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ch3rn0byl\/CVE-2021-21551", - "description": null, - "fork": false, - "created_at": "2021-05-21T03:13:58Z", - "updated_at": "2026-03-19T11:21:03Z", - "pushed_at": "2021-05-21T03:24:25Z", - "stargazers_count": 24, - "watchers_count": 24, - "has_discussions": false, - "forks_count": 10, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 10, - "watchers": 24, - "score": 0, - "subscribers_count": 4 - }, - { - "id": 371617838, - "name": "PS-CVE-2021-21551", - "full_name": "arnaudluti\/PS-CVE-2021-21551", - "owner": { - "login": "arnaudluti", - "id": 41639163, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41639163?v=4", - "html_url": "https:\/\/github.com\/arnaudluti", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/arnaudluti\/PS-CVE-2021-21551", - "description": "Script to patch your domain computers about the CVE-2021-21551. Privesc on machines that have the driver dbutil_2_3.sys, installed by some DELL tools (BIOS updater, SupportAssist...)", - "fork": false, - "created_at": "2021-05-28T07:29:40Z", - "updated_at": "2021-06-20T11:02:49Z", - "pushed_at": "2021-06-20T11:02:47Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, { "id": 372182222, "name": "CVE-2021-21551", @@ -146,39 +47,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 373047111, - "name": "CVE-2021-21551-POC", - "full_name": "mzakocs\/CVE-2021-21551-POC", - "owner": { - "login": "mzakocs", - "id": 48490301, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48490301?v=4", - "html_url": "https:\/\/github.com\/mzakocs", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mzakocs\/CVE-2021-21551-POC", - "description": "An extended proof-of-concept for the CVE-2021-21551 Dell ‘dbutil_2_3.sys’ Kernel Exploit", - "fork": false, - "created_at": "2021-06-02T05:13:07Z", - "updated_at": "2026-03-19T11:24:55Z", - "pushed_at": "2021-07-20T03:03:30Z", - "stargazers_count": 23, - "watchers_count": 23, - "has_discussions": false, - "forks_count": 8, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 8, - "watchers": 23, - "score": 0, - "subscribers_count": 2 - }, { "id": 402614345, "name": "Dell-Driver-EoP-CVE-2021-21551", diff --git a/2021/CVE-2021-2173.json b/2021/CVE-2021-2173.json deleted file mode 100644 index db34bf3c8c..0000000000 --- a/2021/CVE-2021-2173.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 373735692, - "name": "CVE-2021-2173", - "full_name": "emad-almousa\/CVE-2021-2173", - "owner": { - "login": "emad-almousa", - "id": 48997609, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48997609?v=4", - "html_url": "https:\/\/github.com\/emad-almousa", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/emad-almousa\/CVE-2021-2173", - "description": "CVE-2021-2173", - "fork": false, - "created_at": "2021-06-04T05:56:01Z", - "updated_at": "2024-08-12T20:13:36Z", - "pushed_at": "2021-06-04T05:57:12Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-21972.json b/2021/CVE-2021-21972.json index 45ec4d28ef..1e316b310d 100644 --- a/2021/CVE-2021-21972.json +++ b/2021/CVE-2021-21972.json @@ -1,87 +1,4 @@ [ - { - "id": 246641886, - "name": "NSE-scripts", - "full_name": "psc4re\/NSE-scripts", - "owner": { - "login": "psc4re", - "id": 4672886, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4672886?v=4", - "html_url": "https:\/\/github.com\/psc4re", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/psc4re\/NSE-scripts", - "description": "NSE scripts to detect CVE-2020-1350 SIGRED and CVE-2020-0796 SMBGHOST, CVE-2021-21972, proxyshell, CVE-2021-34473", - "fork": false, - "created_at": "2020-03-11T17:51:29Z", - "updated_at": "2026-08-09T22:54:44Z", - "pushed_at": "2021-08-16T18:16:20Z", - "stargazers_count": 163, - "watchers_count": 163, - "has_discussions": false, - "forks_count": 29, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2020-1350", - "cve-2021-21972", - "cve-2021-34473", - "nmap", - "nmap-scan-script", - "nmap-scripts", - "nse-script", - "poc", - "proxyshell", - "scanner", - "sigred", - "smbghost", - "smbv3", - "vcenter", - "vulnerability", - "vulnerability-detection" - ], - "visibility": "public", - "forks": 29, - "watchers": 163, - "score": 0, - "subscribers_count": 9 - }, - { - "id": 341854126, - "name": "CVE-2021-21972-vCenter-6.5-7.0-RCE-POC", - "full_name": "QmF0c3UK\/CVE-2021-21972-vCenter-6.5-7.0-RCE-POC", - "owner": { - "login": "QmF0c3UK", - "id": 29447678, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/29447678?v=4", - "html_url": "https:\/\/github.com\/QmF0c3UK", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/QmF0c3UK\/CVE-2021-21972-vCenter-6.5-7.0-RCE-POC", - "description": null, - "fork": false, - "created_at": "2021-02-24T09:56:21Z", - "updated_at": "2026-08-04T08:01:07Z", - "pushed_at": "2021-03-01T02:10:44Z", - "stargazers_count": 136, - "watchers_count": 136, - "has_discussions": false, - "forks_count": 61, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 61, - "watchers": 136, - "score": 0, - "subscribers_count": 6 - }, { "id": 341874677, "name": "CVE-2021-21972", @@ -117,573 +34,6 @@ "score": 0, "subscribers_count": 6 }, - { - "id": 341907086, - "name": "CVE-2021-21972", - "full_name": "yaunsky\/CVE-2021-21972", - "owner": { - "login": "yaunsky", - "id": 48243087, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48243087?v=4", - "html_url": "https:\/\/github.com\/yaunsky", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/yaunsky\/CVE-2021-21972", - "description": null, - "fork": false, - "created_at": "2021-02-24T13:19:41Z", - "updated_at": "2026-05-14T06:06:21Z", - "pushed_at": "2021-02-24T13:36:28Z", - "stargazers_count": 8, - "watchers_count": 8, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 4, - "watchers": 8, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 341963506, - "name": "CVE-2021-21972", - "full_name": "horizon3ai\/CVE-2021-21972", - "owner": { - "login": "horizon3ai", - "id": 79593994, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79593994?v=4", - "html_url": "https:\/\/github.com\/horizon3ai", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/horizon3ai\/CVE-2021-21972", - "description": "Proof of Concept Exploit for vCenter CVE-2021-21972", - "fork": false, - "created_at": "2021-02-24T16:31:34Z", - "updated_at": "2026-08-04T08:01:07Z", - "pushed_at": "2021-02-25T16:05:02Z", - "stargazers_count": 270, - "watchers_count": 270, - "has_discussions": false, - "forks_count": 83, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 83, - "watchers": 270, - "score": 0, - "subscribers_count": 6 - }, - { - "id": 342109140, - "name": "westone-CVE-2021-21972-scanner", - "full_name": "Osyanina\/westone-CVE-2021-21972-scanner", - "owner": { - "login": "Osyanina", - "id": 78467376, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78467376?v=4", - "html_url": "https:\/\/github.com\/Osyanina", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Osyanina\/westone-CVE-2021-21972-scanner", - "description": "A vulnerability scanner that detects CVE-2021-21972 vulnerabilities.", - "fork": false, - "created_at": "2021-02-25T03:19:25Z", - "updated_at": "2021-03-20T07:55:11Z", - "pushed_at": "2021-03-20T07:55:09Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 342129970, - "name": "CVE-2021-21972", - "full_name": "alt3kx\/CVE-2021-21972", - "owner": { - "login": "alt3kx", - "id": 3140111, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/3140111?v=4", - "html_url": "https:\/\/github.com\/alt3kx", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/alt3kx\/CVE-2021-21972", - "description": null, - "fork": false, - "created_at": "2021-02-25T05:10:06Z", - "updated_at": "2024-08-12T20:10:40Z", - "pushed_at": "2021-02-25T05:49:19Z", - "stargazers_count": 54, - "watchers_count": 54, - "has_discussions": false, - "forks_count": 15, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 15, - "watchers": 54, - "score": 0, - "subscribers_count": 3 - }, - { - "id": 342131182, - "name": "CVE-2021-21972", - "full_name": "milo2012\/CVE-2021-21972", - "owner": { - "login": "milo2012", - "id": 905335, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/905335?v=4", - "html_url": "https:\/\/github.com\/milo2012", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/milo2012\/CVE-2021-21972", - "description": "CVE-2021-21972", - "fork": false, - "created_at": "2021-02-25T05:16:38Z", - "updated_at": "2025-06-11T03:32:41Z", - "pushed_at": "2021-03-01T03:38:00Z", - "stargazers_count": 33, - "watchers_count": 33, - "has_discussions": false, - "forks_count": 8, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 8, - "watchers": 33, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 342156654, - "name": "VMware_vCenter_UNAuthorized_RCE_CVE-2021-21972", - "full_name": "conjojo\/VMware_vCenter_UNAuthorized_RCE_CVE-2021-21972", - "owner": { - "login": "conjojo", - "id": 79626719, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79626719?v=4", - "html_url": "https:\/\/github.com\/conjojo", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/conjojo\/VMware_vCenter_UNAuthorized_RCE_CVE-2021-21972", - "description": "VMware vCenter 未授权RCE（CVE-2021-21972）", - "fork": false, - "created_at": "2021-02-25T07:17:21Z", - "updated_at": "2026-08-04T08:01:07Z", - "pushed_at": "2021-02-25T09:54:53Z", - "stargazers_count": 27, - "watchers_count": 27, - "has_discussions": false, - "forks_count": 5, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 5, - "watchers": 27, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 342190619, - "name": "CVE-2021-21972", - "full_name": "L-pin\/CVE-2021-21972", - "owner": { - "login": "L-pin", - "id": 23657203, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/23657203?v=4", - "html_url": "https:\/\/github.com\/L-pin", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/L-pin\/CVE-2021-21972", - "description": null, - "fork": false, - "created_at": "2021-02-25T09:28:17Z", - "updated_at": "2021-02-26T01:57:28Z", - "pushed_at": "2021-02-26T01:57:26Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 342203695, - "name": "CVE-2021-21972", - "full_name": "B1anda0\/CVE-2021-21972", - "owner": { - "login": "B1anda0", - "id": 74232513, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74232513?v=4", - "html_url": "https:\/\/github.com\/B1anda0", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/B1anda0\/CVE-2021-21972", - "description": "VMware vCenter Server远程代码执行漏洞 (CVE-2021-21972)批量检测脚本", - "fork": false, - "created_at": "2021-02-25T10:16:20Z", - "updated_at": "2025-06-08T23:36:12Z", - "pushed_at": "2021-02-25T10:26:53Z", - "stargazers_count": 11, - "watchers_count": 11, - "has_discussions": false, - "forks_count": 9, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 9, - "watchers": 11, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 342246923, - "name": "CVE-2021-21972", - "full_name": "renini\/CVE-2021-21972", - "owner": { - "login": "renini", - "id": 1587083, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1587083?v=4", - "html_url": "https:\/\/github.com\/renini", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/renini\/CVE-2021-21972", - "description": "CVE-2021-21972", - "fork": false, - "created_at": "2021-02-25T13:04:37Z", - "updated_at": "2021-07-14T14:37:02Z", - "pushed_at": "2021-02-25T13:11:43Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 342706243, - "name": "CVE-2021-21972", - "full_name": "GuayoyoCyber\/CVE-2021-21972", - "owner": { - "login": "GuayoyoCyber", - "id": 17362318, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/17362318?v=4", - "html_url": "https:\/\/github.com\/GuayoyoCyber", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/GuayoyoCyber\/CVE-2021-21972", - "description": "Nmap script to check vulnerability CVE-2021-21972", - "fork": false, - "created_at": "2021-02-26T21:30:50Z", - "updated_at": "2026-02-09T07:20:33Z", - "pushed_at": "2021-03-03T13:54:38Z", - "stargazers_count": 28, - "watchers_count": 28, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2021-21972", - "nmap", - "nmap-script" - ], - "visibility": "public", - "forks": 4, - "watchers": 28, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 342822880, - "name": "Detect-CVE-2021-21972", - "full_name": "JMousqueton\/Detect-CVE-2021-21972", - "owner": { - "login": "JMousqueton", - "id": 4148567, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4148567?v=4", - "html_url": "https:\/\/github.com\/JMousqueton", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/JMousqueton\/Detect-CVE-2021-21972", - "description": null, - "fork": false, - "created_at": "2021-02-27T09:53:57Z", - "updated_at": "2021-02-27T10:00:17Z", - "pushed_at": "2021-02-27T10:00:15Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 342829114, - "name": "VMware_vCenter_CVE-2021-21972", - "full_name": "robwillisinfo\/VMware_vCenter_CVE-2021-21972", - "owner": { - "login": "robwillisinfo", - "id": 24982882, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/24982882?v=4", - "html_url": "https:\/\/github.com\/robwillisinfo", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/robwillisinfo\/VMware_vCenter_CVE-2021-21972", - "description": "VMware vCenter CVE-2021-21972 Tools", - "fork": false, - "created_at": "2021-02-27T10:27:04Z", - "updated_at": "2023-01-05T08:31:41Z", - "pushed_at": "2021-02-27T10:37:32Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 343440136, - "name": "vcenter_rce", - "full_name": "Ma1Dong\/vcenter_rce", - "owner": { - "login": "Ma1Dong", - "id": 52943794, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/52943794?v=4", - "html_url": "https:\/\/github.com\/Ma1Dong", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Ma1Dong\/vcenter_rce", - "description": "漏洞利用，Vmware vCenter 6.5-7.0 RCE（CVE-2021-21972），上传冰蝎3，getshell", - "fork": false, - "created_at": "2021-03-01T14:14:01Z", - "updated_at": "2026-05-23T10:51:40Z", - "pushed_at": "2021-03-01T14:28:30Z", - "stargazers_count": 11, - "watchers_count": 11, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 11, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 343983949, - "name": "cve-2021-21972", - "full_name": "d3sh1n\/cve-2021-21972", - "owner": { - "login": "d3sh1n", - "id": 78736442, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78736442?v=4", - "html_url": "https:\/\/github.com\/d3sh1n", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/d3sh1n\/cve-2021-21972", - "description": null, - "fork": false, - "created_at": "2021-03-03T03:01:46Z", - "updated_at": "2021-12-27T05:40:13Z", - "pushed_at": "2021-03-11T08:21:04Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 344383637, - "name": "CVE-2021-21972", - "full_name": "ByZain\/CVE-2021-21972", - "owner": { - "login": "ByZain", - "id": 62633744, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62633744?v=4", - "html_url": "https:\/\/github.com\/ByZain", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ByZain\/CVE-2021-21972", - "description": "CVE-2021-21972 related vulnerability code", - "fork": false, - "created_at": "2021-03-04T07:14:10Z", - "updated_at": "2022-09-13T10:55:17Z", - "pushed_at": "2021-03-04T09:17:01Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 345396191, - "name": "CVE-2021-21972", - "full_name": "TaroballzChen\/CVE-2021-21972", - "owner": { - "login": "TaroballzChen", - "id": 27862593, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/27862593?v=4", - "html_url": "https:\/\/github.com\/TaroballzChen", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/TaroballzChen\/CVE-2021-21972", - "description": "CVE-2021-21972 Unauthorized RCE in VMware vCenter metasploit exploit script", - "fork": false, - "created_at": "2021-03-07T16:30:36Z", - "updated_at": "2026-06-30T14:49:00Z", - "pushed_at": "2021-03-07T17:12:55Z", - "stargazers_count": 19, - "watchers_count": 19, - "has_discussions": false, - "forks_count": 6, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 6, - "watchers": 19, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 355150639, - "name": "CVE-2021-21972", - "full_name": "murataydemir\/CVE-2021-21972", - "owner": { - "login": "murataydemir", - "id": 16391655, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16391655?v=4", - "html_url": "https:\/\/github.com\/murataydemir", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/murataydemir\/CVE-2021-21972", - "description": "[CVE-2021-21972] VMware vSphere Client Unauthorized File Upload to Remote Code Execution (RCE)", - "fork": false, - "created_at": "2021-04-06T10:38:40Z", - "updated_at": "2025-04-02T14:32:12Z", - "pushed_at": "2021-04-06T16:15:56Z", - "stargazers_count": 6, - "watchers_count": 6, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2021-21972" - ], - "visibility": "public", - "forks": 1, - "watchers": 6, - "score": 0, - "subscribers_count": 1 - }, { "id": 360539179, "name": "vSphereyeeter", diff --git a/2021/CVE-2021-21973.json b/2021/CVE-2021-21973.json deleted file mode 100644 index cb9e672a7f..0000000000 --- a/2021/CVE-2021-21973.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 348167084, - "name": "CVE-2021-21973-Automateme", - "full_name": "freakanonymous\/CVE-2021-21973-Automateme", - "owner": { - "login": "freakanonymous", - "id": 77834590, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/77834590?v=4", - "html_url": "https:\/\/github.com\/freakanonymous", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/freakanonymous\/CVE-2021-21973-Automateme", - "description": "automate me!", - "fork": false, - "created_at": "2021-03-16T00:50:15Z", - "updated_at": "2024-08-12T20:11:14Z", - "pushed_at": "2021-03-16T00:51:04Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-21975.json b/2021/CVE-2021-21975.json index 5f03cb7765..733c9b4ee7 100644 --- a/2021/CVE-2021-21975.json +++ b/2021/CVE-2021-21975.json @@ -1,212 +1,4 @@ [ - { - "id": 353356863, - "name": "VMWare-vRealize-SSRF", - "full_name": "Henry4E36\/VMWare-vRealize-SSRF", - "owner": { - "login": "Henry4E36", - "id": 41940481, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41940481?v=4", - "html_url": "https:\/\/github.com\/Henry4E36", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Henry4E36\/VMWare-vRealize-SSRF", - "description": "VMWare vRealize SSRF-CVE-2021-21975", - "fork": false, - "created_at": "2021-03-31T12:56:09Z", - "updated_at": "2026-05-13T19:48:32Z", - "pushed_at": "2021-04-02T08:53:39Z", - "stargazers_count": 12, - "watchers_count": 12, - "has_discussions": false, - "forks_count": 7, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 7, - "watchers": 12, - "score": 0, - "subscribers_count": 4 - }, - { - "id": 353368245, - "name": "CVE-2021-21975", - "full_name": "dorkerdevil\/CVE-2021-21975", - "owner": { - "login": "dorkerdevil", - "id": 15796745, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/15796745?v=4", - "html_url": "https:\/\/github.com\/dorkerdevil", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dorkerdevil\/CVE-2021-21975", - "description": null, - "fork": false, - "created_at": "2021-03-31T13:33:45Z", - "updated_at": "2024-08-12T20:11:43Z", - "pushed_at": "2021-07-04T10:58:31Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 353407250, - "name": "CVE-2021-21975", - "full_name": "Al1ex\/CVE-2021-21975", - "owner": { - "login": "Al1ex", - "id": 38161463, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38161463?v=4", - "html_url": "https:\/\/github.com\/Al1ex", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Al1ex\/CVE-2021-21975", - "description": "CVE-2021-21975 vRealize Operations Manager SSRF", - "fork": false, - "created_at": "2021-03-31T15:40:09Z", - "updated_at": "2024-08-12T20:11:43Z", - "pushed_at": "2021-03-31T15:50:27Z", - "stargazers_count": 13, - "watchers_count": 13, - "has_discussions": false, - "forks_count": 7, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2021-21975", - "ssrf", - "vrealize-operations-manager" - ], - "visibility": "public", - "forks": 7, - "watchers": 13, - "score": 0, - "subscribers_count": 2 - }, - { - "id": 353836398, - "name": "CVE-2021-21975", - "full_name": "GuayoyoCyber\/CVE-2021-21975", - "owner": { - "login": "GuayoyoCyber", - "id": 17362318, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/17362318?v=4", - "html_url": "https:\/\/github.com\/GuayoyoCyber", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/GuayoyoCyber\/CVE-2021-21975", - "description": "Nmap script to check vulnerability CVE-2021-21975", - "fork": false, - "created_at": "2021-04-01T21:59:05Z", - "updated_at": "2026-07-31T15:53:29Z", - "pushed_at": "2021-04-02T00:32:15Z", - "stargazers_count": 26, - "watchers_count": 26, - "has_discussions": false, - "forks_count": 8, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2021-21975", - "nmap", - "nmap-script" - ], - "visibility": "public", - "forks": 8, - "watchers": 26, - "score": 0, - "subscribers_count": 3 - }, - { - "id": 354134708, - "name": "CVE-2021-21975", - "full_name": "murataydemir\/CVE-2021-21975", - "owner": { - "login": "murataydemir", - "id": 16391655, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16391655?v=4", - "html_url": "https:\/\/github.com\/murataydemir", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/murataydemir\/CVE-2021-21975", - "description": "[CVE-2021-21975] VMware vRealize Operations Manager API Server Side Request Forgery (SSRF)", - "fork": false, - "created_at": "2021-04-02T21:14:06Z", - "updated_at": "2025-04-02T14:32:23Z", - "pushed_at": "2021-04-02T23:06:48Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2021-21975" - ], - "visibility": "public", - "forks": 3, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 355355329, - "name": "REALITY_SMASHER", - "full_name": "rabidwh0re\/REALITY_SMASHER", - "owner": { - "login": "rabidwh0re", - "id": 8302932, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8302932?v=4", - "html_url": "https:\/\/github.com\/rabidwh0re", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/rabidwh0re\/REALITY_SMASHER", - "description": "vRealize RCE + Privesc (CVE-2021-21975, CVE-2021-21983, CVE-0DAY-?????)", - "fork": false, - "created_at": "2021-04-06T23:24:38Z", - "updated_at": "2026-05-23T10:51:46Z", - "pushed_at": "2021-04-07T03:10:07Z", - "stargazers_count": 37, - "watchers_count": 37, - "has_discussions": false, - "forks_count": 6, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 6, - "watchers": 37, - "score": 0, - "subscribers_count": 4 - }, { "id": 356577164, "name": "VMWare-CVE-2021-21975", diff --git a/2021/CVE-2021-21978.json b/2021/CVE-2021-21978.json deleted file mode 100644 index 9f4d0d5db0..0000000000 --- a/2021/CVE-2021-21978.json +++ /dev/null @@ -1,101 +0,0 @@ -[ - { - "id": 344688633, - "name": "CVE-2021-21978", - "full_name": "GreyOrder\/CVE-2021-21978", - "owner": { - "login": "GreyOrder", - "id": 39576135, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/39576135?v=4", - "html_url": "https:\/\/github.com\/GreyOrder", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/GreyOrder\/CVE-2021-21978", - "description": "CVE-2021-21978 exp", - "fork": false, - "created_at": "2021-03-05T03:58:33Z", - "updated_at": "2024-10-03T05:15:22Z", - "pushed_at": "2021-03-05T04:22:26Z", - "stargazers_count": 23, - "watchers_count": 23, - "has_discussions": false, - "forks_count": 16, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 16, - "watchers": 23, - "score": 0, - "subscribers_count": 3 - }, - { - "id": 344694759, - "name": "CVE-2021-21978", - "full_name": "me1ons\/CVE-2021-21978", - "owner": { - "login": "me1ons", - "id": 36701939, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/36701939?v=4", - "html_url": "https:\/\/github.com\/me1ons", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/me1ons\/CVE-2021-21978", - "description": "CVE-2021-21978 EXP", - "fork": false, - "created_at": "2021-03-05T04:33:19Z", - "updated_at": "2024-08-12T20:10:55Z", - "pushed_at": "2021-03-05T04:42:17Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 5, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 5, - "watchers": 5, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 344740961, - "name": "CVE-2021-21978", - "full_name": "skytina\/CVE-2021-21978", - "owner": { - "login": "skytina", - "id": 7366310, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/7366310?v=4", - "html_url": "https:\/\/github.com\/skytina", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/skytina\/CVE-2021-21978", - "description": "带回显版本的漏洞利用脚本", - "fork": false, - "created_at": "2021-03-05T08:15:27Z", - "updated_at": "2024-08-12T20:10:55Z", - "pushed_at": "2021-03-05T11:09:06Z", - "stargazers_count": 25, - "watchers_count": 25, - "has_discussions": false, - "forks_count": 5, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 5, - "watchers": 25, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-21985.json b/2021/CVE-2021-21985.json index 1303e6c3c1..be58afe3a4 100644 --- a/2021/CVE-2021-21985.json +++ b/2021/CVE-2021-21985.json @@ -1,37 +1,4 @@ [ - { - "id": 371223609, - "name": "CVE-2021-21985", - "full_name": "bigbroke\/CVE-2021-21985", - "owner": { - "login": "bigbroke", - "id": 77472382, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/77472382?v=4", - "html_url": "https:\/\/github.com\/bigbroke", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/bigbroke\/CVE-2021-21985", - "description": "Multiple vulnerabilities in the vSphere Client (HTML5) were privately reported to VMware. Updates and workarounds are available to address these vulnerabilities in affected VMware products.", - "fork": false, - "created_at": "2021-05-27T02:28:48Z", - "updated_at": "2021-05-27T14:19:48Z", - "pushed_at": "2021-05-27T02:30:02Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 2 - }, { "id": 371975592, "name": "CVE-2021-21985_PoC", @@ -65,79 +32,6 @@ "score": 0, "subscribers_count": 4 }, - { - "id": 372757311, - "name": "CVE-2021-21985-Checker", - "full_name": "onSec-fr\/CVE-2021-21985-Checker", - "owner": { - "login": "onSec-fr", - "id": 59887731, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59887731?v=4", - "html_url": "https:\/\/github.com\/onSec-fr", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/onSec-fr\/CVE-2021-21985-Checker", - "description": "CVE-2021-21985 Checker.", - "fork": false, - "created_at": "2021-06-01T08:31:05Z", - "updated_at": "2023-05-05T16:11:50Z", - "pushed_at": "2021-06-01T08:32:25Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 372936761, - "name": "CVE-2021-21985", - "full_name": "mauricelambert\/CVE-2021-21985", - "owner": { - "login": "mauricelambert", - "id": 50479118, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50479118?v=4", - "html_url": "https:\/\/github.com\/mauricelambert", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mauricelambert\/CVE-2021-21985", - "description": "This script check the CVE-2021-21985 vulnerability and patch on vCenter Server.", - "fork": false, - "created_at": "2021-06-01T19:12:29Z", - "updated_at": "2021-06-01T19:16:35Z", - "pushed_at": "2021-06-01T19:13:42Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve", - "cve-2021-21985", - "python3", - "security", - "security-scan", - "vcenter" - ], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 373496154, "name": "cve-2021-21985_exp", @@ -208,39 +102,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 374091686, - "name": "Project_CVE-2021-21985_PoC", - "full_name": "testanull\/Project_CVE-2021-21985_PoC", - "owner": { - "login": "testanull", - "id": 21060210, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/21060210?v=4", - "html_url": "https:\/\/github.com\/testanull", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/testanull\/Project_CVE-2021-21985_PoC", - "description": null, - "fork": false, - "created_at": "2021-06-05T11:03:13Z", - "updated_at": "2026-05-23T10:51:58Z", - "pushed_at": "2021-06-07T04:00:06Z", - "stargazers_count": 29, - "watchers_count": 29, - "has_discussions": false, - "forks_count": 5, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 5, - "watchers": 29, - "score": 0, - "subscribers_count": 2 - }, { "id": 384003238, "name": "CVE-2021-21985", diff --git a/2021/CVE-2021-22192.json b/2021/CVE-2021-22192.json index f5788c0293..5e96b8c978 100644 --- a/2021/CVE-2021-22192.json +++ b/2021/CVE-2021-22192.json @@ -31,38 +31,5 @@ "watchers": 38, "score": 0, "subscribers_count": 0 - }, - { - "id": 360465836, - "name": "Gitlab-RCE", - "full_name": "PetrusViet\/Gitlab-RCE", - "owner": { - "login": "PetrusViet", - "id": 63145078, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/63145078?v=4", - "html_url": "https:\/\/github.com\/PetrusViet", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/PetrusViet\/Gitlab-RCE", - "description": "CVE-2021-22192", - "fork": false, - "created_at": "2021-04-22T09:35:57Z", - "updated_at": "2026-07-28T14:26:12Z", - "pushed_at": "2021-04-28T04:39:38Z", - "stargazers_count": 12, - "watchers_count": 12, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 12, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2021/CVE-2021-22201.json b/2021/CVE-2021-22201.json deleted file mode 100644 index 68ae612cac..0000000000 --- a/2021/CVE-2021-22201.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 376590691, - "name": "CVE-2021-22201", - "full_name": "exp1orer\/CVE-2021-22201", - "owner": { - "login": "exp1orer", - "id": 25338973, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25338973?v=4", - "html_url": "https:\/\/github.com\/exp1orer", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/exp1orer\/CVE-2021-22201", - "description": "CVE-2021–22201 Arbitrary file read on Gitlab ", - "fork": false, - "created_at": "2021-06-13T16:30:47Z", - "updated_at": "2021-10-22T09:53:12Z", - "pushed_at": "2021-06-13T16:55:59Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-22204.json b/2021/CVE-2021-22204.json index 2ecad7c701..85b0ab15d3 100644 --- a/2021/CVE-2021-22204.json +++ b/2021/CVE-2021-22204.json @@ -1,106 +1,4 @@ [ - { - "id": 366482211, - "name": "CVE-2021-22204-exiftool", - "full_name": "convisolabs\/CVE-2021-22204-exiftool", - "owner": { - "login": "convisolabs", - "id": 92468795, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/92468795?v=4", - "html_url": "https:\/\/github.com\/convisolabs", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/convisolabs\/CVE-2021-22204-exiftool", - "description": "Python exploit for the CVE-2021-22204 vulnerability in Exiftool", - "fork": false, - "created_at": "2021-05-11T18:45:07Z", - "updated_at": "2026-07-29T01:14:21Z", - "pushed_at": "2021-05-20T21:42:43Z", - "stargazers_count": 97, - "watchers_count": 97, - "has_discussions": false, - "forks_count": 27, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve", - "exiftool" - ], - "visibility": "public", - "forks": 27, - "watchers": 97, - "score": 0, - "subscribers_count": 9 - }, - { - "id": 366651752, - "name": "CVE-2021-22204", - "full_name": "se162xg\/CVE-2021-22204", - "owner": { - "login": "se162xg", - "id": 64580307, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/64580307?v=4", - "html_url": "https:\/\/github.com\/se162xg", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/se162xg\/CVE-2021-22204", - "description": "exiftool arbitrary code execution vulnerability", - "fork": false, - "created_at": "2021-05-12T08:51:44Z", - "updated_at": "2025-12-07T04:14:26Z", - "pushed_at": "2021-05-12T09:09:56Z", - "stargazers_count": 12, - "watchers_count": 12, - "has_discussions": false, - "forks_count": 10, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 10, - "watchers": 12, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 369369026, - "name": "POC-CVE-2021-22204", - "full_name": "bilkoh\/POC-CVE-2021-22204", - "owner": { - "login": "bilkoh", - "id": 43228593, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43228593?v=4", - "html_url": "https:\/\/github.com\/bilkoh", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/bilkoh\/POC-CVE-2021-22204", - "description": "POC for exiftool vuln (CVE-2021-22204).", - "fork": false, - "created_at": "2021-05-21T00:14:52Z", - "updated_at": "2024-08-12T20:13:12Z", - "pushed_at": "2021-05-21T00:17:10Z", - "stargazers_count": 8, - "watchers_count": 8, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 8, - "score": 0, - "subscribers_count": 1 - }, { "id": 391882871, "name": "CVE-2021-22204", diff --git a/2021/CVE-2021-22214.json b/2021/CVE-2021-22214.json index 5bbbfbf928..6474dd818f 100644 --- a/2021/CVE-2021-22214.json +++ b/2021/CVE-2021-22214.json @@ -1,37 +1,4 @@ [ - { - "id": 379275650, - "name": "CVE-2021-22214", - "full_name": "aaminin\/CVE-2021-22214", - "owner": { - "login": "aaminin", - "id": 47250161, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47250161?v=4", - "html_url": "https:\/\/github.com\/aaminin", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/aaminin\/CVE-2021-22214", - "description": "Gitlab CI Lint API未授权 SSRF漏洞 (CVE-2021-22214)", - "fork": false, - "created_at": "2021-06-22T13:15:43Z", - "updated_at": "2024-08-12T20:14:09Z", - "pushed_at": "2021-06-22T04:35:08Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 12, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 12, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, { "id": 381405553, "name": "gitlab-cve-2021-22214", diff --git a/2021/CVE-2021-22893.json b/2021/CVE-2021-22893.json index bae3efe594..228ee4a7a9 100644 --- a/2021/CVE-2021-22893.json +++ b/2021/CVE-2021-22893.json @@ -32,39 +32,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 360203786, - "name": "CVE-2021-22893", - "full_name": "MRLEE123456\/CVE-2021-22893", - "owner": { - "login": "MRLEE123456", - "id": 45226222, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/45226222?v=4", - "html_url": "https:\/\/github.com\/MRLEE123456", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/MRLEE123456\/CVE-2021-22893", - "description": "Pulse Connect Secure RCE Vulnerability (CVE-2021-22893)", - "fork": false, - "created_at": "2021-04-21T14:39:42Z", - "updated_at": "2021-04-21T14:39:43Z", - "pushed_at": "2021-04-21T10:12:51Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 413204436, "name": "CVE-2021-22893", diff --git a/2021/CVE-2021-22986.json b/2021/CVE-2021-22986.json index 696998f968..84004f6a37 100644 --- a/2021/CVE-2021-22986.json +++ b/2021/CVE-2021-22986.json @@ -1,240 +1,4 @@ [ - { - "id": 348585275, - "name": "CVE-2021-22986-Poc", - "full_name": "dorkerdevil\/CVE-2021-22986-Poc", - "owner": { - "login": "dorkerdevil", - "id": 15796745, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/15796745?v=4", - "html_url": "https:\/\/github.com\/dorkerdevil", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dorkerdevil\/CVE-2021-22986-Poc", - "description": "This is a Poc for BIGIP iControl unauth RCE ", - "fork": false, - "created_at": "2021-03-17T05:02:45Z", - "updated_at": "2025-04-17T00:33:02Z", - "pushed_at": "2021-03-17T05:10:03Z", - "stargazers_count": 51, - "watchers_count": 51, - "has_discussions": false, - "forks_count": 10, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 10, - "watchers": 51, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 349525234, - "name": "f5_rce_poc", - "full_name": "S1xHcL\/f5_rce_poc", - "owner": { - "login": "S1xHcL", - "id": 47764705, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47764705?v=4", - "html_url": "https:\/\/github.com\/S1xHcL", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/S1xHcL\/f5_rce_poc", - "description": "cve-2021-22986 f5 rce 漏洞批量检测 poc", - "fork": false, - "created_at": "2021-03-19T18:50:22Z", - "updated_at": "2024-08-12T20:11:21Z", - "pushed_at": "2021-03-27T10:02:59Z", - "stargazers_count": 27, - "watchers_count": 27, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 4, - "watchers": 27, - "score": 0, - "subscribers_count": 2 - }, - { - "id": 349660227, - "name": "westone-CVE-2021-22986-scanner", - "full_name": "Osyanina\/westone-CVE-2021-22986-scanner", - "owner": { - "login": "Osyanina", - "id": 78467376, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78467376?v=4", - "html_url": "https:\/\/github.com\/Osyanina", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Osyanina\/westone-CVE-2021-22986-scanner", - "description": "A vulnerability scanner that detects CVE-2021-22986 vulnerabilities.", - "fork": false, - "created_at": "2021-03-20T07:45:38Z", - "updated_at": "2021-03-20T07:46:00Z", - "pushed_at": "2021-03-21T03:39:41Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 349930753, - "name": "F5_RCE", - "full_name": "safesword\/F5_RCE", - "owner": { - "login": "safesword", - "id": 79968310, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79968310?v=4", - "html_url": "https:\/\/github.com\/safesword", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/safesword\/F5_RCE", - "description": "CVE-2021-22986 F5 BIG-IP iControl 命令执行漏洞", - "fork": false, - "created_at": "2021-03-21T07:40:51Z", - "updated_at": "2022-08-13T08:25:58Z", - "pushed_at": "2021-03-21T07:40:59Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 5, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2021-22986" - ], - "visibility": "public", - "forks": 5, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 350185065, - "name": "CVE-2021-22986", - "full_name": "microvorld\/CVE-2021-22986", - "owner": { - "login": "microvorld", - "id": 30143943, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/30143943?v=4", - "html_url": "https:\/\/github.com\/microvorld", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/microvorld\/CVE-2021-22986", - "description": "F5 BIG-IP\/BIG-IQ iControl Rest API SSRF to RCE", - "fork": false, - "created_at": "2021-03-22T02:46:33Z", - "updated_at": "2025-03-09T18:29:15Z", - "pushed_at": "2021-03-21T17:10:41Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 9, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 9, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 350243656, - "name": "CVE-2021-22986", - "full_name": "Al1ex\/CVE-2021-22986", - "owner": { - "login": "Al1ex", - "id": 38161463, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38161463?v=4", - "html_url": "https:\/\/github.com\/Al1ex", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Al1ex\/CVE-2021-22986", - "description": "CVE-2021-22986 & F5 BIG-IP RCE", - "fork": false, - "created_at": "2021-03-22T07:13:50Z", - "updated_at": "2026-05-29T08:08:10Z", - "pushed_at": "2021-04-03T12:56:37Z", - "stargazers_count": 91, - "watchers_count": 91, - "has_discussions": false, - "forks_count": 29, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2021-22986", - "f5-bigip" - ], - "visibility": "public", - "forks": 29, - "watchers": 91, - "score": 0, - "subscribers_count": 3 - }, - { - "id": 350261633, - "name": "CVE-2021-22986", - "full_name": "kiri-48\/CVE-2021-22986", - "owner": { - "login": "kiri-48", - "id": 43057210, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43057210?v=4", - "html_url": "https:\/\/github.com\/kiri-48", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/kiri-48\/CVE-2021-22986", - "description": null, - "fork": false, - "created_at": "2021-03-22T08:19:11Z", - "updated_at": "2023-06-01T09:18:39Z", - "pushed_at": "2021-03-22T08:32:23Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 350550235, "name": "CVE-2021-22986_Check", @@ -268,105 +32,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 351650917, - "name": "CVE-202122986-EXP", - "full_name": "yaunsky\/CVE-202122986-EXP", - "owner": { - "login": "yaunsky", - "id": 48243087, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48243087?v=4", - "html_url": "https:\/\/github.com\/yaunsky", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/yaunsky\/CVE-202122986-EXP", - "description": "F5 BIG-IP远程代码执行；cve-2021-22986，批量检测；命令执行利用", - "fork": false, - "created_at": "2021-03-26T03:32:06Z", - "updated_at": "2024-08-12T20:11:33Z", - "pushed_at": "2021-03-26T05:09:54Z", - "stargazers_count": 8, - "watchers_count": 8, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 8, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 352531717, - "name": "CVE-2021-22986", - "full_name": "Tas9er\/CVE-2021-22986", - "owner": { - "login": "Tas9er", - "id": 57090266, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57090266?v=4", - "html_url": "https:\/\/github.com\/Tas9er", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Tas9er\/CVE-2021-22986", - "description": "Code By:Tas9er \/ F5 BIG-IP 远程命令执行漏洞", - "fork": false, - "created_at": "2021-03-29T05:56:21Z", - "updated_at": "2026-06-30T12:01:09Z", - "pushed_at": "2021-03-29T05:58:51Z", - "stargazers_count": 13, - "watchers_count": 13, - "has_discussions": false, - "forks_count": 5, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 5, - "watchers": 13, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 352644816, - "name": "CVE-2021-22986", - "full_name": "dotslashed\/CVE-2021-22986", - "owner": { - "login": "dotslashed", - "id": 73475291, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/73475291?v=4", - "html_url": "https:\/\/github.com\/dotslashed", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dotslashed\/CVE-2021-22986", - "description": null, - "fork": false, - "created_at": "2021-03-29T13:01:08Z", - "updated_at": "2021-03-29T13:04:49Z", - "pushed_at": "2021-03-29T13:04:47Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 497326298, "name": "F5-BIG-IP-POC", diff --git a/2021/CVE-2021-23132.json b/2021/CVE-2021-23132.json deleted file mode 100644 index f901223d62..0000000000 --- a/2021/CVE-2021-23132.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 343973725, - "name": "CVE-2021-23132", - "full_name": "HoangKien1020\/CVE-2021-23132", - "owner": { - "login": "HoangKien1020", - "id": 24661746, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/24661746?v=4", - "html_url": "https:\/\/github.com\/HoangKien1020", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/HoangKien1020\/CVE-2021-23132", - "description": "com_media allowed paths that are not intended for image uploads to RCE", - "fork": false, - "created_at": "2021-03-03T02:13:57Z", - "updated_at": "2025-03-26T16:29:48Z", - "pushed_at": "2021-03-03T03:52:10Z", - "stargazers_count": 71, - "watchers_count": 71, - "has_discussions": false, - "forks_count": 30, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 30, - "watchers": 71, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-23383.json b/2021/CVE-2021-23383.json index 7daf683bb0..3281eaf861 100644 --- a/2021/CVE-2021-23383.json +++ b/2021/CVE-2021-23383.json @@ -1,37 +1,4 @@ [ - { - "id": 380873715, - "name": "Check-CVE-2021-23383", - "full_name": "dn9uy3n\/Check-CVE-2021-23383", - "owner": { - "login": "dn9uy3n", - "id": 21336403, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/21336403?v=4", - "html_url": "https:\/\/github.com\/dn9uy3n", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dn9uy3n\/Check-CVE-2021-23383", - "description": "Check the conditions for exploiting CVE-2021-23383 through the handlebars library version assessment.", - "fork": false, - "created_at": "2021-06-28T01:29:31Z", - "updated_at": "2024-08-12T20:14:17Z", - "pushed_at": "2021-06-28T01:34:32Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, { "id": 875210476, "name": "CVE-2021-23383", diff --git a/2021/CVE-2021-24027.json b/2021/CVE-2021-24027.json deleted file mode 100644 index baa673a371..0000000000 --- a/2021/CVE-2021-24027.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 346747763, - "name": "whatsapp-mitd-mitm", - "full_name": "CENSUS\/whatsapp-mitd-mitm", - "owner": { - "login": "CENSUS", - "id": 11769276, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/11769276?v=4", - "html_url": "https:\/\/github.com\/CENSUS", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/CENSUS\/whatsapp-mitd-mitm", - "description": "PoC and tools for exploiting CVE-2020-6516 (Chrome) and CVE-2021-24027 (WhatsApp)", - "fork": false, - "created_at": "2021-03-11T15:27:25Z", - "updated_at": "2026-07-23T08:47:37Z", - "pushed_at": "2021-05-25T11:14:56Z", - "stargazers_count": 149, - "watchers_count": 149, - "has_discussions": false, - "forks_count": 32, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 32, - "watchers": 149, - "score": 0, - "subscribers_count": 14 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-24085.json b/2021/CVE-2021-24085.json deleted file mode 100644 index ea7e46af11..0000000000 --- a/2021/CVE-2021-24085.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 339107043, - "name": "CVE-2021-24085", - "full_name": "sourceincite\/CVE-2021-24085", - "owner": { - "login": "sourceincite", - "id": 13770985, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/13770985?v=4", - "html_url": "https:\/\/github.com\/sourceincite", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sourceincite\/CVE-2021-24085", - "description": null, - "fork": false, - "created_at": "2021-02-15T14:41:25Z", - "updated_at": "2026-02-14T21:40:44Z", - "pushed_at": "2021-02-15T15:11:00Z", - "stargazers_count": 71, - "watchers_count": 71, - "has_discussions": false, - "forks_count": 18, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 18, - "watchers": 71, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-24086.json b/2021/CVE-2021-24086.json index 5e368a19f1..d46ca612bd 100644 --- a/2021/CVE-2021-24086.json +++ b/2021/CVE-2021-24086.json @@ -1,43 +1,4 @@ [ - { - "id": 355514476, - "name": "CVE-2021-24086", - "full_name": "0vercl0k\/CVE-2021-24086", - "owner": { - "login": "0vercl0k", - "id": 1476421, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1476421?v=4", - "html_url": "https:\/\/github.com\/0vercl0k", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0vercl0k\/CVE-2021-24086", - "description": "Proof of concept for CVE-2021-24086, a NULL dereference in tcpip.sys triggered remotely.", - "fork": false, - "created_at": "2021-04-07T11:10:40Z", - "updated_at": "2026-05-27T10:41:34Z", - "pushed_at": "2021-04-15T12:46:54Z", - "stargazers_count": 236, - "watchers_count": 236, - "has_discussions": false, - "forks_count": 52, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2021-24086", - "fragmentation", - "ipv6", - "ipv6preassembledatagram", - "tcpip" - ], - "visibility": "public", - "forks": 52, - "watchers": 236, - "score": 0, - "subscribers_count": 1 - }, { "id": 431718666, "name": "CVE-2021-24086-exp", diff --git a/2021/CVE-2021-24096.json b/2021/CVE-2021-24096.json deleted file mode 100644 index 763117417a..0000000000 --- a/2021/CVE-2021-24096.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 338023596, - "name": "CVE-2021-24096", - "full_name": "FunPhishing\/CVE-2021-24096", - "owner": { - "login": "FunPhishing", - "id": 77312720, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/77312720?v=4", - "html_url": "https:\/\/github.com\/FunPhishing", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/FunPhishing\/CVE-2021-24096", - "description": null, - "fork": false, - "created_at": "2021-02-11T12:32:34Z", - "updated_at": "2024-08-30T01:54:22Z", - "pushed_at": "2021-02-11T12:33:02Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-24098.json b/2021/CVE-2021-24098.json deleted file mode 100644 index 4e849763d1..0000000000 --- a/2021/CVE-2021-24098.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 353613611, - "name": "CVE-2021-24098", - "full_name": "waleedassar\/CVE-2021-24098", - "owner": { - "login": "waleedassar", - "id": 5983995, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5983995?v=4", - "html_url": "https:\/\/github.com\/waleedassar", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/waleedassar\/CVE-2021-24098", - "description": "POC for CVE-2021-24098", - "fork": false, - "created_at": "2021-04-01T07:29:44Z", - "updated_at": "2024-12-27T09:18:47Z", - "pushed_at": "2021-04-01T07:34:23Z", - "stargazers_count": 13, - "watchers_count": 13, - "has_discussions": false, - "forks_count": 6, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 6, - "watchers": 13, - "score": 0, - "subscribers_count": 3 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-25281.json b/2021/CVE-2021-25281.json deleted file mode 100644 index 11c009f807..0000000000 --- a/2021/CVE-2021-25281.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 342564562, - "name": "CVE-2021-25281", - "full_name": "Immersive-Labs-Sec\/CVE-2021-25281", - "owner": { - "login": "Immersive-Labs-Sec", - "id": 79456607, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79456607?v=4", - "html_url": "https:\/\/github.com\/Immersive-Labs-Sec", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Immersive-Labs-Sec\/CVE-2021-25281", - "description": "Chaining CVE-2021-25281 and CVE-2021-25282 to exploit a SaltStack", - "fork": false, - "created_at": "2021-02-26T12:08:25Z", - "updated_at": "2026-06-19T03:30:06Z", - "pushed_at": "2021-03-06T12:50:35Z", - "stargazers_count": 27, - "watchers_count": 27, - "has_discussions": false, - "forks_count": 7, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 7, - "watchers": 27, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-25641.json b/2021/CVE-2021-25641.json index d55e11864c..3467480f8b 100644 --- a/2021/CVE-2021-25641.json +++ b/2021/CVE-2021-25641.json @@ -1,37 +1,4 @@ [ - { - "id": 374287562, - "name": "CVE-2021-25641-Proof-of-Concept", - "full_name": "Dor-Tumarkin\/CVE-2021-25641-Proof-of-Concept", - "owner": { - "login": "Dor-Tumarkin", - "id": 23374015, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/23374015?v=4", - "html_url": "https:\/\/github.com\/Dor-Tumarkin", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Dor-Tumarkin\/CVE-2021-25641-Proof-of-Concept", - "description": "Apache\/Alibaba Dubbo <= 2.7.3 PoC Code for CVE-2021-25641 RCE via Deserialization of Untrusted Data; Affects Versions <= 2.7.6 With Different Gadgets", - "fork": false, - "created_at": "2021-06-06T06:41:36Z", - "updated_at": "2025-11-24T03:08:17Z", - "pushed_at": "2021-06-06T08:41:19Z", - "stargazers_count": 53, - "watchers_count": 53, - "has_discussions": false, - "forks_count": 10, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 10, - "watchers": 53, - "score": 0, - "subscribers_count": 1 - }, { "id": 564175641, "name": "CVE-2021-25641", diff --git a/2021/CVE-2021-25646.json b/2021/CVE-2021-25646.json index d7f1329fbf..4b438d44bb 100644 --- a/2021/CVE-2021-25646.json +++ b/2021/CVE-2021-25646.json @@ -1,136 +1,4 @@ [ - { - "id": 335501856, - "name": "cve-2021-25646", - "full_name": "yaunsky\/cve-2021-25646", - "owner": { - "login": "yaunsky", - "id": 48243087, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48243087?v=4", - "html_url": "https:\/\/github.com\/yaunsky", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/yaunsky\/cve-2021-25646", - "description": "Apache Druid 远程代码执行;检测脚本", - "fork": false, - "created_at": "2021-02-03T03:59:52Z", - "updated_at": "2025-12-03T15:19:20Z", - "pushed_at": "2021-02-03T06:06:24Z", - "stargazers_count": 17, - "watchers_count": 17, - "has_discussions": false, - "forks_count": 8, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 8, - "watchers": 17, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 335533066, - "name": "CVE-2021-25646", - "full_name": "lp008\/CVE-2021-25646", - "owner": { - "login": "lp008", - "id": 11436275, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/11436275?v=4", - "html_url": "https:\/\/github.com\/lp008", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/lp008\/CVE-2021-25646", - "description": null, - "fork": false, - "created_at": "2021-02-03T06:45:54Z", - "updated_at": "2023-04-12T02:14:41Z", - "pushed_at": "2021-02-03T06:53:25Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 335952760, - "name": "CVE-2021-25646-GUI", - "full_name": "Ormicron\/CVE-2021-25646-GUI", - "owner": { - "login": "Ormicron", - "id": 26640179, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26640179?v=4", - "html_url": "https:\/\/github.com\/Ormicron", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Ormicron\/CVE-2021-25646-GUI", - "description": "CSharp CVE-2021-25646-GUI", - "fork": false, - "created_at": "2021-02-04T12:51:01Z", - "updated_at": "2021-09-09T06:48:52Z", - "pushed_at": "2021-02-05T03:54:57Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 338562736, - "name": "Apache-Druid-CVE-2021-25646", - "full_name": "Vulnmachines\/Apache-Druid-CVE-2021-25646", - "owner": { - "login": "Vulnmachines", - "id": 79006904, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79006904?v=4", - "html_url": "https:\/\/github.com\/Vulnmachines", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Vulnmachines\/Apache-Druid-CVE-2021-25646", - "description": null, - "fork": false, - "created_at": "2021-02-13T11:48:35Z", - "updated_at": "2024-08-12T20:10:20Z", - "pushed_at": "2021-06-10T17:24:55Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, { "id": 346861222, "name": "PocList", @@ -168,39 +36,6 @@ "score": 0, "subscribers_count": 34 }, - { - "id": 357955989, - "name": "CVE-2021-25646", - "full_name": "givemefivw\/CVE-2021-25646", - "owner": { - "login": "givemefivw", - "id": 65514141, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/65514141?v=4", - "html_url": "https:\/\/github.com\/givemefivw", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/givemefivw\/CVE-2021-25646", - "description": "CVE-2021-25646 Apache Druid 远程代码执行漏洞 Wker脚本", - "fork": false, - "created_at": "2021-04-14T15:36:04Z", - "updated_at": "2022-05-17T02:20:31Z", - "pushed_at": "2021-04-15T09:55:23Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, { "id": 437570654, "name": "CVE-2021-25646", diff --git a/2021/CVE-2021-25679.json b/2021/CVE-2021-25679.json deleted file mode 100644 index f2b15192c3..0000000000 --- a/2021/CVE-2021-25679.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 344250257, - "name": "AdTran-Personal-Phone-Manager-Vulns", - "full_name": "3ndG4me\/AdTran-Personal-Phone-Manager-Vulns", - "owner": { - "login": "3ndG4me", - "id": 14339392, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/14339392?v=4", - "html_url": "https:\/\/github.com\/3ndG4me", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/3ndG4me\/AdTran-Personal-Phone-Manager-Vulns", - "description": "A repository hosting write ups for the 0 days CVE-2021-25679, CVE-2021-25680, and CVE-2021-25681 ", - "fork": false, - "created_at": "2021-03-03T20:06:54Z", - "updated_at": "2024-08-12T20:10:52Z", - "pushed_at": "2021-04-17T20:03:28Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-25735.json b/2021/CVE-2021-25735.json deleted file mode 100644 index bd00d0fa89..0000000000 --- a/2021/CVE-2021-25735.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 360429516, - "name": "CVE-2021-25735", - "full_name": "darryk10\/CVE-2021-25735", - "owner": { - "login": "darryk10", - "id": 77834235, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/77834235?v=4", - "html_url": "https:\/\/github.com\/darryk10", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/darryk10\/CVE-2021-25735", - "description": "Exploit CVE-2021-25735: Kubernetes Validating Admission Webhook Bypass", - "fork": false, - "created_at": "2021-04-22T07:25:31Z", - "updated_at": "2025-05-25T13:45:08Z", - "pushed_at": "2021-04-23T13:11:17Z", - "stargazers_count": 17, - "watchers_count": 17, - "has_discussions": false, - "forks_count": 5, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 5, - "watchers": 17, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-26121.json b/2021/CVE-2021-26121.json deleted file mode 100644 index 8ceee4264d..0000000000 --- a/2021/CVE-2021-26121.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 338405594, - "name": "CVE-2021-26121", - "full_name": "sourceincite\/CVE-2021-26121", - "owner": { - "login": "sourceincite", - "id": 13770985, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/13770985?v=4", - "html_url": "https:\/\/github.com\/sourceincite", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sourceincite\/CVE-2021-26121", - "description": null, - "fork": false, - "created_at": "2021-02-12T18:53:37Z", - "updated_at": "2024-08-12T20:10:19Z", - "pushed_at": "2021-04-30T15:45:02Z", - "stargazers_count": 12, - "watchers_count": 12, - "has_discussions": false, - "forks_count": 5, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 5, - "watchers": 12, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-26295.json b/2021/CVE-2021-26295.json deleted file mode 100644 index e24dcc3bd5..0000000000 --- a/2021/CVE-2021-26295.json +++ /dev/null @@ -1,167 +0,0 @@ -[ - { - "id": 350761950, - "name": "CVE-2021-26295", - "full_name": "yumusb\/CVE-2021-26295", - "owner": { - "login": "yumusb", - "id": 43062104, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43062104?v=4", - "html_url": "https:\/\/github.com\/yumusb", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/yumusb\/CVE-2021-26295", - "description": null, - "fork": false, - "created_at": "2021-03-23T15:25:01Z", - "updated_at": "2024-08-12T20:11:29Z", - "pushed_at": "2021-04-01T10:38:18Z", - "stargazers_count": 23, - "watchers_count": 23, - "has_discussions": false, - "forks_count": 11, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 11, - "watchers": 23, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 351001241, - "name": "CVE-2021-26295-Apache-OFBiz", - "full_name": "rakjong\/CVE-2021-26295-Apache-OFBiz", - "owner": { - "login": "rakjong", - "id": 38517715, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38517715?v=4", - "html_url": "https:\/\/github.com\/rakjong", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/rakjong\/CVE-2021-26295-Apache-OFBiz", - "description": "CVE-2021-26295 Apache OFBiz rmi反序列化POC", - "fork": false, - "created_at": "2021-03-24T08:25:04Z", - "updated_at": "2022-01-13T12:15:38Z", - "pushed_at": "2021-03-24T09:01:11Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 4, - "score": 0, - "subscribers_count": 2 - }, - { - "id": 351367125, - "name": "CVE-2021-26295", - "full_name": "dskho\/CVE-2021-26295", - "owner": { - "login": "dskho", - "id": 32945923, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32945923?v=4", - "html_url": "https:\/\/github.com\/dskho", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dskho\/CVE-2021-26295", - "description": "CVE-2021-26295 EXP 可成功反弹Shell", - "fork": false, - "created_at": "2021-03-25T08:50:10Z", - "updated_at": "2024-08-12T20:11:32Z", - "pushed_at": "2021-03-25T02:55:27Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 10, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 10, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 356332111, - "name": "CVE-2021-26295--", - "full_name": "coolyin001\/CVE-2021-26295--", - "owner": { - "login": "coolyin001", - "id": 82075508, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/82075508?v=4", - "html_url": "https:\/\/github.com\/coolyin001", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/coolyin001\/CVE-2021-26295--", - "description": "CVE-2021-26295-POC 利用DNSlog进行CVE-2021-26295的漏洞验证。 使用 poc：将目标放于target.txt后运行python poc.py即可。（Jdk环境需<12，否则ysoserial无法正常生成有效载荷） exp：python exp.py https:\/\/baidu.com然后进入命令执行界面（无回显）", - "fork": false, - "created_at": "2021-04-09T16:20:18Z", - "updated_at": "2021-04-09T16:20:21Z", - "pushed_at": "2021-04-09T16:22:14Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 367057442, - "name": "ofbiz-poc", - "full_name": "yuaneuro\/ofbiz-poc", - "owner": { - "login": "yuaneuro", - "id": 42265015, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42265015?v=4", - "html_url": "https:\/\/github.com\/yuaneuro", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/yuaneuro\/ofbiz-poc", - "description": "CVE-2020-9496和CVE-2021-26295利用dnslog批量验证漏洞poc及exp", - "fork": false, - "created_at": "2021-05-13T13:28:15Z", - "updated_at": "2024-08-12T20:12:58Z", - "pushed_at": "2021-05-13T13:53:50Z", - "stargazers_count": 6, - "watchers_count": 6, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 6, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-26415.json b/2021/CVE-2021-26415.json deleted file mode 100644 index fec7a66566..0000000000 --- a/2021/CVE-2021-26415.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 360537622, - "name": "CVE-2021-26415", - "full_name": "adenkiewicz\/CVE-2021-26415", - "owner": { - "login": "adenkiewicz", - "id": 1060275, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1060275?v=4", - "html_url": "https:\/\/github.com\/adenkiewicz", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/adenkiewicz\/CVE-2021-26415", - "description": "All files needed to reproduce PoC for CVE-2021-26415: https:\/\/www.cloaked.pl\/2021\/04\/cve-2021-26415\/", - "fork": false, - "created_at": "2021-04-22T13:55:40Z", - "updated_at": "2025-04-13T15:42:44Z", - "pushed_at": "2021-04-22T14:04:46Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-26700.json b/2021/CVE-2021-26700.json index 4dfb7cb16d..95c10491ae 100644 --- a/2021/CVE-2021-26700.json +++ b/2021/CVE-2021-26700.json @@ -1,37 +1,4 @@ [ - { - "id": 338818030, - "name": "CVE-2021-26700", - "full_name": "jackadamson\/CVE-2021-26700", - "owner": { - "login": "jackadamson", - "id": 7891953, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/7891953?v=4", - "html_url": "https:\/\/github.com\/jackadamson", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/jackadamson\/CVE-2021-26700", - "description": "RCE in NPM VSCode Extension", - "fork": false, - "created_at": "2021-02-14T14:01:04Z", - "updated_at": "2022-10-18T06:03:27Z", - "pushed_at": "2021-04-11T13:45:11Z", - "stargazers_count": 20, - "watchers_count": 20, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 20, - "score": 0, - "subscribers_count": 2 - }, { "id": 614903179, "name": "CVE-2021-26700", diff --git a/2021/CVE-2021-26708.json b/2021/CVE-2021-26708.json index 74af92bb00..60d1281f54 100644 --- a/2021/CVE-2021-26708.json +++ b/2021/CVE-2021-26708.json @@ -1,70 +1,4 @@ [ - { - "id": 339197991, - "name": "vsock_poc", - "full_name": "jordan9001\/vsock_poc", - "owner": { - "login": "jordan9001", - "id": 10539462, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/10539462?v=4", - "html_url": "https:\/\/github.com\/jordan9001", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/jordan9001\/vsock_poc", - "description": "Investigating the bug behind CVE-2021-26708", - "fork": false, - "created_at": "2021-02-15T20:27:06Z", - "updated_at": "2025-08-26T04:46:28Z", - "pushed_at": "2021-02-16T03:03:54Z", - "stargazers_count": 28, - "watchers_count": 28, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 28, - "score": 0, - "subscribers_count": 3 - }, - { - "id": 347897537, - "name": "CVE-2021-26708", - "full_name": "azpema\/CVE-2021-26708", - "owner": { - "login": "azpema", - "id": 43499244, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43499244?v=4", - "html_url": "https:\/\/github.com\/azpema", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/azpema\/CVE-2021-26708", - "description": null, - "fork": false, - "created_at": "2021-03-15T08:52:54Z", - "updated_at": "2022-01-14T12:06:51Z", - "pushed_at": "2021-06-12T14:22:54Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1326278899, "name": "vulnerability-analysis-", diff --git a/2021/CVE-2021-26714.json b/2021/CVE-2021-26714.json deleted file mode 100644 index 0278028c12..0000000000 --- a/2021/CVE-2021-26714.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 375060087, - "name": "CVE-2021-26714", - "full_name": "PwCNO-CTO\/CVE-2021-26714", - "owner": { - "login": "PwCNO-CTO", - "id": 58770486, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/58770486?v=4", - "html_url": "https:\/\/github.com\/PwCNO-CTO", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/PwCNO-CTO\/CVE-2021-26714", - "description": "Directory Traversal vulnerability in Enterprise License Manager portal in Mitel MiContact Center Enterprise before 9.4", - "fork": false, - "created_at": "2021-06-08T15:33:51Z", - "updated_at": "2021-06-08T15:34:26Z", - "pushed_at": "2021-06-08T15:34:22Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-26814.json b/2021/CVE-2021-26814.json index 5cad2fc15d..df05d723c9 100644 --- a/2021/CVE-2021-26814.json +++ b/2021/CVE-2021-26814.json @@ -1,70 +1,4 @@ [ - { - "id": 368141608, - "name": "CVE-2021-26814", - "full_name": "WickdDavid\/CVE-2021-26814", - "owner": { - "login": "WickdDavid", - "id": 18442485, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18442485?v=4", - "html_url": "https:\/\/github.com\/WickdDavid", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/WickdDavid\/CVE-2021-26814", - "description": "A simple python PoC to exploit CVE-2021-26814 and gain RCE on Wazuh Manager (v.4.0.0-4.0.3) through the API service.", - "fork": false, - "created_at": "2021-05-17T10:13:47Z", - "updated_at": "2025-02-05T07:18:45Z", - "pushed_at": "2021-05-18T15:15:40Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 368546138, - "name": "CVE-2021-26814", - "full_name": "CYS4srl\/CVE-2021-26814", - "owner": { - "login": "CYS4srl", - "id": 72195371, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/72195371?v=4", - "html_url": "https:\/\/github.com\/CYS4srl", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/CYS4srl\/CVE-2021-26814", - "description": "PoC of CVE-2021-26814", - "fork": false, - "created_at": "2021-05-18T13:45:47Z", - "updated_at": "2021-09-12T05:15:35Z", - "pushed_at": "2021-05-18T15:13:16Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, { "id": 384737658, "name": "Internet-Security-Project---CVE-2021-26814", diff --git a/2021/CVE-2021-26828.json b/2021/CVE-2021-26828.json index 34dda3d3e9..2df65f3dc3 100644 --- a/2021/CVE-2021-26828.json +++ b/2021/CVE-2021-26828.json @@ -1,37 +1,4 @@ [ - { - "id": 353202709, - "name": "CVE-2021-26828_ScadaBR_RCE", - "full_name": "hev0x\/CVE-2021-26828_ScadaBR_RCE", - "owner": { - "login": "hev0x", - "id": 6265911, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/6265911?v=4", - "html_url": "https:\/\/github.com\/hev0x", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/hev0x\/CVE-2021-26828_ScadaBR_RCE", - "description": null, - "fork": false, - "created_at": "2021-03-31T02:39:02Z", - "updated_at": "2026-02-04T07:11:39Z", - "pushed_at": "2021-06-11T03:53:22Z", - "stargazers_count": 9, - "watchers_count": 9, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 4, - "watchers": 9, - "score": 0, - "subscribers_count": 2 - }, { "id": 992948486, "name": "CVE-2021-26828-Ultimate", diff --git a/2021/CVE-2021-26832.json b/2021/CVE-2021-26832.json deleted file mode 100644 index 7315c95909..0000000000 --- a/2021/CVE-2021-26832.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 357423084, - "name": "CVE-2021-26832", - "full_name": "gal-nagli\/CVE-2021-26832", - "owner": { - "login": "gal-nagli", - "id": 35578316, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/35578316?v=4", - "html_url": "https:\/\/github.com\/gal-nagli", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/gal-nagli\/CVE-2021-26832", - "description": "Cross Site Scripting (XSS) at the \"Reset Password\" page form of Priority Enterprise Management System v8.00 allows attackers to execute javascript on behalf of the victim by sending a malicious URL or directing the victim to a malicious site.", - "fork": false, - "created_at": "2021-04-13T04:25:31Z", - "updated_at": "2024-08-12T20:12:06Z", - "pushed_at": "2021-04-13T04:26:25Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 5, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-26855.json b/2021/CVE-2021-26855.json index 43537d4581..24b0d33a3c 100644 --- a/2021/CVE-2021-26855.json +++ b/2021/CVE-2021-26855.json @@ -1,317 +1,4 @@ [ - { - "id": 344161221, - "name": "exchange-0days-202103", - "full_name": "sgnls\/exchange-0days-202103", - "owner": { - "login": "sgnls", - "id": 11134228, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/11134228?v=4", - "html_url": "https:\/\/github.com\/sgnls", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sgnls\/exchange-0days-202103", - "description": "IoC determination for exploitation of CVE-2021-26855, CVE-2021-26857, CVE-2021-26858 and CVE-2021-27065.", - "fork": false, - "created_at": "2021-03-03T14:50:16Z", - "updated_at": "2022-11-25T07:49:01Z", - "pushed_at": "2021-03-15T11:42:06Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 5, - "score": 0, - "subscribers_count": 2 - }, - { - "id": 344210374, - "name": "HAFNIUM-IOC", - "full_name": "soteria-security\/HAFNIUM-IOC", - "owner": { - "login": "soteria-security", - "id": 49722282, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/49722282?v=4", - "html_url": "https:\/\/github.com\/soteria-security", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/soteria-security\/HAFNIUM-IOC", - "description": "A PowerShell script to identify indicators of exploitation of CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, and CVE-2021-26865", - "fork": false, - "created_at": "2021-03-03T17:36:18Z", - "updated_at": "2025-03-14T23:54:58Z", - "pushed_at": "2021-03-05T17:09:01Z", - "stargazers_count": 22, - "watchers_count": 22, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 22, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 344742582, - "name": "exchange_webshell_detection", - "full_name": "cert-lv\/exchange_webshell_detection", - "owner": { - "login": "cert-lv", - "id": 22764485, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/22764485?v=4", - "html_url": "https:\/\/github.com\/cert-lv", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/cert-lv\/exchange_webshell_detection", - "description": "Detect webshells dropped on Microsoft Exchange servers exploited through \"proxylogon\" group of vulnerabilites (CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065)", - "fork": false, - "created_at": "2021-03-05T08:22:07Z", - "updated_at": "2026-01-12T17:08:46Z", - "pushed_at": "2021-03-16T08:34:14Z", - "stargazers_count": 99, - "watchers_count": 99, - "has_discussions": false, - "forks_count": 19, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "blueteam", - "exchange-server", - "infosec", - "iocs", - "security", - "security-audit" - ], - "visibility": "public", - "forks": 19, - "watchers": 99, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 345052378, - "name": "Microsoft_Exchange_Server_SSRF_CVE-2021-26855", - "full_name": "conjojo\/Microsoft_Exchange_Server_SSRF_CVE-2021-26855", - "owner": { - "login": "conjojo", - "id": 79626719, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79626719?v=4", - "html_url": "https:\/\/github.com\/conjojo", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/conjojo\/Microsoft_Exchange_Server_SSRF_CVE-2021-26855", - "description": "Microsoft Exchange Server SSRF漏洞(CVE-2021-26855)", - "fork": false, - "created_at": "2021-03-06T09:15:55Z", - "updated_at": "2026-08-04T08:01:08Z", - "pushed_at": "2021-03-06T10:34:49Z", - "stargazers_count": 35, - "watchers_count": 35, - "has_discussions": false, - "forks_count": 8, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 8, - "watchers": 35, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 345173055, - "name": "CVE-2021-26855-SSRF", - "full_name": "pussycat0x\/CVE-2021-26855-SSRF", - "owner": { - "login": "pussycat0x", - "id": 65701233, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/65701233?v=4", - "html_url": "https:\/\/github.com\/pussycat0x", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/pussycat0x\/CVE-2021-26855-SSRF", - "description": "This script helps to identify CVE-2021-26855 ssrf Poc", - "fork": false, - "created_at": "2021-03-06T19:03:00Z", - "updated_at": "2026-06-19T09:12:19Z", - "pushed_at": "2021-03-10T07:41:56Z", - "stargazers_count": 23, - "watchers_count": 23, - "has_discussions": false, - "forks_count": 12, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2021-26855-ssrf", - "microsoft-exchange", - "poc", - "proxylogon", - "ssrf" - ], - "visibility": "public", - "forks": 12, - "watchers": 23, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 345228496, - "name": "CVE-2021-26855-SSRF-Exchange", - "full_name": "La3B0z\/CVE-2021-26855-SSRF-Exchange", - "owner": { - "login": "La3B0z", - "id": 10507748, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/10507748?v=4", - "html_url": "https:\/\/github.com\/La3B0z", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/La3B0z\/CVE-2021-26855-SSRF-Exchange", - "description": "CVE-2021-26855 SSRF Exchange Server", - "fork": false, - "created_at": "2021-03-07T00:55:16Z", - "updated_at": "2022-11-09T18:11:26Z", - "pushed_at": "2021-03-06T18:57:43Z", - "stargazers_count": 6, - "watchers_count": 6, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 6, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 345337490, - "name": "exchange_proxylogon", - "full_name": "mekhalleh\/exchange_proxylogon", - "owner": { - "login": "mekhalleh", - "id": 5225129, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5225129?v=4", - "html_url": "https:\/\/github.com\/mekhalleh", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mekhalleh\/exchange_proxylogon", - "description": "Module pack for #ProxyLogon (part. of my contribute for Metasploit-Framework) [CVE-2021-26855 && CVE-2021-27065]", - "fork": false, - "created_at": "2021-03-07T12:12:16Z", - "updated_at": "2021-09-12T03:30:10Z", - "pushed_at": "2021-03-29T08:42:01Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 345567206, - "name": "CVE-2021-26855_SSRF", - "full_name": "Yt1g3r\/CVE-2021-26855_SSRF", - "owner": { - "login": "Yt1g3r", - "id": 12625147, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/12625147?v=4", - "html_url": "https:\/\/github.com\/Yt1g3r", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Yt1g3r\/CVE-2021-26855_SSRF", - "description": "POC of CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, and CVE-2021-26865, ProxyLogon poc", - "fork": false, - "created_at": "2021-03-08T07:28:21Z", - "updated_at": "2024-08-12T20:11:01Z", - "pushed_at": "2021-03-11T03:28:47Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 6, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2021-26855", - "proxylogon" - ], - "visibility": "public", - "forks": 6, - "watchers": 4, - "score": 0, - "subscribers_count": 2 - }, - { - "id": 345595529, - "name": "CVE-2021-26855", - "full_name": "hackerxj007\/CVE-2021-26855", - "owner": { - "login": "hackerxj007", - "id": 23031720, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/23031720?v=4", - "html_url": "https:\/\/github.com\/hackerxj007", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/hackerxj007\/CVE-2021-26855", - "description": "CVE-2021-26855 exp", - "fork": false, - "created_at": "2021-03-08T09:12:27Z", - "updated_at": "2025-04-07T15:28:49Z", - "pushed_at": "2021-03-08T08:09:01Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 69, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 69, - "watchers": 5, - "score": 0, - "subscribers_count": 0 - }, { "id": 345639477, "name": "proxylogscan", @@ -353,178 +40,6 @@ "score": 0, "subscribers_count": 9 }, - { - "id": 345955330, - "name": "ExchangeWeaknessTest", - "full_name": "mauricelambert\/ExchangeWeaknessTest", - "owner": { - "login": "mauricelambert", - "id": 50479118, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50479118?v=4", - "html_url": "https:\/\/github.com\/mauricelambert", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mauricelambert\/ExchangeWeaknessTest", - "description": "This script test the CVE-2021-26855 vulnerability on Exchange Server.", - "fork": false, - "created_at": "2021-03-09T09:40:29Z", - "updated_at": "2021-03-09T09:43:55Z", - "pushed_at": "2021-03-09T09:42:51Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve", - "exchange", - "microsoft", - "python3", - "security", - "security-tools" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 345970212, - "name": "Exchange_IOC_Hunter", - "full_name": "DCScoder\/Exchange_IOC_Hunter", - "owner": { - "login": "DCScoder", - "id": 42096735, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42096735?v=4", - "html_url": "https:\/\/github.com\/DCScoder", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/DCScoder\/Exchange_IOC_Hunter", - "description": "CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065", - "fork": false, - "created_at": "2021-03-09T10:36:44Z", - "updated_at": "2021-03-17T10:22:07Z", - "pushed_at": "2021-03-17T10:22:05Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 346033440, - "name": "CVE-2021-26855-PoC", - "full_name": "srvaccount\/CVE-2021-26855-PoC", - "owner": { - "login": "srvaccount", - "id": 76211832, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/76211832?v=4", - "html_url": "https:\/\/github.com\/srvaccount", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/srvaccount\/CVE-2021-26855-PoC", - "description": "PoC exploit code for CVE-2021-26855", - "fork": false, - "created_at": "2021-03-09T14:27:06Z", - "updated_at": "2023-08-09T18:23:58Z", - "pushed_at": "2021-03-09T21:59:53Z", - "stargazers_count": 17, - "watchers_count": 17, - "has_discussions": false, - "forks_count": 20, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 20, - "watchers": 17, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 346078570, - "name": "CVE-2021-26855", - "full_name": "h4x0r-dz\/CVE-2021-26855", - "owner": { - "login": "h4x0r-dz", - "id": 26070859, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26070859?v=4", - "html_url": "https:\/\/github.com\/h4x0r-dz", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/h4x0r-dz\/CVE-2021-26855", - "description": null, - "fork": false, - "created_at": "2021-03-09T16:54:39Z", - "updated_at": "2025-09-13T11:40:03Z", - "pushed_at": "2021-03-09T16:56:09Z", - "stargazers_count": 100, - "watchers_count": 100, - "has_discussions": false, - "forks_count": 61, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 61, - "watchers": 100, - "score": 0, - "subscribers_count": 13 - }, - { - "id": 346241102, - "name": "CVE-2021-26855_PoC", - "full_name": "alt3kx\/CVE-2021-26855_PoC", - "owner": { - "login": "alt3kx", - "id": 3140111, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/3140111?v=4", - "html_url": "https:\/\/github.com\/alt3kx", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/alt3kx\/CVE-2021-26855_PoC", - "description": null, - "fork": false, - "created_at": "2021-03-10T05:21:19Z", - "updated_at": "2024-08-25T10:12:12Z", - "pushed_at": "2021-03-12T16:19:50Z", - "stargazers_count": 53, - "watchers_count": 53, - "has_discussions": false, - "forks_count": 29, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 29, - "watchers": 53, - "score": 0, - "subscribers_count": 2 - }, { "id": 346816198, "name": "CVE-2021-26855", @@ -558,120 +73,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 346834084, - "name": "CVE-2021-26855", - "full_name": "hackerschoice\/CVE-2021-26855", - "owner": { - "login": "hackerschoice", - "id": 57636453, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57636453?v=4", - "html_url": "https:\/\/github.com\/hackerschoice", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/hackerschoice\/CVE-2021-26855", - "description": "PoC of proxylogon chain SSRF(CVE-2021-26855) to write file by testanull, censored by github", - "fork": false, - "created_at": "2021-03-11T20:51:48Z", - "updated_at": "2026-06-28T13:45:20Z", - "pushed_at": "2021-03-11T20:58:08Z", - "stargazers_count": 61, - "watchers_count": 61, - "has_discussions": false, - "forks_count": 32, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 32, - "watchers": 61, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 346840803, - "name": "HAFNIUM-Microsoft-Exchange-0day", - "full_name": "SCS-Labs\/HAFNIUM-Microsoft-Exchange-0day", - "owner": { - "login": "SCS-Labs", - "id": 67705746, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/67705746?v=4", - "html_url": "https:\/\/github.com\/SCS-Labs", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SCS-Labs\/HAFNIUM-Microsoft-Exchange-0day", - "description": "CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065", - "fork": false, - "created_at": "2021-03-11T21:18:29Z", - "updated_at": "2021-04-19T19:31:47Z", - "pushed_at": "2021-04-19T19:31:45Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": true, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "0day", - "agency-security", - "cve-2021-26855", - "cve-2021-26857", - "cve-2021-26858", - "cve-2021-27065", - "detections", - "microsoft-exchange", - "microsoft-exchange-server", - "mitigations", - "proxylogon", - "timeline", - "tweets", - "zeroday" - ], - "visibility": "public", - "forks": 4, - "watchers": 5, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 347064151, - "name": "CVE-2021-26855-Scanner", - "full_name": "KotSec\/CVE-2021-26855-Scanner", - "owner": { - "login": "KotSec", - "id": 80525807, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/80525807?v=4", - "html_url": "https:\/\/github.com\/KotSec", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/KotSec\/CVE-2021-26855-Scanner", - "description": "Scanner and PoC for CVE-2021-26855 ", - "fork": false, - "created_at": "2021-03-12T12:47:41Z", - "updated_at": "2026-04-14T17:13:38Z", - "pushed_at": "2021-03-12T12:55:57Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, { "id": 347638787, "name": "proxylogon", @@ -740,76 +141,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 347774757, - "name": "ProxyLogon-CVE-2021-26855", - "full_name": "mil1200\/ProxyLogon-CVE-2021-26855", - "owner": { - "login": "mil1200", - "id": 18125445, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18125445?v=4", - "html_url": "https:\/\/github.com\/mil1200", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mil1200\/ProxyLogon-CVE-2021-26855", - "description": "RCE exploit for ProxyLogon vulnerability in Microsoft Exchange", - "fork": false, - "created_at": "2021-03-14T22:57:21Z", - "updated_at": "2026-02-05T04:48:56Z", - "pushed_at": "2021-03-14T23:03:12Z", - "stargazers_count": 9, - "watchers_count": 9, - "has_discussions": false, - "forks_count": 8, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 8, - "watchers": 9, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 347900434, - "name": "ExchangeSSRFtoRCEExploit", - "full_name": "evilashz\/ExchangeSSRFtoRCEExploit", - "owner": { - "login": "evilashz", - "id": 50722929, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50722929?v=4", - "html_url": "https:\/\/github.com\/evilashz", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/evilashz\/ExchangeSSRFtoRCEExploit", - "description": "CVE-2021-26855 & CVE-2021-27065", - "fork": false, - "created_at": "2021-03-15T09:02:40Z", - "updated_at": "2025-05-26T01:07:43Z", - "pushed_at": "2021-03-15T09:19:45Z", - "stargazers_count": 28, - "watchers_count": 28, - "has_discussions": false, - "forks_count": 9, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2021-26855", - "cve-2021-27065", - "proxylogon" - ], - "visibility": "public", - "forks": 9, - "watchers": 28, - "score": 0, - "subscribers_count": 1 - }, { "id": 347961970, "name": "Exch-CVE-2021-26855_Priv", @@ -843,384 +174,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 347992754, - "name": "CVE-2021-26855-d", - "full_name": "Mr-xn\/CVE-2021-26855-d", - "owner": { - "login": "Mr-xn", - "id": 18260135, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18260135?v=4", - "html_url": "https:\/\/github.com\/Mr-xn", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Mr-xn\/CVE-2021-26855-d", - "description": null, - "fork": false, - "created_at": "2021-03-15T14:03:16Z", - "updated_at": "2024-08-12T20:11:13Z", - "pushed_at": "2021-03-15T14:08:16Z", - "stargazers_count": 6, - "watchers_count": 6, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 4, - "watchers": 6, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 348253285, - "name": "ProxyLogon", - "full_name": "RickGeex\/ProxyLogon", - "owner": { - "login": "RickGeex", - "id": 7975904, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/7975904?v=4", - "html_url": "https:\/\/github.com\/RickGeex", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/RickGeex\/ProxyLogon", - "description": "ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability, CVE-2021-27065, to get code execution.", - "fork": false, - "created_at": "2021-03-16T07:31:25Z", - "updated_at": "2026-06-28T12:04:21Z", - "pushed_at": "2021-05-01T17:20:15Z", - "stargazers_count": 33, - "watchers_count": 33, - "has_discussions": false, - "forks_count": 8, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 8, - "watchers": 33, - "score": 0, - "subscribers_count": 2 - }, - { - "id": 348300485, - "name": "ProxyLogon", - "full_name": "Immersive-Labs-Sec\/ProxyLogon", - "owner": { - "login": "Immersive-Labs-Sec", - "id": 79456607, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79456607?v=4", - "html_url": "https:\/\/github.com\/Immersive-Labs-Sec", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Immersive-Labs-Sec\/ProxyLogon", - "description": "Chaining CVE-2021-26855 and CVE-2021-26857 to exploit Microsoft Exchange", - "fork": false, - "created_at": "2021-03-16T10:14:56Z", - "updated_at": "2021-03-24T16:54:40Z", - "pushed_at": "2021-03-22T09:22:20Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 3, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 348568793, - "name": "ProxyLogon-CVE-2021-26855-metasploit", - "full_name": "TaroballzChen\/ProxyLogon-CVE-2021-26855-metasploit", - "owner": { - "login": "TaroballzChen", - "id": 27862593, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/27862593?v=4", - "html_url": "https:\/\/github.com\/TaroballzChen", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/TaroballzChen\/ProxyLogon-CVE-2021-26855-metasploit", - "description": "CVE-2021-26855 proxyLogon metasploit exploit script", - "fork": false, - "created_at": "2021-03-17T03:32:19Z", - "updated_at": "2024-08-12T20:11:16Z", - "pushed_at": "2021-03-17T05:51:30Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2021-26855", - "metasploit", - "proxylogon" - ], - "visibility": "public", - "forks": 4, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 348573564, - "name": "ProxyLogon", - "full_name": "p0wershe11\/ProxyLogon", - "owner": { - "login": "p0wershe11", - "id": 80803923, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/80803923?v=4", - "html_url": "https:\/\/github.com\/p0wershe11", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/p0wershe11\/ProxyLogon", - "description": "ProxyLogon(CVE-2021-26855+CVE-2021-27065) Exchange Server RCE(SSRF->GetWebShell)", - "fork": false, - "created_at": "2021-03-17T03:56:54Z", - "updated_at": "2026-05-23T10:51:43Z", - "pushed_at": "2021-03-17T05:06:18Z", - "stargazers_count": 124, - "watchers_count": 124, - "has_discussions": false, - "forks_count": 32, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "0day", - "cve-2021-26855", - "cve-2021-26855-ssrf", - "cve-2021-27065", - "exploit", - "microsoft-exchange", - "microsoft-exchange-proxylogon", - "microsoft-exchange-server", - "proxylogon", - "zeroday" - ], - "visibility": "public", - "forks": 32, - "watchers": 124, - "score": 0, - "subscribers_count": 2 - }, - { - "id": 349063640, - "name": "Scan-Vuln-CVE-2021-26855", - "full_name": "antichown\/Scan-Vuln-CVE-2021-26855", - "owner": { - "login": "antichown", - "id": 4655942, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4655942?v=4", - "html_url": "https:\/\/github.com\/antichown", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/antichown\/Scan-Vuln-CVE-2021-26855", - "description": null, - "fork": false, - "created_at": "2021-03-18T12:23:51Z", - "updated_at": "2021-03-18T12:23:52Z", - "pushed_at": "2021-03-18T10:52:00Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 349915444, - "name": "CVE-2021-26855-Exchange-RCE", - "full_name": "catmandx\/CVE-2021-26855-Exchange-RCE", - "owner": { - "login": "catmandx", - "id": 50922013, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50922013?v=4", - "html_url": "https:\/\/github.com\/catmandx", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/catmandx\/CVE-2021-26855-Exchange-RCE", - "description": "Microsoft Exchange Proxylogon Exploit Chain EXP分析", - "fork": false, - "created_at": "2021-03-21T06:16:24Z", - "updated_at": "2021-03-21T06:16:24Z", - "pushed_at": "2021-03-18T00:55:39Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 6, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 6, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 350620709, - "name": "CVE-2021-26855-CVE-2021-27065", - "full_name": "hictf\/CVE-2021-26855-CVE-2021-27065", - "owner": { - "login": "hictf", - "id": 43127173, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43127173?v=4", - "html_url": "https:\/\/github.com\/hictf", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/hictf\/CVE-2021-26855-CVE-2021-27065", - "description": "analytics ProxyLogo Mail exchange RCE", - "fork": false, - "created_at": "2021-03-23T07:37:47Z", - "updated_at": "2021-03-23T19:02:32Z", - "pushed_at": "2021-03-23T19:02:30Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 350906098, - "name": "proxylogon-exploit", - "full_name": "praetorian-inc\/proxylogon-exploit", - "owner": { - "login": "praetorian-inc", - "id": 8173787, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8173787?v=4", - "html_url": "https:\/\/github.com\/praetorian-inc", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/praetorian-inc\/proxylogon-exploit", - "description": "Proof-of-concept exploit for CVE-2021-26855 and CVE-2021-27065. Unauthenticated RCE in Exchange.", - "fork": false, - "created_at": "2021-03-24T01:12:48Z", - "updated_at": "2026-06-28T12:05:13Z", - "pushed_at": "2021-03-24T01:25:05Z", - "stargazers_count": 52, - "watchers_count": 52, - "has_discussions": false, - "forks_count": 17, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 17, - "watchers": 52, - "score": 0, - "subscribers_count": 3 - }, - { - "id": 352785704, - "name": "SharpProxyLogon", - "full_name": "Flangvik\/SharpProxyLogon", - "owner": { - "login": "Flangvik", - "id": 23613997, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/23613997?v=4", - "html_url": "https:\/\/github.com\/Flangvik", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Flangvik\/SharpProxyLogon", - "description": "C# POC for CVE-2021-26855 aka ProxyLogon, supports the classically semi-interactive web shell as well as shellcode injection ", - "fork": false, - "created_at": "2021-03-29T21:10:34Z", - "updated_at": "2026-08-07T10:15:12Z", - "pushed_at": "2021-03-31T11:57:38Z", - "stargazers_count": 247, - "watchers_count": 247, - "has_discussions": false, - "forks_count": 41, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 41, - "watchers": 247, - "score": 0, - "subscribers_count": 5 - }, - { - "id": 357864750, - "name": "CVE-2021-26855-exploit-Exchange", - "full_name": "haotiku\/CVE-2021-26855-exploit-Exchange", - "owner": { - "login": "haotiku", - "id": 62093281, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62093281?v=4", - "html_url": "https:\/\/github.com\/haotiku", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/haotiku\/CVE-2021-26855-exploit-Exchange", - "description": null, - "fork": false, - "created_at": "2021-04-14T10:28:12Z", - "updated_at": "2021-04-14T10:28:13Z", - "pushed_at": "2021-04-05T02:36:51Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 357875949, "name": "ProxyVulns", @@ -1254,39 +207,6 @@ "score": 0, "subscribers_count": 4 }, - { - "id": 359403469, - "name": "106362522", - "full_name": "Nick-Yin12\/106362522", - "owner": { - "login": "Nick-Yin12", - "id": 82452652, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/82452652?v=4", - "html_url": "https:\/\/github.com\/Nick-Yin12", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Nick-Yin12\/106362522", - "description": "針對近期微軟公布修補遭駭客攻擊的Exchange Server漏洞問題，台灣DEVCORE表示早在1月5日便已發現安全漏洞後，並且向微軟通報此項編號命名為「CVE-2021-26855 」，以及「CVE-2021-27065」的零日漏洞，同時也將此項漏洞稱為「ProxyLogon」。 此次揭露的「ProxyLogon」漏洞，是以無需驗證即可使用的遠端程式碼執行 (Pre-Auth Remote Code Execution；Pre-Auth RCE)零日漏洞(Zero-day exploit)，可讓攻擊者得以繞過身份驗證步驟，驅使系統管理員協助執行惡意文件或執行指令，進而觸發更廣泛的攻擊。 「ProxyLogon」是微軟近期被揭露最重大的RCE漏洞之一，DEVCORE團隊遵循責任揭露 (Responsible Disclosure)原則，在發現後便第一時間立即於今年1月5日通報微軟進行修補，避免該漏洞遭有心人士利用，造成全球用戶重大損失。而微軟遂於3月2日針對相關漏洞釋出安全更新，避免用戶機敏資訊遭受惡意攻擊。個人想法:遭駭客攻擊的Exchange Server漏洞問題，台灣DEVCORE表示早在1月5日便已發現，並且向微軟通報此項編號命名為「CVE-2021-26855 」，以及「CVE-2021-27065」的零日漏洞，同時也將此項漏洞稱為「ProxyLogon」。 此次揭露的「ProxyLogon」漏洞，是以無需驗證即可使用的遠端程式碼執行 (Pre-Auth Remote Code Execution；Pre-Auth RCE)零日漏洞(Zero-day exploit)，可讓攻擊者得以繞過身份驗證步驟，驅使系統管理員協助執行惡意文件或執行指令，進而觸發更廣泛的攻擊。 「ProxyLogon」是微軟近期被揭露最重大的RCE漏洞之一，DEVCORE團隊遵循責任揭露 (Responsible Disclosure)原則，在發現後便第一時間立即於今年1月5日通報微軟進行修補，避免該漏洞遭有心人士利用，造成全球用戶重大損失。而微軟遂於3月2日針對相關漏洞釋出安全更新，避免用戶機敏資訊遭受惡意攻擊。個人想法:微軟是大眾常用的軟體之一，駭客只要察覺漏洞就會進行惡意的攻擊，微軟公布4個Exchange Server的安全漏洞後，就遭受駭客的惡意攻擊，這件事的發生，微軟需更加小心並提高資安的防護。", - "fork": false, - "created_at": "2021-04-19T09:33:52Z", - "updated_at": "2021-04-19T09:35:18Z", - "pushed_at": "2021-04-19T09:35:16Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 422862938, "name": "Flangvik", diff --git a/2021/CVE-2021-26856.json b/2021/CVE-2021-26856.json deleted file mode 100644 index 76b43a1534..0000000000 --- a/2021/CVE-2021-26856.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 346483081, - "name": "CVE-2021-26856", - "full_name": "avi8892\/CVE-2021-26856", - "owner": { - "login": "avi8892", - "id": 31028818, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/31028818?v=4", - "html_url": "https:\/\/github.com\/avi8892", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/avi8892\/CVE-2021-26856", - "description": null, - "fork": false, - "created_at": "2021-03-10T20:27:27Z", - "updated_at": "2022-01-13T16:20:46Z", - "pushed_at": "2021-03-10T12:46:41Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-26857.json b/2021/CVE-2021-26857.json deleted file mode 100644 index 7917735e73..0000000000 --- a/2021/CVE-2021-26857.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 346784494, - "name": "Proxylogon-exploit", - "full_name": "sirpedrotavares\/Proxylogon-exploit", - "owner": { - "login": "sirpedrotavares", - "id": 10796859, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/10796859?v=4", - "html_url": "https:\/\/github.com\/sirpedrotavares", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sirpedrotavares\/Proxylogon-exploit", - "description": "proxylogon exploit - CVE-2021-26857", - "fork": false, - "created_at": "2021-03-11T17:32:32Z", - "updated_at": "2026-07-14T20:30:26Z", - "pushed_at": "2021-03-11T17:34:15Z", - "stargazers_count": 111, - "watchers_count": 111, - "has_discussions": false, - "forks_count": 34, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 34, - "watchers": 111, - "score": 0, - "subscribers_count": 6 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-26868.json b/2021/CVE-2021-26868.json deleted file mode 100644 index 0defa6ef4e..0000000000 --- a/2021/CVE-2021-26868.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 361973988, - "name": "CVE-2021-26868", - "full_name": "KangD1W2\/CVE-2021-26868", - "owner": { - "login": "KangD1W2", - "id": 39058866, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/39058866?v=4", - "html_url": "https:\/\/github.com\/KangD1W2", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/KangD1W2\/CVE-2021-26868", - "description": null, - "fork": false, - "created_at": "2021-04-27T03:55:38Z", - "updated_at": "2025-03-27T02:42:36Z", - "pushed_at": "2021-04-26T14:23:48Z", - "stargazers_count": 11, - "watchers_count": 11, - "has_discussions": false, - "forks_count": 10, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 10, - "watchers": 11, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-26871.json b/2021/CVE-2021-26871.json deleted file mode 100644 index 56a19da767..0000000000 --- a/2021/CVE-2021-26871.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 351287174, - "name": "CVE-2021-26871_POC", - "full_name": "fr4nkxixi\/CVE-2021-26871_POC", - "owner": { - "login": "fr4nkxixi", - "id": 81340681, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/81340681?v=4", - "html_url": "https:\/\/github.com\/fr4nkxixi", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/fr4nkxixi\/CVE-2021-26871_POC", - "description": "POC for CVE-2021-26871(Maybe)", - "fork": false, - "created_at": "2021-03-25T02:38:08Z", - "updated_at": "2024-08-12T20:11:31Z", - "pushed_at": "2021-03-25T03:15:17Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 5, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 5, - "watchers": 3, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-26882.json b/2021/CVE-2021-26882.json deleted file mode 100644 index 4329673c03..0000000000 --- a/2021/CVE-2021-26882.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 346986729, - "name": "CVE-2021-26882", - "full_name": "taiji-xo\/CVE-2021-26882", - "owner": { - "login": "taiji-xo", - "id": 18670013, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18670013?v=4", - "html_url": "https:\/\/github.com\/taiji-xo", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/taiji-xo\/CVE-2021-26882", - "description": "PoC", - "fork": false, - "created_at": "2021-03-12T07:58:57Z", - "updated_at": "2023-05-10T08:23:12Z", - "pushed_at": "2021-03-11T14:01:15Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 4, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-26903.json b/2021/CVE-2021-26903.json deleted file mode 100644 index 5d8b175643..0000000000 --- a/2021/CVE-2021-26903.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 341895421, - "name": "CVE-2021-26903", - "full_name": "Security-AVS\/CVE-2021-26903", - "owner": { - "login": "Security-AVS", - "id": 72926885, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/72926885?v=4", - "html_url": "https:\/\/github.com\/Security-AVS", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Security-AVS\/CVE-2021-26903", - "description": "ISIDA RETRIEVER v5.2\" Reflected XSS", - "fork": false, - "created_at": "2021-02-24T12:36:01Z", - "updated_at": "2021-02-24T12:40:09Z", - "pushed_at": "2021-02-24T12:40:07Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-26904.json b/2021/CVE-2021-26904.json deleted file mode 100644 index 1a35c9cdf0..0000000000 --- a/2021/CVE-2021-26904.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 341897194, - "name": "-CVE-2021-26904", - "full_name": "Security-AVS\/-CVE-2021-26904", - "owner": { - "login": "Security-AVS", - "id": 72926885, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/72926885?v=4", - "html_url": "https:\/\/github.com\/Security-AVS", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Security-AVS\/-CVE-2021-26904", - "description": "LMA ISIDA Retriever 5.2 allows SQL Injection", - "fork": false, - "created_at": "2021-02-24T12:42:52Z", - "updated_at": "2021-02-24T12:43:56Z", - "pushed_at": "2021-02-24T12:43:52Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-26943.json b/2021/CVE-2021-26943.json deleted file mode 100644 index 4c752e0657..0000000000 --- a/2021/CVE-2021-26943.json +++ /dev/null @@ -1,39 +0,0 @@ -[ - { - "id": 325836310, - "name": "SmmExploit", - "full_name": "tandasat\/SmmExploit", - "owner": { - "login": "tandasat", - "id": 1620923, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1620923?v=4", - "html_url": "https:\/\/github.com\/tandasat", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/tandasat\/SmmExploit", - "description": "The report and the exploit of CVE-2021-26943, the kernel-to-SMM local privilege escalation vulnerability in ASUS UX360CA BIOS version 303.", - "fork": false, - "created_at": "2020-12-31T16:30:02Z", - "updated_at": "2026-07-17T14:55:47Z", - "pushed_at": "2021-03-29T12:33:38Z", - "stargazers_count": 148, - "watchers_count": 148, - "has_discussions": true, - "forks_count": 23, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "smm", - "uefi", - "vulnerability" - ], - "visibility": "public", - "forks": 23, - "watchers": 148, - "score": 0, - "subscribers_count": 7 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-27065.json b/2021/CVE-2021-27065.json deleted file mode 100644 index 49a53cbf67..0000000000 --- a/2021/CVE-2021-27065.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 345007574, - "name": "cve-2021-27065", - "full_name": "adamrpostjr\/cve-2021-27065", - "owner": { - "login": "adamrpostjr", - "id": 32047648, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32047648?v=4", - "html_url": "https:\/\/github.com\/adamrpostjr", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/adamrpostjr\/cve-2021-27065", - "description": "Quick One Line Powershell scripts to detect for webshells, possible zips, and logs.", - "fork": false, - "created_at": "2021-03-06T04:47:35Z", - "updated_at": "2025-07-16T13:01:55Z", - "pushed_at": "2021-03-09T13:23:08Z", - "stargazers_count": 11, - "watchers_count": 11, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 11, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-27187.json b/2021/CVE-2021-27187.json deleted file mode 100644 index b40e4d5150..0000000000 --- a/2021/CVE-2021-27187.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 338061784, - "name": "CVE-2021-27187", - "full_name": "jet-pentest\/CVE-2021-27187", - "owner": { - "login": "jet-pentest", - "id": 71512502, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71512502?v=4", - "html_url": "https:\/\/github.com\/jet-pentest", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/jet-pentest\/CVE-2021-27187", - "description": null, - "fork": false, - "created_at": "2021-02-11T15:03:48Z", - "updated_at": "2021-02-14T09:24:04Z", - "pushed_at": "2021-02-11T15:08:24Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-27188.json b/2021/CVE-2021-27188.json deleted file mode 100644 index 6b67504e7d..0000000000 --- a/2021/CVE-2021-27188.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 338251533, - "name": "CVE-2021-27188", - "full_name": "jet-pentest\/CVE-2021-27188", - "owner": { - "login": "jet-pentest", - "id": 71512502, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71512502?v=4", - "html_url": "https:\/\/github.com\/jet-pentest", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/jet-pentest\/CVE-2021-27188", - "description": null, - "fork": false, - "created_at": "2021-02-12T07:32:51Z", - "updated_at": "2021-02-14T09:24:02Z", - "pushed_at": "2021-02-12T07:36:35Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-27190.json b/2021/CVE-2021-27190.json deleted file mode 100644 index 8588438e98..0000000000 --- a/2021/CVE-2021-27190.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 337955124, - "name": "CVE-2021-27190-PEEL-Shopping-cart-9.3.0-Stored-XSS", - "full_name": "anmolksachan\/CVE-2021-27190-PEEL-Shopping-cart-9.3.0-Stored-XSS", - "owner": { - "login": "anmolksachan", - "id": 60771253, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/60771253?v=4", - "html_url": "https:\/\/github.com\/anmolksachan", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/anmolksachan\/CVE-2021-27190-PEEL-Shopping-cart-9.3.0-Stored-XSS", - "description": null, - "fork": false, - "created_at": "2021-02-11T07:10:58Z", - "updated_at": "2024-11-21T16:00:51Z", - "pushed_at": "2021-02-12T07:32:18Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-27246.json b/2021/CVE-2021-27246.json deleted file mode 100644 index a7efa38447..0000000000 --- a/2021/CVE-2021-27246.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 343487613, - "name": "CVE-2021-27246_Pwn2Own2020", - "full_name": "synacktiv\/CVE-2021-27246_Pwn2Own2020", - "owner": { - "login": "synacktiv", - "id": 50145679, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50145679?v=4", - "html_url": "https:\/\/github.com\/synacktiv", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/synacktiv\/CVE-2021-27246_Pwn2Own2020", - "description": null, - "fork": false, - "created_at": "2021-03-01T16:45:42Z", - "updated_at": "2026-05-13T19:48:28Z", - "pushed_at": "2021-03-02T07:45:20Z", - "stargazers_count": 43, - "watchers_count": 43, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 4, - "watchers": 43, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-27338.json b/2021/CVE-2021-27338.json deleted file mode 100644 index 59f69b5660..0000000000 --- a/2021/CVE-2021-27338.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 372270842, - "name": "CVE-2021-27338", - "full_name": "Pho03niX\/CVE-2021-27338", - "owner": { - "login": "Pho03niX", - "id": 39918707, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/39918707?v=4", - "html_url": "https:\/\/github.com\/Pho03niX", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Pho03niX\/CVE-2021-27338", - "description": null, - "fork": false, - "created_at": "2021-05-30T17:02:56Z", - "updated_at": "2021-05-30T17:17:06Z", - "pushed_at": "2021-05-30T17:17:04Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-27342.json b/2021/CVE-2021-27342.json deleted file mode 100644 index 4204e2488f..0000000000 --- a/2021/CVE-2021-27342.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 367514773, - "name": "D-Link-CVE-2021-27342-exploit", - "full_name": "mavlevin\/D-Link-CVE-2021-27342-exploit", - "owner": { - "login": "mavlevin", - "id": 33753158, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/33753158?v=4", - "html_url": "https:\/\/github.com\/mavlevin", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mavlevin\/D-Link-CVE-2021-27342-exploit", - "description": "Exploit for CVE-2021-27342 vulnerability (telnet authentication brute-force protection bypass)", - "fork": false, - "created_at": "2021-05-15T01:22:19Z", - "updated_at": "2026-06-06T02:24:13Z", - "pushed_at": "2021-05-15T01:26:07Z", - "stargazers_count": 15, - "watchers_count": 15, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 15, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-27403.json b/2021/CVE-2021-27403.json deleted file mode 100644 index b3ee4eff71..0000000000 --- a/2021/CVE-2021-27403.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 340105810, - "name": "CVE-2021-27403", - "full_name": "bokanrb\/CVE-2021-27403", - "owner": { - "login": "bokanrb", - "id": 25235094, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25235094?v=4", - "html_url": "https:\/\/github.com\/bokanrb", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/bokanrb\/CVE-2021-27403", - "description": "XSS-Askey", - "fork": false, - "created_at": "2021-02-18T16:14:48Z", - "updated_at": "2024-11-19T15:15:45Z", - "pushed_at": "2021-02-18T17:09:47Z", - "stargazers_count": 13, - "watchers_count": 13, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 13, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-27404.json b/2021/CVE-2021-27404.json deleted file mode 100644 index 72be0e9dce..0000000000 --- a/2021/CVE-2021-27404.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 340122850, - "name": "CVE-2021-27404", - "full_name": "bokanrb\/CVE-2021-27404", - "owner": { - "login": "bokanrb", - "id": 25235094, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25235094?v=4", - "html_url": "https:\/\/github.com\/bokanrb", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/bokanrb\/CVE-2021-27404", - "description": "HostHeaderInjection-Askey", - "fork": false, - "created_at": "2021-02-18T17:16:39Z", - "updated_at": "2025-05-26T14:41:17Z", - "pushed_at": "2021-02-18T17:20:25Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-27651.json b/2021/CVE-2021-27651.json index 9aafde6a0a..3c26886859 100644 --- a/2021/CVE-2021-27651.json +++ b/2021/CVE-2021-27651.json @@ -1,37 +1,4 @@ [ - { - "id": 367763176, - "name": "CVE-2021-27651-PoC", - "full_name": "samwcyo\/CVE-2021-27651-PoC", - "owner": { - "login": "samwcyo", - "id": 16300489, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16300489?v=4", - "html_url": "https:\/\/github.com\/samwcyo", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/samwcyo\/CVE-2021-27651-PoC", - "description": "RCE for Pega Infinity >= 8.2.1, Pega Infinity <= 8.5.2", - "fork": false, - "created_at": "2021-05-16T01:40:47Z", - "updated_at": "2024-10-09T18:12:28Z", - "pushed_at": "2021-05-16T05:54:07Z", - "stargazers_count": 60, - "watchers_count": 60, - "has_discussions": false, - "forks_count": 16, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 16, - "watchers": 60, - "score": 0, - "subscribers_count": 2 - }, { "id": 367973600, "name": "CVE-2021-27651", diff --git a/2021/CVE-2021-27850.json b/2021/CVE-2021-27850.json index 4bbd03daff..4b922022be 100644 --- a/2021/CVE-2021-27850.json +++ b/2021/CVE-2021-27850.json @@ -32,39 +32,6 @@ "score": 0, "subscribers_count": 2 }, - { - "id": 380518926, - "name": "CVE-2021-27850_POC", - "full_name": "dorkerdevil\/CVE-2021-27850_POC", - "owner": { - "login": "dorkerdevil", - "id": 15796745, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/15796745?v=4", - "html_url": "https:\/\/github.com\/dorkerdevil", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dorkerdevil\/CVE-2021-27850_POC", - "description": "A Proof of concept for CVE-2021-27850 affecting Apache Tapestry and leading to unauthencticated remote code execution.", - "fork": false, - "created_at": "2021-06-26T14:16:00Z", - "updated_at": "2024-08-12T20:14:16Z", - "pushed_at": "2021-06-25T14:23:45Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 16, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 16, - "watchers": 3, - "score": 0, - "subscribers_count": 0 - }, { "id": 382309693, "name": "CVE_2021_27850_POC", diff --git a/2021/CVE-2021-27890.json b/2021/CVE-2021-27890.json deleted file mode 100644 index af8dbadbd8..0000000000 --- a/2021/CVE-2021-27890.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 351325727, - "name": "Mybb-XSS_SQL_RCE-POC", - "full_name": "xiaopan233\/Mybb-XSS_SQL_RCE-POC", - "owner": { - "login": "xiaopan233", - "id": 32785617, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32785617?v=4", - "html_url": "https:\/\/github.com\/xiaopan233", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/xiaopan233\/Mybb-XSS_SQL_RCE-POC", - "description": "Mybb associate CVE-2021-27890 & CVE-2021-27889 to RCE poc", - "fork": false, - "created_at": "2021-03-25T06:00:31Z", - "updated_at": "2025-08-29T16:32:56Z", - "pushed_at": "2021-03-25T06:56:52Z", - "stargazers_count": 10, - "watchers_count": 10, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 10, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-27905.json b/2021/CVE-2021-27905.json index 049814164f..a8ac200212 100644 --- a/2021/CVE-2021-27905.json +++ b/2021/CVE-2021-27905.json @@ -1,70 +1,4 @@ [ - { - "id": 360109059, - "name": "Solr-SSRF", - "full_name": "Henry4E36\/Solr-SSRF", - "owner": { - "login": "Henry4E36", - "id": 41940481, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41940481?v=4", - "html_url": "https:\/\/github.com\/Henry4E36", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Henry4E36\/Solr-SSRF", - "description": "Apache Solr SSRF(CVE-2021-27905)", - "fork": false, - "created_at": "2021-04-21T09:27:21Z", - "updated_at": "2026-05-26T08:42:33Z", - "pushed_at": "2021-04-21T10:00:59Z", - "stargazers_count": 70, - "watchers_count": 70, - "has_discussions": false, - "forks_count": 24, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 24, - "watchers": 70, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 361414198, - "name": "Solr-SSRF", - "full_name": "W2Ning\/Solr-SSRF", - "owner": { - "login": "W2Ning", - "id": 33406415, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/33406415?v=4", - "html_url": "https:\/\/github.com\/W2Ning", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/W2Ning\/Solr-SSRF", - "description": "CVE-2021-27905", - "fork": false, - "created_at": "2021-04-25T11:50:19Z", - "updated_at": "2021-04-28T16:37:34Z", - "pushed_at": "2021-04-28T16:37:32Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 394568825, "name": "CVE-2021-27905", diff --git a/2021/CVE-2021-27963.json b/2021/CVE-2021-27963.json deleted file mode 100644 index 2d101ef26d..0000000000 --- a/2021/CVE-2021-27963.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 342558842, - "name": "SonLogger-vulns", - "full_name": "erberkan\/SonLogger-vulns", - "owner": { - "login": "erberkan", - "id": 15521812, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/15521812?v=4", - "html_url": "https:\/\/github.com\/erberkan", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/erberkan\/SonLogger-vulns", - "description": "SonLogger Vulns (CVE-2021-27963, CVE-2021-27964)", - "fork": false, - "created_at": "2021-02-26T11:44:04Z", - "updated_at": "2024-08-12T20:10:42Z", - "pushed_at": "2021-03-13T08:39:31Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-27965.json b/2021/CVE-2021-27965.json index e6e63af80f..89bc6140fa 100644 --- a/2021/CVE-2021-27965.json +++ b/2021/CVE-2021-27965.json @@ -1,52 +1,4 @@ [ - { - "id": 373502325, - "name": "CVE-2021-27965", - "full_name": "mathisvickie\/CVE-2021-27965", - "owner": { - "login": "mathisvickie", - "id": 60326914, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/60326914?v=4", - "html_url": "https:\/\/github.com\/mathisvickie", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mathisvickie\/CVE-2021-27965", - "description": "stack based buffer overflow in MsIo64.sys, Proof of Concept Local Privilege Escalation to nt authority\/system", - "fork": false, - "created_at": "2021-06-03T12:39:11Z", - "updated_at": "2026-04-25T06:41:13Z", - "pushed_at": "2021-06-07T13:46:21Z", - "stargazers_count": 13, - "watchers_count": 13, - "has_discussions": false, - "forks_count": 5, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "buffer-overflow", - "cve", - "cve-2021-27965", - "driver", - "exploit", - "kernel", - "kernel-driver", - "local-privilege-escalation", - "msio64", - "poc", - "privilege-escalation", - "proof-of-concept", - "stack-buffer-overflow", - "windows" - ], - "visibility": "public", - "forks": 5, - "watchers": 13, - "score": 0, - "subscribers_count": 1 - }, { "id": 423304617, "name": "CVE-2021-27965", diff --git a/2021/CVE-2021-28310.json b/2021/CVE-2021-28310.json deleted file mode 100644 index e14160ea9d..0000000000 --- a/2021/CVE-2021-28310.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 357800087, - "name": "IOC_for_CVE-2021-28310", - "full_name": "Rafael-Svechinskaya\/IOC_for_CVE-2021-28310", - "owner": { - "login": "Rafael-Svechinskaya", - "id": 82496408, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/82496408?v=4", - "html_url": "https:\/\/github.com\/Rafael-Svechinskaya", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Rafael-Svechinskaya\/IOC_for_CVE-2021-28310", - "description": "Malicious Payloads that abuses Win32k Elevation of Privilege Vulnerability (CVE-2021-28310)", - "fork": false, - "created_at": "2021-04-14T06:36:40Z", - "updated_at": "2026-05-13T19:48:35Z", - "pushed_at": "2021-04-14T07:16:45Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-28312.json b/2021/CVE-2021-28312.json deleted file mode 100644 index 4fceecba3a..0000000000 --- a/2021/CVE-2021-28312.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 365343703, - "name": "CVE-2021-28312", - "full_name": "shubham0d\/CVE-2021-28312", - "owner": { - "login": "shubham0d", - "id": 12750163, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/12750163?v=4", - "html_url": "https:\/\/github.com\/shubham0d", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/shubham0d\/CVE-2021-28312", - "description": "POC and description for CVE-2021-28312", - "fork": false, - "created_at": "2021-05-07T20:16:22Z", - "updated_at": "2026-05-13T19:48:38Z", - "pushed_at": "2021-05-07T20:31:12Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 5, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-28476.json b/2021/CVE-2021-28476.json index def72079c0..14cee079ff 100644 --- a/2021/CVE-2021-28476.json +++ b/2021/CVE-2021-28476.json @@ -1,78 +1,4 @@ [ - { - "id": 372590733, - "name": "CVE-2021-28476", - "full_name": "0vercl0k\/CVE-2021-28476", - "owner": { - "login": "0vercl0k", - "id": 1476421, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1476421?v=4", - "html_url": "https:\/\/github.com\/0vercl0k", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0vercl0k\/CVE-2021-28476", - "description": "PoC for CVE-2021-28476 a guest-to-host \"Hyper-V Remote Code Execution Vulnerability\" in vmswitch.sys.", - "fork": false, - "created_at": "2021-05-31T18:02:39Z", - "updated_at": "2026-06-05T14:54:10Z", - "pushed_at": "2021-06-01T15:08:23Z", - "stargazers_count": 226, - "watchers_count": 226, - "has_discussions": false, - "forks_count": 34, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2021-28476", - "guest-to-host", - "hyper-v", - "network-service-provider", - "nvsp", - "rndis", - "vmswitch" - ], - "visibility": "public", - "forks": 34, - "watchers": 226, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 373204692, - "name": "CVE-2021-28476", - "full_name": "bluefrostsecurity\/CVE-2021-28476", - "owner": { - "login": "bluefrostsecurity", - "id": 4976074, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4976074?v=4", - "html_url": "https:\/\/github.com\/bluefrostsecurity", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/bluefrostsecurity\/CVE-2021-28476", - "description": null, - "fork": false, - "created_at": "2021-06-02T14:50:56Z", - "updated_at": "2026-05-13T19:48:43Z", - "pushed_at": "2021-06-02T14:54:14Z", - "stargazers_count": 9, - "watchers_count": 9, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 9, - "score": 0, - "subscribers_count": 1 - }, { "id": 396338187, "name": "CVE-2021-28476-tools-env", diff --git a/2021/CVE-2021-28482.json b/2021/CVE-2021-28482.json deleted file mode 100644 index 6843ac73c0..0000000000 --- a/2021/CVE-2021-28482.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 363946586, - "name": "CVE-2021-28482-Exchange-POC", - "full_name": "Shadow0ps\/CVE-2021-28482-Exchange-POC", - "owner": { - "login": "Shadow0ps", - "id": 6516174, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/6516174?v=4", - "html_url": "https:\/\/github.com\/Shadow0ps", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Shadow0ps\/CVE-2021-28482-Exchange-POC", - "description": "POC from TestANull for CVE-2021-28482 on Exchange Server", - "fork": false, - "created_at": "2021-05-03T13:54:36Z", - "updated_at": "2025-08-04T03:20:54Z", - "pushed_at": "2021-05-03T14:29:49Z", - "stargazers_count": 46, - "watchers_count": 46, - "has_discussions": false, - "forks_count": 13, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 13, - "watchers": 46, - "score": 0, - "subscribers_count": 2 - }, - { - "id": 369452613, - "name": "CVE-2021-28482_Exploit", - "full_name": "KevinWorst\/CVE-2021-28482_Exploit", - "owner": { - "login": "KevinWorst", - "id": 84563225, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/84563225?v=4", - "html_url": "https:\/\/github.com\/KevinWorst", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/KevinWorst\/CVE-2021-28482_Exploit", - "description": null, - "fork": false, - "created_at": "2021-05-21T07:34:46Z", - "updated_at": "2021-06-30T06:41:38Z", - "pushed_at": "2021-05-22T00:19:26Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-29155.json b/2021/CVE-2021-29155.json deleted file mode 100644 index 25fdfe3293..0000000000 --- a/2021/CVE-2021-29155.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 373563220, - "name": "CVE-2021-29155", - "full_name": "benschlueter\/CVE-2021-29155", - "owner": { - "login": "benschlueter", - "id": 25753058, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25753058?v=4", - "html_url": "https:\/\/github.com\/benschlueter", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/benschlueter\/CVE-2021-29155", - "description": "Proof of Concept CVE-2021-29155 ", - "fork": false, - "created_at": "2021-06-03T15:53:10Z", - "updated_at": "2023-01-12T12:21:22Z", - "pushed_at": "2021-06-04T16:59:22Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-29200.json b/2021/CVE-2021-29200.json deleted file mode 100644 index ee466401dd..0000000000 --- a/2021/CVE-2021-29200.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 366379721, - "name": "CVE-2021-29200", - "full_name": "freeide\/CVE-2021-29200", - "owner": { - "login": "freeide", - "id": 33774184, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/33774184?v=4", - "html_url": "https:\/\/github.com\/freeide", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/freeide\/CVE-2021-29200", - "description": null, - "fork": false, - "created_at": "2021-05-11T12:48:19Z", - "updated_at": "2021-05-11T12:48:20Z", - "pushed_at": "2021-05-11T10:42:40Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 8, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 8, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-29267.json b/2021/CVE-2021-29267.json deleted file mode 100644 index 53fdeb5be2..0000000000 --- a/2021/CVE-2021-29267.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 352641545, - "name": "CVE-2021-29267", - "full_name": "Security-AVS\/CVE-2021-29267", - "owner": { - "login": "Security-AVS", - "id": 72926885, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/72926885?v=4", - "html_url": "https:\/\/github.com\/Security-AVS", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Security-AVS\/CVE-2021-29267", - "description": "SherlockIM ChatBot XSS", - "fork": false, - "created_at": "2021-03-29T12:50:23Z", - "updated_at": "2021-04-29T02:57:57Z", - "pushed_at": "2021-03-29T12:53:20Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-29349.json b/2021/CVE-2021-29349.json deleted file mode 100644 index 38a0ad483c..0000000000 --- a/2021/CVE-2021-29349.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 353469792, - "name": "CVE-2021-29349", - "full_name": "0xBaz\/CVE-2021-29349", - "owner": { - "login": "0xBaz", - "id": 80262250, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/80262250?v=4", - "html_url": "https:\/\/github.com\/0xBaz", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0xBaz\/CVE-2021-29349", - "description": null, - "fork": false, - "created_at": "2021-03-31T19:36:29Z", - "updated_at": "2021-05-22T11:00:46Z", - "pushed_at": "2021-03-31T19:36:30Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 358957574, - "name": "CVE-2021-29349", - "full_name": "Vulnmachines\/CVE-2021-29349", - "owner": { - "login": "Vulnmachines", - "id": 79006904, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79006904?v=4", - "html_url": "https:\/\/github.com\/Vulnmachines", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Vulnmachines\/CVE-2021-29349", - "description": "CVE-2021-29349 CSRF to remove all messages in Mahara 20.10", - "fork": false, - "created_at": "2021-04-17T18:48:38Z", - "updated_at": "2024-08-12T20:12:15Z", - "pushed_at": "2021-04-17T18:54:48Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-29440.json b/2021/CVE-2021-29440.json deleted file mode 100644 index 4fc7f2835d..0000000000 --- a/2021/CVE-2021-29440.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 374239784, - "name": "CVE-2021-29440", - "full_name": "CsEnox\/CVE-2021-29440", - "owner": { - "login": "CsEnox", - "id": 60170196, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/60170196?v=4", - "html_url": "https:\/\/github.com\/CsEnox", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/CsEnox\/CVE-2021-29440", - "description": "Unsafe Twig processing of static pages leading to RCE in Grav CMS 1.7.10", - "fork": false, - "created_at": "2021-06-06T00:51:21Z", - "updated_at": "2024-08-12T20:13:39Z", - "pushed_at": "2021-06-06T03:42:17Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-29447.json b/2021/CVE-2021-29447.json index 3d4cbead99..f4710e115c 100644 --- a/2021/CVE-2021-29447.json +++ b/2021/CVE-2021-29447.json @@ -32,39 +32,6 @@ "score": 0, "subscribers_count": 2 }, - { - "id": 370069665, - "name": "wordpress_cve-2021-29447", - "full_name": "Vulnmachines\/wordpress_cve-2021-29447", - "owner": { - "login": "Vulnmachines", - "id": 79006904, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79006904?v=4", - "html_url": "https:\/\/github.com\/Vulnmachines", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Vulnmachines\/wordpress_cve-2021-29447", - "description": "WordPress XXE vulnerability", - "fork": false, - "created_at": "2021-05-23T14:08:34Z", - "updated_at": "2024-08-12T20:13:17Z", - "pushed_at": "2021-05-23T14:11:04Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - }, { "id": 372785442, "name": "CVE-2021-29447", diff --git a/2021/CVE-2021-29505.json b/2021/CVE-2021-29505.json index 8da2f27442..3e8b53fb44 100644 --- a/2021/CVE-2021-29505.json +++ b/2021/CVE-2021-29505.json @@ -1,37 +1,4 @@ [ - { - "id": 374891682, - "name": "CVE-2021-29505", - "full_name": "MyBlackManba\/CVE-2021-29505", - "owner": { - "login": "MyBlackManba", - "id": 31227970, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/31227970?v=4", - "html_url": "https:\/\/github.com\/MyBlackManba", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/MyBlackManba\/CVE-2021-29505", - "description": "对CVE-2021-29505进行复现，并分析学了下Xstream反序列化过程", - "fork": false, - "created_at": "2021-06-08T05:27:57Z", - "updated_at": "2025-04-01T03:03:13Z", - "pushed_at": "2021-06-08T05:55:57Z", - "stargazers_count": 6, - "watchers_count": 6, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 6, - "score": 0, - "subscribers_count": 2 - }, { "id": 1017747727, "name": "xstream-CVE-2021-29505", diff --git a/2021/CVE-2021-29627.json b/2021/CVE-2021-29627.json deleted file mode 100644 index abcf398b4b..0000000000 --- a/2021/CVE-2021-29627.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 357104598, - "name": "cve-2021-29627", - "full_name": "raymontag\/cve-2021-29627", - "owner": { - "login": "raymontag", - "id": 106421, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/106421?v=4", - "html_url": "https:\/\/github.com\/raymontag", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/raymontag\/cve-2021-29627", - "description": "Trigger-only for CVE-2021-29627", - "fork": false, - "created_at": "2021-04-12T07:51:03Z", - "updated_at": "2026-05-13T19:48:35Z", - "pushed_at": "2021-04-12T07:51:40Z", - "stargazers_count": 12, - "watchers_count": 12, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 12, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-30005.json b/2021/CVE-2021-30005.json deleted file mode 100644 index 1467b233b9..0000000000 --- a/2021/CVE-2021-30005.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 250616831, - "name": "CVE-2021-30005-POC", - "full_name": "atorralba\/CVE-2021-30005-POC", - "owner": { - "login": "atorralba", - "id": 11612352, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/11612352?v=4", - "html_url": "https:\/\/github.com\/atorralba", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/atorralba\/CVE-2021-30005-POC", - "description": null, - "fork": false, - "created_at": "2020-03-27T18:41:07Z", - "updated_at": "2025-10-07T09:04:57Z", - "pushed_at": "2021-05-12T11:15:44Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-3007.json b/2021/CVE-2021-3007.json index 5d8c4e981a..0324ec6288 100644 --- a/2021/CVE-2021-3007.json +++ b/2021/CVE-2021-3007.json @@ -1,37 +1,4 @@ [ - { - "id": 368556385, - "name": "ZF3_CVE-2021-3007", - "full_name": "Vulnmachines\/ZF3_CVE-2021-3007", - "owner": { - "login": "Vulnmachines", - "id": 79006904, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79006904?v=4", - "html_url": "https:\/\/github.com\/Vulnmachines", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Vulnmachines\/ZF3_CVE-2021-3007", - "description": "ZendFramework_CVE-2021-3007 PoC", - "fork": false, - "created_at": "2021-05-18T14:16:02Z", - "updated_at": "2024-08-12T20:13:07Z", - "pushed_at": "2021-05-18T14:17:26Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, { "id": 1110467959, "name": "CVE-2021-3007-docker-poc", diff --git a/2021/CVE-2021-30128.json b/2021/CVE-2021-30128.json deleted file mode 100644 index 4a9e761a2c..0000000000 --- a/2021/CVE-2021-30128.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 362903981, - "name": "CVE-2021-30128-EXP", - "full_name": "LioTree\/CVE-2021-30128-EXP", - "owner": { - "login": "LioTree", - "id": 12847578, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/12847578?v=4", - "html_url": "https:\/\/github.com\/LioTree", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/LioTree\/CVE-2021-30128-EXP", - "description": null, - "fork": false, - "created_at": "2021-04-29T17:59:59Z", - "updated_at": "2025-09-03T11:58:09Z", - "pushed_at": "2021-04-30T15:01:38Z", - "stargazers_count": 21, - "watchers_count": 21, - "has_discussions": false, - "forks_count": 12, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 12, - "watchers": 21, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-30146.json b/2021/CVE-2021-30146.json deleted file mode 100644 index f1e75e55ec..0000000000 --- a/2021/CVE-2021-30146.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 355128115, - "name": "CVE-2021-30146", - "full_name": "Security-AVS\/CVE-2021-30146", - "owner": { - "login": "Security-AVS", - "id": 72926885, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/72926885?v=4", - "html_url": "https:\/\/github.com\/Security-AVS", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Security-AVS\/CVE-2021-30146", - "description": "Seafile 7.0.5 Persistent XSS", - "fork": false, - "created_at": "2021-04-06T09:16:37Z", - "updated_at": "2023-12-15T06:39:19Z", - "pushed_at": "2021-04-06T09:19:48Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-3019.json b/2021/CVE-2021-3019.json index 66696389ce..6af030a2b9 100644 --- a/2021/CVE-2021-3019.json +++ b/2021/CVE-2021-3019.json @@ -1,204 +1,4 @@ [ - { - "id": 328097281, - "name": "CVE-2021-3019", - "full_name": "B1anda0\/CVE-2021-3019", - "owner": { - "login": "B1anda0", - "id": 74232513, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74232513?v=4", - "html_url": "https:\/\/github.com\/B1anda0", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/B1anda0\/CVE-2021-3019", - "description": "lanproxy 目录遍历漏洞批量检测 (CVE-2021-3019)", - "fork": false, - "created_at": "2021-01-09T07:11:38Z", - "updated_at": "2024-08-12T20:09:14Z", - "pushed_at": "2021-01-09T07:14:26Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 5, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 5, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 328546705, - "name": "CVE-2021-3019", - "full_name": "0xf4n9x\/CVE-2021-3019", - "owner": { - "login": "0xf4n9x", - "id": 40891670, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/40891670?v=4", - "html_url": "https:\/\/github.com\/0xf4n9x", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0xf4n9x\/CVE-2021-3019", - "description": "CVE-2021-3019 lanproxy目录遍历任意文件读取漏洞探测POC", - "fork": false, - "created_at": "2021-01-11T04:18:44Z", - "updated_at": "2024-10-07T04:08:12Z", - "pushed_at": "2021-03-19T14:42:49Z", - "stargazers_count": 12, - "watchers_count": 12, - "has_discussions": false, - "forks_count": 6, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 6, - "watchers": 12, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 329537345, - "name": "CVE-2021-3019", - "full_name": "Maksim-venus\/CVE-2021-3019", - "owner": { - "login": "Maksim-venus", - "id": 35008035, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/35008035?v=4", - "html_url": "https:\/\/github.com\/Maksim-venus", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Maksim-venus\/CVE-2021-3019", - "description": "lanproxy 目录遍历漏洞批量检测用户名密码POC (CVE-2021-3019)", - "fork": false, - "created_at": "2021-01-14T07:19:21Z", - "updated_at": "2025-12-12T03:59:32Z", - "pushed_at": "2021-01-14T07:52:31Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 346618078, - "name": "CVE-2021-3019", - "full_name": "murataydemir\/CVE-2021-3019", - "owner": { - "login": "murataydemir", - "id": 16391655, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16391655?v=4", - "html_url": "https:\/\/github.com\/murataydemir", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/murataydemir\/CVE-2021-3019", - "description": "[CVE-2021-3019] LanProxy Directory Traversal", - "fork": false, - "created_at": "2021-03-11T07:40:44Z", - "updated_at": "2025-04-02T14:32:34Z", - "pushed_at": "2021-03-11T08:13:00Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2021-3019" - ], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 350235820, - "name": "cve-2021-3019", - "full_name": "Aoyuh\/cve-2021-3019", - "owner": { - "login": "Aoyuh", - "id": 48713040, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48713040?v=4", - "html_url": "https:\/\/github.com\/Aoyuh", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Aoyuh\/cve-2021-3019", - "description": "lanproxy(CVE-2021-3019)目录遍历", - "fork": false, - "created_at": "2021-03-22T06:44:07Z", - "updated_at": "2021-03-22T06:44:07Z", - "pushed_at": "2021-03-22T06:44:07Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 357764838, - "name": "CVE-2021-3019", - "full_name": "givemefivw\/CVE-2021-3019", - "owner": { - "login": "givemefivw", - "id": 65514141, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/65514141?v=4", - "html_url": "https:\/\/github.com\/givemefivw", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/givemefivw\/CVE-2021-3019", - "description": null, - "fork": false, - "created_at": "2021-04-14T03:45:38Z", - "updated_at": "2024-08-12T20:12:08Z", - "pushed_at": "2021-04-14T03:53:44Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 402656166, "name": "CVE-2021-3019-Lanproxy", diff --git a/2021/CVE-2021-30461.json b/2021/CVE-2021-30461.json index 54af7e843f..7d93b47504 100644 --- a/2021/CVE-2021-30461.json +++ b/2021/CVE-2021-30461.json @@ -70,42 +70,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 366251440, - "name": "CVE-2021-30461", - "full_name": "Al1ex\/CVE-2021-30461", - "owner": { - "login": "Al1ex", - "id": 38161463, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38161463?v=4", - "html_url": "https:\/\/github.com\/Al1ex", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Al1ex\/CVE-2021-30461", - "description": "CVE-2021-30461", - "fork": false, - "created_at": "2021-05-11T04:09:04Z", - "updated_at": "2024-08-12T20:12:53Z", - "pushed_at": "2021-05-11T04:14:47Z", - "stargazers_count": 12, - "watchers_count": 12, - "has_discussions": false, - "forks_count": 6, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2021-30461", - "voipmonitor" - ], - "visibility": "public", - "forks": 6, - "watchers": 12, - "score": 0, - "subscribers_count": 1 - }, { "id": 386052413, "name": "CVE-2021-30461", diff --git a/2021/CVE-2021-30481.json b/2021/CVE-2021-30481.json deleted file mode 100644 index e4f431ade1..0000000000 --- a/2021/CVE-2021-30481.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 358758520, - "name": "CVE-2021-30481", - "full_name": "floesen\/CVE-2021-30481", - "owner": { - "login": "floesen", - "id": 7890198, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/7890198?v=4", - "html_url": "https:\/\/github.com\/floesen", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/floesen\/CVE-2021-30481", - "description": "https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2021-30481", - "fork": false, - "created_at": "2021-04-17T01:29:31Z", - "updated_at": "2025-08-30T03:59:39Z", - "pushed_at": "2021-04-20T16:00:46Z", - "stargazers_count": 58, - "watchers_count": 58, - "has_discussions": false, - "forks_count": 8, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 8, - "watchers": 58, - "score": 0, - "subscribers_count": 3 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-31159.json b/2021/CVE-2021-31159.json deleted file mode 100644 index 413c4f3909..0000000000 --- a/2021/CVE-2021-31159.json +++ /dev/null @@ -1,39 +0,0 @@ -[ - { - "id": 349519809, - "name": "CVE-2021-31159", - "full_name": "ricardojoserf\/CVE-2021-31159", - "owner": { - "login": "ricardojoserf", - "id": 11477353, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/11477353?v=4", - "html_url": "https:\/\/github.com\/ricardojoserf", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ricardojoserf\/CVE-2021-31159", - "description": "Zoho ManageEngine ServiceDesk Plus MSP - Active Directory User Enumeration (CVE-2021-31159) - https:\/\/ricardojoserf.github.io\/CVE-2021-31159\/", - "fork": false, - "created_at": "2021-03-19T18:28:43Z", - "updated_at": "2024-08-12T20:11:21Z", - "pushed_at": "2021-06-16T16:21:29Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "exploit", - "manageengine-servicedesk", - "servicedeskplus" - ], - "visibility": "public", - "forks": 1, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-31166.json b/2021/CVE-2021-31166.json index 567e63b0ec..c14d9d6f9a 100644 --- a/2021/CVE-2021-31166.json +++ b/2021/CVE-2021-31166.json @@ -1,79 +1,4 @@ [ - { - "id": 367930039, - "name": "CVE-2021-31166", - "full_name": "0vercl0k\/CVE-2021-31166", - "owner": { - "login": "0vercl0k", - "id": 1476421, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1476421?v=4", - "html_url": "https:\/\/github.com\/0vercl0k", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0vercl0k\/CVE-2021-31166", - "description": "Proof of concept for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely.", - "fork": false, - "created_at": "2021-05-16T16:15:56Z", - "updated_at": "2026-07-31T15:53:30Z", - "pushed_at": "2021-06-12T08:27:09Z", - "stargazers_count": 827, - "watchers_count": 827, - "has_discussions": false, - "forks_count": 135, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "accept-encoding", - "cve-2021-31166", - "http", - "ulpparsecontentcoding" - ], - "visibility": "public", - "forks": 135, - "watchers": 827, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 368156601, - "name": "CVE-2021-31166", - "full_name": "zha0gongz1\/CVE-2021-31166", - "owner": { - "login": "zha0gongz1", - "id": 41460798, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41460798?v=4", - "html_url": "https:\/\/github.com\/zha0gongz1", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/zha0gongz1\/CVE-2021-31166", - "description": "PoC for CVE-2021-31166, a remote HTTP.sys use-after-free triggered remotely. Although it was defined as remote command execution, it can only cause the system to crash.", - "fork": false, - "created_at": "2021-05-17T11:12:45Z", - "updated_at": "2026-07-18T03:52:49Z", - "pushed_at": "2021-05-17T11:30:26Z", - "stargazers_count": 9, - "watchers_count": 9, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "accept-encoding", - "cve-2021-31166", - "rce" - ], - "visibility": "public", - "forks": 1, - "watchers": 9, - "score": 0, - "subscribers_count": 1 - }, { "id": 368306577, "name": "CVE-2021-31166-detection-rules", @@ -140,72 +65,6 @@ "score": 0, "subscribers_count": 8 }, - { - "id": 368786720, - "name": "CVE-2021-31166", - "full_name": "zecopro\/CVE-2021-31166", - "owner": { - "login": "zecopro", - "id": 23106986, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/23106986?v=4", - "html_url": "https:\/\/github.com\/zecopro", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/zecopro\/CVE-2021-31166", - "description": "simple bash script for exploit CVE-2021-31166", - "fork": false, - "created_at": "2021-05-19T07:50:40Z", - "updated_at": "2023-10-11T14:36:15Z", - "pushed_at": "2021-05-19T08:18:56Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 5, - "score": 0, - "subscribers_count": 3 - }, - { - "id": 370131263, - "name": "WIn-CVE-2021-31166", - "full_name": "bgsilvait\/WIn-CVE-2021-31166", - "owner": { - "login": "bgsilvait", - "id": 38823062, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38823062?v=4", - "html_url": "https:\/\/github.com\/bgsilvait", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/bgsilvait\/WIn-CVE-2021-31166", - "description": null, - "fork": false, - "created_at": "2021-05-23T18:41:48Z", - "updated_at": "2021-05-23T19:32:43Z", - "pushed_at": "2021-05-23T19:32:41Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 382641118, "name": "CVE-2021-31166-Exploit", diff --git a/2021/CVE-2021-31184.json b/2021/CVE-2021-31184.json deleted file mode 100644 index c9a828e7b1..0000000000 --- a/2021/CVE-2021-31184.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 366469517, - "name": "CVE-2021-31184", - "full_name": "waleedassar\/CVE-2021-31184", - "owner": { - "login": "waleedassar", - "id": 5983995, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5983995?v=4", - "html_url": "https:\/\/github.com\/waleedassar", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/waleedassar\/CVE-2021-31184", - "description": null, - "fork": false, - "created_at": "2021-05-11T17:52:22Z", - "updated_at": "2024-12-27T09:17:54Z", - "pushed_at": "2021-05-11T17:57:10Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 5, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 5, - "watchers": 3, - "score": 0, - "subscribers_count": 3 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-3129.json b/2021/CVE-2021-3129.json index 2980b49184..be658538cb 100644 --- a/2021/CVE-2021-3129.json +++ b/2021/CVE-2021-3129.json @@ -1,206 +1,4 @@ [ - { - "id": 329307363, - "name": "laravel-exploits", - "full_name": "ambionics\/laravel-exploits", - "owner": { - "login": "ambionics", - "id": 29630660, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/29630660?v=4", - "html_url": "https:\/\/github.com\/ambionics", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ambionics\/laravel-exploits", - "description": "Exploit for CVE-2021-3129", - "fork": false, - "created_at": "2021-01-13T12:52:20Z", - "updated_at": "2026-07-08T12:30:28Z", - "pushed_at": "2021-01-29T13:59:07Z", - "stargazers_count": 289, - "watchers_count": 289, - "has_discussions": false, - "forks_count": 69, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 69, - "watchers": 289, - "score": 0, - "subscribers_count": 12 - }, - { - "id": 331843308, - "name": "CVE-2021-3129", - "full_name": "SNCKER\/CVE-2021-3129", - "owner": { - "login": "SNCKER", - "id": 49559334, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/49559334?v=4", - "html_url": "https:\/\/github.com\/SNCKER", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SNCKER\/CVE-2021-3129", - "description": "Laravel debug rce", - "fork": false, - "created_at": "2021-01-22T05:12:21Z", - "updated_at": "2026-07-28T05:38:36Z", - "pushed_at": "2021-01-24T05:28:07Z", - "stargazers_count": 135, - "watchers_count": 135, - "has_discussions": false, - "forks_count": 50, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 50, - "watchers": 135, - "score": 0, - "subscribers_count": 3 - }, - { - "id": 332682252, - "name": "laravel-CVE-2021-3129-EXP", - "full_name": "SecPros-Team\/laravel-CVE-2021-3129-EXP", - "owner": { - "login": "SecPros-Team", - "id": 77960183, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/77960183?v=4", - "html_url": "https:\/\/github.com\/SecPros-Team", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SecPros-Team\/laravel-CVE-2021-3129-EXP", - "description": null, - "fork": false, - "created_at": "2021-01-25T08:42:28Z", - "updated_at": "2026-05-25T13:28:43Z", - "pushed_at": "2021-01-25T08:49:59Z", - "stargazers_count": 78, - "watchers_count": 78, - "has_discussions": false, - "forks_count": 30, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 30, - "watchers": 78, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 333316985, - "name": "Laravel_CVE-2021-3129_EXP", - "full_name": "crisprss\/Laravel_CVE-2021-3129_EXP", - "owner": { - "login": "crisprss", - "id": 55953931, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/55953931?v=4", - "html_url": "https:\/\/github.com\/crisprss", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/crisprss\/Laravel_CVE-2021-3129_EXP", - "description": null, - "fork": false, - "created_at": "2021-01-27T05:44:52Z", - "updated_at": "2026-01-23T08:54:29Z", - "pushed_at": "2021-01-27T06:23:34Z", - "stargazers_count": 18, - "watchers_count": 18, - "has_discussions": false, - "forks_count": 7, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 7, - "watchers": 18, - "score": 0, - "subscribers_count": 2 - }, - { - "id": 333380316, - "name": "CVE-2021-3129_exploit", - "full_name": "nth347\/CVE-2021-3129_exploit", - "owner": { - "login": "nth347", - "id": 20441996, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/20441996?v=4", - "html_url": "https:\/\/github.com\/nth347", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/nth347\/CVE-2021-3129_exploit", - "description": "Exploit for CVE-2021-3129", - "fork": false, - "created_at": "2021-01-27T10:16:35Z", - "updated_at": "2026-04-11T14:13:38Z", - "pushed_at": "2021-03-07T04:39:58Z", - "stargazers_count": 69, - "watchers_count": 69, - "has_discussions": false, - "forks_count": 27, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "exploit", - "laravel", - "security" - ], - "visibility": "public", - "forks": 27, - "watchers": 69, - "score": 0, - "subscribers_count": 3 - }, - { - "id": 338768882, - "name": "Laravel-8.4.2-rce-CVE-2021-3129", - "full_name": "FunPhishing\/Laravel-8.4.2-rce-CVE-2021-3129", - "owner": { - "login": "FunPhishing", - "id": 77312720, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/77312720?v=4", - "html_url": "https:\/\/github.com\/FunPhishing", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/FunPhishing\/Laravel-8.4.2-rce-CVE-2021-3129", - "description": null, - "fork": false, - "created_at": "2021-02-14T09:24:07Z", - "updated_at": "2024-08-12T20:10:22Z", - "pushed_at": "2021-02-14T12:27:54Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 6, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 6, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, { "id": 339947921, "name": "CVE-2021-3129", @@ -234,39 +32,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 356778327, - "name": "CVE-2021-3129", - "full_name": "Y0s9\/CVE-2021-3129", - "owner": { - "login": "Y0s9", - "id": 47767103, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47767103?v=4", - "html_url": "https:\/\/github.com\/Y0s9", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Y0s9\/CVE-2021-3129", - "description": "CVE-2021-3129-Laravel Debug mode 远程代码执行漏洞", - "fork": false, - "created_at": "2021-04-11T05:47:43Z", - "updated_at": "2021-04-11T05:47:44Z", - "pushed_at": "2021-02-21T06:34:17Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 9, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 9, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 388370396, "name": "laravel-CVE-2021-3129-EXP", diff --git a/2021/CVE-2021-3130.json b/2021/CVE-2021-3130.json index c4bb27d98e..df261dff51 100644 --- a/2021/CVE-2021-3130.json +++ b/2021/CVE-2021-3130.json @@ -1,37 +1,4 @@ [ - { - "id": 331557374, - "name": "CVE-2021-3130", - "full_name": "jet-pentest\/CVE-2021-3130", - "owner": { - "login": "jet-pentest", - "id": 71512502, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71512502?v=4", - "html_url": "https:\/\/github.com\/jet-pentest", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/jet-pentest\/CVE-2021-3130", - "description": null, - "fork": false, - "created_at": "2021-01-21T08:04:32Z", - "updated_at": "2021-02-14T09:24:07Z", - "pushed_at": "2021-01-21T12:31:34Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, { "id": 566184946, "name": "CVE-2021-3130", diff --git a/2021/CVE-2021-3131.json b/2021/CVE-2021-3131.json deleted file mode 100644 index d14c8b4e9b..0000000000 --- a/2021/CVE-2021-3131.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 329230328, - "name": "CVE-2021-3131", - "full_name": "jet-pentest\/CVE-2021-3131", - "owner": { - "login": "jet-pentest", - "id": 71512502, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71512502?v=4", - "html_url": "https:\/\/github.com\/jet-pentest", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/jet-pentest\/CVE-2021-3131", - "description": "CVE-2021-3131", - "fork": false, - "created_at": "2021-01-13T07:41:25Z", - "updated_at": "2022-12-19T10:01:54Z", - "pushed_at": "2021-01-13T07:54:38Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-3138.json b/2021/CVE-2021-3138.json deleted file mode 100644 index 56cff9db93..0000000000 --- a/2021/CVE-2021-3138.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 329132844, - "name": "CVE-2021-3138", - "full_name": "Mesh3l911\/CVE-2021-3138", - "owner": { - "login": "Mesh3l911", - "id": 74990355, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74990355?v=4", - "html_url": "https:\/\/github.com\/Mesh3l911", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Mesh3l911\/CVE-2021-3138", - "description": "Discource POC", - "fork": false, - "created_at": "2021-01-12T22:50:27Z", - "updated_at": "2021-05-04T19:08:13Z", - "pushed_at": "2021-05-04T19:08:11Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-3156.json b/2021/CVE-2021-3156.json index e8ec0c283c..99af615d44 100644 --- a/2021/CVE-2021-3156.json +++ b/2021/CVE-2021-3156.json @@ -1,440 +1,4 @@ [ - { - "id": 333199828, - "name": "CVE-2021-3156", - "full_name": "mr-r3b00t\/CVE-2021-3156", - "owner": { - "login": "mr-r3b00t", - "id": 14963690, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/14963690?v=4", - "html_url": "https:\/\/github.com\/mr-r3b00t", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mr-r3b00t\/CVE-2021-3156", - "description": null, - "fork": false, - "created_at": "2021-01-26T19:53:04Z", - "updated_at": "2025-02-19T15:11:17Z", - "pushed_at": "2021-01-26T20:09:53Z", - "stargazers_count": 35, - "watchers_count": 35, - "has_discussions": false, - "forks_count": 31, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 31, - "watchers": 35, - "score": 0, - "subscribers_count": 8 - }, - { - "id": 333450928, - "name": "sudo_cve-2021-3156", - "full_name": "nexcess\/sudo_cve-2021-3156", - "owner": { - "login": "nexcess", - "id": 651829, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/651829?v=4", - "html_url": "https:\/\/github.com\/nexcess", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/nexcess\/sudo_cve-2021-3156", - "description": null, - "fork": false, - "created_at": "2021-01-27T14:40:57Z", - "updated_at": "2023-02-28T06:13:14Z", - "pushed_at": "2021-01-27T18:21:48Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 8 - }, - { - "id": 333483141, - "name": "CVE-2021-3156", - "full_name": "reverse-ex\/CVE-2021-3156", - "owner": { - "login": "reverse-ex", - "id": 77421345, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/77421345?v=4", - "html_url": "https:\/\/github.com\/reverse-ex", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/reverse-ex\/CVE-2021-3156", - "description": "CVE-2021-3156", - "fork": false, - "created_at": "2021-01-27T16:03:34Z", - "updated_at": "2026-02-24T19:07:09Z", - "pushed_at": "2021-01-31T04:56:56Z", - "stargazers_count": 112, - "watchers_count": 112, - "has_discussions": false, - "forks_count": 40, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 40, - "watchers": 112, - "score": 0, - "subscribers_count": 4 - }, - { - "id": 333492305, - "name": "CVE-2021-3156", - "full_name": "unauth401\/CVE-2021-3156", - "owner": { - "login": "unauth401", - "id": 61272656, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61272656?v=4", - "html_url": "https:\/\/github.com\/unauth401", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/unauth401\/CVE-2021-3156", - "description": null, - "fork": false, - "created_at": "2021-01-27T16:35:43Z", - "updated_at": "2024-08-12T20:09:49Z", - "pushed_at": "2021-01-27T15:19:23Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 23, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 23, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 333557918, - "name": "CVE-2021-3156", - "full_name": "ymrsmns\/CVE-2021-3156", - "owner": { - "login": "ymrsmns", - "id": 25608325, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25608325?v=4", - "html_url": "https:\/\/github.com\/ymrsmns", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ymrsmns\/CVE-2021-3156", - "description": "CVE-2021-3156", - "fork": false, - "created_at": "2021-01-27T20:57:00Z", - "updated_at": "2021-01-31T13:08:37Z", - "pushed_at": "2021-01-31T13:08:34Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 333569622, - "name": "CVE-2021-3156-PATCHER", - "full_name": "elbee-cyber\/CVE-2021-3156-PATCHER", - "owner": { - "login": "elbee-cyber", - "id": 66045908, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/66045908?v=4", - "html_url": "https:\/\/github.com\/elbee-cyber", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/elbee-cyber\/CVE-2021-3156-PATCHER", - "description": "This simple bash script will patch the recently discovered sudo heap overflow vulnerability.", - "fork": false, - "created_at": "2021-01-27T21:49:06Z", - "updated_at": "2023-08-28T18:21:53Z", - "pushed_at": "2021-01-28T05:25:26Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 333619288, - "name": "CVE-2021-3156-Baron-Samedit", - "full_name": "kernelzeroday\/CVE-2021-3156-Baron-Samedit", - "owner": { - "login": "kernelzeroday", - "id": 11334159, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/11334159?v=4", - "html_url": "https:\/\/github.com\/kernelzeroday", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/kernelzeroday\/CVE-2021-3156-Baron-Samedit", - "description": "1day research effort", - "fork": false, - "created_at": "2021-01-28T02:13:49Z", - "updated_at": "2026-07-14T06:17:15Z", - "pushed_at": "2021-01-29T03:21:13Z", - "stargazers_count": 18, - "watchers_count": 18, - "has_discussions": false, - "forks_count": 5, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 5, - "watchers": 18, - "score": 0, - "subscribers_count": 4 - }, - { - "id": 333620703, - "name": "cve-2021-3156", - "full_name": "yaunsky\/cve-2021-3156", - "owner": { - "login": "yaunsky", - "id": 48243087, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48243087?v=4", - "html_url": "https:\/\/github.com\/yaunsky", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/yaunsky\/cve-2021-3156", - "description": "cve-2021-3156;sudo堆溢出漏洞；漏洞检测", - "fork": false, - "created_at": "2021-01-28T02:20:24Z", - "updated_at": "2022-11-12T19:46:49Z", - "pushed_at": "2021-01-28T02:21:30Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 5, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 333700525, - "name": "CVE-2021-3156-Exp", - "full_name": "baka9moe\/CVE-2021-3156-Exp", - "owner": { - "login": "baka9moe", - "id": 17043012, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/17043012?v=4", - "html_url": "https:\/\/github.com\/baka9moe", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/baka9moe\/CVE-2021-3156-Exp", - "description": null, - "fork": false, - "created_at": "2021-01-28T08:55:04Z", - "updated_at": "2026-01-09T03:37:26Z", - "pushed_at": "2021-01-28T09:12:29Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 4, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 333714882, - "name": "CVE-2021-3156", - "full_name": "ph4ntonn\/CVE-2021-3156", - "owner": { - "login": "ph4ntonn", - "id": 45198234, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/45198234?v=4", - "html_url": "https:\/\/github.com\/ph4ntonn", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ph4ntonn\/CVE-2021-3156", - "description": "CVE-2021-3156", - "fork": false, - "created_at": "2021-01-28T09:52:55Z", - "updated_at": "2021-01-29T00:08:11Z", - "pushed_at": "2021-01-28T10:02:05Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve", - "cve-2021-3156" - ], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 3 - }, - { - "id": 334027841, - "name": "CVE-2021-3156-SCRIPT", - "full_name": "binw2018\/CVE-2021-3156-SCRIPT", - "owner": { - "login": "binw2018", - "id": 49139970, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/49139970?v=4", - "html_url": "https:\/\/github.com\/binw2018", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/binw2018\/CVE-2021-3156-SCRIPT", - "description": null, - "fork": false, - "created_at": "2021-01-29T03:34:31Z", - "updated_at": "2021-02-03T10:32:24Z", - "pushed_at": "2021-01-29T06:49:07Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 334128649, - "name": "CVE-2021-3156", - "full_name": "freeFV\/CVE-2021-3156", - "owner": { - "login": "freeFV", - "id": 32540878, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32540878?v=4", - "html_url": "https:\/\/github.com\/freeFV", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/freeFV\/CVE-2021-3156", - "description": null, - "fork": false, - "created_at": "2021-01-29T11:44:37Z", - "updated_at": "2021-04-29T12:50:44Z", - "pushed_at": "2021-01-29T11:36:52Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 334242353, - "name": "CVE-2021-3156", - "full_name": "mbcrump\/CVE-2021-3156", - "owner": { - "login": "mbcrump", - "id": 534885, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/534885?v=4", - "html_url": "https:\/\/github.com\/mbcrump", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mbcrump\/CVE-2021-3156", - "description": "Notes regarding CVE-2021-3156: Heap-Based Buffer Overflow in Sudo", - "fork": false, - "created_at": "2021-01-29T19:24:41Z", - "updated_at": "2025-05-03T13:17:53Z", - "pushed_at": "2021-01-31T02:21:37Z", - "stargazers_count": 39, - "watchers_count": 39, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2021-3156", - "linux", - "wsl" - ], - "visibility": "public", - "forks": 4, - "watchers": 39, - "score": 0, - "subscribers_count": 3 - }, { "id": 334318140, "name": "CVE-2021-3156", @@ -468,373 +32,6 @@ "score": 0, "subscribers_count": 7 }, - { - "id": 334390097, - "name": "CVE-2021-3156", - "full_name": "nobodyatall648\/CVE-2021-3156", - "owner": { - "login": "nobodyatall648", - "id": 35725871, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/35725871?v=4", - "html_url": "https:\/\/github.com\/nobodyatall648", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/nobodyatall648\/CVE-2021-3156", - "description": "checking CVE-2021-3156 vulnerability & patch script", - "fork": false, - "created_at": "2021-01-30T10:53:26Z", - "updated_at": "2024-01-17T14:12:38Z", - "pushed_at": "2021-02-01T02:19:20Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 334506851, - "name": "CVE-2021-3156", - "full_name": "blasty\/CVE-2021-3156", - "owner": { - "login": "blasty", - "id": 101374, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/101374?v=4", - "html_url": "https:\/\/github.com\/blasty", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/blasty\/CVE-2021-3156", - "description": null, - "fork": false, - "created_at": "2021-01-30T20:39:58Z", - "updated_at": "2026-08-05T08:44:04Z", - "pushed_at": "2021-02-02T17:07:09Z", - "stargazers_count": 1020, - "watchers_count": 1020, - "has_discussions": false, - "forks_count": 235, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 235, - "watchers": 1020, - "score": 0, - "subscribers_count": 25 - }, - { - "id": 334565393, - "name": "CVE-2021-3156", - "full_name": "teamtopkarl\/CVE-2021-3156", - "owner": { - "login": "teamtopkarl", - "id": 18065690, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18065690?v=4", - "html_url": "https:\/\/github.com\/teamtopkarl", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/teamtopkarl\/CVE-2021-3156", - "description": null, - "fork": false, - "created_at": "2021-01-31T03:38:37Z", - "updated_at": "2026-05-13T19:48:22Z", - "pushed_at": "2021-01-31T04:02:08Z", - "stargazers_count": 7, - "watchers_count": 7, - "has_discussions": false, - "forks_count": 7, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 7, - "watchers": 7, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 334594270, - "name": "CVE-2021-3156", - "full_name": "Q4n\/CVE-2021-3156", - "owner": { - "login": "Q4n", - "id": 48317526, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48317526?v=4", - "html_url": "https:\/\/github.com\/Q4n", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Q4n\/CVE-2021-3156", - "description": "复现别人家的CVEs系列", - "fork": false, - "created_at": "2021-01-31T07:01:50Z", - "updated_at": "2022-11-09T18:11:04Z", - "pushed_at": "2021-01-31T07:02:44Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 334697314, - "name": "CVE-2021-3156", - "full_name": "kal1gh0st\/CVE-2021-3156", - "owner": { - "login": "kal1gh0st", - "id": 56889513, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/56889513?v=4", - "html_url": "https:\/\/github.com\/kal1gh0st", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/kal1gh0st\/CVE-2021-3156", - "description": "Description Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via \"sudoedit -s\" and a command-line argument that ends with a single backslash character. ", - "fork": false, - "created_at": "2021-01-31T16:10:11Z", - "updated_at": "2021-12-15T00:43:34Z", - "pushed_at": "2021-05-04T14:41:30Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 334775019, - "name": "docker-CVE-2021-3156", - "full_name": "apogiatzis\/docker-CVE-2021-3156", - "owner": { - "login": "apogiatzis", - "id": 39923420, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/39923420?v=4", - "html_url": "https:\/\/github.com\/apogiatzis", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/apogiatzis\/docker-CVE-2021-3156", - "description": "A docker environment to research CVE-2021-3156", - "fork": false, - "created_at": "2021-01-31T22:58:13Z", - "updated_at": "2024-08-12T20:09:57Z", - "pushed_at": "2021-01-31T23:03:51Z", - "stargazers_count": 7, - "watchers_count": 7, - "has_discussions": false, - "forks_count": 6, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 6, - "watchers": 7, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 334914030, - "name": "CVE-2021-3156-Patch", - "full_name": "Ashish-dawani\/CVE-2021-3156-Patch", - "owner": { - "login": "Ashish-dawani", - "id": 11299833, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/11299833?v=4", - "html_url": "https:\/\/github.com\/Ashish-dawani", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Ashish-dawani\/CVE-2021-3156-Patch", - "description": "Patch Script for CVE-2021-3156 Heap Overflow", - "fork": false, - "created_at": "2021-02-01T10:35:03Z", - "updated_at": "2021-02-01T11:24:51Z", - "pushed_at": "2021-02-01T11:24:49Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 335050084, - "name": "ScannerCVE-2021-3156", - "full_name": "SantiagoSerrao\/ScannerCVE-2021-3156", - "owner": { - "login": "SantiagoSerrao", - "id": 49415402, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/49415402?v=4", - "html_url": "https:\/\/github.com\/SantiagoSerrao", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SantiagoSerrao\/ScannerCVE-2021-3156", - "description": null, - "fork": false, - "created_at": "2021-02-01T18:46:34Z", - "updated_at": "2021-09-28T20:54:25Z", - "pushed_at": "2021-02-01T18:50:07Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 335558169, - "name": "CTF-2021", - "full_name": "DanielAzulayy\/CTF-2021", - "owner": { - "login": "DanielAzulayy", - "id": 69147968, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/69147968?v=4", - "html_url": "https:\/\/github.com\/DanielAzulayy", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/DanielAzulayy\/CTF-2021", - "description": "CTF for HDE 64 students at See Security College. Exploit a JWT (web part) & CVE-2021-3156 (LPE part).", - "fork": false, - "created_at": "2021-02-03T08:36:01Z", - "updated_at": "2021-05-05T10:52:48Z", - "pushed_at": "2021-03-05T16:22:09Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "ctf", - "lpe", - "users-solving" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 335565227, - "name": "Serpentiel-CVE-2021-3156", - "full_name": "cdeletre\/Serpentiel-CVE-2021-3156", - "owner": { - "login": "cdeletre", - "id": 12409537, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/12409537?v=4", - "html_url": "https:\/\/github.com\/cdeletre", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/cdeletre\/Serpentiel-CVE-2021-3156", - "description": null, - "fork": false, - "created_at": "2021-02-03T09:04:14Z", - "updated_at": "2021-10-12T18:17:20Z", - "pushed_at": "2021-02-03T09:04:15Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 335576846, - "name": "CVE-2021-3156", - "full_name": "dinhbaouit\/CVE-2021-3156", - "owner": { - "login": "dinhbaouit", - "id": 17717385, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/17717385?v=4", - "html_url": "https:\/\/github.com\/dinhbaouit", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dinhbaouit\/CVE-2021-3156", - "description": "CVE-2021-3156 Vagrant Lab", - "fork": false, - "created_at": "2021-02-03T09:48:46Z", - "updated_at": "2024-12-22T05:51:51Z", - "pushed_at": "2021-02-03T10:58:39Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 5, - "score": 0, - "subscribers_count": 1 - }, { "id": 335739221, "name": "CVE-2021-3156", @@ -868,72 +65,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 336220602, - "name": "sudo-1.8.3p1-patched", - "full_name": "perlun\/sudo-1.8.3p1-patched", - "owner": { - "login": "perlun", - "id": 630613, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/630613?v=4", - "html_url": "https:\/\/github.com\/perlun", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/perlun\/sudo-1.8.3p1-patched", - "description": "Custom version of sudo 1.8.3p1 with CVE-2021-3156 patches applied", - "fork": false, - "created_at": "2021-02-05T09:13:17Z", - "updated_at": "2021-02-05T09:25:37Z", - "pushed_at": "2021-02-05T09:25:34Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 336638175, - "name": "CVE-2021-3156-PoC", - "full_name": "1N53C\/CVE-2021-3156-PoC", - "owner": { - "login": "1N53C", - "id": 34792428, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/34792428?v=4", - "html_url": "https:\/\/github.com\/1N53C", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/1N53C\/CVE-2021-3156-PoC", - "description": null, - "fork": false, - "created_at": "2021-02-06T21:16:11Z", - "updated_at": "2026-06-05T15:19:01Z", - "pushed_at": "2021-02-06T21:20:04Z", - "stargazers_count": 7, - "watchers_count": 7, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 7, - "score": 0, - "subscribers_count": 1 - }, { "id": 337169035, "name": "CVE-2021-3156", @@ -967,138 +98,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 337321053, - "name": "cve-2021-3156", - "full_name": "gmldbd94\/cve-2021-3156", - "owner": { - "login": "gmldbd94", - "id": 26623299, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26623299?v=4", - "html_url": "https:\/\/github.com\/gmldbd94", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/gmldbd94\/cve-2021-3156", - "description": "보안취약점 확인", - "fork": false, - "created_at": "2021-02-09T07:06:49Z", - "updated_at": "2021-02-09T07:22:16Z", - "pushed_at": "2021-02-09T07:22:13Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 337331342, - "name": "CVE-2021-3156", - "full_name": "jm33-m0\/CVE-2021-3156", - "owner": { - "login": "jm33-m0", - "id": 10167884, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/10167884?v=4", - "html_url": "https:\/\/github.com\/jm33-m0", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/jm33-m0\/CVE-2021-3156", - "description": "sudo heap overflow to LPE, in Go", - "fork": false, - "created_at": "2021-02-09T07:55:47Z", - "updated_at": "2024-08-12T20:10:13Z", - "pushed_at": "2021-02-09T08:11:04Z", - "stargazers_count": 16, - "watchers_count": 16, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 16, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 337512578, - "name": "CVE-2021-3156-plus", - "full_name": "Rvn0xsy\/CVE-2021-3156-plus", - "owner": { - "login": "Rvn0xsy", - "id": 19944759, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/19944759?v=4", - "html_url": "https:\/\/github.com\/Rvn0xsy", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Rvn0xsy\/CVE-2021-3156-plus", - "description": "CVE-2021-3156非交互式执行命令", - "fork": false, - "created_at": "2021-02-09T19:25:18Z", - "updated_at": "2026-06-14T05:44:18Z", - "pushed_at": "2021-02-09T19:31:33Z", - "stargazers_count": 205, - "watchers_count": 205, - "has_discussions": false, - "forks_count": 40, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 40, - "watchers": 205, - "score": 0, - "subscribers_count": 3 - }, - { - "id": 341413027, - "name": "CVE-2021-3156", - "full_name": "oneoy\/CVE-2021-3156", - "owner": { - "login": "oneoy", - "id": 38435398, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38435398?v=4", - "html_url": "https:\/\/github.com\/oneoy", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/oneoy\/CVE-2021-3156", - "description": null, - "fork": false, - "created_at": "2021-02-23T03:14:36Z", - "updated_at": "2024-08-12T20:10:36Z", - "pushed_at": "2021-02-23T03:14:45Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 348065462, "name": "CVE-2021-3156", @@ -1132,105 +131,6 @@ "score": 0, "subscribers_count": 10 }, - { - "id": 349444222, - "name": "CVE-2021-3156", - "full_name": "lmol\/CVE-2021-3156", - "owner": { - "login": "lmol", - "id": 1568731, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1568731?v=4", - "html_url": "https:\/\/github.com\/lmol", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/lmol\/CVE-2021-3156", - "description": "Exploit generator for sudo CVE-2021-3156", - "fork": false, - "created_at": "2021-03-19T14:06:09Z", - "updated_at": "2022-03-16T16:30:23Z", - "pushed_at": "2021-03-25T23:52:40Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 352891561, - "name": "CVE-2021-3156", - "full_name": "BearCat4\/CVE-2021-3156", - "owner": { - "login": "BearCat4", - "id": 42698332, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42698332?v=4", - "html_url": "https:\/\/github.com\/BearCat4", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/BearCat4\/CVE-2021-3156", - "description": "CVE-2021-3156漏洞修复Shell", - "fork": false, - "created_at": "2021-03-30T06:17:44Z", - "updated_at": "2022-08-22T03:19:22Z", - "pushed_at": "2021-03-30T06:58:11Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 354924420, - "name": "CVE-2021-3156", - "full_name": "capturingcats\/CVE-2021-3156", - "owner": { - "login": "capturingcats", - "id": 81662965, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/81662965?v=4", - "html_url": "https:\/\/github.com\/capturingcats", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/capturingcats\/CVE-2021-3156", - "description": null, - "fork": false, - "created_at": "2021-04-05T18:00:43Z", - "updated_at": "2021-04-05T18:39:34Z", - "pushed_at": "2021-04-05T18:03:00Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 362713324, "name": "pwnedit", @@ -1264,105 +164,6 @@ "score": 0, "subscribers_count": 8 }, - { - "id": 364464496, - "name": "CVE-2021-3156-Mitigation-ShellScript-Build", - "full_name": "ajtech-hue\/CVE-2021-3156-Mitigation-ShellScript-Build", - "owner": { - "login": "ajtech-hue", - "id": 60117733, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/60117733?v=4", - "html_url": "https:\/\/github.com\/ajtech-hue", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ajtech-hue\/CVE-2021-3156-Mitigation-ShellScript-Build", - "description": null, - "fork": false, - "created_at": "2021-05-05T04:51:03Z", - "updated_at": "2021-05-05T04:58:52Z", - "pushed_at": "2021-05-05T04:58:50Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 380136612, - "name": "CVE-2021-3156", - "full_name": "donghyunlee00\/CVE-2021-3156", - "owner": { - "login": "donghyunlee00", - "id": 26313346, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26313346?v=4", - "html_url": "https:\/\/github.com\/donghyunlee00", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/donghyunlee00\/CVE-2021-3156", - "description": null, - "fork": false, - "created_at": "2021-06-25T05:45:11Z", - "updated_at": "2021-06-25T06:11:02Z", - "pushed_at": "2021-06-25T06:10:59Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 381790796, - "name": "CVE-2021-3156", - "full_name": "TheFlash2k\/CVE-2021-3156", - "owner": { - "login": "TheFlash2k", - "id": 19727349, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/19727349?v=4", - "html_url": "https:\/\/github.com\/TheFlash2k", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/TheFlash2k\/CVE-2021-3156", - "description": null, - "fork": false, - "created_at": "2021-06-30T18:00:03Z", - "updated_at": "2022-11-09T18:12:46Z", - "pushed_at": "2021-06-30T18:00:24Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, { "id": 389541328, "name": "CVE-2021-3156", diff --git a/2021/CVE-2021-3157.json b/2021/CVE-2021-3157.json deleted file mode 100644 index d5ca416776..0000000000 --- a/2021/CVE-2021-3157.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 333708745, - "name": "cve-2021-3157", - "full_name": "CrackerCat\/cve-2021-3157", - "owner": { - "login": "CrackerCat", - "id": 17995064, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/17995064?v=4", - "html_url": "https:\/\/github.com\/CrackerCat", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/CrackerCat\/cve-2021-3157", - "description": "脚本小子竟是我自己?", - "fork": false, - "created_at": "2021-01-28T09:27:49Z", - "updated_at": "2022-01-07T08:58:03Z", - "pushed_at": "2021-01-28T02:57:24Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-3164.json b/2021/CVE-2021-3164.json deleted file mode 100644 index e6c3602911..0000000000 --- a/2021/CVE-2021-3164.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 331173610, - "name": "cve-2021-3164", - "full_name": "rmccarth\/cve-2021-3164", - "owner": { - "login": "rmccarth", - "id": 36937649, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/36937649?v=4", - "html_url": "https:\/\/github.com\/rmccarth", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/rmccarth\/cve-2021-3164", - "description": "Church Rota version 2.6.4 is vulnerable to authenticated remote code execution. The user does not need to have file upload permission in order to upload and execute an arbitrary file. The application is written primarily with PHP so we use PHP in our PoC ", - "fork": false, - "created_at": "2021-01-20T02:48:46Z", - "updated_at": "2021-10-16T06:43:27Z", - "pushed_at": "2021-01-20T02:49:27Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-31728.json b/2021/CVE-2021-31728.json deleted file mode 100644 index ee9327caf6..0000000000 --- a/2021/CVE-2021-31728.json +++ /dev/null @@ -1,39 +0,0 @@ -[ - { - "id": 364331767, - "name": "CVE-2021-31728", - "full_name": "irql\/CVE-2021-31728", - "owner": { - "login": "irql", - "id": 38012156, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38012156?v=4", - "html_url": "https:\/\/github.com\/irql", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/irql\/CVE-2021-31728", - "description": "vulnerability in zam64.sys, zam32.sys allowing ring 0 code execution. CVE-2021-31727 and CVE-2021-31728 public reference.", - "fork": false, - "created_at": "2021-05-04T17:15:58Z", - "updated_at": "2026-07-11T11:39:45Z", - "pushed_at": "2021-05-10T20:42:33Z", - "stargazers_count": 89, - "watchers_count": 89, - "has_discussions": false, - "forks_count": 24, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2021-31727", - "cve-2021-31728", - "vulnerability" - ], - "visibility": "public", - "forks": 24, - "watchers": 89, - "score": 0, - "subscribers_count": 5 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-31760.json b/2021/CVE-2021-31760.json deleted file mode 100644 index eb30b0322c..0000000000 --- a/2021/CVE-2021-31760.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 359983710, - "name": "CVE-2021-31760", - "full_name": "Mesh3l911\/CVE-2021-31760", - "owner": { - "login": "Mesh3l911", - "id": 74990355, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74990355?v=4", - "html_url": "https:\/\/github.com\/Mesh3l911", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Mesh3l911\/CVE-2021-31760", - "description": "Exploiting a Cross-site request forgery (CSRF) attack to get a Remote Command Execution (RCE) through the Webmin's running process feature", - "fork": false, - "created_at": "2021-04-21T00:09:54Z", - "updated_at": "2021-04-29T02:55:07Z", - "pushed_at": "2021-04-24T20:07:02Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 360287311, - "name": "CVE-2021-31760", - "full_name": "electronicbots\/CVE-2021-31760", - "owner": { - "login": "electronicbots", - "id": 37217081, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/37217081?v=4", - "html_url": "https:\/\/github.com\/electronicbots", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/electronicbots\/CVE-2021-31760", - "description": "Exploiting a Cross-site request forgery (CSRF) attack to get a Remote Command Execution (RCE) through the Webmin's running process feature", - "fork": false, - "created_at": "2021-04-21T19:43:53Z", - "updated_at": "2025-01-04T08:47:02Z", - "pushed_at": "2021-04-24T22:06:53Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 4, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-31761.json b/2021/CVE-2021-31761.json deleted file mode 100644 index e1c21d2484..0000000000 --- a/2021/CVE-2021-31761.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 360288017, - "name": "CVE-2021-31761", - "full_name": "Mesh3l911\/CVE-2021-31761", - "owner": { - "login": "Mesh3l911", - "id": 74990355, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74990355?v=4", - "html_url": "https:\/\/github.com\/Mesh3l911", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Mesh3l911\/CVE-2021-31761", - "description": "Exploiting a Reflected Cross-Site Scripting (XSS) attack to get a Remote Command Execution (RCE) through the Webmin's running process feature", - "fork": false, - "created_at": "2021-04-21T19:46:43Z", - "updated_at": "2022-11-11T20:17:25Z", - "pushed_at": "2021-04-24T20:08:12Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 5, - "score": 0, - "subscribers_count": 3 - }, - { - "id": 360291163, - "name": "CVE-2021-31761", - "full_name": "electronicbots\/CVE-2021-31761", - "owner": { - "login": "electronicbots", - "id": 37217081, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/37217081?v=4", - "html_url": "https:\/\/github.com\/electronicbots", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/electronicbots\/CVE-2021-31761", - "description": "Exploiting a Reflected Cross-Site Scripting (XSS) attack to get a Remote Command Execution (RCE) through the Webmin's running process feature", - "fork": false, - "created_at": "2021-04-21T20:00:09Z", - "updated_at": "2022-12-05T03:51:41Z", - "pushed_at": "2021-04-24T22:08:16Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 5, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 5, - "watchers": 4, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-31762.json b/2021/CVE-2021-31762.json deleted file mode 100644 index ee6fa195ae..0000000000 --- a/2021/CVE-2021-31762.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 360292539, - "name": "CVE-2021-31762", - "full_name": "Mesh3l911\/CVE-2021-31762", - "owner": { - "login": "Mesh3l911", - "id": 74990355, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74990355?v=4", - "html_url": "https:\/\/github.com\/Mesh3l911", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Mesh3l911\/CVE-2021-31762", - "description": "Exploiting a Cross-site request forgery (CSRF) attack to creat a new privileged user through the Webmin's add users feature", - "fork": false, - "created_at": "2021-04-21T20:06:09Z", - "updated_at": "2021-05-19T00:05:17Z", - "pushed_at": "2021-04-24T20:10:01Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 360294065, - "name": "CVE-2021-31762", - "full_name": "electronicbots\/CVE-2021-31762", - "owner": { - "login": "electronicbots", - "id": 37217081, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/37217081?v=4", - "html_url": "https:\/\/github.com\/electronicbots", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/electronicbots\/CVE-2021-31762", - "description": "Exploiting a Cross-site request forgery (CSRF) attack to creat a new privileged user through the Webmin's add users feature ", - "fork": false, - "created_at": "2021-04-21T20:13:06Z", - "updated_at": "2024-08-12T20:12:22Z", - "pushed_at": "2021-04-24T22:05:36Z", - "stargazers_count": 8, - "watchers_count": 8, - "has_discussions": false, - "forks_count": 7, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 7, - "watchers": 8, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-31856.json b/2021/CVE-2021-31856.json deleted file mode 100644 index f497541f75..0000000000 --- a/2021/CVE-2021-31856.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 364492629, - "name": "CVE-2021-31856", - "full_name": "ssst0n3\/CVE-2021-31856", - "owner": { - "login": "ssst0n3", - "id": 16935049, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16935049?v=4", - "html_url": "https:\/\/github.com\/ssst0n3", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ssst0n3\/CVE-2021-31856", - "description": null, - "fork": false, - "created_at": "2021-05-05T07:18:26Z", - "updated_at": "2021-05-05T08:55:20Z", - "pushed_at": "2021-05-05T08:55:18Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-31955.json b/2021/CVE-2021-31955.json index e8506997f4..991d4edefd 100644 --- a/2021/CVE-2021-31955.json +++ b/2021/CVE-2021-31955.json @@ -1,37 +1,4 @@ [ - { - "id": 380408979, - "name": "CVE-2021-31955-POC", - "full_name": "freeide\/CVE-2021-31955-POC", - "owner": { - "login": "freeide", - "id": 33774184, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/33774184?v=4", - "html_url": "https:\/\/github.com\/freeide", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/freeide\/CVE-2021-31955-POC", - "description": null, - "fork": false, - "created_at": "2021-06-26T03:59:38Z", - "updated_at": "2026-06-30T12:01:16Z", - "pushed_at": "2021-06-26T03:23:29Z", - "stargazers_count": 11, - "watchers_count": 11, - "has_discussions": false, - "forks_count": 20, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 20, - "watchers": 11, - "score": 0, - "subscribers_count": 1 - }, { "id": 1085945404, "name": "forti_shield", diff --git a/2021/CVE-2021-32156.json b/2021/CVE-2021-32156.json deleted file mode 100644 index 2d7bf05df0..0000000000 --- a/2021/CVE-2021-32156.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 361284441, - "name": "CVE-2021-32156", - "full_name": "Mesh3l911\/CVE-2021-32156", - "owner": { - "login": "Mesh3l911", - "id": 74990355, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74990355?v=4", - "html_url": "https:\/\/github.com\/Mesh3l911", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Mesh3l911\/CVE-2021-32156", - "description": "Exploiting a Cross-site request forgery (CSRF) attack to get a Remote Command Execution (RCE) through the Webmin's Scheduled Cron Jobs feature", - "fork": false, - "created_at": "2021-04-24T23:02:45Z", - "updated_at": "2022-04-06T22:11:24Z", - "pushed_at": "2021-04-26T01:46:22Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-32157.json b/2021/CVE-2021-32157.json deleted file mode 100644 index aee05e457e..0000000000 --- a/2021/CVE-2021-32157.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 361309279, - "name": "CVE-2021-32157", - "full_name": "Mesh3l911\/CVE-2021-32157", - "owner": { - "login": "Mesh3l911", - "id": 74990355, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74990355?v=4", - "html_url": "https:\/\/github.com\/Mesh3l911", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Mesh3l911\/CVE-2021-32157", - "description": "Exploiting a Reflected Cross-Site Scripting (XSS) attack to get a Remote Command Execution (RCE) through the Webmin's Scheduled Cron Jobs feature", - "fork": false, - "created_at": "2021-04-25T02:08:34Z", - "updated_at": "2022-04-06T22:12:02Z", - "pushed_at": "2021-04-26T01:46:00Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-32158.json b/2021/CVE-2021-32158.json deleted file mode 100644 index 63396d03af..0000000000 --- a/2021/CVE-2021-32158.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 361584351, - "name": "CVE-2021-32158", - "full_name": "Mesh3l911\/CVE-2021-32158", - "owner": { - "login": "Mesh3l911", - "id": 74990355, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74990355?v=4", - "html_url": "https:\/\/github.com\/Mesh3l911", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Mesh3l911\/CVE-2021-32158", - "description": "Exploiting a Reflected Cross-Site Scripting (XSS) attack to get a Command Injection through the Webmin's Upload and Download feature", - "fork": false, - "created_at": "2021-04-26T01:42:19Z", - "updated_at": "2022-04-06T22:13:09Z", - "pushed_at": "2021-04-26T01:44:13Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-32159.json b/2021/CVE-2021-32159.json deleted file mode 100644 index b193d64faf..0000000000 --- a/2021/CVE-2021-32159.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 361580646, - "name": "CVE-2021-32159", - "full_name": "Mesh3l911\/CVE-2021-32159", - "owner": { - "login": "Mesh3l911", - "id": 74990355, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74990355?v=4", - "html_url": "https:\/\/github.com\/Mesh3l911", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Mesh3l911\/CVE-2021-32159", - "description": "Exploiting a Cross-site request forgery (CSRF) attack to get a Command Injetion through the Webmin's Upload and Download feature", - "fork": false, - "created_at": "2021-04-26T01:23:16Z", - "updated_at": "2022-04-06T22:14:14Z", - "pushed_at": "2021-04-26T01:45:24Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-32160.json b/2021/CVE-2021-32160.json deleted file mode 100644 index c7edd79e8e..0000000000 --- a/2021/CVE-2021-32160.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 361281776, - "name": "CVE-2021-32160", - "full_name": "Mesh3l911\/CVE-2021-32160", - "owner": { - "login": "Mesh3l911", - "id": 74990355, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74990355?v=4", - "html_url": "https:\/\/github.com\/Mesh3l911", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Mesh3l911\/CVE-2021-32160", - "description": "Exploiting a Reflected Cross-Site Scripting (XSS) attack to create a privileged user through the Webmin's add users feature then getting a reverse shell through the Webmin's running process feature", - "fork": false, - "created_at": "2021-04-24T22:42:28Z", - "updated_at": "2022-04-06T22:15:57Z", - "pushed_at": "2021-04-26T01:46:49Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-32161.json b/2021/CVE-2021-32161.json deleted file mode 100644 index 1f863f6203..0000000000 --- a/2021/CVE-2021-32161.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 361587735, - "name": "CVE-2021-32161", - "full_name": "Mesh3l911\/CVE-2021-32161", - "owner": { - "login": "Mesh3l911", - "id": 74990355, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74990355?v=4", - "html_url": "https:\/\/github.com\/Mesh3l911", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Mesh3l911\/CVE-2021-32161", - "description": "Exploiting a Reflected Cross-Site Scripting (XSS) attack to get a Command Injection through the Webmin's File Manager feature ", - "fork": false, - "created_at": "2021-04-26T01:59:44Z", - "updated_at": "2022-04-06T22:16:54Z", - "pushed_at": "2021-04-26T02:00:42Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-32162.json b/2021/CVE-2021-32162.json deleted file mode 100644 index b4dc3439e3..0000000000 --- a/2021/CVE-2021-32162.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 361589905, - "name": "CVE-2021-32162", - "full_name": "Mesh3l911\/CVE-2021-32162", - "owner": { - "login": "Mesh3l911", - "id": 74990355, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74990355?v=4", - "html_url": "https:\/\/github.com\/Mesh3l911", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Mesh3l911\/CVE-2021-32162", - "description": "Exploiting a Cross-site request forgery (CSRF) attack to get a Command Injection through the Webmin's File Manager feature", - "fork": false, - "created_at": "2021-04-26T02:10:43Z", - "updated_at": "2022-04-09T20:58:11Z", - "pushed_at": "2021-04-26T02:17:06Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-32537.json b/2021/CVE-2021-32537.json deleted file mode 100644 index 2aac977ee2..0000000000 --- a/2021/CVE-2021-32537.json +++ /dev/null @@ -1,41 +0,0 @@ -[ - { - "id": 375408417, - "name": "CVE-2021-32537", - "full_name": "0vercl0k\/CVE-2021-32537", - "owner": { - "login": "0vercl0k", - "id": 1476421, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1476421?v=4", - "html_url": "https:\/\/github.com\/0vercl0k", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0vercl0k\/CVE-2021-32537", - "description": "PoC for CVE-2021-32537: an out-of-bounds memory access that leads to pool corruption in the Windows kernel.", - "fork": false, - "created_at": "2021-06-09T15:44:00Z", - "updated_at": "2026-05-23T10:51:59Z", - "pushed_at": "2021-06-26T18:31:23Z", - "stargazers_count": 55, - "watchers_count": 55, - "has_discussions": false, - "forks_count": 11, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2021-32537", - "pool-corruption", - "realtek-driver", - "rtkvhd64", - "tvn-202106002" - ], - "visibility": "public", - "forks": 11, - "watchers": 55, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-32819.json b/2021/CVE-2021-32819.json deleted file mode 100644 index c4c7db7c92..0000000000 --- a/2021/CVE-2021-32819.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 376344697, - "name": "CVE-2021-32819", - "full_name": "Abady0x1\/CVE-2021-32819", - "owner": { - "login": "Abady0x1", - "id": 42253363, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42253363?v=4", - "html_url": "https:\/\/github.com\/Abady0x1", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Abady0x1\/CVE-2021-32819", - "description": "SquirrellyJS mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuration options, remote code execution may be triggered in downstream applications.", - "fork": false, - "created_at": "2021-06-12T17:09:48Z", - "updated_at": "2024-06-21T09:59:35Z", - "pushed_at": "2021-06-12T17:17:41Z", - "stargazers_count": 10, - "watchers_count": 10, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 10, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-3291.json b/2021/CVE-2021-3291.json deleted file mode 100644 index 503db9587d..0000000000 --- a/2021/CVE-2021-3291.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 361407419, - "name": "CVE-2021-3291", - "full_name": "ImHades101\/CVE-2021-3291", - "owner": { - "login": "ImHades101", - "id": 52188500, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/52188500?v=4", - "html_url": "https:\/\/github.com\/ImHades101", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ImHades101\/CVE-2021-3291", - "description": "rebuild cve", - "fork": false, - "created_at": "2021-04-25T11:18:09Z", - "updated_at": "2022-11-09T18:12:04Z", - "pushed_at": "2021-04-25T11:42:27Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-33044.json b/2021/CVE-2021-33044.json index f171273f23..cf14f0ccac 100644 --- a/2021/CVE-2021-33044.json +++ b/2021/CVE-2021-33044.json @@ -212,8 +212,8 @@ "description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.", "fork": false, "created_at": "2026-03-28T17:42:44Z", - "updated_at": "2026-08-13T18:08:07Z", - "pushed_at": "2026-08-13T18:07:09Z", + "updated_at": "2026-08-14T00:02:37Z", + "pushed_at": "2026-08-14T00:02:32Z", "stargazers_count": 4, "watchers_count": 4, "has_discussions": false, diff --git a/2021/CVE-2021-3310.json b/2021/CVE-2021-3310.json deleted file mode 100644 index dd47a16447..0000000000 --- a/2021/CVE-2021-3310.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 370482537, - "name": "CVE-2021-3310", - "full_name": "piffd0s\/CVE-2021-3310", - "owner": { - "login": "piffd0s", - "id": 7329476, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/7329476?v=4", - "html_url": "https:\/\/github.com\/piffd0s", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/piffd0s\/CVE-2021-3310", - "description": "Western Digital MyCloud PR4100 Link Resolution Information Disclosure Vulnerability", - "fork": false, - "created_at": "2021-05-24T20:55:33Z", - "updated_at": "2021-06-21T02:06:49Z", - "pushed_at": "2021-05-24T21:05:52Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-3317.json b/2021/CVE-2021-3317.json deleted file mode 100644 index fcb2d48db6..0000000000 --- a/2021/CVE-2021-3317.json +++ /dev/null @@ -1,39 +0,0 @@ -[ - { - "id": 356180253, - "name": "CVE-2021-3317", - "full_name": "Al1ex\/CVE-2021-3317", - "owner": { - "login": "Al1ex", - "id": 38161463, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38161463?v=4", - "html_url": "https:\/\/github.com\/Al1ex", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Al1ex\/CVE-2021-3317", - "description": "CVE-2021-3317", - "fork": false, - "created_at": "2021-04-09T07:36:46Z", - "updated_at": "2024-08-12T20:11:59Z", - "pushed_at": "2021-04-09T07:37:29Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2021-3317", - "exploit", - "klogserver" - ], - "visibility": "public", - "forks": 2, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-3345.json b/2021/CVE-2021-3345.json index 044e8735c0..ebe9094338 100644 --- a/2021/CVE-2021-3345.json +++ b/2021/CVE-2021-3345.json @@ -1,46 +1,4 @@ [ - { - "id": 334617977, - "name": "CVE-2021-3345", - "full_name": "MLGRadish\/CVE-2021-3345", - "owner": { - "login": "MLGRadish", - "id": 23532098, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/23532098?v=4", - "html_url": "https:\/\/github.com\/MLGRadish", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/MLGRadish\/CVE-2021-3345", - "description": "POC exploit of CVE-2021-3345, a vulnerability in libgcrypt version 1.9.0", - "fork": false, - "created_at": "2021-01-31T09:28:14Z", - "updated_at": "2024-05-09T10:53:08Z", - "pushed_at": "2021-02-07T02:40:38Z", - "stargazers_count": 9, - "watchers_count": 9, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve", - "cve-2021-3345", - "exploit", - "exploit-development", - "exploits", - "libgcrypt", - "poc", - "vulnerability" - ], - "visibility": "public", - "forks": 2, - "watchers": 9, - "score": 0, - "subscribers_count": 1 - }, { "id": 765419523, "name": "CVE-2021-3345", diff --git a/2021/CVE-2021-33558.json b/2021/CVE-2021-33558.json index 3b15bb59bd..6a76cfc130 100644 --- a/2021/CVE-2021-33558.json +++ b/2021/CVE-2021-33558.json @@ -1,37 +1,4 @@ [ - { - "id": 370638345, - "name": "CVE-2021-33558.", - "full_name": "mdanzaruddin\/CVE-2021-33558.", - "owner": { - "login": "mdanzaruddin", - "id": 48306735, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48306735?v=4", - "html_url": "https:\/\/github.com\/mdanzaruddin", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mdanzaruddin\/CVE-2021-33558.", - "description": null, - "fork": false, - "created_at": "2021-05-25T09:33:21Z", - "updated_at": "2023-03-05T06:15:23Z", - "pushed_at": "2021-05-25T09:42:00Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, { "id": 571407040, "name": "CVE-2021-33558", diff --git a/2021/CVE-2021-33564.json b/2021/CVE-2021-33564.json deleted file mode 100644 index d86b412088..0000000000 --- a/2021/CVE-2021-33564.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 370544854, - "name": "CVE-2021-33564", - "full_name": "mlr0p\/CVE-2021-33564", - "owner": { - "login": "mlr0p", - "id": 36525379, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/36525379?v=4", - "html_url": "https:\/\/github.com\/mlr0p", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mlr0p\/CVE-2021-33564", - "description": "Argument Injection in Dragonfly Ruby Gem", - "fork": false, - "created_at": "2021-05-25T02:48:08Z", - "updated_at": "2024-05-06T05:09:25Z", - "pushed_at": "2021-05-26T21:30:29Z", - "stargazers_count": 16, - "watchers_count": 16, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 16, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 371425844, - "name": "CVE-2021-33564", - "full_name": "dorkerdevil\/CVE-2021-33564", - "owner": { - "login": "dorkerdevil", - "id": 15796745, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/15796745?v=4", - "html_url": "https:\/\/github.com\/dorkerdevil", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dorkerdevil\/CVE-2021-33564", - "description": "Argument Injection in Dragonfly Ruby Gem exploit (backup)", - "fork": false, - "created_at": "2021-05-27T15:44:45Z", - "updated_at": "2024-08-12T20:13:24Z", - "pushed_at": "2021-05-27T15:45:10Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-33624.json b/2021/CVE-2021-33624.json deleted file mode 100644 index 2bfbdb8d7c..0000000000 --- a/2021/CVE-2021-33624.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 380365358, - "name": "CVE-2021-33624", - "full_name": "benschlueter\/CVE-2021-33624", - "owner": { - "login": "benschlueter", - "id": 25753058, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25753058?v=4", - "html_url": "https:\/\/github.com\/benschlueter", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/benschlueter\/CVE-2021-33624", - "description": "Proof of Concept for CVE-2021-33624", - "fork": false, - "created_at": "2021-06-25T22:19:38Z", - "updated_at": "2022-12-23T17:12:21Z", - "pushed_at": "2021-08-02T07:24:02Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 4, - "watchers": 3, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-33739.json b/2021/CVE-2021-33739.json index ca2d6d85cb..bc66a83c5f 100644 --- a/2021/CVE-2021-33739.json +++ b/2021/CVE-2021-33739.json @@ -1,37 +1,4 @@ [ - { - "id": 375334387, - "name": "CVE-2021-33739-POC", - "full_name": "freeide2017\/CVE-2021-33739-POC", - "owner": { - "login": "freeide2017", - "id": 33774427, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/33774427?v=4", - "html_url": "https:\/\/github.com\/freeide2017", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/freeide2017\/CVE-2021-33739-POC", - "description": null, - "fork": false, - "created_at": "2021-06-09T11:40:56Z", - "updated_at": "2025-08-31T20:40:42Z", - "pushed_at": "2021-06-09T06:58:20Z", - "stargazers_count": 10, - "watchers_count": 10, - "has_discussions": false, - "forks_count": 52, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 52, - "watchers": 10, - "score": 0, - "subscribers_count": 0 - }, { "id": 409820289, "name": "CVE-2021-33739_PoC_Analysis", diff --git a/2021/CVE-2021-3378.json b/2021/CVE-2021-3378.json deleted file mode 100644 index f5e5e1cb77..0000000000 --- a/2021/CVE-2021-3378.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 334535823, - "name": "fortilogger_arbitrary_fileupload", - "full_name": "erberkan\/fortilogger_arbitrary_fileupload", - "owner": { - "login": "erberkan", - "id": 15521812, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/15521812?v=4", - "html_url": "https:\/\/github.com\/erberkan", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/erberkan\/fortilogger_arbitrary_fileupload", - "description": "CVE-2021-3378 | FortiLogger - Unauthenticated Arbitrary File Upload (Metasploit)", - "fork": false, - "created_at": "2021-01-30T23:47:14Z", - "updated_at": "2025-12-31T08:33:52Z", - "pushed_at": "2021-02-28T16:29:07Z", - "stargazers_count": 22, - "watchers_count": 22, - "has_discussions": false, - "forks_count": 6, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 6, - "watchers": 22, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-33879.json b/2021/CVE-2021-33879.json deleted file mode 100644 index 75b58871e5..0000000000 --- a/2021/CVE-2021-33879.json +++ /dev/null @@ -1,42 +0,0 @@ -[ - { - "id": 374430462, - "name": "cve-2021-33879", - "full_name": "mmiszczyk\/cve-2021-33879", - "owner": { - "login": "mmiszczyk", - "id": 20739931, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/20739931?v=4", - "html_url": "https:\/\/github.com\/mmiszczyk", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mmiszczyk\/cve-2021-33879", - "description": "GameLoop update MITM", - "fork": false, - "created_at": "2021-06-06T18:05:30Z", - "updated_at": "2021-06-07T07:48:02Z", - "pushed_at": "2021-06-06T18:30:44Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "advisory", - "android-emulator", - "cve", - "cve-2021-33879", - "exploit", - "security" - ], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-3395.json b/2021/CVE-2021-3395.json deleted file mode 100644 index 469326b15e..0000000000 --- a/2021/CVE-2021-3395.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 335386045, - "name": "CVE-2021-3395", - "full_name": "jet-pentest\/CVE-2021-3395", - "owner": { - "login": "jet-pentest", - "id": 71512502, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71512502?v=4", - "html_url": "https:\/\/github.com\/jet-pentest", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/jet-pentest\/CVE-2021-3395", - "description": null, - "fork": false, - "created_at": "2021-02-02T18:31:35Z", - "updated_at": "2021-02-14T09:24:05Z", - "pushed_at": "2021-02-02T18:38:00Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-3441.json b/2021/CVE-2021-3441.json deleted file mode 100644 index 49ecf419d0..0000000000 --- a/2021/CVE-2021-3441.json +++ /dev/null @@ -1,40 +0,0 @@ -[ - { - "id": 333244615, - "name": "CVE-2021-3441-check", - "full_name": "tcbutler320\/CVE-2021-3441-check", - "owner": { - "login": "tcbutler320", - "id": 41709108, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41709108?v=4", - "html_url": "https:\/\/github.com\/tcbutler320", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/tcbutler320\/CVE-2021-3441-check", - "description": "CVE-2021-3441 CVE Check is a python script to search targets for indicators of compromise to CVE-2021-3441", - "fork": false, - "created_at": "2021-01-26T23:23:08Z", - "updated_at": "2021-08-26T02:09:11Z", - "pushed_at": "2021-08-20T09:52:36Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve", - "cve-scanning", - "indicators-of-compromise", - "ioc" - ], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-3492.json b/2021/CVE-2021-3492.json deleted file mode 100644 index c6a57d1537..0000000000 --- a/2021/CVE-2021-3492.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 380980454, - "name": "CVE-2021-3492", - "full_name": "synacktiv\/CVE-2021-3492", - "owner": { - "login": "synacktiv", - "id": 50145679, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50145679?v=4", - "html_url": "https:\/\/github.com\/synacktiv", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/synacktiv\/CVE-2021-3492", - "description": "PoC for CVE-2021-3492 used at Pwn2Own 2021", - "fork": false, - "created_at": "2021-06-28T09:43:31Z", - "updated_at": "2026-05-28T04:00:03Z", - "pushed_at": "2021-08-03T14:48:27Z", - "stargazers_count": 42, - "watchers_count": 42, - "has_discussions": false, - "forks_count": 5, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 5, - "watchers": 42, - "score": 0, - "subscribers_count": 4 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-3493.json b/2021/CVE-2021-3493.json index b5389cf8a9..e32ec2ca5f 100644 --- a/2021/CVE-2021-3493.json +++ b/2021/CVE-2021-3493.json @@ -32,72 +32,6 @@ "score": 0, "subscribers_count": 4 }, - { - "id": 360363904, - "name": "CVE-2021-3493", - "full_name": "oneoy\/CVE-2021-3493", - "owner": { - "login": "oneoy", - "id": 38435398, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38435398?v=4", - "html_url": "https:\/\/github.com\/oneoy", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/oneoy\/CVE-2021-3493", - "description": null, - "fork": false, - "created_at": "2021-04-22T02:06:21Z", - "updated_at": "2026-01-27T17:30:09Z", - "pushed_at": "2021-04-22T02:06:31Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 363546140, - "name": "CVE-2021-3493", - "full_name": "Abdennour-py\/CVE-2021-3493", - "owner": { - "login": "Abdennour-py", - "id": 82690595, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/82690595?v=4", - "html_url": "https:\/\/github.com\/Abdennour-py", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Abdennour-py\/CVE-2021-3493", - "description": null, - "fork": false, - "created_at": "2021-05-02T01:58:29Z", - "updated_at": "2021-05-02T01:58:40Z", - "pushed_at": "2021-05-02T01:58:38Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 383693831, "name": "CVE-2021-3493", diff --git a/2021/CVE-2021-35064.json b/2021/CVE-2021-35064.json deleted file mode 100644 index 1d5b1be62c..0000000000 --- a/2021/CVE-2021-35064.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 498962746, - "name": "CVE-2021-35064", - "full_name": "Chocapikk\/CVE-2021-35064", - "owner": { - "login": "Chocapikk", - "id": 88535377, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88535377?v=4", - "html_url": "https:\/\/github.com\/Chocapikk", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Chocapikk\/CVE-2021-35064", - "description": "Python script to exploit CVE-2021-35064 and CVE-2021-36356", - "fork": false, - "created_at": "2022-06-02T02:19:49Z", - "updated_at": "2026-08-10T14:45:01Z", - "pushed_at": "2022-06-02T17:29:36Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 3, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-3560.json b/2021/CVE-2021-3560.json index 10ae6c70eb..678af48ef5 100644 --- a/2021/CVE-2021-3560.json +++ b/2021/CVE-2021-3560.json @@ -32,114 +32,6 @@ "score": 0, "subscribers_count": 2 }, - { - "id": 376051053, - "name": "polkadots", - "full_name": "swapravo\/polkadots", - "owner": { - "login": "swapravo", - "id": 68004413, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/68004413?v=4", - "html_url": "https:\/\/github.com\/swapravo", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/swapravo\/polkadots", - "description": "CVE-2021-3560 Local PrivEsc Exploit", - "fork": false, - "created_at": "2021-06-11T14:28:43Z", - "updated_at": "2026-05-05T15:53:35Z", - "pushed_at": "2021-06-12T17:48:38Z", - "stargazers_count": 82, - "watchers_count": 82, - "has_discussions": false, - "forks_count": 12, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2021-3560", - "exploits", - "poc", - "polkit", - "privilege-escalation" - ], - "visibility": "public", - "forks": 12, - "watchers": 82, - "score": 0, - "subscribers_count": 3 - }, - { - "id": 376208961, - "name": "CVE-2021-3560", - "full_name": "hakivvi\/CVE-2021-3560", - "owner": { - "login": "hakivvi", - "id": 67718634, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/67718634?v=4", - "html_url": "https:\/\/github.com\/hakivvi", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/hakivvi\/CVE-2021-3560", - "description": "a reliable C based exploit and writeup for CVE-2021-3560.", - "fork": false, - "created_at": "2021-06-12T05:22:35Z", - "updated_at": "2026-04-20T01:26:00Z", - "pushed_at": "2021-06-23T11:07:32Z", - "stargazers_count": 40, - "watchers_count": 40, - "has_discussions": false, - "forks_count": 12, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "c", - "cve-2021-3560" - ], - "visibility": "public", - "forks": 12, - "watchers": 40, - "score": 0, - "subscribers_count": 2 - }, - { - "id": 376695409, - "name": "CVE-2021-3560_PoC", - "full_name": "iSTAR-Lab\/CVE-2021-3560_PoC", - "owner": { - "login": "iSTAR-Lab", - "id": 86260908, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/86260908?v=4", - "html_url": "https:\/\/github.com\/iSTAR-Lab", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/iSTAR-Lab\/CVE-2021-3560_PoC", - "description": "polkit exploit script v1.0", - "fork": false, - "created_at": "2021-06-14T03:45:38Z", - "updated_at": "2021-07-02T18:28:41Z", - "pushed_at": "2021-06-14T18:06:24Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 376943596, "name": "CVE-2021-3560-Polkit-Privilege-Esclation", @@ -173,105 +65,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 377076931, - "name": "CVE-2021-3560", - "full_name": "curtishoughton\/CVE-2021-3560", - "owner": { - "login": "curtishoughton", - "id": 47698784, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47698784?v=4", - "html_url": "https:\/\/github.com\/curtishoughton", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/curtishoughton\/CVE-2021-3560", - "description": "Polkit - Local Privilege Escalation (CVE-2021-3560)", - "fork": false, - "created_at": "2021-06-15T07:37:15Z", - "updated_at": "2021-07-26T07:06:22Z", - "pushed_at": "2021-06-14T14:54:05Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 378360079, - "name": "Polkit-exploit", - "full_name": "Almorabea\/Polkit-exploit", - "owner": { - "login": "Almorabea", - "id": 13198863, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/13198863?v=4", - "html_url": "https:\/\/github.com\/Almorabea", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Almorabea\/Polkit-exploit", - "description": "Privilege escalation with polkit - CVE-2021-3560", - "fork": false, - "created_at": "2021-06-19T08:15:17Z", - "updated_at": "2026-07-28T02:56:50Z", - "pushed_at": "2021-06-20T07:38:13Z", - "stargazers_count": 126, - "watchers_count": 126, - "has_discussions": false, - "forks_count": 52, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 52, - "watchers": 126, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 381492885, - "name": "Polkit-CVE-2021-3560", - "full_name": "AssassinUKG\/Polkit-CVE-2021-3560", - "owner": { - "login": "AssassinUKG", - "id": 5285547, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5285547?v=4", - "html_url": "https:\/\/github.com\/AssassinUKG", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/AssassinUKG\/Polkit-CVE-2021-3560", - "description": null, - "fork": false, - "created_at": "2021-06-29T20:47:16Z", - "updated_at": "2023-11-03T08:10:49Z", - "pushed_at": "2021-06-29T21:09:41Z", - "stargazers_count": 24, - "watchers_count": 24, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 24, - "score": 0, - "subscribers_count": 2 - }, { "id": 382305236, "name": "CVE-2021-3560", diff --git a/2021/CVE-2021-3572.json b/2021/CVE-2021-3572.json deleted file mode 100644 index 55caac13cf..0000000000 --- a/2021/CVE-2021-3572.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 374593523, - "name": "CVE-2021-3572", - "full_name": "frenzymadness\/CVE-2021-3572", - "owner": { - "login": "frenzymadness", - "id": 5688939, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5688939?v=4", - "html_url": "https:\/\/github.com\/frenzymadness", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/frenzymadness\/CVE-2021-3572", - "description": "A simple repository helping to test CVE-2021-3572 in PyPA\/pip", - "fork": false, - "created_at": "2021-06-07T08:36:47Z", - "updated_at": "2024-07-05T12:10:26Z", - "pushed_at": "2021-06-07T09:04:22Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2021/CVE-2021-4034.json b/2021/CVE-2021-4034.json index d4a5b73ec3..a2aca8b2f3 100644 --- a/2021/CVE-2021-4034.json +++ b/2021/CVE-2021-4034.json @@ -411,39 +411,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 499588777, - "name": "CVE-2021-4034", - "full_name": "TanmoyG1800\/CVE-2021-4034", - "owner": { - "login": "TanmoyG1800", - "id": 106038605, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/106038605?v=4", - "html_url": "https:\/\/github.com\/TanmoyG1800", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/TanmoyG1800\/CVE-2021-4034", - "description": null, - "fork": false, - "created_at": "2022-06-03T17:03:44Z", - "updated_at": "2022-06-03T17:03:44Z", - "pushed_at": "2022-06-03T17:04:36Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 501393521, "name": "CVE-2021-4034", diff --git a/2021/CVE-2021-41773.json b/2021/CVE-2021-41773.json index 5a3ca35847..7876463a83 100644 --- a/2021/CVE-2021-41773.json +++ b/2021/CVE-2021-41773.json @@ -5179,5 +5179,78 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1333500617, + "name": "CVE-2021-41773-Apache-Lab", + "full_name": "s-amnajafri\/CVE-2021-41773-Apache-Lab", + "owner": { + "login": "s-amnajafri", + "id": 185695355, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/185695355?v=4", + "html_url": "https:\/\/github.com\/s-amnajafri", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/s-amnajafri\/CVE-2021-41773-Apache-Lab", + "description": "Docker-based lab for reproducing CVE-2021-41773 (Apache HTTP Server 2.4.49) through controlled path traversal and file disclosure using a custom Python PoC.", + "fork": false, + "created_at": "2026-08-13T20:09:26Z", + "updated_at": "2026-08-13T20:25:01Z", + "pushed_at": "2026-08-13T20:24:52Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1333556390, + "name": "cybersecurity_portfolio", + "full_name": "GlebUsalt\/cybersecurity_portfolio", + "owner": { + "login": "GlebUsalt", + "id": 242452352, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/242452352?v=4", + "html_url": "https:\/\/github.com\/GlebUsalt", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/GlebUsalt\/cybersecurity_portfolio", + "description": "Практические кейсы по информационной безопасности: развёртывание SIEM Wazuh и эксплуатация CVE-2021-41773", + "fork": false, + "created_at": "2026-08-13T21:36:14Z", + "updated_at": "2026-08-13T21:54:11Z", + "pushed_at": "2026-08-13T21:48:41Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "apache", + "cve", + "cybersecurity", + "pentest", + "siem", + "wazuh" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2021/CVE-2021-44228.json b/2021/CVE-2021-44228.json index c5a1154fc1..bd35f74648 100644 --- a/2021/CVE-2021-44228.json +++ b/2021/CVE-2021-44228.json @@ -8748,7 +8748,7 @@ "fork": false, "created_at": "2021-12-17T18:45:19Z", "updated_at": "2025-12-20T11:57:18Z", - "pushed_at": "2026-04-11T05:49:08Z", + "pushed_at": "2026-08-13T18:34:42Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2021/CVE-2021-44790.json b/2021/CVE-2021-44790.json index 184d3c431a..5e4a863d52 100644 --- a/2021/CVE-2021-44790.json +++ b/2021/CVE-2021-44790.json @@ -47,10 +47,10 @@ "description": "Apache HTTP Server 2.4.x mod_lua Buffer Overflow (CVE-2021-44790) - Advanced exploitation framework with fingerprinting, multi-stage scanning, plugin architecture, professional reporting, screenshot capture, SQLite database, and 95%+ confidence detection. Author: Sudeepa Wanigarathna.", "fork": false, "created_at": "2026-08-04T17:37:16Z", - "updated_at": "2026-08-07T19:00:53Z", + "updated_at": "2026-08-13T20:27:49Z", "pushed_at": "2026-08-07T19:00:20Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2021/CVE-2021-6857.json b/2021/CVE-2021-6857.json deleted file mode 100644 index 8a477667ad..0000000000 --- a/2021/CVE-2021-6857.json +++ /dev/null @@ -1,38 +0,0 @@ -[ - { - "id": 357789319, - "name": "CVE-2021-6857", - "full_name": "zi0n8\/CVE-2021-6857", - "owner": { - "login": "zi0n8", - "id": 65099918, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/65099918?v=4", - "html_url": "https:\/\/github.com\/zi0n8", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/zi0n8\/CVE-2021-6857", - "description": "Config files for my GitHub profile.", - "fork": false, - "created_at": "2021-04-14T05:50:48Z", - "updated_at": "2021-04-14T05:57:11Z", - "pushed_at": "2021-04-14T05:51:34Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "config", - "github-config" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2022/CVE-2022-0824.json b/2022/CVE-2022-0824.json index f6752e84aa..0ed21e3c9d 100644 --- a/2022/CVE-2022-0824.json +++ b/2022/CVE-2022-0824.json @@ -14,10 +14,10 @@ "description": "Webmin <=1.984, CVE-2022-0824 Post-Auth Reverse Shell PoC", "fork": false, "created_at": "2022-03-06T00:03:31Z", - "updated_at": "2026-05-10T07:17:56Z", + "updated_at": "2026-08-13T20:45:27Z", "pushed_at": "2022-03-06T07:01:15Z", - "stargazers_count": 111, - "watchers_count": 111, + "stargazers_count": 112, + "watchers_count": 112, "has_discussions": false, "forks_count": 33, "allow_forking": true, @@ -33,7 +33,7 @@ ], "visibility": "public", "forks": 33, - "watchers": 111, + "watchers": 112, "score": 0, "subscribers_count": 3 }, diff --git a/2022/CVE-2022-27255.json b/2022/CVE-2022-27255.json index fd6b25a568..f3d756f12e 100644 --- a/2022/CVE-2022-27255.json +++ b/2022/CVE-2022-27255.json @@ -19,7 +19,7 @@ "stargazers_count": 284, "watchers_count": 284, "has_discussions": false, - "forks_count": 54, + "forks_count": 53, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 54, + "forks": 53, "watchers": 284, "score": 0, "subscribers_count": 14 diff --git a/2022/CVE-2022-29799.json b/2022/CVE-2022-29799.json index 6395c61fb1..9ac1c981e2 100644 --- a/2022/CVE-2022-29799.json +++ b/2022/CVE-2022-29799.json @@ -59,8 +59,8 @@ "description": "Demonstrate local privilege escalation in networkd-dispatcher via CVE-2022-29799 and CVE-2022-29800 using this C proof of concept.", "fork": false, "created_at": "2026-06-23T14:05:18Z", - "updated_at": "2026-08-13T12:41:39Z", - "pushed_at": "2026-08-13T12:40:40Z", + "updated_at": "2026-08-13T19:30:14Z", + "pushed_at": "2026-08-13T19:30:05Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2023/CVE-2023-32434.json b/2023/CVE-2023-32434.json index 5abb702496..44c6471806 100644 --- a/2023/CVE-2023-32434.json +++ b/2023/CVE-2023-32434.json @@ -47,8 +47,8 @@ "description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙", "fork": false, "created_at": "2025-08-13T09:19:29Z", - "updated_at": "2026-08-13T12:01:33Z", - "pushed_at": "2026-08-13T12:00:40Z", + "updated_at": "2026-08-13T18:51:01Z", + "pushed_at": "2026-08-13T18:50:56Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2023/CVE-2023-38831.json b/2023/CVE-2023-38831.json index 269c561e91..df76e43dce 100644 --- a/2023/CVE-2023-38831.json +++ b/2023/CVE-2023-38831.json @@ -228,7 +228,7 @@ "stargazers_count": 22, "watchers_count": 22, "has_discussions": false, - "forks_count": 8, + "forks_count": 9, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -236,7 +236,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 8, + "forks": 9, "watchers": 22, "score": 0, "subscribers_count": 2 diff --git a/2023/CVE-2023-45866.json b/2023/CVE-2023-45866.json index fe09f2ab0d..1b6dc0b053 100644 --- a/2023/CVE-2023-45866.json +++ b/2023/CVE-2023-45866.json @@ -151,7 +151,7 @@ "description": "Exploit basado en vulnerabilidades criticas Bluetooth (CVE-2023-45866, CVE-2024-21306)", "fork": false, "created_at": "2024-12-15T03:00:47Z", - "updated_at": "2026-08-10T02:18:16Z", + "updated_at": "2026-08-13T19:41:02Z", "pushed_at": "2026-07-23T09:08:54Z", "stargazers_count": 16, "watchers_count": 16, diff --git a/2023/CVE-2023-5968.json b/2023/CVE-2023-5968.json index fa503a6f6e..00e884f9f2 100644 --- a/2023/CVE-2023-5968.json +++ b/2023/CVE-2023-5968.json @@ -14,8 +14,8 @@ "description": "Find the vulnerability your tests were never written to catch. A ReGrade demo modeling CVE-2023-5968: catch a password-hash leak by comparing an app to itself.", "fork": false, "created_at": "2026-07-04T00:48:09Z", - "updated_at": "2026-08-12T19:36:45Z", - "pushed_at": "2026-08-12T19:36:18Z", + "updated_at": "2026-08-13T21:32:15Z", + "pushed_at": "2026-08-13T21:32:11Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-0012.json b/2024/CVE-2024-0012.json index dc1a76ea3f..cbc3cecd8d 100644 --- a/2024/CVE-2024-0012.json +++ b/2024/CVE-2024-0012.json @@ -268,39 +268,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 928555590, - "name": "cve-2024-0012-gui-poc", - "full_name": "dcollaoa\/cve-2024-0012-gui-poc", - "owner": { - "login": "dcollaoa", - "id": 20039386, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/20039386?v=4", - "html_url": "https:\/\/github.com\/dcollaoa", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dcollaoa\/cve-2024-0012-gui-poc", - "description": "Python script for CVE-2024-0012 \/ CVE-2024-9474 exploit", - "fork": false, - "created_at": "2025-02-06T20:30:15Z", - "updated_at": "2025-10-05T10:56:30Z", - "pushed_at": "2025-04-22T17:08:15Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - }, { "id": 987423285, "name": "PanOsExploitMultitool", diff --git a/2024/CVE-2024-0235.json b/2024/CVE-2024-0235.json index bd32490054..aed2994ce6 100644 --- a/2024/CVE-2024-0235.json +++ b/2024/CVE-2024-0235.json @@ -43,38 +43,5 @@ "watchers": 0, "score": 0, "subscribers_count": 0 - }, - { - "id": 924787657, - "name": "CVE-2024-0235-PoC", - "full_name": "Nxploited\/CVE-2024-0235-PoC", - "owner": { - "login": "Nxploited", - "id": 188819918, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4", - "html_url": "https:\/\/github.com\/Nxploited", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-0235-PoC", - "description": "The EventON WordPress plugin before 4.5.5, EventON WordPress plugin before 2.2.7 do not have authorisation in an AJAX action, allowing unauthenticated users to retrieve email addresses of any users on the blog", - "fork": false, - "created_at": "2025-01-30T16:48:16Z", - "updated_at": "2025-01-30T16:49:48Z", - "pushed_at": "2025-01-30T16:49:45Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2024/CVE-2024-0402.json b/2024/CVE-2024-0402.json deleted file mode 100644 index a02a325bc9..0000000000 --- a/2024/CVE-2024-0402.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 946292284, - "name": "malicious-devfile-registry", - "full_name": "doyensec\/malicious-devfile-registry", - "owner": { - "login": "doyensec", - "id": 25747968, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25747968?v=4", - "html_url": "https:\/\/github.com\/doyensec", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/doyensec\/malicious-devfile-registry", - "description": "Exploit for CVE-2024-0402 in Gitlab", - "fork": false, - "created_at": "2025-03-10T23:08:51Z", - "updated_at": "2026-01-08T16:52:32Z", - "pushed_at": "2025-03-18T08:58:48Z", - "stargazers_count": 15, - "watchers_count": 15, - "has_discussions": false, - "forks_count": 5, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 5, - "watchers": 15, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-0406.json b/2024/CVE-2024-0406.json deleted file mode 100644 index 45ed5c7a98..0000000000 --- a/2024/CVE-2024-0406.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 947016341, - "name": "CVE-2024-0406-POC", - "full_name": "walidpyh\/CVE-2024-0406-POC", - "owner": { - "login": "walidpyh", - "id": 73798180, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/73798180?v=4", - "html_url": "https:\/\/github.com\/walidpyh", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/walidpyh\/CVE-2024-0406-POC", - "description": "CVE-2024-0406 POC using symlinks", - "fork": false, - "created_at": "2025-03-12T02:54:47Z", - "updated_at": "2026-02-05T12:40:09Z", - "pushed_at": "2025-03-14T20:20:35Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 5, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 957149448, - "name": "Desires", - "full_name": "veissa\/Desires", - "owner": { - "login": "veissa", - "id": 191010865, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/191010865?v=4", - "html_url": "https:\/\/github.com\/veissa", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/veissa\/Desires", - "description": "vulnerable web app CVE-2024-0406 go cve", - "fork": false, - "created_at": "2025-03-29T17:10:03Z", - "updated_at": "2025-03-29T17:12:53Z", - "pushed_at": "2025-03-29T17:12:49Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-0520.json b/2024/CVE-2024-0520.json deleted file mode 100644 index a7e68f37e3..0000000000 --- a/2024/CVE-2024-0520.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1040128538, - "name": "CVE-2024-0520_try", - "full_name": "chan-068\/CVE-2024-0520_try", - "owner": { - "login": "chan-068", - "id": 173150231, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/173150231?v=4", - "html_url": "https:\/\/github.com\/chan-068", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/chan-068\/CVE-2024-0520_try", - "description": null, - "fork": false, - "created_at": "2025-08-18T13:54:02Z", - "updated_at": "2025-08-18T14:06:55Z", - "pushed_at": "2025-08-18T14:06:52Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-0582.json b/2024/CVE-2024-0582.json index da9fb10bbb..f6bd521ccd 100644 --- a/2024/CVE-2024-0582.json +++ b/2024/CVE-2024-0582.json @@ -178,44 +178,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 961000031, - "name": "CVE-2024-0582", - "full_name": "kuzeyardabulut\/CVE-2024-0582", - "owner": { - "login": "kuzeyardabulut", - "id": 54737933, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/54737933?v=4", - "html_url": "https:\/\/github.com\/kuzeyardabulut", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/kuzeyardabulut\/CVE-2024-0582", - "description": "Data-only exploit for CVE-2024-0582", - "fork": false, - "created_at": "2025-04-05T14:39:53Z", - "updated_at": "2026-04-25T22:11:11Z", - "pushed_at": "2025-04-16T12:57:33Z", - "stargazers_count": 13, - "watchers_count": 13, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "dirty-cred", - "dirty-pagetable", - "kernel-exploitation", - "rust-exploit" - ], - "visibility": "public", - "forks": 2, - "watchers": 13, - "score": 0, - "subscribers_count": 1 - }, { "id": 1064628147, "name": "io_uring-n-day", diff --git a/2024/CVE-2024-0760.json b/2024/CVE-2024-0760.json deleted file mode 100644 index f3904720b1..0000000000 --- a/2024/CVE-2024-0760.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 947531628, - "name": "CVE-2024-0760", - "full_name": "SpiralBL0CK\/CVE-2024-0760", - "owner": { - "login": "SpiralBL0CK", - "id": 25670930, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25670930?v=4", - "html_url": "https:\/\/github.com\/SpiralBL0CK", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SpiralBL0CK\/CVE-2024-0760", - "description": "CVE-2024-0760", - "fork": false, - "created_at": "2025-03-12T20:50:33Z", - "updated_at": "2025-03-12T20:51:26Z", - "pushed_at": "2025-03-12T20:51:22Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-0762.json b/2024/CVE-2024-0762.json index 8e5c0d9470..4307cf337a 100644 --- a/2024/CVE-2024-0762.json +++ b/2024/CVE-2024-0762.json @@ -31,38 +31,5 @@ "watchers": 0, "score": 0, "subscribers_count": 1 - }, - { - "id": 1044641207, - "name": "CVE-2024-0762", - "full_name": "abandon1337\/CVE-2024-0762", - "owner": { - "login": "abandon1337", - "id": 88953507, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88953507?v=4", - "html_url": "https:\/\/github.com\/abandon1337", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/abandon1337\/CVE-2024-0762", - "description": "UEFIcanhazbufferoverflow", - "fork": false, - "created_at": "2025-08-26T02:05:14Z", - "updated_at": "2025-08-26T02:15:26Z", - "pushed_at": "2025-08-26T02:15:23Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2024/CVE-2024-10220.json b/2024/CVE-2024-10220.json index 1b9473ddfa..242149d7ce 100644 --- a/2024/CVE-2024-10220.json +++ b/2024/CVE-2024-10220.json @@ -131,39 +131,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 982238076, - "name": "CVE-2024-10220-demo", - "full_name": "orgC\/CVE-2024-10220-demo", - "owner": { - "login": "orgC", - "id": 1940132, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1940132?v=4", - "html_url": "https:\/\/github.com\/orgC", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/orgC\/CVE-2024-10220-demo", - "description": null, - "fork": false, - "created_at": "2025-05-12T15:19:08Z", - "updated_at": "2025-05-12T15:22:52Z", - "pushed_at": "2025-05-12T15:22:48Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1052421293, "name": "CVE-2024-10220-Kubernetes-gitRepo-Volume-Vulnerability", diff --git a/2024/CVE-2024-10578.json b/2024/CVE-2024-10578.json deleted file mode 100644 index 230aa9309d..0000000000 --- a/2024/CVE-2024-10578.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 953668900, - "name": "CVE-2024-10578", - "full_name": "Nxploited\/CVE-2024-10578", - "owner": { - "login": "Nxploited", - "id": 188819918, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4", - "html_url": "https:\/\/github.com\/Nxploited", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-10578", - "description": "Pubnews <= 1.0.7 - Unauthenticated Arbitrary Plugin Installation", - "fork": false, - "created_at": "2025-03-23T21:42:46Z", - "updated_at": "2025-03-29T20:27:25Z", - "pushed_at": "2025-03-29T20:27:22Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-10629.json b/2024/CVE-2024-10629.json index 6af1072210..eb3148caf6 100644 --- a/2024/CVE-2024-10629.json +++ b/2024/CVE-2024-10629.json @@ -31,38 +31,5 @@ "watchers": 0, "score": 0, "subscribers_count": 1 - }, - { - "id": 945593807, - "name": "CVE-2024-10629", - "full_name": "Nxploited\/CVE-2024-10629", - "owner": { - "login": "Nxploited", - "id": 188819918, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4", - "html_url": "https:\/\/github.com\/Nxploited", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-10629", - "description": "GPX Viewer <= 2.2.8 - Authenticated (Subscriber+) Arbitrary File Creation", - "fork": false, - "created_at": "2025-03-09T19:26:47Z", - "updated_at": "2025-03-29T20:31:54Z", - "pushed_at": "2025-03-29T20:31:50Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2024/CVE-2024-10673.json b/2024/CVE-2024-10673.json deleted file mode 100644 index 49d465754b..0000000000 --- a/2024/CVE-2024-10673.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 947100082, - "name": "CVE-2024-10673", - "full_name": "Nxploited\/CVE-2024-10673", - "owner": { - "login": "Nxploited", - "id": 188819918, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4", - "html_url": "https:\/\/github.com\/Nxploited", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-10673", - "description": " Top Store <= 1.5.4 - Authenticated (Subscriber+) Arbitrary Plugin Installation\/Activation", - "fork": false, - "created_at": "2025-03-12T06:40:00Z", - "updated_at": "2025-04-07T00:52:56Z", - "pushed_at": "2025-03-29T20:31:03Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-10674.json b/2024/CVE-2024-10674.json deleted file mode 100644 index ae787d3d7d..0000000000 --- a/2024/CVE-2024-10674.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 947535290, - "name": "CVE-2024-10674", - "full_name": "Nxploited\/CVE-2024-10674", - "owner": { - "login": "Nxploited", - "id": 188819918, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4", - "html_url": "https:\/\/github.com\/Nxploited", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-10674", - "description": "Th Shop Mania <= 1.4.9 - Authenticated (Subscriber+) Arbitrary Plugin Installation\/Activation", - "fork": false, - "created_at": "2025-03-12T21:00:14Z", - "updated_at": "2025-03-29T20:30:44Z", - "pushed_at": "2025-03-29T20:30:40Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-10858.json b/2024/CVE-2024-10858.json deleted file mode 100644 index aff7a99ea6..0000000000 --- a/2024/CVE-2024-10858.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1025041287, - "name": "CVE-2024-10858", - "full_name": "iamarit\/CVE-2024-10858", - "owner": { - "login": "iamarit", - "id": 107478173, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/107478173?v=4", - "html_url": "https:\/\/github.com\/iamarit", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/iamarit\/CVE-2024-10858", - "description": "Vulnerable WordPress plugin ( Jetpack )", - "fork": false, - "created_at": "2025-07-23T16:18:49Z", - "updated_at": "2025-07-23T17:03:04Z", - "pushed_at": "2025-07-23T17:03:00Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-10914.json b/2024/CVE-2024-10914.json index 9b02b2cd1e..06c0a77886 100644 --- a/2024/CVE-2024-10914.json +++ b/2024/CVE-2024-10914.json @@ -348,105 +348,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 931155754, - "name": "cve-2024-10914", - "full_name": "yenyangmjaze\/cve-2024-10914", - "owner": { - "login": "yenyangmjaze", - "id": 193782973, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/193782973?v=4", - "html_url": "https:\/\/github.com\/yenyangmjaze", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/yenyangmjaze\/cve-2024-10914", - "description": null, - "fork": false, - "created_at": "2025-02-11T20:03:16Z", - "updated_at": "2025-02-19T10:46:46Z", - "pushed_at": "2025-02-14T14:16:27Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 977109036, - "name": "CVE-2024-10914-Exploit", - "full_name": "Tamirido30\/CVE-2024-10914-Exploit", - "owner": { - "login": "Tamirido30", - "id": 96590988, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/96590988?v=4", - "html_url": "https:\/\/github.com\/Tamirido30", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Tamirido30\/CVE-2024-10914-Exploit", - "description": "CVE-2024-10914 Shell Exploit", - "fork": false, - "created_at": "2025-05-03T12:52:10Z", - "updated_at": "2025-05-03T12:52:11Z", - "pushed_at": "2025-02-14T09:26:37Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 998724537, - "name": "CVE-2024-10914", - "full_name": "TH-SecForge\/CVE-2024-10914", - "owner": { - "login": "TH-SecForge", - "id": 215460722, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/215460722?v=4", - "html_url": "https:\/\/github.com\/TH-SecForge", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/TH-SecForge\/CVE-2024-10914", - "description": "CVE-2024-10914 is a critical command injection vulnerability affecting several legacy D-Link Network Attached Storage (NAS) devices.", - "fork": false, - "created_at": "2025-06-09T06:35:05Z", - "updated_at": "2025-06-09T06:38:41Z", - "pushed_at": "2025-06-09T06:36:52Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": true, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, { "id": 1115864230, "name": "CVE-2024-10914__POC", diff --git a/2024/CVE-2024-10915.json b/2024/CVE-2024-10915.json deleted file mode 100644 index e59280c5cb..0000000000 --- a/2024/CVE-2024-10915.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1017841177, - "name": "CVE-2024-10915", - "full_name": "r0otk3r\/CVE-2024-10915", - "owner": { - "login": "r0otk3r", - "id": 211012408, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/211012408?v=4", - "html_url": "https:\/\/github.com\/r0otk3r", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/r0otk3r\/CVE-2024-10915", - "description": null, - "fork": false, - "created_at": "2025-07-11T07:21:08Z", - "updated_at": "2025-07-12T10:49:33Z", - "pushed_at": "2025-07-12T10:49:29Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-10924.json b/2024/CVE-2024-10924.json index a76f6aac12..8b18758c04 100644 --- a/2024/CVE-2024-10924.json +++ b/2024/CVE-2024-10924.json @@ -232,12 +232,12 @@ "description": "Bypass del MFA en WordPress con el plugin Really Simple Security instalado entre las versiones 9.0.0 – 9.1.1.1.", "fork": false, "created_at": "2024-11-27T11:19:47Z", - "updated_at": "2026-06-13T19:14:57Z", + "updated_at": "2026-08-13T22:55:00Z", "pushed_at": "2024-11-27T14:13:57Z", - "stargazers_count": 6, - "watchers_count": 6, + "stargazers_count": 7, + "watchers_count": 7, "has_discussions": false, - "forks_count": 4, + "forks_count": 5, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -245,8 +245,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 4, - "watchers": 6, + "forks": 5, + "watchers": 7, "score": 0, "subscribers_count": 1 }, @@ -361,237 +361,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 926243501, - "name": "CVE-2024-10924-Exploit", - "full_name": "Nxploited\/CVE-2024-10924-Exploit", - "owner": { - "login": "Nxploited", - "id": 188819918, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4", - "html_url": "https:\/\/github.com\/Nxploited", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-10924-Exploit", - "description": "Really Simple Security (Free, Pro, and Pro Multisite) 9.0.0 - 9.1.1.1 - Authentication Bypass", - "fork": false, - "created_at": "2025-02-02T21:53:29Z", - "updated_at": "2025-02-23T23:04:56Z", - "pushed_at": "2025-02-02T23:26:52Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 927704539, - "name": "CVE-2024-10924", - "full_name": "cy3erdr4g0n\/CVE-2024-10924", - "owner": { - "login": "cy3erdr4g0n", - "id": 166169634, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/166169634?v=4", - "html_url": "https:\/\/github.com\/cy3erdr4g0n", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/cy3erdr4g0n\/CVE-2024-10924", - "description": null, - "fork": false, - "created_at": "2025-02-05T12:04:43Z", - "updated_at": "2025-02-05T12:21:52Z", - "pushed_at": "2025-02-05T12:21:49Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 932769134, - "name": "wordpress-cve-2024-10924-exploit", - "full_name": "h8sU\/wordpress-cve-2024-10924-exploit", - "owner": { - "login": "h8sU", - "id": 146016779, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/146016779?v=4", - "html_url": "https:\/\/github.com\/h8sU", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/h8sU\/wordpress-cve-2024-10924-exploit", - "description": "A Proof-of-Concept (PoC) exploit for CVE-2024-10924, a vulnerability in the Really Simple SSL WordPress plugin that allows bypassing two-factor authentication (2FA). Includes mitigation techniques to secure affected WordPress sites.", - "fork": false, - "created_at": "2025-02-14T13:42:34Z", - "updated_at": "2025-02-14T13:58:26Z", - "pushed_at": "2025-02-14T13:50:31Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 933934080, - "name": "CVE-2024-10924", - "full_name": "sariamubeen\/CVE-2024-10924", - "owner": { - "login": "sariamubeen", - "id": 84678833, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/84678833?v=4", - "html_url": "https:\/\/github.com\/sariamubeen", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sariamubeen\/CVE-2024-10924", - "description": null, - "fork": false, - "created_at": "2025-02-17T01:52:55Z", - "updated_at": "2025-02-17T01:55:43Z", - "pushed_at": "2025-02-17T01:55:39Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 937516627, - "name": "wordpress-CVE-2024-10924--exploit", - "full_name": "MaleeshaUdan\/wordpress-CVE-2024-10924--exploit", - "owner": { - "login": "MaleeshaUdan", - "id": 80579602, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/80579602?v=4", - "html_url": "https:\/\/github.com\/MaleeshaUdan", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/MaleeshaUdan\/wordpress-CVE-2024-10924--exploit", - "description": "WordPress CVE-2024-10924 Exploit for Really Simple Security plugin", - "fork": false, - "created_at": "2025-02-23T08:47:58Z", - "updated_at": "2026-04-08T10:49:36Z", - "pushed_at": "2025-02-23T08:50:53Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 961626124, - "name": "-CVE-2024-10924", - "full_name": "d0x-awrqxavc\/-CVE-2024-10924", - "owner": { - "login": "d0x-awrqxavc", - "id": 131061822, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/131061822?v=4", - "html_url": "https:\/\/github.com\/d0x-awrqxavc", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/d0x-awrqxavc\/-CVE-2024-10924", - "description": null, - "fork": false, - "created_at": "2025-04-06T22:21:36Z", - "updated_at": "2025-04-06T22:22:01Z", - "pushed_at": "2025-04-06T22:21:58Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1008572006, - "name": "wordpress-cve-2024-10924-pentest", - "full_name": "ademto\/wordpress-cve-2024-10924-pentest", - "owner": { - "login": "ademto", - "id": 112830359, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/112830359?v=4", - "html_url": "https:\/\/github.com\/ademto", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ademto\/wordpress-cve-2024-10924-pentest", - "description": null, - "fork": false, - "created_at": "2025-06-25T18:50:17Z", - "updated_at": "2026-07-16T10:43:52Z", - "pushed_at": "2025-06-25T19:35:21Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 0 - }, { "id": 1124062371, "name": "CVE-2024-10924", diff --git a/2024/CVE-2024-10930.json b/2024/CVE-2024-10930.json deleted file mode 100644 index b5ab72d4c4..0000000000 --- a/2024/CVE-2024-10930.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 930771060, - "name": "CVE-2024-10930", - "full_name": "sahil3276\/CVE-2024-10930", - "owner": { - "login": "sahil3276", - "id": 105536637, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105536637?v=4", - "html_url": "https:\/\/github.com\/sahil3276", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sahil3276\/CVE-2024-10930", - "description": "Public Disclosure of CVE-2024-10930", - "fork": false, - "created_at": "2025-02-11T07:22:13Z", - "updated_at": "2025-02-13T06:28:00Z", - "pushed_at": "2025-02-13T06:27:57Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-11040.json b/2024/CVE-2024-11040.json deleted file mode 100644 index 73702b36d3..0000000000 --- a/2024/CVE-2024-11040.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 952680296, - "name": "CVE-2024-11040", - "full_name": "gothburz\/CVE-2024-11040", - "owner": { - "login": "gothburz", - "id": 12678629, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/12678629?v=4", - "html_url": "https:\/\/github.com\/gothburz", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/gothburz\/CVE-2024-11040", - "description": "vllm-project vllm version 0.5.2.2 is vulnerable to Denial of Service attacks.", - "fork": false, - "created_at": "2025-03-21T17:32:00Z", - "updated_at": "2025-03-21T17:34:09Z", - "pushed_at": "2025-03-21T17:34:05Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-11042.json b/2024/CVE-2024-11042.json deleted file mode 100644 index 70336eaca7..0000000000 --- a/2024/CVE-2024-11042.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 952662840, - "name": "CVE-2024-11042", - "full_name": "gothburz\/CVE-2024-11042", - "owner": { - "login": "gothburz", - "id": 12678629, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/12678629?v=4", - "html_url": "https:\/\/github.com\/gothburz", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/gothburz\/CVE-2024-11042", - "description": "Proof-of-concept for In invoke-ai\/invokeai version v5.0.2 Arbitrary File Deletion.", - "fork": false, - "created_at": "2025-03-21T16:55:49Z", - "updated_at": "2025-03-21T16:59:34Z", - "pushed_at": "2025-03-21T16:59:31Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-11972.json b/2024/CVE-2024-11972.json deleted file mode 100644 index 612a785246..0000000000 --- a/2024/CVE-2024-11972.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 916175168, - "name": "CVE-2024-11972-POC", - "full_name": "RonF98\/CVE-2024-11972-POC", - "owner": { - "login": "RonF98", - "id": 181740430, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/181740430?v=4", - "html_url": "https:\/\/github.com\/RonF98", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/RonF98\/CVE-2024-11972-POC", - "description": "CVE-2024-11972 in Hunk Companion <1.9.0 allows unauthenticated attackers to exploit insecure REST API endpoints and install vulnerable plugins, risking RCE, SQLi, XSS, and backdoors.", - "fork": false, - "created_at": "2025-01-13T15:44:08Z", - "updated_at": "2025-07-07T14:47:15Z", - "pushed_at": "2025-07-07T14:47:12Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 924356776, - "name": "CVE-2024-11972-PoC", - "full_name": "Nxploited\/CVE-2024-11972-PoC", - "owner": { - "login": "Nxploited", - "id": 188819918, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4", - "html_url": "https:\/\/github.com\/Nxploited", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-11972-PoC", - "description": "Hunk Companion < 1.9.0 - Unauthenticated Plugin Installation", - "fork": false, - "created_at": "2025-01-29T21:17:02Z", - "updated_at": "2025-01-29T21:22:43Z", - "pushed_at": "2025-01-29T21:22:40Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-12008.json b/2024/CVE-2024-12008.json deleted file mode 100644 index aa206fa322..0000000000 --- a/2024/CVE-2024-12008.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 946674502, - "name": "CVE-2024-12008-information-exposure-vulnerability-in-W3-Total-Cache", - "full_name": "spyata123\/CVE-2024-12008-information-exposure-vulnerability-in-W3-Total-Cache", - "owner": { - "login": "spyata123", - "id": 102546770, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102546770?v=4", - "html_url": "https:\/\/github.com\/spyata123", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/spyata123\/CVE-2024-12008-information-exposure-vulnerability-in-W3-Total-Cache", - "description": "CVE-2024-12008 information exposure vulnerability in W3 Total Cache", - "fork": false, - "created_at": "2025-03-11T14:01:02Z", - "updated_at": "2025-03-11T14:05:05Z", - "pushed_at": "2025-03-11T14:05:01Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-12084.json b/2024/CVE-2024-12084.json index 07da6f6def..d2dc9963e5 100644 --- a/2024/CVE-2024-12084.json +++ b/2024/CVE-2024-12084.json @@ -1,37 +1,4 @@ [ - { - "id": 919782397, - "name": "cve-2024-12084", - "full_name": "themirze\/cve-2024-12084", - "owner": { - "login": "themirze", - "id": 107270233, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/107270233?v=4", - "html_url": "https:\/\/github.com\/themirze", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/themirze\/cve-2024-12084", - "description": null, - "fork": false, - "created_at": "2025-01-21T02:13:14Z", - "updated_at": "2025-06-18T11:12:57Z", - "pushed_at": "2025-01-21T02:13:39Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - }, { "id": 924344284, "name": "CVE-2024-12084", diff --git a/2024/CVE-2024-12085.json b/2024/CVE-2024-12085.json deleted file mode 100644 index db488b74f0..0000000000 --- a/2024/CVE-2024-12085.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1025414527, - "name": "cve-2024-12085", - "full_name": "Otsutez\/cve-2024-12085", - "owner": { - "login": "Otsutez", - "id": 109570151, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/109570151?v=4", - "html_url": "https:\/\/github.com\/Otsutez", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Otsutez\/cve-2024-12085", - "description": "Exploit for CVE-2024-12085 Infoleak", - "fork": false, - "created_at": "2025-07-24T08:10:04Z", - "updated_at": "2025-11-19T10:05:01Z", - "pushed_at": "2025-07-24T10:36:23Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-1212.json b/2024/CVE-2024-1212.json index 310760ada3..d2874e0bf9 100644 --- a/2024/CVE-2024-1212.json +++ b/2024/CVE-2024-1212.json @@ -31,38 +31,5 @@ "watchers": 20, "score": 0, "subscribers_count": 1 - }, - { - "id": 1018554177, - "name": "CVE-2024-1212", - "full_name": "r0otk3r\/CVE-2024-1212", - "owner": { - "login": "r0otk3r", - "id": 211012408, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/211012408?v=4", - "html_url": "https:\/\/github.com\/r0otk3r", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/r0otk3r\/CVE-2024-1212", - "description": null, - "fork": false, - "created_at": "2025-07-12T14:08:23Z", - "updated_at": "2025-07-12T14:20:48Z", - "pushed_at": "2025-07-12T14:20:45Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2024/CVE-2024-12252.json b/2024/CVE-2024-12252.json deleted file mode 100644 index 0b14fdadfc..0000000000 --- a/2024/CVE-2024-12252.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 955012323, - "name": "CVE-2024-12252", - "full_name": "Nxploited\/CVE-2024-12252", - "owner": { - "login": "Nxploited", - "id": 188819918, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4", - "html_url": "https:\/\/github.com\/Nxploited", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-12252", - "description": "SEO LAT Auto Post <= 2.2.1 - Missing Authorization to File Overwrite\/Upload (Remote Code Execution)", - "fork": false, - "created_at": "2025-03-26T01:05:23Z", - "updated_at": "2025-04-07T00:54:05Z", - "pushed_at": "2025-03-29T20:25:56Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-12342.json b/2024/CVE-2024-12342.json deleted file mode 100644 index 3aefce844c..0000000000 --- a/2024/CVE-2024-12342.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 975076685, - "name": "TPLink-VN020-DoS", - "full_name": "becrevex\/TPLink-VN020-DoS", - "owner": { - "login": "becrevex", - "id": 8326868, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8326868?v=4", - "html_url": "https:\/\/github.com\/becrevex", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/becrevex\/TPLink-VN020-DoS", - "description": "TPLink VN020-F3v Denial of Service (CVE-2024-12342)", - "fork": false, - "created_at": "2025-04-29T18:40:14Z", - "updated_at": "2025-04-29T18:48:46Z", - "pushed_at": "2025-04-29T18:48:43Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-12365.json b/2024/CVE-2024-12365.json deleted file mode 100644 index 1e129d79cd..0000000000 --- a/2024/CVE-2024-12365.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 946659321, - "name": "W3TotalChache", - "full_name": "spyata123\/W3TotalChache", - "owner": { - "login": "spyata123", - "id": 102546770, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102546770?v=4", - "html_url": "https:\/\/github.com\/spyata123", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/spyata123\/W3TotalChache", - "description": "Testing for CVE-2019-6715 (Arbitrary File Read)\/ CVE-2024-12365 (SSRF\/Info Disclosure)", - "fork": false, - "created_at": "2025-03-11T13:35:15Z", - "updated_at": "2025-03-11T13:40:19Z", - "pushed_at": "2025-03-11T13:40:16Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-12542.json b/2024/CVE-2024-12542.json deleted file mode 100644 index 6597eb4897..0000000000 --- a/2024/CVE-2024-12542.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 926855680, - "name": "CVE-2024-12542-PoC", - "full_name": "Nxploited\/CVE-2024-12542-PoC", - "owner": { - "login": "Nxploited", - "id": 188819918, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4", - "html_url": "https:\/\/github.com\/Nxploited", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-12542-PoC", - "description": null, - "fork": false, - "created_at": "2025-02-04T01:08:51Z", - "updated_at": "2025-02-04T01:16:56Z", - "pushed_at": "2025-02-04T01:16:53Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-12877.json b/2024/CVE-2024-12877.json deleted file mode 100644 index 7e1a08d7c2..0000000000 --- a/2024/CVE-2024-12877.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1046385740, - "name": "CVE-2024-12877-Exploit", - "full_name": "soltanali0\/CVE-2024-12877-Exploit", - "owner": { - "login": "soltanali0", - "id": 87374678, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/87374678?v=4", - "html_url": "https:\/\/github.com\/soltanali0", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/soltanali0\/CVE-2024-12877-Exploit", - "description": null, - "fork": false, - "created_at": "2025-08-28T15:57:01Z", - "updated_at": "2025-09-08T08:04:48Z", - "pushed_at": "2025-08-28T16:25:17Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-12905.json b/2024/CVE-2024-12905.json deleted file mode 100644 index 082ea01c72..0000000000 --- a/2024/CVE-2024-12905.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 972136102, - "name": "CVE-2024-12905-PoC", - "full_name": "theMcSam\/CVE-2024-12905-PoC", - "owner": { - "login": "theMcSam", - "id": 65866483, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/65866483?v=4", - "html_url": "https:\/\/github.com\/theMcSam", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/theMcSam\/CVE-2024-12905-PoC", - "description": "tar-fs file write\/overwrite vulnerability", - "fork": false, - "created_at": "2025-04-24T15:34:41Z", - "updated_at": "2025-07-21T12:46:54Z", - "pushed_at": "2025-04-24T15:40:43Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-13159.json b/2024/CVE-2024-13159.json deleted file mode 100644 index a824597744..0000000000 --- a/2024/CVE-2024-13159.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 935044273, - "name": "Ivanti-EPM-Coercion-Vulnerabilities", - "full_name": "horizon3ai\/Ivanti-EPM-Coercion-Vulnerabilities", - "owner": { - "login": "horizon3ai", - "id": 79593994, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79593994?v=4", - "html_url": "https:\/\/github.com\/horizon3ai", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/horizon3ai\/Ivanti-EPM-Coercion-Vulnerabilities", - "description": "Proof of concept exploit for Ivanti EPM CVE-2024-13159 and others", - "fork": false, - "created_at": "2025-02-18T20:14:34Z", - "updated_at": "2026-01-04T06:30:45Z", - "pushed_at": "2025-02-19T12:28:04Z", - "stargazers_count": 13, - "watchers_count": 13, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 13, - "score": 0, - "subscribers_count": 4 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-13184.json b/2024/CVE-2024-13184.json deleted file mode 100644 index 704c85c727..0000000000 --- a/2024/CVE-2024-13184.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 919529883, - "name": "CVE-2024-13184", - "full_name": "RandomRobbieBF\/CVE-2024-13184", - "owner": { - "login": "RandomRobbieBF", - "id": 51722811, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4", - "html_url": "https:\/\/github.com\/RandomRobbieBF", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-13184", - "description": "The Ultimate WordPress Toolkit – WP Extended <= 3.0.12 - Unauthenticated SQL Injection via Login Attempts Module", - "fork": false, - "created_at": "2025-01-20T15:01:54Z", - "updated_at": "2026-07-08T12:35:18Z", - "pushed_at": "2025-01-20T15:04:19Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-13346.json b/2024/CVE-2024-13346.json deleted file mode 100644 index ce12975d88..0000000000 --- a/2024/CVE-2024-13346.json +++ /dev/null @@ -1,41 +0,0 @@ -[ - { - "id": 952941714, - "name": "CVE-2024-13346", - "full_name": "tausifzaman\/CVE-2024-13346", - "owner": { - "login": "tausifzaman", - "id": 144543822, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/144543822?v=4", - "html_url": "https:\/\/github.com\/tausifzaman", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/tausifzaman\/CVE-2024-13346", - "description": "Avada Theme < 7.11.14 - Unauthenticated Arbitrary Shortcode Execution CVE-2024-13346 exploit script", - "fork": false, - "created_at": "2025-03-22T07:42:11Z", - "updated_at": "2025-04-11T08:18:16Z", - "pushed_at": "2025-04-11T08:18:13Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "advanced", - "cve", - "cve-2024-13346", - "exploit", - "exploitscript" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-13478.json b/2024/CVE-2024-13478.json deleted file mode 100644 index acdedfcd6c..0000000000 --- a/2024/CVE-2024-13478.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 936146349, - "name": "CVE-2024-13478", - "full_name": "RandomRobbieBF\/CVE-2024-13478", - "owner": { - "login": "RandomRobbieBF", - "id": 51722811, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4", - "html_url": "https:\/\/github.com\/RandomRobbieBF", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-13478", - "description": "LTL Freight Quotes – TForce Edition <= 3.6.4 - Unauthenticated SQL Injection", - "fork": false, - "created_at": "2025-02-20T15:50:10Z", - "updated_at": "2026-07-08T12:35:31Z", - "pushed_at": "2025-02-20T15:50:35Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-13479.json b/2024/CVE-2024-13479.json deleted file mode 100644 index 49311af6e2..0000000000 --- a/2024/CVE-2024-13479.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 936147151, - "name": "CVE-2024-13479", - "full_name": "RandomRobbieBF\/CVE-2024-13479", - "owner": { - "login": "RandomRobbieBF", - "id": 51722811, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4", - "html_url": "https:\/\/github.com\/RandomRobbieBF", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-13479", - "description": "LTL Freight Quotes – SEFL Edition <= 3.2.4 - Unauthenticated SQL Injection", - "fork": false, - "created_at": "2025-02-20T15:51:34Z", - "updated_at": "2026-07-08T12:35:31Z", - "pushed_at": "2025-02-20T15:51:53Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-13481.json b/2024/CVE-2024-13481.json deleted file mode 100644 index 58ac47cfba..0000000000 --- a/2024/CVE-2024-13481.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 936147758, - "name": "CVE-2024-13481", - "full_name": "RandomRobbieBF\/CVE-2024-13481", - "owner": { - "login": "RandomRobbieBF", - "id": 51722811, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4", - "html_url": "https:\/\/github.com\/RandomRobbieBF", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-13481", - "description": "LTL Freight Quotes – R+L Carriers Edition <= 3.3.4 - Unauthenticated SQL Injection", - "fork": false, - "created_at": "2025-02-20T15:52:41Z", - "updated_at": "2026-07-08T12:35:31Z", - "pushed_at": "2025-02-20T15:52:54Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-13483.json b/2024/CVE-2024-13483.json deleted file mode 100644 index 1a1609f6a3..0000000000 --- a/2024/CVE-2024-13483.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 936145725, - "name": "CVE-2024-13483", - "full_name": "RandomRobbieBF\/CVE-2024-13483", - "owner": { - "login": "RandomRobbieBF", - "id": 51722811, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4", - "html_url": "https:\/\/github.com\/RandomRobbieBF", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-13483", - "description": "LTL Freight Quotes – SAIA Edition <= 2.2.10 - Unauthenticated SQL Injection", - "fork": false, - "created_at": "2025-02-20T15:48:57Z", - "updated_at": "2026-07-08T12:35:31Z", - "pushed_at": "2025-02-20T15:49:11Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-13485.json b/2024/CVE-2024-13485.json deleted file mode 100644 index d90cc39b59..0000000000 --- a/2024/CVE-2024-13485.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 936145062, - "name": "CVE-2024-13485", - "full_name": "RandomRobbieBF\/CVE-2024-13485", - "owner": { - "login": "RandomRobbieBF", - "id": 51722811, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4", - "html_url": "https:\/\/github.com\/RandomRobbieBF", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-13485", - "description": "LTL Freight Quotes – ABF Freight Edition <= 3.3.7 - Unauthenticated SQL Injection", - "fork": false, - "created_at": "2025-02-20T15:47:47Z", - "updated_at": "2026-07-08T12:35:31Z", - "pushed_at": "2025-02-20T15:48:06Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-13488.json b/2024/CVE-2024-13488.json deleted file mode 100644 index 85ee41ac24..0000000000 --- a/2024/CVE-2024-13488.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 936136913, - "name": "CVE-2024-13488", - "full_name": "RandomRobbieBF\/CVE-2024-13488", - "owner": { - "login": "RandomRobbieBF", - "id": 51722811, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4", - "html_url": "https:\/\/github.com\/RandomRobbieBF", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-13488", - "description": "LTL Freight Quotes – Estes Edition <= 3.3.7 - Unauthenticated SQL Injection", - "fork": false, - "created_at": "2025-02-20T15:33:26Z", - "updated_at": "2026-07-08T12:35:31Z", - "pushed_at": "2025-02-20T15:36:16Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-13489.json b/2024/CVE-2024-13489.json deleted file mode 100644 index bdd60655ec..0000000000 --- a/2024/CVE-2024-13489.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 936144084, - "name": "CVE-2024-13489", - "full_name": "RandomRobbieBF\/CVE-2024-13489", - "owner": { - "login": "RandomRobbieBF", - "id": 51722811, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4", - "html_url": "https:\/\/github.com\/RandomRobbieBF", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-13489", - "description": "LTL Freight Quotes – Old Dominion Edition <= 4.2.10 - Unauthenticated SQL Injection", - "fork": false, - "created_at": "2025-02-20T15:46:01Z", - "updated_at": "2026-07-08T12:35:31Z", - "pushed_at": "2025-02-20T15:46:28Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-13513.json b/2024/CVE-2024-13513.json index da13424ec9..2aac3dce52 100644 --- a/2024/CVE-2024-13513.json +++ b/2024/CVE-2024-13513.json @@ -1,37 +1,4 @@ [ - { - "id": 980344026, - "name": "CVE-2024-13513", - "full_name": "KTN1990\/CVE-2024-13513", - "owner": { - "login": "KTN1990", - "id": 33407405, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/33407405?v=4", - "html_url": "https:\/\/github.com\/KTN1990", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/KTN1990\/CVE-2024-13513", - "description": "Oliver POS – A WooCommerce Point of Sale (POS) <= 2.4.2.3 - Sensitive Information Exposure to Privilege Escalation", - "fork": false, - "created_at": "2025-05-09T01:27:54Z", - "updated_at": "2025-05-09T01:32:02Z", - "pushed_at": "2025-05-09T01:31:58Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1078453812, "name": "CVE-2024-13513.py", diff --git a/2024/CVE-2024-13800.json b/2024/CVE-2024-13800.json deleted file mode 100644 index 0c6f5da0c5..0000000000 --- a/2024/CVE-2024-13800.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 979299678, - "name": "CVE-2024-13800", - "full_name": "RandomRobbieBF\/CVE-2024-13800", - "owner": { - "login": "RandomRobbieBF", - "id": 51722811, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4", - "html_url": "https:\/\/github.com\/RandomRobbieBF", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-13800", - "description": "Popup Plugin For WordPress - ConvertPlus <= 3.5.30 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update", - "fork": false, - "created_at": "2025-05-07T09:51:47Z", - "updated_at": "2026-07-08T12:36:22Z", - "pushed_at": "2025-05-07T09:53:12Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-13869.json b/2024/CVE-2024-13869.json deleted file mode 100644 index ebae9dad3c..0000000000 --- a/2024/CVE-2024-13869.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 932466921, - "name": "CVE-2024-13869", - "full_name": "d0n601\/CVE-2024-13869", - "owner": { - "login": "d0n601", - "id": 8961705, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8961705?v=4", - "html_url": "https:\/\/github.com\/d0n601", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/d0n601\/CVE-2024-13869", - "description": "Migration,Backup, Staging – WPvivid <= 0.9.112 - Authenticated (Admin+) Arbitrary File Upload via wpvivid_upload_file", - "fork": false, - "created_at": "2025-02-14T00:39:35Z", - "updated_at": "2025-04-16T22:30:13Z", - "pushed_at": "2025-04-16T22:30:10Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-1651.json b/2024/CVE-2024-1651.json index 289b6e08e9..8c3eeea066 100644 --- a/2024/CVE-2024-1651.json +++ b/2024/CVE-2024-1651.json @@ -101,38 +101,5 @@ "watchers": 0, "score": 0, "subscribers_count": 1 - }, - { - "id": 935891739, - "name": "cve-2024-1651", - "full_name": "killukeren\/cve-2024-1651", - "owner": { - "login": "killukeren", - "id": 193549426, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/193549426?v=4", - "html_url": "https:\/\/github.com\/killukeren", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/killukeren\/cve-2024-1651", - "description": "anu", - "fork": false, - "created_at": "2025-02-20T07:29:34Z", - "updated_at": "2025-02-20T07:41:32Z", - "pushed_at": "2025-02-20T07:41:29Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2024/CVE-2024-2053.json b/2024/CVE-2024-2053.json deleted file mode 100644 index a80f0ae563..0000000000 --- a/2024/CVE-2024-2053.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1030794766, - "name": "CVE-2024-2053", - "full_name": "b-L-x\/CVE-2024-2053", - "owner": { - "login": "b-L-x", - "id": 95941526, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/95941526?v=4", - "html_url": "https:\/\/github.com\/b-L-x", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/b-L-x\/CVE-2024-2053", - "description": "CVE-2024-2053", - "fork": false, - "created_at": "2025-08-02T10:41:08Z", - "updated_at": "2025-08-15T02:35:47Z", - "pushed_at": "2025-08-02T10:45:31Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-20674.json b/2024/CVE-2024-20674.json deleted file mode 100644 index b73364c147..0000000000 --- a/2024/CVE-2024-20674.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 965323879, - "name": "CVE-2024-20674", - "full_name": "gpotter2\/CVE-2024-20674", - "owner": { - "login": "gpotter2", - "id": 10530980, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/10530980?v=4", - "html_url": "https:\/\/github.com\/gpotter2", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/gpotter2\/CVE-2024-20674", - "description": null, - "fork": false, - "created_at": "2025-04-12T22:47:10Z", - "updated_at": "2025-06-25T02:20:31Z", - "pushed_at": "2025-06-06T17:32:11Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-20767.json b/2024/CVE-2024-20767.json index 5577fab569..dc4321598c 100644 --- a/2024/CVE-2024-20767.json +++ b/2024/CVE-2024-20767.json @@ -134,38 +134,5 @@ "watchers": 1, "score": 0, "subscribers_count": 1 - }, - { - "id": 1022514673, - "name": "CVE-2024-20767", - "full_name": "alm6no5\/CVE-2024-20767", - "owner": { - "login": "alm6no5", - "id": 59392017, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59392017?v=4", - "html_url": "https:\/\/github.com\/alm6no5", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/alm6no5\/CVE-2024-20767", - "description": null, - "fork": false, - "created_at": "2025-07-19T08:33:21Z", - "updated_at": "2025-07-19T08:35:56Z", - "pushed_at": "2025-07-19T08:35:53Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2024/CVE-2024-21006.json b/2024/CVE-2024-21006.json index f07d7bca82..1dc3f6fb64 100644 --- a/2024/CVE-2024-21006.json +++ b/2024/CVE-2024-21006.json @@ -97,38 +97,5 @@ "watchers": 6, "score": 0, "subscribers_count": 1 - }, - { - "id": 997667519, - "name": "CVE-2024-21006_PoC", - "full_name": "d3fudd\/CVE-2024-21006_PoC", - "owner": { - "login": "d3fudd", - "id": 76706456, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/76706456?v=4", - "html_url": "https:\/\/github.com\/d3fudd", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/d3fudd\/CVE-2024-21006_PoC", - "description": "Remote Code Execution (RCE) - Oracle WebLogic 12.2.1.3.0", - "fork": false, - "created_at": "2025-06-06T23:44:05Z", - "updated_at": "2026-02-03T21:04:45Z", - "pushed_at": "2025-06-07T00:02:05Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2024/CVE-2024-21306.json b/2024/CVE-2024-21306.json index 77d7d074a7..bc575589d6 100644 --- a/2024/CVE-2024-21306.json +++ b/2024/CVE-2024-21306.json @@ -80,7 +80,7 @@ "description": "Exploit basado en vulnerabilidades criticas Bluetooth (CVE-2023-45866, CVE-2024-21306)", "fork": false, "created_at": "2024-12-15T03:00:47Z", - "updated_at": "2026-08-10T02:18:16Z", + "updated_at": "2026-08-13T19:41:02Z", "pushed_at": "2026-07-23T09:08:54Z", "stargazers_count": 16, "watchers_count": 16, diff --git a/2024/CVE-2024-21409.json b/2024/CVE-2024-21409.json deleted file mode 100644 index 93f900a2b9..0000000000 --- a/2024/CVE-2024-21409.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 931597077, - "name": "cve-2024-21409-repro", - "full_name": "vkairy\/cve-2024-21409-repro", - "owner": { - "login": "vkairy", - "id": 15889094, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/15889094?v=4", - "html_url": "https:\/\/github.com\/vkairy", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/vkairy\/cve-2024-21409-repro", - "description": null, - "fork": false, - "created_at": "2025-02-12T14:47:05Z", - "updated_at": "2025-02-14T19:41:08Z", - "pushed_at": "2025-02-12T14:59:59Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-21413.json b/2024/CVE-2024-21413.json index 3d268aff13..2b3540ceb3 100644 --- a/2024/CVE-2024-21413.json +++ b/2024/CVE-2024-21413.json @@ -536,105 +536,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 954971949, - "name": "Project-NTLM-Hash-Capture-and-Phishing-Email-Exploitation-for-CVE-2024-21413", - "full_name": "ArtemCyberLab\/Project-NTLM-Hash-Capture-and-Phishing-Email-Exploitation-for-CVE-2024-21413", - "owner": { - "login": "ArtemCyberLab", - "id": 193649833, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/193649833?v=4", - "html_url": "https:\/\/github.com\/ArtemCyberLab", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ArtemCyberLab\/Project-NTLM-Hash-Capture-and-Phishing-Email-Exploitation-for-CVE-2024-21413", - "description": "The project was created to demonstrate the use of various tools for capturing NTLM hashes from users on a network and for executing phishing attacks using email. This showcases how network authentication vulnerabilities and phishing methods can be exploited to compromise systems.", - "fork": false, - "created_at": "2025-03-25T22:49:05Z", - "updated_at": "2025-03-25T22:51:49Z", - "pushed_at": "2025-03-25T22:51:46Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 981389350, - "name": "CVE-2024-21413", - "full_name": "PolarisXSec\/CVE-2024-21413", - "owner": { - "login": "PolarisXSec", - "id": 210077807, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/210077807?v=4", - "html_url": "https:\/\/github.com\/PolarisXSec", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/PolarisXSec\/CVE-2024-21413", - "description": null, - "fork": false, - "created_at": "2025-05-11T01:55:39Z", - "updated_at": "2025-05-11T02:49:20Z", - "pushed_at": "2025-05-11T02:27:23Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 993208444, - "name": "Moniker-Link-CVE-2024-21413", - "full_name": "MQKGitHub\/Moniker-Link-CVE-2024-21413", - "owner": { - "login": "MQKGitHub", - "id": 100727141, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/100727141?v=4", - "html_url": "https:\/\/github.com\/MQKGitHub", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/MQKGitHub\/Moniker-Link-CVE-2024-21413", - "description": null, - "fork": false, - "created_at": "2025-05-30T11:57:00Z", - "updated_at": "2025-05-30T11:58:33Z", - "pushed_at": "2025-05-30T11:58:30Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1062223539, "name": "Email-exploit-Moniker-Link-CVE-2024-21413-", diff --git a/2024/CVE-2024-21513.json b/2024/CVE-2024-21513.json deleted file mode 100644 index 8b44f0786b..0000000000 --- a/2024/CVE-2024-21513.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 942658038, - "name": "Reproduce-CVE-2024-21513", - "full_name": "SavageSanta11\/Reproduce-CVE-2024-21513", - "owner": { - "login": "SavageSanta11", - "id": 61196135, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61196135?v=4", - "html_url": "https:\/\/github.com\/SavageSanta11", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SavageSanta11\/Reproduce-CVE-2024-21513", - "description": null, - "fork": false, - "created_at": "2025-03-04T13:11:44Z", - "updated_at": "2025-03-04T13:55:08Z", - "pushed_at": "2025-03-04T13:55:04Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 963400060, - "name": "CVE-2024-21513", - "full_name": "nskath\/CVE-2024-21513", - "owner": { - "login": "nskath", - "id": 123030563, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123030563?v=4", - "html_url": "https:\/\/github.com\/nskath", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/nskath\/CVE-2024-21513", - "description": "PoC for CVE-2024-21513", - "fork": false, - "created_at": "2025-04-09T16:13:18Z", - "updated_at": "2025-04-10T17:30:39Z", - "pushed_at": "2025-04-10T17:30:35Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-21546.json b/2024/CVE-2024-21546.json deleted file mode 100644 index 24e819b0d5..0000000000 --- a/2024/CVE-2024-21546.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 977905702, - "name": "CVE-2024-21546", - "full_name": "ajdumanhug\/CVE-2024-21546", - "owner": { - "login": "ajdumanhug", - "id": 9420289, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/9420289?v=4", - "html_url": "https:\/\/github.com\/ajdumanhug", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ajdumanhug\/CVE-2024-21546", - "description": "This Python exploit script targets a vulnerable Laravel Filemanager created by UniSharp, which allows authenticated users to bypass file restrictions and upload malicious files. This can lead to Remote Code Execution (RCE) when the uploaded payload is triggered.", - "fork": false, - "created_at": "2025-05-05T06:52:42Z", - "updated_at": "2026-05-02T09:06:51Z", - "pushed_at": "2025-05-05T08:03:53Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 5, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-21762.json b/2024/CVE-2024-21762.json index f8bec33a23..55bbff89a9 100644 --- a/2024/CVE-2024-21762.json +++ b/2024/CVE-2024-21762.json @@ -197,39 +197,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 988496476, - "name": "CVE-2024-21762_FortiNet_PoC", - "full_name": "abrewer251\/CVE-2024-21762_FortiNet_PoC", - "owner": { - "login": "abrewer251", - "id": 150287770, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/150287770?v=4", - "html_url": "https:\/\/github.com\/abrewer251", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/abrewer251\/CVE-2024-21762_FortiNet_PoC", - "description": "Proof-of-concept scanner targeting CVE-2024-21762 in FortiOS SSL VPN’s \/remote\/hostcheck_validate endpoint with reverse shell payload delivery.", - "fork": false, - "created_at": "2025-05-22T16:22:37Z", - "updated_at": "2026-04-24T14:33:38Z", - "pushed_at": "2025-05-22T16:30:00Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, { "id": 1133665670, "name": "CVE-2024-21762", diff --git a/2024/CVE-2024-21887.json b/2024/CVE-2024-21887.json index 3515cb4151..6d0e1e4e40 100644 --- a/2024/CVE-2024-21887.json +++ b/2024/CVE-2024-21887.json @@ -196,71 +196,5 @@ "watchers": 0, "score": 0, "subscribers_count": 1 - }, - { - "id": 916614674, - "name": "pulse-meter", - "full_name": "rxwx\/pulse-meter", - "owner": { - "login": "rxwx", - "id": 2202542, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/2202542?v=4", - "html_url": "https:\/\/github.com\/rxwx", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/rxwx\/pulse-meter", - "description": "Parses the System Snapshot from an Ivanti Connect Secure applicance to identify possible IOCs related to CVE-2023-46805, CVE-2024-21887 and CVE-2025-0282.", - "fork": false, - "created_at": "2025-01-14T12:54:19Z", - "updated_at": "2025-02-21T16:57:58Z", - "pushed_at": "2025-02-13T15:24:45Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 918932062, - "name": "Ivanti-Connect-Secure-Logs-Parser", - "full_name": "Hexastrike\/Ivanti-Connect-Secure-Logs-Parser", - "owner": { - "login": "Hexastrike", - "id": 168469680, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/168469680?v=4", - "html_url": "https:\/\/github.com\/Hexastrike", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Hexastrike\/Ivanti-Connect-Secure-Logs-Parser", - "description": "A Python script for examining Ivanti Secure Connect (ICS) event logs, designed to support investigations into vulnerabilities CVE-2025-0282, CVE-2023-46805, and CVE-2024-21887.", - "fork": false, - "created_at": "2025-01-19T09:02:37Z", - "updated_at": "2026-02-13T14:04:55Z", - "pushed_at": "2025-01-19T18:26:31Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 5, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2024/CVE-2024-22243.json b/2024/CVE-2024-22243.json index 21955036ef..e1cfad8b5c 100644 --- a/2024/CVE-2024-22243.json +++ b/2024/CVE-2024-22243.json @@ -76,38 +76,5 @@ "watchers": 5, "score": 0, "subscribers_count": 1 - }, - { - "id": 936441861, - "name": "CVE-2024-22243", - "full_name": "Reivap\/CVE-2024-22243", - "owner": { - "login": "Reivap", - "id": 125445489, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/125445489?v=4", - "html_url": "https:\/\/github.com\/Reivap", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Reivap\/CVE-2024-22243", - "description": "Code used from @SeanPesce", - "fork": false, - "created_at": "2025-02-21T05:03:01Z", - "updated_at": "2025-02-21T05:03:05Z", - "pushed_at": "2025-02-21T05:03:01Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2024/CVE-2024-22371.json b/2024/CVE-2024-22371.json deleted file mode 100644 index 227b905032..0000000000 --- a/2024/CVE-2024-22371.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 999332240, - "name": "POC_for_-CVE-2024-22371", - "full_name": "vishalborkar7\/POC_for_-CVE-2024-22371", - "owner": { - "login": "vishalborkar7", - "id": 215626059, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/215626059?v=4", - "html_url": "https:\/\/github.com\/vishalborkar7", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/vishalborkar7\/POC_for_-CVE-2024-22371", - "description": null, - "fork": false, - "created_at": "2025-06-10T05:16:41Z", - "updated_at": "2025-06-10T05:29:02Z", - "pushed_at": "2025-06-10T05:28:58Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-23113.json b/2024/CVE-2024-23113.json index 7c123fdaa7..8457e04de1 100644 --- a/2024/CVE-2024-23113.json +++ b/2024/CVE-2024-23113.json @@ -98,72 +98,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 976374766, - "name": "CVE-2024-23113", - "full_name": "iambrayden\/CVE-2024-23113", - "owner": { - "login": "iambrayden", - "id": 181048552, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/181048552?v=4", - "html_url": "https:\/\/github.com\/iambrayden", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/iambrayden\/CVE-2024-23113", - "description": "This python scripts searches a client list to see if their FortiGate device is vulnerable to this CVE.", - "fork": false, - "created_at": "2025-05-02T02:07:12Z", - "updated_at": "2026-05-18T02:44:02Z", - "pushed_at": "2025-05-02T02:09:43Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1012343924, - "name": "cve-2024-23113-test-env", - "full_name": "MAVRICK-1\/cve-2024-23113-test-env", - "owner": { - "login": "MAVRICK-1", - "id": 146999057, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/146999057?v=4", - "html_url": "https:\/\/github.com\/MAVRICK-1", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/MAVRICK-1\/cve-2024-23113-test-env", - "description": null, - "fork": false, - "created_at": "2025-07-02T07:33:06Z", - "updated_at": "2025-07-04T05:04:46Z", - "pushed_at": "2025-07-02T07:33:25Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, { "id": 1249159194, "name": "PoC-CVE-2024-23113", diff --git a/2024/CVE-2024-23346.json b/2024/CVE-2024-23346.json index a7a0c5fc8f..1bf7e70248 100644 --- a/2024/CVE-2024-23346.json +++ b/2024/CVE-2024-23346.json @@ -64,104 +64,5 @@ "watchers": 0, "score": 0, "subscribers_count": 1 - }, - { - "id": 936033062, - "name": "CVE-2024-23346", - "full_name": "Sanity-Archive\/CVE-2024-23346", - "owner": { - "login": "Sanity-Archive", - "id": 167864026, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/167864026?v=4", - "html_url": "https:\/\/github.com\/Sanity-Archive", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Sanity-Archive\/CVE-2024-23346", - "description": "PoC of the vulnerability CVE-2024-23346", - "fork": false, - "created_at": "2025-02-20T12:23:43Z", - "updated_at": "2026-06-08T09:26:20Z", - "pushed_at": "2025-04-16T15:46:28Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 938818030, - "name": "CVE-2024-23346-rust-exploit", - "full_name": "szyth\/CVE-2024-23346-rust-exploit", - "owner": { - "login": "szyth", - "id": 46795709, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/46795709?v=4", - "html_url": "https:\/\/github.com\/szyth", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/szyth\/CVE-2024-23346-rust-exploit", - "description": "A Rust exploit for CVE-2024-23346 that functions as a \"terminal\" (tested on chemistry.htb)", - "fork": false, - "created_at": "2025-02-25T14:52:28Z", - "updated_at": "2025-02-28T18:56:33Z", - "pushed_at": "2025-02-28T18:56:30Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1025740776, - "name": "CVE-2024-23346-exploit", - "full_name": "DAVIDAROCA27\/CVE-2024-23346-exploit", - "owner": { - "login": "DAVIDAROCA27", - "id": 155730441, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/155730441?v=4", - "html_url": "https:\/\/github.com\/DAVIDAROCA27", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/DAVIDAROCA27\/CVE-2024-23346-exploit", - "description": "This is a exploit for the known Remote Code Execution (RCE) vulnerability in the `pymatgen` (CVE-2024-23346) Python library by uploading a malicious `CIF` file to the hosted `CIF Analyzer` website on the target running on the Chemistry machine from Hack the Box.", - "fork": false, - "created_at": "2025-07-24T18:12:42Z", - "updated_at": "2025-12-25T19:10:29Z", - "pushed_at": "2025-07-26T12:58:54Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 4, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2024/CVE-2024-23666.json b/2024/CVE-2024-23666.json deleted file mode 100644 index 915c8d81cf..0000000000 --- a/2024/CVE-2024-23666.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 931530789, - "name": "CVE-2023-42791_CVE-2024-23666", - "full_name": "synacktiv\/CVE-2023-42791_CVE-2024-23666", - "owner": { - "login": "synacktiv", - "id": 50145679, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50145679?v=4", - "html_url": "https:\/\/github.com\/synacktiv", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/synacktiv\/CVE-2023-42791_CVE-2024-23666", - "description": "Exploitations scripts for CVE-2023-42791 and CVE-2024-23666.", - "fork": false, - "created_at": "2025-02-12T12:41:19Z", - "updated_at": "2025-02-20T12:55:17Z", - "pushed_at": "2025-02-12T14:58:09Z", - "stargazers_count": 6, - "watchers_count": 6, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 6, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-23673.json b/2024/CVE-2024-23673.json deleted file mode 100644 index 85422e6e9c..0000000000 --- a/2024/CVE-2024-23673.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1039521250, - "name": "apache__sling-org-apache-sling-servlets-resolver_CVE-2024-23673_2-10-0", - "full_name": "shoucheng3\/apache__sling-org-apache-sling-servlets-resolver_CVE-2024-23673_2-10-0", - "owner": { - "login": "shoucheng3", - "id": 71475027, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71475027?v=4", - "html_url": "https:\/\/github.com\/shoucheng3", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/shoucheng3\/apache__sling-org-apache-sling-servlets-resolver_CVE-2024-23673_2-10-0", - "description": null, - "fork": false, - "created_at": "2025-08-17T12:22:57Z", - "updated_at": "2025-08-17T12:23:53Z", - "pushed_at": "2025-08-17T12:23:49Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-23692.json b/2024/CVE-2024-23692.json index a0d621e1cc..f0b7fbf7c1 100644 --- a/2024/CVE-2024-23692.json +++ b/2024/CVE-2024-23692.json @@ -367,39 +367,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 943818436, - "name": "CVE-2024-23692_Exploit", - "full_name": "999gawkboyy\/CVE-2024-23692_Exploit", - "owner": { - "login": "999gawkboyy", - "id": 101628239, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/101628239?v=4", - "html_url": "https:\/\/github.com\/999gawkboyy", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/999gawkboyy\/CVE-2024-23692_Exploit", - "description": "HFS 2.3m SERVER RCE Vulnerability exploit", - "fork": false, - "created_at": "2025-03-06T10:12:09Z", - "updated_at": "2025-03-06T10:13:09Z", - "pushed_at": "2025-03-06T10:13:06Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1167229680, "name": "hfs2", diff --git a/2024/CVE-2024-23724.json b/2024/CVE-2024-23724.json deleted file mode 100644 index 5c3bfbd21d..0000000000 --- a/2024/CVE-2024-23724.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 919073460, - "name": "CVE-2024-23724", - "full_name": "Youssefdds\/CVE-2024-23724", - "owner": { - "login": "Youssefdds", - "id": 190470771, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/190470771?v=4", - "html_url": "https:\/\/github.com\/Youssefdds", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Youssefdds\/CVE-2024-23724", - "description": null, - "fork": false, - "created_at": "2025-01-19T16:35:50Z", - "updated_at": "2025-01-19T16:42:19Z", - "pushed_at": "2025-01-19T16:42:17Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 937492959, - "name": "Ghost-CMS-Exploit", - "full_name": "gl1tch0x1\/Ghost-CMS-Exploit", - "owner": { - "login": "gl1tch0x1", - "id": 80126458, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/80126458?v=4", - "html_url": "https:\/\/github.com\/gl1tch0x1", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/gl1tch0x1\/Ghost-CMS-Exploit", - "description": "Ghost-CMS Exploit is python script. This script first performs brute-force authentication attempts using the provided wordlists. If valid credentials are found, it proceeds to check for CVE-2024-23724 vulnerability and generates an exploit payload if vulnerable.", - "fork": false, - "created_at": "2025-02-23T07:23:40Z", - "updated_at": "2025-02-23T07:29:19Z", - "pushed_at": "2025-02-23T07:29:16Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-23733.json b/2024/CVE-2024-23733.json deleted file mode 100644 index e46b1828aa..0000000000 --- a/2024/CVE-2024-23733.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 920049359, - "name": "CVE-2024-23733", - "full_name": "ekcrsm\/CVE-2024-23733", - "owner": { - "login": "ekcrsm", - "id": 193490505, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/193490505?v=4", - "html_url": "https:\/\/github.com\/ekcrsm", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ekcrsm\/CVE-2024-23733", - "description": null, - "fork": false, - "created_at": "2025-01-21T13:30:22Z", - "updated_at": "2025-01-30T07:51:31Z", - "pushed_at": "2025-01-30T07:51:28Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-2387.json b/2024/CVE-2024-2387.json deleted file mode 100644 index bc7eefbaf1..0000000000 --- a/2024/CVE-2024-2387.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 953922943, - "name": "CVE-2024-2387", - "full_name": "RandomRobbieBF\/CVE-2024-2387", - "owner": { - "login": "RandomRobbieBF", - "id": 51722811, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4", - "html_url": "https:\/\/github.com\/RandomRobbieBF", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-2387", - "description": "Advanced Form Integration – Connect WooCommerce and Contact Form 7 to Google Sheets and other platforms <= 1.82.0 - SQL Injection to Reflected Cross-Site Scripting via integration_id", - "fork": false, - "created_at": "2025-03-24T09:45:22Z", - "updated_at": "2026-07-08T12:35:50Z", - "pushed_at": "2025-03-24T09:48:04Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-23897.json b/2024/CVE-2024-23897.json index 539b20c6ba..efd572bad1 100644 --- a/2024/CVE-2024-23897.json +++ b/2024/CVE-2024-23897.json @@ -1047,138 +1047,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 953350869, - "name": "CVE-2024-23897", - "full_name": "slytechroot\/CVE-2024-23897", - "owner": { - "login": "slytechroot", - "id": 96862479, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/96862479?v=4", - "html_url": "https:\/\/github.com\/slytechroot", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/slytechroot\/CVE-2024-23897", - "description": "Jenkins RCE Arbitrary File Read CVE-2024-23897 ", - "fork": false, - "created_at": "2025-03-23T06:34:14Z", - "updated_at": "2025-03-23T06:37:08Z", - "pushed_at": "2025-03-23T06:37:04Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 956416649, - "name": "Jenkins-CVE-2024-23897-Exploit-Demo", - "full_name": "brandonhjh\/Jenkins-CVE-2024-23897-Exploit-Demo", - "owner": { - "login": "brandonhjh", - "id": 62134309, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62134309?v=4", - "html_url": "https:\/\/github.com\/brandonhjh", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/brandonhjh\/Jenkins-CVE-2024-23897-Exploit-Demo", - "description": null, - "fork": false, - "created_at": "2025-03-28T08:12:25Z", - "updated_at": "2025-04-07T17:25:29Z", - "pushed_at": "2025-04-07T17:25:25Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 960330784, - "name": "CVE-2024-23897", - "full_name": "tvasari\/CVE-2024-23897", - "owner": { - "login": "tvasari", - "id": 60120009, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/60120009?v=4", - "html_url": "https:\/\/github.com\/tvasari", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/tvasari\/CVE-2024-23897", - "description": "Jenkins CLI arbitrary read (CVE-2024-23897 applies to versions below 2.442 and LTS 2.426.3)", - "fork": false, - "created_at": "2025-04-04T08:49:40Z", - "updated_at": "2025-04-04T08:53:54Z", - "pushed_at": "2025-04-04T08:53:50Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1025405168, - "name": "Jenkins-CVE-2024-23897-Lab", - "full_name": "Fineken\/Jenkins-CVE-2024-23897-Lab", - "owner": { - "login": "Fineken", - "id": 62799189, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62799189?v=4", - "html_url": "https:\/\/github.com\/Fineken", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Fineken\/Jenkins-CVE-2024-23897-Lab", - "description": null, - "fork": false, - "created_at": "2025-07-24T07:52:13Z", - "updated_at": "2025-07-24T13:54:37Z", - "pushed_at": "2025-07-24T07:53:12Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 0 - }, { "id": 1054178309, "name": "day03-jenkins-23897", diff --git a/2024/CVE-2024-24450.json b/2024/CVE-2024-24450.json deleted file mode 100644 index ad559ca601..0000000000 --- a/2024/CVE-2024-24450.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 948162525, - "name": "-CVE-2024-24450-", - "full_name": "SpiralBL0CK\/-CVE-2024-24450-", - "owner": { - "login": "SpiralBL0CK", - "id": 25670930, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25670930?v=4", - "html_url": "https:\/\/github.com\/SpiralBL0CK", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SpiralBL0CK\/-CVE-2024-24450-", - "description": "test later for hypo poc for CVE-2024-24450 ", - "fork": false, - "created_at": "2025-03-13T21:18:37Z", - "updated_at": "2025-03-13T21:19:14Z", - "pushed_at": "2025-03-13T21:19:11Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-24451.json b/2024/CVE-2024-24451.json deleted file mode 100644 index 7bc30f6098..0000000000 --- a/2024/CVE-2024-24451.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 948172656, - "name": "CVE-2024-24451", - "full_name": "SpiralBL0CK\/CVE-2024-24451", - "owner": { - "login": "SpiralBL0CK", - "id": 25670930, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25670930?v=4", - "html_url": "https:\/\/github.com\/SpiralBL0CK", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SpiralBL0CK\/CVE-2024-24451", - "description": "hypo for CVE-2024-24451", - "fork": false, - "created_at": "2025-03-13T21:48:03Z", - "updated_at": "2025-03-13T21:48:23Z", - "pushed_at": "2025-03-13T21:48:19Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-24919.json b/2024/CVE-2024-24919.json index aac4be2eb9..ca5db822bf 100644 --- a/2024/CVE-2024-24919.json +++ b/2024/CVE-2024-24919.json @@ -1703,237 +1703,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 927667320, - "name": "SOC_287", - "full_name": "hashdr1ft\/SOC_287", - "owner": { - "login": "hashdr1ft", - "id": 75790945, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/75790945?v=4", - "html_url": "https:\/\/github.com\/hashdr1ft", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/hashdr1ft\/SOC_287", - "description": "SOC287 - Arbitrary File Read on Checkpoint Security Gateway [CVE-2024-24919]", - "fork": false, - "created_at": "2025-02-05T10:42:54Z", - "updated_at": "2025-07-19T07:40:30Z", - "pushed_at": "2025-02-05T11:09:37Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 936762227, - "name": "CVE-2024-24919---Exploit-Script", - "full_name": "funixone\/CVE-2024-24919---Exploit-Script", - "owner": { - "login": "funixone", - "id": 199502363, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/199502363?v=4", - "html_url": "https:\/\/github.com\/funixone", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/funixone\/CVE-2024-24919---Exploit-Script", - "description": null, - "fork": false, - "created_at": "2025-02-21T16:36:13Z", - "updated_at": "2025-08-27T16:27:39Z", - "pushed_at": "2025-02-21T16:45:37Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 939184452, - "name": "CVE-2024-24919-POC", - "full_name": "SpiX-7\/CVE-2024-24919-POC", - "owner": { - "login": "SpiX-7", - "id": 142835865, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/142835865?v=4", - "html_url": "https:\/\/github.com\/SpiX-7", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SpiX-7\/CVE-2024-24919-POC", - "description": null, - "fork": false, - "created_at": "2025-02-26T06:07:03Z", - "updated_at": "2025-02-26T06:15:30Z", - "pushed_at": "2025-02-26T06:15:27Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 954138501, - "name": "cve-2024-24919", - "full_name": "ejaboz\/cve-2024-24919", - "owner": { - "login": "ejaboz", - "id": 71855496, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71855496?v=4", - "html_url": "https:\/\/github.com\/ejaboz", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ejaboz\/cve-2024-24919", - "description": null, - "fork": false, - "created_at": "2025-03-24T16:07:27Z", - "updated_at": "2025-03-24T16:07:27Z", - "pushed_at": "2025-03-24T16:07:27Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 972563563, - "name": "CVE-2024-24919-Incident-Report.md", - "full_name": "CyprianAtsyor\/CVE-2024-24919-Incident-Report.md", - "owner": { - "login": "CyprianAtsyor", - "id": 172041723, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/172041723?v=4", - "html_url": "https:\/\/github.com\/CyprianAtsyor", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/CyprianAtsyor\/CVE-2024-24919-Incident-Report.md", - "description": null, - "fork": false, - "created_at": "2025-04-25T09:30:10Z", - "updated_at": "2025-04-25T09:50:08Z", - "pushed_at": "2025-04-25T09:50:05Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 998312304, - "name": "Event-ID-263-Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-", - "full_name": "CyberBibs\/Event-ID-263-Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-", - "owner": { - "login": "CyberBibs", - "id": 47519847, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47519847?v=4", - "html_url": "https:\/\/github.com\/CyberBibs", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/CyberBibs\/Event-ID-263-Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-", - "description": null, - "fork": false, - "created_at": "2025-06-08T10:44:52Z", - "updated_at": "2025-06-09T04:48:51Z", - "pushed_at": "2025-06-09T04:48:47Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1018610812, - "name": "Detecting-and-Analyzing-CVE-2024-24919-Exploitation", - "full_name": "MacUchegit\/Detecting-and-Analyzing-CVE-2024-24919-Exploitation", - "owner": { - "login": "MacUchegit", - "id": 136243817, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/136243817?v=4", - "html_url": "https:\/\/github.com\/MacUchegit", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/MacUchegit\/Detecting-and-Analyzing-CVE-2024-24919-Exploitation", - "description": null, - "fork": false, - "created_at": "2025-07-12T16:28:55Z", - "updated_at": "2025-07-12T18:18:58Z", - "pushed_at": "2025-07-12T18:18:55Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1319165802, "name": "Incident-Analysis-Response-Check-Point-Security-Gateway-CVE-2024-24919-LFI-Exploitation", diff --git a/2024/CVE-2024-25092.json b/2024/CVE-2024-25092.json index d18449441b..e8e59181dd 100644 --- a/2024/CVE-2024-25092.json +++ b/2024/CVE-2024-25092.json @@ -31,38 +31,5 @@ "watchers": 1, "score": 0, "subscribers_count": 1 - }, - { - "id": 947869311, - "name": "CVE-2024-25092", - "full_name": "Nxploited\/CVE-2024-25092", - "owner": { - "login": "Nxploited", - "id": 188819918, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4", - "html_url": "https:\/\/github.com\/Nxploited", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-25092", - "description": "WordPress NextMove Lite plugin <= 2.17.0 - Subscriber+ Arbitrary Plugin Installation\/Activation vulnerability", - "fork": false, - "created_at": "2025-03-13T11:27:36Z", - "updated_at": "2025-03-29T20:30:34Z", - "pushed_at": "2025-03-29T20:30:31Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2024/CVE-2024-25180.json b/2024/CVE-2024-25180.json deleted file mode 100644 index 18ba549d17..0000000000 --- a/2024/CVE-2024-25180.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 957000548, - "name": "CVE-2024-25180", - "full_name": "dustblessnotdust\/CVE-2024-25180", - "owner": { - "login": "dustblessnotdust", - "id": 185211671, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/185211671?v=4", - "html_url": "https:\/\/github.com\/dustblessnotdust", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dustblessnotdust\/CVE-2024-25180", - "description": null, - "fork": false, - "created_at": "2025-03-29T10:11:34Z", - "updated_at": "2025-03-29T10:23:51Z", - "pushed_at": "2025-03-29T10:23:48Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-25600.json b/2024/CVE-2024-25600.json index b4b934070a..775f7ce48b 100644 --- a/2024/CVE-2024-25600.json +++ b/2024/CVE-2024-25600.json @@ -380,236 +380,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 922662785, - "name": "test-task-CVE-2024-25600", - "full_name": "Sibul-Dan-Glokta\/test-task-CVE-2024-25600", - "owner": { - "login": "Sibul-Dan-Glokta", - "id": 108305724, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/108305724?v=4", - "html_url": "https:\/\/github.com\/Sibul-Dan-Glokta", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Sibul-Dan-Glokta\/test-task-CVE-2024-25600", - "description": "Repository for internship test task. ", - "fork": false, - "created_at": "2025-01-26T19:35:25Z", - "updated_at": "2025-01-26T23:44:31Z", - "pushed_at": "2025-01-26T23:44:27Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 957779435, - "name": "CVE-2024-25600", - "full_name": "so1icitx\/CVE-2024-25600", - "owner": { - "login": "so1icitx", - "id": 178584538, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/178584538?v=4", - "html_url": "https:\/\/github.com\/so1icitx", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/so1icitx\/CVE-2024-25600", - "description": "Unauthenticated RCE exploit for CVE-2024-25600 in WordPress Bricks Builder <= 1.9.6. Executes arbitrary code remotely.", - "fork": false, - "created_at": "2025-03-31T05:44:43Z", - "updated_at": "2026-01-02T06:31:19Z", - "pushed_at": "2025-04-05T16:28:22Z", - "stargazers_count": 13, - "watchers_count": 13, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "bricks-builder", - "bricksbuilder", - "cve-2024-25600", - "exploit", - "hacking", - "pentesting", - "python-3", - "python3", - "rce", - "rce-exploit", - "remote-code-execution", - "security-research", - "security-researcher", - "vulnerability", - "wordpress", - "wordpress-plugin" - ], - "visibility": "public", - "forks": 3, - "watchers": 13, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 960587335, - "name": "cve-2024-25600", - "full_name": "meli0dasH4ck3r\/cve-2024-25600", - "owner": { - "login": "meli0dasH4ck3r", - "id": 146601047, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/146601047?v=4", - "html_url": "https:\/\/github.com\/meli0dasH4ck3r", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/meli0dasH4ck3r\/cve-2024-25600", - "description": "PoC for CVE-2024-25600", - "fork": false, - "created_at": "2025-04-04T17:35:28Z", - "updated_at": "2025-04-04T17:41:13Z", - "pushed_at": "2025-04-04T17:41:10Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 963597521, - "name": "ODH-BricksBuilder-CVE-2024-25600-THM", - "full_name": "ivanbg2004\/ODH-BricksBuilder-CVE-2024-25600-THM", - "owner": { - "login": "ivanbg2004", - "id": 124943966, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/124943966?v=4", - "html_url": "https:\/\/github.com\/ivanbg2004", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ivanbg2004\/ODH-BricksBuilder-CVE-2024-25600-THM", - "description": "OD&H's scanner for CVE-2024-25600 vulnerability in the Bricks Builder WordPress plugin. For use in Try Hack Me (THM) environments.", - "fork": false, - "created_at": "2025-04-09T23:30:19Z", - "updated_at": "2025-04-18T12:36:50Z", - "pushed_at": "2025-04-09T23:42:43Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "bricks-builder", - "cve-2024-25600", - "cybersecurity", - "exploit", - "oblivion-development-hosting", - "odh", - "pentesting", - "plugin-vulnerability", - "security-tools", - "thm", - "tryhackme", - "vulnerability-scanners", - "web-security", - "wordpress" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 980609607, - "name": "Poleposph", - "full_name": "DedsecTeam-BlackHat\/Poleposph", - "owner": { - "login": "DedsecTeam-BlackHat", - "id": 210397097, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/210397097?v=4", - "html_url": "https:\/\/github.com\/DedsecTeam-BlackHat", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/DedsecTeam-BlackHat\/Poleposph", - "description": "Tools for scan CVE-2024-25600 - WordPress Bricks Builder Remote Code Execution (RCE) ", - "fork": false, - "created_at": "2025-05-09T12:13:24Z", - "updated_at": "2025-05-09T12:29:01Z", - "pushed_at": "2025-05-09T12:28:57Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1017379254, - "name": "CVE-2024-25600", - "full_name": "r0otk3r\/CVE-2024-25600", - "owner": { - "login": "r0otk3r", - "id": 211012408, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/211012408?v=4", - "html_url": "https:\/\/github.com\/r0otk3r", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/r0otk3r\/CVE-2024-25600", - "description": null, - "fork": false, - "created_at": "2025-07-10T12:51:04Z", - "updated_at": "2025-07-12T10:52:42Z", - "pushed_at": "2025-07-12T10:52:39Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1035043319, "name": "TryHack3M-Bricks-Heist", diff --git a/2024/CVE-2024-25641.json b/2024/CVE-2024-25641.json index 085d5e94d5..56e8fd2e71 100644 --- a/2024/CVE-2024-25641.json +++ b/2024/CVE-2024-25641.json @@ -148,39 +148,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 950102910, - "name": "CVE-2024-25641-Exploit-for-Cacti-1.2.26", - "full_name": "regantemudo\/CVE-2024-25641-Exploit-for-Cacti-1.2.26", - "owner": { - "login": "regantemudo", - "id": 72595630, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/72595630?v=4", - "html_url": "https:\/\/github.com\/regantemudo", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/regantemudo\/CVE-2024-25641-Exploit-for-Cacti-1.2.26", - "description": null, - "fork": false, - "created_at": "2025-03-17T16:26:59Z", - "updated_at": "2026-07-08T12:35:46Z", - "pushed_at": "2025-03-17T16:51:10Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1138088720, "name": "CVE-2024-25641---Cacti", diff --git a/2024/CVE-2024-27198.json b/2024/CVE-2024-27198.json index 7c5b36c304..2d8f999d27 100644 --- a/2024/CVE-2024-27198.json +++ b/2024/CVE-2024-27198.json @@ -465,39 +465,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 920321578, - "name": "Project-Exploiting-CVE-2024-27198-RCE-Vulnerability", - "full_name": "ArtemCyberLab\/Project-Exploiting-CVE-2024-27198-RCE-Vulnerability", - "owner": { - "login": "ArtemCyberLab", - "id": 193649833, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/193649833?v=4", - "html_url": "https:\/\/github.com\/ArtemCyberLab", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ArtemCyberLab\/Project-Exploiting-CVE-2024-27198-RCE-Vulnerability", - "description": "In this project, I exploited the CVE-2024-27198-RCE vulnerability to perform a remote code execution (RCE) attack on a vulnerable TeamCity server.", - "fork": false, - "created_at": "2025-01-22T00:09:41Z", - "updated_at": "2025-01-22T00:16:40Z", - "pushed_at": "2025-01-22T00:16:37Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1118339024, "name": "CVE-2024-27198-POC", diff --git a/2024/CVE-2024-27348.json b/2024/CVE-2024-27348.json index 40c1b3626a..557bb1bf07 100644 --- a/2024/CVE-2024-27348.json +++ b/2024/CVE-2024-27348.json @@ -126,39 +126,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 930084475, - "name": "CVE-2024-27348", - "full_name": "p0et08\/CVE-2024-27348", - "owner": { - "login": "p0et08", - "id": 173439951, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/173439951?v=4", - "html_url": "https:\/\/github.com\/p0et08", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/p0et08\/CVE-2024-27348", - "description": "This is a repository for Apache HugeGraph Remote Code Execution vulnerability(CVE-2024-27348))", - "fork": false, - "created_at": "2025-02-10T03:24:18Z", - "updated_at": "2025-02-10T03:44:31Z", - "pushed_at": "2025-02-10T03:44:28Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1115590071, "name": "CVE-2024-27348", diff --git a/2024/CVE-2024-27686.json b/2024/CVE-2024-27686.json deleted file mode 100644 index 34142ecc6d..0000000000 --- a/2024/CVE-2024-27686.json +++ /dev/null @@ -1,40 +0,0 @@ -[ - { - "id": 1026597067, - "name": "CVE-2024-27686", - "full_name": "ThemeHackers\/CVE-2024-27686", - "owner": { - "login": "ThemeHackers", - "id": 107047730, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/107047730?v=4", - "html_url": "https:\/\/github.com\/ThemeHackers", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ThemeHackers\/CVE-2024-27686", - "description": "This document describes a Denial of Service (DoS) vulnerability found in certain versions of MikroTik RouterOS. The vulnerability is due to insufficient handling of crafted SMB requests. A remote attacker could exploit this issue by sending a specially crafted request to the target server.", - "fork": false, - "created_at": "2025-07-26T07:53:32Z", - "updated_at": "2025-09-18T11:13:17Z", - "pushed_at": "2025-07-29T10:18:31Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "ddos", - "dos", - "routeros", - "smb" - ], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-2771.json b/2024/CVE-2024-2771.json deleted file mode 100644 index 63b1024e3f..0000000000 --- a/2024/CVE-2024-2771.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1031155700, - "name": "CVE-2024-2771-PoC", - "full_name": "whale93\/CVE-2024-2771-PoC", - "owner": { - "login": "whale93", - "id": 41511894, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41511894?v=4", - "html_url": "https:\/\/github.com\/whale93", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/whale93\/CVE-2024-2771-PoC", - "description": "CVE-2024-2771 Proof-of-Concept ", - "fork": false, - "created_at": "2025-08-03T06:06:24Z", - "updated_at": "2025-08-03T06:11:04Z", - "pushed_at": "2025-08-03T06:11:01Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-27804.json b/2024/CVE-2024-27804.json index 71f391c62c..76ff01790f 100644 --- a/2024/CVE-2024-27804.json +++ b/2024/CVE-2024-27804.json @@ -31,38 +31,5 @@ "watchers": 138, "score": 0, "subscribers_count": 5 - }, - { - "id": 1030370537, - "name": "QuarkPoC", - "full_name": "a0zhar\/QuarkPoC", - "owner": { - "login": "a0zhar", - "id": 96749372, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/96749372?v=4", - "html_url": "https:\/\/github.com\/a0zhar", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/a0zhar\/QuarkPoC", - "description": "iOS Application w\/Implementation of CVE-2024-27804", - "fork": false, - "created_at": "2025-08-01T14:20:18Z", - "updated_at": "2025-10-07T10:12:46Z", - "pushed_at": "2025-08-01T14:50:50Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2024/CVE-2024-2782.json b/2024/CVE-2024-2782.json deleted file mode 100644 index 20fb0c1463..0000000000 --- a/2024/CVE-2024-2782.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1031157666, - "name": "CVE-2024-2782-PoC", - "full_name": "whale93\/CVE-2024-2782-PoC", - "owner": { - "login": "whale93", - "id": 41511894, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41511894?v=4", - "html_url": "https:\/\/github.com\/whale93", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/whale93\/CVE-2024-2782-PoC", - "description": "CVE-2024-2782 Proof-of-Concept ", - "fork": false, - "created_at": "2025-08-03T06:12:26Z", - "updated_at": "2025-08-03T06:19:53Z", - "pushed_at": "2025-08-03T06:19:50Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-27876.json b/2024/CVE-2024-27876.json deleted file mode 100644 index 8713550e2f..0000000000 --- a/2024/CVE-2024-27876.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 971663259, - "name": "CVE-2024-27876", - "full_name": "0xilis\/CVE-2024-27876", - "owner": { - "login": "0xilis", - "id": 109871561, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/109871561?v=4", - "html_url": "https:\/\/github.com\/0xilis", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0xilis\/CVE-2024-27876", - "description": "libAppleArchive exploit maker, read the writeup here https:\/\/snoolie.gay\/blog\/CVE-2024-27876", - "fork": false, - "created_at": "2025-04-23T21:42:32Z", - "updated_at": "2026-07-26T06:53:44Z", - "pushed_at": "2025-04-23T21:50:36Z", - "stargazers_count": 47, - "watchers_count": 47, - "has_discussions": false, - "forks_count": 7, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 7, - "watchers": 47, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-27954.json b/2024/CVE-2024-27954.json index 1a49dca79e..6354b80896 100644 --- a/2024/CVE-2024-27954.json +++ b/2024/CVE-2024-27954.json @@ -64,38 +64,5 @@ "watchers": 1, "score": 0, "subscribers_count": 1 - }, - { - "id": 1017521139, - "name": "CVE-2024-27954", - "full_name": "r0otk3r\/CVE-2024-27954", - "owner": { - "login": "r0otk3r", - "id": 211012408, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/211012408?v=4", - "html_url": "https:\/\/github.com\/r0otk3r", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/r0otk3r\/CVE-2024-27954", - "description": null, - "fork": false, - "created_at": "2025-07-10T16:57:11Z", - "updated_at": "2025-07-12T10:51:40Z", - "pushed_at": "2025-07-12T10:51:36Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2024/CVE-2024-27956.json b/2024/CVE-2024-27956.json index c7ff45f0e2..9e46cf459b 100644 --- a/2024/CVE-2024-27956.json +++ b/2024/CVE-2024-27956.json @@ -438,72 +438,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 973822495, - "name": "wordpress-CVE-2024-27956", - "full_name": "m4nInTh3mIdDle\/wordpress-CVE-2024-27956", - "owner": { - "login": "m4nInTh3mIdDle", - "id": 145070909, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/145070909?v=4", - "html_url": "https:\/\/github.com\/m4nInTh3mIdDle", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/m4nInTh3mIdDle\/wordpress-CVE-2024-27956", - "description": " Attacks a vulnerable WordPress site with the wp-automatic plugin. Inserts a new user called eviladmin directly into the database (INSERT INTO wp_users). Searches for the ID of the newly created user (cyclic SELECT). Promotes eviladmin to Administrator (INSERT INTO wp_usermeta).", - "fork": false, - "created_at": "2025-04-27T20:05:09Z", - "updated_at": "2025-04-27T20:06:04Z", - "pushed_at": "2025-04-27T20:06:00Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 976320874, - "name": "CVE-2024-27956", - "full_name": "devsec23\/CVE-2024-27956", - "owner": { - "login": "devsec23", - "id": 69045033, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/69045033?v=4", - "html_url": "https:\/\/github.com\/devsec23", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/devsec23\/CVE-2024-27956", - "description": "CVE-2024-27956 - WP Automatic SQL Injection Exploit Tool", - "fork": false, - "created_at": "2025-05-01T22:39:10Z", - "updated_at": "2025-05-02T05:54:23Z", - "pushed_at": "2025-05-01T22:53:40Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, { "id": 1078368314, "name": "CVE-2024-27956", diff --git a/2024/CVE-2024-28397.json b/2024/CVE-2024-28397.json index 871a83a8ac..4a3205ea32 100644 --- a/2024/CVE-2024-28397.json +++ b/2024/CVE-2024-28397.json @@ -65,39 +65,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 1039364261, - "name": "CVE-2024-28397-command-execution-poc", - "full_name": "GhostOverflow\/CVE-2024-28397-command-execution-poc", - "owner": { - "login": "GhostOverflow", - "id": 101213166, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/101213166?v=4", - "html_url": "https:\/\/github.com\/GhostOverflow", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/GhostOverflow\/CVE-2024-28397-command-execution-poc", - "description": "This vulnerability arises from incomplete sandboxing in js2py, where crafted JavaScript can traverse Python’s internal object model and access dangerous classes like subprocess.Popen, leading to arbitrary command execution.", - "fork": false, - "created_at": "2025-08-17T04:00:59Z", - "updated_at": "2025-11-19T14:56:15Z", - "pushed_at": "2025-08-17T04:10:54Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 5, - "score": 0, - "subscribers_count": 0 - }, { "id": 1039784105, "name": "exploit-js2py", @@ -131,72 +98,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1040192717, - "name": "CVE-2024-28397-RCE", - "full_name": "harutomo-jp\/CVE-2024-28397-RCE", - "owner": { - "login": "harutomo-jp", - "id": 139304582, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/139304582?v=4", - "html_url": "https:\/\/github.com\/harutomo-jp", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/harutomo-jp\/CVE-2024-28397-RCE", - "description": null, - "fork": false, - "created_at": "2025-08-18T15:40:19Z", - "updated_at": "2025-08-20T13:27:01Z", - "pushed_at": "2025-08-18T15:49:43Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1046106441, - "name": "CVE-2024-28397-js2py-Sandbox-Escape", - "full_name": "Naved124\/CVE-2024-28397-js2py-Sandbox-Escape", - "owner": { - "login": "Naved124", - "id": 86107643, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/86107643?v=4", - "html_url": "https:\/\/github.com\/Naved124", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Naved124\/CVE-2024-28397-js2py-Sandbox-Escape", - "description": null, - "fork": false, - "created_at": "2025-08-28T07:39:30Z", - "updated_at": "2025-08-28T15:19:52Z", - "pushed_at": "2025-08-28T15:19:49Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1051622838, "name": "Remote-Code-Execution-CVE-2024-28397-pyload-ng-js2py-", diff --git a/2024/CVE-2024-28752.json b/2024/CVE-2024-28752.json deleted file mode 100644 index 8370ce454c..0000000000 --- a/2024/CVE-2024-28752.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 981056220, - "name": "CVE-2024-28752", - "full_name": "ReaJason\/CVE-2024-28752", - "owner": { - "login": "ReaJason", - "id": 48389642, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48389642?v=4", - "html_url": "https:\/\/github.com\/ReaJason", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ReaJason\/CVE-2024-28752", - "description": "Apache CXF SSRF CVE-2024-28752", - "fork": false, - "created_at": "2025-05-10T08:36:41Z", - "updated_at": "2025-12-08T09:06:23Z", - "pushed_at": "2025-05-10T12:09:12Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-28784.json b/2024/CVE-2024-28784.json deleted file mode 100644 index 62e08c69fb..0000000000 --- a/2024/CVE-2024-28784.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 995063030, - "name": "CVE-2024-28784", - "full_name": "CainSoulless\/CVE-2024-28784", - "owner": { - "login": "CainSoulless", - "id": 38092779, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38092779?v=4", - "html_url": "https:\/\/github.com\/CainSoulless", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/CainSoulless\/CVE-2024-28784", - "description": "Technical disclosure for CVE-2024-28784 — a stored XSS vulnerability in IBM QRadar SIEM 7.5.0 UpdatePackage 7. The issue affects the Rule Wizard component and allows persistent JavaScript injection via malformed regular expressions. Includes PoC, impact analysis, and mitigation advice.", - "fork": false, - "created_at": "2025-06-02T23:06:06Z", - "updated_at": "2025-06-02T23:23:08Z", - "pushed_at": "2025-06-02T23:23:05Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-2887.json b/2024/CVE-2024-2887.json index 9af33f3d26..63ed68d566 100644 --- a/2024/CVE-2024-2887.json +++ b/2024/CVE-2024-2887.json @@ -65,39 +65,6 @@ "score": 0, "subscribers_count": 2 }, - { - "id": 985141118, - "name": "reproduce-cve-2024-2887", - "full_name": "jjyuorg\/reproduce-cve-2024-2887", - "owner": { - "login": "jjyuorg", - "id": 202454117, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/202454117?v=4", - "html_url": "https:\/\/github.com\/jjyuorg", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/jjyuorg\/reproduce-cve-2024-2887", - "description": null, - "fork": false, - "created_at": "2025-05-17T06:30:32Z", - "updated_at": "2025-08-07T09:22:32Z", - "pushed_at": "2025-05-18T01:25:25Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, { "id": 1265731833, "name": "CVE-2024-2887-REPORT", diff --git a/2024/CVE-2024-28987.json b/2024/CVE-2024-28987.json index f81cafe627..f56287d158 100644 --- a/2024/CVE-2024-28987.json +++ b/2024/CVE-2024-28987.json @@ -65,39 +65,6 @@ "score": 0, "subscribers_count": 4 }, - { - "id": 970296101, - "name": "CVE-2024-28987", - "full_name": "alecclyde\/CVE-2024-28987", - "owner": { - "login": "alecclyde", - "id": 32017824, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32017824?v=4", - "html_url": "https:\/\/github.com\/alecclyde", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/alecclyde\/CVE-2024-28987", - "description": "Proof of Concept Exploit for CVE-2024-28987: SolarWinds Web Help Desk Hardcoded Credential Vulnerability", - "fork": false, - "created_at": "2025-04-21T19:44:37Z", - "updated_at": "2026-04-01T01:28:14Z", - "pushed_at": "2025-04-21T20:27:21Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, { "id": 1315017680, "name": "CVE-2024-28987", diff --git a/2024/CVE-2024-2961.json b/2024/CVE-2024-2961.json index eef9312fa0..3655f3f1b0 100644 --- a/2024/CVE-2024-2961.json +++ b/2024/CVE-2024-2961.json @@ -240,138 +240,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 922771086, - "name": "CVE-2024-2961-Remote-File-Read", - "full_name": "kyotozx\/CVE-2024-2961-Remote-File-Read", - "owner": { - "login": "kyotozx", - "id": 134347770, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/134347770?v=4", - "html_url": "https:\/\/github.com\/kyotozx", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/kyotozx\/CVE-2024-2961-Remote-File-Read", - "description": "This script demonstrates a proof-of-concept (PoC) for exploiting a file read vulnerability in the iconv library, as detailed in Ambionics Security's blog https:\/\/www.ambionics.io\/blog\/iconv-cve-2024-2961-p1.", - "fork": false, - "created_at": "2025-01-27T03:06:37Z", - "updated_at": "2025-06-05T17:08:17Z", - "pushed_at": "2025-05-07T17:59:49Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 5, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 924126046, - "name": "CVE-2024-2961", - "full_name": "4wayhandshake\/CVE-2024-2961", - "owner": { - "login": "4wayhandshake", - "id": 122475838, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/122475838?v=4", - "html_url": "https:\/\/github.com\/4wayhandshake", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/4wayhandshake\/CVE-2024-2961", - "description": "Uses CVE-2024-2961 to perform an arbitrary file read", - "fork": false, - "created_at": "2025-01-29T13:15:11Z", - "updated_at": "2025-02-01T10:48:49Z", - "pushed_at": "2025-02-01T10:48:45Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 925889678, - "name": "exploit_cve-2023-26326_using_cve-2024-2961", - "full_name": "omarelshopky\/exploit_cve-2023-26326_using_cve-2024-2961", - "owner": { - "login": "omarelshopky", - "id": 69885253, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/69885253?v=4", - "html_url": "https:\/\/github.com\/omarelshopky", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/omarelshopky\/exploit_cve-2023-26326_using_cve-2024-2961", - "description": "Exploit for CVE-2023-26326 in the WordPress BuddyForms plugin, leveraging CVE-2024-2961 for remote code execution. This exploit bypasses PHP 8+ deserialization limitations by chaining vulnerabilities with php:\/\/filter.", - "fork": false, - "created_at": "2025-02-02T01:35:43Z", - "updated_at": "2025-04-05T18:21:01Z", - "pushed_at": "2025-02-02T11:26:18Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 927144920, - "name": "CVE-2024-2961", - "full_name": "suce0155\/CVE-2024-2961", - "owner": { - "login": "suce0155", - "id": 149517309, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/149517309?v=4", - "html_url": "https:\/\/github.com\/suce0155", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/suce0155\/CVE-2024-2961", - "description": "CVE-2024-2961 Cnext RCE Exploit with Buddyforms 2.7.7", - "fork": false, - "created_at": "2025-02-04T13:34:33Z", - "updated_at": "2026-05-05T15:48:37Z", - "pushed_at": "2025-02-04T18:51:48Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - }, { "id": 1171577658, "name": "osTicketFileReadIntoRCE", diff --git a/2024/CVE-2024-2997.json b/2024/CVE-2024-2997.json index 13a3b97d6c..04ea02d8c8 100644 --- a/2024/CVE-2024-2997.json +++ b/2024/CVE-2024-2997.json @@ -64,38 +64,5 @@ "watchers": 0, "score": 0, "subscribers_count": 0 - }, - { - "id": 1216929914, - "name": "CVE-2024-2997", - "full_name": "o9-9\/CVE-2024-2997", - "owner": { - "login": "o9-9", - "id": 156221015, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/156221015?v=4", - "html_url": "https:\/\/github.com\/o9-9", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/o9-9\/CVE-2024-2997", - "description": "The tool helps in quickly identifying vulnerabilities by examining a comprehensive list of potential paths on a website, making it useful for security assessments.", - "fork": false, - "created_at": "2026-04-21T11:25:19Z", - "updated_at": "2026-04-21T11:25:53Z", - "pushed_at": "2025-03-24T04:02:21Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": false, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2024/CVE-2024-30485.json b/2024/CVE-2024-30485.json deleted file mode 100644 index e994c4c384..0000000000 --- a/2024/CVE-2024-30485.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 947429142, - "name": "CVE-2024-30485", - "full_name": "Nxploited\/CVE-2024-30485", - "owner": { - "login": "Nxploited", - "id": 188819918, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4", - "html_url": "https:\/\/github.com\/Nxploited", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-30485", - "description": "WordPress Finale Lite plugin <= 2.18.0 - Subscriber+ Arbitrary Plugin Installation\/Activation vulnerability", - "fork": false, - "created_at": "2025-03-12T17:11:54Z", - "updated_at": "2025-04-07T00:53:05Z", - "pushed_at": "2025-03-29T20:30:53Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-3094.json b/2024/CVE-2024-3094.json index 0ff98e5757..371e30a303 100644 --- a/2024/CVE-2024-3094.json +++ b/2024/CVE-2024-3094.json @@ -1955,211 +1955,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 967434378, - "name": "CVE-2024-3094", - "full_name": "been22426\/CVE-2024-3094", - "owner": { - "login": "been22426", - "id": 204362925, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/204362925?v=4", - "html_url": "https:\/\/github.com\/been22426", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/been22426\/CVE-2024-3094", - "description": "CVE-2024-3094 실습 환경 구축 및 보고", - "fork": false, - "created_at": "2025-04-16T12:58:27Z", - "updated_at": "2025-04-16T15:00:01Z", - "pushed_at": "2025-04-16T14:59:57Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 986972824, - "name": "Linux---Security---Detect-and-Mitigate-CVE-2024-3094", - "full_name": "laxmikumari615\/Linux---Security---Detect-and-Mitigate-CVE-2024-3094", - "owner": { - "login": "laxmikumari615", - "id": 183760555, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/183760555?v=4", - "html_url": "https:\/\/github.com\/laxmikumari615", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/laxmikumari615\/Linux---Security---Detect-and-Mitigate-CVE-2024-3094", - "description": "It was determined that malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. # It was determined that only certain operating systems and operating system versions were affected by this vulnerability.", - "fork": false, - "created_at": "2025-05-20T11:45:05Z", - "updated_at": "2025-05-20T12:48:57Z", - "pushed_at": "2025-05-20T12:48:54Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 995296012, - "name": "cve-2024-3094", - "full_name": "valeriot30\/cve-2024-3094", - "owner": { - "login": "valeriot30", - "id": 30567406, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/30567406?v=4", - "html_url": "https:\/\/github.com\/valeriot30", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/valeriot30\/cve-2024-3094", - "description": "A XZ backdoor vulnerability explained in details", - "fork": false, - "created_at": "2025-06-03T09:09:23Z", - "updated_at": "2026-02-05T11:40:11Z", - "pushed_at": "2025-06-06T18:00:42Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1004983535, - "name": "threat-intel-cve-2024-3094", - "full_name": "24Owais\/threat-intel-cve-2024-3094", - "owner": { - "login": "24Owais", - "id": 216532385, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/216532385?v=4", - "html_url": "https:\/\/github.com\/24Owais", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/24Owais\/threat-intel-cve-2024-3094", - "description": "Threat intelligence report analyzing the xz-utils backdoor vulnerability (CVE-2024-3094)", - "fork": false, - "created_at": "2025-06-19T13:31:56Z", - "updated_at": "2025-07-08T12:38:01Z", - "pushed_at": "2025-06-19T14:20:22Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "backdoor", - "cve", - "cybersecurity", - "linux", - "threat-intelligence", - "vulnerability" - ], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1006244578, - "name": "TryHack", - "full_name": "Dermot-lab\/TryHack", - "owner": { - "login": "Dermot-lab", - "id": 217383844, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/217383844?v=4", - "html_url": "https:\/\/github.com\/Dermot-lab", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Dermot-lab\/TryHack", - "description": "CVE-2024-3094", - "fork": false, - "created_at": "2025-06-21T20:19:43Z", - "updated_at": "2025-06-21T20:19:43Z", - "pushed_at": "2025-06-21T20:19:43Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1009766442, - "name": "CVE-2024-3094-analysis", - "full_name": "Ikram124\/CVE-2024-3094-analysis", - "owner": { - "login": "Ikram124", - "id": 102825494, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102825494?v=4", - "html_url": "https:\/\/github.com\/Ikram124", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Ikram124\/CVE-2024-3094-analysis", - "description": "Security analysis project: Real-world CVE breakdown", - "fork": false, - "created_at": "2025-06-27T17:14:33Z", - "updated_at": "2025-10-22T10:41:27Z", - "pushed_at": "2025-06-28T16:14:17Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, { "id": 1055282090, "name": "CVE-2024-3094", diff --git a/2024/CVE-2024-31114.json b/2024/CVE-2024-31114.json deleted file mode 100644 index 57ac4d8db4..0000000000 --- a/2024/CVE-2024-31114.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 954346984, - "name": "CVE-2024-31114", - "full_name": "Nxploited\/CVE-2024-31114", - "owner": { - "login": "Nxploited", - "id": 188819918, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4", - "html_url": "https:\/\/github.com\/Nxploited", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-31114", - "description": "Shortcode Addons <= 3.2.5 - Authenticated (Admin+) Arbitrary File Upload", - "fork": false, - "created_at": "2025-03-25T00:12:41Z", - "updated_at": "2025-03-29T20:26:36Z", - "pushed_at": "2025-03-29T20:26:33Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-3121.json b/2024/CVE-2024-3121.json deleted file mode 100644 index 48562f38aa..0000000000 --- a/2024/CVE-2024-3121.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1023998101, - "name": "CVE-2024-3121", - "full_name": "dark-ninja10\/CVE-2024-3121", - "owner": { - "login": "dark-ninja10", - "id": 58605984, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/58605984?v=4", - "html_url": "https:\/\/github.com\/dark-ninja10", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dark-ninja10\/CVE-2024-3121", - "description": "Remote Code Execution in create_conda_env function in parisneo\/lollms", - "fork": false, - "created_at": "2025-07-22T03:24:39Z", - "updated_at": "2025-07-22T03:45:22Z", - "pushed_at": "2025-07-22T03:45:18Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-31317.json b/2024/CVE-2024-31317.json index bbc5204b5a..477a506318 100644 --- a/2024/CVE-2024-31317.json +++ b/2024/CVE-2024-31317.json @@ -65,105 +65,6 @@ "score": 0, "subscribers_count": 3 }, - { - "id": 973280085, - "name": "cve-2024-31317", - "full_name": "agg23\/cve-2024-31317", - "owner": { - "login": "agg23", - "id": 238679, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/238679?v=4", - "html_url": "https:\/\/github.com\/agg23", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/agg23\/cve-2024-31317", - "description": "Detailed discussion of Zygote vulnerability CVE-2024-31317", - "fork": false, - "created_at": "2025-04-26T16:46:35Z", - "updated_at": "2026-08-09T23:47:22Z", - "pushed_at": "2025-08-05T03:52:00Z", - "stargazers_count": 27, - "watchers_count": 27, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 4, - "watchers": 27, - "score": 0, - "subscribers_count": 3 - }, - { - "id": 976045544, - "name": "CVE-2024-31317-PoC-Deployer", - "full_name": "WebLDix\/CVE-2024-31317-PoC-Deployer", - "owner": { - "login": "WebLDix", - "id": 208256323, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/208256323?v=4", - "html_url": "https:\/\/github.com\/WebLDix", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/WebLDix\/CVE-2024-31317-PoC-Deployer", - "description": null, - "fork": false, - "created_at": "2025-05-01T11:41:51Z", - "updated_at": "2026-08-09T14:36:07Z", - "pushed_at": "2025-07-01T05:41:24Z", - "stargazers_count": 52, - "watchers_count": 52, - "has_discussions": false, - "forks_count": 8, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 8, - "watchers": 52, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1032269947, - "name": "Zygotroller", - "full_name": "rifting\/Zygotroller", - "owner": { - "login": "rifting", - "id": 117926989, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/117926989?v=4", - "html_url": "https:\/\/github.com\/rifting", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/rifting\/Zygotroller", - "description": "Remove Android profile owners\/family link with CVE-2024-31317", - "fork": false, - "created_at": "2025-08-05T04:29:11Z", - "updated_at": "2026-04-17T06:57:51Z", - "pushed_at": "2025-08-10T20:19:15Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 4, - "score": 0, - "subscribers_count": 0 - }, { "id": 1079856915, "name": "PoC-Deployer-System", diff --git a/2024/CVE-2024-31320.json b/2024/CVE-2024-31320.json deleted file mode 100644 index 6987b91d1f..0000000000 --- a/2024/CVE-2024-31320.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 943480456, - "name": "CVE-2024-31320-", - "full_name": "SpiralBL0CK\/CVE-2024-31320-", - "owner": { - "login": "SpiralBL0CK", - "id": 25670930, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25670930?v=4", - "html_url": "https:\/\/github.com\/SpiralBL0CK", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SpiralBL0CK\/CVE-2024-31320-", - "description": "Get GeoLocation of Exploited Device using CVE-2024-31320& bluetooth", - "fork": false, - "created_at": "2025-03-05T19:18:34Z", - "updated_at": "2025-03-05T19:23:13Z", - "pushed_at": "2025-03-05T19:23:09Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-31449.json b/2024/CVE-2024-31449.json index e303fa3e97..10c5ff26ff 100644 --- a/2024/CVE-2024-31449.json +++ b/2024/CVE-2024-31449.json @@ -1,37 +1,4 @@ [ - { - "id": 973668309, - "name": "CVE-2024-31449", - "full_name": "daeseong1209\/CVE-2024-31449", - "owner": { - "login": "daeseong1209", - "id": 110471696, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/110471696?v=4", - "html_url": "https:\/\/github.com\/daeseong1209", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/daeseong1209\/CVE-2024-31449", - "description": null, - "fork": false, - "created_at": "2025-04-27T13:42:11Z", - "updated_at": "2025-04-27T13:44:00Z", - "pushed_at": "2025-04-27T13:43:57Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1287737213, "name": "opensource_defect_repair_cc", diff --git a/2024/CVE-2024-31903.json b/2024/CVE-2024-31903.json deleted file mode 100644 index a2266fc676..0000000000 --- a/2024/CVE-2024-31903.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 935014102, - "name": "ibm-sterling-b2b-integrator-poc", - "full_name": "ReversecLabs\/ibm-sterling-b2b-integrator-poc", - "owner": { - "login": "ReversecLabs", - "id": 207843805, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/207843805?v=4", - "html_url": "https:\/\/github.com\/ReversecLabs", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ReversecLabs\/ibm-sterling-b2b-integrator-poc", - "description": "PoC code for the LPE and RCE (CVE-2024-31903) attacks against the IBM Sterling B2B Integrator", - "fork": false, - "created_at": "2025-02-18T19:08:04Z", - "updated_at": "2025-06-11T14:52:28Z", - "pushed_at": "2025-02-18T19:40:14Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 3 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-31964.json b/2024/CVE-2024-31964.json deleted file mode 100644 index 86eee30f2c..0000000000 --- a/2024/CVE-2024-31964.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1014863592, - "name": "CVE-2024-31964", - "full_name": "d-Raco\/CVE-2024-31964", - "owner": { - "login": "d-Raco", - "id": 36478308, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/36478308?v=4", - "html_url": "https:\/\/github.com\/d-Raco", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/d-Raco\/CVE-2024-31964", - "description": "CVE-2024-31964 PoC: Mitel 6900w Series SIP Phone - Temporary Authentication Bypass", - "fork": false, - "created_at": "2025-07-06T15:00:05Z", - "updated_at": "2026-04-14T21:10:23Z", - "pushed_at": "2025-07-07T19:52:54Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-31969.json b/2024/CVE-2024-31969.json deleted file mode 100644 index 3945776b58..0000000000 --- a/2024/CVE-2024-31969.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1017187914, - "name": "CVE-2024-31969", - "full_name": "kingfakee7\/CVE-2024-31969", - "owner": { - "login": "kingfakee7", - "id": 212427334, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/212427334?v=4", - "html_url": "https:\/\/github.com\/kingfakee7", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/kingfakee7\/CVE-2024-31969", - "description": "CVE-2024-31969 adalah privilege escalation local pada sudo ketika menggunakan sudoedit.", - "fork": false, - "created_at": "2025-07-10T06:50:41Z", - "updated_at": "2025-07-10T07:07:06Z", - "pushed_at": "2025-07-10T07:07:03Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-32002.json b/2024/CVE-2024-32002.json index d9495216f9..fa91cab361 100644 --- a/2024/CVE-2024-32002.json +++ b/2024/CVE-2024-32002.json @@ -2012,105 +2012,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 943803081, - "name": "CVE-2024-32002", - "full_name": "ashutosh0408\/CVE-2024-32002", - "owner": { - "login": "ashutosh0408", - "id": 82748782, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/82748782?v=4", - "html_url": "https:\/\/github.com\/ashutosh0408", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ashutosh0408\/CVE-2024-32002", - "description": "This repository contains a PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during a git clone operation. By crafting repositories with submodules in a specific way, an attacker can exploit symlink handling on case-insensitive filesystems to write files into the .git\/ directory, leading to the execution of malicious hooks.", - "fork": false, - "created_at": "2025-03-06T09:40:43Z", - "updated_at": "2025-03-06T10:37:52Z", - "pushed_at": "2025-03-06T10:19:16Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 943824781, - "name": "Cve-2024-32002-poc", - "full_name": "ashutosh0408\/Cve-2024-32002-poc", - "owner": { - "login": "ashutosh0408", - "id": 82748782, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/82748782?v=4", - "html_url": "https:\/\/github.com\/ashutosh0408", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ashutosh0408\/Cve-2024-32002-poc", - "description": "This repository contains a PoC for exploiting CVE-2024-32002, a vulnerability in Git that allows RCE during a git clone operation. By crafting repositories with submodules in a specific way, an attacker can exploit symlink handling on case-insensitive filesystems to write files into the .git\/ directory, leading to the execution of malicious hooks.", - "fork": false, - "created_at": "2025-03-06T10:24:55Z", - "updated_at": "2025-03-06T11:01:05Z", - "pushed_at": "2025-03-06T11:01:01Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1023962776, - "name": "fuzzy", - "full_name": "Dre4m017\/fuzzy", - "owner": { - "login": "Dre4m017", - "id": 178399341, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/178399341?v=4", - "html_url": "https:\/\/github.com\/Dre4m017", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Dre4m017\/fuzzy", - "description": "cve-2024-32002", - "fork": false, - "created_at": "2025-07-22T01:35:49Z", - "updated_at": "2025-07-22T07:16:23Z", - "pushed_at": "2025-07-22T07:16:20Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1063458944, "name": "cve-2024-32002-poc", diff --git a/2024/CVE-2024-32019.json b/2024/CVE-2024-32019.json index f4a0fb0f86..cd0344ed3b 100644 --- a/2024/CVE-2024-32019.json +++ b/2024/CVE-2024-32019.json @@ -1,211 +1,4 @@ [ - { - "id": 1031131967, - "name": "CVE-2024-32019-POC", - "full_name": "AzureADTrent\/CVE-2024-32019-POC", - "owner": { - "login": "AzureADTrent", - "id": 8278208, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/8278208?v=4", - "html_url": "https:\/\/github.com\/AzureADTrent", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/AzureADTrent\/CVE-2024-32019-POC", - "description": "POC for netdata ndsudo vulnerability - CVE-2024-32019", - "fork": false, - "created_at": "2025-08-03T04:41:54Z", - "updated_at": "2025-12-28T11:27:16Z", - "pushed_at": "2025-08-03T17:32:11Z", - "stargazers_count": 21, - "watchers_count": 21, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 21, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1031256673, - "name": "CVE-2024-32019-POC", - "full_name": "AliElKhatteb\/CVE-2024-32019-POC", - "owner": { - "login": "AliElKhatteb", - "id": 47481033, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47481033?v=4", - "html_url": "https:\/\/github.com\/AliElKhatteb", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/AliElKhatteb\/CVE-2024-32019-POC", - "description": "this is a poc for the CVE-2025-24893", - "fork": false, - "created_at": "2025-08-03T11:05:12Z", - "updated_at": "2025-12-28T11:25:58Z", - "pushed_at": "2025-08-03T11:45:39Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 5, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1032368039, - "name": "CVE-2024-32019-Netdata-ndsudo-PATH-Vulnerability-Privilege-Escalation", - "full_name": "dollarboysushil\/CVE-2024-32019-Netdata-ndsudo-PATH-Vulnerability-Privilege-Escalation", - "owner": { - "login": "dollarboysushil", - "id": 48991715, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48991715?v=4", - "html_url": "https:\/\/github.com\/dollarboysushil", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dollarboysushil\/CVE-2024-32019-Netdata-ndsudo-PATH-Vulnerability-Privilege-Escalation", - "description": "CVE-2024-32019 is a high-severity local privilege escalation vulnerability in Netdata (versions >= 1.44.0-60 < 1.45.3), caused by insecure use of the PATH variable in the ndsudo SUID binary, allowing attackers to execute arbitrary commands as root.", - "fork": false, - "created_at": "2025-08-05T07:54:01Z", - "updated_at": "2026-04-05T14:27:28Z", - "pushed_at": "2025-08-06T15:26:23Z", - "stargazers_count": 14, - "watchers_count": 14, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2024-32019", - "ndsudo", - "netdata", - "privilege-escalation" - ], - "visibility": "public", - "forks": 1, - "watchers": 14, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1032673717, - "name": "CVE-2024-32019-POC", - "full_name": "juanbelin\/CVE-2024-32019-POC", - "owner": { - "login": "juanbelin", - "id": 149154922, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/149154922?v=4", - "html_url": "https:\/\/github.com\/juanbelin", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/juanbelin\/CVE-2024-32019-POC", - "description": "Netdata ndsudo local privilage escalation workflow and POC (CVE-2024-32019)", - "fork": false, - "created_at": "2025-08-05T16:43:50Z", - "updated_at": "2025-09-09T16:04:10Z", - "pushed_at": "2025-08-05T20:37:21Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1033493696, - "name": "CVE-2024-32019-poc", - "full_name": "C0deInBlack\/CVE-2024-32019-poc", - "owner": { - "login": "C0deInBlack", - "id": 141534149, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/141534149?v=4", - "html_url": "https:\/\/github.com\/C0deInBlack", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/C0deInBlack\/CVE-2024-32019-poc", - "description": "Netdata ndsudo PoC", - "fork": false, - "created_at": "2025-08-06T22:49:45Z", - "updated_at": "2025-09-14T04:12:33Z", - "pushed_at": "2025-08-06T23:10:13Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2024-32019", - "poc", - "privilege-escalation" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1039048380, - "name": "cve-2024-32019-PoC", - "full_name": "sPhyos\/cve-2024-32019-PoC", - "owner": { - "login": "sPhyos", - "id": 112934642, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/112934642?v=4", - "html_url": "https:\/\/github.com\/sPhyos", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sPhyos\/cve-2024-32019-PoC", - "description": null, - "fork": false, - "created_at": "2025-08-16T11:18:13Z", - "updated_at": "2025-08-16T11:45:04Z", - "pushed_at": "2025-08-16T11:45:01Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1043988012, "name": "POC-for-CVE-2024-32019", diff --git a/2024/CVE-2024-32113.json b/2024/CVE-2024-32113.json index 639f8a9e99..fc2e8dd91f 100644 --- a/2024/CVE-2024-32113.json +++ b/2024/CVE-2024-32113.json @@ -108,39 +108,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 1017722876, - "name": "Ofbiz-RCE", - "full_name": "guinea-offensive-security\/Ofbiz-RCE", - "owner": { - "login": "guinea-offensive-security", - "id": 209405419, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/209405419?v=4", - "html_url": "https:\/\/github.com\/guinea-offensive-security", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/guinea-offensive-security\/Ofbiz-RCE", - "description": "CVE-2024-32113 & CVE-2024-38856", - "fork": false, - "created_at": "2025-07-11T02:13:38Z", - "updated_at": "2025-07-11T02:16:00Z", - "pushed_at": "2025-07-11T02:15:56Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1073069576, "name": "CVE-2024-32113-Exploit", diff --git a/2024/CVE-2024-32462.json b/2024/CVE-2024-32462.json deleted file mode 100644 index ea8e09d603..0000000000 --- a/2024/CVE-2024-32462.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 991746561, - "name": "CVE-2024-32462", - "full_name": "SpiralBL0CK\/CVE-2024-32462", - "owner": { - "login": "SpiralBL0CK", - "id": 25670930, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25670930?v=4", - "html_url": "https:\/\/github.com\/SpiralBL0CK", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SpiralBL0CK\/CVE-2024-32462", - "description": "CVE-2024-32462 code exec sbx escape", - "fork": false, - "created_at": "2025-05-28T05:07:05Z", - "updated_at": "2025-06-30T01:47:09Z", - "pushed_at": "2025-05-28T05:22:29Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-32830.json b/2024/CVE-2024-32830.json deleted file mode 100644 index 9b9f190a9b..0000000000 --- a/2024/CVE-2024-32830.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 972775883, - "name": "CVE-2024-32830-poc", - "full_name": "ptrstr\/CVE-2024-32830-poc", - "owner": { - "login": "ptrstr", - "id": 57736901, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/57736901?v=4", - "html_url": "https:\/\/github.com\/ptrstr", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ptrstr\/CVE-2024-32830-poc", - "description": "PoC code to download files with CVE-2024-32830", - "fork": false, - "created_at": "2025-04-25T16:35:18Z", - "updated_at": "2025-04-25T16:53:25Z", - "pushed_at": "2025-04-25T16:53:21Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-32962.json b/2024/CVE-2024-32962.json deleted file mode 100644 index 4e91773b90..0000000000 --- a/2024/CVE-2024-32962.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 951721171, - "name": "Poc-CVE-2024-32962-xml-crypto", - "full_name": "absholi7ly\/Poc-CVE-2024-32962-xml-crypto", - "owner": { - "login": "absholi7ly", - "id": 72062217, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/72062217?v=4", - "html_url": "https:\/\/github.com\/absholi7ly", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/absholi7ly\/Poc-CVE-2024-32962-xml-crypto", - "description": null, - "fork": false, - "created_at": "2025-03-20T06:17:09Z", - "updated_at": "2025-03-20T06:28:15Z", - "pushed_at": "2025-03-20T06:28:12Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-33676.json b/2024/CVE-2024-33676.json deleted file mode 100644 index 19081b7fbf..0000000000 --- a/2024/CVE-2024-33676.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1026879962, - "name": "CVE-2024-33676", - "full_name": "dersecure\/CVE-2024-33676", - "owner": { - "login": "dersecure", - "id": 133936386, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/133936386?v=4", - "html_url": "https:\/\/github.com\/dersecure", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dersecure\/CVE-2024-33676", - "description": null, - "fork": false, - "created_at": "2025-07-26T20:13:29Z", - "updated_at": "2025-07-28T17:59:28Z", - "pushed_at": "2025-07-28T17:59:24Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-3400.json b/2024/CVE-2024-3400.json index 61c080d39d..de36288110 100644 --- a/2024/CVE-2024-3400.json +++ b/2024/CVE-2024-3400.json @@ -1178,105 +1178,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 925999224, - "name": "SOC274-Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400", - "full_name": "hashdr1ft\/SOC274-Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400", - "owner": { - "login": "hashdr1ft", - "id": 75790945, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/75790945?v=4", - "html_url": "https:\/\/github.com\/hashdr1ft", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/hashdr1ft\/SOC274-Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400", - "description": null, - "fork": false, - "created_at": "2025-02-02T09:42:41Z", - "updated_at": "2025-07-19T07:39:49Z", - "pushed_at": "2025-02-02T10:00:32Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 974803926, - "name": "letsdefend-cve2024-3400-case-study", - "full_name": "CyprianAtsyor\/letsdefend-cve2024-3400-case-study", - "owner": { - "login": "CyprianAtsyor", - "id": 172041723, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/172041723?v=4", - "html_url": "https:\/\/github.com\/CyprianAtsyor", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/CyprianAtsyor\/letsdefend-cve2024-3400-case-study", - "description": "Detection, analysis, and response strategies for CVE-2024-3400 exploitation attempts targeting Palo Alto PAN-OS GlobalProtect portals. Includes IOCs, exploit patterns, and mitigation guidance.", - "fork": false, - "created_at": "2025-04-29T10:31:13Z", - "updated_at": "2025-04-29T13:33:38Z", - "pushed_at": "2025-04-29T13:33:36Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 998398785, - "name": "SOC274---Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400-", - "full_name": "CyberBibs\/SOC274---Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400-", - "owner": { - "login": "CyberBibs", - "id": 47519847, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47519847?v=4", - "html_url": "https:\/\/github.com\/CyberBibs", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/CyberBibs\/SOC274---Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400-", - "description": null, - "fork": false, - "created_at": "2025-06-08T14:29:11Z", - "updated_at": "2025-06-08T15:17:55Z", - "pushed_at": "2025-06-08T15:17:51Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1067746042, "name": "cs50-cyber-paloalto-oauth", diff --git a/2024/CVE-2024-34102.json b/2024/CVE-2024-34102.json index 0e779633e7..3349470737 100644 --- a/2024/CVE-2024-34102.json +++ b/2024/CVE-2024-34102.json @@ -695,72 +695,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 961480399, - "name": "CVE-2024-34102", - "full_name": "Koray123-debug\/CVE-2024-34102", - "owner": { - "login": "Koray123-debug", - "id": 202394121, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/202394121?v=4", - "html_url": "https:\/\/github.com\/Koray123-debug", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Koray123-debug\/CVE-2024-34102", - "description": null, - "fork": false, - "created_at": "2025-04-06T16:00:21Z", - "updated_at": "2025-05-11T03:02:37Z", - "pushed_at": "2025-05-11T03:02:34Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1037703170, - "name": "CVE-2024-34102", - "full_name": "Kento-Sec\/CVE-2024-34102", - "owner": { - "login": "Kento-Sec", - "id": 53268974, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/53268974?v=4", - "html_url": "https:\/\/github.com\/Kento-Sec", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Kento-Sec\/CVE-2024-34102", - "description": null, - "fork": false, - "created_at": "2025-08-14T01:55:10Z", - "updated_at": "2025-08-14T01:56:33Z", - "pushed_at": "2025-08-14T01:56:30Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1157347362, "name": "CVE-2024-34102", diff --git a/2024/CVE-2024-34327.json b/2024/CVE-2024-34327.json deleted file mode 100644 index 71d17a923a..0000000000 --- a/2024/CVE-2024-34327.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 913019383, - "name": "CVE-2024-34327", - "full_name": "0xsu3ks\/CVE-2024-34327", - "owner": { - "login": "0xsu3ks", - "id": 97468816, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97468816?v=4", - "html_url": "https:\/\/github.com\/0xsu3ks", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0xsu3ks\/CVE-2024-34327", - "description": null, - "fork": false, - "created_at": "2025-01-06T21:39:57Z", - "updated_at": "2025-07-31T15:41:57Z", - "pushed_at": "2025-07-31T15:41:54Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-34328.json b/2024/CVE-2024-34328.json deleted file mode 100644 index 4dd0a7178d..0000000000 --- a/2024/CVE-2024-34328.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1029292556, - "name": "CVE-2024-34328", - "full_name": "0xsu3ks\/CVE-2024-34328", - "owner": { - "login": "0xsu3ks", - "id": 97468816, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97468816?v=4", - "html_url": "https:\/\/github.com\/0xsu3ks", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0xsu3ks\/CVE-2024-34328", - "description": null, - "fork": false, - "created_at": "2025-07-30T20:17:52Z", - "updated_at": "2025-07-30T20:21:49Z", - "pushed_at": "2025-07-30T20:21:45Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-34370.json b/2024/CVE-2024-34370.json deleted file mode 100644 index 3f56a3b47b..0000000000 --- a/2024/CVE-2024-34370.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 946766026, - "name": "CVE-2024-34370", - "full_name": "pashayogi\/CVE-2024-34370", - "owner": { - "login": "pashayogi", - "id": 50790111, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50790111?v=4", - "html_url": "https:\/\/github.com\/pashayogi", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/pashayogi\/CVE-2024-34370", - "description": "CVE-2024-34370, https:\/\/www.cve.org\/CVERecord?id=CVE-2024-34370", - "fork": false, - "created_at": "2025-03-11T16:35:19Z", - "updated_at": "2025-08-08T03:44:29Z", - "pushed_at": "2025-03-11T16:35:40Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-34716.json b/2024/CVE-2024-34716.json index 0f92630d5f..bac72b4053 100644 --- a/2024/CVE-2024-34716.json +++ b/2024/CVE-2024-34716.json @@ -64,38 +64,5 @@ "watchers": 1, "score": 0, "subscribers_count": 1 - }, - { - "id": 935598432, - "name": "Trickster-HTB", - "full_name": "Pallangyo98\/Trickster-HTB", - "owner": { - "login": "Pallangyo98", - "id": 102930183, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102930183?v=4", - "html_url": "https:\/\/github.com\/Pallangyo98", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Pallangyo98\/Trickster-HTB", - "description": "This report details exploiting Trickster via an XSS in PrestaShop (CVE-2024-34716) to gain www-data access, extracting database credentials for SSH as james. A root shell in Docker is obtained via ChangeDetection.io (CVE-2024-32651), revealing adam’s credentials, followed by root escalation with CVE-2023-47268 in PrusaSlicer.", - "fork": false, - "created_at": "2025-02-19T17:50:18Z", - "updated_at": "2025-02-25T07:26:19Z", - "pushed_at": "2025-02-19T17:54:10Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2024/CVE-2024-35106.json b/2024/CVE-2024-35106.json deleted file mode 100644 index 3c8ca842e4..0000000000 --- a/2024/CVE-2024-35106.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 928553313, - "name": "CVE-2024-35106-POC", - "full_name": "laskdjlaskdj12\/CVE-2024-35106-POC", - "owner": { - "login": "laskdjlaskdj12", - "id": 16471540, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16471540?v=4", - "html_url": "https:\/\/github.com\/laskdjlaskdj12", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/laskdjlaskdj12\/CVE-2024-35106-POC", - "description": null, - "fork": false, - "created_at": "2025-02-06T20:24:15Z", - "updated_at": "2025-02-06T21:05:22Z", - "pushed_at": "2025-02-06T21:05:19Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-3552.json b/2024/CVE-2024-3552.json deleted file mode 100644 index f799c8e647..0000000000 --- a/2024/CVE-2024-3552.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 1024143598, - "name": "cve-2024-3552", - "full_name": "KiPhuong\/cve-2024-3552", - "owner": { - "login": "KiPhuong", - "id": 128106302, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/128106302?v=4", - "html_url": "https:\/\/github.com\/KiPhuong", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/KiPhuong\/cve-2024-3552", - "description": null, - "fork": false, - "created_at": "2025-07-22T08:47:56Z", - "updated_at": "2025-07-22T09:09:25Z", - "pushed_at": "2025-07-22T09:09:21Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1029541513, - "name": "challenge-cve-2024-3552", - "full_name": "KiPhuong\/challenge-cve-2024-3552", - "owner": { - "login": "KiPhuong", - "id": 128106302, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/128106302?v=4", - "html_url": "https:\/\/github.com\/KiPhuong", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/KiPhuong\/challenge-cve-2024-3552", - "description": null, - "fork": false, - "created_at": "2025-07-31T07:45:50Z", - "updated_at": "2025-07-31T07:52:57Z", - "pushed_at": "2025-07-31T07:52:54Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-3568.json b/2024/CVE-2024-3568.json deleted file mode 100644 index a0cdb3825a..0000000000 --- a/2024/CVE-2024-3568.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1017219576, - "name": "Pickle-Deserialization-Exploit-in-Transformers", - "full_name": "rooobeam\/Pickle-Deserialization-Exploit-in-Transformers", - "owner": { - "login": "rooobeam", - "id": 118519003, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/118519003?v=4", - "html_url": "https:\/\/github.com\/rooobeam", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/rooobeam\/Pickle-Deserialization-Exploit-in-Transformers", - "description": "This study analyzes Python pickle deserialization vulnerabilities, focusing on CVE-2024-3568 in Hugging Face Transformers' TFAutoModel. We reproduce the exploit to examine its root cause, attack vectors, and risks.", - "fork": false, - "created_at": "2025-07-10T07:52:06Z", - "updated_at": "2025-07-10T13:09:52Z", - "pushed_at": "2025-07-10T13:09:49Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-3640.json b/2024/CVE-2024-3640.json deleted file mode 100644 index 1fb1a41c2e..0000000000 --- a/2024/CVE-2024-3640.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 963125052, - "name": "CVE-2024-3640_WafBypass", - "full_name": "H1ng007\/CVE-2024-3640_WafBypass", - "owner": { - "login": "H1ng007", - "id": 26641276, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26641276?v=4", - "html_url": "https:\/\/github.com\/H1ng007", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/H1ng007\/CVE-2024-3640_WafBypass", - "description": "CVE-2024-3640绕过Waf进行漏洞利用", - "fork": false, - "created_at": "2025-04-09T07:39:47Z", - "updated_at": "2025-04-30T17:33:52Z", - "pushed_at": "2025-04-09T07:58:18Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-36401.json b/2024/CVE-2024-36401.json index 8c575a2e7e..b2fa57f3f3 100644 --- a/2024/CVE-2024-36401.json +++ b/2024/CVE-2024-36401.json @@ -501,72 +501,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 975367374, - "name": "CVE-2024-36401_Geoserver_RCE_POC", - "full_name": "amoy6228\/CVE-2024-36401_Geoserver_RCE_POC", - "owner": { - "login": "amoy6228", - "id": 92043772, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/92043772?v=4", - "html_url": "https:\/\/github.com\/amoy6228", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/amoy6228\/CVE-2024-36401_Geoserver_RCE_POC", - "description": "本脚本是针对 GeoServer 的远程代码执行漏洞（CVE-2024-36401）开发的 PoC（Proof of Concept）探测工具。该漏洞允许攻击者通过构造特定请求，在目标服务器上执行任意命令。", - "fork": false, - "created_at": "2025-04-30T07:45:55Z", - "updated_at": "2026-05-05T16:18:19Z", - "pushed_at": "2025-04-30T08:46:21Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1023820934, - "name": "Exploit-CVE-2024-36401", - "full_name": "ArcticDU\/Exploit-CVE-2024-36401", - "owner": { - "login": "ArcticDU", - "id": 98260160, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/98260160?v=4", - "html_url": "https:\/\/github.com\/ArcticDU", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ArcticDU\/Exploit-CVE-2024-36401", - "description": "Python exploit for GeoServer (CVE-2024-36401) with JSP web shell upload", - "fork": false, - "created_at": "2025-07-21T18:40:39Z", - "updated_at": "2025-07-21T18:40:39Z", - "pushed_at": "2025-07-21T18:40:39Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1069614994, "name": "CVE-2024-36401", diff --git a/2024/CVE-2024-36437.json b/2024/CVE-2024-36437.json deleted file mode 100644 index 4e02c69ace..0000000000 --- a/2024/CVE-2024-36437.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 925755199, - "name": "com.enflick.android.TextNow", - "full_name": "actuator\/com.enflick.android.TextNow", - "owner": { - "login": "actuator", - "id": 78701239, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78701239?v=4", - "html_url": "https:\/\/github.com\/actuator", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/actuator\/com.enflick.android.TextNow", - "description": "CVE-2024-36437", - "fork": false, - "created_at": "2025-02-01T17:08:36Z", - "updated_at": "2025-10-21T00:37:11Z", - "pushed_at": "2025-02-01T17:12:51Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-36587.json b/2024/CVE-2024-36587.json deleted file mode 100644 index 516cb5abfa..0000000000 --- a/2024/CVE-2024-36587.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 973688727, - "name": "CVE-2024-36587", - "full_name": "meeeeing\/CVE-2024-36587", - "owner": { - "login": "meeeeing", - "id": 107387239, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/107387239?v=4", - "html_url": "https:\/\/github.com\/meeeeing", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/meeeeing\/CVE-2024-36587", - "description": null, - "fork": false, - "created_at": "2025-04-27T14:30:46Z", - "updated_at": "2025-04-27T15:26:47Z", - "pushed_at": "2025-04-27T15:26:44Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-3660.json b/2024/CVE-2024-3660.json deleted file mode 100644 index eeba3b363d..0000000000 --- a/2024/CVE-2024-3660.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1038757717, - "name": "CVE-2024-3660-PoC", - "full_name": "aaryanbhujang\/CVE-2024-3660-PoC", - "owner": { - "login": "aaryanbhujang", - "id": 162456484, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/162456484?v=4", - "html_url": "https:\/\/github.com\/aaryanbhujang", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/aaryanbhujang\/CVE-2024-3660-PoC", - "description": "A PoC for CVE-2024-3660. Arbitrary Code Execution in Keras.", - "fork": false, - "created_at": "2025-08-15T19:02:47Z", - "updated_at": "2025-12-28T06:14:31Z", - "pushed_at": "2025-08-15T19:51:27Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 4, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-3661.json b/2024/CVE-2024-3661.json index 7a47b7ce06..46095ca51a 100644 --- a/2024/CVE-2024-3661.json +++ b/2024/CVE-2024-3661.json @@ -1,70 +1,4 @@ [ - { - "id": 984994594, - "name": "CVE-2024-3661", - "full_name": "Wh1t3Fox\/CVE-2024-3661", - "owner": { - "login": "Wh1t3Fox", - "id": 1253352, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1253352?v=4", - "html_url": "https:\/\/github.com\/Wh1t3Fox", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Wh1t3Fox\/CVE-2024-3661", - "description": "CVE-2024-3661 TunnelVision", - "fork": false, - "created_at": "2025-05-16T21:47:31Z", - "updated_at": "2026-01-02T13:30:33Z", - "pushed_at": "2025-05-16T21:49:49Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 988863002, - "name": "CVE-2024-3661VPN", - "full_name": "Roundthe-clock\/CVE-2024-3661VPN", - "owner": { - "login": "Roundthe-clock", - "id": 90299433, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90299433?v=4", - "html_url": "https:\/\/github.com\/Roundthe-clock", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Roundthe-clock\/CVE-2024-3661VPN", - "description": null, - "fork": false, - "created_at": "2025-05-23T07:31:17Z", - "updated_at": "2025-05-23T07:37:11Z", - "pushed_at": "2025-05-23T07:37:06Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1105545147, "name": "CVE-2024-3661_Demo", diff --git a/2024/CVE-2024-3673.json b/2024/CVE-2024-3673.json deleted file mode 100644 index 9f78755572..0000000000 --- a/2024/CVE-2024-3673.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 921921508, - "name": "CVE-2024-3673", - "full_name": "Nxploited\/CVE-2024-3673", - "owner": { - "login": "Nxploited", - "id": 188819918, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4", - "html_url": "https:\/\/github.com\/Nxploited", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-3673", - "description": "CVE-2024-3673 Exploit: Local File Inclusion in Web Directory Free WordPress Plugin ( before 1.7.3 )", - "fork": false, - "created_at": "2025-01-24T21:50:55Z", - "updated_at": "2025-05-06T07:18:56Z", - "pushed_at": "2025-01-24T21:56:33Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-36886.json b/2024/CVE-2024-36886.json deleted file mode 100644 index 6a50a07801..0000000000 --- a/2024/CVE-2024-36886.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1048523975, - "name": "CVE-2024-36886", - "full_name": "abubakar-shahid\/CVE-2024-36886", - "owner": { - "login": "abubakar-shahid", - "id": 102373243, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102373243?v=4", - "html_url": "https:\/\/github.com\/abubakar-shahid", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/abubakar-shahid\/CVE-2024-36886", - "description": null, - "fork": false, - "created_at": "2025-09-01T15:21:42Z", - "updated_at": "2026-07-08T12:38:35Z", - "pushed_at": "2025-09-01T15:24:45Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-36991.json b/2024/CVE-2024-36991.json index dd6912563f..d22f7e1342 100644 --- a/2024/CVE-2024-36991.json +++ b/2024/CVE-2024-36991.json @@ -170,39 +170,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 957508452, - "name": "CVE-2024-36991", - "full_name": "jaytiwari05\/CVE-2024-36991", - "owner": { - "login": "jaytiwari05", - "id": 118415321, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/118415321?v=4", - "html_url": "https:\/\/github.com\/jaytiwari05", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/jaytiwari05\/CVE-2024-36991", - "description": "Critical Splunk Vulnerability CVE-2024-36991: Patch Now to Prevent Arbitrary File Reads", - "fork": false, - "created_at": "2025-03-30T14:50:21Z", - "updated_at": "2026-01-12T16:09:20Z", - "pushed_at": "2025-03-30T14:55:14Z", - "stargazers_count": 9, - "watchers_count": 9, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 9, - "score": 0, - "subscribers_count": 1 - }, { "id": 957643118, "name": "CVE-2024-36991-Tool", @@ -236,45 +203,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 957755571, - "name": "CVE-2024-36991", - "full_name": "gunzf0x\/CVE-2024-36991", - "owner": { - "login": "gunzf0x", - "id": 31874167, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/31874167?v=4", - "html_url": "https:\/\/github.com\/gunzf0x", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/gunzf0x\/CVE-2024-36991", - "description": "Proof of Concept for CVE-2024-36991. Path traversal for Splunk versions below 9.2.2, 9.1.5, and 9.0.10 for Windows which allows arbitrary file read.", - "fork": false, - "created_at": "2025-03-31T04:24:18Z", - "updated_at": "2025-06-13T16:53:36Z", - "pushed_at": "2025-03-31T04:30:26Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2024-36991", - "ethical-hacking", - "path-traversal", - "pentesting", - "splunk" - ], - "visibility": "public", - "forks": 1, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - }, { "id": 1014605925, "name": "CVE-2024-36991", diff --git a/2024/CVE-2024-37010.json b/2024/CVE-2024-37010.json deleted file mode 100644 index ded2d84139..0000000000 --- a/2024/CVE-2024-37010.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 983644834, - "name": "CVE-2024-37010", - "full_name": "SarpantKeltiek\/CVE-2024-37010", - "owner": { - "login": "SarpantKeltiek", - "id": 127454269, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/127454269?v=4", - "html_url": "https:\/\/github.com\/SarpantKeltiek", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SarpantKeltiek\/CVE-2024-37010", - "description": "Exploit for the CVE-2024-37010: access other user's external storage & lateral movement", - "fork": false, - "created_at": "2025-05-14T17:35:57Z", - "updated_at": "2025-05-15T10:43:13Z", - "pushed_at": "2025-05-15T10:43:10Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-37054.json b/2024/CVE-2024-37054.json index d9f13a234b..033745d240 100644 --- a/2024/CVE-2024-37054.json +++ b/2024/CVE-2024-37054.json @@ -1,37 +1,4 @@ [ - { - "id": 1042708007, - "name": "CVE-2024-37054-MLflow-RCE", - "full_name": "NiteeshPujari\/CVE-2024-37054-MLflow-RCE", - "owner": { - "login": "NiteeshPujari", - "id": 47559537, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/47559537?v=4", - "html_url": "https:\/\/github.com\/NiteeshPujari", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/NiteeshPujari\/CVE-2024-37054-MLflow-RCE", - "description": "NiteeshPujari\/CVE-2024-37054, This repository contains a Proof of Concept (PoC) a critical deserialization vulnerability in MLflow that allows for Remote Code Execution (RCE). ", - "fork": false, - "created_at": "2025-08-22T12:54:40Z", - "updated_at": "2026-06-10T04:30:05Z", - "pushed_at": "2025-08-22T12:56:44Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 0 - }, { "id": 1241206969, "name": "CVE-2024-37054", diff --git a/2024/CVE-2024-38063.json b/2024/CVE-2024-38063.json index 93a8daaa3e..f531397632 100644 --- a/2024/CVE-2024-38063.json +++ b/2024/CVE-2024-38063.json @@ -810,39 +810,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 1025117094, - "name": "CVE-2024-38063", - "full_name": "Skac44\/CVE-2024-38063", - "owner": { - "login": "Skac44", - "id": 162877424, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/162877424?v=4", - "html_url": "https:\/\/github.com\/Skac44", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Skac44\/CVE-2024-38063", - "description": null, - "fork": false, - "created_at": "2025-07-23T18:45:54Z", - "updated_at": "2025-07-23T18:48:48Z", - "pushed_at": "2025-07-23T18:48:44Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1138517103, "name": "CVE-2024-38063", diff --git a/2024/CVE-2024-38077.json b/2024/CVE-2024-38077.json index 6102826e12..3d0d209c03 100644 --- a/2024/CVE-2024-38077.json +++ b/2024/CVE-2024-38077.json @@ -406,39 +406,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 921018261, - "name": "CVE-2024-38077-POC", - "full_name": "Accord96\/CVE-2024-38077-POC", - "owner": { - "login": "Accord96", - "id": 50647230, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50647230?v=4", - "html_url": "https:\/\/github.com\/Accord96", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Accord96\/CVE-2024-38077-POC", - "description": "CVE-2024-38077-POC", - "fork": false, - "created_at": "2025-01-23T07:21:52Z", - "updated_at": "2025-01-23T15:46:51Z", - "pushed_at": "2025-01-23T07:21:54Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1116000593, "name": "CVE-2024-38077-MadLicense-exploit", diff --git a/2024/CVE-2024-38112.json b/2024/CVE-2024-38112.json deleted file mode 100644 index a3208b3305..0000000000 --- a/2024/CVE-2024-38112.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1026451214, - "name": "CPSC253_CybersecurityFinalProjectReports", - "full_name": "BunBunCodes\/CPSC253_CybersecurityFinalProjectReports", - "owner": { - "login": "BunBunCodes", - "id": 77079040, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/77079040?v=4", - "html_url": "https:\/\/github.com\/BunBunCodes", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/BunBunCodes\/CPSC253_CybersecurityFinalProjectReports", - "description": "Report written on CVE-2024-38112", - "fork": false, - "created_at": "2025-07-25T23:14:53Z", - "updated_at": "2025-07-26T05:04:29Z", - "pushed_at": "2025-07-26T05:04:25Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-38143.json b/2024/CVE-2024-38143.json deleted file mode 100644 index d0d997a4d8..0000000000 --- a/2024/CVE-2024-38143.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 927906660, - "name": "CVE-2024-38143", - "full_name": "redr0nin\/CVE-2024-38143", - "owner": { - "login": "redr0nin", - "id": 39013067, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/39013067?v=4", - "html_url": "https:\/\/github.com\/redr0nin", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/redr0nin\/CVE-2024-38143", - "description": "Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability", - "fork": false, - "created_at": "2025-02-05T18:31:35Z", - "updated_at": "2025-07-31T17:52:32Z", - "pushed_at": "2025-02-05T19:05:28Z", - "stargazers_count": 24, - "watchers_count": 24, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 24, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-38475.json b/2024/CVE-2024-38475.json index 510dd2ce5f..9792b8dd17 100644 --- a/2024/CVE-2024-38475.json +++ b/2024/CVE-2024-38475.json @@ -65,72 +65,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 979061237, - "name": "CVE-2024-38475_SonicBoom_Apache_URL_Traversal_PoC", - "full_name": "abrewer251\/CVE-2024-38475_SonicBoom_Apache_URL_Traversal_PoC", - "owner": { - "login": "abrewer251", - "id": 150287770, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/150287770?v=4", - "html_url": "https:\/\/github.com\/abrewer251", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/abrewer251\/CVE-2024-38475_SonicBoom_Apache_URL_Traversal_PoC", - "description": null, - "fork": false, - "created_at": "2025-05-07T00:02:36Z", - "updated_at": "2025-07-28T18:14:47Z", - "pushed_at": "2025-05-09T17:44:16Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 980483797, - "name": "CVE-2024-38475", - "full_name": "syaifulandy\/CVE-2024-38475", - "owner": { - "login": "syaifulandy", - "id": 10593865, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/10593865?v=4", - "html_url": "https:\/\/github.com\/syaifulandy", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/syaifulandy\/CVE-2024-38475", - "description": "CVE-2024-38475 Scanner using FFUF + Seclists", - "fork": false, - "created_at": "2025-05-09T07:51:45Z", - "updated_at": "2025-05-09T07:52:53Z", - "pushed_at": "2025-05-09T07:52:49Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1255351370, "name": "Myesve", diff --git a/2024/CVE-2024-38526.json b/2024/CVE-2024-38526.json index f714d81d7e..e3136a5c49 100644 --- a/2024/CVE-2024-38526.json +++ b/2024/CVE-2024-38526.json @@ -31,38 +31,5 @@ "watchers": 0, "score": 0, "subscribers_count": 1 - }, - { - "id": 934598614, - "name": "pollyscan", - "full_name": "padayali-JD\/pollyscan", - "owner": { - "login": "padayali-JD", - "id": 182597025, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/182597025?v=4", - "html_url": "https:\/\/github.com\/padayali-JD", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/padayali-JD\/pollyscan", - "description": "A specialized vulnerability scanner designed to detect CVE-2024-38526, the Polyfill.io Supply Chain Attack, helping organizations identify and mitigate risks associated with compromised third-party dependencies. ", - "fork": false, - "created_at": "2025-02-18T05:11:45Z", - "updated_at": "2025-10-05T11:02:19Z", - "pushed_at": "2025-02-18T11:57:23Z", - "stargazers_count": 6, - "watchers_count": 6, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 6, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2024/CVE-2024-38816.json b/2024/CVE-2024-38816.json index 53f17fe1de..b2d75eca99 100644 --- a/2024/CVE-2024-38816.json +++ b/2024/CVE-2024-38816.json @@ -130,38 +130,5 @@ "watchers": 0, "score": 0, "subscribers_count": 1 - }, - { - "id": 965851524, - "name": "spring-webmvc5", - "full_name": "jaloon\/spring-webmvc5", - "owner": { - "login": "jaloon", - "id": 38955868, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38955868?v=4", - "html_url": "https:\/\/github.com\/jaloon", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/jaloon\/spring-webmvc5", - "description": "Fork spring-webmvc 5.3.39 to fix CVE-2024-38816, CVE-2024-38819", - "fork": false, - "created_at": "2025-04-14T02:31:38Z", - "updated_at": "2025-06-23T10:54:49Z", - "pushed_at": "2025-04-15T01:18:16Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2024/CVE-2024-38819.json b/2024/CVE-2024-38819.json index 7ebd2cb214..0ca3cb0e13 100644 --- a/2024/CVE-2024-38819.json +++ b/2024/CVE-2024-38819.json @@ -65,72 +65,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 928660004, - "name": "cve-2024-38819", - "full_name": "skrkcb2\/cve-2024-38819", - "owner": { - "login": "skrkcb2", - "id": 131514744, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/131514744?v=4", - "html_url": "https:\/\/github.com\/skrkcb2", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/skrkcb2\/cve-2024-38819", - "description": null, - "fork": false, - "created_at": "2025-02-07T02:16:20Z", - "updated_at": "2026-06-23T23:54:06Z", - "pushed_at": "2025-03-11T02:01:55Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1008189144, - "name": "CVE-2024-38819-POC2", - "full_name": "vishalnoza\/CVE-2024-38819-POC2", - "owner": { - "login": "vishalnoza", - "id": 186007689, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/186007689?v=4", - "html_url": "https:\/\/github.com\/vishalnoza", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/vishalnoza\/CVE-2024-38819-POC2", - "description": null, - "fork": false, - "created_at": "2025-06-25T06:59:08Z", - "updated_at": "2025-06-25T07:20:34Z", - "pushed_at": "2025-06-25T06:59:39Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, { "id": 1272339591, "name": "cve-2024-38819-lab", diff --git a/2024/CVE-2024-38828.json b/2024/CVE-2024-38828.json deleted file mode 100644 index 0cdabcae2d..0000000000 --- a/2024/CVE-2024-38828.json +++ /dev/null @@ -1,101 +0,0 @@ -[ - { - "id": 966421202, - "name": "sprig-mvc-demo-patch", - "full_name": "First-Roman\/sprig-mvc-demo-patch", - "owner": { - "login": "First-Roman", - "id": 79809612, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79809612?v=4", - "html_url": "https:\/\/github.com\/First-Roman", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/First-Roman\/sprig-mvc-demo-patch", - "description": "This demo application partially covers the vulnerability CVE-2024-38828", - "fork": false, - "created_at": "2025-04-14T22:36:00Z", - "updated_at": "2025-04-14T23:04:28Z", - "pushed_at": "2025-04-14T23:04:25Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 970177287, - "name": "axiom-jdk-test-task", - "full_name": "topilov\/axiom-jdk-test-task", - "owner": { - "login": "topilov", - "id": 104158810, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/104158810?v=4", - "html_url": "https:\/\/github.com\/topilov", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/topilov\/axiom-jdk-test-task", - "description": "CVE-2024-38828: DoS via Spring MVC controller method with byte[] parameter ", - "fork": false, - "created_at": "2025-04-21T15:49:39Z", - "updated_at": "2026-03-28T02:31:02Z", - "pushed_at": "2025-04-21T15:51:55Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 970909080, - "name": "CVE-2024-38828", - "full_name": "funcid\/CVE-2024-38828", - "owner": { - "login": "funcid", - "id": 42806772, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42806772?v=4", - "html_url": "https:\/\/github.com\/funcid", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/funcid\/CVE-2024-38828", - "description": null, - "fork": false, - "created_at": "2025-04-22T18:07:35Z", - "updated_at": "2025-04-22T18:18:55Z", - "pushed_at": "2025-04-22T18:18:52Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-38856.json b/2024/CVE-2024-38856.json index 98a5964b7b..3e0760bf12 100644 --- a/2024/CVE-2024-38856.json +++ b/2024/CVE-2024-38856.json @@ -205,39 +205,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 930691569, - "name": "Apache-OFBiz-Exploit", - "full_name": "AlissonFaoli\/Apache-OFBiz-Exploit", - "owner": { - "login": "AlissonFaoli", - "id": 129133392, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/129133392?v=4", - "html_url": "https:\/\/github.com\/AlissonFaoli", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/AlissonFaoli\/Apache-OFBiz-Exploit", - "description": "Exploit for Apache OFBiz - CVE-2024-38856", - "fork": false, - "created_at": "2025-02-11T03:39:47Z", - "updated_at": "2026-05-05T02:25:09Z", - "pushed_at": "2025-03-23T18:37:10Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, { "id": 1073363952, "name": "CVE-2024-38856-Apache-OFBiz", diff --git a/2024/CVE-2024-39713.json b/2024/CVE-2024-39713.json index 2101c231ce..27a175da81 100644 --- a/2024/CVE-2024-39713.json +++ b/2024/CVE-2024-39713.json @@ -1,37 +1,4 @@ [ - { - "id": 928914700, - "name": "CVE-2024-39713", - "full_name": "typical-pashochek\/CVE-2024-39713", - "owner": { - "login": "typical-pashochek", - "id": 61884071, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61884071?v=4", - "html_url": "https:\/\/github.com\/typical-pashochek", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/typical-pashochek\/CVE-2024-39713", - "description": null, - "fork": false, - "created_at": "2025-02-07T13:22:36Z", - "updated_at": "2025-08-19T13:09:42Z", - "pushed_at": "2025-02-07T14:20:02Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 5, - "score": 0, - "subscribers_count": 1 - }, { "id": 1086950090, "name": "exploit-cve", diff --git a/2024/CVE-2024-39719.json b/2024/CVE-2024-39719.json deleted file mode 100644 index 2b492604d9..0000000000 --- a/2024/CVE-2024-39719.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 979880057, - "name": "CVE-2024-39719", - "full_name": "srcx404\/CVE-2024-39719", - "owner": { - "login": "srcx404", - "id": 130750300, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/130750300?v=4", - "html_url": "https:\/\/github.com\/srcx404", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/srcx404\/CVE-2024-39719", - "description": null, - "fork": false, - "created_at": "2025-05-08T08:03:56Z", - "updated_at": "2025-05-08T08:07:33Z", - "pushed_at": "2025-05-08T08:07:30Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-39722.json b/2024/CVE-2024-39722.json deleted file mode 100644 index c13b3b0179..0000000000 --- a/2024/CVE-2024-39722.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 979211233, - "name": "CVE-2024-39722", - "full_name": "srcx404\/CVE-2024-39722", - "owner": { - "login": "srcx404", - "id": 130750300, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/130750300?v=4", - "html_url": "https:\/\/github.com\/srcx404", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/srcx404\/CVE-2024-39722", - "description": null, - "fork": false, - "created_at": "2025-05-07T07:01:02Z", - "updated_at": "2025-05-07T07:31:07Z", - "pushed_at": "2025-05-07T07:31:04Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-39930.json b/2024/CVE-2024-39930.json index 0f6e4ca52c..a274496108 100644 --- a/2024/CVE-2024-39930.json +++ b/2024/CVE-2024-39930.json @@ -1,70 +1,4 @@ [ - { - "id": 1010839887, - "name": "CVE-2024-39930-PoC", - "full_name": "theMcSam\/CVE-2024-39930-PoC", - "owner": { - "login": "theMcSam", - "id": 65866483, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/65866483?v=4", - "html_url": "https:\/\/github.com\/theMcSam", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/theMcSam\/CVE-2024-39930-PoC", - "description": "Exploit Code for CVE-2024-39930 gogs ssh server RCE", - "fork": false, - "created_at": "2025-06-29T22:46:00Z", - "updated_at": "2025-07-01T15:58:43Z", - "pushed_at": "2025-07-01T10:12:24Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1024265157, - "name": "-CVE-2024-39930", - "full_name": "alexander47777\/-CVE-2024-39930", - "owner": { - "login": "alexander47777", - "id": 123721375, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123721375?v=4", - "html_url": "https:\/\/github.com\/alexander47777", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/alexander47777\/-CVE-2024-39930", - "description": "Gogs Under Attack: Unpacking the Critical SSH Vulnerability (CVE-2024–39930)", - "fork": false, - "created_at": "2025-07-22T12:36:13Z", - "updated_at": "2025-07-22T12:57:50Z", - "pushed_at": "2025-07-22T12:57:46Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1075224213, "name": "CVE-2024-39930-ptrace-detection-mitigation", diff --git a/2024/CVE-2024-39943.json b/2024/CVE-2024-39943.json index e86b7a0e3d..38a8f61294 100644 --- a/2024/CVE-2024-39943.json +++ b/2024/CVE-2024-39943.json @@ -31,38 +31,5 @@ "watchers": 0, "score": 0, "subscribers_count": 0 - }, - { - "id": 968987820, - "name": "Node.js-CVE-2024-39943", - "full_name": "JenmrR\/Node.js-CVE-2024-39943", - "owner": { - "login": "JenmrR", - "id": 163631927, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/163631927?v=4", - "html_url": "https:\/\/github.com\/JenmrR", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/JenmrR\/Node.js-CVE-2024-39943", - "description": null, - "fork": false, - "created_at": "2025-04-19T06:06:14Z", - "updated_at": "2025-04-21T07:10:47Z", - "pushed_at": "2025-04-21T07:10:44Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2024/CVE-2024-40110.json b/2024/CVE-2024-40110.json index 0473df0458..9497fed18b 100644 --- a/2024/CVE-2024-40110.json +++ b/2024/CVE-2024-40110.json @@ -32,39 +32,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 974506754, - "name": "CVE-2024-40110", - "full_name": "thiagosmith\/CVE-2024-40110", - "owner": { - "login": "thiagosmith", - "id": 106747435, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/106747435?v=4", - "html_url": "https:\/\/github.com\/thiagosmith", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/thiagosmith\/CVE-2024-40110", - "description": "Exploit para Poultry Farm Management System v1.0", - "fork": false, - "created_at": "2025-04-28T22:14:29Z", - "updated_at": "2025-05-05T16:31:35Z", - "pushed_at": "2025-04-28T22:22:18Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - }, { "id": 1122162437, "name": "CVE-2024-40110", diff --git a/2024/CVE-2024-4040.json b/2024/CVE-2024-4040.json index 3478e9d922..11e99103fe 100644 --- a/2024/CVE-2024-4040.json +++ b/2024/CVE-2024-4040.json @@ -529,39 +529,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 1013828350, - "name": "CrushFTP-CVE-2024-4040-illdeed", - "full_name": "ill-deed\/CrushFTP-CVE-2024-4040-illdeed", - "owner": { - "login": "ill-deed", - "id": 210107232, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/210107232?v=4", - "html_url": "https:\/\/github.com\/ill-deed", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ill-deed\/CrushFTP-CVE-2024-4040-illdeed", - "description": "Exploit for CVE-2024-4040 – Authentication bypass in CrushFTP via CrushAuth cookie and AWS-style header spoofing. Stealthy Python PoC with secure token generation, SSL bypass, and improved output.", - "fork": false, - "created_at": "2025-07-04T14:30:16Z", - "updated_at": "2025-07-04T14:42:20Z", - "pushed_at": "2025-07-04T14:42:17Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1090633656, "name": "CrushFTP10-Docker-CVE-2024-4040", diff --git a/2024/CVE-2024-40445.json b/2024/CVE-2024-40445.json deleted file mode 100644 index 0115933fd5..0000000000 --- a/2024/CVE-2024-40445.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 970151384, - "name": "CVE-2024-40445_CVE-2024-40446", - "full_name": "TaiYou-TW\/CVE-2024-40445_CVE-2024-40446", - "owner": { - "login": "TaiYou-TW", - "id": 16871628, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16871628?v=4", - "html_url": "https:\/\/github.com\/TaiYou-TW", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/TaiYou-TW\/CVE-2024-40445_CVE-2024-40446", - "description": "This repository serves as the public reference for CVE-2024-40445 and CVE-2024-40446. Both vulnerabilities impact MimeTeX, an open-source software package for rendering LaTeX expressions, which appears to be no longer maintained.", - "fork": false, - "created_at": "2025-04-21T15:01:29Z", - "updated_at": "2025-05-15T13:18:09Z", - "pushed_at": "2025-05-15T13:18:06Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-40453.json b/2024/CVE-2024-40453.json deleted file mode 100644 index dfb69d5e4d..0000000000 --- a/2024/CVE-2024-40453.json +++ /dev/null @@ -1,38 +0,0 @@ -[ - { - "id": 998186987, - "name": "CVE-2024-40453", - "full_name": "BwithE\/CVE-2024-40453", - "owner": { - "login": "BwithE", - "id": 144924113, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/144924113?v=4", - "html_url": "https:\/\/github.com\/BwithE", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/BwithE\/CVE-2024-40453", - "description": "CVE-2024-40453 - Squirrelly v9.0.0 RCE. Poc", - "fork": false, - "created_at": "2025-06-08T03:49:49Z", - "updated_at": "2025-07-12T13:08:18Z", - "pushed_at": "2025-07-12T13:08:01Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2024-40453", - "poc" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-40586.json b/2024/CVE-2024-40586.json deleted file mode 100644 index 6fb6f32ad9..0000000000 --- a/2024/CVE-2024-40586.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1025838128, - "name": "CVE-2024-40586-Windows-Coerced-Authentication-in-FortiClient", - "full_name": "Hagrid29\/CVE-2024-40586-Windows-Coerced-Authentication-in-FortiClient", - "owner": { - "login": "Hagrid29", - "id": 97426612, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97426612?v=4", - "html_url": "https:\/\/github.com\/Hagrid29", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Hagrid29\/CVE-2024-40586-Windows-Coerced-Authentication-in-FortiClient", - "description": null, - "fork": false, - "created_at": "2025-07-24T22:19:00Z", - "updated_at": "2025-07-26T00:20:47Z", - "pushed_at": "2025-07-24T22:24:38Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-40635.json b/2024/CVE-2024-40635.json deleted file mode 100644 index 998f0c2ba1..0000000000 --- a/2024/CVE-2024-40635.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 975630523, - "name": "CVE-2024-40635_POC", - "full_name": "yen5004\/CVE-2024-40635_POC", - "owner": { - "login": "yen5004", - "id": 119946331, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/119946331?v=4", - "html_url": "https:\/\/github.com\/yen5004", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/yen5004\/CVE-2024-40635_POC", - "description": "Proof of Concept code for proving CVE-2024-40635 vulnerability ", - "fork": false, - "created_at": "2025-04-30T16:22:09Z", - "updated_at": "2025-04-30T17:10:33Z", - "pushed_at": "2025-04-30T17:10:30Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-40891.json b/2024/CVE-2024-40891.json new file mode 100644 index 0000000000..dfa9196161 --- /dev/null +++ b/2024/CVE-2024-40891.json @@ -0,0 +1,43 @@ +[ + { + "id": 1333485026, + "name": "zyxel-p870hn-hardware-hacking", + "full_name": "Danyw24\/zyxel-p870hn-hardware-hacking", + "owner": { + "login": "Danyw24", + "id": 81335686, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/81335686?v=4", + "html_url": "https:\/\/github.com\/Danyw24", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Danyw24\/zyxel-p870hn-hardware-hacking", + "description": "From a bare PCB to root: hardware-hacking a ZyXEL P-870HN (BCM6368) over UART — CVE-2025-0890 + CVE-2024-40891, on my own hardware.", + "fork": false, + "created_at": "2026-08-13T19:47:46Z", + "updated_at": "2026-08-13T19:48:42Z", + "pushed_at": "2026-08-13T19:48:37Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "bcm6368", + "embedded-security", + "hardware-hacking", + "iot-security", + "reverse-engineering", + "uart", + "zyxel" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2024/CVE-2024-40898.json b/2024/CVE-2024-40898.json deleted file mode 100644 index 9678deac11..0000000000 --- a/2024/CVE-2024-40898.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 1001912107, - "name": "CVE-2024-40898", - "full_name": "anilpatel199n\/CVE-2024-40898", - "owner": { - "login": "anilpatel199n", - "id": 25847326, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25847326?v=4", - "html_url": "https:\/\/github.com\/anilpatel199n", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/anilpatel199n\/CVE-2024-40898", - "description": "This Python script checks for the presence of CVE-2024-40898, a critical vulnerability in Apache HTTP Server that may allow SSL\/TLS certificate verification bypass under certain misconfigurations. It initiates an SSL connection to the target server and sends a HEAD request.", - "fork": false, - "created_at": "2025-06-14T09:57:52Z", - "updated_at": "2025-06-14T09:59:14Z", - "pushed_at": "2025-06-14T09:59:09Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1011295040, - "name": "CVE-2024-40898-SSL-Bypass-Detection", - "full_name": "ForceEA001\/CVE-2024-40898-SSL-Bypass-Detection", - "owner": { - "login": "ForceEA001", - "id": 217317831, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/217317831?v=4", - "html_url": "https:\/\/github.com\/ForceEA001", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ForceEA001\/CVE-2024-40898-SSL-Bypass-Detection", - "description": "This Python script is a Proof-of-Concept (PoC) scanner for detecting the vulnerability CVE-2024-40898, which affects Apache HTTP Server’s SSL certificate validation. ", - "fork": false, - "created_at": "2025-06-30T15:40:13Z", - "updated_at": "2026-07-09T09:51:21Z", - "pushed_at": "2025-06-30T16:17:46Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-41570.json b/2024/CVE-2024-41570.json index 636768f076..3acccd8d85 100644 --- a/2024/CVE-2024-41570.json +++ b/2024/CVE-2024-41570.json @@ -31,143 +31,5 @@ "watchers": 76, "score": 0, "subscribers_count": 2 - }, - { - "id": 919035435, - "name": "CVE-2024-41570-SSRF-RCE", - "full_name": "HimmeL-Byte\/CVE-2024-41570-SSRF-RCE", - "owner": { - "login": "HimmeL-Byte", - "id": 128112182, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/128112182?v=4", - "html_url": "https:\/\/github.com\/HimmeL-Byte", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/HimmeL-Byte\/CVE-2024-41570-SSRF-RCE", - "description": "Havoc SSRF to RCE", - "fork": false, - "created_at": "2025-01-19T14:48:41Z", - "updated_at": "2025-12-18T22:41:06Z", - "pushed_at": "2025-01-20T01:32:54Z", - "stargazers_count": 16, - "watchers_count": 16, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 16, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 919174763, - "name": "CVE-2024-41570-Havoc-C2-RCE", - "full_name": "leo-mitch\/CVE-2024-41570-Havoc-C2-RCE", - "owner": { - "login": "leo-mitch", - "id": 179417827, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/179417827?v=4", - "html_url": "https:\/\/github.com\/leo-mitch", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/leo-mitch\/CVE-2024-41570-Havoc-C2-RCE", - "description": "This is a Chained RCE in the Havoc C2 framework using github.com\/chebuya and github.com\/IncludeSecurity pocs", - "fork": false, - "created_at": "2025-01-19T22:03:41Z", - "updated_at": "2025-05-16T05:34:43Z", - "pushed_at": "2025-01-22T13:46:56Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 919853961, - "name": "Havoc-C2-SSRF-to-RCE", - "full_name": "sebr-dev\/Havoc-C2-SSRF-to-RCE", - "owner": { - "login": "sebr-dev", - "id": 192042130, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/192042130?v=4", - "html_url": "https:\/\/github.com\/sebr-dev", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sebr-dev\/Havoc-C2-SSRF-to-RCE", - "description": "This is a modified version of the CVE-2024-41570 SSRF PoC from @chebuya chained with the auth RCE exploit from @hyperreality. This exploit executes code remotely to a target due to multiple vulnerabilities in Havoc C2 Framework. (https:\/\/github.com\/HavocFramework\/Havoc) ", - "fork": false, - "created_at": "2025-01-21T06:12:33Z", - "updated_at": "2026-07-04T21:14:01Z", - "pushed_at": "2025-01-21T06:59:50Z", - "stargazers_count": 9, - "watchers_count": 9, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 9, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 919943347, - "name": "CVE-2024-41570", - "full_name": "diemoeve\/CVE-2024-41570", - "owner": { - "login": "diemoeve", - "id": 105520646, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105520646?v=4", - "html_url": "https:\/\/github.com\/diemoeve", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/diemoeve\/CVE-2024-41570", - "description": "Automated Reverse Shell Exploit via WebSocket | Havoc-C2-SSRF with RCE", - "fork": false, - "created_at": "2025-01-21T09:41:05Z", - "updated_at": "2026-04-15T18:00:24Z", - "pushed_at": "2025-05-30T07:32:59Z", - "stargazers_count": 12, - "watchers_count": 12, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "havoc", - "havoc-rce", - "havoc2", - "havocexploit", - "havocframework" - ], - "visibility": "public", - "forks": 2, - "watchers": 12, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2024/CVE-2024-415770.json b/2024/CVE-2024-415770.json deleted file mode 100644 index d907c19764..0000000000 --- a/2024/CVE-2024-415770.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 920749656, - "name": "CVE-2024-415770-ssrf-rce", - "full_name": "0dinox\/CVE-2024-415770-ssrf-rce", - "owner": { - "login": "0dinox", - "id": 189102719, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/189102719?v=4", - "html_url": "https:\/\/github.com\/0dinox", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0dinox\/CVE-2024-415770-ssrf-rce", - "description": null, - "fork": false, - "created_at": "2025-01-22T17:54:01Z", - "updated_at": "2025-10-12T15:00:51Z", - "pushed_at": "2025-01-22T18:13:21Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-41713.json b/2024/CVE-2024-41713.json index 09e78787ad..b0e398ba34 100644 --- a/2024/CVE-2024-41713.json +++ b/2024/CVE-2024-41713.json @@ -97,38 +97,5 @@ "watchers": 0, "score": 0, "subscribers_count": 1 - }, - { - "id": 985646517, - "name": "CVE-2024-41713-PoC-exploit", - "full_name": "gunyakit\/CVE-2024-41713-PoC-exploit", - "owner": { - "login": "gunyakit", - "id": 90493325, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90493325?v=4", - "html_url": "https:\/\/github.com\/gunyakit", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/gunyakit\/CVE-2024-41713-PoC-exploit", - "description": "Mitel MiCollab Authentication Bypass to Arbitrary File Read", - "fork": false, - "created_at": "2025-05-18T08:12:40Z", - "updated_at": "2025-05-18T08:16:21Z", - "pushed_at": "2025-05-18T08:16:18Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2024/CVE-2024-41817.json b/2024/CVE-2024-41817.json deleted file mode 100644 index 0541d9d64a..0000000000 --- a/2024/CVE-2024-41817.json +++ /dev/null @@ -1,86 +0,0 @@ -[ - { - "id": 950967556, - "name": "CVE-2024-41817-poc", - "full_name": "Dxsk\/CVE-2024-41817-poc", - "owner": { - "login": "Dxsk", - "id": 43427519, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43427519?v=4", - "html_url": "https:\/\/github.com\/Dxsk", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Dxsk\/CVE-2024-41817-poc", - "description": "CVE-2024-41817 POC ImageMagick <= 7.1.1-35 Arbitrary Code Execution", - "fork": false, - "created_at": "2025-03-19T00:48:54Z", - "updated_at": "2026-07-03T23:12:02Z", - "pushed_at": "2025-03-19T14:20:14Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "arbitrary-code-execution", - "cve", - "cve-2024-41817", - "imagemagick", - "offensive-security", - "paramiko", - "poc", - "python", - "ssh" - ], - "visibility": "public", - "forks": 0, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1006050152, - "name": "AutoPwn-Titanic.htb", - "full_name": "maikneysm\/AutoPwn-Titanic.htb", - "owner": { - "login": "maikneysm", - "id": 207259737, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/207259737?v=4", - "html_url": "https:\/\/github.com\/maikneysm", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/maikneysm\/AutoPwn-Titanic.htb", - "description": "This is an automated exploitation script for the Hack The Box machine *Titanic*. It extracts Gitea user hashes via LFI, assists in cracking them, and exploits an ImageMagick vulnerability (CVE-2024-41817) to gain root access via a malicious shared library.", - "fork": false, - "created_at": "2025-06-21T11:32:09Z", - "updated_at": "2025-06-21T17:35:22Z", - "pushed_at": "2025-06-21T17:35:19Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "autopwn", - "cybersecurity", - "htb", - "htb-scripts", - "htb-writeups", - "python3", - "read-team" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-42007.json b/2024/CVE-2024-42007.json deleted file mode 100644 index b4a66c6332..0000000000 --- a/2024/CVE-2024-42007.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 961419333, - "name": "CVE_2024_42007", - "full_name": "BubblyCola\/CVE_2024_42007", - "owner": { - "login": "BubblyCola", - "id": 149898935, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/149898935?v=4", - "html_url": "https:\/\/github.com\/BubblyCola", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/BubblyCola\/CVE_2024_42007", - "description": "Python exploit for CVE-2024-42007 — a path traversal vulnerability in php-spx <= 0.4.15 that allows arbitrary file read via SPX_UI_URI parameter.", - "fork": false, - "created_at": "2025-04-06T13:38:54Z", - "updated_at": "2026-06-26T10:50:44Z", - "pushed_at": "2025-04-06T13:42:45Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 6, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 6, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-42008.json b/2024/CVE-2024-42008.json deleted file mode 100644 index 436037446e..0000000000 --- a/2024/CVE-2024-42008.json +++ /dev/null @@ -1,107 +0,0 @@ -[ - { - "id": 932179349, - "name": "Roundcube-CVE-2024-42008-and-CVE-2024-42010-POC", - "full_name": "victoni\/Roundcube-CVE-2024-42008-and-CVE-2024-42010-POC", - "owner": { - "login": "victoni", - "id": 32034171, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32034171?v=4", - "html_url": "https:\/\/github.com\/victoni", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/victoni\/Roundcube-CVE-2024-42008-and-CVE-2024-42010-POC", - "description": "POC for Roundcube vulnerabilities CVE-2024-42008 and CVE-2024-42010", - "fork": false, - "created_at": "2025-02-13T13:56:34Z", - "updated_at": "2025-10-29T16:38:39Z", - "pushed_at": "2025-04-12T13:43:13Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "css", - "cve", - "roundcube", - "vulnerability", - "xss" - ], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 990329884, - "name": "CVE-2024-42008-9-exploit", - "full_name": "Foxer131\/CVE-2024-42008-9-exploit", - "owner": { - "login": "Foxer131", - "id": 193660555, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/193660555?v=4", - "html_url": "https:\/\/github.com\/Foxer131", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Foxer131\/CVE-2024-42008-9-exploit", - "description": "The scripts in this repository are made to abuse CVE-2024-42008 and CVE-2024-42009. Both of these CVEs are vulnerabilities found on Roundcube 1.6.7", - "fork": false, - "created_at": "2025-05-26T00:31:36Z", - "updated_at": "2025-05-26T00:36:47Z", - "pushed_at": "2025-05-26T00:36:43Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1016970225, - "name": "Roundcube-CVE-2024-42008-POC", - "full_name": "rpgsec\/Roundcube-CVE-2024-42008-POC", - "owner": { - "login": "rpgsec", - "id": 46518109, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/46518109?v=4", - "html_url": "https:\/\/github.com\/rpgsec", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/rpgsec\/Roundcube-CVE-2024-42008-POC", - "description": null, - "fork": false, - "created_at": "2025-07-09T20:18:44Z", - "updated_at": "2025-07-09T20:52:30Z", - "pushed_at": "2025-07-09T20:52:27Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-42009.json b/2024/CVE-2024-42009.json index dfeba72f19..d35758d561 100644 --- a/2024/CVE-2024-42009.json +++ b/2024/CVE-2024-42009.json @@ -1,103 +1,4 @@ [ - { - "id": 931220183, - "name": "CVE-2024-42009", - "full_name": "0xbassiouny1337\/CVE-2024-42009", - "owner": { - "login": "0xbassiouny1337", - "id": 129872248, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/129872248?v=4", - "html_url": "https:\/\/github.com\/0xbassiouny1337", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0xbassiouny1337\/CVE-2024-42009", - "description": "This script exploits a stored XSS vulnerability (CVE-2024-42009) in Roundcube Webmail version 1.6.7. It injects a malicious payload into the webmail system, which, when triggered, exfiltrates email content from the victim’s inbox.", - "fork": false, - "created_at": "2025-02-11T23:02:42Z", - "updated_at": "2026-01-13T11:20:30Z", - "pushed_at": "2025-02-12T00:50:17Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 932392488, - "name": "CVE-2024-42009", - "full_name": "Bhanunamikaze\/CVE-2024-42009", - "owner": { - "login": "Bhanunamikaze", - "id": 17119658, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/17119658?v=4", - "html_url": "https:\/\/github.com\/Bhanunamikaze", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Bhanunamikaze\/CVE-2024-42009", - "description": "This Proof of Concept (PoC) demonstrates an exploit for CVE-2024-42009, leveraging a cross-site scripting (XSS) vulnerability to extract emails from a target webmail application. The attack injects a malicious payload that exfiltrates email content to an attacker-controlled listener.", - "fork": false, - "created_at": "2025-02-13T20:53:56Z", - "updated_at": "2025-03-03T20:13:11Z", - "pushed_at": "2025-03-03T20:13:07Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 989760983, - "name": "CVE-2024-42009-PoC", - "full_name": "DaniTheHack3r\/CVE-2024-42009-PoC", - "owner": { - "login": "DaniTheHack3r", - "id": 51076007, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51076007?v=4", - "html_url": "https:\/\/github.com\/DaniTheHack3r", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/DaniTheHack3r\/CVE-2024-42009-PoC", - "description": "CVE-2024-42009 Proof of Concept", - "fork": false, - "created_at": "2025-05-24T19:15:11Z", - "updated_at": "2025-11-27T07:13:26Z", - "pushed_at": "2025-05-30T00:21:51Z", - "stargazers_count": 7, - "watchers_count": 7, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 7, - "score": 0, - "subscribers_count": 0 - }, { "id": 1056844099, "name": "CVE-2024-42009", diff --git a/2024/CVE-2024-42049.json b/2024/CVE-2024-42049.json deleted file mode 100644 index 9671f31a02..0000000000 --- a/2024/CVE-2024-42049.json +++ /dev/null @@ -1,37 +0,0 @@ -[ - { - "id": 996994057, - "name": "CVE-2024-42049-PoC", - "full_name": "zeved\/CVE-2024-42049-PoC", - "owner": { - "login": "zeved", - "id": 1412930, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1412930?v=4", - "html_url": "https:\/\/github.com\/zeved", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/zeved\/CVE-2024-42049-PoC", - "description": "PoC for CVE-2024-42049", - "fork": false, - "created_at": "2025-06-05T19:29:17Z", - "updated_at": "2025-06-10T18:04:56Z", - "pushed_at": "2025-06-10T18:04:52Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "tightvnc" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-42327.json b/2024/CVE-2024-42327.json index 482b7011b9..2e9b6c00e6 100644 --- a/2024/CVE-2024-42327.json +++ b/2024/CVE-2024-42327.json @@ -197,72 +197,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 933535027, - "name": "CVE-2024-42327", - "full_name": "godylockz\/CVE-2024-42327", - "owner": { - "login": "godylockz", - "id": 81207744, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/81207744?v=4", - "html_url": "https:\/\/github.com\/godylockz", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/godylockz\/CVE-2024-42327", - "description": "POC for CVE-2024-42327: Zabbix Privilege Escalation -> RCE", - "fork": false, - "created_at": "2025-02-16T07:33:38Z", - "updated_at": "2025-11-03T08:51:23Z", - "pushed_at": "2025-02-17T05:05:47Z", - "stargazers_count": 9, - "watchers_count": 9, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 9, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 968761666, - "name": "CVE-2024-42327_Zabbix_SQLi", - "full_name": "874anthony\/CVE-2024-42327_Zabbix_SQLi", - "owner": { - "login": "874anthony", - "id": 59059906, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59059906?v=4", - "html_url": "https:\/\/github.com\/874anthony", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/874anthony\/CVE-2024-42327_Zabbix_SQLi", - "description": "This is for educational porpuses only. Please do not use agains unathorized systems.", - "fork": false, - "created_at": "2025-04-18T17:24:16Z", - "updated_at": "2025-12-24T17:01:24Z", - "pushed_at": "2025-04-19T03:03:34Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, { "id": 1241062556, "name": "Zabbix-CVE-2024-42327", diff --git a/2024/CVE-2024-42471.json b/2024/CVE-2024-42471.json deleted file mode 100644 index 29d38262f5..0000000000 --- a/2024/CVE-2024-42471.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 972132889, - "name": "CVE-2024-42471-PoC", - "full_name": "theMcSam\/CVE-2024-42471-PoC", - "owner": { - "login": "theMcSam", - "id": 65866483, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/65866483?v=4", - "html_url": "https:\/\/github.com\/theMcSam", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/theMcSam\/CVE-2024-42471-PoC", - "description": "unzip-stream file write\/overwrite vulnerability", - "fork": false, - "created_at": "2025-04-24T15:28:56Z", - "updated_at": "2025-04-24T15:33:27Z", - "pushed_at": "2025-04-24T15:33:23Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-43018.json b/2024/CVE-2024-43018.json deleted file mode 100644 index 9f50b75083..0000000000 --- a/2024/CVE-2024-43018.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1027243347, - "name": "CVE-2024-43018", - "full_name": "joaosilva21\/CVE-2024-43018", - "owner": { - "login": "joaosilva21", - "id": 82664001, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/82664001?v=4", - "html_url": "https:\/\/github.com\/joaosilva21", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/joaosilva21\/CVE-2024-43018", - "description": "Piwigo 13.8.0 and below is vulnerable to SQL Injection in the parameters max_level and min_register. These parameters are used in ws_user_gerList function from file include\\ws_functions\\pwg.users.php and this same function that is called by ws.php file at some point can be used for searching users in advanced way in \/admin.php?page=user_list.", - "fork": false, - "created_at": "2025-07-27T16:07:12Z", - "updated_at": "2025-08-10T21:33:31Z", - "pushed_at": "2025-08-10T21:33:28Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-43425.json b/2024/CVE-2024-43425.json index ccdfda7d87..ed6ab6c678 100644 --- a/2024/CVE-2024-43425.json +++ b/2024/CVE-2024-43425.json @@ -32,109 +32,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 929093401, - "name": "Moodle-CVE-2024-43425-Exploit", - "full_name": "Snizi\/Moodle-CVE-2024-43425-Exploit", - "owner": { - "login": "Snizi", - "id": 41025154, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41025154?v=4", - "html_url": "https:\/\/github.com\/Snizi", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Snizi\/Moodle-CVE-2024-43425-Exploit", - "description": null, - "fork": false, - "created_at": "2025-02-07T19:48:05Z", - "updated_at": "2026-05-16T17:13:00Z", - "pushed_at": "2025-02-07T22:12:52Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1010057065, - "name": "CVE-2024-43425-Poc", - "full_name": "aninfosec\/CVE-2024-43425-Poc", - "owner": { - "login": "aninfosec", - "id": 65814344, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/65814344?v=4", - "html_url": "https:\/\/github.com\/aninfosec", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/aninfosec\/CVE-2024-43425-Poc", - "description": null, - "fork": false, - "created_at": "2025-06-28T08:49:30Z", - "updated_at": "2025-06-28T08:59:00Z", - "pushed_at": "2025-06-28T08:58:56Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1018807065, - "name": "Moodle-authenticated-RCE", - "full_name": "kazuya256\/Moodle-authenticated-RCE", - "owner": { - "login": "kazuya256", - "id": 204841741, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/204841741?v=4", - "html_url": "https:\/\/github.com\/kazuya256", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/kazuya256\/Moodle-authenticated-RCE", - "description": "🚀 Exploit for Moodle 4.4.0 Authenticated RCE (CVE-2024-43425) — run commands remotely ⚡", - "fork": false, - "created_at": "2025-07-13T04:52:07Z", - "updated_at": "2026-01-28T20:19:52Z", - "pushed_at": "2025-08-24T16:38:48Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "exploit", - "moodle", - "rce" - ], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 0 - }, { "id": 1075085168, "name": "cve-2024-43425", diff --git a/2024/CVE-2024-43451.json b/2024/CVE-2024-43451.json index d3a52b1f6e..d25af9e80a 100644 --- a/2024/CVE-2024-43451.json +++ b/2024/CVE-2024-43451.json @@ -1,37 +1,4 @@ [ - { - "id": 919543927, - "name": "CVE-2024-43451-POC", - "full_name": "RonF98\/CVE-2024-43451-POC", - "owner": { - "login": "RonF98", - "id": 181740430, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/181740430?v=4", - "html_url": "https:\/\/github.com\/RonF98", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/RonF98\/CVE-2024-43451-POC", - "description": "CVE-2024-43451 is a Windows NTLM vulnerability that allows an attacker to force authentication and capture NTLM hashes by using malicious shortcuts.", - "fork": false, - "created_at": "2025-01-20T15:30:55Z", - "updated_at": "2025-07-29T02:23:20Z", - "pushed_at": "2025-01-21T12:40:13Z", - "stargazers_count": 15, - "watchers_count": 15, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 15, - "score": 0, - "subscribers_count": 1 - }, { "id": 1309488020, "name": "cve-2024-43451-ntlm_hash_disclosure_reproduction", diff --git a/2024/CVE-2024-43535.json b/2024/CVE-2024-43535.json deleted file mode 100644 index fbc3612a57..0000000000 --- a/2024/CVE-2024-43535.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 997826882, - "name": "KTM_POCS", - "full_name": "jayesther\/KTM_POCS", - "owner": { - "login": "jayesther", - "id": 59216143, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/59216143?v=4", - "html_url": "https:\/\/github.com\/jayesther", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/jayesther\/KTM_POCS", - "description": "Reports and POCs for CVE 2024-43570 and CVE-2024-43535", - "fork": false, - "created_at": "2025-06-07T09:13:24Z", - "updated_at": "2026-06-04T12:52:06Z", - "pushed_at": "2025-06-07T09:42:45Z", - "stargazers_count": 31, - "watchers_count": 31, - "has_discussions": false, - "forks_count": 6, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 6, - "watchers": 31, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-43583.json b/2024/CVE-2024-43583.json deleted file mode 100644 index 8a14ba3d28..0000000000 --- a/2024/CVE-2024-43583.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 936844144, - "name": "CVE-2024-43583-PoC", - "full_name": "Kvngtheta\/CVE-2024-43583-PoC", - "owner": { - "login": "Kvngtheta", - "id": 79768241, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79768241?v=4", - "html_url": "https:\/\/github.com\/Kvngtheta", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Kvngtheta\/CVE-2024-43583-PoC", - "description": "Proof of Concept for CVE-2024-43583", - "fork": false, - "created_at": "2025-02-21T19:37:05Z", - "updated_at": "2025-02-25T04:21:50Z", - "pushed_at": "2025-02-21T19:50:25Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-4367.json b/2024/CVE-2024-4367.json index f854b2072e..a324fb5785 100644 --- a/2024/CVE-2024-4367.json +++ b/2024/CVE-2024-4367.json @@ -378,322 +378,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 934328342, - "name": "CVE-2024-4367-PoC", - "full_name": "kabiri-labs\/CVE-2024-4367-PoC", - "owner": { - "login": "kabiri-labs", - "id": 56630479, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/56630479?v=4", - "html_url": "https:\/\/github.com\/kabiri-labs", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/kabiri-labs\/CVE-2024-4367-PoC", - "description": "This Proof of Concept (PoC) demonstrates the exploitation of the CVE-2024-4367 vulnerability, which involves Cross-Site Scripting (XSS) attacks.", - "fork": false, - "created_at": "2025-02-17T16:40:21Z", - "updated_at": "2025-02-20T07:05:30Z", - "pushed_at": "2025-02-17T17:31:54Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 954800415, - "name": "CVE-2024-4367-POC-PDFJS", - "full_name": "elamani-drawing\/CVE-2024-4367-POC-PDFJS", - "owner": { - "login": "elamani-drawing", - "id": 67936786, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/67936786?v=4", - "html_url": "https:\/\/github.com\/elamani-drawing", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/elamani-drawing\/CVE-2024-4367-POC-PDFJS", - "description": "PoC (Proof of Concept) de la CVE-2024-4367 - Vulnérabilité RCE dans libwebp. Démonstration complète incluant : création de payloads, scénarios d'attaque, analyse des risques et serveur Express.js de test.", - "fork": false, - "created_at": "2025-03-25T16:27:24Z", - "updated_at": "2025-08-27T19:26:40Z", - "pushed_at": "2025-03-27T09:51:25Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "express", - "firefox", - "html-css-javascript", - "libwebp", - "mozilla-firefox", - "nodejs", - "pdf", - "pdf-lib", - "pdfjs-dist", - "python", - "rce", - "xss" - ], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 961229845, - "name": "CVE-2024-4367", - "full_name": "VVeakee\/CVE-2024-4367", - "owner": { - "login": "VVeakee", - "id": 85714114, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/85714114?v=4", - "html_url": "https:\/\/github.com\/VVeakee", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/VVeakee\/CVE-2024-4367", - "description": null, - "fork": false, - "created_at": "2025-04-06T03:37:01Z", - "updated_at": "2025-04-06T03:42:21Z", - "pushed_at": "2025-04-06T03:42:18Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 964975069, - "name": "cve-pdf-host", - "full_name": "BektiHandoyo\/cve-pdf-host", - "owner": { - "login": "BektiHandoyo", - "id": 142807993, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/142807993?v=4", - "html_url": "https:\/\/github.com\/BektiHandoyo", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/BektiHandoyo\/cve-pdf-host", - "description": "PDF host for CVE-2024-4367", - "fork": false, - "created_at": "2025-04-12T06:17:33Z", - "updated_at": "2025-04-12T07:57:18Z", - "pushed_at": "2025-04-12T07:57:15Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 965808811, - "name": "Hacking-pdf.js-vulnerability", - "full_name": "Bhavyakcwestern\/Hacking-pdf.js-vulnerability", - "owner": { - "login": "Bhavyakcwestern", - "id": 183052704, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/183052704?v=4", - "html_url": "https:\/\/github.com\/Bhavyakcwestern", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Bhavyakcwestern\/Hacking-pdf.js-vulnerability", - "description": "CVE-2024-4367", - "fork": false, - "created_at": "2025-04-14T00:00:49Z", - "updated_at": "2025-06-28T18:14:33Z", - "pushed_at": "2025-06-28T18:14:30Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 984591029, - "name": "CVE-2024-4367-hands-on", - "full_name": "PenguinCabinet\/CVE-2024-4367-hands-on", - "owner": { - "login": "PenguinCabinet", - "id": 35991630, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/35991630?v=4", - "html_url": "https:\/\/github.com\/PenguinCabinet", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/PenguinCabinet\/CVE-2024-4367-hands-on", - "description": null, - "fork": false, - "created_at": "2025-05-16T07:19:37Z", - "updated_at": "2025-06-09T03:36:05Z", - "pushed_at": "2025-05-22T04:42:48Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2024-4367", - "cybersecurity", - "firefox", - "hands-on", - "python" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1010265228, - "name": "cve-2024-4367-poc", - "full_name": "AnomalousVectors\/cve-2024-4367-poc", - "owner": { - "login": "AnomalousVectors", - "id": 220130607, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/220130607?v=4", - "html_url": "https:\/\/github.com\/AnomalousVectors", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/AnomalousVectors\/cve-2024-4367-poc", - "description": "POC for PDF JS' CVE-2024-4367 vuln", - "fork": false, - "created_at": "2025-06-28T17:46:10Z", - "updated_at": "2026-08-01T16:13:19Z", - "pushed_at": "2025-06-28T19:25:44Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1042501983, - "name": "CVE-2024-4367", - "full_name": "0xr2r\/CVE-2024-4367", - "owner": { - "login": "0xr2r", - "id": 72355033, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/72355033?v=4", - "html_url": "https:\/\/github.com\/0xr2r", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0xr2r\/CVE-2024-4367", - "description": null, - "fork": false, - "created_at": "2025-08-22T05:51:15Z", - "updated_at": "2025-08-22T06:15:22Z", - "pushed_at": "2025-08-22T06:15:19Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1044171181, - "name": "Odoo_PDFjs_CVE-2024-4367.pdf", - "full_name": "1337rokudenashi\/Odoo_PDFjs_CVE-2024-4367.pdf", - "owner": { - "login": "1337rokudenashi", - "id": 147819995, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/147819995?v=4", - "html_url": "https:\/\/github.com\/1337rokudenashi", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/1337rokudenashi\/Odoo_PDFjs_CVE-2024-4367.pdf", - "description": "Odoo ≤17 is vulnerable to CVE-2024-4367, allowing arbitrary JavaScript execution via PDF.js.", - "fork": false, - "created_at": "2025-08-25T09:39:04Z", - "updated_at": "2025-09-17T02:32:01Z", - "pushed_at": "2025-08-25T10:02:20Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 0 - }, { "id": 1244824112, "name": "CVE-2024-4367-PDF.js-xss", diff --git a/2024/CVE-2024-43788.json b/2024/CVE-2024-43788.json deleted file mode 100644 index 8f66729190..0000000000 --- a/2024/CVE-2024-43788.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 982008014, - "name": "webpack-cve-2024-43788", - "full_name": "batzionb\/webpack-cve-2024-43788", - "owner": { - "login": "batzionb", - "id": 22211154, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/22211154?v=4", - "html_url": "https:\/\/github.com\/batzionb", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/batzionb\/webpack-cve-2024-43788", - "description": null, - "fork": false, - "created_at": "2025-05-12T08:35:14Z", - "updated_at": "2025-05-12T08:36:36Z", - "pushed_at": "2025-05-12T08:36:32Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-43917.json b/2024/CVE-2024-43917.json index 323dec52e6..7dc755be15 100644 --- a/2024/CVE-2024-43917.json +++ b/2024/CVE-2024-43917.json @@ -31,38 +31,5 @@ "watchers": 8, "score": 0, "subscribers_count": 1 - }, - { - "id": 1008600196, - "name": "CVE-2024-43917", - "full_name": "sug4r-wr41th\/CVE-2024-43917", - "owner": { - "login": "sug4r-wr41th", - "id": 136193030, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/136193030?v=4", - "html_url": "https:\/\/github.com\/sug4r-wr41th", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sug4r-wr41th\/CVE-2024-43917", - "description": "TI WooCommerce Wishlist (WordPress plugin) <= 2.8.2 CVE-2024-43917 PoC", - "fork": false, - "created_at": "2025-06-25T19:52:52Z", - "updated_at": "2025-06-25T19:53:45Z", - "pushed_at": "2025-06-25T19:53:42Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2024/CVE-2024-43998.json b/2024/CVE-2024-43998.json index ca4f4172a0..4f315442d7 100644 --- a/2024/CVE-2024-43998.json +++ b/2024/CVE-2024-43998.json @@ -31,38 +31,5 @@ "watchers": 1, "score": 0, "subscribers_count": 1 - }, - { - "id": 919518008, - "name": "CVE-2024-43998", - "full_name": "Nxploited\/CVE-2024-43998", - "owner": { - "login": "Nxploited", - "id": 188819918, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4", - "html_url": "https:\/\/github.com\/Nxploited", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-43998", - "description": "Missing Authorization vulnerability in WebsiteinWP Blogpoet allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Blogpoet: from n\/a through 1.0.3.", - "fork": false, - "created_at": "2025-01-20T14:37:49Z", - "updated_at": "2025-01-20T15:11:00Z", - "pushed_at": "2025-01-20T15:10:59Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2024/CVE-2024-44258.json b/2024/CVE-2024-44258.json index a351c0e9d4..933c3c1668 100644 --- a/2024/CVE-2024-44258.json +++ b/2024/CVE-2024-44258.json @@ -31,38 +31,5 @@ "watchers": 89, "score": 0, "subscribers_count": 1 - }, - { - "id": 985535889, - "name": "POC-CVE-2024-44258-Py", - "full_name": "missaels235\/POC-CVE-2024-44258-Py", - "owner": { - "login": "missaels235", - "id": 74515273, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74515273?v=4", - "html_url": "https:\/\/github.com\/missaels235", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/missaels235\/POC-CVE-2024-44258-Py", - "description": null, - "fork": false, - "created_at": "2025-05-18T01:18:48Z", - "updated_at": "2026-02-21T16:10:59Z", - "pushed_at": "2025-05-18T01:29:50Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 2 } ] \ No newline at end of file diff --git a/2024/CVE-2024-44308.json b/2024/CVE-2024-44308.json deleted file mode 100644 index 827afb62f2..0000000000 --- a/2024/CVE-2024-44308.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 962252413, - "name": "cve-2024-44308", - "full_name": "migopp\/cve-2024-44308", - "owner": { - "login": "migopp", - "id": 128272843, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/128272843?v=4", - "html_url": "https:\/\/github.com\/migopp", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/migopp\/cve-2024-44308", - "description": "DFG register allocation bug in JavaScriptCore", - "fork": false, - "created_at": "2025-04-07T22:03:18Z", - "updated_at": "2025-05-09T18:27:37Z", - "pushed_at": "2025-05-09T18:27:33Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-44313.json b/2024/CVE-2024-44313.json deleted file mode 100644 index d566893b40..0000000000 --- a/2024/CVE-2024-44313.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 951584504, - "name": "CVE-2024-44313", - "full_name": "chessredoffsec\/CVE-2024-44313", - "owner": { - "login": "chessredoffsec", - "id": 86935257, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/86935257?v=4", - "html_url": "https:\/\/github.com\/chessredoffsec", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/chessredoffsec\/CVE-2024-44313", - "description": "Estudo de Caso EPSS", - "fork": false, - "created_at": "2025-03-19T23:11:09Z", - "updated_at": "2025-04-29T10:51:24Z", - "pushed_at": "2025-04-29T10:51:21Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-44378.json b/2024/CVE-2024-44378.json deleted file mode 100644 index 6f3997ff4c..0000000000 --- a/2024/CVE-2024-44378.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 930999813, - "name": "CVE-2024-44378", - "full_name": "aezdmr\/CVE-2024-44378", - "owner": { - "login": "aezdmr", - "id": 28443597, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/28443597?v=4", - "html_url": "https:\/\/github.com\/aezdmr", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/aezdmr\/CVE-2024-44378", - "description": null, - "fork": false, - "created_at": "2025-02-11T15:03:17Z", - "updated_at": "2025-02-11T15:03:18Z", - "pushed_at": "2025-02-11T15:03:18Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-44871.json b/2024/CVE-2024-44871.json deleted file mode 100644 index 136ebb216f..0000000000 --- a/2024/CVE-2024-44871.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 962145811, - "name": "CVE-2024-44871", - "full_name": "vances25\/CVE-2024-44871", - "owner": { - "login": "vances25", - "id": 166838321, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/166838321?v=4", - "html_url": "https:\/\/github.com\/vances25", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/vances25\/CVE-2024-44871", - "description": null, - "fork": false, - "created_at": "2025-04-07T18:07:02Z", - "updated_at": "2025-04-07T20:54:58Z", - "pushed_at": "2025-04-07T20:54:55Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-45195.json b/2024/CVE-2024-45195.json deleted file mode 100644 index f9afcce46b..0000000000 --- a/2024/CVE-2024-45195.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1024643157, - "name": "CVE-2024-45195", - "full_name": "wyyazjjl\/CVE-2024-45195", - "owner": { - "login": "wyyazjjl", - "id": 195424116, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/195424116?v=4", - "html_url": "https:\/\/github.com\/wyyazjjl", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/wyyazjjl\/CVE-2024-45195", - "description": null, - "fork": false, - "created_at": "2025-07-23T03:20:09Z", - "updated_at": "2025-07-23T03:23:31Z", - "pushed_at": "2025-07-23T03:23:28Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-45337.json b/2024/CVE-2024-45337.json index 66e61964ff..0706e9c978 100644 --- a/2024/CVE-2024-45337.json +++ b/2024/CVE-2024-45337.json @@ -75,39 +75,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 921764874, - "name": "CVE-2024-45337", - "full_name": "peace-maker\/CVE-2024-45337", - "owner": { - "login": "peace-maker", - "id": 1635147, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/1635147?v=4", - "html_url": "https:\/\/github.com\/peace-maker", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/peace-maker\/CVE-2024-45337", - "description": "Proof of Concept for CVE-2024-45337 against Gitea and Forgejo", - "fork": false, - "created_at": "2025-01-24T15:17:47Z", - "updated_at": "2025-04-29T12:33:00Z", - "pushed_at": "2025-01-24T15:18:15Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, { "id": 1209401513, "name": "gogs", diff --git a/2024/CVE-2024-45352.json b/2024/CVE-2024-45352.json deleted file mode 100644 index b67dafbe09..0000000000 --- a/2024/CVE-2024-45352.json +++ /dev/null @@ -1,134 +0,0 @@ -[ - { - "id": 1017734524, - "name": "CVE-2024-45352", - "full_name": "Edwins907\/CVE-2024-45352", - "owner": { - "login": "Edwins907", - "id": 220288455, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/220288455?v=4", - "html_url": "https:\/\/github.com\/Edwins907", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Edwins907\/CVE-2024-45352", - "description": "vulnerability in Xiaomi (CVE-2024-45352)", - "fork": false, - "created_at": "2025-07-11T02:49:27Z", - "updated_at": "2025-07-30T11:26:30Z", - "pushed_at": "2025-07-30T11:26:26Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1017736083, - "name": "CVE-2024-45352-xiaomi", - "full_name": "Edwins907\/CVE-2024-45352-xiaomi", - "owner": { - "login": "Edwins907", - "id": 220288455, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/220288455?v=4", - "html_url": "https:\/\/github.com\/Edwins907", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Edwins907\/CVE-2024-45352-xiaomi", - "description": "Technical report about a critical vulnerability in Xiaomi (CVE-2024-45352)", - "fork": false, - "created_at": "2025-07-11T02:53:58Z", - "updated_at": "2025-07-11T02:53:59Z", - "pushed_at": "2025-07-11T02:53:59Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1017738150, - "name": "xiaomi-cve-2024-45352", - "full_name": "Edwins907\/xiaomi-cve-2024-45352", - "owner": { - "login": "Edwins907", - "id": 220288455, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/220288455?v=4", - "html_url": "https:\/\/github.com\/Edwins907", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Edwins907\/xiaomi-cve-2024-45352", - "description": "Reporte técnico sobre vulnerabilidad crítica de Xiaomi ", - "fork": false, - "created_at": "2025-07-11T02:59:48Z", - "updated_at": "2025-07-11T04:08:36Z", - "pushed_at": "2025-07-11T04:08:33Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1017825777, - "name": "-CVE-2024-45352", - "full_name": "Edwins907\/-CVE-2024-45352", - "owner": { - "login": "Edwins907", - "id": 220288455, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/220288455?v=4", - "html_url": "https:\/\/github.com\/Edwins907", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Edwins907\/-CVE-2024-45352", - "description": "Technical report about a critical vulnerability in Xiaomi (CVE-2024-45352)", - "fork": false, - "created_at": "2025-07-11T06:48:40Z", - "updated_at": "2025-07-31T12:07:56Z", - "pushed_at": "2025-07-31T12:07:53Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-45436.json b/2024/CVE-2024-45436.json deleted file mode 100644 index fa71349766..0000000000 --- a/2024/CVE-2024-45436.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 968217543, - "name": "CVE-2024-45436", - "full_name": "srcx404\/CVE-2024-45436", - "owner": { - "login": "srcx404", - "id": 130750300, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/130750300?v=4", - "html_url": "https:\/\/github.com\/srcx404", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/srcx404\/CVE-2024-45436", - "description": "exploit script for CVE-2024-45436", - "fork": false, - "created_at": "2025-04-17T17:46:03Z", - "updated_at": "2026-07-03T13:04:31Z", - "pushed_at": "2025-04-17T17:48:46Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 5, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-45519.json b/2024/CVE-2024-45519.json index a0e9eb5831..3f1fbe987b 100644 --- a/2024/CVE-2024-45519.json +++ b/2024/CVE-2024-45519.json @@ -64,38 +64,5 @@ "watchers": 138, "score": 0, "subscribers_count": 3 - }, - { - "id": 945180411, - "name": "CVE-2024-45519", - "full_name": "sec13b\/CVE-2024-45519", - "owner": { - "login": "sec13b", - "id": 123419537, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123419537?v=4", - "html_url": "https:\/\/github.com\/sec13b", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sec13b\/CVE-2024-45519", - "description": "Zimbra CVE-2024-45519", - "fork": false, - "created_at": "2025-03-08T20:55:57Z", - "updated_at": "2025-03-08T20:56:42Z", - "pushed_at": "2025-03-08T20:56:38Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2024/CVE-2024-45590.json b/2024/CVE-2024-45590.json index 028b63e5fe..80c8aa71ea 100644 --- a/2024/CVE-2024-45590.json +++ b/2024/CVE-2024-45590.json @@ -1,37 +1,4 @@ [ - { - "id": 1048875056, - "name": "CVE-2024-45590", - "full_name": "dhruvik-git\/CVE-2024-45590", - "owner": { - "login": "dhruvik-git", - "id": 229893485, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/229893485?v=4", - "html_url": "https:\/\/github.com\/dhruvik-git", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dhruvik-git\/CVE-2024-45590", - "description": "Exploit for CVE-2024-45590", - "fork": false, - "created_at": "2025-09-02T06:47:34Z", - "updated_at": "2026-03-19T01:43:53Z", - "pushed_at": "2025-09-02T06:48:44Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, { "id": 1149962875, "name": "CVE-2024-45590-PoC", diff --git a/2024/CVE-2024-4577.json b/2024/CVE-2024-4577.json index a86623e100..c3bddb9f41 100644 --- a/2024/CVE-2024-4577.json +++ b/2024/CVE-2024-4577.json @@ -1681,374 +1681,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 932702088, - "name": "php-cgi-cve-2024-4577", - "full_name": "tpdlshdmlrkfmcla\/php-cgi-cve-2024-4577", - "owner": { - "login": "tpdlshdmlrkfmcla", - "id": 58906858, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/58906858?v=4", - "html_url": "https:\/\/github.com\/tpdlshdmlrkfmcla", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/tpdlshdmlrkfmcla\/php-cgi-cve-2024-4577", - "description": "php-cgi-cve-2024-4577", - "fork": false, - "created_at": "2025-02-14T11:09:15Z", - "updated_at": "2025-02-14T11:16:42Z", - "pushed_at": "2025-02-14T11:16:39Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 932931682, - "name": "CVE-2024-4577", - "full_name": "Didarul342\/CVE-2024-4577", - "owner": { - "login": "Didarul342", - "id": 149935316, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/149935316?v=4", - "html_url": "https:\/\/github.com\/Didarul342", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Didarul342\/CVE-2024-4577", - "description": null, - "fork": false, - "created_at": "2025-02-14T19:38:10Z", - "updated_at": "2025-02-14T19:44:06Z", - "pushed_at": "2025-02-14T19:44:03Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 948966458, - "name": "php-cgi-Injector", - "full_name": "Night-have-dreams\/php-cgi-Injector", - "owner": { - "login": "Night-have-dreams", - "id": 83467092, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/83467092?v=4", - "html_url": "https:\/\/github.com\/Night-have-dreams", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Night-have-dreams\/php-cgi-Injector", - "description": "一個測試CVE-2024-4577和CVE-2024-8926的安全滲透工具", - "fork": false, - "created_at": "2025-03-15T11:21:52Z", - "updated_at": "2026-08-06T16:42:00Z", - "pushed_at": "2025-03-29T09:52:56Z", - "stargazers_count": 51, - "watchers_count": 51, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 51, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 952336593, - "name": "CVE-2024-4577", - "full_name": "wilss0n\/CVE-2024-4577", - "owner": { - "login": "wilss0n", - "id": 74799541, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74799541?v=4", - "html_url": "https:\/\/github.com\/wilss0n", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/wilss0n\/CVE-2024-4577", - "description": null, - "fork": false, - "created_at": "2025-03-21T05:44:12Z", - "updated_at": "2025-03-21T10:05:22Z", - "pushed_at": "2025-03-21T10:05:18Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 965105848, - "name": "CVE-2024-4577", - "full_name": "sug4r-wr41th\/CVE-2024-4577", - "owner": { - "login": "sug4r-wr41th", - "id": 136193030, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/136193030?v=4", - "html_url": "https:\/\/github.com\/sug4r-wr41th", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sug4r-wr41th\/CVE-2024-4577", - "description": "PHP CGI CVE-2024-4577 PoC", - "fork": false, - "created_at": "2025-04-12T12:28:11Z", - "updated_at": "2025-04-18T04:55:33Z", - "pushed_at": "2025-04-12T12:28:33Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 968588913, - "name": "CVE-2024-4577-Exploit", - "full_name": "Gill-Singh-A\/CVE-2024-4577-Exploit", - "owner": { - "login": "Gill-Singh-A", - "id": 123238182, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123238182?v=4", - "html_url": "https:\/\/github.com\/Gill-Singh-A", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Gill-Singh-A\/CVE-2024-4577-Exploit", - "description": "PHP CGI Parameter Injection Vulnerability (RCE: Remote Code Execution)", - "fork": false, - "created_at": "2025-04-18T11:03:27Z", - "updated_at": "2025-08-30T21:14:41Z", - "pushed_at": "2025-04-18T12:03:41Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve", - "exploit", - "python3", - "requests" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 981913216, - "name": "CVE-2024-4577_PowerShell", - "full_name": "tntrock\/CVE-2024-4577_PowerShell", - "owner": { - "login": "tntrock", - "id": 20695184, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/20695184?v=4", - "html_url": "https:\/\/github.com\/tntrock", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/tntrock\/CVE-2024-4577_PowerShell", - "description": "使用PowsrShell掃描CVE-2024-4577", - "fork": false, - "created_at": "2025-05-12T05:10:19Z", - "updated_at": "2025-05-12T05:41:35Z", - "pushed_at": "2025-05-12T05:41:32Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 991536016, - "name": "cve-2024-4577", - "full_name": "KimJuhyeong95\/cve-2024-4577", - "owner": { - "login": "KimJuhyeong95", - "id": 212275853, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/212275853?v=4", - "html_url": "https:\/\/github.com\/KimJuhyeong95", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/KimJuhyeong95\/cve-2024-4577", - "description": null, - "fork": false, - "created_at": "2025-05-27T19:19:55Z", - "updated_at": "2025-05-27T23:28:58Z", - "pushed_at": "2025-05-27T23:28:55Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1006859283, - "name": "CVE-2024-4577", - "full_name": "byteReaper77\/CVE-2024-4577", - "owner": { - "login": "byteReaper77", - "id": 204947170, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/204947170?v=4", - "html_url": "https:\/\/github.com\/byteReaper77", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/byteReaper77\/CVE-2024-4577", - "description": "Exploit (C) CVE-2024-4577 on PHP CGI ", - "fork": false, - "created_at": "2025-06-23T05:27:17Z", - "updated_at": "2026-02-07T05:24:17Z", - "pushed_at": "2025-06-23T06:02:45Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1015082745, - "name": "CVE-2024-4577", - "full_name": "r0otk3r\/CVE-2024-4577", - "owner": { - "login": "r0otk3r", - "id": 211012408, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/211012408?v=4", - "html_url": "https:\/\/github.com\/r0otk3r", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/r0otk3r\/CVE-2024-4577", - "description": null, - "fork": false, - "created_at": "2025-07-07T01:27:47Z", - "updated_at": "2025-07-12T10:55:39Z", - "pushed_at": "2025-07-12T10:55:35Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1017999744, - "name": "PHP-CGI-INTERNAL-RCE", - "full_name": "mananjain61\/PHP-CGI-INTERNAL-RCE", - "owner": { - "login": "mananjain61", - "id": 17821270, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/17821270?v=4", - "html_url": "https:\/\/github.com\/mananjain61", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mananjain61\/PHP-CGI-INTERNAL-RCE", - "description": "Delivering PHP RCE (CVE-2024-4577) to the Local Network Servers", - "fork": false, - "created_at": "2025-07-11T12:43:06Z", - "updated_at": "2025-07-11T12:43:06Z", - "pushed_at": "2025-07-11T11:46:13Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1020478022, "name": "CVE-2024-4577", @@ -2123,105 +1755,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1041229668, - "name": "CVE-2024-4577", - "full_name": "Ianthinus\/CVE-2024-4577", - "owner": { - "login": "Ianthinus", - "id": 149395278, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/149395278?v=4", - "html_url": "https:\/\/github.com\/Ianthinus", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Ianthinus\/CVE-2024-4577", - "description": null, - "fork": false, - "created_at": "2025-08-20T07:13:51Z", - "updated_at": "2025-08-20T08:33:17Z", - "pushed_at": "2025-08-20T08:33:14Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1043385484, - "name": "PHPCGIScanner", - "full_name": "InfoSec-DB\/PHPCGIScanner", - "owner": { - "login": "InfoSec-DB", - "id": 168952831, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/168952831?v=4", - "html_url": "https:\/\/github.com\/InfoSec-DB", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/InfoSec-DB\/PHPCGIScanner", - "description": "A PHP CGI Vulnerability Scanner for CVE-2024-4577", - "fork": false, - "created_at": "2025-08-23T18:34:45Z", - "updated_at": "2025-08-23T18:37:08Z", - "pushed_at": "2025-08-23T18:37:05Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1044331710, - "name": "ctf-cve-2024-4577", - "full_name": "a1ex-var1amov\/ctf-cve-2024-4577", - "owner": { - "login": "a1ex-var1amov", - "id": 43237245, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43237245?v=4", - "html_url": "https:\/\/github.com\/a1ex-var1amov", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/a1ex-var1amov\/ctf-cve-2024-4577", - "description": null, - "fork": false, - "created_at": "2025-08-25T14:20:40Z", - "updated_at": "2025-08-25T16:03:59Z", - "pushed_at": "2025-08-25T16:03:55Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1125425627, "name": "CVE-2024-4577-rayng", diff --git a/2024/CVE-2024-45870.json b/2024/CVE-2024-45870.json deleted file mode 100644 index 2479491422..0000000000 --- a/2024/CVE-2024-45870.json +++ /dev/null @@ -1,37 +0,0 @@ -[ - { - "id": 935422265, - "name": "bandiview-7.05-vuln-PoC", - "full_name": "bshyuunn\/bandiview-7.05-vuln-PoC", - "owner": { - "login": "bshyuunn", - "id": 87067974, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/87067974?v=4", - "html_url": "https:\/\/github.com\/bshyuunn", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/bshyuunn\/bandiview-7.05-vuln-PoC", - "description": "bandiview (7.05) vuln PoC | CVE-2024-45870, CVE-2024-45871, CVE-2024-45872", - "fork": false, - "created_at": "2025-02-19T12:21:40Z", - "updated_at": "2025-10-05T11:03:39Z", - "pushed_at": "2025-06-01T10:36:28Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "poc" - ], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-46507.json b/2024/CVE-2024-46507.json deleted file mode 100644 index a1c8e8c917..0000000000 --- a/2024/CVE-2024-46507.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 942343732, - "name": "CVE-2024-46507", - "full_name": "Somchandra17\/CVE-2024-46507", - "owner": { - "login": "Somchandra17", - "id": 85082756, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/85082756?v=4", - "html_url": "https:\/\/github.com\/Somchandra17", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Somchandra17\/CVE-2024-46507", - "description": "build-script for CVE-2024-46507 and CVE-2024-46508", - "fork": false, - "created_at": "2025-03-04T00:53:37Z", - "updated_at": "2025-10-10T17:59:28Z", - "pushed_at": "2025-03-04T00:54:57Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-46981.json b/2024/CVE-2024-46981.json deleted file mode 100644 index 24a47b3d84..0000000000 --- a/2024/CVE-2024-46981.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 951088275, - "name": "CVE-2024-46981", - "full_name": "publicqi\/CVE-2024-46981", - "owner": { - "login": "publicqi", - "id": 56060664, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/56060664?v=4", - "html_url": "https:\/\/github.com\/publicqi", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/publicqi\/CVE-2024-46981", - "description": null, - "fork": false, - "created_at": "2025-03-19T06:26:31Z", - "updated_at": "2025-07-08T09:30:18Z", - "pushed_at": "2025-03-19T06:57:03Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 5, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 952312386, - "name": "CVE-2024-46981", - "full_name": "xsshk\/CVE-2024-46981", - "owner": { - "login": "xsshk", - "id": 71780423, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71780423?v=4", - "html_url": "https:\/\/github.com\/xsshk", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/xsshk\/CVE-2024-46981", - "description": null, - "fork": false, - "created_at": "2025-03-21T04:36:22Z", - "updated_at": "2025-03-21T04:36:22Z", - "pushed_at": "2025-03-19T06:57:03Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-46982.json b/2024/CVE-2024-46982.json index 688eb998da..1c3d745776 100644 --- a/2024/CVE-2024-46982.json +++ b/2024/CVE-2024-46982.json @@ -32,39 +32,6 @@ "score": 0, "subscribers_count": 2 }, - { - "id": 920943124, - "name": "CVE-2024-46982", - "full_name": "Lercas\/CVE-2024-46982", - "owner": { - "login": "Lercas", - "id": 51699499, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51699499?v=4", - "html_url": "https:\/\/github.com\/Lercas", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Lercas\/CVE-2024-46982", - "description": "POC CVE-2024-46982", - "fork": false, - "created_at": "2025-01-23T03:38:22Z", - "updated_at": "2026-04-23T10:11:29Z", - "pushed_at": "2025-01-30T22:40:29Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 5, - "score": 0, - "subscribers_count": 1 - }, { "id": 1061369465, "name": "CVE-2024-46982-NUCLEI", diff --git a/2024/CVE-2024-47051.json b/2024/CVE-2024-47051.json index 625e81533e..42b131cd59 100644 --- a/2024/CVE-2024-47051.json +++ b/2024/CVE-2024-47051.json @@ -1,37 +1,4 @@ [ - { - "id": 940402282, - "name": "CVE-2024-47051", - "full_name": "mallo-m\/CVE-2024-47051", - "owner": { - "login": "mallo-m", - "id": 155195496, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/155195496?v=4", - "html_url": "https:\/\/github.com\/mallo-m", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mallo-m\/CVE-2024-47051", - "description": "Mautic < 5.2.3 Authenticated RCE", - "fork": false, - "created_at": "2025-02-28T05:35:57Z", - "updated_at": "2026-08-03T17:04:00Z", - "pushed_at": "2025-02-28T05:36:08Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 5, - "score": 0, - "subscribers_count": 2 - }, { "id": 1066327172, "name": "CVE-2024-47051", diff --git a/2024/CVE-2024-47533.json b/2024/CVE-2024-47533.json index 5e3cf48166..0007b27664 100644 --- a/2024/CVE-2024-47533.json +++ b/2024/CVE-2024-47533.json @@ -1,108 +1,4 @@ [ - { - "id": 1036283236, - "name": "CVE-2024-47533", - "full_name": "baph00met\/CVE-2024-47533", - "owner": { - "login": "baph00met", - "id": 25869038, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25869038?v=4", - "html_url": "https:\/\/github.com\/baph00met", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/baph00met\/CVE-2024-47533", - "description": " CVE-2024-47533: Cobbler Authentication Bypass & Code Execution", - "fork": false, - "created_at": "2025-08-11T20:55:43Z", - "updated_at": "2025-08-30T15:15:51Z", - "pushed_at": "2025-08-12T09:20:32Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 3, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1036727993, - "name": "CVE-2024-47533-Cobbler-XMLRPC-Authentication-Bypass-RCE-Exploit-POC", - "full_name": "dollarboysushil\/CVE-2024-47533-Cobbler-XMLRPC-Authentication-Bypass-RCE-Exploit-POC", - "owner": { - "login": "dollarboysushil", - "id": 48991715, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48991715?v=4", - "html_url": "https:\/\/github.com\/dollarboysushil", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dollarboysushil\/CVE-2024-47533-Cobbler-XMLRPC-Authentication-Bypass-RCE-Exploit-POC", - "description": "CVE-2024-47533 is a critical authentication bypass vulnerability in Cobbler (versions 3.0.0 to before 3.2.3 and 3.3.7) allowing unauthenticated remote code execution via the XMLRPC interface.", - "fork": false, - "created_at": "2025-08-12T13:52:55Z", - "updated_at": "2026-06-12T17:33:58Z", - "pushed_at": "2025-08-12T13:54:07Z", - "stargazers_count": 8, - "watchers_count": 8, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cobbler", - "cve-2024-47533", - "privilege-escalation", - "xmlrpc" - ], - "visibility": "public", - "forks": 1, - "watchers": 8, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1036801374, - "name": "CVE-2024-47533-PoC", - "full_name": "00xCanelo\/CVE-2024-47533-PoC", - "owner": { - "login": "00xCanelo", - "id": 164969443, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/164969443?v=4", - "html_url": "https:\/\/github.com\/00xCanelo", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/00xCanelo\/CVE-2024-47533-PoC", - "description": null, - "fork": false, - "created_at": "2025-08-12T15:49:15Z", - "updated_at": "2025-08-13T23:23:37Z", - "pushed_at": "2025-08-13T23:23:34Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, { "id": 1037041908, "name": "CVE-2024-47533", @@ -135,38 +31,5 @@ "watchers": 1, "score": 0, "subscribers_count": 0 - }, - { - "id": 1037776096, - "name": "CVE-2024-47533", - "full_name": "okkotsu1\/CVE-2024-47533", - "owner": { - "login": "okkotsu1", - "id": 153486260, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/153486260?v=4", - "html_url": "https:\/\/github.com\/okkotsu1", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/okkotsu1\/CVE-2024-47533", - "description": null, - "fork": false, - "created_at": "2025-08-14T05:28:03Z", - "updated_at": "2025-10-25T09:57:54Z", - "pushed_at": "2025-08-14T16:48:47Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2024/CVE-2024-47575.json b/2024/CVE-2024-47575.json index f0f02d7f4e..28d935ca1a 100644 --- a/2024/CVE-2024-47575.json +++ b/2024/CVE-2024-47575.json @@ -31,38 +31,5 @@ "watchers": 97, "score": 0, "subscribers_count": 0 - }, - { - "id": 1022796806, - "name": "CVE-2024-47575", - "full_name": "AnnnNix\/CVE-2024-47575", - "owner": { - "login": "AnnnNix", - "id": 217398388, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/217398388?v=4", - "html_url": "https:\/\/github.com\/AnnnNix", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/AnnnNix\/CVE-2024-47575", - "description": "PoC for CVE-2024-47575", - "fork": false, - "created_at": "2025-07-19T21:07:16Z", - "updated_at": "2025-07-19T22:15:47Z", - "pushed_at": "2025-07-19T22:15:44Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2024/CVE-2024-47875.json b/2024/CVE-2024-47875.json index 318d5b7b3a..0452524811 100644 --- a/2024/CVE-2024-47875.json +++ b/2024/CVE-2024-47875.json @@ -1,37 +1,4 @@ [ - { - "id": 927554798, - "name": "-CVE-2024-47875-", - "full_name": "daikinitanda\/-CVE-2024-47875-", - "owner": { - "login": "daikinitanda", - "id": 197873512, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/197873512?v=4", - "html_url": "https:\/\/github.com\/daikinitanda", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/daikinitanda\/-CVE-2024-47875-", - "description": null, - "fork": false, - "created_at": "2025-02-05T06:34:03Z", - "updated_at": "2025-02-05T06:34:03Z", - "pushed_at": "2025-02-05T06:34:03Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1049144897, "name": "CVE-2024-47875-PhpSpreadsheet-XSS-PoC", diff --git a/2024/CVE-2024-48061.json b/2024/CVE-2024-48061.json deleted file mode 100644 index f26be817a4..0000000000 --- a/2024/CVE-2024-48061.json +++ /dev/null @@ -1,38 +0,0 @@ -[ - { - "id": 1013376984, - "name": "CVE-2024-48061", - "full_name": "BwithE\/CVE-2024-48061", - "owner": { - "login": "BwithE", - "id": 144924113, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/144924113?v=4", - "html_url": "https:\/\/github.com\/BwithE", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/BwithE\/CVE-2024-48061", - "description": "CVE-2024-48061 Langflow vulnerable to remote code execution. Poc", - "fork": false, - "created_at": "2025-07-03T19:51:23Z", - "updated_at": "2025-07-12T13:06:02Z", - "pushed_at": "2025-07-12T13:05:34Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2024-48061", - "poc" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-48248.json b/2024/CVE-2024-48248.json deleted file mode 100644 index 7f14953701..0000000000 --- a/2024/CVE-2024-48248.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 923354884, - "name": "nakivo-arbitrary-file-read-poc-CVE-2024-48248", - "full_name": "watchtowrlabs\/nakivo-arbitrary-file-read-poc-CVE-2024-48248", - "owner": { - "login": "watchtowrlabs", - "id": 99977116, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/99977116?v=4", - "html_url": "https:\/\/github.com\/watchtowrlabs", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/watchtowrlabs\/nakivo-arbitrary-file-read-poc-CVE-2024-48248", - "description": null, - "fork": false, - "created_at": "2025-01-28T04:46:13Z", - "updated_at": "2025-07-29T15:07:11Z", - "pushed_at": "2025-02-16T09:11:01Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-48307.json b/2024/CVE-2024-48307.json deleted file mode 100644 index 180ae2db6e..0000000000 --- a/2024/CVE-2024-48307.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1047877212, - "name": "CVE-2024-48307POC", - "full_name": "jisi-001\/CVE-2024-48307POC", - "owner": { - "login": "jisi-001", - "id": 187091784, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/187091784?v=4", - "html_url": "https:\/\/github.com\/jisi-001", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/jisi-001\/CVE-2024-48307POC", - "description": "jeecg-boot getDictItemsByTable接口存在SQL注入漏洞", - "fork": false, - "created_at": "2025-08-31T12:44:30Z", - "updated_at": "2025-09-02T11:24:37Z", - "pushed_at": "2025-08-31T13:00:47Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-48590.json b/2024/CVE-2024-48590.json deleted file mode 100644 index aac1a030af..0000000000 --- a/2024/CVE-2024-48590.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 951805142, - "name": "CVE-2024-48590", - "full_name": "GCatt-AS\/CVE-2024-48590", - "owner": { - "login": "GCatt-AS", - "id": 192431806, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/192431806?v=4", - "html_url": "https:\/\/github.com\/GCatt-AS", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/GCatt-AS\/CVE-2024-48590", - "description": null, - "fork": false, - "created_at": "2025-03-20T09:17:27Z", - "updated_at": "2025-05-06T06:02:31Z", - "pushed_at": "2025-05-06T06:02:27Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-48591.json b/2024/CVE-2024-48591.json deleted file mode 100644 index 7fe52f5b9c..0000000000 --- a/2024/CVE-2024-48591.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 951809387, - "name": "CVE-2024-48591", - "full_name": "GCatt-AS\/CVE-2024-48591", - "owner": { - "login": "GCatt-AS", - "id": 192431806, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/192431806?v=4", - "html_url": "https:\/\/github.com\/GCatt-AS", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/GCatt-AS\/CVE-2024-48591", - "description": null, - "fork": false, - "created_at": "2025-03-20T09:25:34Z", - "updated_at": "2025-05-06T06:03:49Z", - "pushed_at": "2025-05-06T06:03:46Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-48887.json b/2024/CVE-2024-48887.json deleted file mode 100644 index 06f4421023..0000000000 --- a/2024/CVE-2024-48887.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 963440836, - "name": "CVE-2024-48887-FortiSwitch-Exploit", - "full_name": "cybersecplayground\/CVE-2024-48887-FortiSwitch-Exploit", - "owner": { - "login": "cybersecplayground", - "id": 202598049, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/202598049?v=4", - "html_url": "https:\/\/github.com\/cybersecplayground", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/cybersecplayground\/CVE-2024-48887-FortiSwitch-Exploit", - "description": "a lightweight JavaScript snippet showcasing how unauthorized password changes can be triggered on vulnerable Fortinet FortiSwitch GUI endpoints.", - "fork": false, - "created_at": "2025-04-09T17:27:17Z", - "updated_at": "2025-11-07T13:23:01Z", - "pushed_at": "2025-04-09T17:29:58Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 963920494, - "name": "CVE-2024-48887-Exploit", - "full_name": "groshi215\/CVE-2024-48887-Exploit", - "owner": { - "login": "groshi215", - "id": 205652615, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/205652615?v=4", - "html_url": "https:\/\/github.com\/groshi215", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/groshi215\/CVE-2024-48887-Exploit", - "description": "Unverified Password Change (CWE-620)", - "fork": false, - "created_at": "2025-04-10T12:17:11Z", - "updated_at": "2025-04-10T12:21:28Z", - "pushed_at": "2025-04-10T12:20:53Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-48990.json b/2024/CVE-2024-48990.json index 10c47241f3..0a18bb08be 100644 --- a/2024/CVE-2024-48990.json +++ b/2024/CVE-2024-48990.json @@ -263,44 +263,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 933867135, - "name": "CVE-2024-48990_needrestart", - "full_name": "czeti\/CVE-2024-48990_needrestart", - "owner": { - "login": "czeti", - "id": 132905477, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/132905477?v=4", - "html_url": "https:\/\/github.com\/czeti", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/czeti\/CVE-2024-48990_needrestart", - "description": "Exploit for CVE-2024-48990 - Privilege Escalation in Needrestart 3.7-3. For eductional purposes only", - "fork": false, - "created_at": "2025-02-16T21:26:51Z", - "updated_at": "2026-01-31T13:25:35Z", - "pushed_at": "2025-02-16T22:07:07Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "offsec", - "privilege-escalation", - "redteam", - "shellcode" - ], - "visibility": "public", - "forks": 1, - "watchers": 5, - "score": 0, - "subscribers_count": 1 - }, { "id": 1085237448, "name": "CVE-2024-48990-Automatic-Exploit", diff --git a/2024/CVE-2024-49019.json b/2024/CVE-2024-49019.json deleted file mode 100644 index e60e6b2450..0000000000 --- a/2024/CVE-2024-49019.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 943175070, - "name": "CVE-2024-49019-rayng", - "full_name": "rayngnpc\/CVE-2024-49019-rayng", - "owner": { - "login": "rayngnpc", - "id": 62031029, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/62031029?v=4", - "html_url": "https:\/\/github.com\/rayngnpc", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/rayngnpc\/CVE-2024-49019-rayng", - "description": "Exploitation for CVE-2024-49019", - "fork": false, - "created_at": "2025-03-05T09:35:13Z", - "updated_at": "2026-02-02T06:14:05Z", - "pushed_at": "2025-04-07T03:12:26Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-49113.json b/2024/CVE-2024-49113.json index 65f051ed64..cde73b8c1d 100644 --- a/2024/CVE-2024-49113.json +++ b/2024/CVE-2024-49113.json @@ -1,37 +1,4 @@ [ - { - "id": 933382294, - "name": "metasploit-ldapnightmare", - "full_name": "0xMetr0\/metasploit-ldapnightmare", - "owner": { - "login": "0xMetr0", - "id": 123150752, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123150752?v=4", - "html_url": "https:\/\/github.com\/0xMetr0", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0xMetr0\/metasploit-ldapnightmare", - "description": "SafeBreaches CVE-2024-49113 POC(LdapNightmare) Integrated into Metasploit", - "fork": false, - "created_at": "2025-02-15T20:23:23Z", - "updated_at": "2025-02-15T20:42:17Z", - "pushed_at": "2025-02-15T20:42:14Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1225632438, "name": "CVE-2024-49113", diff --git a/2024/CVE-2024-49138.json b/2024/CVE-2024-49138.json index 8f32e4dda4..e61c652819 100644 --- a/2024/CVE-2024-49138.json +++ b/2024/CVE-2024-49138.json @@ -1,141 +1,4 @@ [ - { - "id": 916896042, - "name": "CVE-2024-49138-POC", - "full_name": "MrAle98\/CVE-2024-49138-POC", - "owner": { - "login": "MrAle98", - "id": 74059030, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74059030?v=4", - "html_url": "https:\/\/github.com\/MrAle98", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/MrAle98\/CVE-2024-49138-POC", - "description": "POC exploit for CVE-2024-49138", - "fork": false, - "created_at": "2025-01-15T00:43:37Z", - "updated_at": "2026-07-17T15:00:44Z", - "pushed_at": "2025-02-14T22:04:41Z", - "stargazers_count": 270, - "watchers_count": 270, - "has_discussions": false, - "forks_count": 62, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "clfs", - "exploitation", - "kernel", - "windows" - ], - "visibility": "public", - "forks": 62, - "watchers": 270, - "score": 0, - "subscribers_count": 3 - }, - { - "id": 919776614, - "name": "CVE-2024-49138-POC", - "full_name": "bananoname\/CVE-2024-49138-POC", - "owner": { - "login": "bananoname", - "id": 177087379, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/177087379?v=4", - "html_url": "https:\/\/github.com\/bananoname", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/bananoname\/CVE-2024-49138-POC", - "description": null, - "fork": false, - "created_at": "2025-01-21T01:50:34Z", - "updated_at": "2025-01-21T02:06:03Z", - "pushed_at": "2025-01-21T02:06:00Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 948461482, - "name": "SOC335-CVE-2024-49138-Exploitation-Detected", - "full_name": "DeividasTerechovas\/SOC335-CVE-2024-49138-Exploitation-Detected", - "owner": { - "login": "DeividasTerechovas", - "id": 74025143, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/74025143?v=4", - "html_url": "https:\/\/github.com\/DeividasTerechovas", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/DeividasTerechovas\/SOC335-CVE-2024-49138-Exploitation-Detected", - "description": null, - "fork": false, - "created_at": "2025-03-14T11:32:13Z", - "updated_at": "2025-03-14T13:10:23Z", - "pushed_at": "2025-03-14T13:10:20Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 971575084, - "name": "letsdefend-cve-2024-49138-investigation", - "full_name": "CyprianAtsyor\/letsdefend-cve-2024-49138-investigation", - "owner": { - "login": "CyprianAtsyor", - "id": 172041723, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/172041723?v=4", - "html_url": "https:\/\/github.com\/CyprianAtsyor", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/CyprianAtsyor\/letsdefend-cve-2024-49138-investigation", - "description": "Hands-on SOC investigation of CVE-2024-49138 using LetsDefend, VirusTotal, Hybrid Analysis, TrueFort, and ChatGPT.", - "fork": false, - "created_at": "2025-04-23T18:20:19Z", - "updated_at": "2025-04-23T19:03:50Z", - "pushed_at": "2025-04-23T19:03:47Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 977691462, "name": "SOC335-CVE-2024-49138-Exploitation-Detected", @@ -169,45 +32,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 1000862061, - "name": "SOC335-Event-ID-313-CVE-2024-49138-Exploitation-Detected--Lest-Defend-Writeup", - "full_name": "onixgod\/SOC335-Event-ID-313-CVE-2024-49138-Exploitation-Detected--Lest-Defend-Writeup", - "owner": { - "login": "onixgod", - "id": 44310990, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/44310990?v=4", - "html_url": "https:\/\/github.com\/onixgod", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/onixgod\/SOC335-Event-ID-313-CVE-2024-49138-Exploitation-Detected--Lest-Defend-Writeup", - "description": "In this lab I walked through an end-to-end intrusion that began with an external RDP break-in, used a brand-new CLFS privilege-escalation exploit (CVE-2024–49138), and ended with SYSTEM-level cloud credential harvesting. Below is the story, the evidence, and the lessons I drew from it.", - "fork": false, - "created_at": "2025-06-12T12:40:36Z", - "updated_at": "2025-06-12T13:02:58Z", - "pushed_at": "2025-06-12T13:01:15Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "alerts", - "brute-force", - "cybersecurity", - "privilege-escalation", - "soc" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1177048825, "name": "soc-investigation-powershell-edrfreeze", diff --git a/2024/CVE-2024-4947.json b/2024/CVE-2024-4947.json deleted file mode 100644 index af8b5dceff..0000000000 --- a/2024/CVE-2024-4947.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1023631922, - "name": "CVE-2024-4947", - "full_name": "bjrjk\/CVE-2024-4947", - "owner": { - "login": "bjrjk", - "id": 6657270, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/6657270?v=4", - "html_url": "https:\/\/github.com\/bjrjk", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/bjrjk\/CVE-2024-4947", - "description": "A in-the-wild V8 type confusion bug.", - "fork": false, - "created_at": "2025-07-21T13:02:16Z", - "updated_at": "2026-07-07T18:14:38Z", - "pushed_at": "2025-08-08T04:59:44Z", - "stargazers_count": 30, - "watchers_count": 30, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 30, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-4956.json b/2024/CVE-2024-4956.json index 26608623cb..e51a36783f 100644 --- a/2024/CVE-2024-4956.json +++ b/2024/CVE-2024-4956.json @@ -481,72 +481,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 955330678, - "name": "CVE-2024-4956", - "full_name": "art-of-defence\/CVE-2024-4956", - "owner": { - "login": "art-of-defence", - "id": 186928013, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/186928013?v=4", - "html_url": "https:\/\/github.com\/art-of-defence", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/art-of-defence\/CVE-2024-4956", - "description": "Detection and exploitation scripts for CVE-2024-4956", - "fork": false, - "created_at": "2025-03-26T13:27:33Z", - "updated_at": "2025-03-26T13:31:17Z", - "pushed_at": "2025-03-26T13:31:13Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1043773667, - "name": "CVE-2024-4956", - "full_name": "Buff3st-0v3rfl0w\/CVE-2024-4956", - "owner": { - "login": "Buff3st-0v3rfl0w", - "id": 56131959, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/56131959?v=4", - "html_url": "https:\/\/github.com\/Buff3st-0v3rfl0w", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Buff3st-0v3rfl0w\/CVE-2024-4956", - "description": "Quick and easy exploitation of CVE-2024-4956 for LFI.", - "fork": false, - "created_at": "2025-08-24T15:38:02Z", - "updated_at": "2025-08-24T15:53:36Z", - "pushed_at": "2025-08-24T15:53:34Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1054199213, "name": "day04-nexus-4956", diff --git a/2024/CVE-2024-49653.json b/2024/CVE-2024-49653.json deleted file mode 100644 index fc70a5d6a6..0000000000 --- a/2024/CVE-2024-49653.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 953256237, - "name": "CVE-2024-49653", - "full_name": "Nxploited\/CVE-2024-49653", - "owner": { - "login": "Nxploited", - "id": 188819918, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4", - "html_url": "https:\/\/github.com\/Nxploited", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-49653", - "description": "WordPress Portfolleo plugin <= 1.2 - Arbitrary File Upload vulnerability", - "fork": false, - "created_at": "2025-03-22T23:25:44Z", - "updated_at": "2025-03-29T20:29:20Z", - "pushed_at": "2025-03-29T20:29:17Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-49668.json b/2024/CVE-2024-49668.json deleted file mode 100644 index c61f9dac2e..0000000000 --- a/2024/CVE-2024-49668.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 953237528, - "name": "CVE-2024-49668", - "full_name": "Nxploited\/CVE-2024-49668", - "owner": { - "login": "Nxploited", - "id": 188819918, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4", - "html_url": "https:\/\/github.com\/Nxploited", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-49668", - "description": "WordPress Verbalize WP plugin <= 1.0 - Arbitrary File Upload vulnerability", - "fork": false, - "created_at": "2025-03-22T22:05:30Z", - "updated_at": "2026-03-01T14:02:13Z", - "pushed_at": "2025-03-29T20:27:55Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-50379.json b/2024/CVE-2024-50379.json index 57fbf3e5ac..01f5ed63e3 100644 --- a/2024/CVE-2024-50379.json +++ b/2024/CVE-2024-50379.json @@ -362,76 +362,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 921095914, - "name": "CVE-2024-50379", - "full_name": "pwnosec\/CVE-2024-50379", - "owner": { - "login": "pwnosec", - "id": 183417502, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/183417502?v=4", - "html_url": "https:\/\/github.com\/pwnosec", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/pwnosec\/CVE-2024-50379", - "description": "ExploitDB CVE-2024-50379 a vulnerability that enables attackers to upload a JSP shell to a vulnerable server and execute commands remotely. The exploit is especially effective when the \/uploads directory is either unprotected or missing on the target server.", - "fork": false, - "created_at": "2025-01-23T10:28:40Z", - "updated_at": "2026-02-12T20:24:02Z", - "pushed_at": "2025-01-23T11:40:26Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": true, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "apache-tomcat", - "apache-tomcat-exploiter", - "cve-2024-50379" - ], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 957564251, - "name": "CVE-2024-50379", - "full_name": "thunww\/CVE-2024-50379", - "owner": { - "login": "thunww", - "id": 157398452, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/157398452?v=4", - "html_url": "https:\/\/github.com\/thunww", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/thunww\/CVE-2024-50379", - "description": null, - "fork": false, - "created_at": "2025-03-30T17:15:44Z", - "updated_at": "2025-04-13T13:47:10Z", - "pushed_at": "2025-04-13T13:47:06Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1275383671, "name": "CVE-2024-50379", diff --git a/2024/CVE-2024-50492.json b/2024/CVE-2024-50492.json deleted file mode 100644 index 04673a31ed..0000000000 --- a/2024/CVE-2024-50492.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 955037504, - "name": "CVE-2024-50492", - "full_name": "Nxploited\/CVE-2024-50492", - "owner": { - "login": "Nxploited", - "id": 188819918, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4", - "html_url": "https:\/\/github.com\/Nxploited", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-50492", - "description": "ScottCart <= 1.1 - Unauthenticated Remote Code Execution", - "fork": false, - "created_at": "2025-03-26T02:27:01Z", - "updated_at": "2025-05-05T04:15:01Z", - "pushed_at": "2025-03-29T20:25:33Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-50562.json b/2024/CVE-2024-50562.json deleted file mode 100644 index bd691e2056..0000000000 --- a/2024/CVE-2024-50562.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1005517261, - "name": "fortinet-cve-2024-50562", - "full_name": "Shahid-BugB\/fortinet-cve-2024-50562", - "owner": { - "login": "Shahid-BugB", - "id": 175057940, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/175057940?v=4", - "html_url": "https:\/\/github.com\/Shahid-BugB", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Shahid-BugB\/fortinet-cve-2024-50562", - "description": "CVE-2024-50562 is a session management vulnerability in Fortinet SSL-VPN portals", - "fork": false, - "created_at": "2025-06-20T10:56:05Z", - "updated_at": "2025-06-21T22:26:46Z", - "pushed_at": "2025-06-21T22:26:43Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-50623.json b/2024/CVE-2024-50623.json index 7cb0b42c92..b50c348355 100644 --- a/2024/CVE-2024-50623.json +++ b/2024/CVE-2024-50623.json @@ -103,38 +103,5 @@ "watchers": 5, "score": 0, "subscribers_count": 1 - }, - { - "id": 958875344, - "name": "CVE-2024-50623-poc", - "full_name": "congdong007\/CVE-2024-50623-poc", - "owner": { - "login": "congdong007", - "id": 104914028, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/104914028?v=4", - "html_url": "https:\/\/github.com\/congdong007", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/congdong007\/CVE-2024-50623-poc", - "description": null, - "fork": false, - "created_at": "2025-04-01T22:55:08Z", - "updated_at": "2025-04-01T23:07:27Z", - "pushed_at": "2025-04-01T23:07:24Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2024/CVE-2024-5083.json b/2024/CVE-2024-5083.json deleted file mode 100644 index 0affb3ba4d..0000000000 --- a/2024/CVE-2024-5083.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1045697341, - "name": "CVE-2024-5083", - "full_name": "Roronoawjd\/CVE-2024-5083", - "owner": { - "login": "Roronoawjd", - "id": 105417063, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105417063?v=4", - "html_url": "https:\/\/github.com\/Roronoawjd", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Roronoawjd\/CVE-2024-5083", - "description": "Nexus Repository 2 SXSS POC", - "fork": false, - "created_at": "2025-08-27T15:21:03Z", - "updated_at": "2025-08-27T15:21:58Z", - "pushed_at": "2025-08-27T15:21:54Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-5084.json b/2024/CVE-2024-5084.json index 92a6adf98a..999e54e907 100644 --- a/2024/CVE-2024-5084.json +++ b/2024/CVE-2024-5084.json @@ -173,39 +173,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 933694977, - "name": "CVE-2024-5084-Auto-Exploit", - "full_name": "ModeBrutal\/CVE-2024-5084-Auto-Exploit", - "owner": { - "login": "ModeBrutal", - "id": 125843308, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/125843308?v=4", - "html_url": "https:\/\/github.com\/ModeBrutal", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ModeBrutal\/CVE-2024-5084-Auto-Exploit", - "description": null, - "fork": false, - "created_at": "2025-02-16T13:39:28Z", - "updated_at": "2025-02-16T13:39:28Z", - "pushed_at": "2025-02-16T13:39:28Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1150788668, "name": "CVE-2024-5084-Red-Team", diff --git a/2024/CVE-2024-51568.json b/2024/CVE-2024-51568.json deleted file mode 100644 index 89337882c3..0000000000 --- a/2024/CVE-2024-51568.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1048907483, - "name": "CVE-2024-51568---CyberPanel-Command-Injection-Nuclei-Template", - "full_name": "jsnv-dev\/CVE-2024-51568---CyberPanel-Command-Injection-Nuclei-Template", - "owner": { - "login": "jsnv-dev", - "id": 40733140, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/40733140?v=4", - "html_url": "https:\/\/github.com\/jsnv-dev", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/jsnv-dev\/CVE-2024-51568---CyberPanel-Command-Injection-Nuclei-Template", - "description": null, - "fork": false, - "created_at": "2025-09-02T07:51:40Z", - "updated_at": "2025-10-09T09:28:34Z", - "pushed_at": "2025-09-02T08:01:07Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-51788.json b/2024/CVE-2024-51788.json deleted file mode 100644 index 2f41a3e5ac..0000000000 --- a/2024/CVE-2024-51788.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 948838508, - "name": "CVE-2024-51788", - "full_name": "Nxploited\/CVE-2024-51788", - "owner": { - "login": "Nxploited", - "id": 188819918, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4", - "html_url": "https:\/\/github.com\/Nxploited", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-51788", - "description": "CVE-2024-51788 - WordPress The Novel Design Store Directory plugin <= 4.3.0 - Unauthenticated Arbitrary File Upload Vulnerability", - "fork": false, - "created_at": "2025-03-15T04:20:19Z", - "updated_at": "2025-07-06T03:53:29Z", - "pushed_at": "2025-03-29T20:30:05Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-51793.json b/2024/CVE-2024-51793.json index dd71bfb6ac..a2ef13dd4f 100644 --- a/2024/CVE-2024-51793.json +++ b/2024/CVE-2024-51793.json @@ -1,37 +1,4 @@ [ - { - "id": 953715560, - "name": "CVE-2024-51793", - "full_name": "Nxploited\/CVE-2024-51793", - "owner": { - "login": "Nxploited", - "id": 188819918, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4", - "html_url": "https:\/\/github.com\/Nxploited", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-51793", - "description": " WordPress RepairBuddy plugin <= 3.8115 - Arbitrary File Upload vulnerability", - "fork": false, - "created_at": "2025-03-24T00:38:21Z", - "updated_at": "2025-04-11T12:42:05Z", - "pushed_at": "2025-03-29T20:26:59Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, { "id": 984236524, "name": "CVE-2024-51793", diff --git a/2024/CVE-2024-51977.json b/2024/CVE-2024-51977.json deleted file mode 100644 index c2931e711b..0000000000 --- a/2024/CVE-2024-51977.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 988301379, - "name": "BrotherVulnerabilities", - "full_name": "sfewer-r7\/BrotherVulnerabilities", - "owner": { - "login": "sfewer-r7", - "id": 122022313, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/122022313?v=4", - "html_url": "https:\/\/github.com\/sfewer-r7", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sfewer-r7\/BrotherVulnerabilities", - "description": "Multiple Brother Devices: Multiple Vulnerabilities (CVE-2024-51977, CVE-2024-51978, CVE-2024-51979, CVE-2024-51980, CVE-2024-51981, CVE-2024-51982, CVE-2024-51983, CVE-2024-51984)", - "fork": false, - "created_at": "2025-05-22T10:52:10Z", - "updated_at": "2026-08-12T11:24:26Z", - "pushed_at": "2025-06-30T10:25:19Z", - "stargazers_count": 35, - "watchers_count": 35, - "has_discussions": false, - "forks_count": 6, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 6, - "watchers": 35, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-51996.json b/2024/CVE-2024-51996.json deleted file mode 100644 index db2fa3ff3a..0000000000 --- a/2024/CVE-2024-51996.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 966387248, - "name": "CVE-2024-51996", - "full_name": "moften\/CVE-2024-51996", - "owner": { - "login": "moften", - "id": 4262359, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/4262359?v=4", - "html_url": "https:\/\/github.com\/moften", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/moften\/CVE-2024-51996", - "description": "CVE-2024-51996 es una vulnerabilidad crítica que afecta al componente security-http del framework Symfony.", - "fork": false, - "created_at": "2025-04-14T21:02:11Z", - "updated_at": "2026-04-04T17:15:55Z", - "pushed_at": "2025-07-21T22:26:45Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-52010.json b/2024/CVE-2024-52010.json deleted file mode 100644 index 607de630ba..0000000000 --- a/2024/CVE-2024-52010.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 968586192, - "name": "-CVE-2024-52010-", - "full_name": "iuds\/-CVE-2024-52010-", - "owner": { - "login": "iuds", - "id": 159298853, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/159298853?v=4", - "html_url": "https:\/\/github.com\/iuds", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/iuds\/-CVE-2024-52010-", - "description": "exploit auto", - "fork": false, - "created_at": "2025-04-18T10:56:42Z", - "updated_at": "2025-11-18T14:12:48Z", - "pushed_at": "2025-04-18T10:57:37Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-52375.json b/2024/CVE-2024-52375.json deleted file mode 100644 index 1e35f2d03f..0000000000 --- a/2024/CVE-2024-52375.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 952828684, - "name": "CVE-2024-52375", - "full_name": "Nxploited\/CVE-2024-52375", - "owner": { - "login": "Nxploited", - "id": 188819918, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4", - "html_url": "https:\/\/github.com\/Nxploited", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-52375", - "description": "WordPress Datasets Manager by Arttia Creative plugin <= 1.5 - Arbitrary File Upload vulnerability", - "fork": false, - "created_at": "2025-03-22T00:48:02Z", - "updated_at": "2025-03-29T20:28:11Z", - "pushed_at": "2025-03-29T20:28:08Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-52402.json b/2024/CVE-2024-52402.json deleted file mode 100644 index b61914712a..0000000000 --- a/2024/CVE-2024-52402.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 950456460, - "name": "CVE-2024-52402", - "full_name": "Nxploited\/CVE-2024-52402", - "owner": { - "login": "Nxploited", - "id": 188819918, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4", - "html_url": "https:\/\/github.com\/Nxploited", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-52402", - "description": " WordPress Exclusive Content Password Protect plugin <= 1.1.0 - CSRF to Arbitrary File Upload vulnerability", - "fork": false, - "created_at": "2025-03-18T07:32:16Z", - "updated_at": "2025-03-29T20:28:55Z", - "pushed_at": "2025-03-29T20:28:51Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-52550.json b/2024/CVE-2024-52550.json deleted file mode 100644 index 29c98d852a..0000000000 --- a/2024/CVE-2024-52550.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 966840347, - "name": "CVE-2024-52550", - "full_name": "Anton-ai111\/CVE-2024-52550", - "owner": { - "login": "Anton-ai111", - "id": 138965551, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/138965551?v=4", - "html_url": "https:\/\/github.com\/Anton-ai111", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Anton-ai111\/CVE-2024-52550", - "description": "CVE-2024-52550", - "fork": false, - "created_at": "2025-04-15T14:30:43Z", - "updated_at": "2025-04-21T08:40:10Z", - "pushed_at": "2025-04-15T14:31:28Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-52794.json b/2024/CVE-2024-52794.json deleted file mode 100644 index cbe9864a09..0000000000 --- a/2024/CVE-2024-52794.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1025137899, - "name": "CVE-2024-52794-Discourse-Stored-XSS", - "full_name": "Beesco00\/CVE-2024-52794-Discourse-Stored-XSS", - "owner": { - "login": "Beesco00", - "id": 189144698, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/189144698?v=4", - "html_url": "https:\/\/github.com\/Beesco00", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Beesco00\/CVE-2024-52794-Discourse-Stored-XSS", - "description": "Stored XSS in Discourse via image filename - CVE-2024-52794", - "fork": false, - "created_at": "2025-07-23T19:31:18Z", - "updated_at": "2025-07-23T20:38:19Z", - "pushed_at": "2025-07-23T20:38:15Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-53027.json b/2024/CVE-2024-53027.json deleted file mode 100644 index 073a31fb54..0000000000 --- a/2024/CVE-2024-53027.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 962694812, - "name": "CVE-2024-53027-WIP", - "full_name": "ladyg00se\/CVE-2024-53027-WIP", - "owner": { - "login": "ladyg00se", - "id": 75663122, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/75663122?v=4", - "html_url": "https:\/\/github.com\/ladyg00se", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ladyg00se\/CVE-2024-53027-WIP", - "description": "Work in Progress for POC", - "fork": false, - "created_at": "2025-04-08T14:34:46Z", - "updated_at": "2025-07-11T09:05:19Z", - "pushed_at": "2025-04-08T14:58:32Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-53591.json b/2024/CVE-2024-53591.json deleted file mode 100644 index 8a71a6b0fb..0000000000 --- a/2024/CVE-2024-53591.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 965474595, - "name": "CVE-2024-53591", - "full_name": "aljoharasubaie\/CVE-2024-53591", - "owner": { - "login": "aljoharasubaie", - "id": 90615766, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90615766?v=4", - "html_url": "https:\/\/github.com\/aljoharasubaie", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/aljoharasubaie\/CVE-2024-53591", - "description": null, - "fork": false, - "created_at": "2025-04-13T08:46:11Z", - "updated_at": "2025-05-18T05:22:57Z", - "pushed_at": "2025-05-18T05:22:53Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-53677.json b/2024/CVE-2024-53677.json index 5710cf0d5b..1d2d484f9e 100644 --- a/2024/CVE-2024-53677.json +++ b/2024/CVE-2024-53677.json @@ -197,171 +197,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 914978081, - "name": "CVE-2024-53677", - "full_name": "SeanRickerd\/CVE-2024-53677", - "owner": { - "login": "SeanRickerd", - "id": 5073531, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5073531?v=4", - "html_url": "https:\/\/github.com\/SeanRickerd", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SeanRickerd\/CVE-2024-53677", - "description": "Vulnerable Environment and Exploit for CVE-2024-53677", - "fork": false, - "created_at": "2025-01-10T17:47:24Z", - "updated_at": "2025-03-26T16:15:32Z", - "pushed_at": "2025-03-05T14:11:56Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 3, - "score": 0, - "subscribers_count": 2 - }, - { - "id": 931991659, - "name": "CVE-2024-53677-Exploitation", - "full_name": "hopsypopsy8\/CVE-2024-53677-Exploitation", - "owner": { - "login": "hopsypopsy8", - "id": 79120728, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79120728?v=4", - "html_url": "https:\/\/github.com\/hopsypopsy8", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/hopsypopsy8\/CVE-2024-53677-Exploitation", - "description": "Apache Struts CVE-2024-53677 Exploitation", - "fork": false, - "created_at": "2025-02-13T07:26:08Z", - "updated_at": "2025-02-13T09:10:56Z", - "pushed_at": "2025-02-13T09:10:53Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 938101788, - "name": "CVE-2024-53677-Exploit", - "full_name": "shishirghimir\/CVE-2024-53677-Exploit", - "owner": { - "login": "shishirghimir", - "id": 100472298, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/100472298?v=4", - "html_url": "https:\/\/github.com\/shishirghimir", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/shishirghimir\/CVE-2024-53677-Exploit", - "description": null, - "fork": false, - "created_at": "2025-02-24T12:28:28Z", - "updated_at": "2025-12-10T03:26:32Z", - "pushed_at": "2025-02-24T13:09:53Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 986869375, - "name": "CVE-2024-53677", - "full_name": "BuludX\/CVE-2024-53677", - "owner": { - "login": "BuludX", - "id": 212507833, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/212507833?v=4", - "html_url": "https:\/\/github.com\/BuludX", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/BuludX\/CVE-2024-53677", - "description": "CVE-2024-53677", - "fork": false, - "created_at": "2025-05-20T08:37:46Z", - "updated_at": "2025-07-20T18:00:51Z", - "pushed_at": "2025-07-20T18:00:47Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 995415829, - "name": "CVE-2024-53677", - "full_name": "r007sec\/CVE-2024-53677", - "owner": { - "login": "r007sec", - "id": 214655530, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/214655530?v=4", - "html_url": "https:\/\/github.com\/r007sec", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/r007sec\/CVE-2024-53677", - "description": null, - "fork": false, - "created_at": "2025-06-03T12:55:55Z", - "updated_at": "2025-08-01T14:25:43Z", - "pushed_at": "2025-06-03T13:16:24Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 0 - }, { "id": 1048453410, "name": "CVE-2024-53677-POC", diff --git a/2024/CVE-2024-53703.json b/2024/CVE-2024-53703.json deleted file mode 100644 index 3f45d67e4d..0000000000 --- a/2024/CVE-2024-53703.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 995977877, - "name": "cve-2024-53703-poc", - "full_name": "scrt\/cve-2024-53703-poc", - "owner": { - "login": "scrt", - "id": 5999514, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5999514?v=4", - "html_url": "https:\/\/github.com\/scrt", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/scrt\/cve-2024-53703-poc", - "description": "POC for exploiting CVE-2024-53703, a stack-based buffer overflow in SonicWall SMA mod_httprp.so", - "fork": false, - "created_at": "2025-06-04T09:25:08Z", - "updated_at": "2025-07-07T10:52:12Z", - "pushed_at": "2025-06-04T09:35:56Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 2, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-53704.json b/2024/CVE-2024-53704.json index aca29487aa..891a2c0fa7 100644 --- a/2024/CVE-2024-53704.json +++ b/2024/CVE-2024-53704.json @@ -1,70 +1,4 @@ [ - { - "id": 920614269, - "name": "SonicSessionLeak", - "full_name": "sfewer-r7\/SonicSessionLeak", - "owner": { - "login": "sfewer-r7", - "id": 122022313, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/122022313?v=4", - "html_url": "https:\/\/github.com\/sfewer-r7", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sfewer-r7\/SonicSessionLeak", - "description": "Exploit for CVE-2024-53704 - SonicWall SonicOS SSLVPN authentication bypass", - "fork": false, - "created_at": "2025-01-22T13:21:07Z", - "updated_at": "2026-01-21T12:26:21Z", - "pushed_at": "2025-01-22T13:38:15Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 931172065, - "name": "CVE-2024-53704", - "full_name": "istagmbh\/CVE-2024-53704", - "owner": { - "login": "istagmbh", - "id": 102124143, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102124143?v=4", - "html_url": "https:\/\/github.com\/istagmbh", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/istagmbh\/CVE-2024-53704", - "description": "demonstriert, wie mittels missbräuchlicher Nutzung eines Swap-Cookies eine VPN-Session übernommen werden kann. Wichtig: Dieses Projekt dient ausschliesslich zu Bildungs- und Forschungszwecken – bitte nur in Umgebungen verwenden, in denen Du explizit authorisiert bist.", - "fork": false, - "created_at": "2025-02-11T20:43:23Z", - "updated_at": "2025-02-27T17:03:57Z", - "pushed_at": "2025-02-11T20:43:36Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - }, { "id": 1164971735, "name": "sonicwall-audit-toolkit", diff --git a/2024/CVE-2024-53900.json b/2024/CVE-2024-53900.json deleted file mode 100644 index 536c912c21..0000000000 --- a/2024/CVE-2024-53900.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 959980547, - "name": "CVE-2024-53900", - "full_name": "Gokul-Krishnan-V-R\/CVE-2024-53900", - "owner": { - "login": "Gokul-Krishnan-V-R", - "id": 143732362, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/143732362?v=4", - "html_url": "https:\/\/github.com\/Gokul-Krishnan-V-R", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Gokul-Krishnan-V-R\/CVE-2024-53900", - "description": "Mongo Vulnub Lab...Try to Hack IT.....!", - "fork": false, - "created_at": "2025-04-03T17:01:32Z", - "updated_at": "2025-04-03T17:13:41Z", - "pushed_at": "2025-04-03T17:12:02Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1040665131, - "name": "CVE-2024-53900", - "full_name": "www-spam\/CVE-2024-53900", - "owner": { - "login": "www-spam", - "id": 102578109, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102578109?v=4", - "html_url": "https:\/\/github.com\/www-spam", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/www-spam\/CVE-2024-53900", - "description": null, - "fork": false, - "created_at": "2025-08-19T10:20:33Z", - "updated_at": "2025-08-22T11:43:19Z", - "pushed_at": "2025-08-22T11:43:16Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-53924.json b/2024/CVE-2024-53924.json deleted file mode 100644 index 5c2dde93d4..0000000000 --- a/2024/CVE-2024-53924.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 968648336, - "name": "CVE-2024-53924", - "full_name": "aelmosalamy\/CVE-2024-53924", - "owner": { - "login": "aelmosalamy", - "id": 40863802, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/40863802?v=4", - "html_url": "https:\/\/github.com\/aelmosalamy", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/aelmosalamy\/CVE-2024-53924", - "description": "A PoC of CVE-2024-53924", - "fork": false, - "created_at": "2025-04-18T13:19:39Z", - "updated_at": "2025-08-08T02:03:26Z", - "pushed_at": "2025-08-08T02:03:22Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 5, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-54085.json b/2024/CVE-2024-54085.json deleted file mode 100644 index 6b38c631a7..0000000000 --- a/2024/CVE-2024-54085.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1010835076, - "name": "CVE-2024-54085", - "full_name": "Mr-Zapi\/CVE-2024-54085", - "owner": { - "login": "Mr-Zapi", - "id": 163752247, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/163752247?v=4", - "html_url": "https:\/\/github.com\/Mr-Zapi", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Mr-Zapi\/CVE-2024-54085", - "description": "Just poc for CVE 2024-54085", - "fork": false, - "created_at": "2025-06-29T22:26:47Z", - "updated_at": "2026-06-22T16:19:03Z", - "pushed_at": "2025-06-29T22:29:47Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-54239.json b/2024/CVE-2024-54239.json deleted file mode 100644 index 8f2bfb6e8c..0000000000 --- a/2024/CVE-2024-54239.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 919404406, - "name": "CVE-2024-54239", - "full_name": "RandomRobbieBF\/CVE-2024-54239", - "owner": { - "login": "RandomRobbieBF", - "id": 51722811, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51722811?v=4", - "html_url": "https:\/\/github.com\/RandomRobbieBF", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/RandomRobbieBF\/CVE-2024-54239", - "description": "Eyewear prescription form <= 4.0.18 - Missing Authorization to Unauthenticated Arbitrary Options Update", - "fork": false, - "created_at": "2025-01-20T10:29:42Z", - "updated_at": "2026-07-08T12:35:18Z", - "pushed_at": "2025-01-20T10:30:26Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-54383.json b/2024/CVE-2024-54383.json deleted file mode 100644 index 1769e4e2e1..0000000000 --- a/2024/CVE-2024-54383.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 946690040, - "name": "CVE-2024-54383", - "full_name": "pashayogi\/CVE-2024-54383", - "owner": { - "login": "pashayogi", - "id": 50790111, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50790111?v=4", - "html_url": "https:\/\/github.com\/pashayogi", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/pashayogi\/CVE-2024-54383", - "description": "CVE-2024-54383, https:\/\/www.cve.org\/CVERecord?id=CVE-2024-54383", - "fork": false, - "created_at": "2025-03-11T14:26:43Z", - "updated_at": "2025-03-11T14:27:03Z", - "pushed_at": "2025-03-11T14:26:59Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-54498.json b/2024/CVE-2024-54498.json deleted file mode 100644 index ab80ebbcf1..0000000000 --- a/2024/CVE-2024-54498.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 913761355, - "name": "CVE-2024-54498-PoC", - "full_name": "wh1te4ever\/CVE-2024-54498-PoC", - "owner": { - "login": "wh1te4ever", - "id": 88495487, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/88495487?v=4", - "html_url": "https:\/\/github.com\/wh1te4ever", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/wh1te4ever\/CVE-2024-54498-PoC", - "description": "Escape macOS Sandbox using sharedfilelistd exploit", - "fork": false, - "created_at": "2025-01-08T09:55:44Z", - "updated_at": "2026-06-07T09:54:09Z", - "pushed_at": "2025-06-28T22:57:46Z", - "stargazers_count": 65, - "watchers_count": 65, - "has_discussions": false, - "forks_count": 13, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 13, - "watchers": 65, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-54507.json b/2024/CVE-2024-54507.json deleted file mode 100644 index fad4b98a38..0000000000 --- a/2024/CVE-2024-54507.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 921373528, - "name": "CVE-2024-54507", - "full_name": "jprx\/CVE-2024-54507", - "owner": { - "login": "jprx", - "id": 36464332, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/36464332?v=4", - "html_url": "https:\/\/github.com\/jprx", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/jprx\/CVE-2024-54507", - "description": "An integer type confusion in XNU", - "fork": false, - "created_at": "2025-01-23T20:40:47Z", - "updated_at": "2025-07-17T13:37:31Z", - "pushed_at": "2025-01-23T20:50:46Z", - "stargazers_count": 9, - "watchers_count": 9, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 9, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-5452.json b/2024/CVE-2024-5452.json deleted file mode 100644 index f219e4dd36..0000000000 --- a/2024/CVE-2024-5452.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 929612071, - "name": "CVE-2024-5452", - "full_name": "skrkcb2\/CVE-2024-5452", - "owner": { - "login": "skrkcb2", - "id": 131514744, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/131514744?v=4", - "html_url": "https:\/\/github.com\/skrkcb2", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/skrkcb2\/CVE-2024-5452", - "description": null, - "fork": false, - "created_at": "2025-02-09T00:14:52Z", - "updated_at": "2025-02-16T04:41:53Z", - "pushed_at": "2025-02-16T04:41:50Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-54772.json b/2024/CVE-2024-54772.json deleted file mode 100644 index 36c245adbd..0000000000 --- a/2024/CVE-2024-54772.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 928346249, - "name": "CVE-2024-54772", - "full_name": "deauther890\/CVE-2024-54772", - "owner": { - "login": "deauther890", - "id": 163784805, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/163784805?v=4", - "html_url": "https:\/\/github.com\/deauther890", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/deauther890\/CVE-2024-54772", - "description": "This repo contains the exploit for CVE-2024-54772", - "fork": false, - "created_at": "2025-02-06T13:40:41Z", - "updated_at": "2026-08-07T02:59:02Z", - "pushed_at": "2025-02-25T12:43:32Z", - "stargazers_count": 33, - "watchers_count": 33, - "has_discussions": false, - "forks_count": 8, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 8, - "watchers": 33, - "score": 0, - "subscribers_count": 2 - }, - { - "id": 1001109209, - "name": "CVE-2024-54772", - "full_name": "Seven11Eleven\/CVE-2024-54772", - "owner": { - "login": "Seven11Eleven", - "id": 120821293, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/120821293?v=4", - "html_url": "https:\/\/github.com\/Seven11Eleven", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Seven11Eleven\/CVE-2024-54772", - "description": null, - "fork": false, - "created_at": "2025-06-12T20:50:48Z", - "updated_at": "2025-06-12T20:52:04Z", - "pushed_at": "2025-06-12T20:52:00Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-54879.json b/2024/CVE-2024-54879.json deleted file mode 100644 index 0358e8f012..0000000000 --- a/2024/CVE-2024-54879.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 919322351, - "name": "CVE-2024-54879", - "full_name": "ailenye\/CVE-2024-54879", - "owner": { - "login": "ailenye", - "id": 151117542, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/151117542?v=4", - "html_url": "https:\/\/github.com\/ailenye", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ailenye\/CVE-2024-54879", - "description": "CVE-2024-54879", - "fork": false, - "created_at": "2025-01-20T07:19:57Z", - "updated_at": "2025-01-20T07:23:07Z", - "pushed_at": "2025-01-20T07:23:06Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-54880.json b/2024/CVE-2024-54880.json deleted file mode 100644 index 86d27f75aa..0000000000 --- a/2024/CVE-2024-54880.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 919464627, - "name": "CVE-2024-54880", - "full_name": "ailenye\/CVE-2024-54880", - "owner": { - "login": "ailenye", - "id": 151117542, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/151117542?v=4", - "html_url": "https:\/\/github.com\/ailenye", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ailenye\/CVE-2024-54880", - "description": "CVE-2024-54880", - "fork": false, - "created_at": "2025-01-20T12:45:17Z", - "updated_at": "2025-01-20T12:46:34Z", - "pushed_at": "2025-01-20T12:46:33Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-54916.json b/2024/CVE-2024-54916.json deleted file mode 100644 index d531a0c061..0000000000 --- a/2024/CVE-2024-54916.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 929197916, - "name": "CVE-2024-54916", - "full_name": "SAHALLL\/CVE-2024-54916", - "owner": { - "login": "SAHALLL", - "id": 90813381, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90813381?v=4", - "html_url": "https:\/\/github.com\/SAHALLL", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SAHALLL\/CVE-2024-54916", - "description": null, - "fork": false, - "created_at": "2025-02-08T01:55:04Z", - "updated_at": "2025-02-08T03:42:26Z", - "pushed_at": "2025-02-08T03:42:22Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-54951.json b/2024/CVE-2024-54951.json deleted file mode 100644 index cbb5bb6342..0000000000 --- a/2024/CVE-2024-54951.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 925444983, - "name": "CVE-2024-54951", - "full_name": "Allevon412\/CVE-2024-54951", - "owner": { - "login": "Allevon412", - "id": 41178870, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41178870?v=4", - "html_url": "https:\/\/github.com\/Allevon412", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Allevon412\/CVE-2024-54951", - "description": "I contacted the monica development team via email on 11\/20\/2024. I also contacted them via LinkedIn, and other platforms in the weeks that followed. Publishing here since there was no response.", - "fork": false, - "created_at": "2025-01-31T22:28:26Z", - "updated_at": "2025-03-17T15:56:44Z", - "pushed_at": "2025-03-17T15:56:41Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-55060.json b/2024/CVE-2024-55060.json deleted file mode 100644 index 297eeb3a47..0000000000 --- a/2024/CVE-2024-55060.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 947457980, - "name": "CVE-2024-55060", - "full_name": "bigzooooz\/CVE-2024-55060", - "owner": { - "login": "bigzooooz", - "id": 7108710, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/7108710?v=4", - "html_url": "https:\/\/github.com\/bigzooooz", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/bigzooooz\/CVE-2024-55060", - "description": null, - "fork": false, - "created_at": "2025-03-12T18:05:42Z", - "updated_at": "2025-03-12T18:11:25Z", - "pushed_at": "2025-03-12T18:07:37Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-55347.json b/2024/CVE-2024-55347.json deleted file mode 100644 index 9941eedfd3..0000000000 --- a/2024/CVE-2024-55347.json +++ /dev/null @@ -1,42 +0,0 @@ -[ - { - "id": 930742490, - "name": "CVE-2024-55347", - "full_name": "sahil3276\/CVE-2024-55347", - "owner": { - "login": "sahil3276", - "id": 105536637, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105536637?v=4", - "html_url": "https:\/\/github.com\/sahil3276", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sahil3276\/CVE-2024-55347", - "description": "Public Disclosure of CVE-2024-55347", - "fork": false, - "created_at": "2025-02-11T06:11:26Z", - "updated_at": "2025-02-11T06:54:53Z", - "pushed_at": "2025-02-11T06:47:39Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve", - "cve-2024-55347", - "disclosure", - "public", - "sahil3276", - "sahilshah3276" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-5535.json b/2024/CVE-2024-5535.json deleted file mode 100644 index 36cec3d331..0000000000 --- a/2024/CVE-2024-5535.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 949094558, - "name": "CVE-2024-5535", - "full_name": "websecnl\/CVE-2024-5535", - "owner": { - "login": "websecnl", - "id": 20278695, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/20278695?v=4", - "html_url": "https:\/\/github.com\/websecnl", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/websecnl\/CVE-2024-5535", - "description": "PoC - OpenSSL NPN Buffer Overread", - "fork": false, - "created_at": "2025-03-15T17:00:42Z", - "updated_at": "2025-11-25T04:23:33Z", - "pushed_at": "2025-03-15T17:03:46Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-55466.json b/2024/CVE-2024-55466.json deleted file mode 100644 index f6ea28438c..0000000000 --- a/2024/CVE-2024-55466.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 982320794, - "name": "ThingsBoard-IoT-Platform-CVE-2024-55466", - "full_name": "cybsecsid\/ThingsBoard-IoT-Platform-CVE-2024-55466", - "owner": { - "login": "cybsecsid", - "id": 79910046, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/79910046?v=4", - "html_url": "https:\/\/github.com\/cybsecsid", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/cybsecsid\/ThingsBoard-IoT-Platform-CVE-2024-55466", - "description": null, - "fork": false, - "created_at": "2025-05-12T17:48:47Z", - "updated_at": "2025-05-12T17:49:20Z", - "pushed_at": "2025-05-12T17:49:17Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-55504.json b/2024/CVE-2024-55504.json deleted file mode 100644 index a6e522b68d..0000000000 --- a/2024/CVE-2024-55504.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 918841666, - "name": "CVE-2024-55504", - "full_name": "SyFi\/CVE-2024-55504", - "owner": { - "login": "SyFi", - "id": 26314806, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26314806?v=4", - "html_url": "https:\/\/github.com\/SyFi", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/SyFi\/CVE-2024-55504", - "description": "CVE-2024-55504", - "fork": false, - "created_at": "2025-01-19T01:58:38Z", - "updated_at": "2025-01-19T02:12:29Z", - "pushed_at": "2025-01-19T02:12:27Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-55511.json b/2024/CVE-2024-55511.json deleted file mode 100644 index 990c4189ec..0000000000 --- a/2024/CVE-2024-55511.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 919623005, - "name": "CVE-2024-55511", - "full_name": "nikosecurity\/CVE-2024-55511", - "owner": { - "login": "nikosecurity", - "id": 182184327, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/182184327?v=4", - "html_url": "https:\/\/github.com\/nikosecurity", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/nikosecurity\/CVE-2024-55511", - "description": "A null pointer dereference vulnerability in Macrium Reflect prior to 8.1.8017 allows a local attacker to cause a system crash or potentially elevate their privileges via executing a specially crafted executable.", - "fork": false, - "created_at": "2025-01-20T18:23:10Z", - "updated_at": "2026-05-30T04:53:41Z", - "pushed_at": "2025-08-12T02:54:15Z", - "stargazers_count": 7, - "watchers_count": 7, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 7, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-55555.json b/2024/CVE-2024-55555.json deleted file mode 100644 index 075af7c39a..0000000000 --- a/2024/CVE-2024-55555.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1030001091, - "name": "CVE-2024-55555", - "full_name": "Yucaerin\/CVE-2024-55555", - "owner": { - "login": "Yucaerin", - "id": 105861519, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105861519?v=4", - "html_url": "https:\/\/github.com\/Yucaerin", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Yucaerin\/CVE-2024-55555", - "description": "Laravel Crypto Killer Mass Scanner (CVE-2024-55555)", - "fork": false, - "created_at": "2025-07-31T23:46:23Z", - "updated_at": "2025-12-04T03:10:22Z", - "pushed_at": "2025-08-01T00:04:08Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 2, - "watchers": 2, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-55591.json b/2024/CVE-2024-55591.json deleted file mode 100644 index be7b47b078..0000000000 --- a/2024/CVE-2024-55591.json +++ /dev/null @@ -1,241 +0,0 @@ -[ - { - "id": 920020499, - "name": "fortios-auth-bypass-poc-CVE-2024-55591", - "full_name": "sysirq\/fortios-auth-bypass-poc-CVE-2024-55591", - "owner": { - "login": "sysirq", - "id": 169606548, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/169606548?v=4", - "html_url": "https:\/\/github.com\/sysirq", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sysirq\/fortios-auth-bypass-poc-CVE-2024-55591", - "description": null, - "fork": false, - "created_at": "2025-01-21T12:30:21Z", - "updated_at": "2026-03-20T00:10:00Z", - "pushed_at": "2025-01-23T07:40:16Z", - "stargazers_count": 26, - "watchers_count": 26, - "has_discussions": false, - "forks_count": 11, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 11, - "watchers": 26, - "score": 0, - "subscribers_count": 2 - }, - { - "id": 920641121, - "name": "fortios-auth-bypass-exploit-CVE-2024-55591", - "full_name": "sysirq\/fortios-auth-bypass-exploit-CVE-2024-55591", - "owner": { - "login": "sysirq", - "id": 169606548, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/169606548?v=4", - "html_url": "https:\/\/github.com\/sysirq", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sysirq\/fortios-auth-bypass-exploit-CVE-2024-55591", - "description": null, - "fork": false, - "created_at": "2025-01-22T14:16:30Z", - "updated_at": "2025-08-05T14:49:58Z", - "pushed_at": "2025-01-23T07:38:18Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 3 - }, - { - "id": 921896293, - "name": "CVE-2024-55591", - "full_name": "virus-or-not\/CVE-2024-55591", - "owner": { - "login": "virus-or-not", - "id": 195299273, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/195299273?v=4", - "html_url": "https:\/\/github.com\/virus-or-not", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/virus-or-not\/CVE-2024-55591", - "description": "An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS and FortiProxy may allow a remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.", - "fork": false, - "created_at": "2025-01-24T20:29:56Z", - "updated_at": "2026-01-12T15:22:28Z", - "pushed_at": "2025-01-29T21:27:21Z", - "stargazers_count": 8, - "watchers_count": 8, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 4, - "watchers": 8, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 922827334, - "name": "fortios-auth-bypass-poc-CVE-2024-55591", - "full_name": "watchtowrlabs\/fortios-auth-bypass-poc-CVE-2024-55591", - "owner": { - "login": "watchtowrlabs", - "id": 99977116, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/99977116?v=4", - "html_url": "https:\/\/github.com\/watchtowrlabs", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/watchtowrlabs\/fortios-auth-bypass-poc-CVE-2024-55591", - "description": null, - "fork": false, - "created_at": "2025-01-27T06:25:53Z", - "updated_at": "2026-04-23T18:35:33Z", - "pushed_at": "2025-01-27T19:11:46Z", - "stargazers_count": 77, - "watchers_count": 77, - "has_discussions": false, - "forks_count": 18, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 18, - "watchers": 77, - "score": 0, - "subscribers_count": 2 - }, - { - "id": 924176696, - "name": "CVE-2024-55591-POC", - "full_name": "exfil0\/CVE-2024-55591-POC", - "owner": { - "login": "exfil0", - "id": 84948741, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/84948741?v=4", - "html_url": "https:\/\/github.com\/exfil0", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/exfil0\/CVE-2024-55591-POC", - "description": "A comprehensive all-in-one Python-based Proof of Concept script to discover and exploit a critical authentication bypass vulnerability (CVE-2024-55591) in certain Fortinet devices.", - "fork": false, - "created_at": "2025-01-29T14:54:40Z", - "updated_at": "2026-07-05T10:10:59Z", - "pushed_at": "2025-05-26T00:30:50Z", - "stargazers_count": 12, - "watchers_count": 12, - "has_discussions": false, - "forks_count": 9, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "attack-surface", - "automated", - "cve-2024-55591", - "firewall", - "fortinet", - "poc", - "wizard" - ], - "visibility": "public", - "forks": 9, - "watchers": 12, - "score": 0, - "subscribers_count": 2 - }, - { - "id": 929828519, - "name": "CVE-2024-55591", - "full_name": "0x7556\/CVE-2024-55591", - "owner": { - "login": "0x7556", - "id": 50582207, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50582207?v=4", - "html_url": "https:\/\/github.com\/0x7556", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0x7556\/CVE-2024-55591", - "description": null, - "fork": false, - "created_at": "2025-02-09T14:00:58Z", - "updated_at": "2025-02-09T14:24:44Z", - "pushed_at": "2025-04-25T15:30:12Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 990629751, - "name": "CVE-2024-55591-POC", - "full_name": "UMChacker\/CVE-2024-55591-POC", - "owner": { - "login": "UMChacker", - "id": 42674088, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42674088?v=4", - "html_url": "https:\/\/github.com\/UMChacker", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/UMChacker\/CVE-2024-55591-POC", - "description": null, - "fork": false, - "created_at": "2025-05-26T11:57:32Z", - "updated_at": "2026-01-15T08:26:11Z", - "pushed_at": "2025-05-26T12:13:11Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-55656.json b/2024/CVE-2024-55656.json deleted file mode 100644 index 0f42f8af7f..0000000000 --- a/2024/CVE-2024-55656.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 987053597, - "name": "redis-stack-CVE-2024-55656", - "full_name": "rick2600\/redis-stack-CVE-2024-55656", - "owner": { - "login": "rick2600", - "id": 2582199, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/2582199?v=4", - "html_url": "https:\/\/github.com\/rick2600", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/rick2600\/redis-stack-CVE-2024-55656", - "description": null, - "fork": false, - "created_at": "2025-05-20T14:01:46Z", - "updated_at": "2025-05-27T21:40:02Z", - "pushed_at": "2025-05-27T13:36:09Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 2 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-55890.json b/2024/CVE-2024-55890.json deleted file mode 100644 index d246d46ee9..0000000000 --- a/2024/CVE-2024-55890.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1001249367, - "name": "CVE-2024-55890", - "full_name": "samh4cks\/CVE-2024-55890", - "owner": { - "login": "samh4cks", - "id": 63656641, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/63656641?v=4", - "html_url": "https:\/\/github.com\/samh4cks", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/samh4cks\/CVE-2024-55890", - "description": null, - "fork": false, - "created_at": "2025-06-13T04:26:01Z", - "updated_at": "2025-06-13T04:28:35Z", - "pushed_at": "2025-06-13T04:28:31Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-55963.json b/2024/CVE-2024-55963.json deleted file mode 100644 index 9390076021..0000000000 --- a/2024/CVE-2024-55963.json +++ /dev/null @@ -1,39 +0,0 @@ -[ - { - "id": 1014553944, - "name": "CVE-2024-55963", - "full_name": "superswan\/CVE-2024-55963", - "owner": { - "login": "superswan", - "id": 5325504, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/5325504?v=4", - "html_url": "https:\/\/github.com\/superswan", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/superswan\/CVE-2024-55963", - "description": "CVE-2024-55963, allows unauthenticated remote code execution on Appsmith Enterprise platform due to a misconfigured PostgreSQL database included by default", - "fork": false, - "created_at": "2025-07-06T00:28:23Z", - "updated_at": "2026-06-08T16:00:30Z", - "pushed_at": "2025-07-06T00:28:26Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "poc", - "rce", - "web-security" - ], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-56071.json b/2024/CVE-2024-56071.json deleted file mode 100644 index f2bf7bb177..0000000000 --- a/2024/CVE-2024-56071.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 963343258, - "name": "CVE-2024-56071", - "full_name": "Nxploited\/CVE-2024-56071", - "owner": { - "login": "Nxploited", - "id": 188819918, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4", - "html_url": "https:\/\/github.com\/Nxploited", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-56071", - "description": "Simple Dashboard <= 2.0 - Unauthenticated Privilege Escalation", - "fork": false, - "created_at": "2025-04-09T14:32:19Z", - "updated_at": "2025-04-09T14:35:40Z", - "pushed_at": "2025-04-09T14:35:36Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-56145.json b/2024/CVE-2024-56145.json index 8c094f0b7b..55c68ce4b1 100644 --- a/2024/CVE-2024-56145.json +++ b/2024/CVE-2024-56145.json @@ -64,38 +64,5 @@ "watchers": 4, "score": 0, "subscribers_count": 1 - }, - { - "id": 961345307, - "name": "craft-cms-RCE-CVE-2024-56145", - "full_name": "hmhlol\/craft-cms-RCE-CVE-2024-56145", - "owner": { - "login": "hmhlol", - "id": 43119394, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/43119394?v=4", - "html_url": "https:\/\/github.com\/hmhlol", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/hmhlol\/craft-cms-RCE-CVE-2024-56145", - "description": "A POC lab environment for CVE-2024-56145 CraftCMS RCE.", - "fork": false, - "created_at": "2025-04-06T10:16:20Z", - "updated_at": "2025-04-06T10:35:53Z", - "pushed_at": "2025-04-06T10:35:50Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2024/CVE-2024-56249.json b/2024/CVE-2024-56249.json deleted file mode 100644 index a813728e89..0000000000 --- a/2024/CVE-2024-56249.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 950327972, - "name": "CVE-2024-56249", - "full_name": "Nxploited\/CVE-2024-56249", - "owner": { - "login": "Nxploited", - "id": 188819918, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4", - "html_url": "https:\/\/github.com\/Nxploited", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-56249", - "description": "WordPress WPMasterToolKit plugin <= 1.13.1 - Arbitrary File Upload vulnerability", - "fork": false, - "created_at": "2025-03-18T01:47:50Z", - "updated_at": "2025-04-07T00:53:31Z", - "pushed_at": "2025-03-29T20:29:03Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-56264.json b/2024/CVE-2024-56264.json deleted file mode 100644 index 9b8e1c5483..0000000000 --- a/2024/CVE-2024-56264.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 938343787, - "name": "CVE-2024-56264", - "full_name": "Nxploited\/CVE-2024-56264", - "owner": { - "login": "Nxploited", - "id": 188819918, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4", - "html_url": "https:\/\/github.com\/Nxploited", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-56264", - "description": "WordPress ACF City Selector plugin <= 1.14.0 - Arbitrary File Upload vulnerability", - "fork": false, - "created_at": "2025-02-24T20:02:31Z", - "updated_at": "2025-02-24T20:12:00Z", - "pushed_at": "2025-02-24T20:11:57Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 940159036, - "name": "CVE-2024-56264", - "full_name": "dpakmrya\/CVE-2024-56264", - "owner": { - "login": "dpakmrya", - "id": 85681220, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/85681220?v=4", - "html_url": "https:\/\/github.com\/dpakmrya", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/dpakmrya\/CVE-2024-56264", - "description": null, - "fork": false, - "created_at": "2025-02-27T17:54:51Z", - "updated_at": "2025-02-27T18:06:47Z", - "pushed_at": "2025-02-27T18:06:44Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-56428.json b/2024/CVE-2024-56428.json deleted file mode 100644 index 7e33d2ada6..0000000000 --- a/2024/CVE-2024-56428.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 987526907, - "name": "CVE-2024-56428", - "full_name": "lisa-2905\/CVE-2024-56428", - "owner": { - "login": "lisa-2905", - "id": 25384682, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25384682?v=4", - "html_url": "https:\/\/github.com\/lisa-2905", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/lisa-2905\/CVE-2024-56428", - "description": null, - "fork": false, - "created_at": "2025-05-21T07:52:06Z", - "updated_at": "2025-05-21T07:53:25Z", - "pushed_at": "2025-05-21T07:53:21Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-56429.json b/2024/CVE-2024-56429.json deleted file mode 100644 index 9e2f87e6ef..0000000000 --- a/2024/CVE-2024-56429.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 987496482, - "name": "CVE-2024-56429", - "full_name": "lisa-2905\/CVE-2024-56429", - "owner": { - "login": "lisa-2905", - "id": 25384682, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/25384682?v=4", - "html_url": "https:\/\/github.com\/lisa-2905", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/lisa-2905\/CVE-2024-56429", - "description": null, - "fork": false, - "created_at": "2025-05-21T06:54:02Z", - "updated_at": "2025-05-21T07:43:10Z", - "pushed_at": "2025-05-21T07:10:03Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-56801.json b/2024/CVE-2024-56801.json deleted file mode 100644 index 69905c11ce..0000000000 --- a/2024/CVE-2024-56801.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 942466114, - "name": "CVE-2024-56801", - "full_name": "kz0xpwn\/CVE-2024-56801", - "owner": { - "login": "kz0xpwn", - "id": 193463900, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/193463900?v=4", - "html_url": "https:\/\/github.com\/kz0xpwn", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/kz0xpwn\/CVE-2024-56801", - "description": null, - "fork": false, - "created_at": "2025-03-04T06:34:03Z", - "updated_at": "2025-03-04T06:34:07Z", - "pushed_at": "2025-03-04T06:34:04Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-56882.json b/2024/CVE-2024-56882.json deleted file mode 100644 index 580c81dc01..0000000000 --- a/2024/CVE-2024-56882.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 931555160, - "name": "CVE-2024-56882", - "full_name": "trustcves\/CVE-2024-56882", - "owner": { - "login": "trustcves", - "id": 119938735, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/119938735?v=4", - "html_url": "https:\/\/github.com\/trustcves", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/trustcves\/CVE-2024-56882", - "description": null, - "fork": false, - "created_at": "2025-02-12T13:30:52Z", - "updated_at": "2025-02-17T15:47:49Z", - "pushed_at": "2025-02-17T15:47:46Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-56883.json b/2024/CVE-2024-56883.json deleted file mode 100644 index b0dcbe9613..0000000000 --- a/2024/CVE-2024-56883.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 931557519, - "name": "CVE-2024-56883", - "full_name": "trustcves\/CVE-2024-56883", - "owner": { - "login": "trustcves", - "id": 119938735, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/119938735?v=4", - "html_url": "https:\/\/github.com\/trustcves", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/trustcves\/CVE-2024-56883", - "description": null, - "fork": false, - "created_at": "2025-02-12T13:35:23Z", - "updated_at": "2025-02-17T15:50:17Z", - "pushed_at": "2025-02-17T15:50:14Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-56889.json b/2024/CVE-2024-56889.json deleted file mode 100644 index e006f18956..0000000000 --- a/2024/CVE-2024-56889.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 927591256, - "name": "CVE-2024-56889", - "full_name": "vigneshr232\/CVE-2024-56889", - "owner": { - "login": "vigneshr232", - "id": 136900635, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/136900635?v=4", - "html_url": "https:\/\/github.com\/vigneshr232", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/vigneshr232\/CVE-2024-56889", - "description": null, - "fork": false, - "created_at": "2025-02-05T08:01:43Z", - "updated_at": "2025-02-05T08:02:50Z", - "pushed_at": "2025-02-05T08:02:46Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-56924.json b/2024/CVE-2024-56924.json deleted file mode 100644 index a0a3837050..0000000000 --- a/2024/CVE-2024-56924.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 920459703, - "name": "CVE-2024-56924", - "full_name": "ipratheep\/CVE-2024-56924", - "owner": { - "login": "ipratheep", - "id": 86625603, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/86625603?v=4", - "html_url": "https:\/\/github.com\/ipratheep", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ipratheep\/CVE-2024-56924", - "description": null, - "fork": false, - "created_at": "2025-01-22T07:28:58Z", - "updated_at": "2025-01-22T15:06:31Z", - "pushed_at": "2025-01-22T15:06:28Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-57040.json b/2024/CVE-2024-57040.json deleted file mode 100644 index 600bbdedba..0000000000 --- a/2024/CVE-2024-57040.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 950347897, - "name": "Poc-CVE-2024-57040", - "full_name": "absholi7ly\/Poc-CVE-2024-57040", - "owner": { - "login": "absholi7ly", - "id": 72062217, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/72062217?v=4", - "html_url": "https:\/\/github.com\/absholi7ly", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/absholi7ly\/Poc-CVE-2024-57040", - "description": "CVE-2024-57040 is a security vulnerability found in certain TP-Link TL-WR845N router models. Specifically, it involves a \"hardcoded\" password for the router's root account. This means a default, unchanging password is built into the router's software.", - "fork": false, - "created_at": "2025-03-18T02:49:42Z", - "updated_at": "2026-01-15T16:13:53Z", - "pushed_at": "2025-03-18T02:53:06Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 3, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-57175.json b/2024/CVE-2024-57175.json deleted file mode 100644 index 9a9a3d1dcb..0000000000 --- a/2024/CVE-2024-57175.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 925368409, - "name": "CVE-2024-57175", - "full_name": "Ajmal101\/CVE-2024-57175", - "owner": { - "login": "Ajmal101", - "id": 197214133, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/197214133?v=4", - "html_url": "https:\/\/github.com\/Ajmal101", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Ajmal101\/CVE-2024-57175", - "description": null, - "fork": false, - "created_at": "2025-01-31T18:40:11Z", - "updated_at": "2025-01-31T18:43:56Z", - "pushed_at": "2025-01-31T18:43:53Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-57373.json b/2024/CVE-2024-57373.json deleted file mode 100644 index ee4e4b6d04..0000000000 --- a/2024/CVE-2024-57373.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 922488553, - "name": "CVE-2024-57373", - "full_name": "cypherdavy\/CVE-2024-57373", - "owner": { - "login": "cypherdavy", - "id": 166112437, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/166112437?v=4", - "html_url": "https:\/\/github.com\/cypherdavy", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/cypherdavy\/CVE-2024-57373", - "description": " CSRF vulnerability in LifestyleStore v1.0, enabling unauthorized actions on behalf of users, risking data and account security", - "fork": false, - "created_at": "2025-01-26T11:01:03Z", - "updated_at": "2025-02-08T13:28:01Z", - "pushed_at": "2025-02-07T20:55:16Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-57376.json b/2024/CVE-2024-57376.json deleted file mode 100644 index ff85ec1a3d..0000000000 --- a/2024/CVE-2024-57376.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 979713538, - "name": "CVE-2024-57376", - "full_name": "DelspoN\/CVE-2024-57376", - "owner": { - "login": "DelspoN", - "id": 16370086, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16370086?v=4", - "html_url": "https:\/\/github.com\/DelspoN", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/DelspoN\/CVE-2024-57376", - "description": "CVE-2024-57376 exploit", - "fork": false, - "created_at": "2025-05-08T00:35:08Z", - "updated_at": "2026-01-27T01:45:21Z", - "pushed_at": "2025-05-08T00:45:41Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-57394.json b/2024/CVE-2024-57394.json deleted file mode 100644 index 25a4b0d8e1..0000000000 --- a/2024/CVE-2024-57394.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 967457053, - "name": "CVE-2024-57394", - "full_name": "cwjchoi01\/CVE-2024-57394", - "owner": { - "login": "cwjchoi01", - "id": 89372537, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/89372537?v=4", - "html_url": "https:\/\/github.com\/cwjchoi01", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/cwjchoi01\/CVE-2024-57394", - "description": "CVE-2024-57394", - "fork": false, - "created_at": "2025-04-16T13:36:40Z", - "updated_at": "2025-04-16T13:59:47Z", - "pushed_at": "2025-04-16T13:59:44Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-57427.json b/2024/CVE-2024-57427.json deleted file mode 100644 index c4d4bca9d6..0000000000 --- a/2024/CVE-2024-57427.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 927076113, - "name": "CVE-2024-57427", - "full_name": "ahrixia\/CVE-2024-57427", - "owner": { - "login": "ahrixia", - "id": 35935843, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/35935843?v=4", - "html_url": "https:\/\/github.com\/ahrixia", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ahrixia\/CVE-2024-57427", - "description": "CVE-2024-57427: PHPJabbers Cinema Booking System v2.0 is vulnerable to reflected XSS, allowing session hijacking and phishing attacks. ", - "fork": false, - "created_at": "2025-02-04T11:12:28Z", - "updated_at": "2025-02-04T11:49:30Z", - "pushed_at": "2025-02-04T11:49:27Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-57428.json b/2024/CVE-2024-57428.json deleted file mode 100644 index 31c85027be..0000000000 --- a/2024/CVE-2024-57428.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 927076911, - "name": "CVE-2024-57428", - "full_name": "ahrixia\/CVE-2024-57428", - "owner": { - "login": "ahrixia", - "id": 35935843, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/35935843?v=4", - "html_url": "https:\/\/github.com\/ahrixia", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ahrixia\/CVE-2024-57428", - "description": "CVE-2024-57428: PHPJabbers Cinema Booking System v2.0 suffers from stored XSS, enabling persistent JavaScript injection for phishing and malware attacks. ", - "fork": false, - "created_at": "2025-02-04T11:14:10Z", - "updated_at": "2025-02-04T12:10:01Z", - "pushed_at": "2025-02-04T12:09:58Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-57429.json b/2024/CVE-2024-57429.json deleted file mode 100644 index fe7829fc02..0000000000 --- a/2024/CVE-2024-57429.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 927077017, - "name": "CVE-2024-57429", - "full_name": "ahrixia\/CVE-2024-57429", - "owner": { - "login": "ahrixia", - "id": 35935843, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/35935843?v=4", - "html_url": "https:\/\/github.com\/ahrixia", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ahrixia\/CVE-2024-57429", - "description": "CVE-2024-57429: PHPJabbers Cinema Booking System v2.0 is vulnerable to CSRF, allowing attackers to escalate privileges by forging requests on behalf of an admin. ", - "fork": false, - "created_at": "2025-02-04T11:14:24Z", - "updated_at": "2025-02-04T12:12:46Z", - "pushed_at": "2025-02-04T12:12:43Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-57430.json b/2024/CVE-2024-57430.json deleted file mode 100644 index 859ee12fd4..0000000000 --- a/2024/CVE-2024-57430.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 927077103, - "name": "CVE-2024-57430", - "full_name": "ahrixia\/CVE-2024-57430", - "owner": { - "login": "ahrixia", - "id": 35935843, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/35935843?v=4", - "html_url": "https:\/\/github.com\/ahrixia", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ahrixia\/CVE-2024-57430", - "description": "CVE-2024-57430: PHPJabbers Cinema Booking System v2.0 is vulnerable to SQL injection, leading to unauthorized data access and privilege escalation.", - "fork": false, - "created_at": "2025-02-04T11:14:36Z", - "updated_at": "2025-02-04T12:18:00Z", - "pushed_at": "2025-02-04T12:17:57Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-57484.json b/2024/CVE-2024-57484.json deleted file mode 100644 index 82cdd5084f..0000000000 --- a/2024/CVE-2024-57484.json +++ /dev/null @@ -1,44 +0,0 @@ -[ - { - "id": 935008788, - "name": "CVE-2024-57484", - "full_name": "yogeswaran6383\/CVE-2024-57484", - "owner": { - "login": "yogeswaran6383", - "id": 180262668, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/180262668?v=4", - "html_url": "https:\/\/github.com\/yogeswaran6383", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/yogeswaran6383\/CVE-2024-57484", - "description": null, - "fork": false, - "created_at": "2025-02-18T18:56:35Z", - "updated_at": "2025-07-09T13:35:40Z", - "pushed_at": "2025-02-18T19:04:21Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "bugbounty", - "bughunting", - "cve", - "cve-2024-57484", - "disclosure", - "foxyproxy", - "mitre-attack", - "vulnerbility-research" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-57514.json b/2024/CVE-2024-57514.json deleted file mode 100644 index 507cf2d184..0000000000 --- a/2024/CVE-2024-57514.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 925596370, - "name": "CVE-2024-57514", - "full_name": "rvzsec\/CVE-2024-57514", - "owner": { - "login": "rvzsec", - "id": 84989569, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/84989569?v=4", - "html_url": "https:\/\/github.com\/rvzsec", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/rvzsec\/CVE-2024-57514", - "description": null, - "fork": false, - "created_at": "2025-02-01T08:52:04Z", - "updated_at": "2025-02-01T08:52:08Z", - "pushed_at": "2025-02-01T08:52:04Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-57522.json b/2024/CVE-2024-57522.json deleted file mode 100644 index b79b3785ec..0000000000 --- a/2024/CVE-2024-57522.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 917312774, - "name": "CVE-2024-57522", - "full_name": "HackWidMaddy\/CVE-2024-57522", - "owner": { - "login": "HackWidMaddy", - "id": 90766106, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/90766106?v=4", - "html_url": "https:\/\/github.com\/HackWidMaddy", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/HackWidMaddy\/CVE-2024-57522", - "description": "CVE-2024-57522 - Stored XSS Vulnerability in Users.php - SourceCodester Packers and Movers Management System 1.0", - "fork": false, - "created_at": "2025-01-15T18:45:35Z", - "updated_at": "2025-10-25T15:43:46Z", - "pushed_at": "2025-01-19T13:56:50Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-57609.json b/2024/CVE-2024-57609.json deleted file mode 100644 index 150e43836b..0000000000 --- a/2024/CVE-2024-57609.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 927267870, - "name": "CVE-2024-57609", - "full_name": "Mr-UN533N\/CVE-2024-57609", - "owner": { - "login": "Mr-UN533N", - "id": 61660857, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61660857?v=4", - "html_url": "https:\/\/github.com\/Mr-UN533N", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Mr-UN533N\/CVE-2024-57609", - "description": "Open Redirect Vulnerability in Kanaries", - "fork": false, - "created_at": "2025-02-04T17:21:08Z", - "updated_at": "2025-02-04T17:32:27Z", - "pushed_at": "2025-02-04T17:32:24Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-57610.json b/2024/CVE-2024-57610.json deleted file mode 100644 index 00925b86fa..0000000000 --- a/2024/CVE-2024-57610.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 927282392, - "name": "CVE-2024-57610", - "full_name": "Mr-UN533N\/CVE-2024-57610", - "owner": { - "login": "Mr-UN533N", - "id": 61660857, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61660857?v=4", - "html_url": "https:\/\/github.com\/Mr-UN533N", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Mr-UN533N\/CVE-2024-57610", - "description": "Lack of Rate Limiting in Sylius v2.0.2", - "fork": false, - "created_at": "2025-02-04T17:49:44Z", - "updated_at": "2025-02-04T18:03:05Z", - "pushed_at": "2025-02-04T18:03:02Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-57725.json b/2024/CVE-2024-57725.json deleted file mode 100644 index e57103eeab..0000000000 --- a/2024/CVE-2024-57725.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 912136348, - "name": "CVE-2024-57725", - "full_name": "pointedsec\/CVE-2024-57725", - "owner": { - "login": "pointedsec", - "id": 113613079, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/113613079?v=4", - "html_url": "https:\/\/github.com\/pointedsec", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/pointedsec\/CVE-2024-57725", - "description": "This repository documents an unauthenticated GPON manipulation vulnerability discovered in certain Arcadyan routers.", - "fork": false, - "created_at": "2025-01-04T17:48:32Z", - "updated_at": "2025-07-28T19:05:59Z", - "pushed_at": "2025-02-13T22:27:16Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-57778.json b/2024/CVE-2024-57778.json deleted file mode 100644 index e77eeb08c4..0000000000 --- a/2024/CVE-2024-57778.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 932321167, - "name": "CVE-2024-57778", - "full_name": "KUK3N4N\/CVE-2024-57778", - "owner": { - "login": "KUK3N4N", - "id": 111459028, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/111459028?v=4", - "html_url": "https:\/\/github.com\/KUK3N4N", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/KUK3N4N\/CVE-2024-57778", - "description": "An issue in Orbe ONetView Roteador Onet-1200 Orbe 1680210096 allows a remote attacker to escalate privileges via the servers response from status code 500 to status code 200 ", - "fork": false, - "created_at": "2025-02-13T18:14:56Z", - "updated_at": "2025-02-13T19:35:25Z", - "pushed_at": "2025-02-13T19:35:21Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-57972.json b/2024/CVE-2024-57972.json deleted file mode 100644 index 13c47238df..0000000000 --- a/2024/CVE-2024-57972.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 944471683, - "name": "CVE-2024-57972", - "full_name": "tania-silva\/CVE-2024-57972", - "owner": { - "login": "tania-silva", - "id": 61155949, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/61155949?v=4", - "html_url": "https:\/\/github.com\/tania-silva", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/tania-silva\/CVE-2024-57972", - "description": null, - "fork": false, - "created_at": "2025-03-07T12:02:44Z", - "updated_at": "2025-03-07T12:07:15Z", - "pushed_at": "2025-03-07T12:07:11Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-5806.json b/2024/CVE-2024-5806.json index 8967c8b1bb..c297773d77 100644 --- a/2024/CVE-2024-5806.json +++ b/2024/CVE-2024-5806.json @@ -31,38 +31,5 @@ "watchers": 45, "score": 0, "subscribers_count": 0 - }, - { - "id": 945179161, - "name": "CVE-2024-5806", - "full_name": "sec13b\/CVE-2024-5806", - "owner": { - "login": "sec13b", - "id": 123419537, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123419537?v=4", - "html_url": "https:\/\/github.com\/sec13b", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/sec13b\/CVE-2024-5806", - "description": "progress moveit cve-2024-5806", - "fork": false, - "created_at": "2025-03-08T20:51:46Z", - "updated_at": "2025-03-08T20:54:25Z", - "pushed_at": "2025-03-08T20:54:22Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2024/CVE-2024-5909.json b/2024/CVE-2024-5909.json deleted file mode 100644 index 3cf4c6ff15..0000000000 --- a/2024/CVE-2024-5909.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 923594527, - "name": "EDR-ALPC-Block-POC", - "full_name": "ig-labs\/EDR-ALPC-Block-POC", - "owner": { - "login": "ig-labs", - "id": 191580969, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/191580969?v=4", - "html_url": "https:\/\/github.com\/ig-labs", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ig-labs\/EDR-ALPC-Block-POC", - "description": "Blocking Windows EDR agents by registering an own IPC-object in the Object Manager’s namespace (CVE-2023-3280, CVE-2024-5909, CVE-2024-20671)", - "fork": false, - "created_at": "2025-01-28T14:30:39Z", - "updated_at": "2026-07-29T02:20:44Z", - "pushed_at": "2025-02-27T11:22:35Z", - "stargazers_count": 36, - "watchers_count": 36, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 4, - "watchers": 36, - "score": 0, - "subscribers_count": 3 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-5932.json b/2024/CVE-2024-5932.json index 1a415c29ff..ab3501408c 100644 --- a/2024/CVE-2024-5932.json +++ b/2024/CVE-2024-5932.json @@ -76,39 +76,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 1038437961, - "name": "CVE-2024-5932-web-ui", - "full_name": "hlc23\/CVE-2024-5932-web-ui", - "owner": { - "login": "hlc23", - "id": 99625462, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/99625462?v=4", - "html_url": "https:\/\/github.com\/hlc23", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/hlc23\/CVE-2024-5932-web-ui", - "description": null, - "fork": false, - "created_at": "2025-08-15T07:41:06Z", - "updated_at": "2025-08-15T09:33:03Z", - "pushed_at": "2025-08-15T09:33:00Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1089752078, "name": "CVE-2024-5932", diff --git a/2024/CVE-2024-6132.json b/2024/CVE-2024-6132.json deleted file mode 100644 index 05e6a466b8..0000000000 --- a/2024/CVE-2024-6132.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 946585418, - "name": "CVE-2024-6132", - "full_name": "Nxploited\/CVE-2024-6132", - "owner": { - "login": "Nxploited", - "id": 188819918, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4", - "html_url": "https:\/\/github.com\/Nxploited", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-6132", - "description": "Pexels: Free Stock Photos <= 1.2.2 - Authenticated (Contributor+) Arbitrary File Upload", - "fork": false, - "created_at": "2025-03-11T11:20:02Z", - "updated_at": "2025-09-28T23:39:17Z", - "pushed_at": "2025-03-29T20:31:22Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-6244.json b/2024/CVE-2024-6244.json deleted file mode 100644 index a8a8ee7512..0000000000 --- a/2024/CVE-2024-6244.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 929554494, - "name": "CVE-2024-6244", - "full_name": "Nxploited\/CVE-2024-6244", - "owner": { - "login": "Nxploited", - "id": 188819918, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4", - "html_url": "https:\/\/github.com\/Nxploited", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-6244", - "description": "pz-frontend-manager < 1.0.6 - CSRF Profile Picture Exploit", - "fork": false, - "created_at": "2025-02-08T20:17:15Z", - "updated_at": "2025-02-08T20:30:34Z", - "pushed_at": "2025-02-08T20:30:30Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-6366.json b/2024/CVE-2024-6366.json index f99e729972..5a12833458 100644 --- a/2024/CVE-2024-6366.json +++ b/2024/CVE-2024-6366.json @@ -31,38 +31,5 @@ "watchers": 0, "score": 0, "subscribers_count": 1 - }, - { - "id": 926114603, - "name": "CVE-2024-6366-PoC", - "full_name": "Nxploited\/CVE-2024-6366-PoC", - "owner": { - "login": "Nxploited", - "id": 188819918, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4", - "html_url": "https:\/\/github.com\/Nxploited", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-6366-PoC", - "description": "User Profile Builder <= 3.11.7 - Unauthenticated Media Upload", - "fork": false, - "created_at": "2025-02-02T15:37:14Z", - "updated_at": "2025-02-02T15:43:10Z", - "pushed_at": "2025-02-02T15:43:07Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2024/CVE-2024-6387.json b/2024/CVE-2024-6387.json index 26166defe7..9db38b1a6a 100644 --- a/2024/CVE-2024-6387.json +++ b/2024/CVE-2024-6387.json @@ -52,7 +52,7 @@ "stargazers_count": 495, "watchers_count": 495, "has_discussions": false, - "forks_count": 183, + "forks_count": 184, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,7 +60,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 183, + "forks": 184, "watchers": 495, "score": 0, "subscribers_count": 4 @@ -2931,72 +2931,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 919381259, - "name": "CVE-2024-6387", - "full_name": "kinu404\/CVE-2024-6387", - "owner": { - "login": "kinu404", - "id": 92515100, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/92515100?v=4", - "html_url": "https:\/\/github.com\/kinu404", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/kinu404\/CVE-2024-6387", - "description": "This is an altered PoC for d0rb\/CVE-2024-6387. This takes glibc addresses and trys to exploit the CVE through them.", - "fork": false, - "created_at": "2025-01-20T09:38:40Z", - "updated_at": "2025-05-20T10:51:44Z", - "pushed_at": "2025-01-20T09:40:27Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1024961481, - "name": "CVE-2024-6387_Checker", - "full_name": "xiw1ll\/CVE-2024-6387_Checker", - "owner": { - "login": "xiw1ll", - "id": 69167284, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/69167284?v=4", - "html_url": "https:\/\/github.com\/xiw1ll", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/xiw1ll\/CVE-2024-6387_Checker", - "description": "Nuclei template to detect CVE-2024-6387. All latest patched versions are excluded.", - "fork": false, - "created_at": "2025-07-23T14:04:37Z", - "updated_at": "2025-10-09T09:08:11Z", - "pushed_at": "2025-07-24T09:45:52Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, { "id": 1053001257, "name": "regreSSHion-CVE-2024-6387", diff --git a/2024/CVE-2024-6460.json b/2024/CVE-2024-6460.json deleted file mode 100644 index 014f3b194c..0000000000 --- a/2024/CVE-2024-6460.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 920070741, - "name": "CVE-2024-6460", - "full_name": "Nxploited\/CVE-2024-6460", - "owner": { - "login": "Nxploited", - "id": 188819918, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4", - "html_url": "https:\/\/github.com\/Nxploited", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-6460", - "description": "Grow by Tradedoubler < 2.0.22 - Unauthenticated LFI", - "fork": false, - "created_at": "2025-01-21T14:12:29Z", - "updated_at": "2025-01-21T14:15:06Z", - "pushed_at": "2025-01-21T14:15:03Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 920575926, - "name": "CVE-2024-6460", - "full_name": "E1-Bot141\/CVE-2024-6460", - "owner": { - "login": "E1-Bot141", - "id": 71170127, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/71170127?v=4", - "html_url": "https:\/\/github.com\/E1-Bot141", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/E1-Bot141\/CVE-2024-6460", - "description": "备份的CVE", - "fork": false, - "created_at": "2025-01-22T11:56:50Z", - "updated_at": "2025-01-22T12:36:14Z", - "pushed_at": "2025-01-22T12:35:20Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-6485.json b/2024/CVE-2024-6485.json deleted file mode 100644 index 5c958f1974..0000000000 --- a/2024/CVE-2024-6485.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1023498840, - "name": "Bootstrap-with-XSS", - "full_name": "Yumeae\/Bootstrap-with-XSS", - "owner": { - "login": "Yumeae", - "id": 176977377, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/176977377?v=4", - "html_url": "https:\/\/github.com\/Yumeae", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Yumeae\/Bootstrap-with-XSS", - "description": "A poc for Bootstrap XSS(CVE-2024-6485、CVE-2016-10735、CVE-2019-8331、CVE-2018-14040)", - "fork": false, - "created_at": "2025-07-21T08:52:37Z", - "updated_at": "2026-05-19T01:11:52Z", - "pushed_at": "2025-08-21T04:06:24Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 4, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-6648.json b/2024/CVE-2024-6648.json deleted file mode 100644 index b45fbbc8c7..0000000000 --- a/2024/CVE-2024-6648.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 980010304, - "name": "CVE-2024-6648", - "full_name": "n0d0n\/CVE-2024-6648", - "owner": { - "login": "n0d0n", - "id": 174124811, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/174124811?v=4", - "html_url": "https:\/\/github.com\/n0d0n", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/n0d0n\/CVE-2024-6648", - "description": null, - "fork": false, - "created_at": "2025-05-08T12:23:07Z", - "updated_at": "2025-05-20T17:32:53Z", - "pushed_at": "2025-05-20T17:32:50Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-7014.json b/2024/CVE-2024-7014.json deleted file mode 100644 index d271151922..0000000000 --- a/2024/CVE-2024-7014.json +++ /dev/null @@ -1,68 +0,0 @@ -[ - { - "id": 943984793, - "name": "CVE-2024-7014", - "full_name": "hexspectrum1\/CVE-2024-7014", - "owner": { - "login": "hexspectrum1", - "id": 202147753, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/202147753?v=4", - "html_url": "https:\/\/github.com\/hexspectrum1", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/hexspectrum1\/CVE-2024-7014", - "description": null, - "fork": false, - "created_at": "2025-03-06T15:38:46Z", - "updated_at": "2025-10-13T03:34:24Z", - "pushed_at": "2025-03-08T06:51:34Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 3, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 949271526, - "name": "PoC-for-CVE-2024-7014-Exploit", - "full_name": "absholi7ly\/PoC-for-CVE-2024-7014-Exploit", - "owner": { - "login": "absholi7ly", - "id": 72062217, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/72062217?v=4", - "html_url": "https:\/\/github.com\/absholi7ly", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/absholi7ly\/PoC-for-CVE-2024-7014-Exploit", - "description": "Proof of Concept (PoC) for CVE-2024-7014 (EvilVideo) Exploit", - "fork": false, - "created_at": "2025-03-16T04:05:01Z", - "updated_at": "2026-04-16T00:20:22Z", - "pushed_at": "2025-03-17T03:48:24Z", - "stargazers_count": 12, - "watchers_count": 12, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 12, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-7120.json b/2024/CVE-2024-7120.json index 9a65df546e..f1ebfa6eeb 100644 --- a/2024/CVE-2024-7120.json +++ b/2024/CVE-2024-7120.json @@ -31,38 +31,5 @@ "watchers": 8, "score": 0, "subscribers_count": 1 - }, - { - "id": 972063476, - "name": "CVE-2024-7120-Exploit-by-Dark-07x", - "full_name": "jokeir07x\/CVE-2024-7120-Exploit-by-Dark-07x", - "owner": { - "login": "jokeir07x", - "id": 175165146, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/175165146?v=4", - "html_url": "https:\/\/github.com\/jokeir07x", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/jokeir07x\/CVE-2024-7120-Exploit-by-Dark-07x", - "description": null, - "fork": false, - "created_at": "2025-04-24T13:33:09Z", - "updated_at": "2025-07-31T03:05:08Z", - "pushed_at": "2025-04-24T13:33:57Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2024/CVE-2024-7399.json b/2024/CVE-2024-7399.json deleted file mode 100644 index 560226e7f2..0000000000 --- a/2024/CVE-2024-7399.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 993326207, - "name": "CVE-2024-7399-POC", - "full_name": "davidxbors\/CVE-2024-7399-POC", - "owner": { - "login": "davidxbors", - "id": 22767204, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/22767204?v=4", - "html_url": "https:\/\/github.com\/davidxbors", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/davidxbors\/CVE-2024-7399-POC", - "description": null, - "fork": false, - "created_at": "2025-05-30T15:42:34Z", - "updated_at": "2025-05-30T19:12:39Z", - "pushed_at": "2025-05-30T19:12:36Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-7479.json b/2024/CVE-2024-7479.json index 194d4277f0..2447764e2f 100644 --- a/2024/CVE-2024-7479.json +++ b/2024/CVE-2024-7479.json @@ -31,38 +31,5 @@ "watchers": 137, "score": 0, "subscribers_count": 2 - }, - { - "id": 955624383, - "name": "CVE-2024-7479", - "full_name": "fortra\/CVE-2024-7479", - "owner": { - "login": "fortra", - "id": 117669217, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/117669217?v=4", - "html_url": "https:\/\/github.com\/fortra", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/fortra\/CVE-2024-7479", - "description": "Proof of concept for CVE-2024-7479", - "fork": false, - "created_at": "2025-03-26T23:52:21Z", - "updated_at": "2025-07-28T09:16:35Z", - "pushed_at": "2025-03-27T13:56:05Z", - "stargazers_count": 8, - "watchers_count": 8, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 8, - "score": 0, - "subscribers_count": 2 } ] \ No newline at end of file diff --git a/2024/CVE-2024-7595.json b/2024/CVE-2024-7595.json deleted file mode 100644 index 88ed76334c..0000000000 --- a/2024/CVE-2024-7595.json +++ /dev/null @@ -1,51 +0,0 @@ -[ - { - "id": 920232234, - "name": "ipeeyoupeewepee", - "full_name": "PapayaJackal\/ipeeyoupeewepee", - "owner": { - "login": "PapayaJackal", - "id": 145766029, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/145766029?v=4", - "html_url": "https:\/\/github.com\/PapayaJackal", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/PapayaJackal\/ipeeyoupeewepee", - "description": "Scanner and attack suite for hosts that forward unauthenticated packets via IPIP and GRE protocols. (CVE-2020-10136 CVE-2024-7595)", - "fork": false, - "created_at": "2025-01-21T19:41:35Z", - "updated_at": "2026-06-03T11:32:12Z", - "pushed_at": "2025-01-22T13:20:58Z", - "stargazers_count": 12, - "watchers_count": 12, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "booter", - "caida", - "cisco", - "ddos", - "dns-amplification", - "dns-reflection", - "gre", - "ip-in-ip", - "ip-spoof", - "ip-spoofing", - "iphm", - "ipip", - "spoof", - "spoofing", - "tunneltester" - ], - "visibility": "public", - "forks": 0, - "watchers": 12, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-7627.json b/2024/CVE-2024-7627.json index b01949bdf9..33a818f61a 100644 --- a/2024/CVE-2024-7627.json +++ b/2024/CVE-2024-7627.json @@ -1,40 +1,4 @@ [ - { - "id": 913607383, - "name": "CVE-2024-7627-PoC", - "full_name": "siunam321\/CVE-2024-7627-PoC", - "owner": { - "login": "siunam321", - "id": 104430134, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/104430134?v=4", - "html_url": "https:\/\/github.com\/siunam321", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/siunam321\/CVE-2024-7627-PoC", - "description": "Proof-of-Concept script for WordPress plugin Bit File Manager version 6.0 - 6.5.5 Unauthenticated Remote Code Execution via Race Condition (CVE-2024-7627) vulnerability", - "fork": false, - "created_at": "2025-01-08T02:32:41Z", - "updated_at": "2026-01-21T02:16:08Z", - "pushed_at": "2025-02-12T05:16:01Z", - "stargazers_count": 6, - "watchers_count": 6, - "has_discussions": false, - "forks_count": 2, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "proof-of-concept", - "wordpress-plugin" - ], - "visibility": "public", - "forks": 2, - "watchers": 6, - "score": 0, - "subscribers_count": 1 - }, { "id": 1069744504, "name": "CVE-2024-7627", diff --git a/2024/CVE-2024-7954.json b/2024/CVE-2024-7954.json index 754d36d99b..35ed715cfa 100644 --- a/2024/CVE-2024-7954.json +++ b/2024/CVE-2024-7954.json @@ -197,72 +197,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 927835233, - "name": "RCE-CVE-2024-7954", - "full_name": "Arthikw3b\/RCE-CVE-2024-7954", - "owner": { - "login": "Arthikw3b", - "id": 154344318, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/154344318?v=4", - "html_url": "https:\/\/github.com\/Arthikw3b", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Arthikw3b\/RCE-CVE-2024-7954", - "description": null, - "fork": false, - "created_at": "2025-02-05T16:13:39Z", - "updated_at": "2025-02-05T16:15:30Z", - "pushed_at": "2025-02-05T16:15:26Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1015860693, - "name": "CVE-2024-7954", - "full_name": "r0otk3r\/CVE-2024-7954", - "owner": { - "login": "r0otk3r", - "id": 211012408, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/211012408?v=4", - "html_url": "https:\/\/github.com\/r0otk3r", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/r0otk3r\/CVE-2024-7954", - "description": null, - "fork": false, - "created_at": "2025-07-08T06:32:41Z", - "updated_at": "2025-07-12T10:54:32Z", - "pushed_at": "2025-07-12T10:54:29Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1114631022, "name": "Exploitation-of-a-Remote-Code-Execution-vulnerability--CVE-2024-7954-", diff --git a/2024/CVE-2024-7966.json b/2024/CVE-2024-7966.json deleted file mode 100644 index 6e6b849633..0000000000 --- a/2024/CVE-2024-7966.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1012250912, - "name": "Chrome-Skia-CVE-2024-7966", - "full_name": "HyHy100\/Chrome-Skia-CVE-2024-7966", - "owner": { - "login": "HyHy100", - "id": 21271840, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/21271840?v=4", - "html_url": "https:\/\/github.com\/HyHy100", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/HyHy100\/Chrome-Skia-CVE-2024-7966", - "description": "PoC for a Chrome SKSL bypass + integer overflow -> OOB write vulnerability I reported to Google in Skia. ", - "fork": false, - "created_at": "2025-07-02T03:58:42Z", - "updated_at": "2025-07-02T04:36:31Z", - "pushed_at": "2025-07-02T04:33:04Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-7971.json b/2024/CVE-2024-7971.json deleted file mode 100644 index 7fd12142d0..0000000000 --- a/2024/CVE-2024-7971.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 965335523, - "name": "CVE-2024-7971", - "full_name": "mistymntncop\/CVE-2024-7971", - "owner": { - "login": "mistymntncop", - "id": 105329747, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/105329747?v=4", - "html_url": "https:\/\/github.com\/mistymntncop", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/mistymntncop\/CVE-2024-7971", - "description": null, - "fork": false, - "created_at": "2025-04-12T23:40:52Z", - "updated_at": "2026-06-21T16:44:44Z", - "pushed_at": "2025-04-14T00:49:30Z", - "stargazers_count": 35, - "watchers_count": 35, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 4, - "watchers": 35, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-7985.json b/2024/CVE-2024-7985.json deleted file mode 100644 index 8937561ac7..0000000000 --- a/2024/CVE-2024-7985.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 933421738, - "name": "CVE-2024-7985-PoC", - "full_name": "Nxploited\/CVE-2024-7985-PoC", - "owner": { - "login": "Nxploited", - "id": 188819918, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4", - "html_url": "https:\/\/github.com\/Nxploited", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-7985-PoC", - "description": "FileOrganizer <= 1.0.9 - Authenticated (Subscriber+) Arbitrary File Upload", - "fork": false, - "created_at": "2025-02-15T22:57:39Z", - "updated_at": "2025-02-15T23:08:15Z", - "pushed_at": "2025-02-15T23:08:12Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-8118.json b/2024/CVE-2024-8118.json deleted file mode 100644 index b60c0d0487..0000000000 --- a/2024/CVE-2024-8118.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1023408297, - "name": "POC-CVE-2024-8118", - "full_name": "nurarifin05\/POC-CVE-2024-8118", - "owner": { - "login": "nurarifin05", - "id": 32788393, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/32788393?v=4", - "html_url": "https:\/\/github.com\/nurarifin05", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/nurarifin05\/POC-CVE-2024-8118", - "description": "Berikut untuk POC grafana CVE-2024-8118 ", - "fork": false, - "created_at": "2025-07-21T05:58:31Z", - "updated_at": "2025-07-21T05:59:56Z", - "pushed_at": "2025-07-21T05:59:35Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-8176.json b/2024/CVE-2024-8176.json deleted file mode 100644 index ea124c5a5b..0000000000 --- a/2024/CVE-2024-8176.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 959144338, - "name": "Expat_2.6.2_CVE-2024-8176", - "full_name": "uthrasri\/Expat_2.6.2_CVE-2024-8176", - "owner": { - "login": "uthrasri", - "id": 145666390, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/145666390?v=4", - "html_url": "https:\/\/github.com\/uthrasri", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/uthrasri\/Expat_2.6.2_CVE-2024-8176", - "description": null, - "fork": false, - "created_at": "2025-04-02T10:39:00Z", - "updated_at": "2025-04-10T19:33:38Z", - "pushed_at": "2025-04-10T19:33:34Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-8190.json b/2024/CVE-2024-8190.json index 5835bf6c98..6398613ef6 100644 --- a/2024/CVE-2024-8190.json +++ b/2024/CVE-2024-8190.json @@ -31,38 +31,5 @@ "watchers": 16, "score": 0, "subscribers_count": 5 - }, - { - "id": 942612101, - "name": "CVE-2024-8190-unauth", - "full_name": "flyingllama87\/CVE-2024-8190-unauth", - "owner": { - "login": "flyingllama87", - "id": 28851730, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/28851730?v=4", - "html_url": "https:\/\/github.com\/flyingllama87", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/flyingllama87\/CVE-2024-8190-unauth", - "description": "Combining CVE-2024-8963 & CVE-2024-8190 - For Unauthenticated RCE on Ivanti CSA 4.6 and below ", - "fork": false, - "created_at": "2025-03-04T11:34:52Z", - "updated_at": "2025-06-03T16:46:30Z", - "pushed_at": "2025-03-04T14:16:51Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 2, - "score": 0, - "subscribers_count": 1 } ] \ No newline at end of file diff --git a/2024/CVE-2024-8193.json b/2024/CVE-2024-8193.json deleted file mode 100644 index 302bc17412..0000000000 --- a/2024/CVE-2024-8193.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1012250708, - "name": "Chrome-Skia-CVE-2024-8193", - "full_name": "HyHy100\/Chrome-Skia-CVE-2024-8193", - "owner": { - "login": "HyHy100", - "id": 21271840, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/21271840?v=4", - "html_url": "https:\/\/github.com\/HyHy100", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/HyHy100\/Chrome-Skia-CVE-2024-8193", - "description": " PoC for a Chrome integer overflow -> OOB write vulnerability I reported to Google in Skia. ", - "fork": false, - "created_at": "2025-07-02T03:58:04Z", - "updated_at": "2025-07-02T04:38:50Z", - "pushed_at": "2025-07-02T04:38:47Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-8198.json b/2024/CVE-2024-8198.json deleted file mode 100644 index 3aa5e0ace4..0000000000 --- a/2024/CVE-2024-8198.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1012249911, - "name": "Chrome-Skia-CVE-2024-8198", - "full_name": "HyHy100\/Chrome-Skia-CVE-2024-8198", - "owner": { - "login": "HyHy100", - "id": 21271840, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/21271840?v=4", - "html_url": "https:\/\/github.com\/HyHy100", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/HyHy100\/Chrome-Skia-CVE-2024-8198", - "description": " PoC for a Chrome integer overflow -> OOB write vulnerability I reported to Google in Skia. ", - "fork": false, - "created_at": "2025-07-02T03:55:54Z", - "updated_at": "2025-07-02T04:36:49Z", - "pushed_at": "2025-07-02T04:33:37Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-8232.json b/2024/CVE-2024-8232.json deleted file mode 100644 index 7edec872b9..0000000000 --- a/2024/CVE-2024-8232.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1000706877, - "name": "CVE-2024-8232", - "full_name": "z3usx01\/CVE-2024-8232", - "owner": { - "login": "z3usx01", - "id": 112891506, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/112891506?v=4", - "html_url": "https:\/\/github.com\/z3usx01", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/z3usx01\/CVE-2024-8232", - "description": "SpiderControl SCADA Web Server File Upload Vulnerability", - "fork": false, - "created_at": "2025-06-12T07:44:56Z", - "updated_at": "2025-06-12T07:47:09Z", - "pushed_at": "2025-06-12T07:47:06Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-8289.json b/2024/CVE-2024-8289.json deleted file mode 100644 index 32aef69687..0000000000 --- a/2024/CVE-2024-8289.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 946677301, - "name": "CVE-2024-8289", - "full_name": "pashayogi\/CVE-2024-8289", - "owner": { - "login": "pashayogi", - "id": 50790111, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/50790111?v=4", - "html_url": "https:\/\/github.com\/pashayogi", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/pashayogi\/CVE-2024-8289", - "description": "CVE-2024-8289 https:\/\/www.cve.org\/CVERecord?id=CVE-2024-8289, Vendor wcmp Product MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution", - "fork": false, - "created_at": "2025-03-11T14:05:47Z", - "updated_at": "2025-03-11T14:06:19Z", - "pushed_at": "2025-03-11T14:06:15Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-8381.json b/2024/CVE-2024-8381.json deleted file mode 100644 index 7a9117c385..0000000000 --- a/2024/CVE-2024-8381.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 924636246, - "name": "CVE-2024-8381", - "full_name": "bjrjk\/CVE-2024-8381", - "owner": { - "login": "bjrjk", - "id": 6657270, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/6657270?v=4", - "html_url": "https:\/\/github.com\/bjrjk", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/bjrjk\/CVE-2024-8381", - "description": "CVE-2024-8381: A SpiderMonkey Interpreter Type Confusion Bug.", - "fork": false, - "created_at": "2025-01-30T11:31:51Z", - "updated_at": "2026-05-13T19:50:13Z", - "pushed_at": "2025-02-12T01:18:11Z", - "stargazers_count": 15, - "watchers_count": 15, - "has_discussions": false, - "forks_count": 4, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 4, - "watchers": 15, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-8425.json b/2024/CVE-2024-8425.json deleted file mode 100644 index 6eefe80bb5..0000000000 --- a/2024/CVE-2024-8425.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 968928651, - "name": "CVE-2024-8425", - "full_name": "KTN1990\/CVE-2024-8425", - "owner": { - "login": "KTN1990", - "id": 33407405, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/33407405?v=4", - "html_url": "https:\/\/github.com\/KTN1990", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/KTN1990\/CVE-2024-8425", - "description": "The WooCommerce Ultimate Gift Card plugin for WordPress is vulnerable to arbitrary file uploads.", - "fork": false, - "created_at": "2025-04-19T02:23:15Z", - "updated_at": "2025-11-23T14:12:15Z", - "pushed_at": "2025-04-19T02:41:07Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-8517.json b/2024/CVE-2024-8517.json index 6369ec30ea..a0db754fe3 100644 --- a/2024/CVE-2024-8517.json +++ b/2024/CVE-2024-8517.json @@ -31,38 +31,5 @@ "watchers": 16, "score": 0, "subscribers_count": 1 - }, - { - "id": 1030274307, - "name": "SPIP-BigUp-Unauthenticated-RCE-Exploit-CVE-2024-8517", - "full_name": "saadhassan77\/SPIP-BigUp-Unauthenticated-RCE-Exploit-CVE-2024-8517", - "owner": { - "login": "saadhassan77", - "id": 104758930, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/104758930?v=4", - "html_url": "https:\/\/github.com\/saadhassan77", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/saadhassan77\/SPIP-BigUp-Unauthenticated-RCE-Exploit-CVE-2024-8517", - "description": "This Python exploit targets a critical unauthenticated Remote Code Execution (RCE) vulnerability in the BigUp plugin of SPIP CMS (≤ 4.3.1, 4.2.15, 4.1.17). It abuses the bigup_retrouver_fichiers parameter, allowing attackers to execute arbitrary PHP via upload progress features, without authentication.", - "fork": false, - "created_at": "2025-08-01T11:14:15Z", - "updated_at": "2025-08-03T02:24:18Z", - "pushed_at": "2025-08-01T11:36:59Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2024/CVE-2024-8636.json b/2024/CVE-2024-8636.json deleted file mode 100644 index c64e2a650b..0000000000 --- a/2024/CVE-2024-8636.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1012249371, - "name": "Chrome-Skia-CVE-2024-8636", - "full_name": "HyHy100\/Chrome-Skia-CVE-2024-8636", - "owner": { - "login": "HyHy100", - "id": 21271840, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/21271840?v=4", - "html_url": "https:\/\/github.com\/HyHy100", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/HyHy100\/Chrome-Skia-CVE-2024-8636", - "description": " PoC for a Chrome integer overflow -> OOB write vulnerability I reported to Google in Skia.", - "fork": false, - "created_at": "2025-07-02T03:54:28Z", - "updated_at": "2025-07-02T04:36:03Z", - "pushed_at": "2025-07-02T04:31:16Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-8682.json b/2024/CVE-2024-8682.json deleted file mode 100644 index de7beb87ca..0000000000 --- a/2024/CVE-2024-8682.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 991214377, - "name": "CVE-2024-8682", - "full_name": "4minx\/CVE-2024-8682", - "owner": { - "login": "4minx", - "id": 37972730, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/37972730?v=4", - "html_url": "https:\/\/github.com\/4minx", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/4minx\/CVE-2024-8682", - "description": null, - "fork": false, - "created_at": "2025-05-27T09:44:45Z", - "updated_at": "2025-10-05T23:29:41Z", - "pushed_at": "2025-05-27T09:52:40Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-8743.json b/2024/CVE-2024-8743.json deleted file mode 100644 index faa33802fa..0000000000 --- a/2024/CVE-2024-8743.json +++ /dev/null @@ -1,38 +0,0 @@ -[ - { - "id": 914259917, - "name": "CVE-2024-8743-PoC", - "full_name": "siunam321\/CVE-2024-8743-PoC", - "owner": { - "login": "siunam321", - "id": 104430134, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/104430134?v=4", - "html_url": "https:\/\/github.com\/siunam321", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/siunam321\/CVE-2024-8743-PoC", - "description": "Proof-of-Concept script for WordPress plugin Bit File Manager version <= 6.5.7 Authenticated (Subscriber+) Limited JavaScript File Upload (CVE-2024-8743) vulnerability", - "fork": false, - "created_at": "2025-01-09T08:54:56Z", - "updated_at": "2025-03-05T01:59:33Z", - "pushed_at": "2025-02-12T05:17:02Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "proof-of-concept", - "wordpress-plugin" - ], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-9014.json b/2024/CVE-2024-9014.json index 90854a1945..1c2057d409 100644 --- a/2024/CVE-2024-9014.json +++ b/2024/CVE-2024-9014.json @@ -31,38 +31,5 @@ "watchers": 8, "score": 0, "subscribers_count": 1 - }, - { - "id": 1016015734, - "name": "CVE-2024-9014", - "full_name": "r0otk3r\/CVE-2024-9014", - "owner": { - "login": "r0otk3r", - "id": 211012408, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/211012408?v=4", - "html_url": "https:\/\/github.com\/r0otk3r", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/r0otk3r\/CVE-2024-9014", - "description": null, - "fork": false, - "created_at": "2025-07-08T11:12:00Z", - "updated_at": "2025-07-12T10:53:39Z", - "pushed_at": "2025-07-12T10:53:36Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2024/CVE-2024-9047.json b/2024/CVE-2024-9047.json index f7ed73b146..1e3aa832a1 100644 --- a/2024/CVE-2024-9047.json +++ b/2024/CVE-2024-9047.json @@ -32,72 +32,6 @@ "score": 0, "subscribers_count": 2 }, - { - "id": 921984706, - "name": "CVE-2024-9047-Exploit", - "full_name": "Nxploited\/CVE-2024-9047-Exploit", - "owner": { - "login": "Nxploited", - "id": 188819918, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4", - "html_url": "https:\/\/github.com\/Nxploited", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-9047-Exploit", - "description": "Exploit for WordPress File Upload Plugin - All versions up to 4.24.11 are vulnerable.", - "fork": false, - "created_at": "2025-01-25T02:41:28Z", - "updated_at": "2026-04-09T10:47:58Z", - "pushed_at": "2025-01-25T03:20:25Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 4, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 949556096, - "name": "CVE-2024-9047", - "full_name": "tpdlshdmlrkfmcla\/CVE-2024-9047", - "owner": { - "login": "tpdlshdmlrkfmcla", - "id": 58906858, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/58906858?v=4", - "html_url": "https:\/\/github.com\/tpdlshdmlrkfmcla", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/tpdlshdmlrkfmcla\/CVE-2024-9047", - "description": "CVE-2024-9047, wfu_file_downloader.php", - "fork": false, - "created_at": "2025-03-16T18:05:51Z", - "updated_at": "2025-03-16T18:07:14Z", - "pushed_at": "2025-03-16T18:07:11Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - }, { "id": 1087502910, "name": "WordPress-File-Upload-4.24.11---Unauthenticated-Path-Traversal", diff --git a/2024/CVE-2024-9264.json b/2024/CVE-2024-9264.json index 84117d263b..c18203ded7 100644 --- a/2024/CVE-2024-9264.json +++ b/2024/CVE-2024-9264.json @@ -155,204 +155,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 993920679, - "name": "CVE-2024-9264", - "full_name": "Cythonic1\/CVE-2024-9264", - "owner": { - "login": "Cythonic1", - "id": 163199970, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/163199970?v=4", - "html_url": "https:\/\/github.com\/Cythonic1", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Cythonic1\/CVE-2024-9264", - "description": "A go implementation for CVE-2024-9264 which effect grafana versions 11.0.x, 11.1.x, and 11.2.x. ", - "fork": false, - "created_at": "2025-05-31T20:06:53Z", - "updated_at": "2025-06-27T06:42:10Z", - "pushed_at": "2025-06-05T17:20:48Z", - "stargazers_count": 3, - "watchers_count": 3, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 3, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1002210563, - "name": "CVE-2024-9264-Fixed", - "full_name": "Exerrdev\/CVE-2024-9264-Fixed", - "owner": { - "login": "Exerrdev", - "id": 190891527, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/190891527?v=4", - "html_url": "https:\/\/github.com\/Exerrdev", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Exerrdev\/CVE-2024-9264-Fixed", - "description": null, - "fork": false, - "created_at": "2025-06-15T00:38:47Z", - "updated_at": "2025-06-15T00:54:38Z", - "pushed_at": "2025-06-15T00:54:35Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1014330862, - "name": "CVE-2024-9264", - "full_name": "Royall-Researchers\/CVE-2024-9264", - "owner": { - "login": "Royall-Researchers", - "id": 151623016, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/151623016?v=4", - "html_url": "https:\/\/github.com\/Royall-Researchers", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Royall-Researchers\/CVE-2024-9264", - "description": null, - "fork": false, - "created_at": "2025-07-05T14:03:01Z", - "updated_at": "2025-07-05T14:06:18Z", - "pushed_at": "2025-07-05T14:04:13Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1014544544, - "name": "CVE-2024-9264", - "full_name": "ruizii\/CVE-2024-9264", - "owner": { - "login": "ruizii", - "id": 95191116, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/95191116?v=4", - "html_url": "https:\/\/github.com\/ruizii", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ruizii\/CVE-2024-9264", - "description": "Grafana RCE", - "fork": false, - "created_at": "2025-07-05T23:51:51Z", - "updated_at": "2025-07-06T08:01:49Z", - "pushed_at": "2025-07-05T23:54:29Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1015510123, - "name": "CVE-2024-9264", - "full_name": "rvzsec\/CVE-2024-9264", - "owner": { - "login": "rvzsec", - "id": 84989569, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/84989569?v=4", - "html_url": "https:\/\/github.com\/rvzsec", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/rvzsec\/CVE-2024-9264", - "description": "Authenticated RCE in Grafana (v11.0) via SQL Expressions - PoC Exploit", - "fork": false, - "created_at": "2025-07-07T15:57:21Z", - "updated_at": "2025-07-11T21:38:16Z", - "pushed_at": "2025-07-07T15:58:37Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1023598862, - "name": "grafana-CVE-2024-9264", - "full_name": "patrickpichler\/grafana-CVE-2024-9264", - "owner": { - "login": "patrickpichler", - "id": 13838138, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/13838138?v=4", - "html_url": "https:\/\/github.com\/patrickpichler", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/patrickpichler\/grafana-CVE-2024-9264", - "description": "Grafana image with DuckDB binary present vulnerable to exploit CVE-2024-9264", - "fork": false, - "created_at": "2025-07-21T12:02:32Z", - "updated_at": "2025-07-21T12:21:48Z", - "pushed_at": "2025-07-21T12:21:44Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1055976341, "name": "day05-grafana-sqlexpr-lab", diff --git a/2024/CVE-2024-9463.json b/2024/CVE-2024-9463.json deleted file mode 100644 index e3d3653cee..0000000000 --- a/2024/CVE-2024-9463.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 988626842, - "name": "CVE-2024-9463-Proof-of-Concept", - "full_name": "momo1239\/CVE-2024-9463-Proof-of-Concept", - "owner": { - "login": "momo1239", - "id": 34490185, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/34490185?v=4", - "html_url": "https:\/\/github.com\/momo1239", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/momo1239\/CVE-2024-9463-Proof-of-Concept", - "description": "Proof of Concept for CVE-2024-9463 ", - "fork": false, - "created_at": "2025-05-22T20:39:10Z", - "updated_at": "2025-06-25T03:32:54Z", - "pushed_at": "2025-05-22T20:39:56Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-9513.json b/2024/CVE-2024-9513.json deleted file mode 100644 index 7e1c300642..0000000000 --- a/2024/CVE-2024-9513.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 948706164, - "name": "Exploit-CVE-2024-9513-NetAdmin-IAM-Allows-User-Enumeration-In-Active-Directory", - "full_name": "ELIZEUOPAIN\/Exploit-CVE-2024-9513-NetAdmin-IAM-Allows-User-Enumeration-In-Active-Directory", - "owner": { - "login": "ELIZEUOPAIN", - "id": 102467898, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/102467898?v=4", - "html_url": "https:\/\/github.com\/ELIZEUOPAIN", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/ELIZEUOPAIN\/Exploit-CVE-2024-9513-NetAdmin-IAM-Allows-User-Enumeration-In-Active-Directory", - "description": null, - "fork": false, - "created_at": "2025-03-14T20:09:39Z", - "updated_at": "2026-04-14T19:30:34Z", - "pushed_at": "2025-03-14T20:19:20Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-9698.json b/2024/CVE-2024-9698.json deleted file mode 100644 index 646d75698e..0000000000 --- a/2024/CVE-2024-9698.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 938176245, - "name": "CVE-2024-9698", - "full_name": "Nxploited\/CVE-2024-9698", - "owner": { - "login": "Nxploited", - "id": 188819918, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4", - "html_url": "https:\/\/github.com\/Nxploited", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-9698", - "description": "Crafthemes Demo Import <= 3.3 - Authenticated ( Admin+) Arbitrary File Upload in process_uploaded_files", - "fork": false, - "created_at": "2025-02-24T14:41:56Z", - "updated_at": "2025-02-24T14:48:12Z", - "pushed_at": "2025-02-24T14:48:08Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-9756.json b/2024/CVE-2024-9756.json deleted file mode 100644 index 4c71311b0d..0000000000 --- a/2024/CVE-2024-9756.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 946347340, - "name": "CVE-2024-9756", - "full_name": "Nxploited\/CVE-2024-9756", - "owner": { - "login": "Nxploited", - "id": 188819918, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188819918?v=4", - "html_url": "https:\/\/github.com\/Nxploited", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Nxploited\/CVE-2024-9756", - "description": "Order Attachments for WooCommerce 2.0 - 2.4.1 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary File Upload", - "fork": false, - "created_at": "2025-03-11T02:04:25Z", - "updated_at": "2025-04-07T00:52:35Z", - "pushed_at": "2025-03-29T20:31:40Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2024/CVE-2024-9796.json b/2024/CVE-2024-9796.json index 836f57cdcd..cee177c7d5 100644 --- a/2024/CVE-2024-9796.json +++ b/2024/CVE-2024-9796.json @@ -32,75 +32,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 919116885, - "name": "CVE-2024-9796", - "full_name": "viniciuslazzari\/CVE-2024-9796", - "owner": { - "login": "viniciuslazzari", - "id": 42687487, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/42687487?v=4", - "html_url": "https:\/\/github.com\/viniciuslazzari", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/viniciuslazzari\/CVE-2024-9796", - "description": "Vulnerable website to the CVE-2024-9796", - "fork": false, - "created_at": "2025-01-19T18:40:57Z", - "updated_at": "2025-03-18T09:49:21Z", - "pushed_at": "2025-01-19T18:43:33Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 1 - }, - { - "id": 1005730837, - "name": "CVE-2024-9796", - "full_name": "BwithE\/CVE-2024-9796", - "owner": { - "login": "BwithE", - "id": 144924113, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/144924113?v=4", - "html_url": "https:\/\/github.com\/BwithE", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/BwithE\/CVE-2024-9796", - "description": "CVE-2024-9796 WP-Advanced-Search < 3.3.9.2 - Unauthenticated SQL Injection. Poc.", - "fork": false, - "created_at": "2025-06-20T18:00:40Z", - "updated_at": "2026-06-07T16:22:24Z", - "pushed_at": "2025-07-12T13:06:49Z", - "stargazers_count": 4, - "watchers_count": 4, - "has_discussions": false, - "forks_count": 3, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2024-9796", - "poc" - ], - "visibility": "public", - "forks": 3, - "watchers": 4, - "score": 0, - "subscribers_count": 0 - }, { "id": 1142072747, "name": "CVE-2024-9796", diff --git a/2024/CVE-2024-9950.json b/2024/CVE-2024-9950.json deleted file mode 100644 index ad4dae8c98..0000000000 --- a/2024/CVE-2024-9950.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 915517498, - "name": "CVE-2024-9950-PoC", - "full_name": "0Nightsedge0\/CVE-2024-9950-PoC", - "owner": { - "login": "0Nightsedge0", - "id": 16265225, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/16265225?v=4", - "html_url": "https:\/\/github.com\/0Nightsedge0", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/0Nightsedge0\/CVE-2024-9950-PoC", - "description": "Forescout SecureConnector <= 11.3.07", - "fork": false, - "created_at": "2025-01-12T03:47:28Z", - "updated_at": "2025-01-22T14:09:08Z", - "pushed_at": "2025-01-22T14:09:04Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 1 - } -] \ No newline at end of file diff --git a/2025/CVE-2025-0890.json b/2025/CVE-2025-0890.json new file mode 100644 index 0000000000..dfa9196161 --- /dev/null +++ b/2025/CVE-2025-0890.json @@ -0,0 +1,43 @@ +[ + { + "id": 1333485026, + "name": "zyxel-p870hn-hardware-hacking", + "full_name": "Danyw24\/zyxel-p870hn-hardware-hacking", + "owner": { + "login": "Danyw24", + "id": 81335686, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/81335686?v=4", + "html_url": "https:\/\/github.com\/Danyw24", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Danyw24\/zyxel-p870hn-hardware-hacking", + "description": "From a bare PCB to root: hardware-hacking a ZyXEL P-870HN (BCM6368) over UART — CVE-2025-0890 + CVE-2024-40891, on my own hardware.", + "fork": false, + "created_at": "2026-08-13T19:47:46Z", + "updated_at": "2026-08-13T19:48:42Z", + "pushed_at": "2026-08-13T19:48:37Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "bcm6368", + "embedded-security", + "hardware-hacking", + "iot-security", + "reverse-engineering", + "uart", + "zyxel" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2025/CVE-2025-21479.json b/2025/CVE-2025-21479.json index 36413b96a9..ed40aef614 100644 --- a/2025/CVE-2025-21479.json +++ b/2025/CVE-2025-21479.json @@ -14,10 +14,10 @@ "description": "CVE-2025-21479 proof-of-concept, I think", "fork": false, "created_at": "2025-06-19T19:47:52Z", - "updated_at": "2026-08-11T10:06:45Z", + "updated_at": "2026-08-13T22:31:23Z", "pushed_at": "2025-08-16T06:52:13Z", - "stargazers_count": 268, - "watchers_count": 268, + "stargazers_count": 269, + "watchers_count": 269, "has_discussions": false, "forks_count": 59, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 59, - "watchers": 268, + "watchers": 269, "score": 0, "subscribers_count": 2 }, diff --git a/2025/CVE-2025-24257.json b/2025/CVE-2025-24257.json index e729d24bdc..d3c1043f6b 100644 --- a/2025/CVE-2025-24257.json +++ b/2025/CVE-2025-24257.json @@ -14,8 +14,8 @@ "description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis", "fork": false, "created_at": "2026-04-04T03:42:55Z", - "updated_at": "2026-08-13T12:33:36Z", - "pushed_at": "2026-08-13T12:32:27Z", + "updated_at": "2026-08-13T19:22:08Z", + "pushed_at": "2026-08-13T19:22:04Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-32463.json b/2025/CVE-2025-32463.json index 22e34ef8cc..500347a82c 100644 --- a/2025/CVE-2025-32463.json +++ b/2025/CVE-2025-32463.json @@ -1496,8 +1496,8 @@ "description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.", "fork": false, "created_at": "2025-09-20T00:42:07Z", - "updated_at": "2026-08-13T12:03:29Z", - "pushed_at": "2026-08-13T12:02:42Z", + "updated_at": "2026-08-13T19:03:27Z", + "pushed_at": "2026-08-13T18:53:32Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-49844.json b/2025/CVE-2025-49844.json index bee9e9fbe3..96f0422d4a 100644 --- a/2025/CVE-2025-49844.json +++ b/2025/CVE-2025-49844.json @@ -14,8 +14,8 @@ "description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.", "fork": false, "created_at": "2019-04-13T07:51:09Z", - "updated_at": "2026-08-13T12:07:56Z", - "pushed_at": "2026-08-13T12:07:00Z", + "updated_at": "2026-08-13T18:57:06Z", + "pushed_at": "2026-08-13T18:57:01Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2025/CVE-2025-54794.json b/2025/CVE-2025-54794.json index dcc8594365..18d1372a56 100644 --- a/2025/CVE-2025-54794.json +++ b/2025/CVE-2025-54794.json @@ -19,7 +19,7 @@ "stargazers_count": 37, "watchers_count": 37, "has_discussions": false, - "forks_count": 4, + "forks_count": 5, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 4, + "forks": 5, "watchers": 37, "score": 0, "subscribers_count": 0 diff --git a/2025/CVE-2025-55182.json b/2025/CVE-2025-55182.json index 3df53f7382..ac271d6c8c 100644 --- a/2025/CVE-2025-55182.json +++ b/2025/CVE-2025-55182.json @@ -15428,10 +15428,10 @@ "description": "Advanced React Server Components RCE scanner for CVE-2025-55182. Features: multi-stage fingerprinting, vulnerability verification, DNS exfiltration, interactive shell, payload obfuscation, and professional reporting (JSON\/HTML\/PDF). Authorized testing only. ", "fork": false, "created_at": "2026-08-07T17:57:25Z", - "updated_at": "2026-08-07T19:20:33Z", + "updated_at": "2026-08-13T20:27:47Z", "pushed_at": "2026-08-07T19:20:26Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -15442,7 +15442,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, diff --git a/2025/CVE-2025-56399.json b/2025/CVE-2025-56399.json index bfce3f590c..77947ddfb9 100644 --- a/2025/CVE-2025-56399.json +++ b/2025/CVE-2025-56399.json @@ -90,10 +90,10 @@ "description": "PoC for CVE-2025-56399 - Unrestricted File Upload leading to RCE in alexusmai\/laravel-file-manager (≤3.3.1). Automates detection, CSRF extraction, and File Upload", "fork": false, "created_at": "2026-06-28T03:43:50Z", - "updated_at": "2026-07-10T12:33:47Z", + "updated_at": "2026-08-13T19:26:43Z", "pushed_at": "2026-06-28T04:02:36Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -115,7 +115,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 } diff --git a/2025/CVE-2025-66478.json b/2025/CVE-2025-66478.json index 3e88001fa2..e658f02bf9 100644 --- a/2025/CVE-2025-66478.json +++ b/2025/CVE-2025-66478.json @@ -14,8 +14,8 @@ "description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.", "fork": false, "created_at": "2025-10-01T07:40:09Z", - "updated_at": "2026-08-13T12:16:09Z", - "pushed_at": "2026-08-13T12:14:32Z", + "updated_at": "2026-08-13T19:04:52Z", + "pushed_at": "2026-08-13T19:04:25Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-68921.json b/2025/CVE-2025-68921.json index f29a9229ae..fdb99f112a 100644 --- a/2025/CVE-2025-68921.json +++ b/2025/CVE-2025-68921.json @@ -47,8 +47,8 @@ "description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.", "fork": false, "created_at": "2026-01-24T21:00:41Z", - "updated_at": "2026-08-13T12:20:53Z", - "pushed_at": "2026-08-13T12:19:49Z", + "updated_at": "2026-08-13T19:10:05Z", + "pushed_at": "2026-08-13T19:09:27Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-69194.json b/2025/CVE-2025-69194.json deleted file mode 100644 index 22131cba54..0000000000 --- a/2025/CVE-2025-69194.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1129380065, - "name": "POC_CVE-2025-69194", - "full_name": "secdongle\/POC_CVE-2025-69194", - "owner": { - "login": "secdongle", - "id": 13764600, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/13764600?v=4", - "html_url": "https:\/\/github.com\/secdongle", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/secdongle\/POC_CVE-2025-69194", - "description": "PoC for CVE-2025-69194, a Path Traversal vulnerability in GNU Wget2 <= 2.2.0. This vulnerability allows attackers to achieve arbitrary file write or overwrite on the victim's filesystem by providing a malicious Metalink file with manipulated file name attributes.", - "fork": false, - "created_at": "2026-01-07T02:33:02Z", - "updated_at": "2026-01-08T03:49:44Z", - "pushed_at": "2026-01-07T03:07:01Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2025/CVE-2025-71329.json b/2025/CVE-2025-71329.json index 27b74112c1..c0f10c0453 100644 --- a/2025/CVE-2025-71329.json +++ b/2025/CVE-2025-71329.json @@ -14,10 +14,10 @@ "description": "Community-maintained fork of image-size with fixes for CVE-2025-71329 and CVE-2025-71330", "fork": false, "created_at": "2026-08-10T15:36:09Z", - "updated_at": "2026-08-13T17:00:21Z", + "updated_at": "2026-08-14T00:17:47Z", "pushed_at": "2026-08-13T16:59:38Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": true, "forks_count": 1, "allow_forking": true, @@ -37,7 +37,7 @@ ], "visibility": "public", "forks": 1, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-10104.json b/2026/CVE-2026-10104.json deleted file mode 100644 index 2a1ecf86db..0000000000 --- a/2026/CVE-2026-10104.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1290051146, - "name": "CVE-2026-10104-POC", - "full_name": "Ravi-lk\/CVE-2026-10104-POC", - "owner": { - "login": "Ravi-lk", - "id": 60037870, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/60037870?v=4", - "html_url": "https:\/\/github.com\/Ravi-lk", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Ravi-lk\/CVE-2026-10104-POC", - "description": "Product Video Gallery for Woocommerce <= 1.5.1.8 - Authenticated Stored Cross-Site Scripting Proof of Concept", - "fork": false, - "created_at": "2026-07-05T14:22:29Z", - "updated_at": "2026-07-07T05:02:37Z", - "pushed_at": "2026-07-05T14:49:08Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2026/CVE-2026-14628.json b/2026/CVE-2026-14628.json deleted file mode 100644 index d90fe53ba8..0000000000 --- a/2026/CVE-2026-14628.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1290283578, - "name": "path-traversal-CVE-2026-14628", - "full_name": "MESLIMOHAMEDM22005188\/path-traversal-CVE-2026-14628", - "owner": { - "login": "MESLIMOHAMEDM22005188", - "id": 125298121, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/125298121?v=4", - "html_url": "https:\/\/github.com\/MESLIMOHAMEDM22005188", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/MESLIMOHAMEDM22005188\/path-traversal-CVE-2026-14628", - "description": null, - "fork": false, - "created_at": "2026-07-05T19:34:02Z", - "updated_at": "2026-07-05T20:26:00Z", - "pushed_at": "2026-07-05T20:25:56Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2026/CVE-2026-20841.json b/2026/CVE-2026-20841.json index df1386c482..d8ebe012fa 100644 --- a/2026/CVE-2026-20841.json +++ b/2026/CVE-2026-20841.json @@ -14,8 +14,8 @@ "description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.", "fork": false, "created_at": "2024-09-22T12:19:06Z", - "updated_at": "2026-08-13T12:25:12Z", - "pushed_at": "2026-08-13T12:25:07Z", + "updated_at": "2026-08-13T19:14:46Z", + "pushed_at": "2026-08-13T19:14:41Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2026/CVE-2026-20896.json b/2026/CVE-2026-20896.json index f635c13e3f..77578c12ea 100644 --- a/2026/CVE-2026-20896.json +++ b/2026/CVE-2026-20896.json @@ -1,37 +1,4 @@ [ - { - "id": 1290200697, - "name": "CVE-2026-20896", - "full_name": "rz1027\/CVE-2026-20896", - "owner": { - "login": "rz1027", - "id": 53318196, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/53318196?v=4", - "html_url": "https:\/\/github.com\/rz1027", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/rz1027\/CVE-2026-20896", - "description": "Public PoC and detector for CVE-2026-20896 (\"Gitea Docker: One Header, Any User\")", - "fork": false, - "created_at": "2026-07-05T17:35:09Z", - "updated_at": "2026-08-05T16:00:45Z", - "pushed_at": "2026-07-05T17:35:12Z", - "stargazers_count": 6, - "watchers_count": 6, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 6, - "score": 0, - "subscribers_count": 0 - }, { "id": 1292760466, "name": "cve-2026-20896-gitea-poc", diff --git a/2026/CVE-2026-21877.json b/2026/CVE-2026-21877.json index 8a11b561a3..f35da457fa 100644 --- a/2026/CVE-2026-21877.json +++ b/2026/CVE-2026-21877.json @@ -14,8 +14,8 @@ "description": null, "fork": false, "created_at": "2026-04-22T13:26:34Z", - "updated_at": "2026-08-13T18:50:50Z", - "pushed_at": "2026-08-13T18:50:46Z", + "updated_at": "2026-08-13T18:54:18Z", + "pushed_at": "2026-08-13T18:54:14Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-22874.json b/2026/CVE-2026-22874.json deleted file mode 100644 index 3863b136b8..0000000000 --- a/2026/CVE-2026-22874.json +++ /dev/null @@ -1,35 +0,0 @@ -[ - { - "id": 1290151635, - "name": "CVE-2026-22874-PoC", - "full_name": "Eliot-code\/CVE-2026-22874-PoC", - "owner": { - "login": "Eliot-code", - "id": 214066318, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/214066318?v=4", - "html_url": "https:\/\/github.com\/Eliot-code", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Eliot-code\/CVE-2026-22874-PoC", - "description": null, - "fork": false, - "created_at": "2026-07-05T16:30:26Z", - "updated_at": "2026-07-05T17:40:23Z", - "pushed_at": "2026-07-05T16:38:19Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2026/CVE-2026-23870.json b/2026/CVE-2026-23870.json deleted file mode 100644 index 0eee9201d9..0000000000 --- a/2026/CVE-2026-23870.json +++ /dev/null @@ -1,39 +0,0 @@ -[ - { - "id": 1237828341, - "name": "nextjs-cve-2026-23870-checker", - "full_name": "emresandikci\/nextjs-cve-2026-23870-checker", - "owner": { - "login": "emresandikci", - "id": 7765958, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/7765958?v=4", - "html_url": "https:\/\/github.com\/emresandikci", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/emresandikci\/nextjs-cve-2026-23870-checker", - "description": "Checker and fixer for all 13 vulnerabilities in the Next.js May 2026 security release (CVE-2026-23870)", - "fork": false, - "created_at": "2026-05-13T14:47:03Z", - "updated_at": "2026-05-13T15:18:20Z", - "pushed_at": "2026-05-13T14:47:20Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "nextjs", - "nextjs-cve-2026-23870", - "security" - ], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2026/CVE-2026-24291.json b/2026/CVE-2026-24291.json index ea47d42f22..bd2c3932e1 100644 --- a/2026/CVE-2026-24291.json +++ b/2026/CVE-2026-24291.json @@ -14,8 +14,8 @@ "description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions", "fork": false, "created_at": "2026-03-26T04:38:27Z", - "updated_at": "2026-08-13T12:31:00Z", - "pushed_at": "2026-08-13T12:30:50Z", + "updated_at": "2026-08-13T19:20:36Z", + "pushed_at": "2026-08-13T19:20:23Z", "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, diff --git a/2026/CVE-2026-2472.json b/2026/CVE-2026-2472.json index cfefb0608b..fefa4cc2f3 100644 --- a/2026/CVE-2026-2472.json +++ b/2026/CVE-2026-2472.json @@ -14,8 +14,8 @@ "description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.", "fork": false, "created_at": "2026-03-10T14:40:04Z", - "updated_at": "2026-08-13T12:27:59Z", - "pushed_at": "2026-08-13T12:27:18Z", + "updated_at": "2026-08-13T19:17:37Z", + "pushed_at": "2026-08-13T19:16:54Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2026/CVE-2026-41089.json b/2026/CVE-2026-41089.json index 5c4f79911a..201927906d 100644 --- a/2026/CVE-2026-41089.json +++ b/2026/CVE-2026-41089.json @@ -215,7 +215,7 @@ "stargazers_count": 17, "watchers_count": 17, "has_discussions": false, - "forks_count": 23, + "forks_count": 13, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -236,7 +236,7 @@ "zero-day" ], "visibility": "public", - "forks": 23, + "forks": 13, "watchers": 17, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-41651.json b/2026/CVE-2026-41651.json index ae5c30be0b..7c0cbf9595 100644 --- a/2026/CVE-2026-41651.json +++ b/2026/CVE-2026-41651.json @@ -47,10 +47,10 @@ "description": "Exploit for CVE-2026-41651 - PackageKit TOCTOU Local Privilege Escalation (Pack2TheRoot)", "fork": false, "created_at": "2026-05-20T07:26:05Z", - "updated_at": "2026-08-12T13:24:49Z", + "updated_at": "2026-08-13T22:07:58Z", "pushed_at": "2026-05-20T07:48:15Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -68,7 +68,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 3, + "watchers": 4, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-41940.json b/2026/CVE-2026-41940.json index 43a22613df..706eac5031 100644 --- a/2026/CVE-2026-41940.json +++ b/2026/CVE-2026-41940.json @@ -774,12 +774,12 @@ "description": "A cPanel and WHM authentication bypassing tool", "fork": false, "created_at": "2026-08-13T16:03:48Z", - "updated_at": "2026-08-13T16:21:22Z", + "updated_at": "2026-08-14T00:49:41Z", "pushed_at": "2026-08-13T16:09:49Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 131, + "watchers_count": 131, "has_discussions": false, - "forks_count": 0, + "forks_count": 12, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -792,8 +792,8 @@ "cve-2026-41940-poc" ], "visibility": "public", - "forks": 0, - "watchers": 0, + "forks": 12, + "watchers": 131, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-43499.json b/2026/CVE-2026-43499.json index ae753c43da..e945a4db6f 100644 --- a/2026/CVE-2026-43499.json +++ b/2026/CVE-2026-43499.json @@ -348,10 +348,10 @@ "description": "GhostLock (CVE-2026-43499) kernel exploit for OnePlus devices with locked bootloader", "fork": false, "created_at": "2026-07-12T16:05:24Z", - "updated_at": "2026-08-13T17:43:13Z", + "updated_at": "2026-08-13T21:42:05Z", "pushed_at": "2026-08-06T09:48:14Z", - "stargazers_count": 253, - "watchers_count": 253, + "stargazers_count": 254, + "watchers_count": 254, "has_discussions": false, "forks_count": 53, "allow_forking": true, @@ -369,7 +369,7 @@ ], "visibility": "public", "forks": 53, - "watchers": 253, + "watchers": 254, "score": 0, "subscribers_count": 10 }, @@ -586,10 +586,10 @@ "description": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.", "fork": false, "created_at": "2026-07-14T14:21:27Z", - "updated_at": "2026-08-13T06:05:05Z", + "updated_at": "2026-08-14T00:33:02Z", "pushed_at": "2026-07-30T11:28:07Z", - "stargazers_count": 55, - "watchers_count": 55, + "stargazers_count": 56, + "watchers_count": 56, "has_discussions": false, "forks_count": 17, "allow_forking": true, @@ -600,7 +600,7 @@ "topics": [], "visibility": "public", "forks": 17, - "watchers": 55, + "watchers": 56, "score": 0, "subscribers_count": 0 }, @@ -1081,12 +1081,12 @@ "description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499", "fork": false, "created_at": "2026-07-17T14:24:08Z", - "updated_at": "2026-08-13T16:41:05Z", + "updated_at": "2026-08-13T21:37:21Z", "pushed_at": "2026-08-09T05:13:42Z", - "stargazers_count": 795, - "watchers_count": 795, + "stargazers_count": 796, + "watchers_count": 796, "has_discussions": false, - "forks_count": 141, + "forks_count": 143, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1094,8 +1094,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 141, - "watchers": 795, + "forks": 143, + "watchers": 796, "score": 0, "subscribers_count": 24 }, @@ -1727,10 +1727,10 @@ "description": "KSU installer for supported firmware with CVE-2026-43499", "fork": false, "created_at": "2026-07-28T10:17:18Z", - "updated_at": "2026-08-06T15:48:07Z", + "updated_at": "2026-08-13T23:25:33Z", "pushed_at": "2026-08-03T03:09:31Z", - "stargazers_count": 9, - "watchers_count": 9, + "stargazers_count": 10, + "watchers_count": 10, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -1741,7 +1741,7 @@ "topics": [], "visibility": "public", "forks": 6, - "watchers": 9, + "watchers": 10, "score": 0, "subscribers_count": 0 }, @@ -2070,8 +2070,8 @@ "description": "Jailbreak supported Google Pixel phones with CVE-2026-43499", "fork": false, "created_at": "2026-08-02T17:34:45Z", - "updated_at": "2026-08-13T08:43:00Z", - "pushed_at": "2026-08-12T17:25:07Z", + "updated_at": "2026-08-13T20:05:35Z", + "pushed_at": "2026-08-13T20:04:21Z", "stargazers_count": 139, "watchers_count": 139, "has_discussions": false, @@ -2082,6 +2082,7 @@ "has_pull_requests": true, "pull_request_creation_policy": "all", "topics": [ + "cve", "exploit", "google", "jailbreak", @@ -2340,10 +2341,10 @@ "description": "CVE-2026-43499 (GhostLock) research on HUAWEI MatePad Pro 11 GOT-W29", "fork": false, "created_at": "2026-08-10T09:01:08Z", - "updated_at": "2026-08-12T04:32:03Z", + "updated_at": "2026-08-13T19:19:58Z", "pushed_at": "2026-08-12T04:31:53Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -2354,7 +2355,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -2571,8 +2572,8 @@ "description": "CVE-2026-43499 futex PI stack UAF ???????? - Android GKI 6.1~6.12 ??????? pselect() + futex PI ????????????,??? root ??? SELinux??? OPPO Find X8?OnePlus ??????", "fork": false, "created_at": "2026-08-13T11:53:46Z", - "updated_at": "2026-08-13T16:09:22Z", - "pushed_at": "2026-08-13T16:08:02Z", + "updated_at": "2026-08-13T19:24:26Z", + "pushed_at": "2026-08-13T19:23:49Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -2599,5 +2600,71 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1333577605, + "name": "cve-2026-43499-app.so", + "full_name": "pimpamebanihah\/cve-2026-43499-app.so", + "owner": { + "login": "pimpamebanihah", + "id": 316247277, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/316247277?v=4", + "html_url": "https:\/\/github.com\/pimpamebanihah", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/pimpamebanihah\/cve-2026-43499-app.so", + "description": null, + "fork": false, + "created_at": "2026-08-13T22:13:28Z", + "updated_at": "2026-08-13T22:20:01Z", + "pushed_at": "2026-08-13T22:19:48Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1333579045, + "name": "cve-2026-43499-app.s0", + "full_name": "pimpamebanihah\/cve-2026-43499-app.s0", + "owner": { + "login": "pimpamebanihah", + "id": 316247277, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/316247277?v=4", + "html_url": "https:\/\/github.com\/pimpamebanihah", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/pimpamebanihah\/cve-2026-43499-app.s0", + "description": null, + "fork": false, + "created_at": "2026-08-13T22:16:15Z", + "updated_at": "2026-08-13T22:16:37Z", + "pushed_at": "2026-08-13T22:16:16Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-43724.json b/2026/CVE-2026-43724.json index e5acf356c4..c634f0a7cd 100644 --- a/2026/CVE-2026-43724.json +++ b/2026/CVE-2026-43724.json @@ -47,10 +47,10 @@ "description": "CVE-2026-43724 - Apple's published enough advisories about the issue, I'm not getting paid for any of my kernel bugs. ", "fork": false, "created_at": "2026-07-13T22:38:54Z", - "updated_at": "2026-07-28T19:15:41Z", + "updated_at": "2026-08-13T23:58:00Z", "pushed_at": "2026-07-13T22:40:03Z", - "stargazers_count": 20, - "watchers_count": 20, + "stargazers_count": 21, + "watchers_count": 21, "has_discussions": false, "forks_count": 5, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 5, - "watchers": 20, + "watchers": 21, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-43813.json b/2026/CVE-2026-43813.json index 4e05e26495..5b4424945f 100644 --- a/2026/CVE-2026-43813.json +++ b/2026/CVE-2026-43813.json @@ -14,10 +14,10 @@ "description": "CVE-2026-43813: CloudAttestation enforceEnvironment bypass", "fork": false, "created_at": "2026-07-29T19:41:14Z", - "updated_at": "2026-08-12T08:01:18Z", + "updated_at": "2026-08-14T00:22:49Z", "pushed_at": "2026-07-29T19:41:18Z", - "stargazers_count": 7, - "watchers_count": 7, + "stargazers_count": 8, + "watchers_count": 8, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 7, + "watchers": 8, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-45585.json b/2026/CVE-2026-45585.json index 0865e92808..9353d49ff4 100644 --- a/2026/CVE-2026-45585.json +++ b/2026/CVE-2026-45585.json @@ -264,8 +264,8 @@ "description": "Manage BitLocker recovery keys, monitor drive encryption status, and unlock volumes through a portable interface for Windows.", "fork": false, "created_at": "2026-07-21T22:11:28Z", - "updated_at": "2026-08-13T12:44:25Z", - "pushed_at": "2026-08-13T12:43:54Z", + "updated_at": "2026-08-13T19:33:18Z", + "pushed_at": "2026-08-13T19:33:14Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -398,8 +398,8 @@ "description": "Manage BitLocker recovery keys, unlock encrypted drives, and monitor encryption status with this lightweight Windows utility.", "fork": false, "created_at": "2026-08-03T11:32:18Z", - "updated_at": "2026-08-13T12:46:34Z", - "pushed_at": "2026-08-13T12:45:12Z", + "updated_at": "2026-08-13T19:34:32Z", + "pushed_at": "2026-08-13T19:34:25Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-47301.json b/2026/CVE-2026-47301.json index 60696944de..271a2040b1 100644 --- a/2026/CVE-2026-47301.json +++ b/2026/CVE-2026-47301.json @@ -14,10 +14,10 @@ "description": "Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-write path traversal, certificate verification bypass, and DLL hijacking to achieve SYSTEM-level code execution.", "fork": false, "created_at": "2026-08-03T15:29:22Z", - "updated_at": "2026-08-13T16:42:25Z", + "updated_at": "2026-08-14T00:50:23Z", "pushed_at": "2026-08-13T14:49:32Z", - "stargazers_count": 6, - "watchers_count": 6, + "stargazers_count": 8, + "watchers_count": 8, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 6, + "watchers": 8, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-4882.json b/2026/CVE-2026-4882.json index 062def193c..d3ba143ab9 100644 --- a/2026/CVE-2026-4882.json +++ b/2026/CVE-2026-4882.json @@ -14,10 +14,10 @@ "description": "User Registration Advanced Fields <= 1.6.20 - Unauthenticated Arbitrary File Upload", "fork": false, "created_at": "2026-05-16T12:20:03Z", - "updated_at": "2026-05-16T12:44:17Z", + "updated_at": "2026-08-13T22:01:26Z", "pushed_at": "2026-05-16T12:44:13Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-4885.json b/2026/CVE-2026-4885.json index 7dadb4ed2f..1d473043a0 100644 --- a/2026/CVE-2026-4885.json +++ b/2026/CVE-2026-4885.json @@ -14,10 +14,10 @@ "description": "Piotnet Addons for Elementor Pro <= 7.1.70 - Unauthenticated Arbitrary File Upload → RCE", "fork": false, "created_at": "2026-05-21T11:16:49Z", - "updated_at": "2026-05-25T01:17:26Z", + "updated_at": "2026-08-13T21:26:24Z", "pushed_at": "2026-05-21T11:19:22Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-48908.json b/2026/CVE-2026-48908.json index de9bb05ac6..f552401098 100644 --- a/2026/CVE-2026-48908.json +++ b/2026/CVE-2026-48908.json @@ -205,10 +205,10 @@ "description": "CVE-2026-48908 — PoC exploit for unauthenticated RCE in SP Page Builder (Joomla) via arbitrary file upload. Multi‑threaded, case‑bypass, shell verification. For authorized security testing only.", "fork": false, "created_at": "2026-07-07T01:31:14Z", - "updated_at": "2026-07-14T08:50:17Z", + "updated_at": "2026-08-13T19:43:38Z", "pushed_at": "2026-07-08T04:18:13Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -231,7 +231,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-49176.json b/2026/CVE-2026-49176.json index eaa9bfdd6e..da103c621b 100644 --- a/2026/CVE-2026-49176.json +++ b/2026/CVE-2026-49176.json @@ -47,10 +47,10 @@ "description": "CVE-2026-49176 WalletService LPE — standalone PoC + Cobalt Strike BOF (SYSTEM command on interactive session)", "fork": false, "created_at": "2026-07-29T06:57:56Z", - "updated_at": "2026-08-10T13:11:16Z", + "updated_at": "2026-08-13T21:44:18Z", "pushed_at": "2026-07-29T06:59:27Z", - "stargazers_count": 4, - "watchers_count": 4, + "stargazers_count": 5, + "watchers_count": 5, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 4, + "watchers": 5, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-53361.json b/2026/CVE-2026-53361.json index f477372f9e..dde6217a94 100644 --- a/2026/CVE-2026-53361.json +++ b/2026/CVE-2026-53361.json @@ -14,10 +14,10 @@ "description": "CVE-2026-53361 AF_UNIX GC vs MSG_PEEK use-after-free container escape", "fork": false, "created_at": "2026-08-10T19:59:45Z", - "updated_at": "2026-08-13T18:01:32Z", + "updated_at": "2026-08-13T19:57:25Z", "pushed_at": "2026-08-11T11:43:30Z", - "stargazers_count": 14, - "watchers_count": 14, + "stargazers_count": 15, + "watchers_count": 15, "has_discussions": false, "forks_count": 4, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 4, - "watchers": 14, + "watchers": 15, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-53767.json b/2026/CVE-2026-53767.json new file mode 100644 index 0000000000..74298519d7 --- /dev/null +++ b/2026/CVE-2026-53767.json @@ -0,0 +1,40 @@ +[ + { + "id": 1265528531, + "name": "chyrp-lite-rce-poc", + "full_name": "iltosec\/chyrp-lite-rce-poc", + "owner": { + "login": "iltosec", + "id": 85459074, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/85459074?v=4", + "html_url": "https:\/\/github.com\/iltosec", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/iltosec\/chyrp-lite-rce-poc", + "description": "CVE-2026-53767 + CVE-2026-53768 - Authenticated RCE in Chyrp Lite ≤ 2026.01 via uploads_path blocklist bypass and missing extension validation", + "fork": false, + "created_at": "2026-06-10T21:21:14Z", + "updated_at": "2026-08-13T19:19:05Z", + "pushed_at": "2026-06-10T21:33:19Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "chyrp-lite", + "cve", + "cve-2026-53767", + "cve-2026-53768" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-55040.json b/2026/CVE-2026-55040.json index b2d70ae29e..0c4f1dfb93 100644 --- a/2026/CVE-2026-55040.json +++ b/2026/CVE-2026-55040.json @@ -47,10 +47,10 @@ "description": "Microsoft SharePoint JWT Authentication Bypass (CVE-2026-55040)", "fork": false, "created_at": "2026-08-06T11:46:34Z", - "updated_at": "2026-08-13T16:58:16Z", + "updated_at": "2026-08-13T23:43:32Z", "pushed_at": "2026-08-10T15:35:23Z", - "stargazers_count": 41, - "watchers_count": 41, + "stargazers_count": 42, + "watchers_count": 42, "has_discussions": false, "forks_count": 11, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 11, - "watchers": 41, + "watchers": 42, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-56290.json b/2026/CVE-2026-56290.json index b7a54be595..76d787eea4 100644 --- a/2026/CVE-2026-56290.json +++ b/2026/CVE-2026-56290.json @@ -14,10 +14,10 @@ "description": "CVE-2026-56290 - Mass Exploit for Joomla Com_pagebuilderck component (Unrestricted File Upload → RCE). Multi-threaded, automatic CSRF bypass, PHP shell uploader.", "fork": false, "created_at": "2026-07-08T04:30:25Z", - "updated_at": "2026-07-13T11:59:47Z", + "updated_at": "2026-08-13T19:25:39Z", "pushed_at": "2026-07-08T04:32:51Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 4, + "watchers_count": 4, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -40,7 +40,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 3, + "watchers": 4, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-63030.json b/2026/CVE-2026-63030.json index 3063ea0e40..4a40a70e1c 100644 --- a/2026/CVE-2026-63030.json +++ b/2026/CVE-2026-63030.json @@ -14,12 +14,12 @@ "description": "wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain", "fork": false, "created_at": "2026-07-17T20:18:33Z", - "updated_at": "2026-08-13T17:33:53Z", + "updated_at": "2026-08-13T21:22:59Z", "pushed_at": "2026-08-11T13:41:27Z", - "stargazers_count": 741, - "watchers_count": 741, + "stargazers_count": 742, + "watchers_count": 742, "has_discussions": false, - "forks_count": 166, + "forks_count": 165, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -31,8 +31,8 @@ "wp2shell-poc" ], "visibility": "public", - "forks": 166, - "watchers": 741, + "forks": 165, + "watchers": 742, "score": 0, "subscribers_count": 3 }, @@ -84,10 +84,10 @@ "description": "CVE-2026-63030, CVE-2026-60137, wp2shell scanner", "fork": false, "created_at": "2026-07-17T23:15:57Z", - "updated_at": "2026-08-08T21:12:27Z", + "updated_at": "2026-08-14T00:27:28Z", "pushed_at": "2026-07-18T22:07:34Z", - "stargazers_count": 51, - "watchers_count": 51, + "stargazers_count": 52, + "watchers_count": 52, "has_discussions": false, "forks_count": 10, "allow_forking": true, @@ -98,7 +98,7 @@ "topics": [], "visibility": "public", "forks": 10, - "watchers": 51, + "watchers": 52, "score": 0, "subscribers_count": 0 }, @@ -518,7 +518,7 @@ "stargazers_count": 101, "watchers_count": 101, "has_discussions": false, - "forks_count": 30, + "forks_count": 29, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -526,7 +526,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 30, + "forks": 29, "watchers": 101, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-63077.json b/2026/CVE-2026-63077.json index 33f22d9586..92be374ed0 100644 --- a/2026/CVE-2026-63077.json +++ b/2026/CVE-2026-63077.json @@ -47,10 +47,10 @@ "description": "Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)", "fork": false, "created_at": "2026-08-07T08:38:01Z", - "updated_at": "2026-08-13T10:01:44Z", + "updated_at": "2026-08-13T20:22:03Z", "pushed_at": "2026-08-07T16:23:37Z", - "stargazers_count": 15, - "watchers_count": 15, + "stargazers_count": 16, + "watchers_count": 16, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 6, - "watchers": 15, + "watchers": 16, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-64531.json b/2026/CVE-2026-64531.json index dc0a5e0f93..0ea3de103a 100644 --- a/2026/CVE-2026-64531.json +++ b/2026/CVE-2026-64531.json @@ -14,8 +14,8 @@ "description": "Tracking OVSwrap (CVE-2026-64531), the Open vSwitch datapath netlink overflow", "fork": false, "created_at": "2026-07-29T05:15:24Z", - "updated_at": "2026-08-13T05:36:42Z", - "pushed_at": "2026-08-13T05:36:35Z", + "updated_at": "2026-08-13T19:47:16Z", + "pushed_at": "2026-08-13T19:47:12Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-64561.json b/2026/CVE-2026-64561.json index 44be05c344..7d58684a7a 100644 --- a/2026/CVE-2026-64561.json +++ b/2026/CVE-2026-64561.json @@ -80,8 +80,8 @@ "description": "Guest-to-host KVM\/x86 escape exploiting CVE-2026-64561, delivering a full PoC chain and analysis for security researchers.", "fork": false, "created_at": "2026-08-07T15:51:07Z", - "updated_at": "2026-08-13T12:47:02Z", - "pushed_at": "2026-08-13T12:45:53Z", + "updated_at": "2026-08-13T19:44:26Z", + "pushed_at": "2026-08-13T19:35:05Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2026/CVE-2026-64564.json b/2026/CVE-2026-64564.json index a7564cda84..f6299b8082 100644 --- a/2026/CVE-2026-64564.json +++ b/2026/CVE-2026-64564.json @@ -52,7 +52,7 @@ "stargazers_count": 4, "watchers_count": 4, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,7 +60,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 4, "score": 0, "subscribers_count": 0 @@ -80,8 +80,8 @@ "description": "Tracking SCTPhantom (CVE-2026-64564), the Linux kernel SCTP ASCONF transport use-after-free", "fork": false, "created_at": "2026-08-10T05:16:43Z", - "updated_at": "2026-08-12T16:40:29Z", - "pushed_at": "2026-08-12T16:40:23Z", + "updated_at": "2026-08-13T19:49:03Z", + "pushed_at": "2026-08-13T19:48:59Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2026/CVE-2026-64638.json b/2026/CVE-2026-64638.json index a7ea955733..0de0ed56b3 100644 --- a/2026/CVE-2026-64638.json +++ b/2026/CVE-2026-64638.json @@ -47,10 +47,10 @@ "description": "XSS2Shell (CVE-2026-64638) WordPress pre-auth XSS to RCE chain — PoC exploit + defensive audit tool + nuclei template", "fork": false, "created_at": "2026-08-07T17:07:17Z", - "updated_at": "2026-08-13T13:38:09Z", + "updated_at": "2026-08-14T00:39:49Z", "pushed_at": "2026-08-09T14:03:24Z", - "stargazers_count": 30, - "watchers_count": 30, + "stargazers_count": 32, + "watchers_count": 32, "has_discussions": false, "forks_count": 7, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 7, - "watchers": 30, + "watchers": 32, "score": 0, "subscribers_count": 0 }, @@ -650,10 +650,10 @@ "description": "🔥 XSS2Shell — CVE-2026-64638 Scanner & PoC Toolkit", "fork": false, "created_at": "2026-08-09T14:50:57Z", - "updated_at": "2026-08-11T14:32:40Z", + "updated_at": "2026-08-13T20:05:52Z", "pushed_at": "2026-08-09T15:20:11Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -664,7 +664,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-64747.json b/2026/CVE-2026-64747.json index c8de82677f..e0cfe9da38 100644 --- a/2026/CVE-2026-64747.json +++ b/2026/CVE-2026-64747.json @@ -14,10 +14,10 @@ "description": "CVE-2026-64747 AGXG14P count-bitmask OOB trigger probe (A15\/iOS 26.5.2)", "fork": false, "created_at": "2026-08-10T11:50:48Z", - "updated_at": "2026-08-10T16:43:05Z", + "updated_at": "2026-08-14T00:21:03Z", "pushed_at": "2026-08-10T16:41:07Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-66804.json b/2026/CVE-2026-66804.json index ebdfbfac80..09d9266fef 100644 --- a/2026/CVE-2026-66804.json +++ b/2026/CVE-2026-66804.json @@ -14,12 +14,12 @@ "description": null, "fork": false, "created_at": "2026-07-23T11:51:53Z", - "updated_at": "2026-08-11T19:19:53Z", + "updated_at": "2026-08-13T21:38:24Z", "pushed_at": "2026-08-11T18:49:46Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 5, + "watchers_count": 5, "has_discussions": false, - "forks_count": 0, + "forks_count": 2, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,8 +27,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, - "watchers": 2, + "forks": 2, + "watchers": 5, "score": 0, "subscribers_count": 0 }, @@ -44,15 +44,15 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/Rat5ak\/CVE-2026-66804-CrossDevice-Service-EoP", - "description": "CVE-2026-66804 Windows Cross Device virtual camera EoP", + "description": "CVE-2026-66804 Windows Cross Device virtual camera EoP - Standard user to SYSTEM", "fork": false, "created_at": "2026-08-13T01:42:43Z", - "updated_at": "2026-08-13T18:07:00Z", + "updated_at": "2026-08-14T00:46:25Z", "pushed_at": "2026-08-13T04:21:37Z", - "stargazers_count": 7, - "watchers_count": 7, + "stargazers_count": 8, + "watchers_count": 8, "has_discussions": false, - "forks_count": 5, + "forks_count": 6, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,8 +60,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 5, - "watchers": 7, + "forks": 6, + "watchers": 8, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-68138.json b/2026/CVE-2026-68138.json index d4c96568e4..cedf435069 100644 --- a/2026/CVE-2026-68138.json +++ b/2026/CVE-2026-68138.json @@ -14,12 +14,12 @@ "description": "CVE-2026-68138 Linux qdisc rate-table race local privilege escalation PoC", "fork": false, "created_at": "2026-08-11T22:22:22Z", - "updated_at": "2026-08-13T13:49:47Z", + "updated_at": "2026-08-13T22:29:21Z", "pushed_at": "2026-08-12T15:31:34Z", - "stargazers_count": 6, - "watchers_count": 6, + "stargazers_count": 8, + "watchers_count": 8, "has_discussions": false, - "forks_count": 3, + "forks_count": 4, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,8 +27,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 3, - "watchers": 6, + "forks": 4, + "watchers": 8, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-72898.json b/2026/CVE-2026-72898.json index 426cdb2647..346d6fd790 100644 --- a/2026/CVE-2026-72898.json +++ b/2026/CVE-2026-72898.json @@ -31,5 +31,45 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1333539991, + "name": "CVE-2026-72898-PoC", + "full_name": "codeb0ssx\/CVE-2026-72898-PoC", + "owner": { + "login": "codeb0ssx", + "id": 244077382, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/244077382?v=4", + "html_url": "https:\/\/github.com\/codeb0ssx", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/codeb0ssx\/CVE-2026-72898-PoC", + "description": "CVE-2026-72898 - Metabase", + "fork": false, + "created_at": "2026-08-13T21:08:45Z", + "updated_at": "2026-08-13T21:11:14Z", + "pushed_at": "2026-08-13T21:09:54Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "codeb0ss", + "cve-2026-72898", + "cve-2026-72898-poc", + "metabase", + "realcodeb0ss", + "thecodeb0ss" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2021/CVE-2021-3360.json b/2026/CVE-2026-73673.json similarity index 52% rename from 2021/CVE-2021-3360.json rename to 2026/CVE-2026-73673.json index 8f9d43ada7..787f1690e1 100644 --- a/2021/CVE-2021-3360.json +++ b/2026/CVE-2026-73673.json @@ -1,21 +1,21 @@ [ { - "id": 360354308, - "name": "CVE-2021-3360", - "full_name": "tcbutler320\/CVE-2021-3360", + "id": 1333528115, + "name": "CVE-2026-73673", + "full_name": "ozcanpng\/CVE-2026-73673", "owner": { - "login": "tcbutler320", - "id": 41709108, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41709108?v=4", - "html_url": "https:\/\/github.com\/tcbutler320", + "login": "ozcanpng", + "id": 127627278, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/127627278?v=4", + "html_url": "https:\/\/github.com\/ozcanpng", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/tcbutler320\/CVE-2021-3360", - "description": null, + "html_url": "https:\/\/github.com\/ozcanpng\/CVE-2026-73673", + "description": "Non-destructive PoC and evidence for CVE-2026-73673 affecting Netis NC63 V3.0.0.3327", "fork": false, - "created_at": "2021-04-22T01:17:37Z", - "updated_at": "2021-08-20T10:07:52Z", - "pushed_at": "2021-04-22T01:38:43Z", + "created_at": "2026-08-13T20:50:12Z", + "updated_at": "2026-08-13T21:00:16Z", + "pushed_at": "2026-08-13T21:00:06Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-8181.json b/2026/CVE-2026-8181.json index 0bbebc2231..c5c54067cb 100644 --- a/2026/CVE-2026-8181.json +++ b/2026/CVE-2026-8181.json @@ -201,10 +201,10 @@ "description": "CVE-2026-8181 | Burst Statistics 3.4.0 - 3.4.1.1 - Authentication Bypass to Admin Account Takeover ", "fork": false, "created_at": "2026-05-17T21:47:54Z", - "updated_at": "2026-05-17T21:51:11Z", + "updated_at": "2026-08-13T21:57:55Z", "pushed_at": "2026-05-17T21:51:07Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -215,7 +215,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-8206.json b/2026/CVE-2026-8206.json index 7c41a8ff8d..3201129e6f 100644 --- a/2026/CVE-2026-8206.json +++ b/2026/CVE-2026-8206.json @@ -14,10 +14,10 @@ "description": "Mass exploitation tool for CVE-2026-8206 – Unauthenticated Privilege Escalation via 'handle_forgot_password' in Kirki WordPress plugin (≤6.0.6).", "fork": false, "created_at": "2026-06-02T10:53:31Z", - "updated_at": "2026-07-10T12:34:09Z", + "updated_at": "2026-08-13T19:43:41Z", "pushed_at": "2026-06-02T11:46:06Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -37,7 +37,7 @@ ], "visibility": "public", "forks": 1, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 }, @@ -122,10 +122,10 @@ "description": "CVE-2026-8206: Kirki Customizer Framework - Unauthenticated Account Takeover (CVSS 9.8)", "fork": false, "created_at": "2026-07-28T04:40:42Z", - "updated_at": "2026-07-28T04:48:42Z", + "updated_at": "2026-08-13T22:17:21Z", "pushed_at": "2026-07-28T04:48:30Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -136,7 +136,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-8732.json b/2026/CVE-2026-8732.json index 983310ba91..1d7dd761b6 100644 --- a/2026/CVE-2026-8732.json +++ b/2026/CVE-2026-8732.json @@ -14,10 +14,10 @@ "description": "WP Maps Pro <= 6.1.0 - Unauthenticated Privilege Escalation via Administrator Account Creation", "fork": false, "created_at": "2026-05-30T00:28:00Z", - "updated_at": "2026-05-30T04:36:21Z", + "updated_at": "2026-08-13T19:46:12Z", "pushed_at": "2026-05-30T00:28:25Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -80,10 +80,10 @@ "description": "WP Maps Pro <= 6.1.0 - Unauthenticated Privilege Escalation via Administrator Account Creation to wpgmp_temp_access_ajax AJAX Action", "fork": false, "created_at": "2026-05-30T11:16:07Z", - "updated_at": "2026-07-12T17:29:41Z", + "updated_at": "2026-08-13T19:43:49Z", "pushed_at": "2026-05-31T17:09:57Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -104,7 +104,7 @@ ], "visibility": "public", "forks": 3, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 }, diff --git a/README.md b/README.md index 18d97f1111..a2b6fa5ce1 100644 --- a/README.md +++ b/README.md @@ -1487,13 +1487,6 @@ - [George0Papasotiriou/CVE-2026-9999-Serverless-Event-Injection-to-Code-Overwrite](https://github.com/George0Papasotiriou/CVE-2026-9999-Serverless-Event-Injection-to-Code-Overwrite) - [josephfarah-ciso/CVE-2026-9999-exploit](https://github.com/josephfarah-ciso/CVE-2026-9999-exploit) -### CVE-2026-10104 (2026-07-02) - -The Product Video Gallery for Woocommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom_thumbnail Parameter in all versions up to, and including, 1.5.1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with shop manager-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. - - -- [Ravi-lk/CVE-2026-10104-POC](https://github.com/Ravi-lk/CVE-2026-10104-POC) - ### CVE-2026-10187 (2026-05-31) A vulnerability was detected in Totolink N300RH 6.1c.1353_B20190305. Affected by this issue is the function setWiFiBasicConfig of the file wireless.so of the component Web Management Interface. Performing a manipulation of the argument KeyStr results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used. @@ -2034,13 +2027,6 @@ - [MadExploits/CVE-2026-14483](https://github.com/MadExploits/CVE-2026-14483) - [0xdak/CVE-2026-14483_exploit](https://github.com/0xdak/CVE-2026-14483_exploit) -### CVE-2026-14628 (2026-07-04) - -A vulnerability was detected in NousResearch hermes-agent up to 2026.5.16. This impacts the function extract_media of the file gateway/platforms/base.py of the component Live Webhook Endpoint. Performing a manipulation results in path traversal. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. - - -- [MESLIMOHAMEDM22005188/path-traversal-CVE-2026-14628](https://github.com/MESLIMOHAMEDM22005188/path-traversal-CVE-2026-14628) - ### CVE-2026-14762 (2026-07-05) A vulnerability was detected in code-projects Hotel and Tourism Reservation 1.0. The impacted element is an unknown function of the file /admin/rooms.php of the component Room Management Page. The manipulation of the argument delete results in sql injection. It is possible to launch the attack remotely. The exploit is now public and may be used. @@ -2499,7 +2485,6 @@ Gitea Docker image versions up to and including 1.26.2 use REVERSE_PROXY_TRUSTED_PROXIES=* by default, allowing any source IP to impersonate a user when reverse-proxy authentication headers such as X-WEBAUTH-USER are enabled. -- [rz1027/CVE-2026-20896](https://github.com/rz1027/CVE-2026-20896) - [szybnev/cve-2026-20896-gitea-poc](https://github.com/szybnev/cve-2026-20896-gitea-poc) - [XaocZenon/CVE-2026-20896](https://github.com/XaocZenon/CVE-2026-20896) - [Lite-os15/Lab-001-Gitea-CVE-2026-20896-](https://github.com/Lite-os15/Lab-001-Gitea-CVE-2026-20896-) @@ -2904,13 +2889,6 @@ - [gsadagopan/cve-2026-22747-sandbox](https://github.com/gsadagopan/cve-2026-22747-sandbox) -### CVE-2026-22874 (2026-07-03) - -Gitea versions up to and including 1.26.2 have incomplete SSRF protection in webhook and migration allow-list filtering. - - -- [Eliot-code/CVE-2026-22874-PoC](https://github.com/Eliot-code/CVE-2026-22874-PoC) - ### CVE-2026-23001 (2026-01-25) In the Linux kernel, the following vulnerability has been resolved:\n\nmacvlan: fix possible UAF in macvlan_forward_source()\n\nAdd RCU protection on (struct macvlan_source_entry)->vlan.\n\nWhenever macvlan_hash_del_source() is called, we must clear\nentry->vlan pointer before RCU grace period starts.\n\nThis allows macvlan_forward_source() to skip over\nentries queued for freeing.\n\nNote that macvlan_dev are already RCU protected, as they\nare embedded in a standard netdev (netdev_priv(ndev)).\n\nhttps: //lore.kernel.org/netdev/695fb1e8.050a0220.1c677c.039f.GAE@google.com/T/#u @@ -3112,13 +3090,6 @@ - [offseckit/CVE-2026-23813](https://github.com/offseckit/CVE-2026-23813) -### CVE-2026-23870 (2026-05-06) - -A denial of service vulnerability could be triggered by sending specially crafted HTTP requests to server function endpoints, this could lead to server crashes, out-of-memory exceptions or excessive CPU usage; affecting the following packages: react-server-dom-webpack, react-server-dom-parcel, react-server-dom-turbopack (versions 19.0.0 through 19.0.5, 19.1.0 through 19.1.6, and 19.2.0 through 19.2.5). - - -- [emresandikci/nextjs-cve-2026-23870-checker](https://github.com/emresandikci/nextjs-cve-2026-23870-checker) - ### CVE-2026-23918 (2026-05-04) Double Free and possible RCE vulnerability in Apache HTTP Server with the HTTP/2 protocol.\n\nThis issue affects Apache HTTP Server: 2.4.66.\n\nUsers are recommended to upgrade to version 2.4.67, which fixes the issue. @@ -5313,6 +5284,8 @@ - [E-R-Butch/F9360-CVE43499](https://github.com/E-R-Butch/F9360-CVE43499) - [hybLOVE/iqoo-temp-root](https://github.com/hybLOVE/iqoo-temp-root) - [wzhdgithub/GhostLock](https://github.com/wzhdgithub/GhostLock) +- [pimpamebanihah/cve-2026-43499-app.so](https://github.com/pimpamebanihah/cve-2026-43499-app.so) +- [pimpamebanihah/cve-2026-43499-app.s0](https://github.com/pimpamebanihah/cve-2026-43499-app.s0) ### CVE-2026-43500 (2026-05-11) @@ -6967,6 +6940,9 @@ - [BiiTts/CVE-2026-53753-Crawl4AI-RCE](https://github.com/BiiTts/CVE-2026-53753-Crawl4AI-RCE) +### CVE-2026-53767 +- [iltosec/chyrp-lite-rce-poc](https://github.com/iltosec/chyrp-lite-rce-poc) + ### CVE-2026-53787 (2026-06-12) Amasty Order Attributes for Magento 2 before version 4.0.0 contains an unauthenticated arbitrary file upload vulnerability that allows unauthenticated attackers to write arbitrary files to the store's media directory by submitting files of any type or name to the upload endpoint without authentication, session validation, or cart context. Attackers can upload PHP files to achieve remote code execution on servers where the media directory permits PHP execution, or alternatively enable malware hosting, stored cross-site scripting via HTML or SVG uploads, and path traversal to write files outside the intended upload directory. @@ -8285,6 +8261,7 @@ - [0xBlackash/CVE-2026-72898](https://github.com/0xBlackash/CVE-2026-72898) +- [codeb0ssx/CVE-2026-72898-PoC](https://github.com/codeb0ssx/CVE-2026-72898-PoC) ### CVE-2026-73034 (2026-08-11) @@ -8293,6 +8270,9 @@ - [Boreas37/CVE-2026-73034-PoC](https://github.com/Boreas37/CVE-2026-73034-PoC) +### CVE-2026-73673 +- [ozcanpng/CVE-2026-73673](https://github.com/ozcanpng/CVE-2026-73673) + ### CVE-2026-999999 - [24520597-blip/CVE-2026-999999](https://github.com/24520597-blip/CVE-2026-999999) @@ -8440,6 +8420,13 @@ - [JNDataRT/VirtualLockSensorLPE](https://github.com/JNDataRT/VirtualLockSensorLPE) +### CVE-2025-0890 (2025-02-04) + +**UNSUPPORTED WHEN ASSIGNED**\nInsecure default credentials for the Telnet function in the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an attacker to log in to the management interface if the administrators have the option to change the default credentials but fail to do so. + + +- [Danyw24/zyxel-p870hn-hardware-hacking](https://github.com/Danyw24/zyxel-p870hn-hardware-hacking) + ### CVE-2025-0924 (2025-02-17) The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘message’ parameter in all versions up to, and including, 5.2.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. @@ -19814,13 +19801,6 @@ - [Sudo-WP/sudowp-crowdsignal-forms](https://github.com/Sudo-WP/sudowp-crowdsignal-forms) -### CVE-2025-69194 (2026-01-09) - -A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails to properly validate file paths provided in Metalink <file name> elements. An attacker can abuse this behavior to write files to unintended locations on the system. This can lead to data loss or potentially allow further compromise of the user’s environment. - - -- [secdongle/POC_CVE-2025-69194](https://github.com/secdongle/POC_CVE-2025-69194) - ### CVE-2025-69212 (2026-02-06) OpenSTAManager is an open source management software for technical assistance and invoicing. In 2.9.8 and earlier, a critical OS Command Injection vulnerability exists in the P7M (signed XML) file decoding functionality. An authenticated attacker can upload a ZIP file containing a .p7m file with a malicious filename to execute arbitrary system commands on the server. @@ -20278,7 +20258,6 @@ - [punitdarji/Paloalto-CVE-2024-0012](https://github.com/punitdarji/Paloalto-CVE-2024-0012) - [0xjessie21/CVE-2024-0012](https://github.com/0xjessie21/CVE-2024-0012) - [TalatumLabs/CVE-2024-0012_CVE-2024-9474_PoC](https://github.com/TalatumLabs/CVE-2024-0012_CVE-2024-9474_PoC) -- [dcollaoa/cve-2024-0012-gui-poc](https://github.com/dcollaoa/cve-2024-0012-gui-poc) - [Regent8SH/PanOsExploitMultitool](https://github.com/Regent8SH/PanOsExploitMultitool) - [razureink/cve-2024-0012_9474-panos_authbypass_reproduction](https://github.com/razureink/cve-2024-0012_9474-panos_authbypass_reproduction) @@ -20388,7 +20367,6 @@ - [Cappricio-Securities/CVE-2024-0235](https://github.com/Cappricio-Securities/CVE-2024-0235) -- [Nxploited/CVE-2024-0235-PoC](https://github.com/Nxploited/CVE-2024-0235-PoC) ### CVE-2024-0258 (2024-03-08) @@ -20446,21 +20424,6 @@ - [xbz0n/CVE-2024-0399](https://github.com/xbz0n/CVE-2024-0399) -### CVE-2024-0402 (2024-01-26) - -An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 which allows an authenticated user to write files to arbitrary locations on the GitLab server while creating a workspace. - - -- [doyensec/malicious-devfile-registry](https://github.com/doyensec/malicious-devfile-registry) - -### CVE-2024-0406 (2024-04-06) - -A flaw was discovered in the mholt/archiver package. This flaw allows an attacker to create a specially crafted tar file, which, when unpacked, may allow access to restricted files or directories. This issue can allow the creation or overwriting of files with the user's or application's privileges using the library. - - -- [walidpyh/CVE-2024-0406-POC](https://github.com/walidpyh/CVE-2024-0406-POC) -- [veissa/Desires](https://github.com/veissa/Desires) - ### CVE-2024-0507 (2024-01-16) An attacker with access to a Management Console user account with the editor role could escalate privileges through a command injection vulnerability in the Management Console. This vulnerability affected all versions of GitHub Enterprise Server and was fixed in versions 3.11.3, 3.10.5, 3.9.8, and 3.8.13 This vulnerability was reported via the GitHub Bug Bounty program. @@ -20482,13 +20445,6 @@ - [Insaida/cve-2024-0519-rca-research](https://github.com/Insaida/cve-2024-0519-rca-research) -### CVE-2024-0520 (2024-06-06) - -A vulnerability in mlflow/mlflow version 8.2.1 allows for remote code execution due to improper neutralization of special elements used in an OS command ('Command Injection') within the `mlflow.data.http_dataset_source.py` module. Specifically, when loading a dataset from a source URL with an HTTP scheme, the filename extracted from the `Content-Disposition` header or the URL path is used to generate the final file path without proper sanitization. This flaw enables an attacker to control the file path fully by utilizing path traversal or absolute path techniques, such as '../../tmp/poc.txt' or '/tmp/poc.txt', leading to arbitrary file write. Exploiting this vulnerability could allow a malicious user to execute commands on the vulnerable machine, potentially gaining access to data and model information. The issue is fixed in version 2.9.0. - - -- [chan-068/CVE-2024-0520_try](https://github.com/chan-068/CVE-2024-0520_try) - ### CVE-2024-0566 (2024-02-12) The Smart Manager WordPress plugin before 8.28.0 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin. @@ -20506,7 +20462,6 @@ - [0ptyx/cve-2024-0582](https://github.com/0ptyx/cve-2024-0582) - [geniuszly/CVE-2024-0582](https://github.com/geniuszly/CVE-2024-0582) - [101010zyl/CVE-2024-0582-dataonly](https://github.com/101010zyl/CVE-2024-0582-dataonly) -- [kuzeyardabulut/CVE-2024-0582](https://github.com/kuzeyardabulut/CVE-2024-0582) - [pwnmonk/io_uring-n-day](https://github.com/pwnmonk/io_uring-n-day) - [nanabingies/CVE-2024-0582](https://github.com/nanabingies/CVE-2024-0582) @@ -20603,20 +20558,12 @@ - [hunThubSpace/CVE-2024-0757-Exploit](https://github.com/hunThubSpace/CVE-2024-0757-Exploit) -### CVE-2024-0760 (2024-07-23) - -A malicious client can send many DNS messages over TCP, potentially causing the server to become unstable while the attack is in progress. The server may recover after the attack ceases. Use of ACLs will not mitigate the attack. \nThis issue affects BIND 9 versions 9.18.1 through 9.18.27, 9.19.0 through 9.19.24, and 9.18.11-S1 through 9.18.27-S1. - - -- [SpiralBL0CK/CVE-2024-0760](https://github.com/SpiralBL0CK/CVE-2024-0760) - ### CVE-2024-0762 (2024-05-14) Potential buffer overflow \nin unsafe UEFI variable handling \n\nin Phoenix SecureCore™ for select Intel platforms\n\n\nThis issue affects:\n\n\nPhoenix \n\nSecureCore™ for Intel Kaby Lake: from 4.0.1.1 before 4.0.1.998;\n\n\nPhoenix \n\nSecureCore™ for Intel Coffee Lake: from 4.1.0.1 before 4.1.0.562;\n\n\nPhoenix \n\nSecureCore™ for Intel Ice Lake: from 4.2.0.1 before 4.2.0.323;\n\n\nPhoenix \n\nSecureCore™ for Intel Comet Lake: from 4.2.1.1 before 4.2.1.287;\n\n\nPhoenix \n\nSecureCore™ for Intel Tiger Lake: from 4.3.0.1 before 4.3.0.236;\n\n\nPhoenix \n\nSecureCore™ for Intel Jasper Lake: from 4.3.1.1 before 4.3.1.184;\n\n\nPhoenix \n\nSecureCore™ for Intel Alder Lake: from 4.4.0.1 before 4.4.0.269;\n\n\nPhoenix \n\nSecureCore™ for Intel Raptor Lake: from 4.5.0.1 before 4.5.0.218;\n\n\nPhoenix \n\nSecureCore™ for Intel Meteor Lake: from 4.5.1.1 before 4.5.1.15. - [tadash10/Detect-CVE-2024-0762](https://github.com/tadash10/Detect-CVE-2024-0762) -- [abandon1337/CVE-2024-0762](https://github.com/abandon1337/CVE-2024-0762) ### CVE-2024-0783 (2024-01-22) @@ -20715,7 +20662,6 @@ - [Chocapikk/CVE-2024-1212](https://github.com/Chocapikk/CVE-2024-1212) -- [r0otk3r/CVE-2024-1212](https://github.com/r0otk3r/CVE-2024-1212) ### CVE-2024-1269 (2024-02-07) @@ -20804,7 +20750,6 @@ - [sharpicx/CVE-2024-1651-PoC](https://github.com/sharpicx/CVE-2024-1651-PoC) - [hy011121/CVE-2024-1651-exploit-RCE](https://github.com/hy011121/CVE-2024-1651-exploit-RCE) - [Whiteh4tWolf/CVE-2024-1651-PoC](https://github.com/Whiteh4tWolf/CVE-2024-1651-PoC) -- [killukeren/cve-2024-1651](https://github.com/killukeren/cve-2024-1651) ### CVE-2024-1655 (2024-04-15) @@ -20871,13 +20816,6 @@ - [rycbar77/CVE-2024-1939](https://github.com/rycbar77/CVE-2024-1939) -### CVE-2024-2053 (2024-03-05) - -The Artica Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user. This issue was demonstrated on version 4.50 of the The Artica-Proxy administrative web application attempts to prevent local file inclusion. These protections can be bypassed and arbitrary file requests supplied by unauthenticated users will be returned according to the privileges of the "www-data" user. - - -- [b-L-x/CVE-2024-2053](https://github.com/b-L-x/CVE-2024-2053) - ### CVE-2024-2054 (2024-03-05) The Artica-Proxy administrative web application will deserialize arbitrary PHP objects supplied by unauthenticated users and subsequently enable code execution as the "www-data" user. @@ -20927,13 +20865,6 @@ - [Redfox-Security/Digisol-DG-GR1321-s-Password-Policy-Bypass-CVE-2024-2257](https://github.com/Redfox-Security/Digisol-DG-GR1321-s-Password-Policy-Bypass-CVE-2024-2257) -### CVE-2024-2387 (2024-03-20) - -The Advanced Form Integration – Connect WooCommerce and Contact Form 7 to Google Sheets and other platforms plugin for WordPress is vulnerable to SQL Injection via the ‘integration_id’ parameter in all versions up to, and including, 1.82.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries and subsequently inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. - - -- [RandomRobbieBF/CVE-2024-2387](https://github.com/RandomRobbieBF/CVE-2024-2387) - ### CVE-2024-2389 (2024-04-02) In Flowmon versions prior to 11.1.14 and 12.3.5, an operating system command injection vulnerability has been identified.  An unauthenticated user can gain entry to the system via the Flowmon management interface, allowing for the execution of arbitrary system commands.\n\n @@ -20962,20 +20893,6 @@ - [Puvipavan/CVE-2024-2667](https://github.com/Puvipavan/CVE-2024-2667) -### CVE-2024-2771 (2024-05-18) - -The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the /wp-json/fluentform/v1/managers REST API endpoint in all versions up to, and including, 5.1.16. This makes it possible for unauthenticated attackers to grant users with Fluent Form management permissions which gives them access to all of the plugin's settings and features. This also makes it possible for unauthenticated attackers to delete manager accounts. - - -- [whale93/CVE-2024-2771-PoC](https://github.com/whale93/CVE-2024-2771-PoC) - -### CVE-2024-2782 (2024-05-18) - -The Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the /wp-json/fluentform/v1/global-settings REST API endpoint in all versions up to, and including, 5.1.16. This makes it possible for unauthenticated attackers to modify all of the plugin's settings. - - -- [whale93/CVE-2024-2782-PoC](https://github.com/whale93/CVE-2024-2782-PoC) - ### CVE-2024-2876 (2024-05-02) The Email Subscribers by Icegram Express – Email Marketing, Newsletters, Automation for WordPress & WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'run' function of the 'IG_ES_Subscribers_Query' class in all versions up to, and including, 5.7.14 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. @@ -21000,7 +20917,6 @@ - [PumpkinBridge/Chrome-CVE-2024-2887-RCE-POC](https://github.com/PumpkinBridge/Chrome-CVE-2024-2887-RCE-POC) - [rycbar77/CVE-2024-2887](https://github.com/rycbar77/CVE-2024-2887) -- [jjyuorg/reproduce-cve-2024-2887](https://github.com/jjyuorg/reproduce-cve-2024-2887) - [ad3210/CVE-2024-2887-REPORT](https://github.com/ad3210/CVE-2024-2887-REPORT) ### CVE-2024-2928 (2024-06-06) @@ -21023,10 +20939,6 @@ - [exfil0/test_iconv](https://github.com/exfil0/test_iconv) - [tnishiox/cve-2024-2961](https://github.com/tnishiox/cve-2024-2961) - [kjdfklha/CVE-2024-2961_poc](https://github.com/kjdfklha/CVE-2024-2961_poc) -- [kyotozx/CVE-2024-2961-Remote-File-Read](https://github.com/kyotozx/CVE-2024-2961-Remote-File-Read) -- [4wayhandshake/CVE-2024-2961](https://github.com/4wayhandshake/CVE-2024-2961) -- [omarelshopky/exploit_cve-2023-26326_using_cve-2024-2961](https://github.com/omarelshopky/exploit_cve-2023-26326_using_cve-2024-2961) -- [suce0155/CVE-2024-2961](https://github.com/suce0155/CVE-2024-2961) - [Clarissss/osTicketFileReadIntoRCE](https://github.com/Clarissss/osTicketFileReadIntoRCE) - [rcribelar-nucleus/my-cool-demo-php-code](https://github.com/rcribelar-nucleus/my-cool-demo-php-code) - [whyuhurtz/wongpress](https://github.com/whyuhurtz/wongpress) @@ -21039,7 +20951,6 @@ - [lfillaz/CVE-2024-2997](https://github.com/lfillaz/CVE-2024-2997) - [0xUho/CVE-2024-2997](https://github.com/0xUho/CVE-2024-2997) -- [o9-9/CVE-2024-2997](https://github.com/o9-9/CVE-2024-2997) ### CVE-2024-3094 (2024-03-29) @@ -21103,12 +21014,6 @@ - [AndreaCicca/Sicurezza-Informatica-Presentazione](https://github.com/AndreaCicca/Sicurezza-Informatica-Presentazione) - [shefirot/CVE-2024-3094](https://github.com/shefirot/CVE-2024-3094) - [robertdfrench/ifuncd-up](https://github.com/robertdfrench/ifuncd-up) -- [been22426/CVE-2024-3094](https://github.com/been22426/CVE-2024-3094) -- [laxmikumari615/Linux---Security---Detect-and-Mitigate-CVE-2024-3094](https://github.com/laxmikumari615/Linux---Security---Detect-and-Mitigate-CVE-2024-3094) -- [valeriot30/cve-2024-3094](https://github.com/valeriot30/cve-2024-3094) -- [24Owais/threat-intel-cve-2024-3094](https://github.com/24Owais/threat-intel-cve-2024-3094) -- [Dermot-lab/TryHack](https://github.com/Dermot-lab/TryHack) -- [Ikram124/CVE-2024-3094-analysis](https://github.com/Ikram124/CVE-2024-3094-analysis) - [mrk336/CVE-2024-3094](https://github.com/mrk336/CVE-2024-3094) - [Titus-soc/-CVE-2024-3094-Vulnerability-Checker-Fixer-Public](https://github.com/Titus-soc/-CVE-2024-3094-Vulnerability-Checker-Fixer-Public) - [M1lo25/CS50FinalProject](https://github.com/M1lo25/CS50FinalProject) @@ -21145,13 +21050,6 @@ - [TechieNeurons/CVE-2024-3116_RCE_in_pgadmin_8.4](https://github.com/TechieNeurons/CVE-2024-3116_RCE_in_pgadmin_8.4) -### CVE-2024-3121 (2024-06-24) - -A remote code execution vulnerability exists in the create_conda_env function of the parisneo/lollms repository, version 5.9.0. The vulnerability arises from the use of shell=True in the subprocess.Popen function, which allows an attacker to inject arbitrary commands by manipulating the env_name and python_version parameters. This issue could lead to a serious security breach as demonstrated by the ability to execute the 'whoami' command among potentially other harmful commands. - - -- [dark-ninja10/CVE-2024-3121](https://github.com/dark-ninja10/CVE-2024-3121) - ### CVE-2024-3177 (2024-04-22) A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated. The policy ensures pods running with a service account may only reference secrets specified in the service account’s secrets field. Kubernetes clusters are only affected if the ServiceAccount admission plugin and the kubernetes.io/enforce-mountable-secrets annotation are used together with containers, init containers, and ephemeral containers with the envFrom field populated. @@ -21243,9 +21141,6 @@ - [andrelia-hacks/CVE-2024-3400](https://github.com/andrelia-hacks/CVE-2024-3400) - [ivan-n0v/cve-2024-3400](https://github.com/ivan-n0v/cve-2024-3400) - [workshop748/CVE-2024-3400](https://github.com/workshop748/CVE-2024-3400) -- [hashdr1ft/SOC274-Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400](https://github.com/hashdr1ft/SOC274-Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400) -- [CyprianAtsyor/letsdefend-cve2024-3400-case-study](https://github.com/CyprianAtsyor/letsdefend-cve2024-3400-case-study) -- [CyberBibs/SOC274---Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400-](https://github.com/CyberBibs/SOC274---Palo-Alto-Networks-PAN-OS-Command-Injection-Vulnerability-Exploitation-CVE-2024-3400-) - [Yafiah-Darwesh/cs50-cyber-paloalto-oauth](https://github.com/Yafiah-Darwesh/cs50-cyber-paloalto-oauth) - [Zedocun/PAN-OS-CVE-2024-3400-Command-Injection-Investigation](https://github.com/Zedocun/PAN-OS-CVE-2024-3400-Command-Injection-Investigation) - [wa6n3r/CVE-2024-3400](https://github.com/wa6n3r/CVE-2024-3400) @@ -21274,14 +21169,6 @@ - [truonghuuphuc/CVE-2024-3495-Poc](https://github.com/truonghuuphuc/CVE-2024-3495-Poc) - [zomasec/CVE-2024-3495-POC](https://github.com/zomasec/CVE-2024-3495-POC) -### CVE-2024-3552 (2024-06-13) - -The Web Directory Free WordPress plugin before 1.7.0 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection with different techniques like UNION, Time-Based and Error-Based. - - -- [KiPhuong/cve-2024-3552](https://github.com/KiPhuong/cve-2024-3552) -- [KiPhuong/challenge-cve-2024-3552](https://github.com/KiPhuong/challenge-cve-2024-3552) - ### CVE-2024-3553 (2024-05-02) The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the hide_notices function in all versions up to, and including, 2.6.2. This makes it possible for unauthenticated attackers to enable user registration on sites that may have it disabled. @@ -21289,13 +21176,6 @@ - [RandomRobbieBF/CVE-2024-3553](https://github.com/RandomRobbieBF/CVE-2024-3553) -### CVE-2024-3568 (2024-04-10) - -The huggingface/transformers library is vulnerable to arbitrary code execution through deserialization of untrusted data within the `load_repo_checkpoint()` function of the `TFPreTrainedModel()` class. Attackers can execute arbitrary code and commands by crafting a malicious serialized payload, exploiting the use of `pickle.load()` on data from potentially untrusted sources. This vulnerability allows for remote code execution (RCE) by deceiving victims into loading a seemingly harmless checkpoint during a normal training process, thereby enabling attackers to execute arbitrary code on the targeted machine. - - -- [rooobeam/Pickle-Deserialization-Exploit-in-Transformers](https://github.com/rooobeam/Pickle-Deserialization-Exploit-in-Transformers) - ### CVE-2024-3596 (2024-07-09) RADIUS Protocol under RFC 2865 is susceptible to forgery attacks by a local attacker who can modify any valid Response (Access-Accept, Access-Reject, or Access-Challenge) to any other response using a chosen-prefix collision attack against MD5 Response Authenticator signature. @@ -21303,13 +21183,6 @@ - [alperenugurlu/CVE-2024-3596-Detector](https://github.com/alperenugurlu/CVE-2024-3596-Detector) -### CVE-2024-3640 (2024-05-16) - -An unquoted executable path exists in the Rockwell Automation FactoryTalk® Remote Access™ possibly resulting in remote code execution if exploited. While running the FTRA installer package, the executable path is not properly quoted, which could allow a threat actor to enter a malicious executable and run it as a System user. A threat actor needs admin privileges to exploit this vulnerability. - - -- [H1ng007/CVE-2024-3640_WafBypass](https://github.com/H1ng007/CVE-2024-3640_WafBypass) - ### CVE-2024-3656 (2024-10-09) A flaw was found in Keycloak. Certain endpoints in Keycloak's admin REST API allow low-privilege users to access administrative functionalities. This flaw allows users to perform actions reserved for administrators, potentially leading to data breaches or system compromise. @@ -21317,29 +21190,13 @@ - [h4x0r-dz/CVE-2024-3656](https://github.com/h4x0r-dz/CVE-2024-3656) -### CVE-2024-3660 (2024-04-16) - -A arbitrary code injection vulnerability in TensorFlow's Keras framework (<2.13) allows attackers to execute arbitrary code with the same permissions as the application using a model that allow arbitrary code irrespective of the application. - - -- [aaryanbhujang/CVE-2024-3660-PoC](https://github.com/aaryanbhujang/CVE-2024-3660-PoC) - ### CVE-2024-3661 (2024-05-06) DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN. -- [Wh1t3Fox/CVE-2024-3661](https://github.com/Wh1t3Fox/CVE-2024-3661) -- [Roundthe-clock/CVE-2024-3661VPN](https://github.com/Roundthe-clock/CVE-2024-3661VPN) - [YardenFadida/CVE-2024-3661_Demo](https://github.com/YardenFadida/CVE-2024-3661_Demo) -### CVE-2024-3673 (2024-08-30) - -The Web Directory Free WordPress plugin before 1.7.3 does not validate a parameter before using it in an include(), which could lead to Local File Inclusion issues. - - -- [Nxploited/CVE-2024-3673](https://github.com/Nxploited/CVE-2024-3673) - ### CVE-2024-3690 (2024-04-12) In PHPGurukul Small CRM 3.0 wurde eine kritische Schwachstelle entdeckt. Hierbei betrifft es unbekannten Programmcode der Komponente Change Password Handler. Durch Beeinflussen mit unbekannten Daten kann eine sql injection-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff über das Netzwerk. Der Exploit steht zur öffentlichen Verfügung. @@ -21402,7 +21259,6 @@ - [safeer-accuknox/CrushFTP-cve-2024-4040-poc](https://github.com/safeer-accuknox/CrushFTP-cve-2024-4040-poc) - [geniuszly/GenCrushSSTIExploit](https://github.com/geniuszly/GenCrushSSTIExploit) - [rahisec/CVE-2024-4040](https://github.com/rahisec/CVE-2024-4040) -- [ill-deed/CrushFTP-CVE-2024-4040-illdeed](https://github.com/ill-deed/CrushFTP-CVE-2024-4040-illdeed) - [juanorts/CrushFTP10-Docker-CVE-2024-4040](https://github.com/juanorts/CrushFTP10-Docker-CVE-2024-4040) - [cthhhhhh/CrushFTP-SSTI-LFI-Proof-of-Concept](https://github.com/cthhhhhh/CrushFTP-SSTI-LFI-Proof-of-Concept) - [Sidjaz/CrushFTP-CVE-2024-4040-Proof-of-Concept](https://github.com/Sidjaz/CrushFTP-CVE-2024-4040-Proof-of-Concept) @@ -21516,15 +21372,6 @@ - [Masamuneee/CVE-2024-4367-Analysis](https://github.com/Masamuneee/CVE-2024-4367-Analysis) - [m0d0ri205/PDFJS](https://github.com/m0d0ri205/PDFJS) - [pedrochalegre7/CVE-2024-4367-pdf-sample](https://github.com/pedrochalegre7/CVE-2024-4367-pdf-sample) -- [kabiri-labs/CVE-2024-4367-PoC](https://github.com/kabiri-labs/CVE-2024-4367-PoC) -- [elamani-drawing/CVE-2024-4367-POC-PDFJS](https://github.com/elamani-drawing/CVE-2024-4367-POC-PDFJS) -- [VVeakee/CVE-2024-4367](https://github.com/VVeakee/CVE-2024-4367) -- [BektiHandoyo/cve-pdf-host](https://github.com/BektiHandoyo/cve-pdf-host) -- [Bhavyakcwestern/Hacking-pdf.js-vulnerability](https://github.com/Bhavyakcwestern/Hacking-pdf.js-vulnerability) -- [PenguinCabinet/CVE-2024-4367-hands-on](https://github.com/PenguinCabinet/CVE-2024-4367-hands-on) -- [AnomalousVectors/cve-2024-4367-poc](https://github.com/AnomalousVectors/cve-2024-4367-poc) -- [0xr2r/CVE-2024-4367](https://github.com/0xr2r/CVE-2024-4367) -- [1337rokudenashi/Odoo_PDFjs_CVE-2024-4367.pdf](https://github.com/1337rokudenashi/Odoo_PDFjs_CVE-2024-4367.pdf) - [xiaoqiesec0x1/CVE-2024-4367-PDF.js-xss](https://github.com/xiaoqiesec0x1/CVE-2024-4367-PDF.js-xss) - [J1nKsC/CVE-2024-4367_test](https://github.com/J1nKsC/CVE-2024-4367_test) - [veronimo669/pdf.js-CVE-2024-4367](https://github.com/veronimo669/pdf.js-CVE-2024-4367) @@ -21615,22 +21462,8 @@ - [longhoangth18/CVE-2024-4577](https://github.com/longhoangth18/CVE-2024-4577) - [ahmetramazank/CVE-2024-4577](https://github.com/ahmetramazank/CVE-2024-4577) - [BTtea/CVE-2024-4577-RCE-PoC](https://github.com/BTtea/CVE-2024-4577-RCE-PoC) -- [tpdlshdmlrkfmcla/php-cgi-cve-2024-4577](https://github.com/tpdlshdmlrkfmcla/php-cgi-cve-2024-4577) -- [Didarul342/CVE-2024-4577](https://github.com/Didarul342/CVE-2024-4577) -- [Night-have-dreams/php-cgi-Injector](https://github.com/Night-have-dreams/php-cgi-Injector) -- [wilss0n/CVE-2024-4577](https://github.com/wilss0n/CVE-2024-4577) -- [sug4r-wr41th/CVE-2024-4577](https://github.com/sug4r-wr41th/CVE-2024-4577) -- [Gill-Singh-A/CVE-2024-4577-Exploit](https://github.com/Gill-Singh-A/CVE-2024-4577-Exploit) -- [tntrock/CVE-2024-4577_PowerShell](https://github.com/tntrock/CVE-2024-4577_PowerShell) -- [KimJuhyeong95/cve-2024-4577](https://github.com/KimJuhyeong95/cve-2024-4577) -- [byteReaper77/CVE-2024-4577](https://github.com/byteReaper77/CVE-2024-4577) -- [r0otk3r/CVE-2024-4577](https://github.com/r0otk3r/CVE-2024-4577) -- [mananjain61/PHP-CGI-INTERNAL-RCE](https://github.com/mananjain61/PHP-CGI-INTERNAL-RCE) - [Skycritch/CVE-2024-4577](https://github.com/Skycritch/CVE-2024-4577) - [CirqueiraDev/MassExploit-CVE-2024-4577](https://github.com/CirqueiraDev/MassExploit-CVE-2024-4577) -- [Ianthinus/CVE-2024-4577](https://github.com/Ianthinus/CVE-2024-4577) -- [InfoSec-DB/PHPCGIScanner](https://github.com/InfoSec-DB/PHPCGIScanner) -- [a1ex-var1amov/ctf-cve-2024-4577](https://github.com/a1ex-var1amov/ctf-cve-2024-4577) - [rayngnpc/CVE-2024-4577-rayng](https://github.com/rayngnpc/CVE-2024-4577-rayng) - [gl1tch0x1/PHP_8.1.x_Exploit](https://github.com/gl1tch0x1/PHP_8.1.x_Exploit) - [Kanak-CypherX/cve-2024-4577-lab](https://github.com/Kanak-CypherX/cve-2024-4577-lab) @@ -21703,13 +21536,6 @@ - [cve-2024/CVE-2024-4898-Poc](https://github.com/cve-2024/CVE-2024-4898-Poc) - [gh-ost00/CVE-2024-4898](https://github.com/gh-ost00/CVE-2024-4898) -### CVE-2024-4947 (2024-05-15) - -Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) - - -- [bjrjk/CVE-2024-4947](https://github.com/bjrjk/CVE-2024-4947) - ### CVE-2024-4956 (2024-05-16) Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Fixed in version 3.68.1. @@ -21729,8 +21555,6 @@ - [JolyIrsb/CVE-2024-4956](https://github.com/JolyIrsb/CVE-2024-4956) - [UMASANKAR-MG/Path-Traversal-CVE-2024-4956](https://github.com/UMASANKAR-MG/Path-Traversal-CVE-2024-4956) - [An00bRektn/shirocrack](https://github.com/An00bRektn/shirocrack) -- [art-of-defence/CVE-2024-4956](https://github.com/art-of-defence/CVE-2024-4956) -- [Buff3st-0v3rfl0w/CVE-2024-4956](https://github.com/Buff3st-0v3rfl0w/CVE-2024-4956) - [amalpvatayam67/day04-nexus-4956](https://github.com/amalpvatayam67/day04-nexus-4956) ### CVE-2024-5009 (2024-06-25) @@ -21748,13 +21572,6 @@ - [h4mr3r/CVE-2024-5082](https://github.com/h4mr3r/CVE-2024-5082) -### CVE-2024-5083 (2024-11-14) - -A stored Cross-site Scripting vulnerability has been discovered in Sonatype Nexus Repository 2\n\nThis issue affects Nexus Repository 2 OSS/Pro versions up to and including 2.15.1. - - -- [Roronoawjd/CVE-2024-5083](https://github.com/Roronoawjd/CVE-2024-5083) - ### CVE-2024-5084 (2024-05-23) The Hash Form – Drag & Drop Form Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'file_upload_action' function in all versions up to, and including, 1.1.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. @@ -21765,7 +21582,6 @@ - [NanoWraith/CVE-2024-5084](https://github.com/NanoWraith/CVE-2024-5084) - [WOOOOONG/CVE-2024-5084](https://github.com/WOOOOONG/CVE-2024-5084) - [Raeezrbr/CVE-2024-5084](https://github.com/Raeezrbr/CVE-2024-5084) -- [ModeBrutal/CVE-2024-5084-Auto-Exploit](https://github.com/ModeBrutal/CVE-2024-5084-Auto-Exploit) - [RedTeamBlueTeam/CVE-2024-5084-Red-Team](https://github.com/RedTeamBlueTeam/CVE-2024-5084-Red-Team) ### CVE-2024-5124 (2024-06-06) @@ -21833,13 +21649,6 @@ - [gh-ost00/CVE-2024-5420-XSS](https://github.com/gh-ost00/CVE-2024-5420-XSS) -### CVE-2024-5452 (2024-06-06) - -A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the `deepdiff` library. The library uses `deepdiff.Delta` objects to modify application state based on frontend actions. However, it is possible to bypass the intended restrictions on modifying dunder attributes, allowing an attacker to construct a serialized delta that passes the deserializer whitelist and contains dunder attributes. When processed, this can be exploited to access other modules, classes, and instances, leading to arbitrary attribute write and total RCE on any self-hosted pytorch-lightning application in its default configuration, as the delta endpoint is enabled by default. - - -- [skrkcb2/CVE-2024-5452](https://github.com/skrkcb2/CVE-2024-5452) - ### CVE-2024-5522 (2024-06-20) The HTML5 Video Player WordPress plugin before 2.5.27 does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks @@ -21848,13 +21657,6 @@ - [kryptonproject/CVE-2024-5522-PoC](https://github.com/kryptonproject/CVE-2024-5522-PoC) - [geniuszly/CVE-2024-5522](https://github.com/geniuszly/CVE-2024-5522) -### CVE-2024-5535 (2024-06-27) - -Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an\nempty supported client protocols buffer may cause a crash or memory contents to\nbe sent to the peer.\n\nImpact summary: A buffer overread can have a range of potential consequences\nsuch as unexpected application beahviour or a crash. In particular this issue\ncould result in up to 255 bytes of arbitrary private data from memory being sent\nto the peer leading to a loss of confidentiality. However, only applications\nthat directly call the SSL_select_next_proto function with a 0 length list of\nsupported client protocols are affected by this issue. This would normally never\nbe a valid scenario and is typically not under attacker control but may occur by\naccident in the case of a configuration or programming error in the calling\napplication.\n\nThe OpenSSL API function SSL_select_next_proto is typically used by TLS\napplications that support ALPN (Application Layer Protocol Negotiation) or NPN\n(Next Protocol Negotiation). NPN is older, was never standardised and\nis deprecated in favour of ALPN. We believe that ALPN is significantly more\nwidely deployed than NPN. The SSL_select_next_proto function accepts a list of\nprotocols from the server and a list of protocols from the client and returns\nthe first protocol that appears in the server list that also appears in the\nclient list. In the case of no overlap between the two lists it returns the\nfirst item in the client list. In either case it will signal whether an overlap\nbetween the two lists was found. In the case where SSL_select_next_proto is\ncalled with a zero length client list it fails to notice this condition and\nreturns the memory immediately following the client list pointer (and reports\nthat there was no overlap in the lists).\n\nThis function is typically called from a server side application callback for\nALPN or a client side application callback for NPN. In the case of ALPN the list\nof protocols supplied by the client is guaranteed by libssl to never be zero in\nlength. The list of server protocols comes from the application and should never\nnormally be expected to be of zero length. In this case if the\nSSL_select_next_proto function has been called as expected (with the list\nsupplied by the client passed in the client/client_len parameters), then the\napplication will not be vulnerable to this issue. If the application has\naccidentally been configured with a zero length server list, and has\naccidentally passed that zero length server list in the client/client_len\nparameters, and has additionally failed to correctly handle a "no overlap"\nresponse (which would normally result in a handshake failure in ALPN) then it\nwill be vulnerable to this problem.\n\nIn the case of NPN, the protocol permits the client to opportunistically select\na protocol when there is no overlap. OpenSSL returns the first client protocol\nin the no overlap case in support of this. The list of client protocols comes\nfrom the application and should never normally be expected to be of zero length.\nHowever if the SSL_select_next_proto function is accidentally called with a\nclient_len of 0 then an invalid memory pointer will be returned instead. If the\napplication uses this output as the opportunistic protocol then the loss of\nconfidentiality will occur.\n\nThis issue has been assessed as Low severity because applications are most\nlikely to be vulnerable if they are using NPN instead of ALPN - but NPN is not\nwidely used. It also requires an application configuration or programming error.\nFinally, this issue would not typically be under attacker control making active\nexploitation unlikely.\n\nThe FIPS modules in 3.3, 3.2, 3.1 and 3.0 are not affected by this issue.\n\nDue to the low severity of this issue we are not issuing new releases of\nOpenSSL at this time. The fix will be included in the next releases when they\nbecome available. - - -- [websecnl/CVE-2024-5535](https://github.com/websecnl/CVE-2024-5535) - ### CVE-2024-5633 (2024-07-09) Longse model LBH30FE200W cameras, as well as products based on this device, provide an unrestricted access for an attacker located in the same local network to an undocumented binary service CoolView on one of the ports. \nAn attacker with a knowledge of the available commands is able to perform read/write operations on the device's memory, which might result in e.g. bypassing telnet login and obtaining full access to the device. @@ -21896,14 +21698,6 @@ - [watchtowrlabs/watchTowr-vs-progress-moveit_CVE-2024-5806](https://github.com/watchtowrlabs/watchTowr-vs-progress-moveit_CVE-2024-5806) -- [sec13b/CVE-2024-5806](https://github.com/sec13b/CVE-2024-5806) - -### CVE-2024-5909 (2024-06-12) - -A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a low privileged local Windows user to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity. - - -- [ig-labs/EDR-ALPC-Block-POC](https://github.com/ig-labs/EDR-ALPC-Block-POC) ### CVE-2024-5910 (2024-07-10) @@ -21919,7 +21713,6 @@ - [EQSTLab/CVE-2024-5932](https://github.com/EQSTLab/CVE-2024-5932) - [OxLmahdi/cve-2024-5932](https://github.com/OxLmahdi/cve-2024-5932) -- [hlc23/CVE-2024-5932-web-ui](https://github.com/hlc23/CVE-2024-5932-web-ui) - [autom4il/CVE-2024-5932](https://github.com/autom4il/CVE-2024-5932) - [nishant-kumar-5173/CVE-2024-5932](https://github.com/nishant-kumar-5173/CVE-2024-5932) @@ -21965,13 +21758,6 @@ - [Abdurahmon3236/-CVE-2024-6095](https://github.com/Abdurahmon3236/-CVE-2024-6095) -### CVE-2024-6132 (2024-06-19) - -The Pexels: Free Stock Photos plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'pexels_fsp_images_options_validate' function in all versions up to, and including, 1.2.2. This makes it possible for authenticated attackers, with contributor-level and above permissions, to upload arbitrary files on the affected site's server which may make remote code execution possible. - - -- [Nxploited/CVE-2024-6132](https://github.com/Nxploited/CVE-2024-6132) - ### CVE-2024-6205 (2024-07-19) The PayPlus Payment Gateway WordPress plugin before 6.6.9 does not properly sanitise and escape a parameter before using it in a SQL statement via a WooCommerce API route available to unauthenticated users, leading to an SQL injection vulnerability. @@ -21986,13 +21772,6 @@ - [bgutowski/CVE-2025-4517-POC-Sudoers](https://github.com/bgutowski/CVE-2025-4517-POC-Sudoers) -### CVE-2024-6244 (2024-07-22) - -The PZ Frontend Manager WordPress plugin before 1.0.6 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks - - -- [Nxploited/CVE-2024-6244](https://github.com/Nxploited/CVE-2024-6244) - ### CVE-2024-6297 (2024-06-25) Several plugins for WordPress hosted on WordPress.org have been compromised and injected with malicious PHP scripts. A malicious threat actor compromised the source code of various plugins and injected code that exfiltrates database credentials and is used to create new, malicious, administrator users and send that data back to a server. Currently, not all plugins have been patched and we strongly recommend uninstalling the plugins for the time being and running a complete malware scan. @@ -22013,7 +21792,6 @@ - [Abdurahmon3236/CVE-2024-6366](https://github.com/Abdurahmon3236/CVE-2024-6366) -- [Nxploited/CVE-2024-6366-PoC](https://github.com/Nxploited/CVE-2024-6366-PoC) ### CVE-2024-6386 (2024-08-21) @@ -22113,8 +21891,6 @@ - [anhvutuan/CVE-2024-6387-poc-1](https://github.com/anhvutuan/CVE-2024-6387-poc-1) - [YassDEV221608/CVE-2024-6387](https://github.com/YassDEV221608/CVE-2024-6387) - [awusan125/test_for6387](https://github.com/awusan125/test_for6387) -- [kinu404/CVE-2024-6387](https://github.com/kinu404/CVE-2024-6387) -- [xiw1ll/CVE-2024-6387_Checker](https://github.com/xiw1ll/CVE-2024-6387_Checker) - [moften/regreSSHion-CVE-2024-6387](https://github.com/moften/regreSSHion-CVE-2024-6387) - [OHHDamnBRO/Noregressh](https://github.com/OHHDamnBRO/Noregressh) - [Ngagne-Demba-Dia/CVE-2024-6387-corrigee](https://github.com/Ngagne-Demba-Dia/CVE-2024-6387-corrigee) @@ -22126,14 +21902,6 @@ - [al7araziruby-jpg/CVE-2024-6387-OpenSSH-Analysis](https://github.com/al7araziruby-jpg/CVE-2024-6387-OpenSSH-Analysis) - [hasan8babiker/CVE-2024-6387](https://github.com/hasan8babiker/CVE-2024-6387) -### CVE-2024-6460 (2024-08-16) - -The Grow by Tradedoubler WordPress plugin through 2.0.21 is vulnerable to Local File Inclusion via the component parameter. This makes it possible for attackers to include and execute PHP files on the server, allowing the execution of any PHP code in those files. - - -- [Nxploited/CVE-2024-6460](https://github.com/Nxploited/CVE-2024-6460) -- [E1-Bot141/CVE-2024-6460](https://github.com/E1-Bot141/CVE-2024-6460) - ### CVE-2024-6473 (2024-09-03) Yandex Browser for Desktop before 24.7.1.380 has a DLL Hijacking Vulnerability because an untrusted search path is used. @@ -22141,13 +21909,6 @@ - [12345qwert123456/CVE-2024-6473-PoC](https://github.com/12345qwert123456/CVE-2024-6473-PoC) -### CVE-2024-6485 (2024-07-11) - -A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting (XSS) attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribute, which would then be executed when the button's loading state is triggered. - - -- [Yumeae/Bootstrap-with-XSS](https://github.com/Yumeae/Bootstrap-with-XSS) - ### CVE-2024-6529 (2024-08-01) The Ultimate Classified Listings WordPress plugin before 1.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin @@ -22178,13 +21939,6 @@ - [RandomRobbieBF/CVE-2024-6624](https://github.com/RandomRobbieBF/CVE-2024-6624) - [Jenderal92/CVE-2024-6624](https://github.com/Jenderal92/CVE-2024-6624) -### CVE-2024-6648 (2025-05-08) - -Absolute Path Traversal vulnerability in AP Page Builder versions prior to 4.0.0 could allow an unauthenticated remote user to modify the 'product_item_path' within the 'config' JSON file, allowing them to read any file on the system. - - -- [n0d0n/CVE-2024-6648](https://github.com/n0d0n/CVE-2024-6648) - ### CVE-2024-6651 (2024-08-06) The WordPress File Upload WordPress plugin before 4.24.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin @@ -22245,14 +21999,6 @@ - [HORKimhab/CVE-2024-6783](https://github.com/HORKimhab/CVE-2024-6783) -### CVE-2024-7014 (2024-07-23) - -EvilVideo vulnerability allows sending malicious apps disguised as videos in Telegram for Android application affecting \n versions 10.14.4 and older. - - -- [hexspectrum1/CVE-2024-7014](https://github.com/hexspectrum1/CVE-2024-7014) -- [absholi7ly/PoC-for-CVE-2024-7014-Exploit](https://github.com/absholi7ly/PoC-for-CVE-2024-7014-Exploit) - ### CVE-2024-7029 (2024-08-02) Commands can be injected over the network and executed without authentication. @@ -22275,7 +22021,6 @@ - [gh-ost00/CVE-2024-7120](https://github.com/gh-ost00/CVE-2024-7120) -- [jokeir07x/CVE-2024-7120-Exploit-by-Dark-07x](https://github.com/jokeir07x/CVE-2024-7120-Exploit-by-Dark-07x) ### CVE-2024-7124 (2024-11-14) @@ -22312,13 +22057,6 @@ - [TheMalwareGuardian/CVE-2024-7344](https://github.com/TheMalwareGuardian/CVE-2024-7344) -### CVE-2024-7399 (2024-08-09) - -Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority. - - -- [davidxbors/CVE-2024-7399-POC](https://github.com/davidxbors/CVE-2024-7399-POC) - ### CVE-2024-7456 (2024-11-01) A SQL injection vulnerability exists in the `/api/v1/external-users` route of lunary-ai/lunary version v1.4.2. The `order by` clause of the SQL query uses `sql.unsafe` without prior sanitization, allowing for SQL injection. The `orderByClause` variable is constructed without server-side validation or sanitization, enabling an attacker to execute arbitrary SQL commands. Successful exploitation can lead to complete data loss, modification, or corruption. @@ -22332,7 +22070,6 @@ - [PeterGabaldon/CVE-2024-7479_CVE-2024-7481](https://github.com/PeterGabaldon/CVE-2024-7479_CVE-2024-7481) -- [fortra/CVE-2024-7479](https://github.com/fortra/CVE-2024-7479) ### CVE-2024-7514 (2024-10-11) @@ -22357,19 +22094,11 @@ - [D3N14LD15K/CVE-2024-7593_PoC_Exploit](https://github.com/D3N14LD15K/CVE-2024-7593_PoC_Exploit) - [kernel364/CVE-2024-7593](https://github.com/kernel364/CVE-2024-7593) -### CVE-2024-7595 (2025-02-05) - -GRE and GRE6 Protocols (RFC2784) do not validate or verify the source of a network packet allowing an attacker to spoof and route arbitrary traffic via an exposed network interface that can lead to spoofing, access control bypass, and other unexpected network behaviors.\r\n\r\nThis can be considered similar to CVE-2020-10136. - - -- [PapayaJackal/ipeeyoupeewepee](https://github.com/PapayaJackal/ipeeyoupeewepee) - ### CVE-2024-7627 (2024-09-05) The Bit File Manager plugin for WordPress is vulnerable to Remote Code Execution in versions 6.0 to 6.5.5 via the 'checkSyntax' function. This is due to writing a temporary file to a publicly accessible directory before performing file validation. This makes it possible for unauthenticated attackers to execute code on the server if an administrator has allowed Guest User read permissions. -- [siunam321/CVE-2024-7627-PoC](https://github.com/siunam321/CVE-2024-7627-PoC) - [lkmn1/CVE-2024-7627](https://github.com/lkmn1/CVE-2024-7627) ### CVE-2024-7646 (2024-08-16) @@ -22429,8 +22158,6 @@ - [TheCyberguy-17/RCE_CVE-2024-7954](https://github.com/TheCyberguy-17/RCE_CVE-2024-7954) - [zxj-hub/CVE-2024-7954POC](https://github.com/zxj-hub/CVE-2024-7954POC) - [0dayan0n/RCE_CVE-2024-7954-](https://github.com/0dayan0n/RCE_CVE-2024-7954-) -- [Arthikw3b/RCE-CVE-2024-7954](https://github.com/Arthikw3b/RCE-CVE-2024-7954) -- [r0otk3r/CVE-2024-7954](https://github.com/r0otk3r/CVE-2024-7954) - [ShivanshKuntal/Exploitation-of-a-Remote-Code-Execution-vulnerability--CVE-2024-7954-](https://github.com/ShivanshKuntal/Exploitation-of-a-Remote-Code-Execution-vulnerability--CVE-2024-7954-) ### CVE-2024-7965 (2024-08-21) @@ -22440,27 +22167,6 @@ - [bi-zone/CVE-2024-7965](https://github.com/bi-zone/CVE-2024-7965) -### CVE-2024-7966 (2024-08-21) - -Out of bounds memory access in Skia in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) - - -- [HyHy100/Chrome-Skia-CVE-2024-7966](https://github.com/HyHy100/Chrome-Skia-CVE-2024-7966) - -### CVE-2024-7971 (2024-08-21) - -Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium security severity: High) - - -- [mistymntncop/CVE-2024-7971](https://github.com/mistymntncop/CVE-2024-7971) - -### CVE-2024-7985 (2024-10-29) - -The FileOrganizer – Manage WordPress and Website Files plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the "fileorganizer_ajax_handler" function in all versions up to, and including, 1.0.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, and permissions granted by an administrator, to upload arbitrary files on the affected site's server which may make remote code execution possible. NOTE: The FileOrganizer Pro plugin must be installed and active to allow Subscriber+ users to upload files. - - -- [Nxploited/CVE-2024-7985-PoC](https://github.com/Nxploited/CVE-2024-7985-PoC) - ### CVE-2024-8069 (2024-11-12) Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server @@ -22468,48 +22174,12 @@ - [mdiqbalahmad/cve-2024-8069-exp-Citrix-Virtual-Apps-XEN](https://github.com/mdiqbalahmad/cve-2024-8069-exp-Citrix-Virtual-Apps-XEN) -### CVE-2024-8118 (2024-09-26) - -In Grafana, the wrong permission is applied to the alert rule write API endpoint, allowing users with permission to write external alert instances to also write alert rules. - - -- [nurarifin05/POC-CVE-2024-8118](https://github.com/nurarifin05/POC-CVE-2024-8118) - -### CVE-2024-8176 (2025-03-14) - -A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash. This issue could lead to denial of service (DoS) or, in some cases, exploitable memory corruption, depending on the environment and library usage. - - -- [uthrasri/Expat_2.6.2_CVE-2024-8176](https://github.com/uthrasri/Expat_2.6.2_CVE-2024-8176) - ### CVE-2024-8190 (2024-09-10) An OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518 and before allows a remote authenticated attacker to obtain remote code execution. The attacker must have admin level privileges to exploit this vulnerability. - [horizon3ai/CVE-2024-8190](https://github.com/horizon3ai/CVE-2024-8190) -- [flyingllama87/CVE-2024-8190-unauth](https://github.com/flyingllama87/CVE-2024-8190-unauth) - -### CVE-2024-8193 (2024-08-28) - -Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) - - -- [HyHy100/Chrome-Skia-CVE-2024-8193](https://github.com/HyHy100/Chrome-Skia-CVE-2024-8193) - -### CVE-2024-8198 (2024-08-28) - -Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) - - -- [HyHy100/Chrome-Skia-CVE-2024-8198](https://github.com/HyHy100/Chrome-Skia-CVE-2024-8198) - -### CVE-2024-8232 (2024-09-10) - -SpiderControl SCADA Web Server has a vulnerability that could allow an \nattacker to upload specially crafted malicious files without \nauthentication. - - -- [z3usx01/CVE-2024-8232](https://github.com/z3usx01/CVE-2024-8232) ### CVE-2024-8275 (2024-09-25) @@ -22518,13 +22188,6 @@ - [p33d/CVE-2024-8275](https://github.com/p33d/CVE-2024-8275) -### CVE-2024-8289 (2024-09-04) - -The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to privilege escalation/de-escalation and account takeover due to an insufficient capability check on the update_item_permissions_check and create_item_permissions_check functions in all versions up to, and including, 4.2.0. This makes it possible for unauthenticated attackers to change the password of any user with the vendor role, create new users with the vendor role, and demote other users like administrators to the vendor role. - - -- [pashayogi/CVE-2024-8289](https://github.com/pashayogi/CVE-2024-8289) - ### CVE-2024-8309 (2024-10-29) A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain version 0.2.5 allows for SQL injection through prompt injection. This vulnerability can lead to unauthorized data manipulation, data exfiltration, denial of service (DoS) by deleting all data, breaches in multi-tenant security environments, and data integrity issues. Attackers can create, update, or delete nodes and relationships without proper authorization, extract sensitive data, disrupt services, access data across different tenants, and compromise the integrity of the database. @@ -22547,20 +22210,6 @@ - [0xb0mb3r/CVE-2024-8353-PoC](https://github.com/0xb0mb3r/CVE-2024-8353-PoC) - [EQSTLab/CVE-2024-8353](https://github.com/EQSTLab/CVE-2024-8353) -### CVE-2024-8381 (2024-09-03) - -A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as the `with` environment. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, Firefox ESR < 115.15, Thunderbird < 128.2, and Thunderbird < 115.15. - - -- [bjrjk/CVE-2024-8381](https://github.com/bjrjk/CVE-2024-8381) - -### CVE-2024-8425 (2025-02-28) - -The WooCommerce Ultimate Gift Card plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'mwb_wgm_preview_mail' and 'mwb_wgm_woocommerce_add_cart_item_data' functions in all versions up to, and including, 2.9.2. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. Please note that this may have been patched on an older version than 2.9.2, however, we do not have access to older versions of the software to confirm when the patch was added. The only patched version we have confirmed is 2.9.3. - - -- [KTN1990/CVE-2024-8425](https://github.com/KTN1990/CVE-2024-8425) - ### CVE-2024-8465 (2024-09-05) SQL injection vulnerability, by which an attacker could send a specially designed query through user_id parameter in /jobportal/admin/user/controller.php, and retrieve all the information stored in it. @@ -22596,7 +22245,6 @@ - [Chocapikk/CVE-2024-8517](https://github.com/Chocapikk/CVE-2024-8517) -- [saadhassan77/SPIP-BigUp-Unauthenticated-RCE-Exploit-CVE-2024-8517](https://github.com/saadhassan77/SPIP-BigUp-Unauthenticated-RCE-Exploit-CVE-2024-8517) ### CVE-2024-8522 (2024-09-12) @@ -22612,13 +22260,6 @@ - [RandomRobbieBF/CVE-2024-8529](https://github.com/RandomRobbieBF/CVE-2024-8529) -### CVE-2024-8636 (2024-09-11) - -Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) - - -- [HyHy100/Chrome-Skia-CVE-2024-8636](https://github.com/HyHy100/Chrome-Skia-CVE-2024-8636) - ### CVE-2024-8672 (2024-11-28) The Widget Options – The #1 WordPress Widget & Block Control Plugin plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.0.7 via the display logic functionality that extends several page builders. This is due to the plugin allowing users to supply input that will be passed through eval() without any filtering or capability checks. This makes it possible for authenticated attackers, with contributor-level access and above, to execute code on the server. Special note: We suggested the vendor implement an allowlist of functions and limit the ability to execute commands to just administrators, however, they did not take our advice. We are considering this patched, however, we believe it could still be further hardened and there may be residual risk with how the issue is currently patched. @@ -22626,13 +22267,6 @@ - [Chocapikk/CVE-2024-8672](https://github.com/Chocapikk/CVE-2024-8672) -### CVE-2024-8682 (2025-03-05) - -The JNews - WordPress Newspaper Magazine Blog AMP Theme theme for WordPress is vulnerable to unauthorized user registration in all versions up to, and including, 11.6.6. This is due to the plugin not properly validate if the user can register option is enabled prior to creating a user though the register_handler() function. This makes it possible for unauthenticated attackers to register as a user even when user registration is disabled. - - -- [4minx/CVE-2024-8682](https://github.com/4minx/CVE-2024-8682) - ### CVE-2024-8698 (2024-09-19) A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class. The method incorrectly determines whether a SAML signature is for the full document or only for specific assertions based on the position of the signature in the XML document, rather than the Reference element used to specify the signed element. This flaw allows attackers to create crafted responses that can bypass the validation, potentially leading to privilege escalation or impersonation attacks. @@ -22640,13 +22274,6 @@ - [huydoppaz/CVE-2024-8698-POC](https://github.com/huydoppaz/CVE-2024-8698-POC) -### CVE-2024-8743 (2024-10-05) - -The Bit File Manager – 100% Free & Open Source File Manager and Code Editor for WordPress plugin for WordPress is vulnerable to Limited JavaScript File Upload in all versions up to, and including, 6.5.7. This is due to a lack of proper checks on allowed file types. This makes it possible for authenticated attackers, with Subscriber-level access and above, and granted permissions by an administrator, to upload .css and .js files, which could lead to Stored Cross-Site Scripting. - - -- [siunam321/CVE-2024-8743-PoC](https://github.com/siunam321/CVE-2024-8743-PoC) - ### CVE-2024-8752 (2024-09-16) The Windows version of WebIQ 2.15.9 is affected by a directory traversal vulnerability that allows remote attackers to read any file on the system. @@ -22690,7 +22317,6 @@ - [EQSTLab/CVE-2024-9014](https://github.com/EQSTLab/CVE-2024-9014) -- [r0otk3r/CVE-2024-9014](https://github.com/r0otk3r/CVE-2024-9014) ### CVE-2024-9047 (2024-10-12) @@ -22698,8 +22324,6 @@ - [iSee857/CVE-2024-9047-PoC](https://github.com/iSee857/CVE-2024-9047-PoC) -- [Nxploited/CVE-2024-9047-Exploit](https://github.com/Nxploited/CVE-2024-9047-Exploit) -- [tpdlshdmlrkfmcla/CVE-2024-9047](https://github.com/tpdlshdmlrkfmcla/CVE-2024-9047) - [amirqusairy99/WordPress-File-Upload-4.24.11---Unauthenticated-Path-Traversal](https://github.com/amirqusairy99/WordPress-File-Upload-4.24.11---Unauthenticated-Path-Traversal) ### CVE-2024-9061 (2024-10-16) @@ -22754,12 +22378,6 @@ - [z3k0sec/File-Read-CVE-2024-9264](https://github.com/z3k0sec/File-Read-CVE-2024-9264) - [z3k0sec/CVE-2024-9264-RCE-Exploit](https://github.com/z3k0sec/CVE-2024-9264-RCE-Exploit) - [punitdarji/Grafana-CVE-2024-9264](https://github.com/punitdarji/Grafana-CVE-2024-9264) -- [Cythonic1/CVE-2024-9264](https://github.com/Cythonic1/CVE-2024-9264) -- [Exerrdev/CVE-2024-9264-Fixed](https://github.com/Exerrdev/CVE-2024-9264-Fixed) -- [Royall-Researchers/CVE-2024-9264](https://github.com/Royall-Researchers/CVE-2024-9264) -- [ruizii/CVE-2024-9264](https://github.com/ruizii/CVE-2024-9264) -- [rvzsec/CVE-2024-9264](https://github.com/rvzsec/CVE-2024-9264) -- [patrickpichler/grafana-CVE-2024-9264](https://github.com/patrickpichler/grafana-CVE-2024-9264) - [amalpvatayam67/day05-grafana-sqlexpr-lab](https://github.com/amalpvatayam67/day05-grafana-sqlexpr-lab) - [yeonchoda/CVE-2024-9264](https://github.com/yeonchoda/CVE-2024-9264) - [ozcanpng/CVE-2024-9264](https://github.com/ozcanpng/CVE-2024-9264) @@ -22788,13 +22406,6 @@ - [p33d/CVE-2024-9441](https://github.com/p33d/CVE-2024-9441) - [jk-mayne/CVE-2024-9441-Checker](https://github.com/jk-mayne/CVE-2024-9441-Checker) -### CVE-2024-9463 (2024-10-09) - -An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls. - - -- [momo1239/CVE-2024-9463-Proof-of-Concept](https://github.com/momo1239/CVE-2024-9463-Proof-of-Concept) - ### CVE-2024-9464 (2024-10-09) An OS command injection vulnerability in Palo Alto Networks Expedition allows an authenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls. @@ -22834,13 +22445,6 @@ - [bio/vue-template-compiler-patched](https://github.com/bio/vue-template-compiler-patched) -### CVE-2024-9513 (2024-10-04) - -Eine Schwachstelle wurde in Netadmin Software NetAdmin IAM bis 3.5 gefunden. Sie wurde als problematisch eingestuft. Dies betrifft einen unbekannten Teil der Datei /controller/api/Answer/ReturnUserQuestionsFilled der Komponente HTTP POST Request Handler. Durch Beeinflussen des Arguments username mit unbekannten Daten kann eine information exposure through discrepancy-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk passieren. Die Komplexität eines Angriffs ist eher hoch. Sie ist schwierig ausnutzbar. Der Exploit steht zur öffentlichen Verfügung. - - -- [ELIZEUOPAIN/Exploit-CVE-2024-9513-NetAdmin-IAM-Allows-User-Enumeration-In-Active-Directory](https://github.com/ELIZEUOPAIN/Exploit-CVE-2024-9513-NetAdmin-IAM-Allows-User-Enumeration-In-Active-Directory) - ### CVE-2024-9570 (2024-10-07) Eine Schwachstelle wurde in D-Link DIR-619L B1 2.06 gefunden. Sie wurde als kritisch eingestuft. Hierbei geht es um die Funktion formEasySetTimezone der Datei /goform/formEasySetTimezone. Durch das Beeinflussen des Arguments curTime mit unbekannten Daten kann eine buffer overflow-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff über das Netzwerk. Der Exploit steht zur öffentlichen Verfügung. @@ -22863,13 +22467,6 @@ - [tdonaworth/Firefox-CVE-2024-9680](https://github.com/tdonaworth/Firefox-CVE-2024-9680) - [moscovium-mc/Tor-0day-JavaScript-Exploit](https://github.com/moscovium-mc/Tor-0day-JavaScript-Exploit) -### CVE-2024-9698 (2024-12-14) - -The Crafthemes Demo Import plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'process_uploaded_files' function in all versions up to, and including, 3.3. This makes it possible for authenticated attackers, with Administrator-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. - - -- [Nxploited/CVE-2024-9698](https://github.com/Nxploited/CVE-2024-9698) - ### CVE-2024-9707 (2024-10-11) The Hunk Companion plugin for WordPress is vulnerable to unauthorized plugin installation/activation due to a missing capability check on the /wp-json/hc/v1/themehunk-import REST API endpoint in all versions up to, and including, 1.8.4. This makes it possible for unauthenticated attackers to install and activate arbitrary plugins which can be leveraged to achieve remote code execution if another vulnerable plugin is installed and activated. @@ -22877,21 +22474,12 @@ - [RandomRobbieBF/CVE-2024-9707](https://github.com/RandomRobbieBF/CVE-2024-9707) -### CVE-2024-9756 (2024-10-12) - -The Order Attachments for WooCommerce plugin for WordPress is vulnerable to unauthorized limited arbitrary file uploads due to a missing capability check on the wcoa_add_attachment AJAX action in versions 2.0 to 2.4.1. This makes it possible for authenticated attackers, with subscriber-level access and above, to upload limited file types. - - -- [Nxploited/CVE-2024-9756](https://github.com/Nxploited/CVE-2024-9756) - ### CVE-2024-9796 (2024-10-10) The WP-Advanced-Search WordPress plugin before 3.3.9.2 does not sanitize and escape the t parameter before using it in a SQL statement, allowing unauthenticated users to perform SQL injection attacks - [RandomRobbieBF/CVE-2024-9796](https://github.com/RandomRobbieBF/CVE-2024-9796) -- [viniciuslazzari/CVE-2024-9796](https://github.com/viniciuslazzari/CVE-2024-9796) -- [BwithE/CVE-2024-9796](https://github.com/BwithE/CVE-2024-9796) - [yup-Ivan/CVE-2024-9796](https://github.com/yup-Ivan/CVE-2024-9796) ### CVE-2024-9821 (2024-10-12) @@ -22955,13 +22543,6 @@ - [verylazytech/CVE-2024-9935](https://github.com/verylazytech/CVE-2024-9935) - [Nxploited/CVE-2024-9935](https://github.com/Nxploited/CVE-2024-9935) -### CVE-2024-9950 (2025-01-02) - -A vulnerability in Forescout SecureConnector v11.3.07.0109 on Windows allows \n\nunauthenticated user to modify compliance scripts due to insecure temporary directory. - - -- [0Nightsedge0/CVE-2024-9950-PoC](https://github.com/0Nightsedge0/CVE-2024-9950-PoC) - ### CVE-2024-10124 (2024-12-12) The Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation and activation due to a missing capability check on the tp_install() function in all versions up to, and including, 1.1.1. This makes it possible for unauthenticated attackers to install and activate arbitrary plugins which can be leveraged to achieve remote code execution if another vulnerable plugin is installed and activated. This vulnerability was partially patched in version 1.1.1. @@ -22985,7 +22566,6 @@ - [any2sec/cve-2024-10220](https://github.com/any2sec/cve-2024-10220) - [filipzag/CVE-2024-10220](https://github.com/filipzag/CVE-2024-10220) - [candranapits/poc-CVE-2024-10220](https://github.com/candranapits/poc-CVE-2024-10220) -- [orgC/CVE-2024-10220-demo](https://github.com/orgC/CVE-2024-10220-demo) - [mrk336/CVE-2024-10220-Kubernetes-gitRepo-Volume-Vulnerability](https://github.com/mrk336/CVE-2024-10220-Kubernetes-gitRepo-Volume-Vulnerability) - [saleha-muzammil/cve-2024-10220-git-on-git](https://github.com/saleha-muzammil/cve-2024-10220-git-on-git) - [imohammed28/cve-2024-10220-test](https://github.com/imohammed28/cve-2024-10220-test) @@ -23075,13 +22655,6 @@ - [bevennyamande/CVE-2024-10557](https://github.com/bevennyamande/CVE-2024-10557) -### CVE-2024-10578 (2024-12-06) - -The Pubnews theme for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the pubnews_importer_plugin_action_for_notice() function in all versions up to, and including, 1.0.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install arbitrary plugins that can be leveraged to exploit other vulnerabilities. - - -- [Nxploited/CVE-2024-10578](https://github.com/Nxploited/CVE-2024-10578) - ### CVE-2024-10586 (2024-11-09) The Debug Tool plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check on the dbt_pull_image() function and missing file type validation in all versions up to, and including, 2.2. This makes it possible for unauthenticated attackers to to create arbitrary files such as .php files that can be leveraged for remote code execution. CVE-2024-52416 may be a duplicate of this issue. @@ -23102,7 +22675,6 @@ - [RandomRobbieBF/CVE-2024-10629](https://github.com/RandomRobbieBF/CVE-2024-10629) -- [Nxploited/CVE-2024-10629](https://github.com/Nxploited/CVE-2024-10629) ### CVE-2024-10654 (2024-11-01) @@ -23111,20 +22683,6 @@ - [c0nyy/IoT_vuln](https://github.com/c0nyy/IoT_vuln) -### CVE-2024-10673 (2024-11-09) - -The Top Store theme for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the top_store_install_and_activate_callback() function in all versions up to, and including, 1.5.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to install arbitrary plugins which can contain other exploitable vulnerabilities to elevate privileges and gain remote code execution. - - -- [Nxploited/CVE-2024-10673](https://github.com/Nxploited/CVE-2024-10673) - -### CVE-2024-10674 (2024-11-09) - -The Th Shop Mania theme for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the th_shop_mania_install_and_activate_callback() function in all versions up to, and including, 1.4.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install arbitrary plugins which can be leveraged to exploit other vulnerabilities and achieve remote code execution and privilege escalation. - - -- [Nxploited/CVE-2024-10674](https://github.com/Nxploited/CVE-2024-10674) - ### CVE-2024-10728 (2024-11-16) The Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX plugin for WordPress is vulnerable to unauthorized plugin installation/activation due to a missing capability check on the 'install_required_plugin_callback' function in all versions up to, and including, 4.1.16. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install and activate arbitrary plugins which can be leveraged to achieve remote code execution if another vulnerable plugin is installed and activated. @@ -23155,13 +22713,6 @@ - [junn34/POC_CVE-2024-10829](https://github.com/junn34/POC_CVE-2024-10829) -### CVE-2024-10858 (2024-12-25) - -The Jetpack WordPress plugin before 14.1 does not properly checks the postmessage origin in its 13.x versions, allowing it to be bypassed and leading to DOM-XSS. The issue only affects websites hosted on WordPress.com. - - -- [iamarit/CVE-2024-10858](https://github.com/iamarit/CVE-2024-10858) - ### CVE-2024-10914 (2024-11-06) In D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L bis 20241028 wurde eine kritische Schwachstelle ausgemacht. Hierbei betrifft es die Funktion cgi_user_add der Datei /cgi-bin/account_mgr.cgi?cmd=cgi_user_add. Durch Manipulation des Arguments name mit unbekannten Daten kann eine os command injection-Schwachstelle ausgenutzt werden. Umgesetzt werden kann der Angriff über das Netzwerk. Die Komplexität eines Angriffs ist eher hoch. Sie gilt als schwierig ausnutzbar. Der Exploit steht zur öffentlichen Verfügung. @@ -23177,18 +22728,8 @@ - [jahithoque/CVE-2024-10914-Exploit](https://github.com/jahithoque/CVE-2024-10914-Exploit) - [redspy-sec/D-Link](https://github.com/redspy-sec/D-Link) - [dragonXZH/CVE-2024-10914](https://github.com/dragonXZH/CVE-2024-10914) -- [yenyangmjaze/cve-2024-10914](https://github.com/yenyangmjaze/cve-2024-10914) -- [Tamirido30/CVE-2024-10914-Exploit](https://github.com/Tamirido30/CVE-2024-10914-Exploit) -- [TH-SecForge/CVE-2024-10914](https://github.com/TH-SecForge/CVE-2024-10914) - [0xSS3K/CVE-2024-10914__POC](https://github.com/0xSS3K/CVE-2024-10914__POC) -### CVE-2024-10915 (2024-11-06) - -Eine kritische Schwachstelle wurde in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L bis 20241028 ausgemacht. Davon betroffen ist die Funktion cgi_user_add der Datei /cgi-bin/account_mgr.cgi?cmd=cgi_user_add. Mittels dem Manipulieren des Arguments group mit unbekannten Daten kann eine os command injection-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk erfolgen. Die Komplexität eines Angriffs ist eher hoch. Sie ist schwierig ausnutzbar. Der Exploit steht zur öffentlichen Verfügung. - - -- [r0otk3r/CVE-2024-10915](https://github.com/r0otk3r/CVE-2024-10915) - ### CVE-2024-10924 (2024-11-15) The Really Simple Security (Free, Pro, and Pro Multisite) plugins for WordPress are vulnerable to authentication bypass in versions 9.0.0 to 9.1.1.1. This is due to improper user check error handling in the two-factor REST API actions with the 'check_login_and_get_user' function. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, when the "Two-Factor Authentication" setting is enabled (disabled by default). @@ -23204,23 +22745,9 @@ - [D1se0/CVE-2024-10924-Bypass-MFA-Wordpress-LAB](https://github.com/D1se0/CVE-2024-10924-Bypass-MFA-Wordpress-LAB) - [Hunt3r850/CVE-2024-10924-PoC](https://github.com/Hunt3r850/CVE-2024-10924-PoC) - [Hunt3r850/CVE-2024-10924-Wordpress-Docker](https://github.com/Hunt3r850/CVE-2024-10924-Wordpress-Docker) -- [Nxploited/CVE-2024-10924-Exploit](https://github.com/Nxploited/CVE-2024-10924-Exploit) -- [cy3erdr4g0n/CVE-2024-10924](https://github.com/cy3erdr4g0n/CVE-2024-10924) -- [h8sU/wordpress-cve-2024-10924-exploit](https://github.com/h8sU/wordpress-cve-2024-10924-exploit) -- [sariamubeen/CVE-2024-10924](https://github.com/sariamubeen/CVE-2024-10924) -- [MaleeshaUdan/wordpress-CVE-2024-10924--exploit](https://github.com/MaleeshaUdan/wordpress-CVE-2024-10924--exploit) -- [d0x-awrqxavc/-CVE-2024-10924](https://github.com/d0x-awrqxavc/-CVE-2024-10924) -- [ademto/wordpress-cve-2024-10924-pentest](https://github.com/ademto/wordpress-cve-2024-10924-pentest) - [bodoinon/CVE-2024-10924](https://github.com/bodoinon/CVE-2024-10924) - [JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2024-10924](https://github.com/JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2024-10924) -### CVE-2024-10930 (2025-03-04) - -An Uncontrolled Search Path Element vulnerability exists which could allow a malicious actor to perform DLL hijacking and execute arbitrary code with escalated privileges. - - -- [sahil3276/CVE-2024-10930](https://github.com/sahil3276/CVE-2024-10930) - ### CVE-2024-10958 (2024-11-10) The The WP Photo Album Plus plugin for WordPress is vulnerable to arbitrary shortcode execution via getshortcodedrenderedfenodelay AJAX action in all versions up to, and including, 8.8.08.007 . This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. @@ -23235,16 +22762,6 @@ - [sychikov/CVE-2024-11003-POC](https://github.com/sychikov/CVE-2024-11003-POC) -### CVE-2024-11040 -- [gothburz/CVE-2024-11040](https://github.com/gothburz/CVE-2024-11040) - -### CVE-2024-11042 (2025-03-20) - -In invoke-ai/invokeai version v5.0.2, the web API `POST /api/v1/images/delete` is vulnerable to Arbitrary File Deletion. This vulnerability allows unauthorized attackers to delete arbitrary files on the server, potentially including critical or sensitive system files such as SSH keys, SQLite databases, and configuration files. This can impact the integrity and availability of applications relying on these files. - - -- [gothburz/CVE-2024-11042](https://github.com/gothburz/CVE-2024-11042) - ### CVE-2024-11201 (2024-12-06) The myCred – Loyalty Points and Rewards plugin for WordPress and WooCommerce – Give Points, Ranks, Badges, Cashback, WooCommerce rewards, and WooCommerce credits for Gamification plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's mycred_send shortcode in all versions up to, and including, 2.7.5.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. @@ -23344,21 +22861,6 @@ - [samogod/CVE-2024-11728](https://github.com/samogod/CVE-2024-11728) -### CVE-2024-11972 (2024-12-31) - -The Hunk Companion WordPress plugin before 1.9.0 does not correctly authorize some REST API endpoints, allowing unauthenticated requests to install and activate arbitrary Hunk Companion WordPress plugin before 1.9.0 from the WordPress.org repo, including vulnerable Hunk Companion WordPress plugin before 1.9.0 that have been closed. - - -- [RonF98/CVE-2024-11972-POC](https://github.com/RonF98/CVE-2024-11972-POC) -- [Nxploited/CVE-2024-11972-PoC](https://github.com/Nxploited/CVE-2024-11972-PoC) - -### CVE-2024-12008 (2025-01-14) - -The W3 Total Cache plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.8.1 through the publicly exposed debug log file. This makes it possible for unauthenticated attackers to view potentially sensitive information in the exposed log file. For example, the log file may contain nonce values that can be used in further CSRF attacks.\r\nNote: the debug feature must be enabled for this to be a concern, and it is disabled by default. - - -- [spyata123/CVE-2024-12008-information-exposure-vulnerability-in-W3-Total-Cache](https://github.com/spyata123/CVE-2024-12008-information-exposure-vulnerability-in-W3-Total-Cache) - ### CVE-2024-12025 (2024-12-18) The Collapsing Categories plugin for WordPress is vulnerable to SQL Injection via the 'taxonomy' parameter of the /wp-json/collapsing-categories/v1/get REST API in all versions up to, and including, 3.0.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. @@ -23378,17 +22880,9 @@ A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buffer. -- [themirze/cve-2024-12084](https://github.com/themirze/cve-2024-12084) - [rxerium/CVE-2024-12084](https://github.com/rxerium/CVE-2024-12084) - [InkeyP/CVE-2024-12084](https://github.com/InkeyP/CVE-2024-12084) -### CVE-2024-12085 (2025-01-14) - -A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time. - - -- [Otsutez/cve-2024-12085](https://github.com/Otsutez/cve-2024-12085) - ### CVE-2024-12172 (2024-12-12) The WP Courses LMS – Online Courses Builder, eLearning Courses, Courses Solution, Education Courses plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wpc_update_user_meta_option() function in all versions up to, and including, 3.2.21. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary user's metadata which can be levereged to block an administrator from accessing their site when wp_capabilities is set to 0. @@ -23411,13 +22905,6 @@ - [HI0U/POC-CVE-2024-12227](https://github.com/HI0U/POC-CVE-2024-12227) -### CVE-2024-12252 (2025-01-07) - -The SEO LAT Auto Post plugin for WordPress is vulnerable to file overwrite due to a missing capability check on the remote_update AJAX action in all versions up to, and including, 2.2.1. This makes it possible for unauthenticated attackers to overwrite the seo-beginner-auto-post.php file which can be leveraged to achieve remote code execution. - - -- [Nxploited/CVE-2024-12252](https://github.com/Nxploited/CVE-2024-12252) - ### CVE-2024-12270 (2024-12-07) The Beautiful taxonomy filters plugin for WordPress is vulnerable to SQL Injection via the 'selects[0][term]' parameter in all versions up to, and including, 2.4.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. @@ -23425,13 +22912,6 @@ - [RandomRobbieBF/CVE-2024-12270](https://github.com/RandomRobbieBF/CVE-2024-12270) -### CVE-2024-12342 (2024-12-08) - -Eine Schwachstelle wurde in TP-Link VN020 F3v(T) TT_V6.2.1021 ausgemacht. Sie wurde als kritisch eingestuft. Es geht hierbei um eine nicht näher spezifizierte Funktion der Datei /control/WANIPConnection der Komponente Incomplete SOAP Request Handler. Durch das Manipulieren mit unbekannten Daten kann eine denial of service-Schwachstelle ausgenutzt werden. Der Angriff kann im lokalen Netzwerk angegangen werden. Der Exploit steht zur öffentlichen Verfügung. - - -- [becrevex/TPLink-VN020-DoS](https://github.com/becrevex/TPLink-VN020-DoS) - ### CVE-2024-12345 (2025-01-27) In INW Krbyyyzo 25.2002 wurde eine problematische Schwachstelle entdeckt. Hierbei betrifft es unbekannten Programmcode der Datei /gbo.aspx der Komponente Daily Huddle Site. Durch das Manipulieren des Arguments s mit unbekannten Daten kann eine resource consumption-Schwachstelle ausgenutzt werden. Der Angriff muss lokal angegangen werden. @@ -23439,13 +22919,6 @@ - [RoyaRadin/CVE-2024-12345-POC](https://github.com/RoyaRadin/CVE-2024-12345-POC) -### CVE-2024-12365 (2025-01-14) - -The W3 Total Cache plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the is_w3tc_admin_page function in all versions up to, and including, 2.8.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to obtain the plugin's nonce value and perform unauthorized actions, resulting in information disclosure, service plan limits consumption as well as making web requests to arbitrary locations originating from the web application that can be used to query information from internal services, including instance metadata on cloud-based applications. - - -- [spyata123/W3TotalChache](https://github.com/spyata123/W3TotalChache) - ### CVE-2024-12381 (2024-12-11) Type Confusion in V8 in Google Chrome prior to 131.0.6778.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) @@ -23463,20 +22936,6 @@ ### CVE-2024-12537 - [fineman999/POC_CVE-2024-12537](https://github.com/fineman999/POC_CVE-2024-12537) -### CVE-2024-12542 (2025-01-09) - -The linkID plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check when including the 'phpinfo' function in all versions up to, and including, 0.1.2. This makes it possible for unauthenticated attackers to read configuration settings and predefined variables on the site's server. The plugin does not need to be activated for the vulnerability to be exploited. - - -- [Nxploited/CVE-2024-12542-PoC](https://github.com/Nxploited/CVE-2024-12542-PoC) - -### CVE-2024-12583 (2025-01-04) - -The Dynamics 365 Integration plugin for WordPress is vulnerable to Remote Code Execution and Arbitrary File Read in all versions up to, and including, 1.3.23 via Twig Server-Side Template Injection. This is due to missing input validation and sanitization on the render function. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server. - - -- [pouriam23/CVE-2024-12583](https://github.com/pouriam23/CVE-2024-12583) - ### CVE-2024-12641 (2024-12-16) TenderDocTransfer from Chunghwa Telecom has a Reflected Cross-site scripting vulnerability. The application sets up a simple local web server and provides APIs for communication with the target website. Due to the lack of CSRF protection for the APIs, unauthenticated remote attackers could use specific APIs through phishing to execute arbitrary JavaScript code in the user’s browser. Since the web server set by the application supports Node.Js features, attackers can further leverage this to run OS commands. @@ -23491,13 +22950,6 @@ - [fanjm2025-jeremy/CVE-2024-12828-PoC](https://github.com/fanjm2025-jeremy/CVE-2024-12828-PoC) -### CVE-2024-12877 (2025-01-11) - -The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.19.2 via deserialization of untrusted input from the donation form like 'firstName'. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to delete arbitrary files on the server that makes remote code execution possible. Please note this was only partially patched in 3.19.3, a fully sufficient patch was not released until 3.19.4. However, another CVE was assigned by another CNA for version 3.19.3 so we will leave this as affecting 3.19.2 and before. We have recommended the vendor use JSON encoding to prevent any further deserialization vulnerabilities from being present. - - -- [soltanali0/CVE-2024-12877-Exploit](https://github.com/soltanali0/CVE-2024-12877-Exploit) - ### CVE-2024-12883 (2024-12-21) In code-projects Job Recruitment 1.0 wurde eine problematische Schwachstelle ausgemacht. Das betrifft eine unbekannte Funktionalität der Datei /_email.php. Mittels Manipulieren des Arguments email mit unbekannten Daten kann eine cross site scripting-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk angegangen werden. Der Exploit steht zur öffentlichen Verfügung. @@ -23513,13 +22965,6 @@ - [dannyEndorTest/ollama](https://github.com/dannyEndorTest/ollama) - [dannyEndorTest/ollama-consumer](https://github.com/dannyEndorTest/ollama-consumer) -### CVE-2024-12905 (2025-03-27) - -An Improper Link Resolution Before File Access ("Link Following") and Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal"). This vulnerability occurs when extracting a maliciously crafted tar file, which can result in unauthorized file writes or overwrites outside the intended extraction directory. The issue is associated with index.js in the tar-fs package.\n\nThis issue affects tar-fs: from 0.0.0 before 1.16.4, from 2.0.0 before 2.1.2, from 3.0.0 before 3.0.8. - - -- [theMcSam/CVE-2024-12905-PoC](https://github.com/theMcSam/CVE-2024-12905-PoC) - ### CVE-2024-12912 (2025-01-02) An improper input insertion vulnerability in AiCloud on certain router models may lead to arbitrary command execution.\nRefer to the '01/02/2025 ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information. @@ -23527,98 +22972,13 @@ - [murrez/ASUS-AiCloud-RCE](https://github.com/murrez/ASUS-AiCloud-RCE) -### CVE-2024-13159 (2025-01-14) - -Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information. - - -- [horizon3ai/Ivanti-EPM-Coercion-Vulnerabilities](https://github.com/horizon3ai/Ivanti-EPM-Coercion-Vulnerabilities) - -### CVE-2024-13184 (2025-01-18) - -The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to time-based SQL Injection via the Login Attempts module in all versions up to, and including, 3.0.12 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. - - -- [RandomRobbieBF/CVE-2024-13184](https://github.com/RandomRobbieBF/CVE-2024-13184) - -### CVE-2024-13346 (2025-02-13) - -The Avada | Website Builder For WordPress & WooCommerce theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 7.11.13. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes. - - -- [tausifzaman/CVE-2024-13346](https://github.com/tausifzaman/CVE-2024-13346) - -### CVE-2024-13478 (2025-02-19) - -The LTL Freight Quotes – TForce Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id' and 'edit_id' parameters in all versions up to, and including, 3.6.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. - - -- [RandomRobbieBF/CVE-2024-13478](https://github.com/RandomRobbieBF/CVE-2024-13478) - -### CVE-2024-13479 (2025-02-19) - -The LTL Freight Quotes – SEFL Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id' and 'edit_id' parameters in all versions up to, and including, 3.2.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. - - -- [RandomRobbieBF/CVE-2024-13479](https://github.com/RandomRobbieBF/CVE-2024-13479) - -### CVE-2024-13481 (2025-02-19) - -The LTL Freight Quotes – R+L Carriers Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 3.3.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. - - -- [RandomRobbieBF/CVE-2024-13481](https://github.com/RandomRobbieBF/CVE-2024-13481) - -### CVE-2024-13483 (2025-02-19) - -The LTL Freight Quotes – SAIA Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 2.2.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. - - -- [RandomRobbieBF/CVE-2024-13483](https://github.com/RandomRobbieBF/CVE-2024-13483) - -### CVE-2024-13485 (2025-02-19) - -The LTL Freight Quotes – ABF Freight Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 3.3.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. - - -- [RandomRobbieBF/CVE-2024-13485](https://github.com/RandomRobbieBF/CVE-2024-13485) - -### CVE-2024-13488 (2025-02-15) - -The LTL Freight Quotes – Estes Edition plugin for WordPress is vulnerable to SQL Injection via the 'dropship_edit_id' and 'edit_id' parameters in all versions up to, and including, 3.3.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. - - -- [RandomRobbieBF/CVE-2024-13488](https://github.com/RandomRobbieBF/CVE-2024-13488) - -### CVE-2024-13489 (2025-02-19) - -The LTL Freight Quotes – Old Dominion Edition plugin for WordPress is vulnerable to SQL Injection via the 'edit_id' and 'dropship_edit_id' parameters in all versions up to, and including, 4.2.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. - - -- [RandomRobbieBF/CVE-2024-13489](https://github.com/RandomRobbieBF/CVE-2024-13489) - ### CVE-2024-13513 (2025-02-15) The Oliver POS – A WooCommerce Point of Sale (POS) plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.4.2.3 via the logging functionality. This makes it possible for unauthenticated attackers to extract sensitive data including the plugin's clientToken, which in turn can be used to change user account information including emails and account type. This allows attackers to then change account passwords resulting in a complete site takeover. Version 2.4.2.3 disabled logging but left sites with existing log files vulnerable. -- [KTN1990/CVE-2024-13513](https://github.com/KTN1990/CVE-2024-13513) - [0axz-tools/CVE-2024-13513.py](https://github.com/0axz-tools/CVE-2024-13513.py) -### CVE-2024-13800 (2025-02-12) - -The ConvertPlus plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'cp_dismiss_notice' AJAX endpoint in all versions up to, and including, 3.5.30. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update option values to '1' on the WordPress site. This can be leveraged to update an option that would create an error on the site and deny service to legitimate users or be used to set some values to true such as registration. - - -- [RandomRobbieBF/CVE-2024-13800](https://github.com/RandomRobbieBF/CVE-2024-13800) - -### CVE-2024-13869 (2025-02-22) - -The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload_files' function in all versions up to, and including, 0.9.112. This makes it possible for authenticated attackers, with Administrator-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. NOTE: Uploaded files are only accessible on WordPress instances running on the NGINX web server as the existing .htaccess within the target file upload folder prevents access on Apache servers. - - -- [d0n601/CVE-2024-13869](https://github.com/d0n601/CVE-2024-13869) - ### CVE-2024-13985 (2025-08-27) A command injection vulnerability in Dahua EIMS versions prior to 2240008 allows unauthenticated remote attackers to execute arbitrary system commands via the capture_handle.action interface. The flaw stems from improper input validation in the captureCommand parameter, which is processed without sanitization or authentication. By sending crafted HTTP requests, attackers can inject OS-level commands that are executed on the server, leading to full system compromise. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-04-06 UTC. @@ -23713,13 +23073,6 @@ - [invaderslabs/CVE-2024-20666](https://github.com/invaderslabs/CVE-2024-20666) - [tazxtazxedu/WinRE-Fix](https://github.com/tazxtazxedu/WinRE-Fix) -### CVE-2024-20674 (2024-01-09) - -Windows Kerberos Security Feature Bypass Vulnerability - - -- [gpotter2/CVE-2024-20674](https://github.com/gpotter2/CVE-2024-20674) - ### CVE-2024-20696 (2024-01-09) Windows libarchive Remote Code Execution Vulnerability @@ -23750,7 +23103,6 @@ - [m-cetin/CVE-2024-20767](https://github.com/m-cetin/CVE-2024-20767) - [Chocapikk/CVE-2024-20767](https://github.com/Chocapikk/CVE-2024-20767) - [Praison001/CVE-2024-20767-Adobe-ColdFusion](https://github.com/Praison001/CVE-2024-20767-Adobe-ColdFusion) -- [alm6no5/CVE-2024-20767](https://github.com/alm6no5/CVE-2024-20767) ### CVE-2024-20931 (2024-02-17) @@ -23770,7 +23122,6 @@ - [momika233/CVE-2024-21006](https://github.com/momika233/CVE-2024-21006) - [lightr3d/CVE-2024-21006_jar](https://github.com/lightr3d/CVE-2024-21006_jar) - [dadvlingd/CVE-2024-21006](https://github.com/dadvlingd/CVE-2024-21006) -- [d3fudd/CVE-2024-21006_PoC](https://github.com/d3fudd/CVE-2024-21006_PoC) ### CVE-2024-21107 (2024-04-16) @@ -23863,13 +23214,6 @@ - [d0rb/CVE-2024-21388](https://github.com/d0rb/CVE-2024-21388) -### CVE-2024-21409 (2024-04-09) - -.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability - - -- [vkairy/cve-2024-21409-repro](https://github.com/vkairy/cve-2024-21409-repro) - ### CVE-2024-21410 (2024-02-13) Microsoft Exchange Server Elevation of Privilege Vulnerability @@ -23905,9 +23249,6 @@ - [Redfox-Security/Unveiling-Moniker-Link-CVE-2024-21413-Navigating-the-Latest-Cybersecurity-Landscape](https://github.com/Redfox-Security/Unveiling-Moniker-Link-CVE-2024-21413-Navigating-the-Latest-Cybersecurity-Landscape) - [ThemeHackers/CVE-2024-21413](https://github.com/ThemeHackers/CVE-2024-21413) - [D1se0/CVE-2024-21413-Vulnerabilidad-Outlook-LAB](https://github.com/D1se0/CVE-2024-21413-Vulnerabilidad-Outlook-LAB) -- [ArtemCyberLab/Project-NTLM-Hash-Capture-and-Phishing-Email-Exploitation-for-CVE-2024-21413](https://github.com/ArtemCyberLab/Project-NTLM-Hash-Capture-and-Phishing-Email-Exploitation-for-CVE-2024-21413) -- [PolarisXSec/CVE-2024-21413](https://github.com/PolarisXSec/CVE-2024-21413) -- [MQKGitHub/Moniker-Link-CVE-2024-21413](https://github.com/MQKGitHub/Moniker-Link-CVE-2024-21413) - [yass2400012/Email-exploit-Moniker-Link-CVE-2024-21413-](https://github.com/yass2400012/Email-exploit-Moniker-Link-CVE-2024-21413-) - [gurleen-147/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability-PoC](https://github.com/gurleen-147/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability-PoC) - [hau2212/Moniker-Link-CVE-2024-21413-](https://github.com/hau2212/Moniker-Link-CVE-2024-21413-) @@ -23937,14 +23278,6 @@ - [RoninForge/roninforge-angularjs-migration](https://github.com/RoninForge/roninforge-angularjs-migration) -### CVE-2024-21513 (2024-07-15) - -Versions of the package langchain-experimental from 0.0.15 and before 0.0.21 are vulnerable to Arbitrary Code Execution when retrieving values from the database, the code will attempt to call 'eval' on all values. An attacker can exploit this vulnerability and execute arbitrary python code if they can control the input prompt and the server is configured with VectorSQLDatabaseChain.\r\r**Notes:**\r\rImpact on the Confidentiality, Integrity and Availability of the vulnerable component:\r\rConfidentiality: Code execution happens within the impacted component, in this case langchain-experimental, so all resources are necessarily accessible.\r\rIntegrity: There is nothing protected by the impacted component inherently. Although anything returned from the component counts as 'information' for which the trustworthiness can be compromised.\r\rAvailability: The loss of availability isn't caused by the attack itself, but it happens as a result during the attacker's post-exploitation steps.\r\r\rImpact on the Confidentiality, Integrity and Availability of the subsequent system:\r\rAs a legitimate low-privileged user of the package (PR:L) the attacker does not have more access to data owned by the package as a result of this vulnerability than they did with normal usage (e.g. can query the DB). The unintended action that one can perform by breaking out of the app environment and exfiltrating files, making remote connections etc. happens during the post exploitation phase in the subsequent system - in this case, the OS.\r\rAT:P: An attacker needs to be able to influence the input prompt, whilst the server is configured with the VectorSQLDatabaseChain plugin. - - -- [SavageSanta11/Reproduce-CVE-2024-21513](https://github.com/SavageSanta11/Reproduce-CVE-2024-21513) -- [nskath/CVE-2024-21513](https://github.com/nskath/CVE-2024-21513) - ### CVE-2024-21514 (2024-06-22) This affects versions of the package opencart/opencart from 0.0.0. An SQL Injection issue was identified in the Divido payment extension for OpenCart, which is included by default in version 3.0.3.9. As an anonymous unauthenticated user, if the Divido payment module is installed (it does not have to be enabled), it is possible to exploit SQL injection to gain unauthorised access to the backend database. For any site which is vulnerable, any unauthenticated user could exploit this to dump the entire OpenCart database, including customer PII data. @@ -23996,13 +23329,6 @@ - [SpiralBL0CK/CVE-2024-21545-PoC](https://github.com/SpiralBL0CK/CVE-2024-21545-PoC) -### CVE-2024-21546 (2024-12-18) - -Versions of the package unisharp/laravel-filemanager before 2.9.1 are vulnerable to Remote Code Execution (RCE) through using a valid mimetype and inserting the . character after the php file extension. This allows the attacker to execute malicious code. - - -- [ajdumanhug/CVE-2024-21546](https://github.com/ajdumanhug/CVE-2024-21546) - ### CVE-2024-21626 (2024-01-31) runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an attacker could cause a newly-spawned container process (from runc exec) to have a working directory in the host filesystem namespace, allowing for a container escape by giving access to the host filesystem ("attack 2"). The same attack could be used by a malicious image to allow a container process to gain access to the host filesystem through runc run ("attack 1"). Variants of attacks 1 and 2 could be also be used to overwrite semi-arbitrary host binaries, allowing for complete container escapes ("attack 3a" and "attack 3b"). runc 1.1.12 includes patches for this issue. @@ -24082,7 +23408,6 @@ - [d0rb/CVE-2024-21762](https://github.com/d0rb/CVE-2024-21762) - [rdoix/cve-2024-21762-checker](https://github.com/rdoix/cve-2024-21762-checker) - [deFr0ggy/CVE-2024-21762-Checker](https://github.com/deFr0ggy/CVE-2024-21762-Checker) -- [abrewer251/CVE-2024-21762_FortiNet_PoC](https://github.com/abrewer251/CVE-2024-21762_FortiNet_PoC) - [0x13-ByteZer0/CVE-2024-21762](https://github.com/0x13-ByteZer0/CVE-2024-21762) - [0x0asif/CVE-2024-21762](https://github.com/0x0asif/CVE-2024-21762) - [Sxmpl3/CVE-2024-21762-Safe-Check](https://github.com/Sxmpl3/CVE-2024-21762-Safe-Check) @@ -24106,8 +23431,6 @@ - [raminkarimkhani1996/CVE-2023-46805_CVE-2024-21887](https://github.com/raminkarimkhani1996/CVE-2023-46805_CVE-2024-21887) - [seajaysec/Ivanti-Connect-Around-Scan](https://github.com/seajaysec/Ivanti-Connect-Around-Scan) - [pwniel/ivanti_shell](https://github.com/pwniel/ivanti_shell) -- [rxwx/pulse-meter](https://github.com/rxwx/pulse-meter) -- [Hexastrike/Ivanti-Connect-Secure-Logs-Parser](https://github.com/Hexastrike/Ivanti-Connect-Secure-Logs-Parser) ### CVE-2024-21893 (2024-01-31) @@ -24204,7 +23527,6 @@ - [SeanPesce/CVE-2024-22243](https://github.com/SeanPesce/CVE-2024-22243) - [shellfeel/CVE-2024-22243-CVE-2024-22234](https://github.com/shellfeel/CVE-2024-22243-CVE-2024-22234) -- [Reivap/CVE-2024-22243](https://github.com/Reivap/CVE-2024-22243) ### CVE-2024-22262 (2024-04-16) @@ -24251,13 +23573,6 @@ - [oscerd/CVE-2024-22369](https://github.com/oscerd/CVE-2024-22369) -### CVE-2024-22371 (2024-02-26) - -Exposure of sensitive data by by crafting a malicious EventFactory and providing a custom ExchangeCreatedEvent that exposes sensitive data. Vulnerability in Apache Camel.This issue affects Apache Camel: from 3.21.X through 3.21.3, from 3.22.X through 3.22.0, from 4.0.X through 4.0.3, from 4.X through 4.3.0.\n\nUsers are recommended to upgrade to version 3.21.4, 3.22.1, 4.0.4 or 4.4.0, which fixes the issue.\n\n - - -- [vishalborkar7/POC_for_-CVE-2024-22371](https://github.com/vishalborkar7/POC_for_-CVE-2024-22371) - ### CVE-2024-22393 (2024-02-22) Unrestricted Upload of File with Dangerous Type vulnerability in Apache Answer.This issue affects Apache Answer: through 1.2.1.\n\nPixel Flood Attack by uploading large pixel files will cause server out of memory. A logged-in user can cause such an attack by uploading an image when posting content.\nUsers are recommended to upgrade to version [1.2.5], which fixes the issue. @@ -24439,8 +23754,6 @@ - [CheckCve2/CVE-2024-23113](https://github.com/CheckCve2/CVE-2024-23113) - [p33d/CVE-2024-23113](https://github.com/p33d/CVE-2024-23113) - [puckiestyle/CVE-2024-23113](https://github.com/puckiestyle/CVE-2024-23113) -- [iambrayden/CVE-2024-23113](https://github.com/iambrayden/CVE-2024-23113) -- [MAVRICK-1/cve-2024-23113-test-env](https://github.com/MAVRICK-1/cve-2024-23113-test-env) - [MinhPham123456789/PoC-CVE-2024-23113](https://github.com/MinhPham123456789/PoC-CVE-2024-23113) ### CVE-2024-23208 (2024-01-23) @@ -24506,9 +23819,6 @@ - [9carlo6/CVE-2024-23346](https://github.com/9carlo6/CVE-2024-23346) - [MAWK0235/CVE-2024-23346](https://github.com/MAWK0235/CVE-2024-23346) -- [Sanity-Archive/CVE-2024-23346](https://github.com/Sanity-Archive/CVE-2024-23346) -- [szyth/CVE-2024-23346-rust-exploit](https://github.com/szyth/CVE-2024-23346-rust-exploit) -- [DAVIDAROCA27/CVE-2024-23346-exploit](https://github.com/DAVIDAROCA27/CVE-2024-23346-exploit) ### CVE-2024-23443 (2024-06-19) @@ -24538,20 +23848,6 @@ - [amis13/SPIP-CVE-2024-23659-](https://github.com/amis13/SPIP-CVE-2024-23659-) -### CVE-2024-23666 (2024-11-12) - -A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigData \r\nat least version 7.4.0 and 7.2.0 through 7.2.6 and 7.0.1 through 7.0.6 and 6.4.5 through 6.4.7 and 6.2.5, FortiManager version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.4 and 7.0.0 through 7.0.11 and 6.4.0 through 6.4.14, FortiAnalyzer version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.4 and 7.0.0 through 7.0.11 and 6.4.0 through 6.4.14 allows attacker to improper access control via crafted requests. - - -- [synacktiv/CVE-2023-42791_CVE-2024-23666](https://github.com/synacktiv/CVE-2023-42791_CVE-2024-23666) - -### CVE-2024-23673 (2024-02-06) - -Malicious code execution via path traversal in Apache Software Foundation Apache Sling Servlets Resolver.This issue affects all version of Apache Sling Servlets Resolver before 2.11.0. However, whether a system is vulnerable to this attack depends on the exact configuration of the system.\nIf the system is vulnerable, a user with write access to the repository might be able to trick the Sling Servlet Resolver to load a previously uploaded script. \n\nUsers are recommended to upgrade to version 2.11.0, which fixes this issue. It is recommended to upgrade, regardless of whether your system configuration currently allows this attack or not. - - -- [shoucheng3/apache__sling-org-apache-sling-servlets-resolver_CVE-2024-23673_2-10-0](https://github.com/shoucheng3/apache__sling-org-apache-sling-servlets-resolver_CVE-2024-23673_2-10-0) - ### CVE-2024-23692 (2024-05-31) Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. As of the CVE assignment date, Rejetto HFS 2.3m is no longer supported. @@ -24568,7 +23864,6 @@ - [pradeepboo/Rejetto-HFS-2.x-RCE-CVE-2024-23692](https://github.com/pradeepboo/Rejetto-HFS-2.x-RCE-CVE-2024-23692) - [verylazytech/CVE-2024-23692](https://github.com/verylazytech/CVE-2024-23692) - [NingXin2002/HFS2.3_poc](https://github.com/NingXin2002/HFS2.3_poc) -- [999gawkboyy/CVE-2024-23692_Exploit](https://github.com/999gawkboyy/CVE-2024-23692_Exploit) - [wgetnz/hfs2](https://github.com/wgetnz/hfs2) - [sandimfz/CVE-2024-23692](https://github.com/sandimfz/CVE-2024-23692) @@ -24598,14 +23893,6 @@ - [alexcote1/CVE-2024-23722-poc](https://github.com/alexcote1/CVE-2024-23722-poc) -### CVE-2024-23724 (2024-02-11) - -Ghost through 5.76.0 allows stored XSS, and resultant privilege escalation in which a contributor can take over any account, via an SVG profile picture that contains JavaScript code to interact with the API on localhost TCP port 3001. NOTE: The discoverer reports that "The vendor does not view this as a valid vector." - - -- [Youssefdds/CVE-2024-23724](https://github.com/Youssefdds/CVE-2024-23724) -- [gl1tch0x1/Ghost-CMS-Exploit](https://github.com/gl1tch0x1/Ghost-CMS-Exploit) - ### CVE-2024-23727 (2024-03-28) The YI Smart Kami Vision com.kamivision.yismart application through 1.0.0_20231219 for Android allows a remote attacker to execute arbitrary JavaScript code via an implicit intent to the com.ants360.yicamera.activity.WebViewActivity component. @@ -24620,13 +23907,6 @@ - [actuator/com.heytap.browser](https://github.com/actuator/com.heytap.browser) -### CVE-2024-23733 (2025-01-29) - -The /WmAdmin/,/invoke/vm.server/login login page in the Integration Server in Software AG webMethods 10.15.0 before Core_Fix7 allows remote attackers to reach the administration panel and discover hostname and version information by sending an arbitrary username and a blank password to the /WmAdmin/#/login/ URI. - - -- [ekcrsm/CVE-2024-23733](https://github.com/ekcrsm/CVE-2024-23733) - ### CVE-2024-23738 (2024-01-28) An issue in Postman version 10.22 and before on macOS allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments settings. NOTE: the vendor states "we dispute the report's accuracy ... the configuration does not enable remote code execution.." @@ -24750,10 +24030,6 @@ - [ShieldAuth-PHP/PBL05-CVE-Analsys](https://github.com/ShieldAuth-PHP/PBL05-CVE-Analsys) - [verylazytech/CVE-2024-23897](https://github.com/verylazytech/CVE-2024-23897) - [D1se0/CVE-2024-23897-Vulnerabilidad-Jenkins](https://github.com/D1se0/CVE-2024-23897-Vulnerabilidad-Jenkins) -- [slytechroot/CVE-2024-23897](https://github.com/slytechroot/CVE-2024-23897) -- [brandonhjh/Jenkins-CVE-2024-23897-Exploit-Demo](https://github.com/brandonhjh/Jenkins-CVE-2024-23897-Exploit-Demo) -- [tvasari/CVE-2024-23897](https://github.com/tvasari/CVE-2024-23897) -- [Fineken/Jenkins-CVE-2024-23897-Lab](https://github.com/Fineken/Jenkins-CVE-2024-23897-Lab) - [amalpvatayam67/day03-jenkins-23897](https://github.com/amalpvatayam67/day03-jenkins-23897) - [hybinn/CVE-2024-23897](https://github.com/hybinn/CVE-2024-23897) - [aadi0258/Exploit-CVE-2024-23897](https://github.com/aadi0258/Exploit-CVE-2024-23897) @@ -24915,20 +24191,6 @@ - [passtheticket/CVE-2024-24409](https://github.com/passtheticket/CVE-2024-24409) -### CVE-2024-24450 (2024-11-15) - -Stack-based memcpy buffer overflow in the ngap_handle_pdu_session_resource_setup_response routine in OpenAirInterface CN5G AMF <= 2.0.0 allows a remote attacker with access to the N2 interface to carry out denial of service against the AMF and potentially execute code by sending a PDU Session Resource Setup Response with a suffciently large FailedToSetupList IE. - - -- [SpiralBL0CK/-CVE-2024-24450-](https://github.com/SpiralBL0CK/-CVE-2024-24450-) - -### CVE-2024-24451 (2025-01-21) - -A stack overflow in the sctp_server::sctp_receiver_thread component of OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2.0.0 allows attackers to cause a Denial of Service (DoS) by repeatedly establishing SCTP connections with the N2 interface. - - -- [SpiralBL0CK/CVE-2024-24451](https://github.com/SpiralBL0CK/CVE-2024-24451) - ### CVE-2024-24488 (2024-02-07) An issue in Shenzen Tenda Technology CP3V2.0 V11.10.00.2311090948 allows a local attacker to obtain sensitive information via the password component. @@ -25088,13 +24350,6 @@ - [kernel364/CVE-2024-24919](https://github.com/kernel364/CVE-2024-24919) - [sar-3mar/CVE-2024-24919_POC](https://github.com/sar-3mar/CVE-2024-24919_POC) - [NingXin2002/Check-Point_poc](https://github.com/NingXin2002/Check-Point_poc) -- [hashdr1ft/SOC_287](https://github.com/hashdr1ft/SOC_287) -- [funixone/CVE-2024-24919---Exploit-Script](https://github.com/funixone/CVE-2024-24919---Exploit-Script) -- [SpiX-7/CVE-2024-24919-POC](https://github.com/SpiX-7/CVE-2024-24919-POC) -- [ejaboz/cve-2024-24919](https://github.com/ejaboz/cve-2024-24919) -- [CyprianAtsyor/CVE-2024-24919-Incident-Report.md](https://github.com/CyprianAtsyor/CVE-2024-24919-Incident-Report.md) -- [CyberBibs/Event-ID-263-Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-](https://github.com/CyberBibs/Event-ID-263-Arbitrary-File-Read-on-Checkpoint-Security-Gateway-CVE-2024-24919-) -- [MacUchegit/Detecting-and-Analyzing-CVE-2024-24919-Exploitation](https://github.com/MacUchegit/Detecting-and-Analyzing-CVE-2024-24919-Exploitation) - [Zedocun/Incident-Analysis-Response-Check-Point-Security-Gateway-CVE-2024-24919-LFI-Exploitation](https://github.com/Zedocun/Incident-Analysis-Response-Check-Point-Security-Gateway-CVE-2024-24919-LFI-Exploitation) ### CVE-2024-24926 (2024-02-12) @@ -25132,7 +24387,6 @@ - [RandomRobbieBF/CVE-2024-25092](https://github.com/RandomRobbieBF/CVE-2024-25092) -- [Nxploited/CVE-2024-25092](https://github.com/Nxploited/CVE-2024-25092) ### CVE-2024-25096 (2024-04-03) @@ -25170,13 +24424,6 @@ - [jet-pentest/CVE-2024-25175](https://github.com/jet-pentest/CVE-2024-25175) -### CVE-2024-25180 (2024-02-29) - -An issue discovered in pdfmake 0.2.9 allows remote attackers to run arbitrary code via crafted POST request to the /pdf endpoint. NOTE: this is disputed because the behavior of the /pdf endpoint is intentional. The /pdf endpoint is only available after installing a test framework (that lives outside of the pdfmake applicaton). Anyone installing this is responsible for ensuring that it is only available to authorized testers. - - -- [dustblessnotdust/CVE-2024-25180](https://github.com/dustblessnotdust/CVE-2024-25180) - ### CVE-2024-25202 (2024-02-28) Cross Site Scripting vulnerability in Phpgurukul User Registration & Login and User Management System 1.0 allows attackers to run arbitrary code via the search bar. @@ -25300,12 +24547,6 @@ - [WanLiChangChengWanLiChang/CVE-2024-25600](https://github.com/WanLiChangChengWanLiChang/CVE-2024-25600) - [KaSooMi0228/CVE-2024-25600-Bricks-Builder-WordPress](https://github.com/KaSooMi0228/CVE-2024-25600-Bricks-Builder-WordPress) - [diamorphine666/CVE-2024-25600](https://github.com/diamorphine666/CVE-2024-25600) -- [Sibul-Dan-Glokta/test-task-CVE-2024-25600](https://github.com/Sibul-Dan-Glokta/test-task-CVE-2024-25600) -- [so1icitx/CVE-2024-25600](https://github.com/so1icitx/CVE-2024-25600) -- [meli0dasH4ck3r/cve-2024-25600](https://github.com/meli0dasH4ck3r/cve-2024-25600) -- [ivanbg2004/ODH-BricksBuilder-CVE-2024-25600-THM](https://github.com/ivanbg2004/ODH-BricksBuilder-CVE-2024-25600-THM) -- [DedsecTeam-BlackHat/Poleposph](https://github.com/DedsecTeam-BlackHat/Poleposph) -- [r0otk3r/CVE-2024-25600](https://github.com/r0otk3r/CVE-2024-25600) - [Anjai7/TryHack3M-Bricks-Heist](https://github.com/Anjai7/TryHack3M-Bricks-Heist) - [ranjithxploit/CVE-2024-25600](https://github.com/ranjithxploit/CVE-2024-25600) - [h0w1tzxr/TryHack3M-Bricks-Heist](https://github.com/h0w1tzxr/TryHack3M-Bricks-Heist) @@ -25321,7 +24562,6 @@ - [leo-mitch/CVE-2024-25641-RCE-Automated-Exploit-Cacti-1.2.26](https://github.com/leo-mitch/CVE-2024-25641-RCE-Automated-Exploit-Cacti-1.2.26) - [Safarchand/CVE-2024-25641](https://github.com/Safarchand/CVE-2024-25641) - [StopThatTalace/CVE-2024-25641-CACTI-RCE-1.2.26](https://github.com/StopThatTalace/CVE-2024-25641-CACTI-RCE-1.2.26) -- [regantemudo/CVE-2024-25641-Exploit-for-Cacti-1.2.26](https://github.com/regantemudo/CVE-2024-25641-Exploit-for-Cacti-1.2.26) - [GabrielCF10/CVE-2024-25641---Cacti](https://github.com/GabrielCF10/CVE-2024-25641---Cacti) ### CVE-2024-25723 (2024-02-27) @@ -25539,7 +24779,6 @@ - [jrbH4CK/CVE-2024-27198](https://github.com/jrbH4CK/CVE-2024-27198) - [geniuszly/CVE-2024-27198](https://github.com/geniuszly/CVE-2024-27198) - [Cythonic1/CVE-2024-27198_POC](https://github.com/Cythonic1/CVE-2024-27198_POC) -- [ArtemCyberLab/Project-Exploiting-CVE-2024-27198-RCE-Vulnerability](https://github.com/ArtemCyberLab/Project-Exploiting-CVE-2024-27198-RCE-Vulnerability) - [EynaExp/CVE-2024-27198-POC](https://github.com/EynaExp/CVE-2024-27198-POC) - [cmpnn-romain/CVE-2024-27198_Lab](https://github.com/cmpnn-romain/CVE-2024-27198_Lab) - [Ne0zer01/CVE-2024-27198_LAB](https://github.com/Ne0zer01/CVE-2024-27198_LAB) @@ -25579,7 +24818,6 @@ - [Zeyad-Azima/CVE-2024-27348](https://github.com/Zeyad-Azima/CVE-2024-27348) - [kljunowsky/CVE-2024-27348](https://github.com/kljunowsky/CVE-2024-27348) - [jakabakos/CVE-2024-27348-Apache-HugeGraph-RCE](https://github.com/jakabakos/CVE-2024-27348-Apache-HugeGraph-RCE) -- [p0et08/CVE-2024-27348](https://github.com/p0et08/CVE-2024-27348) - [wqfh/CVE-2024-27348](https://github.com/wqfh/CVE-2024-27348) - [akelaqe/CVE-2024-27348-HugeGraph-RCE](https://github.com/akelaqe/CVE-2024-27348-HugeGraph-RCE) @@ -25669,13 +24907,6 @@ - [Alaatk/CVE-2024-27674](https://github.com/Alaatk/CVE-2024-27674) -### CVE-2024-27686 (2026-05-08) - -Mikrotik RouterOS (x86) 6.40.5 through 6.49.10 (fixed in 7) allows a remote attacker to cause a denial of service (device crash) via crafted packet data to the SMB service on TCP port 445. - - -- [ThemeHackers/CVE-2024-27686](https://github.com/ThemeHackers/CVE-2024-27686) - ### CVE-2024-27697 - [SanjinDedic/FuguHub-8.4-Authenticated-RCE-CVE-2024-27697](https://github.com/SanjinDedic/FuguHub-8.4-Authenticated-RCE-CVE-2024-27697) @@ -25693,7 +24924,6 @@ - [R00tkitSMM/CVE-2024-27804](https://github.com/R00tkitSMM/CVE-2024-27804) -- [a0zhar/QuarkPoC](https://github.com/a0zhar/QuarkPoC) ### CVE-2024-27815 (2024-06-10) @@ -25709,13 +24939,6 @@ - [0xilis/CVE-2024-27821](https://github.com/0xilis/CVE-2024-27821) -### CVE-2024-27876 (2024-09-16) - -A race condition was addressed with improved locking. This issue is fixed in iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7, visionOS 2. Unpacking a maliciously crafted archive may allow an attacker to write arbitrary files. - - -- [0xilis/CVE-2024-27876](https://github.com/0xilis/CVE-2024-27876) - ### CVE-2024-27914 (2024-03-18) GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An unauthenticated user can provide a malicious link to a GLPI administrator in order to exploit a reflected XSS vulnerability. The XSS will only trigger if the administrator navigates through the debug bar. This issue has been patched in version 10.0.13.\n @@ -25730,7 +24953,6 @@ - [gh-ost00/CVE-2024-27954](https://github.com/gh-ost00/CVE-2024-27954) - [chsxthwik/CVE-2024-27954](https://github.com/chsxthwik/CVE-2024-27954) -- [r0otk3r/CVE-2024-27954](https://github.com/r0otk3r/CVE-2024-27954) ### CVE-2024-27956 (2024-03-21) @@ -25750,8 +24972,6 @@ - [Ap0dexMe0/CVE-2024-27956](https://github.com/Ap0dexMe0/CVE-2024-27956) - [CERTologists/EXPLOITING-CVE-2024-27956](https://github.com/CERTologists/EXPLOITING-CVE-2024-27956) - [7aRanchi/CVE-2024-27956-for-fscan](https://github.com/7aRanchi/CVE-2024-27956-for-fscan) -- [m4nInTh3mIdDle/wordpress-CVE-2024-27956](https://github.com/m4nInTh3mIdDle/wordpress-CVE-2024-27956) -- [devsec23/CVE-2024-27956](https://github.com/devsec23/CVE-2024-27956) - [0axz-tools/CVE-2024-27956](https://github.com/0axz-tools/CVE-2024-27956) ### CVE-2024-27983 (2024-04-09) @@ -25832,10 +25052,7 @@ - [Marven11/CVE-2024-28397-js2py-Sandbox-Escape](https://github.com/Marven11/CVE-2024-28397-js2py-Sandbox-Escape) - [CYBER-WARRIOR-SEC/CVE-2024-28397-js2py-Sandbox-Escape](https://github.com/CYBER-WARRIOR-SEC/CVE-2024-28397-js2py-Sandbox-Escape) -- [GhostOverflow/CVE-2024-28397-command-execution-poc](https://github.com/GhostOverflow/CVE-2024-28397-command-execution-poc) - [releaseown/exploit-js2py](https://github.com/releaseown/exploit-js2py) -- [harutomo-jp/CVE-2024-28397-RCE](https://github.com/harutomo-jp/CVE-2024-28397-RCE) -- [Naved124/CVE-2024-28397-js2py-Sandbox-Escape](https://github.com/Naved124/CVE-2024-28397-js2py-Sandbox-Escape) - [Udayveer17/Remote-Code-Execution-CVE-2024-28397-pyload-ng-js2py-](https://github.com/Udayveer17/Remote-Code-Execution-CVE-2024-28397-pyload-ng-js2py-) - [naclapor/CVE-2024-28397](https://github.com/naclapor/CVE-2024-28397) - [0xDTC/js2py-Sandbox-Escape-CVE-2024-28397-RCE](https://github.com/0xDTC/js2py-Sandbox-Escape-CVE-2024-28397-RCE) @@ -25875,13 +25092,6 @@ - [chebuya/CVE-2024-28741-northstar-agent-rce-poc](https://github.com/chebuya/CVE-2024-28741-northstar-agent-rce-poc) -### CVE-2024-28752 (2024-03-15) - -A SSRF vulnerability using the Aegis DataBinding in versions of Apache CXF before 4.0.4, 3.6.3 and 3.5.8 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. Users of other data bindings (including the default databinding) are not impacted. - - -- [ReaJason/CVE-2024-28752](https://github.com/ReaJason/CVE-2024-28752) - ### CVE-2024-28757 (2024-03-10) libexpat through 2.6.1 allows an XML Entity Expansion attack when there is isolated use of external parsers (created via XML_ExternalEntityParserCreate). @@ -25891,13 +25101,6 @@ - [saurabh2088/expat_2_1_0_CVE-2024-28757](https://github.com/saurabh2088/expat_2_1_0_CVE-2024-28757) - [saurabh2088/expat_2_1_1_CVE-2024-28757](https://github.com/saurabh2088/expat_2_1_1_CVE-2024-28757) -### CVE-2024-28784 (2024-03-27) - -IBM QRadar SIEM 7.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 285893. - - -- [CainSoulless/CVE-2024-28784](https://github.com/CainSoulless/CVE-2024-28784) - ### CVE-2024-28987 (2024-08-21) The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data. @@ -25905,7 +25108,6 @@ - [gh-ost00/CVE-2024-28987-POC](https://github.com/gh-ost00/CVE-2024-28987-POC) - [horizon3ai/CVE-2024-28987](https://github.com/horizon3ai/CVE-2024-28987) -- [alecclyde/CVE-2024-28987](https://github.com/alecclyde/CVE-2024-28987) - [Darabium/CVE-2024-28987](https://github.com/Darabium/CVE-2024-28987) ### CVE-2024-28995 (2024-06-06) @@ -26205,13 +25407,6 @@ - [Alchemist3dot14/CVE-2024-30270-PoC](https://github.com/Alchemist3dot14/CVE-2024-30270-PoC) -### CVE-2024-30485 (2024-06-09) - -Missing Authorization vulnerability in XLPlugins Finale Lite.This issue affects Finale Lite: from n/a through 2.18.0. - - -- [Nxploited/CVE-2024-30485](https://github.com/Nxploited/CVE-2024-30485) - ### CVE-2024-30614 (2024-04-12) An issue in Ametys CMS v4.5.0 and before allows attackers to obtain sensitive information via exposed resources to the error scope. @@ -26267,13 +25462,6 @@ - [efekaanakkar/CVE-2024-30998](https://github.com/efekaanakkar/CVE-2024-30998) -### CVE-2024-31114 (2024-03-31) - -Unrestricted Upload of File with Dangerous Type vulnerability in biplob018 Shortcode Addons.This issue affects Shortcode Addons: from n/a through 3.2.5. - - -- [Nxploited/CVE-2024-31114](https://github.com/Nxploited/CVE-2024-31114) - ### CVE-2024-31211 (2024-04-04) WordPress is an open publishing platform for the Web. Unserialization of instances of the `WP_HTML_Token` class allows for code execution via its `__destruct()` magic method. This issue was fixed in WordPress 6.4.2 on December 6th, 2023. Versions prior to 6.4.0 are not affected. @@ -26288,9 +25476,6 @@ - [fuhei/CVE-2024-31317](https://github.com/fuhei/CVE-2024-31317) - [Anonymous941/zygote-injection-toolkit](https://github.com/Anonymous941/zygote-injection-toolkit) -- [agg23/cve-2024-31317](https://github.com/agg23/cve-2024-31317) -- [WebLDix/CVE-2024-31317-PoC-Deployer](https://github.com/WebLDix/CVE-2024-31317-PoC-Deployer) -- [rifting/Zygotroller](https://github.com/rifting/Zygotroller) - [wqry085/PoC-Deployer-System](https://github.com/wqry085/PoC-Deployer-System) - [CleoV2/Debuggable-App-Exploit](https://github.com/CleoV2/Debuggable-App-Exploit) - [fcy10012/CVE-2024-31317-Deployer](https://github.com/fcy10012/CVE-2024-31317-Deployer) @@ -26300,13 +25485,6 @@ - [vnescape/zygote-CVE-2024-31317](https://github.com/vnescape/zygote-CVE-2024-31317) - [Tinnci/cve-2024-31317](https://github.com/Tinnci/cve-2024-31317) -### CVE-2024-31320 (2024-07-09) - -In setSkipPrompt of AssociationRequest.java , there is a possible way to establish a companion device association without any confirmation due to CDM. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. - - -- [SpiralBL0CK/CVE-2024-31320-](https://github.com/SpiralBL0CK/CVE-2024-31320-) - ### CVE-2024-31351 (2024-05-17) Unrestricted Upload of File with Dangerous Type vulnerability in Copymatic Copymatic – AI Content Writer & Generator.This issue affects Copymatic – AI Content Writer & Generator: from n/a through 1.6. @@ -26319,7 +25497,6 @@ Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scripting. This problem has been fixed in Redis versions 6.2.16, 7.2.6, and 7.4.1. Users are advised to upgrade. There are no known workarounds for this vulnerability. -- [daeseong1209/CVE-2024-31449](https://github.com/daeseong1209/CVE-2024-31449) - [qwqqaqqwq00/opensource_defect_repair_cc](https://github.com/qwqqaqqwq00/opensource_defect_repair_cc) - [qwqqaqqwq00/opensource_defect_repare_cc](https://github.com/qwqqaqqwq00/opensource_defect_repare_cc) @@ -26392,23 +25569,6 @@ - [Stuub/CVE-2024-31848-PoC](https://github.com/Stuub/CVE-2024-31848-PoC) -### CVE-2024-31903 (2025-01-22) - -IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.2 allow an attacker on the local network to execute arbitrary code on the system, caused by the deserialization of untrusted data. - - -- [ReversecLabs/ibm-sterling-b2b-integrator-poc](https://github.com/ReversecLabs/ibm-sterling-b2b-integrator-poc) - -### CVE-2024-31964 (2024-05-02) - -A vulnerability on Mitel 6800 Series and 6900 Series SIP Phones through 6.3 SP3 HF4, 6900w Series SIP Phone through 6.3.3, and 6970 Conference Unit through 5.1.1 SP8 allows an unauthenticated attacker to conduct an authentication bypass attack due to improper authentication control. A successful exploit could allow an attacker to modify system configuration settings and potentially cause a denial of service. - - -- [d-Raco/CVE-2024-31964](https://github.com/d-Raco/CVE-2024-31964) - -### CVE-2024-31969 -- [kingfakee7/CVE-2024-31969](https://github.com/kingfakee7/CVE-2024-31969) - ### CVE-2024-31974 (2024-05-17) The com.solarized.firedown (aka Solarized FireDown Browser & Downloader) application 1.0.76 for Android allows a remote attacker to execute arbitrary JavaScript code via a crafted intent. com.solarized.firedown.IntentActivity uses a WebView component to display web content and doesn't adequately sanitize the URI or any extra data passed in the intent by any installed application (with no permissions). @@ -26498,9 +25658,6 @@ - [grecosamuel/CVE-2024-32002](https://github.com/grecosamuel/CVE-2024-32002) - [BohemianHacks/CVE-2024-32002-poc](https://github.com/BohemianHacks/CVE-2024-32002-poc) - [jolibb55/donald](https://github.com/jolibb55/donald) -- [ashutosh0408/CVE-2024-32002](https://github.com/ashutosh0408/CVE-2024-32002) -- [ashutosh0408/Cve-2024-32002-poc](https://github.com/ashutosh0408/Cve-2024-32002-poc) -- [Dre4m017/fuzzy](https://github.com/Dre4m017/fuzzy) - [JoaoLeonello/cve-2024-32002-poc](https://github.com/JoaoLeonello/cve-2024-32002-poc) - [srakkk/cve-2024-32002-demo](https://github.com/srakkk/cve-2024-32002-demo) - [srakkk/cve-2024-32002-hook](https://github.com/srakkk/cve-2024-32002-hook) @@ -26520,12 +25677,6 @@ Netdata is an open source observability tool. In affected versions the `ndsudo` tool shipped with affected versions of the Netdata Agent allows an attacker to run arbitrary programs with root permissions. The `ndsudo` tool is packaged as a `root`-owned executable with the SUID bit set. It only runs a restricted set of external commands, but its search paths are supplied by the `PATH` environment variable. This allows an attacker to control where `ndsudo` looks for these commands, which may be a path the attacker has write access to. This may lead to local privilege escalation. This vulnerability has been addressed in versions 1.45.3 and 1.45.2-169. Users are advised to upgrade. There are no known workarounds for this vulnerability. -- [AzureADTrent/CVE-2024-32019-POC](https://github.com/AzureADTrent/CVE-2024-32019-POC) -- [AliElKhatteb/CVE-2024-32019-POC](https://github.com/AliElKhatteb/CVE-2024-32019-POC) -- [dollarboysushil/CVE-2024-32019-Netdata-ndsudo-PATH-Vulnerability-Privilege-Escalation](https://github.com/dollarboysushil/CVE-2024-32019-Netdata-ndsudo-PATH-Vulnerability-Privilege-Escalation) -- [juanbelin/CVE-2024-32019-POC](https://github.com/juanbelin/CVE-2024-32019-POC) -- [C0deInBlack/CVE-2024-32019-poc](https://github.com/C0deInBlack/CVE-2024-32019-poc) -- [sPhyos/cve-2024-32019-PoC](https://github.com/sPhyos/cve-2024-32019-PoC) - [x0da6h/POC-for-CVE-2024-32019](https://github.com/x0da6h/POC-for-CVE-2024-32019) - [T1erno/CVE-2024-32019-Netdata-ndsudo-Privilege-Escalation-PoC](https://github.com/T1erno/CVE-2024-32019-Netdata-ndsudo-Privilege-Escalation-PoC) - [hexared/CVE-2024-32019_poc](https://github.com/hexared/CVE-2024-32019_poc) @@ -26563,7 +25714,6 @@ - [RacerZ-fighting/CVE-2024-32113-POC](https://github.com/RacerZ-fighting/CVE-2024-32113-POC) - [Mr-xn/CVE-2024-32113](https://github.com/Mr-xn/CVE-2024-32113) - [YongYe-Security/CVE-2024-32113](https://github.com/YongYe-Security/CVE-2024-32113) -- [guinea-offensive-security/Ofbiz-RCE](https://github.com/guinea-offensive-security/Ofbiz-RCE) - [luizgaf/CVE-2024-32113-Exploit](https://github.com/luizgaf/CVE-2024-32113-Exploit) ### CVE-2024-32114 (2024-05-02) @@ -26640,13 +25790,6 @@ - [absholi7ly/FreeRDP-Out-of-Bounds-Read-CVE-2024-32459-](https://github.com/absholi7ly/FreeRDP-Out-of-Bounds-Read-CVE-2024-32459-) -### CVE-2024-32462 (2024-04-18) - -Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. in versions before 1.10.9, 1.12.9, 1.14.6, and 1.15.8, a malicious or compromised Flatpak app could execute arbitrary code outside its sandbox. Normally, the `--command` argument of `flatpak run` expects to be given a command to run in the specified Flatpak app, optionally along with some arguments. However it is possible to instead pass `bwrap` arguments to `--command=`, such as `--bind`. It's possible to pass an arbitrary `commandline` to the portal interface `org.freedesktop.portal.Background.RequestBackground` from within a Flatpak app. When this is converted into a `--command` and arguments, it achieves the same effect of passing arguments directly to `bwrap`, and thus can be used for a sandbox escape. The solution is to pass the `--` argument to `bwrap`, which makes it stop processing options. This has been supported since bubblewrap 0.3.0. All supported versions of Flatpak require at least that version of bubblewrap. xdg-desktop-portal version 1.18.4 will mitigate this vulnerability by only allowing Flatpak apps to create .desktop files for commands that do not start with --. The vulnerability is patched in 1.15.8, 1.10.9, 1.12.9, and 1.14.6. - - -- [SpiralBL0CK/CVE-2024-32462](https://github.com/SpiralBL0CK/CVE-2024-32462) - ### CVE-2024-32640 (2025-08-11) MASA CMS is an Enterprise Content Management platform based on open source technology. Versions prior to 7.4.5, 7.3.12, and 7.2.7 contain a SQL injection vulnerability in the `processAsyncObject` method that can result in remote code execution. Versions 7.4.5, 7.3.12, and 7.2.7 contain a fix for the issue. @@ -26672,20 +25815,6 @@ - [nastar-id/CVE-2024-32700](https://github.com/nastar-id/CVE-2024-32700) -### CVE-2024-32830 (2024-05-17) - -Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ThemeKraft BuddyForms allows Server Side Request Forgery, Relative Path Traversal.This issue affects BuddyForms: from n/a through 2.8.8. - - -- [ptrstr/CVE-2024-32830-poc](https://github.com/ptrstr/CVE-2024-32830-poc) - -### CVE-2024-32962 (2024-05-02) - -xml-crypto is an xml digital signature and encryption library for Node.js. In affected versions the default configuration does not check authorization of the signer, it only checks the validity of the signature per section 3.2.2 of the w3 xmldsig-core-20080610 spec. As such, without additional validation steps, the default configuration allows a malicious actor to re-sign an XML document, place the certificate in a `<KeyInfo />` element, and pass `xml-crypto` default validation checks. As a result `xml-crypto` trusts by default any certificate provided via digitally signed XML document's `<KeyInfo />`. `xml-crypto` prefers to use any certificate provided via digitally signed XML document's `<KeyInfo />` even if library was configured to use specific certificate (`publicCert`) for signature verification purposes. An attacker can spoof signature verification by modifying XML document and replacing existing signature with signature generated with malicious private key (created by attacker) and by attaching that private key's certificate to `<KeyInfo />` element. This vulnerability is combination of changes introduced to `4.0.0` on pull request 301 / commit `c2b83f98` and has been addressed in version 6.0.0 with pull request 445 / commit `21201723d`. Users are advised to upgrade. Users unable to upgrade may either check the certificate extracted via `getCertFromKeyInfo` against trusted certificates before accepting the results of the validation or set `xml-crypto's getCertFromKeyInfo` to `() => undefined` forcing `xml-crypto` to use an explicitly configured `publicCert` or `privateKey` for signature verification. - - -- [absholi7ly/Poc-CVE-2024-32962-xml-crypto](https://github.com/absholi7ly/Poc-CVE-2024-32962-xml-crypto) - ### CVE-2024-33111 (2024-05-06) D-Link DIR-845L router <=v1.01KRb03 is vulnerable to Cross Site Scripting (XSS) via /htdocs/webinc/js/bsc_sms_inbox.php. @@ -26763,9 +25892,6 @@ - [sudotom/rcno-reviews](https://github.com/sudotom/rcno-reviews) -### CVE-2024-33676 -- [dersecure/CVE-2024-33676](https://github.com/dersecure/CVE-2024-33676) - ### CVE-2024-33722 (2026-05-08) SOPlanning 1.52.00 is vulnerable to SQL Injection by an authenticated user via projets.php with statut[]. @@ -26847,8 +25973,6 @@ - [dream434/CVE-2024-34102](https://github.com/dream434/CVE-2024-34102) - [bka/magento-cve-2024-34102-exploit-cosmicstring](https://github.com/bka/magento-cve-2024-34102-exploit-cosmicstring) - [wubinworks/magento2-encryption-key-manager-cli](https://github.com/wubinworks/magento2-encryption-key-manager-cli) -- [Koray123-debug/CVE-2024-34102](https://github.com/Koray123-debug/CVE-2024-34102) -- [Kento-Sec/CVE-2024-34102](https://github.com/Kento-Sec/CVE-2024-34102) - [nmmorette/CVE-2024-34102](https://github.com/nmmorette/CVE-2024-34102) - [russellwork2021-lgtm/cosmicsting-cve-2024-34102-exploit](https://github.com/russellwork2021-lgtm/cosmicsting-cve-2024-34102-exploit) @@ -26929,20 +26053,6 @@ - [vincentscode/CVE-2024-34313](https://github.com/vincentscode/CVE-2024-34313) -### CVE-2024-34327 (2025-07-31) - -Sielox AnyWare v2.1.2 was discovered to contain a SQL injection vulnerability via the email address field of the password reset form. - - -- [0xsu3ks/CVE-2024-34327](https://github.com/0xsu3ks/CVE-2024-34327) - -### CVE-2024-34328 (2025-07-31) - -An open redirect in Sielox AnyWare v2.1.2 allows attackers to execute a man-in-the-middle attack via a crafted URL. - - -- [0xsu3ks/CVE-2024-34328](https://github.com/0xsu3ks/CVE-2024-34328) - ### CVE-2024-34329 (2024-07-22) Insecure permissions in Entrust Datacard XPS Card Printer Driver 8.5 and earlier without the dxp1-patch-E24-004 patch allows unauthenticated attackers to execute arbitrary code as SYSTEM via a crafted DLL payload. @@ -26974,13 +26084,6 @@ - [T0X1Cx/CVE-2024-34361-Pi-Hole-SSRF-to-RCE](https://github.com/T0X1Cx/CVE-2024-34361-Pi-Hole-SSRF-to-RCE) -### CVE-2024-34370 (2024-05-17) - -Improper Privilege Management vulnerability in WPFactory EAN for WooCommerce allows Privilege Escalation.This issue affects EAN for WooCommerce: from n/a through 4.8.9. - - -- [pashayogi/CVE-2024-34370](https://github.com/pashayogi/CVE-2024-34370) - ### CVE-2024-34444 (2024-06-19) Missing Authorization vulnerability in ThemePunch OHG Slider Revolution.This issue affects Slider Revolution: from n/a before 6.7.0. @@ -27070,7 +26173,6 @@ - [aelmokhtar/CVE-2024-34716](https://github.com/aelmokhtar/CVE-2024-34716) - [0xDTC/Prestashop-CVE-2024-34716](https://github.com/0xDTC/Prestashop-CVE-2024-34716) -- [Pallangyo98/Trickster-HTB](https://github.com/Pallangyo98/Trickster-HTB) ### CVE-2024-34739 (2024-08-15) @@ -27121,13 +26223,6 @@ - [Gr-1m/CVE-2024-34958](https://github.com/Gr-1m/CVE-2024-34958) -### CVE-2024-35106 (2025-02-07) - -NEXTU FLETA AX1500 WIFI6 v1.0.3 was discovered to contain a buffer overflow at /boafrm/formIpQoS. This vulnerability allows attackers to cause a Denial of Service (DoS) or potentially arbitrary code execution via a crafted POST request. - - -- [laskdjlaskdj12/CVE-2024-35106-POC](https://github.com/laskdjlaskdj12/CVE-2024-35106-POC) - ### CVE-2024-35133 (2024-08-29) IBM Security Verify Access 10.0.0 through 10.0.8 OIDC Provider could allow a remote authenticated attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. @@ -27278,8 +26373,6 @@ - [0x0d3ad/CVE-2024-36401](https://github.com/0x0d3ad/CVE-2024-36401) - [funnyDog896/CVE-2024-36401-WoodpeckerPlugin](https://github.com/funnyDog896/CVE-2024-36401-WoodpeckerPlugin) - [bmth666/GeoServer-Tools-CVE-2024-36401](https://github.com/bmth666/GeoServer-Tools-CVE-2024-36401) -- [amoy6228/CVE-2024-36401_Geoserver_RCE_POC](https://github.com/amoy6228/CVE-2024-36401_Geoserver_RCE_POC) -- [ArcticDU/Exploit-CVE-2024-36401](https://github.com/ArcticDU/Exploit-CVE-2024-36401) - [URJACK2025/CVE-2024-36401](https://github.com/URJACK2025/CVE-2024-36401) - [mantanhacker/CVE-2024-36401-MASS](https://github.com/mantanhacker/CVE-2024-36401-MASS) - [Delt-A/CVE-2024-36401-poc](https://github.com/Delt-A/CVE-2024-36401-poc) @@ -27307,13 +26400,6 @@ - [secunnix/CVE-2024-36424](https://github.com/secunnix/CVE-2024-36424) -### CVE-2024-36437 (2025-02-03) - -The com.enflick.android.TextNow (aka TextNow: Call + Text Unlimited) application 24.17.0.2 for Android enables any installed application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.enflick.android.TextNow.activities.DialerActivity component. - - -- [actuator/com.enflick.android.TextNow](https://github.com/actuator/com.enflick.android.TextNow) - ### CVE-2024-36527 (2024-06-17) puppeteer-renderer v.3.2.0 and before is vulnerable to Directory Traversal. Attackers can exploit the URL parameter using the file protocol to read sensitive information from the server. @@ -27328,13 +26414,6 @@ - [Abdurahmon3236/CVE-2024-36539](https://github.com/Abdurahmon3236/CVE-2024-36539) -### CVE-2024-36587 (2024-06-13) - -Insecure permissions in DNSCrypt-proxy v2.0.0alpha9 to v2.1.5 allows non-privileged attackers to escalate privileges to root via overwriting the binary dnscrypt-proxy. - - -- [meeeeing/CVE-2024-36587](https://github.com/meeeeing/CVE-2024-36587) - ### CVE-2024-36821 (2024-06-11) Insecure permissions in Linksys Velop WiFi 5 (WHW01v1) 1.1.13.202617 allows attackers to escalate privileges from Guest to root. @@ -27372,13 +26451,6 @@ - [jjensn/CVE-2024-36877](https://github.com/jjensn/CVE-2024-36877) - [CERTologists/POC-CVE-2024-36877](https://github.com/CERTologists/POC-CVE-2024-36877) -### CVE-2024-36886 (2024-05-30) - -In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: fix UAF in error path\n\nSam Page (sam4k) working with Trend Micro Zero Day Initiative reported\na UAF in the tipc_buf_append() error path:\n\nBUG: KASAN: slab-use-after-free in kfree_skb_list_reason+0x47e/0x4c0\nlinux/net/core/skbuff.c:1183\nRead of size 8 at addr ffff88804d2a7c80 by task poc/8034\n\nCPU: 1 PID: 8034 Comm: poc Not tainted 6.8.2 #1\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\n1.16.0-debian-1.16.0-5 04/01/2014\nCall Trace:\n <IRQ>\n __dump_stack linux/lib/dump_stack.c:88\n dump_stack_lvl+0xd9/0x1b0 linux/lib/dump_stack.c:106\n print_address_description linux/mm/kasan/report.c:377\n print_report+0xc4/0x620 linux/mm/kasan/report.c:488\n kasan_report+0xda/0x110 linux/mm/kasan/report.c:601\n kfree_skb_list_reason+0x47e/0x4c0 linux/net/core/skbuff.c:1183\n skb_release_data+0x5af/0x880 linux/net/core/skbuff.c:1026\n skb_release_all linux/net/core/skbuff.c:1094\n __kfree_skb linux/net/core/skbuff.c:1108\n kfree_skb_reason+0x12d/0x210 linux/net/core/skbuff.c:1144\n kfree_skb linux/./include/linux/skbuff.h:1244\n tipc_buf_append+0x425/0xb50 linux/net/tipc/msg.c:186\n tipc_link_input+0x224/0x7c0 linux/net/tipc/link.c:1324\n tipc_link_rcv+0x76e/0x2d70 linux/net/tipc/link.c:1824\n tipc_rcv+0x45f/0x10f0 linux/net/tipc/node.c:2159\n tipc_udp_recv+0x73b/0x8f0 linux/net/tipc/udp_media.c:390\n udp_queue_rcv_one_skb+0xad2/0x1850 linux/net/ipv4/udp.c:2108\n udp_queue_rcv_skb+0x131/0xb00 linux/net/ipv4/udp.c:2186\n udp_unicast_rcv_skb+0x165/0x3b0 linux/net/ipv4/udp.c:2346\n __udp4_lib_rcv+0x2594/0x3400 linux/net/ipv4/udp.c:2422\n ip_protocol_deliver_rcu+0x30c/0x4e0 linux/net/ipv4/ip_input.c:205\n ip_local_deliver_finish+0x2e4/0x520 linux/net/ipv4/ip_input.c:233\n NF_HOOK linux/./include/linux/netfilter.h:314\n NF_HOOK linux/./include/linux/netfilter.h:308\n ip_local_deliver+0x18e/0x1f0 linux/net/ipv4/ip_input.c:254\n dst_input linux/./include/net/dst.h:461\n ip_rcv_finish linux/net/ipv4/ip_input.c:449\n NF_HOOK linux/./include/linux/netfilter.h:314\n NF_HOOK linux/./include/linux/netfilter.h:308\n ip_rcv+0x2c5/0x5d0 linux/net/ipv4/ip_input.c:569\n __netif_receive_skb_one_core+0x199/0x1e0 linux/net/core/dev.c:5534\n __netif_receive_skb+0x1f/0x1c0 linux/net/core/dev.c:5648\n process_backlog+0x101/0x6b0 linux/net/core/dev.c:5976\n __napi_poll.constprop.0+0xba/0x550 linux/net/core/dev.c:6576\n napi_poll linux/net/core/dev.c:6645\n net_rx_action+0x95a/0xe90 linux/net/core/dev.c:6781\n __do_softirq+0x21f/0x8e7 linux/kernel/softirq.c:553\n do_softirq linux/kernel/softirq.c:454\n do_softirq+0xb2/0xf0 linux/kernel/softirq.c:441\n </IRQ>\n <TASK>\n __local_bh_enable_ip+0x100/0x120 linux/kernel/softirq.c:381\n local_bh_enable linux/./include/linux/bottom_half.h:33\n rcu_read_unlock_bh linux/./include/linux/rcupdate.h:851\n __dev_queue_xmit+0x871/0x3ee0 linux/net/core/dev.c:4378\n dev_queue_xmit linux/./include/linux/netdevice.h:3169\n neigh_hh_output linux/./include/net/neighbour.h:526\n neigh_output linux/./include/net/neighbour.h:540\n ip_finish_output2+0x169f/0x2550 linux/net/ipv4/ip_output.c:235\n __ip_finish_output linux/net/ipv4/ip_output.c:313\n __ip_finish_output+0x49e/0x950 linux/net/ipv4/ip_output.c:295\n ip_finish_output+0x31/0x310 linux/net/ipv4/ip_output.c:323\n NF_HOOK_COND linux/./include/linux/netfilter.h:303\n ip_output+0x13b/0x2a0 linux/net/ipv4/ip_output.c:433\n dst_output linux/./include/net/dst.h:451\n ip_local_out linux/net/ipv4/ip_output.c:129\n ip_send_skb+0x3e5/0x560 linux/net/ipv4/ip_output.c:1492\n udp_send_skb+0x73f/0x1530 linux/net/ipv4/udp.c:963\n udp_sendmsg+0x1a36/0x2b40 linux/net/ipv4/udp.c:1250\n inet_sendmsg+0x105/0x140 linux/net/ipv4/af_inet.c:850\n sock_sendmsg_nosec linux/net/socket.c:730\n __sock_sendmsg linux/net/socket.c:745\n __sys_sendto+0x42c/0x4e0 linux/net/socket.c:2191\n __do_sys_sendto linux/net/socket.c:2203\n __se_sys_sendto linux/net/socket.c:2199\n __x64_sys_sendto+0xe0/0x1c0 linux/net/socket.c:2199\n do_syscall_x64 linux/arch/x86/entry/common.c:52\n do_syscall_\n---truncated--- - - -- [abubakar-shahid/CVE-2024-36886](https://github.com/abubakar-shahid/CVE-2024-36886) - ### CVE-2024-36971 (2024-06-10) In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fix __dst_negative_advice() race\n\n__dst_negative_advice() does not enforce proper RCU rules when\nsk->dst_cache must be cleared, leading to possible UAF.\n\nRCU rules are that we must first clear sk->sk_dst_cache,\nthen call dst_release(old_dst).\n\nNote that sk_dst_reset(sk) is implementing this protocol correctly,\nwhile __dst_negative_advice() uses the wrong order.\n\nGiven that ip6_negative_advice() has special logic\nagainst RTF_CACHE, this means each of the three ->negative_advice()\nexisting methods must perform the sk_dst_reset() themselves.\n\nNote the check against NULL dst is centralized in\n__dst_negative_advice(), there is no need to duplicate\nit in various callbacks.\n\nMany thanks to Clement Lecigne for tracking this issue.\n\nThis old bug became visible after the blamed commit, using UDP sockets. @@ -27403,15 +26475,10 @@ - [th3gokul/CVE-2024-36991](https://github.com/th3gokul/CVE-2024-36991) - [sardine-web/CVE-2024-36991](https://github.com/sardine-web/CVE-2024-36991) - [Cappricio-Securities/CVE-2024-36991](https://github.com/Cappricio-Securities/CVE-2024-36991) -- [jaytiwari05/CVE-2024-36991](https://github.com/jaytiwari05/CVE-2024-36991) - [TheStingR/CVE-2024-36991-Tool](https://github.com/TheStingR/CVE-2024-36991-Tool) -- [gunzf0x/CVE-2024-36991](https://github.com/gunzf0x/CVE-2024-36991) - [0xFZin/CVE-2024-36991](https://github.com/0xFZin/CVE-2024-36991) - [jhurtadomi/CVE-2024-36991-Splunk](https://github.com/jhurtadomi/CVE-2024-36991-Splunk) -### CVE-2024-37010 -- [SarpantKeltiek/CVE-2024-37010](https://github.com/SarpantKeltiek/CVE-2024-37010) - ### CVE-2024-37032 (2024-05-31) Ollama before 0.1.34 does not validate the format of the digest (sha256 with 64 hex digits) when getting the model path, and thus mishandles the TestGetBlobsPath test cases such as fewer than 64 hex digits, more than 64 hex digits, or an initial ../ substring. @@ -27435,7 +26502,6 @@ Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.9.0 or newer, enabling a maliciously uploaded PyFunc model to run arbitrary code on an end user’s system when interacted with. -- [NiteeshPujari/CVE-2024-37054-MLflow-RCE](https://github.com/NiteeshPujari/CVE-2024-37054-MLflow-RCE) - [ben-slates/CVE-2024-37054](https://github.com/ben-slates/CVE-2024-37054) - [jimmexploit/CVE-2024-37054-PoC](https://github.com/jimmexploit/CVE-2024-37054-PoC) - [Spydomain/CVE-2024-37054-MLflow-reverse-shell](https://github.com/Spydomain/CVE-2024-37054-MLflow-reverse-shell) @@ -27613,7 +26679,6 @@ - [AliHj98/cve-2024-38063-Anonyvader](https://github.com/AliHj98/cve-2024-38063-Anonyvader) - [Dragkob/CVE-2024-38063](https://github.com/Dragkob/CVE-2024-38063) - [fredagsguf/Windows-CVE-2024-38063](https://github.com/fredagsguf/Windows-CVE-2024-38063) -- [Skac44/CVE-2024-38063](https://github.com/Skac44/CVE-2024-38063) - [thealice01/CVE-2024-38063](https://github.com/thealice01/CVE-2024-38063) - [AvidanMaatuk/CVE-2024-38063](https://github.com/AvidanMaatuk/CVE-2024-38063) - [arrhenius975/CVE-2024-38063-Exploit-Refactoring](https://github.com/arrhenius975/CVE-2024-38063-Exploit-Refactoring) @@ -27637,7 +26702,6 @@ - [BBD-YZZ/fyne-gui](https://github.com/BBD-YZZ/fyne-gui) - [Destiny0991/check_38077](https://github.com/Destiny0991/check_38077) - [mrmtwoj/CVE-2024-38077](https://github.com/mrmtwoj/CVE-2024-38077) -- [Accord96/CVE-2024-38077-POC](https://github.com/Accord96/CVE-2024-38077-POC) - [Ermensonx/CVE-2024-38077-MadLicense-exploit](https://github.com/Ermensonx/CVE-2024-38077-MadLicense-exploit) - [razureink/cve-2024-38077-madlicense_reproduction](https://github.com/razureink/cve-2024-38077-madlicense_reproduction) @@ -27648,13 +26712,6 @@ - [pwndorei/CVE-2024-38080](https://github.com/pwndorei/CVE-2024-38080) -### CVE-2024-38112 (2024-07-09) - -Windows MSHTML Platform Spoofing Vulnerability - - -- [BunBunCodes/CPSC253_CybersecurityFinalProjectReports](https://github.com/BunBunCodes/CPSC253_CybersecurityFinalProjectReports) - ### CVE-2024-38124 (2024-10-08) Windows Netlogon Elevation of Privilege Vulnerability @@ -27669,13 +26726,6 @@ - [pwndorei/CVE-2024-38127](https://github.com/pwndorei/CVE-2024-38127) -### CVE-2024-38143 (2024-08-13) - -Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability - - -- [redr0nin/CVE-2024-38143](https://github.com/redr0nin/CVE-2024-38143) - ### CVE-2024-38144 (2024-08-13) Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability @@ -27748,8 +26798,6 @@ - [p0in7s/CVE-2024-38475](https://github.com/p0in7s/CVE-2024-38475) - [soltanali0/CVE-2024-38475](https://github.com/soltanali0/CVE-2024-38475) -- [abrewer251/CVE-2024-38475_SonicBoom_Apache_URL_Traversal_PoC](https://github.com/abrewer251/CVE-2024-38475_SonicBoom_Apache_URL_Traversal_PoC) -- [syaifulandy/CVE-2024-38475](https://github.com/syaifulandy/CVE-2024-38475) - [Nyakki-Labs-0x420/Myesve](https://github.com/Nyakki-Labs-0x420/Myesve) ### CVE-2024-38476 (2024-07-01) @@ -27765,7 +26813,6 @@ - [putget/CVE-2024-38526](https://github.com/putget/CVE-2024-38526) -- [padayali-JD/pollyscan](https://github.com/padayali-JD/pollyscan) ### CVE-2024-38537 (2024-07-02) @@ -27790,7 +26837,6 @@ - [WULINPIN/CVE-2024-38816-PoC](https://github.com/WULINPIN/CVE-2024-38816-PoC) - [Galaxy-system/cve-2024-38816](https://github.com/Galaxy-system/cve-2024-38816) - [Anthony1078/App-vulnerable](https://github.com/Anthony1078/App-vulnerable) -- [jaloon/spring-webmvc5](https://github.com/jaloon/spring-webmvc5) ### CVE-2024-38819 (2024-12-19) @@ -27799,8 +26845,6 @@ - [masa42/CVE-2024-38819-POC](https://github.com/masa42/CVE-2024-38819-POC) - [GhostS3c/CVE-2024-38819](https://github.com/GhostS3c/CVE-2024-38819) -- [skrkcb2/cve-2024-38819](https://github.com/skrkcb2/cve-2024-38819) -- [vishalnoza/CVE-2024-38819-POC2](https://github.com/vishalnoza/CVE-2024-38819-POC2) - [trevorputbrese/cve-2024-38819-lab](https://github.com/trevorputbrese/cve-2024-38819-lab) ### CVE-2024-38820 (2024-10-18) @@ -27817,15 +26861,6 @@ - [mouadk/cve-2024-38821](https://github.com/mouadk/cve-2024-38821) -### CVE-2024-38828 (2024-11-18) - -Spring MVC controller methods with an @RequestBody byte[] method parameter are vulnerable to a DoS attack. - - -- [First-Roman/sprig-mvc-demo-patch](https://github.com/First-Roman/sprig-mvc-demo-patch) -- [topilov/axiom-jdk-test-task](https://github.com/topilov/axiom-jdk-test-task) -- [funcid/CVE-2024-38828](https://github.com/funcid/CVE-2024-38828) - ### CVE-2024-38856 (2024-08-05) Incorrect Authorization vulnerability in Apache OFBiz.\n\nThis issue affects Apache OFBiz: through 18.12.14.\n\nUsers are recommended to upgrade to version 18.12.15, which fixes the issue.\n\nUnauthenticated endpoints could allow execution of screen rendering code of screens if some preconditions are met (such as when the screen definitions don't explicitly check user's permissions because they rely on the configuration of their endpoints). @@ -27837,7 +26872,6 @@ - [0x20c/CVE-2024-38856-EXP](https://github.com/0x20c/CVE-2024-38856-EXP) - [emanueldosreis/CVE-2024-38856](https://github.com/emanueldosreis/CVE-2024-38856) - [BBD-YZZ/CVE-2024-38856-RCE](https://github.com/BBD-YZZ/CVE-2024-38856-RCE) -- [AlissonFaoli/Apache-OFBiz-Exploit](https://github.com/AlissonFaoli/Apache-OFBiz-Exploit) - [Hex00-0x4/CVE-2024-38856-Apache-OFBiz](https://github.com/Hex00-0x4/CVE-2024-38856-Apache-OFBiz) ### CVE-2024-39024 (2026-08-06) @@ -27964,23 +26998,8 @@ A Server-Side Request Forgery (SSRF) affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1. -- [typical-pashochek/CVE-2024-39713](https://github.com/typical-pashochek/CVE-2024-39713) - [blackcodersec/exploit-cve](https://github.com/blackcodersec/exploit-cve) -### CVE-2024-39719 (2024-10-31) - -An issue was discovered in Ollama through 0.3.14. File existence disclosure can occur via api/create. When calling the CreateModel route with a path parameter that does not exist, it reflects the "File does not exist" error message to the attacker, providing a primitive for file existence on the server. - - -- [srcx404/CVE-2024-39719](https://github.com/srcx404/CVE-2024-39719) - -### CVE-2024-39722 (2024-10-31) - -An issue was discovered in Ollama before 0.1.46. It exposes which files exist on the server on which it is deployed via path traversal in the api/push route. - - -- [srcx404/CVE-2024-39722](https://github.com/srcx404/CVE-2024-39722) - ### CVE-2024-39840 (2024-06-29) Factorio before 1.1.101 allows a crafted server to execute arbitrary code on clients via a custom map that leverages the ability of certain Lua base module functions to execute bytecode and generate fake objects. @@ -28022,8 +27041,6 @@ The built-in SSH server of Gogs through 0.13.0 allows argument injection in internal/ssh/ssh.go, leading to remote code execution. Authenticated attackers can exploit this by opening an SSH connection and sending a malicious --split-string env request if the built-in SSH server is activated. Windows installations are unaffected. -- [theMcSam/CVE-2024-39930-PoC](https://github.com/theMcSam/CVE-2024-39930-PoC) -- [alexander47777/-CVE-2024-39930](https://github.com/alexander47777/-CVE-2024-39930) - [laachy/CVE-2024-39930-ptrace-detection-mitigation](https://github.com/laachy/CVE-2024-39930-ptrace-detection-mitigation) ### CVE-2024-39943 (2024-07-04) @@ -28032,7 +27049,6 @@ - [Heyholiday067/CVE-2024-39943-Poc](https://github.com/Heyholiday067/CVE-2024-39943-Poc) -- [JenmrR/Node.js-CVE-2024-39943](https://github.com/JenmrR/Node.js-CVE-2024-39943) ### CVE-2024-40080 - [perras/CVE-2024-40080](https://github.com/perras/CVE-2024-40080) @@ -28050,7 +27066,6 @@ - [Abdurahmon3236/CVE-2024-40110](https://github.com/Abdurahmon3236/CVE-2024-40110) -- [thiagosmith/CVE-2024-40110](https://github.com/thiagosmith/CVE-2024-40110) - [AnGrY-Althaf/CVE-2024-40110](https://github.com/AnGrY-Althaf/CVE-2024-40110) ### CVE-2024-40119 (2024-07-17) @@ -28111,20 +27126,6 @@ - [Yuma-Tsushima07/CVE-2024-40443](https://github.com/Yuma-Tsushima07/CVE-2024-40443) -### CVE-2024-40445 (2025-04-22) - -A directory traversal vulnerability in forkosh Mime TeX before version 1.77 allows attackers on Windows systems to read or append arbitrary files by manipulating crafted input paths. - - -- [TaiYou-TW/CVE-2024-40445_CVE-2024-40446](https://github.com/TaiYou-TW/CVE-2024-40445_CVE-2024-40446) - -### CVE-2024-40453 (2024-08-21) - -squirrellyjs squirrelly v9.0.0 and fixed in v.9.0.1 was discovered to contain a code injection vulnerability via the component options.varName. - - -- [BwithE/CVE-2024-40453](https://github.com/BwithE/CVE-2024-40453) - ### CVE-2024-40457 (2024-09-12) No-IP Dynamic Update Client (DUC) v3.x uses cleartext credentials that may occur on a command line or in a file. NOTE: the vendor's position is that cleartext in /etc/default/noip-duc is recommended and is the intentional behavior. @@ -28195,13 +27196,6 @@ - [Jansen-C-Moreira/CVE-2024-40512](https://github.com/Jansen-C-Moreira/CVE-2024-40512) -### CVE-2024-40586 (2025-02-11) - -An Improper Access Control vulnerability [CWE-284] in FortiClient Windows version 7.4.0, version 7.2.6 and below, version 7.0.13 and below may allow a local user to escalate his privileges via FortiSSLVPNd service pipe. - - -- [Hagrid29/CVE-2024-40586-Windows-Coerced-Authentication-in-FortiClient](https://github.com/Hagrid29/CVE-2024-40586-Windows-Coerced-Authentication-in-FortiClient) - ### CVE-2024-40617 (2024-07-17) Path traversal vulnerability exists in FUJITSU Network Edgiot GW1500 (M2M-GW for FENICS). If a remote authenticated attacker with User Class privilege sends a specially crafted request to the affected product, access restricted files containing sensitive information may be accessed. As a result, Administrator Class privileges of the product may be hijacked. @@ -28209,13 +27203,6 @@ - [KyssK00L/CVE-2024-40617](https://github.com/KyssK00L/CVE-2024-40617) -### CVE-2024-40635 (2025-03-17) - -containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a `UID:GID` larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as root (UID 0). This could cause unexpected behavior for environments that require containers to run as a non-root user. This bug has been fixed in containerd 1.6.38, 1.7.27, and 2.04. As a workaround, ensure that only trusted images are used and that only trusted users have permissions to import images. - - -- [yen5004/CVE-2024-40635_POC](https://github.com/yen5004/CVE-2024-40635_POC) - ### CVE-2024-40711 (2024-09-07) A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution (RCE). @@ -28246,6 +27233,13 @@ - [dunihiz/Ph-n-t-ch-CVE-2024-40842-XProtectRemediatorDubRobber-Information-Leak-tr-n-macOS](https://github.com/dunihiz/Ph-n-t-ch-CVE-2024-40842-XProtectRemediatorDubRobber-Information-Leak-tr-n-macOS) +### CVE-2024-40891 (2025-02-04) + +**UNSUPPORTED WHEN ASSIGNED**\nA post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an authenticated attacker to execute operating system (OS) commands on an affected device via Telnet. + + +- [Danyw24/zyxel-p870hn-hardware-hacking](https://github.com/Danyw24/zyxel-p870hn-hardware-hacking) + ### CVE-2024-40892 (2024-08-12) A weak credential vulnerability exists in Firewalla Box Software versions before 1.979. This vulnerability allows a physically close attacker to use the license UUID for authentication and provision SSH credentials over the Bluetooth Low-Energy (BTLE) interface. Once an attacker gains access to the LAN, they could log into the SSH interface using the provisioned credentials. The license UUID can be acquired through plain-text Bluetooth sniffing, reading the QR code on the bottom of the device, or brute-forcing the UUID (though this is less likely). @@ -28253,14 +27247,6 @@ - [xen0bit/fwbt](https://github.com/xen0bit/fwbt) -### CVE-2024-40898 (2024-07-18) - -SSRF in Apache HTTP Server on Windows with mod_rewrite in server/vhost context, allows to potentially leak NTML hashes to a malicious server via SSRF and malicious requests.\n\nUsers are recommended to upgrade to version 2.4.62 which fixes this issue.  - - -- [anilpatel199n/CVE-2024-40898](https://github.com/anilpatel199n/CVE-2024-40898) -- [ForceEA001/CVE-2024-40898-SSL-Bypass-Detection](https://github.com/ForceEA001/CVE-2024-40898-SSL-Bypass-Detection) - ### CVE-2024-41107 (2024-07-19) The CloudStack SAML authentication (disabled by default) does not enforce signature check. In CloudStack environments where SAML authentication is enabled, an attacker that initiates CloudStack SAML single sign-on authentication can bypass SAML authentication by submitting a spoofed SAML response with no signature and known or guessed username and other user details of a SAML-enabled CloudStack user-account. In such environments, this can result in a complete compromise of the resources owned and/or accessible by a SAML enabled user-account.\n\nAffected users are recommended to disable the SAML authentication plugin by setting the "saml2.enabled" global setting to "false", or upgrade to version 4.18.2.2, 4.19.1.0 or later, which addresses this issue. @@ -28347,10 +27333,6 @@ - [chebuya/Havoc-C2-SSRF-poc](https://github.com/chebuya/Havoc-C2-SSRF-poc) -- [HimmeL-Byte/CVE-2024-41570-SSRF-RCE](https://github.com/HimmeL-Byte/CVE-2024-41570-SSRF-RCE) -- [leo-mitch/CVE-2024-41570-Havoc-C2-RCE](https://github.com/leo-mitch/CVE-2024-41570-Havoc-C2-RCE) -- [sebr-dev/Havoc-C2-SSRF-to-RCE](https://github.com/sebr-dev/Havoc-C2-SSRF-to-RCE) -- [diemoeve/CVE-2024-41570](https://github.com/diemoeve/CVE-2024-41570) ### CVE-2024-41628 (2024-07-26) @@ -28388,15 +27370,6 @@ - [watchtowrlabs/Mitel-MiCollab-Auth-Bypass_CVE-2024-41713](https://github.com/watchtowrlabs/Mitel-MiCollab-Auth-Bypass_CVE-2024-41713) - [zxj-hub/CVE-2024-41713POC](https://github.com/zxj-hub/CVE-2024-41713POC) - [Sanandd/cve-2024-CVE-2024-41713](https://github.com/Sanandd/cve-2024-CVE-2024-41713) -- [gunyakit/CVE-2024-41713-PoC-exploit](https://github.com/gunyakit/CVE-2024-41713-PoC-exploit) - -### CVE-2024-41817 (2024-07-29) - -ImageMagick is a free and open-source software suite, used for editing and manipulating digital images. The `AppImage` version `ImageMagick` might use an empty path when setting `MAGICK_CONFIGURE_PATH` and `LD_LIBRARY_PATH` environment variables while executing, which might lead to arbitrary code execution by loading malicious configuration files or shared libraries in the current working directory while executing `ImageMagick`. The vulnerability is fixed in 7.11-36. - - -- [Dxsk/CVE-2024-41817-poc](https://github.com/Dxsk/CVE-2024-41817-poc) -- [maikneysm/AutoPwn-Titanic.htb](https://github.com/maikneysm/AutoPwn-Titanic.htb) ### CVE-2024-41958 (2024-08-05) @@ -28419,41 +27392,15 @@ - [xpcmdshell/CVE-2024-41997](https://github.com/xpcmdshell/CVE-2024-41997) -### CVE-2024-42007 (2024-07-26) - -SPX (aka php-spx) through 0.4.15 allows SPX_UI_URI Directory Traversal to read arbitrary files. - - -- [BubblyCola/CVE_2024_42007](https://github.com/BubblyCola/CVE_2024_42007) - -### CVE-2024-42008 (2024-08-05) - -A Cross-Site Scripting vulnerability in rcmail_action_mail_get->run() in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails of a victim via a malicious e-mail attachment served with a dangerous Content-Type header. - - -- [victoni/Roundcube-CVE-2024-42008-and-CVE-2024-42010-POC](https://github.com/victoni/Roundcube-CVE-2024-42008-and-CVE-2024-42010-POC) -- [Foxer131/CVE-2024-42008-9-exploit](https://github.com/Foxer131/CVE-2024-42008-9-exploit) -- [rpgsec/Roundcube-CVE-2024-42008-POC](https://github.com/rpgsec/Roundcube-CVE-2024-42008-POC) - ### CVE-2024-42009 (2024-08-05) A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails of a victim via a crafted e-mail message that abuses a Desanitization issue in message_body() in program/actions/mail/show.php. -- [0xbassiouny1337/CVE-2024-42009](https://github.com/0xbassiouny1337/CVE-2024-42009) -- [Bhanunamikaze/CVE-2024-42009](https://github.com/Bhanunamikaze/CVE-2024-42009) -- [DaniTheHack3r/CVE-2024-42009-PoC](https://github.com/DaniTheHack3r/CVE-2024-42009-PoC) - [Shubhankargupta691/CVE-2024-42009](https://github.com/Shubhankargupta691/CVE-2024-42009) - [ZaidArif47/CVE-2024-42009](https://github.com/ZaidArif47/CVE-2024-42009) - [segunakinsoyinu/CVE-2024-42009-roundcube-xss](https://github.com/segunakinsoyinu/CVE-2024-42009-roundcube-xss) -### CVE-2024-42049 (2024-07-28) - -TightVNC (Server for Windows) before 2.8.84 allows attackers to connect to the control pipe via a network connection. - - -- [zeved/CVE-2024-42049-PoC](https://github.com/zeved/CVE-2024-42049-PoC) - ### CVE-2024-42323 (2024-09-21) SnakeYaml Deser Load Malicious xml rce vulnerability in Apache HertzBeat (incubating). \n\nThis vulnerability can only be exploited by authorized attackers.\nThis issue affects Apache HertzBeat (incubating): before 1.6.0.\n\nUsers are recommended to upgrade to version 1.6.0, which fixes the issue. @@ -28472,8 +27419,6 @@ - [watchdog1337/CVE-2024-42327_Zabbix_SQLI](https://github.com/watchdog1337/CVE-2024-42327_Zabbix_SQLI) - [itform-fr/Zabbix---CVE-2024-42327](https://github.com/itform-fr/Zabbix---CVE-2024-42327) - [igorbf495/CVE-2024-42327](https://github.com/igorbf495/CVE-2024-42327) -- [godylockz/CVE-2024-42327](https://github.com/godylockz/CVE-2024-42327) -- [874anthony/CVE-2024-42327_Zabbix_SQLi](https://github.com/874anthony/CVE-2024-42327_Zabbix_SQLi) - [fellipefelix06/Zabbix-CVE-2024-42327](https://github.com/fellipefelix06/Zabbix-CVE-2024-42327) - [RichJJ98/analise-vulnerabilidades-zabbix-notebooklm](https://github.com/RichJJ98/analise-vulnerabilidades-zabbix-notebooklm) @@ -28498,13 +27443,6 @@ - [fevar54/CVE-2024-42461](https://github.com/fevar54/CVE-2024-42461) -### CVE-2024-42471 (2024-09-02) - -actions/artifact is the GitHub ToolKit for developing GitHub Actions. Versions of `actions/artifact` on the 2.x branch before 2.1.2 are vulnerable to arbitrary file write when using `downloadArtifactInternal`, `downloadArtifactPublic`, or `streamExtractExternal` for extracting a specifically crafted artifact that contains path traversal filenames. Users are advised to upgrade to version 2.1.2 or higher. There are no known workarounds for this issue. - - -- [theMcSam/CVE-2024-42471-PoC](https://github.com/theMcSam/CVE-2024-42471-PoC) - ### CVE-2024-42640 (2024-10-11) angular-base64-upload prior to v0.1.21 is vulnerable to unauthenticated remote code execution via demo/server.php. Exploiting this vulnerability allows an attacker to upload arbitrary content to the server, which can subsequently be accessed through demo/uploads. This leads to the execution of previously uploaded content and enables the attacker to achieve code execution on the server. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. @@ -28586,13 +27524,6 @@ ### CVE-2024-42992 - [thanhh23/CVE-2024-42992](https://github.com/thanhh23/CVE-2024-42992) -### CVE-2024-43018 (2025-07-29) - -Piwigo 13.8.0 and below is vulnerable to SQL Injection in the parameters max_level and min_register. These parameters are used in ws_user_gerList function from file include\ws_functions\pwg.users.php and this same function is called by ws.php file at some point can be used for searching users in advanced way in /admin.php?page=user_list. - - -- [joaosilva21/CVE-2024-43018](https://github.com/joaosilva21/CVE-2024-43018) - ### CVE-2024-43035 (2026-03-05) Fonoster 0.5.5 before 0.6.1 allows ../ directory traversal to read arbitrary files via the /sounds/:file or /tts/:file VoiceServer endpoint. This occurs in serveFiles in mods/voice/src/utils.ts. NOTE: serveFiles exists in 0.5.5 but not in the next release, 0.6.1. @@ -28652,9 +27583,6 @@ - [RedTeamPentesting/moodle-rce-calculatedquestions](https://github.com/RedTeamPentesting/moodle-rce-calculatedquestions) -- [Snizi/Moodle-CVE-2024-43425-Exploit](https://github.com/Snizi/Moodle-CVE-2024-43425-Exploit) -- [aninfosec/CVE-2024-43425-Poc](https://github.com/aninfosec/CVE-2024-43425-Poc) -- [kazuya256/Moodle-authenticated-RCE](https://github.com/kazuya256/Moodle-authenticated-RCE) - [Tnot123/cve-2024-43425](https://github.com/Tnot123/cve-2024-43425) ### CVE-2024-43451 (2024-11-12) @@ -28662,7 +27590,6 @@ NTLM Hash Disclosure Spoofing Vulnerability -- [RonF98/CVE-2024-43451-POC](https://github.com/RonF98/CVE-2024-43451-POC) - [razureink/cve-2024-43451-ntlm_hash_disclosure_reproduction](https://github.com/razureink/cve-2024-43451-ntlm_hash_disclosure_reproduction) ### CVE-2024-43468 (2024-10-08) @@ -28672,20 +27599,6 @@ - [synacktiv/CVE-2024-43468](https://github.com/synacktiv/CVE-2024-43468) -### CVE-2024-43535 (2024-10-08) - -Windows Kernel-Mode Driver Elevation of Privilege Vulnerability - - -- [jayesther/KTM_POCS](https://github.com/jayesther/KTM_POCS) - -### CVE-2024-43583 (2024-10-08) - -Winlogon Elevation of Privilege Vulnerability - - -- [Kvngtheta/CVE-2024-43583-PoC](https://github.com/Kvngtheta/CVE-2024-43583-PoC) - ### CVE-2024-43630 (2024-11-12) Windows Kernel Elevation of Privilege Vulnerability @@ -28693,20 +27606,12 @@ - [QuasarBinary/CVE-2024-43630-POC](https://github.com/QuasarBinary/CVE-2024-43630-POC) -### CVE-2024-43788 (2024-08-27) - -Webpack is a module bundler. Its main purpose is to bundle JavaScript files for usage in a browser, yet it is also capable of transforming, bundling, or packaging just about any resource or asset. The webpack developers have discovered a DOM Clobbering vulnerability in Webpack’s `AutoPublicPathRuntimeModule`. The DOM Clobbering gadget in the module can lead to cross-site scripting (XSS) in web pages where scriptless attacker-controlled HTML elements (e.g., an `img` tag with an unsanitized `name` attribute) are present. Real-world exploitation of this gadget has been observed in the Canvas LMS which allows a XSS attack to happen through a javascript code compiled by Webpack (the vulnerable part is from Webpack). DOM Clobbering is a type of code-reuse attack where the attacker first embeds a piece of non-script, seemingly benign HTML markups in the webpage (e.g. through a post or comment) and leverages the gadgets (pieces of js code) living in the existing javascript code to transform it into executable code. This vulnerability can lead to cross-site scripting (XSS) on websites that include Webpack-generated files and allow users to inject certain scriptless HTML tags with improperly sanitized name or id attributes. This issue has been addressed in release version 5.94.0. All users are advised to upgrade. There are no known workarounds for this issue. - - -- [batzionb/webpack-cve-2024-43788](https://github.com/batzionb/webpack-cve-2024-43788) - ### CVE-2024-43917 (2024-08-29) Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TemplateInvaders TI WooCommerce Wishlist allows SQL Injection.This issue affects TI WooCommerce Wishlist: from n/a through 2.8.2. - [p33d/CVE-2024-43917](https://github.com/p33d/CVE-2024-43917) -- [sug4r-wr41th/CVE-2024-43917](https://github.com/sug4r-wr41th/CVE-2024-43917) ### CVE-2024-43918 (2024-08-29) @@ -28735,7 +27640,6 @@ - [RandomRobbieBF/CVE-2024-43998](https://github.com/RandomRobbieBF/CVE-2024-43998) -- [Nxploited/CVE-2024-43998](https://github.com/Nxploited/CVE-2024-43998) ### CVE-2024-44000 (2024-10-20) @@ -28775,7 +27679,6 @@ - [ifpdz/CVE-2024-44258](https://github.com/ifpdz/CVE-2024-44258) -- [missaels235/POC-CVE-2024-44258-Py](https://github.com/missaels235/POC-CVE-2024-44258-Py) ### CVE-2024-44285 (2024-10-28) @@ -28784,20 +27687,6 @@ - [slds1/explt](https://github.com/slds1/explt) -### CVE-2024-44308 (2024-11-19) - -The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, macOS Sequoia 15.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems. - - -- [migopp/cve-2024-44308](https://github.com/migopp/cve-2024-44308) - -### CVE-2024-44313 (2025-03-18) - -TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the invoice() function within Orders.php which allows unauthorized users to access and generate invoices due to missing permission checks. - - -- [chessredoffsec/CVE-2024-44313](https://github.com/chessredoffsec/CVE-2024-44313) - ### CVE-2024-44337 (2024-10-15) The package `github.com/gomarkdown/markdown` is a Go library for parsing Markdown text and rendering as HTML. Prior to pseudoversion `v0.0.0-20240729232818-a2a9c4f`, which corresponds with commit `a2a9c4f76ef5a5c32108e36f7c47f8d310322252`, there was a logical problem in the paragraph function of the parser/block.go file, which allowed a remote attacker to cause a denial of service (DoS) condition by providing a tailor-made input that caused an infinite loop, causing the program to hang and consume resources indefinitely. Submit `a2a9c4f76ef5a5c32108e36f7c47f8d310322252` contains fixes to this problem. @@ -28816,9 +27705,6 @@ - [AndreaF17/PoC-CVE-2024-44349](https://github.com/AndreaF17/PoC-CVE-2024-44349) -### CVE-2024-44378 -- [aezdmr/CVE-2024-44378](https://github.com/aezdmr/CVE-2024-44378) - ### CVE-2024-44450 (2025-01-07) Multiple functions are vulnerable to Authorization Bypass in AIMS eCrew. The issue was fixed in version JUN23 #190. @@ -28903,13 +27789,6 @@ - [ChengZyin/CVE-2024-44867](https://github.com/ChengZyin/CVE-2024-44867) -### CVE-2024-44871 (2024-09-10) - -An arbitrary file upload vulnerability in the component /admin/index.php of moziloCMS v3.0 allows attackers to execute arbitrary code via uploading a crafted file. - - -- [vances25/CVE-2024-44871](https://github.com/vances25/CVE-2024-44871) - ### CVE-2024-44902 (2024-09-09) A deserialization vulnerability in Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code. @@ -28939,13 +27818,6 @@ - [0xbhsu/CVE-2024-45058](https://github.com/0xbhsu/CVE-2024-45058) -### CVE-2024-45195 (2024-09-04) - -Direct Request ('Forced Browsing') vulnerability in Apache OFBiz.\n\nThis issue affects Apache OFBiz: before 18.12.16.\n\nUsers are recommended to upgrade to version 18.12.16, which fixes the issue. - - -- [wyyazjjl/CVE-2024-45195](https://github.com/wyyazjjl/CVE-2024-45195) - ### CVE-2024-45200 (2024-09-30) In Nintendo Mario Kart 8 Deluxe before 3.0.3, the LAN/LDN local multiplayer implementation allows a remote attacker to exploit a stack-based buffer overflow upon deserialization of session information via a malformed browse-reply packet, aka KartLANPwn. The victim is not required to join a game session with an attacker. The victim must open the "Wireless Play" (or "LAN Play") menu from the game's title screen, and an attacker nearby (LDN) or on the same LAN network as the victim can send a crafted reply packet to the victim's console. This enables a remote attacker to obtain complete denial-of-service on the game's process, or potentially, remote code execution on the victim's console. The issue is caused by incorrect use of the Nintendo Pia library, @@ -28997,19 +27869,8 @@ - [NHAS/CVE-2024-45337-POC](https://github.com/NHAS/CVE-2024-45337-POC) - [NHAS/VULNERABLE-CVE-2024-45337](https://github.com/NHAS/VULNERABLE-CVE-2024-45337) -- [peace-maker/CVE-2024-45337](https://github.com/peace-maker/CVE-2024-45337) - [Backline-playground/gogs](https://github.com/Backline-playground/gogs) -### CVE-2024-45352 (2025-03-27) - -An code execution vulnerability exists in the Xiaomi smarthome application product. The vulnerability is caused by improper input validation and can be exploited by attackers to execute malicious code. - - -- [Edwins907/CVE-2024-45352](https://github.com/Edwins907/CVE-2024-45352) -- [Edwins907/CVE-2024-45352-xiaomi](https://github.com/Edwins907/CVE-2024-45352-xiaomi) -- [Edwins907/xiaomi-cve-2024-45352](https://github.com/Edwins907/xiaomi-cve-2024-45352) -- [Edwins907/-CVE-2024-45352](https://github.com/Edwins907/-CVE-2024-45352) - ### CVE-2024-45383 (2024-09-12) A mishandling of IRP requests vulnerability exists in the HDAudBus_DMA interface of Microsoft High Definition Audio Bus Driver 10.0.19041.3636 (WinBuild.160101.0800). A specially crafted application can issue multiple IRP Complete requests which leads to a local denial-of-service. An attacker can execute malicious script/application to trigger this vulnerability. @@ -29034,13 +27895,6 @@ ### CVE-2024-45427 - [MHamdy24/CVE-2024-45427-Exploit](https://github.com/MHamdy24/CVE-2024-45427-Exploit) -### CVE-2024-45436 (2024-08-29) - -extractFromZipFile in model.go in Ollama before 0.1.47 can extract members of a ZIP archive outside of the parent directory. - - -- [srcx404/CVE-2024-45436](https://github.com/srcx404/CVE-2024-45436) - ### CVE-2024-45440 (2024-08-29) core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when error logging is None) if the value of hash_salt is file_get_contents of a file that does not exist. @@ -29063,7 +27917,6 @@ - [p33d/CVE-2024-45519](https://github.com/p33d/CVE-2024-45519) - [Chocapikk/CVE-2024-45519](https://github.com/Chocapikk/CVE-2024-45519) -- [sec13b/CVE-2024-45519](https://github.com/sec13b/CVE-2024-45519) ### CVE-2024-45589 (2024-09-05) @@ -29077,7 +27930,6 @@ body-parser is Node.js body parsing middleware. body-parser <1.20.3 is vulnerable to denial of service when url encoding is enabled. A malicious actor using a specially crafted payload could flood the server with a large number of requests, resulting in denial of service. This issue is patched in 1.20.3. -- [dhruvik-git/CVE-2024-45590](https://github.com/dhruvik-git/CVE-2024-45590) - [Evillm/CVE-2024-45590-PoC](https://github.com/Evillm/CVE-2024-45590-PoC) ### CVE-2024-45614 (2024-09-19) @@ -29094,13 +27946,6 @@ - [tdawg506/woocommerce_scanner](https://github.com/tdawg506/woocommerce_scanner) -### CVE-2024-45870 (2024-10-03) - -Bandisoft BandiView 7.05 is vulnerable to Incorrect Access Control in sub_0x3d80fc via a crafted POC file. - - -- [bshyuunn/bandiview-7.05-vuln-PoC](https://github.com/bshyuunn/bandiview-7.05-vuln-PoC) - ### CVE-2024-46209 (2025-01-06) A stored cross-site scripting (XSS) vulnerability in the component /media/test.html of REDAXO CMS v5.17.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the password parameter. @@ -29159,13 +28004,6 @@ - [fufu-byte/CVE-2024-46506](https://github.com/fufu-byte/CVE-2024-46506) -### CVE-2024-46507 (2026-05-08) - -A SSTI (server side template injection) vulnerability in the custom template export function in yeti-platform yeti before 2.1.12 allows attackers to execute code on the application server. - - -- [Somchandra17/CVE-2024-46507](https://github.com/Somchandra17/CVE-2024-46507) - ### CVE-2024-46532 (2024-10-11) SQL Injection vulnerability in OpenHIS v.1.0 allows an attacker to execute arbitrary code via the refund function in the PayController.class.php component. @@ -29230,21 +28068,12 @@ - [ColdFusionX/CVE-2024-46879-TikiCMS-XSS](https://github.com/ColdFusionX/CVE-2024-46879-TikiCMS-XSS) -### CVE-2024-46981 (2025-01-06) - -Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to manipulate the garbage collector and potentially lead to remote code execution. The problem is fixed in 7.4.2, 7.2.7, and 6.2.17. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing Lua scripts. This can be done using ACL to restrict EVAL and EVALSHA commands. - - -- [publicqi/CVE-2024-46981](https://github.com/publicqi/CVE-2024-46981) -- [xsshk/CVE-2024-46981](https://github.com/xsshk/CVE-2024-46981) - ### CVE-2024-46982 (2024-09-17) Next.js is a React framework for building full-stack web applications. By sending a crafted HTTP request, it is possible to poison the cache of a non-dynamic server-side rendered route in the pages router (this does not affect the app router). When this crafted request is sent it could coerce Next.js to cache a route that is meant to not be cached and send a `Cache-Control: s-maxage=1, stale-while-revalidate` header which some upstream CDNs may cache as well. To be potentially affected all of the following must apply: 1. Next.js between 13.5.1 and 14.2.9, 2. Using pages router, & 3. Using non-dynamic server-side rendered routes e.g. `pages/dashboard.tsx` not `pages/blog/[slug].tsx`. This vulnerability was resolved in Next.js v13.5.7, v14.2.10, and later. We recommend upgrading regardless of whether you can reproduce the issue or not. There are no official or recommended workarounds for this issue, we recommend that users patch to a safe version. - [CodePontiff/next_js_poisoning](https://github.com/CodePontiff/next_js_poisoning) -- [Lercas/CVE-2024-46982](https://github.com/Lercas/CVE-2024-46982) - [melmathari/CVE-2024-46982-NUCLEI](https://github.com/melmathari/CVE-2024-46982-NUCLEI) - [hidesec/CVE-2025-32421](https://github.com/hidesec/CVE-2025-32421) - [samuel871211/CVE-2024-46982-Reproduction](https://github.com/samuel871211/CVE-2024-46982-Reproduction) @@ -29277,7 +28106,6 @@ This advisory addresses two critical security vulnerabilities present in Mautic versions before 5.2.3. These vulnerabilities could be exploited by authenticated users.\n\n * Remote Code Execution (RCE) via Asset Upload: A Remote Code Execution vulnerability has been identified in the asset upload functionality. Insufficient enforcement of allowed file extensions allows an attacker to bypass restrictions and upload executable files, such as PHP scripts.\n\n\n * Path Traversal File Deletion: A Path Traversal vulnerability exists in the upload validation process. Due to improper handling of path components, an authenticated user can manipulate the file deletion process to delete arbitrary files on the host system. -- [mallo-m/CVE-2024-47051](https://github.com/mallo-m/CVE-2024-47051) - [hyeonyeonglee/CVE-2024-47051](https://github.com/hyeonyeonglee/CVE-2024-47051) ### CVE-2024-47062 (2024-09-20) @@ -29338,11 +28166,7 @@ Cobbler, a Linux installation server that allows for rapid setup of network installation environments, has an improper authentication vulnerability starting in version 3.0.0 and prior to versions 3.2.3 and 3.3.7. `utils.get_shared_secret()` always returns `-1`, which allows anyone to connect to cobbler XML-RPC as user `''` password `-1` and make any changes. This gives anyone with network access to a cobbler server full control of the server. Versions 3.2.3 and 3.3.7 fix the issue. -- [baph00met/CVE-2024-47533](https://github.com/baph00met/CVE-2024-47533) -- [dollarboysushil/CVE-2024-47533-Cobbler-XMLRPC-Authentication-Bypass-RCE-Exploit-POC](https://github.com/dollarboysushil/CVE-2024-47533-Cobbler-XMLRPC-Authentication-Bypass-RCE-Exploit-POC) -- [00xCanelo/CVE-2024-47533-PoC](https://github.com/00xCanelo/CVE-2024-47533-PoC) - [zs1n/CVE-2024-47533](https://github.com/zs1n/CVE-2024-47533) -- [okkotsu1/CVE-2024-47533](https://github.com/okkotsu1/CVE-2024-47533) ### CVE-2024-47575 (2024-10-23) @@ -29350,7 +28174,6 @@ - [watchtowrlabs/Fortijump-Exploit-CVE-2024-47575](https://github.com/watchtowrlabs/Fortijump-Exploit-CVE-2024-47575) -- [AnnnNix/CVE-2024-47575](https://github.com/AnnnNix/CVE-2024-47575) ### CVE-2024-47823 (2024-10-08) @@ -29364,16 +28187,8 @@ DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMpurify was vulnerable to nesting-based mXSS. This vulnerability is fixed in 2.5.0 and 3.1.3. -- [daikinitanda/-CVE-2024-47875-](https://github.com/daikinitanda/-CVE-2024-47875-) - [roj1py/CVE-2024-47875-PhpSpreadsheet-XSS-PoC](https://github.com/roj1py/CVE-2024-47875-PhpSpreadsheet-XSS-PoC) -### CVE-2024-48061 (2024-11-04) - -langflow <=1.0.18 is vulnerable to Remote Code Execution (RCE) as any component provided the code functionality and the components run on the local machine rather than in a sandbox. - - -- [BwithE/CVE-2024-48061](https://github.com/BwithE/CVE-2024-48061) - ### CVE-2024-48139 (2024-10-24) A prompt injection vulnerability in the chatbox of Blackbox AI v1.3.95 allows attackers to access and exfiltrate all previous and subsequent chat data between the user and the AI assistant via a crafted message. @@ -29416,20 +28231,6 @@ - [ShadowByte1/CVE-2024-48246](https://github.com/ShadowByte1/CVE-2024-48246) -### CVE-2024-48248 (2025-03-04) - -NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may lead to remote code execution across the enterprise because PhysicalDiscovery has cleartext credentials). - - -- [watchtowrlabs/nakivo-arbitrary-file-read-poc-CVE-2024-48248](https://github.com/watchtowrlabs/nakivo-arbitrary-file-read-poc-CVE-2024-48248) - -### CVE-2024-48307 (2024-10-31) - -JeecgBoot v3.7.1 was discovered to contain a SQL injection vulnerability via the component /onlDragDatasetHead/getTotalData. - - -- [jisi-001/CVE-2024-48307POC](https://github.com/jisi-001/CVE-2024-48307POC) - ### CVE-2024-48322 (2024-11-11) UsersController.php in Run.codes 1.5.2 and older has a reset password race condition vulnerability. @@ -29503,20 +28304,6 @@ - [Exek1el/CVE-2024-48589](https://github.com/Exek1el/CVE-2024-48589) -### CVE-2024-48590 (2025-03-20) - -Inflectra SpiraTeam 7.2.00 is vulnerable to Server-Side Request Forgery (SSRF) via the NewsReaderService. This allows an attacker to escalate privileges and obtain sensitive information. - - -- [GCatt-AS/CVE-2024-48590](https://github.com/GCatt-AS/CVE-2024-48590) - -### CVE-2024-48591 (2025-03-20) - -Inflectra SpiraTeam 7.2.00 is vulnerable to Cross Site Scripting (XSS). A specially crafted SVG file can be uploaded that will render and execute JavaScript upon direct viewing. - - -- [GCatt-AS/CVE-2024-48591](https://github.com/GCatt-AS/CVE-2024-48591) - ### CVE-2024-48605 (2024-10-22) An issue in Helakuru Desktop Application v1.1 allows a local attacker to execute arbitrary code via the lack of proper validation of the wow64log.dll file. @@ -29548,14 +28335,6 @@ ### CVE-2024-48762 - [YZS17/CVE-2024-48762](https://github.com/YZS17/CVE-2024-48762) -### CVE-2024-48887 (2025-04-08) - -A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to change admin passwords via a specially crafted request - - -- [cybersecplayground/CVE-2024-48887-FortiSwitch-Exploit](https://github.com/cybersecplayground/CVE-2024-48887-FortiSwitch-Exploit) -- [groshi215/CVE-2024-48887-Exploit](https://github.com/groshi215/CVE-2024-48887-Exploit) - ### CVE-2024-48910 (2024-10-31) DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify was vulnerable to prototype pollution. This vulnerability is fixed in 2.4.2. @@ -29591,7 +28370,6 @@ - [ally-petitt/CVE-2024-48990-Exploit](https://github.com/ally-petitt/CVE-2024-48990-Exploit) - [CyberCrowCC/CVE-2024-48990](https://github.com/CyberCrowCC/CVE-2024-48990) - [NullByte-7w7/CVE-2024-48990](https://github.com/NullByte-7w7/CVE-2024-48990) -- [czeti/CVE-2024-48990_needrestart](https://github.com/czeti/CVE-2024-48990_needrestart) - [Serner77/CVE-2024-48990-Automatic-Exploit](https://github.com/Serner77/CVE-2024-48990-Automatic-Exploit) - [mladicstefan/CVE-2024-48990](https://github.com/mladicstefan/CVE-2024-48990) - [Mr-DJ/CVE-2024-48990](https://github.com/Mr-DJ/CVE-2024-48990) @@ -29604,13 +28382,6 @@ - [BLUEBERRYP1LL/CVE-2024-48990](https://github.com/BLUEBERRYP1LL/CVE-2024-48990) - [kikechans/-Linux-PrivEsc-CVE-2024-48990](https://github.com/kikechans/-Linux-PrivEsc-CVE-2024-48990) -### CVE-2024-49019 (2024-11-12) - -Active Directory Certificate Services Elevation of Privilege Vulnerability - - -- [rayngnpc/CVE-2024-49019-rayng](https://github.com/rayngnpc/CVE-2024-49019-rayng) - ### CVE-2024-49039 (2024-11-12) Windows Task Scheduler Elevation of Privilege Vulnerability @@ -29631,7 +28402,6 @@ Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability -- [0xMetr0/metasploit-ldapnightmare](https://github.com/0xMetr0/metasploit-ldapnightmare) - [alphatin123/CVE-2024-49113](https://github.com/alphatin123/CVE-2024-49113) - [razureink/cve-2024-49113-ldap_nightmare_reproduction](https://github.com/razureink/cve-2024-49113-ldap_nightmare_reproduction) @@ -29647,12 +28417,7 @@ Windows Common Log File System Driver Elevation of Privilege Vulnerability -- [MrAle98/CVE-2024-49138-POC](https://github.com/MrAle98/CVE-2024-49138-POC) -- [bananoname/CVE-2024-49138-POC](https://github.com/bananoname/CVE-2024-49138-POC) -- [DeividasTerechovas/SOC335-CVE-2024-49138-Exploitation-Detected](https://github.com/DeividasTerechovas/SOC335-CVE-2024-49138-Exploitation-Detected) -- [CyprianAtsyor/letsdefend-cve-2024-49138-investigation](https://github.com/CyprianAtsyor/letsdefend-cve-2024-49138-investigation) - [Bridg3Ops/SOC335-CVE-2024-49138-Exploitation-Detected](https://github.com/Bridg3Ops/SOC335-CVE-2024-49138-Exploitation-Detected) -- [onixgod/SOC335-Event-ID-313-CVE-2024-49138-Exploitation-Detected--Lest-Defend-Writeup](https://github.com/onixgod/SOC335-Event-ID-313-CVE-2024-49138-Exploitation-Detected--Lest-Defend-Writeup) - [Zedocun/soc-investigation-powershell-edrfreeze](https://github.com/Zedocun/soc-investigation-powershell-edrfreeze) - [vettrivel007/CVE-2024-49138](https://github.com/vettrivel007/CVE-2024-49138) @@ -29698,20 +28463,6 @@ - [RandomRobbieBF/CVE-2024-49607](https://github.com/RandomRobbieBF/CVE-2024-49607) -### CVE-2024-49653 (2024-10-23) - -Unrestricted Upload of File with Dangerous Type vulnerability in james-eggers Portfolleo portfolleo allows Upload a Web Shell to a Web Server.This issue affects Portfolleo: from n/a through <= 1.2. - - -- [Nxploited/CVE-2024-49653](https://github.com/Nxploited/CVE-2024-49653) - -### CVE-2024-49668 (2024-10-23) - -Unrestricted Upload of File with Dangerous Type vulnerability in christopherdewese1099 Verbalize WP verbalize-wp allows Upload a Web Shell to a Web Server.This issue affects Verbalize WP: from n/a through <= 1.0. - - -- [Nxploited/CVE-2024-49668](https://github.com/Nxploited/CVE-2024-49668) - ### CVE-2024-49681 (2024-10-24) Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in activity-log.com WP Sessions Time Monitoring Full Automatic activitytime allows SQL Injection.This issue affects WP Sessions Time Monitoring Full Automatic: from n/a through <= 1.0.9. @@ -29780,8 +28531,6 @@ - [dragonked2/CVE-2024-50379-POC](https://github.com/dragonked2/CVE-2024-50379-POC) - [dkstar11q/CVE-2024-50379-nuclei](https://github.com/dkstar11q/CVE-2024-50379-nuclei) - [Lux-J/CVE-2024-50379-exp](https://github.com/Lux-J/CVE-2024-50379-exp) -- [pwnosec/CVE-2024-50379](https://github.com/pwnosec/CVE-2024-50379) -- [thunww/CVE-2024-50379](https://github.com/thunww/CVE-2024-50379) - [azilRababe/CVE-2024-50379](https://github.com/azilRababe/CVE-2024-50379) ### CVE-2024-50395 (2024-11-22) @@ -29875,13 +28624,6 @@ - [RandomRobbieBF/CVE-2024-50490](https://github.com/RandomRobbieBF/CVE-2024-50490) -### CVE-2024-50492 (2024-10-28) - -Improper Control of Generation of Code ('Code Injection') vulnerability in Scott Paterson ScottCart scottcart allows Code Injection.This issue affects ScottCart: from n/a through <= 1.1. - - -- [Nxploited/CVE-2024-50492](https://github.com/Nxploited/CVE-2024-50492) - ### CVE-2024-50493 (2024-10-29) Unrestricted Upload of File with Dangerous Type vulnerability in masterhomepage Automatic Translation automatic-translation allows Upload a Web Shell to a Web Server.This issue affects Automatic Translation: from n/a through <= 1.0.4. @@ -29934,13 +28676,6 @@ - [JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2024-50526](https://github.com/JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2024-50526) -### CVE-2024-50562 (2025-06-10) - -An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL-VPN version 7.6.0, version 7.4.6 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions may allow an attacker in possession of a cookie used to log in the SSL-VPN portal to log in again, although the session has expired or was logged out. - - -- [Shahid-BugB/fortinet-cve-2024-50562](https://github.com/Shahid-BugB/fortinet-cve-2024-50562) - ### CVE-2024-50602 (2024-10-27) An issue was discovered in libexpat before 2.6.4. There is a crash within the XML_ResumeParser function because XML_StopParser can stop/suspend an unstarted parser. @@ -29956,7 +28691,6 @@ - [watchtowrlabs/CVE-2024-50623](https://github.com/watchtowrlabs/CVE-2024-50623) - [verylazytech/CVE-2024-50623](https://github.com/verylazytech/CVE-2024-50623) - [iSee857/Cleo-CVE-2024-50623-PoC](https://github.com/iSee857/Cleo-CVE-2024-50623-PoC) -- [congdong007/CVE-2024-50623-poc](https://github.com/congdong007/CVE-2024-50623-poc) ### CVE-2024-50629 (2025-03-19) @@ -30183,13 +28917,6 @@ - [ajayalf/CVE-2024-51567](https://github.com/ajayalf/CVE-2024-51567) - [thehash007/CVE-2024-51567-RCE-EXPLOIT](https://github.com/thehash007/CVE-2024-51567-RCE-EXPLOIT) -### CVE-2024-51568 (2024-10-29) - -CyberPanel (aka Cyber Panel) before 2.3.5 allows Command Injection via completePath in the ProcessUtilities.outputExecutioner() sink. There is /filemanager/upload (aka File Manager upload) unauthenticated remote code execution via shell metacharacters. - - -- [jsnv-dev/CVE-2024-51568---CyberPanel-Command-Injection-Nuclei-Template](https://github.com/jsnv-dev/CVE-2024-51568---CyberPanel-Command-Injection-Nuclei-Template) - ### CVE-2024-51665 (2024-11-04) Server-Side Request Forgery (SSRF) vulnerability in Noor Alam Magical Addons For Elementor magical-addons-for-elementor allows Server Side Request Forgery.This issue affects Magical Addons For Elementor: from n/a through <= 1.2.1. @@ -30204,13 +28931,6 @@ - [l20170217b/CVE-2024-51747](https://github.com/l20170217b/CVE-2024-51747) -### CVE-2024-51788 (2024-11-11) - -Unrestricted Upload of File with Dangerous Type vulnerability in Joshua Wolfe The Novel Design Store Directory noveldesign-store-directory allows Upload a Web Shell to a Web Server.This issue affects The Novel Design Store Directory: from n/a through <= 4.3.0. - - -- [Nxploited/CVE-2024-51788](https://github.com/Nxploited/CVE-2024-51788) - ### CVE-2024-51791 (2024-11-11) Unrestricted Upload of File with Dangerous Type vulnerability in Made I.T. Forms forms-by-made-it allows Upload a Web Shell to a Web Server.This issue affects Forms: from n/a through <= 2.8.0. @@ -30223,25 +28943,10 @@ Unrestricted Upload of File with Dangerous Type vulnerability in Ateeq Rafeeq RepairBuddy computer-repair-shop allows Upload a Web Shell to a Web Server.This issue affects RepairBuddy: from n/a through <= 3.8115. -- [Nxploited/CVE-2024-51793](https://github.com/Nxploited/CVE-2024-51793) - [KTN1990/CVE-2024-51793](https://github.com/KTN1990/CVE-2024-51793) - [0axz-tools/CVE-2024-51793](https://github.com/0axz-tools/CVE-2024-51793) - [JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2024-51793](https://github.com/JoshuaProvoste/0-click-RCE-Exploit-for-CVE-2024-51793) -### CVE-2024-51977 (2025-06-25) - -An unauthenticated attacker who can access either the HTTP service (TCP port 80), the HTTPS service (TCP port 443), or the IPP service (TCP port 631), can leak several pieces of sensitive information from a vulnerable device. The URI path /etc/mnt_info.csv can be accessed via a GET request and no authentication is required. The returned result is a comma separated value (CSV) table of information. The leaked information includes the device’s model, firmware version, IP address, and serial number. - - -- [sfewer-r7/BrotherVulnerabilities](https://github.com/sfewer-r7/BrotherVulnerabilities) - -### CVE-2024-51996 (2024-11-13) - -Symphony process is a module for the Symphony PHP framework which executes commands in sub-processes. When consuming a persisted remember-me cookie, Symfony does not check if the username persisted in the database matches the username attached with the cookie, leading to authentication bypass. This vulnerability is fixed in 5.4.47, 6.4.15, and 7.1.8. - - -- [moften/CVE-2024-51996](https://github.com/moften/CVE-2024-51996) - ### CVE-2024-52002 (2024-11-08) Combodo iTop is a simple, web based IT Service Management tool. Several url endpoints are subject to a Cross-Site Request Forgery (CSRF) vulnerability. Please refer to the linked GHSA for the complete list. This issue has been addressed in version 3.2.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability. @@ -30256,13 +28961,6 @@ - [andrewd-cg/cve-2024-52005-poc](https://github.com/andrewd-cg/cve-2024-52005-poc) -### CVE-2024-52010 (2024-11-12) - -Zoraxy is a general purpose HTTP reverse proxy and forwarding tool. A command injection vulnerability in the Web SSH feature allows an authenticated attacker to execute arbitrary commands as root on the host. Zoraxy has a Web SSH terminal feature that allows authenticated users to connect to SSH servers from their browsers. In HandleCreateProxySession the request to create an SSH session is handled. An attacker can exploit the username variable to escape from the bash command and inject arbitrary commands into sshCommand. This is possible, because, unlike hostname and port, the username is not validated or sanitized. - - -- [iuds/-CVE-2024-52010-](https://github.com/iuds/-CVE-2024-52010-) - ### CVE-2024-52011 (2026-06-01) launch-editor allows users to open files with line numbers in editor from Node.js. Prior to version 2.9.0, due to the insufficient sanitization of the `file` argument in the `launchEditor`, an attacker can execute arbitrary commands on Windows by supplying a filename that contains special characters. This issue has been fixed in the `launch-editor` version 2.9.0, corresponding to vite version 5.4.9. @@ -30307,13 +29005,6 @@ - [TAM-K592/CVE-2024-52318](https://github.com/TAM-K592/CVE-2024-52318) -### CVE-2024-52375 (2024-11-14) - -Unrestricted Upload of File with Dangerous Type vulnerability in Arttia Creative Datasets Manager by Arttia Creative datasets-manager-by-arttia-creative.This issue affects Datasets Manager by Arttia Creative: from n/a through <= 1.5. - - -- [Nxploited/CVE-2024-52375](https://github.com/Nxploited/CVE-2024-52375) - ### CVE-2024-52380 (2024-11-14) Unrestricted Upload of File with Dangerous Type vulnerability in softpulseinfotech Picsmize picsmize allows Upload a Web Shell to a Web Server.This issue affects Picsmize: from n/a through <= 1.0.0. @@ -30328,13 +29019,6 @@ - [RandomRobbieBF/CVE-2024-52382](https://github.com/RandomRobbieBF/CVE-2024-52382) -### CVE-2024-52402 (2024-11-19) - -Cross-Site Request Forgery (CSRF) vulnerability in gunghoinc Exclusive Content Password Protect exclusive-content-password-protect allows Upload a Web Shell to a Web Server.This issue affects Exclusive Content Password Protect: from n/a through <= 1.1.0. - - -- [Nxploited/CVE-2024-52402](https://github.com/Nxploited/CVE-2024-52402) - ### CVE-2024-52429 (2024-11-18) Unrestricted Upload of File with Dangerous Type vulnerability in AntonHoelstad WP Quick Setup wp-quick-setup allows Upload a Web Shell to a Web Server.This issue affects WP Quick Setup: from n/a through <= 2.0. @@ -30370,13 +29054,6 @@ - [d-xuan/CVE-2024-52510](https://github.com/d-xuan/CVE-2024-52510) -### CVE-2024-52550 (2024-11-13) - -Jenkins Pipeline: Groovy Plugin 3990.vd281dd77a_388 and earlier, except 3975.3977.v478dd9e956c3 does not check whether the main (Jenkinsfile) script for a rebuilt build is approved, allowing attackers with Item/Build permission to rebuild a previous build whose (Jenkinsfile) script is no longer approved. - - -- [Anton-ai111/CVE-2024-52550](https://github.com/Anton-ai111/CVE-2024-52550) - ### CVE-2024-52711 (2024-11-19) DI-8100 v16.07.26A1 is vulnerable to Buffer Overflow In the ip_position_asp function via the ip parameter. @@ -30384,13 +29061,6 @@ - [14mb1v45h/cyberspace-CVE-2024-52711](https://github.com/14mb1v45h/cyberspace-CVE-2024-52711) -### CVE-2024-52794 (2024-12-19) - -Discourse is an open source platform for community discussion. Users clicking on the lightbox thumbnails could be affected. This problem is patched in the latest version of Discourse. Users are advised to upgrade. There are no known workarounds for this vulnerability. - - -- [Beesco00/CVE-2024-52794-Discourse-Stored-XSS](https://github.com/Beesco00/CVE-2024-52794-Discourse-Stored-XSS) - ### CVE-2024-52800 (2024-11-29) veraPDF is an open source PDF/A validation library. Executing policy checks using custom schematron files via the CLI invokes an XSL transformation that may theoretically lead to a remote code execution (RCE) vulnerability. This doesn't affect the standard validation and policy checks functionality, veraPDF's common use cases. Most veraPDF users don't insert any custom XSLT code into policy profiles, which are based on Schematron syntax rather than direct XSL transforms. For users who do, only load custom policy files from sources you trust. This issue has not yet been patched. Users are advised to be cautious of XSLT code until a patch is available. @@ -30413,13 +29083,6 @@ - [ebrasha/abdal-anydesk-remote-ip-detector](https://github.com/ebrasha/abdal-anydesk-remote-ip-detector) - [MKultra6969/AnySniff](https://github.com/MKultra6969/AnySniff) -### CVE-2024-53027 (2025-03-03) - -Transient DOS may occur while processing the country IE. - - -- [ladyg00se/CVE-2024-53027-WIP](https://github.com/ladyg00se/CVE-2024-53027-WIP) - ### CVE-2024-53104 (2024-12-02) In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format\n\nThis can lead to out of bounds writes since frames of this type were not\ntaken into account when calculating the size of the frames buffer in\nuvc_parse_streaming. @@ -30469,13 +29132,6 @@ - [AbdullahAlmutawa/CVE-2024-53476](https://github.com/AbdullahAlmutawa/CVE-2024-53476) -### CVE-2024-53591 (2025-04-18) - -An issue in the login page of Seclore v3.27.5.0 allows attackers to bypass authentication via a brute force attack. - - -- [aljoharasubaie/CVE-2024-53591](https://github.com/aljoharasubaie/CVE-2024-53591) - ### CVE-2024-53615 (2025-01-30) A command injection vulnerability in the video thumbnail rendering component of Karl Ward's files.gallery v0.3.0 through 0.11.0 allows remote attackers to execute arbitrary code via a crafted video file. @@ -30504,54 +29160,18 @@ - [c4oocO/CVE-2024-53677-Docker](https://github.com/c4oocO/CVE-2024-53677-Docker) - [dustblessnotdust/CVE-2024-53677-S2-067-thread](https://github.com/dustblessnotdust/CVE-2024-53677-S2-067-thread) - [hiteshpatra/CVE-2024-53677](https://github.com/hiteshpatra/CVE-2024-53677) -- [SeanRickerd/CVE-2024-53677](https://github.com/SeanRickerd/CVE-2024-53677) -- [hopsypopsy8/CVE-2024-53677-Exploitation](https://github.com/hopsypopsy8/CVE-2024-53677-Exploitation) -- [shishirghimir/CVE-2024-53677-Exploit](https://github.com/shishirghimir/CVE-2024-53677-Exploit) -- [BuludX/CVE-2024-53677](https://github.com/BuludX/CVE-2024-53677) -- [r007sec/CVE-2024-53677](https://github.com/r007sec/CVE-2024-53677) - [Cythonic1/CVE-2024-53677-POC](https://github.com/Cythonic1/CVE-2024-53677-POC) - [seoyoung-kang/CVE-2024-53677](https://github.com/seoyoung-kang/CVE-2024-53677) - [sangrok-jeon/CVE-2024-53677-Analysis](https://github.com/sangrok-jeon/CVE-2024-53677-Analysis) - [ctfsec/CVE-2024-53677](https://github.com/ctfsec/CVE-2024-53677) -### CVE-2024-53703 (2024-12-05) - -A vulnerability in the SonicWall SMA100 SSLVPN firmware 10.2.1.13-72sv and earlier versions mod_httprp library loaded by the Apache web server allows remote attackers to cause Stack-based buffer overflow and potentially lead to code execution. - - -- [scrt/cve-2024-53703-poc](https://github.com/scrt/cve-2024-53703-poc) - ### CVE-2024-53704 (2025-01-09) An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication. -- [sfewer-r7/SonicSessionLeak](https://github.com/sfewer-r7/SonicSessionLeak) -- [istagmbh/CVE-2024-53704](https://github.com/istagmbh/CVE-2024-53704) - [anir0y/sonicwall-audit-toolkit](https://github.com/anir0y/sonicwall-audit-toolkit) -### CVE-2024-53900 (2024-12-02) - -Mongoose before 8.8.3 can improperly use $where in match, leading to search injection. - - -- [Gokul-Krishnan-V-R/CVE-2024-53900](https://github.com/Gokul-Krishnan-V-R/CVE-2024-53900) -- [www-spam/CVE-2024-53900](https://github.com/www-spam/CVE-2024-53900) - -### CVE-2024-53924 (2025-04-17) - -Pycel through 1.0b30, when operating on an untrusted spreadsheet, allows code execution via a crafted formula in a cell, such as one beginning with the =IF(A1=200, eval("__import__('os').system( substring. - - -- [aelmosalamy/CVE-2024-53924](https://github.com/aelmosalamy/CVE-2024-53924) - -### CVE-2024-54085 (2025-03-11) - -AMI’s SPx contains\na vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation\nof this vulnerability may lead to a loss of confidentiality, integrity, and/or\navailability. - - -- [Mr-Zapi/CVE-2024-54085](https://github.com/Mr-Zapi/CVE-2024-54085) - ### CVE-2024-54152 (2024-12-10) Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to version 1.4.3, an attacker can write a malicious expression that escapes the sandbox to execute arbitrary code on the system. With a more complex (undisclosed) payload, one can get full access to Arbitrary code execution on the system. The problem has been patched in version 1.4.3 of Angular Expressions. Two possible workarounds are available. One may either disable access to `__proto__` globally or make sure that one uses the function with just one argument. @@ -30566,13 +29186,6 @@ - [Jflye/CVE-2024-54160-Opensearch-HTML-And-Injection-Stored-XSS](https://github.com/Jflye/CVE-2024-54160-Opensearch-HTML-And-Injection-Stored-XSS) -### CVE-2024-54239 (2024-12-13) - -Missing Authorization vulnerability in dugudlabs Eyewear prescription form eyewear-prescription-form allows Privilege Escalation.This issue affects Eyewear prescription form: from n/a through <= 4.0.18. - - -- [RandomRobbieBF/CVE-2024-54239](https://github.com/RandomRobbieBF/CVE-2024-54239) - ### CVE-2024-54262 (2024-12-13) Unrestricted Upload of File with Dangerous Type vulnerability in sidngr Import Export For WooCommerce import-export-for-woocommerce allows Upload a Web Shell to a Web Server.This issue affects Import Export For WooCommerce: from n/a through <= 1.6.2. @@ -30601,27 +29214,6 @@ - [RandomRobbieBF/CVE-2024-54379](https://github.com/RandomRobbieBF/CVE-2024-54379) -### CVE-2024-54383 (2024-12-18) - -Incorrect Privilege Assignment vulnerability in wpweb WooCommerce PDF Vouchers woocommerce-pdf-vouchers allows Privilege Escalation.This issue affects WooCommerce PDF Vouchers: from n/a through < 4.9.9. - - -- [pashayogi/CVE-2024-54383](https://github.com/pashayogi/CVE-2024-54383) - -### CVE-2024-54498 (2024-12-11) - -A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. An app may be able to break out of its sandbox. - - -- [wh1te4ever/CVE-2024-54498-PoC](https://github.com/wh1te4ever/CVE-2024-54498-PoC) - -### CVE-2024-54507 (2025-01-27) - -A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2. An attacker with user privileges may be able to read kernel memory. - - -- [jprx/CVE-2024-54507](https://github.com/jprx/CVE-2024-54507) - ### CVE-2024-54679 (2024-12-05) CyberPanel (aka Cyber Panel) before 6778ad1 does not require the FilemanagerAdmin capability for restartMySQL actions. @@ -30643,14 +29235,6 @@ - [nscan9/CVE-2024-54761](https://github.com/nscan9/CVE-2024-54761) -### CVE-2024-54772 (2025-02-11) - -An issue was discovered in the Winbox service of MikroTik RouterOS long-term release v6.43.13 through v6.49.13 and stable v6.43 through v7.17.2. A patch is available in the stable release v6.49.18. A discrepancy in response size between connection attempts made with a valid username and those with an invalid username allows attackers to enumerate for valid accounts. - - -- [deauther890/CVE-2024-54772](https://github.com/deauther890/CVE-2024-54772) -- [Seven11Eleven/CVE-2024-54772](https://github.com/Seven11Eleven/CVE-2024-54772) - ### CVE-2024-54819 (2025-01-07) I, Librarian before and including 5.11.1 is vulnerable to Server-Side Request Forgery (SSRF) due to improper input validation in classes/security/validation.php @@ -30665,20 +29249,6 @@ - [jcarabantes/CVE-2024-54820](https://github.com/jcarabantes/CVE-2024-54820) -### CVE-2024-54879 (2025-01-06) - -SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an attacker to allow any user to recharge members indefinitely. - - -- [ailenye/CVE-2024-54879](https://github.com/ailenye/CVE-2024-54879) - -### CVE-2024-54880 (2025-01-06) - -SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an attacker to allow any user to register accounts in bulk. - - -- [ailenye/CVE-2024-54880](https://github.com/ailenye/CVE-2024-54880) - ### CVE-2024-54887 (2025-01-09) TP-Link TL-WR940N V3 and V4 with firmware 3.16.9 and earlier contain a buffer overflow via the dnsserver1 and dnsserver2 parameters at /userRpm/Wan6to4TunnelCfgRpm.htm. This vulnerability allows an authenticated attacker to execute arbitrary code on the remote device in the context of the root user. @@ -30686,20 +29256,6 @@ - [Gumbraise/CVE-2024-54887-PoC](https://github.com/Gumbraise/CVE-2024-54887-PoC) -### CVE-2024-54916 (2025-02-11) - -An issue in the SharedConfig class of Telegram Android APK v.11.7.0 allows a physically proximate attacker to bypass authentication and escalate privileges by manipulating the return value of the checkPasscode method. - - -- [SAHALLL/CVE-2024-54916](https://github.com/SAHALLL/CVE-2024-54916) - -### CVE-2024-54951 (2025-02-13) - -Monica 4.1.2 is vulnerable to Cross Site Scripting (XSS). A malicious user can create a malformed contact and use that contact in the "HOW YOU MET" customization options to trigger the XSS. - - -- [Allevon412/CVE-2024-54951](https://github.com/Allevon412/CVE-2024-54951) - ### CVE-2024-55040 (2025-07-21) Cross Site Scripting vulnerability in Sensaphone WEB600 Monitoring System v.1.6.5.H and before allows a remote attacker to execute arbitrary code via a crafted GET requests to /@.xml, placing payloads in the g7200, g7300, g4601, and g1F02 parameters. @@ -30707,13 +29263,6 @@ - [tcbutler320/CVE-2024-55040-Sensaphone-XSS](https://github.com/tcbutler320/CVE-2024-55040-Sensaphone-XSS) -### CVE-2024-55060 (2025-03-13) - -A cross-site scripting (XSS) vulnerability in the component index.php of Rafed CMS Website v1.44 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. - - -- [bigzooooz/CVE-2024-55060](https://github.com/bigzooooz/CVE-2024-55060) - ### CVE-2024-55099 (2024-12-12) A SQL Injection vulnerability was found in /admin/index.php in phpgurukul Online Nurse Hiring System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the username parameter. @@ -30755,9 +29304,6 @@ - [shoaibalam112/CVE-2024-55271](https://github.com/shoaibalam112/CVE-2024-55271) -### CVE-2024-55347 -- [sahil3276/CVE-2024-55347](https://github.com/sahil3276/CVE-2024-55347) - ### CVE-2024-55374 (2026-01-02) REDCap 14.3.13 allows an attacker to enumerate usernames due to an observable discrepancy between login attempts. @@ -30765,13 +29311,6 @@ - [T3slaa/CVE-2024-55374](https://github.com/T3slaa/CVE-2024-55374) -### CVE-2024-55466 (2025-05-12) - -An arbitrary file upload vulnerability in the Image Gallery of ThingsBoard Community, ThingsBoard Cloud and ThingsBoard Professional v3.8.1 allows attackers to execute arbitrary code via uploading a crafted file. - - -- [cybsecsid/ThingsBoard-IoT-Platform-CVE-2024-55466](https://github.com/cybsecsid/ThingsBoard-IoT-Platform-CVE-2024-55466) - ### CVE-2024-55503 (2025-01-15) An issue in termius before v.9.9.0 allows a local attacker to execute arbitrary code via a crafted script to the DYLD_INSERT_LIBRARIES component. @@ -30779,27 +29318,6 @@ - [SyFi/CVE-2024-55503](https://github.com/SyFi/CVE-2024-55503) -### CVE-2024-55504 (2025-01-21) - -An issue in RAR Extractor - Unarchiver Free and Pro v.6.4.0 allows local attackers to inject arbitrary code potentially leading to remote control and unauthorized access to sensitive user data via the exploit_combined.dylib component on MacOS. - - -- [SyFi/CVE-2024-55504](https://github.com/SyFi/CVE-2024-55504) - -### CVE-2024-55511 (2025-01-16) - -A null pointer dereference vulnerability in Macrium Reflect prior to 8.1.8017 allows a local attacker to cause a system crash or potentially elevate their privileges via executing a specially crafted executable. - - -- [nikosecurity/CVE-2024-55511](https://github.com/nikosecurity/CVE-2024-55511) - -### CVE-2024-55555 (2025-01-07) - -Invoice Ninja before 5.10.43 allows remote code execution from a pre-authenticated route when an attacker knows the APP_KEY. This is exacerbated by .env files, available from the product's repository, that have default APP_KEY values. The route/{hash} route defined in the invoiceninja/routes/client.php file can be accessed without authentication. The parameter {hash} is passed to the function decrypt that expects a Laravel ciphered value containing a serialized object. (Furthermore, Laravel contains several gadget chains usable to trigger remote command execution from arbitrary deserialization.) Therefore, an attacker in possession of the APP_KEY is able to fully control a string passed to an unserialize function. - - -- [Yucaerin/CVE-2024-55555](https://github.com/Yucaerin/CVE-2024-55555) - ### CVE-2024-55557 (2024-12-16) ui/pref/ProxyPrefView.java in weasis-core in Weasis 4.5.1 has a hardcoded key for symmetric encryption of proxy credentials. @@ -30814,26 +29332,6 @@ - [CSIRTTrizna/CVE-2024-55587](https://github.com/CSIRTTrizna/CVE-2024-55587) -### CVE-2024-55591 (2025-01-14) - -An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16 and FortiProxy version 7.0.0 through 7.0.19 and 7.2.0 through 7.2.12 allows a remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module. - - -- [sysirq/fortios-auth-bypass-poc-CVE-2024-55591](https://github.com/sysirq/fortios-auth-bypass-poc-CVE-2024-55591) -- [sysirq/fortios-auth-bypass-exploit-CVE-2024-55591](https://github.com/sysirq/fortios-auth-bypass-exploit-CVE-2024-55591) -- [virus-or-not/CVE-2024-55591](https://github.com/virus-or-not/CVE-2024-55591) -- [watchtowrlabs/fortios-auth-bypass-poc-CVE-2024-55591](https://github.com/watchtowrlabs/fortios-auth-bypass-poc-CVE-2024-55591) -- [exfil0/CVE-2024-55591-POC](https://github.com/exfil0/CVE-2024-55591-POC) -- [0x7556/CVE-2024-55591](https://github.com/0x7556/CVE-2024-55591) -- [UMChacker/CVE-2024-55591-POC](https://github.com/UMChacker/CVE-2024-55591-POC) - -### CVE-2024-55656 (2025-01-08) - -RedisBloom adds a set of probabilistic data structures to Redis. There is an integer overflow vulnerability in RedisBloom, which is a module used in Redis. The integer overflow vulnerability allows an attacker (a redis client which knows the password) to allocate memory in the heap lesser than the required memory due to wraparound. Then read and write can be performed beyond this allocated memory, leading to info leak and OOB write. The integer overflow is in CMS.INITBYDIM command, which initialize a Count-Min Sketch to dimensions specified by user. It accepts two values (width and depth) and uses them to allocate memory in NewCMSketch(). This vulnerability is fixed in 2.2.19, 2.4.12, 2.6.14, and 2.8.2. - - -- [rick2600/redis-stack-CVE-2024-55656](https://github.com/rick2600/redis-stack-CVE-2024-55656) - ### CVE-2024-55875 (2024-12-12) http4k is a functional toolkit for Kotlin HTTP applications. Prior to version 6.50.0.0, there is a potential XXE (XML External Entity Injection) vulnerability when http4k handling malicious XML contents within requests, which might allow attackers to read local sensitive information on server, trigger Server-side Request Forgery and even execute code under some circumstances. The original fix shipped in v5.41.0.0 / v4.50.0.0 closed the documented external-entity attack class (SSRF, local-file disclosure, code execution) by setting `ACCESS_EXTERNAL_DTD=""`, `ACCESS_EXTERNAL_SCHEMA=""`, and `isExpandEntityReferences=false` on the default `DocumentBuilderFactory`. A residual gap remained: the parser still accepted documents containing `<!DOCTYPE>` declarations even though external entity resolution was blocked. This left open billion-laughs-style internal entity expansion DoS attacks against any application using `Body.xml()` or `Document.asXmlDocument()` on untrusted XML. v6.50.0.0 closes this residual by adding `disallow-doctype-decl=true` and `FEATURE_SECURE_PROCESSING=true` to `defaultXmlParsingConfig`. Any document containing a `<!DOCTYPE>` is now rejected at parse time. @@ -30841,20 +29339,6 @@ - [JAckLosingHeart/CVE-2024-55875](https://github.com/JAckLosingHeart/CVE-2024-55875) -### CVE-2024-55890 (2024-12-13) - -D-Tale is a visualizer for pandas data structures. Prior to version 3.16.1, users hosting D-Tale publicly can be vulnerable to remote code execution allowing attackers to run malicious code on the server. Users should upgrade to version 3.16.1 where the `update-settings` endpoint blocks the ability for users to update the `enable_custom_filters` flag. The only workaround for versions earlier than 3.16.1 is to only host D-Tale to trusted users. - - -- [samh4cks/CVE-2024-55890](https://github.com/samh4cks/CVE-2024-55890) - -### CVE-2024-55963 (2025-03-26) - -An issue was discovered in Appsmith before 1.51. A user on Appsmith that doesn't have admin permissions can trigger the restart API on Appsmith, causing a server restart. This is still within the Appsmith container, and the impact is limited to Appsmith's own server only, but there is a denial of service because it can be continually restarted. This is due to incorrect access control checks, which should check for super user permissions on the incoming request. - - -- [superswan/CVE-2024-55963](https://github.com/superswan/CVE-2024-55963) - ### CVE-2024-55968 (2025-01-28) An issue was discovered in DTEX DEC-M (DTEX Forwarder) 6.1.1. The com.dtexsystems.helper service, responsible for handling privileged operations within the macOS DTEX Event Forwarder agent, fails to implement critical client validation during XPC interprocess communication (IPC). Specifically, the service does not verify the code requirements, entitlements, security flags, or version of any client attempting to establish a connection. This lack of proper logic validation allows malicious actors to exploit the service's methods via unauthorized client connections, and escalate privileges to root by abusing the DTConnectionHelperProtocol protocol's submitQuery method over an unauthorized XPC connection. @@ -30863,13 +29347,6 @@ - [Wi1DN00B/CVE-2024-55968](https://github.com/Wi1DN00B/CVE-2024-55968) - [null-event/CVE-2024-55968](https://github.com/null-event/CVE-2024-55968) -### CVE-2024-56071 (2024-12-31) - -Incorrect Privilege Assignment vulnerability in mikeleembruggen Simple Dashboard simple-dashboard allows Privilege Escalation.This issue affects Simple Dashboard: from n/a through <= 2.0. - - -- [Nxploited/CVE-2024-56071](https://github.com/Nxploited/CVE-2024-56071) - ### CVE-2024-56115 (2024-12-18) A vulnerability in Amiro.CMS before 7.8.4 exists due to the failure to take measures to neutralize special elements. It allows remote attackers to conduct a Cross-Site Scripting (XSS) attack. @@ -30891,22 +29368,6 @@ - [Chocapikk/CVE-2024-56145](https://github.com/Chocapikk/CVE-2024-56145) - [Sachinart/CVE-2024-56145-craftcms-rce](https://github.com/Sachinart/CVE-2024-56145-craftcms-rce) -- [hmhlol/craft-cms-RCE-CVE-2024-56145](https://github.com/hmhlol/craft-cms-RCE-CVE-2024-56145) - -### CVE-2024-56249 (2025-01-02) - -Unrestricted Upload of File with Dangerous Type vulnerability in Ludwig You WPMasterToolKit wpmastertoolkit allows Upload a Web Shell to a Web Server.This issue affects WPMasterToolKit: from n/a through <= 1.13.1. - - -- [Nxploited/CVE-2024-56249](https://github.com/Nxploited/CVE-2024-56249) - -### CVE-2024-56264 (2025-01-02) - -Unrestricted Upload of File with Dangerous Type vulnerability in Beee ACF City Selector acf-city-selector allows Upload a Web Shell to a Web Server.This issue affects ACF City Selector: from n/a through <= 1.14.0. - - -- [Nxploited/CVE-2024-56264](https://github.com/Nxploited/CVE-2024-56264) -- [dpakmrya/CVE-2024-56264](https://github.com/dpakmrya/CVE-2024-56264) ### CVE-2024-56331 (2024-12-20) @@ -30929,20 +29390,6 @@ - [Creeeeger/CVE-2024-56426](https://github.com/Creeeeger/CVE-2024-56426) -### CVE-2024-56428 (2025-05-21) - -The local iLabClient database in itech iLabClient 3.7.1 allows local attackers to read cleartext credentials (from the CONFIGS table) for their servers configured in the client. - - -- [lisa-2905/CVE-2024-56428](https://github.com/lisa-2905/CVE-2024-56428) - -### CVE-2024-56429 (2025-05-21) - -itech iLabClient 3.7.1 relies on the hard-coded YngAYdgAE/kKZYu2F2wm6w== key (found in iLabClient.jar) for local users to read or write to the database. - - -- [lisa-2905/CVE-2024-56429](https://github.com/lisa-2905/CVE-2024-56429) - ### CVE-2024-56431 (2024-12-25) oc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid negative left shift. NOTE: this is disputed by third parties because there is no evidence of a security impact, e.g., an application would not crash. @@ -30957,55 +29404,6 @@ - [cyhe50/cve-2024-56800-poc](https://github.com/cyhe50/cve-2024-56800-poc) -### CVE-2024-56801 (2024-12-30) - -Tasklists provides plugin tasklists for GLPI. Versions prior to 2.0.4 have a blind SQL injection vulnerability. Version 2.0.4 contains a patch for the vulnerability. - - -- [kz0xpwn/CVE-2024-56801](https://github.com/kz0xpwn/CVE-2024-56801) - -### CVE-2024-56882 (2025-02-18) - -Sage DPW before 2024_12_000 is vulnerable to Cross Site Scripting (XSS). Low-privileged Sage users with employee role privileges can permanently store JavaScript code in the Kurstitel and Kurzinfo input fields. The injected payload is executed for each authenticated user who views and interacts with the modified data elements. - - -- [trustcves/CVE-2024-56882](https://github.com/trustcves/CVE-2024-56882) - -### CVE-2024-56883 (2025-02-18) - -Sage DPW before 2024_12_001 is vulnerable to Incorrect Access Control. The implemented role-based access controls are not always enforced on the server side. Low-privileged Sage users with employee role privileges can create external courses for other employees, even though they do not have the option to do so in the user interface. To do this, a valid request to create a course simply needs to be modified, so that the current user ID in the "id" parameter is replaced with the ID of another user. - - -- [trustcves/CVE-2024-56883](https://github.com/trustcves/CVE-2024-56883) - -### CVE-2024-56889 (2025-02-06) - -Incorrect access control in the endpoint /admin/m_delete.php of CodeAstro Complaint Management System v1.0 allows unauthorized attackers to arbitrarily delete complaints via modification of the id parameter. - - -- [vigneshr232/CVE-2024-56889](https://github.com/vigneshr232/CVE-2024-56889) - -### CVE-2024-56924 (2025-01-22) - -A Cross Site Request Forgery (CSRF) vulnerability in Code Astro Internet banking system 2.0.0 allows remote attackers to execute arbitrary JavaScript on the admin page (pages_account), potentially leading to unauthorized actions such as changing account settings or stealing sensitive user information. This vulnerability occurs due to improper validation of user requests, which enables attackers to exploit the system by tricking the admin user into executing malicious scripts. - - -- [ipratheep/CVE-2024-56924](https://github.com/ipratheep/CVE-2024-56924) - -### CVE-2024-57040 (2025-02-26) - -TP-Link TL-WR845N devices with firmware TL-WR845N(UN)_V4_200909 and TL-WR845N(UN)_V4_190219 was discovered to contain a hardcoded password for the root account which can be obtained by analyzing downloaded firmware or via a brute force attack through physical access to the router. NOTE: The supplier has stated that this issue was fixed in firmware versions 250401 or later. - - -- [absholi7ly/Poc-CVE-2024-57040](https://github.com/absholi7ly/Poc-CVE-2024-57040) - -### CVE-2024-57175 (2025-02-03) - -A Stored Cross-Site Scripting (XSS) vulnerability was identified in the PHPGURUKUL Online Birth Certificate System v1.0 via the profile name to /user/certificate-form.php. - - -- [Ajmal101/CVE-2024-57175](https://github.com/Ajmal101/CVE-2024-57175) - ### CVE-2024-57241 (2025-02-11) Dedecms 5.71sp1 and earlier is vulnerable to URL redirect. In the web application, a logic error does not judge the input GET request resulting in URL redirection. @@ -31016,20 +29414,6 @@ ### CVE-2024-57366 - [h4ckusaur/CVE-2024-57366](https://github.com/h4ckusaur/CVE-2024-57366) -### CVE-2024-57373 (2025-01-27) - -Cross Site Request Forgery (CSRF) vulnerability in LifestyleStore v1.0 allows a remote attacker to execute unauthorized actions on behalf of an authenticated user, potentially leading to account modifications or data compromise. - - -- [cypherdavy/CVE-2024-57373](https://github.com/cypherdavy/CVE-2024-57373) - -### CVE-2024-57376 (2025-01-28) - -Buffer Overflow vulnerability in D-Link DSR-150, DSR-150N, DSR-250, DSR-250N, DSR-500N, DSR-1000N from 3.13 to 3.17B901C allows unauthenticated users to execute remote code execution. - - -- [DelspoN/CVE-2024-57376](https://github.com/DelspoN/CVE-2024-57376) - ### CVE-2024-57378 (2025-02-13) Wazuh SIEM version 4.8.2 is affected by a broken access control vulnerability. This issue allows the unauthorized creation of internal users without assigning any existing user role, potentially leading to privilege escalation or unauthorized access to sensitive resources. @@ -31037,51 +29421,6 @@ - [rxerium/CVE-2024-57378](https://github.com/rxerium/CVE-2024-57378) -### CVE-2024-57394 (2025-04-21) - -The quarantine - restore function in Qi-ANXIN Tianqing Endpoint Security Management System v10.0 allows user to restore a malicious file to an arbitrary file path. Attackers can write malicious DLL to system path and perform privilege escalation by leveraging Windows DLL hijacking vulnerabilities. - - -- [cwjchoi01/CVE-2024-57394](https://github.com/cwjchoi01/CVE-2024-57394) - -### CVE-2024-57427 (2025-02-06) - -PHPJabbers Cinema Booking System v2.0 is vulnerable to reflected cross-site scripting (XSS). Multiple endpoints improperly handle user input, allowing malicious scripts to execute in a victim’s browser. Attackers can craft malicious links to steal session cookies or conduct phishing attacks. - - -- [ahrixia/CVE-2024-57427](https://github.com/ahrixia/CVE-2024-57427) - -### CVE-2024-57428 (2025-02-06) - -A stored cross-site scripting (XSS) vulnerability in PHPJabbers Cinema Booking System v2.0 exists due to unsanitized input in file upload fields (event_img, seat_maps) and seat number configurations (number[new_X] in pjActionCreate). Attackers can inject persistent JavaScript, leading to phishing, malware injection, and session hijacking. - - -- [ahrixia/CVE-2024-57428](https://github.com/ahrixia/CVE-2024-57428) - -### CVE-2024-57429 (2025-02-06) - -A cross-site request forgery (CSRF) vulnerability in the pjActionUpdate function of PHPJabbers Cinema Booking System v2.0 allows remote attackers to escalate privileges by tricking an authenticated admin into submitting an unauthorized request. - - -- [ahrixia/CVE-2024-57429](https://github.com/ahrixia/CVE-2024-57429) - -### CVE-2024-57430 (2025-02-06) - -An SQL injection vulnerability in the pjActionGetUser function of PHPJabbers Cinema Booking System v2.0 allows attackers to manipulate database queries via the column parameter. Exploiting this flaw can lead to unauthorized information disclosure, privilege escalation, or database manipulation. - - -- [ahrixia/CVE-2024-57430](https://github.com/ahrixia/CVE-2024-57430) - -### CVE-2024-57484 -- [yogeswaran6383/CVE-2024-57484](https://github.com/yogeswaran6383/CVE-2024-57484) - -### CVE-2024-57514 (2025-01-28) - -The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting (XSS) due to improper handling of directory listing paths in the web interface. When a specially crafted URL is visited, the router's web page renders the directory listing and executes arbitrary JavaScript embedded in the URL. This allows the attacker to inject malicious code into the page, executing JavaScript on the victim's browser, which could then be used for further malicious actions. The vulnerability was identified in the 1.0.6 Build 20231011 rel.85717(5553) version. - - -- [rvzsec/CVE-2024-57514](https://github.com/rvzsec/CVE-2024-57514) - ### CVE-2024-57521 (2025-12-23) SQL Injection vulnerability in RuoYi v.4.7.9 and before allows a remote attacker to execute arbitrary code via the createTable function in SqlUtil.java. @@ -31089,27 +29428,6 @@ - [mrlihd/CVE-2024-57521-SQL-Injection-PoC](https://github.com/mrlihd/CVE-2024-57521-SQL-Injection-PoC) -### CVE-2024-57522 (2025-02-03) - -SourceCodester Packers and Movers Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in Users.php. An attacker can inject a malicious script into the username or name field during user creation. - - -- [HackWidMaddy/CVE-2024-57522](https://github.com/HackWidMaddy/CVE-2024-57522) - -### CVE-2024-57609 (2025-02-06) - -An issue in Kanaries Inc Pygwalker before v.0.4.9.9 allows a remote attacker to obtain sensitive information and execute arbitrary code via the redirect_path parameter of the login redirection function. - - -- [Mr-UN533N/CVE-2024-57609](https://github.com/Mr-UN533N/CVE-2024-57609) - -### CVE-2024-57610 (2025-02-06) - -A rate limiting issue in Sylius v2.0.2 allows a remote attacker to perform unrestricted brute-force attacks on user accounts, significantly increasing the risk of account compromise and denial of service for legitimate users. The Supplier's position is that the Sylius core software is not intended to address brute-force attacks; instead, customers deploying a Sylius-based system are supposed to use "firewalls, rate-limiting middleware, or authentication providers" for that functionality. - - -- [Mr-UN533N/CVE-2024-57610](https://github.com/Mr-UN533N/CVE-2024-57610) - ### CVE-2024-57698 (2025-04-29) An issue in modernwms v.1.0 allows an attacker view the MD5 hash of the administrator password and other attributes without authentication, even after initial configuration and password change. This happens due to excessive exposure of information and the lack of adequate access control on the /user/list?culture=en-us endpoint. @@ -31117,27 +29435,6 @@ - [rodolfomarianocy/xpl-ModernWMS-CVE-2024-57698](https://github.com/rodolfomarianocy/xpl-ModernWMS-CVE-2024-57698) -### CVE-2024-57725 (2025-02-14) - -An issue in the Arcadyan Livebox Fibra PRV3399B_B_LT allows a remote or local attacker to modify the GPON link value without authentication, causing an internet service disruption via the /firstconnection.cgi endpoint. - - -- [pointedsec/CVE-2024-57725](https://github.com/pointedsec/CVE-2024-57725) - -### CVE-2024-57778 (2025-02-14) - -An issue in Orbe ONetView Roeador Onet-1200 Orbe 1680210096 allows a remote attacker to escalate privileges via the servers response from status code 500 to status code 200. - - -- [KUK3N4N/CVE-2024-57778](https://github.com/KUK3N4N/CVE-2024-57778) - -### CVE-2024-57972 (2025-03-06) - -The pairing API request handler in Microsoft HoloLens 1 (Windows Holographic) through 10.0.17763.3046 and HoloLens 2 (Windows Holographic) through 10.0.22621.1244 allows remote attackers to cause a Denial of Service (resource consumption and device unusability) by sending many requests through the Device Portal framework. - - -- [tania-silva/CVE-2024-57972](https://github.com/tania-silva/CVE-2024-57972) - ### CVE-2024-58239 (2025-08-22) In the Linux kernel, the following vulnerability has been resolved:\n\ntls: stop recv() if initial process_rx_list gave us non-DATA\n\nIf we have a non-DATA record on the rx_list and another record of the\nsame type still on the queue, we will end up merging them:\n - process_rx_list copies the non-DATA record\n - we start the loop and process the first available record since it's\n of the same type\n - we break out of the loop since the record was not DATA\n\nJust check the record type and jump to the end in case process_rx_list\ndid some work. @@ -31160,9 +29457,6 @@ - [SohelYousef/CVE-2024-58290-Xhibiter-SQLi](https://github.com/SohelYousef/CVE-2024-58290-Xhibiter-SQLi) -### CVE-2024-415770 -- [0dinox/CVE-2024-415770-ssrf-rce](https://github.com/0dinox/CVE-2024-415770-ssrf-rce) - ### CVE-2024-1642470 - [Symbolexe/CVE-2024-1642470](https://github.com/Symbolexe/CVE-2024-1642470) @@ -47985,13 +46279,6 @@ ### CVE-2021-521 - [NagendraPittu/CVE-2021-521-Exploit](https://github.com/NagendraPittu/CVE-2021-521-Exploit) -### CVE-2021-1056 (2021-01-08) - -NVIDIA GPU Display Driver for Linux, all versions, contains a vulnerability in the kernel mode layer (nvidia.ko) in which it does not completely honor operating system file system permissions to provide GPU device-level isolation, which may lead to denial of service or information disclosure. - - -- [pokerfaceSad/CVE-2021-1056](https://github.com/pokerfaceSad/CVE-2021-1056) - ### CVE-2021-1366 (2021-02-17) A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected device if the VPN Posture (HostScan) Module is installed on the AnyConnect client. This vulnerability is due to insufficient validation of resources that are loaded by the application at run time. An attacker could exploit this vulnerability by sending a crafted IPC message to the AnyConnect process. A successful exploit could allow the attacker to execute arbitrary code on the affected machine with SYSTEM privileges. To exploit this vulnerability, the attacker needs valid credentials on the Windows system. @@ -48020,29 +46307,12 @@ - [jbaines-r7/staystaystay](https://github.com/jbaines-r7/staystaystay) -### CVE-2021-1647 (2021-01-12) - -Microsoft Defender Remote Code Execution Vulnerability - - -- [findcool/cve-2021-1647](https://github.com/findcool/cve-2021-1647) - -### CVE-2021-1656 (2021-01-12) - -TPM Device Driver Information Disclosure Vulnerability - - -- [waleedassar/CVE-2021-1656](https://github.com/waleedassar/CVE-2021-1656) - ### CVE-2021-1675 (2021-06-08) Windows Print Spooler Remote Code Execution Vulnerability -- [yu2u/CVE-2021-1675](https://github.com/yu2u/CVE-2021-1675) -- [cube0x0/CVE-2021-1675](https://github.com/cube0x0/CVE-2021-1675) - [LaresLLC/CVE-2021-1675](https://github.com/LaresLLC/CVE-2021-1675) -- [kondah/patch-cve-2021-1675](https://github.com/kondah/patch-cve-2021-1675) - [evilashz/CVE-2021-1675-LPE-EXP](https://github.com/evilashz/CVE-2021-1675-LPE-EXP) - [hlldz/CVE-2021-1675-LPE](https://github.com/hlldz/CVE-2021-1675-LPE) - [puckiestyle/CVE-2021-1675](https://github.com/puckiestyle/CVE-2021-1675) @@ -48092,24 +46362,11 @@ - [alvaciroliveira/RpcAuthnLevelPrivacyEnabled](https://github.com/alvaciroliveira/RpcAuthnLevelPrivacyEnabled) -### CVE-2021-1699 (2021-01-12) - -Windows (modem.sys) Information Disclosure Vulnerability - - -- [waleedassar/CVE-2021-1699](https://github.com/waleedassar/CVE-2021-1699) - ### CVE-2021-1732 (2021-02-25) Windows Win32k Elevation of Privilege Vulnerability -- [KaLendsi/CVE-2021-1732-Exploit](https://github.com/KaLendsi/CVE-2021-1732-Exploit) -- [flyinbedxyz/CVE-2021-1732](https://github.com/flyinbedxyz/CVE-2021-1732) -- [oneoy/CVE-2021-1732-Exploit](https://github.com/oneoy/CVE-2021-1732-Exploit) -- [linuxdy/CVE-2021-1732_exp](https://github.com/linuxdy/CVE-2021-1732_exp) -- [po4sec/CVE-2021-1732](https://github.com/po4sec/CVE-2021-1732) -- [exploitblizzard/Windows-Privilege-Escalation-CVE-2021-1732](https://github.com/exploitblizzard/Windows-Privilege-Escalation-CVE-2021-1732) - [BeneficialCode/CVE-2021-1732](https://github.com/BeneficialCode/CVE-2021-1732) - [fenalik/CVE-2021-1732](https://github.com/fenalik/CVE-2021-1732) - [4dp/CVE-2021-1732](https://github.com/4dp/CVE-2021-1732) @@ -48124,21 +46381,6 @@ - [Ivanhoe76zzzz/itmsBlock](https://github.com/Ivanhoe76zzzz/itmsBlock) - [ChiChou/mistune-patch-backport](https://github.com/ChiChou/mistune-patch-backport) -### CVE-2021-1782 (2021-04-02) - -A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited.. - - -- [raymontag/cve-2021-1782](https://github.com/raymontag/cve-2021-1782) -- [synacktiv/CVE-2021-1782](https://github.com/synacktiv/CVE-2021-1782) - -### CVE-2021-1905 (2021-05-07) - -Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables - - -- [TAKIANFIF/CVE-2021-1905-CVE-2021-1906-CVE-2021-28663-CVE-2021-28664](https://github.com/TAKIANFIF/CVE-2021-1905-CVE-2021-1906-CVE-2021-28663-CVE-2021-28664) - ### CVE-2021-1931 (2021-07-13) Possible buffer overflow due to improper validation of buffer length while processing fast boot commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music @@ -48162,38 +46404,14 @@ - [somatrasss/weblogic2021](https://github.com/somatrasss/weblogic2021) -### CVE-2021-2021 (2021-01-20) - -Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). - - -- [TheCryingGame/CVE-2021-2021good](https://github.com/TheCryingGame/CVE-2021-2021good) - ### CVE-2021-2109 (2021-01-20) Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). -- [Al1ex/CVE-2021-2109](https://github.com/Al1ex/CVE-2021-2109) -- [rabbitsafe/CVE-2021-2109](https://github.com/rabbitsafe/CVE-2021-2109) -- [yuaneuro/CVE-2021-2109_poc](https://github.com/yuaneuro/CVE-2021-2109_poc) - [dinosn/CVE-2021-2109](https://github.com/dinosn/CVE-2021-2109) - [Vulnmachines/oracle-weblogic-CVE-2021-2109](https://github.com/Vulnmachines/oracle-weblogic-CVE-2021-2109) -### CVE-2021-2119 (2021-01-20) - -Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N). - - -- [Sauercloud/RWCTF21-VirtualBox-61-escape](https://github.com/Sauercloud/RWCTF21-VirtualBox-61-escape) - -### CVE-2021-2173 (2021-04-22) - -Vulnerability in the Recovery component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having DBA Level Account privilege with network access via Oracle Net to compromise Recovery. While the vulnerability is in Recovery, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Recovery accessible data. CVSS 3.1 Base Score 4.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N). - - -- [emad-almousa/CVE-2021-2173](https://github.com/emad-almousa/CVE-2021-2173) - ### CVE-2021-2220 (2021-04-22) Vulnerability in the PeopleSoft Enterprise SCM eProcurement product of Oracle PeopleSoft (component: Manage Requisition Status). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM eProcurement. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise SCM eProcurement accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise SCM eProcurement accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N). @@ -48239,7 +46457,6 @@ Laminas Project laminas-http before 2.14.2, and Zend Framework 3.0.0, has a deserialization vulnerability that can lead to remote code execution if the content is controllable, related to the __destruct method of the Zend\Http\Response\Stream class in Stream.php. NOTE: Zend Framework is no longer supported by the maintainer. NOTE: the laminas-http vendor considers this a "vulnerability in the PHP language itself" but has added certain type checking as a way to prevent exploitation in (unrecommended) use cases where attacker-supplied data can be deserialized -- [Vulnmachines/ZF3_CVE-2021-3007](https://github.com/Vulnmachines/ZF3_CVE-2021-3007) - [yunus-a1i/CVE-2021-3007-docker-poc](https://github.com/yunus-a1i/CVE-2021-3007-docker-poc) - [KrE80r/cve-2021-3007-vulnerable](https://github.com/KrE80r/cve-2021-3007-vulnerable) @@ -48248,12 +46465,6 @@ ffay lanproxy 0.1 allows Directory Traversal to read /../conf/config.properties to obtain credentials for a connection to the intranet. -- [B1anda0/CVE-2021-3019](https://github.com/B1anda0/CVE-2021-3019) -- [0xf4n9x/CVE-2021-3019](https://github.com/0xf4n9x/CVE-2021-3019) -- [Maksim-venus/CVE-2021-3019](https://github.com/Maksim-venus/CVE-2021-3019) -- [murataydemir/CVE-2021-3019](https://github.com/murataydemir/CVE-2021-3019) -- [Aoyuh/cve-2021-3019](https://github.com/Aoyuh/cve-2021-3019) -- [givemefivw/CVE-2021-3019](https://github.com/givemefivw/CVE-2021-3019) - [qiezi-maozi/CVE-2021-3019-Lanproxy](https://github.com/qiezi-maozi/CVE-2021-3019-Lanproxy) - [a1665454764/CVE-2021-3019](https://github.com/a1665454764/CVE-2021-3019) @@ -48284,14 +46495,7 @@ Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitrary code because of insecure usage of file_get_contents() and file_put_contents(). This is exploitable on sites using debug mode with Laravel before 8.4.2. -- [ambionics/laravel-exploits](https://github.com/ambionics/laravel-exploits) -- [SNCKER/CVE-2021-3129](https://github.com/SNCKER/CVE-2021-3129) -- [SecPros-Team/laravel-CVE-2021-3129-EXP](https://github.com/SecPros-Team/laravel-CVE-2021-3129-EXP) -- [crisprss/Laravel_CVE-2021-3129_EXP](https://github.com/crisprss/Laravel_CVE-2021-3129_EXP) -- [nth347/CVE-2021-3129_exploit](https://github.com/nth347/CVE-2021-3129_exploit) -- [FunPhishing/Laravel-8.4.2-rce-CVE-2021-3129](https://github.com/FunPhishing/Laravel-8.4.2-rce-CVE-2021-3129) - [zhzyker/CVE-2021-3129](https://github.com/zhzyker/CVE-2021-3129) -- [Y0s9/CVE-2021-3129](https://github.com/Y0s9/CVE-2021-3129) - [idea-oss/laravel-CVE-2021-3129-EXP](https://github.com/idea-oss/laravel-CVE-2021-3129-EXP) - [knqyf263/CVE-2021-3129](https://github.com/knqyf263/CVE-2021-3129) - [joshuavanderpoll/CVE-2021-3129](https://github.com/joshuavanderpoll/CVE-2021-3129) @@ -48321,69 +46525,18 @@ Within the Open-AudIT up to version 3.5.3 application, the web interface hides SSH secrets, Windows passwords, and SNMP strings from users using HTML 'password field' obfuscation. By using Developer tools or similar, it is possible to change the obfuscation so that the credentials are visible. -- [jet-pentest/CVE-2021-3130](https://github.com/jet-pentest/CVE-2021-3130) - [lusterx/CVE-2021-3130](https://github.com/lusterx/CVE-2021-3130) -### CVE-2021-3131 (2021-01-13) - -The Web server in 1C:Enterprise 8 before 8.3.17.1851 sends base64 encoded credentials in the creds URL parameter. - - -- [jet-pentest/CVE-2021-3131](https://github.com/jet-pentest/CVE-2021-3131) - -### CVE-2021-3138 (2021-01-14) - -In Discourse 2.7.0 through beta1, a rate-limit bypass leads to a bypass of the 2FA requirement for certain forms. - - -- [Mesh3l911/CVE-2021-3138](https://github.com/Mesh3l911/CVE-2021-3138) - ### CVE-2021-3156 (2021-01-26) Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character. -- [mr-r3b00t/CVE-2021-3156](https://github.com/mr-r3b00t/CVE-2021-3156) -- [nexcess/sudo_cve-2021-3156](https://github.com/nexcess/sudo_cve-2021-3156) -- [reverse-ex/CVE-2021-3156](https://github.com/reverse-ex/CVE-2021-3156) -- [unauth401/CVE-2021-3156](https://github.com/unauth401/CVE-2021-3156) -- [ymrsmns/CVE-2021-3156](https://github.com/ymrsmns/CVE-2021-3156) -- [elbee-cyber/CVE-2021-3156-PATCHER](https://github.com/elbee-cyber/CVE-2021-3156-PATCHER) -- [kernelzeroday/CVE-2021-3156-Baron-Samedit](https://github.com/kernelzeroday/CVE-2021-3156-Baron-Samedit) -- [yaunsky/cve-2021-3156](https://github.com/yaunsky/cve-2021-3156) -- [baka9moe/CVE-2021-3156-Exp](https://github.com/baka9moe/CVE-2021-3156-Exp) -- [ph4ntonn/CVE-2021-3156](https://github.com/ph4ntonn/CVE-2021-3156) -- [binw2018/CVE-2021-3156-SCRIPT](https://github.com/binw2018/CVE-2021-3156-SCRIPT) -- [freeFV/CVE-2021-3156](https://github.com/freeFV/CVE-2021-3156) -- [mbcrump/CVE-2021-3156](https://github.com/mbcrump/CVE-2021-3156) - [stong/CVE-2021-3156](https://github.com/stong/CVE-2021-3156) -- [nobodyatall648/CVE-2021-3156](https://github.com/nobodyatall648/CVE-2021-3156) -- [blasty/CVE-2021-3156](https://github.com/blasty/CVE-2021-3156) -- [teamtopkarl/CVE-2021-3156](https://github.com/teamtopkarl/CVE-2021-3156) -- [Q4n/CVE-2021-3156](https://github.com/Q4n/CVE-2021-3156) -- [kal1gh0st/CVE-2021-3156](https://github.com/kal1gh0st/CVE-2021-3156) -- [apogiatzis/docker-CVE-2021-3156](https://github.com/apogiatzis/docker-CVE-2021-3156) -- [Ashish-dawani/CVE-2021-3156-Patch](https://github.com/Ashish-dawani/CVE-2021-3156-Patch) -- [SantiagoSerrao/ScannerCVE-2021-3156](https://github.com/SantiagoSerrao/ScannerCVE-2021-3156) -- [DanielAzulayy/CTF-2021](https://github.com/DanielAzulayy/CTF-2021) -- [cdeletre/Serpentiel-CVE-2021-3156](https://github.com/cdeletre/Serpentiel-CVE-2021-3156) -- [dinhbaouit/CVE-2021-3156](https://github.com/dinhbaouit/CVE-2021-3156) - [CptGibbon/CVE-2021-3156](https://github.com/CptGibbon/CVE-2021-3156) -- [perlun/sudo-1.8.3p1-patched](https://github.com/perlun/sudo-1.8.3p1-patched) -- [1N53C/CVE-2021-3156-PoC](https://github.com/1N53C/CVE-2021-3156-PoC) - [0xdevil/CVE-2021-3156](https://github.com/0xdevil/CVE-2021-3156) -- [gmldbd94/cve-2021-3156](https://github.com/gmldbd94/cve-2021-3156) -- [jm33-m0/CVE-2021-3156](https://github.com/jm33-m0/CVE-2021-3156) -- [Rvn0xsy/CVE-2021-3156-plus](https://github.com/Rvn0xsy/CVE-2021-3156-plus) -- [oneoy/CVE-2021-3156](https://github.com/oneoy/CVE-2021-3156) - [worawit/CVE-2021-3156](https://github.com/worawit/CVE-2021-3156) -- [lmol/CVE-2021-3156](https://github.com/lmol/CVE-2021-3156) -- [BearCat4/CVE-2021-3156](https://github.com/BearCat4/CVE-2021-3156) -- [capturingcats/CVE-2021-3156](https://github.com/capturingcats/CVE-2021-3156) - [LiveOverflow/pwnedit](https://github.com/LiveOverflow/pwnedit) -- [ajtech-hue/CVE-2021-3156-Mitigation-ShellScript-Build](https://github.com/ajtech-hue/CVE-2021-3156-Mitigation-ShellScript-Build) -- [donghyunlee00/CVE-2021-3156](https://github.com/donghyunlee00/CVE-2021-3156) -- [TheFlash2k/CVE-2021-3156](https://github.com/TheFlash2k/CVE-2021-3156) - [Exodusro/CVE-2021-3156](https://github.com/Exodusro/CVE-2021-3156) - [0x7183/CVE-2021-3156](https://github.com/0x7183/CVE-2021-3156) - [sbladiamond/CVE-2021-3156](https://github.com/sbladiamond/CVE-2021-3156) @@ -48428,16 +46581,6 @@ - [WhatsWrongAndWhy/CVE-2021-3156](https://github.com/WhatsWrongAndWhy/CVE-2021-3156) - [Shams-Ul-Mehmood/CVE-2021-3156-Project](https://github.com/Shams-Ul-Mehmood/CVE-2021-3156-Project) -### CVE-2021-3157 -- [CrackerCat/cve-2021-3157](https://github.com/CrackerCat/cve-2021-3157) - -### CVE-2021-3164 (2021-01-21) - -ChurchRota 2.6.4 is vulnerable to authenticated remote code execution. The user does not need to have file upload permission in order to upload and execute an arbitrary file via a POST request to resources.php. - - -- [rmccarth/cve-2021-3164](https://github.com/rmccarth/cve-2021-3164) - ### CVE-2021-3166 (2021-01-18) An issue was discovered on ASUS DSL-N14U-B1 1.1.2.3_805 devices. An attacker can upload arbitrary file content as a firmware update when the filename Settings_DSL-N14U-B1.trx is used. Once this file is loaded, shutdown measures on a wide range of services are triggered as if it were a real update, resulting in a persistent outage of those services. @@ -48459,33 +46602,11 @@ - [lwzSoviet/CVE-2021-3281](https://github.com/lwzSoviet/CVE-2021-3281) -### CVE-2021-3291 (2021-01-26) - -Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element (within the modules edit page) and inserting a command. - - -- [ImHades101/CVE-2021-3291](https://github.com/ImHades101/CVE-2021-3291) - -### CVE-2021-3310 (2021-03-10) - -Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares. This can lead to code execution and information disclosure (by reading local files). - - -- [piffd0s/CVE-2021-3310](https://github.com/piffd0s/CVE-2021-3310) - -### CVE-2021-3317 (2021-01-26) - -KLog Server through 2.4.1 allows authenticated command injection. async.php calls shell_exec() on the original value of the source parameter. - - -- [Al1ex/CVE-2021-3317](https://github.com/Al1ex/CVE-2021-3317) - ### CVE-2021-3345 (2021-01-29) _gcry_md_block_write in cipher/hash-common.c in Libgcrypt version 1.9.0 has a heap-based buffer overflow when the digest final function sets a large count value. It is recommended to upgrade to 1.9.1 or later. -- [MLGRadish/CVE-2021-3345](https://github.com/MLGRadish/CVE-2021-3345) - [SpiralBL0CK/CVE-2021-3345](https://github.com/SpiralBL0CK/CVE-2021-3345) ### CVE-2021-3347 (2021-01-29) @@ -48495,23 +46616,6 @@ - [nanopathi/linux-4.19.72_CVE-2021-3347](https://github.com/nanopathi/linux-4.19.72_CVE-2021-3347) -### CVE-2021-3360 -- [tcbutler320/CVE-2021-3360](https://github.com/tcbutler320/CVE-2021-3360) - -### CVE-2021-3378 (2021-02-01) - -FortiLogger 4.4.2.2 is affected by Arbitrary File Upload by sending a "Content-Type: image/png" header to Config/SaveUploadedHotspotLogoFile and then visiting Assets/temp/hotspot/img/logohotspot.asp. - - -- [erberkan/fortilogger_arbitrary_fileupload](https://github.com/erberkan/fortilogger_arbitrary_fileupload) - -### CVE-2021-3395 (2021-02-02) - -A cross-site scripting (XSS) vulnerability in Pryaniki 6.44.3 allows remote authenticated users to upload an arbitrary file. The JavaScript code will execute when someone visits the attachment. - - -- [jet-pentest/CVE-2021-3395](https://github.com/jet-pentest/CVE-2021-3395) - ### CVE-2021-3438 (2021-05-20) A potential buffer overflow in the software drivers for certain HP LaserJet products and Samsung product printers could lead to an escalation of privilege. @@ -48520,13 +46624,6 @@ - [TobiasS1402/CVE-2021-3438](https://github.com/TobiasS1402/CVE-2021-3438) - [CrackerCat/CVE-2021-3438](https://github.com/CrackerCat/CVE-2021-3438) -### CVE-2021-3441 (2021-10-29) - -A potential security vulnerability has been identified for the HP OfficeJet 7110 Wide Format ePrinter that enables Cross-Site Scripting (XSS). - - -- [tcbutler320/CVE-2021-3441-check](https://github.com/tcbutler320/CVE-2021-3441-check) - ### CVE-2021-3449 (2021-03-25) An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j). @@ -48559,21 +46656,12 @@ - [prabeershakya/CVE-2021-3490-POC](https://github.com/prabeershakya/CVE-2021-3490-POC) - [WhatsWrongAndWhy/CVE-2021-3490](https://github.com/WhatsWrongAndWhy/CVE-2021-3490) -### CVE-2021-3492 (2021-04-17) - -Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux kernels, did not properly handle faults occurring during copy_from_user() correctly. These could lead to either a double-free situation or memory not being freed at all. An attacker could use this to cause a denial of service (kernel memory exhaustion) or gain privileges via executing arbitrary code. AKA ZDI-CAN-13562. - - -- [synacktiv/CVE-2021-3492](https://github.com/synacktiv/CVE-2021-3492) - ### CVE-2021-3493 (2021-04-17) The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files in an underlying file system. Due to the combination of unprivileged user namespaces along with a patch carried in the Ubuntu kernel to allow unprivileged overlay mounts, an attacker could use this to gain elevated privileges. - [briskets/CVE-2021-3493](https://github.com/briskets/CVE-2021-3493) -- [oneoy/CVE-2021-3493](https://github.com/oneoy/CVE-2021-3493) -- [Abdennour-py/CVE-2021-3493](https://github.com/Abdennour-py/CVE-2021-3493) - [inspiringz/CVE-2021-3493](https://github.com/inspiringz/CVE-2021-3493) - [derek-turing/CVE-2021-3493](https://github.com/derek-turing/CVE-2021-3493) - [cerodah/overlayFS-CVE-2021-3493](https://github.com/cerodah/overlayFS-CVE-2021-3493) @@ -48604,13 +46692,7 @@ - [aancw/polkit-auto-exploit](https://github.com/aancw/polkit-auto-exploit) -- [swapravo/polkadots](https://github.com/swapravo/polkadots) -- [hakivvi/CVE-2021-3560](https://github.com/hakivvi/CVE-2021-3560) -- [iSTAR-Lab/CVE-2021-3560_PoC](https://github.com/iSTAR-Lab/CVE-2021-3560_PoC) - [secnigma/CVE-2021-3560-Polkit-Privilege-Esclation](https://github.com/secnigma/CVE-2021-3560-Polkit-Privilege-Esclation) -- [curtishoughton/CVE-2021-3560](https://github.com/curtishoughton/CVE-2021-3560) -- [Almorabea/Polkit-exploit](https://github.com/Almorabea/Polkit-exploit) -- [AssassinUKG/Polkit-CVE-2021-3560](https://github.com/AssassinUKG/Polkit-CVE-2021-3560) - [cpu0x00/CVE-2021-3560](https://github.com/cpu0x00/CVE-2021-3560) - [BizarreLove/CVE-2021-3560](https://github.com/BizarreLove/CVE-2021-3560) - [0dayNinja/CVE-2021-3560](https://github.com/0dayNinja/CVE-2021-3560) @@ -48633,13 +46715,6 @@ - [Jeanback1/CVE-2021-3560-exploit](https://github.com/Jeanback1/CVE-2021-3560-exploit) - [adakoifman/CVE-2021-3560](https://github.com/adakoifman/CVE-2021-3560) -### CVE-2021-3572 (2021-11-10) - -A flaw was found in python-pip in the way it handled Unicode separators in git references. A remote attacker could possibly use this issue to install a different revision on a repository. The highest threat from this vulnerability is to data integrity. This is fixed in python-pip version 21.1. - - -- [frenzymadness/CVE-2021-3572](https://github.com/frenzymadness/CVE-2021-3572) - ### CVE-2021-3625 (2021-10-05) Buffer overflow in Zephyr USB DFU DNLOAD. Zephyr versions >= v2.5.0 contain Heap-based Buffer Overflow (CWE-122). For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-c3gr-hgvr-f363 @@ -48734,7 +46809,6 @@ - [CYB3RK1D/CVE-2021-4034-POC](https://github.com/CYB3RK1D/CVE-2021-4034-POC) - [rvzsec/CVE-2021-4034](https://github.com/rvzsec/CVE-2021-4034) - [antoinenguyen-09/CVE-2021-4034](https://github.com/antoinenguyen-09/CVE-2021-4034) -- [TanmoyG1800/CVE-2021-4034](https://github.com/TanmoyG1800/CVE-2021-4034) - [CronoX1/CVE-2021-4034](https://github.com/CronoX1/CVE-2021-4034) - [supportingmx/cve-2021-4034](https://github.com/supportingmx/cve-2021-4034) - [A1vinSmith/CVE-2021-4034](https://github.com/A1vinSmith/CVE-2021-4034) @@ -48860,9 +46934,6 @@ ### CVE-2021-4773 - [Alexs18/CVE-2021-4773](https://github.com/Alexs18/CVE-2021-4773) -### CVE-2021-6857 -- [zi0n8/CVE-2021-6857](https://github.com/zi0n8/CVE-2021-6857) - ### CVE-2021-6901 - [mooneee/cve-2021-6901](https://github.com/mooneee/cve-2021-6901) @@ -48921,13 +46992,6 @@ - [Cappricio-Securities/CVE-2021-20323](https://github.com/Cappricio-Securities/CVE-2021-20323) - [cscpwn0sec/CVE-2021-20323](https://github.com/cscpwn0sec/CVE-2021-20323) -### CVE-2021-20717 (2021-05-10) - -Cross-site scripting vulnerability in EC-CUBE 4.0.0 to 4.0.5 allows a remote attacker to inject a specially crafted script in the specific input field of the EC web site which is created using EC-CUBE. As a result, it may lead to an arbitrary script execution on the administrator's web browser. - - -- [s-index/CVE-2021-20717](https://github.com/s-index/CVE-2021-20717) - ### CVE-2021-20837 (2021-10-26) Movable Type 7 r.5002 and earlier (Movable Type 7 Series), Movable Type 6.8.2 and earlier (Movable Type 6 Series), Movable Type Advanced 7 r.5002 and earlier (Movable Type Advanced 7 Series), Movable Type Advanced 6.8.2 and earlier (Movable Type Advanced 6 Series), Movable Type Premium 1.46 and earlier, and Movable Type Premium Advanced 1.46 and earlier allow remote attackers to execute arbitrary OS commands via unspecified vectors. Note that all versions of Movable Type 4.0 or later including unsupported (End-of-Life, EOL) versions are also affected by this vulnerability. @@ -48937,26 +47001,11 @@ - [orangmuda/CVE-2021-20837](https://github.com/orangmuda/CVE-2021-20837) - [Cosemz/CVE-2021-20837](https://github.com/Cosemz/CVE-2021-20837) -### CVE-2021-21014 (2021-02-11) - -Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to a file upload restriction bypass. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin console is required for successful exploitation. - - -- [HoangKien1020/CVE-2021-21014](https://github.com/HoangKien1020/CVE-2021-21014) - -### CVE-2021-21017 (2021-02-11) - -Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a heap-based buffer overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. - - -- [ZeusBox/CVE-2021-21017](https://github.com/ZeusBox/CVE-2021-21017) - ### CVE-2021-21042 (2021-02-11) Acrobat Reader DC versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an Out-of-bounds Read vulnerability that could lead to arbitrary disclosure of information in the memory stack. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file. -- [NattiSamson/CVE-2021-21042](https://github.com/NattiSamson/CVE-2021-21042) - [r1l4-i3pur1l4/CVE-2021-21042](https://github.com/r1l4-i3pur1l4/CVE-2021-21042) ### CVE-2021-21086 (2021-09-02) @@ -48966,27 +47015,6 @@ - [infobyte/Exploit-CVE-2021-21086](https://github.com/infobyte/Exploit-CVE-2021-21086) -### CVE-2021-21110 (2021-01-08) - -Use after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. - - -- [Gh0st0ne/CVE-2021-21110](https://github.com/Gh0st0ne/CVE-2021-21110) - -### CVE-2021-21123 (2021-02-09) - -Insufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. - - -- [Puliczek/CVE-2021-21123-PoC-Google-Chrome](https://github.com/Puliczek/CVE-2021-21123-PoC-Google-Chrome) - -### CVE-2021-21148 (2021-02-09) - -Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. - - -- [Grayhaxor/CVE-2021-21148](https://github.com/Grayhaxor/CVE-2021-21148) - ### CVE-2021-21220 (2021-04-26) Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. @@ -49002,7 +47030,6 @@ spring-boot-actuator-logview in a library that adds a simple logfile viewer as spring boot actuator endpoint. It is maven package "eu.hinsch:spring-boot-actuator-logview". In spring-boot-actuator-logview before version 0.2.13 there is a directory traversal vulnerability. The nature of this library is to expose a log file directory via admin (spring boot actuator) HTTP endpoints. Both the filename to view and a base folder (relative to the logging folder root) can be specified via request parameters. While the filename parameter was checked to prevent directory traversal exploits (so that `filename=../somefile` would not work), the base folder parameter was not sufficiently checked, so that `filename=somefile&base=../` could access a file outside the logging base directory). The vulnerability has been patched in release 0.2.13. Any users of 0.2.12 should be able to update without any issues as there are no other changes in that release. There is no workaround to fix the vulnerability other than updating or removing the dependency. However, removing read access of the user the application is run with to any directory not required for running the application can limit the impact. Additionally, access to the logview endpoint can be limited by deploying the application behind a reverse proxy. -- [PwCNO-CTO/CVE-2021-21234](https://github.com/PwCNO-CTO/CVE-2021-21234) - [xiaojiangxl/CVE-2021-21234](https://github.com/xiaojiangxl/CVE-2021-21234) ### CVE-2021-21239 (2021-01-21) @@ -49020,15 +47047,6 @@ Git is an open-source distributed revision control system. In affected versions of Git a specially crafted repository that contains symbolic links as well as files using a clean/smudge filter such as Git LFS, may cause just-checked out script to be executed while cloning onto a case-insensitive file system such as NTFS, HFS+ or APFS (i.e. the default file systems on Windows and macOS). Note that clean/smudge filters have to be configured for that. Git for Windows configures Git LFS by default, and is therefore vulnerable. The problem has been patched in the versions published on Tuesday, March 9th, 2021. As a workaound, if symbolic link support is disabled in Git (e.g. via `git config --global core.symlinks false`), the described attack won't work. Likewise, if no clean/smudge filters such as Git LFS are configured globally (i.e. _before_ cloning), the attack is foiled. As always, it is best to avoid cloning repositories from untrusted sources. The earliest impacted version is 2.14.2. The fix versions are: 2.30.1, 2.29.3, 2.28.1, 2.27.1, 2.26.3, 2.25.5, 2.24.4, 2.23.4, 2.22.5, 2.21.4, 2.20.5, 2.19.6, 2.18.5, 2.17.62.17.6. -- [AlkenePan/CVE-2021-21300](https://github.com/AlkenePan/CVE-2021-21300) -- [Faisal78123/CVE-2021-21300](https://github.com/Faisal78123/CVE-2021-21300) -- [erranfenech/CVE-2021-21300](https://github.com/erranfenech/CVE-2021-21300) -- [Maskhe/CVE-2021-21300](https://github.com/Maskhe/CVE-2021-21300) -- [1uanWu/CVE-2021-21300](https://github.com/1uanWu/CVE-2021-21300) -- [Kirill89/CVE-2021-21300](https://github.com/Kirill89/CVE-2021-21300) -- [ETOCheney/cve-2021-21300](https://github.com/ETOCheney/cve-2021-21300) -- [fengzhouc/CVE-2021-21300](https://github.com/fengzhouc/CVE-2021-21300) -- [danshuizhangyu/CVE-2021-21300](https://github.com/danshuizhangyu/CVE-2021-21300) - [0ahu/CVE-2021-21300](https://github.com/0ahu/CVE-2021-21300) - [macilin/CVE-2021-21300](https://github.com/macilin/CVE-2021-21300) - [Roboterh/CVE-2021-21300](https://github.com/Roboterh/CVE-2021-21300) @@ -49050,19 +47068,11 @@ The System Information Library for Node.JS (npm package "systeminformation") is an open source collection of functions to retrieve detailed hardware, system and OS information. In systeminformation before version 5.3.1 there is a command injection vulnerability. Problem was fixed in version 5.3.1. As a workaround instead of upgrading, be sure to check or sanitize service parameters that are passed to si.inetLatency(), si.inetChecksite(), si.services(), si.processLoad() ... do only allow strings, reject any arrays. String sanitation works as expected. -- [ForbiddenProgrammer/CVE-2021-21315-PoC](https://github.com/ForbiddenProgrammer/CVE-2021-21315-PoC) - [MazX0p/CVE-2021-21315-exploit](https://github.com/MazX0p/CVE-2021-21315-exploit) - [alikarimi999/CVE-2021-21315](https://github.com/alikarimi999/CVE-2021-21315) - [G01d3nW01f/CVE-2021-21315](https://github.com/G01d3nW01f/CVE-2021-21315) - [xMohamed0/CVE-2021-21315-POC](https://github.com/xMohamed0/CVE-2021-21315-POC) -### CVE-2021-21341 (2021-03-22) - -XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is vulnerability which may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by manipulating the processed input stream. No user is affected who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16. - - -- [s-index/CVE-2021-21341](https://github.com/s-index/CVE-2021-21341) - ### CVE-2021-21345 (2021-03-22) XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker who has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16. @@ -49070,13 +47080,6 @@ - [shoucheng3/x-stream__xstream_CVE-2021-21345_1-4-15](https://github.com/shoucheng3/x-stream__xstream_CVE-2021-21345_1-4-15) -### CVE-2021-21349 (2021-03-22) - -XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to request data from internal resources that are not publicly available only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16. - - -- [s-index/CVE-2021-21349](https://github.com/s-index/CVE-2021-21349) - ### CVE-2021-21353 (2021-03-03) Pug is an npm package which is a high-performance template engine. In pug before version 3.0.1, if a remote attacker was able to control the `pretty` option of the pug compiler, e.g. if you spread a user provided object such as the query parameters of a request into the pug template inputs, it was possible for them to achieve remote code execution on the node.js backend. This is fixed in version 3.0.1. This advisory applies to multiple pug packages including "pug", "pug-code-gen". pug-code-gen has a backported fix at version 2.0.3. This advisory is not exploitable if there is no way for un-trusted input to be passed to pug as the `pretty` option, e.g. if you compile templates in advance before applying user input to them, you do not need to upgrade. @@ -49096,7 +47099,6 @@ BuddyPress is an open source WordPress plugin to build a community site. In releases of BuddyPress from 5.0.0 before 7.2.1 it's possible for a non-privileged, regular user to obtain administrator rights by exploiting an issue in the REST API members endpoint. The vulnerability has been fixed in BuddyPress 7.2.1. Existing installations of the plugin should be updated to this version to mitigate the issue. -- [HoangKien1020/CVE-2021-21389](https://github.com/HoangKien1020/CVE-2021-21389) - [mynameSumin/CVE-2021-21389](https://github.com/mynameSumin/CVE-2021-21389) ### CVE-2021-21401 (2021-03-23) @@ -49106,15 +47108,6 @@ - [uthrasri/CVE-2021-21401_nanopb-c_AOSP10_R33](https://github.com/uthrasri/CVE-2021-21401_nanopb-c_AOSP10_R33) -### CVE-2021-21402 (2021-03-23) - -Jellyfin is a Free Software Media System. In Jellyfin before version 10.7.1, with certain endpoints, well crafted requests will allow arbitrary file read from a Jellyfin server's file system. This issue is more prevalent when Windows is used as the host OS. Servers that are exposed to the public Internet are potentially at risk. This is fixed in version 10.7.1. As a workaround, users may be able to restrict some access by enforcing strict security permissions on their filesystem, however, it is recommended to update as soon as possible. - - -- [jiaocoll/CVE-2021-21402-Jellyfin](https://github.com/jiaocoll/CVE-2021-21402-Jellyfin) -- [somatrasss/CVE-2021-21402](https://github.com/somatrasss/CVE-2021-21402) -- [givemefivw/CVE-2021-21402](https://github.com/givemefivw/CVE-2021-21402) - ### CVE-2021-21424 (2021-05-13) Symfony is a PHP framework for web and console applications and a set of reusable PHP components. The ability to enumerate users was possible without relevant permissions due to different handling depending on whether the user existed or not when attempting to use the switch users functionality. We now ensure that 403s are returned whether the user exists or not if a user cannot switch to a user or if the user does not exist. The patch for this issue is available for branch 3.4. @@ -49146,11 +47139,7 @@ Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required. -- [waldo-irc/CVE-2021-21551](https://github.com/waldo-irc/CVE-2021-21551) -- [ch3rn0byl/CVE-2021-21551](https://github.com/ch3rn0byl/CVE-2021-21551) -- [arnaudluti/PS-CVE-2021-21551](https://github.com/arnaudluti/PS-CVE-2021-21551) - [mathisvickie/CVE-2021-21551](https://github.com/mathisvickie/CVE-2021-21551) -- [mzakocs/CVE-2021-21551-POC](https://github.com/mzakocs/CVE-2021-21551-POC) - [ihack4falafel/Dell-Driver-EoP-CVE-2021-21551](https://github.com/ihack4falafel/Dell-Driver-EoP-CVE-2021-21551) - [tijme/kernel-mii](https://github.com/tijme/kernel-mii) - [nanabingies/CVE-2021-21551](https://github.com/nanabingies/CVE-2021-21551) @@ -49195,26 +47184,7 @@ The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server. This affects VMware vCenter Server (7.x before 7.0 U1c, 6.7 before 6.7 U3l and 6.5 before 6.5 U3n) and VMware Cloud Foundation (4.x before 4.2 and 3.x before 3.10.1.2). -- [psc4re/NSE-scripts](https://github.com/psc4re/NSE-scripts) -- [QmF0c3UK/CVE-2021-21972-vCenter-6.5-7.0-RCE-POC](https://github.com/QmF0c3UK/CVE-2021-21972-vCenter-6.5-7.0-RCE-POC) - [NS-Sp4ce/CVE-2021-21972](https://github.com/NS-Sp4ce/CVE-2021-21972) -- [yaunsky/CVE-2021-21972](https://github.com/yaunsky/CVE-2021-21972) -- [horizon3ai/CVE-2021-21972](https://github.com/horizon3ai/CVE-2021-21972) -- [Osyanina/westone-CVE-2021-21972-scanner](https://github.com/Osyanina/westone-CVE-2021-21972-scanner) -- [alt3kx/CVE-2021-21972](https://github.com/alt3kx/CVE-2021-21972) -- [milo2012/CVE-2021-21972](https://github.com/milo2012/CVE-2021-21972) -- [conjojo/VMware_vCenter_UNAuthorized_RCE_CVE-2021-21972](https://github.com/conjojo/VMware_vCenter_UNAuthorized_RCE_CVE-2021-21972) -- [L-pin/CVE-2021-21972](https://github.com/L-pin/CVE-2021-21972) -- [B1anda0/CVE-2021-21972](https://github.com/B1anda0/CVE-2021-21972) -- [renini/CVE-2021-21972](https://github.com/renini/CVE-2021-21972) -- [GuayoyoCyber/CVE-2021-21972](https://github.com/GuayoyoCyber/CVE-2021-21972) -- [JMousqueton/Detect-CVE-2021-21972](https://github.com/JMousqueton/Detect-CVE-2021-21972) -- [robwillisinfo/VMware_vCenter_CVE-2021-21972](https://github.com/robwillisinfo/VMware_vCenter_CVE-2021-21972) -- [Ma1Dong/vcenter_rce](https://github.com/Ma1Dong/vcenter_rce) -- [d3sh1n/cve-2021-21972](https://github.com/d3sh1n/cve-2021-21972) -- [ByZain/CVE-2021-21972](https://github.com/ByZain/CVE-2021-21972) -- [TaroballzChen/CVE-2021-21972](https://github.com/TaroballzChen/CVE-2021-21972) -- [murataydemir/CVE-2021-21972](https://github.com/murataydemir/CVE-2021-21972) - [pettyhacks/vSphereyeeter](https://github.com/pettyhacks/vSphereyeeter) - [haidv35/CVE-2021-21972](https://github.com/haidv35/CVE-2021-21972) - [TAI-REx/CVE-2021-21972](https://github.com/TAI-REx/CVE-2021-21972) @@ -49223,13 +47193,6 @@ - [SimoesCTT/CTT-enhanced-VMware-vCenter](https://github.com/SimoesCTT/CTT-enhanced-VMware-vCenter) - [Hurrrraaaa/CVE-2021-21972](https://github.com/Hurrrraaaa/CVE-2021-21972) -### CVE-2021-21973 (2021-02-24) - -The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue by sending a POST request to vCenter Server plugin leading to information disclosure. This affects: VMware vCenter Server (7.x before 7.0 U1c, 6.7 before 6.7 U3l and 6.5 before 6.5 U3n) and VMware Cloud Foundation (4.x before 4.2 and 3.x before 3.10.1.2). - - -- [freakanonymous/CVE-2021-21973-Automateme](https://github.com/freakanonymous/CVE-2021-21973-Automateme) - ### CVE-2021-21974 (2021-02-24) OpenSLP as used in ESXi (7.0 before ESXi70U1c-17325551, 6.7 before ESXi670-202102401-SG, 6.5 before ESXi650-202102101-SG) has a heap-overflow vulnerability. A malicious actor residing within the same network segment as ESXi who has access to port 427 may be able to trigger the heap-overflow issue in OpenSLP service resulting in remote code execution. @@ -49248,24 +47211,9 @@ Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credentials. -- [Henry4E36/VMWare-vRealize-SSRF](https://github.com/Henry4E36/VMWare-vRealize-SSRF) -- [dorkerdevil/CVE-2021-21975](https://github.com/dorkerdevil/CVE-2021-21975) -- [Al1ex/CVE-2021-21975](https://github.com/Al1ex/CVE-2021-21975) -- [GuayoyoCyber/CVE-2021-21975](https://github.com/GuayoyoCyber/CVE-2021-21975) -- [murataydemir/CVE-2021-21975](https://github.com/murataydemir/CVE-2021-21975) -- [rabidwh0re/REALITY_SMASHER](https://github.com/rabidwh0re/REALITY_SMASHER) - [Vulnmachines/VMWare-CVE-2021-21975](https://github.com/Vulnmachines/VMWare-CVE-2021-21975) - [DarkFunct/exp_hub](https://github.com/DarkFunct/exp_hub) -### CVE-2021-21978 (2021-03-03) - -VMware View Planner 4.x prior to 4.6 Security Patch 1 contains a remote code execution vulnerability. Improper input validation and lack of authorization leading to arbitrary file upload in logupload web application. An unauthorized attacker with network access to View Planner Harness could upload and execute a specially crafted file leading to remote code execution within the logupload container. - - -- [GreyOrder/CVE-2021-21978](https://github.com/GreyOrder/CVE-2021-21978) -- [me1ons/CVE-2021-21978](https://github.com/me1ons/CVE-2021-21978) -- [skytina/CVE-2021-21978](https://github.com/skytina/CVE-2021-21978) - ### CVE-2021-21980 (2021-11-24) The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to gain access to sensitive information. @@ -49282,13 +47230,9 @@ The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server. -- [bigbroke/CVE-2021-21985](https://github.com/bigbroke/CVE-2021-21985) - [alt3kx/CVE-2021-21985_PoC](https://github.com/alt3kx/CVE-2021-21985_PoC) -- [onSec-fr/CVE-2021-21985-Checker](https://github.com/onSec-fr/CVE-2021-21985-Checker) -- [mauricelambert/CVE-2021-21985](https://github.com/mauricelambert/CVE-2021-21985) - [xnianq/cve-2021-21985_exp](https://github.com/xnianq/cve-2021-21985_exp) - [daedalus/CVE-2021-21985](https://github.com/daedalus/CVE-2021-21985) -- [testanull/Project_CVE-2021-21985_PoC](https://github.com/testanull/Project_CVE-2021-21985_PoC) - [haidv35/CVE-2021-21985](https://github.com/haidv35/CVE-2021-21985) - [aristosMiliaressis/CVE-2021-21985](https://github.com/aristosMiliaressis/CVE-2021-21985) - [sknux/CVE-2021-21985_PoC](https://github.com/sknux/CVE-2021-21985_PoC) @@ -49373,23 +47317,12 @@ - [EXP-Docs/CVE-2021-22192](https://github.com/EXP-Docs/CVE-2021-22192) -- [PetrusViet/Gitlab-RCE](https://github.com/PetrusViet/Gitlab-RCE) - -### CVE-2021-22201 (2021-04-02) - -An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.9. A specially crafted import file could read files on the server. - - -- [exp1orer/CVE-2021-22201](https://github.com/exp1orer/CVE-2021-22201) ### CVE-2021-22204 (2021-04-23) Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image -- [convisolabs/CVE-2021-22204-exiftool](https://github.com/convisolabs/CVE-2021-22204-exiftool) -- [se162xg/CVE-2021-22204](https://github.com/se162xg/CVE-2021-22204) -- [bilkoh/POC-CVE-2021-22204](https://github.com/bilkoh/POC-CVE-2021-22204) - [PenTestical/CVE-2021-22204](https://github.com/PenTestical/CVE-2021-22204) - [AssassinUKG/CVE-2021-22204](https://github.com/AssassinUKG/CVE-2021-22204) - [ph-arm/CVE-2021-22204-Gitlab](https://github.com/ph-arm/CVE-2021-22204-Gitlab) @@ -49453,7 +47386,6 @@ When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab CE/EE affecting all versions starting from 10.5 was possible to exploit for an unauthenticated attacker even on a GitLab instance where registration is limited -- [aaminin/CVE-2021-22214](https://github.com/aaminin/CVE-2021-22214) - [Vulnmachines/gitlab-cve-2021-22214](https://github.com/Vulnmachines/gitlab-cve-2021-22214) - [ZZ-SOCMAP/CVE-2021-22214](https://github.com/ZZ-SOCMAP/CVE-2021-22214) @@ -49510,7 +47442,6 @@ - [ZephrFish/CVE-2021-22893_HoneyPoC2](https://github.com/ZephrFish/CVE-2021-22893_HoneyPoC2) -- [MRLEE123456/CVE-2021-22893](https://github.com/MRLEE123456/CVE-2021-22893) - [orangmuda/CVE-2021-22893](https://github.com/orangmuda/CVE-2021-22893) ### CVE-2021-22911 (2021-05-27) @@ -49543,17 +47474,7 @@ On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3 amd BIG-IQ 7.1.0.x before 7.1.0.3 and 7.0.0.x before 7.0.0.2, the iControl REST interface has an unauthenticated remote command execution vulnerability. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated. -- [dorkerdevil/CVE-2021-22986-Poc](https://github.com/dorkerdevil/CVE-2021-22986-Poc) -- [S1xHcL/f5_rce_poc](https://github.com/S1xHcL/f5_rce_poc) -- [Osyanina/westone-CVE-2021-22986-scanner](https://github.com/Osyanina/westone-CVE-2021-22986-scanner) -- [safesword/F5_RCE](https://github.com/safesword/F5_RCE) -- [microvorld/CVE-2021-22986](https://github.com/microvorld/CVE-2021-22986) -- [Al1ex/CVE-2021-22986](https://github.com/Al1ex/CVE-2021-22986) -- [kiri-48/CVE-2021-22986](https://github.com/kiri-48/CVE-2021-22986) - [ZephrFish/CVE-2021-22986_Check](https://github.com/ZephrFish/CVE-2021-22986_Check) -- [yaunsky/CVE-202122986-EXP](https://github.com/yaunsky/CVE-202122986-EXP) -- [Tas9er/CVE-2021-22986](https://github.com/Tas9er/CVE-2021-22986) -- [dotslashed/CVE-2021-22986](https://github.com/dotslashed/CVE-2021-22986) - [west9b/F5-BIG-IP-POC](https://github.com/west9b/F5-BIG-IP-POC) - [amitlttwo/CVE-2021-22986](https://github.com/amitlttwo/CVE-2021-22986) - [huydung26/CVE-2021-22986](https://github.com/huydung26/CVE-2021-22986) @@ -49573,13 +47494,6 @@ - [moften/CVE-2021-23017](https://github.com/moften/CVE-2021-23017) - [6lj/EVIL-CVE-2021-23017-Update-2025](https://github.com/6lj/EVIL-CVE-2021-23017-Update-2025) -### CVE-2021-23132 (2021-03-04) - -An issue was discovered in Joomla! 3.0.0 through 3.9.24. com_media allowed paths that are not intended for image uploads - - -- [HoangKien1020/CVE-2021-23132](https://github.com/HoangKien1020/CVE-2021-23132) - ### CVE-2021-23337 (2021-02-15) Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function. @@ -49608,7 +47522,6 @@ The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from an untrusted source. -- [dn9uy3n/Check-CVE-2021-23383](https://github.com/dn9uy3n/Check-CVE-2021-23383) - [fazilbaig1/CVE-2021-23383](https://github.com/fazilbaig1/CVE-2021-23383) ### CVE-2021-23394 (2021-06-13) @@ -49671,13 +47584,6 @@ - [chessredoffsec/CVE-2021-24019](https://github.com/chessredoffsec/CVE-2021-24019) -### CVE-2021-24027 (2021-04-06) - -A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may have allowed a third party with access to the device’s external storage to read cached TLS material. - - -- [CENSUS/whatsapp-mitd-mitm](https://github.com/CENSUS/whatsapp-mitd-mitm) - ### CVE-2021-24084 (2021-02-25) Windows Mobile Device Management Information Disclosure Vulnerability @@ -49686,36 +47592,14 @@ - [Jeromeyoung/CVE-2021-24084](https://github.com/Jeromeyoung/CVE-2021-24084) - [exploitblizzard/WindowsMDM-LPE-0Day](https://github.com/exploitblizzard/WindowsMDM-LPE-0Day) -### CVE-2021-24085 (2021-02-25) - -Microsoft Exchange Server Spoofing Vulnerability - - -- [sourceincite/CVE-2021-24085](https://github.com/sourceincite/CVE-2021-24085) - ### CVE-2021-24086 (2021-02-25) Windows TCP/IP Denial of Service Vulnerability -- [0vercl0k/CVE-2021-24086](https://github.com/0vercl0k/CVE-2021-24086) - [lisinan988/CVE-2021-24086-exp](https://github.com/lisinan988/CVE-2021-24086-exp) - [personnumber3377/windows_tcpip_fuzz](https://github.com/personnumber3377/windows_tcpip_fuzz) -### CVE-2021-24096 (2021-02-25) - -Windows Kernel Elevation of Privilege Vulnerability - - -- [FunPhishing/CVE-2021-24096](https://github.com/FunPhishing/CVE-2021-24096) - -### CVE-2021-24098 (2021-02-25) - -Windows Console Driver Denial of Service Vulnerability - - -- [waleedassar/CVE-2021-24098](https://github.com/waleedassar/CVE-2021-24098) - ### CVE-2021-24145 (2021-03-18) Arbitrary file upload in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not properly check the imported file, allowing PHP ones to be uploaded by administrator by using the 'text/csv' content-type in the request. @@ -49865,13 +47749,6 @@ - [msd0pe-1/CVE-2021-25253](https://github.com/msd0pe-1/CVE-2021-25253) -### CVE-2021-25281 (2021-02-27) - -An issue was discovered in through SaltStack Salt before 3002.5. salt-api does not honor eauth credentials for the wheel_async client. Thus, an attacker can remotely run any wheel modules on the master. - - -- [Immersive-Labs-Sec/CVE-2021-25281](https://github.com/Immersive-Labs-Sec/CVE-2021-25281) - ### CVE-2021-25337 (2021-03-04) Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read or write certain local files. @@ -49898,7 +47775,6 @@ Each Apache Dubbo server will set a serialization id to tell the clients which serialization protocol it is working on. But for Dubbo versions before 2.7.8 or 2.6.9, an attacker can choose which serialization id the Provider will use by tampering with the byte preamble flags, aka, not following the server's instruction. This means that if a weak deserializer such as the Kryo and FST are somehow in code scope (e.g. if Kryo is somehow a part of a dependency), a remote unauthenticated attacker can tell the Provider to use the weak deserializer, and then proceed to exploit it. -- [Dor-Tumarkin/CVE-2021-25641-Proof-of-Concept](https://github.com/Dor-Tumarkin/CVE-2021-25641-Proof-of-Concept) - [l0n3rs/CVE-2021-25641](https://github.com/l0n3rs/CVE-2021-25641) ### CVE-2021-25642 (2022-08-25) @@ -49913,12 +47789,7 @@ Apache Druid includes the ability to execute user-provided JavaScript code embedded in various types of requests. This functionality is intended for use in high-trust environments, and is disabled by default. However, in Druid 0.20.0 and earlier, it is possible for an authenticated user to send a specially-crafted request that forces Druid to run user-provided JavaScript code for that request, regardless of server configuration. This can be leveraged to execute code on the target machine with the privileges of the Druid server process. -- [yaunsky/cve-2021-25646](https://github.com/yaunsky/cve-2021-25646) -- [lp008/CVE-2021-25646](https://github.com/lp008/CVE-2021-25646) -- [Ormicron/CVE-2021-25646-GUI](https://github.com/Ormicron/CVE-2021-25646-GUI) -- [Vulnmachines/Apache-Druid-CVE-2021-25646](https://github.com/Vulnmachines/Apache-Druid-CVE-2021-25646) - [1n7erface/PocList](https://github.com/1n7erface/PocList) -- [givemefivw/CVE-2021-25646](https://github.com/givemefivw/CVE-2021-25646) - [j2ekim/CVE-2021-25646](https://github.com/j2ekim/CVE-2021-25646) - [k7pro/CVE-2021-25646-exp](https://github.com/k7pro/CVE-2021-25646-exp) - [gps1949/CVE-2021-25646](https://github.com/gps1949/CVE-2021-25646) @@ -49926,20 +47797,6 @@ - [ShadowLance2/Apache-Druid-CVE-2021-25646-Exploit](https://github.com/ShadowLance2/Apache-Druid-CVE-2021-25646-Exploit) - [shahdawadfallah-sys/Cybersecurity-Capstone-Project](https://github.com/shahdawadfallah-sys/Cybersecurity-Capstone-Project) -### CVE-2021-25679 (2021-04-20) - -The AdTran Personal Phone Manager software is vulnerable to an authenticated stored cross-site scripting (XSS) issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not previously been disclosed. Only version 10.8.1 was able to be confirmed during primary research. NOTE: The affected appliances NetVanta 7060 and NetVanta 7100 are considered End of Life and as such this issue will not be patched. - - -- [3ndG4me/AdTran-Personal-Phone-Manager-Vulns](https://github.com/3ndG4me/AdTran-Personal-Phone-Manager-Vulns) - -### CVE-2021-25735 (2021-09-06) - -A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at least partially on the old state of the Node object. Validating Admission Webhook does not observe some previous fields. - - -- [darryk10/CVE-2021-25735](https://github.com/darryk10/CVE-2021-25735) - ### CVE-2021-25741 (2021-09-20) A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on the host filesystem. @@ -50039,9 +47896,6 @@ - [SleepyCofe/CVE-2021-26102](https://github.com/SleepyCofe/CVE-2021-26102) -### CVE-2021-26121 -- [sourceincite/CVE-2021-26121](https://github.com/sourceincite/CVE-2021-26121) - ### CVE-2021-26258 (2022-05-12) Improper access control for the Intel(R) Killer(TM) Control Center software before version 2.4.3337.0 may allow an authorized user to potentially enable escalation of privilege via local access. @@ -50056,17 +47910,6 @@ - [jpmartins/MinimalReproducer](https://github.com/jpmartins/MinimalReproducer) -### CVE-2021-26295 (2021-03-22) - -Apache OFBiz has unsafe deserialization prior to 17.12.06. An unauthenticated attacker can use this vulnerability to successfully take over Apache OFBiz. - - -- [yumusb/CVE-2021-26295](https://github.com/yumusb/CVE-2021-26295) -- [rakjong/CVE-2021-26295-Apache-OFBiz](https://github.com/rakjong/CVE-2021-26295-Apache-OFBiz) -- [dskho/CVE-2021-26295](https://github.com/dskho/CVE-2021-26295) -- [coolyin001/CVE-2021-26295--](https://github.com/coolyin001/CVE-2021-26295--) -- [yuaneuro/ofbiz-poc](https://github.com/yuaneuro/ofbiz-poc) - ### CVE-2021-26411 (2021-03-11) Internet Explorer Memory Corruption Vulnerability @@ -50081,13 +47924,6 @@ - [Nels2/dcom_10036_Solver](https://github.com/Nels2/dcom_10036_Solver) -### CVE-2021-26415 (2021-04-13) - -Windows Installer Elevation of Privilege Vulnerability - - -- [adenkiewicz/CVE-2021-26415](https://github.com/adenkiewicz/CVE-2021-26415) - ### CVE-2021-26690 (2021-06-10) Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Cookie header handled by mod_session can cause a NULL pointer dereference and crash, leading to a possible Denial Of Service @@ -50109,7 +47945,6 @@ Visual Studio Code npm-script Extension Remote Code Execution Vulnerability -- [jackadamson/CVE-2021-26700](https://github.com/jackadamson/CVE-2021-26700) - [june-in-exile/CVE-2021-26700](https://github.com/june-in-exile/CVE-2021-26700) ### CVE-2021-26708 (2021-02-05) @@ -50117,24 +47952,13 @@ A local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race conditions in the AF_VSOCK implementation are caused by wrong locking in net/vmw_vsock/af_vsock.c. The race conditions were implicitly introduced in the commits that added VSOCK multi-transport support. -- [jordan9001/vsock_poc](https://github.com/jordan9001/vsock_poc) -- [azpema/CVE-2021-26708](https://github.com/azpema/CVE-2021-26708) - [kungaocode/vulnerability-analysis-](https://github.com/kungaocode/vulnerability-analysis-) -### CVE-2021-26714 (2021-03-29) - -The Enterprise License Manager portal in Mitel MiContact Center Enterprise before 9.4 could allow a user to access restricted files and folders due to insufficient access control. A successful exploit could allow an attacker to view and modify application data via Directory Traversal. - - -- [PwCNO-CTO/CVE-2021-26714](https://github.com/PwCNO-CTO/CVE-2021-26714) - ### CVE-2021-26814 (2021-03-06) Wazuh API in Wazuh from 4.0.0 to 4.0.3 allows authenticated users to execute arbitrary code with administrative privileges via /manager/files URI. An authenticated user to the service may exploit incomplete input validation on the /manager/files API to inject arbitrary code within the API service script. -- [WickdDavid/CVE-2021-26814](https://github.com/WickdDavid/CVE-2021-26814) -- [CYS4srl/CVE-2021-26814](https://github.com/CYS4srl/CVE-2021-26814) - [paolorabbito/Internet-Security-Project---CVE-2021-26814](https://github.com/paolorabbito/Internet-Security-Project---CVE-2021-26814) ### CVE-2021-26828 (2021-06-11) @@ -50142,16 +47966,8 @@ OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and execute arbitrary JSP files via view_edit.shtm. -- [hev0x/CVE-2021-26828_ScadaBR_RCE](https://github.com/hev0x/CVE-2021-26828_ScadaBR_RCE) - [ridpath/CVE-2021-26828-Ultimate](https://github.com/ridpath/CVE-2021-26828-Ultimate) -### CVE-2021-26832 (2021-04-14) - -Cross Site Scripting (XSS) in the "Reset Password" page form of Priority Enterprise Management System v8.00 allows attackers to execute javascript on behalf of the victim by sending a malicious URL or directing the victim to a malicious site. - - -- [gal-nagli/CVE-2021-26832](https://github.com/gal-nagli/CVE-2021-26832) - ### CVE-2021-26837 (2023-09-18) SQL Injection vulnerability in SearchTextBox parameter in Fortra (Formerly HelpSystems) DeliverNow before version 1.2.18, allows attackers to execute arbitrary code, escalate privileges, and gain sensitive information. @@ -50164,43 +47980,12 @@ Microsoft Exchange Server Remote Code Execution Vulnerability -- [sgnls/exchange-0days-202103](https://github.com/sgnls/exchange-0days-202103) -- [soteria-security/HAFNIUM-IOC](https://github.com/soteria-security/HAFNIUM-IOC) -- [cert-lv/exchange_webshell_detection](https://github.com/cert-lv/exchange_webshell_detection) -- [conjojo/Microsoft_Exchange_Server_SSRF_CVE-2021-26855](https://github.com/conjojo/Microsoft_Exchange_Server_SSRF_CVE-2021-26855) -- [pussycat0x/CVE-2021-26855-SSRF](https://github.com/pussycat0x/CVE-2021-26855-SSRF) -- [La3B0z/CVE-2021-26855-SSRF-Exchange](https://github.com/La3B0z/CVE-2021-26855-SSRF-Exchange) -- [mekhalleh/exchange_proxylogon](https://github.com/mekhalleh/exchange_proxylogon) -- [Yt1g3r/CVE-2021-26855_SSRF](https://github.com/Yt1g3r/CVE-2021-26855_SSRF) -- [hackerxj007/CVE-2021-26855](https://github.com/hackerxj007/CVE-2021-26855) - [dwisiswant0/proxylogscan](https://github.com/dwisiswant0/proxylogscan) -- [mauricelambert/ExchangeWeaknessTest](https://github.com/mauricelambert/ExchangeWeaknessTest) -- [DCScoder/Exchange_IOC_Hunter](https://github.com/DCScoder/Exchange_IOC_Hunter) -- [srvaccount/CVE-2021-26855-PoC](https://github.com/srvaccount/CVE-2021-26855-PoC) -- [h4x0r-dz/CVE-2021-26855](https://github.com/h4x0r-dz/CVE-2021-26855) -- [alt3kx/CVE-2021-26855_PoC](https://github.com/alt3kx/CVE-2021-26855_PoC) - [r0xDB/CVE-2021-26855](https://github.com/r0xDB/CVE-2021-26855) -- [hackerschoice/CVE-2021-26855](https://github.com/hackerschoice/CVE-2021-26855) -- [SCS-Labs/HAFNIUM-Microsoft-Exchange-0day](https://github.com/SCS-Labs/HAFNIUM-Microsoft-Exchange-0day) -- [KotSec/CVE-2021-26855-Scanner](https://github.com/KotSec/CVE-2021-26855-Scanner) - [hakivvi/proxylogon](https://github.com/hakivvi/proxylogon) - [ZephrFish/Exch-CVE-2021-26855](https://github.com/ZephrFish/Exch-CVE-2021-26855) -- [mil1200/ProxyLogon-CVE-2021-26855](https://github.com/mil1200/ProxyLogon-CVE-2021-26855) -- [evilashz/ExchangeSSRFtoRCEExploit](https://github.com/evilashz/ExchangeSSRFtoRCEExploit) - [ZephrFish/Exch-CVE-2021-26855_Priv](https://github.com/ZephrFish/Exch-CVE-2021-26855_Priv) -- [Mr-xn/CVE-2021-26855-d](https://github.com/Mr-xn/CVE-2021-26855-d) -- [RickGeex/ProxyLogon](https://github.com/RickGeex/ProxyLogon) -- [Immersive-Labs-Sec/ProxyLogon](https://github.com/Immersive-Labs-Sec/ProxyLogon) -- [TaroballzChen/ProxyLogon-CVE-2021-26855-metasploit](https://github.com/TaroballzChen/ProxyLogon-CVE-2021-26855-metasploit) -- [p0wershe11/ProxyLogon](https://github.com/p0wershe11/ProxyLogon) -- [antichown/Scan-Vuln-CVE-2021-26855](https://github.com/antichown/Scan-Vuln-CVE-2021-26855) -- [catmandx/CVE-2021-26855-Exchange-RCE](https://github.com/catmandx/CVE-2021-26855-Exchange-RCE) -- [hictf/CVE-2021-26855-CVE-2021-27065](https://github.com/hictf/CVE-2021-26855-CVE-2021-27065) -- [praetorian-inc/proxylogon-exploit](https://github.com/praetorian-inc/proxylogon-exploit) -- [Flangvik/SharpProxyLogon](https://github.com/Flangvik/SharpProxyLogon) -- [haotiku/CVE-2021-26855-exploit-Exchange](https://github.com/haotiku/CVE-2021-26855-exploit-Exchange) - [hosch3n/ProxyVulns](https://github.com/hosch3n/ProxyVulns) -- [Nick-Yin12/106362522](https://github.com/Nick-Yin12/106362522) - [yaoxiaoangry3/Flangvik](https://github.com/yaoxiaoangry3/Flangvik) - [thau0x01/poc_proxylogon](https://github.com/thau0x01/poc_proxylogon) - [1342486672/Flangvik](https://github.com/1342486672/Flangvik) @@ -50215,65 +48000,6 @@ - [SimoesCTT/CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-CRITICAL-CVE-2021-26855-CVE-2021-27065](https://github.com/SimoesCTT/CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-CRITICAL-CVE-2021-26855-CVE-2021-27065) - [probablysecure/Triage-CVE-2021-26855-ProxyLogon---Microsoft-Exchange-](https://github.com/probablysecure/Triage-CVE-2021-26855-ProxyLogon---Microsoft-Exchange-) -### CVE-2021-26856 -- [avi8892/CVE-2021-26856](https://github.com/avi8892/CVE-2021-26856) - -### CVE-2021-26857 (2021-03-02) - -Microsoft Exchange Server Remote Code Execution Vulnerability - - -- [sirpedrotavares/Proxylogon-exploit](https://github.com/sirpedrotavares/Proxylogon-exploit) - -### CVE-2021-26868 (2021-03-11) - -Windows Graphics Component Elevation of Privilege Vulnerability - - -- [KangD1W2/CVE-2021-26868](https://github.com/KangD1W2/CVE-2021-26868) - -### CVE-2021-26871 (2021-03-11) - -Windows WalletService Elevation of Privilege Vulnerability - - -- [fr4nkxixi/CVE-2021-26871_POC](https://github.com/fr4nkxixi/CVE-2021-26871_POC) - -### CVE-2021-26882 (2021-03-11) - -Remote Access API Elevation of Privilege Vulnerability - - -- [taiji-xo/CVE-2021-26882](https://github.com/taiji-xo/CVE-2021-26882) - -### CVE-2021-26903 (2021-02-26) - -LMA ISIDA Retriever 5.2 is vulnerable to XSS via query['text']. - - -- [Security-AVS/CVE-2021-26903](https://github.com/Security-AVS/CVE-2021-26903) - -### CVE-2021-26904 (2021-02-26) - -LMA ISIDA Retriever 5.2 allows SQL Injection. - - -- [Security-AVS/-CVE-2021-26904](https://github.com/Security-AVS/-CVE-2021-26904) - -### CVE-2021-26943 (2021-03-31) - -The UX360CA BIOS through 303 on ASUS laptops allow an attacker (with the ring 0 privilege) to overwrite nearly arbitrary physical memory locations, including SMRAM, and execute arbitrary code in the SMM (issue 3 of 3). - - -- [tandasat/SmmExploit](https://github.com/tandasat/SmmExploit) - -### CVE-2021-27065 (2021-03-02) - -Microsoft Exchange Server Remote Code Execution Vulnerability - - -- [adamrpostjr/cve-2021-27065](https://github.com/adamrpostjr/cve-2021-27065) - ### CVE-2021-27180 (2021-04-14) An issue was discovered in MDaemon before 20.0.4. There is Reflected XSS in Webmail (aka WorldClient). It can be exploited via a GET request. It allows performing any action with the privileges of the attacked user. @@ -50281,27 +48007,6 @@ - [chudyPB/MDaemon-Advisories](https://github.com/chudyPB/MDaemon-Advisories) -### CVE-2021-27187 (2021-02-12) - -The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 stores authentication credentials in cleartext in login.sav when the Save Password box is checked. - - -- [jet-pentest/CVE-2021-27187](https://github.com/jet-pentest/CVE-2021-27187) - -### CVE-2021-27188 (2021-02-12) - -The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 allows attackers to cause a denial of service (access suspended for five hours) by making five invalid login attempts to a victim's account. - - -- [jet-pentest/CVE-2021-27188](https://github.com/jet-pentest/CVE-2021-27188) - -### CVE-2021-27190 (2021-02-12) - -A Stored Cross Site Scripting(XSS) Vulnerability was discovered in PEEL SHOPPING 9.3.0 and 9.4.0, which are publicly available. The user supplied input containing polyglot payload is echoed back in javascript code in HTML response. This allows an attacker to input malicious JavaScript which can steal cookie, redirect them to other malicious website, etc. - - -- [anmolksachan/CVE-2021-27190-PEEL-Shopping-cart-9.3.0-Stored-XSS](https://github.com/anmolksachan/CVE-2021-27190-PEEL-Shopping-cart-9.3.0-Stored-XSS) - ### CVE-2021-27198 (2021-02-26) An issue was discovered in Visualware MyConnection Server before v11.1a. Unauthenticated Remote Code Execution can occur via Arbitrary File Upload in the web service when using a myspeed/sf?filename= URI. This application is written in Java and is thus cross-platform. The Windows installation runs as SYSTEM, which means that exploitation gives one Administrator privileges on the target system. @@ -50316,13 +48021,6 @@ - [b4shfire/stegcrack](https://github.com/b4shfire/stegcrack) -### CVE-2021-27246 (2021-04-14) - -This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 AC1750 1.0.15 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of MAC addresses by the tdpServer endpoint. A crafted TCP message can write stack pointers to the stack. An attacker can leverage this vulnerability to execute code in the context of the root user. Was ZDI-CAN-12306. - - -- [synacktiv/CVE-2021-27246_Pwn2Own2020](https://github.com/synacktiv/CVE-2021-27246_Pwn2Own2020) - ### CVE-2021-27285 (2025-01-06) An issue was discovered in Inspur ClusterEngine v4.0 that allows attackers to gain escalated Local privileges and execute arbitrary commands via /opt/tsce4/torque6/bin/getJobsByShell. @@ -50344,20 +48042,6 @@ - [SQSamir/CVE-2021-27328](https://github.com/SQSamir/CVE-2021-27328) -### CVE-2021-27338 (2021-07-20) - -Faraday Edge before 3.7 allows XSS via the network/create/ page and its network name parameter. - - -- [Pho03niX/CVE-2021-27338](https://github.com/Pho03niX/CVE-2021-27338) - -### CVE-2021-27342 (2021-05-17) - -An authentication brute-force protection mechanism bypass in telnetd in D-Link Router model DIR-842 firmware version 3.0.2 allows a remote attacker to circumvent the anti-brute-force cool-down delay period via a timing-based side-channel attack - - -- [mavlevin/D-Link-CVE-2021-27342-exploit](https://github.com/mavlevin/D-Link-CVE-2021-27342-exploit) - ### CVE-2021-27365 (2021-03-07) An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not have appropriate length constraints or checks, and can exceed the PAGE_SIZE value. An unprivileged user can send a Netlink message that is associated with iSCSI, and has a length up to the maximum length of a Netlink message. @@ -50365,20 +48049,6 @@ - [WhatsWrongAndWhy/CVE-2021-27365](https://github.com/WhatsWrongAndWhy/CVE-2021-27365) -### CVE-2021-27403 (2021-02-19) - -Askey RTF8115VW BR_SV_g11.11_RTF_TEF001_V6.54_V014 devices allow cgi-bin/te_acceso_router.cgi curWebPage XSS. - - -- [bokanrb/CVE-2021-27403](https://github.com/bokanrb/CVE-2021-27403) - -### CVE-2021-27404 (2021-02-19) - -Askey RTF8115VW BR_SV_g11.11_RTF_TEF001_V6.54_V014 devices allow injection of a Host HTTP header. - - -- [bokanrb/CVE-2021-27404](https://github.com/bokanrb/CVE-2021-27404) - ### CVE-2021-27513 (2021-02-21) The module admin_ITSM in EyesOfNetwork 5.3-10 allows remote authenticated users to upload arbitrary .xml.php files because it relies on "le filtre userside." @@ -50399,7 +48069,6 @@ In versions 8.2.1 through 8.5.2 of Pega Infinity, the password reset functionality for local accounts can be used to bypass local authentication checks. -- [samwcyo/CVE-2021-27651-PoC](https://github.com/samwcyo/CVE-2021-27651-PoC) - [Vulnmachines/CVE-2021-27651](https://github.com/Vulnmachines/CVE-2021-27651) - [orangmuda/CVE-2021-27651](https://github.com/orangmuda/CVE-2021-27651) @@ -50409,7 +48078,6 @@ - [kahla-sec/CVE-2021-27850_POC](https://github.com/kahla-sec/CVE-2021-27850_POC) -- [dorkerdevil/CVE-2021-27850_POC](https://github.com/dorkerdevil/CVE-2021-27850_POC) - [Ovi3/CVE_2021_27850_POC](https://github.com/Ovi3/CVE_2021_27850_POC) - [novysodope/CVE-2021-27850](https://github.com/novysodope/CVE-2021-27850) @@ -50427,20 +48095,11 @@ - [yashswarup12/CVE-2021-27877-PoC](https://github.com/yashswarup12/CVE-2021-27877-PoC) -### CVE-2021-27890 (2021-03-15) - -SQL Injection vulnerablity in MyBB before 1.8.26 via theme properties included in theme XML files. - - -- [xiaopan233/Mybb-XSS_SQL_RCE-POC](https://github.com/xiaopan233/Mybb-XSS_SQL_RCE-POC) - ### CVE-2021-27905 (2021-04-13) The ReplicationHandler (normally registered at "/replication" under a Solr core) in Apache Solr has a "masterUrl" (also "leaderUrl" alias) parameter that is used to designate another ReplicationHandler on another Solr core to replicate index data into the local core. To prevent a SSRF vulnerability, Solr ought to check these parameters against a similar configuration it uses for the "shards" parameter. Prior to this bug getting fixed, it did not. This problem affects essentially all Solr versions prior to it getting fixed in 8.8.2. -- [Henry4E36/Solr-SSRF](https://github.com/Henry4E36/Solr-SSRF) -- [W2Ning/Solr-SSRF](https://github.com/W2Ning/Solr-SSRF) - [murataydemir/CVE-2021-27905](https://github.com/murataydemir/CVE-2021-27905) - [pdelteil/CVE-2021-27905.POC](https://github.com/pdelteil/CVE-2021-27905.POC) - [RIZZZIOM/CVE-2021-27905](https://github.com/RIZZZIOM/CVE-2021-27905) @@ -50454,19 +48113,11 @@ - [shamo0/CVE-2021-27928-POC](https://github.com/shamo0/CVE-2021-27928-POC) - [LalieA/CVE-2021-27928](https://github.com/LalieA/CVE-2021-27928) -### CVE-2021-27963 (2021-03-05) - -SonLogger before 6.4.1 is affected by user creation with any user permissions profile (e.g., SuperAdmin). An anonymous user can send a POST request to /User/saveUser without any authentication or session header. - - -- [erberkan/SonLogger-vulns](https://github.com/erberkan/SonLogger-vulns) - ### CVE-2021-27965 (2021-03-05) The MsIo64.sys driver before 1.1.19.1016 in MSI Dragon Center before 2.0.98.0 has a buffer overflow that allows privilege escalation via a crafted 0x80102040, 0x80102044, 0x80102050, or 0x80102054 IOCTL request. -- [mathisvickie/CVE-2021-27965](https://github.com/mathisvickie/CVE-2021-27965) - [Jeromeyoung/CVE-2021-27965](https://github.com/Jeromeyoung/CVE-2021-27965) - [fengjixuchui/CVE-2021-27965](https://github.com/fengjixuchui/CVE-2021-27965) @@ -50498,20 +48149,6 @@ - [h3ck13r/CVE-2021-28235](https://github.com/h3ck13r/CVE-2021-28235) -### CVE-2021-28310 (2021-04-13) - -Win32k Elevation of Privilege Vulnerability - - -- [Rafael-Svechinskaya/IOC_for_CVE-2021-28310](https://github.com/Rafael-Svechinskaya/IOC_for_CVE-2021-28310) - -### CVE-2021-28312 (2021-04-13) - -Windows NTFS Denial of Service Vulnerability - - -- [shubham0d/CVE-2021-28312](https://github.com/shubham0d/CVE-2021-28312) - ### CVE-2021-28378 (2021-03-15) Gitea 1.12.x and 1.13.x before 1.13.4 allows XSS via certain issue data in some situations. @@ -50524,8 +48161,6 @@ Windows Hyper-V Remote Code Execution Vulnerability -- [0vercl0k/CVE-2021-28476](https://github.com/0vercl0k/CVE-2021-28476) -- [bluefrostsecurity/CVE-2021-28476](https://github.com/bluefrostsecurity/CVE-2021-28476) - [LaCeeKa/CVE-2021-28476-tools-env](https://github.com/LaCeeKa/CVE-2021-28476-tools-env) ### CVE-2021-28480 (2021-04-13) @@ -50535,14 +48170,6 @@ - [ZephrFish/CVE-2021-28480_HoneyPoC3](https://github.com/ZephrFish/CVE-2021-28480_HoneyPoC3) -### CVE-2021-28482 (2021-04-13) - -Microsoft Exchange Server Remote Code Execution Vulnerability - - -- [Shadow0ps/CVE-2021-28482-Exchange-POC](https://github.com/Shadow0ps/CVE-2021-28482-Exchange-POC) -- [KevinWorst/CVE-2021-28482_Exploit](https://github.com/KevinWorst/CVE-2021-28482_Exploit) - ### CVE-2021-28663 (2021-05-10) The Arm Mali GPU kernel driver allows privilege escalation or information disclosure because GPU memory operations are mishandled, leading to a use-after-free. This affects Bifrost r0p0 through r28p0 before r29p0, Valhall r19p0 through r28p0 before r29p0, and Midgard r4p0 through r30p0. @@ -50557,13 +48184,6 @@ - [jaysharma786/CVE-2021-29003](https://github.com/jaysharma786/CVE-2021-29003) -### CVE-2021-29155 (2021-04-20) - -An issue was discovered in the Linux kernel through 5.11.x. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory. Specifically, for sequences of pointer arithmetic operations, the pointer modification performed by the first operation is not correctly accounted for when restricting subsequent operations. - - -- [benschlueter/CVE-2021-29155](https://github.com/benschlueter/CVE-2021-29155) - ### CVE-2021-29156 (2021-03-25) ForgeRock OpenAM before 13.5.1 allows LDAP injection via the Webfinger protocol. For example, an unauthenticated attacker can perform character-by-character retrieval of password hashes, or retrieve a session token or a private key. @@ -50572,20 +48192,6 @@ - [guidepointsecurity/CVE-2021-29156](https://github.com/guidepointsecurity/CVE-2021-29156) - [5amu/CVE-2021-29156](https://github.com/5amu/CVE-2021-29156) -### CVE-2021-29200 (2021-04-27) - -Apache OFBiz has unsafe deserialization prior to 17.12.07 version An unauthenticated user can perform an RCE attack - - -- [freeide/CVE-2021-29200](https://github.com/freeide/CVE-2021-29200) - -### CVE-2021-29267 (2021-03-29) - -Sherlock SherlockIM through 2021-03-29 allows Cross Site Scripting (XSS) by leveraging the api/Files/Attachment URI to attack help-desk staff via the chatbot feature. - - -- [Security-AVS/CVE-2021-29267](https://github.com/Security-AVS/CVE-2021-29267) - ### CVE-2021-29337 (2021-06-21) MODAPI.sys in MSI Dragon Center 2.0.104.0 allows low-privileged users to access kernel memory and potentially escalate privileges via a crafted IOCTL 0x9c406104 call. This IOCTL provides the MmMapIoSpace feature for mapping physical memory. @@ -50593,14 +48199,6 @@ - [rjt-gupta/CVE-2021-29337](https://github.com/rjt-gupta/CVE-2021-29337) -### CVE-2021-29349 (2021-03-31) - -Mahara 20.10 is affected by Cross Site Request Forgery (CSRF) that allows a remote attacker to remove inbox-mail on the server. The application fails to validate the CSRF token for a POST request. An attacker can craft a module/multirecipientnotification/inbox.php pieform_delete_all_notifications request, which leads to removing all messages from a mailbox. - - -- [0xBaz/CVE-2021-29349](https://github.com/0xBaz/CVE-2021-29349) -- [Vulnmachines/CVE-2021-29349](https://github.com/Vulnmachines/CVE-2021-29349) - ### CVE-2021-29425 (2021-04-13) In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus "limited" path traversal), if the calling code would use the result to construct a path value. @@ -50616,13 +48214,6 @@ - [arsalanraja987/gradle-cve-2021-29427-demo](https://github.com/arsalanraja987/gradle-cve-2021-29427-demo) -### CVE-2021-29440 (2021-04-13) - -Grav is a file based Web-platform. Twig processing of static pages can be enabled in the front matter by any administrative user allowed to create or edit pages. As the Twig processor runs unsandboxed, this behavior can be used to gain arbitrary code execution and elevate privileges on the instance. The issue was addressed in version 1.7.11. - - -- [CsEnox/CVE-2021-29440](https://github.com/CsEnox/CVE-2021-29440) - ### CVE-2021-29441 (2021-04-27) Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before version 1.4.1, when configured to use authentication (-Dnacos.core.auth.enabled=true) Nacos uses the AuthFilter servlet filter to enforce authentication. This filter has a backdoor that enables Nacos servers to bypass this filter and therefore skip authentication checks. This mechanism relies on the user-agent HTTP header so it can be easily spoofed. This issue may allow any user to carry out any administrative tasks on the Nacos server. @@ -50646,7 +48237,6 @@ - [motikan2010/CVE-2021-29447](https://github.com/motikan2010/CVE-2021-29447) -- [Vulnmachines/wordpress_cve-2021-29447](https://github.com/Vulnmachines/wordpress_cve-2021-29447) - [dnr6419/CVE-2021-29447](https://github.com/dnr6419/CVE-2021-29447) - [AssassinUKG/CVE-2021-29447](https://github.com/AssassinUKG/CVE-2021-29447) - [b-abderrahmane/CVE-2021-29447-POC](https://github.com/b-abderrahmane/CVE-2021-29447-POC) @@ -50674,23 +48264,8 @@ XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types is affected. The vulnerability is patched in version 1.4.17. -- [MyBlackManba/CVE-2021-29505](https://github.com/MyBlackManba/CVE-2021-29505) - [cuijiung/xstream-CVE-2021-29505](https://github.com/cuijiung/xstream-CVE-2021-29505) -### CVE-2021-29627 (2021-04-07) - -In FreeBSD 13.0-STABLE before n245050, 12.2-STABLE before r369525, 13.0-RC4 before p0, and 12.2-RELEASE before p6, listening socket accept filters implementing the accf_create callback incorrectly freed a process supplied argument string. Additional operations on the socket can lead to a double free or use after free. - - -- [raymontag/cve-2021-29627](https://github.com/raymontag/cve-2021-29627) - -### CVE-2021-30005 (2021-05-11) - -In JetBrains PyCharm before 2020.3.4, local code execution was possible because of insufficient checks when getting the project from VCS. - - -- [atorralba/CVE-2021-30005-POC](https://github.com/atorralba/CVE-2021-30005-POC) - ### CVE-2021-30109 (2021-04-05) Froala Editor 3.2.6 is affected by Cross Site Scripting (XSS). Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting (XSS) vulnerability within the hyperlink creation module. @@ -50698,20 +48273,6 @@ - [Hackdwerg/CVE-2021-30109](https://github.com/Hackdwerg/CVE-2021-30109) -### CVE-2021-30128 (2021-04-27) - -Apache OFBiz has unsafe deserialization prior to 17.12.07 version - - -- [LioTree/CVE-2021-30128-EXP](https://github.com/LioTree/CVE-2021-30128-EXP) - -### CVE-2021-30146 (2021-04-06) - -Seafile 7.0.5 (2019) allows Persistent XSS via the "share of library functionality." - - -- [Security-AVS/CVE-2021-30146](https://github.com/Security-AVS/CVE-2021-30146) - ### CVE-2021-30180 (2021-05-31) Apache Dubbo prior to 2.7.9 support Tag routing which will enable a customer to route the request to the right server. These rules are used by the customers when making a request in order to find the right endpoint. When parsing these YAML rules, Dubbo customers may enable calling arbitrary constructors. @@ -50747,16 +48308,8 @@ - [daedalus/CVE-2021-30461](https://github.com/daedalus/CVE-2021-30461) - [Vulnmachines/CVE-2021-30461](https://github.com/Vulnmachines/CVE-2021-30461) -- [Al1ex/CVE-2021-30461](https://github.com/Al1ex/CVE-2021-30461) - [puckiestyle/CVE-2021-30461](https://github.com/puckiestyle/CVE-2021-30461) -### CVE-2021-30481 (2021-04-10) - -Valve Steam before 2021-04-17, when a Source engine game is installed, allows remote authenticated users to execute arbitrary code because of a buffer overflow that occurs for a Steam invite after one click. - - -- [floesen/CVE-2021-30481](https://github.com/floesen/CVE-2021-30481) - ### CVE-2021-30551 (2021-06-15) Type confusion in V8 in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. @@ -50855,36 +48408,18 @@ - [fordsham/CVE-2021-30956](https://github.com/fordsham/CVE-2021-30956) -### CVE-2021-31159 (2021-06-16) - -Zoho ManageEngine ServiceDesk Plus MSP before 10519 is vulnerable to a User Enumeration bug due to improper error-message generation in the Forgot Password functionality, aka SDPMSP-15732. - - -- [ricardojoserf/CVE-2021-31159](https://github.com/ricardojoserf/CVE-2021-31159) - ### CVE-2021-31166 (2021-05-11) HTTP Protocol Stack Remote Code Execution Vulnerability -- [0vercl0k/CVE-2021-31166](https://github.com/0vercl0k/CVE-2021-31166) -- [zha0gongz1/CVE-2021-31166](https://github.com/zha0gongz1/CVE-2021-31166) - [mvlnetdev/CVE-2021-31166-detection-rules](https://github.com/mvlnetdev/CVE-2021-31166-detection-rules) - [corelight/CVE-2021-31166](https://github.com/corelight/CVE-2021-31166) -- [zecopro/CVE-2021-31166](https://github.com/zecopro/CVE-2021-31166) -- [bgsilvait/WIn-CVE-2021-31166](https://github.com/bgsilvait/WIn-CVE-2021-31166) - [y0g3sh-99/CVE-2021-31166-Exploit](https://github.com/y0g3sh-99/CVE-2021-31166-Exploit) - [ZZ-SOCMAP/CVE-2021-31166](https://github.com/ZZ-SOCMAP/CVE-2021-31166) - [iranzai/CVE-2021-31166-exploit](https://github.com/iranzai/CVE-2021-31166-exploit) - [0xmaximus/Home-Demolisher](https://github.com/0xmaximus/Home-Demolisher) -### CVE-2021-31184 (2021-05-11) - -Microsoft Windows Infrared Data Association (IrDA) Information Disclosure Vulnerability - - -- [waleedassar/CVE-2021-31184](https://github.com/waleedassar/CVE-2021-31184) - ### CVE-2021-31290 - [qaisarafridi/cve-2021-31290](https://github.com/qaisarafridi/cve-2021-31290) @@ -50927,37 +48462,6 @@ - [UserB1ank/CVE-2021-31630](https://github.com/UserB1ank/CVE-2021-31630) - [tranquac/OpenPLC_v3](https://github.com/tranquac/OpenPLC_v3) -### CVE-2021-31728 (2021-05-17) - -Incorrect access control in zam64.sys, zam32.sys in MalwareFox AntiMalware 2.74.0.150 allows a non-privileged process to open a handle to \.\ZemanaAntiMalware, register itself with the driver by sending IOCTL 0x80002010, allocate executable memory using a flaw in IOCTL 0x80002040, install a hook with IOCTL 0x80002044 and execute the executable memory using this hook with IOCTL 0x80002014 or 0x80002018, this exposes ring 0 code execution in the context of the driver allowing the non-privileged process to elevate privileges. - - -- [irql/CVE-2021-31728](https://github.com/irql/CVE-2021-31728) - -### CVE-2021-31760 (2021-04-25) - -Webmin 1.973 is affected by Cross Site Request Forgery (CSRF) to achieve Remote Command Execution (RCE) through Webmin's running process feature. - - -- [Mesh3l911/CVE-2021-31760](https://github.com/Mesh3l911/CVE-2021-31760) -- [electronicbots/CVE-2021-31760](https://github.com/electronicbots/CVE-2021-31760) - -### CVE-2021-31761 (2021-04-25) - -Webmin 1.973 is affected by reflected Cross Site Scripting (XSS) to achieve Remote Command Execution through Webmin's running process feature. - - -- [Mesh3l911/CVE-2021-31761](https://github.com/Mesh3l911/CVE-2021-31761) -- [electronicbots/CVE-2021-31761](https://github.com/electronicbots/CVE-2021-31761) - -### CVE-2021-31762 (2021-04-25) - -Webmin 1.973 is affected by Cross Site Request Forgery (CSRF) to create a privileged user through Webmin's add users feature, and then get a reverse shell through Webmin's running process feature. - - -- [Mesh3l911/CVE-2021-31762](https://github.com/Mesh3l911/CVE-2021-31762) -- [electronicbots/CVE-2021-31762](https://github.com/electronicbots/CVE-2021-31762) - ### CVE-2021-31796 (2021-09-02) An inadequate encryption vulnerability discovered in CyberArk Credential Provider before 12.1 may lead to Information Disclosure. An attacker may realistically have enough information that the number of possible keys (for a credential file) is only one, and the number is usually not higher than 2^36. @@ -50982,13 +48486,6 @@ - [z92g/CVE-2021-31805](https://github.com/z92g/CVE-2021-31805) - [nth347/CVE-2021-31805](https://github.com/nth347/CVE-2021-31805) -### CVE-2021-31856 (2021-04-28) - -A SQL Injection vulnerability in the REST API in Layer5 Meshery 0.5.2 allows an attacker to execute arbitrary SQL commands via the /experimental/patternfiles endpoint (order parameter in GetMesheryPatterns in models/meshery_pattern_persister.go). - - -- [ssst0n3/CVE-2021-31856](https://github.com/ssst0n3/CVE-2021-31856) - ### CVE-2021-31862 (2021-10-29) SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication. @@ -51001,7 +48498,6 @@ Windows Kernel Information Disclosure Vulnerability -- [freeide/CVE-2021-31955-POC](https://github.com/freeide/CVE-2021-31955-POC) - [ApexPredator-InfoSec/forti_shield](https://github.com/ApexPredator-InfoSec/forti_shield) ### CVE-2021-31956 (2021-06-08) @@ -51021,55 +48517,6 @@ - [magicrc/CVE-2021-32099](https://github.com/magicrc/CVE-2021-32099) -### CVE-2021-32156 (2022-04-11) - -A cross-site request forgery (CSRF) vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature. - - -- [Mesh3l911/CVE-2021-32156](https://github.com/Mesh3l911/CVE-2021-32156) - -### CVE-2021-32157 (2022-04-11) - -A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 via the Scheduled Cron Jobs feature. - - -- [Mesh3l911/CVE-2021-32157](https://github.com/Mesh3l911/CVE-2021-32157) - -### CVE-2021-32158 (2022-04-11) - -A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 via the Upload and Download feature. - - -- [Mesh3l911/CVE-2021-32158](https://github.com/Mesh3l911/CVE-2021-32158) - -### CVE-2021-32159 (2022-04-11) - -A Cross-site request forgery (CSRF) vulnerability exists in Webmin 1.973 via the Upload and Download feature. - - -- [Mesh3l911/CVE-2021-32159](https://github.com/Mesh3l911/CVE-2021-32159) - -### CVE-2021-32160 (2022-04-11) - -A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 through the Add Users feature. - - -- [Mesh3l911/CVE-2021-32160](https://github.com/Mesh3l911/CVE-2021-32160) - -### CVE-2021-32161 (2022-04-11) - -A Cross-Site Scripting (XSS) vulnerability exists in Webmin 1.973 through the File Manager feature. - - -- [Mesh3l911/CVE-2021-32161](https://github.com/Mesh3l911/CVE-2021-32161) - -### CVE-2021-32162 (2022-04-11) - -A Cross-site request forgery (CSRF) vulnerability exists in Webmin 1.973 through the File Manager feature. - - -- [Mesh3l911/CVE-2021-32162](https://github.com/Mesh3l911/CVE-2021-32162) - ### CVE-2021-32305 (2021-05-18) WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search parameter. @@ -51092,13 +48539,6 @@ - [intrinsic-propensity/turing-machine](https://github.com/intrinsic-propensity/turing-machine) -### CVE-2021-32537 (2021-07-07) - -Realtek HAD contains a driver crashed vulnerability which allows local side attackers to send a special string to the kernel driver in a user’s mode. Due to unexpected commands, the kernel driver will cause the system crashed. - - -- [0vercl0k/CVE-2021-32537](https://github.com/0vercl0k/CVE-2021-32537) - ### CVE-2021-32644 (2021-06-22) Ampache is an open source web based audio/video streaming application and file manager. Due to a lack of input filtering versions 4.x.y are vulnerable to code injection in random.php. The attack requires user authentication to access the random.php page unless the site is running in demo mode. This issue has been resolved in 4.4.3. @@ -51135,13 +48575,6 @@ - [yamory/CVE-2021-32804](https://github.com/yamory/CVE-2021-32804) -### CVE-2021-32819 (2021-05-14) - -Squirrelly is a template engine implemented in JavaScript that works out of the box with ExpressJS. Squirrelly mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuration options remote code execution may be triggered in downstream applications. This issue is fixed in version 9.0.0. For complete details refer to the referenced GHSL-2021-023. - - -- [Abady0x1/CVE-2021-32819](https://github.com/Abady0x1/CVE-2021-32819) - ### CVE-2021-33026 (2021-05-13) The Flask-Caching extension through 1.10.1 for Flask relies on Pickle for serialization, which may lead to remote code execution or local privilege escalation. If an attacker gains access to cache storage (e.g., filesystem, Memcached, Redis, etc.), they can construct a crafted payload, poison the cache, and execute Python code. NOTE: a third party indicates that exploitation is extremely unlikely unless the machine is already compromised; in other cases, the attacker would be unable to write their payload to the cache and generate the required collision @@ -51190,7 +48623,6 @@ Boa 0.94.13 allows remote attackers to obtain sensitive information via a misconfiguration involving backup.html, preview.html, js/log.js, log.html, email.html, online-users.html, and config.js. NOTE: multiple third parties report that this is a site-specific issue because those files are not part of Boa. -- [mdanzaruddin/CVE-2021-33558.](https://github.com/mdanzaruddin/CVE-2021-33558.) - [anldori/CVE-2021-33558](https://github.com/anldori/CVE-2021-33558) ### CVE-2021-33560 (2021-06-08) @@ -51200,21 +48632,6 @@ - [IBM/PGP-client-checker-CVE-2021-33560](https://github.com/IBM/PGP-client-checker-CVE-2021-33560) -### CVE-2021-33564 (2021-05-29) - -An argument injection vulnerability in the Dragonfly gem before 1.4.0 for Ruby allows remote attackers to read and write to arbitrary files via a crafted URL when the verify_url option is disabled. This may lead to code execution. The problem occurs because the generate and process features mishandle use of the ImageMagick convert utility. - - -- [mlr0p/CVE-2021-33564](https://github.com/mlr0p/CVE-2021-33564) -- [dorkerdevil/CVE-2021-33564](https://github.com/dorkerdevil/CVE-2021-33564) - -### CVE-2021-33624 (2021-06-23) - -In kernel/bpf/verifier.c in the Linux kernel before 5.12.13, a branch can be mispredicted (e.g., because of type confusion) and consequently an unprivileged BPF program can read arbitrary memory locations via a side-channel attack, aka CID-9183671af6db. - - -- [benschlueter/CVE-2021-33624](https://github.com/benschlueter/CVE-2021-33624) - ### CVE-2021-33690 (2021-09-15) Server-Side Request Forgery (SSRF) vulnerability has been detected in the SAP NetWeaver Development Infrastructure Component Build Service versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50The SAP NetWeaver Development Infrastructure Component Build Service allows a threat actor who has access to the server to perform proxy attacks on server by sending crafted queries. Due to this, the threat actor could completely compromise sensitive data residing on the Server and impact its availability.Note: The impact of this vulnerability depends on whether SAP NetWeaver Development Infrastructure (NWDI) runs on the intranet or internet. The CVSS score reflects the impact considering the worst-case scenario that it runs on the internet. @@ -51234,7 +48651,6 @@ Microsoft DWM Core Library Elevation of Privilege Vulnerability -- [freeide2017/CVE-2021-33739-POC](https://github.com/freeide2017/CVE-2021-33739-POC) - [giwon9977/CVE-2021-33739_PoC_Analysis](https://github.com/giwon9977/CVE-2021-33739_PoC_Analysis) ### CVE-2021-33766 (2021-07-14) @@ -51252,13 +48668,6 @@ - [lanmarc77/CVE-2021-33831](https://github.com/lanmarc77/CVE-2021-33831) -### CVE-2021-33879 (2021-06-06) - -Tencent GameLoop before 4.1.21.90 downloaded updates over an insecure HTTP connection. A malicious attacker in an MITM position could spoof the contents of an XML document describing an update package, replacing a download URL with one pointing to an arbitrary Windows executable. Because the only integrity check would be a comparison of the downloaded file's MD5 checksum to the one contained within the XML document, the downloaded executable would then be executed on the victim's machine. - - -- [mmiszczyk/cve-2021-33879](https://github.com/mmiszczyk/cve-2021-33879) - ### CVE-2021-33909 (2021-07-20) fs/seq_file.c in the Linux kernel 3.16 through 5.13.x before 5.13.4 does not properly restrict seq buffer allocations, leading to an integer overflow, an Out-of-bounds Write, and escalation to root by an unprivileged user, aka CID-8cae8cd89f05. @@ -51457,13 +48866,6 @@ - [LUUANHDUC/CVE-2021-35042](https://github.com/LUUANHDUC/CVE-2021-35042) - [vutiendat323/INT14107_CVE-2021-35042](https://github.com/vutiendat323/INT14107_CVE-2021-35042) -### CVE-2021-35064 (2021-07-12) - -KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo. Sudoers permits running of multiple dangerous commands, including unzip, systemctl and dpkg. - - -- [Chocapikk/CVE-2021-35064](https://github.com/Chocapikk/CVE-2021-35064) - ### CVE-2021-35211 (2021-07-14) Microsoft discovered a remote code execution (RCE) vulnerability in the SolarWinds Serv-U product utilizing a Remote Memory Escape Vulnerability. If exploited, a threat actor may be able to gain privileged access to the machine hosting Serv-U Only. SolarWinds Serv-U Managed File Transfer and Serv-U Secure FTP for Windows before 15.2.3 HF2 are affected by this vulnerability. @@ -52770,6 +50172,8 @@ - [Shams-Ul-Mehmood/CVE-2021-41773-Exploit](https://github.com/Shams-Ul-Mehmood/CVE-2021-41773-Exploit) - [lucastran05/CVE-2021-41773](https://github.com/lucastran05/CVE-2021-41773) - [Emaar1x/CVE-2021-41773](https://github.com/Emaar1x/CVE-2021-41773) +- [s-amnajafri/CVE-2021-41773-Apache-Lab](https://github.com/s-amnajafri/CVE-2021-41773-Apache-Lab) +- [GlebUsalt/cybersecurity_portfolio](https://github.com/GlebUsalt/cybersecurity_portfolio) ### CVE-2021-41784 (2022-08-29) @@ -62065,6 +59469,13 @@ - [cianananan/CVE-2019-10068-PoC](https://github.com/cianananan/CVE-2019-10068-PoC) +### CVE-2019-10070 (2019-11-18) + +Apache Atlas versions 0.8.3 and 1.1.0 were found vulnerable to Stored Cross-Site Scripting in the search functionality + + +- [PerfectPoH/cve-2019-10070-apache-atlas-xss](https://github.com/PerfectPoH/cve-2019-10070-apache-atlas-xss) + ### CVE-2019-10076 (2019-05-20) A carefully crafted malicious attachment could trigger an XSS vulnerability on Apache JSPWiki 2.9.0 to 2.11.0.M3, which could lead to session hijacking.