nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/09/02 19:47:32

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-09-03 04:47:32 +09:00
1 parent 01a4763bfb
commit b9701cf89b
60 files changed
+691 -194
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2011/CVE-2011-2523.json
+33
View File
@@ -2013,5 +2013,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1355054204,
"name": "vsFTPd-2.3.4-Exploit",
"full_name": "JUN41DS2709\/vsFTPd-2.3.4-Exploit",
"owner": {
"login": "JUN41DS2709",
"id": 166510560,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/166510560?v=4",
"html_url": "https:\/\/github.com\/JUN41DS2709",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/JUN41DS2709\/vsFTPd-2.3.4-Exploit",
"description": "Python exploit for the vsFTPd 2.3.4 backdoor (CVE-2011-2523).",
"fork": false,
"created_at": "2026-09-02T17:38:16Z",
"updated_at": "2026-09-02T17:48:46Z",
"pushed_at": "2026-09-02T17:48:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2017/CVE-2017-1000405.json
+1 -1
View File
@@ -30,6 +30,6 @@
"forks": 51,
"watchers": 200,
"score": 0,
"subscribers_count": 4
"subscribers_count": 7
}
]
2017/CVE-2017-5753.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 771,
"watchers_count": 771,
"has_discussions": false,
"forks_count": 168,
"forks_count": 167,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -33,7 +33,7 @@
"spectre"
],
"visibility": "public",
"forks": 168,
"forks": 167,
"watchers": 771,
"score": 0,
"subscribers_count": 40
2020/CVE-2020-11996.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 2,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"forks": 1,
"watchers": 5,
"score": 0,
"subscribers_count": 2
2021/CVE-2021-0928.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 123,
"watchers_count": 123,
"has_discussions": false,
"forks_count": 23,
"forks_count": 24,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 23,
"forks": 24,
"watchers": 123,
"score": 0,
"subscribers_count": 5
2021/CVE-2021-1931.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "Unlock the Meta Quest 1 bootloader and gain root access using GhostLock + CVE-2021-1931.",
"fork": false,
"created_at": "2026-07-31T05:37:56Z",
"updated_at": "2026-09-02T03:35:51Z",
"updated_at": "2026-09-02T17:41:43Z",
"pushed_at": "2026-08-28T12:08:00Z",
"stargazers_count": 168,
"watchers_count": 168,
"stargazers_count": 169,
"watchers_count": 169,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -108,7 +108,7 @@
],
"visibility": "public",
"forks": 7,
"watchers": 168,
"watchers": 169,
"score": 0,
"subscribers_count": 5
}
2021/CVE-2021-36260.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.",
"fork": false,
"created_at": "2021-10-27T15:51:12Z",
"updated_at": "2026-09-02T01:42:44Z",
"updated_at": "2026-09-02T15:16:36Z",
"pushed_at": "2021-10-28T06:37:37Z",
"stargazers_count": 300,
"watchers_count": 300,
"stargazers_count": 301,
"watchers_count": 301,
"has_discussions": false,
"forks_count": 80,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 80,
"watchers": 300,
"watchers": 301,
"score": 0,
"subscribers_count": 5
},
2021/CVE-2021-44228.json
+6 -6
View File
@@ -993,7 +993,7 @@
"stargazers_count": 1848,
"watchers_count": 1848,
"has_discussions": false,
"forks_count": 541,
"forks_count": 540,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1006,7 +1006,7 @@
"security"
],
"visibility": "public",
"forks": 541,
"forks": 540,
"watchers": 1848,
"score": 0,
"subscribers_count": 0
@@ -6396,10 +6396,10 @@
"description": "Tools for remediating the recent log4j2 RCE vulnerability (CVE-2021-44228)",
"fork": false,
"created_at": "2021-12-14T21:47:04Z",
"updated_at": "2026-09-01T10:44:55Z",
"updated_at": "2026-09-02T17:34:39Z",
"pushed_at": "2025-12-19T22:36:08Z",
"stargazers_count": 41,
"watchers_count": 41,
"stargazers_count": 40,
"watchers_count": 40,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -6414,7 +6414,7 @@
],
"visibility": "public",
"forks": 7,
"watchers": 41,
"watchers": 40,
"score": 0,
"subscribers_count": 7
},
2022/CVE-2022-38691.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Let's control Secure Boot Chain ourselves.",
"fork": false,
"created_at": "2023-12-01T07:32:18Z",
"updated_at": "2026-08-22T09:24:34Z",
"updated_at": "2026-09-02T13:54:58Z",
"pushed_at": "2025-08-22T15:37:10Z",
"stargazers_count": 110,
"watchers_count": 110,
"stargazers_count": 111,
"watchers_count": 111,
"has_discussions": false,
"forks_count": 20,
"allow_forking": true,
@@ -31,7 +31,7 @@
],
"visibility": "public",
"forks": 20,
"watchers": 110,
"watchers": 111,
"score": 0,
"subscribers_count": 6
}
2022/CVE-2022-46463.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "harbor unauthorized detection",
"fork": false,
"created_at": "2023-03-21T10:40:19Z",
"updated_at": "2026-08-18T04:59:27Z",
"updated_at": "2026-09-02T16:17:02Z",
"pushed_at": "2024-12-12T07:37:01Z",
"stargazers_count": 58,
"watchers_count": 58,
"stargazers_count": 59,
"watchers_count": 59,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 7,
"watchers": 58,
"watchers": 59,
"score": 0,
"subscribers_count": 1
},
2023/CVE-2023-29343.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 162,
"watchers_count": 162,
"has_discussions": false,
"forks_count": 26,
"forks_count": 25,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 26,
"forks": 25,
"watchers": 162,
"score": 0,
"subscribers_count": 3
2023/CVE-2023-36874.json
+2 -2
View File
@@ -85,7 +85,7 @@
"stargazers_count": 242,
"watchers_count": 242,
"has_discussions": false,
"forks_count": 47,
"forks_count": 46,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -93,7 +93,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 47,
"forks": 46,
"watchers": 242,
"score": 0,
"subscribers_count": 5
2023/CVE-2023-45866.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 1888,
"watchers_count": 1888,
"has_discussions": false,
"forks_count": 320,
"forks_count": 321,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 320,
"forks": 321,
"watchers": 1888,
"score": 0,
"subscribers_count": 29
2024/CVE-2024-0670.json
+1 -1
View File
@@ -118,7 +118,7 @@
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
"fork": false,
"created_at": "2026-01-08T01:32:09Z",
"updated_at": "2026-08-31T02:01:57Z",
"updated_at": "2026-09-02T13:30:59Z",
"pushed_at": "2026-09-02T13:22:58Z",
"stargazers_count": 0,
"watchers_count": 0,
2024/CVE-2024-1086.json
+4 -4
View File
@@ -218,10 +218,10 @@
"description": null,
"fork": false,
"created_at": "2024-12-16T17:33:13Z",
"updated_at": "2026-06-23T07:30:34Z",
"updated_at": "2026-09-02T19:13:28Z",
"pushed_at": "2024-12-16T17:38:23Z",
"stargazers_count": 21,
"watchers_count": 21,
"stargazers_count": 22,
"watchers_count": 22,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -232,7 +232,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 21,
"watchers": 22,
"score": 0,
"subscribers_count": 1
},
2024/CVE-2024-20656.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 136,
"watchers_count": 136,
"has_discussions": false,
"forks_count": 32,
"forks_count": 31,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 32,
"forks": 31,
"watchers": 136,
"score": 0,
"subscribers_count": 2
2024/CVE-2024-23897.json
+2 -2
View File
@@ -1499,8 +1499,8 @@
"description": "Full VAPT writeup of OWASP CICD-Goat — 9 CTFd flags captured, 4 critical + 5 high findings (incl. CVE-2024-23897) mapped to the OWASP Top 10 CI\/CD Security Risks, with PoCs, remediation, and interview-ready summaries.",
"fork": false,
"created_at": "2026-07-31T12:16:24Z",
"updated_at": "2026-08-05T17:16:58Z",
"pushed_at": "2026-08-05T17:15:42Z",
"updated_at": "2026-09-02T18:48:40Z",
"pushed_at": "2026-09-02T18:44:42Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2024/CVE-2024-27956.json
+2 -2
View File
@@ -359,7 +359,7 @@
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 3,
"forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -367,7 +367,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"forks": 4,
"watchers": 8,
"score": 0,
"subscribers_count": 1
2025/CVE-2025-14847.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
"fork": false,
"created_at": "2025-07-30T15:52:00Z",
"updated_at": "2026-08-31T02:04:20Z",
"updated_at": "2026-09-02T13:32:00Z",
"pushed_at": "2026-09-02T13:24:21Z",
"stargazers_count": 1,
"watchers_count": 1,
2025/CVE-2025-29009.json
+33
View File
@@ -64,5 +64,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1354876529,
"name": "CVE-2025-29009",
"full_name": "katranSefa\/CVE-2025-29009",
"owner": {
"login": "katranSefa",
"id": 179320986,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/179320986?v=4",
"html_url": "https:\/\/github.com\/katranSefa",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/katranSefa\/CVE-2025-29009",
"description": null,
"fork": false,
"created_at": "2026-09-02T14:39:37Z",
"updated_at": "2026-09-02T14:47:59Z",
"pushed_at": "2026-09-02T14:39:52Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-29927.json
+2 -2
View File
@@ -365,7 +365,7 @@
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 8,
"forks_count": 9,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -373,7 +373,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 8,
"forks": 9,
"watchers": 6,
"score": 0,
"subscribers_count": 0
2025/CVE-2025-31700.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Dahua IP camera CVE research toolkit (CVE-2021-33044\/33045, CVE-2025-31700\/31701)",
"fork": false,
"created_at": "2026-03-03T21:28:23Z",
"updated_at": "2026-08-31T05:25:52Z",
"updated_at": "2026-09-02T19:31:48Z",
"pushed_at": "2026-04-02T01:55:41Z",
"stargazers_count": 28,
"watchers_count": 28,
"stargazers_count": 27,
"watchers_count": 27,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 28,
"watchers": 27,
"score": 0,
"subscribers_count": 2
}
2025/CVE-2025-48561.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Pixnapping Attack: Compromising private keys and seed phrases through vulnerability CVE-2025-48561 represents a new critical threat to the Bitcoin network and Android infrastructure",
"fork": false,
"created_at": "2025-10-27T12:06:20Z",
"updated_at": "2026-06-01T04:47:40Z",
"updated_at": "2026-09-02T14:05:19Z",
"pushed_at": "2025-10-27T12:14:41Z",
"stargazers_count": 18,
"watchers_count": 18,
"stargazers_count": 19,
"watchers_count": 19,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -41,7 +41,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 18,
"watchers": 19,
"score": 0,
"subscribers_count": 1
}
2025/CVE-2025-49844.json
+1 -1
View File
@@ -66,7 +66,7 @@
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
"fork": false,
"created_at": "2022-04-06T09:27:39Z",
"updated_at": "2026-08-31T01:52:44Z",
"updated_at": "2026-09-02T13:29:14Z",
"pushed_at": "2026-09-02T13:12:14Z",
"stargazers_count": 2,
"watchers_count": 2,
2025/CVE-2025-54136.json
+1 -1
View File
@@ -48,7 +48,7 @@
"fork": false,
"created_at": "2026-07-08T09:19:33Z",
"updated_at": "2026-07-08T15:41:00Z",
"pushed_at": "2026-08-26T09:16:25Z",
"pushed_at": "2026-09-02T19:36:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-55182.json
+33
View File
@@ -15668,5 +15668,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1354938527,
"name": "cve-2025-55182",
"full_name": "ChrisBarack\/cve-2025-55182",
"owner": {
"login": "ChrisBarack",
"id": 66031760,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/66031760?v=4",
"html_url": "https:\/\/github.com\/ChrisBarack",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ChrisBarack\/cve-2025-55182",
"description": null,
"fork": false,
"created_at": "2026-09-02T15:38:25Z",
"updated_at": "2026-09-02T15:50:56Z",
"pushed_at": "2026-09-02T15:40:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-55752.json
+54
View File
@@ -130,5 +130,59 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1353118845,
"name": "tomcat85-check",
"full_name": "xiaoqiMikko\/tomcat85-check",
"owner": {
"login": "xiaoqiMikko",
"id": 37316664,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/37316664?v=4",
"html_url": "https:\/\/github.com\/xiaoqiMikko",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/xiaoqiMikko\/tomcat85-check",
"description": "CVE-2025-55752 CVE-2025-55754 CVE-2025-48988 CVE-2025-52520 CVE-2025-53506 CVE-2025-61795 CVE-2025-66614:Tomcat 8.5 已 EOL,终版 8.5.100。Apache 逐条声明「8.5 也受影响」的 2025 CVE 有 14 条,其中 10 条在 NVD 按 8.5.100 查不到。离线单 jar,读 conf\/ 判断你到底中了哪几条。",
"fork": false,
"created_at": "2026-09-01T04:10:16Z",
"updated_at": "2026-09-02T16:15:31Z",
"pushed_at": "2026-09-01T04:11:10Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"apache-tomcat",
"cve",
"cve-2025-24813",
"cve-2025-31650",
"cve-2025-48988",
"cve-2025-49125",
"cve-2025-52520",
"cve-2025-53506",
"cve-2025-55752",
"cve-2025-55754",
"cve-2025-61795",
"cve-2025-66614",
"end-of-life",
"eol",
"java",
"nvd",
"security-tools",
"tomcat",
"tomcat85",
"vulnerability-scanner"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-6440.json
+2 -2
View File
@@ -245,8 +245,8 @@
"description": null,
"fork": false,
"created_at": "2026-08-30T12:49:43Z",
"updated_at": "2026-08-30T13:07:16Z",
"pushed_at": "2026-08-30T13:04:44Z",
"updated_at": "2026-09-02T14:54:12Z",
"pushed_at": "2026-09-02T14:46:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-65817.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Here is the CVE-2025-65817",
"fork": false,
"created_at": "2025-12-19T18:54:42Z",
"updated_at": "2026-08-29T21:59:54Z",
"updated_at": "2026-09-02T18:55:01Z",
"pushed_at": "2025-12-19T19:11:06Z",
"stargazers_count": 10,
"watchers_count": 10,
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 10,
"watchers": 11,
"score": 0,
"subscribers_count": 0
}
2025/CVE-2025-68613.json
+2 -3
View File
@@ -466,10 +466,10 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/AbdulRKB\/n8n-RCE",
"description": "Remote Code Execution via n8n Workflows (Based on CVE-2025-68613)",
"description": "Proof of Concept (PoC) Script for Remote Code Execution via n8n Workflows (Based on CVE-2025-68613)",
"fork": false,
"created_at": "2025-12-25T12:11:37Z",
"updated_at": "2025-12-26T18:45:49Z",
"updated_at": "2026-09-02T16:35:29Z",
"pushed_at": "2025-12-25T12:35:08Z",
"stargazers_count": 0,
"watchers_count": 0,
@@ -483,7 +483,6 @@
"topics": [
"cve-2025-68613",
"n8n",
"n8n-exploits",
"n8n-workflow",
"rce"
],
2025/CVE-2025-69080.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": null,
"fork": false,
"created_at": "2026-08-31T21:00:26Z",
"updated_at": "2026-08-31T21:38:32Z",
"pushed_at": "2026-08-31T21:38:27Z",
"updated_at": "2026-09-02T14:07:32Z",
"pushed_at": "2026-09-02T14:03:03Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-0828.json
+1 -1
View File
@@ -228,7 +228,7 @@
"description": "CVE-2026-0828",
"fork": false,
"created_at": "2026-09-02T13:39:46Z",
"updated_at": "2026-09-02T13:44:13Z",
"updated_at": "2026-09-02T13:50:33Z",
"pushed_at": "2026-09-02T13:46:49Z",
"stargazers_count": 0,
"watchers_count": 0,
2026/CVE-2026-0920.json
+33
View File
@@ -130,5 +130,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1354911608,
"name": "CVE-2026-0920",
"full_name": "katranSefa\/CVE-2026-0920",
"owner": {
"login": "katranSefa",
"id": 179320986,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/179320986?v=4",
"html_url": "https:\/\/github.com\/katranSefa",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/katranSefa\/CVE-2026-0920",
"description": null,
"fork": false,
"created_at": "2026-09-02T15:12:07Z",
"updated_at": "2026-09-02T15:21:00Z",
"pushed_at": "2026-09-02T15:12:19Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-19490.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1354944248,
"name": "CVE-2026-19490",
"full_name": "TarPeg007\/CVE-2026-19490",
"owner": {
"login": "TarPeg007",
"id": 172214852,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/172214852?v=4",
"html_url": "https:\/\/github.com\/TarPeg007",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/TarPeg007\/CVE-2026-19490",
"description": "NetScaler ADC\/Gateway SAML unsigned-assertion bypass via HTTP-Redirect binding (CTX696939) - root cause analysis + PoC",
"fork": false,
"created_at": "2026-09-02T15:43:53Z",
"updated_at": "2026-09-02T15:49:55Z",
"pushed_at": "2026-09-02T15:44:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-24301.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1340620560,
"name": "memory-poisoning-axis",
"full_name": "CSOAI-ORG\/memory-poisoning-axis",
"owner": {
"login": "CSOAI-ORG",
"id": 260596236,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/260596236?v=4",
"html_url": "https:\/\/github.com\/CSOAI-ORG",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/CSOAI-ORG\/memory-poisoning-axis",
"description": "Deterministic memory-poisoning \/ prompt-injection measurement axis — CoSnitch (CVE-2026-24301) anchored. Inspect scorer, signed receipts. Measurement, not certification.",
"fork": false,
"created_at": "2026-08-20T11:25:55Z",
"updated_at": "2026-08-20T11:28:04Z",
"pushed_at": "2026-08-20T11:26:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-27912.json
+5 -5
View File
@@ -14,10 +14,10 @@
"description": "POC tool for ResetNightmare (CVE-2026-27912)",
"fork": false,
"created_at": "2026-08-02T12:36:16Z",
"updated_at": "2026-09-02T12:55:07Z",
"updated_at": "2026-09-02T14:27:15Z",
"pushed_at": "2026-08-20T16:44:53Z",
"stargazers_count": 210,
"watchers_count": 210,
"stargazers_count": 211,
"watchers_count": 211,
"has_discussions": false,
"forks_count": 37,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 37,
"watchers": 210,
"watchers": 211,
"score": 0,
"subscribers_count": 1
},
@@ -95,7 +95,7 @@
"description": "PoC for CVE-2026-27912 - Windows Kerberos Elevation of Privilege (ResetNightmare). Unauthorized password reset via Kerberos flaw. For security research only.",
"fork": false,
"created_at": "2026-08-14T14:55:43Z",
"updated_at": "2026-08-23T09:44:49Z",
"updated_at": "2026-09-02T15:21:11Z",
"pushed_at": "2026-08-14T15:07:53Z",
"stargazers_count": 2,
"watchers_count": 2,
2026/CVE-2026-31431.json
+6 -6
View File
@@ -47,10 +47,10 @@
"description": "Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code",
"fork": false,
"created_at": "2026-04-29T12:15:28Z",
"updated_at": "2026-09-01T23:32:09Z",
"updated_at": "2026-09-02T18:57:54Z",
"pushed_at": "2026-04-29T21:21:46Z",
"stargazers_count": 4057,
"watchers_count": 4057,
"stargazers_count": 4058,
"watchers_count": 4058,
"has_discussions": false,
"forks_count": 910,
"allow_forking": true,
@@ -72,7 +72,7 @@
],
"visibility": "public",
"forks": 910,
"watchers": 4057,
"watchers": 4058,
"score": 0,
"subscribers_count": 34
},
@@ -8197,8 +8197,8 @@
"description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.",
"fork": false,
"created_at": "2026-05-06T09:49:14Z",
"updated_at": "2026-08-31T02:22:00Z",
"pushed_at": "2026-08-31T02:21:53Z",
"updated_at": "2026-09-02T13:51:50Z",
"pushed_at": "2026-09-02T13:47:34Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-31802.json
+2 -2
View File
@@ -59,8 +59,8 @@
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"fork": false,
"created_at": "2026-03-28T20:49:46Z",
"updated_at": "2026-08-31T02:15:55Z",
"pushed_at": "2026-08-31T02:15:39Z",
"updated_at": "2026-09-02T13:45:07Z",
"pushed_at": "2026-09-02T13:40:02Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-37196.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-06-12T14:22:12Z",
"updated_at": "2026-06-12T18:00:23Z",
"updated_at": "2026-09-02T16:53:03Z",
"pushed_at": "2026-06-12T18:00:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-43499.json
+50 -50
View File
@@ -348,10 +348,10 @@
"description": "GhostLock (CVE-2026-43499) kernel exploit for OnePlus devices with locked bootloader",
"fork": false,
"created_at": "2026-07-12T16:05:24Z",
"updated_at": "2026-09-02T11:22:59Z",
"updated_at": "2026-09-02T16:06:11Z",
"pushed_at": "2026-09-02T11:22:19Z",
"stargazers_count": 304,
"watchers_count": 304,
"stargazers_count": 305,
"watchers_count": 305,
"has_discussions": false,
"forks_count": 65,
"allow_forking": true,
@@ -369,7 +369,7 @@
],
"visibility": "public",
"forks": 65,
"watchers": 304,
"watchers": 305,
"score": 0,
"subscribers_count": 10
},
@@ -591,7 +591,7 @@
"stargazers_count": 83,
"watchers_count": 83,
"has_discussions": false,
"forks_count": 27,
"forks_count": 26,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -599,7 +599,7 @@
"pull_request_creation_policy": "collaborators_only",
"topics": [],
"visibility": "public",
"forks": 27,
"forks": 26,
"watchers": 83,
"score": 0,
"subscribers_count": 0
@@ -850,10 +850,10 @@
"description": "CvE-2026-43499偏移量计算",
"fork": false,
"created_at": "2026-07-15T09:34:51Z",
"updated_at": "2026-08-15T23:40:03Z",
"updated_at": "2026-09-02T18:03:43Z",
"pushed_at": "2026-08-28T08:03:27Z",
"stargazers_count": 10,
"watchers_count": 10,
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -864,7 +864,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 10,
"watchers": 11,
"score": 0,
"subscribers_count": 0
},
@@ -1081,12 +1081,12 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
"updated_at": "2026-09-02T13:37:07Z",
"updated_at": "2026-09-02T17:44:21Z",
"pushed_at": "2026-08-24T07:49:18Z",
"stargazers_count": 1041,
"watchers_count": 1041,
"stargazers_count": 1047,
"watchers_count": 1047,
"has_discussions": false,
"forks_count": 201,
"forks_count": 202,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1094,8 +1094,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 201,
"watchers": 1041,
"forks": 202,
"watchers": 1047,
"score": 0,
"subscribers_count": 28
},
@@ -1694,10 +1694,10 @@
"description": "KSU installer for supported firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-28T10:17:18Z",
"updated_at": "2026-09-01T16:09:54Z",
"updated_at": "2026-09-02T14:02:59Z",
"pushed_at": "2026-08-29T00:06:58Z",
"stargazers_count": 14,
"watchers_count": 14,
"stargazers_count": 15,
"watchers_count": 15,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -1708,7 +1708,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 14,
"watchers": 15,
"score": 0,
"subscribers_count": 0
},
@@ -1727,10 +1727,10 @@
"description": "GhostLock One-Tap Execution App (CVE-2026-43499)",
"fork": false,
"created_at": "2026-07-29T05:04:25Z",
"updated_at": "2026-09-02T13:42:29Z",
"updated_at": "2026-09-02T18:55:29Z",
"pushed_at": "2026-09-01T09:15:58Z",
"stargazers_count": 676,
"watchers_count": 676,
"stargazers_count": 680,
"watchers_count": 680,
"has_discussions": true,
"forks_count": 208,
"allow_forking": true,
@@ -1741,7 +1741,7 @@
"topics": [],
"visibility": "public",
"forks": 208,
"watchers": 676,
"watchers": 680,
"score": 0,
"subscribers_count": 6
},
@@ -1892,10 +1892,10 @@
"description": "GhostLock (CVE-2026-43499) exploit for POCO F3 GT (aresin) — MediaTek Dimensity 1200, Linux 4.14.186 ARM64 kernel privilege escalation via futex PI chain manipulation",
"fork": false,
"created_at": "2026-07-31T18:56:09Z",
"updated_at": "2026-08-30T00:24:18Z",
"updated_at": "2026-09-02T15:36:14Z",
"pushed_at": "2026-08-15T18:33:51Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -1906,7 +1906,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
@@ -2103,12 +2103,12 @@
"description": "Jailbreak supported Google Pixel phones with CVE-2026-43499",
"fork": false,
"created_at": "2026-08-02T17:34:45Z",
"updated_at": "2026-09-02T13:07:52Z",
"updated_at": "2026-09-02T18:26:59Z",
"pushed_at": "2026-09-01T21:31:36Z",
"stargazers_count": 285,
"watchers_count": 285,
"stargazers_count": 290,
"watchers_count": 290,
"has_discussions": false,
"forks_count": 47,
"forks_count": 49,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2123,8 +2123,8 @@
"root"
],
"visibility": "public",
"forks": 47,
"watchers": 285,
"forks": 49,
"watchers": 290,
"score": 0,
"subscribers_count": 5
},
@@ -2374,10 +2374,10 @@
"description": "CVE-2026-43499 (GhostLock) research on HUAWEI MatePad Pro 11 GOT-W29",
"fork": false,
"created_at": "2026-08-10T09:01:08Z",
"updated_at": "2026-08-31T02:44:32Z",
"updated_at": "2026-09-02T17:46:32Z",
"pushed_at": "2026-08-31T02:44:25Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -2388,7 +2388,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
@@ -2913,10 +2913,10 @@
"description": "Using CVE-2026-43499 to root your Galaxy S24 Series(SM-S92X0 ,(China \/ Hong Kong SAR \/ Taiwan))",
"fork": false,
"created_at": "2026-08-16T14:37:06Z",
"updated_at": "2026-09-01T07:06:35Z",
"updated_at": "2026-09-02T16:44:29Z",
"pushed_at": "2026-08-27T14:42:02Z",
"stargazers_count": 31,
"watchers_count": 31,
"stargazers_count": 32,
"watchers_count": 32,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -2927,7 +2927,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 31,
"watchers": 32,
"score": 0,
"subscribers_count": 1
},
@@ -2979,10 +2979,10 @@
"description": "CVE-2026-43499 port for Samsung Galaxy A17",
"fork": false,
"created_at": "2026-08-17T21:18:27Z",
"updated_at": "2026-09-01T20:59:33Z",
"updated_at": "2026-09-02T19:24:15Z",
"pushed_at": "2026-08-21T20:24:40Z",
"stargazers_count": 10,
"watchers_count": 10,
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -2993,7 +2993,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 10,
"watchers": 11,
"score": 0,
"subscribers_count": 0
},
@@ -3705,10 +3705,10 @@
"description": null,
"fork": false,
"created_at": "2026-09-01T07:34:56Z",
"updated_at": "2026-09-02T08:18:02Z",
"updated_at": "2026-09-02T14:46:42Z",
"pushed_at": "2026-09-01T16:41:33Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -3719,7 +3719,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-43512.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Exploitability PoC for CVE-2026-43512 (Apache Tomcat Digest Authentication Bypass)",
"fork": false,
"created_at": "2026-06-08T20:43:08Z",
"updated_at": "2026-06-19T16:06:04Z",
"updated_at": "2026-09-02T15:33:28Z",
"pushed_at": "2026-06-19T16:06:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-45585.json
+4 -4
View File
@@ -212,8 +212,8 @@
"description": "Manage and recover BitLocker encrypted drives with this tool for Windows 11 recovery key management and educational study of CVE-2026-45585.",
"fork": false,
"created_at": "2026-06-16T07:21:36Z",
"updated_at": "2026-08-31T02:25:34Z",
"pushed_at": "2026-08-31T02:24:16Z",
"updated_at": "2026-09-02T13:57:19Z",
"pushed_at": "2026-09-02T13:51:04Z",
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
@@ -264,8 +264,8 @@
"description": "Manage BitLocker encrypted drives on Windows. Extract recovery keys, check encryption status, and apply security mitigations for CVE-2026-45585.",
"fork": false,
"created_at": "2026-07-25T02:47:26Z",
"updated_at": "2026-08-31T02:28:25Z",
"pushed_at": "2026-08-31T02:28:03Z",
"updated_at": "2026-09-02T14:00:36Z",
"pushed_at": "2026-09-02T13:55:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-47301.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-write path traversal, certificate verification bypass, and DLL hijacking to achieve SYSTEM-level code execution.",
"fork": false,
"created_at": "2026-08-03T15:29:22Z",
"updated_at": "2026-09-02T03:23:49Z",
"updated_at": "2026-09-02T15:15:52Z",
"pushed_at": "2026-08-16T22:34:33Z",
"stargazers_count": 99,
"watchers_count": 99,
"stargazers_count": 100,
"watchers_count": 100,
"has_discussions": false,
"forks_count": 13,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 13,
"watchers": 99,
"watchers": 100,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-47884.json
+56
View File
@@ -0,0 +1,56 @@
[
{
"id": 1350625885,
"name": "spring-cvss-check",
"full_name": "xiaoqiMikko\/spring-cvss-check",
"owner": {
"login": "xiaoqiMikko",
"id": 37316664,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/37316664?v=4",
"html_url": "https:\/\/github.com\/xiaoqiMikko",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/xiaoqiMikko\/spring-cvss-check",
"description": "CVE-2026-47884 CVE-2026-47890 CVE-2026-47891 CVE-2026-47892 CVE-2026-59270 CVE-2026-59283 CVE-2026-59313 CVE-2026-65637 CVE-2026-65905:覆盖 15 条 Spring \/ Tomcat 官方安全公告,8 条被 NVD 报成 CRITICAL 9.x 而厂商官方评 LOW\/MEDIUM。工具告诉你中了哪几条、官方评多少分、是否真满足触发条件,以及官方叫你升的版本 Maven Central 上有没有。",
"fork": false,
"created_at": "2026-08-29T13:54:58Z",
"updated_at": "2026-09-02T16:15:29Z",
"pushed_at": "2026-09-02T04:51:19Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"cve-2025-41249",
"cve-2026-41843",
"cve-2026-41844",
"cve-2026-41846",
"cve-2026-41848",
"cve-2026-41853",
"cvss",
"dependency-scanning",
"java",
"maven",
"nvd",
"sca",
"security",
"spring",
"spring-boot",
"spring-framework",
"spring-security",
"tomcat",
"vulnerability"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-5027.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": null,
"fork": false,
"created_at": "2026-09-02T13:29:25Z",
"updated_at": "2026-09-02T13:38:11Z",
"pushed_at": "2026-09-02T13:29:27Z",
"updated_at": "2026-09-02T14:24:55Z",
"pushed_at": "2026-09-02T14:20:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-57827.json
+2 -2
View File
@@ -61,8 +61,8 @@
"description": "Demonstrate the unauthenticated remote code execution vulnerability in the RSFiles! Joomla component through an arbitrary file upload.",
"fork": false,
"created_at": "2026-07-30T20:49:05Z",
"updated_at": "2026-08-31T02:29:04Z",
"pushed_at": "2026-08-31T02:28:41Z",
"updated_at": "2026-09-02T13:59:12Z",
"pushed_at": "2026-09-02T13:56:01Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-62735.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE 1-day in http.sys",
"fork": false,
"created_at": "2026-08-25T04:55:10Z",
"updated_at": "2026-09-02T12:04:59Z",
"updated_at": "2026-09-02T14:43:05Z",
"pushed_at": "2026-08-31T16:15:21Z",
"stargazers_count": 10,
"watchers_count": 10,
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 10,
"watchers": 11,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-63030.json
+8 -8
View File
@@ -513,10 +513,10 @@
"description": "CVE-2026-63030 + CVE-2026-60137 - “wp2shell”: unauthenticated RCE in WordPress core",
"fork": false,
"created_at": "2026-07-18T14:27:41Z",
"updated_at": "2026-09-01T14:00:06Z",
"updated_at": "2026-09-02T14:50:34Z",
"pushed_at": "2026-07-18T19:05:43Z",
"stargazers_count": 105,
"watchers_count": 105,
"stargazers_count": 106,
"watchers_count": 106,
"has_discussions": false,
"forks_count": 30,
"allow_forking": true,
@@ -527,7 +527,7 @@
"topics": [],
"visibility": "public",
"forks": 30,
"watchers": 105,
"watchers": 106,
"score": 0,
"subscribers_count": 0
},
@@ -2345,10 +2345,10 @@
"description": "CVE-2026-63030 & CVE-2026-60137 RCE chain proof-of-concept",
"fork": false,
"created_at": "2026-08-05T12:48:03Z",
"updated_at": "2026-09-02T02:49:56Z",
"updated_at": "2026-09-02T14:29:52Z",
"pushed_at": "2026-08-20T10:15:52Z",
"stargazers_count": 915,
"watchers_count": 915,
"stargazers_count": 916,
"watchers_count": 916,
"has_discussions": false,
"forks_count": 215,
"allow_forking": true,
@@ -2366,7 +2366,7 @@
],
"visibility": "public",
"forks": 215,
"watchers": 915,
"watchers": 916,
"score": 0,
"subscribers_count": 5
},
2026/CVE-2026-64564.json
+2 -2
View File
@@ -80,8 +80,8 @@
"description": "Tracking SCTPhantom (CVE-2026-64564), the Linux kernel SCTP ASCONF transport use-after-free",
"fork": false,
"created_at": "2026-08-10T05:16:43Z",
"updated_at": "2026-09-01T05:45:46Z",
"pushed_at": "2026-09-01T05:41:28Z",
"updated_at": "2026-09-02T16:13:13Z",
"pushed_at": "2026-09-02T16:05:51Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-68138.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "Tracking CVE-2026-68138, the Linux kernel net\/sched qdisc rate-table use-after-free",
"fork": false,
"created_at": "2026-08-17T07:33:31Z",
"updated_at": "2026-09-02T05:38:00Z",
"pushed_at": "2026-09-02T05:37:25Z",
"updated_at": "2026-09-02T16:13:55Z",
"pushed_at": "2026-09-02T16:06:52Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-72898.json
+4 -4
View File
@@ -263,10 +263,10 @@
"description": "Metabase SQLi",
"fork": false,
"created_at": "2026-08-27T06:51:58Z",
"updated_at": "2026-09-01T22:36:05Z",
"updated_at": "2026-09-02T13:57:31Z",
"pushed_at": "2026-08-27T08:46:32Z",
"stargazers_count": 18,
"watchers_count": 18,
"stargazers_count": 19,
"watchers_count": 19,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -277,7 +277,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 18,
"watchers": 19,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-73296.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1355027531,
"name": "CVE-2026-73296",
"full_name": "0xBlackash\/CVE-2026-73296",
"owner": {
"login": "0xBlackash",
"id": 259905299,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/259905299?v=4",
"html_url": "https:\/\/github.com\/0xBlackash",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xBlackash\/CVE-2026-73296",
"description": "CVE-2026-73296",
"fork": false,
"created_at": "2026-09-02T17:10:17Z",
"updated_at": "2026-09-02T17:39:52Z",
"pushed_at": "2026-09-02T17:31:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-73570.json
+33
View File
@@ -176,5 +176,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1355050031,
"name": "CVE-2026-73570",
"full_name": "byt3l0rd\/CVE-2026-73570",
"owner": {
"login": "byt3l0rd",
"id": 323224005,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/323224005?v=4",
"html_url": "https:\/\/github.com\/byt3l0rd",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/byt3l0rd\/CVE-2026-73570",
"description": null,
"fork": false,
"created_at": "2026-09-02T17:33:44Z",
"updated_at": "2026-09-02T17:40:51Z",
"pushed_at": "2026-09-02T17:40:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-75616.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "PoC for CVE-2026-75616, an authenticated OS command injection in TP-Link Archer C20 v6 firmware",
"fork": false,
"created_at": "2026-08-22T20:53:05Z",
"updated_at": "2026-08-22T22:17:35Z",
"updated_at": "2026-09-02T16:13:54Z",
"pushed_at": "2026-08-22T22:16:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-82329.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "CVE-2026-82329 JFrog Artifactory unauthenticated auth-bypass: reproducible Docker lab + URL-parameter validator PoC + patch-diff analysis",
"fork": false,
"created_at": "2026-09-01T14:17:14Z",
"updated_at": "2026-09-02T12:03:59Z",
"updated_at": "2026-09-02T14:20:32Z",
"pushed_at": "2026-09-01T14:17:19Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-9055.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1355090513,
"name": "CVE-2026-9055",
"full_name": "EXEcution-py\/CVE-2026-9055",
"owner": {
"login": "EXEcution-py",
"id": 277331196,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/277331196?v=4",
"html_url": "https:\/\/github.com\/EXEcution-py",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/EXEcution-py\/CVE-2026-9055",
"description": null,
"fork": false,
"created_at": "2026-09-02T18:17:51Z",
"updated_at": "2026-09-02T18:57:48Z",
"pushed_at": "2026-09-02T18:56:36Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-9198.json
+2 -2
View File
@@ -113,8 +113,8 @@
"description": null,
"fork": false,
"created_at": "2026-08-05T17:44:08Z",
"updated_at": "2026-08-06T01:07:09Z",
"pushed_at": "2026-08-06T01:07:04Z",
"updated_at": "2026-09-02T16:17:35Z",
"pushed_at": "2026-09-02T16:14:14Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-9335.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1355159811,
"name": "CVE-2026-9335-keras-hdf5-externallink",
"full_name": "paparojonathan\/CVE-2026-9335-keras-hdf5-externallink",
"owner": {
"login": "paparojonathan",
"id": 324189341,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/324189341?v=4",
"html_url": "https:\/\/github.com\/paparojonathan",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/paparojonathan\/CVE-2026-9335-keras-hdf5-externallink",
"description": "CVE-2026-9335: KerasFileEditor and load_weights follow h5py ExternalLinks, disclosing arbitrary local HDF5 file contents in keras ≤ 3.14.0. Advisory + verified PoCs.",
"fork": false,
"created_at": "2026-09-02T19:35:10Z",
"updated_at": "2026-09-02T19:35:20Z",
"pushed_at": "2026-09-02T19:35:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-9830.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "CVE-2026-9830 Proof of Concept",
"fork": false,
"created_at": "2026-08-15T20:57:13Z",
"updated_at": "2026-09-02T13:06:42Z",
"updated_at": "2026-09-02T18:39:26Z",
"pushed_at": "2026-08-20T21:56:15Z",
"stargazers_count": 439,
"watchers_count": 439,
"stargazers_count": 448,
"watchers_count": 448,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -72,7 +72,7 @@
],
"visibility": "public",
"forks": 4,
"watchers": 439,
"watchers": 448,
"score": 0,
"subscribers_count": 0
}
README.md
+54 -6
View File
@@ -247,11 +247,7 @@
- [NetVanguard-cmd/CVE-2026-0745](https://github.com/NetVanguard-cmd/CVE-2026-0745)
- [HORKimhab/CVE-2026-0745](https://github.com/HORKimhab/CVE-2026-0745)
### CVE-2026-0766 (2026-01-23)
<code>Open WebUI load_tool_module_by_id Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open WebUI. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the load_tool_module_by_id function. The issue results from the lack of proper validation of a user-supplied string before using it to execute Python code. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-28257.
</code>
### CVE-2026-0766
- [bitt0n/CVE-2026-0766](https://github.com/bitt0n/CVE-2026-0766)
### CVE-2026-0768 (2026-01-23)
@@ -367,6 +363,7 @@
- [John-doe-code-a11/CVE-2026-0920](https://github.com/John-doe-code-a11/CVE-2026-0920)
- [Nxploited/CVE-2026-0920-](https://github.com/Nxploited/CVE-2026-0920-)
- [Dx3iZ/CVE-2026-0920](https://github.com/Dx3iZ/CVE-2026-0920)
- [katranSefa/CVE-2026-0920](https://github.com/katranSefa/CVE-2026-0920)
### CVE-2026-0926 (2026-02-19)
@@ -2495,6 +2492,13 @@
- [xxconi/CVE-2026-9018](https://github.com/xxconi/CVE-2026-9018)
### CVE-2026-9055 (2026-09-02)
<code>The Booking for Appointments and Events Calendar – Amelia (Premium) plugin for WordPress is vulnerable to Privilege Escalation in versions 8.0 - 9.6.2. This is due to insufficient validation of the attacker-controlled 'type' parameter in the customer update endpoint, which allows customers to set their role to 'manager' and trigger creation of a WordPress user with the wpamelia-manager role when the 'externalId' parameter is set to 0. This makes it possible for unauthenticated attackers to escalate their privileges to administrator by first elevating to the manager role, then creating a provider entity linked to an administrator user ID and overwriting that administrator's password.
</code>
- [EXEcution-py/CVE-2026-9055](https://github.com/EXEcution-py/CVE-2026-9055)
### CVE-2026-9067 (2026-06-10)
<code>The Schema &amp; Structured Data for WP &amp; AMP WordPress plugin before 1.60 does not check user capabilities on its frontend AJAX file-upload handlers and does not validate the actual content of uploaded files against the endpoint's intended media type, allowing unauthenticated users to upload any file type accepted by WordPress's media library through endpoints that should only accept images or videos.
@@ -2595,6 +2599,13 @@
- [shinthink/CVE-2026-9290](https://github.com/shinthink/CVE-2026-9290)
### CVE-2026-9335 (2026-08-02)
<code>A vulnerability in keras-team/keras versions &lt;= 3.14.0 allows arbitrary local HDF5 file content disclosure due to improper handling of HDF5 ExternalLinks. The `KerasFileEditor` and `keras.saving.load_weights` functions bypass the `safe_get_h5_group` and `safe_get_h5_dataset` helpers, which are designed to reject ExternalLinks and SoftLinks. This results in automatic dereferencing of links to external HDF5 files, enabling attackers to disclose sensitive data from the victim's local filesystem. Specifically, `KerasFileEditor` extracts attributes and datasets from linked files into its internal structures, while `keras.saving.load_weights` loads weights from linked files into the user's model. This issue can be exploited by providing a malicious `.h5`, `.weights.h5`, or `.keras` file containing ExternalLinks.
</code>
- [paparojonathan/CVE-2026-9335-keras-hdf5-externallink](https://github.com/paparojonathan/CVE-2026-9335-keras-hdf5-externallink)
### CVE-2026-9490 (2026-05-25)
<code>A security vulnerability has been identified in Acer Care Center where the ACCSvc service creates a Named Pipe with a weak Security Descriptor. This vulnerability allows an authenticated local user to connect and send a specially crafted message (message type 0x03) to the pipe, causing the service to crash with exit code 1067 (ERROR_PROCESS_ABORTED). To mitigate this potential local service disruption, Acer requires users to update the software to the latest version.
@@ -3868,6 +3879,13 @@
- [punitdarji/Gitlab-CVE-2026-19478](https://github.com/punitdarji/Gitlab-CVE-2026-19478)
- [EQSTLab/CVE-2026-19478](https://github.com/EQSTLab/CVE-2026-19478)
### CVE-2026-19490 (2026-08-19)
<code>Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21.
</code>
- [TarPeg007/CVE-2026-19490](https://github.com/TarPeg007/CVE-2026-19490)
### CVE-2026-19500 (2026-08-18)
<code>The Entries component in Brainstorm Force SureForms version, less than 2.12.3, does not enforce adequate limits on user-controlled form fields or submitted content during processing and rendering, which allows a remote attacker to exhaust server resources, prevent administrators from accessing the Entries interface, and trigger HTTP 500 errors via crafted form submissions.
@@ -5578,6 +5596,13 @@
- [0xNDI/CVE-2026-24294](https://github.com/0xNDI/CVE-2026-24294)
### CVE-2026-24301 (2026-08-18)
<code>Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.
</code>
- [CSOAI-ORG/memory-poisoning-axis](https://github.com/CSOAI-ORG/memory-poisoning-axis)
### CVE-2026-24306 (2026-01-22)
<code>Improper access control in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network.
@@ -11451,6 +11476,13 @@
- [daehyuh/CVE-2026-47883](https://github.com/daehyuh/CVE-2026-47883)
### CVE-2026-47884 (2026-08-27)
<code>Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an &quot;/**&quot; mapping that results in view rendering, and where the view name is not explicitly specified.\nSpring Framework 7.0.0 - 7.0.8\nSpring Framework 6.2.0 - 6.2.19\nSpring Framework 6.1.0 - 6.1.28\nSpring Framework 6.0.0 - 6.0.30\nSpring Framework 5.3.0 - 5.3.49\nSpring Framework 5.2.25.RELEASE and earlier
</code>
- [xiaoqiMikko/spring-cvss-check](https://github.com/xiaoqiMikko/spring-cvss-check)
### CVE-2026-48017 (2026-06-15)
<code>DbGate is cross-platform database manager. In versions 7.1.8 and prior, the POST /runners/load-reader endpoint in DbGate accepts a functionName parameter that is directly interpolated into a JavaScript code template without any sanitization or validation. An authenticated user (with basic access, no special permissions required) can inject arbitrary JavaScript code that executes on the server with full process privileges, bypassing the require=null sandbox restriction. An authenticated user with basic access (no admin role, no run-shell-script permission required) can: execute arbitrary OS commands on the DbGate server with the privileges of the Node.js process, read/write any file accessible to the process, pivot to connected databases by reading connection credentials from DbGate's storage, and compromise the host system - in Docker deployments, this typically means root access within the container. Version 7.1.9 contains a patch.
@@ -12264,7 +12296,11 @@
### CVE-2026-52824
- [AzureADTrent/CVE-2026-52824](https://github.com/AzureADTrent/CVE-2026-52824)
### CVE-2026-52832
### CVE-2026-52832 (2026-09-02)
<code>Nuclio is a &quot;Serverless&quot; framework for Real-Time Events and Data Processing. Prior to version 1.16.5, Nuclio Dashboard exposes POST /api/functions without authentication by default (NOP auth mode). The spec.handler field (e.g., mymodule:myfunction) is parsed by functionconfig.ParseHandler() which splits on : only — no path validation is applied to the module portion. This issue has been patched in version 1.16.5.
</code>
- [mdvpat/CVE-2026-52832-PoC-exploit-nuclio-dashboard](https://github.com/mdvpat/CVE-2026-52832-PoC-exploit-nuclio-dashboard)
### CVE-2026-52885 (2026-06-26)
@@ -14241,6 +14277,13 @@
- [CamilleGR/CVE-2026-73292](https://github.com/CamilleGR/CVE-2026-73292)
### CVE-2026-73296 (2026-08-12)
<code>Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, create_mobile_data_collection_server and create_mobile_action_server in ufo/client/mcp/http_servers/mobile_mcp_server.py exposed Streamable HTTP MCP services on TCP ports 8020 and 8021 without authentication, allowing an unauthenticated remote attacker to invoke capture_screenshot, get_ui_tree, tap, swipe, type_text, launch_app, press_key, and click_control against an ADB-connected Android device, disclose screen and device data, and modify device state. This issue is fixed in version 3.0.8.
</code>
- [0xBlackash/CVE-2026-73296](https://github.com/0xBlackash/CVE-2026-73296)
### CVE-2026-73519 (2026-08-12)
<code>WolfStack before 25.9.2 contains a hard-coded cluster-authentication secret compiled into every build and published as a constant in src/auth/mod.rs, allowing remote unauthenticated attackers to bypass authentication by supplying this value in the X-WolfStack-Secret header to the require_auth() gate without any session, API key, or user account. Attackers can reach an affected node's management port to enumerate all Docker and LXC containers on the host and execute arbitrary commands as root inside any container via the POST /api/containers/{runtime}/{id}/exec endpoint.
@@ -14258,6 +14301,7 @@
- [jishino567/CVE-2026-73570](https://github.com/jishino567/CVE-2026-73570)
- [gabrielunknown/CVE-2026-73570](https://github.com/gabrielunknown/CVE-2026-73570)
- [INFOKOM-KI/Zimbra-CVE-2026-73570-Rules](https://github.com/INFOKOM-KI/Zimbra-CVE-2026-73570-Rules)
- [byt3l0rd/CVE-2026-73570](https://github.com/byt3l0rd/CVE-2026-73570)
### CVE-2026-73633 (2026-08-14)
@@ -19788,6 +19832,7 @@
- [jsecx88/CVE-2025-29009-POC](https://github.com/jsecx88/CVE-2025-29009-POC)
- [Nxploited/CVE-2025-29009](https://github.com/Nxploited/CVE-2025-29009)
- [katranSefa/CVE-2025-29009](https://github.com/katranSefa/CVE-2025-29009)
### CVE-2025-29015 (2025-04-17)
@@ -24184,6 +24229,7 @@
- [h3n1s3/React2shell-Research](https://github.com/h3n1s3/React2shell-Research)
- [Mr-Destroyer/CVE-2025-55182](https://github.com/Mr-Destroyer/CVE-2025-55182)
- [UwUGreed/CVE-2025-55182-poc](https://github.com/UwUGreed/CVE-2025-55182-poc)
- [ChrisBarack/cve-2025-55182](https://github.com/ChrisBarack/cve-2025-55182)
### CVE-2025-55183 (2025-12-11)
@@ -24334,6 +24380,7 @@
- [masahiro331/CVE-2025-55752](https://github.com/masahiro331/CVE-2025-55752)
- [AuroraSec-Pivot/CVE-2025-55752](https://github.com/AuroraSec-Pivot/CVE-2025-55752)
- [Jimmy01240397/CVE-2025-55752](https://github.com/Jimmy01240397/CVE-2025-55752)
- [xiaoqiMikko/tomcat85-check](https://github.com/xiaoqiMikko/tomcat85-check)
### CVE-2025-55763 (2025-08-29)
@@ -84401,6 +84448,7 @@
- [rsakthikumar-cmd/metasploitable2-vsftpd-writeup](https://github.com/rsakthikumar-cmd/metasploitable2-vsftpd-writeup)
- [Gvln-S/CVE-2011-2523](https://github.com/Gvln-S/CVE-2011-2523)
- [aboubacar70/LAB1-metasploitable](https://github.com/aboubacar70/LAB1-metasploitable)
- [JUN41DS2709/vsFTPd-2.3.4-Exploit](https://github.com/JUN41DS2709/vsFTPd-2.3.4-Exploit)
### CVE-2011-2553
- [carlosrpastrana/cve-2011-2553](https://github.com/carlosrpastrana/cve-2011-2553)