diff --git a/2011/CVE-2011-2523.json b/2011/CVE-2011-2523.json
index f029c918b6..c78d2a55c2 100644
--- a/2011/CVE-2011-2523.json
+++ b/2011/CVE-2011-2523.json
@@ -2013,5 +2013,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1355054204,
+ "name": "vsFTPd-2.3.4-Exploit",
+ "full_name": "JUN41DS2709\/vsFTPd-2.3.4-Exploit",
+ "owner": {
+ "login": "JUN41DS2709",
+ "id": 166510560,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/166510560?v=4",
+ "html_url": "https:\/\/github.com\/JUN41DS2709",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/JUN41DS2709\/vsFTPd-2.3.4-Exploit",
+ "description": "Python exploit for the vsFTPd 2.3.4 backdoor (CVE-2011-2523).",
+ "fork": false,
+ "created_at": "2026-09-02T17:38:16Z",
+ "updated_at": "2026-09-02T17:48:46Z",
+ "pushed_at": "2026-09-02T17:48:40Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2017/CVE-2017-1000405.json b/2017/CVE-2017-1000405.json
index bc0df7234e..2f37214a26 100644
--- a/2017/CVE-2017-1000405.json
+++ b/2017/CVE-2017-1000405.json
@@ -30,6 +30,6 @@
"forks": 51,
"watchers": 200,
"score": 0,
- "subscribers_count": 4
+ "subscribers_count": 7
}
]
\ No newline at end of file
diff --git a/2017/CVE-2017-5753.json b/2017/CVE-2017-5753.json
index 01fb1c2cc1..c8bc12af63 100644
--- a/2017/CVE-2017-5753.json
+++ b/2017/CVE-2017-5753.json
@@ -19,7 +19,7 @@
"stargazers_count": 771,
"watchers_count": 771,
"has_discussions": false,
- "forks_count": 168,
+ "forks_count": 167,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -33,7 +33,7 @@
"spectre"
],
"visibility": "public",
- "forks": 168,
+ "forks": 167,
"watchers": 771,
"score": 0,
"subscribers_count": 40
diff --git a/2020/CVE-2020-11996.json b/2020/CVE-2020-11996.json
index 3879d86820..4f5c45af03 100644
--- a/2020/CVE-2020-11996.json
+++ b/2020/CVE-2020-11996.json
@@ -19,7 +19,7 @@
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
- "forks_count": 2,
+ "forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 2,
+ "forks": 1,
"watchers": 5,
"score": 0,
"subscribers_count": 2
diff --git a/2021/CVE-2021-0928.json b/2021/CVE-2021-0928.json
index ba964e0d16..427e71eb4f 100644
--- a/2021/CVE-2021-0928.json
+++ b/2021/CVE-2021-0928.json
@@ -19,7 +19,7 @@
"stargazers_count": 123,
"watchers_count": 123,
"has_discussions": false,
- "forks_count": 23,
+ "forks_count": 24,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 23,
+ "forks": 24,
"watchers": 123,
"score": 0,
"subscribers_count": 5
diff --git a/2021/CVE-2021-1931.json b/2021/CVE-2021-1931.json
index f0a91a805a..d46d4b20eb 100644
--- a/2021/CVE-2021-1931.json
+++ b/2021/CVE-2021-1931.json
@@ -80,10 +80,10 @@
"description": "Unlock the Meta Quest 1 bootloader and gain root access using GhostLock + CVE-2021-1931.",
"fork": false,
"created_at": "2026-07-31T05:37:56Z",
- "updated_at": "2026-09-02T03:35:51Z",
+ "updated_at": "2026-09-02T17:41:43Z",
"pushed_at": "2026-08-28T12:08:00Z",
- "stargazers_count": 168,
- "watchers_count": 168,
+ "stargazers_count": 169,
+ "watchers_count": 169,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -108,7 +108,7 @@
],
"visibility": "public",
"forks": 7,
- "watchers": 168,
+ "watchers": 169,
"score": 0,
"subscribers_count": 5
}
diff --git a/2021/CVE-2021-36260.json b/2021/CVE-2021-36260.json
index 7910b0f081..f8674a3610 100644
--- a/2021/CVE-2021-36260.json
+++ b/2021/CVE-2021-36260.json
@@ -47,10 +47,10 @@
"description": "command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.",
"fork": false,
"created_at": "2021-10-27T15:51:12Z",
- "updated_at": "2026-09-02T01:42:44Z",
+ "updated_at": "2026-09-02T15:16:36Z",
"pushed_at": "2021-10-28T06:37:37Z",
- "stargazers_count": 300,
- "watchers_count": 300,
+ "stargazers_count": 301,
+ "watchers_count": 301,
"has_discussions": false,
"forks_count": 80,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 80,
- "watchers": 300,
+ "watchers": 301,
"score": 0,
"subscribers_count": 5
},
diff --git a/2021/CVE-2021-44228.json b/2021/CVE-2021-44228.json
index 062367f079..83200e294c 100644
--- a/2021/CVE-2021-44228.json
+++ b/2021/CVE-2021-44228.json
@@ -993,7 +993,7 @@
"stargazers_count": 1848,
"watchers_count": 1848,
"has_discussions": false,
- "forks_count": 541,
+ "forks_count": 540,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1006,7 +1006,7 @@
"security"
],
"visibility": "public",
- "forks": 541,
+ "forks": 540,
"watchers": 1848,
"score": 0,
"subscribers_count": 0
@@ -6396,10 +6396,10 @@
"description": "Tools for remediating the recent log4j2 RCE vulnerability (CVE-2021-44228)",
"fork": false,
"created_at": "2021-12-14T21:47:04Z",
- "updated_at": "2026-09-01T10:44:55Z",
+ "updated_at": "2026-09-02T17:34:39Z",
"pushed_at": "2025-12-19T22:36:08Z",
- "stargazers_count": 41,
- "watchers_count": 41,
+ "stargazers_count": 40,
+ "watchers_count": 40,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -6414,7 +6414,7 @@
],
"visibility": "public",
"forks": 7,
- "watchers": 41,
+ "watchers": 40,
"score": 0,
"subscribers_count": 7
},
diff --git a/2022/CVE-2022-38691.json b/2022/CVE-2022-38691.json
index 94f9bb515f..f5dbba44b4 100644
--- a/2022/CVE-2022-38691.json
+++ b/2022/CVE-2022-38691.json
@@ -14,10 +14,10 @@
"description": "Let's control Secure Boot Chain ourselves.",
"fork": false,
"created_at": "2023-12-01T07:32:18Z",
- "updated_at": "2026-08-22T09:24:34Z",
+ "updated_at": "2026-09-02T13:54:58Z",
"pushed_at": "2025-08-22T15:37:10Z",
- "stargazers_count": 110,
- "watchers_count": 110,
+ "stargazers_count": 111,
+ "watchers_count": 111,
"has_discussions": false,
"forks_count": 20,
"allow_forking": true,
@@ -31,7 +31,7 @@
],
"visibility": "public",
"forks": 20,
- "watchers": 110,
+ "watchers": 111,
"score": 0,
"subscribers_count": 6
}
diff --git a/2022/CVE-2022-46463.json b/2022/CVE-2022-46463.json
index 21f19c24f9..29167dda20 100644
--- a/2022/CVE-2022-46463.json
+++ b/2022/CVE-2022-46463.json
@@ -47,10 +47,10 @@
"description": "harbor unauthorized detection",
"fork": false,
"created_at": "2023-03-21T10:40:19Z",
- "updated_at": "2026-08-18T04:59:27Z",
+ "updated_at": "2026-09-02T16:17:02Z",
"pushed_at": "2024-12-12T07:37:01Z",
- "stargazers_count": 58,
- "watchers_count": 58,
+ "stargazers_count": 59,
+ "watchers_count": 59,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 7,
- "watchers": 58,
+ "watchers": 59,
"score": 0,
"subscribers_count": 1
},
diff --git a/2023/CVE-2023-29343.json b/2023/CVE-2023-29343.json
index fb1fecb4e8..fcece5f67d 100644
--- a/2023/CVE-2023-29343.json
+++ b/2023/CVE-2023-29343.json
@@ -19,7 +19,7 @@
"stargazers_count": 162,
"watchers_count": 162,
"has_discussions": false,
- "forks_count": 26,
+ "forks_count": 25,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 26,
+ "forks": 25,
"watchers": 162,
"score": 0,
"subscribers_count": 3
diff --git a/2023/CVE-2023-36874.json b/2023/CVE-2023-36874.json
index 49f94550da..96a2c85970 100644
--- a/2023/CVE-2023-36874.json
+++ b/2023/CVE-2023-36874.json
@@ -85,7 +85,7 @@
"stargazers_count": 242,
"watchers_count": 242,
"has_discussions": false,
- "forks_count": 47,
+ "forks_count": 46,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -93,7 +93,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 47,
+ "forks": 46,
"watchers": 242,
"score": 0,
"subscribers_count": 5
diff --git a/2023/CVE-2023-45866.json b/2023/CVE-2023-45866.json
index 8c52f865a9..dd95b13c61 100644
--- a/2023/CVE-2023-45866.json
+++ b/2023/CVE-2023-45866.json
@@ -19,7 +19,7 @@
"stargazers_count": 1888,
"watchers_count": 1888,
"has_discussions": false,
- "forks_count": 320,
+ "forks_count": 321,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 320,
+ "forks": 321,
"watchers": 1888,
"score": 0,
"subscribers_count": 29
diff --git a/2024/CVE-2024-0670.json b/2024/CVE-2024-0670.json
index 31859c717f..08303bfb9e 100644
--- a/2024/CVE-2024-0670.json
+++ b/2024/CVE-2024-0670.json
@@ -118,7 +118,7 @@
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
"fork": false,
"created_at": "2026-01-08T01:32:09Z",
- "updated_at": "2026-08-31T02:01:57Z",
+ "updated_at": "2026-09-02T13:30:59Z",
"pushed_at": "2026-09-02T13:22:58Z",
"stargazers_count": 0,
"watchers_count": 0,
diff --git a/2024/CVE-2024-1086.json b/2024/CVE-2024-1086.json
index e56aed1bee..f8b9e36f15 100644
--- a/2024/CVE-2024-1086.json
+++ b/2024/CVE-2024-1086.json
@@ -218,10 +218,10 @@
"description": null,
"fork": false,
"created_at": "2024-12-16T17:33:13Z",
- "updated_at": "2026-06-23T07:30:34Z",
+ "updated_at": "2026-09-02T19:13:28Z",
"pushed_at": "2024-12-16T17:38:23Z",
- "stargazers_count": 21,
- "watchers_count": 21,
+ "stargazers_count": 22,
+ "watchers_count": 22,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -232,7 +232,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
- "watchers": 21,
+ "watchers": 22,
"score": 0,
"subscribers_count": 1
},
diff --git a/2024/CVE-2024-20656.json b/2024/CVE-2024-20656.json
index 0d57f838ff..99e1c7678e 100644
--- a/2024/CVE-2024-20656.json
+++ b/2024/CVE-2024-20656.json
@@ -19,7 +19,7 @@
"stargazers_count": 136,
"watchers_count": 136,
"has_discussions": false,
- "forks_count": 32,
+ "forks_count": 31,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 32,
+ "forks": 31,
"watchers": 136,
"score": 0,
"subscribers_count": 2
diff --git a/2024/CVE-2024-23897.json b/2024/CVE-2024-23897.json
index 2eb341ec17..879943dc8e 100644
--- a/2024/CVE-2024-23897.json
+++ b/2024/CVE-2024-23897.json
@@ -1499,8 +1499,8 @@
"description": "Full VAPT writeup of OWASP CICD-Goat — 9 CTFd flags captured, 4 critical + 5 high findings (incl. CVE-2024-23897) mapped to the OWASP Top 10 CI\/CD Security Risks, with PoCs, remediation, and interview-ready summaries.",
"fork": false,
"created_at": "2026-07-31T12:16:24Z",
- "updated_at": "2026-08-05T17:16:58Z",
- "pushed_at": "2026-08-05T17:15:42Z",
+ "updated_at": "2026-09-02T18:48:40Z",
+ "pushed_at": "2026-09-02T18:44:42Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2024/CVE-2024-27956.json b/2024/CVE-2024-27956.json
index c7ff45f0e2..743e271904 100644
--- a/2024/CVE-2024-27956.json
+++ b/2024/CVE-2024-27956.json
@@ -359,7 +359,7 @@
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
- "forks_count": 3,
+ "forks_count": 4,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -367,7 +367,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 3,
+ "forks": 4,
"watchers": 8,
"score": 0,
"subscribers_count": 1
diff --git a/2025/CVE-2025-14847.json b/2025/CVE-2025-14847.json
index 11fc3b1924..74ce89c014 100644
--- a/2025/CVE-2025-14847.json
+++ b/2025/CVE-2025-14847.json
@@ -14,7 +14,7 @@
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
"fork": false,
"created_at": "2025-07-30T15:52:00Z",
- "updated_at": "2026-08-31T02:04:20Z",
+ "updated_at": "2026-09-02T13:32:00Z",
"pushed_at": "2026-09-02T13:24:21Z",
"stargazers_count": 1,
"watchers_count": 1,
diff --git a/2025/CVE-2025-29009.json b/2025/CVE-2025-29009.json
index b8cedc0922..3ed3bc49c2 100644
--- a/2025/CVE-2025-29009.json
+++ b/2025/CVE-2025-29009.json
@@ -64,5 +64,38 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1354876529,
+ "name": "CVE-2025-29009",
+ "full_name": "katranSefa\/CVE-2025-29009",
+ "owner": {
+ "login": "katranSefa",
+ "id": 179320986,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/179320986?v=4",
+ "html_url": "https:\/\/github.com\/katranSefa",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/katranSefa\/CVE-2025-29009",
+ "description": null,
+ "fork": false,
+ "created_at": "2026-09-02T14:39:37Z",
+ "updated_at": "2026-09-02T14:47:59Z",
+ "pushed_at": "2026-09-02T14:39:52Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-29927.json b/2025/CVE-2025-29927.json
index 80cb1cd92a..bcf14a78c2 100644
--- a/2025/CVE-2025-29927.json
+++ b/2025/CVE-2025-29927.json
@@ -365,7 +365,7 @@
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
- "forks_count": 8,
+ "forks_count": 9,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -373,7 +373,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 8,
+ "forks": 9,
"watchers": 6,
"score": 0,
"subscribers_count": 0
diff --git a/2025/CVE-2025-31700.json b/2025/CVE-2025-31700.json
index ba7d7661d3..9bedd0b8c5 100644
--- a/2025/CVE-2025-31700.json
+++ b/2025/CVE-2025-31700.json
@@ -14,10 +14,10 @@
"description": "Dahua IP camera CVE research toolkit (CVE-2021-33044\/33045, CVE-2025-31700\/31701)",
"fork": false,
"created_at": "2026-03-03T21:28:23Z",
- "updated_at": "2026-08-31T05:25:52Z",
+ "updated_at": "2026-09-02T19:31:48Z",
"pushed_at": "2026-04-02T01:55:41Z",
- "stargazers_count": 28,
- "watchers_count": 28,
+ "stargazers_count": 27,
+ "watchers_count": 27,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
- "watchers": 28,
+ "watchers": 27,
"score": 0,
"subscribers_count": 2
}
diff --git a/2025/CVE-2025-48561.json b/2025/CVE-2025-48561.json
index dde92791fe..b0b2f3c50e 100644
--- a/2025/CVE-2025-48561.json
+++ b/2025/CVE-2025-48561.json
@@ -14,10 +14,10 @@
"description": "Pixnapping Attack: Compromising private keys and seed phrases through vulnerability CVE-2025-48561 represents a new critical threat to the Bitcoin network and Android infrastructure",
"fork": false,
"created_at": "2025-10-27T12:06:20Z",
- "updated_at": "2026-06-01T04:47:40Z",
+ "updated_at": "2026-09-02T14:05:19Z",
"pushed_at": "2025-10-27T12:14:41Z",
- "stargazers_count": 18,
- "watchers_count": 18,
+ "stargazers_count": 19,
+ "watchers_count": 19,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -41,7 +41,7 @@
],
"visibility": "public",
"forks": 1,
- "watchers": 18,
+ "watchers": 19,
"score": 0,
"subscribers_count": 1
}
diff --git a/2025/CVE-2025-49844.json b/2025/CVE-2025-49844.json
index 060b9d332a..23f2725c7e 100644
--- a/2025/CVE-2025-49844.json
+++ b/2025/CVE-2025-49844.json
@@ -66,7 +66,7 @@
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
"fork": false,
"created_at": "2022-04-06T09:27:39Z",
- "updated_at": "2026-08-31T01:52:44Z",
+ "updated_at": "2026-09-02T13:29:14Z",
"pushed_at": "2026-09-02T13:12:14Z",
"stargazers_count": 2,
"watchers_count": 2,
diff --git a/2025/CVE-2025-54136.json b/2025/CVE-2025-54136.json
index 6714107fe7..b5cde2328f 100644
--- a/2025/CVE-2025-54136.json
+++ b/2025/CVE-2025-54136.json
@@ -48,7 +48,7 @@
"fork": false,
"created_at": "2026-07-08T09:19:33Z",
"updated_at": "2026-07-08T15:41:00Z",
- "pushed_at": "2026-08-26T09:16:25Z",
+ "pushed_at": "2026-09-02T19:36:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-55182.json b/2025/CVE-2025-55182.json
index 461fde1e1d..38607b2667 100644
--- a/2025/CVE-2025-55182.json
+++ b/2025/CVE-2025-55182.json
@@ -15668,5 +15668,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1354938527,
+ "name": "cve-2025-55182",
+ "full_name": "ChrisBarack\/cve-2025-55182",
+ "owner": {
+ "login": "ChrisBarack",
+ "id": 66031760,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/66031760?v=4",
+ "html_url": "https:\/\/github.com\/ChrisBarack",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/ChrisBarack\/cve-2025-55182",
+ "description": null,
+ "fork": false,
+ "created_at": "2026-09-02T15:38:25Z",
+ "updated_at": "2026-09-02T15:50:56Z",
+ "pushed_at": "2026-09-02T15:40:26Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-55752.json b/2025/CVE-2025-55752.json
index 1623b99219..c4e47eaa7d 100644
--- a/2025/CVE-2025-55752.json
+++ b/2025/CVE-2025-55752.json
@@ -130,5 +130,59 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1353118845,
+ "name": "tomcat85-check",
+ "full_name": "xiaoqiMikko\/tomcat85-check",
+ "owner": {
+ "login": "xiaoqiMikko",
+ "id": 37316664,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/37316664?v=4",
+ "html_url": "https:\/\/github.com\/xiaoqiMikko",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/xiaoqiMikko\/tomcat85-check",
+ "description": "CVE-2025-55752 CVE-2025-55754 CVE-2025-48988 CVE-2025-52520 CVE-2025-53506 CVE-2025-61795 CVE-2025-66614:Tomcat 8.5 已 EOL,终版 8.5.100。Apache 逐条声明「8.5 也受影响」的 2025 CVE 有 14 条,其中 10 条在 NVD 按 8.5.100 查不到。离线单 jar,读 conf\/ 判断你到底中了哪几条。",
+ "fork": false,
+ "created_at": "2026-09-01T04:10:16Z",
+ "updated_at": "2026-09-02T16:15:31Z",
+ "pushed_at": "2026-09-01T04:11:10Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "apache-tomcat",
+ "cve",
+ "cve-2025-24813",
+ "cve-2025-31650",
+ "cve-2025-48988",
+ "cve-2025-49125",
+ "cve-2025-52520",
+ "cve-2025-53506",
+ "cve-2025-55752",
+ "cve-2025-55754",
+ "cve-2025-61795",
+ "cve-2025-66614",
+ "end-of-life",
+ "eol",
+ "java",
+ "nvd",
+ "security-tools",
+ "tomcat",
+ "tomcat85",
+ "vulnerability-scanner"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2025/CVE-2025-6440.json b/2025/CVE-2025-6440.json
index 5ec6e1f0d1..23171ae62b 100644
--- a/2025/CVE-2025-6440.json
+++ b/2025/CVE-2025-6440.json
@@ -245,8 +245,8 @@
"description": null,
"fork": false,
"created_at": "2026-08-30T12:49:43Z",
- "updated_at": "2026-08-30T13:07:16Z",
- "pushed_at": "2026-08-30T13:04:44Z",
+ "updated_at": "2026-09-02T14:54:12Z",
+ "pushed_at": "2026-09-02T14:46:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2025/CVE-2025-65817.json b/2025/CVE-2025-65817.json
index c599bd518e..08e826db93 100644
--- a/2025/CVE-2025-65817.json
+++ b/2025/CVE-2025-65817.json
@@ -14,10 +14,10 @@
"description": "Here is the CVE-2025-65817",
"fork": false,
"created_at": "2025-12-19T18:54:42Z",
- "updated_at": "2026-08-29T21:59:54Z",
+ "updated_at": "2026-09-02T18:55:01Z",
"pushed_at": "2025-12-19T19:11:06Z",
- "stargazers_count": 10,
- "watchers_count": 10,
+ "stargazers_count": 11,
+ "watchers_count": 11,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
- "watchers": 10,
+ "watchers": 11,
"score": 0,
"subscribers_count": 0
}
diff --git a/2025/CVE-2025-68613.json b/2025/CVE-2025-68613.json
index 4d4f18cc55..9e58685afb 100644
--- a/2025/CVE-2025-68613.json
+++ b/2025/CVE-2025-68613.json
@@ -466,10 +466,10 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/AbdulRKB\/n8n-RCE",
- "description": "Remote Code Execution via n8n Workflows (Based on CVE-2025-68613)",
+ "description": "Proof of Concept (PoC) Script for Remote Code Execution via n8n Workflows (Based on CVE-2025-68613)",
"fork": false,
"created_at": "2025-12-25T12:11:37Z",
- "updated_at": "2025-12-26T18:45:49Z",
+ "updated_at": "2026-09-02T16:35:29Z",
"pushed_at": "2025-12-25T12:35:08Z",
"stargazers_count": 0,
"watchers_count": 0,
@@ -483,7 +483,6 @@
"topics": [
"cve-2025-68613",
"n8n",
- "n8n-exploits",
"n8n-workflow",
"rce"
],
diff --git a/2025/CVE-2025-69080.json b/2025/CVE-2025-69080.json
index 474d71dac0..1753ce70db 100644
--- a/2025/CVE-2025-69080.json
+++ b/2025/CVE-2025-69080.json
@@ -14,8 +14,8 @@
"description": null,
"fork": false,
"created_at": "2026-08-31T21:00:26Z",
- "updated_at": "2026-08-31T21:38:32Z",
- "pushed_at": "2026-08-31T21:38:27Z",
+ "updated_at": "2026-09-02T14:07:32Z",
+ "pushed_at": "2026-09-02T14:03:03Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2026/CVE-2026-0828.json b/2026/CVE-2026-0828.json
index 0f65b5ea91..51aad82957 100644
--- a/2026/CVE-2026-0828.json
+++ b/2026/CVE-2026-0828.json
@@ -228,7 +228,7 @@
"description": "CVE-2026-0828",
"fork": false,
"created_at": "2026-09-02T13:39:46Z",
- "updated_at": "2026-09-02T13:44:13Z",
+ "updated_at": "2026-09-02T13:50:33Z",
"pushed_at": "2026-09-02T13:46:49Z",
"stargazers_count": 0,
"watchers_count": 0,
diff --git a/2026/CVE-2026-0920.json b/2026/CVE-2026-0920.json
index e5e3c0521f..97f78987c9 100644
--- a/2026/CVE-2026-0920.json
+++ b/2026/CVE-2026-0920.json
@@ -130,5 +130,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1354911608,
+ "name": "CVE-2026-0920",
+ "full_name": "katranSefa\/CVE-2026-0920",
+ "owner": {
+ "login": "katranSefa",
+ "id": 179320986,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/179320986?v=4",
+ "html_url": "https:\/\/github.com\/katranSefa",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/katranSefa\/CVE-2026-0920",
+ "description": null,
+ "fork": false,
+ "created_at": "2026-09-02T15:12:07Z",
+ "updated_at": "2026-09-02T15:21:00Z",
+ "pushed_at": "2026-09-02T15:12:19Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2026/CVE-2026-19490.json b/2026/CVE-2026-19490.json
new file mode 100644
index 0000000000..741fbef813
--- /dev/null
+++ b/2026/CVE-2026-19490.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1354944248,
+ "name": "CVE-2026-19490",
+ "full_name": "TarPeg007\/CVE-2026-19490",
+ "owner": {
+ "login": "TarPeg007",
+ "id": 172214852,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/172214852?v=4",
+ "html_url": "https:\/\/github.com\/TarPeg007",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/TarPeg007\/CVE-2026-19490",
+ "description": "NetScaler ADC\/Gateway SAML unsigned-assertion bypass via HTTP-Redirect binding (CTX696939) - root cause analysis + PoC",
+ "fork": false,
+ "created_at": "2026-09-02T15:43:53Z",
+ "updated_at": "2026-09-02T15:49:55Z",
+ "pushed_at": "2026-09-02T15:44:02Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2026/CVE-2026-24301.json b/2026/CVE-2026-24301.json
new file mode 100644
index 0000000000..27c28edd43
--- /dev/null
+++ b/2026/CVE-2026-24301.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1340620560,
+ "name": "memory-poisoning-axis",
+ "full_name": "CSOAI-ORG\/memory-poisoning-axis",
+ "owner": {
+ "login": "CSOAI-ORG",
+ "id": 260596236,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/260596236?v=4",
+ "html_url": "https:\/\/github.com\/CSOAI-ORG",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/CSOAI-ORG\/memory-poisoning-axis",
+ "description": "Deterministic memory-poisoning \/ prompt-injection measurement axis — CoSnitch (CVE-2026-24301) anchored. Inspect scorer, signed receipts. Measurement, not certification.",
+ "fork": false,
+ "created_at": "2026-08-20T11:25:55Z",
+ "updated_at": "2026-08-20T11:28:04Z",
+ "pushed_at": "2026-08-20T11:26:00Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2026/CVE-2026-27912.json b/2026/CVE-2026-27912.json
index 8a1403ada6..8227c3d99c 100644
--- a/2026/CVE-2026-27912.json
+++ b/2026/CVE-2026-27912.json
@@ -14,10 +14,10 @@
"description": "POC tool for ResetNightmare (CVE-2026-27912)",
"fork": false,
"created_at": "2026-08-02T12:36:16Z",
- "updated_at": "2026-09-02T12:55:07Z",
+ "updated_at": "2026-09-02T14:27:15Z",
"pushed_at": "2026-08-20T16:44:53Z",
- "stargazers_count": 210,
- "watchers_count": 210,
+ "stargazers_count": 211,
+ "watchers_count": 211,
"has_discussions": false,
"forks_count": 37,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 37,
- "watchers": 210,
+ "watchers": 211,
"score": 0,
"subscribers_count": 1
},
@@ -95,7 +95,7 @@
"description": "PoC for CVE-2026-27912 - Windows Kerberos Elevation of Privilege (ResetNightmare). Unauthorized password reset via Kerberos flaw. For security research only.",
"fork": false,
"created_at": "2026-08-14T14:55:43Z",
- "updated_at": "2026-08-23T09:44:49Z",
+ "updated_at": "2026-09-02T15:21:11Z",
"pushed_at": "2026-08-14T15:07:53Z",
"stargazers_count": 2,
"watchers_count": 2,
diff --git a/2026/CVE-2026-31431.json b/2026/CVE-2026-31431.json
index 4b5133a89f..921fb74192 100644
--- a/2026/CVE-2026-31431.json
+++ b/2026/CVE-2026-31431.json
@@ -47,10 +47,10 @@
"description": "Copy Fail (CVE-2026-31431): 9-year-old Linux kernel LPE found by Theori's Xint Code",
"fork": false,
"created_at": "2026-04-29T12:15:28Z",
- "updated_at": "2026-09-01T23:32:09Z",
+ "updated_at": "2026-09-02T18:57:54Z",
"pushed_at": "2026-04-29T21:21:46Z",
- "stargazers_count": 4057,
- "watchers_count": 4057,
+ "stargazers_count": 4058,
+ "watchers_count": 4058,
"has_discussions": false,
"forks_count": 910,
"allow_forking": true,
@@ -72,7 +72,7 @@
],
"visibility": "public",
"forks": 910,
- "watchers": 4057,
+ "watchers": 4058,
"score": 0,
"subscribers_count": 34
},
@@ -8197,8 +8197,8 @@
"description": "Exploit CVE-2026-31431 on Linux using a Rust implementation to achieve local privilege escalation via an arbitrary page cache write primitive.",
"fork": false,
"created_at": "2026-05-06T09:49:14Z",
- "updated_at": "2026-08-31T02:22:00Z",
- "pushed_at": "2026-08-31T02:21:53Z",
+ "updated_at": "2026-09-02T13:51:50Z",
+ "pushed_at": "2026-09-02T13:47:34Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
diff --git a/2026/CVE-2026-31802.json b/2026/CVE-2026-31802.json
index c6535e8201..c9a7011813 100644
--- a/2026/CVE-2026-31802.json
+++ b/2026/CVE-2026-31802.json
@@ -59,8 +59,8 @@
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"fork": false,
"created_at": "2026-03-28T20:49:46Z",
- "updated_at": "2026-08-31T02:15:55Z",
- "pushed_at": "2026-08-31T02:15:39Z",
+ "updated_at": "2026-09-02T13:45:07Z",
+ "pushed_at": "2026-09-02T13:40:02Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2026/CVE-2026-37196.json b/2026/CVE-2026-37196.json
index a3a49a988f..ae6f0dde9d 100644
--- a/2026/CVE-2026-37196.json
+++ b/2026/CVE-2026-37196.json
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-06-12T14:22:12Z",
- "updated_at": "2026-06-12T18:00:23Z",
+ "updated_at": "2026-09-02T16:53:03Z",
"pushed_at": "2026-06-12T18:00:11Z",
- "stargazers_count": 0,
- "watchers_count": 0,
+ "stargazers_count": 1,
+ "watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
- "watchers": 0,
+ "watchers": 1,
"score": 0,
"subscribers_count": 0
}
diff --git a/2026/CVE-2026-43499.json b/2026/CVE-2026-43499.json
index 70a0daf707..94f0a42728 100644
--- a/2026/CVE-2026-43499.json
+++ b/2026/CVE-2026-43499.json
@@ -348,10 +348,10 @@
"description": "GhostLock (CVE-2026-43499) kernel exploit for OnePlus devices with locked bootloader",
"fork": false,
"created_at": "2026-07-12T16:05:24Z",
- "updated_at": "2026-09-02T11:22:59Z",
+ "updated_at": "2026-09-02T16:06:11Z",
"pushed_at": "2026-09-02T11:22:19Z",
- "stargazers_count": 304,
- "watchers_count": 304,
+ "stargazers_count": 305,
+ "watchers_count": 305,
"has_discussions": false,
"forks_count": 65,
"allow_forking": true,
@@ -369,7 +369,7 @@
],
"visibility": "public",
"forks": 65,
- "watchers": 304,
+ "watchers": 305,
"score": 0,
"subscribers_count": 10
},
@@ -591,7 +591,7 @@
"stargazers_count": 83,
"watchers_count": 83,
"has_discussions": false,
- "forks_count": 27,
+ "forks_count": 26,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -599,7 +599,7 @@
"pull_request_creation_policy": "collaborators_only",
"topics": [],
"visibility": "public",
- "forks": 27,
+ "forks": 26,
"watchers": 83,
"score": 0,
"subscribers_count": 0
@@ -850,10 +850,10 @@
"description": "CvE-2026-43499偏移量计算",
"fork": false,
"created_at": "2026-07-15T09:34:51Z",
- "updated_at": "2026-08-15T23:40:03Z",
+ "updated_at": "2026-09-02T18:03:43Z",
"pushed_at": "2026-08-28T08:03:27Z",
- "stargazers_count": 10,
- "watchers_count": 10,
+ "stargazers_count": 11,
+ "watchers_count": 11,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -864,7 +864,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
- "watchers": 10,
+ "watchers": 11,
"score": 0,
"subscribers_count": 0
},
@@ -1081,12 +1081,12 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
- "updated_at": "2026-09-02T13:37:07Z",
+ "updated_at": "2026-09-02T17:44:21Z",
"pushed_at": "2026-08-24T07:49:18Z",
- "stargazers_count": 1041,
- "watchers_count": 1041,
+ "stargazers_count": 1047,
+ "watchers_count": 1047,
"has_discussions": false,
- "forks_count": 201,
+ "forks_count": 202,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1094,8 +1094,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
- "forks": 201,
- "watchers": 1041,
+ "forks": 202,
+ "watchers": 1047,
"score": 0,
"subscribers_count": 28
},
@@ -1694,10 +1694,10 @@
"description": "KSU installer for supported firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-28T10:17:18Z",
- "updated_at": "2026-09-01T16:09:54Z",
+ "updated_at": "2026-09-02T14:02:59Z",
"pushed_at": "2026-08-29T00:06:58Z",
- "stargazers_count": 14,
- "watchers_count": 14,
+ "stargazers_count": 15,
+ "watchers_count": 15,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -1708,7 +1708,7 @@
"topics": [],
"visibility": "public",
"forks": 6,
- "watchers": 14,
+ "watchers": 15,
"score": 0,
"subscribers_count": 0
},
@@ -1727,10 +1727,10 @@
"description": "GhostLock One-Tap Execution App (CVE-2026-43499)",
"fork": false,
"created_at": "2026-07-29T05:04:25Z",
- "updated_at": "2026-09-02T13:42:29Z",
+ "updated_at": "2026-09-02T18:55:29Z",
"pushed_at": "2026-09-01T09:15:58Z",
- "stargazers_count": 676,
- "watchers_count": 676,
+ "stargazers_count": 680,
+ "watchers_count": 680,
"has_discussions": true,
"forks_count": 208,
"allow_forking": true,
@@ -1741,7 +1741,7 @@
"topics": [],
"visibility": "public",
"forks": 208,
- "watchers": 676,
+ "watchers": 680,
"score": 0,
"subscribers_count": 6
},
@@ -1892,10 +1892,10 @@
"description": "GhostLock (CVE-2026-43499) exploit for POCO F3 GT (aresin) — MediaTek Dimensity 1200, Linux 4.14.186 ARM64 kernel privilege escalation via futex PI chain manipulation",
"fork": false,
"created_at": "2026-07-31T18:56:09Z",
- "updated_at": "2026-08-30T00:24:18Z",
+ "updated_at": "2026-09-02T15:36:14Z",
"pushed_at": "2026-08-15T18:33:51Z",
- "stargazers_count": 5,
- "watchers_count": 5,
+ "stargazers_count": 6,
+ "watchers_count": 6,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -1906,7 +1906,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
- "watchers": 5,
+ "watchers": 6,
"score": 0,
"subscribers_count": 0
},
@@ -2103,12 +2103,12 @@
"description": "Jailbreak supported Google Pixel phones with CVE-2026-43499",
"fork": false,
"created_at": "2026-08-02T17:34:45Z",
- "updated_at": "2026-09-02T13:07:52Z",
+ "updated_at": "2026-09-02T18:26:59Z",
"pushed_at": "2026-09-01T21:31:36Z",
- "stargazers_count": 285,
- "watchers_count": 285,
+ "stargazers_count": 290,
+ "watchers_count": 290,
"has_discussions": false,
- "forks_count": 47,
+ "forks_count": 49,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2123,8 +2123,8 @@
"root"
],
"visibility": "public",
- "forks": 47,
- "watchers": 285,
+ "forks": 49,
+ "watchers": 290,
"score": 0,
"subscribers_count": 5
},
@@ -2374,10 +2374,10 @@
"description": "CVE-2026-43499 (GhostLock) research on HUAWEI MatePad Pro 11 GOT-W29",
"fork": false,
"created_at": "2026-08-10T09:01:08Z",
- "updated_at": "2026-08-31T02:44:32Z",
+ "updated_at": "2026-09-02T17:46:32Z",
"pushed_at": "2026-08-31T02:44:25Z",
- "stargazers_count": 3,
- "watchers_count": 3,
+ "stargazers_count": 4,
+ "watchers_count": 4,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -2388,7 +2388,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
- "watchers": 3,
+ "watchers": 4,
"score": 0,
"subscribers_count": 0
},
@@ -2913,10 +2913,10 @@
"description": "Using CVE-2026-43499 to root your Galaxy S24 Series(SM-S92X0 ,(China \/ Hong Kong SAR \/ Taiwan))",
"fork": false,
"created_at": "2026-08-16T14:37:06Z",
- "updated_at": "2026-09-01T07:06:35Z",
+ "updated_at": "2026-09-02T16:44:29Z",
"pushed_at": "2026-08-27T14:42:02Z",
- "stargazers_count": 31,
- "watchers_count": 31,
+ "stargazers_count": 32,
+ "watchers_count": 32,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -2927,7 +2927,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
- "watchers": 31,
+ "watchers": 32,
"score": 0,
"subscribers_count": 1
},
@@ -2979,10 +2979,10 @@
"description": "CVE-2026-43499 port for Samsung Galaxy A17",
"fork": false,
"created_at": "2026-08-17T21:18:27Z",
- "updated_at": "2026-09-01T20:59:33Z",
+ "updated_at": "2026-09-02T19:24:15Z",
"pushed_at": "2026-08-21T20:24:40Z",
- "stargazers_count": 10,
- "watchers_count": 10,
+ "stargazers_count": 11,
+ "watchers_count": 11,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -2993,7 +2993,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
- "watchers": 10,
+ "watchers": 11,
"score": 0,
"subscribers_count": 0
},
@@ -3705,10 +3705,10 @@
"description": null,
"fork": false,
"created_at": "2026-09-01T07:34:56Z",
- "updated_at": "2026-09-02T08:18:02Z",
+ "updated_at": "2026-09-02T14:46:42Z",
"pushed_at": "2026-09-01T16:41:33Z",
- "stargazers_count": 1,
- "watchers_count": 1,
+ "stargazers_count": 2,
+ "watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -3719,7 +3719,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
- "watchers": 1,
+ "watchers": 2,
"score": 0,
"subscribers_count": 0
},
diff --git a/2026/CVE-2026-43512.json b/2026/CVE-2026-43512.json
index 0fdd372ad5..1546d5c7f0 100644
--- a/2026/CVE-2026-43512.json
+++ b/2026/CVE-2026-43512.json
@@ -14,10 +14,10 @@
"description": "Exploitability PoC for CVE-2026-43512 (Apache Tomcat Digest Authentication Bypass)",
"fork": false,
"created_at": "2026-06-08T20:43:08Z",
- "updated_at": "2026-06-19T16:06:04Z",
+ "updated_at": "2026-09-02T15:33:28Z",
"pushed_at": "2026-06-19T16:06:00Z",
- "stargazers_count": 0,
- "watchers_count": 0,
+ "stargazers_count": 1,
+ "watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
- "watchers": 0,
+ "watchers": 1,
"score": 0,
"subscribers_count": 0
}
diff --git a/2026/CVE-2026-45585.json b/2026/CVE-2026-45585.json
index 8c80fbf337..875b27a115 100644
--- a/2026/CVE-2026-45585.json
+++ b/2026/CVE-2026-45585.json
@@ -212,8 +212,8 @@
"description": "Manage and recover BitLocker encrypted drives with this tool for Windows 11 recovery key management and educational study of CVE-2026-45585.",
"fork": false,
"created_at": "2026-06-16T07:21:36Z",
- "updated_at": "2026-08-31T02:25:34Z",
- "pushed_at": "2026-08-31T02:24:16Z",
+ "updated_at": "2026-09-02T13:57:19Z",
+ "pushed_at": "2026-09-02T13:51:04Z",
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
@@ -264,8 +264,8 @@
"description": "Manage BitLocker encrypted drives on Windows. Extract recovery keys, check encryption status, and apply security mitigations for CVE-2026-45585.",
"fork": false,
"created_at": "2026-07-25T02:47:26Z",
- "updated_at": "2026-08-31T02:28:25Z",
- "pushed_at": "2026-08-31T02:28:03Z",
+ "updated_at": "2026-09-02T14:00:36Z",
+ "pushed_at": "2026-09-02T13:55:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2026/CVE-2026-47301.json b/2026/CVE-2026-47301.json
index 365a8ebe40..5416ce9d64 100644
--- a/2026/CVE-2026-47301.json
+++ b/2026/CVE-2026-47301.json
@@ -14,10 +14,10 @@
"description": "Proof-of-concept exploit chain (CVE-2026-47301) for Microsoft Configuration Manager (SCCM), combining a broken access, CAB arbitrary-write path traversal, certificate verification bypass, and DLL hijacking to achieve SYSTEM-level code execution.",
"fork": false,
"created_at": "2026-08-03T15:29:22Z",
- "updated_at": "2026-09-02T03:23:49Z",
+ "updated_at": "2026-09-02T15:15:52Z",
"pushed_at": "2026-08-16T22:34:33Z",
- "stargazers_count": 99,
- "watchers_count": 99,
+ "stargazers_count": 100,
+ "watchers_count": 100,
"has_discussions": false,
"forks_count": 13,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 13,
- "watchers": 99,
+ "watchers": 100,
"score": 0,
"subscribers_count": 0
}
diff --git a/2026/CVE-2026-47884.json b/2026/CVE-2026-47884.json
new file mode 100644
index 0000000000..89c7247161
--- /dev/null
+++ b/2026/CVE-2026-47884.json
@@ -0,0 +1,56 @@
+[
+ {
+ "id": 1350625885,
+ "name": "spring-cvss-check",
+ "full_name": "xiaoqiMikko\/spring-cvss-check",
+ "owner": {
+ "login": "xiaoqiMikko",
+ "id": 37316664,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/37316664?v=4",
+ "html_url": "https:\/\/github.com\/xiaoqiMikko",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/xiaoqiMikko\/spring-cvss-check",
+ "description": "CVE-2026-47884 CVE-2026-47890 CVE-2026-47891 CVE-2026-47892 CVE-2026-59270 CVE-2026-59283 CVE-2026-59313 CVE-2026-65637 CVE-2026-65905:覆盖 15 条 Spring \/ Tomcat 官方安全公告,8 条被 NVD 报成 CRITICAL 9.x 而厂商官方评 LOW\/MEDIUM。工具告诉你中了哪几条、官方评多少分、是否真满足触发条件,以及官方叫你升的版本 Maven Central 上有没有。",
+ "fork": false,
+ "created_at": "2026-08-29T13:54:58Z",
+ "updated_at": "2026-09-02T16:15:29Z",
+ "pushed_at": "2026-09-02T04:51:19Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [
+ "cve",
+ "cve-2025-41249",
+ "cve-2026-41843",
+ "cve-2026-41844",
+ "cve-2026-41846",
+ "cve-2026-41848",
+ "cve-2026-41853",
+ "cvss",
+ "dependency-scanning",
+ "java",
+ "maven",
+ "nvd",
+ "sca",
+ "security",
+ "spring",
+ "spring-boot",
+ "spring-framework",
+ "spring-security",
+ "tomcat",
+ "vulnerability"
+ ],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2026/CVE-2026-5027.json b/2026/CVE-2026-5027.json
index b52f79c877..9af5a430b6 100644
--- a/2026/CVE-2026-5027.json
+++ b/2026/CVE-2026-5027.json
@@ -212,8 +212,8 @@
"description": null,
"fork": false,
"created_at": "2026-09-02T13:29:25Z",
- "updated_at": "2026-09-02T13:38:11Z",
- "pushed_at": "2026-09-02T13:29:27Z",
+ "updated_at": "2026-09-02T14:24:55Z",
+ "pushed_at": "2026-09-02T14:20:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2026/CVE-2026-57827.json b/2026/CVE-2026-57827.json
index b7747d212c..8e5730fd02 100644
--- a/2026/CVE-2026-57827.json
+++ b/2026/CVE-2026-57827.json
@@ -61,8 +61,8 @@
"description": "Demonstrate the unauthenticated remote code execution vulnerability in the RSFiles! Joomla component through an arbitrary file upload.",
"fork": false,
"created_at": "2026-07-30T20:49:05Z",
- "updated_at": "2026-08-31T02:29:04Z",
- "pushed_at": "2026-08-31T02:28:41Z",
+ "updated_at": "2026-09-02T13:59:12Z",
+ "pushed_at": "2026-09-02T13:56:01Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2026/CVE-2026-62735.json b/2026/CVE-2026-62735.json
index ffb04eb0f5..93020e6d22 100644
--- a/2026/CVE-2026-62735.json
+++ b/2026/CVE-2026-62735.json
@@ -14,10 +14,10 @@
"description": "CVE 1-day in http.sys",
"fork": false,
"created_at": "2026-08-25T04:55:10Z",
- "updated_at": "2026-09-02T12:04:59Z",
+ "updated_at": "2026-09-02T14:43:05Z",
"pushed_at": "2026-08-31T16:15:21Z",
- "stargazers_count": 10,
- "watchers_count": 10,
+ "stargazers_count": 11,
+ "watchers_count": 11,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
- "watchers": 10,
+ "watchers": 11,
"score": 0,
"subscribers_count": 0
}
diff --git a/2026/CVE-2026-63030.json b/2026/CVE-2026-63030.json
index 5656beb0d7..0c04531f9b 100644
--- a/2026/CVE-2026-63030.json
+++ b/2026/CVE-2026-63030.json
@@ -513,10 +513,10 @@
"description": "CVE-2026-63030 + CVE-2026-60137 - “wp2shell”: unauthenticated RCE in WordPress core",
"fork": false,
"created_at": "2026-07-18T14:27:41Z",
- "updated_at": "2026-09-01T14:00:06Z",
+ "updated_at": "2026-09-02T14:50:34Z",
"pushed_at": "2026-07-18T19:05:43Z",
- "stargazers_count": 105,
- "watchers_count": 105,
+ "stargazers_count": 106,
+ "watchers_count": 106,
"has_discussions": false,
"forks_count": 30,
"allow_forking": true,
@@ -527,7 +527,7 @@
"topics": [],
"visibility": "public",
"forks": 30,
- "watchers": 105,
+ "watchers": 106,
"score": 0,
"subscribers_count": 0
},
@@ -2345,10 +2345,10 @@
"description": "CVE-2026-63030 & CVE-2026-60137 RCE chain proof-of-concept",
"fork": false,
"created_at": "2026-08-05T12:48:03Z",
- "updated_at": "2026-09-02T02:49:56Z",
+ "updated_at": "2026-09-02T14:29:52Z",
"pushed_at": "2026-08-20T10:15:52Z",
- "stargazers_count": 915,
- "watchers_count": 915,
+ "stargazers_count": 916,
+ "watchers_count": 916,
"has_discussions": false,
"forks_count": 215,
"allow_forking": true,
@@ -2366,7 +2366,7 @@
],
"visibility": "public",
"forks": 215,
- "watchers": 915,
+ "watchers": 916,
"score": 0,
"subscribers_count": 5
},
diff --git a/2026/CVE-2026-64564.json b/2026/CVE-2026-64564.json
index 84bdb3314f..9d491d88d6 100644
--- a/2026/CVE-2026-64564.json
+++ b/2026/CVE-2026-64564.json
@@ -80,8 +80,8 @@
"description": "Tracking SCTPhantom (CVE-2026-64564), the Linux kernel SCTP ASCONF transport use-after-free",
"fork": false,
"created_at": "2026-08-10T05:16:43Z",
- "updated_at": "2026-09-01T05:45:46Z",
- "pushed_at": "2026-09-01T05:41:28Z",
+ "updated_at": "2026-09-02T16:13:13Z",
+ "pushed_at": "2026-09-02T16:05:51Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2026/CVE-2026-68138.json b/2026/CVE-2026-68138.json
index 829515c085..2c6b8243cf 100644
--- a/2026/CVE-2026-68138.json
+++ b/2026/CVE-2026-68138.json
@@ -47,8 +47,8 @@
"description": "Tracking CVE-2026-68138, the Linux kernel net\/sched qdisc rate-table use-after-free",
"fork": false,
"created_at": "2026-08-17T07:33:31Z",
- "updated_at": "2026-09-02T05:38:00Z",
- "pushed_at": "2026-09-02T05:37:25Z",
+ "updated_at": "2026-09-02T16:13:55Z",
+ "pushed_at": "2026-09-02T16:06:52Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
diff --git a/2026/CVE-2026-72898.json b/2026/CVE-2026-72898.json
index 895d966ba2..c15ba1d82f 100644
--- a/2026/CVE-2026-72898.json
+++ b/2026/CVE-2026-72898.json
@@ -263,10 +263,10 @@
"description": "Metabase SQLi",
"fork": false,
"created_at": "2026-08-27T06:51:58Z",
- "updated_at": "2026-09-01T22:36:05Z",
+ "updated_at": "2026-09-02T13:57:31Z",
"pushed_at": "2026-08-27T08:46:32Z",
- "stargazers_count": 18,
- "watchers_count": 18,
+ "stargazers_count": 19,
+ "watchers_count": 19,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -277,7 +277,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
- "watchers": 18,
+ "watchers": 19,
"score": 0,
"subscribers_count": 0
}
diff --git a/2026/CVE-2026-73296.json b/2026/CVE-2026-73296.json
new file mode 100644
index 0000000000..06b96f6448
--- /dev/null
+++ b/2026/CVE-2026-73296.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1355027531,
+ "name": "CVE-2026-73296",
+ "full_name": "0xBlackash\/CVE-2026-73296",
+ "owner": {
+ "login": "0xBlackash",
+ "id": 259905299,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/259905299?v=4",
+ "html_url": "https:\/\/github.com\/0xBlackash",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/0xBlackash\/CVE-2026-73296",
+ "description": "CVE-2026-73296",
+ "fork": false,
+ "created_at": "2026-09-02T17:10:17Z",
+ "updated_at": "2026-09-02T17:39:52Z",
+ "pushed_at": "2026-09-02T17:31:28Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2026/CVE-2026-73570.json b/2026/CVE-2026-73570.json
index 09a60b5b4f..dc8dbccad5 100644
--- a/2026/CVE-2026-73570.json
+++ b/2026/CVE-2026-73570.json
@@ -176,5 +176,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
+ },
+ {
+ "id": 1355050031,
+ "name": "CVE-2026-73570",
+ "full_name": "byt3l0rd\/CVE-2026-73570",
+ "owner": {
+ "login": "byt3l0rd",
+ "id": 323224005,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/323224005?v=4",
+ "html_url": "https:\/\/github.com\/byt3l0rd",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/byt3l0rd\/CVE-2026-73570",
+ "description": null,
+ "fork": false,
+ "created_at": "2026-09-02T17:33:44Z",
+ "updated_at": "2026-09-02T17:40:51Z",
+ "pushed_at": "2026-09-02T17:40:20Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
}
]
\ No newline at end of file
diff --git a/2026/CVE-2026-75616.json b/2026/CVE-2026-75616.json
index 4e4b0c84e8..463d0067b7 100644
--- a/2026/CVE-2026-75616.json
+++ b/2026/CVE-2026-75616.json
@@ -14,10 +14,10 @@
"description": "PoC for CVE-2026-75616, an authenticated OS command injection in TP-Link Archer C20 v6 firmware",
"fork": false,
"created_at": "2026-08-22T20:53:05Z",
- "updated_at": "2026-08-22T22:17:35Z",
+ "updated_at": "2026-09-02T16:13:54Z",
"pushed_at": "2026-08-22T22:16:40Z",
- "stargazers_count": 0,
- "watchers_count": 0,
+ "stargazers_count": 1,
+ "watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
- "watchers": 0,
+ "watchers": 1,
"score": 0,
"subscribers_count": 0
}
diff --git a/2026/CVE-2026-82329.json b/2026/CVE-2026-82329.json
index 56c0c7bc4d..dbdc338e51 100644
--- a/2026/CVE-2026-82329.json
+++ b/2026/CVE-2026-82329.json
@@ -47,10 +47,10 @@
"description": "CVE-2026-82329 JFrog Artifactory unauthenticated auth-bypass: reproducible Docker lab + URL-parameter validator PoC + patch-diff analysis",
"fork": false,
"created_at": "2026-09-01T14:17:14Z",
- "updated_at": "2026-09-02T12:03:59Z",
+ "updated_at": "2026-09-02T14:20:32Z",
"pushed_at": "2026-09-01T14:17:19Z",
- "stargazers_count": 5,
- "watchers_count": 5,
+ "stargazers_count": 6,
+ "watchers_count": 6,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
- "watchers": 5,
+ "watchers": 6,
"score": 0,
"subscribers_count": 0
}
diff --git a/2026/CVE-2026-9055.json b/2026/CVE-2026-9055.json
new file mode 100644
index 0000000000..2cf4d9cb48
--- /dev/null
+++ b/2026/CVE-2026-9055.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1355090513,
+ "name": "CVE-2026-9055",
+ "full_name": "EXEcution-py\/CVE-2026-9055",
+ "owner": {
+ "login": "EXEcution-py",
+ "id": 277331196,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/277331196?v=4",
+ "html_url": "https:\/\/github.com\/EXEcution-py",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/EXEcution-py\/CVE-2026-9055",
+ "description": null,
+ "fork": false,
+ "created_at": "2026-09-02T18:17:51Z",
+ "updated_at": "2026-09-02T18:57:48Z",
+ "pushed_at": "2026-09-02T18:56:36Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2026/CVE-2026-9198.json b/2026/CVE-2026-9198.json
index b7b5932fb3..8745389c19 100644
--- a/2026/CVE-2026-9198.json
+++ b/2026/CVE-2026-9198.json
@@ -113,8 +113,8 @@
"description": null,
"fork": false,
"created_at": "2026-08-05T17:44:08Z",
- "updated_at": "2026-08-06T01:07:09Z",
- "pushed_at": "2026-08-06T01:07:04Z",
+ "updated_at": "2026-09-02T16:17:35Z",
+ "pushed_at": "2026-09-02T16:14:14Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
diff --git a/2026/CVE-2026-9335.json b/2026/CVE-2026-9335.json
new file mode 100644
index 0000000000..49847fbdf4
--- /dev/null
+++ b/2026/CVE-2026-9335.json
@@ -0,0 +1,35 @@
+[
+ {
+ "id": 1355159811,
+ "name": "CVE-2026-9335-keras-hdf5-externallink",
+ "full_name": "paparojonathan\/CVE-2026-9335-keras-hdf5-externallink",
+ "owner": {
+ "login": "paparojonathan",
+ "id": 324189341,
+ "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/324189341?v=4",
+ "html_url": "https:\/\/github.com\/paparojonathan",
+ "user_view_type": "public"
+ },
+ "html_url": "https:\/\/github.com\/paparojonathan\/CVE-2026-9335-keras-hdf5-externallink",
+ "description": "CVE-2026-9335: KerasFileEditor and load_weights follow h5py ExternalLinks, disclosing arbitrary local HDF5 file contents in keras ≤ 3.14.0. Advisory + verified PoCs.",
+ "fork": false,
+ "created_at": "2026-09-02T19:35:10Z",
+ "updated_at": "2026-09-02T19:35:20Z",
+ "pushed_at": "2026-09-02T19:35:12Z",
+ "stargazers_count": 0,
+ "watchers_count": 0,
+ "has_discussions": false,
+ "forks_count": 0,
+ "allow_forking": true,
+ "is_template": false,
+ "web_commit_signoff_required": false,
+ "has_pull_requests": true,
+ "pull_request_creation_policy": "all",
+ "topics": [],
+ "visibility": "public",
+ "forks": 0,
+ "watchers": 0,
+ "score": 0,
+ "subscribers_count": 0
+ }
+]
\ No newline at end of file
diff --git a/2026/CVE-2026-9830.json b/2026/CVE-2026-9830.json
index 4a1b3b255b..83e58bb341 100644
--- a/2026/CVE-2026-9830.json
+++ b/2026/CVE-2026-9830.json
@@ -47,10 +47,10 @@
"description": "CVE-2026-9830 Proof of Concept",
"fork": false,
"created_at": "2026-08-15T20:57:13Z",
- "updated_at": "2026-09-02T13:06:42Z",
+ "updated_at": "2026-09-02T18:39:26Z",
"pushed_at": "2026-08-20T21:56:15Z",
- "stargazers_count": 439,
- "watchers_count": 439,
+ "stargazers_count": 448,
+ "watchers_count": 448,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -72,7 +72,7 @@
],
"visibility": "public",
"forks": 4,
- "watchers": 439,
+ "watchers": 448,
"score": 0,
"subscribers_count": 0
}
diff --git a/README.md b/README.md
index 1596d22da1..c1c26dae3a 100644
--- a/README.md
+++ b/README.md
@@ -247,11 +247,7 @@
- [NetVanguard-cmd/CVE-2026-0745](https://github.com/NetVanguard-cmd/CVE-2026-0745)
- [HORKimhab/CVE-2026-0745](https://github.com/HORKimhab/CVE-2026-0745)
-### CVE-2026-0766 (2026-01-23)
-
-Open WebUI load_tool_module_by_id Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Open WebUI. Authentication is required to exploit this vulnerability.\n\nThe specific flaw exists within the load_tool_module_by_id function. The issue results from the lack of proper validation of a user-supplied string before using it to execute Python code. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-28257.
-
-
+### CVE-2026-0766
- [bitt0n/CVE-2026-0766](https://github.com/bitt0n/CVE-2026-0766)
### CVE-2026-0768 (2026-01-23)
@@ -367,6 +363,7 @@
- [John-doe-code-a11/CVE-2026-0920](https://github.com/John-doe-code-a11/CVE-2026-0920)
- [Nxploited/CVE-2026-0920-](https://github.com/Nxploited/CVE-2026-0920-)
- [Dx3iZ/CVE-2026-0920](https://github.com/Dx3iZ/CVE-2026-0920)
+- [katranSefa/CVE-2026-0920](https://github.com/katranSefa/CVE-2026-0920)
### CVE-2026-0926 (2026-02-19)
@@ -2495,6 +2492,13 @@
- [xxconi/CVE-2026-9018](https://github.com/xxconi/CVE-2026-9018)
+### CVE-2026-9055 (2026-09-02)
+
+The Booking for Appointments and Events Calendar – Amelia (Premium) plugin for WordPress is vulnerable to Privilege Escalation in versions 8.0 - 9.6.2. This is due to insufficient validation of the attacker-controlled 'type' parameter in the customer update endpoint, which allows customers to set their role to 'manager' and trigger creation of a WordPress user with the wpamelia-manager role when the 'externalId' parameter is set to 0. This makes it possible for unauthenticated attackers to escalate their privileges to administrator by first elevating to the manager role, then creating a provider entity linked to an administrator user ID and overwriting that administrator's password.
+
+
+- [EXEcution-py/CVE-2026-9055](https://github.com/EXEcution-py/CVE-2026-9055)
+
### CVE-2026-9067 (2026-06-10)
The Schema & Structured Data for WP & AMP WordPress plugin before 1.60 does not check user capabilities on its frontend AJAX file-upload handlers and does not validate the actual content of uploaded files against the endpoint's intended media type, allowing unauthenticated users to upload any file type accepted by WordPress's media library through endpoints that should only accept images or videos.
@@ -2595,6 +2599,13 @@
- [shinthink/CVE-2026-9290](https://github.com/shinthink/CVE-2026-9290)
+### CVE-2026-9335 (2026-08-02)
+
+A vulnerability in keras-team/keras versions <= 3.14.0 allows arbitrary local HDF5 file content disclosure due to improper handling of HDF5 ExternalLinks. The `KerasFileEditor` and `keras.saving.load_weights` functions bypass the `safe_get_h5_group` and `safe_get_h5_dataset` helpers, which are designed to reject ExternalLinks and SoftLinks. This results in automatic dereferencing of links to external HDF5 files, enabling attackers to disclose sensitive data from the victim's local filesystem. Specifically, `KerasFileEditor` extracts attributes and datasets from linked files into its internal structures, while `keras.saving.load_weights` loads weights from linked files into the user's model. This issue can be exploited by providing a malicious `.h5`, `.weights.h5`, or `.keras` file containing ExternalLinks.
+
+
+- [paparojonathan/CVE-2026-9335-keras-hdf5-externallink](https://github.com/paparojonathan/CVE-2026-9335-keras-hdf5-externallink)
+
### CVE-2026-9490 (2026-05-25)
A security vulnerability has been identified in Acer Care Center where the ACCSvc service creates a Named Pipe with a weak Security Descriptor. This vulnerability allows an authenticated local user to connect and send a specially crafted message (message type 0x03) to the pipe, causing the service to crash with exit code 1067 (ERROR_PROCESS_ABORTED). To mitigate this potential local service disruption, Acer requires users to update the software to the latest version.
@@ -3868,6 +3879,13 @@
- [punitdarji/Gitlab-CVE-2026-19478](https://github.com/punitdarji/Gitlab-CVE-2026-19478)
- [EQSTLab/CVE-2026-19478](https://github.com/EQSTLab/CVE-2026-19478)
+### CVE-2026-19490 (2026-08-19)
+
+Vulnerability in NetScaler ADC and NetScaler Gateway.\n\nThis issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21.
+
+
+- [TarPeg007/CVE-2026-19490](https://github.com/TarPeg007/CVE-2026-19490)
+
### CVE-2026-19500 (2026-08-18)
The Entries component in Brainstorm Force SureForms version, less than 2.12.3, does not enforce adequate limits on user-controlled form fields or submitted content during processing and rendering, which allows a remote attacker to exhaust server resources, prevent administrators from accessing the Entries interface, and trigger HTTP 500 errors via crafted form submissions.
@@ -5578,6 +5596,13 @@
- [0xNDI/CVE-2026-24294](https://github.com/0xNDI/CVE-2026-24294)
+### CVE-2026-24301 (2026-08-18)
+
+Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.
+
+
+- [CSOAI-ORG/memory-poisoning-axis](https://github.com/CSOAI-ORG/memory-poisoning-axis)
+
### CVE-2026-24306 (2026-01-22)
Improper access control in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network.
@@ -11451,6 +11476,13 @@
- [daehyuh/CVE-2026-47883](https://github.com/daehyuh/CVE-2026-47883)
+### CVE-2026-47884 (2026-08-27)
+
+Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an "/**" mapping that results in view rendering, and where the view name is not explicitly specified.\nSpring Framework 7.0.0 - 7.0.8\nSpring Framework 6.2.0 - 6.2.19\nSpring Framework 6.1.0 - 6.1.28\nSpring Framework 6.0.0 - 6.0.30\nSpring Framework 5.3.0 - 5.3.49\nSpring Framework 5.2.25.RELEASE and earlier
+
+
+- [xiaoqiMikko/spring-cvss-check](https://github.com/xiaoqiMikko/spring-cvss-check)
+
### CVE-2026-48017 (2026-06-15)
DbGate is cross-platform database manager. In versions 7.1.8 and prior, the POST /runners/load-reader endpoint in DbGate accepts a functionName parameter that is directly interpolated into a JavaScript code template without any sanitization or validation. An authenticated user (with basic access, no special permissions required) can inject arbitrary JavaScript code that executes on the server with full process privileges, bypassing the require=null sandbox restriction. An authenticated user with basic access (no admin role, no run-shell-script permission required) can: execute arbitrary OS commands on the DbGate server with the privileges of the Node.js process, read/write any file accessible to the process, pivot to connected databases by reading connection credentials from DbGate's storage, and compromise the host system - in Docker deployments, this typically means root access within the container. Version 7.1.9 contains a patch.
@@ -12264,7 +12296,11 @@
### CVE-2026-52824
- [AzureADTrent/CVE-2026-52824](https://github.com/AzureADTrent/CVE-2026-52824)
-### CVE-2026-52832
+### CVE-2026-52832 (2026-09-02)
+
+Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.5, Nuclio Dashboard exposes POST /api/functions without authentication by default (NOP auth mode). The spec.handler field (e.g., mymodule:myfunction) is parsed by functionconfig.ParseHandler() which splits on : only — no path validation is applied to the module portion. This issue has been patched in version 1.16.5.
+
+
- [mdvpat/CVE-2026-52832-PoC-exploit-nuclio-dashboard](https://github.com/mdvpat/CVE-2026-52832-PoC-exploit-nuclio-dashboard)
### CVE-2026-52885 (2026-06-26)
@@ -14241,6 +14277,13 @@
- [CamilleGR/CVE-2026-73292](https://github.com/CamilleGR/CVE-2026-73292)
+### CVE-2026-73296 (2026-08-12)
+
+Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, create_mobile_data_collection_server and create_mobile_action_server in ufo/client/mcp/http_servers/mobile_mcp_server.py exposed Streamable HTTP MCP services on TCP ports 8020 and 8021 without authentication, allowing an unauthenticated remote attacker to invoke capture_screenshot, get_ui_tree, tap, swipe, type_text, launch_app, press_key, and click_control against an ADB-connected Android device, disclose screen and device data, and modify device state. This issue is fixed in version 3.0.8.
+
+
+- [0xBlackash/CVE-2026-73296](https://github.com/0xBlackash/CVE-2026-73296)
+
### CVE-2026-73519 (2026-08-12)
WolfStack before 25.9.2 contains a hard-coded cluster-authentication secret compiled into every build and published as a constant in src/auth/mod.rs, allowing remote unauthenticated attackers to bypass authentication by supplying this value in the X-WolfStack-Secret header to the require_auth() gate without any session, API key, or user account. Attackers can reach an affected node's management port to enumerate all Docker and LXC containers on the host and execute arbitrary commands as root inside any container via the POST /api/containers/{runtime}/{id}/exec endpoint.
@@ -14258,6 +14301,7 @@
- [jishino567/CVE-2026-73570](https://github.com/jishino567/CVE-2026-73570)
- [gabrielunknown/CVE-2026-73570](https://github.com/gabrielunknown/CVE-2026-73570)
- [INFOKOM-KI/Zimbra-CVE-2026-73570-Rules](https://github.com/INFOKOM-KI/Zimbra-CVE-2026-73570-Rules)
+- [byt3l0rd/CVE-2026-73570](https://github.com/byt3l0rd/CVE-2026-73570)
### CVE-2026-73633 (2026-08-14)
@@ -19788,6 +19832,7 @@
- [jsecx88/CVE-2025-29009-POC](https://github.com/jsecx88/CVE-2025-29009-POC)
- [Nxploited/CVE-2025-29009](https://github.com/Nxploited/CVE-2025-29009)
+- [katranSefa/CVE-2025-29009](https://github.com/katranSefa/CVE-2025-29009)
### CVE-2025-29015 (2025-04-17)
@@ -24184,6 +24229,7 @@
- [h3n1s3/React2shell-Research](https://github.com/h3n1s3/React2shell-Research)
- [Mr-Destroyer/CVE-2025-55182](https://github.com/Mr-Destroyer/CVE-2025-55182)
- [UwUGreed/CVE-2025-55182-poc](https://github.com/UwUGreed/CVE-2025-55182-poc)
+- [ChrisBarack/cve-2025-55182](https://github.com/ChrisBarack/cve-2025-55182)
### CVE-2025-55183 (2025-12-11)
@@ -24334,6 +24380,7 @@
- [masahiro331/CVE-2025-55752](https://github.com/masahiro331/CVE-2025-55752)
- [AuroraSec-Pivot/CVE-2025-55752](https://github.com/AuroraSec-Pivot/CVE-2025-55752)
- [Jimmy01240397/CVE-2025-55752](https://github.com/Jimmy01240397/CVE-2025-55752)
+- [xiaoqiMikko/tomcat85-check](https://github.com/xiaoqiMikko/tomcat85-check)
### CVE-2025-55763 (2025-08-29)
@@ -84401,6 +84448,7 @@
- [rsakthikumar-cmd/metasploitable2-vsftpd-writeup](https://github.com/rsakthikumar-cmd/metasploitable2-vsftpd-writeup)
- [Gvln-S/CVE-2011-2523](https://github.com/Gvln-S/CVE-2011-2523)
- [aboubacar70/LAB1-metasploitable](https://github.com/aboubacar70/LAB1-metasploitable)
+- [JUN41DS2709/vsFTPd-2.3.4-Exploit](https://github.com/JUN41DS2709/vsFTPd-2.3.4-Exploit)
### CVE-2011-2553
- [carlosrpastrana/cve-2011-2553](https://github.com/carlosrpastrana/cve-2011-2553)