diff --git a/2015/CVE-2015-1635.json b/2015/CVE-2015-1635.json index 82aade3d8f..68fb8336b8 100644 --- a/2015/CVE-2015-1635.json +++ b/2015/CVE-2015-1635.json @@ -217,7 +217,7 @@ "stargazers_count": 9, "watchers_count": 9, "has_discussions": false, - "forks_count": 5, + "forks_count": 4, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -225,7 +225,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 5, + "forks": 4, "watchers": 9, "score": 0, "subscribers_count": 1 diff --git a/2018/CVE-2018-17240.json b/2018/CVE-2018-17240.json index 87be39ad36..8a2b13607c 100644 --- a/2018/CVE-2018-17240.json +++ b/2018/CVE-2018-17240.json @@ -48,7 +48,7 @@ "fork": false, "created_at": "2024-01-04T21:44:21Z", "updated_at": "2026-10-16T03:50:59Z", - "pushed_at": "2026-10-16T03:50:58Z", + "pushed_at": "2026-11-02T09:04:37Z", "stargazers_count": 7, "watchers_count": 7, "has_discussions": false, diff --git a/2018/CVE-2018-20250.json b/2018/CVE-2018-20250.json index 72b1288a09..00a5b1c38b 100644 --- a/2018/CVE-2018-20250.json +++ b/2018/CVE-2018-20250.json @@ -14,10 +14,10 @@ "description": "exp for https:\/\/research.checkpoint.com\/extracting-code-execution-from-winrar", "fork": false, "created_at": "2019-02-22T04:52:08Z", - "updated_at": "2026-08-11T09:12:24Z", + "updated_at": "2026-11-02T11:17:04Z", "pushed_at": "2019-08-05T10:45:34Z", - "stargazers_count": 493, - "watchers_count": 493, + "stargazers_count": 494, + "watchers_count": 494, "has_discussions": false, "forks_count": 168, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 168, - "watchers": 493, + "watchers": 494, "score": 0, "subscribers_count": 10 }, diff --git a/2019/CVE-2019-0708.json b/2019/CVE-2019-0708.json index fb4d9f61fd..dc514a1d7e 100644 --- a/2019/CVE-2019-0708.json +++ b/2019/CVE-2019-0708.json @@ -1616,10 +1616,10 @@ "description": "A quick scanner for the CVE-2019-0708 \"BlueKeep\" vulnerability.", "fork": false, "created_at": "2019-05-23T22:50:12Z", - "updated_at": "2026-10-29T00:05:47Z", + "updated_at": "2026-11-02T11:17:21Z", "pushed_at": "2019-06-22T21:48:45Z", - "stargazers_count": 922, - "watchers_count": 922, + "stargazers_count": 923, + "watchers_count": 923, "has_discussions": false, "forks_count": 236, "allow_forking": true, @@ -1630,7 +1630,7 @@ "topics": [], "visibility": "public", "forks": 236, - "watchers": 922, + "watchers": 923, "score": 0, "subscribers_count": 53 }, diff --git a/2019/CVE-2019-0841.json b/2019/CVE-2019-0841.json index aa2ea427f6..aa1150931d 100644 --- a/2019/CVE-2019-0841.json +++ b/2019/CVE-2019-0841.json @@ -14,10 +14,10 @@ "description": "PoC code for CVE-2019-0841 Privilege Escalation vulnerability", "fork": false, "created_at": "2019-04-05T12:53:52Z", - "updated_at": "2026-09-07T13:41:03Z", + "updated_at": "2026-11-02T12:29:19Z", "pushed_at": "2019-04-09T16:49:19Z", - "stargazers_count": 240, - "watchers_count": 240, + "stargazers_count": 239, + "watchers_count": 239, "has_discussions": false, "forks_count": 95, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 95, - "watchers": 240, + "watchers": 239, "score": 0, "subscribers_count": 3 }, diff --git a/2019/CVE-2019-1003000.json b/2019/CVE-2019-1003000.json index eeff4060ac..895a0cea06 100644 --- a/2019/CVE-2019-1003000.json +++ b/2019/CVE-2019-1003000.json @@ -47,10 +47,10 @@ "description": "Jenkins RCE Proof-of-Concept: SECURITY-1266 \/ CVE-2019-1003000 (Script Security), CVE-2019-1003001 (Pipeline: Groovy), CVE-2019-1003002 (Pipeline: Declarative)", "fork": false, "created_at": "2019-02-15T05:59:24Z", - "updated_at": "2026-07-29T10:32:54Z", + "updated_at": "2026-11-02T12:29:17Z", "pushed_at": "2019-04-01T13:19:49Z", - "stargazers_count": 316, - "watchers_count": 316, + "stargazers_count": 315, + "watchers_count": 315, "has_discussions": false, "forks_count": 84, "allow_forking": true, @@ -72,7 +72,7 @@ ], "visibility": "public", "forks": 84, - "watchers": 316, + "watchers": 315, "score": 0, "subscribers_count": 3 }, diff --git a/2019/CVE-2019-17558.json b/2019/CVE-2019-17558.json index 11dee6095e..fcc7ecb26c 100644 --- a/2019/CVE-2019-17558.json +++ b/2019/CVE-2019-17558.json @@ -52,7 +52,7 @@ "stargazers_count": 4294, "watchers_count": 4294, "has_discussions": false, - "forks_count": 1078, + "forks_count": 1077, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -80,7 +80,7 @@ "webshell" ], "visibility": "public", - "forks": 1078, + "forks": 1077, "watchers": 4294, "score": 0, "subscribers_count": 148 diff --git a/2019/CVE-2019-5786.json b/2019/CVE-2019-5786.json index 96852b0d91..e1dade149d 100644 --- a/2019/CVE-2019-5786.json +++ b/2019/CVE-2019-5786.json @@ -14,10 +14,10 @@ "description": "FileReader Exploit", "fork": false, "created_at": "2019-03-20T18:43:49Z", - "updated_at": "2026-08-29T12:30:21Z", + "updated_at": "2026-11-02T12:29:18Z", "pushed_at": "2019-03-20T18:47:25Z", - "stargazers_count": 255, - "watchers_count": 255, + "stargazers_count": 254, + "watchers_count": 254, "has_discussions": false, "forks_count": 75, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 75, - "watchers": 255, + "watchers": 254, "score": 0, "subscribers_count": 12 } diff --git a/2019/CVE-2019-7304.json b/2019/CVE-2019-7304.json index 3bec2fe9de..b9c79108c3 100644 --- a/2019/CVE-2019-7304.json +++ b/2019/CVE-2019-7304.json @@ -14,10 +14,10 @@ "description": "Linux privilege escalation exploit via snapd (CVE-2019-7304)", "fork": false, "created_at": "2019-02-12T06:02:06Z", - "updated_at": "2026-09-15T15:40:42Z", + "updated_at": "2026-11-02T12:29:16Z", "pushed_at": "2019-05-09T21:34:26Z", - "stargazers_count": 681, - "watchers_count": 681, + "stargazers_count": 680, + "watchers_count": 680, "has_discussions": false, "forks_count": 144, "allow_forking": true, @@ -32,7 +32,7 @@ ], "visibility": "public", "forks": 144, - "watchers": 681, + "watchers": 680, "score": 0, "subscribers_count": 16 }, diff --git a/2020/CVE-2020-13927.json b/2020/CVE-2020-13927.json index 8f769a3770..aa5213df9d 100644 --- a/2020/CVE-2020-13927.json +++ b/2020/CVE-2020-13927.json @@ -15,7 +15,7 @@ "fork": false, "created_at": "2026-07-07T23:03:12Z", "updated_at": "2026-10-21T17:13:18Z", - "pushed_at": "2026-11-01T10:39:26Z", + "pushed_at": "2026-11-02T11:26:11Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2020/CVE-2020-14882.json b/2020/CVE-2020-14882.json index 52b2ace698..13b1c1748a 100644 --- a/2020/CVE-2020-14882.json +++ b/2020/CVE-2020-14882.json @@ -19,7 +19,7 @@ "stargazers_count": 4294, "watchers_count": 4294, "has_discussions": false, - "forks_count": 1078, + "forks_count": 1077, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -47,7 +47,7 @@ "webshell" ], "visibility": "public", - "forks": 1078, + "forks": 1077, "watchers": 4294, "score": 0, "subscribers_count": 148 diff --git a/2020/CVE-2020-9802.json b/2020/CVE-2020-9802.json index 05852b990b..13f456e3aa 100644 --- a/2020/CVE-2020-9802.json +++ b/2020/CVE-2020-9802.json @@ -47,10 +47,10 @@ "description": "iOS browser exploit for CVE-2020-9802, an old JIT bug.", "fork": false, "created_at": "2025-11-12T20:25:43Z", - "updated_at": "2026-10-15T04:39:17Z", + "updated_at": "2026-11-02T08:34:21Z", "pushed_at": "2025-11-12T20:31:30Z", - "stargazers_count": 12, - "watchers_count": 12, + "stargazers_count": 13, + "watchers_count": 13, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 12, + "watchers": 13, "score": 0, "subscribers_count": 0 } diff --git a/2021/CVE-2021-30955.json b/2021/CVE-2021-30955.json index 0173a8a325..b2646df37c 100644 --- a/2021/CVE-2021-30955.json +++ b/2021/CVE-2021-30955.json @@ -113,10 +113,10 @@ "description": "iOS 15.1 kernel exploit POC for CVE-2021-30955", "fork": false, "created_at": "2022-03-01T12:41:03Z", - "updated_at": "2026-10-29T04:42:43Z", + "updated_at": "2026-11-02T09:29:55Z", "pushed_at": "2022-03-01T16:11:31Z", - "stargazers_count": 270, - "watchers_count": 270, + "stargazers_count": 271, + "watchers_count": 271, "has_discussions": false, "forks_count": 42, "allow_forking": true, @@ -127,7 +127,7 @@ "topics": [], "visibility": "public", "forks": 42, - "watchers": 270, + "watchers": 271, "score": 0, "subscribers_count": 6 }, diff --git a/2021/CVE-2021-3129.json b/2021/CVE-2021-3129.json index 1d28eb2fa9..5ff6e88d77 100644 --- a/2021/CVE-2021-3129.json +++ b/2021/CVE-2021-3129.json @@ -381,10 +381,10 @@ "description": "Laravel RCE Exploit PoC - CVE-2021-3129 (user-friendly with automatic log path detection)", "fork": false, "created_at": "2022-04-16T17:22:55Z", - "updated_at": "2026-10-17T17:06:34Z", + "updated_at": "2026-11-02T07:44:01Z", "pushed_at": "2026-05-21T06:40:47Z", - "stargazers_count": 157, - "watchers_count": 157, + "stargazers_count": 158, + "watchers_count": 158, "has_discussions": false, "forks_count": 27, "allow_forking": true, @@ -409,7 +409,7 @@ ], "visibility": "public", "forks": 27, - "watchers": 157, + "watchers": 158, "score": 0, "subscribers_count": 1 }, diff --git a/2021/CVE-2021-3156.json b/2021/CVE-2021-3156.json index a28a7702c4..f9ca5af0cd 100644 --- a/2021/CVE-2021-3156.json +++ b/2021/CVE-2021-3156.json @@ -2999,5 +2999,38 @@ "watchers": 1, "score": 0, "subscribers_count": 0 + }, + { + "id": 1442889135, + "name": "DFIR-CVE-2021-3156-Incident-Response", + "full_name": "AmroYasserH\/DFIR-CVE-2021-3156-Incident-Response", + "owner": { + "login": "AmroYasserH", + "id": 326112461, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/326112461?v=4", + "html_url": "https:\/\/github.com\/AmroYasserH", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/AmroYasserH\/DFIR-CVE-2021-3156-Incident-Response", + "description": "DFIR investigation of SSH brute force attack and privilege escalation via CVE-2021-3156.", + "fork": false, + "created_at": "2026-11-02T11:38:49Z", + "updated_at": "2026-11-02T13:00:14Z", + "pushed_at": "2026-11-02T13:00:10Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2021/CVE-2021-36260.json b/2021/CVE-2021-36260.json index 4f2b4dc96e..e15432a1fe 100644 --- a/2021/CVE-2021-36260.json +++ b/2021/CVE-2021-36260.json @@ -248,7 +248,7 @@ "description": "HikvisionExploiter is a Python-based utility designed to automate exploitation and directory accessibility checks on Hikvision network cameras exploiting the Web interface Version 3.1.3.150324 + CVE-2021-36260 Detection", "fork": false, "created_at": "2024-07-05T16:58:14Z", - "updated_at": "2026-11-02T03:04:44Z", + "updated_at": "2026-11-02T10:28:39Z", "pushed_at": "2025-12-22T22:57:58Z", "stargazers_count": 393, "watchers_count": 393, diff --git a/2021/CVE-2021-4034.json b/2021/CVE-2021-4034.json index 17de344452..6e1e720908 100644 --- a/2021/CVE-2021-4034.json +++ b/2021/CVE-2021-4034.json @@ -56,7 +56,7 @@ "stargazers_count": 2047, "watchers_count": 2047, "has_discussions": false, - "forks_count": 504, + "forks_count": 503, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -64,7 +64,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 504, + "forks": 503, "watchers": 2047, "score": 0, "subscribers_count": 18 diff --git a/2021/CVE-2021-40724.json b/2021/CVE-2021-40724.json index 8aa6fa2c5b..a9d240ca29 100644 --- a/2021/CVE-2021-40724.json +++ b/2021/CVE-2021-40724.json @@ -14,10 +14,10 @@ "description": "This is an Exploit App I made when solving the DocumentViewer challenge (CVE-2021-40724) from MobileHackingLab. It will download a libdocviewe_pro.so library from your local machine unto the vulnerable app's internal storage, load it upon relaunch and achieve an RCE.", "fork": false, "created_at": "2025-06-15T11:57:05Z", - "updated_at": "2026-10-25T10:23:50Z", + "updated_at": "2026-11-02T08:23:15Z", "pushed_at": "2025-06-17T09:14:01Z", - "stargazers_count": 14, - "watchers_count": 14, + "stargazers_count": 6, + "watchers_count": 6, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -35,7 +35,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 14, + "watchers": 6, "score": 0, "subscribers_count": 1 } diff --git a/2021/CVE-2021-44228.json b/2021/CVE-2021-44228.json index f25aad2736..eb8cc2e274 100644 --- a/2021/CVE-2021-44228.json +++ b/2021/CVE-2021-44228.json @@ -4247,8 +4247,8 @@ "description": "Simple tool for scanning entire directories for attempts of CVE-2021-44228", "fork": false, "created_at": "2021-12-13T08:51:56Z", - "updated_at": "2024-08-12T20:18:51Z", - "pushed_at": "2021-12-14T07:57:25Z", + "updated_at": "2026-11-02T12:11:42Z", + "pushed_at": "2026-11-02T12:11:38Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, @@ -15033,7 +15033,7 @@ "fork": false, "created_at": "2026-06-23T18:32:28Z", "updated_at": "2026-10-21T17:13:11Z", - "pushed_at": "2026-11-01T10:27:05Z", + "pushed_at": "2026-11-02T11:05:35Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -17372,5 +17372,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1442740893, + "name": "log4j-xz-lessons", + "full_name": "mcpmark-eval-liuhezi\/log4j-xz-lessons", + "owner": { + "login": "mcpmark-eval-liuhezi", + "id": 305407873, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/305407873?v=4", + "html_url": "https:\/\/github.com\/mcpmark-eval-liuhezi", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/mcpmark-eval-liuhezi\/log4j-xz-lessons", + "description": "Engineering sync brief: lessons from Log4Shell (CVE-2021-44228) and xz-utils backdoor (CVE-2024-3094)", + "fork": false, + "created_at": "2026-11-02T09:09:54Z", + "updated_at": "2026-11-02T09:10:44Z", + "pushed_at": "2026-11-02T09:10:40Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2022/CVE-2022-26766.json b/2022/CVE-2022-26766.json index f090f0652c..b9f025dcc8 100644 --- a/2022/CVE-2022-26766.json +++ b/2022/CVE-2022-26766.json @@ -14,10 +14,10 @@ "description": "Proof-of-concept for CVE-2022-26766 on macOS 12.3.1", "fork": false, "created_at": "2022-07-02T06:16:33Z", - "updated_at": "2026-10-23T08:23:19Z", + "updated_at": "2026-11-02T09:20:50Z", "pushed_at": "2022-07-02T17:14:41Z", - "stargazers_count": 91, - "watchers_count": 91, + "stargazers_count": 92, + "watchers_count": 92, "has_discussions": false, "forks_count": 14, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 14, - "watchers": 91, + "watchers": 92, "score": 0, "subscribers_count": 2 } diff --git a/2022/CVE-2022-27255.json b/2022/CVE-2022-27255.json index b3c803b5d1..43a8cf298b 100644 --- a/2022/CVE-2022-27255.json +++ b/2022/CVE-2022-27255.json @@ -19,7 +19,7 @@ "stargazers_count": 285, "watchers_count": 285, "has_discussions": false, - "forks_count": 53, + "forks_count": 54, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 53, + "forks": 54, "watchers": 285, "score": 0, "subscribers_count": 14 diff --git a/2022/CVE-2022-36551.json b/2022/CVE-2022-36551.json index e0ec6d8100..e45ff8995d 100644 --- a/2022/CVE-2022-36551.json +++ b/2022/CVE-2022-36551.json @@ -15,7 +15,7 @@ "fork": false, "created_at": "2026-10-07T15:40:44Z", "updated_at": "2026-10-21T16:39:07Z", - "pushed_at": "2026-11-01T10:34:26Z", + "pushed_at": "2026-11-02T11:20:02Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2023/CVE-2023-0297.json b/2023/CVE-2023-0297.json index e55028514e..3fda02b8b3 100644 --- a/2023/CVE-2023-0297.json +++ b/2023/CVE-2023-0297.json @@ -213,7 +213,7 @@ "fork": false, "created_at": "2026-10-07T15:40:37Z", "updated_at": "2026-10-21T16:39:04Z", - "pushed_at": "2026-11-01T10:30:44Z", + "pushed_at": "2026-11-02T11:14:55Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2023/CVE-2023-21768.json b/2023/CVE-2023-21768.json index 2053f7415f..7380e3def9 100644 --- a/2023/CVE-2023-21768.json +++ b/2023/CVE-2023-21768.json @@ -19,7 +19,7 @@ "stargazers_count": 511, "watchers_count": 511, "has_discussions": false, - "forks_count": 163, + "forks_count": 164, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 163, + "forks": 164, "watchers": 511, "score": 0, "subscribers_count": 7 diff --git a/2023/CVE-2023-23752.json b/2023/CVE-2023-23752.json index b6b67e3ed3..270bf3df44 100644 --- a/2023/CVE-2023-23752.json +++ b/2023/CVE-2023-23752.json @@ -624,10 +624,10 @@ "description": "Perform With Mass Exploiter In Joomla 4.2.8.", "fork": false, "created_at": "2023-04-09T13:20:48Z", - "updated_at": "2026-10-08T17:17:57Z", + "updated_at": "2026-11-02T09:45:53Z", "pushed_at": "2023-07-24T22:22:00Z", - "stargazers_count": 37, - "watchers_count": 37, + "stargazers_count": 36, + "watchers_count": 36, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -642,7 +642,7 @@ ], "visibility": "public", "forks": 6, - "watchers": 37, + "watchers": 36, "score": 0, "subscribers_count": 1 }, diff --git a/2023/CVE-2023-30856.json b/2023/CVE-2023-30856.json index 37a106fbed..90152f049a 100644 --- a/2023/CVE-2023-30856.json +++ b/2023/CVE-2023-30856.json @@ -14,10 +14,10 @@ "description": "Unofficial revival of eDEX-UI: runs on modern Windows, fixes CVE-2023-30856. Sci-fi terminal emulator.", "fork": false, "created_at": "2026-11-01T22:20:36Z", - "updated_at": "2026-11-02T02:14:44Z", + "updated_at": "2026-11-02T08:11:15Z", "pushed_at": "2026-11-02T02:14:45Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -37,7 +37,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 } diff --git a/2023/CVE-2023-38709.json b/2023/CVE-2023-38709.json index 8cc752b233..1f6c4c3ccc 100644 --- a/2023/CVE-2023-38709.json +++ b/2023/CVE-2023-38709.json @@ -14,10 +14,10 @@ "description": "Apache HTTP Server Vulnerability Testing Tool | PoC for CVE-2024-38472 , CVE-2024-39573 , CVE-2024-38477 , CVE-2024-38476 , CVE-2024-38475 , CVE-2024-38474 , CVE-2024-38473 , CVE-2023-38709", "fork": false, "created_at": "2024-10-05T20:32:45Z", - "updated_at": "2026-10-16T14:29:08Z", + "updated_at": "2026-11-02T09:12:39Z", "pushed_at": "2024-10-05T20:37:02Z", - "stargazers_count": 136, - "watchers_count": 136, + "stargazers_count": 135, + "watchers_count": 135, "has_discussions": false, "forks_count": 24, "allow_forking": true, @@ -39,7 +39,7 @@ ], "visibility": "public", "forks": 24, - "watchers": 136, + "watchers": 135, "score": 0, "subscribers_count": 1 } diff --git a/2024/CVE-2024-10441.json b/2024/CVE-2024-10441.json index e2eaa12a95..5a511ef7b7 100644 --- a/2024/CVE-2024-10441.json +++ b/2024/CVE-2024-10441.json @@ -14,7 +14,7 @@ "description": "Writeup y PoC educativo de CVE-2024-10441 (RCE pre-auth como root en Synology DSM via synoplugind). CVE ya parcheado; uso autorizado\/defensivo.", "fork": false, "created_at": "2026-10-25T01:51:37Z", - "updated_at": "2026-10-31T06:26:02Z", + "updated_at": "2026-11-02T08:57:12Z", "pushed_at": "2026-10-25T01:54:06Z", "stargazers_count": 1, "watchers_count": 1, diff --git a/2024/CVE-2024-1086.json b/2024/CVE-2024-1086.json index d6a4c67de1..630317d8e8 100644 --- a/2024/CVE-2024-1086.json +++ b/2024/CVE-2024-1086.json @@ -580,5 +580,54 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1389639998, + "name": "kshield", + "full_name": "mc493\/kshield", + "owner": { + "login": "mc493", + "id": 168852847, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/168852847?v=4", + "html_url": "https:\/\/github.com\/mc493", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/mc493\/kshield", + "description": "Emergency Zero-Downtime Linux Kernel Defense & Attack-Surface Disarmer. Active hotpatching for CVE-2026-98432 (MPTCP RCE), CVE-2024-1086, CVE-2026-53266 & Seccomp sandboxing.", + "fork": false, + "created_at": "2026-09-26T18:21:49Z", + "updated_at": "2026-11-02T11:20:24Z", + "pushed_at": "2026-11-02T11:20:19Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "attack-surface-reduction", + "cve-2024-1086", + "cve-2026-53266", + "cve-2026-98432", + "devsecops", + "hotpatch", + "incident-response", + "kernel-hardening", + "kubernetes-security", + "linux-security", + "seccomp", + "sre", + "sysctl", + "worm-audit", + "zero-day" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2024/CVE-2024-22203.json b/2024/CVE-2024-22203.json index 2380ea39cd..aabd484eac 100644 --- a/2024/CVE-2024-22203.json +++ b/2024/CVE-2024-22203.json @@ -15,7 +15,7 @@ "fork": false, "created_at": "2026-10-07T15:40:41Z", "updated_at": "2026-10-21T16:39:02Z", - "pushed_at": "2026-11-01T10:26:19Z", + "pushed_at": "2026-11-02T11:00:37Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-3094.json b/2024/CVE-2024-3094.json index f3a791b4ab..fb47761f24 100644 --- a/2024/CVE-2024-3094.json +++ b/2024/CVE-2024-3094.json @@ -2964,5 +2964,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1442740893, + "name": "log4j-xz-lessons", + "full_name": "mcpmark-eval-liuhezi\/log4j-xz-lessons", + "owner": { + "login": "mcpmark-eval-liuhezi", + "id": 305407873, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/305407873?v=4", + "html_url": "https:\/\/github.com\/mcpmark-eval-liuhezi", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/mcpmark-eval-liuhezi\/log4j-xz-lessons", + "description": "Engineering sync brief: lessons from Log4Shell (CVE-2021-44228) and xz-utils backdoor (CVE-2024-3094)", + "fork": false, + "created_at": "2026-11-02T09:09:54Z", + "updated_at": "2026-11-02T09:10:44Z", + "pushed_at": "2026-11-02T09:10:40Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2024/CVE-2024-38472.json b/2024/CVE-2024-38472.json index f430150b9a..9fc453ab47 100644 --- a/2024/CVE-2024-38472.json +++ b/2024/CVE-2024-38472.json @@ -47,10 +47,10 @@ "description": "Apache HTTP Server Vulnerability Testing Tool | PoC for CVE-2024-38472 , CVE-2024-39573 , CVE-2024-38477 , CVE-2024-38476 , CVE-2024-38475 , CVE-2024-38474 , CVE-2024-38473 , CVE-2023-38709", "fork": false, "created_at": "2024-10-05T20:32:45Z", - "updated_at": "2026-10-16T14:29:08Z", + "updated_at": "2026-11-02T09:12:39Z", "pushed_at": "2024-10-05T20:37:02Z", - "stargazers_count": 136, - "watchers_count": 136, + "stargazers_count": 135, + "watchers_count": 135, "has_discussions": false, "forks_count": 24, "allow_forking": true, @@ -72,7 +72,7 @@ ], "visibility": "public", "forks": 24, - "watchers": 136, + "watchers": 135, "score": 0, "subscribers_count": 1 } diff --git a/2024/CVE-2024-4367.json b/2024/CVE-2024-4367.json index 19e5f7f1e1..626963d1aa 100644 --- a/2024/CVE-2024-4367.json +++ b/2024/CVE-2024-4367.json @@ -994,5 +994,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1442847134, + "name": "CVE-2024-4367", + "full_name": "minhi1\/CVE-2024-4367", + "owner": { + "login": "minhi1", + "id": 147674017, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/147674017?v=4", + "html_url": "https:\/\/github.com\/minhi1", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/minhi1\/CVE-2024-4367", + "description": "PoC for CVE-2024-4367", + "fork": false, + "created_at": "2026-11-02T10:55:26Z", + "updated_at": "2026-11-02T11:04:20Z", + "pushed_at": "2026-11-02T11:04:17Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2024/CVE-2024-45337.json b/2024/CVE-2024-45337.json index d5f9f7a755..8dddf2910e 100644 --- a/2024/CVE-2024-45337.json +++ b/2024/CVE-2024-45337.json @@ -157,7 +157,7 @@ "fork": false, "created_at": "2026-07-07T20:45:27Z", "updated_at": "2026-10-21T16:58:51Z", - "pushed_at": "2026-11-01T10:49:17Z", + "pushed_at": "2026-11-02T11:39:32Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-45846.json b/2024/CVE-2024-45846.json index 56f8c76fb1..f0ae6d6e09 100644 --- a/2024/CVE-2024-45846.json +++ b/2024/CVE-2024-45846.json @@ -15,7 +15,7 @@ "fork": false, "created_at": "2026-10-07T15:51:48Z", "updated_at": "2026-10-21T16:39:07Z", - "pushed_at": "2026-11-01T10:30:56Z", + "pushed_at": "2026-11-02T11:15:00Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-53677.json b/2024/CVE-2024-53677.json index 12e37bcc53..f5863eebe5 100644 --- a/2024/CVE-2024-53677.json +++ b/2024/CVE-2024-53677.json @@ -52,7 +52,7 @@ "stargazers_count": 96, "watchers_count": 96, "has_discussions": false, - "forks_count": 30, + "forks_count": 29, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,7 +60,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 30, + "forks": 29, "watchers": 96, "score": 0, "subscribers_count": 3 diff --git a/2024/CVE-2024-55947.json b/2024/CVE-2024-55947.json index 8e6e8b3c44..502f96ce9c 100644 --- a/2024/CVE-2024-55947.json +++ b/2024/CVE-2024-55947.json @@ -15,7 +15,7 @@ "fork": false, "created_at": "2026-06-23T18:32:13Z", "updated_at": "2026-10-21T17:13:09Z", - "pushed_at": "2026-11-01T10:25:00Z", + "pushed_at": "2026-11-02T10:58:44Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2024/CVE-2024-56145.json b/2024/CVE-2024-56145.json index 712bb19330..4133576cc3 100644 --- a/2024/CVE-2024-56145.json +++ b/2024/CVE-2024-56145.json @@ -19,7 +19,7 @@ "stargazers_count": 48, "watchers_count": 48, "has_discussions": false, - "forks_count": 12, + "forks_count": 11, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 12, + "forks": 11, "watchers": 48, "score": 0, "subscribers_count": 1 diff --git a/2024/CVE-2024-9264.json b/2024/CVE-2024-9264.json index 61365f1eeb..532e59f4f9 100644 --- a/2024/CVE-2024-9264.json +++ b/2024/CVE-2024-9264.json @@ -402,7 +402,7 @@ "fork": false, "created_at": "2026-07-07T23:02:34Z", "updated_at": "2026-10-21T16:58:50Z", - "pushed_at": "2026-11-01T10:55:15Z", + "pushed_at": "2026-11-02T11:45:04Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-10184.json b/2025/CVE-2025-10184.json index 55641f81b7..c857634003 100644 --- a/2025/CVE-2025-10184.json +++ b/2025/CVE-2025-10184.json @@ -47,10 +47,10 @@ "description": "ColorOS短信漏洞，以及用户自救方案", "fork": false, "created_at": "2025-09-24T11:48:03Z", - "updated_at": "2026-10-19T16:32:52Z", + "updated_at": "2026-11-02T12:41:36Z", "pushed_at": "2025-10-15T11:32:43Z", - "stargazers_count": 386, - "watchers_count": 386, + "stargazers_count": 387, + "watchers_count": 387, "has_discussions": true, "forks_count": 42, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 42, - "watchers": 386, + "watchers": 387, "score": 0, "subscribers_count": 0 }, diff --git a/2025/CVE-2025-29824.json b/2025/CVE-2025-29824.json index 55f44622d0..f39fe8252f 100644 --- a/2025/CVE-2025-29824.json +++ b/2025/CVE-2025-29824.json @@ -19,7 +19,7 @@ "stargazers_count": 31, "watchers_count": 31, "has_discussions": false, - "forks_count": 7, + "forks_count": 6, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 7, + "forks": 6, "watchers": 31, "score": 0, "subscribers_count": 2 diff --git a/2025/CVE-2025-30208.json b/2025/CVE-2025-30208.json index 0ceef3e9e6..ec70d7ca36 100644 --- a/2025/CVE-2025-30208.json +++ b/2025/CVE-2025-30208.json @@ -149,39 +149,6 @@ "score": 0, "subscribers_count": 1 }, - { - "id": 955721279, - "name": "CVE-2025-30208", - "full_name": "Lusensec\/CVE-2025-30208", - "owner": { - "login": "Lusensec", - "id": 98147515, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/98147515?v=4", - "html_url": "https:\/\/github.com\/Lusensec", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/Lusensec\/CVE-2025-30208", - "description": "CVE-2025-30208 检测工具。python script && nuclei template", - "fork": false, - "created_at": "2025-03-27T04:58:54Z", - "updated_at": "2025-03-27T04:58:54Z", - "pushed_at": "2025-03-27T02:54:50Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 955752404, "name": "CVE-2025-30208-PoC", diff --git a/2025/CVE-2025-32463.json b/2025/CVE-2025-32463.json index c5f2eb91da..88957cdb1d 100644 --- a/2025/CVE-2025-32463.json +++ b/2025/CVE-2025-32463.json @@ -103,7 +103,7 @@ "stargazers_count": 30, "watchers_count": 30, "has_discussions": false, - "forks_count": 4, + "forks_count": 3, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -111,7 +111,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 4, + "forks": 3, "watchers": 30, "score": 0, "subscribers_count": 0 diff --git a/2025/CVE-2025-36911.json b/2025/CVE-2025-36911.json index 0bf14ce6be..cb1635c627 100644 --- a/2025/CVE-2025-36911.json +++ b/2025/CVE-2025-36911.json @@ -14,10 +14,10 @@ "description": "Hijacking Bluetooth Accessories Using Google Fast Pair: WhisperPair CVE-2025-36911 Reference Implementation & Vulnerability Verification Toolkit", "fork": false, "created_at": "2026-01-17T01:18:36Z", - "updated_at": "2026-10-31T08:44:59Z", + "updated_at": "2026-11-02T12:23:47Z", "pushed_at": "2026-05-28T08:12:40Z", - "stargazers_count": 109, - "watchers_count": 109, + "stargazers_count": 108, + "watchers_count": 108, "has_discussions": false, "forks_count": 17, "allow_forking": true, @@ -34,7 +34,7 @@ ], "visibility": "public", "forks": 17, - "watchers": 109, + "watchers": 108, "score": 0, "subscribers_count": 4 }, @@ -86,10 +86,10 @@ "description": "WPair is a defensive security research tool that demonstrates the CVE-2025-36911 (eg WhisperPair) vulnerability in Google's Fast Pair protocol. This vulnerability affects millions of Bluetooth audio devices worldwide, allowing unauthorized pairing and potential microphone access without user consent.", "fork": false, "created_at": "2026-01-17T05:28:08Z", - "updated_at": "2026-10-30T01:04:49Z", + "updated_at": "2026-11-02T08:46:36Z", "pushed_at": "2026-01-18T00:15:59Z", - "stargazers_count": 864, - "watchers_count": 864, + "stargazers_count": 865, + "watchers_count": 865, "has_discussions": false, "forks_count": 98, "allow_forking": true, @@ -100,7 +100,7 @@ "topics": [], "visibility": "public", "forks": 98, - "watchers": 864, + "watchers": 865, "score": 0, "subscribers_count": 23 }, diff --git a/2025/CVE-2025-43529.json b/2025/CVE-2025-43529.json index 74c8ba9dfb..1f1c63a62c 100644 --- a/2025/CVE-2025-43529.json +++ b/2025/CVE-2025-43529.json @@ -14,10 +14,10 @@ "description": "exploit for cve-2025-43529", "fork": false, "created_at": "2026-01-05T23:43:41Z", - "updated_at": "2026-10-21T00:15:53Z", + "updated_at": "2026-11-02T11:10:28Z", "pushed_at": "2026-01-05T23:45:36Z", - "stargazers_count": 87, - "watchers_count": 87, + "stargazers_count": 88, + "watchers_count": 88, "has_discussions": false, "forks_count": 14, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 14, - "watchers": 87, + "watchers": 88, "score": 0, "subscribers_count": 0 }, diff --git a/2025/CVE-2025-50460.json b/2025/CVE-2025-50460.json index 5876592738..8589439e31 100644 --- a/2025/CVE-2025-50460.json +++ b/2025/CVE-2025-50460.json @@ -48,7 +48,7 @@ "fork": false, "created_at": "2026-10-07T15:40:34Z", "updated_at": "2026-10-21T16:39:02Z", - "pushed_at": "2026-11-01T10:24:00Z", + "pushed_at": "2026-11-02T10:57:45Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2025/CVE-2025-55182.json b/2025/CVE-2025-55182.json index 3052f73e77..e89d5c8192 100644 --- a/2025/CVE-2025-55182.json +++ b/2025/CVE-2025-55182.json @@ -871,10 +871,10 @@ "description": "High Fidelity Detection Mechanism for RSC\/Next.js RCE (CVE-2025-55182 & CVE-2025-66478)", "fork": false, "created_at": "2025-12-04T06:55:04Z", - "updated_at": "2026-10-29T06:22:36Z", + "updated_at": "2026-11-02T09:45:53Z", "pushed_at": "2025-12-07T04:16:46Z", - "stargazers_count": 2455, - "watchers_count": 2455, + "stargazers_count": 2454, + "watchers_count": 2454, "has_discussions": false, "forks_count": 271, "allow_forking": true, @@ -885,7 +885,7 @@ "topics": [], "visibility": "public", "forks": 271, - "watchers": 2455, + "watchers": 2454, "score": 0, "subscribers_count": 11 }, @@ -1206,7 +1206,7 @@ "stargazers_count": 6, "watchers_count": 6, "has_discussions": false, - "forks_count": 3, + "forks_count": 2, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1214,7 +1214,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 3, + "forks": 2, "watchers": 6, "score": 0, "subscribers_count": 0 diff --git a/2025/CVE-2025-8110.json b/2025/CVE-2025-8110.json index 117b2e0035..c9346f427b 100644 --- a/2025/CVE-2025-8110.json +++ b/2025/CVE-2025-8110.json @@ -444,7 +444,7 @@ "fork": false, "created_at": "2026-06-23T18:32:13Z", "updated_at": "2026-10-21T17:13:09Z", - "pushed_at": "2026-11-01T10:25:00Z", + "pushed_at": "2026-11-02T10:58:44Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-109618.json b/2026/CVE-2026-109618.json index 3edc33c5c2..c018319d45 100644 --- a/2026/CVE-2026-109618.json +++ b/2026/CVE-2026-109618.json @@ -52,7 +52,7 @@ "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, - "forks_count": 40, + "forks_count": 39, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,7 +60,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 40, + "forks": 39, "watchers": 0, "score": 0, "subscribers_count": 0 @@ -85,7 +85,7 @@ "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, - "forks_count": 9, + "forks_count": 8, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -93,7 +93,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 9, + "forks": 8, "watchers": 0, "score": 0, "subscribers_count": 0 @@ -672,12 +672,12 @@ "description": "CVE-2026-109618\/109619 — 5 RCE chains + detection rules (Suricata, Sigma, ModSecurity). PHP session.upload_progress pre-auth exploit research.", "fork": false, "created_at": "2026-10-21T07:55:16Z", - "updated_at": "2026-11-02T07:05:01Z", + "updated_at": "2026-11-02T12:11:52Z", "pushed_at": "2026-10-28T23:21:57Z", "stargazers_count": 1924, "watchers_count": 1924, "has_discussions": false, - "forks_count": 649, + "forks_count": 648, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -700,7 +700,7 @@ "wordpress-security" ], "visibility": "public", - "forks": 649, + "forks": 648, "watchers": 1924, "score": 0, "subscribers_count": 8 @@ -973,10 +973,10 @@ "description": "Proof-of-Concept (PoC) exploit for php2shell (CVE-2026-109618 \/ CVE-2026-109619), demonstrating remote code execution in vulnerable PHP environments. For security research and educational purposes only.", "fork": false, "created_at": "2026-10-21T08:31:43Z", - "updated_at": "2026-11-02T06:19:24Z", + "updated_at": "2026-11-02T12:21:26Z", "pushed_at": "2026-10-22T07:19:20Z", - "stargazers_count": 1053, - "watchers_count": 1053, + "stargazers_count": 1054, + "watchers_count": 1054, "has_discussions": false, "forks_count": 266, "allow_forking": true, @@ -987,7 +987,7 @@ "topics": [], "visibility": "public", "forks": 266, - "watchers": 1053, + "watchers": 1054, "score": 0, "subscribers_count": 41 }, @@ -1726,10 +1726,10 @@ "description": null, "fork": false, "created_at": "2026-10-21T11:52:39Z", - "updated_at": "2026-10-30T07:07:01Z", + "updated_at": "2026-11-02T13:17:53Z", "pushed_at": "2026-10-21T11:52:57Z", - "stargazers_count": 142, - "watchers_count": 142, + "stargazers_count": 144, + "watchers_count": 144, "has_discussions": false, "forks_count": 83, "allow_forking": true, @@ -1740,7 +1740,7 @@ "topics": [], "visibility": "public", "forks": 83, - "watchers": 142, + "watchers": 144, "score": 0, "subscribers_count": 1 }, @@ -1995,10 +1995,10 @@ "description": "php2shell: Advanced hybrid exploit framework for CVE-2026-109618, CVE-2026-109619 & CVE-2026-115560. Features Auto-LFI parameter discovery, SAPI profiling, OOM fuzzing calibration, and FPM worker pinning. Stdlib only.", "fork": false, "created_at": "2026-10-21T12:37:59Z", - "updated_at": "2026-11-01T12:19:54Z", + "updated_at": "2026-11-02T08:06:52Z", "pushed_at": "2026-10-23T15:07:53Z", - "stargazers_count": 99, - "watchers_count": 99, + "stargazers_count": 100, + "watchers_count": 100, "has_discussions": false, "forks_count": 35, "allow_forking": true, @@ -2009,7 +2009,7 @@ "topics": [], "visibility": "public", "forks": 35, - "watchers": 99, + "watchers": 100, "score": 0, "subscribers_count": 2 }, @@ -4517,7 +4517,7 @@ "description": "PHP 5.6.40 with the deb.sury.org security backports (incl. CVE-2026-109618\/109619), rebuilt as RPMs for CentOS\/RHEL 6 and 7", "fork": false, "created_at": "2026-10-21T16:19:49Z", - "updated_at": "2026-10-23T10:31:20Z", + "updated_at": "2026-11-02T09:32:17Z", "pushed_at": "2026-10-23T10:31:33Z", "stargazers_count": 0, "watchers_count": 0, @@ -6143,8 +6143,8 @@ "description": "Hunting pack for PHP2Shell (CVE-2026-109618\/109619): find vulnerable PHP assets and hunt for exploitation with Microsoft Defender, Sentinel and Azure tooling", "fork": false, "created_at": "2026-10-21T19:14:17Z", - "updated_at": "2026-10-30T11:26:09Z", - "pushed_at": "2026-10-30T11:26:05Z", + "updated_at": "2026-11-02T13:34:05Z", + "pushed_at": "2026-11-02T13:34:01Z", "stargazers_count": 4, "watchers_count": 4, "has_discussions": false, @@ -7715,7 +7715,7 @@ "stargazers_count": 272, "watchers_count": 272, "has_discussions": false, - "forks_count": 74, + "forks_count": 75, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -7744,7 +7744,7 @@ "vulnerability-research" ], "visibility": "public", - "forks": 74, + "forks": 75, "watchers": 272, "score": 0, "subscribers_count": 2 @@ -8988,39 +8988,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1429169624, - "name": "php2shell", - "full_name": "WildanDeveloper\/php2shell", - "owner": { - "login": "WildanDeveloper", - "id": 216940635, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/216940635?v=4", - "html_url": "https:\/\/github.com\/WildanDeveloper", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/WildanDeveloper\/php2shell", - "description": "CVE-2026-109618 \/ CVE-2026-109619 (php2shell) toolkit - session.upload_progress + LFI RCE proof and OOM precondition detection. Authorised testing only.", - "fork": false, - "created_at": "2026-10-22T02:55:24Z", - "updated_at": "2026-10-22T17:18:54Z", - "pushed_at": "2026-10-22T02:59:16Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, { "id": 1429176381, "name": "php2shell-response-kit", @@ -9518,10 +9485,10 @@ "description": "High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)", "fork": false, "created_at": "2026-10-22T03:53:20Z", - "updated_at": "2026-11-02T07:16:30Z", + "updated_at": "2026-11-02T13:23:25Z", "pushed_at": "2026-10-24T03:40:18Z", - "stargazers_count": 974, - "watchers_count": 974, + "stargazers_count": 977, + "watchers_count": 977, "has_discussions": false, "forks_count": 143, "allow_forking": true, @@ -9532,7 +9499,7 @@ "topics": [], "visibility": "public", "forks": 143, - "watchers": 974, + "watchers": 977, "score": 0, "subscribers_count": 11 }, @@ -14235,8 +14202,8 @@ "description": "Detect PHP2Shell (CVE-2026-109618, CVE-2026-109619) PHP RCE exploitation attempts by inspecting POST request bodies with nginx mirror", "fork": false, "created_at": "2026-10-22T14:56:21Z", - "updated_at": "2026-10-31T12:00:41Z", - "pushed_at": "2026-10-31T12:00:37Z", + "updated_at": "2026-11-02T13:10:40Z", + "pushed_at": "2026-11-02T13:10:35Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -14596,8 +14563,8 @@ "description": "Honeypot to attract attacks for php2shell (CVE-2026-109618 and CVE-2026-109619)", "fork": false, "created_at": "2026-10-22T15:45:52Z", - "updated_at": "2026-10-25T23:43:19Z", - "pushed_at": "2026-10-29T02:05:58Z", + "updated_at": "2026-11-02T10:15:16Z", + "pushed_at": "2026-11-02T10:15:12Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -17115,8 +17082,8 @@ "description": "php2shell-enterprise-hardening (CVE-2026-109618 \/ CVE-2026-109619) - Hyperscale Defense-in-Depth, Non-Breaking Mitigations & Instant Immunity Auditor for PHP Pre-Auth RCE.", "fork": false, "created_at": "2026-10-22T22:56:00Z", - "updated_at": "2026-10-26T14:41:25Z", - "pushed_at": "2026-10-26T14:41:21Z", + "updated_at": "2026-11-02T10:32:37Z", + "pushed_at": "2026-11-02T10:32:33Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -19826,7 +19793,7 @@ "description": "php2shell (CVE-2026-109618\/109619) 利用工具：带来源与日期的指纹库、两条引擎、免 gdb 标定；含源码级结论——本链下限 PHP 7.0。", "fork": false, "created_at": "2026-10-23T13:55:41Z", - "updated_at": "2026-10-26T02:45:35Z", + "updated_at": "2026-11-02T08:57:30Z", "pushed_at": "2026-10-26T02:45:42Z", "stargazers_count": 0, "watchers_count": 0, @@ -20124,60 +20091,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1431190298, - "name": "php2shell-POC-CVE-2026-109618-CVE-2026-109619", - "full_name": "php2-shell\/php2shell-POC-CVE-2026-109618-CVE-2026-109619", - "owner": { - "login": "php2-shell", - "id": 341133089, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/341133089?v=4", - "html_url": "https:\/\/github.com\/php2-shell", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/php2-shell\/php2shell-POC-CVE-2026-109618-CVE-2026-109619", - "description": "php2shell CVE-2026-109618 CVE-2026-109619 tracks php2shell, cve php2shell and php2shell cve. php2shell vulnerability plus php cve 2026 (cve php 2026), php cve patch: 8.5.12, 8.4.27, 8.3.36, 8.2.35. php cve rce, php security. ", - "fork": false, - "created_at": "2026-10-23T15:01:15Z", - "updated_at": "2026-10-23T15:21:15Z", - "pushed_at": "2026-10-23T15:07:15Z", - "stargazers_count": 1, - "watchers_count": 1, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "cve-2026-109618", - "cve-2026-109619", - "cve-php-2026", - "cve-php2shell", - "latest-php-cve", - "php-critical-cve", - "php-cve-2026", - "php-cve-fix", - "php-cve-latest", - "php-cve-patch", - "php-cve-rce", - "php-cve-vulnerability", - "php-patch", - "php-security", - "php-version-cve", - "php-vulnerability-cve", - "php2shell", - "php2shell-cve", - "php2shell-cve-2026", - "php2shell-vulnerability" - ], - "visibility": "public", - "forks": 0, - "watchers": 1, - "score": 0, - "subscribers_count": 0 - }, { "id": 1431197392, "name": "php-oneshot-checker", @@ -21971,8 +21884,8 @@ "description": "Detection and response package for php2shell (CVE-2026-109618 \/ CVE-2026-109619): Suricata, Zeek, YARA, Sigma, ModSecurity rules, hunting queries, SOC triage, patch matrix. No exploit code.", "fork": false, "created_at": "2026-10-24T13:28:54Z", - "updated_at": "2026-10-30T19:57:03Z", - "pushed_at": "2026-10-30T19:56:59Z", + "updated_at": "2026-11-02T11:55:40Z", + "pushed_at": "2026-11-02T11:55:36Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -23145,8 +23058,8 @@ "description": "Universal PHP security scanner & native EOL patches (PHP 5.2–8.1) for CVE-2026-109618, CVE-2026-109619 & CVE-2026-115560 across FastPanel, cPanel, Plesk, aaPanel, ISPmanager, DirectAdmin & System PHP.", "fork": false, "created_at": "2026-10-25T10:45:23Z", - "updated_at": "2026-11-02T05:14:51Z", - "pushed_at": "2026-11-02T05:14:48Z", + "updated_at": "2026-11-02T11:36:08Z", + "pushed_at": "2026-11-02T11:36:04Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -24126,8 +24039,8 @@ "description": "PHP 8.2.35 rebuild (CVE-2026-109618 \/ CVE-2026-109619 fix, no telemetry) for Ubuntu 24.04 hosts running php8.2 8.2.7-1ubuntu1", "fork": false, "created_at": "2026-10-26T06:49:43Z", - "updated_at": "2026-10-26T09:34:17Z", - "pushed_at": "2026-10-26T09:34:11Z", + "updated_at": "2026-11-02T08:15:32Z", + "pushed_at": "2026-11-02T08:16:01Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -25213,10 +25126,10 @@ "description": "Scanner for php2shell (CVE-2026-109618 and CVE-2026-109619)", "fork": false, "created_at": "2026-10-27T13:18:31Z", - "updated_at": "2026-10-27T13:33:28Z", + "updated_at": "2026-11-02T09:38:49Z", "pushed_at": "2026-10-27T13:20:19Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -25227,7 +25140,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 2, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -25885,8 +25798,8 @@ "description": "Remote Zend MM ASLR leak testbed (PHP CVE-2026-109618 \/ CVE-2026-109619)", "fork": false, "created_at": "2026-10-28T21:02:06Z", - "updated_at": "2026-10-29T07:09:34Z", - "pushed_at": "2026-10-28T21:02:12Z", + "updated_at": "2026-11-02T11:09:23Z", + "pushed_at": "2026-11-02T11:09:19Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -26509,11 +26422,11 @@ "user_view_type": "public" }, "html_url": "https:\/\/github.com\/yusufyildiz34\/whichphp", - "description": "Is the PHP in your container image really fixed for PHP2Shell (CVE-2026-109618, CVE-2026-109619)? Finds every PHP build without running the image, with backport-aware verdicts and evidence.", + "description": "Is the PHP in your container image really fixed for PHP2Shell (CVE-2026-109618, CVE-2026-109619)? Finds PHP builds inside an image without running it, with backport-aware verdicts and evidence.", "fork": false, "created_at": "2026-10-30T21:46:32Z", - "updated_at": "2026-11-02T07:52:01Z", - "pushed_at": "2026-11-02T07:51:57Z", + "updated_at": "2026-11-02T13:45:54Z", + "pushed_at": "2026-11-02T13:45:50Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -27151,5 +27064,78 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1442807652, + "name": "wazuh-php2shell", + "full_name": "mrnaeem4\/wazuh-php2shell", + "owner": { + "login": "mrnaeem4", + "id": 323111759, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/323111759?v=4", + "html_url": "https:\/\/github.com\/mrnaeem4", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/mrnaeem4\/wazuh-php2shell", + "description": "Rule Wazuh untuk mendeteksi eksploitasi PHP2Shell (CVE-2026-109618 \/ CVE-2026-109619) pada server web berbasis PHP (Apache\/`mod_php`, Nginx + PHP-FPM)", + "fork": false, + "created_at": "2026-11-02T10:15:22Z", + "updated_at": "2026-11-02T10:52:13Z", + "pushed_at": "2026-11-02T10:52:09Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "blue-team", + "php2shell", + "security-operations-center", + "siem", + "wazuh", + "wazuh-rules" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1442859780, + "name": "PHP2Shell-CVE-2026-109618-Raw-HTTP", + "full_name": "jackyho522\/PHP2Shell-CVE-2026-109618-Raw-HTTP", + "owner": { + "login": "jackyho522", + "id": 78006989, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/78006989?v=4", + "html_url": "https:\/\/github.com\/jackyho522", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/jackyho522\/PHP2Shell-CVE-2026-109618-Raw-HTTP", + "description": null, + "fork": false, + "created_at": "2026-11-02T11:08:47Z", + "updated_at": "2026-11-02T11:08:53Z", + "pushed_at": "2026-11-02T11:08:49Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-109619.json b/2026/CVE-2026-109619.json index c6cd0454c6..fff74ad2b3 100644 --- a/2026/CVE-2026-109619.json +++ b/2026/CVE-2026-109619.json @@ -666,10 +666,10 @@ "description": "Unauthenticated RCE toolkit for PHP 5.4–8.4.26 (CVE-2026-109619\/109618) — pure-HTTP chain, JA3 impersonation, prpenetration-testingoof-of-access design", "fork": false, "created_at": "2026-10-23T13:49:52Z", - "updated_at": "2026-11-01T10:50:07Z", + "updated_at": "2026-11-02T10:48:33Z", "pushed_at": "2026-10-29T14:37:38Z", - "stargazers_count": 121, - "watchers_count": 121, + "stargazers_count": 122, + "watchers_count": 122, "has_discussions": false, "forks_count": 61, "allow_forking": true, @@ -696,7 +696,7 @@ ], "visibility": "public", "forks": 61, - "watchers": 121, + "watchers": 122, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-110447.json b/2026/CVE-2026-110447.json index 9281563620..8be85b242a 100644 --- a/2026/CVE-2026-110447.json +++ b/2026/CVE-2026-110447.json @@ -101,5 +101,38 @@ "watchers": 2, "score": 0, "subscribers_count": 0 + }, + { + "id": 1442740148, + "name": "CVE-2026-110447", + "full_name": "maxprog-svg\/CVE-2026-110447", + "owner": { + "login": "maxprog-svg", + "id": 180038121, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/180038121?v=4", + "html_url": "https:\/\/github.com\/maxprog-svg", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/maxprog-svg\/CVE-2026-110447", + "description": "CVE-2026-110447 — Collabora Online \"Built-in CODE Server\"", + "fork": false, + "created_at": "2026-11-02T09:09:11Z", + "updated_at": "2026-11-02T09:10:14Z", + "pushed_at": "2026-11-02T09:10:09Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-111497.json b/2026/CVE-2026-111497.json index ced95a815c..53fdbcc878 100644 --- a/2026/CVE-2026-111497.json +++ b/2026/CVE-2026-111497.json @@ -47,10 +47,10 @@ "description": "Reproducible local Brotli decoder proof for CVE-2026-111497 with a self-checking tuned RCE harness", "fork": false, "created_at": "2026-10-22T04:08:28Z", - "updated_at": "2026-11-01T15:55:12Z", + "updated_at": "2026-11-02T09:29:17Z", "pushed_at": "2026-10-25T01:09:02Z", - "stargazers_count": 74, - "watchers_count": 74, + "stargazers_count": 75, + "watchers_count": 75, "has_discussions": false, "forks_count": 23, "allow_forking": true, @@ -61,7 +61,7 @@ "topics": [], "visibility": "public", "forks": 23, - "watchers": 74, + "watchers": 75, "score": 0, "subscribers_count": 0 }, @@ -343,10 +343,10 @@ "description": " Read-only Node.js check for the Oct 2026 security release (CVE-2026-111497 Brotli RCE + 9). Finds every install (nvm, fnm, volta, system), what each running process actually uses, restarts needed, and eMudhra CA issues.", "fork": false, "created_at": "2026-10-23T00:45:51Z", - "updated_at": "2026-10-23T00:49:26Z", + "updated_at": "2026-11-02T13:48:18Z", "pushed_at": "2026-10-23T00:48:14Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -366,7 +366,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -1704,8 +1704,8 @@ "description": "Finds copies of the Google Brotli decoder affected by CVE-2026-111497 on Ubuntu and Debian hosts: the OS packages, and the bundled copies an OS update does not fix (Node.js, Python, Envoy, browsers and more). Built by trial and error with AI-Ops, starting with the OSes on my own machines and servers. A PowerShell version for Windows is planned.", "fork": false, "created_at": "2026-10-25T21:24:13Z", - "updated_at": "2026-11-02T00:16:16Z", - "pushed_at": "2026-11-02T00:53:29Z", + "updated_at": "2026-11-02T11:15:30Z", + "pushed_at": "2026-11-02T11:15:25Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, @@ -2498,8 +2498,8 @@ "description": "Vulnerability checker and remediation guide for CVE-2026-111497 vulnerability in Google's Brotli decoder", "fork": false, "created_at": "2026-10-29T03:07:32Z", - "updated_at": "2026-11-02T03:16:55Z", - "pushed_at": "2026-11-02T03:16:51Z", + "updated_at": "2026-11-02T11:07:55Z", + "pushed_at": "2026-11-02T11:07:50Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -2958,5 +2958,71 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1442726781, + "name": "cve-2026-111497-wordpress-pingback-brotli", + "full_name": "fortbridge\/cve-2026-111497-wordpress-pingback-brotli", + "owner": { + "login": "fortbridge", + "id": 75114098, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/75114098?v=4", + "html_url": "https:\/\/github.com\/fortbridge", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/fortbridge\/cve-2026-111497-wordpress-pingback-brotli", + "description": "Local WordPress pingback\/Brotli RCE reproduction with a one-use Podman lab", + "fork": false, + "created_at": "2026-11-02T08:55:32Z", + "updated_at": "2026-11-02T13:13:32Z", + "pushed_at": "2026-11-02T08:55:38Z", + "stargazers_count": 2, + "watchers_count": 2, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 2, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1442778556, + "name": "CVE-2026-111497", + "full_name": "EQSTLab\/CVE-2026-111497", + "owner": { + "login": "EQSTLab", + "id": 148991397, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/148991397?v=4", + "html_url": "https:\/\/github.com\/EQSTLab", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/EQSTLab\/CVE-2026-111497", + "description": "Node2Shell", + "fork": false, + "created_at": "2026-11-02T09:46:41Z", + "updated_at": "2026-11-02T11:20:34Z", + "pushed_at": "2026-11-02T11:19:50Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-112445.json b/2026/CVE-2026-112445.json index 6694ce14d6..b7c2f1530b 100644 --- a/2026/CVE-2026-112445.json +++ b/2026/CVE-2026-112445.json @@ -14,10 +14,10 @@ "description": "CVE-2026-112445: The Simplest macOS Local Privilege Escalation to Date", "fork": false, "created_at": "2026-10-29T04:45:44Z", - "updated_at": "2026-11-01T17:45:55Z", + "updated_at": "2026-11-02T12:00:49Z", "pushed_at": "2026-10-29T04:48:06Z", - "stargazers_count": 50, - "watchers_count": 50, + "stargazers_count": 51, + "watchers_count": 51, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 6, - "watchers": 50, + "watchers": 51, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-112688.json b/2026/CVE-2026-112688.json new file mode 100644 index 0000000000..98d533cc51 --- /dev/null +++ b/2026/CVE-2026-112688.json @@ -0,0 +1,35 @@ +[ + { + "id": 1442559243, + "name": "CVE-2026-112688-backboardd", + "full_name": "0xjohnnydev\/CVE-2026-112688-backboardd", + "owner": { + "login": "0xjohnnydev", + "id": 109935131, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/109935131?v=4", + "html_url": "https:\/\/github.com\/0xjohnnydev", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/0xjohnnydev\/CVE-2026-112688-backboardd", + "description": "CVE-2026-112688 CoreMedia PoC: controlled saved-LR corruption in backboardd, stopped by PAC, plus evidence of a constrained write-1 primitive.", + "fork": false, + "created_at": "2026-11-02T05:45:28Z", + "updated_at": "2026-11-02T09:54:45Z", + "pushed_at": "2026-11-02T09:20:26Z", + "stargazers_count": 5, + "watchers_count": 5, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 5, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-112705.json b/2026/CVE-2026-112705.json index 151f4e373f..cd6ae03296 100644 --- a/2026/CVE-2026-112705.json +++ b/2026/CVE-2026-112705.json @@ -47,12 +47,12 @@ "description": "PoC & panic evidence for CVE-2026-112705: AppleAVE2 kernel OOB write on iOS 27.0.1 (fixed in 27.2) via VideoToolbox NumberOfTemporalLayers. Independent reproduction; original discovery by Calif \/ Chollima team.", "fork": false, "created_at": "2026-10-30T09:29:03Z", - "updated_at": "2026-11-02T07:41:56Z", + "updated_at": "2026-11-02T11:42:10Z", "pushed_at": "2026-10-30T10:06:16Z", - "stargazers_count": 40, - "watchers_count": 40, + "stargazers_count": 44, + "watchers_count": 44, "has_discussions": false, - "forks_count": 10, + "forks_count": 9, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,8 +60,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 10, - "watchers": 40, + "forks": 9, + "watchers": 44, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-112706.json b/2026/CVE-2026-112706.json index d7f9a9e2f9..79acd86ab6 100644 --- a/2026/CVE-2026-112706.json +++ b/2026/CVE-2026-112706.json @@ -14,10 +14,10 @@ "description": "Independent discovery & coordinated disclosure: CoreMedia bytestream XPC (mediaplaybackd) vended live file descriptors for protected paths to any sandboxed app on iOS 26.5–27.0.1. Fixed in iOS 27.2 as CVE-2026-112706. PoC + evidence.", "fork": false, "created_at": "2026-10-28T12:03:22Z", - "updated_at": "2026-11-01T15:22:07Z", + "updated_at": "2026-11-02T11:44:06Z", "pushed_at": "2026-10-28T12:04:38Z", - "stargazers_count": 19, - "watchers_count": 19, + "stargazers_count": 21, + "watchers_count": 21, "has_discussions": false, "forks_count": 6, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 6, - "watchers": 19, + "watchers": 21, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-112816.json b/2026/CVE-2026-112816.json index f48f3aeab1..16edcb5789 100644 --- a/2026/CVE-2026-112816.json +++ b/2026/CVE-2026-112816.json @@ -47,10 +47,10 @@ "description": "Independent lab reproduction and post-patch verification tool for CVE-2026-112816 (LXD\/MicroCloud mTLS chain bypass).", "fork": false, "created_at": "2026-11-01T20:47:57Z", - "updated_at": "2026-11-02T03:11:07Z", - "pushed_at": "2026-11-01T20:54:20Z", - "stargazers_count": 2, - "watchers_count": 2, + "updated_at": "2026-11-02T12:53:31Z", + "pushed_at": "2026-11-02T12:53:27Z", + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -65,7 +65,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-115904.json b/2026/CVE-2026-115904.json new file mode 100644 index 0000000000..9ff009c3f4 --- /dev/null +++ b/2026/CVE-2026-115904.json @@ -0,0 +1,35 @@ +[ + { + "id": 1442901390, + "name": "CVE-2026-115904", + "full_name": "VulnSVNC\/CVE-2026-115904", + "owner": { + "login": "VulnSVNC", + "id": 137689402, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/137689402?v=4", + "html_url": "https:\/\/github.com\/VulnSVNC", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/VulnSVNC\/CVE-2026-115904", + "description": "OS Command Injection PoC & Write-up - CVE-2026-115904", + "fork": false, + "created_at": "2026-11-02T11:51:12Z", + "updated_at": "2026-11-02T12:10:58Z", + "pushed_at": "2026-11-02T12:10:55Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 + } +] \ No newline at end of file diff --git a/2026/CVE-2026-116366.json b/2026/CVE-2026-116366.json index d66381c872..f957dde1d6 100644 --- a/2026/CVE-2026-116366.json +++ b/2026/CVE-2026-116366.json @@ -14,10 +14,10 @@ "description": "PoC for CVE-2026-116366 — ClickHouse Server unauthenticated RCE (brotli v1.2.0 decoder out-of-bounds write): differential detector, weaponized DoS, containerized vulnerable-vs-fixed lab, root-cause analysis", "fork": false, "created_at": "2026-10-31T06:32:17Z", - "updated_at": "2026-11-02T01:56:45Z", + "updated_at": "2026-11-02T09:09:00Z", "pushed_at": "2026-10-31T06:37:09Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -40,7 +40,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 } diff --git a/2026/CVE-2026-116512.json b/2026/CVE-2026-116512.json index 5677cc008b..05a22253e1 100644 --- a/2026/CVE-2026-116512.json +++ b/2026/CVE-2026-116512.json @@ -14,7 +14,7 @@ "description": "Exploit for CVE-2026-116512 - weDevs Project Manager <= 4.1.1 Unauthenticated RCE. For educational and authorized security testing only.", "fork": false, "created_at": "2026-11-01T21:02:29Z", - "updated_at": "2026-11-01T22:08:53Z", + "updated_at": "2026-11-02T08:35:52Z", "pushed_at": "2026-11-01T22:08:49Z", "stargazers_count": 0, "watchers_count": 0, diff --git a/2026/CVE-2026-117182.json b/2026/CVE-2026-117182.json index 64b0069f8d..3a39b38561 100644 --- a/2026/CVE-2026-117182.json +++ b/2026/CVE-2026-117182.json @@ -14,8 +14,8 @@ "description": "Authenticated Stored XSS via SafeUrlValidator bypass on the rich-text render path in Spina CMS (<= 2.21.0). Payload executes on the public site. CVE-2026-117182.", "fork": false, "created_at": "2026-10-30T08:52:44Z", - "updated_at": "2026-10-30T08:56:56Z", - "pushed_at": "2026-10-30T08:55:26Z", + "updated_at": "2026-11-02T11:49:58Z", + "pushed_at": "2026-11-02T11:49:54Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-117183.json b/2026/CVE-2026-117183.json index 21c257a123..67d3e1a193 100644 --- a/2026/CVE-2026-117183.json +++ b/2026/CVE-2026-117183.json @@ -14,8 +14,8 @@ "description": "Build-time RCE via FeaturedImage path traversal in astro-notion-blog 0.13.0. Allows attackers with Notion edit access to overwrite files and execute commands on the build host. CVE-2026-117183.", "fork": false, "created_at": "2026-10-30T08:59:14Z", - "updated_at": "2026-10-30T08:59:52Z", - "pushed_at": "2026-10-30T08:59:47Z", + "updated_at": "2026-11-02T11:51:37Z", + "pushed_at": "2026-11-02T11:51:34Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-117184.json b/2026/CVE-2026-117184.json index fb2ec67287..9d86e08f3e 100644 --- a/2026/CVE-2026-117184.json +++ b/2026/CVE-2026-117184.json @@ -14,8 +14,8 @@ "description": "Unauthenticated Denial of Service (DoS) via GraphQL alias overloading in Traggo server v0.8.3. Pins CPU and exhausts memory without requiring authentication. CVE-2026-117184.", "fork": false, "created_at": "2026-10-30T09:02:53Z", - "updated_at": "2026-10-30T09:03:32Z", - "pushed_at": "2026-10-30T09:03:28Z", + "updated_at": "2026-11-02T11:53:32Z", + "pushed_at": "2026-11-02T11:53:28Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-1337.json b/2026/CVE-2026-1337.json index 30f6d068d7..3a8df7a9d9 100644 --- a/2026/CVE-2026-1337.json +++ b/2026/CVE-2026-1337.json @@ -80,8 +80,8 @@ "description": "Joke CVE advisory for Bash2Shell (CVE-2026-1337).", "fork": false, "created_at": "2026-10-30T13:30:33Z", - "updated_at": "2026-10-30T13:30:44Z", - "pushed_at": "2026-10-30T13:30:39Z", + "updated_at": "2026-11-02T09:53:27Z", + "pushed_at": "2026-11-02T09:53:24Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-20253.json b/2026/CVE-2026-20253.json index fda7b3da1f..a20f37e931 100644 --- a/2026/CVE-2026-20253.json +++ b/2026/CVE-2026-20253.json @@ -19,7 +19,7 @@ "stargazers_count": 13, "watchers_count": 13, "has_discussions": false, - "forks_count": 2, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 2, + "forks": 1, "watchers": 13, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-22732.json b/2026/CVE-2026-22732.json index c5330f4690..e7cc2b5d9c 100644 --- a/2026/CVE-2026-22732.json +++ b/2026/CVE-2026-22732.json @@ -47,8 +47,8 @@ "description": null, "fork": false, "created_at": "2026-04-15T02:08:40Z", - "updated_at": "2026-11-01T16:33:40Z", - "pushed_at": "2026-11-01T16:33:37Z", + "updated_at": "2026-11-02T11:54:46Z", + "pushed_at": "2026-11-02T11:53:39Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-25769.json b/2026/CVE-2026-25769.json index 4b294bee68..0856b99713 100644 --- a/2026/CVE-2026-25769.json +++ b/2026/CVE-2026-25769.json @@ -65,39 +65,6 @@ "score": 0, "subscribers_count": 0 }, - { - "id": 1201944490, - "name": "CVE-2026-25769", - "full_name": "njeru-codes\/CVE-2026-25769", - "owner": { - "login": "njeru-codes", - "id": 111843624, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/111843624?v=4", - "html_url": "https:\/\/github.com\/njeru-codes", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/njeru-codes\/CVE-2026-25769", - "description": "POC for deserialization of untrusted data in wazuh leading to RCE", - "fork": false, - "created_at": "2026-04-05T11:31:47Z", - "updated_at": "2026-04-05T11:45:52Z", - "pushed_at": "2026-04-05T11:45:48Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1209259358, "name": "CVE-2026-25769", diff --git a/2026/CVE-2026-31431.json b/2026/CVE-2026-31431.json index 7cce9d8aa0..94edd0ac9d 100644 --- a/2026/CVE-2026-31431.json +++ b/2026/CVE-2026-31431.json @@ -269,7 +269,7 @@ "description": "Minimal no-libc Linux x86_64 ELF PoC build for Copy Fail (CVE-2026-31431)", "fork": false, "created_at": "2026-04-30T00:30:40Z", - "updated_at": "2026-10-26T15:04:08Z", + "updated_at": "2026-11-02T09:17:29Z", "pushed_at": "2026-05-03T01:42:43Z", "stargazers_count": 64, "watchers_count": 64, @@ -2320,8 +2320,8 @@ "description": "CVE-2026-31431 eBPF fix", "fork": false, "created_at": "2026-04-30T13:55:25Z", - "updated_at": "2026-07-25T04:41:11Z", - "pushed_at": "2026-04-30T14:54:14Z", + "updated_at": "2026-11-02T13:23:40Z", + "pushed_at": "2026-11-02T13:23:36Z", "stargazers_count": 24, "watchers_count": 24, "has_discussions": false, @@ -4680,10 +4680,10 @@ "description": "Python exploit demonstrating an in‑memory AF_ALG‑based kernel vulnerability on certain Linux kernels. ", "fork": false, "created_at": "2026-05-01T14:14:17Z", - "updated_at": "2026-05-05T17:29:34Z", + "updated_at": "2026-11-02T11:07:20Z", "pushed_at": "2026-05-01T14:16:41Z", - "stargazers_count": 3, - "watchers_count": 3, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -4694,7 +4694,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 3, + "watchers": 2, "score": 0, "subscribers_count": 0 }, @@ -9183,7 +9183,7 @@ "fork": false, "created_at": "2026-05-08T17:54:04Z", "updated_at": "2026-10-21T20:17:24Z", - "pushed_at": "2026-10-21T20:23:09Z", + "pushed_at": "2026-11-02T08:26:23Z", "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, diff --git a/2026/CVE-2026-34197.json b/2026/CVE-2026-34197.json index 7a5a6c2e0c..1a013057f6 100644 --- a/2026/CVE-2026-34197.json +++ b/2026/CVE-2026-34197.json @@ -151,7 +151,7 @@ "stargazers_count": 2, "watchers_count": 2, "has_discussions": false, - "forks_count": 1, + "forks_count": 0, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -159,7 +159,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 1, + "forks": 0, "watchers": 2, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-34486.json b/2026/CVE-2026-34486.json index c9f98f18d2..c83183da40 100644 --- a/2026/CVE-2026-34486.json +++ b/2026/CVE-2026-34486.json @@ -85,7 +85,7 @@ "stargazers_count": 70, "watchers_count": 70, "has_discussions": false, - "forks_count": 14, + "forks_count": 13, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -93,7 +93,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 14, + "forks": 13, "watchers": 70, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-41567.json b/2026/CVE-2026-41567.json index 70ed1bd853..add1cb8dd8 100644 --- a/2026/CVE-2026-41567.json +++ b/2026/CVE-2026-41567.json @@ -19,7 +19,7 @@ "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 0, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-42530.json b/2026/CVE-2026-42530.json index 34978373cf..140923fb98 100644 --- a/2026/CVE-2026-42530.json +++ b/2026/CVE-2026-42530.json @@ -52,7 +52,7 @@ "stargazers_count": 5, "watchers_count": 5, "has_discussions": false, - "forks_count": 2, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -60,7 +60,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 2, + "forks": 1, "watchers": 5, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-42945.json b/2026/CVE-2026-42945.json index 24220260f8..de7f652f2c 100644 --- a/2026/CVE-2026-42945.json +++ b/2026/CVE-2026-42945.json @@ -1602,5 +1602,46 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1442930145, + "name": "B63-POC-CVE-2026-42945", + "full_name": "basesixtythree\/B63-POC-CVE-2026-42945", + "owner": { + "login": "basesixtythree", + "id": 220976450, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/220976450?v=4", + "html_url": "https:\/\/github.com\/basesixtythree", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/basesixtythree\/B63-POC-CVE-2026-42945", + "description": "PoC and verification material for CVE-2026-42945 (CWE-122 heap overflow in ngx_http_rewrite_module -> attacker-shaped cleanup hijack -> system() RCE in the ASLR-off worker; patched-twin negative + 5\/5 reliability captured in the shipped lab)", + "fork": false, + "created_at": "2026-11-02T12:20:43Z", + "updated_at": "2026-11-02T13:31:38Z", + "pushed_at": "2026-11-02T13:31:34Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "b63", + "cve", + "cve-2026-42945", + "nginx", + "poc", + "rce", + "security-research" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-43284.json b/2026/CVE-2026-43284.json index 92904f2cd0..878a2067a1 100644 --- a/2026/CVE-2026-43284.json +++ b/2026/CVE-2026-43284.json @@ -359,10 +359,10 @@ "description": "arm64\/aarch64 port of V4bel\/dirtyfrag (CVE-2026-43284). ESP-only - rxrpc path kernel-oopses on arm64 due to flush_dcache_page", "fork": false, "created_at": "2026-05-10T04:22:19Z", - "updated_at": "2026-10-30T09:35:16Z", + "updated_at": "2026-11-02T09:19:04Z", "pushed_at": "2026-05-13T08:32:55Z", - "stargazers_count": 39, - "watchers_count": 39, + "stargazers_count": 40, + "watchers_count": 40, "has_discussions": false, "forks_count": 9, "allow_forking": true, @@ -384,7 +384,7 @@ ], "visibility": "public", "forks": 9, - "watchers": 39, + "watchers": 40, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-43499.json b/2026/CVE-2026-43499.json index 5f96498cc5..a52e90eba8 100644 --- a/2026/CVE-2026-43499.json +++ b/2026/CVE-2026-43499.json @@ -467,10 +467,10 @@ "description": "Android version CVE-2026-43499 tester", "fork": false, "created_at": "2026-07-13T13:31:55Z", - "updated_at": "2026-10-30T19:06:39Z", + "updated_at": "2026-11-02T11:17:19Z", "pushed_at": "2026-07-20T07:22:42Z", - "stargazers_count": 92, - "watchers_count": 92, + "stargazers_count": 91, + "watchers_count": 91, "has_discussions": false, "forks_count": 17, "allow_forking": true, @@ -481,7 +481,7 @@ "topics": [], "visibility": "public", "forks": 17, - "watchers": 92, + "watchers": 91, "score": 0, "subscribers_count": 0 }, @@ -995,10 +995,10 @@ "description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499", "fork": false, "created_at": "2026-07-17T14:24:08Z", - "updated_at": "2026-11-02T03:39:28Z", + "updated_at": "2026-11-02T13:37:26Z", "pushed_at": "2026-09-03T03:21:42Z", - "stargazers_count": 1519, - "watchers_count": 1519, + "stargazers_count": 1521, + "watchers_count": 1521, "has_discussions": false, "forks_count": 304, "allow_forking": true, @@ -1009,7 +1009,7 @@ "topics": [], "visibility": "public", "forks": 304, - "watchers": 1519, + "watchers": 1521, "score": 0, "subscribers_count": 46 }, @@ -1676,12 +1676,12 @@ "description": "GhostLock One-Tap Execution App (CVE-2026-43499)", "fork": false, "created_at": "2026-07-29T05:04:25Z", - "updated_at": "2026-11-02T07:05:12Z", + "updated_at": "2026-11-02T13:26:38Z", "pushed_at": "2026-10-27T12:02:30Z", - "stargazers_count": 2495, - "watchers_count": 2495, + "stargazers_count": 2503, + "watchers_count": 2503, "has_discussions": true, - "forks_count": 609, + "forks_count": 611, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -1689,8 +1689,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 609, - "watchers": 2495, + "forks": 611, + "watchers": 2503, "score": 0, "subscribers_count": 44 }, @@ -2044,10 +2044,10 @@ "description": "Jailbreak supported Google Pixel phones with CVE-2026-43499", "fork": false, "created_at": "2026-08-02T17:34:45Z", - "updated_at": "2026-11-02T07:27:57Z", + "updated_at": "2026-11-02T12:15:43Z", "pushed_at": "2026-09-13T16:31:27Z", - "stargazers_count": 484, - "watchers_count": 484, + "stargazers_count": 485, + "watchers_count": 485, "has_discussions": false, "forks_count": 72, "allow_forking": true, @@ -2065,7 +2065,7 @@ ], "visibility": "public", "forks": 72, - "watchers": 484, + "watchers": 485, "score": 0, "subscribers_count": 8 }, @@ -2513,10 +2513,10 @@ "description": "CVE-2026-43499 GhostLock futex UAF LPE PoC for OPPO PCKM00 (SM6150) \/ Linux 4.14.180", "fork": false, "created_at": "2026-08-11T06:40:53Z", - "updated_at": "2026-10-15T19:36:31Z", + "updated_at": "2026-11-02T12:13:20Z", "pushed_at": "2026-08-11T13:11:27Z", - "stargazers_count": 16, - "watchers_count": 16, + "stargazers_count": 17, + "watchers_count": 17, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -2527,7 +2527,7 @@ "topics": [], "visibility": "public", "forks": 3, - "watchers": 16, + "watchers": 17, "score": 0, "subscribers_count": 1 }, @@ -2920,10 +2920,10 @@ "description": "Using CVE-2026-43499 to root your Galaxy S24 Series(SM-S92X0 ,(China \/ Hong Kong SAR \/ Taiwan))", "fork": false, "created_at": "2026-08-16T14:37:06Z", - "updated_at": "2026-11-02T07:40:12Z", + "updated_at": "2026-11-02T13:37:56Z", "pushed_at": "2026-10-31T15:20:59Z", - "stargazers_count": 102, - "watchers_count": 102, + "stargazers_count": 103, + "watchers_count": 103, "has_discussions": false, "forks_count": 12, "allow_forking": true, @@ -2949,7 +2949,7 @@ ], "visibility": "public", "forks": 12, - "watchers": 102, + "watchers": 103, "score": 0, "subscribers_count": 1 }, @@ -3331,10 +3331,10 @@ "description": "GhostLock CVE-2026-43499 port for Galaxy Z Fold 8 (h8q)", "fork": false, "created_at": "2026-08-24T06:55:48Z", - "updated_at": "2026-10-14T08:07:23Z", + "updated_at": "2026-11-02T09:30:39Z", "pushed_at": "2026-10-22T13:25:29Z", - "stargazers_count": 11, - "watchers_count": 11, + "stargazers_count": 12, + "watchers_count": 12, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -3345,7 +3345,7 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 11, + "watchers": 12, "score": 0, "subscribers_count": 1 }, @@ -3397,8 +3397,8 @@ "description": "One-click root for vivo\/iQOO devices on locked bootloader | CVE-2026-43499 + KernelSU", "fork": false, "created_at": "2026-08-25T07:52:11Z", - "updated_at": "2026-11-02T06:40:45Z", - "pushed_at": "2026-11-02T06:40:41Z", + "updated_at": "2026-11-02T10:02:16Z", + "pushed_at": "2026-11-02T10:02:12Z", "stargazers_count": 88, "watchers_count": 88, "has_discussions": false, @@ -6002,8 +6002,8 @@ "description": "CVE-2026-43499 exploit on vivo's MT6896 device V2238A.", "fork": false, "created_at": "2026-10-28T05:27:50Z", - "updated_at": "2026-10-30T04:03:48Z", - "pushed_at": "2026-10-29T05:58:25Z", + "updated_at": "2026-11-02T09:04:44Z", + "pushed_at": "2026-11-02T09:04:40Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, @@ -6119,6 +6119,39 @@ "score": 0, "subscribers_count": 0 }, + { + "id": 1441988050, + "name": "phq110-root", + "full_name": "Delta-Water\/phq110-root", + "owner": { + "login": "Delta-Water", + "id": 132277713, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/132277713?v=4", + "html_url": "https:\/\/github.com\/Delta-Water", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Delta-Water\/phq110-root", + "description": "PHQ110（OPPO OP5613 \/ Android 14 \/ C.53）内存态 uid0 研究快照：CVE-2026-43499 GhostLock 链 + uid0 rootd + Shizuku。不写分区、不持久化。", + "fork": false, + "created_at": "2026-11-01T16:02:26Z", + "updated_at": "2026-11-02T08:45:13Z", + "pushed_at": "2026-11-02T01:03:22Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, { "id": 1442562963, "name": "IONSTACK-S22E", @@ -6134,8 +6167,8 @@ "description": "CVE-2026-43499 (IonStack\/GhostLock) port for Samsung Galaxy S22 SM-S901E (r0q) on S901EXXSAEXF8 — verified uid=0", "fork": false, "created_at": "2026-11-02T05:50:42Z", - "updated_at": "2026-11-02T05:51:01Z", - "pushed_at": "2026-11-02T05:50:50Z", + "updated_at": "2026-11-02T08:20:12Z", + "pushed_at": "2026-11-02T08:20:09Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-48907.json b/2026/CVE-2026-48907.json index 0c04cc2c6b..95f43a717a 100644 --- a/2026/CVE-2026-48907.json +++ b/2026/CVE-2026-48907.json @@ -19,7 +19,7 @@ "stargazers_count": 16, "watchers_count": 16, "has_discussions": false, - "forks_count": 5, + "forks_count": 4, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 5, + "forks": 4, "watchers": 16, "score": 0, "subscribers_count": 2 @@ -483,10 +483,10 @@ "description": "Python & template nuclei", "fork": false, "created_at": "2026-07-04T02:43:56Z", - "updated_at": "2026-09-25T00:27:30Z", + "updated_at": "2026-11-02T09:45:53Z", "pushed_at": "2026-07-04T02:44:49Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 0, + "watchers_count": 0, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -497,7 +497,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 0, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-48908.json b/2026/CVE-2026-48908.json index 291a2a1d19..c8f092a632 100644 --- a/2026/CVE-2026-48908.json +++ b/2026/CVE-2026-48908.json @@ -19,7 +19,7 @@ "stargazers_count": 18, "watchers_count": 18, "has_discussions": false, - "forks_count": 3, + "forks_count": 2, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -42,7 +42,7 @@ "web-security" ], "visibility": "public", - "forks": 3, + "forks": 2, "watchers": 18, "score": 0, "subscribers_count": 1 diff --git a/2026/CVE-2026-49881.json b/2026/CVE-2026-49881.json index 550ca60191..602178b1e0 100644 --- a/2026/CVE-2026-49881.json +++ b/2026/CVE-2026-49881.json @@ -14,10 +14,10 @@ "description": "Android complete exploit chain that enables privilege escalation from a local untrusted app to root\/kernel, combination of CVE-2026-49881 and CVE-2026-43284", "fork": false, "created_at": "2026-07-23T07:01:34Z", - "updated_at": "2026-11-02T07:30:19Z", + "updated_at": "2026-11-02T09:02:17Z", "pushed_at": "2026-09-09T00:47:49Z", - "stargazers_count": 486, - "watchers_count": 486, + "stargazers_count": 487, + "watchers_count": 487, "has_discussions": false, "forks_count": 112, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 112, - "watchers": 486, + "watchers": 487, "score": 0, "subscribers_count": 7 }, diff --git a/2026/CVE-2026-49952.json b/2026/CVE-2026-49952.json index 8e89285dd8..8fb6b76297 100644 --- a/2026/CVE-2026-49952.json +++ b/2026/CVE-2026-49952.json @@ -19,7 +19,7 @@ "stargazers_count": 3, "watchers_count": 3, "has_discussions": false, - "forks_count": 2, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 2, + "forks": 1, "watchers": 3, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-50416.json b/2026/CVE-2026-50416.json index 4424a43fde..6eb1434002 100644 --- a/2026/CVE-2026-50416.json +++ b/2026/CVE-2026-50416.json @@ -47,8 +47,8 @@ "description": "CVE-2026-50416: Windows 11 KASLR bypass", "fork": false, "created_at": "2026-07-17T12:12:33Z", - "updated_at": "2026-10-29T14:16:35Z", - "pushed_at": "2026-10-13T10:19:58Z", + "updated_at": "2026-11-02T09:38:06Z", + "pushed_at": "2026-11-02T09:38:02Z", "stargazers_count": 50, "watchers_count": 50, "has_discussions": false, diff --git a/2026/CVE-2026-53361.json b/2026/CVE-2026-53361.json index 3521d9b1f9..f121a56fc7 100644 --- a/2026/CVE-2026-53361.json +++ b/2026/CVE-2026-53361.json @@ -19,7 +19,7 @@ "stargazers_count": 27, "watchers_count": 27, "has_discussions": false, - "forks_count": 6, + "forks_count": 7, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 6, + "forks": 7, "watchers": 27, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-54121.json b/2026/CVE-2026-54121.json index 14a65d8f53..87436d9761 100644 --- a/2026/CVE-2026-54121.json +++ b/2026/CVE-2026-54121.json @@ -264,7 +264,7 @@ "stargazers_count": 5, "watchers_count": 5, "has_discussions": false, - "forks_count": 0, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -272,7 +272,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 0, + "forks": 1, "watchers": 5, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-55200.json b/2026/CVE-2026-55200.json index 558a6d1c95..a7107b4432 100644 --- a/2026/CVE-2026-55200.json +++ b/2026/CVE-2026-55200.json @@ -19,7 +19,7 @@ "stargazers_count": 10, "watchers_count": 10, "has_discussions": false, - "forks_count": 2, + "forks_count": 1, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -27,7 +27,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 2, + "forks": 1, "watchers": 10, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-56190.json b/2026/CVE-2026-56190.json index 8fb7f8a3a1..dc7585befd 100644 --- a/2026/CVE-2026-56190.json +++ b/2026/CVE-2026-56190.json @@ -1,37 +1,4 @@ [ - { - "id": 1432656151, - "name": "CVE-2026-56190-Windows-Server-2022-RDP", - "full_name": "danarhirany300-ctrl\/CVE-2026-56190-Windows-Server-2022-RDP", - "owner": { - "login": "danarhirany300-ctrl", - "id": 235944470, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/235944470?v=4", - "html_url": "https:\/\/github.com\/danarhirany300-ctrl", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/danarhirany300-ctrl\/CVE-2026-56190-Windows-Server-2022-RDP", - "description": "Unauthenticated RDP vulnerability in termsrv.dll (Windows Server 2022). Proof of Concept for heap spray, XFG bypass, Instruction Pointer control, and reliable Denial of Service (Event ID 7031).", - "fork": false, - "created_at": "2026-10-24T22:46:37Z", - "updated_at": "2026-10-25T14:26:23Z", - "pushed_at": "2026-10-25T14:26:19Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 - }, { "id": 1438267365, "name": "RDPBleed", @@ -64,5 +31,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1442728497, + "name": "CVE-2026-56190-RCE", + "full_name": "danarhirany300-ctrl\/CVE-2026-56190-RCE", + "owner": { + "login": "danarhirany300-ctrl", + "id": 235944470, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/235944470?v=4", + "html_url": "https:\/\/github.com\/danarhirany300-ctrl", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/danarhirany300-ctrl\/CVE-2026-56190-RCE", + "description": "Full RCE exploit chain for CVE-2026-56190 on Windows Server 2022. Bypasses CFG, XFG, and DEP", + "fork": false, + "created_at": "2026-11-02T08:57:18Z", + "updated_at": "2026-11-02T10:08:17Z", + "pushed_at": "2026-11-02T10:08:13Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-58231.json b/2026/CVE-2026-58231.json index 29a0aec78a..021cd39ee2 100644 --- a/2026/CVE-2026-58231.json +++ b/2026/CVE-2026-58231.json @@ -31,38 +31,5 @@ "watchers": 0, "score": 0, "subscribers_count": 0 - }, - { - "id": 1343137054, - "name": "CVE-2026-58231", - "full_name": "WildanDeveloper\/CVE-2026-58231", - "owner": { - "login": "WildanDeveloper", - "id": 216940635, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/216940635?v=4", - "html_url": "https:\/\/github.com\/WildanDeveloper", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/WildanDeveloper\/CVE-2026-58231", - "description": "Detection & precondition-verification tool for CVE-2026-58231 (SAP Commerce Cloud Data Hub Adapter)", - "fork": false, - "created_at": "2026-08-22T20:12:25Z", - "updated_at": "2026-09-20T16:12:31Z", - "pushed_at": "2026-09-20T16:12:27Z", - "stargazers_count": 0, - "watchers_count": 0, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 0, - "watchers": 0, - "score": 0, - "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-58882.json b/2026/CVE-2026-58882.json index df0f0f14a2..7c2270b550 100644 --- a/2026/CVE-2026-58882.json +++ b/2026/CVE-2026-58882.json @@ -14,8 +14,8 @@ "description": "Tiny Shizuku app that clears stuck 'SMS of Death' (CVE-2026-58882) WAP Push messages. Material 3 Expressive.", "fork": false, "created_at": "2026-10-31T19:20:57Z", - "updated_at": "2026-11-01T21:31:55Z", - "pushed_at": "2026-10-31T22:27:05Z", + "updated_at": "2026-11-02T10:05:26Z", + "pushed_at": "2026-11-02T10:05:28Z", "stargazers_count": 1, "watchers_count": 1, "has_discussions": false, diff --git a/2026/CVE-2026-59310.json b/2026/CVE-2026-59310.json index 2b6380baf3..6645ba2a6f 100644 --- a/2026/CVE-2026-59310.json +++ b/2026/CVE-2026-59310.json @@ -89,7 +89,7 @@ "stargazers_count": 9, "watchers_count": 9, "has_discussions": false, - "forks_count": 6, + "forks_count": 7, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -97,7 +97,7 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 6, + "forks": 7, "watchers": 9, "score": 0, "subscribers_count": 0 @@ -163,7 +163,7 @@ "stargazers_count": 17, "watchers_count": 17, "has_discussions": false, - "forks_count": 9, + "forks_count": 10, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -180,7 +180,7 @@ "vmware" ], "visibility": "public", - "forks": 9, + "forks": 10, "watchers": 17, "score": 0, "subscribers_count": 0 diff --git a/2026/CVE-2026-63030.json b/2026/CVE-2026-63030.json index 0dc677903a..aebdb58c93 100644 --- a/2026/CVE-2026-63030.json +++ b/2026/CVE-2026-63030.json @@ -2738,5 +2738,38 @@ "watchers": 0, "score": 0, "subscribers_count": 0 + }, + { + "id": 1442883623, + "name": "CVE-2026-63030-wp2shell-repro", + "full_name": "l-i-uqing\/CVE-2026-63030-wp2shell-repro", + "owner": { + "login": "l-i-uqing", + "id": 144933306, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/144933306?v=4", + "html_url": "https:\/\/github.com\/l-i-uqing", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/l-i-uqing\/CVE-2026-63030-wp2shell-repro", + "description": "WordPress REST Batch route confusion + SQLi RCE chain reproduction (CVE-2026-63030 & CVE-2026-60137)", + "fork": false, + "created_at": "2026-11-02T11:33:12Z", + "updated_at": "2026-11-02T12:57:06Z", + "pushed_at": "2026-11-02T12:57:02Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 } ] \ No newline at end of file diff --git a/2026/CVE-2026-64560.json b/2026/CVE-2026-64560.json index 29e09d9ffd..e0814365c6 100644 --- a/2026/CVE-2026-64560.json +++ b/2026/CVE-2026-64560.json @@ -564,10 +564,10 @@ "description": "OnePlus 16 (PYB110) jailbreak: CVE-2026-64560 + CVE-2026-98260 + KernelSU \/ KernelSU Next \/ BakaSU \/ SukiSU Ultra LKM", "fork": false, "created_at": "2026-10-20T09:43:06Z", - "updated_at": "2026-11-02T01:14:28Z", + "updated_at": "2026-11-02T13:04:02Z", "pushed_at": "2026-11-01T14:01:57Z", - "stargazers_count": 24, - "watchers_count": 24, + "stargazers_count": 26, + "watchers_count": 26, "has_discussions": false, "forks_count": 8, "allow_forking": true, @@ -578,7 +578,7 @@ "topics": [], "visibility": "public", "forks": 8, - "watchers": 24, + "watchers": 26, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-68121.json b/2026/CVE-2026-68121.json index a53728a3cf..14116e9168 100644 --- a/2026/CVE-2026-68121.json +++ b/2026/CVE-2026-68121.json @@ -84,8 +84,8 @@ "description": "CVE-2026-68121 PPPoEject", "fork": false, "created_at": "2026-09-21T02:34:54Z", - "updated_at": "2026-09-21T02:38:07Z", - "pushed_at": "2026-09-21T02:38:04Z", + "updated_at": "2026-11-02T07:53:15Z", + "pushed_at": "2026-11-02T07:53:11Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-70748.json b/2026/CVE-2026-70748.json deleted file mode 100644 index e03bbd52b9..0000000000 --- a/2026/CVE-2026-70748.json +++ /dev/null @@ -1,37 +0,0 @@ -[ - { - "id": 1435358508, - "name": "cve-scanner", - "full_name": "hktalent\/cve-scanner", - "owner": { - "login": "hktalent", - "id": 18223385, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/18223385?v=4", - "html_url": "https:\/\/github.com\/hktalent", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/hktalent\/cve-scanner", - "description": "weblogic CVE-2026-70748,CVE-2026-60672,CVE-2026-35301;PHP CVE-2026-109618 CVE-2026-109619,Node.js CVE-2026-111497,NGINX CVE-2026-42945 CVE-2026-42533 CVE-2026-15176 CVE-2026-93479,Apache HTTPD 2.4.66 CVE-2026-23918,IIS CVE-2026-70024,HTTP.sys CVE-2026-47291... RCE CVE scanner", - "fork": false, - "created_at": "2026-10-27T06:49:12Z", - "updated_at": "2026-11-02T07:20:23Z", - "pushed_at": "2026-11-02T07:20:19Z", - "stargazers_count": 2, - "watchers_count": 2, - "has_discussions": false, - "forks_count": 0, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [ - "weblogic" - ], - "visibility": "public", - "forks": 0, - "watchers": 2, - "score": 0, - "subscribers_count": 0 - } -] \ No newline at end of file diff --git a/2026/CVE-2026-76461.json b/2026/CVE-2026-76461.json index 6469fb21c9..edc4cd6d3e 100644 --- a/2026/CVE-2026-76461.json +++ b/2026/CVE-2026-76461.json @@ -80,10 +80,10 @@ "description": null, "fork": false, "created_at": "2026-09-15T14:33:05Z", - "updated_at": "2026-10-04T12:34:51Z", + "updated_at": "2026-11-02T11:57:34Z", "pushed_at": "2026-09-15T15:01:34Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -97,7 +97,7 @@ ], "visibility": "public", "forks": 2, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, @@ -116,10 +116,10 @@ "description": "CVE-2026-76461", "fork": false, "created_at": "2026-09-17T12:47:17Z", - "updated_at": "2026-09-17T13:29:16Z", + "updated_at": "2026-11-02T12:04:14Z", "pushed_at": "2026-09-17T13:29:12Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -130,7 +130,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 1 } diff --git a/2026/CVE-2026-81000.json b/2026/CVE-2026-81000.json index 7ea050c904..a8d24bcf01 100644 --- a/2026/CVE-2026-81000.json +++ b/2026/CVE-2026-81000.json @@ -84,8 +84,8 @@ "description": "CVE-2026-81000", "fork": false, "created_at": "2026-09-21T02:18:26Z", - "updated_at": "2026-09-21T02:33:22Z", - "pushed_at": "2026-09-21T02:33:19Z", + "updated_at": "2026-11-02T07:53:17Z", + "pushed_at": "2026-11-02T07:53:13Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-87902.json b/2026/CVE-2026-87902.json index 968f4a18a2..cc1519cc88 100644 --- a/2026/CVE-2026-87902.json +++ b/2026/CVE-2026-87902.json @@ -14,10 +14,10 @@ "description": "CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion (conditional RCE)", "fork": false, "created_at": "2026-09-22T18:13:48Z", - "updated_at": "2026-10-28T18:02:22Z", + "updated_at": "2026-11-02T08:09:16Z", "pushed_at": "2026-10-28T18:02:18Z", - "stargazers_count": 35, - "watchers_count": 35, + "stargazers_count": 36, + "watchers_count": 36, "has_discussions": false, "forks_count": 9, "allow_forking": true, @@ -28,7 +28,7 @@ "topics": [], "visibility": "public", "forks": 9, - "watchers": 35, + "watchers": 36, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-9539.json b/2026/CVE-2026-9539.json index 0602b35644..300abd5936 100644 --- a/2026/CVE-2026-9539.json +++ b/2026/CVE-2026-9539.json @@ -14,7 +14,7 @@ "description": "PoC for the «Snapshotting our way to CVE-2026-9539» blogpost", "fork": false, "created_at": "2026-10-19T09:08:22Z", - "updated_at": "2026-11-02T05:09:48Z", + "updated_at": "2026-11-02T08:57:58Z", "pushed_at": "2026-10-27T13:37:29Z", "stargazers_count": 2, "watchers_count": 2, diff --git a/2026/CVE-2026-97798.json b/2026/CVE-2026-97798.json index be830a3662..fe7933d1d9 100644 --- a/2026/CVE-2026-97798.json +++ b/2026/CVE-2026-97798.json @@ -14,10 +14,10 @@ "description": "CVE-2026-97798 Windows Error Reporting - Command Injection TO SYSTEM", "fork": false, "created_at": "2026-10-27T17:45:26Z", - "updated_at": "2026-11-02T00:32:11Z", + "updated_at": "2026-11-02T10:17:38Z", "pushed_at": "2026-10-30T02:35:54Z", - "stargazers_count": 35, - "watchers_count": 35, + "stargazers_count": 36, + "watchers_count": 36, "has_discussions": false, "forks_count": 3, "allow_forking": true, @@ -36,7 +36,7 @@ ], "visibility": "public", "forks": 3, - "watchers": 35, + "watchers": 36, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-98260.json b/2026/CVE-2026-98260.json index 0a9321ec15..ea154e5c0d 100644 --- a/2026/CVE-2026-98260.json +++ b/2026/CVE-2026-98260.json @@ -80,10 +80,10 @@ "description": "Target-specific Android CVE-2026-98260 research port for Xiaomi popsicle", "fork": false, "created_at": "2026-10-23T08:56:37Z", - "updated_at": "2026-10-29T14:04:34Z", + "updated_at": "2026-11-02T12:43:22Z", "pushed_at": "2026-10-29T14:04:29Z", - "stargazers_count": 20, - "watchers_count": 20, + "stargazers_count": 21, + "watchers_count": 21, "has_discussions": false, "forks_count": 13, "allow_forking": true, @@ -94,7 +94,7 @@ "topics": [], "visibility": "public", "forks": 13, - "watchers": 20, + "watchers": 21, "score": 0, "subscribers_count": 0 }, @@ -628,10 +628,10 @@ "description": "CVE-2026-98260: Xiaomi 17 Ultra (nezha) temporary root + KernelSU PoC - scripts, docs and logs only; exploit built from upstream source", "fork": false, "created_at": "2026-10-28T04:10:05Z", - "updated_at": "2026-10-28T13:02:15Z", + "updated_at": "2026-11-02T09:43:45Z", "pushed_at": "2026-10-28T04:10:12Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -648,7 +648,7 @@ ], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, @@ -806,12 +806,12 @@ "description": "GhostKey - CVE-2026-98260 一键提权工具（Shizuku + NDK Native）", "fork": false, "created_at": "2026-10-29T05:12:04Z", - "updated_at": "2026-11-02T01:52:50Z", + "updated_at": "2026-11-02T13:50:35Z", "pushed_at": "2026-10-29T05:13:36Z", - "stargazers_count": 45, - "watchers_count": 45, + "stargazers_count": 47, + "watchers_count": 47, "has_discussions": false, - "forks_count": 23, + "forks_count": 25, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -819,41 +819,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 23, - "watchers": 45, - "score": 0, - "subscribers_count": 0 - }, - { - "id": 1438211560, - "name": "CVE-2026-98260-vivo-x-fold6-poc", - "full_name": "simayang01\/CVE-2026-98260-vivo-x-fold6-poc", - "owner": { - "login": "simayang01", - "id": 20416125, - "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/20416125?v=4", - "html_url": "https:\/\/github.com\/simayang01", - "user_view_type": "public" - }, - "html_url": "https:\/\/github.com\/simayang01\/CVE-2026-98260-vivo-x-fold6-poc", - "description": "CVE 2026 98260 vivo x fold6 poc", - "fork": false, - "created_at": "2026-10-29T09:36:16Z", - "updated_at": "2026-11-01T06:14:03Z", - "pushed_at": "2026-11-01T06:14:00Z", - "stargazers_count": 5, - "watchers_count": 5, - "has_discussions": false, - "forks_count": 1, - "allow_forking": true, - "is_template": false, - "web_commit_signoff_required": false, - "has_pull_requests": true, - "pull_request_creation_policy": "all", - "topics": [], - "visibility": "public", - "forks": 1, - "watchers": 5, + "forks": 25, + "watchers": 47, "score": 0, "subscribers_count": 0 }, @@ -953,10 +920,10 @@ "description": "CVE 2026 98260 vivo s60 poc", "fork": false, "created_at": "2026-10-30T07:52:25Z", - "updated_at": "2026-11-02T04:27:00Z", + "updated_at": "2026-11-02T13:07:13Z", "pushed_at": "2026-11-02T04:26:57Z", - "stargazers_count": 0, - "watchers_count": 0, + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -973,6 +940,39 @@ ], "visibility": "public", "forks": 2, + "watchers": 1, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1441172821, + "name": "CVE-2026-98260-vivo-x-fold6-poc", + "full_name": "super2tt\/CVE-2026-98260-vivo-x-fold6-poc", + "owner": { + "login": "super2tt", + "id": 41357278, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41357278?v=4", + "html_url": "https:\/\/github.com\/super2tt", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/super2tt\/CVE-2026-98260-vivo-x-fold6-poc", + "description": "CVE 2026 98260 vivo x fold6 poc", + "fork": false, + "created_at": "2026-10-31T19:06:26Z", + "updated_at": "2026-10-31T19:06:26Z", + "pushed_at": "2026-10-29T09:47:49Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, "watchers": 0, "score": 0, "subscribers_count": 0 @@ -1025,10 +1025,10 @@ "description": "One-tap Android root for Samsung Galaxy devices, built around the CVE-2026-98260 timer exploit.", "fork": false, "created_at": "2026-11-01T10:00:01Z", - "updated_at": "2026-11-02T00:38:14Z", + "updated_at": "2026-11-02T10:20:53Z", "pushed_at": "2026-11-01T10:11:44Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -1039,14 +1039,14 @@ "topics": [], "visibility": "public", "forks": 2, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, { "id": 1441962372, - "name": "CVE-2026-98260-iQOO-Neo9-Pro-Root", - "full_name": "LinXing0926\/CVE-2026-98260-iQOO-Neo9-Pro-Root", + "name": "GhostCred", + "full_name": "LinXing0926\/GhostCred", "owner": { "login": "LinXing0926", "id": 163140943, @@ -1054,14 +1054,14 @@ "html_url": "https:\/\/github.com\/LinXing0926", "user_view_type": "public" }, - "html_url": "https:\/\/github.com\/LinXing0926\/CVE-2026-98260-iQOO-Neo9-Pro-Root", + "html_url": "https:\/\/github.com\/LinXing0926\/GhostCred", "description": "基于CVE-2026-98260的iQOO Neo9 Pro 临时Root实现，AwA", "fork": false, "created_at": "2026-11-01T15:34:07Z", - "updated_at": "2026-11-01T15:34:12Z", - "pushed_at": "2026-11-01T15:34:09Z", - "stargazers_count": 0, - "watchers_count": 0, + "updated_at": "2026-11-02T12:23:47Z", + "pushed_at": "2026-11-02T11:48:20Z", + "stargazers_count": 1, + "watchers_count": 1, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -1072,7 +1072,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 0, + "watchers": 1, "score": 0, "subscribers_count": 0 }, diff --git a/2026/CVE-2026-98432.json b/2026/CVE-2026-98432.json index 12ac497031..29991afa5e 100644 --- a/2026/CVE-2026-98432.json +++ b/2026/CVE-2026-98432.json @@ -1,4 +1,53 @@ [ + { + "id": 1389639998, + "name": "kshield", + "full_name": "mc493\/kshield", + "owner": { + "login": "mc493", + "id": 168852847, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/168852847?v=4", + "html_url": "https:\/\/github.com\/mc493", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/mc493\/kshield", + "description": "Emergency Zero-Downtime Linux Kernel Defense & Attack-Surface Disarmer. Active hotpatching for CVE-2026-98432 (MPTCP RCE), CVE-2024-1086, CVE-2026-53266 & Seccomp sandboxing.", + "fork": false, + "created_at": "2026-09-26T18:21:49Z", + "updated_at": "2026-11-02T11:20:24Z", + "pushed_at": "2026-11-02T11:20:19Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "attack-surface-reduction", + "cve-2024-1086", + "cve-2026-53266", + "cve-2026-98432", + "devsecops", + "hotpatch", + "incident-response", + "kernel-hardening", + "kubernetes-security", + "linux-security", + "seccomp", + "sre", + "sysctl", + "worm-audit", + "zero-day" + ], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, { "id": 1438519697, "name": "cve-2026-98432-audit", @@ -218,10 +267,10 @@ "description": "Race trigger, heap-reuse oracle, pcap analysis, detection and mitigation tooling for CVE-2026-98432 (Linux IPv4\/TCP ireq_opt use-after-free).", "fork": false, "created_at": "2026-10-30T00:22:53Z", - "updated_at": "2026-11-02T06:34:02Z", - "pushed_at": "2026-11-02T06:33:58Z", - "stargazers_count": 10, - "watchers_count": 10, + "updated_at": "2026-11-02T11:33:00Z", + "pushed_at": "2026-11-02T11:32:56Z", + "stargazers_count": 11, + "watchers_count": 11, "has_discussions": false, "forks_count": 2, "allow_forking": true, @@ -239,7 +288,7 @@ ], "visibility": "public", "forks": 2, - "watchers": 10, + "watchers": 11, "score": 0, "subscribers_count": 0 }, @@ -525,7 +574,7 @@ "description": "CVE-2026-98432 (CVSS 9.8) Linux IPv4 TCP use-after-free full toolkit. Detect kernel exposure, trigger the race, analyze captures, recover KASLR slides, and lock down hosts. Single command, zero setup, standard library only. Built for real-world authorized security testing.", "fork": false, "created_at": "2026-10-30T13:11:26Z", - "updated_at": "2026-11-02T00:50:02Z", + "updated_at": "2026-11-02T08:34:58Z", "pushed_at": "2026-11-01T22:21:27Z", "stargazers_count": 10, "watchers_count": 10, @@ -606,12 +655,12 @@ "description": "You should patch, but not worry about CVE-2026-98432", "fork": false, "created_at": "2026-10-30T15:38:53Z", - "updated_at": "2026-11-02T01:36:37Z", + "updated_at": "2026-11-02T08:25:05Z", "pushed_at": "2026-10-30T16:10:03Z", - "stargazers_count": 9, - "watchers_count": 9, + "stargazers_count": 10, + "watchers_count": 10, "has_discussions": false, - "forks_count": 2, + "forks_count": 3, "allow_forking": true, "is_template": false, "web_commit_signoff_required": false, @@ -619,8 +668,8 @@ "pull_request_creation_policy": "all", "topics": [], "visibility": "public", - "forks": 2, - "watchers": 9, + "forks": 3, + "watchers": 10, "score": 0, "subscribers_count": 0 }, @@ -1022,10 +1071,10 @@ "description": "Interim nftables mitigation for Linux kernel CVE-2026-98432 (IPv4-options UAF in tcp_v4_syn_recv_sock) as a reproducible agent skill", "fork": false, "created_at": "2026-10-31T10:26:51Z", - "updated_at": "2026-11-01T20:47:39Z", + "updated_at": "2026-11-02T08:23:22Z", "pushed_at": "2026-10-31T10:49:53Z", - "stargazers_count": 1, - "watchers_count": 1, + "stargazers_count": 2, + "watchers_count": 2, "has_discussions": false, "forks_count": 0, "allow_forking": true, @@ -1036,7 +1085,7 @@ "topics": [], "visibility": "public", "forks": 0, - "watchers": 1, + "watchers": 2, "score": 0, "subscribers_count": 0 }, @@ -1548,8 +1597,182 @@ "description": null, "fork": false, "created_at": "2026-11-02T04:50:57Z", - "updated_at": "2026-11-02T07:40:34Z", - "pushed_at": "2026-11-02T07:40:30Z", + "updated_at": "2026-11-02T12:51:02Z", + "pushed_at": "2026-11-02T12:51:01Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1442680813, + "name": "cve-2026-98432-root-shell", + "full_name": "thiscitze\/cve-2026-98432-root-shell", + "owner": { + "login": "thiscitze", + "id": 277468862, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/277468862?v=4", + "html_url": "https:\/\/github.com\/thiscitze", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/thiscitze\/cve-2026-98432-root-shell", + "description": "CVE-2026-98432 lab root-shell kit (aid kernel; not a stock remote exploit)", + "fork": false, + "created_at": "2026-11-02T08:07:55Z", + "updated_at": "2026-11-02T08:31:13Z", + "pushed_at": "2026-11-02T08:08:11Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1442691055, + "name": "mitigate-cve-2026-98432", + "full_name": "matthew-hollick\/mitigate-cve-2026-98432", + "owner": { + "login": "matthew-hollick", + "id": 22219356, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/22219356?v=4", + "html_url": "https:\/\/github.com\/matthew-hollick", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/matthew-hollick\/mitigate-cve-2026-98432", + "description": "Use puppet to mitigate CVE-2026-98432 until vendor fixes are available.", + "fork": false, + "created_at": "2026-11-02T08:19:03Z", + "updated_at": "2026-11-02T09:36:48Z", + "pushed_at": "2026-11-02T09:36:44Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1442783691, + "name": "omnicheck_CVE-2026-98432", + "full_name": "Omniversetr\/omnicheck_CVE-2026-98432", + "owner": { + "login": "Omniversetr", + "id": 351383364, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/351383364?v=4", + "html_url": "https:\/\/github.com\/Omniversetr", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/Omniversetr\/omnicheck_CVE-2026-98432", + "description": "Non-destructive checker for CVE-2026-98432 (Linux kernel TCP use-after-free): patch status, exposed listeners and mitigation verification. By OMNIVERSE.", + "fork": false, + "created_at": "2026-11-02T09:51:43Z", + "updated_at": "2026-11-02T10:20:26Z", + "pushed_at": "2026-11-02T10:20:22Z", + "stargazers_count": 1, + "watchers_count": 1, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [ + "cve", + "cve-2026-98432", + "cybersecurity", + "linux-kernel", + "mptcp", + "omniverse", + "security-tools", + "vulnerability-scanner" + ], + "visibility": "public", + "forks": 0, + "watchers": 1, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1442842034, + "name": "CVE-2026-98432-scan", + "full_name": "maxottovon\/CVE-2026-98432-scan", + "owner": { + "login": "maxottovon", + "id": 187645395, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/187645395?v=4", + "html_url": "https:\/\/github.com\/maxottovon", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/maxottovon\/CVE-2026-98432-scan", + "description": " CVE-2026-98432 - LINUX KERNEL IPv4 TCP USE-AFTER-FREE AUDIT CVSS 9.8 (Critical) | Remote Code Execution & Kernel Denial-of-Service", + "fork": false, + "created_at": "2026-11-02T10:50:06Z", + "updated_at": "2026-11-02T10:56:14Z", + "pushed_at": "2026-11-02T10:56:08Z", + "stargazers_count": 0, + "watchers_count": 0, + "has_discussions": false, + "forks_count": 0, + "allow_forking": true, + "is_template": false, + "web_commit_signoff_required": false, + "has_pull_requests": true, + "pull_request_creation_policy": "all", + "topics": [], + "visibility": "public", + "forks": 0, + "watchers": 0, + "score": 0, + "subscribers_count": 0 + }, + { + "id": 1442999803, + "name": "cve-2026-98432-kernel-upgrade", + "full_name": "BigBIueWhale\/cve-2026-98432-kernel-upgrade", + "owner": { + "login": "BigBIueWhale", + "id": 85248530, + "avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/85248530?v=4", + "html_url": "https:\/\/github.com\/BigBIueWhale", + "user_view_type": "public" + }, + "html_url": "https:\/\/github.com\/BigBIueWhale\/cve-2026-98432-kernel-upgrade", + "description": "Safe kernel upgrade for CVE-2026-98432 on Ubuntu 24.04 with NVIDIA, and an analysis of the bug", + "fork": false, + "created_at": "2026-11-02T13:27:20Z", + "updated_at": "2026-11-02T13:28:15Z", + "pushed_at": "2026-11-02T13:27:53Z", "stargazers_count": 0, "watchers_count": 0, "has_discussions": false, diff --git a/2026/CVE-2026-99999.json b/2026/CVE-2026-99999.json index cd927f11cc..0edd63696b 100644 --- a/2026/CVE-2026-99999.json +++ b/2026/CVE-2026-99999.json @@ -80,10 +80,10 @@ "description": "cve-2026-99999-audit script (PwnEscape)", "fork": false, "created_at": "2026-10-17T08:58:26Z", - "updated_at": "2026-10-18T21:51:08Z", + "updated_at": "2026-11-02T13:04:28Z", "pushed_at": "2026-10-17T08:58:33Z", - "stargazers_count": 2, - "watchers_count": 2, + "stargazers_count": 3, + "watchers_count": 3, "has_discussions": false, "forks_count": 1, "allow_forking": true, @@ -94,7 +94,7 @@ "topics": [], "visibility": "public", "forks": 1, - "watchers": 2, + "watchers": 3, "score": 0, "subscribers_count": 0 },