nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/07/09 18:52:15

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-07-10 03:52:15 +09:00
1 parent 71b23a43ba
commit bdd5b98392
65 files changed
+583 -273
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2014/CVE-2014-3566.json
-33
View File
@@ -237,38 +237,5 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1282766907,
"name": "CVE-2014-3566",
"full_name": "Karma4488\/CVE-2014-3566",
"owner": {
"login": "Karma4488",
"id": 199338285,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/199338285?v=4",
"html_url": "https:\/\/github.com\/Karma4488",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Karma4488\/CVE-2014-3566",
"description": null,
"fork": false,
"created_at": "2026-06-28T07:05:35Z",
"updated_at": "2026-06-28T07:07:39Z",
"pushed_at": "2026-06-28T07:07:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2017/CVE-2017-15715.json
+33
View File
@@ -31,5 +31,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1295261018,
"name": "CVE-2017-15715-httpd",
"full_name": "ehsehs5652\/CVE-2017-15715-httpd",
"owner": {
"login": "ehsehs5652",
"id": 296800907,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/296800907?v=4",
"html_url": "https:\/\/github.com\/ehsehs5652",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ehsehs5652\/CVE-2017-15715-httpd",
"description": "whs 4기 컨테이너 과제",
"fork": false,
"created_at": "2026-07-09T13:03:25Z",
"updated_at": "2026-07-09T15:26:24Z",
"pushed_at": "2026-07-09T15:24:29Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2018/CVE-2018-1088.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
"forks_count": 4,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -37,7 +37,7 @@
"redhat"
],
"visibility": "public",
"forks": 4,
"forks": 1,
"watchers": 10,
"score": 0,
"subscribers_count": 0
2018/CVE-2018-14442.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "PoC for Foxit Reader CVE-2018-14442",
"fork": false,
"created_at": "2018-12-28T08:29:28Z",
"updated_at": "2026-05-13T19:46:05Z",
"updated_at": "2026-07-09T12:26:35Z",
"pushed_at": "2018-12-28T09:46:29Z",
"stargazers_count": 58,
"watchers_count": 58,
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-07-09T11:42:05Z",
"pushed_at": "2026-07-09T11:42:00Z",
"updated_at": "2026-07-09T16:45:20Z",
"pushed_at": "2026-07-09T16:43:51Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2020/CVE-2020-1472.json
+2 -2
View File
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-07-09T11:30:38Z",
"pushed_at": "2026-07-09T11:30:26Z",
"updated_at": "2026-07-09T18:19:12Z",
"pushed_at": "2026-07-09T18:19:02Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2020/CVE-2020-9332.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": null,
"fork": false,
"created_at": "2020-05-05T08:06:05Z",
"updated_at": "2022-01-31T04:01:09Z",
"updated_at": "2026-07-09T17:28:01Z",
"pushed_at": "2020-06-17T16:23:26Z",
"stargazers_count": 3,
"watchers_count": 3,
2021/CVE-2021-0394.json
-33
View File
@@ -1,37 +1,4 @@
[
{
"id": 486047327,
"name": "packages_apps_Settings_CVE-2021-0394",
"full_name": "nanopathi\/packages_apps_Settings_CVE-2021-0394",
"owner": {
"login": "nanopathi",
"id": 26024136,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26024136?v=4",
"html_url": "https:\/\/github.com\/nanopathi",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/nanopathi\/packages_apps_Settings_CVE-2021-0394",
"description": null,
"fork": false,
"created_at": "2022-04-27T04:40:51Z",
"updated_at": "2022-04-27T04:40:51Z",
"pushed_at": "2022-04-27T04:40:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
},
{
"id": 685410174,
"name": "platform_art_CVE-2021-0394",
2021/CVE-2021-21974.json
+4 -4
View File
@@ -212,10 +212,10 @@
"description": "自研针对ESXI 堆栈溢出的CVE-2021-21974 POC，只支持项目给出的的目标和环境，用于学习和研究",
"fork": false,
"created_at": "2026-07-08T07:52:01Z",
"updated_at": "2026-07-09T08:07:45Z",
"updated_at": "2026-07-09T14:23:28Z",
"pushed_at": "2026-07-09T07:59:18Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -226,7 +226,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 0
}
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-07-09T11:38:37Z",
"pushed_at": "2026-07-09T11:38:32Z",
"updated_at": "2026-07-09T16:45:19Z",
"pushed_at": "2026-07-09T16:45:11Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-4034.json
+2 -2
View File
@@ -2452,8 +2452,8 @@
"description": "Whitehat School 4기 CVE-2021-4034 분석 및 POC 작성",
"fork": false,
"created_at": "2026-07-09T08:43:31Z",
"updated_at": "2026-07-09T12:15:09Z",
"pushed_at": "2026-07-09T12:15:03Z",
"updated_at": "2026-07-09T15:06:56Z",
"pushed_at": "2026-07-09T15:05:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2021/CVE-2021-41773.json
+33
View File
@@ -4869,5 +4869,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1295303595,
"name": "CVE-2021-41773",
"full_name": "johnwickakash12\/CVE-2021-41773",
"owner": {
"login": "johnwickakash12",
"id": 77766984,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/77766984?v=4",
"html_url": "https:\/\/github.com\/johnwickakash12",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/johnwickakash12\/CVE-2021-41773",
"description": null,
"fork": false,
"created_at": "2026-07-09T13:40:57Z",
"updated_at": "2026-07-09T13:42:14Z",
"pushed_at": "2026-07-09T13:41:48Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2022/CVE-2022-0847.json
+4 -4
View File
@@ -707,10 +707,10 @@
"description": "CVE-2022-0847",
"fork": false,
"created_at": "2022-03-09T02:47:08Z",
"updated_at": "2026-07-09T12:24:52Z",
"updated_at": "2026-07-09T12:31:38Z",
"pushed_at": "2022-03-09T02:47:32Z",
"stargazers_count": 90,
"watchers_count": 90,
"stargazers_count": 91,
"watchers_count": 91,
"has_discussions": false,
"forks_count": 16,
"allow_forking": true,
@@ -723,7 +723,7 @@
],
"visibility": "public",
"forks": 16,
"watchers": 90,
"watchers": 91,
"score": 0,
"subscribers_count": 3
},
2022/CVE-2022-23221.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "vulhub\/H2-database\/CVE-2022-23221",
"fork": false,
"created_at": "2026-07-09T04:32:32Z",
"updated_at": "2026-07-09T12:22:30Z",
"pushed_at": "2026-07-09T12:22:20Z",
"updated_at": "2026-07-09T13:25:48Z",
"pushed_at": "2026-07-09T13:25:16Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2022/CVE-2022-27254.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "PoC for vulnerability in Honda's Remote Keyless System(CVE-2022-27254)",
"fork": false,
"created_at": "2022-03-23T15:03:09Z",
"updated_at": "2026-07-03T14:59:15Z",
"updated_at": "2026-07-09T12:51:18Z",
"pushed_at": "2022-03-26T05:52:15Z",
"stargazers_count": 462,
"watchers_count": 462,
"stargazers_count": 461,
"watchers_count": 461,
"has_discussions": false,
"forks_count": 53,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 53,
"watchers": 462,
"watchers": 461,
"score": 0,
"subscribers_count": 17
}
2023/CVE-2023-32434.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "oob_entry tfp0 kernel exploit for armv7 iOS (iOS 3.0–10.3.4), using CVE-2023-32434. We will publish a write-up detailing the methods in the coming weeks. 🐙",
"fork": false,
"created_at": "2025-08-13T09:19:29Z",
"updated_at": "2026-07-09T09:46:07Z",
"pushed_at": "2026-07-09T09:45:50Z",
"updated_at": "2026-07-09T18:28:01Z",
"pushed_at": "2026-07-09T18:27:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-0670.json
+2 -2
View File
@@ -118,8 +118,8 @@
"description": "🔍 Exploit CVE-2024-0670 in CheckMK agents for local privilege escalation using a robust C++ tool designed for security professionals.",
"fork": false,
"created_at": "2026-01-08T01:32:09Z",
"updated_at": "2026-07-09T10:32:08Z",
"pushed_at": "2026-07-09T10:31:59Z",
"updated_at": "2026-07-09T16:03:07Z",
"pushed_at": "2026-07-09T16:01:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-4367.json
+1 -1
View File
@@ -229,7 +229,7 @@
"fork": false,
"created_at": "2024-06-17T11:39:41Z",
"updated_at": "2026-06-02T18:17:20Z",
"pushed_at": "2026-07-01T18:39:32Z",
"pushed_at": "2026-07-09T14:30:13Z",
"stargazers_count": 10,
"watchers_count": 10,
"has_discussions": false,
2024/CVE-2024-54910.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 913463488,
"name": "CVE-2024-54910",
"full_name": "KrakenEU\/CVE-2024-54910",
"owner": {
"login": "KrakenEU",
"id": 80364768,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/80364768?v=4",
"html_url": "https:\/\/github.com\/KrakenEU",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/KrakenEU\/CVE-2024-54910",
"description": null,
"fork": false,
"created_at": "2025-01-07T18:24:46Z",
"updated_at": "2025-05-26T17:54:36Z",
"pushed_at": "2025-01-10T23:07:06Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"score": 0,
"subscribers_count": 1
}
]
2025/CVE-2025-14847.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Exploit the CVE-2025-14847 vulnerability in MongoDB to disclose sensitive heap memory using a Python script that analyzes responses for new leaked data.",
"fork": false,
"created_at": "2025-07-30T15:52:00Z",
"updated_at": "2026-07-09T10:35:37Z",
"pushed_at": "2026-07-09T10:35:33Z",
"updated_at": "2026-07-09T16:05:57Z",
"pushed_at": "2026-07-09T16:05:23Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1129,8 +1129,8 @@
"description": "🔍 Scan for MongoDB vulnerabilities with MongoBleed, a high-performance tool for detecting CVE-2025-14847 across large networks quickly and efficiently.",
"fork": false,
"created_at": "2026-01-14T06:05:44Z",
"updated_at": "2026-07-09T10:34:57Z",
"pushed_at": "2026-07-09T10:34:49Z",
"updated_at": "2026-07-09T16:05:08Z",
"pushed_at": "2026-07-09T16:04:38Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-24257.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate CVE-2025-24257 with a public PoC for IOGPUFamily kernel heap OOB read\/write and panic analysis",
"fork": false,
"created_at": "2026-04-04T03:42:55Z",
"updated_at": "2026-07-09T11:18:23Z",
"pushed_at": "2026-07-09T11:18:19Z",
"updated_at": "2026-07-09T16:55:45Z",
"pushed_at": "2026-07-09T16:54:20Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-24813.json
+4 -4
View File
@@ -922,10 +922,10 @@
"description": "CVE-2025-24813-Scanner is a Python-based vulnerability scanner that detects Apache Tomcat servers vulnerable to CVE-2025-24813, an arbitrary file upload vulnerability leading to remote code execution (RCE) via insecure PUT method handling and jsessionid exploitation.",
"fork": false,
"created_at": "2025-04-12T19:12:39Z",
"updated_at": "2026-06-22T11:04:40Z",
"updated_at": "2026-07-09T14:36:29Z",
"pushed_at": "2025-04-13T13:18:03Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -938,7 +938,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-24893.json
+33
View File
@@ -1336,5 +1336,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1295518713,
"name": "xwiki-cve-2025-24893",
"full_name": "endusdksla\/xwiki-cve-2025-24893",
"owner": {
"login": "endusdksla",
"id": 117237980,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/117237980?v=4",
"html_url": "https:\/\/github.com\/endusdksla",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/endusdksla\/xwiki-cve-2025-24893",
"description": null,
"fork": false,
"created_at": "2026-07-09T16:09:49Z",
"updated_at": "2026-07-09T16:12:41Z",
"pushed_at": "2026-07-09T16:10:31Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-31258.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔓 Explore CVE-2025-31258 with this PoC demonstrating partial sandbox escape using RemoteViewServices for practical 1-day security practice.",
"fork": false,
"created_at": "2020-06-23T15:20:11Z",
"updated_at": "2026-07-09T09:50:55Z",
"pushed_at": "2026-07-09T09:50:40Z",
"updated_at": "2026-07-09T15:21:21Z",
"pushed_at": "2026-07-09T15:18:16Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-32023.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "PoC & Exploit for CVE-2025-32023 \/ PlaidCTF 2025 \"Zerodeo\"",
"fork": false,
"created_at": "2025-07-06T18:09:11Z",
"updated_at": "2026-07-08T03:47:14Z",
"updated_at": "2026-07-09T17:00:43Z",
"pushed_at": "2025-07-06T18:58:01Z",
"stargazers_count": 211,
"watchers_count": 211,
"stargazers_count": 212,
"watchers_count": 212,
"has_discussions": false,
"forks_count": 40,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 40,
"watchers": 211,
"watchers": 212,
"score": 0,
"subscribers_count": 4
},
2025/CVE-2025-32375.json
+33
View File
@@ -31,5 +31,38 @@
"watchers": 3,
"score": 0,
"subscribers_count": 1
},
{
"id": 1295501913,
"name": "CVE-2025-32375",
"full_name": "surajpandeyp\/CVE-2025-32375",
"owner": {
"login": "surajpandeyp",
"id": 213995986,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/213995986?v=4",
"html_url": "https:\/\/github.com\/surajpandeyp",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/surajpandeyp\/CVE-2025-32375",
"description": null,
"fork": false,
"created_at": "2026-07-09T15:51:01Z",
"updated_at": "2026-07-09T15:53:18Z",
"pushed_at": "2026-07-09T15:52:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-32463.json
+2 -2
View File
@@ -1529,8 +1529,8 @@
"description": "🔍 Demonstrate the CVE-2025-32463 privilege-escalation flaw in sudo's chroot feature with this minimal, reproducible proof of concept environment.",
"fork": false,
"created_at": "2025-09-20T00:42:07Z",
"updated_at": "2026-07-09T09:51:38Z",
"pushed_at": "2026-07-09T09:51:30Z",
"updated_at": "2026-07-09T15:21:32Z",
"pushed_at": "2026-07-09T15:19:16Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-33073.json
+1 -1
View File
@@ -212,7 +212,7 @@
"description": "cupntlm",
"fork": false,
"created_at": "2026-03-09T12:13:03Z",
"updated_at": "2026-04-14T07:42:48Z",
"updated_at": "2026-07-09T13:36:06Z",
"pushed_at": "2026-03-31T11:36:47Z",
"stargazers_count": 3,
"watchers_count": 3,
2025/CVE-2025-36911.json
+5 -5
View File
@@ -365,10 +365,10 @@
"description": "Three-stage Bluetooth DoS attack & Hijack on Fast Pair devices via CVE-2025-36911 (no Ubertooth needed)",
"fork": false,
"created_at": "2026-07-07T16:09:58Z",
"updated_at": "2026-07-09T08:04:26Z",
"pushed_at": "2026-07-07T21:46:01Z",
"stargazers_count": 24,
"watchers_count": 24,
"updated_at": "2026-07-09T18:07:51Z",
"pushed_at": "2026-07-09T17:16:28Z",
"stargazers_count": 26,
"watchers_count": 26,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -384,7 +384,7 @@
],
"visibility": "public",
"forks": 1,
"watchers": 24,
"watchers": 26,
"score": 0,
"subscribers_count": 0
}
2024/CVE-2024-7254.json → 2025/CVE-2025-43782.json
+13 -15
View File
@@ -1,21 +1,21 @@
[
{
"id": 1292888898,
"name": "cve-2024-7254-app-lab",
"full_name": "Ayumu3746221\/cve-2024-7254-app-lab",
"id": 1295660958,
"name": "CVE-2025-43782",
"full_name": "Stickxx00\/CVE-2025-43782",
"owner": {
"login": "Ayumu3746221",
"id": 161027947,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/161027947?v=4",
"html_url": "https:\/\/github.com\/Ayumu3746221",
"login": "Stickxx00",
"id": 221378238,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/221378238?v=4",
"html_url": "https:\/\/github.com\/Stickxx00",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Ayumu3746221\/cve-2024-7254-app-lab",
"description": null,
"html_url": "https:\/\/github.com\/Stickxx00\/CVE-2025-43782",
"description": "OpenSSL TLS handshake buffer overflow",
"fork": false,
"created_at": "2026-07-08T00:01:12Z",
"updated_at": "2026-07-08T00:46:06Z",
"pushed_at": "2026-07-08T00:03:04Z",
"created_at": "2026-07-09T18:38:40Z",
"updated_at": "2026-07-09T18:41:20Z",
"pushed_at": "2026-07-09T18:40:57Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -25,9 +25,7 @@
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"research"
],
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
2025/CVE-2025-44203.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "CVE-2025-44203 - HotelDruid 3.0.0\/3.0.7 - Sensitive Information Disclosure, DoS",
"fork": false,
"created_at": "2025-06-18T18:22:49Z",
"updated_at": "2026-07-06T22:31:46Z",
"pushed_at": "2026-07-06T22:31:42Z",
"updated_at": "2026-07-09T15:36:36Z",
"pushed_at": "2026-07-09T15:34:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-47423.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": null,
"fork": false,
"created_at": "2025-05-07T04:44:38Z",
"updated_at": "2025-05-13T17:16:03Z",
"pushed_at": "2025-05-07T04:49:27Z",
"updated_at": "2026-07-09T12:51:40Z",
"pushed_at": "2026-07-09T12:51:35Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-49844.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🔍 Explore and test the CVE-2025-49844 (RediShell) vulnerability in Redis with this practical lab environment for secure education and research.",
"fork": false,
"created_at": "2019-04-13T07:51:09Z",
"updated_at": "2026-07-09T10:04:27Z",
"pushed_at": "2026-07-09T10:04:05Z",
"updated_at": "2026-07-09T15:34:49Z",
"pushed_at": "2026-07-09T15:32:36Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🚨 Exploit the CVE-2025-49844 Redis Lua interpreter UAF vulnerability to execute arbitrary shellcode and gain persistent backdoor access.",
"fork": false,
"created_at": "2022-04-06T09:27:39Z",
"updated_at": "2026-07-09T10:04:55Z",
"pushed_at": "2026-07-09T10:04:39Z",
"updated_at": "2026-07-09T15:34:27Z",
"pushed_at": "2026-07-09T15:33:08Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-52915.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-07-09T08:25:08Z",
"updated_at": "2026-07-09T15:52:57Z",
"pushed_at": "2026-06-28T05:39:27Z",
"stargazers_count": 845,
"watchers_count": 845,
"stargazers_count": 846,
"watchers_count": 846,
"has_discussions": false,
"forks_count": 124,
"forks_count": 125,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -38,8 +38,8 @@
"vulnerable-driver"
],
"visibility": "public",
"forks": 124,
"watchers": 845,
"forks": 125,
"watchers": 846,
"score": 0,
"subscribers_count": 20
}
2025/CVE-2025-54424.json
+2 -2
View File
@@ -53,8 +53,8 @@
"description": "CVE-2025-54424: 1Panel TLS client cert bypass enables RCE via forged CN 'panel_client' using a bundled scanning and exploitation tool. Affected: <= v2.0.5. 🔐",
"fork": false,
"created_at": "2025-08-14T05:16:16Z",
"updated_at": "2026-07-09T09:46:37Z",
"pushed_at": "2026-07-09T09:46:32Z",
"updated_at": "2026-07-09T18:28:50Z",
"pushed_at": "2026-07-09T18:28:32Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2025/CVE-2025-55182.json
+43 -10
View File
@@ -14,8 +14,8 @@
"description": "🔍 Scan for CVE-2025-55182 risks in React Server Components with this non-intrusive tool that helps detect critical vulnerabilities in your applications.",
"fork": false,
"created_at": "2022-06-17T10:19:10Z",
"updated_at": "2026-07-09T10:25:05Z",
"pushed_at": "2026-07-09T10:24:56Z",
"updated_at": "2026-07-09T15:55:34Z",
"pushed_at": "2026-07-09T15:54:11Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -99,8 +99,8 @@
"description": null,
"fork": false,
"created_at": "2024-11-29T12:32:19Z",
"updated_at": "2026-07-09T10:25:36Z",
"pushed_at": "2026-07-09T10:25:28Z",
"updated_at": "2026-07-09T15:55:28Z",
"pushed_at": "2026-07-09T15:54:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -148,8 +148,8 @@
"description": "🚨 Exploit CVE-2025-55182 to demonstrate RCE in React Server Functions, highlighting risks from insecure prototype references in Next.js applications.",
"fork": false,
"created_at": "2025-06-06T16:34:46Z",
"updated_at": "2026-07-09T10:25:20Z",
"pushed_at": "2026-07-09T10:25:14Z",
"updated_at": "2026-07-09T15:56:00Z",
"pushed_at": "2026-07-09T15:54:36Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -11738,8 +11738,8 @@
"description": "🛡️ Explore CVE-2025-55182, a critical RCE vulnerability in React's Flight Protocol, demonstrating exploitation techniques and mitigation strategies.",
"fork": false,
"created_at": "2025-12-24T14:48:19Z",
"updated_at": "2026-07-09T10:24:58Z",
"pushed_at": "2026-07-09T10:24:53Z",
"updated_at": "2026-07-09T15:55:20Z",
"pushed_at": "2026-07-09T15:54:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -12256,8 +12256,8 @@
"description": "🛡️ Scan and assess vulnerabilities in Next.js\/Waku with the CVE-2025-55182-Scanner, combining static and dynamic analysis for robust security.",
"fork": false,
"created_at": "2026-01-02T01:28:57Z",
"updated_at": "2026-07-09T10:28:55Z",
"pushed_at": "2026-07-09T10:28:51Z",
"updated_at": "2026-07-09T15:59:52Z",
"pushed_at": "2026-07-09T15:58:18Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -15527,5 +15527,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1295533139,
"name": "react2shell",
"full_name": "xp101t\/react2shell",
"owner": {
"login": "xp101t",
"id": 176538849,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/176538849?v=4",
"html_url": "https:\/\/github.com\/xp101t",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/xp101t\/react2shell",
"description": "PoC for CVE-2025-55182 React2Shell",
"fork": false,
"created_at": "2026-07-09T16:25:31Z",
"updated_at": "2026-07-09T16:28:58Z",
"pushed_at": "2026-07-09T16:28:54Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-66398.json
+2 -2
View File
@@ -64,8 +64,8 @@
"description": "Demonstrate exploitation of Signal K Server CVE-2025-66398 allowing unauthenticated attackers to inject backdoor and enable remote code execution.",
"fork": false,
"created_at": "2026-03-23T09:09:21Z",
"updated_at": "2026-07-09T11:12:35Z",
"pushed_at": "2026-07-09T11:12:28Z",
"updated_at": "2026-07-09T16:48:28Z",
"pushed_at": "2026-07-09T16:48:24Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2025/CVE-2025-66478.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "🔧 Fix vulnerable versions in Next.js and React RSC apps with one command to secure against CVE-2025-66478. Improve your app's safety effortlessly.",
"fork": false,
"created_at": "2025-10-01T07:40:09Z",
"updated_at": "2026-07-09T10:26:10Z",
"pushed_at": "2026-07-09T10:26:05Z",
"updated_at": "2026-07-09T15:55:30Z",
"pushed_at": "2026-07-09T15:55:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2025/CVE-2025-68921.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": "🔍 Identify and understand the local privilege escalation vulnerability (CVE-2025-68921) in Nahimic audio software, impacting many gaming laptops.",
"fork": false,
"created_at": "2026-01-24T21:00:41Z",
"updated_at": "2026-07-09T10:41:11Z",
"pushed_at": "2026-07-09T10:40:59Z",
"updated_at": "2026-07-09T16:13:30Z",
"pushed_at": "2026-07-09T16:11:41Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-0776.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Security research and proof-of-concept for CVE-2026-0776 affecting Discord Desktop Client.",
"fork": false,
"created_at": "2026-06-10T14:08:40Z",
"updated_at": "2026-07-09T10:02:46Z",
"updated_at": "2026-07-09T17:06:56Z",
"pushed_at": "2026-07-09T10:02:35Z",
"stargazers_count": 5,
"watchers_count": 5,
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 5,
"watchers": 6,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-14382.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-07-06T09:34:07Z",
"updated_at": "2026-07-08T16:39:42Z",
"updated_at": "2026-07-09T15:16:39Z",
"pushed_at": "2026-07-08T06:54:02Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 3,
"watchers": 5,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-2002.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "CVE-2026-2002 writeup and Proof-of-concept",
"fork": false,
"created_at": "2026-06-22T12:52:04Z",
"updated_at": "2026-06-24T14:50:16Z",
"pushed_at": "2026-06-24T12:21:37Z",
"updated_at": "2026-07-09T16:15:15Z",
"pushed_at": "2026-07-09T16:14:55Z",
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
2026/CVE-2026-20841.json
+4 -4
View File
@@ -14,8 +14,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad via markdown links exploiting unsecured URL protocols.",
"fork": false,
"created_at": "2024-09-22T12:19:06Z",
"updated_at": "2026-07-09T10:56:47Z",
"pushed_at": "2026-07-09T10:56:37Z",
"updated_at": "2026-07-09T16:31:31Z",
"pushed_at": "2026-07-09T16:31:14Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -66,8 +66,8 @@
"description": "🛠 Demonstrate remote code execution in Windows Notepad versions below 11.2510 using the CVE-2026-20841 proof of concept.",
"fork": false,
"created_at": "2026-02-26T05:21:28Z",
"updated_at": "2026-07-09T10:55:57Z",
"pushed_at": "2026-07-09T10:55:48Z",
"updated_at": "2026-07-09T16:30:36Z",
"pushed_at": "2026-07-09T16:30:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-20896.json
+8 -8
View File
@@ -47,10 +47,10 @@
"description": "Public PoC and detector for CVE-2026-20896 (\"Gitea Docker: One Header, Any User\")",
"fork": false,
"created_at": "2026-07-05T17:35:09Z",
"updated_at": "2026-07-09T05:37:24Z",
"updated_at": "2026-07-09T13:29:51Z",
"pushed_at": "2026-07-05T17:35:12Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
@@ -80,10 +80,10 @@
"description": "CVE-2026-20896 Gitea Docker X-WEBAUTH-USER auth bypass checker",
"fork": false,
"created_at": "2026-07-07T20:31:16Z",
"updated_at": "2026-07-09T08:23:39Z",
"updated_at": "2026-07-09T16:57:39Z",
"pushed_at": "2026-07-07T20:31:19Z",
"stargazers_count": 7,
"watchers_count": 7,
"stargazers_count": 8,
"watchers_count": 8,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 7,
"watchers": 8,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-24061.json
+2 -2
View File
@@ -59,8 +59,8 @@
"description": "🚨 Exploit CVE-2026-24061, a critical remote authentication bypass in GNU inetutils-telnetd, for instant root shell access without authentication.",
"fork": false,
"created_at": "2026-02-03T19:46:10Z",
"updated_at": "2026-07-09T10:46:46Z",
"pushed_at": "2026-07-09T10:46:42Z",
"updated_at": "2026-07-09T13:54:50Z",
"pushed_at": "2026-07-09T13:54:09Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-24291.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Exploit Windows local privilege escalation on clients and servers using tested code for CVE-2026-24291 across multiple Windows versions",
"fork": false,
"created_at": "2026-03-26T04:38:27Z",
"updated_at": "2026-07-09T11:14:29Z",
"pushed_at": "2026-07-09T11:14:13Z",
"updated_at": "2026-07-09T16:50:05Z",
"pushed_at": "2026-07-09T16:50:01Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2026/CVE-2026-2441.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate a proof-of-concept exploit for CVE-2026-2441, a high-risk Chrome use-after-free vulnerability in the Blink CSS engine.",
"fork": false,
"created_at": "2026-03-03T14:19:18Z",
"updated_at": "2026-07-09T10:59:01Z",
"pushed_at": "2026-07-09T10:58:54Z",
"updated_at": "2026-07-09T16:34:20Z",
"pushed_at": "2026-07-09T16:34:01Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-2472.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Expose and detail an unauthenticated stored XSS vulnerability in the Google Cloud Vertex AI Python SDK affecting versions 1.98.0 to 1.130.9.",
"fork": false,
"created_at": "2026-03-10T14:40:04Z",
"updated_at": "2026-07-09T11:03:55Z",
"pushed_at": "2026-07-09T11:03:40Z",
"updated_at": "2026-07-09T16:39:33Z",
"pushed_at": "2026-07-09T16:39:19Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2026/CVE-2026-25253.json
+2 -2
View File
@@ -11,10 +11,10 @@
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/msaleme\/red-team-blue-team-agent-fabric",
"description": "470 security tests for AI agent systems — MCP, A2A, x402\/L402, decision governance, benchmark integrity, skill supply chain. AIUC-1 pre-cert, NIST AI 800-2 aligned, CVE-2026-25253 reproduction. v4.4.2",
"description": "540 security tests for AI agent systems — MCP, A2A, x402\/L402, decision governance, benchmark integrity, skill supply chain. AIUC-1 pre-cert, NIST AI 800-2 aligned, CVE-2026-25253 reproduction. v4.9.0",
"fork": false,
"created_at": "2025-11-15T16:04:37Z",
"updated_at": "2026-07-05T13:52:48Z",
"updated_at": "2026-07-09T14:02:28Z",
"pushed_at": "2026-07-05T13:53:11Z",
"stargazers_count": 20,
"watchers_count": 20,
2026/CVE-2026-26114.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-07-03T14:46:50Z",
"updated_at": "2026-07-08T08:38:15Z",
"updated_at": "2026-07-09T14:31:14Z",
"pushed_at": "2026-07-06T06:57:37Z",
"stargazers_count": 20,
"watchers_count": 20,
"stargazers_count": 21,
"watchers_count": 21,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 20,
"watchers": 21,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-28995.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 1,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-31431.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Cross-platform C port of the Copy Fail Linux LPE (CVE-2026-31431). Disclosed 2026-04-29 by Theori \/ Xint.",
"fork": false,
"created_at": "2026-04-29T23:29:14Z",
"updated_at": "2026-07-09T02:23:43Z",
"updated_at": "2026-07-09T15:05:26Z",
"pushed_at": "2026-05-22T11:51:03Z",
"stargazers_count": 431,
"watchers_count": 431,
"stargazers_count": 432,
"watchers_count": 432,
"has_discussions": true,
"forks_count": 120,
"allow_forking": true,
@@ -74,7 +74,7 @@
],
"visibility": "public",
"forks": 120,
"watchers": 431,
"watchers": 432,
"score": 0,
"subscribers_count": 2
},
2026/CVE-2026-31802.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Demonstrate and analyze the CVE-2026-31802 path traversal vulnerability in npm tar, enabling arbitrary file overwrite via symlink extraction.",
"fork": false,
"created_at": "2026-03-28T20:49:46Z",
"updated_at": "2026-07-09T11:15:38Z",
"pushed_at": "2026-07-09T11:15:33Z",
"updated_at": "2026-07-09T16:51:32Z",
"pushed_at": "2026-07-09T16:51:23Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
2026/CVE-2026-3609.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-07-09T08:25:08Z",
"updated_at": "2026-07-09T15:52:57Z",
"pushed_at": "2026-06-28T05:39:27Z",
"stargazers_count": 845,
"watchers_count": 845,
"stargazers_count": 846,
"watchers_count": 846,
"has_discussions": false,
"forks_count": 124,
"forks_count": 125,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -38,8 +38,8 @@
"vulnerable-driver"
],
"visibility": "public",
"forks": 124,
"watchers": 845,
"forks": 125,
"watchers": 846,
"score": 0,
"subscribers_count": 20
}
2026/CVE-2026-43499.json
+12 -12
View File
@@ -14,12 +14,12 @@
"description": "CVE-2026-43499 PoC",
"fork": false,
"created_at": "2026-06-27T04:09:11Z",
"updated_at": "2026-07-09T11:57:17Z",
"updated_at": "2026-07-09T17:05:44Z",
"pushed_at": "2026-06-27T05:04:04Z",
"stargazers_count": 68,
"watchers_count": 68,
"stargazers_count": 74,
"watchers_count": 74,
"has_discussions": false,
"forks_count": 15,
"forks_count": 17,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 15,
"watchers": 68,
"forks": 17,
"watchers": 74,
"score": 0,
"subscribers_count": 0
},
@@ -113,12 +113,12 @@
"description": null,
"fork": false,
"created_at": "2026-07-09T00:41:15Z",
"updated_at": "2026-07-09T00:41:24Z",
"updated_at": "2026-07-09T13:16:36Z",
"pushed_at": "2026-07-09T00:41:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -126,8 +126,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"forks": 2,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-45585.json
+54
View File
@@ -248,5 +248,59 @@
"watchers": 3,
"score": 0,
"subscribers_count": 0
},
{
"id": 1295596797,
"name": "yellowkey-bitlocker",
"full_name": "yellow-key\/yellowkey-bitlocker",
"owner": {
"login": "yellow-key",
"id": 206387868,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206387868?v=4",
"html_url": "https:\/\/github.com\/yellow-key",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/yellow-key\/yellowkey-bitlocker",
"description": "yellow key bitlocker yellow screen bitlocker bitlocker recovery key CVE-2026-45585 microsoft account secure boot bypass command prompt windows 11 windows 10 surface pro uefi firmware encryption key data recovery troubleshoot boot loop cmd unlock drive setup guide tutorial",
"fork": false,
"created_at": "2026-07-09T17:32:32Z",
"updated_at": "2026-07-09T18:43:48Z",
"pushed_at": "2026-07-09T18:43:42Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"bitlocker",
"bitlocker-bypass",
"bitlocker-drive-encryption",
"bitlocker-drive-lock",
"bitlocker-drive-management",
"bitlocker-lock",
"bitlocker-yellowkey",
"cve-2026-45585",
"decryption-tool",
"full-disk-encryption",
"nightmare-eclipse",
"open-source-vulnerabilities",
"vulnerabilities",
"vulnerability",
"yellow",
"yellowkey",
"yellowkey-bitlocker",
"yellowkey-cve",
"yellowkey-exploit",
"yellowkey-vulnerability"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-46215.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2026-06-18T14:39:11Z",
"updated_at": "2026-07-02T13:01:06Z",
"updated_at": "2026-07-09T16:22:07Z",
"pushed_at": "2026-06-18T15:58:56Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 3,
"watchers": 5,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-48908.json
+33
View File
@@ -267,5 +267,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1295426405,
"name": "cve-2026-48908",
"full_name": "cazzysoci\/cve-2026-48908",
"owner": {
"login": "cazzysoci",
"id": 188133560,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/188133560?v=4",
"html_url": "https:\/\/github.com\/cazzysoci",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/cazzysoci\/cve-2026-48908",
"description": null,
"fork": false,
"created_at": "2026-07-09T15:01:18Z",
"updated_at": "2026-07-09T15:19:30Z",
"pushed_at": "2026-07-09T15:19:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-51788.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": null,
"fork": false,
"created_at": "2026-07-08T16:46:45Z",
"updated_at": "2026-07-08T23:24:58Z",
"pushed_at": "2026-07-08T23:24:54Z",
"updated_at": "2026-07-09T13:52:38Z",
"pushed_at": "2026-07-09T13:52:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-52217.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "The VTEX Checkout Service exposes OrderForm data through the endpoints `\/api\/checkout\/pub\/orderForm\/{orderFormId}` and `\/attachments\/*`. These endpoints do not validate the tenant (store account) of the authenticated session against the ownership of the requested OrderForm.",
"fork": false,
"created_at": "2026-07-02T20:06:01Z",
"updated_at": "2026-07-02T20:23:12Z",
"pushed_at": "2026-07-02T20:23:08Z",
"updated_at": "2026-07-09T18:09:28Z",
"pushed_at": "2026-07-09T18:08:48Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-53359.json
+33
View File
@@ -130,5 +130,38 @@
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
{
"id": 1295645815,
"name": "LVM-Januscape",
"full_name": "xj2268-TA\/LVM-Januscape",
"owner": {
"login": "xj2268-TA",
"id": 109901538,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/109901538?v=4",
"html_url": "https:\/\/github.com\/xj2268-TA",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/xj2268-TA\/LVM-Januscape",
"description": "CVE-2026-53359漏洞补丁",
"fork": false,
"created_at": "2026-07-09T18:21:47Z",
"updated_at": "2026-07-09T18:49:55Z",
"pushed_at": "2026-07-09T18:49:22Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-9090.json → 2026/CVE-2026-56876.json
+12 -12
View File
@@ -1,21 +1,21 @@
[
{
"id": 1289566412,
"name": "CVE-2026-9090",
"full_name": "biosGit\/CVE-2026-9090",
"id": 1295292179,
"name": "CVE-2026-56876-POC",
"full_name": "ziad626\/CVE-2026-56876-POC",
"owner": {
"login": "biosGit",
"id": 26824357,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/26824357?v=4",
"html_url": "https:\/\/github.com\/biosGit",
"login": "ziad626",
"id": 213093969,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/213093969?v=4",
"html_url": "https:\/\/github.com\/ziad626",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/biosGit\/CVE-2026-9090",
"description": "Casdoor version 2.362.0",
"html_url": "https:\/\/github.com\/ziad626\/CVE-2026-56876-POC",
"description": "Offical PoC for this cve",
"fork": false,
"created_at": "2026-07-04T23:22:52Z",
"updated_at": "2026-07-05T00:16:02Z",
"pushed_at": "2026-07-05T00:15:58Z",
"created_at": "2026-07-09T13:33:13Z",
"updated_at": "2026-07-09T13:36:13Z",
"pushed_at": "2026-07-09T13:35:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-57517.json
+44
View File
@@ -43,5 +43,49 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1295565313,
"name": "CVE-2026-57517-CWP",
"full_name": "gagaltotal\/CVE-2026-57517-CWP",
"owner": {
"login": "gagaltotal",
"id": 23299078,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/23299078?v=4",
"html_url": "https:\/\/github.com\/gagaltotal",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/gagaltotal\/CVE-2026-57517-CWP",
"description": "Control Web Panel (CWP) vulnerability scenario related to CVE-2026-57517",
"fork": false,
"created_at": "2026-07-09T16:58:21Z",
"updated_at": "2026-07-09T17:25:24Z",
"pushed_at": "2026-07-09T17:25:13Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"blind-sql-injection",
"control-web-panel",
"cve",
"cve-scanning",
"cwp",
"go",
"golang",
"golang-cli",
"rce",
"rce-exploit"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-57851.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-57851",
"fork": false,
"created_at": "2026-06-24T23:57:57Z",
"updated_at": "2026-07-09T11:46:04Z",
"updated_at": "2026-07-09T16:51:17Z",
"pushed_at": "2026-06-25T09:38:19Z",
"stargazers_count": 2,
"watchers_count": 2,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 2,
"watchers": 4,
"score": 0,
"subscribers_count": 0
}
README.md
+33 -19
View File
@@ -960,13 +960,6 @@
- [sourcecode347/CVE-2026-9082-Mass_Scanner](https://github.com/sourcecode347/CVE-2026-9082-Mass_Scanner)
- [eliHiHo/portfolio-drupal-cve-2026-9082](https://github.com/eliHiHo/portfolio-drupal-cve-2026-9082)
### CVE-2026-9090 (2026-05-28)
<code>Casdoor versions 2.362.0 and earlier contain a vulnerability that allows an attacker to bypass authentication by supplying an arbitrary signing certificate. The buildSpCertificateStore function extracts the X.509 certificate directly from the incoming SAMLResponse instead of using the trusted pre-configured Identity Provider certificate, allowing an attacker to forge assertions signed with an attacker-controlled key.
</code>
- [biosGit/CVE-2026-9090](https://github.com/biosGit/CVE-2026-9090)
### CVE-2026-9256 (2026-05-22)
<code>NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when a rewrite directive uses a regex pattern with distinct, overlapping Perl-Compatible Regular Expression (PCRE) captures (for example, ^/((.*))$) and a replacement string that references multiple such captures (for example, $1$2) in a redirect or arguments context. An unauthenticated attacker along with conditions beyond their control can exploit this vulnerability by sending crafted HTTP requests. This may cause a heap buffer overflow in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. \n\n\nNote: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
@@ -3543,6 +3536,7 @@
- [ChanderManiPandey2022/Yellow-Key-Check](https://github.com/ChanderManiPandey2022/Yellow-Key-Check)
- [ChanderManiPandey2022/YellowKey-BitLocker-Bypass-CVE-2026-45585-Detect-Fix-Automatically-via-Microsoft-Intune](https://github.com/ChanderManiPandey2022/YellowKey-BitLocker-Bypass-CVE-2026-45585-Detect-Fix-Automatically-via-Microsoft-Intune)
- [Desireeontrial76/yellowkey-bitlocker](https://github.com/Desireeontrial76/yellowkey-bitlocker)
- [yellow-key/yellowkey-bitlocker](https://github.com/yellow-key/yellowkey-bitlocker)
### CVE-2026-45659 (2026-05-22)
@@ -3966,6 +3960,7 @@
- [ayiezola/CVE-2026-48908](https://github.com/ayiezola/CVE-2026-48908)
- [bayu06802/CVE-2026-48908](https://github.com/bayu06802/CVE-2026-48908)
- [Jenderal92/CVE-2026-48908](https://github.com/Jenderal92/CVE-2026-48908)
- [cazzysoci/cve-2026-48908](https://github.com/cazzysoci/cve-2026-48908)
### CVE-2026-48909 (2026-06-20)
@@ -4290,6 +4285,7 @@
- [0xBlackash/CVE-2026-53359](https://github.com/0xBlackash/CVE-2026-53359)
- [Aoripus-LTD/Januscape-Hotfix](https://github.com/Aoripus-LTD/Januscape-Hotfix)
- [chuzhongyun/CVE-2026-53359-Kernel-Fix](https://github.com/chuzhongyun/CVE-2026-53359-Kernel-Fix)
- [xj2268-TA/LVM-Januscape](https://github.com/xj2268-TA/LVM-Januscape)
### CVE-2026-53360 (2026-07-04)
@@ -4530,12 +4526,20 @@
- [BiiTts/CVE-2026-56782-Gorse-Auth-Bypass](https://github.com/BiiTts/CVE-2026-56782-Gorse-Auth-Bypass)
- [thecodeb0ss/CVE-2026-56782](https://github.com/thecodeb0ss/CVE-2026-56782)
### CVE-2026-56876 (2026-06-26)
<code>extract-zip does not validate symlink targets when extracting zip archives. When processing a malicious zip file containing a symlink with a relative path like '../../../../etc/passwd', extract-zip will extract the symlink without validation, allowing it to point outside the extraction directory. Depending on how extract-zip is used, an attacker could read or write to arbitrary files.
</code>
- [ziad626/CVE-2026-56876-POC](https://github.com/ziad626/CVE-2026-56876-POC)
### CVE-2026-57517 (2026-07-01)
<code>Control Web Panel before 0.9.8.1225 contains a blind SQL injection vulnerability that allows unauthenticated remote attackers to execute arbitrary SQL queries by submitting unsanitized input through the userRes POST parameter at the user endpoint. Attackers can exploit MySQL root privileges obtained via the injection to write arbitrary files using INTO DUMPFILE, enabling deployment of a PHP webshell to the web-accessible roundcube logs directory and achieving remote code execution as the cwpsvc account.
</code>
- [shinthink/CVE-2026-57517](https://github.com/shinthink/CVE-2026-57517)
- [gagaltotal/CVE-2026-57517-CWP](https://github.com/gagaltotal/CVE-2026-57517-CWP)
### CVE-2026-57851 (2026-07-07)
@@ -8533,6 +8537,7 @@
- [hasecto/CVE-2025-24893](https://github.com/hasecto/CVE-2025-24893)
- [vasilysaint/CVE-2025-24893](https://github.com/vasilysaint/CVE-2025-24893)
- [Fomovet/cve-2025-24893](https://github.com/Fomovet/cve-2025-24893)
- [endusdksla/xwiki-cve-2025-24893](https://github.com/endusdksla/xwiki-cve-2025-24893)
### CVE-2025-24963 (2025-02-04)
@@ -10023,6 +10028,7 @@
</code>
- [theGEBIRGE/CVE-2025-32375](https://github.com/theGEBIRGE/CVE-2025-32375)
- [surajpandeyp/CVE-2025-32375](https://github.com/surajpandeyp/CVE-2025-32375)
### CVE-2025-32395 (2025-04-10)
@@ -10904,6 +10910,13 @@
- [crypt0bit/CVE-2025-43541](https://github.com/crypt0bit/CVE-2025-43541)
### CVE-2025-43782 (2025-09-11)
<code>Insecure Direct Object Reference (IDOR) vulnerability in Liferay Portal 7.4.0 through 7.4.3.124, and Liferay DXP 2024.Q2.0 through 2024.Q2.7, 2024.Q1.1 through 2024.Q1.12, and 7.4 GA through update 92 allows remote authenticated users to access a workflow definition by name via the API
</code>
- [Stickxx00/CVE-2025-43782](https://github.com/Stickxx00/CVE-2025-43782)
### CVE-2025-43864 (2025-04-25)
<code>React Router is a router for React. Starting in version 7.2.0 and prior to version 7.5.2, it is possible to force an application to switch to SPA mode by adding a header to the request. If the application uses SSR and is forced to switch to SPA, this causes an error that completely corrupts the page. If a cache system is in place, this allows the response containing the error to be cached, resulting in a cache poisoning that strongly impacts the availability of the application. This issue has been patched in version 7.5.2.
@@ -10998,7 +11011,7 @@
### CVE-2025-44203 (2025-06-20)
<code>In HotelDruid 3.0.7, an unauthenticated attacker can exploit verbose SQL error messages on creadb.php before the 'create database' button is pressed. By sending malformed POST requests to this endpoint, the attacker may obtain the administrator username, password hash, and salt. In some cases, the attack results in a Denial of Service (DoS), preventing the administrator from logging in even with the correct credentials.
<code>In HotelDruid 3.0.0 and 3.0.7, the unauthenticated database-setup endpoint creadb.php can be reached before setup is completed and performs database creation without locking. By sending many concurrent requests, an attacker can trigger a race condition during which verbose SQL error messages disclose the administrator username, password hash, and salt. The same race leaves the setup partially initialized, so the administrator can no longer log in with the credentials set during installation, resulting in a denial of service that requires reinstallation to recover. Remote exploitation additionally requires the installation to allow non-localhost access. The vulnerability was fixed in version 3.0.8.
</code>
- [IvanT7D3/CVE-2025-44203](https://github.com/IvanT7D3/CVE-2025-44203)
@@ -13385,6 +13398,7 @@
- [Herick-Costa/CVE-2025-55182-React2Shell-RCE](https://github.com/Herick-Costa/CVE-2025-55182-React2Shell-RCE)
- [diamorphine666/React2shell-CVE-2025-55182-Exploit](https://github.com/diamorphine666/React2shell-CVE-2025-55182-Exploit)
- [RootEvil333/CVE-2025-55182](https://github.com/RootEvil333/CVE-2025-55182)
- [xp101t/react2shell](https://github.com/xp101t/react2shell)
### CVE-2025-55183 (2025-12-11)
@@ -15653,7 +15667,7 @@
### CVE-2025-67780 (2025-12-11)
<code>SpaceX Starlink Dish devices with firmware 2024.12.04.mr46620 (e.g., on Mini1_prod2) allow administrative actions via unauthenticated LAN gRPC requests, aka MARMALADE 2. The cross-origin policy can be bypassed by omitting a Referer header. In some cases, an attacker's ability to read tilt, rotation, and elevation data via gRPC can make it easier to infer the geographical location of the dish.
<code>SpaceX Starlink Dish devices with firmware 2024.12.04.mr46620 (e.g., on Mini1_prod2) allow administrative actions via unauthenticated LAN gRPC requests, aka MARMALADE 2. The cross-origin policy can be bypassed by omitting a Referer header. In some cases, an attacker's ability to read tilt, rotation, and elevation data via gRPC can make it easier to infer the geographical location of the dish. NOTE: this is disputed by the Supplier because unauthenticated LAN gRPC is intended behavior for certain mobile app integration, and because the cross-origin policy is correctly enforced for gRPC-Web (port 9201), i.e., it is not a valid vulnerability report.
</code>
- [SteveAkawLabs/MARMALADE-2-CVE-2025-67780-Exploit](https://github.com/SteveAkawLabs/MARMALADE-2-CVE-2025-67780-Exploit)
@@ -18342,13 +18356,6 @@
- [RandomRobbieBF/CVE-2024-7135](https://github.com/RandomRobbieBF/CVE-2024-7135)
### CVE-2024-7254 (2024-09-19)
<code>Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e. StackOverflow. Parsing nested groups as unknown fields with DiscardUnknownFieldsParser or Java Protobuf Lite parser, or against Protobuf map fields, creates unbounded recursions that can be abused by an attacker.
</code>
- [Ayumu3746221/cve-2024-7254-app-lab](https://github.com/Ayumu3746221/cve-2024-7254-app-lab)
### CVE-2024-7313 (2024-08-26)
<code>The Shield Security WordPress plugin before 20.0.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.
@@ -26818,6 +26825,13 @@
- [Gumbraise/CVE-2024-54887-PoC](https://github.com/Gumbraise/CVE-2024-54887-PoC)
### CVE-2024-54910 (2025-01-10)
<code>Hasleo Backup Suite Free v4.9.4 and before is vulnerable to Insecure Permissions via the File recovery function.
</code>
- [KrakenEU/CVE-2024-54910](https://github.com/KrakenEU/CVE-2024-54910)
### CVE-2024-54916 (2025-02-11)
<code>An issue in the SharedConfig class of Telegram Android APK v.11.7.0 allows a physically proximate attacker to bypass authentication and escalate privileges by manipulating the return value of the checkPasscode method.
@@ -27840,7 +27854,7 @@
### CVE-2023-2375 (2023-04-28)
<code>Eine kritische Schwachstelle wurde in Ubiquiti EdgeRouter X bis 2.0.9-hotfix.6 gefunden. Es geht hierbei um eine nicht näher spezifizierte Funktion der Komponente Web Management Interface. Mittels Manipulieren des Arguments src mit unbekannten Daten kann eine command injection-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk angegangen werden. Der Exploit steht zur öffentlichen Verfügung.
<code>A weakness has been identified in Ubiquiti EdgeRouter X up to 2.0.9-hotfix.6. Impacted is an unknown function of the component Web Management Interface. Executing a manipulation of the argument src can lead to command injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The presence of this vulnerability remains uncertain at this time. The vendor position is that post-authentication issues are not accepted as vulnerabilities.
</code>
- [0x0jr/HTB-Devvortex-CVE-2023-2375-PoC](https://github.com/0x0jr/HTB-Devvortex-CVE-2023-2375-PoC)
@@ -44127,7 +44141,6 @@
<code>In android_os_Parcel_readString8 of android_os_Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-172655291
</code>
- [nanopathi/packages_apps_Settings_CVE-2021-0394](https://github.com/nanopathi/packages_apps_Settings_CVE-2021-0394)
- [Trinadh465/platform_art_CVE-2021-0394](https://github.com/Trinadh465/platform_art_CVE-2021-0394)
### CVE-2021-0396 (2021-03-10)
@@ -48977,6 +48990,7 @@
- [fxdyx-a/CVE-2021-41773-POC](https://github.com/fxdyx-a/CVE-2021-41773-POC)
- [Joapath/CVE-2021-41773](https://github.com/Joapath/CVE-2021-41773)
- [Park123r/CVE-2021-41773](https://github.com/Park123r/CVE-2021-41773)
- [johnwickakash12/CVE-2021-41773](https://github.com/johnwickakash12/CVE-2021-41773)
### CVE-2021-41784 (2022-08-29)
@@ -66837,6 +66851,7 @@
</code>
- [whisp1830/CVE-2017-15715](https://github.com/whisp1830/CVE-2017-15715)
- [ehsehs5652/CVE-2017-15715-httpd](https://github.com/ehsehs5652/CVE-2017-15715-httpd)
### CVE-2017-15944 (2017-12-11)
@@ -70189,7 +70204,6 @@
- [GoRuGoo/poodle-attack-sandbox](https://github.com/GoRuGoo/poodle-attack-sandbox)
- [josecl200/VC-PoodlePOC](https://github.com/josecl200/VC-PoodlePOC)
- [jmonge12/Home-Network-Vulnerability-Assessment](https://github.com/jmonge12/Home-Network-Vulnerability-Assessment)
- [Karma4488/CVE-2014-3566](https://github.com/Karma4488/CVE-2014-3566)
### CVE-2014-3570 (2015-01-09)