nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/08/03 06:48:57

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-08-03 15:48:57 +09:00
1 parent 57432302d6
commit c908bbff86
69 files changed
+1492 -294
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2011/CVE-2011-1473.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 3,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 3,
"forks": 2,
"watchers": 4,
"score": 0,
"subscribers_count": 0
2014/CVE-2014-6271.json
+33
View File
@@ -3171,5 +3171,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1321199622,
"name": "dmz-security-monitoring-hardening",
"full_name": "FREEGUY-6\/dmz-security-monitoring-hardening",
"owner": {
"login": "FREEGUY-6",
"id": 164496372,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/164496372?v=4",
"html_url": "https:\/\/github.com\/FREEGUY-6",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/FREEGUY-6\/dmz-security-monitoring-hardening",
"description": "CY376 Blue Team project — pfSense DMZ, Suricata IDS\/IPS, and automated host hardening against CVE-2014-6271",
"fork": false,
"created_at": "2026-08-03T04:15:54Z",
"updated_at": "2026-08-03T04:38:48Z",
"pushed_at": "2026-08-03T04:38:37Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2017/CVE-2017-7921.json
+2 -2
View File
@@ -750,8 +750,8 @@
"description": "Hikvision CVE-2017-7921 hack",
"fork": false,
"created_at": "2026-08-02T23:49:12Z",
"updated_at": "2026-08-03T00:06:17Z",
"pushed_at": "2026-08-03T00:06:10Z",
"updated_at": "2026-08-03T00:20:00Z",
"pushed_at": "2026-08-03T00:19:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-08-02T23:38:03Z",
"pushed_at": "2026-08-02T23:37:54Z",
"updated_at": "2026-08-03T04:50:12Z",
"pushed_at": "2026-08-03T04:49:29Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2020/CVE-2020-1472.json
+2 -2
View File
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-08-03T00:08:44Z",
"pushed_at": "2026-08-03T00:08:39Z",
"updated_at": "2026-08-03T03:48:59Z",
"pushed_at": "2026-08-03T03:48:49Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2021/CVE-2021-1675.json
+1 -1
View File
@@ -63,7 +63,7 @@
"forks": 575,
"watchers": 1996,
"score": 0,
"subscribers_count": 38
"subscribers_count": 39
},
{
"id": 381799016,
2021/CVE-2021-3156.json
+4 -4
View File
@@ -516,10 +516,10 @@
"description": null,
"fork": false,
"created_at": "2021-01-30T20:39:58Z",
"updated_at": "2026-08-01T08:12:16Z",
"updated_at": "2026-08-03T06:20:49Z",
"pushed_at": "2021-02-02T17:07:09Z",
"stargazers_count": 1018,
"watchers_count": 1018,
"stargazers_count": 1019,
"watchers_count": 1019,
"has_discussions": false,
"forks_count": 235,
"allow_forking": true,
@@ -530,7 +530,7 @@
"topics": [],
"visibility": "public",
"forks": 235,
"watchers": 1018,
"watchers": 1019,
"score": 0,
"subscribers_count": 25
},
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-08-02T23:34:58Z",
"pushed_at": "2026-08-02T23:34:53Z",
"updated_at": "2026-08-03T04:48:28Z",
"pushed_at": "2026-08-03T04:48:16Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2021/CVE-2021-4034.json
+1 -1
View File
@@ -135,7 +135,7 @@
"forks": 205,
"watchers": 1319,
"score": 0,
"subscribers_count": 13
"subscribers_count": 14
},
{
"id": 452321441,
2021/CVE-2021-42278.json
+4 -4
View File
@@ -52,10 +52,10 @@
"description": "Exploiting CVE-2021-42278 and CVE-2021-42287 to impersonate DA from standard domain user ",
"fork": false,
"created_at": "2021-12-13T10:28:12Z",
"updated_at": "2026-08-01T18:37:46Z",
"updated_at": "2026-08-03T06:21:03Z",
"pushed_at": "2023-01-29T03:31:27Z",
"stargazers_count": 1015,
"watchers_count": 1015,
"stargazers_count": 1016,
"watchers_count": 1016,
"has_discussions": false,
"forks_count": 132,
"allow_forking": true,
@@ -66,7 +66,7 @@
"topics": [],
"visibility": "public",
"forks": 132,
"watchers": 1015,
"watchers": 1016,
"score": 0,
"subscribers_count": 13
},
2021/CVE-2021-42287.json
+1 -1
View File
@@ -30,7 +30,7 @@
"forks": 316,
"watchers": 1410,
"score": 0,
"subscribers_count": 24
"subscribers_count": 25
},
{
"id": 437991499,
2022/CVE-2022-38694.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "This is a one-time signature verification bypass. For persistent signature verification bypass, check https:\/\/github.com\/TomKing062\/CVE-2022-38691_38692",
"fork": false,
"created_at": "2023-06-10T08:31:26Z",
"updated_at": "2026-08-02T22:02:41Z",
"updated_at": "2026-08-03T03:08:26Z",
"pushed_at": "2025-06-14T16:55:26Z",
"stargazers_count": 580,
"watchers_count": 580,
"stargazers_count": 581,
"watchers_count": 581,
"has_discussions": true,
"forks_count": 75,
"allow_forking": true,
@@ -31,7 +31,7 @@
],
"visibility": "public",
"forks": 75,
"watchers": 580,
"watchers": 581,
"score": 0,
"subscribers_count": 13
},
2023/CVE-2023-21768.json
+15 -13
View File
@@ -470,34 +470,36 @@
"subscribers_count": 0
},
{
"id": 1266070651,
"id": 1270248169,
"name": "CVE-2023-21768",
"full_name": "r4uzn\/CVE-2023-21768",
"full_name": "leandrofleury\/CVE-2023-21768",
"owner": {
"login": "r4uzn",
"id": 41263291,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/41263291?v=4",
"html_url": "https:\/\/github.com\/r4uzn",
"login": "leandrofleury",
"id": 284046878,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/284046878?v=4",
"html_url": "https:\/\/github.com\/leandrofleury",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/r4uzn\/CVE-2023-21768",
"html_url": "https:\/\/github.com\/leandrofleury\/CVE-2023-21768",
"description": null,
"fork": false,
"created_at": "2026-06-11T09:48:22Z",
"updated_at": "2026-06-16T06:57:46Z",
"pushed_at": "2026-06-16T06:57:42Z",
"created_at": "2026-06-15T14:25:33Z",
"updated_at": "2026-06-18T12:45:53Z",
"pushed_at": "2026-06-11T09:49:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"topics": [
"estudo"
],
"visibility": "public",
"forks": 1,
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
2023/CVE-2023-45866.json
-33
View File
@@ -300,38 +300,5 @@
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1301432189,
"name": "CVE-2023-45866",
"full_name": "0xBADACTOR\/CVE-2023-45866",
"owner": {
"login": "0xBADACTOR",
"id": 298144492,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/298144492?v=4",
"html_url": "https:\/\/github.com\/0xBADACTOR",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xBADACTOR\/CVE-2023-45866",
"description": "This wizard is built to make life easier when you want to execute a Bluetooth HID exploit against an Android phone and walk away with remote access to it. The exploit itself (CVE-2023-45866, the Bluetooth keyboard impersonation bug) has been around for years and the raw pieces are scattered across the web...",
"fork": false,
"created_at": "2026-07-15T09:24:13Z",
"updated_at": "2026-07-15T09:45:06Z",
"pushed_at": "2026-07-15T09:45:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2024/CVE-2024-23897.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": "CVE-2024-23897",
"fork": false,
"created_at": "2024-01-26T09:44:32Z",
"updated_at": "2026-07-17T16:40:12Z",
"updated_at": "2026-08-03T02:02:01Z",
"pushed_at": "2024-01-28T06:47:28Z",
"stargazers_count": 207,
"watchers_count": 207,
"stargazers_count": 208,
"watchers_count": 208,
"has_discussions": false,
"forks_count": 35,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 35,
"watchers": 207,
"watchers": 208,
"score": 0,
"subscribers_count": 1
},
2024/CVE-2024-24549.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2024-08-02T21:05:34Z",
"updated_at": "2026-07-17T16:38:33Z",
"updated_at": "2026-08-03T02:12:27Z",
"pushed_at": "2024-09-01T14:10:12Z",
"stargazers_count": 10,
"watchers_count": 10,
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 10,
"watchers": 11,
"score": 0,
"subscribers_count": 1
},
2024/CVE-2024-27198.json
+2 -2
View File
@@ -678,8 +678,8 @@
"description": "My write-ups from CyberDefenders' Blue Team labs, solved using Wireshark. Covers TeamCity RCE (CVE-2024-27198), XSS session hijacking, and LLMNR\/NBT-NS credential poisoning — each with step-by-step packet analysis, screenshots, and a full Wireshark filter\/command reference. Personal SOC Analyst Tier 1 learning log.",
"fork": false,
"created_at": "2026-08-01T09:25:34Z",
"updated_at": "2026-08-02T10:26:54Z",
"pushed_at": "2026-08-02T10:26:34Z",
"updated_at": "2026-08-03T02:15:53Z",
"pushed_at": "2026-08-03T02:15:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-38077.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": null,
"fork": false,
"created_at": "2024-08-09T01:24:59Z",
"updated_at": "2026-07-17T16:38:35Z",
"updated_at": "2026-08-03T02:12:19Z",
"pushed_at": "2024-08-09T01:19:08Z",
"stargazers_count": 10,
"watchers_count": 10,
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 208,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 208,
"watchers": 10,
"watchers": 11,
"score": 0,
"subscribers_count": 0
},
2024/CVE-2024-43044.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "The script checks Jenkins endpoints for CVE-2024-43044 by retrieving the Jenkins version from the innstance and comparing it against known vulnerable version ranges.",
"fork": false,
"created_at": "2024-08-08T08:28:26Z",
"updated_at": "2026-07-17T16:38:47Z",
"updated_at": "2026-08-03T02:11:02Z",
"pushed_at": "2024-08-08T09:32:00Z",
"stargazers_count": 22,
"watchers_count": 22,
"stargazers_count": 23,
"watchers_count": 23,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
@@ -32,7 +32,7 @@
],
"visibility": "public",
"forks": 6,
"watchers": 22,
"watchers": 23,
"score": 0,
"subscribers_count": 1
},
2024/CVE-2024-4577.json
+4 -4
View File
@@ -549,10 +549,10 @@
"description": "[漏洞复现] 全球首款利用PHP默认环境（XAMPP）的CVE-2024-4577 PHP-CGI RCE 漏洞 EXP。",
"fork": false,
"created_at": "2024-06-08T13:04:45Z",
"updated_at": "2026-07-31T12:18:46Z",
"updated_at": "2026-08-03T02:13:33Z",
"pushed_at": "2024-07-21T20:27:03Z",
"stargazers_count": 162,
"watchers_count": 162,
"stargazers_count": 163,
"watchers_count": 163,
"has_discussions": false,
"forks_count": 33,
"allow_forking": true,
@@ -563,7 +563,7 @@
"topics": [],
"visibility": "public",
"forks": 33,
"watchers": 162,
"watchers": 163,
"score": 0,
"subscribers_count": 1
},
2024/CVE-2024-6387.json
+4 -4
View File
@@ -396,10 +396,10 @@
"description": "SSH RCE PoC CVE-2024-6387",
"fork": false,
"created_at": "2024-07-02T01:08:05Z",
"updated_at": "2026-07-18T12:52:54Z",
"updated_at": "2026-08-03T02:12:31Z",
"pushed_at": "2024-07-02T01:13:22Z",
"stargazers_count": 10,
"watchers_count": 10,
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 10,
"allow_forking": true,
@@ -410,7 +410,7 @@
"topics": [],
"visibility": "public",
"forks": 10,
"watchers": 10,
"watchers": 11,
"score": 0,
"subscribers_count": 2
},
2025/CVE-2025-14783.json
-40
View File
@@ -1,40 +0,0 @@
[
{
"id": 1126373103,
"name": "CVE-2025-14783-POC",
"full_name": "ZeroEthical\/CVE-2025-14783-POC",
"owner": {
"login": "ZeroEthical",
"id": 194415982,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/194415982?v=4",
"html_url": "https:\/\/github.com\/ZeroEthical",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ZeroEthical\/CVE-2025-14783-POC",
"description": "🧨 CVE-2025-14783: Easy Digital Downloads Account Takeover PoC",
"fork": false,
"created_at": "2026-01-01T19:16:03Z",
"updated_at": "2026-02-02T23:12:13Z",
"pushed_at": "2026-01-01T19:30:28Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"cve",
"poc",
"vunerability",
"wordpress"
],
"visibility": "public",
"forks": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-1974.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2025-1974",
"fork": false,
"created_at": "2025-03-24T21:51:04Z",
"updated_at": "2025-10-31T02:13:00Z",
"updated_at": "2026-08-03T04:47:49Z",
"pushed_at": "2025-04-02T19:39:22Z",
"stargazers_count": 90,
"watchers_count": 90,
"stargazers_count": 91,
"watchers_count": 91,
"has_discussions": false,
"forks_count": 29,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 29,
"watchers": 90,
"watchers": 91,
"score": 0,
"subscribers_count": 4
},
2025/CVE-2025-24799.json
+8 -8
View File
@@ -19,7 +19,7 @@
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -33,7 +33,7 @@
"exploit"
],
"visibility": "public",
"forks": 1,
"forks": 2,
"watchers": 4,
"score": 0,
"subscribers_count": 1
@@ -53,12 +53,12 @@
"description": "CVE-2025-24799 Exploit: GLPI - Unauthenticated SQL Injection",
"fork": false,
"created_at": "2025-04-15T04:57:39Z",
"updated_at": "2026-07-21T18:23:47Z",
"updated_at": "2026-08-03T01:21:09Z",
"pushed_at": "2025-04-15T20:42:54Z",
"stargazers_count": 32,
"watchers_count": 32,
"stargazers_count": 33,
"watchers_count": 33,
"has_discussions": false,
"forks_count": 14,
"forks_count": 15,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -71,8 +71,8 @@
"glpi"
],
"visibility": "public",
"forks": 14,
"watchers": 32,
"forks": 15,
"watchers": 33,
"score": 0,
"subscribers_count": 1
},
2025/CVE-2025-29927.json
+66 -33
View File
@@ -1533,39 +1533,6 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 956399187,
"name": "0xMiddleware",
"full_name": "luq0x\/0xMiddleware",
"owner": {
"login": "luq0x",
"id": 128091911,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/128091911?v=4",
"html_url": "https:\/\/github.com\/luq0x",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/luq0x\/0xMiddleware",
"description": "CVE-2025-29927: Next.js Middleware Exploit",
"fork": false,
"created_at": "2025-03-28T07:31:36Z",
"updated_at": "2025-04-14T13:30:49Z",
"pushed_at": "2025-03-28T07:49:43Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 1
},
{
"id": 956502693,
"name": "NextSploit",
@@ -1777,6 +1744,39 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 957469668,
"name": "0xMiddleware",
"full_name": "Ev3rPalestine\/0xMiddleware",
"owner": {
"login": "Ev3rPalestine",
"id": 141242091,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/141242091?v=4",
"html_url": "https:\/\/github.com\/Ev3rPalestine",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Ev3rPalestine\/0xMiddleware",
"description": "CVE-2025-29927: Next.js Middleware Exploit",
"fork": false,
"created_at": "2025-03-30T13:04:55Z",
"updated_at": "2025-03-30T13:04:55Z",
"pushed_at": "2025-03-28T07:49:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 958639017,
"name": "cve-2025-29927-poc",
@@ -4030,5 +4030,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1321316406,
"name": "nextjs-middleware-auth-bypass-lab",
"full_name": "berraesen\/nextjs-middleware-auth-bypass-lab",
"owner": {
"login": "berraesen",
"id": 163033692,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/163033692?v=4",
"html_url": "https:\/\/github.com\/berraesen",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/berraesen\/nextjs-middleware-auth-bypass-lab",
"description": "Bu laboratuvar ortamını sıfırdan kendim oluşturdum. Next.js uygulaması içerisinde giriş, ana sayfa ve admin sayfalarını hazırladım. Middleware ile yetkilendirme mekanizmasını kurduktan sonra Burp Suite kullanarak CVE-2025-29927 zafiyetini kontrollü ortamda gösterdim.",
"fork": false,
"created_at": "2026-08-03T06:21:14Z",
"updated_at": "2026-08-03T06:33:37Z",
"pushed_at": "2026-08-03T06:32:30Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-50154.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "POCs for CVE-2025-50154 and CVE-2025-59214, zero day vulnerabilities on windows file explorer disclosing NTLMv2-SSP without user interaction. It is a bypass for the CVE-2025-24054 Security Patch",
"fork": false,
"created_at": "2025-08-13T08:16:29Z",
"updated_at": "2026-07-17T16:25:17Z",
"updated_at": "2026-08-03T03:06:51Z",
"pushed_at": "2025-10-16T10:53:07Z",
"stargazers_count": 55,
"watchers_count": 55,
"stargazers_count": 56,
"watchers_count": 56,
"has_discussions": false,
"forks_count": 15,
"allow_forking": true,
@@ -68,7 +68,7 @@
],
"visibility": "public",
"forks": 15,
"watchers": 55,
"watchers": 56,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-55182.json
+8 -8
View File
@@ -766,10 +766,10 @@
"description": "Security scanner for CVE-2025-55182 - Critical RCE vulnerability in React Server Components. Scan npm\/pnpm\/yarn lockfiles, Docker images, SBOMs, and live URLs. Auto-fix, SARIF output, GitHub Actions, Vercel integration, and runtime protection middleware.",
"fork": false,
"created_at": "2025-12-04T05:54:18Z",
"updated_at": "2026-05-26T22:51:43Z",
"updated_at": "2026-08-03T05:05:07Z",
"pushed_at": "2025-12-07T07:59:50Z",
"stargazers_count": 58,
"watchers_count": 58,
"stargazers_count": 59,
"watchers_count": 59,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -786,7 +786,7 @@
],
"visibility": "public",
"forks": 7,
"watchers": 58,
"watchers": 59,
"score": 0,
"subscribers_count": 4
},
@@ -2154,10 +2154,10 @@
"description": "Supports RSC fingerprinting and exploitation of the React component vulnerability CVE-2025-55182.",
"fork": false,
"created_at": "2025-12-05T05:53:25Z",
"updated_at": "2026-07-30T02:49:41Z",
"updated_at": "2026-08-03T02:57:51Z",
"pushed_at": "2025-12-05T08:11:16Z",
"stargazers_count": 584,
"watchers_count": 584,
"stargazers_count": 585,
"watchers_count": 585,
"has_discussions": false,
"forks_count": 85,
"allow_forking": true,
@@ -2168,7 +2168,7 @@
"topics": [],
"visibility": "public",
"forks": 85,
"watchers": 584,
"watchers": 585,
"score": 0,
"subscribers_count": 3
},
2025/CVE-2025-69256.json
+1 -1
View File
@@ -48,7 +48,7 @@
"fork": false,
"created_at": "2026-04-27T20:12:08Z",
"updated_at": "2026-08-01T20:18:58Z",
"pushed_at": "2026-08-01T20:19:01Z",
"pushed_at": "2026-08-03T04:15:31Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": true,
2026/CVE-2026-0101.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1321088444,
"name": "CVE-2026-0101-BLE-Address-Spoofing-via-Weak-Resolvable-Private-Address",
"full_name": "George0Papasotiriou\/CVE-2026-0101-BLE-Address-Spoofing-via-Weak-Resolvable-Private-Address",
"owner": {
"login": "George0Papasotiriou",
"id": 123271840,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123271840?v=4",
"html_url": "https:\/\/github.com\/George0Papasotiriou",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/George0Papasotiriou\/CVE-2026-0101-BLE-Address-Spoofing-via-Weak-Resolvable-Private-Address",
"description": null,
"fork": false,
"created_at": "2026-08-03T02:01:49Z",
"updated_at": "2026-08-03T02:03:11Z",
"pushed_at": "2026-08-03T02:03:07Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-1010.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1321070964,
"name": "CVE-2026-1010-WebSocket-Connection-Smuggling-via-Malformed-Upgrade-Header",
"full_name": "George0Papasotiriou\/CVE-2026-1010-WebSocket-Connection-Smuggling-via-Malformed-Upgrade-Header",
"owner": {
"login": "George0Papasotiriou",
"id": 123271840,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123271840?v=4",
"html_url": "https:\/\/github.com\/George0Papasotiriou",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/George0Papasotiriou\/CVE-2026-1010-WebSocket-Connection-Smuggling-via-Malformed-Upgrade-Header",
"description": null,
"fork": false,
"created_at": "2026-08-03T01:38:41Z",
"updated_at": "2026-08-03T01:40:16Z",
"pushed_at": "2026-08-03T01:40:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-10702.json
+2 -2
View File
@@ -47,8 +47,8 @@
"description": null,
"fork": false,
"created_at": "2026-08-01T04:19:00Z",
"updated_at": "2026-08-01T04:53:20Z",
"pushed_at": "2026-08-01T04:53:13Z",
"updated_at": "2026-08-03T04:56:28Z",
"pushed_at": "2026-08-03T04:56:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-1111.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1321059705,
"name": "CVE-2026-1111-Smart-Contract-Cross-Function-Reentrancy",
"full_name": "George0Papasotiriou\/CVE-2026-1111-Smart-Contract-Cross-Function-Reentrancy",
"owner": {
"login": "George0Papasotiriou",
"id": 123271840,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123271840?v=4",
"html_url": "https:\/\/github.com\/George0Papasotiriou",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/George0Papasotiriou\/CVE-2026-1111-Smart-Contract-Cross-Function-Reentrancy",
"description": null,
"fork": false,
"created_at": "2026-08-03T01:17:45Z",
"updated_at": "2026-08-03T01:19:44Z",
"pushed_at": "2026-08-03T01:19:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-12940.json
+45
View File
@@ -0,0 +1,45 @@
[
{
"id": 1321148584,
"name": "CVE-2026-12940-Langflow-Unauth-RCE",
"full_name": "BiiTts\/CVE-2026-12940-Langflow-Unauth-RCE",
"owner": {
"login": "BiiTts",
"id": 149285563,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/149285563?v=4",
"html_url": "https:\/\/github.com\/BiiTts",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/BiiTts\/CVE-2026-12940-Langflow-Unauth-RCE",
"description": "CVE-2026-12940 — Langflow OSS <=1.10.1 unauthenticated RCE via MCP stdio environment-variable injection (SHELLOPTS\/PS4). Author PoC + source analysis + lab.",
"fork": false,
"created_at": "2026-08-03T03:11:39Z",
"updated_at": "2026-08-03T03:15:24Z",
"pushed_at": "2026-08-03T03:15:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"command-injection",
"cve-2026-12940",
"exploit",
"langflow",
"mcp",
"poc",
"rce",
"security",
"unauthenticated"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-17001.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1321138712,
"name": "CVE-2026-17001",
"full_name": "llaytynher\/CVE-2026-17001",
"owner": {
"login": "llaytynher",
"id": 127370919,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/127370919?v=4",
"html_url": "https:\/\/github.com\/llaytynher",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/llaytynher\/CVE-2026-17001",
"description": null,
"fork": false,
"created_at": "2026-08-03T02:58:50Z",
"updated_at": "2026-08-03T03:00:23Z",
"pushed_at": "2026-08-03T03:00:02Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-2020.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1321073385,
"name": "CVE-2026-2020-SSRF-via-URL-Parser-Differential",
"full_name": "George0Papasotiriou\/CVE-2026-2020-SSRF-via-URL-Parser-Differential",
"owner": {
"login": "George0Papasotiriou",
"id": 123271840,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123271840?v=4",
"html_url": "https:\/\/github.com\/George0Papasotiriou",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/George0Papasotiriou\/CVE-2026-2020-SSRF-via-URL-Parser-Differential",
"description": null,
"fork": false,
"created_at": "2026-08-03T01:41:50Z",
"updated_at": "2026-08-03T01:43:43Z",
"pushed_at": "2026-08-03T01:43:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-2222.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1321056859,
"name": "CVE-2026-2222-MQTT-Broker-CONNECT-Packet-Heap-Overflow",
"full_name": "George0Papasotiriou\/CVE-2026-2222-MQTT-Broker-CONNECT-Packet-Heap-Overflow",
"owner": {
"login": "George0Papasotiriou",
"id": 123271840,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123271840?v=4",
"html_url": "https:\/\/github.com\/George0Papasotiriou",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/George0Papasotiriou\/CVE-2026-2222-MQTT-Broker-CONNECT-Packet-Heap-Overflow",
"description": null,
"fork": false,
"created_at": "2026-08-03T01:14:02Z",
"updated_at": "2026-08-03T01:16:01Z",
"pushed_at": "2026-08-03T01:15:58Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-3030.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1321075382,
"name": "CVE-2026-3030-Prototype-Pollution-in-JSON-Merge-Patch",
"full_name": "George0Papasotiriou\/CVE-2026-3030-Prototype-Pollution-in-JSON-Merge-Patch",
"owner": {
"login": "George0Papasotiriou",
"id": 123271840,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123271840?v=4",
"html_url": "https:\/\/github.com\/George0Papasotiriou",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/George0Papasotiriou\/CVE-2026-3030-Prototype-Pollution-in-JSON-Merge-Patch",
"description": null,
"fork": false,
"created_at": "2026-08-03T01:44:30Z",
"updated_at": "2026-08-03T01:46:07Z",
"pushed_at": "2026-08-03T01:46:04Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-3333.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1321054199,
"name": "CVE-2026-3333-DNS-Rebinding-to-Steal-Cloud-Metadata",
"full_name": "George0Papasotiriou\/CVE-2026-3333-DNS-Rebinding-to-Steal-Cloud-Metadata",
"owner": {
"login": "George0Papasotiriou",
"id": 123271840,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123271840?v=4",
"html_url": "https:\/\/github.com\/George0Papasotiriou",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/George0Papasotiriou\/CVE-2026-3333-DNS-Rebinding-to-Steal-Cloud-Metadata",
"description": null,
"fork": false,
"created_at": "2026-08-03T01:10:34Z",
"updated_at": "2026-08-03T01:13:26Z",
"pushed_at": "2026-08-03T01:13:23Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-33937.json
+33
View File
@@ -31,5 +31,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1321323033,
"name": "CVE-2026-33937",
"full_name": "c0gnit00\/CVE-2026-33937",
"owner": {
"login": "c0gnit00",
"id": 172115438,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/172115438?v=4",
"html_url": "https:\/\/github.com\/c0gnit00",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/c0gnit00\/CVE-2026-33937",
"description": "Python POC, Exploit for Handlebars.js AST Injection RCE, Handlebars.js versions 4.0.0 through 4.7.8 are affected. CVSS score: 9.8 Critical.",
"fork": false,
"created_at": "2026-08-03T06:27:58Z",
"updated_at": "2026-08-03T06:33:03Z",
"pushed_at": "2026-08-03T06:32:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-3456.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": null,
"fork": false,
"created_at": "2026-08-03T00:48:30Z",
"updated_at": "2026-08-03T00:49:29Z",
"pushed_at": "2026-08-03T00:49:25Z",
"updated_at": "2026-08-03T00:50:09Z",
"pushed_at": "2026-08-03T00:50:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-39987.json
+33
View File
@@ -196,5 +196,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1321328198,
"name": "CVE-2026-39987_PoC",
"full_name": "Wind010\/CVE-2026-39987_PoC",
"owner": {
"login": "Wind010",
"id": 17187851,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/17187851?v=4",
"html_url": "https:\/\/github.com\/Wind010",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Wind010\/CVE-2026-39987_PoC",
"description": "A proof-of-concept for CVE-2026-39987",
"fork": false,
"created_at": "2026-08-03T06:32:49Z",
"updated_at": "2026-08-03T06:33:05Z",
"pushed_at": "2026-08-03T06:32:50Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-4040.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1321077231,
"name": "CVE-2026-4040-Race-Condition-in-File-Upload-Leading-to-RCE",
"full_name": "George0Papasotiriou\/CVE-2026-4040-Race-Condition-in-File-Upload-Leading-to-RCE",
"owner": {
"login": "George0Papasotiriou",
"id": 123271840,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123271840?v=4",
"html_url": "https:\/\/github.com\/George0Papasotiriou",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/George0Papasotiriou\/CVE-2026-4040-Race-Condition-in-File-Upload-Leading-to-RCE",
"description": null,
"fork": false,
"created_at": "2026-08-03T01:46:54Z",
"updated_at": "2026-08-03T01:48:22Z",
"pushed_at": "2026-08-03T01:48:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-42533.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Static config scanner that flags nginx configs vulnerable to the complex_value two-pass capture-clobbering bug (regex map + regex capture → heap overflow \/ info leak).",
"fork": false,
"created_at": "2026-07-04T11:05:56Z",
"updated_at": "2026-08-01T06:35:49Z",
"updated_at": "2026-08-03T02:21:41Z",
"pushed_at": "2026-07-20T15:12:42Z",
"stargazers_count": 28,
"watchers_count": 28,
"stargazers_count": 29,
"watchers_count": 29,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 5,
"watchers": 28,
"watchers": 29,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-43499.json
+50 -50
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-43499 PoC",
"fork": false,
"created_at": "2026-06-27T04:09:11Z",
"updated_at": "2026-08-02T13:52:45Z",
"updated_at": "2026-08-03T03:44:25Z",
"pushed_at": "2026-06-27T05:04:04Z",
"stargazers_count": 138,
"watchers_count": 138,
"stargazers_count": 139,
"watchers_count": 139,
"has_discussions": false,
"forks_count": 36,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 36,
"watchers": 138,
"watchers": 139,
"score": 0,
"subscribers_count": 1
},
@@ -282,10 +282,10 @@
"description": "CVE-2026-43499 Implementation for 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k",
"fork": false,
"created_at": "2026-07-12T10:15:03Z",
"updated_at": "2026-08-02T18:10:01Z",
"updated_at": "2026-08-03T03:44:09Z",
"pushed_at": "2026-07-15T22:46:59Z",
"stargazers_count": 210,
"watchers_count": 210,
"stargazers_count": 211,
"watchers_count": 211,
"has_discussions": false,
"forks_count": 80,
"allow_forking": true,
@@ -296,7 +296,7 @@
"topics": [],
"visibility": "public",
"forks": 80,
"watchers": 210,
"watchers": 211,
"score": 0,
"subscribers_count": 1
},
@@ -348,10 +348,10 @@
"description": "GhostLock (CVE-2026-43499) kernel exploit for OnePlus devices with locked bootloader",
"fork": false,
"created_at": "2026-07-12T16:05:24Z",
"updated_at": "2026-08-02T21:46:07Z",
"updated_at": "2026-08-03T06:17:49Z",
"pushed_at": "2026-08-02T16:12:07Z",
"stargazers_count": 153,
"watchers_count": 153,
"stargazers_count": 156,
"watchers_count": 156,
"has_discussions": false,
"forks_count": 38,
"allow_forking": true,
@@ -369,7 +369,7 @@
],
"visibility": "public",
"forks": 38,
"watchers": 153,
"watchers": 156,
"score": 0,
"subscribers_count": 4
},
@@ -393,7 +393,7 @@
"stargazers_count": 92,
"watchers_count": 92,
"has_discussions": false,
"forks_count": 26,
"forks_count": 27,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -401,7 +401,7 @@
"pull_request_creation_policy": "collaborators_only",
"topics": [],
"visibility": "public",
"forks": 26,
"forks": 27,
"watchers": 92,
"score": 0,
"subscribers_count": 1
@@ -586,10 +586,10 @@
"description": "Vulnerability analysis and Proof of Concept (PoC) for CVE-2026-43499 affecting Xiaomi devices. For educational and research purposes only.",
"fork": false,
"created_at": "2026-07-14T14:21:27Z",
"updated_at": "2026-08-02T18:23:48Z",
"updated_at": "2026-08-03T06:49:35Z",
"pushed_at": "2026-07-30T11:28:07Z",
"stargazers_count": 24,
"watchers_count": 24,
"stargazers_count": 26,
"watchers_count": 26,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -600,7 +600,7 @@
"topics": [],
"visibility": "public",
"forks": 8,
"watchers": 24,
"watchers": 26,
"score": 0,
"subscribers_count": 0
},
@@ -1081,12 +1081,12 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
"updated_at": "2026-08-03T00:43:29Z",
"pushed_at": "2026-08-02T12:32:24Z",
"stargazers_count": 470,
"watchers_count": 470,
"updated_at": "2026-08-03T06:26:31Z",
"pushed_at": "2026-08-03T06:27:00Z",
"stargazers_count": 484,
"watchers_count": 484,
"has_discussions": false,
"forks_count": 63,
"forks_count": 64,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1094,8 +1094,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 63,
"watchers": 470,
"forks": 64,
"watchers": 484,
"score": 0,
"subscribers_count": 6
},
@@ -1180,10 +1180,10 @@
"description": "CVE-2026-43499 (IonStack\/GhostLock) pure-C re-root POC for Samsung SM-T878U \/ gts7l (T878USQS8DXE1)",
"fork": false,
"created_at": "2026-07-18T08:18:28Z",
"updated_at": "2026-08-01T15:11:43Z",
"updated_at": "2026-08-03T02:48:12Z",
"pushed_at": "2026-07-21T13:45:47Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -1202,7 +1202,7 @@
],
"visibility": "public",
"forks": 3,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
@@ -1287,10 +1287,10 @@
"description": "Use CVE-2026-43499 on Redmi Turbo 5 to escalate privilege",
"fork": false,
"created_at": "2026-07-21T11:28:41Z",
"updated_at": "2026-08-02T05:02:25Z",
"updated_at": "2026-08-03T05:10:48Z",
"pushed_at": "2026-08-02T04:25:01Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -1301,7 +1301,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
@@ -1727,8 +1727,8 @@
"description": "KSU installer for supported firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-28T10:17:18Z",
"updated_at": "2026-08-02T14:20:52Z",
"pushed_at": "2026-08-02T14:20:32Z",
"updated_at": "2026-08-03T03:07:16Z",
"pushed_at": "2026-08-03T03:09:31Z",
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
@@ -1996,12 +1996,12 @@
"description": "Root prototype for Galaxy S26",
"fork": false,
"created_at": "2026-08-01T22:45:30Z",
"updated_at": "2026-08-03T00:47:56Z",
"pushed_at": "2026-08-03T00:47:51Z",
"stargazers_count": 1,
"watchers_count": 1,
"updated_at": "2026-08-03T05:53:46Z",
"pushed_at": "2026-08-03T05:53:42Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2009,8 +2009,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"forks": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
@@ -2034,7 +2034,7 @@
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 6,
"forks_count": 7,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2042,7 +2042,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 6,
"forks": 7,
"watchers": 1,
"score": 0,
"subscribers_count": 0
@@ -2095,12 +2095,12 @@
"description": "Jailbreak supported Google Pixel phones with CVE-2026-43499",
"fork": false,
"created_at": "2026-08-02T17:34:45Z",
"updated_at": "2026-08-03T00:43:45Z",
"updated_at": "2026-08-03T06:47:54Z",
"pushed_at": "2026-08-02T21:37:06Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 19,
"watchers_count": 19,
"has_discussions": false,
"forks_count": 0,
"forks_count": 7,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -2108,8 +2108,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"forks": 7,
"watchers": 19,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-43503.json
+4 -4
View File
@@ -197,7 +197,7 @@
"stargazers_count": 25,
"watchers_count": 25,
"has_discussions": false,
"forks_count": 9,
"forks_count": 10,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -205,7 +205,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 9,
"forks": 10,
"watchers": 25,
"score": 0,
"subscribers_count": 0
@@ -230,7 +230,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -238,7 +238,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-44438.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1321140750,
"name": "CVE-2026-44438",
"full_name": "llaytynher\/CVE-2026-44438",
"owner": {
"login": "llaytynher",
"id": 127370919,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/127370919?v=4",
"html_url": "https:\/\/github.com\/llaytynher",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/llaytynher\/CVE-2026-44438",
"description": null,
"fork": false,
"created_at": "2026-08-03T03:01:37Z",
"updated_at": "2026-08-03T03:02:08Z",
"pushed_at": "2026-08-03T03:01:57Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-4444.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1321052151,
"name": "CVE-2026-4444-JWT-Algorithm-Confusion-via-kid-Injection",
"full_name": "George0Papasotiriou\/CVE-2026-4444-JWT-Algorithm-Confusion-via-kid-Injection",
"owner": {
"login": "George0Papasotiriou",
"id": 123271840,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123271840?v=4",
"html_url": "https:\/\/github.com\/George0Papasotiriou",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/George0Papasotiriou\/CVE-2026-4444-JWT-Algorithm-Confusion-via-kid-Injection",
"description": null,
"fork": false,
"created_at": "2026-08-03T01:07:39Z",
"updated_at": "2026-08-03T01:09:22Z",
"pushed_at": "2026-08-03T01:09:18Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-5050.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1321079420,
"name": "CVE-2026-5050-Blind-LDAP-Injection-via-Unescaped-Filter",
"full_name": "George0Papasotiriou\/CVE-2026-5050-Blind-LDAP-Injection-via-Unescaped-Filter",
"owner": {
"login": "George0Papasotiriou",
"id": 123271840,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123271840?v=4",
"html_url": "https:\/\/github.com\/George0Papasotiriou",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/George0Papasotiriou\/CVE-2026-5050-Blind-LDAP-Injection-via-Unescaped-Filter",
"description": null,
"fork": false,
"created_at": "2026-08-03T01:49:40Z",
"updated_at": "2026-08-03T01:51:09Z",
"pushed_at": "2026-08-03T01:51:05Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-52887.json
+45
View File
@@ -0,0 +1,45 @@
[
{
"id": 1321186329,
"name": "CVE-2026-52887-NocoBase-SQLi-RCE",
"full_name": "BiiTts\/CVE-2026-52887-NocoBase-SQLi-RCE",
"owner": {
"login": "BiiTts",
"id": 149285563,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/149285563?v=4",
"html_url": "https:\/\/github.com\/BiiTts",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/BiiTts\/CVE-2026-52887-NocoBase-SQLi-RCE",
"description": "CVE-2026-52887 — NocoBase SQL injection -> PostgreSQL-superuser RCE (myInAppChannels:list filter, CVSS 10.0). Author PoC + source analysis + docker lab.",
"fork": false,
"created_at": "2026-08-03T03:54:35Z",
"updated_at": "2026-08-03T03:57:44Z",
"pushed_at": "2026-08-03T03:57:41Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"copy-to-program",
"cve-2026-52887",
"exploit",
"nocobase",
"poc",
"postgresql",
"rce",
"security",
"sql-injection"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-54121.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 298,
"watchers_count": 298,
"has_discussions": false,
"forks_count": 74,
"forks_count": 75,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 74,
"forks": 75,
"watchers": 298,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-5555.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1321049865,
"name": "CVE-2026-5555-Container-Escape-via-proc-self-fd-Symlink-in-Shared-Volume",
"full_name": "George0Papasotiriou\/CVE-2026-5555-Container-Escape-via-proc-self-fd-Symlink-in-Shared-Volume",
"owner": {
"login": "George0Papasotiriou",
"id": 123271840,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123271840?v=4",
"html_url": "https:\/\/github.com\/George0Papasotiriou",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/George0Papasotiriou\/CVE-2026-5555-Container-Escape-via-proc-self-fd-Symlink-in-Shared-Volume",
"description": null,
"fork": false,
"created_at": "2026-08-03T01:04:21Z",
"updated_at": "2026-08-03T01:06:32Z",
"pushed_at": "2026-08-03T01:06:29Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-5556.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1321065662,
"name": "CVE-2026-5556-Kubernetes-Admission-Controller-Bypass-via-Case-Sensitivity",
"full_name": "George0Papasotiriou\/CVE-2026-5556-Kubernetes-Admission-Controller-Bypass-via-Case-Sensitivity",
"owner": {
"login": "George0Papasotiriou",
"id": 123271840,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123271840?v=4",
"html_url": "https:\/\/github.com\/George0Papasotiriou",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/George0Papasotiriou\/CVE-2026-5556-Kubernetes-Admission-Controller-Bypass-via-Case-Sensitivity",
"description": null,
"fork": false,
"created_at": "2026-08-03T01:29:35Z",
"updated_at": "2026-08-03T01:31:06Z",
"pushed_at": "2026-08-03T01:31:03Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-57239.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Proof of concept exploit for CVE-2026-3775\/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\\SYSTEM rights via the Foxit PDF Reader updater service.",
"fork": false,
"created_at": "2026-07-08T13:47:31Z",
"updated_at": "2026-08-02T20:20:39Z",
"updated_at": "2026-08-03T06:41:58Z",
"pushed_at": "2026-07-27T07:52:49Z",
"stargazers_count": 12,
"watchers_count": 12,
"stargazers_count": 13,
"watchers_count": 13,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 12,
"watchers": 13,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-60206.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "cve cve-2026-60206 weblogic saml exploit poc vulnerability oracle scanner security",
"fork": false,
"created_at": "2026-07-24T02:30:11Z",
"updated_at": "2026-08-03T00:47:23Z",
"updated_at": "2026-08-03T03:23:34Z",
"pushed_at": "2026-07-24T02:46:31Z",
"stargazers_count": 26,
"watchers_count": 26,
"stargazers_count": 27,
"watchers_count": 27,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 26,
"watchers": 27,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-6060.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1321081343,
"name": "CVE-2026-6060-QUIC-Handshake-Amplification-via-Address-Validation-Bypass",
"full_name": "George0Papasotiriou\/CVE-2026-6060-QUIC-Handshake-Amplification-via-Address-Validation-Bypass",
"owner": {
"login": "George0Papasotiriou",
"id": 123271840,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123271840?v=4",
"html_url": "https:\/\/github.com\/George0Papasotiriou",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/George0Papasotiriou\/CVE-2026-6060-QUIC-Handshake-Amplification-via-Address-Validation-Bypass",
"description": null,
"fork": false,
"created_at": "2026-08-03T01:52:10Z",
"updated_at": "2026-08-03T01:54:09Z",
"pushed_at": "2026-08-03T01:54:06Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-63030.json
+8 -8
View File
@@ -14,10 +14,10 @@
"description": "wp2shell (CVE-2026-63030 & CVE-2026-60137) - full RCE chain",
"fork": false,
"created_at": "2026-07-17T20:18:33Z",
"updated_at": "2026-08-02T23:54:52Z",
"updated_at": "2026-08-03T04:40:43Z",
"pushed_at": "2026-07-23T09:23:48Z",
"stargazers_count": 701,
"watchers_count": 701,
"stargazers_count": 703,
"watchers_count": 703,
"has_discussions": false,
"forks_count": 162,
"allow_forking": true,
@@ -32,7 +32,7 @@
],
"visibility": "public",
"forks": 162,
"watchers": 701,
"watchers": 703,
"score": 0,
"subscribers_count": 3
},
@@ -84,10 +84,10 @@
"description": "CVE-2026-63030, CVE-2026-60137, wp2shell scanner",
"fork": false,
"created_at": "2026-07-17T23:15:57Z",
"updated_at": "2026-07-31T15:53:39Z",
"updated_at": "2026-08-03T06:44:20Z",
"pushed_at": "2026-07-18T22:07:34Z",
"stargazers_count": 46,
"watchers_count": 46,
"stargazers_count": 47,
"watchers_count": 47,
"has_discussions": false,
"forks_count": 9,
"allow_forking": true,
@@ -98,7 +98,7 @@
"topics": [],
"visibility": "public",
"forks": 9,
"watchers": 46,
"watchers": 47,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-63223.json
+46
View File
@@ -0,0 +1,46 @@
[
{
"id": 1321169927,
"name": "CVE-2026-63223-POC",
"full_name": "imbas007\/CVE-2026-63223-POC",
"owner": {
"login": "imbas007",
"id": 100182585,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/100182585?v=4",
"html_url": "https:\/\/github.com\/imbas007",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/imbas007\/CVE-2026-63223-POC",
"description": "CVE-2026-63223 PoC — CodeIgniter 4 is_image\/mime_in File Upload RCE (CVSS 9.8). Unauthenticated remote code execution via unrestricted file upload bypass using image magic bytes. Fixed in v4.7.4.",
"fork": false,
"created_at": "2026-08-03T03:37:35Z",
"updated_at": "2026-08-03T04:24:20Z",
"pushed_at": "2026-08-03T04:24:17Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"codeigniter4",
"cve",
"cvss-9-8",
"cwe-434",
"exploit",
"file-upload",
"poc",
"rce",
"security",
"vulnerability"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-66066.json
+4 -4
View File
@@ -80,10 +80,10 @@
"description": null,
"fork": false,
"created_at": "2026-07-30T21:06:00Z",
"updated_at": "2026-08-02T23:05:32Z",
"updated_at": "2026-08-03T01:49:53Z",
"pushed_at": "2026-07-31T15:27:43Z",
"stargazers_count": 18,
"watchers_count": 18,
"stargazers_count": 19,
"watchers_count": 19,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
@@ -94,7 +94,7 @@
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 18,
"watchers": 19,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-6666.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1321064507,
"name": "CVE-2026-6666-XPC-Service-NSKeyedUnarchiver-Deserialization-Attack-macOS-iOS-simulation-",
"full_name": "George0Papasotiriou\/CVE-2026-6666-XPC-Service-NSKeyedUnarchiver-Deserialization-Attack-macOS-iOS-simulation-",
"owner": {
"login": "George0Papasotiriou",
"id": 123271840,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123271840?v=4",
"html_url": "https:\/\/github.com\/George0Papasotiriou",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/George0Papasotiriou\/CVE-2026-6666-XPC-Service-NSKeyedUnarchiver-Deserialization-Attack-macOS-iOS-simulation-",
"description": null,
"fork": false,
"created_at": "2026-08-03T01:27:13Z",
"updated_at": "2026-08-03T01:28:49Z",
"pushed_at": "2026-08-03T01:28:45Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-6789.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1321041093,
"name": "CVE-2026-6789-Stack-Buffer-Overflow-in-Embedded-TLS-Certificate-Parser",
"full_name": "George0Papasotiriou\/CVE-2026-6789-Stack-Buffer-Overflow-in-Embedded-TLS-Certificate-Parser",
"owner": {
"login": "George0Papasotiriou",
"id": 123271840,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123271840?v=4",
"html_url": "https:\/\/github.com\/George0Papasotiriou",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/George0Papasotiriou\/CVE-2026-6789-Stack-Buffer-Overflow-in-Embedded-TLS-Certificate-Parser",
"description": null,
"fork": false,
"created_at": "2026-08-03T00:52:08Z",
"updated_at": "2026-08-03T00:54:17Z",
"pushed_at": "2026-08-03T00:54:13Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-7070.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1321083225,
"name": "CVE-2026-7070-RDP-Clipboard-Hijacking-via-Virtual-Channel-Injection",
"full_name": "George0Papasotiriou\/CVE-2026-7070-RDP-Clipboard-Hijacking-via-Virtual-Channel-Injection",
"owner": {
"login": "George0Papasotiriou",
"id": 123271840,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123271840?v=4",
"html_url": "https:\/\/github.com\/George0Papasotiriou",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/George0Papasotiriou\/CVE-2026-7070-RDP-Clipboard-Hijacking-via-Virtual-Channel-Injection",
"description": null,
"fork": false,
"created_at": "2026-08-03T01:54:47Z",
"updated_at": "2026-08-03T01:56:17Z",
"pushed_at": "2026-08-03T01:56:14Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-7777.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1321063003,
"name": "CVE-2026-7777-Rust-Use-After-Free-in-Unsafe-Web-Server",
"full_name": "George0Papasotiriou\/CVE-2026-7777-Rust-Use-After-Free-in-Unsafe-Web-Server",
"owner": {
"login": "George0Papasotiriou",
"id": 123271840,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123271840?v=4",
"html_url": "https:\/\/github.com\/George0Papasotiriou",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/George0Papasotiriou\/CVE-2026-7777-Rust-Use-After-Free-in-Unsafe-Web-Server",
"description": null,
"fork": false,
"created_at": "2026-08-03T01:24:16Z",
"updated_at": "2026-08-03T01:26:03Z",
"pushed_at": "2026-08-03T01:26:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-7878.json
+4 -4
View File
@@ -1,8 +1,8 @@
[
{
"id": 1321031862,
"name": "6.-CVE-2026-7878-eBPF-Verifier-Type-Confusion-Kernel-Memory-Read-Write",
"full_name": "George0Papasotiriou\/6.-CVE-2026-7878-eBPF-Verifier-Type-Confusion-Kernel-Memory-Read-Write",
"name": "CVE-2026-7878-eBPF-Verifier-Type-Confusion-Kernel-Memory-Read-Write",
"full_name": "George0Papasotiriou\/CVE-2026-7878-eBPF-Verifier-Type-Confusion-Kernel-Memory-Read-Write",
"owner": {
"login": "George0Papasotiriou",
"id": 123271840,
@@ -10,11 +10,11 @@
"html_url": "https:\/\/github.com\/George0Papasotiriou",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/George0Papasotiriou\/6.-CVE-2026-7878-eBPF-Verifier-Type-Confusion-Kernel-Memory-Read-Write",
"html_url": "https:\/\/github.com\/George0Papasotiriou\/CVE-2026-7878-eBPF-Verifier-Type-Confusion-Kernel-Memory-Read-Write",
"description": null,
"fork": false,
"created_at": "2026-08-03T00:39:10Z",
"updated_at": "2026-08-03T00:44:50Z",
"updated_at": "2026-08-03T00:51:15Z",
"pushed_at": "2026-08-03T00:44:46Z",
"stargazers_count": 0,
"watchers_count": 0,
2026/CVE-2026-8080.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1321084864,
"name": "CVE-2026-8080-DKIM-Signature-Verification-Bypass-Header-Canonicalization-Flaw-",
"full_name": "George0Papasotiriou\/CVE-2026-8080-DKIM-Signature-Verification-Bypass-Header-Canonicalization-Flaw-",
"owner": {
"login": "George0Papasotiriou",
"id": 123271840,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123271840?v=4",
"html_url": "https:\/\/github.com\/George0Papasotiriou",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/George0Papasotiriou\/CVE-2026-8080-DKIM-Signature-Verification-Bypass-Header-Canonicalization-Flaw-",
"description": null,
"fork": false,
"created_at": "2026-08-03T01:57:02Z",
"updated_at": "2026-08-03T01:59:28Z",
"pushed_at": "2026-08-03T01:59:24Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-8888.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1321061988,
"name": "CVE-2026-8888-Printer-Firmware-Unsigned-Update-via-HTTP",
"full_name": "George0Papasotiriou\/CVE-2026-8888-Printer-Firmware-Unsigned-Update-via-HTTP",
"owner": {
"login": "George0Papasotiriou",
"id": 123271840,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123271840?v=4",
"html_url": "https:\/\/github.com\/George0Papasotiriou",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/George0Papasotiriou\/CVE-2026-8888-Printer-Firmware-Unsigned-Update-via-HTTP",
"description": null,
"fork": false,
"created_at": "2026-08-03T01:22:09Z",
"updated_at": "2026-08-03T01:23:44Z",
"pushed_at": "2026-08-03T01:23:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-9090.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1321087015,
"name": "CVE-2026-9090-Modbus-TCP-Write-to-Read-Only-Coils-via-Function-Code-Spoofing",
"full_name": "George0Papasotiriou\/CVE-2026-9090-Modbus-TCP-Write-to-Read-Only-Coils-via-Function-Code-Spoofing",
"owner": {
"login": "George0Papasotiriou",
"id": 123271840,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123271840?v=4",
"html_url": "https:\/\/github.com\/George0Papasotiriou",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/George0Papasotiriou\/CVE-2026-9090-Modbus-TCP-Write-to-Read-Only-Coils-via-Function-Code-Spoofing",
"description": null,
"fork": false,
"created_at": "2026-08-03T01:59:57Z",
"updated_at": "2026-08-03T02:01:14Z",
"pushed_at": "2026-08-03T02:01:10Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-9997.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1321061063,
"name": "CVE-2026-9997-VPN-Split-Tunneling-Bypass-via-DHCP-Option-Injection",
"full_name": "George0Papasotiriou\/CVE-2026-9997-VPN-Split-Tunneling-Bypass-via-DHCP-Option-Injection",
"owner": {
"login": "George0Papasotiriou",
"id": 123271840,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123271840?v=4",
"html_url": "https:\/\/github.com\/George0Papasotiriou",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/George0Papasotiriou\/CVE-2026-9997-VPN-Split-Tunneling-Bypass-via-DHCP-Option-Injection",
"description": null,
"fork": false,
"created_at": "2026-08-03T01:20:10Z",
"updated_at": "2026-08-03T01:21:32Z",
"pushed_at": "2026-08-03T01:21:28Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-9998.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1321043523,
"name": "CVE-2026-9998-Insecure-Deserialization-in-Blockchain-Oracle",
"full_name": "George0Papasotiriou\/CVE-2026-9998-Insecure-Deserialization-in-Blockchain-Oracle",
"owner": {
"login": "George0Papasotiriou",
"id": 123271840,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/123271840?v=4",
"html_url": "https:\/\/github.com\/George0Papasotiriou",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/George0Papasotiriou\/CVE-2026-9998-Insecure-Deserialization-in-Blockchain-Oracle",
"description": null,
"fork": false,
"created_at": "2026-08-03T00:55:24Z",
"updated_at": "2026-08-03T00:57:36Z",
"pushed_at": "2026-08-03T00:57:33Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
README.md
+172 -11
View File
@@ -55,6 +55,9 @@
- [canyie/TransitionPlayer](https://github.com/canyie/TransitionPlayer)
### CVE-2026-0101
- [George0Papasotiriou/CVE-2026-0101-BLE-Address-Spoofing-via-Weak-Resolvable-Private-Address](https://github.com/George0Papasotiriou/CVE-2026-0101-BLE-Address-Spoofing-via-Weak-Resolvable-Private-Address)
### CVE-2026-0257 (2026-05-13)
<code>Authentication bypass vulnerabilities in the GlobalProtect portal and gateway of Palo Alto Networks PAN-OS® software allows the attacker to bypass security restrictions and establish an unauthorized VPN connection.\n\nPanorama and Cloud NGFW are not impacted by these issues.
@@ -172,6 +175,20 @@
### CVE-2026-442
- [HORKimhab/CVE-2026-442_](https://github.com/HORKimhab/CVE-2026-442_)
### CVE-2026-1010 (2026-01-15)
<code>A stored cross-site scripting (XSS) vulnerability exists in the Altium Workflow Engine due to missing server-side input sanitization in workflow form submission APIs. A regular authenticated user can inject arbitrary JavaScript into workflow data.\n\nWhen an administrator views the affected workflow, the injected payload executes in the administrator’s browser context, allowing privilege escalation, including creation of new administrator accounts, session token theft, and execution of administrative actions.
</code>
- [George0Papasotiriou/CVE-2026-1010-WebSocket-Connection-Smuggling-via-Malformed-Upgrade-Header](https://github.com/George0Papasotiriou/CVE-2026-1010-WebSocket-Connection-Smuggling-via-Malformed-Upgrade-Header)
### CVE-2026-1111 (2026-01-18)
<code>A vulnerability has been found in Sanluan PublicCMS up to 5.202506.d. This impacts the function Save of the file com/publiccms/controller/admin/sys/TaskTemplateAdminController.java of the component Task Template Management Handler. Such manipulation of the argument path leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
</code>
- [George0Papasotiriou/CVE-2026-1111-Smart-Contract-Cross-Function-Reentrancy](https://github.com/George0Papasotiriou/CVE-2026-1111-Smart-Contract-Cross-Function-Reentrancy)
### CVE-2026-1122 (2026-01-18)
<code>A vulnerability was determined in Yonyou KSOA 9.0. This impacts an unknown function of the file /worksheet/work_info.jsp of the component HTTP GET Parameter Handler. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
@@ -236,6 +253,20 @@
- [var77/CVE-2026-2005](https://github.com/var77/CVE-2026-2005)
### CVE-2026-2020 (2026-03-07)
<code>The JS Archive List plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.1.7 via the 'included' shortcode attribute. This is due to the deserialization of untrusted input supplied via the 'included' parameter of the plugin's shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.
</code>
- [George0Papasotiriou/CVE-2026-2020-SSRF-via-URL-Parser-Differential](https://github.com/George0Papasotiriou/CVE-2026-2020-SSRF-via-URL-Parser-Differential)
### CVE-2026-2222 (2026-02-09)
<code>A weakness has been identified in code-projects Online Reviewer System 1.0. Affected by this vulnerability is an unknown functionality of the file /system/system/admins/manage/users/btn_functions.php. Executing a manipulation of the argument firstname can lead to cross site scripting. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.
</code>
- [George0Papasotiriou/CVE-2026-2222-MQTT-Broker-CONNECT-Packet-Heap-Overflow](https://github.com/George0Papasotiriou/CVE-2026-2222-MQTT-Broker-CONNECT-Packet-Heap-Overflow)
### CVE-2026-2256 (2026-03-02)
<code>A command injection vulnerability in ModelScope's ms-agent versions v1.6.0rc1 and earlier exists, allowing an attacker to execute arbitrary operating system commands through crafted prompt-derived input.
@@ -290,6 +321,9 @@
- [xxconi/CVE-2026-2942](https://github.com/xxconi/CVE-2026-2942)
### CVE-2026-3030
- [George0Papasotiriou/CVE-2026-3030-Prototype-Pollution-in-JSON-Merge-Patch](https://github.com/George0Papasotiriou/CVE-2026-3030-Prototype-Pollution-in-JSON-Merge-Patch)
### CVE-2026-3102 (2026-02-24)
<code>A vulnerability was determined in exiftool up to 13.49 on macOS. This issue affects the function SetMacOSTags of the file lib/Image/ExifTool/MacOS.pm of the component PNG File Parser. This manipulation of the argument DateTimeOriginal causes os command injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 13.50 is capable of addressing this issue. Patch name: e9609a9bcc0d32bd252a709a562fb822d6dd86f7. Upgrading the affected component is recommended.
@@ -335,6 +369,13 @@
- [darrocarocatest-sys/pv2-victim](https://github.com/darrocarocatest-sys/pv2-victim)
### CVE-2026-3333 (2026-03-21)
<code>The MinhNhut Link Gateway plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'linkgate' shortcode in all versions up to, and including, 3.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
</code>
- [George0Papasotiriou/CVE-2026-3333-DNS-Rebinding-to-Steal-Cloud-Metadata](https://github.com/George0Papasotiriou/CVE-2026-3333-DNS-Rebinding-to-Steal-Cloud-Metadata)
### CVE-2026-3359 (2026-05-05)
<code>The Form Maker by 10Web – Mobile-Friendly Drag &amp; Drop Contact Form Builder plugin for WordPress is vulnerable to SQL Injection via the 'inputs' parameter in versions up to, and including, 1.15.42 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
@@ -417,6 +458,13 @@
- [HORKimhab/CVE-2026-4020](https://github.com/HORKimhab/CVE-2026-4020)
- [faizdotid/CVE-2026-4020](https://github.com/faizdotid/CVE-2026-4020)
### CVE-2026-4040 (2026-03-12)
<code>A vulnerability was identified in OpenClaw up to 2026.2.17. This issue affects the function tools.exec.safeBins of the component File Existence Handler. The manipulation leads to information exposure through discrepancy. The attack needs to be performed locally. Upgrading to version 2026.2.19-beta.1 is capable of addressing this issue. The identifier of the patch is bafdbb6f112409a65decd3d4e7350fbd637c7754. Upgrading the affected component is advised.
</code>
- [George0Papasotiriou/CVE-2026-4040-Race-Condition-in-File-Upload-Leading-to-RCE](https://github.com/George0Papasotiriou/CVE-2026-4040-Race-Condition-in-File-Upload-Leading-to-RCE)
### CVE-2026-4060 (2026-05-02)
<code>The Geo Mashup plugin for WordPress is vulnerable to Time-Based SQL Injection via the 'sort' parameter in all versions up to, and including, 1.13.18. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. The `esc_sql()` function is applied but is ineffective in the `ORDER BY` context because the value is not enclosed in quotes. Additionally, while a `sanitize_sort_arg()` allowlist-based sanitizer was added in version 1.13.18, it is only applied in the AJAX code path (`sanitize_query_args()`) and not in the `render-map.php` or template tag code paths. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database via a time-based blind approach.
@@ -445,6 +493,13 @@
- [born0monday/teamspeak3-vulnerabilities](https://github.com/born0monday/teamspeak3-vulnerabilities)
### CVE-2026-4444 (2026-03-20)
<code>Stack buffer overflow in WebRTC in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. (Chromium security severity: High)
</code>
- [George0Papasotiriou/CVE-2026-4444-JWT-Algorithm-Confusion-via-kid-Injection](https://github.com/George0Papasotiriou/CVE-2026-4444-JWT-Algorithm-Confusion-via-kid-Injection)
### CVE-2026-4480 (2026-05-26)
<code>A flaw was found in the Samba printing subsystem. Samba passes the client-controlled job description string to the command configured with the &quot;print command&quot; setting via the &quot;%J&quot;\nsubstitution character without escaping shell meta characters. A remote attacker could exploit this vulnerability by sending a specially crafted print job description that contains unescaped shell characters. This could lead to remote code execution on the affected system.
@@ -530,6 +585,13 @@
- [0x00phantom-hat/CVE-2026-5029-Exploit](https://github.com/0x00phantom-hat/CVE-2026-5029-Exploit)
### CVE-2026-5050 (2026-04-16)
<code>The Payment Gateway for Redsys &amp; WooCommerce Lite plugin for WordPress is vulnerable to Improper Verification of Cryptographic Signature in versions up to, and including, 7.0.0 due to successful_request() handlers calculating a local signature but not validating Ds_Signature from the request before accepting payment status across the Redsys, Bizum, and Google Pay gateway flows. This makes it possible for unauthenticated attackers to forge payment callback data and mark pending orders as paid when they know a valid order key and order amount, potentially allowing checkout completion and product or service fulfillment without a successful payment.
</code>
- [George0Papasotiriou/CVE-2026-5050-Blind-LDAP-Injection-via-Unescaped-Filter](https://github.com/George0Papasotiriou/CVE-2026-5050-Blind-LDAP-Injection-via-Unescaped-Filter)
### CVE-2026-5061 (2026-05-12)
<code>The consul-template library before version 0.42.0 is vulnerable to a sandbox path bypass in the file template helper that may allow reading an out-of-sandbox file. This vulnerability (CVE-2026-5061) is fixed in consul-template 0.42.0.
@@ -637,6 +699,20 @@
- [caterscam/CVE-2026-5524-PoC](https://github.com/caterscam/CVE-2026-5524-PoC)
### CVE-2026-5555 (2026-04-05)
<code>A weakness has been identified in code-projects Concert Ticket Reservation System 1.0. This affects an unknown part of the file /ConcertTicketReservationSystem-master/login.php of the component Parameter Handler. Executing a manipulation of the argument Email can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.
</code>
- [George0Papasotiriou/CVE-2026-5555-Container-Escape-via-proc-self-fd-Symlink-in-Shared-Volume](https://github.com/George0Papasotiriou/CVE-2026-5555-Container-Escape-via-proc-self-fd-Symlink-in-Shared-Volume)
### CVE-2026-5556 (2026-04-05)
<code>A security vulnerability has been detected in badlogic pi-mono up to 0.58.4. This vulnerability affects the function discoverAndLoadExtensions of the file packages/coding-agent/src/core/extensions/loader.ts. The manipulation leads to code injection. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
</code>
- [George0Papasotiriou/CVE-2026-5556-Kubernetes-Admission-Controller-Bypass-via-Case-Sensitivity](https://github.com/George0Papasotiriou/CVE-2026-5556-Kubernetes-Admission-Controller-Bypass-via-Case-Sensitivity)
### CVE-2026-5562 (2026-04-05)
<code>A vulnerability was identified in provectus kafka-ui up to 0.7.2. This impacts the function validateAccess of the file /api/smartfilters/testexecutions of the component Endpoint. The manipulation leads to code injection. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
@@ -674,6 +750,13 @@
- [flyingllama87/p4wned](https://github.com/flyingllama87/p4wned)
### CVE-2026-6060 (2026-04-20)
<code>A vulnerability in the SQL Box in the admin interface of OTRS leads to an uncontrolled resource consumption leading to a DoS against the webserver. will be killed by the systemThis issue affects OTRS: \n\n * 7.0.X\n * 8.0.X\n * 2023.X\n * 2024.X\n * 2025.X\n * 2026.X before 2026.3.X
</code>
- [George0Papasotiriou/CVE-2026-6060-QUIC-Handshake-Amplification-via-Address-Validation-Bypass](https://github.com/George0Papasotiriou/CVE-2026-6060-QUIC-Handshake-Amplification-via-Address-Validation-Bypass)
### CVE-2026-6130 (2026-04-12)
<code>A flaw has been found in chatboxai chatbox up to 1.20.0. This impacts the function StdioClientTransport of the file src/main/mcp/ipc-stdio-transport.ts of the component Model Context Protocol Server Management System. Executing a manipulation of the argument args/env can lead to os command injection. The attack can be launched remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
@@ -748,6 +831,13 @@
- [jackalkarlos/EvilAhenk](https://github.com/jackalkarlos/EvilAhenk)
### CVE-2026-6666 (2026-05-09)
<code>A possible null pointer reference in PgBouncer before 1.25.2 could lead to a crash, if a server sends an error response without SQLSTATE field.
</code>
- [George0Papasotiriou/CVE-2026-6666-XPC-Service-NSKeyedUnarchiver-Deserialization-Attack-macOS-iOS-simulation-](https://github.com/George0Papasotiriou/CVE-2026-6666-XPC-Service-NSKeyedUnarchiver-Deserialization-Attack-macOS-iOS-simulation-)
### CVE-2026-6741 (2026-04-27)
<code>The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Privilege Escalation in versions up to and including 5.4.1. This is due to a missing authorization check in the execute() method of the connect-customer-to-wp-user ability, which only requires the customer__edit capability granted to the latepoint_agent role by default, without verifying whether the target WordPress user ID belongs to a privileged account. This makes it possible for authenticated attackers with the latepoint_agent role to link any LatePoint customer record to an administrator's WordPress account and subsequently reset the administrator's password via the normal customer password-reset flow, resulting in full site takeover.
@@ -755,6 +845,9 @@
- [xxconi/CVE-2026-6741](https://github.com/xxconi/CVE-2026-6741)
### CVE-2026-6789
- [George0Papasotiriou/CVE-2026-6789-Stack-Buffer-Overflow-in-Embedded-TLS-Certificate-Parser](https://github.com/George0Papasotiriou/CVE-2026-6789-Stack-Buffer-Overflow-in-Embedded-TLS-Certificate-Parser)
### CVE-2026-6815 (2026-05-11)
<code>An arbitrary file write vulnerability exists in Casdoor's Local File System storage provider. Due to insufficient path sanitization, an authenticated attacker with administrative privileges can perform a Path Traversal attack to create or overwrite arbitrary files anywhere on the host filesystem, bypassing the application's intended storage sandbox.
@@ -791,6 +884,13 @@
- [nicholas-howland/CVE-2026-6992-PoC](https://github.com/nicholas-howland/CVE-2026-6992-PoC)
### CVE-2026-7070 (2026-04-27)
<code>A weakness has been identified in code-projects Inventory Management System 1.0. Affected is an unknown function of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks.
</code>
- [George0Papasotiriou/CVE-2026-7070-RDP-Clipboard-Hijacking-via-Virtual-Channel-Injection](https://github.com/George0Papasotiriou/CVE-2026-7070-RDP-Clipboard-Hijacking-via-Virtual-Channel-Injection)
### CVE-2026-7228 (2026-04-28)
<code>A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. The affected element is the function get_cart_count of the file /admin/ajax.php?action=get_cart_count. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used.
@@ -873,6 +973,9 @@
- [anirudhmakkar/cve-2026-7665](https://github.com/anirudhmakkar/cve-2026-7665)
### CVE-2026-7777
- [George0Papasotiriou/CVE-2026-7777-Rust-Use-After-Free-in-Unsafe-Web-Server](https://github.com/George0Papasotiriou/CVE-2026-7777-Rust-Use-After-Free-in-Unsafe-Web-Server)
### CVE-2026-7791 (2026-05-04)
<code>Improper privilege management in the log rotation mechanism of the Skylight Workspace Config Service in Amazon WorkSpaces for Windows before 2.6.2034.0 allows a local non-admin authenticated user to place arbitrary files into arbitrary locations bypassing file system permission protections, leading to local privilege escalation to SYSTEM.
@@ -884,7 +987,7 @@
- [azqzazq1/CVE-2026-7867-disk2root](https://github.com/azqzazq1/CVE-2026-7867-disk2root)
### CVE-2026-7878
- [George0Papasotiriou/6.-CVE-2026-7878-eBPF-Verifier-Type-Confusion-Kernel-Memory-Read-Write](https://github.com/George0Papasotiriou/6.-CVE-2026-7878-eBPF-Verifier-Type-Confusion-Kernel-Memory-Read-Write)
- [George0Papasotiriou/CVE-2026-7878-eBPF-Verifier-Type-Confusion-Kernel-Memory-Read-Write](https://github.com/George0Papasotiriou/CVE-2026-7878-eBPF-Verifier-Type-Confusion-Kernel-Memory-Read-Write)
### CVE-2026-8023 (2026-06-29)
@@ -915,6 +1018,13 @@
- [Mr-xn/CVE-2026-8054](https://github.com/Mr-xn/CVE-2026-8054)
### CVE-2026-8080 (2026-05-07)
<code>Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in misp allows Stored XSS.\n\n\n\n\n\n\nThis issue affects MISP before 2.5.37.\n\n\n\n\nA stored cross-site scripting vulnerability exists in the template element attribute handling logic. The application accepted arbitrary values for the TemplateElementAttribute type and category fields without validating them against the known MISP attribute type and category definitions. An attacker with permission to create or modify template element attributes could store a crafted type value.\n\n\nThis affects the old templating (not more accessible in 2.5.37) engine from MISP which will be removed in 2.5.38
</code>
- [George0Papasotiriou/CVE-2026-8080-DKIM-Signature-Verification-Bypass-Header-Canonicalization-Flaw-](https://github.com/George0Papasotiriou/CVE-2026-8080-DKIM-Signature-Verification-Bypass-Header-Canonicalization-Flaw-)
### CVE-2026-8181 (2026-05-14)
<code>The Burst Statistics – Privacy-Friendly WordPress Analytics (Google Analytics Alternative) plugin for WordPress is vulnerable to Authentication Bypass in versions 3.4.0 to 3.4.1.1. This is due to incorrect return-value handling in the `is_mainwp_authenticated()` function when validating application passwords from the Authorization header. This makes it possible for unauthenticated attackers, with knowledge of an administrator username, to impersonate that administrator for the duration of the request by supplying any random Basic Authentication password achieving privilege escalation.
@@ -1081,6 +1191,13 @@
- [0xbekoo/CVE-2026-8863](https://github.com/0xbekoo/CVE-2026-8863)
### CVE-2026-8888 (2026-06-03)
<code>Version 3.0.7 of the Securly Chrome Extension downloads config.json over HTTP and compiles server-provided patterns as JavaScript regular expressions via new RegExp() without complexity validation. An on-path attacker can inject specific patterns to cause catastrophic backtracking, resulting in denial of service on all browsing.
</code>
- [George0Papasotiriou/CVE-2026-8888-Printer-Firmware-Unsigned-Update-via-HTTP](https://github.com/George0Papasotiriou/CVE-2026-8888-Printer-Firmware-Unsigned-Update-via-HTTP)
### CVE-2026-8932 (2026-07-03)
<code>libcurl would reuse a previously created connection even when some mTLS config\nrelated option had been changed that should have prohibited reuse.\n\nlibcurl keeps previously used connections in a connection pool for subsequent\ntransfers to reuse if one of them matches the setup. However, some TLS\nsettings related to client certificates were left out from the configuration\nmatch checks, making them match too easily. In particular options related to\nthe private key.
@@ -1119,6 +1236,13 @@
- [11romain/CVE-2026-9082](https://github.com/11romain/CVE-2026-9082)
- [sourcecode347/CVE-2026-9082-Mass_Scanner](https://github.com/sourcecode347/CVE-2026-9082-Mass_Scanner)
### CVE-2026-9090 (2026-05-28)
<code>Casdoor versions 2.362.0 and earlier contain a vulnerability that allows an attacker to bypass authentication by supplying an arbitrary signing certificate. The buildSpCertificateStore function extracts the X.509 certificate directly from the incoming SAMLResponse instead of using the trusted pre-configured Identity Provider certificate, allowing an attacker to forge assertions signed with an attacker-controlled key.
</code>
- [George0Papasotiriou/CVE-2026-9090-Modbus-TCP-Write-to-Read-Only-Coils-via-Function-Code-Spoofing](https://github.com/George0Papasotiriou/CVE-2026-9090-Modbus-TCP-Write-to-Read-Only-Coils-via-Function-Code-Spoofing)
### CVE-2026-9198 (2026-07-17)
<code>IBM Langflow OSS 1.0.0 through 1.10.0 allows unauthenticated attackers to chain /api/v1/auto_login (mints SUPERUSER tokens to any network caller) with /api/v1/validate/code (executes user code via exec()) to achieve full RCE on default Langflow deployments
@@ -1236,6 +1360,20 @@
- [jaf0rk/CVE-2026-9973-exploit](https://github.com/jaf0rk/CVE-2026-9973-exploit)
### CVE-2026-9997 (2026-05-28)
<code>Use after free in Input in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
</code>
- [George0Papasotiriou/CVE-2026-9997-VPN-Split-Tunneling-Bypass-via-DHCP-Option-Injection](https://github.com/George0Papasotiriou/CVE-2026-9997-VPN-Split-Tunneling-Bypass-via-DHCP-Option-Injection)
### CVE-2026-9998 (2026-05-28)
<code>Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
</code>
- [George0Papasotiriou/CVE-2026-9998-Insecure-Deserialization-in-Blockchain-Oracle](https://github.com/George0Papasotiriou/CVE-2026-9998-Insecure-Deserialization-in-Blockchain-Oracle)
### CVE-2026-9999 (2026-05-28)
<code>Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
@@ -1514,6 +1652,13 @@
- [0xBlackash/CVE-2026-12485](https://github.com/0xBlackash/CVE-2026-12485)
### CVE-2026-12940 (2026-07-30)
<code>IBM Langflow OSS 1.0.0 through 1.10.1  are vulnerable to unauthenticated remote code execution via environment variable injection in the MCP (Model Context Protocol) stdio launcher. The vulnerability exists in src/lfx/src/lfx/base/mcp/util.py where the DANGEROUS_ENV_VARS blocklist fails to include SHELLOPTS , BASHOPTS , and PS4 environment variables.
</code>
- [BiiTts/CVE-2026-12940-Langflow-Unauth-RCE](https://github.com/BiiTts/CVE-2026-12940-Langflow-Unauth-RCE)
### CVE-2026-12960 (2026-07-03)
<code>An Improper Export of Android Application Components vulnerability in ASUS Router App allows a third-party application on the same device to send a crafted Intent that causes ASUS Router App to open an specified URL.\nRefer to the '\nSecurity Update for ASUS Router Android App ' section on the ASUS Security Advisory for more information.
@@ -1773,6 +1918,9 @@
- [1xPwn/CVE-2026-16723](https://github.com/1xPwn/CVE-2026-16723)
- [fazilbaig1/CVE-2026-16723](https://github.com/fazilbaig1/CVE-2026-16723)
### CVE-2026-17001
- [llaytynher/CVE-2026-17001](https://github.com/llaytynher/CVE-2026-17001)
### CVE-2026-17351 (2026-07-31)
<code>The fix for CVE-2026-12045 in pgAdmin 4 9.16 required the LLM-supplied query passed to the AI Assistant's execute_sql_query tool to parse, via sqlparse, as exactly one non-transaction-control statement before running it inside a BEGIN TRANSACTION READ ONLY wrapper. sqlparse's string-literal lexing can disagree with PostgreSQL's own parser: under standard_conforming_strings = on (PostgreSQL's default since 9.1), a backslash immediately before a quote is an ordinary character to PostgreSQL, but sqlparse treats it as escaping the quote. A payload such as SELECT '\';COMMIT;CREATE TABLE pwn(x int);SELECT 1 --' therefore parses as a single SELECT to sqlparse's validator, while PostgreSQL executes it as four statements: the smuggled COMMIT ends the wrapping read-only transaction, and the trailing ROLLBACK becomes a no-op. This reintroduces the same write/RCE bypass CVE-2026-12045 was meant to close, reachable via the same indirect prompt-injection delivery (an attacker plants the payload in any object the AI Assistant may read; the LLM emits it as a tool call).\n\nAn initial candidate fix ran the query with psycopg's execute(..., prepare=True), intending to force PostgreSQL's own Parse step (extended query protocol) to reject multi-statement text regardless of sqlparse's classification. This candidate fix does not work as submitted: psycopg3's PrepareManager silently ignores the prepare argument whenever the connection's prepare_threshold is None, which is pgAdmin's default for every server connection (the per-server &quot;Prepare threshold&quot; field is blank unless an administrator explicitly sets it) -- psycopg3 falls back to the simple query protocol, the same multi-statement-capable path the bypass exploits, so the candidate fix closes nothing on any real-world default configuration.\n\nThe corrected fix sets conn.prepare_threshold = 0 directly on the dedicated, single-use read-only connection the AI Assistant tool opens, structurally forcing the extended query protocol independent of any server-level configuration. Verified against a live PostgreSQL 18 instance: the payload executes successfully under the prepare_threshold=None (default) behavior, and is rejected with &quot;cannot insert multiple commands into a prepared statement&quot; once prepare_threshold=0 is set on that connection.\n\nThis issue affects pgAdmin 4: from 9.13 before 9.17.
@@ -3074,6 +3222,7 @@
</code>
- [garlic-wizard/CVE-2026-33937-for-DarkZeroReturns](https://github.com/garlic-wizard/CVE-2026-33937-for-DarkZeroReturns)
- [c0gnit00/CVE-2026-33937](https://github.com/c0gnit00/CVE-2026-33937)
### CVE-2026-34038 (2026-07-06)
@@ -3664,6 +3813,7 @@
- [gbuyssens/CVE-2026-39987](https://github.com/gbuyssens/CVE-2026-39987)
- [jasonbernier/CVE-2026-39987](https://github.com/jasonbernier/CVE-2026-39987)
- [vanhari/CVE-2026-39987](https://github.com/vanhari/CVE-2026-39987)
- [Wind010/CVE-2026-39987_PoC](https://github.com/Wind010/CVE-2026-39987_PoC)
### CVE-2026-40000 (2026-07-27)
@@ -4395,6 +4545,9 @@
- [ZemarKhos/CVE-2026-44403-WingFTP-v8.1.2-POC-Exploit](https://github.com/ZemarKhos/CVE-2026-44403-WingFTP-v8.1.2-POC-Exploit)
### CVE-2026-44438
- [llaytynher/CVE-2026-44438](https://github.com/llaytynher/CVE-2026-44438)
### CVE-2026-44578 (2026-05-13)
<code>Next.js is a React framework for building full-stack web applications. From 13.4.13 to before 15.5.16 and 16.2.5, self-hosted applications using the built-in Node.js server can be vulnerable to server-side request forgery through crafted WebSocket upgrade requests. An attacker can cause the server to proxy requests to arbitrary internal or external destinations, which may expose internal services or cloud metadata endpoints. Vercel-hosted deployments are not affected. This vulnerability is fixed in 15.5.16 and 16.2.5.
@@ -5766,6 +5919,13 @@
- [v3s9er/CVE-2026-52885](https://github.com/v3s9er/CVE-2026-52885)
### CVE-2026-52887 (2026-07-15)
<code>NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. Prior to 2.0.61, NocoBase @nocobase/plugin-notification-in-app-message exposed GET /api/myInAppChannels:list, where the filter[latestMsgReceiveTimestamp][$lt] value was inserted into a Sequelize.literal() template string without escaping or parameter binding, allowing a signed-up authenticated user to run stacked PostgreSQL statements and potentially execute commands with COPY ... TO PROGRAM. This vulnerability is fixed in 2.0.61.
</code>
- [BiiTts/CVE-2026-52887-NocoBase-SQLi-RCE](https://github.com/BiiTts/CVE-2026-52887-NocoBase-SQLi-RCE)
### CVE-2026-52910 (2026-06-19)
<code>In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Free reuseport cBPF prog after RCU grace period.\n\nEulgyu Kim reported the splat below with a repro. [0]\n\nThe repro sets up a UDP reuseport group with a cBPF prog and\nreplaces it with a new one while another thread is sending\na UDP packet to the group.\n\nThe reuseport prog is freed by sk_reuseport_prog_free().\nbpf_prog_put() is called for &quot;e&quot;BPF prog to destruct through\nmultiple stages while cBPF prog is freed immediately by\nbpf_release_orig_filter() and bpf_prog_free().\n\nIf a reuseport prog is detached from the setsockopt() path\n(reuseport_attach_prog() or reuseport_detach_prog()),\nsk_reuseport_prog_free() is called without waiting for RCU\nreaders to complete, resulting in various bugs.\n\nLet's defer freeing the reuseport cBPF prog after one RCU\ngrace period.\n\nNote &quot;e&quot;BPF prog is safe as is unless the fast path starts\nto touch fields destroyed in bpf_prog_put_deferred() and\n__bpf_prog_put_noref().\n\n[0]:\nBUG: KASAN: vmalloc-out-of-bounds in reuseport_select_sock+0xedc/0x1220 net/core/sock_reuseport.c:596\nRead of size 4 at addr ffffc9000051e004 by task slowme/10208\nCPU: 6 UID: 1000 PID: 10208 Comm: slowme Not tainted 7.0.0-geb7ac95ff75e #32 PREEMPT(full)\nHardware name: QEMU Ubuntu 24.04 PC v2 (i440FX + PIIX, arch_caps fix, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014\nCall Trace:\n &lt;IRQ&gt;\n dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0xca/0x240 mm/kasan/report.c:482\n kasan_report+0x118/0x150 mm/kasan/report.c:595\n reuseport_select_sock+0xedc/0x1220 net/core/sock_reuseport.c:596\n udp4_lib_lookup2+0x3bc/0x950 net/ipv4/udp.c:495\n __udp4_lib_lookup+0x768/0xe20 net/ipv4/udp.c:723\n __udp4_lib_lookup_skb+0x297/0x390 net/ipv4/udp.c:752\n __udp4_lib_rcv+0x1312/0x2620 net/ipv4/udp.c:2752\n ip_protocol_deliver_rcu+0x282/0x440 net/ipv4/ip_input.c:207\n ip_local_deliver_finish+0x3bb/0x6f0 net/ipv4/ip_input.c:241\n NF_HOOK+0x30c/0x3a0 include/linux/netfilter.h:318\n NF_HOOK+0x30c/0x3a0 include/linux/netfilter.h:318\n __netif_receive_skb_one_core net/core/dev.c:6181 [inline]\n __netif_receive_skb net/core/dev.c:6294 [inline]\n process_backlog+0xaa4/0x1960 net/core/dev.c:6645\n __napi_poll+0xae/0x340 net/core/dev.c:7709\n napi_poll net/core/dev.c:7772 [inline]\n net_rx_action+0x5d7/0xf50 net/core/dev.c:7929\n handle_softirqs+0x22b/0x870 kernel/softirq.c:622\n do_softirq+0x76/0xd0 kernel/softirq.c:523\n &lt;/IRQ&gt;\n &lt;TASK&gt;\n __local_bh_enable_ip+0xf8/0x130 kernel/softirq.c:450\n local_bh_enable include/linux/bottom_half.h:33 [inline]\n rcu_read_unlock_bh include/linux/rcupdate.h:924 [inline]\n __dev_queue_xmit+0x1dd7/0x3710 net/core/dev.c:4890\n neigh_output include/net/neighbour.h:556 [inline]\n ip_finish_output2+0xca9/0x1070 net/ipv4/ip_output.c:237\n NF_HOOK_COND include/linux/netfilter.h:307 [inline]\n ip_output+0x29f/0x450 net/ipv4/ip_output.c:438\n ip_send_skb+0x45/0xc0 net/ipv4/ip_output.c:1508\n udp_send_skb+0xb04/0x1510 net/ipv4/udp.c:1195\n udp_sendmsg+0x1a71/0x2350 net/ipv4/udp.c:1485\n sock_sendmsg_nosec net/socket.c:727 [inline]\n __sock_sendmsg net/socket.c:742 [inline]\n __sys_sendto+0x554/0x680 net/socket.c:2206\n __do_sys_sendto net/socket.c:2213 [inline]\n __se_sys_sendto net/socket.c:2209 [inline]\n __x64_sys_sendto+0xde/0x100 net/socket.c:2209\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0x160/0xf80 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x415a2d\nCode: b3 66 2e 0f 1f 84 00 00 00 00 00 66 90 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 &lt;48&gt; 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007f6bc31e41e8 EFLAGS: 00000212 ORIG_RAX: 000000000000002c\nRAX: ffffffffffffffda RBX: 00007f6bc31e4cdc RCX: 0000000000415a2d\nRDX: 0000000000000001 RSI: 00007f6bc31e421f RDI: 0000000000000003\nRBP: 00007f6bc31e4240 R08: 00007f6bc31e4220 R09: 0000000000000010\nR10: 0000000000000000 R11: \n---truncated---
@@ -6540,6 +6700,13 @@
- [unveiledhistory49/teamcity-cve-2026-63077-remediation](https://github.com/unveiledhistory49/teamcity-cve-2026-63077-remediation)
### CVE-2026-63223 (2026-07-31)
<code>CodeIgniter is a PHP full-stack web framework. Prior to 4.7.4, the is_image and mime_in upload validation rules do not independently enforce a safe client filename extension, allowing a remote attacker to upload executable content when an application preserves the client filename and stores uploads in a web-accessible script-enabled directory. Applications are impacted when they validate uploads using is_image or mime_in without an independent safe extension check (such as ext_in on patched versions), save uploaded files using the client-supplied filename, and place uploads in a web-accessible directory where PHP files can execute. This issue is fixed in version 4.7.4.
</code>
- [imbas007/CVE-2026-63223-POC](https://github.com/imbas007/CVE-2026-63223-POC)
### CVE-2026-63563
- [redr0nin/CVE-2026-63563](https://github.com/redr0nin/CVE-2026-63563)
@@ -9840,13 +10007,6 @@
- [InfoSecAntara/CVE-2025-14765-and-CVE-2025-14766](https://github.com/InfoSecAntara/CVE-2025-14765-and-CVE-2025-14766)
### CVE-2025-14783 (2025-12-31)
<code>The Easy Digital Downloads plugin for WordPress is vulnerable to Unvalidated Redirect in all versions up to, and including, 3.6.2. This is due to insufficient validation on the redirect url supplied via the 'edd_redirect' parameter. This makes it possible for unauthenticated attackers to redirect users with the password reset email to potentially malicious sites if they can successfully trick them into performing an action.
</code>
- [ZeroEthical/CVE-2025-14783-POC](https://github.com/ZeroEthical/CVE-2025-14783-POC)
### CVE-2025-14847 (2025-12-19)
<code>Mismatched length fields in Zlib compressed protocol headers may allow a read of uninitialized heap memory by an unauthenticated client. This issue affects all MongoDB Server v7.0 prior to 7.0.28 versions, MongoDB Server v8.0 versions prior to 8.0.17, MongoDB Server v8.2 versions prior to 8.2.3, MongoDB Server v6.0 versions prior to 6.0.27, MongoDB Server v5.0 versions prior to 5.0.32, MongoDB Server v4.4 versions prior to 4.4.30, MongoDB Server v4.2 versions greater than or equal to 4.2.0, MongoDB Server v4.0 versions greater than or equal to 4.0.0, and MongoDB Server v3.6 versions greater than or equal to 3.6.0.
@@ -11821,13 +11981,13 @@
- [m2hcz/PoC-for-Next.js-Middleware](https://github.com/m2hcz/PoC-for-Next.js-Middleware)
- [nocomp/CVE-2025-29927-scanner](https://github.com/nocomp/CVE-2025-29927-scanner)
- [yuzu-juice/CVE-2025-29927_demo](https://github.com/yuzu-juice/CVE-2025-29927_demo)
- [luq0x/0xMiddleware](https://github.com/luq0x/0xMiddleware)
- [AnonKryptiQuz/NextSploit](https://github.com/AnonKryptiQuz/NextSploit)
- [w2hcorp/CVE-2025-29927-PoC](https://github.com/w2hcorp/CVE-2025-29927-PoC)
- [ferpalma21/Automated-Next.js-Security-Scanner-for-CVE-2025-29927](https://github.com/ferpalma21/Automated-Next.js-Security-Scanner-for-CVE-2025-29927)
- [dante01yoon/CVE-2025-29927](https://github.com/dante01yoon/CVE-2025-29927)
- [ayato-shitomi/WebLab_CVE-2025-29927](https://github.com/ayato-shitomi/WebLab_CVE-2025-29927)
- [Kamal-418/Vulnerable-Lab-NextJS-CVE-2025-29927](https://github.com/Kamal-418/Vulnerable-Lab-NextJS-CVE-2025-29927)
- [Ev3rPalestine/0xMiddleware](https://github.com/Ev3rPalestine/0xMiddleware)
- [dedibagus/cve-2025-29927-poc](https://github.com/dedibagus/cve-2025-29927-poc)
- [alastair66/CVE-2025-29927](https://github.com/alastair66/CVE-2025-29927)
- [0xb1lal/CVE-2025-29927](https://github.com/0xb1lal/CVE-2025-29927)
@@ -11895,6 +12055,7 @@
- [gitgudKrish/cve-2025-29927-nextjs](https://github.com/gitgudKrish/cve-2025-29927-nextjs)
- [SwapnilDeshpande/cve-2025-29927-lab](https://github.com/SwapnilDeshpande/cve-2025-29927-lab)
- [Fomovet/cve-2025-29927](https://github.com/Fomovet/cve-2025-29927)
- [berraesen/nextjs-middleware-auth-bypass-lab](https://github.com/berraesen/nextjs-middleware-auth-bypass-lab)
### CVE-2025-29943 (2026-01-16)
@@ -31911,7 +32072,7 @@
- [IlanDudnik/CVE-2023-21768](https://github.com/IlanDudnik/CVE-2023-21768)
- [radoi-teodor/CVE-2023-21768-DSE-Bypass](https://github.com/radoi-teodor/CVE-2023-21768-DSE-Bypass)
- [Feede33/Windows-11-Exploit](https://github.com/Feede33/Windows-11-Exploit)
- [r4uzn/CVE-2023-21768](https://github.com/r4uzn/CVE-2023-21768)
- [leandrofleury/CVE-2023-21768](https://github.com/leandrofleury/CVE-2023-21768)
### CVE-2023-21817 (2023-02-14)
@@ -37423,7 +37584,6 @@
- [ladyg00se/CVE-2023-45866_WIP](https://github.com/ladyg00se/CVE-2023-45866_WIP)
- [Sergeb250/BlueDucky](https://github.com/Sergeb250/BlueDucky)
- [hegaz0y/-BuL](https://github.com/hegaz0y/-BuL)
- [0xBADACTOR/CVE-2023-45866](https://github.com/0xBADACTOR/CVE-2023-45866)
### CVE-2023-45878 (2023-11-14)
@@ -72643,6 +72803,7 @@
- [R3fr4kt/Shocker-TJNULL-OSCP-](https://github.com/R3fr4kt/Shocker-TJNULL-OSCP-)
- [cyberexpert111/Blind-SSRF-to-Remote-Code-Execution-Shellshock-Professional-Bug-Bounty-Report](https://github.com/cyberexpert111/Blind-SSRF-to-Remote-Code-Execution-Shellshock-Professional-Bug-Bounty-Report)
- [caverm/Shellshock_CVE-2014-6271](https://github.com/caverm/Shellshock_CVE-2014-6271)
- [FREEGUY-6/dmz-security-monitoring-hardening](https://github.com/FREEGUY-6/dmz-security-monitoring-hardening)
### CVE-2014-6287 (2014-10-07)