nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity

Auto Update 2026/08/01 18:49:24

Browse Source
This commit is contained in:
motikan2010-bot committed 2026-08-02 03:49:24 +09:00
1 parent 4e3de9f1f9
commit c9f2eacf7d
58 files changed
+560 -370
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

2012/CVE-2012-2459.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "Browser-based Merkle tree demo — build a tree, generate inclusion proofs, recompute the root hash by hash, and replay the RFC 6962 second-preimage and CVE-2012-2459 attacks. Real SHA-256. No backend.",
"fork": false,
"created_at": "2026-06-28T17:01:57Z",
"updated_at": "2026-07-12T22:46:02Z",
"pushed_at": "2026-07-12T22:45:59Z",
"updated_at": "2026-08-01T16:02:56Z",
"pushed_at": "2026-08-01T16:02:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2014/CVE-2014-6271.json
+4 -4
View File
@@ -1273,10 +1273,10 @@
"description": "Shellshock exploit + vulnerable environment",
"fork": false,
"created_at": "2016-12-07T23:38:50Z",
"updated_at": "2026-07-19T07:30:15Z",
"updated_at": "2026-08-01T13:08:23Z",
"pushed_at": "2023-05-11T02:12:25Z",
"stargazers_count": 231,
"watchers_count": 231,
"stargazers_count": 230,
"watchers_count": 230,
"has_discussions": false,
"forks_count": 60,
"allow_forking": true,
@@ -1294,7 +1294,7 @@
],
"visibility": "public",
"forks": 60,
"watchers": 231,
"watchers": 230,
"score": 0,
"subscribers_count": 4
},
2018/CVE-2018-0296.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 205,
"watchers_count": 205,
"has_discussions": false,
"forks_count": 64,
"forks_count": 63,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 64,
"forks": 63,
"watchers": 205,
"score": 0,
"subscribers_count": 7
2018/CVE-2018-13379.json
+2 -2
View File
@@ -450,8 +450,8 @@
"description": "VampSecure Labs: FortiOS CVE scanner (CVE-2018-13379, CVE-2022-40684, CVE-2023-27997, CVE-2024-21762)",
"fork": false,
"created_at": "2026-07-31T10:13:19Z",
"updated_at": "2026-07-31T10:38:19Z",
"pushed_at": "2026-07-31T10:36:46Z",
"updated_at": "2026-08-01T17:18:42Z",
"pushed_at": "2026-08-01T17:18:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2018/CVE-2018-20250.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 492,
"watchers_count": 492,
"has_discussions": false,
"forks_count": 172,
"forks_count": 171,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 172,
"forks": 171,
"watchers": 492,
"score": 0,
"subscribers_count": 10
2018/CVE-2018-7600.json
+2 -2
View File
@@ -92,7 +92,7 @@
"stargazers_count": 600,
"watchers_count": 600,
"has_discussions": false,
"forks_count": 170,
"forks_count": 169,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -110,7 +110,7 @@
"sa-core-2018-002"
],
"visibility": "public",
"forks": 170,
"forks": 169,
"watchers": 600,
"score": 0,
"subscribers_count": 22
2018/CVE-2018-8453.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "cve-2018-8453 exp",
"fork": false,
"created_at": "2019-01-18T10:40:03Z",
"updated_at": "2026-05-13T19:46:07Z",
"updated_at": "2026-08-01T13:49:38Z",
"pushed_at": "2019-12-13T02:24:39Z",
"stargazers_count": 120,
"watchers_count": 120,
"stargazers_count": 119,
"watchers_count": 119,
"has_discussions": false,
"forks_count": 51,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 51,
"watchers": 120,
"watchers": 119,
"score": 0,
"subscribers_count": 6
},
2018/CVE-2018-9995.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 557,
"watchers_count": 557,
"has_discussions": false,
"forks_count": 200,
"forks_count": 199,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 200,
"forks": 199,
"watchers": 557,
"score": 0,
"subscribers_count": 32
2019/CVE-2019-1040.json
+2 -2
View File
@@ -179,8 +179,8 @@
"description": "The Windows Print Spooler privilege escalation vulnerability (CVE-2019-1040\/CVE-2019-1019) has been implemented as a Reflective DLL for penetration testing.",
"fork": false,
"created_at": "2025-12-06T19:56:12Z",
"updated_at": "2026-08-01T12:04:55Z",
"pushed_at": "2026-08-01T12:04:35Z",
"updated_at": "2026-08-01T17:43:09Z",
"pushed_at": "2026-08-01T17:43:06Z",
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
2020/CVE-2020-1472.json
+2 -2
View File
@@ -2383,8 +2383,8 @@
"description": "Zerologon (CVE-2020-1472) Proof-of-Concept application - Critical Active Directory vulnerability exploitation tool.",
"fork": false,
"created_at": "2025-12-06T10:17:38Z",
"updated_at": "2026-08-01T11:47:12Z",
"pushed_at": "2026-08-01T11:47:08Z",
"updated_at": "2026-08-01T18:09:20Z",
"pushed_at": "2026-08-01T18:08:59Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
2020/CVE-2020-3433.json
+2 -2
View File
@@ -19,7 +19,7 @@
"stargazers_count": 41,
"watchers_count": 41,
"has_discussions": false,
"forks_count": 13,
"forks_count": 12,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,7 +27,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 13,
"forks": 12,
"watchers": 41,
"score": 0,
"subscribers_count": 5
2021/CVE-2021-1675.json
+2 -2
View File
@@ -52,7 +52,7 @@
"stargazers_count": 1995,
"watchers_count": 1995,
"has_discussions": false,
"forks_count": 575,
"forks_count": 574,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -60,7 +60,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 575,
"forks": 574,
"watchers": 1995,
"score": 0,
"subscribers_count": 38
2021/CVE-2021-33044.json
+2 -2
View File
@@ -212,8 +212,8 @@
"description": "Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.",
"fork": false,
"created_at": "2026-03-28T17:42:44Z",
"updated_at": "2026-08-01T12:07:06Z",
"pushed_at": "2026-08-01T12:06:47Z",
"updated_at": "2026-08-01T18:08:18Z",
"pushed_at": "2026-08-01T18:08:12Z",
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
2022/CVE-2022-24785.json
+7 -7
View File
@@ -2,19 +2,19 @@
{
"id": 647037210,
"name": "cve-2022-24785-poc-lab",
"full_name": "pS3ud0RAnD0m\/cve-2022-24785-poc-lab",
"full_name": "AnomalousVectors\/cve-2022-24785-poc-lab",
"owner": {
"login": "pS3ud0RAnD0m",
"id": 3769015,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/3769015?v=4",
"html_url": "https:\/\/github.com\/pS3ud0RAnD0m",
"login": "AnomalousVectors",
"id": 220130607,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/220130607?v=4",
"html_url": "https:\/\/github.com\/AnomalousVectors",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/pS3ud0RAnD0m\/cve-2022-24785-poc-lab",
"html_url": "https:\/\/github.com\/AnomalousVectors\/cve-2022-24785-poc-lab",
"description": "Moment.js vuln lab",
"fork": false,
"created_at": "2023-05-29T23:40:56Z",
"updated_at": "2025-07-13T13:24:17Z",
"updated_at": "2026-08-01T16:12:53Z",
"pushed_at": "2025-07-13T13:24:12Z",
"stargazers_count": 1,
"watchers_count": 1,
2022/CVE-2022-25765.json
-33
View File
@@ -297,39 +297,6 @@
"score": 0,
"subscribers_count": 1
},
{
"id": 1114808475,
"name": "pdfkit-cve-2022-25765",
"full_name": "lst15\/pdfkit-cve-2022-25765",
"owner": {
"login": "lst15",
"id": 38253462,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/38253462?v=4",
"html_url": "https:\/\/github.com\/lst15",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/lst15\/pdfkit-cve-2022-25765",
"description": null,
"fork": false,
"created_at": "2025-12-11T23:13:44Z",
"updated_at": "2025-12-11T23:15:43Z",
"pushed_at": "2025-12-11T23:15:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1255266005,
"name": "CVE-2022-25765-exploit",
2022/CVE-2022-40684.json
+2 -2
View File
@@ -948,8 +948,8 @@
"description": "VampSecure Labs: FortiOS CVE scanner (CVE-2018-13379, CVE-2022-40684, CVE-2023-27997, CVE-2024-21762)",
"fork": false,
"created_at": "2026-07-31T10:13:19Z",
"updated_at": "2026-07-31T10:38:19Z",
"pushed_at": "2026-07-31T10:36:46Z",
"updated_at": "2026-08-01T17:18:42Z",
"pushed_at": "2026-08-01T17:18:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-27997.json
+2 -2
View File
@@ -344,8 +344,8 @@
"description": "VampSecure Labs: FortiOS CVE scanner (CVE-2018-13379, CVE-2022-40684, CVE-2023-27997, CVE-2024-21762)",
"fork": false,
"created_at": "2026-07-31T10:13:19Z",
"updated_at": "2026-07-31T10:38:19Z",
"pushed_at": "2026-07-31T10:36:46Z",
"updated_at": "2026-08-01T17:18:42Z",
"pushed_at": "2026-08-01T17:18:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2023/CVE-2023-32434.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Deterministic kernel exploit based on CVE-2023-32434.",
"fork": false,
"created_at": "2025-03-01T23:07:37Z",
"updated_at": "2026-07-29T03:38:15Z",
"updated_at": "2026-08-01T17:04:21Z",
"pushed_at": "2026-05-14T20:54:50Z",
"stargazers_count": 132,
"watchers_count": 132,
"stargazers_count": 133,
"watchers_count": 133,
"has_discussions": false,
"forks_count": 18,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 18,
"watchers": 132,
"watchers": 133,
"score": 0,
"subscribers_count": 5
},
2024/CVE-2024-21413.json
+4 -4
View File
@@ -113,10 +113,10 @@
"description": "CVE-2024-21413 PoC for THM Lab",
"fork": false,
"created_at": "2024-02-17T14:52:52Z",
"updated_at": "2026-07-31T12:26:23Z",
"updated_at": "2026-08-01T14:24:59Z",
"pushed_at": "2024-03-13T02:44:28Z",
"stargazers_count": 269,
"watchers_count": 269,
"stargazers_count": 270,
"watchers_count": 270,
"has_discussions": false,
"forks_count": 61,
"allow_forking": true,
@@ -127,7 +127,7 @@
"topics": [],
"visibility": "public",
"forks": 61,
"watchers": 269,
"watchers": 270,
"score": 0,
"subscribers_count": 2
},
2024/CVE-2024-21762.json
+2 -2
View File
@@ -344,8 +344,8 @@
"description": "VampSecure Labs: FortiOS CVE scanner (CVE-2018-13379, CVE-2022-40684, CVE-2023-27997, CVE-2024-21762)",
"fork": false,
"created_at": "2026-07-31T10:13:19Z",
"updated_at": "2026-07-31T10:38:19Z",
"pushed_at": "2026-07-31T10:36:46Z",
"updated_at": "2026-08-01T17:18:42Z",
"pushed_at": "2026-08-01T17:18:39Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2024/CVE-2024-24919.json
+16 -6
View File
@@ -1949,10 +1949,10 @@
"description": "Incident Response (IR) case study documenting the investigation of an exploitation attempt targeting CVE-2024-24919 (Arbitrary File Read) on a Check Point Security Gateway. Includes comprehensive SIEM analysis, firewall logs, raw web access log inspection (`\/var\/log\/access.log`), IOCs, MITRE ATT&CK mapping, and post-exploitation validation.",
"fork": false,
"created_at": "2026-08-01T09:46:22Z",
"updated_at": "2026-08-01T09:53:17Z",
"pushed_at": "2026-08-01T09:53:08Z",
"stargazers_count": 0,
"watchers_count": 0,
"updated_at": "2026-08-01T13:26:57Z",
"pushed_at": "2026-08-01T13:25:36Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -1960,10 +1960,20 @@
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"topics": [
"checkpoint",
"cve-2024-24919",
"cybersecurity",
"forensics",
"incident-response",
"lfi",
"mitre-attack",
"soc",
"threat-intelligence"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2024/CVE-2024-2961.json
-66
View File
@@ -470,71 +470,5 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1318335137,
"name": "cnext-exploits",
"full_name": "darkrapid8\/cnext-exploits",
"owner": {
"login": "darkrapid8",
"id": 292119969,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/292119969?v=4",
"html_url": "https:\/\/github.com\/darkrapid8",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/darkrapid8\/cnext-exploits",
"description": "Exploits for CNEXT (CVE-2024-2961), a buffer overflow in the glibc's iconv()",
"fork": false,
"created_at": "2026-07-31T12:37:41Z",
"updated_at": "2026-08-01T06:01:59Z",
"pushed_at": "2026-07-31T12:41:49Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1318465999,
"name": "cnext-exploits",
"full_name": "roundcube-utils\/cnext-exploits",
"owner": {
"login": "roundcube-utils",
"id": 278405201,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/278405201?v=4",
"html_url": "https:\/\/github.com\/roundcube-utils",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/roundcube-utils\/cnext-exploits",
"description": "Exploits for CNEXT (CVE-2024-2961), a buffer overflow in the glibc's iconv()",
"fork": false,
"created_at": "2026-07-31T15:02:14Z",
"updated_at": "2026-08-01T06:00:08Z",
"pushed_at": "2026-07-31T15:03:42Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2024/CVE-2024-43468.json
+33
View File
@@ -31,5 +31,38 @@
"watchers": 96,
"score": 0,
"subscribers_count": 0
},
{
"id": 918185186,
"name": "CVE-2024-43468_mTLS_go",
"full_name": "nikallass\/CVE-2024-43468_mTLS_go",
"owner": {
"login": "nikallass",
"id": 10115306,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/10115306?v=4",
"html_url": "https:\/\/github.com\/nikallass",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/nikallass\/CVE-2024-43468_mTLS_go",
"description": "CVE-2024-43468 SCCM SQL Injection Exploit (mTLS unextractable client cert from MacOS keychain version)",
"fork": false,
"created_at": "2025-01-17T12:20:09Z",
"updated_at": "2026-01-16T12:05:56Z",
"pushed_at": "2025-01-17T12:42:32Z",
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 1
}
]
2024/CVE-2024-4367.json
+7 -7
View File
@@ -598,19 +598,19 @@
{
"id": 1010265228,
"name": "cve-2024-4367-poc",
"full_name": "pS3ud0RAnD0m\/cve-2024-4367-poc",
"full_name": "AnomalousVectors\/cve-2024-4367-poc",
"owner": {
"login": "pS3ud0RAnD0m",
"id": 3769015,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/3769015?v=4",
"html_url": "https:\/\/github.com\/pS3ud0RAnD0m",
"login": "AnomalousVectors",
"id": 220130607,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/220130607?v=4",
"html_url": "https:\/\/github.com\/AnomalousVectors",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/pS3ud0RAnD0m\/cve-2024-4367-poc",
"html_url": "https:\/\/github.com\/AnomalousVectors\/cve-2024-4367-poc",
"description": "POC for PDF JS' CVE-2024-4367 vuln",
"fork": false,
"created_at": "2025-06-28T17:46:10Z",
"updated_at": "2025-06-28T19:30:53Z",
"updated_at": "2026-08-01T16:13:19Z",
"pushed_at": "2025-06-28T19:25:44Z",
"stargazers_count": 1,
"watchers_count": 1,
2024/CVE-2024-50967.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 917699084,
"name": "CVE-2024-50967",
"full_name": "0xByteHunter\/CVE-2024-50967",
"owner": {
"login": "0xByteHunter",
"id": 174806873,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/174806873?v=4",
"html_url": "https:\/\/github.com\/0xByteHunter",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xByteHunter\/CVE-2024-50967",
"description": "DATAGERRY Broken Access Control",
"fork": false,
"created_at": "2025-01-16T13:38:20Z",
"updated_at": "2025-01-17T14:38:57Z",
"pushed_at": "2025-01-17T14:38:55Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 1
}
]
2025/CVE-2025-24204.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "FairPlay decryptor (dump iPA) for iOS Application that running on macOS with SIP-enabled, using CVE-2025-24204. Support macOS 15.0-15.2",
"fork": false,
"created_at": "2025-09-04T17:49:51Z",
"updated_at": "2026-07-23T05:54:55Z",
"updated_at": "2026-08-01T17:25:58Z",
"pushed_at": "2025-09-04T17:59:49Z",
"stargazers_count": 146,
"watchers_count": 146,
"stargazers_count": 147,
"watchers_count": 147,
"has_discussions": false,
"forks_count": 21,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 21,
"watchers": 146,
"watchers": 147,
"score": 0,
"subscribers_count": 2
}
2025/CVE-2025-33073.json
+4 -4
View File
@@ -133,8 +133,8 @@
},
{
"id": 1096398873,
"name": "CVE-2025-33073",
"full_name": "uziii2208\/CVE-2025-33073",
"name": "come-to-telegram-rickluminari1--CVE-2025-33073",
"full_name": "uziii2208\/come-to-telegram-rickluminari1--CVE-2025-33073",
"owner": {
"login": "uziii2208",
"id": 112312970,
@@ -142,11 +142,11 @@
"html_url": "https:\/\/github.com\/uziii2208",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/uziii2208\/CVE-2025-33073",
"html_url": "https:\/\/github.com\/uziii2208\/come-to-telegram-rickluminari1--CVE-2025-33073",
"description": "Universal exploitation tool for CVE-2025-33073 targeting Windows Domain Controllers with DNSAdmins privileges and WinRM enabled.",
"fork": false,
"created_at": "2025-11-14T11:17:00Z",
"updated_at": "2026-07-13T12:08:31Z",
"updated_at": "2026-08-01T17:42:02Z",
"pushed_at": "2025-11-14T11:50:13Z",
"stargazers_count": 67,
"watchers_count": 67,
2025/CVE-2025-52915.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-08-01T00:50:35Z",
"updated_at": "2026-08-01T16:05:15Z",
"pushed_at": "2026-07-12T09:40:22Z",
"stargazers_count": 876,
"watchers_count": 876,
"stargazers_count": 877,
"watchers_count": 877,
"has_discussions": false,
"forks_count": 130,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 130,
"watchers": 876,
"watchers": 877,
"score": 0,
"subscribers_count": 20
}
2025/CVE-2025-57819.json
+33
View File
@@ -749,5 +749,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1319395730,
"name": "CVE-2025-57819-RCE",
"full_name": "TeteREN\/CVE-2025-57819-RCE",
"owner": {
"login": "TeteREN",
"id": 146318696,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/146318696?v=4",
"html_url": "https:\/\/github.com\/TeteREN",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/TeteREN\/CVE-2025-57819-RCE",
"description": "CVE-2025-57819-RCE_PoC",
"fork": false,
"created_at": "2026-08-01T15:17:23Z",
"updated_at": "2026-08-01T15:20:36Z",
"pushed_at": "2026-08-01T15:20:25Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-67158.json
-35
View File
@@ -1,35 +0,0 @@
[
{
"id": 1126177242,
"name": "CVE-2025-67158",
"full_name": "Remenis\/CVE-2025-67158",
"owner": {
"login": "Remenis",
"id": 97015958,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97015958?v=4",
"html_url": "https:\/\/github.com\/Remenis",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Remenis\/CVE-2025-67158",
"description": "Revotech I6032W-FHW IP camera firmware fails to validate authentication fields in API requests, allowing attackers to bypass authentication and retrieve administrative information.",
"fork": false,
"created_at": "2026-01-01T10:05:31Z",
"updated_at": "2026-01-01T10:09:24Z",
"pushed_at": "2026-01-01T10:09:21Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-69212.json
+33
View File
@@ -345,5 +345,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1319357635,
"name": "CVE-2025-69212-for-myself",
"full_name": "liaomilk\/CVE-2025-69212-for-myself",
"owner": {
"login": "liaomilk",
"id": 306416536,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/306416536?v=4",
"html_url": "https:\/\/github.com\/liaomilk",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/liaomilk\/CVE-2025-69212-for-myself",
"description": "just record for myself",
"fork": false,
"created_at": "2026-08-01T14:25:40Z",
"updated_at": "2026-08-01T14:56:03Z",
"pushed_at": "2026-08-01T14:56:00Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2025/CVE-2025-69256.json
+1 -1
View File
@@ -48,7 +48,7 @@
"fork": false,
"created_at": "2026-04-27T20:12:08Z",
"updated_at": "2026-07-13T07:38:46Z",
"pushed_at": "2026-07-13T07:38:16Z",
"pushed_at": "2026-08-01T16:55:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": true,
2026/CVE-2026-13152.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-13152: Custom Fields Account Registration For WooCommerce Unauthenticated Privilege Escalation PoC & Advisory by Huynh Kien Minh (MinhHK).",
"fork": false,
"created_at": "2026-08-01T04:42:38Z",
"updated_at": "2026-08-01T05:47:43Z",
"updated_at": "2026-08-01T13:51:13Z",
"pushed_at": "2026-08-01T05:47:26Z",
"stargazers_count": 0,
"watchers_count": 0,
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 0,
"watchers": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-13156.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "CVE-2026-13156 Vulnerability Advisory & PoC — Discovered by Huynh Kien Minh (MinhHK).",
"fork": false,
"created_at": "2026-07-21T01:46:42Z",
"updated_at": "2026-07-21T05:57:20Z",
"pushed_at": "2026-07-21T05:57:00Z",
"updated_at": "2026-08-01T13:16:17Z",
"pushed_at": "2026-08-01T13:16:10Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-13158.json
+14 -3
View File
@@ -14,8 +14,8 @@
"description": null,
"fork": false,
"created_at": "2026-08-01T11:47:38Z",
"updated_at": "2026-08-01T11:47:39Z",
"pushed_at": "2026-08-01T11:47:39Z",
"updated_at": "2026-08-01T13:01:12Z",
"pushed_at": "2026-08-01T12:59:24Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
@@ -25,7 +25,18 @@
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"topics": [
"arbitrary-file-upload",
"bugbounty",
"cve",
"cve-2026-13158",
"huynh-kien-minh",
"infosec",
"poc",
"rce",
"security-advisory",
"wordpress"
],
"visibility": "public",
"forks": 0,
"watchers": 0,
2026/CVE-2026-14361.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1319459405,
"name": "CVE-2026-14361",
"full_name": "0xmrma\/CVE-2026-14361",
"owner": {
"login": "0xmrma",
"id": 197543882,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/197543882?v=4",
"html_url": "https:\/\/github.com\/0xmrma",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xmrma\/CVE-2026-14361",
"description": "Consul Template's writeToFile helper opened an operator-supplied destination directly and followed linked path components, allowing rendered output to escape the intended directory and overwrite a preexisting file.",
"fork": false,
"created_at": "2026-08-01T16:46:00Z",
"updated_at": "2026-08-01T16:48:44Z",
"pushed_at": "2026-08-01T16:48:40Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-16723.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Docker labs + defensive scanner for fastjson remote-class-load RCE. fastjson 1.2.66-1.2.83: @JSONType resource probe (CVE-2026-16723). fastjson2 2.0.57: attacker @type reaches loadClass with autoType DISABLED via polymorphic types (@JSONType(seeAlso) \/ Jackson @JsonSubTypes). Marker-only payloads; safeMode + JDK17 controls.",
"fork": false,
"created_at": "2026-07-20T17:00:03Z",
"updated_at": "2026-07-31T09:17:12Z",
"updated_at": "2026-08-01T15:35:34Z",
"pushed_at": "2026-07-27T11:16:07Z",
"stargazers_count": 193,
"watchers_count": 193,
"stargazers_count": 194,
"watchers_count": 194,
"has_discussions": false,
"forks_count": 91,
"allow_forking": true,
@@ -44,7 +44,7 @@
],
"visibility": "public",
"forks": 91,
"watchers": 193,
"watchers": 194,
"score": 0,
"subscribers_count": 3
},
2026/CVE-2026-20637.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-20637: AppleSEPKeyStore Use-After-Free — iOS\/macOS kernel vulnerability (patched in 26.4)",
"fork": false,
"created_at": "2026-01-13T08:21:42Z",
"updated_at": "2026-07-06T14:21:41Z",
"updated_at": "2026-08-01T15:34:21Z",
"pushed_at": "2026-06-28T22:18:39Z",
"stargazers_count": 55,
"watchers_count": 55,
"stargazers_count": 54,
"watchers_count": 54,
"has_discussions": false,
"forks_count": 7,
"allow_forking": true,
@@ -35,7 +35,7 @@
],
"visibility": "public",
"forks": 7,
"watchers": 55,
"watchers": 54,
"score": 0,
"subscribers_count": 1
}
2026/CVE-2026-20896.json
+4 -4
View File
@@ -47,10 +47,10 @@
"description": "Public PoC and detector for CVE-2026-20896 (\"Gitea Docker: One Header, Any User\")",
"fork": false,
"created_at": "2026-07-05T17:35:09Z",
"updated_at": "2026-07-13T15:25:58Z",
"updated_at": "2026-08-01T18:34:31Z",
"pushed_at": "2026-07-05T17:35:12Z",
"stargazers_count": 6,
"watchers_count": 6,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -61,7 +61,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 6,
"watchers": 5,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-24061.json
+4 -4
View File
@@ -143,10 +143,10 @@
"description": "CVE-2026-24061 exploit PoC",
"fork": false,
"created_at": "2026-03-08T11:25:39Z",
"updated_at": "2026-08-01T12:46:06Z",
"updated_at": "2026-08-01T18:46:23Z",
"pushed_at": "2026-07-30T15:17:50Z",
"stargazers_count": 51,
"watchers_count": 51,
"stargazers_count": 91,
"watchers_count": 91,
"has_discussions": false,
"forks_count": 8,
"allow_forking": true,
@@ -163,7 +163,7 @@
],
"visibility": "public",
"forks": 8,
"watchers": 51,
"watchers": 91,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-27641.json
+1 -1
View File
@@ -14,7 +14,7 @@
"description": "PoC and test server",
"fork": false,
"created_at": "2026-07-23T08:48:45Z",
"updated_at": "2026-07-25T09:28:41Z",
"updated_at": "2026-08-01T13:34:04Z",
"pushed_at": "2026-07-23T08:59:37Z",
"stargazers_count": 0,
"watchers_count": 0,
2026/CVE-2026-3609.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "BYOVD research use cases featuring vulnerable driver discovery and reverse engineering methodology. (CVE-2025-52915, CVE-2025-1055, CVE-2026-3609, CVE-2026-8501).",
"fork": false,
"created_at": "2023-12-05T14:52:11Z",
"updated_at": "2026-08-01T00:50:35Z",
"updated_at": "2026-08-01T16:05:15Z",
"pushed_at": "2026-07-12T09:40:22Z",
"stargazers_count": 876,
"watchers_count": 876,
"stargazers_count": 877,
"watchers_count": 877,
"has_discussions": false,
"forks_count": 130,
"allow_forking": true,
@@ -39,7 +39,7 @@
],
"visibility": "public",
"forks": 130,
"watchers": 876,
"watchers": 877,
"score": 0,
"subscribers_count": 20
}
2026/CVE-2026-36425.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-36425 OPSWAT AppRemover (ardrv.sys) improper access control advisory",
"fork": false,
"created_at": "2026-06-17T15:11:22Z",
"updated_at": "2026-07-28T12:23:18Z",
"updated_at": "2026-08-01T16:24:26Z",
"pushed_at": "2026-07-17T12:52:36Z",
"stargazers_count": 16,
"watchers_count": 16,
"stargazers_count": 17,
"watchers_count": 17,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -34,7 +34,7 @@
],
"visibility": "public",
"forks": 3,
"watchers": 16,
"watchers": 17,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-41940.json
+8 -8
View File
@@ -157,15 +157,15 @@
{
"id": 1226559584,
"name": "CVE-2026-41940",
"full_name": "Christian93111\/CVE-2026-41940",
"full_name": "Kill1234545\/CVE-2026-41940",
"owner": {
"login": "Christian93111",
"login": "Kill1234545",
"id": 135021882,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/135021882?v=4",
"html_url": "https:\/\/github.com\/Christian93111",
"html_url": "https:\/\/github.com\/Kill1234545",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Christian93111\/CVE-2026-41940",
"html_url": "https:\/\/github.com\/Kill1234545\/CVE-2026-41940",
"description": "cPanel\/WHM Authentication Bypass (Zero-Day Vulnerability)",
"fork": false,
"created_at": "2026-05-01T14:57:03Z",
@@ -609,10 +609,10 @@
"description": "A cPanel and WHM authentication bypassing tool",
"fork": false,
"created_at": "2026-07-20T14:15:54Z",
"updated_at": "2026-08-01T12:46:11Z",
"updated_at": "2026-08-01T18:46:15Z",
"pushed_at": "2026-07-30T15:00:52Z",
"stargazers_count": 58,
"watchers_count": 58,
"stargazers_count": 103,
"watchers_count": 103,
"has_discussions": false,
"forks_count": 11,
"allow_forking": true,
@@ -629,7 +629,7 @@
],
"visibility": "public",
"forks": 11,
"watchers": 58,
"watchers": 103,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-42533.json
+2 -2
View File
@@ -120,8 +120,8 @@
"description": null,
"fork": false,
"created_at": "2026-07-21T05:27:18Z",
"updated_at": "2026-07-31T04:49:09Z",
"pushed_at": "2026-07-31T04:49:05Z",
"updated_at": "2026-08-01T18:01:58Z",
"pushed_at": "2026-08-01T18:01:52Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-43499.json
+54 -54
View File
@@ -245,12 +245,12 @@
"description": "CVE-2026-43499 Implementation for 6.12.23-android16-5-g75e9b1c7ae7c-abogki463945075-4k",
"fork": false,
"created_at": "2026-07-12T10:15:03Z",
"updated_at": "2026-07-31T15:30:41Z",
"updated_at": "2026-08-01T14:59:16Z",
"pushed_at": "2026-07-15T22:46:59Z",
"stargazers_count": 205,
"watchers_count": 205,
"stargazers_count": 206,
"watchers_count": 206,
"has_discussions": false,
"forks_count": 78,
"forks_count": 80,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -258,8 +258,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 78,
"watchers": 205,
"forks": 80,
"watchers": 206,
"score": 0,
"subscribers_count": 1
},
@@ -311,12 +311,12 @@
"description": "GhostLock (CVE-2026-43499) kernel exploit for OnePlus devices with locked bootloader",
"fork": false,
"created_at": "2026-07-12T16:05:24Z",
"updated_at": "2026-08-01T05:59:58Z",
"updated_at": "2026-08-01T18:04:28Z",
"pushed_at": "2026-07-28T20:20:52Z",
"stargazers_count": 132,
"watchers_count": 132,
"stargazers_count": 138,
"watchers_count": 138,
"has_discussions": false,
"forks_count": 35,
"forks_count": 36,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -331,8 +331,8 @@
"root"
],
"visibility": "public",
"forks": 35,
"watchers": 132,
"forks": 36,
"watchers": 138,
"score": 0,
"subscribers_count": 4
},
@@ -483,10 +483,10 @@
"description": "Android version CVE-2026-43499 tester",
"fork": false,
"created_at": "2026-07-13T13:31:55Z",
"updated_at": "2026-08-01T05:29:55Z",
"updated_at": "2026-08-01T15:37:20Z",
"pushed_at": "2026-07-20T07:22:42Z",
"stargazers_count": 26,
"watchers_count": 26,
"stargazers_count": 27,
"watchers_count": 27,
"has_discussions": false,
"forks_count": 4,
"allow_forking": true,
@@ -497,7 +497,7 @@
"topics": [],
"visibility": "public",
"forks": 4,
"watchers": 26,
"watchers": 27,
"score": 0,
"subscribers_count": 0
},
@@ -620,7 +620,7 @@
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 44,
"forks_count": 45,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -628,7 +628,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 44,
"forks": 45,
"watchers": 6,
"score": 0,
"subscribers_count": 0
@@ -681,10 +681,10 @@
"description": "Xiaomi K70e (duchamp) one-click root via CVE-2026-43499 (IonStack) + KernelSU integration",
"fork": false,
"created_at": "2026-07-15T03:59:56Z",
"updated_at": "2026-08-01T12:24:12Z",
"updated_at": "2026-08-01T14:34:03Z",
"pushed_at": "2026-07-31T03:13:27Z",
"stargazers_count": 34,
"watchers_count": 34,
"stargazers_count": 35,
"watchers_count": 35,
"has_discussions": true,
"forks_count": 12,
"allow_forking": true,
@@ -695,7 +695,7 @@
"topics": [],
"visibility": "public",
"forks": 12,
"watchers": 34,
"watchers": 35,
"score": 0,
"subscribers_count": 0
},
@@ -818,7 +818,7 @@
"stargazers_count": 6,
"watchers_count": 6,
"has_discussions": false,
"forks_count": 2,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -826,7 +826,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"forks": 3,
"watchers": 6,
"score": 0,
"subscribers_count": 0
@@ -1044,12 +1044,12 @@
"description": "KSU installer for supported Samsung Galaxy firmware with CVE-2026-43499",
"fork": false,
"created_at": "2026-07-17T14:24:08Z",
"updated_at": "2026-08-01T12:26:57Z",
"updated_at": "2026-08-01T18:48:44Z",
"pushed_at": "2026-08-01T10:54:09Z",
"stargazers_count": 348,
"watchers_count": 348,
"stargazers_count": 381,
"watchers_count": 381,
"has_discussions": false,
"forks_count": 55,
"forks_count": 58,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1057,8 +1057,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 55,
"watchers": 348,
"forks": 58,
"watchers": 381,
"score": 0,
"subscribers_count": 6
},
@@ -1110,10 +1110,10 @@
"description": "（CVE-2026-43499）内核漏洞利用程序，适用于未解锁 Bootloader 的一加设备。",
"fork": false,
"created_at": "2026-07-18T06:24:34Z",
"updated_at": "2026-08-01T00:49:55Z",
"updated_at": "2026-08-01T18:04:25Z",
"pushed_at": "2026-07-19T08:28:49Z",
"stargazers_count": 30,
"watchers_count": 30,
"stargazers_count": 31,
"watchers_count": 31,
"has_discussions": false,
"forks_count": 11,
"allow_forking": true,
@@ -1124,7 +1124,7 @@
"topics": [],
"visibility": "public",
"forks": 11,
"watchers": 30,
"watchers": 31,
"score": 0,
"subscribers_count": 0
},
@@ -1143,10 +1143,10 @@
"description": "CVE-2026-43499 (IonStack\/GhostLock) pure-C re-root POC for Samsung SM-T878U \/ gts7l (T878USQS8DXE1)",
"fork": false,
"created_at": "2026-07-18T08:18:28Z",
"updated_at": "2026-07-26T19:42:29Z",
"updated_at": "2026-08-01T15:11:43Z",
"pushed_at": "2026-07-21T13:45:47Z",
"stargazers_count": 3,
"watchers_count": 3,
"stargazers_count": 4,
"watchers_count": 4,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -1165,7 +1165,7 @@
],
"visibility": "public",
"forks": 3,
"watchers": 3,
"watchers": 4,
"score": 0,
"subscribers_count": 0
},
@@ -1365,7 +1365,7 @@
"stargazers_count": 3,
"watchers_count": 3,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1373,7 +1373,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"forks": 2,
"watchers": 3,
"score": 0,
"subscribers_count": 1
@@ -1459,10 +1459,10 @@
"description": "（CVE-2026-43499）内核漏洞利用程序，适用于未解锁 Bootloader 的一加15T.",
"fork": false,
"created_at": "2026-07-25T03:02:29Z",
"updated_at": "2026-08-01T00:47:42Z",
"updated_at": "2026-08-01T16:31:12Z",
"pushed_at": "2026-07-25T04:13:46Z",
"stargazers_count": 6,
"watchers_count": 6,
"stargazers_count": 7,
"watchers_count": 7,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
@@ -1473,7 +1473,7 @@
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 6,
"watchers": 7,
"score": 0,
"subscribers_count": 0
},
@@ -1591,12 +1591,12 @@
"description": "基于内核漏洞CVE-2026-43499的本地提权适配，集成嵌入式 KernelSU.CVE-2026-43499+KernelSU越狱模式 ",
"fork": false,
"created_at": "2026-07-26T12:39:00Z",
"updated_at": "2026-08-01T11:38:22Z",
"updated_at": "2026-08-01T14:59:57Z",
"pushed_at": "2026-07-26T14:04:57Z",
"stargazers_count": 13,
"watchers_count": 13,
"stargazers_count": 14,
"watchers_count": 14,
"has_discussions": false,
"forks_count": 1,
"forks_count": 2,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1604,8 +1604,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 13,
"forks": 2,
"watchers": 14,
"score": 0,
"subscribers_count": 1
},
@@ -1789,8 +1789,8 @@
"description": null,
"fork": false,
"created_at": "2026-07-31T07:53:51Z",
"updated_at": "2026-07-31T14:54:23Z",
"pushed_at": "2026-07-31T11:01:59Z",
"updated_at": "2026-08-01T16:53:23Z",
"pushed_at": "2026-08-01T16:53:27Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
@@ -1827,7 +1827,7 @@
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -1835,7 +1835,7 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
2026/CVE-2026-43813.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "CVE-2026-43813: CloudAttestation enforceEnvironment bypass",
"fork": false,
"created_at": "2026-07-29T19:41:14Z",
"updated_at": "2026-07-31T22:41:26Z",
"updated_at": "2026-08-01T17:05:44Z",
"pushed_at": "2026-07-29T19:41:18Z",
"stargazers_count": 4,
"watchers_count": 4,
"stargazers_count": 5,
"watchers_count": 5,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 4,
"watchers": 5,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-45585.json
+54
View File
@@ -382,5 +382,59 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1319521054,
"name": "YellowKey-Bitlocker-CVE-2026-45585",
"full_name": "martincifu\/YellowKey-Bitlocker-CVE-2026-45585",
"owner": {
"login": "martincifu",
"id": 206289458,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/206289458?v=4",
"html_url": "https:\/\/github.com\/martincifu",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/martincifu\/YellowKey-Bitlocker-CVE-2026-45585",
"description": "YellowKey BitLocker CVE-2026-45585 free open-source utility to extract, backup and view BitLocker recovery keys on Windows 10\/11. BitLocker bypass vulnerability tool, remediation and mitigation. Tom's Hardware coverage. Check TPM status, protector types, encryption state. Download YellowKey free, portable, no install needed.",
"fork": false,
"created_at": "2026-08-01T18:09:20Z",
"updated_at": "2026-08-01T18:15:12Z",
"pushed_at": "2026-08-01T18:15:06Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [
"bitlocker",
"bitlocker-bypass",
"bitlocker-drive-encryption",
"bitlocker-drive-lock",
"bitlocker-drive-management",
"bitlocker-lock",
"bitlocker-yellowkey",
"cve-2026-45585",
"decryption-tool",
"full-disk-encryption",
"nightmare-eclipse",
"open-source-vulnerabilities",
"vulnerabilities",
"vulnerability",
"yellow",
"yellowkey",
"yellowkey-bitlocker",
"yellowkey-cve",
"yellowkey-exploit",
"yellowkey-vulnerability"
],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-5061.json
+35
View File
@@ -0,0 +1,35 @@
[
{
"id": 1319462153,
"name": "CVE-2026-5061",
"full_name": "0xmrma\/CVE-2026-5061",
"owner": {
"login": "0xmrma",
"id": 197543882,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/197543882?v=4",
"html_url": "https:\/\/github.com\/0xmrma",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xmrma\/CVE-2026-5061",
"description": "Consul Template validated where a symlink pointed during template evaluation, but its later dependency fetch read the original path. Retargeting the link between those operations turned an in-sandbox file reference into an out-of-sandbox file disclosure.",
"fork": false,
"created_at": "2026-08-01T16:49:47Z",
"updated_at": "2026-08-01T16:51:23Z",
"pushed_at": "2026-08-01T16:51:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-50656.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Validation report for the RoguePlanet Microsoft Defender PoC in a controlled Windows 11 lab environment, including build notes, Defender detection results, risk assessment, and mitigation recommendations.",
"fork": false,
"created_at": "2026-06-10T21:31:47Z",
"updated_at": "2026-07-09T20:58:31Z",
"updated_at": "2026-08-01T17:49:20Z",
"pushed_at": "2026-06-10T21:35:17Z",
"stargazers_count": 1,
"watchers_count": 1,
"stargazers_count": 2,
"watchers_count": 2,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"watchers": 2,
"score": 0,
"subscribers_count": 0
},
2025/CVE-2025-67159.json → 2026/CVE-2026-51954.json
+12 -12
View File
@@ -1,21 +1,21 @@
[
{
"id": 1126181551,
"name": "CVE-2025-67159",
"full_name": "Remenis\/CVE-2025-67159",
"id": 1319417015,
"name": "CVE-2026-51954",
"full_name": "envincion1991-cmyk\/CVE-2026-51954",
"owner": {
"login": "Remenis",
"id": 97015958,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/97015958?v=4",
"html_url": "https:\/\/github.com\/Remenis",
"login": "envincion1991-cmyk",
"id": 272248386,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/272248386?v=4",
"html_url": "https:\/\/github.com\/envincion1991-cmyk",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Remenis\/CVE-2025-67159",
"description": "Vatilon-based IP camera firmware allows authentication bypass and plaintext credential exposure via web.cgi API requests.",
"html_url": "https:\/\/github.com\/envincion1991-cmyk\/CVE-2026-51954",
"description": "Vulnerability Research",
"fork": false,
"created_at": "2026-01-01T10:19:17Z",
"updated_at": "2026-01-01T10:20:21Z",
"pushed_at": "2026-01-01T10:20:17Z",
"created_at": "2026-08-01T15:46:32Z",
"updated_at": "2026-08-01T15:47:36Z",
"pushed_at": "2026-08-01T15:47:31Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-54121.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Certighost POC",
"fork": false,
"created_at": "2026-07-23T18:54:34Z",
"updated_at": "2026-08-01T04:04:39Z",
"updated_at": "2026-08-01T15:16:14Z",
"pushed_at": "2026-07-28T15:44:50Z",
"stargazers_count": 295,
"watchers_count": 295,
"stargazers_count": 296,
"watchers_count": 296,
"has_discussions": false,
"forks_count": 73,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 73,
"watchers": 295,
"watchers": 296,
"score": 0,
"subscribers_count": 0
},
2026/CVE-2026-57239.json
+4 -4
View File
@@ -14,10 +14,10 @@
"description": "Proof of concept exploit for CVE-2026-3775\/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\\SYSTEM rights via the Foxit PDF Reader updater service.",
"fork": false,
"created_at": "2026-07-08T13:47:31Z",
"updated_at": "2026-07-31T00:08:04Z",
"updated_at": "2026-08-01T14:56:24Z",
"pushed_at": "2026-07-27T07:52:49Z",
"stargazers_count": 10,
"watchers_count": 10,
"stargazers_count": 11,
"watchers_count": 11,
"has_discussions": false,
"forks_count": 3,
"allow_forking": true,
@@ -28,7 +28,7 @@
"topics": [],
"visibility": "public",
"forks": 3,
"watchers": 10,
"watchers": 11,
"score": 0,
"subscribers_count": 0
}
2026/CVE-2026-63030.json
+4 -4
View File
@@ -336,10 +336,10 @@
"description": "WP2Shell - CVE-2026-63030 \/ CVE-2026-60137 This tool exploits a critical SQL injection vulnerability in the WordPress REST API `\/wp-json\/batch\/v1` endpoint, allowing unauthenticated attackers to execute arbitrary SQL queries and achieve Remote Code Execution (RCE) on vulnerable WordPress installations.",
"fork": false,
"created_at": "2026-07-18T07:30:10Z",
"updated_at": "2026-07-29T13:15:18Z",
"updated_at": "2026-08-01T13:44:51Z",
"pushed_at": "2026-07-18T07:40:40Z",
"stargazers_count": 13,
"watchers_count": 13,
"stargazers_count": 14,
"watchers_count": 14,
"has_discussions": false,
"forks_count": 5,
"allow_forking": true,
@@ -357,7 +357,7 @@
],
"visibility": "public",
"forks": 5,
"watchers": 13,
"watchers": 14,
"score": 0,
"subscribers_count": 1
},
2026/CVE-2026-63077.json
+2 -2
View File
@@ -14,8 +14,8 @@
"description": "JetBrains TeamCity On-Premises CVE-2026-63077 Emergency Hardening & Patch Runbook Package",
"fork": false,
"created_at": "2026-07-30T20:12:13Z",
"updated_at": "2026-07-31T15:23:45Z",
"pushed_at": "2026-07-31T15:20:36Z",
"updated_at": "2026-08-01T17:57:18Z",
"pushed_at": "2026-08-01T17:57:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
2026/CVE-2026-64531.json
+33
View File
@@ -31,5 +31,38 @@
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1319404716,
"name": "CVE-2026-64531",
"full_name": "0xBlackash\/CVE-2026-64531",
"owner": {
"login": "0xBlackash",
"id": 259905299,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/259905299?v=4",
"html_url": "https:\/\/github.com\/0xBlackash",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/0xBlackash\/CVE-2026-64531",
"description": "CVE-2026-64531",
"fork": false,
"created_at": "2026-08-01T15:29:45Z",
"updated_at": "2026-08-01T15:45:11Z",
"pushed_at": "2026-08-01T15:44:56Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
2026/CVE-2026-64600.json
+6 -6
View File
@@ -14,12 +14,12 @@
"description": "CVE-2026-64600",
"fork": false,
"created_at": "2026-07-22T20:55:41Z",
"updated_at": "2026-07-26T17:50:49Z",
"updated_at": "2026-08-01T13:20:52Z",
"pushed_at": "2026-07-23T17:06:28Z",
"stargazers_count": 17,
"watchers_count": 17,
"stargazers_count": 18,
"watchers_count": 18,
"has_discussions": false,
"forks_count": 2,
"forks_count": 3,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
@@ -27,8 +27,8 @@
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 2,
"watchers": 17,
"forks": 3,
"watchers": 18,
"score": 0,
"subscribers_count": 2
},
README.md
+33 -21
View File
@@ -499,6 +499,13 @@
- [0x00phantom-hat/CVE-2026-5029-Exploit](https://github.com/0x00phantom-hat/CVE-2026-5029-Exploit)
### CVE-2026-5061 (2026-05-12)
<code>The consul-template library before version 0.42.0 is vulnerable to a sandbox path bypass in the file template helper that may allow reading an out-of-sandbox file. This vulnerability (CVE-2026-5061) is fixed in consul-template 0.42.0.
</code>
- [0xmrma/CVE-2026-5061](https://github.com/0xmrma/CVE-2026-5061)
### CVE-2026-5076 (2026-06-02)
<code>The ARMember Premium plugin for WordPress is vulnerable to an insecure password reset mechanism in all versions up to, and including, 7.3.1. The plugin stores a plaintext copy of the password reset key in the `arm_reset_password_key` user meta field when a user requests a password reset. This is in addition to the hashed key that WordPress core stores securely in `wp_users.user_activation_key`. The plaintext key stored in `wp_usermeta` can be used with the plugin's custom `armrp` reset action to set a new password for any user. Combined with another vulnerability such as SQL Injection (CVE-2026-5073, CVE-2026-5074), this makes it possible for unauthenticated attackers to extract the plaintext reset key and take over any user account, including administrators.
@@ -1517,6 +1524,13 @@
- [4minx/CVE-2026-14266](https://github.com/4minx/CVE-2026-14266)
- [liyuxuan504-byte/CVE-2026-14266](https://github.com/liyuxuan504-byte/CVE-2026-14266)
### CVE-2026-14361 (2026-07-08)
<code>The consul-template library before version 0.42.1 is vulnerable to a path redirection issue in the writeToFile template helper that may allow template output to be written outside the intended directory or to overwrite an existing file. This vulnerability (CVE-2026-14361) is fixed in consul-template 0.42.1.
</code>
- [0xmrma/CVE-2026-14361](https://github.com/0xmrma/CVE-2026-14361)
### CVE-2026-14382 (2026-07-01)
<code>Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
@@ -3800,7 +3814,7 @@
- [rfxn/cpanel-sessionscribe](https://github.com/rfxn/cpanel-sessionscribe)
- [george1-adel/CVE-2026-41940_exploit](https://github.com/george1-adel/CVE-2026-41940_exploit)
- [mahfuzreham/cpanel-cve-2026-41940](https://github.com/mahfuzreham/cpanel-cve-2026-41940)
- [Christian93111/CVE-2026-41940](https://github.com/Christian93111/CVE-2026-41940)
- [Kill1234545/CVE-2026-41940](https://github.com/Kill1234545/CVE-2026-41940)
- [Jenderal92/CVE-2026-41940](https://github.com/Jenderal92/CVE-2026-41940)
- [Defacto-ridgepole254/CVE-2026-41940-Exploit-PoC](https://github.com/Defacto-ridgepole254/CVE-2026-41940-Exploit-PoC)
- [anach-ai/CVE-2026-41940](https://github.com/anach-ai/CVE-2026-41940)
@@ -4489,6 +4503,7 @@
- [boobalover7/YellowKey-Bitlocker-CVE-2026-45585](https://github.com/boobalover7/YellowKey-Bitlocker-CVE-2026-45585)
- [tchuin2609/YellowKey-Bitlocker](https://github.com/tchuin2609/YellowKey-Bitlocker)
- [tchuin2609/tchuin2609.github.io](https://github.com/tchuin2609/tchuin2609.github.io)
- [martincifu/YellowKey-Bitlocker-CVE-2026-45585](https://github.com/martincifu/YellowKey-Bitlocker-CVE-2026-45585)
### CVE-2026-45659 (2026-05-22)
@@ -5555,6 +5570,9 @@
- [timtimxs/CVE-2026-51947-Advisory](https://github.com/timtimxs/CVE-2026-51947-Advisory)
### CVE-2026-51954
- [envincion1991-cmyk/CVE-2026-51954](https://github.com/envincion1991-cmyk/CVE-2026-51954)
### CVE-2026-51992 (2026-07-29)
<code>SQL Injection vulnerability in ClickHouse Server Versions &lt;= 26.3.9.8 allows a remote attacker to execute arbitrary code via the create dictionaries function.
@@ -6404,6 +6422,7 @@
</code>
- [mahfuzreham/OVSwrap-CVE-2026-64531-Mitigation-Tool](https://github.com/mahfuzreham/OVSwrap-CVE-2026-64531-Mitigation-Tool)
- [0xBlackash/CVE-2026-64531](https://github.com/0xBlackash/CVE-2026-64531)
### CVE-2026-64600 (2026-07-23)
@@ -12440,7 +12459,7 @@
- [obscura-cert/CVE-2025-33073](https://github.com/obscura-cert/CVE-2025-33073)
- [matejsmycka/CVE-2025-33073-checker](https://github.com/matejsmycka/CVE-2025-33073-checker)
- [cve-2025-33073/cve-2025-33073](https://github.com/cve-2025-33073/cve-2025-33073)
- [uziii2208/CVE-2025-33073](https://github.com/uziii2208/CVE-2025-33073)
- [uziii2208/come-to-telegram-rickluminari1--CVE-2025-33073](https://github.com/uziii2208/come-to-telegram-rickluminari1--CVE-2025-33073)
- [irjfifndn-prog/Blackash-CVE-2025-33073](https://github.com/irjfifndn-prog/Blackash-CVE-2025-33073)
- [EgCupCake/cupntlm-Automated-Exploit-For-CVE-2025-33073-](https://github.com/EgCupCake/cupntlm-Automated-Exploit-For-CVE-2025-33073-)
- [IyarGross/SMB-CVE-2025-33073](https://github.com/IyarGross/SMB-CVE-2025-33073)
@@ -16101,6 +16120,7 @@
- [K3ysTr0K3R/CVE-2025-57819](https://github.com/K3ysTr0K3R/CVE-2025-57819)
- [Samik-Parajuli/htb-connected-writeup](https://github.com/Samik-Parajuli/htb-connected-writeup)
- [Neobee714/CVE-2025-57819-POC](https://github.com/Neobee714/CVE-2025-57819-POC)
- [TeteREN/CVE-2025-57819-RCE](https://github.com/TeteREN/CVE-2025-57819-RCE)
### CVE-2025-57833 (2025-09-03)
@@ -17710,20 +17730,6 @@
- [sivaadityacoder/CVE-2025-67146-CVE-2025-67147](https://github.com/sivaadityacoder/CVE-2025-67146-CVE-2025-67147)
### CVE-2025-67158 (2026-01-02)
<code>An authentication bypass in the /cgi-bin/jvsweb.cgi endpoint of Revotech I6032W-FHW v1.0.0014 - 20210517 allows attackers to access sensitive information and escalate privileges via a crafted HTTP request.
</code>
- [Remenis/CVE-2025-67158](https://github.com/Remenis/CVE-2025-67158)
### CVE-2025-67159 (2026-01-02)
<code>Vatilon v1.12.37-20240124 was discovered to transmit user credentials in plaintext.
</code>
- [Remenis/CVE-2025-67159](https://github.com/Remenis/CVE-2025-67159)
### CVE-2025-67160 (2026-01-02)
<code>An issue in Vatilon v1.12.37-20240124 allows attackers to access sensitive directories and files via a directory traversal.
@@ -18162,6 +18168,7 @@
- [m2sousa/CVE-2025-69212](https://github.com/m2sousa/CVE-2025-69212)
- [0Zetrium0/CVE-2025-69212_PoC](https://github.com/0Zetrium0/CVE-2025-69212_PoC)
- [mmoobbeeiidat-design/Hack-The-Box-Enigma-Findings-Report](https://github.com/mmoobbeeiidat-design/Hack-The-Box-Enigma-Findings-Report)
- [liaomilk/CVE-2025-69212-for-myself](https://github.com/liaomilk/CVE-2025-69212-for-myself)
### CVE-2025-69213 (2026-02-04)
@@ -19322,8 +19329,6 @@
- [Clarissss/osTicketFileReadIntoRCE](https://github.com/Clarissss/osTicketFileReadIntoRCE)
- [rcribelar-nucleus/my-cool-demo-php-code](https://github.com/rcribelar-nucleus/my-cool-demo-php-code)
- [whyuhurtz/wongpress](https://github.com/whyuhurtz/wongpress)
- [darkrapid8/cnext-exploits](https://github.com/darkrapid8/cnext-exploits)
- [roundcube-utils/cnext-exploits](https://github.com/roundcube-utils/cnext-exploits)
### CVE-2024-2997 (2024-03-27)
@@ -19812,7 +19817,7 @@
- [BektiHandoyo/cve-pdf-host](https://github.com/BektiHandoyo/cve-pdf-host)
- [Bhavyakcwestern/Hacking-pdf.js-vulnerability](https://github.com/Bhavyakcwestern/Hacking-pdf.js-vulnerability)
- [PenguinCabinet/CVE-2024-4367-hands-on](https://github.com/PenguinCabinet/CVE-2024-4367-hands-on)
- [pS3ud0RAnD0m/cve-2024-4367-poc](https://github.com/pS3ud0RAnD0m/cve-2024-4367-poc)
- [AnomalousVectors/cve-2024-4367-poc](https://github.com/AnomalousVectors/cve-2024-4367-poc)
- [0xr2r/CVE-2024-4367](https://github.com/0xr2r/CVE-2024-4367)
- [1337rokudenashi/Odoo_PDFjs_CVE-2024-4367.pdf](https://github.com/1337rokudenashi/Odoo_PDFjs_CVE-2024-4367.pdf)
- [xiaoqiesec0x1/CVE-2024-4367-PDF.js-xss](https://github.com/xiaoqiesec0x1/CVE-2024-4367-PDF.js-xss)
@@ -26917,6 +26922,7 @@
</code>
- [synacktiv/CVE-2024-43468](https://github.com/synacktiv/CVE-2024-43468)
- [nikallass/CVE-2024-43468_mTLS_go](https://github.com/nikallass/CVE-2024-43468_mTLS_go)
### CVE-2024-43535 (2024-10-08)
@@ -28282,6 +28288,13 @@
### CVE-2024-50964
- [fdzdev/CVE-2024-50964](https://github.com/fdzdev/CVE-2024-50964)
### CVE-2024-50967 (2025-01-17)
<code>The /rest/rights/ REST API endpoint in Becon DATAGerry through 2.2.0 contains an Incorrect Access Control vulnerability. An attacker can remotely access this endpoint without authentication, leading to unauthorized disclosure of sensitive information.
</code>
- [0xByteHunter/CVE-2024-50967](https://github.com/0xByteHunter/CVE-2024-50967)
### CVE-2024-50968 (2024-11-14)
<code>A business logic vulnerability exists in the Add to Cart function of itsourcecode Agri-Trading Online Shopping System 1.0, which allows remote attackers to manipulate the quant parameter when adding a product to the cart. By setting the quantity value to -0, an attacker can exploit a flaw in the application's total price calculation logic. This vulnerability causes the total price to be reduced to zero, allowing the attacker to add items to the cart and proceed to checkout.
@@ -41473,7 +41486,7 @@
<code>Moment.js is a JavaScript date library for parsing, validating, manipulating, and formatting dates. A path traversal vulnerability impacts npm (server) users of Moment.js between versions 1.0.1 and 2.29.1, especially if a user-provided locale string is directly used to switch moment locale. This problem is patched in 2.29.2, and the patch can be applied to all affected versions. As a workaround, sanitize the user-provided locale name before passing it to Moment.js.
</code>
- [pS3ud0RAnD0m/cve-2022-24785-poc-lab](https://github.com/pS3ud0RAnD0m/cve-2022-24785-poc-lab)
- [AnomalousVectors/cve-2022-24785-poc-lab](https://github.com/AnomalousVectors/cve-2022-24785-poc-lab)
### CVE-2022-24816 (2022-04-13)
@@ -41828,7 +41841,6 @@
- [UNICORDev/exploit-CVE-2022-25765](https://github.com/UNICORDev/exploit-CVE-2022-25765)
- [lekosbelas/PDFkit-CMD-Injection](https://github.com/lekosbelas/PDFkit-CMD-Injection)
- [lowercasenumbers/CVE-2022-25765](https://github.com/lowercasenumbers/CVE-2022-25765)
- [lst15/pdfkit-cve-2022-25765](https://github.com/lst15/pdfkit-cve-2022-25765)
- [Jeanback1/CVE-2022-25765-exploit](https://github.com/Jeanback1/CVE-2022-25765-exploit)
### CVE-2022-25813 (2022-09-02)